From 54f5a92a3593af9b49ff829b2371463f842da7f8 Mon Sep 17 00:00:00 2001 From: Sheng-Hao Ma Date: Fri, 12 Jun 2020 14:20:47 +0800 Subject: [PATCH 01/86] support for architecture-specific IoT program some malware binary built for uncommon IoT operation system (ARM+Linux) but osabi (ident[7]) might be 64 ~ 255. I face a Mirai varieties with osabi = 0x97. I think detect magic of ELF header is stable enough to assert it's a ELF file. ref: https://refspecs.linuxfoundation.org/elf/gabi4+/ch4.eheader.html#elfid --- qiling/loader/utils.py | 7 +++---- 1 file changed, 3 insertions(+), 4 deletions(-) diff --git a/qiling/loader/utils.py b/qiling/loader/utils.py index 03a51b539..4af0d244f 100644 --- a/qiling/loader/utils.py +++ b/qiling/loader/utils.py @@ -43,12 +43,11 @@ def getident(): osabi = ident[0x7] e_machine = ident[0x12:0x14] - if osabi == 0x11 or osabi == 0x03 or osabi == 0x0: - ostype = QL_OS.LINUX - elif osabi == 0x09: + if osabi == 0x09: ostype = QL_OS.FREEBSD else: - ostype = None + #if osabi == 0x11 or osabi == 0x03 or osabi == 0x0: + ostype = QL_OS.LINUX if e_machine == b"\x03\x00": archendian = QL_ENDIAN.EL From 70cf1aff989df78ec6c70fc1e9d0ae4157d44598 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 17 Jun 2020 22:41:00 +0800 Subject: [PATCH 02/86] Add windows_sdk json file --- qiling/extensions/windows_sdk/aclapi.json | 956 ++ qiling/extensions/windows_sdk/aclui.json | 32 + qiling/extensions/windows_sdk/advpub.json | 30 + qiling/extensions/windows_sdk/amsi.json | 86 + .../extensions/windows_sdk/appcompatapi.json | 16 + qiling/extensions/windows_sdk/appmgmt.json | 64 + qiling/extensions/windows_sdk/appmodel.json | 538 + qiling/extensions/windows_sdk/appnotify.json | 22 + qiling/extensions/windows_sdk/atacct.json | 30 + qiling/extensions/windows_sdk/atlthunk.json | 28 + qiling/extensions/windows_sdk/authz.json | 590 ++ qiling/extensions/windows_sdk/avrfsdk.json | 30 + qiling/extensions/windows_sdk/avrt.json | 170 + qiling/extensions/windows_sdk/bcrypt.json | 1140 +++ .../extensions/windows_sdk/bluetoothapis.json | 426 + .../windows_sdk/bluetoothleapis.json | 276 + qiling/extensions/windows_sdk/callobj.json | 20 + qiling/extensions/windows_sdk/certbcli.json | 262 + qiling/extensions/windows_sdk/cfapi.json | 476 + qiling/extensions/windows_sdk/cfgmgr32.json | 1690 ++++ qiling/extensions/windows_sdk/clfs.json | 38 + qiling/extensions/windows_sdk/clfsw32.json | 860 ++ qiling/extensions/windows_sdk/clusapi.json | 2720 +++++ qiling/extensions/windows_sdk/combaseapi.json | 1006 ++ qiling/extensions/windows_sdk/coml2api.json | 340 + qiling/extensions/windows_sdk/commctrl.json | 1260 +++ qiling/extensions/windows_sdk/commdlg.json | 84 + qiling/extensions/windows_sdk/comppkgsup.json | 1 + .../extensions/windows_sdk/compressapi.json | 178 + qiling/extensions/windows_sdk/comsvcs.json | 50 + qiling/extensions/windows_sdk/cryptdlg.json | 80 + qiling/extensions/windows_sdk/cryptuiapi.json | 170 + qiling/extensions/windows_sdk/cryptxml.json | 304 + qiling/extensions/windows_sdk/cscapi.json | 36 + qiling/extensions/windows_sdk/d2d1.json | 64 + qiling/extensions/windows_sdk/d2d1_1.json | 78 + .../extensions/windows_sdk/d2d1_1helper.json | 1 + qiling/extensions/windows_sdk/d2d1_2.json | 8 + qiling/extensions/windows_sdk/d2d1_3.json | 68 + .../extensions/windows_sdk/d2d1_3helper.json | 1 + qiling/extensions/windows_sdk/d2d1helper.json | 24 + qiling/extensions/windows_sdk/d3d10.json | 1 + qiling/extensions/windows_sdk/d3d10_1.json | 70 + .../extensions/windows_sdk/d3d10effect.json | 220 + qiling/extensions/windows_sdk/d3d10misc.json | 72 + qiling/extensions/windows_sdk/d3d11.json | 94 + qiling/extensions/windows_sdk/d3d11on12.json | 44 + .../windows_sdk/d3d11shadertracing.json | 36 + qiling/extensions/windows_sdk/d3d12.json | 116 + qiling/extensions/windows_sdk/d3d9.json | 12 + qiling/extensions/windows_sdk/d3d9helper.json | 1 + .../extensions/windows_sdk/d3dcompiler.json | 568 ++ .../extensions/windows_sdk/datetimeapi.json | 162 + qiling/extensions/windows_sdk/davclnt.json | 132 + qiling/extensions/windows_sdk/dbghelp.json | 3146 ++++++ qiling/extensions/windows_sdk/dciman.json | 58 + qiling/extensions/windows_sdk/dde.json | 90 + qiling/extensions/windows_sdk/ddeml.json | 436 + qiling/extensions/windows_sdk/ddraw.json | 86 + qiling/extensions/windows_sdk/debugapi.json | 82 + .../extensions/windows_sdk/deviceaccess.json | 16 + qiling/extensions/windows_sdk/dhcpcsdk.json | 116 + qiling/extensions/windows_sdk/dhcpsapi.json | 3226 ++++++ qiling/extensions/windows_sdk/dhcpv6csdk.json | 86 + qiling/extensions/windows_sdk/dmoreg.json | 116 + qiling/extensions/windows_sdk/dpa_dsa.json | 400 + qiling/extensions/windows_sdk/dpapi.json | 112 + qiling/extensions/windows_sdk/drt.json | 316 + qiling/extensions/windows_sdk/dsgetdc.json | 194 + qiling/extensions/windows_sdk/dsparse.json | 312 + qiling/extensions/windows_sdk/dsrole.json | 22 + qiling/extensions/windows_sdk/dssec.json | 138 + qiling/extensions/windows_sdk/dwmapi.json | 354 + qiling/extensions/windows_sdk/dxgi.json | 22 + qiling/extensions/windows_sdk/dxgi1_3.json | 30 + qiling/extensions/windows_sdk/dxgi1_6.json | 1 + qiling/extensions/windows_sdk/dxgidebug.json | 12 + .../windows_sdk/eaphostpeerconfigapis.json | 402 + qiling/extensions/windows_sdk/elscore.json | 68 + qiling/extensions/windows_sdk/enclaveapi.json | 146 + .../windows_sdk/errhandlingapi.json | 142 + qiling/extensions/windows_sdk/errorrep.json | 34 + qiling/extensions/windows_sdk/evcoll.json | 236 + qiling/extensions/windows_sdk/evntcons.json | 44 + qiling/extensions/windows_sdk/evntprov.json | 174 + qiling/extensions/windows_sdk/evntrace.json | 632 ++ .../windows_sdk/expandedresources.json | 14 + qiling/extensions/windows_sdk/fci.json | 128 + qiling/extensions/windows_sdk/fdi.json | 104 + .../windows_sdk/featurestagingapi.json | 78 + qiling/extensions/windows_sdk/fibersapi.json | 36 + qiling/extensions/windows_sdk/fileapi.json | 1134 +++ qiling/extensions/windows_sdk/fltuser.json | 466 + qiling/extensions/windows_sdk/fontsub.json | 122 + qiling/extensions/windows_sdk/fwpmu.json | 3034 ++++++ qiling/extensions/windows_sdk/fxsutility.json | 12 + qiling/extensions/windows_sdk/gb18030.json | 32 + qiling/extensions/windows_sdk/gpedit.json | 58 + qiling/extensions/windows_sdk/guiddef.json | 1 + qiling/extensions/windows_sdk/handleapi.json | 72 + qiling/extensions/windows_sdk/heapapi.json | 198 + .../highlevelmonitorconfigurationapi.json | 270 + qiling/extensions/windows_sdk/htmlhelp.json | 38 + qiling/extensions/windows_sdk/http.json | 1 + qiling/extensions/windows_sdk/icwcfg.json | 18 + qiling/extensions/windows_sdk/imagehlp.json | 414 + qiling/extensions/windows_sdk/ime.json | 22 + qiling/extensions/windows_sdk/imm.json | 904 ++ qiling/extensions/windows_sdk/immdev.json | 932 ++ qiling/extensions/windows_sdk/inputscope.json | 78 + .../extensions/windows_sdk/inspectable.json | 50 + .../windows_sdk/interactioncontext.json | 276 + .../windows_sdk/interlockedapi.json | 54 + qiling/extensions/windows_sdk/intshcut.json | 140 + qiling/extensions/windows_sdk/ioapiset.json | 182 + qiling/extensions/windows_sdk/ip2string.json | 278 + qiling/extensions/windows_sdk/iphlpapi.json | 806 ++ qiling/extensions/windows_sdk/jobapi.json | 16 + qiling/extensions/windows_sdk/jobapi2.json | 96 + .../extensions/windows_sdk/joystickapi.json | 92 + qiling/extensions/windows_sdk/ktmw32.json | 512 + .../extensions/windows_sdk/libloaderapi.json | 374 + .../extensions/windows_sdk/libloaderapi2.json | 20 + qiling/extensions/windows_sdk/lmaccess.json | 952 ++ qiling/extensions/windows_sdk/lmserver.json | 216 + qiling/extensions/windows_sdk/lmshare.json | 306 + qiling/extensions/windows_sdk/lmstats.json | 24 + qiling/extensions/windows_sdk/lmuse.json | 82 + qiling/extensions/windows_sdk/lmwksta.json | 158 + qiling/extensions/windows_sdk/loadperf.json | 70 + .../lowlevelmonitorconfigurationapi.json | 78 + qiling/extensions/windows_sdk/lzexpand.json | 100 + .../windows_sdk/mdmregistration.json | 98 + qiling/extensions/windows_sdk/memoryapi.json | 914 ++ .../windows_sdk/messagedispatcherapi.json | 1 + qiling/extensions/windows_sdk/mfapi.json | 1702 ++++ qiling/extensions/windows_sdk/mfidl.json | 764 ++ qiling/extensions/windows_sdk/mfobjects.json | 30 + qiling/extensions/windows_sdk/mfplay.json | 28 + .../extensions/windows_sdk/mftransform.json | 8 + qiling/extensions/windows_sdk/mgmtapi.json | 164 + qiling/extensions/windows_sdk/mi.json | 62 + qiling/extensions/windows_sdk/midles.json | 166 + .../windows_sdk/minidumpapiset.json | 54 + qiling/extensions/windows_sdk/mmddk.json | 40 + .../extensions/windows_sdk/mmdeviceapi.json | 24 + qiling/extensions/windows_sdk/mmeapi.json | 1142 +++ qiling/extensions/windows_sdk/mmiscapi.json | 428 + qiling/extensions/windows_sdk/mprapi.json | 1930 ++++ qiling/extensions/windows_sdk/msacm.json | 1 + .../extensions/windows_sdk/msajtransport.json | 86 + qiling/extensions/windows_sdk/mscat.json | 244 + qiling/extensions/windows_sdk/mschapp.json | 62 + qiling/extensions/windows_sdk/msctf.json | 44 + qiling/extensions/windows_sdk/msdrm.json | 1732 ++++ qiling/extensions/windows_sdk/msi.json | 3160 ++++++ qiling/extensions/windows_sdk/msiquery.json | 1432 +++ qiling/extensions/windows_sdk/msports.json | 84 + qiling/extensions/windows_sdk/mssip.json | 144 + qiling/extensions/windows_sdk/mtxdm.json | 8 + .../extensions/windows_sdk/namedpipeapi.json | 138 + .../extensions/windows_sdk/namespaceapi.json | 28 + qiling/extensions/windows_sdk/nb30.json | 8 + qiling/extensions/windows_sdk/ncrypt.json | 604 ++ .../extensions/windows_sdk/ncryptprotect.json | 222 + qiling/extensions/windows_sdk/netcon.json | 14 + qiling/extensions/windows_sdk/netfw.json | 144 + qiling/extensions/windows_sdk/netioapi.json | 1 + qiling/extensions/windows_sdk/netsh.json | 114 + .../windows_sdk/networkisolation.json | 106 + qiling/extensions/windows_sdk/newdev.json | 94 + qiling/extensions/windows_sdk/npapi.json | 16 + qiling/extensions/windows_sdk/nspapi.json | 274 + qiling/extensions/windows_sdk/ntdsapi.json | 1520 +++ qiling/extensions/windows_sdk/ntmsapi.json | 1238 +++ qiling/extensions/windows_sdk/ntquery.json | 62 + qiling/extensions/windows_sdk/ntsecapi.json | 922 ++ qiling/extensions/windows_sdk/oaidl.json | 98 + qiling/extensions/windows_sdk/objbase.json | 518 + qiling/extensions/windows_sdk/ole.json | 132 + qiling/extensions/windows_sdk/ole2.json | 1142 +++ qiling/extensions/windows_sdk/oleacc.json | 276 + qiling/extensions/windows_sdk/oleauto.json | 4392 ++++++++ qiling/extensions/windows_sdk/olectl.json | 246 + qiling/extensions/windows_sdk/oledlg.json | 244 + .../windows_sdk/ondemandconnroutehelper.json | 58 + .../windows_sdk/oobenotification.json | 22 + qiling/extensions/windows_sdk/p2p.json | 1638 +++ qiling/extensions/windows_sdk/pathcch.json | 302 + qiling/extensions/windows_sdk/pdh.json | 1534 +++ qiling/extensions/windows_sdk/peerdist.json | 438 + qiling/extensions/windows_sdk/perflib.json | 372 + .../physicalmonitorenumerationapi.json | 66 + qiling/extensions/windows_sdk/powerbase.json | 56 + .../extensions/windows_sdk/powersetting.json | 174 + qiling/extensions/windows_sdk/powrprof.json | 1012 ++ qiling/extensions/windows_sdk/prnasnot.json | 60 + qiling/extensions/windows_sdk/prntvpt.json | 196 + qiling/extensions/windows_sdk/processenv.json | 150 + .../windows_sdk/processsnapshot.json | 134 + .../windows_sdk/processthreadsapi.json | 1030 ++ .../windows_sdk/processtopologyapi.json | 40 + qiling/extensions/windows_sdk/profileapi.json | 14 + qiling/extensions/windows_sdk/propapi.json | 20 + qiling/extensions/windows_sdk/propidl.json | 28 + qiling/extensions/windows_sdk/propsys.json | 972 ++ .../extensions/windows_sdk/propvarutil.json | 1972 ++++ qiling/extensions/windows_sdk/prsht.json | 32 + qiling/extensions/windows_sdk/psapi.json | 364 + qiling/extensions/windows_sdk/ras.json | 1492 +++ qiling/extensions/windows_sdk/rasdlg.json | 118 + qiling/extensions/windows_sdk/rasshost.json | 54 + .../windows_sdk/realtimeapiset.json | 104 + .../remotesystemadditionalinfo.json | 50 + .../windows_sdk/resourceindexer.json | 58 + .../windows_sdk/restartmanager.json | 176 + qiling/extensions/windows_sdk/robuffer.json | 8 + qiling/extensions/windows_sdk/roerrorapi.json | 194 + qiling/extensions/windows_sdk/rometadata.json | 16 + .../windows_sdk/roregistrationapi.json | 26 + qiling/extensions/windows_sdk/rpcasync.json | 274 + qiling/extensions/windows_sdk/rpcdce.json | 1866 ++++ qiling/extensions/windows_sdk/rpcdcep.json | 12 + qiling/extensions/windows_sdk/rpcndr.json | 534 + qiling/extensions/windows_sdk/rpcnsi.json | 894 ++ qiling/extensions/windows_sdk/rpcproxy.json | 380 + qiling/extensions/windows_sdk/rpcssl.json | 30 + qiling/extensions/windows_sdk/rrascfg.json | 1 + .../extensions/windows_sdk/rtlsupportapi.json | 1 + qiling/extensions/windows_sdk/rtmv2.json | 1008 ++ qiling/extensions/windows_sdk/rtworkq.json | 1 + qiling/extensions/windows_sdk/sas.json | 8 + qiling/extensions/windows_sdk/schannel.json | 68 + qiling/extensions/windows_sdk/scrnsave.json | 62 + qiling/extensions/windows_sdk/sddl.json | 122 + .../windows_sdk/securityappcontainer.json | 24 + .../windows_sdk/securitybaseapi.json | 1586 +++ qiling/extensions/windows_sdk/sensapi.json | 28 + qiling/extensions/windows_sdk/setupapi.json | 4316 ++++++++ qiling/extensions/windows_sdk/sfc.json | 36 + qiling/extensions/windows_sdk/shcore.json | 52 + qiling/extensions/windows_sdk/shellapi.json | 922 ++ .../windows_sdk/shellscalingapi.json | 96 + qiling/extensions/windows_sdk/shlobj.json | 188 + .../extensions/windows_sdk/shlobj_core.json | 2012 ++++ qiling/extensions/windows_sdk/shlwapi.json | 4606 +++++++++ qiling/extensions/windows_sdk/shobjidl.json | 40 + .../extensions/windows_sdk/shobjidl_core.json | 382 + qiling/extensions/windows_sdk/slpublic.json | 956 ++ qiling/extensions/windows_sdk/smbclnt.json | 30 + qiling/extensions/windows_sdk/snmp.json | 212 + qiling/extensions/windows_sdk/socketapi.json | 8 + qiling/extensions/windows_sdk/srpapi.json | 88 + .../windows_sdk/srrestoreptapi.json | 28 + qiling/extensions/windows_sdk/sspi.json | 1 + qiling/extensions/windows_sdk/storprop.json | 50 + qiling/extensions/windows_sdk/stralign.json | 8 + .../extensions/windows_sdk/stringapiset.json | 280 + qiling/extensions/windows_sdk/swdevice.json | 144 + qiling/extensions/windows_sdk/synchapi.json | 778 ++ qiling/extensions/windows_sdk/syncmgr.json | 1 + qiling/extensions/windows_sdk/sysinfoapi.json | 364 + .../windows_sdk/systemtopologyapi.json | 28 + qiling/extensions/windows_sdk/t2embapi.json | 342 + qiling/extensions/windows_sdk/tapi.json | 1 + qiling/extensions/windows_sdk/tbs.json | 132 + qiling/extensions/windows_sdk/tdh.json | 398 + .../windows_sdk/threadpoolapiset.json | 376 + .../windows_sdk/threadpoollegacyapiset.json | 104 + qiling/extensions/windows_sdk/timeapi.json | 40 + .../extensions/windows_sdk/timezoneapi.json | 140 + qiling/extensions/windows_sdk/tlhelp32.json | 174 + .../extensions/windows_sdk/tokenbinding.json | 128 + qiling/extensions/windows_sdk/txfw32.json | 94 + qiling/extensions/windows_sdk/ual.json | 34 + qiling/extensions/windows_sdk/unknwn.json | 1 + qiling/extensions/windows_sdk/unknwnbase.json | 28 + qiling/extensions/windows_sdk/urlmon.json | 34 + qiling/extensions/windows_sdk/userenv.json | 488 + qiling/extensions/windows_sdk/usp10.json | 1052 ++ qiling/extensions/windows_sdk/utilapiset.json | 12 + qiling/extensions/windows_sdk/uxtheme.json | 1416 +++ qiling/extensions/windows_sdk/vdmdbg.json | 26 + .../windows_sdk/versionhelpers.json | 1 + qiling/extensions/windows_sdk/vfw.json | 1722 ++++ qiling/extensions/windows_sdk/virtdisk.json | 458 + qiling/extensions/windows_sdk/wcmapi.json | 88 + qiling/extensions/windows_sdk/wct.json | 58 + qiling/extensions/windows_sdk/wdsbp.json | 112 + .../extensions/windows_sdk/wdsclientapi.json | 400 + qiling/extensions/windows_sdk/wdspxe.json | 550 + qiling/extensions/windows_sdk/wdstci.json | 110 + qiling/extensions/windows_sdk/wdstpdi.json | 86 + qiling/extensions/windows_sdk/websocket.json | 240 + qiling/extensions/windows_sdk/werapi.json | 320 + qiling/extensions/windows_sdk/wia_xp.json | 50 + qiling/extensions/windows_sdk/winbase.json | 7596 ++++++++++++++ qiling/extensions/windows_sdk/winbio.json | 814 ++ qiling/extensions/windows_sdk/wincred.json | 934 ++ qiling/extensions/windows_sdk/wincrypt.json | 5200 ++++++++++ qiling/extensions/windows_sdk/windef.json | 4864 +++++++++ qiling/extensions/windows_sdk/windns.json | 534 + qiling/extensions/windows_sdk/windows.json | 1 + .../extensions/windows_sdk/windowsceip.json | 1 + .../windows_sdk/windowsdefender.json | 14 + qiling/extensions/windows_sdk/winefs.json | 86 + .../extensions/windows_sdk/winenclaveapi.json | 1 + qiling/extensions/windows_sdk/winevt.json | 640 ++ qiling/extensions/windows_sdk/wingdi.json | 5434 ++++++++++ qiling/extensions/windows_sdk/winhttp.json | 598 ++ qiling/extensions/windows_sdk/wininet.json | 3146 ++++++ qiling/extensions/windows_sdk/winnetwk.json | 624 ++ qiling/extensions/windows_sdk/winnls.json | 1842 ++++ qiling/extensions/windows_sdk/winnls32.json | 12 + qiling/extensions/windows_sdk/winnt.json | 1 + qiling/extensions/windows_sdk/winreg.json | 1744 ++++ qiling/extensions/windows_sdk/winsafer.json | 182 + qiling/extensions/windows_sdk/winscard.json | 1100 ++ qiling/extensions/windows_sdk/winsnmp.json | 622 ++ qiling/extensions/windows_sdk/winsock.json | 582 ++ qiling/extensions/windows_sdk/winsock2.json | 1630 +++ qiling/extensions/windows_sdk/winstring.json | 294 + qiling/extensions/windows_sdk/winsvc.json | 1006 ++ qiling/extensions/windows_sdk/winsxs.json | 30 + qiling/extensions/windows_sdk/winternl.json | 484 + qiling/extensions/windows_sdk/wintrust.json | 138 + qiling/extensions/windows_sdk/winusb.json | 542 + qiling/extensions/windows_sdk/winuser.json | 8974 +++++++++++++++++ qiling/extensions/windows_sdk/winver.json | 330 + qiling/extensions/windows_sdk/winwlx.json | 14 + qiling/extensions/windows_sdk/wlanapi.json | 1184 +++ .../extensions/windows_sdk/wmcontainer.json | 152 + .../extensions/windows_sdk/wmpservices.json | 1 + qiling/extensions/windows_sdk/wmsdkidl.json | 118 + .../extensions/windows_sdk/wmsdkvalidate.json | 38 + qiling/extensions/windows_sdk/wofapi.json | 176 + .../extensions/windows_sdk/wow64apiset.json | 96 + qiling/extensions/windows_sdk/ws2spi.json | 526 + qiling/extensions/windows_sdk/ws2tcpip.json | 568 ++ qiling/extensions/windows_sdk/wsbonline.json | 20 + qiling/extensions/windows_sdk/wscapi.json | 36 + .../extensions/windows_sdk/wsdattachment.json | 8 + .../windows_sdk/wsdevlicensing.json | 24 + qiling/extensions/windows_sdk/wsdxml.json | 22 + qiling/extensions/windows_sdk/wsipv6ok.json | 60 + qiling/extensions/windows_sdk/wslapi.json | 112 + qiling/extensions/windows_sdk/wsman.json | 1 + qiling/extensions/windows_sdk/wtsapi32.json | 1078 ++ qiling/extensions/windows_sdk/wtshintapi.json | 24 + qiling/extensions/windows_sdk/xamlom.json | 28 + qiling/extensions/windows_sdk/xapofx.json | 20 + qiling/extensions/windows_sdk/xaudio2.json | 16 + qiling/extensions/windows_sdk/xaudio2fx.json | 12 + qiling/extensions/windows_sdk/xinput.json | 92 + qiling/extensions/windows_sdk/xpsprint.json | 74 + 355 files changed, 166403 insertions(+) create mode 100644 qiling/extensions/windows_sdk/aclapi.json create mode 100644 qiling/extensions/windows_sdk/aclui.json create mode 100644 qiling/extensions/windows_sdk/advpub.json create mode 100644 qiling/extensions/windows_sdk/amsi.json create mode 100644 qiling/extensions/windows_sdk/appcompatapi.json create mode 100644 qiling/extensions/windows_sdk/appmgmt.json create mode 100644 qiling/extensions/windows_sdk/appmodel.json create mode 100644 qiling/extensions/windows_sdk/appnotify.json create mode 100644 qiling/extensions/windows_sdk/atacct.json create mode 100644 qiling/extensions/windows_sdk/atlthunk.json create mode 100644 qiling/extensions/windows_sdk/authz.json create mode 100644 qiling/extensions/windows_sdk/avrfsdk.json create mode 100644 qiling/extensions/windows_sdk/avrt.json create mode 100644 qiling/extensions/windows_sdk/bcrypt.json create mode 100644 qiling/extensions/windows_sdk/bluetoothapis.json create mode 100644 qiling/extensions/windows_sdk/bluetoothleapis.json create mode 100644 qiling/extensions/windows_sdk/callobj.json create mode 100644 qiling/extensions/windows_sdk/certbcli.json create mode 100644 qiling/extensions/windows_sdk/cfapi.json create mode 100644 qiling/extensions/windows_sdk/cfgmgr32.json create mode 100644 qiling/extensions/windows_sdk/clfs.json create mode 100644 qiling/extensions/windows_sdk/clfsw32.json create mode 100644 qiling/extensions/windows_sdk/clusapi.json create mode 100644 qiling/extensions/windows_sdk/combaseapi.json create mode 100644 qiling/extensions/windows_sdk/coml2api.json create mode 100644 qiling/extensions/windows_sdk/commctrl.json create mode 100644 qiling/extensions/windows_sdk/commdlg.json create mode 100644 qiling/extensions/windows_sdk/comppkgsup.json create mode 100644 qiling/extensions/windows_sdk/compressapi.json create mode 100644 qiling/extensions/windows_sdk/comsvcs.json create mode 100644 qiling/extensions/windows_sdk/cryptdlg.json create mode 100644 qiling/extensions/windows_sdk/cryptuiapi.json create mode 100644 qiling/extensions/windows_sdk/cryptxml.json create mode 100644 qiling/extensions/windows_sdk/cscapi.json create mode 100644 qiling/extensions/windows_sdk/d2d1.json create mode 100644 qiling/extensions/windows_sdk/d2d1_1.json create mode 100644 qiling/extensions/windows_sdk/d2d1_1helper.json create mode 100644 qiling/extensions/windows_sdk/d2d1_2.json create mode 100644 qiling/extensions/windows_sdk/d2d1_3.json create mode 100644 qiling/extensions/windows_sdk/d2d1_3helper.json create mode 100644 qiling/extensions/windows_sdk/d2d1helper.json create mode 100644 qiling/extensions/windows_sdk/d3d10.json create mode 100644 qiling/extensions/windows_sdk/d3d10_1.json create mode 100644 qiling/extensions/windows_sdk/d3d10effect.json create mode 100644 qiling/extensions/windows_sdk/d3d10misc.json create mode 100644 qiling/extensions/windows_sdk/d3d11.json create mode 100644 qiling/extensions/windows_sdk/d3d11on12.json create mode 100644 qiling/extensions/windows_sdk/d3d11shadertracing.json create mode 100644 qiling/extensions/windows_sdk/d3d12.json create mode 100644 qiling/extensions/windows_sdk/d3d9.json create mode 100644 qiling/extensions/windows_sdk/d3d9helper.json create mode 100644 qiling/extensions/windows_sdk/d3dcompiler.json create mode 100644 qiling/extensions/windows_sdk/datetimeapi.json create mode 100644 qiling/extensions/windows_sdk/davclnt.json create mode 100644 qiling/extensions/windows_sdk/dbghelp.json create mode 100644 qiling/extensions/windows_sdk/dciman.json create mode 100644 qiling/extensions/windows_sdk/dde.json create mode 100644 qiling/extensions/windows_sdk/ddeml.json create mode 100644 qiling/extensions/windows_sdk/ddraw.json create mode 100644 qiling/extensions/windows_sdk/debugapi.json create mode 100644 qiling/extensions/windows_sdk/deviceaccess.json create mode 100644 qiling/extensions/windows_sdk/dhcpcsdk.json create mode 100644 qiling/extensions/windows_sdk/dhcpsapi.json create mode 100644 qiling/extensions/windows_sdk/dhcpv6csdk.json create mode 100644 qiling/extensions/windows_sdk/dmoreg.json create mode 100644 qiling/extensions/windows_sdk/dpa_dsa.json create mode 100644 qiling/extensions/windows_sdk/dpapi.json create mode 100644 qiling/extensions/windows_sdk/drt.json create mode 100644 qiling/extensions/windows_sdk/dsgetdc.json create mode 100644 qiling/extensions/windows_sdk/dsparse.json create mode 100644 qiling/extensions/windows_sdk/dsrole.json create mode 100644 qiling/extensions/windows_sdk/dssec.json create mode 100644 qiling/extensions/windows_sdk/dwmapi.json create mode 100644 qiling/extensions/windows_sdk/dxgi.json create mode 100644 qiling/extensions/windows_sdk/dxgi1_3.json create mode 100644 qiling/extensions/windows_sdk/dxgi1_6.json create mode 100644 qiling/extensions/windows_sdk/dxgidebug.json create mode 100644 qiling/extensions/windows_sdk/eaphostpeerconfigapis.json create mode 100644 qiling/extensions/windows_sdk/elscore.json create mode 100644 qiling/extensions/windows_sdk/enclaveapi.json create mode 100644 qiling/extensions/windows_sdk/errhandlingapi.json create mode 100644 qiling/extensions/windows_sdk/errorrep.json create mode 100644 qiling/extensions/windows_sdk/evcoll.json create mode 100644 qiling/extensions/windows_sdk/evntcons.json create mode 100644 qiling/extensions/windows_sdk/evntprov.json create mode 100644 qiling/extensions/windows_sdk/evntrace.json create mode 100644 qiling/extensions/windows_sdk/expandedresources.json create mode 100644 qiling/extensions/windows_sdk/fci.json create mode 100644 qiling/extensions/windows_sdk/fdi.json create mode 100644 qiling/extensions/windows_sdk/featurestagingapi.json create mode 100644 qiling/extensions/windows_sdk/fibersapi.json create mode 100644 qiling/extensions/windows_sdk/fileapi.json create mode 100644 qiling/extensions/windows_sdk/fltuser.json create mode 100644 qiling/extensions/windows_sdk/fontsub.json create mode 100644 qiling/extensions/windows_sdk/fwpmu.json create mode 100644 qiling/extensions/windows_sdk/fxsutility.json create mode 100644 qiling/extensions/windows_sdk/gb18030.json create mode 100644 qiling/extensions/windows_sdk/gpedit.json create mode 100644 qiling/extensions/windows_sdk/guiddef.json create mode 100644 qiling/extensions/windows_sdk/handleapi.json create mode 100644 qiling/extensions/windows_sdk/heapapi.json create mode 100644 qiling/extensions/windows_sdk/highlevelmonitorconfigurationapi.json create mode 100644 qiling/extensions/windows_sdk/htmlhelp.json create mode 100644 qiling/extensions/windows_sdk/http.json create mode 100644 qiling/extensions/windows_sdk/icwcfg.json create mode 100644 qiling/extensions/windows_sdk/imagehlp.json create mode 100644 qiling/extensions/windows_sdk/ime.json create mode 100644 qiling/extensions/windows_sdk/imm.json create mode 100644 qiling/extensions/windows_sdk/immdev.json create mode 100644 qiling/extensions/windows_sdk/inputscope.json create mode 100644 qiling/extensions/windows_sdk/inspectable.json create mode 100644 qiling/extensions/windows_sdk/interactioncontext.json create mode 100644 qiling/extensions/windows_sdk/interlockedapi.json create mode 100644 qiling/extensions/windows_sdk/intshcut.json create mode 100644 qiling/extensions/windows_sdk/ioapiset.json create mode 100644 qiling/extensions/windows_sdk/ip2string.json create mode 100644 qiling/extensions/windows_sdk/iphlpapi.json create mode 100644 qiling/extensions/windows_sdk/jobapi.json create mode 100644 qiling/extensions/windows_sdk/jobapi2.json create mode 100644 qiling/extensions/windows_sdk/joystickapi.json create mode 100644 qiling/extensions/windows_sdk/ktmw32.json create mode 100644 qiling/extensions/windows_sdk/libloaderapi.json create mode 100644 qiling/extensions/windows_sdk/libloaderapi2.json create mode 100644 qiling/extensions/windows_sdk/lmaccess.json create mode 100644 qiling/extensions/windows_sdk/lmserver.json create mode 100644 qiling/extensions/windows_sdk/lmshare.json create mode 100644 qiling/extensions/windows_sdk/lmstats.json create mode 100644 qiling/extensions/windows_sdk/lmuse.json create mode 100644 qiling/extensions/windows_sdk/lmwksta.json create mode 100644 qiling/extensions/windows_sdk/loadperf.json create mode 100644 qiling/extensions/windows_sdk/lowlevelmonitorconfigurationapi.json create mode 100644 qiling/extensions/windows_sdk/lzexpand.json create mode 100644 qiling/extensions/windows_sdk/mdmregistration.json create mode 100644 qiling/extensions/windows_sdk/memoryapi.json create mode 100644 qiling/extensions/windows_sdk/messagedispatcherapi.json create mode 100644 qiling/extensions/windows_sdk/mfapi.json create mode 100644 qiling/extensions/windows_sdk/mfidl.json create mode 100644 qiling/extensions/windows_sdk/mfobjects.json create mode 100644 qiling/extensions/windows_sdk/mfplay.json create mode 100644 qiling/extensions/windows_sdk/mftransform.json create mode 100644 qiling/extensions/windows_sdk/mgmtapi.json create mode 100644 qiling/extensions/windows_sdk/mi.json create mode 100644 qiling/extensions/windows_sdk/midles.json create mode 100644 qiling/extensions/windows_sdk/minidumpapiset.json create mode 100644 qiling/extensions/windows_sdk/mmddk.json create mode 100644 qiling/extensions/windows_sdk/mmdeviceapi.json create mode 100644 qiling/extensions/windows_sdk/mmeapi.json create mode 100644 qiling/extensions/windows_sdk/mmiscapi.json create mode 100644 qiling/extensions/windows_sdk/mprapi.json create mode 100644 qiling/extensions/windows_sdk/msacm.json create mode 100644 qiling/extensions/windows_sdk/msajtransport.json create mode 100644 qiling/extensions/windows_sdk/mscat.json create mode 100644 qiling/extensions/windows_sdk/mschapp.json create mode 100644 qiling/extensions/windows_sdk/msctf.json create mode 100644 qiling/extensions/windows_sdk/msdrm.json create mode 100644 qiling/extensions/windows_sdk/msi.json create mode 100644 qiling/extensions/windows_sdk/msiquery.json create mode 100644 qiling/extensions/windows_sdk/msports.json create mode 100644 qiling/extensions/windows_sdk/mssip.json create mode 100644 qiling/extensions/windows_sdk/mtxdm.json create mode 100644 qiling/extensions/windows_sdk/namedpipeapi.json create mode 100644 qiling/extensions/windows_sdk/namespaceapi.json create mode 100644 qiling/extensions/windows_sdk/nb30.json create mode 100644 qiling/extensions/windows_sdk/ncrypt.json create mode 100644 qiling/extensions/windows_sdk/ncryptprotect.json create mode 100644 qiling/extensions/windows_sdk/netcon.json create mode 100644 qiling/extensions/windows_sdk/netfw.json create mode 100644 qiling/extensions/windows_sdk/netioapi.json create mode 100644 qiling/extensions/windows_sdk/netsh.json create mode 100644 qiling/extensions/windows_sdk/networkisolation.json create mode 100644 qiling/extensions/windows_sdk/newdev.json create mode 100644 qiling/extensions/windows_sdk/npapi.json create mode 100644 qiling/extensions/windows_sdk/nspapi.json create mode 100644 qiling/extensions/windows_sdk/ntdsapi.json create mode 100644 qiling/extensions/windows_sdk/ntmsapi.json create mode 100644 qiling/extensions/windows_sdk/ntquery.json create mode 100644 qiling/extensions/windows_sdk/ntsecapi.json create mode 100644 qiling/extensions/windows_sdk/oaidl.json create mode 100644 qiling/extensions/windows_sdk/objbase.json create mode 100644 qiling/extensions/windows_sdk/ole.json create mode 100644 qiling/extensions/windows_sdk/ole2.json create mode 100644 qiling/extensions/windows_sdk/oleacc.json create mode 100644 qiling/extensions/windows_sdk/oleauto.json create mode 100644 qiling/extensions/windows_sdk/olectl.json create mode 100644 qiling/extensions/windows_sdk/oledlg.json create mode 100644 qiling/extensions/windows_sdk/ondemandconnroutehelper.json create mode 100644 qiling/extensions/windows_sdk/oobenotification.json create mode 100644 qiling/extensions/windows_sdk/p2p.json create mode 100644 qiling/extensions/windows_sdk/pathcch.json create mode 100644 qiling/extensions/windows_sdk/pdh.json create mode 100644 qiling/extensions/windows_sdk/peerdist.json create mode 100644 qiling/extensions/windows_sdk/perflib.json create mode 100644 qiling/extensions/windows_sdk/physicalmonitorenumerationapi.json create mode 100644 qiling/extensions/windows_sdk/powerbase.json create mode 100644 qiling/extensions/windows_sdk/powersetting.json create mode 100644 qiling/extensions/windows_sdk/powrprof.json create mode 100644 qiling/extensions/windows_sdk/prnasnot.json create mode 100644 qiling/extensions/windows_sdk/prntvpt.json create mode 100644 qiling/extensions/windows_sdk/processenv.json create mode 100644 qiling/extensions/windows_sdk/processsnapshot.json create mode 100644 qiling/extensions/windows_sdk/processthreadsapi.json create mode 100644 qiling/extensions/windows_sdk/processtopologyapi.json create mode 100644 qiling/extensions/windows_sdk/profileapi.json create mode 100644 qiling/extensions/windows_sdk/propapi.json create mode 100644 qiling/extensions/windows_sdk/propidl.json create mode 100644 qiling/extensions/windows_sdk/propsys.json create mode 100644 qiling/extensions/windows_sdk/propvarutil.json create mode 100644 qiling/extensions/windows_sdk/prsht.json create mode 100644 qiling/extensions/windows_sdk/psapi.json create mode 100644 qiling/extensions/windows_sdk/ras.json create mode 100644 qiling/extensions/windows_sdk/rasdlg.json create mode 100644 qiling/extensions/windows_sdk/rasshost.json create mode 100644 qiling/extensions/windows_sdk/realtimeapiset.json create mode 100644 qiling/extensions/windows_sdk/remotesystemadditionalinfo.json create mode 100644 qiling/extensions/windows_sdk/resourceindexer.json create mode 100644 qiling/extensions/windows_sdk/restartmanager.json create mode 100644 qiling/extensions/windows_sdk/robuffer.json create mode 100644 qiling/extensions/windows_sdk/roerrorapi.json create mode 100644 qiling/extensions/windows_sdk/rometadata.json create mode 100644 qiling/extensions/windows_sdk/roregistrationapi.json create mode 100644 qiling/extensions/windows_sdk/rpcasync.json create mode 100644 qiling/extensions/windows_sdk/rpcdce.json create mode 100644 qiling/extensions/windows_sdk/rpcdcep.json create mode 100644 qiling/extensions/windows_sdk/rpcndr.json create mode 100644 qiling/extensions/windows_sdk/rpcnsi.json create mode 100644 qiling/extensions/windows_sdk/rpcproxy.json create mode 100644 qiling/extensions/windows_sdk/rpcssl.json create mode 100644 qiling/extensions/windows_sdk/rrascfg.json create mode 100644 qiling/extensions/windows_sdk/rtlsupportapi.json create mode 100644 qiling/extensions/windows_sdk/rtmv2.json create mode 100644 qiling/extensions/windows_sdk/rtworkq.json create mode 100644 qiling/extensions/windows_sdk/sas.json create mode 100644 qiling/extensions/windows_sdk/schannel.json create mode 100644 qiling/extensions/windows_sdk/scrnsave.json create mode 100644 qiling/extensions/windows_sdk/sddl.json create mode 100644 qiling/extensions/windows_sdk/securityappcontainer.json create mode 100644 qiling/extensions/windows_sdk/securitybaseapi.json create mode 100644 qiling/extensions/windows_sdk/sensapi.json create mode 100644 qiling/extensions/windows_sdk/setupapi.json create mode 100644 qiling/extensions/windows_sdk/sfc.json create mode 100644 qiling/extensions/windows_sdk/shcore.json create mode 100644 qiling/extensions/windows_sdk/shellapi.json create mode 100644 qiling/extensions/windows_sdk/shellscalingapi.json create mode 100644 qiling/extensions/windows_sdk/shlobj.json create mode 100644 qiling/extensions/windows_sdk/shlobj_core.json create mode 100644 qiling/extensions/windows_sdk/shlwapi.json create mode 100644 qiling/extensions/windows_sdk/shobjidl.json create mode 100644 qiling/extensions/windows_sdk/shobjidl_core.json create mode 100644 qiling/extensions/windows_sdk/slpublic.json create mode 100644 qiling/extensions/windows_sdk/smbclnt.json create mode 100644 qiling/extensions/windows_sdk/snmp.json create mode 100644 qiling/extensions/windows_sdk/socketapi.json create mode 100644 qiling/extensions/windows_sdk/srpapi.json create mode 100644 qiling/extensions/windows_sdk/srrestoreptapi.json create mode 100644 qiling/extensions/windows_sdk/sspi.json create mode 100644 qiling/extensions/windows_sdk/storprop.json create mode 100644 qiling/extensions/windows_sdk/stralign.json create mode 100644 qiling/extensions/windows_sdk/stringapiset.json create mode 100644 qiling/extensions/windows_sdk/swdevice.json create mode 100644 qiling/extensions/windows_sdk/synchapi.json create mode 100644 qiling/extensions/windows_sdk/syncmgr.json create mode 100644 qiling/extensions/windows_sdk/sysinfoapi.json create mode 100644 qiling/extensions/windows_sdk/systemtopologyapi.json create mode 100644 qiling/extensions/windows_sdk/t2embapi.json create mode 100644 qiling/extensions/windows_sdk/tapi.json create mode 100644 qiling/extensions/windows_sdk/tbs.json create mode 100644 qiling/extensions/windows_sdk/tdh.json create mode 100644 qiling/extensions/windows_sdk/threadpoolapiset.json create mode 100644 qiling/extensions/windows_sdk/threadpoollegacyapiset.json create mode 100644 qiling/extensions/windows_sdk/timeapi.json create mode 100644 qiling/extensions/windows_sdk/timezoneapi.json create mode 100644 qiling/extensions/windows_sdk/tlhelp32.json create mode 100644 qiling/extensions/windows_sdk/tokenbinding.json create mode 100644 qiling/extensions/windows_sdk/txfw32.json create mode 100644 qiling/extensions/windows_sdk/ual.json create mode 100644 qiling/extensions/windows_sdk/unknwn.json create mode 100644 qiling/extensions/windows_sdk/unknwnbase.json create mode 100644 qiling/extensions/windows_sdk/urlmon.json create mode 100644 qiling/extensions/windows_sdk/userenv.json create mode 100644 qiling/extensions/windows_sdk/usp10.json create mode 100644 qiling/extensions/windows_sdk/utilapiset.json create mode 100644 qiling/extensions/windows_sdk/uxtheme.json create mode 100644 qiling/extensions/windows_sdk/vdmdbg.json create mode 100644 qiling/extensions/windows_sdk/versionhelpers.json create mode 100644 qiling/extensions/windows_sdk/vfw.json create mode 100644 qiling/extensions/windows_sdk/virtdisk.json create mode 100644 qiling/extensions/windows_sdk/wcmapi.json create mode 100644 qiling/extensions/windows_sdk/wct.json create mode 100644 qiling/extensions/windows_sdk/wdsbp.json create mode 100644 qiling/extensions/windows_sdk/wdsclientapi.json create mode 100644 qiling/extensions/windows_sdk/wdspxe.json create mode 100644 qiling/extensions/windows_sdk/wdstci.json create mode 100644 qiling/extensions/windows_sdk/wdstpdi.json create mode 100644 qiling/extensions/windows_sdk/websocket.json create mode 100644 qiling/extensions/windows_sdk/werapi.json create mode 100644 qiling/extensions/windows_sdk/wia_xp.json create mode 100644 qiling/extensions/windows_sdk/winbase.json create mode 100644 qiling/extensions/windows_sdk/winbio.json create mode 100644 qiling/extensions/windows_sdk/wincred.json create mode 100644 qiling/extensions/windows_sdk/wincrypt.json create mode 100644 qiling/extensions/windows_sdk/windef.json create mode 100644 qiling/extensions/windows_sdk/windns.json create mode 100644 qiling/extensions/windows_sdk/windows.json create mode 100644 qiling/extensions/windows_sdk/windowsceip.json create mode 100644 qiling/extensions/windows_sdk/windowsdefender.json create mode 100644 qiling/extensions/windows_sdk/winefs.json create mode 100644 qiling/extensions/windows_sdk/winenclaveapi.json create mode 100644 qiling/extensions/windows_sdk/winevt.json create mode 100644 qiling/extensions/windows_sdk/wingdi.json create mode 100644 qiling/extensions/windows_sdk/winhttp.json create mode 100644 qiling/extensions/windows_sdk/wininet.json create mode 100644 qiling/extensions/windows_sdk/winnetwk.json create mode 100644 qiling/extensions/windows_sdk/winnls.json create mode 100644 qiling/extensions/windows_sdk/winnls32.json create mode 100644 qiling/extensions/windows_sdk/winnt.json create mode 100644 qiling/extensions/windows_sdk/winreg.json create mode 100644 qiling/extensions/windows_sdk/winsafer.json create mode 100644 qiling/extensions/windows_sdk/winscard.json create mode 100644 qiling/extensions/windows_sdk/winsnmp.json create mode 100644 qiling/extensions/windows_sdk/winsock.json create mode 100644 qiling/extensions/windows_sdk/winsock2.json create mode 100644 qiling/extensions/windows_sdk/winstring.json create mode 100644 qiling/extensions/windows_sdk/winsvc.json create mode 100644 qiling/extensions/windows_sdk/winsxs.json create mode 100644 qiling/extensions/windows_sdk/winternl.json create mode 100644 qiling/extensions/windows_sdk/wintrust.json create mode 100644 qiling/extensions/windows_sdk/winusb.json create mode 100644 qiling/extensions/windows_sdk/winuser.json create mode 100644 qiling/extensions/windows_sdk/winver.json create mode 100644 qiling/extensions/windows_sdk/winwlx.json create mode 100644 qiling/extensions/windows_sdk/wlanapi.json create mode 100644 qiling/extensions/windows_sdk/wmcontainer.json create mode 100644 qiling/extensions/windows_sdk/wmpservices.json create mode 100644 qiling/extensions/windows_sdk/wmsdkidl.json create mode 100644 qiling/extensions/windows_sdk/wmsdkvalidate.json create mode 100644 qiling/extensions/windows_sdk/wofapi.json create mode 100644 qiling/extensions/windows_sdk/wow64apiset.json create mode 100644 qiling/extensions/windows_sdk/ws2spi.json create mode 100644 qiling/extensions/windows_sdk/ws2tcpip.json create mode 100644 qiling/extensions/windows_sdk/wsbonline.json create mode 100644 qiling/extensions/windows_sdk/wscapi.json create mode 100644 qiling/extensions/windows_sdk/wsdattachment.json create mode 100644 qiling/extensions/windows_sdk/wsdevlicensing.json create mode 100644 qiling/extensions/windows_sdk/wsdxml.json create mode 100644 qiling/extensions/windows_sdk/wsipv6ok.json create mode 100644 qiling/extensions/windows_sdk/wslapi.json create mode 100644 qiling/extensions/windows_sdk/wsman.json create mode 100644 qiling/extensions/windows_sdk/wtsapi32.json create mode 100644 qiling/extensions/windows_sdk/wtshintapi.json create mode 100644 qiling/extensions/windows_sdk/xamlom.json create mode 100644 qiling/extensions/windows_sdk/xapofx.json create mode 100644 qiling/extensions/windows_sdk/xaudio2.json create mode 100644 qiling/extensions/windows_sdk/xaudio2fx.json create mode 100644 qiling/extensions/windows_sdk/xinput.json create mode 100644 qiling/extensions/windows_sdk/xpsprint.json diff --git a/qiling/extensions/windows_sdk/aclapi.json b/qiling/extensions/windows_sdk/aclapi.json new file mode 100644 index 000000000..fefad2313 --- /dev/null +++ b/qiling/extensions/windows_sdk/aclapi.json @@ -0,0 +1,956 @@ +{ + "SetEntriesInAclA": [ + { + "name": "cCountOfExplicitEntries", + "type": "ULONG" + }, + { + "name": "pListOfExplicitEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "OldAcl", + "type": "PACL" + }, + { + "name": "NewAcl", + "type": "PACL" + } + ], + "SetEntriesInAclW": [ + { + "name": "cCountOfExplicitEntries", + "type": "ULONG" + }, + { + "name": "pListOfExplicitEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "OldAcl", + "type": "PACL" + }, + { + "name": "NewAcl", + "type": "PACL" + } + ], + "GetExplicitEntriesFromAclA": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pcCountOfExplicitEntries", + "type": "PULONG" + }, + { + "name": "pListOfExplicitEntries", + "type": "PEXPLICIT_ACCESS_A" + } + ], + "GetExplicitEntriesFromAclW": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pcCountOfExplicitEntries", + "type": "PULONG" + }, + { + "name": "pListOfExplicitEntries", + "type": "PEXPLICIT_ACCESS_W" + } + ], + "GetEffectiveRightsFromAclA": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pAccessRights", + "type": "PACCESS_MASK" + } + ], + "GetEffectiveRightsFromAclW": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pAccessRights", + "type": "PACCESS_MASK" + } + ], + "GetAuditedPermissionsFromAclA": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pSuccessfulAuditedRights", + "type": "PACCESS_MASK" + }, + { + "name": "pFailedAuditRights", + "type": "PACCESS_MASK" + } + ], + "GetAuditedPermissionsFromAclW": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pSuccessfulAuditedRights", + "type": "PACCESS_MASK" + }, + { + "name": "pFailedAuditRights", + "type": "PACCESS_MASK" + } + ], + "GetNamedSecurityInfoA": [ + { + "name": "pObjectName", + "type": "LPCSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ppsidOwner", + "type": "PSID" + }, + { + "name": "ppsidGroup", + "type": "PSID" + }, + { + "name": "ppDacl", + "type": "PACL" + }, + { + "name": "ppSacl", + "type": "PACL" + }, + { + "name": "ppSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetNamedSecurityInfoW": [ + { + "name": "pObjectName", + "type": "LPCWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ppsidOwner", + "type": "PSID" + }, + { + "name": "ppsidGroup", + "type": "PSID" + }, + { + "name": "ppDacl", + "type": "PACL" + }, + { + "name": "ppSacl", + "type": "PACL" + }, + { + "name": "ppSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetSecurityInfo": [ + { + "name": "handle", + "type": "HANDLE" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ppsidOwner", + "type": "PSID" + }, + { + "name": "ppsidGroup", + "type": "PSID" + }, + { + "name": "ppDacl", + "type": "PACL" + }, + { + "name": "ppSacl", + "type": "PACL" + }, + { + "name": "ppSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "SetNamedSecurityInfoA": [ + { + "name": "pObjectName", + "type": "LPSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "psidOwner", + "type": "PSID" + }, + { + "name": "psidGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + } + ], + "SetNamedSecurityInfoW": [ + { + "name": "pObjectName", + "type": "LPWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "psidOwner", + "type": "PSID" + }, + { + "name": "psidGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + } + ], + "SetSecurityInfo": [ + { + "name": "handle", + "type": "HANDLE" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "psidOwner", + "type": "PSID" + }, + { + "name": "psidGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + } + ], + "GetInheritanceSourceA": [ + { + "name": "pObjectName", + "type": "LPSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "Container", + "type": "BOOL" + }, + { + "name": "pObjectClassGuids", + "type": "GUID" + }, + { + "name": "GuidCount", + "type": "DWORD" + }, + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pfnArray", + "type": "PFN_OBJECT_MGR_FUNCTS" + }, + { + "name": "pGenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "pInheritArray", + "type": "PINHERITED_FROMA" + } + ], + "GetInheritanceSourceW": [ + { + "name": "pObjectName", + "type": "LPWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "Container", + "type": "BOOL" + }, + { + "name": "pObjectClassGuids", + "type": "GUID" + }, + { + "name": "GuidCount", + "type": "DWORD" + }, + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pfnArray", + "type": "PFN_OBJECT_MGR_FUNCTS" + }, + { + "name": "pGenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "pInheritArray", + "type": "PINHERITED_FROMW" + } + ], + "FreeInheritedFromArray": [ + { + "name": "pInheritArray", + "type": "PINHERITED_FROMW" + }, + { + "name": "AceCnt", + "type": "USHORT" + }, + { + "name": "pfnArray", + "type": "PFN_OBJECT_MGR_FUNCTS" + } + ], + "TreeResetNamedSecurityInfoA": [ + { + "name": "pObjectName", + "type": "LPSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "KeepExplicit", + "type": "BOOL" + }, + { + "name": "fnProgress", + "type": "FN_PROGRESS" + }, + { + "name": "ProgressInvokeSetting", + "type": "PROG_INVOKE_SETTING" + }, + { + "name": "Args", + "type": "PVOID" + } + ], + "TreeResetNamedSecurityInfoW": [ + { + "name": "pObjectName", + "type": "LPWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "KeepExplicit", + "type": "BOOL" + }, + { + "name": "fnProgress", + "type": "FN_PROGRESS" + }, + { + "name": "ProgressInvokeSetting", + "type": "PROG_INVOKE_SETTING" + }, + { + "name": "Args", + "type": "PVOID" + } + ], + "TreeSetNamedSecurityInfoA": [ + { + "name": "pObjectName", + "type": "LPSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "fnProgress", + "type": "FN_PROGRESS" + }, + { + "name": "ProgressInvokeSetting", + "type": "PROG_INVOKE_SETTING" + }, + { + "name": "Args", + "type": "PVOID" + } + ], + "TreeSetNamedSecurityInfoW": [ + { + "name": "pObjectName", + "type": "LPWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "fnProgress", + "type": "FN_PROGRESS" + }, + { + "name": "ProgressInvokeSetting", + "type": "PROG_INVOKE_SETTING" + }, + { + "name": "Args", + "type": "PVOID" + } + ], + "BuildSecurityDescriptorA": [ + { + "name": "pOwner", + "type": "PTRUSTEE_A" + }, + { + "name": "pGroup", + "type": "PTRUSTEE_A" + }, + { + "name": "cCountOfAccessEntries", + "type": "ULONG" + }, + { + "name": "pListOfAccessEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "cCountOfAuditEntries", + "type": "ULONG" + }, + { + "name": "pListOfAuditEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "pOldSD", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pSizeNewSD", + "type": "PULONG" + }, + { + "name": "pNewSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "BuildSecurityDescriptorW": [ + { + "name": "pOwner", + "type": "PTRUSTEE_W" + }, + { + "name": "pGroup", + "type": "PTRUSTEE_W" + }, + { + "name": "cCountOfAccessEntries", + "type": "ULONG" + }, + { + "name": "pListOfAccessEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "cCountOfAuditEntries", + "type": "ULONG" + }, + { + "name": "pListOfAuditEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "pOldSD", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pSizeNewSD", + "type": "PULONG" + }, + { + "name": "pNewSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "LookupSecurityDescriptorPartsA": [ + { + "name": "ppOwner", + "type": "PTRUSTEE_A" + }, + { + "name": "ppGroup", + "type": "PTRUSTEE_A" + }, + { + "name": "pcCountOfAccessEntries", + "type": "PULONG" + }, + { + "name": "ppListOfAccessEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "pcCountOfAuditEntries", + "type": "PULONG" + }, + { + "name": "ppListOfAuditEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "pSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "LookupSecurityDescriptorPartsW": [ + { + "name": "ppOwner", + "type": "PTRUSTEE_W" + }, + { + "name": "ppGroup", + "type": "PTRUSTEE_W" + }, + { + "name": "pcCountOfAccessEntries", + "type": "PULONG" + }, + { + "name": "ppListOfAccessEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "pcCountOfAuditEntries", + "type": "PULONG" + }, + { + "name": "ppListOfAuditEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "pSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "BuildExplicitAccessWithNameA": [ + { + "name": "pExplicitAccess", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "pTrusteeName", + "type": "LPSTR" + }, + { + "name": "AccessPermissions", + "type": "DWORD" + }, + { + "name": "AccessMode", + "type": "ACCESS_MODE" + }, + { + "name": "Inheritance", + "type": "DWORD" + } + ], + "BuildExplicitAccessWithNameW": [ + { + "name": "pExplicitAccess", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "pTrusteeName", + "type": "LPWSTR" + }, + { + "name": "AccessPermissions", + "type": "DWORD" + }, + { + "name": "AccessMode", + "type": "ACCESS_MODE" + }, + { + "name": "Inheritance", + "type": "DWORD" + } + ], + "BuildTrusteeWithNameA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pName", + "type": "LPSTR" + } + ], + "BuildTrusteeWithNameW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pName", + "type": "LPWSTR" + } + ], + "BuildTrusteeWithSidA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "BuildTrusteeWithSidW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "BuildTrusteeWithObjectsAndSidA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pObjSid", + "type": "POBJECTS_AND_SID" + }, + { + "name": "pObjectGuid", + "type": "GUID" + }, + { + "name": "pInheritedObjectGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "BuildTrusteeWithObjectsAndSidW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pObjSid", + "type": "POBJECTS_AND_SID" + }, + { + "name": "pObjectGuid", + "type": "GUID" + }, + { + "name": "pInheritedObjectGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "BuildTrusteeWithObjectsAndNameA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pObjName", + "type": "POBJECTS_AND_NAME_A" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "ObjectTypeName", + "type": "LPSTR" + }, + { + "name": "InheritedObjectTypeName", + "type": "LPSTR" + }, + { + "name": "Name", + "type": "LPSTR" + } + ], + "BuildTrusteeWithObjectsAndNameW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pObjName", + "type": "POBJECTS_AND_NAME_W" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "ObjectTypeName", + "type": "LPWSTR" + }, + { + "name": "InheritedObjectTypeName", + "type": "LPWSTR" + }, + { + "name": "Name", + "type": "LPWSTR" + } + ], + "GetTrusteeNameA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + } + ], + "GetTrusteeNameW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + } + ], + "GetTrusteeTypeA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + } + ], + "GetTrusteeTypeW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + } + ], + "GetTrusteeFormA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + } + ], + "GetTrusteeFormW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/aclui.json b/qiling/extensions/windows_sdk/aclui.json new file mode 100644 index 000000000..be2ab37fa --- /dev/null +++ b/qiling/extensions/windows_sdk/aclui.json @@ -0,0 +1,32 @@ +{ + "CreateSecurityPage": [ + { + "name": "psi", + "type": "LPSECURITYINFO" + } + ], + "EditSecurity": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "psi", + "type": "LPSECURITYINFO" + } + ], + "EditSecurityAdvanced": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "psi", + "type": "LPSECURITYINFO" + }, + { + "name": "uSIPage", + "type": "SI_PAGE_TYPE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/advpub.json b/qiling/extensions/windows_sdk/advpub.json new file mode 100644 index 000000000..f72fd5f28 --- /dev/null +++ b/qiling/extensions/windows_sdk/advpub.json @@ -0,0 +1,30 @@ +{ + "RegInstallA": [ + { + "name": "hmod", + "type": "HMODULE" + }, + { + "name": "pszSection", + "type": "LPCSTR" + }, + { + "name": "pstTable", + "type": "STRTABLEA" + } + ], + "RegInstallW": [ + { + "name": "hmod", + "type": "HMODULE" + }, + { + "name": "pszSection", + "type": "LPCWSTR" + }, + { + "name": "pstTable", + "type": "STRTABLEW" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/amsi.json b/qiling/extensions/windows_sdk/amsi.json new file mode 100644 index 000000000..62aadd101 --- /dev/null +++ b/qiling/extensions/windows_sdk/amsi.json @@ -0,0 +1,86 @@ +{ + "AmsiInitialize": [ + { + "name": "appName", + "type": "LPCWSTR" + }, + { + "name": "amsiContext", + "type": "HAMSICONTEXT" + } + ], + "AmsiUninitialize": [ + { + "name": "amsiContext", + "type": "HAMSICONTEXT" + } + ], + "AmsiOpenSession": [ + { + "name": "amsiContext", + "type": "HAMSICONTEXT" + }, + { + "name": "amsiSession", + "type": "HAMSISESSION" + } + ], + "AmsiCloseSession": [ + { + "name": "amsiContext", + "type": "HAMSICONTEXT" + }, + { + "name": "amsiSession", + "type": "HAMSISESSION" + } + ], + "AmsiScanBuffer": [ + { + "name": "amsiContext", + "type": "HAMSICONTEXT" + }, + { + "name": "buffer", + "type": "PVOID" + }, + { + "name": "length", + "type": "ULONG" + }, + { + "name": "contentName", + "type": "LPCWSTR" + }, + { + "name": "amsiSession", + "type": "HAMSISESSION" + }, + { + "name": "result", + "type": "AMSI_RESULT" + } + ], + "AmsiScanString": [ + { + "name": "amsiContext", + "type": "HAMSICONTEXT" + }, + { + "name": "string", + "type": "LPCWSTR" + }, + { + "name": "contentName", + "type": "LPCWSTR" + }, + { + "name": "amsiSession", + "type": "HAMSISESSION" + }, + { + "name": "result", + "type": "AMSI_RESULT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/appcompatapi.json b/qiling/extensions/windows_sdk/appcompatapi.json new file mode 100644 index 000000000..b74c3d3ef --- /dev/null +++ b/qiling/extensions/windows_sdk/appcompatapi.json @@ -0,0 +1,16 @@ +{ + "ApphelpCheckShellObject": [ + { + "name": "ObjectCLSID", + "type": "IID" + }, + { + "name": "bShimIfNecessary", + "type": "BOOL" + }, + { + "name": "pullFlags", + "type": "ULONGLONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/appmgmt.json b/qiling/extensions/windows_sdk/appmgmt.json new file mode 100644 index 000000000..b69a32991 --- /dev/null +++ b/qiling/extensions/windows_sdk/appmgmt.json @@ -0,0 +1,64 @@ +{ + "InstallApplication": [ + { + "name": "pInstallInfo", + "type": "PINSTALLDATA" + } + ], + "UninstallApplication": [ + { + "name": "ProductCode", + "type": "LPWSTR" + }, + { + "name": "dwStatus", + "type": "DWORD" + } + ], + "GetManagedApplications": [ + { + "name": "pCategory", + "type": "GUID" + }, + { + "name": "dwQueryFlags", + "type": "DWORD" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "pdwApps", + "type": "LPDWORD" + }, + { + "name": "prgManagedApps", + "type": "PMANAGEDAPPLICATION" + } + ], + "GetLocalManagedApplications": [ + { + "name": "bUserApps", + "type": "BOOL" + }, + { + "name": "pdwApps", + "type": "LPDWORD" + }, + { + "name": "prgLocalApps", + "type": "PLOCALMANAGEDAPPLICATION" + } + ], + "GetManagedApplicationCategories": [ + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pAppCategory", + "type": "APPCATEGORYINFOLIST" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/appmodel.json b/qiling/extensions/windows_sdk/appmodel.json new file mode 100644 index 000000000..42df21249 --- /dev/null +++ b/qiling/extensions/windows_sdk/appmodel.json @@ -0,0 +1,538 @@ +{ + "GetCurrentPackageId": [ + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + } + ], + "GetCurrentPackageFullName": [ + { + "name": "packageFullNameLength", + "type": "UINT32" + }, + { + "name": "packageFullName", + "type": "PWSTR" + } + ], + "GetCurrentPackageFamilyName": [ + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "GetCurrentPackagePath": [ + { + "name": "pathLength", + "type": "UINT32" + }, + { + "name": "path", + "type": "PWSTR" + } + ], + "GetPackageId": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + } + ], + "GetPackageFullName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "packageFullNameLength", + "type": "UINT32" + }, + { + "name": "packageFullName", + "type": "PWSTR" + } + ], + "GetPackageFullNameFromToken": [ + { + "name": "token", + "type": "HANDLE" + }, + { + "name": "packageFullNameLength", + "type": "UINT32" + }, + { + "name": "packageFullName", + "type": "PWSTR" + } + ], + "GetPackageFamilyName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "GetPackageFamilyNameFromToken": [ + { + "name": "token", + "type": "HANDLE" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "GetPackagePath": [ + { + "name": "packageId", + "type": "PACKAGE_ID" + }, + { + "name": "reserved", + "type": "UINT32" + }, + { + "name": "pathLength", + "type": "UINT32" + }, + { + "name": "path", + "type": "PWSTR" + } + ], + "GetPackagePathByFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "pathLength", + "type": "UINT32" + }, + { + "name": "path", + "type": "PWSTR" + } + ], + "GetStagedPackagePathByFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "pathLength", + "type": "UINT32" + }, + { + "name": "path", + "type": "PWSTR" + } + ], + "GetCurrentApplicationUserModelId": [ + { + "name": "applicationUserModelIdLength", + "type": "UINT32" + }, + { + "name": "applicationUserModelId", + "type": "PWSTR" + } + ], + "GetApplicationUserModelId": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "applicationUserModelIdLength", + "type": "UINT32" + }, + { + "name": "applicationUserModelId", + "type": "PWSTR" + } + ], + "GetApplicationUserModelIdFromToken": [ + { + "name": "token", + "type": "HANDLE" + }, + { + "name": "applicationUserModelIdLength", + "type": "UINT32" + }, + { + "name": "applicationUserModelId", + "type": "PWSTR" + } + ], + "PackageIdFromFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + } + ], + "PackageFullNameFromId": [ + { + "name": "packageId", + "type": "PACKAGE_ID" + }, + { + "name": "packageFullNameLength", + "type": "UINT32" + }, + { + "name": "packageFullName", + "type": "PWSTR" + } + ], + "PackageFamilyNameFromId": [ + { + "name": "packageId", + "type": "PACKAGE_ID" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "PackageFamilyNameFromFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "PackageNameAndPublisherIdFromFamilyName": [ + { + "name": "packageFamilyName", + "type": "PCWSTR" + }, + { + "name": "packageNameLength", + "type": "UINT32" + }, + { + "name": "packageName", + "type": "PWSTR" + }, + { + "name": "packagePublisherIdLength", + "type": "UINT32" + }, + { + "name": "packagePublisherId", + "type": "PWSTR" + } + ], + "FormatApplicationUserModelId": [ + { + "name": "packageFamilyName", + "type": "PCWSTR" + }, + { + "name": "packageRelativeApplicationId", + "type": "PCWSTR" + }, + { + "name": "applicationUserModelIdLength", + "type": "UINT32" + }, + { + "name": "applicationUserModelId", + "type": "PWSTR" + } + ], + "ParseApplicationUserModelId": [ + { + "name": "applicationUserModelId", + "type": "PCWSTR" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + }, + { + "name": "packageRelativeApplicationIdLength", + "type": "UINT32" + }, + { + "name": "packageRelativeApplicationId", + "type": "PWSTR" + } + ], + "GetPackagesByPackageFamily": [ + { + "name": "packageFamilyName", + "type": "PCWSTR" + }, + { + "name": "count", + "type": "UINT32" + }, + { + "name": "packageFullNames", + "type": "PWSTR" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "WCHAR" + } + ], + "FindPackagesByPackageFamily": [ + { + "name": "packageFamilyName", + "type": "PCWSTR" + }, + { + "name": "packageFilters", + "type": "UINT32" + }, + { + "name": "count", + "type": "UINT32" + }, + { + "name": "packageFullNames", + "type": "PWSTR" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "WCHAR" + }, + { + "name": "packageProperties", + "type": "UINT32" + } + ], + "GetStagedPackageOrigin": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "origin", + "type": "PackageOrigin" + } + ], + "GetCurrentPackageInfo": [ + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + }, + { + "name": "count", + "type": "UINT32" + } + ], + "OpenPackageInfoByFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "reserved", + "type": "UINT32" + }, + { + "name": "packageInfoReference", + "type": "PACKAGE_INFO_REFERENCE" + } + ], + "ClosePackageInfo": [ + { + "name": "packageInfoReference", + "type": "PACKAGE_INFO_REFERENCE" + } + ], + "GetPackageInfo": [ + { + "name": "packageInfoReference", + "type": "PACKAGE_INFO_REFERENCE" + }, + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + }, + { + "name": "count", + "type": "UINT32" + } + ], + "GetPackageApplicationIds": [ + { + "name": "packageInfoReference", + "type": "PACKAGE_INFO_REFERENCE" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + }, + { + "name": "count", + "type": "UINT32" + } + ], + "AppPolicyGetLifecycleManagement": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyLifecycleManagement" + } + ], + "AppPolicyGetWindowingModel": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyWindowingModel" + } + ], + "AppPolicyGetMediaFoundationCodecLoading": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyMediaFoundationCodecLoading" + } + ], + "AppPolicyGetClrCompat": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyClrCompat" + } + ], + "AppPolicyGetThreadInitializationType": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyThreadInitializationType" + } + ], + "AppPolicyGetShowDeveloperDiagnostic": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyShowDeveloperDiagnostic" + } + ], + "AppPolicyGetProcessTerminationMethod": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyProcessTerminationMethod" + } + ], + "AppPolicyGetCreateFileAccess": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyCreateFileAccess" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/appnotify.json b/qiling/extensions/windows_sdk/appnotify.json new file mode 100644 index 000000000..f01df8e94 --- /dev/null +++ b/qiling/extensions/windows_sdk/appnotify.json @@ -0,0 +1,22 @@ +{ + "RegisterAppStateChangeNotification": [ + { + "name": "Routine", + "type": "PAPPSTATE_CHANGE_ROUTINE" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "Registration", + "type": "PAPPSTATE_REGISTRATION" + } + ], + "UnregisterAppStateChangeNotification": [ + { + "name": "Registration", + "type": "PAPPSTATE_REGISTRATION" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/atacct.json b/qiling/extensions/windows_sdk/atacct.json new file mode 100644 index 000000000..69a0e61ca --- /dev/null +++ b/qiling/extensions/windows_sdk/atacct.json @@ -0,0 +1,30 @@ +{ + "GetNetScheduleAccountInformation": [ + { + "name": "pwszServerName", + "type": "LPCWSTR" + }, + { + "name": "ccAccount", + "type": "DWORD" + }, + { + "name": "wszAccount", + "type": "WCHAR" + } + ], + "SetNetScheduleAccountInformation": [ + { + "name": "pwszServerName", + "type": "LPCWSTR" + }, + { + "name": "pwszAccount", + "type": "LPCWSTR" + }, + { + "name": "pwszPassword", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/atlthunk.json b/qiling/extensions/windows_sdk/atlthunk.json new file mode 100644 index 000000000..0b0581559 --- /dev/null +++ b/qiling/extensions/windows_sdk/atlthunk.json @@ -0,0 +1,28 @@ +{ + "AtlThunk_InitData": [ + { + "name": "Thunk", + "type": "AtlThunkData_t" + }, + { + "name": "Proc", + "type": "void" + }, + { + "name": "FirstParameter", + "type": "size_t" + } + ], + "AtlThunk_DataToCode": [ + { + "name": "VOID", + "type": "AtlThunkData_t" + } + ], + "AtlThunk_FreeData": [ + { + "name": "Thunk", + "type": "AtlThunkData_t" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/authz.json b/qiling/extensions/windows_sdk/authz.json new file mode 100644 index 000000000..c144c54b4 --- /dev/null +++ b/qiling/extensions/windows_sdk/authz.json @@ -0,0 +1,590 @@ +{ + "AuthzAccessCheck": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "pRequest", + "type": "PAUTHZ_ACCESS_REQUEST" + }, + { + "name": "hAuditEvent", + "type": "AUTHZ_AUDIT_EVENT_HANDLE" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "OptionalSecurityDescriptorArray", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "OptionalSecurityDescriptorCount", + "type": "DWORD" + }, + { + "name": "pReply", + "type": "PAUTHZ_ACCESS_REPLY" + }, + { + "name": "phAccessCheckResults", + "type": "PAUTHZ_ACCESS_CHECK_RESULTS_HANDLE" + } + ], + "AuthzCachedAccessCheck": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hAccessCheckResults", + "type": "AUTHZ_ACCESS_CHECK_RESULTS_HANDLE" + }, + { + "name": "pRequest", + "type": "PAUTHZ_ACCESS_REQUEST" + }, + { + "name": "hAuditEvent", + "type": "AUTHZ_AUDIT_EVENT_HANDLE" + }, + { + "name": "pReply", + "type": "PAUTHZ_ACCESS_REPLY" + } + ], + "AuthzOpenObjectAudit": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "pRequest", + "type": "PAUTHZ_ACCESS_REQUEST" + }, + { + "name": "hAuditEvent", + "type": "AUTHZ_AUDIT_EVENT_HANDLE" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "OptionalSecurityDescriptorArray", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "OptionalSecurityDescriptorCount", + "type": "DWORD" + }, + { + "name": "pReply", + "type": "PAUTHZ_ACCESS_REPLY" + } + ], + "AuthzFreeHandle": [ + { + "name": "hAccessCheckResults", + "type": "AUTHZ_ACCESS_CHECK_RESULTS_HANDLE" + } + ], + "AuthzInitializeResourceManager": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pfnDynamicAccessCheck", + "type": "PFN_AUTHZ_DYNAMIC_ACCESS_CHECK" + }, + { + "name": "pfnComputeDynamicGroups", + "type": "PFN_AUTHZ_COMPUTE_DYNAMIC_GROUPS" + }, + { + "name": "pfnFreeDynamicGroups", + "type": "PFN_AUTHZ_FREE_DYNAMIC_GROUPS" + }, + { + "name": "szResourceManagerName", + "type": "PCWSTR" + }, + { + "name": "phAuthzResourceManager", + "type": "PAUTHZ_RESOURCE_MANAGER_HANDLE" + } + ], + "AuthzInitializeResourceManagerEx": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pAuthzInitInfo", + "type": "PAUTHZ_INIT_INFO" + }, + { + "name": "phAuthzResourceManager", + "type": "PAUTHZ_RESOURCE_MANAGER_HANDLE" + } + ], + "AuthzInitializeRemoteResourceManager": [ + { + "name": "pRpcInitInfo", + "type": "PAUTHZ_RPC_INIT_INFO_CLIENT" + }, + { + "name": "phAuthzResourceManager", + "type": "PAUTHZ_RESOURCE_MANAGER_HANDLE" + } + ], + "AuthzFreeResourceManager": [ + { + "name": "hAuthzResourceManager", + "type": "AUTHZ_RESOURCE_MANAGER_HANDLE" + } + ], + "AuthzInitializeContextFromToken": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "hAuthzResourceManager", + "type": "AUTHZ_RESOURCE_MANAGER_HANDLE" + }, + { + "name": "pExpirationTime", + "type": "PLARGE_INTEGER" + }, + { + "name": "Identifier", + "type": "LUID" + }, + { + "name": "DynamicGroupArgs", + "type": "PVOID" + }, + { + "name": "phAuthzClientContext", + "type": "PAUTHZ_CLIENT_CONTEXT_HANDLE" + } + ], + "AuthzInitializeContextFromSid": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "UserSid", + "type": "PSID" + }, + { + "name": "hAuthzResourceManager", + "type": "AUTHZ_RESOURCE_MANAGER_HANDLE" + }, + { + "name": "pExpirationTime", + "type": "PLARGE_INTEGER" + }, + { + "name": "Identifier", + "type": "LUID" + }, + { + "name": "DynamicGroupArgs", + "type": "PVOID" + }, + { + "name": "phAuthzClientContext", + "type": "PAUTHZ_CLIENT_CONTEXT_HANDLE" + } + ], + "AuthzInitializeContextFromAuthzContext": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "pExpirationTime", + "type": "PLARGE_INTEGER" + }, + { + "name": "Identifier", + "type": "LUID" + }, + { + "name": "DynamicGroupArgs", + "type": "PVOID" + }, + { + "name": "phNewAuthzClientContext", + "type": "PAUTHZ_CLIENT_CONTEXT_HANDLE" + } + ], + "AuthzInitializeCompoundContext": [ + { + "name": "UserContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "DeviceContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "phCompoundContext", + "type": "PAUTHZ_CLIENT_CONTEXT_HANDLE" + } + ], + "AuthzAddSidsToContext": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "Sids", + "type": "PSID_AND_ATTRIBUTES" + }, + { + "name": "SidCount", + "type": "DWORD" + }, + { + "name": "RestrictedSids", + "type": "PSID_AND_ATTRIBUTES" + }, + { + "name": "RestrictedSidCount", + "type": "DWORD" + }, + { + "name": "phNewAuthzClientContext", + "type": "PAUTHZ_CLIENT_CONTEXT_HANDLE" + } + ], + "AuthzModifySecurityAttributes": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "pOperations", + "type": "PAUTHZ_SECURITY_ATTRIBUTE_OPERATION" + }, + { + "name": "pAttributes", + "type": "PAUTHZ_SECURITY_ATTRIBUTES_INFORMATION" + } + ], + "AuthzModifyClaims": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "ClaimClass", + "type": "AUTHZ_CONTEXT_INFORMATION_CLASS" + }, + { + "name": "pClaimOperations", + "type": "PAUTHZ_SECURITY_ATTRIBUTE_OPERATION" + }, + { + "name": "pClaims", + "type": "PAUTHZ_SECURITY_ATTRIBUTES_INFORMATION" + } + ], + "AuthzModifySids": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "SidClass", + "type": "AUTHZ_CONTEXT_INFORMATION_CLASS" + }, + { + "name": "pSidOperations", + "type": "PAUTHZ_SID_OPERATION" + }, + { + "name": "pSids", + "type": "PTOKEN_GROUPS" + } + ], + "AuthzSetAppContainerInformation": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "pAppContainerSid", + "type": "PSID" + }, + { + "name": "CapabilityCount", + "type": "DWORD" + }, + { + "name": "pCapabilitySids", + "type": "PSID_AND_ATTRIBUTES" + } + ], + "AuthzGetInformationFromContext": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + }, + { + "name": "InfoClass", + "type": "AUTHZ_CONTEXT_INFORMATION_CLASS" + }, + { + "name": "BufferSize", + "type": "DWORD" + }, + { + "name": "pSizeRequired", + "type": "PDWORD" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "AuthzFreeContext": [ + { + "name": "hAuthzClientContext", + "type": "AUTHZ_CLIENT_CONTEXT_HANDLE" + } + ], + "AuthzInitializeObjectAccessAuditEvent": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hAuditEventType", + "type": "AUTHZ_AUDIT_EVENT_TYPE_HANDLE" + }, + { + "name": "szOperationType", + "type": "PWSTR" + }, + { + "name": "szObjectType", + "type": "PWSTR" + }, + { + "name": "szObjectName", + "type": "PWSTR" + }, + { + "name": "szAdditionalInfo", + "type": "PWSTR" + }, + { + "name": "phAuditEvent", + "type": "PAUTHZ_AUDIT_EVENT_HANDLE" + }, + { + "name": "dwAdditionalParameterCount", + "type": "DWORD" + } + ], + "AuthzInitializeObjectAccessAuditEvent2": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hAuditEventType", + "type": "AUTHZ_AUDIT_EVENT_TYPE_HANDLE" + }, + { + "name": "szOperationType", + "type": "PWSTR" + }, + { + "name": "szObjectType", + "type": "PWSTR" + }, + { + "name": "szObjectName", + "type": "PWSTR" + }, + { + "name": "szAdditionalInfo", + "type": "PWSTR" + }, + { + "name": "szAdditionalInfo2", + "type": "PWSTR" + }, + { + "name": "phAuditEvent", + "type": "PAUTHZ_AUDIT_EVENT_HANDLE" + }, + { + "name": "dwAdditionalParameterCount", + "type": "DWORD" + } + ], + "AuthzFreeAuditEvent": [ + { + "name": "hAuditEvent", + "type": "AUTHZ_AUDIT_EVENT_HANDLE" + } + ], + "AuthzInstallSecurityEventSource": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pRegistration", + "type": "PAUTHZ_SOURCE_SCHEMA_REGISTRATION" + } + ], + "AuthzUninstallSecurityEventSource": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "szEventSourceName", + "type": "PCWSTR" + } + ], + "AuthzEnumerateSecurityEventSources": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "PAUTHZ_SOURCE_SCHEMA_REGISTRATION" + }, + { + "name": "pdwCount", + "type": "PDWORD" + }, + { + "name": "pdwLength", + "type": "PDWORD" + } + ], + "AuthzRegisterSecurityEventSource": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "szEventSourceName", + "type": "PCWSTR" + }, + { + "name": "phEventProvider", + "type": "PAUTHZ_SECURITY_EVENT_PROVIDER_HANDLE" + } + ], + "AuthzUnregisterSecurityEventSource": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phEventProvider", + "type": "PAUTHZ_SECURITY_EVENT_PROVIDER_HANDLE" + } + ], + "AuthzReportSecurityEvent": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hEventProvider", + "type": "AUTHZ_SECURITY_EVENT_PROVIDER_HANDLE" + }, + { + "name": "dwAuditId", + "type": "DWORD" + }, + { + "name": "pUserSid", + "type": "PSID" + }, + { + "name": "dwCount", + "type": "DWORD" + } + ], + "AuthzReportSecurityEventFromParams": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hEventProvider", + "type": "AUTHZ_SECURITY_EVENT_PROVIDER_HANDLE" + }, + { + "name": "dwAuditId", + "type": "DWORD" + }, + { + "name": "pUserSid", + "type": "PSID" + }, + { + "name": "pParams", + "type": "PAUDIT_PARAMS" + } + ], + "AuthzRegisterCapChangeNotification": [ + { + "name": "phCapChangeSubscription", + "type": "PAUTHZ_CAP_CHANGE_SUBSCRIPTION_HANDLE" + }, + { + "name": "pfnCapChangeCallback", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pCallbackContext", + "type": "PVOID" + } + ], + "AuthzUnregisterCapChangeNotification": [ + { + "name": "hCapChangeSubscription", + "type": "AUTHZ_CAP_CHANGE_SUBSCRIPTION_HANDLE" + } + ], + "AuthzFreeCentralAccessPolicyCache": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/avrfsdk.json b/qiling/extensions/windows_sdk/avrfsdk.json new file mode 100644 index 000000000..bf7aad054 --- /dev/null +++ b/qiling/extensions/windows_sdk/avrfsdk.json @@ -0,0 +1,30 @@ +{ + "VerifierEnumerateResource": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "ResourceType", + "type": "ULONG" + }, + { + "name": "ResourceCallback", + "type": "AVRF_RESOURCE_ENUMERATE_CALLBACK" + }, + { + "name": "EnumerationContext", + "type": "PVOID" + } + ], + "VerifierIsPerUserSettingsEnabled": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/avrt.json b/qiling/extensions/windows_sdk/avrt.json new file mode 100644 index 000000000..e0081e513 --- /dev/null +++ b/qiling/extensions/windows_sdk/avrt.json @@ -0,0 +1,170 @@ +{ + "AvSetMmThreadCharacteristicsA": [ + { + "name": "TaskName", + "type": "LPCSTR" + }, + { + "name": "TaskIndex", + "type": "LPDWORD" + } + ], + "AvSetMmThreadCharacteristicsW": [ + { + "name": "TaskName", + "type": "LPCWSTR" + }, + { + "name": "TaskIndex", + "type": "LPDWORD" + } + ], + "AvSetMmMaxThreadCharacteristicsA": [ + { + "name": "FirstTask", + "type": "LPCSTR" + }, + { + "name": "SecondTask", + "type": "LPCSTR" + }, + { + "name": "TaskIndex", + "type": "LPDWORD" + } + ], + "AvSetMmMaxThreadCharacteristicsW": [ + { + "name": "FirstTask", + "type": "LPCWSTR" + }, + { + "name": "SecondTask", + "type": "LPCWSTR" + }, + { + "name": "TaskIndex", + "type": "LPDWORD" + } + ], + "AvRevertMmThreadCharacteristics": [ + { + "name": "AvrtHandle", + "type": "HANDLE" + } + ], + "AvSetMmThreadPriority": [ + { + "name": "AvrtHandle", + "type": "HANDLE" + }, + { + "name": "Priority", + "type": "AVRT_PRIORITY" + } + ], + "AvRtCreateThreadOrderingGroup": [ + { + "name": "Context", + "type": "PHANDLE" + }, + { + "name": "Period", + "type": "PLARGE_INTEGER" + }, + { + "name": "ThreadOrderingGuid", + "type": "GUID" + }, + { + "name": "Timeout", + "type": "PLARGE_INTEGER" + } + ], + "AvRtCreateThreadOrderingGroupExA": [ + { + "name": "Context", + "type": "PHANDLE" + }, + { + "name": "Period", + "type": "PLARGE_INTEGER" + }, + { + "name": "ThreadOrderingGuid", + "type": "GUID" + }, + { + "name": "Timeout", + "type": "PLARGE_INTEGER" + }, + { + "name": "TaskName", + "type": "LPCSTR" + } + ], + "AvRtCreateThreadOrderingGroupExW": [ + { + "name": "Context", + "type": "PHANDLE" + }, + { + "name": "Period", + "type": "PLARGE_INTEGER" + }, + { + "name": "ThreadOrderingGuid", + "type": "GUID" + }, + { + "name": "Timeout", + "type": "PLARGE_INTEGER" + }, + { + "name": "TaskName", + "type": "LPCWSTR" + } + ], + "AvRtJoinThreadOrderingGroup": [ + { + "name": "Context", + "type": "PHANDLE" + }, + { + "name": "ThreadOrderingGuid", + "type": "GUID" + }, + { + "name": "Before", + "type": "BOOL" + } + ], + "AvRtWaitOnThreadOrderingGroup": [ + { + "name": "Context", + "type": "HANDLE" + } + ], + "AvRtLeaveThreadOrderingGroup": [ + { + "name": "Context", + "type": "HANDLE" + } + ], + "AvRtDeleteThreadOrderingGroup": [ + { + "name": "Context", + "type": "HANDLE" + } + ], + "AvQuerySystemResponsiveness": [ + { + "name": "AvrtHandle", + "type": "HANDLE" + }, + { + "name": "SystemResponsivenessValue", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/bcrypt.json b/qiling/extensions/windows_sdk/bcrypt.json new file mode 100644 index 000000000..ba10490c0 --- /dev/null +++ b/qiling/extensions/windows_sdk/bcrypt.json @@ -0,0 +1,1140 @@ +{ + "BCryptOpenAlgorithmProvider": [ + { + "name": "phAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "pszAlgId", + "type": "LPCWSTR" + }, + { + "name": "pszImplementation", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptEnumAlgorithms": [ + { + "name": "dwAlgOperations", + "type": "ULONG" + }, + { + "name": "pAlgCount", + "type": "ULONG" + }, + { + "name": "ppAlgList", + "type": "BCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptEnumProviders": [ + { + "name": "pszAlgId", + "type": "LPCWSTR" + }, + { + "name": "pImplCount", + "type": "ULONG" + }, + { + "name": "ppImplList", + "type": "BCRYPT_PROVIDER_NAME" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptGetProperty": [ + { + "name": "hObject", + "type": "BCRYPT_HANDLE" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptSetProperty": [ + { + "name": "hObject", + "type": "BCRYPT_HANDLE" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptCloseAlgorithmProvider": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptFreeBuffer": [ + { + "name": "pvBuffer", + "type": "PVOID" + } + ], + "BCryptGenerateSymmetricKey": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pbKeyObject", + "type": "PUCHAR" + }, + { + "name": "cbKeyObject", + "type": "ULONG" + }, + { + "name": "pbSecret", + "type": "PUCHAR" + }, + { + "name": "cbSecret", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptGenerateKeyPair": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "dwLength", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptEncrypt": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbIV", + "type": "PUCHAR" + }, + { + "name": "cbIV", + "type": "ULONG" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDecrypt": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbIV", + "type": "PUCHAR" + }, + { + "name": "cbIV", + "type": "ULONG" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptExportKey": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "hExportKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pszBlobType", + "type": "LPCWSTR" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptImportKey": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "hImportKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pszBlobType", + "type": "LPCWSTR" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pbKeyObject", + "type": "PUCHAR" + }, + { + "name": "cbKeyObject", + "type": "ULONG" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptImportKeyPair": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "hImportKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pszBlobType", + "type": "LPCWSTR" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDuplicateKey": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "phNewKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pbKeyObject", + "type": "PUCHAR" + }, + { + "name": "cbKeyObject", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptFinalizeKeyPair": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDestroyKey": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + } + ], + "BCryptDestroySecret": [ + { + "name": "hSecret", + "type": "BCRYPT_SECRET_HANDLE" + } + ], + "BCryptSignHash": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptVerifySignature": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbHash", + "type": "PUCHAR" + }, + { + "name": "cbHash", + "type": "ULONG" + }, + { + "name": "pbSignature", + "type": "PUCHAR" + }, + { + "name": "cbSignature", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptSecretAgreement": [ + { + "name": "hPrivKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "hPubKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "phAgreedSecret", + "type": "BCRYPT_SECRET_HANDLE" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDeriveKey": [ + { + "name": "hSharedSecret", + "type": "BCRYPT_SECRET_HANDLE" + }, + { + "name": "pwszKDF", + "type": "LPCWSTR" + }, + { + "name": "pParameterList", + "type": "BCryptBufferDesc" + }, + { + "name": "pbDerivedKey", + "type": "PUCHAR" + }, + { + "name": "cbDerivedKey", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptKeyDerivation": [ + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "pParameterList", + "type": "BCryptBufferDesc" + }, + { + "name": "pbDerivedKey", + "type": "PUCHAR" + }, + { + "name": "cbDerivedKey", + "type": "ULONG" + }, + { + "name": "pcbResult", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptCreateHash": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "phHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "pbHashObject", + "type": "PUCHAR" + }, + { + "name": "cbHashObject", + "type": "ULONG" + }, + { + "name": "pbSecret", + "type": "PUCHAR" + }, + { + "name": "cbSecret", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptHashData": [ + { + "name": "hHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptFinishHash": [ + { + "name": "hHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptCreateMultiHash": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "phHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "nHashes", + "type": "ULONG" + }, + { + "name": "pbHashObject", + "type": "PUCHAR" + }, + { + "name": "cbHashObject", + "type": "ULONG" + }, + { + "name": "pbSecret", + "type": "PUCHAR" + }, + { + "name": "cbSecret", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptProcessMultiOperations": [ + { + "name": "hObject", + "type": "BCRYPT_HANDLE" + }, + { + "name": "operationType", + "type": "BCRYPT_MULTI_OPERATION_TYPE" + }, + { + "name": "pOperations", + "type": "PVOID" + }, + { + "name": "cbOperations", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDuplicateHash": [ + { + "name": "hHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "phNewHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "pbHashObject", + "type": "PUCHAR" + }, + { + "name": "cbHashObject", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDestroyHash": [ + { + "name": "hHash", + "type": "BCRYPT_HASH_HANDLE" + } + ], + "BCryptHash": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "pbSecret", + "type": "PUCHAR" + }, + { + "name": "cbSecret", + "type": "ULONG" + }, + { + "name": "pbInput", + "type": "PUCHAR" + }, + { + "name": "cbInput", + "type": "ULONG" + }, + { + "name": "pbOutput", + "type": "PUCHAR" + }, + { + "name": "cbOutput", + "type": "ULONG" + } + ], + "BCryptGenRandom": [ + { + "name": "hAlgorithm", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "pbBuffer", + "type": "PUCHAR" + }, + { + "name": "cbBuffer", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDeriveKeyCapi": [ + { + "name": "hHash", + "type": "BCRYPT_HASH_HANDLE" + }, + { + "name": "hTargetAlg", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "pbDerivedKey", + "type": "PUCHAR" + }, + { + "name": "cbDerivedKey", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptDeriveKeyPBKDF2": [ + { + "name": "hPrf", + "type": "BCRYPT_ALG_HANDLE" + }, + { + "name": "pbPassword", + "type": "PUCHAR" + }, + { + "name": "cbPassword", + "type": "ULONG" + }, + { + "name": "pbSalt", + "type": "PUCHAR" + }, + { + "name": "cbSalt", + "type": "ULONG" + }, + { + "name": "cIterations", + "type": "ULONGLONG" + }, + { + "name": "pbDerivedKey", + "type": "PUCHAR" + }, + { + "name": "cbDerivedKey", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "BCryptQueryProviderRegistration": [ + { + "name": "pszProvider", + "type": "LPCWSTR" + }, + { + "name": "dwMode", + "type": "ULONG" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_PROVIDER_REG" + } + ], + "BCryptEnumRegisteredProviders": [ + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_PROVIDERS" + } + ], + "BCryptCreateContext": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "pConfig", + "type": "PCRYPT_CONTEXT_CONFIG" + } + ], + "BCryptDeleteContext": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + } + ], + "BCryptEnumContexts": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_CONTEXTS" + } + ], + "BCryptConfigureContext": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "pConfig", + "type": "PCRYPT_CONTEXT_CONFIG" + } + ], + "BCryptQueryContextConfiguration": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_CONTEXT_CONFIG" + } + ], + "BCryptAddContextFunction": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "dwPosition", + "type": "ULONG" + } + ], + "BCryptRemoveContextFunction": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + } + ], + "BCryptEnumContextFunctions": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_CONTEXT_FUNCTIONS" + } + ], + "BCryptConfigureContextFunction": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "pConfig", + "type": "PCRYPT_CONTEXT_FUNCTION_CONFIG" + } + ], + "BCryptQueryContextFunctionConfiguration": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_CONTEXT_FUNCTION_CONFIG" + } + ], + "BCryptEnumContextFunctionProviders": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_CONTEXT_FUNCTION_PROVIDERS" + } + ], + "BCryptSetContextFunctionProperty": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "cbValue", + "type": "ULONG" + }, + { + "name": "pbValue", + "type": "PUCHAR" + } + ], + "BCryptQueryContextFunctionProperty": [ + { + "name": "dwTable", + "type": "ULONG" + }, + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "pcbValue", + "type": "ULONG" + }, + { + "name": "ppbValue", + "type": "PUCHAR" + } + ], + "BCryptRegisterConfigChangeNotify": [ + { + "name": "phEvent", + "type": "HANDLE" + } + ], + "BCryptUnregisterConfigChangeNotify": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "BCryptResolveProviders": [ + { + "name": "pszContext", + "type": "LPCWSTR" + }, + { + "name": "dwInterface", + "type": "ULONG" + }, + { + "name": "pszFunction", + "type": "LPCWSTR" + }, + { + "name": "pszProvider", + "type": "LPCWSTR" + }, + { + "name": "dwMode", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pcbBuffer", + "type": "ULONG" + }, + { + "name": "ppBuffer", + "type": "PCRYPT_PROVIDER_REFS" + } + ], + "BCryptGetFipsAlgorithmMode": [ + { + "name": "pfEnabled", + "type": "BOOLEAN" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/bluetoothapis.json b/qiling/extensions/windows_sdk/bluetoothapis.json new file mode 100644 index 000000000..51ef19def --- /dev/null +++ b/qiling/extensions/windows_sdk/bluetoothapis.json @@ -0,0 +1,426 @@ +{ + "BluetoothFindFirstRadio": [ + { + "name": "pbtfrp", + "type": "BLUETOOTH_FIND_RADIO_PARAMS" + }, + { + "name": "phRadio", + "type": "HANDLE" + } + ], + "BluetoothFindNextRadio": [ + { + "name": "hFind", + "type": "HBLUETOOTH_RADIO_FIND" + }, + { + "name": "phRadio", + "type": "HANDLE" + } + ], + "BluetoothFindRadioClose": [ + { + "name": "hFind", + "type": "HBLUETOOTH_RADIO_FIND" + } + ], + "BluetoothGetRadioInfo": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pRadioInfo", + "type": "PBLUETOOTH_RADIO_INFO" + } + ], + "BluetoothFindFirstDevice": [ + { + "name": "pbtsp", + "type": "BLUETOOTH_DEVICE_SEARCH_PARAMS" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothFindNextDevice": [ + { + "name": "hFind", + "type": "HBLUETOOTH_DEVICE_FIND" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothFindDeviceClose": [ + { + "name": "hFind", + "type": "HBLUETOOTH_DEVICE_FIND" + } + ], + "BluetoothGetDeviceInfo": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothUpdateDeviceRecord": [ + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothRemoveDevice": [ + { + "name": "pAddress", + "type": "BLUETOOTH_ADDRESS_STRUCT" + } + ], + "BluetoothSelectDevices": [ + { + "name": "pbtsdp", + "type": "BLUETOOTH_SELECT_DEVICE_PARAMS" + } + ], + "BluetoothSelectDevicesFree": [ + { + "name": "pbtsdp", + "type": "BLUETOOTH_SELECT_DEVICE_PARAMS" + } + ], + "BluetoothDisplayDeviceProperties": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothAuthenticateDevice": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtbi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pszPasskey", + "type": "PWSTR" + }, + { + "name": "ulPasskeyLength", + "type": "ULONG" + } + ], + "BluetoothAuthenticateDeviceEx": [ + { + "name": "hwndParentIn", + "type": "HWND" + }, + { + "name": "hRadioIn", + "type": "HANDLE" + }, + { + "name": "pbtdiInout", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pbtOobData", + "type": "PBLUETOOTH_OOB_DATA_INFO" + }, + { + "name": "authenticationRequirement", + "type": "AUTHENTICATION_REQUIREMENTS" + } + ], + "BluetoothAuthenticateMultipleDevices": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "cDevices", + "type": "DWORD" + }, + { + "name": "rgbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothSetServiceState": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pGuidService", + "type": "GUID" + }, + { + "name": "dwServiceFlags", + "type": "DWORD" + } + ], + "BluetoothEnumerateInstalledServices": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pcServiceInout", + "type": "DWORD" + }, + { + "name": "pGuidServices", + "type": "GUID" + } + ], + "BluetoothEnableDiscovery": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "fEnabled", + "type": "BOOL" + } + ], + "BluetoothIsDiscoverable": [ + { + "name": "hRadio", + "type": "HANDLE" + } + ], + "BluetoothEnableIncomingConnections": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "fEnabled", + "type": "BOOL" + } + ], + "BluetoothIsConnectable": [ + { + "name": "hRadio", + "type": "HANDLE" + } + ], + "BluetoothRegisterForAuthentication": [ + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "phRegHandle", + "type": "HBLUETOOTH_AUTHENTICATION_REGISTRATION" + }, + { + "name": "pfnCallback", + "type": "PFN_AUTHENTICATION_CALLBACK" + }, + { + "name": "pvParam", + "type": "PVOID" + } + ], + "BluetoothRegisterForAuthenticationEx": [ + { + "name": "pbtdiIn", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "phRegHandleOut", + "type": "HBLUETOOTH_AUTHENTICATION_REGISTRATION" + }, + { + "name": "pfnCallbackIn", + "type": "PFN_AUTHENTICATION_CALLBACK_EX" + }, + { + "name": "pvParam", + "type": "PVOID" + } + ], + "BluetoothUnregisterAuthentication": [ + { + "name": "hRegHandle", + "type": "HBLUETOOTH_AUTHENTICATION_REGISTRATION" + } + ], + "BluetoothSendAuthenticationResponse": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pszPasskey", + "type": "LPCWSTR" + } + ], + "BluetoothSendAuthenticationResponseEx": [ + { + "name": "hRadioIn", + "type": "HANDLE" + }, + { + "name": "pauthResponse", + "type": "PBLUETOOTH_AUTHENTICATE_RESPONSE" + } + ], + "BluetoothSdpGetElementData": [ + { + "name": "pSdpStream", + "type": "LPBYTE" + }, + { + "name": "cbSdpStreamLength", + "type": "ULONG" + }, + { + "name": "pData", + "type": "PSDP_ELEMENT_DATA" + } + ], + "BluetoothSdpGetContainerElementData": [ + { + "name": "pContainerStream", + "type": "LPBYTE" + }, + { + "name": "cbContainerLength", + "type": "ULONG" + }, + { + "name": "pElement", + "type": "HBLUETOOTH_CONTAINER_ELEMENT" + }, + { + "name": "pData", + "type": "PSDP_ELEMENT_DATA" + } + ], + "BluetoothSdpGetAttributeValue": [ + { + "name": "pRecordStream", + "type": "LPBYTE" + }, + { + "name": "cbRecordLength", + "type": "ULONG" + }, + { + "name": "usAttributeId", + "type": "USHORT" + }, + { + "name": "pAttributeData", + "type": "PSDP_ELEMENT_DATA" + } + ], + "BluetoothSdpGetString": [ + { + "name": "pRecordStream", + "type": "LPBYTE" + }, + { + "name": "cbRecordLength", + "type": "ULONG" + }, + { + "name": "pStringData", + "type": "PSDP_STRING_TYPE_DATA" + }, + { + "name": "usStringOffset", + "type": "USHORT" + }, + { + "name": "pszString", + "type": "PWSTR" + }, + { + "name": "pcchStringLength", + "type": "PULONG" + } + ], + "BluetoothSdpEnumAttributes": [ + { + "name": "pSDPStream", + "type": "LPBYTE" + }, + { + "name": "cbStreamSize", + "type": "ULONG" + }, + { + "name": "pfnCallback", + "type": "PFN_BLUETOOTH_ENUM_ATTRIBUTES_CALLBACK" + }, + { + "name": "pvParam", + "type": "LPVOID" + } + ], + "BluetoothSetLocalServiceInfo": [ + { + "name": "hRadioIn", + "type": "HANDLE" + }, + { + "name": "pClassGuid", + "type": "GUID" + }, + { + "name": "ulInstance", + "type": "ULONG" + }, + { + "name": "pServiceInfoIn", + "type": "BLUETOOTH_LOCAL_SERVICE_INFO_STRUCT" + } + ], + "BluetoothIsVersionAvailable": [ + { + "name": "MajorVersion", + "type": "UCHAR" + }, + { + "name": "MinorVersion", + "type": "UCHAR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/bluetoothleapis.json b/qiling/extensions/windows_sdk/bluetoothleapis.json new file mode 100644 index 000000000..fe01e43b1 --- /dev/null +++ b/qiling/extensions/windows_sdk/bluetoothleapis.json @@ -0,0 +1,276 @@ +{ + "BluetoothGATTGetServices": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "ServicesBufferCount", + "type": "USHORT" + }, + { + "name": "ServicesBuffer", + "type": "PBTH_LE_GATT_SERVICE" + }, + { + "name": "ServicesBufferActual", + "type": "USHORT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTGetIncludedServices": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "ParentService", + "type": "PBTH_LE_GATT_SERVICE" + }, + { + "name": "IncludedServicesBufferCount", + "type": "USHORT" + }, + { + "name": "IncludedServicesBuffer", + "type": "PBTH_LE_GATT_SERVICE" + }, + { + "name": "IncludedServicesBufferActual", + "type": "USHORT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTGetCharacteristics": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "Service", + "type": "PBTH_LE_GATT_SERVICE" + }, + { + "name": "CharacteristicsBufferCount", + "type": "USHORT" + }, + { + "name": "CharacteristicsBuffer", + "type": "PBTH_LE_GATT_CHARACTERISTIC" + }, + { + "name": "CharacteristicsBufferActual", + "type": "USHORT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTGetDescriptors": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "Characteristic", + "type": "PBTH_LE_GATT_CHARACTERISTIC" + }, + { + "name": "DescriptorsBufferCount", + "type": "USHORT" + }, + { + "name": "DescriptorsBuffer", + "type": "PBTH_LE_GATT_DESCRIPTOR" + }, + { + "name": "DescriptorsBufferActual", + "type": "USHORT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTGetCharacteristicValue": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "Characteristic", + "type": "PBTH_LE_GATT_CHARACTERISTIC" + }, + { + "name": "CharacteristicValueDataSize", + "type": "ULONG" + }, + { + "name": "CharacteristicValue", + "type": "PBTH_LE_GATT_CHARACTERISTIC_VALUE" + }, + { + "name": "CharacteristicValueSizeRequired", + "type": "USHORT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTGetDescriptorValue": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "Descriptor", + "type": "PBTH_LE_GATT_DESCRIPTOR" + }, + { + "name": "DescriptorValueDataSize", + "type": "ULONG" + }, + { + "name": "DescriptorValue", + "type": "PBTH_LE_GATT_DESCRIPTOR_VALUE" + }, + { + "name": "DescriptorValueSizeRequired", + "type": "USHORT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTBeginReliableWrite": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "ReliableWriteContext", + "type": "PBTH_LE_GATT_RELIABLE_WRITE_CONTEXT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTSetCharacteristicValue": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "Characteristic", + "type": "PBTH_LE_GATT_CHARACTERISTIC" + }, + { + "name": "CharacteristicValue", + "type": "PBTH_LE_GATT_CHARACTERISTIC_VALUE" + }, + { + "name": "ReliableWriteContext", + "type": "BTH_LE_GATT_RELIABLE_WRITE_CONTEXT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTEndReliableWrite": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "ReliableWriteContext", + "type": "BTH_LE_GATT_RELIABLE_WRITE_CONTEXT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTAbortReliableWrite": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "ReliableWriteContext", + "type": "BTH_LE_GATT_RELIABLE_WRITE_CONTEXT" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTSetDescriptorValue": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "Descriptor", + "type": "PBTH_LE_GATT_DESCRIPTOR" + }, + { + "name": "DescriptorValue", + "type": "PBTH_LE_GATT_DESCRIPTOR_VALUE" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTRegisterEvent": [ + { + "name": "hService", + "type": "HANDLE" + }, + { + "name": "EventType", + "type": "BTH_LE_GATT_EVENT_TYPE" + }, + { + "name": "EventParameterIn", + "type": "PVOID" + }, + { + "name": "Callback", + "type": "PFNBLUETOOTH_GATT_EVENT_CALLBACK" + }, + { + "name": "CallbackContext", + "type": "PVOID" + }, + { + "name": "pEventHandle", + "type": "BLUETOOTH_GATT_EVENT_HANDLE" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "BluetoothGATTUnregisterEvent": [ + { + "name": "EventHandle", + "type": "BLUETOOTH_GATT_EVENT_HANDLE" + }, + { + "name": "Flags", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/callobj.json b/qiling/extensions/windows_sdk/callobj.json new file mode 100644 index 000000000..263e3d656 --- /dev/null +++ b/qiling/extensions/windows_sdk/callobj.json @@ -0,0 +1,20 @@ +{ + "CoGetInterceptor": [ + { + "name": "iidIntercepted", + "type": "IID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/certbcli.json b/qiling/extensions/windows_sdk/certbcli.json new file mode 100644 index 000000000..126e75cb9 --- /dev/null +++ b/qiling/extensions/windows_sdk/certbcli.json @@ -0,0 +1,262 @@ +{ + "CertSrvIsServerOnlineW": [ + { + "name": "pwszServerName", + "type": "WCHAR" + }, + { + "name": "pfServerOnline", + "type": "BOOL" + } + ], + "CertSrvBackupGetDynamicFileListW": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "ppwszzFileList", + "type": "PWSTR" + }, + { + "name": "pcbSize", + "type": "DWORD" + } + ], + "CertSrvBackupPrepareW": [ + { + "name": "pwszServerName", + "type": "WCHAR" + }, + { + "name": "grbitJet", + "type": "ULONG" + }, + { + "name": "dwBackupFlags", + "type": "ULONG" + }, + { + "name": "phbc", + "type": "HCSBC" + } + ], + "CertSrvBackupGetDatabaseNamesW": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "ppwszzAttachmentInformation", + "type": "PWSTR" + }, + { + "name": "pcbSize", + "type": "DWORD" + } + ], + "CertSrvBackupOpenFileW": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "pwszAttachmentName", + "type": "WCHAR" + }, + { + "name": "cbReadHintSize", + "type": "DWORD" + }, + { + "name": "pliFileSize", + "type": "LARGE_INTEGER" + } + ], + "CertSrvBackupRead": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "pvBuffer", + "type": "void" + }, + { + "name": "cbBuffer", + "type": "DWORD" + }, + { + "name": "pcbRead", + "type": "DWORD" + } + ], + "CertSrvBackupClose": [ + { + "name": "hbc", + "type": "HCSBC" + } + ], + "CertSrvBackupGetBackupLogsW": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "ppwszzBackupLogFiles", + "type": "PWSTR" + }, + { + "name": "pcbSize", + "type": "DWORD" + } + ], + "CertSrvBackupTruncateLogs": [ + { + "name": "hbc", + "type": "HCSBC" + } + ], + "CertSrvBackupEnd": [ + { + "name": "hbc", + "type": "HCSBC" + } + ], + "CertSrvBackupFree": [ + { + "name": "pv", + "type": "void" + } + ], + "CertSrvRestoreGetDatabaseLocationsW": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "ppwszzDatabaseLocationList", + "type": "PWSTR" + }, + { + "name": "pcbSize", + "type": "DWORD" + } + ], + "CertSrvRestorePrepareW": [ + { + "name": "pwszServerName", + "type": "WCHAR" + }, + { + "name": "dwRestoreFlags", + "type": "ULONG" + }, + { + "name": "phbc", + "type": "HCSBC" + } + ], + "CertSrvRestoreRegisterW": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "pwszCheckPointFilePath", + "type": "WCHAR" + }, + { + "name": "pwszLogPath", + "type": "WCHAR" + }, + { + "name": "rgrstmap", + "type": "CSEDB_RSTMAPW" + }, + { + "name": "crstmap", + "type": "LONG" + }, + { + "name": "pwszBackupLogPath", + "type": "WCHAR" + }, + { + "name": "genLow", + "type": "ULONG" + }, + { + "name": "genHigh", + "type": "ULONG" + } + ], + "CertSrvRestoreRegisterThroughFile": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "pwszCheckPointFilePath", + "type": "WCHAR" + }, + { + "name": "pwszLogPath", + "type": "WCHAR" + }, + { + "name": "rgrstmap", + "type": "CSEDB_RSTMAPW" + }, + { + "name": "crstmap", + "type": "LONG" + }, + { + "name": "pwszBackupLogPath", + "type": "WCHAR" + }, + { + "name": "genLow", + "type": "ULONG" + }, + { + "name": "genHigh", + "type": "ULONG" + } + ], + "CertSrvRestoreRegisterComplete": [ + { + "name": "hbc", + "type": "HCSBC" + }, + { + "name": "hrRestoreState", + "type": "HRESULT" + } + ], + "CertSrvRestoreEnd": [ + { + "name": "hbc", + "type": "HCSBC" + } + ], + "CertSrvServerControlW": [ + { + "name": "pwszServerName", + "type": "WCHAR" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + }, + { + "name": "pcbOut", + "type": "DWORD" + }, + { + "name": "ppbOut", + "type": "BYTE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/cfapi.json b/qiling/extensions/windows_sdk/cfapi.json new file mode 100644 index 000000000..ed61d9646 --- /dev/null +++ b/qiling/extensions/windows_sdk/cfapi.json @@ -0,0 +1,476 @@ +{ + "CfGetPlatformInfo": [ + { + "name": "PlatformVersion", + "type": "CF_PLATFORM_INFO" + } + ], + "CfRegisterSyncRoot": [ + { + "name": "SyncRootPath", + "type": "LPCWSTR" + }, + { + "name": "Registration", + "type": "CF_SYNC_REGISTRATION" + }, + { + "name": "Policies", + "type": "CF_SYNC_POLICIES" + }, + { + "name": "RegisterFlags", + "type": "CF_REGISTER_FLAGS" + } + ], + "CfUnregisterSyncRoot": [ + { + "name": "SyncRootPath", + "type": "LPCWSTR" + } + ], + "CfConnectSyncRoot": [ + { + "name": "SyncRootPath", + "type": "LPCWSTR" + }, + { + "name": "CallbackTable", + "type": "CF_CALLBACK_REGISTRATION" + }, + { + "name": "CallbackContext", + "type": "LPCVOID" + }, + { + "name": "ConnectFlags", + "type": "CF_CONNECT_FLAGS" + }, + { + "name": "ConnectionKey", + "type": "CF_CONNECTION_KEY" + } + ], + "CfDisconnectSyncRoot": [ + { + "name": "ConnectionKey", + "type": "CF_CONNECTION_KEY" + } + ], + "CfGetTransferKey": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "TransferKey", + "type": "CF_TRANSFER_KEY" + } + ], + "CfReleaseTransferKey": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "TransferKey", + "type": "CF_TRANSFER_KEY" + } + ], + "CfExecute": [ + { + "name": "OpInfo", + "type": "CF_OPERATION_INFO" + }, + { + "name": "OpParams", + "type": "CF_OPERATION_PARAMETERS" + } + ], + "CfUpdateSyncProviderStatus": [ + { + "name": "ConnectionKey", + "type": "CF_CONNECTION_KEY" + }, + { + "name": "ProviderStatus", + "type": "CF_SYNC_PROVIDER_STATUS" + } + ], + "CfQuerySyncProviderStatus": [ + { + "name": "ConnectionKey", + "type": "CF_CONNECTION_KEY" + }, + { + "name": "ProviderStatus", + "type": "CF_SYNC_PROVIDER_STATUS" + } + ], + "CfReportSyncStatus": [ + { + "name": "SyncRootPath", + "type": "LPCWSTR" + }, + { + "name": "SyncStatus", + "type": "CF_SYNC_STATUS" + } + ], + "CfCreatePlaceholders": [ + { + "name": "BaseDirectoryPath", + "type": "LPCWSTR" + }, + { + "name": "PlaceholderArray", + "type": "CF_PLACEHOLDER_CREATE_INFO" + }, + { + "name": "PlaceholderCount", + "type": "DWORD" + }, + { + "name": "CreateFlags", + "type": "CF_CREATE_FLAGS" + }, + { + "name": "EntriesProcessed", + "type": "PDWORD" + } + ], + "CfOpenFileWithOplock": [ + { + "name": "FilePath", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "CF_OPEN_FILE_FLAGS" + }, + { + "name": "ProtectedHandle", + "type": "PHANDLE" + } + ], + "CfReferenceProtectedHandle": [ + { + "name": "ProtectedHandle", + "type": "HANDLE" + } + ], + "CfGetWin32HandleFromProtectedHandle": [ + { + "name": "ProtectedHandle", + "type": "HANDLE" + } + ], + "CfReleaseProtectedHandle": [ + { + "name": "ProtectedHandle", + "type": "HANDLE" + } + ], + "CfCloseHandle": [ + { + "name": "FileHandle", + "type": "HANDLE" + } + ], + "CfConvertToPlaceholder": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "FileIdentity", + "type": "LPCVOID" + }, + { + "name": "FileIdentityLength", + "type": "DWORD" + }, + { + "name": "ConvertFlags", + "type": "CF_CONVERT_FLAGS" + }, + { + "name": "ConvertUsn", + "type": "USN" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "CfUpdatePlaceholder": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "FsMetadata", + "type": "CF_FS_METADATA" + }, + { + "name": "FileIdentity", + "type": "LPCVOID" + }, + { + "name": "FileIdentityLength", + "type": "DWORD" + }, + { + "name": "DehydrateRangeArray", + "type": "CF_FILE_RANGE" + }, + { + "name": "DehydrateRangeCount", + "type": "DWORD" + }, + { + "name": "UpdateFlags", + "type": "CF_UPDATE_FLAGS" + }, + { + "name": "UpdateUsn", + "type": "USN" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "CfRevertPlaceholder": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "RevertFlags", + "type": "CF_REVERT_FLAGS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "CfHydratePlaceholder": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "StartingOffset", + "type": "LARGE_INTEGER" + }, + { + "name": "Length", + "type": "LARGE_INTEGER" + }, + { + "name": "HydrateFlags", + "type": "CF_HYDRATE_FLAGS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "CfSetPinState": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "PinState", + "type": "CF_PIN_STATE" + }, + { + "name": "PinFlags", + "type": "CF_SET_PIN_FLAGS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "CfSetInSyncState": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "InSyncState", + "type": "CF_IN_SYNC_STATE" + }, + { + "name": "InSyncFlags", + "type": "CF_SET_IN_SYNC_FLAGS" + }, + { + "name": "InSyncUsn", + "type": "USN" + } + ], + "CfSetCorrelationVector": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "CorrelationVector", + "type": "PCORRELATION_VECTOR" + } + ], + "CfGetCorrelationVector": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "CorrelationVector", + "type": "PCORRELATION_VECTOR" + } + ], + "CfGetPlaceholderStateFromAttributeTag": [ + { + "name": "FileAttributes", + "type": "DWORD" + }, + { + "name": "ReparseTag", + "type": "DWORD" + } + ], + "CfGetPlaceholderStateFromFileInfo": [ + { + "name": "InfoBuffer", + "type": "LPCVOID" + }, + { + "name": "InfoClass", + "type": "FILE_INFO_BY_HANDLE_CLASS" + } + ], + "CfGetPlaceholderStateFromFindData": [ + { + "name": "FindData", + "type": "WIN32_FIND_DATA" + } + ], + "CfGetPlaceholderInfo": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "InfoClass", + "type": "CF_PLACEHOLDER_INFO_CLASS" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "InfoBufferLength", + "type": "DWORD" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "CfGetSyncRootInfoByPath": [ + { + "name": "FilePath", + "type": "LPCWSTR" + }, + { + "name": "InfoClass", + "type": "CF_SYNC_ROOT_INFO_CLASS" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "InfoBufferLength", + "type": "DWORD" + }, + { + "name": "ReturnedLength", + "type": "DWORD" + } + ], + "CfGetSyncRootInfoByHandle": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "InfoClass", + "type": "CF_SYNC_ROOT_INFO_CLASS" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "InfoBufferLength", + "type": "DWORD" + }, + { + "name": "ReturnedLength", + "type": "DWORD" + } + ], + "CfGetPlaceholderRangeInfo": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "InfoClass", + "type": "CF_PLACEHOLDER_RANGE_INFO_CLASS" + }, + { + "name": "StartingOffset", + "type": "LARGE_INTEGER" + }, + { + "name": "Length", + "type": "LARGE_INTEGER" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "InfoBufferLength", + "type": "DWORD" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "CfReportProviderProgress": [ + { + "name": "ConnectionKey", + "type": "CF_CONNECTION_KEY" + }, + { + "name": "TransferKey", + "type": "CF_TRANSFER_KEY" + }, + { + "name": "ProviderProgressTotal", + "type": "LARGE_INTEGER" + }, + { + "name": "ProviderProgressCompleted", + "type": "LARGE_INTEGER" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/cfgmgr32.json b/qiling/extensions/windows_sdk/cfgmgr32.json new file mode 100644 index 000000000..59859ee0b --- /dev/null +++ b/qiling/extensions/windows_sdk/cfgmgr32.json @@ -0,0 +1,1690 @@ +{ + "CM_Add_Empty_Log_Conf": [ + { + "name": "plcLogConf", + "type": "PLOG_CONF" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "Priority", + "type": "PRIORITY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Add_Empty_Log_Conf_Ex": [ + { + "name": "plcLogConf", + "type": "PLOG_CONF" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "Priority", + "type": "PRIORITY" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Add_Res_Des": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "lcLogConf", + "type": "LOG_CONF" + }, + { + "name": "ResourceID", + "type": "RESOURCEID" + }, + { + "name": "ResourceData", + "type": "PCVOID" + }, + { + "name": "ResourceLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Add_Res_Des_Ex": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "lcLogConf", + "type": "LOG_CONF" + }, + { + "name": "ResourceID", + "type": "RESOURCEID" + }, + { + "name": "ResourceData", + "type": "PCVOID" + }, + { + "name": "ResourceLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Delete_Class_Key": [ + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Delete_DevNode_Key": [ + { + "name": "dnDevNode", + "type": "DEVNODE" + }, + { + "name": "ulHardwareProfile", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Disable_DevNode": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Disconnect_Machine": [ + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Enable_DevNode": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Enumerate_Classes": [ + { + "name": "ulClassIndex", + "type": "ULONG" + }, + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Enumerate_Classes_Ex": [ + { + "name": "ulClassIndex", + "type": "ULONG" + }, + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Free_Log_Conf": [ + { + "name": "lcLogConfToBeFreed", + "type": "LOG_CONF" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Free_Log_Conf_Ex": [ + { + "name": "lcLogConfToBeFreed", + "type": "LOG_CONF" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Free_Log_Conf_Handle": [ + { + "name": "lcLogConf", + "type": "LOG_CONF" + } + ], + "CM_Free_Res_Des": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Free_Res_Des_Ex": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Free_Res_Des_Handle": [ + { + "name": "rdResDes", + "type": "RES_DES" + } + ], + "CM_Get_Child": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Child_Ex": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Depth": [ + { + "name": "pulDepth", + "type": "PULONG" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Depth_Ex": [ + { + "name": "pulDepth", + "type": "PULONG" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Device_IDW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "Buffer", + "type": "PWSTR" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_ID_ListA": [ + { + "name": "pszFilter", + "type": "PCSTR" + }, + { + "name": "Buffer", + "type": "PZZSTR" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_ID_ListW": [ + { + "name": "pszFilter", + "type": "PCWSTR" + }, + { + "name": "Buffer", + "type": "PZZWSTR" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_ID_List_SizeA": [ + { + "name": "pulLen", + "type": "PULONG" + }, + { + "name": "pszFilter", + "type": "PCSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_ID_List_SizeW": [ + { + "name": "pulLen", + "type": "PULONG" + }, + { + "name": "pszFilter", + "type": "PCWSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_ID_Size": [ + { + "name": "pulLen", + "type": "PULONG" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_ID_Size_Ex": [ + { + "name": "pulLen", + "type": "PULONG" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_DevNode_PropertyW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_DevNode_Property_Keys": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_DevNode_Property_Keys_Ex": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_DevNode_Registry_PropertyW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulProperty", + "type": "ULONG" + }, + { + "name": "pulRegDataType", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "pulLength", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_DevNode_Status": [ + { + "name": "pulStatus", + "type": "PULONG" + }, + { + "name": "pulProblemNumber", + "type": "PULONG" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_DevNode_Status_Ex": [ + { + "name": "pulStatus", + "type": "PULONG" + }, + { + "name": "pulProblemNumber", + "type": "PULONG" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_First_Log_Conf": [ + { + "name": "plcLogConf", + "type": "PLOG_CONF" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_First_Log_Conf_Ex": [ + { + "name": "plcLogConf", + "type": "PLOG_CONF" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Device_Interface_ListA": [ + { + "name": "InterfaceClassGuid", + "type": "LPGUID" + }, + { + "name": "pDeviceID", + "type": "DEVINSTID_A" + }, + { + "name": "Buffer", + "type": "PZZSTR" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_ListW": [ + { + "name": "InterfaceClassGuid", + "type": "LPGUID" + }, + { + "name": "pDeviceID", + "type": "DEVINSTID_W" + }, + { + "name": "Buffer", + "type": "PZZWSTR" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_List_SizeA": [ + { + "name": "pulLen", + "type": "PULONG" + }, + { + "name": "InterfaceClassGuid", + "type": "LPGUID" + }, + { + "name": "pDeviceID", + "type": "DEVINSTID_A" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_List_SizeW": [ + { + "name": "pulLen", + "type": "PULONG" + }, + { + "name": "InterfaceClassGuid", + "type": "LPGUID" + }, + { + "name": "pDeviceID", + "type": "DEVINSTID_W" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_PropertyW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_Property_ExW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Device_Interface_Property_KeysW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Log_Conf_Priority": [ + { + "name": "lcLogConf", + "type": "LOG_CONF" + }, + { + "name": "pPriority", + "type": "PPRIORITY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Log_Conf_Priority_Ex": [ + { + "name": "lcLogConf", + "type": "LOG_CONF" + }, + { + "name": "pPriority", + "type": "PPRIORITY" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Next_Log_Conf": [ + { + "name": "plcLogConf", + "type": "PLOG_CONF" + }, + { + "name": "lcLogConf", + "type": "LOG_CONF" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Next_Log_Conf_Ex": [ + { + "name": "plcLogConf", + "type": "PLOG_CONF" + }, + { + "name": "lcLogConf", + "type": "LOG_CONF" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Parent": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Parent_Ex": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Res_Des_Data": [ + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Res_Des_Data_Ex": [ + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Res_Des_Data_Size": [ + { + "name": "pulSize", + "type": "PULONG" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Res_Des_Data_Size_Ex": [ + { + "name": "pulSize", + "type": "PULONG" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Sibling": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Sibling_Ex": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Version": [ + { + "name": "VOID", + "type": "void" + } + ], + "CM_Get_Version_Ex": [ + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Is_Version_Available": [ + { + "name": "wVersion", + "type": "WORD" + } + ], + "CM_Is_Version_Available_Ex": [ + { + "name": "wVersion", + "type": "WORD" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Locate_DevNodeA": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "pDeviceID", + "type": "DEVINSTID_A" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Locate_DevNodeW": [ + { + "name": "pdnDevInst", + "type": "PDEVINST" + }, + { + "name": "pDeviceID", + "type": "DEVINSTID_W" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Modify_Res_Des": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ResourceID", + "type": "RESOURCEID" + }, + { + "name": "ResourceData", + "type": "PCVOID" + }, + { + "name": "ResourceLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Modify_Res_Des_Ex": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ResourceID", + "type": "RESOURCEID" + }, + { + "name": "ResourceData", + "type": "PCVOID" + }, + { + "name": "ResourceLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Get_Next_Res_Des": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ForResource", + "type": "RESOURCEID" + }, + { + "name": "pResourceID", + "type": "PRESOURCEID" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Next_Res_Des_Ex": [ + { + "name": "prdResDes", + "type": "PRES_DES" + }, + { + "name": "rdResDes", + "type": "RES_DES" + }, + { + "name": "ForResource", + "type": "RESOURCEID" + }, + { + "name": "pResourceID", + "type": "PRESOURCEID" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Open_Class_KeyW": [ + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "pszClassName", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkClass", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Open_DevNode_Key": [ + { + "name": "dnDevNode", + "type": "DEVINST" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "ulHardwareProfile", + "type": "ULONG" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDevice", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Open_Device_Interface_KeyA": [ + { + "name": "pszDeviceInterface", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDeviceInterface", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Open_Device_Interface_KeyW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDeviceInterface", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Open_Device_Interface_Key_ExA": [ + { + "name": "pszDeviceInterface", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDeviceInterface", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Open_Device_Interface_Key_ExW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDeviceInterface", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Delete_Device_Interface_KeyW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Query_And_Remove_SubTreeW": [ + { + "name": "dnAncestor", + "type": "DEVINST" + }, + { + "name": "pVetoType", + "type": "PPNP_VETO_TYPE" + }, + { + "name": "pszVetoName", + "type": "LPWSTR" + }, + { + "name": "ulNameLength", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Reenumerate_DevNode": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Reenumerate_DevNode_Ex": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Set_DevNode_Problem_Ex": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulProblem", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Set_DevNode_Problem": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulProblem", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Set_DevNode_PropertyW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Set_DevNode_Registry_PropertyW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulProperty", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PCVOID" + }, + { + "name": "ulLength", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Set_Device_Interface_PropertyW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Is_Dock_Station_Present": [ + { + "name": "pbPresent", + "type": "PBOOL" + } + ], + "CM_Is_Dock_Station_Present_Ex": [ + { + "name": "pbPresent", + "type": "PBOOL" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Request_Eject_PC": [ + { + "name": "VOID", + "type": "void" + } + ], + "CM_Request_Eject_PC_Ex": [ + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Setup_DevNode": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Uninstall_DevNode": [ + { + "name": "dnDevInst", + "type": "DEVNODE" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Query_Resource_Conflict_List": [ + { + "name": "pclConflictList", + "type": "PCONFLICT_LIST" + }, + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ResourceID", + "type": "RESOURCEID" + }, + { + "name": "ResourceData", + "type": "PCVOID" + }, + { + "name": "ResourceLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Free_Resource_Conflict_Handle": [ + { + "name": "clConflictList", + "type": "CONFLICT_LIST" + } + ], + "CM_Get_Resource_Conflict_Count": [ + { + "name": "clConflictList", + "type": "CONFLICT_LIST" + }, + { + "name": "pulCount", + "type": "PULONG" + } + ], + "CM_Get_Class_PropertyW": [ + { + "name": "ClassGUID", + "type": "LPCGUID" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Class_Property_Keys": [ + { + "name": "ClassGUID", + "type": "LPCGUID" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Class_Property_Keys_Ex": [ + { + "name": "ClassGUID", + "type": "LPCGUID" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Set_Class_PropertyW": [ + { + "name": "ClassGUID", + "type": "LPCGUID" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Class_Registry_PropertyW": [ + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "ulProperty", + "type": "ULONG" + }, + { + "name": "pulRegDataType", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "pulLength", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Set_Class_Registry_PropertyW": [ + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "ulProperty", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PCVOID" + }, + { + "name": "ulLength", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Register_Notification": [ + { + "name": "pFilter", + "type": "PCM_NOTIFY_FILTER" + }, + { + "name": "pContext", + "type": "PVOID" + }, + { + "name": "pCallback", + "type": "PCM_NOTIFY_CALLBACK" + }, + { + "name": "pNotifyContext", + "type": "PHCMNOTIFICATION" + } + ], + "CM_Unregister_Notification": [ + { + "name": "NotifyContext", + "type": "HCMNOTIFICATION" + } + ], + "CM_MapCrToWin32Err": [ + { + "name": "CmReturnCode", + "type": "CONFIGRET" + }, + { + "name": "DefaultErr", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/clfs.json b/qiling/extensions/windows_sdk/clfs.json new file mode 100644 index 000000000..7f5cf5055 --- /dev/null +++ b/qiling/extensions/windows_sdk/clfs.json @@ -0,0 +1,38 @@ +{ + "LsnEqual": [ + { + "name": "plsn1", + "type": "CLFS_LSN" + }, + { + "name": "plsn2", + "type": "CLFS_LSN" + } + ], + "LsnLess": [ + { + "name": "plsn1", + "type": "CLFS_LSN" + }, + { + "name": "plsn2", + "type": "CLFS_LSN" + } + ], + "LsnGreater": [ + { + "name": "plsn1", + "type": "CLFS_LSN" + }, + { + "name": "plsn2", + "type": "CLFS_LSN" + } + ], + "LsnNull": [ + { + "name": "plsn", + "type": "CLFS_LSN" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/clfsw32.json b/qiling/extensions/windows_sdk/clfsw32.json new file mode 100644 index 000000000..f10348dc8 --- /dev/null +++ b/qiling/extensions/windows_sdk/clfsw32.json @@ -0,0 +1,860 @@ +{ + "LsnContainer": [ + { + "name": "plsn", + "type": "CLFS_LSN" + } + ], + "LsnCreate": [ + { + "name": "cidContainer", + "type": "CLFS_CONTAINER_ID" + }, + { + "name": "offBlock", + "type": "ULONG" + }, + { + "name": "cRecord", + "type": "ULONG" + } + ], + "LsnBlockOffset": [ + { + "name": "plsn", + "type": "CLFS_LSN" + } + ], + "LsnRecordSequence": [ + { + "name": "plsn", + "type": "CLFS_LSN" + } + ], + "CreateLogFile": [ + { + "name": "pszLogFileName", + "type": "LPCWSTR" + }, + { + "name": "fDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "psaLogFile", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "fCreateDisposition", + "type": "ULONG" + }, + { + "name": "fFlagsAndAttributes", + "type": "ULONG" + } + ], + "DeleteLogByHandle": [ + { + "name": "hLog", + "type": "HANDLE" + } + ], + "DeleteLogFile": [ + { + "name": "pszLogFileName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "AddLogContainer": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "pcbContainer", + "type": "PULONGLONG" + }, + { + "name": "pwszContainerPath", + "type": "LPWSTR" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "AddLogContainerSet": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "cContainer", + "type": "USHORT" + }, + { + "name": "pcbContainer", + "type": "PULONGLONG" + }, + { + "name": "rgwszContainerPath", + "type": "LPWSTR" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "RemoveLogContainer": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "pwszContainerPath", + "type": "LPWSTR" + }, + { + "name": "fForce", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "RemoveLogContainerSet": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "cContainer", + "type": "USHORT" + }, + { + "name": "rgwszContainerPath", + "type": "LPWSTR" + }, + { + "name": "fForce", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "SetLogArchiveTail": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "plsnArchiveTail", + "type": "PCLFS_LSN" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "SetEndOfLog": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "plsnEnd", + "type": "PCLFS_LSN" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "TruncateLog": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "plsnEnd", + "type": "PCLFS_LSN" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "CreateLogContainerScanContext": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "cFromContainer", + "type": "ULONG" + }, + { + "name": "cContainers", + "type": "ULONG" + }, + { + "name": "eScanMode", + "type": "CLFS_SCAN_MODE" + }, + { + "name": "pcxScan", + "type": "PCLFS_SCAN_CONTEXT" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ScanLogContainers": [ + { + "name": "pcxScan", + "type": "PCLFS_SCAN_CONTEXT" + }, + { + "name": "eScanMode", + "type": "CLFS_SCAN_MODE" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "AlignReservedLog": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "cReservedRecords", + "type": "ULONG" + }, + { + "name": "rgcbReservation", + "type": "LONGLONG" + }, + { + "name": "pcbAlignReservation", + "type": "PLONGLONG" + } + ], + "AllocReservedLog": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "cReservedRecords", + "type": "ULONG" + }, + { + "name": "pcbAdjustment", + "type": "PLONGLONG" + } + ], + "FreeReservedLog": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "cReservedRecords", + "type": "ULONG" + }, + { + "name": "pcbAdjustment", + "type": "PLONGLONG" + } + ], + "GetLogFileInformation": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "pinfoBuffer", + "type": "PCLFS_INFORMATION" + }, + { + "name": "cbBuffer", + "type": "PULONG" + } + ], + "SetLogArchiveMode": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "eMode", + "type": "CLFS_LOG_ARCHIVE_MODE" + } + ], + "ReadLogRestartArea": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "ppvRestartBuffer", + "type": "PVOID" + }, + { + "name": "pcbRestartBuffer", + "type": "PULONG" + }, + { + "name": "plsn", + "type": "PCLFS_LSN" + }, + { + "name": "ppvContext", + "type": "PVOID" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReadPreviousLogRestartArea": [ + { + "name": "pvReadContext", + "type": "PVOID" + }, + { + "name": "ppvRestartBuffer", + "type": "PVOID" + }, + { + "name": "pcbRestartBuffer", + "type": "PULONG" + }, + { + "name": "plsnRestart", + "type": "PCLFS_LSN" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "WriteLogRestartArea": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "pvRestartBuffer", + "type": "PVOID" + }, + { + "name": "cbRestartBuffer", + "type": "ULONG" + }, + { + "name": "plsnBase", + "type": "PCLFS_LSN" + }, + { + "name": "fFlags", + "type": "ULONG" + }, + { + "name": "pcbWritten", + "type": "PULONG" + }, + { + "name": "plsnNext", + "type": "PCLFS_LSN" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "AdvanceLogBase": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "plsnBase", + "type": "PCLFS_LSN" + }, + { + "name": "fFlags", + "type": "ULONG" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "CloseAndResetLogFile": [ + { + "name": "hLog", + "type": "HANDLE" + } + ], + "CreateLogMarshallingArea": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "pfnAllocBuffer", + "type": "CLFS_BLOCK_ALLOCATION" + }, + { + "name": "pfnFreeBuffer", + "type": "CLFS_BLOCK_DEALLOCATION" + }, + { + "name": "pvBlockAllocContext", + "type": "PVOID" + }, + { + "name": "cbMarshallingBuffer", + "type": "ULONG" + }, + { + "name": "cMaxWriteBuffers", + "type": "ULONG" + }, + { + "name": "cMaxReadBuffers", + "type": "ULONG" + }, + { + "name": "ppvMarshal", + "type": "PVOID" + } + ], + "DeleteLogMarshallingArea": [ + { + "name": "pvMarshal", + "type": "PVOID" + } + ], + "ReserveAndAppendLog": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "rgWriteEntries", + "type": "PCLFS_WRITE_ENTRY" + }, + { + "name": "cWriteEntries", + "type": "ULONG" + }, + { + "name": "plsnUndoNext", + "type": "PCLFS_LSN" + }, + { + "name": "plsnPrevious", + "type": "PCLFS_LSN" + }, + { + "name": "cReserveRecords", + "type": "ULONG" + }, + { + "name": "rgcbReservation", + "type": "LONGLONG" + }, + { + "name": "fFlags", + "type": "ULONG" + }, + { + "name": "plsn", + "type": "PCLFS_LSN" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReserveAndAppendLogAligned": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "rgWriteEntries", + "type": "PCLFS_WRITE_ENTRY" + }, + { + "name": "cWriteEntries", + "type": "ULONG" + }, + { + "name": "cbEntryAlignment", + "type": "ULONG" + }, + { + "name": "plsnUndoNext", + "type": "PCLFS_LSN" + }, + { + "name": "plsnPrevious", + "type": "PCLFS_LSN" + }, + { + "name": "cReserveRecords", + "type": "ULONG" + }, + { + "name": "rgcbReservation", + "type": "LONGLONG" + }, + { + "name": "fFlags", + "type": "ULONG" + }, + { + "name": "plsn", + "type": "PCLFS_LSN" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "FlushLogBuffers": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "FlushLogToLsn": [ + { + "name": "pvMarshalContext", + "type": "PVOID" + }, + { + "name": "plsnFlush", + "type": "PCLFS_LSN" + }, + { + "name": "plsnLastFlushed", + "type": "PCLFS_LSN" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReadLogRecord": [ + { + "name": "pvMarshal", + "type": "PVOID" + }, + { + "name": "plsnFirst", + "type": "PCLFS_LSN" + }, + { + "name": "eContextMode", + "type": "CLFS_CONTEXT_MODE" + }, + { + "name": "ppvReadBuffer", + "type": "PVOID" + }, + { + "name": "pcbReadBuffer", + "type": "PULONG" + }, + { + "name": "peRecordType", + "type": "PCLFS_RECORD_TYPE" + }, + { + "name": "plsnUndoNext", + "type": "PCLFS_LSN" + }, + { + "name": "plsnPrevious", + "type": "PCLFS_LSN" + }, + { + "name": "ppvReadContext", + "type": "PVOID" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReadNextLogRecord": [ + { + "name": "pvReadContext", + "type": "PVOID" + }, + { + "name": "ppvBuffer", + "type": "PVOID" + }, + { + "name": "pcbBuffer", + "type": "PULONG" + }, + { + "name": "peRecordType", + "type": "PCLFS_RECORD_TYPE" + }, + { + "name": "plsnUser", + "type": "PCLFS_LSN" + }, + { + "name": "plsnUndoNext", + "type": "PCLFS_LSN" + }, + { + "name": "plsnPrevious", + "type": "PCLFS_LSN" + }, + { + "name": "plsnRecord", + "type": "PCLFS_LSN" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "TerminateReadLog": [ + { + "name": "pvCursorContext", + "type": "PVOID" + } + ], + "DumpLogRecords": [ + { + "name": "pwszLogFileName", + "type": "PWSTR" + }, + { + "name": "fRecordType", + "type": "CLFS_RECORD_TYPE" + }, + { + "name": "plsnStart", + "type": "PCLFS_LSN" + }, + { + "name": "plsnEnd", + "type": "PCLFS_LSN" + }, + { + "name": "pstrmOut", + "type": "PFILE" + }, + { + "name": "pfnPrintRecord", + "type": "CLFS_PRINT_RECORD_ROUTINE" + }, + { + "name": "pfnAllocBlock", + "type": "CLFS_BLOCK_ALLOCATION" + }, + { + "name": "pfnFreeBlock", + "type": "CLFS_BLOCK_DEALLOCATION" + }, + { + "name": "pvBlockAllocContext", + "type": "PVOID" + }, + { + "name": "cbBlock", + "type": "ULONG" + }, + { + "name": "cMaxBlocks", + "type": "ULONG" + } + ], + "PrepareLogArchive": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "pszBaseLogFileName", + "type": "PWSTR" + }, + { + "name": "cLen", + "type": "ULONG" + }, + { + "name": "plsnLow", + "type": "PCLFS_LSN" + }, + { + "name": "plsnHigh", + "type": "PCLFS_LSN" + }, + { + "name": "pcActualLength", + "type": "PULONG" + }, + { + "name": "poffBaseLogFileData", + "type": "PULONGLONG" + }, + { + "name": "pcbBaseLogFileLength", + "type": "PULONGLONG" + }, + { + "name": "plsnBase", + "type": "PCLFS_LSN" + }, + { + "name": "plsnLast", + "type": "PCLFS_LSN" + }, + { + "name": "plsnCurrentArchiveTail", + "type": "PCLFS_LSN" + }, + { + "name": "ppvArchiveContext", + "type": "PCLFS_LOG_ARCHIVE_CONTEXT" + } + ], + "ReadLogArchiveMetadata": [ + { + "name": "pvArchiveContext", + "type": "CLFS_LOG_ARCHIVE_CONTEXT" + }, + { + "name": "cbOffset", + "type": "ULONG" + }, + { + "name": "cbBytesToRead", + "type": "ULONG" + }, + { + "name": "pbReadBuffer", + "type": "PBYTE" + }, + { + "name": "pcbBytesRead", + "type": "PULONG" + } + ], + "GetNextLogArchiveExtent": [ + { + "name": "pvArchiveContext", + "type": "CLFS_LOG_ARCHIVE_CONTEXT" + }, + { + "name": "rgadExtent", + "type": "CLFS_ARCHIVE_DESCRIPTOR" + }, + { + "name": "cDescriptors", + "type": "ULONG" + }, + { + "name": "pcDescriptorsReturned", + "type": "PULONG" + } + ], + "TerminateLogArchive": [ + { + "name": "pvArchiveContext", + "type": "CLFS_LOG_ARCHIVE_CONTEXT" + } + ], + "ValidateLog": [ + { + "name": "pszLogFileName", + "type": "LPCWSTR" + }, + { + "name": "psaLogFile", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "pinfoBuffer", + "type": "PCLFS_INFORMATION" + }, + { + "name": "pcbBuffer", + "type": "PULONG" + } + ], + "GetLogContainerName": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "cidLogicalContainer", + "type": "CLFS_CONTAINER_ID" + }, + { + "name": "pwstrContainerName", + "type": "LPCWSTR" + }, + { + "name": "cLenContainerName", + "type": "ULONG" + }, + { + "name": "pcActualLenContainerName", + "type": "PULONG" + } + ], + "GetLogIoStatistics": [ + { + "name": "hLog", + "type": "HANDLE" + }, + { + "name": "pvStatsBuffer", + "type": "PVOID" + }, + { + "name": "cbStatsBuffer", + "type": "ULONG" + }, + { + "name": "eStatsClass", + "type": "CLFS_IOSTATS_CLASS" + }, + { + "name": "pcbStatsWritten", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/clusapi.json b/qiling/extensions/windows_sdk/clusapi.json new file mode 100644 index 000000000..a9bdef31b --- /dev/null +++ b/qiling/extensions/windows_sdk/clusapi.json @@ -0,0 +1,2720 @@ +{ + "GetNodeClusterState": [ + { + "name": "lpszNodeName", + "type": "LPCWSTR" + }, + { + "name": "pdwClusterState", + "type": "LPDWORD" + } + ], + "OpenCluster": [ + { + "name": "lpszClusterName", + "type": "LPCWSTR" + } + ], + "OpenClusterEx": [ + { + "name": "lpszClusterName", + "type": "LPCWSTR" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GrantedAccess", + "type": "DWORD" + } + ], + "CloseCluster": [ + { + "name": "hCluster", + "type": "HCLUSTER" + } + ], + "SetClusterName": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNewClusterName", + "type": "LPCWSTR" + } + ], + "GetClusterInformation": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszClusterName", + "type": "LPWSTR" + }, + { + "name": "lpcchClusterName", + "type": "LPDWORD" + }, + { + "name": "lpClusterInfo", + "type": "LPCLUSTERVERSIONINFO" + } + ], + "GetClusterQuorumResource": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceName", + "type": "LPWSTR" + }, + { + "name": "lpcchResourceName", + "type": "LPDWORD" + }, + { + "name": "lpszDeviceName", + "type": "LPWSTR" + }, + { + "name": "lpcchDeviceName", + "type": "LPDWORD" + }, + { + "name": "lpdwMaxQuorumLogSize", + "type": "LPDWORD" + } + ], + "SetClusterQuorumResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "lpszDeviceName", + "type": "LPCWSTR" + }, + { + "name": "dwMaxQuoLogSize", + "type": "DWORD" + } + ], + "BackupClusterDatabase": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszPathName", + "type": "LPCWSTR" + } + ], + "RestoreClusterDatabase": [ + { + "name": "lpszPathName", + "type": "LPCWSTR" + }, + { + "name": "bForce", + "type": "BOOL" + }, + { + "name": "lpszQuorumDriveLetter", + "type": "LPCWSTR" + } + ], + "SetClusterNetworkPriorityOrder": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "NetworkCount", + "type": "DWORD" + }, + { + "name": "NetworkList", + "type": "HNETWORK" + } + ], + "SetClusterServiceAccountPassword": [ + { + "name": "lpszClusterName", + "type": "LPCWSTR" + }, + { + "name": "lpszNewPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReturnStatusBuffer", + "type": "PCLUSTER_SET_PASSWORD_STATUS" + }, + { + "name": "lpcbReturnStatusBufferSize", + "type": "LPDWORD" + } + ], + "ClusterControl": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "ClusterUpgradeFunctionalLevel": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "perform", + "type": "BOOL" + }, + { + "name": "pfnProgressCallback", + "type": "PCLUSTER_UPGRADE_PROGRESS_CALLBACK" + }, + { + "name": "pvCallbackArg", + "type": "PVOID" + } + ], + "CreateClusterNotifyPortV2": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "Filters", + "type": "NOTIFY_FILTER_AND_TYPE" + }, + { + "name": "dwFilterCount", + "type": "DWORD" + }, + { + "name": "dwNotifyKey", + "type": "DWORD_PTR" + } + ], + "RegisterClusterNotifyV2": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "Filter", + "type": "NOTIFY_FILTER_AND_TYPE" + }, + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "dwNotifyKey", + "type": "DWORD_PTR" + } + ], + "GetNotifyEventHandle": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "lphTargetEvent", + "type": "LPHANDLE" + } + ], + "GetClusterNotifyV2": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "lpdwNotifyKey", + "type": "DWORD_PTR" + }, + { + "name": "pFilterAndType", + "type": "PNOTIFY_FILTER_AND_TYPE" + }, + { + "name": "buffer", + "type": "BYTE" + }, + { + "name": "lpbBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpszObjectId", + "type": "LPWSTR" + }, + { + "name": "lpcchObjectId", + "type": "LPDWORD" + }, + { + "name": "lpszParentId", + "type": "LPWSTR" + }, + { + "name": "lpcchParentId", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + }, + { + "name": "lpszType", + "type": "LPWSTR" + }, + { + "name": "lpcchType", + "type": "LPDWORD" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "CreateClusterNotifyPort": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "dwNotifyKey", + "type": "DWORD_PTR" + } + ], + "RegisterClusterNotify": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "dwFilterType", + "type": "DWORD" + }, + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "dwNotifyKey", + "type": "DWORD_PTR" + } + ], + "GetClusterNotify": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "lpdwNotifyKey", + "type": "DWORD_PTR" + }, + { + "name": "lpdwFilterType", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "CloseClusterNotifyPort": [ + { + "name": "hChange", + "type": "HCHANGE" + } + ], + "ClusterOpenEnum": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "ClusterGetEnumCount": [ + { + "name": "hEnum", + "type": "HCLUSENUM" + } + ], + "ClusterEnum": [ + { + "name": "hEnum", + "type": "HCLUSENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterCloseEnum": [ + { + "name": "hEnum", + "type": "HCLUSENUM" + } + ], + "ClusterGetEnumCountEx": [ + { + "name": "hClusterEnum", + "type": "HCLUSENUMEX" + } + ], + "ClusterEnumEx": [ + { + "name": "hClusterEnum", + "type": "HCLUSENUMEX" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pItem", + "type": "PCLUSTER_ENUM_ITEM" + }, + { + "name": "cbItem", + "type": "LPDWORD" + } + ], + "ClusterCloseEnumEx": [ + { + "name": "hClusterEnum", + "type": "HCLUSENUMEX" + } + ], + "CreateClusterGroupSet": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "groupSetName", + "type": "LPCWSTR" + } + ], + "OpenClusterGroupSet": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszGroupSetName", + "type": "LPCWSTR" + } + ], + "CloseClusterGroupSet": [ + { + "name": "hGroupSet", + "type": "HGROUPSET" + } + ], + "DeleteClusterGroupSet": [ + { + "name": "hGroupSet", + "type": "HGROUPSET" + } + ], + "ClusterAddGroupToGroupSet": [ + { + "name": "hGroupSet", + "type": "HGROUPSET" + }, + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "ClusterRemoveGroupFromGroupSet": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "ClusterGroupSetControl": [ + { + "name": "hGroupSet", + "type": "HGROUPSET" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "cbOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "AddClusterGroupDependency": [ + { + "name": "hDependentGroup", + "type": "HGROUP" + }, + { + "name": "hProviderGroup", + "type": "HGROUP" + } + ], + "SetGroupDependencyExpression": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "lpszDependencyExpression", + "type": "LPCWSTR" + } + ], + "RemoveClusterGroupDependency": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hDependsOn", + "type": "HGROUP" + } + ], + "AddClusterGroupSetDependency": [ + { + "name": "hDependentGroupSet", + "type": "HGROUPSET" + }, + { + "name": "hProviderGroupSet", + "type": "HGROUPSET" + } + ], + "SetClusterGroupSetDependencyExpression": [ + { + "name": "hGroupSet", + "type": "HGROUPSET" + }, + { + "name": "lpszDependencyExprssion", + "type": "LPCWSTR" + } + ], + "RemoveClusterGroupSetDependency": [ + { + "name": "hGroupSet", + "type": "HGROUPSET" + }, + { + "name": "hDependsOn", + "type": "HGROUPSET" + } + ], + "AddClusterGroupToGroupSetDependency": [ + { + "name": "hDependentGroup", + "type": "HGROUP" + }, + { + "name": "hProviderGroupSet", + "type": "HGROUPSET" + } + ], + "RemoveClusterGroupToGroupSetDependency": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hDependsOn", + "type": "HGROUPSET" + } + ], + "ClusterGroupSetOpenEnum": [ + { + "name": "hCluster", + "type": "HCLUSTER" + } + ], + "ClusterGroupSetGetEnumCount": [ + { + "name": "hGroupSetEnum", + "type": "HGROUPSETENUM" + } + ], + "ClusterGroupSetCloseEnum": [ + { + "name": "hGroupSetEnum", + "type": "HGROUPSETENUM" + } + ], + "OpenClusterNode": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNodeName", + "type": "LPCWSTR" + } + ], + "OpenClusterNodeEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNodeName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpdwGrantedAccess", + "type": "DWORD" + } + ], + "CloseClusterNode": [ + { + "name": "hNode", + "type": "HNODE" + } + ], + "GetClusterNodeState": [ + { + "name": "hNode", + "type": "HNODE" + } + ], + "GetClusterNodeId": [ + { + "name": "hNode", + "type": "HNODE" + }, + { + "name": "lpszNodeId", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "GetClusterFromNode": [ + { + "name": "hNode", + "type": "HNODE" + } + ], + "PauseClusterNode": [ + { + "name": "hNode", + "type": "HNODE" + } + ], + "ResumeClusterNode": [ + { + "name": "hNode", + "type": "HNODE" + } + ], + "EvictClusterNode": [ + { + "name": "hNode", + "type": "HNODE" + } + ], + "ClusterNetInterfaceOpenEnum": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNodeName", + "type": "LPCWSTR" + }, + { + "name": "lpszNetworkName", + "type": "LPCWSTR" + } + ], + "ClusterNetInterfaceEnum": [ + { + "name": "hNetInterfaceEnum", + "type": "HNETINTERFACEENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterNetInterfaceCloseEnum": [ + { + "name": "hNetInterfaceEnum", + "type": "HNETINTERFACEENUM" + } + ], + "ClusterNodeOpenEnum": [ + { + "name": "hNode", + "type": "HNODE" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "ClusterNodeGetEnumCountEx": [ + { + "name": "hNodeEnum", + "type": "HNODEENUMEX" + } + ], + "ClusterNodeEnumEx": [ + { + "name": "hNodeEnum", + "type": "HNODEENUMEX" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pItem", + "type": "PCLUSTER_ENUM_ITEM" + }, + { + "name": "cbItem", + "type": "LPDWORD" + } + ], + "ClusterNodeCloseEnumEx": [ + { + "name": "hNodeEnum", + "type": "HNODEENUMEX" + } + ], + "ClusterNodeGetEnumCount": [ + { + "name": "hNodeEnum", + "type": "HNODEENUM" + } + ], + "ClusterNodeCloseEnum": [ + { + "name": "hNodeEnum", + "type": "HNODEENUM" + } + ], + "ClusterNodeEnum": [ + { + "name": "hNodeEnum", + "type": "HNODEENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "EvictClusterNodeEx": [ + { + "name": "hNode", + "type": "HNODE" + }, + { + "name": "dwTimeOut", + "type": "DWORD" + }, + { + "name": "phrCleanupStatus", + "type": "HRESULT" + } + ], + "GetClusterResourceTypeKey": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszTypeName", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "CreateClusterGroup": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszGroupName", + "type": "LPCWSTR" + } + ], + "OpenClusterGroup": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszGroupName", + "type": "LPCWSTR" + } + ], + "OpenClusterGroupEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszGroupName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpdwGrantedAccess", + "type": "DWORD" + } + ], + "ResumeClusterNodeEx": [ + { + "name": "hNode", + "type": "HNODE" + }, + { + "name": "eResumeFailbackType", + "type": "CLUSTER_NODE_RESUME_FAILBACK_TYPE" + }, + { + "name": "dwResumeFlagsReserved", + "type": "DWORD" + } + ], + "CreateClusterGroupEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszGroupName", + "type": "LPCWSTR" + }, + { + "name": "pGroupInfo", + "type": "PCLUSTER_CREATE_GROUP_INFO" + } + ], + "ClusterGroupOpenEnumEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszProperties", + "type": "LPCWSTR" + }, + { + "name": "cbProperties", + "type": "DWORD" + }, + { + "name": "lpszRoProperties", + "type": "LPCWSTR" + }, + { + "name": "cbRoProperties", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ClusterGroupGetEnumCountEx": [ + { + "name": "hGroupEnumEx", + "type": "HGROUPENUMEX" + } + ], + "ClusterGroupEnumEx": [ + { + "name": "hGroupEnumEx", + "type": "HGROUPENUMEX" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pItem", + "type": "PCLUSTER_GROUP_ENUM_ITEM" + }, + { + "name": "cbItem", + "type": "LPDWORD" + } + ], + "ClusterGroupCloseEnumEx": [ + { + "name": "hGroupEnumEx", + "type": "HGROUPENUMEX" + } + ], + "ClusterResourceOpenEnumEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszProperties", + "type": "LPCWSTR" + }, + { + "name": "cbProperties", + "type": "DWORD" + }, + { + "name": "lpszRoProperties", + "type": "LPCWSTR" + }, + { + "name": "cbRoProperties", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ClusterResourceGetEnumCountEx": [ + { + "name": "hResourceEnumEx", + "type": "HRESENUMEX" + } + ], + "ClusterResourceEnumEx": [ + { + "name": "hResourceEnumEx", + "type": "HRESENUMEX" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pItem", + "type": "PCLUSTER_RESOURCE_ENUM_ITEM" + }, + { + "name": "cbItem", + "type": "LPDWORD" + } + ], + "ClusterResourceCloseEnumEx": [ + { + "name": "hResourceEnumEx", + "type": "HRESENUMEX" + } + ], + "OnlineClusterGroupEx": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hDestinationNode", + "type": "HNODE" + }, + { + "name": "dwOnlineFlags", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "PBYTE" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + } + ], + "OfflineClusterGroupEx": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "dwOfflineFlags", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "PBYTE" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + } + ], + "OnlineClusterResourceEx": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "dwOnlineFlags", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "PBYTE" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + } + ], + "OfflineClusterResourceEx": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "dwOfflineFlags", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "PBYTE" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + } + ], + "MoveClusterGroupEx": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hDestinationNode", + "type": "HNODE" + }, + { + "name": "dwMoveFlags", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "PBYTE" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + } + ], + "CancelClusterGroupOperation": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "dwCancelFlags_RESERVED", + "type": "DWORD" + } + ], + "CloseClusterGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "GetClusterFromGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "GetClusterGroupState": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "lpszNodeName", + "type": "LPWSTR" + }, + { + "name": "lpcchNodeName", + "type": "LPDWORD" + } + ], + "SetClusterGroupName": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "lpszGroupName", + "type": "LPCWSTR" + } + ], + "SetClusterGroupNodeList": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "NodeCount", + "type": "DWORD" + }, + { + "name": "NodeList", + "type": "HNODE" + } + ], + "OnlineClusterGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hDestinationNode", + "type": "HNODE" + } + ], + "MoveClusterGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hDestinationNode", + "type": "HNODE" + } + ], + "OfflineClusterGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "DeleteClusterGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "DestroyClusterGroup": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "ClusterGroupOpenEnum": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "ClusterGroupGetEnumCount": [ + { + "name": "hGroupEnum", + "type": "HGROUPENUM" + } + ], + "ClusterGroupEnum": [ + { + "name": "hGroupEnum", + "type": "HGROUPENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpszResourceName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterGroupCloseEnum": [ + { + "name": "hGroupEnum", + "type": "HGROUPENUM" + } + ], + "CreateClusterResource": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "lpszResourceName", + "type": "LPCWSTR" + }, + { + "name": "lpszResourceType", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "OpenClusterResource": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceName", + "type": "LPCWSTR" + } + ], + "OpenClusterResourceEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpdwGrantedAccess", + "type": "DWORD" + } + ], + "CloseClusterResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "GetClusterFromResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "DeleteClusterResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "GetClusterResourceState": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "lpszNodeName", + "type": "LPWSTR" + }, + { + "name": "lpcchNodeName", + "type": "LPDWORD" + }, + { + "name": "lpszGroupName", + "type": "LPWSTR" + }, + { + "name": "lpcchGroupName", + "type": "LPDWORD" + } + ], + "SetClusterResourceName": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "lpszResourceName", + "type": "LPCWSTR" + } + ], + "FailClusterResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "OnlineClusterResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "OfflineClusterResource": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "ChangeClusterResourceGroup": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "AddClusterResourceNode": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hNode", + "type": "HNODE" + } + ], + "RemoveClusterResourceNode": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hNode", + "type": "HNODE" + } + ], + "AddClusterResourceDependency": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hDependsOn", + "type": "HRESOURCE" + } + ], + "RemoveClusterResourceDependency": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hDependsOn", + "type": "HRESOURCE" + } + ], + "SetClusterResourceDependencyExpression": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "lpszDependencyExpression", + "type": "LPCWSTR" + } + ], + "GetClusterResourceDependencyExpression": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "lpszDependencyExpression", + "type": "LPWSTR" + }, + { + "name": "lpcchDependencyExpression", + "type": "LPDWORD" + } + ], + "AddResourceToClusterSharedVolumes": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "RemoveResourceFromClusterSharedVolumes": [ + { + "name": "hResource", + "type": "HRESOURCE" + } + ], + "IsFileOnClusterSharedVolume": [ + { + "name": "lpszPathName", + "type": "LPCWSTR" + }, + { + "name": "pbFileIsOnSharedVolume", + "type": "PBOOL" + } + ], + "ClusterSharedVolumeSetSnapshotState": [ + { + "name": "guidSnapshotSet", + "type": "GUID" + }, + { + "name": "lpszVolumeName", + "type": "LPCWSTR" + }, + { + "name": "state", + "type": "CLUSTER_SHARED_VOLUME_SNAPSHOT_STATE" + } + ], + "CanResourceBeDependent": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hResourceDependent", + "type": "HRESOURCE" + } + ], + "ClusterResourceControl": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "cbOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "ClusterResourceControlAsUser": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "cbOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "ClusterResourceTypeControl": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceTypeName", + "type": "LPCWSTR" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "ClusterResourceTypeControlAsUser": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceTypeName", + "type": "LPCWSTR" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "ClusterGroupControl": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "ClusterNodeControl": [ + { + "name": "hNode", + "type": "HNODE" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "GetClusterResourceNetworkName": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "ClusterResourceOpenEnum": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "ClusterResourceGetEnumCount": [ + { + "name": "hResEnum", + "type": "HRESENUM" + } + ], + "ClusterResourceEnum": [ + { + "name": "hResEnum", + "type": "HRESENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterResourceCloseEnum": [ + { + "name": "hResEnum", + "type": "HRESENUM" + } + ], + "CreateClusterResourceType": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceTypeName", + "type": "LPCWSTR" + }, + { + "name": "lpszDisplayName", + "type": "LPCWSTR" + }, + { + "name": "lpszResourceTypeDll", + "type": "LPCWSTR" + }, + { + "name": "dwLooksAlivePollInterval", + "type": "DWORD" + }, + { + "name": "dwIsAlivePollInterval", + "type": "DWORD" + } + ], + "DeleteClusterResourceType": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceTypeName", + "type": "LPCWSTR" + } + ], + "ClusterResourceTypeOpenEnum": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszResourceTypeName", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "ClusterResourceTypeGetEnumCount": [ + { + "name": "hResTypeEnum", + "type": "HRESTYPEENUM" + } + ], + "ClusterResourceTypeEnum": [ + { + "name": "hResTypeEnum", + "type": "HRESTYPEENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterResourceTypeCloseEnum": [ + { + "name": "hResTypeEnum", + "type": "HRESTYPEENUM" + } + ], + "OpenClusterNetwork": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNetworkName", + "type": "LPCWSTR" + } + ], + "OpenClusterNetworkEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNetworkName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpdwGrantedAccess", + "type": "DWORD" + } + ], + "CloseClusterNetwork": [ + { + "name": "hNetwork", + "type": "HNETWORK" + } + ], + "GetClusterFromNetwork": [ + { + "name": "hNetwork", + "type": "HNETWORK" + } + ], + "ClusterNetworkOpenEnum": [ + { + "name": "hNetwork", + "type": "HNETWORK" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "ClusterNetworkGetEnumCount": [ + { + "name": "hNetworkEnum", + "type": "HNETWORKENUM" + } + ], + "ClusterNetworkEnum": [ + { + "name": "hNetworkEnum", + "type": "HNETWORKENUM" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterNetworkCloseEnum": [ + { + "name": "hNetworkEnum", + "type": "HNETWORKENUM" + } + ], + "GetClusterNetworkState": [ + { + "name": "hNetwork", + "type": "HNETWORK" + } + ], + "SetClusterNetworkName": [ + { + "name": "hNetwork", + "type": "HNETWORK" + }, + { + "name": "lpszName", + "type": "LPCWSTR" + } + ], + "GetClusterNetworkId": [ + { + "name": "hNetwork", + "type": "HNETWORK" + }, + { + "name": "lpszNetworkId", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + } + ], + "ClusterNetworkControl": [ + { + "name": "hNetwork", + "type": "HNETWORK" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "OpenClusterNetInterface": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszInterfaceName", + "type": "LPCWSTR" + } + ], + "OpenClusterNetInterfaceEx": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszInterfaceName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpdwGrantedAccess", + "type": "DWORD" + } + ], + "GetClusterNetInterface": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNodeName", + "type": "LPCWSTR" + }, + { + "name": "lpszNetworkName", + "type": "LPCWSTR" + }, + { + "name": "lpszInterfaceName", + "type": "LPWSTR" + }, + { + "name": "lpcchInterfaceName", + "type": "LPDWORD" + } + ], + "CloseClusterNetInterface": [ + { + "name": "hNetInterface", + "type": "HNETINTERFACE" + } + ], + "GetClusterFromNetInterface": [ + { + "name": "hNetInterface", + "type": "HNETINTERFACE" + } + ], + "GetClusterNetInterfaceState": [ + { + "name": "hNetInterface", + "type": "HNETINTERFACE" + } + ], + "ClusterNetInterfaceControl": [ + { + "name": "hNetInterface", + "type": "HNETINTERFACE" + }, + { + "name": "hHostNode", + "type": "HNODE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "GetClusterKey": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "GetClusterGroupKey": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "GetClusterResourceKey": [ + { + "name": "hResource", + "type": "HRESOURCE" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "GetClusterNodeKey": [ + { + "name": "hNode", + "type": "HNODE" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "GetClusterNetworkKey": [ + { + "name": "hNetwork", + "type": "HNETWORK" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "GetClusterNetInterfaceKey": [ + { + "name": "hNetInterface", + "type": "HNETINTERFACE" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "ClusterRegCreateKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpszSubKey", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + } + ], + "ClusterRegOpenKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpszSubKey", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "ClusterRegDeleteKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpszSubKey", + "type": "LPCWSTR" + } + ], + "ClusterRegCloseKey": [ + { + "name": "hKey", + "type": "HKEY" + } + ], + "ClusterRegEnumKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "ClusterRegSetValue": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpszValueName", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "ClusterRegDeleteValue": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpszValueName", + "type": "LPCWSTR" + } + ], + "ClusterRegQueryValue": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpszValueName", + "type": "LPCWSTR" + }, + { + "name": "lpdwValueType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "ClusterRegEnumValue": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpszValueName", + "type": "LPWSTR" + }, + { + "name": "lpcchValueName", + "type": "LPDWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "ClusterRegQueryInfoKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpcSubKeys", + "type": "LPDWORD" + }, + { + "name": "lpcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "lpcValues", + "type": "LPDWORD" + }, + { + "name": "lpcchMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueLen", + "type": "LPDWORD" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "ClusterRegGetKeySecurity": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + } + ], + "ClusterRegSetKeySecurity": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "ClusterRegSyncDatabase": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "ClusterRegCreateBatch": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pHREGBATCH", + "type": "HREGBATCH" + } + ], + "ClusterRegBatchAddCommand": [ + { + "name": "hRegBatch", + "type": "HREGBATCH" + }, + { + "name": "dwCommand", + "type": "CLUSTER_REG_COMMAND" + }, + { + "name": "wzName", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "ClusterRegCloseBatch": [ + { + "name": "hRegBatch", + "type": "HREGBATCH" + }, + { + "name": "bCommit", + "type": "BOOL" + }, + { + "name": "failedCommandNumber", + "type": "INT" + } + ], + "ClusterRegCloseBatchEx": [ + { + "name": "hRegBatch", + "type": "HREGBATCH" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "failedCommandNumber", + "type": "INT" + } + ], + "ClusterRegBatchReadCommand": [ + { + "name": "hBatchNotification", + "type": "HREGBATCHNOTIFICATION" + }, + { + "name": "pBatchCommand", + "type": "CLUSTER_BATCH_COMMAND" + } + ], + "ClusterRegBatchCloseNotification": [ + { + "name": "hBatchNotification", + "type": "HREGBATCHNOTIFICATION" + } + ], + "ClusterRegCreateBatchNotifyPort": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "phBatchNotifyPort", + "type": "HREGBATCHPORT" + } + ], + "ClusterRegCloseBatchNotifyPort": [ + { + "name": "hBatchNotifyPort", + "type": "HREGBATCHPORT" + } + ], + "ClusterRegGetBatchNotification": [ + { + "name": "hBatchNotify", + "type": "HREGBATCHPORT" + }, + { + "name": "phBatchNotification", + "type": "HREGBATCHNOTIFICATION" + } + ], + "ClusterRegCreateReadBatch": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "phRegReadBatch", + "type": "HREGREADBATCH" + } + ], + "ClusterRegReadBatchAddCommand": [ + { + "name": "hRegReadBatch", + "type": "HREGREADBATCH" + }, + { + "name": "wzSubkeyName", + "type": "LPCWSTR" + }, + { + "name": "wzValueName", + "type": "LPCWSTR" + } + ], + "ClusterRegCloseReadBatch": [ + { + "name": "hRegReadBatch", + "type": "HREGREADBATCH" + }, + { + "name": "phRegReadBatchReply", + "type": "HREGREADBATCHREPLY" + } + ], + "ClusterRegCloseReadBatchEx": [ + { + "name": "hRegReadBatch", + "type": "HREGREADBATCH" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "phRegReadBatchReply", + "type": "HREGREADBATCHREPLY" + } + ], + "ClusterRegReadBatchReplyNextCommand": [ + { + "name": "hRegReadBatchReply", + "type": "HREGREADBATCHREPLY" + }, + { + "name": "pBatchCommand", + "type": "CLUSTER_READ_BATCH_COMMAND" + } + ], + "ClusterRegCloseReadBatchReply": [ + { + "name": "hRegReadBatchReply", + "type": "HREGREADBATCHREPLY" + } + ], + "ClusterSetAccountAccess": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "szAccountSID", + "type": "LPCWSTR" + }, + { + "name": "dwAccess", + "type": "DWORD" + }, + { + "name": "dwControlType", + "type": "DWORD" + } + ], + "CreateCluster": [ + { + "name": "pConfig", + "type": "PCREATE_CLUSTER_CONFIG" + }, + { + "name": "pfnProgressCallback", + "type": "PCLUSTER_SETUP_PROGRESS_CALLBACK" + }, + { + "name": "pvCallbackArg", + "type": "PVOID" + } + ], + "CreateClusterCNOless": [ + { + "name": "pConfig", + "type": "PCREATE_CLUSTER_CONFIG" + }, + { + "name": "pfnProgressCallback", + "type": "PCLUSTER_SETUP_PROGRESS_CALLBACK" + }, + { + "name": "pvCallbackArg", + "type": "PVOID" + } + ], + "CreateClusterNameAccount": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "pConfig", + "type": "PCREATE_CLUSTER_NAME_ACCOUNT" + }, + { + "name": "pfnProgressCallback", + "type": "PCLUSTER_SETUP_PROGRESS_CALLBACK" + }, + { + "name": "pvCallbackArg", + "type": "PVOID" + } + ], + "RegisterClusterResourceTypeNotifyV2": [ + { + "name": "hChange", + "type": "HCHANGE" + }, + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "Flags", + "type": "LONGLONG" + }, + { + "name": "resTypeName", + "type": "LPCWSTR" + }, + { + "name": "dwNotifyKey", + "type": "DWORD_PTR" + } + ], + "AddClusterNode": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "lpszNodeName", + "type": "PCWSTR" + }, + { + "name": "pfnProgressCallback", + "type": "PCLUSTER_SETUP_PROGRESS_CALLBACK" + }, + { + "name": "pvCallbackArg", + "type": "PVOID" + } + ], + "DestroyCluster": [ + { + "name": "hCluster", + "type": "HCLUSTER" + }, + { + "name": "pfnProgressCallback", + "type": "PCLUSTER_SETUP_PROGRESS_CALLBACK" + }, + { + "name": "pvCallbackArg", + "type": "PVOID" + }, + { + "name": "fdeleteVirtualComputerObjects", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/combaseapi.json b/qiling/extensions/windows_sdk/combaseapi.json new file mode 100644 index 000000000..ebef88ba0 --- /dev/null +++ b/qiling/extensions/windows_sdk/combaseapi.json @@ -0,0 +1,1006 @@ +{ + "CoGetMalloc": [ + { + "name": "dwMemContext", + "type": "DWORD" + }, + { + "name": "ppMalloc", + "type": "LPMALLOC" + } + ], + "CreateStreamOnHGlobal": [ + { + "name": "hGlobal", + "type": "HGLOBAL" + }, + { + "name": "fDeleteOnRelease", + "type": "BOOL" + }, + { + "name": "ppstm", + "type": "LPSTREAM" + } + ], + "GetHGlobalFromStream": [ + { + "name": "pstm", + "type": "LPSTREAM" + }, + { + "name": "phglobal", + "type": "HGLOBAL" + } + ], + "CoUninitialize": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoGetCurrentProcess": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoInitializeEx": [ + { + "name": "pvReserved", + "type": "LPVOID" + }, + { + "name": "dwCoInit", + "type": "DWORD" + } + ], + "CoGetCallerTID": [ + { + "name": "lpdwTID", + "type": "LPDWORD" + } + ], + "CoGetCurrentLogicalThreadId": [ + { + "name": "pguid", + "type": "GUID" + } + ], + "CoGetContextToken": [ + { + "name": "pToken", + "type": "ULONG_PTR" + } + ], + "CoGetDefaultContext": [ + { + "name": "aptType", + "type": "APTTYPE" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CoGetApartmentType": [ + { + "name": "pAptType", + "type": "APTTYPE" + }, + { + "name": "pAptQualifier", + "type": "APTTYPEQUALIFIER" + } + ], + "CoDecodeProxy": [ + { + "name": "dwClientPid", + "type": "DWORD" + }, + { + "name": "ui64ProxyAddress", + "type": "UINT64" + }, + { + "name": "pServerInformation", + "type": "PServerInformation" + } + ], + "CoIncrementMTAUsage": [ + { + "name": "pCookie", + "type": "CO_MTA_USAGE_COOKIE" + } + ], + "CoDecrementMTAUsage": [ + { + "name": "Cookie", + "type": "CO_MTA_USAGE_COOKIE" + } + ], + "CoAllowUnmarshalerCLSID": [ + { + "name": "clsid", + "type": "IID" + } + ], + "CoGetObjectContext": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoGetClassObject": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "dwClsContext", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoRegisterClassObject": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwClsContext", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "lpdwRegister", + "type": "LPDWORD" + } + ], + "CoRevokeClassObject": [ + { + "name": "dwRegister", + "type": "DWORD" + } + ], + "CoResumeClassObjects": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoSuspendClassObjects": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoAddRefServerProcess": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoReleaseServerProcess": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoGetPSClsid": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "pClsid", + "type": "CLSID" + } + ], + "CoRegisterPSClsid": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "rclsid", + "type": "IID" + } + ], + "CoRegisterSurrogate": [ + { + "name": "pSurrogate", + "type": "LPSURROGATE" + } + ], + "CoGetMarshalSizeMax": [ + { + "name": "pulSize", + "type": "ULONG" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwDestContext", + "type": "DWORD" + }, + { + "name": "pvDestContext", + "type": "LPVOID" + }, + { + "name": "mshlflags", + "type": "DWORD" + } + ], + "CoMarshalInterface": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwDestContext", + "type": "DWORD" + }, + { + "name": "pvDestContext", + "type": "LPVOID" + }, + { + "name": "mshlflags", + "type": "DWORD" + } + ], + "CoUnmarshalInterface": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoMarshalHresult": [ + { + "name": "pstm", + "type": "LPSTREAM" + }, + { + "name": "hresult", + "type": "HRESULT" + } + ], + "CoUnmarshalHresult": [ + { + "name": "pstm", + "type": "LPSTREAM" + }, + { + "name": "phresult", + "type": "HRESULT" + } + ], + "CoReleaseMarshalData": [ + { + "name": "pStm", + "type": "LPSTREAM" + } + ], + "CoDisconnectObject": [ + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "CoLockObjectExternal": [ + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "fLock", + "type": "BOOL" + }, + { + "name": "fLastUnlockReleases", + "type": "BOOL" + } + ], + "CoGetStandardMarshal": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwDestContext", + "type": "DWORD" + }, + { + "name": "pvDestContext", + "type": "LPVOID" + }, + { + "name": "mshlflags", + "type": "DWORD" + }, + { + "name": "ppMarshal", + "type": "LPMARSHAL" + } + ], + "CoGetStdMarshalEx": [ + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "smexflags", + "type": "DWORD" + }, + { + "name": "ppUnkInner", + "type": "LPUNKNOWN" + } + ], + "CoIsHandlerConnected": [ + { + "name": "pUnk", + "type": "LPUNKNOWN" + } + ], + "CoMarshalInterThreadInterfaceInStream": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "ppStm", + "type": "LPSTREAM" + } + ], + "CoGetInterfaceAndReleaseStream": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoCreateFreeThreadedMarshaler": [ + { + "name": "punkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "ppunkMarshal", + "type": "LPUNKNOWN" + } + ], + "CoFreeUnusedLibraries": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoFreeUnusedLibrariesEx": [ + { + "name": "dwUnloadDelay", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "CoDisconnectContext": [ + { + "name": "dwTimeout", + "type": "DWORD" + } + ], + "CoInitializeSecurity": [ + { + "name": "pSecDesc", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "cAuthSvc", + "type": "LONG" + }, + { + "name": "asAuthSvc", + "type": "SOLE_AUTHENTICATION_SERVICE" + }, + { + "name": "pReserved1", + "type": "void" + }, + { + "name": "dwAuthnLevel", + "type": "DWORD" + }, + { + "name": "dwImpLevel", + "type": "DWORD" + }, + { + "name": "pAuthList", + "type": "void" + }, + { + "name": "dwCapabilities", + "type": "DWORD" + }, + { + "name": "pReserved3", + "type": "void" + } + ], + "CoGetCallContext": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppInterface", + "type": "void" + } + ], + "CoQueryProxyBlanket": [ + { + "name": "pProxy", + "type": "IUnknown" + }, + { + "name": "pwAuthnSvc", + "type": "DWORD" + }, + { + "name": "pAuthzSvc", + "type": "DWORD" + }, + { + "name": "pServerPrincName", + "type": "LPOLESTR" + }, + { + "name": "pAuthnLevel", + "type": "DWORD" + }, + { + "name": "pImpLevel", + "type": "DWORD" + }, + { + "name": "pAuthInfo", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "pCapabilites", + "type": "DWORD" + } + ], + "CoSetProxyBlanket": [ + { + "name": "pProxy", + "type": "IUnknown" + }, + { + "name": "dwAuthnSvc", + "type": "DWORD" + }, + { + "name": "dwAuthzSvc", + "type": "DWORD" + }, + { + "name": "pServerPrincName", + "type": "OLECHAR" + }, + { + "name": "dwAuthnLevel", + "type": "DWORD" + }, + { + "name": "dwImpLevel", + "type": "DWORD" + }, + { + "name": "pAuthInfo", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "dwCapabilities", + "type": "DWORD" + } + ], + "CoCopyProxy": [ + { + "name": "pProxy", + "type": "IUnknown" + }, + { + "name": "ppCopy", + "type": "IUnknown" + } + ], + "CoQueryClientBlanket": [ + { + "name": "pAuthnSvc", + "type": "DWORD" + }, + { + "name": "pAuthzSvc", + "type": "DWORD" + }, + { + "name": "pServerPrincName", + "type": "LPOLESTR" + }, + { + "name": "pAuthnLevel", + "type": "DWORD" + }, + { + "name": "pImpLevel", + "type": "DWORD" + }, + { + "name": "pPrivs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "pCapabilities", + "type": "DWORD" + } + ], + "CoImpersonateClient": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoRevertToSelf": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoQueryAuthenticationServices": [ + { + "name": "pcAuthSvc", + "type": "DWORD" + }, + { + "name": "asAuthSvc", + "type": "SOLE_AUTHENTICATION_SERVICE" + } + ], + "CoSwitchCallContext": [ + { + "name": "pNewObject", + "type": "IUnknown" + }, + { + "name": "ppOldObject", + "type": "IUnknown" + } + ], + "CoCreateInstance": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "dwClsContext", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoCreateInstanceEx": [ + { + "name": "Clsid", + "type": "IID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "pServerInfo", + "type": "COSERVERINFO" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoCreateInstanceFromApp": [ + { + "name": "Clsid", + "type": "IID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "PVOID" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoRegisterActivationFilter": [ + { + "name": "pActivationFilter", + "type": "IActivationFilter" + } + ], + "CoGetCancelObject": [ + { + "name": "dwThreadId", + "type": "DWORD" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppUnk", + "type": "void" + } + ], + "CoSetCancelObject": [ + { + "name": "pUnk", + "type": "IUnknown" + } + ], + "CoCancelCall": [ + { + "name": "dwThreadId", + "type": "DWORD" + }, + { + "name": "ulTimeout", + "type": "ULONG" + } + ], + "CoTestCancel": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoEnableCallCancellation": [ + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "CoDisableCallCancellation": [ + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "StringFromCLSID": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lplpsz", + "type": "LPOLESTR" + } + ], + "CLSIDFromString": [ + { + "name": "lpsz", + "type": "LPCOLESTR" + }, + { + "name": "pclsid", + "type": "LPCLSID" + } + ], + "StringFromIID": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lplpsz", + "type": "LPOLESTR" + } + ], + "IIDFromString": [ + { + "name": "lpsz", + "type": "LPCOLESTR" + }, + { + "name": "lpiid", + "type": "LPIID" + } + ], + "ProgIDFromCLSID": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "lplpszProgID", + "type": "LPOLESTR" + } + ], + "CLSIDFromProgID": [ + { + "name": "lpszProgID", + "type": "LPCOLESTR" + }, + { + "name": "lpclsid", + "type": "LPCLSID" + } + ], + "StringFromGUID2": [ + { + "name": "rguid", + "type": "GUID" + }, + { + "name": "lpsz", + "type": "LPOLESTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "CoCreateGuid": [ + { + "name": "pguid", + "type": "GUID" + } + ], + "PropVariantCopy": [ + { + "name": "pvarDest", + "type": "PROPVARIANT" + }, + { + "name": "pvarSrc", + "type": "PROPVARIANT" + } + ], + "PropVariantClear": [ + { + "name": "pvar", + "type": "PROPVARIANT" + } + ], + "FreePropVariantArray": [ + { + "name": "cVariants", + "type": "ULONG" + }, + { + "name": "rgvars", + "type": "PROPVARIANT" + } + ], + "CoWaitForMultipleHandles": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "cHandles", + "type": "ULONG" + }, + { + "name": "pHandles", + "type": "LPHANDLE" + }, + { + "name": "lpdwindex", + "type": "LPDWORD" + } + ], + "CoWaitForMultipleObjects": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "cHandles", + "type": "ULONG" + }, + { + "name": "pHandles", + "type": "HANDLE" + }, + { + "name": "lpdwindex", + "type": "LPDWORD" + } + ], + "CoGetTreatAsClass": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "pClsidNew", + "type": "LPCLSID" + } + ], + "CoInvalidateRemoteMachineBindings": [ + { + "name": "pszMachineName", + "type": "LPOLESTR" + } + ], + "RoGetAgileReference": [ + { + "name": "options", + "type": { + "name": "AgileReferenceOptions", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "ppAgileReference", + "type": "IAgileReference" + } + ], + "CoTaskMemAlloc": [ + { + "name": "cb", + "type": "SIZE_T" + } + ], + "CoTaskMemRealloc": [ + { + "name": "pv", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "SIZE_T" + } + ], + "CoTaskMemFree": [ + { + "name": "pv", + "type": "LPVOID" + } + ], + "CoFileTimeNow": [ + { + "name": "lpFileTime", + "type": "FILETIME" + } + ], + "CLSIDFromProgIDEx": [ + { + "name": "lpszProgID", + "type": "LPCOLESTR" + }, + { + "name": "lpclsid", + "type": "LPCLSID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/coml2api.json b/qiling/extensions/windows_sdk/coml2api.json new file mode 100644 index 000000000..33c8f1ee8 --- /dev/null +++ b/qiling/extensions/windows_sdk/coml2api.json @@ -0,0 +1,340 @@ +{ + "StgCreateDocfile": [ + { + "name": "pwcsName", + "type": "WCHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgCreateDocfileOnILockBytes": [ + { + "name": "plkbyt", + "type": "ILockBytes" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgOpenStorage": [ + { + "name": "pwcsName", + "type": "WCHAR" + }, + { + "name": "pstgPriority", + "type": "IStorage" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "snbExclude", + "type": "SNB" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgOpenStorageOnILockBytes": [ + { + "name": "plkbyt", + "type": "ILockBytes" + }, + { + "name": "pstgPriority", + "type": "IStorage" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "snbExclude", + "type": "SNB" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgIsStorageFile": [ + { + "name": "pwcsName", + "type": "WCHAR" + } + ], + "StgIsStorageILockBytes": [ + { + "name": "plkbyt", + "type": "ILockBytes" + } + ], + "StgSetTimes": [ + { + "name": "lpszName", + "type": "WCHAR" + }, + { + "name": "pctime", + "type": "FILETIME" + }, + { + "name": "patime", + "type": "FILETIME" + }, + { + "name": "pmtime", + "type": "FILETIME" + } + ], + "StgCreateStorageEx": [ + { + "name": "pwcsName", + "type": "WCHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "stgfmt", + "type": "DWORD" + }, + { + "name": "grfAttrs", + "type": "DWORD" + }, + { + "name": "pStgOptions", + "type": "STGOPTIONS" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppObjectOpen", + "type": "void" + } + ], + "StgOpenStorageEx": [ + { + "name": "pwcsName", + "type": "WCHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "stgfmt", + "type": "DWORD" + }, + { + "name": "grfAttrs", + "type": "DWORD" + }, + { + "name": "pStgOptions", + "type": "STGOPTIONS" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppObjectOpen", + "type": "void" + } + ], + "StgCreatePropStg": [ + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "fmtid", + "type": "IID" + }, + { + "name": "pclsid", + "type": "CLSID" + }, + { + "name": "grfFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "ppPropStg", + "type": "IPropertyStorage" + } + ], + "StgOpenPropStg": [ + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "fmtid", + "type": "IID" + }, + { + "name": "grfFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "ppPropStg", + "type": "IPropertyStorage" + } + ], + "StgCreatePropSetStg": [ + { + "name": "pStorage", + "type": "IStorage" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "ppPropSetStg", + "type": "IPropertySetStorage" + } + ], + "FmtIdToPropStgName": [ + { + "name": "pfmtid", + "type": "FMTID" + }, + { + "name": "oszName", + "type": "LPOLESTR" + } + ], + "PropStgNameToFmtId": [ + { + "name": "oszName", + "type": "LPOLESTR" + }, + { + "name": "pfmtid", + "type": "FMTID" + } + ], + "ReadClassStg": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "WriteClassStg": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "rclsid", + "type": "IID" + } + ], + "ReadClassStm": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "WriteClassStm": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "rclsid", + "type": "IID" + } + ], + "GetHGlobalFromILockBytes": [ + { + "name": "plkbyt", + "type": "LPLOCKBYTES" + }, + { + "name": "phglobal", + "type": "HGLOBAL" + } + ], + "CreateILockBytesOnHGlobal": [ + { + "name": "hGlobal", + "type": "HGLOBAL" + }, + { + "name": "fDeleteOnRelease", + "type": "BOOL" + }, + { + "name": "pplkbyt", + "type": "LPLOCKBYTES" + } + ], + "GetConvertStg": [ + { + "name": "pStg", + "type": "LPSTORAGE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/commctrl.json b/qiling/extensions/windows_sdk/commctrl.json new file mode 100644 index 000000000..9d054d64f --- /dev/null +++ b/qiling/extensions/windows_sdk/commctrl.json @@ -0,0 +1,1260 @@ +{ + "InitCommonControls": [ + { + "name": "VOID", + "type": "void" + } + ], + "InitCommonControlsEx": [ + { + "name": "picce", + "type": "INITCOMMONCONTROLSEX" + } + ], + "ImageList_Create": [ + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + }, + { + "name": "cInitial", + "type": "int" + }, + { + "name": "cGrow", + "type": "int" + } + ], + "ImageList_Destroy": [ + { + "name": "himl", + "type": "HIMAGELIST" + } + ], + "ImageList_GetImageCount": [ + { + "name": "himl", + "type": "HIMAGELIST" + } + ], + "ImageList_SetImageCount": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "uNewCount", + "type": "UINT" + } + ], + "ImageList_Add": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "hbmImage", + "type": "HBITMAP" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + } + ], + "ImageList_ReplaceIcon": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "hicon", + "type": "HICON" + } + ], + "ImageList_SetBkColor": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "clrBk", + "type": "COLORREF" + } + ], + "ImageList_GetBkColor": [ + { + "name": "himl", + "type": "HIMAGELIST" + } + ], + "ImageList_SetOverlayImage": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "iImage", + "type": "int" + }, + { + "name": "iOverlay", + "type": "int" + } + ], + "ImageList_Draw": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "hdcDst", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "fStyle", + "type": "UINT" + } + ], + "ImageList_Replace": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "hbmImage", + "type": "HBITMAP" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + } + ], + "ImageList_AddMasked": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "hbmImage", + "type": "HBITMAP" + }, + { + "name": "crMask", + "type": "COLORREF" + } + ], + "ImageList_DrawEx": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "hdcDst", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + }, + { + "name": "rgbBk", + "type": "COLORREF" + }, + { + "name": "rgbFg", + "type": "COLORREF" + }, + { + "name": "fStyle", + "type": "UINT" + } + ], + "ImageList_DrawIndirect": [ + { + "name": "pimldp", + "type": "IMAGELISTDRAWPARAMS" + } + ], + "ImageList_Remove": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + } + ], + "ImageList_GetIcon": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "ImageList_LoadImageA": [ + { + "name": "hi", + "type": "HINSTANCE" + }, + { + "name": "lpbmp", + "type": "LPCSTR" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cGrow", + "type": "int" + }, + { + "name": "crMask", + "type": "COLORREF" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "ImageList_LoadImageW": [ + { + "name": "hi", + "type": "HINSTANCE" + }, + { + "name": "lpbmp", + "type": "LPCWSTR" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cGrow", + "type": "int" + }, + { + "name": "crMask", + "type": "COLORREF" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "ImageList_Copy": [ + { + "name": "himlDst", + "type": "HIMAGELIST" + }, + { + "name": "iDst", + "type": "int" + }, + { + "name": "himlSrc", + "type": "HIMAGELIST" + }, + { + "name": "iSrc", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "ImageList_BeginDrag": [ + { + "name": "himlTrack", + "type": "HIMAGELIST" + }, + { + "name": "iTrack", + "type": "int" + }, + { + "name": "dxHotspot", + "type": "int" + }, + { + "name": "dyHotspot", + "type": "int" + } + ], + "ImageList_EndDrag": [ + { + "name": "VOID", + "type": "void" + } + ], + "ImageList_DragEnter": [ + { + "name": "hwndLock", + "type": "HWND" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "ImageList_DragLeave": [ + { + "name": "hwndLock", + "type": "HWND" + } + ], + "ImageList_DragMove": [ + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "ImageList_SetDragCursorImage": [ + { + "name": "himlDrag", + "type": "HIMAGELIST" + }, + { + "name": "iDrag", + "type": "int" + }, + { + "name": "dxHotspot", + "type": "int" + }, + { + "name": "dyHotspot", + "type": "int" + } + ], + "ImageList_DragShowNolock": [ + { + "name": "fShow", + "type": "BOOL" + } + ], + "ImageList_GetDragImage": [ + { + "name": "ppt", + "type": "POINT" + }, + { + "name": "pptHotspot", + "type": "POINT" + } + ], + "ImageList_Read": [ + { + "name": "pstm", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + } + ], + "ImageList_Write": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "pstm", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + } + ], + "ImageList_ReadEx": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pstm", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "PVOID" + } + ], + "ImageList_WriteEx": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pstm", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + } + ], + "ImageList_GetIconSize": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "ImageList_SetIconSize": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "ImageList_GetImageInfo": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "pImageInfo", + "type": "IMAGEINFO" + } + ], + "ImageList_Merge": [ + { + "name": "himl1", + "type": "HIMAGELIST" + }, + { + "name": "i1", + "type": "int" + }, + { + "name": "himl2", + "type": "HIMAGELIST" + }, + { + "name": "i2", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "ImageList_Duplicate": [ + { + "name": "himl", + "type": "HIMAGELIST" + } + ], + "HIMAGELIST_QueryInterface": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CreateToolbarEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ws", + "type": "DWORD" + }, + { + "name": "wID", + "type": "UINT" + }, + { + "name": "nBitmaps", + "type": "int" + }, + { + "name": "hBMInst", + "type": "HINSTANCE" + }, + { + "name": "wBMID", + "type": "UINT_PTR" + }, + { + "name": "lpButtons", + "type": "LPCTBBUTTON" + }, + { + "name": "iNumButtons", + "type": "int" + }, + { + "name": "dxButton", + "type": "int" + }, + { + "name": "dyButton", + "type": "int" + }, + { + "name": "dxBitmap", + "type": "int" + }, + { + "name": "dyBitmap", + "type": "int" + }, + { + "name": "uStructSize", + "type": "UINT" + } + ], + "CreateMappedBitmap": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "idBitmap", + "type": "INT_PTR" + }, + { + "name": "wFlags", + "type": "UINT" + }, + { + "name": "lpColorMap", + "type": "LPCOLORMAP" + }, + { + "name": "iNumMaps", + "type": "int" + } + ], + "DrawStatusTextA": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "LPCRECT" + }, + { + "name": "pszText", + "type": "LPCSTR" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "DrawStatusTextW": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "LPCRECT" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "CreateStatusWindowA": [ + { + "name": "style", + "type": "LONG" + }, + { + "name": "lpszText", + "type": "LPCSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "wID", + "type": "UINT" + } + ], + "CreateStatusWindowW": [ + { + "name": "style", + "type": "LONG" + }, + { + "name": "lpszText", + "type": "LPCWSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "wID", + "type": "UINT" + } + ], + "MenuHelp": [ + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "hMainMenu", + "type": "HMENU" + }, + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "hwndStatus", + "type": "HWND" + }, + { + "name": "lpwIDs", + "type": "UINT" + } + ], + "ShowHideMenuCtl": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uFlags", + "type": "UINT_PTR" + }, + { + "name": "lpInfo", + "type": "LPINT" + } + ], + "GetEffectiveClientRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "lpInfo", + "type": "INT" + } + ], + "MakeDragList": [ + { + "name": "hLB", + "type": "HWND" + } + ], + "DrawInsert": [ + { + "name": "handParent", + "type": "HWND" + }, + { + "name": "hLB", + "type": "HWND" + }, + { + "name": "nItem", + "type": "int" + } + ], + "LBItemFromPt": [ + { + "name": "hLB", + "type": "HWND" + }, + { + "name": "pt", + "type": "POINT" + }, + { + "name": "bAutoScroll", + "type": "BOOL" + } + ], + "CreateUpDownControl": [ + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "hParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + }, + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "hBuddy", + "type": "HWND" + }, + { + "name": "nUpper", + "type": "int" + }, + { + "name": "nLower", + "type": "int" + }, + { + "name": "nPos", + "type": "int" + } + ], + "TaskDialogIndirect": [ + { + "name": "pTaskConfig", + "type": "TASKDIALOGCONFIG" + }, + { + "name": "pnButton", + "type": "int" + }, + { + "name": "pnRadioButton", + "type": "int" + }, + { + "name": "pfVerificationFlagChecked", + "type": "BOOL" + } + ], + "TaskDialog": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "pszWindowTitle", + "type": "PCWSTR" + }, + { + "name": "pszMainInstruction", + "type": "PCWSTR" + }, + { + "name": "pszContent", + "type": "PCWSTR" + }, + { + "name": "dwCommonButtons", + "type": "TASKDIALOG_COMMON_BUTTON_FLAGS" + }, + { + "name": "pszIcon", + "type": "PCWSTR" + }, + { + "name": "pnButton", + "type": "int" + } + ], + "InitMUILanguage": [ + { + "name": "uiLang", + "type": "LANGID" + } + ], + "GetMUILanguage": [ + { + "name": "VOID", + "type": "void" + } + ], + "_TrackMouseEvent": [ + { + "name": "lpEventTrack", + "type": "LPTRACKMOUSEEVENT" + } + ], + "FlatSB_EnableScrollBar": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "UINT" + } + ], + "FlatSB_ShowScrollBar": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "FlatSB_GetScrollRange": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "VOID", + "type": "LPINT" + }, + { + "name": "VOID", + "type": "LPINT" + } + ], + "FlatSB_GetScrollInfo": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "VOID", + "type": "LPSCROLLINFO" + } + ], + "FlatSB_GetScrollPos": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + } + ], + "FlatSB_GetScrollProp": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "propIndex", + "type": "int" + }, + { + "name": "VOID", + "type": "LPINT" + } + ], + "FlatSB_GetScrollPropPtr": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "propIndex", + "type": "int" + }, + { + "name": "VOID", + "type": "PINT_PTR" + } + ], + "FlatSB_SetScrollPos": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "pos", + "type": "int" + }, + { + "name": "fRedraw", + "type": "BOOL" + } + ], + "FlatSB_SetScrollInfo": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "psi", + "type": "LPSCROLLINFO" + }, + { + "name": "fRedraw", + "type": "BOOL" + } + ], + "FlatSB_SetScrollRange": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "min", + "type": "int" + }, + { + "name": "max", + "type": "int" + }, + { + "name": "fRedraw", + "type": "BOOL" + } + ], + "FlatSB_SetScrollProp": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "index", + "type": "UINT" + }, + { + "name": "newValue", + "type": "INT_PTR" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "InitializeFlatSB": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "UninitializeFlatSB": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "SetWindowSubclass": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pfnSubclass", + "type": "SUBCLASSPROC" + }, + { + "name": "uIdSubclass", + "type": "UINT_PTR" + }, + { + "name": "dwRefData", + "type": "DWORD_PTR" + } + ], + "GetWindowSubclass": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pfnSubclass", + "type": "SUBCLASSPROC" + }, + { + "name": "uIdSubclass", + "type": "UINT_PTR" + }, + { + "name": "pdwRefData", + "type": "DWORD_PTR" + } + ], + "RemoveWindowSubclass": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pfnSubclass", + "type": "SUBCLASSPROC" + }, + { + "name": "uIdSubclass", + "type": "UINT_PTR" + } + ], + "DefSubclassProc": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "LoadIconMetric": [ + { + "name": "hinst", + "type": "HINSTANCE" + }, + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "lims", + "type": "int" + }, + { + "name": "phico", + "type": "HICON" + } + ], + "LoadIconWithScaleDown": [ + { + "name": "hinst", + "type": "HINSTANCE" + }, + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "phico", + "type": "HICON" + } + ], + "DrawShadowText": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "cch", + "type": "UINT" + }, + { + "name": "prc", + "type": "RECT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "crText", + "type": "COLORREF" + }, + { + "name": "crShadow", + "type": "COLORREF" + }, + { + "name": "ixOffset", + "type": "int" + }, + { + "name": "iyOffset", + "type": "int" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/commdlg.json b/qiling/extensions/windows_sdk/commdlg.json new file mode 100644 index 000000000..d9388fb34 --- /dev/null +++ b/qiling/extensions/windows_sdk/commdlg.json @@ -0,0 +1,84 @@ +{ + "GetOpenFileNameA": [ + { + "name": "VOID", + "type": "LPOPENFILENAMEA" + } + ], + "GetOpenFileNameW": [ + { + "name": "VOID", + "type": "LPOPENFILENAMEW" + } + ], + "GetSaveFileNameA": [ + { + "name": "VOID", + "type": "LPOPENFILENAMEA" + } + ], + "GetSaveFileNameW": [ + { + "name": "VOID", + "type": "LPOPENFILENAMEW" + } + ], + "GetFileTitleA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "Buf", + "type": "LPSTR" + }, + { + "name": "cchSize", + "type": "WORD" + } + ], + "GetFileTitleW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "Buf", + "type": "LPWSTR" + }, + { + "name": "cchSize", + "type": "WORD" + } + ], + "FindTextA": [ + { + "name": "VOID", + "type": "LPFINDREPLACEA" + } + ], + "FindTextW": [ + { + "name": "VOID", + "type": "LPFINDREPLACEW" + } + ], + "ReplaceTextA": [ + { + "name": "VOID", + "type": "LPFINDREPLACEA" + } + ], + "ReplaceTextW": [ + { + "name": "VOID", + "type": "LPFINDREPLACEW" + } + ], + "CommDlgExtendedError": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/comppkgsup.json b/qiling/extensions/windows_sdk/comppkgsup.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/comppkgsup.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/compressapi.json b/qiling/extensions/windows_sdk/compressapi.json new file mode 100644 index 000000000..c6fa6cdbd --- /dev/null +++ b/qiling/extensions/windows_sdk/compressapi.json @@ -0,0 +1,178 @@ +{ + "CreateCompressor": [ + { + "name": "Algorithm", + "type": "DWORD" + }, + { + "name": "AllocationRoutines", + "type": "PCOMPRESS_ALLOCATION_ROUTINES" + }, + { + "name": "CompressorHandle", + "type": "PCOMPRESSOR_HANDLE" + } + ], + "SetCompressorInformation": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + }, + { + "name": "CompressInformationClass", + "type": "COMPRESS_INFORMATION_CLASS" + }, + { + "name": "CompressInformation", + "type": "LPCVOID" + }, + { + "name": "CompressInformationSize", + "type": "SIZE_T" + } + ], + "QueryCompressorInformation": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + }, + { + "name": "CompressInformationClass", + "type": "COMPRESS_INFORMATION_CLASS" + }, + { + "name": "CompressInformation", + "type": "PVOID" + }, + { + "name": "CompressInformationSize", + "type": "SIZE_T" + } + ], + "Compress": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + }, + { + "name": "UncompressedData", + "type": "LPCVOID" + }, + { + "name": "UncompressedDataSize", + "type": "SIZE_T" + }, + { + "name": "CompressedBuffer", + "type": "PVOID" + }, + { + "name": "CompressedBufferSize", + "type": "SIZE_T" + }, + { + "name": "CompressedDataSize", + "type": "PSIZE_T" + } + ], + "ResetCompressor": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + } + ], + "CloseCompressor": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + } + ], + "CreateDecompressor": [ + { + "name": "Algorithm", + "type": "DWORD" + }, + { + "name": "AllocationRoutines", + "type": "PCOMPRESS_ALLOCATION_ROUTINES" + }, + { + "name": "DecompressorHandle", + "type": "PDECOMPRESSOR_HANDLE" + } + ], + "SetDecompressorInformation": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + }, + { + "name": "CompressInformationClass", + "type": "COMPRESS_INFORMATION_CLASS" + }, + { + "name": "CompressInformation", + "type": "LPCVOID" + }, + { + "name": "CompressInformationSize", + "type": "SIZE_T" + } + ], + "QueryDecompressorInformation": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + }, + { + "name": "CompressInformationClass", + "type": "COMPRESS_INFORMATION_CLASS" + }, + { + "name": "CompressInformation", + "type": "PVOID" + }, + { + "name": "CompressInformationSize", + "type": "SIZE_T" + } + ], + "Decompress": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + }, + { + "name": "CompressedData", + "type": "LPCVOID" + }, + { + "name": "CompressedDataSize", + "type": "SIZE_T" + }, + { + "name": "UncompressedBuffer", + "type": "PVOID" + }, + { + "name": "UncompressedBufferSize", + "type": "SIZE_T" + }, + { + "name": "UncompressedDataSize", + "type": "PSIZE_T" + } + ], + "ResetDecompressor": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + } + ], + "CloseDecompressor": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/comsvcs.json b/qiling/extensions/windows_sdk/comsvcs.json new file mode 100644 index 000000000..a63594e21 --- /dev/null +++ b/qiling/extensions/windows_sdk/comsvcs.json @@ -0,0 +1,50 @@ +{ + "CoCreateActivity": [ + { + "name": "pIUnknown", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppObj", + "type": "void" + } + ], + "CoEnterServiceDomain": [ + { + "name": "pConfigObject", + "type": "IUnknown" + } + ], + "CoLeaveServiceDomain": [ + { + "name": "pUnkStatus", + "type": "IUnknown" + } + ], + "GetManagedExtensions": [ + { + "name": "dwExts", + "type": "DWORD" + } + ], + "RecycleSurrogate": [ + { + "name": "lReasonCode", + "type": "long" + } + ], + "MTSCreateActivity": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppobj", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/cryptdlg.json b/qiling/extensions/windows_sdk/cryptdlg.json new file mode 100644 index 000000000..9bc16cce9 --- /dev/null +++ b/qiling/extensions/windows_sdk/cryptdlg.json @@ -0,0 +1,80 @@ +{ + "CertSelectCertificateA": [ + { + "name": "pCertSelectInfo", + "type": "PCERT_SELECT_STRUCT_A" + } + ], + "CertSelectCertificateW": [ + { + "name": "pCertSelectInfo", + "type": "PCERT_SELECT_STRUCT_W" + } + ], + "CertViewPropertiesA": [ + { + "name": "pCertViewInfo", + "type": "PCERT_VIEWPROPERTIES_STRUCT_A" + } + ], + "CertViewPropertiesW": [ + { + "name": "pCertViewInfo", + "type": "PCERT_VIEWPROPERTIES_STRUCT_W" + } + ], + "GetFriendlyNameOfCertA": [ + { + "name": "pccert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pch", + "type": "LPSTR" + }, + { + "name": "cch", + "type": "DWORD" + } + ], + "GetFriendlyNameOfCertW": [ + { + "name": "pccert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pwch", + "type": "LPWSTR" + }, + { + "name": "cwch", + "type": "DWORD" + } + ], + "CertModifyCertificatesToTrust": [ + { + "name": "cCerts", + "type": "int" + }, + { + "name": "rgCerts", + "type": "PCTL_MODIFY_REQUEST" + }, + { + "name": "szPurpose", + "type": "LPCSTR" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hcertstoreTrust", + "type": "HCERTSTORE" + }, + { + "name": "pccertSigner", + "type": "PCCERT_CONTEXT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/cryptuiapi.json b/qiling/extensions/windows_sdk/cryptuiapi.json new file mode 100644 index 000000000..42666b020 --- /dev/null +++ b/qiling/extensions/windows_sdk/cryptuiapi.json @@ -0,0 +1,170 @@ +{ + "CryptUIDlgViewContext": [ + { + "name": "dwContextType", + "type": "DWORD" + }, + { + "name": "pvContext", + "type": "void" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pwszTitle", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CryptUIDlgSelectCertificateFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pwszTitle", + "type": "LPCWSTR" + }, + { + "name": "pwszDisplayString", + "type": "LPCWSTR" + }, + { + "name": "dwDontUseColumn", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertSelectionGetSerializedBlob": [ + { + "name": "pcsi", + "type": "PCERT_SELECTUI_INPUT" + }, + { + "name": "ppOutBuffer", + "type": "void" + }, + { + "name": "pulOutBufferSize", + "type": "ULONG" + } + ], + "CryptUIDlgCertMgr": [ + { + "name": "pCryptUICertMgr", + "type": "PCCRYPTUI_CERT_MGR_STRUCT" + } + ], + "CryptUIWizDigitalSign": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "pwszWizardTitle", + "type": "LPCWSTR" + }, + { + "name": "pDigitalSignInfo", + "type": "PCCRYPTUI_WIZ_DIGITAL_SIGN_INFO" + }, + { + "name": "ppSignContext", + "type": "PCCRYPTUI_WIZ_DIGITAL_SIGN_CONTEXT" + } + ], + "CryptUIWizFreeDigitalSignContext": [ + { + "name": "pSignContext", + "type": "PCCRYPTUI_WIZ_DIGITAL_SIGN_CONTEXT" + } + ], + "CryptUIDlgViewCertificateW": [ + { + "name": "pCertViewInfo", + "type": "PCCRYPTUI_VIEWCERTIFICATE_STRUCTW" + }, + { + "name": "pfPropertiesChanged", + "type": "BOOL" + } + ], + "CryptUIDlgViewCertificateA": [ + { + "name": "pCertViewInfo", + "type": "PCCRYPTUI_VIEWCERTIFICATE_STRUCTA" + }, + { + "name": "pfPropertiesChanged", + "type": "BOOL" + } + ], + "CryptUIWizExport": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "pwszWizardTitle", + "type": "LPCWSTR" + }, + { + "name": "pExportInfo", + "type": "PCCRYPTUI_WIZ_EXPORT_INFO" + }, + { + "name": "pvoid", + "type": "void" + } + ], + "CryptUIWizImport": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "pwszWizardTitle", + "type": "LPCWSTR" + }, + { + "name": "pImportSrc", + "type": "PCCRYPTUI_WIZ_IMPORT_SRC_INFO" + }, + { + "name": "hDestCertStore", + "type": "HCERTSTORE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/cryptxml.json b/qiling/extensions/windows_sdk/cryptxml.json new file mode 100644 index 000000000..aeef2e267 --- /dev/null +++ b/qiling/extensions/windows_sdk/cryptxml.json @@ -0,0 +1,304 @@ +{ + "CryptXmlClose": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + } + ], + "CryptXmlGetTransforms": [ + { + "name": "ppConfig", + "type": "CRYPT_XML_TRANSFORM_CHAIN_CONFIG" + } + ], + "CryptXmlOpenToEncode": [ + { + "name": "pConfig", + "type": "CRYPT_XML_TRANSFORM_CHAIN_CONFIG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "wszId", + "type": "LPCWSTR" + }, + { + "name": "rgProperty", + "type": "CRYPT_XML_PROPERTY" + }, + { + "name": "cProperty", + "type": "ULONG" + }, + { + "name": "pEncoded", + "type": "CRYPT_XML_BLOB" + }, + { + "name": "phSignature", + "type": "HCRYPTXML" + } + ], + "CryptXmlOpenToDecode": [ + { + "name": "pConfig", + "type": "CRYPT_XML_TRANSFORM_CHAIN_CONFIG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "rgProperty", + "type": "CRYPT_XML_PROPERTY" + }, + { + "name": "cProperty", + "type": "ULONG" + }, + { + "name": "pEncoded", + "type": "CRYPT_XML_BLOB" + }, + { + "name": "phCryptXml", + "type": "HCRYPTXML" + } + ], + "CryptXmlAddObject": [ + { + "name": "hSignatureOrObject", + "type": "HCRYPTXML" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "rgProperty", + "type": "CRYPT_XML_PROPERTY" + }, + { + "name": "cProperty", + "type": "ULONG" + }, + { + "name": "pEncoded", + "type": "CRYPT_XML_BLOB" + }, + { + "name": "ppObject", + "type": "CRYPT_XML_OBJECT" + } + ], + "CryptXmlCreateReference": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "wszId", + "type": "LPCWSTR" + }, + { + "name": "wszURI", + "type": "LPCWSTR" + }, + { + "name": "wszType", + "type": "LPCWSTR" + }, + { + "name": "pDigestMethod", + "type": "CRYPT_XML_ALGORITHM" + }, + { + "name": "cTransform", + "type": "ULONG" + }, + { + "name": "rgTransform", + "type": "CRYPT_XML_ALGORITHM" + }, + { + "name": "phReference", + "type": "HCRYPTXML" + } + ], + "CryptXmlDigestReference": [ + { + "name": "hReference", + "type": "HCRYPTXML" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pDataProviderIn", + "type": "CRYPT_XML_DATA_PROVIDER" + } + ], + "CryptXmlSetHMACSecret": [ + { + "name": "hSignature", + "type": "HCRYPTXML" + }, + { + "name": "pbSecret", + "type": "BYTE" + }, + { + "name": "cbSecret", + "type": "ULONG" + } + ], + "CryptXmlSign": [ + { + "name": "hSignature", + "type": "HCRYPTXML" + }, + { + "name": "hKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwKeyInfoSpec", + "type": "CRYPT_XML_KEYINFO_SPEC" + }, + { + "name": "pvKeyInfoSpec", + "type": "void" + }, + { + "name": "pSignatureMethod", + "type": "CRYPT_XML_ALGORITHM" + }, + { + "name": "pCanonicalization", + "type": "CRYPT_XML_ALGORITHM" + } + ], + "CryptXmlImportPublicKey": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pKeyValue", + "type": "CRYPT_XML_KEY_VALUE" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + } + ], + "CryptXmlVerifySignature": [ + { + "name": "hSignature", + "type": "HCRYPTXML" + }, + { + "name": "hKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptXmlGetDocContext": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + }, + { + "name": "ppStruct", + "type": "CRYPT_XML_DOC_CTXT" + } + ], + "CryptXmlGetSignature": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + }, + { + "name": "ppStruct", + "type": "CRYPT_XML_SIGNATURE" + } + ], + "CryptXmlGetReference": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + }, + { + "name": "ppStruct", + "type": "CRYPT_XML_REFERENCE" + } + ], + "CryptXmlGetStatus": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + }, + { + "name": "pStatus", + "type": "CRYPT_XML_STATUS" + } + ], + "CryptXmlEncode": [ + { + "name": "hCryptXml", + "type": "HCRYPTXML" + }, + { + "name": "dwCharset", + "type": "CRYPT_XML_CHARSET" + }, + { + "name": "rgProperty", + "type": "CRYPT_XML_PROPERTY" + }, + { + "name": "cProperty", + "type": "ULONG" + }, + { + "name": "pvCallbackState", + "type": "void" + }, + { + "name": "pfnWrite", + "type": "PFN_CRYPT_XML_WRITE_CALLBACK" + } + ], + "CryptXmlGetAlgorithmInfo": [ + { + "name": "pXmlAlgorithm", + "type": "CRYPT_XML_ALGORITHM" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppAlgInfo", + "type": "CRYPT_XML_ALGORITHM_INFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/cscapi.json b/qiling/extensions/windows_sdk/cscapi.json new file mode 100644 index 000000000..d9859f426 --- /dev/null +++ b/qiling/extensions/windows_sdk/cscapi.json @@ -0,0 +1,36 @@ +{ + "OfflineFilesEnable": [ + { + "name": "bEnable", + "type": "BOOL" + }, + { + "name": "pbRebootRequired", + "type": "BOOL" + } + ], + "OfflineFilesQueryStatus": [ + { + "name": "pbActive", + "type": "BOOL" + }, + { + "name": "pbEnabled", + "type": "BOOL" + } + ], + "OfflineFilesQueryStatusEx": [ + { + "name": "pbActive", + "type": "BOOL" + }, + { + "name": "pbEnabled", + "type": "BOOL" + }, + { + "name": "pbAvailable", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1.json b/qiling/extensions/windows_sdk/d2d1.json new file mode 100644 index 000000000..a76e22a4e --- /dev/null +++ b/qiling/extensions/windows_sdk/d2d1.json @@ -0,0 +1,64 @@ +{ + "D2D1CreateFactory": [ + { + "name": "factoryType", + "type": "D2D1_FACTORY_TYPE" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pFactoryOptions", + "type": "D2D1_FACTORY_OPTIONS" + }, + { + "name": "ppIFactory", + "type": "void" + } + ], + "D2D1MakeRotateMatrix": [ + { + "name": "angle", + "type": "FLOAT" + }, + { + "name": "center", + "type": "D2D1_POINT_2F" + }, + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ], + "D2D1MakeSkewMatrix": [ + { + "name": "angleX", + "type": "FLOAT" + }, + { + "name": "angleY", + "type": "FLOAT" + }, + { + "name": "center", + "type": "D2D1_POINT_2F" + }, + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ], + "D2D1IsMatrixInvertible": [ + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ], + "D2D1InvertMatrix": [ + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1_1.json b/qiling/extensions/windows_sdk/d2d1_1.json new file mode 100644 index 000000000..461dc4e15 --- /dev/null +++ b/qiling/extensions/windows_sdk/d2d1_1.json @@ -0,0 +1,78 @@ +{ + "D2D1CreateDevice": [ + { + "name": "dxgiDevice", + "type": "IDXGIDevice" + }, + { + "name": "creationProperties", + "type": "D2D1_CREATION_PROPERTIES" + }, + { + "name": "d2dDevice", + "type": "ID2D1Device" + } + ], + "D2D1CreateDeviceContext": [ + { + "name": "dxgiSurface", + "type": "IDXGISurface" + }, + { + "name": "creationProperties", + "type": "D2D1_CREATION_PROPERTIES" + }, + { + "name": "d2dDeviceContext", + "type": "ID2D1DeviceContext" + } + ], + "D2D1ConvertColorSpace": [ + { + "name": "sourceColorSpace", + "type": "D2D1_COLOR_SPACE" + }, + { + "name": "destinationColorSpace", + "type": "D2D1_COLOR_SPACE" + }, + { + "name": "color", + "type": "D2D1_COLOR_F" + } + ], + "D2D1SinCos": [ + { + "name": "angle", + "type": "FLOAT" + }, + { + "name": "s", + "type": "FLOAT" + }, + { + "name": "c", + "type": "FLOAT" + } + ], + "D2D1Tan": [ + { + "name": "angle", + "type": "FLOAT" + } + ], + "D2D1Vec3Length": [ + { + "name": "x", + "type": "FLOAT" + }, + { + "name": "y", + "type": "FLOAT" + }, + { + "name": "z", + "type": "FLOAT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1_1helper.json b/qiling/extensions/windows_sdk/d2d1_1helper.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/d2d1_1helper.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1_2.json b/qiling/extensions/windows_sdk/d2d1_2.json new file mode 100644 index 000000000..232398d71 --- /dev/null +++ b/qiling/extensions/windows_sdk/d2d1_2.json @@ -0,0 +1,8 @@ +{ + "D2D1ComputeMaximumScaleFactor": [ + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1_3.json b/qiling/extensions/windows_sdk/d2d1_3.json new file mode 100644 index 000000000..ca2951973 --- /dev/null +++ b/qiling/extensions/windows_sdk/d2d1_3.json @@ -0,0 +1,68 @@ +{ + "D2D1GetGradientMeshInteriorPointsFromCoonsPatch": [ + { + "name": "pPoint0", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint1", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint2", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint3", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint4", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint5", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint6", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint7", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint8", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint9", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint10", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint11", + "type": "D2D1_POINT_2F" + }, + { + "name": "pTensorPoint11", + "type": "D2D1_POINT_2F" + }, + { + "name": "pTensorPoint12", + "type": "D2D1_POINT_2F" + }, + { + "name": "pTensorPoint21", + "type": "D2D1_POINT_2F" + }, + { + "name": "pTensorPoint22", + "type": "D2D1_POINT_2F" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1_3helper.json b/qiling/extensions/windows_sdk/d2d1_3helper.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/d2d1_3helper.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1helper.json b/qiling/extensions/windows_sdk/d2d1helper.json new file mode 100644 index 000000000..d2acb8612 --- /dev/null +++ b/qiling/extensions/windows_sdk/d2d1helper.json @@ -0,0 +1,24 @@ +{ + "Ellipse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d10.json b/qiling/extensions/windows_sdk/d3d10.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/d3d10.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d10_1.json b/qiling/extensions/windows_sdk/d3d10_1.json new file mode 100644 index 000000000..30ad405cd --- /dev/null +++ b/qiling/extensions/windows_sdk/d3d10_1.json @@ -0,0 +1,70 @@ +{ + "D3D10CreateDevice1": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D10_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "HardwareLevel", + "type": "D3D10_FEATURE_LEVEL1" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "ppDevice", + "type": "ID3D10Device1" + } + ], + "D3D10CreateDeviceAndSwapChain1": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D10_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "HardwareLevel", + "type": "D3D10_FEATURE_LEVEL1" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "pSwapChainDesc", + "type": "DXGI_SWAP_CHAIN_DESC" + }, + { + "name": "ppSwapChain", + "type": "IDXGISwapChain" + }, + { + "name": "ppDevice", + "type": "ID3D10Device1" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d10effect.json b/qiling/extensions/windows_sdk/d3d10effect.json new file mode 100644 index 000000000..2bdf171a7 --- /dev/null +++ b/qiling/extensions/windows_sdk/d3d10effect.json @@ -0,0 +1,220 @@ +{ + "D3D10StateBlockMaskUnion": [ + { + "name": "pA", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pB", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pResult", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskIntersect": [ + { + "name": "pA", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pB", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pResult", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskDifference": [ + { + "name": "pA", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pB", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pResult", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskEnableCapture": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "StateType", + "type": "D3D10_DEVICE_STATE_TYPES" + }, + { + "name": "RangeStart", + "type": "UINT" + }, + { + "name": "RangeLength", + "type": "UINT" + } + ], + "D3D10StateBlockMaskDisableCapture": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "StateType", + "type": "D3D10_DEVICE_STATE_TYPES" + }, + { + "name": "RangeStart", + "type": "UINT" + }, + { + "name": "RangeLength", + "type": "UINT" + } + ], + "D3D10StateBlockMaskEnableAll": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskDisableAll": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskGetSetting": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "StateType", + "type": "D3D10_DEVICE_STATE_TYPES" + }, + { + "name": "Entry", + "type": "UINT" + } + ], + "D3D10CreateStateBlock": [ + { + "name": "pDevice", + "type": "ID3D10Device" + }, + { + "name": "pStateBlockMask", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "ppStateBlock", + "type": "ID3D10StateBlock" + } + ], + "D3D10CompileEffectFromMemory": [ + { + "name": "pData", + "type": "void" + }, + { + "name": "DataLength", + "type": "SIZE_T" + }, + { + "name": "pSrcFileName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D10_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3D10Include" + }, + { + "name": "HLSLFlags", + "type": "UINT" + }, + { + "name": "FXFlags", + "type": "UINT" + }, + { + "name": "ppCompiledEffect", + "type": "ID3D10Blob" + }, + { + "name": "ppErrors", + "type": "ID3D10Blob" + } + ], + "D3D10CreateEffectFromMemory": [ + { + "name": "pData", + "type": "void" + }, + { + "name": "DataLength", + "type": "SIZE_T" + }, + { + "name": "FXFlags", + "type": "UINT" + }, + { + "name": "pDevice", + "type": "ID3D10Device" + }, + { + "name": "pEffectPool", + "type": "ID3D10EffectPool" + }, + { + "name": "ppEffect", + "type": "ID3D10Effect" + } + ], + "D3D10CreateEffectPoolFromMemory": [ + { + "name": "pData", + "type": "void" + }, + { + "name": "DataLength", + "type": "SIZE_T" + }, + { + "name": "FXFlags", + "type": "UINT" + }, + { + "name": "pDevice", + "type": "ID3D10Device" + }, + { + "name": "ppEffectPool", + "type": "ID3D10EffectPool" + } + ], + "D3D10DisassembleEffect": [ + { + "name": "pEffect", + "type": "ID3D10Effect" + }, + { + "name": "EnableColorCode", + "type": "BOOL" + }, + { + "name": "ppDisassembly", + "type": "ID3D10Blob" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d10misc.json b/qiling/extensions/windows_sdk/d3d10misc.json new file mode 100644 index 000000000..2eb98e60d --- /dev/null +++ b/qiling/extensions/windows_sdk/d3d10misc.json @@ -0,0 +1,72 @@ +{ + "D3D10CreateDevice": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D10_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "ppDevice", + "type": "ID3D10Device" + } + ], + "D3D10CreateDeviceAndSwapChain": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D10_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "pSwapChainDesc", + "type": "DXGI_SWAP_CHAIN_DESC" + }, + { + "name": "ppSwapChain", + "type": "IDXGISwapChain" + }, + { + "name": "ppDevice", + "type": "ID3D10Device" + } + ], + "D3D10CreateBlob": [ + { + "name": "NumBytes", + "type": "SIZE_T" + }, + { + "name": "ppBuffer", + "type": "LPD3D10BLOB" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d11.json b/qiling/extensions/windows_sdk/d3d11.json new file mode 100644 index 000000000..60c158916 --- /dev/null +++ b/qiling/extensions/windows_sdk/d3d11.json @@ -0,0 +1,94 @@ +{ + "D3D11CreateDevice": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "pFeatureLevels", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "FeatureLevels", + "type": "UINT" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "ppDevice", + "type": "ID3D11Device" + }, + { + "name": "pFeatureLevel", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "ppImmediateContext", + "type": "ID3D11DeviceContext" + } + ], + "D3D11CreateDeviceAndSwapChain": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "pFeatureLevels", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "FeatureLevels", + "type": "UINT" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "pSwapChainDesc", + "type": "DXGI_SWAP_CHAIN_DESC" + }, + { + "name": "ppSwapChain", + "type": "IDXGISwapChain" + }, + { + "name": "ppDevice", + "type": "ID3D11Device" + }, + { + "name": "pFeatureLevel", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "ppImmediateContext", + "type": "ID3D11DeviceContext" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d11on12.json b/qiling/extensions/windows_sdk/d3d11on12.json new file mode 100644 index 000000000..8883f33cd --- /dev/null +++ b/qiling/extensions/windows_sdk/d3d11on12.json @@ -0,0 +1,44 @@ +{ + "D3D11On12CreateDevice": [ + { + "name": "pDevice", + "type": "IUnknown" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "pFeatureLevels", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "FeatureLevels", + "type": "UINT" + }, + { + "name": "ppCommandQueues", + "type": "IUnknown" + }, + { + "name": "NumQueues", + "type": "UINT" + }, + { + "name": "NodeMask", + "type": "UINT" + }, + { + "name": "ppDevice", + "type": "ID3D11Device" + }, + { + "name": "ppImmediateContext", + "type": "ID3D11DeviceContext" + }, + { + "name": "pChosenFeatureLevel", + "type": "D3D_FEATURE_LEVEL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d11shadertracing.json b/qiling/extensions/windows_sdk/d3d11shadertracing.json new file mode 100644 index 000000000..c680b59e4 --- /dev/null +++ b/qiling/extensions/windows_sdk/d3d11shadertracing.json @@ -0,0 +1,36 @@ +{ + "D3DDisassemble11Trace": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pTrace", + "type": "ID3D11ShaderTrace" + }, + { + "name": "StartStep", + "type": "UINT" + }, + { + "name": "NumSteps", + "type": "UINT" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "ppDisassembly", + "type": { + "name": "ID3D10Blob", + "data_type": "Struct", + "elements": [] + } + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d12.json b/qiling/extensions/windows_sdk/d3d12.json new file mode 100644 index 000000000..ba1655546 --- /dev/null +++ b/qiling/extensions/windows_sdk/d3d12.json @@ -0,0 +1,116 @@ +{ + "D3D12SerializeRootSignature": [ + { + "name": "pRootSignature", + "type": "D3D12_ROOT_SIGNATURE_DESC" + }, + { + "name": "Version", + "type": "D3D_ROOT_SIGNATURE_VERSION" + }, + { + "name": "ppBlob", + "type": "ID3DBlob" + }, + { + "name": "ppErrorBlob", + "type": "ID3DBlob" + } + ], + "D3D12CreateRootSignatureDeserializer": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSizeInBytes", + "type": "SIZE_T" + }, + { + "name": "pRootSignatureDeserializerInterface", + "type": "IID" + }, + { + "name": "ppRootSignatureDeserializer", + "type": "void" + } + ], + "D3D12SerializeVersionedRootSignature": [ + { + "name": "pRootSignature", + "type": "D3D12_VERSIONED_ROOT_SIGNATURE_DESC" + }, + { + "name": "ppBlob", + "type": "ID3DBlob" + }, + { + "name": "ppErrorBlob", + "type": "ID3DBlob" + } + ], + "D3D12CreateVersionedRootSignatureDeserializer": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSizeInBytes", + "type": "SIZE_T" + }, + { + "name": "pRootSignatureDeserializerInterface", + "type": "IID" + }, + { + "name": "ppRootSignatureDeserializer", + "type": "void" + } + ], + "D3D12CreateDevice": [ + { + "name": "pAdapter", + "type": "IUnknown" + }, + { + "name": "MinimumFeatureLevel", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppDevice", + "type": "void" + } + ], + "D3D12GetDebugInterface": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvDebug", + "type": "void" + } + ], + "D3D12EnableExperimentalFeatures": [ + { + "name": "NumFeatures", + "type": "UINT" + }, + { + "name": "pIIDs", + "type": "IID" + }, + { + "name": "pConfigurationStructs", + "type": "void" + }, + { + "name": "pConfigurationStructSizes", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d9.json b/qiling/extensions/windows_sdk/d3d9.json new file mode 100644 index 000000000..cf1d02146 --- /dev/null +++ b/qiling/extensions/windows_sdk/d3d9.json @@ -0,0 +1,12 @@ +{ + "Direct3DCreate9Ex": [ + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "VOID", + "type": "IDirect3D9Ex" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d9helper.json b/qiling/extensions/windows_sdk/d3d9helper.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/d3d9helper.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3dcompiler.json b/qiling/extensions/windows_sdk/d3dcompiler.json new file mode 100644 index 000000000..6a457e9b6 --- /dev/null +++ b/qiling/extensions/windows_sdk/d3dcompiler.json @@ -0,0 +1,568 @@ +{ + "D3DReadFileToBlob": [ + { + "name": "pFileName", + "type": "LPCWSTR" + }, + { + "name": "ppContents", + "type": "ID3DBlob" + } + ], + "D3DWriteBlobToFile": [ + { + "name": "pBlob", + "type": "ID3DBlob" + }, + { + "name": "pFileName", + "type": "LPCWSTR" + }, + { + "name": "bOverwrite", + "type": "BOOL" + } + ], + "D3DCompile": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pSourceName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "pEntrypoint", + "type": "LPCSTR" + }, + { + "name": "pTarget", + "type": "LPCSTR" + }, + { + "name": "Flags1", + "type": "UINT" + }, + { + "name": "Flags2", + "type": "UINT" + }, + { + "name": "ppCode", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ], + "D3DCompile2": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pSourceName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "pEntrypoint", + "type": "LPCSTR" + }, + { + "name": "pTarget", + "type": "LPCSTR" + }, + { + "name": "Flags1", + "type": "UINT" + }, + { + "name": "Flags2", + "type": "UINT" + }, + { + "name": "SecondaryDataFlags", + "type": "UINT" + }, + { + "name": "pSecondaryData", + "type": "LPCVOID" + }, + { + "name": "SecondaryDataSize", + "type": "SIZE_T" + }, + { + "name": "ppCode", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ], + "D3DCompileFromFile": [ + { + "name": "pFileName", + "type": "LPCWSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "pEntrypoint", + "type": "LPCSTR" + }, + { + "name": "pTarget", + "type": "LPCSTR" + }, + { + "name": "Flags1", + "type": "UINT" + }, + { + "name": "Flags2", + "type": "UINT" + }, + { + "name": "ppCode", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ], + "D3DPreprocess": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pSourceName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "ppCodeText", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ], + "D3DGetDebugInfo": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppDebugInfo", + "type": "ID3DBlob" + } + ], + "D3DReflect": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pInterface", + "type": "IID" + }, + { + "name": "ppReflector", + "type": "void" + } + ], + "D3DReflectLibrary": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppReflector", + "type": "LPVOID" + } + ], + "D3DDisassemble": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "szComments", + "type": "LPCSTR" + }, + { + "name": "ppDisassembly", + "type": "ID3DBlob" + } + ], + "D3DDisassembleRegion": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "szComments", + "type": "LPCSTR" + }, + { + "name": "StartByteOffset", + "type": "SIZE_T" + }, + { + "name": "NumInsts", + "type": "SIZE_T" + }, + { + "name": "pFinishByteOffset", + "type": "SIZE_T" + }, + { + "name": "ppDisassembly", + "type": "ID3DBlob" + } + ], + "D3DCreateLinker": [ + { + "name": "ppLinker", + "type": { + "name": "ID3D11Linker", + "data_type": "Struct", + "elements": [] + } + } + ], + "D3DLoadModule": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "cbSrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppModule", + "type": { + "name": "ID3D11Module", + "data_type": "Struct", + "elements": [] + } + } + ], + "D3DCreateFunctionLinkingGraph": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "ppFunctionLinkingGraph", + "type": { + "name": "ID3D11FunctionLinkingGraph", + "data_type": "Struct", + "elements": [] + } + } + ], + "D3DGetTraceInstructionOffsets": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "StartInstIndex", + "type": "SIZE_T" + }, + { + "name": "NumInsts", + "type": "SIZE_T" + }, + { + "name": "pOffsets", + "type": "SIZE_T" + }, + { + "name": "pTotalInsts", + "type": "SIZE_T" + } + ], + "D3DGetInputSignatureBlob": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppSignatureBlob", + "type": "ID3DBlob" + } + ], + "D3DGetOutputSignatureBlob": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppSignatureBlob", + "type": "ID3DBlob" + } + ], + "D3DGetInputAndOutputSignatureBlob": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppSignatureBlob", + "type": "ID3DBlob" + } + ], + "D3DStripShader": [ + { + "name": "pShaderBytecode", + "type": "LPCVOID" + }, + { + "name": "BytecodeLength", + "type": "SIZE_T" + }, + { + "name": "uStripFlags", + "type": "UINT" + }, + { + "name": "ppStrippedBlob", + "type": "ID3DBlob" + } + ], + "D3DGetBlobPart": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Part", + "type": "D3D_BLOB_PART" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "ppPart", + "type": "ID3DBlob" + } + ], + "D3DSetBlobPart": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Part", + "type": "D3D_BLOB_PART" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "pPart", + "type": "LPCVOID" + }, + { + "name": "PartSize", + "type": "SIZE_T" + }, + { + "name": "ppNewShader", + "type": "ID3DBlob" + } + ], + "D3DCreateBlob": [ + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "ppBlob", + "type": "ID3DBlob" + } + ], + "D3DCompressShaders": [ + { + "name": "uNumShaders", + "type": "UINT" + }, + { + "name": "pShaderData", + "type": "D3D_SHADER_DATA" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "ppCompressedData", + "type": "ID3DBlob" + } + ], + "D3DDecompressShaders": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "uNumShaders", + "type": "UINT" + }, + { + "name": "uStartIndex", + "type": "UINT" + }, + { + "name": "pIndices", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "ppShaders", + "type": "ID3DBlob" + }, + { + "name": "pTotalShaders", + "type": "UINT" + } + ], + "D3DDisassemble10Effect": [ + { + "name": "pEffect", + "type": { + "name": "ID3D10Effect", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "ppDisassembly", + "type": "ID3DBlob" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/datetimeapi.json b/qiling/extensions/windows_sdk/datetimeapi.json new file mode 100644 index 000000000..b44e209a9 --- /dev/null +++ b/qiling/extensions/windows_sdk/datetimeapi.json @@ -0,0 +1,162 @@ +{ + "GetDateFormatA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDate", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCSTR" + }, + { + "name": "lpDateStr", + "type": "LPSTR" + }, + { + "name": "cchDate", + "type": "int" + } + ], + "GetDateFormatW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDate", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpDateStr", + "type": "LPWSTR" + }, + { + "name": "cchDate", + "type": "int" + } + ], + "GetTimeFormatA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCSTR" + }, + { + "name": "lpTimeStr", + "type": "LPSTR" + }, + { + "name": "cchTime", + "type": "int" + } + ], + "GetTimeFormatW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpTimeStr", + "type": "LPWSTR" + }, + { + "name": "cchTime", + "type": "int" + } + ], + "GetTimeFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpTimeStr", + "type": "LPWSTR" + }, + { + "name": "cchTime", + "type": "int" + } + ], + "GetDateFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDate", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpDateStr", + "type": "LPWSTR" + }, + { + "name": "cchDate", + "type": "int" + }, + { + "name": "lpCalendar", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/davclnt.json b/qiling/extensions/windows_sdk/davclnt.json new file mode 100644 index 000000000..2b689a000 --- /dev/null +++ b/qiling/extensions/windows_sdk/davclnt.json @@ -0,0 +1,132 @@ +{ + "DavAddConnection": [ + { + "name": "ConnectionHandle", + "type": "HANDLE" + }, + { + "name": "RemoteName", + "type": "LPCWSTR" + }, + { + "name": "UserName", + "type": "LPCWSTR" + }, + { + "name": "Password", + "type": "LPCWSTR" + }, + { + "name": "ClientCert", + "type": "PBYTE" + }, + { + "name": "CertSize", + "type": "DWORD" + } + ], + "DavDeleteConnection": [ + { + "name": "ConnectionHandle", + "type": "HANDLE" + } + ], + "DavGetUNCFromHTTPPath": [ + { + "name": "Url", + "type": "LPCWSTR" + }, + { + "name": "UncPath", + "type": "LPWSTR" + }, + { + "name": "lpSize", + "type": "LPDWORD" + } + ], + "DavGetHTTPFromUNCPath": [ + { + "name": "UncPath", + "type": "LPCWSTR" + }, + { + "name": "Url", + "type": "LPWSTR" + }, + { + "name": "lpSize", + "type": "LPDWORD" + } + ], + "DavGetTheLockOwnerOfTheFile": [ + { + "name": "FileName", + "type": "LPCWSTR" + }, + { + "name": "LockOwnerName", + "type": "PWSTR" + }, + { + "name": "LockOwnerNameLengthInBytes", + "type": "PULONG" + } + ], + "DavGetExtendedError": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ExtError", + "type": "DWORD" + }, + { + "name": "ExtErrorString", + "type": "LPWSTR" + }, + { + "name": "cChSize", + "type": "DWORD" + } + ], + "DavFlushFile": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "DavInvalidateCache": [ + { + "name": "URLName", + "type": "LPCWSTR" + } + ], + "DavCancelConnectionsToServer": [ + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "DavRegisterAuthCallback": [ + { + "name": "CallBack", + "type": "PFNDAVAUTHCALLBACK" + }, + { + "name": "Version", + "type": "ULONG" + } + ], + "DavUnregisterAuthCallback": [ + { + "name": "hCallback", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dbghelp.json b/qiling/extensions/windows_sdk/dbghelp.json new file mode 100644 index 000000000..283966c59 --- /dev/null +++ b/qiling/extensions/windows_sdk/dbghelp.json @@ -0,0 +1,3146 @@ +{ + "SymFindDebugInfoFile": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "DebugFilePath", + "type": "PSTR" + }, + { + "name": "Callback", + "type": "PFIND_DEBUG_FILE_CALLBACK" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "SymFindDebugInfoFileW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "DebugFilePath", + "type": "PWSTR" + }, + { + "name": "Callback", + "type": "PFIND_DEBUG_FILE_CALLBACKW" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "FindDebugInfoFile": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "DebugFilePath", + "type": "PSTR" + } + ], + "FindDebugInfoFileEx": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "DebugFilePath", + "type": "PSTR" + }, + { + "name": "Callback", + "type": "PFIND_DEBUG_FILE_CALLBACK" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "FindDebugInfoFileExW": [ + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "SymbolPath", + "type": "PCWSTR" + }, + { + "name": "DebugFilePath", + "type": "PWSTR" + }, + { + "name": "Callback", + "type": "PFIND_DEBUG_FILE_CALLBACKW" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "SymFindFileInPath": [ + { + "name": "hprocess", + "type": "HANDLE" + }, + { + "name": "SearchPathA", + "type": "PCSTR" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "id", + "type": "PVOID" + }, + { + "name": "two", + "type": "DWORD" + }, + { + "name": "three", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "FoundFile", + "type": "PSTR" + }, + { + "name": "callback", + "type": "PFINDFILEINPATHCALLBACK" + }, + { + "name": "context", + "type": "PVOID" + } + ], + "SymFindFileInPathW": [ + { + "name": "hprocess", + "type": "HANDLE" + }, + { + "name": "SearchPathA", + "type": "PCWSTR" + }, + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "id", + "type": "PVOID" + }, + { + "name": "two", + "type": "DWORD" + }, + { + "name": "three", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "FoundFile", + "type": "PWSTR" + }, + { + "name": "callback", + "type": "PFINDFILEINPATHCALLBACKW" + }, + { + "name": "context", + "type": "PVOID" + } + ], + "SymFindExecutableImage": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "ImageFilePath", + "type": "PSTR" + }, + { + "name": "Callback", + "type": "PFIND_EXE_FILE_CALLBACK" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "SymFindExecutableImageW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "ImageFilePath", + "type": "PWSTR" + }, + { + "name": "Callback", + "type": "PFIND_EXE_FILE_CALLBACKW" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "FindExecutableImage": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "ImageFilePath", + "type": "PSTR" + } + ], + "FindExecutableImageEx": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "ImageFilePath", + "type": "PSTR" + }, + { + "name": "Callback", + "type": "PFIND_EXE_FILE_CALLBACK" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "FindExecutableImageExW": [ + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "SymbolPath", + "type": "PCWSTR" + }, + { + "name": "ImageFilePath", + "type": "PWSTR" + }, + { + "name": "Callback", + "type": "PFIND_EXE_FILE_CALLBACKW" + }, + { + "name": "CallerData", + "type": "PVOID" + } + ], + "ImageNtHeader": [ + { + "name": "Base", + "type": "PVOID" + } + ], + "ImageDirectoryEntryToDataEx": [ + { + "name": "Base", + "type": "PVOID" + }, + { + "name": "MappedAsImage", + "type": "BOOLEAN" + }, + { + "name": "DirectoryEntry", + "type": "USHORT" + }, + { + "name": "Size", + "type": "PULONG" + }, + { + "name": "FoundHeader", + "type": "PIMAGE_SECTION_HEADER" + } + ], + "ImageDirectoryEntryToData": [ + { + "name": "Base", + "type": "PVOID" + }, + { + "name": "MappedAsImage", + "type": "BOOLEAN" + }, + { + "name": "DirectoryEntry", + "type": "USHORT" + }, + { + "name": "Size", + "type": "PULONG" + } + ], + "ImageRvaToSection": [ + { + "name": "NtHeaders", + "type": "PIMAGE_NT_HEADERS" + }, + { + "name": "Base", + "type": "PVOID" + }, + { + "name": "Rva", + "type": "ULONG" + } + ], + "ImageRvaToVa": [ + { + "name": "NtHeaders", + "type": "PIMAGE_NT_HEADERS" + }, + { + "name": "Base", + "type": "PVOID" + }, + { + "name": "Rva", + "type": "ULONG" + }, + { + "name": "LastRvaSection", + "type": "PIMAGE_SECTION_HEADER" + } + ], + "SearchTreeForFile": [ + { + "name": "RootPath", + "type": "PCSTR" + }, + { + "name": "InputPathName", + "type": "PCSTR" + }, + { + "name": "OutputPathBuffer", + "type": "PSTR" + } + ], + "SearchTreeForFileW": [ + { + "name": "RootPath", + "type": "PCWSTR" + }, + { + "name": "InputPathName", + "type": "PCWSTR" + }, + { + "name": "OutputPathBuffer", + "type": "PWSTR" + } + ], + "EnumDirTree": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "RootPath", + "type": "PCSTR" + }, + { + "name": "InputPathName", + "type": "PCSTR" + }, + { + "name": "OutputPathBuffer", + "type": "PSTR" + }, + { + "name": "cb", + "type": "PENUMDIRTREE_CALLBACK" + }, + { + "name": "data", + "type": "PVOID" + } + ], + "EnumDirTreeW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "RootPath", + "type": "PCWSTR" + }, + { + "name": "InputPathName", + "type": "PCWSTR" + }, + { + "name": "OutputPathBuffer", + "type": "PWSTR" + }, + { + "name": "cb", + "type": "PENUMDIRTREE_CALLBACKW" + }, + { + "name": "data", + "type": "PVOID" + } + ], + "MakeSureDirectoryPathExists": [ + { + "name": "DirPath", + "type": "PCSTR" + } + ], + "UnDecorateSymbolName": [ + { + "name": "name", + "type": "PCSTR" + }, + { + "name": "outputString", + "type": "PSTR" + }, + { + "name": "maxStringLength", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "UnDecorateSymbolNameW": [ + { + "name": "name", + "type": "PCWSTR" + }, + { + "name": "outputString", + "type": "PWSTR" + }, + { + "name": "maxStringLength", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "StackWalk64": [ + { + "name": "MachineType", + "type": "DWORD" + }, + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "StackFrame", + "type": "LPSTACKFRAME64" + }, + { + "name": "ContextRecord", + "type": "PVOID" + }, + { + "name": "ReadMemoryRoutine", + "type": "PREAD_PROCESS_MEMORY_ROUTINE64" + }, + { + "name": "FunctionTableAccessRoutine", + "type": "PFUNCTION_TABLE_ACCESS_ROUTINE64" + }, + { + "name": "GetModuleBaseRoutine", + "type": "PGET_MODULE_BASE_ROUTINE64" + }, + { + "name": "TranslateAddress", + "type": "PTRANSLATE_ADDRESS_ROUTINE64" + } + ], + "StackWalkEx": [ + { + "name": "MachineType", + "type": "DWORD" + }, + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "StackFrame", + "type": "LPSTACKFRAME_EX" + }, + { + "name": "ContextRecord", + "type": "PVOID" + }, + { + "name": "ReadMemoryRoutine", + "type": "PREAD_PROCESS_MEMORY_ROUTINE64" + }, + { + "name": "FunctionTableAccessRoutine", + "type": "PFUNCTION_TABLE_ACCESS_ROUTINE64" + }, + { + "name": "GetModuleBaseRoutine", + "type": "PGET_MODULE_BASE_ROUTINE64" + }, + { + "name": "TranslateAddress", + "type": "PTRANSLATE_ADDRESS_ROUTINE64" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "ImagehlpApiVersion": [ + { + "name": "VOID", + "type": "void" + } + ], + "ImagehlpApiVersionEx": [ + { + "name": "AppVersion", + "type": "LPAPI_VERSION" + } + ], + "GetTimestampForLoadedLibrary": [ + { + "name": "Module", + "type": "HMODULE" + } + ], + "SymSetParentWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "SymSetHomeDirectory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dir", + "type": "PCSTR" + } + ], + "SymSetHomeDirectoryW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dir", + "type": "PCWSTR" + } + ], + "SymGetHomeDirectory": [ + { + "name": "type", + "type": "DWORD" + }, + { + "name": "dir", + "type": "PSTR" + }, + { + "name": "size", + "type": "size_t" + } + ], + "SymGetHomeDirectoryW": [ + { + "name": "type", + "type": "DWORD" + }, + { + "name": "dir", + "type": "PWSTR" + }, + { + "name": "size", + "type": "size_t" + } + ], + "SymGetOmaps": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "DWORD64" + }, + { + "name": "OmapTo", + "type": "POMAP" + }, + { + "name": "cOmapTo", + "type": "PDWORD64" + }, + { + "name": "OmapFrom", + "type": "POMAP" + }, + { + "name": "cOmapFrom", + "type": "PDWORD64" + } + ], + "SymSetOptions": [ + { + "name": "SymOptions", + "type": "DWORD" + } + ], + "SymGetOptions": [ + { + "name": "VOID", + "type": "void" + } + ], + "SymCleanup": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "SymGetExtendedOption": [ + { + "name": "option", + "type": "IMAGEHLP_EXTENDED_OPTIONS" + } + ], + "SymSetExtendedOption": [ + { + "name": "option", + "type": "IMAGEHLP_EXTENDED_OPTIONS" + }, + { + "name": "value", + "type": "BOOL" + } + ], + "SymMatchString": [ + { + "name": "string", + "type": "PCSTR" + }, + { + "name": "expression", + "type": "PCSTR" + }, + { + "name": "fCase", + "type": "BOOL" + } + ], + "SymMatchStringW": [ + { + "name": "string", + "type": "PCWSTR" + }, + { + "name": "expression", + "type": "PCWSTR" + }, + { + "name": "fCase", + "type": "BOOL" + } + ], + "SymEnumSourceFiles": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModBase", + "type": "ULONG64" + }, + { + "name": "Mask", + "type": "PCSTR" + }, + { + "name": "cbSrcFiles", + "type": "PSYM_ENUMSOURCEFILES_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumSourceFilesW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModBase", + "type": "ULONG64" + }, + { + "name": "Mask", + "type": "PCWSTR" + }, + { + "name": "cbSrcFiles", + "type": "PSYM_ENUMSOURCEFILES_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumerateModules64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "EnumModulesCallback", + "type": "PSYM_ENUMMODULES_CALLBACK64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumerateModulesW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "EnumModulesCallback", + "type": "PSYM_ENUMMODULES_CALLBACKW64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "EnumerateLoadedModulesEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "EnumLoadedModulesCallback", + "type": "PENUMLOADED_MODULES_CALLBACK64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "EnumerateLoadedModulesExW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "EnumLoadedModulesCallback", + "type": "PENUMLOADED_MODULES_CALLBACKW64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "EnumerateLoadedModules64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "EnumLoadedModulesCallback", + "type": "PENUMLOADED_MODULES_CALLBACK64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "EnumerateLoadedModulesW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "EnumLoadedModulesCallback", + "type": "PENUMLOADED_MODULES_CALLBACKW64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymFunctionTableAccess64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "AddrBase", + "type": "DWORD64" + } + ], + "SymFunctionTableAccess64AccessRoutines": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "AddrBase", + "type": "DWORD64" + }, + { + "name": "ReadMemoryRoutine", + "type": "PREAD_PROCESS_MEMORY_ROUTINE64" + }, + { + "name": "GetModuleBaseRoutine", + "type": "PGET_MODULE_BASE_ROUTINE64" + } + ], + "SymGetModuleInfo64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "qwAddr", + "type": "DWORD64" + }, + { + "name": "ModuleInfo", + "type": "PIMAGEHLP_MODULE64" + } + ], + "SymGetModuleInfoW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "qwAddr", + "type": "DWORD64" + }, + { + "name": "ModuleInfo", + "type": "PIMAGEHLP_MODULEW64" + } + ], + "SymGetModuleBase64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "qwAddr", + "type": "DWORD64" + } + ], + "SymEnumLines": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Obj", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "EnumLinesCallback", + "type": "PSYM_ENUMLINES_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumLinesW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Obj", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "EnumLinesCallback", + "type": "PSYM_ENUMLINES_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymGetLineFromAddr64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "qwAddr", + "type": "DWORD64" + }, + { + "name": "pdwDisplacement", + "type": "PDWORD" + }, + { + "name": "Line64", + "type": "PIMAGEHLP_LINE64" + } + ], + "SymGetLineFromAddrW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwAddr", + "type": "DWORD64" + }, + { + "name": "pdwDisplacement", + "type": "PDWORD" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINEW64" + } + ], + "SymGetLineFromInlineContext": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "qwAddr", + "type": "DWORD64" + }, + { + "name": "InlineContext", + "type": "ULONG" + }, + { + "name": "qwModuleBaseAddress", + "type": "DWORD64" + }, + { + "name": "pdwDisplacement", + "type": "PDWORD" + }, + { + "name": "Line64", + "type": "PIMAGEHLP_LINE64" + } + ], + "SymGetLineFromInlineContextW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwAddr", + "type": "DWORD64" + }, + { + "name": "InlineContext", + "type": "ULONG" + }, + { + "name": "qwModuleBaseAddress", + "type": "DWORD64" + }, + { + "name": "pdwDisplacement", + "type": "PDWORD" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINEW64" + } + ], + "SymEnumSourceLines": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Obj", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Line", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "EnumLinesCallback", + "type": "PSYM_ENUMLINES_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumSourceLinesW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Obj", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Line", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "EnumLinesCallback", + "type": "PSYM_ENUMLINES_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymAddrIncludeInlineTrace": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + } + ], + "SymCompareInlineTrace": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address1", + "type": "DWORD64" + }, + { + "name": "InlineContext1", + "type": "DWORD" + }, + { + "name": "RetAddress1", + "type": "DWORD64" + }, + { + "name": "Address2", + "type": "DWORD64" + }, + { + "name": "RetAddress2", + "type": "DWORD64" + } + ], + "SymQueryInlineTrace": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "StartAddress", + "type": "DWORD64" + }, + { + "name": "StartContext", + "type": "DWORD" + }, + { + "name": "StartRetAddress", + "type": "DWORD64" + }, + { + "name": "CurAddress", + "type": "DWORD64" + }, + { + "name": "CurContext", + "type": "LPDWORD" + }, + { + "name": "CurFrameIndex", + "type": "LPDWORD" + } + ], + "SymGetLineFromName64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModuleName", + "type": "PCSTR" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "dwLineNumber", + "type": "DWORD" + }, + { + "name": "plDisplacement", + "type": "PLONG" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINE64" + } + ], + "SymGetLineFromNameW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModuleName", + "type": "PCWSTR" + }, + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "dwLineNumber", + "type": "DWORD" + }, + { + "name": "plDisplacement", + "type": "PLONG" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINEW64" + } + ], + "SymGetLineNext64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINE64" + } + ], + "SymGetLineNextW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINEW64" + } + ], + "SymGetLinePrev64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINE64" + } + ], + "SymGetLinePrevW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Line", + "type": "PIMAGEHLP_LINEW64" + } + ], + "SymGetFileLineOffsets64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModuleName", + "type": "PCSTR" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "Buffer", + "type": "PDWORD64" + }, + { + "name": "BufferLines", + "type": "ULONG" + } + ], + "SymMatchFileName": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "Match", + "type": "PCSTR" + }, + { + "name": "FileNameStop", + "type": "PSTR" + }, + { + "name": "MatchStop", + "type": "PSTR" + } + ], + "SymMatchFileNameW": [ + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "Match", + "type": "PCWSTR" + }, + { + "name": "FileNameStop", + "type": "PWSTR" + }, + { + "name": "MatchStop", + "type": "PWSTR" + } + ], + "SymGetSourceFile": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Params", + "type": "PCSTR" + }, + { + "name": "FileSpec", + "type": "PCSTR" + }, + { + "name": "FilePath", + "type": "PSTR" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceFileW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Params", + "type": "PCWSTR" + }, + { + "name": "FileSpec", + "type": "PCWSTR" + }, + { + "name": "FilePath", + "type": "PWSTR" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceFileToken": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "FileSpec", + "type": "PCSTR" + }, + { + "name": "Token", + "type": "PVOID" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceFileChecksumW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "FileSpec", + "type": "PCWSTR" + }, + { + "name": "pCheckSumType", + "type": "DWORD" + }, + { + "name": "pChecksum", + "type": "BYTE" + }, + { + "name": "checksumSize", + "type": "DWORD" + }, + { + "name": "pActualBytesWritten", + "type": "DWORD" + } + ], + "SymGetSourceFileChecksum": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "FileSpec", + "type": "PCSTR" + }, + { + "name": "pCheckSumType", + "type": "DWORD" + }, + { + "name": "pChecksum", + "type": "BYTE" + }, + { + "name": "checksumSize", + "type": "DWORD" + }, + { + "name": "pActualBytesWritten", + "type": "DWORD" + } + ], + "SymGetSourceFileTokenW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "FileSpec", + "type": "PCWSTR" + }, + { + "name": "Token", + "type": "PVOID" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceFileFromToken": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Token", + "type": "PVOID" + }, + { + "name": "Params", + "type": "PCSTR" + }, + { + "name": "FilePath", + "type": "PSTR" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceFileFromTokenW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Token", + "type": "PVOID" + }, + { + "name": "Params", + "type": "PCWSTR" + }, + { + "name": "FilePath", + "type": "PWSTR" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceVarFromToken": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Token", + "type": "PVOID" + }, + { + "name": "Params", + "type": "PCSTR" + }, + { + "name": "VarName", + "type": "PCSTR" + }, + { + "name": "Value", + "type": "PSTR" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymGetSourceVarFromTokenW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Token", + "type": "PVOID" + }, + { + "name": "Params", + "type": "PCWSTR" + }, + { + "name": "VarName", + "type": "PCWSTR" + }, + { + "name": "Value", + "type": "PWSTR" + }, + { + "name": "Size", + "type": "DWORD" + } + ], + "SymEnumSourceFileTokens": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "Callback", + "type": "PENUMSOURCEFILETOKENSCALLBACK" + } + ], + "SymInitialize": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "UserSearchPath", + "type": "PCSTR" + }, + { + "name": "fInvadeProcess", + "type": "BOOL" + } + ], + "SymInitializeW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "UserSearchPath", + "type": "PCWSTR" + }, + { + "name": "fInvadeProcess", + "type": "BOOL" + } + ], + "SymGetSearchPath": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SearchPathA", + "type": "PSTR" + }, + { + "name": "SearchPathLength", + "type": "DWORD" + } + ], + "SymGetSearchPathW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SearchPathA", + "type": "PWSTR" + }, + { + "name": "SearchPathLength", + "type": "DWORD" + } + ], + "SymSetSearchPath": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SearchPathA", + "type": "PCSTR" + } + ], + "SymSetSearchPathW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SearchPathA", + "type": "PCWSTR" + } + ], + "SymLoadModuleEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ImageName", + "type": "PCSTR" + }, + { + "name": "ModuleName", + "type": "PCSTR" + }, + { + "name": "BaseOfDll", + "type": "DWORD64" + }, + { + "name": "DllSize", + "type": "DWORD" + }, + { + "name": "Data", + "type": "PMODLOAD_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymLoadModuleExW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ImageName", + "type": "PCWSTR" + }, + { + "name": "ModuleName", + "type": "PCWSTR" + }, + { + "name": "BaseOfDll", + "type": "DWORD64" + }, + { + "name": "DllSize", + "type": "DWORD" + }, + { + "name": "Data", + "type": "PMODLOAD_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymUnloadModule64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "DWORD64" + } + ], + "SymUnDName64": [ + { + "name": "sym", + "type": "PIMAGEHLP_SYMBOL64" + }, + { + "name": "UnDecName", + "type": "PSTR" + }, + { + "name": "UnDecNameLength", + "type": "DWORD" + } + ], + "SymRegisterCallback64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "CallbackFunction", + "type": "PSYMBOL_REGISTERED_CALLBACK64" + }, + { + "name": "UserContext", + "type": "ULONG64" + } + ], + "SymRegisterCallbackW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "CallbackFunction", + "type": "PSYMBOL_REGISTERED_CALLBACK64" + }, + { + "name": "UserContext", + "type": "ULONG64" + } + ], + "SymRegisterFunctionEntryCallback64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "CallbackFunction", + "type": "PSYMBOL_FUNCENTRY_CALLBACK64" + }, + { + "name": "UserContext", + "type": "ULONG64" + } + ], + "SymSetContext": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "StackFrame", + "type": "PIMAGEHLP_STACK_FRAME" + }, + { + "name": "Context", + "type": "PIMAGEHLP_CONTEXT" + } + ], + "SymSetScopeFromAddr": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "ULONG64" + } + ], + "SymSetScopeFromInlineContext": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "ULONG64" + }, + { + "name": "InlineContext", + "type": "ULONG" + } + ], + "SymSetScopeFromIndex": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + } + ], + "SymEnumProcesses": [ + { + "name": "EnumProcessesCallback", + "type": "PSYM_ENUMPROCESSES_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymFromAddr": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "Displacement", + "type": "PDWORD64" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymFromAddrW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "Displacement", + "type": "PDWORD64" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymFromInlineContext": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "InlineContext", + "type": "ULONG" + }, + { + "name": "Displacement", + "type": "PDWORD64" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymFromInlineContextW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "InlineContext", + "type": "ULONG" + }, + { + "name": "Displacement", + "type": "PDWORD64" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymFromToken": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "DWORD64" + }, + { + "name": "Token", + "type": "DWORD" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymFromTokenW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "DWORD64" + }, + { + "name": "Token", + "type": "DWORD" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymNext": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "si", + "type": "PSYMBOL_INFO" + } + ], + "SymNextW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "siw", + "type": "PSYMBOL_INFOW" + } + ], + "SymPrev": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "si", + "type": "PSYMBOL_INFO" + } + ], + "SymPrevW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "siw", + "type": "PSYMBOL_INFOW" + } + ], + "SymFromName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Name", + "type": "PCSTR" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymFromNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymEnumSymbols": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Mask", + "type": "PCSTR" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumSymbolsEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Mask", + "type": "PCSTR" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "SymEnumSymbolsW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Mask", + "type": "PCWSTR" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumSymbolsExW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Mask", + "type": "PCWSTR" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "SymEnumSymbolsForAddr": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumSymbolsForAddrW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymSearch": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "SymTag", + "type": "DWORD" + }, + { + "name": "Mask", + "type": "PCSTR" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "SymSearchW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "SymTag", + "type": "DWORD" + }, + { + "name": "Mask", + "type": "PCWSTR" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "SymGetScope": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymGetScopeW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymFromIndex": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymFromIndexW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymGetTypeInfo": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModBase", + "type": "DWORD64" + }, + { + "name": "TypeId", + "type": "ULONG" + }, + { + "name": "GetType", + "type": "IMAGEHLP_SYMBOL_TYPE_INFO" + }, + { + "name": "pInfo", + "type": "PVOID" + } + ], + "SymGetTypeInfoEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ModBase", + "type": "DWORD64" + }, + { + "name": "Params", + "type": "PIMAGEHLP_GET_TYPE_INFO_PARAMS" + } + ], + "SymEnumTypes": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumTypesW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumTypesByName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "mask", + "type": "PCSTR" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACK" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumTypesByNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "mask", + "type": "PCWSTR" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMERATESYMBOLS_CALLBACKW" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymGetTypeFromName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCSTR" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFO" + } + ], + "SymGetTypeFromNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Symbol", + "type": "PSYMBOL_INFOW" + } + ], + "SymAddSymbol": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCSTR" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "Size", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymAddSymbolW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "Size", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymDeleteSymbol": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCSTR" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymDeleteSymbolW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Address", + "type": "DWORD64" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymRefreshModuleList": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "SymAddSourceStream": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "StreamFile", + "type": "PCSTR" + }, + { + "name": "Buffer", + "type": "PBYTE" + }, + { + "name": "Size", + "type": "size_t" + } + ], + "SymAddSourceStreamW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Base", + "type": "ULONG64" + }, + { + "name": "FileSpec", + "type": "PCWSTR" + }, + { + "name": "Buffer", + "type": "PBYTE" + }, + { + "name": "Size", + "type": "size_t" + } + ], + "SymSrvIsStoreW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "path", + "type": "PCWSTR" + } + ], + "SymSrvIsStore": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "path", + "type": "PCSTR" + } + ], + "SymSrvDeltaName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCSTR" + }, + { + "name": "Type", + "type": "PCSTR" + }, + { + "name": "File1", + "type": "PCSTR" + }, + { + "name": "File2", + "type": "PCSTR" + } + ], + "SymSrvDeltaNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCWSTR" + }, + { + "name": "Type", + "type": "PCWSTR" + }, + { + "name": "File1", + "type": "PCWSTR" + }, + { + "name": "File2", + "type": "PCWSTR" + } + ], + "SymSrvGetSupplement": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCSTR" + }, + { + "name": "Node", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + } + ], + "SymSrvGetSupplementW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCWSTR" + }, + { + "name": "Node", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + } + ], + "SymSrvGetFileIndexes": [ + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Id", + "type": "GUID" + }, + { + "name": "Val1", + "type": "PDWORD" + }, + { + "name": "Val2", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvGetFileIndexesW": [ + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Id", + "type": "GUID" + }, + { + "name": "Val1", + "type": "PDWORD" + }, + { + "name": "Val2", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvGetFileIndexStringW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SrvPath", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Index", + "type": "PWSTR" + }, + { + "name": "Size", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvGetFileIndexString": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SrvPath", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Index", + "type": "PSTR" + }, + { + "name": "Size", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvGetFileIndexInfo": [ + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Info", + "type": "PSYMSRV_INDEX_INFO" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvGetFileIndexInfoW": [ + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Info", + "type": "PSYMSRV_INDEX_INFOW" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvStoreSupplement": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SrvPath", + "type": "PCSTR" + }, + { + "name": "Node", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvStoreSupplementW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCWSTR" + }, + { + "name": "Node", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvStoreFile": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SrvPath", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymSrvStoreFileW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SrvPath", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SymGetSymbolFile": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCSTR" + }, + { + "name": "ImageFile", + "type": "PCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "SymbolFile", + "type": "PSTR" + }, + { + "name": "cSymbolFile", + "type": "size_t" + }, + { + "name": "DbgFile", + "type": "PSTR" + }, + { + "name": "cDbgFile", + "type": "size_t" + } + ], + "SymGetSymbolFileW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "SymPath", + "type": "PCWSTR" + }, + { + "name": "ImageFile", + "type": "PCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "SymbolFile", + "type": "PWSTR" + }, + { + "name": "cSymbolFile", + "type": "size_t" + }, + { + "name": "DbgFile", + "type": "PWSTR" + }, + { + "name": "cDbgFile", + "type": "size_t" + } + ], + "SymGetSymFromAddr64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "qwAddr", + "type": "DWORD64" + }, + { + "name": "pdwDisplacement", + "type": "PDWORD64" + }, + { + "name": "Symbol", + "type": "PIMAGEHLP_SYMBOL64" + } + ], + "SymGetSymFromName64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Name", + "type": "PCSTR" + }, + { + "name": "Symbol", + "type": "PIMAGEHLP_SYMBOL64" + } + ], + "SymEnumerateSymbols64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMSYMBOLS_CALLBACK64" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymEnumerateSymbolsW64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "BaseOfDll", + "type": "ULONG64" + }, + { + "name": "EnumSymbolsCallback", + "type": "PSYM_ENUMSYMBOLS_CALLBACK64W" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "SymLoadModule64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ImageName", + "type": "PCSTR" + }, + { + "name": "ModuleName", + "type": "PCSTR" + }, + { + "name": "BaseOfDll", + "type": "DWORD64" + }, + { + "name": "SizeOfDll", + "type": "DWORD" + } + ], + "SymGetSymNext64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Symbol", + "type": "PIMAGEHLP_SYMBOL64" + } + ], + "SymGetSymPrev64": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Symbol", + "type": "PIMAGEHLP_SYMBOL64" + } + ], + "GetSymLoadError": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetSymLoadError": [ + { + "name": "error", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dciman.json b/qiling/extensions/windows_sdk/dciman.json new file mode 100644 index 000000000..1bf6a920e --- /dev/null +++ b/qiling/extensions/windows_sdk/dciman.json @@ -0,0 +1,58 @@ +{ + "DCIOpenProvider": [ + { + "name": "VOID", + "type": "void" + } + ], + "DCICloseProvider": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "DCICreatePrimary": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lplpSurface", + "type": "LPDCISURFACEINFO" + } + ], + "DCIEndAccess": [ + { + "name": "pdci", + "type": "LPDCISURFACEINFO" + } + ], + "DCIBeginAccess": [ + { + "name": "pdci", + "type": "LPDCISURFACEINFO" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "DCIDestroy": [ + { + "name": "pdci", + "type": "LPDCISURFACEINFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dde.json b/qiling/extensions/windows_sdk/dde.json new file mode 100644 index 000000000..bb7bede60 --- /dev/null +++ b/qiling/extensions/windows_sdk/dde.json @@ -0,0 +1,90 @@ +{ + "DdeSetQualityOfService": [ + { + "name": "hwndClient", + "type": "HWND" + }, + { + "name": "pqosNew", + "type": "SECURITY_QUALITY_OF_SERVICE" + }, + { + "name": "pqosPrev", + "type": "PSECURITY_QUALITY_OF_SERVICE" + } + ], + "ImpersonateDdeClientWindow": [ + { + "name": "hWndClient", + "type": "HWND" + }, + { + "name": "hWndServer", + "type": "HWND" + } + ], + "PackDDElParam": [ + { + "name": "msg", + "type": "UINT" + }, + { + "name": "uiLo", + "type": "UINT_PTR" + }, + { + "name": "uiHi", + "type": "UINT_PTR" + } + ], + "UnpackDDElParam": [ + { + "name": "msg", + "type": "UINT" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "puiLo", + "type": "PUINT_PTR" + }, + { + "name": "puiHi", + "type": "PUINT_PTR" + } + ], + "FreeDDElParam": [ + { + "name": "msg", + "type": "UINT" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "ReuseDDElParam": [ + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "msgIn", + "type": "UINT" + }, + { + "name": "msgOut", + "type": "UINT" + }, + { + "name": "uiLo", + "type": "UINT_PTR" + }, + { + "name": "uiHi", + "type": "UINT_PTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ddeml.json b/qiling/extensions/windows_sdk/ddeml.json new file mode 100644 index 000000000..3f881d563 --- /dev/null +++ b/qiling/extensions/windows_sdk/ddeml.json @@ -0,0 +1,436 @@ +{ + "DdeInitializeA": [ + { + "name": "pidInst", + "type": "LPDWORD" + }, + { + "name": "pfnCallback", + "type": "PFNCALLBACK" + }, + { + "name": "afCmd", + "type": "DWORD" + }, + { + "name": "ulRes", + "type": "DWORD" + } + ], + "DdeInitializeW": [ + { + "name": "pidInst", + "type": "LPDWORD" + }, + { + "name": "pfnCallback", + "type": "PFNCALLBACK" + }, + { + "name": "afCmd", + "type": "DWORD" + }, + { + "name": "ulRes", + "type": "DWORD" + } + ], + "DdeUninitialize": [ + { + "name": "idInst", + "type": "DWORD" + } + ], + "DdeConnectList": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hszService", + "type": "HSZ" + }, + { + "name": "hszTopic", + "type": "HSZ" + }, + { + "name": "hConvList", + "type": "HCONVLIST" + }, + { + "name": "pCC", + "type": "PCONVCONTEXT" + } + ], + "DdeQueryNextServer": [ + { + "name": "hConvList", + "type": "HCONVLIST" + }, + { + "name": "hConvPrev", + "type": "HCONV" + } + ], + "DdeDisconnectList": [ + { + "name": "hConvList", + "type": "HCONVLIST" + } + ], + "DdeConnect": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hszService", + "type": "HSZ" + }, + { + "name": "hszTopic", + "type": "HSZ" + }, + { + "name": "pCC", + "type": "PCONVCONTEXT" + } + ], + "DdeDisconnect": [ + { + "name": "hConv", + "type": "HCONV" + } + ], + "DdeReconnect": [ + { + "name": "hConv", + "type": "HCONV" + } + ], + "DdeQueryConvInfo": [ + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "idTransaction", + "type": "DWORD" + }, + { + "name": "pConvInfo", + "type": "PCONVINFO" + } + ], + "DdeSetUserHandle": [ + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "id", + "type": "DWORD" + }, + { + "name": "hUser", + "type": "DWORD_PTR" + } + ], + "DdeAbandonTransaction": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "idTransaction", + "type": "DWORD" + } + ], + "DdePostAdvise": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hszTopic", + "type": "HSZ" + }, + { + "name": "hszItem", + "type": "HSZ" + } + ], + "DdeEnableCallback": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "wCmd", + "type": "UINT" + } + ], + "DdeImpersonateClient": [ + { + "name": "hConv", + "type": "HCONV" + } + ], + "DdeNameService": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz1", + "type": "HSZ" + }, + { + "name": "hsz2", + "type": "HSZ" + }, + { + "name": "afCmd", + "type": "UINT" + } + ], + "DdeClientTransaction": [ + { + "name": "pData", + "type": "LPBYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "hszItem", + "type": "HSZ" + }, + { + "name": "wFmt", + "type": "UINT" + }, + { + "name": "wType", + "type": "UINT" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "pdwResult", + "type": "LPDWORD" + } + ], + "DdeCreateDataHandle": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "pSrc", + "type": "LPBYTE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "cbOff", + "type": "DWORD" + }, + { + "name": "hszItem", + "type": "HSZ" + }, + { + "name": "wFmt", + "type": "UINT" + }, + { + "name": "afCmd", + "type": "UINT" + } + ], + "DdeAddData": [ + { + "name": "hData", + "type": "HDDEDATA" + }, + { + "name": "pSrc", + "type": "LPBYTE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "cbOff", + "type": "DWORD" + } + ], + "DdeGetData": [ + { + "name": "hData", + "type": "HDDEDATA" + }, + { + "name": "pDst", + "type": "LPBYTE" + }, + { + "name": "cbMax", + "type": "DWORD" + }, + { + "name": "cbOff", + "type": "DWORD" + } + ], + "DdeAccessData": [ + { + "name": "hData", + "type": "HDDEDATA" + }, + { + "name": "pcbDataSize", + "type": "LPDWORD" + } + ], + "DdeUnaccessData": [ + { + "name": "hData", + "type": "HDDEDATA" + } + ], + "DdeFreeDataHandle": [ + { + "name": "hData", + "type": "HDDEDATA" + } + ], + "DdeGetLastError": [ + { + "name": "idInst", + "type": "DWORD" + } + ], + "DdeCreateStringHandleA": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPCSTR" + }, + { + "name": "iCodePage", + "type": "int" + } + ], + "DdeCreateStringHandleW": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPCWSTR" + }, + { + "name": "iCodePage", + "type": "int" + } + ], + "DdeQueryStringA": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz", + "type": "HSZ" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "cchMax", + "type": "DWORD" + }, + { + "name": "iCodePage", + "type": "int" + } + ], + "DdeQueryStringW": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz", + "type": "HSZ" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "cchMax", + "type": "DWORD" + }, + { + "name": "iCodePage", + "type": "int" + } + ], + "DdeFreeStringHandle": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz", + "type": "HSZ" + } + ], + "DdeKeepStringHandle": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz", + "type": "HSZ" + } + ], + "DdeCmpStringHandles": [ + { + "name": "hsz1", + "type": "HSZ" + }, + { + "name": "hsz2", + "type": "HSZ" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ddraw.json b/qiling/extensions/windows_sdk/ddraw.json new file mode 100644 index 000000000..b6f57967a --- /dev/null +++ b/qiling/extensions/windows_sdk/ddraw.json @@ -0,0 +1,86 @@ +{ + "DirectDrawEnumerateW": [ + { + "name": "lpCallback", + "type": "LPDDENUMCALLBACKW" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "DirectDrawEnumerateExW": [ + { + "name": "lpCallback", + "type": "LPDDENUMCALLBACKEXW" + }, + { + "name": "lpContext", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DirectDrawEnumerateExA": [ + { + "name": "lpCallback", + "type": "LPDDENUMCALLBACKEXA" + }, + { + "name": "lpContext", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DirectDrawCreate": [ + { + "name": "lpGUID", + "type": "GUID" + }, + { + "name": "lplpDD", + "type": "LPDIRECTDRAW" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + } + ], + "DirectDrawCreateEx": [ + { + "name": "lpGuid", + "type": "GUID" + }, + { + "name": "lplpDD", + "type": "LPVOID" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + } + ], + "DirectDrawCreateClipper": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lplpDDClipper", + "type": "LPDIRECTDRAWCLIPPER" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/debugapi.json b/qiling/extensions/windows_sdk/debugapi.json new file mode 100644 index 000000000..1aa5b045b --- /dev/null +++ b/qiling/extensions/windows_sdk/debugapi.json @@ -0,0 +1,82 @@ +{ + "IsDebuggerPresent": [ + { + "name": "VOID", + "type": "void" + } + ], + "DebugBreak": [ + { + "name": "VOID", + "type": "void" + } + ], + "OutputDebugStringA": [ + { + "name": "lpOutputString", + "type": "LPCSTR" + } + ], + "OutputDebugStringW": [ + { + "name": "lpOutputString", + "type": "LPCWSTR" + } + ], + "ContinueDebugEvent": [ + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "dwThreadId", + "type": "DWORD" + }, + { + "name": "dwContinueStatus", + "type": "DWORD" + } + ], + "WaitForDebugEvent": [ + { + "name": "lpDebugEvent", + "type": "LPDEBUG_EVENT" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "DebugActiveProcess": [ + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "DebugActiveProcessStop": [ + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "CheckRemoteDebuggerPresent": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pbDebuggerPresent", + "type": "PBOOL" + } + ], + "WaitForDebugEventEx": [ + { + "name": "lpDebugEvent", + "type": "LPDEBUG_EVENT" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/deviceaccess.json b/qiling/extensions/windows_sdk/deviceaccess.json new file mode 100644 index 000000000..c457b3f9d --- /dev/null +++ b/qiling/extensions/windows_sdk/deviceaccess.json @@ -0,0 +1,16 @@ +{ + "CreateDeviceAccessInstance": [ + { + "name": "deviceInterfacePath", + "type": "PCWSTR" + }, + { + "name": "desiredAccess", + "type": "DWORD" + }, + { + "name": "createAsync", + "type": "ICreateDeviceAccessAsync" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dhcpcsdk.json b/qiling/extensions/windows_sdk/dhcpcsdk.json new file mode 100644 index 000000000..53e6c80be --- /dev/null +++ b/qiling/extensions/windows_sdk/dhcpcsdk.json @@ -0,0 +1,116 @@ +{ + "DhcpCApiInitialize": [ + { + "name": "Version", + "type": "LPDWORD" + } + ], + "DhcpCApiCleanup": [ + { + "name": "VOID", + "type": "void" + } + ], + "DhcpRequestParams": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "LPVOID" + }, + { + "name": "AdapterName", + "type": "LPWSTR" + }, + { + "name": "ClassId", + "type": "LPDHCPCAPI_CLASSID" + }, + { + "name": "SendParams", + "type": "DHCPCAPI_PARAMS_ARRAY" + }, + { + "name": "RecdParams", + "type": "DHCPCAPI_PARAMS_ARRAY" + }, + { + "name": "Buffer", + "type": "LPBYTE" + }, + { + "name": "pSize", + "type": "LPDWORD" + }, + { + "name": "RequestIdStr", + "type": "LPWSTR" + } + ], + "DhcpUndoRequestParams": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "LPVOID" + }, + { + "name": "AdapterName", + "type": "LPWSTR" + }, + { + "name": "RequestIdStr", + "type": "LPWSTR" + } + ], + "DhcpRegisterParamChange": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "LPVOID" + }, + { + "name": "AdapterName", + "type": "LPWSTR" + }, + { + "name": "ClassId", + "type": "LPDHCPCAPI_CLASSID" + }, + { + "name": "Params", + "type": "DHCPCAPI_PARAMS_ARRAY" + }, + { + "name": "Handle", + "type": "LPVOID" + } + ], + "DhcpDeRegisterParamChange": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "LPVOID" + }, + { + "name": "Event", + "type": "LPVOID" + } + ], + "DhcpRemoveDNSRegistrations": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dhcpsapi.json b/qiling/extensions/windows_sdk/dhcpsapi.json new file mode 100644 index 000000000..fac641a83 --- /dev/null +++ b/qiling/extensions/windows_sdk/dhcpsapi.json @@ -0,0 +1,3226 @@ +{ + "DhcpAddFilterV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "AddFilterInfo", + "type": "DHCP_FILTER_ADD_INFO" + }, + { + "name": "ForceFlag", + "type": "BOOL" + } + ], + "DhcpDeleteFilterV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "DeleteFilterInfo", + "type": "DHCP_ADDR_PATTERN" + } + ], + "DhcpSetFilterV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "GlobalFilterInfo", + "type": "DHCP_FILTER_GLOBAL_INFO" + } + ], + "DhcpGetFilterV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "GlobalFilterInfo", + "type": "DHCP_FILTER_GLOBAL_INFO" + } + ], + "DhcpEnumFilterV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ResumeHandle", + "type": "LPDHCP_ADDR_PATTERN" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ListType", + "type": "DHCP_FILTER_LIST_TYPE" + }, + { + "name": "EnumFilterInfo", + "type": "LPDHCP_FILTER_ENUM_INFO" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpCreateSubnet": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "DHCP_SUBNET_INFO" + } + ], + "DhcpSetSubnetInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "DHCP_SUBNET_INFO" + } + ], + "DhcpGetSubnetInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "LPDHCP_SUBNET_INFO" + } + ], + "DhcpEnumSubnets": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumInfo", + "type": "LPDHCP_IP_ARRAY" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpAddSubnetElement": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "AddElementInfo", + "type": "DHCP_SUBNET_ELEMENT_DATA" + } + ], + "DhcpEnumSubnetElements": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "EnumElementType", + "type": "DHCP_SUBNET_ELEMENT_TYPE" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumElementInfo", + "type": "LPDHCP_SUBNET_ELEMENT_INFO_ARRAY" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveSubnetElement": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "RemoveElementInfo", + "type": "DHCP_SUBNET_ELEMENT_DATA" + }, + { + "name": "ForceFlag", + "type": "DHCP_FORCE_FLAG" + } + ], + "DhcpDeleteSubnet": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ForceFlag", + "type": "DHCP_FORCE_FLAG" + } + ], + "DhcpCreateOption": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "OptionInfo", + "type": "DHCP_OPTION" + } + ], + "DhcpSetOptionInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "OptionInfo", + "type": "DHCP_OPTION" + } + ], + "DhcpGetOptionInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpEnumOptions": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "Options", + "type": "LPDHCP_OPTION_ARRAY" + }, + { + "name": "OptionsRead", + "type": "DWORD" + }, + { + "name": "OptionsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveOption": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + } + ], + "DhcpSetOptionValue": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ScopeInfo", + "type": "DHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValue", + "type": "DHCP_OPTION_DATA" + } + ], + "DhcpSetOptionValues": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ScopeInfo", + "type": "DHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValues", + "type": "DHCP_OPTION_VALUE_ARRAY" + } + ], + "DhcpGetOptionValue": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ScopeInfo", + "type": "DHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_VALUE" + } + ], + "DhcpEnumOptionValues": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ScopeInfo", + "type": "DHCP_OPTION_SCOPE_INFO" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "OptionValues", + "type": "LPDHCP_OPTION_VALUE_ARRAY" + }, + { + "name": "OptionsRead", + "type": "DWORD" + }, + { + "name": "OptionsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveOptionValue": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ScopeInfo", + "type": "DHCP_OPTION_SCOPE_INFO" + } + ], + "DhcpCreateClientInfoVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO_VQ" + } + ], + "DhcpSetClientInfoVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO_VQ" + } + ], + "DhcpGetClientInfoVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SearchInfo", + "type": "DHCP_SEARCH_INFO" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_VQ" + } + ], + "DhcpEnumSubnetClientsVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_ARRAY_VQ" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpEnumSubnetClientsFilterStatusInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_FILTER_STATUS_INFO_ARRAY" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpCreateClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO" + } + ], + "DhcpSetClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO" + } + ], + "DhcpGetClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SearchInfo", + "type": "DHCP_SEARCH_INFO" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO" + } + ], + "DhcpDeleteClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_SEARCH_INFO" + } + ], + "DhcpEnumSubnetClients": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_ARRAY" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpGetClientOptions": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientIpAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ClientSubnetMask", + "type": "DHCP_IP_MASK" + }, + { + "name": "ClientOptions", + "type": "LPDHCP_OPTION_LIST" + } + ], + "DhcpServerSetConfig": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "FieldsToSet", + "type": "DWORD" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO" + } + ], + "DhcpServerGetConfig": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO" + } + ], + "DhcpScanDatabase": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "FixFlag", + "type": "DWORD" + }, + { + "name": "ScanList", + "type": "LPDHCP_SCAN_LIST" + } + ], + "DhcpRpcFreeMemory": [ + { + "name": "BufferPointer", + "type": "PVOID" + } + ], + "DhcpGetVersion": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "MajorVersion", + "type": "LPDWORD" + }, + { + "name": "MinorVersion", + "type": "LPDWORD" + } + ], + "DhcpAddSubnetElementV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "AddElementInfo", + "type": "DHCP_SUBNET_ELEMENT_DATA_V4" + } + ], + "DhcpEnumSubnetElementsV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "EnumElementType", + "type": "DHCP_SUBNET_ELEMENT_TYPE" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumElementInfo", + "type": "LPDHCP_SUBNET_ELEMENT_INFO_ARRAY_V4" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveSubnetElementV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "RemoveElementInfo", + "type": "DHCP_SUBNET_ELEMENT_DATA_V4" + }, + { + "name": "ForceFlag", + "type": "DHCP_FORCE_FLAG" + } + ], + "DhcpCreateClientInfoV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO_V4" + } + ], + "DhcpSetClientInfoV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO_V4" + } + ], + "DhcpGetClientInfoV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SearchInfo", + "type": "DHCP_SEARCH_INFO" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_V4" + } + ], + "DhcpEnumSubnetClientsV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_ARRAY_V4" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpServerSetConfigV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "FieldsToSet", + "type": "DWORD" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO_V4" + } + ], + "DhcpServerGetConfigV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO_V4" + } + ], + "DhcpSetSuperScopeV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SuperScopeName", + "type": "LPWSTR" + }, + { + "name": "ChangeExisting", + "type": "BOOL" + } + ], + "DhcpDeleteSuperScopeV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SuperScopeName", + "type": "LPWSTR" + } + ], + "DhcpGetSuperScopeInfoV4": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SuperScopeTable", + "type": "LPDHCP_SUPER_SCOPE_TABLE" + } + ], + "DhcpEnumSubnetClientsV5": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_ARRAY_V5" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpCreateOptionV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionId", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpSetOptionInfoV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpGetOptionInfoV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpEnumOptionsV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "Options", + "type": "LPDHCP_OPTION_ARRAY" + }, + { + "name": "OptionsRead", + "type": "DWORD" + }, + { + "name": "OptionsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveOptionV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + } + ], + "DhcpSetOptionValueV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionId", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_DATA" + } + ], + "DhcpSetOptionValuesV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValues", + "type": "LPDHCP_OPTION_VALUE_ARRAY" + } + ], + "DhcpGetOptionValueV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_VALUE" + } + ], + "DhcpGetOptionValueV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_VALUE" + } + ], + "DhcpEnumOptionValuesV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "OptionValues", + "type": "LPDHCP_OPTION_VALUE_ARRAY" + }, + { + "name": "OptionsRead", + "type": "DWORD" + }, + { + "name": "OptionsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveOptionValueV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + } + ], + "DhcpCreateClass": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ClassInfo", + "type": "LPDHCP_CLASS_INFO" + } + ], + "DhcpModifyClass": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ClassInfo", + "type": "LPDHCP_CLASS_INFO" + } + ], + "DhcpDeleteClass": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + } + ], + "DhcpGetClassInfo": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "PartialClassInfo", + "type": "LPDHCP_CLASS_INFO" + }, + { + "name": "FilledClassInfo", + "type": "LPDHCP_CLASS_INFO" + } + ], + "DhcpEnumClasses": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClassInfoArray", + "type": "LPDHCP_CLASS_INFO_ARRAY" + }, + { + "name": "nRead", + "type": "DWORD" + }, + { + "name": "nTotal", + "type": "DWORD" + } + ], + "DhcpGetAllOptions": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionStruct", + "type": "LPDHCP_ALL_OPTIONS" + } + ], + "DhcpGetAllOptionsV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionStruct", + "type": "LPDHCP_ALL_OPTIONS" + } + ], + "DhcpGetAllOptionValues": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "Values", + "type": "LPDHCP_ALL_OPTION_VALUES" + } + ], + "DhcpGetAllOptionValuesV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + }, + { + "name": "Values", + "type": "LPDHCP_ALL_OPTION_VALUES" + } + ], + "DhcpEnumServers": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "IdInfo", + "type": "LPVOID" + }, + { + "name": "Servers", + "type": "LPDHCP_SERVER_INFO_ARRAY" + }, + { + "name": "CallbackFn", + "type": "LPVOID" + }, + { + "name": "CallbackData", + "type": "LPVOID" + } + ], + "DhcpAddServer": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "IdInfo", + "type": "LPVOID" + }, + { + "name": "NewServer", + "type": "LPDHCP_SERVER_INFO" + }, + { + "name": "CallbackFn", + "type": "LPVOID" + }, + { + "name": "CallbackData", + "type": "LPVOID" + } + ], + "DhcpDeleteServer": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "IdInfo", + "type": "LPVOID" + }, + { + "name": "NewServer", + "type": "LPDHCP_SERVER_INFO" + }, + { + "name": "CallbackFn", + "type": "LPVOID" + }, + { + "name": "CallbackData", + "type": "LPVOID" + } + ], + "DhcpGetServerBindingInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "BindElementsInfo", + "type": "LPDHCP_BIND_ELEMENT_ARRAY" + } + ], + "DhcpSetServerBindingInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "BindElementInfo", + "type": "LPDHCP_BIND_ELEMENT_ARRAY" + } + ], + "DhcpAddSubnetElementV5": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "AddElementInfo", + "type": "DHCP_SUBNET_ELEMENT_DATA_V5" + } + ], + "DhcpEnumSubnetElementsV5": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "EnumElementType", + "type": "DHCP_SUBNET_ELEMENT_TYPE" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumElementInfo", + "type": "LPDHCP_SUBNET_ELEMENT_INFO_ARRAY_V5" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveSubnetElementV5": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "RemoveElementInfo", + "type": "DHCP_SUBNET_ELEMENT_DATA_V5" + }, + { + "name": "ForceFlag", + "type": "DHCP_FORCE_FLAG" + } + ], + "DhcpV4EnumSubnetReservations": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumElementInfo", + "type": "LPDHCP_RESERVATION_INFO_ARRAY" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpCreateOptionV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionId", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpRemoveOptionV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + } + ], + "DhcpEnumOptionsV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "Options", + "type": "LPDHCP_OPTION_ARRAY" + }, + { + "name": "OptionsRead", + "type": "DWORD" + }, + { + "name": "OptionsTotal", + "type": "DWORD" + } + ], + "DhcpRemoveOptionValueV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + } + ], + "DhcpGetOptionInfoV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpSetOptionInfoV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "OptionInfo", + "type": "LPDHCP_OPTION" + } + ], + "DhcpSetOptionValueV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionId", + "type": "DHCP_OPTION_ID" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_DATA" + } + ], + "DhcpGetSubnetInfoVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "LPDHCP_SUBNET_INFO_VQ" + } + ], + "DhcpCreateSubnetVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "DHCP_SUBNET_INFO_VQ" + } + ], + "DhcpSetSubnetInfoVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "DHCP_SUBNET_INFO_VQ" + } + ], + "DhcpEnumOptionValuesV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "OptionValues", + "type": "LPDHCP_OPTION_VALUE_ARRAY" + }, + { + "name": "OptionsRead", + "type": "DWORD" + }, + { + "name": "OptionsTotal", + "type": "DWORD" + } + ], + "DhcpDsInit": [ + { + "name": "VOID", + "type": "void" + } + ], + "DhcpDsCleanup": [ + { + "name": "VOID", + "type": "void" + } + ], + "DhcpSetThreadOptions": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "LPVOID" + } + ], + "DhcpGetThreadOptions": [ + { + "name": "pFlags", + "type": "LPDWORD" + }, + { + "name": "Reserved", + "type": "LPVOID" + } + ], + "DhcpServerQueryAttribute": [ + { + "name": "ServerIpAddr", + "type": "LPWSTR" + }, + { + "name": "dwReserved", + "type": "ULONG" + }, + { + "name": "DhcpAttribId", + "type": "DHCP_ATTRIB_ID" + }, + { + "name": "pDhcpAttrib", + "type": "LPDHCP_ATTRIB" + } + ], + "DhcpServerQueryAttributes": [ + { + "name": "ServerIpAddr", + "type": "LPWSTR" + }, + { + "name": "dwReserved", + "type": "ULONG" + }, + { + "name": "dwAttribCount", + "type": "ULONG" + }, + { + "name": "pDhcpAttribs", + "type": "DHCP_ATTRIB_ID" + }, + { + "name": "pDhcpAttribArr", + "type": "LPDHCP_ATTRIB_ARRAY" + } + ], + "DhcpServerRedoAuthorization": [ + { + "name": "ServerIpAddr", + "type": "LPWSTR" + }, + { + "name": "dwReserved", + "type": "ULONG" + } + ], + "DhcpAuditLogSetParams": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "AuditLogDir", + "type": "LPWSTR" + }, + { + "name": "DiskCheckInterval", + "type": "DWORD" + }, + { + "name": "MaxLogFilesSize", + "type": "DWORD" + }, + { + "name": "MinSpaceOnDisk", + "type": "DWORD" + } + ], + "DhcpAuditLogGetParams": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "AuditLogDir", + "type": "LPWSTR" + }, + { + "name": "DiskCheckInterval", + "type": "DWORD" + }, + { + "name": "MaxLogFilesSize", + "type": "DWORD" + }, + { + "name": "MinSpaceOnDisk", + "type": "DWORD" + } + ], + "DhcpServerQueryDnsRegCredentials": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "UnameSize", + "type": "ULONG" + }, + { + "name": "Uname", + "type": "LPWSTR" + }, + { + "name": "DomainSize", + "type": "ULONG" + }, + { + "name": "Domain", + "type": "LPWSTR" + } + ], + "DhcpServerSetDnsRegCredentialsV5": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Uname", + "type": "LPWSTR" + }, + { + "name": "Domain", + "type": "LPWSTR" + }, + { + "name": "Passwd", + "type": "LPWSTR" + } + ], + "DhcpServerBackupDatabase": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Path", + "type": "LPWSTR" + } + ], + "DhcpServerRestoreDatabase": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Path", + "type": "LPWSTR" + } + ], + "DhcpServerSetConfigVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "FieldsToSet", + "type": "DWORD" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO_VQ" + } + ], + "DhcpServerGetConfigVQ": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO_VQ" + } + ], + "DhcpGetServerSpecificStrings": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ServerSpecificStrings", + "type": "LPDHCP_SERVER_SPECIFIC_STRINGS" + } + ], + "DhcpCreateSubnetV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "LPDHCP_SUBNET_INFO_V6" + } + ], + "DhcpDeleteSubnetV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "ForceFlag", + "type": "DHCP_FORCE_FLAG" + } + ], + "DhcpEnumSubnetsV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumInfo", + "type": "LPDHCPV6_IP_ARRAY" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpAddSubnetElementV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "AddElementInfo", + "type": "LPDHCP_SUBNET_ELEMENT_DATA_V6" + } + ], + "DhcpRemoveSubnetElementV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "RemoveElementInfo", + "type": "LPDHCP_SUBNET_ELEMENT_DATA_V6" + }, + { + "name": "ForceFlag", + "type": "DHCP_FORCE_FLAG" + } + ], + "DhcpEnumSubnetElementsV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "EnumElementType", + "type": "DHCP_SUBNET_ELEMENT_TYPE_V6" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "EnumElementInfo", + "type": "LPDHCP_SUBNET_ELEMENT_INFO_ARRAY_V6" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpGetSubnetInfoV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "LPDHCP_SUBNET_INFO_V6" + } + ], + "DhcpEnumSubnetClientsV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_IPV6_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_ARRAY_V6" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpServerGetConfigV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO_V6" + } + ], + "DhcpServerSetConfigV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO6" + }, + { + "name": "FieldsToSet", + "type": "DWORD" + }, + { + "name": "ConfigInfo", + "type": "LPDHCP_SERVER_CONFIG_INFO_V6" + } + ], + "DhcpSetSubnetInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "SubnetInfo", + "type": "LPDHCP_SUBNET_INFO_V6" + } + ], + "DhcpGetMibInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "MibInfo", + "type": "LPDHCP_MIB_INFO_V6" + } + ], + "DhcpGetServerBindingInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "BindElementsInfo", + "type": "LPDHCPV6_BIND_ELEMENT_ARRAY" + } + ], + "DhcpSetServerBindingInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "BindElementInfo", + "type": "LPDHCPV6_BIND_ELEMENT_ARRAY" + } + ], + "DhcpSetClientInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_CLIENT_INFO_V6" + } + ], + "DhcpGetClientInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SearchInfo", + "type": "DHCP_SEARCH_INFO_V6" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_V6" + } + ], + "DhcpDeleteClientInfoV6": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "DHCP_SEARCH_INFO_V6" + } + ], + "DhcpCreateClassV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ClassInfo", + "type": "LPDHCP_CLASS_INFO_V6" + } + ], + "DhcpModifyClassV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ClassInfo", + "type": "LPDHCP_CLASS_INFO_V6" + } + ], + "DhcpDeleteClassV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ClassName", + "type": "LPWSTR" + } + ], + "DhcpEnumClassesV6": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ReservedMustBeZero", + "type": "DWORD" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClassInfoArray", + "type": "LPDHCP_CLASS_INFO_ARRAY_V6" + }, + { + "name": "nRead", + "type": "DWORD" + }, + { + "name": "nTotal", + "type": "DWORD" + } + ], + "DhcpSetSubnetDelayOffer": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "TimeDelayInMilliseconds", + "type": "USHORT" + } + ], + "DhcpGetSubnetDelayOffer": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "TimeDelayInMilliseconds", + "type": "USHORT" + } + ], + "DhcpGetMibInfoV5": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "MibInfo", + "type": "LPDHCP_MIB_INFO_V5" + } + ], + "DhcpV4GetOptionValue": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_VALUE" + } + ], + "DhcpV4SetOptionValue": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionId", + "type": "DHCP_OPTION_ID" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValue", + "type": "LPDHCP_OPTION_DATA" + } + ], + "DhcpV4SetOptionValues": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "OptionValues", + "type": "LPDHCP_OPTION_VALUE_ARRAY" + } + ], + "DhcpV4RemoveOptionValue": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "OptionID", + "type": "DHCP_OPTION_ID" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + } + ], + "DhcpV4GetAllOptionValues": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ScopeInfo", + "type": "LPDHCP_OPTION_SCOPE_INFO" + }, + { + "name": "Values", + "type": "LPDHCP_ALL_OPTION_VALUES_PB" + } + ], + "DhcpV4FailoverCreateRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP" + } + ], + "DhcpV4FailoverSetRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP" + } + ], + "DhcpV4FailoverDeleteRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pRelationshipName", + "type": "LPWSTR" + } + ], + "DhcpV4FailoverGetRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pRelationshipName", + "type": "LPWSTR" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP" + } + ], + "DhcpV4FailoverEnumRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP_ARRAY" + }, + { + "name": "RelationshipRead", + "type": "LPDWORD" + }, + { + "name": "RelationshipTotal", + "type": "LPDWORD" + } + ], + "DhcpV4FailoverAddScopeToRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP" + } + ], + "DhcpV4FailoverDeleteScopeFromRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP" + } + ], + "DhcpV4FailoverGetScopeRelationship": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ScopeId", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "pRelationship", + "type": "LPDHCP_FAILOVER_RELATIONSHIP" + } + ], + "DhcpV4FailoverGetScopeStatistics": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ScopeId", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "pStats", + "type": "LPDHCP_FAILOVER_STATISTICS" + } + ], + "DhcpV4FailoverGetClientInfo": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SearchInfo", + "type": "DHCP_SEARCH_INFO" + }, + { + "name": "ClientInfo", + "type": "LPDHCPV4_FAILOVER_CLIENT_INFO" + } + ], + "DhcpV4FailoverGetSystemTime": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pTime", + "type": "LPDWORD" + }, + { + "name": "pMaxAllowedDeltaTime", + "type": "LPDWORD" + } + ], + "DhcpV4FailoverGetAddressStatus": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "pStatus", + "type": "LPDWORD" + } + ], + "DhcpV4FailoverTriggerAddrAllocation": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pFailRelName", + "type": "LPWSTR" + } + ], + "DhcpHlprCreateV4Policy": [ + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "Subnet", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ProcessingOrder", + "type": "DWORD" + }, + { + "name": "RootOperator", + "type": "DHCP_POL_LOGIC_OPER" + }, + { + "name": "Description", + "type": "LPWSTR" + }, + { + "name": "Enabled", + "type": "BOOL" + }, + { + "name": "Policy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpHlprAddV4PolicyExpr": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + }, + { + "name": "ParentExpr", + "type": "DWORD" + }, + { + "name": "Operator", + "type": "DHCP_POL_LOGIC_OPER" + }, + { + "name": "ExprIndex", + "type": "DWORD" + } + ], + "DhcpHlprAddV4PolicyCondition": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + }, + { + "name": "ParentExpr", + "type": "DWORD" + }, + { + "name": "Type", + "type": "DHCP_POL_ATTR_TYPE" + }, + { + "name": "OptionID", + "type": "DWORD" + }, + { + "name": "SubOptionID", + "type": "DWORD" + }, + { + "name": "VendorName", + "type": "LPWSTR" + }, + { + "name": "Operator", + "type": "DHCP_POL_COMPARATOR" + }, + { + "name": "Value", + "type": "LPBYTE" + }, + { + "name": "ValueLength", + "type": "DWORD" + }, + { + "name": "ConditionIndex", + "type": "DWORD" + } + ], + "DhcpHlprAddV4PolicyRange": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + }, + { + "name": "Range", + "type": "LPDHCP_IP_RANGE" + } + ], + "DhcpHlprResetV4PolicyExpr": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpHlprModifyV4PolicyExpr": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + }, + { + "name": "Operator", + "type": "DHCP_POL_LOGIC_OPER" + } + ], + "DhcpHlprFreeV4Policy": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpHlprIsV4PolicySingleUC": [ + { + "name": "Policy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpV4QueryPolicyEnforcement": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "Enabled", + "type": "BOOL" + } + ], + "DhcpV4SetPolicyEnforcement": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "Enable", + "type": "BOOL" + } + ], + "DhcpHlprIsV4PolicyWellFormed": [ + { + "name": "pPolicy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpHlprIsV4PolicyValid": [ + { + "name": "pPolicy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpV4CreatePolicy": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "pPolicy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpV4GetPolicy": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "Policy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpV4SetPolicy": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "FieldsModified", + "type": "DWORD" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "Policy", + "type": "LPDHCP_POLICY" + } + ], + "DhcpV4DeletePolicy": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + } + ], + "DhcpV4EnumPolicies": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ResumeHandle", + "type": "LPDWORD" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "fGlobalPolicy", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "EnumInfo", + "type": "LPDHCP_POLICY_ARRAY" + }, + { + "name": "ElementsRead", + "type": "DWORD" + }, + { + "name": "ElementsTotal", + "type": "DWORD" + } + ], + "DhcpV4AddPolicyRange": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "Range", + "type": "LPDHCP_IP_RANGE" + } + ], + "DhcpV4RemovePolicyRange": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "PolicyName", + "type": "LPWSTR" + }, + { + "name": "Range", + "type": "LPDHCP_IP_RANGE" + } + ], + "DhcpV6SetStatelessStoreParams": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "fServerLevel", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "FieldModified", + "type": "DWORD" + }, + { + "name": "Params", + "type": "LPDHCPV6_STATELESS_PARAMS" + } + ], + "DhcpV6GetStatelessStoreParams": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "fServerLevel", + "type": "BOOL" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "Params", + "type": "LPDHCPV6_STATELESS_PARAMS" + } + ], + "DhcpV6GetStatelessStatistics": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "StatelessStats", + "type": "LPDHCPV6_STATELESS_STATS" + } + ], + "DhcpV4CreateClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_PB" + } + ], + "DhcpV4EnumSubnetClients": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SubnetAddress", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "ResumeHandle", + "type": "DHCP_RESUME_HANDLE" + }, + { + "name": "PreferredMaximum", + "type": "DWORD" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_PB_ARRAY" + }, + { + "name": "ClientsRead", + "type": "DWORD" + }, + { + "name": "ClientsTotal", + "type": "DWORD" + } + ], + "DhcpV4GetClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "SearchInfo", + "type": "DHCP_SEARCH_INFO" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_PB" + } + ], + "DhcpV6CreateClientInfo": [ + { + "name": "ServerIpAddress", + "type": "WCHAR" + }, + { + "name": "ClientInfo", + "type": "LPDHCP_CLIENT_INFO_V6" + } + ], + "DhcpV4GetFreeIPAddress": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ScopeId", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "StartIP", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "EndIP", + "type": "DHCP_IP_ADDRESS" + }, + { + "name": "NumFreeAddrReq", + "type": "DWORD" + }, + { + "name": "IPAddrList", + "type": "LPDHCP_IP_ARRAY" + } + ], + "DhcpV6GetFreeIPAddress": [ + { + "name": "ServerIpAddress", + "type": "LPWSTR" + }, + { + "name": "ScopeId", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "StartIP", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "EndIP", + "type": "DHCP_IPV6_ADDRESS" + }, + { + "name": "NumFreeAddrReq", + "type": "DWORD" + }, + { + "name": "IPAddrList", + "type": "LPDHCPV6_IP_ARRAY" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dhcpv6csdk.json b/qiling/extensions/windows_sdk/dhcpv6csdk.json new file mode 100644 index 000000000..f7e1fdafc --- /dev/null +++ b/qiling/extensions/windows_sdk/dhcpv6csdk.json @@ -0,0 +1,86 @@ +{ + "Dhcpv6RequestParams": [ + { + "name": "forceNewInform", + "type": "BOOL" + }, + { + "name": "reserved", + "type": "LPVOID" + }, + { + "name": "adapterName", + "type": "LPWSTR" + }, + { + "name": "classId", + "type": "LPDHCPV6CAPI_CLASSID" + }, + { + "name": "recdParams", + "type": "DHCPV6CAPI_PARAMS_ARRAY" + }, + { + "name": "buffer", + "type": "LPBYTE" + }, + { + "name": "pSize", + "type": "LPDWORD" + } + ], + "Dhcpv6RequestPrefix": [ + { + "name": "adapterName", + "type": "LPWSTR" + }, + { + "name": "pclassId", + "type": "LPDHCPV6CAPI_CLASSID" + }, + { + "name": "prefixleaseInfo", + "type": "LPDHCPV6PrefixLeaseInformation" + }, + { + "name": "pdwTimeToWait", + "type": "DWORD" + } + ], + "Dhcpv6RenewPrefix": [ + { + "name": "adapterName", + "type": "LPWSTR" + }, + { + "name": "pclassId", + "type": "LPDHCPV6CAPI_CLASSID" + }, + { + "name": "prefixleaseInfo", + "type": "LPDHCPV6PrefixLeaseInformation" + }, + { + "name": "pdwTimeToWait", + "type": "DWORD" + }, + { + "name": "bValidatePrefix", + "type": "DWORD" + } + ], + "Dhcpv6ReleasePrefix": [ + { + "name": "adapterName", + "type": "LPWSTR" + }, + { + "name": "classId", + "type": "LPDHCPV6CAPI_CLASSID" + }, + { + "name": "leaseInfo", + "type": "LPDHCPV6PrefixLeaseInformation" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dmoreg.json b/qiling/extensions/windows_sdk/dmoreg.json new file mode 100644 index 000000000..7041908b3 --- /dev/null +++ b/qiling/extensions/windows_sdk/dmoreg.json @@ -0,0 +1,116 @@ +{ + "DMORegister": [ + { + "name": "szName", + "type": "LPCWSTR" + }, + { + "name": "clsidDMO", + "type": "IID" + }, + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "cInTypes", + "type": "DWORD" + }, + { + "name": "pInTypes", + "type": "DMO_PARTIAL_MEDIATYPE" + }, + { + "name": "cOutTypes", + "type": "DWORD" + }, + { + "name": "pOutTypes", + "type": "DMO_PARTIAL_MEDIATYPE" + } + ], + "DMOUnregister": [ + { + "name": "clsidDMO", + "type": "IID" + }, + { + "name": "guidCategory", + "type": "GUID" + } + ], + "DMOEnum": [ + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "cInTypes", + "type": "DWORD" + }, + { + "name": "pInTypes", + "type": "DMO_PARTIAL_MEDIATYPE" + }, + { + "name": "cOutTypes", + "type": "DWORD" + }, + { + "name": "pOutTypes", + "type": "DMO_PARTIAL_MEDIATYPE" + }, + { + "name": "ppEnum", + "type": "IEnumDMO" + } + ], + "DMOGetTypes": [ + { + "name": "clsidDMO", + "type": "IID" + }, + { + "name": "ulInputTypesRequested", + "type": "unsigned long" + }, + { + "name": "pulInputTypesSupplied", + "type": "unsigned long" + }, + { + "name": "pInputTypes", + "type": "DMO_PARTIAL_MEDIATYPE" + }, + { + "name": "ulOutputTypesRequested", + "type": "unsigned long" + }, + { + "name": "pulOutputTypesSupplied", + "type": "unsigned long" + }, + { + "name": "pOutputTypes", + "type": "DMO_PARTIAL_MEDIATYPE" + } + ], + "DMOGetName": [ + { + "name": "clsidDMO", + "type": "IID" + }, + { + "name": "szName", + "type": "WCHAR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dpa_dsa.json b/qiling/extensions/windows_sdk/dpa_dsa.json new file mode 100644 index 000000000..8fc5a916b --- /dev/null +++ b/qiling/extensions/windows_sdk/dpa_dsa.json @@ -0,0 +1,400 @@ +{ + "DSA_Create": [ + { + "name": "cbItem", + "type": "int" + }, + { + "name": "cItemGrow", + "type": "int" + } + ], + "DSA_Destroy": [ + { + "name": "hdsa", + "type": "HDSA" + } + ], + "DSA_DestroyCallback": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "pfnCB", + "type": "PFNDAENUMCALLBACK" + }, + { + "name": "pData", + "type": "void" + } + ], + "DSA_DeleteItem": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + } + ], + "DSA_DeleteAllItems": [ + { + "name": "hdsa", + "type": "HDSA" + } + ], + "DSA_EnumCallback": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "pfnCB", + "type": "PFNDAENUMCALLBACK" + }, + { + "name": "pData", + "type": "void" + } + ], + "DSA_InsertItem": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "pitem", + "type": "void" + } + ], + "DSA_GetItemPtr": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + } + ], + "DSA_GetItem": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "pitem", + "type": "void" + } + ], + "DSA_SetItem": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "pitem", + "type": "void" + } + ], + "DSA_Clone": [ + { + "name": "hdsa", + "type": "HDSA" + } + ], + "DSA_GetSize": [ + { + "name": "hdsa", + "type": "HDSA" + } + ], + "DSA_Sort": [ + { + "name": "pdsa", + "type": "HDSA" + }, + { + "name": "pfnCompare", + "type": "PFNDACOMPARE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DPA_Create": [ + { + "name": "cItemGrow", + "type": "int" + } + ], + "DPA_CreateEx": [ + { + "name": "cpGrow", + "type": "int" + }, + { + "name": "hheap", + "type": "HANDLE" + } + ], + "DPA_Clone": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "hdpaNew", + "type": "HDPA" + } + ], + "DPA_Destroy": [ + { + "name": "hdpa", + "type": "HDPA" + } + ], + "DPA_DestroyCallback": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pfnCB", + "type": "PFNDAENUMCALLBACK" + }, + { + "name": "pData", + "type": "void" + } + ], + "DPA_DeletePtr": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "i", + "type": "int" + } + ], + "DPA_DeleteAllPtrs": [ + { + "name": "hdpa", + "type": "HDPA" + } + ], + "DPA_EnumCallback": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pfnCB", + "type": "PFNDAENUMCALLBACK" + }, + { + "name": "pData", + "type": "void" + } + ], + "DPA_Grow": [ + { + "name": "pdpa", + "type": "HDPA" + }, + { + "name": "cp", + "type": "int" + } + ], + "DPA_InsertPtr": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "p", + "type": "void" + } + ], + "DPA_SetPtr": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "p", + "type": "void" + } + ], + "DPA_GetPtr": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "i", + "type": "INT_PTR" + } + ], + "DPA_GetPtrIndex": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "p", + "type": "void" + } + ], + "DPA_GetSize": [ + { + "name": "hdpa", + "type": "HDPA" + } + ], + "DPA_Sort": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pfnCompare", + "type": "PFNDACOMPARE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DPA_LoadStream": [ + { + "name": "phdpa", + "type": "HDPA" + }, + { + "name": "pfn", + "type": "PFNDPASTREAM" + }, + { + "name": "pstream", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "pvInstData", + "type": "void" + } + ], + "DPA_SaveStream": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pfn", + "type": "PFNDPASTREAM" + }, + { + "name": "pstream", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "pvInstData", + "type": "void" + } + ], + "DPA_Merge": [ + { + "name": "hdpaDest", + "type": "HDPA" + }, + { + "name": "hdpaSrc", + "type": "HDPA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pfnCompare", + "type": "PFNDACOMPARE" + }, + { + "name": "pfnMerge", + "type": "PFNDPAMERGE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DPA_Search": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pFind", + "type": "void" + }, + { + "name": "iStart", + "type": "int" + }, + { + "name": "pfnCompare", + "type": "PFNDACOMPARE" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "options", + "type": "UINT" + } + ], + "Str_SetPtrW": [ + { + "name": "ppsz", + "type": "LPWSTR" + }, + { + "name": "psz", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dpapi.json b/qiling/extensions/windows_sdk/dpapi.json new file mode 100644 index 000000000..6e2f4e73e --- /dev/null +++ b/qiling/extensions/windows_sdk/dpapi.json @@ -0,0 +1,112 @@ +{ + "CryptProtectData": [ + { + "name": "pDataIn", + "type": "DATA_BLOB" + }, + { + "name": "szDataDescr", + "type": "LPCWSTR" + }, + { + "name": "pOptionalEntropy", + "type": "DATA_BLOB" + }, + { + "name": "pvReserved", + "type": "PVOID" + }, + { + "name": "pPromptStruct", + "type": "CRYPTPROTECT_PROMPTSTRUCT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pDataOut", + "type": "DATA_BLOB" + } + ], + "CryptUnprotectData": [ + { + "name": "pDataIn", + "type": "DATA_BLOB" + }, + { + "name": "ppszDataDescr", + "type": "LPWSTR" + }, + { + "name": "pOptionalEntropy", + "type": "DATA_BLOB" + }, + { + "name": "pvReserved", + "type": "PVOID" + }, + { + "name": "pPromptStruct", + "type": "CRYPTPROTECT_PROMPTSTRUCT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pDataOut", + "type": "DATA_BLOB" + } + ], + "CryptUpdateProtectedState": [ + { + "name": "pOldSid", + "type": "PSID" + }, + { + "name": "pwszOldPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwSuccessCount", + "type": "DWORD" + }, + { + "name": "pdwFailureCount", + "type": "DWORD" + } + ], + "CryptProtectMemory": [ + { + "name": "pDataIn", + "type": "LPVOID" + }, + { + "name": "cbDataIn", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptUnprotectMemory": [ + { + "name": "pDataIn", + "type": "LPVOID" + }, + { + "name": "cbDataIn", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/drt.json b/qiling/extensions/windows_sdk/drt.json new file mode 100644 index 000000000..25e01ab0d --- /dev/null +++ b/qiling/extensions/windows_sdk/drt.json @@ -0,0 +1,316 @@ +{ + "DrtCreatePnrpBootstrapResolver": [ + { + "name": "fPublish", + "type": "BOOL" + }, + { + "name": "pwzPeerName", + "type": "PCWSTR" + }, + { + "name": "pwzCloudName", + "type": "PCWSTR" + }, + { + "name": "pwzPublishingIdentity", + "type": "PCWSTR" + }, + { + "name": "ppResolver", + "type": "DRT_BOOTSTRAP_PROVIDER" + } + ], + "DrtDeletePnrpBootstrapResolver": [ + { + "name": "pResolver", + "type": "DRT_BOOTSTRAP_PROVIDER" + } + ], + "DrtCreateDnsBootstrapResolver": [ + { + "name": "port", + "type": "USHORT" + }, + { + "name": "pwszAddress", + "type": "PCWSTR" + }, + { + "name": "ppModule", + "type": "DRT_BOOTSTRAP_PROVIDER" + } + ], + "DrtDeleteDnsBootstrapResolver": [ + { + "name": "pResolver", + "type": "DRT_BOOTSTRAP_PROVIDER" + } + ], + "DrtCreateIpv6UdpTransport": [ + { + "name": "scope", + "type": "DRT_SCOPE" + }, + { + "name": "dwScopeId", + "type": "ULONG" + }, + { + "name": "dwLocalityThreshold", + "type": "ULONG" + }, + { + "name": "pwPort", + "type": "USHORT" + }, + { + "name": "phTransport", + "type": "HDRT_TRANSPORT" + } + ], + "DrtDeleteIpv6UdpTransport": [ + { + "name": "hTransport", + "type": "HDRT_TRANSPORT" + } + ], + "DrtCreateDerivedKeySecurityProvider": [ + { + "name": "pRootCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pLocalCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "ppSecurityProvider", + "type": "DRT_SECURITY_PROVIDER" + } + ], + "DrtCreateDerivedKey": [ + { + "name": "pLocalCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pKey", + "type": "DRT_DATA" + } + ], + "DrtDeleteDerivedKeySecurityProvider": [ + { + "name": "pSecurityProvider", + "type": "DRT_SECURITY_PROVIDER" + } + ], + "DrtCreateNullSecurityProvider": [ + { + "name": "ppSecurityProvider", + "type": "DRT_SECURITY_PROVIDER" + } + ], + "DrtDeleteNullSecurityProvider": [ + { + "name": "pSecurityProvider", + "type": "DRT_SECURITY_PROVIDER" + } + ], + "DrtOpen": [ + { + "name": "pSettings", + "type": "DRT_SETTINGS" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "pvContext", + "type": "PVOID" + }, + { + "name": "phDrt", + "type": "HDRT" + } + ], + "DrtClose": [ + { + "name": "hDrt", + "type": "HDRT" + } + ], + "DrtGetEventDataSize": [ + { + "name": "hDrt", + "type": "HDRT" + }, + { + "name": "pulEventDataLen", + "type": "ULONG" + } + ], + "DrtGetEventData": [ + { + "name": "hDrt", + "type": "HDRT" + }, + { + "name": "ulEventDataLen", + "type": "ULONG" + }, + { + "name": "pEventData", + "type": "DRT_EVENT_DATA" + } + ], + "DrtRegisterKey": [ + { + "name": "hDrt", + "type": "HDRT" + }, + { + "name": "pRegistration", + "type": "DRT_REGISTRATION" + }, + { + "name": "pvKeyContext", + "type": "PVOID" + }, + { + "name": "phKeyRegistration", + "type": "HDRT_REGISTRATION_CONTEXT" + } + ], + "DrtUpdateKey": [ + { + "name": "hKeyRegistration", + "type": "HDRT_REGISTRATION_CONTEXT" + }, + { + "name": "pAppData", + "type": "DRT_DATA" + } + ], + "DrtUnregisterKey": [ + { + "name": "hKeyRegistration", + "type": "HDRT_REGISTRATION_CONTEXT" + } + ], + "DrtStartSearch": [ + { + "name": "hDrt", + "type": "HDRT" + }, + { + "name": "pKey", + "type": "DRT_DATA" + }, + { + "name": "pInfo", + "type": "DRT_SEARCH_INFO" + }, + { + "name": "timeout", + "type": "ULONG" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "pvContext", + "type": "PVOID" + }, + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + } + ], + "DrtContinueSearch": [ + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + } + ], + "DrtGetSearchResultSize": [ + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + }, + { + "name": "pulSearchResultSize", + "type": "ULONG" + } + ], + "DrtGetSearchResult": [ + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + }, + { + "name": "ulSearchResultSize", + "type": "ULONG" + }, + { + "name": "pSearchResult", + "type": "DRT_SEARCH_RESULT" + } + ], + "DrtGetSearchPathSize": [ + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + }, + { + "name": "pulSearchPathSize", + "type": "ULONG" + } + ], + "DrtGetSearchPath": [ + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + }, + { + "name": "ulSearchPathSize", + "type": "ULONG" + }, + { + "name": "pSearchPath", + "type": "DRT_ADDRESS_LIST" + } + ], + "DrtEndSearch": [ + { + "name": "hSearchContext", + "type": "HDRT_SEARCH_CONTEXT" + } + ], + "DrtGetInstanceName": [ + { + "name": "hDrt", + "type": "HDRT" + }, + { + "name": "ulcbInstanceNameSize", + "type": "ULONG" + }, + { + "name": "pwzDrtInstanceName", + "type": "PWSTR" + } + ], + "DrtGetInstanceNameSize": [ + { + "name": "hDrt", + "type": "HDRT" + }, + { + "name": "pulcbInstanceNameSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dsgetdc.json b/qiling/extensions/windows_sdk/dsgetdc.json new file mode 100644 index 000000000..e479849a7 --- /dev/null +++ b/qiling/extensions/windows_sdk/dsgetdc.json @@ -0,0 +1,194 @@ +{ + "DsGetDcNameA": [ + { + "name": "ComputerName", + "type": "LPCSTR" + }, + { + "name": "DomainName", + "type": "LPCSTR" + }, + { + "name": "DomainGuid", + "type": "GUID" + }, + { + "name": "SiteName", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "DomainControllerInfo", + "type": "PDOMAIN_CONTROLLER_INFOA" + } + ], + "DsGetDcNameW": [ + { + "name": "ComputerName", + "type": "LPCWSTR" + }, + { + "name": "DomainName", + "type": "LPCWSTR" + }, + { + "name": "DomainGuid", + "type": "GUID" + }, + { + "name": "SiteName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "DomainControllerInfo", + "type": "PDOMAIN_CONTROLLER_INFOW" + } + ], + "DsGetSiteNameA": [ + { + "name": "ComputerName", + "type": "LPCSTR" + }, + { + "name": "SiteName", + "type": "LPSTR" + } + ], + "DsGetSiteNameW": [ + { + "name": "ComputerName", + "type": "LPCWSTR" + }, + { + "name": "SiteName", + "type": "LPWSTR" + } + ], + "DsValidateSubnetNameW": [ + { + "name": "SubnetName", + "type": "LPCWSTR" + } + ], + "DsValidateSubnetNameA": [ + { + "name": "SubnetName", + "type": "LPCSTR" + } + ], + "DsEnumerateDomainTrustsW": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "Domains", + "type": "PDS_DOMAIN_TRUSTSW" + }, + { + "name": "DomainCount", + "type": "PULONG" + } + ], + "DsEnumerateDomainTrustsA": [ + { + "name": "ServerName", + "type": "LPSTR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "Domains", + "type": "PDS_DOMAIN_TRUSTSA" + }, + { + "name": "DomainCount", + "type": "PULONG" + } + ], + "DsGetDcSiteCoverageW": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "EntryCount", + "type": "PULONG" + }, + { + "name": "SiteNames", + "type": "LPWSTR" + } + ], + "DsGetDcSiteCoverageA": [ + { + "name": "ServerName", + "type": "LPCSTR" + }, + { + "name": "EntryCount", + "type": "PULONG" + }, + { + "name": "SiteNames", + "type": "LPSTR" + } + ], + "DsDeregisterDnsHostRecordsW": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPWSTR" + }, + { + "name": "DomainGuid", + "type": "GUID" + }, + { + "name": "DsaGuid", + "type": "GUID" + }, + { + "name": "DnsHostName", + "type": "LPWSTR" + } + ], + "DsDeregisterDnsHostRecordsA": [ + { + "name": "ServerName", + "type": "LPSTR" + }, + { + "name": "DnsDomainName", + "type": "LPSTR" + }, + { + "name": "DomainGuid", + "type": "GUID" + }, + { + "name": "DsaGuid", + "type": "GUID" + }, + { + "name": "DnsHostName", + "type": "LPSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dsparse.json b/qiling/extensions/windows_sdk/dsparse.json new file mode 100644 index 000000000..6d1400022 --- /dev/null +++ b/qiling/extensions/windows_sdk/dsparse.json @@ -0,0 +1,312 @@ +{ + "DsMakeSpnW": [ + { + "name": "ServiceClass", + "type": "LPCWSTR" + }, + { + "name": "ServiceName", + "type": "LPCWSTR" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "InstancePort", + "type": "USHORT" + }, + { + "name": "Referrer", + "type": "LPCWSTR" + }, + { + "name": "pcSpnLength", + "type": "DWORD" + }, + { + "name": "pszSpn", + "type": "LPWSTR" + } + ], + "DsMakeSpnA": [ + { + "name": "ServiceClass", + "type": "LPCSTR" + }, + { + "name": "ServiceName", + "type": "LPCSTR" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "InstancePort", + "type": "USHORT" + }, + { + "name": "Referrer", + "type": "LPCSTR" + }, + { + "name": "pcSpnLength", + "type": "DWORD" + }, + { + "name": "pszSpn", + "type": "LPSTR" + } + ], + "DsCrackSpnA": [ + { + "name": "pszSpn", + "type": "LPCSTR" + }, + { + "name": "pcServiceClass", + "type": "LPDWORD" + }, + { + "name": "ServiceClass", + "type": "LPSTR" + }, + { + "name": "pcServiceName", + "type": "LPDWORD" + }, + { + "name": "ServiceName", + "type": "LPSTR" + }, + { + "name": "pcInstanceName", + "type": "LPDWORD" + }, + { + "name": "InstanceName", + "type": "LPSTR" + }, + { + "name": "pInstancePort", + "type": "USHORT" + } + ], + "DsCrackSpnW": [ + { + "name": "pszSpn", + "type": "LPCWSTR" + }, + { + "name": "pcServiceClass", + "type": "DWORD" + }, + { + "name": "ServiceClass", + "type": "LPWSTR" + }, + { + "name": "pcServiceName", + "type": "DWORD" + }, + { + "name": "ServiceName", + "type": "LPWSTR" + }, + { + "name": "pcInstanceName", + "type": "DWORD" + }, + { + "name": "InstanceName", + "type": "LPWSTR" + }, + { + "name": "pInstancePort", + "type": "USHORT" + } + ], + "DsQuoteRdnValueW": [ + { + "name": "cUnquotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psUnquotedRdnValue", + "type": "LPCWCH" + }, + { + "name": "pcQuotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psQuotedRdnValue", + "type": "LPWCH" + } + ], + "DsQuoteRdnValueA": [ + { + "name": "cUnquotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psUnquotedRdnValue", + "type": "LPCCH" + }, + { + "name": "pcQuotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psQuotedRdnValue", + "type": "LPCH" + } + ], + "DsUnquoteRdnValueW": [ + { + "name": "cQuotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psQuotedRdnValue", + "type": "LPCWCH" + }, + { + "name": "pcUnquotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psUnquotedRdnValue", + "type": "LPWCH" + } + ], + "DsUnquoteRdnValueA": [ + { + "name": "cQuotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psQuotedRdnValue", + "type": "LPCCH" + }, + { + "name": "pcUnquotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psUnquotedRdnValue", + "type": "LPCH" + } + ], + "DsGetRdnW": [ + { + "name": "ppDN", + "type": "LPCWCH" + }, + { + "name": "pcDN", + "type": "DWORD" + }, + { + "name": "ppKey", + "type": "LPCWCH" + }, + { + "name": "pcKey", + "type": "DWORD" + }, + { + "name": "ppVal", + "type": "LPCWCH" + }, + { + "name": "pcVal", + "type": "DWORD" + } + ], + "DsCrackUnquotedMangledRdnW": [ + { + "name": "pszRDN", + "type": "LPCWSTR" + }, + { + "name": "cchRDN", + "type": "DWORD" + }, + { + "name": "pGuid", + "type": "GUID" + }, + { + "name": "peDsMangleFor", + "type": "DS_MANGLE_FOR" + } + ], + "DsCrackUnquotedMangledRdnA": [ + { + "name": "pszRDN", + "type": "LPCSTR" + }, + { + "name": "cchRDN", + "type": "DWORD" + }, + { + "name": "pGuid", + "type": "GUID" + }, + { + "name": "peDsMangleFor", + "type": "DS_MANGLE_FOR" + } + ], + "DsIsMangledRdnValueW": [ + { + "name": "pszRdn", + "type": "LPCWSTR" + }, + { + "name": "cRdn", + "type": "DWORD" + }, + { + "name": "eDsMangleForDesired", + "type": "DS_MANGLE_FOR" + } + ], + "DsIsMangledRdnValueA": [ + { + "name": "pszRdn", + "type": "LPCSTR" + }, + { + "name": "cRdn", + "type": "DWORD" + }, + { + "name": "eDsMangleForDesired", + "type": "DS_MANGLE_FOR" + } + ], + "DsIsMangledDnA": [ + { + "name": "pszDn", + "type": "LPCSTR" + }, + { + "name": "eDsMangleFor", + "type": "DS_MANGLE_FOR" + } + ], + "DsIsMangledDnW": [ + { + "name": "pszDn", + "type": "LPCWSTR" + }, + { + "name": "eDsMangleFor", + "type": "DS_MANGLE_FOR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dsrole.json b/qiling/extensions/windows_sdk/dsrole.json new file mode 100644 index 000000000..29bc98c4d --- /dev/null +++ b/qiling/extensions/windows_sdk/dsrole.json @@ -0,0 +1,22 @@ +{ + "DsRoleGetPrimaryDomainInformation": [ + { + "name": "lpServer", + "type": "LPCWSTR" + }, + { + "name": "InfoLevel", + "type": "DSROLE_PRIMARY_DOMAIN_INFO_LEVEL" + }, + { + "name": "Buffer", + "type": "PBYTE" + } + ], + "DsRoleFreeMemory": [ + { + "name": "Buffer", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dssec.json b/qiling/extensions/windows_sdk/dssec.json new file mode 100644 index 000000000..8af7946f2 --- /dev/null +++ b/qiling/extensions/windows_sdk/dssec.json @@ -0,0 +1,138 @@ +{ + "DSCreateISecurityInfoObject": [ + { + "name": "pwszObjectPath", + "type": "LPCWSTR" + }, + { + "name": "pwszObjectClass", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppSI", + "type": "LPSECURITYINFO" + }, + { + "name": "pfnReadSD", + "type": "PFNREADOBJECTSECURITY" + }, + { + "name": "pfnWriteSD", + "type": "PFNWRITEOBJECTSECURITY" + }, + { + "name": "lpContext", + "type": "LPARAM" + } + ], + "DSCreateISecurityInfoObjectEx": [ + { + "name": "pwszObjectPath", + "type": "LPCWSTR" + }, + { + "name": "pwszObjectClass", + "type": "LPCWSTR" + }, + { + "name": "pwszServer", + "type": "LPCWSTR" + }, + { + "name": "pwszUserName", + "type": "LPCWSTR" + }, + { + "name": "pwszPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppSI", + "type": "LPSECURITYINFO" + }, + { + "name": "pfnReadSD", + "type": "PFNREADOBJECTSECURITY" + }, + { + "name": "pfnWriteSD", + "type": "PFNWRITEOBJECTSECURITY" + }, + { + "name": "lpContext", + "type": "LPARAM" + } + ], + "DSCreateSecurityPage": [ + { + "name": "pwszObjectPath", + "type": "LPCWSTR" + }, + { + "name": "pwszObjectClass", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPage", + "type": "HPROPSHEETPAGE" + }, + { + "name": "pfnReadSD", + "type": "PFNREADOBJECTSECURITY" + }, + { + "name": "pfnWriteSD", + "type": "PFNWRITEOBJECTSECURITY" + }, + { + "name": "lpContext", + "type": "LPARAM" + } + ], + "DSEditSecurity": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "pwszObjectPath", + "type": "LPCWSTR" + }, + { + "name": "pwszObjectClass", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszCaption", + "type": "LPCWSTR" + }, + { + "name": "pfnReadSD", + "type": "PFNREADOBJECTSECURITY" + }, + { + "name": "pfnWriteSD", + "type": "PFNWRITEOBJECTSECURITY" + }, + { + "name": "lpContext", + "type": "LPARAM" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dwmapi.json b/qiling/extensions/windows_sdk/dwmapi.json new file mode 100644 index 000000000..333a55b42 --- /dev/null +++ b/qiling/extensions/windows_sdk/dwmapi.json @@ -0,0 +1,354 @@ +{ + "DwmDefWindowProc": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "plResult", + "type": "LRESULT" + } + ], + "DwmEnableBlurBehindWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pBlurBehind", + "type": "DWM_BLURBEHIND" + } + ], + "DwmEnableComposition": [ + { + "name": "uCompositionAction", + "type": "UINT" + } + ], + "DwmEnableMMCSS": [ + { + "name": "fEnableMMCSS", + "type": "BOOL" + } + ], + "DwmExtendFrameIntoClientArea": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pMarInset", + "type": "MARGINS" + } + ], + "DwmGetColorizationColor": [ + { + "name": "pcrColorization", + "type": "DWORD" + }, + { + "name": "pfOpaqueBlend", + "type": "BOOL" + } + ], + "DwmGetCompositionTimingInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pTimingInfo", + "type": "DWM_TIMING_INFO" + } + ], + "DwmGetWindowAttribute": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwAttribute", + "type": "DWORD" + }, + { + "name": "pvAttribute", + "type": "PVOID" + }, + { + "name": "cbAttribute", + "type": "DWORD" + } + ], + "DwmIsCompositionEnabled": [ + { + "name": "pfEnabled", + "type": "BOOL" + } + ], + "DwmModifyPreviousDxFrameDuration": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "cRefreshes", + "type": "INT" + }, + { + "name": "fRelative", + "type": "BOOL" + } + ], + "DwmQueryThumbnailSourceSize": [ + { + "name": "hThumbnail", + "type": "HTHUMBNAIL" + }, + { + "name": "pSize", + "type": "PSIZE" + } + ], + "DwmRegisterThumbnail": [ + { + "name": "hwndDestination", + "type": "HWND" + }, + { + "name": "hwndSource", + "type": "HWND" + }, + { + "name": "phThumbnailId", + "type": "PHTHUMBNAIL" + } + ], + "DwmSetDxFrameDuration": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "cRefreshes", + "type": "INT" + } + ], + "DwmSetPresentParameters": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pPresentParams", + "type": "DWM_PRESENT_PARAMETERS" + } + ], + "DwmSetWindowAttribute": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwAttribute", + "type": "DWORD" + }, + { + "name": "pvAttribute", + "type": "LPCVOID" + }, + { + "name": "cbAttribute", + "type": "DWORD" + } + ], + "DwmUnregisterThumbnail": [ + { + "name": "hThumbnailId", + "type": "HTHUMBNAIL" + } + ], + "DwmUpdateThumbnailProperties": [ + { + "name": "hThumbnailId", + "type": "HTHUMBNAIL" + }, + { + "name": "ptnProperties", + "type": "DWM_THUMBNAIL_PROPERTIES" + } + ], + "DwmSetIconicThumbnail": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hbmp", + "type": "HBITMAP" + }, + { + "name": "dwSITFlags", + "type": "DWORD" + } + ], + "DwmSetIconicLivePreviewBitmap": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hbmp", + "type": "HBITMAP" + }, + { + "name": "pptClient", + "type": "POINT" + }, + { + "name": "dwSITFlags", + "type": "DWORD" + } + ], + "DwmInvalidateIconicBitmaps": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DwmAttachMilContent": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DwmDetachMilContent": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DwmGetGraphicsStreamTransformHint": [ + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "pTransform", + "type": "MilMatrix3x2D" + } + ], + "DwmGetGraphicsStreamClient": [ + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "pClientUuid", + "type": "UUID" + } + ], + "DwmGetTransportAttributes": [ + { + "name": "pfIsRemoting", + "type": "BOOL" + }, + { + "name": "pfIsConnected", + "type": "BOOL" + }, + { + "name": "pDwGeneration", + "type": "DWORD" + } + ], + "DwmTransitionOwnedWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "target", + "type": { + "name": "DWMTRANSITION_OWNEDWINDOW_TARGET", + "data_type": "Enum", + "enumerators": [] + } + } + ], + "DwmRenderGesture": [ + { + "name": "gt", + "type": { + "name": "GESTURE_TYPE", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "cContacts", + "type": "UINT" + }, + { + "name": "pdwPointerID", + "type": "DWORD" + }, + { + "name": "pPoints", + "type": "POINT" + } + ], + "DwmTetherContact": [ + { + "name": "dwPointerID", + "type": "DWORD" + }, + { + "name": "fEnable", + "type": "BOOL" + }, + { + "name": "ptTether", + "type": "POINT" + } + ], + "DwmShowContact": [ + { + "name": "dwPointerID", + "type": "DWORD" + }, + { + "name": "eShowContact", + "type": { + "name": "DWM_SHOWCONTACT", + "data_type": "Enum", + "enumerators": [] + } + } + ], + "DwmGetUnmetTabRequirements": [ + { + "name": "appWindow", + "type": "HWND" + }, + { + "name": "value", + "type": { + "name": "DWM_TAB_WINDOW_REQUIREMENTS", + "data_type": "Enum", + "enumerators": [] + } + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dxgi.json b/qiling/extensions/windows_sdk/dxgi.json new file mode 100644 index 000000000..ca8311e2a --- /dev/null +++ b/qiling/extensions/windows_sdk/dxgi.json @@ -0,0 +1,22 @@ +{ + "CreateDXGIFactory": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppFactory", + "type": "void" + } + ], + "CreateDXGIFactory1": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppFactory", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dxgi1_3.json b/qiling/extensions/windows_sdk/dxgi1_3.json new file mode 100644 index 000000000..3d79d4d5d --- /dev/null +++ b/qiling/extensions/windows_sdk/dxgi1_3.json @@ -0,0 +1,30 @@ +{ + "CreateDXGIFactory2": [ + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppFactory", + "type": "void" + } + ], + "DXGIGetDebugInterface1": [ + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pDebug", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dxgi1_6.json b/qiling/extensions/windows_sdk/dxgi1_6.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/dxgi1_6.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dxgidebug.json b/qiling/extensions/windows_sdk/dxgidebug.json new file mode 100644 index 000000000..7fe795c70 --- /dev/null +++ b/qiling/extensions/windows_sdk/dxgidebug.json @@ -0,0 +1,12 @@ +{ + "DXGIGetDebugInterface": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppDebug", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/eaphostpeerconfigapis.json b/qiling/extensions/windows_sdk/eaphostpeerconfigapis.json new file mode 100644 index 000000000..2cedae229 --- /dev/null +++ b/qiling/extensions/windows_sdk/eaphostpeerconfigapis.json @@ -0,0 +1,402 @@ +{ + "EapHostPeerGetMethods": [ + { + "name": "pEapMethodInfoArray", + "type": "EAP_METHOD_INFO_ARRAY" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerGetMethodProperties": [ + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "eapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "hUserImpersonationToken", + "type": "HANDLE" + }, + { + "name": "dwEapConnDataSize", + "type": "DWORD" + }, + { + "name": "pbEapConnData", + "type": "BYTE" + }, + { + "name": "dwUserDataSize", + "type": "DWORD" + }, + { + "name": "pbUserData", + "type": "BYTE" + }, + { + "name": "pMethodPropertyArray", + "type": "EAP_METHOD_PROPERTY_ARRAY" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerInvokeConfigUI": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "eapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwSizeOfConfigIn", + "type": "DWORD" + }, + { + "name": "pConfigIn", + "type": "BYTE" + }, + { + "name": "pdwSizeOfConfigOut", + "type": "DWORD" + }, + { + "name": "ppConfigOut", + "type": "BYTE" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerQueryCredentialInputFields": [ + { + "name": "hUserImpersonationToken", + "type": "HANDLE" + }, + { + "name": "eapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwEapConnDataSize", + "type": "DWORD" + }, + { + "name": "pbEapConnData", + "type": "BYTE" + }, + { + "name": "pEapConfigInputFieldArray", + "type": "EAP_CONFIG_INPUT_FIELD_ARRAY" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerQueryUserBlobFromCredentialInputFields": [ + { + "name": "hUserImpersonationToken", + "type": "HANDLE" + }, + { + "name": "eapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwEapConnDataSize", + "type": "DWORD" + }, + { + "name": "pbEapConnData", + "type": "BYTE" + }, + { + "name": "pEapConfigInputFieldArray", + "type": "EAP_CONFIG_INPUT_FIELD_ARRAY" + }, + { + "name": "pdwUserBlobSize", + "type": "DWORD" + }, + { + "name": "ppbUserBlob", + "type": "BYTE" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerInvokeIdentityUI": [ + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "eapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwSizeofConnectionData", + "type": "DWORD" + }, + { + "name": "pConnectionData", + "type": "BYTE" + }, + { + "name": "dwSizeofUserData", + "type": "DWORD" + }, + { + "name": "pUserData", + "type": "BYTE" + }, + { + "name": "pdwSizeOfUserDataOut", + "type": "DWORD" + }, + { + "name": "ppUserDataOut", + "type": "BYTE" + }, + { + "name": "ppwszIdentity", + "type": "LPWSTR" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + }, + { + "name": "ppvReserved", + "type": "LPVOID" + } + ], + "EapHostPeerInvokeInteractiveUI": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwSizeofUIContextData", + "type": "DWORD" + }, + { + "name": "pUIContextData", + "type": "BYTE" + }, + { + "name": "pdwSizeOfDataFromInteractiveUI", + "type": "DWORD" + }, + { + "name": "ppDataFromInteractiveUI", + "type": "BYTE" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerQueryInteractiveUIInputFields": [ + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwSizeofUIContextData", + "type": "DWORD" + }, + { + "name": "pUIContextData", + "type": "BYTE" + }, + { + "name": "pEapInteractiveUIData", + "type": "EAP_INTERACTIVE_UI_DATA" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + }, + { + "name": "ppvReserved", + "type": "LPVOID" + } + ], + "EapHostPeerQueryUIBlobFromInteractiveUIInputFields": [ + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwSizeofUIContextData", + "type": "DWORD" + }, + { + "name": "pUIContextData", + "type": "BYTE" + }, + { + "name": "pEapInteractiveUIData", + "type": "EAP_INTERACTIVE_UI_DATA" + }, + { + "name": "pdwSizeOfDataFromInteractiveUI", + "type": "DWORD" + }, + { + "name": "ppDataFromInteractiveUI", + "type": "BYTE" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + }, + { + "name": "ppvReserved", + "type": "LPVOID" + } + ], + "EapHostPeerConfigXml2Blob": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pConfigDoc", + "type": "IXMLDOMNode" + }, + { + "name": "pdwSizeOfConfigOut", + "type": "DWORD" + }, + { + "name": "ppConfigOut", + "type": "BYTE" + }, + { + "name": "pEapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerCredentialsXml2Blob": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pCredentialsDoc", + "type": "IXMLDOMNode" + }, + { + "name": "dwSizeOfConfigIn", + "type": "DWORD" + }, + { + "name": "pConfigIn", + "type": "BYTE" + }, + { + "name": "pdwSizeOfCredentialsOut", + "type": "DWORD" + }, + { + "name": "ppCredentialsOut", + "type": "BYTE" + }, + { + "name": "pEapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerConfigBlob2Xml": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "eapMethodType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwSizeOfConfigIn", + "type": "DWORD" + }, + { + "name": "pConfigIn", + "type": "BYTE" + }, + { + "name": "ppConfigDoc", + "type": "IXMLDOMDocument2" + }, + { + "name": "ppEapError", + "type": "EAP_ERROR" + } + ], + "EapHostPeerFreeMemory": [ + { + "name": "pData", + "type": "BYTE" + } + ], + "EapHostPeerFreeErrorMemory": [ + { + "name": "pEapError", + "type": "EAP_ERROR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/elscore.json b/qiling/extensions/windows_sdk/elscore.json new file mode 100644 index 000000000..c9bb013f6 --- /dev/null +++ b/qiling/extensions/windows_sdk/elscore.json @@ -0,0 +1,68 @@ +{ + "MappingGetServices": [ + { + "name": "pOptions", + "type": "PMAPPING_ENUM_OPTIONS" + }, + { + "name": "prgServices", + "type": "PMAPPING_SERVICE_INFO" + }, + { + "name": "pdwServicesCount", + "type": "DWORD" + } + ], + "MappingFreeServices": [ + { + "name": "pServiceInfo", + "type": "PMAPPING_SERVICE_INFO" + } + ], + "MappingRecognizeText": [ + { + "name": "pServiceInfo", + "type": "PMAPPING_SERVICE_INFO" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "dwLength", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pOptions", + "type": "PMAPPING_OPTIONS" + }, + { + "name": "pbag", + "type": "PMAPPING_PROPERTY_BAG" + } + ], + "MappingDoAction": [ + { + "name": "pBag", + "type": "PMAPPING_PROPERTY_BAG" + }, + { + "name": "dwRangeIndex", + "type": "DWORD" + }, + { + "name": "pszActionId", + "type": "LPCWSTR" + } + ], + "MappingFreePropertyBag": [ + { + "name": "pBag", + "type": "PMAPPING_PROPERTY_BAG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/enclaveapi.json b/qiling/extensions/windows_sdk/enclaveapi.json new file mode 100644 index 000000000..1142355a7 --- /dev/null +++ b/qiling/extensions/windows_sdk/enclaveapi.json @@ -0,0 +1,146 @@ +{ + "IsEnclaveTypeSupported": [ + { + "name": "flEnclaveType", + "type": "DWORD" + } + ], + "CreateEnclave": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "dwInitialCommitment", + "type": "SIZE_T" + }, + { + "name": "flEnclaveType", + "type": "DWORD" + }, + { + "name": "lpEnclaveInformation", + "type": "LPCVOID" + }, + { + "name": "dwInfoLength", + "type": "DWORD" + }, + { + "name": "lpEnclaveError", + "type": "LPDWORD" + } + ], + "LoadEnclaveData": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nSize", + "type": "SIZE_T" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "lpPageInformation", + "type": "LPCVOID" + }, + { + "name": "dwInfoLength", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "PSIZE_T" + }, + { + "name": "lpEnclaveError", + "type": "LPDWORD" + } + ], + "InitializeEnclave": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "lpEnclaveInformation", + "type": "LPCVOID" + }, + { + "name": "dwInfoLength", + "type": "DWORD" + }, + { + "name": "lpEnclaveError", + "type": "LPDWORD" + } + ], + "LoadEnclaveImageW": [ + { + "name": "lpEnclaveAddress", + "type": "LPVOID" + }, + { + "name": "lpImageName", + "type": "LPCWSTR" + } + ], + "CallEnclave": [ + { + "name": "lpRoutine", + "type": "LPENCLAVE_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "fWaitForThread", + "type": "BOOL" + }, + { + "name": "lpReturnValue", + "type": "LPVOID" + } + ], + "TerminateEnclave": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "fWait", + "type": "BOOL" + } + ], + "DeleteEnclave": [ + { + "name": "lpAddress", + "type": "LPVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/errhandlingapi.json b/qiling/extensions/windows_sdk/errhandlingapi.json new file mode 100644 index 000000000..d1191ee63 --- /dev/null +++ b/qiling/extensions/windows_sdk/errhandlingapi.json @@ -0,0 +1,142 @@ +{ + "RaiseException": [ + { + "name": "dwExceptionCode", + "type": "DWORD" + }, + { + "name": "dwExceptionFlags", + "type": "DWORD" + }, + { + "name": "nNumberOfArguments", + "type": "DWORD" + }, + { + "name": "lpArguments", + "type": "ULONG_PTR" + } + ], + "UnhandledExceptionFilter": [ + { + "name": "ExceptionInfo", + "type": { + "name": "_EXCEPTION_POINTERS", + "data_type": "Struct", + "elements": [] + } + } + ], + "SetUnhandledExceptionFilter": [ + { + "name": "lpTopLevelExceptionFilter", + "type": "LPTOP_LEVEL_EXCEPTION_FILTER" + } + ], + "GetLastError": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetLastError": [ + { + "name": "dwErrCode", + "type": "DWORD" + } + ], + "GetErrorMode": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetErrorMode": [ + { + "name": "uMode", + "type": "UINT" + } + ], + "AddVectoredExceptionHandler": [ + { + "name": "First", + "type": "ULONG" + }, + { + "name": "Handler", + "type": "PVECTORED_EXCEPTION_HANDLER" + } + ], + "RemoveVectoredExceptionHandler": [ + { + "name": "Handle", + "type": "PVOID" + } + ], + "AddVectoredContinueHandler": [ + { + "name": "First", + "type": "ULONG" + }, + { + "name": "Handler", + "type": "PVECTORED_EXCEPTION_HANDLER" + } + ], + "RemoveVectoredContinueHandler": [ + { + "name": "Handle", + "type": "PVOID" + } + ], + "RaiseFailFastException": [ + { + "name": "pExceptionRecord", + "type": "PEXCEPTION_RECORD" + }, + { + "name": "pContextRecord", + "type": "PCONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "FatalAppExitA": [ + { + "name": "uAction", + "type": "UINT" + }, + { + "name": "lpMessageText", + "type": "LPCSTR" + } + ], + "FatalAppExitW": [ + { + "name": "uAction", + "type": "UINT" + }, + { + "name": "lpMessageText", + "type": "LPCWSTR" + } + ], + "GetThreadErrorMode": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadErrorMode": [ + { + "name": "dwNewMode", + "type": "DWORD" + }, + { + "name": "lpOldMode", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/errorrep.json b/qiling/extensions/windows_sdk/errorrep.json new file mode 100644 index 000000000..adf279e14 --- /dev/null +++ b/qiling/extensions/windows_sdk/errorrep.json @@ -0,0 +1,34 @@ +{ + "ReportFault": [ + { + "name": "pep", + "type": "LPEXCEPTION_POINTERS" + }, + { + "name": "dwOpt", + "type": "DWORD" + } + ], + "AddERExcludedApplicationA": [ + { + "name": "szApplication", + "type": "LPCSTR" + } + ], + "AddERExcludedApplicationW": [ + { + "name": "wszApplication", + "type": "LPCWSTR" + } + ], + "WerReportHang": [ + { + "name": "hwndHungApp", + "type": "HWND" + }, + { + "name": "pwzHungApplicationName", + "type": "PCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/evcoll.json b/qiling/extensions/windows_sdk/evcoll.json new file mode 100644 index 000000000..b723cef54 --- /dev/null +++ b/qiling/extensions/windows_sdk/evcoll.json @@ -0,0 +1,236 @@ +{ + "EcOpenSubscriptionEnum": [ + { + "name": "Flags", + "type": "DWORD" + } + ], + "EcEnumNextSubscription": [ + { + "name": "SubscriptionEnum", + "type": "EC_HANDLE" + }, + { + "name": "SubscriptionNameBufferSize", + "type": "DWORD" + }, + { + "name": "SubscriptionNameBuffer", + "type": "LPWSTR" + }, + { + "name": "SubscriptionNameBufferUsed", + "type": "PDWORD" + } + ], + "EcOpenSubscription": [ + { + "name": "SubscriptionName", + "type": "LPCWSTR" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EcSetSubscriptionProperty": [ + { + "name": "Subscription", + "type": "EC_HANDLE" + }, + { + "name": "PropertyId", + "type": "EC_SUBSCRIPTION_PROPERTY_ID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValue", + "type": "PEC_VARIANT" + } + ], + "EcGetSubscriptionProperty": [ + { + "name": "Subscription", + "type": "EC_HANDLE" + }, + { + "name": "PropertyId", + "type": "EC_SUBSCRIPTION_PROPERTY_ID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEC_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ], + "EcSaveSubscription": [ + { + "name": "Subscription", + "type": "EC_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EcDeleteSubscription": [ + { + "name": "SubscriptionName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EcGetObjectArraySize": [ + { + "name": "ObjectArray", + "type": "EC_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "ObjectArraySize", + "type": "PDWORD" + } + ], + "EcSetObjectArrayProperty": [ + { + "name": "ObjectArray", + "type": "EC_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "PropertyId", + "type": "EC_SUBSCRIPTION_PROPERTY_ID" + }, + { + "name": "ArrayIndex", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValue", + "type": "PEC_VARIANT" + } + ], + "EcGetObjectArrayProperty": [ + { + "name": "ObjectArray", + "type": "EC_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "PropertyId", + "type": "EC_SUBSCRIPTION_PROPERTY_ID" + }, + { + "name": "ArrayIndex", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEC_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ], + "EcInsertObjectArrayElement": [ + { + "name": "ObjectArray", + "type": "EC_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "ArrayIndex", + "type": "DWORD" + } + ], + "EcRemoveObjectArrayElement": [ + { + "name": "ObjectArray", + "type": "EC_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "ArrayIndex", + "type": "DWORD" + } + ], + "EcGetSubscriptionRunTimeStatus": [ + { + "name": "SubscriptionName", + "type": "LPCWSTR" + }, + { + "name": "StatusInfoId", + "type": "EC_SUBSCRIPTION_RUNTIME_STATUS_INFO_ID" + }, + { + "name": "EventSourceName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "StatusValueBufferSize", + "type": "DWORD" + }, + { + "name": "StatusValueBuffer", + "type": "PEC_VARIANT" + }, + { + "name": "StatusValueBufferUsed", + "type": "PDWORD" + } + ], + "EcRetrySubscription": [ + { + "name": "SubscriptionName", + "type": "LPCWSTR" + }, + { + "name": "EventSourceName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EcClose": [ + { + "name": "Object", + "type": "EC_HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/evntcons.json b/qiling/extensions/windows_sdk/evntcons.json new file mode 100644 index 000000000..357d16306 --- /dev/null +++ b/qiling/extensions/windows_sdk/evntcons.json @@ -0,0 +1,44 @@ +{ + "EventAccessControl": [ + { + "name": "Guid", + "type": "LPGUID" + }, + { + "name": "Operation", + "type": "ULONG" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Rights", + "type": "ULONG" + }, + { + "name": "AllowOrDeny", + "type": "BOOLEAN" + } + ], + "EventAccessQuery": [ + { + "name": "Guid", + "type": "LPGUID" + }, + { + "name": "Buffer", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "BufferSize", + "type": "PULONG" + } + ], + "EventAccessRemove": [ + { + "name": "Guid", + "type": "LPGUID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/evntprov.json b/qiling/extensions/windows_sdk/evntprov.json new file mode 100644 index 000000000..35981282d --- /dev/null +++ b/qiling/extensions/windows_sdk/evntprov.json @@ -0,0 +1,174 @@ +{ + "EventRegister": [ + { + "name": "ProviderId", + "type": "LPCGUID" + }, + { + "name": "EnableCallback", + "type": "PENABLECALLBACK" + }, + { + "name": "CallbackContext", + "type": "PVOID" + }, + { + "name": "RegHandle", + "type": "PREGHANDLE" + } + ], + "EventUnregister": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + } + ], + "EventSetInformation": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "InformationClass", + "type": "EVENT_INFO_CLASS" + }, + { + "name": "EventInformation", + "type": "PVOID" + }, + { + "name": "InformationLength", + "type": "ULONG" + } + ], + "EventEnabled": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + } + ], + "EventProviderEnabled": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "Level", + "type": "UCHAR" + }, + { + "name": "Keyword", + "type": "ULONGLONG" + } + ], + "EventWrite": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + }, + { + "name": "UserDataCount", + "type": "ULONG" + }, + { + "name": "UserData", + "type": "PEVENT_DATA_DESCRIPTOR" + } + ], + "EventWriteTransfer": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + }, + { + "name": "ActivityId", + "type": "LPCGUID" + }, + { + "name": "RelatedActivityId", + "type": "LPCGUID" + }, + { + "name": "UserDataCount", + "type": "ULONG" + }, + { + "name": "UserData", + "type": "PEVENT_DATA_DESCRIPTOR" + } + ], + "EventWriteEx": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + }, + { + "name": "Filter", + "type": "ULONG64" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "ActivityId", + "type": "LPCGUID" + }, + { + "name": "RelatedActivityId", + "type": "LPCGUID" + }, + { + "name": "UserDataCount", + "type": "ULONG" + }, + { + "name": "UserData", + "type": "PEVENT_DATA_DESCRIPTOR" + } + ], + "EventWriteString": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "Level", + "type": "UCHAR" + }, + { + "name": "Keyword", + "type": "ULONGLONG" + }, + { + "name": "String", + "type": "PCWSTR" + } + ], + "EventActivityIdControl": [ + { + "name": "ControlCode", + "type": "ULONG" + }, + { + "name": "ActivityId", + "type": "LPGUID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/evntrace.json b/qiling/extensions/windows_sdk/evntrace.json new file mode 100644 index 000000000..ddcf8ea2a --- /dev/null +++ b/qiling/extensions/windows_sdk/evntrace.json @@ -0,0 +1,632 @@ +{ + "StartTraceW": [ + { + "name": "TraceHandle", + "type": "PTRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "StartTraceA": [ + { + "name": "TraceHandle", + "type": "PTRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "StopTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "StopTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "QueryTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "QueryTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "UpdateTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "UpdateTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "FlushTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "FlushTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "ControlTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + }, + { + "name": "ControlCode", + "type": "ULONG" + } + ], + "ControlTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + }, + { + "name": "ControlCode", + "type": "ULONG" + } + ], + "QueryAllTracesW": [ + { + "name": "PropertyArray", + "type": "PEVENT_TRACE_PROPERTIES" + }, + { + "name": "PropertyArrayCount", + "type": "ULONG" + }, + { + "name": "LoggerCount", + "type": "PULONG" + } + ], + "QueryAllTracesA": [ + { + "name": "PropertyArray", + "type": "PEVENT_TRACE_PROPERTIES" + }, + { + "name": "PropertyArrayCount", + "type": "ULONG" + }, + { + "name": "LoggerCount", + "type": "PULONG" + } + ], + "EnableTrace": [ + { + "name": "Enable", + "type": "ULONG" + }, + { + "name": "EnableFlag", + "type": "ULONG" + }, + { + "name": "EnableLevel", + "type": "ULONG" + }, + { + "name": "ControlGuid", + "type": "LPCGUID" + }, + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + } + ], + "EnableTraceEx": [ + { + "name": "ProviderId", + "type": "LPCGUID" + }, + { + "name": "SourceId", + "type": "LPCGUID" + }, + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "IsEnabled", + "type": "ULONG" + }, + { + "name": "Level", + "type": "UCHAR" + }, + { + "name": "MatchAnyKeyword", + "type": "ULONGLONG" + }, + { + "name": "MatchAllKeyword", + "type": "ULONGLONG" + }, + { + "name": "EnableProperty", + "type": "ULONG" + }, + { + "name": "EnableFilterDesc", + "type": "PEVENT_FILTER_DESCRIPTOR" + } + ], + "EnableTraceEx2": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "ProviderId", + "type": "LPCGUID" + }, + { + "name": "ControlCode", + "type": "ULONG" + }, + { + "name": "Level", + "type": "UCHAR" + }, + { + "name": "MatchAnyKeyword", + "type": "ULONGLONG" + }, + { + "name": "MatchAllKeyword", + "type": "ULONGLONG" + }, + { + "name": "Timeout", + "type": "ULONG" + }, + { + "name": "EnableParameters", + "type": "PENABLE_TRACE_PARAMETERS" + } + ], + "EnumerateTraceGuidsEx": [ + { + "name": "TraceQueryInfoClass", + "type": "TRACE_QUERY_INFO_CLASS" + }, + { + "name": "InBuffer", + "type": "PVOID" + }, + { + "name": "InBufferSize", + "type": "ULONG" + }, + { + "name": "OutBuffer", + "type": "PVOID" + }, + { + "name": "OutBufferSize", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "TraceSetInformation": [ + { + "name": "SessionHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InformationClass", + "type": "TRACE_INFO_CLASS" + }, + { + "name": "TraceInformation", + "type": "PVOID" + }, + { + "name": "InformationLength", + "type": "ULONG" + } + ], + "TraceQueryInformation": [ + { + "name": "SessionHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InformationClass", + "type": "TRACE_INFO_CLASS" + }, + { + "name": "TraceInformation", + "type": "PVOID" + }, + { + "name": "InformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "CreateTraceInstanceId": [ + { + "name": "RegHandle", + "type": "HANDLE" + }, + { + "name": "InstInfo", + "type": "PEVENT_INSTANCE_INFO" + } + ], + "TraceEvent": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "EventTrace", + "type": "PEVENT_TRACE_HEADER" + } + ], + "TraceEventInstance": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "EventTrace", + "type": "PEVENT_INSTANCE_HEADER" + }, + { + "name": "InstInfo", + "type": "PEVENT_INSTANCE_INFO" + }, + { + "name": "ParentInstInfo", + "type": "PEVENT_INSTANCE_INFO" + } + ], + "RegisterTraceGuidsW": [ + { + "name": "RequestAddress", + "type": "WMIDPREQUEST" + }, + { + "name": "RequestContext", + "type": "PVOID" + }, + { + "name": "ControlGuid", + "type": "LPCGUID" + }, + { + "name": "GuidCount", + "type": "ULONG" + }, + { + "name": "TraceGuidReg", + "type": "PTRACE_GUID_REGISTRATION" + }, + { + "name": "MofImagePath", + "type": "LPCWSTR" + }, + { + "name": "MofResourceName", + "type": "LPCWSTR" + }, + { + "name": "RegistrationHandle", + "type": "PTRACEHANDLE" + } + ], + "RegisterTraceGuidsA": [ + { + "name": "RequestAddress", + "type": "WMIDPREQUEST" + }, + { + "name": "RequestContext", + "type": "PVOID" + }, + { + "name": "ControlGuid", + "type": "LPCGUID" + }, + { + "name": "GuidCount", + "type": "ULONG" + }, + { + "name": "TraceGuidReg", + "type": "PTRACE_GUID_REGISTRATION" + }, + { + "name": "MofImagePath", + "type": "LPCSTR" + }, + { + "name": "MofResourceName", + "type": "LPCSTR" + }, + { + "name": "RegistrationHandle", + "type": "PTRACEHANDLE" + } + ], + "EnumerateTraceGuids": [ + { + "name": "GuidPropertiesArray", + "type": "PTRACE_GUID_PROPERTIES" + }, + { + "name": "PropertyArrayCount", + "type": "ULONG" + }, + { + "name": "GuidCount", + "type": "PULONG" + } + ], + "UnregisterTraceGuids": [ + { + "name": "RegistrationHandle", + "type": "TRACEHANDLE" + } + ], + "GetTraceLoggerHandle": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "GetTraceEnableLevel": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + } + ], + "GetTraceEnableFlags": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + } + ], + "OpenTraceW": [ + { + "name": "Logfile", + "type": "PEVENT_TRACE_LOGFILEW" + } + ], + "ProcessTrace": [ + { + "name": "HandleArray", + "type": "PTRACEHANDLE" + }, + { + "name": "HandleCount", + "type": "ULONG" + }, + { + "name": "StartTime", + "type": "LPFILETIME" + }, + { + "name": "EndTime", + "type": "LPFILETIME" + } + ], + "CloseTrace": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + } + ], + "QueryTraceProcessingHandle": [ + { + "name": "ProcessingHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InformationClass", + "type": "ETW_PROCESS_HANDLE_INFO_TYPE" + }, + { + "name": "InBuffer", + "type": "PVOID" + }, + { + "name": "InBufferSize", + "type": "ULONG" + }, + { + "name": "OutBuffer", + "type": "PVOID" + }, + { + "name": "OutBufferSize", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "OpenTraceA": [ + { + "name": "Logfile", + "type": "PEVENT_TRACE_LOGFILEA" + } + ], + "SetTraceCallback": [ + { + "name": "pGuid", + "type": "LPCGUID" + }, + { + "name": "EventCallback", + "type": "PEVENT_CALLBACK" + } + ], + "RemoveTraceCallback": [ + { + "name": "pGuid", + "type": "LPCGUID" + } + ], + "TraceMessage": [ + { + "name": "LoggerHandle", + "type": "TRACEHANDLE" + }, + { + "name": "MessageFlags", + "type": "ULONG" + }, + { + "name": "MessageGuid", + "type": "LPCGUID" + }, + { + "name": "MessageNumber", + "type": "USHORT" + } + ], + "TraceMessageVa": [ + { + "name": "LoggerHandle", + "type": "TRACEHANDLE" + }, + { + "name": "MessageFlags", + "type": "ULONG" + }, + { + "name": "MessageGuid", + "type": "LPCGUID" + }, + { + "name": "MessageNumber", + "type": "USHORT" + }, + { + "name": "MessageArgList", + "type": "va_list" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/expandedresources.json b/qiling/extensions/windows_sdk/expandedresources.json new file mode 100644 index 000000000..8b220daf8 --- /dev/null +++ b/qiling/extensions/windows_sdk/expandedresources.json @@ -0,0 +1,14 @@ +{ + "HasExpandedResources": [ + { + "name": "hasExpandedResources", + "type": "BOOL" + } + ], + "GetExpandedResourceExclusiveCpuCount": [ + { + "name": "exclusiveCpuCount", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/fci.json b/qiling/extensions/windows_sdk/fci.json new file mode 100644 index 000000000..2504c6aa2 --- /dev/null +++ b/qiling/extensions/windows_sdk/fci.json @@ -0,0 +1,128 @@ +{ + "FCICreate": [ + { + "name": "perf", + "type": "PERF" + }, + { + "name": "pfnfcifp", + "type": "PFNFCIFILEPLACED" + }, + { + "name": "pfna", + "type": "PFNFCIALLOC" + }, + { + "name": "pfnf", + "type": "PFNFCIFREE" + }, + { + "name": "pfnopen", + "type": "PFNFCIOPEN" + }, + { + "name": "pfnread", + "type": "PFNFCIREAD" + }, + { + "name": "pfnwrite", + "type": "PFNFCIWRITE" + }, + { + "name": "pfnclose", + "type": "PFNFCICLOSE" + }, + { + "name": "pfnseek", + "type": "PFNFCISEEK" + }, + { + "name": "pfndelete", + "type": "PFNFCIDELETE" + }, + { + "name": "pfnfcigtf", + "type": "PFNFCIGETTEMPFILE" + }, + { + "name": "pccab", + "type": "PCCAB" + }, + { + "name": "pv", + "type": "void" + } + ], + "FCIAddFile": [ + { + "name": "hfci", + "type": "HFCI" + }, + { + "name": "pszSourceFile", + "type": "LPSTR" + }, + { + "name": "pszFileName", + "type": "LPSTR" + }, + { + "name": "fExecute", + "type": "BOOL" + }, + { + "name": "pfnfcignc", + "type": "PFNFCIGETNEXTCABINET" + }, + { + "name": "pfnfcis", + "type": "PFNFCISTATUS" + }, + { + "name": "pfnfcigoi", + "type": "PFNFCIGETOPENINFO" + }, + { + "name": "typeCompress", + "type": "TCOMP" + } + ], + "FCIFlushCabinet": [ + { + "name": "hfci", + "type": "HFCI" + }, + { + "name": "fGetNextCab", + "type": "BOOL" + }, + { + "name": "pfnfcignc", + "type": "PFNFCIGETNEXTCABINET" + }, + { + "name": "pfnfcis", + "type": "PFNFCISTATUS" + } + ], + "FCIFlushFolder": [ + { + "name": "hfci", + "type": "HFCI" + }, + { + "name": "pfnfcignc", + "type": "PFNFCIGETNEXTCABINET" + }, + { + "name": "pfnfcis", + "type": "PFNFCISTATUS" + } + ], + "FCIDestroy": [ + { + "name": "hfci", + "type": "HFCI" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/fdi.json b/qiling/extensions/windows_sdk/fdi.json new file mode 100644 index 000000000..0b9d2d256 --- /dev/null +++ b/qiling/extensions/windows_sdk/fdi.json @@ -0,0 +1,104 @@ +{ + "FDICreate": [ + { + "name": "pfnalloc", + "type": "PFNALLOC" + }, + { + "name": "pfnfree", + "type": "PFNFREE" + }, + { + "name": "pfnopen", + "type": "PFNOPEN" + }, + { + "name": "pfnread", + "type": "PFNREAD" + }, + { + "name": "pfnwrite", + "type": "PFNWRITE" + }, + { + "name": "pfnclose", + "type": "PFNCLOSE" + }, + { + "name": "pfnseek", + "type": "PFNSEEK" + }, + { + "name": "cpuType", + "type": "int" + }, + { + "name": "perf", + "type": "PERF" + } + ], + "FDIIsCabinet": [ + { + "name": "hfdi", + "type": "HFDI" + }, + { + "name": "hf", + "type": "INT_PTR" + }, + { + "name": "pfdici", + "type": "PFDICABINETINFO" + } + ], + "FDICopy": [ + { + "name": "hfdi", + "type": "HFDI" + }, + { + "name": "pszCabinet", + "type": "LPSTR" + }, + { + "name": "pszCabPath", + "type": "LPSTR" + }, + { + "name": "flags", + "type": "int" + }, + { + "name": "pfnfdin", + "type": "PFNFDINOTIFY" + }, + { + "name": "pfnfdid", + "type": "PFNFDIDECRYPT" + }, + { + "name": "pvUser", + "type": "void" + } + ], + "FDIDestroy": [ + { + "name": "hfdi", + "type": "HFDI" + } + ], + "FDITruncateCabinet": [ + { + "name": "hfdi", + "type": "HFDI" + }, + { + "name": "pszCabinetName", + "type": "LPSTR" + }, + { + "name": "iFolderToDelete", + "type": "USHORT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/featurestagingapi.json b/qiling/extensions/windows_sdk/featurestagingapi.json new file mode 100644 index 000000000..1fa365a36 --- /dev/null +++ b/qiling/extensions/windows_sdk/featurestagingapi.json @@ -0,0 +1,78 @@ +{ + "GetFeatureEnabledState": [ + { + "name": "featureId", + "type": "UINT32" + }, + { + "name": "changeTime", + "type": "FEATURE_CHANGE_TIME" + } + ], + "RecordFeatureUsage": [ + { + "name": "featureId", + "type": "UINT32" + }, + { + "name": "kind", + "type": "UINT32" + }, + { + "name": "addend", + "type": "UINT32" + }, + { + "name": "originName", + "type": "PCSTR" + } + ], + "RecordFeatureError": [ + { + "name": "featureId", + "type": "UINT32" + }, + { + "name": "error", + "type": "FEATURE_ERROR" + } + ], + "SubscribeFeatureStateChangeNotification": [ + { + "name": "subscription", + "type": "FEATURE_STATE_CHANGE_SUBSCRIPTION" + }, + { + "name": "callback", + "type": "PFEATURE_STATE_CHANGE_CALLBACK" + }, + { + "name": "context", + "type": "void" + } + ], + "UnsubscribeFeatureStateChangeNotification": [ + { + "name": "subscription", + "type": "FEATURE_STATE_CHANGE_SUBSCRIPTION" + } + ], + "GetFeatureVariant": [ + { + "name": "featureId", + "type": "UINT32" + }, + { + "name": "changeTime", + "type": "FEATURE_CHANGE_TIME" + }, + { + "name": "payloadId", + "type": "UINT32" + }, + { + "name": "hasNotification", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/fibersapi.json b/qiling/extensions/windows_sdk/fibersapi.json new file mode 100644 index 000000000..e15bbf447 --- /dev/null +++ b/qiling/extensions/windows_sdk/fibersapi.json @@ -0,0 +1,36 @@ +{ + "FlsAlloc": [ + { + "name": "lpCallback", + "type": "PFLS_CALLBACK_FUNCTION" + } + ], + "FlsGetValue": [ + { + "name": "dwFlsIndex", + "type": "DWORD" + } + ], + "FlsSetValue": [ + { + "name": "dwFlsIndex", + "type": "DWORD" + }, + { + "name": "lpFlsData", + "type": "PVOID" + } + ], + "FlsFree": [ + { + "name": "dwFlsIndex", + "type": "DWORD" + } + ], + "IsThreadAFiber": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/fileapi.json b/qiling/extensions/windows_sdk/fileapi.json new file mode 100644 index 000000000..f899dd3b1 --- /dev/null +++ b/qiling/extensions/windows_sdk/fileapi.json @@ -0,0 +1,1134 @@ +{ + "CompareFileTime": [ + { + "name": "lpFileTime1", + "type": "FILETIME" + }, + { + "name": "lpFileTime2", + "type": "FILETIME" + } + ], + "CreateFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "hTemplateFile", + "type": "HANDLE" + } + ], + "CreateFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "hTemplateFile", + "type": "HANDLE" + } + ], + "FileTimeToLocalFileTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpLocalFileTime", + "type": "LPFILETIME" + } + ], + "FindClose": [ + { + "name": "hFindFile", + "type": "HANDLE" + } + ], + "FindCloseChangeNotification": [ + { + "name": "hChangeHandle", + "type": "HANDLE" + } + ], + "FindFirstChangeNotificationA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + } + ], + "FindFirstChangeNotificationW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + } + ], + "FindFirstFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAA" + } + ], + "FindFirstFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAW" + } + ], + "FindFirstFileExA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "fInfoLevelId", + "type": "FINDEX_INFO_LEVELS" + }, + { + "name": "lpFindFileData", + "type": "LPVOID" + }, + { + "name": "fSearchOp", + "type": "FINDEX_SEARCH_OPS" + }, + { + "name": "lpSearchFilter", + "type": "LPVOID" + }, + { + "name": "dwAdditionalFlags", + "type": "DWORD" + } + ], + "FindFirstFileExW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "fInfoLevelId", + "type": "FINDEX_INFO_LEVELS" + }, + { + "name": "lpFindFileData", + "type": "LPVOID" + }, + { + "name": "fSearchOp", + "type": "FINDEX_SEARCH_OPS" + }, + { + "name": "lpSearchFilter", + "type": "LPVOID" + }, + { + "name": "dwAdditionalFlags", + "type": "DWORD" + } + ], + "FindNextChangeNotification": [ + { + "name": "hChangeHandle", + "type": "HANDLE" + } + ], + "FindNextFileA": [ + { + "name": "hFindFile", + "type": "HANDLE" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAA" + } + ], + "FindNextFileW": [ + { + "name": "hFindFile", + "type": "HANDLE" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAW" + } + ], + "FindVolumeClose": [ + { + "name": "hFindVolume", + "type": "HANDLE" + } + ], + "FlushFileBuffers": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "GetDiskFreeSpaceA": [ + { + "name": "lpRootPathName", + "type": "LPCSTR" + }, + { + "name": "lpSectorsPerCluster", + "type": "LPDWORD" + }, + { + "name": "lpBytesPerSector", + "type": "LPDWORD" + }, + { + "name": "lpNumberOfFreeClusters", + "type": "LPDWORD" + }, + { + "name": "lpTotalNumberOfClusters", + "type": "LPDWORD" + } + ], + "GetDiskFreeSpaceW": [ + { + "name": "lpRootPathName", + "type": "LPCWSTR" + }, + { + "name": "lpSectorsPerCluster", + "type": "LPDWORD" + }, + { + "name": "lpBytesPerSector", + "type": "LPDWORD" + }, + { + "name": "lpNumberOfFreeClusters", + "type": "LPDWORD" + }, + { + "name": "lpTotalNumberOfClusters", + "type": "LPDWORD" + } + ], + "GetDiskFreeSpaceExA": [ + { + "name": "lpDirectoryName", + "type": "LPCSTR" + }, + { + "name": "lpFreeBytesAvailableToCaller", + "type": "PULARGE_INTEGER" + }, + { + "name": "lpTotalNumberOfBytes", + "type": "PULARGE_INTEGER" + }, + { + "name": "lpTotalNumberOfFreeBytes", + "type": "PULARGE_INTEGER" + } + ], + "GetDiskFreeSpaceExW": [ + { + "name": "lpDirectoryName", + "type": "LPCWSTR" + }, + { + "name": "lpFreeBytesAvailableToCaller", + "type": "PULARGE_INTEGER" + }, + { + "name": "lpTotalNumberOfBytes", + "type": "PULARGE_INTEGER" + }, + { + "name": "lpTotalNumberOfFreeBytes", + "type": "PULARGE_INTEGER" + } + ], + "GetDriveTypeA": [ + { + "name": "lpRootPathName", + "type": "LPCSTR" + } + ], + "GetDriveTypeW": [ + { + "name": "lpRootPathName", + "type": "LPCWSTR" + } + ], + "GetFileAttributesA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetFileAttributesW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetFileAttributesExA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "fInfoLevelId", + "type": "GET_FILEEX_INFO_LEVELS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + } + ], + "GetFileAttributesExW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "fInfoLevelId", + "type": "GET_FILEEX_INFO_LEVELS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + } + ], + "GetFileInformationByHandle": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileInformation", + "type": "LPBY_HANDLE_FILE_INFORMATION" + } + ], + "GetFileSize": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + } + ], + "GetFileSizeEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileSize", + "type": "PLARGE_INTEGER" + } + ], + "GetFileType": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "GetFinalPathNameByHandleA": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpszFilePath", + "type": "LPSTR" + }, + { + "name": "cchFilePath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFinalPathNameByHandleW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpszFilePath", + "type": "LPWSTR" + }, + { + "name": "cchFilePath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFileTime": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCreationTime", + "type": "LPFILETIME" + }, + { + "name": "lpLastAccessTime", + "type": "LPFILETIME" + }, + { + "name": "lpLastWriteTime", + "type": "LPFILETIME" + } + ], + "GetFullPathNameW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "lpFilePart", + "type": "LPWSTR" + } + ], + "GetFullPathNameA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "lpFilePart", + "type": "LPSTR" + } + ], + "GetLogicalDrives": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetLongPathNameA": [ + { + "name": "lpszShortPath", + "type": "LPCSTR" + }, + { + "name": "lpszLongPath", + "type": "LPSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + } + ], + "GetLongPathNameW": [ + { + "name": "lpszShortPath", + "type": "LPCWSTR" + }, + { + "name": "lpszLongPath", + "type": "LPWSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + } + ], + "GetVolumeInformationByHandleW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpVolumeNameBuffer", + "type": "LPWSTR" + }, + { + "name": "nVolumeNameSize", + "type": "DWORD" + }, + { + "name": "lpVolumeSerialNumber", + "type": "LPDWORD" + }, + { + "name": "lpMaximumComponentLength", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemFlags", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemNameBuffer", + "type": "LPWSTR" + }, + { + "name": "nFileSystemNameSize", + "type": "DWORD" + } + ], + "GetVolumeInformationW": [ + { + "name": "lpRootPathName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeNameBuffer", + "type": "LPWSTR" + }, + { + "name": "nVolumeNameSize", + "type": "DWORD" + }, + { + "name": "lpVolumeSerialNumber", + "type": "LPDWORD" + }, + { + "name": "lpMaximumComponentLength", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemFlags", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemNameBuffer", + "type": "LPWSTR" + }, + { + "name": "nFileSystemNameSize", + "type": "DWORD" + } + ], + "LocalFileTimeToFileTime": [ + { + "name": "lpLocalFileTime", + "type": "FILETIME" + }, + { + "name": "lpFileTime", + "type": "LPFILETIME" + } + ], + "LockFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToLockLow", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToLockHigh", + "type": "DWORD" + } + ], + "LockFileEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToLockLow", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToLockHigh", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReadFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesRead", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReadFileEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "ReadFileScatter": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "aSegmentArray", + "type": "FILE_SEGMENT_ELEMENT" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "RemoveDirectoryA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + } + ], + "RemoveDirectoryW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + } + ], + "SetEndOfFile": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SetFileAttributesA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + } + ], + "SetFileAttributesW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + } + ], + "SetFileInformationByHandle": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "FileInformationClass", + "type": "FILE_INFO_BY_HANDLE_CLASS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + } + ], + "SetFilePointer": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lDistanceToMove", + "type": "LONG" + }, + { + "name": "lpDistanceToMoveHigh", + "type": "PLONG" + }, + { + "name": "dwMoveMethod", + "type": "DWORD" + } + ], + "SetFilePointerEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "liDistanceToMove", + "type": "LARGE_INTEGER" + }, + { + "name": "lpNewFilePointer", + "type": "PLARGE_INTEGER" + }, + { + "name": "dwMoveMethod", + "type": "DWORD" + } + ], + "SetFileTime": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCreationTime", + "type": "FILETIME" + }, + { + "name": "lpLastAccessTime", + "type": "FILETIME" + }, + { + "name": "lpLastWriteTime", + "type": "FILETIME" + } + ], + "SetFileValidData": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ValidDataLength", + "type": "LONGLONG" + } + ], + "UnlockFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToUnlockLow", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToUnlockHigh", + "type": "DWORD" + } + ], + "UnlockFileEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToUnlockLow", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToUnlockHigh", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "WriteFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "WriteFileEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WriteFileGather": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "aSegmentArray", + "type": "FILE_SEGMENT_ELEMENT" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetTempPathW": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + } + ], + "CreateFile2": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "pCreateExParams", + "type": "LPCREATEFILE2_EXTENDED_PARAMETERS" + } + ], + "SetFileIoOverlappedRange": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "OverlappedRangeStart", + "type": "PUCHAR" + }, + { + "name": "Length", + "type": "ULONG" + } + ], + "GetCompressedFileSizeA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + } + ], + "GetCompressedFileSizeW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + } + ], + "FindFirstStreamW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "InfoLevel", + "type": "STREAM_INFO_LEVELS" + }, + { + "name": "lpFindStreamData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "FindNextStreamW": [ + { + "name": "hFindStream", + "type": "HANDLE" + }, + { + "name": "lpFindStreamData", + "type": "LPVOID" + } + ], + "AreFileApisANSI": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetTempPathA": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + } + ], + "FindFirstFileNameW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "StringLength", + "type": "LPDWORD" + }, + { + "name": "LinkName", + "type": "PWSTR" + } + ], + "FindNextFileNameW": [ + { + "name": "hFindStream", + "type": "HANDLE" + }, + { + "name": "StringLength", + "type": "LPDWORD" + }, + { + "name": "LinkName", + "type": "PWSTR" + } + ], + "GetVolumeInformationA": [ + { + "name": "lpRootPathName", + "type": "LPCSTR" + }, + { + "name": "lpVolumeNameBuffer", + "type": "LPSTR" + }, + { + "name": "nVolumeNameSize", + "type": "DWORD" + }, + { + "name": "lpVolumeSerialNumber", + "type": "LPDWORD" + }, + { + "name": "lpMaximumComponentLength", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemFlags", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemNameBuffer", + "type": "LPSTR" + }, + { + "name": "nFileSystemNameSize", + "type": "DWORD" + } + ], + "SetFileApisToOEM": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetFileApisToANSI": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/fltuser.json b/qiling/extensions/windows_sdk/fltuser.json new file mode 100644 index 000000000..a1a0e4c5a --- /dev/null +++ b/qiling/extensions/windows_sdk/fltuser.json @@ -0,0 +1,466 @@ +{ + "FilterLoad": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + } + ], + "FilterUnload": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + } + ], + "FilterCreate": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + }, + { + "name": "hFilter", + "type": "HFILTER" + } + ], + "FilterClose": [ + { + "name": "hFilter", + "type": "HFILTER" + } + ], + "FilterInstanceCreate": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpInstanceName", + "type": "LPCWSTR" + }, + { + "name": "hInstance", + "type": "HFILTER_INSTANCE" + } + ], + "FilterInstanceClose": [ + { + "name": "hInstance", + "type": "HFILTER_INSTANCE" + } + ], + "FilterAttach": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpInstanceName", + "type": "LPCWSTR" + }, + { + "name": "dwCreatedInstanceNameLength", + "type": "DWORD" + }, + { + "name": "lpCreatedInstanceName", + "type": "LPWSTR" + } + ], + "FilterAttachAtAltitude": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpAltitude", + "type": "LPCWSTR" + }, + { + "name": "lpInstanceName", + "type": "LPCWSTR" + }, + { + "name": "dwCreatedInstanceNameLength", + "type": "DWORD" + }, + { + "name": "lpCreatedInstanceName", + "type": "LPWSTR" + } + ], + "FilterDetach": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpInstanceName", + "type": "LPCWSTR" + } + ], + "FilterFindFirst": [ + { + "name": "dwInformationClass", + "type": "FILTER_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpFilterFind", + "type": "LPHANDLE" + } + ], + "FilterFindNext": [ + { + "name": "hFilterFind", + "type": "HANDLE" + }, + { + "name": "dwInformationClass", + "type": "FILTER_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterFindClose": [ + { + "name": "hFilterFind", + "type": "HANDLE" + } + ], + "FilterVolumeFindFirst": [ + { + "name": "dwInformationClass", + "type": "FILTER_VOLUME_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpVolumeFind", + "type": "PHANDLE" + } + ], + "FilterVolumeFindNext": [ + { + "name": "hVolumeFind", + "type": "HANDLE" + }, + { + "name": "dwInformationClass", + "type": "FILTER_VOLUME_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterVolumeFindClose": [ + { + "name": "hVolumeFind", + "type": "HANDLE" + } + ], + "FilterInstanceFindFirst": [ + { + "name": "lpFilterName", + "type": "LPCWSTR" + }, + { + "name": "dwInformationClass", + "type": "INSTANCE_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpFilterInstanceFind", + "type": "LPHANDLE" + } + ], + "FilterInstanceFindNext": [ + { + "name": "hFilterInstanceFind", + "type": "HANDLE" + }, + { + "name": "dwInformationClass", + "type": "INSTANCE_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterInstanceFindClose": [ + { + "name": "hFilterInstanceFind", + "type": "HANDLE" + } + ], + "FilterVolumeInstanceFindFirst": [ + { + "name": "lpVolumeName", + "type": "LPCWSTR" + }, + { + "name": "dwInformationClass", + "type": "INSTANCE_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpVolumeInstanceFind", + "type": "LPHANDLE" + } + ], + "FilterVolumeInstanceFindNext": [ + { + "name": "hVolumeInstanceFind", + "type": "HANDLE" + }, + { + "name": "dwInformationClass", + "type": "INSTANCE_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterVolumeInstanceFindClose": [ + { + "name": "hVolumeInstanceFind", + "type": "HANDLE" + } + ], + "FilterGetInformation": [ + { + "name": "hFilter", + "type": "HFILTER" + }, + { + "name": "dwInformationClass", + "type": "FILTER_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterInstanceGetInformation": [ + { + "name": "hInstance", + "type": "HFILTER_INSTANCE" + }, + { + "name": "dwInformationClass", + "type": "INSTANCE_INFORMATION_CLASS" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterConnectCommunicationPort": [ + { + "name": "lpPortName", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "lpContext", + "type": "LPCVOID" + }, + { + "name": "wSizeOfContext", + "type": "WORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hPort", + "type": "HANDLE" + } + ], + "FilterSendMessage": [ + { + "name": "hPort", + "type": "HANDLE" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "dwOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "FilterGetMessage": [ + { + "name": "hPort", + "type": "HANDLE" + }, + { + "name": "lpMessageBuffer", + "type": "PFILTER_MESSAGE_HEADER" + }, + { + "name": "dwMessageBufferSize", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "FilterReplyMessage": [ + { + "name": "hPort", + "type": "HANDLE" + }, + { + "name": "lpReplyBuffer", + "type": "PFILTER_REPLY_HEADER" + }, + { + "name": "dwReplyBufferSize", + "type": "DWORD" + } + ], + "FilterGetDosName": [ + { + "name": "lpVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpDosName", + "type": "LPWSTR" + }, + { + "name": "dwDosNameBufferSize", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/fontsub.json b/qiling/extensions/windows_sdk/fontsub.json new file mode 100644 index 000000000..ab20f0be0 --- /dev/null +++ b/qiling/extensions/windows_sdk/fontsub.json @@ -0,0 +1,122 @@ +{ + "CreateFontPackage": [ + { + "name": "puchSrcBuffer", + "type": "unsigned char" + }, + { + "name": "ulSrcBufferSize", + "type": "unsigned long" + }, + { + "name": "ppuchFontPackageBuffer", + "type": "unsigned char" + }, + { + "name": "pulFontPackageBufferSize", + "type": "unsigned long" + }, + { + "name": "pulBytesWritten", + "type": "unsigned long" + }, + { + "name": "usFlag", + "type": "unsigned short" + }, + { + "name": "usTTCIndex", + "type": "unsigned short" + }, + { + "name": "usSubsetFormat", + "type": "unsigned short" + }, + { + "name": "usSubsetLanguage", + "type": "unsigned short" + }, + { + "name": "usSubsetPlatform", + "type": "unsigned short" + }, + { + "name": "usSubsetEncoding", + "type": "unsigned short" + }, + { + "name": "pusSubsetKeepList", + "type": "unsigned short" + }, + { + "name": "usSubsetListCount", + "type": "unsigned short" + }, + { + "name": "lpfnAllocate", + "type": "CFP_ALLOCPROC" + }, + { + "name": "lpfnReAllocate", + "type": "CFP_REALLOCPROC" + }, + { + "name": "lpfnFree", + "type": "CFP_FREEPROC" + }, + { + "name": "lpvReserved", + "type": "void" + } + ], + "MergeFontPackage": [ + { + "name": "puchMergeFontBuffer", + "type": "unsigned char" + }, + { + "name": "ulMergeFontBufferSize", + "type": "unsigned long" + }, + { + "name": "puchFontPackageBuffer", + "type": "unsigned char" + }, + { + "name": "ulFontPackageBufferSize", + "type": "unsigned long" + }, + { + "name": "ppuchDestBuffer", + "type": "unsigned char" + }, + { + "name": "pulDestBufferSize", + "type": "unsigned long" + }, + { + "name": "pulBytesWritten", + "type": "unsigned long" + }, + { + "name": "usMode", + "type": "unsigned short" + }, + { + "name": "lpfnAllocate", + "type": "CFP_ALLOCPROC" + }, + { + "name": "lpfnReAllocate", + "type": "CFP_REALLOCPROC" + }, + { + "name": "lpfnFree", + "type": "CFP_FREEPROC" + }, + { + "name": "lpvReserved", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/fwpmu.json b/qiling/extensions/windows_sdk/fwpmu.json new file mode 100644 index 000000000..1dfb4ecb8 --- /dev/null +++ b/qiling/extensions/windows_sdk/fwpmu.json @@ -0,0 +1,3034 @@ +{ + "FwpmFreeMemory0": [ + { + "name": "p", + "type": "void" + } + ], + "FwpmEngineOpen0": [ + { + "name": "serverName", + "type": "wchar_t" + }, + { + "name": "authnService", + "type": "UINT32" + }, + { + "name": "authIdentity", + "type": "SEC_WINNT_AUTH_IDENTITY_W" + }, + { + "name": "session", + "type": "FWPM_SESSION0" + }, + { + "name": "engineHandle", + "type": "HANDLE" + } + ], + "FwpmEngineClose0": [ + { + "name": "engineHandle", + "type": "HANDLE" + } + ], + "FwpmEngineGetOption0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "option", + "type": "FWPM_ENGINE_OPTION" + }, + { + "name": "value", + "type": "FWP_VALUE0" + } + ], + "FwpmEngineSetOption0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "option", + "type": "FWPM_ENGINE_OPTION" + }, + { + "name": "newValue", + "type": "FWP_VALUE0" + } + ], + "FwpmEngineGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmEngineSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmSessionCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_SESSION_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmSessionEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_SESSION0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmSessionDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmTransactionBegin0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "flags", + "type": "UINT32" + } + ], + "FwpmTransactionCommit0": [ + { + "name": "engineHandle", + "type": "HANDLE" + } + ], + "FwpmTransactionAbort0": [ + { + "name": "engineHandle", + "type": "HANDLE" + } + ], + "FwpmProviderAdd0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "provider", + "type": "FWPM_PROVIDER0" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmProviderDeleteByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + } + ], + "FwpmProviderGetByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "provider", + "type": "FWPM_PROVIDER0" + } + ], + "FwpmProviderCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_PROVIDER_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmProviderEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_PROVIDER0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmProviderDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmProviderGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmProviderSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmProviderSubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_PROVIDER_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_PROVIDER_CHANGE_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmProviderUnsubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmProviderSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_PROVIDER_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmProviderContextAdd0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT0" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "FwpmProviderContextAdd1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT1" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "FwpmProviderContextAdd2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT2" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "FwpmProviderContextDeleteById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "FwpmProviderContextDeleteByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + } + ], + "FwpmProviderContextGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT0" + } + ], + "FwpmProviderContextGetById1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT1" + } + ], + "FwpmProviderContextGetById2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT2" + } + ], + "FwpmProviderContextGetByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT0" + } + ], + "FwpmProviderContextGetByKey1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT1" + } + ], + "FwpmProviderContextGetByKey2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "providerContext", + "type": "FWPM_PROVIDER_CONTEXT2" + } + ], + "FwpmProviderContextCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_PROVIDER_CONTEXT_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmProviderContextEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_PROVIDER_CONTEXT0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmProviderContextEnum1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_PROVIDER_CONTEXT1" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmProviderContextEnum2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_PROVIDER_CONTEXT2" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmProviderContextDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmProviderContextGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmProviderContextSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmProviderContextSubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_PROVIDER_CONTEXT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_PROVIDER_CONTEXT_CHANGE_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmProviderContextUnsubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmProviderContextSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_PROVIDER_CONTEXT_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmSubLayerAdd0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subLayer", + "type": "FWPM_SUBLAYER0" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmSubLayerDeleteByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + } + ], + "FwpmSubLayerGetByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "subLayer", + "type": "FWPM_SUBLAYER0" + } + ], + "FwpmSubLayerCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_SUBLAYER_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmSubLayerEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_SUBLAYER0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmSubLayerDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmSubLayerGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmSubLayerSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmSubLayerSubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_SUBLAYER_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_SUBLAYER_CHANGE_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmSubLayerUnsubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmSubLayerSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_SUBLAYER_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmLayerGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT16" + }, + { + "name": "layer", + "type": "FWPM_LAYER0" + } + ], + "FwpmLayerGetByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "layer", + "type": "FWPM_LAYER0" + } + ], + "FwpmLayerCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_LAYER_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmLayerEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_LAYER0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmLayerDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmLayerGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmLayerSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmCalloutAdd0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "callout", + "type": "FWPM_CALLOUT0" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "id", + "type": "UINT32" + } + ], + "FwpmCalloutDeleteById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT32" + } + ], + "FwpmCalloutDeleteByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + } + ], + "FwpmCalloutGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT32" + }, + { + "name": "callout", + "type": "FWPM_CALLOUT0" + } + ], + "FwpmCalloutGetByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "callout", + "type": "FWPM_CALLOUT0" + } + ], + "FwpmCalloutCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_CALLOUT_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmCalloutEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_CALLOUT0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmCalloutDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmCalloutGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmCalloutSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmCalloutSubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_CALLOUT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_CALLOUT_CHANGE_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmCalloutUnsubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmCalloutSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_CALLOUT_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmFilterAdd0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "filter", + "type": "FWPM_FILTER0" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "FwpmFilterDeleteById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "FwpmFilterDeleteByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + } + ], + "FwpmFilterGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "filter", + "type": "FWPM_FILTER0" + } + ], + "FwpmFilterGetByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "filter", + "type": "FWPM_FILTER0" + } + ], + "FwpmFilterCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_FILTER_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmFilterEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_FILTER0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmFilterDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmFilterGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmFilterSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmFilterSubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_FILTER_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_FILTER_CHANGE_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmFilterUnsubscribeChanges0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "changeHandle", + "type": "HANDLE" + } + ], + "FwpmFilterSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_FILTER_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmGetAppIdFromFileName0": [ + { + "name": "fileName", + "type": "PCWSTR" + }, + { + "name": "appId", + "type": "FWP_BYTE_BLOB" + } + ], + "FwpmIPsecTunnelAdd2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "mainModePolicy", + "type": "FWPM_PROVIDER_CONTEXT2" + }, + { + "name": "tunnelPolicy", + "type": "FWPM_PROVIDER_CONTEXT2" + }, + { + "name": "numFilterConditions", + "type": "UINT32" + }, + { + "name": "filterConditions", + "type": "FWPM_FILTER_CONDITION0" + }, + { + "name": "keyModKey", + "type": "GUID" + }, + { + "name": "sd", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmIPsecTunnelDeleteByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "key", + "type": "GUID" + } + ], + "IPsecGetStatistics0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "ipsecStatistics", + "type": "IPSEC_STATISTICS0" + } + ], + "IPsecGetStatistics1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "ipsecStatistics", + "type": "IPSEC_STATISTICS1" + } + ], + "IPsecSaContextCreate0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "outboundTraffic", + "type": "IPSEC_TRAFFIC0" + }, + { + "name": "inboundFilterId", + "type": "UINT64" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "IPsecSaContextCreate1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "outboundTraffic", + "type": "IPSEC_TRAFFIC1" + }, + { + "name": "virtualIfTunnelInfo", + "type": "IPSEC_VIRTUAL_IF_TUNNEL_INFO0" + }, + { + "name": "inboundFilterId", + "type": "UINT64" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "IPsecSaContextDeleteById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "IPsecSaContextGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "saContext", + "type": "IPSEC_SA_CONTEXT0" + } + ], + "IPsecSaContextGetById1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "saContext", + "type": "IPSEC_SA_CONTEXT1" + } + ], + "IPsecSaContextGetSpi0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "getSpi", + "type": "IPSEC_GETSPI0" + }, + { + "name": "inboundSpi", + "type": "IPSEC_SA_SPI" + } + ], + "IPsecSaContextGetSpi1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "getSpi", + "type": "IPSEC_GETSPI1" + }, + { + "name": "inboundSpi", + "type": "IPSEC_SA_SPI" + } + ], + "IPsecSaContextSetSpi0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "getSpi", + "type": "IPSEC_GETSPI1" + }, + { + "name": "inboundSpi", + "type": "IPSEC_SA_SPI" + } + ], + "IPsecSaContextAddInbound0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "inboundBundle", + "type": "IPSEC_SA_BUNDLE0" + } + ], + "IPsecSaContextAddOutbound0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "outboundBundle", + "type": "IPSEC_SA_BUNDLE0" + } + ], + "IPsecSaContextAddInbound1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "inboundBundle", + "type": "IPSEC_SA_BUNDLE1" + } + ], + "IPsecSaContextAddOutbound1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "outboundBundle", + "type": "IPSEC_SA_BUNDLE1" + } + ], + "IPsecSaContextExpire0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "IPsecSaContextUpdate0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "flags", + "type": "UINT64" + }, + { + "name": "newValues", + "type": "IPSEC_SA_CONTEXT1" + } + ], + "IPsecSaContextCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "IPSEC_SA_CONTEXT_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IPsecSaContextEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IPSEC_SA_CONTEXT0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IPsecSaContextEnum1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IPSEC_SA_CONTEXT1" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IPsecSaContextDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IPsecSaContextSubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "IPSEC_SA_CONTEXT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "IPSEC_SA_CONTEXT_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "IPsecSaContextUnsubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "IPsecSaContextSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "IPSEC_SA_CONTEXT_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "IPsecSaCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "IPSEC_SA_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IPsecSaEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IPSEC_SA_DETAILS0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IPsecSaEnum1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IPSEC_SA_DETAILS1" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IPsecSaDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IPsecSaDbGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "IPsecSaDbSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "IPsecDospGetStatistics0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "idpStatistics", + "type": "IPSEC_DOSP_STATISTICS0" + } + ], + "IPsecDospStateCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "IPSEC_DOSP_STATE_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IPsecDospStateEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IPSEC_DOSP_STATE0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "IPsecDospStateDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IPsecDospGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "IPsecDospSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "IPsecKeyManagerAddAndRegister0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "keyManager", + "type": "IPSEC_KEY_MANAGER0" + }, + { + "name": "keyManagerCallbacks", + "type": "IPSEC_KEY_MANAGER_CALLBACKS0" + }, + { + "name": "keyMgmtHandle", + "type": "HANDLE" + } + ], + "IPsecKeyManagerUnregisterAndDelete0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "keyMgmtHandle", + "type": "HANDLE" + } + ], + "IPsecKeyManagersGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "IPSEC_KEY_MANAGER0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "IPsecKeyManagerGetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "reserved", + "type": "void" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "IPsecKeyManagerSetSecurityInfoByKey0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "reserved", + "type": "void" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "IkeextGetStatistics0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "ikeextStatistics", + "type": "IKEEXT_STATISTICS0" + } + ], + "IkeextGetStatistics1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "ikeextStatistics", + "type": "IKEEXT_STATISTICS1" + } + ], + "IkeextSaDeleteById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + } + ], + "IkeextSaGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "sa", + "type": "IKEEXT_SA_DETAILS0" + } + ], + "IkeextSaGetById1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "saLookupContext", + "type": "GUID" + }, + { + "name": "sa", + "type": "IKEEXT_SA_DETAILS1" + } + ], + "IkeextSaGetById2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "saLookupContext", + "type": "GUID" + }, + { + "name": "sa", + "type": "IKEEXT_SA_DETAILS2" + } + ], + "IkeextSaCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "IKEEXT_SA_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IkeextSaEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IKEEXT_SA_DETAILS0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IkeextSaEnum1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IKEEXT_SA_DETAILS1" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IkeextSaEnum2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "IKEEXT_SA_DETAILS2" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "IkeextSaDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "IkeextSaDbGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "IkeextSaDbSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmNetEventCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_NET_EVENT_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmNetEventEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_NET_EVENT0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmNetEventEnum1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_NET_EVENT1" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmNetEventEnum2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_NET_EVENT2" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmNetEventEnum3": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_NET_EVENT3" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmNetEventDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmNetEventsGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmNetEventsSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmNetEventSubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_NET_EVENT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_NET_EVENT_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "FwpmNetEventUnsubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "FwpmNetEventSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_NET_EVENT_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmNetEventSubscribe1": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_NET_EVENT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_NET_EVENT_CALLBACK1" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "FwpmNetEventSubscribe2": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_NET_EVENT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_NET_EVENT_CALLBACK2" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "FwpmSystemPortsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "sysPorts", + "type": "FWPM_SYSTEM_PORTS0" + } + ], + "FwpmSystemPortsSubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "reserved", + "type": "void" + }, + { + "name": "callback", + "type": "FWPM_SYSTEM_PORTS_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "sysPortsHandle", + "type": "HANDLE" + } + ], + "FwpmSystemPortsUnsubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "sysPortsHandle", + "type": "HANDLE" + } + ], + "FwpmConnectionGetById0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "id", + "type": "UINT64" + }, + { + "name": "connection", + "type": "FWPM_CONNECTION0" + } + ], + "FwpmConnectionEnum0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + }, + { + "name": "numEntriesRequested", + "type": "UINT32" + }, + { + "name": "entries", + "type": "FWPM_CONNECTION0" + }, + { + "name": "numEntriesReturned", + "type": "UINT32" + } + ], + "FwpmConnectionCreateEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumTemplate", + "type": "FWPM_CONNECTION_ENUM_TEMPLATE0" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmConnectionDestroyEnumHandle0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "enumHandle", + "type": "HANDLE" + } + ], + "FwpmConnectionGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmConnectionSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ], + "FwpmConnectionSubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_CONNECTION_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_CONNECTION_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "FwpmConnectionUnsubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "eventsHandle", + "type": "HANDLE" + } + ], + "FwpmConnectionSubscriptionsGet0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "entries", + "type": "FWPM_CONNECTION_SUBSCRIPTION0" + }, + { + "name": "numEntries", + "type": "UINT32" + } + ], + "FwpmvSwitchEventSubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscription", + "type": "FWPM_VSWITCH_EVENT_SUBSCRIPTION0" + }, + { + "name": "callback", + "type": "FWPM_VSWITCH_EVENT_CALLBACK0" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "subscriptionHandle", + "type": "HANDLE" + } + ], + "FwpmvSwitchEventUnsubscribe0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "subscriptionHandle", + "type": "HANDLE" + } + ], + "FwpmvSwitchEventsGetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "PSID" + }, + { + "name": "sidGroup", + "type": "PSID" + }, + { + "name": "dacl", + "type": "PACL" + }, + { + "name": "sacl", + "type": "PACL" + }, + { + "name": "securityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "FwpmvSwitchEventsSetSecurityInfo0": [ + { + "name": "engineHandle", + "type": "HANDLE" + }, + { + "name": "securityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "sidOwner", + "type": "SID" + }, + { + "name": "sidGroup", + "type": "SID" + }, + { + "name": "dacl", + "type": "ACL" + }, + { + "name": "sacl", + "type": "ACL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/fxsutility.json b/qiling/extensions/windows_sdk/fxsutility.json new file mode 100644 index 000000000..1816a2433 --- /dev/null +++ b/qiling/extensions/windows_sdk/fxsutility.json @@ -0,0 +1,12 @@ +{ + "SendToFaxRecipient": [ + { + "name": "sndMode", + "type": "SendToMode" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/gb18030.json b/qiling/extensions/windows_sdk/gb18030.json new file mode 100644 index 000000000..1d99f246d --- /dev/null +++ b/qiling/extensions/windows_sdk/gb18030.json @@ -0,0 +1,32 @@ +{ + "NlsDllCodePageTranslation": [ + { + "name": "CodePage", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMultiByteStr", + "type": "LPSTR" + }, + { + "name": "cchMultiByte", + "type": "int" + }, + { + "name": "lpWideCharStr", + "type": "LPWSTR" + }, + { + "name": "cchWideChar", + "type": "int" + }, + { + "name": "lpCPInfo", + "type": "LPCPINFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/gpedit.json b/qiling/extensions/windows_sdk/gpedit.json new file mode 100644 index 000000000..d6ccf2f39 --- /dev/null +++ b/qiling/extensions/windows_sdk/gpedit.json @@ -0,0 +1,58 @@ +{ + "CreateGPOLink": [ + { + "name": "lpGPO", + "type": "LPOLESTR" + }, + { + "name": "lpContainer", + "type": "LPOLESTR" + }, + { + "name": "fHighPriority", + "type": "BOOL" + } + ], + "DeleteGPOLink": [ + { + "name": "lpGPO", + "type": "LPOLESTR" + }, + { + "name": "lpContainer", + "type": "LPOLESTR" + } + ], + "DeleteAllGPOLinks": [ + { + "name": "lpContainer", + "type": "LPOLESTR" + } + ], + "BrowseForGPO": [ + { + "name": "lpBrowseInfo", + "type": "LPGPOBROWSEINFO" + } + ], + "ImportRSoPData": [ + { + "name": "lpNameSpace", + "type": "LPOLESTR" + }, + { + "name": "lpFileName", + "type": "LPOLESTR" + } + ], + "ExportRSoPData": [ + { + "name": "lpNameSpace", + "type": "LPOLESTR" + }, + { + "name": "lpFileName", + "type": "LPOLESTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/guiddef.json b/qiling/extensions/windows_sdk/guiddef.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/guiddef.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/handleapi.json b/qiling/extensions/windows_sdk/handleapi.json new file mode 100644 index 000000000..37b56a7dd --- /dev/null +++ b/qiling/extensions/windows_sdk/handleapi.json @@ -0,0 +1,72 @@ +{ + "CloseHandle": [ + { + "name": "hObject", + "type": "HANDLE" + } + ], + "DuplicateHandle": [ + { + "name": "hSourceProcessHandle", + "type": "HANDLE" + }, + { + "name": "hSourceHandle", + "type": "HANDLE" + }, + { + "name": "hTargetProcessHandle", + "type": "HANDLE" + }, + { + "name": "lpTargetHandle", + "type": "LPHANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "CompareObjectHandles": [ + { + "name": "hFirstObjectHandle", + "type": "HANDLE" + }, + { + "name": "hSecondObjectHandle", + "type": "HANDLE" + } + ], + "GetHandleInformation": [ + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ], + "SetHandleInformation": [ + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "dwMask", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/heapapi.json b/qiling/extensions/windows_sdk/heapapi.json new file mode 100644 index 000000000..a67b54cb0 --- /dev/null +++ b/qiling/extensions/windows_sdk/heapapi.json @@ -0,0 +1,198 @@ +{ + "HeapCreate": [ + { + "name": "flOptions", + "type": "DWORD" + }, + { + "name": "dwInitialSize", + "type": "SIZE_T" + }, + { + "name": "dwMaximumSize", + "type": "SIZE_T" + } + ], + "HeapDestroy": [ + { + "name": "hHeap", + "type": "HANDLE" + } + ], + "HeapAlloc": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwBytes", + "type": "SIZE_T" + } + ], + "HeapReAlloc": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMem", + "type": "LPVOID" + }, + { + "name": "dwBytes", + "type": "SIZE_T" + } + ], + "HeapFree": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMem", + "type": "LPVOID" + } + ], + "HeapSize": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMem", + "type": "LPCVOID" + } + ], + "GetProcessHeap": [ + { + "name": "VOID", + "type": "void" + } + ], + "HeapCompact": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "HeapSetInformation": [ + { + "name": "HeapHandle", + "type": "HANDLE" + }, + { + "name": "HeapInformationClass", + "type": "HEAP_INFORMATION_CLASS" + }, + { + "name": "HeapInformation", + "type": "PVOID" + }, + { + "name": "HeapInformationLength", + "type": "SIZE_T" + } + ], + "HeapValidate": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMem", + "type": "LPCVOID" + } + ], + "HeapSummary": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpSummary", + "type": "LPHEAP_SUMMARY" + } + ], + "GetProcessHeaps": [ + { + "name": "NumberOfHeaps", + "type": "DWORD" + }, + { + "name": "ProcessHeaps", + "type": "PHANDLE" + } + ], + "HeapLock": [ + { + "name": "hHeap", + "type": "HANDLE" + } + ], + "HeapUnlock": [ + { + "name": "hHeap", + "type": "HANDLE" + } + ], + "HeapWalk": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "lpEntry", + "type": "LPPROCESS_HEAP_ENTRY" + } + ], + "HeapQueryInformation": [ + { + "name": "HeapHandle", + "type": "HANDLE" + }, + { + "name": "HeapInformationClass", + "type": "HEAP_INFORMATION_CLASS" + }, + { + "name": "HeapInformation", + "type": "PVOID" + }, + { + "name": "HeapInformationLength", + "type": "SIZE_T" + }, + { + "name": "ReturnLength", + "type": "PSIZE_T" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/highlevelmonitorconfigurationapi.json b/qiling/extensions/windows_sdk/highlevelmonitorconfigurationapi.json new file mode 100644 index 000000000..a42b7a1ab --- /dev/null +++ b/qiling/extensions/windows_sdk/highlevelmonitorconfigurationapi.json @@ -0,0 +1,270 @@ +{ + "GetMonitorCapabilities": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdwMonitorCapabilities", + "type": "LPDWORD" + }, + { + "name": "pdwSupportedColorTemperatures", + "type": "LPDWORD" + } + ], + "SaveCurrentMonitorSettings": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "GetMonitorTechnologyType": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdtyDisplayTechnologyType", + "type": "LPMC_DISPLAY_TECHNOLOGY_TYPE" + } + ], + "GetMonitorBrightness": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdwMinimumBrightness", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentBrightness", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumBrightness", + "type": "LPDWORD" + } + ], + "GetMonitorContrast": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdwMinimumContrast", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentContrast", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumContrast", + "type": "LPDWORD" + } + ], + "GetMonitorColorTemperature": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pctCurrentColorTemperature", + "type": "LPMC_COLOR_TEMPERATURE" + } + ], + "GetMonitorRedGreenOrBlueDrive": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "dtDriveType", + "type": "MC_DRIVE_TYPE" + }, + { + "name": "pdwMinimumDrive", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentDrive", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumDrive", + "type": "LPDWORD" + } + ], + "GetMonitorRedGreenOrBlueGain": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "gtGainType", + "type": "MC_GAIN_TYPE" + }, + { + "name": "pdwMinimumGain", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentGain", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumGain", + "type": "LPDWORD" + } + ], + "SetMonitorBrightness": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "dwNewBrightness", + "type": "DWORD" + } + ], + "SetMonitorContrast": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "dwNewContrast", + "type": "DWORD" + } + ], + "SetMonitorColorTemperature": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "ctCurrentColorTemperature", + "type": "MC_COLOR_TEMPERATURE" + } + ], + "SetMonitorRedGreenOrBlueDrive": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "dtDriveType", + "type": "MC_DRIVE_TYPE" + }, + { + "name": "dwNewDrive", + "type": "DWORD" + } + ], + "SetMonitorRedGreenOrBlueGain": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "gtGainType", + "type": "MC_GAIN_TYPE" + }, + { + "name": "dwNewGain", + "type": "DWORD" + } + ], + "DegaussMonitor": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "GetMonitorDisplayAreaSize": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "stSizeType", + "type": "MC_SIZE_TYPE" + }, + { + "name": "pdwMinimumWidthOrHeight", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentWidthOrHeight", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumWidthOrHeight", + "type": "LPDWORD" + } + ], + "GetMonitorDisplayAreaPosition": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "ptPositionType", + "type": "MC_POSITION_TYPE" + }, + { + "name": "pdwMinimumPosition", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentPosition", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumPosition", + "type": "LPDWORD" + } + ], + "SetMonitorDisplayAreaSize": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "stSizeType", + "type": "MC_SIZE_TYPE" + }, + { + "name": "dwNewDisplayAreaWidthOrHeight", + "type": "DWORD" + } + ], + "SetMonitorDisplayAreaPosition": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "ptPositionType", + "type": "MC_POSITION_TYPE" + }, + { + "name": "dwNewPosition", + "type": "DWORD" + } + ], + "RestoreMonitorFactoryColorDefaults": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "RestoreMonitorFactoryDefaults": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/htmlhelp.json b/qiling/extensions/windows_sdk/htmlhelp.json new file mode 100644 index 000000000..e40097122 --- /dev/null +++ b/qiling/extensions/windows_sdk/htmlhelp.json @@ -0,0 +1,38 @@ +{ + "HtmlHelpA": [ + { + "name": "hwndCaller", + "type": "HWND" + }, + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "uCommand", + "type": "UINT" + }, + { + "name": "dwData", + "type": "DWORD_PTR" + } + ], + "HtmlHelpW": [ + { + "name": "hwndCaller", + "type": "HWND" + }, + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "uCommand", + "type": "UINT" + }, + { + "name": "dwData", + "type": "DWORD_PTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/http.json b/qiling/extensions/windows_sdk/http.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/http.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/icwcfg.json b/qiling/extensions/windows_sdk/icwcfg.json new file mode 100644 index 000000000..bea280a2c --- /dev/null +++ b/qiling/extensions/windows_sdk/icwcfg.json @@ -0,0 +1,18 @@ +{ + "CheckConnectionWizard": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "SetShellNext": [ + { + "name": "szShellNext", + "type": "PSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/imagehlp.json b/qiling/extensions/windows_sdk/imagehlp.json new file mode 100644 index 000000000..685ff2b72 --- /dev/null +++ b/qiling/extensions/windows_sdk/imagehlp.json @@ -0,0 +1,414 @@ +{ + "BindImage": [ + { + "name": "ImageName", + "type": "PCSTR" + }, + { + "name": "DllPath", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + } + ], + "BindImageEx": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ImageName", + "type": "PCSTR" + }, + { + "name": "DllPath", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "StatusRoutine", + "type": "PIMAGEHLP_STATUS_ROUTINE" + } + ], + "ReBaseImage": [ + { + "name": "CurrentImageName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "fReBase", + "type": "BOOL" + }, + { + "name": "fRebaseSysfileOk", + "type": "BOOL" + }, + { + "name": "fGoingDown", + "type": "BOOL" + }, + { + "name": "CheckImageSize", + "type": "ULONG" + }, + { + "name": "OldImageSize", + "type": "ULONG" + }, + { + "name": "OldImageBase", + "type": "ULONG_PTR" + }, + { + "name": "NewImageSize", + "type": "ULONG" + }, + { + "name": "NewImageBase", + "type": "ULONG_PTR" + }, + { + "name": "TimeStamp", + "type": "ULONG" + } + ], + "ReBaseImage64": [ + { + "name": "CurrentImageName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "fReBase", + "type": "BOOL" + }, + { + "name": "fRebaseSysfileOk", + "type": "BOOL" + }, + { + "name": "fGoingDown", + "type": "BOOL" + }, + { + "name": "CheckImageSize", + "type": "ULONG" + }, + { + "name": "OldImageSize", + "type": "ULONG" + }, + { + "name": "OldImageBase", + "type": "ULONG64" + }, + { + "name": "NewImageSize", + "type": "ULONG" + }, + { + "name": "NewImageBase", + "type": "ULONG64" + }, + { + "name": "TimeStamp", + "type": "ULONG" + } + ], + "CheckSumMappedFile": [ + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "FileLength", + "type": "DWORD" + }, + { + "name": "HeaderSum", + "type": "PDWORD" + }, + { + "name": "CheckSum", + "type": "PDWORD" + } + ], + "MapFileAndCheckSumA": [ + { + "name": "Filename", + "type": "PCSTR" + }, + { + "name": "HeaderSum", + "type": "PDWORD" + }, + { + "name": "CheckSum", + "type": "PDWORD" + } + ], + "MapFileAndCheckSumW": [ + { + "name": "Filename", + "type": "PCWSTR" + }, + { + "name": "HeaderSum", + "type": "PDWORD" + }, + { + "name": "CheckSum", + "type": "PDWORD" + } + ], + "GetImageConfigInformation": [ + { + "name": "LoadedImage", + "type": "PLOADED_IMAGE" + }, + { + "name": "ImageConfigInformation", + "type": "PIMAGE_LOAD_CONFIG_DIRECTORY" + } + ], + "GetImageUnusedHeaderBytes": [ + { + "name": "LoadedImage", + "type": "PLOADED_IMAGE" + }, + { + "name": "SizeUnusedHeaderBytes", + "type": "PDWORD" + } + ], + "SetImageConfigInformation": [ + { + "name": "LoadedImage", + "type": "PLOADED_IMAGE" + }, + { + "name": "ImageConfigInformation", + "type": "PIMAGE_LOAD_CONFIG_DIRECTORY" + } + ], + "ImageGetDigestStream": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "DigestLevel", + "type": "DWORD" + }, + { + "name": "DigestFunction", + "type": "DIGEST_FUNCTION" + }, + { + "name": "DigestHandle", + "type": "DIGEST_HANDLE" + } + ], + "ImageAddCertificate": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Certificate", + "type": "LPWIN_CERTIFICATE" + }, + { + "name": "Index", + "type": "PDWORD" + } + ], + "ImageRemoveCertificate": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Index", + "type": "DWORD" + } + ], + "ImageEnumerateCertificates": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "TypeFilter", + "type": "WORD" + }, + { + "name": "CertificateCount", + "type": "PDWORD" + }, + { + "name": "Indices", + "type": "PDWORD" + }, + { + "name": "IndexCount", + "type": "DWORD" + } + ], + "ImageGetCertificateData": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "CertificateIndex", + "type": "DWORD" + }, + { + "name": "Certificate", + "type": "LPWIN_CERTIFICATE" + }, + { + "name": "RequiredLength", + "type": "PDWORD" + } + ], + "ImageGetCertificateHeader": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "CertificateIndex", + "type": "DWORD" + }, + { + "name": "Certificateheader", + "type": "LPWIN_CERTIFICATE" + } + ], + "ImageLoad": [ + { + "name": "DllName", + "type": "PCSTR" + }, + { + "name": "DllPath", + "type": "PCSTR" + } + ], + "ImageUnload": [ + { + "name": "LoadedImage", + "type": "PLOADED_IMAGE" + } + ], + "MapAndLoad": [ + { + "name": "ImageName", + "type": "PCSTR" + }, + { + "name": "DllPath", + "type": "PCSTR" + }, + { + "name": "LoadedImage", + "type": "PLOADED_IMAGE" + }, + { + "name": "DotDll", + "type": "BOOL" + }, + { + "name": "ReadOnly", + "type": "BOOL" + } + ], + "UnMapAndLoad": [ + { + "name": "LoadedImage", + "type": "PLOADED_IMAGE" + } + ], + "TouchFileTimes": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "pSystemTime", + "type": "PSYSTEMTIME" + } + ], + "SplitSymbols": [ + { + "name": "ImageName", + "type": "PSTR" + }, + { + "name": "SymbolsPath", + "type": "PCSTR" + }, + { + "name": "SymbolFilePath", + "type": "PSTR" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "UpdateDebugInfoFile": [ + { + "name": "ImageFileName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "DebugFilePath", + "type": "PSTR" + }, + { + "name": "NtHeaders", + "type": "PIMAGE_NT_HEADERS32" + } + ], + "UpdateDebugInfoFileEx": [ + { + "name": "ImageFileName", + "type": "PCSTR" + }, + { + "name": "SymbolPath", + "type": "PCSTR" + }, + { + "name": "DebugFilePath", + "type": "PSTR" + }, + { + "name": "NtHeaders", + "type": "PIMAGE_NT_HEADERS32" + }, + { + "name": "OldCheckSum", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ime.json b/qiling/extensions/windows_sdk/ime.json new file mode 100644 index 000000000..24248426e --- /dev/null +++ b/qiling/extensions/windows_sdk/ime.json @@ -0,0 +1,22 @@ +{ + "SendIMEMessageExA": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "SendIMEMessageExW": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/imm.json b/qiling/extensions/windows_sdk/imm.json new file mode 100644 index 000000000..0ad14c9bd --- /dev/null +++ b/qiling/extensions/windows_sdk/imm.json @@ -0,0 +1,904 @@ +{ + "ImmInstallIMEA": [ + { + "name": "lpszIMEFileName", + "type": "LPCSTR" + }, + { + "name": "lpszLayoutText", + "type": "LPCSTR" + } + ], + "ImmInstallIMEW": [ + { + "name": "lpszIMEFileName", + "type": "LPCWSTR" + }, + { + "name": "lpszLayoutText", + "type": "LPCWSTR" + } + ], + "ImmGetDefaultIMEWnd": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "ImmGetDescriptionA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszDescription", + "type": "LPSTR" + }, + { + "name": "uBufLen", + "type": "UINT" + } + ], + "ImmGetDescriptionW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszDescription", + "type": "LPWSTR" + }, + { + "name": "uBufLen", + "type": "UINT" + } + ], + "ImmGetIMEFileNameA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszFileName", + "type": "LPSTR" + }, + { + "name": "uBufLen", + "type": "UINT" + } + ], + "ImmGetIMEFileNameW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszFileName", + "type": "LPWSTR" + }, + { + "name": "uBufLen", + "type": "UINT" + } + ], + "ImmGetProperty": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmIsIME": [ + { + "name": "VOID", + "type": "HKL" + } + ], + "ImmSimulateHotKey": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmCreateContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "ImmDestroyContext": [ + { + "name": "VOID", + "type": "HIMC" + } + ], + "ImmGetContext": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "ImmReleaseContext": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "HIMC" + } + ], + "ImmAssociateContext": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "HIMC" + } + ], + "ImmAssociateContextEx": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmGetCompositionStringA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpBuf", + "type": "LPVOID" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetCompositionStringW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpBuf", + "type": "LPVOID" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmSetCompositionStringA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpComp", + "type": "LPVOID" + }, + { + "name": "dwCompLen", + "type": "DWORD" + }, + { + "name": "lpRead", + "type": "LPVOID" + }, + { + "name": "dwReadLen", + "type": "DWORD" + } + ], + "ImmSetCompositionStringW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpComp", + "type": "LPVOID" + }, + { + "name": "dwCompLen", + "type": "DWORD" + }, + { + "name": "lpRead", + "type": "LPVOID" + }, + { + "name": "dwReadLen", + "type": "DWORD" + } + ], + "ImmGetCandidateListCountA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpdwListCount", + "type": "LPDWORD" + } + ], + "ImmGetCandidateListCountW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpdwListCount", + "type": "LPDWORD" + } + ], + "ImmGetCandidateListA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "deIndex", + "type": "DWORD" + }, + { + "name": "lpCandList", + "type": "LPCANDIDATELIST" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetCandidateListW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "deIndex", + "type": "DWORD" + }, + { + "name": "lpCandList", + "type": "LPCANDIDATELIST" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetGuideLineA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpBuf", + "type": "LPSTR" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetGuideLineW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpBuf", + "type": "LPWSTR" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetConversionStatus": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpfdwConversion", + "type": "LPDWORD" + }, + { + "name": "lpfdwSentence", + "type": "LPDWORD" + } + ], + "ImmSetConversionStatus": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmGetOpenStatus": [ + { + "name": "VOID", + "type": "HIMC" + } + ], + "ImmSetOpenStatus": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "ImmGetCompositionFontA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lplf", + "type": "LPLOGFONTA" + } + ], + "ImmGetCompositionFontW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lplf", + "type": "LPLOGFONTW" + } + ], + "ImmSetCompositionFontA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lplf", + "type": "LPLOGFONTA" + } + ], + "ImmSetCompositionFontW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lplf", + "type": "LPLOGFONTW" + } + ], + "ImmConfigureIMEA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmConfigureIMEW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmEscapeA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmEscapeW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmGetConversionListA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpSrc", + "type": "LPCSTR" + }, + { + "name": "lpDst", + "type": "LPCANDIDATELIST" + }, + { + "name": "dwBufLen", + "type": "DWORD" + }, + { + "name": "uFlag", + "type": "UINT" + } + ], + "ImmGetConversionListW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpSrc", + "type": "LPCWSTR" + }, + { + "name": "lpDst", + "type": "LPCANDIDATELIST" + }, + { + "name": "dwBufLen", + "type": "DWORD" + }, + { + "name": "uFlag", + "type": "UINT" + } + ], + "ImmNotifyIME": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "dwValue", + "type": "DWORD" + } + ], + "ImmGetStatusWindowPos": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpptPos", + "type": "LPPOINT" + } + ], + "ImmSetStatusWindowPos": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpptPos", + "type": "LPPOINT" + } + ], + "ImmGetCompositionWindow": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpCompForm", + "type": "LPCOMPOSITIONFORM" + } + ], + "ImmSetCompositionWindow": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpCompForm", + "type": "LPCOMPOSITIONFORM" + } + ], + "ImmGetCandidateWindow": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpCandidate", + "type": "LPCANDIDATEFORM" + } + ], + "ImmSetCandidateWindow": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpCandidate", + "type": "LPCANDIDATEFORM" + } + ], + "ImmIsUIMessageA": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "WPARAM" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "ImmIsUIMessageW": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "WPARAM" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "ImmGetVirtualKey": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "ImmRegisterWordA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszReading", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszRegister", + "type": "LPCSTR" + } + ], + "ImmRegisterWordW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszReading", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszRegister", + "type": "LPCWSTR" + } + ], + "ImmUnregisterWordA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszReading", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszUnregister", + "type": "LPCSTR" + } + ], + "ImmUnregisterWordW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszReading", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszUnregister", + "type": "LPCWSTR" + } + ], + "ImmGetRegisterWordStyleA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "nItem", + "type": "UINT" + }, + { + "name": "lpStyleBuf", + "type": "LPSTYLEBUFA" + } + ], + "ImmGetRegisterWordStyleW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "nItem", + "type": "UINT" + }, + { + "name": "lpStyleBuf", + "type": "LPSTYLEBUFW" + } + ], + "ImmEnumRegisterWordA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "REGISTERWORDENUMPROCA" + }, + { + "name": "lpszReading", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszRegister", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmEnumRegisterWordW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "REGISTERWORDENUMPROCW" + }, + { + "name": "lpszReading", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszRegister", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmDisableIME": [ + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmEnumInputContext": [ + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "lpfn", + "type": "IMCENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "ImmGetImeMenuItemsA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpImeParentMenu", + "type": "LPIMEMENUITEMINFOA" + }, + { + "name": "lpImeMenu", + "type": "LPIMEMENUITEMINFOA" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "ImmGetImeMenuItemsW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpImeParentMenu", + "type": "LPIMEMENUITEMINFOW" + }, + { + "name": "lpImeMenu", + "type": "LPIMEMENUITEMINFOW" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "ImmDisableTextFrameService": [ + { + "name": "idThread", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/immdev.json b/qiling/extensions/windows_sdk/immdev.json new file mode 100644 index 000000000..db9653b71 --- /dev/null +++ b/qiling/extensions/windows_sdk/immdev.json @@ -0,0 +1,932 @@ +{ + "ImmInstallIMEA": [ + { + "name": "lpszIMEFileName", + "type": "LPCSTR" + }, + { + "name": "lpszLayoutText", + "type": "LPCSTR" + } + ], + "ImmInstallIMEW": [ + { + "name": "lpszIMEFileName", + "type": "LPCWSTR" + }, + { + "name": "lpszLayoutText", + "type": "LPCWSTR" + } + ], + "ImmGetDefaultIMEWnd": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "ImmGetDescriptionA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszDescription", + "type": "LPSTR" + }, + { + "name": "uBufLen", + "type": "UINT" + } + ], + "ImmGetDescriptionW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszDescription", + "type": "LPWSTR" + }, + { + "name": "uBufLen", + "type": "UINT" + } + ], + "ImmGetIMEFileNameA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszFileName", + "type": "LPSTR" + }, + { + "name": "uBufLen", + "type": "UINT" + } + ], + "ImmGetIMEFileNameW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszFileName", + "type": "LPWSTR" + }, + { + "name": "uBufLen", + "type": "UINT" + } + ], + "ImmGetProperty": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmIsIME": [ + { + "name": "VOID", + "type": "HKL" + } + ], + "ImmSimulateHotKey": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmCreateContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "ImmDestroyContext": [ + { + "name": "VOID", + "type": "HIMC" + } + ], + "ImmGetContext": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "ImmReleaseContext": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "HIMC" + } + ], + "ImmAssociateContext": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "HIMC" + } + ], + "ImmAssociateContextEx": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmGetCompositionStringA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpBuf", + "type": "LPVOID" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetCompositionStringW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpBuf", + "type": "LPVOID" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmSetCompositionStringA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpComp", + "type": "LPVOID" + }, + { + "name": "dwCompLen", + "type": "DWORD" + }, + { + "name": "lpRead", + "type": "LPVOID" + }, + { + "name": "dwReadLen", + "type": "DWORD" + } + ], + "ImmSetCompositionStringW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpComp", + "type": "LPVOID" + }, + { + "name": "dwCompLen", + "type": "DWORD" + }, + { + "name": "lpRead", + "type": "LPVOID" + }, + { + "name": "dwReadLen", + "type": "DWORD" + } + ], + "ImmGetCandidateListCountA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpdwListCount", + "type": "LPDWORD" + } + ], + "ImmGetCandidateListCountW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpdwListCount", + "type": "LPDWORD" + } + ], + "ImmGetCandidateListA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "deIndex", + "type": "DWORD" + }, + { + "name": "lpCandList", + "type": "LPCANDIDATELIST" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetCandidateListW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "deIndex", + "type": "DWORD" + }, + { + "name": "lpCandList", + "type": "LPCANDIDATELIST" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetGuideLineA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpBuf", + "type": "LPSTR" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetGuideLineW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpBuf", + "type": "LPWSTR" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "ImmGetConversionStatus": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpfdwConversion", + "type": "LPDWORD" + }, + { + "name": "lpfdwSentence", + "type": "LPDWORD" + } + ], + "ImmSetConversionStatus": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmGetOpenStatus": [ + { + "name": "VOID", + "type": "HIMC" + } + ], + "ImmSetOpenStatus": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "ImmGetCompositionFontA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lplf", + "type": "LPLOGFONTA" + } + ], + "ImmGetCompositionFontW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lplf", + "type": "LPLOGFONTW" + } + ], + "ImmSetCompositionFontA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lplf", + "type": "LPLOGFONTA" + } + ], + "ImmSetCompositionFontW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lplf", + "type": "LPLOGFONTW" + } + ], + "ImmConfigureIMEA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmConfigureIMEW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmEscapeA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmEscapeW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmGetConversionListA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpSrc", + "type": "LPCSTR" + }, + { + "name": "lpDst", + "type": "LPCANDIDATELIST" + }, + { + "name": "dwBufLen", + "type": "DWORD" + }, + { + "name": "uFlag", + "type": "UINT" + } + ], + "ImmGetConversionListW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpSrc", + "type": "LPCWSTR" + }, + { + "name": "lpDst", + "type": "LPCANDIDATELIST" + }, + { + "name": "dwBufLen", + "type": "DWORD" + }, + { + "name": "uFlag", + "type": "UINT" + } + ], + "ImmNotifyIME": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "dwValue", + "type": "DWORD" + } + ], + "ImmGetStatusWindowPos": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpptPos", + "type": "LPPOINT" + } + ], + "ImmSetStatusWindowPos": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpptPos", + "type": "LPPOINT" + } + ], + "ImmGetCompositionWindow": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpCompForm", + "type": "LPCOMPOSITIONFORM" + } + ], + "ImmSetCompositionWindow": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpCompForm", + "type": "LPCOMPOSITIONFORM" + } + ], + "ImmGetCandidateWindow": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpCandidate", + "type": "LPCANDIDATEFORM" + } + ], + "ImmSetCandidateWindow": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "lpCandidate", + "type": "LPCANDIDATEFORM" + } + ], + "ImmIsUIMessageA": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "WPARAM" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "ImmIsUIMessageW": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "WPARAM" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "ImmGetVirtualKey": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "ImmRegisterWordA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszReading", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszRegister", + "type": "LPCSTR" + } + ], + "ImmRegisterWordW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszReading", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszRegister", + "type": "LPCWSTR" + } + ], + "ImmUnregisterWordA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszReading", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszUnregister", + "type": "LPCSTR" + } + ], + "ImmUnregisterWordW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "lpszReading", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszUnregister", + "type": "LPCWSTR" + } + ], + "ImmGetRegisterWordStyleA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "nItem", + "type": "UINT" + }, + { + "name": "lpStyleBuf", + "type": "LPSTYLEBUFA" + } + ], + "ImmGetRegisterWordStyleW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "nItem", + "type": "UINT" + }, + { + "name": "lpStyleBuf", + "type": "LPSTYLEBUFW" + } + ], + "ImmEnumRegisterWordA": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "REGISTERWORDENUMPROCA" + }, + { + "name": "lpszReading", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszRegister", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmEnumRegisterWordW": [ + { + "name": "VOID", + "type": "HKL" + }, + { + "name": "VOID", + "type": "REGISTERWORDENUMPROCW" + }, + { + "name": "lpszReading", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpszRegister", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPVOID" + } + ], + "ImmDisableIME": [ + { + "name": "VOID", + "type": "DWORD" + } + ], + "ImmEnumInputContext": [ + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "lpfn", + "type": "IMCENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "ImmGetImeMenuItemsA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpImeParentMenu", + "type": "LPIMEMENUITEMINFOA" + }, + { + "name": "lpImeMenu", + "type": "LPIMEMENUITEMINFOA" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "ImmGetImeMenuItemsW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "lpImeParentMenu", + "type": "LPIMEMENUITEMINFOW" + }, + { + "name": "lpImeMenu", + "type": "LPIMEMENUITEMINFOW" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "ImmDisableTextFrameService": [ + { + "name": "idThread", + "type": "DWORD" + } + ], + "ImmRequestMessageA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "WPARAM" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "ImmRequestMessageW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "WPARAM" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/inputscope.json b/qiling/extensions/windows_sdk/inputscope.json new file mode 100644 index 000000000..906940df8 --- /dev/null +++ b/qiling/extensions/windows_sdk/inputscope.json @@ -0,0 +1,78 @@ +{ + "SetInputScope": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "inputscope", + "type": "InputScope" + } + ], + "SetInputScopes": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pInputScopes", + "type": "InputScope" + }, + { + "name": "cInputScopes", + "type": "UINT" + }, + { + "name": "ppszPhraseList", + "type": "PWSTR" + }, + { + "name": "cPhrases", + "type": "UINT" + }, + { + "name": "pszRegExp", + "type": "PWSTR" + }, + { + "name": "pszSRGS", + "type": "PWSTR" + } + ], + "SetInputScopeXML": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszXML", + "type": "PWSTR" + } + ], + "SetInputScopes2": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pInputScopes", + "type": "InputScope" + }, + { + "name": "cInputScopes", + "type": "UINT" + }, + { + "name": "pEnumString", + "type": "IEnumString" + }, + { + "name": "pszRegExp", + "type": "PWSTR" + }, + { + "name": "pszSRGS", + "type": "PWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/inspectable.json b/qiling/extensions/windows_sdk/inspectable.json new file mode 100644 index 000000000..7e0f77c47 --- /dev/null +++ b/qiling/extensions/windows_sdk/inspectable.json @@ -0,0 +1,50 @@ +{ + "HSTRING_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "HSTRING_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "HSTRING_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "HSTRING_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/interactioncontext.json b/qiling/extensions/windows_sdk/interactioncontext.json new file mode 100644 index 000000000..0c038fb29 --- /dev/null +++ b/qiling/extensions/windows_sdk/interactioncontext.json @@ -0,0 +1,276 @@ +{ + "CreateInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + } + ], + "DestroyInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + } + ], + "RegisterOutputCallbackInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "outputCallback", + "type": "INTERACTION_CONTEXT_OUTPUT_CALLBACK" + }, + { + "name": "clientData", + "type": "void" + } + ], + "SetInteractionConfigurationInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "configurationCount", + "type": "UINT32" + }, + { + "name": "configuration", + "type": "INTERACTION_CONTEXT_CONFIGURATION" + } + ], + "GetInteractionConfigurationInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "configurationCount", + "type": "UINT32" + }, + { + "name": "configuration", + "type": "INTERACTION_CONTEXT_CONFIGURATION" + } + ], + "SetPropertyInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "contextProperty", + "type": "INTERACTION_CONTEXT_PROPERTY" + }, + { + "name": "value", + "type": "UINT32" + } + ], + "GetPropertyInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "contextProperty", + "type": "INTERACTION_CONTEXT_PROPERTY" + }, + { + "name": "value", + "type": "UINT32" + } + ], + "SetInertiaParameterInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "inertiaParameter", + "type": "INERTIA_PARAMETER" + }, + { + "name": "value", + "type": "float" + } + ], + "GetInertiaParameterInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "inertiaParameter", + "type": "INERTIA_PARAMETER" + }, + { + "name": "value", + "type": "float" + } + ], + "SetCrossSlideParametersInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "parameterCount", + "type": "UINT32" + }, + { + "name": "crossSlideParameters", + "type": "CROSS_SLIDE_PARAMETER" + } + ], + "GetCrossSlideParameterInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "threshold", + "type": "CROSS_SLIDE_THRESHOLD" + }, + { + "name": "distance", + "type": "float" + } + ], + "SetMouseWheelParameterInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "parameter", + "type": "MOUSE_WHEEL_PARAMETER" + }, + { + "name": "value", + "type": "float" + } + ], + "GetMouseWheelParameterInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "parameter", + "type": "MOUSE_WHEEL_PARAMETER" + }, + { + "name": "value", + "type": "float" + } + ], + "ResetInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + } + ], + "GetStateInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + }, + { + "name": "state", + "type": "INTERACTION_STATE" + } + ], + "AddPointerInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "pointerId", + "type": "UINT32" + } + ], + "RemovePointerInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "pointerId", + "type": "UINT32" + } + ], + "ProcessPointerFramesInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "BufferPointerPacketsInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "ProcessBufferedPacketsInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + } + ], + "ProcessInertiaInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + } + ], + "StopInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + } + ], + "SetPivotInteractionContext": [ + { + "name": "interactionContext", + "type": "HINTERACTIONCONTEXT" + }, + { + "name": "x", + "type": "float" + }, + { + "name": "y", + "type": "float" + }, + { + "name": "radius", + "type": "float" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/interlockedapi.json b/qiling/extensions/windows_sdk/interlockedapi.json new file mode 100644 index 000000000..09c671f1e --- /dev/null +++ b/qiling/extensions/windows_sdk/interlockedapi.json @@ -0,0 +1,54 @@ +{ + "InitializeSListHead": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "InterlockedPopEntrySList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "InterlockedPushEntrySList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + }, + { + "name": "ListEntry", + "type": "PSLIST_ENTRY" + } + ], + "InterlockedPushListSListEx": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + }, + { + "name": "List", + "type": "PSLIST_ENTRY" + }, + { + "name": "ListEnd", + "type": "PSLIST_ENTRY" + }, + { + "name": "Count", + "type": "ULONG" + } + ], + "InterlockedFlushSList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "QueryDepthSList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/intshcut.json b/qiling/extensions/windows_sdk/intshcut.json new file mode 100644 index 000000000..0399bdaab --- /dev/null +++ b/qiling/extensions/windows_sdk/intshcut.json @@ -0,0 +1,140 @@ +{ + "TranslateURLA": [ + { + "name": "pcszURL", + "type": "PCSTR" + }, + { + "name": "dwInFlags", + "type": "DWORD" + }, + { + "name": "ppszTranslatedURL", + "type": "PSTR" + } + ], + "TranslateURLW": [ + { + "name": "pcszURL", + "type": "PCWSTR" + }, + { + "name": "dwInFlags", + "type": "DWORD" + }, + { + "name": "ppszTranslatedURL", + "type": "PWSTR" + } + ], + "URLAssociationDialogA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwInFlags", + "type": "DWORD" + }, + { + "name": "pcszFile", + "type": "PCSTR" + }, + { + "name": "pcszURL", + "type": "PCSTR" + }, + { + "name": "pszAppBuf", + "type": "PSTR" + }, + { + "name": "ucAppBufLen", + "type": "UINT" + } + ], + "URLAssociationDialogW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwInFlags", + "type": "DWORD" + }, + { + "name": "pcszFile", + "type": "PCWSTR" + }, + { + "name": "pcszURL", + "type": "PCWSTR" + }, + { + "name": "pszAppBuf", + "type": "PWSTR" + }, + { + "name": "ucAppBufLen", + "type": "UINT" + } + ], + "MIMEAssociationDialogA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwInFlags", + "type": "DWORD" + }, + { + "name": "pcszFile", + "type": "PCSTR" + }, + { + "name": "pcszMIMEContentType", + "type": "PCSTR" + }, + { + "name": "pszAppBuf", + "type": "PSTR" + }, + { + "name": "ucAppBufLen", + "type": "UINT" + } + ], + "MIMEAssociationDialogW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwInFlags", + "type": "DWORD" + }, + { + "name": "pcszFile", + "type": "PCWSTR" + }, + { + "name": "pcszMIMEContentType", + "type": "PCWSTR" + }, + { + "name": "pszAppBuf", + "type": "PWSTR" + }, + { + "name": "ucAppBufLen", + "type": "UINT" + } + ], + "InetIsOffline": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ioapiset.json b/qiling/extensions/windows_sdk/ioapiset.json new file mode 100644 index 000000000..22ea80cd9 --- /dev/null +++ b/qiling/extensions/windows_sdk/ioapiset.json @@ -0,0 +1,182 @@ +{ + "CreateIoCompletionPort": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "ExistingCompletionPort", + "type": "HANDLE" + }, + { + "name": "CompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "NumberOfConcurrentThreads", + "type": "DWORD" + } + ], + "GetQueuedCompletionStatus": [ + { + "name": "CompletionPort", + "type": "HANDLE" + }, + { + "name": "lpNumberOfBytesTransferred", + "type": "LPDWORD" + }, + { + "name": "lpCompletionKey", + "type": "PULONG_PTR" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "GetQueuedCompletionStatusEx": [ + { + "name": "CompletionPort", + "type": "HANDLE" + }, + { + "name": "lpCompletionPortEntries", + "type": "LPOVERLAPPED_ENTRY" + }, + { + "name": "ulCount", + "type": "ULONG" + }, + { + "name": "ulNumEntriesRemoved", + "type": "PULONG" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "fAlertable", + "type": "BOOL" + } + ], + "PostQueuedCompletionStatus": [ + { + "name": "CompletionPort", + "type": "HANDLE" + }, + { + "name": "dwNumberOfBytesTransferred", + "type": "DWORD" + }, + { + "name": "dwCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "DeviceIoControl": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwIoControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetOverlappedResult": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpNumberOfBytesTransferred", + "type": "LPDWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "CancelIoEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "CancelIo": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "GetOverlappedResultEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpNumberOfBytesTransferred", + "type": "LPDWORD" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "CancelSynchronousIo": [ + { + "name": "hThread", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ip2string.json b/qiling/extensions/windows_sdk/ip2string.json new file mode 100644 index 000000000..c1ae5ba03 --- /dev/null +++ b/qiling/extensions/windows_sdk/ip2string.json @@ -0,0 +1,278 @@ +{ + "RtlIpv4AddressToStringA": [ + { + "name": "Addr", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "S", + "type": "PSTR" + } + ], + "RtlIpv6AddressToStringA": [ + { + "name": "Addr", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "S", + "type": "PSTR" + } + ], + "RtlEthernetAddressToStringA": [ + { + "name": "Addr", + "type": "DL_EUI48" + }, + { + "name": "S", + "type": "PSTR" + } + ], + "RtlIpv4AddressToStringW": [ + { + "name": "Addr", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "S", + "type": "PWSTR" + } + ], + "RtlIpv6AddressToStringW": [ + { + "name": "Addr", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "S", + "type": "PWSTR" + } + ], + "RtlEthernetAddressToStringW": [ + { + "name": "Addr", + "type": "DL_EUI48" + }, + { + "name": "S", + "type": "PWSTR" + } + ], + "RtlIpv4AddressToStringExW": [ + { + "name": "Address", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Port", + "type": "USHORT" + }, + { + "name": "AddressString", + "type": "PWSTR" + }, + { + "name": "AddressStringLength", + "type": "PULONG" + } + ], + "RtlIpv6AddressToStringExW": [ + { + "name": "Address", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "ScopeId", + "type": "ULONG" + }, + { + "name": "Port", + "type": "USHORT" + }, + { + "name": "AddressString", + "type": "PWSTR" + }, + { + "name": "AddressStringLength", + "type": "PULONG" + } + ], + "RtlIpv4StringToAddressA": [ + { + "name": "S", + "type": "PCSTR" + }, + { + "name": "Strict", + "type": "BOOLEAN" + }, + { + "name": "Terminator", + "type": "PCSTR" + }, + { + "name": "Addr", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlIpv6StringToAddressA": [ + { + "name": "S", + "type": "PCSTR" + }, + { + "name": "Terminator", + "type": "PCSTR" + }, + { + "name": "Addr", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlEthernetStringToAddressA": [ + { + "name": "S", + "type": "PCSTR" + }, + { + "name": "Terminator", + "type": "PCSTR" + }, + { + "name": "Addr", + "type": "DL_EUI48" + } + ], + "RtlIpv4StringToAddressW": [ + { + "name": "S", + "type": "PCWSTR" + }, + { + "name": "Strict", + "type": "BOOLEAN" + }, + { + "name": "Terminator", + "type": "LPCWSTR" + }, + { + "name": "Addr", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlIpv6StringToAddressW": [ + { + "name": "S", + "type": "PCWSTR" + }, + { + "name": "Terminator", + "type": "PCWSTR" + }, + { + "name": "Addr", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlEthernetStringToAddressW": [ + { + "name": "S", + "type": "PCWSTR" + }, + { + "name": "Terminator", + "type": "LPCWSTR" + }, + { + "name": "Addr", + "type": "DL_EUI48" + } + ], + "RtlIpv4StringToAddressExW": [ + { + "name": "AddressString", + "type": "PCWSTR" + }, + { + "name": "Strict", + "type": "BOOLEAN" + }, + { + "name": "Address", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Port", + "type": "PUSHORT" + } + ], + "RtlIpv6StringToAddressExW": [ + { + "name": "AddressString", + "type": "PCWSTR" + }, + { + "name": "Address", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "ScopeId", + "type": "PULONG" + }, + { + "name": "Port", + "type": "PUSHORT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/iphlpapi.json b/qiling/extensions/windows_sdk/iphlpapi.json new file mode 100644 index 000000000..a32112a05 --- /dev/null +++ b/qiling/extensions/windows_sdk/iphlpapi.json @@ -0,0 +1,806 @@ +{ + "GetNumberOfInterfaces": [ + { + "name": "pdwNumIf", + "type": "PDWORD" + } + ], + "GetIfEntry": [ + { + "name": "pIfRow", + "type": "PMIB_IFROW" + } + ], + "GetIfTable": [ + { + "name": "pIfTable", + "type": "PMIB_IFTABLE" + }, + { + "name": "pdwSize", + "type": "PULONG" + }, + { + "name": "bOrder", + "type": "BOOL" + } + ], + "GetIpAddrTable": [ + { + "name": "pIpAddrTable", + "type": "PMIB_IPADDRTABLE" + }, + { + "name": "pdwSize", + "type": "PULONG" + }, + { + "name": "bOrder", + "type": "BOOL" + } + ], + "GetIpNetTable": [ + { + "name": "IpNetTable", + "type": "PMIB_IPNETTABLE" + }, + { + "name": "SizePointer", + "type": "PULONG" + }, + { + "name": "Order", + "type": "BOOL" + } + ], + "GetIpForwardTable": [ + { + "name": "pIpForwardTable", + "type": "PMIB_IPFORWARDTABLE" + }, + { + "name": "pdwSize", + "type": "PULONG" + }, + { + "name": "bOrder", + "type": "BOOL" + } + ], + "GetTcpTable": [ + { + "name": "TcpTable", + "type": "PMIB_TCPTABLE" + }, + { + "name": "SizePointer", + "type": "PULONG" + }, + { + "name": "Order", + "type": "BOOL" + } + ], + "GetExtendedTcpTable": [ + { + "name": "pTcpTable", + "type": "PVOID" + }, + { + "name": "pdwSize", + "type": "PDWORD" + }, + { + "name": "bOrder", + "type": "BOOL" + }, + { + "name": "ulAf", + "type": "ULONG" + }, + { + "name": "TableClass", + "type": "TCP_TABLE_CLASS" + }, + { + "name": "Reserved", + "type": "ULONG" + } + ], + "GetOwnerModuleFromTcpEntry": [ + { + "name": "pTcpEntry", + "type": "PMIB_TCPROW_OWNER_MODULE" + }, + { + "name": "Class", + "type": "TCPIP_OWNER_MODULE_INFO_CLASS" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "pdwSize", + "type": "PDWORD" + } + ], + "GetUdpTable": [ + { + "name": "UdpTable", + "type": "PMIB_UDPTABLE" + }, + { + "name": "SizePointer", + "type": "PULONG" + }, + { + "name": "Order", + "type": "BOOL" + } + ], + "GetExtendedUdpTable": [ + { + "name": "pUdpTable", + "type": "PVOID" + }, + { + "name": "pdwSize", + "type": "PDWORD" + }, + { + "name": "bOrder", + "type": "BOOL" + }, + { + "name": "ulAf", + "type": "ULONG" + }, + { + "name": "TableClass", + "type": "UDP_TABLE_CLASS" + }, + { + "name": "Reserved", + "type": "ULONG" + } + ], + "GetOwnerModuleFromUdpEntry": [ + { + "name": "pUdpEntry", + "type": "PMIB_UDPROW_OWNER_MODULE" + }, + { + "name": "Class", + "type": "TCPIP_OWNER_MODULE_INFO_CLASS" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "pdwSize", + "type": "PDWORD" + } + ], + "GetTcpTable2": [ + { + "name": "TcpTable", + "type": "PMIB_TCPTABLE2" + }, + { + "name": "SizePointer", + "type": "PULONG" + }, + { + "name": "Order", + "type": "BOOL" + } + ], + "GetIpStatistics": [ + { + "name": "Statistics", + "type": "PMIB_IPSTATS" + } + ], + "GetIcmpStatistics": [ + { + "name": "Statistics", + "type": "PMIB_ICMP" + } + ], + "GetTcpStatistics": [ + { + "name": "Statistics", + "type": "PMIB_TCPSTATS" + } + ], + "GetUdpStatistics": [ + { + "name": "Stats", + "type": "PMIB_UDPSTATS" + } + ], + "SetIpStatisticsEx": [ + { + "name": "Statistics", + "type": "PMIB_IPSTATS" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "GetIpStatisticsEx": [ + { + "name": "Statistics", + "type": "PMIB_IPSTATS" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "GetIcmpStatisticsEx": [ + { + "name": "Statistics", + "type": "PMIB_ICMP_EX" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "GetTcpStatisticsEx": [ + { + "name": "Statistics", + "type": "PMIB_TCPSTATS" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "GetUdpStatisticsEx": [ + { + "name": "Statistics", + "type": "PMIB_UDPSTATS" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "GetTcpStatisticsEx2": [ + { + "name": "Statistics", + "type": "PMIB_TCPSTATS2" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "GetUdpStatisticsEx2": [ + { + "name": "Statistics", + "type": "PMIB_UDPSTATS2" + }, + { + "name": "Family", + "type": "ULONG" + } + ], + "SetIfEntry": [ + { + "name": "pIfRow", + "type": "PMIB_IFROW" + } + ], + "CreateIpForwardEntry": [ + { + "name": "pRoute", + "type": "PMIB_IPFORWARDROW" + } + ], + "SetIpForwardEntry": [ + { + "name": "pRoute", + "type": "PMIB_IPFORWARDROW" + } + ], + "DeleteIpForwardEntry": [ + { + "name": "pRoute", + "type": "PMIB_IPFORWARDROW" + } + ], + "SetIpStatistics": [ + { + "name": "pIpStats", + "type": "PMIB_IPSTATS" + } + ], + "SetIpTTL": [ + { + "name": "nTTL", + "type": "UINT" + } + ], + "CreateIpNetEntry": [ + { + "name": "pArpEntry", + "type": "PMIB_IPNETROW" + } + ], + "SetIpNetEntry": [ + { + "name": "pArpEntry", + "type": "PMIB_IPNETROW" + } + ], + "DeleteIpNetEntry": [ + { + "name": "pArpEntry", + "type": "PMIB_IPNETROW" + } + ], + "FlushIpNetTable": [ + { + "name": "dwIfIndex", + "type": "DWORD" + } + ], + "CreateProxyArpEntry": [ + { + "name": "dwAddress", + "type": "DWORD" + }, + { + "name": "dwMask", + "type": "DWORD" + }, + { + "name": "dwIfIndex", + "type": "DWORD" + } + ], + "DeleteProxyArpEntry": [ + { + "name": "dwAddress", + "type": "DWORD" + }, + { + "name": "dwMask", + "type": "DWORD" + }, + { + "name": "dwIfIndex", + "type": "DWORD" + } + ], + "SetTcpEntry": [ + { + "name": "pTcpRow", + "type": "PMIB_TCPROW" + } + ], + "GetInterfaceInfo": [ + { + "name": "pIfTable", + "type": "PIP_INTERFACE_INFO" + }, + { + "name": "dwOutBufLen", + "type": "PULONG" + } + ], + "GetUniDirectionalAdapterInfo": [ + { + "name": "pIPIfInfo", + "type": "PIP_UNIDIRECTIONAL_ADAPTER_ADDRESS" + }, + { + "name": "dwOutBufLen", + "type": "PULONG" + } + ], + "NhpAllocateAndGetInterfaceInfoFromStack": [ + { + "name": "ppTable", + "type": "IP_INTERFACE_NAME_INFO" + }, + { + "name": "pdwCount", + "type": "PDWORD" + }, + { + "name": "bOrder", + "type": "BOOL" + }, + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetBestInterface": [ + { + "name": "dwDestAddr", + "type": "IPAddr" + }, + { + "name": "pdwBestIfIndex", + "type": "PDWORD" + } + ], + "GetBestInterfaceEx": [ + { + "name": "pDestAddr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "pdwBestIfIndex", + "type": "PDWORD" + } + ], + "GetBestRoute": [ + { + "name": "dwDestAddr", + "type": "DWORD" + }, + { + "name": "dwSourceAddr", + "type": "DWORD" + }, + { + "name": "pBestRoute", + "type": "PMIB_IPFORWARDROW" + } + ], + "NotifyAddrChange": [ + { + "name": "Handle", + "type": "PHANDLE" + }, + { + "name": "overlapped", + "type": "LPOVERLAPPED" + } + ], + "NotifyRouteChange": [ + { + "name": "Handle", + "type": "PHANDLE" + }, + { + "name": "overlapped", + "type": "LPOVERLAPPED" + } + ], + "CancelIPChangeNotify": [ + { + "name": "notifyOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetAdapterIndex": [ + { + "name": "AdapterName", + "type": "LPWSTR" + }, + { + "name": "IfIndex", + "type": "PULONG" + } + ], + "AddIPAddress": [ + { + "name": "Address", + "type": "IPAddr" + }, + { + "name": "IpMask", + "type": "IPMask" + }, + { + "name": "IfIndex", + "type": "DWORD" + }, + { + "name": "NTEContext", + "type": "PULONG" + }, + { + "name": "NTEInstance", + "type": "PULONG" + } + ], + "DeleteIPAddress": [ + { + "name": "NTEContext", + "type": "ULONG" + } + ], + "GetNetworkParams": [ + { + "name": "pFixedInfo", + "type": "PFIXED_INFO" + }, + { + "name": "pOutBufLen", + "type": "PULONG" + } + ], + "GetAdaptersInfo": [ + { + "name": "AdapterInfo", + "type": "PIP_ADAPTER_INFO" + }, + { + "name": "SizePointer", + "type": "PULONG" + } + ], + "GetAdapterOrderMap": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetPerAdapterInfo": [ + { + "name": "IfIndex", + "type": "ULONG" + }, + { + "name": "pPerAdapterInfo", + "type": "PIP_PER_ADAPTER_INFO" + }, + { + "name": "pOutBufLen", + "type": "PULONG" + } + ], + "GetInterfaceCurrentTimestampCapabilities": [ + { + "name": "InterfaceLuid", + "type": "NET_LUID" + }, + { + "name": "TimestampCapabilites", + "type": "PINTERFACE_TIMESTAMP_CAPABILITIES" + } + ], + "GetInterfaceHardwareTimestampCapabilities": [ + { + "name": "InterfaceLuid", + "type": "NET_LUID" + }, + { + "name": "TimestampCapabilites", + "type": "PINTERFACE_TIMESTAMP_CAPABILITIES" + } + ], + "CaptureInterfaceHardwareCrossTimestamp": [ + { + "name": "InterfaceLuid", + "type": "NET_LUID" + }, + { + "name": "CrossTimestamp", + "type": "PINTERFACE_HARDWARE_CROSSTIMESTAMP" + } + ], + "NotifyIfTimestampConfigChange": [ + { + "name": "CallerContext", + "type": "PVOID" + }, + { + "name": "Callback", + "type": "PINTERFACE_TIMESTAMP_CONFIG_CHANGE_CALLBACK" + }, + { + "name": "NotificationHandle", + "type": "HIFTIMESTAMPCHANGE" + } + ], + "CancelIfTimestampConfigChange": [ + { + "name": "NotificationHandle", + "type": "HIFTIMESTAMPCHANGE" + } + ], + "IpReleaseAddress": [ + { + "name": "AdapterInfo", + "type": "PIP_ADAPTER_INDEX_MAP" + } + ], + "IpRenewAddress": [ + { + "name": "AdapterInfo", + "type": "PIP_ADAPTER_INDEX_MAP" + } + ], + "SendARP": [ + { + "name": "DestIP", + "type": "IPAddr" + }, + { + "name": "SrcIP", + "type": "IPAddr" + }, + { + "name": "pMacAddr", + "type": "PVOID" + }, + { + "name": "PhyAddrLen", + "type": "PULONG" + } + ], + "GetRTTAndHopCount": [ + { + "name": "DestIpAddress", + "type": "IPAddr" + }, + { + "name": "HopCount", + "type": "PULONG" + }, + { + "name": "MaxHops", + "type": "ULONG" + }, + { + "name": "RTT", + "type": "PULONG" + } + ], + "GetFriendlyIfIndex": [ + { + "name": "IfIndex", + "type": "DWORD" + } + ], + "EnableRouter": [ + { + "name": "pHandle", + "type": "HANDLE" + }, + { + "name": "pOverlapped", + "type": "OVERLAPPED" + } + ], + "UnenableRouter": [ + { + "name": "pOverlapped", + "type": "OVERLAPPED" + }, + { + "name": "lpdwEnableCount", + "type": "LPDWORD" + } + ], + "DisableMediaSense": [ + { + "name": "pHandle", + "type": "HANDLE" + }, + { + "name": "pOverLapped", + "type": "OVERLAPPED" + } + ], + "RestoreMediaSense": [ + { + "name": "pOverlapped", + "type": "OVERLAPPED" + }, + { + "name": "lpdwEnableCount", + "type": "LPDWORD" + } + ], + "GetIpErrorString": [ + { + "name": "ErrorCode", + "type": "IP_STATUS" + }, + { + "name": "Buffer", + "type": "PWSTR" + }, + { + "name": "Size", + "type": "PDWORD" + } + ], + "CreatePersistentTcpPortReservation": [ + { + "name": "StartPort", + "type": "USHORT" + }, + { + "name": "NumberOfPorts", + "type": "USHORT" + }, + { + "name": "Token", + "type": "PULONG64" + } + ], + "CreatePersistentUdpPortReservation": [ + { + "name": "StartPort", + "type": "USHORT" + }, + { + "name": "NumberOfPorts", + "type": "USHORT" + }, + { + "name": "Token", + "type": "PULONG64" + } + ], + "DeletePersistentTcpPortReservation": [ + { + "name": "StartPort", + "type": "USHORT" + }, + { + "name": "NumberOfPorts", + "type": "USHORT" + } + ], + "DeletePersistentUdpPortReservation": [ + { + "name": "StartPort", + "type": "USHORT" + }, + { + "name": "NumberOfPorts", + "type": "USHORT" + } + ], + "LookupPersistentTcpPortReservation": [ + { + "name": "StartPort", + "type": "USHORT" + }, + { + "name": "NumberOfPorts", + "type": "USHORT" + }, + { + "name": "Token", + "type": "PULONG64" + } + ], + "LookupPersistentUdpPortReservation": [ + { + "name": "StartPort", + "type": "USHORT" + }, + { + "name": "NumberOfPorts", + "type": "USHORT" + }, + { + "name": "Token", + "type": "PULONG64" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/jobapi.json b/qiling/extensions/windows_sdk/jobapi.json new file mode 100644 index 000000000..25c18cf32 --- /dev/null +++ b/qiling/extensions/windows_sdk/jobapi.json @@ -0,0 +1,16 @@ +{ + "IsProcessInJob": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "JobHandle", + "type": "HANDLE" + }, + { + "name": "Result", + "type": "PBOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/jobapi2.json b/qiling/extensions/windows_sdk/jobapi2.json new file mode 100644 index 000000000..f132f68e7 --- /dev/null +++ b/qiling/extensions/windows_sdk/jobapi2.json @@ -0,0 +1,96 @@ +{ + "FreeMemoryJobObject": [ + { + "name": "Buffer", + "type": "void" + } + ], + "AssignProcessToJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "TerminateJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "uExitCode", + "type": "UINT" + } + ], + "SetInformationJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "JobObjectInformationClass", + "type": "JOBOBJECTINFOCLASS" + }, + { + "name": "lpJobObjectInformation", + "type": "LPVOID" + }, + { + "name": "cbJobObjectInformationLength", + "type": "DWORD" + } + ], + "SetIoRateControlInformationJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "IoRateControlInfo", + "type": "JOBOBJECT_IO_RATE_CONTROL_INFORMATION" + } + ], + "QueryInformationJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "JobObjectInformationClass", + "type": "JOBOBJECTINFOCLASS" + }, + { + "name": "lpJobObjectInformation", + "type": "LPVOID" + }, + { + "name": "cbJobObjectInformationLength", + "type": "DWORD" + }, + { + "name": "lpReturnLength", + "type": "LPDWORD" + } + ], + "QueryIoRateControlInformationJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "InfoBlocks", + "type": "JOBOBJECT_IO_RATE_CONTROL_INFORMATION" + }, + { + "name": "InfoBlockCount", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/joystickapi.json b/qiling/extensions/windows_sdk/joystickapi.json new file mode 100644 index 000000000..ceec35667 --- /dev/null +++ b/qiling/extensions/windows_sdk/joystickapi.json @@ -0,0 +1,92 @@ +{ + "joyGetPosEx": [ + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "pji", + "type": "LPJOYINFOEX" + } + ], + "joyGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "joyGetDevCapsW": [ + { + "name": "uJoyID", + "type": "UINT_PTR" + }, + { + "name": "pjc", + "type": "LPJOYCAPSW" + }, + { + "name": "cbjc", + "type": "UINT" + } + ], + "joyGetPos": [ + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "pji", + "type": "LPJOYINFO" + } + ], + "joyGetThreshold": [ + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "puThreshold", + "type": "LPUINT" + } + ], + "joyReleaseCapture": [ + { + "name": "uJoyID", + "type": "UINT" + } + ], + "joySetCapture": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "uPeriod", + "type": "UINT" + }, + { + "name": "fChanged", + "type": "BOOL" + } + ], + "joySetThreshold": [ + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "uThreshold", + "type": "UINT" + } + ], + "joyConfigChanged": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ktmw32.json b/qiling/extensions/windows_sdk/ktmw32.json new file mode 100644 index 000000000..00e40e86f --- /dev/null +++ b/qiling/extensions/windows_sdk/ktmw32.json @@ -0,0 +1,512 @@ +{ + "CreateTransaction": [ + { + "name": "lpTransactionAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "UOW", + "type": "LPGUID" + }, + { + "name": "CreateOptions", + "type": "DWORD" + }, + { + "name": "IsolationLevel", + "type": "DWORD" + }, + { + "name": "IsolationFlags", + "type": "DWORD" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "Description", + "type": "LPWSTR" + } + ], + "OpenTransaction": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "TransactionId", + "type": "LPGUID" + } + ], + "CommitTransaction": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + } + ], + "CommitTransactionAsync": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + } + ], + "RollbackTransaction": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + } + ], + "RollbackTransactionAsync": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + } + ], + "GetTransactionId": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + }, + { + "name": "TransactionId", + "type": "LPGUID" + } + ], + "GetTransactionInformation": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + }, + { + "name": "Outcome", + "type": "PDWORD" + }, + { + "name": "IsolationLevel", + "type": "PDWORD" + }, + { + "name": "IsolationFlags", + "type": "PDWORD" + }, + { + "name": "Timeout", + "type": "PDWORD" + }, + { + "name": "BufferLength", + "type": "DWORD" + }, + { + "name": "Description", + "type": "LPWSTR" + } + ], + "SetTransactionInformation": [ + { + "name": "TransactionHandle", + "type": "HANDLE" + }, + { + "name": "IsolationLevel", + "type": "DWORD" + }, + { + "name": "IsolationFlags", + "type": "DWORD" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "Description", + "type": "LPWSTR" + } + ], + "CreateTransactionManager": [ + { + "name": "lpTransactionAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "LogFileName", + "type": "LPWSTR" + }, + { + "name": "CreateOptions", + "type": "ULONG" + }, + { + "name": "CommitStrength", + "type": "ULONG" + } + ], + "OpenTransactionManager": [ + { + "name": "LogFileName", + "type": "LPWSTR" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "OpenOptions", + "type": "ULONG" + } + ], + "OpenTransactionManagerById": [ + { + "name": "TransactionManagerId", + "type": "LPGUID" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "OpenOptions", + "type": "ULONG" + } + ], + "RenameTransactionManager": [ + { + "name": "LogFileName", + "type": "LPWSTR" + }, + { + "name": "ExistingTransactionManagerGuid", + "type": "LPGUID" + } + ], + "RollforwardTransactionManager": [ + { + "name": "TransactionManagerHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "RecoverTransactionManager": [ + { + "name": "TransactionManagerHandle", + "type": "HANDLE" + } + ], + "GetCurrentClockTransactionManager": [ + { + "name": "TransactionManagerHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "GetTransactionManagerId": [ + { + "name": "TransactionManagerHandle", + "type": "HANDLE" + }, + { + "name": "TransactionManagerId", + "type": "LPGUID" + } + ], + "CreateResourceManager": [ + { + "name": "lpResourceManagerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ResourceManagerId", + "type": "LPGUID" + }, + { + "name": "CreateOptions", + "type": "DWORD" + }, + { + "name": "TmHandle", + "type": "HANDLE" + }, + { + "name": "Description", + "type": "LPWSTR" + } + ], + "OpenResourceManager": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "TmHandle", + "type": "HANDLE" + }, + { + "name": "ResourceManagerId", + "type": "LPGUID" + } + ], + "RecoverResourceManager": [ + { + "name": "ResourceManagerHandle", + "type": "HANDLE" + } + ], + "GetNotificationResourceManager": [ + { + "name": "ResourceManagerHandle", + "type": "HANDLE" + }, + { + "name": "TransactionNotification", + "type": "PTRANSACTION_NOTIFICATION" + }, + { + "name": "NotificationLength", + "type": "ULONG" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "GetNotificationResourceManagerAsync": [ + { + "name": "ResourceManagerHandle", + "type": "HANDLE" + }, + { + "name": "TransactionNotification", + "type": "PTRANSACTION_NOTIFICATION" + }, + { + "name": "TransactionNotificationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "SetResourceManagerCompletionPort": [ + { + "name": "ResourceManagerHandle", + "type": "HANDLE" + }, + { + "name": "IoCompletionPortHandle", + "type": "HANDLE" + }, + { + "name": "CompletionKey", + "type": "ULONG_PTR" + } + ], + "CreateEnlistment": [ + { + "name": "lpEnlistmentAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ResourceManagerHandle", + "type": "HANDLE" + }, + { + "name": "TransactionHandle", + "type": "HANDLE" + }, + { + "name": "NotificationMask", + "type": "NOTIFICATION_MASK" + }, + { + "name": "CreateOptions", + "type": "DWORD" + }, + { + "name": "EnlistmentKey", + "type": "PVOID" + } + ], + "OpenEnlistment": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "ResourceManagerHandle", + "type": "HANDLE" + }, + { + "name": "EnlistmentId", + "type": "LPGUID" + } + ], + "RecoverEnlistment": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "EnlistmentKey", + "type": "PVOID" + } + ], + "GetEnlistmentRecoveryInformation": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "BufferSize", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "BufferUsed", + "type": "PULONG" + } + ], + "GetEnlistmentId": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "EnlistmentId", + "type": "LPGUID" + } + ], + "SetEnlistmentRecoveryInformation": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "BufferSize", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "PrepareEnlistment": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "PrePrepareEnlistment": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "CommitEnlistment": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "RollbackEnlistment": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "PrePrepareComplete": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "PrepareComplete": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "ReadOnlyEnlistment": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "CommitComplete": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "RollbackComplete": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ], + "SinglePhaseReject": [ + { + "name": "EnlistmentHandle", + "type": "HANDLE" + }, + { + "name": "TmVirtualClock", + "type": "PLARGE_INTEGER" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/libloaderapi.json b/qiling/extensions/windows_sdk/libloaderapi.json new file mode 100644 index 000000000..35e1e6ac9 --- /dev/null +++ b/qiling/extensions/windows_sdk/libloaderapi.json @@ -0,0 +1,374 @@ +{ + "DisableThreadLibraryCalls": [ + { + "name": "hLibModule", + "type": "HMODULE" + } + ], + "FindStringOrdinal": [ + { + "name": "dwFindStringOrdinalFlags", + "type": "DWORD" + }, + { + "name": "lpStringSource", + "type": "LPCWSTR" + }, + { + "name": "cchSource", + "type": "int" + }, + { + "name": "lpStringValue", + "type": "LPCWSTR" + }, + { + "name": "cchValue", + "type": "int" + }, + { + "name": "bIgnoreCase", + "type": "BOOL" + } + ], + "FreeLibrary": [ + { + "name": "hLibModule", + "type": "HMODULE" + } + ], + "FreeLibraryAndExitThread": [ + { + "name": "hLibModule", + "type": "HMODULE" + }, + { + "name": "dwExitCode", + "type": "DWORD" + } + ], + "FreeResource": [ + { + "name": "hResData", + "type": "HGLOBAL" + } + ], + "GetModuleFileNameA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetModuleFileNameW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpFilename", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetModuleHandleA": [ + { + "name": "lpModuleName", + "type": "LPCSTR" + } + ], + "GetModuleHandleW": [ + { + "name": "lpModuleName", + "type": "LPCWSTR" + } + ], + "GetModuleHandleExA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpModuleName", + "type": "LPCSTR" + }, + { + "name": "phModule", + "type": "HMODULE" + } + ], + "GetModuleHandleExW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpModuleName", + "type": "LPCWSTR" + }, + { + "name": "phModule", + "type": "HMODULE" + } + ], + "GetProcAddress": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpProcName", + "type": "LPCSTR" + } + ], + "LoadLibraryExA": [ + { + "name": "lpLibFileName", + "type": "LPCSTR" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "LoadLibraryExW": [ + { + "name": "lpLibFileName", + "type": "LPCWSTR" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "LoadResource": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "hResInfo", + "type": "HRSRC" + } + ], + "LockResource": [ + { + "name": "hResData", + "type": "HGLOBAL" + } + ], + "SizeofResource": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "hResInfo", + "type": "HRSRC" + } + ], + "AddDllDirectory": [ + { + "name": "NewDirectory", + "type": "PCWSTR" + } + ], + "RemoveDllDirectory": [ + { + "name": "Cookie", + "type": "DLL_DIRECTORY_COOKIE" + } + ], + "SetDefaultDllDirectories": [ + { + "name": "DirectoryFlags", + "type": "DWORD" + } + ], + "EnumResourceLanguagesExA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESLANGPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceLanguagesExW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESLANGPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceNamesExA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESNAMEPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceNamesExW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESNAMEPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceTypesExA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESTYPEPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceTypesExW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESTYPEPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "LoadLibraryA": [ + { + "name": "lpLibFileName", + "type": "LPCSTR" + } + ], + "LoadLibraryW": [ + { + "name": "lpLibFileName", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/libloaderapi2.json b/qiling/extensions/windows_sdk/libloaderapi2.json new file mode 100644 index 000000000..61b3b86a0 --- /dev/null +++ b/qiling/extensions/windows_sdk/libloaderapi2.json @@ -0,0 +1,20 @@ +{ + "QueryOptionalDelayLoadedAPI": [ + { + "name": "hParentModule", + "type": "HMODULE" + }, + { + "name": "lpDllName", + "type": "LPCSTR" + }, + { + "name": "lpProcName", + "type": "LPCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lmaccess.json b/qiling/extensions/windows_sdk/lmaccess.json new file mode 100644 index 000000000..03e936e43 --- /dev/null +++ b/qiling/extensions/windows_sdk/lmaccess.json @@ -0,0 +1,952 @@ +{ + "NetUserAdd": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetUserEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "filter", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "PDWORD" + } + ], + "NetUserGetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetUserSetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetUserDel": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + } + ], + "NetUserGetGroups": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + } + ], + "NetUserSetGroups": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "num_entries", + "type": "DWORD" + } + ], + "NetUserGetLocalGroups": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + } + ], + "NetUserModalsGet": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetUserModalsSet": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetUserChangePassword": [ + { + "name": "domainname", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "oldpassword", + "type": "LPCWSTR" + }, + { + "name": "newpassword", + "type": "LPCWSTR" + } + ], + "NetGroupAdd": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetGroupAddUser": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "GroupName", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + } + ], + "NetGroupEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "PDWORD_PTR" + } + ], + "NetGroupGetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetGroupSetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetGroupDel": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + } + ], + "NetGroupDelUser": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "GroupName", + "type": "LPCWSTR" + }, + { + "name": "Username", + "type": "LPCWSTR" + } + ], + "NetGroupGetUsers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "ResumeHandle", + "type": "PDWORD_PTR" + } + ], + "NetGroupSetUsers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "totalentries", + "type": "DWORD" + } + ], + "NetLocalGroupAdd": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetLocalGroupEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resumehandle", + "type": "PDWORD_PTR" + } + ], + "NetLocalGroupGetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetLocalGroupSetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetLocalGroupDel": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + } + ], + "NetLocalGroupGetMembers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "localgroupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resumehandle", + "type": "PDWORD_PTR" + } + ], + "NetLocalGroupSetMembers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "totalentries", + "type": "DWORD" + } + ], + "NetLocalGroupAddMembers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "totalentries", + "type": "DWORD" + } + ], + "NetLocalGroupDelMembers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "totalentries", + "type": "DWORD" + } + ], + "NetQueryDisplayInformation": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "Level", + "type": "DWORD" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "EntriesRequested", + "type": "DWORD" + }, + { + "name": "PreferredMaximumLength", + "type": "DWORD" + }, + { + "name": "ReturnedEntryCount", + "type": "LPDWORD" + }, + { + "name": "SortedBuffer", + "type": "PVOID" + } + ], + "NetGetDisplayInformationIndex": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "Level", + "type": "DWORD" + }, + { + "name": "Prefix", + "type": "LPCWSTR" + }, + { + "name": "Index", + "type": "LPDWORD" + } + ], + "NetAccessAdd": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetAccessEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "BasePath", + "type": "LPCWSTR" + }, + { + "name": "Recursive", + "type": "DWORD" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetAccessGetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "resource", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetAccessSetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "resource", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetAccessDel": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "resource", + "type": "LPCWSTR" + } + ], + "NetAccessGetUserPerms": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "UGname", + "type": "LPCWSTR" + }, + { + "name": "resource", + "type": "LPCWSTR" + }, + { + "name": "Perms", + "type": "LPDWORD" + } + ], + "NetValidatePasswordPolicy": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "Qualifier", + "type": "LPVOID" + }, + { + "name": "ValidationType", + "type": "NET_VALIDATE_PASSWORD_TYPE" + }, + { + "name": "InputArg", + "type": "LPVOID" + }, + { + "name": "OutputArg", + "type": "LPVOID" + } + ], + "NetValidatePasswordPolicyFree": [ + { + "name": "OutputArg", + "type": "LPVOID" + } + ], + "NetGetDCName": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "DomainName", + "type": "LPCWSTR" + }, + { + "name": "Buffer", + "type": "LPBYTE" + } + ], + "NetGetAnyDCName": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "DomainName", + "type": "LPCWSTR" + }, + { + "name": "Buffer", + "type": "LPBYTE" + } + ], + "I_NetLogonControl2": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "FunctionCode", + "type": "DWORD" + }, + { + "name": "QueryLevel", + "type": "DWORD" + }, + { + "name": "Data", + "type": "LPBYTE" + }, + { + "name": "Buffer", + "type": "LPBYTE" + } + ], + "NetAddServiceAccount": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "AccountName", + "type": "LPWSTR" + }, + { + "name": "Password", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "NetRemoveServiceAccount": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "AccountName", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "NetEnumerateServiceAccounts": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "AccountsCount", + "type": "DWORD" + }, + { + "name": "Accounts", + "type": "PZPWSTR" + } + ], + "NetIsServiceAccount": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "AccountName", + "type": "LPWSTR" + }, + { + "name": "IsService", + "type": "BOOL" + } + ], + "NetQueryServiceAccount": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "AccountName", + "type": "LPWSTR" + }, + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "PBYTE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lmserver.json b/qiling/extensions/windows_sdk/lmserver.json new file mode 100644 index 000000000..508f13ede --- /dev/null +++ b/qiling/extensions/windows_sdk/lmserver.json @@ -0,0 +1,216 @@ +{ + "NetServerEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "servertype", + "type": "DWORD" + }, + { + "name": "domain", + "type": "LPCWSTR" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetServerGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetServerSetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "ParmError", + "type": "LPDWORD" + } + ], + "NetServerDiskEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetServerComputerNameAdd": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "EmulatedDomainName", + "type": "LPWSTR" + }, + { + "name": "EmulatedServerName", + "type": "LPWSTR" + } + ], + "NetServerComputerNameDel": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "EmulatedServerName", + "type": "LPWSTR" + } + ], + "NetServerTransportAdd": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetServerTransportAddEx": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetServerTransportDel": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetServerTransportEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "SetServiceBits": [ + { + "name": "hServiceStatus", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "dwServiceBits", + "type": "DWORD" + }, + { + "name": "bSetBitsOn", + "type": "BOOL" + }, + { + "name": "bUpdateImmediately", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lmshare.json b/qiling/extensions/windows_sdk/lmshare.json new file mode 100644 index 000000000..bce78a490 --- /dev/null +++ b/qiling/extensions/windows_sdk/lmshare.json @@ -0,0 +1,306 @@ +{ + "NetShareAdd": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetShareEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetShareGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "netname", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetShareSetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "netname", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetShareDel": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "netname", + "type": "LPWSTR" + }, + { + "name": "reserved", + "type": "DWORD" + } + ], + "NetShareCheck": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "device", + "type": "LPWSTR" + }, + { + "name": "type", + "type": "LPDWORD" + } + ], + "NetShareDelEx": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + } + ], + "NetSessionEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "UncClientName", + "type": "LPWSTR" + }, + { + "name": "username", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetSessionDel": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "UncClientName", + "type": "LPWSTR" + }, + { + "name": "username", + "type": "LPWSTR" + } + ], + "NetSessionGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "UncClientName", + "type": "LPWSTR" + }, + { + "name": "username", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetConnectionEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "qualifier", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetFileClose": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "fileid", + "type": "DWORD" + } + ], + "NetFileEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "basepath", + "type": "LPWSTR" + }, + { + "name": "username", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "PDWORD_PTR" + } + ], + "NetFileGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "fileid", + "type": "DWORD" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lmstats.json b/qiling/extensions/windows_sdk/lmstats.json new file mode 100644 index 000000000..f648ec774 --- /dev/null +++ b/qiling/extensions/windows_sdk/lmstats.json @@ -0,0 +1,24 @@ +{ + "NetStatisticsGet": [ + { + "name": "ServerName", + "type": "LPTSTR" + }, + { + "name": "Service", + "type": "LPTSTR" + }, + { + "name": "Level", + "type": "DWORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "LPBYTE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lmuse.json b/qiling/extensions/windows_sdk/lmuse.json new file mode 100644 index 000000000..f6389f757 --- /dev/null +++ b/qiling/extensions/windows_sdk/lmuse.json @@ -0,0 +1,82 @@ +{ + "NetUseAdd": [ + { + "name": "servername", + "type": "LPTSTR" + }, + { + "name": "LevelFlags", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetUseDel": [ + { + "name": "UncServerName", + "type": "LPWSTR" + }, + { + "name": "UseName", + "type": "LPWSTR" + }, + { + "name": "ForceLevelFlags", + "type": "DWORD" + } + ], + "NetUseEnum": [ + { + "name": "UncServerName", + "type": "LPWSTR" + }, + { + "name": "LevelFlags", + "type": "DWORD" + }, + { + "name": "BufPtr", + "type": "LPBYTE" + }, + { + "name": "PreferedMaximumSize", + "type": "DWORD" + }, + { + "name": "EntriesRead", + "type": "LPDWORD" + }, + { + "name": "TotalEntries", + "type": "LPDWORD" + }, + { + "name": "ResumeHandle", + "type": "LPDWORD" + } + ], + "NetUseGetInfo": [ + { + "name": "UncServerName", + "type": "LPWSTR" + }, + { + "name": "UseName", + "type": "LPWSTR" + }, + { + "name": "LevelFlags", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lmwksta.json b/qiling/extensions/windows_sdk/lmwksta.json new file mode 100644 index 000000000..0719058e3 --- /dev/null +++ b/qiling/extensions/windows_sdk/lmwksta.json @@ -0,0 +1,158 @@ +{ + "NetWkstaGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetWkstaSetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buffer", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetWkstaUserGetInfo": [ + { + "name": "reserved", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetWkstaUserSetInfo": [ + { + "name": "reserved", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetWkstaUserEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resumehandle", + "type": "LPDWORD" + } + ], + "NetWkstaTransportAdd": [ + { + "name": "servername", + "type": "LPTSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetWkstaTransportDel": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "transportname", + "type": "LPWSTR" + }, + { + "name": "ucond", + "type": "DWORD" + } + ], + "NetWkstaTransportEnum": [ + { + "name": "servername", + "type": "LPTSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/loadperf.json b/qiling/extensions/windows_sdk/loadperf.json new file mode 100644 index 000000000..a627062cc --- /dev/null +++ b/qiling/extensions/windows_sdk/loadperf.json @@ -0,0 +1,70 @@ +{ + "InstallPerfDllW": [ + { + "name": "szComputerName", + "type": "LPCWSTR" + }, + { + "name": "lpIniFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG_PTR" + } + ], + "InstallPerfDllA": [ + { + "name": "szComputerName", + "type": "LPCSTR" + }, + { + "name": "lpIniFile", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "ULONG_PTR" + } + ], + "LoadPerfCounterTextStringsA": [ + { + "name": "lpCommandLine", + "type": "LPSTR" + }, + { + "name": "bQuietModeArg", + "type": "BOOL" + } + ], + "LoadPerfCounterTextStringsW": [ + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "bQuietModeArg", + "type": "BOOL" + } + ], + "UnloadPerfCounterTextStringsW": [ + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "bQuietModeArg", + "type": "BOOL" + } + ], + "UnloadPerfCounterTextStringsA": [ + { + "name": "lpCommandLine", + "type": "LPSTR" + }, + { + "name": "bQuietModeArg", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lowlevelmonitorconfigurationapi.json b/qiling/extensions/windows_sdk/lowlevelmonitorconfigurationapi.json new file mode 100644 index 000000000..289fcdf7a --- /dev/null +++ b/qiling/extensions/windows_sdk/lowlevelmonitorconfigurationapi.json @@ -0,0 +1,78 @@ +{ + "GetVCPFeatureAndVCPFeatureReply": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "bVCPCode", + "type": "BYTE" + }, + { + "name": "pvct", + "type": "LPMC_VCP_CODE_TYPE" + }, + { + "name": "pdwCurrentValue", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumValue", + "type": "LPDWORD" + } + ], + "SetVCPFeature": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "bVCPCode", + "type": "BYTE" + }, + { + "name": "dwNewValue", + "type": "DWORD" + } + ], + "SaveCurrentSettings": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "GetCapabilitiesStringLength": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdwCapabilitiesStringLengthInCharacters", + "type": "LPDWORD" + } + ], + "CapabilitiesRequestAndCapabilitiesReply": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pszASCIICapabilitiesString", + "type": "LPSTR" + }, + { + "name": "dwCapabilitiesStringLengthInCharacters", + "type": "DWORD" + } + ], + "GetTimingReport": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pmtrMonitorTimingReport", + "type": "LPMC_TIMING_REPORT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lzexpand.json b/qiling/extensions/windows_sdk/lzexpand.json new file mode 100644 index 000000000..8bc7983cf --- /dev/null +++ b/qiling/extensions/windows_sdk/lzexpand.json @@ -0,0 +1,100 @@ +{ + "LZCopy": [ + { + "name": "hfSource", + "type": "INT" + }, + { + "name": "hfDest", + "type": "INT" + } + ], + "LZInit": [ + { + "name": "hfSource", + "type": "INT" + } + ], + "GetExpandedNameA": [ + { + "name": "lpszSource", + "type": "LPSTR" + }, + { + "name": "lpszBuffer", + "type": "LPSTR" + } + ], + "GetExpandedNameW": [ + { + "name": "lpszSource", + "type": "LPWSTR" + }, + { + "name": "lpszBuffer", + "type": "LPWSTR" + } + ], + "LZOpenFileA": [ + { + "name": "lpFileName", + "type": "LPSTR" + }, + { + "name": "lpReOpenBuf", + "type": "LPOFSTRUCT" + }, + { + "name": "wStyle", + "type": "WORD" + } + ], + "LZOpenFileW": [ + { + "name": "lpFileName", + "type": "LPWSTR" + }, + { + "name": "lpReOpenBuf", + "type": "LPOFSTRUCT" + }, + { + "name": "wStyle", + "type": "WORD" + } + ], + "LZSeek": [ + { + "name": "hFile", + "type": "INT" + }, + { + "name": "lOffset", + "type": "LONG" + }, + { + "name": "iOrigin", + "type": "INT" + } + ], + "LZRead": [ + { + "name": "hFile", + "type": "INT" + }, + { + "name": "lpBuffer", + "type": "CHAR" + }, + { + "name": "cbRead", + "type": "INT" + } + ], + "LZClose": [ + { + "name": "hFile", + "type": "INT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mdmregistration.json b/qiling/extensions/windows_sdk/mdmregistration.json new file mode 100644 index 000000000..a2fe164ce --- /dev/null +++ b/qiling/extensions/windows_sdk/mdmregistration.json @@ -0,0 +1,98 @@ +{ + "GetDeviceRegistrationInfo": [ + { + "name": "DeviceInformationClass", + "type": "REGISTRATION_INFORMATION_CLASS" + }, + { + "name": "ppDeviceRegistrationInfo", + "type": "PVOID" + } + ], + "IsDeviceRegisteredWithManagement": [ + { + "name": "pfIsDeviceRegisteredWithManagement", + "type": "BOOL" + }, + { + "name": "cchUPN", + "type": "DWORD" + }, + { + "name": "pszUPN", + "type": "LPWSTR" + } + ], + "IsManagementRegistrationAllowed": [ + { + "name": "pfIsManagementRegistrationAllowed", + "type": "BOOL" + } + ], + "SetManagedExternally": [ + { + "name": "IsManagedExternally", + "type": "BOOL" + } + ], + "DiscoverManagementService": [ + { + "name": "pszUPN", + "type": "LPCWSTR" + }, + { + "name": "ppMgmtInfo", + "type": "PMANAGEMENT_SERVICE_INFO" + } + ], + "RegisterDeviceWithManagementUsingAADCredentials": [ + { + "name": "UserToken", + "type": "HANDLE" + } + ], + "RegisterDeviceWithManagement": [ + { + "name": "pszUPN", + "type": "LPCWSTR" + }, + { + "name": "ppszMDMServiceUri", + "type": "LPCWSTR" + }, + { + "name": "ppzsAccessToken", + "type": "LPCWSTR" + } + ], + "UnregisterDeviceWithManagement": [ + { + "name": "enrollmentID", + "type": "LPCWSTR" + } + ], + "GetManagementAppHyperlink": [ + { + "name": "cchHyperlink", + "type": "DWORD" + }, + { + "name": "pszHyperlink", + "type": "LPWSTR" + } + ], + "DiscoverManagementServiceEx": [ + { + "name": "pszUPN", + "type": "LPCWSTR" + }, + { + "name": "pszDiscoveryServiceCandidate", + "type": "LPCWSTR" + }, + { + "name": "ppMgmtInfo", + "type": "PMANAGEMENT_SERVICE_INFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/memoryapi.json b/qiling/extensions/windows_sdk/memoryapi.json new file mode 100644 index 000000000..e487090ad --- /dev/null +++ b/qiling/extensions/windows_sdk/memoryapi.json @@ -0,0 +1,914 @@ +{ + "VirtualAlloc": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flAllocationType", + "type": "DWORD" + }, + { + "name": "flProtect", + "type": "DWORD" + } + ], + "VirtualProtect": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flNewProtect", + "type": "DWORD" + }, + { + "name": "lpflOldProtect", + "type": "PDWORD" + } + ], + "VirtualFree": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "dwFreeType", + "type": "DWORD" + } + ], + "VirtualQuery": [ + { + "name": "lpAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "PMEMORY_BASIC_INFORMATION" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "VirtualAllocEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flAllocationType", + "type": "DWORD" + }, + { + "name": "flProtect", + "type": "DWORD" + } + ], + "VirtualProtectEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flNewProtect", + "type": "DWORD" + }, + { + "name": "lpflOldProtect", + "type": "PDWORD" + } + ], + "VirtualQueryEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "PMEMORY_BASIC_INFORMATION" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "ReadProcessMemory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nSize", + "type": "SIZE_T" + }, + { + "name": "lpNumberOfBytesRead", + "type": "SIZE_T" + } + ], + "WriteProcessMemory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpBaseAddress", + "type": "LPVOID" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nSize", + "type": "SIZE_T" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "SIZE_T" + } + ], + "MapViewOfFile": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwNumberOfBytesToMap", + "type": "SIZE_T" + } + ], + "MapViewOfFileEx": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwNumberOfBytesToMap", + "type": "SIZE_T" + }, + { + "name": "lpBaseAddress", + "type": "LPVOID" + } + ], + "VirtualFreeEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "dwFreeType", + "type": "DWORD" + } + ], + "FlushViewOfFile": [ + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "dwNumberOfBytesToFlush", + "type": "SIZE_T" + } + ], + "UnmapViewOfFile": [ + { + "name": "lpBaseAddress", + "type": "LPCVOID" + } + ], + "GetLargePageMinimum": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetProcessWorkingSetSizeEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpMinimumWorkingSetSize", + "type": "PSIZE_T" + }, + { + "name": "lpMaximumWorkingSetSize", + "type": "PSIZE_T" + }, + { + "name": "Flags", + "type": "PDWORD" + } + ], + "SetProcessWorkingSetSizeEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwMinimumWorkingSetSize", + "type": "SIZE_T" + }, + { + "name": "dwMaximumWorkingSetSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "VirtualLock": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + } + ], + "VirtualUnlock": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + } + ], + "GetWriteWatch": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpBaseAddress", + "type": "PVOID" + }, + { + "name": "dwRegionSize", + "type": "SIZE_T" + }, + { + "name": "lpAddresses", + "type": "PVOID" + }, + { + "name": "lpdwCount", + "type": "ULONG_PTR" + }, + { + "name": "lpdwGranularity", + "type": "LPDWORD" + } + ], + "ResetWriteWatch": [ + { + "name": "lpBaseAddress", + "type": "LPVOID" + }, + { + "name": "dwRegionSize", + "type": "SIZE_T" + } + ], + "CreateMemoryResourceNotification": [ + { + "name": "NotificationType", + "type": "MEMORY_RESOURCE_NOTIFICATION_TYPE" + } + ], + "QueryMemoryResourceNotification": [ + { + "name": "ResourceNotificationHandle", + "type": "HANDLE" + }, + { + "name": "ResourceState", + "type": "PBOOL" + } + ], + "GetSystemFileCacheSize": [ + { + "name": "lpMinimumFileCacheSize", + "type": "PSIZE_T" + }, + { + "name": "lpMaximumFileCacheSize", + "type": "PSIZE_T" + }, + { + "name": "lpFlags", + "type": "PDWORD" + } + ], + "SetSystemFileCacheSize": [ + { + "name": "MinimumFileCacheSize", + "type": "SIZE_T" + }, + { + "name": "MaximumFileCacheSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "PrefetchVirtualMemory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfEntries", + "type": "ULONG_PTR" + }, + { + "name": "VirtualAddresses", + "type": "PWIN32_MEMORY_RANGE_ENTRY" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "CreateFileMappingFromApp": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "SecurityAttributes", + "type": "PSECURITY_ATTRIBUTES" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "MaximumSize", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCWSTR" + } + ], + "MapViewOfFileFromApp": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "ULONG" + }, + { + "name": "FileOffset", + "type": "ULONG64" + }, + { + "name": "NumberOfBytesToMap", + "type": "SIZE_T" + } + ], + "UnmapViewOfFileEx": [ + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "UnmapFlags", + "type": "ULONG" + } + ], + "AllocateUserPhysicalPages": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfPages", + "type": "PULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "FreeUserPhysicalPages": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfPages", + "type": "PULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "MapUserPhysicalPages": [ + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "NumberOfPages", + "type": "ULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "AllocateUserPhysicalPagesNuma": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfPages", + "type": "PULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "VirtualAllocExNuma": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flAllocationType", + "type": "DWORD" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "GetMemoryErrorHandlingCapabilities": [ + { + "name": "Capabilities", + "type": "PULONG" + } + ], + "RegisterBadMemoryNotification": [ + { + "name": "Callback", + "type": "PBAD_MEMORY_CALLBACK_ROUTINE" + } + ], + "UnregisterBadMemoryNotification": [ + { + "name": "RegistrationHandle", + "type": "PVOID" + } + ], + "OfferVirtualMemory": [ + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "Priority", + "type": "OFFER_PRIORITY" + } + ], + "ReclaimVirtualMemory": [ + { + "name": "VirtualAddress", + "type": "void" + }, + { + "name": "Size", + "type": "SIZE_T" + } + ], + "DiscardVirtualMemory": [ + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + } + ], + "SetProcessValidCallTargets": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "RegionSize", + "type": "SIZE_T" + }, + { + "name": "NumberOfOffsets", + "type": "ULONG" + }, + { + "name": "OffsetInformation", + "type": "PCFG_CALL_TARGET_INFO" + } + ], + "VirtualAllocFromApp": [ + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "Protection", + "type": "ULONG" + } + ], + "VirtualProtectFromApp": [ + { + "name": "Address", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "NewProtection", + "type": "ULONG" + }, + { + "name": "OldProtection", + "type": "PULONG" + } + ], + "OpenFileMappingFromApp": [ + { + "name": "DesiredAccess", + "type": "ULONG" + }, + { + "name": "InheritHandle", + "type": "BOOL" + }, + { + "name": "Name", + "type": "PCWSTR" + } + ], + "QueryVirtualMemoryInformation": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "VirtualAddress", + "type": "void" + }, + { + "name": "MemoryInformationClass", + "type": "WIN32_MEMORY_INFORMATION_CLASS" + }, + { + "name": "MemoryInformation", + "type": "PVOID" + }, + { + "name": "MemoryInformationSize", + "type": "SIZE_T" + }, + { + "name": "ReturnSize", + "type": "PSIZE_T" + } + ], + "MapViewOfFileNuma2": [ + { + "name": "FileMappingHandle", + "type": "HANDLE" + }, + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "PreferredNode", + "type": "ULONG" + } + ], + "MapViewOfFile2": [ + { + "name": "FileMappingHandle", + "type": "HANDLE" + }, + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + } + ], + "UnmapViewOfFile2": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "UnmapFlags", + "type": "ULONG" + } + ], + "VirtualAlloc2": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "MapViewOfFile3": [ + { + "name": "FileMapping", + "type": "HANDLE" + }, + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "VirtualAlloc2FromApp": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "MapViewOfFile3FromApp": [ + { + "name": "FileMapping", + "type": "HANDLE" + }, + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/messagedispatcherapi.json b/qiling/extensions/windows_sdk/messagedispatcherapi.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/messagedispatcherapi.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mfapi.json b/qiling/extensions/windows_sdk/mfapi.json new file mode 100644 index 000000000..7f7bc7db9 --- /dev/null +++ b/qiling/extensions/windows_sdk/mfapi.json @@ -0,0 +1,1702 @@ +{ + "MFStartup": [ + { + "name": "Version", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MFPutWorkItem": [ + { + "name": "dwQueue", + "type": "DWORD" + }, + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pState", + "type": "IUnknown" + } + ], + "MFPutWorkItem2": [ + { + "name": "dwQueue", + "type": "DWORD" + }, + { + "name": "Priority", + "type": "LONG" + }, + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pState", + "type": "IUnknown" + } + ], + "MFPutWorkItemEx": [ + { + "name": "dwQueue", + "type": "DWORD" + }, + { + "name": "pResult", + "type": "IMFAsyncResult" + } + ], + "MFPutWorkItemEx2": [ + { + "name": "dwQueue", + "type": "DWORD" + }, + { + "name": "Priority", + "type": "LONG" + }, + { + "name": "pResult", + "type": "IMFAsyncResult" + } + ], + "MFPutWaitingWorkItem": [ + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "Priority", + "type": "LONG" + }, + { + "name": "pResult", + "type": "IMFAsyncResult" + }, + { + "name": "pKey", + "type": "MFWORKITEM_KEY" + } + ], + "MFAllocateSerialWorkQueue": [ + { + "name": "dwWorkQueue", + "type": "DWORD" + }, + { + "name": "pdwWorkQueue", + "type": "DWORD" + } + ], + "MFScheduleWorkItemEx": [ + { + "name": "pResult", + "type": "IMFAsyncResult" + }, + { + "name": "Timeout", + "type": "INT64" + }, + { + "name": "pKey", + "type": "MFWORKITEM_KEY" + } + ], + "MFScheduleWorkItem": [ + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pState", + "type": "IUnknown" + }, + { + "name": "Timeout", + "type": "INT64" + }, + { + "name": "pKey", + "type": "MFWORKITEM_KEY" + } + ], + "MFCancelWorkItem": [ + { + "name": "Key", + "type": "MFWORKITEM_KEY" + } + ], + "MFGetTimerPeriodicity": [ + { + "name": "Periodicity", + "type": "DWORD" + } + ], + "MFAddPeriodicCallback": [ + { + "name": "Callback", + "type": "MFPERIODICCALLBACK" + }, + { + "name": "pContext", + "type": "IUnknown" + }, + { + "name": "pdwKey", + "type": "DWORD" + } + ], + "MFRemovePeriodicCallback": [ + { + "name": "dwKey", + "type": "DWORD" + } + ], + "MFAllocateWorkQueueEx": [ + { + "name": "WorkQueueType", + "type": "MFASYNC_WORKQUEUE_TYPE" + }, + { + "name": "pdwWorkQueue", + "type": "DWORD" + } + ], + "MFAllocateWorkQueue": [ + { + "name": "pdwWorkQueue", + "type": "DWORD" + } + ], + "MFLockWorkQueue": [ + { + "name": "dwWorkQueue", + "type": "DWORD" + } + ], + "MFUnlockWorkQueue": [ + { + "name": "dwWorkQueue", + "type": "DWORD" + } + ], + "MFBeginRegisterWorkQueueWithMMCSS": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "wszClass", + "type": "LPCWSTR" + }, + { + "name": "dwTaskId", + "type": "DWORD" + }, + { + "name": "pDoneCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pDoneState", + "type": "IUnknown" + } + ], + "MFBeginRegisterWorkQueueWithMMCSSEx": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "wszClass", + "type": "LPCWSTR" + }, + { + "name": "dwTaskId", + "type": "DWORD" + }, + { + "name": "lPriority", + "type": "LONG" + }, + { + "name": "pDoneCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pDoneState", + "type": "IUnknown" + } + ], + "MFEndRegisterWorkQueueWithMMCSS": [ + { + "name": "pResult", + "type": "IMFAsyncResult" + }, + { + "name": "pdwTaskId", + "type": "DWORD" + } + ], + "MFBeginUnregisterWorkQueueWithMMCSS": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "pDoneCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pDoneState", + "type": "IUnknown" + } + ], + "MFEndUnregisterWorkQueueWithMMCSS": [ + { + "name": "pResult", + "type": "IMFAsyncResult" + } + ], + "MFGetWorkQueueMMCSSClass": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "pwszClass", + "type": "LPWSTR" + }, + { + "name": "pcchClass", + "type": "DWORD" + } + ], + "MFGetWorkQueueMMCSSTaskId": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "pdwTaskId", + "type": "LPDWORD" + } + ], + "MFRegisterPlatformWithMMCSS": [ + { + "name": "wszClass", + "type": "PCWSTR" + }, + { + "name": "pdwTaskId", + "type": "DWORD" + }, + { + "name": "lPriority", + "type": "LONG" + } + ], + "MFLockSharedWorkQueue": [ + { + "name": "wszClass", + "type": "PCWSTR" + }, + { + "name": "BasePriority", + "type": "LONG" + }, + { + "name": "pdwTaskId", + "type": "DWORD" + }, + { + "name": "pID", + "type": "DWORD" + } + ], + "MFGetWorkQueueMMCSSPriority": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "lPriority", + "type": "LONG" + } + ], + "MFCreateAsyncResult": [ + { + "name": "punkObject", + "type": "IUnknown" + }, + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "punkState", + "type": "IUnknown" + }, + { + "name": "ppAsyncResult", + "type": "IMFAsyncResult" + } + ], + "MFInvokeCallback": [ + { + "name": "pAsyncResult", + "type": "IMFAsyncResult" + } + ], + "MFCreateFile": [ + { + "name": "AccessMode", + "type": "MF_FILE_ACCESSMODE" + }, + { + "name": "OpenMode", + "type": "MF_FILE_OPENMODE" + }, + { + "name": "fFlags", + "type": "MF_FILE_FLAGS" + }, + { + "name": "pwszFileURL", + "type": "LPCWSTR" + }, + { + "name": "ppIByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateTempFile": [ + { + "name": "AccessMode", + "type": "MF_FILE_ACCESSMODE" + }, + { + "name": "OpenMode", + "type": "MF_FILE_OPENMODE" + }, + { + "name": "fFlags", + "type": "MF_FILE_FLAGS" + }, + { + "name": "ppIByteStream", + "type": "IMFByteStream" + } + ], + "MFBeginCreateFile": [ + { + "name": "AccessMode", + "type": "MF_FILE_ACCESSMODE" + }, + { + "name": "OpenMode", + "type": "MF_FILE_OPENMODE" + }, + { + "name": "fFlags", + "type": "MF_FILE_FLAGS" + }, + { + "name": "pwszFilePath", + "type": "LPCWSTR" + }, + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pState", + "type": "IUnknown" + }, + { + "name": "ppCancelCookie", + "type": "IUnknown" + } + ], + "MFEndCreateFile": [ + { + "name": "pResult", + "type": "IMFAsyncResult" + }, + { + "name": "ppFile", + "type": "IMFByteStream" + } + ], + "MFCancelCreateFile": [ + { + "name": "pCancelCookie", + "type": "IUnknown" + } + ], + "MFCreateMemoryBuffer": [ + { + "name": "cbMaxLength", + "type": "DWORD" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateMediaBufferWrapper": [ + { + "name": "pBuffer", + "type": "IMFMediaBuffer" + }, + { + "name": "cbOffset", + "type": "DWORD" + }, + { + "name": "dwLength", + "type": "DWORD" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateLegacyMediaBufferOnMFMediaBuffer": [ + { + "name": "pSample", + "type": "IMFSample" + }, + { + "name": "pMFMediaBuffer", + "type": "IMFMediaBuffer" + }, + { + "name": "cbOffset", + "type": "DWORD" + }, + { + "name": "ppMediaBuffer", + "type": "IMediaBuffer" + } + ], + "MFMapDX9FormatToDXGIFormat": [ + { + "name": "dx9", + "type": "DWORD" + } + ], + "MFMapDXGIFormatToDX9Format": [ + { + "name": "dx11", + "type": "DXGI_FORMAT" + } + ], + "MFLockDXGIDeviceManager": [ + { + "name": "pResetToken", + "type": "UINT" + }, + { + "name": "ppManager", + "type": "IMFDXGIDeviceManager" + } + ], + "MFCreateDXSurfaceBuffer": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "punkSurface", + "type": "IUnknown" + }, + { + "name": "fBottomUpWhenLinear", + "type": "BOOL" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateWICBitmapBuffer": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "punkSurface", + "type": "IUnknown" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateDXGISurfaceBuffer": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "punkSurface", + "type": "IUnknown" + }, + { + "name": "uSubresourceIndex", + "type": "UINT" + }, + { + "name": "fBottomUpWhenLinear", + "type": "BOOL" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateVideoSampleAllocatorEx": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppSampleAllocator", + "type": "void" + } + ], + "MFCreateDXGIDeviceManager": [ + { + "name": "resetToken", + "type": "UINT" + }, + { + "name": "ppDeviceManager", + "type": "IMFDXGIDeviceManager" + } + ], + "MFCreateAlignedMemoryBuffer": [ + { + "name": "cbMaxLength", + "type": "DWORD" + }, + { + "name": "cbAligment", + "type": "DWORD" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateMediaEvent": [ + { + "name": "met", + "type": "MediaEventType" + }, + { + "name": "guidExtendedType", + "type": "GUID" + }, + { + "name": "hrStatus", + "type": "HRESULT" + }, + { + "name": "pvValue", + "type": "PROPVARIANT" + }, + { + "name": "ppEvent", + "type": "IMFMediaEvent" + } + ], + "MFCreateEventQueue": [ + { + "name": "ppMediaEventQueue", + "type": "IMFMediaEventQueue" + } + ], + "MFCreateSample": [ + { + "name": "ppIMFSample", + "type": "IMFSample" + } + ], + "MFCreateAttributes": [ + { + "name": "ppMFAttributes", + "type": "IMFAttributes" + }, + { + "name": "cInitialSize", + "type": "UINT32" + } + ], + "MFInitAttributesFromBlob": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pBuf", + "type": "UINT8" + }, + { + "name": "cbBufSize", + "type": "UINT" + } + ], + "MFGetAttributesAsBlobSize": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pcbBufSize", + "type": "UINT32" + } + ], + "MFGetAttributesAsBlob": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pBuf", + "type": "UINT8" + }, + { + "name": "cbBufSize", + "type": "UINT" + } + ], + "MFTRegister": [ + { + "name": "clsidMFT", + "type": "CLSID" + }, + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "pszName", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "cInputTypes", + "type": "UINT32" + }, + { + "name": "pInputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "cOutputTypes", + "type": "UINT32" + }, + { + "name": "pOutputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pAttributes", + "type": "IMFAttributes" + } + ], + "MFTUnregister": [ + { + "name": "clsidMFT", + "type": "CLSID" + } + ], + "MFTRegisterLocal": [ + { + "name": "pClassFactory", + "type": "IClassFactory" + }, + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "cInputTypes", + "type": "UINT32" + }, + { + "name": "pInputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "cOutputTypes", + "type": "UINT32" + }, + { + "name": "pOutputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + } + ], + "MFTUnregisterLocal": [ + { + "name": "pClassFactory", + "type": "IClassFactory" + } + ], + "MFTRegisterLocalByCLSID": [ + { + "name": "clisdMFT", + "type": "IID" + }, + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "cInputTypes", + "type": "UINT32" + }, + { + "name": "pInputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "cOutputTypes", + "type": "UINT32" + }, + { + "name": "pOutputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + } + ], + "MFTUnregisterLocalByCLSID": [ + { + "name": "clsidMFT", + "type": "CLSID" + } + ], + "MFTEnum": [ + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "pInputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pOutputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "ppclsidMFT", + "type": "CLSID" + }, + { + "name": "pcMFTs", + "type": "UINT32" + } + ], + "MFTEnumEx": [ + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "pInputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pOutputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pppMFTActivate", + "type": "IMFActivate" + }, + { + "name": "pnumMFTActivate", + "type": "UINT32" + } + ], + "MFTEnum2": [ + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "pInputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pOutputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pppMFTActivate", + "type": "IMFActivate" + }, + { + "name": "pnumMFTActivate", + "type": "UINT32" + } + ], + "MFTGetInfo": [ + { + "name": "clsidMFT", + "type": "CLSID" + }, + { + "name": "pszName", + "type": "LPWSTR" + }, + { + "name": "ppInputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pcInputTypes", + "type": "UINT32" + }, + { + "name": "ppOutputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pcOutputTypes", + "type": "UINT32" + }, + { + "name": "ppAttributes", + "type": "IMFAttributes" + } + ], + "MFGetPluginControl": [ + { + "name": "ppPluginControl", + "type": "IMFPluginControl" + } + ], + "MFGetMFTMerit": [ + { + "name": "pMFT", + "type": "IUnknown" + }, + { + "name": "cbVerifier", + "type": "UINT32" + }, + { + "name": "verifier", + "type": "BYTE" + }, + { + "name": "merit", + "type": "DWORD" + } + ], + "MFRegisterLocalSchemeHandler": [ + { + "name": "szScheme", + "type": "PCWSTR" + }, + { + "name": "pActivate", + "type": "IMFActivate" + } + ], + "MFRegisterLocalByteStreamHandler": [ + { + "name": "szFileExtension", + "type": "PCWSTR" + }, + { + "name": "szMimeType", + "type": "PCWSTR" + }, + { + "name": "pActivate", + "type": "IMFActivate" + } + ], + "MFCreateMFByteStreamWrapper": [ + { + "name": "pStream", + "type": "IMFByteStream" + }, + { + "name": "ppStreamWrapper", + "type": "IMFByteStream" + } + ], + "MFCreateMediaExtensionActivate": [ + { + "name": "szActivatableClassId", + "type": "PCWSTR" + }, + { + "name": "pConfiguration", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "LPVOID" + } + ], + "MFCreateMuxStreamAttributes": [ + { + "name": "pAttributesToMux", + "type": "IMFCollection" + }, + { + "name": "ppMuxAttribs", + "type": "IMFAttributes" + } + ], + "MFCreateMuxStreamMediaType": [ + { + "name": "pMediaTypesToMux", + "type": "IMFCollection" + }, + { + "name": "ppMuxMediaType", + "type": "IMFMediaType" + } + ], + "MFCreateMuxStreamSample": [ + { + "name": "pSamplesToMux", + "type": "IMFCollection" + }, + { + "name": "ppMuxSample", + "type": "IMFSample" + } + ], + "MFValidateMediaTypeSize": [ + { + "name": "FormatType", + "type": "GUID" + }, + { + "name": "pBlock", + "type": "UINT8" + }, + { + "name": "cbSize", + "type": "UINT32" + } + ], + "MFCreateMediaType": [ + { + "name": "ppMFType", + "type": "IMFMediaType" + } + ], + "MFCreateMFVideoFormatFromMFMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "ppMFVF", + "type": "MFVIDEOFORMAT" + }, + { + "name": "pcbSize", + "type": "UINT32" + } + ], + "MFCreateWaveFormatExFromMFMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "ppWF", + "type": "WAVEFORMATEX" + }, + { + "name": "pcbSize", + "type": "UINT32" + }, + { + "name": "Flags", + "type": "UINT32" + } + ], + "MFInitMediaTypeFromVideoInfoHeader": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pVIH", + "type": "VIDEOINFOHEADER" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pSubtype", + "type": "GUID" + } + ], + "MFInitMediaTypeFromVideoInfoHeader2": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pVIH2", + "type": "VIDEOINFOHEADER2" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pSubtype", + "type": "GUID" + } + ], + "MFInitMediaTypeFromMPEG1VideoInfo": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pMP1VI", + "type": "MPEG1VIDEOINFO" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pSubtype", + "type": "GUID" + } + ], + "MFInitMediaTypeFromMPEG2VideoInfo": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pMP2VI", + "type": "MPEG2VIDEOINFO" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pSubtype", + "type": "GUID" + } + ], + "MFCalculateBitmapImageSize": [ + { + "name": "pBMIH", + "type": "BITMAPINFOHEADER" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pcbImageSize", + "type": "UINT32" + }, + { + "name": "pbKnown", + "type": "BOOL" + } + ], + "MFCalculateImageSize": [ + { + "name": "guidSubtype", + "type": "GUID" + }, + { + "name": "unWidth", + "type": "UINT32" + }, + { + "name": "unHeight", + "type": "UINT32" + }, + { + "name": "pcbImageSize", + "type": "UINT32" + } + ], + "MFFrameRateToAverageTimePerFrame": [ + { + "name": "unNumerator", + "type": "UINT32" + }, + { + "name": "unDenominator", + "type": "UINT32" + }, + { + "name": "punAverageTimePerFrame", + "type": "UINT64" + } + ], + "MFAverageTimePerFrameToFrameRate": [ + { + "name": "unAverageTimePerFrame", + "type": "UINT64" + }, + { + "name": "punNumerator", + "type": "UINT32" + }, + { + "name": "punDenominator", + "type": "UINT32" + } + ], + "MFInitMediaTypeFromMFVideoFormat": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pMFVF", + "type": "MFVIDEOFORMAT" + }, + { + "name": "cbBufSize", + "type": "UINT32" + } + ], + "MFInitMediaTypeFromWaveFormatEx": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pWaveFormat", + "type": "WAVEFORMATEX" + }, + { + "name": "cbBufSize", + "type": "UINT32" + } + ], + "MFInitMediaTypeFromAMMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pAMType", + "type": "AM_MEDIA_TYPE" + } + ], + "MFInitAMMediaTypeFromMFMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "guidFormatBlockType", + "type": "GUID" + }, + { + "name": "pAMType", + "type": "AM_MEDIA_TYPE" + } + ], + "MFCreateAMMediaTypeFromMFMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "guidFormatBlockType", + "type": "GUID" + }, + { + "name": "ppAMType", + "type": "AM_MEDIA_TYPE" + } + ], + "MFCompareFullToPartialMediaType": [ + { + "name": "pMFTypeFull", + "type": "IMFMediaType" + }, + { + "name": "pMFTypePartial", + "type": "IMFMediaType" + } + ], + "MFWrapMediaType": [ + { + "name": "pOrig", + "type": "IMFMediaType" + }, + { + "name": "MajorType", + "type": "GUID" + }, + { + "name": "SubType", + "type": "GUID" + }, + { + "name": "ppWrap", + "type": "IMFMediaType" + } + ], + "MFUnwrapMediaType": [ + { + "name": "pWrap", + "type": "IMFMediaType" + }, + { + "name": "ppOrig", + "type": "IMFMediaType" + } + ], + "MFCreateVideoMediaType": [ + { + "name": "pVideoFormat", + "type": "MFVIDEOFORMAT" + }, + { + "name": "ppIVideoMediaType", + "type": "IMFVideoMediaType" + } + ], + "MFCreateVideoMediaTypeFromSubtype": [ + { + "name": "pAMSubtype", + "type": "GUID" + }, + { + "name": "ppIVideoMediaType", + "type": "IMFVideoMediaType" + } + ], + "MFIsFormatYUV": [ + { + "name": "Format", + "type": "DWORD" + } + ], + "MFCreateVideoMediaTypeFromBitMapInfoHeader": [ + { + "name": "pbmihBitMapInfoHeader", + "type": "BITMAPINFOHEADER" + }, + { + "name": "dwPixelAspectRatioX", + "type": "DWORD" + }, + { + "name": "dwPixelAspectRatioY", + "type": "DWORD" + }, + { + "name": "InterlaceMode", + "type": "MFVideoInterlaceMode" + }, + { + "name": "VideoFlags", + "type": "QWORD" + }, + { + "name": "qwFramesPerSecondNumerator", + "type": "QWORD" + }, + { + "name": "qwFramesPerSecondDenominator", + "type": "QWORD" + }, + { + "name": "dwMaxBitRate", + "type": "DWORD" + }, + { + "name": "ppIVideoMediaType", + "type": "IMFVideoMediaType" + } + ], + "MFGetStrideForBitmapInfoHeader": [ + { + "name": "format", + "type": "DWORD" + }, + { + "name": "dwWidth", + "type": "DWORD" + }, + { + "name": "pStride", + "type": "LONG" + } + ], + "MFGetPlaneSize": [ + { + "name": "format", + "type": "DWORD" + }, + { + "name": "dwWidth", + "type": "DWORD" + }, + { + "name": "dwHeight", + "type": "DWORD" + }, + { + "name": "pdwPlaneSize", + "type": "DWORD" + } + ], + "MFCreateVideoMediaTypeFromBitMapInfoHeaderEx": [ + { + "name": "pbmihBitMapInfoHeader", + "type": "BITMAPINFOHEADER" + }, + { + "name": "cbBitMapInfoHeader", + "type": "UINT32" + }, + { + "name": "dwPixelAspectRatioX", + "type": "DWORD" + }, + { + "name": "dwPixelAspectRatioY", + "type": "DWORD" + }, + { + "name": "InterlaceMode", + "type": "MFVideoInterlaceMode" + }, + { + "name": "VideoFlags", + "type": "QWORD" + }, + { + "name": "dwFramesPerSecondNumerator", + "type": "DWORD" + }, + { + "name": "dwFramesPerSecondDenominator", + "type": "DWORD" + }, + { + "name": "dwMaxBitRate", + "type": "DWORD" + }, + { + "name": "ppIVideoMediaType", + "type": "IMFVideoMediaType" + } + ], + "MFCreateMediaTypeFromRepresentation": [ + { + "name": "guidRepresentation", + "type": "GUID" + }, + { + "name": "pvRepresentation", + "type": "LPVOID" + }, + { + "name": "ppIMediaType", + "type": "IMFMediaType" + } + ], + "MFCreateAudioMediaType": [ + { + "name": "pAudioFormat", + "type": "WAVEFORMATEX" + }, + { + "name": "ppIAudioMediaType", + "type": "IMFAudioMediaType" + } + ], + "MFGetUncompressedVideoFormat": [ + { + "name": "pVideoFormat", + "type": "MFVIDEOFORMAT" + } + ], + "MFInitVideoFormat": [ + { + "name": "pVideoFormat", + "type": "MFVIDEOFORMAT" + }, + { + "name": "type", + "type": "MFStandardVideoFormat" + } + ], + "MFInitVideoFormat_RGB": [ + { + "name": "pVideoFormat", + "type": "MFVIDEOFORMAT" + }, + { + "name": "dwWidth", + "type": "DWORD" + }, + { + "name": "dwHeight", + "type": "DWORD" + }, + { + "name": "D3Dfmt", + "type": "DWORD" + } + ], + "MFConvertColorInfoToDXVA": [ + { + "name": "pdwToDXVA", + "type": "DWORD" + }, + { + "name": "pFromFormat", + "type": "MFVIDEOFORMAT" + } + ], + "MFConvertColorInfoFromDXVA": [ + { + "name": "pToFormat", + "type": "MFVIDEOFORMAT" + }, + { + "name": "dwFromDXVA", + "type": "DWORD" + } + ], + "MFCopyImage": [ + { + "name": "pDest", + "type": "BYTE" + }, + { + "name": "lDestStride", + "type": "LONG" + }, + { + "name": "pSrc", + "type": "BYTE" + }, + { + "name": "lSrcStride", + "type": "LONG" + }, + { + "name": "dwWidthInBytes", + "type": "DWORD" + }, + { + "name": "dwLines", + "type": "DWORD" + } + ], + "MFConvertFromFP16Array": [ + { + "name": "pDest", + "type": "float" + }, + { + "name": "pSrc", + "type": "WORD" + }, + { + "name": "dwCount", + "type": "DWORD" + } + ], + "MFConvertToFP16Array": [ + { + "name": "pDest", + "type": "WORD" + }, + { + "name": "pSrc", + "type": "float" + }, + { + "name": "dwCount", + "type": "DWORD" + } + ], + "MFCreate2DMediaBuffer": [ + { + "name": "dwWidth", + "type": "DWORD" + }, + { + "name": "dwHeight", + "type": "DWORD" + }, + { + "name": "dwFourCC", + "type": "DWORD" + }, + { + "name": "fBottomUp", + "type": "BOOL" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateMediaBufferFromMediaType": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "llDuration", + "type": "LONGLONG" + }, + { + "name": "dwMinLength", + "type": "DWORD" + }, + { + "name": "dwMinAlignment", + "type": "DWORD" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFHeapFree": [ + { + "name": "pv", + "type": "void" + } + ], + "MFllMulDiv": [ + { + "name": "a", + "type": "LONGLONG" + }, + { + "name": "b", + "type": "LONGLONG" + }, + { + "name": "c", + "type": "LONGLONG" + }, + { + "name": "d", + "type": "LONGLONG" + } + ], + "MFGetContentProtectionSystemCLSID": [ + { + "name": "guidProtectionSystemID", + "type": "GUID" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "MFCombineSamples": [ + { + "name": "pSample", + "type": "IMFSample" + }, + { + "name": "pSampleToAdd", + "type": "IMFSample" + }, + { + "name": "dwMaxMergedDurationInMS", + "type": "DWORD" + }, + { + "name": "pMerged", + "type": "BOOL" + } + ], + "MFSplitSample": [ + { + "name": "pSample", + "type": "IMFSample" + }, + { + "name": "pOutputSamples", + "type": "IMFSample" + }, + { + "name": "dwOutputSampleMaxCount", + "type": "DWORD" + }, + { + "name": "pdwOutputSampleCount", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mfidl.json b/qiling/extensions/windows_sdk/mfidl.json new file mode 100644 index 000000000..ba2fa52cf --- /dev/null +++ b/qiling/extensions/windows_sdk/mfidl.json @@ -0,0 +1,764 @@ +{ + "MFCreateMediaSession": [ + { + "name": "pConfiguration", + "type": "IMFAttributes" + }, + { + "name": "ppMediaSession", + "type": "IMFMediaSession" + } + ], + "MFCreatePMPMediaSession": [ + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "pConfiguration", + "type": "IMFAttributes" + }, + { + "name": "ppMediaSession", + "type": "IMFMediaSession" + }, + { + "name": "ppEnablerActivate", + "type": "IMFActivate" + } + ], + "MFCreateSourceResolver": [ + { + "name": "ppISourceResolver", + "type": "IMFSourceResolver" + } + ], + "CreatePropertyStore": [ + { + "name": "ppStore", + "type": "IPropertyStore" + } + ], + "MFGetSupportedSchemes": [ + { + "name": "pPropVarSchemeArray", + "type": "PROPVARIANT" + } + ], + "MFGetSupportedMimeTypes": [ + { + "name": "pPropVarMimeTypeArray", + "type": "PROPVARIANT" + } + ], + "MFCreateTopology": [ + { + "name": "ppTopo", + "type": "IMFTopology" + } + ], + "MFCreateTopologyNode": [ + { + "name": "NodeType", + "type": "MF_TOPOLOGY_TYPE" + }, + { + "name": "ppNode", + "type": "IMFTopologyNode" + } + ], + "MFGetTopoNodeCurrentType": [ + { + "name": "pNode", + "type": "IMFTopologyNode" + }, + { + "name": "dwStreamIndex", + "type": "DWORD" + }, + { + "name": "fOutput", + "type": "BOOL" + }, + { + "name": "ppType", + "type": "IMFMediaType" + } + ], + "MFGetService": [ + { + "name": "punkObject", + "type": "IUnknown" + }, + { + "name": "guidService", + "type": "GUID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "LPVOID" + } + ], + "MFCreatePresentationClock": [ + { + "name": "ppPresentationClock", + "type": "IMFPresentationClock" + } + ], + "MFCreateSystemTimeSource": [ + { + "name": "ppSystemTimeSource", + "type": "IMFPresentationTimeSource" + } + ], + "MFCreatePresentationDescriptor": [ + { + "name": "cStreamDescriptors", + "type": "DWORD" + }, + { + "name": "apStreamDescriptors", + "type": "IMFStreamDescriptor" + }, + { + "name": "ppPresentationDescriptor", + "type": "IMFPresentationDescriptor" + } + ], + "MFRequireProtectedEnvironment": [ + { + "name": "pPresentationDescriptor", + "type": "IMFPresentationDescriptor" + } + ], + "MFSerializePresentationDescriptor": [ + { + "name": "pPD", + "type": "IMFPresentationDescriptor" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "ppbData", + "type": "BYTE" + } + ], + "MFDeserializePresentationDescriptor": [ + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "ppPD", + "type": "IMFPresentationDescriptor" + } + ], + "MFCreateStreamDescriptor": [ + { + "name": "dwStreamIdentifier", + "type": "DWORD" + }, + { + "name": "cMediaTypes", + "type": "DWORD" + }, + { + "name": "apMediaTypes", + "type": "IMFMediaType" + }, + { + "name": "ppDescriptor", + "type": "IMFStreamDescriptor" + } + ], + "MFCreateSimpleTypeHandler": [ + { + "name": "ppHandler", + "type": "IMFMediaTypeHandler" + } + ], + "MFShutdownObject": [ + { + "name": "pUnk", + "type": "IUnknown" + } + ], + "MFCreateAudioRenderer": [ + { + "name": "pAudioAttributes", + "type": "IMFAttributes" + }, + { + "name": "ppSink", + "type": "IMFMediaSink" + } + ], + "MFCreateAudioRendererActivate": [ + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateVideoRendererActivate": [ + { + "name": "hwndVideo", + "type": "HWND" + }, + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateMPEG4MediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "pVideoMediaType", + "type": "IMFMediaType" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreate3GPMediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "pVideoMediaType", + "type": "IMFMediaType" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateMP3MediaSink": [ + { + "name": "pTargetByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateAC3MediaSink": [ + { + "name": "pTargetByteStream", + "type": "IMFByteStream" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateADTSMediaSink": [ + { + "name": "pTargetByteStream", + "type": "IMFByteStream" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateMuxSink": [ + { + "name": "guidOutputSubType", + "type": "GUID" + }, + { + "name": "pOutputAttributes", + "type": "IMFAttributes" + }, + { + "name": "pOutputByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppMuxSink", + "type": "IMFMediaSink" + } + ], + "MFCreateFMPEG4MediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "pVideoMediaType", + "type": "IMFMediaType" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateAVIMediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "pVideoMediaType", + "type": "IMFMediaType" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateWAVEMediaSink": [ + { + "name": "pTargetByteStream", + "type": "IMFByteStream" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateTopoLoader": [ + { + "name": "ppObj", + "type": "IMFTopoLoader" + } + ], + "MFCreateSampleGrabberSinkActivate": [ + { + "name": "pIMFMediaType", + "type": "IMFMediaType" + }, + { + "name": "pIMFSampleGrabberSinkCallback", + "type": "IMFSampleGrabberSinkCallback" + }, + { + "name": "ppIActivate", + "type": "IMFActivate" + } + ], + "MFCreateStandardQualityManager": [ + { + "name": "ppQualityManager", + "type": "IMFQualityManager" + } + ], + "MFCreateSequencerSource": [ + { + "name": "pReserved", + "type": "IUnknown" + }, + { + "name": "ppSequencerSource", + "type": "IMFSequencerSource" + } + ], + "MFCreateSequencerSegmentOffset": [ + { + "name": "dwId", + "type": "MFSequencerElementId" + }, + { + "name": "hnsOffset", + "type": "MFTIME" + }, + { + "name": "pvarSegmentOffset", + "type": "PROPVARIANT" + } + ], + "MFCreateAggregateSource": [ + { + "name": "pSourceCollection", + "type": "IMFCollection" + }, + { + "name": "ppAggSource", + "type": "IMFMediaSource" + } + ], + "MFCreateCredentialCache": [ + { + "name": "ppCache", + "type": "IMFNetCredentialCache" + } + ], + "MFCreateProxyLocator": [ + { + "name": "pszProtocol", + "type": "LPCWSTR" + }, + { + "name": "pProxyConfig", + "type": "IPropertyStore" + }, + { + "name": "ppProxyLocator", + "type": "IMFNetProxyLocator" + } + ], + "MFCreateNetSchemePlugin": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvHandler", + "type": "LPVOID" + } + ], + "MFCreatePMPServer": [ + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "ppPMPServer", + "type": "IMFPMPServer" + } + ], + "MFCreateRemoteDesktopPlugin": [ + { + "name": "ppPlugin", + "type": "IMFRemoteDesktopPlugin" + } + ], + "CreateNamedPropertyStore": [ + { + "name": "ppStore", + "type": "INamedPropertyStore" + } + ], + "MFCreateSampleCopierMFT": [ + { + "name": "ppCopierMFT", + "type": "IMFTransform" + } + ], + "MFCreateTranscodeProfile": [ + { + "name": "ppTranscodeProfile", + "type": "IMFTranscodeProfile" + } + ], + "MFCreateTranscodeTopology": [ + { + "name": "pSrc", + "type": "IMFMediaSource" + }, + { + "name": "pwszOutputFilePath", + "type": "LPCWSTR" + }, + { + "name": "pProfile", + "type": "IMFTranscodeProfile" + }, + { + "name": "ppTranscodeTopo", + "type": "IMFTopology" + } + ], + "MFCreateTranscodeTopologyFromByteStream": [ + { + "name": "pSrc", + "type": "IMFMediaSource" + }, + { + "name": "pOutputStream", + "type": "IMFByteStream" + }, + { + "name": "pProfile", + "type": "IMFTranscodeProfile" + }, + { + "name": "ppTranscodeTopo", + "type": "IMFTopology" + } + ], + "MFTranscodeGetAudioOutputAvailableTypes": [ + { + "name": "guidSubType", + "type": "GUID" + }, + { + "name": "dwMFTFlags", + "type": "DWORD" + }, + { + "name": "pCodecConfig", + "type": "IMFAttributes" + }, + { + "name": "ppAvailableTypes", + "type": "IMFCollection" + } + ], + "MFCreateTranscodeSinkActivate": [ + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateTrackedSample": [ + { + "name": "ppMFSample", + "type": "IMFTrackedSample" + } + ], + "MFCreateMFByteStreamOnStream": [ + { + "name": "pStream", + "type": "IStream" + }, + { + "name": "ppByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateStreamOnMFByteStream": [ + { + "name": "pByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppStream", + "type": "IStream" + } + ], + "MFCreateMFByteStreamOnStreamEx": [ + { + "name": "punkStream", + "type": "IUnknown" + }, + { + "name": "ppByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateStreamOnMFByteStreamEx": [ + { + "name": "pByteStream", + "type": "IMFByteStream" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "MFCreateMediaTypeFromProperties": [ + { + "name": "punkStream", + "type": "IUnknown" + }, + { + "name": "ppMediaType", + "type": "IMFMediaType" + } + ], + "MFCreatePropertiesFromMediaType": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "MFEnumDeviceSources": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pppSourceActivate", + "type": "IMFActivate" + }, + { + "name": "pcSourceActivate", + "type": "UINT32" + } + ], + "MFCreateDeviceSource": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "ppSource", + "type": "IMFMediaSource" + } + ], + "MFCreateDeviceSourceActivate": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateProtectedEnvironmentAccess": [ + { + "name": "ppAccess", + "type": "IMFProtectedEnvironmentAccess" + } + ], + "MFLoadSignedLibrary": [ + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "ppLib", + "type": "IMFSignedLibrary" + } + ], + "MFGetSystemId": [ + { + "name": "ppId", + "type": "IMFSystemId" + } + ], + "MFGetLocalId": [ + { + "name": "verifier", + "type": "BYTE" + }, + { + "name": "size", + "type": "UINT32" + }, + { + "name": "id", + "type": "LPWSTR" + } + ], + "MFCreateContentProtectionDevice": [ + { + "name": "ProtectionSystemId", + "type": "GUID" + }, + { + "name": "ContentProtectionDevice", + "type": "IMFContentProtectionDevice" + } + ], + "MFIsContentProtectionDeviceSupported": [ + { + "name": "ProtectionSystemId", + "type": "GUID" + }, + { + "name": "isSupported", + "type": "BOOL" + } + ], + "MFCreateContentDecryptorContext": [ + { + "name": "guidMediaProtectionSystemId", + "type": "GUID" + }, + { + "name": "pD3DManager", + "type": "IMFDXGIDeviceManager" + }, + { + "name": "pContentProtectionDevice", + "type": "IMFContentProtectionDevice" + }, + { + "name": "ppContentDecryptorContext", + "type": "IMFContentDecryptorContext" + } + ], + "MFCreateSensorProfile": [ + { + "name": "ProfileType", + "type": "GUID" + }, + { + "name": "ProfileIndex", + "type": "UINT32" + }, + { + "name": "Constraints", + "type": "LPCWSTR" + }, + { + "name": "ppProfile", + "type": "IMFSensorProfile" + } + ], + "MFCreateSensorProfileCollection": [ + { + "name": "ppSensorProfile", + "type": "IMFSensorProfileCollection" + } + ], + "MFCreateSensorActivityMonitor": [ + { + "name": "pCallback", + "type": "IMFSensorActivitiesReportCallback" + }, + { + "name": "ppActivityMonitor", + "type": "IMFSensorActivityMonitor" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mfobjects.json b/qiling/extensions/windows_sdk/mfobjects.json new file mode 100644 index 000000000..e663f9e5e --- /dev/null +++ b/qiling/extensions/windows_sdk/mfobjects.json @@ -0,0 +1,30 @@ +{ + "MFSerializeAttributesToStream": [ + { + "name": "pAttr", + "type": "IMFAttributes" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pStm", + "type": "IStream" + } + ], + "MFDeserializeAttributesFromStream": [ + { + "name": "pAttr", + "type": "IMFAttributes" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pStm", + "type": "IStream" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mfplay.json b/qiling/extensions/windows_sdk/mfplay.json new file mode 100644 index 000000000..f99ff35af --- /dev/null +++ b/qiling/extensions/windows_sdk/mfplay.json @@ -0,0 +1,28 @@ +{ + "MFPCreateMediaPlayer": [ + { + "name": "pwszURL", + "type": "LPCWSTR" + }, + { + "name": "fStartPlayback", + "type": "BOOL" + }, + { + "name": "creationOptions", + "type": "MFP_CREATION_OPTIONS" + }, + { + "name": "pCallback", + "type": "IMFPMediaPlayerCallback" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "ppMediaPlayer", + "type": "IMFPMediaPlayer" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mftransform.json b/qiling/extensions/windows_sdk/mftransform.json new file mode 100644 index 000000000..7267ced04 --- /dev/null +++ b/qiling/extensions/windows_sdk/mftransform.json @@ -0,0 +1,8 @@ +{ + "MFCreateTransformActivate": [ + { + "name": "ppActivate", + "type": "IMFActivate" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mgmtapi.json b/qiling/extensions/windows_sdk/mgmtapi.json new file mode 100644 index 000000000..743235792 --- /dev/null +++ b/qiling/extensions/windows_sdk/mgmtapi.json @@ -0,0 +1,164 @@ +{ + "SnmpMgrOpen": [ + { + "name": "lpAgentAddress", + "type": "LPSTR" + }, + { + "name": "lpAgentCommunity", + "type": "LPSTR" + }, + { + "name": "nTimeOut", + "type": "INT" + }, + { + "name": "nRetries", + "type": "INT" + } + ], + "SnmpMgrCtl": [ + { + "name": "session", + "type": "LPSNMP_MGR_SESSION" + }, + { + "name": "dwCtlCode", + "type": "DWORD" + }, + { + "name": "lpvInBuffer", + "type": "LPVOID" + }, + { + "name": "cbInBuffer", + "type": "DWORD" + }, + { + "name": "lpvOUTBuffer", + "type": "LPVOID" + }, + { + "name": "cbOUTBuffer", + "type": "DWORD" + }, + { + "name": "lpcbBytesReturned", + "type": "LPDWORD" + } + ], + "SnmpMgrClose": [ + { + "name": "session", + "type": "LPSNMP_MGR_SESSION" + } + ], + "SnmpMgrRequest": [ + { + "name": "session", + "type": "LPSNMP_MGR_SESSION" + }, + { + "name": "requestType", + "type": "BYTE" + }, + { + "name": "variableBindings", + "type": "SnmpVarBindList" + }, + { + "name": "errorStatus", + "type": "AsnInteger32" + }, + { + "name": "errorIndex", + "type": "AsnInteger32" + } + ], + "SnmpMgrStrToOid": [ + { + "name": "string", + "type": "LPSTR" + }, + { + "name": "oid", + "type": "AsnObjectIdentifier" + } + ], + "SnmpMgrOidToStr": [ + { + "name": "oid", + "type": "AsnObjectIdentifier" + }, + { + "name": "string", + "type": "LPSTR" + } + ], + "SnmpMgrTrapListen": [ + { + "name": "phTrapAvailable", + "type": "HANDLE" + } + ], + "SnmpMgrGetTrap": [ + { + "name": "enterprise", + "type": "AsnObjectIdentifier" + }, + { + "name": "IPAddress", + "type": "AsnNetworkAddress" + }, + { + "name": "genericTrap", + "type": "AsnInteger32" + }, + { + "name": "specificTrap", + "type": "AsnInteger32" + }, + { + "name": "timeStamp", + "type": "AsnTimeticks" + }, + { + "name": "variableBindings", + "type": "SnmpVarBindList" + } + ], + "SnmpMgrGetTrapEx": [ + { + "name": "enterprise", + "type": "AsnObjectIdentifier" + }, + { + "name": "agentAddress", + "type": "AsnNetworkAddress" + }, + { + "name": "sourceAddress", + "type": "AsnNetworkAddress" + }, + { + "name": "genericTrap", + "type": "AsnInteger32" + }, + { + "name": "specificTrap", + "type": "AsnInteger32" + }, + { + "name": "community", + "type": "AsnOctetString" + }, + { + "name": "timeStamp", + "type": "AsnTimeticks" + }, + { + "name": "variableBindings", + "type": "SnmpVarBindList" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mi.json b/qiling/extensions/windows_sdk/mi.json new file mode 100644 index 000000000..e0b57759d --- /dev/null +++ b/qiling/extensions/windows_sdk/mi.json @@ -0,0 +1,62 @@ +{ + "MI_Application_InitializeV1": [ + { + "name": "flags", + "type": "MI_Uint32" + }, + { + "name": "applicationID", + "type": "MI_Char" + }, + { + "name": "extendedError", + "type": "MI_Instance" + }, + { + "name": "application", + "type": "MI_Application" + } + ], + "MI_Application_NewClass": [ + { + "name": "application", + "type": "MI_Application" + }, + { + "name": "classDecl", + "type": "MI_ClassDecl" + }, + { + "name": "namespaceName", + "type": "MI_Char" + }, + { + "name": "serverName", + "type": "MI_Char" + }, + { + "name": "classObject", + "type": "MI_Class" + } + ], + "MI_OperationOptions_SetResourceUri": [ + { + "name": "options", + "type": "MI_OperationOptions" + }, + { + "name": "rUri", + "type": "MI_Char" + } + ], + "MI_OperationOptions_GetResourceUri": [ + { + "name": "options", + "type": "MI_OperationOptions" + }, + { + "name": "rUri", + "type": "MI_Char" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/midles.json b/qiling/extensions/windows_sdk/midles.json new file mode 100644 index 000000000..7a194ea02 --- /dev/null +++ b/qiling/extensions/windows_sdk/midles.json @@ -0,0 +1,166 @@ +{ + "MesEncodeIncrementalHandleCreate": [ + { + "name": "UserState", + "type": "void" + }, + { + "name": "AllocFn", + "type": "MIDL_ES_ALLOC" + }, + { + "name": "WriteFn", + "type": "MIDL_ES_WRITE" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesDecodeIncrementalHandleCreate": [ + { + "name": "UserState", + "type": "void" + }, + { + "name": "ReadFn", + "type": "MIDL_ES_READ" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesIncrementalHandleReset": [ + { + "name": "Handle", + "type": "handle_t" + }, + { + "name": "UserState", + "type": "void" + }, + { + "name": "AllocFn", + "type": "MIDL_ES_ALLOC" + }, + { + "name": "WriteFn", + "type": "MIDL_ES_WRITE" + }, + { + "name": "ReadFn", + "type": "MIDL_ES_READ" + }, + { + "name": "Operation", + "type": "MIDL_ES_CODE" + } + ], + "MesEncodeFixedBufferHandleCreate": [ + { + "name": "pBuffer", + "type": "char" + }, + { + "name": "BufferSize", + "type": "unsigned long" + }, + { + "name": "pEncodedSize", + "type": "unsigned long" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesEncodeDynBufferHandleCreate": [ + { + "name": "pBuffer", + "type": "char" + }, + { + "name": "pEncodedSize", + "type": "unsigned long" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesDecodeBufferHandleCreate": [ + { + "name": "Buffer", + "type": "char" + }, + { + "name": "BufferSize", + "type": "unsigned long" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesBufferHandleReset": [ + { + "name": "Handle", + "type": "handle_t" + }, + { + "name": "HandleStyle", + "type": "unsigned long" + }, + { + "name": "Operation", + "type": "MIDL_ES_CODE" + }, + { + "name": "pBuffer", + "type": "char" + }, + { + "name": "BufferSize", + "type": "unsigned long" + }, + { + "name": "pEncodedSize", + "type": "unsigned long" + } + ], + "MesHandleFree": [ + { + "name": "Handle", + "type": "handle_t" + } + ], + "MesInqProcEncodingId": [ + { + "name": "Handle", + "type": "handle_t" + }, + { + "name": "pInterfaceId", + "type": "PRPC_SYNTAX_IDENTIFIER" + }, + { + "name": "pProcNum", + "type": "unsigned long" + } + ], + "NdrMesProcEncodeDecode2": [ + { + "name": "Handle", + "type": "handle_t" + }, + { + "name": "pStubDesc", + "type": "MIDL_STUB_DESC" + }, + { + "name": "pFormatString", + "type": "PFORMAT_STRING" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/minidumpapiset.json b/qiling/extensions/windows_sdk/minidumpapiset.json new file mode 100644 index 000000000..0b798e86d --- /dev/null +++ b/qiling/extensions/windows_sdk/minidumpapiset.json @@ -0,0 +1,54 @@ +{ + "MiniDumpWriteDump": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ProcessId", + "type": "DWORD" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "DumpType", + "type": "MINIDUMP_TYPE" + }, + { + "name": "ExceptionParam", + "type": "PMINIDUMP_EXCEPTION_INFORMATION" + }, + { + "name": "UserStreamParam", + "type": "PMINIDUMP_USER_STREAM_INFORMATION" + }, + { + "name": "CallbackParam", + "type": "PMINIDUMP_CALLBACK_INFORMATION" + } + ], + "MiniDumpReadDumpStream": [ + { + "name": "BaseOfDump", + "type": "PVOID" + }, + { + "name": "StreamNumber", + "type": "ULONG" + }, + { + "name": "Dir", + "type": "PMINIDUMP_DIRECTORY" + }, + { + "name": "StreamPointer", + "type": "PVOID" + }, + { + "name": "StreamSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mmddk.json b/qiling/extensions/windows_sdk/mmddk.json new file mode 100644 index 000000000..588d16bc5 --- /dev/null +++ b/qiling/extensions/windows_sdk/mmddk.json @@ -0,0 +1,40 @@ +{ + "mmTaskCreate": [ + { + "name": "lpfn", + "type": "LPTASKCALLBACK" + }, + { + "name": "lph", + "type": "HANDLE" + }, + { + "name": "dwInst", + "type": "DWORD_PTR" + } + ], + "mmTaskBlock": [ + { + "name": "h", + "type": "DWORD" + } + ], + "mmTaskSignal": [ + { + "name": "h", + "type": "DWORD" + } + ], + "mmTaskYield": [ + { + "name": "VOID", + "type": "void" + } + ], + "mmGetCurrentTask": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mmdeviceapi.json b/qiling/extensions/windows_sdk/mmdeviceapi.json new file mode 100644 index 000000000..3d0299ecf --- /dev/null +++ b/qiling/extensions/windows_sdk/mmdeviceapi.json @@ -0,0 +1,24 @@ +{ + "ActivateAudioInterfaceAsync": [ + { + "name": "deviceInterfacePath", + "type": "LPCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "activationParams", + "type": "PROPVARIANT" + }, + { + "name": "completionHandler", + "type": "IActivateAudioInterfaceCompletionHandler" + }, + { + "name": "activationOperation", + "type": "IActivateAudioInterfaceAsyncOperation" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mmeapi.json b/qiling/extensions/windows_sdk/mmeapi.json new file mode 100644 index 000000000..8e114b2f2 --- /dev/null +++ b/qiling/extensions/windows_sdk/mmeapi.json @@ -0,0 +1,1142 @@ +{ + "waveOutGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "waveOutGetVolume": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pdwVolume", + "type": "LPDWORD" + } + ], + "waveOutSetVolume": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "dwVolume", + "type": "DWORD" + } + ], + "waveOutOpen": [ + { + "name": "phwo", + "type": "LPHWAVEOUT" + }, + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "pwfx", + "type": "LPCWAVEFORMATEX" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "waveOutClose": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutPrepareHeader": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveOutUnprepareHeader": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveOutWrite": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveOutPause": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutRestart": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutReset": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutBreakLoop": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutGetPosition": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pmmt", + "type": "LPMMTIME" + }, + { + "name": "cbmmt", + "type": "UINT" + } + ], + "waveOutGetPitch": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pdwPitch", + "type": "LPDWORD" + } + ], + "waveOutSetPitch": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "dwPitch", + "type": "DWORD" + } + ], + "waveOutGetPlaybackRate": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pdwRate", + "type": "LPDWORD" + } + ], + "waveOutSetPlaybackRate": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "dwRate", + "type": "DWORD" + } + ], + "waveOutGetID": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + } + ], + "waveOutMessage": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "waveInGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "waveInOpen": [ + { + "name": "phwi", + "type": "LPHWAVEIN" + }, + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "pwfx", + "type": "LPCWAVEFORMATEX" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "waveInClose": [ + { + "name": "hwi", + "type": "HWAVEIN" + } + ], + "waveInPrepareHeader": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveInUnprepareHeader": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveInAddBuffer": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveInStart": [ + { + "name": "hwi", + "type": "HWAVEIN" + } + ], + "waveInStop": [ + { + "name": "hwi", + "type": "HWAVEIN" + } + ], + "waveInReset": [ + { + "name": "hwi", + "type": "HWAVEIN" + } + ], + "waveInGetPosition": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "pmmt", + "type": "LPMMTIME" + }, + { + "name": "cbmmt", + "type": "UINT" + } + ], + "waveInGetID": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + } + ], + "waveInMessage": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "midiOutGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "midiStreamOpen": [ + { + "name": "phms", + "type": "LPHMIDISTRM" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + }, + { + "name": "cMidi", + "type": "DWORD" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "midiStreamClose": [ + { + "name": "hms", + "type": "HMIDISTRM" + } + ], + "midiStreamProperty": [ + { + "name": "hms", + "type": "HMIDISTRM" + }, + { + "name": "lppropdata", + "type": "LPBYTE" + }, + { + "name": "dwProperty", + "type": "DWORD" + } + ], + "midiStreamPosition": [ + { + "name": "hms", + "type": "HMIDISTRM" + }, + { + "name": "lpmmt", + "type": "LPMMTIME" + }, + { + "name": "cbmmt", + "type": "UINT" + } + ], + "midiStreamOut": [ + { + "name": "hms", + "type": "HMIDISTRM" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiStreamPause": [ + { + "name": "hms", + "type": "HMIDISTRM" + } + ], + "midiStreamRestart": [ + { + "name": "hms", + "type": "HMIDISTRM" + } + ], + "midiStreamStop": [ + { + "name": "hms", + "type": "HMIDISTRM" + } + ], + "midiConnect": [ + { + "name": "hmi", + "type": "HMIDI" + }, + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "midiDisconnect": [ + { + "name": "hmi", + "type": "HMIDI" + }, + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "midiOutGetDevCapsA": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pmoc", + "type": "LPMIDIOUTCAPSA" + }, + { + "name": "cbmoc", + "type": "UINT" + } + ], + "midiOutGetDevCapsW": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pmoc", + "type": "LPMIDIOUTCAPSW" + }, + { + "name": "cbmoc", + "type": "UINT" + } + ], + "midiOutGetVolume": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pdwVolume", + "type": "LPDWORD" + } + ], + "midiOutSetVolume": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "dwVolume", + "type": "DWORD" + } + ], + "midiOutGetErrorTextA": [ + { + "name": "mmrError", + "type": "MMRESULT" + }, + { + "name": "pszText", + "type": "LPSTR" + }, + { + "name": "cchText", + "type": "UINT" + } + ], + "midiOutGetErrorTextW": [ + { + "name": "mmrError", + "type": "MMRESULT" + }, + { + "name": "pszText", + "type": "LPWSTR" + }, + { + "name": "cchText", + "type": "UINT" + } + ], + "midiOutOpen": [ + { + "name": "phmo", + "type": "LPHMIDIOUT" + }, + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "midiOutClose": [ + { + "name": "hmo", + "type": "HMIDIOUT" + } + ], + "midiOutPrepareHeader": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiOutUnprepareHeader": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiOutShortMsg": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "dwMsg", + "type": "DWORD" + } + ], + "midiOutLongMsg": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiOutReset": [ + { + "name": "hmo", + "type": "HMIDIOUT" + } + ], + "midiOutCachePatches": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "uBank", + "type": "UINT" + }, + { + "name": "pwpa", + "type": "LPWORD" + }, + { + "name": "fuCache", + "type": "UINT" + } + ], + "midiOutCacheDrumPatches": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "uPatch", + "type": "UINT" + }, + { + "name": "pwkya", + "type": "LPWORD" + }, + { + "name": "fuCache", + "type": "UINT" + } + ], + "midiOutGetID": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + } + ], + "midiOutMessage": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "midiInGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "midiInGetDevCapsA": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pmic", + "type": "LPMIDIINCAPSA" + }, + { + "name": "cbmic", + "type": "UINT" + } + ], + "midiInGetDevCapsW": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pmic", + "type": "LPMIDIINCAPSW" + }, + { + "name": "cbmic", + "type": "UINT" + } + ], + "midiInGetErrorTextA": [ + { + "name": "mmrError", + "type": "MMRESULT" + }, + { + "name": "pszText", + "type": "LPSTR" + }, + { + "name": "cchText", + "type": "UINT" + } + ], + "midiInGetErrorTextW": [ + { + "name": "mmrError", + "type": "MMRESULT" + }, + { + "name": "pszText", + "type": "LPWSTR" + }, + { + "name": "cchText", + "type": "UINT" + } + ], + "midiInOpen": [ + { + "name": "phmi", + "type": "LPHMIDIIN" + }, + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "midiInClose": [ + { + "name": "hmi", + "type": "HMIDIIN" + } + ], + "midiInPrepareHeader": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiInUnprepareHeader": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiInAddBuffer": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiInStart": [ + { + "name": "hmi", + "type": "HMIDIIN" + } + ], + "midiInStop": [ + { + "name": "hmi", + "type": "HMIDIIN" + } + ], + "midiInReset": [ + { + "name": "hmi", + "type": "HMIDIIN" + } + ], + "midiInGetID": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + } + ], + "midiInMessage": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "auxGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "auxGetDevCapsA": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pac", + "type": "LPAUXCAPSA" + }, + { + "name": "cbac", + "type": "UINT" + } + ], + "auxGetDevCapsW": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pac", + "type": "LPAUXCAPSW" + }, + { + "name": "cbac", + "type": "UINT" + } + ], + "auxSetVolume": [ + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "dwVolume", + "type": "DWORD" + } + ], + "auxGetVolume": [ + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "pdwVolume", + "type": "LPDWORD" + } + ], + "auxOutMessage": [ + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "mixerGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "mixerGetDevCapsA": [ + { + "name": "uMxId", + "type": "UINT_PTR" + }, + { + "name": "pmxcaps", + "type": "LPMIXERCAPSA" + }, + { + "name": "cbmxcaps", + "type": "UINT" + } + ], + "mixerGetDevCapsW": [ + { + "name": "uMxId", + "type": "UINT_PTR" + }, + { + "name": "pmxcaps", + "type": "LPMIXERCAPSW" + }, + { + "name": "cbmxcaps", + "type": "UINT" + } + ], + "mixerOpen": [ + { + "name": "phmx", + "type": "LPHMIXER" + }, + { + "name": "uMxId", + "type": "UINT" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "mixerClose": [ + { + "name": "hmx", + "type": "HMIXER" + } + ], + "mixerMessage": [ + { + "name": "hmx", + "type": "HMIXER" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dwParam1", + "type": "DWORD_PTR" + }, + { + "name": "dwParam2", + "type": "DWORD_PTR" + } + ], + "mixerGetLineInfoA": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxl", + "type": "LPMIXERLINEA" + }, + { + "name": "fdwInfo", + "type": "DWORD" + } + ], + "mixerGetLineInfoW": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxl", + "type": "LPMIXERLINEW" + }, + { + "name": "fdwInfo", + "type": "DWORD" + } + ], + "mixerGetID": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "puMxId", + "type": "UINT" + }, + { + "name": "fdwId", + "type": "DWORD" + } + ], + "mixerGetLineControlsA": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxlc", + "type": "LPMIXERLINECONTROLSA" + }, + { + "name": "fdwControls", + "type": "DWORD" + } + ], + "mixerGetLineControlsW": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxlc", + "type": "LPMIXERLINECONTROLSW" + }, + { + "name": "fdwControls", + "type": "DWORD" + } + ], + "mixerGetControlDetailsA": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxcd", + "type": "LPMIXERCONTROLDETAILS" + }, + { + "name": "fdwDetails", + "type": "DWORD" + } + ], + "mixerGetControlDetailsW": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxcd", + "type": "LPMIXERCONTROLDETAILS" + }, + { + "name": "fdwDetails", + "type": "DWORD" + } + ], + "mixerSetControlDetails": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxcd", + "type": "LPMIXERCONTROLDETAILS" + }, + { + "name": "fdwDetails", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mmiscapi.json b/qiling/extensions/windows_sdk/mmiscapi.json new file mode 100644 index 000000000..8aa50f743 --- /dev/null +++ b/qiling/extensions/windows_sdk/mmiscapi.json @@ -0,0 +1,428 @@ +{ + "CloseDriver": [ + { + "name": "hDriver", + "type": "HDRVR" + }, + { + "name": "lParam1", + "type": "LPARAM" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "OpenDriver": [ + { + "name": "szDriverName", + "type": "LPCWSTR" + }, + { + "name": "szSectionName", + "type": "LPCWSTR" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "SendDriverMessage": [ + { + "name": "hDriver", + "type": "HDRVR" + }, + { + "name": "message", + "type": "UINT" + }, + { + "name": "lParam1", + "type": "LPARAM" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "DrvGetModuleHandle": [ + { + "name": "hDriver", + "type": "HDRVR" + } + ], + "GetDriverModuleHandle": [ + { + "name": "hDriver", + "type": "HDRVR" + } + ], + "DefDriverProc": [ + { + "name": "dwDriverIdentifier", + "type": "DWORD_PTR" + }, + { + "name": "hdrvr", + "type": "HDRVR" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "lParam1", + "type": "LPARAM" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "DriverCallback": [ + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hDevice", + "type": "HDRVR" + }, + { + "name": "dwMsg", + "type": "DWORD" + }, + { + "name": "dwUser", + "type": "DWORD_PTR" + }, + { + "name": "dwParam1", + "type": "DWORD_PTR" + }, + { + "name": "dwParam2", + "type": "DWORD_PTR" + } + ], + "sndOpenSound": [ + { + "name": "EventName", + "type": "LPCWSTR" + }, + { + "name": "AppName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "INT32" + }, + { + "name": "FileHandle", + "type": "PHANDLE" + } + ], + "mmioStringToFOURCCA": [ + { + "name": "sz", + "type": "LPCSTR" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "mmioStringToFOURCCW": [ + { + "name": "sz", + "type": "LPCWSTR" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "mmioInstallIOProcA": [ + { + "name": "fccIOProc", + "type": "FOURCC" + }, + { + "name": "pIOProc", + "type": "LPMMIOPROC" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "mmioInstallIOProcW": [ + { + "name": "fccIOProc", + "type": "FOURCC" + }, + { + "name": "pIOProc", + "type": "LPMMIOPROC" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "mmioOpenA": [ + { + "name": "pszFileName", + "type": "LPSTR" + }, + { + "name": "pmmioinfo", + "type": "LPMMIOINFO" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "mmioOpenW": [ + { + "name": "pszFileName", + "type": "LPWSTR" + }, + { + "name": "pmmioinfo", + "type": "LPMMIOINFO" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "mmioRenameA": [ + { + "name": "pszFileName", + "type": "LPCSTR" + }, + { + "name": "pszNewFileName", + "type": "LPCSTR" + }, + { + "name": "pmmioinfo", + "type": "LPCMMIOINFO" + }, + { + "name": "fdwRename", + "type": "DWORD" + } + ], + "mmioRenameW": [ + { + "name": "pszFileName", + "type": "LPCWSTR" + }, + { + "name": "pszNewFileName", + "type": "LPCWSTR" + }, + { + "name": "pmmioinfo", + "type": "LPCMMIOINFO" + }, + { + "name": "fdwRename", + "type": "DWORD" + } + ], + "mmioClose": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "fuClose", + "type": "UINT" + } + ], + "mmioRead": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pch", + "type": "HPSTR" + }, + { + "name": "cch", + "type": "LONG" + } + ], + "mmioWrite": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pch", + "type": "char" + }, + { + "name": "cch", + "type": "LONG" + } + ], + "mmioSeek": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "lOffset", + "type": "LONG" + }, + { + "name": "iOrigin", + "type": "int" + } + ], + "mmioGetInfo": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmioinfo", + "type": "LPMMIOINFO" + }, + { + "name": "fuInfo", + "type": "UINT" + } + ], + "mmioSetInfo": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmioinfo", + "type": "LPCMMIOINFO" + }, + { + "name": "fuInfo", + "type": "UINT" + } + ], + "mmioSetBuffer": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pchBuffer", + "type": "LPSTR" + }, + { + "name": "cchBuffer", + "type": "LONG" + }, + { + "name": "fuBuffer", + "type": "UINT" + } + ], + "mmioFlush": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "fuFlush", + "type": "UINT" + } + ], + "mmioAdvance": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmioinfo", + "type": "LPMMIOINFO" + }, + { + "name": "fuAdvance", + "type": "UINT" + } + ], + "mmioSendMessage": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "lParam1", + "type": "LPARAM" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "mmioDescend": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmcki", + "type": "LPMMCKINFO" + }, + { + "name": "pmmckiParent", + "type": "MMCKINFO" + }, + { + "name": "fuDescend", + "type": "UINT" + } + ], + "mmioAscend": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmcki", + "type": "LPMMCKINFO" + }, + { + "name": "fuAscend", + "type": "UINT" + } + ], + "mmioCreateChunk": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmcki", + "type": "LPMMCKINFO" + }, + { + "name": "fuCreate", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mprapi.json b/qiling/extensions/windows_sdk/mprapi.json new file mode 100644 index 000000000..aa39cf989 --- /dev/null +++ b/qiling/extensions/windows_sdk/mprapi.json @@ -0,0 +1,1930 @@ +{ + "MprAdminConnectionEnumEx": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "pObjectHeader", + "type": "PMPRAPI_OBJECT_HEADER" + }, + { + "name": "dwPreferedMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "ppRasConn", + "type": "PRAS_CONNECTION_EX" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprAdminConnectionGetInfoEx": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "hRasConnection", + "type": "HANDLE" + }, + { + "name": "pRasConnection", + "type": "PRAS_CONNECTION_EX" + } + ], + "MprAdminServerGetInfoEx": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "pServerInfo", + "type": "MPR_SERVER_EX1" + } + ], + "MprAdminServerSetInfoEx": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "pServerInfo", + "type": "MPR_SERVER_SET_CONFIG_EX1" + } + ], + "MprConfigServerGetInfoEx": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "pServerInfo", + "type": "MPR_SERVER_EX1" + } + ], + "MprConfigServerSetInfoEx": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "pSetServerConfig", + "type": "MPR_SERVER_SET_CONFIG_EX1" + } + ], + "MprAdminIsServiceInitialized": [ + { + "name": "lpwsServerName", + "type": "LPWSTR" + }, + { + "name": "fIsServiceInitialized", + "type": "BOOL" + } + ], + "MprAdminInterfaceSetCustomInfoEx": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "pCustomInfo", + "type": "PMPR_IF_CUSTOMINFOEX2" + } + ], + "MprAdminInterfaceGetCustomInfoEx": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "pCustomInfo", + "type": "PMPR_IF_CUSTOMINFOEX2" + } + ], + "MprConfigInterfaceGetCustomInfoEx": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "pCustomInfo", + "type": "PMPR_IF_CUSTOMINFOEX2" + } + ], + "MprConfigInterfaceSetCustomInfoEx": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "pCustomInfo", + "type": "PMPR_IF_CUSTOMINFOEX2" + } + ], + "MprAdminConnectionEnum": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + }, + { + "name": "dwPrefMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprAdminPortEnum": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "hRasConnection", + "type": "HANDLE" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + }, + { + "name": "dwPrefMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprAdminConnectionGetInfo": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "hRasConnection", + "type": "HANDLE" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminPortGetInfo": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "hPort", + "type": "HANDLE" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminConnectionClearStats": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "hRasConnection", + "type": "HANDLE" + } + ], + "MprAdminPortClearStats": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "hPort", + "type": "HANDLE" + } + ], + "MprAdminPortReset": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "hPort", + "type": "HANDLE" + } + ], + "MprAdminPortDisconnect": [ + { + "name": "hRasServer", + "type": "RAS_SERVER_HANDLE" + }, + { + "name": "hPort", + "type": "HANDLE" + } + ], + "MprAdminConnectionRemoveQuarantine": [ + { + "name": "hRasServer", + "type": "HANDLE" + }, + { + "name": "hRasConnection", + "type": "HANDLE" + }, + { + "name": "fIsIpAddress", + "type": "BOOL" + } + ], + "MprAdminUserGetInfo": [ + { + "name": "lpszServer", + "type": "LPCWSTR" + }, + { + "name": "lpszUser", + "type": "LPCWSTR" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminUserSetInfo": [ + { + "name": "lpszServer", + "type": "LPCWSTR" + }, + { + "name": "lpszUser", + "type": "LPCWSTR" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminSendUserMessage": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hConnection", + "type": "HANDLE" + }, + { + "name": "lpwszMessage", + "type": "LPWSTR" + } + ], + "MprAdminGetPDCServer": [ + { + "name": "lpszDomain", + "type": "LPCWSTR" + }, + { + "name": "lpszServer", + "type": "LPCWSTR" + }, + { + "name": "lpszPDCServer", + "type": "LPWSTR" + } + ], + "MprAdminIsServiceRunning": [ + { + "name": "lpwsServerName", + "type": "LPWSTR" + } + ], + "MprAdminServerConnect": [ + { + "name": "lpwsServerName", + "type": "LPWSTR" + }, + { + "name": "phMprServer", + "type": "MPR_SERVER_HANDLE" + } + ], + "MprAdminServerDisconnect": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + } + ], + "MprAdminServerGetCredentials": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminServerSetCredentials": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminBufferFree": [ + { + "name": "pBuffer", + "type": "LPVOID" + } + ], + "MprAdminGetErrorString": [ + { + "name": "dwError", + "type": "DWORD" + }, + { + "name": "lplpwsErrorString", + "type": "LPWSTR" + } + ], + "MprAdminServerGetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminServerSetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminEstablishDomainRasServer": [ + { + "name": "pszDomain", + "type": "LPWSTR" + }, + { + "name": "pszMachine", + "type": "LPWSTR" + }, + { + "name": "bEnable", + "type": "BOOL" + } + ], + "MprAdminIsDomainRasServer": [ + { + "name": "pszDomain", + "type": "LPWSTR" + }, + { + "name": "pszMachine", + "type": "LPWSTR" + }, + { + "name": "pbIsRasServer", + "type": "PBOOL" + } + ], + "MprAdminTransportCreate": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "lpwsTransportName", + "type": "LPWSTR" + }, + { + "name": "pGlobalInfo", + "type": "LPBYTE" + }, + { + "name": "dwGlobalInfoSize", + "type": "DWORD" + }, + { + "name": "pClientInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwClientInterfaceInfoSize", + "type": "DWORD" + }, + { + "name": "lpwsDLLPath", + "type": "LPWSTR" + } + ], + "MprAdminTransportSetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "pGlobalInfo", + "type": "LPBYTE" + }, + { + "name": "dwGlobalInfoSize", + "type": "DWORD" + }, + { + "name": "pClientInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwClientInterfaceInfoSize", + "type": "DWORD" + } + ], + "MprAdminTransportGetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "ppGlobalInfo", + "type": "LPBYTE" + }, + { + "name": "lpdwGlobalInfoSize", + "type": "LPDWORD" + }, + { + "name": "ppClientInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "lpdwClientInterfaceInfoSize", + "type": "LPDWORD" + } + ], + "MprAdminDeviceEnum": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + } + ], + "MprAdminInterfaceGetHandle": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "lpwsInterfaceName", + "type": "LPWSTR" + }, + { + "name": "phInterface", + "type": "HANDLE" + }, + { + "name": "fIncludeClientInterfaces", + "type": "BOOL" + } + ], + "MprAdminInterfaceCreate": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + }, + { + "name": "phInterface", + "type": "HANDLE" + } + ], + "MprAdminInterfaceGetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminInterfaceSetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminInterfaceDelete": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + } + ], + "MprAdminInterfaceDeviceGetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpBuffer", + "type": "LPBYTE" + } + ], + "MprAdminInterfaceDeviceSetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminInterfaceTransportRemove": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + } + ], + "MprAdminInterfaceTransportAdd": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "pInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwInterfaceInfoSize", + "type": "DWORD" + } + ], + "MprAdminInterfaceTransportGetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "ppInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "lpdwInterfaceInfoSize", + "type": "LPDWORD" + } + ], + "MprAdminInterfaceTransportSetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "pInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwInterfaceInfoSize", + "type": "DWORD" + } + ], + "MprAdminInterfaceEnum": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + }, + { + "name": "dwPrefMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprAdminInterfaceSetCredentials": [ + { + "name": "lpwsServer", + "type": "LPWSTR" + }, + { + "name": "lpwsInterfaceName", + "type": "LPWSTR" + }, + { + "name": "lpwsUserName", + "type": "LPWSTR" + }, + { + "name": "lpwsDomainName", + "type": "LPWSTR" + }, + { + "name": "lpwsPassword", + "type": "LPWSTR" + } + ], + "MprAdminInterfaceGetCredentials": [ + { + "name": "lpwsServer", + "type": "LPWSTR" + }, + { + "name": "lpwsInterfaceName", + "type": "LPWSTR" + }, + { + "name": "lpwsUserName", + "type": "LPWSTR" + }, + { + "name": "lpwsPassword", + "type": "LPWSTR" + }, + { + "name": "lpwsDomainName", + "type": "LPWSTR" + } + ], + "MprAdminInterfaceSetCredentialsEx": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminInterfaceGetCredentialsEx": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprAdminInterfaceConnect": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "fSynchronous", + "type": "BOOL" + } + ], + "MprAdminInterfaceDisconnect": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + } + ], + "MprAdminInterfaceUpdateRoutes": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "MprAdminInterfaceQueryUpdateResult": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "lpdwUpdateResult", + "type": "LPDWORD" + } + ], + "MprAdminInterfaceUpdatePhonebookInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hInterface", + "type": "HANDLE" + } + ], + "MprAdminRegisterConnectionNotification": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hEventNotification", + "type": "HANDLE" + } + ], + "MprAdminDeregisterConnectionNotification": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "hEventNotification", + "type": "HANDLE" + } + ], + "MprAdminMIBServerConnect": [ + { + "name": "lpwsServerName", + "type": "LPWSTR" + }, + { + "name": "phMibServer", + "type": "MIB_SERVER_HANDLE" + } + ], + "MprAdminMIBServerDisconnect": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + } + ], + "MprAdminMIBEntryCreate": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwPid", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpEntry", + "type": "LPVOID" + }, + { + "name": "dwEntrySize", + "type": "DWORD" + } + ], + "MprAdminMIBEntryDelete": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpEntry", + "type": "LPVOID" + }, + { + "name": "dwEntrySize", + "type": "DWORD" + } + ], + "MprAdminMIBEntrySet": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpEntry", + "type": "LPVOID" + }, + { + "name": "dwEntrySize", + "type": "DWORD" + } + ], + "MprAdminMIBEntryGet": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpInEntry", + "type": "LPVOID" + }, + { + "name": "dwInEntrySize", + "type": "DWORD" + }, + { + "name": "lplpOutEntry", + "type": "LPVOID" + }, + { + "name": "lpOutEntrySize", + "type": "LPDWORD" + } + ], + "MprAdminMIBEntryGetFirst": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpInEntry", + "type": "LPVOID" + }, + { + "name": "dwInEntrySize", + "type": "DWORD" + }, + { + "name": "lplpOutEntry", + "type": "LPVOID" + }, + { + "name": "lpOutEntrySize", + "type": "LPDWORD" + } + ], + "MprAdminMIBEntryGetNext": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpInEntry", + "type": "LPVOID" + }, + { + "name": "dwInEntrySize", + "type": "DWORD" + }, + { + "name": "lplpOutEntry", + "type": "LPVOID" + }, + { + "name": "lpOutEntrySize", + "type": "LPDWORD" + } + ], + "MprAdminMIBGetTrapInfo": [ + { + "name": "hMibServer", + "type": "MIB_SERVER_HANDLE" + }, + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "lpInData", + "type": "LPVOID" + }, + { + "name": "dwInDataSize", + "type": "DWORD" + }, + { + "name": "lplpOutData", + "type": "LPVOID" + }, + { + "name": "lpOutDataSize", + "type": "LPDWORD" + } + ], + "MprAdminMIBSetTrapInfo": [ + { + "name": "dwProtocolId", + "type": "DWORD" + }, + { + "name": "dwRoutingPid", + "type": "DWORD" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "lpInData", + "type": "LPVOID" + }, + { + "name": "dwInDataSize", + "type": "DWORD" + }, + { + "name": "lplpOutData", + "type": "LPVOID" + }, + { + "name": "lpOutDataSize", + "type": "LPDWORD" + } + ], + "MprAdminMIBBufferFree": [ + { + "name": "pBuffer", + "type": "LPVOID" + } + ], + "MprConfigServerInstall": [ + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PVOID" + } + ], + "MprConfigServerConnect": [ + { + "name": "lpwsServerName", + "type": "LPWSTR" + }, + { + "name": "phMprConfig", + "type": "HANDLE" + } + ], + "MprConfigServerDisconnect": [ + { + "name": "hMprConfig", + "type": "HANDLE" + } + ], + "MprConfigBufferFree": [ + { + "name": "pBuffer", + "type": "LPVOID" + } + ], + "MprConfigServerGetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpbBuffer", + "type": "LPBYTE" + } + ], + "MprConfigServerSetInfo": [ + { + "name": "hMprServer", + "type": "MPR_SERVER_HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprConfigServerBackup": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "lpwsPath", + "type": "LPWSTR" + } + ], + "MprConfigServerRestore": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "lpwsPath", + "type": "LPWSTR" + } + ], + "MprConfigTransportCreate": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "lpwsTransportName", + "type": "LPWSTR" + }, + { + "name": "pGlobalInfo", + "type": "LPBYTE" + }, + { + "name": "dwGlobalInfoSize", + "type": "DWORD" + }, + { + "name": "pClientInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwClientInterfaceInfoSize", + "type": "DWORD" + }, + { + "name": "lpwsDLLPath", + "type": "LPWSTR" + }, + { + "name": "phRouterTransport", + "type": "HANDLE" + } + ], + "MprConfigTransportDelete": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterTransport", + "type": "HANDLE" + } + ], + "MprConfigTransportGetHandle": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "phRouterTransport", + "type": "HANDLE" + } + ], + "MprConfigTransportSetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterTransport", + "type": "HANDLE" + }, + { + "name": "pGlobalInfo", + "type": "LPBYTE" + }, + { + "name": "dwGlobalInfoSize", + "type": "DWORD" + }, + { + "name": "pClientInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwClientInterfaceInfoSize", + "type": "DWORD" + }, + { + "name": "lpwsDLLPath", + "type": "LPWSTR" + } + ], + "MprConfigTransportGetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterTransport", + "type": "HANDLE" + }, + { + "name": "ppGlobalInfo", + "type": "LPBYTE" + }, + { + "name": "lpdwGlobalInfoSize", + "type": "LPDWORD" + }, + { + "name": "ppClientInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "lpdwClientInterfaceInfoSize", + "type": "LPDWORD" + }, + { + "name": "lplpwsDLLPath", + "type": "LPWSTR" + } + ], + "MprConfigTransportEnum": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpBuffer", + "type": "LPBYTE" + }, + { + "name": "dwPrefMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprConfigInterfaceCreate": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + }, + { + "name": "phRouterInterface", + "type": "HANDLE" + } + ], + "MprConfigInterfaceDelete": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + } + ], + "MprConfigInterfaceGetHandle": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "lpwsInterfaceName", + "type": "LPWSTR" + }, + { + "name": "phRouterInterface", + "type": "HANDLE" + } + ], + "MprConfigInterfaceGetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpBuffer", + "type": "LPBYTE" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + } + ], + "MprConfigInterfaceSetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lpbBuffer", + "type": "LPBYTE" + } + ], + "MprConfigInterfaceEnum": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpBuffer", + "type": "LPBYTE" + }, + { + "name": "dwPrefMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprConfigInterfaceTransportAdd": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "lpwsTransportName", + "type": "LPWSTR" + }, + { + "name": "pInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwInterfaceInfoSize", + "type": "DWORD" + }, + { + "name": "phRouterIfTransport", + "type": "HANDLE" + } + ], + "MprConfigInterfaceTransportRemove": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "hRouterIfTransport", + "type": "HANDLE" + } + ], + "MprConfigInterfaceTransportGetHandle": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "phRouterIfTransport", + "type": "HANDLE" + } + ], + "MprConfigInterfaceTransportGetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "hRouterIfTransport", + "type": "HANDLE" + }, + { + "name": "ppInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "lpdwInterfaceInfoSize", + "type": "LPDWORD" + } + ], + "MprConfigInterfaceTransportSetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "hRouterIfTransport", + "type": "HANDLE" + }, + { + "name": "pInterfaceInfo", + "type": "LPBYTE" + }, + { + "name": "dwInterfaceInfoSize", + "type": "DWORD" + } + ], + "MprConfigInterfaceTransportEnum": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "hRouterInterface", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "lplpBuffer", + "type": "LPBYTE" + }, + { + "name": "dwPrefMaxLen", + "type": "DWORD" + }, + { + "name": "lpdwEntriesRead", + "type": "LPDWORD" + }, + { + "name": "lpdwTotalEntries", + "type": "LPDWORD" + }, + { + "name": "lpdwResumeHandle", + "type": "LPDWORD" + } + ], + "MprConfigGetFriendlyName": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "pszGuidName", + "type": "PWSTR" + }, + { + "name": "pszBuffer", + "type": "PWCHAR" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + } + ], + "MprConfigGetGuidName": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "pszFriendlyName", + "type": "PWSTR" + }, + { + "name": "pszBuffer", + "type": "PWCHAR" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + } + ], + "MprConfigFilterGetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + } + ], + "MprConfigFilterSetInfo": [ + { + "name": "hMprConfig", + "type": "HANDLE" + }, + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "dwTransportId", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + } + ], + "MprInfoCreate": [ + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "lplpNewHeader", + "type": "LPVOID" + } + ], + "MprInfoDelete": [ + { + "name": "lpHeader", + "type": "LPVOID" + } + ], + "MprInfoRemoveAll": [ + { + "name": "lpHeader", + "type": "LPVOID" + }, + { + "name": "lplpNewHeader", + "type": "LPVOID" + } + ], + "MprInfoDuplicate": [ + { + "name": "lpHeader", + "type": "LPVOID" + }, + { + "name": "lplpNewHeader", + "type": "LPVOID" + } + ], + "MprInfoBlockAdd": [ + { + "name": "lpHeader", + "type": "LPVOID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "dwItemSize", + "type": "DWORD" + }, + { + "name": "dwItemCount", + "type": "DWORD" + }, + { + "name": "lpItemData", + "type": "LPBYTE" + }, + { + "name": "lplpNewHeader", + "type": "LPVOID" + } + ], + "MprInfoBlockRemove": [ + { + "name": "lpHeader", + "type": "LPVOID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lplpNewHeader", + "type": "LPVOID" + } + ], + "MprInfoBlockSet": [ + { + "name": "lpHeader", + "type": "LPVOID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "dwItemSize", + "type": "DWORD" + }, + { + "name": "dwItemCount", + "type": "DWORD" + }, + { + "name": "lpItemData", + "type": "LPBYTE" + }, + { + "name": "lplpNewHeader", + "type": "LPVOID" + } + ], + "MprInfoBlockFind": [ + { + "name": "lpHeader", + "type": "LPVOID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpdwItemSize", + "type": "LPDWORD" + }, + { + "name": "lpdwItemCount", + "type": "LPDWORD" + }, + { + "name": "lplpItemData", + "type": "LPBYTE" + } + ], + "MprInfoBlockQuerySize": [ + { + "name": "lpHeader", + "type": "LPVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/msacm.json b/qiling/extensions/windows_sdk/msacm.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/msacm.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/msajtransport.json b/qiling/extensions/windows_sdk/msajtransport.json new file mode 100644 index 000000000..74c0cdb1d --- /dev/null +++ b/qiling/extensions/windows_sdk/msajtransport.json @@ -0,0 +1,86 @@ +{ + "AllJoynConnectToBus": [ + { + "name": "connectionSpec", + "type": "PCWSTR" + } + ], + "AllJoynCloseBusHandle": [ + { + "name": "busHandle", + "type": "HANDLE" + } + ], + "AllJoynSendToBus": [ + { + "name": "connectedBusHandle", + "type": "HANDLE" + }, + { + "name": "buffer", + "type": "void" + }, + { + "name": "bytesToWrite", + "type": "DWORD" + }, + { + "name": "bytesTransferred", + "type": "PDWORD" + }, + { + "name": "reserved", + "type": "PVOID" + } + ], + "AllJoynReceiveFromBus": [ + { + "name": "connectedBusHandle", + "type": "HANDLE" + }, + { + "name": "buffer", + "type": "PVOID" + }, + { + "name": "bytesToRead", + "type": "DWORD" + }, + { + "name": "bytesTransferred", + "type": "PDWORD" + }, + { + "name": "reserved", + "type": "PVOID" + } + ], + "AllJoynEventSelect": [ + { + "name": "connectedBusHandle", + "type": "HANDLE" + }, + { + "name": "eventHandle", + "type": "HANDLE" + }, + { + "name": "eventTypes", + "type": "DWORD" + } + ], + "AllJoynEnumEvents": [ + { + "name": "connectedBusHandle", + "type": "HANDLE" + }, + { + "name": "eventToReset", + "type": "HANDLE" + }, + { + "name": "eventTypes", + "type": "PDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mscat.json b/qiling/extensions/windows_sdk/mscat.json new file mode 100644 index 000000000..46f394d79 --- /dev/null +++ b/qiling/extensions/windows_sdk/mscat.json @@ -0,0 +1,244 @@ +{ + "CryptCATOpen": [ + { + "name": "pwszFileName", + "type": "LPWSTR" + }, + { + "name": "fdwOpenFlags", + "type": "DWORD" + }, + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwPublicVersion", + "type": "DWORD" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + } + ], + "CryptCATClose": [ + { + "name": "hCatalog", + "type": "HANDLE" + } + ], + "CryptCATHandleFromStore": [ + { + "name": "pCatStore", + "type": "CRYPTCATSTORE" + } + ], + "CryptCATPersistStore": [ + { + "name": "hCatalog", + "type": "HANDLE" + } + ], + "CryptCATCDFClose": [ + { + "name": "pCDF", + "type": "CRYPTCATCDF" + } + ], + "IsCatalogFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "pwszFileName", + "type": "WCHAR" + } + ], + "CryptCATAdminAcquireContext": [ + { + "name": "phCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pgSubsystem", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminAcquireContext2": [ + { + "name": "phCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pgSubsystem", + "type": "GUID" + }, + { + "name": "pwszHashAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pStrongHashPolicy", + "type": "PCCERT_STRONG_SIGN_PARA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminReleaseContext": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminReleaseCatalogContext": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "hCatInfo", + "type": "HCATINFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminEnumCatalogFromHash": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPrevCatInfo", + "type": "HCATINFO" + } + ], + "CryptCATAdminCalcHashFromFileHandle": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "pcbHash", + "type": "DWORD" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminCalcHashFromFileHandle2": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "pcbHash", + "type": "DWORD" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminAddCatalog": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pwszCatalogFile", + "type": "PWSTR" + }, + { + "name": "pwszSelectBaseName", + "type": "PWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminRemoveCatalog": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pwszCatalogFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATCatalogInfoFromContext": [ + { + "name": "hCatInfo", + "type": "HCATINFO" + }, + { + "name": "psCatInfo", + "type": "CATALOG_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptCATAdminResolveCatalogPath": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pwszCatalogFile", + "type": "WCHAR" + }, + { + "name": "psCatInfo", + "type": "CATALOG_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mschapp.json b/qiling/extensions/windows_sdk/mschapp.json new file mode 100644 index 000000000..d6792311d --- /dev/null +++ b/qiling/extensions/windows_sdk/mschapp.json @@ -0,0 +1,62 @@ +{ + "MSChapSrvChangePassword": [ + { + "name": "ServerName", + "type": "PWSTR" + }, + { + "name": "UserName", + "type": "PWSTR" + }, + { + "name": "LmOldPresent", + "type": "BOOLEAN" + }, + { + "name": "LmOldOwfPassword", + "type": "PLM_OWF_PASSWORD" + }, + { + "name": "LmNewOwfPassword", + "type": "PLM_OWF_PASSWORD" + }, + { + "name": "NtOldOwfPassword", + "type": "PNT_OWF_PASSWORD" + }, + { + "name": "NtNewOwfPassword", + "type": "PNT_OWF_PASSWORD" + } + ], + "MSChapSrvChangePassword2": [ + { + "name": "ServerName", + "type": "PWSTR" + }, + { + "name": "UserName", + "type": "PWSTR" + }, + { + "name": "NewPasswordEncryptedWithOldNt", + "type": "PSAMPR_ENCRYPTED_USER_PASSWORD" + }, + { + "name": "OldNtOwfPasswordEncryptedWithNewNt", + "type": "PENCRYPTED_NT_OWF_PASSWORD" + }, + { + "name": "LmPresent", + "type": "BOOLEAN" + }, + { + "name": "NewPasswordEncryptedWithOldLm", + "type": "PSAMPR_ENCRYPTED_USER_PASSWORD" + }, + { + "name": "OldLmOwfPasswordEncryptedWithNewLmOrNt", + "type": "PENCRYPTED_LM_OWF_PASSWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/msctf.json b/qiling/extensions/windows_sdk/msctf.json new file mode 100644 index 000000000..249e69b90 --- /dev/null +++ b/qiling/extensions/windows_sdk/msctf.json @@ -0,0 +1,44 @@ +{ + "TF_CreateThreadMgr": [ + { + "name": "pptim", + "type": "ITfThreadMgr" + } + ], + "TF_GetThreadMgr": [ + { + "name": "pptim", + "type": "ITfThreadMgr" + } + ], + "TF_CreateInputProcessorProfiles": [ + { + "name": "ppipr", + "type": "ITfInputProcessorProfiles" + } + ], + "TF_CreateDisplayAttributeMgr": [ + { + "name": "ppdam", + "type": "ITfDisplayAttributeMgr" + } + ], + "TF_CreateLangBarMgr": [ + { + "name": "pppbm", + "type": "ITfLangBarMgr" + } + ], + "TF_CreateLangBarItemMgr": [ + { + "name": "pplbim", + "type": "ITfLangBarItemMgr" + } + ], + "TF_CreateCategoryMgr": [ + { + "name": "ppcat", + "type": "ITfCategoryMgr" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/msdrm.json b/qiling/extensions/windows_sdk/msdrm.json new file mode 100644 index 000000000..3af8c2556 --- /dev/null +++ b/qiling/extensions/windows_sdk/msdrm.json @@ -0,0 +1,1732 @@ +{ + "DRMSetGlobalOptions": [ + { + "name": "eGlobalOptions", + "type": "DRMGLOBALOPTIONS" + }, + { + "name": "pvdata", + "type": "LPVOID" + }, + { + "name": "dwlen", + "type": "DWORD" + } + ], + "DRMGetClientVersion": [ + { + "name": "pDRMClientVersionInfo", + "type": "DRM_CLIENT_VERSION_INFO" + } + ], + "DRMInitEnvironment": [ + { + "name": "eSecurityProviderType", + "type": "DRMSECURITYPROVIDERTYPE" + }, + { + "name": "eSpecification", + "type": "DRMSPECTYPE" + }, + { + "name": "wszSecurityProvider", + "type": "PWSTR" + }, + { + "name": "wszManifestCredentials", + "type": "PWSTR" + }, + { + "name": "wszMachineCredentials", + "type": "PWSTR" + }, + { + "name": "phEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "phDefaultLibrary", + "type": "DRMHANDLE" + } + ], + "DRMLoadLibrary": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "eSpecification", + "type": "DRMSPECTYPE" + }, + { + "name": "wszLibraryProvider", + "type": "PWSTR" + }, + { + "name": "wszCredentials", + "type": "PWSTR" + }, + { + "name": "phLibrary", + "type": "DRMHANDLE" + } + ], + "DRMCreateEnablingPrincipal": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "hLibrary", + "type": "DRMHANDLE" + }, + { + "name": "wszObject", + "type": "PWSTR" + }, + { + "name": "pidPrincipal", + "type": "DRMID" + }, + { + "name": "wszCredentials", + "type": "PWSTR" + }, + { + "name": "phEnablingPrincipal", + "type": "DRMHANDLE" + } + ], + "DRMCloseHandle": [ + { + "name": "handle", + "type": "DRMHANDLE" + } + ], + "DRMCloseEnvironmentHandle": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + } + ], + "DRMDuplicateHandle": [ + { + "name": "hToCopy", + "type": "DRMHANDLE" + }, + { + "name": "phCopy", + "type": "DRMHANDLE" + } + ], + "DRMDuplicateEnvironmentHandle": [ + { + "name": "hToCopy", + "type": "DRMENVHANDLE" + }, + { + "name": "phCopy", + "type": "DRMENVHANDLE" + } + ], + "DRMRegisterRevocationList": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "wszRevocationList", + "type": "PWSTR" + } + ], + "DRMCheckSecurity": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "cLevel", + "type": "UINT" + } + ], + "DRMRegisterContent": [ + { + "name": "fRegister", + "type": "BOOL" + } + ], + "DRMEncrypt": [ + { + "name": "hCryptoProvider", + "type": "DRMHANDLE" + }, + { + "name": "iPosition", + "type": "UINT" + }, + { + "name": "cNumInBytes", + "type": "UINT" + }, + { + "name": "pbInData", + "type": "BYTE" + }, + { + "name": "pcNumOutBytes", + "type": "UINT" + }, + { + "name": "pbOutData", + "type": "BYTE" + } + ], + "DRMDecrypt": [ + { + "name": "hCryptoProvider", + "type": "DRMHANDLE" + }, + { + "name": "iPosition", + "type": "UINT" + }, + { + "name": "cNumInBytes", + "type": "UINT" + }, + { + "name": "pbInData", + "type": "BYTE" + }, + { + "name": "pcNumOutBytes", + "type": "UINT" + }, + { + "name": "pbOutData", + "type": "BYTE" + } + ], + "DRMCreateBoundLicense": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "pParams", + "type": "DRMBOUNDLICENSEPARAMS" + }, + { + "name": "wszLicenseChain", + "type": "PWSTR" + }, + { + "name": "phBoundLicense", + "type": "DRMHANDLE" + }, + { + "name": "phErrorLog", + "type": "DRMHANDLE" + } + ], + "DRMCreateEnablingBitsDecryptor": [ + { + "name": "hBoundLicense", + "type": "DRMHANDLE" + }, + { + "name": "wszRight", + "type": "PWSTR" + }, + { + "name": "hAuxLib", + "type": "DRMHANDLE" + }, + { + "name": "wszAuxPlug", + "type": "PWSTR" + }, + { + "name": "phDecryptor", + "type": "DRMHANDLE" + } + ], + "DRMCreateEnablingBitsEncryptor": [ + { + "name": "hBoundLicense", + "type": "DRMHANDLE" + }, + { + "name": "wszRight", + "type": "PWSTR" + }, + { + "name": "hAuxLib", + "type": "DRMHANDLE" + }, + { + "name": "wszAuxPlug", + "type": "PWSTR" + }, + { + "name": "phEncryptor", + "type": "DRMHANDLE" + } + ], + "DRMAttest": [ + { + "name": "hEnablingPrincipal", + "type": "DRMHANDLE" + }, + { + "name": "wszData", + "type": "PWSTR" + }, + { + "name": "eType", + "type": "DRMATTESTTYPE" + }, + { + "name": "pcAttestedBlob", + "type": "UINT" + }, + { + "name": "wszAttestedBlob", + "type": "PWSTR" + } + ], + "DRMGetTime": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "eTimerIdType", + "type": "DRMTIMETYPE" + }, + { + "name": "poTimeObject", + "type": "SYSTEMTIME" + } + ], + "DRMGetInfo": [ + { + "name": "handle", + "type": "DRMHANDLE" + }, + { + "name": "wszAttribute", + "type": "PWSTR" + }, + { + "name": "peEncoding", + "type": "DRMENCODINGTYPE" + }, + { + "name": "pcBuffer", + "type": "UINT" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "DRMGetEnvironmentInfo": [ + { + "name": "handle", + "type": "DRMENVHANDLE" + }, + { + "name": "wszAttribute", + "type": "PWSTR" + }, + { + "name": "peEncoding", + "type": "DRMENCODINGTYPE" + }, + { + "name": "pcBuffer", + "type": "UINT" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "DRMGetProcAddress": [ + { + "name": "hLibrary", + "type": "DRMHANDLE" + }, + { + "name": "wszProcName", + "type": "PWSTR" + }, + { + "name": "ppfnProcAddress", + "type": "FARPROC" + } + ], + "DRMGetBoundLicenseObjectCount": [ + { + "name": "hQueryRoot", + "type": "DRMHANDLE" + }, + { + "name": "wszSubObjectType", + "type": "PWSTR" + }, + { + "name": "pcSubObjects", + "type": "UINT" + } + ], + "DRMGetBoundLicenseObject": [ + { + "name": "hQueryRoot", + "type": "DRMHANDLE" + }, + { + "name": "wszSubObjectType", + "type": "PWSTR" + }, + { + "name": "iWhich", + "type": "UINT" + }, + { + "name": "phSubObject", + "type": "DRMHANDLE" + } + ], + "DRMGetBoundLicenseAttributeCount": [ + { + "name": "hQueryRoot", + "type": "DRMHANDLE" + }, + { + "name": "wszAttribute", + "type": "PWSTR" + }, + { + "name": "pcAttributes", + "type": "UINT" + } + ], + "DRMGetBoundLicenseAttribute": [ + { + "name": "hQueryRoot", + "type": "DRMHANDLE" + }, + { + "name": "wszAttribute", + "type": "PWSTR" + }, + { + "name": "iWhich", + "type": "UINT" + }, + { + "name": "peEncoding", + "type": "DRMENCODINGTYPE" + }, + { + "name": "pcBuffer", + "type": "UINT" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "DRMCreateClientSession": [ + { + "name": "pfnCallback", + "type": "DRMCALLBACK" + }, + { + "name": "uCallbackVersion", + "type": "UINT" + }, + { + "name": "wszGroupIDProviderType", + "type": "PWSTR" + }, + { + "name": "wszGroupID", + "type": "PWSTR" + }, + { + "name": "phClient", + "type": "DRMHSESSION" + } + ], + "DRMIsActivated": [ + { + "name": "hClient", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pActServInfo", + "type": "DRM_ACTSERV_INFO" + } + ], + "DRMActivate": [ + { + "name": "hClient", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uLangID", + "type": "UINT" + }, + { + "name": "pActServInfo", + "type": "DRM_ACTSERV_INFO" + }, + { + "name": "pvContext", + "type": "void" + }, + { + "name": "hParentWnd", + "type": "HWND" + } + ], + "DRMGetServiceLocation": [ + { + "name": "hClient", + "type": "DRMHSESSION" + }, + { + "name": "uServiceType", + "type": "UINT" + }, + { + "name": "uServiceLocation", + "type": "UINT" + }, + { + "name": "wszIssuanceLicense", + "type": "PWSTR" + }, + { + "name": "puServiceURLLength", + "type": "UINT" + }, + { + "name": "wszServiceURL", + "type": "PWSTR" + } + ], + "DRMCreateLicenseStorageSession": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "hDefaultLibrary", + "type": "DRMHANDLE" + }, + { + "name": "hClient", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "wszIssuanceLicense", + "type": "PWSTR" + }, + { + "name": "phLicenseStorage", + "type": "DRMHSESSION" + } + ], + "DRMAddLicense": [ + { + "name": "hLicenseStorage", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "wszLicense", + "type": "PWSTR" + } + ], + "DRMAcquireAdvisories": [ + { + "name": "hLicenseStorage", + "type": "DRMHSESSION" + }, + { + "name": "wszLicense", + "type": "PWSTR" + }, + { + "name": "wszURL", + "type": "PWSTR" + }, + { + "name": "pvContext", + "type": "void" + } + ], + "DRMEnumerateLicense": [ + { + "name": "hSession", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "pfSharedFlag", + "type": "BOOL" + }, + { + "name": "puCertificateDataLen", + "type": "UINT" + }, + { + "name": "wszCertificateData", + "type": "PWSTR" + } + ], + "DRMAcquireLicense": [ + { + "name": "hSession", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "wszGroupIdentityCredential", + "type": "PWSTR" + }, + { + "name": "wszRequestedRights", + "type": "PWSTR" + }, + { + "name": "wszCustomData", + "type": "PWSTR" + }, + { + "name": "wszURL", + "type": "PWSTR" + }, + { + "name": "pvContext", + "type": "void" + } + ], + "DRMDeleteLicense": [ + { + "name": "hSession", + "type": "DRMHSESSION" + }, + { + "name": "wszLicenseId", + "type": "PWSTR" + } + ], + "DRMCloseSession": [ + { + "name": "hSession", + "type": "DRMHSESSION" + } + ], + "DRMDuplicateSession": [ + { + "name": "hSessionIn", + "type": "DRMHSESSION" + }, + { + "name": "phSessionOut", + "type": "DRMHSESSION" + } + ], + "DRMGetSecurityProvider": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "puTypeLen", + "type": "UINT" + }, + { + "name": "wszType", + "type": "PWSTR" + }, + { + "name": "puPathLen", + "type": "UINT" + }, + { + "name": "wszPath", + "type": "PWSTR" + } + ], + "DRMEncode": [ + { + "name": "wszAlgID", + "type": "PWSTR" + }, + { + "name": "uDataLen", + "type": "UINT" + }, + { + "name": "pbDecodedData", + "type": "BYTE" + }, + { + "name": "puEncodedStringLen", + "type": "UINT" + }, + { + "name": "wszEncodedString", + "type": "PWSTR" + } + ], + "DRMDecode": [ + { + "name": "wszAlgID", + "type": "PWSTR" + }, + { + "name": "wszEncodedString", + "type": "PWSTR" + }, + { + "name": "puDecodedDataLen", + "type": "UINT" + }, + { + "name": "pbDecodedData", + "type": "BYTE" + } + ], + "DRMConstructCertificateChain": [ + { + "name": "cCertificates", + "type": "UINT" + }, + { + "name": "rgwszCertificates", + "type": "PWSTR" + }, + { + "name": "pcChain", + "type": "UINT" + }, + { + "name": "wszChain", + "type": "PWSTR" + } + ], + "DRMParseUnboundLicense": [ + { + "name": "wszCertificate", + "type": "PWSTR" + }, + { + "name": "phQueryRoot", + "type": "DRMQUERYHANDLE" + } + ], + "DRMCloseQueryHandle": [ + { + "name": "hQuery", + "type": "DRMQUERYHANDLE" + } + ], + "DRMGetUnboundLicenseObjectCount": [ + { + "name": "hQueryRoot", + "type": "DRMQUERYHANDLE" + }, + { + "name": "wszSubObjectType", + "type": "PWSTR" + }, + { + "name": "pcSubObjects", + "type": "UINT" + } + ], + "DRMGetUnboundLicenseObject": [ + { + "name": "hQueryRoot", + "type": "DRMQUERYHANDLE" + }, + { + "name": "wszSubObjectType", + "type": "PWSTR" + }, + { + "name": "iIndex", + "type": "UINT" + }, + { + "name": "phSubQuery", + "type": "DRMQUERYHANDLE" + } + ], + "DRMGetUnboundLicenseAttributeCount": [ + { + "name": "hQueryRoot", + "type": "DRMQUERYHANDLE" + }, + { + "name": "wszAttributeType", + "type": "PWSTR" + }, + { + "name": "pcAttributes", + "type": "UINT" + } + ], + "DRMGetUnboundLicenseAttribute": [ + { + "name": "hQueryRoot", + "type": "DRMQUERYHANDLE" + }, + { + "name": "wszAttributeType", + "type": "PWSTR" + }, + { + "name": "iWhich", + "type": "UINT" + }, + { + "name": "peEncoding", + "type": "DRMENCODINGTYPE" + }, + { + "name": "pcBuffer", + "type": "UINT" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "DRMGetCertificateChainCount": [ + { + "name": "wszChain", + "type": "PWSTR" + }, + { + "name": "pcCertCount", + "type": "UINT" + } + ], + "DRMDeconstructCertificateChain": [ + { + "name": "wszChain", + "type": "PWSTR" + }, + { + "name": "iWhich", + "type": "UINT" + }, + { + "name": "pcCert", + "type": "UINT" + }, + { + "name": "wszCert", + "type": "PWSTR" + } + ], + "DRMVerify": [ + { + "name": "wszData", + "type": "PWSTR" + }, + { + "name": "pcAttestedData", + "type": "UINT" + }, + { + "name": "wszAttestedData", + "type": "PWSTR" + }, + { + "name": "peType", + "type": "DRMATTESTTYPE" + }, + { + "name": "pcPrincipal", + "type": "UINT" + }, + { + "name": "wszPrincipal", + "type": "PWSTR" + }, + { + "name": "pcManifest", + "type": "UINT" + }, + { + "name": "wszManifest", + "type": "PWSTR" + } + ], + "DRMCreateUser": [ + { + "name": "wszUserName", + "type": "PWSTR" + }, + { + "name": "wszUserId", + "type": "PWSTR" + }, + { + "name": "wszUserIdType", + "type": "PWSTR" + }, + { + "name": "phUser", + "type": "DRMPUBHANDLE" + } + ], + "DRMCreateRight": [ + { + "name": "wszRightName", + "type": "PWSTR" + }, + { + "name": "pstFrom", + "type": "SYSTEMTIME" + }, + { + "name": "pstUntil", + "type": "SYSTEMTIME" + }, + { + "name": "cExtendedInfo", + "type": "UINT" + }, + { + "name": "pwszExtendedInfoName", + "type": "PWSTR" + }, + { + "name": "pwszExtendedInfoValue", + "type": "PWSTR" + }, + { + "name": "phRight", + "type": "DRMPUBHANDLE" + } + ], + "DRMCreateIssuanceLicense": [ + { + "name": "pstTimeFrom", + "type": "SYSTEMTIME" + }, + { + "name": "pstTimeUntil", + "type": "SYSTEMTIME" + }, + { + "name": "wszReferralInfoName", + "type": "PWSTR" + }, + { + "name": "wszReferralInfoURL", + "type": "PWSTR" + }, + { + "name": "hOwner", + "type": "DRMPUBHANDLE" + }, + { + "name": "wszIssuanceLicense", + "type": "PWSTR" + }, + { + "name": "hBoundLicense", + "type": "DRMHANDLE" + }, + { + "name": "phIssuanceLicense", + "type": "DRMPUBHANDLE" + } + ], + "DRMAddRightWithUser": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "hRight", + "type": "DRMPUBHANDLE" + }, + { + "name": "hUser", + "type": "DRMPUBHANDLE" + } + ], + "DRMClearAllRights": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + } + ], + "DRMSetMetaData": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "wszContentId", + "type": "PWSTR" + }, + { + "name": "wszContentIdType", + "type": "PWSTR" + }, + { + "name": "wszSKUId", + "type": "PWSTR" + }, + { + "name": "wszSKUIdType", + "type": "PWSTR" + }, + { + "name": "wszContentType", + "type": "PWSTR" + }, + { + "name": "wszContentName", + "type": "PWSTR" + } + ], + "DRMSetUsagePolicy": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "eUsagePolicyType", + "type": "DRM_USAGEPOLICY_TYPE" + }, + { + "name": "fDelete", + "type": "BOOL" + }, + { + "name": "fExclusion", + "type": "BOOL" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "wszMinVersion", + "type": "PWSTR" + }, + { + "name": "wszMaxVersion", + "type": "PWSTR" + }, + { + "name": "wszPublicKey", + "type": "PWSTR" + }, + { + "name": "wszDigestAlgorithm", + "type": "PWSTR" + }, + { + "name": "pbDigest", + "type": "BYTE" + }, + { + "name": "cbDigest", + "type": "UINT" + } + ], + "DRMSetRevocationPoint": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "fDelete", + "type": "BOOL" + }, + { + "name": "wszId", + "type": "PWSTR" + }, + { + "name": "wszIdType", + "type": "PWSTR" + }, + { + "name": "wszURL", + "type": "PWSTR" + }, + { + "name": "pstFrequency", + "type": "SYSTEMTIME" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "wszPublicKey", + "type": "PWSTR" + } + ], + "DRMSetApplicationSpecificData": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "fDelete", + "type": "BOOL" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "wszValue", + "type": "PWSTR" + } + ], + "DRMSetNameAndDescription": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "fDelete", + "type": "BOOL" + }, + { + "name": "lcid", + "type": "UINT" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "wszDescription", + "type": "PWSTR" + } + ], + "DRMSetIntervalTime": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "cDays", + "type": "UINT" + } + ], + "DRMGetIssuanceLicenseTemplate": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "puIssuanceLicenseTemplateLength", + "type": "UINT" + }, + { + "name": "wszIssuanceLicenseTemplate", + "type": "PWSTR" + } + ], + "DRMGetSignedIssuanceLicense": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pbSymKey", + "type": "BYTE" + }, + { + "name": "cbSymKey", + "type": "UINT" + }, + { + "name": "wszSymKeyType", + "type": "PWSTR" + }, + { + "name": "wszClientLicensorCertificate", + "type": "PWSTR" + }, + { + "name": "pfnCallback", + "type": "DRMCALLBACK" + }, + { + "name": "wszURL", + "type": "PWSTR" + }, + { + "name": "pvContext", + "type": "void" + } + ], + "DRMGetSignedIssuanceLicenseEx": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pbSymKey", + "type": "BYTE" + }, + { + "name": "cbSymKey", + "type": "UINT" + }, + { + "name": "wszSymKeyType", + "type": "PWSTR" + }, + { + "name": "pvReserved", + "type": "PVOID" + }, + { + "name": "hEnablingPrincipal", + "type": "DRMHANDLE" + }, + { + "name": "hBoundLicenseCLC", + "type": "DRMHANDLE" + }, + { + "name": "pfnCallback", + "type": "DRMCALLBACK" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "DRMClosePubHandle": [ + { + "name": "hPub", + "type": "DRMPUBHANDLE" + } + ], + "DRMDuplicatePubHandle": [ + { + "name": "hPubIn", + "type": "DRMPUBHANDLE" + }, + { + "name": "phPubOut", + "type": "DRMPUBHANDLE" + } + ], + "DRMGetUserInfo": [ + { + "name": "hUser", + "type": "DRMPUBHANDLE" + }, + { + "name": "puUserNameLength", + "type": "UINT" + }, + { + "name": "wszUserName", + "type": "PWSTR" + }, + { + "name": "puUserIdLength", + "type": "UINT" + }, + { + "name": "wszUserId", + "type": "PWSTR" + }, + { + "name": "puUserIdTypeLength", + "type": "UINT" + }, + { + "name": "wszUserIdType", + "type": "PWSTR" + } + ], + "DRMGetRightInfo": [ + { + "name": "hRight", + "type": "DRMPUBHANDLE" + }, + { + "name": "puRightNameLength", + "type": "UINT" + }, + { + "name": "wszRightName", + "type": "PWSTR" + }, + { + "name": "pstFrom", + "type": "SYSTEMTIME" + }, + { + "name": "pstUntil", + "type": "SYSTEMTIME" + } + ], + "DRMGetRightExtendedInfo": [ + { + "name": "hRight", + "type": "DRMPUBHANDLE" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "puExtendedInfoNameLength", + "type": "UINT" + }, + { + "name": "wszExtendedInfoName", + "type": "PWSTR" + }, + { + "name": "puExtendedInfoValueLength", + "type": "UINT" + }, + { + "name": "wszExtendedInfoValue", + "type": "PWSTR" + } + ], + "DRMGetUsers": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "phUser", + "type": "DRMPUBHANDLE" + } + ], + "DRMGetUserRights": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "hUser", + "type": "DRMPUBHANDLE" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "phRight", + "type": "DRMPUBHANDLE" + } + ], + "DRMGetMetaData": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "puContentIdLength", + "type": "UINT" + }, + { + "name": "wszContentId", + "type": "PWSTR" + }, + { + "name": "puContentIdTypeLength", + "type": "UINT" + }, + { + "name": "wszContentIdType", + "type": "PWSTR" + }, + { + "name": "puSKUIdLength", + "type": "UINT" + }, + { + "name": "wszSKUId", + "type": "PWSTR" + }, + { + "name": "puSKUIdTypeLength", + "type": "UINT" + }, + { + "name": "wszSKUIdType", + "type": "PWSTR" + }, + { + "name": "puContentTypeLength", + "type": "UINT" + }, + { + "name": "wszContentType", + "type": "PWSTR" + }, + { + "name": "puContentNameLength", + "type": "UINT" + }, + { + "name": "wszContentName", + "type": "PWSTR" + } + ], + "DRMGetApplicationSpecificData": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "puNameLength", + "type": "UINT" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "puValueLength", + "type": "UINT" + }, + { + "name": "wszValue", + "type": "PWSTR" + } + ], + "DRMGetIssuanceLicenseInfo": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "pstTimeFrom", + "type": "SYSTEMTIME" + }, + { + "name": "pstTimeUntil", + "type": "SYSTEMTIME" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "puDistributionPointNameLength", + "type": "UINT" + }, + { + "name": "wszDistributionPointName", + "type": "PWSTR" + }, + { + "name": "puDistributionPointURLLength", + "type": "UINT" + }, + { + "name": "wszDistributionPointURL", + "type": "PWSTR" + }, + { + "name": "phOwner", + "type": "DRMPUBHANDLE" + }, + { + "name": "pfOfficial", + "type": "BOOL" + } + ], + "DRMGetRevocationPoint": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "puIdLength", + "type": "UINT" + }, + { + "name": "wszId", + "type": "PWSTR" + }, + { + "name": "puIdTypeLength", + "type": "UINT" + }, + { + "name": "wszIdType", + "type": "PWSTR" + }, + { + "name": "puURLLength", + "type": "UINT" + }, + { + "name": "wszRL", + "type": "PWSTR" + }, + { + "name": "pstFrequency", + "type": "SYSTEMTIME" + }, + { + "name": "puNameLength", + "type": "UINT" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "puPublicKeyLength", + "type": "UINT" + }, + { + "name": "wszPublicKey", + "type": "PWSTR" + } + ], + "DRMGetUsagePolicy": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "peUsagePolicyType", + "type": "DRM_USAGEPOLICY_TYPE" + }, + { + "name": "pfExclusion", + "type": "BOOL" + }, + { + "name": "puNameLength", + "type": "UINT" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "puMinVersionLength", + "type": "UINT" + }, + { + "name": "wszMinVersion", + "type": "PWSTR" + }, + { + "name": "puMaxVersionLength", + "type": "UINT" + }, + { + "name": "wszMaxVersion", + "type": "PWSTR" + }, + { + "name": "puPublicKeyLength", + "type": "UINT" + }, + { + "name": "wszPublicKey", + "type": "PWSTR" + }, + { + "name": "puDigestAlgorithmLength", + "type": "UINT" + }, + { + "name": "wszDigestAlgorithm", + "type": "PWSTR" + }, + { + "name": "pcbDigest", + "type": "UINT" + }, + { + "name": "pbDigest", + "type": "BYTE" + } + ], + "DRMGetNameAndDescription": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "uIndex", + "type": "UINT" + }, + { + "name": "pulcid", + "type": "UINT" + }, + { + "name": "puNameLength", + "type": "UINT" + }, + { + "name": "wszName", + "type": "PWSTR" + }, + { + "name": "puDescriptionLength", + "type": "UINT" + }, + { + "name": "wszDescription", + "type": "PWSTR" + } + ], + "DRMGetOwnerLicense": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "puOwnerLicenseLength", + "type": "UINT" + }, + { + "name": "wszOwnerLicense", + "type": "PWSTR" + } + ], + "DRMGetIntervalTime": [ + { + "name": "hIssuanceLicense", + "type": "DRMPUBHANDLE" + }, + { + "name": "pcDays", + "type": "UINT" + } + ], + "DRMRegisterProtectedWindow": [ + { + "name": "hEnv", + "type": "DRMENVHANDLE" + }, + { + "name": "hwnd", + "type": "HWND" + } + ], + "DRMIsWindowProtected": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pfProtected", + "type": "BOOL" + } + ], + "DRMAcquireIssuanceLicenseTemplate": [ + { + "name": "hClient", + "type": "DRMHSESSION" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "cTemplates", + "type": "UINT" + }, + { + "name": "pwszTemplateIds", + "type": "PWSTR" + }, + { + "name": "wszUrl", + "type": "PWSTR" + }, + { + "name": "pvContext", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/msi.json b/qiling/extensions/windows_sdk/msi.json new file mode 100644 index 000000000..c0486f3ed --- /dev/null +++ b/qiling/extensions/windows_sdk/msi.json @@ -0,0 +1,3160 @@ +{ + "MsiCloseHandle": [ + { + "name": "hAny", + "type": "MSIHANDLE" + } + ], + "MsiSetInternalUI": [ + { + "name": "dwUILevel", + "type": "INSTALLUILEVEL" + }, + { + "name": "phWnd", + "type": "HWND" + } + ], + "MsiSetExternalUIA": [ + { + "name": "puiHandler", + "type": "INSTALLUI_HANDLERA" + }, + { + "name": "dwMessageFilter", + "type": "DWORD" + }, + { + "name": "pvContext", + "type": "LPVOID" + } + ], + "MsiSetExternalUIW": [ + { + "name": "puiHandler", + "type": "INSTALLUI_HANDLERW" + }, + { + "name": "dwMessageFilter", + "type": "DWORD" + }, + { + "name": "pvContext", + "type": "LPVOID" + } + ], + "MsiSetExternalUIRecord": [ + { + "name": "puiHandler", + "type": "INSTALLUI_HANDLER_RECORD" + }, + { + "name": "dwMessageFilter", + "type": "DWORD" + }, + { + "name": "pvContext", + "type": "LPVOID" + }, + { + "name": "ppuiPrevHandler", + "type": "PINSTALLUI_HANDLER_RECORD" + } + ], + "MsiEnableLogA": [ + { + "name": "dwLogMode", + "type": "DWORD" + }, + { + "name": "szLogFile", + "type": "LPCSTR" + }, + { + "name": "dwLogAttributes", + "type": "DWORD" + } + ], + "MsiEnableLogW": [ + { + "name": "dwLogMode", + "type": "DWORD" + }, + { + "name": "szLogFile", + "type": "LPCWSTR" + }, + { + "name": "dwLogAttributes", + "type": "DWORD" + } + ], + "MsiQueryProductStateA": [ + { + "name": "szProduct", + "type": "LPCSTR" + } + ], + "MsiQueryProductStateW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + } + ], + "MsiGetProductInfoA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szAttribute", + "type": "LPCSTR" + }, + { + "name": "lpValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductInfoW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szAttribute", + "type": "LPCWSTR" + }, + { + "name": "lpValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductInfoExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "szValue", + "type": "LPSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiGetProductInfoExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "szValue", + "type": "LPWSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiInstallProductA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "szCommandLine", + "type": "LPCSTR" + } + ], + "MsiInstallProductW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "szCommandLine", + "type": "LPCWSTR" + } + ], + "MsiConfigureProductA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "iInstallLevel", + "type": "int" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiConfigureProductW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "iInstallLevel", + "type": "int" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiConfigureProductExA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "iInstallLevel", + "type": "int" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + }, + { + "name": "szCommandLine", + "type": "LPCSTR" + } + ], + "MsiConfigureProductExW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "iInstallLevel", + "type": "int" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + }, + { + "name": "szCommandLine", + "type": "LPCWSTR" + } + ], + "MsiReinstallProductA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szReinstallMode", + "type": "DWORD" + } + ], + "MsiReinstallProductW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szReinstallMode", + "type": "DWORD" + } + ], + "MsiAdvertiseProductExA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "szScriptfilePath", + "type": "LPCSTR" + }, + { + "name": "szTransforms", + "type": "LPCSTR" + }, + { + "name": "lgidLanguage", + "type": "LANGID" + }, + { + "name": "dwPlatform", + "type": "DWORD" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiAdvertiseProductExW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "szScriptfilePath", + "type": "LPCWSTR" + }, + { + "name": "szTransforms", + "type": "LPCWSTR" + }, + { + "name": "lgidLanguage", + "type": "LANGID" + }, + { + "name": "dwPlatform", + "type": "DWORD" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiAdvertiseProductA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "szScriptfilePath", + "type": "LPCSTR" + }, + { + "name": "szTransforms", + "type": "LPCSTR" + }, + { + "name": "lgidLanguage", + "type": "LANGID" + } + ], + "MsiAdvertiseProductW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "szScriptfilePath", + "type": "LPCWSTR" + }, + { + "name": "szTransforms", + "type": "LPCWSTR" + }, + { + "name": "lgidLanguage", + "type": "LANGID" + } + ], + "MsiProcessAdvertiseScriptA": [ + { + "name": "szScriptFile", + "type": "LPCSTR" + }, + { + "name": "szIconFolder", + "type": "LPCSTR" + }, + { + "name": "hRegData", + "type": "HKEY" + }, + { + "name": "fShortcuts", + "type": "BOOL" + }, + { + "name": "fRemoveItems", + "type": "BOOL" + } + ], + "MsiProcessAdvertiseScriptW": [ + { + "name": "szScriptFile", + "type": "LPCWSTR" + }, + { + "name": "szIconFolder", + "type": "LPCWSTR" + }, + { + "name": "hRegData", + "type": "HKEY" + }, + { + "name": "fShortcuts", + "type": "BOOL" + }, + { + "name": "fRemoveItems", + "type": "BOOL" + } + ], + "MsiAdvertiseScriptA": [ + { + "name": "szScriptFile", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phRegData", + "type": "PHKEY" + }, + { + "name": "fRemoveItems", + "type": "BOOL" + } + ], + "MsiAdvertiseScriptW": [ + { + "name": "szScriptFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phRegData", + "type": "PHKEY" + }, + { + "name": "fRemoveItems", + "type": "BOOL" + } + ], + "MsiGetProductInfoFromScriptA": [ + { + "name": "szScriptFile", + "type": "LPCSTR" + }, + { + "name": "lpProductBuf39", + "type": "LPSTR" + }, + { + "name": "plgidLanguage", + "type": "LANGID" + }, + { + "name": "pdwVersion", + "type": "LPDWORD" + }, + { + "name": "lpNameBuf", + "type": "LPSTR" + }, + { + "name": "pcchNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpPackageBuf", + "type": "LPSTR" + }, + { + "name": "pcchPackageBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductInfoFromScriptW": [ + { + "name": "szScriptFile", + "type": "LPCWSTR" + }, + { + "name": "lpProductBuf39", + "type": "LPWSTR" + }, + { + "name": "plgidLanguage", + "type": "LANGID" + }, + { + "name": "pdwVersion", + "type": "LPDWORD" + }, + { + "name": "lpNameBuf", + "type": "LPWSTR" + }, + { + "name": "pcchNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpPackageBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPackageBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductCodeA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "lpBuf39", + "type": "LPSTR" + } + ], + "MsiGetProductCodeW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "lpBuf39", + "type": "LPWSTR" + } + ], + "MsiGetUserInfoA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "lpUserNameBuf", + "type": "LPSTR" + }, + { + "name": "pcchUserNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpOrgNameBuf", + "type": "LPSTR" + }, + { + "name": "pcchOrgNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpSerialBuf", + "type": "LPSTR" + }, + { + "name": "pcchSerialBuf", + "type": "LPDWORD" + } + ], + "MsiGetUserInfoW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "lpUserNameBuf", + "type": "LPWSTR" + }, + { + "name": "pcchUserNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpOrgNameBuf", + "type": "LPWSTR" + }, + { + "name": "pcchOrgNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpSerialBuf", + "type": "LPWSTR" + }, + { + "name": "pcchSerialBuf", + "type": "LPDWORD" + } + ], + "MsiCollectUserInfoA": [ + { + "name": "szProduct", + "type": "LPCSTR" + } + ], + "MsiCollectUserInfoW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + } + ], + "MsiApplyPatchA": [ + { + "name": "szPatchPackage", + "type": "LPCSTR" + }, + { + "name": "szInstallPackage", + "type": "LPCSTR" + }, + { + "name": "eInstallType", + "type": "INSTALLTYPE" + }, + { + "name": "szCommandLine", + "type": "LPCSTR" + } + ], + "MsiApplyPatchW": [ + { + "name": "szPatchPackage", + "type": "LPCWSTR" + }, + { + "name": "szInstallPackage", + "type": "LPCWSTR" + }, + { + "name": "eInstallType", + "type": "INSTALLTYPE" + }, + { + "name": "szCommandLine", + "type": "LPCWSTR" + } + ], + "MsiGetPatchInfoA": [ + { + "name": "szPatch", + "type": "LPCSTR" + }, + { + "name": "szAttribute", + "type": "LPCSTR" + }, + { + "name": "lpValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetPatchInfoW": [ + { + "name": "szPatch", + "type": "LPCWSTR" + }, + { + "name": "szAttribute", + "type": "LPCWSTR" + }, + { + "name": "lpValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiEnumPatchesA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "iPatchIndex", + "type": "DWORD" + }, + { + "name": "lpPatchBuf", + "type": "LPSTR" + }, + { + "name": "lpTransformsBuf", + "type": "LPSTR" + }, + { + "name": "pcchTransformsBuf", + "type": "LPDWORD" + } + ], + "MsiEnumPatchesW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "iPatchIndex", + "type": "DWORD" + }, + { + "name": "lpPatchBuf", + "type": "LPWSTR" + }, + { + "name": "lpTransformsBuf", + "type": "LPWSTR" + }, + { + "name": "pcchTransformsBuf", + "type": "LPDWORD" + } + ], + "MsiRemovePatchesA": [ + { + "name": "szPatchList", + "type": "LPCSTR" + }, + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "eUninstallType", + "type": "INSTALLTYPE" + }, + { + "name": "szPropertyList", + "type": "LPCSTR" + } + ], + "MsiRemovePatchesW": [ + { + "name": "szPatchList", + "type": "LPCWSTR" + }, + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "eUninstallType", + "type": "INSTALLTYPE" + }, + { + "name": "szPropertyList", + "type": "LPCWSTR" + } + ], + "MsiExtractPatchXMLDataA": [ + { + "name": "szPatchPath", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "szXMLData", + "type": "LPSTR" + }, + { + "name": "pcchXMLData", + "type": "LPDWORD" + } + ], + "MsiExtractPatchXMLDataW": [ + { + "name": "szPatchPath", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "szXMLData", + "type": "LPWSTR" + }, + { + "name": "pcchXMLData", + "type": "LPDWORD" + } + ], + "MsiGetPatchInfoExA": [ + { + "name": "szPatchCode", + "type": "LPCSTR" + }, + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "lpValue", + "type": "LPSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiGetPatchInfoExW": [ + { + "name": "szPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "lpValue", + "type": "LPWSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiApplyMultiplePatchesA": [ + { + "name": "szPatchPackages", + "type": "LPCSTR" + }, + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szPropertiesList", + "type": "LPCSTR" + } + ], + "MsiApplyMultiplePatchesW": [ + { + "name": "szPatchPackages", + "type": "LPCWSTR" + }, + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szPropertiesList", + "type": "LPCWSTR" + } + ], + "MsiDeterminePatchSequenceA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "cPatchInfo", + "type": "DWORD" + }, + { + "name": "pPatchInfo", + "type": "PMSIPATCHSEQUENCEINFOA" + } + ], + "MsiDeterminePatchSequenceW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "cPatchInfo", + "type": "DWORD" + }, + { + "name": "pPatchInfo", + "type": "PMSIPATCHSEQUENCEINFOW" + } + ], + "MsiDetermineApplicablePatchesA": [ + { + "name": "szProductPackagePath", + "type": "LPCSTR" + }, + { + "name": "cPatchInfo", + "type": "DWORD" + }, + { + "name": "pPatchInfo", + "type": "PMSIPATCHSEQUENCEINFOA" + } + ], + "MsiDetermineApplicablePatchesW": [ + { + "name": "szProductPackagePath", + "type": "LPCWSTR" + }, + { + "name": "cPatchInfo", + "type": "DWORD" + }, + { + "name": "pPatchInfo", + "type": "PMSIPATCHSEQUENCEINFOW" + } + ], + "MsiEnumPatchesExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szPatchCode", + "type": "CHAR" + }, + { + "name": "szTargetProductCode", + "type": "CHAR" + }, + { + "name": "pdwTargetProductContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szTargetUserSid", + "type": "LPSTR" + }, + { + "name": "pcchTargetUserSid", + "type": "LPDWORD" + } + ], + "MsiEnumPatchesExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szPatchCode", + "type": "WCHAR" + }, + { + "name": "szTargetProductCode", + "type": "WCHAR" + }, + { + "name": "pdwTargetProductContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szTargetUserSid", + "type": "LPWSTR" + }, + { + "name": "pcchTargetUserSid", + "type": "LPDWORD" + } + ], + "MsiQueryFeatureStateA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + } + ], + "MsiQueryFeatureStateW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + } + ], + "MsiQueryFeatureStateExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "pdwState", + "type": "INSTALLSTATE" + } + ], + "MsiQueryFeatureStateExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "pdwState", + "type": "INSTALLSTATE" + } + ], + "MsiUseFeatureA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + } + ], + "MsiUseFeatureW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + } + ], + "MsiUseFeatureExA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiUseFeatureExW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiGetFeatureUsageA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "pdwUseCount", + "type": "LPDWORD" + }, + { + "name": "pwDateUsed", + "type": "LPWORD" + } + ], + "MsiGetFeatureUsageW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "pdwUseCount", + "type": "LPDWORD" + }, + { + "name": "pwDateUsed", + "type": "LPWORD" + } + ], + "MsiConfigureFeatureA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiConfigureFeatureW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiReinstallFeatureA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "dwReinstallMode", + "type": "DWORD" + } + ], + "MsiReinstallFeatureW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "dwReinstallMode", + "type": "DWORD" + } + ], + "MsiProvideComponentA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideComponentW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideQualifiedComponentA": [ + { + "name": "szCategory", + "type": "LPCSTR" + }, + { + "name": "szQualifier", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideQualifiedComponentW": [ + { + "name": "szCategory", + "type": "LPCWSTR" + }, + { + "name": "szQualifier", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideQualifiedComponentExA": [ + { + "name": "szCategory", + "type": "LPCSTR" + }, + { + "name": "szQualifier", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "dwUnused1", + "type": "DWORD" + }, + { + "name": "dwUnused2", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideQualifiedComponentExW": [ + { + "name": "szCategory", + "type": "LPCWSTR" + }, + { + "name": "szQualifier", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "dwUnused1", + "type": "DWORD" + }, + { + "name": "dwUnused2", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiGetComponentPathA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiGetComponentPathW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiGetComponentPathExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szComponentCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "lpOutPathBuffer", + "type": "LPSTR" + }, + { + "name": "pcchOutPathBuffer", + "type": "LPDWORD" + } + ], + "MsiGetComponentPathExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szComponentCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "lpOutPathBuffer", + "type": "LPWSTR" + }, + { + "name": "pcchOutPathBuffer", + "type": "LPDWORD" + } + ], + "MsiProvideAssemblyA": [ + { + "name": "szAssemblyName", + "type": "LPCSTR" + }, + { + "name": "szAppContext", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "dwAssemblyInfo", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideAssemblyW": [ + { + "name": "szAssemblyName", + "type": "LPCWSTR" + }, + { + "name": "szAppContext", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "dwAssemblyInfo", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiQueryComponentStateA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szComponentCode", + "type": "LPCSTR" + }, + { + "name": "pdwState", + "type": "INSTALLSTATE" + } + ], + "MsiQueryComponentStateW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szComponentCode", + "type": "LPCWSTR" + }, + { + "name": "pdwState", + "type": "INSTALLSTATE" + } + ], + "MsiEnumProductsA": [ + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPSTR" + } + ], + "MsiEnumProductsW": [ + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPWSTR" + } + ], + "MsiEnumProductsExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szInstalledProductCode", + "type": "CHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumProductsExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szInstalledProductCode", + "type": "WCHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPWSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumRelatedProductsA": [ + { + "name": "lpUpgradeCode", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPSTR" + } + ], + "MsiEnumRelatedProductsW": [ + { + "name": "lpUpgradeCode", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPWSTR" + } + ], + "MsiEnumFeaturesA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "iFeatureIndex", + "type": "DWORD" + }, + { + "name": "lpFeatureBuf", + "type": "LPSTR" + }, + { + "name": "lpParentBuf", + "type": "LPSTR" + } + ], + "MsiEnumFeaturesW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "iFeatureIndex", + "type": "DWORD" + }, + { + "name": "lpFeatureBuf", + "type": "LPWSTR" + }, + { + "name": "lpParentBuf", + "type": "LPWSTR" + } + ], + "MsiEnumComponentsA": [ + { + "name": "iComponentIndex", + "type": "DWORD" + }, + { + "name": "lpComponentBuf", + "type": "LPSTR" + } + ], + "MsiEnumComponentsW": [ + { + "name": "iComponentIndex", + "type": "DWORD" + }, + { + "name": "lpComponentBuf", + "type": "LPWSTR" + } + ], + "MsiEnumComponentsExA": [ + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szInstalledComponentCode", + "type": "CHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumComponentsExW": [ + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szInstalledComponentCode", + "type": "WCHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPWSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumClientsA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPSTR" + } + ], + "MsiEnumClientsW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPWSTR" + } + ], + "MsiEnumClientsExA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwProductIndex", + "type": "DWORD" + }, + { + "name": "szProductBuf", + "type": "CHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumClientsExW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwProductIndex", + "type": "DWORD" + }, + { + "name": "szProductBuf", + "type": "WCHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPWSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumComponentQualifiersA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "iIndex", + "type": "DWORD" + }, + { + "name": "lpQualifierBuf", + "type": "LPSTR" + }, + { + "name": "pcchQualifierBuf", + "type": "LPDWORD" + }, + { + "name": "lpApplicationDataBuf", + "type": "LPSTR" + }, + { + "name": "pcchApplicationDataBuf", + "type": "LPDWORD" + } + ], + "MsiEnumComponentQualifiersW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "iIndex", + "type": "DWORD" + }, + { + "name": "lpQualifierBuf", + "type": "LPWSTR" + }, + { + "name": "pcchQualifierBuf", + "type": "LPDWORD" + }, + { + "name": "lpApplicationDataBuf", + "type": "LPWSTR" + }, + { + "name": "pcchApplicationDataBuf", + "type": "LPDWORD" + } + ], + "MsiOpenProductA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenProductW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenPackageA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenPackageW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenPackageExA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenPackageExW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiGetPatchFileListA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szPatchPackages", + "type": "LPCSTR" + }, + { + "name": "pcFiles", + "type": "LPDWORD" + }, + { + "name": "pphFileRecords", + "type": "MSIHANDLE" + } + ], + "MsiGetPatchFileListW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szPatchPackages", + "type": "LPCWSTR" + }, + { + "name": "pcFiles", + "type": "LPDWORD" + }, + { + "name": "pphFileRecords", + "type": "MSIHANDLE" + } + ], + "MsiGetProductPropertyA": [ + { + "name": "hProduct", + "type": "MSIHANDLE" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "lpValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductPropertyW": [ + { + "name": "hProduct", + "type": "MSIHANDLE" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "lpValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiVerifyPackageA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + } + ], + "MsiVerifyPackageW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + } + ], + "MsiGetFeatureInfoA": [ + { + "name": "hProduct", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "lpAttributes", + "type": "LPDWORD" + }, + { + "name": "lpTitleBuf", + "type": "LPSTR" + }, + { + "name": "pcchTitleBuf", + "type": "LPDWORD" + }, + { + "name": "lpHelpBuf", + "type": "LPSTR" + }, + { + "name": "pcchHelpBuf", + "type": "LPDWORD" + } + ], + "MsiGetFeatureInfoW": [ + { + "name": "hProduct", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "lpAttributes", + "type": "LPDWORD" + }, + { + "name": "lpTitleBuf", + "type": "LPWSTR" + }, + { + "name": "pcchTitleBuf", + "type": "LPDWORD" + }, + { + "name": "lpHelpBuf", + "type": "LPWSTR" + }, + { + "name": "pcchHelpBuf", + "type": "LPDWORD" + } + ], + "MsiInstallMissingComponentA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiInstallMissingComponentW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiInstallMissingFileA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "MsiInstallMissingFileW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "MsiLocateComponentA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiLocateComponentW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiSourceListClearAllA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szUserName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiSourceListClearAllW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szUserName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiSourceListAddSourceA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szUserName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCSTR" + } + ], + "MsiSourceListAddSourceW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szUserName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCWSTR" + } + ], + "MsiSourceListForceResolutionA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szUserName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiSourceListForceResolutionW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szUserName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiSourceListAddSourceExA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + } + ], + "MsiSourceListAddSourceExW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCWSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + } + ], + "MsiSourceListAddMediaDiskA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwDiskId", + "type": "DWORD" + }, + { + "name": "szVolumeLabel", + "type": "LPCSTR" + }, + { + "name": "szDiskPrompt", + "type": "LPCSTR" + } + ], + "MsiSourceListAddMediaDiskW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwDiskId", + "type": "DWORD" + }, + { + "name": "szVolumeLabel", + "type": "LPCWSTR" + }, + { + "name": "szDiskPrompt", + "type": "LPCWSTR" + } + ], + "MsiSourceListClearSourceA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCSTR" + } + ], + "MsiSourceListClearSourceW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCWSTR" + } + ], + "MsiSourceListClearMediaDiskA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwDiskId", + "type": "DWORD" + } + ], + "MsiSourceListClearMediaDiskW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwDiskId", + "type": "DWORD" + } + ], + "MsiSourceListClearAllExA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiSourceListClearAllExW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiSourceListForceResolutionExA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiSourceListForceResolutionExW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiSourceListSetInfoA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "szValue", + "type": "LPCSTR" + } + ], + "MsiSourceListSetInfoW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "szValue", + "type": "LPCWSTR" + } + ], + "MsiSourceListGetInfoA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "szValue", + "type": "LPSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiSourceListGetInfoW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "szValue", + "type": "LPWSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiSourceListEnumSourcesA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPSTR" + }, + { + "name": "pcchSource", + "type": "LPDWORD" + } + ], + "MsiSourceListEnumSourcesW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPWSTR" + }, + { + "name": "pcchSource", + "type": "LPDWORD" + } + ], + "MsiSourceListEnumMediaDisksA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwDiskId", + "type": "LPDWORD" + }, + { + "name": "szVolumeLabel", + "type": "LPSTR" + }, + { + "name": "pcchVolumeLabel", + "type": "LPDWORD" + }, + { + "name": "szDiskPrompt", + "type": "LPSTR" + }, + { + "name": "pcchDiskPrompt", + "type": "LPDWORD" + } + ], + "MsiSourceListEnumMediaDisksW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwDiskId", + "type": "LPDWORD" + }, + { + "name": "szVolumeLabel", + "type": "LPWSTR" + }, + { + "name": "pcchVolumeLabel", + "type": "LPDWORD" + }, + { + "name": "szDiskPrompt", + "type": "LPWSTR" + }, + { + "name": "pcchDiskPrompt", + "type": "LPDWORD" + } + ], + "MsiGetFileVersionA": [ + { + "name": "szFilePath", + "type": "LPCSTR" + }, + { + "name": "lpVersionBuf", + "type": "LPSTR" + }, + { + "name": "pcchVersionBuf", + "type": "LPDWORD" + }, + { + "name": "lpLangBuf", + "type": "LPSTR" + }, + { + "name": "pcchLangBuf", + "type": "LPDWORD" + } + ], + "MsiGetFileVersionW": [ + { + "name": "szFilePath", + "type": "LPCWSTR" + }, + { + "name": "lpVersionBuf", + "type": "LPWSTR" + }, + { + "name": "pcchVersionBuf", + "type": "LPDWORD" + }, + { + "name": "lpLangBuf", + "type": "LPWSTR" + }, + { + "name": "pcchLangBuf", + "type": "LPDWORD" + } + ], + "MsiGetFileHashA": [ + { + "name": "szFilePath", + "type": "LPCSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pHash", + "type": "PMSIFILEHASHINFO" + } + ], + "MsiGetFileHashW": [ + { + "name": "szFilePath", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pHash", + "type": "PMSIFILEHASHINFO" + } + ], + "MsiGetFileSignatureInformationA": [ + { + "name": "szSignedObjectPath", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppcCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbHashData", + "type": "LPBYTE" + }, + { + "name": "pcbHashData", + "type": "LPDWORD" + } + ], + "MsiGetFileSignatureInformationW": [ + { + "name": "szSignedObjectPath", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppcCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbHashData", + "type": "LPBYTE" + }, + { + "name": "pcbHashData", + "type": "LPDWORD" + } + ], + "MsiGetShortcutTargetA": [ + { + "name": "szShortcutPath", + "type": "LPCSTR" + }, + { + "name": "szProductCode", + "type": "LPSTR" + }, + { + "name": "szFeatureId", + "type": "LPSTR" + }, + { + "name": "szComponentCode", + "type": "LPSTR" + } + ], + "MsiGetShortcutTargetW": [ + { + "name": "szShortcutPath", + "type": "LPCWSTR" + }, + { + "name": "szProductCode", + "type": "LPWSTR" + }, + { + "name": "szFeatureId", + "type": "LPWSTR" + }, + { + "name": "szComponentCode", + "type": "LPWSTR" + } + ], + "MsiIsProductElevatedA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "pfElevated", + "type": "BOOL" + } + ], + "MsiIsProductElevatedW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "pfElevated", + "type": "BOOL" + } + ], + "MsiNotifySidChangeA": [ + { + "name": "pOldSid", + "type": "LPCSTR" + }, + { + "name": "pNewSid", + "type": "LPCSTR" + } + ], + "MsiNotifySidChangeW": [ + { + "name": "pOldSid", + "type": "LPCWSTR" + }, + { + "name": "pNewSid", + "type": "LPCWSTR" + } + ], + "MsiBeginTransactionA": [ + { + "name": "szName", + "type": "LPCSTR" + }, + { + "name": "dwTransactionAttributes", + "type": "DWORD" + }, + { + "name": "phTransactionHandle", + "type": "MSIHANDLE" + }, + { + "name": "phChangeOfOwnerEvent", + "type": "HANDLE" + } + ], + "MsiBeginTransactionW": [ + { + "name": "szName", + "type": "LPCWSTR" + }, + { + "name": "dwTransactionAttributes", + "type": "DWORD" + }, + { + "name": "phTransactionHandle", + "type": "MSIHANDLE" + }, + { + "name": "phChangeOfOwnerEvent", + "type": "HANDLE" + } + ], + "MsiEndTransaction": [ + { + "name": "dwTransactionState", + "type": "DWORD" + } + ], + "MsiJoinTransaction": [ + { + "name": "hTransactionHandle", + "type": "MSIHANDLE" + }, + { + "name": "dwTransactionAttributes", + "type": "DWORD" + }, + { + "name": "phChangeOfOwnerEvent", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/msiquery.json b/qiling/extensions/windows_sdk/msiquery.json new file mode 100644 index 000000000..a2e26985d --- /dev/null +++ b/qiling/extensions/windows_sdk/msiquery.json @@ -0,0 +1,1432 @@ +{ + "MsiDatabaseOpenViewA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szQuery", + "type": "LPCSTR" + }, + { + "name": "phView", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseOpenViewW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szQuery", + "type": "LPCWSTR" + }, + { + "name": "phView", + "type": "MSIHANDLE" + } + ], + "MsiViewGetErrorA": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "szColumnNameBuffer", + "type": "LPSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiViewGetErrorW": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "szColumnNameBuffer", + "type": "LPWSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiViewExecute": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewFetch": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewModify": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "eModifyMode", + "type": "MSIMODIFY" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewGetColumnInfo": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "eColumnInfo", + "type": "MSICOLINFO" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewClose": [ + { + "name": "hView", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseGetPrimaryKeysA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCSTR" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseGetPrimaryKeysW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCWSTR" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseIsTablePersistentA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCSTR" + } + ], + "MsiDatabaseIsTablePersistentW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCWSTR" + } + ], + "MsiGetSummaryInformationA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szDatabasePath", + "type": "LPCSTR" + }, + { + "name": "uiUpdateCount", + "type": "UINT" + }, + { + "name": "phSummaryInfo", + "type": "MSIHANDLE" + } + ], + "MsiGetSummaryInformationW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szDatabasePath", + "type": "LPCWSTR" + }, + { + "name": "uiUpdateCount", + "type": "UINT" + }, + { + "name": "phSummaryInfo", + "type": "MSIHANDLE" + } + ], + "MsiSummaryInfoGetPropertyCount": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "puiPropertyCount", + "type": "PUINT" + } + ], + "MsiSummaryInfoSetPropertyA": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "uiProperty", + "type": "UINT" + }, + { + "name": "uiDataType", + "type": "UINT" + }, + { + "name": "iValue", + "type": "INT" + }, + { + "name": "pftValue", + "type": "FILETIME" + }, + { + "name": "szValue", + "type": "LPCSTR" + } + ], + "MsiSummaryInfoSetPropertyW": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "uiProperty", + "type": "UINT" + }, + { + "name": "uiDataType", + "type": "UINT" + }, + { + "name": "iValue", + "type": "INT" + }, + { + "name": "pftValue", + "type": "FILETIME" + }, + { + "name": "szValue", + "type": "LPCWSTR" + } + ], + "MsiSummaryInfoGetPropertyA": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "uiProperty", + "type": "UINT" + }, + { + "name": "puiDataType", + "type": "PUINT" + }, + { + "name": "piValue", + "type": "LPINT" + }, + { + "name": "pftValue", + "type": "FILETIME" + }, + { + "name": "szValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiSummaryInfoGetPropertyW": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "uiProperty", + "type": "UINT" + }, + { + "name": "puiDataType", + "type": "PUINT" + }, + { + "name": "piValue", + "type": "LPINT" + }, + { + "name": "pftValue", + "type": "FILETIME" + }, + { + "name": "szValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiSummaryInfoPersist": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + } + ], + "MsiOpenDatabaseA": [ + { + "name": "szDatabasePath", + "type": "LPCSTR" + }, + { + "name": "szPersist", + "type": "LPCSTR" + }, + { + "name": "phDatabase", + "type": "MSIHANDLE" + } + ], + "MsiOpenDatabaseW": [ + { + "name": "szDatabasePath", + "type": "LPCWSTR" + }, + { + "name": "szPersist", + "type": "LPCWSTR" + }, + { + "name": "phDatabase", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseImportA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szFolderPath", + "type": "LPCSTR" + }, + { + "name": "szFileName", + "type": "LPCSTR" + } + ], + "MsiDatabaseImportW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szFolderPath", + "type": "LPCWSTR" + }, + { + "name": "szFileName", + "type": "LPCWSTR" + } + ], + "MsiDatabaseExportA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCSTR" + }, + { + "name": "szFolderPath", + "type": "LPCSTR" + }, + { + "name": "szFileName", + "type": "LPCSTR" + } + ], + "MsiDatabaseExportW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCWSTR" + }, + { + "name": "szFolderPath", + "type": "LPCWSTR" + }, + { + "name": "szFileName", + "type": "LPCWSTR" + } + ], + "MsiDatabaseMergeA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseMerge", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCSTR" + } + ], + "MsiDatabaseMergeW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseMerge", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCWSTR" + } + ], + "MsiDatabaseGenerateTransformA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseReference", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCSTR" + }, + { + "name": "iReserved1", + "type": "int" + }, + { + "name": "iReserved2", + "type": "int" + } + ], + "MsiDatabaseGenerateTransformW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseReference", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCWSTR" + }, + { + "name": "iReserved1", + "type": "int" + }, + { + "name": "iReserved2", + "type": "int" + } + ], + "MsiDatabaseApplyTransformA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCSTR" + }, + { + "name": "iErrorConditions", + "type": "int" + } + ], + "MsiDatabaseApplyTransformW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCWSTR" + }, + { + "name": "iErrorConditions", + "type": "int" + } + ], + "MsiCreateTransformSummaryInfoA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseReference", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCSTR" + }, + { + "name": "iErrorConditions", + "type": "int" + }, + { + "name": "iValidation", + "type": "int" + } + ], + "MsiCreateTransformSummaryInfoW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseReference", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCWSTR" + }, + { + "name": "iErrorConditions", + "type": "int" + }, + { + "name": "iValidation", + "type": "int" + } + ], + "MsiDatabaseCommit": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + } + ], + "MsiGetDatabaseState": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + } + ], + "MsiCreateRecord": [ + { + "name": "cParams", + "type": "UINT" + } + ], + "MsiRecordIsNull": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + } + ], + "MsiRecordDataSize": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + } + ], + "MsiRecordSetInteger": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "iValue", + "type": "int" + } + ], + "MsiRecordSetStringA": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szValue", + "type": "LPCSTR" + } + ], + "MsiRecordSetStringW": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szValue", + "type": "LPCWSTR" + } + ], + "MsiRecordGetInteger": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + } + ], + "MsiRecordGetStringA": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiRecordGetStringW": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiRecordGetFieldCount": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiRecordSetStreamA": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szFilePath", + "type": "LPCSTR" + } + ], + "MsiRecordSetStreamW": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szFilePath", + "type": "LPCWSTR" + } + ], + "MsiRecordReadStream": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szDataBuf", + "type": "char" + }, + { + "name": "pcbDataBuf", + "type": "LPDWORD" + } + ], + "MsiRecordClearData": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiGetActiveDatabase": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + } + ], + "MsiSetPropertyA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szName", + "type": "LPCSTR" + }, + { + "name": "szValue", + "type": "LPCSTR" + } + ], + "MsiSetPropertyW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szName", + "type": "LPCWSTR" + }, + { + "name": "szValue", + "type": "LPCWSTR" + } + ], + "MsiGetPropertyA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szName", + "type": "LPCSTR" + }, + { + "name": "szValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetPropertyW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szName", + "type": "LPCWSTR" + }, + { + "name": "szValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetLanguage": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + } + ], + "MsiGetMode": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "eRunMode", + "type": "MSIRUNMODE" + } + ], + "MsiSetMode": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "eRunMode", + "type": "MSIRUNMODE" + }, + { + "name": "fState", + "type": "BOOL" + } + ], + "MsiFormatRecordA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "szResultBuf", + "type": "LPSTR" + }, + { + "name": "pcchResultBuf", + "type": "LPDWORD" + } + ], + "MsiFormatRecordW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "szResultBuf", + "type": "LPWSTR" + }, + { + "name": "pcchResultBuf", + "type": "LPDWORD" + } + ], + "MsiDoActionA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szAction", + "type": "LPCSTR" + } + ], + "MsiDoActionW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szAction", + "type": "LPCWSTR" + } + ], + "MsiSequenceA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szTable", + "type": "LPCSTR" + }, + { + "name": "iSequenceMode", + "type": "INT" + } + ], + "MsiSequenceW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szTable", + "type": "LPCWSTR" + }, + { + "name": "iSequenceMode", + "type": "INT" + } + ], + "MsiProcessMessage": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "eMessageType", + "type": "INSTALLMESSAGE" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiEvaluateConditionA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szCondition", + "type": "LPCSTR" + } + ], + "MsiEvaluateConditionW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szCondition", + "type": "LPCWSTR" + } + ], + "MsiGetFeatureStateA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "piInstalled", + "type": "INSTALLSTATE" + }, + { + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiGetFeatureStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "piInstalled", + "type": "INSTALLSTATE" + }, + { + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiSetFeatureStateA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiSetFeatureStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiSetFeatureAttributesA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "MsiSetFeatureAttributesW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "MsiGetComponentStateA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "piInstalled", + "type": "INSTALLSTATE" + }, + { + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiGetComponentStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "piInstalled", + "type": "INSTALLSTATE" + }, + { + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiSetComponentStateA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiSetComponentStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiGetFeatureCostA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "iCostTree", + "type": "MSICOSTTREE" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + }, + { + "name": "piCost", + "type": "LPINT" + } + ], + "MsiGetFeatureCostW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "iCostTree", + "type": "MSICOSTTREE" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + }, + { + "name": "piCost", + "type": "LPINT" + } + ], + "MsiEnumComponentCostsA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + }, + { + "name": "szDriveBuf", + "type": "LPSTR" + }, + { + "name": "pcchDriveBuf", + "type": "LPDWORD" + }, + { + "name": "piCost", + "type": "LPINT" + }, + { + "name": "piTempCost", + "type": "LPINT" + } + ], + "MsiEnumComponentCostsW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + }, + { + "name": "szDriveBuf", + "type": "LPWSTR" + }, + { + "name": "pcchDriveBuf", + "type": "LPDWORD" + }, + { + "name": "piCost", + "type": "LPINT" + }, + { + "name": "piTempCost", + "type": "LPINT" + } + ], + "MsiSetInstallLevel": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "iInstallLevel", + "type": "int" + } + ], + "MsiGetFeatureValidStatesA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "lpInstallStates", + "type": "LPDWORD" + } + ], + "MsiGetFeatureValidStatesW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "lpInstallStates", + "type": "LPDWORD" + } + ], + "MsiGetSourcePathA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCSTR" + }, + { + "name": "szPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiGetSourcePathW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCWSTR" + }, + { + "name": "szPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiGetTargetPathA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCSTR" + }, + { + "name": "szPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiGetTargetPathW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCWSTR" + }, + { + "name": "szPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiSetTargetPathA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCSTR" + }, + { + "name": "szFolderPath", + "type": "LPCSTR" + } + ], + "MsiSetTargetPathW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCWSTR" + }, + { + "name": "szFolderPath", + "type": "LPCWSTR" + } + ], + "MsiVerifyDiskSpace": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + } + ], + "MsiEnableUIPreview": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "phPreview", + "type": "MSIHANDLE" + } + ], + "MsiPreviewDialogA": [ + { + "name": "hPreview", + "type": "MSIHANDLE" + }, + { + "name": "szDialogName", + "type": "LPCSTR" + } + ], + "MsiPreviewDialogW": [ + { + "name": "hPreview", + "type": "MSIHANDLE" + }, + { + "name": "szDialogName", + "type": "LPCWSTR" + } + ], + "MsiPreviewBillboardA": [ + { + "name": "hPreview", + "type": "MSIHANDLE" + }, + { + "name": "szControlName", + "type": "LPCSTR" + }, + { + "name": "szBillboard", + "type": "LPCSTR" + } + ], + "MsiPreviewBillboardW": [ + { + "name": "hPreview", + "type": "MSIHANDLE" + }, + { + "name": "szControlName", + "type": "LPCWSTR" + }, + { + "name": "szBillboard", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/msports.json b/qiling/extensions/windows_sdk/msports.json new file mode 100644 index 000000000..1c1fb7e43 --- /dev/null +++ b/qiling/extensions/windows_sdk/msports.json @@ -0,0 +1,84 @@ +{ + "ComDBOpen": [ + { + "name": "PHComDB", + "type": "PHCOMDB" + } + ], + "ComDBClose": [ + { + "name": "HComDB", + "type": "HCOMDB" + } + ], + "ComDBGetCurrentPortUsage": [ + { + "name": "HComDB", + "type": "HCOMDB" + }, + { + "name": "Buffer", + "type": "PBYTE" + }, + { + "name": "BufferSize", + "type": "DWORD" + }, + { + "name": "ReportType", + "type": "ULONG" + }, + { + "name": "MaxPortsReported", + "type": "LPDWORD" + } + ], + "ComDBClaimNextFreePort": [ + { + "name": "HComDB", + "type": "HCOMDB" + }, + { + "name": "ComNumber", + "type": "LPDWORD" + } + ], + "ComDBClaimPort": [ + { + "name": "HComDB", + "type": "HCOMDB" + }, + { + "name": "ComNumber", + "type": "DWORD" + }, + { + "name": "ForceClaim", + "type": "BOOL" + }, + { + "name": "Forced", + "type": "PBOOL" + } + ], + "ComDBReleasePort": [ + { + "name": "HComDB", + "type": "HCOMDB" + }, + { + "name": "ComNumber", + "type": "DWORD" + } + ], + "ComDBResizeDatabase": [ + { + "name": "HComDB", + "type": "HCOMDB" + }, + { + "name": "NewSize", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mssip.json b/qiling/extensions/windows_sdk/mssip.json new file mode 100644 index 000000000..31bb403b3 --- /dev/null +++ b/qiling/extensions/windows_sdk/mssip.json @@ -0,0 +1,144 @@ +{ + "CryptSIPGetSignedDataMsg": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "pdwEncodingType", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pcbSignedDataMsg", + "type": "DWORD" + }, + { + "name": "pbSignedDataMsg", + "type": "BYTE" + } + ], + "CryptSIPPutSignedDataMsg": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pdwIndex", + "type": "DWORD" + }, + { + "name": "cbSignedDataMsg", + "type": "DWORD" + }, + { + "name": "pbSignedDataMsg", + "type": "BYTE" + } + ], + "CryptSIPCreateIndirectData": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "pcbIndirectData", + "type": "DWORD" + }, + { + "name": "pIndirectData", + "type": "SIP_INDIRECT_DATA" + } + ], + "CryptSIPVerifyIndirectData": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "pIndirectData", + "type": "SIP_INDIRECT_DATA" + } + ], + "CryptSIPRemoveSignedDataMsg": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "dwIndex", + "type": "DWORD" + } + ], + "CryptSIPLoad": [ + { + "name": "pgSubject", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pSipDispatch", + "type": "SIP_DISPATCH_INFO" + } + ], + "CryptSIPRetrieveSubjectGuid": [ + { + "name": "FileName", + "type": "LPCWSTR" + }, + { + "name": "hFileIn", + "type": "HANDLE" + }, + { + "name": "pgSubject", + "type": "GUID" + } + ], + "CryptSIPRetrieveSubjectGuidForCatalogFile": [ + { + "name": "FileName", + "type": "LPCWSTR" + }, + { + "name": "hFileIn", + "type": "HANDLE" + }, + { + "name": "pgSubject", + "type": "GUID" + } + ], + "CryptSIPAddProvider": [ + { + "name": "psNewProv", + "type": "SIP_ADD_NEWPROVIDER" + } + ], + "CryptSIPRemoveProvider": [ + { + "name": "pgProv", + "type": "GUID" + } + ], + "CryptSIPGetCaps": [ + { + "name": "pSubjInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "pCaps", + "type": "SIP_CAP_SET" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mtxdm.json b/qiling/extensions/windows_sdk/mtxdm.json new file mode 100644 index 000000000..b48740340 --- /dev/null +++ b/qiling/extensions/windows_sdk/mtxdm.json @@ -0,0 +1,8 @@ +{ + "GetDispenserManager": [ + { + "name": "VOID", + "type": "IDispenserManager" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/namedpipeapi.json b/qiling/extensions/windows_sdk/namedpipeapi.json new file mode 100644 index 000000000..b70b04b87 --- /dev/null +++ b/qiling/extensions/windows_sdk/namedpipeapi.json @@ -0,0 +1,138 @@ +{ + "CreatePipe": [ + { + "name": "hReadPipe", + "type": "PHANDLE" + }, + { + "name": "hWritePipe", + "type": "PHANDLE" + }, + { + "name": "lpPipeAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "ConnectNamedPipe": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "DisconnectNamedPipe": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + } + ], + "SetNamedPipeHandleState": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpMode", + "type": "LPDWORD" + }, + { + "name": "lpMaxCollectionCount", + "type": "LPDWORD" + }, + { + "name": "lpCollectDataTimeout", + "type": "LPDWORD" + } + ], + "PeekNamedPipe": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesRead", + "type": "LPDWORD" + }, + { + "name": "lpTotalBytesAvail", + "type": "LPDWORD" + }, + { + "name": "lpBytesLeftThisMessage", + "type": "LPDWORD" + } + ], + "TransactNamedPipe": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesRead", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ImpersonateNamedPipeClient": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + } + ], + "GetNamedPipeInfo": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpFlags", + "type": "LPDWORD" + }, + { + "name": "lpOutBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpInBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpMaxInstances", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/namespaceapi.json b/qiling/extensions/windows_sdk/namespaceapi.json new file mode 100644 index 000000000..978397f0f --- /dev/null +++ b/qiling/extensions/windows_sdk/namespaceapi.json @@ -0,0 +1,28 @@ +{ + "ClosePrivateNamespace": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "AddSIDToBoundaryDescriptor": [ + { + "name": "BoundaryDescriptor", + "type": "HANDLE" + }, + { + "name": "RequiredSid", + "type": "PSID" + } + ], + "DeleteBoundaryDescriptor": [ + { + "name": "BoundaryDescriptor", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/nb30.json b/qiling/extensions/windows_sdk/nb30.json new file mode 100644 index 000000000..84a3ee53f --- /dev/null +++ b/qiling/extensions/windows_sdk/nb30.json @@ -0,0 +1,8 @@ +{ + "Netbios": [ + { + "name": "pncb", + "type": "PNCB" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ncrypt.json b/qiling/extensions/windows_sdk/ncrypt.json new file mode 100644 index 000000000..98f9b4afb --- /dev/null +++ b/qiling/extensions/windows_sdk/ncrypt.json @@ -0,0 +1,604 @@ +{ + "NCryptOpenStorageProvider": [ + { + "name": "phProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "pszProviderName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptEnumAlgorithms": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "dwAlgOperations", + "type": "DWORD" + }, + { + "name": "pdwAlgCount", + "type": "DWORD" + }, + { + "name": "ppAlgList", + "type": "NCryptAlgorithmName" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptIsAlgSupported": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "pszAlgId", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptEnumKeys": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "pszScope", + "type": "LPCWSTR" + }, + { + "name": "ppKeyName", + "type": "NCryptKeyName" + }, + { + "name": "ppEnumState", + "type": "PVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptEnumStorageProviders": [ + { + "name": "pdwProviderCount", + "type": "DWORD" + }, + { + "name": "ppProviderList", + "type": "NCryptProviderName" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptFreeBuffer": [ + { + "name": "pvInput", + "type": "PVOID" + } + ], + "NCryptOpenKey": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "phKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pszKeyName", + "type": "LPCWSTR" + }, + { + "name": "dwLegacyKeySpec", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptCreatePersistedKey": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "phKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pszAlgId", + "type": "LPCWSTR" + }, + { + "name": "pszKeyName", + "type": "LPCWSTR" + }, + { + "name": "dwLegacyKeySpec", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptGetProperty": [ + { + "name": "hObject", + "type": "NCRYPT_HANDLE" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "cbOutput", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptSetProperty": [ + { + "name": "hObject", + "type": "NCRYPT_HANDLE" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "pbInput", + "type": "PBYTE" + }, + { + "name": "cbInput", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptFinalizeKey": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptEncrypt": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pbInput", + "type": "PBYTE" + }, + { + "name": "cbInput", + "type": "DWORD" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "cbOutput", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptDecrypt": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pbInput", + "type": "PBYTE" + }, + { + "name": "cbInput", + "type": "DWORD" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "cbOutput", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptImportKey": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "hImportKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pszBlobType", + "type": "LPCWSTR" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "phKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pbData", + "type": "PBYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptExportKey": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hExportKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pszBlobType", + "type": "LPCWSTR" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "cbOutput", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptSignHash": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbHashValue", + "type": "PBYTE" + }, + { + "name": "cbHashValue", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "PBYTE" + }, + { + "name": "cbSignature", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptVerifySignature": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbHashValue", + "type": "PBYTE" + }, + { + "name": "cbHashValue", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "PBYTE" + }, + { + "name": "cbSignature", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptDeleteKey": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptFreeObject": [ + { + "name": "hObject", + "type": "NCRYPT_HANDLE" + } + ], + "NCryptIsKeyHandle": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + } + ], + "NCryptTranslateHandle": [ + { + "name": "phProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "phKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hLegacyProv", + "type": "HCRYPTPROV" + }, + { + "name": "hLegacyKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwLegacyKeySpec", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptNotifyChangeKey": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "phEvent", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptSecretAgreement": [ + { + "name": "hPrivKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hPubKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "phAgreedSecret", + "type": "NCRYPT_SECRET_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptDeriveKey": [ + { + "name": "hSharedSecret", + "type": "NCRYPT_SECRET_HANDLE" + }, + { + "name": "pwszKDF", + "type": "LPCWSTR" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbDerivedKey", + "type": "PBYTE" + }, + { + "name": "cbDerivedKey", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "NCryptKeyDerivation": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbDerivedKey", + "type": "PUCHAR" + }, + { + "name": "cbDerivedKey", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "NCryptCreateClaim": [ + { + "name": "hSubjectKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hAuthorityKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "dwClaimType", + "type": "DWORD" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbClaimBlob", + "type": "PBYTE" + }, + { + "name": "cbClaimBlob", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptVerifyClaim": [ + { + "name": "hSubjectKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hAuthorityKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "dwClaimType", + "type": "DWORD" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbClaimBlob", + "type": "PBYTE" + }, + { + "name": "cbClaimBlob", + "type": "DWORD" + }, + { + "name": "pOutput", + "type": "NCryptBufferDesc" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ncryptprotect.json b/qiling/extensions/windows_sdk/ncryptprotect.json new file mode 100644 index 000000000..46e3b019d --- /dev/null +++ b/qiling/extensions/windows_sdk/ncryptprotect.json @@ -0,0 +1,222 @@ +{ + "NCryptRegisterProtectionDescriptorName": [ + { + "name": "pwszName", + "type": "LPCWSTR" + }, + { + "name": "pwszDescriptorString", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptQueryProtectionDescriptorName": [ + { + "name": "pwszName", + "type": "LPCWSTR" + }, + { + "name": "pwszDescriptorString", + "type": "LPWSTR" + }, + { + "name": "pcDescriptorString", + "type": "SIZE_T" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptCreateProtectionDescriptor": [ + { + "name": "pwszDescriptorString", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + } + ], + "NCryptCloseProtectionDescriptor": [ + { + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + } + ], + "NCryptGetProtectionDescriptorInfo": [ + { + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + }, + { + "name": "pMemPara", + "type": "NCRYPT_ALLOC_PARA" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "ppvInfo", + "type": "void" + } + ], + "NCryptProtectSecret": [ + { + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "ULONG" + }, + { + "name": "pMemPara", + "type": "NCRYPT_ALLOC_PARA" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "ppbProtectedBlob", + "type": "BYTE" + }, + { + "name": "pcbProtectedBlob", + "type": "ULONG" + } + ], + "NCryptUnprotectSecret": [ + { + "name": "phDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbProtectedBlob", + "type": "BYTE" + }, + { + "name": "cbProtectedBlob", + "type": "ULONG" + }, + { + "name": "pMemPara", + "type": "NCRYPT_ALLOC_PARA" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "ppbData", + "type": "BYTE" + }, + { + "name": "pcbData", + "type": "ULONG" + } + ], + "NCryptStreamOpenToProtect": [ + { + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pStreamInfo", + "type": "NCRYPT_PROTECT_STREAM_INFO" + }, + { + "name": "phStream", + "type": "NCRYPT_STREAM_HANDLE" + } + ], + "NCryptStreamOpenToUnprotect": [ + { + "name": "pStreamInfo", + "type": "NCRYPT_PROTECT_STREAM_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "phStream", + "type": "NCRYPT_STREAM_HANDLE" + } + ], + "NCryptStreamOpenToUnprotectEx": [ + { + "name": "pStreamInfo", + "type": "NCRYPT_PROTECT_STREAM_INFO_EX" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "phStream", + "type": "NCRYPT_STREAM_HANDLE" + } + ], + "NCryptStreamUpdate": [ + { + "name": "hStream", + "type": "NCRYPT_STREAM_HANDLE" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "SIZE_T" + }, + { + "name": "fFinal", + "type": "BOOL" + } + ], + "NCryptStreamClose": [ + { + "name": "hStream", + "type": "NCRYPT_STREAM_HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/netcon.json b/qiling/extensions/windows_sdk/netcon.json new file mode 100644 index 000000000..e825469f7 --- /dev/null +++ b/qiling/extensions/windows_sdk/netcon.json @@ -0,0 +1,14 @@ +{ + "NcFreeNetconProperties": [ + { + "name": "pProps", + "type": "NETCON_PROPERTIES" + } + ], + "NcIsValidConnectionName": [ + { + "name": "pszwName", + "type": "PCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/netfw.json b/qiling/extensions/windows_sdk/netfw.json new file mode 100644 index 000000000..d9001a316 --- /dev/null +++ b/qiling/extensions/windows_sdk/netfw.json @@ -0,0 +1,144 @@ +{ + "NetworkIsolationSetupAppContainerBinaries": [ + { + "name": "applicationContainerSid", + "type": "PSID" + }, + { + "name": "packageFullName", + "type": "LPCWSTR" + }, + { + "name": "packageFolder", + "type": "LPCWSTR" + }, + { + "name": "displayName", + "type": "LPCWSTR" + }, + { + "name": "bBinariesFullyComputed", + "type": "BOOL" + }, + { + "name": "binaries", + "type": "LPCWSTR" + }, + { + "name": "binariesCount", + "type": "DWORD" + } + ], + "NetworkIsolationRegisterForAppContainerChanges": [ + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "callback", + "type": "PAC_CHANGES_CALLBACK_FN" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "registrationObject", + "type": "HANDLE" + } + ], + "NetworkIsolationUnregisterForAppContainerChanges": [ + { + "name": "registrationObject", + "type": "HANDLE" + } + ], + "NetworkIsolationEnumerateAppContainerRules": [ + { + "name": "newEnum", + "type": "IEnumVARIANT" + } + ], + "NetworkIsolationFreeAppContainers": [ + { + "name": "pPublicAppCs", + "type": "PINET_FIREWALL_APP_CONTAINER" + } + ], + "NetworkIsolationEnumAppContainers": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pdwNumPublicAppCs", + "type": "DWORD" + }, + { + "name": "ppPublicAppCs", + "type": "PINET_FIREWALL_APP_CONTAINER" + } + ], + "NetworkIsolationGetAppContainerConfig": [ + { + "name": "pdwNumPublicAppCs", + "type": "DWORD" + }, + { + "name": "appContainerSids", + "type": "PSID_AND_ATTRIBUTES" + } + ], + "NetworkIsolationSetAppContainerConfig": [ + { + "name": "dwNumPublicAppCs", + "type": "DWORD" + }, + { + "name": "appContainerSids", + "type": "PSID_AND_ATTRIBUTES" + } + ], + "NetworkIsolationDiagnoseConnectFailureAndGetInfo": [ + { + "name": "wszServerName", + "type": "LPCWSTR" + }, + { + "name": "netIsoError", + "type": "NETISO_ERROR_TYPE" + } + ], + "NetworkIsolationGetEnterpriseIdAsync": [ + { + "name": "wszServerName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "callback", + "type": "PNETISO_EDP_ID_CALLBACK_FN" + }, + { + "name": "hOperation", + "type": "HANDLE" + } + ], + "NetworkIsolationGetEnterpriseIdClose": [ + { + "name": "hOperation", + "type": "HANDLE" + }, + { + "name": "bWaitForOperation", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/netioapi.json b/qiling/extensions/windows_sdk/netioapi.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/netioapi.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/netsh.json b/qiling/extensions/windows_sdk/netsh.json new file mode 100644 index 000000000..50297c7bd --- /dev/null +++ b/qiling/extensions/windows_sdk/netsh.json @@ -0,0 +1,114 @@ +{ + "MatchEnumTag": [ + { + "name": "hModule", + "type": "HANDLE" + }, + { + "name": "pwcArg", + "type": "LPCWSTR" + }, + { + "name": "dwNumArg", + "type": "DWORD" + }, + { + "name": "pEnumTable", + "type": "TOKEN_VALUE" + }, + { + "name": "pdwValue", + "type": "PDWORD" + } + ], + "MatchToken": [ + { + "name": "pwszUserToken", + "type": "LPCWSTR" + }, + { + "name": "pwszCmdToken", + "type": "LPCWSTR" + } + ], + "PreprocessCommand": [ + { + "name": "hModule", + "type": "HANDLE" + }, + { + "name": "ppwcArguments", + "type": "LPWSTR" + }, + { + "name": "dwCurrentIndex", + "type": "DWORD" + }, + { + "name": "dwArgCount", + "type": "DWORD" + }, + { + "name": "pttTags", + "type": "TAG_TYPE" + }, + { + "name": "dwTagCount", + "type": "DWORD" + }, + { + "name": "dwMinArgs", + "type": "DWORD" + }, + { + "name": "dwMaxArgs", + "type": "DWORD" + }, + { + "name": "pdwTagType", + "type": "DWORD" + } + ], + "PrintError": [ + { + "name": "hModule", + "type": "HANDLE" + }, + { + "name": "dwErrId", + "type": "DWORD" + } + ], + "PrintMessageFromModule": [ + { + "name": "hModule", + "type": "HANDLE" + }, + { + "name": "dwMsgId", + "type": "DWORD" + } + ], + "PrintMessage": [ + { + "name": "pwszFormat", + "type": "LPCWSTR" + } + ], + "RegisterContext": [ + { + "name": "pChildContext", + "type": "NS_CONTEXT_ATTRIBUTES" + } + ], + "RegisterHelper": [ + { + "name": "pguidParentContext", + "type": "GUID" + }, + { + "name": "pfnRegisterSubContext", + "type": "NS_HELPER_ATTRIBUTES" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/networkisolation.json b/qiling/extensions/windows_sdk/networkisolation.json new file mode 100644 index 000000000..1d77f45ad --- /dev/null +++ b/qiling/extensions/windows_sdk/networkisolation.json @@ -0,0 +1,106 @@ +{ + "NetworkIsolationSetupAppContainerBinaries": [ + { + "name": "applicationContainerSid", + "type": "PSID" + }, + { + "name": "packageFullName", + "type": "LPCWSTR" + }, + { + "name": "packageFolder", + "type": "LPCWSTR" + }, + { + "name": "displayName", + "type": "LPCWSTR" + }, + { + "name": "bBinariesFullyComputed", + "type": "BOOL" + }, + { + "name": "binaries", + "type": "LPCWSTR" + }, + { + "name": "binariesCount", + "type": "DWORD" + } + ], + "NetworkIsolationRegisterForAppContainerChanges": [ + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "callback", + "type": "PAC_CHANGES_CALLBACK_FN" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "registrationObject", + "type": "HANDLE" + } + ], + "NetworkIsolationUnregisterForAppContainerChanges": [ + { + "name": "registrationObject", + "type": "HANDLE" + } + ], + "NetworkIsolationFreeAppContainers": [ + { + "name": "pPublicAppCs", + "type": "PINET_FIREWALL_APP_CONTAINER" + } + ], + "NetworkIsolationEnumAppContainers": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pdwNumPublicAppCs", + "type": "DWORD" + }, + { + "name": "ppPublicAppCs", + "type": "PINET_FIREWALL_APP_CONTAINER" + } + ], + "NetworkIsolationGetAppContainerConfig": [ + { + "name": "pdwNumPublicAppCs", + "type": "DWORD" + }, + { + "name": "appContainerSids", + "type": "PSID_AND_ATTRIBUTES" + } + ], + "NetworkIsolationSetAppContainerConfig": [ + { + "name": "dwNumPublicAppCs", + "type": "DWORD" + }, + { + "name": "appContainerSids", + "type": "PSID_AND_ATTRIBUTES" + } + ], + "NetworkIsolationDiagnoseConnectFailureAndGetInfo": [ + { + "name": "wszServerName", + "type": "LPCWSTR" + }, + { + "name": "netIsoError", + "type": "NETISO_ERROR_TYPE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/newdev.json b/qiling/extensions/windows_sdk/newdev.json new file mode 100644 index 000000000..0107b90f5 --- /dev/null +++ b/qiling/extensions/windows_sdk/newdev.json @@ -0,0 +1,94 @@ +{ + "DiInstallDevice": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "DriverInfoData", + "type": "PSP_DRVINFO_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "NeedReboot", + "type": "PBOOL" + } + ], + "DiUninstallDevice": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "NeedReboot", + "type": "PBOOL" + } + ], + "DiShowUpdateDevice": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "NeedReboot", + "type": "PBOOL" + } + ], + "DiRollbackDriver": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "NeedReboot", + "type": "PBOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/npapi.json b/qiling/extensions/windows_sdk/npapi.json new file mode 100644 index 000000000..92beff586 --- /dev/null +++ b/qiling/extensions/windows_sdk/npapi.json @@ -0,0 +1,16 @@ +{ + "WNetSetLastErrorA": [ + { + "name": "err", + "type": "DWORD" + }, + { + "name": "lpError", + "type": "LPSTR" + }, + { + "name": "lpProviders", + "type": "LPSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/nspapi.json b/qiling/extensions/windows_sdk/nspapi.json new file mode 100644 index 000000000..3d0d8b0af --- /dev/null +++ b/qiling/extensions/windows_sdk/nspapi.json @@ -0,0 +1,274 @@ +{ + "EnumProtocolsA": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "EnumProtocolsW": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "GetAddressByNameA": [ + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpServiceType", + "type": "LPGUID" + }, + { + "name": "lpServiceName", + "type": "LPSTR" + }, + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "dwResolution", + "type": "DWORD" + }, + { + "name": "lpServiceAsyncInfo", + "type": "LPSERVICE_ASYNC_INFO" + }, + { + "name": "lpCsaddrBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpAliasBuffer", + "type": "LPSTR" + }, + { + "name": "lpdwAliasBufferLength", + "type": "LPDWORD" + } + ], + "GetAddressByNameW": [ + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpServiceType", + "type": "LPGUID" + }, + { + "name": "lpServiceName", + "type": "LPWSTR" + }, + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "dwResolution", + "type": "DWORD" + }, + { + "name": "lpServiceAsyncInfo", + "type": "LPSERVICE_ASYNC_INFO" + }, + { + "name": "lpCsaddrBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpAliasBuffer", + "type": "LPWSTR" + }, + { + "name": "lpdwAliasBufferLength", + "type": "LPDWORD" + } + ], + "GetTypeByNameA": [ + { + "name": "lpServiceName", + "type": "LPSTR" + }, + { + "name": "lpServiceType", + "type": "LPGUID" + } + ], + "GetTypeByNameW": [ + { + "name": "lpServiceName", + "type": "LPWSTR" + }, + { + "name": "lpServiceType", + "type": "LPGUID" + } + ], + "GetNameByTypeA": [ + { + "name": "lpServiceType", + "type": "LPGUID" + }, + { + "name": "lpServiceName", + "type": "LPSTR" + }, + { + "name": "dwNameLength", + "type": "DWORD" + } + ], + "GetNameByTypeW": [ + { + "name": "lpServiceType", + "type": "LPGUID" + }, + { + "name": "lpServiceName", + "type": "LPWSTR" + }, + { + "name": "dwNameLength", + "type": "DWORD" + } + ], + "SetServiceA": [ + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpServiceInfo", + "type": "LPSERVICE_INFOA" + }, + { + "name": "lpServiceAsyncInfo", + "type": "LPSERVICE_ASYNC_INFO" + }, + { + "name": "lpdwStatusFlags", + "type": "LPDWORD" + } + ], + "SetServiceW": [ + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpServiceInfo", + "type": "LPSERVICE_INFOW" + }, + { + "name": "lpServiceAsyncInfo", + "type": "LPSERVICE_ASYNC_INFO" + }, + { + "name": "lpdwStatusFlags", + "type": "LPDWORD" + } + ], + "GetServiceA": [ + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpGuid", + "type": "LPGUID" + }, + { + "name": "lpServiceName", + "type": "LPSTR" + }, + { + "name": "dwProperties", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpServiceAsyncInfo", + "type": "LPSERVICE_ASYNC_INFO" + } + ], + "GetServiceW": [ + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpGuid", + "type": "LPGUID" + }, + { + "name": "lpServiceName", + "type": "LPWSTR" + }, + { + "name": "dwProperties", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpServiceAsyncInfo", + "type": "LPSERVICE_ASYNC_INFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ntdsapi.json b/qiling/extensions/windows_sdk/ntdsapi.json new file mode 100644 index 000000000..e0b6ea401 --- /dev/null +++ b/qiling/extensions/windows_sdk/ntdsapi.json @@ -0,0 +1,1520 @@ +{ + "DsBindW": [ + { + "name": "DomainControllerName", + "type": "LPCWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindA": [ + { + "name": "DomainControllerName", + "type": "LPCSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithCredW": [ + { + "name": "DomainControllerName", + "type": "LPCWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithCredA": [ + { + "name": "DomainControllerName", + "type": "LPCSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithSpnW": [ + { + "name": "DomainControllerName", + "type": "LPCWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCWSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithSpnA": [ + { + "name": "DomainControllerName", + "type": "LPCSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithSpnExW": [ + { + "name": "DomainControllerName", + "type": "LPCWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCWSTR" + }, + { + "name": "BindFlags", + "type": "DWORD" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithSpnExA": [ + { + "name": "DomainControllerName", + "type": "LPCSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCSTR" + }, + { + "name": "BindFlags", + "type": "DWORD" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindByInstanceW": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "Annotation", + "type": "LPCWSTR" + }, + { + "name": "InstanceGuid", + "type": "GUID" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCWSTR" + }, + { + "name": "BindFlags", + "type": "DWORD" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindByInstanceA": [ + { + "name": "ServerName", + "type": "LPCSTR" + }, + { + "name": "Annotation", + "type": "LPCSTR" + }, + { + "name": "InstanceGuid", + "type": "GUID" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCSTR" + }, + { + "name": "BindFlags", + "type": "DWORD" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindToISTGW": [ + { + "name": "SiteName", + "type": "LPCWSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindToISTGA": [ + { + "name": "SiteName", + "type": "LPCSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindingSetTimeout": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "cTimeoutSecs", + "type": "ULONG" + } + ], + "DsUnBindW": [ + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsUnBindA": [ + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsMakePasswordCredentialsW": [ + { + "name": "User", + "type": "LPCWSTR" + }, + { + "name": "Domain", + "type": "LPCWSTR" + }, + { + "name": "Password", + "type": "LPCWSTR" + }, + { + "name": "pAuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + } + ], + "DsMakePasswordCredentialsA": [ + { + "name": "User", + "type": "LPCSTR" + }, + { + "name": "Domain", + "type": "LPCSTR" + }, + { + "name": "Password", + "type": "LPCSTR" + }, + { + "name": "pAuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + } + ], + "DsFreePasswordCredentials": [ + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + } + ], + "DsCrackNamesW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "flags", + "type": "DS_NAME_FLAGS" + }, + { + "name": "formatOffered", + "type": "DS_NAME_FORMAT" + }, + { + "name": "formatDesired", + "type": "DS_NAME_FORMAT" + }, + { + "name": "cNames", + "type": "DWORD" + }, + { + "name": "rpNames", + "type": "LPCWSTR" + }, + { + "name": "ppResult", + "type": "PDS_NAME_RESULTW" + } + ], + "DsCrackNamesA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "flags", + "type": "DS_NAME_FLAGS" + }, + { + "name": "formatOffered", + "type": "DS_NAME_FORMAT" + }, + { + "name": "formatDesired", + "type": "DS_NAME_FORMAT" + }, + { + "name": "cNames", + "type": "DWORD" + }, + { + "name": "rpNames", + "type": "LPCSTR" + }, + { + "name": "ppResult", + "type": "PDS_NAME_RESULTA" + } + ], + "DsFreeNameResultW": [ + { + "name": "pResult", + "type": "DS_NAME_RESULTW" + } + ], + "DsFreeNameResultA": [ + { + "name": "pResult", + "type": "DS_NAME_RESULTA" + } + ], + "DsGetSpnA": [ + { + "name": "ServiceType", + "type": "DS_SPN_NAME_TYPE" + }, + { + "name": "ServiceClass", + "type": "LPCSTR" + }, + { + "name": "ServiceName", + "type": "LPCSTR" + }, + { + "name": "InstancePort", + "type": "USHORT" + }, + { + "name": "cInstanceNames", + "type": "USHORT" + }, + { + "name": "pInstanceNames", + "type": "LPCSTR" + }, + { + "name": "pInstancePorts", + "type": "USHORT" + }, + { + "name": "pcSpn", + "type": "DWORD" + }, + { + "name": "prpszSpn", + "type": "LPSTR" + } + ], + "DsGetSpnW": [ + { + "name": "ServiceType", + "type": "DS_SPN_NAME_TYPE" + }, + { + "name": "ServiceClass", + "type": "LPCWSTR" + }, + { + "name": "ServiceName", + "type": "LPCWSTR" + }, + { + "name": "InstancePort", + "type": "USHORT" + }, + { + "name": "cInstanceNames", + "type": "USHORT" + }, + { + "name": "pInstanceNames", + "type": "LPCWSTR" + }, + { + "name": "pInstancePorts", + "type": "USHORT" + }, + { + "name": "pcSpn", + "type": "DWORD" + }, + { + "name": "prpszSpn", + "type": "LPWSTR" + } + ], + "DsFreeSpnArrayA": [ + { + "name": "cSpn", + "type": "DWORD" + }, + { + "name": "rpszSpn", + "type": "LPSTR" + } + ], + "DsFreeSpnArrayW": [ + { + "name": "cSpn", + "type": "DWORD" + }, + { + "name": "rpszSpn", + "type": "LPWSTR" + } + ], + "DsWriteAccountSpnA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Operation", + "type": "DS_SPN_WRITE_OP" + }, + { + "name": "pszAccount", + "type": "LPCSTR" + }, + { + "name": "cSpn", + "type": "DWORD" + }, + { + "name": "rpszSpn", + "type": "LPCSTR" + } + ], + "DsWriteAccountSpnW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Operation", + "type": "DS_SPN_WRITE_OP" + }, + { + "name": "pszAccount", + "type": "LPCWSTR" + }, + { + "name": "cSpn", + "type": "DWORD" + }, + { + "name": "rpszSpn", + "type": "LPCWSTR" + } + ], + "DsClientMakeSpnForTargetServerW": [ + { + "name": "ServiceClass", + "type": "LPCWSTR" + }, + { + "name": "ServiceName", + "type": "LPCWSTR" + }, + { + "name": "pcSpnLength", + "type": "DWORD" + }, + { + "name": "pszSpn", + "type": "LPWSTR" + } + ], + "DsClientMakeSpnForTargetServerA": [ + { + "name": "ServiceClass", + "type": "LPCSTR" + }, + { + "name": "ServiceName", + "type": "LPCSTR" + }, + { + "name": "pcSpnLength", + "type": "DWORD" + }, + { + "name": "pszSpn", + "type": "LPSTR" + } + ], + "DsServerRegisterSpnA": [ + { + "name": "Operation", + "type": "DS_SPN_WRITE_OP" + }, + { + "name": "ServiceClass", + "type": "LPCSTR" + }, + { + "name": "UserObjectDN", + "type": "LPCSTR" + } + ], + "DsServerRegisterSpnW": [ + { + "name": "Operation", + "type": "DS_SPN_WRITE_OP" + }, + { + "name": "ServiceClass", + "type": "LPCWSTR" + }, + { + "name": "UserObjectDN", + "type": "LPCWSTR" + } + ], + "DsReplicaSyncA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "pUuidDsaSrc", + "type": "UUID" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaSyncW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "pUuidDsaSrc", + "type": "UUID" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaAddA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "SourceDsaDn", + "type": "LPCSTR" + }, + { + "name": "TransportDn", + "type": "LPCSTR" + }, + { + "name": "SourceDsaAddress", + "type": "LPCSTR" + }, + { + "name": "pSchedule", + "type": "PSCHEDULE" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "DsReplicaAddW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "SourceDsaDn", + "type": "LPCWSTR" + }, + { + "name": "TransportDn", + "type": "LPCWSTR" + }, + { + "name": "SourceDsaAddress", + "type": "LPCWSTR" + }, + { + "name": "pSchedule", + "type": "PSCHEDULE" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "DsReplicaDelA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "DsaSrc", + "type": "LPCSTR" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaDelW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "DsaSrc", + "type": "LPCWSTR" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaModifyA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "pUuidSourceDsa", + "type": "UUID" + }, + { + "name": "TransportDn", + "type": "LPCSTR" + }, + { + "name": "SourceDsaAddress", + "type": "LPCSTR" + }, + { + "name": "pSchedule", + "type": "PSCHEDULE" + }, + { + "name": "ReplicaFlags", + "type": "DWORD" + }, + { + "name": "ModifyFields", + "type": "DWORD" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "DsReplicaModifyW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "pUuidSourceDsa", + "type": "UUID" + }, + { + "name": "TransportDn", + "type": "LPCWSTR" + }, + { + "name": "SourceDsaAddress", + "type": "LPCWSTR" + }, + { + "name": "pSchedule", + "type": "PSCHEDULE" + }, + { + "name": "ReplicaFlags", + "type": "DWORD" + }, + { + "name": "ModifyFields", + "type": "DWORD" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "DsReplicaUpdateRefsA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "DsaDest", + "type": "LPCSTR" + }, + { + "name": "pUuidDsaDest", + "type": "UUID" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaUpdateRefsW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "DsaDest", + "type": "LPCWSTR" + }, + { + "name": "pUuidDsaDest", + "type": "UUID" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaSyncAllA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "pszNameContext", + "type": "LPCSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pFnCallBack", + "type": "BOOL" + }, + { + "name": "pCallbackData", + "type": "LPVOID" + }, + { + "name": "pErrors", + "type": "PDS_REPSYNCALL_ERRINFOA" + } + ], + "DsReplicaSyncAllW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "pszNameContext", + "type": "LPCWSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pFnCallBack", + "type": "BOOL" + }, + { + "name": "pCallbackData", + "type": "LPVOID" + }, + { + "name": "pErrors", + "type": "PDS_REPSYNCALL_ERRINFOW" + } + ], + "DsRemoveDsServerW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ServerDN", + "type": "LPWSTR" + }, + { + "name": "DomainDN", + "type": "LPWSTR" + }, + { + "name": "fLastDcInDomain", + "type": "BOOL" + }, + { + "name": "fCommit", + "type": "BOOL" + } + ], + "DsRemoveDsServerA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ServerDN", + "type": "LPSTR" + }, + { + "name": "DomainDN", + "type": "LPSTR" + }, + { + "name": "fLastDcInDomain", + "type": "BOOL" + }, + { + "name": "fCommit", + "type": "BOOL" + } + ], + "DsRemoveDsDomainW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "DomainDN", + "type": "LPWSTR" + } + ], + "DsRemoveDsDomainA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "DomainDN", + "type": "LPSTR" + } + ], + "DsListSitesA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ppSites", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListSitesW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ppSites", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListServersInSiteA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "site", + "type": "LPCSTR" + }, + { + "name": "ppServers", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListServersInSiteW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "site", + "type": "LPCWSTR" + }, + { + "name": "ppServers", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListDomainsInSiteA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "site", + "type": "LPCSTR" + }, + { + "name": "ppDomains", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListDomainsInSiteW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "site", + "type": "LPCWSTR" + }, + { + "name": "ppDomains", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListServersForDomainInSiteA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "domain", + "type": "LPCSTR" + }, + { + "name": "site", + "type": "LPCSTR" + }, + { + "name": "ppServers", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListServersForDomainInSiteW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "domain", + "type": "LPCWSTR" + }, + { + "name": "site", + "type": "LPCWSTR" + }, + { + "name": "ppServers", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListInfoForServerA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "server", + "type": "LPCSTR" + }, + { + "name": "ppInfo", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListInfoForServerW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "server", + "type": "LPCWSTR" + }, + { + "name": "ppInfo", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListRolesA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ppRoles", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListRolesW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ppRoles", + "type": "PDS_NAME_RESULTW" + } + ], + "DsQuerySitesByCostW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "pwszFromSite", + "type": "LPWSTR" + }, + { + "name": "rgwszToSites", + "type": "LPWSTR" + }, + { + "name": "cToSites", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "prgSiteInfo", + "type": "PDS_SITE_COST_INFO" + } + ], + "DsQuerySitesByCostA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "pszFromSite", + "type": "LPSTR" + }, + { + "name": "rgszToSites", + "type": "LPSTR" + }, + { + "name": "cToSites", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "prgSiteInfo", + "type": "PDS_SITE_COST_INFO" + } + ], + "DsQuerySitesFree": [ + { + "name": "rgSiteInfo", + "type": "PDS_SITE_COST_INFO" + } + ], + "DsMapSchemaGuidsA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "cGuids", + "type": "DWORD" + }, + { + "name": "rGuids", + "type": "GUID" + }, + { + "name": "ppGuidMap", + "type": "DS_SCHEMA_GUID_MAPA" + } + ], + "DsFreeSchemaGuidMapA": [ + { + "name": "pGuidMap", + "type": "PDS_SCHEMA_GUID_MAPA" + } + ], + "DsMapSchemaGuidsW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "cGuids", + "type": "DWORD" + }, + { + "name": "rGuids", + "type": "GUID" + }, + { + "name": "ppGuidMap", + "type": "DS_SCHEMA_GUID_MAPW" + } + ], + "DsFreeSchemaGuidMapW": [ + { + "name": "pGuidMap", + "type": "PDS_SCHEMA_GUID_MAPW" + } + ], + "DsGetDomainControllerInfoA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "DomainName", + "type": "LPCSTR" + }, + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "pcOut", + "type": "DWORD" + }, + { + "name": "ppInfo", + "type": "void" + } + ], + "DsGetDomainControllerInfoW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "DomainName", + "type": "LPCWSTR" + }, + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "pcOut", + "type": "DWORD" + }, + { + "name": "ppInfo", + "type": "void" + } + ], + "DsFreeDomainControllerInfoA": [ + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "cInfo", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "void" + } + ], + "DsFreeDomainControllerInfoW": [ + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "cInfo", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "void" + } + ], + "DsReplicaConsistencyCheck": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "TaskID", + "type": "DS_KCC_TASKID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DsReplicaVerifyObjectsW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "pUuidDsaSrc", + "type": "UUID" + }, + { + "name": "ulOptions", + "type": "ULONG" + } + ], + "DsReplicaVerifyObjectsA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "pUuidDsaSrc", + "type": "UUID" + }, + { + "name": "ulOptions", + "type": "ULONG" + } + ], + "DsReplicaGetInfoW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "InfoType", + "type": "DS_REPL_INFO_TYPE" + }, + { + "name": "pszObject", + "type": "LPCWSTR" + }, + { + "name": "puuidForSourceDsaObjGuid", + "type": "UUID" + }, + { + "name": "ppInfo", + "type": "void" + } + ], + "DsReplicaGetInfo2W": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "InfoType", + "type": "DS_REPL_INFO_TYPE" + }, + { + "name": "pszObject", + "type": "LPCWSTR" + }, + { + "name": "puuidForSourceDsaObjGuid", + "type": "UUID" + }, + { + "name": "pszAttributeName", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwEnumerationContext", + "type": "DWORD" + }, + { + "name": "ppInfo", + "type": "void" + } + ], + "DsReplicaFreeInfo": [ + { + "name": "InfoType", + "type": "DS_REPL_INFO_TYPE" + }, + { + "name": "pInfo", + "type": "void" + } + ], + "DsAddSidHistoryW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SrcDomain", + "type": "LPCWSTR" + }, + { + "name": "SrcPrincipal", + "type": "LPCWSTR" + }, + { + "name": "SrcDomainController", + "type": "LPCWSTR" + }, + { + "name": "SrcDomainCreds", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "DstDomain", + "type": "LPCWSTR" + }, + { + "name": "DstPrincipal", + "type": "LPCWSTR" + } + ], + "DsAddSidHistoryA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SrcDomain", + "type": "LPCSTR" + }, + { + "name": "SrcPrincipal", + "type": "LPCSTR" + }, + { + "name": "SrcDomainController", + "type": "LPCSTR" + }, + { + "name": "SrcDomainCreds", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "DstDomain", + "type": "LPCSTR" + }, + { + "name": "DstPrincipal", + "type": "LPCSTR" + } + ], + "DsInheritSecurityIdentityW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SrcPrincipal", + "type": "LPCWSTR" + }, + { + "name": "DstPrincipal", + "type": "LPCWSTR" + } + ], + "DsInheritSecurityIdentityA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SrcPrincipal", + "type": "LPCSTR" + }, + { + "name": "DstPrincipal", + "type": "LPCSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ntmsapi.json b/qiling/extensions/windows_sdk/ntmsapi.json new file mode 100644 index 000000000..b305d4863 --- /dev/null +++ b/qiling/extensions/windows_sdk/ntmsapi.json @@ -0,0 +1,1238 @@ +{ + "OpenNtmsSessionW": [ + { + "name": "lpServer", + "type": "LPCWSTR" + }, + { + "name": "lpApplication", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "OpenNtmsSessionA": [ + { + "name": "lpServer", + "type": "LPCSTR" + }, + { + "name": "lpApplication", + "type": "LPCSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "CloseNtmsSession": [ + { + "name": "hSession", + "type": "HANDLE" + } + ], + "MountNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpDriveId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwPriority", + "type": "int" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "lpMountInformation", + "type": "LPNTMS_MOUNT_INFORMATION" + } + ], + "DismountNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "AllocateNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaPool", + "type": "LPNTMS_GUID" + }, + { + "name": "lpPartition", + "type": "LPNTMS_GUID" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "lpAllocateInformation", + "type": "LPNTMS_ALLOCATION_INFORMATION" + } + ], + "DeallocateNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "SwapNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId1", + "type": "LPNTMS_GUID" + }, + { + "name": "lpMediaId2", + "type": "LPNTMS_GUID" + } + ], + "AddNtmsMediaType": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaTypeId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpLibId", + "type": "LPNTMS_GUID" + } + ], + "DeleteNtmsMediaType": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaTypeId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpLibId", + "type": "LPNTMS_GUID" + } + ], + "ChangeNtmsMediaType": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + } + ], + "DecommissionNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + } + ], + "SetNtmsMediaComplete": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + } + ], + "DeleteNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + } + ], + "CreateNtmsMediaPoolA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpPoolName", + "type": "LPCSTR" + }, + { + "name": "lpMediaType", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + } + ], + "CreateNtmsMediaPoolW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpPoolName", + "type": "LPCWSTR" + }, + { + "name": "lpMediaType", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + } + ], + "GetNtmsMediaPoolNameA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpNameBuf", + "type": "LPSTR" + }, + { + "name": "lpdwBufSize", + "type": "LPDWORD" + } + ], + "GetNtmsMediaPoolNameW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpNameBuf", + "type": "LPWSTR" + }, + { + "name": "lpdwBufSize", + "type": "LPDWORD" + } + ], + "MoveToNtmsMediaPool": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + } + ], + "DeleteNtmsMediaPool": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpPoolId", + "type": "LPNTMS_GUID" + } + ], + "DeleteNtmsLibrary": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibraryId", + "type": "LPNTMS_GUID" + } + ], + "DeleteNtmsDrive": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpDriveId", + "type": "LPNTMS_GUID" + } + ], + "GetNtmsObjectInformationA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpInfo", + "type": "LPNTMS_OBJECTINFORMATIONA" + } + ], + "GetNtmsObjectInformationW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpInfo", + "type": "LPNTMS_OBJECTINFORMATIONW" + } + ], + "SetNtmsObjectInformationA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpInfo", + "type": "LPNTMS_OBJECTINFORMATIONA" + } + ], + "SetNtmsObjectInformationW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpInfo", + "type": "LPNTMS_OBJECTINFORMATIONW" + } + ], + "CreateNtmsMediaA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMedia", + "type": "LPNTMS_OBJECTINFORMATIONA" + }, + { + "name": "lpList", + "type": "LPNTMS_OBJECTINFORMATIONA" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "CreateNtmsMediaW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMedia", + "type": "LPNTMS_OBJECTINFORMATIONW" + }, + { + "name": "lpList", + "type": "LPNTMS_OBJECTINFORMATIONW" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "EnumerateNtmsObject": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpContainerId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpList", + "type": "LPNTMS_GUID" + }, + { + "name": "lpdwListSize", + "type": "LPDWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "DisableNtmsObject": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + } + ], + "EnableNtmsObject": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + } + ], + "EjectNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpEjectOperation", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + } + ], + "InjectNtmsMedia": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibraryId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpInjectOperation", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + } + ], + "AccessNtmsLibraryDoor": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibraryId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + } + ], + "CleanNtmsDrive": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpDriveId", + "type": "LPNTMS_GUID" + } + ], + "DismountNtmsDrive": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpDriveId", + "type": "LPNTMS_GUID" + } + ], + "InventoryNtmsLibrary": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibraryId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + } + ], + "IdentifyNtmsSlot": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpSlotId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwOption", + "type": "DWORD" + } + ], + "UpdateNtmsOmidInfo": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpMediaId", + "type": "LPNTMS_GUID" + }, + { + "name": "labelType", + "type": "DWORD" + }, + { + "name": "numberOfBytes", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + } + ], + "CancelNtmsLibraryRequest": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + } + ], + "GetNtmsRequestOrder": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + }, + { + "name": "lpdwOrderNumber", + "type": "LPDWORD" + } + ], + "SetNtmsRequestOrder": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwOrderNumber", + "type": "DWORD" + } + ], + "DeleteNtmsRequests": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwCount", + "type": "DWORD" + } + ], + "ReserveNtmsCleanerSlot": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibrary", + "type": "LPNTMS_GUID" + }, + { + "name": "lpSlot", + "type": "LPNTMS_GUID" + } + ], + "ReleaseNtmsCleanerSlot": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibrary", + "type": "LPNTMS_GUID" + } + ], + "InjectNtmsCleaner": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibrary", + "type": "LPNTMS_GUID" + }, + { + "name": "lpInjectOperation", + "type": "LPNTMS_GUID" + }, + { + "name": "dwNumberOfCleansLeft", + "type": "DWORD" + }, + { + "name": "dwAction", + "type": "DWORD" + } + ], + "EjectNtmsCleaner": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpLibrary", + "type": "LPNTMS_GUID" + }, + { + "name": "lpEjectOperation", + "type": "LPNTMS_GUID" + }, + { + "name": "dwAction", + "type": "DWORD" + } + ], + "BeginNtmsDeviceChangeDetection": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpDetectHandle", + "type": "LPHANDLE" + } + ], + "SetNtmsDeviceChangeDetection": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "DetectHandle", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwCount", + "type": "DWORD" + } + ], + "EndNtmsDeviceChangeDetection": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "DetectHandle", + "type": "HANDLE" + } + ], + "GetNtmsObjectSecurity": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "lpSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "SetNtmsObjectSecurity": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "lpSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetNtmsObjectAttributeA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpAttributeName", + "type": "LPCSTR" + }, + { + "name": "lpAttributeData", + "type": "LPVOID" + }, + { + "name": "lpAttributeSize", + "type": "LPDWORD" + } + ], + "GetNtmsObjectAttributeW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpAttributeName", + "type": "LPCWSTR" + }, + { + "name": "lpAttributeData", + "type": "LPVOID" + }, + { + "name": "lpAttributeSize", + "type": "LPDWORD" + } + ], + "SetNtmsObjectAttributeA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpAttributeName", + "type": "LPCSTR" + }, + { + "name": "lpAttributeData", + "type": "LPVOID" + }, + { + "name": "dwAttributeSize", + "type": "DWORD" + } + ], + "SetNtmsObjectAttributeW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpAttributeName", + "type": "LPCWSTR" + }, + { + "name": "lpAttributeData", + "type": "LPVOID" + }, + { + "name": "AttributeSize", + "type": "DWORD" + } + ], + "GetNtmsUIOptionsA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpszDestination", + "type": "LPSTR" + }, + { + "name": "lpdwBufSize", + "type": "LPDWORD" + } + ], + "GetNtmsUIOptionsW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpszDestination", + "type": "LPWSTR" + }, + { + "name": "lpdwBufSize", + "type": "LPDWORD" + } + ], + "SetNtmsUIOptionsA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "lpszDestination", + "type": "LPCSTR" + } + ], + "SetNtmsUIOptionsW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpObjectId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "lpszDestination", + "type": "LPCWSTR" + } + ], + "SubmitNtmsOperatorRequestW": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "dwRequest", + "type": "DWORD" + }, + { + "name": "lpMessage", + "type": "LPCWSTR" + }, + { + "name": "lpArg1Id", + "type": "LPNTMS_GUID" + }, + { + "name": "lpArg2Id", + "type": "LPNTMS_GUID" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + } + ], + "SubmitNtmsOperatorRequestA": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "dwRequest", + "type": "DWORD" + }, + { + "name": "lpMessage", + "type": "LPCSTR" + }, + { + "name": "lpArg1Id", + "type": "LPNTMS_GUID" + }, + { + "name": "lpArg2Id", + "type": "LPNTMS_GUID" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + } + ], + "WaitForNtmsOperatorRequest": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + }, + { + "name": "dwTimeout", + "type": "DWORD" + } + ], + "CancelNtmsOperatorRequest": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + } + ], + "SatisfyNtmsOperatorRequest": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "lpRequestId", + "type": "LPNTMS_GUID" + } + ], + "ImportNtmsDatabase": [ + { + "name": "hSession", + "type": "HANDLE" + } + ], + "ExportNtmsDatabase": [ + { + "name": "hSession", + "type": "HANDLE" + } + ], + "OpenNtmsNotification": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "WaitForNtmsNotification": [ + { + "name": "hNotification", + "type": "HANDLE" + }, + { + "name": "lpNotificationInformation", + "type": "LPNTMS_NOTIFICATIONINFORMATION" + }, + { + "name": "dwTimeout", + "type": "DWORD" + } + ], + "CloseNtmsNotification": [ + { + "name": "hNotification", + "type": "HANDLE" + } + ], + "EjectDiskFromSADriveW": [ + { + "name": "lpComputerName", + "type": "LPCWSTR" + }, + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpDeviceName", + "type": "LPCWSTR" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpTitle", + "type": "LPCWSTR" + }, + { + "name": "lpMessage", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "EjectDiskFromSADriveA": [ + { + "name": "lpComputerName", + "type": "LPCSTR" + }, + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpDeviceName", + "type": "LPCSTR" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpTitle", + "type": "LPCSTR" + }, + { + "name": "lpMessage", + "type": "LPCSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "GetVolumesFromDriveW": [ + { + "name": "pszDriveName", + "type": "LPWSTR" + }, + { + "name": "VolumeNameBufferPtr", + "type": "LPWSTR" + }, + { + "name": "DriveLetterBufferPtr", + "type": "LPWSTR" + } + ], + "GetVolumesFromDriveA": [ + { + "name": "pszDriveName", + "type": "LPSTR" + }, + { + "name": "VolumeNameBufferPtr", + "type": "LPSTR" + }, + { + "name": "DriveLetterBufferPtr", + "type": "LPSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ntquery.json b/qiling/extensions/windows_sdk/ntquery.json new file mode 100644 index 000000000..65cdba3f8 --- /dev/null +++ b/qiling/extensions/windows_sdk/ntquery.json @@ -0,0 +1,62 @@ +{ + "LoadIFilter": [ + { + "name": "pwcsPath", + "type": "PCWSTR" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "ppIUnk", + "type": "void" + } + ], + "BindIFilterFromStorage": [ + { + "name": "pStg", + "type": "IStorage" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "ppIUnk", + "type": "void" + } + ], + "BindIFilterFromStream": [ + { + "name": "pStm", + "type": "IStream" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "ppIUnk", + "type": "void" + } + ], + "SetCatalogState": [ + { + "name": "pwcsCat", + "type": "WCHAR" + }, + { + "name": "pwcsMachine", + "type": "WCHAR" + }, + { + "name": "dwNewState", + "type": "DWORD" + }, + { + "name": "pdwOldState", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ntsecapi.json b/qiling/extensions/windows_sdk/ntsecapi.json new file mode 100644 index 000000000..739dfa299 --- /dev/null +++ b/qiling/extensions/windows_sdk/ntsecapi.json @@ -0,0 +1,922 @@ +{ + "LsaRegisterLogonProcess": [ + { + "name": "LogonProcessName", + "type": "PLSA_STRING" + }, + { + "name": "LsaHandle", + "type": "PHANDLE" + }, + { + "name": "SecurityMode", + "type": "PLSA_OPERATIONAL_MODE" + } + ], + "LsaLogonUser": [ + { + "name": "LsaHandle", + "type": "HANDLE" + }, + { + "name": "OriginName", + "type": "PLSA_STRING" + }, + { + "name": "LogonType", + "type": "SECURITY_LOGON_TYPE" + }, + { + "name": "AuthenticationPackage", + "type": "ULONG" + }, + { + "name": "AuthenticationInformation", + "type": "PVOID" + }, + { + "name": "AuthenticationInformationLength", + "type": "ULONG" + }, + { + "name": "LocalGroups", + "type": "PTOKEN_GROUPS" + }, + { + "name": "SourceContext", + "type": "PTOKEN_SOURCE" + }, + { + "name": "ProfileBuffer", + "type": "PVOID" + }, + { + "name": "ProfileBufferLength", + "type": "PULONG" + }, + { + "name": "LogonId", + "type": "PLUID" + }, + { + "name": "Token", + "type": "PHANDLE" + }, + { + "name": "Quotas", + "type": "PQUOTA_LIMITS" + }, + { + "name": "SubStatus", + "type": "PNTSTATUS" + } + ], + "LsaLookupAuthenticationPackage": [ + { + "name": "LsaHandle", + "type": "HANDLE" + }, + { + "name": "PackageName", + "type": "PLSA_STRING" + }, + { + "name": "AuthenticationPackage", + "type": "PULONG" + } + ], + "LsaFreeReturnBuffer": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaCallAuthenticationPackage": [ + { + "name": "LsaHandle", + "type": "HANDLE" + }, + { + "name": "AuthenticationPackage", + "type": "ULONG" + }, + { + "name": "ProtocolSubmitBuffer", + "type": "PVOID" + }, + { + "name": "SubmitBufferLength", + "type": "ULONG" + }, + { + "name": "ProtocolReturnBuffer", + "type": "PVOID" + }, + { + "name": "ReturnBufferLength", + "type": "PULONG" + }, + { + "name": "ProtocolStatus", + "type": "PNTSTATUS" + } + ], + "LsaDeregisterLogonProcess": [ + { + "name": "LsaHandle", + "type": "HANDLE" + } + ], + "LsaConnectUntrusted": [ + { + "name": "LsaHandle", + "type": "PHANDLE" + } + ], + "LsaFreeMemory": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaClose": [ + { + "name": "ObjectHandle", + "type": "LSA_HANDLE" + } + ], + "LsaEnumerateLogonSessions": [ + { + "name": "LogonSessionCount", + "type": "PULONG" + }, + { + "name": "LogonSessionList", + "type": "PLUID" + } + ], + "LsaGetLogonSessionData": [ + { + "name": "LogonId", + "type": "PLUID" + }, + { + "name": "ppLogonSessionData", + "type": "PSECURITY_LOGON_SESSION_DATA" + } + ], + "LsaOpenPolicy": [ + { + "name": "SystemName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ObjectAttributes", + "type": "PLSA_OBJECT_ATTRIBUTES" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "PolicyHandle", + "type": "PLSA_HANDLE" + } + ], + "LsaQueryInformationPolicy": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "InformationClass", + "type": "POLICY_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaSetInformationPolicy": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "InformationClass", + "type": "POLICY_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaQueryDomainInformationPolicy": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "InformationClass", + "type": "POLICY_DOMAIN_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaSetDomainInformationPolicy": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "InformationClass", + "type": "POLICY_DOMAIN_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaRegisterPolicyChangeNotification": [ + { + "name": "InformationClass", + "type": "POLICY_NOTIFICATION_INFORMATION_CLASS" + }, + { + "name": "NotificationEventHandle", + "type": "HANDLE" + } + ], + "LsaUnregisterPolicyChangeNotification": [ + { + "name": "InformationClass", + "type": "POLICY_NOTIFICATION_INFORMATION_CLASS" + }, + { + "name": "NotificationEventHandle", + "type": "HANDLE" + } + ], + "LsaEnumerateTrustedDomains": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "EnumerationContext", + "type": "PLSA_ENUMERATION_HANDLE" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "PreferedMaximumLength", + "type": "ULONG" + }, + { + "name": "CountReturned", + "type": "PULONG" + } + ], + "LsaLookupNames": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "Names", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ReferencedDomains", + "type": "PLSA_REFERENCED_DOMAIN_LIST" + }, + { + "name": "Sids", + "type": "PLSA_TRANSLATED_SID" + } + ], + "LsaLookupNames2": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "Names", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ReferencedDomains", + "type": "PLSA_REFERENCED_DOMAIN_LIST" + }, + { + "name": "Sids", + "type": "PLSA_TRANSLATED_SID2" + } + ], + "LsaLookupSids": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "Sids", + "type": "PSID" + }, + { + "name": "ReferencedDomains", + "type": "PLSA_REFERENCED_DOMAIN_LIST" + }, + { + "name": "Names", + "type": "PLSA_TRANSLATED_NAME" + } + ], + "LsaLookupSids2": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "LookupOptions", + "type": "ULONG" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "Sids", + "type": "PSID" + }, + { + "name": "ReferencedDomains", + "type": "PLSA_REFERENCED_DOMAIN_LIST" + }, + { + "name": "Names", + "type": "PLSA_TRANSLATED_NAME" + } + ], + "LsaEnumerateAccountsWithUserRight": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "UserRight", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "CountReturned", + "type": "PULONG" + } + ], + "LsaEnumerateAccountRights": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "AccountSid", + "type": "PSID" + }, + { + "name": "UserRights", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "CountOfRights", + "type": "PULONG" + } + ], + "LsaAddAccountRights": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "AccountSid", + "type": "PSID" + }, + { + "name": "UserRights", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "CountOfRights", + "type": "ULONG" + } + ], + "LsaRemoveAccountRights": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "AccountSid", + "type": "PSID" + }, + { + "name": "AllRights", + "type": "BOOLEAN" + }, + { + "name": "UserRights", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "CountOfRights", + "type": "ULONG" + } + ], + "LsaOpenTrustedDomainByName": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "TrustedDomainHandle", + "type": "PLSA_HANDLE" + } + ], + "LsaQueryTrustedDomainInfo": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainSid", + "type": "PSID" + }, + { + "name": "InformationClass", + "type": "TRUSTED_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaSetTrustedDomainInformation": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainSid", + "type": "PSID" + }, + { + "name": "InformationClass", + "type": "TRUSTED_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaDeleteTrustedDomain": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainSid", + "type": "PSID" + } + ], + "LsaQueryTrustedDomainInfoByName": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "InformationClass", + "type": "TRUSTED_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaSetTrustedDomainInfoByName": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "InformationClass", + "type": "TRUSTED_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaEnumerateTrustedDomainsEx": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "EnumerationContext", + "type": "PLSA_ENUMERATION_HANDLE" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "PreferedMaximumLength", + "type": "ULONG" + }, + { + "name": "CountReturned", + "type": "PULONG" + } + ], + "LsaCreateTrustedDomainEx": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainInformation", + "type": "PTRUSTED_DOMAIN_INFORMATION_EX" + }, + { + "name": "AuthenticationInformation", + "type": "PTRUSTED_DOMAIN_AUTH_INFORMATION" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "TrustedDomainHandle", + "type": "PLSA_HANDLE" + } + ], + "LsaQueryForestTrustInformation": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ForestTrustInfo", + "type": "PLSA_FOREST_TRUST_INFORMATION" + } + ], + "LsaSetForestTrustInformation": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ForestTrustInfo", + "type": "PLSA_FOREST_TRUST_INFORMATION" + }, + { + "name": "CheckOnly", + "type": "BOOLEAN" + }, + { + "name": "CollisionInfo", + "type": "PLSA_FOREST_TRUST_COLLISION_INFORMATION" + } + ], + "LsaStorePrivateData": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "KeyName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "PrivateData", + "type": "PLSA_UNICODE_STRING" + } + ], + "LsaRetrievePrivateData": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "KeyName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "PrivateData", + "type": "PLSA_UNICODE_STRING" + } + ], + "LsaNtStatusToWinError": [ + { + "name": "Status", + "type": "NTSTATUS" + } + ], + "AuditSetSystemPolicy": [ + { + "name": "pAuditPolicy", + "type": "PCAUDIT_POLICY_INFORMATION" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + } + ], + "AuditSetPerUserPolicy": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pAuditPolicy", + "type": "PCAUDIT_POLICY_INFORMATION" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + } + ], + "AuditQuerySystemPolicy": [ + { + "name": "pSubCategoryGuids", + "type": "GUID" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + }, + { + "name": "ppAuditPolicy", + "type": "PAUDIT_POLICY_INFORMATION" + } + ], + "AuditQueryPerUserPolicy": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pSubCategoryGuids", + "type": "GUID" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + }, + { + "name": "ppAuditPolicy", + "type": "PAUDIT_POLICY_INFORMATION" + } + ], + "AuditEnumeratePerUserPolicy": [ + { + "name": "ppAuditSidArray", + "type": "PPOLICY_AUDIT_SID_ARRAY" + } + ], + "AuditComputeEffectivePolicyBySid": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pSubCategoryGuids", + "type": "GUID" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + }, + { + "name": "ppAuditPolicy", + "type": "PAUDIT_POLICY_INFORMATION" + } + ], + "AuditComputeEffectivePolicyByToken": [ + { + "name": "hTokenHandle", + "type": "HANDLE" + }, + { + "name": "pSubCategoryGuids", + "type": "GUID" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + }, + { + "name": "ppAuditPolicy", + "type": "PAUDIT_POLICY_INFORMATION" + } + ], + "AuditEnumerateCategories": [ + { + "name": "ppAuditCategoriesArray", + "type": "GUID" + }, + { + "name": "pdwCountReturned", + "type": "PULONG" + } + ], + "AuditEnumerateSubCategories": [ + { + "name": "pAuditCategoryGuid", + "type": "GUID" + }, + { + "name": "bRetrieveAllSubCategories", + "type": "BOOLEAN" + }, + { + "name": "ppAuditSubCategoriesArray", + "type": "GUID" + }, + { + "name": "pdwCountReturned", + "type": "PULONG" + } + ], + "AuditLookupCategoryNameW": [ + { + "name": "pAuditCategoryGuid", + "type": "GUID" + }, + { + "name": "ppszCategoryName", + "type": "PWSTR" + } + ], + "AuditLookupCategoryNameA": [ + { + "name": "pAuditCategoryGuid", + "type": "GUID" + }, + { + "name": "ppszCategoryName", + "type": "PSTR" + } + ], + "AuditLookupSubCategoryNameW": [ + { + "name": "pAuditSubCategoryGuid", + "type": "GUID" + }, + { + "name": "ppszSubCategoryName", + "type": "PWSTR" + } + ], + "AuditLookupSubCategoryNameA": [ + { + "name": "pAuditSubCategoryGuid", + "type": "GUID" + }, + { + "name": "ppszSubCategoryName", + "type": "PSTR" + } + ], + "AuditLookupCategoryIdFromCategoryGuid": [ + { + "name": "pAuditCategoryGuid", + "type": "GUID" + }, + { + "name": "pAuditCategoryId", + "type": "PPOLICY_AUDIT_EVENT_TYPE" + } + ], + "AuditLookupCategoryGuidFromCategoryId": [ + { + "name": "AuditCategoryId", + "type": "POLICY_AUDIT_EVENT_TYPE" + }, + { + "name": "pAuditCategoryGuid", + "type": "GUID" + } + ], + "AuditSetSecurity": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "AuditQuerySecurity": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ppSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "AuditSetGlobalSaclW": [ + { + "name": "ObjectTypeName", + "type": "PCWSTR" + }, + { + "name": "Acl", + "type": "PACL" + } + ], + "AuditSetGlobalSaclA": [ + { + "name": "ObjectTypeName", + "type": "PCSTR" + }, + { + "name": "Acl", + "type": "PACL" + } + ], + "AuditQueryGlobalSaclW": [ + { + "name": "ObjectTypeName", + "type": "PCWSTR" + }, + { + "name": "Acl", + "type": "PACL" + } + ], + "AuditQueryGlobalSaclA": [ + { + "name": "ObjectTypeName", + "type": "PCSTR" + }, + { + "name": "Acl", + "type": "PACL" + } + ], + "AuditFree": [ + { + "name": "Buffer", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/oaidl.json b/qiling/extensions/windows_sdk/oaidl.json new file mode 100644 index 000000000..bcb41e7da --- /dev/null +++ b/qiling/extensions/windows_sdk/oaidl.json @@ -0,0 +1,98 @@ +{ + "BSTR_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "BSTR" + } + ], + "BSTR_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "BSTR" + } + ], + "VARIANT_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "VARIANT" + } + ], + "VARIANT_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "VARIANT" + } + ], + "BSTR_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "BSTR" + } + ], + "BSTR_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "BSTR" + } + ], + "VARIANT_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "VARIANT" + } + ], + "VARIANT_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "VARIANT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/objbase.json b/qiling/extensions/windows_sdk/objbase.json new file mode 100644 index 000000000..faa6d1683 --- /dev/null +++ b/qiling/extensions/windows_sdk/objbase.json @@ -0,0 +1,518 @@ +{ + "CoFileTimeNow": [ + { + "name": "lpFileTime", + "type": "FILETIME" + } + ], + "CLSIDFromProgIDEx": [ + { + "name": "lpszProgID", + "type": "LPCOLESTR" + }, + { + "name": "lpclsid", + "type": "LPCLSID" + } + ], + "CoInitialize": [ + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CoRegisterMallocSpy": [ + { + "name": "pMallocSpy", + "type": "LPMALLOCSPY" + } + ], + "CoRevokeMallocSpy": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoRegisterInitializeSpy": [ + { + "name": "pSpy", + "type": "IInitializeSpy" + }, + { + "name": "puliCookie", + "type": "ULARGE_INTEGER" + } + ], + "CoRevokeInitializeSpy": [ + { + "name": "uliCookie", + "type": "ULARGE_INTEGER" + } + ], + "CoGetSystemSecurityPermissions": [ + { + "name": "comSDType", + "type": "COMSD" + }, + { + "name": "ppSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "CoLoadLibrary": [ + { + "name": "lpszLibName", + "type": "LPOLESTR" + }, + { + "name": "bAutoFree", + "type": "BOOL" + } + ], + "CoFreeLibrary": [ + { + "name": "hInst", + "type": "HINSTANCE" + } + ], + "CoFreeAllLibraries": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoGetInstanceFromFile": [ + { + "name": "pServerInfo", + "type": "COSERVERINFO" + }, + { + "name": "pClsid", + "type": "CLSID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "pwszName", + "type": "OLECHAR" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoGetInstanceFromIStorage": [ + { + "name": "pServerInfo", + "type": "COSERVERINFO" + }, + { + "name": "pClsid", + "type": "CLSID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "pstg", + "type": { + "name": "IStorage", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoAllowSetForegroundWindow": [ + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "lpvReserved", + "type": "LPVOID" + } + ], + "CoIsOle1Class": [ + { + "name": "rclsid", + "type": "IID" + } + ], + "CoFileTimeToDosDateTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpDosDate", + "type": "LPWORD" + }, + { + "name": "lpDosTime", + "type": "LPWORD" + } + ], + "CoDosDateTimeToFileTime": [ + { + "name": "nDosDate", + "type": "WORD" + }, + { + "name": "nDosTime", + "type": "WORD" + }, + { + "name": "lpFileTime", + "type": "FILETIME" + } + ], + "CoRegisterMessageFilter": [ + { + "name": "lpMessageFilter", + "type": "LPMESSAGEFILTER" + }, + { + "name": "lplpMessageFilter", + "type": "LPMESSAGEFILTER" + } + ], + "CoRegisterChannelHook": [ + { + "name": "ExtensionUuid", + "type": "GUID" + }, + { + "name": "pChannelHook", + "type": "IChannelHook" + } + ], + "CoTreatAsClass": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "clsidNew", + "type": "IID" + } + ], + "CreateDataAdviseHolder": [ + { + "name": "ppDAHolder", + "type": "LPDATAADVISEHOLDER" + } + ], + "CreateDataCache": [ + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "StgOpenAsyncDocfileOnIFillLockBytes": [ + { + "name": "pflb", + "type": "IFillLockBytes" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "asyncFlags", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgGetIFillLockBytesOnILockBytes": [ + { + "name": "pilb", + "type": "ILockBytes" + }, + { + "name": "ppflb", + "type": "IFillLockBytes" + } + ], + "StgGetIFillLockBytesOnFile": [ + { + "name": "pwcsName", + "type": "OLECHAR" + }, + { + "name": "ppflb", + "type": "IFillLockBytes" + } + ], + "StgOpenLayoutDocfile": [ + { + "name": "pwcsDfName", + "type": "OLECHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "CoInstall": [ + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pClassSpec", + "type": "uCLSSPEC" + }, + { + "name": "pQuery", + "type": "QUERYCONTEXT" + }, + { + "name": "pszCodeBase", + "type": "LPWSTR" + } + ], + "BindMoniker": [ + { + "name": "pmk", + "type": "LPMONIKER" + }, + { + "name": "grfOpt", + "type": "DWORD" + }, + { + "name": "iidResult", + "type": "IID" + }, + { + "name": "ppvResult", + "type": "LPVOID" + } + ], + "CoGetObject": [ + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "pBindOptions", + "type": "BIND_OPTS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "MkParseDisplayName": [ + { + "name": "pbc", + "type": "LPBC" + }, + { + "name": "szUserName", + "type": "LPCOLESTR" + }, + { + "name": "pchEaten", + "type": "ULONG" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "MonikerRelativePathTo": [ + { + "name": "pmkSrc", + "type": "LPMONIKER" + }, + { + "name": "pmkDest", + "type": "LPMONIKER" + }, + { + "name": "ppmkRelPath", + "type": "LPMONIKER" + }, + { + "name": "dwReserved", + "type": "BOOL" + } + ], + "MonikerCommonPrefixWith": [ + { + "name": "pmkThis", + "type": "LPMONIKER" + }, + { + "name": "pmkOther", + "type": "LPMONIKER" + }, + { + "name": "ppmkCommon", + "type": "LPMONIKER" + } + ], + "CreateBindCtx": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppbc", + "type": "LPBC" + } + ], + "CreateGenericComposite": [ + { + "name": "pmkFirst", + "type": "LPMONIKER" + }, + { + "name": "pmkRest", + "type": "LPMONIKER" + }, + { + "name": "ppmkComposite", + "type": "LPMONIKER" + } + ], + "GetClassFile": [ + { + "name": "szFilename", + "type": "LPCOLESTR" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "CreateClassMoniker": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateFileMoniker": [ + { + "name": "lpszPathName", + "type": "LPCOLESTR" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateItemMoniker": [ + { + "name": "lpszDelim", + "type": "LPCOLESTR" + }, + { + "name": "lpszItem", + "type": "LPCOLESTR" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateAntiMoniker": [ + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreatePointerMoniker": [ + { + "name": "punk", + "type": "LPUNKNOWN" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateObjrefMoniker": [ + { + "name": "punk", + "type": "LPUNKNOWN" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "GetRunningObjectTable": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "pprot", + "type": "LPRUNNINGOBJECTTABLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ole.json b/qiling/extensions/windows_sdk/ole.json new file mode 100644 index 000000000..2e33aa31c --- /dev/null +++ b/qiling/extensions/windows_sdk/ole.json @@ -0,0 +1,132 @@ +{ + "OleCreate": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLECLIENT" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LHCLIENTDOC" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLEOBJECT" + }, + { + "name": "VOID", + "type": "OLEOPT_RENDER" + }, + { + "name": "VOID", + "type": "OLECLIPFORMAT" + } + ], + "OleCreateFromFile": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLECLIENT" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LHCLIENTDOC" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLEOBJECT" + }, + { + "name": "VOID", + "type": "OLEOPT_RENDER" + }, + { + "name": "VOID", + "type": "OLECLIPFORMAT" + } + ], + "OleLoadFromStream": [ + { + "name": "VOID", + "type": "LPOLESTREAM" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLECLIENT" + }, + { + "name": "VOID", + "type": "LHCLIENTDOC" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLEOBJECT" + } + ], + "OleSaveToStream": [ + { + "name": "VOID", + "type": "LPOLEOBJECT" + }, + { + "name": "VOID", + "type": "LPOLESTREAM" + } + ], + "OleDraw": [ + { + "name": "VOID", + "type": "LPOLEOBJECT" + }, + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "RECT" + }, + { + "name": "VOID", + "type": "RECT" + }, + { + "name": "VOID", + "type": "HDC" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ole2.json b/qiling/extensions/windows_sdk/ole2.json new file mode 100644 index 000000000..7814d140e --- /dev/null +++ b/qiling/extensions/windows_sdk/ole2.json @@ -0,0 +1,1142 @@ +{ + "CreateDataAdviseHolder": [ + { + "name": "ppDAHolder", + "type": "LPDATAADVISEHOLDER" + } + ], + "OleBuildVersion": [ + { + "name": "VOID", + "type": "void" + } + ], + "WriteFmtUserTypeStg": [ + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "cf", + "type": "CLIPFORMAT" + }, + { + "name": "lpszUserType", + "type": "LPOLESTR" + } + ], + "ReadFmtUserTypeStg": [ + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "pcf", + "type": "CLIPFORMAT" + }, + { + "name": "lplpszUserType", + "type": "LPOLESTR" + } + ], + "OleInitialize": [ + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "OleUninitialize": [ + { + "name": "VOID", + "type": "void" + } + ], + "OleQueryLinkFromData": [ + { + "name": "pSrcDataObject", + "type": "LPDATAOBJECT" + } + ], + "OleQueryCreateFromData": [ + { + "name": "pSrcDataObject", + "type": "LPDATAOBJECT" + } + ], + "OleCreate": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "pFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateEx": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateFromData": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "pFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateFromDataEx": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkFromData": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "pFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkFromDataEx": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateStaticFromData": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "pFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLink": [ + { + "name": "pmkLinkSrc", + "type": "LPMONIKER" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "lpFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkEx": [ + { + "name": "pmkLinkSrc", + "type": "LPMONIKER" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkToFile": [ + { + "name": "lpszFileName", + "type": "LPCOLESTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "lpFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkToFileEx": [ + { + "name": "lpszFileName", + "type": "LPCOLESTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateFromFile": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lpszFileName", + "type": "LPCOLESTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "lpFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateFromFileEx": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lpszFileName", + "type": "LPCOLESTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleLoad": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleSave": [ + { + "name": "pPS", + "type": "LPPERSISTSTORAGE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "fSameAsLoad", + "type": "BOOL" + } + ], + "OleLoadFromStream": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "iidInterface", + "type": "IID" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleSaveToStream": [ + { + "name": "pPStm", + "type": "LPPERSISTSTREAM" + }, + { + "name": "pStm", + "type": "LPSTREAM" + } + ], + "OleSetContainedObject": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + }, + { + "name": "fContained", + "type": "BOOL" + } + ], + "OleNoteObjectVisible": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + }, + { + "name": "fVisible", + "type": "BOOL" + } + ], + "RegisterDragDrop": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pDropTarget", + "type": "LPDROPTARGET" + } + ], + "RevokeDragDrop": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DoDragDrop": [ + { + "name": "pDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "pDropSource", + "type": "LPDROPSOURCE" + }, + { + "name": "dwOKEffects", + "type": "DWORD" + }, + { + "name": "pdwEffect", + "type": "LPDWORD" + } + ], + "OleSetClipboard": [ + { + "name": "pDataObj", + "type": "LPDATAOBJECT" + } + ], + "OleGetClipboard": [ + { + "name": "ppDataObj", + "type": "LPDATAOBJECT" + } + ], + "OleGetClipboardWithEnterpriseInfo": [ + { + "name": "dataObject", + "type": "IDataObject" + }, + { + "name": "dataEnterpriseId", + "type": "PWSTR" + }, + { + "name": "sourceDescription", + "type": "PWSTR" + }, + { + "name": "targetDescription", + "type": "PWSTR" + }, + { + "name": "dataDescription", + "type": "PWSTR" + } + ], + "OleFlushClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "OleIsCurrentClipboard": [ + { + "name": "pDataObj", + "type": "LPDATAOBJECT" + } + ], + "OleCreateMenuDescriptor": [ + { + "name": "hmenuCombined", + "type": "HMENU" + }, + { + "name": "lpMenuWidths", + "type": "LPOLEMENUGROUPWIDTHS" + } + ], + "OleSetMenuDescriptor": [ + { + "name": "holemenu", + "type": "HOLEMENU" + }, + { + "name": "hwndFrame", + "type": "HWND" + }, + { + "name": "hwndActiveObject", + "type": "HWND" + }, + { + "name": "lpFrame", + "type": "LPOLEINPLACEFRAME" + }, + { + "name": "lpActiveObj", + "type": "LPOLEINPLACEACTIVEOBJECT" + } + ], + "OleDestroyMenuDescriptor": [ + { + "name": "holemenu", + "type": "HOLEMENU" + } + ], + "OleTranslateAccelerator": [ + { + "name": "lpFrame", + "type": "LPOLEINPLACEFRAME" + }, + { + "name": "lpFrameInfo", + "type": "LPOLEINPLACEFRAMEINFO" + }, + { + "name": "lpmsg", + "type": "LPMSG" + } + ], + "OleDuplicateData": [ + { + "name": "hSrc", + "type": "HANDLE" + }, + { + "name": "cfFormat", + "type": "CLIPFORMAT" + }, + { + "name": "uiFlags", + "type": "UINT" + } + ], + "OleDraw": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + }, + { + "name": "dwAspect", + "type": "DWORD" + }, + { + "name": "hdcDraw", + "type": "HDC" + }, + { + "name": "lprcBounds", + "type": "LPCRECT" + } + ], + "OleRun": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + } + ], + "OleIsRunning": [ + { + "name": "pObject", + "type": "LPOLEOBJECT" + } + ], + "OleLockRunning": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + }, + { + "name": "fLock", + "type": "BOOL" + }, + { + "name": "fLastUnlockCloses", + "type": "BOOL" + } + ], + "ReleaseStgMedium": [ + { + "name": "VOID", + "type": "LPSTGMEDIUM" + } + ], + "CreateOleAdviseHolder": [ + { + "name": "ppOAHolder", + "type": "LPOLEADVISEHOLDER" + } + ], + "OleCreateDefaultHandler": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "lplpObj", + "type": "LPVOID" + } + ], + "OleCreateEmbeddingHelper": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "pCF", + "type": "LPCLASSFACTORY" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "lplpObj", + "type": "LPVOID" + } + ], + "IsAccelerator": [ + { + "name": "hAccel", + "type": "HACCEL" + }, + { + "name": "cAccelEntries", + "type": "int" + }, + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "lpwCmd", + "type": "WORD" + } + ], + "OleGetIconOfFile": [ + { + "name": "lpszPath", + "type": "LPOLESTR" + }, + { + "name": "fUseFileAsLabel", + "type": "BOOL" + } + ], + "OleGetIconOfClass": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lpszLabel", + "type": "LPOLESTR" + }, + { + "name": "fUseTypeAsLabel", + "type": "BOOL" + } + ], + "OleMetafilePictFromIconAndLabel": [ + { + "name": "hIcon", + "type": "HICON" + }, + { + "name": "lpszLabel", + "type": "LPOLESTR" + }, + { + "name": "lpszSourceFile", + "type": "LPOLESTR" + }, + { + "name": "iIconIndex", + "type": "UINT" + } + ], + "OleRegGetUserType": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "dwFormOfType", + "type": "DWORD" + }, + { + "name": "pszUserType", + "type": "LPOLESTR" + } + ], + "OleRegGetMiscStatus": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "dwAspect", + "type": "DWORD" + }, + { + "name": "pdwStatus", + "type": "DWORD" + } + ], + "OleRegEnumFormatEtc": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "dwDirection", + "type": "DWORD" + }, + { + "name": "ppenum", + "type": "LPENUMFORMATETC" + } + ], + "OleRegEnumVerbs": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "ppenum", + "type": "LPENUMOLEVERB" + } + ], + "OleConvertOLESTREAMToIStorage": [ + { + "name": "lpolestream", + "type": "LPOLESTREAM" + }, + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "ptd", + "type": "DVTARGETDEVICE" + } + ], + "OleConvertIStorageToOLESTREAM": [ + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "lpolestream", + "type": "LPOLESTREAM" + } + ], + "OleDoAutoConvert": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "pClsidNew", + "type": "LPCLSID" + } + ], + "OleGetAutoConvert": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "pClsidNew", + "type": "LPCLSID" + } + ], + "OleSetAutoConvert": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "clsidNew", + "type": "IID" + } + ], + "SetConvertStg": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "fConvert", + "type": "BOOL" + } + ], + "OleConvertIStorageToOLESTREAMEx": [ + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "cfFormat", + "type": "CLIPFORMAT" + }, + { + "name": "lWidth", + "type": "LONG" + }, + { + "name": "lHeight", + "type": "LONG" + }, + { + "name": "dwSize", + "type": "DWORD" + }, + { + "name": "pmedium", + "type": "LPSTGMEDIUM" + }, + { + "name": "polestm", + "type": "LPOLESTREAM" + } + ], + "OleConvertOLESTREAMToIStorageEx": [ + { + "name": "polestm", + "type": "LPOLESTREAM" + }, + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "pcfFormat", + "type": "CLIPFORMAT" + }, + { + "name": "plwWidth", + "type": "LONG" + }, + { + "name": "plHeight", + "type": "LONG" + }, + { + "name": "pdwSize", + "type": "DWORD" + }, + { + "name": "pmedium", + "type": "LPSTGMEDIUM" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/oleacc.json b/qiling/extensions/windows_sdk/oleacc.json new file mode 100644 index 000000000..7478ce7a1 --- /dev/null +++ b/qiling/extensions/windows_sdk/oleacc.json @@ -0,0 +1,276 @@ +{ + "LresultFromObject": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "punk", + "type": "LPUNKNOWN" + } + ], + "ObjectFromLresult": [ + { + "name": "lResult", + "type": "LRESULT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "WindowFromAccessibleObject": [ + { + "name": "VOID", + "type": "IAccessible" + }, + { + "name": "phwnd", + "type": "HWND" + } + ], + "AccessibleObjectFromWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwId", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "AccessibleObjectFromEvent": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwId", + "type": "DWORD" + }, + { + "name": "dwChildId", + "type": "DWORD" + }, + { + "name": "ppacc", + "type": "IAccessible" + }, + { + "name": "pvarChild", + "type": "VARIANT" + } + ], + "AccessibleObjectFromPoint": [ + { + "name": "ptScreen", + "type": "POINT" + }, + { + "name": "ppacc", + "type": "IAccessible" + }, + { + "name": "pvarChild", + "type": "VARIANT" + } + ], + "AccessibleChildren": [ + { + "name": "paccContainer", + "type": "IAccessible" + }, + { + "name": "iChildStart", + "type": "LONG" + }, + { + "name": "cChildren", + "type": "LONG" + }, + { + "name": "rgvarChildren", + "type": "VARIANT" + }, + { + "name": "pcObtained", + "type": "LONG" + } + ], + "GetRoleTextA": [ + { + "name": "lRole", + "type": "DWORD" + }, + { + "name": "lpszRole", + "type": "LPSTR" + }, + { + "name": "cchRoleMax", + "type": "UINT" + } + ], + "GetRoleTextW": [ + { + "name": "lRole", + "type": "DWORD" + }, + { + "name": "lpszRole", + "type": "LPWSTR" + }, + { + "name": "cchRoleMax", + "type": "UINT" + } + ], + "GetStateTextA": [ + { + "name": "lStateBit", + "type": "DWORD" + }, + { + "name": "lpszState", + "type": "LPSTR" + }, + { + "name": "cchState", + "type": "UINT" + } + ], + "GetStateTextW": [ + { + "name": "lStateBit", + "type": "DWORD" + }, + { + "name": "lpszState", + "type": "LPWSTR" + }, + { + "name": "cchState", + "type": "UINT" + } + ], + "GetOleaccVersionInfo": [ + { + "name": "pVer", + "type": "DWORD" + }, + { + "name": "pBuild", + "type": "DWORD" + } + ], + "CreateStdAccessibleObject": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CreateStdAccessibleProxyA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pClassName", + "type": "LPCSTR" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CreateStdAccessibleProxyW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pClassName", + "type": "LPCWSTR" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "AccSetRunningUtilityState": [ + { + "name": "hwndApp", + "type": "HWND" + }, + { + "name": "dwUtilityStateMask", + "type": "DWORD" + }, + { + "name": "dwUtilityState", + "type": "DWORD" + } + ], + "AccNotifyTouchInteraction": [ + { + "name": "hwndApp", + "type": "HWND" + }, + { + "name": "hwndTarget", + "type": "HWND" + }, + { + "name": "ptTarget", + "type": "POINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/oleauto.json b/qiling/extensions/windows_sdk/oleauto.json new file mode 100644 index 000000000..741c75135 --- /dev/null +++ b/qiling/extensions/windows_sdk/oleauto.json @@ -0,0 +1,4392 @@ +{ + "SysAllocString": [ + { + "name": "psz", + "type": "OLECHAR" + } + ], + "SysReAllocString": [ + { + "name": "pbstr", + "type": "BSTR" + }, + { + "name": "psz", + "type": "OLECHAR" + } + ], + "SysAllocStringLen": [ + { + "name": "strIn", + "type": "OLECHAR" + }, + { + "name": "ui", + "type": "UINT" + } + ], + "SysReAllocStringLen": [ + { + "name": "pbstr", + "type": "BSTR" + }, + { + "name": "psz", + "type": "OLECHAR" + }, + { + "name": "len", + "type": "unsigned int" + } + ], + "SysAddRefString": [ + { + "name": "bstrString", + "type": "BSTR" + } + ], + "SysReleaseString": [ + { + "name": "bstrString", + "type": "BSTR" + } + ], + "SysFreeString": [ + { + "name": "bstrString", + "type": "BSTR" + } + ], + "SysStringLen": [ + { + "name": "pbstr", + "type": "BSTR" + } + ], + "SysStringByteLen": [ + { + "name": "bstr", + "type": "BSTR" + } + ], + "SysAllocStringByteLen": [ + { + "name": "psz", + "type": "LPCSTR" + }, + { + "name": "len", + "type": "UINT" + } + ], + "DosDateTimeToVariantTime": [ + { + "name": "wDosDate", + "type": "USHORT" + }, + { + "name": "wDosTime", + "type": "USHORT" + }, + { + "name": "pvtime", + "type": "DOUBLE" + } + ], + "VariantTimeToDosDateTime": [ + { + "name": "vtime", + "type": "DOUBLE" + }, + { + "name": "pwDosDate", + "type": "USHORT" + }, + { + "name": "pwDosTime", + "type": "USHORT" + } + ], + "SystemTimeToVariantTime": [ + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + }, + { + "name": "pvtime", + "type": "DOUBLE" + } + ], + "VariantTimeToSystemTime": [ + { + "name": "vtime", + "type": "DOUBLE" + }, + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "SafeArrayAllocDescriptor": [ + { + "name": "cDims", + "type": "UINT" + }, + { + "name": "ppsaOut", + "type": "SAFEARRAY" + } + ], + "SafeArrayAllocDescriptorEx": [ + { + "name": "vt", + "type": "VARTYPE" + }, + { + "name": "cDims", + "type": "UINT" + }, + { + "name": "ppsaOut", + "type": "SAFEARRAY" + } + ], + "SafeArrayAllocData": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayCopyData": [ + { + "name": "psaSource", + "type": "SAFEARRAY" + }, + { + "name": "psaTarget", + "type": "SAFEARRAY" + } + ], + "SafeArrayReleaseDescriptor": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayDestroyDescriptor": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayReleaseData": [ + { + "name": "pData", + "type": "PVOID" + } + ], + "SafeArrayDestroyData": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayAddRef": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "ppDataToRelease", + "type": "PVOID" + } + ], + "SafeArrayDestroy": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayRedim": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "psaboundNew", + "type": "SAFEARRAYBOUND" + } + ], + "SafeArrayGetDim": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayGetElemsize": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayGetUBound": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "nDim", + "type": "UINT" + }, + { + "name": "plUbound", + "type": "LONG" + } + ], + "SafeArrayGetLBound": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "nDim", + "type": "UINT" + }, + { + "name": "plLbound", + "type": "LONG" + } + ], + "SafeArrayLock": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayUnlock": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayAccessData": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "ppvData", + "type": "void" + } + ], + "SafeArrayUnaccessData": [ + { + "name": "psa", + "type": "SAFEARRAY" + } + ], + "SafeArrayGetElement": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "rgIndices", + "type": "LONG" + }, + { + "name": "pv", + "type": "void" + } + ], + "SafeArrayPutElement": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "rgIndices", + "type": "LONG" + }, + { + "name": "pv", + "type": "void" + } + ], + "SafeArrayCopy": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "ppsaOut", + "type": "SAFEARRAY" + } + ], + "SafeArrayPtrOfIndex": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "rgIndices", + "type": "LONG" + }, + { + "name": "ppvData", + "type": "void" + } + ], + "SafeArraySetRecordInfo": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "prinfo", + "type": "IRecordInfo" + } + ], + "SafeArrayGetRecordInfo": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "prinfo", + "type": "IRecordInfo" + } + ], + "SafeArraySetIID": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "guid", + "type": "GUID" + } + ], + "SafeArrayGetIID": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "pguid", + "type": "GUID" + } + ], + "SafeArrayGetVartype": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "pvt", + "type": "VARTYPE" + } + ], + "VariantInit": [ + { + "name": "pvarg", + "type": "VARIANTARG" + } + ], + "VariantClear": [ + { + "name": "pvarg", + "type": "VARIANTARG" + } + ], + "VariantCopy": [ + { + "name": "pvargDest", + "type": "VARIANTARG" + }, + { + "name": "pvargSrc", + "type": "VARIANTARG" + } + ], + "VariantCopyInd": [ + { + "name": "pvarDest", + "type": "VARIANT" + }, + { + "name": "pvargSrc", + "type": "VARIANTARG" + } + ], + "VariantChangeType": [ + { + "name": "pvargDest", + "type": "VARIANTARG" + }, + { + "name": "pvarSrc", + "type": "VARIANTARG" + }, + { + "name": "wFlags", + "type": "USHORT" + }, + { + "name": "vt", + "type": "VARTYPE" + } + ], + "VariantChangeTypeEx": [ + { + "name": "pvargDest", + "type": "VARIANTARG" + }, + { + "name": "pvarSrc", + "type": "VARIANTARG" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "wFlags", + "type": "USHORT" + }, + { + "name": "vt", + "type": "VARTYPE" + } + ], + "VectorFromBstr": [ + { + "name": "bstr", + "type": "BSTR" + }, + { + "name": "ppsa", + "type": "SAFEARRAY" + } + ], + "BstrFromVector": [ + { + "name": "psa", + "type": "SAFEARRAY" + }, + { + "name": "pbstr", + "type": "BSTR" + } + ], + "VarUI1FromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarUI1FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pbOut", + "type": "BYTE" + } + ], + "VarI2FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI2FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "psOut", + "type": "SHORT" + } + ], + "VarI4FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI4FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "plOut", + "type": "LONG" + } + ], + "VarI8FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarI8FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pi64Out", + "type": "LONG64" + } + ], + "VarR4FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR4FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pfltOut", + "type": "FLOAT" + } + ], + "VarR8FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarR8FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pdblOut", + "type": "DOUBLE" + } + ], + "VarDateFromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarCyFromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarCyFromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pcyOut", + "type": "CY" + } + ], + "VarBstrFromUI1": [ + { + "name": "bVal", + "type": "BYTE" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromI2": [ + { + "name": "iVal", + "type": "SHORT" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBstrFromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarBoolFromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromUI8": [ + { + "name": "i64In", + "type": "ULONG64" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarBoolFromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pboolOut", + "type": "VARIANT_BOOL" + } + ], + "VarI1FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromI2": [ + { + "name": "uiIn", + "type": "SHORT" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromUI8": [ + { + "name": "i64In", + "type": "ULONG64" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarI1FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pcOut", + "type": "CHAR" + } + ], + "VarUI2FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromI2": [ + { + "name": "uiIn", + "type": "SHORT" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromUI8": [ + { + "name": "i64In", + "type": "ULONG64" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI2FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "puiOut", + "type": "USHORT" + } + ], + "VarUI4FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromI2": [ + { + "name": "uiIn", + "type": "SHORT" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "plOut", + "type": "ULONG" + } + ], + "VarUI4FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI4FromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "plOut", + "type": "ULONG" + } + ], + "VarUI4FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pulOut", + "type": "ULONG" + } + ], + "VarUI8FromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromI2": [ + { + "name": "sIn", + "type": "SHORT" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromI8": [ + { + "name": "ui64In", + "type": "LONG64" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarUI8FromDec": [ + { + "name": "pdecIn", + "type": "DECIMAL" + }, + { + "name": "pi64Out", + "type": "ULONG64" + } + ], + "VarDecFromUI1": [ + { + "name": "bIn", + "type": "BYTE" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromI2": [ + { + "name": "uiIn", + "type": "SHORT" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromI4": [ + { + "name": "lIn", + "type": "LONG" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromI8": [ + { + "name": "i64In", + "type": "LONG64" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromR4": [ + { + "name": "fltIn", + "type": "FLOAT" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromR8": [ + { + "name": "dblIn", + "type": "DOUBLE" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromCy": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromDisp": [ + { + "name": "pdispIn", + "type": "IDispatch" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromBool": [ + { + "name": "boolIn", + "type": "VARIANT_BOOL" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromI1": [ + { + "name": "cIn", + "type": "CHAR" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromUI2": [ + { + "name": "uiIn", + "type": "USHORT" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromUI4": [ + { + "name": "ulIn", + "type": "ULONG" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarDecFromUI8": [ + { + "name": "ui64In", + "type": "ULONG64" + }, + { + "name": "pdecOut", + "type": "DECIMAL" + } + ], + "VarParseNumFromStr": [ + { + "name": "strIn", + "type": "LPCOLESTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pnumprs", + "type": "NUMPARSE" + }, + { + "name": "rgbDig", + "type": "BYTE" + } + ], + "VarNumFromParseNum": [ + { + "name": "pnumprs", + "type": "NUMPARSE" + }, + { + "name": "rgbDig", + "type": "BYTE" + }, + { + "name": "dwVtBits", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "VarAdd": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarAnd": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarCat": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarDiv": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarEqv": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarIdiv": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarImp": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarMod": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarMul": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarOr": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarPow": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarSub": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarXor": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarAbs": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarFix": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarInt": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarNeg": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarNot": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarRound": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "cDecimals", + "type": "int" + }, + { + "name": "pvarResult", + "type": "LPVARIANT" + } + ], + "VarCmp": [ + { + "name": "pvarLeft", + "type": "LPVARIANT" + }, + { + "name": "pvarRight", + "type": "LPVARIANT" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "VarDecAdd": [ + { + "name": "pdecLeft", + "type": "LPDECIMAL" + }, + { + "name": "pdecRight", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecDiv": [ + { + "name": "pdecLeft", + "type": "LPDECIMAL" + }, + { + "name": "pdecRight", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecMul": [ + { + "name": "pdecLeft", + "type": "LPDECIMAL" + }, + { + "name": "pdecRight", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecSub": [ + { + "name": "pdecLeft", + "type": "LPDECIMAL" + }, + { + "name": "pdecRight", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecAbs": [ + { + "name": "pdecIn", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecFix": [ + { + "name": "pdecIn", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecInt": [ + { + "name": "pdecIn", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecNeg": [ + { + "name": "pdecIn", + "type": "LPDECIMAL" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecRound": [ + { + "name": "pdecIn", + "type": "LPDECIMAL" + }, + { + "name": "cDecimals", + "type": "int" + }, + { + "name": "pdecResult", + "type": "LPDECIMAL" + } + ], + "VarDecCmp": [ + { + "name": "pdecLeft", + "type": "LPDECIMAL" + }, + { + "name": "pdecRight", + "type": "LPDECIMAL" + } + ], + "VarDecCmpR8": [ + { + "name": "pdecLeft", + "type": "LPDECIMAL" + }, + { + "name": "dblRight", + "type": "double" + } + ], + "VarCyAdd": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "cyRight", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyMul": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "cyRight", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyMulI4": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "lRight", + "type": "LONG" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyMulI8": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "lRight", + "type": "LONG64" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCySub": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "cyRight", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyAbs": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyFix": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyInt": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyNeg": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyRound": [ + { + "name": "cyIn", + "type": "CY" + }, + { + "name": "cDecimals", + "type": "int" + }, + { + "name": "pcyResult", + "type": "LPCY" + } + ], + "VarCyCmp": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "cyRight", + "type": "CY" + } + ], + "VarCyCmpR8": [ + { + "name": "cyLeft", + "type": "CY" + }, + { + "name": "dblRight", + "type": "double" + } + ], + "VarBstrCat": [ + { + "name": "bstrLeft", + "type": "BSTR" + }, + { + "name": "bstrRight", + "type": "BSTR" + }, + { + "name": "pbstrResult", + "type": "LPBSTR" + } + ], + "VarBstrCmp": [ + { + "name": "bstrLeft", + "type": "BSTR" + }, + { + "name": "bstrRight", + "type": "BSTR" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "VarR8Pow": [ + { + "name": "dblLeft", + "type": "double" + }, + { + "name": "dblRight", + "type": "double" + }, + { + "name": "pdblResult", + "type": "double" + } + ], + "VarR4CmpR8": [ + { + "name": "fltLeft", + "type": "float" + }, + { + "name": "dblRight", + "type": "double" + } + ], + "VarR8Round": [ + { + "name": "dblIn", + "type": "double" + }, + { + "name": "cDecimals", + "type": "int" + }, + { + "name": "pdblResult", + "type": "double" + } + ], + "VarDateFromUdate": [ + { + "name": "pudateIn", + "type": "UDATE" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarDateFromUdateEx": [ + { + "name": "pudateIn", + "type": "UDATE" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pdateOut", + "type": "DATE" + } + ], + "VarUdateFromDate": [ + { + "name": "dateIn", + "type": "DATE" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pudateOut", + "type": "UDATE" + } + ], + "GetAltMonthNames": [ + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "prgp", + "type": "LPOLESTR" + } + ], + "VarFormat": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pstrFormat", + "type": "LPOLESTR" + }, + { + "name": "iFirstDay", + "type": "int" + }, + { + "name": "iFirstWeek", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarFormatDateTime": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "iNamedFormat", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarFormatNumber": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "iNumDig", + "type": "int" + }, + { + "name": "iIncLead", + "type": "int" + }, + { + "name": "iUseParens", + "type": "int" + }, + { + "name": "iGroup", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarFormatPercent": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "iNumDig", + "type": "int" + }, + { + "name": "iIncLead", + "type": "int" + }, + { + "name": "iUseParens", + "type": "int" + }, + { + "name": "iGroup", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarFormatCurrency": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "iNumDig", + "type": "int" + }, + { + "name": "iIncLead", + "type": "int" + }, + { + "name": "iUseParens", + "type": "int" + }, + { + "name": "iGroup", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarWeekdayName": [ + { + "name": "iWeekday", + "type": "int" + }, + { + "name": "fAbbrev", + "type": "int" + }, + { + "name": "iFirstDay", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarMonthName": [ + { + "name": "iMonth", + "type": "int" + }, + { + "name": "fAbbrev", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "VarFormatFromTokens": [ + { + "name": "pvarIn", + "type": "LPVARIANT" + }, + { + "name": "pstrFormat", + "type": "LPOLESTR" + }, + { + "name": "pbTokCur", + "type": "LPBYTE" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "pbstrOut", + "type": "BSTR" + }, + { + "name": "lcid", + "type": "LCID" + } + ], + "VarTokenizeFormatString": [ + { + "name": "pstrFormat", + "type": "LPOLESTR" + }, + { + "name": "rgbTok", + "type": "LPBYTE" + }, + { + "name": "cbTok", + "type": "int" + }, + { + "name": "iFirstDay", + "type": "int" + }, + { + "name": "iFirstWeek", + "type": "int" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pcbActual", + "type": "int" + } + ], + "LHashValOfNameSysA": [ + { + "name": "syskind", + "type": "SYSKIND" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "szName", + "type": "LPCSTR" + } + ], + "LHashValOfNameSys": [ + { + "name": "syskind", + "type": "SYSKIND" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "szName", + "type": "OLECHAR" + } + ], + "LoadTypeLib": [ + { + "name": "szFile", + "type": "LPCOLESTR" + }, + { + "name": "pptlib", + "type": "ITypeLib" + } + ], + "LoadTypeLibEx": [ + { + "name": "szFile", + "type": "LPCOLESTR" + }, + { + "name": "regkind", + "type": "REGKIND" + }, + { + "name": "pptlib", + "type": "ITypeLib" + } + ], + "LoadRegTypeLib": [ + { + "name": "rguid", + "type": "GUID" + }, + { + "name": "wVerMajor", + "type": "WORD" + }, + { + "name": "wVerMinor", + "type": "WORD" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pptlib", + "type": "ITypeLib" + } + ], + "QueryPathOfRegTypeLib": [ + { + "name": "guid", + "type": "GUID" + }, + { + "name": "wMaj", + "type": "USHORT" + }, + { + "name": "wMin", + "type": "USHORT" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "lpbstrPathName", + "type": "LPBSTR" + } + ], + "RegisterTypeLib": [ + { + "name": "ptlib", + "type": "ITypeLib" + }, + { + "name": "szFullPath", + "type": "LPCOLESTR" + }, + { + "name": "szHelpDir", + "type": "LPCOLESTR" + } + ], + "UnRegisterTypeLib": [ + { + "name": "libID", + "type": "GUID" + }, + { + "name": "wVerMajor", + "type": "WORD" + }, + { + "name": "wVerMinor", + "type": "WORD" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "syskind", + "type": "SYSKIND" + } + ], + "RegisterTypeLibForUser": [ + { + "name": "ptlib", + "type": "ITypeLib" + }, + { + "name": "szFullPath", + "type": "OLECHAR" + }, + { + "name": "szHelpDir", + "type": "OLECHAR" + } + ], + "UnRegisterTypeLibForUser": [ + { + "name": "libID", + "type": "GUID" + }, + { + "name": "wMajorVerNum", + "type": "WORD" + }, + { + "name": "wMinorVerNum", + "type": "WORD" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "syskind", + "type": "SYSKIND" + } + ], + "CreateTypeLib": [ + { + "name": "syskind", + "type": "SYSKIND" + }, + { + "name": "szFile", + "type": "LPCOLESTR" + }, + { + "name": "ppctlib", + "type": "ICreateTypeLib" + } + ], + "CreateTypeLib2": [ + { + "name": "syskind", + "type": "SYSKIND" + }, + { + "name": "szFile", + "type": "LPCOLESTR" + }, + { + "name": "ppctlib", + "type": "ICreateTypeLib2" + } + ], + "DispGetParam": [ + { + "name": "pdispparams", + "type": "DISPPARAMS" + }, + { + "name": "position", + "type": "UINT" + }, + { + "name": "vtTarg", + "type": "VARTYPE" + }, + { + "name": "pvarResult", + "type": "VARIANT" + }, + { + "name": "puArgErr", + "type": "UINT" + } + ], + "DispGetIDsOfNames": [ + { + "name": "ptinfo", + "type": "ITypeInfo" + }, + { + "name": "rgszNames", + "type": "LPOLESTR" + }, + { + "name": "cNames", + "type": "UINT" + }, + { + "name": "rgdispid", + "type": "DISPID" + } + ], + "DispInvoke": [ + { + "name": "_this", + "type": "void" + }, + { + "name": "ptinfo", + "type": "ITypeInfo" + }, + { + "name": "dispidMember", + "type": "DISPID" + }, + { + "name": "wFlags", + "type": "WORD" + }, + { + "name": "pparams", + "type": "DISPPARAMS" + }, + { + "name": "pvarResult", + "type": "VARIANT" + }, + { + "name": "pexcepinfo", + "type": "EXCEPINFO" + }, + { + "name": "puArgErr", + "type": "UINT" + } + ], + "CreateDispTypeInfo": [ + { + "name": "pidata", + "type": "INTERFACEDATA" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "pptinfo", + "type": "ITypeInfo" + } + ], + "CreateStdDispatch": [ + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "pvThis", + "type": "void" + }, + { + "name": "ptinfo", + "type": "ITypeInfo" + }, + { + "name": "ppunkStdDisp", + "type": "IUnknown" + } + ], + "DispCallFunc": [ + { + "name": "pvInstance", + "type": "void" + }, + { + "name": "oVft", + "type": "ULONG_PTR" + }, + { + "name": "cc", + "type": "CALLCONV" + }, + { + "name": "vtReturn", + "type": "VARTYPE" + }, + { + "name": "cActuals", + "type": "UINT" + }, + { + "name": "prgvt", + "type": "VARTYPE" + }, + { + "name": "prgpvarg", + "type": "VARIANTARG" + }, + { + "name": "pvargResult", + "type": "VARIANT" + } + ], + "RegisterActiveObject": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwRegister", + "type": "DWORD" + } + ], + "RevokeActiveObject": [ + { + "name": "dwRegister", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "GetActiveObject": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SetErrorInfo": [ + { + "name": "dwReserved", + "type": "ULONG" + }, + { + "name": "perrinfo", + "type": "IErrorInfo" + } + ], + "GetErrorInfo": [ + { + "name": "dwReserved", + "type": "ULONG" + }, + { + "name": "pperrinfo", + "type": "IErrorInfo" + } + ], + "CreateErrorInfo": [ + { + "name": "pperrinfo", + "type": "ICreateErrorInfo" + } + ], + "GetRecordInfoFromTypeInfo": [ + { + "name": "pTypeInfo", + "type": "ITypeInfo" + }, + { + "name": "ppRecInfo", + "type": "IRecordInfo" + } + ], + "GetRecordInfoFromGuids": [ + { + "name": "rGuidTypeLib", + "type": "GUID" + }, + { + "name": "uVerMajor", + "type": "ULONG" + }, + { + "name": "uVerMinor", + "type": "ULONG" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "rGuidTypeInfo", + "type": "GUID" + }, + { + "name": "ppRecInfo", + "type": "IRecordInfo" + } + ], + "OaBuildVersion": [ + { + "name": "VOID", + "type": "void" + } + ], + "ClearCustData": [ + { + "name": "pCustData", + "type": "LPCUSTDATA" + } + ], + "OaEnablePerUserTLibRegistration": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/olectl.json b/qiling/extensions/windows_sdk/olectl.json new file mode 100644 index 000000000..2f6917c9a --- /dev/null +++ b/qiling/extensions/windows_sdk/olectl.json @@ -0,0 +1,246 @@ +{ + "DllRegisterServer": [ + { + "name": "VOID", + "type": "void" + } + ], + "DllUnregisterServer": [ + { + "name": "VOID", + "type": "void" + } + ], + "OleCreatePropertyFrame": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "x", + "type": "UINT" + }, + { + "name": "y", + "type": "UINT" + }, + { + "name": "lpszCaption", + "type": "LPCOLESTR" + }, + { + "name": "cObjects", + "type": "ULONG" + }, + { + "name": "ppUnk", + "type": "LPUNKNOWN" + }, + { + "name": "cPages", + "type": "ULONG" + }, + { + "name": "pPageClsID", + "type": "LPCLSID" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "OleCreatePropertyFrameIndirect": [ + { + "name": "lpParams", + "type": "LPOCPFIPARAMS" + } + ], + "OleTranslateColor": [ + { + "name": "clr", + "type": "OLE_COLOR" + }, + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "lpcolorref", + "type": "COLORREF" + } + ], + "OleCreateFontIndirect": [ + { + "name": "lpFontDesc", + "type": "LPFONTDESC" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "lplpvObj", + "type": "LPVOID" + } + ], + "OleCreatePictureIndirect": [ + { + "name": "lpPictDesc", + "type": "LPPICTDESC" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "fOwn", + "type": "BOOL" + }, + { + "name": "lplpvObj", + "type": "LPVOID" + } + ], + "OleLoadPicture": [ + { + "name": "lpstream", + "type": "LPSTREAM" + }, + { + "name": "lSize", + "type": "LONG" + }, + { + "name": "fRunmode", + "type": "BOOL" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "lplpvObj", + "type": "LPVOID" + } + ], + "OleLoadPictureEx": [ + { + "name": "lpstream", + "type": "LPSTREAM" + }, + { + "name": "lSize", + "type": "LONG" + }, + { + "name": "fRunmode", + "type": "BOOL" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "xSizeDesired", + "type": "DWORD" + }, + { + "name": "ySizeDesired", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lplpvObj", + "type": "LPVOID" + } + ], + "OleLoadPicturePath": [ + { + "name": "szURLorPath", + "type": "LPOLESTR" + }, + { + "name": "punkCaller", + "type": "LPUNKNOWN" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "clrReserved", + "type": "OLE_COLOR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvRet", + "type": "LPVOID" + } + ], + "OleLoadPictureFile": [ + { + "name": "varFileName", + "type": "VARIANT" + }, + { + "name": "lplpdispPicture", + "type": "LPDISPATCH" + } + ], + "OleLoadPictureFileEx": [ + { + "name": "varFileName", + "type": "VARIANT" + }, + { + "name": "xSizeDesired", + "type": "DWORD" + }, + { + "name": "ySizeDesired", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lplpdispPicture", + "type": "LPDISPATCH" + } + ], + "OleSavePictureFile": [ + { + "name": "lpdispPicture", + "type": "LPDISPATCH" + }, + { + "name": "bstrFileName", + "type": "BSTR" + } + ], + "OleIconToCursor": [ + { + "name": "hinstExe", + "type": "HINSTANCE" + }, + { + "name": "hIcon", + "type": "HICON" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/oledlg.json b/qiling/extensions/windows_sdk/oledlg.json new file mode 100644 index 000000000..fbd760da7 --- /dev/null +++ b/qiling/extensions/windows_sdk/oledlg.json @@ -0,0 +1,244 @@ +{ + "OleUIAddVerbMenuW": [ + { + "name": "lpOleObj", + "type": "LPOLEOBJECT" + }, + { + "name": "lpszShortType", + "type": "LPCWSTR" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPos", + "type": "UINT" + }, + { + "name": "uIDVerbMin", + "type": "UINT" + }, + { + "name": "uIDVerbMax", + "type": "UINT" + }, + { + "name": "bAddConvert", + "type": "BOOL" + }, + { + "name": "idConvert", + "type": "UINT" + }, + { + "name": "lphMenu", + "type": "HMENU" + } + ], + "OleUIAddVerbMenuA": [ + { + "name": "lpOleObj", + "type": "LPOLEOBJECT" + }, + { + "name": "lpszShortType", + "type": "LPCSTR" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPos", + "type": "UINT" + }, + { + "name": "uIDVerbMin", + "type": "UINT" + }, + { + "name": "uIDVerbMax", + "type": "UINT" + }, + { + "name": "bAddConvert", + "type": "BOOL" + }, + { + "name": "idConvert", + "type": "UINT" + }, + { + "name": "lphMenu", + "type": "HMENU" + } + ], + "OleUIInsertObjectW": [ + { + "name": "VOID", + "type": "LPOLEUIINSERTOBJECTW" + } + ], + "OleUIInsertObjectA": [ + { + "name": "VOID", + "type": "LPOLEUIINSERTOBJECTA" + } + ], + "OleUIPasteSpecialW": [ + { + "name": "VOID", + "type": "LPOLEUIPASTESPECIALW" + } + ], + "OleUIPasteSpecialA": [ + { + "name": "VOID", + "type": "LPOLEUIPASTESPECIALA" + } + ], + "OleUIEditLinksW": [ + { + "name": "VOID", + "type": "LPOLEUIEDITLINKSW" + } + ], + "OleUIEditLinksA": [ + { + "name": "VOID", + "type": "LPOLEUIEDITLINKSA" + } + ], + "OleUIChangeIconW": [ + { + "name": "VOID", + "type": "LPOLEUICHANGEICONW" + } + ], + "OleUIChangeIconA": [ + { + "name": "VOID", + "type": "LPOLEUICHANGEICONA" + } + ], + "OleUIConvertW": [ + { + "name": "VOID", + "type": "LPOLEUICONVERTW" + } + ], + "OleUIConvertA": [ + { + "name": "VOID", + "type": "LPOLEUICONVERTA" + } + ], + "OleUICanConvertOrActivateAs": [ + { + "name": "rClsid", + "type": "IID" + }, + { + "name": "fIsLinkedObject", + "type": "BOOL" + }, + { + "name": "wFormat", + "type": "WORD" + } + ], + "OleUIBusyW": [ + { + "name": "VOID", + "type": "LPOLEUIBUSYW" + } + ], + "OleUIBusyA": [ + { + "name": "VOID", + "type": "LPOLEUIBUSYA" + } + ], + "OleUIChangeSourceW": [ + { + "name": "VOID", + "type": "LPOLEUICHANGESOURCEW" + } + ], + "OleUIChangeSourceA": [ + { + "name": "VOID", + "type": "LPOLEUICHANGESOURCEA" + } + ], + "OleUIObjectPropertiesW": [ + { + "name": "VOID", + "type": "LPOLEUIOBJECTPROPSW" + } + ], + "OleUIObjectPropertiesA": [ + { + "name": "VOID", + "type": "LPOLEUIOBJECTPROPSA" + } + ], + "OleUIPromptUserW": [ + { + "name": "nTemplate", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + } + ], + "OleUIPromptUserA": [ + { + "name": "nTemplate", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + } + ], + "OleUIUpdateLinksW": [ + { + "name": "lpOleUILinkCntr", + "type": "LPOLEUILINKCONTAINERW" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszTitle", + "type": "LPWSTR" + }, + { + "name": "cLinks", + "type": "int" + } + ], + "OleUIUpdateLinksA": [ + { + "name": "lpOleUILinkCntr", + "type": "LPOLEUILINKCONTAINERA" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszTitle", + "type": "LPSTR" + }, + { + "name": "cLinks", + "type": "int" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ondemandconnroutehelper.json b/qiling/extensions/windows_sdk/ondemandconnroutehelper.json new file mode 100644 index 000000000..8f8aaf47e --- /dev/null +++ b/qiling/extensions/windows_sdk/ondemandconnroutehelper.json @@ -0,0 +1,58 @@ +{ + "OnDemandGetRoutingHint": [ + { + "name": "destinationHostName", + "type": "PCWSTR" + }, + { + "name": "interfaceIndex", + "type": "DWORD" + } + ], + "OnDemandRegisterNotification": [ + { + "name": "callback", + "type": "ONDEMAND_NOTIFICATION_CALLBACK" + }, + { + "name": "callbackContext", + "type": "void" + }, + { + "name": "registrationHandle", + "type": "HANDLE" + } + ], + "GetInterfaceContextTableForHostName": [ + { + "name": "HostName", + "type": "PCWSTR" + }, + { + "name": "ProxyName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ConnectionProfileFilterRawData", + "type": "BYTE" + }, + { + "name": "ConnectionProfileFilterRawDataSize", + "type": "DWORD" + }, + { + "name": "InterfaceContextTable", + "type": "NET_INTERFACE_CONTEXT_TABLE" + } + ], + "FreeInterfaceContextTable": [ + { + "name": "InterfaceContextTable", + "type": "NET_INTERFACE_CONTEXT_TABLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/oobenotification.json b/qiling/extensions/windows_sdk/oobenotification.json new file mode 100644 index 000000000..4f58e35f5 --- /dev/null +++ b/qiling/extensions/windows_sdk/oobenotification.json @@ -0,0 +1,22 @@ +{ + "RegisterWaitUntilOOBECompleted": [ + { + "name": "OOBECompletedCallback", + "type": "OOBE_COMPLETED_CALLBACK" + }, + { + "name": "CallbackContext", + "type": "PVOID" + }, + { + "name": "WaitHandle", + "type": "PVOID" + } + ], + "UnregisterWaitUntilOOBECompleted": [ + { + "name": "WaitHandle", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/p2p.json b/qiling/extensions/windows_sdk/p2p.json new file mode 100644 index 000000000..819ad8f5d --- /dev/null +++ b/qiling/extensions/windows_sdk/p2p.json @@ -0,0 +1,1638 @@ +{ + "PeerGraphStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + }, + { + "name": "pVersionData", + "type": "PPEER_VERSION_DATA" + } + ], + "PeerGraphFreeData": [ + { + "name": "pvData", + "type": "PVOID" + } + ], + "PeerGraphGetItemCount": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + } + ], + "PeerGraphGetNextItem": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + }, + { + "name": "pppvItems", + "type": "PVOID" + } + ], + "PeerGraphEndEnumeration": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphCreate": [ + { + "name": "pGraphProperties", + "type": "PPEER_GRAPH_PROPERTIES" + }, + { + "name": "pwzDatabaseName", + "type": "PCWSTR" + }, + { + "name": "pSecurityInterface", + "type": "PPEER_SECURITY_INTERFACE" + }, + { + "name": "phGraph", + "type": "HGRAPH" + } + ], + "PeerGraphOpen": [ + { + "name": "pwzGraphId", + "type": "PCWSTR" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pwzDatabaseName", + "type": "PCWSTR" + }, + { + "name": "pSecurityInterface", + "type": "PPEER_SECURITY_INTERFACE" + }, + { + "name": "cRecordTypeSyncPrecedence", + "type": "ULONG" + }, + { + "name": "pRecordTypeSyncPrecedence", + "type": "GUID" + }, + { + "name": "phGraph", + "type": "HGRAPH" + } + ], + "PeerGraphListen": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "wPort", + "type": "WORD" + } + ], + "PeerGraphConnect": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pAddress", + "type": "PPEER_ADDRESS" + }, + { + "name": "pullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGraphClose": [ + { + "name": "hGraph", + "type": "HGRAPH" + } + ], + "PeerGraphDelete": [ + { + "name": "pwzGraphId", + "type": "PCWSTR" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pwzDatabaseName", + "type": "PCWSTR" + } + ], + "PeerGraphGetStatus": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pdwStatus", + "type": "DWORD" + } + ], + "PeerGraphGetProperties": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ppGraphProperties", + "type": "PPEER_GRAPH_PROPERTIES" + } + ], + "PeerGraphSetProperties": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pGraphProperties", + "type": "PPEER_GRAPH_PROPERTIES" + } + ], + "PeerGraphRegisterEvent": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "cEventRegistrations", + "type": "ULONG" + }, + { + "name": "pEventRegistrations", + "type": "PEER_GRAPH_EVENT_REGISTRATION" + }, + { + "name": "phPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGraphUnregisterEvent": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGraphGetEventData": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + }, + { + "name": "ppEventData", + "type": "PPEER_GRAPH_EVENT_DATA" + } + ], + "PeerGraphGetRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecordId", + "type": "GUID" + }, + { + "name": "ppRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGraphAddRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + }, + { + "name": "pRecordId", + "type": "GUID" + } + ], + "PeerGraphUpdateRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGraphDeleteRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecordId", + "type": "GUID" + }, + { + "name": "fLocal", + "type": "BOOL" + } + ], + "PeerGraphEnumRecords": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecordType", + "type": "GUID" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphSearchRecords": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzCriteria", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphExportDatabase": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGraphImportDatabase": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGraphValidateDeferredRecords": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "cRecordIds", + "type": "ULONG" + }, + { + "name": "pRecordIds", + "type": "GUID" + } + ], + "PeerGraphOpenDirectConnection": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pAddress", + "type": "PPEER_ADDRESS" + }, + { + "name": "pullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGraphSendData": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + }, + { + "name": "pType", + "type": "GUID" + }, + { + "name": "cbData", + "type": "ULONG" + }, + { + "name": "pvData", + "type": "PVOID" + } + ], + "PeerGraphCloseDirectConnection": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGraphEnumConnections": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphEnumNodes": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphSetPresence": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "fPresent", + "type": "BOOL" + } + ], + "PeerGraphGetNodeInfo": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ullNodeId", + "type": "ULONGLONG" + }, + { + "name": "ppNodeInfo", + "type": "PPEER_NODE_INFO" + } + ], + "PeerGraphSetNodeAttributes": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzAttributes", + "type": "PCWSTR" + } + ], + "PeerGraphPeerTimeToUniversalTime": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + } + ], + "PeerGraphUniversalTimeToPeerTime": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + } + ], + "PeerFreeData": [ + { + "name": "pvData", + "type": "LPCVOID" + } + ], + "PeerGetItemCount": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + } + ], + "PeerGetNextItem": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + }, + { + "name": "pppvItems", + "type": "PVOID" + } + ], + "PeerEndEnumeration": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + }, + { + "name": "pVersionData", + "type": "PPEER_VERSION_DATA" + } + ], + "PeerGroupCreate": [ + { + "name": "pProperties", + "type": "PPEER_GROUP_PROPERTIES" + }, + { + "name": "phGroup", + "type": "HGROUP" + } + ], + "PeerGroupOpen": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzGroupPeerName", + "type": "PCWSTR" + }, + { + "name": "pwzCloud", + "type": "PCWSTR" + }, + { + "name": "phGroup", + "type": "HGROUP" + } + ], + "PeerGroupJoin": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzInvitation", + "type": "PCWSTR" + }, + { + "name": "pwzCloud", + "type": "PCWSTR" + }, + { + "name": "phGroup", + "type": "HGROUP" + } + ], + "PeerGroupPasswordJoin": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzInvitation", + "type": "PCWSTR" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "pwzCloud", + "type": "PCWSTR" + }, + { + "name": "phGroup", + "type": "HGROUP" + } + ], + "PeerGroupConnect": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "PeerGroupConnectByAddress": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "cAddresses", + "type": "ULONG" + }, + { + "name": "pAddresses", + "type": "PPEER_ADDRESS" + } + ], + "PeerGroupClose": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "PeerGroupDelete": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzGroupPeerName", + "type": "PCWSTR" + } + ], + "PeerGroupCreateInvitation": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzIdentityInfo", + "type": "PCWSTR" + }, + { + "name": "pftExpiration", + "type": "FILETIME" + }, + { + "name": "cRoles", + "type": "ULONG" + }, + { + "name": "pRoles", + "type": "GUID" + }, + { + "name": "ppwzInvitation", + "type": "PWSTR" + } + ], + "PeerGroupCreatePasswordInvitation": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "ppwzInvitation", + "type": "PWSTR" + } + ], + "PeerGroupParseInvitation": [ + { + "name": "pwzInvitation", + "type": "PCWSTR" + }, + { + "name": "ppInvitationInfo", + "type": "PPEER_INVITATION_INFO" + } + ], + "PeerGroupGetStatus": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pdwStatus", + "type": "DWORD" + } + ], + "PeerGroupGetProperties": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "ppProperties", + "type": "PPEER_GROUP_PROPERTIES" + } + ], + "PeerGroupSetProperties": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pProperties", + "type": "PPEER_GROUP_PROPERTIES" + } + ], + "PeerGroupEnumMembers": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupOpenDirectConnection": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pAddress", + "type": "PPEER_ADDRESS" + }, + { + "name": "pullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGroupCloseDirectConnection": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGroupEnumConnections": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupSendData": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + }, + { + "name": "pType", + "type": "GUID" + }, + { + "name": "cbData", + "type": "ULONG" + }, + { + "name": "pvData", + "type": "PVOID" + } + ], + "PeerGroupRegisterEvent": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "cEventRegistration", + "type": "DWORD" + }, + { + "name": "pEventRegistrations", + "type": "PEER_GROUP_EVENT_REGISTRATION" + }, + { + "name": "phPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGroupUnregisterEvent": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGroupGetEventData": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + }, + { + "name": "ppEventData", + "type": "PPEER_GROUP_EVENT_DATA" + } + ], + "PeerGroupGetRecord": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecordId", + "type": "GUID" + }, + { + "name": "ppRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGroupAddRecord": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + }, + { + "name": "pRecordId", + "type": "GUID" + } + ], + "PeerGroupUpdateRecord": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGroupDeleteRecord": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecordId", + "type": "GUID" + } + ], + "PeerGroupEnumRecords": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecordType", + "type": "GUID" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupSearchRecords": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzCriteria", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupExportDatabase": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGroupImportDatabase": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGroupIssueCredentials": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzSubjectIdentity", + "type": "PCWSTR" + }, + { + "name": "pCredentialInfo", + "type": "PEER_CREDENTIAL_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppwzInvitation", + "type": "PWSTR" + } + ], + "PeerGroupExportConfig": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "ppwzXML", + "type": "PWSTR" + } + ], + "PeerGroupImportConfig": [ + { + "name": "pwzXML", + "type": "PCWSTR" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "fOverwrite", + "type": "BOOL" + }, + { + "name": "ppwzIdentity", + "type": "PWSTR" + }, + { + "name": "ppwzGroup", + "type": "PWSTR" + } + ], + "PeerGroupPeerTimeToUniversalTime": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + } + ], + "PeerGroupUniversalTimeToPeerTime": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + } + ], + "PeerIdentityCreate": [ + { + "name": "pwzClassifier", + "type": "PCWSTR" + }, + { + "name": "pwzFriendlyName", + "type": "PCWSTR" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "ppwzIdentity", + "type": "PWSTR" + } + ], + "PeerIdentityGetFriendlyName": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "ppwzFriendlyName", + "type": "PWSTR" + } + ], + "PeerIdentitySetFriendlyName": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzFriendlyName", + "type": "PCWSTR" + } + ], + "PeerIdentityGetCryptKey": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "phCryptProv", + "type": "HCRYPTPROV" + } + ], + "PeerIdentityDelete": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + } + ], + "PeerEnumIdentities": [ + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerEnumGroups": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCreatePeerName": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzClassifier", + "type": "PCWSTR" + }, + { + "name": "ppwzPeerName", + "type": "PWSTR" + } + ], + "PeerIdentityGetXML": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "ppwzIdentityXML", + "type": "PWSTR" + } + ], + "PeerIdentityExport": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "ppwzExportXML", + "type": "PWSTR" + } + ], + "PeerIdentityImport": [ + { + "name": "pwzImportXML", + "type": "PCWSTR" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "ppwzIdentity", + "type": "PWSTR" + } + ], + "PeerIdentityGetDefault": [ + { + "name": "ppwzPeerName", + "type": "PWSTR" + } + ], + "PeerCollabStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + } + ], + "PeerCollabSignin": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwSigninOptions", + "type": "DWORD" + } + ], + "PeerCollabSignout": [ + { + "name": "dwSigninOptions", + "type": "DWORD" + } + ], + "PeerCollabGetSigninOptions": [ + { + "name": "pdwSigninOptions", + "type": "DWORD" + } + ], + "PeerCollabAsyncInviteContact": [ + { + "name": "pcContact", + "type": "PCPEER_CONTACT" + }, + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pcInvitation", + "type": "PCPEER_INVITATION" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "phInvitation", + "type": "HANDLE" + } + ], + "PeerCollabGetInvitationResponse": [ + { + "name": "hInvitation", + "type": "HANDLE" + }, + { + "name": "ppInvitationResponse", + "type": "PPEER_INVITATION_RESPONSE" + } + ], + "PeerCollabCancelInvitation": [ + { + "name": "hInvitation", + "type": "HANDLE" + } + ], + "PeerCollabCloseHandle": [ + { + "name": "hInvitation", + "type": "HANDLE" + } + ], + "PeerCollabInviteContact": [ + { + "name": "pcContact", + "type": "PCPEER_CONTACT" + }, + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pcInvitation", + "type": "PCPEER_INVITATION" + }, + { + "name": "ppResponse", + "type": "PPEER_INVITATION_RESPONSE" + } + ], + "PeerCollabAsyncInviteEndpoint": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pcInvitation", + "type": "PCPEER_INVITATION" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "phInvitation", + "type": "HANDLE" + } + ], + "PeerCollabInviteEndpoint": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pcInvitation", + "type": "PCPEER_INVITATION" + }, + { + "name": "ppResponse", + "type": "PPEER_INVITATION_RESPONSE" + } + ], + "PeerCollabGetAppLaunchInfo": [ + { + "name": "ppLaunchInfo", + "type": "PPEER_APP_LAUNCH_INFO" + } + ], + "PeerCollabRegisterApplication": [ + { + "name": "pcApplication", + "type": "PCPEER_APPLICATION_REGISTRATION_INFO" + }, + { + "name": "registrationType", + "type": "PEER_APPLICATION_REGISTRATION_TYPE" + } + ], + "PeerCollabUnregisterApplication": [ + { + "name": "pApplicationId", + "type": "GUID" + }, + { + "name": "registrationType", + "type": "PEER_APPLICATION_REGISTRATION_TYPE" + } + ], + "PeerCollabGetApplicationRegistrationInfo": [ + { + "name": "pApplicationId", + "type": "GUID" + }, + { + "name": "registrationType", + "type": "PEER_APPLICATION_REGISTRATION_TYPE" + }, + { + "name": "ppApplication", + "type": "PPEER_APPLICATION_REGISTRATION_INFO" + } + ], + "PeerCollabEnumApplicationRegistrationInfo": [ + { + "name": "registrationType", + "type": "PEER_APPLICATION_REGISTRATION_TYPE" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabGetPresenceInfo": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "ppPresenceInfo", + "type": "PPEER_PRESENCE_INFO" + } + ], + "PeerCollabEnumApplications": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pApplicationId", + "type": "GUID" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabEnumObjects": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pObjectId", + "type": "GUID" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabEnumEndpoints": [ + { + "name": "pcContact", + "type": "PCPEER_CONTACT" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabRefreshEndpointData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + } + ], + "PeerCollabDeleteEndpointData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + } + ], + "PeerCollabQueryContactData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "ppwzContactData", + "type": "PWSTR" + } + ], + "PeerCollabSubscribeEndpointData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + } + ], + "PeerCollabUnsubscribeEndpointData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + } + ], + "PeerCollabSetPresenceInfo": [ + { + "name": "pcPresenceInfo", + "type": "PCPEER_PRESENCE_INFO" + } + ], + "PeerCollabGetEndpointName": [ + { + "name": "ppwzEndpointName", + "type": "PWSTR" + } + ], + "PeerCollabSetEndpointName": [ + { + "name": "pwzEndpointName", + "type": "PCWSTR" + } + ], + "PeerCollabSetObject": [ + { + "name": "pcObject", + "type": "PCPEER_OBJECT" + } + ], + "PeerCollabDeleteObject": [ + { + "name": "pObjectId", + "type": "GUID" + } + ], + "PeerCollabRegisterEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "cEventRegistration", + "type": "DWORD" + }, + { + "name": "pEventRegistrations", + "type": "PEER_COLLAB_EVENT_REGISTRATION" + }, + { + "name": "phPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerCollabGetEventData": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + }, + { + "name": "ppEventData", + "type": "PPEER_COLLAB_EVENT_DATA" + } + ], + "PeerCollabUnregisterEvent": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerCollabEnumPeopleNearMe": [ + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabAddContact": [ + { + "name": "pwzContactData", + "type": "PCWSTR" + }, + { + "name": "ppContact", + "type": "PPEER_CONTACT" + } + ], + "PeerCollabDeleteContact": [ + { + "name": "pwzPeerName", + "type": "PCWSTR" + } + ], + "PeerCollabGetContact": [ + { + "name": "pwzPeerName", + "type": "PCWSTR" + }, + { + "name": "ppContact", + "type": "PPEER_CONTACT" + } + ], + "PeerCollabUpdateContact": [ + { + "name": "pContact", + "type": "PCPEER_CONTACT" + } + ], + "PeerCollabEnumContacts": [ + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabExportContact": [ + { + "name": "pwzPeerName", + "type": "PCWSTR" + }, + { + "name": "ppwzContactData", + "type": "PWSTR" + } + ], + "PeerCollabParseContact": [ + { + "name": "pwzContactData", + "type": "PCWSTR" + }, + { + "name": "ppContact", + "type": "PPEER_CONTACT" + } + ], + "PeerNameToPeerHostName": [ + { + "name": "pwzPeerName", + "type": "PCWSTR" + }, + { + "name": "ppwzHostName", + "type": "PWSTR" + } + ], + "PeerHostNameToPeerName": [ + { + "name": "pwzHostName", + "type": "PCWSTR" + }, + { + "name": "ppwzPeerName", + "type": "PWSTR" + } + ], + "PeerPnrpStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + } + ], + "PeerPnrpRegister": [ + { + "name": "pcwzPeerName", + "type": "PCWSTR" + }, + { + "name": "pRegistrationInfo", + "type": "PPEER_PNRP_REGISTRATION_INFO" + }, + { + "name": "phRegistration", + "type": "HREGISTRATION" + } + ], + "PeerPnrpUpdateRegistration": [ + { + "name": "hRegistration", + "type": "HREGISTRATION" + }, + { + "name": "pRegistrationInfo", + "type": "PPEER_PNRP_REGISTRATION_INFO" + } + ], + "PeerPnrpUnregister": [ + { + "name": "hRegistration", + "type": "HREGISTRATION" + } + ], + "PeerPnrpResolve": [ + { + "name": "pcwzPeerName", + "type": "PCWSTR" + }, + { + "name": "pcwzCloudName", + "type": "PCWSTR" + }, + { + "name": "pcEndpoints", + "type": "ULONG" + }, + { + "name": "ppEndpoints", + "type": "PPEER_PNRP_ENDPOINT_INFO" + } + ], + "PeerPnrpStartResolve": [ + { + "name": "pcwzPeerName", + "type": "PCWSTR" + }, + { + "name": "pcwzCloudName", + "type": "PCWSTR" + }, + { + "name": "cMaxEndpoints", + "type": "ULONG" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "phResolve", + "type": "HRESOLUTION" + } + ], + "PeerPnrpGetCloudInfo": [ + { + "name": "pcNumClouds", + "type": "ULONG" + }, + { + "name": "ppCloudInfo", + "type": "PPEER_PNRP_CLOUD_INFO" + } + ], + "PeerPnrpGetEndpoint": [ + { + "name": "hResolve", + "type": "HRESOLUTION" + }, + { + "name": "ppEndpoint", + "type": "PPEER_PNRP_ENDPOINT_INFO" + } + ], + "PeerPnrpEndResolve": [ + { + "name": "hResolve", + "type": "HRESOLUTION" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/pathcch.json b/qiling/extensions/windows_sdk/pathcch.json new file mode 100644 index 000000000..94dfd061a --- /dev/null +++ b/qiling/extensions/windows_sdk/pathcch.json @@ -0,0 +1,302 @@ +{ + "PathIsUNCEx": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "ppszServer", + "type": "PCWSTR" + } + ], + "PathCchIsRoot": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "PathCchAddBackslashEx": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "ppszEnd", + "type": "PWSTR" + }, + { + "name": "pcchRemaining", + "type": "size_t" + } + ], + "PathCchAddBackslash": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + } + ], + "PathCchRemoveBackslashEx": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "ppszEnd", + "type": "PWSTR" + }, + { + "name": "pcchRemaining", + "type": "size_t" + } + ], + "PathCchRemoveBackslash": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + } + ], + "PathCchSkipRoot": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "ppszRootEnd", + "type": "PCWSTR" + } + ], + "PathCchStripToRoot": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + } + ], + "PathCchRemoveFileSpec": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + } + ], + "PathCchFindExtension": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "ppszExt", + "type": "PCWSTR" + } + ], + "PathCchAddExtension": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "pszExt", + "type": "PCWSTR" + } + ], + "PathCchRenameExtension": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "pszExt", + "type": "PCWSTR" + } + ], + "PathCchRemoveExtension": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + } + ], + "PathCchCanonicalizeEx": [ + { + "name": "pszPathOut", + "type": "PWSTR" + }, + { + "name": "cchPathOut", + "type": "size_t" + }, + { + "name": "pszPathIn", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "PathCchCanonicalize": [ + { + "name": "pszPathOut", + "type": "PWSTR" + }, + { + "name": "cchPathOut", + "type": "size_t" + }, + { + "name": "pszPathIn", + "type": "PCWSTR" + } + ], + "PathCchCombineEx": [ + { + "name": "pszPathOut", + "type": "PWSTR" + }, + { + "name": "cchPathOut", + "type": "size_t" + }, + { + "name": "pszPathIn", + "type": "PCWSTR" + }, + { + "name": "pszMore", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "PathCchCombine": [ + { + "name": "pszPathOut", + "type": "PWSTR" + }, + { + "name": "cchPathOut", + "type": "size_t" + }, + { + "name": "pszPathIn", + "type": "PCWSTR" + }, + { + "name": "pszMore", + "type": "PCWSTR" + } + ], + "PathCchAppendEx": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "pszMore", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "PathCchAppend": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + }, + { + "name": "pszMore", + "type": "PCWSTR" + } + ], + "PathCchStripPrefix": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "size_t" + } + ], + "PathAllocCombine": [ + { + "name": "pszPathIn", + "type": "PCWSTR" + }, + { + "name": "pszMore", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "ppszPathOut", + "type": "PWSTR" + } + ], + "PathAllocCanonicalize": [ + { + "name": "pszPathIn", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "ppszPathOut", + "type": "PWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/pdh.json b/qiling/extensions/windows_sdk/pdh.json new file mode 100644 index 000000000..20919b186 --- /dev/null +++ b/qiling/extensions/windows_sdk/pdh.json @@ -0,0 +1,1534 @@ +{ + "PdhGetDllVersion": [ + { + "name": "lpdwVersion", + "type": "LPDWORD" + } + ], + "PdhOpenQueryW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phQuery", + "type": "PDH_HQUERY" + } + ], + "PdhOpenQueryA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phQuery", + "type": "PDH_HQUERY" + } + ], + "PdhAddCounterW": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "szFullCounterPath", + "type": "LPCWSTR" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phCounter", + "type": "PDH_HCOUNTER" + } + ], + "PdhAddCounterA": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "szFullCounterPath", + "type": "LPCSTR" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phCounter", + "type": "PDH_HCOUNTER" + } + ], + "PdhAddEnglishCounterW": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "szFullCounterPath", + "type": "LPCWSTR" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phCounter", + "type": "PDH_HCOUNTER" + } + ], + "PdhAddEnglishCounterA": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "szFullCounterPath", + "type": "LPCSTR" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phCounter", + "type": "PDH_HCOUNTER" + } + ], + "PdhCollectQueryDataWithTime": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "pllTimeStamp", + "type": "LONGLONG" + } + ], + "PdhValidatePathExW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szFullPathBuffer", + "type": "LPCWSTR" + } + ], + "PdhValidatePathExA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szFullPathBuffer", + "type": "LPCSTR" + } + ], + "PdhRemoveCounter": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + } + ], + "PdhCollectQueryData": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + } + ], + "PdhCloseQuery": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + } + ], + "PdhGetFormattedCounterValue": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "dwFormat", + "type": "DWORD" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "pValue", + "type": "PPDH_FMT_COUNTERVALUE" + } + ], + "PdhGetFormattedCounterArrayA": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "dwFormat", + "type": "DWORD" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpdwItemCount", + "type": "LPDWORD" + }, + { + "name": "ItemBuffer", + "type": "PPDH_FMT_COUNTERVALUE_ITEM_A" + } + ], + "PdhGetFormattedCounterArrayW": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "dwFormat", + "type": "DWORD" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpdwItemCount", + "type": "LPDWORD" + }, + { + "name": "ItemBuffer", + "type": "PPDH_FMT_COUNTERVALUE_ITEM_W" + } + ], + "PdhGetRawCounterValue": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "lpdwType", + "type": "LPDWORD" + }, + { + "name": "pValue", + "type": "PPDH_RAW_COUNTER" + } + ], + "PdhGetRawCounterArrayA": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpdwItemCount", + "type": "LPDWORD" + }, + { + "name": "ItemBuffer", + "type": "PPDH_RAW_COUNTER_ITEM_A" + } + ], + "PdhGetRawCounterArrayW": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "lpdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpdwItemCount", + "type": "LPDWORD" + }, + { + "name": "ItemBuffer", + "type": "PPDH_RAW_COUNTER_ITEM_W" + } + ], + "PdhCalculateCounterFromRawValue": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "dwFormat", + "type": "DWORD" + }, + { + "name": "rawValue1", + "type": "PPDH_RAW_COUNTER" + }, + { + "name": "rawValue2", + "type": "PPDH_RAW_COUNTER" + }, + { + "name": "fmtValue", + "type": "PPDH_FMT_COUNTERVALUE" + } + ], + "PdhComputeCounterStatistics": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "dwFormat", + "type": "DWORD" + }, + { + "name": "dwFirstEntry", + "type": "DWORD" + }, + { + "name": "dwNumEntries", + "type": "DWORD" + }, + { + "name": "lpRawValueArray", + "type": "PPDH_RAW_COUNTER" + }, + { + "name": "data", + "type": "PPDH_STATISTICS" + } + ], + "PdhGetCounterInfoW": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "bRetrieveExplainText", + "type": "BOOLEAN" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpBuffer", + "type": "PPDH_COUNTER_INFO_W" + } + ], + "PdhGetCounterInfoA": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "bRetrieveExplainText", + "type": "BOOLEAN" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpBuffer", + "type": "PPDH_COUNTER_INFO_A" + } + ], + "PdhSetCounterScaleFactor": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "lFactor", + "type": "LONG" + } + ], + "PdhConnectMachineW": [ + { + "name": "szMachineName", + "type": "LPCWSTR" + } + ], + "PdhConnectMachineA": [ + { + "name": "szMachineName", + "type": "LPCSTR" + } + ], + "PdhEnumMachinesW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "mszMachineList", + "type": "PZZWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhEnumMachinesA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "mszMachineList", + "type": "PZZSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhEnumObjectsW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "mszObjectList", + "type": "PZZWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "bRefresh", + "type": "BOOL" + } + ], + "PdhEnumObjectsA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "mszObjectList", + "type": "PZZSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "bRefresh", + "type": "BOOL" + } + ], + "PdhEnumObjectItemsW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szObjectName", + "type": "LPCWSTR" + }, + { + "name": "mszCounterList", + "type": "PZZWSTR" + }, + { + "name": "pcchCounterListLength", + "type": "LPDWORD" + }, + { + "name": "mszInstanceList", + "type": "PZZWSTR" + }, + { + "name": "pcchInstanceListLength", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhEnumObjectItemsA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szObjectName", + "type": "LPCSTR" + }, + { + "name": "mszCounterList", + "type": "PZZSTR" + }, + { + "name": "pcchCounterListLength", + "type": "LPDWORD" + }, + { + "name": "mszInstanceList", + "type": "PZZSTR" + }, + { + "name": "pcchInstanceListLength", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhMakeCounterPathW": [ + { + "name": "pCounterPathElements", + "type": "PPDH_COUNTER_PATH_ELEMENTS_W" + }, + { + "name": "szFullPathBuffer", + "type": "LPWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhMakeCounterPathA": [ + { + "name": "pCounterPathElements", + "type": "PPDH_COUNTER_PATH_ELEMENTS_A" + }, + { + "name": "szFullPathBuffer", + "type": "LPSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhParseCounterPathW": [ + { + "name": "szFullPathBuffer", + "type": "LPCWSTR" + }, + { + "name": "pCounterPathElements", + "type": "PPDH_COUNTER_PATH_ELEMENTS_W" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhParseCounterPathA": [ + { + "name": "szFullPathBuffer", + "type": "LPCSTR" + }, + { + "name": "pCounterPathElements", + "type": "PPDH_COUNTER_PATH_ELEMENTS_A" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhParseInstanceNameW": [ + { + "name": "szInstanceString", + "type": "LPCWSTR" + }, + { + "name": "szInstanceName", + "type": "LPWSTR" + }, + { + "name": "pcchInstanceNameLength", + "type": "LPDWORD" + }, + { + "name": "szParentName", + "type": "LPWSTR" + }, + { + "name": "pcchParentNameLength", + "type": "LPDWORD" + }, + { + "name": "lpIndex", + "type": "LPDWORD" + } + ], + "PdhParseInstanceNameA": [ + { + "name": "szInstanceString", + "type": "LPCSTR" + }, + { + "name": "szInstanceName", + "type": "LPSTR" + }, + { + "name": "pcchInstanceNameLength", + "type": "LPDWORD" + }, + { + "name": "szParentName", + "type": "LPSTR" + }, + { + "name": "pcchParentNameLength", + "type": "LPDWORD" + }, + { + "name": "lpIndex", + "type": "LPDWORD" + } + ], + "PdhValidatePathW": [ + { + "name": "szFullPathBuffer", + "type": "LPCWSTR" + } + ], + "PdhValidatePathA": [ + { + "name": "szFullPathBuffer", + "type": "LPCSTR" + } + ], + "PdhGetDefaultPerfObjectW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szDefaultObjectName", + "type": "LPWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfObjectA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szDefaultObjectName", + "type": "LPSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfCounterW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szObjectName", + "type": "LPCWSTR" + }, + { + "name": "szDefaultCounterName", + "type": "LPWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfCounterA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szObjectName", + "type": "LPCSTR" + }, + { + "name": "szDefaultCounterName", + "type": "LPSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhBrowseCountersW": [ + { + "name": "pBrowseDlgData", + "type": "PPDH_BROWSE_DLG_CONFIG_W" + } + ], + "PdhBrowseCountersA": [ + { + "name": "pBrowseDlgData", + "type": "PPDH_BROWSE_DLG_CONFIG_A" + } + ], + "PdhExpandCounterPathW": [ + { + "name": "szWildCardPath", + "type": "LPCWSTR" + }, + { + "name": "mszExpandedPathList", + "type": "PZZWSTR" + }, + { + "name": "pcchPathListLength", + "type": "LPDWORD" + } + ], + "PdhExpandCounterPathA": [ + { + "name": "szWildCardPath", + "type": "LPCSTR" + }, + { + "name": "mszExpandedPathList", + "type": "PZZSTR" + }, + { + "name": "pcchPathListLength", + "type": "LPDWORD" + } + ], + "PdhLookupPerfNameByIndexW": [ + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "dwNameIndex", + "type": "DWORD" + }, + { + "name": "szNameBuffer", + "type": "LPWSTR" + }, + { + "name": "pcchNameBufferSize", + "type": "LPDWORD" + } + ], + "PdhLookupPerfNameByIndexA": [ + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "dwNameIndex", + "type": "DWORD" + }, + { + "name": "szNameBuffer", + "type": "LPSTR" + }, + { + "name": "pcchNameBufferSize", + "type": "LPDWORD" + } + ], + "PdhLookupPerfIndexByNameW": [ + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szNameBuffer", + "type": "LPCWSTR" + }, + { + "name": "pdwIndex", + "type": "LPDWORD" + } + ], + "PdhLookupPerfIndexByNameA": [ + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szNameBuffer", + "type": "LPCSTR" + }, + { + "name": "pdwIndex", + "type": "LPDWORD" + } + ], + "PdhExpandWildCardPathA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "szWildCardPath", + "type": "LPCSTR" + }, + { + "name": "mszExpandedPathList", + "type": "PZZSTR" + }, + { + "name": "pcchPathListLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhExpandWildCardPathW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "szWildCardPath", + "type": "LPCWSTR" + }, + { + "name": "mszExpandedPathList", + "type": "PZZWSTR" + }, + { + "name": "pcchPathListLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhOpenLogW": [ + { + "name": "szLogFileName", + "type": "LPCWSTR" + }, + { + "name": "dwAccessFlags", + "type": "DWORD" + }, + { + "name": "lpdwLogType", + "type": "LPDWORD" + }, + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "dwMaxSize", + "type": "DWORD" + }, + { + "name": "szUserCaption", + "type": "LPCWSTR" + }, + { + "name": "phLog", + "type": "PDH_HLOG" + } + ], + "PdhOpenLogA": [ + { + "name": "szLogFileName", + "type": "LPCSTR" + }, + { + "name": "dwAccessFlags", + "type": "DWORD" + }, + { + "name": "lpdwLogType", + "type": "LPDWORD" + }, + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "dwMaxSize", + "type": "DWORD" + }, + { + "name": "szUserCaption", + "type": "LPCSTR" + }, + { + "name": "phLog", + "type": "PDH_HLOG" + } + ], + "PdhUpdateLogW": [ + { + "name": "hLog", + "type": "PDH_HLOG" + }, + { + "name": "szUserString", + "type": "LPCWSTR" + } + ], + "PdhUpdateLogA": [ + { + "name": "hLog", + "type": "PDH_HLOG" + }, + { + "name": "szUserString", + "type": "LPCSTR" + } + ], + "PdhUpdateLogFileCatalog": [ + { + "name": "hLog", + "type": "PDH_HLOG" + } + ], + "PdhGetLogFileSize": [ + { + "name": "hLog", + "type": "PDH_HLOG" + }, + { + "name": "llSize", + "type": "LONGLONG" + } + ], + "PdhCloseLog": [ + { + "name": "hLog", + "type": "PDH_HLOG" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhSelectDataSourceW": [ + { + "name": "hWndOwner", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "szDataSource", + "type": "LPWSTR" + }, + { + "name": "pcchBufferLength", + "type": "LPDWORD" + } + ], + "PdhSelectDataSourceA": [ + { + "name": "hWndOwner", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "szDataSource", + "type": "LPSTR" + }, + { + "name": "pcchBufferLength", + "type": "LPDWORD" + } + ], + "PdhIsRealTimeQuery": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + } + ], + "PdhSetQueryTimeRange": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "pInfo", + "type": "PPDH_TIME_INFO" + } + ], + "PdhGetDataSourceTimeRangeW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "pdwNumEntries", + "type": "LPDWORD" + }, + { + "name": "pInfo", + "type": "PPDH_TIME_INFO" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDataSourceTimeRangeA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "pdwNumEntries", + "type": "LPDWORD" + }, + { + "name": "pInfo", + "type": "PPDH_TIME_INFO" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + } + ], + "PdhCollectQueryDataEx": [ + { + "name": "hQuery", + "type": "PDH_HQUERY" + }, + { + "name": "dwIntervalTime", + "type": "DWORD" + }, + { + "name": "hNewDataEvent", + "type": "HANDLE" + } + ], + "PdhFormatFromRawValue": [ + { + "name": "dwCounterType", + "type": "DWORD" + }, + { + "name": "dwFormat", + "type": "DWORD" + }, + { + "name": "pTimeBase", + "type": "LONGLONG" + }, + { + "name": "pRawValue1", + "type": "PPDH_RAW_COUNTER" + }, + { + "name": "pRawValue2", + "type": "PPDH_RAW_COUNTER" + }, + { + "name": "pFmtValue", + "type": "PPDH_FMT_COUNTERVALUE" + } + ], + "PdhGetCounterTimeBase": [ + { + "name": "hCounter", + "type": "PDH_HCOUNTER" + }, + { + "name": "pTimeBase", + "type": "LONGLONG" + } + ], + "PdhReadRawLogRecord": [ + { + "name": "hLog", + "type": "PDH_HLOG" + }, + { + "name": "ftRecord", + "type": "FILETIME" + }, + { + "name": "pRawLogRecord", + "type": "PPDH_RAW_LOG_RECORD" + }, + { + "name": "pdwBufferLength", + "type": "LPDWORD" + } + ], + "PdhSetDefaultRealTimeDataSource": [ + { + "name": "dwDataSourceId", + "type": "DWORD" + } + ], + "PdhBindInputDataSourceW": [ + { + "name": "phDataSource", + "type": "PDH_HLOG" + }, + { + "name": "LogFileNameList", + "type": "LPCWSTR" + } + ], + "PdhBindInputDataSourceA": [ + { + "name": "phDataSource", + "type": "PDH_HLOG" + }, + { + "name": "LogFileNameList", + "type": "LPCSTR" + } + ], + "PdhOpenQueryH": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "dwUserData", + "type": "DWORD_PTR" + }, + { + "name": "phQuery", + "type": "PDH_HQUERY" + } + ], + "PdhEnumMachinesHW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "mszMachineList", + "type": "PZZWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhEnumMachinesHA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "mszMachineList", + "type": "PZZSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhEnumObjectsHW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "mszObjectList", + "type": "PZZWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "bRefresh", + "type": "BOOL" + } + ], + "PdhEnumObjectsHA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "mszObjectList", + "type": "PZZSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "bRefresh", + "type": "BOOL" + } + ], + "PdhEnumObjectItemsHW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szObjectName", + "type": "LPCWSTR" + }, + { + "name": "mszCounterList", + "type": "PZZWSTR" + }, + { + "name": "pcchCounterListLength", + "type": "LPDWORD" + }, + { + "name": "mszInstanceList", + "type": "PZZWSTR" + }, + { + "name": "pcchInstanceListLength", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhEnumObjectItemsHA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szObjectName", + "type": "LPCSTR" + }, + { + "name": "mszCounterList", + "type": "PZZSTR" + }, + { + "name": "pcchCounterListLength", + "type": "LPDWORD" + }, + { + "name": "mszInstanceList", + "type": "PZZSTR" + }, + { + "name": "pcchInstanceListLength", + "type": "LPDWORD" + }, + { + "name": "dwDetailLevel", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhExpandWildCardPathHW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szWildCardPath", + "type": "LPCWSTR" + }, + { + "name": "mszExpandedPathList", + "type": "PZZWSTR" + }, + { + "name": "pcchPathListLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhExpandWildCardPathHA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szWildCardPath", + "type": "LPCSTR" + }, + { + "name": "mszExpandedPathList", + "type": "PZZSTR" + }, + { + "name": "pcchPathListLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PdhGetDataSourceTimeRangeH": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "pdwNumEntries", + "type": "LPDWORD" + }, + { + "name": "pInfo", + "type": "PPDH_TIME_INFO" + }, + { + "name": "pdwBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfObjectHW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szDefaultObjectName", + "type": "LPWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfObjectHA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szDefaultObjectName", + "type": "LPSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfCounterHW": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCWSTR" + }, + { + "name": "szObjectName", + "type": "LPCWSTR" + }, + { + "name": "szDefaultCounterName", + "type": "LPWSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhGetDefaultPerfCounterHA": [ + { + "name": "hDataSource", + "type": "PDH_HLOG" + }, + { + "name": "szMachineName", + "type": "LPCSTR" + }, + { + "name": "szObjectName", + "type": "LPCSTR" + }, + { + "name": "szDefaultCounterName", + "type": "LPSTR" + }, + { + "name": "pcchBufferSize", + "type": "LPDWORD" + } + ], + "PdhBrowseCountersHW": [ + { + "name": "pBrowseDlgData", + "type": "PPDH_BROWSE_DLG_CONFIG_HW" + } + ], + "PdhBrowseCountersHA": [ + { + "name": "pBrowseDlgData", + "type": "PPDH_BROWSE_DLG_CONFIG_HA" + } + ], + "PdhEnumLogSetNamesW": [ + { + "name": "szDataSource", + "type": "LPCWSTR" + }, + { + "name": "mszDataSetNameList", + "type": "PZZWSTR" + }, + { + "name": "pcchBufferLength", + "type": "LPDWORD" + } + ], + "PdhEnumLogSetNamesA": [ + { + "name": "szDataSource", + "type": "LPCSTR" + }, + { + "name": "mszDataSetNameList", + "type": "PZZSTR" + }, + { + "name": "pcchBufferLength", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/peerdist.json b/qiling/extensions/windows_sdk/peerdist.json new file mode 100644 index 000000000..ce2d642bd --- /dev/null +++ b/qiling/extensions/windows_sdk/peerdist.json @@ -0,0 +1,438 @@ +{ + "PeerDistStartup": [ + { + "name": "dwVersionRequested", + "type": "DWORD" + }, + { + "name": "phPeerDist", + "type": "PPEERDIST_INSTANCE_HANDLE" + }, + { + "name": "pdwSupportedVersion", + "type": "PDWORD" + } + ], + "PeerDistShutdown": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + } + ], + "PeerDistGetStatus": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "pPeerDistStatus", + "type": "PEERDIST_STATUS" + } + ], + "PeerDistRegisterForStatusChangeNotification": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hCompletionPort", + "type": "HANDLE" + }, + { + "name": "ulCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "pPeerDistStatus", + "type": "PEERDIST_STATUS" + } + ], + "PeerDistUnregisterForStatusChangeNotification": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + } + ], + "PeerDistServerPublishStream": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "cbContentIdentifier", + "type": "DWORD" + }, + { + "name": "pContentIdentifier", + "type": "PBYTE" + }, + { + "name": "cbContentLength", + "type": "ULONGLONG" + }, + { + "name": "pPublishOptions", + "type": "PCPEERDIST_PUBLICATION_OPTIONS" + }, + { + "name": "hCompletionPort", + "type": "HANDLE" + }, + { + "name": "ulCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "phStream", + "type": "PPEERDIST_STREAM_HANDLE" + } + ], + "PeerDistServerPublishAddToStream": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hStream", + "type": "PEERDIST_STREAM_HANDLE" + }, + { + "name": "cbNumberOfBytes", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistServerPublishCompleteStream": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hStream", + "type": "PEERDIST_STREAM_HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistServerCloseStreamHandle": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hStream", + "type": "PEERDIST_STREAM_HANDLE" + } + ], + "PeerDistServerUnpublish": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "cbContentIdentifier", + "type": "DWORD" + }, + { + "name": "pContentIdentifier", + "type": "PBYTE" + } + ], + "PeerDistServerOpenContentInformation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "cbContentIdentifier", + "type": "DWORD" + }, + { + "name": "pContentIdentifier", + "type": "PBYTE" + }, + { + "name": "ullContentOffset", + "type": "ULONGLONG" + }, + { + "name": "cbContentLength", + "type": "ULONGLONG" + }, + { + "name": "hCompletionPort", + "type": "HANDLE" + }, + { + "name": "ulCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "phContentInfo", + "type": "PPEERDIST_CONTENTINFO_HANDLE" + } + ], + "PeerDistServerRetrieveContentInformation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentInfo", + "type": "PEERDIST_CONTENTINFO_HANDLE" + }, + { + "name": "cbMaxNumberOfBytes", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistServerCloseContentInformation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentInfo", + "type": "PEERDIST_CONTENTINFO_HANDLE" + } + ], + "PeerDistServerCancelAsyncOperation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "cbContentIdentifier", + "type": "DWORD" + }, + { + "name": "pContentIdentifier", + "type": "PBYTE" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientOpenContent": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "pContentTag", + "type": "PCPEERDIST_CONTENT_TAG" + }, + { + "name": "hCompletionPort", + "type": "HANDLE" + }, + { + "name": "ulCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "phContentHandle", + "type": "PPEERDIST_CONTENT_HANDLE" + } + ], + "PeerDistClientCloseContent": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + } + ], + "PeerDistClientAddContentInformation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "cbNumberOfBytes", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientCompleteContentInformation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientAddData": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "cbNumberOfBytes", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientBlockRead": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "cbMaxNumberOfBytes", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "dwTimeoutInMilliseconds", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientStreamRead": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "cbMaxNumberOfBytes", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "dwTimeoutInMilliseconds", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientFlushContent": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "pContentTag", + "type": "PCPEERDIST_CONTENT_TAG" + }, + { + "name": "hCompletionPort", + "type": "HANDLE" + }, + { + "name": "ulCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientCancelAsyncOperation": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "pOverlapped", + "type": "LPOVERLAPPED" + } + ], + "PeerDistClientGetInformationByHandle": [ + { + "name": "hPeerDist", + "type": "PEERDIST_INSTANCE_HANDLE" + }, + { + "name": "hContentHandle", + "type": "PEERDIST_CONTENT_HANDLE" + }, + { + "name": "PeerDistClientInfoClass", + "type": "PEERDIST_CLIENT_INFO_BY_HANDLE_CLASS" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "lpInformation", + "type": "LPVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/perflib.json b/qiling/extensions/windows_sdk/perflib.json new file mode 100644 index 000000000..248960a6a --- /dev/null +++ b/qiling/extensions/windows_sdk/perflib.json @@ -0,0 +1,372 @@ +{ + "PerfStartProvider": [ + { + "name": "ProviderGuid", + "type": "LPGUID" + }, + { + "name": "ControlCallback", + "type": "PERFLIBREQUEST" + }, + { + "name": "Provider", + "type": "PHANDLE" + } + ], + "PerfStartProviderEx": [ + { + "name": "ProviderGuid", + "type": "LPGUID" + }, + { + "name": "ProviderContext", + "type": "PPERF_PROVIDER_CONTEXT" + }, + { + "name": "Provider", + "type": "PHANDLE" + } + ], + "PerfStopProvider": [ + { + "name": "ProviderHandle", + "type": "HANDLE" + } + ], + "PerfSetCounterSetInfo": [ + { + "name": "ProviderHandle", + "type": "HANDLE" + }, + { + "name": "Template", + "type": "PPERF_COUNTERSET_INFO" + }, + { + "name": "TemplateSize", + "type": "ULONG" + } + ], + "PerfCreateInstance": [ + { + "name": "ProviderHandle", + "type": "HANDLE" + }, + { + "name": "CounterSetGuid", + "type": "LPCGUID" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Id", + "type": "ULONG" + } + ], + "PerfDeleteInstance": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "InstanceBlock", + "type": "PPERF_COUNTERSET_INSTANCE" + } + ], + "PerfQueryInstance": [ + { + "name": "ProviderHandle", + "type": "HANDLE" + }, + { + "name": "CounterSetGuid", + "type": "LPCGUID" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Id", + "type": "ULONG" + } + ], + "PerfSetCounterRefValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Address", + "type": "PVOID" + } + ], + "PerfSetULongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONG" + } + ], + "PerfSetULongLongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONGLONG" + } + ], + "PerfIncrementULongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONG" + } + ], + "PerfIncrementULongLongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONGLONG" + } + ], + "PerfDecrementULongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONG" + } + ], + "PerfDecrementULongLongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONGLONG" + } + ], + "PerfEnumerateCounterSet": [ + { + "name": "szMachine", + "type": "LPCWSTR" + }, + { + "name": "pCounterSetIds", + "type": "LPGUID" + }, + { + "name": "cCounterSetIds", + "type": "DWORD" + }, + { + "name": "pcCounterSetIdsActual", + "type": "LPDWORD" + } + ], + "PerfEnumerateCounterSetInstances": [ + { + "name": "szMachine", + "type": "LPCWSTR" + }, + { + "name": "pCounterSetId", + "type": "LPCGUID" + }, + { + "name": "pInstances", + "type": "PPERF_INSTANCE_HEADER" + }, + { + "name": "cbInstances", + "type": "DWORD" + }, + { + "name": "pcbInstancesActual", + "type": "LPDWORD" + } + ], + "PerfQueryCounterSetRegistrationInfo": [ + { + "name": "szMachine", + "type": "LPCWSTR" + }, + { + "name": "pCounterSetId", + "type": "LPCGUID" + }, + { + "name": "requestCode", + "type": "PerfRegInfoType" + }, + { + "name": "requestLangId", + "type": "DWORD" + }, + { + "name": "pbRegInfo", + "type": "LPBYTE" + }, + { + "name": "cbRegInfo", + "type": "DWORD" + }, + { + "name": "pcbRegInfoActual", + "type": "LPDWORD" + } + ], + "PerfOpenQueryHandle": [ + { + "name": "szMachine", + "type": "LPCWSTR" + }, + { + "name": "phQuery", + "type": "HANDLE" + } + ], + "PerfCloseQueryHandle": [ + { + "name": "hQuery", + "type": "HANDLE" + } + ], + "PerfQueryCounterInfo": [ + { + "name": "hQuery", + "type": "HANDLE" + }, + { + "name": "pCounters", + "type": "PPERF_COUNTER_IDENTIFIER" + }, + { + "name": "cbCounters", + "type": "DWORD" + }, + { + "name": "pcbCountersActual", + "type": "LPDWORD" + } + ], + "PerfQueryCounterData": [ + { + "name": "hQuery", + "type": "HANDLE" + }, + { + "name": "pCounterBlock", + "type": "PPERF_DATA_HEADER" + }, + { + "name": "cbCounterBlock", + "type": "DWORD" + }, + { + "name": "pcbCounterBlockActual", + "type": "LPDWORD" + } + ], + "PerfAddCounters": [ + { + "name": "hQuery", + "type": "HANDLE" + }, + { + "name": "pCounters", + "type": "PPERF_COUNTER_IDENTIFIER" + }, + { + "name": "cbCounters", + "type": "DWORD" + } + ], + "PerfDeleteCounters": [ + { + "name": "hQuery", + "type": "HANDLE" + }, + { + "name": "pCounters", + "type": "PPERF_COUNTER_IDENTIFIER" + }, + { + "name": "cbCounters", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/physicalmonitorenumerationapi.json b/qiling/extensions/windows_sdk/physicalmonitorenumerationapi.json new file mode 100644 index 000000000..329e3e714 --- /dev/null +++ b/qiling/extensions/windows_sdk/physicalmonitorenumerationapi.json @@ -0,0 +1,66 @@ +{ + "GetNumberOfPhysicalMonitorsFromHMONITOR": [ + { + "name": "hMonitor", + "type": "HMONITOR" + }, + { + "name": "pdwNumberOfPhysicalMonitors", + "type": "LPDWORD" + } + ], + "GetNumberOfPhysicalMonitorsFromIDirect3DDevice9": [ + { + "name": "pDirect3DDevice9", + "type": "IDirect3DDevice9" + }, + { + "name": "pdwNumberOfPhysicalMonitors", + "type": "LPDWORD" + } + ], + "GetPhysicalMonitorsFromHMONITOR": [ + { + "name": "hMonitor", + "type": "HMONITOR" + }, + { + "name": "dwPhysicalMonitorArraySize", + "type": "DWORD" + }, + { + "name": "pPhysicalMonitorArray", + "type": "LPPHYSICAL_MONITOR" + } + ], + "GetPhysicalMonitorsFromIDirect3DDevice9": [ + { + "name": "pDirect3DDevice9", + "type": "IDirect3DDevice9" + }, + { + "name": "dwPhysicalMonitorArraySize", + "type": "DWORD" + }, + { + "name": "pPhysicalMonitorArray", + "type": "LPPHYSICAL_MONITOR" + } + ], + "DestroyPhysicalMonitor": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "DestroyPhysicalMonitors": [ + { + "name": "dwPhysicalMonitorArraySize", + "type": "DWORD" + }, + { + "name": "pPhysicalMonitorArray", + "type": "LPPHYSICAL_MONITOR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/powerbase.json b/qiling/extensions/windows_sdk/powerbase.json new file mode 100644 index 000000000..391e32679 --- /dev/null +++ b/qiling/extensions/windows_sdk/powerbase.json @@ -0,0 +1,56 @@ +{ + "CallNtPowerInformation": [ + { + "name": "InformationLevel", + "type": "POWER_INFORMATION_LEVEL" + }, + { + "name": "InputBuffer", + "type": "PVOID" + }, + { + "name": "InputBufferLength", + "type": "ULONG" + }, + { + "name": "OutputBuffer", + "type": "PVOID" + }, + { + "name": "OutputBufferLength", + "type": "ULONG" + } + ], + "GetPwrCapabilities": [ + { + "name": "lpspc", + "type": "PSYSTEM_POWER_CAPABILITIES" + } + ], + "PowerDeterminePlatformRoleEx": [ + { + "name": "Version", + "type": "ULONG" + } + ], + "PowerRegisterSuspendResumeNotification": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Recipient", + "type": "HANDLE" + }, + { + "name": "RegistrationHandle", + "type": "PHPOWERNOTIFY" + } + ], + "PowerUnregisterSuspendResumeNotification": [ + { + "name": "RegistrationHandle", + "type": "HPOWERNOTIFY" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/powersetting.json b/qiling/extensions/windows_sdk/powersetting.json new file mode 100644 index 000000000..0bed5d151 --- /dev/null +++ b/qiling/extensions/windows_sdk/powersetting.json @@ -0,0 +1,174 @@ +{ + "PowerReadACValue": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "LPBYTE" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadDCValue": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerWriteACValueIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "AcValueIndex", + "type": "DWORD" + } + ], + "PowerWriteDCValueIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DcValueIndex", + "type": "DWORD" + } + ], + "PowerGetActiveScheme": [ + { + "name": "UserRootPowerKey", + "type": "HKEY" + }, + { + "name": "ActivePolicyGuid", + "type": "GUID" + } + ], + "PowerSetActiveScheme": [ + { + "name": "UserRootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + } + ], + "PowerSettingRegisterNotification": [ + { + "name": "SettingGuid", + "type": "LPCGUID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Recipient", + "type": "HANDLE" + }, + { + "name": "RegistrationHandle", + "type": "PHPOWERNOTIFY" + } + ], + "PowerSettingUnregisterNotification": [ + { + "name": "RegistrationHandle", + "type": "HPOWERNOTIFY" + } + ], + "PowerRegisterForEffectivePowerModeNotifications": [ + { + "name": "Version", + "type": "ULONG" + }, + { + "name": "Callback", + "type": "EFFECTIVE_POWER_MODE_CALLBACK" + }, + { + "name": "Context", + "type": "void" + }, + { + "name": "RegistrationHandle", + "type": "void" + } + ], + "PowerUnregisterFromEffectivePowerModeNotifications": [ + { + "name": "RegistrationHandle", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/powrprof.json b/qiling/extensions/windows_sdk/powrprof.json new file mode 100644 index 000000000..7b52bd22b --- /dev/null +++ b/qiling/extensions/windows_sdk/powrprof.json @@ -0,0 +1,1012 @@ +{ + "GetPwrDiskSpindownRange": [ + { + "name": "puiMax", + "type": "PUINT" + }, + { + "name": "puiMin", + "type": "PUINT" + } + ], + "EnumPwrSchemes": [ + { + "name": "lpfn", + "type": "PWRSCHEMESENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "ReadGlobalPwrPolicy": [ + { + "name": "pGlobalPowerPolicy", + "type": "PGLOBAL_POWER_POLICY" + } + ], + "ReadPwrScheme": [ + { + "name": "uiID", + "type": "UINT" + }, + { + "name": "pPowerPolicy", + "type": "PPOWER_POLICY" + } + ], + "WritePwrScheme": [ + { + "name": "puiID", + "type": "PUINT" + }, + { + "name": "lpszSchemeName", + "type": "LPCWSTR" + }, + { + "name": "lpszDescription", + "type": "LPCWSTR" + }, + { + "name": "lpScheme", + "type": "PPOWER_POLICY" + } + ], + "WriteGlobalPwrPolicy": [ + { + "name": "pGlobalPowerPolicy", + "type": "PGLOBAL_POWER_POLICY" + } + ], + "DeletePwrScheme": [ + { + "name": "uiID", + "type": "UINT" + } + ], + "GetActivePwrScheme": [ + { + "name": "puiID", + "type": "PUINT" + } + ], + "SetActivePwrScheme": [ + { + "name": "uiID", + "type": "UINT" + }, + { + "name": "pGlobalPowerPolicy", + "type": "PGLOBAL_POWER_POLICY" + }, + { + "name": "pPowerPolicy", + "type": "PPOWER_POLICY" + } + ], + "IsPwrSuspendAllowed": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsPwrHibernateAllowed": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsPwrShutdownAllowed": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetSuspendState": [ + { + "name": "bHibernate", + "type": "BOOLEAN" + }, + { + "name": "bForce", + "type": "BOOLEAN" + }, + { + "name": "bWakeupEventsDisabled", + "type": "BOOLEAN" + } + ], + "GetCurrentPowerPolicies": [ + { + "name": "pGlobalPowerPolicy", + "type": "PGLOBAL_POWER_POLICY" + }, + { + "name": "pPowerPolicy", + "type": "PPOWER_POLICY" + } + ], + "CanUserWritePwrScheme": [ + { + "name": "VOID", + "type": "void" + } + ], + "ReadProcessorPwrScheme": [ + { + "name": "uiID", + "type": "UINT" + }, + { + "name": "pMachineProcessorPowerPolicy", + "type": "PMACHINE_PROCESSOR_POWER_POLICY" + } + ], + "WriteProcessorPwrScheme": [ + { + "name": "uiID", + "type": "UINT" + }, + { + "name": "pMachineProcessorPowerPolicy", + "type": "PMACHINE_PROCESSOR_POWER_POLICY" + } + ], + "PowerIsSettingRangeDefined": [ + { + "name": "SubKeyGuid", + "type": "GUID" + }, + { + "name": "SettingGuid", + "type": "GUID" + } + ], + "PowerSettingAccessCheckEx": [ + { + "name": "AccessFlags", + "type": "POWER_DATA_ACCESSOR" + }, + { + "name": "PowerGuid", + "type": "GUID" + }, + { + "name": "AccessType", + "type": "REGSAM" + } + ], + "PowerSettingAccessCheck": [ + { + "name": "AccessFlags", + "type": "POWER_DATA_ACCESSOR" + }, + { + "name": "PowerGuid", + "type": "GUID" + } + ], + "PowerReadACValueIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "AcValueIndex", + "type": "LPDWORD" + } + ], + "PowerReadDCValueIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DcValueIndex", + "type": "LPDWORD" + } + ], + "PowerReadFriendlyName": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadDescription": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadPossibleValue": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "PULONG" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadPossibleFriendlyName": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadPossibleDescription": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadValueMin": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueMinimum", + "type": "LPDWORD" + } + ], + "PowerReadValueMax": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueMaximum", + "type": "LPDWORD" + } + ], + "PowerReadValueIncrement": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueIncrement", + "type": "LPDWORD" + } + ], + "PowerReadValueUnitsSpecifier": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadACDefaultIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemePersonalityGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "AcDefaultIndex", + "type": "LPDWORD" + } + ], + "PowerReadDCDefaultIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemePersonalityGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DcDefaultIndex", + "type": "LPDWORD" + } + ], + "PowerReadIconResourceSpecifier": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadSettingAttributes": [ + { + "name": "SubGroupGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + } + ], + "PowerWriteFriendlyName": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWriteDescription": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWritePossibleValue": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "ULONG" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWritePossibleFriendlyName": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWritePossibleDescription": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWriteValueMin": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueMinimum", + "type": "DWORD" + } + ], + "PowerWriteValueMax": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueMaximum", + "type": "DWORD" + } + ], + "PowerWriteValueIncrement": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueIncrement", + "type": "DWORD" + } + ], + "PowerWriteValueUnitsSpecifier": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWriteACDefaultIndex": [ + { + "name": "RootSystemPowerKey", + "type": "HKEY" + }, + { + "name": "SchemePersonalityGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DefaultAcIndex", + "type": "DWORD" + } + ], + "PowerWriteDCDefaultIndex": [ + { + "name": "RootSystemPowerKey", + "type": "HKEY" + }, + { + "name": "SchemePersonalityGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DefaultDcIndex", + "type": "DWORD" + } + ], + "PowerWriteIconResourceSpecifier": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWriteSettingAttributes": [ + { + "name": "SubGroupGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Attributes", + "type": "DWORD" + } + ], + "PowerDuplicateScheme": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SourceSchemeGuid", + "type": "GUID" + }, + { + "name": "DestinationSchemeGuid", + "type": "GUID" + } + ], + "PowerImportPowerScheme": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "ImportFileNamePath", + "type": "LPCWSTR" + }, + { + "name": "DestinationSchemeGuid", + "type": "GUID" + } + ], + "PowerDeleteScheme": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + } + ], + "PowerRemovePowerSetting": [ + { + "name": "PowerSettingSubKeyGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + } + ], + "PowerCreateSetting": [ + { + "name": "RootSystemPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + } + ], + "PowerCreatePossibleSetting": [ + { + "name": "RootSystemPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + } + ], + "PowerEnumerate": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "AccessFlags", + "type": "POWER_DATA_ACCESSOR" + }, + { + "name": "Index", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerCanRestoreIndividualDefaultPowerScheme": [ + { + "name": "SchemeGuid", + "type": "GUID" + } + ], + "PowerRestoreIndividualDefaultPowerScheme": [ + { + "name": "SchemeGuid", + "type": "GUID" + } + ], + "PowerRestoreDefaultPowerSchemes": [ + { + "name": "VOID", + "type": "void" + } + ], + "PowerReplaceDefaultPowerSchemes": [ + { + "name": "VOID", + "type": "void" + } + ], + "PowerDeterminePlatformRole": [ + { + "name": "VOID", + "type": "void" + } + ], + "DevicePowerEnumDevices": [ + { + "name": "QueryIndex", + "type": "ULONG" + }, + { + "name": "QueryInterpretationFlags", + "type": "ULONG" + }, + { + "name": "QueryFlags", + "type": "ULONG" + }, + { + "name": "pReturnBuffer", + "type": "PBYTE" + }, + { + "name": "pBufferSize", + "type": "PULONG" + } + ], + "DevicePowerSetDeviceState": [ + { + "name": "DeviceDescription", + "type": "LPCWSTR" + }, + { + "name": "SetFlags", + "type": "ULONG" + }, + { + "name": "SetData", + "type": "PVOID" + } + ], + "DevicePowerOpen": [ + { + "name": "DebugMask", + "type": "ULONG" + } + ], + "DevicePowerClose": [ + { + "name": "VOID", + "type": "void" + } + ], + "PowerReportThermalEvent": [ + { + "name": "Event", + "type": "PTHERMAL_EVENT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/prnasnot.json b/qiling/extensions/windows_sdk/prnasnot.json new file mode 100644 index 000000000..ee50d993d --- /dev/null +++ b/qiling/extensions/windows_sdk/prnasnot.json @@ -0,0 +1,60 @@ +{ + "RegisterForPrintAsyncNotifications": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "pNotificationType", + "type": "PrintAsyncNotificationType" + }, + { + "name": "eUserFilter", + "type": "PrintAsyncNotifyUserFilter" + }, + { + "name": "eConversationStyle", + "type": "PrintAsyncNotifyConversationStyle" + }, + { + "name": "pCallback", + "type": "IPrintAsyncNotifyCallback" + }, + { + "name": "phNotify", + "type": "HANDLE" + } + ], + "UnRegisterForPrintAsyncNotifications": [ + { + "name": "VOID", + "type": "HANDLE" + } + ], + "CreatePrintAsyncNotifyChannel": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "pNotificationType", + "type": "PrintAsyncNotificationType" + }, + { + "name": "eUserFilter", + "type": "PrintAsyncNotifyUserFilter" + }, + { + "name": "eConversationStyle", + "type": "PrintAsyncNotifyConversationStyle" + }, + { + "name": "pCallback", + "type": "IPrintAsyncNotifyCallback" + }, + { + "name": "ppIAsynchNotification", + "type": "IPrintAsyncNotifyChannel" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/prntvpt.json b/qiling/extensions/windows_sdk/prntvpt.json new file mode 100644 index 000000000..12411298a --- /dev/null +++ b/qiling/extensions/windows_sdk/prntvpt.json @@ -0,0 +1,196 @@ +{ + "PTQuerySchemaVersionSupport": [ + { + "name": "pszPrinterName", + "type": "PCWSTR" + }, + { + "name": "pMaxVersion", + "type": "DWORD" + } + ], + "PTOpenProvider": [ + { + "name": "pszPrinterName", + "type": "PCWSTR" + }, + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "phProvider", + "type": "HPTPROVIDER" + } + ], + "PTOpenProviderEx": [ + { + "name": "pszPrinterName", + "type": "PCWSTR" + }, + { + "name": "dwMaxVersion", + "type": "DWORD" + }, + { + "name": "dwPrefVersion", + "type": "DWORD" + }, + { + "name": "phProvider", + "type": "HPTPROVIDER" + }, + { + "name": "pUsedVersion", + "type": "DWORD" + } + ], + "PTCloseProvider": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + } + ], + "PTReleaseMemory": [ + { + "name": "pBuffer", + "type": "PVOID" + } + ], + "PTGetPrintCapabilities": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + }, + { + "name": "pPrintTicket", + "type": "IStream" + }, + { + "name": "pCapabilities", + "type": "IStream" + }, + { + "name": "pbstrErrorMessage", + "type": "BSTR" + } + ], + "PTGetPrintDeviceCapabilities": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + }, + { + "name": "pPrintTicket", + "type": "IStream" + }, + { + "name": "pDeviceCapabilities", + "type": "IStream" + }, + { + "name": "pbstrErrorMessage", + "type": "BSTR" + } + ], + "PTGetPrintDeviceResources": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + }, + { + "name": "pszLocaleName", + "type": "LPCWSTR" + }, + { + "name": "pPrintTicket", + "type": "IStream" + }, + { + "name": "pDeviceResources", + "type": "IStream" + }, + { + "name": "pbstrErrorMessage", + "type": "BSTR" + } + ], + "PTMergeAndValidatePrintTicket": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + }, + { + "name": "pBaseTicket", + "type": "IStream" + }, + { + "name": "pDeltaTicket", + "type": "IStream" + }, + { + "name": "scope", + "type": "EPrintTicketScope" + }, + { + "name": "pResultTicket", + "type": "IStream" + }, + { + "name": "pbstrErrorMessage", + "type": "BSTR" + } + ], + "PTConvertPrintTicketToDevMode": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + }, + { + "name": "pPrintTicket", + "type": "IStream" + }, + { + "name": "baseDevmodeType", + "type": "EDefaultDevmodeType" + }, + { + "name": "scope", + "type": "EPrintTicketScope" + }, + { + "name": "pcbDevmode", + "type": "ULONG" + }, + { + "name": "ppDevmode", + "type": "PDEVMODE" + }, + { + "name": "pbstrErrorMessage", + "type": "BSTR" + } + ], + "PTConvertDevModeToPrintTicket": [ + { + "name": "hProvider", + "type": "HPTPROVIDER" + }, + { + "name": "cbDevmode", + "type": "ULONG" + }, + { + "name": "pDevmode", + "type": "PDEVMODE" + }, + { + "name": "scope", + "type": "EPrintTicketScope" + }, + { + "name": "pPrintTicket", + "type": "IStream" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/processenv.json b/qiling/extensions/windows_sdk/processenv.json new file mode 100644 index 000000000..bc510812a --- /dev/null +++ b/qiling/extensions/windows_sdk/processenv.json @@ -0,0 +1,150 @@ +{ + "SetEnvironmentStringsW": [ + { + "name": "NewEnvironment", + "type": "LPWCH" + } + ], + "SetStdHandleEx": [ + { + "name": "nStdHandle", + "type": "DWORD" + }, + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "phPrevValue", + "type": "PHANDLE" + } + ], + "GetCommandLineA": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCommandLineW": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetEnvironmentStrings": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetEnvironmentStringsW": [ + { + "name": "VOID", + "type": "void" + } + ], + "FreeEnvironmentStringsA": [ + { + "name": "penv", + "type": "LPCH" + } + ], + "FreeEnvironmentStringsW": [ + { + "name": "penv", + "type": "LPWCH" + } + ], + "ExpandEnvironmentStringsA": [ + { + "name": "lpSrc", + "type": "LPCSTR" + }, + { + "name": "lpDst", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "ExpandEnvironmentStringsW": [ + { + "name": "lpSrc", + "type": "LPCWSTR" + }, + { + "name": "lpDst", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "SearchPathW": [ + { + "name": "lpPath", + "type": "LPCWSTR" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpExtension", + "type": "LPCWSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "lpFilePart", + "type": "LPWSTR" + } + ], + "SearchPathA": [ + { + "name": "lpPath", + "type": "LPCSTR" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpExtension", + "type": "LPCSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "lpFilePart", + "type": "LPSTR" + } + ], + "NeedCurrentDirectoryForExePathA": [ + { + "name": "ExeName", + "type": "LPCSTR" + } + ], + "NeedCurrentDirectoryForExePathW": [ + { + "name": "ExeName", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/processsnapshot.json b/qiling/extensions/windows_sdk/processsnapshot.json new file mode 100644 index 000000000..aa9859605 --- /dev/null +++ b/qiling/extensions/windows_sdk/processsnapshot.json @@ -0,0 +1,134 @@ +{ + "PssCaptureSnapshot": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "CaptureFlags", + "type": "PSS_CAPTURE_FLAGS" + }, + { + "name": "ThreadContextFlags", + "type": "DWORD" + }, + { + "name": "SnapshotHandle", + "type": "HPSS" + } + ], + "PssFreeSnapshot": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "SnapshotHandle", + "type": "HPSS" + } + ], + "PssQuerySnapshot": [ + { + "name": "SnapshotHandle", + "type": "HPSS" + }, + { + "name": "InformationClass", + "type": "PSS_QUERY_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "void" + }, + { + "name": "BufferLength", + "type": "DWORD" + } + ], + "PssWalkSnapshot": [ + { + "name": "SnapshotHandle", + "type": "HPSS" + }, + { + "name": "InformationClass", + "type": "PSS_WALK_INFORMATION_CLASS" + }, + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + }, + { + "name": "Buffer", + "type": "void" + }, + { + "name": "BufferLength", + "type": "DWORD" + } + ], + "PssDuplicateSnapshot": [ + { + "name": "SourceProcessHandle", + "type": "HANDLE" + }, + { + "name": "SnapshotHandle", + "type": "HPSS" + }, + { + "name": "TargetProcessHandle", + "type": "HANDLE" + }, + { + "name": "TargetSnapshotHandle", + "type": "HPSS" + }, + { + "name": "Flags", + "type": "PSS_DUPLICATE_FLAGS" + } + ], + "PssWalkMarkerCreate": [ + { + "name": "Allocator", + "type": "PSS_ALLOCATOR" + }, + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + } + ], + "PssWalkMarkerFree": [ + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + } + ], + "PssWalkMarkerGetPosition": [ + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + }, + { + "name": "Position", + "type": "ULONG_PTR" + } + ], + "PssWalkMarkerSetPosition": [ + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + }, + { + "name": "Position", + "type": "ULONG_PTR" + } + ], + "PssWalkMarkerSeekToBeginning": [ + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/processthreadsapi.json b/qiling/extensions/windows_sdk/processthreadsapi.json new file mode 100644 index 000000000..5cbfb7003 --- /dev/null +++ b/qiling/extensions/windows_sdk/processthreadsapi.json @@ -0,0 +1,1030 @@ +{ + "QueueUserAPC": [ + { + "name": "pfnAPC", + "type": "PAPCFUNC" + }, + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "GetProcessTimes": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpCreationTime", + "type": "LPFILETIME" + }, + { + "name": "lpExitTime", + "type": "LPFILETIME" + }, + { + "name": "lpKernelTime", + "type": "LPFILETIME" + }, + { + "name": "lpUserTime", + "type": "LPFILETIME" + } + ], + "GetCurrentProcess": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCurrentProcessId": [ + { + "name": "VOID", + "type": "void" + } + ], + "ExitProcess": [ + { + "name": "uExitCode", + "type": "UINT" + } + ], + "TerminateProcess": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "uExitCode", + "type": "UINT" + } + ], + "GetExitCodeProcess": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpExitCode", + "type": "LPDWORD" + } + ], + "SwitchToThread": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateThread": [ + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwStackSize", + "type": "SIZE_T" + }, + { + "name": "lpStartAddress", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpThreadId", + "type": "LPDWORD" + } + ], + "CreateRemoteThread": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwStackSize", + "type": "SIZE_T" + }, + { + "name": "lpStartAddress", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpThreadId", + "type": "LPDWORD" + } + ], + "GetCurrentThread": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCurrentThreadId": [ + { + "name": "VOID", + "type": "void" + } + ], + "OpenThread": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "dwThreadId", + "type": "DWORD" + } + ], + "SetThreadPriority": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "nPriority", + "type": "int" + } + ], + "SetThreadPriorityBoost": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "bDisablePriorityBoost", + "type": "BOOL" + } + ], + "GetThreadPriorityBoost": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "pDisablePriorityBoost", + "type": "PBOOL" + } + ], + "GetThreadPriority": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "ExitThread": [ + { + "name": "dwExitCode", + "type": "DWORD" + } + ], + "TerminateThread": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwExitCode", + "type": "DWORD" + } + ], + "GetExitCodeThread": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpExitCode", + "type": "LPDWORD" + } + ], + "SuspendThread": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "ResumeThread": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "TlsAlloc": [ + { + "name": "VOID", + "type": "void" + } + ], + "TlsGetValue": [ + { + "name": "dwTlsIndex", + "type": "DWORD" + } + ], + "TlsSetValue": [ + { + "name": "dwTlsIndex", + "type": "DWORD" + }, + { + "name": "lpTlsValue", + "type": "LPVOID" + } + ], + "TlsFree": [ + { + "name": "dwTlsIndex", + "type": "DWORD" + } + ], + "CreateProcessA": [ + { + "name": "lpApplicationName", + "type": "LPCSTR" + }, + { + "name": "lpCommandLine", + "type": "LPSTR" + }, + { + "name": "lpProcessAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInheritHandles", + "type": "BOOL" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOA" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "CreateProcessW": [ + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "lpProcessAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInheritHandles", + "type": "BOOL" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "SetProcessShutdownParameters": [ + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetProcessVersion": [ + { + "name": "ProcessId", + "type": "DWORD" + } + ], + "GetStartupInfoW": [ + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + } + ], + "CreateProcessAsUserW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "lpProcessAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInheritHandles", + "type": "BOOL" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "SetThreadToken": [ + { + "name": "Thread", + "type": "PHANDLE" + }, + { + "name": "Token", + "type": "HANDLE" + } + ], + "OpenProcessToken": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "TokenHandle", + "type": "PHANDLE" + } + ], + "OpenThreadToken": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "OpenAsSelf", + "type": "BOOL" + }, + { + "name": "TokenHandle", + "type": "PHANDLE" + } + ], + "SetPriorityClass": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwPriorityClass", + "type": "DWORD" + } + ], + "GetPriorityClass": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "SetThreadStackGuarantee": [ + { + "name": "StackSizeInBytes", + "type": "PULONG" + } + ], + "ProcessIdToSessionId": [ + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "pSessionId", + "type": "DWORD" + } + ], + "GetProcessId": [ + { + "name": "Process", + "type": "HANDLE" + } + ], + "GetThreadId": [ + { + "name": "Thread", + "type": "HANDLE" + } + ], + "FlushProcessWriteBuffers": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetProcessIdOfThread": [ + { + "name": "Thread", + "type": "HANDLE" + } + ], + "InitializeProcThreadAttributeList": [ + { + "name": "lpAttributeList", + "type": "LPPROC_THREAD_ATTRIBUTE_LIST" + }, + { + "name": "dwAttributeCount", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpSize", + "type": "PSIZE_T" + } + ], + "DeleteProcThreadAttributeList": [ + { + "name": "lpAttributeList", + "type": "LPPROC_THREAD_ATTRIBUTE_LIST" + } + ], + "UpdateProcThreadAttribute": [ + { + "name": "lpAttributeList", + "type": "LPPROC_THREAD_ATTRIBUTE_LIST" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "Attribute", + "type": "DWORD_PTR" + }, + { + "name": "lpValue", + "type": "PVOID" + }, + { + "name": "cbSize", + "type": "SIZE_T" + }, + { + "name": "lpPreviousValue", + "type": "PVOID" + }, + { + "name": "lpReturnSize", + "type": "PSIZE_T" + } + ], + "SetProcessAffinityUpdateMode": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "QueryProcessAffinityUpdateMode": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ], + "CreateRemoteThreadEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwStackSize", + "type": "SIZE_T" + }, + { + "name": "lpStartAddress", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpAttributeList", + "type": "LPPROC_THREAD_ATTRIBUTE_LIST" + }, + { + "name": "lpThreadId", + "type": "LPDWORD" + } + ], + "GetCurrentThreadStackLimits": [ + { + "name": "LowLimit", + "type": "PULONG_PTR" + }, + { + "name": "HighLimit", + "type": "PULONG_PTR" + } + ], + "GetThreadContext": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpContext", + "type": "LPCONTEXT" + } + ], + "GetProcessMitigationPolicy": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "MitigationPolicy", + "type": "PROCESS_MITIGATION_POLICY" + }, + { + "name": "lpBuffer", + "type": "PVOID" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "SetThreadContext": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpContext", + "type": "CONTEXT" + } + ], + "SetProcessMitigationPolicy": [ + { + "name": "MitigationPolicy", + "type": "PROCESS_MITIGATION_POLICY" + }, + { + "name": "lpBuffer", + "type": "PVOID" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "FlushInstructionCache": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + } + ], + "GetThreadTimes": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpCreationTime", + "type": "LPFILETIME" + }, + { + "name": "lpExitTime", + "type": "LPFILETIME" + }, + { + "name": "lpKernelTime", + "type": "LPFILETIME" + }, + { + "name": "lpUserTime", + "type": "LPFILETIME" + } + ], + "OpenProcess": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "IsProcessorFeaturePresent": [ + { + "name": "ProcessorFeature", + "type": "DWORD" + } + ], + "GetProcessHandleCount": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pdwHandleCount", + "type": "PDWORD" + } + ], + "GetCurrentProcessorNumber": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadIdealProcessorEx": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpIdealProcessor", + "type": "PPROCESSOR_NUMBER" + }, + { + "name": "lpPreviousIdealProcessor", + "type": "PPROCESSOR_NUMBER" + } + ], + "GetThreadIdealProcessorEx": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpIdealProcessor", + "type": "PPROCESSOR_NUMBER" + } + ], + "GetCurrentProcessorNumberEx": [ + { + "name": "ProcNumber", + "type": "PPROCESSOR_NUMBER" + } + ], + "GetProcessPriorityBoost": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pDisablePriorityBoost", + "type": "PBOOL" + } + ], + "SetProcessPriorityBoost": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "bDisablePriorityBoost", + "type": "BOOL" + } + ], + "GetThreadIOPendingFlag": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpIOIsPending", + "type": "PBOOL" + } + ], + "GetSystemTimes": [ + { + "name": "lpIdleTime", + "type": "PFILETIME" + }, + { + "name": "lpKernelTime", + "type": "PFILETIME" + }, + { + "name": "lpUserTime", + "type": "PFILETIME" + } + ], + "GetThreadInformation": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "ThreadInformationClass", + "type": "THREAD_INFORMATION_CLASS" + }, + { + "name": "ThreadInformation", + "type": "LPVOID" + }, + { + "name": "ThreadInformationSize", + "type": "DWORD" + } + ], + "SetThreadInformation": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "ThreadInformationClass", + "type": "THREAD_INFORMATION_CLASS" + }, + { + "name": "ThreadInformation", + "type": "LPVOID" + }, + { + "name": "ThreadInformationSize", + "type": "DWORD" + } + ], + "IsProcessCritical": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Critical", + "type": "PBOOL" + } + ], + "SetProtectedPolicy": [ + { + "name": "PolicyGuid", + "type": "LPCGUID" + }, + { + "name": "PolicyValue", + "type": "ULONG_PTR" + }, + { + "name": "OldPolicyValue", + "type": "PULONG_PTR" + } + ], + "QueryProtectedPolicy": [ + { + "name": "PolicyGuid", + "type": "LPCGUID" + }, + { + "name": "PolicyValue", + "type": "PULONG_PTR" + } + ], + "SetThreadIdealProcessor": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwIdealProcessor", + "type": "DWORD" + } + ], + "SetProcessInformation": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ProcessInformationClass", + "type": "PROCESS_INFORMATION_CLASS" + }, + { + "name": "ProcessInformation", + "type": "LPVOID" + }, + { + "name": "ProcessInformationSize", + "type": "DWORD" + } + ], + "GetProcessInformation": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ProcessInformationClass", + "type": "PROCESS_INFORMATION_CLASS" + }, + { + "name": "ProcessInformation", + "type": "LPVOID" + }, + { + "name": "ProcessInformationSize", + "type": "DWORD" + } + ], + "CreateProcessAsUserA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpApplicationName", + "type": "LPCSTR" + }, + { + "name": "lpCommandLine", + "type": "LPSTR" + }, + { + "name": "lpProcessAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInheritHandles", + "type": "BOOL" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOA" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "GetProcessShutdownParameters": [ + { + "name": "lpdwLevel", + "type": "LPDWORD" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ], + "SetThreadDescription": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpThreadDescription", + "type": "PCWSTR" + } + ], + "GetThreadDescription": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "ppszThreadDescription", + "type": "PWSTR" + } + ], + "GetStartupInfoA": [ + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOA" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/processtopologyapi.json b/qiling/extensions/windows_sdk/processtopologyapi.json new file mode 100644 index 000000000..eb18fb089 --- /dev/null +++ b/qiling/extensions/windows_sdk/processtopologyapi.json @@ -0,0 +1,40 @@ +{ + "GetProcessGroupAffinity": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "GroupCount", + "type": "PUSHORT" + }, + { + "name": "GroupArray", + "type": "PUSHORT" + } + ], + "GetThreadGroupAffinity": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "GroupAffinity", + "type": "PGROUP_AFFINITY" + } + ], + "SetThreadGroupAffinity": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "GroupAffinity", + "type": "GROUP_AFFINITY" + }, + { + "name": "PreviousGroupAffinity", + "type": "PGROUP_AFFINITY" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/profileapi.json b/qiling/extensions/windows_sdk/profileapi.json new file mode 100644 index 000000000..4dd8173de --- /dev/null +++ b/qiling/extensions/windows_sdk/profileapi.json @@ -0,0 +1,14 @@ +{ + "QueryPerformanceCounter": [ + { + "name": "lpPerformanceCount", + "type": "LARGE_INTEGER" + } + ], + "QueryPerformanceFrequency": [ + { + "name": "lpFrequency", + "type": "LARGE_INTEGER" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/propapi.json b/qiling/extensions/windows_sdk/propapi.json new file mode 100644 index 000000000..0737740bb --- /dev/null +++ b/qiling/extensions/windows_sdk/propapi.json @@ -0,0 +1,20 @@ +{ + "StgPropertyLengthAsVariant": [ + { + "name": "pProp", + "type": "SERIALIZEDPROPERTYVALUE" + }, + { + "name": "cbProp", + "type": "ULONG" + }, + { + "name": "CodePage", + "type": "USHORT" + }, + { + "name": "bReserved", + "type": "BYTE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/propidl.json b/qiling/extensions/windows_sdk/propidl.json new file mode 100644 index 000000000..a606ba2a5 --- /dev/null +++ b/qiling/extensions/windows_sdk/propidl.json @@ -0,0 +1,28 @@ +{ + "PropVariantCopy": [ + { + "name": "pvarDest", + "type": "PROPVARIANT" + }, + { + "name": "pvarSrc", + "type": "PROPVARIANT" + } + ], + "PropVariantClear": [ + { + "name": "pvar", + "type": "PROPVARIANT" + } + ], + "FreePropVariantArray": [ + { + "name": "cVariants", + "type": "ULONG" + }, + { + "name": "rgvars", + "type": "PROPVARIANT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/propsys.json b/qiling/extensions/windows_sdk/propsys.json new file mode 100644 index 000000000..abb14dc3d --- /dev/null +++ b/qiling/extensions/windows_sdk/propsys.json @@ -0,0 +1,972 @@ +{ + "PropVariantToWinRTPropertyValue": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "WinRTPropertyValueToPropVariant": [ + { + "name": "punkPropertyValue", + "type": "IUnknown" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSFormatForDisplay": [ + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pdfFlags", + "type": "PROPDESC_FORMAT_FLAGS" + }, + { + "name": "pwszText", + "type": "LPWSTR" + }, + { + "name": "cchText", + "type": "DWORD" + } + ], + "PSFormatForDisplayAlloc": [ + { + "name": "key", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pdff", + "type": "PROPDESC_FORMAT_FLAGS" + }, + { + "name": "ppszDisplay", + "type": "PWSTR" + } + ], + "PSFormatPropertyValue": [ + { + "name": "pps", + "type": "IPropertyStore" + }, + { + "name": "ppd", + "type": "IPropertyDescription" + }, + { + "name": "pdff", + "type": "PROPDESC_FORMAT_FLAGS" + }, + { + "name": "ppszDisplay", + "type": "LPWSTR" + } + ], + "PSGetImageReferenceForValue": [ + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "ppszImageRes", + "type": "PWSTR" + } + ], + "PSStringFromPropertyKey": [ + { + "name": "pkey", + "type": "PROPERTYKEY" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "cch", + "type": "UINT" + } + ], + "PSPropertyKeyFromString": [ + { + "name": "pszString", + "type": "LPCWSTR" + }, + { + "name": "pkey", + "type": "PROPERTYKEY" + } + ], + "PSCreateMemoryPropertyStore": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreateDelayedMultiplexPropertyStore": [ + { + "name": "flags", + "type": "GETPROPERTYSTOREFLAGS" + }, + { + "name": "pdpsf", + "type": "IDelayedPropertyStoreFactory" + }, + { + "name": "rgStoreIds", + "type": "DWORD" + }, + { + "name": "cStores", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreateMultiplexPropertyStore": [ + { + "name": "prgpunkStores", + "type": "IUnknown" + }, + { + "name": "cStores", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreatePropertyChangeArray": [ + { + "name": "rgpropkey", + "type": "PROPERTYKEY" + }, + { + "name": "rgflags", + "type": "PKA_FLAGS" + }, + { + "name": "rgpropvar", + "type": "PROPVARIANT" + }, + { + "name": "cChanges", + "type": "UINT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreateSimplePropertyChange": [ + { + "name": "flags", + "type": "PKA_FLAGS" + }, + { + "name": "key", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyDescription": [ + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyDescriptionByName": [ + { + "name": "pszCanonicalName", + "type": "LPCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSLookupPropertyHandlerCLSID": [ + { + "name": "pszFilePath", + "type": "PCWSTR" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "PSGetItemPropertyHandler": [ + { + "name": "punkItem", + "type": "IUnknown" + }, + { + "name": "fReadWrite", + "type": "BOOL" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetItemPropertyHandlerWithCreateObject": [ + { + "name": "punkItem", + "type": "IUnknown" + }, + { + "name": "fReadWrite", + "type": "BOOL" + }, + { + "name": "punkCreateObject", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyValue": [ + { + "name": "pps", + "type": "IPropertyStore" + }, + { + "name": "ppd", + "type": "IPropertyDescription" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSSetPropertyValue": [ + { + "name": "pps", + "type": "IPropertyStore" + }, + { + "name": "ppd", + "type": "IPropertyDescription" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + } + ], + "PSRegisterPropertySchema": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "PSUnregisterPropertySchema": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "PSRefreshPropertySchema": [ + { + "name": "VOID", + "type": "void" + } + ], + "PSEnumeratePropertyDescriptions": [ + { + "name": "filterOn", + "type": "PROPDESC_ENUMFILTER" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyKeyFromName": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "ppropkey", + "type": "PROPERTYKEY" + } + ], + "PSGetNameFromPropertyKey": [ + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "ppszCanonicalName", + "type": "PWSTR" + } + ], + "PSCoerceToCanonicalValue": [ + { + "name": "key", + "type": "PROPERTYKEY" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSGetPropertyDescriptionListFromString": [ + { + "name": "pszPropList", + "type": "LPCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreatePropertyStoreFromPropertySetStorage": [ + { + "name": "ppss", + "type": "IPropertySetStorage" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreatePropertyStoreFromObject": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreateAdapterFromPropertyStore": [ + { + "name": "pps", + "type": "IPropertyStore" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertySystem": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyFromPropertyStorage": [ + { + "name": "psps", + "type": "PCUSERIALIZEDPROPSTORAGE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "rpkey", + "type": "PROPERTYKEY" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSGetNamedPropertyFromPropertyStorage": [ + { + "name": "psps", + "type": "PCUSERIALIZEDPROPSTORAGE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSPropertyBag_ReadType": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "type", + "type": "VARTYPE" + } + ], + "PSPropertyBag_ReadStr": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "LPWSTR" + }, + { + "name": "characterCount", + "type": "int" + } + ], + "PSPropertyBag_ReadStrAlloc": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "PWSTR" + } + ], + "PSPropertyBag_ReadBSTR": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "BSTR" + } + ], + "PSPropertyBag_WriteStr": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "LPCWSTR" + } + ], + "PSPropertyBag_WriteBSTR": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "BSTR" + } + ], + "PSPropertyBag_ReadInt": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "INT" + } + ], + "PSPropertyBag_WriteInt": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "INT" + } + ], + "PSPropertyBag_ReadSHORT": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "SHORT" + } + ], + "PSPropertyBag_WriteSHORT": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "SHORT" + } + ], + "PSPropertyBag_ReadLONG": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "LONG" + } + ], + "PSPropertyBag_WriteLONG": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "LONG" + } + ], + "PSPropertyBag_ReadDWORD": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "DWORD" + } + ], + "PSPropertyBag_WriteDWORD": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "DWORD" + } + ], + "PSPropertyBag_ReadBOOL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "BOOL" + } + ], + "PSPropertyBag_WriteBOOL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "BOOL" + } + ], + "PSPropertyBag_ReadPOINTL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "POINTL" + } + ], + "PSPropertyBag_WritePOINTL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "POINTL" + } + ], + "PSPropertyBag_ReadPOINTS": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "POINTS" + } + ], + "PSPropertyBag_WritePOINTS": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "POINTS" + } + ], + "PSPropertyBag_ReadRECTL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "RECTL" + } + ], + "PSPropertyBag_WriteRECTL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "RECTL" + } + ], + "PSPropertyBag_ReadStream": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "IStream" + } + ], + "PSPropertyBag_WriteStream": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "IStream" + } + ], + "PSPropertyBag_Delete": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + } + ], + "PSPropertyBag_ReadULONGLONG": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "ULONGLONG" + } + ], + "PSPropertyBag_WriteULONGLONG": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "ULONGLONG" + } + ], + "PSPropertyBag_ReadUnknown": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSPropertyBag_WriteUnknown": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "punk", + "type": "IUnknown" + } + ], + "PSPropertyBag_ReadGUID": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "GUID" + } + ], + "PSPropertyBag_WriteGUID": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "GUID" + } + ], + "PSPropertyBag_ReadPropertyKey": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "PROPERTYKEY" + } + ], + "PSPropertyBag_WritePropertyKey": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "PROPERTYKEY" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/propvarutil.json b/qiling/extensions/windows_sdk/propvarutil.json new file mode 100644 index 000000000..64107abeb --- /dev/null +++ b/qiling/extensions/windows_sdk/propvarutil.json @@ -0,0 +1,1972 @@ +{ + "InitPropVariantFromResource": [ + { + "name": "hinst", + "type": "HINSTANCE" + }, + { + "name": "id", + "type": "UINT" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromBuffer": [ + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "UINT" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromCLSID": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromGUIDAsString": [ + { + "name": "guid", + "type": "GUID" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromFileTime": [ + { + "name": "pftIn", + "type": "FILETIME" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromPropVariantVectorElem": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantVectorFromPropVariant": [ + { + "name": "propvarSingle", + "type": "PROPVARIANT" + }, + { + "name": "ppropvarVector", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromStrRet": [ + { + "name": "pstrret", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromBooleanVector": [ + { + "name": "prgf", + "type": "BOOL" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromInt16Vector": [ + { + "name": "prgn", + "type": "SHORT" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromUInt16Vector": [ + { + "name": "prgn", + "type": "USHORT" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromInt32Vector": [ + { + "name": "prgn", + "type": "LONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromUInt32Vector": [ + { + "name": "prgn", + "type": "ULONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromInt64Vector": [ + { + "name": "prgn", + "type": "LONGLONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromUInt64Vector": [ + { + "name": "prgn", + "type": "ULONGLONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromDoubleVector": [ + { + "name": "prgn", + "type": "DOUBLE" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromFileTimeVector": [ + { + "name": "prgft", + "type": "FILETIME" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromStringVector": [ + { + "name": "prgsz", + "type": "PCWSTR" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromStringAsVector": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PropVariantToBooleanWithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "PropVariantToInt16WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "iDefault", + "type": "SHORT" + } + ], + "PropVariantToUInt16WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "uiDefault", + "type": "USHORT" + } + ], + "PropVariantToInt32WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "lDefault", + "type": "LONG" + } + ], + "PropVariantToUInt32WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "ulDefault", + "type": "ULONG" + } + ], + "PropVariantToInt64WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "llDefault", + "type": "LONGLONG" + } + ], + "PropVariantToUInt64WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "ullDefault", + "type": "ULONGLONG" + } + ], + "PropVariantToDoubleWithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "dblDefault", + "type": "DOUBLE" + } + ], + "PropVariantToStringWithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pszDefault", + "type": "LPCWSTR" + } + ], + "PropVariantToBoolean": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pfRet", + "type": "BOOL" + } + ], + "PropVariantToInt16": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "piRet", + "type": "SHORT" + } + ], + "PropVariantToUInt16": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "puiRet", + "type": "USHORT" + } + ], + "PropVariantToInt32": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "plRet", + "type": "LONG" + } + ], + "PropVariantToUInt32": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pulRet", + "type": "ULONG" + } + ], + "PropVariantToInt64": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "PropVariantToUInt64": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pullRet", + "type": "ULONGLONG" + } + ], + "PropVariantToDouble": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pdblRet", + "type": "DOUBLE" + } + ], + "PropVariantToBuffer": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "UINT" + } + ], + "PropVariantToString": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "psz", + "type": "PWSTR" + }, + { + "name": "cch", + "type": "UINT" + } + ], + "PropVariantToGUID": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pguid", + "type": "GUID" + } + ], + "PropVariantToStringAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "ppszOut", + "type": "PWSTR" + } + ], + "PropVariantToBSTR": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "PropVariantToStrRet": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pstrret", + "type": "STRRET" + } + ], + "PropVariantToFileTime": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pstfOut", + "type": "PSTIME_FLAGS" + }, + { + "name": "pftOut", + "type": "FILETIME" + } + ], + "PropVariantGetElementCount": [ + { + "name": "propvar", + "type": "PROPVARIANT" + } + ], + "PropVariantToBooleanVector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgf", + "type": "BOOL" + }, + { + "name": "crgf", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt16Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "SHORT" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt16Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "USHORT" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt32Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "LONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt32Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "ULONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt64Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "LONGLONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt64Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "ULONGLONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToDoubleVector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "DOUBLE" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToFileTimeVector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgft", + "type": "FILETIME" + }, + { + "name": "crgft", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToStringVector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgsz", + "type": "PWSTR" + }, + { + "name": "crgsz", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToBooleanVectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgf", + "type": "BOOL" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt16VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "SHORT" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt16VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "USHORT" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt32VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "LONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt32VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt64VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "LONGLONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt64VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "ULONGLONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToDoubleVectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgn", + "type": "DOUBLE" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToFileTimeVectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgft", + "type": "FILETIME" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToStringVectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pprgsz", + "type": "PWSTR" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantGetBooleanElem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pfVal", + "type": "BOOL" + } + ], + "PropVariantGetInt16Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "SHORT" + } + ], + "PropVariantGetUInt16Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "USHORT" + } + ], + "PropVariantGetInt32Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "LONG" + } + ], + "PropVariantGetUInt32Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "ULONG" + } + ], + "PropVariantGetInt64Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "LONGLONG" + } + ], + "PropVariantGetUInt64Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "ULONGLONG" + } + ], + "PropVariantGetDoubleElem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "DOUBLE" + } + ], + "PropVariantGetFileTimeElem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pftVal", + "type": "FILETIME" + } + ], + "PropVariantGetStringElem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "ppszVal", + "type": "PWSTR" + } + ], + "ClearPropVariantArray": [ + { + "name": "rgPropVar", + "type": "PROPVARIANT" + }, + { + "name": "cVars", + "type": "UINT" + } + ], + "PropVariantCompareEx": [ + { + "name": "propvar1", + "type": "PROPVARIANT" + }, + { + "name": "propvar2", + "type": "PROPVARIANT" + }, + { + "name": "unit", + "type": "PROPVAR_COMPARE_UNIT" + }, + { + "name": "flags", + "type": "PROPVAR_COMPARE_FLAGS" + } + ], + "PropVariantChangeType": [ + { + "name": "ppropvarDest", + "type": "PROPVARIANT" + }, + { + "name": "propvarSrc", + "type": "PROPVARIANT" + }, + { + "name": "flags", + "type": "PROPVAR_CHANGE_FLAGS" + }, + { + "name": "vt", + "type": "VARTYPE" + } + ], + "PropVariantToVariant": [ + { + "name": "pPropVar", + "type": "PROPVARIANT" + }, + { + "name": "pVar", + "type": "VARIANT" + } + ], + "VariantToPropVariant": [ + { + "name": "pVar", + "type": "VARIANT" + }, + { + "name": "pPropVar", + "type": "PROPVARIANT" + } + ], + "StgSerializePropVariant": [ + { + "name": "ppropvar", + "type": "PROPVARIANT" + }, + { + "name": "ppProp", + "type": "SERIALIZEDPROPERTYVALUE" + }, + { + "name": "pcb", + "type": "ULONG" + } + ], + "StgDeserializePropVariant": [ + { + "name": "pprop", + "type": "SERIALIZEDPROPERTYVALUE" + }, + { + "name": "cbMax", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitVariantFromResource": [ + { + "name": "hinst", + "type": "HINSTANCE" + }, + { + "name": "id", + "type": "UINT" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromBuffer": [ + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "UINT" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromGUIDAsString": [ + { + "name": "guid", + "type": "GUID" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromFileTime": [ + { + "name": "pft", + "type": "FILETIME" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromFileTimeArray": [ + { + "name": "prgft", + "type": "FILETIME" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromStrRet": [ + { + "name": "pstrret", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromVariantArrayElem": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromBooleanArray": [ + { + "name": "prgf", + "type": "BOOL" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromInt16Array": [ + { + "name": "prgn", + "type": "SHORT" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromUInt16Array": [ + { + "name": "prgn", + "type": "USHORT" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromInt32Array": [ + { + "name": "prgn", + "type": "LONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromUInt32Array": [ + { + "name": "prgn", + "type": "ULONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromInt64Array": [ + { + "name": "prgn", + "type": "LONGLONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromUInt64Array": [ + { + "name": "prgn", + "type": "ULONGLONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromDoubleArray": [ + { + "name": "prgn", + "type": "DOUBLE" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromStringArray": [ + { + "name": "prgsz", + "type": "PCWSTR" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "VariantToBooleanWithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "VariantToInt16WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "iDefault", + "type": "SHORT" + } + ], + "VariantToUInt16WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "uiDefault", + "type": "USHORT" + } + ], + "VariantToInt32WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "lDefault", + "type": "LONG" + } + ], + "VariantToUInt32WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "ulDefault", + "type": "ULONG" + } + ], + "VariantToInt64WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "llDefault", + "type": "LONGLONG" + } + ], + "VariantToUInt64WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "ullDefault", + "type": "ULONGLONG" + } + ], + "VariantToDoubleWithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "dblDefault", + "type": "DOUBLE" + } + ], + "VariantToStringWithDefault": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pszDefault", + "type": "LPCWSTR" + } + ], + "VariantToBoolean": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pfRet", + "type": "BOOL" + } + ], + "VariantToInt16": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "piRet", + "type": "SHORT" + } + ], + "VariantToUInt16": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "puiRet", + "type": "USHORT" + } + ], + "VariantToInt32": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "plRet", + "type": "LONG" + } + ], + "VariantToUInt32": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pulRet", + "type": "ULONG" + } + ], + "VariantToInt64": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "VariantToUInt64": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pullRet", + "type": "ULONGLONG" + } + ], + "VariantToDouble": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pdblRet", + "type": "DOUBLE" + } + ], + "VariantToBuffer": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "UINT" + } + ], + "VariantToGUID": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pguid", + "type": "GUID" + } + ], + "VariantToString": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "VariantToStringAlloc": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "ppszBuf", + "type": "PWSTR" + } + ], + "VariantToDosDateTime": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pwDate", + "type": "WORD" + }, + { + "name": "pwTime", + "type": "WORD" + } + ], + "VariantToStrRet": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "pstrret", + "type": "STRRET" + } + ], + "VariantToFileTime": [ + { + "name": "varIn", + "type": "VARIANT" + }, + { + "name": "stfOut", + "type": "PSTIME_FLAGS" + }, + { + "name": "pftOut", + "type": "FILETIME" + } + ], + "VariantGetElementCount": [ + { + "name": "varIn", + "type": "VARIANT" + } + ], + "VariantToBooleanArray": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgf", + "type": "BOOL" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToInt16Array": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "SHORT" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToUInt16Array": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "USHORT" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToInt32Array": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "LONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToUInt32Array": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "ULONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToInt64Array": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "LONGLONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToUInt64Array": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "ULONGLONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToDoubleArray": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgn", + "type": "DOUBLE" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToStringArray": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "prgsz", + "type": "PWSTR" + }, + { + "name": "crgsz", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToBooleanArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgf", + "type": "BOOL" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToInt16ArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "SHORT" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToUInt16ArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "USHORT" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToInt32ArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "LONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToUInt32ArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToInt64ArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "LONGLONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToUInt64ArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "ULONGLONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToDoubleArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgn", + "type": "DOUBLE" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantToStringArrayAlloc": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "pprgsz", + "type": "PWSTR" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "VariantGetBooleanElem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pfVal", + "type": "BOOL" + } + ], + "VariantGetInt16Elem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "SHORT" + } + ], + "VariantGetUInt16Elem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "USHORT" + } + ], + "VariantGetInt32Elem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "LONG" + } + ], + "VariantGetUInt32Elem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "ULONG" + } + ], + "VariantGetInt64Elem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "LONGLONG" + } + ], + "VariantGetUInt64Elem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "ULONGLONG" + } + ], + "VariantGetDoubleElem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "DOUBLE" + } + ], + "VariantGetStringElem": [ + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "ppszVal", + "type": "PWSTR" + } + ], + "ClearVariantArray": [ + { + "name": "pvars", + "type": "VARIANT" + }, + { + "name": "cvars", + "type": "UINT" + } + ], + "VariantCompare": [ + { + "name": "var1", + "type": "VARIANT" + }, + { + "name": "var2", + "type": "VARIANT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/prsht.json b/qiling/extensions/windows_sdk/prsht.json new file mode 100644 index 000000000..c3d5929ce --- /dev/null +++ b/qiling/extensions/windows_sdk/prsht.json @@ -0,0 +1,32 @@ +{ + "CreatePropertySheetPageA": [ + { + "name": "constPropSheetPagePointer", + "type": "LPCPROPSHEETPAGEA" + } + ], + "CreatePropertySheetPageW": [ + { + "name": "constPropSheetPagePointer", + "type": "LPCPROPSHEETPAGEW" + } + ], + "DestroyPropertySheetPage": [ + { + "name": "VOID", + "type": "HPROPSHEETPAGE" + } + ], + "PropertySheetA": [ + { + "name": "VOID", + "type": "LPCPROPSHEETHEADERA" + } + ], + "PropertySheetW": [ + { + "name": "VOID", + "type": "LPCPROPSHEETHEADERW" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/psapi.json b/qiling/extensions/windows_sdk/psapi.json new file mode 100644 index 000000000..7ea3a8426 --- /dev/null +++ b/qiling/extensions/windows_sdk/psapi.json @@ -0,0 +1,364 @@ +{ + "K32EnumProcesses": [ + { + "name": "lpidProcess", + "type": "DWORD" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "lpcbNeeded", + "type": "LPDWORD" + } + ], + "K32EnumProcessModules": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lphModule", + "type": "HMODULE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "lpcbNeeded", + "type": "LPDWORD" + } + ], + "K32EnumProcessModulesEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lphModule", + "type": "HMODULE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "lpcbNeeded", + "type": "LPDWORD" + }, + { + "name": "dwFilterFlag", + "type": "DWORD" + } + ], + "K32GetModuleBaseNameA": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpBaseName", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetModuleBaseNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpBaseName", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetModuleFileNameExA": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetModuleFileNameExW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpFilename", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetModuleInformation": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpmodinfo", + "type": "LPMODULEINFO" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32EmptyWorkingSet": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "K32QueryWorkingSet": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32QueryWorkingSetEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32InitializeProcessForWsWatch": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "K32GetWsChanges": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpWatchInfo", + "type": "PPSAPI_WS_WATCH_INFORMATION" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32GetWsChangesEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpWatchInfoEx", + "type": "PPSAPI_WS_WATCH_INFORMATION_EX" + }, + { + "name": "cb", + "type": "PDWORD" + } + ], + "K32GetMappedFileNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpv", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetMappedFileNameA": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpv", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32EnumDeviceDrivers": [ + { + "name": "lpImageBase", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "lpcbNeeded", + "type": "LPDWORD" + } + ], + "K32GetDeviceDriverBaseNameA": [ + { + "name": "ImageBase", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetDeviceDriverBaseNameW": [ + { + "name": "ImageBase", + "type": "LPVOID" + }, + { + "name": "lpBaseName", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetDeviceDriverFileNameA": [ + { + "name": "ImageBase", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetDeviceDriverFileNameW": [ + { + "name": "ImageBase", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetProcessMemoryInfo": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "ppsmemCounters", + "type": "PPROCESS_MEMORY_COUNTERS" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32GetPerformanceInfo": [ + { + "name": "pPerformanceInformation", + "type": "PPERFORMANCE_INFORMATION" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32EnumPageFilesW": [ + { + "name": "pCallBackRoutine", + "type": "PENUM_PAGE_FILE_CALLBACKW" + }, + { + "name": "pContext", + "type": "LPVOID" + } + ], + "K32EnumPageFilesA": [ + { + "name": "pCallBackRoutine", + "type": "PENUM_PAGE_FILE_CALLBACKA" + }, + { + "name": "pContext", + "type": "LPVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ras.json b/qiling/extensions/windows_sdk/ras.json new file mode 100644 index 000000000..b368acc66 --- /dev/null +++ b/qiling/extensions/windows_sdk/ras.json @@ -0,0 +1,1492 @@ +{ + "RasDialA": [ + { + "name": "VOID", + "type": { + "name": "tagRASDIALEXTENSIONS", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALPARAMSA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "HRASCONN" + } + ], + "RasDialW": [ + { + "name": "VOID", + "type": { + "name": "tagRASDIALEXTENSIONS", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALPARAMSW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "HRASCONN" + } + ], + "RasEnumConnectionsA": [ + { + "name": "VOID", + "type": { + "name": "tagRASCONNA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasEnumConnectionsW": [ + { + "name": "VOID", + "type": { + "name": "tagRASCONNW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasEnumEntriesA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASENTRYNAMEA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasEnumEntriesW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASENTRYNAMEW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetConnectStatusA": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": { + "name": "tagRASCONNSTATUSA", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasGetConnectStatusW": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": { + "name": "tagRASCONNSTATUSW", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasGetErrorStringA": [ + { + "name": "ResourceId", + "type": "UINT" + }, + { + "name": "lpszString", + "type": "LPSTR" + }, + { + "name": "InBufSize", + "type": "DWORD" + } + ], + "RasGetErrorStringW": [ + { + "name": "ResourceId", + "type": "UINT" + }, + { + "name": "lpszString", + "type": "LPWSTR" + }, + { + "name": "InBufSize", + "type": "DWORD" + } + ], + "RasHangUpA": [ + { + "name": "VOID", + "type": "HRASCONN" + } + ], + "RasHangUpW": [ + { + "name": "VOID", + "type": "HRASCONN" + } + ], + "RasGetProjectionInfoA": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": { + "name": "tagRASPROJECTION", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetProjectionInfoW": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": { + "name": "tagRASPROJECTION", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasCreatePhonebookEntryA": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "RasCreatePhonebookEntryW": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "RasEditPhonebookEntryA": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "RasEditPhonebookEntryW": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "RasSetEntryDialParamsA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALPARAMSA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "RasSetEntryDialParamsW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALPARAMSW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "RasGetEntryDialParamsA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALPARAMSA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPBOOL" + } + ], + "RasGetEntryDialParamsW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALPARAMSW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPBOOL" + } + ], + "RasEnumDevicesA": [ + { + "name": "VOID", + "type": { + "name": "tagRASDEVINFOA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasEnumDevicesW": [ + { + "name": "VOID", + "type": { + "name": "tagRASDEVINFOW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetCountryInfoA": [ + { + "name": "VOID", + "type": { + "name": "RASCTRYINFO", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetCountryInfoW": [ + { + "name": "VOID", + "type": { + "name": "RASCTRYINFO", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetEntryPropertiesA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASENTRYA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetEntryPropertiesW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASENTRYW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasSetEntryPropertiesA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASENTRYA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasSetEntryPropertiesW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASENTRYW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasRenameEntryA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "RasRenameEntryW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "RasDeleteEntryA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "RasDeleteEntryW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "RasValidateEntryNameA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "RasValidateEntryNameW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "RasConnectionNotificationA": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": "HANDLE" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasConnectionNotificationW": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": "HANDLE" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasGetSubEntryHandleA": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "HRASCONN" + } + ], + "RasGetSubEntryHandleW": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "HRASCONN" + } + ], + "RasGetCredentialsA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASCREDENTIALSA", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasGetCredentialsW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASCREDENTIALSW", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasSetCredentialsA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASCREDENTIALSA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "RasSetCredentialsW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": { + "name": "tagRASCREDENTIALSW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "RasGetSubEntryPropertiesA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASSUBENTRYA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetSubEntryPropertiesW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASSUBENTRYW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasSetSubEntryPropertiesA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASSUBENTRYA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasSetSubEntryPropertiesW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASSUBENTRYW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPBYTE" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasGetAutodialAddressA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASAUTODIALENTRYA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetAutodialAddressW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASAUTODIALENTRYW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "LPDWORD" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasSetAutodialAddressA": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASAUTODIALENTRYA", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasSetAutodialAddressW": [ + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASAUTODIALENTRYW", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasEnumAutodialAddressesA": [ + { + "name": "lppRasAutodialAddresses", + "type": "LPSTR" + }, + { + "name": "lpdwcbRasAutodialAddresses", + "type": "LPDWORD" + }, + { + "name": "lpdwcRasAutodialAddresses", + "type": "LPDWORD" + } + ], + "RasEnumAutodialAddressesW": [ + { + "name": "lppRasAutodialAddresses", + "type": "LPWSTR" + }, + { + "name": "lpdwcbRasAutodialAddresses", + "type": "LPDWORD" + }, + { + "name": "lpdwcRasAutodialAddresses", + "type": "LPDWORD" + } + ], + "RasGetAutodialEnableA": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPBOOL" + } + ], + "RasGetAutodialEnableW": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPBOOL" + } + ], + "RasSetAutodialEnableA": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "RasSetAutodialEnableW": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "RasGetAutodialParamA": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasGetAutodialParamW": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "LPDWORD" + } + ], + "RasSetAutodialParamA": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasSetAutodialParamW": [ + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "LPVOID" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "RasInvokeEapUI": [ + { + "name": "VOID", + "type": "HRASCONN" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": { + "name": "tagRASDIALEXTENSIONS", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "VOID", + "type": "HWND" + } + ], + "RasGetLinkStatistics": [ + { + "name": "hRasConn", + "type": "HRASCONN" + }, + { + "name": "dwSubEntry", + "type": "DWORD" + }, + { + "name": "lpStatistics", + "type": "RAS_STATS" + } + ], + "RasGetConnectionStatistics": [ + { + "name": "hRasConn", + "type": "HRASCONN" + }, + { + "name": "lpStatistics", + "type": "RAS_STATS" + } + ], + "RasClearLinkStatistics": [ + { + "name": "hRasConn", + "type": "HRASCONN" + }, + { + "name": "dwSubEntry", + "type": "DWORD" + } + ], + "RasClearConnectionStatistics": [ + { + "name": "hRasConn", + "type": "HRASCONN" + } + ], + "RasGetEapUserDataA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "pszPhonebook", + "type": "LPCSTR" + }, + { + "name": "pszEntry", + "type": "LPCSTR" + }, + { + "name": "pbEapData", + "type": "BYTE" + }, + { + "name": "pdwSizeofEapData", + "type": "DWORD" + } + ], + "RasGetEapUserDataW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "pszPhonebook", + "type": "LPCWSTR" + }, + { + "name": "pszEntry", + "type": "LPCWSTR" + }, + { + "name": "pbEapData", + "type": "BYTE" + }, + { + "name": "pdwSizeofEapData", + "type": "DWORD" + } + ], + "RasSetEapUserDataA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "pszPhonebook", + "type": "LPCSTR" + }, + { + "name": "pszEntry", + "type": "LPCSTR" + }, + { + "name": "pbEapData", + "type": "BYTE" + }, + { + "name": "dwSizeofEapData", + "type": "DWORD" + } + ], + "RasSetEapUserDataW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "pszPhonebook", + "type": "LPCWSTR" + }, + { + "name": "pszEntry", + "type": "LPCWSTR" + }, + { + "name": "pbEapData", + "type": "BYTE" + }, + { + "name": "dwSizeofEapData", + "type": "DWORD" + } + ], + "RasGetCustomAuthDataA": [ + { + "name": "pszPhonebook", + "type": "LPCSTR" + }, + { + "name": "pszEntry", + "type": "LPCSTR" + }, + { + "name": "pbCustomAuthData", + "type": "BYTE" + }, + { + "name": "pdwSizeofCustomAuthData", + "type": "DWORD" + } + ], + "RasGetCustomAuthDataW": [ + { + "name": "pszPhonebook", + "type": "LPCWSTR" + }, + { + "name": "pszEntry", + "type": "LPCWSTR" + }, + { + "name": "pbCustomAuthData", + "type": "BYTE" + }, + { + "name": "pdwSizeofCustomAuthData", + "type": "DWORD" + } + ], + "RasSetCustomAuthDataA": [ + { + "name": "pszPhonebook", + "type": "LPCSTR" + }, + { + "name": "pszEntry", + "type": "LPCSTR" + }, + { + "name": "pbCustomAuthData", + "type": "BYTE" + }, + { + "name": "dwSizeofCustomAuthData", + "type": "DWORD" + } + ], + "RasSetCustomAuthDataW": [ + { + "name": "pszPhonebook", + "type": "LPCWSTR" + }, + { + "name": "pszEntry", + "type": "LPCWSTR" + }, + { + "name": "pbCustomAuthData", + "type": "BYTE" + }, + { + "name": "dwSizeofCustomAuthData", + "type": "DWORD" + } + ], + "RasGetEapUserIdentityW": [ + { + "name": "pszPhonebook", + "type": "LPCWSTR" + }, + { + "name": "pszEntry", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ppRasEapUserIdentity", + "type": { + "name": "tagRASEAPUSERIDENTITYW", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasGetEapUserIdentityA": [ + { + "name": "pszPhonebook", + "type": "LPCSTR" + }, + { + "name": "pszEntry", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ppRasEapUserIdentity", + "type": { + "name": "tagRASEAPUSERIDENTITYA", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasFreeEapUserIdentityW": [ + { + "name": "pRasEapUserIdentity", + "type": { + "name": "tagRASEAPUSERIDENTITYW", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasFreeEapUserIdentityA": [ + { + "name": "pRasEapUserIdentity", + "type": { + "name": "tagRASEAPUSERIDENTITYA", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasDeleteSubEntryA": [ + { + "name": "pszPhonebook", + "type": "LPCSTR" + }, + { + "name": "pszEntry", + "type": "LPCSTR" + }, + { + "name": "dwSubentryId", + "type": "DWORD" + } + ], + "RasDeleteSubEntryW": [ + { + "name": "pszPhonebook", + "type": "LPCWSTR" + }, + { + "name": "pszEntry", + "type": "LPCWSTR" + }, + { + "name": "dwSubEntryId", + "type": "DWORD" + } + ], + "RasUpdateConnection": [ + { + "name": "hrasconn", + "type": "HRASCONN" + }, + { + "name": "lprasupdateconn", + "type": { + "name": "tagRASUPDATECONN", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasGetProjectionInfoEx": [ + { + "name": "hrasconn", + "type": "HRASCONN" + }, + { + "name": "pRasProjection", + "type": "PRAS_PROJECTION_INFO" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rasdlg.json b/qiling/extensions/windows_sdk/rasdlg.json new file mode 100644 index 000000000..d6beb17c0 --- /dev/null +++ b/qiling/extensions/windows_sdk/rasdlg.json @@ -0,0 +1,118 @@ +{ + "RasPhonebookDlgA": [ + { + "name": "lpszPhonebook", + "type": "LPSTR" + }, + { + "name": "lpszEntry", + "type": "LPSTR" + }, + { + "name": "lpInfo", + "type": { + "name": "tagRASPBDLGA", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasPhonebookDlgW": [ + { + "name": "lpszPhonebook", + "type": "LPWSTR" + }, + { + "name": "lpszEntry", + "type": "LPWSTR" + }, + { + "name": "lpInfo", + "type": { + "name": "tagRASPBDLGW", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasEntryDlgA": [ + { + "name": "lpszPhonebook", + "type": "LPSTR" + }, + { + "name": "lpszEntry", + "type": "LPSTR" + }, + { + "name": "lpInfo", + "type": { + "name": "tagRASENTRYDLGA", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasEntryDlgW": [ + { + "name": "lpszPhonebook", + "type": "LPWSTR" + }, + { + "name": "lpszEntry", + "type": "LPWSTR" + }, + { + "name": "lpInfo", + "type": { + "name": "tagRASENTRYDLGW", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasDialDlgA": [ + { + "name": "lpszPhonebook", + "type": "LPSTR" + }, + { + "name": "lpszEntry", + "type": "LPSTR" + }, + { + "name": "lpszPhoneNumber", + "type": "LPSTR" + }, + { + "name": "lpInfo", + "type": { + "name": "tagRASDIALDLG", + "data_type": "Struct", + "elements": [] + } + } + ], + "RasDialDlgW": [ + { + "name": "lpszPhonebook", + "type": "LPWSTR" + }, + { + "name": "lpszEntry", + "type": "LPWSTR" + }, + { + "name": "lpszPhoneNumber", + "type": "LPWSTR" + }, + { + "name": "lpInfo", + "type": { + "name": "tagRASDIALDLG", + "data_type": "Struct", + "elements": [] + } + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rasshost.json b/qiling/extensions/windows_sdk/rasshost.json new file mode 100644 index 000000000..63c83afc3 --- /dev/null +++ b/qiling/extensions/windows_sdk/rasshost.json @@ -0,0 +1,54 @@ +{ + "RasSecurityDialogComplete": [ + { + "name": "pSecMsg", + "type": "SECURITY_MESSAGE" + } + ], + "RasSecurityDialogSend": [ + { + "name": "hPort", + "type": "HPORT" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "BufferLength", + "type": "WORD" + } + ], + "RasSecurityDialogReceive": [ + { + "name": "hPort", + "type": "HPORT" + }, + { + "name": "pBuffer", + "type": "PBYTE" + }, + { + "name": "pBufferLength", + "type": "PWORD" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "RasSecurityDialogGetInfo": [ + { + "name": "hPort", + "type": "HPORT" + }, + { + "name": "pBuffer", + "type": "RAS_SECURITY_INFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/realtimeapiset.json b/qiling/extensions/windows_sdk/realtimeapiset.json new file mode 100644 index 000000000..d8509a250 --- /dev/null +++ b/qiling/extensions/windows_sdk/realtimeapiset.json @@ -0,0 +1,104 @@ +{ + "QueryThreadCycleTime": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "CycleTime", + "type": "PULONG64" + } + ], + "QueryProcessCycleTime": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "CycleTime", + "type": "PULONG64" + } + ], + "QueryIdleProcessorCycleTime": [ + { + "name": "BufferLength", + "type": "PULONG" + }, + { + "name": "ProcessorIdleCycleTime", + "type": "PULONG64" + } + ], + "QueryIdleProcessorCycleTimeEx": [ + { + "name": "Group", + "type": "USHORT" + }, + { + "name": "BufferLength", + "type": "PULONG" + }, + { + "name": "ProcessorIdleCycleTime", + "type": "PULONG64" + } + ], + "QueryInterruptTimePrecise": [ + { + "name": "lpInterruptTimePrecise", + "type": "PULONGLONG" + } + ], + "QueryUnbiasedInterruptTimePrecise": [ + { + "name": "lpUnbiasedInterruptTimePrecise", + "type": "PULONGLONG" + } + ], + "QueryInterruptTime": [ + { + "name": "lpInterruptTime", + "type": "PULONGLONG" + } + ], + "QueryUnbiasedInterruptTime": [ + { + "name": "UnbiasedTime", + "type": "PULONGLONG" + } + ], + "QueryAuxiliaryCounterFrequency": [ + { + "name": "lpAuxiliaryCounterFrequency", + "type": "PULONGLONG" + } + ], + "ConvertAuxiliaryCounterToPerformanceCounter": [ + { + "name": "ullAuxiliaryCounterValue", + "type": "ULONGLONG" + }, + { + "name": "lpPerformanceCounterValue", + "type": "PULONGLONG" + }, + { + "name": "lpConversionError", + "type": "PULONGLONG" + } + ], + "ConvertPerformanceCounterToAuxiliaryCounter": [ + { + "name": "ullPerformanceCounterValue", + "type": "ULONGLONG" + }, + { + "name": "lpAuxiliaryCounterValue", + "type": "PULONGLONG" + }, + { + "name": "lpConversionError", + "type": "PULONGLONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/remotesystemadditionalinfo.json b/qiling/extensions/windows_sdk/remotesystemadditionalinfo.json new file mode 100644 index 000000000..7e0f77c47 --- /dev/null +++ b/qiling/extensions/windows_sdk/remotesystemadditionalinfo.json @@ -0,0 +1,50 @@ +{ + "HSTRING_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "HSTRING_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "HSTRING_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "HSTRING_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/resourceindexer.json b/qiling/extensions/windows_sdk/resourceindexer.json new file mode 100644 index 000000000..37da7de14 --- /dev/null +++ b/qiling/extensions/windows_sdk/resourceindexer.json @@ -0,0 +1,58 @@ +{ + "CreateResourceIndexer": [ + { + "name": "projectRoot", + "type": "PCWSTR" + }, + { + "name": "extensionDllPath", + "type": "PCWSTR" + }, + { + "name": "ppResourceIndexer", + "type": "PVOID" + } + ], + "DestroyResourceIndexer": [ + { + "name": "resourceIndexer", + "type": "PVOID" + } + ], + "IndexFilePath": [ + { + "name": "resourceIndexer", + "type": "PVOID" + }, + { + "name": "filePath", + "type": "PCWSTR" + }, + { + "name": "ppResourceUri", + "type": "PWSTR" + }, + { + "name": "pQualifierCount", + "type": "ULONG" + }, + { + "name": "ppQualifiers", + "type": "IndexedResourceQualifier" + } + ], + "DestroyIndexedResults": [ + { + "name": "resourceUri", + "type": "PWSTR" + }, + { + "name": "qualifierCount", + "type": "ULONG" + }, + { + "name": "qualifiers", + "type": "IndexedResourceQualifier" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/restartmanager.json b/qiling/extensions/windows_sdk/restartmanager.json new file mode 100644 index 000000000..d93bc2c03 --- /dev/null +++ b/qiling/extensions/windows_sdk/restartmanager.json @@ -0,0 +1,176 @@ +{ + "RmStartSession": [ + { + "name": "pSessionHandle", + "type": "DWORD" + }, + { + "name": "dwSessionFlags", + "type": "DWORD" + }, + { + "name": "strSessionKey", + "type": "WCHAR" + } + ], + "RmJoinSession": [ + { + "name": "pSessionHandle", + "type": "DWORD" + }, + { + "name": "strSessionKey", + "type": "WCHAR" + } + ], + "RmEndSession": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + } + ], + "RmRegisterResources": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "nFiles", + "type": "UINT" + }, + { + "name": "rgsFileNames", + "type": "LPCWSTR" + }, + { + "name": "nApplications", + "type": "UINT" + }, + { + "name": "rgApplications", + "type": "RM_UNIQUE_PROCESS" + }, + { + "name": "nServices", + "type": "UINT" + }, + { + "name": "rgsServiceNames", + "type": "LPCWSTR" + } + ], + "RmGetList": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "pnProcInfoNeeded", + "type": "UINT" + }, + { + "name": "pnProcInfo", + "type": "UINT" + }, + { + "name": "rgAffectedApps", + "type": "RM_PROCESS_INFO" + }, + { + "name": "lpdwRebootReasons", + "type": "LPDWORD" + } + ], + "RmShutdown": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "lActionFlags", + "type": "ULONG" + }, + { + "name": "fnStatus", + "type": "RM_WRITE_STATUS_CALLBACK" + } + ], + "RmRestart": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "dwRestartFlags", + "type": "DWORD" + }, + { + "name": "fnStatus", + "type": "RM_WRITE_STATUS_CALLBACK" + } + ], + "RmCancelCurrentTask": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + } + ], + "RmAddFilter": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "strModuleName", + "type": "LPCWSTR" + }, + { + "name": "pProcess", + "type": "RM_UNIQUE_PROCESS" + }, + { + "name": "strServiceShortName", + "type": "LPCWSTR" + }, + { + "name": "FilterAction", + "type": "RM_FILTER_ACTION" + } + ], + "RmRemoveFilter": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "strModuleName", + "type": "LPCWSTR" + }, + { + "name": "pProcess", + "type": "RM_UNIQUE_PROCESS" + }, + { + "name": "strServiceShortName", + "type": "LPCWSTR" + } + ], + "RmGetFilterList": [ + { + "name": "dwSessionHandle", + "type": "DWORD" + }, + { + "name": "pbFilterBuf", + "type": "PBYTE" + }, + { + "name": "cbFilterBuf", + "type": "DWORD" + }, + { + "name": "cbFilterBufNeeded", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/robuffer.json b/qiling/extensions/windows_sdk/robuffer.json new file mode 100644 index 000000000..1995ff228 --- /dev/null +++ b/qiling/extensions/windows_sdk/robuffer.json @@ -0,0 +1,8 @@ +{ + "RoGetBufferMarshaler": [ + { + "name": "bufferMarshaler", + "type": "IMarshal" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/roerrorapi.json b/qiling/extensions/windows_sdk/roerrorapi.json new file mode 100644 index 000000000..fa976cd6d --- /dev/null +++ b/qiling/extensions/windows_sdk/roerrorapi.json @@ -0,0 +1,194 @@ +{ + "RoGetErrorReportingFlags": [ + { + "name": "pflags", + "type": "UINT32" + } + ], + "RoSetErrorReportingFlags": [ + { + "name": "flags", + "type": "UINT32" + } + ], + "RoResolveRestrictedErrorInfoReference": [ + { + "name": "reference", + "type": "PCWSTR" + }, + { + "name": "ppRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "SetRestrictedErrorInfo": [ + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "GetRestrictedErrorInfo": [ + { + "name": "ppRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "RoOriginateErrorW": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "message", + "type": "PCWSTR" + } + ], + "RoOriginateError": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + } + ], + "RoTransformErrorW": [ + { + "name": "oldError", + "type": "HRESULT" + }, + { + "name": "newError", + "type": "HRESULT" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "message", + "type": "PCWSTR" + } + ], + "RoTransformError": [ + { + "name": "oldError", + "type": "HRESULT" + }, + { + "name": "newError", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + } + ], + "RoCaptureErrorContext": [ + { + "name": "hr", + "type": "HRESULT" + } + ], + "RoFailFastWithErrorContext": [ + { + "name": "hrError", + "type": "HRESULT" + } + ], + "RoOriginateLanguageException": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + }, + { + "name": "languageException", + "type": "IUnknown" + } + ], + "RoClearError": [ + { + "name": "VOID", + "type": "void" + } + ], + "RoReportUnhandledError": [ + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "RoInspectThreadErrorInfo": [ + { + "name": "targetTebAddress", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "readMemoryCallback", + "type": "PINSPECT_MEMORY_CALLBACK" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "targetErrorInfoAddress", + "type": "UINT_PTR" + } + ], + "RoInspectCapturedStackBackTrace": [ + { + "name": "targetErrorInfoAddress", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "readMemoryCallback", + "type": "PINSPECT_MEMORY_CALLBACK" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "frameCount", + "type": "UINT32" + }, + { + "name": "targetBackTraceAddress", + "type": "UINT_PTR" + } + ], + "RoReportFailedDelegate": [ + { + "name": "punkDelegate", + "type": "IUnknown" + }, + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "IsErrorPropagationEnabled": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rometadata.json b/qiling/extensions/windows_sdk/rometadata.json new file mode 100644 index 000000000..1630d350d --- /dev/null +++ b/qiling/extensions/windows_sdk/rometadata.json @@ -0,0 +1,16 @@ +{ + "MetaDataGetDispenser": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/roregistrationapi.json b/qiling/extensions/windows_sdk/roregistrationapi.json new file mode 100644 index 000000000..274f35530 --- /dev/null +++ b/qiling/extensions/windows_sdk/roregistrationapi.json @@ -0,0 +1,26 @@ +{ + "RoGetActivatableClassRegistration": [ + { + "name": "activatableClassId", + "type": "HSTRING" + }, + { + "name": "activatableClassRegistration", + "type": "PActivatableClassRegistration" + } + ], + "RoGetServerActivatableClasses": [ + { + "name": "serverName", + "type": "HSTRING" + }, + { + "name": "activatableClassIds", + "type": "HSTRING" + }, + { + "name": "count", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rpcasync.json b/qiling/extensions/windows_sdk/rpcasync.json new file mode 100644 index 000000000..4d74a432e --- /dev/null +++ b/qiling/extensions/windows_sdk/rpcasync.json @@ -0,0 +1,274 @@ +{ + "RpcAsyncRegisterInfo": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + } + ], + "RpcAsyncInitializeHandle": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "Size", + "type": "unsigned int" + } + ], + "RpcAsyncGetCallStatus": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + } + ], + "RpcAsyncCompleteCall": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "Reply", + "type": "void" + } + ], + "RpcAsyncAbortCall": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "ExceptionCode", + "type": "unsigned long" + } + ], + "RpcAsyncCancelCall": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "fAbort", + "type": "BOOL" + } + ], + "RpcErrorStartEnumeration": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + } + ], + "RpcErrorGetNextRecord": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + }, + { + "name": "CopyStrings", + "type": "BOOL" + }, + { + "name": "ErrorInfo", + "type": "RPC_EXTENDED_ERROR_INFO" + } + ], + "RpcErrorEndEnumeration": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + } + ], + "RpcErrorResetEnumeration": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + } + ], + "RpcErrorGetNumberOfRecords": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + }, + { + "name": "Records", + "type": "int" + } + ], + "RpcErrorSaveErrorInfo": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + }, + { + "name": "ErrorBlob", + "type": "PVOID" + }, + { + "name": "BlobSize", + "type": "size_t" + } + ], + "RpcErrorLoadErrorInfo": [ + { + "name": "ErrorBlob", + "type": "PVOID" + }, + { + "name": "BlobSize", + "type": "size_t" + }, + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + } + ], + "RpcErrorAddRecord": [ + { + "name": "ErrorInfo", + "type": "RPC_EXTENDED_ERROR_INFO" + } + ], + "RpcErrorClearInformation": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcGetAuthorizationContextForClient": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ImpersonateOnReturn", + "type": "BOOL" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "pExpirationTime", + "type": "PLARGE_INTEGER" + }, + { + "name": "Reserved2", + "type": "LUID" + }, + { + "name": "Reserved3", + "type": "DWORD" + }, + { + "name": "Reserved4", + "type": "PVOID" + }, + { + "name": "pAuthzClientContext", + "type": "PVOID" + } + ], + "RpcFreeAuthorizationContext": [ + { + "name": "pAuthzClientContext", + "type": "PVOID" + } + ], + "RpcSsContextLockExclusive": [ + { + "name": "ServerBindingHandle", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "RpcSsContextLockShared": [ + { + "name": "ServerBindingHandle", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "RpcServerInqCallAttributesW": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "RpcCallAttributes", + "type": "void" + } + ], + "RpcServerInqCallAttributesA": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "RpcCallAttributes", + "type": "void" + } + ], + "RpcServerSubscribeForNotification": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Notification", + "type": "RPC_NOTIFICATIONS" + }, + { + "name": "NotificationType", + "type": "RPC_NOTIFICATION_TYPES" + }, + { + "name": "NotificationInfo", + "type": "RPC_ASYNC_NOTIFICATION_INFO" + } + ], + "RpcServerUnsubscribeForNotification": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Notification", + "type": "RPC_NOTIFICATIONS" + }, + { + "name": "NotificationsQueued", + "type": "unsigned long" + } + ], + "RpcBindingBind": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + } + ], + "RpcBindingUnbind": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "I_RpcExceptionFilter": [ + { + "name": "ExceptionCode", + "type": "unsigned long" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rpcdce.json b/qiling/extensions/windows_sdk/rpcdce.json new file mode 100644 index 000000000..6e531780b --- /dev/null +++ b/qiling/extensions/windows_sdk/rpcdce.json @@ -0,0 +1,1866 @@ +{ + "RpcBindingCopy": [ + { + "name": "SourceBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "DestinationBinding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingFree": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingSetOption": [ + { + "name": "hBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "option", + "type": "unsigned long" + }, + { + "name": "optionValue", + "type": "ULONG_PTR" + } + ], + "RpcBindingInqOption": [ + { + "name": "hBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "option", + "type": "unsigned long" + }, + { + "name": "pOptionValue", + "type": "ULONG_PTR" + } + ], + "RpcBindingFromStringBindingA": [ + { + "name": "StringBinding", + "type": "RPC_CSTR" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingFromStringBindingW": [ + { + "name": "StringBinding", + "type": "RPC_WSTR" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingInqObject": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + } + ], + "RpcBindingReset": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingSetObject": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + } + ], + "RpcMgmtInqDefaultProtectLevel": [ + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + } + ], + "RpcBindingToStringBindingA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "StringBinding", + "type": "RPC_CSTR" + } + ], + "RpcBindingToStringBindingW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "StringBinding", + "type": "RPC_WSTR" + } + ], + "RpcBindingVectorFree": [ + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + } + ], + "RpcStringBindingComposeA": [ + { + "name": "ObjUuid", + "type": "RPC_CSTR" + }, + { + "name": "ProtSeq", + "type": "RPC_CSTR" + }, + { + "name": "NetworkAddr", + "type": "RPC_CSTR" + }, + { + "name": "Endpoint", + "type": "RPC_CSTR" + }, + { + "name": "Options", + "type": "RPC_CSTR" + }, + { + "name": "StringBinding", + "type": "RPC_CSTR" + } + ], + "RpcStringBindingComposeW": [ + { + "name": "ObjUuid", + "type": "RPC_WSTR" + }, + { + "name": "ProtSeq", + "type": "RPC_WSTR" + }, + { + "name": "NetworkAddr", + "type": "RPC_WSTR" + }, + { + "name": "Endpoint", + "type": "RPC_WSTR" + }, + { + "name": "Options", + "type": "RPC_WSTR" + }, + { + "name": "StringBinding", + "type": "RPC_WSTR" + } + ], + "RpcStringBindingParseA": [ + { + "name": "StringBinding", + "type": "RPC_CSTR" + }, + { + "name": "ObjUuid", + "type": "RPC_CSTR" + }, + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "NetworkAddr", + "type": "RPC_CSTR" + }, + { + "name": "Endpoint", + "type": "RPC_CSTR" + }, + { + "name": "NetworkOptions", + "type": "RPC_CSTR" + } + ], + "RpcStringBindingParseW": [ + { + "name": "StringBinding", + "type": "RPC_WSTR" + }, + { + "name": "ObjUuid", + "type": "RPC_WSTR" + }, + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "NetworkAddr", + "type": "RPC_WSTR" + }, + { + "name": "Endpoint", + "type": "RPC_WSTR" + }, + { + "name": "NetworkOptions", + "type": "RPC_WSTR" + } + ], + "RpcStringFreeA": [ + { + "name": "String", + "type": "RPC_CSTR" + } + ], + "RpcStringFreeW": [ + { + "name": "String", + "type": "RPC_WSTR" + } + ], + "RpcIfInqId": [ + { + "name": "RpcIfHandle", + "type": "RPC_IF_HANDLE" + }, + { + "name": "RpcIfId", + "type": "RPC_IF_ID" + } + ], + "RpcNetworkIsProtseqValidA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + } + ], + "RpcNetworkIsProtseqValidW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + } + ], + "RpcMgmtInqComTimeout": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Timeout", + "type": "unsigned int" + } + ], + "RpcMgmtSetComTimeout": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Timeout", + "type": "unsigned int" + } + ], + "RpcMgmtSetCancelTimeout": [ + { + "name": "Timeout", + "type": "long" + } + ], + "RpcNetworkInqProtseqsA": [ + { + "name": "ProtseqVector", + "type": "RPC_PROTSEQ_VECTORA" + } + ], + "RpcNetworkInqProtseqsW": [ + { + "name": "ProtseqVector", + "type": "RPC_PROTSEQ_VECTORW" + } + ], + "RpcObjectInqType": [ + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "TypeUuid", + "type": "UUID" + } + ], + "RpcObjectSetInqFn": [ + { + "name": "InquiryFn", + "type": "RPC_OBJECT_INQ_FN" + } + ], + "RpcObjectSetType": [ + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "TypeUuid", + "type": "UUID" + } + ], + "RpcProtseqVectorFreeA": [ + { + "name": "ProtseqVector", + "type": "RPC_PROTSEQ_VECTORA" + } + ], + "RpcProtseqVectorFreeW": [ + { + "name": "ProtseqVector", + "type": "RPC_PROTSEQ_VECTORW" + } + ], + "RpcServerInqBindings": [ + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + } + ], + "RpcServerInqIf": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + } + ], + "RpcServerListen": [ + { + "name": "MinimumCallThreads", + "type": "unsigned int" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "DontWait", + "type": "unsigned int" + } + ], + "RpcServerRegisterIf": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + } + ], + "RpcServerRegisterIfEx": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + }, + { + "name": "Flags", + "type": "unsigned int" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfCallback", + "type": "RPC_IF_CALLBACK_FN" + } + ], + "RpcServerRegisterIf2": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + }, + { + "name": "Flags", + "type": "unsigned int" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "MaxRpcSize", + "type": "unsigned int" + }, + { + "name": "IfCallbackFn", + "type": "RPC_IF_CALLBACK_FN" + } + ], + "RpcServerRegisterIf3": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + }, + { + "name": "Flags", + "type": "unsigned int" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "MaxRpcSize", + "type": "unsigned int" + }, + { + "name": "IfCallback", + "type": "RPC_IF_CALLBACK_FN" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUnregisterIf": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "WaitForCallsToComplete", + "type": "unsigned int" + } + ], + "RpcServerUnregisterIfEx": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "RundownContextHandles", + "type": "int" + } + ], + "RpcServerUseAllProtseqs": [ + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseAllProtseqsEx": [ + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseAllProtseqsIf": [ + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseAllProtseqsIfEx": [ + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqExA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqExW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqEpA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "Endpoint", + "type": "RPC_CSTR" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqEpExA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "Endpoint", + "type": "RPC_CSTR" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqEpW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "Endpoint", + "type": "RPC_WSTR" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqEpExW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "Endpoint", + "type": "RPC_WSTR" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqIfA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqIfExA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqIfW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqIfExW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcMgmtStatsVectorFree": [ + { + "name": "StatsVector", + "type": "RPC_STATS_VECTOR" + } + ], + "RpcMgmtInqStats": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Statistics", + "type": "RPC_STATS_VECTOR" + } + ], + "RpcMgmtIsServerListening": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcMgmtStopServerListening": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcMgmtWaitServerListen": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcMgmtSetServerStackSize": [ + { + "name": "ThreadStackSize", + "type": "unsigned long" + } + ], + "RpcSsDontSerializeContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcMgmtEnableIdleCleanup": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcMgmtInqIfIds": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "IfIdVector", + "type": "RPC_IF_ID_VECTOR" + } + ], + "RpcIfIdVectorFree": [ + { + "name": "IfIdVector", + "type": "RPC_IF_ID_VECTOR" + } + ], + "RpcMgmtInqServerPrincNameA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + } + ], + "RpcMgmtInqServerPrincNameW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + } + ], + "RpcServerInqDefaultPrincNameA": [ + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "PrincName", + "type": "RPC_CSTR" + } + ], + "RpcServerInqDefaultPrincNameW": [ + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "PrincName", + "type": "RPC_WSTR" + } + ], + "RpcEpResolveBinding": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + } + ], + "RpcNsBindingInqEntryNameA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + } + ], + "RpcNsBindingInqEntryNameW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + } + ], + "RpcBindingCreateA": [ + { + "name": "Template", + "type": "RPC_BINDING_HANDLE_TEMPLATE_V1_A" + }, + { + "name": "Security", + "type": "RPC_BINDING_HANDLE_SECURITY_V1_A" + }, + { + "name": "Options", + "type": "RPC_BINDING_HANDLE_OPTIONS_V1" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingCreateW": [ + { + "name": "Template", + "type": "RPC_BINDING_HANDLE_TEMPLATE_V1_W" + }, + { + "name": "Security", + "type": "RPC_BINDING_HANDLE_SECURITY_V1_W" + }, + { + "name": "Options", + "type": "RPC_BINDING_HANDLE_OPTIONS_V1" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcServerInqBindingHandle": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcImpersonateClient": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcRevertToSelfEx": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcRevertToSelf": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcImpersonateClientContainer": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcRevertContainerImpersonation": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcBindingInqAuthClientA": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Privs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthClientW": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Privs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthClientExA": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Privs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "Flags", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthClientExW": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Privs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "Flags", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthInfoA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthInfoW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingSetAuthInfoA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingSetAuthInfoExA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "SecurityQos", + "type": "RPC_SECURITY_QOS" + } + ], + "RpcBindingSetAuthInfoW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingSetAuthInfoExW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "SecurityQOS", + "type": "RPC_SECURITY_QOS" + } + ], + "RpcBindingInqAuthInfoExA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "RpcQosVersion", + "type": "unsigned long" + }, + { + "name": "SecurityQOS", + "type": "RPC_SECURITY_QOS" + } + ], + "RpcBindingInqAuthInfoExW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "RpcQosVersion", + "type": "unsigned long" + }, + { + "name": "SecurityQOS", + "type": "RPC_SECURITY_QOS" + } + ], + "RpcServerCompleteSecurityCallback": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "RpcServerRegisterAuthInfoA": [ + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "GetKeyFn", + "type": "RPC_AUTH_KEY_RETRIEVAL_FN" + }, + { + "name": "Arg", + "type": "void" + } + ], + "RpcServerRegisterAuthInfoW": [ + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "GetKeyFn", + "type": "RPC_AUTH_KEY_RETRIEVAL_FN" + }, + { + "name": "Arg", + "type": "void" + } + ], + "RpcBindingServerFromClient": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerBinding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcRaiseException": [ + { + "name": "exception", + "type": "RPC_STATUS" + } + ], + "RpcTestCancel": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcServerTestCancel": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcCancelThread": [ + { + "name": "Thread", + "type": "void" + } + ], + "RpcCancelThreadEx": [ + { + "name": "Thread", + "type": "void" + }, + { + "name": "Timeout", + "type": "long" + } + ], + "UuidCreate": [ + { + "name": "Uuid", + "type": "UUID" + } + ], + "UuidCreateSequential": [ + { + "name": "Uuid", + "type": "UUID" + } + ], + "UuidToStringA": [ + { + "name": "Uuid", + "type": "UUID" + }, + { + "name": "StringUuid", + "type": "RPC_CSTR" + } + ], + "UuidFromStringA": [ + { + "name": "StringUuid", + "type": "RPC_CSTR" + }, + { + "name": "Uuid", + "type": "UUID" + } + ], + "UuidToStringW": [ + { + "name": "Uuid", + "type": "UUID" + }, + { + "name": "StringUuid", + "type": "RPC_WSTR" + } + ], + "UuidFromStringW": [ + { + "name": "StringUuid", + "type": "RPC_WSTR" + }, + { + "name": "Uuid", + "type": "UUID" + } + ], + "UuidCompare": [ + { + "name": "Uuid1", + "type": "UUID" + }, + { + "name": "Uuid2", + "type": "UUID" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "UuidCreateNil": [ + { + "name": "NilUuid", + "type": "UUID" + } + ], + "UuidEqual": [ + { + "name": "Uuid1", + "type": "UUID" + }, + { + "name": "Uuid2", + "type": "UUID" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "UuidHash": [ + { + "name": "Uuid", + "type": "UUID" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "UuidIsNil": [ + { + "name": "Uuid", + "type": "UUID" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "RpcEpRegisterNoReplaceA": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcEpRegisterNoReplaceW": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcEpRegisterA": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcEpRegisterW": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcEpUnregister": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + } + ], + "DceErrorInqTextA": [ + { + "name": "RpcStatus", + "type": "RPC_STATUS" + }, + { + "name": "ErrorText", + "type": "RPC_CSTR" + } + ], + "DceErrorInqTextW": [ + { + "name": "RpcStatus", + "type": "RPC_STATUS" + }, + { + "name": "ErrorText", + "type": "RPC_WSTR" + } + ], + "RpcMgmtEpEltInqBegin": [ + { + "name": "EpBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "InquiryType", + "type": "unsigned long" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "VersOption", + "type": "unsigned long" + }, + { + "name": "ObjectUuid", + "type": "UUID" + }, + { + "name": "InquiryContext", + "type": "RPC_EP_INQ_HANDLE" + } + ], + "RpcMgmtEpEltInqDone": [ + { + "name": "InquiryContext", + "type": "RPC_EP_INQ_HANDLE" + } + ], + "RpcMgmtEpEltInqNextA": [ + { + "name": "InquiryContext", + "type": "RPC_EP_INQ_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcMgmtEpEltInqNextW": [ + { + "name": "InquiryContext", + "type": "RPC_EP_INQ_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcMgmtEpUnregister": [ + { + "name": "EpBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + } + ], + "RpcMgmtSetAuthorizationFn": [ + { + "name": "AuthorizationFn", + "type": "RPC_MGMT_AUTHORIZATION_FN" + } + ], + "RpcExceptionFilter": [ + { + "name": "ExceptionCode", + "type": "unsigned long" + } + ], + "RpcServerInterfaceGroupCreateW": [ + { + "name": "Interfaces", + "type": "RPC_INTERFACE_TEMPLATEW" + }, + { + "name": "NumIfs", + "type": "unsigned long" + }, + { + "name": "Endpoints", + "type": "RPC_ENDPOINT_TEMPLATEW" + }, + { + "name": "NumEndpoints", + "type": "unsigned long" + }, + { + "name": "IdlePeriod", + "type": "unsigned long" + }, + { + "name": "IdleCallbackFn", + "type": "RPC_INTERFACE_GROUP_IDLE_CALLBACK_FN" + }, + { + "name": "IdleCallbackContext", + "type": "void" + }, + { + "name": "IfGroup", + "type": "PRPC_INTERFACE_GROUP" + } + ], + "RpcServerInterfaceGroupCreateA": [ + { + "name": "Interfaces", + "type": "RPC_INTERFACE_TEMPLATEA" + }, + { + "name": "NumIfs", + "type": "unsigned long" + }, + { + "name": "Endpoints", + "type": "RPC_ENDPOINT_TEMPLATEA" + }, + { + "name": "NumEndpoints", + "type": "unsigned long" + }, + { + "name": "IdlePeriod", + "type": "unsigned long" + }, + { + "name": "IdleCallbackFn", + "type": "RPC_INTERFACE_GROUP_IDLE_CALLBACK_FN" + }, + { + "name": "IdleCallbackContext", + "type": "void" + }, + { + "name": "IfGroup", + "type": "PRPC_INTERFACE_GROUP" + } + ], + "RpcServerInterfaceGroupClose": [ + { + "name": "IfGroup", + "type": "RPC_INTERFACE_GROUP" + } + ], + "RpcServerInterfaceGroupActivate": [ + { + "name": "IfGroup", + "type": "RPC_INTERFACE_GROUP" + } + ], + "RpcServerInterfaceGroupDeactivate": [ + { + "name": "IfGroup", + "type": "RPC_INTERFACE_GROUP" + }, + { + "name": "ForceDeactivation", + "type": "unsigned long" + } + ], + "RpcServerInterfaceGroupInqBindings": [ + { + "name": "IfGroup", + "type": "RPC_INTERFACE_GROUP" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rpcdcep.json b/qiling/extensions/windows_sdk/rpcdcep.json new file mode 100644 index 000000000..612c93961 --- /dev/null +++ b/qiling/extensions/windows_sdk/rpcdcep.json @@ -0,0 +1,12 @@ +{ + "I_RpcBindingInqLocalClientPID": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Pid", + "type": "unsigned long" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rpcndr.json b/qiling/extensions/windows_sdk/rpcndr.json new file mode 100644 index 000000000..86d3be2be --- /dev/null +++ b/qiling/extensions/windows_sdk/rpcndr.json @@ -0,0 +1,534 @@ +{ + "RpcSsDestroyClientContext": [ + { + "name": "ContextHandle", + "type": "void" + } + ], + "NdrSimpleTypeMarshall": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "FormatChar", + "type": "unsigned char" + } + ], + "NdrSimpleTypeUnmarshall": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "FormatChar", + "type": "unsigned char" + } + ], + "NdrContextHandleInitialize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrPointerBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrSimpleStructBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrComplexStructBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrConformantArrayBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrComplexArrayBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrConformantStringBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrUserMarshalBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrInterfacePointerBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrContextHandleSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrContextHandleMemorySize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrPointerFree": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrUserMarshalFree": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrInterfacePointerFree": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrConvert": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrClientCall2": [ + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrClientCall": [ + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrAsyncClientCall": [ + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrDcomAsyncClientCall": [ + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrAsyncServerCall": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + } + ], + "NdrStubCall2": [ + { + "name": "pThis", + "type": "void" + }, + { + "name": "pChannel", + "type": "void" + }, + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pdwStubPhase", + "type": "unsigned long" + } + ], + "NdrServerCall2": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + } + ], + "RpcSsDisableAllocate": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSsEnableAllocate": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSsFree": [ + { + "name": "NodeToFree", + "type": "void" + } + ], + "RpcSsGetThreadHandle": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSsSetClientAllocFree": [ + { + "name": "ClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "ClientFree", + "type": "RPC_CLIENT_FREE" + } + ], + "RpcSsSetThreadHandle": [ + { + "name": "Id", + "type": "RPC_SS_THREAD_HANDLE" + } + ], + "RpcSsSwapClientAllocFree": [ + { + "name": "ClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "ClientFree", + "type": "RPC_CLIENT_FREE" + }, + { + "name": "OldClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "OldClientFree", + "type": "RPC_CLIENT_FREE" + } + ], + "RpcSmClientFree": [ + { + "name": "pNodeToFree", + "type": "void" + } + ], + "RpcSmDestroyClientContext": [ + { + "name": "ContextHandle", + "type": "void" + } + ], + "RpcSmDisableAllocate": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSmEnableAllocate": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSmFree": [ + { + "name": "NodeToFree", + "type": "void" + } + ], + "RpcSmGetThreadHandle": [ + { + "name": "pStatus", + "type": "RPC_STATUS" + } + ], + "RpcSmSetClientAllocFree": [ + { + "name": "ClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "ClientFree", + "type": "RPC_CLIENT_FREE" + } + ], + "RpcSmSetThreadHandle": [ + { + "name": "Id", + "type": "RPC_SS_THREAD_HANDLE" + } + ], + "RpcSmSwapClientAllocFree": [ + { + "name": "ClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "ClientFree", + "type": "RPC_CLIENT_FREE" + }, + { + "name": "OldClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "OldClientFree", + "type": "RPC_CLIENT_FREE" + } + ], + "NdrClearOutParameters": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + }, + { + "name": "ArgAddr", + "type": "void" + } + ], + "NdrOleFree": [ + { + "name": "NodeToFree", + "type": "void" + } + ], + "NdrGetUserMarshalInfo": [ + { + "name": "pFlags", + "type": "unsigned long" + }, + { + "name": "InformationLevel", + "type": "unsigned long" + }, + { + "name": "pMarshalInfo", + "type": "NDR_USER_MARSHAL_INFO" + } + ], + "NdrClientCall3": [ + { + "name": "pProxyInfo", + "type": "MIDL_STUBLESS_PROXY_INFO" + }, + { + "name": "nProcNum", + "type": "unsigned long" + }, + { + "name": "pReturnValue", + "type": "void" + } + ], + "Ndr64AsyncClientCall": [ + { + "name": "pProxyInfo", + "type": "MIDL_STUBLESS_PROXY_INFO" + }, + { + "name": "nProcNum", + "type": "unsigned long" + }, + { + "name": "pReturnValue", + "type": "void" + } + ], + "Ndr64AsyncServerCallAll": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + } + ], + "NdrStubCall3": [ + { + "name": "pThis", + "type": "void" + }, + { + "name": "pChannel", + "type": "void" + }, + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pdwStubPhase", + "type": "unsigned long" + } + ], + "NdrServerCallAll": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + } + ], + "RpcUserFree": [ + { + "name": "AsyncHandle", + "type": "handle_t" + }, + { + "name": "pBuffer", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rpcnsi.json b/qiling/extensions/windows_sdk/rpcnsi.json new file mode 100644 index 000000000..d14bbf1e1 --- /dev/null +++ b/qiling/extensions/windows_sdk/rpcnsi.json @@ -0,0 +1,894 @@ +{ + "RpcNsBindingExportA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVec", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "ObjectUuidVec", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingUnexportA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjectUuidVec", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingExportW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVec", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "ObjectUuidVec", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingUnexportW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjectUuidVec", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingExportPnPA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjectVector", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingUnexportPnPA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjectVector", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingExportPnPW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjectVector", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingUnexportPnPW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjectVector", + "type": "UUID_VECTOR" + } + ], + "RpcNsBindingLookupBeginA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "BindingMaxCount", + "type": "unsigned long" + }, + { + "name": "LookupContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsBindingLookupBeginW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "BindingMaxCount", + "type": "unsigned long" + }, + { + "name": "LookupContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsBindingLookupNext": [ + { + "name": "LookupContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "BindingVec", + "type": "RPC_BINDING_VECTOR" + } + ], + "RpcNsBindingLookupDone": [ + { + "name": "LookupContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsGroupDeleteA": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_CSTR" + } + ], + "RpcNsGroupMbrAddA": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_CSTR" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + } + ], + "RpcNsGroupMbrRemoveA": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_CSTR" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + } + ], + "RpcNsGroupMbrInqBeginA": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_CSTR" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsGroupMbrInqNextA": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + } + ], + "RpcNsGroupDeleteW": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_WSTR" + } + ], + "RpcNsGroupMbrAddW": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_WSTR" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + } + ], + "RpcNsGroupMbrRemoveW": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_WSTR" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + } + ], + "RpcNsGroupMbrInqBeginW": [ + { + "name": "GroupNameSyntax", + "type": "unsigned long" + }, + { + "name": "GroupName", + "type": "RPC_WSTR" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsGroupMbrInqNextW": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + } + ], + "RpcNsGroupMbrInqDone": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsProfileDeleteA": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_CSTR" + } + ], + "RpcNsProfileEltAddA": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_CSTR" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + }, + { + "name": "Priority", + "type": "unsigned long" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcNsProfileEltRemoveA": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_CSTR" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + } + ], + "RpcNsProfileEltInqBeginA": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_CSTR" + }, + { + "name": "InquiryType", + "type": "unsigned long" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "VersOption", + "type": "unsigned long" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + }, + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsProfileEltInqNextA": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "MemberName", + "type": "RPC_CSTR" + }, + { + "name": "Priority", + "type": "unsigned long" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcNsProfileDeleteW": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_WSTR" + } + ], + "RpcNsProfileEltAddW": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_WSTR" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + }, + { + "name": "Priority", + "type": "unsigned long" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcNsProfileEltRemoveW": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_WSTR" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + } + ], + "RpcNsProfileEltInqBeginW": [ + { + "name": "ProfileNameSyntax", + "type": "unsigned long" + }, + { + "name": "ProfileName", + "type": "RPC_WSTR" + }, + { + "name": "InquiryType", + "type": "unsigned long" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "VersOption", + "type": "unsigned long" + }, + { + "name": "MemberNameSyntax", + "type": "unsigned long" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + }, + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsProfileEltInqNextW": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "MemberName", + "type": "RPC_WSTR" + }, + { + "name": "Priority", + "type": "unsigned long" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcNsProfileEltInqDone": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsEntryObjectInqBeginA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsEntryObjectInqBeginW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsEntryObjectInqNext": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "ObjUuid", + "type": "UUID" + } + ], + "RpcNsEntryObjectInqDone": [ + { + "name": "InquiryContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsEntryExpandNameA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "ExpandedName", + "type": "RPC_CSTR" + } + ], + "RpcNsMgmtBindingUnexportA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "VersOption", + "type": "unsigned long" + }, + { + "name": "ObjectUuidVec", + "type": "UUID_VECTOR" + } + ], + "RpcNsMgmtEntryCreateA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + } + ], + "RpcNsMgmtEntryDeleteA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + } + ], + "RpcNsMgmtEntryInqIfIdsA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfIdVec", + "type": "RPC_IF_ID_VECTOR" + } + ], + "RpcNsMgmtHandleSetExpAge": [ + { + "name": "NsHandle", + "type": "RPC_NS_HANDLE" + }, + { + "name": "ExpirationAge", + "type": "unsigned long" + } + ], + "RpcNsMgmtInqExpAge": [ + { + "name": "ExpirationAge", + "type": "unsigned long" + } + ], + "RpcNsMgmtSetExpAge": [ + { + "name": "ExpirationAge", + "type": "unsigned long" + } + ], + "RpcNsEntryExpandNameW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "ExpandedName", + "type": "RPC_WSTR" + } + ], + "RpcNsMgmtBindingUnexportW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "VersOption", + "type": "unsigned long" + }, + { + "name": "ObjectUuidVec", + "type": "UUID_VECTOR" + } + ], + "RpcNsMgmtEntryCreateW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + } + ], + "RpcNsMgmtEntryDeleteW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + } + ], + "RpcNsMgmtEntryInqIfIdsW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfIdVec", + "type": "RPC_IF_ID_VECTOR" + } + ], + "RpcNsBindingImportBeginA": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "ImportContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsBindingImportBeginW": [ + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "ImportContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsBindingImportNext": [ + { + "name": "ImportContext", + "type": "RPC_NS_HANDLE" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcNsBindingImportDone": [ + { + "name": "ImportContext", + "type": "RPC_NS_HANDLE" + } + ], + "RpcNsBindingSelect": [ + { + "name": "BindingVec", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rpcproxy.json b/qiling/extensions/windows_sdk/rpcproxy.json new file mode 100644 index 000000000..b781d013f --- /dev/null +++ b/qiling/extensions/windows_sdk/rpcproxy.json @@ -0,0 +1,380 @@ +{ + "NdrProxyInitialize": [ + { + "name": "This", + "type": "void" + }, + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "ProcNum", + "type": "unsigned int" + } + ], + "NdrProxyGetBuffer": [ + { + "name": "This", + "type": "void" + }, + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + } + ], + "NdrProxySendReceive": [ + { + "name": "This", + "type": "void" + }, + { + "name": "pStubMsg", + "type": "MIDL_STUB_MESSAGE" + } + ], + "NdrProxyFreeBuffer": [ + { + "name": "This", + "type": "void" + }, + { + "name": "pStubMsg", + "type": "MIDL_STUB_MESSAGE" + } + ], + "NdrProxyErrorHandler": [ + { + "name": "dwExceptionCode", + "type": "DWORD" + } + ], + "NdrStubInitialize": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pRpcChannelBuffer", + "type": "IRpcChannelBuffer" + } + ], + "NdrStubForwardingFunction": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pChannel", + "type": "IRpcChannelBuffer" + }, + { + "name": "pmsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pdwStubPhase", + "type": "DWORD" + } + ], + "NdrStubGetBuffer": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pRpcChannelBuffer", + "type": "IRpcChannelBuffer" + }, + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + } + ], + "CStdStubBuffer_QueryInterface": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CStdStubBuffer_AddRef": [ + { + "name": "This", + "type": "IRpcStubBuffer" + } + ], + "NdrCStdStubBuffer_Release": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pPSF", + "type": "IPSFactoryBuffer" + } + ], + "CStdStubBuffer_Connect": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pUnkServer", + "type": "IUnknown" + } + ], + "CStdStubBuffer_Disconnect": [ + { + "name": "This", + "type": "IRpcStubBuffer" + } + ], + "CStdStubBuffer_Invoke": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pRpcMsg", + "type": "RPCOLEMESSAGE" + }, + { + "name": "pRpcChannelBuffer", + "type": "IRpcChannelBuffer" + } + ], + "CStdStubBuffer_CountRefs": [ + { + "name": "This", + "type": "IRpcStubBuffer" + } + ], + "CStdStubBuffer_DebugServerQueryInterface": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CStdStubBuffer_DebugServerRelease": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pv", + "type": "void" + } + ], + "CStdStubBuffer2_QueryInterface": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CStdStubBuffer2_Connect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "pUnkServer", + "type": "IUnknown" + } + ], + "CStdStubBuffer2_Disconnect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdStubBuffer2_CountRefs": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "NdrCStdStubBuffer2_Release": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pPSF", + "type": "IPSFactoryBuffer" + } + ], + "CStdAsyncStubBuffer_QueryInterface": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CStdAsyncStubBuffer_AddRef": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer_Release": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer_Connect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "pUnkServer", + "type": "IUnknown" + } + ], + "CStdAsyncStubBuffer_Disconnect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer_Invoke": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "_prpcmsg", + "type": "RPCOLEMESSAGE" + }, + { + "name": "_pRpcChannelBuffer", + "type": "IRpcChannelBuffer" + } + ], + "CStdAsyncStubBuffer2_Release": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer2_Connect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "pUnkServer", + "type": "IUnknown" + } + ], + "CStdAsyncStubBuffer2_Disconnect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "NdrDllGetClassObject": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + }, + { + "name": "pProxyFileList", + "type": "ProxyFileInfo" + }, + { + "name": "pclsid", + "type": "CLSID" + }, + { + "name": "pPSFactoryBuffer", + "type": "CStdPSFactoryBuffer" + } + ], + "NdrDllCanUnloadNow": [ + { + "name": "pPSFactoryBuffer", + "type": "CStdPSFactoryBuffer" + } + ], + "NdrDllRegisterProxy": [ + { + "name": "hDll", + "type": "HMODULE" + }, + { + "name": "pProxyFileList", + "type": "ProxyFileInfo" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "NdrDllUnregisterProxy": [ + { + "name": "hDll", + "type": "HMODULE" + }, + { + "name": "pProxyFileList", + "type": "ProxyFileInfo" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rpcssl.json b/qiling/extensions/windows_sdk/rpcssl.json new file mode 100644 index 000000000..bd29f6670 --- /dev/null +++ b/qiling/extensions/windows_sdk/rpcssl.json @@ -0,0 +1,30 @@ +{ + "RpcCertGeneratePrincipalNameW": [ + { + "name": "Context", + "type": "PCCERT_CONTEXT" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "RPC_WSTR" + } + ], + "RpcCertGeneratePrincipalNameA": [ + { + "name": "Context", + "type": "PCCERT_CONTEXT" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "RPC_CSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rrascfg.json b/qiling/extensions/windows_sdk/rrascfg.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/rrascfg.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rtlsupportapi.json b/qiling/extensions/windows_sdk/rtlsupportapi.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/rtlsupportapi.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rtmv2.json b/qiling/extensions/windows_sdk/rtmv2.json new file mode 100644 index 000000000..ff02edc95 --- /dev/null +++ b/qiling/extensions/windows_sdk/rtmv2.json @@ -0,0 +1,1008 @@ +{ + "RtmRegisterEntity": [ + { + "name": "RtmEntityInfo", + "type": "PRTM_ENTITY_INFO" + }, + { + "name": "ExportMethods", + "type": "PRTM_ENTITY_EXPORT_METHODS" + }, + { + "name": "EventCallback", + "type": "RTM_EVENT_CALLBACK" + }, + { + "name": "ReserveOpaquePointer", + "type": "BOOL" + }, + { + "name": "RtmRegProfile", + "type": "PRTM_REGN_PROFILE" + }, + { + "name": "RtmRegHandle", + "type": "PRTM_ENTITY_HANDLE" + } + ], + "RtmDeregisterEntity": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + } + ], + "RtmGetRegisteredEntities": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumEntities", + "type": "PUINT" + }, + { + "name": "EntityHandles", + "type": "PRTM_ENTITY_HANDLE" + }, + { + "name": "EntityInfos", + "type": "PRTM_ENTITY_INFO" + } + ], + "RtmReleaseEntities": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumEntities", + "type": "UINT" + }, + { + "name": "EntityHandles", + "type": "PRTM_ENTITY_HANDLE" + } + ], + "RtmLockDestination": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "Exclusive", + "type": "BOOL" + }, + { + "name": "LockDest", + "type": "BOOL" + } + ], + "RtmGetOpaqueInformationPointer": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "OpaqueInfoPointer", + "type": "PVOID" + } + ], + "RtmGetEntityMethods": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EntityHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumMethods", + "type": "PUINT" + }, + { + "name": "ExptMethods", + "type": "PRTM_ENTITY_EXPORT_METHOD" + } + ], + "RtmInvokeMethod": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EntityHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "Input", + "type": "PRTM_ENTITY_METHOD_INPUT" + }, + { + "name": "OutputSize", + "type": "PUINT" + }, + { + "name": "Output", + "type": "PRTM_ENTITY_METHOD_OUTPUT" + } + ], + "RtmBlockMethods": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "TargetHandle", + "type": "HANDLE" + }, + { + "name": "TargetType", + "type": "UCHAR" + }, + { + "name": "BlockingFlag", + "type": "DWORD" + } + ], + "RtmGetEntityInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EntityHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EntityInfo", + "type": "PRTM_ENTITY_INFO" + } + ], + "RtmGetDestInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "ProtocolId", + "type": "ULONG" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "DestInfo", + "type": "PRTM_DEST_INFO" + } + ], + "RtmGetRouteInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "RTM_ROUTE_HANDLE" + }, + { + "name": "RouteInfo", + "type": "PRTM_ROUTE_INFO" + }, + { + "name": "DestAddress", + "type": "PRTM_NET_ADDRESS" + } + ], + "RtmGetNextHopInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopHandle", + "type": "RTM_NEXTHOP_HANDLE" + }, + { + "name": "NextHopInfo", + "type": "PRTM_NEXTHOP_INFO" + } + ], + "RtmReleaseEntityInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EntityInfo", + "type": "PRTM_ENTITY_INFO" + } + ], + "RtmReleaseDestInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestInfo", + "type": "PRTM_DEST_INFO" + } + ], + "RtmReleaseRouteInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteInfo", + "type": "PRTM_ROUTE_INFO" + } + ], + "RtmReleaseNextHopInfo": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopInfo", + "type": "PRTM_NEXTHOP_INFO" + } + ], + "RtmAddRouteToDest": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "PRTM_ROUTE_HANDLE" + }, + { + "name": "DestAddress", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "RouteInfo", + "type": "PRTM_ROUTE_INFO" + }, + { + "name": "TimeToLive", + "type": "ULONG" + }, + { + "name": "RouteListHandle", + "type": "RTM_ROUTE_LIST_HANDLE" + }, + { + "name": "NotifyType", + "type": "RTM_NOTIFY_FLAGS" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "ChangeFlags", + "type": "PRTM_ROUTE_CHANGE_FLAGS" + } + ], + "RtmDeleteRouteToDest": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "RTM_ROUTE_HANDLE" + }, + { + "name": "ChangeFlags", + "type": "PRTM_ROUTE_CHANGE_FLAGS" + } + ], + "RtmHoldDestination": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "HoldTime", + "type": "ULONG" + } + ], + "RtmGetRoutePointer": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "RTM_ROUTE_HANDLE" + }, + { + "name": "RoutePointer", + "type": "PRTM_ROUTE_INFO" + } + ], + "RtmLockRoute": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "RTM_ROUTE_HANDLE" + }, + { + "name": "Exclusive", + "type": "BOOL" + }, + { + "name": "LockRoute", + "type": "BOOL" + }, + { + "name": "RoutePointer", + "type": "PRTM_ROUTE_INFO" + } + ], + "RtmUpdateAndUnlockRoute": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "RTM_ROUTE_HANDLE" + }, + { + "name": "TimeToLive", + "type": "ULONG" + }, + { + "name": "RouteListHandle", + "type": "RTM_ROUTE_LIST_HANDLE" + }, + { + "name": "NotifyType", + "type": "RTM_NOTIFY_FLAGS" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "ChangeFlags", + "type": "PRTM_ROUTE_CHANGE_FLAGS" + } + ], + "RtmGetExactMatchDestination": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestAddress", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "ProtocolId", + "type": "ULONG" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "DestInfo", + "type": "PRTM_DEST_INFO" + } + ], + "RtmGetMostSpecificDestination": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestAddress", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "ProtocolId", + "type": "ULONG" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "DestInfo", + "type": "PRTM_DEST_INFO" + } + ], + "RtmGetLessSpecificDestination": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "ProtocolId", + "type": "ULONG" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "DestInfo", + "type": "PRTM_DEST_INFO" + } + ], + "RtmGetExactMatchRoute": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestAddress", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "MatchingFlags", + "type": "RTM_MATCH_FLAGS" + }, + { + "name": "RouteInfo", + "type": "PRTM_ROUTE_INFO" + }, + { + "name": "InterfaceIndex", + "type": "ULONG" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "RouteHandle", + "type": "PRTM_ROUTE_HANDLE" + } + ], + "RtmIsBestRoute": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteHandle", + "type": "RTM_ROUTE_HANDLE" + }, + { + "name": "BestInViews", + "type": "PRTM_VIEW_SET" + } + ], + "RtmAddNextHop": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopInfo", + "type": "PRTM_NEXTHOP_INFO" + }, + { + "name": "NextHopHandle", + "type": "PRTM_NEXTHOP_HANDLE" + }, + { + "name": "ChangeFlags", + "type": "PRTM_NEXTHOP_CHANGE_FLAGS" + } + ], + "RtmFindNextHop": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopInfo", + "type": "PRTM_NEXTHOP_INFO" + }, + { + "name": "NextHopHandle", + "type": "PRTM_NEXTHOP_HANDLE" + }, + { + "name": "NextHopPointer", + "type": "PRTM_NEXTHOP_INFO" + } + ], + "RtmDeleteNextHop": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopHandle", + "type": "RTM_NEXTHOP_HANDLE" + }, + { + "name": "NextHopInfo", + "type": "PRTM_NEXTHOP_INFO" + } + ], + "RtmGetNextHopPointer": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopHandle", + "type": "RTM_NEXTHOP_HANDLE" + }, + { + "name": "NextHopPointer", + "type": "PRTM_NEXTHOP_INFO" + } + ], + "RtmLockNextHop": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NextHopHandle", + "type": "RTM_NEXTHOP_HANDLE" + }, + { + "name": "Exclusive", + "type": "BOOL" + }, + { + "name": "LockNextHop", + "type": "BOOL" + }, + { + "name": "NextHopPointer", + "type": "PRTM_NEXTHOP_INFO" + } + ], + "RtmCreateDestEnum": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "EnumFlags", + "type": "RTM_ENUM_FLAGS" + }, + { + "name": "NetAddress", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "ProtocolId", + "type": "ULONG" + }, + { + "name": "RtmEnumHandle", + "type": "PRTM_ENUM_HANDLE" + } + ], + "RtmGetEnumDests": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EnumHandle", + "type": "RTM_ENUM_HANDLE" + }, + { + "name": "NumDests", + "type": "PUINT" + }, + { + "name": "DestInfos", + "type": "PRTM_DEST_INFO" + } + ], + "RtmReleaseDests": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumDests", + "type": "UINT" + }, + { + "name": "DestInfos", + "type": "PRTM_DEST_INFO" + } + ], + "RtmCreateRouteEnum": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "EnumFlags", + "type": "RTM_ENUM_FLAGS" + }, + { + "name": "StartDest", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "MatchingFlags", + "type": "RTM_MATCH_FLAGS" + }, + { + "name": "CriteriaRoute", + "type": "PRTM_ROUTE_INFO" + }, + { + "name": "CriteriaInterface", + "type": "ULONG" + }, + { + "name": "RtmEnumHandle", + "type": "PRTM_ENUM_HANDLE" + } + ], + "RtmGetEnumRoutes": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EnumHandle", + "type": "RTM_ENUM_HANDLE" + }, + { + "name": "NumRoutes", + "type": "PUINT" + }, + { + "name": "RouteHandles", + "type": "PRTM_ROUTE_HANDLE" + } + ], + "RtmReleaseRoutes": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumRoutes", + "type": "UINT" + }, + { + "name": "RouteHandles", + "type": "PRTM_ROUTE_HANDLE" + } + ], + "RtmCreateNextHopEnum": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EnumFlags", + "type": "RTM_ENUM_FLAGS" + }, + { + "name": "NetAddress", + "type": "PRTM_NET_ADDRESS" + }, + { + "name": "RtmEnumHandle", + "type": "PRTM_ENUM_HANDLE" + } + ], + "RtmGetEnumNextHops": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EnumHandle", + "type": "RTM_ENUM_HANDLE" + }, + { + "name": "NumNextHops", + "type": "PUINT" + }, + { + "name": "NextHopHandles", + "type": "PRTM_NEXTHOP_HANDLE" + } + ], + "RtmReleaseNextHops": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumNextHops", + "type": "UINT" + }, + { + "name": "NextHopHandles", + "type": "PRTM_NEXTHOP_HANDLE" + } + ], + "RtmDeleteEnumHandle": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EnumHandle", + "type": "RTM_ENUM_HANDLE" + } + ], + "RtmRegisterForChangeNotification": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "TargetViews", + "type": "RTM_VIEW_SET" + }, + { + "name": "NotifyFlags", + "type": "RTM_NOTIFY_FLAGS" + }, + { + "name": "NotifyContext", + "type": "PVOID" + }, + { + "name": "NotifyHandle", + "type": "PRTM_NOTIFY_HANDLE" + } + ], + "RtmGetChangedDests": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "NumDests", + "type": "PUINT" + }, + { + "name": "ChangedDests", + "type": "PRTM_DEST_INFO" + } + ], + "RtmReleaseChangedDests": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "NumDests", + "type": "UINT" + }, + { + "name": "ChangedDests", + "type": "PRTM_DEST_INFO" + } + ], + "RtmIgnoreChangedDests": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "NumDests", + "type": "UINT" + }, + { + "name": "ChangedDests", + "type": "PRTM_DEST_HANDLE" + } + ], + "RtmGetChangeStatus": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "ChangeStatus", + "type": "PBOOL" + } + ], + "RtmMarkDestForChangeNotification": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "MarkDest", + "type": "BOOL" + } + ], + "RtmIsMarkedForChangeNotification": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + }, + { + "name": "DestHandle", + "type": "RTM_DEST_HANDLE" + }, + { + "name": "DestMarked", + "type": "PBOOL" + } + ], + "RtmDeregisterFromChangeNotification": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NotifyHandle", + "type": "RTM_NOTIFY_HANDLE" + } + ], + "RtmCreateRouteList": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteListHandle", + "type": "PRTM_ROUTE_LIST_HANDLE" + } + ], + "RtmInsertInRouteList": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteListHandle", + "type": "RTM_ROUTE_LIST_HANDLE" + }, + { + "name": "NumRoutes", + "type": "UINT" + }, + { + "name": "RouteHandles", + "type": "PRTM_ROUTE_HANDLE" + } + ], + "RtmCreateRouteListEnum": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteListHandle", + "type": "RTM_ROUTE_LIST_HANDLE" + }, + { + "name": "RtmEnumHandle", + "type": "PRTM_ENUM_HANDLE" + } + ], + "RtmGetListEnumRoutes": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "EnumHandle", + "type": "RTM_ENUM_HANDLE" + }, + { + "name": "NumRoutes", + "type": "PUINT" + }, + { + "name": "RouteHandles", + "type": "PRTM_ROUTE_HANDLE" + } + ], + "RtmDeleteRouteList": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "RouteListHandle", + "type": "RTM_ROUTE_LIST_HANDLE" + } + ], + "RtmReferenceHandles": [ + { + "name": "RtmRegHandle", + "type": "RTM_ENTITY_HANDLE" + }, + { + "name": "NumHandles", + "type": "UINT" + }, + { + "name": "RtmHandles", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rtworkq.json b/qiling/extensions/windows_sdk/rtworkq.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/rtworkq.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sas.json b/qiling/extensions/windows_sdk/sas.json new file mode 100644 index 000000000..32b0c98e1 --- /dev/null +++ b/qiling/extensions/windows_sdk/sas.json @@ -0,0 +1,8 @@ +{ + "SendSAS": [ + { + "name": "AsUser", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/schannel.json b/qiling/extensions/windows_sdk/schannel.json new file mode 100644 index 000000000..975c933af --- /dev/null +++ b/qiling/extensions/windows_sdk/schannel.json @@ -0,0 +1,68 @@ +{ + "SslEmptyCacheA": [ + { + "name": "pszTargetName", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SslEmptyCacheW": [ + { + "name": "pszTargetName", + "type": "LPWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SslCrackCertificate": [ + { + "name": "pbCertificate", + "type": "PUCHAR" + }, + { + "name": "cbCertificate", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppCertificate", + "type": "PX509Certificate" + } + ], + "SslFreeCertificate": [ + { + "name": "pCertificate", + "type": "PX509Certificate" + } + ], + "SslGetServerIdentity": [ + { + "name": "ClientHello", + "type": "PBYTE" + }, + { + "name": "ClientHelloSize", + "type": "DWORD" + }, + { + "name": "ServerIdentity", + "type": "PBYTE" + }, + { + "name": "ServerIdentitySize", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/scrnsave.json b/qiling/extensions/windows_sdk/scrnsave.json new file mode 100644 index 000000000..83d4593b5 --- /dev/null +++ b/qiling/extensions/windows_sdk/scrnsave.json @@ -0,0 +1,62 @@ +{ + "ScreenSaverProc": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "message", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefScreenSaverProc": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "ScreenSaverConfigureDialog": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "message", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "RegisterDialogClasses": [ + { + "name": "hInst", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sddl.json b/qiling/extensions/windows_sdk/sddl.json new file mode 100644 index 000000000..cb5c508c7 --- /dev/null +++ b/qiling/extensions/windows_sdk/sddl.json @@ -0,0 +1,122 @@ +{ + "ConvertSidToStringSidA": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "StringSid", + "type": "LPSTR" + } + ], + "ConvertSidToStringSidW": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "StringSid", + "type": "LPWSTR" + } + ], + "ConvertStringSidToSidA": [ + { + "name": "StringSid", + "type": "LPCSTR" + }, + { + "name": "Sid", + "type": "PSID" + } + ], + "ConvertStringSidToSidW": [ + { + "name": "StringSid", + "type": "LPCWSTR" + }, + { + "name": "Sid", + "type": "PSID" + } + ], + "ConvertStringSecurityDescriptorToSecurityDescriptorA": [ + { + "name": "StringSecurityDescriptor", + "type": "LPCSTR" + }, + { + "name": "StringSDRevision", + "type": "DWORD" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "SecurityDescriptorSize", + "type": "PULONG" + } + ], + "ConvertStringSecurityDescriptorToSecurityDescriptorW": [ + { + "name": "StringSecurityDescriptor", + "type": "LPCWSTR" + }, + { + "name": "StringSDRevision", + "type": "DWORD" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "SecurityDescriptorSize", + "type": "PULONG" + } + ], + "ConvertSecurityDescriptorToStringSecurityDescriptorA": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "RequestedStringSDRevision", + "type": "DWORD" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "StringSecurityDescriptor", + "type": "LPSTR" + }, + { + "name": "StringSecurityDescriptorLen", + "type": "PULONG" + } + ], + "ConvertSecurityDescriptorToStringSecurityDescriptorW": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "RequestedStringSDRevision", + "type": "DWORD" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "StringSecurityDescriptor", + "type": "LPWSTR" + }, + { + "name": "StringSecurityDescriptorLen", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/securityappcontainer.json b/qiling/extensions/windows_sdk/securityappcontainer.json new file mode 100644 index 000000000..0db836b65 --- /dev/null +++ b/qiling/extensions/windows_sdk/securityappcontainer.json @@ -0,0 +1,24 @@ +{ + "GetAppContainerNamedObjectPath": [ + { + "name": "Token", + "type": "HANDLE" + }, + { + "name": "AppContainerSid", + "type": "PSID" + }, + { + "name": "ObjectPathLength", + "type": "ULONG" + }, + { + "name": "ObjectPath", + "type": "LPWSTR" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/securitybaseapi.json b/qiling/extensions/windows_sdk/securitybaseapi.json new file mode 100644 index 000000000..ea80d7425 --- /dev/null +++ b/qiling/extensions/windows_sdk/securitybaseapi.json @@ -0,0 +1,1586 @@ +{ + "AccessCheck": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "PrivilegeSet", + "type": "PPRIVILEGE_SET" + }, + { + "name": "PrivilegeSetLength", + "type": "LPDWORD" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + } + ], + "AccessCheckByType": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "PrivilegeSet", + "type": "PPRIVILEGE_SET" + }, + { + "name": "PrivilegeSetLength", + "type": "LPDWORD" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultList": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "PrivilegeSet", + "type": "PPRIVILEGE_SET" + }, + { + "name": "PrivilegeSetLength", + "type": "LPDWORD" + }, + { + "name": "GrantedAccessList", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + } + ], + "AddAccessAllowedAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessAllowedAceEx": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessAllowedObjectAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "ObjectTypeGuid", + "type": "GUID" + }, + { + "name": "InheritedObjectTypeGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessDeniedAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessDeniedAceEx": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessDeniedObjectAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "ObjectTypeGuid", + "type": "GUID" + }, + { + "name": "InheritedObjectTypeGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "dwStartingAceIndex", + "type": "DWORD" + }, + { + "name": "pAceList", + "type": "LPVOID" + }, + { + "name": "nAceListLength", + "type": "DWORD" + } + ], + "AddAuditAccessAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "dwAccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "bAuditSuccess", + "type": "BOOL" + }, + { + "name": "bAuditFailure", + "type": "BOOL" + } + ], + "AddAuditAccessAceEx": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "dwAccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "bAuditSuccess", + "type": "BOOL" + }, + { + "name": "bAuditFailure", + "type": "BOOL" + } + ], + "AddAuditAccessObjectAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "ObjectTypeGuid", + "type": "GUID" + }, + { + "name": "InheritedObjectTypeGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "bAuditSuccess", + "type": "BOOL" + }, + { + "name": "bAuditFailure", + "type": "BOOL" + } + ], + "AddMandatoryAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "MandatoryPolicy", + "type": "DWORD" + }, + { + "name": "pLabelSid", + "type": "PSID" + } + ], + "AddResourceAttributeAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pAttributeInfo", + "type": "PCLAIM_SECURITY_ATTRIBUTES_INFORMATION" + }, + { + "name": "pReturnLength", + "type": "PDWORD" + } + ], + "AddScopedPolicyIDAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AdjustTokenGroups": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "ResetToDefault", + "type": "BOOL" + }, + { + "name": "NewState", + "type": "PTOKEN_GROUPS" + }, + { + "name": "BufferLength", + "type": "DWORD" + }, + { + "name": "PreviousState", + "type": "PTOKEN_GROUPS" + }, + { + "name": "ReturnLength", + "type": "PDWORD" + } + ], + "AdjustTokenPrivileges": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "DisableAllPrivileges", + "type": "BOOL" + }, + { + "name": "NewState", + "type": "PTOKEN_PRIVILEGES" + }, + { + "name": "BufferLength", + "type": "DWORD" + }, + { + "name": "PreviousState", + "type": "PTOKEN_PRIVILEGES" + }, + { + "name": "ReturnLength", + "type": "PDWORD" + } + ], + "AllocateAndInitializeSid": [ + { + "name": "pIdentifierAuthority", + "type": "PSID_IDENTIFIER_AUTHORITY" + }, + { + "name": "nSubAuthorityCount", + "type": "BYTE" + }, + { + "name": "nSubAuthority0", + "type": "DWORD" + }, + { + "name": "nSubAuthority1", + "type": "DWORD" + }, + { + "name": "nSubAuthority2", + "type": "DWORD" + }, + { + "name": "nSubAuthority3", + "type": "DWORD" + }, + { + "name": "nSubAuthority4", + "type": "DWORD" + }, + { + "name": "nSubAuthority5", + "type": "DWORD" + }, + { + "name": "nSubAuthority6", + "type": "DWORD" + }, + { + "name": "nSubAuthority7", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AllocateLocallyUniqueId": [ + { + "name": "Luid", + "type": "PLUID" + } + ], + "AreAllAccessesGranted": [ + { + "name": "GrantedAccess", + "type": "DWORD" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + } + ], + "AreAnyAccessesGranted": [ + { + "name": "GrantedAccess", + "type": "DWORD" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + } + ], + "CheckTokenMembership": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "SidToCheck", + "type": "PSID" + }, + { + "name": "IsMember", + "type": "PBOOL" + } + ], + "CheckTokenCapability": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "CapabilitySidToCheck", + "type": "PSID" + }, + { + "name": "HasCapability", + "type": "PBOOL" + } + ], + "CheckTokenMembershipEx": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "SidToCheck", + "type": "PSID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "IsMember", + "type": "PBOOL" + } + ], + "ConvertToAutoInheritPrivateObjectSecurity": [ + { + "name": "ParentDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "CurrentSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectType", + "type": "GUID" + }, + { + "name": "IsDirectoryObject", + "type": "BOOLEAN" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "CopySid": [ + { + "name": "nDestinationSidLength", + "type": "DWORD" + }, + { + "name": "pDestinationSid", + "type": "PSID" + }, + { + "name": "pSourceSid", + "type": "PSID" + } + ], + "CreatePrivateObjectSecurity": [ + { + "name": "ParentDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "CreatorDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "IsDirectoryObject", + "type": "BOOL" + }, + { + "name": "Token", + "type": "HANDLE" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "CreatePrivateObjectSecurityEx": [ + { + "name": "ParentDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "CreatorDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectType", + "type": "GUID" + }, + { + "name": "IsContainerObject", + "type": "BOOL" + }, + { + "name": "AutoInheritFlags", + "type": "ULONG" + }, + { + "name": "Token", + "type": "HANDLE" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "CreatePrivateObjectSecurityWithMultipleInheritance": [ + { + "name": "ParentDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "CreatorDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectTypes", + "type": "GUID" + }, + { + "name": "GuidCount", + "type": "ULONG" + }, + { + "name": "IsContainerObject", + "type": "BOOL" + }, + { + "name": "AutoInheritFlags", + "type": "ULONG" + }, + { + "name": "Token", + "type": "HANDLE" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "CreateRestrictedToken": [ + { + "name": "ExistingTokenHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "DisableSidCount", + "type": "DWORD" + }, + { + "name": "SidsToDisable", + "type": "PSID_AND_ATTRIBUTES" + }, + { + "name": "DeletePrivilegeCount", + "type": "DWORD" + }, + { + "name": "PrivilegesToDelete", + "type": "PLUID_AND_ATTRIBUTES" + }, + { + "name": "RestrictedSidCount", + "type": "DWORD" + }, + { + "name": "SidsToRestrict", + "type": "PSID_AND_ATTRIBUTES" + }, + { + "name": "NewTokenHandle", + "type": "PHANDLE" + } + ], + "CreateWellKnownSid": [ + { + "name": "WellKnownSidType", + "type": "WELL_KNOWN_SID_TYPE" + }, + { + "name": "DomainSid", + "type": "PSID" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "cbSid", + "type": "DWORD" + } + ], + "EqualDomainSid": [ + { + "name": "pSid1", + "type": "PSID" + }, + { + "name": "pSid2", + "type": "PSID" + }, + { + "name": "pfEqual", + "type": "BOOL" + } + ], + "DeleteAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceIndex", + "type": "DWORD" + } + ], + "DestroyPrivateObjectSecurity": [ + { + "name": "ObjectDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "DuplicateToken": [ + { + "name": "ExistingTokenHandle", + "type": "HANDLE" + }, + { + "name": "ImpersonationLevel", + "type": "SECURITY_IMPERSONATION_LEVEL" + }, + { + "name": "DuplicateTokenHandle", + "type": "PHANDLE" + } + ], + "DuplicateTokenEx": [ + { + "name": "hExistingToken", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpTokenAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ImpersonationLevel", + "type": "SECURITY_IMPERSONATION_LEVEL" + }, + { + "name": "TokenType", + "type": "TOKEN_TYPE" + }, + { + "name": "phNewToken", + "type": "PHANDLE" + } + ], + "EqualPrefixSid": [ + { + "name": "pSid1", + "type": "PSID" + }, + { + "name": "pSid2", + "type": "PSID" + } + ], + "EqualSid": [ + { + "name": "pSid1", + "type": "PSID" + }, + { + "name": "pSid2", + "type": "PSID" + } + ], + "FindFirstFreeAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pAce", + "type": "LPVOID" + } + ], + "FreeSid": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "GetAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceIndex", + "type": "DWORD" + }, + { + "name": "pAce", + "type": "LPVOID" + } + ], + "GetAclInformation": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pAclInformation", + "type": "LPVOID" + }, + { + "name": "nAclInformationLength", + "type": "DWORD" + }, + { + "name": "dwAclInformationClass", + "type": "ACL_INFORMATION_CLASS" + } + ], + "GetKernelObjectSecurity": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "GetLengthSid": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "GetPrivateObjectSecurity": [ + { + "name": "ObjectDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ResultantDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "DescriptorLength", + "type": "DWORD" + }, + { + "name": "ReturnLength", + "type": "PDWORD" + } + ], + "GetSecurityDescriptorControl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pControl", + "type": "PSECURITY_DESCRIPTOR_CONTROL" + }, + { + "name": "lpdwRevision", + "type": "LPDWORD" + } + ], + "GetSecurityDescriptorDacl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpbDaclPresent", + "type": "LPBOOL" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "lpbDaclDefaulted", + "type": "LPBOOL" + } + ], + "GetSecurityDescriptorGroup": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "lpbGroupDefaulted", + "type": "LPBOOL" + } + ], + "GetSecurityDescriptorLength": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetSecurityDescriptorOwner": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "lpbOwnerDefaulted", + "type": "LPBOOL" + } + ], + "GetSecurityDescriptorRMControl": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "RMControl", + "type": "PUCHAR" + } + ], + "GetSecurityDescriptorSacl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpbSaclPresent", + "type": "LPBOOL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "lpbSaclDefaulted", + "type": "LPBOOL" + } + ], + "GetSidIdentifierAuthority": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "GetSidLengthRequired": [ + { + "name": "nSubAuthorityCount", + "type": "UCHAR" + } + ], + "GetSidSubAuthority": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "nSubAuthority", + "type": "DWORD" + } + ], + "GetSidSubAuthorityCount": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "GetTokenInformation": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "TokenInformationClass", + "type": "TOKEN_INFORMATION_CLASS" + }, + { + "name": "TokenInformation", + "type": "LPVOID" + }, + { + "name": "TokenInformationLength", + "type": "DWORD" + }, + { + "name": "ReturnLength", + "type": "PDWORD" + } + ], + "GetWindowsAccountDomainSid": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pDomainSid", + "type": "PSID" + }, + { + "name": "cbDomainSid", + "type": "DWORD" + } + ], + "ImpersonateAnonymousToken": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + } + ], + "ImpersonateLoggedOnUser": [ + { + "name": "hToken", + "type": "HANDLE" + } + ], + "ImpersonateSelf": [ + { + "name": "ImpersonationLevel", + "type": "SECURITY_IMPERSONATION_LEVEL" + } + ], + "InitializeAcl": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "nAclLength", + "type": "DWORD" + }, + { + "name": "dwAclRevision", + "type": "DWORD" + } + ], + "InitializeSecurityDescriptor": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "dwRevision", + "type": "DWORD" + } + ], + "InitializeSid": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "pIdentifierAuthority", + "type": "PSID_IDENTIFIER_AUTHORITY" + }, + { + "name": "nSubAuthorityCount", + "type": "BYTE" + } + ], + "IsTokenRestricted": [ + { + "name": "TokenHandle", + "type": "HANDLE" + } + ], + "IsValidAcl": [ + { + "name": "pAcl", + "type": "PACL" + } + ], + "IsValidSecurityDescriptor": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "IsValidSid": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "IsWellKnownSid": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "WellKnownSidType", + "type": "WELL_KNOWN_SID_TYPE" + } + ], + "MakeAbsoluteSD": [ + { + "name": "pSelfRelativeSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pAbsoluteSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpdwAbsoluteSecurityDescriptorSize", + "type": "LPDWORD" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "lpdwDaclSize", + "type": "LPDWORD" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "lpdwSaclSize", + "type": "LPDWORD" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "lpdwOwnerSize", + "type": "LPDWORD" + }, + { + "name": "pPrimaryGroup", + "type": "PSID" + }, + { + "name": "lpdwPrimaryGroupSize", + "type": "LPDWORD" + } + ], + "MakeSelfRelativeSD": [ + { + "name": "pAbsoluteSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pSelfRelativeSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "MapGenericMask": [ + { + "name": "AccessMask", + "type": "PDWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "PrivilegeCheck": [ + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "RequiredPrivileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "pfResult", + "type": "LPBOOL" + } + ], + "QuerySecurityAccessMask": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "DesiredAccess", + "type": "LPDWORD" + } + ], + "RevertToSelf": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetAclInformation": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pAclInformation", + "type": "LPVOID" + }, + { + "name": "nAclInformationLength", + "type": "DWORD" + }, + { + "name": "dwAclInformationClass", + "type": "ACL_INFORMATION_CLASS" + } + ], + "SetKernelObjectSecurity": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "SetPrivateObjectSecurity": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ModificationDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectsSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "Token", + "type": "HANDLE" + } + ], + "SetPrivateObjectSecurityEx": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ModificationDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectsSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "AutoInheritFlags", + "type": "ULONG" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "Token", + "type": "HANDLE" + } + ], + "SetSecurityAccessMask": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "DesiredAccess", + "type": "LPDWORD" + } + ], + "SetSecurityDescriptorControl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ControlBitsOfInterest", + "type": "SECURITY_DESCRIPTOR_CONTROL" + }, + { + "name": "ControlBitsToSet", + "type": "SECURITY_DESCRIPTOR_CONTROL" + } + ], + "SetSecurityDescriptorDacl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "bDaclPresent", + "type": "BOOL" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "bDaclDefaulted", + "type": "BOOL" + } + ], + "SetSecurityDescriptorGroup": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "bGroupDefaulted", + "type": "BOOL" + } + ], + "SetSecurityDescriptorOwner": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "bOwnerDefaulted", + "type": "BOOL" + } + ], + "SetSecurityDescriptorRMControl": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "RMControl", + "type": "PUCHAR" + } + ], + "SetSecurityDescriptorSacl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "bSaclPresent", + "type": "BOOL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "bSaclDefaulted", + "type": "BOOL" + } + ], + "SetTokenInformation": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "TokenInformationClass", + "type": "TOKEN_INFORMATION_CLASS" + }, + { + "name": "TokenInformation", + "type": "LPVOID" + }, + { + "name": "TokenInformationLength", + "type": "DWORD" + } + ], + "CveEventWrite": [ + { + "name": "CveId", + "type": "PCWSTR" + }, + { + "name": "AdditionalDetails", + "type": "PCWSTR" + } + ], + "DeriveCapabilitySidsFromName": [ + { + "name": "CapName", + "type": "LPCWSTR" + }, + { + "name": "CapabilityGroupSids", + "type": "PSID" + }, + { + "name": "CapabilityGroupSidCount", + "type": "DWORD" + }, + { + "name": "CapabilitySids", + "type": "PSID" + }, + { + "name": "CapabilitySidCount", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sensapi.json b/qiling/extensions/windows_sdk/sensapi.json new file mode 100644 index 000000000..e76b8788e --- /dev/null +++ b/qiling/extensions/windows_sdk/sensapi.json @@ -0,0 +1,28 @@ +{ + "IsDestinationReachableA": [ + { + "name": "lpszDestination", + "type": "LPCSTR" + }, + { + "name": "lpQOCInfo", + "type": "LPQOCINFO" + } + ], + "IsDestinationReachableW": [ + { + "name": "lpszDestination", + "type": "LPCWSTR" + }, + { + "name": "lpQOCInfo", + "type": "LPQOCINFO" + } + ], + "IsNetworkAlive": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/setupapi.json b/qiling/extensions/windows_sdk/setupapi.json new file mode 100644 index 000000000..6f843a22e --- /dev/null +++ b/qiling/extensions/windows_sdk/setupapi.json @@ -0,0 +1,4316 @@ +{ + "SetupGetInfInformationA": [ + { + "name": "InfSpec", + "type": "LPCVOID" + }, + { + "name": "SearchControl", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetInfInformationW": [ + { + "name": "InfSpec", + "type": "LPCVOID" + }, + { + "name": "SearchControl", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQueryInfFileInformationA": [ + { + "name": "InfInformation", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "InfIndex", + "type": "UINT" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQueryInfFileInformationW": [ + { + "name": "InfInformation", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "InfIndex", + "type": "UINT" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQueryInfOriginalFileInformationA": [ + { + "name": "InfInformation", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "InfIndex", + "type": "UINT" + }, + { + "name": "AlternatePlatformInfo", + "type": "PSP_ALTPLATFORM_INFO" + }, + { + "name": "OriginalFileInfo", + "type": "PSP_ORIGINAL_FILE_INFO_A" + } + ], + "SetupQueryInfOriginalFileInformationW": [ + { + "name": "InfInformation", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "InfIndex", + "type": "UINT" + }, + { + "name": "AlternatePlatformInfo", + "type": "PSP_ALTPLATFORM_INFO" + }, + { + "name": "OriginalFileInfo", + "type": "PSP_ORIGINAL_FILE_INFO_W" + } + ], + "SetupQueryInfVersionInformationA": [ + { + "name": "InfInformation", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "InfIndex", + "type": "UINT" + }, + { + "name": "Key", + "type": "PCSTR" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQueryInfVersionInformationW": [ + { + "name": "InfInformation", + "type": "PSP_INF_INFORMATION" + }, + { + "name": "InfIndex", + "type": "UINT" + }, + { + "name": "Key", + "type": "PCWSTR" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetInfFileListA": [ + { + "name": "DirectoryPath", + "type": "PCSTR" + }, + { + "name": "InfStyle", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetInfFileListW": [ + { + "name": "DirectoryPath", + "type": "PCWSTR" + }, + { + "name": "InfStyle", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupOpenInfFileW": [ + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "InfClass", + "type": "PCWSTR" + }, + { + "name": "InfStyle", + "type": "DWORD" + }, + { + "name": "ErrorLine", + "type": "PUINT" + } + ], + "SetupOpenInfFileA": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "InfClass", + "type": "PCSTR" + }, + { + "name": "InfStyle", + "type": "DWORD" + }, + { + "name": "ErrorLine", + "type": "PUINT" + } + ], + "SetupOpenMasterInf": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupOpenAppendInfFileW": [ + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ErrorLine", + "type": "PUINT" + } + ], + "SetupOpenAppendInfFileA": [ + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ErrorLine", + "type": "PUINT" + } + ], + "SetupCloseInfFile": [ + { + "name": "InfHandle", + "type": "HINF" + } + ], + "SetupFindFirstLineA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + }, + { + "name": "Key", + "type": "PCSTR" + }, + { + "name": "Context", + "type": "PINFCONTEXT" + } + ], + "SetupFindFirstLineW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + }, + { + "name": "Key", + "type": "PCWSTR" + }, + { + "name": "Context", + "type": "PINFCONTEXT" + } + ], + "SetupFindNextLine": [ + { + "name": "ContextIn", + "type": "PINFCONTEXT" + }, + { + "name": "ContextOut", + "type": "PINFCONTEXT" + } + ], + "SetupFindNextMatchLineA": [ + { + "name": "ContextIn", + "type": "PINFCONTEXT" + }, + { + "name": "Key", + "type": "PCSTR" + }, + { + "name": "ContextOut", + "type": "PINFCONTEXT" + } + ], + "SetupFindNextMatchLineW": [ + { + "name": "ContextIn", + "type": "PINFCONTEXT" + }, + { + "name": "Key", + "type": "PCWSTR" + }, + { + "name": "ContextOut", + "type": "PINFCONTEXT" + } + ], + "SetupGetLineByIndexA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Context", + "type": "PINFCONTEXT" + } + ], + "SetupGetLineByIndexW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Context", + "type": "PINFCONTEXT" + } + ], + "SetupGetLineCountA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + } + ], + "SetupGetLineCountW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + } + ], + "SetupGetLineTextA": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + }, + { + "name": "Key", + "type": "PCSTR" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetLineTextW": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + }, + { + "name": "Key", + "type": "PCWSTR" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetFieldCount": [ + { + "name": "Context", + "type": "PINFCONTEXT" + } + ], + "SetupGetStringFieldA": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "FieldIndex", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetStringFieldW": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "FieldIndex", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetIntField": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "FieldIndex", + "type": "DWORD" + }, + { + "name": "IntegerValue", + "type": "PINT" + } + ], + "SetupGetMultiSzFieldA": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "FieldIndex", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "LPDWORD" + } + ], + "SetupGetMultiSzFieldW": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "FieldIndex", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "LPDWORD" + } + ], + "SetupGetBinaryField": [ + { + "name": "Context", + "type": "PINFCONTEXT" + }, + { + "name": "FieldIndex", + "type": "DWORD" + }, + { + "name": "ReturnBuffer", + "type": "PBYTE" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "LPDWORD" + } + ], + "SetupGetFileCompressionInfoA": [ + { + "name": "SourceFileName", + "type": "PCSTR" + }, + { + "name": "ActualSourceFileName", + "type": "PSTR" + }, + { + "name": "SourceFileSize", + "type": "PDWORD" + }, + { + "name": "TargetFileSize", + "type": "PDWORD" + }, + { + "name": "CompressionType", + "type": "PUINT" + } + ], + "SetupGetFileCompressionInfoW": [ + { + "name": "SourceFileName", + "type": "PCWSTR" + }, + { + "name": "ActualSourceFileName", + "type": "PWSTR" + }, + { + "name": "SourceFileSize", + "type": "PDWORD" + }, + { + "name": "TargetFileSize", + "type": "PDWORD" + }, + { + "name": "CompressionType", + "type": "PUINT" + } + ], + "SetupGetFileCompressionInfoExA": [ + { + "name": "SourceFileName", + "type": "PCSTR" + }, + { + "name": "ActualSourceFileNameBuffer", + "type": "PSTR" + }, + { + "name": "ActualSourceFileNameBufferLen", + "type": "DWORD" + }, + { + "name": "RequiredBufferLen", + "type": "PDWORD" + }, + { + "name": "SourceFileSize", + "type": "PDWORD" + }, + { + "name": "TargetFileSize", + "type": "PDWORD" + }, + { + "name": "CompressionType", + "type": "PUINT" + } + ], + "SetupGetFileCompressionInfoExW": [ + { + "name": "SourceFileName", + "type": "PCWSTR" + }, + { + "name": "ActualSourceFileNameBuffer", + "type": "PWSTR" + }, + { + "name": "ActualSourceFileNameBufferLen", + "type": "DWORD" + }, + { + "name": "RequiredBufferLen", + "type": "PDWORD" + }, + { + "name": "SourceFileSize", + "type": "PDWORD" + }, + { + "name": "TargetFileSize", + "type": "PDWORD" + }, + { + "name": "CompressionType", + "type": "PUINT" + } + ], + "SetupDecompressOrCopyFileA": [ + { + "name": "SourceFileName", + "type": "PCSTR" + }, + { + "name": "TargetFileName", + "type": "PCSTR" + }, + { + "name": "CompressionType", + "type": "PUINT" + } + ], + "SetupDecompressOrCopyFileW": [ + { + "name": "SourceFileName", + "type": "PCWSTR" + }, + { + "name": "TargetFileName", + "type": "PCWSTR" + }, + { + "name": "CompressionType", + "type": "PUINT" + } + ], + "SetupGetSourceFileLocationA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "SourceId", + "type": "PUINT" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetSourceFileLocationW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "SourceId", + "type": "PUINT" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetSourceFileSizeA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "FileName", + "type": "PCSTR" + }, + { + "name": "Section", + "type": "PCSTR" + }, + { + "name": "FileSize", + "type": "PDWORD" + }, + { + "name": "RoundingFactor", + "type": "UINT" + } + ], + "SetupGetSourceFileSizeW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "FileName", + "type": "PCWSTR" + }, + { + "name": "Section", + "type": "PCWSTR" + }, + { + "name": "FileSize", + "type": "PDWORD" + }, + { + "name": "RoundingFactor", + "type": "UINT" + } + ], + "SetupGetTargetPathA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "Section", + "type": "PCSTR" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetTargetPathW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "Section", + "type": "PCWSTR" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupSetSourceListA": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SourceList", + "type": "PCSTR" + }, + { + "name": "SourceCount", + "type": "UINT" + } + ], + "SetupSetSourceListW": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SourceList", + "type": "PCWSTR" + }, + { + "name": "SourceCount", + "type": "UINT" + } + ], + "SetupCancelTemporarySourceList": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupAddToSourceListA": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Source", + "type": "PCSTR" + } + ], + "SetupAddToSourceListW": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Source", + "type": "PCWSTR" + } + ], + "SetupRemoveFromSourceListA": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Source", + "type": "PCSTR" + } + ], + "SetupRemoveFromSourceListW": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Source", + "type": "PCWSTR" + } + ], + "SetupQuerySourceListA": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "List", + "type": "PCSTR" + }, + { + "name": "Count", + "type": "PUINT" + } + ], + "SetupQuerySourceListW": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "List", + "type": "PCWSTR" + }, + { + "name": "Count", + "type": "PUINT" + } + ], + "SetupFreeSourceListA": [ + { + "name": "List", + "type": "PCSTR" + }, + { + "name": "Count", + "type": "UINT" + } + ], + "SetupFreeSourceListW": [ + { + "name": "List", + "type": "PCWSTR" + }, + { + "name": "Count", + "type": "UINT" + } + ], + "SetupPromptForDiskA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCSTR" + }, + { + "name": "DiskName", + "type": "PCSTR" + }, + { + "name": "PathToSource", + "type": "PCSTR" + }, + { + "name": "FileSought", + "type": "PCSTR" + }, + { + "name": "TagFile", + "type": "PCSTR" + }, + { + "name": "DiskPromptStyle", + "type": "DWORD" + }, + { + "name": "PathBuffer", + "type": "PSTR" + }, + { + "name": "PathBufferSize", + "type": "DWORD" + }, + { + "name": "PathRequiredSize", + "type": "PDWORD" + } + ], + "SetupPromptForDiskW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCWSTR" + }, + { + "name": "DiskName", + "type": "PCWSTR" + }, + { + "name": "PathToSource", + "type": "PCWSTR" + }, + { + "name": "FileSought", + "type": "PCWSTR" + }, + { + "name": "TagFile", + "type": "PCWSTR" + }, + { + "name": "DiskPromptStyle", + "type": "DWORD" + }, + { + "name": "PathBuffer", + "type": "PWSTR" + }, + { + "name": "PathBufferSize", + "type": "DWORD" + }, + { + "name": "PathRequiredSize", + "type": "PDWORD" + } + ], + "SetupCopyErrorA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCSTR" + }, + { + "name": "DiskName", + "type": "PCSTR" + }, + { + "name": "PathToSource", + "type": "PCSTR" + }, + { + "name": "SourceFile", + "type": "PCSTR" + }, + { + "name": "TargetPathFile", + "type": "PCSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + }, + { + "name": "PathBuffer", + "type": "PSTR" + }, + { + "name": "PathBufferSize", + "type": "DWORD" + }, + { + "name": "PathRequiredSize", + "type": "PDWORD" + } + ], + "SetupCopyErrorW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCWSTR" + }, + { + "name": "DiskName", + "type": "PCWSTR" + }, + { + "name": "PathToSource", + "type": "PCWSTR" + }, + { + "name": "SourceFile", + "type": "PCWSTR" + }, + { + "name": "TargetPathFile", + "type": "PCWSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + }, + { + "name": "PathBuffer", + "type": "PWSTR" + }, + { + "name": "PathBufferSize", + "type": "DWORD" + }, + { + "name": "PathRequiredSize", + "type": "PDWORD" + } + ], + "SetupRenameErrorA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCSTR" + }, + { + "name": "SourceFile", + "type": "PCSTR" + }, + { + "name": "TargetFile", + "type": "PCSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + } + ], + "SetupRenameErrorW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCWSTR" + }, + { + "name": "SourceFile", + "type": "PCWSTR" + }, + { + "name": "TargetFile", + "type": "PCWSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + } + ], + "SetupDeleteErrorA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCSTR" + }, + { + "name": "File", + "type": "PCSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + } + ], + "SetupDeleteErrorW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCWSTR" + }, + { + "name": "File", + "type": "PCWSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + } + ], + "SetupBackupErrorA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCSTR" + }, + { + "name": "SourceFile", + "type": "PCSTR" + }, + { + "name": "TargetFile", + "type": "PCSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + } + ], + "SetupBackupErrorW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DialogTitle", + "type": "PCWSTR" + }, + { + "name": "SourceFile", + "type": "PCWSTR" + }, + { + "name": "TargetFile", + "type": "PCWSTR" + }, + { + "name": "Win32ErrorCode", + "type": "UINT" + }, + { + "name": "Style", + "type": "DWORD" + } + ], + "SetupSetDirectoryIdA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Id", + "type": "DWORD" + }, + { + "name": "Directory", + "type": "PCSTR" + } + ], + "SetupSetDirectoryIdW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Id", + "type": "DWORD" + }, + { + "name": "Directory", + "type": "PCWSTR" + } + ], + "SetupSetDirectoryIdExA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Id", + "type": "DWORD" + }, + { + "name": "Directory", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved1", + "type": "DWORD" + }, + { + "name": "Reserved2", + "type": "PVOID" + } + ], + "SetupSetDirectoryIdExW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Id", + "type": "DWORD" + }, + { + "name": "Directory", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved1", + "type": "DWORD" + }, + { + "name": "Reserved2", + "type": "PVOID" + } + ], + "SetupGetSourceInfoA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SourceId", + "type": "UINT" + }, + { + "name": "InfoDesired", + "type": "UINT" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupGetSourceInfoW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SourceId", + "type": "UINT" + }, + { + "name": "InfoDesired", + "type": "UINT" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupInstallFileA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "SourceFile", + "type": "PCSTR" + }, + { + "name": "SourcePathRoot", + "type": "PCSTR" + }, + { + "name": "DestinationName", + "type": "PCSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + }, + { + "name": "CopyMsgHandler", + "type": "PSP_FILE_CALLBACK_A" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupInstallFileW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "SourceFile", + "type": "PCWSTR" + }, + { + "name": "SourcePathRoot", + "type": "PCWSTR" + }, + { + "name": "DestinationName", + "type": "PCWSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + }, + { + "name": "CopyMsgHandler", + "type": "PSP_FILE_CALLBACK_W" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupInstallFileExA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "SourceFile", + "type": "PCSTR" + }, + { + "name": "SourcePathRoot", + "type": "PCSTR" + }, + { + "name": "DestinationName", + "type": "PCSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + }, + { + "name": "CopyMsgHandler", + "type": "PSP_FILE_CALLBACK_A" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "FileWasInUse", + "type": "PBOOL" + } + ], + "SetupInstallFileExW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "InfContext", + "type": "PINFCONTEXT" + }, + { + "name": "SourceFile", + "type": "PCWSTR" + }, + { + "name": "SourcePathRoot", + "type": "PCWSTR" + }, + { + "name": "DestinationName", + "type": "PCWSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + }, + { + "name": "CopyMsgHandler", + "type": "PSP_FILE_CALLBACK_W" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "FileWasInUse", + "type": "PBOOL" + } + ], + "SetupOpenFileQueue": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupCloseFileQueue": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + } + ], + "SetupSetFileQueueAlternatePlatformA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "AlternatePlatformInfo", + "type": "PSP_ALTPLATFORM_INFO" + }, + { + "name": "AlternateDefaultCatalogFile", + "type": "PCSTR" + } + ], + "SetupSetFileQueueAlternatePlatformW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "AlternatePlatformInfo", + "type": "PSP_ALTPLATFORM_INFO" + }, + { + "name": "AlternateDefaultCatalogFile", + "type": "PCWSTR" + } + ], + "SetupSetPlatformPathOverrideA": [ + { + "name": "Override", + "type": "PCSTR" + } + ], + "SetupSetPlatformPathOverrideW": [ + { + "name": "Override", + "type": "PCWSTR" + } + ], + "SetupQueueCopyA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "SourceRootPath", + "type": "PCSTR" + }, + { + "name": "SourcePath", + "type": "PCSTR" + }, + { + "name": "SourceFilename", + "type": "PCSTR" + }, + { + "name": "SourceDescription", + "type": "PCSTR" + }, + { + "name": "SourceTagfile", + "type": "PCSTR" + }, + { + "name": "TargetDirectory", + "type": "PCSTR" + }, + { + "name": "TargetFilename", + "type": "PCSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + } + ], + "SetupQueueCopyW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "SourceRootPath", + "type": "PCWSTR" + }, + { + "name": "SourcePath", + "type": "PCWSTR" + }, + { + "name": "SourceFilename", + "type": "PCWSTR" + }, + { + "name": "SourceDescription", + "type": "PCWSTR" + }, + { + "name": "SourceTagfile", + "type": "PCWSTR" + }, + { + "name": "TargetDirectory", + "type": "PCWSTR" + }, + { + "name": "TargetFilename", + "type": "PCWSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + } + ], + "SetupQueueCopyIndirectA": [ + { + "name": "CopyParams", + "type": "PSP_FILE_COPY_PARAMS_A" + } + ], + "SetupQueueCopyIndirectW": [ + { + "name": "CopyParams", + "type": "PSP_FILE_COPY_PARAMS_W" + } + ], + "SetupQueueDefaultCopyA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SourceRootPath", + "type": "PCSTR" + }, + { + "name": "SourceFilename", + "type": "PCSTR" + }, + { + "name": "TargetFilename", + "type": "PCSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + } + ], + "SetupQueueDefaultCopyW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SourceRootPath", + "type": "PCWSTR" + }, + { + "name": "SourceFilename", + "type": "PCWSTR" + }, + { + "name": "TargetFilename", + "type": "PCWSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + } + ], + "SetupQueueCopySectionA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "SourceRootPath", + "type": "PCSTR" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + } + ], + "SetupQueueCopySectionW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "SourceRootPath", + "type": "PCWSTR" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + }, + { + "name": "CopyStyle", + "type": "DWORD" + } + ], + "SetupQueueDeleteA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "PathPart1", + "type": "PCSTR" + }, + { + "name": "PathPart2", + "type": "PCSTR" + } + ], + "SetupQueueDeleteW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "PathPart1", + "type": "PCWSTR" + }, + { + "name": "PathPart2", + "type": "PCWSTR" + } + ], + "SetupQueueDeleteSectionA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + } + ], + "SetupQueueDeleteSectionW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + } + ], + "SetupQueueRenameA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "SourcePath", + "type": "PCSTR" + }, + { + "name": "SourceFilename", + "type": "PCSTR" + }, + { + "name": "TargetPath", + "type": "PCSTR" + }, + { + "name": "TargetFilename", + "type": "PCSTR" + } + ], + "SetupQueueRenameW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "SourcePath", + "type": "PCWSTR" + }, + { + "name": "SourceFilename", + "type": "PCWSTR" + }, + { + "name": "TargetPath", + "type": "PCWSTR" + }, + { + "name": "TargetFilename", + "type": "PCWSTR" + } + ], + "SetupQueueRenameSectionA": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCSTR" + } + ], + "SetupQueueRenameSectionW": [ + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "Section", + "type": "PCWSTR" + } + ], + "SetupCommitFileQueueA": [ + { + "name": "Owner", + "type": "HWND" + }, + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "MsgHandler", + "type": "PSP_FILE_CALLBACK_A" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupCommitFileQueueW": [ + { + "name": "Owner", + "type": "HWND" + }, + { + "name": "QueueHandle", + "type": "HSPFILEQ" + }, + { + "name": "MsgHandler", + "type": "PSP_FILE_CALLBACK_W" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupScanFileQueueA": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Window", + "type": "HWND" + }, + { + "name": "CallbackRoutine", + "type": "PSP_FILE_CALLBACK_A" + }, + { + "name": "CallbackContext", + "type": "PVOID" + }, + { + "name": "Result", + "type": "PDWORD" + } + ], + "SetupScanFileQueueW": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Window", + "type": "HWND" + }, + { + "name": "CallbackRoutine", + "type": "PSP_FILE_CALLBACK_W" + }, + { + "name": "CallbackContext", + "type": "PVOID" + }, + { + "name": "Result", + "type": "PDWORD" + } + ], + "SetupGetFileQueueCount": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "SubQueueFileOp", + "type": "UINT" + }, + { + "name": "NumOperations", + "type": "PUINT" + } + ], + "SetupGetFileQueueFlags": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "Flags", + "type": "PDWORD" + } + ], + "SetupSetFileQueueFlags": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "FlagMask", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupCopyOEMInfA": [ + { + "name": "SourceInfFileName", + "type": "PCSTR" + }, + { + "name": "OEMSourceMediaLocation", + "type": "PCSTR" + }, + { + "name": "OEMSourceMediaType", + "type": "DWORD" + }, + { + "name": "CopyStyle", + "type": "DWORD" + }, + { + "name": "DestinationInfFileName", + "type": "PSTR" + }, + { + "name": "DestinationInfFileNameSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + }, + { + "name": "DestinationInfFileNameComponent", + "type": "PSTR" + } + ], + "SetupCopyOEMInfW": [ + { + "name": "SourceInfFileName", + "type": "PCWSTR" + }, + { + "name": "OEMSourceMediaLocation", + "type": "PCWSTR" + }, + { + "name": "OEMSourceMediaType", + "type": "DWORD" + }, + { + "name": "CopyStyle", + "type": "DWORD" + }, + { + "name": "DestinationInfFileName", + "type": "PWSTR" + }, + { + "name": "DestinationInfFileNameSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + }, + { + "name": "DestinationInfFileNameComponent", + "type": "PWSTR" + } + ], + "SetupUninstallOEMInfA": [ + { + "name": "InfFileName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "PVOID" + } + ], + "SetupUninstallOEMInfW": [ + { + "name": "InfFileName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "PVOID" + } + ], + "SetupUninstallNewlyCopiedInfs": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "PVOID" + } + ], + "SetupCreateDiskSpaceListA": [ + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "SetupCreateDiskSpaceListW": [ + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "SetupDuplicateDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "SetupDuplicateDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "SetupDestroyDiskSpaceList": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + } + ], + "SetupQueryDrivesInDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "ReturnBuffer", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQueryDrivesInDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "ReturnBuffer", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQuerySpaceRequiredOnDriveA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "DriveSpec", + "type": "PCSTR" + }, + { + "name": "SpaceRequired", + "type": "LONGLONG" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupQuerySpaceRequiredOnDriveW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "DriveSpec", + "type": "PCWSTR" + }, + { + "name": "SpaceRequired", + "type": "LONGLONG" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAdjustDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "DriveRoot", + "type": "LPCSTR" + }, + { + "name": "Amount", + "type": "LONGLONG" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAdjustDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "DriveRoot", + "type": "LPCWSTR" + }, + { + "name": "Amount", + "type": "LONGLONG" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAddToDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "TargetFilespec", + "type": "PCSTR" + }, + { + "name": "FileSize", + "type": "LONGLONG" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAddToDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "TargetFilespec", + "type": "PCWSTR" + }, + { + "name": "FileSize", + "type": "LONGLONG" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAddSectionToDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAddSectionToDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAddInstallSectionToDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "LayoutInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupAddInstallSectionToDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "LayoutInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupRemoveFromDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "TargetFilespec", + "type": "PCSTR" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupRemoveFromDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "TargetFilespec", + "type": "PCWSTR" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupRemoveSectionFromDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupRemoveSectionFromDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "ListInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Operation", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupRemoveInstallSectionFromDiskSpaceListA": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "LayoutInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupRemoveInstallSectionFromDiskSpaceListW": [ + { + "name": "DiskSpace", + "type": "HDSKSPC" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "LayoutInfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "UINT" + } + ], + "SetupIterateCabinetA": [ + { + "name": "CabinetFile", + "type": "PCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "MsgHandler", + "type": "PSP_FILE_CALLBACK_A" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupIterateCabinetW": [ + { + "name": "CabinetFile", + "type": "PCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "MsgHandler", + "type": "PSP_FILE_CALLBACK_W" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupPromptReboot": [ + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "Owner", + "type": "HWND" + }, + { + "name": "ScanOnly", + "type": "BOOL" + } + ], + "SetupInitDefaultQueueCallback": [ + { + "name": "OwnerWindow", + "type": "HWND" + } + ], + "SetupInitDefaultQueueCallbackEx": [ + { + "name": "OwnerWindow", + "type": "HWND" + }, + { + "name": "AlternateProgressWindow", + "type": "HWND" + }, + { + "name": "ProgressMessage", + "type": "UINT" + }, + { + "name": "Reserved1", + "type": "DWORD" + }, + { + "name": "Reserved2", + "type": "PVOID" + } + ], + "SetupTermDefaultQueueCallback": [ + { + "name": "Context", + "type": "PVOID" + } + ], + "SetupDefaultQueueCallbackA": [ + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "Notification", + "type": "UINT" + }, + { + "name": "Param1", + "type": "UINT_PTR" + }, + { + "name": "Param2", + "type": "UINT_PTR" + } + ], + "SetupDefaultQueueCallbackW": [ + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "Notification", + "type": "UINT" + }, + { + "name": "Param1", + "type": "UINT_PTR" + }, + { + "name": "Param2", + "type": "UINT_PTR" + } + ], + "SetupInstallFromInfSectionA": [ + { + "name": "Owner", + "type": "HWND" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "RelativeKeyRoot", + "type": "HKEY" + }, + { + "name": "SourceRootPath", + "type": "PCSTR" + }, + { + "name": "CopyFlags", + "type": "UINT" + }, + { + "name": "MsgHandler", + "type": "PSP_FILE_CALLBACK_A" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupInstallFromInfSectionW": [ + { + "name": "Owner", + "type": "HWND" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "RelativeKeyRoot", + "type": "HKEY" + }, + { + "name": "SourceRootPath", + "type": "PCWSTR" + }, + { + "name": "CopyFlags", + "type": "UINT" + }, + { + "name": "MsgHandler", + "type": "PSP_FILE_CALLBACK_W" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupInstallFilesFromInfSectionA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "LayoutInfHandle", + "type": "HINF" + }, + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "SourceRootPath", + "type": "PCSTR" + }, + { + "name": "CopyFlags", + "type": "UINT" + } + ], + "SetupInstallFilesFromInfSectionW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "LayoutInfHandle", + "type": "HINF" + }, + { + "name": "FileQueue", + "type": "HSPFILEQ" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "SourceRootPath", + "type": "PCWSTR" + }, + { + "name": "CopyFlags", + "type": "UINT" + } + ], + "SetupInstallServicesFromInfSectionA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupInstallServicesFromInfSectionW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupInstallServicesFromInfSectionExA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "PVOID" + } + ], + "SetupInstallServicesFromInfSectionExW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "Reserved2", + "type": "PVOID" + } + ], + "InstallHinfSectionA": [ + { + "name": "Window", + "type": "HWND" + }, + { + "name": "ModuleHandle", + "type": "HINSTANCE" + }, + { + "name": "CommandLine", + "type": "PCSTR" + }, + { + "name": "ShowCommand", + "type": "INT" + } + ], + "InstallHinfSectionW": [ + { + "name": "Window", + "type": "HWND" + }, + { + "name": "ModuleHandle", + "type": "HINSTANCE" + }, + { + "name": "CommandLine", + "type": "PCWSTR" + }, + { + "name": "ShowCommand", + "type": "INT" + } + ], + "SetupInitializeFileLogA": [ + { + "name": "LogFileName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupInitializeFileLogW": [ + { + "name": "LogFileName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupTerminateFileLog": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + } + ], + "SetupLogFileA": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + }, + { + "name": "LogSectionName", + "type": "PCSTR" + }, + { + "name": "SourceFilename", + "type": "PCSTR" + }, + { + "name": "TargetFilename", + "type": "PCSTR" + }, + { + "name": "Checksum", + "type": "DWORD" + }, + { + "name": "DiskTagfile", + "type": "PCSTR" + }, + { + "name": "DiskDescription", + "type": "PCSTR" + }, + { + "name": "OtherInfo", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupLogFileW": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + }, + { + "name": "LogSectionName", + "type": "PCWSTR" + }, + { + "name": "SourceFilename", + "type": "PCWSTR" + }, + { + "name": "TargetFilename", + "type": "PCWSTR" + }, + { + "name": "Checksum", + "type": "DWORD" + }, + { + "name": "DiskTagfile", + "type": "PCWSTR" + }, + { + "name": "DiskDescription", + "type": "PCWSTR" + }, + { + "name": "OtherInfo", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupRemoveFileLogEntryA": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + }, + { + "name": "LogSectionName", + "type": "PCSTR" + }, + { + "name": "TargetFilename", + "type": "PCSTR" + } + ], + "SetupRemoveFileLogEntryW": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + }, + { + "name": "LogSectionName", + "type": "PCWSTR" + }, + { + "name": "TargetFilename", + "type": "PCWSTR" + } + ], + "SetupQueryFileLogA": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + }, + { + "name": "LogSectionName", + "type": "PCSTR" + }, + { + "name": "TargetFilename", + "type": "PCSTR" + }, + { + "name": "DesiredInfo", + "type": "SetupFileLogInfo" + }, + { + "name": "DataOut", + "type": "PSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupQueryFileLogW": [ + { + "name": "FileLogHandle", + "type": "HSPFILELOG" + }, + { + "name": "LogSectionName", + "type": "PCWSTR" + }, + { + "name": "TargetFilename", + "type": "PCWSTR" + }, + { + "name": "DesiredInfo", + "type": "SetupFileLogInfo" + }, + { + "name": "DataOut", + "type": "PWSTR" + }, + { + "name": "ReturnBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupOpenLog": [ + { + "name": "Erase", + "type": "BOOL" + } + ], + "SetupLogErrorA": [ + { + "name": "MessageString", + "type": "LPCSTR" + }, + { + "name": "Severity", + "type": "DWORD" + } + ], + "SetupLogErrorW": [ + { + "name": "MessageString", + "type": "LPCWSTR" + }, + { + "name": "Severity", + "type": "DWORD" + } + ], + "SetupCloseLog": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupGetThreadLogToken": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupWriteTextLog": [ + { + "name": "LogToken", + "type": "SP_LOG_TOKEN" + }, + { + "name": "Category", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "MessageStr", + "type": "PCSTR" + } + ], + "SetupWriteTextLogInfLine": [ + { + "name": "LogToken", + "type": "SP_LOG_TOKEN" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Context", + "type": "PINFCONTEXT" + } + ], + "SetupSetNonInteractiveMode": [ + { + "name": "NonInteractiveFlag", + "type": "BOOL" + } + ], + "SetupGetNonInteractiveMode": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupDiCreateDeviceInfoList": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "hwndParent", + "type": "HWND" + } + ], + "SetupDiGetDeviceInfoListClass": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "ClassGuid", + "type": "LPGUID" + } + ], + "SetupDiDeleteDeviceInfo": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiEnumDeviceInfo": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "MemberIndex", + "type": "DWORD" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiDestroyDeviceInfoList": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + } + ], + "SetupDiEnumDeviceInterfaces": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "InterfaceClassGuid", + "type": "GUID" + }, + { + "name": "MemberIndex", + "type": "DWORD" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + } + ], + "SetupDiGetDeviceInterfaceAlias": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + }, + { + "name": "AliasInterfaceClassGuid", + "type": "GUID" + }, + { + "name": "AliasDeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + } + ], + "SetupDiDeleteDeviceInterfaceData": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + } + ], + "SetupDiRemoveDeviceInterface": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + } + ], + "SetupDiInstallDeviceInterfaces": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiSetDeviceInterfaceDefault": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "PVOID" + } + ], + "SetupDiRegisterDeviceInfo": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "CompareProc", + "type": "PSP_DETSIG_CMPPROC" + }, + { + "name": "CompareContext", + "type": "PVOID" + }, + { + "name": "DupDeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiBuildDriverInfoList": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "DriverType", + "type": "DWORD" + } + ], + "SetupDiCancelDriverInfoSearch": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + } + ], + "SetupDiDestroyDriverInfoList": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "DriverType", + "type": "DWORD" + } + ], + "SetupDiGetClassDevsA": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "Enumerator", + "type": "PCSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiGetClassDevsW": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "Enumerator", + "type": "PCWSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiBuildClassInfoList": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ClassGuidList", + "type": "LPGUID" + }, + { + "name": "ClassGuidListSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupDiCallClassInstaller": [ + { + "name": "InstallFunction", + "type": "DI_FUNCTION" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiSelectDevice": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiSelectBestCompatDrv": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiInstallDevice": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiInstallDriverFiles": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiRegisterCoDeviceInstallers": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiRemoveDevice": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiUnremoveDevice": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiRestartDevices": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiChangeState": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiOpenClassRegKey": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "SetupDiOpenDeviceInterfaceRegKey": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "SetupDiDeleteDeviceInterfaceRegKey": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "SetupDiOpenDevRegKey": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Scope", + "type": "DWORD" + }, + { + "name": "HwProfile", + "type": "DWORD" + }, + { + "name": "KeyType", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + } + ], + "SetupDiDeleteDevRegKey": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Scope", + "type": "DWORD" + }, + { + "name": "HwProfile", + "type": "DWORD" + }, + { + "name": "KeyType", + "type": "DWORD" + } + ], + "SetupDiGetHwProfileList": [ + { + "name": "HwProfileList", + "type": "PDWORD" + }, + { + "name": "HwProfileListSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + }, + { + "name": "CurrentlyActiveIndex", + "type": "PDWORD" + } + ], + "SetupDiGetDevicePropertyKeys": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "DWORD" + }, + { + "name": "RequiredPropertyKeyCount", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiGetDevicePropertyW": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiGetDeviceInterfacePropertyKeys": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInterfaceData", + "type": "PSP_DEVICE_INTERFACE_DATA" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "DWORD" + }, + { + "name": "RequiredPropertyKeyCount", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiGetClassPropertyKeys": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "DWORD" + }, + { + "name": "RequiredPropertyKeyCount", + "type": "PDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiLoadClassIcon": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "LargeIcon", + "type": "HICON" + }, + { + "name": "MiniIconIndex", + "type": "PINT" + } + ], + "SetupDiLoadDeviceIcon": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "cxIcon", + "type": "UINT" + }, + { + "name": "cyIcon", + "type": "UINT" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], + "SetupDiDrawMiniIcon": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "rc", + "type": "RECT" + }, + { + "name": "MiniIconIndex", + "type": "INT" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupDiGetClassBitmapIndex": [ + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "MiniIconIndex", + "type": "PINT" + } + ], + "SetupDiGetClassImageList": [ + { + "name": "ClassImageListData", + "type": "PSP_CLASSIMAGELIST_DATA" + } + ], + "SetupDiGetClassImageIndex": [ + { + "name": "ClassImageListData", + "type": "PSP_CLASSIMAGELIST_DATA" + }, + { + "name": "ClassGuid", + "type": "GUID" + }, + { + "name": "ImageIndex", + "type": "PINT" + } + ], + "SetupDiDestroyClassImageList": [ + { + "name": "ClassImageListData", + "type": "PSP_CLASSIMAGELIST_DATA" + } + ], + "SetupDiAskForOEMDisk": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiSelectOEMDrv": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiGetSelectedDevice": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupDiSetSelectedDevice": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "SetupEnumInfSectionsA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Index", + "type": "UINT" + }, + { + "name": "Buffer", + "type": "PSTR" + }, + { + "name": "Size", + "type": "UINT" + }, + { + "name": "SizeNeeded", + "type": "UINT" + } + ], + "SetupEnumInfSectionsW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "Index", + "type": "UINT" + }, + { + "name": "Buffer", + "type": "PWSTR" + }, + { + "name": "Size", + "type": "UINT" + }, + { + "name": "SizeNeeded", + "type": "UINT" + } + ], + "SetupVerifyInfFileA": [ + { + "name": "InfName", + "type": "PCSTR" + }, + { + "name": "AltPlatformInfo", + "type": "PSP_ALTPLATFORM_INFO" + }, + { + "name": "InfSignerInfo", + "type": "PSP_INF_SIGNER_INFO_A" + } + ], + "SetupVerifyInfFileW": [ + { + "name": "InfName", + "type": "PCWSTR" + }, + { + "name": "AltPlatformInfo", + "type": "PSP_ALTPLATFORM_INFO" + }, + { + "name": "InfSignerInfo", + "type": "PSP_INF_SIGNER_INFO_W" + } + ], + "SetupDiGetCustomDevicePropertyA": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "CustomPropertyName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyRegDataType", + "type": "PDWORD" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupDiGetCustomDevicePropertyW": [ + { + "name": "DeviceInfoSet", + "type": "HDEVINFO" + }, + { + "name": "DeviceInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "CustomPropertyName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyRegDataType", + "type": "PDWORD" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "DWORD" + }, + { + "name": "RequiredSize", + "type": "PDWORD" + } + ], + "SetupConfigureWmiFromInfSectionA": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetupConfigureWmiFromInfSectionW": [ + { + "name": "InfHandle", + "type": "HINF" + }, + { + "name": "SectionName", + "type": "PCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sfc.json b/qiling/extensions/windows_sdk/sfc.json new file mode 100644 index 000000000..519220bfd --- /dev/null +++ b/qiling/extensions/windows_sdk/sfc.json @@ -0,0 +1,36 @@ +{ + "SfcGetNextProtectedFile": [ + { + "name": "RpcHandle", + "type": "HANDLE" + }, + { + "name": "ProtFileData", + "type": "PPROTECTED_FILE_DATA" + } + ], + "SfcIsFileProtected": [ + { + "name": "RpcHandle", + "type": "HANDLE" + }, + { + "name": "ProtFileName", + "type": "LPCWSTR" + } + ], + "SfcIsKeyProtected": [ + { + "name": "KeyHandle", + "type": "HKEY" + }, + { + "name": "SubKeyName", + "type": "LPCWSTR" + }, + { + "name": "KeySam", + "type": "REGSAM" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shcore.json b/qiling/extensions/windows_sdk/shcore.json new file mode 100644 index 000000000..3ac9a12ed --- /dev/null +++ b/qiling/extensions/windows_sdk/shcore.json @@ -0,0 +1,52 @@ +{ + "CreateRandomAccessStreamOnFile": [ + { + "name": "filePath", + "type": "PCWSTR" + }, + { + "name": "accessMode", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CreateRandomAccessStreamOverStream": [ + { + "name": "stream", + "type": "IStream" + }, + { + "name": "options", + "type": "BSOS_OPTIONS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CreateStreamOverRandomAccessStream": [ + { + "name": "randomAccessStream", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shellapi.json b/qiling/extensions/windows_sdk/shellapi.json new file mode 100644 index 000000000..5f7ce9a14 --- /dev/null +++ b/qiling/extensions/windows_sdk/shellapi.json @@ -0,0 +1,922 @@ +{ + "DragQueryFileA": [ + { + "name": "hDrop", + "type": "HDROP" + }, + { + "name": "iFile", + "type": "UINT" + }, + { + "name": "lpszFile", + "type": "LPSTR" + }, + { + "name": "cch", + "type": "UINT" + } + ], + "DragQueryFileW": [ + { + "name": "hDrop", + "type": "HDROP" + }, + { + "name": "iFile", + "type": "UINT" + }, + { + "name": "lpszFile", + "type": "LPWSTR" + }, + { + "name": "cch", + "type": "UINT" + } + ], + "DragQueryPoint": [ + { + "name": "hDrop", + "type": "HDROP" + }, + { + "name": "ppt", + "type": "POINT" + } + ], + "DragFinish": [ + { + "name": "hDrop", + "type": "HDROP" + } + ], + "DragAcceptFiles": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "fAccept", + "type": "BOOL" + } + ], + "ShellExecuteA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "lpOperation", + "type": "LPCSTR" + }, + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "lpParameters", + "type": "LPCSTR" + }, + { + "name": "lpDirectory", + "type": "LPCSTR" + }, + { + "name": "nShowCmd", + "type": "INT" + } + ], + "ShellExecuteW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "lpOperation", + "type": "LPCWSTR" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "lpParameters", + "type": "LPCWSTR" + }, + { + "name": "lpDirectory", + "type": "LPCWSTR" + }, + { + "name": "nShowCmd", + "type": "INT" + } + ], + "FindExecutableA": [ + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "lpDirectory", + "type": "LPCSTR" + }, + { + "name": "lpResult", + "type": "LPSTR" + } + ], + "FindExecutableW": [ + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "lpDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpResult", + "type": "LPWSTR" + } + ], + "ShellAboutA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szApp", + "type": "LPCSTR" + }, + { + "name": "szOtherStuff", + "type": "LPCSTR" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], + "ShellAboutW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szApp", + "type": "LPCWSTR" + }, + { + "name": "szOtherStuff", + "type": "LPCWSTR" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], + "DuplicateIcon": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], + "ExtractAssociatedIconA": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "pszIconPath", + "type": "LPSTR" + }, + { + "name": "piIcon", + "type": "WORD" + } + ], + "ExtractAssociatedIconW": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "pszIconPath", + "type": "LPWSTR" + }, + { + "name": "piIcon", + "type": "WORD" + } + ], + "ExtractAssociatedIconExA": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "pszIconPath", + "type": "LPSTR" + }, + { + "name": "piIconIndex", + "type": "WORD" + }, + { + "name": "piIconId", + "type": "WORD" + } + ], + "ExtractAssociatedIconExW": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "pszIconPath", + "type": "LPWSTR" + }, + { + "name": "piIconIndex", + "type": "WORD" + }, + { + "name": "piIconId", + "type": "WORD" + } + ], + "ExtractIconA": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "pszExeFileName", + "type": "LPCSTR" + }, + { + "name": "nIconIndex", + "type": "UINT" + } + ], + "ExtractIconW": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "pszExeFileName", + "type": "LPCWSTR" + }, + { + "name": "nIconIndex", + "type": "UINT" + } + ], + "SHAppBarMessage": [ + { + "name": "dwMessage", + "type": "DWORD" + }, + { + "name": "pData", + "type": "PAPPBARDATA" + } + ], + "DoEnvironmentSubstA": [ + { + "name": "pszSrc", + "type": "LPSTR" + }, + { + "name": "cchSrc", + "type": "UINT" + } + ], + "DoEnvironmentSubstW": [ + { + "name": "pszSrc", + "type": "LPWSTR" + }, + { + "name": "cchSrc", + "type": "UINT" + } + ], + "ExtractIconExA": [ + { + "name": "lpszFile", + "type": "LPCSTR" + }, + { + "name": "nIconIndex", + "type": "int" + }, + { + "name": "phiconLarge", + "type": "HICON" + }, + { + "name": "phiconSmall", + "type": "HICON" + }, + { + "name": "nIcons", + "type": "UINT" + } + ], + "ExtractIconExW": [ + { + "name": "lpszFile", + "type": "LPCWSTR" + }, + { + "name": "nIconIndex", + "type": "int" + }, + { + "name": "phiconLarge", + "type": "HICON" + }, + { + "name": "phiconSmall", + "type": "HICON" + }, + { + "name": "nIcons", + "type": "UINT" + } + ], + "SHFileOperationA": [ + { + "name": "lpFileOp", + "type": "LPSHFILEOPSTRUCTA" + } + ], + "SHFileOperationW": [ + { + "name": "lpFileOp", + "type": "LPSHFILEOPSTRUCTW" + } + ], + "SHFreeNameMappings": [ + { + "name": "hNameMappings", + "type": "HANDLE" + } + ], + "ShellExecuteExA": [ + { + "name": "pExecInfo", + "type": "SHELLEXECUTEINFOA" + } + ], + "ShellExecuteExW": [ + { + "name": "pExecInfo", + "type": "SHELLEXECUTEINFOW" + } + ], + "SHCreateProcessAsUserW": [ + { + "name": "pscpi", + "type": "PSHCREATEPROCESSINFOW" + } + ], + "SHEvaluateSystemCommandTemplate": [ + { + "name": "pszCmdTemplate", + "type": "PCWSTR" + }, + { + "name": "ppszApplication", + "type": "PWSTR" + }, + { + "name": "ppszCommandLine", + "type": "PWSTR" + }, + { + "name": "ppszParameters", + "type": "PWSTR" + } + ], + "AssocCreateForClasses": [ + { + "name": "rgClasses", + "type": "ASSOCIATIONELEMENT" + }, + { + "name": "cClasses", + "type": "ULONG" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHQueryRecycleBinA": [ + { + "name": "pszRootPath", + "type": "LPCSTR" + }, + { + "name": "pSHQueryRBInfo", + "type": "LPSHQUERYRBINFO" + } + ], + "SHQueryRecycleBinW": [ + { + "name": "pszRootPath", + "type": "LPCWSTR" + }, + { + "name": "pSHQueryRBInfo", + "type": "LPSHQUERYRBINFO" + } + ], + "SHEmptyRecycleBinA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszRootPath", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHEmptyRecycleBinW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszRootPath", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHQueryUserNotificationState": [ + { + "name": "pquns", + "type": "QUERY_USER_NOTIFICATION_STATE" + } + ], + "SHGetPropertyStoreForWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "Shell_NotifyIconA": [ + { + "name": "dwMessage", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "PNOTIFYICONDATAA" + } + ], + "Shell_NotifyIconW": [ + { + "name": "dwMessage", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "PNOTIFYICONDATAW" + } + ], + "Shell_NotifyIconGetRect": [ + { + "name": "identifier", + "type": "NOTIFYICONIDENTIFIER" + }, + { + "name": "iconLocation", + "type": "RECT" + } + ], + "SHGetFileInfoA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "psfi", + "type": "SHFILEINFOA" + }, + { + "name": "cbFileInfo", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "SHGetFileInfoW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "psfi", + "type": "SHFILEINFOW" + }, + { + "name": "cbFileInfo", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "SHGetStockIconInfo": [ + { + "name": "siid", + "type": "SHSTOCKICONID" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "psii", + "type": "SHSTOCKICONINFO" + } + ], + "SHGetDiskFreeSpaceExA": [ + { + "name": "pszDirectoryName", + "type": "LPCSTR" + }, + { + "name": "pulFreeBytesAvailableToCaller", + "type": "ULARGE_INTEGER" + }, + { + "name": "pulTotalNumberOfBytes", + "type": "ULARGE_INTEGER" + }, + { + "name": "pulTotalNumberOfFreeBytes", + "type": "ULARGE_INTEGER" + } + ], + "SHGetDiskFreeSpaceExW": [ + { + "name": "pszDirectoryName", + "type": "LPCWSTR" + }, + { + "name": "pulFreeBytesAvailableToCaller", + "type": "ULARGE_INTEGER" + }, + { + "name": "pulTotalNumberOfBytes", + "type": "ULARGE_INTEGER" + }, + { + "name": "pulTotalNumberOfFreeBytes", + "type": "ULARGE_INTEGER" + } + ], + "SHGetNewLinkInfoA": [ + { + "name": "pszLinkTo", + "type": "LPCSTR" + }, + { + "name": "pszDir", + "type": "LPCSTR" + }, + { + "name": "pszName", + "type": "LPSTR" + }, + { + "name": "pfMustCopy", + "type": "BOOL" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "SHGetNewLinkInfoW": [ + { + "name": "pszLinkTo", + "type": "LPCWSTR" + }, + { + "name": "pszDir", + "type": "LPCWSTR" + }, + { + "name": "pszName", + "type": "LPWSTR" + }, + { + "name": "pfMustCopy", + "type": "BOOL" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "SHInvokePrinterCommandA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uAction", + "type": "UINT" + }, + { + "name": "lpBuf1", + "type": "LPCSTR" + }, + { + "name": "lpBuf2", + "type": "LPCSTR" + }, + { + "name": "fModal", + "type": "BOOL" + } + ], + "SHInvokePrinterCommandW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uAction", + "type": "UINT" + }, + { + "name": "lpBuf1", + "type": "LPCWSTR" + }, + { + "name": "lpBuf2", + "type": "LPCWSTR" + }, + { + "name": "fModal", + "type": "BOOL" + } + ], + "SHLoadNonloadedIconOverlayIdentifiers": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHIsFileAvailableOffline": [ + { + "name": "pwszPath", + "type": "PCWSTR" + }, + { + "name": "pdwStatus", + "type": "DWORD" + } + ], + "SHSetLocalizedName": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pszResModule", + "type": "PCWSTR" + }, + { + "name": "idsRes", + "type": "int" + } + ], + "SHRemoveLocalizedName": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHGetLocalizedName": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pszResModule", + "type": "PWSTR" + }, + { + "name": "cch", + "type": "UINT" + }, + { + "name": "pidsRes", + "type": "int" + } + ], + "ShellMessageBoxA": [ + { + "name": "hAppInst", + "type": "HINSTANCE" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpcText", + "type": "LPCSTR" + }, + { + "name": "lpcTitle", + "type": "LPCSTR" + }, + { + "name": "fuStyle", + "type": "UINT" + } + ], + "ShellMessageBoxW": [ + { + "name": "hAppInst", + "type": "HINSTANCE" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpcText", + "type": "LPCWSTR" + }, + { + "name": "lpcTitle", + "type": "LPCWSTR" + }, + { + "name": "fuStyle", + "type": "UINT" + } + ], + "SHEnumerateUnreadMailAccountsA": [ + { + "name": "hKeyUser", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszMailAddress", + "type": "LPSTR" + }, + { + "name": "cchMailAddress", + "type": "int" + } + ], + "SHEnumerateUnreadMailAccountsW": [ + { + "name": "hKeyUser", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszMailAddress", + "type": "LPWSTR" + }, + { + "name": "cchMailAddress", + "type": "int" + } + ], + "SHGetUnreadMailCountW": [ + { + "name": "hKeyUser", + "type": "HKEY" + }, + { + "name": "pszMailAddress", + "type": "LPCWSTR" + }, + { + "name": "pdwCount", + "type": "DWORD" + }, + { + "name": "pFileTime", + "type": "FILETIME" + }, + { + "name": "pszShellExecuteCommand", + "type": "LPWSTR" + }, + { + "name": "cchShellExecuteCommand", + "type": "int" + } + ], + "SHSetUnreadMailCountW": [ + { + "name": "pszMailAddress", + "type": "LPCWSTR" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pszShellExecuteCommand", + "type": "LPCWSTR" + } + ], + "SHTestTokenMembership": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "ulRID", + "type": "ULONG" + } + ], + "SHGetImageList": [ + { + "name": "iImageList", + "type": "int" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObj", + "type": "void" + } + ], + "InitNetworkAddressControl": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHGetDriveMedia": [ + { + "name": "pszDrive", + "type": "PCWSTR" + }, + { + "name": "pdwMediaContent", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shellscalingapi.json b/qiling/extensions/windows_sdk/shellscalingapi.json new file mode 100644 index 000000000..f59724c18 --- /dev/null +++ b/qiling/extensions/windows_sdk/shellscalingapi.json @@ -0,0 +1,96 @@ +{ + "GetScaleFactorForDevice": [ + { + "name": "deviceType", + "type": "DISPLAY_DEVICE_TYPE" + } + ], + "RegisterScaleChangeNotifications": [ + { + "name": "displayDevice", + "type": "DISPLAY_DEVICE_TYPE" + }, + { + "name": "hwndNotify", + "type": "HWND" + }, + { + "name": "uMsgNotify", + "type": "UINT" + }, + { + "name": "pdwCookie", + "type": "DWORD" + } + ], + "RevokeScaleChangeNotifications": [ + { + "name": "displayDevice", + "type": "DISPLAY_DEVICE_TYPE" + }, + { + "name": "dwCookie", + "type": "DWORD" + } + ], + "GetScaleFactorForMonitor": [ + { + "name": "hMon", + "type": "HMONITOR" + }, + { + "name": "pScale", + "type": "DEVICE_SCALE_FACTOR" + } + ], + "RegisterScaleChangeEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "pdwCookie", + "type": "DWORD_PTR" + } + ], + "UnregisterScaleChangeEvent": [ + { + "name": "dwCookie", + "type": "DWORD_PTR" + } + ], + "SetProcessDpiAwareness": [ + { + "name": "value", + "type": "PROCESS_DPI_AWARENESS" + } + ], + "GetProcessDpiAwareness": [ + { + "name": "hprocess", + "type": "HANDLE" + }, + { + "name": "value", + "type": "PROCESS_DPI_AWARENESS" + } + ], + "GetDpiForMonitor": [ + { + "name": "hmonitor", + "type": "HMONITOR" + }, + { + "name": "dpiType", + "type": "MONITOR_DPI_TYPE" + }, + { + "name": "dpiX", + "type": "UINT" + }, + { + "name": "dpiY", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shlobj.json b/qiling/extensions/windows_sdk/shlobj.json new file mode 100644 index 000000000..456aa00b9 --- /dev/null +++ b/qiling/extensions/windows_sdk/shlobj.json @@ -0,0 +1,188 @@ +{ + "GetFileNameFromBrowse": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszFilePath", + "type": "PWSTR" + }, + { + "name": "cchFilePath", + "type": "UINT" + }, + { + "name": "pszWorkingDir", + "type": "PCWSTR" + }, + { + "name": "pszDefExt", + "type": "PCWSTR" + }, + { + "name": "pszFilters", + "type": "PCWSTR" + }, + { + "name": "pszTitle", + "type": "PCWSTR" + } + ], + "DriveType": [ + { + "name": "iDrive", + "type": "int" + } + ], + "SHChangeNotifyRegisterThread": [ + { + "name": "status", + "type": "SCNRT_STATUS" + } + ], + "PathIsSlowA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "dwAttr", + "type": "DWORD" + } + ], + "PathIsSlowW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "dwAttr", + "type": "DWORD" + } + ], + "SHCreatePropSheetExtArray": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "PCWSTR" + }, + { + "name": "max_iface", + "type": "UINT" + } + ], + "SHOpenPropSheetA": [ + { + "name": "pszCaption", + "type": "LPCSTR" + }, + { + "name": "ahkeys", + "type": "HKEY" + }, + { + "name": "ckeys", + "type": "UINT" + }, + { + "name": "pclsidDefault", + "type": "CLSID" + }, + { + "name": "pdtobj", + "type": "IDataObject" + }, + { + "name": "psb", + "type": "IShellBrowser" + }, + { + "name": "pStartPage", + "type": "LPCSTR" + } + ], + "SHOpenPropSheetW": [ + { + "name": "pszCaption", + "type": "LPCWSTR" + }, + { + "name": "ahkeys", + "type": "HKEY" + }, + { + "name": "ckeys", + "type": "UINT" + }, + { + "name": "pclsidDefault", + "type": "CLSID" + }, + { + "name": "pdtobj", + "type": "IDataObject" + }, + { + "name": "psb", + "type": "IShellBrowser" + }, + { + "name": "pStartPage", + "type": "LPCWSTR" + } + ], + "SoftwareUpdateMessageBox": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pszDistUnit", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "psdi", + "type": "LPSOFTDISTINFO" + } + ], + "SHMultiFileProperties": [ + { + "name": "pdtobj", + "type": "IDataObject" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHCreateQueryCancelAutoPlayMoniker": [ + { + "name": "ppmoniker", + "type": "IMoniker" + } + ], + "PerUserInit": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHRunControlPanel": [ + { + "name": "lpcszCmdLine", + "type": "PCWSTR" + }, + { + "name": "hwndMsgParent", + "type": "HWND" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shlobj_core.json b/qiling/extensions/windows_sdk/shlobj_core.json new file mode 100644 index 000000000..4776b13cd --- /dev/null +++ b/qiling/extensions/windows_sdk/shlobj_core.json @@ -0,0 +1,2012 @@ +{ + "SHGetMalloc": [ + { + "name": "ppMalloc", + "type": "IMalloc" + } + ], + "SHFree": [ + { + "name": "pv", + "type": "void" + } + ], + "SHGetIconOverlayIndexA": [ + { + "name": "pszIconPath", + "type": "LPCSTR" + }, + { + "name": "iIconIndex", + "type": "int" + } + ], + "SHGetIconOverlayIndexW": [ + { + "name": "pszIconPath", + "type": "LPCWSTR" + }, + { + "name": "iIconIndex", + "type": "int" + } + ], + "ILClone": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILCloneFirst": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILCombine": [ + { + "name": "pidl1", + "type": "LPCITEMIDLIST" + }, + { + "name": "pidl2", + "type": "LPCITEMIDLIST" + } + ], + "ILFree": [ + { + "name": "pidl", + "type": "LPITEMIDLIST" + } + ], + "ILGetNext": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILGetSize": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILFindChild": [ + { + "name": "pidlParent", + "type": "LPITEMIDLIST" + }, + { + "name": "pidlChild", + "type": "LPCITEMIDLIST" + } + ], + "ILFindLastID": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILRemoveLastID": [ + { + "name": "pidl", + "type": "LPITEMIDLIST" + } + ], + "ILIsEqual": [ + { + "name": "pidl1", + "type": "LPCITEMIDLIST" + }, + { + "name": "pidl2", + "type": "LPCITEMIDLIST" + } + ], + "ILIsParent": [ + { + "name": "pidl1", + "type": "LPCITEMIDLIST" + }, + { + "name": "pidl2", + "type": "LPCITEMIDLIST" + }, + { + "name": "fImmediate", + "type": "BOOL" + } + ], + "ILSaveToStream": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILLoadFromStream": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidl", + "type": "LPITEMIDLIST" + } + ], + "ILLoadFromStreamEx": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidl", + "type": "LPITEMIDLIST" + } + ], + "ILCreateFromPathA": [ + { + "name": "pszPath", + "type": "PCSTR" + } + ], + "ILCreateFromPathW": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHILCreateFromPath": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + }, + { + "name": "rgfInOut", + "type": "DWORD" + } + ], + "ILAppendID": [ + { + "name": "pidl", + "type": "LPITEMIDLIST" + }, + { + "name": "pmkid", + "type": "LPCSHITEMID" + }, + { + "name": "fAppend", + "type": "BOOL" + } + ], + "SHGetPathFromIDListEx": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "DWORD" + }, + { + "name": "uOpts", + "type": "GPFIDL_FLAGS" + } + ], + "SHGetPathFromIDListA": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "SHGetPathFromIDListW": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "SHCreateDirectory": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHCreateDirectoryExA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "psa", + "type": "SECURITY_ATTRIBUTES" + } + ], + "SHCreateDirectoryExW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "psa", + "type": "SECURITY_ATTRIBUTES" + } + ], + "SHOpenFolderAndSelectItems": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "apidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHCreateShellItem": [ + { + "name": "pidlParent", + "type": "LPCITEMIDLIST" + }, + { + "name": "psfParent", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsi", + "type": "IShellItem" + } + ], + "SHGetSpecialFolderLocation": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + } + ], + "SHCloneSpecialIDList": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "fCreate", + "type": "BOOL" + } + ], + "SHGetSpecialFolderPathA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "fCreate", + "type": "BOOL" + } + ], + "SHGetSpecialFolderPathW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "fCreate", + "type": "BOOL" + } + ], + "SHFlushSFCache": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHGetFolderPathA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "SHGetFolderPathW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "SHGetFolderLocation": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + } + ], + "SHSetFolderPathA": [ + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "SHSetFolderPathW": [ + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "SHGetFolderPathAndSubDirA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszSubDir", + "type": "LPCSTR" + }, + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "SHGetFolderPathAndSubDirW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszSubDir", + "type": "LPCWSTR" + }, + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "SHGetKnownFolderIDList": [ + { + "name": "rfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + } + ], + "SHSetKnownFolderPath": [ + { + "name": "rfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHGetKnownFolderPath": [ + { + "name": "rfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "ppszPath", + "type": "PWSTR" + } + ], + "SHGetKnownFolderItem": [ + { + "name": "rfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "flags", + "type": "KNOWN_FOLDER_FLAG" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetSetFolderCustomSettings": [ + { + "name": "pfcs", + "type": "LPSHFOLDERCUSTOMSETTINGS" + }, + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "dwReadWrite", + "type": "DWORD" + } + ], + "SHBrowseForFolderA": [ + { + "name": "lpbi", + "type": "LPBROWSEINFOA" + } + ], + "SHBrowseForFolderW": [ + { + "name": "lpbi", + "type": "LPBROWSEINFOW" + } + ], + "SHLoadInProc": [ + { + "name": "rclsid", + "type": "IID" + } + ], + "SHGetDesktopFolder": [ + { + "name": "ppshf", + "type": "IShellFolder" + } + ], + "SHChangeNotify": [ + { + "name": "wEventId", + "type": "LONG" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "dwItem1", + "type": "LPCVOID" + }, + { + "name": "dwItem2", + "type": "LPCVOID" + } + ], + "SHAddToRecentDocs": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pv", + "type": "LPCVOID" + } + ], + "SHHandleUpdateImage": [ + { + "name": "pidlExtra", + "type": "LPCITEMIDLIST" + } + ], + "SHUpdateImageA": [ + { + "name": "pszHashItem", + "type": "LPCSTR" + }, + { + "name": "iIndex", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "iImageIndex", + "type": "int" + } + ], + "SHUpdateImageW": [ + { + "name": "pszHashItem", + "type": "LPCWSTR" + }, + { + "name": "iIndex", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "iImageIndex", + "type": "int" + } + ], + "SHChangeNotifyRegister": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "fSources", + "type": "int" + }, + { + "name": "fEvents", + "type": "LONG" + }, + { + "name": "wMsg", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "int" + }, + { + "name": "pshcne", + "type": "SHChangeNotifyEntry" + } + ], + "SHChangeNotifyDeregister": [ + { + "name": "ulID", + "type": "ULONG" + } + ], + "SHChangeNotification_Lock": [ + { + "name": "hChange", + "type": "HANDLE" + }, + { + "name": "dwProcId", + "type": "DWORD" + }, + { + "name": "pppidl", + "type": "LPITEMIDLIST" + }, + { + "name": "plEvent", + "type": "LONG" + } + ], + "SHChangeNotification_Unlock": [ + { + "name": "hLock", + "type": "HANDLE" + } + ], + "SHGetRealIDL": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidlSimple", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppidlReal", + "type": "LPITEMIDLIST" + } + ], + "SHGetInstanceExplorer": [ + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SHGetDataFromIDListA": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "nFormat", + "type": "int" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "int" + } + ], + "SHGetDataFromIDListW": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "nFormat", + "type": "int" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "int" + } + ], + "RestartDialog": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPrompt", + "type": "PCWSTR" + }, + { + "name": "dwReturn", + "type": "DWORD" + } + ], + "RestartDialogEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPrompt", + "type": "PCWSTR" + }, + { + "name": "dwReturn", + "type": "DWORD" + }, + { + "name": "dwReasonCode", + "type": "DWORD" + } + ], + "SHCoCreateInstance": [ + { + "name": "pszCLSID", + "type": "PCWSTR" + }, + { + "name": "pclsid", + "type": "CLSID" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateDataObject": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "apidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pdtInner", + "type": "IDataObject" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CIDLData_CreateFromIDArray": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "apidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppdtobj", + "type": "IDataObject" + } + ], + "SHCreateStdEnumFmtEtc": [ + { + "name": "cfmt", + "type": "UINT" + }, + { + "name": "afmt", + "type": "FORMATETC" + }, + { + "name": "ppenumFormatEtc", + "type": "IEnumFORMATETC" + } + ], + "SHDoDragDrop": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pdata", + "type": "IDataObject" + }, + { + "name": "pdsrc", + "type": "IDropSource" + }, + { + "name": "dwEffect", + "type": "DWORD" + }, + { + "name": "pdwEffect", + "type": "DWORD" + } + ], + "DAD_SetDragImage": [ + { + "name": "him", + "type": "HIMAGELIST" + }, + { + "name": "pptOffset", + "type": "POINT" + } + ], + "DAD_DragEnterEx": [ + { + "name": "hwndTarget", + "type": "HWND" + }, + { + "name": "ptStart", + "type": "POINT" + } + ], + "DAD_DragEnterEx2": [ + { + "name": "hwndTarget", + "type": "HWND" + }, + { + "name": "ptStart", + "type": "POINT" + }, + { + "name": "pdtObject", + "type": "IDataObject" + } + ], + "DAD_ShowDragImage": [ + { + "name": "fShow", + "type": "BOOL" + } + ], + "DAD_DragMove": [ + { + "name": "pt", + "type": "POINT" + } + ], + "DAD_DragLeave": [ + { + "name": "VOID", + "type": "void" + } + ], + "DAD_AutoScroll": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pad", + "type": "AUTO_SCROLL_DATA" + }, + { + "name": "pptNow", + "type": "POINT" + } + ], + "ReadCabinetState": [ + { + "name": "pcs", + "type": "CABINETSTATE" + }, + { + "name": "cLength", + "type": "int" + } + ], + "WriteCabinetState": [ + { + "name": "pcs", + "type": "CABINETSTATE" + } + ], + "PathMakeUniqueName": [ + { + "name": "pszUniqueName", + "type": "PWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "pszTemplate", + "type": "PCWSTR" + }, + { + "name": "pszLongPlate", + "type": "PCWSTR" + }, + { + "name": "pszDir", + "type": "PCWSTR" + } + ], + "PathIsExe": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "PathCleanupSpec": [ + { + "name": "pszDir", + "type": "PCWSTR" + }, + { + "name": "pszSpec", + "type": "PWSTR" + } + ], + "PathResolve": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "dirs", + "type": "PZPCWSTR" + }, + { + "name": "fFlags", + "type": "UINT" + } + ], + "GetFileNameFromBrowse": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszFilePath", + "type": "PWSTR" + }, + { + "name": "cchFilePath", + "type": "UINT" + }, + { + "name": "pszWorkingDir", + "type": "PCWSTR" + }, + { + "name": "pszDefExt", + "type": "PCWSTR" + }, + { + "name": "pszFilters", + "type": "PCWSTR" + }, + { + "name": "pszTitle", + "type": "PCWSTR" + } + ], + "DriveType": [ + { + "name": "iDrive", + "type": "int" + } + ], + "RealDriveType": [ + { + "name": "iDrive", + "type": "int" + }, + { + "name": "fOKToHitNet", + "type": "BOOL" + } + ], + "IsNetDrive": [ + { + "name": "iDrive", + "type": "int" + } + ], + "Shell_MergeMenus": [ + { + "name": "hmDst", + "type": "HMENU" + }, + { + "name": "hmSrc", + "type": "HMENU" + }, + { + "name": "uInsert", + "type": "UINT" + }, + { + "name": "uIDAdjust", + "type": "UINT" + }, + { + "name": "uIDAdjustMax", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "ULONG" + } + ], + "SHObjectProperties": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "shopObjectType", + "type": "DWORD" + }, + { + "name": "pszObjectName", + "type": "PCWSTR" + }, + { + "name": "pszPropertyPage", + "type": "PCWSTR" + } + ], + "SHFormatDrive": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "drive", + "type": "UINT" + }, + { + "name": "fmtID", + "type": "UINT" + }, + { + "name": "options", + "type": "UINT" + } + ], + "SHDestroyPropSheetExtArray": [ + { + "name": "hpsxa", + "type": "HPSXA" + } + ], + "SHAddFromPropSheetExtArray": [ + { + "name": "hpsxa", + "type": "HPSXA" + }, + { + "name": "lpfnAddPage", + "type": "LPFNADDPROPSHEETPAGE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHReplaceFromPropSheetExtArray": [ + { + "name": "hpsxa", + "type": "HPSXA" + }, + { + "name": "uPageID", + "type": "UINT" + }, + { + "name": "lpfnReplaceWith", + "type": "LPFNADDPROPSHEETPAGE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHFindFiles": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "pidlSaveFile", + "type": "LPCITEMIDLIST" + } + ], + "PathGetShortPath": [ + { + "name": "pszLongPath", + "type": "PWSTR" + } + ], + "PathYetAnotherMakeUniqueName": [ + { + "name": "pszUniqueName", + "type": "PWSTR" + }, + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pszShort", + "type": "PCWSTR" + }, + { + "name": "pszFileSpec", + "type": "PCWSTR" + } + ], + "Win32DeleteFile": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHRestricted": [ + { + "name": "rest", + "type": "RESTRICTIONS" + } + ], + "SignalFileOpen": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "AssocGetDetailsOfPropKey": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pkey", + "type": "PROPERTYKEY" + }, + { + "name": "pv", + "type": "VARIANT" + }, + { + "name": "pfFoundPropKey", + "type": "BOOL" + } + ], + "SHStartNetConnectionDialogA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszRemoteName", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "SHStartNetConnectionDialogW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszRemoteName", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "SHDefExtractIconA": [ + { + "name": "pszIconFile", + "type": "LPCSTR" + }, + { + "name": "iIndex", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "phiconLarge", + "type": "HICON" + }, + { + "name": "phiconSmall", + "type": "HICON" + }, + { + "name": "nIconSize", + "type": "UINT" + } + ], + "SHDefExtractIconW": [ + { + "name": "pszIconFile", + "type": "LPCWSTR" + }, + { + "name": "iIndex", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "phiconLarge", + "type": "HICON" + }, + { + "name": "phiconSmall", + "type": "HICON" + }, + { + "name": "nIconSize", + "type": "UINT" + } + ], + "SHOpenWithDialog": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "poainfo", + "type": "OPENASINFO" + } + ], + "Shell_GetImageLists": [ + { + "name": "phiml", + "type": "HIMAGELIST" + }, + { + "name": "phimlSmall", + "type": "HIMAGELIST" + } + ], + "Shell_GetCachedImageIndex": [ + { + "name": "pwszIconPath", + "type": "PCWSTR" + }, + { + "name": "iIconIndex", + "type": "int" + }, + { + "name": "uIconFlags", + "type": "UINT" + } + ], + "Shell_GetCachedImageIndexA": [ + { + "name": "pszIconPath", + "type": "LPCSTR" + }, + { + "name": "iIconIndex", + "type": "int" + }, + { + "name": "uIconFlags", + "type": "UINT" + } + ], + "Shell_GetCachedImageIndexW": [ + { + "name": "pszIconPath", + "type": "LPCWSTR" + }, + { + "name": "iIconIndex", + "type": "int" + }, + { + "name": "uIconFlags", + "type": "UINT" + } + ], + "SHValidateUNC": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "pszFile", + "type": "PWSTR" + }, + { + "name": "fConnect", + "type": "UINT" + } + ], + "PifMgr_OpenProperties": [ + { + "name": "pszApp", + "type": "PCWSTR" + }, + { + "name": "pszPIF", + "type": "PCWSTR" + }, + { + "name": "hInf", + "type": "UINT" + }, + { + "name": "flOpt", + "type": "UINT" + } + ], + "PifMgr_GetProperties": [ + { + "name": "hProps", + "type": "HANDLE" + }, + { + "name": "pszGroup", + "type": "PCSTR" + }, + { + "name": "lpProps", + "type": "void" + }, + { + "name": "cbProps", + "type": "int" + }, + { + "name": "flOpt", + "type": "UINT" + } + ], + "PifMgr_SetProperties": [ + { + "name": "hProps", + "type": "HANDLE" + }, + { + "name": "pszGroup", + "type": "PCSTR" + }, + { + "name": "lpProps", + "type": "void" + }, + { + "name": "cbProps", + "type": "int" + }, + { + "name": "flOpt", + "type": "UINT" + } + ], + "PifMgr_CloseProperties": [ + { + "name": "hProps", + "type": "HANDLE" + }, + { + "name": "flOpt", + "type": "UINT" + } + ], + "SHSetInstanceExplorer": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "IsUserAnAdmin": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHShellFolderView_Message": [ + { + "name": "hwndMain", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHCreateShellFolderView": [ + { + "name": "pcsfv", + "type": "SFV_CREATE" + }, + { + "name": "ppsv", + "type": "IShellView" + } + ], + "CDefFolderMenu_Create2": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "apidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pfn", + "type": "LPFNDFMCALLBACK" + }, + { + "name": "nKeys", + "type": "UINT" + }, + { + "name": "ahkeys", + "type": "HKEY" + }, + { + "name": "ppcm", + "type": "IContextMenu" + } + ], + "SHCreateDefaultContextMenu": [ + { + "name": "pdcm", + "type": "DEFCONTEXTMENU" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateShellFolderViewEx": [ + { + "name": "pcsfv", + "type": "CSFV" + }, + { + "name": "ppsv", + "type": "IShellView" + } + ], + "SHGetSetSettings": [ + { + "name": "lpss", + "type": "LPSHELLSTATEA" + }, + { + "name": "dwMask", + "type": "DWORD" + }, + { + "name": "bSet", + "type": "BOOL" + } + ], + "SHGetSettings": [ + { + "name": "psfs", + "type": "SHELLFLAGSTATE" + }, + { + "name": "dwMask", + "type": "DWORD" + } + ], + "SHBindToParent": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + }, + { + "name": "ppidlLast", + "type": "LPCITEMIDLIST" + } + ], + "SHBindToFolderIDListParent": [ + { + "name": "psfRoot", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + }, + { + "name": "ppidlLast", + "type": "LPCITEMIDLIST" + } + ], + "SHBindToFolderIDListParentEx": [ + { + "name": "psfRoot", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppbc", + "type": "IBindCtx" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + }, + { + "name": "ppidlLast", + "type": "LPCITEMIDLIST" + } + ], + "SHBindToObject": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHParseDisplayName": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + }, + { + "name": "sfgaoIn", + "type": "SFGAOF" + }, + { + "name": "psfgaoOut", + "type": "SFGAOF" + } + ], + "SHPathPrepareForWriteA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "punkEnableModless", + "type": "IUnknown" + }, + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHPathPrepareForWriteW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "punkEnableModless", + "type": "IUnknown" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHPropStgCreate": [ + { + "name": "psstg", + "type": "IPropertySetStorage" + }, + { + "name": "fmtid", + "type": "IID" + }, + { + "name": "pclsid", + "type": "CLSID" + }, + { + "name": "grfFlags", + "type": "DWORD" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "dwDisposition", + "type": "DWORD" + }, + { + "name": "ppstg", + "type": "IPropertyStorage" + }, + { + "name": "puCodePage", + "type": "UINT" + } + ], + "SHPropStgReadMultiple": [ + { + "name": "pps", + "type": "IPropertyStorage" + }, + { + "name": "uCodePage", + "type": "UINT" + }, + { + "name": "cpspec", + "type": "ULONG" + }, + { + "name": "rgpspec", + "type": "PROPSPEC" + }, + { + "name": "rgvar", + "type": "PROPVARIANT" + } + ], + "SHPropStgWriteMultiple": [ + { + "name": "pps", + "type": "IPropertyStorage" + }, + { + "name": "puCodePage", + "type": "UINT" + }, + { + "name": "cpspec", + "type": "ULONG" + }, + { + "name": "rgpspec", + "type": "PROPSPEC" + }, + { + "name": "rgvar", + "type": "PROPVARIANT" + }, + { + "name": "propidNameFirst", + "type": "PROPID" + } + ], + "SHCreateFileExtractIconW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHLimitInputEdit": [ + { + "name": "hwndEdit", + "type": "HWND" + }, + { + "name": "psf", + "type": "IShellFolder" + } + ], + "SHGetAttributesFromDataObject": [ + { + "name": "pdo", + "type": "IDataObject" + }, + { + "name": "dwAttributeMask", + "type": "DWORD" + }, + { + "name": "pdwAttributes", + "type": "DWORD" + }, + { + "name": "pcItems", + "type": "UINT" + } + ], + "SHMapPIDLToSystemImageListIndex": [ + { + "name": "pshf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "piIndexSel", + "type": "int" + } + ], + "SHCLSIDFromString": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "PickIconDlg": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszIconPath", + "type": "PWSTR" + }, + { + "name": "cchIconPath", + "type": "UINT" + }, + { + "name": "piIconIndex", + "type": "int" + } + ], + "StgMakeUniqueName": [ + { + "name": "pstgParent", + "type": "IStorage" + }, + { + "name": "pszFileSpec", + "type": "PCWSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shlwapi.json b/qiling/extensions/windows_sdk/shlwapi.json new file mode 100644 index 000000000..94251ac13 --- /dev/null +++ b/qiling/extensions/windows_sdk/shlwapi.json @@ -0,0 +1,4606 @@ +{ + "StrChrA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrChrW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrChrIA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrChrIW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrChrNW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrChrNIW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrCmpNA": [ + { + "name": "psz1", + "type": "PCSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNIA": [ + { + "name": "psz1", + "type": "PCSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNIW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCSpnA": [ + { + "name": "pszStr", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrCSpnW": [ + { + "name": "pszStr", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrCSpnIA": [ + { + "name": "pszStr", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrCSpnIW": [ + { + "name": "pszStr", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrDupA": [ + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrDupW": [ + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrFormatByteSizeEx": [ + { + "name": "ull", + "type": "ULONGLONG" + }, + { + "name": "flags", + "type": "SFBS_FLAGS" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatByteSizeA": [ + { + "name": "dw", + "type": "DWORD" + }, + { + "name": "pszBuf", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatByteSize64A": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatByteSizeW": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatKBSizeW": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatKBSizeA": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFromTimeIntervalA": [ + { + "name": "pszOut", + "type": "PSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwTimeMS", + "type": "DWORD" + }, + { + "name": "digits", + "type": "int" + } + ], + "StrFromTimeIntervalW": [ + { + "name": "pszOut", + "type": "PWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwTimeMS", + "type": "DWORD" + }, + { + "name": "digits", + "type": "int" + } + ], + "StrIsIntlEqualA": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "pszString1", + "type": "PCSTR" + }, + { + "name": "pszString2", + "type": "PCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrIsIntlEqualW": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "pszString1", + "type": "PCWSTR" + }, + { + "name": "pszString2", + "type": "PCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrNCatA": [ + { + "name": "psz1", + "type": "PSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "StrNCatW": [ + { + "name": "psz1", + "type": "PWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "StrPBrkA": [ + { + "name": "psz", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrPBrkW": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrRChrA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "pszEnd", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrRChrW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "pszEnd", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrRChrIA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "pszEnd", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrRChrIW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "pszEnd", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrRStrIA": [ + { + "name": "pszSource", + "type": "PCSTR" + }, + { + "name": "pszLast", + "type": "PCSTR" + }, + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrRStrIW": [ + { + "name": "pszSource", + "type": "PCWSTR" + }, + { + "name": "pszLast", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrSpnA": [ + { + "name": "psz", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrSpnW": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrStrA": [ + { + "name": "pszFirst", + "type": "PCSTR" + }, + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrStrW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrStrIA": [ + { + "name": "pszFirst", + "type": "PCSTR" + }, + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrStrIW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrStrNW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrStrNIW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrToIntA": [ + { + "name": "pszSrc", + "type": "PCSTR" + } + ], + "StrToIntW": [ + { + "name": "pszSrc", + "type": "PCWSTR" + } + ], + "StrToIntExA": [ + { + "name": "pszString", + "type": "PCSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "piRet", + "type": "int" + } + ], + "StrToIntExW": [ + { + "name": "pszString", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "piRet", + "type": "int" + } + ], + "StrToInt64ExA": [ + { + "name": "pszString", + "type": "PCSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "StrToInt64ExW": [ + { + "name": "pszString", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "StrTrimA": [ + { + "name": "psz", + "type": "PSTR" + }, + { + "name": "pszTrimChars", + "type": "PCSTR" + } + ], + "StrTrimW": [ + { + "name": "psz", + "type": "PWSTR" + }, + { + "name": "pszTrimChars", + "type": "PCWSTR" + } + ], + "StrCatW": [ + { + "name": "psz1", + "type": "PWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCmpW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCmpIW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCpyW": [ + { + "name": "psz1", + "type": "PWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCpyNW": [ + { + "name": "pszDst", + "type": "PWSTR" + }, + { + "name": "pszSrc", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "StrCatBuffW": [ + { + "name": "pszDest", + "type": "PWSTR" + }, + { + "name": "pszSrc", + "type": "PCWSTR" + }, + { + "name": "cchDestBuffSize", + "type": "int" + } + ], + "StrCatBuffA": [ + { + "name": "pszDest", + "type": "PSTR" + }, + { + "name": "pszSrc", + "type": "PCSTR" + }, + { + "name": "cchDestBuffSize", + "type": "int" + } + ], + "ChrCmpIA": [ + { + "name": "w1", + "type": "WORD" + }, + { + "name": "w2", + "type": "WORD" + } + ], + "ChrCmpIW": [ + { + "name": "w1", + "type": "WCHAR" + }, + { + "name": "w2", + "type": "WCHAR" + } + ], + "wvnsprintfA": [ + { + "name": "pszDest", + "type": "PSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wvnsprintfW": [ + { + "name": "pszDest", + "type": "PWSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCWSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wnsprintfA": [ + { + "name": "pszDest", + "type": "PSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCSTR" + } + ], + "wnsprintfW": [ + { + "name": "pszDest", + "type": "PWSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCWSTR" + } + ], + "StrRetToStrA": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsz", + "type": "LPSTR" + } + ], + "StrRetToStrW": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsz", + "type": "LPWSTR" + } + ], + "StrRetToBufA": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrRetToBufW": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "SHStrDupA": [ + { + "name": "psz", + "type": "LPCSTR" + }, + { + "name": "ppwsz", + "type": "LPWSTR" + } + ], + "SHStrDupW": [ + { + "name": "psz", + "type": "LPCWSTR" + }, + { + "name": "ppwsz", + "type": "LPWSTR" + } + ], + "StrCmpLogicalW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCatChainW": [ + { + "name": "pszDst", + "type": "PWSTR" + }, + { + "name": "cchDst", + "type": "DWORD" + }, + { + "name": "ichAt", + "type": "DWORD" + }, + { + "name": "pszSrc", + "type": "PCWSTR" + } + ], + "StrRetToBSTR": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pbstr", + "type": "BSTR" + } + ], + "SHLoadIndirectString": [ + { + "name": "pszSource", + "type": "PCWSTR" + }, + { + "name": "pszOutBuf", + "type": "PWSTR" + }, + { + "name": "cchOutBuf", + "type": "UINT" + }, + { + "name": "ppvReserved", + "type": "void" + } + ], + "IsCharSpaceA": [ + { + "name": "wch", + "type": "CHAR" + } + ], + "IsCharSpaceW": [ + { + "name": "wch", + "type": "WCHAR" + } + ], + "StrCmpCA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + } + ], + "StrCmpCW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + } + ], + "StrCmpICA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + } + ], + "StrCmpICW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + } + ], + "StrCmpNCA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNCW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNICA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNICW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "IntlStrEqWorkerA": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "lpString1", + "type": "LPCSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "IntlStrEqWorkerW": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "lpString1", + "type": "LPCWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "PathAddBackslashA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathAddBackslashW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathBuildRootA": [ + { + "name": "pszRoot", + "type": "LPSTR" + }, + { + "name": "iDrive", + "type": "int" + } + ], + "PathBuildRootW": [ + { + "name": "pszRoot", + "type": "LPWSTR" + }, + { + "name": "iDrive", + "type": "int" + } + ], + "PathCombineA": [ + { + "name": "pszDest", + "type": "LPSTR" + }, + { + "name": "pszDir", + "type": "LPCSTR" + }, + { + "name": "pszFile", + "type": "LPCSTR" + } + ], + "PathCombineW": [ + { + "name": "pszDest", + "type": "LPWSTR" + }, + { + "name": "pszDir", + "type": "LPCWSTR" + }, + { + "name": "pszFile", + "type": "LPCWSTR" + } + ], + "PathCompactPathA": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "dx", + "type": "UINT" + } + ], + "PathCompactPathW": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "dx", + "type": "UINT" + } + ], + "PathCompactPathExA": [ + { + "name": "pszOut", + "type": "LPSTR" + }, + { + "name": "pszSrc", + "type": "LPCSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCompactPathExW": [ + { + "name": "pszOut", + "type": "LPWSTR" + }, + { + "name": "pszSrc", + "type": "LPCWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCommonPrefixA": [ + { + "name": "pszFile1", + "type": "LPCSTR" + }, + { + "name": "pszFile2", + "type": "LPCSTR" + }, + { + "name": "achPath", + "type": "LPSTR" + } + ], + "PathCommonPrefixW": [ + { + "name": "pszFile1", + "type": "LPCWSTR" + }, + { + "name": "pszFile2", + "type": "LPCWSTR" + }, + { + "name": "achPath", + "type": "LPWSTR" + } + ], + "PathFileExistsA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFileExistsW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindExtensionA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFindExtensionW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindFileNameA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFindFileNameW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindNextComponentA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFindNextComponentW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindOnPathA": [ + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "ppszOtherDirs", + "type": "PZPCSTR" + } + ], + "PathFindOnPathW": [ + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "ppszOtherDirs", + "type": "PZPCWSTR" + } + ], + "PathFindSuffixArrayA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "apszSuffix", + "type": "LPCSTR" + }, + { + "name": "iArraySize", + "type": "int" + } + ], + "PathFindSuffixArrayW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "apszSuffix", + "type": "LPCWSTR" + }, + { + "name": "iArraySize", + "type": "int" + } + ], + "PathGetArgsA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathGetArgsW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsLFNFileSpecA": [ + { + "name": "pszName", + "type": "LPCSTR" + } + ], + "PathIsLFNFileSpecW": [ + { + "name": "pszName", + "type": "LPCWSTR" + } + ], + "PathGetCharTypeA": [ + { + "name": "ch", + "type": "UCHAR" + } + ], + "PathGetCharTypeW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "PathGetDriveNumberA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathGetDriveNumberW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsDirectoryA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsDirectoryW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsDirectoryEmptyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsDirectoryEmptyW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsFileSpecA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsFileSpecW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsPrefixA": [ + { + "name": "pszPrefix", + "type": "LPCSTR" + }, + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsPrefixW": [ + { + "name": "pszPrefix", + "type": "LPCWSTR" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsRelativeA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsRelativeW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsRootA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsRootW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsSameRootA": [ + { + "name": "pszPath1", + "type": "LPCSTR" + }, + { + "name": "pszPath2", + "type": "LPCSTR" + } + ], + "PathIsSameRootW": [ + { + "name": "pszPath1", + "type": "LPCWSTR" + }, + { + "name": "pszPath2", + "type": "LPCWSTR" + } + ], + "PathIsUNCA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsUNCW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsNetworkPathA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsNetworkPathW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsUNCServerA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsUNCServerW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsUNCServerShareA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsUNCServerShareW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsContentTypeA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "pszContentType", + "type": "LPCSTR" + } + ], + "PathIsContentTypeW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "pszContentType", + "type": "LPCWSTR" + } + ], + "PathIsURLA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsURLW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathMakePrettyA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathMakePrettyW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathMatchSpecA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "pszSpec", + "type": "LPCSTR" + } + ], + "PathMatchSpecW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "pszSpec", + "type": "LPCWSTR" + } + ], + "PathMatchSpecExA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "pszSpec", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathMatchSpecExW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "pszSpec", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathParseIconLocationA": [ + { + "name": "pszIconFile", + "type": "LPSTR" + } + ], + "PathParseIconLocationW": [ + { + "name": "pszIconFile", + "type": "LPWSTR" + } + ], + "PathQuoteSpacesA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "PathQuoteSpacesW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "PathRelativePathToA": [ + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "pszFrom", + "type": "LPCSTR" + }, + { + "name": "dwAttrFrom", + "type": "DWORD" + }, + { + "name": "pszTo", + "type": "LPCSTR" + }, + { + "name": "dwAttrTo", + "type": "DWORD" + } + ], + "PathRelativePathToW": [ + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "pszFrom", + "type": "LPCWSTR" + }, + { + "name": "dwAttrFrom", + "type": "DWORD" + }, + { + "name": "pszTo", + "type": "LPCWSTR" + }, + { + "name": "dwAttrTo", + "type": "DWORD" + } + ], + "PathRemoveArgsA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveArgsW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveBackslashA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveBackslashW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveBlanksA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveBlanksW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveExtensionA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveExtensionW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveFileSpecA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveFileSpecW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRenameExtensionA": [ + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "pszExt", + "type": "LPCSTR" + } + ], + "PathRenameExtensionW": [ + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "pszExt", + "type": "LPCWSTR" + } + ], + "PathSearchAndQualifyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "PathSearchAndQualifyW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "PathSetDlgItemPathA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + }, + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathSetDlgItemPathW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathSkipRootA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathSkipRootW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathStripPathA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathStripPathW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathStripToRootA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathStripToRootW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathUnquoteSpacesA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "PathUnquoteSpacesW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "PathMakeSystemFolderA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathMakeSystemFolderW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathUnmakeSystemFolderA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathUnmakeSystemFolderW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsSystemFolderA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "dwAttrb", + "type": "DWORD" + } + ], + "PathIsSystemFolderW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "dwAttrb", + "type": "DWORD" + } + ], + "PathUndecorateA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathUndecorateW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathUnExpandEnvStringsA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "PathUnExpandEnvStringsW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "UrlCompareA": [ + { + "name": "psz1", + "type": "PCSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "fIgnoreSlash", + "type": "BOOL" + } + ], + "UrlCompareW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "fIgnoreSlash", + "type": "BOOL" + } + ], + "UrlCombineA": [ + { + "name": "pszBase", + "type": "PCSTR" + }, + { + "name": "pszRelative", + "type": "PCSTR" + }, + { + "name": "pszCombined", + "type": "PSTR" + }, + { + "name": "pcchCombined", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCombineW": [ + { + "name": "pszBase", + "type": "PCWSTR" + }, + { + "name": "pszRelative", + "type": "PCWSTR" + }, + { + "name": "pszCombined", + "type": "PWSTR" + }, + { + "name": "pcchCombined", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCanonicalizeA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pszCanonicalized", + "type": "PSTR" + }, + { + "name": "pcchCanonicalized", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCanonicalizeW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pszCanonicalized", + "type": "PWSTR" + }, + { + "name": "pcchCanonicalized", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlIsOpaqueA": [ + { + "name": "pszURL", + "type": "PCSTR" + } + ], + "UrlIsOpaqueW": [ + { + "name": "pszURL", + "type": "PCWSTR" + } + ], + "UrlIsNoHistoryA": [ + { + "name": "pszURL", + "type": "PCSTR" + } + ], + "UrlIsNoHistoryW": [ + { + "name": "pszURL", + "type": "PCWSTR" + } + ], + "UrlIsA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "UrlIs", + "type": "URLIS" + } + ], + "UrlIsW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "UrlIs", + "type": "URLIS" + } + ], + "UrlGetLocationA": [ + { + "name": "pszURL", + "type": "PCSTR" + } + ], + "UrlGetLocationW": [ + { + "name": "pszURL", + "type": "PCWSTR" + } + ], + "UrlUnescapeA": [ + { + "name": "pszUrl", + "type": "PSTR" + }, + { + "name": "pszUnescaped", + "type": "PSTR" + }, + { + "name": "pcchUnescaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlUnescapeW": [ + { + "name": "pszUrl", + "type": "PWSTR" + }, + { + "name": "pszUnescaped", + "type": "PWSTR" + }, + { + "name": "pcchUnescaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlEscapeA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pszEscaped", + "type": "PSTR" + }, + { + "name": "pcchEscaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlEscapeW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pszEscaped", + "type": "PWSTR" + }, + { + "name": "pcchEscaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCreateFromPathA": [ + { + "name": "pszPath", + "type": "PCSTR" + }, + { + "name": "pszUrl", + "type": "PSTR" + }, + { + "name": "pcchUrl", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCreateFromPathW": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pszUrl", + "type": "PWSTR" + }, + { + "name": "pcchUrl", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCreateFromUrlA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pszPath", + "type": "PSTR" + }, + { + "name": "pcchPath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCreateFromUrlW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "pcchPath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCreateFromUrlAlloc": [ + { + "name": "pszIn", + "type": "PCWSTR" + }, + { + "name": "ppszOut", + "type": "PWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlHashA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + } + ], + "UrlHashW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + } + ], + "UrlGetPartW": [ + { + "name": "pszIn", + "type": "PCWSTR" + }, + { + "name": "pszOut", + "type": "PWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwPart", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlGetPartA": [ + { + "name": "pszIn", + "type": "PCSTR" + }, + { + "name": "pszOut", + "type": "PSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwPart", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlApplySchemeA": [ + { + "name": "pszIn", + "type": "PCSTR" + }, + { + "name": "pszOut", + "type": "PSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlApplySchemeW": [ + { + "name": "pszIn", + "type": "PCWSTR" + }, + { + "name": "pszOut", + "type": "PWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "HashData": [ + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + } + ], + "UrlFixupW": [ + { + "name": "pcszUrl", + "type": "PCWSTR" + }, + { + "name": "pszTranslatedUrl", + "type": "PWSTR" + }, + { + "name": "cchMax", + "type": "DWORD" + } + ], + "SHDeleteEmptyKeyA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + } + ], + "SHDeleteEmptyKeyW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + } + ], + "SHDeleteKeyA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + } + ], + "SHDeleteKeyW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + } + ], + "SHRegDuplicateHKey": [ + { + "name": "hkey", + "type": "HKEY" + } + ], + "SHDeleteValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + } + ], + "SHDeleteValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + } + ], + "SHGetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHGetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHSetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SHSetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SHRegGetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHRegGetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHRegSetValue": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SHRegGetValueFromHKCUHKLM": [ + { + "name": "pwszKey", + "type": "PCWSTR" + }, + { + "name": "pwszValue", + "type": "PCWSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHRegGetBoolValueFromHKCUHKLM": [ + { + "name": "pszKey", + "type": "PCWSTR" + }, + { + "name": "pszValue", + "type": "PCWSTR" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "SHQueryValueExA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHQueryValueExW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHEnumKeyExA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + } + ], + "SHEnumKeyExW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPWSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + } + ], + "SHEnumValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "PSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "SHEnumValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "PWSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "SHQueryInfoKeyA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + } + ], + "SHQueryInfoKeyW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + } + ], + "SHCopyKeyA": [ + { + "name": "hkeySrc", + "type": "HKEY" + }, + { + "name": "pszSrcSubKey", + "type": "LPCSTR" + }, + { + "name": "hkeyDest", + "type": "HKEY" + }, + { + "name": "fReserved", + "type": "DWORD" + } + ], + "SHCopyKeyW": [ + { + "name": "hkeySrc", + "type": "HKEY" + }, + { + "name": "pszSrcSubKey", + "type": "LPCWSTR" + }, + { + "name": "hkeyDest", + "type": "HKEY" + }, + { + "name": "fReserved", + "type": "DWORD" + } + ], + "SHRegGetPathA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCSTR" + }, + { + "name": "pcszValue", + "type": "LPCSTR" + }, + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegGetPathW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pcszValue", + "type": "LPCWSTR" + }, + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegSetPathA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCSTR" + }, + { + "name": "pcszValue", + "type": "LPCSTR" + }, + { + "name": "pcszPath", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegSetPathW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pcszValue", + "type": "LPCWSTR" + }, + { + "name": "pcszPath", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegCreateUSKeyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegCreateUSKeyW": [ + { + "name": "pwzPath", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegOpenUSKeyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + } + ], + "SHRegOpenUSKeyW": [ + { + "name": "pwzPath", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + } + ], + "SHRegQueryUSValueA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegQueryUSValueW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegWriteUSValueA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegWriteUSValueW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pwzValue", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegDeleteUSValueA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegDeleteUSValueW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pwzValue", + "type": "LPCWSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegDeleteEmptyUSKeyW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pwzSubKey", + "type": "LPCWSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegDeleteEmptyUSKeyA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegEnumUSKeyA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegEnumUSKeyW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pwzName", + "type": "LPWSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegEnumUSValueA": [ + { + "name": "hUSkey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "LPSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegEnumUSValueW": [ + { + "name": "hUSkey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "LPWSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegQueryInfoUSKeyA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegQueryInfoUSKeyW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegCloseUSKey": [ + { + "name": "hUSKey", + "type": "HUSKEY" + } + ], + "SHRegGetUSValueA": [ + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegGetUSValueW": [ + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegSetUSValueA": [ + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegSetUSValueW": [ + { + "name": "pwzSubKey", + "type": "LPCWSTR" + }, + { + "name": "pwzValue", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegGetIntW": [ + { + "name": "hk", + "type": "HKEY" + }, + { + "name": "pwzKey", + "type": "PCWSTR" + }, + { + "name": "iDefault", + "type": "int" + } + ], + "SHRegGetBoolUSValueA": [ + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "SHRegGetBoolUSValueW": [ + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "AssocCreate": [ + { + "name": "clsid", + "type": "CLSID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetAssocKeys": [ + { + "name": "pqa", + "type": "IQueryAssociations" + }, + { + "name": "rgKeys", + "type": "HKEY" + }, + { + "name": "cKeys", + "type": "DWORD" + } + ], + "AssocQueryStringA": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "pszAssoc", + "type": "LPCSTR" + }, + { + "name": "pszExtra", + "type": "LPCSTR" + }, + { + "name": "pszOut", + "type": "LPSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryStringW": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "pszAssoc", + "type": "LPCWSTR" + }, + { + "name": "pszExtra", + "type": "LPCWSTR" + }, + { + "name": "pszOut", + "type": "LPWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryStringByKeyA": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "hkAssoc", + "type": "HKEY" + }, + { + "name": "pszExtra", + "type": "LPCSTR" + }, + { + "name": "pszOut", + "type": "LPSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryStringByKeyW": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "hkAssoc", + "type": "HKEY" + }, + { + "name": "pszExtra", + "type": "LPCWSTR" + }, + { + "name": "pszOut", + "type": "LPWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryKeyA": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "key", + "type": "ASSOCKEY" + }, + { + "name": "pszAssoc", + "type": "LPCSTR" + }, + { + "name": "pszExtra", + "type": "LPCSTR" + }, + { + "name": "phkeyOut", + "type": "HKEY" + } + ], + "AssocQueryKeyW": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "key", + "type": "ASSOCKEY" + }, + { + "name": "pszAssoc", + "type": "LPCWSTR" + }, + { + "name": "pszExtra", + "type": "LPCWSTR" + }, + { + "name": "phkeyOut", + "type": "HKEY" + } + ], + "AssocIsDangerous": [ + { + "name": "pszAssoc", + "type": "PCWSTR" + } + ], + "AssocGetPerceivedType": [ + { + "name": "pszExt", + "type": "PCWSTR" + }, + { + "name": "ptype", + "type": "PERCEIVED" + }, + { + "name": "pflag", + "type": "PERCEIVEDFLAG" + }, + { + "name": "ppszType", + "type": "PWSTR" + } + ], + "SHCreateStreamOnFileA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "ppstm", + "type": "IStream" + } + ], + "SHCreateStreamOnFileW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "ppstm", + "type": "IStream" + } + ], + "SHCreateStreamOnFileEx": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "fCreate", + "type": "BOOL" + }, + { + "name": "pstmTemplate", + "type": "IStream" + }, + { + "name": "ppstm", + "type": "IStream" + } + ], + "GetAcceptLanguagesA": [ + { + "name": "pszLanguages", + "type": "LPSTR" + }, + { + "name": "pcchLanguages", + "type": "DWORD" + } + ], + "GetAcceptLanguagesW": [ + { + "name": "pszLanguages", + "type": "LPWSTR" + }, + { + "name": "pcchLanguages", + "type": "DWORD" + } + ], + "IUnknown_Set": [ + { + "name": "ppunk", + "type": "IUnknown" + }, + { + "name": "punk", + "type": "IUnknown" + } + ], + "IUnknown_AtomicRelease": [ + { + "name": "ppunk", + "type": "void" + } + ], + "IUnknown_GetWindow": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "phwnd", + "type": "HWND" + } + ], + "IUnknown_SetSite": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "punkSite", + "type": "IUnknown" + } + ], + "IUnknown_GetSite": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "IUnknown_QueryService": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "guidService", + "type": "GUID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvOut", + "type": "void" + } + ], + "IStream_Read": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "ULONG" + } + ], + "IStream_Write": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "ULONG" + } + ], + "IStream_Reset": [ + { + "name": "pstm", + "type": "IStream" + } + ], + "IStream_Size": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pui", + "type": "ULARGE_INTEGER" + } + ], + "ConnectToConnectionPoint": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "riidEvent", + "type": "IID" + }, + { + "name": "fConnect", + "type": "BOOL" + }, + { + "name": "punkTarget", + "type": "IUnknown" + }, + { + "name": "pdwCookie", + "type": "DWORD" + }, + { + "name": "ppcpOut", + "type": "IConnectionPoint" + } + ], + "IStream_ReadPidl": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "ppidlOut", + "type": "LPITEMIDLIST" + } + ], + "IStream_WritePidl": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidlWrite", + "type": "LPCITEMIDLIST" + } + ], + "IStream_ReadStr": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "ppsz", + "type": "PWSTR" + } + ], + "IStream_WriteStr": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "psz", + "type": "PCWSTR" + } + ], + "IStream_Copy": [ + { + "name": "pstmFrom", + "type": "IStream" + }, + { + "name": "pstmTo", + "type": "IStream" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "SHGetViewStatePropertyBag": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszBagName", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHFormatDateTimeA": [ + { + "name": "pft", + "type": "FILETIME" + }, + { + "name": "pdwFlags", + "type": "DWORD" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "SHFormatDateTimeW": [ + { + "name": "pft", + "type": "FILETIME" + }, + { + "name": "pdwFlags", + "type": "DWORD" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "SHAnsiToUnicode": [ + { + "name": "pszSrc", + "type": "PCSTR" + }, + { + "name": "pwszDst", + "type": "PWSTR" + }, + { + "name": "cwchBuf", + "type": "int" + } + ], + "SHAnsiToAnsi": [ + { + "name": "pszSrc", + "type": "PCSTR" + }, + { + "name": "pszDst", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "int" + } + ], + "SHUnicodeToAnsi": [ + { + "name": "pwszSrc", + "type": "PCWSTR" + }, + { + "name": "pszDst", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "int" + } + ], + "SHUnicodeToUnicode": [ + { + "name": "pwzSrc", + "type": "PCWSTR" + }, + { + "name": "pwzDst", + "type": "PWSTR" + }, + { + "name": "cwchBuf", + "type": "int" + } + ], + "SHMessageBoxCheckA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszText", + "type": "LPCSTR" + }, + { + "name": "pszCaption", + "type": "LPCSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "iDefault", + "type": "int" + }, + { + "name": "pszRegVal", + "type": "LPCSTR" + } + ], + "SHMessageBoxCheckW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "pszCaption", + "type": "LPCWSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "iDefault", + "type": "int" + }, + { + "name": "pszRegVal", + "type": "LPCWSTR" + } + ], + "SHSendMessageBroadcastA": [ + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHSendMessageBroadcastW": [ + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHStripMneumonicA": [ + { + "name": "pszMenu", + "type": "LPSTR" + } + ], + "SHStripMneumonicW": [ + { + "name": "pszMenu", + "type": "LPWSTR" + } + ], + "IsOS": [ + { + "name": "dwOS", + "type": "DWORD" + } + ], + "SHGlobalCounterGetValue": [ + { + "name": "id", + "type": "SHGLOBALCOUNTER" + } + ], + "SHGlobalCounterIncrement": [ + { + "name": "id", + "type": "SHGLOBALCOUNTER" + } + ], + "SHGlobalCounterDecrement": [ + { + "name": "id", + "type": "SHGLOBALCOUNTER" + } + ], + "SHAllocShared": [ + { + "name": "pvData", + "type": "void" + }, + { + "name": "dwSize", + "type": "DWORD" + }, + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "SHFreeShared": [ + { + "name": "hData", + "type": "HANDLE" + }, + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "SHUnlockShared": [ + { + "name": "pvData", + "type": "void" + } + ], + "WhichPlatform": [ + { + "name": "VOID", + "type": "void" + } + ], + "QISearch": [ + { + "name": "that", + "type": "void" + }, + { + "name": "pqit", + "type": "LPCQITAB" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHIsLowMemoryMachine": [ + { + "name": "dwType", + "type": "DWORD" + } + ], + "GetMenuPosFromID": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "id", + "type": "UINT" + } + ], + "SHGetInverseCMAP": [ + { + "name": "pbMap", + "type": "BYTE" + }, + { + "name": "cbMap", + "type": "ULONG" + } + ], + "SHAutoComplete": [ + { + "name": "hwndEdit", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHCreateThreadRef": [ + { + "name": "pcRef", + "type": "LONG" + }, + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SHSetThreadRef": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "SHGetThreadRef": [ + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SHSkipJunction": [ + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "SHCreateThread": [ + { + "name": "pfnThreadProc", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pData", + "type": "void" + }, + { + "name": "flags", + "type": "SHCT_FLAGS" + }, + { + "name": "pfnCallback", + "type": "LPTHREAD_START_ROUTINE" + } + ], + "SHCreateThreadWithHandle": [ + { + "name": "pfnThreadProc", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pData", + "type": "void" + }, + { + "name": "flags", + "type": "SHCT_FLAGS" + }, + { + "name": "pfnCallback", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pHandle", + "type": "HANDLE" + } + ], + "SetProcessReference": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "GetProcessReference": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "SHReleaseThreadRef": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHCreateShellPalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ColorRGBToHLS": [ + { + "name": "clrRGB", + "type": "COLORREF" + }, + { + "name": "pwHue", + "type": "WORD" + }, + { + "name": "pwLuminance", + "type": "WORD" + }, + { + "name": "pwSaturation", + "type": "WORD" + } + ], + "ColorHLSToRGB": [ + { + "name": "wHue", + "type": "WORD" + }, + { + "name": "wLuminance", + "type": "WORD" + }, + { + "name": "wSaturation", + "type": "WORD" + } + ], + "ColorAdjustLuma": [ + { + "name": "clrRGB", + "type": "COLORREF" + }, + { + "name": "n", + "type": "int" + }, + { + "name": "fScale", + "type": "BOOL" + } + ], + "DllInstall": [ + { + "name": "bInstall", + "type": "BOOL" + }, + { + "name": "pszCmdLine", + "type": "PCWSTR" + } + ], + "IsInternetESCEnabled": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shobjidl.json b/qiling/extensions/windows_sdk/shobjidl.json new file mode 100644 index 000000000..df44170d7 --- /dev/null +++ b/qiling/extensions/windows_sdk/shobjidl.json @@ -0,0 +1,40 @@ +{ + "SHAddDefaultPropertiesByExt": [ + { + "name": "pszExt", + "type": "PCWSTR" + }, + { + "name": "pPropStore", + "type": "IPropertyStore" + } + ], + "SHCreateDefaultPropertiesOp": [ + { + "name": "psi", + "type": "IShellItem" + }, + { + "name": "ppFileOp", + "type": "IFileOperation" + } + ], + "SHSetDefaultProperties": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "psi", + "type": "IShellItem" + }, + { + "name": "dwFileOpFlags", + "type": "DWORD" + }, + { + "name": "pfops", + "type": "IFileOperationProgressSink" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shobjidl_core.json b/qiling/extensions/windows_sdk/shobjidl_core.json new file mode 100644 index 000000000..5795d6045 --- /dev/null +++ b/qiling/extensions/windows_sdk/shobjidl_core.json @@ -0,0 +1,382 @@ +{ + "SHSimpleIDListFromPath": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHCreateItemFromIDList": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateItemFromParsingName": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateItemWithParent": [ + { + "name": "pidlParent", + "type": "LPCITEMIDLIST" + }, + { + "name": "psfParent", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvItem", + "type": "void" + } + ], + "SHCreateItemFromRelativeName": [ + { + "name": "psiParent", + "type": "IShellItem" + }, + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateItemInKnownFolder": [ + { + "name": "kfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "dwKFFlags", + "type": "DWORD" + }, + { + "name": "pszItem", + "type": "PCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetIDListFromObject": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + } + ], + "SHGetItemFromObject": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetPropertyStoreFromIDList": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "flags", + "type": "GETPROPERTYSTOREFLAGS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetPropertyStoreFromParsingName": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "flags", + "type": "GETPROPERTYSTOREFLAGS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetNameFromIDList": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "sigdnName", + "type": "SIGDN" + }, + { + "name": "ppszName", + "type": "PWSTR" + } + ], + "SHGetItemFromDataObject": [ + { + "name": "pdtobj", + "type": "IDataObject" + }, + { + "name": "dwFlags", + "type": "DATAOBJ_GET_ITEM_FLAGS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateShellItemArray": [ + { + "name": "pidlParent", + "type": "LPCITEMIDLIST" + }, + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "ppidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsiItemArray", + "type": "IShellItemArray" + } + ], + "SHCreateShellItemArrayFromDataObject": [ + { + "name": "pdo", + "type": "IDataObject" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateShellItemArrayFromIDLists": [ + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "rgpidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsiItemArray", + "type": "IShellItemArray" + } + ], + "SHCreateShellItemArrayFromShellItem": [ + { + "name": "psi", + "type": "IShellItem" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateAssociationRegistration": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateDefaultExtractIcon": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SetCurrentProcessExplicitAppUserModelID": [ + { + "name": "AppID", + "type": "PCWSTR" + } + ], + "GetCurrentProcessExplicitAppUserModelID": [ + { + "name": "AppID", + "type": "PWSTR" + } + ], + "SHGetTemporaryPropertyForItem": [ + { + "name": "psi", + "type": "IShellItem" + }, + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "SHSetTemporaryPropertyForItem": [ + { + "name": "psi", + "type": "IShellItem" + }, + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + } + ], + "SHShowManageLibraryUI": [ + { + "name": "psiLibrary", + "type": "IShellItem" + }, + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "pszTitle", + "type": "LPCWSTR" + }, + { + "name": "pszInstruction", + "type": "LPCWSTR" + }, + { + "name": "lmdOptions", + "type": "LIBRARYMANAGEDIALOGOPTIONS" + } + ], + "SHResolveLibrary": [ + { + "name": "psiLibrary", + "type": "IShellItem" + } + ], + "SHAssocEnumHandlers": [ + { + "name": "pszExtra", + "type": "PCWSTR" + }, + { + "name": "afFilter", + "type": "ASSOC_FILTER" + }, + { + "name": "ppEnumHandler", + "type": "IEnumAssocHandlers" + } + ], + "SHAssocEnumHandlersForProtocolByApplication": [ + { + "name": "protocol", + "type": "PCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "enumHandlers", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/slpublic.json b/qiling/extensions/windows_sdk/slpublic.json new file mode 100644 index 000000000..48dd28d3f --- /dev/null +++ b/qiling/extensions/windows_sdk/slpublic.json @@ -0,0 +1,956 @@ +{ + "SLOpen": [ + { + "name": "phSLC", + "type": "HSLC" + } + ], + "SLClose": [ + { + "name": "hSLC", + "type": "HSLC" + } + ], + "SLInstallProofOfPurchase": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "PBYTE" + }, + { + "name": "pPkeyId", + "type": "SLID" + } + ], + "SLInstallProofOfPurchaseEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "PBYTE" + }, + { + "name": "pPkeyId", + "type": "SLID" + } + ], + "SLUninstallProofOfPurchase": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pPKeyId", + "type": "SLID" + } + ], + "SLInstallLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbLicenseBlob", + "type": "UINT" + }, + { + "name": "pbLicenseBlob", + "type": "BYTE" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLUninstallLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLConsumeRight": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszRightName", + "type": "PCWSTR" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "SLGetProductSkuInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetPKeyInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pPKeyId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetLicenseInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pSLLicenseId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetLicensingStatusInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pAppID", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszRightName", + "type": "PCWSTR" + }, + { + "name": "pnStatusCount", + "type": "UINT" + }, + { + "name": "ppLicensingStatus", + "type": "SL_LICENSING_STATUS" + } + ], + "SLGetPolicyInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetPolicyInformationDWORD": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "pdwValue", + "type": "DWORD" + } + ], + "SLGetServiceInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetApplicationInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLActivateProduct": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "cbAppSpecificData", + "type": "UINT" + }, + { + "name": "pvAppSpecificData", + "type": "PVOID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "pwszProxyServer", + "type": "PCWSTR" + }, + { + "name": "wProxyPort", + "type": "WORD" + } + ], + "SLGetServerStatus": [ + { + "name": "pwszServerURL", + "type": "PCWSTR" + }, + { + "name": "pwszAcquisitionType", + "type": "PCWSTR" + }, + { + "name": "pwszProxyServer", + "type": "PCWSTR" + }, + { + "name": "wProxyPort", + "type": "WORD" + }, + { + "name": "phrStatus", + "type": "HRESULT" + } + ], + "SLReArm": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGenerateOfflineInstallationId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "ppwszInstallationId", + "type": "PWSTR" + } + ], + "SLGenerateOfflineInstallationIdEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "ppwszInstallationId", + "type": "PWSTR" + } + ], + "SLDepositOfflineConfirmationId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszInstallationId", + "type": "PCWSTR" + }, + { + "name": "pwszConfirmationId", + "type": "PCWSTR" + } + ], + "SLDepositOfflineConfirmationIdEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "pwszInstallationId", + "type": "PCWSTR" + }, + { + "name": "pwszConfirmationId", + "type": "PCWSTR" + } + ], + "SLGetPKeyId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "BYTE" + }, + { + "name": "pPKeyId", + "type": "SLID" + } + ], + "SLGetInstalledProductKeyIds": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pnProductKeyIds", + "type": "UINT" + }, + { + "name": "ppProductKeyIds", + "type": "SLID" + } + ], + "SLSetCurrentProductKey": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pProductKeyId", + "type": "SLID" + } + ], + "SLGetSLIDList": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "eQueryIdType", + "type": "SLIDTYPE" + }, + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "eReturnIdType", + "type": "SLIDTYPE" + }, + { + "name": "pnReturnIds", + "type": "UINT" + }, + { + "name": "ppReturnIds", + "type": "SLID" + } + ], + "SLGetLicenseFileId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbLicenseBlob", + "type": "UINT" + }, + { + "name": "pbLicenseBlob", + "type": "BYTE" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLGetLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + }, + { + "name": "pcbLicenseFile", + "type": "UINT" + }, + { + "name": "ppbLicenseFile", + "type": "PBYTE" + } + ], + "SLFireEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + } + ], + "SLRegisterEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "SLUnregisterEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "SLGetWindowsInformation": [ + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetWindowsInformationDWORD": [ + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "pdwValue", + "type": "DWORD" + } + ], + "SLIsGenuineLocal": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pGenuineState", + "type": "SL_GENUINE_STATE" + }, + { + "name": "pUIOptions", + "type": "SL_NONGENUINE_UI_OPTIONS" + } + ], + "SLIsGenuineLocalEx": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pSkuId", + "type": "SLID" + }, + { + "name": "pGenuineState", + "type": "SL_GENUINE_STATE" + } + ], + "SLAcquireGenuineTicket": [ + { + "name": "ppTicketBlob", + "type": "void" + }, + { + "name": "pcbTicketBlob", + "type": "UINT" + }, + { + "name": "pwszTemplateId", + "type": "PCWSTR" + }, + { + "name": "pwszServerUrl", + "type": "PCWSTR" + }, + { + "name": "pwszClientToken", + "type": "PCWSTR" + } + ], + "SLSetGenuineInformation": [ + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "eDataType", + "type": "SLDATATYPE" + }, + { + "name": "cbValue", + "type": "UINT" + }, + { + "name": "pbValue", + "type": "BYTE" + } + ], + "SLGetReferralInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "eReferralType", + "type": "SLREFERRALTYPE" + }, + { + "name": "pSkuOrAppId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "SLPersistRTSPayloadOverride": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SLPersistApplicationPolicies": [ + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGetApplicationPolicy": [ + { + "name": "hPolicyContext", + "type": "HSLP" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLLoadApplicationPolicies": [ + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPolicyContext", + "type": "HSLP" + } + ], + "SLUnloadApplicationPolicies": [ + { + "name": "hPolicyContext", + "type": "HSLP" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGetAuthenticationResult": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLSetAuthenticationData": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbValue", + "type": "UINT" + }, + { + "name": "pbValue", + "type": "BYTE" + } + ], + "SLGetGenuineInformation": [ + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "BYTE" + } + ], + "SLGetGenuineInformationEx": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "BYTE" + } + ], + "SLGatherMigrationBlob": [ + { + "name": "bMigratableOnly", + "type": "BOOL" + }, + { + "name": "pwszEncryptorUri", + "type": "LPCWSTR" + }, + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SLDepositMigrationBlob": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SLQueryLicenseValueFromApp": [ + { + "name": "valueName", + "type": "PCWSTR" + }, + { + "name": "valueType", + "type": "ULONG" + }, + { + "name": "dataBuffer", + "type": "PVOID" + }, + { + "name": "dataSize", + "type": "ULONG" + }, + { + "name": "resultDataSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/smbclnt.json b/qiling/extensions/windows_sdk/smbclnt.json new file mode 100644 index 000000000..86226d72a --- /dev/null +++ b/qiling/extensions/windows_sdk/smbclnt.json @@ -0,0 +1,30 @@ +{ + "RegisterAppInstance": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "AppInstanceId", + "type": "GUID" + }, + { + "name": "ChildrenInheritAppInstance", + "type": "BOOL" + } + ], + "SetAppInstanceCsvFlags": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "Mask", + "type": "ULONG" + }, + { + "name": "Flags", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/snmp.json b/qiling/extensions/windows_sdk/snmp.json new file mode 100644 index 000000000..2511cf2ef --- /dev/null +++ b/qiling/extensions/windows_sdk/snmp.json @@ -0,0 +1,212 @@ +{ + "SnmpUtilOidCpy": [ + { + "name": "pOidDst", + "type": "AsnObjectIdentifier" + }, + { + "name": "pOidSrc", + "type": "AsnObjectIdentifier" + } + ], + "SnmpUtilOidAppend": [ + { + "name": "pOidDst", + "type": "AsnObjectIdentifier" + }, + { + "name": "pOidSrc", + "type": "AsnObjectIdentifier" + } + ], + "SnmpUtilOidNCmp": [ + { + "name": "pOid1", + "type": "AsnObjectIdentifier" + }, + { + "name": "pOid2", + "type": "AsnObjectIdentifier" + }, + { + "name": "nSubIds", + "type": "UINT" + } + ], + "SnmpUtilOidCmp": [ + { + "name": "pOid1", + "type": "AsnObjectIdentifier" + }, + { + "name": "pOid2", + "type": "AsnObjectIdentifier" + } + ], + "SnmpUtilOidFree": [ + { + "name": "pOid", + "type": "AsnObjectIdentifier" + } + ], + "SnmpUtilOctetsCmp": [ + { + "name": "pOctets1", + "type": "AsnOctetString" + }, + { + "name": "pOctets2", + "type": "AsnOctetString" + } + ], + "SnmpUtilOctetsNCmp": [ + { + "name": "pOctets1", + "type": "AsnOctetString" + }, + { + "name": "pOctets2", + "type": "AsnOctetString" + }, + { + "name": "nChars", + "type": "UINT" + } + ], + "SnmpUtilOctetsCpy": [ + { + "name": "pOctetsDst", + "type": "AsnOctetString" + }, + { + "name": "pOctetsSrc", + "type": "AsnOctetString" + } + ], + "SnmpUtilOctetsFree": [ + { + "name": "pOctets", + "type": "AsnOctetString" + } + ], + "SnmpUtilAsnAnyCpy": [ + { + "name": "pAnyDst", + "type": "AsnAny" + }, + { + "name": "pAnySrc", + "type": "AsnAny" + } + ], + "SnmpUtilAsnAnyFree": [ + { + "name": "pAny", + "type": "AsnAny" + } + ], + "SnmpUtilVarBindCpy": [ + { + "name": "pVbDst", + "type": "SnmpVarBind" + }, + { + "name": "pVbSrc", + "type": "SnmpVarBind" + } + ], + "SnmpUtilVarBindFree": [ + { + "name": "pVb", + "type": "SnmpVarBind" + } + ], + "SnmpUtilVarBindListCpy": [ + { + "name": "pVblDst", + "type": "SnmpVarBindList" + }, + { + "name": "pVblSrc", + "type": "SnmpVarBindList" + } + ], + "SnmpUtilVarBindListFree": [ + { + "name": "pVbl", + "type": "SnmpVarBindList" + } + ], + "SnmpUtilMemFree": [ + { + "name": "pMem", + "type": "LPVOID" + } + ], + "SnmpUtilMemAlloc": [ + { + "name": "nBytes", + "type": "UINT" + } + ], + "SnmpUtilMemReAlloc": [ + { + "name": "pMem", + "type": "LPVOID" + }, + { + "name": "nBytes", + "type": "UINT" + } + ], + "SnmpUtilOidToA": [ + { + "name": "Oid", + "type": "AsnObjectIdentifier" + } + ], + "SnmpUtilIdsToA": [ + { + "name": "Ids", + "type": "UINT" + }, + { + "name": "IdLength", + "type": "UINT" + } + ], + "SnmpUtilPrintOid": [ + { + "name": "Oid", + "type": "AsnObjectIdentifier" + } + ], + "SnmpUtilPrintAsnAny": [ + { + "name": "pAny", + "type": "AsnAny" + } + ], + "SnmpSvcSetLogLevel": [ + { + "name": "nLogLevel", + "type": "INT" + } + ], + "SnmpSvcSetLogType": [ + { + "name": "nLogType", + "type": "INT" + } + ], + "SnmpUtilDbgPrint": [ + { + "name": "nLogLevel", + "type": "INT" + }, + { + "name": "szFormat", + "type": "LPSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/socketapi.json b/qiling/extensions/windows_sdk/socketapi.json new file mode 100644 index 000000000..ff7c0827e --- /dev/null +++ b/qiling/extensions/windows_sdk/socketapi.json @@ -0,0 +1,8 @@ +{ + "SetSocketMediaStreamingMode": [ + { + "name": "value", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/srpapi.json b/qiling/extensions/windows_sdk/srpapi.json new file mode 100644 index 000000000..a6a6ed122 --- /dev/null +++ b/qiling/extensions/windows_sdk/srpapi.json @@ -0,0 +1,88 @@ +{ + "SrpCreateThreadNetworkContext": [ + { + "name": "enterpriseId", + "type": "PCWSTR" + }, + { + "name": "threadNetworkContext", + "type": "HTHREAD_NETWORK_CONTEXT" + } + ], + "SrpCloseThreadNetworkContext": [ + { + "name": "threadNetworkContext", + "type": "HTHREAD_NETWORK_CONTEXT" + } + ], + "SrpSetTokenEnterpriseId": [ + { + "name": "tokenHandle", + "type": "HANDLE" + }, + { + "name": "enterpriseId", + "type": "PCWSTR" + } + ], + "SrpGetEnterpriseIds": [ + { + "name": "tokenHandle", + "type": "HANDLE" + }, + { + "name": "numberOfBytes", + "type": "PULONG" + }, + { + "name": "enterpriseIds", + "type": "PCWSTR" + }, + { + "name": "enterpriseIdCount", + "type": "PULONG" + } + ], + "SrpEnablePermissiveModeFileEncryption": [ + { + "name": "enterpriseId", + "type": "PCWSTR" + } + ], + "SrpDisablePermissiveModeFileEncryption": [ + { + "name": "VOID", + "type": "void" + } + ], + "SrpGetEnterprisePolicy": [ + { + "name": "tokenHandle", + "type": "HANDLE" + }, + { + "name": "policyFlags", + "type": "ENTERPRISE_DATA_POLICIES" + } + ], + "SrpIsTokenService": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "IsTokenService", + "type": "BOOLEAN" + } + ], + "SrpDoesPolicyAllowAppExecution": [ + { + "name": "packageId", + "type": "PACKAGE_ID" + }, + { + "name": "isAllowed", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/srrestoreptapi.json b/qiling/extensions/windows_sdk/srrestoreptapi.json new file mode 100644 index 000000000..a8a6f199f --- /dev/null +++ b/qiling/extensions/windows_sdk/srrestoreptapi.json @@ -0,0 +1,28 @@ +{ + "SRSetRestorePointA": [ + { + "name": "pRestorePtSpec", + "type": "PRESTOREPOINTINFOA" + }, + { + "name": "pSMgrStatus", + "type": "PSTATEMGRSTATUS" + } + ], + "SRSetRestorePointW": [ + { + "name": "pRestorePtSpec", + "type": "PRESTOREPOINTINFOW" + }, + { + "name": "pSMgrStatus", + "type": "PSTATEMGRSTATUS" + } + ], + "SRRemoveRestorePoint": [ + { + "name": "dwRPNum", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sspi.json b/qiling/extensions/windows_sdk/sspi.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/sspi.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/storprop.json b/qiling/extensions/windows_sdk/storprop.json new file mode 100644 index 000000000..70c54fdc4 --- /dev/null +++ b/qiling/extensions/windows_sdk/storprop.json @@ -0,0 +1,50 @@ +{ + "CdromKnownGoodDigitalPlayback": [ + { + "name": "HDevInfo", + "type": "HDEVINFO" + }, + { + "name": "DevInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "CdromEnableDigitalPlayback": [ + { + "name": "DevInfo", + "type": "HDEVINFO" + }, + { + "name": "DevInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "ForceUnknown", + "type": "BOOLEAN" + } + ], + "CdromDisableDigitalPlayback": [ + { + "name": "DevInfo", + "type": "HDEVINFO" + }, + { + "name": "DevInfoData", + "type": "PSP_DEVINFO_DATA" + } + ], + "CdromIsDigitalPlaybackEnabled": [ + { + "name": "DevInfo", + "type": "HDEVINFO" + }, + { + "name": "DevInfoData", + "type": "PSP_DEVINFO_DATA" + }, + { + "name": "Enabled", + "type": "PBOOLEAN" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/stralign.json b/qiling/extensions/windows_sdk/stralign.json new file mode 100644 index 000000000..514211a53 --- /dev/null +++ b/qiling/extensions/windows_sdk/stralign.json @@ -0,0 +1,8 @@ +{ + "uaw_wcslen": [ + { + "name": "String", + "type": "PCUWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/stringapiset.json b/qiling/extensions/windows_sdk/stringapiset.json new file mode 100644 index 000000000..46b7547fc --- /dev/null +++ b/qiling/extensions/windows_sdk/stringapiset.json @@ -0,0 +1,280 @@ +{ + "CompareStringEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwCmpFlags", + "type": "DWORD" + }, + { + "name": "lpString1", + "type": "LPCWCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "LPCWCH" + }, + { + "name": "cchCount2", + "type": "int" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CompareStringOrdinal": [ + { + "name": "lpString1", + "type": "LPCWCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "LPCWCH" + }, + { + "name": "cchCount2", + "type": "int" + }, + { + "name": "bIgnoreCase", + "type": "BOOL" + } + ], + "CompareStringW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwCmpFlags", + "type": "DWORD" + }, + { + "name": "lpString1", + "type": "PCNZWCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "PCNZWCH" + }, + { + "name": "cchCount2", + "type": "int" + } + ], + "FoldStringW": [ + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWCH" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPWSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "GetStringTypeExW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWCH" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpCharType", + "type": "LPWORD" + } + ], + "GetStringTypeW": [ + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWCH" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpCharType", + "type": "LPWORD" + } + ], + "MultiByteToWideChar": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMultiByteStr", + "type": "LPCCH" + }, + { + "name": "cbMultiByte", + "type": "int" + }, + { + "name": "lpWideCharStr", + "type": "LPWSTR" + }, + { + "name": "cchWideChar", + "type": "int" + } + ], + "WideCharToMultiByte": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpWideCharStr", + "type": "LPCWCH" + }, + { + "name": "cchWideChar", + "type": "int" + }, + { + "name": "lpMultiByteStr", + "type": "LPSTR" + }, + { + "name": "cbMultiByte", + "type": "int" + }, + { + "name": "lpDefaultChar", + "type": "LPCCH" + }, + { + "name": "lpUsedDefaultChar", + "type": "LPBOOL" + } + ], + "CompareStringA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwCmpFlags", + "type": "DWORD" + }, + { + "name": "lpString1", + "type": "PCNZCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "PCNZCH" + }, + { + "name": "cchCount2", + "type": "int" + } + ], + "GetStringTypeExA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpCharType", + "type": "LPWORD" + } + ], + "FoldStringA": [ + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/swdevice.json b/qiling/extensions/windows_sdk/swdevice.json new file mode 100644 index 000000000..9bc83a210 --- /dev/null +++ b/qiling/extensions/windows_sdk/swdevice.json @@ -0,0 +1,144 @@ +{ + "SwDeviceCreate": [ + { + "name": "pszEnumeratorName", + "type": "PCWSTR" + }, + { + "name": "pszParentDeviceInstance", + "type": "PCWSTR" + }, + { + "name": "pCreateInfo", + "type": "SW_DEVICE_CREATE_INFO" + }, + { + "name": "cPropertyCount", + "type": "ULONG" + }, + { + "name": "pProperties", + "type": "DEVPROPERTY" + }, + { + "name": "pCallback", + "type": "SW_DEVICE_CREATE_CALLBACK" + }, + { + "name": "pContext", + "type": "PVOID" + }, + { + "name": "phSwDevice", + "type": "PHSWDEVICE" + } + ], + "SwDeviceClose": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + } + ], + "SwDeviceSetLifetime": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + }, + { + "name": "Lifetime", + "type": "SW_DEVICE_LIFETIME" + } + ], + "SwDeviceGetLifetime": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + }, + { + "name": "pLifetime", + "type": "PSW_DEVICE_LIFETIME" + } + ], + "SwDevicePropertySet": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + }, + { + "name": "cPropertyCount", + "type": "ULONG" + }, + { + "name": "pProperties", + "type": "DEVPROPERTY" + } + ], + "SwDeviceInterfaceRegister": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + }, + { + "name": "pInterfaceClassGuid", + "type": "GUID" + }, + { + "name": "pszReferenceString", + "type": "PCWSTR" + }, + { + "name": "cPropertyCount", + "type": "ULONG" + }, + { + "name": "pProperties", + "type": "DEVPROPERTY" + }, + { + "name": "fEnabled", + "type": "BOOL" + }, + { + "name": "ppszDeviceInterfaceId", + "type": "PWSTR" + } + ], + "SwMemFree": [ + { + "name": "pMem", + "type": "PVOID" + } + ], + "SwDeviceInterfaceSetState": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + }, + { + "name": "pszDeviceInterfaceId", + "type": "PCWSTR" + }, + { + "name": "fEnabled", + "type": "BOOL" + } + ], + "SwDeviceInterfacePropertySet": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + }, + { + "name": "pszDeviceInterfaceId", + "type": "PCWSTR" + }, + { + "name": "cPropertyCount", + "type": "ULONG" + }, + { + "name": "pProperties", + "type": "DEVPROPERTY" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/synchapi.json b/qiling/extensions/windows_sdk/synchapi.json new file mode 100644 index 000000000..eff06556c --- /dev/null +++ b/qiling/extensions/windows_sdk/synchapi.json @@ -0,0 +1,778 @@ +{ + "InitializeSRWLock": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "ReleaseSRWLockExclusive": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "ReleaseSRWLockShared": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "AcquireSRWLockExclusive": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "AcquireSRWLockShared": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "TryAcquireSRWLockExclusive": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "TryAcquireSRWLockShared": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "InitializeCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "EnterCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "LeaveCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "InitializeCriticalSectionAndSpinCount": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + }, + { + "name": "dwSpinCount", + "type": "DWORD" + } + ], + "InitializeCriticalSectionEx": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + }, + { + "name": "dwSpinCount", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetCriticalSectionSpinCount": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + }, + { + "name": "dwSpinCount", + "type": "DWORD" + } + ], + "TryEnterCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "DeleteCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "InitOnceInitialize": [ + { + "name": "InitOnce", + "type": "PINIT_ONCE" + } + ], + "InitOnceExecuteOnce": [ + { + "name": "InitOnce", + "type": "PINIT_ONCE" + }, + { + "name": "InitFn", + "type": "PINIT_ONCE_FN" + }, + { + "name": "Parameter", + "type": "PVOID" + }, + { + "name": "Context", + "type": "LPVOID" + } + ], + "InitOnceBeginInitialize": [ + { + "name": "lpInitOnce", + "type": "LPINIT_ONCE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fPending", + "type": "PBOOL" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "InitOnceComplete": [ + { + "name": "lpInitOnce", + "type": "LPINIT_ONCE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "InitializeConditionVariable": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + } + ], + "WakeConditionVariable": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + } + ], + "WakeAllConditionVariable": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + } + ], + "SleepConditionVariableCS": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + }, + { + "name": "CriticalSection", + "type": "PCRITICAL_SECTION" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "SleepConditionVariableSRW": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + }, + { + "name": "SRWLock", + "type": "PSRWLOCK" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "SetEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "ResetEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "ReleaseSemaphore": [ + { + "name": "hSemaphore", + "type": "HANDLE" + }, + { + "name": "lReleaseCount", + "type": "LONG" + }, + { + "name": "lpPreviousCount", + "type": "LPLONG" + } + ], + "ReleaseMutex": [ + { + "name": "hMutex", + "type": "HANDLE" + } + ], + "WaitForSingleObject": [ + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "SleepEx": [ + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "WaitForSingleObjectEx": [ + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "WaitForMultipleObjectsEx": [ + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpHandles", + "type": "HANDLE" + }, + { + "name": "bWaitAll", + "type": "BOOL" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "CreateMutexA": [ + { + "name": "lpMutexAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInitialOwner", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateMutexW": [ + { + "name": "lpMutexAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInitialOwner", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenMutexW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "CreateEventA": [ + { + "name": "lpEventAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bManualReset", + "type": "BOOL" + }, + { + "name": "bInitialState", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateEventW": [ + { + "name": "lpEventAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bManualReset", + "type": "BOOL" + }, + { + "name": "bInitialState", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenEventA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "OpenEventW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenSemaphoreW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenWaitableTimerW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpTimerName", + "type": "LPCWSTR" + } + ], + "SetWaitableTimerEx": [ + { + "name": "hTimer", + "type": "HANDLE" + }, + { + "name": "lpDueTime", + "type": "LARGE_INTEGER" + }, + { + "name": "lPeriod", + "type": "LONG" + }, + { + "name": "pfnCompletionRoutine", + "type": "PTIMERAPCROUTINE" + }, + { + "name": "lpArgToCompletionRoutine", + "type": "LPVOID" + }, + { + "name": "WakeContext", + "type": "PREASON_CONTEXT" + }, + { + "name": "TolerableDelay", + "type": "ULONG" + } + ], + "SetWaitableTimer": [ + { + "name": "hTimer", + "type": "HANDLE" + }, + { + "name": "lpDueTime", + "type": "LARGE_INTEGER" + }, + { + "name": "lPeriod", + "type": "LONG" + }, + { + "name": "pfnCompletionRoutine", + "type": "PTIMERAPCROUTINE" + }, + { + "name": "lpArgToCompletionRoutine", + "type": "LPVOID" + }, + { + "name": "fResume", + "type": "BOOL" + } + ], + "CancelWaitableTimer": [ + { + "name": "hTimer", + "type": "HANDLE" + } + ], + "CreateMutexExA": [ + { + "name": "lpMutexAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateMutexExW": [ + { + "name": "lpMutexAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateEventExA": [ + { + "name": "lpEventAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateEventExW": [ + { + "name": "lpEventAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateWaitableTimerExW": [ + { + "name": "lpTimerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpTimerName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "EnterSynchronizationBarrier": [ + { + "name": "lpBarrier", + "type": "LPSYNCHRONIZATION_BARRIER" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InitializeSynchronizationBarrier": [ + { + "name": "lpBarrier", + "type": "LPSYNCHRONIZATION_BARRIER" + }, + { + "name": "lTotalThreads", + "type": "LONG" + }, + { + "name": "lSpinCount", + "type": "LONG" + } + ], + "DeleteSynchronizationBarrier": [ + { + "name": "lpBarrier", + "type": "LPSYNCHRONIZATION_BARRIER" + } + ], + "Sleep": [ + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "WaitOnAddress": [ + { + "name": "Address", + "type": "void" + }, + { + "name": "CompareAddress", + "type": "PVOID" + }, + { + "name": "AddressSize", + "type": "SIZE_T" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "WakeByAddressSingle": [ + { + "name": "Address", + "type": "PVOID" + } + ], + "WakeByAddressAll": [ + { + "name": "Address", + "type": "PVOID" + } + ], + "SignalObjectAndWait": [ + { + "name": "hObjectToSignal", + "type": "HANDLE" + }, + { + "name": "hObjectToWaitOn", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "WaitForMultipleObjects": [ + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpHandles", + "type": "HANDLE" + }, + { + "name": "bWaitAll", + "type": "BOOL" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "CreateWaitableTimerW": [ + { + "name": "lpTimerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bManualReset", + "type": "BOOL" + }, + { + "name": "lpTimerName", + "type": "LPCWSTR" + } + ], + "OpenMutexA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "OpenSemaphoreA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateWaitableTimerA": [ + { + "name": "lpTimerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bManualReset", + "type": "BOOL" + }, + { + "name": "lpTimerName", + "type": "LPCSTR" + } + ], + "OpenWaitableTimerA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpTimerName", + "type": "LPCSTR" + } + ], + "CreateWaitableTimerExA": [ + { + "name": "lpTimerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpTimerName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/syncmgr.json b/qiling/extensions/windows_sdk/syncmgr.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/syncmgr.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sysinfoapi.json b/qiling/extensions/windows_sdk/sysinfoapi.json new file mode 100644 index 000000000..e9887ce36 --- /dev/null +++ b/qiling/extensions/windows_sdk/sysinfoapi.json @@ -0,0 +1,364 @@ +{ + "GlobalMemoryStatusEx": [ + { + "name": "lpBuffer", + "type": "LPMEMORYSTATUSEX" + } + ], + "GetSystemInfo": [ + { + "name": "lpSystemInfo", + "type": "LPSYSTEM_INFO" + } + ], + "GetSystemTime": [ + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "GetSystemTimeAsFileTime": [ + { + "name": "lpSystemTimeAsFileTime", + "type": "LPFILETIME" + } + ], + "GetLocalTime": [ + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "GetVersion": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetLocalTime": [ + { + "name": "lpSystemTime", + "type": "SYSTEMTIME" + } + ], + "GetTickCount": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetTickCount64": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemTimeAdjustment": [ + { + "name": "lpTimeAdjustment", + "type": "PDWORD" + }, + { + "name": "lpTimeIncrement", + "type": "PDWORD" + }, + { + "name": "lpTimeAdjustmentDisabled", + "type": "PBOOL" + } + ], + "GetSystemTimeAdjustmentPrecise": [ + { + "name": "lpTimeAdjustment", + "type": "PDWORD64" + }, + { + "name": "lpTimeIncrement", + "type": "PDWORD64" + }, + { + "name": "lpTimeAdjustmentDisabled", + "type": "PBOOL" + } + ], + "GetSystemDirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemDirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetWindowsDirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetWindowsDirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemWindowsDirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemWindowsDirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetComputerNameExA": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "GetComputerNameExW": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "SetComputerNameExW": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPCWSTR" + } + ], + "SetSystemTime": [ + { + "name": "lpSystemTime", + "type": "SYSTEMTIME" + } + ], + "GetVersionExA": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOA" + } + ], + "GetVersionExW": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOW" + } + ], + "GetLogicalProcessorInformation": [ + { + "name": "Buffer", + "type": "PSYSTEM_LOGICAL_PROCESSOR_INFORMATION" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "GetLogicalProcessorInformationEx": [ + { + "name": "RelationshipType", + "type": "LOGICAL_PROCESSOR_RELATIONSHIP" + }, + { + "name": "Buffer", + "type": "PSYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "GetNativeSystemInfo": [ + { + "name": "lpSystemInfo", + "type": "LPSYSTEM_INFO" + } + ], + "GetSystemTimePreciseAsFileTime": [ + { + "name": "lpSystemTimeAsFileTime", + "type": "LPFILETIME" + } + ], + "GetProductInfo": [ + { + "name": "dwOSMajorVersion", + "type": "DWORD" + }, + { + "name": "dwOSMinorVersion", + "type": "DWORD" + }, + { + "name": "dwSpMajorVersion", + "type": "DWORD" + }, + { + "name": "dwSpMinorVersion", + "type": "DWORD" + }, + { + "name": "pdwReturnedProductType", + "type": "PDWORD" + } + ], + "EnumSystemFirmwareTables": [ + { + "name": "FirmwareTableProviderSignature", + "type": "DWORD" + }, + { + "name": "pFirmwareTableEnumBuffer", + "type": "PVOID" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "GetSystemFirmwareTable": [ + { + "name": "FirmwareTableProviderSignature", + "type": "DWORD" + }, + { + "name": "FirmwareTableID", + "type": "DWORD" + }, + { + "name": "pFirmwareTableBuffer", + "type": "PVOID" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "GetPhysicallyInstalledSystemMemory": [ + { + "name": "TotalMemoryInKilobytes", + "type": "PULONGLONG" + } + ], + "SetSystemTimeAdjustment": [ + { + "name": "dwTimeAdjustment", + "type": "DWORD" + }, + { + "name": "bTimeAdjustmentDisabled", + "type": "BOOL" + } + ], + "SetSystemTimeAdjustmentPrecise": [ + { + "name": "dwTimeAdjustment", + "type": "DWORD64" + }, + { + "name": "bTimeAdjustmentDisabled", + "type": "BOOL" + } + ], + "InstallELAMCertificateInfo": [ + { + "name": "ELAMFile", + "type": "HANDLE" + } + ], + "GetProcessorSystemCycleTime": [ + { + "name": "Group", + "type": "USHORT" + }, + { + "name": "Buffer", + "type": "PSYSTEM_PROCESSOR_CYCLE_TIME_INFORMATION" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "GetIntegratedDisplaySize": [ + { + "name": "sizeInInches", + "type": "double" + } + ], + "SetComputerNameA": [ + { + "name": "lpComputerName", + "type": "LPCSTR" + } + ], + "SetComputerNameW": [ + { + "name": "lpComputerName", + "type": "LPCWSTR" + } + ], + "SetComputerNameExA": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPCSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/systemtopologyapi.json b/qiling/extensions/windows_sdk/systemtopologyapi.json new file mode 100644 index 000000000..cd9665d47 --- /dev/null +++ b/qiling/extensions/windows_sdk/systemtopologyapi.json @@ -0,0 +1,28 @@ +{ + "GetNumaHighestNodeNumber": [ + { + "name": "HighestNodeNumber", + "type": "PULONG" + } + ], + "GetNumaNodeProcessorMaskEx": [ + { + "name": "Node", + "type": "USHORT" + }, + { + "name": "ProcessorMask", + "type": "PGROUP_AFFINITY" + } + ], + "GetNumaProximityNodeEx": [ + { + "name": "ProximityId", + "type": "ULONG" + }, + { + "name": "NodeNumber", + "type": "PUSHORT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/t2embapi.json b/qiling/extensions/windows_sdk/t2embapi.json new file mode 100644 index 000000000..4b862a8ea --- /dev/null +++ b/qiling/extensions/windows_sdk/t2embapi.json @@ -0,0 +1,342 @@ +{ + "TTEmbedFont": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "ulCharSet", + "type": "ULONG" + }, + { + "name": "pulPrivStatus", + "type": "ULONG" + }, + { + "name": "pulStatus", + "type": "ULONG" + }, + { + "name": "lpfnWriteToStream", + "type": "WRITEEMBEDPROC" + }, + { + "name": "lpvWriteStream", + "type": "LPVOID" + }, + { + "name": "pusCharCodeSet", + "type": "USHORT" + }, + { + "name": "usCharCodeCount", + "type": "USHORT" + }, + { + "name": "usLanguage", + "type": "USHORT" + }, + { + "name": "pTTEmbedInfo", + "type": "TTEMBEDINFO" + } + ], + "TTEmbedFontFromFileA": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "szFontFileName", + "type": "LPCSTR" + }, + { + "name": "usTTCIndex", + "type": "USHORT" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "ulCharSet", + "type": "ULONG" + }, + { + "name": "pulPrivStatus", + "type": "ULONG" + }, + { + "name": "pulStatus", + "type": "ULONG" + }, + { + "name": "lpfnWriteToStream", + "type": "WRITEEMBEDPROC" + }, + { + "name": "lpvWriteStream", + "type": "LPVOID" + }, + { + "name": "pusCharCodeSet", + "type": "USHORT" + }, + { + "name": "usCharCodeCount", + "type": "USHORT" + }, + { + "name": "usLanguage", + "type": "USHORT" + }, + { + "name": "pTTEmbedInfo", + "type": "TTEMBEDINFO" + } + ], + "TTLoadEmbeddedFont": [ + { + "name": "phFontReference", + "type": "HANDLE" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pulPrivStatus", + "type": "ULONG" + }, + { + "name": "ulPrivs", + "type": "ULONG" + }, + { + "name": "pulStatus", + "type": "ULONG" + }, + { + "name": "lpfnReadFromStream", + "type": "READEMBEDPROC" + }, + { + "name": "lpvReadStream", + "type": "LPVOID" + }, + { + "name": "szWinFamilyName", + "type": "LPWSTR" + }, + { + "name": "szMacFamilyName", + "type": "LPSTR" + }, + { + "name": "pTTLoadInfo", + "type": "TTLOADINFO" + } + ], + "TTGetEmbeddedFontInfo": [ + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pulPrivStatus", + "type": "ULONG" + }, + { + "name": "ulPrivs", + "type": "ULONG" + }, + { + "name": "pulStatus", + "type": "ULONG" + }, + { + "name": "lpfnReadFromStream", + "type": "READEMBEDPROC" + }, + { + "name": "lpvReadStream", + "type": "LPVOID" + }, + { + "name": "pTTLoadInfo", + "type": "TTLOADINFO" + } + ], + "TTDeleteEmbeddedFont": [ + { + "name": "hFontReference", + "type": "HANDLE" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pulStatus", + "type": "ULONG" + } + ], + "TTGetEmbeddingType": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pulEmbedType", + "type": "ULONG" + } + ], + "TTCharToUnicode": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pucCharCodes", + "type": "UCHAR" + }, + { + "name": "ulCharCodeSize", + "type": "ULONG" + }, + { + "name": "pusShortCodes", + "type": "USHORT" + }, + { + "name": "ulShortCodeSize", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "TTRunValidationTests": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pTestParam", + "type": "TTVALIDATIONTESTSPARAMS" + } + ], + "TTIsEmbeddingEnabled": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pbEnabled", + "type": "BOOL" + } + ], + "TTIsEmbeddingEnabledForFacename": [ + { + "name": "lpszFacename", + "type": "LPCSTR" + }, + { + "name": "pbEnabled", + "type": "BOOL" + } + ], + "TTEnableEmbeddingForFacename": [ + { + "name": "lpszFacename", + "type": "LPCSTR" + }, + { + "name": "bEnable", + "type": "BOOL" + } + ], + "TTEmbedFontEx": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "ulCharSet", + "type": "ULONG" + }, + { + "name": "pulPrivStatus", + "type": "ULONG" + }, + { + "name": "pulStatus", + "type": "ULONG" + }, + { + "name": "lpfnWriteToStream", + "type": "WRITEEMBEDPROC" + }, + { + "name": "lpvWriteStream", + "type": "LPVOID" + }, + { + "name": "pulCharCodeSet", + "type": "ULONG" + }, + { + "name": "usCharCodeCount", + "type": "USHORT" + }, + { + "name": "usLanguage", + "type": "USHORT" + }, + { + "name": "pTTEmbedInfo", + "type": "TTEMBEDINFO" + } + ], + "TTRunValidationTestsEx": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pTestParam", + "type": "TTVALIDATIONTESTSPARAMSEX" + } + ], + "TTGetNewFontName": [ + { + "name": "phFontReference", + "type": "HANDLE" + }, + { + "name": "wzWinFamilyName", + "type": "LPWSTR" + }, + { + "name": "cchMaxWinName", + "type": "LONG" + }, + { + "name": "szMacFamilyName", + "type": "LPSTR" + }, + { + "name": "cchMaxMacName", + "type": "LONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/tapi.json b/qiling/extensions/windows_sdk/tapi.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/tapi.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/tbs.json b/qiling/extensions/windows_sdk/tbs.json new file mode 100644 index 000000000..a69a523f8 --- /dev/null +++ b/qiling/extensions/windows_sdk/tbs.json @@ -0,0 +1,132 @@ +{ + "Tbsi_Context_Create": [ + { + "name": "pContextParams", + "type": "PCTBS_CONTEXT_PARAMS" + }, + { + "name": "phContext", + "type": "PTBS_HCONTEXT" + } + ], + "Tbsip_Context_Close": [ + { + "name": "hContext", + "type": "TBS_HCONTEXT" + } + ], + "Tbsip_Submit_Command": [ + { + "name": "hContext", + "type": "TBS_HCONTEXT" + }, + { + "name": "Locality", + "type": "TBS_COMMAND_LOCALITY" + }, + { + "name": "Priority", + "type": "TBS_COMMAND_PRIORITY" + }, + { + "name": "pabCommand", + "type": "PCBYTE" + }, + { + "name": "cbCommand", + "type": "UINT32" + }, + { + "name": "pabResult", + "type": "PBYTE" + }, + { + "name": "pcbResult", + "type": "PUINT32" + } + ], + "Tbsip_Cancel_Commands": [ + { + "name": "hContext", + "type": "TBS_HCONTEXT" + } + ], + "Tbsi_Physical_Presence_Command": [ + { + "name": "hContext", + "type": "TBS_HCONTEXT" + }, + { + "name": "pabInput", + "type": "PCBYTE" + }, + { + "name": "cbInput", + "type": "UINT32" + }, + { + "name": "pabOutput", + "type": "PBYTE" + }, + { + "name": "pcbOutput", + "type": "PUINT32" + } + ], + "Tbsi_Get_TCG_Log": [ + { + "name": "hContext", + "type": "TBS_HCONTEXT" + }, + { + "name": "pOutputBuf", + "type": "PBYTE" + }, + { + "name": "pOutputBufLen", + "type": "PUINT32" + } + ], + "Tbsi_GetDeviceInfo": [ + { + "name": "Size", + "type": "UINT32" + }, + { + "name": "Info", + "type": "PVOID" + } + ], + "Tbsi_Get_OwnerAuth": [ + { + "name": "hContext", + "type": "TBS_HCONTEXT" + }, + { + "name": "ownerauthType", + "type": "TBS_OWNERAUTH_TYPE" + }, + { + "name": "pOutputBuf", + "type": "PBYTE" + }, + { + "name": "pOutputBufLen", + "type": "PUINT32" + } + ], + "Tbsi_Get_TCG_Log_Ex": [ + { + "name": "logType", + "type": "UINT32" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "pcbOutput", + "type": "PUINT32" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/tdh.json b/qiling/extensions/windows_sdk/tdh.json new file mode 100644 index 000000000..d74aca11a --- /dev/null +++ b/qiling/extensions/windows_sdk/tdh.json @@ -0,0 +1,398 @@ +{ + "TdhCreatePayloadFilter": [ + { + "name": "ProviderGuid", + "type": "LPCGUID" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + }, + { + "name": "EventMatchANY", + "type": "BOOLEAN" + }, + { + "name": "PayloadPredicateCount", + "type": "ULONG" + }, + { + "name": "PayloadPredicates", + "type": "PPAYLOAD_FILTER_PREDICATE" + }, + { + "name": "PayloadFilter", + "type": "PVOID" + } + ], + "TdhDeletePayloadFilter": [ + { + "name": "PayloadFilter", + "type": "PVOID" + } + ], + "TdhAggregatePayloadFilters": [ + { + "name": "PayloadFilterCount", + "type": "ULONG" + }, + { + "name": "PayloadFilterPtrs", + "type": "PVOID" + }, + { + "name": "EventMatchALLFlags", + "type": "PBOOLEAN" + }, + { + "name": "EventFilterDescriptor", + "type": "PEVENT_FILTER_DESCRIPTOR" + } + ], + "TdhCleanupPayloadEventFilterDescriptor": [ + { + "name": "EventFilterDescriptor", + "type": "PEVENT_FILTER_DESCRIPTOR" + } + ], + "TdhGetEventInformation": [ + { + "name": "Event", + "type": "PEVENT_RECORD" + }, + { + "name": "TdhContextCount", + "type": "ULONG" + }, + { + "name": "TdhContext", + "type": "PTDH_CONTEXT" + }, + { + "name": "Buffer", + "type": "PTRACE_EVENT_INFO" + }, + { + "name": "BufferSize", + "type": "PULONG" + } + ], + "TdhGetEventMapInformation": [ + { + "name": "pEvent", + "type": "PEVENT_RECORD" + }, + { + "name": "pMapName", + "type": "PWSTR" + }, + { + "name": "pBuffer", + "type": "PEVENT_MAP_INFO" + }, + { + "name": "pBufferSize", + "type": "ULONG" + } + ], + "TdhGetPropertySize": [ + { + "name": "pEvent", + "type": "PEVENT_RECORD" + }, + { + "name": "TdhContextCount", + "type": "ULONG" + }, + { + "name": "pTdhContext", + "type": "PTDH_CONTEXT" + }, + { + "name": "PropertyDataCount", + "type": "ULONG" + }, + { + "name": "pPropertyData", + "type": "PPROPERTY_DATA_DESCRIPTOR" + }, + { + "name": "pPropertySize", + "type": "ULONG" + } + ], + "TdhGetProperty": [ + { + "name": "pEvent", + "type": "PEVENT_RECORD" + }, + { + "name": "TdhContextCount", + "type": "ULONG" + }, + { + "name": "pTdhContext", + "type": "PTDH_CONTEXT" + }, + { + "name": "PropertyDataCount", + "type": "ULONG" + }, + { + "name": "pPropertyData", + "type": "PPROPERTY_DATA_DESCRIPTOR" + }, + { + "name": "BufferSize", + "type": "ULONG" + }, + { + "name": "pBuffer", + "type": "PBYTE" + } + ], + "TdhEnumerateProviders": [ + { + "name": "pBuffer", + "type": "PPROVIDER_ENUMERATION_INFO" + }, + { + "name": "pBufferSize", + "type": "ULONG" + } + ], + "TdhQueryProviderFieldInformation": [ + { + "name": "pGuid", + "type": "LPGUID" + }, + { + "name": "EventFieldValue", + "type": "ULONGLONG" + }, + { + "name": "EventFieldType", + "type": "EVENT_FIELD_TYPE" + }, + { + "name": "pBuffer", + "type": "PPROVIDER_FIELD_INFOARRAY" + }, + { + "name": "pBufferSize", + "type": "ULONG" + } + ], + "TdhEnumerateProviderFieldInformation": [ + { + "name": "pGuid", + "type": "LPGUID" + }, + { + "name": "EventFieldType", + "type": "EVENT_FIELD_TYPE" + }, + { + "name": "pBuffer", + "type": "PPROVIDER_FIELD_INFOARRAY" + }, + { + "name": "pBufferSize", + "type": "ULONG" + } + ], + "TdhEnumerateProviderFilters": [ + { + "name": "Guid", + "type": "LPGUID" + }, + { + "name": "TdhContextCount", + "type": "ULONG" + }, + { + "name": "TdhContext", + "type": "PTDH_CONTEXT" + }, + { + "name": "FilterCount", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PPROVIDER_FILTER_INFO" + }, + { + "name": "BufferSize", + "type": "ULONG" + } + ], + "TdhLoadManifest": [ + { + "name": "Manifest", + "type": "PWSTR" + } + ], + "TdhUnloadManifest": [ + { + "name": "Manifest", + "type": "PWSTR" + } + ], + "TdhFormatProperty": [ + { + "name": "EventInfo", + "type": "PTRACE_EVENT_INFO" + }, + { + "name": "MapInfo", + "type": "PEVENT_MAP_INFO" + }, + { + "name": "PointerSize", + "type": "ULONG" + }, + { + "name": "PropertyInType", + "type": "USHORT" + }, + { + "name": "PropertyOutType", + "type": "USHORT" + }, + { + "name": "PropertyLength", + "type": "USHORT" + }, + { + "name": "UserDataLength", + "type": "USHORT" + }, + { + "name": "UserData", + "type": "PBYTE" + }, + { + "name": "BufferSize", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PWCHAR" + }, + { + "name": "UserDataConsumed", + "type": "PUSHORT" + } + ], + "TdhOpenDecodingHandle": [ + { + "name": "Handle", + "type": "PTDH_HANDLE" + } + ], + "TdhSetDecodingParameter": [ + { + "name": "Handle", + "type": "TDH_HANDLE" + }, + { + "name": "TdhContext", + "type": "PTDH_CONTEXT" + } + ], + "TdhGetDecodingParameter": [ + { + "name": "Handle", + "type": "TDH_HANDLE" + }, + { + "name": "TdhContext", + "type": "PTDH_CONTEXT" + } + ], + "TdhGetWppProperty": [ + { + "name": "Handle", + "type": "TDH_HANDLE" + }, + { + "name": "EventRecord", + "type": "PEVENT_RECORD" + }, + { + "name": "PropertyName", + "type": "PWSTR" + }, + { + "name": "BufferSize", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PBYTE" + } + ], + "TdhGetWppMessage": [ + { + "name": "Handle", + "type": "TDH_HANDLE" + }, + { + "name": "EventRecord", + "type": "PEVENT_RECORD" + }, + { + "name": "BufferSize", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PBYTE" + } + ], + "TdhCloseDecodingHandle": [ + { + "name": "Handle", + "type": "TDH_HANDLE" + } + ], + "TdhLoadManifestFromBinary": [ + { + "name": "BinaryPath", + "type": "PWSTR" + } + ], + "TdhEnumerateManifestProviderEvents": [ + { + "name": "ProviderGuid", + "type": "LPGUID" + }, + { + "name": "Buffer", + "type": "PPROVIDER_EVENT_INFO" + }, + { + "name": "BufferSize", + "type": "ULONG" + } + ], + "TdhGetManifestEventInformation": [ + { + "name": "ProviderGuid", + "type": "LPGUID" + }, + { + "name": "EventDescriptor", + "type": "PEVENT_DESCRIPTOR" + }, + { + "name": "Buffer", + "type": "PTRACE_EVENT_INFO" + }, + { + "name": "BufferSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/threadpoolapiset.json b/qiling/extensions/windows_sdk/threadpoolapiset.json new file mode 100644 index 000000000..372f84c67 --- /dev/null +++ b/qiling/extensions/windows_sdk/threadpoolapiset.json @@ -0,0 +1,376 @@ +{ + "CreateThreadpool": [ + { + "name": "reserved", + "type": "PVOID" + } + ], + "SetThreadpoolThreadMaximum": [ + { + "name": "ptpp", + "type": "PTP_POOL" + }, + { + "name": "cthrdMost", + "type": "DWORD" + } + ], + "SetThreadpoolThreadMinimum": [ + { + "name": "ptpp", + "type": "PTP_POOL" + }, + { + "name": "cthrdMic", + "type": "DWORD" + } + ], + "SetThreadpoolStackInformation": [ + { + "name": "ptpp", + "type": "PTP_POOL" + }, + { + "name": "ptpsi", + "type": "PTP_POOL_STACK_INFORMATION" + } + ], + "QueryThreadpoolStackInformation": [ + { + "name": "ptpp", + "type": "PTP_POOL" + }, + { + "name": "ptpsi", + "type": "PTP_POOL_STACK_INFORMATION" + } + ], + "CloseThreadpool": [ + { + "name": "ptpp", + "type": "PTP_POOL" + } + ], + "CreateThreadpoolCleanupGroup": [ + { + "name": "VOID", + "type": "void" + } + ], + "CloseThreadpoolCleanupGroupMembers": [ + { + "name": "ptpcg", + "type": "PTP_CLEANUP_GROUP" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + }, + { + "name": "pvCleanupContext", + "type": "PVOID" + } + ], + "CloseThreadpoolCleanupGroup": [ + { + "name": "ptpcg", + "type": "PTP_CLEANUP_GROUP" + } + ], + "SetEventWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "evt", + "type": "HANDLE" + } + ], + "ReleaseSemaphoreWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "sem", + "type": "HANDLE" + }, + { + "name": "crel", + "type": "DWORD" + } + ], + "ReleaseMutexWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "mut", + "type": "HANDLE" + } + ], + "LeaveCriticalSectionWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "pcs", + "type": "PCRITICAL_SECTION" + } + ], + "FreeLibraryWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "mod", + "type": "HMODULE" + } + ], + "CallbackMayRunLong": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + } + ], + "DisassociateCurrentThreadFromCallback": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + } + ], + "TrySubmitThreadpoolCallback": [ + { + "name": "pfns", + "type": "PTP_SIMPLE_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "CreateThreadpoolWork": [ + { + "name": "pfnwk", + "type": "PTP_WORK_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "SubmitThreadpoolWork": [ + { + "name": "pwk", + "type": "PTP_WORK" + } + ], + "WaitForThreadpoolWorkCallbacks": [ + { + "name": "pwk", + "type": "PTP_WORK" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + } + ], + "CloseThreadpoolWork": [ + { + "name": "pwk", + "type": "PTP_WORK" + } + ], + "CreateThreadpoolTimer": [ + { + "name": "pfnti", + "type": "PTP_TIMER_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "SetThreadpoolTimer": [ + { + "name": "pti", + "type": "PTP_TIMER" + }, + { + "name": "pftDueTime", + "type": "PFILETIME" + }, + { + "name": "msPeriod", + "type": "DWORD" + }, + { + "name": "msWindowLength", + "type": "DWORD" + } + ], + "IsThreadpoolTimerSet": [ + { + "name": "pti", + "type": "PTP_TIMER" + } + ], + "WaitForThreadpoolTimerCallbacks": [ + { + "name": "pti", + "type": "PTP_TIMER" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + } + ], + "CloseThreadpoolTimer": [ + { + "name": "pti", + "type": "PTP_TIMER" + } + ], + "CreateThreadpoolWait": [ + { + "name": "pfnwa", + "type": "PTP_WAIT_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "SetThreadpoolWait": [ + { + "name": "pwa", + "type": "PTP_WAIT" + }, + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "pftTimeout", + "type": "PFILETIME" + } + ], + "WaitForThreadpoolWaitCallbacks": [ + { + "name": "pwa", + "type": "PTP_WAIT" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + } + ], + "CloseThreadpoolWait": [ + { + "name": "pwa", + "type": "PTP_WAIT" + } + ], + "CreateThreadpoolIo": [ + { + "name": "fl", + "type": "HANDLE" + }, + { + "name": "pfnio", + "type": "PTP_WIN32_IO_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "StartThreadpoolIo": [ + { + "name": "pio", + "type": "PTP_IO" + } + ], + "CancelThreadpoolIo": [ + { + "name": "pio", + "type": "PTP_IO" + } + ], + "WaitForThreadpoolIoCallbacks": [ + { + "name": "pio", + "type": "PTP_IO" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + } + ], + "CloseThreadpoolIo": [ + { + "name": "pio", + "type": "PTP_IO" + } + ], + "SetThreadpoolTimerEx": [ + { + "name": "pti", + "type": "PTP_TIMER" + }, + { + "name": "pftDueTime", + "type": "PFILETIME" + }, + { + "name": "msPeriod", + "type": "DWORD" + }, + { + "name": "msWindowLength", + "type": "DWORD" + } + ], + "SetThreadpoolWaitEx": [ + { + "name": "pwa", + "type": "PTP_WAIT" + }, + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "pftTimeout", + "type": "PFILETIME" + }, + { + "name": "Reserved", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/threadpoollegacyapiset.json b/qiling/extensions/windows_sdk/threadpoollegacyapiset.json new file mode 100644 index 000000000..6043cdaa4 --- /dev/null +++ b/qiling/extensions/windows_sdk/threadpoollegacyapiset.json @@ -0,0 +1,104 @@ +{ + "QueueUserWorkItem": [ + { + "name": "Function", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "UnregisterWaitEx": [ + { + "name": "WaitHandle", + "type": "HANDLE" + }, + { + "name": "CompletionEvent", + "type": "HANDLE" + } + ], + "CreateTimerQueue": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateTimerQueueTimer": [ + { + "name": "phNewTimer", + "type": "PHANDLE" + }, + { + "name": "TimerQueue", + "type": "HANDLE" + }, + { + "name": "Callback", + "type": "WAITORTIMERCALLBACK" + }, + { + "name": "Parameter", + "type": "PVOID" + }, + { + "name": "DueTime", + "type": "DWORD" + }, + { + "name": "Period", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "ChangeTimerQueueTimer": [ + { + "name": "TimerQueue", + "type": "HANDLE" + }, + { + "name": "Timer", + "type": "HANDLE" + }, + { + "name": "DueTime", + "type": "ULONG" + }, + { + "name": "Period", + "type": "ULONG" + } + ], + "DeleteTimerQueueTimer": [ + { + "name": "TimerQueue", + "type": "HANDLE" + }, + { + "name": "Timer", + "type": "HANDLE" + }, + { + "name": "CompletionEvent", + "type": "HANDLE" + } + ], + "DeleteTimerQueueEx": [ + { + "name": "TimerQueue", + "type": "HANDLE" + }, + { + "name": "CompletionEvent", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/timeapi.json b/qiling/extensions/windows_sdk/timeapi.json new file mode 100644 index 000000000..15e2a3601 --- /dev/null +++ b/qiling/extensions/windows_sdk/timeapi.json @@ -0,0 +1,40 @@ +{ + "timeGetSystemTime": [ + { + "name": "pmmt", + "type": "LPMMTIME" + }, + { + "name": "cbmmt", + "type": "UINT" + } + ], + "timeGetTime": [ + { + "name": "VOID", + "type": "void" + } + ], + "timeGetDevCaps": [ + { + "name": "ptc", + "type": "LPTIMECAPS" + }, + { + "name": "cbtc", + "type": "UINT" + } + ], + "timeBeginPeriod": [ + { + "name": "uPeriod", + "type": "UINT" + } + ], + "timeEndPeriod": [ + { + "name": "uPeriod", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/timezoneapi.json b/qiling/extensions/windows_sdk/timezoneapi.json new file mode 100644 index 000000000..68215878a --- /dev/null +++ b/qiling/extensions/windows_sdk/timezoneapi.json @@ -0,0 +1,140 @@ +{ + "SystemTimeToTzSpecificLocalTime": [ + { + "name": "lpTimeZoneInformation", + "type": "TIME_ZONE_INFORMATION" + }, + { + "name": "lpUniversalTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpLocalTime", + "type": "LPSYSTEMTIME" + } + ], + "TzSpecificLocalTimeToSystemTime": [ + { + "name": "lpTimeZoneInformation", + "type": "TIME_ZONE_INFORMATION" + }, + { + "name": "lpLocalTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpUniversalTime", + "type": "LPSYSTEMTIME" + } + ], + "FileTimeToSystemTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "SystemTimeToFileTime": [ + { + "name": "lpSystemTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpFileTime", + "type": "LPFILETIME" + } + ], + "GetTimeZoneInformation": [ + { + "name": "lpTimeZoneInformation", + "type": "LPTIME_ZONE_INFORMATION" + } + ], + "SetTimeZoneInformation": [ + { + "name": "lpTimeZoneInformation", + "type": "TIME_ZONE_INFORMATION" + } + ], + "SetDynamicTimeZoneInformation": [ + { + "name": "lpTimeZoneInformation", + "type": "DYNAMIC_TIME_ZONE_INFORMATION" + } + ], + "GetDynamicTimeZoneInformation": [ + { + "name": "pTimeZoneInformation", + "type": "PDYNAMIC_TIME_ZONE_INFORMATION" + } + ], + "GetTimeZoneInformationForYear": [ + { + "name": "wYear", + "type": "USHORT" + }, + { + "name": "pdtzi", + "type": "PDYNAMIC_TIME_ZONE_INFORMATION" + }, + { + "name": "ptzi", + "type": "LPTIME_ZONE_INFORMATION" + } + ], + "EnumDynamicTimeZoneInformation": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpTimeZoneInformation", + "type": "PDYNAMIC_TIME_ZONE_INFORMATION" + } + ], + "GetDynamicTimeZoneInformationEffectiveYears": [ + { + "name": "lpTimeZoneInformation", + "type": "PDYNAMIC_TIME_ZONE_INFORMATION" + }, + { + "name": "FirstYear", + "type": "LPDWORD" + }, + { + "name": "LastYear", + "type": "LPDWORD" + } + ], + "SystemTimeToTzSpecificLocalTimeEx": [ + { + "name": "lpTimeZoneInformation", + "type": "DYNAMIC_TIME_ZONE_INFORMATION" + }, + { + "name": "lpUniversalTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpLocalTime", + "type": "LPSYSTEMTIME" + } + ], + "TzSpecificLocalTimeToSystemTimeEx": [ + { + "name": "lpTimeZoneInformation", + "type": "DYNAMIC_TIME_ZONE_INFORMATION" + }, + { + "name": "lpLocalTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpUniversalTime", + "type": "LPSYSTEMTIME" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/tlhelp32.json b/qiling/extensions/windows_sdk/tlhelp32.json new file mode 100644 index 000000000..0a3f8b637 --- /dev/null +++ b/qiling/extensions/windows_sdk/tlhelp32.json @@ -0,0 +1,174 @@ +{ + "CreateToolhelp32Snapshot": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "th32ProcessID", + "type": "DWORD" + } + ], + "Heap32ListFirst": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lphl", + "type": "LPHEAPLIST32" + } + ], + "Heap32ListNext": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lphl", + "type": "LPHEAPLIST32" + } + ], + "Heap32First": [ + { + "name": "lphe", + "type": "LPHEAPENTRY32" + }, + { + "name": "th32ProcessID", + "type": "DWORD" + }, + { + "name": "th32HeapID", + "type": "ULONG_PTR" + } + ], + "Heap32Next": [ + { + "name": "lphe", + "type": "LPHEAPENTRY32" + } + ], + "Toolhelp32ReadProcessMemory": [ + { + "name": "th32ProcessID", + "type": "DWORD" + }, + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbRead", + "type": "SIZE_T" + }, + { + "name": "lpNumberOfBytesRead", + "type": "SIZE_T" + } + ], + "Process32FirstW": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lppe", + "type": "LPPROCESSENTRY32W" + } + ], + "Process32NextW": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lppe", + "type": "LPPROCESSENTRY32W" + } + ], + "Process32First": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lppe", + "type": "LPPROCESSENTRY32" + } + ], + "Process32Next": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lppe", + "type": "LPPROCESSENTRY32" + } + ], + "Thread32First": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpte", + "type": "LPTHREADENTRY32" + } + ], + "Thread32Next": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpte", + "type": "LPTHREADENTRY32" + } + ], + "Module32FirstW": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpme", + "type": "LPMODULEENTRY32W" + } + ], + "Module32NextW": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpme", + "type": "LPMODULEENTRY32W" + } + ], + "Module32First": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpme", + "type": "LPMODULEENTRY32" + } + ], + "Module32Next": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpme", + "type": "LPMODULEENTRY32" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/tokenbinding.json b/qiling/extensions/windows_sdk/tokenbinding.json new file mode 100644 index 000000000..e8c354340 --- /dev/null +++ b/qiling/extensions/windows_sdk/tokenbinding.json @@ -0,0 +1,128 @@ +{ + "TokenBindingGenerateBinding": [ + { + "name": "keyType", + "type": "TOKENBINDING_KEY_PARAMETERS_TYPE" + }, + { + "name": "targetURL", + "type": "PCWSTR" + }, + { + "name": "bindingType", + "type": "TOKENBINDING_TYPE" + }, + { + "name": "tlsEKM", + "type": "void" + }, + { + "name": "tlsEKMSize", + "type": "DWORD" + }, + { + "name": "extensionFormat", + "type": "TOKENBINDING_EXTENSION_FORMAT" + }, + { + "name": "extensionData", + "type": "void" + }, + { + "name": "tokenBinding", + "type": "void" + }, + { + "name": "tokenBindingSize", + "type": "DWORD" + }, + { + "name": "resultData", + "type": "TOKENBINDING_RESULT_DATA" + } + ], + "TokenBindingGenerateMessage": [ + { + "name": "tokenBindings", + "type": "void" + }, + { + "name": "tokenBindingsSize", + "type": "DWORD" + }, + { + "name": "tokenBindingsCount", + "type": "DWORD" + }, + { + "name": "tokenBindingMessage", + "type": "void" + }, + { + "name": "tokenBindingMessageSize", + "type": "DWORD" + } + ], + "TokenBindingVerifyMessage": [ + { + "name": "tokenBindingMessage", + "type": "void" + }, + { + "name": "tokenBindingMessageSize", + "type": "DWORD" + }, + { + "name": "keyType", + "type": "TOKENBINDING_KEY_PARAMETERS_TYPE" + }, + { + "name": "tlsEKM", + "type": "void" + }, + { + "name": "tlsEKMSize", + "type": "DWORD" + }, + { + "name": "resultList", + "type": "TOKENBINDING_RESULT_LIST" + } + ], + "TokenBindingGetKeyTypesClient": [ + { + "name": "keyTypes", + "type": "TOKENBINDING_KEY_TYPES" + } + ], + "TokenBindingGetKeyTypesServer": [ + { + "name": "keyTypes", + "type": "TOKENBINDING_KEY_TYPES" + } + ], + "TokenBindingDeleteBinding": [ + { + "name": "targetURL", + "type": "PCWSTR" + } + ], + "TokenBindingGenerateID": [ + { + "name": "keyType", + "type": "TOKENBINDING_KEY_PARAMETERS_TYPE" + }, + { + "name": "publicKey", + "type": "void" + }, + { + "name": "publicKeySize", + "type": "DWORD" + }, + { + "name": "resultData", + "type": "TOKENBINDING_RESULT_DATA" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/txfw32.json b/qiling/extensions/windows_sdk/txfw32.json new file mode 100644 index 000000000..066d9b05f --- /dev/null +++ b/qiling/extensions/windows_sdk/txfw32.json @@ -0,0 +1,94 @@ +{ + "TxfLogCreateFileReadContext": [ + { + "name": "LogPath", + "type": "LPCWSTR" + }, + { + "name": "BeginningLsn", + "type": "CLFS_LSN" + }, + { + "name": "EndingLsn", + "type": "CLFS_LSN" + }, + { + "name": "TxfFileId", + "type": "PTXF_ID" + }, + { + "name": "TxfLogContext", + "type": "PVOID" + } + ], + "TxfLogCreateRangeReadContext": [ + { + "name": "LogPath", + "type": "LPCWSTR" + }, + { + "name": "BeginningLsn", + "type": "CLFS_LSN" + }, + { + "name": "EndingLsn", + "type": "CLFS_LSN" + }, + { + "name": "BeginningVirtualClock", + "type": "PLARGE_INTEGER" + }, + { + "name": "EndingVirtualClock", + "type": "PLARGE_INTEGER" + }, + { + "name": "RecordTypeMask", + "type": "ULONG" + }, + { + "name": "TxfLogContext", + "type": "PVOID" + } + ], + "TxfLogDestroyReadContext": [ + { + "name": "TxfLogContext", + "type": "PVOID" + } + ], + "TxfLogReadRecords": [ + { + "name": "TxfLogContext", + "type": "PVOID" + }, + { + "name": "BufferLength", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "BytesUsed", + "type": "PULONG" + }, + { + "name": "RecordCount", + "type": "PULONG" + } + ], + "TxfSetThreadMiniVersionForCreate": [ + { + "name": "MiniVersion", + "type": "USHORT" + } + ], + "TxfGetThreadMiniVersionForCreate": [ + { + "name": "MiniVersion", + "type": "PUSHORT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ual.json b/qiling/extensions/windows_sdk/ual.json new file mode 100644 index 000000000..5dc22db83 --- /dev/null +++ b/qiling/extensions/windows_sdk/ual.json @@ -0,0 +1,34 @@ +{ + "UalStart": [ + { + "name": "Data", + "type": "PUAL_DATA_BLOB" + } + ], + "UalStop": [ + { + "name": "Data", + "type": "PUAL_DATA_BLOB" + } + ], + "UalInstrument": [ + { + "name": "Data", + "type": "PUAL_DATA_BLOB" + } + ], + "UalRegisterProduct": [ + { + "name": "wszProductName", + "type": "WCHAR" + }, + { + "name": "wszRoleName", + "type": "WCHAR" + }, + { + "name": "wszGuid", + "type": "WCHAR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/unknwn.json b/qiling/extensions/windows_sdk/unknwn.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/unknwn.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/unknwnbase.json b/qiling/extensions/windows_sdk/unknwnbase.json new file mode 100644 index 000000000..af298d5f0 --- /dev/null +++ b/qiling/extensions/windows_sdk/unknwnbase.json @@ -0,0 +1,28 @@ +{ + "IUnknown_QueryInterface_Proxy": [ + { + "name": "This", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "IUnknown_AddRef_Proxy": [ + { + "name": "This", + "type": "IUnknown" + } + ], + "IUnknown_Release_Proxy": [ + { + "name": "This", + "type": "IUnknown" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/urlmon.json b/qiling/extensions/windows_sdk/urlmon.json new file mode 100644 index 000000000..ab6303485 --- /dev/null +++ b/qiling/extensions/windows_sdk/urlmon.json @@ -0,0 +1,34 @@ +{ + "CreateAsyncBindCtx": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "pBSCb", + "type": "IBindStatusCallback" + }, + { + "name": "pEFetc", + "type": "IEnumFORMATETC" + }, + { + "name": "ppBC", + "type": "IBindCtx" + } + ], + "CreateFormatEnumerator": [ + { + "name": "cfmtetc", + "type": "UINT" + }, + { + "name": "rgfmtetc", + "type": "FORMATETC" + }, + { + "name": "ppenumfmtetc", + "type": "IEnumFORMATETC" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/userenv.json b/qiling/extensions/windows_sdk/userenv.json new file mode 100644 index 000000000..6e7cd1ff3 --- /dev/null +++ b/qiling/extensions/windows_sdk/userenv.json @@ -0,0 +1,488 @@ +{ + "LoadUserProfileA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpProfileInfo", + "type": "LPPROFILEINFOA" + } + ], + "LoadUserProfileW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpProfileInfo", + "type": "LPPROFILEINFOW" + } + ], + "UnloadUserProfile": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "hProfile", + "type": "HANDLE" + } + ], + "GetProfilesDirectoryA": [ + { + "name": "lpProfileDir", + "type": "LPSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetProfilesDirectoryW": [ + { + "name": "lpProfileDir", + "type": "LPWSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetProfileType": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DeleteProfileA": [ + { + "name": "lpSidString", + "type": "LPCSTR" + }, + { + "name": "lpProfilePath", + "type": "LPCSTR" + }, + { + "name": "lpComputerName", + "type": "LPCSTR" + } + ], + "DeleteProfileW": [ + { + "name": "lpSidString", + "type": "LPCWSTR" + }, + { + "name": "lpProfilePath", + "type": "LPCWSTR" + }, + { + "name": "lpComputerName", + "type": "LPCWSTR" + } + ], + "CreateProfile": [ + { + "name": "pszUserSid", + "type": "LPCWSTR" + }, + { + "name": "pszUserName", + "type": "LPCWSTR" + }, + { + "name": "pszProfilePath", + "type": "LPWSTR" + }, + { + "name": "cchProfilePath", + "type": "DWORD" + } + ], + "GetDefaultUserProfileDirectoryA": [ + { + "name": "lpProfileDir", + "type": "LPSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetDefaultUserProfileDirectoryW": [ + { + "name": "lpProfileDir", + "type": "LPWSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetAllUsersProfileDirectoryA": [ + { + "name": "lpProfileDir", + "type": "LPSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetAllUsersProfileDirectoryW": [ + { + "name": "lpProfileDir", + "type": "LPWSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetUserProfileDirectoryA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpProfileDir", + "type": "LPSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "GetUserProfileDirectoryW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpProfileDir", + "type": "LPWSTR" + }, + { + "name": "lpcchSize", + "type": "LPDWORD" + } + ], + "CreateEnvironmentBlock": [ + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "bInherit", + "type": "BOOL" + } + ], + "DestroyEnvironmentBlock": [ + { + "name": "lpEnvironment", + "type": "LPVOID" + } + ], + "ExpandEnvironmentStringsForUserA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpSrc", + "type": "LPCSTR" + }, + { + "name": "lpDest", + "type": "LPSTR" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "ExpandEnvironmentStringsForUserW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpSrc", + "type": "LPCWSTR" + }, + { + "name": "lpDest", + "type": "LPWSTR" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "RefreshPolicy": [ + { + "name": "bMachine", + "type": "BOOL" + } + ], + "RefreshPolicyEx": [ + { + "name": "bMachine", + "type": "BOOL" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "EnterCriticalPolicySection": [ + { + "name": "bMachine", + "type": "BOOL" + } + ], + "LeaveCriticalPolicySection": [ + { + "name": "hSection", + "type": "HANDLE" + } + ], + "RegisterGPNotification": [ + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "bMachine", + "type": "BOOL" + } + ], + "UnregisterGPNotification": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "GetGPOListA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpHostName", + "type": "LPCSTR" + }, + { + "name": "lpComputerName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pGPOList", + "type": "PGROUP_POLICY_OBJECTA" + } + ], + "GetGPOListW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpHostName", + "type": "LPCWSTR" + }, + { + "name": "lpComputerName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pGPOList", + "type": "PGROUP_POLICY_OBJECTW" + } + ], + "FreeGPOListA": [ + { + "name": "pGPOList", + "type": "PGROUP_POLICY_OBJECTA" + } + ], + "FreeGPOListW": [ + { + "name": "pGPOList", + "type": "PGROUP_POLICY_OBJECTW" + } + ], + "GetAppliedGPOListA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pMachineName", + "type": "LPCSTR" + }, + { + "name": "pSidUser", + "type": "PSID" + }, + { + "name": "pGuidExtension", + "type": "GUID" + }, + { + "name": "ppGPOList", + "type": "PGROUP_POLICY_OBJECTA" + } + ], + "GetAppliedGPOListW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pMachineName", + "type": "LPCWSTR" + }, + { + "name": "pSidUser", + "type": "PSID" + }, + { + "name": "pGuidExtension", + "type": "GUID" + }, + { + "name": "ppGPOList", + "type": "PGROUP_POLICY_OBJECTW" + } + ], + "ProcessGroupPolicyCompleted": [ + { + "name": "extensionId", + "type": "REFGPEXTENSIONID" + }, + { + "name": "pAsyncHandle", + "type": "ASYNCCOMPLETIONHANDLE" + }, + { + "name": "dwStatus", + "type": "DWORD" + } + ], + "ProcessGroupPolicyCompletedEx": [ + { + "name": "extensionId", + "type": "REFGPEXTENSIONID" + }, + { + "name": "pAsyncHandle", + "type": "ASYNCCOMPLETIONHANDLE" + }, + { + "name": "dwStatus", + "type": "DWORD" + }, + { + "name": "RsopStatus", + "type": "HRESULT" + } + ], + "CreateAppContainerProfile": [ + { + "name": "pszAppContainerName", + "type": "PCWSTR" + }, + { + "name": "pszDisplayName", + "type": "PCWSTR" + }, + { + "name": "pszDescription", + "type": "PCWSTR" + }, + { + "name": "pCapabilities", + "type": "PSID_AND_ATTRIBUTES" + }, + { + "name": "dwCapabilityCount", + "type": "DWORD" + }, + { + "name": "ppSidAppContainerSid", + "type": "PSID" + } + ], + "DeleteAppContainerProfile": [ + { + "name": "pszAppContainerName", + "type": "PCWSTR" + } + ], + "GetAppContainerRegistryLocation": [ + { + "name": "desiredAccess", + "type": "REGSAM" + }, + { + "name": "phAppContainerKey", + "type": "PHKEY" + } + ], + "GetAppContainerFolderPath": [ + { + "name": "pszAppContainerSid", + "type": "PCWSTR" + }, + { + "name": "ppszPath", + "type": "PWSTR" + } + ], + "DeriveAppContainerSidFromAppContainerName": [ + { + "name": "pszAppContainerName", + "type": "PCWSTR" + }, + { + "name": "ppsidAppContainerSid", + "type": "PSID" + } + ], + "DeriveRestrictedAppContainerSidFromAppContainerSidAndRestrictedName": [ + { + "name": "psidAppContainerSid", + "type": "PSID" + }, + { + "name": "pszRestrictedAppContainerName", + "type": "PCWSTR" + }, + { + "name": "ppsidRestrictedAppContainerSid", + "type": "PSID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/usp10.json b/qiling/extensions/windows_sdk/usp10.json new file mode 100644 index 000000000..edf86a8bc --- /dev/null +++ b/qiling/extensions/windows_sdk/usp10.json @@ -0,0 +1,1052 @@ +{ + "ScriptFreeCache": [ + { + "name": "psc", + "type": "SCRIPT_CACHE" + } + ], + "ScriptItemize": [ + { + "name": "pwcInChars", + "type": "WCHAR" + }, + { + "name": "cInChars", + "type": "int" + }, + { + "name": "cMaxItems", + "type": "int" + }, + { + "name": "psControl", + "type": "SCRIPT_CONTROL" + }, + { + "name": "psState", + "type": "SCRIPT_STATE" + }, + { + "name": "pItems", + "type": "SCRIPT_ITEM" + }, + { + "name": "pcItems", + "type": "int" + } + ], + "ScriptLayout": [ + { + "name": "cRuns", + "type": "int" + }, + { + "name": "pbLevel", + "type": "BYTE" + }, + { + "name": "piVisualToLogical", + "type": "int" + }, + { + "name": "piLogicalToVisual", + "type": "int" + } + ], + "ScriptShape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "pwcChars", + "type": "WCHAR" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "cMaxGlyphs", + "type": "int" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "pwOutGlyphs", + "type": "WORD" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "pcGlyphs", + "type": "int" + } + ], + "ScriptPlace": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "pwGlyphs", + "type": "WORD" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "pGoffset", + "type": "GOFFSET" + }, + { + "name": "pABC", + "type": "ABC" + } + ], + "ScriptTextOut": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "fuOptions", + "type": "UINT" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "pwcReserved", + "type": "WCHAR" + }, + { + "name": "iReserved", + "type": "int" + }, + { + "name": "pwGlyphs", + "type": "WORD" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "piJustify", + "type": "int" + }, + { + "name": "pGoffset", + "type": "GOFFSET" + } + ], + "ScriptJustify": [ + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "iDx", + "type": "int" + }, + { + "name": "iMinKashida", + "type": "int" + }, + { + "name": "piJustify", + "type": "int" + } + ], + "ScriptBreak": [ + { + "name": "pwcChars", + "type": "WCHAR" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "psla", + "type": "SCRIPT_LOGATTR" + } + ], + "ScriptCPtoX": [ + { + "name": "iCP", + "type": "int" + }, + { + "name": "fTrailing", + "type": "BOOL" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "piX", + "type": "int" + } + ], + "ScriptXtoCP": [ + { + "name": "iX", + "type": "int" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "piCP", + "type": "int" + }, + { + "name": "piTrailing", + "type": "int" + } + ], + "ScriptGetLogicalWidths": [ + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "piGlyphWidth", + "type": "int" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "piDx", + "type": "int" + } + ], + "ScriptApplyLogicalWidth": [ + { + "name": "piDx", + "type": "int" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "psva", + "type": "SCRIPT_VISATTR" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "pABC", + "type": "ABC" + }, + { + "name": "piJustify", + "type": "int" + } + ], + "ScriptGetCMap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "pwcInChars", + "type": "WCHAR" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwOutGlyphs", + "type": "WORD" + } + ], + "ScriptGetGlyphABCWidth": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "wGlyph", + "type": "WORD" + }, + { + "name": "pABC", + "type": "ABC" + } + ], + "ScriptGetProperties": [ + { + "name": "ppSp", + "type": "SCRIPT_PROPERTIES" + }, + { + "name": "piNumScripts", + "type": "int" + } + ], + "ScriptGetFontProperties": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "sfp", + "type": "SCRIPT_FONTPROPERTIES" + } + ], + "ScriptCacheGetHeight": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "tmHeight", + "type": "long" + } + ], + "ScriptStringAnalyse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pString", + "type": "void" + }, + { + "name": "cString", + "type": "int" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "iCharset", + "type": "int" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "iReqWidth", + "type": "int" + }, + { + "name": "psControl", + "type": "SCRIPT_CONTROL" + }, + { + "name": "psState", + "type": "SCRIPT_STATE" + }, + { + "name": "piDx", + "type": "int" + }, + { + "name": "pTabdef", + "type": "SCRIPT_TABDEF" + }, + { + "name": "pbInClass", + "type": "BYTE" + }, + { + "name": "pssa", + "type": "SCRIPT_STRING_ANALYSIS" + } + ], + "ScriptStringFree": [ + { + "name": "pssa", + "type": "SCRIPT_STRING_ANALYSIS" + } + ], + "ScriptStringGetOrder": [ + { + "name": "ssa", + "type": "SCRIPT_STRING_ANALYSIS" + }, + { + "name": "puOrder", + "type": "UINT" + } + ], + "ScriptStringCPtoX": [ + { + "name": "ssa", + "type": "SCRIPT_STRING_ANALYSIS" + }, + { + "name": "icp", + "type": "int" + }, + { + "name": "fTrailing", + "type": "BOOL" + }, + { + "name": "pX", + "type": "int" + } + ], + "ScriptStringXtoCP": [ + { + "name": "ssa", + "type": "SCRIPT_STRING_ANALYSIS" + }, + { + "name": "iX", + "type": "int" + }, + { + "name": "piCh", + "type": "int" + }, + { + "name": "piTrailing", + "type": "int" + } + ], + "ScriptStringGetLogicalWidths": [ + { + "name": "ssa", + "type": "SCRIPT_STRING_ANALYSIS" + }, + { + "name": "piDx", + "type": "int" + } + ], + "ScriptStringValidate": [ + { + "name": "ssa", + "type": "SCRIPT_STRING_ANALYSIS" + } + ], + "ScriptStringOut": [ + { + "name": "ssa", + "type": "SCRIPT_STRING_ANALYSIS" + }, + { + "name": "iX", + "type": "int" + }, + { + "name": "iY", + "type": "int" + }, + { + "name": "uOptions", + "type": "UINT" + }, + { + "name": "prc", + "type": "RECT" + }, + { + "name": "iMinSel", + "type": "int" + }, + { + "name": "iMaxSel", + "type": "int" + }, + { + "name": "fDisabled", + "type": "BOOL" + } + ], + "ScriptIsComplex": [ + { + "name": "pwcInChars", + "type": "WCHAR" + }, + { + "name": "cInChars", + "type": "int" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ScriptRecordDigitSubstitution": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "psds", + "type": "SCRIPT_DIGITSUBSTITUTE" + } + ], + "ScriptApplyDigitSubstitution": [ + { + "name": "psds", + "type": "SCRIPT_DIGITSUBSTITUTE" + }, + { + "name": "psc", + "type": "SCRIPT_CONTROL" + }, + { + "name": "pss", + "type": "SCRIPT_STATE" + } + ], + "ScriptShapeOpenType": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagLangSys", + "type": "OPENTYPE_TAG" + }, + { + "name": "rcRangeChars", + "type": "int" + }, + { + "name": "rpRangeProperties", + "type": "TEXTRANGE_PROPERTIES" + }, + { + "name": "cRanges", + "type": "int" + }, + { + "name": "pwcChars", + "type": "WCHAR" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "cMaxGlyphs", + "type": "int" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "pCharProps", + "type": "SCRIPT_CHARPROP" + }, + { + "name": "pwOutGlyphs", + "type": "WORD" + }, + { + "name": "pOutGlyphProps", + "type": "SCRIPT_GLYPHPROP" + }, + { + "name": "pcGlyphs", + "type": "int" + } + ], + "ScriptPlaceOpenType": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagLangSys", + "type": "OPENTYPE_TAG" + }, + { + "name": "rcRangeChars", + "type": "int" + }, + { + "name": "rpRangeProperties", + "type": "TEXTRANGE_PROPERTIES" + }, + { + "name": "cRanges", + "type": "int" + }, + { + "name": "pwcChars", + "type": "WCHAR" + }, + { + "name": "pwLogClust", + "type": "WORD" + }, + { + "name": "pCharProps", + "type": "SCRIPT_CHARPROP" + }, + { + "name": "cChars", + "type": "int" + }, + { + "name": "pwGlyphs", + "type": "WORD" + }, + { + "name": "pGlyphProps", + "type": "SCRIPT_GLYPHPROP" + }, + { + "name": "cGlyphs", + "type": "int" + }, + { + "name": "piAdvance", + "type": "int" + }, + { + "name": "pGoffset", + "type": "GOFFSET" + }, + { + "name": "pABC", + "type": "ABC" + } + ], + "ScriptItemizeOpenType": [ + { + "name": "pwcInChars", + "type": "WCHAR" + }, + { + "name": "cInChars", + "type": "int" + }, + { + "name": "cMaxItems", + "type": "int" + }, + { + "name": "psControl", + "type": "SCRIPT_CONTROL" + }, + { + "name": "psState", + "type": "SCRIPT_STATE" + }, + { + "name": "pItems", + "type": "SCRIPT_ITEM" + }, + { + "name": "pScriptTags", + "type": "OPENTYPE_TAG" + }, + { + "name": "pcItems", + "type": "int" + } + ], + "ScriptGetFontScriptTags": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "cMaxTags", + "type": "int" + }, + { + "name": "pScriptTags", + "type": "OPENTYPE_TAG" + }, + { + "name": "pcTags", + "type": "int" + } + ], + "ScriptGetFontLanguageTags": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "cMaxTags", + "type": "int" + }, + { + "name": "pLangsysTags", + "type": "OPENTYPE_TAG" + }, + { + "name": "pcTags", + "type": "int" + } + ], + "ScriptGetFontFeatureTags": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagLangSys", + "type": "OPENTYPE_TAG" + }, + { + "name": "cMaxTags", + "type": "int" + }, + { + "name": "pFeatureTags", + "type": "OPENTYPE_TAG" + }, + { + "name": "pcTags", + "type": "int" + } + ], + "ScriptGetFontAlternateGlyphs": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagLangSys", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagFeature", + "type": "OPENTYPE_TAG" + }, + { + "name": "wGlyphId", + "type": "WORD" + }, + { + "name": "cMaxAlternates", + "type": "int" + }, + { + "name": "pAlternateGlyphs", + "type": "WORD" + }, + { + "name": "pcAlternates", + "type": "int" + } + ], + "ScriptSubstituteSingleGlyph": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagLangSys", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagFeature", + "type": "OPENTYPE_TAG" + }, + { + "name": "lParameter", + "type": "LONG" + }, + { + "name": "wGlyphId", + "type": "WORD" + }, + { + "name": "pwOutGlyphId", + "type": "WORD" + } + ], + "ScriptPositionSingleGlyph": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "psc", + "type": "SCRIPT_CACHE" + }, + { + "name": "psa", + "type": "SCRIPT_ANALYSIS" + }, + { + "name": "tagScript", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagLangSys", + "type": "OPENTYPE_TAG" + }, + { + "name": "tagFeature", + "type": "OPENTYPE_TAG" + }, + { + "name": "lParameter", + "type": "LONG" + }, + { + "name": "wGlyphId", + "type": "WORD" + }, + { + "name": "iAdvance", + "type": "int" + }, + { + "name": "GOffset", + "type": "GOFFSET" + }, + { + "name": "piOutAdvance", + "type": "int" + }, + { + "name": "pOutGoffset", + "type": "GOFFSET" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/utilapiset.json b/qiling/extensions/windows_sdk/utilapiset.json new file mode 100644 index 000000000..aa69638be --- /dev/null +++ b/qiling/extensions/windows_sdk/utilapiset.json @@ -0,0 +1,12 @@ +{ + "Beep": [ + { + "name": "dwFreq", + "type": "DWORD" + }, + { + "name": "dwDuration", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/uxtheme.json b/qiling/extensions/windows_sdk/uxtheme.json new file mode 100644 index 000000000..664142dac --- /dev/null +++ b/qiling/extensions/windows_sdk/uxtheme.json @@ -0,0 +1,1416 @@ +{ + "BeginPanningFeedback": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "UpdatePanningFeedback": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "lTotalOverpanOffsetX", + "type": "LONG" + }, + { + "name": "lTotalOverpanOffsetY", + "type": "LONG" + }, + { + "name": "fInInertia", + "type": "BOOL" + } + ], + "EndPanningFeedback": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "fAnimateBack", + "type": "BOOL" + } + ], + "GetThemeAnimationProperty": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iStoryboardId", + "type": "int" + }, + { + "name": "iTargetId", + "type": "int" + }, + { + "name": "eProperty", + "type": "TA_PROPERTY" + }, + { + "name": "pvProperty", + "type": "void" + }, + { + "name": "cbSize", + "type": "DWORD" + }, + { + "name": "pcbSizeOut", + "type": "DWORD" + } + ], + "GetThemeAnimationTransform": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iStoryboardId", + "type": "int" + }, + { + "name": "iTargetId", + "type": "int" + }, + { + "name": "dwTransformIndex", + "type": "DWORD" + }, + { + "name": "pTransform", + "type": "TA_TRANSFORM" + }, + { + "name": "cbSize", + "type": "DWORD" + }, + { + "name": "pcbSizeOut", + "type": "DWORD" + } + ], + "GetThemeTimingFunction": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iTimingFunctionId", + "type": "int" + }, + { + "name": "pTimingFunction", + "type": "TA_TIMINGFUNCTION" + }, + { + "name": "cbSize", + "type": "DWORD" + }, + { + "name": "pcbSizeOut", + "type": "DWORD" + } + ], + "OpenThemeData": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszClassList", + "type": "LPCWSTR" + } + ], + "OpenThemeDataForDpi": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszClassList", + "type": "LPCWSTR" + }, + { + "name": "dpi", + "type": "UINT" + } + ], + "OpenThemeDataEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszClassList", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CloseThemeData": [ + { + "name": "hTheme", + "type": "HTHEME" + } + ], + "DrawThemeBackground": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pRect", + "type": "LPCRECT" + }, + { + "name": "pClipRect", + "type": "LPCRECT" + } + ], + "DrawThemeBackgroundEx": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pRect", + "type": "LPCRECT" + }, + { + "name": "pOptions", + "type": "DTBGOPTS" + } + ], + "DrawThemeText": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "dwTextFlags", + "type": "DWORD" + }, + { + "name": "dwTextFlags2", + "type": "DWORD" + }, + { + "name": "pRect", + "type": "LPCRECT" + } + ], + "GetThemeBackgroundContentRect": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pBoundingRect", + "type": "LPCRECT" + }, + { + "name": "pContentRect", + "type": "LPRECT" + } + ], + "GetThemeBackgroundExtent": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pContentRect", + "type": "LPCRECT" + }, + { + "name": "pExtentRect", + "type": "LPRECT" + } + ], + "GetThemeBackgroundRegion": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pRect", + "type": "LPCRECT" + }, + { + "name": "pRegion", + "type": "HRGN" + } + ], + "GetThemePartSize": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "prc", + "type": "LPCRECT" + }, + { + "name": "eSize", + "type": { + "name": "THEMESIZE", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "psz", + "type": "SIZE" + } + ], + "GetThemeTextExtent": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "cchCharCount", + "type": "int" + }, + { + "name": "dwTextFlags", + "type": "DWORD" + }, + { + "name": "pBoundingRect", + "type": "LPCRECT" + }, + { + "name": "pExtentRect", + "type": "LPRECT" + } + ], + "GetThemeTextMetrics": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "ptm", + "type": "TEXTMETRICW" + } + ], + "HitTestThemeBackground": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pRect", + "type": "LPCRECT" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "ptTest", + "type": "POINT" + }, + { + "name": "pwHitTestCode", + "type": "WORD" + } + ], + "DrawThemeEdge": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pDestRect", + "type": "LPCRECT" + }, + { + "name": "uEdge", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pContentRect", + "type": "LPRECT" + } + ], + "DrawThemeIcon": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pRect", + "type": "LPCRECT" + }, + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "iImageIndex", + "type": "int" + } + ], + "IsThemePartDefined": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + } + ], + "IsThemeBackgroundPartiallyTransparent": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + } + ], + "GetThemeColor": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pColor", + "type": "COLORREF" + } + ], + "GetThemeMetric": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "piVal", + "type": "int" + } + ], + "GetThemeString": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pszBuff", + "type": "LPWSTR" + }, + { + "name": "cchMaxBuffChars", + "type": "int" + } + ], + "GetThemeBool": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pfVal", + "type": "BOOL" + } + ], + "GetThemeInt": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "piVal", + "type": "int" + } + ], + "GetThemeEnumValue": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "piVal", + "type": "int" + } + ], + "GetThemePosition": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pPoint", + "type": "POINT" + } + ], + "GetThemeFont": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pFont", + "type": "LOGFONTW" + } + ], + "GetThemeRect": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pRect", + "type": "LPRECT" + } + ], + "GetThemeMargins": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "prc", + "type": "LPCRECT" + }, + { + "name": "pMargins", + "type": "MARGINS" + } + ], + "GetThemeIntList": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pIntList", + "type": "INTLIST" + } + ], + "GetThemePropertyOrigin": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pOrigin", + "type": { + "name": "PROPERTYORIGIN", + "data_type": "Enum", + "enumerators": [] + } + } + ], + "SetWindowTheme": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszSubAppName", + "type": "LPCWSTR" + }, + { + "name": "pszSubIdList", + "type": "LPCWSTR" + } + ], + "GetThemeFilename": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pszThemeFileName", + "type": "LPWSTR" + }, + { + "name": "cchMaxBuffChars", + "type": "int" + } + ], + "GetThemeSysColor": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iColorId", + "type": "int" + } + ], + "GetThemeSysColorBrush": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iColorId", + "type": "int" + } + ], + "GetThemeSysBool": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iBoolId", + "type": "int" + } + ], + "GetThemeSysSize": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iSizeId", + "type": "int" + } + ], + "GetThemeSysFont": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iFontId", + "type": "int" + }, + { + "name": "plf", + "type": "LOGFONTW" + } + ], + "GetThemeSysString": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iStringId", + "type": "int" + }, + { + "name": "pszStringBuff", + "type": "LPWSTR" + }, + { + "name": "cchMaxStringChars", + "type": "int" + } + ], + "GetThemeSysInt": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iIntId", + "type": "int" + }, + { + "name": "piValue", + "type": "int" + } + ], + "IsThemeActive": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsAppThemed": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetWindowTheme": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "EnableThemeDialogTexture": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "IsThemeDialogTextureEnabled": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetThemeAppProperties": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThemeAppProperties": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetCurrentThemeName": [ + { + "name": "pszThemeFileName", + "type": "LPWSTR" + }, + { + "name": "cchMaxNameChars", + "type": "int" + }, + { + "name": "pszColorBuff", + "type": "LPWSTR" + }, + { + "name": "cchMaxColorChars", + "type": "int" + }, + { + "name": "pszSizeBuff", + "type": "LPWSTR" + }, + { + "name": "cchMaxSizeChars", + "type": "int" + } + ], + "GetThemeDocumentationProperty": [ + { + "name": "pszThemeName", + "type": "LPCWSTR" + }, + { + "name": "pszPropertyName", + "type": "LPCWSTR" + }, + { + "name": "pszValueBuff", + "type": "LPWSTR" + }, + { + "name": "cchMaxValChars", + "type": "int" + } + ], + "DrawThemeParentBackground": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "prc", + "type": "RECT" + } + ], + "EnableTheming": [ + { + "name": "fEnable", + "type": "BOOL" + } + ], + "DrawThemeParentBackgroundEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "prc", + "type": "RECT" + } + ], + "SetWindowThemeAttribute": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "eAttribute", + "type": { + "name": "WINDOWTHEMEATTRIBUTETYPE", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "pvAttribute", + "type": "PVOID" + }, + { + "name": "cbAttribute", + "type": "DWORD" + } + ], + "SetWindowThemeNonClientAttributes": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwMask", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "DrawThemeTextEx": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "dwTextFlags", + "type": "DWORD" + }, + { + "name": "pRect", + "type": "LPRECT" + }, + { + "name": "pOptions", + "type": "DTTOPTS" + } + ], + "GetThemeBitmap": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "dwFlags", + "type": "ULONG" + }, + { + "name": "phBitmap", + "type": "HBITMAP" + } + ], + "GetThemeStream": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateId", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "ppvStream", + "type": "void" + }, + { + "name": "pcbStream", + "type": "DWORD" + }, + { + "name": "hInst", + "type": "HINSTANCE" + } + ], + "BufferedPaintInit": [ + { + "name": "VOID", + "type": "void" + } + ], + "BufferedPaintUnInit": [ + { + "name": "VOID", + "type": "void" + } + ], + "BeginBufferedPaint": [ + { + "name": "hdcTarget", + "type": "HDC" + }, + { + "name": "prcTarget", + "type": "RECT" + }, + { + "name": "dwFormat", + "type": "BP_BUFFERFORMAT" + }, + { + "name": "pPaintParams", + "type": "BP_PAINTPARAMS" + }, + { + "name": "phdc", + "type": "HDC" + } + ], + "EndBufferedPaint": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + }, + { + "name": "fUpdateTarget", + "type": "BOOL" + } + ], + "GetBufferedPaintTargetRect": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + }, + { + "name": "prc", + "type": "RECT" + } + ], + "GetBufferedPaintTargetDC": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + } + ], + "GetBufferedPaintDC": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + } + ], + "GetBufferedPaintBits": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + }, + { + "name": "ppbBuffer", + "type": "RGBQUAD" + }, + { + "name": "pcxRow", + "type": "int" + } + ], + "BufferedPaintClear": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + }, + { + "name": "prc", + "type": "RECT" + } + ], + "BufferedPaintSetAlpha": [ + { + "name": "hBufferedPaint", + "type": "HPAINTBUFFER" + }, + { + "name": "prc", + "type": "RECT" + }, + { + "name": "alpha", + "type": "BYTE" + } + ], + "BufferedPaintStopAllAnimations": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "BeginBufferedAnimation": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdcTarget", + "type": "HDC" + }, + { + "name": "prcTarget", + "type": "RECT" + }, + { + "name": "dwFormat", + "type": "BP_BUFFERFORMAT" + }, + { + "name": "pPaintParams", + "type": "BP_PAINTPARAMS" + }, + { + "name": "pAnimationParams", + "type": "BP_ANIMATIONPARAMS" + }, + { + "name": "phdcFrom", + "type": "HDC" + }, + { + "name": "phdcTo", + "type": "HDC" + } + ], + "EndBufferedAnimation": [ + { + "name": "hbpAnimation", + "type": "HANIMATIONBUFFER" + }, + { + "name": "fUpdateTarget", + "type": "BOOL" + } + ], + "BufferedPaintRenderAnimation": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdcTarget", + "type": "HDC" + } + ], + "GetThemeTransitionDuration": [ + { + "name": "hTheme", + "type": "HTHEME" + }, + { + "name": "iPartId", + "type": "int" + }, + { + "name": "iStateIdFrom", + "type": "int" + }, + { + "name": "iStateIdTo", + "type": "int" + }, + { + "name": "iPropId", + "type": "int" + }, + { + "name": "pdwDuration", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/vdmdbg.json b/qiling/extensions/windows_sdk/vdmdbg.json new file mode 100644 index 000000000..8549ee5b2 --- /dev/null +++ b/qiling/extensions/windows_sdk/vdmdbg.json @@ -0,0 +1,26 @@ +{ + "VDMEnumProcessWOW": [ + { + "name": "fp", + "type": "PROCESSENUMPROC" + }, + { + "name": "lparam", + "type": "LPARAM" + } + ], + "VDMEnumTaskWOWEx": [ + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "fp", + "type": "TASKENUMPROCEX" + }, + { + "name": "lparam", + "type": "LPARAM" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/versionhelpers.json b/qiling/extensions/windows_sdk/versionhelpers.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/versionhelpers.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/vfw.json b/qiling/extensions/windows_sdk/vfw.json new file mode 100644 index 000000000..382f95441 --- /dev/null +++ b/qiling/extensions/windows_sdk/vfw.json @@ -0,0 +1,1722 @@ +{ + "ICInfo": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lpicinfo", + "type": "ICINFO" + } + ], + "ICInstall": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "szDesc", + "type": "LPSTR" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "ICRemove": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "ICGetInfo": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "picinfo", + "type": "ICINFO" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "ICOpen": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wMode", + "type": "UINT" + } + ], + "ICOpenFunction": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wMode", + "type": "UINT" + }, + { + "name": "lpfnHandler", + "type": "FARPROC" + } + ], + "ICClose": [ + { + "name": "hic", + "type": "HIC" + } + ], + "ICSendMessage": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "msg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "ICCompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpbiOutput", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpbiInput", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpckid", + "type": "LPDWORD" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lFrameNum", + "type": "LONG" + }, + { + "name": "dwFrameSize", + "type": "DWORD" + }, + { + "name": "dwQuality", + "type": "DWORD" + }, + { + "name": "lpbiPrev", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpPrev", + "type": "LPVOID" + } + ], + "ICDecompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpbiFormat", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + } + ], + "ICDrawBegin": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDst", + "type": "int" + }, + { + "name": "yDst", + "type": "int" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "dwRate", + "type": "DWORD" + }, + { + "name": "dwScale", + "type": "DWORD" + } + ], + "ICDraw": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "lTime", + "type": "LONG" + } + ], + "ICLocate": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "wFlags", + "type": "WORD" + } + ], + "ICGetDisplayFormat": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "BitDepth", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "ICImageCompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFO" + }, + { + "name": "lQuality", + "type": "LONG" + }, + { + "name": "plSize", + "type": "LONG" + } + ], + "ICImageDecompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFO" + } + ], + "ICCompressorChoose": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "pvIn", + "type": "LPVOID" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "lpszTitle", + "type": "LPSTR" + } + ], + "ICSeqCompressFrameStart": [ + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + } + ], + "ICSeqCompressFrameEnd": [ + { + "name": "pc", + "type": "PCOMPVARS" + } + ], + "ICSeqCompressFrame": [ + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "pfKey", + "type": "BOOL" + }, + { + "name": "plSize", + "type": "LONG" + } + ], + "ICCompressorFree": [ + { + "name": "pc", + "type": "PCOMPVARS" + } + ], + "DrawDibOpen": [ + { + "name": "VOID", + "type": "void" + } + ], + "DrawDibClose": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibGetBuffer": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "dwSize", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DrawDibGetPalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibSetPalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hpal", + "type": "HPALETTE" + } + ], + "DrawDibChangePalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "iStart", + "type": "int" + }, + { + "name": "iLen", + "type": "int" + }, + { + "name": "lppe", + "type": "LPPALETTEENTRY" + } + ], + "DrawDibRealize": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "fBackground", + "type": "BOOL" + } + ], + "DrawDibStart": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "rate", + "type": "DWORD" + } + ], + "DrawDibStop": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibBegin": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "DrawDibDraw": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDst", + "type": "int" + }, + { + "name": "yDst", + "type": "int" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "DrawDibEnd": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibTime": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "lpddtime", + "type": "LPDRAWDIBTIME" + } + ], + "DrawDibProfileDisplay": [ + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + } + ], + "AVIFileInit": [ + { + "name": "VOID", + "type": "void" + } + ], + "AVIFileExit": [ + { + "name": "VOID", + "type": "void" + } + ], + "AVIFileAddRef": [ + { + "name": "pfile", + "type": "PAVIFILE" + } + ], + "AVIFileRelease": [ + { + "name": "pfile", + "type": "PAVIFILE" + } + ], + "AVIFileOpenA": [ + { + "name": "ppfile", + "type": "PAVIFILE" + }, + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "uMode", + "type": "UINT" + }, + { + "name": "lpHandler", + "type": "LPCLSID" + } + ], + "AVIFileOpenW": [ + { + "name": "ppfile", + "type": "PAVIFILE" + }, + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "uMode", + "type": "UINT" + }, + { + "name": "lpHandler", + "type": "LPCLSID" + } + ], + "AVIFileInfoW": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "pfi", + "type": "LPAVIFILEINFOW" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIFileInfoA": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "pfi", + "type": "LPAVIFILEINFOA" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIFileGetStream": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG" + } + ], + "AVIFileCreateStreamW": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "AVISTREAMINFOW" + } + ], + "AVIFileCreateStreamA": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "AVISTREAMINFOA" + } + ], + "AVIFileWriteData": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ckid", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cbData", + "type": "LONG" + } + ], + "AVIFileReadData": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ckid", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpcbData", + "type": "LONG" + } + ], + "AVIFileEndRecord": [ + { + "name": "pfile", + "type": "PAVIFILE" + } + ], + "AVIStreamAddRef": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamRelease": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamInfoW": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "LPAVISTREAMINFOW" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIStreamInfoA": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "LPAVISTREAMINFOA" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIStreamFindSample": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lPos", + "type": "LONG" + }, + { + "name": "lFlags", + "type": "LONG" + } + ], + "AVIStreamReadFormat": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lPos", + "type": "LONG" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "lpcbFormat", + "type": "LONG" + } + ], + "AVIStreamSetFormat": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lPos", + "type": "LONG" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "cbFormat", + "type": "LONG" + } + ], + "AVIStreamReadData": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "fcc", + "type": "DWORD" + }, + { + "name": "lp", + "type": "LPVOID" + }, + { + "name": "lpcb", + "type": "LONG" + } + ], + "AVIStreamWriteData": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "fcc", + "type": "DWORD" + }, + { + "name": "lp", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "LONG" + } + ], + "AVIStreamRead": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lSamples", + "type": "LONG" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbBuffer", + "type": "LONG" + }, + { + "name": "plBytes", + "type": "LONG" + }, + { + "name": "plSamples", + "type": "LONG" + } + ], + "AVIStreamWrite": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lSamples", + "type": "LONG" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbBuffer", + "type": "LONG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "plSampWritten", + "type": "LONG" + }, + { + "name": "plBytesWritten", + "type": "LONG" + } + ], + "AVIStreamStart": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamLength": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamTimeToSample": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lTime", + "type": "LONG" + } + ], + "AVIStreamSampleToTime": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lSample", + "type": "LONG" + } + ], + "AVIStreamBeginStreaming": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lEnd", + "type": "LONG" + }, + { + "name": "lRate", + "type": "LONG" + } + ], + "AVIStreamEndStreaming": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamGetFrameOpen": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpbiWanted", + "type": "LPBITMAPINFOHEADER" + } + ], + "AVIStreamGetFrame": [ + { + "name": "pg", + "type": "PGETFRAME" + }, + { + "name": "lPos", + "type": "LONG" + } + ], + "AVIStreamGetFrameClose": [ + { + "name": "pg", + "type": "PGETFRAME" + } + ], + "AVIStreamOpenFromFileA": [ + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "mode", + "type": "UINT" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVIStreamOpenFromFileW": [ + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "mode", + "type": "UINT" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVIStreamCreate": [ + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "lParam1", + "type": "LONG" + }, + { + "name": "lParam2", + "type": "LONG" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVIMakeCompressedStream": [ + { + "name": "ppsCompressed", + "type": "PAVISTREAM" + }, + { + "name": "ppsSource", + "type": "PAVISTREAM" + }, + { + "name": "lpOptions", + "type": "AVICOMPRESSOPTIONS" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVISaveA": [ + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "pfile", + "type": "PAVISTREAM" + }, + { + "name": "lpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveVA": [ + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveW": [ + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "pfile", + "type": "PAVISTREAM" + }, + { + "name": "lpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveVW": [ + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveOptions": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveOptionsFree": [ + { + "name": "nStreams", + "type": "int" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVIBuildFilterW": [ + { + "name": "lpszFilter", + "type": "LPWSTR" + }, + { + "name": "cbFilter", + "type": "LONG" + }, + { + "name": "fSaving", + "type": "BOOL" + } + ], + "AVIBuildFilterA": [ + { + "name": "lpszFilter", + "type": "LPSTR" + }, + { + "name": "cbFilter", + "type": "LONG" + }, + { + "name": "fSaving", + "type": "BOOL" + } + ], + "AVIMakeFileFromStreams": [ + { + "name": "ppfile", + "type": "PAVIFILE" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "papStreams", + "type": "PAVISTREAM" + } + ], + "AVIMakeStreamFromClipboard": [ + { + "name": "cfFormat", + "type": "UINT" + }, + { + "name": "hGlobal", + "type": "HANDLE" + }, + { + "name": "ppstream", + "type": "PAVISTREAM" + } + ], + "AVIPutFileOnClipboard": [ + { + "name": "pf", + "type": "PAVIFILE" + } + ], + "AVIGetFromClipboard": [ + { + "name": "lppf", + "type": "PAVIFILE" + } + ], + "AVIClearClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateEditableStream": [ + { + "name": "ppsEditable", + "type": "PAVISTREAM" + }, + { + "name": "psSource", + "type": "PAVISTREAM" + } + ], + "EditStreamCut": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "plStart", + "type": "LONG" + }, + { + "name": "plLength", + "type": "LONG" + }, + { + "name": "ppResult", + "type": "PAVISTREAM" + } + ], + "EditStreamCopy": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "plStart", + "type": "LONG" + }, + { + "name": "plLength", + "type": "LONG" + }, + { + "name": "ppResult", + "type": "PAVISTREAM" + } + ], + "EditStreamPaste": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "plPos", + "type": "LONG" + }, + { + "name": "plLength", + "type": "LONG" + }, + { + "name": "pstream", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lEnd", + "type": "LONG" + } + ], + "EditStreamClone": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "ppResult", + "type": "PAVISTREAM" + } + ], + "EditStreamSetNameA": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpszName", + "type": "LPCSTR" + } + ], + "EditStreamSetNameW": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpszName", + "type": "LPCWSTR" + } + ], + "EditStreamSetInfoW": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpInfo", + "type": "LPAVISTREAMINFOW" + }, + { + "name": "cbInfo", + "type": "LONG" + } + ], + "EditStreamSetInfoA": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpInfo", + "type": "LPAVISTREAMINFOA" + }, + { + "name": "cbInfo", + "type": "LONG" + } + ], + "MCIWndCreateA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "MCIWndCreateW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "MCIWndRegisterClass": [ + { + "name": "VOID", + "type": "void" + } + ], + "capCreateCaptureWindowA": [ + { + "name": "lpszWindowName", + "type": "LPCSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + } + ], + "capGetDriverDescriptionA": [ + { + "name": "wDriverIndex", + "type": "UINT" + }, + { + "name": "lpszName", + "type": "LPSTR" + }, + { + "name": "cbName", + "type": "int" + }, + { + "name": "lpszVer", + "type": "LPSTR" + }, + { + "name": "cbVer", + "type": "int" + } + ], + "capCreateCaptureWindowW": [ + { + "name": "lpszWindowName", + "type": "LPCWSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + } + ], + "capGetDriverDescriptionW": [ + { + "name": "wDriverIndex", + "type": "UINT" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "cbName", + "type": "int" + }, + { + "name": "lpszVer", + "type": "LPWSTR" + }, + { + "name": "cbVer", + "type": "int" + } + ], + "GetOpenFileNamePreviewA": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEA" + } + ], + "GetSaveFileNamePreviewA": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEA" + } + ], + "GetOpenFileNamePreviewW": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEW" + } + ], + "GetSaveFileNamePreviewW": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEW" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/virtdisk.json b/qiling/extensions/windows_sdk/virtdisk.json new file mode 100644 index 000000000..a0185c244 --- /dev/null +++ b/qiling/extensions/windows_sdk/virtdisk.json @@ -0,0 +1,458 @@ +{ + "OpenVirtualDisk": [ + { + "name": "VirtualStorageType", + "type": "PVIRTUAL_STORAGE_TYPE" + }, + { + "name": "Path", + "type": "PCWSTR" + }, + { + "name": "VirtualDiskAccessMask", + "type": "VIRTUAL_DISK_ACCESS_MASK" + }, + { + "name": "Flags", + "type": "OPEN_VIRTUAL_DISK_FLAG" + }, + { + "name": "Parameters", + "type": "POPEN_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Handle", + "type": "PHANDLE" + } + ], + "CreateVirtualDisk": [ + { + "name": "VirtualStorageType", + "type": "PVIRTUAL_STORAGE_TYPE" + }, + { + "name": "Path", + "type": "PCWSTR" + }, + { + "name": "VirtualDiskAccessMask", + "type": "VIRTUAL_DISK_ACCESS_MASK" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "Flags", + "type": "CREATE_VIRTUAL_DISK_FLAG" + }, + { + "name": "ProviderSpecificFlags", + "type": "ULONG" + }, + { + "name": "Parameters", + "type": "PCREATE_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "Handle", + "type": "PHANDLE" + } + ], + "AttachVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "Flags", + "type": "ATTACH_VIRTUAL_DISK_FLAG" + }, + { + "name": "ProviderSpecificFlags", + "type": "ULONG" + }, + { + "name": "Parameters", + "type": "PATTACH_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "DetachVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DETACH_VIRTUAL_DISK_FLAG" + }, + { + "name": "ProviderSpecificFlags", + "type": "ULONG" + } + ], + "GetVirtualDiskPhysicalPath": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "DiskPathSizeInBytes", + "type": "PULONG" + }, + { + "name": "DiskPath", + "type": "PWSTR" + } + ], + "GetStorageDependencyInformation": [ + { + "name": "ObjectHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "GET_STORAGE_DEPENDENCY_FLAG" + }, + { + "name": "StorageDependencyInfoSize", + "type": "ULONG" + }, + { + "name": "StorageDependencyInfo", + "type": "PSTORAGE_DEPENDENCY_INFO" + }, + { + "name": "SizeUsed", + "type": "PULONG" + } + ], + "GetVirtualDiskInformation": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "VirtualDiskInfoSize", + "type": "PULONG" + }, + { + "name": "VirtualDiskInfo", + "type": "PGET_VIRTUAL_DISK_INFO" + }, + { + "name": "SizeUsed", + "type": "PULONG" + } + ], + "SetVirtualDiskInformation": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "VirtualDiskInfo", + "type": "PSET_VIRTUAL_DISK_INFO" + } + ], + "EnumerateVirtualDiskMetadata": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "NumberOfItems", + "type": "PULONG" + }, + { + "name": "Items", + "type": "GUID" + } + ], + "GetVirtualDiskMetadata": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Item", + "type": "GUID" + }, + { + "name": "MetaDataSize", + "type": "PULONG" + }, + { + "name": "MetaData", + "type": "PVOID" + } + ], + "SetVirtualDiskMetadata": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Item", + "type": "GUID" + }, + { + "name": "MetaDataSize", + "type": "ULONG" + }, + { + "name": "MetaData", + "type": "void" + } + ], + "DeleteVirtualDiskMetadata": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Item", + "type": "GUID" + } + ], + "GetVirtualDiskOperationProgress": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "Progress", + "type": "PVIRTUAL_DISK_PROGRESS" + } + ], + "CompactVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "COMPACT_VIRTUAL_DISK_FLAG" + }, + { + "name": "Parameters", + "type": "PCOMPACT_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "MergeVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "MERGE_VIRTUAL_DISK_FLAG" + }, + { + "name": "Parameters", + "type": "PMERGE_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "ExpandVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "EXPAND_VIRTUAL_DISK_FLAG" + }, + { + "name": "Parameters", + "type": "PEXPAND_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "ResizeVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "RESIZE_VIRTUAL_DISK_FLAG" + }, + { + "name": "Parameters", + "type": "PRESIZE_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "MirrorVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "MIRROR_VIRTUAL_DISK_FLAG" + }, + { + "name": "Parameters", + "type": "PMIRROR_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "BreakMirrorVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + } + ], + "AddVirtualDiskParent": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "ParentPath", + "type": "PCWSTR" + } + ], + "QueryChangesVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "ChangeTrackingId", + "type": "PCWSTR" + }, + { + "name": "ByteOffset", + "type": "ULONG64" + }, + { + "name": "ByteLength", + "type": "ULONG64" + }, + { + "name": "Flags", + "type": "QUERY_CHANGES_VIRTUAL_DISK_FLAG" + }, + { + "name": "Ranges", + "type": "PQUERY_CHANGES_VIRTUAL_DISK_RANGE" + }, + { + "name": "RangeCount", + "type": "PULONG" + }, + { + "name": "ProcessedLength", + "type": "PULONG64" + } + ], + "TakeSnapshotVhdSet": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Parameters", + "type": "PTAKE_SNAPSHOT_VHDSET_PARAMETERS" + }, + { + "name": "Flags", + "type": "TAKE_SNAPSHOT_VHDSET_FLAG" + } + ], + "DeleteSnapshotVhdSet": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Parameters", + "type": "PDELETE_SNAPSHOT_VHDSET_PARAMETERS" + }, + { + "name": "Flags", + "type": "DELETE_SNAPSHOT_VHDSET_FLAG" + } + ], + "ModifyVhdSet": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Parameters", + "type": "PMODIFY_VHDSET_PARAMETERS" + }, + { + "name": "Flags", + "type": "MODIFY_VHDSET_FLAG" + } + ], + "ApplySnapshotVhdSet": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Parameters", + "type": "PAPPLY_SNAPSHOT_VHDSET_PARAMETERS" + }, + { + "name": "Flags", + "type": "APPLY_SNAPSHOT_VHDSET_FLAG" + } + ], + "RawSCSIVirtualDisk": [ + { + "name": "VirtualDiskHandle", + "type": "HANDLE" + }, + { + "name": "Parameters", + "type": "PRAW_SCSI_VIRTUAL_DISK_PARAMETERS" + }, + { + "name": "Flags", + "type": "RAW_SCSI_VIRTUAL_DISK_FLAG" + }, + { + "name": "Response", + "type": "PRAW_SCSI_VIRTUAL_DISK_RESPONSE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wcmapi.json b/qiling/extensions/windows_sdk/wcmapi.json new file mode 100644 index 000000000..343f22aa6 --- /dev/null +++ b/qiling/extensions/windows_sdk/wcmapi.json @@ -0,0 +1,88 @@ +{ + "WcmQueryProperty": [ + { + "name": "pInterface", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "Property", + "type": "WCM_PROPERTY" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwDataSize", + "type": "PDWORD" + }, + { + "name": "ppData", + "type": "PBYTE" + } + ], + "WcmSetProperty": [ + { + "name": "pInterface", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "Property", + "type": "WCM_PROPERTY" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + } + ], + "WcmGetProfileList": [ + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppProfileList", + "type": "WCM_PROFILE_INFO_LIST" + } + ], + "WcmSetProfileList": [ + { + "name": "pProfileList", + "type": "WCM_PROFILE_INFO_LIST" + }, + { + "name": "dwPosition", + "type": "DWORD" + }, + { + "name": "fIgnoreUnknownProfiles", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WcmFreeMemory": [ + { + "name": "pMemory", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wct.json b/qiling/extensions/windows_sdk/wct.json new file mode 100644 index 000000000..9b7afa768 --- /dev/null +++ b/qiling/extensions/windows_sdk/wct.json @@ -0,0 +1,58 @@ +{ + "OpenThreadWaitChainSession": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "callback", + "type": "PWAITCHAINCALLBACK" + } + ], + "CloseThreadWaitChainSession": [ + { + "name": "WctHandle", + "type": "HWCT" + } + ], + "GetThreadWaitChain": [ + { + "name": "WctHandle", + "type": "HWCT" + }, + { + "name": "Context", + "type": "DWORD_PTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ThreadId", + "type": "DWORD" + }, + { + "name": "NodeCount", + "type": "LPDWORD" + }, + { + "name": "NodeInfoArray", + "type": "PWAITCHAIN_NODE_INFO" + }, + { + "name": "IsCycle", + "type": "LPBOOL" + } + ], + "RegisterWaitChainCOMCallback": [ + { + "name": "CallStateCallback", + "type": "PCOGETCALLSTATE" + }, + { + "name": "ActivationStateCallback", + "type": "PCOGETACTIVATIONSTATE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wdsbp.json b/qiling/extensions/windows_sdk/wdsbp.json new file mode 100644 index 000000000..f2928a548 --- /dev/null +++ b/qiling/extensions/windows_sdk/wdsbp.json @@ -0,0 +1,112 @@ +{ + "WdsBpParseInitialize": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "pbPacketType", + "type": "PBYTE" + }, + { + "name": "phHandle", + "type": "HANDLE" + } + ], + "WdsBpParseInitializev6": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "pbPacketType", + "type": "PBYTE" + }, + { + "name": "phHandle", + "type": "HANDLE" + } + ], + "WdsBpInitialize": [ + { + "name": "bPacketType", + "type": "BYTE" + }, + { + "name": "phHandle", + "type": "HANDLE" + } + ], + "WdsBpCloseHandle": [ + { + "name": "hHandle", + "type": "HANDLE" + } + ], + "WdsBpQueryOption": [ + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "uOption", + "type": "ULONG" + }, + { + "name": "uValueLen", + "type": "ULONG" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "puBytes", + "type": "PULONG" + } + ], + "WdsBpAddOption": [ + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "uOption", + "type": "ULONG" + }, + { + "name": "uValueLen", + "type": "ULONG" + }, + { + "name": "pValue", + "type": "PVOID" + } + ], + "WdsBpGetOptionBuffer": [ + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "uBufferLen", + "type": "ULONG" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "puBytes", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wdsclientapi.json b/qiling/extensions/windows_sdk/wdsclientapi.json new file mode 100644 index 000000000..662e9018b --- /dev/null +++ b/qiling/extensions/windows_sdk/wdsclientapi.json @@ -0,0 +1,400 @@ +{ + "WdsCliClose": [ + { + "name": "Handle", + "type": "HANDLE" + } + ], + "WdsCliRegisterTrace": [ + { + "name": "pfn", + "type": "PFN_WdsCliTraceFunction" + } + ], + "WdsCliFreeStringArray": [ + { + "name": "ppwszArray", + "type": "PWSTR" + }, + { + "name": "ulCount", + "type": "ULONG" + } + ], + "WdsCliFindFirstImage": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "phFindHandle", + "type": "PHANDLE" + } + ], + "WdsCliFindNextImage": [ + { + "name": "Handle", + "type": "HANDLE" + } + ], + "WdsCliGetEnumerationFlags": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "pdwFlags", + "type": "PDWORD" + } + ], + "WdsCliGetImageHandleFromFindHandle": [ + { + "name": "FindHandle", + "type": "HANDLE" + }, + { + "name": "phImageHandle", + "type": "PHANDLE" + } + ], + "WdsCliGetImageHandleFromTransferHandle": [ + { + "name": "hTransfer", + "type": "HANDLE" + }, + { + "name": "phImageHandle", + "type": "PHANDLE" + } + ], + "WdsCliCreateSession": [ + { + "name": "pwszServer", + "type": "PWSTR" + }, + { + "name": "pCred", + "type": "PWDS_CLI_CRED" + }, + { + "name": "phSession", + "type": "PHANDLE" + } + ], + "WdsCliAuthorizeSession": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "pCred", + "type": "PWDS_CLI_CRED" + } + ], + "WdsCliInitializeLog": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "ulClientArchitecture", + "type": "ULONG" + }, + { + "name": "pwszClientId", + "type": "PWSTR" + }, + { + "name": "pwszClientAddress", + "type": "PWSTR" + } + ], + "WdsCliLog": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "ulLogLevel", + "type": "ULONG" + }, + { + "name": "ulMessageCode", + "type": "ULONG" + } + ], + "WdsCliGetImageName": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImageDescription": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImageLanguage": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImageLanguages": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "pppszValues", + "type": "PTSTR" + }, + { + "name": "pdwNumValues", + "type": "PDWORD" + } + ], + "WdsCliGetImageVersion": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImagePath": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImageIndex": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "pdwValue", + "type": "PDWORD" + } + ], + "WdsCliGetImageArchitecture": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "pdwValue", + "type": "PDWORD" + } + ], + "WdsCliGetImageLastModifiedTime": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppSysTimeValue", + "type": "PSYSTEMTIME" + } + ], + "WdsCliGetImageSize": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "pullValue", + "type": "PULONGLONG" + } + ], + "WdsCliGetImageHalName": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImageGroup": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetImageNamespace": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "WdsCliGetTransferSize": [ + { + "name": "hIfh", + "type": "HANDLE" + }, + { + "name": "pullValue", + "type": "PULONGLONG" + } + ], + "WdsCliTransferImage": [ + { + "name": "hImage", + "type": "HANDLE" + }, + { + "name": "pwszLocalPath", + "type": "PWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pfnWdsCliCallback", + "type": "PFN_WdsCliCallback" + }, + { + "name": "pvUserData", + "type": "PVOID" + }, + { + "name": "phTransfer", + "type": "PHANDLE" + } + ], + "WdsCliTransferFile": [ + { + "name": "pwszServer", + "type": "PCWSTR" + }, + { + "name": "pwszNamespace", + "type": "PCWSTR" + }, + { + "name": "pwszRemoteFilePath", + "type": "PCWSTR" + }, + { + "name": "pwszLocalFilePath", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pfnWdsCliCallback", + "type": "PFN_WdsCliCallback" + }, + { + "name": "pvUserData", + "type": "PVOID" + }, + { + "name": "phTransfer", + "type": "PHANDLE" + } + ], + "WdsCliCancelTransfer": [ + { + "name": "hTransfer", + "type": "HANDLE" + } + ], + "WdsCliWaitForTransfer": [ + { + "name": "hTransfer", + "type": "HANDLE" + } + ], + "WdsCliObtainDriverPackages": [ + { + "name": "hImage", + "type": "HANDLE" + }, + { + "name": "ppwszServerName", + "type": "PWSTR" + }, + { + "name": "pppwszDriverPackages", + "type": "PWSTR" + }, + { + "name": "pulCount", + "type": "ULONG" + } + ], + "WdsCliObtainDriverPackagesEx": [ + { + "name": "hSession", + "type": "HANDLE" + }, + { + "name": "pwszMachineInfo", + "type": "PWSTR" + }, + { + "name": "ppwszServerName", + "type": "PWSTR" + }, + { + "name": "pppwszDriverPackages", + "type": "PWSTR" + }, + { + "name": "pulCount", + "type": "ULONG" + } + ], + "WdsCliGetDriverQueryXml": [ + { + "name": "pwszWinDirPath", + "type": "PWSTR" + }, + { + "name": "ppwszDriverQuery", + "type": "PWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wdspxe.json b/qiling/extensions/windows_sdk/wdspxe.json new file mode 100644 index 000000000..dbb338207 --- /dev/null +++ b/qiling/extensions/windows_sdk/wdspxe.json @@ -0,0 +1,550 @@ +{ + "PxeProviderRegister": [ + { + "name": "pszProviderName", + "type": "LPCWSTR" + }, + { + "name": "pszModulePath", + "type": "LPCWSTR" + }, + { + "name": "Index", + "type": "PXE_REG_INDEX" + }, + { + "name": "bIsCritical", + "type": "BOOL" + }, + { + "name": "phProviderKey", + "type": "PHKEY" + } + ], + "PxeProviderUnRegister": [ + { + "name": "pszProviderName", + "type": "LPCWSTR" + } + ], + "PxeProviderQueryIndex": [ + { + "name": "pszProviderName", + "type": "LPCWSTR" + }, + { + "name": "puIndex", + "type": "PULONG" + } + ], + "PxeProviderEnumFirst": [ + { + "name": "phEnum", + "type": "HANDLE" + } + ], + "PxeProviderEnumNext": [ + { + "name": "hEnum", + "type": "HANDLE" + }, + { + "name": "ppProvider", + "type": "PPXE_PROVIDER" + } + ], + "PxeProviderEnumClose": [ + { + "name": "hEnum", + "type": "HANDLE" + } + ], + "PxeProviderFreeInfo": [ + { + "name": "pProvider", + "type": "PPXE_PROVIDER" + } + ], + "PxeRegisterCallback": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "CallbackType", + "type": "PXE_CALLBACK_TYPE" + }, + { + "name": "pCallbackFunction", + "type": "PVOID" + }, + { + "name": "pContext", + "type": "PVOID" + } + ], + "PxeSendReply": [ + { + "name": "hClientRequest", + "type": "HANDLE" + }, + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "pAddress", + "type": "PXE_ADDRESS" + } + ], + "PxeAsyncRecvDone": [ + { + "name": "hClientRequest", + "type": "HANDLE" + }, + { + "name": "Action", + "type": "PXE_BOOT_ACTION" + } + ], + "PxeTrace": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "Severity", + "type": "PXE_SEVERITY" + }, + { + "name": "pszFormat", + "type": "LPCWSTR" + } + ], + "PxePacketAllocate": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "hClientRequest", + "type": "HANDLE" + }, + { + "name": "uSize", + "type": "ULONG" + } + ], + "PxePacketFree": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "hClientRequest", + "type": "HANDLE" + }, + { + "name": "pPacket", + "type": "PVOID" + } + ], + "PxeProviderSetAttribute": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "Attribute", + "type": "PXE_PROVIDER_ATTRIBUTE" + }, + { + "name": "pParameterBuffer", + "type": "PVOID" + }, + { + "name": "uParamLen", + "type": "ULONG" + } + ], + "PxeDhcpInitialize": [ + { + "name": "pRecvPacket", + "type": "PVOID" + }, + { + "name": "uRecvPacketLen", + "type": "ULONG" + }, + { + "name": "pReplyPacket", + "type": "PVOID" + }, + { + "name": "uMaxReplyPacketLen", + "type": "ULONG" + }, + { + "name": "puReplyPacketLen", + "type": "PULONG" + } + ], + "PxeDhcpv6Initialize": [ + { + "name": "pRequest", + "type": "PVOID" + }, + { + "name": "cbRequest", + "type": "ULONG" + }, + { + "name": "pReply", + "type": "PVOID" + }, + { + "name": "cbReply", + "type": "ULONG" + }, + { + "name": "pcbReplyUsed", + "type": "PULONG" + } + ], + "PxeDhcpAppendOption": [ + { + "name": "pReplyPacket", + "type": "PVOID" + }, + { + "name": "uMaxReplyPacketLen", + "type": "ULONG" + }, + { + "name": "puReplyPacketLen", + "type": "PULONG" + }, + { + "name": "bOption", + "type": "BYTE" + }, + { + "name": "bOptionLen", + "type": "BYTE" + }, + { + "name": "pValue", + "type": "PVOID" + } + ], + "PxeDhcpv6AppendOption": [ + { + "name": "pReply", + "type": "PVOID" + }, + { + "name": "cbReply", + "type": "ULONG" + }, + { + "name": "pcbReplyUsed", + "type": "PULONG" + }, + { + "name": "wOptionType", + "type": "WORD" + }, + { + "name": "cbOption", + "type": "WORD" + }, + { + "name": "pOption", + "type": "PVOID" + } + ], + "PxeDhcpAppendOptionRaw": [ + { + "name": "pReplyPacket", + "type": "PVOID" + }, + { + "name": "uMaxReplyPacketLen", + "type": "ULONG" + }, + { + "name": "puReplyPacketLen", + "type": "PULONG" + }, + { + "name": "uBufferLen", + "type": "USHORT" + }, + { + "name": "pBuffer", + "type": "PVOID" + } + ], + "PxeDhcpv6AppendOptionRaw": [ + { + "name": "pReply", + "type": "PVOID" + }, + { + "name": "cbReply", + "type": "ULONG" + }, + { + "name": "pcbReplyUsed", + "type": "PULONG" + }, + { + "name": "cbBuffer", + "type": "USHORT" + }, + { + "name": "pBuffer", + "type": "PVOID" + } + ], + "PxeDhcpIsValid": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "bRequestPacket", + "type": "BOOL" + }, + { + "name": "pbPxeOptionPresent", + "type": "PBOOL" + } + ], + "PxeDhcpv6IsValid": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "bRequestPacket", + "type": "BOOL" + }, + { + "name": "pbPxeOptionPresent", + "type": "PBOOL" + } + ], + "PxeDhcpGetOptionValue": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "uInstance", + "type": "ULONG" + }, + { + "name": "bOption", + "type": "BYTE" + }, + { + "name": "pbOptionLen", + "type": "PBYTE" + }, + { + "name": "ppOptionValue", + "type": "PVOID" + } + ], + "PxeDhcpv6GetOptionValue": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "uInstance", + "type": "ULONG" + }, + { + "name": "wOption", + "type": "WORD" + }, + { + "name": "pwOptionLen", + "type": "PWORD" + }, + { + "name": "ppOptionValue", + "type": "PVOID" + } + ], + "PxeDhcpGetVendorOptionValue": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "bOption", + "type": "BYTE" + }, + { + "name": "uInstance", + "type": "ULONG" + }, + { + "name": "pbOptionLen", + "type": "PBYTE" + }, + { + "name": "ppOptionValue", + "type": "PVOID" + } + ], + "PxeDhcpv6GetVendorOptionValue": [ + { + "name": "pPacket", + "type": "PVOID" + }, + { + "name": "uPacketLen", + "type": "ULONG" + }, + { + "name": "dwEnterpriseNumber", + "type": "DWORD" + }, + { + "name": "wOption", + "type": "WORD" + }, + { + "name": "uInstance", + "type": "ULONG" + }, + { + "name": "pwOptionLen", + "type": "PWORD" + }, + { + "name": "ppOptionValue", + "type": "PVOID" + } + ], + "PxeDhcpv6ParseRelayForw": [ + { + "name": "pRelayForwPacket", + "type": "PVOID" + }, + { + "name": "uRelayForwPacketLen", + "type": "ULONG" + }, + { + "name": "pRelayMessages", + "type": "PPXE_DHCPV6_NESTED_RELAY_MESSAGE" + }, + { + "name": "nRelayMessages", + "type": "ULONG" + }, + { + "name": "pnRelayMessages", + "type": "PULONG" + }, + { + "name": "ppInnerPacket", + "type": "PBYTE" + }, + { + "name": "pcbInnerPacket", + "type": "PULONG" + } + ], + "PxeDhcpv6CreateRelayRepl": [ + { + "name": "pRelayMessages", + "type": "PPXE_DHCPV6_NESTED_RELAY_MESSAGE" + }, + { + "name": "nRelayMessages", + "type": "ULONG" + }, + { + "name": "pInnerPacket", + "type": "PBYTE" + }, + { + "name": "cbInnerPacket", + "type": "ULONG" + }, + { + "name": "pReplyBuffer", + "type": "PVOID" + }, + { + "name": "cbReplyBuffer", + "type": "ULONG" + }, + { + "name": "pcbReplyBuffer", + "type": "PULONG" + } + ], + "PxeGetServerInfo": [ + { + "name": "uInfoType", + "type": "PXE_GSI_TYPE" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "uBufferLen", + "type": "ULONG" + } + ], + "PxeGetServerInfoEx": [ + { + "name": "uInfoType", + "type": "PXE_GSI_TYPE" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "uBufferLen", + "type": "ULONG" + }, + { + "name": "puBufferUsed", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wdstci.json b/qiling/extensions/windows_sdk/wdstci.json new file mode 100644 index 000000000..dcaf43289 --- /dev/null +++ b/qiling/extensions/windows_sdk/wdstci.json @@ -0,0 +1,110 @@ +{ + "WdsTransportClientInitialize": [ + { + "name": "VOID", + "type": "void" + } + ], + "WdsTransportClientInitializeSession": [ + { + "name": "pSessionRequest", + "type": "PWDS_TRANSPORTCLIENT_REQUEST" + }, + { + "name": "pCallerData", + "type": "PVOID" + }, + { + "name": "hSessionKey", + "type": "PHANDLE" + } + ], + "WdsTransportClientRegisterCallback": [ + { + "name": "hSessionKey", + "type": "HANDLE" + }, + { + "name": "CallbackId", + "type": "TRANSPORTCLIENT_CALLBACK_ID" + }, + { + "name": "pfnCallback", + "type": "PVOID" + } + ], + "WdsTransportClientStartSession": [ + { + "name": "hSessionKey", + "type": "HANDLE" + } + ], + "WdsTransportClientCompleteReceive": [ + { + "name": "hSessionKey", + "type": "HANDLE" + }, + { + "name": "ulSize", + "type": "ULONG" + }, + { + "name": "pullOffset", + "type": "PULARGE_INTEGER" + } + ], + "WdsTransportClientCancelSession": [ + { + "name": "hSessionKey", + "type": "HANDLE" + } + ], + "WdsTransportClientWaitForCompletion": [ + { + "name": "hSessionKey", + "type": "HANDLE" + }, + { + "name": "uTimeout", + "type": "ULONG" + } + ], + "WdsTransportClientQueryStatus": [ + { + "name": "hSessionKey", + "type": "HANDLE" + }, + { + "name": "puStatus", + "type": "PULONG" + }, + { + "name": "puErrorCode", + "type": "PULONG" + } + ], + "WdsTransportClientCloseSession": [ + { + "name": "hSessionKey", + "type": "HANDLE" + } + ], + "WdsTransportClientAddRefBuffer": [ + { + "name": "pvBuffer", + "type": "PVOID" + } + ], + "WdsTransportClientReleaseBuffer": [ + { + "name": "pvBuffer", + "type": "PVOID" + } + ], + "WdsTransportClientShutdown": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wdstpdi.json b/qiling/extensions/windows_sdk/wdstpdi.json new file mode 100644 index 000000000..5d51f2b31 --- /dev/null +++ b/qiling/extensions/windows_sdk/wdstpdi.json @@ -0,0 +1,86 @@ +{ + "WdsTransportServerRegisterCallback": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "CallbackId", + "type": "TRANSPORTPROVIDER_CALLBACK_ID" + }, + { + "name": "pfnCallback", + "type": "PVOID" + } + ], + "WdsTransportServerCompleteRead": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "ulBytesRead", + "type": "ULONG" + }, + { + "name": "pvUserData", + "type": "PVOID" + }, + { + "name": "hReadResult", + "type": "HRESULT" + } + ], + "WdsTransportServerTrace": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "Severity", + "type": "WDS_MC_SEVERITY" + }, + { + "name": "pwszFormat", + "type": "LPCWSTR" + } + ], + "WdsTransportServerTraceV": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "Severity", + "type": "WDS_MC_SEVERITY" + }, + { + "name": "pwszFormat", + "type": "LPCWSTR" + }, + { + "name": "Params", + "type": "va_list" + } + ], + "WdsTransportServerAllocateBuffer": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "ulBufferSize", + "type": "ULONG" + } + ], + "WdsTransportServerFreeBuffer": [ + { + "name": "hProvider", + "type": "HANDLE" + }, + { + "name": "pvBuffer", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/websocket.json b/qiling/extensions/windows_sdk/websocket.json new file mode 100644 index 000000000..a75425f6b --- /dev/null +++ b/qiling/extensions/windows_sdk/websocket.json @@ -0,0 +1,240 @@ +{ + "WebSocketCreateClientHandle": [ + { + "name": "pProperties", + "type": "PWEB_SOCKET_PROPERTY" + }, + { + "name": "ulPropertyCount", + "type": "ULONG" + }, + { + "name": "phWebSocket", + "type": "WEB_SOCKET_HANDLE" + } + ], + "WebSocketBeginClientHandshake": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "pszSubprotocols", + "type": "PCSTR" + }, + { + "name": "ulSubprotocolCount", + "type": "ULONG" + }, + { + "name": "pszExtensions", + "type": "PCSTR" + }, + { + "name": "ulExtensionCount", + "type": "ULONG" + }, + { + "name": "pInitialHeaders", + "type": "PWEB_SOCKET_HTTP_HEADER" + }, + { + "name": "ulInitialHeaderCount", + "type": "ULONG" + }, + { + "name": "pAdditionalHeaders", + "type": "PWEB_SOCKET_HTTP_HEADER" + }, + { + "name": "pulAdditionalHeaderCount", + "type": "ULONG" + } + ], + "WebSocketEndClientHandshake": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "pResponseHeaders", + "type": "PWEB_SOCKET_HTTP_HEADER" + }, + { + "name": "ulReponseHeaderCount", + "type": "ULONG" + }, + { + "name": "pulSelectedExtensions", + "type": "ULONG" + }, + { + "name": "pulSelectedExtensionCount", + "type": "ULONG" + }, + { + "name": "pulSelectedSubprotocol", + "type": "ULONG" + } + ], + "WebSocketCreateServerHandle": [ + { + "name": "pProperties", + "type": "PWEB_SOCKET_PROPERTY" + }, + { + "name": "ulPropertyCount", + "type": "ULONG" + }, + { + "name": "phWebSocket", + "type": "WEB_SOCKET_HANDLE" + } + ], + "WebSocketBeginServerHandshake": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "pszSubprotocolSelected", + "type": "PCSTR" + }, + { + "name": "pszExtensionSelected", + "type": "PCSTR" + }, + { + "name": "ulExtensionSelectedCount", + "type": "ULONG" + }, + { + "name": "pRequestHeaders", + "type": "PWEB_SOCKET_HTTP_HEADER" + }, + { + "name": "ulRequestHeaderCount", + "type": "ULONG" + }, + { + "name": "pResponseHeaders", + "type": "PWEB_SOCKET_HTTP_HEADER" + }, + { + "name": "pulResponseHeaderCount", + "type": "ULONG" + } + ], + "WebSocketEndServerHandshake": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + } + ], + "WebSocketSend": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "BufferType", + "type": "WEB_SOCKET_BUFFER_TYPE" + }, + { + "name": "pBuffer", + "type": "WEB_SOCKET_BUFFER" + }, + { + "name": "Context", + "type": "PVOID" + } + ], + "WebSocketReceive": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "pBuffer", + "type": "WEB_SOCKET_BUFFER" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "WebSocketGetAction": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "eActionQueue", + "type": "WEB_SOCKET_ACTION_QUEUE" + }, + { + "name": "pDataBuffers", + "type": "WEB_SOCKET_BUFFER" + }, + { + "name": "pulDataBufferCount", + "type": "ULONG" + }, + { + "name": "pAction", + "type": "WEB_SOCKET_ACTION" + }, + { + "name": "pBufferType", + "type": "WEB_SOCKET_BUFFER_TYPE" + }, + { + "name": "pvApplicationContext", + "type": "PVOID" + }, + { + "name": "pvActionContext", + "type": "PVOID" + } + ], + "WebSocketCompleteAction": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + }, + { + "name": "pvActionContext", + "type": "PVOID" + }, + { + "name": "ulBytesTransferred", + "type": "ULONG" + } + ], + "WebSocketAbortHandle": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + } + ], + "WebSocketDeleteHandle": [ + { + "name": "hWebSocket", + "type": "WEB_SOCKET_HANDLE" + } + ], + "WebSocketGetGlobalProperty": [ + { + "name": "eType", + "type": "WEB_SOCKET_PROPERTY_TYPE" + }, + { + "name": "pvValue", + "type": "PVOID" + }, + { + "name": "ulSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/werapi.json b/qiling/extensions/windows_sdk/werapi.json new file mode 100644 index 000000000..c60b76b05 --- /dev/null +++ b/qiling/extensions/windows_sdk/werapi.json @@ -0,0 +1,320 @@ +{ + "WerReportCreate": [ + { + "name": "pwzEventType", + "type": "PCWSTR" + }, + { + "name": "repType", + "type": "WER_REPORT_TYPE" + }, + { + "name": "pReportInformation", + "type": "PWER_REPORT_INFORMATION" + }, + { + "name": "phReportHandle", + "type": "HREPORT" + } + ], + "WerReportSetParameter": [ + { + "name": "hReportHandle", + "type": "HREPORT" + }, + { + "name": "dwparamID", + "type": "DWORD" + }, + { + "name": "pwzName", + "type": "PCWSTR" + }, + { + "name": "pwzValue", + "type": "PCWSTR" + } + ], + "WerReportAddFile": [ + { + "name": "hReportHandle", + "type": "HREPORT" + }, + { + "name": "pwzPath", + "type": "PCWSTR" + }, + { + "name": "repFileType", + "type": "WER_FILE_TYPE" + }, + { + "name": "dwFileFlags", + "type": "DWORD" + } + ], + "WerReportSetUIOption": [ + { + "name": "hReportHandle", + "type": "HREPORT" + }, + { + "name": "repUITypeID", + "type": "WER_REPORT_UI" + }, + { + "name": "pwzValue", + "type": "PCWSTR" + } + ], + "WerReportSubmit": [ + { + "name": "hReportHandle", + "type": "HREPORT" + }, + { + "name": "consent", + "type": "WER_CONSENT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pSubmitResult", + "type": "PWER_SUBMIT_RESULT" + } + ], + "WerReportAddDump": [ + { + "name": "hReportHandle", + "type": "HREPORT" + }, + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dumpType", + "type": "WER_DUMP_TYPE" + }, + { + "name": "pExceptionParam", + "type": "PWER_EXCEPTION_INFORMATION" + }, + { + "name": "pDumpCustomOptions", + "type": "PWER_DUMP_CUSTOM_OPTIONS" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WerReportCloseHandle": [ + { + "name": "hReportHandle", + "type": "HREPORT" + } + ], + "WerRegisterFile": [ + { + "name": "pwzFile", + "type": "PCWSTR" + }, + { + "name": "regFileType", + "type": "WER_REGISTER_FILE_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WerUnregisterFile": [ + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "WerRegisterMemoryBlock": [ + { + "name": "pvAddress", + "type": "PVOID" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "WerUnregisterMemoryBlock": [ + { + "name": "pvAddress", + "type": "PVOID" + } + ], + "WerRegisterExcludedMemoryBlock": [ + { + "name": "address", + "type": "void" + }, + { + "name": "size", + "type": "DWORD" + } + ], + "WerUnregisterExcludedMemoryBlock": [ + { + "name": "address", + "type": "void" + } + ], + "WerRegisterCustomMetadata": [ + { + "name": "key", + "type": "PCWSTR" + }, + { + "name": "value", + "type": "PCWSTR" + } + ], + "WerRegisterAdditionalProcess": [ + { + "name": "processId", + "type": "DWORD" + }, + { + "name": "captureExtraInfoForThreadId", + "type": "DWORD" + } + ], + "WerUnregisterAdditionalProcess": [ + { + "name": "processId", + "type": "DWORD" + } + ], + "WerRegisterAppLocalDump": [ + { + "name": "localAppDataRelativePath", + "type": "PCWSTR" + } + ], + "WerSetFlags": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WerGetFlags": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pdwFlags", + "type": "PDWORD" + } + ], + "WerAddExcludedApplication": [ + { + "name": "pwzExeName", + "type": "PCWSTR" + }, + { + "name": "bAllUsers", + "type": "BOOL" + } + ], + "WerRemoveExcludedApplication": [ + { + "name": "pwzExeName", + "type": "PCWSTR" + }, + { + "name": "bAllUsers", + "type": "BOOL" + } + ], + "WerRegisterRuntimeExceptionModule": [ + { + "name": "pwszOutOfProcessCallbackDll", + "type": "PCWSTR" + }, + { + "name": "pContext", + "type": "PVOID" + } + ], + "WerUnregisterRuntimeExceptionModule": [ + { + "name": "pwszOutOfProcessCallbackDll", + "type": "PCWSTR" + }, + { + "name": "pContext", + "type": "PVOID" + } + ], + "WerStoreOpen": [ + { + "name": "repStoreType", + "type": "REPORT_STORE_TYPES" + }, + { + "name": "phReportStore", + "type": "PHREPORTSTORE" + } + ], + "WerStoreClose": [ + { + "name": "hReportStore", + "type": "HREPORTSTORE" + } + ], + "WerStoreGetFirstReportKey": [ + { + "name": "hReportStore", + "type": "HREPORTSTORE" + }, + { + "name": "ppszReportKey", + "type": "PCWSTR" + } + ], + "WerStoreGetNextReportKey": [ + { + "name": "hReportStore", + "type": "HREPORTSTORE" + }, + { + "name": "ppszReportKey", + "type": "PCWSTR" + } + ], + "WerStoreQueryReportMetadataV2": [ + { + "name": "hReportStore", + "type": "HREPORTSTORE" + }, + { + "name": "pszReportKey", + "type": "PCWSTR" + }, + { + "name": "pReportMetadata", + "type": "PWER_REPORT_METADATA_V2" + } + ], + "WerFreeString": [ + { + "name": "pwszStr", + "type": "PCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wia_xp.json b/qiling/extensions/windows_sdk/wia_xp.json new file mode 100644 index 000000000..a452ee800 --- /dev/null +++ b/qiling/extensions/windows_sdk/wia_xp.json @@ -0,0 +1,50 @@ +{ + "LPSAFEARRAY_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "LPSAFEARRAY" + } + ], + "LPSAFEARRAY_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "LPSAFEARRAY" + } + ], + "LPSAFEARRAY_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "LPSAFEARRAY" + } + ], + "LPSAFEARRAY_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "LPSAFEARRAY" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winbase.json b/qiling/extensions/windows_sdk/winbase.json new file mode 100644 index 000000000..60f5a5cd4 --- /dev/null +++ b/qiling/extensions/windows_sdk/winbase.json @@ -0,0 +1,7596 @@ +{ + "GetEnvironmentVariableA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetEnvironmentVariableW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "SetEnvironmentVariableA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpValue", + "type": "LPCSTR" + } + ], + "SetEnvironmentVariableW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + } + ], + "SetCurrentDirectoryA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + } + ], + "SetCurrentDirectoryW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + } + ], + "GetCurrentDirectoryA": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + } + ], + "GetCurrentDirectoryW": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + } + ], + "CreateDirectoryA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDirectoryW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "DefineDosDeviceW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDeviceName", + "type": "LPCWSTR" + }, + { + "name": "lpTargetPath", + "type": "LPCWSTR" + } + ], + "DeleteFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "DeleteFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "DeleteVolumeMountPointW": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCWSTR" + } + ], + "FindFirstVolumeW": [ + { + "name": "lpszVolumeName", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindNextVolumeW": [ + { + "name": "hFindVolume", + "type": "HANDLE" + }, + { + "name": "lpszVolumeName", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "GetLogicalDriveStringsW": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + } + ], + "GetShortPathNameW": [ + { + "name": "lpszLongPath", + "type": "LPCWSTR" + }, + { + "name": "lpszShortPath", + "type": "LPWSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + } + ], + "GetTempFileNameW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + }, + { + "name": "lpPrefixString", + "type": "LPCWSTR" + }, + { + "name": "uUnique", + "type": "UINT" + }, + { + "name": "lpTempFileName", + "type": "LPWSTR" + } + ], + "GetVolumePathNameW": [ + { + "name": "lpszFileName", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumePathName", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "QueryDosDeviceW": [ + { + "name": "lpDeviceName", + "type": "LPCWSTR" + }, + { + "name": "lpTargetPath", + "type": "LPWSTR" + }, + { + "name": "ucchMax", + "type": "DWORD" + } + ], + "GetVolumeNameForVolumeMountPointW": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumeName", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "GetVolumePathNamesForVolumeNameW": [ + { + "name": "lpszVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumePathNames", + "type": "LPWCH" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + }, + { + "name": "lpcchReturnLength", + "type": "PDWORD" + } + ], + "GetTempFileNameA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "lpPrefixString", + "type": "LPCSTR" + }, + { + "name": "uUnique", + "type": "UINT" + }, + { + "name": "lpTempFileName", + "type": "LPSTR" + } + ], + "CreateNamedPipeW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwOpenMode", + "type": "DWORD" + }, + { + "name": "dwPipeMode", + "type": "DWORD" + }, + { + "name": "nMaxInstances", + "type": "DWORD" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "nDefaultTimeOut", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "WaitNamedPipeW": [ + { + "name": "lpNamedPipeName", + "type": "LPCWSTR" + }, + { + "name": "nTimeOut", + "type": "DWORD" + } + ], + "GetNamedPipeClientComputerNameW": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ClientComputerName", + "type": "LPWSTR" + }, + { + "name": "ClientComputerNameLength", + "type": "ULONG" + } + ], + "GetNamedPipeHandleStateW": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpState", + "type": "LPDWORD" + }, + { + "name": "lpCurInstances", + "type": "LPDWORD" + }, + { + "name": "lpMaxCollectionCount", + "type": "LPDWORD" + }, + { + "name": "lpCollectDataTimeout", + "type": "LPDWORD" + }, + { + "name": "lpUserName", + "type": "LPWSTR" + }, + { + "name": "nMaxUserNameSize", + "type": "DWORD" + } + ], + "CallNamedPipeW": [ + { + "name": "lpNamedPipeName", + "type": "LPCWSTR" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesRead", + "type": "LPDWORD" + }, + { + "name": "nTimeOut", + "type": "DWORD" + } + ], + "CreateSemaphoreExW": [ + { + "name": "lpSemaphoreAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lInitialCount", + "type": "LONG" + }, + { + "name": "lMaximumCount", + "type": "LONG" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateSemaphoreW": [ + { + "name": "lpSemaphoreAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lInitialCount", + "type": "LONG" + }, + { + "name": "lMaximumCount", + "type": "LONG" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "CreateFileMappingW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileMappingAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeHigh", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeLow", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenFileMappingW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "CreateFileMappingNumaW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileMappingAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeHigh", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeLow", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "CreateJobObjectW": [ + { + "name": "lpJobAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenJobObjectW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "Wow64GetThreadContext": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpContext", + "type": "PWOW64_CONTEXT" + } + ], + "Wow64SetThreadContext": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpContext", + "type": "WOW64_CONTEXT" + } + ], + "Wow64SuspendThread": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "FindResourceExW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "wLanguage", + "type": "WORD" + } + ], + "FindResourceW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpType", + "type": "LPCWSTR" + } + ], + "EnumResourceNamesW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESNAMEPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "AccessCheckAndAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPWSTR" + }, + { + "name": "ObjectName", + "type": "LPWSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeAndAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPCWSTR" + }, + { + "name": "ObjectName", + "type": "LPCWSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultListAndAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPCWSTR" + }, + { + "name": "ObjectName", + "type": "LPCWSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccessList", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultListAndAuditAlarmByHandleW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "ObjectTypeName", + "type": "LPCWSTR" + }, + { + "name": "ObjectName", + "type": "LPCWSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccessList", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "GetFileSecurityW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "ObjectCloseAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "GenerateOnClose", + "type": "BOOL" + } + ], + "ObjectDeleteAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "GenerateOnClose", + "type": "BOOL" + } + ], + "ObjectOpenAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPWSTR" + }, + { + "name": "ObjectName", + "type": "LPWSTR" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GrantedAccess", + "type": "DWORD" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "AccessGranted", + "type": "BOOL" + }, + { + "name": "GenerateOnClose", + "type": "LPBOOL" + } + ], + "ObjectPrivilegeAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "AccessGranted", + "type": "BOOL" + } + ], + "PrivilegedServiceAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "ServiceName", + "type": "LPCWSTR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "AccessGranted", + "type": "BOOL" + } + ], + "SetFileSecurityW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "CreatePrivateNamespaceW": [ + { + "name": "lpPrivateNamespaceAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpBoundaryDescriptor", + "type": "LPVOID" + }, + { + "name": "lpAliasPrefix", + "type": "LPCWSTR" + } + ], + "OpenPrivateNamespaceW": [ + { + "name": "lpBoundaryDescriptor", + "type": "LPVOID" + }, + { + "name": "lpAliasPrefix", + "type": "LPCWSTR" + } + ], + "CreateBoundaryDescriptorW": [ + { + "name": "Name", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "GlobalAlloc": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "dwBytes", + "type": "SIZE_T" + } + ], + "GlobalReAlloc": [ + { + "name": "hMem", + "type": "HGLOBAL" + }, + { + "name": "dwBytes", + "type": "SIZE_T" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "GlobalSize": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalUnlock": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalLock": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalFlags": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalHandle": [ + { + "name": "pMem", + "type": "LPCVOID" + } + ], + "GlobalFree": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalMemoryStatus": [ + { + "name": "lpBuffer", + "type": "LPMEMORYSTATUS" + } + ], + "LocalAlloc": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uBytes", + "type": "SIZE_T" + } + ], + "LocalReAlloc": [ + { + "name": "hMem", + "type": "HLOCAL" + }, + { + "name": "uBytes", + "type": "SIZE_T" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "LocalLock": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "LocalHandle": [ + { + "name": "pMem", + "type": "LPCVOID" + } + ], + "LocalUnlock": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "LocalSize": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "LocalFlags": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "LocalFree": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "GetBinaryTypeA": [ + { + "name": "lpApplicationName", + "type": "LPCSTR" + }, + { + "name": "lpBinaryType", + "type": "LPDWORD" + } + ], + "GetBinaryTypeW": [ + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpBinaryType", + "type": "LPDWORD" + } + ], + "GetShortPathNameA": [ + { + "name": "lpszLongPath", + "type": "LPCSTR" + }, + { + "name": "lpszShortPath", + "type": "LPSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + } + ], + "GetLongPathNameTransactedA": [ + { + "name": "lpszShortPath", + "type": "LPCSTR" + }, + { + "name": "lpszLongPath", + "type": "LPSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetLongPathNameTransactedW": [ + { + "name": "lpszShortPath", + "type": "LPCWSTR" + }, + { + "name": "lpszLongPath", + "type": "LPWSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetProcessAffinityMask": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpProcessAffinityMask", + "type": "PDWORD_PTR" + }, + { + "name": "lpSystemAffinityMask", + "type": "PDWORD_PTR" + } + ], + "SetProcessAffinityMask": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwProcessAffinityMask", + "type": "DWORD_PTR" + } + ], + "GetProcessIoCounters": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpIoCounters", + "type": "PIO_COUNTERS" + } + ], + "GetProcessWorkingSetSize": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpMinimumWorkingSetSize", + "type": "PSIZE_T" + }, + { + "name": "lpMaximumWorkingSetSize", + "type": "PSIZE_T" + } + ], + "SetProcessWorkingSetSize": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwMinimumWorkingSetSize", + "type": "SIZE_T" + }, + { + "name": "dwMaximumWorkingSetSize", + "type": "SIZE_T" + } + ], + "FatalExit": [ + { + "name": "ExitCode", + "type": "int" + } + ], + "SwitchToFiber": [ + { + "name": "lpFiber", + "type": "LPVOID" + } + ], + "DeleteFiber": [ + { + "name": "lpFiber", + "type": "LPVOID" + } + ], + "ConvertFiberToThread": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateFiberEx": [ + { + "name": "dwStackCommitSize", + "type": "SIZE_T" + }, + { + "name": "dwStackReserveSize", + "type": "SIZE_T" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpStartAddress", + "type": "LPFIBER_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + } + ], + "ConvertThreadToFiberEx": [ + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CreateFiber": [ + { + "name": "dwStackSize", + "type": "SIZE_T" + }, + { + "name": "lpStartAddress", + "type": "LPFIBER_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + } + ], + "ConvertThreadToFiber": [ + { + "name": "lpParameter", + "type": "LPVOID" + } + ], + "CreateUmsCompletionList": [ + { + "name": "UmsCompletionList", + "type": "PUMS_COMPLETION_LIST" + } + ], + "DequeueUmsCompletionListItems": [ + { + "name": "UmsCompletionList", + "type": "PUMS_COMPLETION_LIST" + }, + { + "name": "WaitTimeOut", + "type": "DWORD" + }, + { + "name": "UmsThreadList", + "type": "PUMS_CONTEXT" + } + ], + "GetUmsCompletionListEvent": [ + { + "name": "UmsCompletionList", + "type": "PUMS_COMPLETION_LIST" + }, + { + "name": "UmsCompletionEvent", + "type": "PHANDLE" + } + ], + "ExecuteUmsThread": [ + { + "name": "UmsThread", + "type": "PUMS_CONTEXT" + } + ], + "UmsThreadYield": [ + { + "name": "SchedulerParam", + "type": "PVOID" + } + ], + "DeleteUmsCompletionList": [ + { + "name": "UmsCompletionList", + "type": "PUMS_COMPLETION_LIST" + } + ], + "GetCurrentUmsThread": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetNextUmsListItem": [ + { + "name": "UmsContext", + "type": "PUMS_CONTEXT" + } + ], + "QueryUmsThreadInformation": [ + { + "name": "UmsThread", + "type": "PUMS_CONTEXT" + }, + { + "name": "UmsThreadInfoClass", + "type": "UMS_THREAD_INFO_CLASS" + }, + { + "name": "UmsThreadInformation", + "type": "PVOID" + }, + { + "name": "UmsThreadInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "SetUmsThreadInformation": [ + { + "name": "UmsThread", + "type": "PUMS_CONTEXT" + }, + { + "name": "UmsThreadInfoClass", + "type": "UMS_THREAD_INFO_CLASS" + }, + { + "name": "UmsThreadInformation", + "type": "PVOID" + }, + { + "name": "UmsThreadInformationLength", + "type": "ULONG" + } + ], + "DeleteUmsThreadContext": [ + { + "name": "UmsThread", + "type": "PUMS_CONTEXT" + } + ], + "CreateUmsThreadContext": [ + { + "name": "lpUmsThread", + "type": "PUMS_CONTEXT" + } + ], + "EnterUmsSchedulingMode": [ + { + "name": "SchedulerStartupInfo", + "type": "PUMS_SCHEDULER_STARTUP_INFO" + } + ], + "GetUmsSystemThreadInformation": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "SystemThreadInfo", + "type": "PUMS_SYSTEM_THREAD_INFORMATION" + } + ], + "SetThreadAffinityMask": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwThreadAffinityMask", + "type": "DWORD_PTR" + } + ], + "SetProcessDEPPolicy": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetProcessDEPPolicy": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpFlags", + "type": "LPDWORD" + }, + { + "name": "lpPermanent", + "type": "PBOOL" + } + ], + "RequestWakeupLatency": [ + { + "name": "latency", + "type": "LATENCY_TIME" + } + ], + "IsSystemResumeAutomatic": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetThreadSelectorEntry": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwSelector", + "type": "DWORD" + }, + { + "name": "lpSelectorEntry", + "type": "LPLDT_ENTRY" + } + ], + "SetThreadExecutionState": [ + { + "name": "esFlags", + "type": "EXECUTION_STATE" + } + ], + "PowerCreateRequest": [ + { + "name": "Context", + "type": "PREASON_CONTEXT" + } + ], + "PowerSetRequest": [ + { + "name": "PowerRequest", + "type": "HANDLE" + }, + { + "name": "RequestType", + "type": "POWER_REQUEST_TYPE" + } + ], + "PowerClearRequest": [ + { + "name": "PowerRequest", + "type": "HANDLE" + }, + { + "name": "RequestType", + "type": "POWER_REQUEST_TYPE" + } + ], + "SetFileCompletionNotificationModes": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "UCHAR" + } + ], + "Wow64GetThreadSelectorEntry": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwSelector", + "type": "DWORD" + }, + { + "name": "lpSelectorEntry", + "type": "PWOW64_LDT_ENTRY" + } + ], + "DebugSetProcessKillOnExit": [ + { + "name": "KillOnExit", + "type": "BOOL" + } + ], + "DebugBreakProcess": [ + { + "name": "Process", + "type": "HANDLE" + } + ], + "PulseEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "GlobalDeleteAtom": [ + { + "name": "nAtom", + "type": "ATOM" + } + ], + "InitAtomTable": [ + { + "name": "nSize", + "type": "DWORD" + } + ], + "DeleteAtom": [ + { + "name": "nAtom", + "type": "ATOM" + } + ], + "SetHandleCount": [ + { + "name": "uNumber", + "type": "UINT" + } + ], + "GetDevicePowerState": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "pfOn", + "type": "BOOL" + } + ], + "SetFileShortNameA": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpShortName", + "type": "LPCSTR" + } + ], + "SetFileShortNameW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpShortName", + "type": "LPCWSTR" + } + ], + "LoadModule": [ + { + "name": "lpModuleName", + "type": "LPCSTR" + }, + { + "name": "lpParameterBlock", + "type": "LPVOID" + } + ], + "WinExec": [ + { + "name": "lpCmdLine", + "type": "LPCSTR" + }, + { + "name": "uCmdShow", + "type": "UINT" + } + ], + "ClearCommBreak": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "ClearCommError": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpErrors", + "type": "LPDWORD" + }, + { + "name": "lpStat", + "type": "LPCOMSTAT" + } + ], + "SetupComm": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwInQueue", + "type": "DWORD" + }, + { + "name": "dwOutQueue", + "type": "DWORD" + } + ], + "EscapeCommFunction": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFunc", + "type": "DWORD" + } + ], + "GetCommConfig": [ + { + "name": "hCommDev", + "type": "HANDLE" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "GetCommMask": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpEvtMask", + "type": "LPDWORD" + } + ], + "GetCommProperties": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCommProp", + "type": "LPCOMMPROP" + } + ], + "GetCommModemStatus": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpModemStat", + "type": "LPDWORD" + } + ], + "GetCommState": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpDCB", + "type": "LPDCB" + } + ], + "GetCommTimeouts": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCommTimeouts", + "type": "LPCOMMTIMEOUTS" + } + ], + "PurgeComm": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SetCommBreak": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SetCommConfig": [ + { + "name": "hCommDev", + "type": "HANDLE" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "SetCommMask": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwEvtMask", + "type": "DWORD" + } + ], + "SetCommState": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpDCB", + "type": "LPDCB" + } + ], + "SetCommTimeouts": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCommTimeouts", + "type": "LPCOMMTIMEOUTS" + } + ], + "TransmitCommChar": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "cChar", + "type": "char" + } + ], + "WaitCommEvent": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpEvtMask", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "OpenCommPort": [ + { + "name": "uPortNumber", + "type": "ULONG" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + } + ], + "GetCommPorts": [ + { + "name": "lpPortNumbers", + "type": "PULONG" + }, + { + "name": "uPortNumbersCount", + "type": "ULONG" + }, + { + "name": "puPortNumbersFound", + "type": "PULONG" + } + ], + "SetTapePosition": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwPositionMethod", + "type": "DWORD" + }, + { + "name": "dwPartition", + "type": "DWORD" + }, + { + "name": "dwOffsetLow", + "type": "DWORD" + }, + { + "name": "dwOffsetHigh", + "type": "DWORD" + }, + { + "name": "bImmediate", + "type": "BOOL" + } + ], + "GetTapePosition": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwPositionType", + "type": "DWORD" + }, + { + "name": "lpdwPartition", + "type": "LPDWORD" + }, + { + "name": "lpdwOffsetLow", + "type": "LPDWORD" + }, + { + "name": "lpdwOffsetHigh", + "type": "LPDWORD" + } + ], + "PrepareTape": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "bImmediate", + "type": "BOOL" + } + ], + "EraseTape": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwEraseType", + "type": "DWORD" + }, + { + "name": "bImmediate", + "type": "BOOL" + } + ], + "CreateTapePartition": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwPartitionMethod", + "type": "DWORD" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "WriteTapemark": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwTapemarkType", + "type": "DWORD" + }, + { + "name": "dwTapemarkCount", + "type": "DWORD" + }, + { + "name": "bImmediate", + "type": "BOOL" + } + ], + "GetTapeStatus": [ + { + "name": "hDevice", + "type": "HANDLE" + } + ], + "GetTapeParameters": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + }, + { + "name": "lpTapeInformation", + "type": "LPVOID" + } + ], + "SetTapeParameters": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "lpTapeInformation", + "type": "LPVOID" + } + ], + "MulDiv": [ + { + "name": "nNumber", + "type": "int" + }, + { + "name": "nNumerator", + "type": "int" + }, + { + "name": "nDenominator", + "type": "int" + } + ], + "GetSystemDEPPolicy": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemRegistryQuota": [ + { + "name": "pdwQuotaAllowed", + "type": "PDWORD" + }, + { + "name": "pdwQuotaUsed", + "type": "PDWORD" + } + ], + "FileTimeToDosDateTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpFatDate", + "type": "LPWORD" + }, + { + "name": "lpFatTime", + "type": "LPWORD" + } + ], + "DosDateTimeToFileTime": [ + { + "name": "wFatDate", + "type": "WORD" + }, + { + "name": "wFatTime", + "type": "WORD" + }, + { + "name": "lpFileTime", + "type": "LPFILETIME" + } + ], + "FormatMessageA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpSource", + "type": "LPCVOID" + }, + { + "name": "dwMessageId", + "type": "DWORD" + }, + { + "name": "dwLanguageId", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "Arguments", + "type": "va_list" + } + ], + "FormatMessageW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpSource", + "type": "LPCVOID" + }, + { + "name": "dwMessageId", + "type": "DWORD" + }, + { + "name": "dwLanguageId", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "Arguments", + "type": "va_list" + } + ], + "CreateMailslotA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "nMaxMessageSize", + "type": "DWORD" + }, + { + "name": "lReadTimeout", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateMailslotW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "nMaxMessageSize", + "type": "DWORD" + }, + { + "name": "lReadTimeout", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "GetMailslotInfo": [ + { + "name": "hMailslot", + "type": "HANDLE" + }, + { + "name": "lpMaxMessageSize", + "type": "LPDWORD" + }, + { + "name": "lpNextSize", + "type": "LPDWORD" + }, + { + "name": "lpMessageCount", + "type": "LPDWORD" + }, + { + "name": "lpReadTimeout", + "type": "LPDWORD" + } + ], + "SetMailslotInfo": [ + { + "name": "hMailslot", + "type": "HANDLE" + }, + { + "name": "lReadTimeout", + "type": "DWORD" + } + ], + "EncryptFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "EncryptFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "DecryptFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "DecryptFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "FileEncryptionStatusA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpStatus", + "type": "LPDWORD" + } + ], + "FileEncryptionStatusW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpStatus", + "type": "LPDWORD" + } + ], + "OpenEncryptedFileRawA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "OpenEncryptedFileRawW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "ReadEncryptedFileRaw": [ + { + "name": "pfExportCallback", + "type": "PFE_EXPORT_FUNC" + }, + { + "name": "pvCallbackContext", + "type": "PVOID" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "WriteEncryptedFileRaw": [ + { + "name": "pfImportCallback", + "type": "PFE_IMPORT_FUNC" + }, + { + "name": "pvCallbackContext", + "type": "PVOID" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "CloseEncryptedFileRaw": [ + { + "name": "pvContext", + "type": "PVOID" + } + ], + "lstrcmpA": [ + { + "name": "lpString1", + "type": "LPCSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + } + ], + "lstrcmpW": [ + { + "name": "lpString1", + "type": "LPCWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + } + ], + "lstrcmpiA": [ + { + "name": "lpString1", + "type": "LPCSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + } + ], + "lstrcmpiW": [ + { + "name": "lpString1", + "type": "LPCWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + } + ], + "lstrcpynA": [ + { + "name": "lpString1", + "type": "LPSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + }, + { + "name": "iMaxLength", + "type": "int" + } + ], + "lstrcpynW": [ + { + "name": "lpString1", + "type": "LPWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + }, + { + "name": "iMaxLength", + "type": "int" + } + ], + "lstrcpyA": [ + { + "name": "lpString1", + "type": "LPSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + } + ], + "lstrcpyW": [ + { + "name": "lpString1", + "type": "LPWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + } + ], + "lstrcatA": [ + { + "name": "lpString1", + "type": "LPSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + } + ], + "lstrcatW": [ + { + "name": "lpString1", + "type": "LPWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + } + ], + "lstrlenA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "lstrlenW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "OpenFile": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpReOpenBuff", + "type": "LPOFSTRUCT" + }, + { + "name": "uStyle", + "type": "UINT" + } + ], + "_lopen": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "iReadWrite", + "type": "int" + } + ], + "_lcreat": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "iAttribute", + "type": "int" + } + ], + "_lread": [ + { + "name": "hFile", + "type": "HFILE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "uBytes", + "type": "UINT" + } + ], + "_lwrite": [ + { + "name": "hFile", + "type": "HFILE" + }, + { + "name": "lpBuffer", + "type": "LPCCH" + }, + { + "name": "uBytes", + "type": "UINT" + } + ], + "_lclose": [ + { + "name": "hFile", + "type": "HFILE" + } + ], + "_llseek": [ + { + "name": "hFile", + "type": "HFILE" + }, + { + "name": "lOffset", + "type": "LONG" + }, + { + "name": "iOrigin", + "type": "int" + } + ], + "IsTextUnicode": [ + { + "name": "lpv", + "type": "void" + }, + { + "name": "iSize", + "type": "int" + }, + { + "name": "lpiResult", + "type": "LPINT" + } + ], + "BackupRead": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesRead", + "type": "LPDWORD" + }, + { + "name": "bAbort", + "type": "BOOL" + }, + { + "name": "bProcessSecurity", + "type": "BOOL" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "BackupSeek": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwLowBytesToSeek", + "type": "DWORD" + }, + { + "name": "dwHighBytesToSeek", + "type": "DWORD" + }, + { + "name": "lpdwLowByteSeeked", + "type": "LPDWORD" + }, + { + "name": "lpdwHighByteSeeked", + "type": "LPDWORD" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "BackupWrite": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "LPDWORD" + }, + { + "name": "bAbort", + "type": "BOOL" + }, + { + "name": "bProcessSecurity", + "type": "BOOL" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "CreateSemaphoreA": [ + { + "name": "lpSemaphoreAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lInitialCount", + "type": "LONG" + }, + { + "name": "lMaximumCount", + "type": "LONG" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateSemaphoreExA": [ + { + "name": "lpSemaphoreAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lInitialCount", + "type": "LONG" + }, + { + "name": "lMaximumCount", + "type": "LONG" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateFileMappingA": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileMappingAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeHigh", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeLow", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateFileMappingNumaA": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileMappingAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeHigh", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeLow", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "OpenFileMappingA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetLogicalDriveStringsA": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + } + ], + "LoadPackagedLibrary": [ + { + "name": "lpwLibFileName", + "type": "LPCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "QueryFullProcessImageNameA": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExeName", + "type": "LPSTR" + }, + { + "name": "lpdwSize", + "type": "PDWORD" + } + ], + "QueryFullProcessImageNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExeName", + "type": "LPWSTR" + }, + { + "name": "lpdwSize", + "type": "PDWORD" + } + ], + "GetFirmwareEnvironmentVariableA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpGuid", + "type": "LPCSTR" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetFirmwareEnvironmentVariableW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpGuid", + "type": "LPCWSTR" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetFirmwareEnvironmentVariableExA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpGuid", + "type": "LPCSTR" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "pdwAttribubutes", + "type": "PDWORD" + } + ], + "GetFirmwareEnvironmentVariableExW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpGuid", + "type": "LPCWSTR" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "pdwAttribubutes", + "type": "PDWORD" + } + ], + "SetFirmwareEnvironmentVariableA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpGuid", + "type": "LPCSTR" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "SetFirmwareEnvironmentVariableW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpGuid", + "type": "LPCWSTR" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "SetFirmwareEnvironmentVariableExA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpGuid", + "type": "LPCSTR" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "SetFirmwareEnvironmentVariableExW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpGuid", + "type": "LPCWSTR" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "GetFirmwareType": [ + { + "name": "FirmwareType", + "type": "PFIRMWARE_TYPE" + } + ], + "IsNativeVhdBoot": [ + { + "name": "NativeVhdBoot", + "type": "PBOOL" + } + ], + "FindResourceA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpType", + "type": "LPCSTR" + } + ], + "FindResourceExA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "wLanguage", + "type": "WORD" + } + ], + "EnumResourceTypesA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESTYPEPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumResourceTypesW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESTYPEPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumResourceNamesA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESNAMEPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumResourceLanguagesA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESLANGPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumResourceLanguagesW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESLANGPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "BeginUpdateResourceA": [ + { + "name": "pFileName", + "type": "LPCSTR" + }, + { + "name": "bDeleteExistingResources", + "type": "BOOL" + } + ], + "BeginUpdateResourceW": [ + { + "name": "pFileName", + "type": "LPCWSTR" + }, + { + "name": "bDeleteExistingResources", + "type": "BOOL" + } + ], + "UpdateResourceA": [ + { + "name": "hUpdate", + "type": "HANDLE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "wLanguage", + "type": "WORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "UpdateResourceW": [ + { + "name": "hUpdate", + "type": "HANDLE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "wLanguage", + "type": "WORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "EndUpdateResourceA": [ + { + "name": "hUpdate", + "type": "HANDLE" + }, + { + "name": "fDiscard", + "type": "BOOL" + } + ], + "EndUpdateResourceW": [ + { + "name": "hUpdate", + "type": "HANDLE" + }, + { + "name": "fDiscard", + "type": "BOOL" + } + ], + "GlobalAddAtomA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "GlobalAddAtomW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GlobalAddAtomExA": [ + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "GlobalAddAtomExW": [ + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "GlobalFindAtomA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "GlobalFindAtomW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GlobalGetAtomNameA": [ + { + "name": "nAtom", + "type": "ATOM" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "int" + } + ], + "GlobalGetAtomNameW": [ + { + "name": "nAtom", + "type": "ATOM" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "int" + } + ], + "AddAtomA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "AddAtomW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "FindAtomA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "FindAtomW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetAtomNameA": [ + { + "name": "nAtom", + "type": "ATOM" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "int" + } + ], + "GetAtomNameW": [ + { + "name": "nAtom", + "type": "ATOM" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "int" + } + ], + "GetProfileIntA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "nDefault", + "type": "INT" + } + ], + "GetProfileIntW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "nDefault", + "type": "INT" + } + ], + "GetProfileStringA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "lpDefault", + "type": "LPCSTR" + }, + { + "name": "lpReturnedString", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetProfileStringW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "lpDefault", + "type": "LPCWSTR" + }, + { + "name": "lpReturnedString", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "WriteProfileStringA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "WriteProfileStringW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetProfileSectionA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpReturnedString", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetProfileSectionW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpReturnedString", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "WriteProfileSectionA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "WriteProfileSectionW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileIntA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "nDefault", + "type": "INT" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetPrivateProfileIntW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "nDefault", + "type": "INT" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileStringA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "lpDefault", + "type": "LPCSTR" + }, + { + "name": "lpReturnedString", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetPrivateProfileStringW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "lpDefault", + "type": "LPCWSTR" + }, + { + "name": "lpReturnedString", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "WritePrivateProfileStringA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "WritePrivateProfileStringW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileSectionA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpReturnedString", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetPrivateProfileSectionW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpReturnedString", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "WritePrivateProfileSectionA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "WritePrivateProfileSectionW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileSectionNamesA": [ + { + "name": "lpszReturnBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetPrivateProfileSectionNamesW": [ + { + "name": "lpszReturnBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileStructA": [ + { + "name": "lpszSection", + "type": "LPCSTR" + }, + { + "name": "lpszKey", + "type": "LPCSTR" + }, + { + "name": "lpStruct", + "type": "LPVOID" + }, + { + "name": "uSizeStruct", + "type": "UINT" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "GetPrivateProfileStructW": [ + { + "name": "lpszSection", + "type": "LPCWSTR" + }, + { + "name": "lpszKey", + "type": "LPCWSTR" + }, + { + "name": "lpStruct", + "type": "LPVOID" + }, + { + "name": "uSizeStruct", + "type": "UINT" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "WritePrivateProfileStructA": [ + { + "name": "lpszSection", + "type": "LPCSTR" + }, + { + "name": "lpszKey", + "type": "LPCSTR" + }, + { + "name": "lpStruct", + "type": "LPVOID" + }, + { + "name": "uSizeStruct", + "type": "UINT" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "WritePrivateProfileStructW": [ + { + "name": "lpszSection", + "type": "LPCWSTR" + }, + { + "name": "lpszKey", + "type": "LPCWSTR" + }, + { + "name": "lpStruct", + "type": "LPVOID" + }, + { + "name": "uSizeStruct", + "type": "UINT" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "Wow64EnableWow64FsRedirection": [ + { + "name": "Wow64FsEnableRedirection", + "type": "BOOLEAN" + } + ], + "SetDllDirectoryA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + } + ], + "SetDllDirectoryW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + } + ], + "GetDllDirectoryA": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + } + ], + "GetDllDirectoryW": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + } + ], + "SetSearchPathMode": [ + { + "name": "Flags", + "type": "DWORD" + } + ], + "CreateDirectoryExA": [ + { + "name": "lpTemplateDirectory", + "type": "LPCSTR" + }, + { + "name": "lpNewDirectory", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDirectoryExW": [ + { + "name": "lpTemplateDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpNewDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDirectoryTransactedA": [ + { + "name": "lpTemplateDirectory", + "type": "LPCSTR" + }, + { + "name": "lpNewDirectory", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CreateDirectoryTransactedW": [ + { + "name": "lpTemplateDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpNewDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "RemoveDirectoryTransactedA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "RemoveDirectoryTransactedW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetFullPathNameTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "lpFilePart", + "type": "LPSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetFullPathNameTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "lpFilePart", + "type": "LPWSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "DefineDosDeviceA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDeviceName", + "type": "LPCSTR" + }, + { + "name": "lpTargetPath", + "type": "LPCSTR" + } + ], + "QueryDosDeviceA": [ + { + "name": "lpDeviceName", + "type": "LPCSTR" + }, + { + "name": "lpTargetPath", + "type": "LPSTR" + }, + { + "name": "ucchMax", + "type": "DWORD" + } + ], + "CreateFileTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "hTemplateFile", + "type": "HANDLE" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pusMiniVersion", + "type": "PUSHORT" + }, + { + "name": "lpExtendedParameter", + "type": "PVOID" + } + ], + "CreateFileTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "hTemplateFile", + "type": "HANDLE" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pusMiniVersion", + "type": "PUSHORT" + }, + { + "name": "lpExtendedParameter", + "type": "PVOID" + } + ], + "ReOpenFile": [ + { + "name": "hOriginalFile", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + } + ], + "SetFileAttributesTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "SetFileAttributesTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetFileAttributesTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "fInfoLevelId", + "type": "GET_FILEEX_INFO_LEVELS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetFileAttributesTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "fInfoLevelId", + "type": "GET_FILEEX_INFO_LEVELS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetCompressedFileSizeTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetCompressedFileSizeTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "DeleteFileTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "DeleteFileTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CheckNameLegalDOS8Dot3A": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpOemName", + "type": "LPSTR" + }, + { + "name": "OemNameSize", + "type": "DWORD" + }, + { + "name": "pbNameContainsSpaces", + "type": "PBOOL" + }, + { + "name": "pbNameLegal", + "type": "PBOOL" + } + ], + "CheckNameLegalDOS8Dot3W": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpOemName", + "type": "LPSTR" + }, + { + "name": "OemNameSize", + "type": "DWORD" + }, + { + "name": "pbNameContainsSpaces", + "type": "PBOOL" + }, + { + "name": "pbNameLegal", + "type": "PBOOL" + } + ], + "FindFirstFileTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "fInfoLevelId", + "type": "FINDEX_INFO_LEVELS" + }, + { + "name": "lpFindFileData", + "type": "LPVOID" + }, + { + "name": "fSearchOp", + "type": "FINDEX_SEARCH_OPS" + }, + { + "name": "lpSearchFilter", + "type": "LPVOID" + }, + { + "name": "dwAdditionalFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "FindFirstFileTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "fInfoLevelId", + "type": "FINDEX_INFO_LEVELS" + }, + { + "name": "lpFindFileData", + "type": "LPVOID" + }, + { + "name": "fSearchOp", + "type": "FINDEX_SEARCH_OPS" + }, + { + "name": "lpSearchFilter", + "type": "LPVOID" + }, + { + "name": "dwAdditionalFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CopyFileA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "bFailIfExists", + "type": "BOOL" + } + ], + "CopyFileW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "bFailIfExists", + "type": "BOOL" + } + ], + "CopyFileExA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pbCancel", + "type": "LPBOOL" + }, + { + "name": "dwCopyFlags", + "type": "DWORD" + } + ], + "CopyFileExW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pbCancel", + "type": "LPBOOL" + }, + { + "name": "dwCopyFlags", + "type": "DWORD" + } + ], + "CopyFileTransactedA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pbCancel", + "type": "LPBOOL" + }, + { + "name": "dwCopyFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CopyFileTransactedW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pbCancel", + "type": "LPBOOL" + }, + { + "name": "dwCopyFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CopyFile2": [ + { + "name": "pwszExistingFileName", + "type": "PCWSTR" + }, + { + "name": "pwszNewFileName", + "type": "PCWSTR" + }, + { + "name": "pExtendedParameters", + "type": "COPYFILE2_EXTENDED_PARAMETERS" + } + ], + "MoveFileA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + } + ], + "MoveFileW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + } + ], + "MoveFileExA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MoveFileExW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MoveFileWithProgressA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MoveFileWithProgressW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MoveFileTransactedA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "MoveFileTransactedW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "ReplaceFileA": [ + { + "name": "lpReplacedFileName", + "type": "LPCSTR" + }, + { + "name": "lpReplacementFileName", + "type": "LPCSTR" + }, + { + "name": "lpBackupFileName", + "type": "LPCSTR" + }, + { + "name": "dwReplaceFlags", + "type": "DWORD" + }, + { + "name": "lpExclude", + "type": "LPVOID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "ReplaceFileW": [ + { + "name": "lpReplacedFileName", + "type": "LPCWSTR" + }, + { + "name": "lpReplacementFileName", + "type": "LPCWSTR" + }, + { + "name": "lpBackupFileName", + "type": "LPCWSTR" + }, + { + "name": "dwReplaceFlags", + "type": "DWORD" + }, + { + "name": "lpExclude", + "type": "LPVOID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "CreateHardLinkA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateHardLinkW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateHardLinkTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CreateHardLinkTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "FindFirstStreamTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "InfoLevel", + "type": "STREAM_INFO_LEVELS" + }, + { + "name": "lpFindStreamData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "FindFirstFileNameTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "StringLength", + "type": "LPDWORD" + }, + { + "name": "LinkName", + "type": "PWSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CreateNamedPipeA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwOpenMode", + "type": "DWORD" + }, + { + "name": "dwPipeMode", + "type": "DWORD" + }, + { + "name": "nMaxInstances", + "type": "DWORD" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "nDefaultTimeOut", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "GetNamedPipeHandleStateA": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpState", + "type": "LPDWORD" + }, + { + "name": "lpCurInstances", + "type": "LPDWORD" + }, + { + "name": "lpMaxCollectionCount", + "type": "LPDWORD" + }, + { + "name": "lpCollectDataTimeout", + "type": "LPDWORD" + }, + { + "name": "lpUserName", + "type": "LPSTR" + }, + { + "name": "nMaxUserNameSize", + "type": "DWORD" + } + ], + "CallNamedPipeA": [ + { + "name": "lpNamedPipeName", + "type": "LPCSTR" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesRead", + "type": "LPDWORD" + }, + { + "name": "nTimeOut", + "type": "DWORD" + } + ], + "WaitNamedPipeA": [ + { + "name": "lpNamedPipeName", + "type": "LPCSTR" + }, + { + "name": "nTimeOut", + "type": "DWORD" + } + ], + "GetNamedPipeClientComputerNameA": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ClientComputerName", + "type": "LPSTR" + }, + { + "name": "ClientComputerNameLength", + "type": "ULONG" + } + ], + "GetNamedPipeClientProcessId": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ClientProcessId", + "type": "PULONG" + } + ], + "GetNamedPipeClientSessionId": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ClientSessionId", + "type": "PULONG" + } + ], + "GetNamedPipeServerProcessId": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ServerProcessId", + "type": "PULONG" + } + ], + "GetNamedPipeServerSessionId": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ServerSessionId", + "type": "PULONG" + } + ], + "SetVolumeLabelA": [ + { + "name": "lpRootPathName", + "type": "LPCSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCSTR" + } + ], + "SetVolumeLabelW": [ + { + "name": "lpRootPathName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCWSTR" + } + ], + "SetFileBandwidthReservation": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "nPeriodMilliseconds", + "type": "DWORD" + }, + { + "name": "nBytesPerPeriod", + "type": "DWORD" + }, + { + "name": "bDiscardable", + "type": "BOOL" + }, + { + "name": "lpTransferSize", + "type": "LPDWORD" + }, + { + "name": "lpNumOutstandingRequests", + "type": "LPDWORD" + } + ], + "GetFileBandwidthReservation": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpPeriodMilliseconds", + "type": "LPDWORD" + }, + { + "name": "lpBytesPerPeriod", + "type": "LPDWORD" + }, + { + "name": "pDiscardable", + "type": "LPBOOL" + }, + { + "name": "lpTransferSize", + "type": "LPDWORD" + }, + { + "name": "lpNumOutstandingRequests", + "type": "LPDWORD" + } + ], + "ClearEventLogA": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "lpBackupFileName", + "type": "LPCSTR" + } + ], + "ClearEventLogW": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "lpBackupFileName", + "type": "LPCWSTR" + } + ], + "BackupEventLogA": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "lpBackupFileName", + "type": "LPCSTR" + } + ], + "BackupEventLogW": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "lpBackupFileName", + "type": "LPCWSTR" + } + ], + "CloseEventLog": [ + { + "name": "hEventLog", + "type": "HANDLE" + } + ], + "DeregisterEventSource": [ + { + "name": "hEventLog", + "type": "HANDLE" + } + ], + "NotifyChangeEventLog": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "GetNumberOfEventLogRecords": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "NumberOfRecords", + "type": "PDWORD" + } + ], + "GetOldestEventLogRecord": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "OldestRecord", + "type": "PDWORD" + } + ], + "OpenEventLogA": [ + { + "name": "lpUNCServerName", + "type": "LPCSTR" + }, + { + "name": "lpSourceName", + "type": "LPCSTR" + } + ], + "OpenEventLogW": [ + { + "name": "lpUNCServerName", + "type": "LPCWSTR" + }, + { + "name": "lpSourceName", + "type": "LPCWSTR" + } + ], + "RegisterEventSourceA": [ + { + "name": "lpUNCServerName", + "type": "LPCSTR" + }, + { + "name": "lpSourceName", + "type": "LPCSTR" + } + ], + "RegisterEventSourceW": [ + { + "name": "lpUNCServerName", + "type": "LPCWSTR" + }, + { + "name": "lpSourceName", + "type": "LPCWSTR" + } + ], + "OpenBackupEventLogA": [ + { + "name": "lpUNCServerName", + "type": "LPCSTR" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "OpenBackupEventLogW": [ + { + "name": "lpUNCServerName", + "type": "LPCWSTR" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "ReadEventLogA": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "dwReadFlags", + "type": "DWORD" + }, + { + "name": "dwRecordOffset", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "pnBytesRead", + "type": "DWORD" + }, + { + "name": "pnMinNumberOfBytesNeeded", + "type": "DWORD" + } + ], + "ReadEventLogW": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "dwReadFlags", + "type": "DWORD" + }, + { + "name": "dwRecordOffset", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "pnBytesRead", + "type": "DWORD" + }, + { + "name": "pnMinNumberOfBytesNeeded", + "type": "DWORD" + } + ], + "ReportEventA": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "wCategory", + "type": "WORD" + }, + { + "name": "dwEventID", + "type": "DWORD" + }, + { + "name": "lpUserSid", + "type": "PSID" + }, + { + "name": "wNumStrings", + "type": "WORD" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "lpStrings", + "type": "LPCSTR" + }, + { + "name": "lpRawData", + "type": "LPVOID" + } + ], + "ReportEventW": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "wCategory", + "type": "WORD" + }, + { + "name": "dwEventID", + "type": "DWORD" + }, + { + "name": "lpUserSid", + "type": "PSID" + }, + { + "name": "wNumStrings", + "type": "WORD" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "lpStrings", + "type": "LPCWSTR" + }, + { + "name": "lpRawData", + "type": "LPVOID" + } + ], + "GetEventLogInformation": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "OperationStart": [ + { + "name": "OperationStartParams", + "type": "OPERATION_START_PARAMETERS" + } + ], + "OperationEnd": [ + { + "name": "OperationEndParams", + "type": "OPERATION_END_PARAMETERS" + } + ], + "AccessCheckAndAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPSTR" + }, + { + "name": "ObjectName", + "type": "LPSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeAndAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPCSTR" + }, + { + "name": "ObjectName", + "type": "LPCSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultListAndAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPCSTR" + }, + { + "name": "ObjectName", + "type": "LPCSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultListAndAuditAlarmByHandleA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "ObjectTypeName", + "type": "LPCSTR" + }, + { + "name": "ObjectName", + "type": "LPCSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "ObjectOpenAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPSTR" + }, + { + "name": "ObjectName", + "type": "LPSTR" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GrantedAccess", + "type": "DWORD" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "AccessGranted", + "type": "BOOL" + }, + { + "name": "GenerateOnClose", + "type": "LPBOOL" + } + ], + "ObjectPrivilegeAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "AccessGranted", + "type": "BOOL" + } + ], + "ObjectCloseAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "GenerateOnClose", + "type": "BOOL" + } + ], + "ObjectDeleteAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "GenerateOnClose", + "type": "BOOL" + } + ], + "PrivilegedServiceAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "ServiceName", + "type": "LPCSTR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "AccessGranted", + "type": "BOOL" + } + ], + "AddConditionalAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AceType", + "type": "UCHAR" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "ConditionStr", + "type": "PWCHAR" + }, + { + "name": "ReturnLength", + "type": "DWORD" + } + ], + "SetFileSecurityA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetFileSecurityA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "ReadDirectoryChangesW": [ + { + "name": "hDirectory", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "ReadDirectoryChangesExW": [ + { + "name": "hDirectory", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + }, + { + "name": "ReadDirectoryNotifyInformationClass", + "type": "READ_DIRECTORY_NOTIFY_INFORMATION_CLASS" + } + ], + "MapViewOfFileExNuma": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwNumberOfBytesToMap", + "type": "SIZE_T" + }, + { + "name": "lpBaseAddress", + "type": "LPVOID" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "IsBadReadPtr": [ + { + "name": "lp", + "type": "void" + }, + { + "name": "ucb", + "type": "UINT_PTR" + } + ], + "IsBadWritePtr": [ + { + "name": "lp", + "type": "LPVOID" + }, + { + "name": "ucb", + "type": "UINT_PTR" + } + ], + "IsBadCodePtr": [ + { + "name": "lpfn", + "type": "FARPROC" + } + ], + "IsBadStringPtrA": [ + { + "name": "lpsz", + "type": "LPCSTR" + }, + { + "name": "ucchMax", + "type": "UINT_PTR" + } + ], + "IsBadStringPtrW": [ + { + "name": "lpsz", + "type": "LPCWSTR" + }, + { + "name": "ucchMax", + "type": "UINT_PTR" + } + ], + "LookupAccountSidA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Name", + "type": "LPSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountSidW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Name", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPWSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountNameA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "lpAccountName", + "type": "LPCSTR" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "cbSid", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountNameW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "lpAccountName", + "type": "LPCWSTR" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "cbSid", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPWSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountSidLocalA": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Name", + "type": "LPSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountSidLocalW": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Name", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPWSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupPrivilegeValueA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpLuid", + "type": "PLUID" + } + ], + "LookupPrivilegeValueW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpLuid", + "type": "PLUID" + } + ], + "LookupPrivilegeNameA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "lpLuid", + "type": "PLUID" + }, + { + "name": "lpName", + "type": "LPSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + } + ], + "LookupPrivilegeNameW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "lpLuid", + "type": "PLUID" + }, + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + } + ], + "LookupPrivilegeDisplayNameA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpDisplayName", + "type": "LPSTR" + }, + { + "name": "cchDisplayName", + "type": "LPDWORD" + }, + { + "name": "lpLanguageId", + "type": "LPDWORD" + } + ], + "LookupPrivilegeDisplayNameW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpDisplayName", + "type": "LPWSTR" + }, + { + "name": "cchDisplayName", + "type": "LPDWORD" + }, + { + "name": "lpLanguageId", + "type": "LPDWORD" + } + ], + "BuildCommDCBA": [ + { + "name": "lpDef", + "type": "LPCSTR" + }, + { + "name": "lpDCB", + "type": "LPDCB" + } + ], + "BuildCommDCBW": [ + { + "name": "lpDef", + "type": "LPCWSTR" + }, + { + "name": "lpDCB", + "type": "LPDCB" + } + ], + "BuildCommDCBAndTimeoutsA": [ + { + "name": "lpDef", + "type": "LPCSTR" + }, + { + "name": "lpDCB", + "type": "LPDCB" + }, + { + "name": "lpCommTimeouts", + "type": "LPCOMMTIMEOUTS" + } + ], + "BuildCommDCBAndTimeoutsW": [ + { + "name": "lpDef", + "type": "LPCWSTR" + }, + { + "name": "lpDCB", + "type": "LPDCB" + }, + { + "name": "lpCommTimeouts", + "type": "LPCOMMTIMEOUTS" + } + ], + "CommConfigDialogA": [ + { + "name": "lpszName", + "type": "LPCSTR" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + } + ], + "CommConfigDialogW": [ + { + "name": "lpszName", + "type": "LPCWSTR" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + } + ], + "GetDefaultCommConfigA": [ + { + "name": "lpszName", + "type": "LPCSTR" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "GetDefaultCommConfigW": [ + { + "name": "lpszName", + "type": "LPCWSTR" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "SetDefaultCommConfigA": [ + { + "name": "lpszName", + "type": "LPCSTR" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "SetDefaultCommConfigW": [ + { + "name": "lpszName", + "type": "LPCWSTR" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "GetComputerNameA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "GetComputerNameW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "DnsHostnameToComputerNameA": [ + { + "name": "Hostname", + "type": "LPCSTR" + }, + { + "name": "ComputerName", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "DnsHostnameToComputerNameW": [ + { + "name": "Hostname", + "type": "LPCWSTR" + }, + { + "name": "ComputerName", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "GetUserNameA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "pcbBuffer", + "type": "LPDWORD" + } + ], + "GetUserNameW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "pcbBuffer", + "type": "LPDWORD" + } + ], + "LogonUserA": [ + { + "name": "lpszUsername", + "type": "LPCSTR" + }, + { + "name": "lpszDomain", + "type": "LPCSTR" + }, + { + "name": "lpszPassword", + "type": "LPCSTR" + }, + { + "name": "dwLogonType", + "type": "DWORD" + }, + { + "name": "dwLogonProvider", + "type": "DWORD" + }, + { + "name": "phToken", + "type": "PHANDLE" + } + ], + "LogonUserW": [ + { + "name": "lpszUsername", + "type": "LPCWSTR" + }, + { + "name": "lpszDomain", + "type": "LPCWSTR" + }, + { + "name": "lpszPassword", + "type": "LPCWSTR" + }, + { + "name": "dwLogonType", + "type": "DWORD" + }, + { + "name": "dwLogonProvider", + "type": "DWORD" + }, + { + "name": "phToken", + "type": "PHANDLE" + } + ], + "LogonUserExA": [ + { + "name": "lpszUsername", + "type": "LPCSTR" + }, + { + "name": "lpszDomain", + "type": "LPCSTR" + }, + { + "name": "lpszPassword", + "type": "LPCSTR" + }, + { + "name": "dwLogonType", + "type": "DWORD" + }, + { + "name": "dwLogonProvider", + "type": "DWORD" + }, + { + "name": "phToken", + "type": "PHANDLE" + }, + { + "name": "ppLogonSid", + "type": "PSID" + }, + { + "name": "ppProfileBuffer", + "type": "PVOID" + }, + { + "name": "pdwProfileLength", + "type": "LPDWORD" + }, + { + "name": "pQuotaLimits", + "type": "PQUOTA_LIMITS" + } + ], + "LogonUserExW": [ + { + "name": "lpszUsername", + "type": "LPCWSTR" + }, + { + "name": "lpszDomain", + "type": "LPCWSTR" + }, + { + "name": "lpszPassword", + "type": "LPCWSTR" + }, + { + "name": "dwLogonType", + "type": "DWORD" + }, + { + "name": "dwLogonProvider", + "type": "DWORD" + }, + { + "name": "phToken", + "type": "PHANDLE" + }, + { + "name": "ppLogonSid", + "type": "PSID" + }, + { + "name": "ppProfileBuffer", + "type": "PVOID" + }, + { + "name": "pdwProfileLength", + "type": "LPDWORD" + }, + { + "name": "pQuotaLimits", + "type": "PQUOTA_LIMITS" + } + ], + "CreateProcessWithLogonW": [ + { + "name": "lpUsername", + "type": "LPCWSTR" + }, + { + "name": "lpDomain", + "type": "LPCWSTR" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "dwLogonFlags", + "type": "DWORD" + }, + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "CreateProcessWithTokenW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwLogonFlags", + "type": "DWORD" + }, + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "RegisterWaitForSingleObject": [ + { + "name": "phNewWaitObject", + "type": "PHANDLE" + }, + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "Callback", + "type": "WAITORTIMERCALLBACK" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "dwMilliseconds", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "UnregisterWait": [ + { + "name": "WaitHandle", + "type": "HANDLE" + } + ], + "BindIoCompletionCallback": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Function", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "DeleteTimerQueue": [ + { + "name": "TimerQueue", + "type": "HANDLE" + } + ], + "CreatePrivateNamespaceA": [ + { + "name": "lpPrivateNamespaceAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpBoundaryDescriptor", + "type": "LPVOID" + }, + { + "name": "lpAliasPrefix", + "type": "LPCSTR" + } + ], + "OpenPrivateNamespaceA": [ + { + "name": "lpBoundaryDescriptor", + "type": "LPVOID" + }, + { + "name": "lpAliasPrefix", + "type": "LPCSTR" + } + ], + "CreateBoundaryDescriptorA": [ + { + "name": "Name", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "AddIntegrityLabelToBoundaryDescriptor": [ + { + "name": "BoundaryDescriptor", + "type": "HANDLE" + }, + { + "name": "IntegrityLabel", + "type": "PSID" + } + ], + "GetCurrentHwProfileA": [ + { + "name": "lpHwProfileInfo", + "type": "LPHW_PROFILE_INFOA" + } + ], + "GetCurrentHwProfileW": [ + { + "name": "lpHwProfileInfo", + "type": "LPHW_PROFILE_INFOW" + } + ], + "VerifyVersionInfoA": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOEXA" + }, + { + "name": "dwTypeMask", + "type": "DWORD" + }, + { + "name": "dwlConditionMask", + "type": "DWORDLONG" + } + ], + "VerifyVersionInfoW": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOEXW" + }, + { + "name": "dwTypeMask", + "type": "DWORD" + }, + { + "name": "dwlConditionMask", + "type": "DWORDLONG" + } + ], + "SetSystemPowerState": [ + { + "name": "fSuspend", + "type": "BOOL" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "GetSystemPowerStatus": [ + { + "name": "lpSystemPowerStatus", + "type": "LPSYSTEM_POWER_STATUS" + } + ], + "MapUserPhysicalPagesScatter": [ + { + "name": "VirtualAddresses", + "type": "PVOID" + }, + { + "name": "NumberOfPages", + "type": "ULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "CreateJobObjectA": [ + { + "name": "lpJobAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "OpenJobObjectA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "FindFirstVolumeA": [ + { + "name": "lpszVolumeName", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindNextVolumeA": [ + { + "name": "hFindVolume", + "type": "HANDLE" + }, + { + "name": "lpszVolumeName", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindFirstVolumeMountPointA": [ + { + "name": "lpszRootPathName", + "type": "LPCSTR" + }, + { + "name": "lpszVolumeMountPoint", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindFirstVolumeMountPointW": [ + { + "name": "lpszRootPathName", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumeMountPoint", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindNextVolumeMountPointA": [ + { + "name": "hFindVolumeMountPoint", + "type": "HANDLE" + }, + { + "name": "lpszVolumeMountPoint", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindNextVolumeMountPointW": [ + { + "name": "hFindVolumeMountPoint", + "type": "HANDLE" + }, + { + "name": "lpszVolumeMountPoint", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindVolumeMountPointClose": [ + { + "name": "hFindVolumeMountPoint", + "type": "HANDLE" + } + ], + "SetVolumeMountPointA": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCSTR" + }, + { + "name": "lpszVolumeName", + "type": "LPCSTR" + } + ], + "SetVolumeMountPointW": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumeName", + "type": "LPCWSTR" + } + ], + "DeleteVolumeMountPointA": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCSTR" + } + ], + "GetVolumeNameForVolumeMountPointA": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCSTR" + }, + { + "name": "lpszVolumeName", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "GetVolumePathNameA": [ + { + "name": "lpszFileName", + "type": "LPCSTR" + }, + { + "name": "lpszVolumePathName", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "GetVolumePathNamesForVolumeNameA": [ + { + "name": "lpszVolumeName", + "type": "LPCSTR" + }, + { + "name": "lpszVolumePathNames", + "type": "LPCH" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + }, + { + "name": "lpcchReturnLength", + "type": "PDWORD" + } + ], + "CreateActCtxA": [ + { + "name": "pActCtx", + "type": "PCACTCTXA" + } + ], + "CreateActCtxW": [ + { + "name": "pActCtx", + "type": "PCACTCTXW" + } + ], + "AddRefActCtx": [ + { + "name": "hActCtx", + "type": "HANDLE" + } + ], + "ReleaseActCtx": [ + { + "name": "hActCtx", + "type": "HANDLE" + } + ], + "ZombifyActCtx": [ + { + "name": "hActCtx", + "type": "HANDLE" + } + ], + "ActivateActCtx": [ + { + "name": "hActCtx", + "type": "HANDLE" + }, + { + "name": "lpCookie", + "type": "ULONG_PTR" + } + ], + "DeactivateActCtx": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ulCookie", + "type": "ULONG_PTR" + } + ], + "GetCurrentActCtx": [ + { + "name": "lphActCtx", + "type": "HANDLE" + } + ], + "FindActCtxSectionStringA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExtensionGuid", + "type": "GUID" + }, + { + "name": "ulSectionId", + "type": "ULONG" + }, + { + "name": "lpStringToFind", + "type": "LPCSTR" + }, + { + "name": "ReturnedData", + "type": "PACTCTX_SECTION_KEYED_DATA" + } + ], + "FindActCtxSectionStringW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExtensionGuid", + "type": "GUID" + }, + { + "name": "ulSectionId", + "type": "ULONG" + }, + { + "name": "lpStringToFind", + "type": "LPCWSTR" + }, + { + "name": "ReturnedData", + "type": "PACTCTX_SECTION_KEYED_DATA" + } + ], + "FindActCtxSectionGuid": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExtensionGuid", + "type": "GUID" + }, + { + "name": "ulSectionId", + "type": "ULONG" + }, + { + "name": "lpGuidToFind", + "type": "GUID" + }, + { + "name": "ReturnedData", + "type": "PACTCTX_SECTION_KEYED_DATA" + } + ], + "QueryActCtxW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hActCtx", + "type": "HANDLE" + }, + { + "name": "pvSubInstance", + "type": "PVOID" + }, + { + "name": "ulInfoClass", + "type": "ULONG" + }, + { + "name": "pvBuffer", + "type": "PVOID" + }, + { + "name": "cbBuffer", + "type": "SIZE_T" + }, + { + "name": "pcbWrittenOrRequired", + "type": "SIZE_T" + } + ], + "WTSGetActiveConsoleSessionId": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetActiveProcessorGroupCount": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetMaximumProcessorGroupCount": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetActiveProcessorCount": [ + { + "name": "GroupNumber", + "type": "WORD" + } + ], + "GetMaximumProcessorCount": [ + { + "name": "GroupNumber", + "type": "WORD" + } + ], + "GetNumaProcessorNode": [ + { + "name": "Processor", + "type": "UCHAR" + }, + { + "name": "NodeNumber", + "type": "PUCHAR" + } + ], + "GetNumaNodeNumberFromHandle": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "NodeNumber", + "type": "PUSHORT" + } + ], + "GetNumaProcessorNodeEx": [ + { + "name": "Processor", + "type": "PPROCESSOR_NUMBER" + }, + { + "name": "NodeNumber", + "type": "PUSHORT" + } + ], + "GetNumaNodeProcessorMask": [ + { + "name": "Node", + "type": "UCHAR" + }, + { + "name": "ProcessorMask", + "type": "PULONGLONG" + } + ], + "GetNumaAvailableMemoryNode": [ + { + "name": "Node", + "type": "UCHAR" + }, + { + "name": "AvailableBytes", + "type": "PULONGLONG" + } + ], + "GetNumaAvailableMemoryNodeEx": [ + { + "name": "Node", + "type": "USHORT" + }, + { + "name": "AvailableBytes", + "type": "PULONGLONG" + } + ], + "GetNumaProximityNode": [ + { + "name": "ProximityId", + "type": "ULONG" + }, + { + "name": "NodeNumber", + "type": "PUCHAR" + } + ], + "RegisterApplicationRecoveryCallback": [ + { + "name": "pRecoveyCallback", + "type": "APPLICATION_RECOVERY_CALLBACK" + }, + { + "name": "pvParameter", + "type": "PVOID" + }, + { + "name": "dwPingInterval", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UnregisterApplicationRecoveryCallback": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterApplicationRestart": [ + { + "name": "pwzCommandline", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UnregisterApplicationRestart": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetApplicationRecoveryCallback": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pRecoveryCallback", + "type": "APPLICATION_RECOVERY_CALLBACK" + }, + { + "name": "ppvParameter", + "type": "PVOID" + }, + { + "name": "pdwPingInterval", + "type": "PDWORD" + }, + { + "name": "pdwFlags", + "type": "PDWORD" + } + ], + "GetApplicationRestartSettings": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pwzCommandline", + "type": "PWSTR" + }, + { + "name": "pcchSize", + "type": "PDWORD" + }, + { + "name": "pdwFlags", + "type": "PDWORD" + } + ], + "ApplicationRecoveryInProgress": [ + { + "name": "pbCancelled", + "type": "PBOOL" + } + ], + "ApplicationRecoveryFinished": [ + { + "name": "bSuccess", + "type": "BOOL" + } + ], + "GetFileInformationByHandleEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "FileInformationClass", + "type": "FILE_INFO_BY_HANDLE_CLASS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + } + ], + "OpenFileById": [ + { + "name": "hVolumeHint", + "type": "HANDLE" + }, + { + "name": "lpFileId", + "type": "LPFILE_ID_DESCRIPTOR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + } + ], + "CreateSymbolicLinkA": [ + { + "name": "lpSymlinkFileName", + "type": "LPCSTR" + }, + { + "name": "lpTargetFileName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CreateSymbolicLinkW": [ + { + "name": "lpSymlinkFileName", + "type": "LPCWSTR" + }, + { + "name": "lpTargetFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "QueryActCtxSettingsW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hActCtx", + "type": "HANDLE" + }, + { + "name": "settingsNameSpace", + "type": "PCWSTR" + }, + { + "name": "settingName", + "type": "PCWSTR" + }, + { + "name": "pvBuffer", + "type": "PWSTR" + }, + { + "name": "dwBuffer", + "type": "SIZE_T" + }, + { + "name": "pdwWrittenOrRequired", + "type": "SIZE_T" + } + ], + "CreateSymbolicLinkTransactedA": [ + { + "name": "lpSymlinkFileName", + "type": "LPCSTR" + }, + { + "name": "lpTargetFileName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CreateSymbolicLinkTransactedW": [ + { + "name": "lpSymlinkFileName", + "type": "LPCWSTR" + }, + { + "name": "lpTargetFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "AddSecureMemoryCacheCallback": [ + { + "name": "pfnCallBack", + "type": "PSECURE_MEMORY_CACHE_CALLBACK" + } + ], + "RemoveSecureMemoryCacheCallback": [ + { + "name": "pfnCallBack", + "type": "PSECURE_MEMORY_CACHE_CALLBACK" + } + ], + "CopyContext": [ + { + "name": "Destination", + "type": "PCONTEXT" + }, + { + "name": "ContextFlags", + "type": "DWORD" + }, + { + "name": "Source", + "type": "PCONTEXT" + } + ], + "InitializeContext": [ + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "ContextFlags", + "type": "DWORD" + }, + { + "name": "Context", + "type": "PCONTEXT" + }, + { + "name": "ContextLength", + "type": "PDWORD" + } + ], + "GetEnabledXStateFeatures": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetXStateFeaturesMask": [ + { + "name": "Context", + "type": "PCONTEXT" + }, + { + "name": "FeatureMask", + "type": "PDWORD64" + } + ], + "LocateXStateFeature": [ + { + "name": "Context", + "type": "PCONTEXT" + }, + { + "name": "FeatureId", + "type": "DWORD" + }, + { + "name": "Length", + "type": "PDWORD" + } + ], + "SetXStateFeaturesMask": [ + { + "name": "Context", + "type": "PCONTEXT" + }, + { + "name": "FeatureMask", + "type": "DWORD64" + } + ], + "EnableThreadProfiling": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "HardwareCounters", + "type": "DWORD64" + }, + { + "name": "PerformanceDataHandle", + "type": "HANDLE" + } + ], + "DisableThreadProfiling": [ + { + "name": "PerformanceDataHandle", + "type": "HANDLE" + } + ], + "QueryThreadProfiling": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "Enabled", + "type": "PBOOLEAN" + } + ], + "ReadThreadProfilingData": [ + { + "name": "PerformanceDataHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PerformanceData", + "type": "PPERFORMANCE_DATA" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winbio.json b/qiling/extensions/windows_sdk/winbio.json new file mode 100644 index 000000000..a2188ff01 --- /dev/null +++ b/qiling/extensions/windows_sdk/winbio.json @@ -0,0 +1,814 @@ +{ + "WinBioEnumServiceProviders": [ + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + }, + { + "name": "BspSchemaArray", + "type": "WINBIO_BSP_SCHEMA" + }, + { + "name": "BspCount", + "type": "SIZE_T" + } + ], + "WinBioEnumBiometricUnits": [ + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + }, + { + "name": "UnitSchemaArray", + "type": "WINBIO_UNIT_SCHEMA" + }, + { + "name": "UnitCount", + "type": "SIZE_T" + } + ], + "WinBioEnumDatabases": [ + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + }, + { + "name": "StorageSchemaArray", + "type": "WINBIO_STORAGE_SCHEMA" + }, + { + "name": "StorageCount", + "type": "SIZE_T" + } + ], + "WinBioAsyncOpenFramework": [ + { + "name": "NotificationMethod", + "type": "WINBIO_ASYNC_NOTIFICATION_METHOD" + }, + { + "name": "TargetWindow", + "type": "HWND" + }, + { + "name": "MessageCode", + "type": "UINT" + }, + { + "name": "CallbackRoutine", + "type": "PWINBIO_ASYNC_COMPLETION_CALLBACK" + }, + { + "name": "UserData", + "type": "PVOID" + }, + { + "name": "AsynchronousOpen", + "type": "BOOL" + }, + { + "name": "FrameworkHandle", + "type": "WINBIO_FRAMEWORK_HANDLE" + } + ], + "WinBioCloseFramework": [ + { + "name": "FrameworkHandle", + "type": "WINBIO_FRAMEWORK_HANDLE" + } + ], + "WinBioAsyncEnumServiceProviders": [ + { + "name": "FrameworkHandle", + "type": "WINBIO_FRAMEWORK_HANDLE" + }, + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + } + ], + "WinBioAsyncEnumBiometricUnits": [ + { + "name": "FrameworkHandle", + "type": "WINBIO_FRAMEWORK_HANDLE" + }, + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + } + ], + "WinBioAsyncEnumDatabases": [ + { + "name": "FrameworkHandle", + "type": "WINBIO_FRAMEWORK_HANDLE" + }, + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + } + ], + "WinBioAsyncMonitorFrameworkChanges": [ + { + "name": "FrameworkHandle", + "type": "WINBIO_FRAMEWORK_HANDLE" + }, + { + "name": "ChangeTypes", + "type": "WINBIO_FRAMEWORK_CHANGE_TYPE" + } + ], + "WinBioOpenSession": [ + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + }, + { + "name": "PoolType", + "type": "WINBIO_POOL_TYPE" + }, + { + "name": "Flags", + "type": "WINBIO_SESSION_FLAGS" + }, + { + "name": "UnitArray", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "UnitCount", + "type": "SIZE_T" + }, + { + "name": "DatabaseId", + "type": "GUID" + }, + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioAsyncOpenSession": [ + { + "name": "Factor", + "type": "WINBIO_BIOMETRIC_TYPE" + }, + { + "name": "PoolType", + "type": "WINBIO_POOL_TYPE" + }, + { + "name": "Flags", + "type": "WINBIO_SESSION_FLAGS" + }, + { + "name": "UnitArray", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "UnitCount", + "type": "SIZE_T" + }, + { + "name": "DatabaseId", + "type": "GUID" + }, + { + "name": "NotificationMethod", + "type": "WINBIO_ASYNC_NOTIFICATION_METHOD" + }, + { + "name": "TargetWindow", + "type": "HWND" + }, + { + "name": "MessageCode", + "type": "UINT" + }, + { + "name": "CallbackRoutine", + "type": "PWINBIO_ASYNC_COMPLETION_CALLBACK" + }, + { + "name": "UserData", + "type": "PVOID" + }, + { + "name": "AsynchronousOpen", + "type": "BOOL" + }, + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioCloseSession": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioVerify": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Match", + "type": "BOOLEAN" + }, + { + "name": "RejectDetail", + "type": "WINBIO_REJECT_DETAIL" + } + ], + "WinBioVerifyWithCallback": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "VerifyCallback", + "type": "PWINBIO_VERIFY_CALLBACK" + }, + { + "name": "VerifyCallbackContext", + "type": "PVOID" + } + ], + "WinBioIdentify": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "RejectDetail", + "type": "WINBIO_REJECT_DETAIL" + } + ], + "WinBioIdentifyWithCallback": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "IdentifyCallback", + "type": "PWINBIO_IDENTIFY_CALLBACK" + }, + { + "name": "IdentifyCallbackContext", + "type": "PVOID" + } + ], + "WinBioWait": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioCancel": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioLocateSensor": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + } + ], + "WinBioLocateSensorWithCallback": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "LocateCallback", + "type": "PWINBIO_LOCATE_SENSOR_CALLBACK" + }, + { + "name": "LocateCallbackContext", + "type": "PVOID" + } + ], + "WinBioEnrollBegin": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + } + ], + "WinBioEnrollSelect": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "SelectorValue", + "type": "ULONGLONG" + } + ], + "WinBioEnrollCapture": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "RejectDetail", + "type": "WINBIO_REJECT_DETAIL" + } + ], + "WinBioEnrollCaptureWithCallback": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "EnrollCallback", + "type": "PWINBIO_ENROLL_CAPTURE_CALLBACK" + }, + { + "name": "EnrollCallbackContext", + "type": "PVOID" + } + ], + "WinBioEnrollCommit": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "IsNewTemplate", + "type": "BOOLEAN" + } + ], + "WinBioEnrollDiscard": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioEnumEnrollments": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactorArray", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "SubFactorCount", + "type": "SIZE_T" + } + ], + "WinBioRegisterEventMonitor": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "EventMask", + "type": "WINBIO_EVENT_TYPE" + }, + { + "name": "EventCallback", + "type": "PWINBIO_EVENT_CALLBACK" + }, + { + "name": "EventCallbackContext", + "type": "PVOID" + } + ], + "WinBioUnregisterEventMonitor": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioMonitorPresence": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + } + ], + "WinBioCaptureSample": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "Purpose", + "type": "WINBIO_BIR_PURPOSE" + }, + { + "name": "Flags", + "type": "WINBIO_BIR_DATA_FLAGS" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Sample", + "type": "PWINBIO_BIR" + }, + { + "name": "SampleSize", + "type": "SIZE_T" + }, + { + "name": "RejectDetail", + "type": "WINBIO_REJECT_DETAIL" + } + ], + "WinBioCaptureSampleWithCallback": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "Purpose", + "type": "WINBIO_BIR_PURPOSE" + }, + { + "name": "Flags", + "type": "WINBIO_BIR_DATA_FLAGS" + }, + { + "name": "CaptureCallback", + "type": "PWINBIO_CAPTURE_CALLBACK" + }, + { + "name": "CaptureCallbackContext", + "type": "PVOID" + } + ], + "WinBioDeleteTemplate": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + } + ], + "WinBioLockUnit": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + } + ], + "WinBioUnlockUnit": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + } + ], + "WinBioControlUnit": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Component", + "type": "WINBIO_COMPONENT" + }, + { + "name": "ControlCode", + "type": "ULONG" + }, + { + "name": "SendBuffer", + "type": "PUCHAR" + }, + { + "name": "SendBufferSize", + "type": "SIZE_T" + }, + { + "name": "ReceiveBuffer", + "type": "PUCHAR" + }, + { + "name": "ReceiveBufferSize", + "type": "SIZE_T" + }, + { + "name": "ReceiveDataSize", + "type": "SIZE_T" + }, + { + "name": "OperationStatus", + "type": "ULONG" + } + ], + "WinBioControlUnitPrivileged": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Component", + "type": "WINBIO_COMPONENT" + }, + { + "name": "ControlCode", + "type": "ULONG" + }, + { + "name": "SendBuffer", + "type": "PUCHAR" + }, + { + "name": "SendBufferSize", + "type": "SIZE_T" + }, + { + "name": "ReceiveBuffer", + "type": "PUCHAR" + }, + { + "name": "ReceiveBufferSize", + "type": "SIZE_T" + }, + { + "name": "ReceiveDataSize", + "type": "SIZE_T" + }, + { + "name": "OperationStatus", + "type": "ULONG" + } + ], + "WinBioGetProperty": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "PropertyType", + "type": "WINBIO_PROPERTY_TYPE" + }, + { + "name": "PropertyId", + "type": "WINBIO_PROPERTY_ID" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PVOID" + }, + { + "name": "PropertyBufferSize", + "type": "SIZE_T" + } + ], + "WinBioSetProperty": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + }, + { + "name": "PropertyType", + "type": "WINBIO_PROPERTY_TYPE" + }, + { + "name": "PropertyId", + "type": "WINBIO_PROPERTY_ID" + }, + { + "name": "UnitId", + "type": "WINBIO_UNIT_ID" + }, + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "SubFactor", + "type": "WINBIO_BIOMETRIC_SUBTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PVOID" + }, + { + "name": "PropertyBufferSize", + "type": "SIZE_T" + } + ], + "WinBioFree": [ + { + "name": "Address", + "type": "PVOID" + } + ], + "WinBioSetCredential": [ + { + "name": "Type", + "type": "WINBIO_CREDENTIAL_TYPE" + }, + { + "name": "Credential", + "type": "PUCHAR" + }, + { + "name": "CredentialSize", + "type": "SIZE_T" + }, + { + "name": "Format", + "type": "WINBIO_CREDENTIAL_FORMAT" + } + ], + "WinBioRemoveCredential": [ + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "Type", + "type": "WINBIO_CREDENTIAL_TYPE" + } + ], + "WinBioRemoveAllCredentials": [ + { + "name": "VOID", + "type": "void" + } + ], + "WinBioRemoveAllDomainCredentials": [ + { + "name": "VOID", + "type": "void" + } + ], + "WinBioGetCredentialState": [ + { + "name": "Identity", + "type": "WINBIO_IDENTITY" + }, + { + "name": "Type", + "type": "WINBIO_CREDENTIAL_TYPE" + }, + { + "name": "CredentialState", + "type": "WINBIO_CREDENTIAL_STATE" + } + ], + "WinBioLogonIdentifiedUser": [ + { + "name": "SessionHandle", + "type": "WINBIO_SESSION_HANDLE" + } + ], + "WinBioGetEnrolledFactors": [ + { + "name": "AccountOwner", + "type": "WINBIO_IDENTITY" + }, + { + "name": "EnrolledFactors", + "type": "WINBIO_BIOMETRIC_TYPE" + } + ], + "WinBioGetEnabledSetting": [ + { + "name": "Value", + "type": "BOOLEAN" + }, + { + "name": "Source", + "type": "PWINBIO_SETTING_SOURCE_TYPE" + } + ], + "WinBioGetLogonSetting": [ + { + "name": "Value", + "type": "BOOLEAN" + }, + { + "name": "Source", + "type": "PWINBIO_SETTING_SOURCE_TYPE" + } + ], + "WinBioGetDomainLogonSetting": [ + { + "name": "Value", + "type": "BOOLEAN" + }, + { + "name": "Source", + "type": "PWINBIO_SETTING_SOURCE_TYPE" + } + ], + "WinBioAcquireFocus": [ + { + "name": "VOID", + "type": "void" + } + ], + "WinBioReleaseFocus": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wincred.json b/qiling/extensions/windows_sdk/wincred.json new file mode 100644 index 000000000..374fb879d --- /dev/null +++ b/qiling/extensions/windows_sdk/wincred.json @@ -0,0 +1,934 @@ +{ + "CredWriteW": [ + { + "name": "Credential", + "type": "PCREDENTIALW" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredWriteA": [ + { + "name": "Credential", + "type": "PCREDENTIALA" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredReadW": [ + { + "name": "TargetName", + "type": "LPCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + } + ], + "CredReadA": [ + { + "name": "TargetName", + "type": "LPCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + } + ], + "CredEnumerateW": [ + { + "name": "Filter", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Count", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + } + ], + "CredEnumerateA": [ + { + "name": "Filter", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Count", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + } + ], + "CredWriteDomainCredentialsW": [ + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONW" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredWriteDomainCredentialsA": [ + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONA" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredReadDomainCredentialsW": [ + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONW" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Count", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + } + ], + "CredReadDomainCredentialsA": [ + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Count", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + } + ], + "CredDeleteW": [ + { + "name": "TargetName", + "type": "LPCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredDeleteA": [ + { + "name": "TargetName", + "type": "LPCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredRenameW": [ + { + "name": "OldTargetName", + "type": "LPCWSTR" + }, + { + "name": "NewTargetName", + "type": "LPCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredRenameA": [ + { + "name": "OldTargetName", + "type": "LPCSTR" + }, + { + "name": "NewTargetName", + "type": "LPCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredGetTargetInfoW": [ + { + "name": "TargetName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONW" + } + ], + "CredGetTargetInfoA": [ + { + "name": "TargetName", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONA" + } + ], + "CredMarshalCredentialW": [ + { + "name": "CredType", + "type": "CRED_MARSHAL_TYPE" + }, + { + "name": "Credential", + "type": "PVOID" + }, + { + "name": "MarshaledCredential", + "type": "LPWSTR" + } + ], + "CredMarshalCredentialA": [ + { + "name": "CredType", + "type": "CRED_MARSHAL_TYPE" + }, + { + "name": "Credential", + "type": "PVOID" + }, + { + "name": "MarshaledCredential", + "type": "LPSTR" + } + ], + "CredUnmarshalCredentialW": [ + { + "name": "MarshaledCredential", + "type": "LPCWSTR" + }, + { + "name": "CredType", + "type": "PCRED_MARSHAL_TYPE" + }, + { + "name": "Credential", + "type": "PVOID" + } + ], + "CredUnmarshalCredentialA": [ + { + "name": "MarshaledCredential", + "type": "LPCSTR" + }, + { + "name": "CredType", + "type": "PCRED_MARSHAL_TYPE" + }, + { + "name": "Credential", + "type": "PVOID" + } + ], + "CredIsMarshaledCredentialW": [ + { + "name": "MarshaledCredential", + "type": "LPCWSTR" + } + ], + "CredIsMarshaledCredentialA": [ + { + "name": "MarshaledCredential", + "type": "LPCSTR" + } + ], + "CredUnPackAuthenticationBufferW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pAuthBuffer", + "type": "PVOID" + }, + { + "name": "cbAuthBuffer", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "LPWSTR" + }, + { + "name": "pcchMaxUserName", + "type": "DWORD" + }, + { + "name": "pszDomainName", + "type": "LPWSTR" + }, + { + "name": "pcchMaxDomainName", + "type": "DWORD" + }, + { + "name": "pszPassword", + "type": "LPWSTR" + }, + { + "name": "pcchMaxPassword", + "type": "DWORD" + } + ], + "CredUnPackAuthenticationBufferA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pAuthBuffer", + "type": "PVOID" + }, + { + "name": "cbAuthBuffer", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "LPSTR" + }, + { + "name": "pcchlMaxUserName", + "type": "DWORD" + }, + { + "name": "pszDomainName", + "type": "LPSTR" + }, + { + "name": "pcchMaxDomainName", + "type": "DWORD" + }, + { + "name": "pszPassword", + "type": "LPSTR" + }, + { + "name": "pcchMaxPassword", + "type": "DWORD" + } + ], + "CredPackAuthenticationBufferW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "LPWSTR" + }, + { + "name": "pszPassword", + "type": "LPWSTR" + }, + { + "name": "pPackedCredentials", + "type": "PBYTE" + }, + { + "name": "pcbPackedCredentials", + "type": "DWORD" + } + ], + "CredPackAuthenticationBufferA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "LPSTR" + }, + { + "name": "pszPassword", + "type": "LPSTR" + }, + { + "name": "pPackedCredentials", + "type": "PBYTE" + }, + { + "name": "pcbPackedCredentials", + "type": "DWORD" + } + ], + "CredProtectW": [ + { + "name": "fAsSelf", + "type": "BOOL" + }, + { + "name": "pszCredentials", + "type": "LPWSTR" + }, + { + "name": "cchCredentials", + "type": "DWORD" + }, + { + "name": "pszProtectedCredentials", + "type": "LPWSTR" + }, + { + "name": "pcchMaxChars", + "type": "DWORD" + }, + { + "name": "ProtectionType", + "type": "CRED_PROTECTION_TYPE" + } + ], + "CredProtectA": [ + { + "name": "fAsSelf", + "type": "BOOL" + }, + { + "name": "pszCredentials", + "type": "LPSTR" + }, + { + "name": "cchCredentials", + "type": "DWORD" + }, + { + "name": "pszProtectedCredentials", + "type": "LPSTR" + }, + { + "name": "pcchMaxChars", + "type": "DWORD" + }, + { + "name": "ProtectionType", + "type": "CRED_PROTECTION_TYPE" + } + ], + "CredUnprotectW": [ + { + "name": "fAsSelf", + "type": "BOOL" + }, + { + "name": "pszProtectedCredentials", + "type": "LPWSTR" + }, + { + "name": "cchProtectedCredentials", + "type": "DWORD" + }, + { + "name": "pszCredentials", + "type": "LPWSTR" + }, + { + "name": "pcchMaxChars", + "type": "DWORD" + } + ], + "CredUnprotectA": [ + { + "name": "fAsSelf", + "type": "BOOL" + }, + { + "name": "pszProtectedCredentials", + "type": "LPSTR" + }, + { + "name": "cchProtectedCredentials", + "type": "DWORD" + }, + { + "name": "pszCredentials", + "type": "LPSTR" + }, + { + "name": "pcchMaxChars", + "type": "DWORD" + } + ], + "CredIsProtectedW": [ + { + "name": "pszProtectedCredentials", + "type": "LPWSTR" + }, + { + "name": "pProtectionType", + "type": "CRED_PROTECTION_TYPE" + } + ], + "CredIsProtectedA": [ + { + "name": "pszProtectedCredentials", + "type": "LPSTR" + }, + { + "name": "pProtectionType", + "type": "CRED_PROTECTION_TYPE" + } + ], + "CredFindBestCredentialW": [ + { + "name": "TargetName", + "type": "LPCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + } + ], + "CredFindBestCredentialA": [ + { + "name": "TargetName", + "type": "LPCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + } + ], + "CredGetSessionTypes": [ + { + "name": "MaximumPersistCount", + "type": "DWORD" + }, + { + "name": "MaximumPersist", + "type": "LPDWORD" + } + ], + "CredFree": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "CredUIPromptForCredentialsW": [ + { + "name": "pUiInfo", + "type": "PCREDUI_INFOW" + }, + { + "name": "pszTargetName", + "type": "PCWSTR" + }, + { + "name": "pContext", + "type": "PCtxtHandle" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "PWSTR" + }, + { + "name": "ulUserNameBufferSize", + "type": "ULONG" + }, + { + "name": "pszPassword", + "type": "PWSTR" + }, + { + "name": "ulPasswordBufferSize", + "type": "ULONG" + }, + { + "name": "save", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIPromptForCredentialsA": [ + { + "name": "pUiInfo", + "type": "PCREDUI_INFOA" + }, + { + "name": "pszTargetName", + "type": "PCSTR" + }, + { + "name": "pContext", + "type": "PCtxtHandle" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "PSTR" + }, + { + "name": "ulUserNameBufferSize", + "type": "ULONG" + }, + { + "name": "pszPassword", + "type": "PSTR" + }, + { + "name": "ulPasswordBufferSize", + "type": "ULONG" + }, + { + "name": "save", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIPromptForWindowsCredentialsW": [ + { + "name": "pUiInfo", + "type": "PCREDUI_INFOW" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "pulAuthPackage", + "type": "ULONG" + }, + { + "name": "pvInAuthBuffer", + "type": "LPCVOID" + }, + { + "name": "ulInAuthBufferSize", + "type": "ULONG" + }, + { + "name": "ppvOutAuthBuffer", + "type": "LPVOID" + }, + { + "name": "pulOutAuthBufferSize", + "type": "ULONG" + }, + { + "name": "pfSave", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIPromptForWindowsCredentialsA": [ + { + "name": "pUiInfo", + "type": "PCREDUI_INFOA" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "pulAuthPackage", + "type": "ULONG" + }, + { + "name": "pvInAuthBuffer", + "type": "LPCVOID" + }, + { + "name": "ulInAuthBufferSize", + "type": "ULONG" + }, + { + "name": "ppvOutAuthBuffer", + "type": "LPVOID" + }, + { + "name": "pulOutAuthBufferSize", + "type": "ULONG" + }, + { + "name": "pfSave", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIParseUserNameW": [ + { + "name": "UserName", + "type": "PCWSTR" + }, + { + "name": "user", + "type": "WCHAR" + }, + { + "name": "userBufferSize", + "type": "ULONG" + }, + { + "name": "domain", + "type": "WCHAR" + }, + { + "name": "domainBufferSize", + "type": "ULONG" + } + ], + "CredUIParseUserNameA": [ + { + "name": "userName", + "type": "PCSTR" + }, + { + "name": "user", + "type": "CHAR" + }, + { + "name": "userBufferSize", + "type": "ULONG" + }, + { + "name": "domain", + "type": "CHAR" + }, + { + "name": "domainBufferSize", + "type": "ULONG" + } + ], + "CredUICmdLinePromptForCredentialsW": [ + { + "name": "pszTargetName", + "type": "PCWSTR" + }, + { + "name": "pContext", + "type": "PCtxtHandle" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "UserName", + "type": "PWSTR" + }, + { + "name": "ulUserBufferSize", + "type": "ULONG" + }, + { + "name": "pszPassword", + "type": "PWSTR" + }, + { + "name": "ulPasswordBufferSize", + "type": "ULONG" + }, + { + "name": "pfSave", + "type": "PBOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUICmdLinePromptForCredentialsA": [ + { + "name": "pszTargetName", + "type": "PCSTR" + }, + { + "name": "pContext", + "type": "PCtxtHandle" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "UserName", + "type": "PSTR" + }, + { + "name": "ulUserBufferSize", + "type": "ULONG" + }, + { + "name": "pszPassword", + "type": "PSTR" + }, + { + "name": "ulPasswordBufferSize", + "type": "ULONG" + }, + { + "name": "pfSave", + "type": "PBOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIConfirmCredentialsW": [ + { + "name": "pszTargetName", + "type": "PCWSTR" + }, + { + "name": "bConfirm", + "type": "BOOL" + } + ], + "CredUIConfirmCredentialsA": [ + { + "name": "pszTargetName", + "type": "PCSTR" + }, + { + "name": "bConfirm", + "type": "BOOL" + } + ], + "CredUIStoreSSOCredW": [ + { + "name": "pszRealm", + "type": "PCWSTR" + }, + { + "name": "pszUsername", + "type": "PCWSTR" + }, + { + "name": "pszPassword", + "type": "PCWSTR" + }, + { + "name": "bPersist", + "type": "BOOL" + } + ], + "CredUIReadSSOCredW": [ + { + "name": "pszRealm", + "type": "PCWSTR" + }, + { + "name": "ppszUsername", + "type": "PWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wincrypt.json b/qiling/extensions/windows_sdk/wincrypt.json new file mode 100644 index 000000000..ec5bda91f --- /dev/null +++ b/qiling/extensions/windows_sdk/wincrypt.json @@ -0,0 +1,5200 @@ +{ + "CryptAcquireContextA": [ + { + "name": "phProv", + "type": "HCRYPTPROV" + }, + { + "name": "szContainer", + "type": "LPCSTR" + }, + { + "name": "szProvider", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptAcquireContextW": [ + { + "name": "phProv", + "type": "HCRYPTPROV" + }, + { + "name": "szContainer", + "type": "LPCWSTR" + }, + { + "name": "szProvider", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptReleaseContext": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGenKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDeriveKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "hBaseData", + "type": "HCRYPTHASH" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDestroyKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + } + ], + "CryptSetKeyParam": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetKeyParam": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetHashParam": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetHashParam": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProvParam": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetProvParam": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGenRandom": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "CryptGetUserKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "phUserKey", + "type": "HCRYPTKEY" + } + ], + "CryptExportKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hExpKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwBlobType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + } + ], + "CryptImportKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwDataLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptEncrypt": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "Final", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "CryptDecrypt": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "Final", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + } + ], + "CryptCreateHash": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phHash", + "type": "HCRYPTHASH" + } + ], + "CryptHashData": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptHashSessionKey": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptDestroyHash": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + } + ], + "CryptSignHashA": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "szDescription", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pdwSigLen", + "type": "DWORD" + } + ], + "CryptSignHashW": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "szDescription", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pdwSigLen", + "type": "DWORD" + } + ], + "CryptVerifySignatureA": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "dwSigLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "szDescription", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptVerifySignatureW": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "dwSigLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "szDescription", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProviderA": [ + { + "name": "pszProvName", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + } + ], + "CryptSetProviderW": [ + { + "name": "pszProvName", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + } + ], + "CryptSetProviderExA": [ + { + "name": "pszProvName", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProviderExW": [ + { + "name": "pszProvName", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetDefaultProviderA": [ + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszProvName", + "type": "LPSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptGetDefaultProviderW": [ + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszProvName", + "type": "LPWSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptEnumProviderTypesA": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szTypeName", + "type": "LPSTR" + }, + { + "name": "pcbTypeName", + "type": "DWORD" + } + ], + "CryptEnumProviderTypesW": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szTypeName", + "type": "LPWSTR" + }, + { + "name": "pcbTypeName", + "type": "DWORD" + } + ], + "CryptEnumProvidersA": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szProvName", + "type": "LPSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptEnumProvidersW": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szProvName", + "type": "LPWSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptContextAddRef": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptDuplicateKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDuplicateHash": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phHash", + "type": "HCRYPTHASH" + } + ], + "GetEncSChannel": [ + { + "name": "pData", + "type": "BYTE" + }, + { + "name": "dwDecSize", + "type": "DWORD" + } + ], + "CryptFormatObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFormatType", + "type": "DWORD" + }, + { + "name": "dwFormatStrType", + "type": "DWORD" + }, + { + "name": "pFormatStruct", + "type": "void" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbFormat", + "type": "void" + }, + { + "name": "pcbFormat", + "type": "DWORD" + } + ], + "CryptEncodeObjectEx": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pEncodePara", + "type": "PCRYPT_ENCODE_PARA" + }, + { + "name": "pvEncoded", + "type": "void" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptEncodeObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptDecodeObjectEx": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pDecodePara", + "type": "PCRYPT_DECODE_PARA" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pcbStructInfo", + "type": "DWORD" + } + ], + "CryptDecodeObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pcbStructInfo", + "type": "DWORD" + } + ], + "CryptInstallOIDFunctionAddress": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "cFuncEntry", + "type": "DWORD" + }, + { + "name": "rgFuncEntry", + "type": "CRYPT_OID_FUNC_ENTRY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptInitOIDFunctionSet": [ + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetOIDFunctionAddress": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppvFuncAddr", + "type": "void" + }, + { + "name": "phFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + } + ], + "CryptGetDefaultOIDDllList": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pwszDllList", + "type": "WCHAR" + }, + { + "name": "pcchDllList", + "type": "DWORD" + } + ], + "CryptGetDefaultOIDFunctionAddress": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppvFuncAddr", + "type": "void" + }, + { + "name": "phFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + } + ], + "CryptFreeOIDFunctionAddress": [ + { + "name": "hFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptRegisterOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + }, + { + "name": "pszOverrideFuncName", + "type": "LPCSTR" + } + ], + "CryptUnregisterOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + } + ], + "CryptRegisterDefaultOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + } + ], + "CryptUnregisterDefaultOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + } + ], + "CryptSetOIDFunctionValue": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszValueName", + "type": "LPCWSTR" + }, + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pbValueData", + "type": "BYTE" + }, + { + "name": "cbValueData", + "type": "DWORD" + } + ], + "CryptGetOIDFunctionValue": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszValueName", + "type": "LPCWSTR" + }, + { + "name": "pdwValueType", + "type": "DWORD" + }, + { + "name": "pbValueData", + "type": "BYTE" + }, + { + "name": "pcbValueData", + "type": "DWORD" + } + ], + "CryptEnumOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnumOIDFunc", + "type": "PFN_CRYPT_ENUM_OID_FUNC" + } + ], + "CryptFindOIDInfo": [ + { + "name": "dwKeyType", + "type": "DWORD" + }, + { + "name": "pvKey", + "type": "void" + }, + { + "name": "dwGroupId", + "type": "DWORD" + } + ], + "CryptRegisterOIDInfo": [ + { + "name": "pInfo", + "type": "PCCRYPT_OID_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptUnregisterOIDInfo": [ + { + "name": "pInfo", + "type": "PCCRYPT_OID_INFO" + } + ], + "CryptEnumOIDInfo": [ + { + "name": "dwGroupId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnumOIDInfo", + "type": "PFN_CRYPT_ENUM_OID_INFO" + } + ], + "CryptFindLocalizedName": [ + { + "name": "pwszCryptName", + "type": "LPCWSTR" + } + ], + "CryptMsgOpenToEncode": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "pvMsgEncodeInfo", + "type": "void" + }, + { + "name": "pszInnerContentObjID", + "type": "LPSTR" + }, + { + "name": "pStreamInfo", + "type": "PCMSG_STREAM_INFO" + } + ], + "CryptMsgCalculateEncodedLength": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "pvMsgEncodeInfo", + "type": "void" + }, + { + "name": "pszInnerContentObjID", + "type": "LPSTR" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "CryptMsgOpenToDecode": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "pRecipientInfo", + "type": "PCERT_INFO" + }, + { + "name": "pStreamInfo", + "type": "PCMSG_STREAM_INFO" + } + ], + "CryptMsgDuplicate": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + } + ], + "CryptMsgClose": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + } + ], + "CryptMsgUpdate": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "fFinal", + "type": "BOOL" + } + ], + "CryptMsgGetParam": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwParamType", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CryptMsgControl": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCtrlType", + "type": "DWORD" + }, + { + "name": "pvCtrlPara", + "type": "void" + } + ], + "CryptMsgVerifyCountersignatureEncoded": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "pbSignerInfoCountersignature", + "type": "PBYTE" + }, + { + "name": "cbSignerInfoCountersignature", + "type": "DWORD" + }, + { + "name": "pciCountersigner", + "type": "PCERT_INFO" + } + ], + "CryptMsgVerifyCountersignatureEncodedEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "pbSignerInfoCountersignature", + "type": "PBYTE" + }, + { + "name": "cbSignerInfoCountersignature", + "type": "DWORD" + }, + { + "name": "dwSignerType", + "type": "DWORD" + }, + { + "name": "pvSigner", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvExtra", + "type": "void" + } + ], + "CryptMsgCountersign": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "cCountersigners", + "type": "DWORD" + }, + { + "name": "rgCountersigners", + "type": "PCMSG_SIGNER_ENCODE_INFO" + } + ], + "CryptMsgCountersignEncoded": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "cCountersigners", + "type": "DWORD" + }, + { + "name": "rgCountersigners", + "type": "PCMSG_SIGNER_ENCODE_INFO" + }, + { + "name": "pbCountersignature", + "type": "PBYTE" + }, + { + "name": "pcbCountersignature", + "type": "PDWORD" + } + ], + "CertOpenStore": [ + { + "name": "lpszStoreProvider", + "type": "LPCSTR" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvPara", + "type": "void" + } + ], + "CertDuplicateStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + } + ], + "CertSaveStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSaveAs", + "type": "DWORD" + }, + { + "name": "dwSaveTo", + "type": "DWORD" + }, + { + "name": "pvSaveToPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertCloseStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetSubjectCertificateFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId", + "type": "PCERT_INFO" + } + ], + "CertEnumCertificatesInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertFindCertificateInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertGetIssuerCertificateFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pSubjectContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pPrevIssuerContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertVerifySubjectCertificateContext": [ + { + "name": "pSubject", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pIssuer", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertDuplicateCertificateContext": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertCreateCertificateContext": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CertFreeCertificateContext": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertSetCertificateContextProperty": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCertificateContextProperty": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCertificateContextProperties": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertCreateCTLEntryFromCertificateContextProperties": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "cOptAttr", + "type": "DWORD" + }, + { + "name": "rgOptAttr", + "type": "PCRYPT_ATTRIBUTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pCtlEntry", + "type": "PCTL_ENTRY" + }, + { + "name": "pcbCtlEntry", + "type": "DWORD" + } + ], + "CertSetCertificateContextPropertiesFromCTLEntry": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCtlEntry", + "type": "PCTL_ENTRY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetCRLFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pIssuerContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertEnumCRLsInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertFindCRLInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertDuplicateCRLContext": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertCreateCRLContext": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCrlEncoded", + "type": "BYTE" + }, + { + "name": "cbCrlEncoded", + "type": "DWORD" + } + ], + "CertFreeCRLContext": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertSetCRLContextProperty": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCRLContextProperty": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCRLContextProperties": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertFindCertificateInCRL": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "ppCrlEntry", + "type": "PCRL_ENTRY" + } + ], + "CertIsValidCRLForCertificate": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCrl", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertAddEncodedCertificateToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddCertificateContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddSerializedElementToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "cbElement", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContextTypeFlags", + "type": "DWORD" + }, + { + "name": "pdwContextType", + "type": "DWORD" + }, + { + "name": "ppvContext", + "type": "void" + } + ], + "CertDeleteCertificateFromStore": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddEncodedCRLToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCrlEncoded", + "type": "BYTE" + }, + { + "name": "cbCrlEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertAddCRLContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertDeleteCRLFromStore": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertSerializeCertificateStoreElement": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertSerializeCRLStoreElement": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertDuplicateCTLContext": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertCreateCTLContext": [ + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlEncoded", + "type": "BYTE" + }, + { + "name": "cbCtlEncoded", + "type": "DWORD" + } + ], + "CertFreeCTLContext": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertSetCTLContextProperty": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCTLContextProperty": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCTLContextProperties": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertEnumCTLsInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertFindSubjectInCTL": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertFindCTLInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddEncodedCTLToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlEncoded", + "type": "BYTE" + }, + { + "name": "cbCtlEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddCTLContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertSerializeCTLStoreElement": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertDeleteCTLFromStore": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddCertificateLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddCRLLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertAddCTLLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddStoreToCollection": [ + { + "name": "hCollectionStore", + "type": "HCERTSTORE" + }, + { + "name": "hSiblingStore", + "type": "HCERTSTORE" + }, + { + "name": "dwUpdateFlags", + "type": "DWORD" + }, + { + "name": "dwPriority", + "type": "DWORD" + } + ], + "CertRemoveStoreFromCollection": [ + { + "name": "hCollectionStore", + "type": "HCERTSTORE" + }, + { + "name": "hSiblingStore", + "type": "HCERTSTORE" + } + ], + "CertControlStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCtrlType", + "type": "DWORD" + }, + { + "name": "pvCtrlPara", + "type": "void" + } + ], + "CertSetStoreProperty": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetStoreProperty": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertRegisterSystemStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pStoreInfo", + "type": "PCERT_SYSTEM_STORE_INFO" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertRegisterPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszStoreName", + "type": "LPCWSTR" + }, + { + "name": "pStoreInfo", + "type": "PCERT_PHYSICAL_STORE_INFO" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertUnregisterSystemStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertUnregisterPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszStoreName", + "type": "LPCWSTR" + } + ], + "CertEnumSystemStoreLocation": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_SYSTEM_STORE_LOCATION" + } + ], + "CertEnumSystemStore": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvSystemStoreLocationPara", + "type": "void" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_SYSTEM_STORE" + } + ], + "CertEnumPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_PHYSICAL_STORE" + } + ], + "CertGetEnhancedKeyUsage": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pUsage", + "type": "PCERT_ENHKEY_USAGE" + }, + { + "name": "pcbUsage", + "type": "DWORD" + } + ], + "CertSetEnhancedKeyUsage": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pUsage", + "type": "PCERT_ENHKEY_USAGE" + } + ], + "CertAddEnhancedKeyUsageIdentifier": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pszUsageIdentifier", + "type": "LPCSTR" + } + ], + "CertRemoveEnhancedKeyUsageIdentifier": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pszUsageIdentifier", + "type": "LPCSTR" + } + ], + "CertGetValidUsages": [ + { + "name": "cCerts", + "type": "DWORD" + }, + { + "name": "rghCerts", + "type": "PCCERT_CONTEXT" + }, + { + "name": "cNumOIDs", + "type": "int" + }, + { + "name": "rghOIDs", + "type": "LPSTR" + }, + { + "name": "pcbOIDs", + "type": "DWORD" + } + ], + "CryptMsgGetAndVerifySigner": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "cSignerStore", + "type": "DWORD" + }, + { + "name": "rghSignerStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwSignerIndex", + "type": "DWORD" + } + ], + "CryptMsgSignCTL": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlContent", + "type": "BYTE" + }, + { + "name": "cbCtlContent", + "type": "DWORD" + }, + { + "name": "pSignInfo", + "type": "PCMSG_SIGNED_ENCODE_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptMsgEncodeAndSignCTL": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pCtlInfo", + "type": "PCTL_INFO" + }, + { + "name": "pSignInfo", + "type": "PCMSG_SIGNED_ENCODE_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CertFindSubjectInSortedCTL": [ + { + "name": "pSubjectIdentifier", + "type": "PCRYPT_DATA_BLOB" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pEncodedAttributes", + "type": "PCRYPT_DER_BLOB" + } + ], + "CertEnumSubjectInSortedCTL": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "ppvNextSubject", + "type": "void" + }, + { + "name": "pSubjectIdentifier", + "type": "PCRYPT_DER_BLOB" + }, + { + "name": "pEncodedAttributes", + "type": "PCRYPT_DER_BLOB" + } + ], + "CertVerifyCTLUsage": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "pSubjectUsage", + "type": "PCTL_USAGE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pVerifyUsagePara", + "type": "PCTL_VERIFY_USAGE_PARA" + }, + { + "name": "pVerifyUsageStatus", + "type": "PCTL_VERIFY_USAGE_STATUS" + } + ], + "CertVerifyRevocation": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwRevType", + "type": "DWORD" + }, + { + "name": "cContext", + "type": "DWORD" + }, + { + "name": "rgpvContext", + "type": "PVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pRevPara", + "type": "PCERT_REVOCATION_PARA" + }, + { + "name": "pRevStatus", + "type": "PCERT_REVOCATION_STATUS" + } + ], + "CertCompareIntegerBlob": [ + { + "name": "pInt1", + "type": "PCRYPT_INTEGER_BLOB" + }, + { + "name": "pInt2", + "type": "PCRYPT_INTEGER_BLOB" + } + ], + "CertCompareCertificate": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId1", + "type": "PCERT_INFO" + }, + { + "name": "pCertId2", + "type": "PCERT_INFO" + } + ], + "CertCompareCertificateName": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertName1", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "pCertName2", + "type": "PCERT_NAME_BLOB" + } + ], + "CertIsRDNAttrsInCertificateName": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pCertName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "pRDN", + "type": "PCERT_RDN" + } + ], + "CertComparePublicKeyInfo": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pPublicKey1", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pPublicKey2", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CertGetPublicKeyLength": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pPublicKey", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CryptVerifyCertificateSignature": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pPublicKey", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CryptVerifyCertificateSignatureEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "dwIssuerType", + "type": "DWORD" + }, + { + "name": "pvIssuer", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvExtra", + "type": "void" + } + ], + "CertIsStrongHashToSign": [ + { + "name": "pStrongSignPara", + "type": "PCCERT_STRONG_SIGN_PARA" + }, + { + "name": "pwszCNGHashAlgid", + "type": "LPCWSTR" + }, + { + "name": "pSigningCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptHashToBeSigned": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptHashCertificate": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptHashCertificate2": [ + { + "name": "pwszCNGHashAlgid", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptSignCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncodedToBeSigned", + "type": "BYTE" + }, + { + "name": "cbEncodedToBeSigned", + "type": "DWORD" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pvHashAuxInfo", + "type": "void" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pcbSignature", + "type": "DWORD" + } + ], + "CryptSignAndEncodeCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pvHashAuxInfo", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CertVerifyTimeValidity": [ + { + "name": "pTimeToVerify", + "type": "LPFILETIME" + }, + { + "name": "pCertInfo", + "type": "PCERT_INFO" + } + ], + "CertVerifyCRLTimeValidity": [ + { + "name": "pTimeToVerify", + "type": "LPFILETIME" + }, + { + "name": "pCrlInfo", + "type": "PCRL_INFO" + } + ], + "CertVerifyValidityNesting": [ + { + "name": "pSubjectInfo", + "type": "PCERT_INFO" + }, + { + "name": "pIssuerInfo", + "type": "PCERT_INFO" + } + ], + "CertVerifyCRLRevocation": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId", + "type": "PCERT_INFO" + }, + { + "name": "cCrlInfo", + "type": "DWORD" + }, + { + "name": "rgpCrlInfo", + "type": "PCRL_INFO" + } + ], + "CertAlgIdToOID": [ + { + "name": "dwAlgId", + "type": "DWORD" + } + ], + "CertOIDToAlgId": [ + { + "name": "pszObjId", + "type": "LPCSTR" + } + ], + "CertFindExtension": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "cExtensions", + "type": "DWORD" + }, + { + "name": "rgExtensions", + "type": "CERT_EXTENSION" + } + ], + "CertFindAttribute": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "cAttr", + "type": "DWORD" + }, + { + "name": "rgAttr", + "type": "CRYPT_ATTRIBUTE" + } + ], + "CertFindRDNAttr": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "pName", + "type": "PCERT_NAME_INFO" + } + ], + "CertGetIntendedKeyUsage": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertInfo", + "type": "PCERT_INFO" + }, + { + "name": "pbKeyUsage", + "type": "BYTE" + }, + { + "name": "cbKeyUsage", + "type": "DWORD" + } + ], + "CryptInstallDefaultContext": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwDefaultType", + "type": "DWORD" + }, + { + "name": "pvDefaultPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "phDefaultContext", + "type": "HCRYPTDEFAULTCONTEXT" + } + ], + "CryptUninstallDefaultContext": [ + { + "name": "hDefaultContext", + "type": "HCRYPTDEFAULTCONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CryptExportPublicKeyInfo": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptExportPublicKeyInfoEx": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPublicKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptExportPublicKeyInfoFromBCryptKeyHandle": [ + { + "name": "hBCryptKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPublicKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptImportPublicKeyInfo": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptImportPublicKeyInfoEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "aiKeyAlg", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptImportPublicKeyInfoEx2": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + } + ], + "CryptAcquireCertificatePrivateKey": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvParameters", + "type": "void" + }, + { + "name": "phCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "pdwKeySpec", + "type": "DWORD" + }, + { + "name": "pfCallerFreeProvOrNCryptKey", + "type": "BOOL" + } + ], + "CryptFindCertificateKeyProvInfo": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CryptImportPKCS8": [ + { + "name": "sPrivateKeyAndParams", + "type": "CRYPT_PKCS8_IMPORT_PARAMS" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "pvAuxInfo", + "type": "void" + } + ], + "CryptExportPKCS8": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "pszPrivateKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pbPrivateKeyBlob", + "type": "BYTE" + }, + { + "name": "pcbPrivateKeyBlob", + "type": "DWORD" + } + ], + "CryptExportPKCS8Ex": [ + { + "name": "psExportParams", + "type": "CRYPT_PKCS8_EXPORT_PARAMS" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pbPrivateKeyBlob", + "type": "BYTE" + }, + { + "name": "pcbPrivateKeyBlob", + "type": "DWORD" + } + ], + "CryptHashPublicKeyInfo": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CertRDNValueToStrA": [ + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pValue", + "type": "PCERT_RDN_VALUE_BLOB" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertRDNValueToStrW": [ + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pValue", + "type": "PCERT_RDN_VALUE_BLOB" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertNameToStrA": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertNameToStrW": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertStrToNameA": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszX500", + "type": "LPCSTR" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + }, + { + "name": "ppszError", + "type": "LPCSTR" + } + ], + "CertStrToNameW": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszX500", + "type": "LPCWSTR" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + }, + { + "name": "ppszError", + "type": "LPCWSTR" + } + ], + "CertGetNameStringA": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvTypePara", + "type": "void" + }, + { + "name": "pszNameString", + "type": "LPSTR" + }, + { + "name": "cchNameString", + "type": "DWORD" + } + ], + "CertGetNameStringW": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvTypePara", + "type": "void" + }, + { + "name": "pszNameString", + "type": "LPWSTR" + }, + { + "name": "cchNameString", + "type": "DWORD" + } + ], + "CryptSignMessage": [ + { + "name": "pSignPara", + "type": "PCRYPT_SIGN_MESSAGE_PARA" + }, + { + "name": "fDetachedSignature", + "type": "BOOL" + }, + { + "name": "cToBeSigned", + "type": "DWORD" + }, + { + "name": "rgpbToBeSigned", + "type": "BYTE" + }, + { + "name": "rgcbToBeSigned", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyMessageSignature": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptGetMessageSignerCount": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + } + ], + "CryptGetMessageCertificates": [ + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyDetachedMessageSignature": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbDetachedSignBlob", + "type": "BYTE" + }, + { + "name": "cbDetachedSignBlob", + "type": "DWORD" + }, + { + "name": "cToBeSigned", + "type": "DWORD" + }, + { + "name": "rgpbToBeSigned", + "type": "BYTE" + }, + { + "name": "rgcbToBeSigned", + "type": "DWORD" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptEncryptMessage": [ + { + "name": "pEncryptPara", + "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" + }, + { + "name": "cRecipientCert", + "type": "DWORD" + }, + { + "name": "rgpRecipientCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbToBeEncrypted", + "type": "BYTE" + }, + { + "name": "cbToBeEncrypted", + "type": "DWORD" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "pcbEncryptedBlob", + "type": "DWORD" + } + ], + "CryptDecryptMessage": [ + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "cbEncryptedBlob", + "type": "DWORD" + }, + { + "name": "pbDecrypted", + "type": "BYTE" + }, + { + "name": "pcbDecrypted", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptSignAndEncryptMessage": [ + { + "name": "pSignPara", + "type": "PCRYPT_SIGN_MESSAGE_PARA" + }, + { + "name": "pEncryptPara", + "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" + }, + { + "name": "cRecipientCert", + "type": "DWORD" + }, + { + "name": "rgpRecipientCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbToBeSignedAndEncrypted", + "type": "BYTE" + }, + { + "name": "cbToBeSignedAndEncrypted", + "type": "DWORD" + }, + { + "name": "pbSignedAndEncryptedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedAndEncryptedBlob", + "type": "DWORD" + } + ], + "CryptDecryptAndVerifyMessageSignature": [ + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "cbEncryptedBlob", + "type": "DWORD" + }, + { + "name": "pbDecrypted", + "type": "BYTE" + }, + { + "name": "pcbDecrypted", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptDecodeMessage": [ + { + "name": "dwMsgTypeFlags", + "type": "DWORD" + }, + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbEncodedBlob", + "type": "BYTE" + }, + { + "name": "cbEncodedBlob", + "type": "DWORD" + }, + { + "name": "dwPrevInnerContentType", + "type": "DWORD" + }, + { + "name": "pdwMsgType", + "type": "DWORD" + }, + { + "name": "pdwInnerContentType", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptHashMessage": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "fDetachedHash", + "type": "BOOL" + }, + { + "name": "cToBeHashed", + "type": "DWORD" + }, + { + "name": "rgpbToBeHashed", + "type": "BYTE" + }, + { + "name": "rgcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbHashedBlob", + "type": "BYTE" + }, + { + "name": "pcbHashedBlob", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptVerifyMessageHash": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "pbHashedBlob", + "type": "BYTE" + }, + { + "name": "cbHashedBlob", + "type": "DWORD" + }, + { + "name": "pbToBeHashed", + "type": "BYTE" + }, + { + "name": "pcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptVerifyDetachedMessageHash": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "pbDetachedHashBlob", + "type": "BYTE" + }, + { + "name": "cbDetachedHashBlob", + "type": "DWORD" + }, + { + "name": "cToBeHashed", + "type": "DWORD" + }, + { + "name": "rgpbToBeHashed", + "type": "BYTE" + }, + { + "name": "rgcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptSignMessageWithKey": [ + { + "name": "pSignPara", + "type": "PCRYPT_KEY_SIGN_MESSAGE_PARA" + }, + { + "name": "pbToBeSigned", + "type": "BYTE" + }, + { + "name": "cbToBeSigned", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyMessageSignatureWithKey": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_KEY_VERIFY_MESSAGE_PARA" + }, + { + "name": "pPublicKeyInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + } + ], + "CertOpenSystemStoreA": [ + { + "name": "hProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "szSubsystemProtocol", + "type": "LPCSTR" + } + ], + "CertOpenSystemStoreW": [ + { + "name": "hProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "szSubsystemProtocol", + "type": "LPCWSTR" + } + ], + "CertAddEncodedCertificateToSystemStoreA": [ + { + "name": "szCertStoreName", + "type": "LPCSTR" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CertAddEncodedCertificateToSystemStoreW": [ + { + "name": "szCertStoreName", + "type": "LPCWSTR" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CryptQueryObject": [ + { + "name": "dwObjectType", + "type": "DWORD" + }, + { + "name": "pvObject", + "type": "void" + }, + { + "name": "dwExpectedContentTypeFlags", + "type": "DWORD" + }, + { + "name": "dwExpectedFormatTypeFlags", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pdwContentType", + "type": "DWORD" + }, + { + "name": "pdwFormatType", + "type": "DWORD" + }, + { + "name": "phCertStore", + "type": "HCERTSTORE" + }, + { + "name": "phMsg", + "type": "HCRYPTMSG" + }, + { + "name": "ppvContext", + "type": "void" + } + ], + "CryptMemAlloc": [ + { + "name": "cbSize", + "type": "ULONG" + } + ], + "CryptMemRealloc": [ + { + "name": "pv", + "type": "LPVOID" + }, + { + "name": "cbSize", + "type": "ULONG" + } + ], + "CryptMemFree": [ + { + "name": "pv", + "type": "LPVOID" + } + ], + "CryptCreateAsyncHandle": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phAsync", + "type": "PHCRYPTASYNC" + } + ], + "CryptGetAsyncParam": [ + { + "name": "hAsync", + "type": "HCRYPTASYNC" + }, + { + "name": "pszParamOid", + "type": "LPSTR" + }, + { + "name": "ppvParam", + "type": "LPVOID" + }, + { + "name": "ppfnFree", + "type": "PFN_CRYPT_ASYNC_PARAM_FREE_FUNC" + } + ], + "CryptCloseAsyncHandle": [ + { + "name": "hAsync", + "type": "HCRYPTASYNC" + } + ], + "CryptRetrieveObjectByUrlA": [ + { + "name": "pszUrl", + "type": "LPCSTR" + }, + { + "name": "pszObjectOid", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "hAsyncRetrieve", + "type": "HCRYPTASYNC" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pvVerify", + "type": "LPVOID" + }, + { + "name": "pAuxInfo", + "type": "PCRYPT_RETRIEVE_AUX_INFO" + } + ], + "CryptRetrieveObjectByUrlW": [ + { + "name": "pszUrl", + "type": "LPCWSTR" + }, + { + "name": "pszObjectOid", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "hAsyncRetrieve", + "type": "HCRYPTASYNC" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pvVerify", + "type": "LPVOID" + }, + { + "name": "pAuxInfo", + "type": "PCRYPT_RETRIEVE_AUX_INFO" + } + ], + "CryptGetObjectUrl": [ + { + "name": "pszUrlOid", + "type": "LPCSTR" + }, + { + "name": "pvPara", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pUrlArray", + "type": "PCRYPT_URL_ARRAY" + }, + { + "name": "pcbUrlArray", + "type": "DWORD" + }, + { + "name": "pUrlInfo", + "type": "PCRYPT_URL_INFO" + }, + { + "name": "pcbUrlInfo", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CryptGetTimeValidObject": [ + { + "name": "pszTimeValidOid", + "type": "LPCSTR" + }, + { + "name": "pvPara", + "type": "LPVOID" + }, + { + "name": "pIssuer", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pftValidFor", + "type": "LPFILETIME" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pExtraInfo", + "type": "PCRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO" + } + ], + "CertCreateSelfSignCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "pSubjectIssuerBlob", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pKeyProvInfo", + "type": "PCRYPT_KEY_PROV_INFO" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pStartTime", + "type": "PSYSTEMTIME" + }, + { + "name": "pEndTime", + "type": "PSYSTEMTIME" + }, + { + "name": "pExtensions", + "type": "PCERT_EXTENSIONS" + } + ], + "CryptGetKeyIdentifierProperty": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CryptSetKeyIdentifierProperty": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CryptEnumKeyIdentifierProperties": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CRYPT_ENUM_KEYID_PROP" + } + ], + "CryptCreateKeyIdentifierFromCSP": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPubKeyOID", + "type": "LPCSTR" + }, + { + "name": "pPubKeyStruc", + "type": "PUBLICKEYSTRUC" + }, + { + "name": "cbPubKeyStruc", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "pcbHash", + "type": "DWORD" + } + ], + "CertCreateCertificateChainEngine": [ + { + "name": "pConfig", + "type": "PCERT_CHAIN_ENGINE_CONFIG" + }, + { + "name": "phChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertFreeCertificateChainEngine": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertResyncCertificateChainEngine": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertGetCertificateChain": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pTime", + "type": "LPFILETIME" + }, + { + "name": "hAdditionalStore", + "type": "HCERTSTORE" + }, + { + "name": "pChainPara", + "type": "PCERT_CHAIN_PARA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + }, + { + "name": "ppChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFreeCertificateChain": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertDuplicateCertificateChain": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFindChainInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertVerifyCertificateChainPolicy": [ + { + "name": "pszPolicyOID", + "type": "LPCSTR" + }, + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + }, + { + "name": "pPolicyPara", + "type": "PCERT_CHAIN_POLICY_PARA" + }, + { + "name": "pPolicyStatus", + "type": "PCERT_CHAIN_POLICY_STATUS" + } + ], + "CryptStringToBinaryA": [ + { + "name": "pszString", + "type": "LPCSTR" + }, + { + "name": "cchString", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "pcbBinary", + "type": "DWORD" + }, + { + "name": "pdwSkip", + "type": "DWORD" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CryptStringToBinaryW": [ + { + "name": "pszString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "pcbBinary", + "type": "DWORD" + }, + { + "name": "pdwSkip", + "type": "DWORD" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CryptBinaryToStringA": [ + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "cbBinary", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszString", + "type": "LPSTR" + }, + { + "name": "pcchString", + "type": "DWORD" + } + ], + "CryptBinaryToStringW": [ + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "cbBinary", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszString", + "type": "LPWSTR" + }, + { + "name": "pcchString", + "type": "DWORD" + } + ], + "PFXImportCertStore": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXIsPFXBlob": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + } + ], + "PFXVerifyPassword": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXExportCertStoreEx": [ + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "pvPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXExportCertStore": [ + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertOpenServerOcspResponse": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pOpenPara", + "type": "PCERT_SERVER_OCSP_RESPONSE_OPEN_PARA" + } + ], + "CertAddRefServerOcspResponse": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + } + ], + "CertCloseServerOcspResponse": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetServerOcspResponseContext": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CertAddRefServerOcspResponseContext": [ + { + "name": "pServerOcspResponseContext", + "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" + } + ], + "CertFreeServerOcspResponseContext": [ + { + "name": "pServerOcspResponseContext", + "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" + } + ], + "CertRetrieveLogoOrBiometricInfo": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "lpszLogoOrBiometricType", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "ppbData", + "type": "BYTE" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "ppwszMimeType", + "type": "LPWSTR" + } + ], + "CertSelectCertificateChains": [ + { + "name": "pSelectionContext", + "type": "LPCGUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pChainParameters", + "type": "PCCERT_SELECT_CHAIN_PARA" + }, + { + "name": "cCriteria", + "type": "DWORD" + }, + { + "name": "rgpCriteria", + "type": "PCCERT_SELECT_CRITERIA" + }, + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pcSelection", + "type": "PDWORD" + }, + { + "name": "pprgpSelection", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFreeCertificateChainList": [ + { + "name": "prgpSelection", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CryptRetrieveTimeStamp": [ + { + "name": "wszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "pszHashId", + "type": "LPCSTR" + }, + { + "name": "pPara", + "type": "CRYPT_TIMESTAMP_PARA" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "ppTsContext", + "type": "PCRYPT_TIMESTAMP_CONTEXT" + }, + { + "name": "ppTsSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "phStore", + "type": "HCERTSTORE" + } + ], + "CryptVerifyTimeStampSignature": [ + { + "name": "pbTSContentInfo", + "type": "BYTE" + }, + { + "name": "cbTSContentInfo", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "hAdditionalStore", + "type": "HCERTSTORE" + }, + { + "name": "ppTsContext", + "type": "PCRYPT_TIMESTAMP_CONTEXT" + }, + { + "name": "ppTsSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "phStore", + "type": "HCERTSTORE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/windef.json b/qiling/extensions/windows_sdk/windef.json new file mode 100644 index 000000000..a0f7d6f99 --- /dev/null +++ b/qiling/extensions/windows_sdk/windef.json @@ -0,0 +1,4864 @@ +{ + "__va_start": [ + { + "name": "VOID", + "type": "va_list" + } + ], + "__security_init_cookie": [ + { + "name": "VOID", + "type": "void" + } + ], + "__security_check_cookie": [ + { + "name": "_StackCookie", + "type": "uintptr_t" + } + ], + "__report_gsfailure": [ + { + "name": "_StackCookie", + "type": "uintptr_t" + } + ], + "_invalid_parameter_noinfo": [ + { + "name": "VOID", + "type": "void" + } + ], + "_invalid_parameter_noinfo_noreturn": [ + { + "name": "VOID", + "type": "void" + } + ], + "_invoke_watson": [ + { + "name": "_Expression", + "type": "wchar_t" + }, + { + "name": "_FunctionName", + "type": "wchar_t" + }, + { + "name": "_FileName", + "type": "wchar_t" + }, + { + "name": "_LineNo", + "type": "unsigned int" + }, + { + "name": "_Reserved", + "type": "uintptr_t" + } + ], + "__pctype_func": [ + { + "name": "VOID", + "type": "void" + } + ], + "__pwctype_func": [ + { + "name": "VOID", + "type": "void" + } + ], + "iswalnum": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswalpha": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswascii": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswblank": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswcntrl": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswdigit": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswgraph": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswlower": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswprint": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswpunct": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswspace": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswupper": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswxdigit": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "__iswcsymf": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "__iswcsym": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "_iswalnum_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswalpha_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswblank_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswcntrl_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswdigit_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswgraph_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswlower_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswprint_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswpunct_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswspace_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswupper_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswxdigit_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswcsymf_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswcsym_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "towupper": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "towlower": [ + { + "name": "_C", + "type": "wint_t" + } + ], + "iswctype": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Type", + "type": "wctype_t" + } + ], + "_towupper_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_towlower_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_iswctype_l": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Type", + "type": "wctype_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "isleadbyte": [ + { + "name": "_C", + "type": "int" + } + ], + "_isleadbyte_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "is_wctype": [ + { + "name": "_C", + "type": "wint_t" + }, + { + "name": "_Type", + "type": "wctype_t" + } + ], + "_isctype": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Type", + "type": "int" + } + ], + "_isctype_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Type", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "isalpha": [ + { + "name": "_C", + "type": "int" + } + ], + "_isalpha_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "isupper": [ + { + "name": "_C", + "type": "int" + } + ], + "_isupper_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "islower": [ + { + "name": "_C", + "type": "int" + } + ], + "_islower_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "isdigit": [ + { + "name": "_C", + "type": "int" + } + ], + "_isdigit_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "isxdigit": [ + { + "name": "_C", + "type": "int" + } + ], + "_isxdigit_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "isspace": [ + { + "name": "_C", + "type": "int" + } + ], + "_isspace_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "ispunct": [ + { + "name": "_C", + "type": "int" + } + ], + "_ispunct_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "isblank": [ + { + "name": "_C", + "type": "int" + } + ], + "_isblank_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "isalnum": [ + { + "name": "_C", + "type": "int" + } + ], + "_isalnum_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "isprint": [ + { + "name": "_C", + "type": "int" + } + ], + "_isprint_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "isgraph": [ + { + "name": "_C", + "type": "int" + } + ], + "_isgraph_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "iscntrl": [ + { + "name": "_C", + "type": "int" + } + ], + "_iscntrl_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "toupper": [ + { + "name": "_C", + "type": "int" + } + ], + "tolower": [ + { + "name": "_C", + "type": "int" + } + ], + "_tolower": [ + { + "name": "_C", + "type": "int" + } + ], + "_tolower_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_toupper": [ + { + "name": "_C", + "type": "int" + } + ], + "_toupper_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "__isascii": [ + { + "name": "_C", + "type": "int" + } + ], + "__toascii": [ + { + "name": "_C", + "type": "int" + } + ], + "__iscsymf": [ + { + "name": "_C", + "type": "int" + } + ], + "__iscsym": [ + { + "name": "_C", + "type": "int" + } + ], + "__acrt_locale_get_ctype_array_value": [ + { + "name": "_Locale_pctype_array", + "type": "unsigned short" + }, + { + "name": "_Char_value", + "type": "int" + }, + { + "name": "_Mask", + "type": "int" + } + ], + "___mb_cur_max_func": [ + { + "name": "VOID", + "type": "void" + } + ], + "___mb_cur_max_l_func": [ + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "__ascii_tolower": [ + { + "name": "_C", + "type": "int" + } + ], + "__ascii_toupper": [ + { + "name": "_C", + "type": "int" + } + ], + "__ascii_iswalpha": [ + { + "name": "_C", + "type": "int" + } + ], + "__ascii_iswdigit": [ + { + "name": "_C", + "type": "int" + } + ], + "__ascii_towlower": [ + { + "name": "_C", + "type": "int" + } + ], + "__ascii_towupper": [ + { + "name": "_C", + "type": "int" + } + ], + "__acrt_get_locale_data_prefix": [ + { + "name": "_LocalePointers", + "type": "void" + } + ], + "_chvalidchk_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Mask", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_ischartype_l": [ + { + "name": "_C", + "type": "int" + }, + { + "name": "_Mask", + "type": "int" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "HandleToULong": [ + { + "name": "h", + "type": "void" + } + ], + "HandleToLong": [ + { + "name": "h", + "type": "void" + } + ], + "ULongToHandle": [ + { + "name": "h", + "type": "unsigned long" + } + ], + "LongToHandle": [ + { + "name": "h", + "type": "long" + } + ], + "PtrToUlong": [ + { + "name": "p", + "type": "void" + } + ], + "PtrToUint": [ + { + "name": "p", + "type": "void" + } + ], + "PtrToUshort": [ + { + "name": "p", + "type": "void" + } + ], + "PtrToLong": [ + { + "name": "p", + "type": "void" + } + ], + "PtrToInt": [ + { + "name": "p", + "type": "void" + } + ], + "PtrToShort": [ + { + "name": "p", + "type": "void" + } + ], + "IntToPtr": [ + { + "name": "i", + "type": "int" + } + ], + "UIntToPtr": [ + { + "name": "ui", + "type": "unsigned int" + } + ], + "LongToPtr": [ + { + "name": "l", + "type": "long" + } + ], + "ULongToPtr": [ + { + "name": "ul", + "type": "unsigned long" + } + ], + "Ptr32ToPtr": [ + { + "name": "p", + "type": "void" + } + ], + "Handle32ToHandle": [ + { + "name": "h", + "type": "void" + } + ], + "PtrToPtr32": [ + { + "name": "p", + "type": "void" + } + ], + "_rotl8": [ + { + "name": "Value", + "type": "unsigned char" + }, + { + "name": "Shift", + "type": "unsigned char" + } + ], + "_rotl16": [ + { + "name": "Value", + "type": "unsigned short" + }, + { + "name": "Shift", + "type": "unsigned char" + } + ], + "_rotr8": [ + { + "name": "Value", + "type": "unsigned char" + }, + { + "name": "Shift", + "type": "unsigned char" + } + ], + "_rotr16": [ + { + "name": "Value", + "type": "unsigned short" + }, + { + "name": "Shift", + "type": "unsigned char" + } + ], + "_rotl": [ + { + "name": "Value", + "type": "unsigned int" + }, + { + "name": "Shift", + "type": "int" + } + ], + "_rotl64": [ + { + "name": "Value", + "type": "unsigned long long int" + }, + { + "name": "Shift", + "type": "int" + } + ], + "_rotr": [ + { + "name": "Value", + "type": "unsigned int" + }, + { + "name": "Shift", + "type": "int" + } + ], + "_rotr64": [ + { + "name": "Value", + "type": "unsigned long long int" + }, + { + "name": "Shift", + "type": "int" + } + ], + "_errno": [ + { + "name": "VOID", + "type": "void" + } + ], + "_set_errno": [ + { + "name": "_Value", + "type": "int" + } + ], + "_get_errno": [ + { + "name": "_Value", + "type": "int" + } + ], + "__doserrno": [ + { + "name": "VOID", + "type": "void" + } + ], + "_set_doserrno": [ + { + "name": "_Value", + "type": "unsigned long" + } + ], + "_get_doserrno": [ + { + "name": "_Value", + "type": "unsigned long" + } + ], + "memchr": [ + { + "name": "_Buf", + "type": "void" + }, + { + "name": "_Val", + "type": "int" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "memcmp": [ + { + "name": "_Buf1", + "type": "void" + }, + { + "name": "_Buf2", + "type": "void" + }, + { + "name": "_Size", + "type": "size_t" + } + ], + "memcpy": [ + { + "name": "_Dst", + "type": "void" + }, + { + "name": "_Src", + "type": "void" + }, + { + "name": "_Size", + "type": "size_t" + } + ], + "memmove": [ + { + "name": "_Dst", + "type": "void" + }, + { + "name": "_Src", + "type": "void" + }, + { + "name": "_Size", + "type": "size_t" + } + ], + "memset": [ + { + "name": "_Dst", + "type": "void" + }, + { + "name": "_Val", + "type": "int" + }, + { + "name": "_Size", + "type": "size_t" + } + ], + "strchr": [ + { + "name": "_Str", + "type": "char" + }, + { + "name": "_Val", + "type": "int" + } + ], + "strrchr": [ + { + "name": "_Str", + "type": "char" + }, + { + "name": "_Ch", + "type": "int" + } + ], + "strstr": [ + { + "name": "_Str", + "type": "char" + }, + { + "name": "_SubStr", + "type": "char" + } + ], + "wcschr": [ + { + "name": "_Str", + "type": "wchar_t" + }, + { + "name": "_Ch", + "type": "wchar_t" + } + ], + "wcsrchr": [ + { + "name": "_Str", + "type": "wchar_t" + }, + { + "name": "_Ch", + "type": "wchar_t" + } + ], + "wcsstr": [ + { + "name": "_Str", + "type": "wchar_t" + }, + { + "name": "_SubStr", + "type": "wchar_t" + } + ], + "memcpy_s": [ + { + "name": "_Destination", + "type": "void" + }, + { + "name": "_DestinationSize", + "type": "rsize_t" + }, + { + "name": "_Source", + "type": "void" + }, + { + "name": "_SourceSize", + "type": "rsize_t" + } + ], + "memmove_s": [ + { + "name": "_Destination", + "type": "void" + }, + { + "name": "_DestinationSize", + "type": "rsize_t" + }, + { + "name": "_Source", + "type": "void" + }, + { + "name": "_SourceSize", + "type": "rsize_t" + } + ], + "_memicmp": [ + { + "name": "_Buf1", + "type": "void" + }, + { + "name": "_Buf2", + "type": "void" + }, + { + "name": "_Size", + "type": "size_t" + } + ], + "_memicmp_l": [ + { + "name": "_Buf1", + "type": "void" + }, + { + "name": "_Buf2", + "type": "void" + }, + { + "name": "_Size", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "memccpy": [ + { + "name": "_Dst", + "type": "void" + }, + { + "name": "_Src", + "type": "void" + }, + { + "name": "_Val", + "type": "int" + }, + { + "name": "_Size", + "type": "size_t" + } + ], + "memicmp": [ + { + "name": "_Buf1", + "type": "void" + }, + { + "name": "_Buf2", + "type": "void" + }, + { + "name": "_Size", + "type": "size_t" + } + ], + "wcscat_s": [ + { + "name": "_Destination", + "type": "wchar_t" + }, + { + "name": "_SizeInWords", + "type": "rsize_t" + }, + { + "name": "_Source", + "type": "wchar_t" + } + ], + "wcscpy_s": [ + { + "name": "_Destination", + "type": "wchar_t" + }, + { + "name": "_SizeInWords", + "type": "rsize_t" + }, + { + "name": "_Source", + "type": "wchar_t" + } + ], + "wcsncat_s": [ + { + "name": "_Destination", + "type": "wchar_t" + }, + { + "name": "_SizeInWords", + "type": "rsize_t" + }, + { + "name": "_Source", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "rsize_t" + } + ], + "wcsncpy_s": [ + { + "name": "_Destination", + "type": "wchar_t" + }, + { + "name": "_SizeInWords", + "type": "rsize_t" + }, + { + "name": "_Source", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "rsize_t" + } + ], + "wcstok_s": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Delimiter", + "type": "wchar_t" + }, + { + "name": "_Context", + "type": "wchar_t" + } + ], + "_wcsdup": [ + { + "name": "_String", + "type": "wchar_t" + } + ], + "wcscat": [ + { + "name": "_Destination", + "type": "wchar_t" + }, + { + "name": "_Source", + "type": "wchar_t" + } + ], + "wcscmp": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + } + ], + "wcscpy": [ + { + "name": "_Destination", + "type": "wchar_t" + }, + { + "name": "_Source", + "type": "wchar_t" + } + ], + "wcscspn": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Control", + "type": "wchar_t" + } + ], + "wcslen": [ + { + "name": "_String", + "type": "wchar_t" + } + ], + "wcsnlen": [ + { + "name": "_Source", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "wcsnlen_s": [ + { + "name": "_Source", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "wcsncat": [ + { + "name": "_Destination", + "type": "wchar_t" + }, + { + "name": "_Source", + "type": "wchar_t" + }, + { + "name": "_Count", + "type": "size_t" + } + ], + "wcsncmp": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "wcsncpy": [ + { + "name": "_Destination", + "type": "wchar_t" + }, + { + "name": "_Source", + "type": "wchar_t" + }, + { + "name": "_Count", + "type": "size_t" + } + ], + "wcspbrk": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Control", + "type": "wchar_t" + } + ], + "wcsspn": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Control", + "type": "wchar_t" + } + ], + "wcstok": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Delimiter", + "type": "wchar_t" + }, + { + "name": "_Context", + "type": "wchar_t" + } + ], + "_wcstok": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Delimiter", + "type": "wchar_t" + } + ], + "_wcserror": [ + { + "name": "_ErrorNumber", + "type": "int" + } + ], + "_wcserror_s": [ + { + "name": "_Buffer", + "type": "wchar_t" + }, + { + "name": "_SizeInWords", + "type": "size_t" + }, + { + "name": "_ErrorNumber", + "type": "int" + } + ], + "__wcserror": [ + { + "name": "_String", + "type": "wchar_t" + } + ], + "__wcserror_s": [ + { + "name": "_Buffer", + "type": "wchar_t" + }, + { + "name": "_SizeInWords", + "type": "size_t" + }, + { + "name": "_ErrorMessage", + "type": "wchar_t" + } + ], + "_wcsicmp": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + } + ], + "_wcsicmp_l": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_wcsnicmp": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_wcsnicmp_l": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_wcsnset_s": [ + { + "name": "_Destination", + "type": "wchar_t" + }, + { + "name": "_SizeInWords", + "type": "size_t" + }, + { + "name": "_Value", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_wcsnset": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Value", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_wcsrev": [ + { + "name": "_String", + "type": "wchar_t" + } + ], + "_wcsset_s": [ + { + "name": "_Destination", + "type": "wchar_t" + }, + { + "name": "_SizeInWords", + "type": "size_t" + }, + { + "name": "_Value", + "type": "wchar_t" + } + ], + "_wcsset": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Value", + "type": "wchar_t" + } + ], + "_wcslwr_s": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_SizeInWords", + "type": "size_t" + } + ], + "_wcslwr": [ + { + "name": "_String", + "type": "wchar_t" + } + ], + "_wcslwr_s_l": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_SizeInWords", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_wcslwr_l": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_wcsupr_s": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Size", + "type": "size_t" + } + ], + "_wcsupr": [ + { + "name": "_String", + "type": "wchar_t" + } + ], + "_wcsupr_s_l": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Size", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_wcsupr_l": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "wcsxfrm": [ + { + "name": "_Destination", + "type": "wchar_t" + }, + { + "name": "_Source", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_wcsxfrm_l": [ + { + "name": "_Destination", + "type": "wchar_t" + }, + { + "name": "_Source", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "wcscoll": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + } + ], + "_wcscoll_l": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_wcsicoll": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + } + ], + "_wcsicoll_l": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_wcsncoll": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_wcsncoll_l": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_wcsnicoll": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_wcsnicoll_l": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "wcsdup": [ + { + "name": "_String", + "type": "wchar_t" + } + ], + "wcsicmp": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + } + ], + "wcsnicmp": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "wcsnset": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Value", + "type": "wchar_t" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "wcsrev": [ + { + "name": "_String", + "type": "wchar_t" + } + ], + "wcsset": [ + { + "name": "_String", + "type": "wchar_t" + }, + { + "name": "_Value", + "type": "wchar_t" + } + ], + "wcslwr": [ + { + "name": "_String", + "type": "wchar_t" + } + ], + "wcsupr": [ + { + "name": "_String", + "type": "wchar_t" + } + ], + "wcsicoll": [ + { + "name": "_String1", + "type": "wchar_t" + }, + { + "name": "_String2", + "type": "wchar_t" + } + ], + "strcpy_s": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_SizeInBytes", + "type": "rsize_t" + }, + { + "name": "_Source", + "type": "char" + } + ], + "strcat_s": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_SizeInBytes", + "type": "rsize_t" + }, + { + "name": "_Source", + "type": "char" + } + ], + "strerror_s": [ + { + "name": "_Buffer", + "type": "char" + }, + { + "name": "_SizeInBytes", + "type": "size_t" + }, + { + "name": "_ErrorNumber", + "type": "int" + } + ], + "strncat_s": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_SizeInBytes", + "type": "rsize_t" + }, + { + "name": "_Source", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "rsize_t" + } + ], + "strncpy_s": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_SizeInBytes", + "type": "rsize_t" + }, + { + "name": "_Source", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "rsize_t" + } + ], + "strtok_s": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_Delimiter", + "type": "char" + }, + { + "name": "_Context", + "type": "char" + } + ], + "_memccpy": [ + { + "name": "_Dst", + "type": "void" + }, + { + "name": "_Src", + "type": "void" + }, + { + "name": "_Val", + "type": "int" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "strcat": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_Source", + "type": "char" + } + ], + "strcmp": [ + { + "name": "_Str1", + "type": "char" + }, + { + "name": "_Str2", + "type": "char" + } + ], + "_strcmpi": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + } + ], + "strcoll": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + } + ], + "_strcoll_l": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "strcpy": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_Source", + "type": "char" + } + ], + "strcspn": [ + { + "name": "_Str", + "type": "char" + }, + { + "name": "_Control", + "type": "char" + } + ], + "_strdup": [ + { + "name": "_Source", + "type": "char" + } + ], + "_strerror": [ + { + "name": "_ErrorMessage", + "type": "char" + } + ], + "_strerror_s": [ + { + "name": "_Buffer", + "type": "char" + }, + { + "name": "_SizeInBytes", + "type": "size_t" + }, + { + "name": "_ErrorMessage", + "type": "char" + } + ], + "strerror": [ + { + "name": "_ErrorMessage", + "type": "int" + } + ], + "_stricmp": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + } + ], + "_stricoll": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + } + ], + "_stricoll_l": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_stricmp_l": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "strlen": [ + { + "name": "_Str", + "type": "char" + } + ], + "_strlwr_s": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_Size", + "type": "size_t" + } + ], + "_strlwr": [ + { + "name": "_String", + "type": "char" + } + ], + "_strlwr_s_l": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_Size", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_strlwr_l": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "strncat": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_Source", + "type": "char" + }, + { + "name": "_Count", + "type": "size_t" + } + ], + "strncmp": [ + { + "name": "_Str1", + "type": "char" + }, + { + "name": "_Str2", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_strnicmp": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_strnicmp_l": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_strnicoll": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_strnicoll_l": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_strncoll": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_strncoll_l": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "__strncnt": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_Count", + "type": "size_t" + } + ], + "strncpy": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_Source", + "type": "char" + }, + { + "name": "_Count", + "type": "size_t" + } + ], + "strnlen": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "strnlen_s": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_strnset_s": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_SizeInBytes", + "type": "size_t" + }, + { + "name": "_Value", + "type": "int" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_strnset": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_Value", + "type": "int" + }, + { + "name": "_Count", + "type": "size_t" + } + ], + "strpbrk": [ + { + "name": "_Str", + "type": "char" + }, + { + "name": "_Control", + "type": "char" + } + ], + "_strrev": [ + { + "name": "_Str", + "type": "char" + } + ], + "_strset_s": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_DestinationSize", + "type": "size_t" + }, + { + "name": "_Value", + "type": "int" + } + ], + "_strset": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_Value", + "type": "int" + } + ], + "strspn": [ + { + "name": "_Str", + "type": "char" + }, + { + "name": "_Control", + "type": "char" + } + ], + "strtok": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_Delimiter", + "type": "char" + } + ], + "_strupr_s": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_Size", + "type": "size_t" + } + ], + "_strupr": [ + { + "name": "_String", + "type": "char" + } + ], + "_strupr_s_l": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_Size", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "_strupr_l": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "strxfrm": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_Source", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "_strxfrm_l": [ + { + "name": "_Destination", + "type": "char" + }, + { + "name": "_Source", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "size_t" + }, + { + "name": "_Locale", + "type": "_locale_t" + } + ], + "strdup": [ + { + "name": "_String", + "type": "char" + } + ], + "strcmpi": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + } + ], + "stricmp": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + } + ], + "strlwr": [ + { + "name": "_String", + "type": "char" + } + ], + "strnicmp": [ + { + "name": "_String1", + "type": "char" + }, + { + "name": "_String2", + "type": "char" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "strnset": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_Value", + "type": "int" + }, + { + "name": "_MaxCount", + "type": "size_t" + } + ], + "strrev": [ + { + "name": "_String", + "type": "char" + } + ], + "strset": [ + { + "name": "_String", + "type": "char" + }, + { + "name": "_Value", + "type": "int" + } + ], + "strupr": [ + { + "name": "_String", + "type": "char" + } + ], + "__C_specific_handler": [ + { + "name": "ExceptionRecord", + "type": { + "name": "_EXCEPTION_RECORD", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "EstablisherFrame", + "type": "void" + }, + { + "name": "ContextRecord", + "type": { + "name": "_CONTEXT", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "DispatcherContext", + "type": { + "name": "_DISPATCHER_CONTEXT", + "data_type": "Struct", + "elements": [] + } + } + ], + "_exception_code": [ + { + "name": "VOID", + "type": "void" + } + ], + "_exception_info": [ + { + "name": "VOID", + "type": "void" + } + ], + "_abnormal_termination": [ + { + "name": "VOID", + "type": "void" + } + ], + "_bittest": [ + { + "name": "Base", + "type": "LONG" + }, + { + "name": "Offset", + "type": "LONG" + } + ], + "_bittestandcomplement": [ + { + "name": "Base", + "type": "LONG" + }, + { + "name": "Offset", + "type": "LONG" + } + ], + "_bittestandset": [ + { + "name": "Base", + "type": "LONG" + }, + { + "name": "Offset", + "type": "LONG" + } + ], + "_bittestandreset": [ + { + "name": "Base", + "type": "LONG" + }, + { + "name": "Offset", + "type": "LONG" + } + ], + "_interlockedbittestandset": [ + { + "name": "Base", + "type": "LONG" + }, + { + "name": "Offset", + "type": "LONG" + } + ], + "_interlockedbittestandreset": [ + { + "name": "Base", + "type": "LONG" + }, + { + "name": "Offset", + "type": "LONG" + } + ], + "_bittest64": [ + { + "name": "Base", + "type": "LONG64" + }, + { + "name": "Offset", + "type": "LONG64" + } + ], + "_bittestandcomplement64": [ + { + "name": "Base", + "type": "LONG64" + }, + { + "name": "Offset", + "type": "LONG64" + } + ], + "_bittestandset64": [ + { + "name": "Base", + "type": "LONG64" + }, + { + "name": "Offset", + "type": "LONG64" + } + ], + "_bittestandreset64": [ + { + "name": "Base", + "type": "LONG64" + }, + { + "name": "Offset", + "type": "LONG64" + } + ], + "_interlockedbittestandset64": [ + { + "name": "Base", + "type": "LONG64" + }, + { + "name": "Offset", + "type": "LONG64" + } + ], + "_interlockedbittestandreset64": [ + { + "name": "Base", + "type": "LONG64" + }, + { + "name": "Offset", + "type": "LONG64" + } + ], + "_BitScanForward": [ + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Mask", + "type": "DWORD" + } + ], + "_BitScanReverse": [ + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Mask", + "type": "DWORD" + } + ], + "_BitScanForward64": [ + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Mask", + "type": "DWORD64" + } + ], + "_BitScanReverse64": [ + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "Mask", + "type": "DWORD64" + } + ], + "_InterlockedIncrement16": [ + { + "name": "Addend", + "type": "SHORT" + } + ], + "_InterlockedDecrement16": [ + { + "name": "Addend", + "type": "SHORT" + } + ], + "_InterlockedCompareExchange16": [ + { + "name": "Destination", + "type": "SHORT" + }, + { + "name": "ExChange", + "type": "SHORT" + }, + { + "name": "Comperand", + "type": "SHORT" + } + ], + "_InterlockedAnd": [ + { + "name": "Destination", + "type": "LONG" + }, + { + "name": "Value", + "type": "LONG" + } + ], + "_InterlockedOr": [ + { + "name": "Destination", + "type": "LONG" + }, + { + "name": "Value", + "type": "LONG" + } + ], + "_InterlockedXor": [ + { + "name": "Destination", + "type": "LONG" + }, + { + "name": "Value", + "type": "LONG" + } + ], + "_InterlockedAnd64": [ + { + "name": "Destination", + "type": "LONG64" + }, + { + "name": "Value", + "type": "LONG64" + } + ], + "_InterlockedOr64": [ + { + "name": "Destination", + "type": "LONG64" + }, + { + "name": "Value", + "type": "LONG64" + } + ], + "_InterlockedXor64": [ + { + "name": "Destination", + "type": "LONG64" + }, + { + "name": "Value", + "type": "LONG64" + } + ], + "_InterlockedIncrement": [ + { + "name": "Addend", + "type": "LONG" + } + ], + "_InterlockedDecrement": [ + { + "name": "Addend", + "type": "LONG" + } + ], + "_InterlockedExchange": [ + { + "name": "Target", + "type": "LONG" + }, + { + "name": "Value", + "type": "LONG" + } + ], + "_InterlockedExchangeAdd": [ + { + "name": "Addend", + "type": "LONG" + }, + { + "name": "Value", + "type": "LONG" + } + ], + "_InlineInterlockedAdd": [ + { + "name": "Addend", + "type": "LONG" + }, + { + "name": "Value", + "type": "LONG" + } + ], + "_InterlockedCompareExchange": [ + { + "name": "Destination", + "type": "LONG" + }, + { + "name": "ExChange", + "type": "LONG" + }, + { + "name": "Comperand", + "type": "LONG" + } + ], + "_InterlockedIncrement64": [ + { + "name": "Addend", + "type": "LONG64" + } + ], + "_InterlockedDecrement64": [ + { + "name": "Addend", + "type": "LONG64" + } + ], + "_InterlockedExchange64": [ + { + "name": "Target", + "type": "LONG64" + }, + { + "name": "Value", + "type": "LONG64" + } + ], + "_InterlockedExchangeAdd64": [ + { + "name": "Addend", + "type": "LONG64" + }, + { + "name": "Value", + "type": "LONG64" + } + ], + "_InlineInterlockedAdd64": [ + { + "name": "Addend", + "type": "LONG64" + }, + { + "name": "Value", + "type": "LONG64" + } + ], + "_InterlockedCompareExchange64": [ + { + "name": "Destination", + "type": "LONG64" + }, + { + "name": "ExChange", + "type": "LONG64" + }, + { + "name": "Comperand", + "type": "LONG64" + } + ], + "_InterlockedCompareExchange128": [ + { + "name": "Destination", + "type": "LONG64" + }, + { + "name": "ExchangeHigh", + "type": "LONG64" + }, + { + "name": "ExchangeLow", + "type": "LONG64" + }, + { + "name": "ComparandResult", + "type": "LONG64" + } + ], + "_InterlockedCompareExchangePointer": [ + { + "name": "Destination", + "type": "PVOID" + }, + { + "name": "Exchange", + "type": "PVOID" + }, + { + "name": "Comperand", + "type": "PVOID" + } + ], + "_InterlockedExchangePointer": [ + { + "name": "Target", + "type": "PVOID" + }, + { + "name": "Value", + "type": "PVOID" + } + ], + "_InterlockedExchange8": [ + { + "name": "Target", + "type": "CHAR" + }, + { + "name": "Value", + "type": "CHAR" + } + ], + "_InterlockedExchange16": [ + { + "name": "Destination", + "type": "SHORT" + }, + { + "name": "ExChange", + "type": "SHORT" + } + ], + "_InterlockedExchangeAdd8": [ + { + "name": "_Addend", + "type": "char" + }, + { + "name": "_Value", + "type": "char" + } + ], + "_InterlockedAnd8": [ + { + "name": "Destination", + "type": "char" + }, + { + "name": "Value", + "type": "char" + } + ], + "_InterlockedOr8": [ + { + "name": "Destination", + "type": "char" + }, + { + "name": "Value", + "type": "char" + } + ], + "_InterlockedXor8": [ + { + "name": "Destination", + "type": "char" + }, + { + "name": "Value", + "type": "char" + } + ], + "_InterlockedAnd16": [ + { + "name": "Destination", + "type": "SHORT" + }, + { + "name": "Value", + "type": "SHORT" + } + ], + "_InterlockedOr16": [ + { + "name": "Destination", + "type": "SHORT" + }, + { + "name": "Value", + "type": "SHORT" + } + ], + "_InterlockedXor16": [ + { + "name": "Destination", + "type": "SHORT" + }, + { + "name": "Value", + "type": "SHORT" + } + ], + "__cpuidex": [ + { + "name": "CPUInfo", + "type": "int" + }, + { + "name": "Function", + "type": "int" + }, + { + "name": "SubLeaf", + "type": "int" + } + ], + "_mm_clflush": [ + { + "name": "Address", + "type": "void" + } + ], + "_ReadWriteBarrier": [ + { + "name": "VOID", + "type": "void" + } + ], + "__faststorefence": [ + { + "name": "VOID", + "type": "void" + } + ], + "_mm_lfence": [ + { + "name": "VOID", + "type": "void" + } + ], + "_mm_mfence": [ + { + "name": "VOID", + "type": "void" + } + ], + "_mm_sfence": [ + { + "name": "VOID", + "type": "void" + } + ], + "_mm_pause": [ + { + "name": "VOID", + "type": "void" + } + ], + "_mm_prefetch": [ + { + "name": "a", + "type": "CHAR" + }, + { + "name": "sel", + "type": "int" + } + ], + "_m_prefetchw": [ + { + "name": "Source", + "type": "void" + } + ], + "_mm_getcsr": [ + { + "name": "VOID", + "type": "void" + } + ], + "_mm_setcsr": [ + { + "name": "MxCsr", + "type": "unsigned int" + } + ], + "__getcallerseflags": [ + { + "name": "VOID", + "type": "void" + } + ], + "__segmentlimit": [ + { + "name": "Selector", + "type": "DWORD" + } + ], + "__readpmc": [ + { + "name": "Counter", + "type": "DWORD" + } + ], + "__rdtsc": [ + { + "name": "VOID", + "type": "void" + } + ], + "__movsb": [ + { + "name": "Destination", + "type": "PBYTE" + }, + { + "name": "Source", + "type": "BYTE" + }, + { + "name": "Count", + "type": "SIZE_T" + } + ], + "__movsw": [ + { + "name": "Destination", + "type": "PWORD" + }, + { + "name": "Source", + "type": "WORD" + }, + { + "name": "Count", + "type": "SIZE_T" + } + ], + "__movsd": [ + { + "name": "Destination", + "type": "PDWORD" + }, + { + "name": "Source", + "type": "DWORD" + }, + { + "name": "Count", + "type": "SIZE_T" + } + ], + "__movsq": [ + { + "name": "Destination", + "type": "PDWORD64" + }, + { + "name": "Source", + "type": "DWORD64" + }, + { + "name": "Count", + "type": "SIZE_T" + } + ], + "__stosb": [ + { + "name": "Destination", + "type": "PBYTE" + }, + { + "name": "Value", + "type": "BYTE" + }, + { + "name": "Count", + "type": "SIZE_T" + } + ], + "__stosw": [ + { + "name": "Destination", + "type": "PWORD" + }, + { + "name": "Value", + "type": "WORD" + }, + { + "name": "Count", + "type": "SIZE_T" + } + ], + "__stosd": [ + { + "name": "Destination", + "type": "PDWORD" + }, + { + "name": "Value", + "type": "DWORD" + }, + { + "name": "Count", + "type": "SIZE_T" + } + ], + "__stosq": [ + { + "name": "Destination", + "type": "PDWORD64" + }, + { + "name": "Value", + "type": "DWORD64" + }, + { + "name": "Count", + "type": "SIZE_T" + } + ], + "__mulh": [ + { + "name": "Multiplier", + "type": "LONG64" + }, + { + "name": "Multiplicand", + "type": "LONG64" + } + ], + "__umulh": [ + { + "name": "Multiplier", + "type": "DWORD64" + }, + { + "name": "Multiplicand", + "type": "DWORD64" + } + ], + "__popcnt64": [ + { + "name": "operand", + "type": "DWORD64" + } + ], + "__shiftleft128": [ + { + "name": "LowPart", + "type": "DWORD64" + }, + { + "name": "HighPart", + "type": "DWORD64" + }, + { + "name": "Shift", + "type": "BYTE" + } + ], + "__shiftright128": [ + { + "name": "LowPart", + "type": "DWORD64" + }, + { + "name": "HighPart", + "type": "DWORD64" + }, + { + "name": "Shift", + "type": "BYTE" + } + ], + "_mul128": [ + { + "name": "Multiplier", + "type": "LONG64" + }, + { + "name": "Multiplicand", + "type": "LONG64" + }, + { + "name": "HighProduct", + "type": "LONG64" + } + ], + "_umul128": [ + { + "name": "Multiplier", + "type": "DWORD64" + }, + { + "name": "Multiplicand", + "type": "DWORD64" + }, + { + "name": "HighProduct", + "type": "DWORD64" + } + ], + "MultiplyExtract128": [ + { + "name": "Multiplier", + "type": "LONG64" + }, + { + "name": "Multiplicand", + "type": "LONG64" + }, + { + "name": "Shift", + "type": "BYTE" + } + ], + "UnsignedMultiplyExtract128": [ + { + "name": "Multiplier", + "type": "DWORD64" + }, + { + "name": "Multiplicand", + "type": "DWORD64" + }, + { + "name": "Shift", + "type": "BYTE" + } + ], + "__readgsbyte": [ + { + "name": "Offset", + "type": "DWORD" + } + ], + "__readgsword": [ + { + "name": "Offset", + "type": "DWORD" + } + ], + "__readgsdword": [ + { + "name": "Offset", + "type": "DWORD" + } + ], + "__readgsqword": [ + { + "name": "Offset", + "type": "DWORD" + } + ], + "__writegsbyte": [ + { + "name": "Offset", + "type": "DWORD" + }, + { + "name": "Data", + "type": "BYTE" + } + ], + "__writegsword": [ + { + "name": "Offset", + "type": "DWORD" + }, + { + "name": "Data", + "type": "WORD" + } + ], + "__writegsdword": [ + { + "name": "Offset", + "type": "DWORD" + }, + { + "name": "Data", + "type": "DWORD" + } + ], + "__writegsqword": [ + { + "name": "Offset", + "type": "DWORD" + }, + { + "name": "Data", + "type": "DWORD64" + } + ], + "__incgsbyte": [ + { + "name": "Offset", + "type": "DWORD" + } + ], + "__addgsbyte": [ + { + "name": "Offset", + "type": "DWORD" + }, + { + "name": "Value", + "type": "BYTE" + } + ], + "__incgsword": [ + { + "name": "Offset", + "type": "DWORD" + } + ], + "__addgsword": [ + { + "name": "Offset", + "type": "DWORD" + }, + { + "name": "Value", + "type": "WORD" + } + ], + "__incgsdword": [ + { + "name": "Offset", + "type": "DWORD" + } + ], + "__addgsdword": [ + { + "name": "Offset", + "type": "DWORD" + }, + { + "name": "Value", + "type": "DWORD" + } + ], + "__incgsqword": [ + { + "name": "Offset", + "type": "DWORD" + } + ], + "__addgsqword": [ + { + "name": "Offset", + "type": "DWORD" + }, + { + "name": "Value", + "type": "DWORD64" + } + ], + "__int2c": [ + { + "name": "VOID", + "type": "void" + } + ], + "ReadAcquire8": [ + { + "name": "Source", + "type": "CHAR" + } + ], + "ReadNoFence8": [ + { + "name": "Source", + "type": "CHAR" + } + ], + "WriteRelease8": [ + { + "name": "Destination", + "type": "CHAR" + }, + { + "name": "Value", + "type": "CHAR" + } + ], + "WriteNoFence8": [ + { + "name": "Destination", + "type": "CHAR" + }, + { + "name": "Value", + "type": "CHAR" + } + ], + "ReadAcquire16": [ + { + "name": "Source", + "type": "SHORT" + } + ], + "ReadNoFence16": [ + { + "name": "Source", + "type": "SHORT" + } + ], + "WriteRelease16": [ + { + "name": "Destination", + "type": "SHORT" + }, + { + "name": "Value", + "type": "SHORT" + } + ], + "WriteNoFence16": [ + { + "name": "Destination", + "type": "SHORT" + }, + { + "name": "Value", + "type": "SHORT" + } + ], + "ReadAcquire": [ + { + "name": "Source", + "type": "LONG" + } + ], + "ReadNoFence": [ + { + "name": "Source", + "type": "LONG" + } + ], + "WriteRelease": [ + { + "name": "Destination", + "type": "LONG" + }, + { + "name": "Value", + "type": "LONG" + } + ], + "WriteNoFence": [ + { + "name": "Destination", + "type": "LONG" + }, + { + "name": "Value", + "type": "LONG" + } + ], + "ReadAcquire64": [ + { + "name": "Source", + "type": "LONG64" + } + ], + "ReadNoFence64": [ + { + "name": "Source", + "type": "LONG64" + } + ], + "WriteRelease64": [ + { + "name": "Destination", + "type": "LONG64" + }, + { + "name": "Value", + "type": "LONG64" + } + ], + "WriteNoFence64": [ + { + "name": "Destination", + "type": "LONG64" + }, + { + "name": "Value", + "type": "LONG64" + } + ], + "ReadRaw8": [ + { + "name": "Source", + "type": "CHAR" + } + ], + "WriteRaw8": [ + { + "name": "Destination", + "type": "CHAR" + }, + { + "name": "Value", + "type": "CHAR" + } + ], + "ReadRaw16": [ + { + "name": "Source", + "type": "SHORT" + } + ], + "WriteRaw16": [ + { + "name": "Destination", + "type": "SHORT" + }, + { + "name": "Value", + "type": "SHORT" + } + ], + "ReadRaw": [ + { + "name": "Source", + "type": "LONG" + } + ], + "WriteRaw": [ + { + "name": "Destination", + "type": "LONG" + }, + { + "name": "Value", + "type": "LONG" + } + ], + "ReadRaw64": [ + { + "name": "Source", + "type": "LONG64" + } + ], + "WriteRaw64": [ + { + "name": "Destination", + "type": "LONG64" + }, + { + "name": "Value", + "type": "LONG64" + } + ], + "ReadUCharAcquire": [ + { + "name": "Source", + "type": "BYTE" + } + ], + "ReadUCharNoFence": [ + { + "name": "Source", + "type": "BYTE" + } + ], + "ReadBooleanAcquire": [ + { + "name": "Source", + "type": "BOOLEAN" + } + ], + "ReadBooleanNoFence": [ + { + "name": "Source", + "type": "BOOLEAN" + } + ], + "ReadUCharRaw": [ + { + "name": "Source", + "type": "BYTE" + } + ], + "WriteUCharRelease": [ + { + "name": "Destination", + "type": "BYTE" + }, + { + "name": "Value", + "type": "BYTE" + } + ], + "WriteUCharNoFence": [ + { + "name": "Destination", + "type": "BYTE" + }, + { + "name": "Value", + "type": "BYTE" + } + ], + "WriteBooleanRelease": [ + { + "name": "Destination", + "type": "BOOLEAN" + }, + { + "name": "Value", + "type": "BOOLEAN" + } + ], + "WriteBooleanNoFence": [ + { + "name": "Destination", + "type": "BOOLEAN" + }, + { + "name": "Value", + "type": "BOOLEAN" + } + ], + "WriteUCharRaw": [ + { + "name": "Destination", + "type": "BYTE" + }, + { + "name": "Value", + "type": "BYTE" + } + ], + "ReadUShortAcquire": [ + { + "name": "Source", + "type": "WORD" + } + ], + "ReadUShortNoFence": [ + { + "name": "Source", + "type": "WORD" + } + ], + "ReadUShortRaw": [ + { + "name": "Source", + "type": "WORD" + } + ], + "WriteUShortRelease": [ + { + "name": "Destination", + "type": "WORD" + }, + { + "name": "Value", + "type": "WORD" + } + ], + "WriteUShortNoFence": [ + { + "name": "Destination", + "type": "WORD" + }, + { + "name": "Value", + "type": "WORD" + } + ], + "WriteUShortRaw": [ + { + "name": "Destination", + "type": "WORD" + }, + { + "name": "Value", + "type": "WORD" + } + ], + "ReadULongAcquire": [ + { + "name": "Source", + "type": "DWORD" + } + ], + "ReadULongNoFence": [ + { + "name": "Source", + "type": "DWORD" + } + ], + "ReadULongRaw": [ + { + "name": "Source", + "type": "DWORD" + } + ], + "WriteULongRelease": [ + { + "name": "Destination", + "type": "DWORD" + }, + { + "name": "Value", + "type": "DWORD" + } + ], + "WriteULongNoFence": [ + { + "name": "Destination", + "type": "DWORD" + }, + { + "name": "Value", + "type": "DWORD" + } + ], + "WriteULongRaw": [ + { + "name": "Destination", + "type": "DWORD" + }, + { + "name": "Value", + "type": "DWORD" + } + ], + "ReadULong64Acquire": [ + { + "name": "Source", + "type": "DWORD64" + } + ], + "ReadULong64NoFence": [ + { + "name": "Source", + "type": "DWORD64" + } + ], + "ReadULong64Raw": [ + { + "name": "Source", + "type": "DWORD64" + } + ], + "WriteULong64Release": [ + { + "name": "Destination", + "type": "DWORD64" + }, + { + "name": "Value", + "type": "DWORD64" + } + ], + "WriteULong64NoFence": [ + { + "name": "Destination", + "type": "DWORD64" + }, + { + "name": "Value", + "type": "DWORD64" + } + ], + "WriteULong64Raw": [ + { + "name": "Destination", + "type": "DWORD64" + }, + { + "name": "Value", + "type": "DWORD64" + } + ], + "ReadPointerAcquire": [ + { + "name": "Source", + "type": "PVOID" + } + ], + "ReadPointerNoFence": [ + { + "name": "Source", + "type": "PVOID" + } + ], + "ReadPointerRaw": [ + { + "name": "Source", + "type": "PVOID" + } + ], + "WritePointerRelease": [ + { + "name": "Destination", + "type": "PVOID" + }, + { + "name": "Value", + "type": "PVOID" + } + ], + "WritePointerNoFence": [ + { + "name": "Destination", + "type": "PVOID" + }, + { + "name": "Value", + "type": "PVOID" + } + ], + "WritePointerRaw": [ + { + "name": "Destination", + "type": "PVOID" + }, + { + "name": "Value", + "type": "PVOID" + } + ], + "RtlCaptureStackBackTrace": [ + { + "name": "FramesToSkip", + "type": "DWORD" + }, + { + "name": "FramesToCapture", + "type": "DWORD" + }, + { + "name": "BackTrace", + "type": "PVOID" + }, + { + "name": "BackTraceHash", + "type": "PDWORD" + } + ], + "RtlCaptureContext": [ + { + "name": "ContextRecord", + "type": "PCONTEXT" + } + ], + "RtlCaptureContext2": [ + { + "name": "ContextRecord", + "type": "PCONTEXT" + } + ], + "RtlUnwind": [ + { + "name": "TargetFrame", + "type": "PVOID" + }, + { + "name": "TargetIp", + "type": "PVOID" + }, + { + "name": "ExceptionRecord", + "type": "PEXCEPTION_RECORD" + }, + { + "name": "ReturnValue", + "type": "PVOID" + } + ], + "RtlAddFunctionTable": [ + { + "name": "FunctionTable", + "type": "PRUNTIME_FUNCTION" + }, + { + "name": "EntryCount", + "type": "DWORD" + }, + { + "name": "BaseAddress", + "type": "DWORD64" + } + ], + "RtlDeleteFunctionTable": [ + { + "name": "FunctionTable", + "type": "PRUNTIME_FUNCTION" + } + ], + "RtlInstallFunctionTableCallback": [ + { + "name": "TableIdentifier", + "type": "DWORD64" + }, + { + "name": "BaseAddress", + "type": "DWORD64" + }, + { + "name": "Length", + "type": "DWORD" + }, + { + "name": "Callback", + "type": "PGET_RUNTIME_FUNCTION_CALLBACK" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "OutOfProcessCallbackDll", + "type": "PCWSTR" + } + ], + "RtlAddGrowableFunctionTable": [ + { + "name": "DynamicTable", + "type": "PVOID" + }, + { + "name": "FunctionTable", + "type": "PRUNTIME_FUNCTION" + }, + { + "name": "EntryCount", + "type": "DWORD" + }, + { + "name": "MaximumEntryCount", + "type": "DWORD" + }, + { + "name": "RangeBase", + "type": "ULONG_PTR" + }, + { + "name": "RangeEnd", + "type": "ULONG_PTR" + } + ], + "RtlGrowFunctionTable": [ + { + "name": "DynamicTable", + "type": "PVOID" + }, + { + "name": "NewEntryCount", + "type": "DWORD" + } + ], + "RtlDeleteGrowableFunctionTable": [ + { + "name": "DynamicTable", + "type": "PVOID" + } + ], + "RtlLookupFunctionEntry": [ + { + "name": "ControlPc", + "type": "DWORD64" + }, + { + "name": "ImageBase", + "type": "PDWORD64" + }, + { + "name": "HistoryTable", + "type": "PUNWIND_HISTORY_TABLE" + } + ], + "RtlRestoreContext": [ + { + "name": "ContextRecord", + "type": "PCONTEXT" + }, + { + "name": "ExceptionRecord", + "type": { + "name": "_EXCEPTION_RECORD", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlUnwindEx": [ + { + "name": "TargetFrame", + "type": "PVOID" + }, + { + "name": "TargetIp", + "type": "PVOID" + }, + { + "name": "ExceptionRecord", + "type": "PEXCEPTION_RECORD" + }, + { + "name": "ReturnValue", + "type": "PVOID" + }, + { + "name": "ContextRecord", + "type": "PCONTEXT" + }, + { + "name": "HistoryTable", + "type": "PUNWIND_HISTORY_TABLE" + } + ], + "RtlVirtualUnwind": [ + { + "name": "HandlerType", + "type": "DWORD" + }, + { + "name": "ImageBase", + "type": "DWORD64" + }, + { + "name": "ControlPc", + "type": "DWORD64" + }, + { + "name": "FunctionEntry", + "type": "PRUNTIME_FUNCTION" + }, + { + "name": "ContextRecord", + "type": "PCONTEXT" + }, + { + "name": "HandlerData", + "type": "PVOID" + }, + { + "name": "EstablisherFrame", + "type": "PDWORD64" + }, + { + "name": "ContextPointers", + "type": "PKNONVOLATILE_CONTEXT_POINTERS" + } + ], + "RtlRaiseException": [ + { + "name": "ExceptionRecord", + "type": "PEXCEPTION_RECORD" + } + ], + "RtlPcToFileHeader": [ + { + "name": "PcValue", + "type": "PVOID" + }, + { + "name": "BaseOfImage", + "type": "PVOID" + } + ], + "RtlCompareMemory": [ + { + "name": "Source1", + "type": "void" + }, + { + "name": "Source2", + "type": "void" + }, + { + "name": "Length", + "type": "SIZE_T" + } + ], + "RtlInitializeSListHead": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "RtlFirstEntrySList": [ + { + "name": "ListHead", + "type": "SLIST_HEADER" + } + ], + "RtlInterlockedPopEntrySList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "RtlInterlockedPushEntrySList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + }, + { + "name": "ListEntry", + "type": "PSLIST_ENTRY" + } + ], + "RtlInterlockedPushListSListEx": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + }, + { + "name": "List", + "type": "PSLIST_ENTRY" + }, + { + "name": "ListEnd", + "type": "PSLIST_ENTRY" + }, + { + "name": "Count", + "type": "DWORD" + } + ], + "RtlInterlockedFlushSList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "RtlQueryDepthSList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "RtlGetReturnAddressHijackTarget": [ + { + "name": "VOID", + "type": "void" + } + ], + "__fastfail": [ + { + "name": "Code", + "type": "unsigned int" + } + ], + "HEAP_MAKE_TAG_FLAGS": [ + { + "name": "TagBase", + "type": "DWORD" + }, + { + "name": "Tag", + "type": "DWORD" + } + ], + "RtlSecureZeroMemory": [ + { + "name": "ptr", + "type": "PVOID" + }, + { + "name": "cnt", + "type": "SIZE_T" + } + ], + "VerSetConditionMask": [ + { + "name": "ConditionMask", + "type": "ULONGLONG" + }, + { + "name": "TypeMask", + "type": "DWORD" + }, + { + "name": "Condition", + "type": "BYTE" + } + ], + "RtlGetProductInfo": [ + { + "name": "OSMajorVersion", + "type": "DWORD" + }, + { + "name": "OSMinorVersion", + "type": "DWORD" + }, + { + "name": "SpMajorVersion", + "type": "DWORD" + }, + { + "name": "SpMinorVersion", + "type": "DWORD" + }, + { + "name": "ReturnedProductType", + "type": "PDWORD" + } + ], + "RtlCrc32": [ + { + "name": "Buffer", + "type": "void" + }, + { + "name": "Size", + "type": "size_t" + }, + { + "name": "InitialCrc", + "type": "DWORD" + } + ], + "RtlCrc64": [ + { + "name": "Buffer", + "type": "void" + }, + { + "name": "Size", + "type": "size_t" + }, + { + "name": "InitialCrc", + "type": "ULONGLONG" + } + ], + "RtlOsDeploymentState": [ + { + "name": "Flags", + "type": "DWORD" + } + ], + "RtlGetNonVolatileToken": [ + { + "name": "NvBuffer", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "NvToken", + "type": "PVOID" + } + ], + "RtlFreeNonVolatileToken": [ + { + "name": "NvToken", + "type": "PVOID" + } + ], + "RtlFlushNonVolatileMemory": [ + { + "name": "NvToken", + "type": "PVOID" + }, + { + "name": "NvBuffer", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "RtlDrainNonVolatileFlush": [ + { + "name": "NvToken", + "type": "PVOID" + } + ], + "RtlWriteNonVolatileMemory": [ + { + "name": "NvToken", + "type": "PVOID" + }, + { + "name": "NvDestination", + "type": "void" + }, + { + "name": "Source", + "type": "void" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "RtlFillNonVolatileMemory": [ + { + "name": "NvToken", + "type": "PVOID" + }, + { + "name": "NvDestination", + "type": "void" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "Value", + "type": "BYTE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "RtlFlushNonVolatileMemoryRanges": [ + { + "name": "NvToken", + "type": "PVOID" + }, + { + "name": "NvRanges", + "type": "PNV_MEMORY_RANGE" + }, + { + "name": "NumRanges", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "RtlInitializeCorrelationVector": [ + { + "name": "CorrelationVector", + "type": "PCORRELATION_VECTOR" + }, + { + "name": "Version", + "type": "int" + }, + { + "name": "Guid", + "type": "GUID" + } + ], + "RtlIncrementCorrelationVector": [ + { + "name": "CorrelationVector", + "type": "PCORRELATION_VECTOR" + } + ], + "RtlExtendCorrelationVector": [ + { + "name": "CorrelationVector", + "type": "PCORRELATION_VECTOR" + } + ], + "RtlValidateCorrelationVector": [ + { + "name": "Vector", + "type": "PCORRELATION_VECTOR" + } + ], + "CUSTOM_SYSTEM_EVENT_TRIGGER_INIT": [ + { + "name": "Config", + "type": "PCUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG" + }, + { + "name": "TriggerId", + "type": "PCWSTR" + } + ], + "RtlRaiseCustomSystemEventTrigger": [ + { + "name": "TriggerConfig", + "type": "PCUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG" + } + ], + "RtlIsZeroMemory": [ + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "Length", + "type": "SIZE_T" + } + ], + "RtlNormalizeSecurityDescriptor": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "SecurityDescriptorLength", + "type": "DWORD" + }, + { + "name": "NewSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewSecurityDescriptorLength", + "type": "PDWORD" + }, + { + "name": "CheckOnly", + "type": "BOOLEAN" + } + ], + "RtlGetDeviceFamilyInfoEnum": [ + { + "name": "pullUAPInfo", + "type": "ULONGLONG" + }, + { + "name": "pulDeviceFamily", + "type": "DWORD" + }, + { + "name": "pulDeviceForm", + "type": "DWORD" + } + ], + "RtlConvertDeviceFamilyInfoToString": [ + { + "name": "pulDeviceFamilyBufferSize", + "type": "PDWORD" + }, + { + "name": "pulDeviceFormBufferSize", + "type": "PDWORD" + }, + { + "name": "DeviceFamily", + "type": "PWSTR" + }, + { + "name": "DeviceForm", + "type": "PWSTR" + } + ], + "RtlSwitchedVVI": [ + { + "name": "VersionInfo", + "type": "PRTL_OSVERSIONINFOEXW" + }, + { + "name": "TypeMask", + "type": "DWORD" + }, + { + "name": "ConditionMask", + "type": "ULONGLONG" + } + ], + "TpInitializeCallbackEnviron": [ + { + "name": "CallbackEnviron", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "TpSetCallbackThreadpool": [ + { + "name": "CallbackEnviron", + "type": "PTP_CALLBACK_ENVIRON" + }, + { + "name": "Pool", + "type": "PTP_POOL" + } + ], + "TpSetCallbackCleanupGroup": [ + { + "name": "CallbackEnviron", + "type": "PTP_CALLBACK_ENVIRON" + }, + { + "name": "CleanupGroup", + "type": "PTP_CLEANUP_GROUP" + }, + { + "name": "CleanupGroupCancelCallback", + "type": "PTP_CLEANUP_GROUP_CANCEL_CALLBACK" + } + ], + "TpSetCallbackActivationContext": [ + { + "name": "CallbackEnviron", + "type": "PTP_CALLBACK_ENVIRON" + }, + { + "name": "ActivationContext", + "type": { + "name": "_ACTIVATION_CONTEXT", + "data_type": "Struct", + "elements": [] + } + } + ], + "TpSetCallbackNoActivationContext": [ + { + "name": "CallbackEnviron", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "TpSetCallbackLongFunction": [ + { + "name": "CallbackEnviron", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "TpSetCallbackRaceWithDll": [ + { + "name": "CallbackEnviron", + "type": "PTP_CALLBACK_ENVIRON" + }, + { + "name": "DllHandle", + "type": "PVOID" + } + ], + "TpSetCallbackFinalizationCallback": [ + { + "name": "CallbackEnviron", + "type": "PTP_CALLBACK_ENVIRON" + }, + { + "name": "FinalizationCallback", + "type": "PTP_SIMPLE_CALLBACK" + } + ], + "TpSetCallbackPriority": [ + { + "name": "CallbackEnviron", + "type": "PTP_CALLBACK_ENVIRON" + }, + { + "name": "Priority", + "type": "TP_CALLBACK_PRIORITY" + } + ], + "TpSetCallbackPersistent": [ + { + "name": "CallbackEnviron", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "TpDestroyCallbackEnviron": [ + { + "name": "CallbackEnviron", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "NtCurrentTeb": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCurrentFiber": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetFiberData": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/windns.json b/qiling/extensions/windows_sdk/windns.json new file mode 100644 index 000000000..a444de10e --- /dev/null +++ b/qiling/extensions/windows_sdk/windns.json @@ -0,0 +1,534 @@ +{ + "DnsQueryConfig": [ + { + "name": "Config", + "type": "DNS_CONFIG_TYPE" + }, + { + "name": "Flag", + "type": "DWORD" + }, + { + "name": "pwsAdapterName", + "type": "PCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "pBufLen", + "type": "PDWORD" + } + ], + "DnsRecordCopyEx": [ + { + "name": "pRecord", + "type": "PDNS_RECORD" + }, + { + "name": "CharSetIn", + "type": "DNS_CHARSET" + }, + { + "name": "CharSetOut", + "type": "DNS_CHARSET" + } + ], + "DnsRecordSetCopyEx": [ + { + "name": "pRecordSet", + "type": "PDNS_RECORD" + }, + { + "name": "CharSetIn", + "type": "DNS_CHARSET" + }, + { + "name": "CharSetOut", + "type": "DNS_CHARSET" + } + ], + "DnsRecordCompare": [ + { + "name": "pRecord1", + "type": "PDNS_RECORD" + }, + { + "name": "pRecord2", + "type": "PDNS_RECORD" + } + ], + "DnsRecordSetCompare": [ + { + "name": "pRR1", + "type": "PDNS_RECORD" + }, + { + "name": "pRR2", + "type": "PDNS_RECORD" + }, + { + "name": "ppDiff1", + "type": "PDNS_RECORD" + }, + { + "name": "ppDiff2", + "type": "PDNS_RECORD" + } + ], + "DnsRecordSetDetach": [ + { + "name": "pRecordList", + "type": "PDNS_RECORD" + } + ], + "DnsFree": [ + { + "name": "pData", + "type": "PVOID" + }, + { + "name": "FreeType", + "type": "DNS_FREE_TYPE" + } + ], + "DnsQuery_A": [ + { + "name": "pszName", + "type": "PCSTR" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "pExtra", + "type": "PVOID" + }, + { + "name": "ppQueryResults", + "type": "PDNS_RECORD" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsQuery_UTF8": [ + { + "name": "pszName", + "type": "PCSTR" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "pExtra", + "type": "PVOID" + }, + { + "name": "ppQueryResults", + "type": "PDNS_RECORD" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsQuery_W": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "pExtra", + "type": "PVOID" + }, + { + "name": "ppQueryResults", + "type": "PDNS_RECORD" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsQueryEx": [ + { + "name": "pQueryRequest", + "type": "PDNS_QUERY_REQUEST" + }, + { + "name": "pQueryResults", + "type": "PDNS_QUERY_RESULT" + }, + { + "name": "pCancelHandle", + "type": "PDNS_QUERY_CANCEL" + } + ], + "DnsCancelQuery": [ + { + "name": "pCancelHandle", + "type": "PDNS_QUERY_CANCEL" + } + ], + "DnsAcquireContextHandle_W": [ + { + "name": "CredentialFlags", + "type": "DWORD" + }, + { + "name": "Credentials", + "type": "PVOID" + }, + { + "name": "pContext", + "type": "PHANDLE" + } + ], + "DnsAcquireContextHandle_A": [ + { + "name": "CredentialFlags", + "type": "DWORD" + }, + { + "name": "Credentials", + "type": "PVOID" + }, + { + "name": "pContext", + "type": "PHANDLE" + } + ], + "DnsReleaseContextHandle": [ + { + "name": "hContext", + "type": "HANDLE" + } + ], + "DnsModifyRecordsInSet_W": [ + { + "name": "pAddRecords", + "type": "PDNS_RECORD" + }, + { + "name": "pDeleteRecords", + "type": "PDNS_RECORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "hCredentials", + "type": "HANDLE" + }, + { + "name": "pExtraList", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsModifyRecordsInSet_A": [ + { + "name": "pAddRecords", + "type": "PDNS_RECORD" + }, + { + "name": "pDeleteRecords", + "type": "PDNS_RECORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "hCredentials", + "type": "HANDLE" + }, + { + "name": "pExtraList", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsModifyRecordsInSet_UTF8": [ + { + "name": "pAddRecords", + "type": "PDNS_RECORD" + }, + { + "name": "pDeleteRecords", + "type": "PDNS_RECORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "hCredentials", + "type": "HANDLE" + }, + { + "name": "pExtraList", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsReplaceRecordSetW": [ + { + "name": "pReplaceSet", + "type": "PDNS_RECORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "hContext", + "type": "HANDLE" + }, + { + "name": "pExtraInfo", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsReplaceRecordSetA": [ + { + "name": "pReplaceSet", + "type": "PDNS_RECORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "hContext", + "type": "HANDLE" + }, + { + "name": "pExtraInfo", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsReplaceRecordSetUTF8": [ + { + "name": "pReplaceSet", + "type": "PDNS_RECORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "hContext", + "type": "HANDLE" + }, + { + "name": "pExtraInfo", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "DnsValidateName_W": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "Format", + "type": "DNS_NAME_FORMAT" + } + ], + "DnsValidateName_A": [ + { + "name": "pszName", + "type": "PCSTR" + }, + { + "name": "Format", + "type": "DNS_NAME_FORMAT" + } + ], + "DnsValidateName_UTF8": [ + { + "name": "pszName", + "type": "PCSTR" + }, + { + "name": "Format", + "type": "DNS_NAME_FORMAT" + } + ], + "DnsNameCompare_A": [ + { + "name": "pName1", + "type": "PCSTR" + }, + { + "name": "pName2", + "type": "PCSTR" + } + ], + "DnsNameCompare_W": [ + { + "name": "pName1", + "type": "PCWSTR" + }, + { + "name": "pName2", + "type": "PCWSTR" + } + ], + "DnsWriteQuestionToBuffer_W": [ + { + "name": "pDnsBuffer", + "type": "PDNS_MESSAGE_BUFFER" + }, + { + "name": "pdwBufferSize", + "type": "PDWORD" + }, + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "Xid", + "type": "WORD" + }, + { + "name": "fRecursionDesired", + "type": "BOOL" + } + ], + "DnsWriteQuestionToBuffer_UTF8": [ + { + "name": "pDnsBuffer", + "type": "PDNS_MESSAGE_BUFFER" + }, + { + "name": "pdwBufferSize", + "type": "PDWORD" + }, + { + "name": "pszName", + "type": "PCSTR" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "Xid", + "type": "WORD" + }, + { + "name": "fRecursionDesired", + "type": "BOOL" + } + ], + "DnsExtractRecordsFromMessage_W": [ + { + "name": "pDnsBuffer", + "type": "PDNS_MESSAGE_BUFFER" + }, + { + "name": "wMessageLength", + "type": "WORD" + }, + { + "name": "ppRecord", + "type": "PDNS_RECORD" + } + ], + "DnsExtractRecordsFromMessage_UTF8": [ + { + "name": "pDnsBuffer", + "type": "PDNS_MESSAGE_BUFFER" + }, + { + "name": "wMessageLength", + "type": "WORD" + }, + { + "name": "ppRecord", + "type": "PDNS_RECORD" + } + ], + "DnsGetProxyInformation": [ + { + "name": "hostName", + "type": "PCWSTR" + }, + { + "name": "proxyInformation", + "type": "DNS_PROXY_INFORMATION" + }, + { + "name": "defaultProxyInformation", + "type": "DNS_PROXY_INFORMATION" + }, + { + "name": "completionRoutine", + "type": "DNS_PROXY_COMPLETION_ROUTINE" + }, + { + "name": "completionContext", + "type": "void" + } + ], + "DnsFreeProxyName": [ + { + "name": "proxyName", + "type": "PWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/windows.json b/qiling/extensions/windows_sdk/windows.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/windows.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/windowsceip.json b/qiling/extensions/windows_sdk/windowsceip.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/windowsceip.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/windowsdefender.json b/qiling/extensions/windows_sdk/windowsdefender.json new file mode 100644 index 000000000..408d2886f --- /dev/null +++ b/qiling/extensions/windows_sdk/windowsdefender.json @@ -0,0 +1,14 @@ +{ + "WDStatus": [ + { + "name": "pfEnabled", + "type": "BOOL" + } + ], + "WDEnable": [ + { + "name": "fEnable", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winefs.json b/qiling/extensions/windows_sdk/winefs.json new file mode 100644 index 000000000..426db0cc8 --- /dev/null +++ b/qiling/extensions/windows_sdk/winefs.json @@ -0,0 +1,86 @@ +{ + "QueryUsersOnEncryptedFile": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "pUsers", + "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" + } + ], + "QueryRecoveryAgentsOnEncryptedFile": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "pRecoveryAgents", + "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" + } + ], + "RemoveUsersFromEncryptedFile": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "pHashes", + "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" + } + ], + "AddUsersToEncryptedFile": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "pEncryptionCertificates", + "type": "PENCRYPTION_CERTIFICATE_LIST" + } + ], + "SetUserFileEncryptionKey": [ + { + "name": "pEncryptionCertificate", + "type": "PENCRYPTION_CERTIFICATE" + } + ], + "FreeEncryptionCertificateHashList": [ + { + "name": "pUsers", + "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" + } + ], + "EncryptionDisable": [ + { + "name": "DirPath", + "type": "LPCWSTR" + }, + { + "name": "Disable", + "type": "BOOL" + } + ], + "DuplicateEncryptionInfoFile": [ + { + "name": "SrcFileName", + "type": "LPCWSTR" + }, + { + "name": "DstFileName", + "type": "LPCWSTR" + }, + { + "name": "dwCreationDistribution", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winenclaveapi.json b/qiling/extensions/windows_sdk/winenclaveapi.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/winenclaveapi.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winevt.json b/qiling/extensions/windows_sdk/winevt.json new file mode 100644 index 000000000..373d1f5ee --- /dev/null +++ b/qiling/extensions/windows_sdk/winevt.json @@ -0,0 +1,640 @@ +{ + "EvtOpenSession": [ + { + "name": "LoginClass", + "type": "EVT_LOGIN_CLASS" + }, + { + "name": "Login", + "type": "PVOID" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtClose": [ + { + "name": "Object", + "type": "EVT_HANDLE" + } + ], + "EvtCancel": [ + { + "name": "Object", + "type": "EVT_HANDLE" + } + ], + "EvtGetExtendedStatus": [ + { + "name": "BufferSize", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "LPWSTR" + }, + { + "name": "BufferUsed", + "type": "PDWORD" + } + ], + "EvtQuery": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "Path", + "type": "LPCWSTR" + }, + { + "name": "Query", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtNext": [ + { + "name": "ResultSet", + "type": "EVT_HANDLE" + }, + { + "name": "EventsSize", + "type": "DWORD" + }, + { + "name": "Events", + "type": "PEVT_HANDLE" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Returned", + "type": "PDWORD" + } + ], + "EvtSeek": [ + { + "name": "ResultSet", + "type": "EVT_HANDLE" + }, + { + "name": "Position", + "type": "LONGLONG" + }, + { + "name": "Bookmark", + "type": "EVT_HANDLE" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtSubscribe": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "SignalEvent", + "type": "HANDLE" + }, + { + "name": "ChannelPath", + "type": "LPCWSTR" + }, + { + "name": "Query", + "type": "LPCWSTR" + }, + { + "name": "Bookmark", + "type": "EVT_HANDLE" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "Callback", + "type": "EVT_SUBSCRIBE_CALLBACK" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtCreateRenderContext": [ + { + "name": "ValuePathsCount", + "type": "DWORD" + }, + { + "name": "ValuePaths", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtRender": [ + { + "name": "Context", + "type": "EVT_HANDLE" + }, + { + "name": "Fragment", + "type": "EVT_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "BufferSize", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "BufferUsed", + "type": "PDWORD" + }, + { + "name": "PropertyCount", + "type": "PDWORD" + } + ], + "EvtFormatMessage": [ + { + "name": "PublisherMetadata", + "type": "EVT_HANDLE" + }, + { + "name": "Event", + "type": "EVT_HANDLE" + }, + { + "name": "MessageId", + "type": "DWORD" + }, + { + "name": "ValueCount", + "type": "DWORD" + }, + { + "name": "Values", + "type": "PEVT_VARIANT" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "BufferSize", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "LPWSTR" + }, + { + "name": "BufferUsed", + "type": "PDWORD" + } + ], + "EvtOpenLog": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "Path", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtGetLogInfo": [ + { + "name": "Log", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_LOG_PROPERTY_ID" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ], + "EvtClearLog": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "ChannelPath", + "type": "LPCWSTR" + }, + { + "name": "TargetFilePath", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtExportLog": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "Path", + "type": "LPCWSTR" + }, + { + "name": "Query", + "type": "LPCWSTR" + }, + { + "name": "TargetFilePath", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtArchiveExportedLog": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "LogFilePath", + "type": "LPCWSTR" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtOpenChannelEnum": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtNextChannelPath": [ + { + "name": "ChannelEnum", + "type": "EVT_HANDLE" + }, + { + "name": "ChannelPathBufferSize", + "type": "DWORD" + }, + { + "name": "ChannelPathBuffer", + "type": "LPWSTR" + }, + { + "name": "ChannelPathBufferUsed", + "type": "PDWORD" + } + ], + "EvtOpenChannelConfig": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "ChannelPath", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtSaveChannelConfig": [ + { + "name": "ChannelConfig", + "type": "EVT_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtSetChannelConfigProperty": [ + { + "name": "ChannelConfig", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_CHANNEL_CONFIG_PROPERTY_ID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValue", + "type": "PEVT_VARIANT" + } + ], + "EvtGetChannelConfigProperty": [ + { + "name": "ChannelConfig", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_CHANNEL_CONFIG_PROPERTY_ID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ], + "EvtOpenPublisherEnum": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtNextPublisherId": [ + { + "name": "PublisherEnum", + "type": "EVT_HANDLE" + }, + { + "name": "PublisherIdBufferSize", + "type": "DWORD" + }, + { + "name": "PublisherIdBuffer", + "type": "LPWSTR" + }, + { + "name": "PublisherIdBufferUsed", + "type": "PDWORD" + } + ], + "EvtOpenPublisherMetadata": [ + { + "name": "Session", + "type": "EVT_HANDLE" + }, + { + "name": "PublisherId", + "type": "LPCWSTR" + }, + { + "name": "LogFilePath", + "type": "LPCWSTR" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtGetPublisherMetadataProperty": [ + { + "name": "PublisherMetadata", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_PUBLISHER_METADATA_PROPERTY_ID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PublisherMetadataPropertyBufferSize", + "type": "DWORD" + }, + { + "name": "PublisherMetadataPropertyBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "PublisherMetadataPropertyBufferUsed", + "type": "PDWORD" + } + ], + "EvtOpenEventMetadataEnum": [ + { + "name": "PublisherMetadata", + "type": "EVT_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtNextEventMetadata": [ + { + "name": "EventMetadataEnum", + "type": "EVT_HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "EvtGetEventMetadataProperty": [ + { + "name": "EventMetadata", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_EVENT_METADATA_PROPERTY_ID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "EventMetadataPropertyBufferSize", + "type": "DWORD" + }, + { + "name": "EventMetadataPropertyBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "EventMetadataPropertyBufferUsed", + "type": "PDWORD" + } + ], + "EvtGetObjectArraySize": [ + { + "name": "ObjectArray", + "type": "EVT_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "ObjectArraySize", + "type": "PDWORD" + } + ], + "EvtGetObjectArrayProperty": [ + { + "name": "ObjectArray", + "type": "EVT_OBJECT_ARRAY_PROPERTY_HANDLE" + }, + { + "name": "PropertyId", + "type": "DWORD" + }, + { + "name": "ArrayIndex", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ], + "EvtGetQueryInfo": [ + { + "name": "QueryOrSubscription", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_QUERY_PROPERTY_ID" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ], + "EvtCreateBookmark": [ + { + "name": "BookmarkXml", + "type": "LPCWSTR" + } + ], + "EvtUpdateBookmark": [ + { + "name": "Bookmark", + "type": "EVT_HANDLE" + }, + { + "name": "Event", + "type": "EVT_HANDLE" + } + ], + "EvtGetEventInfo": [ + { + "name": "Event", + "type": "EVT_HANDLE" + }, + { + "name": "PropertyId", + "type": "EVT_EVENT_PROPERTY_ID" + }, + { + "name": "PropertyValueBufferSize", + "type": "DWORD" + }, + { + "name": "PropertyValueBuffer", + "type": "PEVT_VARIANT" + }, + { + "name": "PropertyValueBufferUsed", + "type": "PDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wingdi.json b/qiling/extensions/windows_sdk/wingdi.json new file mode 100644 index 000000000..f57fee6e4 --- /dev/null +++ b/qiling/extensions/windows_sdk/wingdi.json @@ -0,0 +1,5434 @@ +{ + "AddFontResourceA": [ + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "AddFontResourceW": [ + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "AnimatePalette": [ + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "iStartIndex", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "ppe", + "type": "PALETTEENTRY" + } + ], + "Arc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "x3", + "type": "int" + }, + { + "name": "y3", + "type": "int" + }, + { + "name": "x4", + "type": "int" + }, + { + "name": "y4", + "type": "int" + } + ], + "BitBlt": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "CancelDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "Chord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "x3", + "type": "int" + }, + { + "name": "y3", + "type": "int" + }, + { + "name": "x4", + "type": "int" + }, + { + "name": "y4", + "type": "int" + } + ], + "ChoosePixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "CloseMetaFile": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CombineRgn": [ + { + "name": "hrgnDst", + "type": "HRGN" + }, + { + "name": "hrgnSrc1", + "type": "HRGN" + }, + { + "name": "hrgnSrc2", + "type": "HRGN" + }, + { + "name": "iMode", + "type": "int" + } + ], + "CopyMetaFileA": [ + { + "name": "VOID", + "type": "HMETAFILE" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "CopyMetaFileW": [ + { + "name": "VOID", + "type": "HMETAFILE" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "CreateBitmap": [ + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "nPlanes", + "type": "UINT" + }, + { + "name": "nBitCount", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "void" + } + ], + "CreateBitmapIndirect": [ + { + "name": "pbm", + "type": "BITMAP" + } + ], + "CreateBrushIndirect": [ + { + "name": "plbrush", + "type": "LOGBRUSH" + } + ], + "CreateCompatibleBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "CreateDiscardableBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "CreateCompatibleDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CreateDCA": [ + { + "name": "pwszDriver", + "type": "LPCSTR" + }, + { + "name": "pwszDevice", + "type": "LPCSTR" + }, + { + "name": "pszPort", + "type": "LPCSTR" + }, + { + "name": "pdm", + "type": "DEVMODEA" + } + ], + "CreateDCW": [ + { + "name": "pwszDriver", + "type": "LPCWSTR" + }, + { + "name": "pwszDevice", + "type": "LPCWSTR" + }, + { + "name": "pszPort", + "type": "LPCWSTR" + }, + { + "name": "pdm", + "type": "DEVMODEW" + } + ], + "CreateDIBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pbmih", + "type": "BITMAPINFOHEADER" + }, + { + "name": "flInit", + "type": "DWORD" + }, + { + "name": "pjBits", + "type": "void" + }, + { + "name": "pbmi", + "type": "BITMAPINFO" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateDIBPatternBrush": [ + { + "name": "h", + "type": "HGLOBAL" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateDIBPatternBrushPt": [ + { + "name": "lpPackedDIB", + "type": "void" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateEllipticRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + } + ], + "CreateEllipticRgnIndirect": [ + { + "name": "lprect", + "type": "RECT" + } + ], + "CreateFontIndirectA": [ + { + "name": "lplf", + "type": "LOGFONTA" + } + ], + "CreateFontIndirectW": [ + { + "name": "lplf", + "type": "LOGFONTW" + } + ], + "CreateFontA": [ + { + "name": "cHeight", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "cEscapement", + "type": "int" + }, + { + "name": "cOrientation", + "type": "int" + }, + { + "name": "cWeight", + "type": "int" + }, + { + "name": "bItalic", + "type": "DWORD" + }, + { + "name": "bUnderline", + "type": "DWORD" + }, + { + "name": "bStrikeOut", + "type": "DWORD" + }, + { + "name": "iCharSet", + "type": "DWORD" + }, + { + "name": "iOutPrecision", + "type": "DWORD" + }, + { + "name": "iClipPrecision", + "type": "DWORD" + }, + { + "name": "iQuality", + "type": "DWORD" + }, + { + "name": "iPitchAndFamily", + "type": "DWORD" + }, + { + "name": "pszFaceName", + "type": "LPCSTR" + } + ], + "CreateFontW": [ + { + "name": "cHeight", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "cEscapement", + "type": "int" + }, + { + "name": "cOrientation", + "type": "int" + }, + { + "name": "cWeight", + "type": "int" + }, + { + "name": "bItalic", + "type": "DWORD" + }, + { + "name": "bUnderline", + "type": "DWORD" + }, + { + "name": "bStrikeOut", + "type": "DWORD" + }, + { + "name": "iCharSet", + "type": "DWORD" + }, + { + "name": "iOutPrecision", + "type": "DWORD" + }, + { + "name": "iClipPrecision", + "type": "DWORD" + }, + { + "name": "iQuality", + "type": "DWORD" + }, + { + "name": "iPitchAndFamily", + "type": "DWORD" + }, + { + "name": "pszFaceName", + "type": "LPCWSTR" + } + ], + "CreateHatchBrush": [ + { + "name": "iHatch", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "CreateICA": [ + { + "name": "pszDriver", + "type": "LPCSTR" + }, + { + "name": "pszDevice", + "type": "LPCSTR" + }, + { + "name": "pszPort", + "type": "LPCSTR" + }, + { + "name": "pdm", + "type": "DEVMODEA" + } + ], + "CreateICW": [ + { + "name": "pszDriver", + "type": "LPCWSTR" + }, + { + "name": "pszDevice", + "type": "LPCWSTR" + }, + { + "name": "pszPort", + "type": "LPCWSTR" + }, + { + "name": "pdm", + "type": "DEVMODEW" + } + ], + "CreateMetaFileA": [ + { + "name": "pszFile", + "type": "LPCSTR" + } + ], + "CreateMetaFileW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + } + ], + "CreatePalette": [ + { + "name": "plpal", + "type": "LOGPALETTE" + } + ], + "CreatePen": [ + { + "name": "iStyle", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "CreatePenIndirect": [ + { + "name": "plpen", + "type": "LOGPEN" + } + ], + "CreatePolyPolygonRgn": [ + { + "name": "pptl", + "type": "POINT" + }, + { + "name": "pc", + "type": "INT" + }, + { + "name": "cPoly", + "type": "int" + }, + { + "name": "iMode", + "type": "int" + } + ], + "CreatePatternBrush": [ + { + "name": "hbm", + "type": "HBITMAP" + } + ], + "CreateRectRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + } + ], + "CreateRectRgnIndirect": [ + { + "name": "lprect", + "type": "RECT" + } + ], + "CreateRoundRectRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + } + ], + "CreateScalableFontResourceA": [ + { + "name": "fdwHidden", + "type": "DWORD" + }, + { + "name": "lpszFont", + "type": "LPCSTR" + }, + { + "name": "lpszFile", + "type": "LPCSTR" + }, + { + "name": "lpszPath", + "type": "LPCSTR" + } + ], + "CreateScalableFontResourceW": [ + { + "name": "fdwHidden", + "type": "DWORD" + }, + { + "name": "lpszFont", + "type": "LPCWSTR" + }, + { + "name": "lpszFile", + "type": "LPCWSTR" + }, + { + "name": "lpszPath", + "type": "LPCWSTR" + } + ], + "CreateSolidBrush": [ + { + "name": "color", + "type": "COLORREF" + } + ], + "DeleteDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "DeleteMetaFile": [ + { + "name": "hmf", + "type": "HMETAFILE" + } + ], + "DeleteObject": [ + { + "name": "ho", + "type": "HGDIOBJ" + } + ], + "DescribePixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPixelFormat", + "type": "int" + }, + { + "name": "nBytes", + "type": "UINT" + }, + { + "name": "ppfd", + "type": "LPPIXELFORMATDESCRIPTOR" + } + ], + "DeviceCapabilitiesA": [ + { + "name": "pDevice", + "type": "LPCSTR" + }, + { + "name": "pPort", + "type": "LPCSTR" + }, + { + "name": "fwCapability", + "type": "WORD" + }, + { + "name": "pOutput", + "type": "LPSTR" + }, + { + "name": "pDevMode", + "type": "DEVMODEA" + } + ], + "DeviceCapabilitiesW": [ + { + "name": "pDevice", + "type": "LPCWSTR" + }, + { + "name": "pPort", + "type": "LPCWSTR" + }, + { + "name": "fwCapability", + "type": "WORD" + }, + { + "name": "pOutput", + "type": "LPWSTR" + }, + { + "name": "pDevMode", + "type": "DEVMODEW" + } + ], + "DrawEscape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjIn", + "type": "int" + }, + { + "name": "lpIn", + "type": "LPCSTR" + } + ], + "Ellipse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "EnumFontFamiliesExA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPLOGFONTA" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumFontFamiliesExW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPLOGFONTW" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumFontFamiliesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontFamiliesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCWSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCWSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumObjects": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nType", + "type": "int" + }, + { + "name": "lpFunc", + "type": "GOBJENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EqualRgn": [ + { + "name": "hrgn1", + "type": "HRGN" + }, + { + "name": "hrgn2", + "type": "HRGN" + } + ], + "Escape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjIn", + "type": "int" + }, + { + "name": "pvIn", + "type": "LPCSTR" + }, + { + "name": "pvOut", + "type": "LPVOID" + } + ], + "ExtEscape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjInput", + "type": "int" + }, + { + "name": "lpInData", + "type": "LPCSTR" + }, + { + "name": "cjOutput", + "type": "int" + }, + { + "name": "lpOutData", + "type": "LPSTR" + } + ], + "ExcludeClipRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "ExtCreateRegion": [ + { + "name": "lpx", + "type": "XFORM" + }, + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "RGNDATA" + } + ], + "ExtFloodFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + }, + { + "name": "type", + "type": "UINT" + } + ], + "FillRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "hbr", + "type": "HBRUSH" + } + ], + "FloodFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "FrameRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "hbr", + "type": "HBRUSH" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + } + ], + "GetROP2": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetAspectRatioFilterEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetBkColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetDCBrushColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetDCPenColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetBkMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetBitmapBits": [ + { + "name": "hbit", + "type": "HBITMAP" + }, + { + "name": "cb", + "type": "LONG" + }, + { + "name": "lpvBits", + "type": "LPVOID" + } + ], + "GetBitmapDimensionEx": [ + { + "name": "hbit", + "type": "HBITMAP" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetBoundsRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "LPRECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetBrushOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetCharWidthA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidthW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidth32A": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidth32W": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidthFloatA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "PFLOAT" + } + ], + "GetCharWidthFloatW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "PFLOAT" + } + ], + "GetCharABCWidthsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "wFirst", + "type": "UINT" + }, + { + "name": "wLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABC" + } + ], + "GetCharABCWidthsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "wFirst", + "type": "UINT" + }, + { + "name": "wLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABC" + } + ], + "GetCharABCWidthsFloatA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABCFLOAT" + } + ], + "GetCharABCWidthsFloatW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABCFLOAT" + } + ], + "GetClipBox": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "LPRECT" + } + ], + "GetClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "GetMetaRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "GetCurrentObject": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "type", + "type": "UINT" + } + ], + "GetCurrentPositionEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetDeviceCaps": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "index", + "type": "int" + } + ], + "GetDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "start", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpvBits", + "type": "LPVOID" + }, + { + "name": "lpbmi", + "type": "LPBITMAPINFO" + }, + { + "name": "usage", + "type": "UINT" + } + ], + "GetFontData": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dwTable", + "type": "DWORD" + }, + { + "name": "dwOffset", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "PVOID" + }, + { + "name": "cjBuffer", + "type": "DWORD" + } + ], + "GetGlyphOutlineA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "uChar", + "type": "UINT" + }, + { + "name": "fuFormat", + "type": "UINT" + }, + { + "name": "lpgm", + "type": "LPGLYPHMETRICS" + }, + { + "name": "cjBuffer", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "LPVOID" + }, + { + "name": "lpmat2", + "type": "MAT2" + } + ], + "GetGlyphOutlineW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "uChar", + "type": "UINT" + }, + { + "name": "fuFormat", + "type": "UINT" + }, + { + "name": "lpgm", + "type": "LPGLYPHMETRICS" + }, + { + "name": "cjBuffer", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "LPVOID" + }, + { + "name": "lpmat2", + "type": "MAT2" + } + ], + "GetGraphicsMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetMapMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetMetaFileBitsEx": [ + { + "name": "hMF", + "type": "HMETAFILE" + }, + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetMetaFileA": [ + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetMetaFileW": [ + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "GetNearestColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "GetNearestPaletteIndex": [ + { + "name": "h", + "type": "HPALETTE" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "GetObjectType": [ + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "GetOutlineTextMetricsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cjCopy", + "type": "UINT" + }, + { + "name": "potm", + "type": "LPOUTLINETEXTMETRICA" + } + ], + "GetOutlineTextMetricsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cjCopy", + "type": "UINT" + }, + { + "name": "potm", + "type": "LPOUTLINETEXTMETRICW" + } + ], + "GetPaletteEntries": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetPixel": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "GetPixelFormat": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetPolyFillMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetRasterizerCaps": [ + { + "name": "lpraststat", + "type": "LPRASTERIZER_STATUS" + }, + { + "name": "cjBytes", + "type": "UINT" + } + ], + "GetRandomRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "i", + "type": "INT" + } + ], + "GetRegionData": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpRgnData", + "type": "LPRGNDATA" + } + ], + "GetRgnBox": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "lprc", + "type": "LPRECT" + } + ], + "GetStockObject": [ + { + "name": "i", + "type": "int" + } + ], + "GetStretchBltMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetSystemPaletteEntries": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetSystemPaletteUse": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextCharacterExtra": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextAlign": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextExtentPointA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "GetTextExtentPointW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "GetTextExtentPoint32A": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "psizl", + "type": "LPSIZE" + } + ], + "GetTextExtentPoint32W": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "psizl", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpszString", + "type": "LPCSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpszString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetTextCharset": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextCharsetInfo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpSig", + "type": "LPFONTSIGNATURE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "TranslateCharsetInfo": [ + { + "name": "lpSrc", + "type": "DWORD" + }, + { + "name": "lpCs", + "type": "LPCHARSETINFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFontLanguageInfo": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetCharacterPlacementA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "nMexExtent", + "type": "int" + }, + { + "name": "lpResults", + "type": "LPGCP_RESULTSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetCharacterPlacementW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "nMexExtent", + "type": "int" + }, + { + "name": "lpResults", + "type": "LPGCP_RESULTSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFontUnicodeRanges": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpgs", + "type": "LPGLYPHSET" + } + ], + "GetGlyphIndicesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpstr", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "fl", + "type": "DWORD" + } + ], + "GetGlyphIndicesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpstr", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "fl", + "type": "DWORD" + } + ], + "GetTextExtentPointI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pgiIn", + "type": "LPWORD" + }, + { + "name": "cgi", + "type": "int" + }, + { + "name": "psize", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpwszString", + "type": "LPWORD" + }, + { + "name": "cwchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetCharWidthI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "giFirst", + "type": "UINT" + }, + { + "name": "cgi", + "type": "UINT" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "piWidths", + "type": "LPINT" + } + ], + "GetCharABCWidthsI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "giFirst", + "type": "UINT" + }, + { + "name": "cgi", + "type": "UINT" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "pabc", + "type": "LPABC" + } + ], + "AddFontResourceExA": [ + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "res", + "type": "PVOID" + } + ], + "AddFontResourceExW": [ + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "res", + "type": "PVOID" + } + ], + "RemoveFontResourceExA": [ + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "pdv", + "type": "PVOID" + } + ], + "RemoveFontResourceExW": [ + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "pdv", + "type": "PVOID" + } + ], + "AddFontMemResourceEx": [ + { + "name": "pFileView", + "type": "PVOID" + }, + { + "name": "cjSize", + "type": "DWORD" + }, + { + "name": "pvResrved", + "type": "PVOID" + }, + { + "name": "pNumFonts", + "type": "DWORD" + } + ], + "RemoveFontMemResourceEx": [ + { + "name": "h", + "type": "HANDLE" + } + ], + "CreateFontIndirectExA": [ + { + "name": "VOID", + "type": "ENUMLOGFONTEXDVA" + } + ], + "CreateFontIndirectExW": [ + { + "name": "VOID", + "type": "ENUMLOGFONTEXDVW" + } + ], + "GetViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppoint", + "type": "LPPOINT" + } + ], + "GetWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppoint", + "type": "LPPOINT" + } + ], + "IntersectClipRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "InvertRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "LineDDA": [ + { + "name": "xStart", + "type": "int" + }, + { + "name": "yStart", + "type": "int" + }, + { + "name": "xEnd", + "type": "int" + }, + { + "name": "yEnd", + "type": "int" + }, + { + "name": "lpProc", + "type": "LINEDDAPROC" + }, + { + "name": "data", + "type": "LPARAM" + } + ], + "LineTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "MaskBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + }, + { + "name": "xMask", + "type": "int" + }, + { + "name": "yMask", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "PlgBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "lpPoint", + "type": "POINT" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + }, + { + "name": "xMask", + "type": "int" + }, + { + "name": "yMask", + "type": "int" + } + ], + "OffsetClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "OffsetRgn": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "PatBlt": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "Pie": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "xr1", + "type": "int" + }, + { + "name": "yr1", + "type": "int" + }, + { + "name": "xr2", + "type": "int" + }, + { + "name": "yr2", + "type": "int" + } + ], + "PlayMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HMETAFILE" + } + ], + "PaintRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "PolyPolygon": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "asz", + "type": "INT" + }, + { + "name": "csz", + "type": "int" + } + ], + "PtInRegion": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "PtVisible": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "RectInRegion": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "RectVisible": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "Rectangle": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "RestoreDC": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nSavedDC", + "type": "int" + } + ], + "ResetDCA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdm", + "type": "DEVMODEA" + } + ], + "ResetDCW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdm", + "type": "DEVMODEW" + } + ], + "RealizePalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "RemoveFontResourceA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "RemoveFontResourceW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "RoundRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + } + ], + "ResizePalette": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "n", + "type": "UINT" + } + ], + "SaveDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SelectClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "ExtSelectClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetMetaRgn": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SelectObject": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "SelectPalette": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "bForceBkgd", + "type": "BOOL" + } + ], + "SetBkColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetDCBrushColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetDCPenColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetBkMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetBitmapBits": [ + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "pvBits", + "type": "void" + } + ], + "SetBoundsRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "SetDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "start", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "ColorUse", + "type": "UINT" + } + ], + "SetDIBitsToDevice": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "w", + "type": "DWORD" + }, + { + "name": "h", + "type": "DWORD" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "StartScan", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpvBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "ColorUse", + "type": "UINT" + } + ], + "SetMapperFlags": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "SetGraphicsMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iMode", + "type": "int" + } + ], + "SetMapMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iMode", + "type": "int" + } + ], + "SetLayout": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "l", + "type": "DWORD" + } + ], + "GetLayout": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SetMetaFileBitsEx": [ + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "lpData", + "type": "BYTE" + } + ], + "SetPaletteEntries": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "PALETTEENTRY" + } + ], + "SetPixel": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetPixelV": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetPixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "format", + "type": "int" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "SetPolyFillMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "StretchBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "SetRectRgn": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "StretchDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "DestWidth", + "type": "int" + }, + { + "name": "DestHeight", + "type": "int" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "SrcWidth", + "type": "int" + }, + { + "name": "SrcHeight", + "type": "int" + }, + { + "name": "lpBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "iUsage", + "type": "UINT" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "SetROP2": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "rop2", + "type": "int" + } + ], + "SetStretchBltMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetSystemPaletteUse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "use", + "type": "UINT" + } + ], + "SetTextCharacterExtra": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "extra", + "type": "int" + } + ], + "SetTextColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetTextAlign": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "align", + "type": "UINT" + } + ], + "SetTextJustification": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "extra", + "type": "int" + }, + { + "name": "count", + "type": "int" + } + ], + "UpdateColors": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "AlphaBlend": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "ftn", + "type": "BLENDFUNCTION" + } + ], + "TransparentBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "crTransparent", + "type": "UINT" + } + ], + "GradientFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pVertex", + "type": "PTRIVERTEX" + }, + { + "name": "nVertex", + "type": "ULONG" + }, + { + "name": "pMesh", + "type": "PVOID" + }, + { + "name": "nMesh", + "type": "ULONG" + }, + { + "name": "ulMode", + "type": "ULONG" + } + ], + "GdiAlphaBlend": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "ftn", + "type": "BLENDFUNCTION" + } + ], + "GdiTransparentBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "crTransparent", + "type": "UINT" + } + ], + "GdiGradientFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pVertex", + "type": "PTRIVERTEX" + }, + { + "name": "nVertex", + "type": "ULONG" + }, + { + "name": "pMesh", + "type": "PVOID" + }, + { + "name": "nCount", + "type": "ULONG" + }, + { + "name": "ulMode", + "type": "ULONG" + } + ], + "PlayMetaFileRecord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpHandleTable", + "type": "LPHANDLETABLE" + }, + { + "name": "lpMR", + "type": "LPMETARECORD" + }, + { + "name": "noObjs", + "type": "UINT" + } + ], + "EnumMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HMETAFILE" + }, + { + "name": "proc", + "type": "MFENUMPROC" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "CloseEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CopyEnhMetaFileA": [ + { + "name": "hEnh", + "type": "HENHMETAFILE" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "CopyEnhMetaFileW": [ + { + "name": "hEnh", + "type": "HENHMETAFILE" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "CreateEnhMetaFileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFilename", + "type": "LPCSTR" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "lpDesc", + "type": "LPCSTR" + } + ], + "CreateEnhMetaFileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFilename", + "type": "LPCWSTR" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "lpDesc", + "type": "LPCWSTR" + } + ], + "DeleteEnhMetaFile": [ + { + "name": "hmf", + "type": "HENHMETAFILE" + } + ], + "EnumEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HENHMETAFILE" + }, + { + "name": "proc", + "type": "ENHMFENUMPROC" + }, + { + "name": "param", + "type": "LPVOID" + }, + { + "name": "lpRect", + "type": "RECT" + } + ], + "GetEnhMetaFileA": [ + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetEnhMetaFileW": [ + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "GetEnhMetaFileBits": [ + { + "name": "hEMF", + "type": "HENHMETAFILE" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpData", + "type": "LPBYTE" + } + ], + "GetEnhMetaFileDescriptionA": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cchBuffer", + "type": "UINT" + }, + { + "name": "lpDescription", + "type": "LPSTR" + } + ], + "GetEnhMetaFileDescriptionW": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cchBuffer", + "type": "UINT" + }, + { + "name": "lpDescription", + "type": "LPWSTR" + } + ], + "GetEnhMetaFileHeader": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpEnhMetaHeader", + "type": "LPENHMETAHEADER" + } + ], + "GetEnhMetaFilePaletteEntries": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "nNumEntries", + "type": "UINT" + }, + { + "name": "lpPaletteEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetEnhMetaFilePixelFormat": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "GetWinMetaFileBits": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cbData16", + "type": "UINT" + }, + { + "name": "pData16", + "type": "LPBYTE" + }, + { + "name": "iMapMode", + "type": "INT" + }, + { + "name": "hdcRef", + "type": "HDC" + } + ], + "PlayEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HENHMETAFILE" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "PlayEnhMetaFileRecord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pht", + "type": "LPHANDLETABLE" + }, + { + "name": "pmr", + "type": "ENHMETARECORD" + }, + { + "name": "cht", + "type": "UINT" + } + ], + "SetEnhMetaFileBits": [ + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "pb", + "type": "BYTE" + } + ], + "SetWinMetaFileBits": [ + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpMeta16Data", + "type": "BYTE" + }, + { + "name": "hdcRef", + "type": "HDC" + }, + { + "name": "lpMFP", + "type": "METAFILEPICT" + } + ], + "GdiComment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpData", + "type": "BYTE" + } + ], + "GetTextMetricsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lptm", + "type": "LPTEXTMETRICA" + } + ], + "GetTextMetricsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lptm", + "type": "LPTEXTMETRICW" + } + ], + "AngleArc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "r", + "type": "DWORD" + }, + { + "name": "StartAngle", + "type": "FLOAT" + }, + { + "name": "SweepAngle", + "type": "FLOAT" + } + ], + "PolyPolyline": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "asz", + "type": "DWORD" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "GetWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "LPXFORM" + } + ], + "SetWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "XFORM" + } + ], + "ModifyWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "XFORM" + }, + { + "name": "mode", + "type": "DWORD" + } + ], + "CombineTransform": [ + { + "name": "lpxfOut", + "type": "LPXFORM" + }, + { + "name": "lpxf1", + "type": "XFORM" + }, + { + "name": "lpxf2", + "type": "XFORM" + } + ], + "CreateDIBSection": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pbmi", + "type": "BITMAPINFO" + }, + { + "name": "usage", + "type": "UINT" + }, + { + "name": "ppvBits", + "type": "void" + }, + { + "name": "hSection", + "type": "HANDLE" + }, + { + "name": "offset", + "type": "DWORD" + } + ], + "GetDIBColorTable": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "prgbq", + "type": "RGBQUAD" + } + ], + "SetDIBColorTable": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "prgbq", + "type": "RGBQUAD" + } + ], + "SetColorAdjustment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpca", + "type": "COLORADJUSTMENT" + } + ], + "GetColorAdjustment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpca", + "type": "LPCOLORADJUSTMENT" + } + ], + "CreateHalftonePalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StartDocA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdi", + "type": "DOCINFOA" + } + ], + "StartDocW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdi", + "type": "DOCINFOW" + } + ], + "EndDoc": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StartPage": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "EndPage": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "AbortDoc": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SetAbortProc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ABORTPROC" + } + ], + "AbortPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ArcTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "xr1", + "type": "int" + }, + { + "name": "yr1", + "type": "int" + }, + { + "name": "xr2", + "type": "int" + }, + { + "name": "yr2", + "type": "int" + } + ], + "BeginPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CloseFigure": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "EndPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "FillPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "FlattenPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetPath": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "LPPOINT" + }, + { + "name": "aj", + "type": "LPBYTE" + }, + { + "name": "cpt", + "type": "int" + } + ], + "PathToRegion": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "PolyDraw": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "aj", + "type": "BYTE" + }, + { + "name": "cpt", + "type": "int" + } + ], + "SelectClipPath": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetArcDirection": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dir", + "type": "int" + } + ], + "SetMiterLimit": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "limit", + "type": "FLOAT" + }, + { + "name": "old", + "type": "PFLOAT" + } + ], + "StrokeAndFillPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StrokePath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "WidenPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ExtCreatePen": [ + { + "name": "iPenStyle", + "type": "DWORD" + }, + { + "name": "cWidth", + "type": "DWORD" + }, + { + "name": "plbrush", + "type": "LOGBRUSH" + }, + { + "name": "cStyle", + "type": "DWORD" + }, + { + "name": "pstyle", + "type": "DWORD" + } + ], + "GetMiterLimit": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "plimit", + "type": "PFLOAT" + } + ], + "GetArcDirection": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetObjectA": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pv", + "type": "LPVOID" + } + ], + "GetObjectW": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pv", + "type": "LPVOID" + } + ], + "MoveToEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "TextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + } + ], + "TextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + } + ], + "ExtTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "options", + "type": "UINT" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "UINT" + }, + { + "name": "lpDx", + "type": "INT" + } + ], + "ExtTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "options", + "type": "UINT" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "UINT" + }, + { + "name": "lpDx", + "type": "INT" + } + ], + "PolyTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppt", + "type": "POLYTEXTA" + }, + { + "name": "nstrings", + "type": "int" + } + ], + "PolyTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppt", + "type": "POLYTEXTW" + }, + { + "name": "nstrings", + "type": "int" + } + ], + "CreatePolygonRgn": [ + { + "name": "pptl", + "type": "POINT" + }, + { + "name": "cPoint", + "type": "int" + }, + { + "name": "iMode", + "type": "int" + } + ], + "DPtoLP": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + }, + { + "name": "c", + "type": "int" + } + ], + "LPtoDP": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + }, + { + "name": "c", + "type": "int" + } + ], + "Polygon": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "int" + } + ], + "Polyline": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "int" + } + ], + "PolyBezier": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "PolyBezierTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "PolylineTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "SetViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "SetWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "OffsetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "OffsetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "ScaleViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xn", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "yn", + "type": "int" + }, + { + "name": "yd", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "ScaleWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xn", + "type": "int" + }, + { + "name": "xd", + "type": "int" + }, + { + "name": "yn", + "type": "int" + }, + { + "name": "yd", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetBitmapDimensionEx": [ + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetBrushOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetTextFaceA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpName", + "type": "LPSTR" + } + ], + "GetTextFaceW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpName", + "type": "LPWSTR" + } + ], + "GetKerningPairsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nPairs", + "type": "DWORD" + }, + { + "name": "lpKernPair", + "type": "LPKERNINGPAIR" + } + ], + "GetKerningPairsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nPairs", + "type": "DWORD" + }, + { + "name": "lpKernPair", + "type": "LPKERNINGPAIR" + } + ], + "GetDCOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "UnrealizeObject": [ + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "GdiFlush": [ + { + "name": "VOID", + "type": "void" + } + ], + "GdiSetBatchLimit": [ + { + "name": "dw", + "type": "DWORD" + } + ], + "GdiGetBatchLimit": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetICMMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "CheckColorsInGamut": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRGBTriple", + "type": "LPRGBTRIPLE" + }, + { + "name": "dlpBuffer", + "type": "LPVOID" + }, + { + "name": "nCount", + "type": "DWORD" + } + ], + "GetColorSpace": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetLogColorSpaceA": [ + { + "name": "hColorSpace", + "type": "HCOLORSPACE" + }, + { + "name": "lpBuffer", + "type": "LPLOGCOLORSPACEA" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetLogColorSpaceW": [ + { + "name": "hColorSpace", + "type": "HCOLORSPACE" + }, + { + "name": "lpBuffer", + "type": "LPLOGCOLORSPACEW" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "CreateColorSpaceA": [ + { + "name": "lplcs", + "type": "LPLOGCOLORSPACEA" + } + ], + "CreateColorSpaceW": [ + { + "name": "lplcs", + "type": "LPLOGCOLORSPACEW" + } + ], + "SetColorSpace": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hcs", + "type": "HCOLORSPACE" + } + ], + "DeleteColorSpace": [ + { + "name": "hcs", + "type": "HCOLORSPACE" + } + ], + "GetICMProfileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pBufSize", + "type": "LPDWORD" + }, + { + "name": "pszFilename", + "type": "LPSTR" + } + ], + "GetICMProfileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pBufSize", + "type": "LPDWORD" + }, + { + "name": "pszFilename", + "type": "LPWSTR" + } + ], + "SetICMProfileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFileName", + "type": "LPSTR" + } + ], + "SetICMProfileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFileName", + "type": "LPWSTR" + } + ], + "GetDeviceGammaRamp": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRamp", + "type": "LPVOID" + } + ], + "SetDeviceGammaRamp": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRamp", + "type": "LPVOID" + } + ], + "ColorMatchToTarget": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hdcTarget", + "type": "HDC" + }, + { + "name": "action", + "type": "DWORD" + } + ], + "EnumICMProfilesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ICMENUMPROCA" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "EnumICMProfilesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ICMENUMPROCW" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "UpdateICMRegKeyA": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "lpszCMID", + "type": "LPSTR" + }, + { + "name": "lpszFileName", + "type": "LPSTR" + }, + { + "name": "command", + "type": "UINT" + } + ], + "UpdateICMRegKeyW": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "lpszCMID", + "type": "LPWSTR" + }, + { + "name": "lpszFileName", + "type": "LPWSTR" + }, + { + "name": "command", + "type": "UINT" + } + ], + "ColorCorrectPalette": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "deFirst", + "type": "DWORD" + }, + { + "name": "num", + "type": "DWORD" + } + ], + "wglCopyContext": [ + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "UINT" + } + ], + "wglCreateContext": [ + { + "name": "VOID", + "type": "HDC" + } + ], + "wglCreateLayerContext": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + } + ], + "wglDeleteContext": [ + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglGetCurrentContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "wglGetCurrentDC": [ + { + "name": "VOID", + "type": "void" + } + ], + "wglGetProcAddress": [ + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "wglMakeCurrent": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglShareLists": [ + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglUseFontBitmapsA": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "wglUseFontBitmapsW": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "SwapBuffers": [ + { + "name": "VOID", + "type": "HDC" + } + ], + "wglUseFontOutlinesA": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "LPGLYPHMETRICSFLOAT" + } + ], + "wglUseFontOutlinesW": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "LPGLYPHMETRICSFLOAT" + } + ], + "wglDescribeLayerPlane": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "LPLAYERPLANEDESCRIPTOR" + } + ], + "wglSetLayerPaletteEntries": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "COLORREF" + } + ], + "wglGetLayerPaletteEntries": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "COLORREF" + } + ], + "wglRealizeLayerPalette": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "wglSwapLayerBuffers": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winhttp.json b/qiling/extensions/windows_sdk/winhttp.json new file mode 100644 index 000000000..1bf4c37cf --- /dev/null +++ b/qiling/extensions/windows_sdk/winhttp.json @@ -0,0 +1,598 @@ +{ + "WinHttpSetStatusCallback": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpfnInternetCallback", + "type": "WINHTTP_STATUS_CALLBACK" + }, + { + "name": "dwNotificationFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD_PTR" + } + ], + "WinHttpTimeFromSystemTime": [ + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "pwszTime", + "type": "LPWSTR" + } + ], + "WinHttpTimeToSystemTime": [ + { + "name": "pwszTime", + "type": "LPCWSTR" + }, + { + "name": "pst", + "type": "SYSTEMTIME" + } + ], + "WinHttpCrackUrl": [ + { + "name": "pwszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwUrlLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTS" + } + ], + "WinHttpCreateUrl": [ + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTS" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszUrl", + "type": "LPWSTR" + }, + { + "name": "pdwUrlLength", + "type": "LPDWORD" + } + ], + "WinHttpCheckPlatform": [ + { + "name": "VOID", + "type": "void" + } + ], + "WinHttpGetDefaultProxyConfiguration": [ + { + "name": "pProxyInfo", + "type": "WINHTTP_PROXY_INFO" + } + ], + "WinHttpSetDefaultProxyConfiguration": [ + { + "name": "pProxyInfo", + "type": "WINHTTP_PROXY_INFO" + } + ], + "WinHttpOpen": [ + { + "name": "pszAgentW", + "type": "LPCWSTR" + }, + { + "name": "dwAccessType", + "type": "DWORD" + }, + { + "name": "pszProxyW", + "type": "LPCWSTR" + }, + { + "name": "pszProxyBypassW", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WinHttpCloseHandle": [ + { + "name": "hInternet", + "type": "HINTERNET" + } + ], + "WinHttpConnect": [ + { + "name": "hSession", + "type": "HINTERNET" + }, + { + "name": "pswzServerName", + "type": "LPCWSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "WinHttpReadData": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpdwNumberOfBytesRead", + "type": "LPDWORD" + } + ], + "WinHttpWriteData": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "dwNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpdwNumberOfBytesWritten", + "type": "LPDWORD" + } + ], + "WinHttpQueryDataAvailable": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpdwNumberOfBytesAvailable", + "type": "LPDWORD" + } + ], + "WinHttpQueryOption": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "WinHttpSetOption": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + } + ], + "WinHttpSetTimeouts": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "nResolveTimeout", + "type": "int" + }, + { + "name": "nConnectTimeout", + "type": "int" + }, + { + "name": "nSendTimeout", + "type": "int" + }, + { + "name": "nReceiveTimeout", + "type": "int" + } + ], + "WinHttpOpenRequest": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "pwszVerb", + "type": "LPCWSTR" + }, + { + "name": "pwszObjectName", + "type": "LPCWSTR" + }, + { + "name": "pwszVersion", + "type": "LPCWSTR" + }, + { + "name": "pwszReferrer", + "type": "LPCWSTR" + }, + { + "name": "ppwszAcceptTypes", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WinHttpAddRequestHeaders": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwModifiers", + "type": "DWORD" + } + ], + "WinHttpSendRequest": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "lpOptional", + "type": "LPVOID" + }, + { + "name": "dwOptionalLength", + "type": "DWORD" + }, + { + "name": "dwTotalLength", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "WinHttpSetCredentials": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "AuthTargets", + "type": "DWORD" + }, + { + "name": "AuthScheme", + "type": "DWORD" + }, + { + "name": "pwszUserName", + "type": "LPCWSTR" + }, + { + "name": "pwszPassword", + "type": "LPCWSTR" + }, + { + "name": "pAuthParams", + "type": "LPVOID" + } + ], + "WinHttpQueryAuthSchemes": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpdwSupportedSchemes", + "type": "LPDWORD" + }, + { + "name": "lpdwFirstScheme", + "type": "LPDWORD" + }, + { + "name": "pdwAuthTarget", + "type": "LPDWORD" + } + ], + "WinHttpReceiveResponse": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "WinHttpQueryHeaders": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "pwszName", + "type": "LPCWSTR" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpdwIndex", + "type": "LPDWORD" + } + ], + "WinHttpDetectAutoProxyConfigUrl": [ + { + "name": "dwAutoDetectFlags", + "type": "DWORD" + }, + { + "name": "ppwstrAutoConfigUrl", + "type": "LPWSTR" + } + ], + "WinHttpGetProxyForUrl": [ + { + "name": "hSession", + "type": "HINTERNET" + }, + { + "name": "lpcwszUrl", + "type": "LPCWSTR" + }, + { + "name": "pAutoProxyOptions", + "type": "WINHTTP_AUTOPROXY_OPTIONS" + }, + { + "name": "pProxyInfo", + "type": "WINHTTP_PROXY_INFO" + } + ], + "WinHttpCreateProxyResolver": [ + { + "name": "hSession", + "type": "HINTERNET" + }, + { + "name": "phResolver", + "type": "HINTERNET" + } + ], + "WinHttpGetProxyForUrlEx": [ + { + "name": "hResolver", + "type": "HINTERNET" + }, + { + "name": "pcwszUrl", + "type": "PCWSTR" + }, + { + "name": "pAutoProxyOptions", + "type": "WINHTTP_AUTOPROXY_OPTIONS" + }, + { + "name": "pContext", + "type": "DWORD_PTR" + } + ], + "WinHttpGetProxyResult": [ + { + "name": "hResolver", + "type": "HINTERNET" + }, + { + "name": "pProxyResult", + "type": "WINHTTP_PROXY_RESULT" + } + ], + "WinHttpFreeProxyResult": [ + { + "name": "pProxyResult", + "type": "WINHTTP_PROXY_RESULT" + } + ], + "WinHttpResetAutoProxy": [ + { + "name": "hSession", + "type": "HINTERNET" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WinHttpGetIEProxyConfigForCurrentUser": [ + { + "name": "pProxyConfig", + "type": "WINHTTP_CURRENT_USER_IE_PROXY_CONFIG" + } + ], + "WinHttpWebSocketCompleteUpgrade": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "pContext", + "type": "DWORD_PTR" + } + ], + "WinHttpWebSocketSend": [ + { + "name": "hWebSocket", + "type": "HINTERNET" + }, + { + "name": "eBufferType", + "type": "WINHTTP_WEB_SOCKET_BUFFER_TYPE" + }, + { + "name": "pvBuffer", + "type": "PVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + } + ], + "WinHttpWebSocketReceive": [ + { + "name": "hWebSocket", + "type": "HINTERNET" + }, + { + "name": "pvBuffer", + "type": "PVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "pdwBytesRead", + "type": "DWORD" + }, + { + "name": "peBufferType", + "type": "WINHTTP_WEB_SOCKET_BUFFER_TYPE" + } + ], + "WinHttpWebSocketShutdown": [ + { + "name": "hWebSocket", + "type": "HINTERNET" + }, + { + "name": "usStatus", + "type": "USHORT" + }, + { + "name": "pvReason", + "type": "PVOID" + }, + { + "name": "dwReasonLength", + "type": "DWORD" + } + ], + "WinHttpWebSocketClose": [ + { + "name": "hWebSocket", + "type": "HINTERNET" + }, + { + "name": "usStatus", + "type": "USHORT" + }, + { + "name": "pvReason", + "type": "PVOID" + }, + { + "name": "dwReasonLength", + "type": "DWORD" + } + ], + "WinHttpWebSocketQueryCloseStatus": [ + { + "name": "hWebSocket", + "type": "HINTERNET" + }, + { + "name": "pusStatus", + "type": "USHORT" + }, + { + "name": "pvReason", + "type": "PVOID" + }, + { + "name": "dwReasonLength", + "type": "DWORD" + }, + { + "name": "pdwReasonLengthConsumed", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wininet.json b/qiling/extensions/windows_sdk/wininet.json new file mode 100644 index 000000000..4dfb75562 --- /dev/null +++ b/qiling/extensions/windows_sdk/wininet.json @@ -0,0 +1,3146 @@ +{ + "InternetTimeFromSystemTimeA": [ + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwRFC", + "type": "DWORD" + }, + { + "name": "lpszTime", + "type": "LPSTR" + }, + { + "name": "cbTime", + "type": "DWORD" + } + ], + "InternetTimeFromSystemTimeW": [ + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwRFC", + "type": "DWORD" + }, + { + "name": "lpszTime", + "type": "LPWSTR" + }, + { + "name": "cbTime", + "type": "DWORD" + } + ], + "InternetTimeFromSystemTime": [ + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwRFC", + "type": "DWORD" + }, + { + "name": "lpszTime", + "type": "LPSTR" + }, + { + "name": "cbTime", + "type": "DWORD" + } + ], + "InternetTimeToSystemTimeA": [ + { + "name": "lpszTime", + "type": "LPCSTR" + }, + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetTimeToSystemTimeW": [ + { + "name": "lpszTime", + "type": "LPCWSTR" + }, + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetTimeToSystemTime": [ + { + "name": "lpszTime", + "type": "LPCSTR" + }, + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetCrackUrlA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "dwUrlLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTSA" + } + ], + "InternetCrackUrlW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwUrlLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTSW" + } + ], + "InternetCreateUrlA": [ + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpszUrl", + "type": "LPSTR" + }, + { + "name": "lpdwUrlLength", + "type": "LPDWORD" + } + ], + "InternetCreateUrlW": [ + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpszUrl", + "type": "LPWSTR" + }, + { + "name": "lpdwUrlLength", + "type": "LPDWORD" + } + ], + "InternetCanonicalizeUrlA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszBuffer", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetCanonicalizeUrlW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszBuffer", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetCombineUrlA": [ + { + "name": "lpszBaseUrl", + "type": "LPCSTR" + }, + { + "name": "lpszRelativeUrl", + "type": "LPCSTR" + }, + { + "name": "lpszBuffer", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetCombineUrlW": [ + { + "name": "lpszBaseUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszRelativeUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszBuffer", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetOpenA": [ + { + "name": "lpszAgent", + "type": "LPCSTR" + }, + { + "name": "dwAccessType", + "type": "DWORD" + }, + { + "name": "lpszProxy", + "type": "LPCSTR" + }, + { + "name": "lpszProxyBypass", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetOpenW": [ + { + "name": "lpszAgent", + "type": "LPCWSTR" + }, + { + "name": "dwAccessType", + "type": "DWORD" + }, + { + "name": "lpszProxy", + "type": "LPCWSTR" + }, + { + "name": "lpszProxyBypass", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetCloseHandle": [ + { + "name": "hInternet", + "type": "HINTERNET" + } + ], + "InternetConnectA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpszServerName", + "type": "LPCSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "lpszUserName", + "type": "LPCSTR" + }, + { + "name": "lpszPassword", + "type": "LPCSTR" + }, + { + "name": "dwService", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetConnectW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpszServerName", + "type": "LPCWSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "lpszUserName", + "type": "LPCWSTR" + }, + { + "name": "lpszPassword", + "type": "LPCWSTR" + }, + { + "name": "dwService", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetOpenUrlA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszHeaders", + "type": "LPCSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetOpenUrlW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetReadFile": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpdwNumberOfBytesRead", + "type": "LPDWORD" + } + ], + "InternetReadFileExA": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetReadFileExW": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetSetFilePointer": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lDistanceToMove", + "type": "LONG" + }, + { + "name": "lpDistanceToMoveHigh", + "type": "PLONG" + }, + { + "name": "dwMoveMethod", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetWriteFile": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "dwNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpdwNumberOfBytesWritten", + "type": "LPDWORD" + } + ], + "InternetQueryDataAvailable": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpdwNumberOfBytesAvailable", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetFindNextFileA": [ + { + "name": "hFind", + "type": "HINTERNET" + }, + { + "name": "lpvFindData", + "type": "LPVOID" + } + ], + "InternetFindNextFileW": [ + { + "name": "hFind", + "type": "HINTERNET" + }, + { + "name": "lpvFindData", + "type": "LPVOID" + } + ], + "InternetQueryOptionA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "InternetQueryOptionW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "InternetSetOptionA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + } + ], + "InternetSetOptionW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + } + ], + "InternetSetOptionExA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetSetOptionExW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetLockRequestFile": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lphLockRequestInfo", + "type": "HANDLE" + } + ], + "InternetUnlockRequestFile": [ + { + "name": "hLockRequestInfo", + "type": "HANDLE" + } + ], + "InternetGetLastResponseInfoA": [ + { + "name": "lpdwError", + "type": "LPDWORD" + }, + { + "name": "lpszBuffer", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "InternetGetLastResponseInfoW": [ + { + "name": "lpdwError", + "type": "LPDWORD" + }, + { + "name": "lpszBuffer", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "InternetSetStatusCallbackA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpfnInternetCallback", + "type": "INTERNET_STATUS_CALLBACK" + } + ], + "InternetSetStatusCallbackW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpfnInternetCallback", + "type": "INTERNET_STATUS_CALLBACK" + } + ], + "InternetSetStatusCallback": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpfnInternetCallback", + "type": "INTERNET_STATUS_CALLBACK" + } + ], + "FtpFindFirstFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszSearchFile", + "type": "LPCSTR" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpFindFirstFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszSearchFile", + "type": "LPCWSTR" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpGetFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszRemoteFile", + "type": "LPCSTR" + }, + { + "name": "lpszNewFile", + "type": "LPCSTR" + }, + { + "name": "fFailIfExists", + "type": "BOOL" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpGetFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszRemoteFile", + "type": "LPCWSTR" + }, + { + "name": "lpszNewFile", + "type": "LPCWSTR" + }, + { + "name": "fFailIfExists", + "type": "BOOL" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpPutFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocalFile", + "type": "LPCSTR" + }, + { + "name": "lpszNewRemoteFile", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpPutFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocalFile", + "type": "LPCWSTR" + }, + { + "name": "lpszNewRemoteFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpDeleteFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszFileName", + "type": "LPCSTR" + } + ], + "FtpDeleteFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszFileName", + "type": "LPCWSTR" + } + ], + "FtpRenameFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszExisting", + "type": "LPCSTR" + }, + { + "name": "lpszNew", + "type": "LPCSTR" + } + ], + "FtpRenameFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszExisting", + "type": "LPCWSTR" + }, + { + "name": "lpszNew", + "type": "LPCWSTR" + } + ], + "FtpOpenFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszFileName", + "type": "LPCSTR" + }, + { + "name": "dwAccess", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpOpenFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszFileName", + "type": "LPCWSTR" + }, + { + "name": "dwAccess", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpCreateDirectoryA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCSTR" + } + ], + "FtpCreateDirectoryW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCWSTR" + } + ], + "FtpRemoveDirectoryA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCSTR" + } + ], + "FtpRemoveDirectoryW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCWSTR" + } + ], + "FtpSetCurrentDirectoryA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCSTR" + } + ], + "FtpSetCurrentDirectoryW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCWSTR" + } + ], + "FtpGetCurrentDirectoryA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszCurrentDirectory", + "type": "LPSTR" + }, + { + "name": "lpdwCurrentDirectory", + "type": "LPDWORD" + } + ], + "FtpGetCurrentDirectoryW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszCurrentDirectory", + "type": "LPWSTR" + }, + { + "name": "lpdwCurrentDirectory", + "type": "LPDWORD" + } + ], + "FtpCommandA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "fExpectResponse", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpszCommand", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + }, + { + "name": "phFtpCommand", + "type": "HINTERNET" + } + ], + "FtpCommandW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "fExpectResponse", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpszCommand", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + }, + { + "name": "phFtpCommand", + "type": "HINTERNET" + } + ], + "FtpGetFileSize": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpdwFileSizeHigh", + "type": "LPDWORD" + } + ], + "GopherCreateLocatorA": [ + { + "name": "lpszHost", + "type": "LPCSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "lpszDisplayString", + "type": "LPCSTR" + }, + { + "name": "lpszSelectorString", + "type": "LPCSTR" + }, + { + "name": "dwGopherType", + "type": "DWORD" + }, + { + "name": "lpszLocator", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "GopherCreateLocatorW": [ + { + "name": "lpszHost", + "type": "LPCWSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "lpszDisplayString", + "type": "LPCWSTR" + }, + { + "name": "lpszSelectorString", + "type": "LPCWSTR" + }, + { + "name": "dwGopherType", + "type": "DWORD" + }, + { + "name": "lpszLocator", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "GopherGetLocatorTypeA": [ + { + "name": "lpszLocator", + "type": "LPCSTR" + }, + { + "name": "lpdwGopherType", + "type": "LPDWORD" + } + ], + "GopherGetLocatorTypeW": [ + { + "name": "lpszLocator", + "type": "LPCWSTR" + }, + { + "name": "lpdwGopherType", + "type": "LPDWORD" + } + ], + "GopherFindFirstFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCSTR" + }, + { + "name": "lpszSearchString", + "type": "LPCSTR" + }, + { + "name": "lpFindData", + "type": "LPGOPHER_FIND_DATAA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherFindFirstFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCWSTR" + }, + { + "name": "lpszSearchString", + "type": "LPCWSTR" + }, + { + "name": "lpFindData", + "type": "LPGOPHER_FIND_DATAW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherOpenFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCSTR" + }, + { + "name": "lpszView", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherOpenFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCWSTR" + }, + { + "name": "lpszView", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherGetAttributeA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCSTR" + }, + { + "name": "lpszAttributeName", + "type": "LPCSTR" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "lpdwCharactersReturned", + "type": "LPDWORD" + }, + { + "name": "lpfnEnumerator", + "type": "GOPHER_ATTRIBUTE_ENUMERATOR" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherGetAttributeW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCWSTR" + }, + { + "name": "lpszAttributeName", + "type": "LPCWSTR" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "lpdwCharactersReturned", + "type": "LPDWORD" + }, + { + "name": "lpfnEnumerator", + "type": "GOPHER_ATTRIBUTE_ENUMERATOR" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpOpenRequestA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszVerb", + "type": "LPCSTR" + }, + { + "name": "lpszObjectName", + "type": "LPCSTR" + }, + { + "name": "lpszVersion", + "type": "LPCSTR" + }, + { + "name": "lpszReferrer", + "type": "LPCSTR" + }, + { + "name": "lplpszAcceptTypes", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpOpenRequestW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszVerb", + "type": "LPCWSTR" + }, + { + "name": "lpszObjectName", + "type": "LPCWSTR" + }, + { + "name": "lpszVersion", + "type": "LPCWSTR" + }, + { + "name": "lpszReferrer", + "type": "LPCWSTR" + }, + { + "name": "lplpszAcceptTypes", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpAddRequestHeadersA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwModifiers", + "type": "DWORD" + } + ], + "HttpAddRequestHeadersW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwModifiers", + "type": "DWORD" + } + ], + "HttpSendRequestA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "lpOptional", + "type": "LPVOID" + }, + { + "name": "dwOptionalLength", + "type": "DWORD" + } + ], + "HttpSendRequestW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "lpOptional", + "type": "LPVOID" + }, + { + "name": "dwOptionalLength", + "type": "DWORD" + } + ], + "HttpSendRequestExA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffersIn", + "type": "LPINTERNET_BUFFERSA" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpSendRequestExW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffersIn", + "type": "LPINTERNET_BUFFERSW" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpEndRequestA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpEndRequestW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpQueryInfoA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpdwIndex", + "type": "LPDWORD" + } + ], + "HttpQueryInfoW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpdwIndex", + "type": "LPDWORD" + } + ], + "InternetSetCookieA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCSTR" + }, + { + "name": "lpszCookieData", + "type": "LPCSTR" + } + ], + "InternetSetCookieW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieData", + "type": "LPCWSTR" + } + ], + "InternetGetCookieA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCSTR" + }, + { + "name": "lpszCookieData", + "type": "LPSTR" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "InternetGetCookieW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieData", + "type": "LPWSTR" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "InternetSetCookieExA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCSTR" + }, + { + "name": "lpszCookieData", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD_PTR" + } + ], + "InternetSetCookieExW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieData", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD_PTR" + } + ], + "InternetGetCookieExA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCSTR" + }, + { + "name": "lpszCookieData", + "type": "LPSTR" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "InternetGetCookieExW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieData", + "type": "LPWSTR" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "InternetAttemptConnect": [ + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetCheckConnectionA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetCheckConnectionW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "ResumeSuspendedDownload": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwResultCode", + "type": "DWORD" + } + ], + "InternetErrorDlg": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwError", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lppvData", + "type": "LPVOID" + } + ], + "InternetConfirmZoneCrossingA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szUrlPrev", + "type": "LPSTR" + }, + { + "name": "szUrlNew", + "type": "LPSTR" + }, + { + "name": "bPost", + "type": "BOOL" + } + ], + "InternetConfirmZoneCrossingW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szUrlPrev", + "type": "LPWSTR" + }, + { + "name": "szUrlNew", + "type": "LPWSTR" + }, + { + "name": "bPost", + "type": "BOOL" + } + ], + "InternetConfirmZoneCrossing": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szUrlPrev", + "type": "LPSTR" + }, + { + "name": "szUrlNew", + "type": "LPSTR" + }, + { + "name": "bPost", + "type": "BOOL" + } + ], + "CreateUrlCacheEntryA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwExpectedFileSize", + "type": "DWORD" + }, + { + "name": "lpszFileExtension", + "type": "LPCSTR" + }, + { + "name": "lpszFileName", + "type": "LPSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "CreateUrlCacheEntryW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "dwExpectedFileSize", + "type": "DWORD" + }, + { + "name": "lpszFileExtension", + "type": "LPCWSTR" + }, + { + "name": "lpszFileName", + "type": "LPWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "CommitUrlCacheEntryA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpszLocalFileName", + "type": "LPCSTR" + }, + { + "name": "ExpireTime", + "type": "FILETIME" + }, + { + "name": "LastModifiedTime", + "type": "FILETIME" + }, + { + "name": "CacheEntryType", + "type": "DWORD" + }, + { + "name": "lpHeaderInfo", + "type": "LPBYTE" + }, + { + "name": "cchHeaderInfo", + "type": "DWORD" + }, + { + "name": "lpszFileExtension", + "type": "LPCSTR" + }, + { + "name": "lpszOriginalUrl", + "type": "LPCSTR" + } + ], + "CommitUrlCacheEntryW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpszLocalFileName", + "type": "LPCWSTR" + }, + { + "name": "ExpireTime", + "type": "FILETIME" + }, + { + "name": "LastModifiedTime", + "type": "FILETIME" + }, + { + "name": "CacheEntryType", + "type": "DWORD" + }, + { + "name": "lpszHeaderInfo", + "type": "LPWSTR" + }, + { + "name": "cchHeaderInfo", + "type": "DWORD" + }, + { + "name": "lpszFileExtension", + "type": "LPCWSTR" + }, + { + "name": "lpszOriginalUrl", + "type": "LPCWSTR" + } + ], + "RetrieveUrlCacheEntryFileA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "RetrieveUrlCacheEntryFileW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "UnlockUrlCacheEntryFileA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "UnlockUrlCacheEntryFileW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "UnlockUrlCacheEntryFile": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "RetrieveUrlCacheEntryStreamA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "fRandomRead", + "type": "BOOL" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "RetrieveUrlCacheEntryStreamW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "fRandomRead", + "type": "BOOL" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "ReadUrlCacheEntryStream": [ + { + "name": "hUrlCacheStream", + "type": "HANDLE" + }, + { + "name": "dwLocation", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwLen", + "type": "LPDWORD" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "UnlockUrlCacheEntryStream": [ + { + "name": "hUrlCacheStream", + "type": "HANDLE" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "GetUrlCacheEntryInfoA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "GetUrlCacheEntryInfoW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindFirstUrlCacheGroup": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "lpSearchCondition", + "type": "LPVOID" + }, + { + "name": "dwSearchCondition", + "type": "DWORD" + }, + { + "name": "lpGroupId", + "type": "GROUPID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindNextUrlCacheGroup": [ + { + "name": "hFind", + "type": "HANDLE" + }, + { + "name": "lpGroupId", + "type": "GROUPID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "GetUrlCacheGroupAttributeA": [ + { + "name": "gid", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpGroupInfo", + "type": "LPINTERNET_CACHE_GROUP_INFOA" + }, + { + "name": "lpcbGroupInfo", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "GetUrlCacheGroupAttributeW": [ + { + "name": "gid", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpGroupInfo", + "type": "LPINTERNET_CACHE_GROUP_INFOW" + }, + { + "name": "lpcbGroupInfo", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheGroupAttributeA": [ + { + "name": "gid", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpGroupInfo", + "type": "LPINTERNET_CACHE_GROUP_INFOA" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheGroupAttributeW": [ + { + "name": "gid", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpGroupInfo", + "type": "LPINTERNET_CACHE_GROUP_INFOW" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "GetUrlCacheEntryInfoExA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpszRedirectUrl", + "type": "LPSTR" + }, + { + "name": "lpcbRedirectUrl", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetUrlCacheEntryInfoExW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpszRedirectUrl", + "type": "LPWSTR" + }, + { + "name": "lpcbRedirectUrl", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SetUrlCacheEntryInfoA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "dwFieldControl", + "type": "DWORD" + } + ], + "SetUrlCacheEntryInfoW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "dwFieldControl", + "type": "DWORD" + } + ], + "CreateUrlCacheGroup": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "DeleteUrlCacheGroup": [ + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheEntryGroupA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "pbGroupAttributes", + "type": "LPBYTE" + }, + { + "name": "cbGroupAttributes", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheEntryGroupW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "pbGroupAttributes", + "type": "LPBYTE" + }, + { + "name": "cbGroupAttributes", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheEntryGroup": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "pbGroupAttributes", + "type": "LPBYTE" + }, + { + "name": "cbGroupAttributes", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindFirstUrlCacheEntryExA": [ + { + "name": "lpszUrlSearchPattern", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "lpFirstCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpGroupAttributes", + "type": "LPVOID" + }, + { + "name": "lpcbGroupAttributes", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindFirstUrlCacheEntryExW": [ + { + "name": "lpszUrlSearchPattern", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "lpFirstCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpGroupAttributes", + "type": "LPVOID" + }, + { + "name": "lpcbGroupAttributes", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindNextUrlCacheEntryExA": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + }, + { + "name": "lpNextCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpGroupAttributes", + "type": "LPVOID" + }, + { + "name": "lpcbGroupAttributes", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindNextUrlCacheEntryExW": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + }, + { + "name": "lpNextCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpGroupAttributes", + "type": "LPVOID" + }, + { + "name": "lpcbGroupAttributes", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindFirstUrlCacheEntryA": [ + { + "name": "lpszUrlSearchPattern", + "type": "LPCSTR" + }, + { + "name": "lpFirstCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindFirstUrlCacheEntryW": [ + { + "name": "lpszUrlSearchPattern", + "type": "LPCWSTR" + }, + { + "name": "lpFirstCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindNextUrlCacheEntryA": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + }, + { + "name": "lpNextCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindNextUrlCacheEntryW": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + }, + { + "name": "lpNextCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindCloseUrlCache": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + } + ], + "DeleteUrlCacheEntryA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + } + ], + "DeleteUrlCacheEntryW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + } + ], + "DeleteUrlCacheEntry": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + } + ], + "InternetDialA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszConnectoid", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpdwConnection", + "type": "DWORD_PTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetDialW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszConnectoid", + "type": "LPWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpdwConnection", + "type": "DWORD_PTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetDial": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszConnectoid", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpdwConnection", + "type": "LPDWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetHangUp": [ + { + "name": "dwConnection", + "type": "DWORD_PTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetGoOnlineA": [ + { + "name": "lpszURL", + "type": "LPCSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetGoOnlineW": [ + { + "name": "lpszURL", + "type": "LPCWSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetGoOnline": [ + { + "name": "lpszURL", + "type": "LPSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetAutodial": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwndParent", + "type": "HWND" + } + ], + "InternetAutodialHangup": [ + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetGetConnectedState": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetGetConnectedStateExA": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lpszConnectionName", + "type": "LPSTR" + }, + { + "name": "cchNameLen", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetGetConnectedStateExW": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lpszConnectionName", + "type": "LPWSTR" + }, + { + "name": "cchNameLen", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetInitializeAutoProxyDll": [ + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "DetectAutoProxyUrl": [ + { + "name": "pszAutoProxyUrl", + "type": "PSTR" + }, + { + "name": "cchAutoProxyUrl", + "type": "DWORD" + }, + { + "name": "dwDetectFlags", + "type": "DWORD" + } + ], + "CreateMD5SSOHash": [ + { + "name": "pszChallengeInfo", + "type": "PWSTR" + }, + { + "name": "pwszRealm", + "type": "PWSTR" + }, + { + "name": "pwszTarget", + "type": "PWSTR" + }, + { + "name": "pbHexHash", + "type": "PBYTE" + } + ], + "InternetGetConnectedStateEx": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lpszConnectionName", + "type": "LPSTR" + }, + { + "name": "dwNameLen", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetSetDialStateA": [ + { + "name": "lpszConnectoid", + "type": "LPCSTR" + }, + { + "name": "dwState", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetSetDialStateW": [ + { + "name": "lpszConnectoid", + "type": "LPCWSTR" + }, + { + "name": "dwState", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetSetDialState": [ + { + "name": "lpszConnectoid", + "type": "LPCSTR" + }, + { + "name": "dwState", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetSetPerSiteCookieDecisionA": [ + { + "name": "pchHostName", + "type": "LPCSTR" + }, + { + "name": "dwDecision", + "type": "DWORD" + } + ], + "InternetSetPerSiteCookieDecisionW": [ + { + "name": "pchHostName", + "type": "LPCWSTR" + }, + { + "name": "dwDecision", + "type": "DWORD" + } + ], + "InternetGetPerSiteCookieDecisionA": [ + { + "name": "pchHostName", + "type": "LPCSTR" + }, + { + "name": "pResult", + "type": "unsigned long" + } + ], + "InternetGetPerSiteCookieDecisionW": [ + { + "name": "pchHostName", + "type": "LPCWSTR" + }, + { + "name": "pResult", + "type": "unsigned long" + } + ], + "InternetEnumPerSiteCookieDecisionA": [ + { + "name": "pszSiteName", + "type": "LPSTR" + }, + { + "name": "pcSiteNameSize", + "type": "unsigned long" + }, + { + "name": "pdwDecision", + "type": "unsigned long" + }, + { + "name": "dwIndex", + "type": "unsigned long" + } + ], + "InternetEnumPerSiteCookieDecisionW": [ + { + "name": "pszSiteName", + "type": "LPWSTR" + }, + { + "name": "pcSiteNameSize", + "type": "unsigned long" + }, + { + "name": "pdwDecision", + "type": "unsigned long" + }, + { + "name": "dwIndex", + "type": "unsigned long" + } + ], + "PrivacySetZonePreferenceW": [ + { + "name": "dwZone", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwTemplate", + "type": "DWORD" + }, + { + "name": "pszPreference", + "type": "LPCWSTR" + } + ], + "PrivacyGetZonePreferenceW": [ + { + "name": "dwZone", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pdwTemplate", + "type": "LPDWORD" + }, + { + "name": "pszBuffer", + "type": "LPWSTR" + }, + { + "name": "pdwBufferLength", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winnetwk.json b/qiling/extensions/windows_sdk/winnetwk.json new file mode 100644 index 000000000..aedbf1124 --- /dev/null +++ b/qiling/extensions/windows_sdk/winnetwk.json @@ -0,0 +1,624 @@ +{ + "WNetAddConnectionA": [ + { + "name": "lpRemoteName", + "type": "LPCSTR" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpLocalName", + "type": "LPCSTR" + } + ], + "WNetAddConnectionW": [ + { + "name": "lpRemoteName", + "type": "LPCWSTR" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpLocalName", + "type": "LPCWSTR" + } + ], + "WNetAddConnection2A": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpUserName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WNetAddConnection2W": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpUserName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WNetAddConnection3A": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpUserName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WNetAddConnection3W": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpUserName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WNetCancelConnectionA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "WNetCancelConnectionW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "WNetCancelConnection2A": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "WNetCancelConnection2W": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "WNetGetConnectionA": [ + { + "name": "lpLocalName", + "type": "LPCSTR" + }, + { + "name": "lpRemoteName", + "type": "LPSTR" + }, + { + "name": "lpnLength", + "type": "LPDWORD" + } + ], + "WNetGetConnectionW": [ + { + "name": "lpLocalName", + "type": "LPCWSTR" + }, + { + "name": "lpRemoteName", + "type": "LPWSTR" + }, + { + "name": "lpnLength", + "type": "LPDWORD" + } + ], + "WNetUseConnectionA": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpUserId", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpAccessName", + "type": "LPSTR" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpResult", + "type": "LPDWORD" + } + ], + "WNetUseConnectionW": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpUserId", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpAccessName", + "type": "LPWSTR" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpResult", + "type": "LPDWORD" + } + ], + "WNetConnectionDialog": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "WNetDisconnectDialog": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "WNetConnectionDialog1A": [ + { + "name": "lpConnDlgStruct", + "type": "LPCONNECTDLGSTRUCTA" + } + ], + "WNetConnectionDialog1W": [ + { + "name": "lpConnDlgStruct", + "type": "LPCONNECTDLGSTRUCTW" + } + ], + "WNetDisconnectDialog1A": [ + { + "name": "lpConnDlgStruct", + "type": "LPDISCDLGSTRUCTA" + } + ], + "WNetDisconnectDialog1W": [ + { + "name": "lpConnDlgStruct", + "type": "LPDISCDLGSTRUCTW" + } + ], + "WNetOpenEnumA": [ + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwUsage", + "type": "DWORD" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lphEnum", + "type": "LPHANDLE" + } + ], + "WNetOpenEnumW": [ + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwUsage", + "type": "DWORD" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lphEnum", + "type": "LPHANDLE" + } + ], + "WNetEnumResourceA": [ + { + "name": "hEnum", + "type": "HANDLE" + }, + { + "name": "lpcCount", + "type": "LPDWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetEnumResourceW": [ + { + "name": "hEnum", + "type": "HANDLE" + }, + { + "name": "lpcCount", + "type": "LPDWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetCloseEnum": [ + { + "name": "hEnum", + "type": "HANDLE" + } + ], + "WNetGetResourceParentA": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpcbBuffer", + "type": "LPDWORD" + } + ], + "WNetGetResourceParentW": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpcbBuffer", + "type": "LPDWORD" + } + ], + "WNetGetResourceInformationA": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpcbBuffer", + "type": "LPDWORD" + }, + { + "name": "lplpSystem", + "type": "LPSTR" + } + ], + "WNetGetResourceInformationW": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpcbBuffer", + "type": "LPDWORD" + }, + { + "name": "lplpSystem", + "type": "LPWSTR" + } + ], + "WNetGetUniversalNameA": [ + { + "name": "lpLocalPath", + "type": "LPCSTR" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetGetUniversalNameW": [ + { + "name": "lpLocalPath", + "type": "LPCWSTR" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetGetUserA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpUserName", + "type": "LPSTR" + }, + { + "name": "lpnLength", + "type": "LPDWORD" + } + ], + "WNetGetUserW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpUserName", + "type": "LPWSTR" + }, + { + "name": "lpnLength", + "type": "LPDWORD" + } + ], + "WNetGetProviderNameA": [ + { + "name": "dwNetType", + "type": "DWORD" + }, + { + "name": "lpProviderName", + "type": "LPSTR" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetGetProviderNameW": [ + { + "name": "dwNetType", + "type": "DWORD" + }, + { + "name": "lpProviderName", + "type": "LPWSTR" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetGetNetworkInformationA": [ + { + "name": "lpProvider", + "type": "LPCSTR" + }, + { + "name": "lpNetInfoStruct", + "type": "LPNETINFOSTRUCT" + } + ], + "WNetGetNetworkInformationW": [ + { + "name": "lpProvider", + "type": "LPCWSTR" + }, + { + "name": "lpNetInfoStruct", + "type": "LPNETINFOSTRUCT" + } + ], + "WNetGetLastErrorA": [ + { + "name": "lpError", + "type": "LPDWORD" + }, + { + "name": "lpErrorBuf", + "type": "LPSTR" + }, + { + "name": "nErrorBufSize", + "type": "DWORD" + }, + { + "name": "lpNameBuf", + "type": "LPSTR" + }, + { + "name": "nNameBufSize", + "type": "DWORD" + } + ], + "WNetGetLastErrorW": [ + { + "name": "lpError", + "type": "LPDWORD" + }, + { + "name": "lpErrorBuf", + "type": "LPWSTR" + }, + { + "name": "nErrorBufSize", + "type": "DWORD" + }, + { + "name": "lpNameBuf", + "type": "LPWSTR" + }, + { + "name": "nNameBufSize", + "type": "DWORD" + } + ], + "MultinetGetConnectionPerformanceA": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpNetConnectInfoStruct", + "type": "LPNETCONNECTINFOSTRUCT" + } + ], + "MultinetGetConnectionPerformanceW": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpNetConnectInfoStruct", + "type": "LPNETCONNECTINFOSTRUCT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winnls.json b/qiling/extensions/windows_sdk/winnls.json new file mode 100644 index 000000000..8492e842f --- /dev/null +++ b/qiling/extensions/windows_sdk/winnls.json @@ -0,0 +1,1842 @@ +{ + "GetDurationFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDuration", + "type": "SYSTEMTIME" + }, + { + "name": "ullDuration", + "type": "ULONGLONG" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpDurationStr", + "type": "LPWSTR" + }, + { + "name": "cchDuration", + "type": "int" + } + ], + "CompareStringW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwCmpFlags", + "type": "DWORD" + }, + { + "name": "lpString1", + "type": "PCNZWCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "PCNZWCH" + }, + { + "name": "cchCount2", + "type": "int" + } + ], + "FoldStringW": [ + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWCH" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPWSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "IsValidCodePage": [ + { + "name": "CodePage", + "type": "UINT" + } + ], + "GetACP": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetOEMCP": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCPInfo": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "lpCPInfo", + "type": "LPCPINFO" + } + ], + "GetCPInfoExA": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpCPInfoEx", + "type": "LPCPINFOEXA" + } + ], + "GetCPInfoExW": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpCPInfoEx", + "type": "LPCPINFOEXW" + } + ], + "CompareStringA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwCmpFlags", + "type": "DWORD" + }, + { + "name": "lpString1", + "type": "PCNZCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "PCNZCH" + }, + { + "name": "cchCount2", + "type": "int" + } + ], + "FindNLSString": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFindNLSStringFlags", + "type": "DWORD" + }, + { + "name": "lpStringSource", + "type": "LPCWSTR" + }, + { + "name": "cchSource", + "type": "int" + }, + { + "name": "lpStringValue", + "type": "LPCWSTR" + }, + { + "name": "cchValue", + "type": "int" + }, + { + "name": "pcchFound", + "type": "LPINT" + } + ], + "LCMapStringW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPWSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "LCMapStringA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "GetLocaleInfoW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + } + ], + "GetLocaleInfoA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPSTR" + }, + { + "name": "cchData", + "type": "int" + } + ], + "SetLocaleInfoA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPCSTR" + } + ], + "SetLocaleInfoW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPCWSTR" + } + ], + "GetCalendarInfoA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "lpValue", + "type": "LPDWORD" + } + ], + "GetCalendarInfoW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "lpValue", + "type": "LPDWORD" + } + ], + "SetCalendarInfoA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPCSTR" + } + ], + "SetCalendarInfoW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPCWSTR" + } + ], + "LoadStringByReference": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Language", + "type": "PCWSTR" + }, + { + "name": "SourceString", + "type": "PCWSTR" + }, + { + "name": "Buffer", + "type": "PWSTR" + }, + { + "name": "cchBuffer", + "type": "ULONG" + }, + { + "name": "Directory", + "type": "PCWSTR" + }, + { + "name": "pcchBufferOut", + "type": "PULONG" + } + ], + "IsDBCSLeadByte": [ + { + "name": "TestChar", + "type": "BYTE" + } + ], + "IsDBCSLeadByteEx": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "TestChar", + "type": "BYTE" + } + ], + "LocaleNameToLCID": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "LCIDToLocaleName": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "int" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetDurationFormat": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDuration", + "type": "SYSTEMTIME" + }, + { + "name": "ullDuration", + "type": "ULONGLONG" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpDurationStr", + "type": "LPWSTR" + }, + { + "name": "cchDuration", + "type": "int" + } + ], + "GetNumberFormatA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCSTR" + }, + { + "name": "lpFormat", + "type": "NUMBERFMTA" + }, + { + "name": "lpNumberStr", + "type": "LPSTR" + }, + { + "name": "cchNumber", + "type": "int" + } + ], + "GetNumberFormatW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "lpFormat", + "type": "NUMBERFMTW" + }, + { + "name": "lpNumberStr", + "type": "LPWSTR" + }, + { + "name": "cchNumber", + "type": "int" + } + ], + "GetCurrencyFormatA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCSTR" + }, + { + "name": "lpFormat", + "type": "CURRENCYFMTA" + }, + { + "name": "lpCurrencyStr", + "type": "LPSTR" + }, + { + "name": "cchCurrency", + "type": "int" + } + ], + "GetCurrencyFormatW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "lpFormat", + "type": "CURRENCYFMTW" + }, + { + "name": "lpCurrencyStr", + "type": "LPWSTR" + }, + { + "name": "cchCurrency", + "type": "int" + } + ], + "EnumCalendarInfoA": [ + { + "name": "lpCalInfoEnumProc", + "type": "CALINFO_ENUMPROCA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + } + ], + "EnumCalendarInfoW": [ + { + "name": "lpCalInfoEnumProc", + "type": "CALINFO_ENUMPROCW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + } + ], + "EnumCalendarInfoExA": [ + { + "name": "lpCalInfoEnumProcEx", + "type": "CALINFO_ENUMPROCEXA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + } + ], + "EnumCalendarInfoExW": [ + { + "name": "lpCalInfoEnumProcEx", + "type": "CALINFO_ENUMPROCEXW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + } + ], + "EnumTimeFormatsA": [ + { + "name": "lpTimeFmtEnumProc", + "type": "TIMEFMT_ENUMPROCA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumTimeFormatsW": [ + { + "name": "lpTimeFmtEnumProc", + "type": "TIMEFMT_ENUMPROCW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDateFormatsA": [ + { + "name": "lpDateFmtEnumProc", + "type": "DATEFMT_ENUMPROCA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDateFormatsW": [ + { + "name": "lpDateFmtEnumProc", + "type": "DATEFMT_ENUMPROCW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDateFormatsExA": [ + { + "name": "lpDateFmtEnumProcEx", + "type": "DATEFMT_ENUMPROCEXA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDateFormatsExW": [ + { + "name": "lpDateFmtEnumProcEx", + "type": "DATEFMT_ENUMPROCEXW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "IsValidLanguageGroup": [ + { + "name": "LanguageGroup", + "type": "LGRPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetNLSVersion": [ + { + "name": "Function", + "type": "NLS_FUNCTION" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + } + ], + "IsValidLocale": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetGeoInfoA": [ + { + "name": "Location", + "type": "GEOID" + }, + { + "name": "GeoType", + "type": "GEOTYPE" + }, + { + "name": "lpGeoData", + "type": "LPSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "GetGeoInfoW": [ + { + "name": "Location", + "type": "GEOID" + }, + { + "name": "GeoType", + "type": "GEOTYPE" + }, + { + "name": "lpGeoData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "GetGeoInfoEx": [ + { + "name": "location", + "type": "PWSTR" + }, + { + "name": "geoType", + "type": "GEOTYPE" + }, + { + "name": "geoData", + "type": "PWSTR" + }, + { + "name": "geoDataCount", + "type": "int" + } + ], + "EnumSystemGeoID": [ + { + "name": "GeoClass", + "type": "GEOCLASS" + }, + { + "name": "ParentGeoId", + "type": "GEOID" + }, + { + "name": "lpGeoEnumProc", + "type": "GEO_ENUMPROC" + } + ], + "EnumSystemGeoNames": [ + { + "name": "geoClass", + "type": "GEOCLASS" + }, + { + "name": "geoEnumProc", + "type": "GEO_ENUMNAMEPROC" + }, + { + "name": "data", + "type": "LPARAM" + } + ], + "GetUserGeoID": [ + { + "name": "GeoClass", + "type": "GEOCLASS" + } + ], + "GetUserDefaultGeoName": [ + { + "name": "geoName", + "type": "LPWSTR" + }, + { + "name": "geoNameCount", + "type": "int" + } + ], + "SetUserGeoID": [ + { + "name": "GeoId", + "type": "GEOID" + } + ], + "SetUserGeoName": [ + { + "name": "geoName", + "type": "PWSTR" + } + ], + "ConvertDefaultLocale": [ + { + "name": "Locale", + "type": "LCID" + } + ], + "GetSystemDefaultUILanguage": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetThreadLocale": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadLocale": [ + { + "name": "Locale", + "type": "LCID" + } + ], + "GetUserDefaultUILanguage": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetUserDefaultLangID": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemDefaultLangID": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemDefaultLCID": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetUserDefaultLCID": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadUILanguage": [ + { + "name": "LangId", + "type": "LANGID" + } + ], + "GetThreadUILanguage": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetProcessPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PZZWSTR" + }, + { + "name": "pcchLanguagesBuffer", + "type": "PULONG" + } + ], + "SetProcessPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PCZZWSTR" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + } + ], + "GetUserPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PZZWSTR" + }, + { + "name": "pcchLanguagesBuffer", + "type": "PULONG" + } + ], + "GetSystemPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PZZWSTR" + }, + { + "name": "pcchLanguagesBuffer", + "type": "PULONG" + } + ], + "GetThreadPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PZZWSTR" + }, + { + "name": "pcchLanguagesBuffer", + "type": "PULONG" + } + ], + "SetThreadPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PCZZWSTR" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + } + ], + "GetFileMUIInfo": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pcwszFilePath", + "type": "PCWSTR" + }, + { + "name": "pFileMUIInfo", + "type": "PFILEMUIINFO" + }, + { + "name": "pcbFileMUIInfo", + "type": "DWORD" + } + ], + "GetFileMUIPath": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pcwszFilePath", + "type": "PCWSTR" + }, + { + "name": "pwszLanguage", + "type": "PWSTR" + }, + { + "name": "pcchLanguage", + "type": "PULONG" + }, + { + "name": "pwszFileMUIPath", + "type": "PWSTR" + }, + { + "name": "pcchFileMUIPath", + "type": "PULONG" + }, + { + "name": "pululEnumerator", + "type": "PULONGLONG" + } + ], + "GetUILanguageInfo": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwmszLanguage", + "type": "PCZZWSTR" + }, + { + "name": "pwszFallbackLanguages", + "type": "PZZWSTR" + }, + { + "name": "pcchFallbackLanguages", + "type": "PDWORD" + }, + { + "name": "pAttributes", + "type": "PDWORD" + } + ], + "NotifyUILanguageChange": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pcwstrNewLanguage", + "type": "PCWSTR" + }, + { + "name": "pcwstrPreviousLanguage", + "type": "PCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pdwStatusRtrn", + "type": "PDWORD" + } + ], + "GetStringTypeA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpCharType", + "type": "LPWORD" + } + ], + "FoldStringA": [ + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "EnumSystemLocalesA": [ + { + "name": "lpLocaleEnumProc", + "type": "LOCALE_ENUMPROCA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumSystemLocalesW": [ + { + "name": "lpLocaleEnumProc", + "type": "LOCALE_ENUMPROCW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumSystemLanguageGroupsA": [ + { + "name": "lpLanguageGroupEnumProc", + "type": "LANGUAGEGROUP_ENUMPROCA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumSystemLanguageGroupsW": [ + { + "name": "lpLanguageGroupEnumProc", + "type": "LANGUAGEGROUP_ENUMPROCW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumLanguageGroupLocalesA": [ + { + "name": "lpLangGroupLocaleEnumProc", + "type": "LANGGROUPLOCALE_ENUMPROCA" + }, + { + "name": "LanguageGroup", + "type": "LGRPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumLanguageGroupLocalesW": [ + { + "name": "lpLangGroupLocaleEnumProc", + "type": "LANGGROUPLOCALE_ENUMPROCW" + }, + { + "name": "LanguageGroup", + "type": "LGRPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumUILanguagesA": [ + { + "name": "lpUILanguageEnumProc", + "type": "UILANGUAGE_ENUMPROCA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumUILanguagesW": [ + { + "name": "lpUILanguageEnumProc", + "type": "UILANGUAGE_ENUMPROCW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumSystemCodePagesA": [ + { + "name": "lpCodePageEnumProc", + "type": "CODEPAGE_ENUMPROCA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumSystemCodePagesW": [ + { + "name": "lpCodePageEnumProc", + "type": "CODEPAGE_ENUMPROCW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "IdnToAscii": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUnicodeCharStr", + "type": "LPCWSTR" + }, + { + "name": "cchUnicodeChar", + "type": "int" + }, + { + "name": "lpASCIICharStr", + "type": "LPWSTR" + }, + { + "name": "cchASCIIChar", + "type": "int" + } + ], + "IdnToUnicode": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpASCIICharStr", + "type": "LPCWSTR" + }, + { + "name": "cchASCIIChar", + "type": "int" + }, + { + "name": "lpUnicodeCharStr", + "type": "LPWSTR" + }, + { + "name": "cchUnicodeChar", + "type": "int" + } + ], + "IdnToNameprepUnicode": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUnicodeCharStr", + "type": "LPCWSTR" + }, + { + "name": "cchUnicodeChar", + "type": "int" + }, + { + "name": "lpNameprepCharStr", + "type": "LPWSTR" + }, + { + "name": "cchNameprepChar", + "type": "int" + } + ], + "NormalizeString": [ + { + "name": "NormForm", + "type": "NORM_FORM" + }, + { + "name": "lpSrcString", + "type": "LPCWSTR" + }, + { + "name": "cwSrcLength", + "type": "int" + }, + { + "name": "lpDstString", + "type": "LPWSTR" + }, + { + "name": "cwDstLength", + "type": "int" + } + ], + "IsNormalizedString": [ + { + "name": "NormForm", + "type": "NORM_FORM" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "cwLength", + "type": "int" + } + ], + "VerifyScripts": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpLocaleScripts", + "type": "LPCWSTR" + }, + { + "name": "cchLocaleScripts", + "type": "int" + }, + { + "name": "lpTestScripts", + "type": "LPCWSTR" + }, + { + "name": "cchTestScripts", + "type": "int" + } + ], + "GetStringScripts": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "lpScripts", + "type": "LPWSTR" + }, + { + "name": "cchScripts", + "type": "int" + } + ], + "GetLocaleInfoEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + } + ], + "GetCalendarInfoEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "lpReserved", + "type": "LPCWSTR" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "lpValue", + "type": "LPDWORD" + } + ], + "GetNumberFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "lpFormat", + "type": "NUMBERFMTW" + }, + { + "name": "lpNumberStr", + "type": "LPWSTR" + }, + { + "name": "cchNumber", + "type": "int" + } + ], + "GetCurrencyFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "lpFormat", + "type": "CURRENCYFMTW" + }, + { + "name": "lpCurrencyStr", + "type": "LPWSTR" + }, + { + "name": "cchCurrency", + "type": "int" + } + ], + "GetUserDefaultLocaleName": [ + { + "name": "lpLocaleName", + "type": "LPWSTR" + }, + { + "name": "cchLocaleName", + "type": "int" + } + ], + "GetSystemDefaultLocaleName": [ + { + "name": "lpLocaleName", + "type": "LPWSTR" + }, + { + "name": "cchLocaleName", + "type": "int" + } + ], + "IsNLSDefinedString": [ + { + "name": "Function", + "type": "NLS_FUNCTION" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "cchStr", + "type": "INT" + } + ], + "GetNLSVersionEx": [ + { + "name": "function", + "type": "NLS_FUNCTION" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFOEX" + } + ], + "IsValidNLSVersion": [ + { + "name": "function", + "type": "NLS_FUNCTION" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFOEX" + } + ], + "FindNLSStringEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFindNLSStringFlags", + "type": "DWORD" + }, + { + "name": "lpStringSource", + "type": "LPCWSTR" + }, + { + "name": "cchSource", + "type": "int" + }, + { + "name": "lpStringValue", + "type": "LPCWSTR" + }, + { + "name": "cchValue", + "type": "int" + }, + { + "name": "pcchFound", + "type": "LPINT" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "sortHandle", + "type": "LPARAM" + } + ], + "LCMapStringEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPWSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "sortHandle", + "type": "LPARAM" + } + ], + "IsValidLocaleName": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + } + ], + "EnumCalendarInfoExEx": [ + { + "name": "pCalInfoEnumProcExEx", + "type": "CALINFO_ENUMPROCEXEX" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "lpReserved", + "type": "LPCWSTR" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumDateFormatsExEx": [ + { + "name": "lpDateFmtEnumProcExEx", + "type": "DATEFMT_ENUMPROCEXEX" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumTimeFormatsEx": [ + { + "name": "lpTimeFmtEnumProcEx", + "type": "TIMEFMT_ENUMPROCEX" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumSystemLocalesEx": [ + { + "name": "lpLocaleEnumProcEx", + "type": "LOCALE_ENUMPROCEX" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "ResolveLocaleName": [ + { + "name": "lpNameToResolve", + "type": "LPCWSTR" + }, + { + "name": "lpLocaleName", + "type": "LPWSTR" + }, + { + "name": "cchLocaleName", + "type": "int" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winnls32.json b/qiling/extensions/windows_sdk/winnls32.json new file mode 100644 index 000000000..58da93a0b --- /dev/null +++ b/qiling/extensions/windows_sdk/winnls32.json @@ -0,0 +1,12 @@ +{ + "WINNLSEnableIME": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winnt.json b/qiling/extensions/windows_sdk/winnt.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/winnt.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winreg.json b/qiling/extensions/windows_sdk/winreg.json new file mode 100644 index 000000000..7a030334d --- /dev/null +++ b/qiling/extensions/windows_sdk/winreg.json @@ -0,0 +1,1744 @@ +{ + "RegCloseKey": [ + { + "name": "hKey", + "type": "HKEY" + } + ], + "RegOverridePredefKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "hNewHKey", + "type": "HKEY" + } + ], + "RegOpenUserClassesRoot": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenCurrentUser": [ + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegDisablePredefinedCache": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegDisablePredefinedCacheEx": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegConnectRegistryA": [ + { + "name": "lpMachineName", + "type": "LPCSTR" + }, + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegConnectRegistryW": [ + { + "name": "lpMachineName", + "type": "LPCWSTR" + }, + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegCreateKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegCreateKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegCreateKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "lpClass", + "type": "LPSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + } + ], + "RegCreateKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "lpClass", + "type": "LPWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + } + ], + "RegCreateKeyTransactedA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "lpClass", + "type": "LPSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParemeter", + "type": "PVOID" + } + ], + "RegCreateKeyTransactedW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "lpClass", + "type": "LPWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParemeter", + "type": "PVOID" + } + ], + "RegDeleteKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + } + ], + "RegDeleteKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + } + ], + "RegDeleteKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "RegDeleteKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "RegDeleteKeyTransactedA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParameter", + "type": "PVOID" + } + ], + "RegDeleteKeyTransactedW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParameter", + "type": "PVOID" + } + ], + "RegDisableReflectionKey": [ + { + "name": "hBase", + "type": "HKEY" + } + ], + "RegEnableReflectionKey": [ + { + "name": "hBase", + "type": "HKEY" + } + ], + "RegQueryReflectionKey": [ + { + "name": "hBase", + "type": "HKEY" + }, + { + "name": "bIsReflectionDisabled", + "type": "BOOL" + } + ], + "RegDeleteValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + } + ], + "RegDeleteValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + } + ], + "RegEnumKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPSTR" + }, + { + "name": "cchName", + "type": "DWORD" + } + ], + "RegEnumKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "DWORD" + } + ], + "RegEnumKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpClass", + "type": "LPSTR" + }, + { + "name": "lpcchClass", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "RegEnumKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpClass", + "type": "LPWSTR" + }, + { + "name": "lpcchClass", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "RegEnumValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpValueName", + "type": "LPSTR" + }, + { + "name": "lpcchValueName", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "RegEnumValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpValueName", + "type": "LPWSTR" + }, + { + "name": "lpcchValueName", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "RegFlushKey": [ + { + "name": "hKey", + "type": "HKEY" + } + ], + "RegGetKeySecurity": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + } + ], + "RegLoadKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpFile", + "type": "LPCSTR" + } + ], + "RegLoadKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + } + ], + "RegNotifyChangeKeyValue": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "fAsynchronous", + "type": "BOOL" + } + ], + "RegOpenKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "ulOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "ulOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenKeyTransactedA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "ulOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParemeter", + "type": "PVOID" + } + ], + "RegOpenKeyTransactedW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "ulOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParemeter", + "type": "PVOID" + } + ], + "RegQueryInfoKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpClass", + "type": "LPSTR" + }, + { + "name": "lpcchClass", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpcSubKeys", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxClassLen", + "type": "LPDWORD" + }, + { + "name": "lpcValues", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueLen", + "type": "LPDWORD" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "RegQueryInfoKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpClass", + "type": "LPWSTR" + }, + { + "name": "lpcchClass", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpcSubKeys", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxClassLen", + "type": "LPDWORD" + }, + { + "name": "lpcValues", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueLen", + "type": "LPDWORD" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "RegQueryValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpData", + "type": "LPSTR" + }, + { + "name": "lpcbData", + "type": "PLONG" + } + ], + "RegQueryValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpData", + "type": "LPWSTR" + }, + { + "name": "lpcbData", + "type": "PLONG" + } + ], + "RegQueryMultipleValuesA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "val_list", + "type": "PVALENTA" + }, + { + "name": "num_vals", + "type": "DWORD" + }, + { + "name": "lpValueBuf", + "type": "LPSTR" + }, + { + "name": "ldwTotsize", + "type": "LPDWORD" + } + ], + "RegQueryMultipleValuesW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "val_list", + "type": "PVALENTW" + }, + { + "name": "num_vals", + "type": "DWORD" + }, + { + "name": "lpValueBuf", + "type": "LPWSTR" + }, + { + "name": "ldwTotsize", + "type": "LPDWORD" + } + ], + "RegQueryValueExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "RegQueryValueExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "RegReplaceKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpNewFile", + "type": "LPCSTR" + }, + { + "name": "lpOldFile", + "type": "LPCSTR" + } + ], + "RegReplaceKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpNewFile", + "type": "LPCWSTR" + }, + { + "name": "lpOldFile", + "type": "LPCWSTR" + } + ], + "RegRestoreKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "RegRestoreKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "RegSaveKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "RegSaveKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "RegSetKeySecurity": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "RegSetValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPCSTR" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegSetValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPCWSTR" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegSetValueExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegSetValueExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegUnLoadKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + } + ], + "RegUnLoadKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + } + ], + "RegDeleteKeyValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + } + ], + "RegDeleteKeyValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + } + ], + "RegSetKeyValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegSetKeyValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegDeleteTreeA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + } + ], + "RegDeleteTreeW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + } + ], + "RegCopyTreeA": [ + { + "name": "hKeySrc", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "hKeyDest", + "type": "HKEY" + } + ], + "RegGetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpValue", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "PVOID" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "RegGetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "PVOID" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "RegCopyTreeW": [ + { + "name": "hKeySrc", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "hKeyDest", + "type": "HKEY" + } + ], + "RegLoadMUIStringA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pszOutBuf", + "type": "LPSTR" + }, + { + "name": "cbOutBuf", + "type": "DWORD" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pszDirectory", + "type": "LPCSTR" + } + ], + "RegLoadMUIStringW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pszOutBuf", + "type": "LPWSTR" + }, + { + "name": "cbOutBuf", + "type": "DWORD" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pszDirectory", + "type": "LPCWSTR" + } + ], + "RegLoadAppKeyA": [ + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "RegLoadAppKeyW": [ + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "InitiateSystemShutdownA": [ + { + "name": "lpMachineName", + "type": "LPSTR" + }, + { + "name": "lpMessage", + "type": "LPSTR" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "bForceAppsClosed", + "type": "BOOL" + }, + { + "name": "bRebootAfterShutdown", + "type": "BOOL" + } + ], + "InitiateSystemShutdownW": [ + { + "name": "lpMachineName", + "type": "LPWSTR" + }, + { + "name": "lpMessage", + "type": "LPWSTR" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "bForceAppsClosed", + "type": "BOOL" + }, + { + "name": "bRebootAfterShutdown", + "type": "BOOL" + } + ], + "AbortSystemShutdownA": [ + { + "name": "lpMachineName", + "type": "LPSTR" + } + ], + "AbortSystemShutdownW": [ + { + "name": "lpMachineName", + "type": "LPWSTR" + } + ], + "InitiateSystemShutdownExA": [ + { + "name": "lpMachineName", + "type": "LPSTR" + }, + { + "name": "lpMessage", + "type": "LPSTR" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "bForceAppsClosed", + "type": "BOOL" + }, + { + "name": "bRebootAfterShutdown", + "type": "BOOL" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "InitiateSystemShutdownExW": [ + { + "name": "lpMachineName", + "type": "LPWSTR" + }, + { + "name": "lpMessage", + "type": "LPWSTR" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "bForceAppsClosed", + "type": "BOOL" + }, + { + "name": "bRebootAfterShutdown", + "type": "BOOL" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "InitiateShutdownA": [ + { + "name": "lpMachineName", + "type": "LPSTR" + }, + { + "name": "lpMessage", + "type": "LPSTR" + }, + { + "name": "dwGracePeriod", + "type": "DWORD" + }, + { + "name": "dwShutdownFlags", + "type": "DWORD" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "InitiateShutdownW": [ + { + "name": "lpMachineName", + "type": "LPWSTR" + }, + { + "name": "lpMessage", + "type": "LPWSTR" + }, + { + "name": "dwGracePeriod", + "type": "DWORD" + }, + { + "name": "dwShutdownFlags", + "type": "DWORD" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "RegSaveKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "RegSaveKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "Flags", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winsafer.json b/qiling/extensions/windows_sdk/winsafer.json new file mode 100644 index 000000000..6812521a7 --- /dev/null +++ b/qiling/extensions/windows_sdk/winsafer.json @@ -0,0 +1,182 @@ +{ + "SaferGetPolicyInformation": [ + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "SaferPolicyInfoClass", + "type": "SAFER_POLICY_INFO_CLASS" + }, + { + "name": "InfoBufferSize", + "type": "DWORD" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "InfoBufferRetSize", + "type": "PDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferSetPolicyInformation": [ + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "SaferPolicyInfoClass", + "type": "SAFER_POLICY_INFO_CLASS" + }, + { + "name": "InfoBufferSize", + "type": "DWORD" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferCreateLevel": [ + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "dwLevelId", + "type": "DWORD" + }, + { + "name": "OpenFlags", + "type": "DWORD" + }, + { + "name": "pLevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferCloseLevel": [ + { + "name": "hLevelHandle", + "type": "SAFER_LEVEL_HANDLE" + } + ], + "SaferIdentifyLevel": [ + { + "name": "dwNumProperties", + "type": "DWORD" + }, + { + "name": "pCodeProperties", + "type": "PSAFER_CODE_PROPERTIES" + }, + { + "name": "pLevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferComputeTokenFromLevel": [ + { + "name": "LevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "InAccessToken", + "type": "HANDLE" + }, + { + "name": "OutAccessToken", + "type": "PHANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferGetLevelInformation": [ + { + "name": "LevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "dwInfoType", + "type": "SAFER_OBJECT_INFO_CLASS" + }, + { + "name": "lpQueryBuffer", + "type": "LPVOID" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + }, + { + "name": "lpdwOutBufferSize", + "type": "LPDWORD" + } + ], + "SaferSetLevelInformation": [ + { + "name": "LevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "dwInfoType", + "type": "SAFER_OBJECT_INFO_CLASS" + }, + { + "name": "lpQueryBuffer", + "type": "LPVOID" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + } + ], + "SaferRecordEventLogEntry": [ + { + "name": "hLevel", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "szTargetPath", + "type": "LPCWSTR" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferiIsExecutableFileType": [ + { + "name": "szFullPathname", + "type": "LPCWSTR" + }, + { + "name": "bFromShellExecute", + "type": "BOOLEAN" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winscard.json b/qiling/extensions/windows_sdk/winscard.json new file mode 100644 index 000000000..4cfc92ef9 --- /dev/null +++ b/qiling/extensions/windows_sdk/winscard.json @@ -0,0 +1,1100 @@ +{ + "SCardEstablishContext": [ + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "pvReserved1", + "type": "LPCVOID" + }, + { + "name": "pvReserved2", + "type": "LPCVOID" + }, + { + "name": "phContext", + "type": "LPSCARDCONTEXT" + } + ], + "SCardReleaseContext": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + } + ], + "SCardIsValidContext": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + } + ], + "SCardListReaderGroupsA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszGroups", + "type": "LPSTR" + }, + { + "name": "pcchGroups", + "type": "LPDWORD" + } + ], + "SCardListReaderGroupsW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszGroups", + "type": "LPWSTR" + }, + { + "name": "pcchGroups", + "type": "LPDWORD" + } + ], + "SCardListReadersA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszGroups", + "type": "LPCSTR" + }, + { + "name": "mszReaders", + "type": "LPSTR" + }, + { + "name": "pcchReaders", + "type": "LPDWORD" + } + ], + "SCardListReadersW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszGroups", + "type": "LPCWSTR" + }, + { + "name": "mszReaders", + "type": "LPWSTR" + }, + { + "name": "pcchReaders", + "type": "LPDWORD" + } + ], + "SCardListCardsA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "pbAtr", + "type": "LPCBYTE" + }, + { + "name": "rgquidInterfaces", + "type": "LPCGUID" + }, + { + "name": "cguidInterfaceCount", + "type": "DWORD" + }, + { + "name": "mszCards", + "type": "CHAR" + }, + { + "name": "pcchCards", + "type": "LPDWORD" + } + ], + "SCardListCardsW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "pbAtr", + "type": "LPCBYTE" + }, + { + "name": "rgquidInterfaces", + "type": "LPCGUID" + }, + { + "name": "cguidInterfaceCount", + "type": "DWORD" + }, + { + "name": "mszCards", + "type": "WCHAR" + }, + { + "name": "pcchCards", + "type": "LPDWORD" + } + ], + "SCardListInterfacesA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCard", + "type": "LPCSTR" + }, + { + "name": "pguidInterfaces", + "type": "LPGUID" + }, + { + "name": "pcguidInterfaces", + "type": "LPDWORD" + } + ], + "SCardListInterfacesW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCard", + "type": "LPCWSTR" + }, + { + "name": "pguidInterfaces", + "type": "LPGUID" + }, + { + "name": "pcguidInterfaces", + "type": "LPDWORD" + } + ], + "SCardGetProviderIdA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCard", + "type": "LPCSTR" + }, + { + "name": "pguidProviderId", + "type": "LPGUID" + } + ], + "SCardGetProviderIdW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCard", + "type": "LPCWSTR" + }, + { + "name": "pguidProviderId", + "type": "LPGUID" + } + ], + "SCardGetCardTypeProviderNameA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCSTR" + }, + { + "name": "dwProviderId", + "type": "DWORD" + }, + { + "name": "szProvider", + "type": "CHAR" + }, + { + "name": "pcchProvider", + "type": "LPDWORD" + } + ], + "SCardGetCardTypeProviderNameW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCWSTR" + }, + { + "name": "dwProviderId", + "type": "DWORD" + }, + { + "name": "szProvider", + "type": "WCHAR" + }, + { + "name": "pcchProvider", + "type": "LPDWORD" + } + ], + "SCardIntroduceReaderGroupA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szGroupName", + "type": "LPCSTR" + } + ], + "SCardIntroduceReaderGroupW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szGroupName", + "type": "LPCWSTR" + } + ], + "SCardForgetReaderGroupA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szGroupName", + "type": "LPCSTR" + } + ], + "SCardForgetReaderGroupW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szGroupName", + "type": "LPCWSTR" + } + ], + "SCardIntroduceReaderA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + }, + { + "name": "szDeviceName", + "type": "LPCSTR" + } + ], + "SCardIntroduceReaderW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + }, + { + "name": "szDeviceName", + "type": "LPCWSTR" + } + ], + "SCardForgetReaderA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + } + ], + "SCardForgetReaderW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + } + ], + "SCardAddReaderToGroupA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + }, + { + "name": "szGroupName", + "type": "LPCSTR" + } + ], + "SCardAddReaderToGroupW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + }, + { + "name": "szGroupName", + "type": "LPCWSTR" + } + ], + "SCardRemoveReaderFromGroupA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + }, + { + "name": "szGroupName", + "type": "LPCSTR" + } + ], + "SCardRemoveReaderFromGroupW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + }, + { + "name": "szGroupName", + "type": "LPCWSTR" + } + ], + "SCardIntroduceCardTypeA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCSTR" + }, + { + "name": "pguidPrimaryProvider", + "type": "LPCGUID" + }, + { + "name": "rgguidInterfaces", + "type": "LPCGUID" + }, + { + "name": "dwInterfaceCount", + "type": "DWORD" + }, + { + "name": "pbAtr", + "type": "LPCBYTE" + }, + { + "name": "pbAtrMask", + "type": "LPCBYTE" + }, + { + "name": "cbAtrLen", + "type": "DWORD" + } + ], + "SCardIntroduceCardTypeW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCWSTR" + }, + { + "name": "pguidPrimaryProvider", + "type": "LPCGUID" + }, + { + "name": "rgguidInterfaces", + "type": "LPCGUID" + }, + { + "name": "dwInterfaceCount", + "type": "DWORD" + }, + { + "name": "pbAtr", + "type": "LPCBYTE" + }, + { + "name": "pbAtrMask", + "type": "LPCBYTE" + }, + { + "name": "cbAtrLen", + "type": "DWORD" + } + ], + "SCardSetCardTypeProviderNameA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCSTR" + }, + { + "name": "dwProviderId", + "type": "DWORD" + }, + { + "name": "szProvider", + "type": "LPCSTR" + } + ], + "SCardSetCardTypeProviderNameW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCWSTR" + }, + { + "name": "dwProviderId", + "type": "DWORD" + }, + { + "name": "szProvider", + "type": "LPCWSTR" + } + ], + "SCardForgetCardTypeA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCSTR" + } + ], + "SCardForgetCardTypeW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCWSTR" + } + ], + "SCardFreeMemory": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "pvMem", + "type": "LPCVOID" + } + ], + "SCardAccessStartedEvent": [ + { + "name": "VOID", + "type": "void" + } + ], + "SCardReleaseStartedEvent": [ + { + "name": "VOID", + "type": "void" + } + ], + "SCardLocateCardsA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszCards", + "type": "LPCSTR" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEA" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardLocateCardsW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszCards", + "type": "LPCWSTR" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEW" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardLocateCardsByATRA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "rgAtrMasks", + "type": "LPSCARD_ATRMASK" + }, + { + "name": "cAtrs", + "type": "DWORD" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEA" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardLocateCardsByATRW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "rgAtrMasks", + "type": "LPSCARD_ATRMASK" + }, + { + "name": "cAtrs", + "type": "DWORD" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEW" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardGetStatusChangeA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEA" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardGetStatusChangeW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEW" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardCancel": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + } + ], + "SCardConnectA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReader", + "type": "LPCSTR" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwPreferredProtocols", + "type": "DWORD" + }, + { + "name": "phCard", + "type": "LPSCARDHANDLE" + }, + { + "name": "pdwActiveProtocol", + "type": "LPDWORD" + } + ], + "SCardConnectW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReader", + "type": "LPCWSTR" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwPreferredProtocols", + "type": "DWORD" + }, + { + "name": "phCard", + "type": "LPSCARDHANDLE" + }, + { + "name": "pdwActiveProtocol", + "type": "LPDWORD" + } + ], + "SCardReconnect": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwPreferredProtocols", + "type": "DWORD" + }, + { + "name": "dwInitialization", + "type": "DWORD" + }, + { + "name": "pdwActiveProtocol", + "type": "LPDWORD" + } + ], + "SCardDisconnect": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwDisposition", + "type": "DWORD" + } + ], + "SCardBeginTransaction": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + } + ], + "SCardEndTransaction": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwDisposition", + "type": "DWORD" + } + ], + "SCardStatusA": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "mszReaderNames", + "type": "LPSTR" + }, + { + "name": "pcchReaderLen", + "type": "LPDWORD" + }, + { + "name": "pdwState", + "type": "LPDWORD" + }, + { + "name": "pdwProtocol", + "type": "LPDWORD" + }, + { + "name": "pbAtr", + "type": "LPBYTE" + }, + { + "name": "pcbAtrLen", + "type": "LPDWORD" + } + ], + "SCardStatusW": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "mszReaderNames", + "type": "LPWSTR" + }, + { + "name": "pcchReaderLen", + "type": "LPDWORD" + }, + { + "name": "pdwState", + "type": "LPDWORD" + }, + { + "name": "pdwProtocol", + "type": "LPDWORD" + }, + { + "name": "pbAtr", + "type": "LPBYTE" + }, + { + "name": "pcbAtrLen", + "type": "LPDWORD" + } + ], + "SCardTransmit": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "pioSendPci", + "type": "LPCSCARD_IO_REQUEST" + }, + { + "name": "pbSendBuffer", + "type": "LPCBYTE" + }, + { + "name": "cbSendLength", + "type": "DWORD" + }, + { + "name": "pioRecvPci", + "type": "LPSCARD_IO_REQUEST" + }, + { + "name": "pbRecvBuffer", + "type": "LPBYTE" + }, + { + "name": "pcbRecvLength", + "type": "LPDWORD" + } + ], + "SCardGetTransmitCount": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "pcTransmitCount", + "type": "LPDWORD" + } + ], + "SCardControl": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPCVOID" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "cbOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "SCardGetAttrib": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwAttrId", + "type": "DWORD" + }, + { + "name": "pbAttr", + "type": "LPBYTE" + }, + { + "name": "pcbAttrLen", + "type": "LPDWORD" + } + ], + "SCardSetAttrib": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwAttrId", + "type": "DWORD" + }, + { + "name": "pbAttr", + "type": "LPCBYTE" + }, + { + "name": "cbAttrLen", + "type": "DWORD" + } + ], + "SCardUIDlgSelectCardA": [ + { + "name": "VOID", + "type": "LPOPENCARDNAME_EXA" + } + ], + "SCardUIDlgSelectCardW": [ + { + "name": "VOID", + "type": "LPOPENCARDNAME_EXW" + } + ], + "GetOpenCardNameA": [ + { + "name": "VOID", + "type": "LPOPENCARDNAMEA" + } + ], + "GetOpenCardNameW": [ + { + "name": "VOID", + "type": "LPOPENCARDNAMEW" + } + ], + "SCardReadCacheA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "CardIdentifier", + "type": "UUID" + }, + { + "name": "FreshnessCounter", + "type": "DWORD" + }, + { + "name": "LookupName", + "type": "LPSTR" + }, + { + "name": "Data", + "type": "PBYTE" + }, + { + "name": "DataLen", + "type": "DWORD" + } + ], + "SCardReadCacheW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "CardIdentifier", + "type": "UUID" + }, + { + "name": "FreshnessCounter", + "type": "DWORD" + }, + { + "name": "LookupName", + "type": "LPWSTR" + }, + { + "name": "Data", + "type": "PBYTE" + }, + { + "name": "DataLen", + "type": "DWORD" + } + ], + "SCardWriteCacheA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "CardIdentifier", + "type": "UUID" + }, + { + "name": "FreshnessCounter", + "type": "DWORD" + }, + { + "name": "LookupName", + "type": "LPSTR" + }, + { + "name": "Data", + "type": "PBYTE" + }, + { + "name": "DataLen", + "type": "DWORD" + } + ], + "SCardWriteCacheW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "CardIdentifier", + "type": "UUID" + }, + { + "name": "FreshnessCounter", + "type": "DWORD" + }, + { + "name": "LookupName", + "type": "LPWSTR" + }, + { + "name": "Data", + "type": "PBYTE" + }, + { + "name": "DataLen", + "type": "DWORD" + } + ], + "SCardGetDeviceTypeIdA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + }, + { + "name": "pdwDeviceTypeId", + "type": "LPDWORD" + } + ], + "SCardGetDeviceTypeIdW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + }, + { + "name": "pdwDeviceTypeId", + "type": "LPDWORD" + } + ], + "SCardAudit": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "dwEvent", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winsnmp.json b/qiling/extensions/windows_sdk/winsnmp.json new file mode 100644 index 000000000..ac1c222c9 --- /dev/null +++ b/qiling/extensions/windows_sdk/winsnmp.json @@ -0,0 +1,622 @@ +{ + "SnmpGetTranslateMode": [ + { + "name": "nTranslateMode", + "type": "smiLPUINT32" + } + ], + "SnmpSetTranslateMode": [ + { + "name": "nTranslateMode", + "type": "smiUINT32" + } + ], + "SnmpGetRetransmitMode": [ + { + "name": "nRetransmitMode", + "type": "smiLPUINT32" + } + ], + "SnmpSetRetransmitMode": [ + { + "name": "nRetransmitMode", + "type": "smiUINT32" + } + ], + "SnmpGetTimeout": [ + { + "name": "hEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "nPolicyTimeout", + "type": "smiLPTIMETICKS" + }, + { + "name": "nActualTimeout", + "type": "smiLPTIMETICKS" + } + ], + "SnmpSetTimeout": [ + { + "name": "hEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "nPolicyTimeout", + "type": "smiTIMETICKS" + } + ], + "SnmpGetRetry": [ + { + "name": "hEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "nPolicyRetry", + "type": "smiLPUINT32" + }, + { + "name": "nActualRetry", + "type": "smiLPUINT32" + } + ], + "SnmpSetRetry": [ + { + "name": "hEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "nPolicyRetry", + "type": "smiUINT32" + } + ], + "SnmpGetVendorInfo": [ + { + "name": "vendorInfo", + "type": "smiLPVENDORINFO" + } + ], + "SnmpStartup": [ + { + "name": "nMajorVersion", + "type": "smiLPUINT32" + }, + { + "name": "nMinorVersion", + "type": "smiLPUINT32" + }, + { + "name": "nLevel", + "type": "smiLPUINT32" + }, + { + "name": "nTranslateMode", + "type": "smiLPUINT32" + }, + { + "name": "nRetransmitMode", + "type": "smiLPUINT32" + } + ], + "SnmpCleanup": [ + { + "name": "VOID", + "type": "void" + } + ], + "SnmpOpen": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "UINT" + } + ], + "SnmpClose": [ + { + "name": "session", + "type": "HSNMP_SESSION" + } + ], + "SnmpSendMsg": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "srcEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "dstEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "context", + "type": "HSNMP_CONTEXT" + }, + { + "name": "PDU", + "type": "HSNMP_PDU" + } + ], + "SnmpRecvMsg": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "srcEntity", + "type": "LPHSNMP_ENTITY" + }, + { + "name": "dstEntity", + "type": "LPHSNMP_ENTITY" + }, + { + "name": "context", + "type": "LPHSNMP_CONTEXT" + }, + { + "name": "PDU", + "type": "LPHSNMP_PDU" + } + ], + "SnmpRegister": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "srcEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "dstEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "context", + "type": "HSNMP_CONTEXT" + }, + { + "name": "notification", + "type": "smiLPCOID" + }, + { + "name": "state", + "type": "smiUINT32" + } + ], + "SnmpCreateSession": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "UINT" + }, + { + "name": "fCallBack", + "type": "SNMPAPI_CALLBACK" + }, + { + "name": "lpClientData", + "type": "LPVOID" + } + ], + "SnmpListen": [ + { + "name": "hEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "lStatus", + "type": "SNMPAPI_STATUS" + } + ], + "SnmpCancelMsg": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "reqId", + "type": "smiINT32" + } + ], + "SnmpStartupEx": [ + { + "name": "nMajorVersion", + "type": "smiLPUINT32" + }, + { + "name": "nMinorVersion", + "type": "smiLPUINT32" + }, + { + "name": "nLevel", + "type": "smiLPUINT32" + }, + { + "name": "nTranslateMode", + "type": "smiLPUINT32" + }, + { + "name": "nRetransmitMode", + "type": "smiLPUINT32" + } + ], + "SnmpCleanupEx": [ + { + "name": "VOID", + "type": "void" + } + ], + "SnmpStrToEntity": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "string", + "type": "LPCSTR" + } + ], + "SnmpEntityToStr": [ + { + "name": "entity", + "type": "HSNMP_ENTITY" + }, + { + "name": "size", + "type": "smiUINT32" + }, + { + "name": "string", + "type": "LPSTR" + } + ], + "SnmpFreeEntity": [ + { + "name": "entity", + "type": "HSNMP_ENTITY" + } + ], + "SnmpStrToContext": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "string", + "type": "smiLPCOCTETS" + } + ], + "SnmpContextToStr": [ + { + "name": "context", + "type": "HSNMP_CONTEXT" + }, + { + "name": "string", + "type": "smiLPOCTETS" + } + ], + "SnmpFreeContext": [ + { + "name": "context", + "type": "HSNMP_CONTEXT" + } + ], + "SnmpSetPort": [ + { + "name": "hEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "nPort", + "type": "UINT" + } + ], + "SnmpCreatePdu": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "PDU_type", + "type": "smiINT" + }, + { + "name": "request_id", + "type": "smiINT32" + }, + { + "name": "error_status", + "type": "smiINT" + }, + { + "name": "error_index", + "type": "smiINT" + }, + { + "name": "varbindlist", + "type": "HSNMP_VBL" + } + ], + "SnmpGetPduData": [ + { + "name": "PDU", + "type": "HSNMP_PDU" + }, + { + "name": "PDU_type", + "type": "smiLPINT" + }, + { + "name": "request_id", + "type": "smiLPINT32" + }, + { + "name": "error_status", + "type": "smiLPINT" + }, + { + "name": "error_index", + "type": "smiLPINT" + }, + { + "name": "varbindlist", + "type": "LPHSNMP_VBL" + } + ], + "SnmpSetPduData": [ + { + "name": "PDU", + "type": "HSNMP_PDU" + }, + { + "name": "PDU_type", + "type": "smiINT" + }, + { + "name": "request_id", + "type": "smiINT32" + }, + { + "name": "non_repeaters", + "type": "smiINT" + }, + { + "name": "max_repetitions", + "type": "smiINT" + }, + { + "name": "varbindlist", + "type": "HSNMP_VBL" + } + ], + "SnmpDuplicatePdu": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "PDU", + "type": "HSNMP_PDU" + } + ], + "SnmpFreePdu": [ + { + "name": "PDU", + "type": "HSNMP_PDU" + } + ], + "SnmpCreateVbl": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "name", + "type": "smiLPCOID" + }, + { + "name": "value", + "type": "smiLPCVALUE" + } + ], + "SnmpDuplicateVbl": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "vbl", + "type": "HSNMP_VBL" + } + ], + "SnmpFreeVbl": [ + { + "name": "vbl", + "type": "HSNMP_VBL" + } + ], + "SnmpCountVbl": [ + { + "name": "vbl", + "type": "HSNMP_VBL" + } + ], + "SnmpGetVb": [ + { + "name": "vbl", + "type": "HSNMP_VBL" + }, + { + "name": "index", + "type": "smiUINT32" + }, + { + "name": "name", + "type": "smiLPOID" + }, + { + "name": "value", + "type": "smiLPVALUE" + } + ], + "SnmpSetVb": [ + { + "name": "vbl", + "type": "HSNMP_VBL" + }, + { + "name": "index", + "type": "smiUINT32" + }, + { + "name": "name", + "type": "smiLPCOID" + }, + { + "name": "value", + "type": "smiLPCVALUE" + } + ], + "SnmpDeleteVb": [ + { + "name": "vbl", + "type": "HSNMP_VBL" + }, + { + "name": "index", + "type": "smiUINT32" + } + ], + "SnmpGetLastError": [ + { + "name": "session", + "type": "HSNMP_SESSION" + } + ], + "SnmpStrToOid": [ + { + "name": "string", + "type": "LPCSTR" + }, + { + "name": "dstOID", + "type": "smiLPOID" + } + ], + "SnmpOidToStr": [ + { + "name": "srcOID", + "type": "smiLPCOID" + }, + { + "name": "size", + "type": "smiUINT32" + }, + { + "name": "string", + "type": "LPSTR" + } + ], + "SnmpOidCopy": [ + { + "name": "srcOID", + "type": "smiLPCOID" + }, + { + "name": "dstOID", + "type": "smiLPOID" + } + ], + "SnmpOidCompare": [ + { + "name": "xOID", + "type": "smiLPCOID" + }, + { + "name": "yOID", + "type": "smiLPCOID" + }, + { + "name": "maxlen", + "type": "smiUINT32" + }, + { + "name": "result", + "type": "smiLPINT" + } + ], + "SnmpEncodeMsg": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "srcEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "dstEntity", + "type": "HSNMP_ENTITY" + }, + { + "name": "context", + "type": "HSNMP_CONTEXT" + }, + { + "name": "pdu", + "type": "HSNMP_PDU" + }, + { + "name": "msgBufDesc", + "type": "smiLPOCTETS" + } + ], + "SnmpDecodeMsg": [ + { + "name": "session", + "type": "HSNMP_SESSION" + }, + { + "name": "srcEntity", + "type": "LPHSNMP_ENTITY" + }, + { + "name": "dstEntity", + "type": "LPHSNMP_ENTITY" + }, + { + "name": "context", + "type": "LPHSNMP_CONTEXT" + }, + { + "name": "pdu", + "type": "LPHSNMP_PDU" + }, + { + "name": "msgBufDesc", + "type": "smiLPCOCTETS" + } + ], + "SnmpFreeDescriptor": [ + { + "name": "syntax", + "type": "smiUINT32" + }, + { + "name": "descriptor", + "type": "smiLPOPAQUE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winsock.json b/qiling/extensions/windows_sdk/winsock.json new file mode 100644 index 000000000..aa6c7e12f --- /dev/null +++ b/qiling/extensions/windows_sdk/winsock.json @@ -0,0 +1,582 @@ +{ + "__WSAFDIsSet": [ + { + "name": "VOID", + "type": "SOCKET" + }, + { + "name": "VOID", + "type": "fd_set" + } + ], + "bind": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "addr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + } + ], + "closesocket": [ + { + "name": "s", + "type": "SOCKET" + } + ], + "ioctlsocket": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "cmd", + "type": "long" + }, + { + "name": "argp", + "type": "u_long" + } + ], + "getpeername": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + } + ], + "getsockname": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + } + ], + "getsockopt": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "level", + "type": "int" + }, + { + "name": "optname", + "type": "int" + }, + { + "name": "optval", + "type": "char" + }, + { + "name": "optlen", + "type": "int" + } + ], + "htonl": [ + { + "name": "hostlong", + "type": "u_long" + } + ], + "htons": [ + { + "name": "hostshort", + "type": "u_short" + } + ], + "inet_addr": [ + { + "name": "cp", + "type": "char" + } + ], + "ntohl": [ + { + "name": "netlong", + "type": "u_long" + } + ], + "ntohs": [ + { + "name": "netshort", + "type": "u_short" + } + ], + "recv": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + } + ], + "recvfrom": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + }, + { + "name": "from", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "fromlen", + "type": "int" + } + ], + "sendto": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + }, + { + "name": "to", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "tolen", + "type": "int" + } + ], + "setsockopt": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "level", + "type": "int" + }, + { + "name": "optname", + "type": "int" + }, + { + "name": "optval", + "type": "char" + }, + { + "name": "optlen", + "type": "int" + } + ], + "shutdown": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "how", + "type": "int" + } + ], + "gethostname": [ + { + "name": "name", + "type": "char" + }, + { + "name": "namelen", + "type": "int" + } + ], + "WSAStartup": [ + { + "name": "wVersionRequired", + "type": "WORD" + }, + { + "name": "lpWSAData", + "type": "LPWSADATA" + } + ], + "WSACleanup": [ + { + "name": "VOID", + "type": "void" + } + ], + "WSASetLastError": [ + { + "name": "iError", + "type": "int" + } + ], + "WSAGetLastError": [ + { + "name": "VOID", + "type": "void" + } + ], + "WSAAsyncGetServByName": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "name", + "type": "char" + }, + { + "name": "proto", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetServByPort": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "port", + "type": "int" + }, + { + "name": "proto", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetProtoByName": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "name", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetProtoByNumber": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "number", + "type": "int" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetHostByName": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "name", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetHostByAddr": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "addr", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "type", + "type": "int" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSACancelAsyncRequest": [ + { + "name": "hAsyncTaskHandle", + "type": "HANDLE" + } + ], + "WSAAsyncSelect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "lEvent", + "type": "long" + } + ], + "WSARecvEx": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + } + ], + "TransmitFile": [ + { + "name": "hSocket", + "type": "SOCKET" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesPerSend", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpTransmitBuffers", + "type": "LPTRANSMIT_FILE_BUFFERS" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "AcceptEx": [ + { + "name": "sListenSocket", + "type": "SOCKET" + }, + { + "name": "sAcceptSocket", + "type": "SOCKET" + }, + { + "name": "lpOutputBuffer", + "type": "PVOID" + }, + { + "name": "dwReceiveDataLength", + "type": "DWORD" + }, + { + "name": "dwLocalAddressLength", + "type": "DWORD" + }, + { + "name": "dwRemoteAddressLength", + "type": "DWORD" + }, + { + "name": "lpdwBytesReceived", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetAcceptExSockaddrs": [ + { + "name": "lpOutputBuffer", + "type": "PVOID" + }, + { + "name": "dwReceiveDataLength", + "type": "DWORD" + }, + { + "name": "dwLocalAddressLength", + "type": "DWORD" + }, + { + "name": "dwRemoteAddressLength", + "type": "DWORD" + }, + { + "name": "LocalSockaddr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "LocalSockaddrLength", + "type": "LPINT" + }, + { + "name": "RemoteSockaddr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "RemoteSockaddrLength", + "type": "LPINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winsock2.json b/qiling/extensions/windows_sdk/winsock2.json new file mode 100644 index 000000000..459f65776 --- /dev/null +++ b/qiling/extensions/windows_sdk/winsock2.json @@ -0,0 +1,1630 @@ +{ + "__WSAFDIsSet": [ + { + "name": "fd", + "type": "SOCKET" + }, + { + "name": "VOID", + "type": "fd_set" + } + ], + "accept": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "addr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "addrlen", + "type": "int" + } + ], + "bind": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + } + ], + "closesocket": [ + { + "name": "s", + "type": "SOCKET" + } + ], + "connect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + } + ], + "ioctlsocket": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "cmd", + "type": "long" + }, + { + "name": "argp", + "type": "u_long" + } + ], + "getpeername": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + } + ], + "getsockname": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + } + ], + "getsockopt": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "level", + "type": "int" + }, + { + "name": "optname", + "type": "int" + }, + { + "name": "optval", + "type": "char" + }, + { + "name": "optlen", + "type": "int" + } + ], + "htonl": [ + { + "name": "hostlong", + "type": "u_long" + } + ], + "htons": [ + { + "name": "hostshort", + "type": "u_short" + } + ], + "inet_addr": [ + { + "name": "cp", + "type": "char" + } + ], + "listen": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "backlog", + "type": "int" + } + ], + "ntohl": [ + { + "name": "netlong", + "type": "u_long" + } + ], + "ntohs": [ + { + "name": "netshort", + "type": "u_short" + } + ], + "recv": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + } + ], + "recvfrom": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + }, + { + "name": "from", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "fromlen", + "type": "int" + } + ], + "select": [ + { + "name": "nfds", + "type": "int" + }, + { + "name": "readfds", + "type": "fd_set" + }, + { + "name": "writefds", + "type": "fd_set" + }, + { + "name": "exceptfds", + "type": "fd_set" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + } + ], + "send": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + } + ], + "sendto": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + }, + { + "name": "to", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "tolen", + "type": "int" + } + ], + "setsockopt": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "level", + "type": "int" + }, + { + "name": "optname", + "type": "int" + }, + { + "name": "optval", + "type": "char" + }, + { + "name": "optlen", + "type": "int" + } + ], + "shutdown": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "how", + "type": "int" + } + ], + "socket": [ + { + "name": "af", + "type": "int" + }, + { + "name": "type", + "type": "int" + }, + { + "name": "protocol", + "type": "int" + } + ], + "gethostname": [ + { + "name": "name", + "type": "char" + }, + { + "name": "namelen", + "type": "int" + } + ], + "GetHostNameW": [ + { + "name": "name", + "type": "PWSTR" + }, + { + "name": "namelen", + "type": "int" + } + ], + "WSAStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + }, + { + "name": "lpWSAData", + "type": "LPWSADATA" + } + ], + "WSACleanup": [ + { + "name": "VOID", + "type": "void" + } + ], + "WSASetLastError": [ + { + "name": "iError", + "type": "int" + } + ], + "WSAGetLastError": [ + { + "name": "VOID", + "type": "void" + } + ], + "WSAAsyncGetServByName": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "name", + "type": "char" + }, + { + "name": "proto", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetServByPort": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "port", + "type": "int" + }, + { + "name": "proto", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetProtoByName": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "name", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetProtoByNumber": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "number", + "type": "int" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetHostByName": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "name", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetHostByAddr": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "addr", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "type", + "type": "int" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSACancelAsyncRequest": [ + { + "name": "hAsyncTaskHandle", + "type": "HANDLE" + } + ], + "WSAAsyncSelect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "lEvent", + "type": "long" + } + ], + "WSAAccept": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "addr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "addrlen", + "type": "LPINT" + }, + { + "name": "lpfnCondition", + "type": "LPCONDITIONPROC" + }, + { + "name": "dwCallbackData", + "type": "DWORD_PTR" + } + ], + "WSACloseEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "WSAConnect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + }, + { + "name": "lpCallerData", + "type": "LPWSABUF" + }, + { + "name": "lpCalleeData", + "type": "LPWSABUF" + }, + { + "name": "lpSQOS", + "type": "LPQOS" + }, + { + "name": "lpGQOS", + "type": "LPQOS" + } + ], + "WSAConnectByNameW": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "nodename", + "type": "LPWSTR" + }, + { + "name": "servicename", + "type": "LPWSTR" + }, + { + "name": "LocalAddressLength", + "type": "LPDWORD" + }, + { + "name": "LocalAddress", + "type": "LPSOCKADDR" + }, + { + "name": "RemoteAddressLength", + "type": "LPDWORD" + }, + { + "name": "RemoteAddress", + "type": "LPSOCKADDR" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Reserved", + "type": "LPWSAOVERLAPPED" + } + ], + "WSAConnectByNameA": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "nodename", + "type": "LPCSTR" + }, + { + "name": "servicename", + "type": "LPCSTR" + }, + { + "name": "LocalAddressLength", + "type": "LPDWORD" + }, + { + "name": "LocalAddress", + "type": "LPSOCKADDR" + }, + { + "name": "RemoteAddressLength", + "type": "LPDWORD" + }, + { + "name": "RemoteAddress", + "type": "LPSOCKADDR" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Reserved", + "type": "LPWSAOVERLAPPED" + } + ], + "WSAConnectByList": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "SocketAddress", + "type": "PSOCKET_ADDRESS_LIST" + }, + { + "name": "LocalAddressLength", + "type": "LPDWORD" + }, + { + "name": "LocalAddress", + "type": "LPSOCKADDR" + }, + { + "name": "RemoteAddressLength", + "type": "LPDWORD" + }, + { + "name": "RemoteAddress", + "type": "LPSOCKADDR" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Reserved", + "type": "LPWSAOVERLAPPED" + } + ], + "WSACreateEvent": [ + { + "name": "VOID", + "type": "void" + } + ], + "WSADuplicateSocketA": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOA" + } + ], + "WSADuplicateSocketW": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOW" + } + ], + "WSAEnumNetworkEvents": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "hEventObject", + "type": "HANDLE" + }, + { + "name": "lpNetworkEvents", + "type": "LPWSANETWORKEVENTS" + } + ], + "WSAEnumProtocolsA": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPWSAPROTOCOL_INFOA" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "WSAEnumProtocolsW": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "WSAEventSelect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "hEventObject", + "type": "HANDLE" + }, + { + "name": "lNetworkEvents", + "type": "long" + } + ], + "WSAGetOverlappedResult": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpcbTransfer", + "type": "LPDWORD" + }, + { + "name": "fWait", + "type": "BOOL" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ], + "WSAGetQOSByName": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpQOSName", + "type": "LPWSABUF" + }, + { + "name": "lpQOS", + "type": "LPQOS" + } + ], + "WSAHtonl": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "hostlong", + "type": "u_long" + }, + { + "name": "lpnetlong", + "type": "u_long" + } + ], + "WSAHtons": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "hostshort", + "type": "u_short" + }, + { + "name": "lpnetshort", + "type": "u_short" + } + ], + "WSAIoctl": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "dwIoControlCode", + "type": "DWORD" + }, + { + "name": "lpvInBuffer", + "type": "LPVOID" + }, + { + "name": "cbInBuffer", + "type": "DWORD" + }, + { + "name": "lpvOutBuffer", + "type": "LPVOID" + }, + { + "name": "cbOutBuffer", + "type": "DWORD" + }, + { + "name": "lpcbBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSAJoinLeaf": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "namelen", + "type": "int" + }, + { + "name": "lpCallerData", + "type": "LPWSABUF" + }, + { + "name": "lpCalleeData", + "type": "LPWSABUF" + }, + { + "name": "lpSQOS", + "type": "LPQOS" + }, + { + "name": "lpGQOS", + "type": "LPQOS" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WSANtohl": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "netlong", + "type": "u_long" + }, + { + "name": "lphostlong", + "type": "u_long" + } + ], + "WSANtohs": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "netshort", + "type": "u_short" + }, + { + "name": "lphostshort", + "type": "u_short" + } + ], + "WSARecv": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpBuffers", + "type": "LPWSABUF" + }, + { + "name": "dwBufferCount", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesRecvd", + "type": "LPDWORD" + }, + { + "name": "lpFlags", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSARecvDisconnect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpInboundDisconnectData", + "type": "LPWSABUF" + } + ], + "WSARecvFrom": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpBuffers", + "type": "LPWSABUF" + }, + { + "name": "dwBufferCount", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesRecvd", + "type": "LPDWORD" + }, + { + "name": "lpFlags", + "type": "LPDWORD" + }, + { + "name": "lpFrom", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpFromlen", + "type": "LPINT" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSAResetEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "WSASend": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpBuffers", + "type": "LPWSABUF" + }, + { + "name": "dwBufferCount", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesSent", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSASendMsg": [ + { + "name": "Handle", + "type": "SOCKET" + }, + { + "name": "lpMsg", + "type": "LPWSAMSG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesSent", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSASendDisconnect": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpOutboundDisconnectData", + "type": "LPWSABUF" + } + ], + "WSASendTo": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "lpBuffers", + "type": "LPWSABUF" + }, + { + "name": "dwBufferCount", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesSent", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpTo", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "iTolen", + "type": "int" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSASetEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "WSASocketA": [ + { + "name": "af", + "type": "int" + }, + { + "name": "type", + "type": "int" + }, + { + "name": "protocol", + "type": "int" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOA" + }, + { + "name": "g", + "type": "GROUP" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WSASocketW": [ + { + "name": "af", + "type": "int" + }, + { + "name": "type", + "type": "int" + }, + { + "name": "protocol", + "type": "int" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "g", + "type": "GROUP" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WSAWaitForMultipleEvents": [ + { + "name": "cEvents", + "type": "DWORD" + }, + { + "name": "lphEvents", + "type": "HANDLE" + }, + { + "name": "fWaitAll", + "type": "BOOL" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "fAlertable", + "type": "BOOL" + } + ], + "WSAAddressToStringA": [ + { + "name": "lpsaAddress", + "type": "LPSOCKADDR" + }, + { + "name": "dwAddressLength", + "type": "DWORD" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOA" + }, + { + "name": "lpszAddressString", + "type": "LPSTR" + }, + { + "name": "lpdwAddressStringLength", + "type": "LPDWORD" + } + ], + "WSAAddressToStringW": [ + { + "name": "lpsaAddress", + "type": "LPSOCKADDR" + }, + { + "name": "dwAddressLength", + "type": "DWORD" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "lpszAddressString", + "type": "LPWSTR" + }, + { + "name": "lpdwAddressStringLength", + "type": "LPDWORD" + } + ], + "WSAStringToAddressA": [ + { + "name": "AddressString", + "type": "LPSTR" + }, + { + "name": "AddressFamily", + "type": "INT" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOA" + }, + { + "name": "lpAddress", + "type": "LPSOCKADDR" + }, + { + "name": "lpAddressLength", + "type": "LPINT" + } + ], + "WSAStringToAddressW": [ + { + "name": "AddressString", + "type": "LPWSTR" + }, + { + "name": "AddressFamily", + "type": "INT" + }, + { + "name": "lpProtocolInfo", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "lpAddress", + "type": "LPSOCKADDR" + }, + { + "name": "lpAddressLength", + "type": "LPINT" + } + ], + "WSALookupServiceBeginA": [ + { + "name": "lpqsRestrictions", + "type": "LPWSAQUERYSETA" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + }, + { + "name": "lphLookup", + "type": "LPHANDLE" + } + ], + "WSALookupServiceBeginW": [ + { + "name": "lpqsRestrictions", + "type": "LPWSAQUERYSETW" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + }, + { + "name": "lphLookup", + "type": "LPHANDLE" + } + ], + "WSALookupServiceNextA": [ + { + "name": "hLookup", + "type": "HANDLE" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpqsResults", + "type": "LPWSAQUERYSETA" + } + ], + "WSALookupServiceNextW": [ + { + "name": "hLookup", + "type": "HANDLE" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpqsResults", + "type": "LPWSAQUERYSETW" + } + ], + "WSALookupServiceEnd": [ + { + "name": "hLookup", + "type": "HANDLE" + } + ], + "WSAInstallServiceClassA": [ + { + "name": "lpServiceClassInfo", + "type": "LPWSASERVICECLASSINFOA" + } + ], + "WSAInstallServiceClassW": [ + { + "name": "lpServiceClassInfo", + "type": "LPWSASERVICECLASSINFOW" + } + ], + "WSARemoveServiceClass": [ + { + "name": "lpServiceClassId", + "type": "LPGUID" + } + ], + "WSAGetServiceClassInfoA": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpServiceClassId", + "type": "LPGUID" + }, + { + "name": "lpdwBufSize", + "type": "LPDWORD" + }, + { + "name": "lpServiceClassInfo", + "type": "LPWSASERVICECLASSINFOA" + } + ], + "WSAGetServiceClassInfoW": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpServiceClassId", + "type": "LPGUID" + }, + { + "name": "lpdwBufSize", + "type": "LPDWORD" + }, + { + "name": "lpServiceClassInfo", + "type": "LPWSASERVICECLASSINFOW" + } + ], + "WSAEnumNameSpaceProvidersA": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOA" + } + ], + "WSAEnumNameSpaceProvidersW": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOW" + } + ], + "WSAEnumNameSpaceProvidersExA": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOEXA" + } + ], + "WSAEnumNameSpaceProvidersExW": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOEXW" + } + ], + "WSAGetServiceClassNameByClassIdA": [ + { + "name": "lpServiceClassId", + "type": "LPGUID" + }, + { + "name": "lpszServiceClassName", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "WSAGetServiceClassNameByClassIdW": [ + { + "name": "lpServiceClassId", + "type": "LPGUID" + }, + { + "name": "lpszServiceClassName", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "WSASetServiceA": [ + { + "name": "lpqsRegInfo", + "type": "LPWSAQUERYSETA" + }, + { + "name": "essoperation", + "type": "WSAESETSERVICEOP" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + } + ], + "WSASetServiceW": [ + { + "name": "lpqsRegInfo", + "type": "LPWSAQUERYSETW" + }, + { + "name": "essoperation", + "type": "WSAESETSERVICEOP" + }, + { + "name": "dwControlFlags", + "type": "DWORD" + } + ], + "WSAProviderConfigChange": [ + { + "name": "lpNotificationHandle", + "type": "LPHANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPWSAOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPWSAOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WSAPoll": [ + { + "name": "fdArray", + "type": "LPWSAPOLLFD" + }, + { + "name": "fds", + "type": "ULONG" + }, + { + "name": "timeout", + "type": "INT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winstring.json b/qiling/extensions/windows_sdk/winstring.json new file mode 100644 index 000000000..e3c575976 --- /dev/null +++ b/qiling/extensions/windows_sdk/winstring.json @@ -0,0 +1,294 @@ +{ + "WindowsCreateString": [ + { + "name": "sourceString", + "type": "PCNZWCH" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsCreateStringReference": [ + { + "name": "sourceString", + "type": "PCWSTR" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "hstringHeader", + "type": "HSTRING_HEADER" + }, + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsDeleteString": [ + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsDuplicateString": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsGetStringLen": [ + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsGetStringRawBuffer": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "length", + "type": "UINT32" + } + ], + "WindowsIsStringEmpty": [ + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsStringHasEmbeddedNull": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "hasEmbedNull", + "type": "BOOL" + } + ], + "WindowsCompareStringOrdinal": [ + { + "name": "string1", + "type": "HSTRING" + }, + { + "name": "string2", + "type": "HSTRING" + }, + { + "name": "result", + "type": "INT32" + } + ], + "WindowsSubstring": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "startIndex", + "type": "UINT32" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsSubstringWithSpecifiedLength": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "startIndex", + "type": "UINT32" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsConcatString": [ + { + "name": "string1", + "type": "HSTRING" + }, + { + "name": "string2", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsReplaceString": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "stringReplaced", + "type": "HSTRING" + }, + { + "name": "stringReplaceWith", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsTrimStringStart": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "trimString", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsTrimStringEnd": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "trimString", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsPreallocateStringBuffer": [ + { + "name": "length", + "type": "UINT32" + }, + { + "name": "charBuffer", + "type": "WCHAR" + }, + { + "name": "bufferHandle", + "type": "HSTRING_BUFFER" + } + ], + "WindowsPromoteStringBuffer": [ + { + "name": "bufferHandle", + "type": "HSTRING_BUFFER" + }, + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsDeleteStringBuffer": [ + { + "name": "bufferHandle", + "type": "HSTRING_BUFFER" + } + ], + "HSTRING_UserSize": [ + { + "name": "pFlags", + "type": "ULONG" + }, + { + "name": "StartingSize", + "type": "ULONG" + }, + { + "name": "ppidl", + "type": "HSTRING" + } + ], + "HSTRING_UserFree": [ + { + "name": "pFlags", + "type": "ULONG" + }, + { + "name": "ppidl", + "type": "HSTRING" + } + ], + "WindowsInspectString": [ + { + "name": "targetHString", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "callback", + "type": "PINSPECT_HSTRING_CALLBACK" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "targetStringAddress", + "type": "UINT_PTR" + } + ], + "WindowsInspectString2": [ + { + "name": "targetHString", + "type": "UINT64" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "callback", + "type": "PINSPECT_HSTRING_CALLBACK2" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "targetStringAddress", + "type": "UINT64" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winsvc.json b/qiling/extensions/windows_sdk/winsvc.json new file mode 100644 index 000000000..e2b924279 --- /dev/null +++ b/qiling/extensions/windows_sdk/winsvc.json @@ -0,0 +1,1006 @@ +{ + "ChangeServiceConfigA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwStartType", + "type": "DWORD" + }, + { + "name": "dwErrorControl", + "type": "DWORD" + }, + { + "name": "lpBinaryPathName", + "type": "LPCSTR" + }, + { + "name": "lpLoadOrderGroup", + "type": "LPCSTR" + }, + { + "name": "lpdwTagId", + "type": "LPDWORD" + }, + { + "name": "lpDependencies", + "type": "LPCSTR" + }, + { + "name": "lpServiceStartName", + "type": "LPCSTR" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpDisplayName", + "type": "LPCSTR" + } + ], + "ChangeServiceConfigW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwStartType", + "type": "DWORD" + }, + { + "name": "dwErrorControl", + "type": "DWORD" + }, + { + "name": "lpBinaryPathName", + "type": "LPCWSTR" + }, + { + "name": "lpLoadOrderGroup", + "type": "LPCWSTR" + }, + { + "name": "lpdwTagId", + "type": "LPDWORD" + }, + { + "name": "lpDependencies", + "type": "LPCWSTR" + }, + { + "name": "lpServiceStartName", + "type": "LPCWSTR" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpDisplayName", + "type": "LPCWSTR" + } + ], + "ChangeServiceConfig2A": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPVOID" + } + ], + "ChangeServiceConfig2W": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPVOID" + } + ], + "CloseServiceHandle": [ + { + "name": "hSCObject", + "type": "SC_HANDLE" + } + ], + "ControlService": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwControl", + "type": "DWORD" + }, + { + "name": "lpServiceStatus", + "type": "LPSERVICE_STATUS" + } + ], + "CreateServiceA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "lpDisplayName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwStartType", + "type": "DWORD" + }, + { + "name": "dwErrorControl", + "type": "DWORD" + }, + { + "name": "lpBinaryPathName", + "type": "LPCSTR" + }, + { + "name": "lpLoadOrderGroup", + "type": "LPCSTR" + }, + { + "name": "lpdwTagId", + "type": "LPDWORD" + }, + { + "name": "lpDependencies", + "type": "LPCSTR" + }, + { + "name": "lpServiceStartName", + "type": "LPCSTR" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + } + ], + "CreateServiceW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "lpDisplayName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwStartType", + "type": "DWORD" + }, + { + "name": "dwErrorControl", + "type": "DWORD" + }, + { + "name": "lpBinaryPathName", + "type": "LPCWSTR" + }, + { + "name": "lpLoadOrderGroup", + "type": "LPCWSTR" + }, + { + "name": "lpdwTagId", + "type": "LPDWORD" + }, + { + "name": "lpDependencies", + "type": "LPCWSTR" + }, + { + "name": "lpServiceStartName", + "type": "LPCWSTR" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + } + ], + "DeleteService": [ + { + "name": "hService", + "type": "SC_HANDLE" + } + ], + "EnumDependentServicesA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPENUM_SERVICE_STATUSA" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + } + ], + "EnumDependentServicesW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPENUM_SERVICE_STATUSW" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + } + ], + "EnumServicesStatusA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPENUM_SERVICE_STATUSA" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + }, + { + "name": "lpResumeHandle", + "type": "LPDWORD" + } + ], + "EnumServicesStatusW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPENUM_SERVICE_STATUSW" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + }, + { + "name": "lpResumeHandle", + "type": "LPDWORD" + } + ], + "EnumServicesStatusExA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "InfoLevel", + "type": "SC_ENUM_TYPE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + }, + { + "name": "lpResumeHandle", + "type": "LPDWORD" + }, + { + "name": "pszGroupName", + "type": "LPCSTR" + } + ], + "EnumServicesStatusExW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "InfoLevel", + "type": "SC_ENUM_TYPE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + }, + { + "name": "lpResumeHandle", + "type": "LPDWORD" + }, + { + "name": "pszGroupName", + "type": "LPCWSTR" + } + ], + "GetServiceKeyNameA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpDisplayName", + "type": "LPCSTR" + }, + { + "name": "lpServiceName", + "type": "LPSTR" + }, + { + "name": "lpcchBuffer", + "type": "LPDWORD" + } + ], + "GetServiceKeyNameW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpDisplayName", + "type": "LPCWSTR" + }, + { + "name": "lpServiceName", + "type": "LPWSTR" + }, + { + "name": "lpcchBuffer", + "type": "LPDWORD" + } + ], + "GetServiceDisplayNameA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "lpDisplayName", + "type": "LPSTR" + }, + { + "name": "lpcchBuffer", + "type": "LPDWORD" + } + ], + "GetServiceDisplayNameW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "lpDisplayName", + "type": "LPWSTR" + }, + { + "name": "lpcchBuffer", + "type": "LPDWORD" + } + ], + "LockServiceDatabase": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + } + ], + "NotifyBootConfigStatus": [ + { + "name": "BootAcceptable", + "type": "BOOL" + } + ], + "OpenSCManagerA": [ + { + "name": "lpMachineName", + "type": "LPCSTR" + }, + { + "name": "lpDatabaseName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "OpenSCManagerW": [ + { + "name": "lpMachineName", + "type": "LPCWSTR" + }, + { + "name": "lpDatabaseName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "OpenServiceA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "OpenServiceW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "QueryServiceConfigA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceConfig", + "type": "LPQUERY_SERVICE_CONFIGA" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceConfigW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceConfig", + "type": "LPQUERY_SERVICE_CONFIGW" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceConfig2A": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceConfig2W": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceLockStatusA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpLockStatus", + "type": "LPQUERY_SERVICE_LOCK_STATUSA" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceLockStatusW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpLockStatus", + "type": "LPQUERY_SERVICE_LOCK_STATUSW" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceObjectSecurity": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwSecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "lpSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceStatus": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceStatus", + "type": "LPSERVICE_STATUS" + } + ], + "QueryServiceStatusEx": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "InfoLevel", + "type": "SC_STATUS_TYPE" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "RegisterServiceCtrlHandlerA": [ + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "lpHandlerProc", + "type": "LPHANDLER_FUNCTION" + } + ], + "RegisterServiceCtrlHandlerW": [ + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "lpHandlerProc", + "type": "LPHANDLER_FUNCTION" + } + ], + "RegisterServiceCtrlHandlerExA": [ + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "lpHandlerProc", + "type": "LPHANDLER_FUNCTION_EX" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "RegisterServiceCtrlHandlerExW": [ + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "lpHandlerProc", + "type": "LPHANDLER_FUNCTION_EX" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "SetServiceObjectSecurity": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwSecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "lpSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "SetServiceStatus": [ + { + "name": "hServiceStatus", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "lpServiceStatus", + "type": "LPSERVICE_STATUS" + } + ], + "StartServiceCtrlDispatcherA": [ + { + "name": "lpServiceStartTable", + "type": "SERVICE_TABLE_ENTRYA" + } + ], + "StartServiceCtrlDispatcherW": [ + { + "name": "lpServiceStartTable", + "type": "SERVICE_TABLE_ENTRYW" + } + ], + "StartServiceA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwNumServiceArgs", + "type": "DWORD" + }, + { + "name": "lpServiceArgVectors", + "type": "LPCSTR" + } + ], + "StartServiceW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwNumServiceArgs", + "type": "DWORD" + }, + { + "name": "lpServiceArgVectors", + "type": "LPCWSTR" + } + ], + "UnlockServiceDatabase": [ + { + "name": "ScLock", + "type": "SC_LOCK" + } + ], + "NotifyServiceStatusChangeA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwNotifyMask", + "type": "DWORD" + }, + { + "name": "pNotifyBuffer", + "type": "PSERVICE_NOTIFYA" + } + ], + "NotifyServiceStatusChangeW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwNotifyMask", + "type": "DWORD" + }, + { + "name": "pNotifyBuffer", + "type": "PSERVICE_NOTIFYW" + } + ], + "ControlServiceExA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwControl", + "type": "DWORD" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "pControlParams", + "type": "PVOID" + } + ], + "ControlServiceExW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwControl", + "type": "DWORD" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "pControlParams", + "type": "PVOID" + } + ], + "QueryServiceDynamicInformation": [ + { + "name": "hServiceStatus", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "ppDynamicInfo", + "type": "PVOID" + } + ], + "GetServiceRegistryStateKey": [ + { + "name": "ServiceStatusHandle", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "StateType", + "type": "SERVICE_REGISTRY_STATE_TYPE" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "ServiceStateKey", + "type": "HKEY" + } + ], + "GetServiceDirectory": [ + { + "name": "hServiceStatus", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "eDirectoryType", + "type": "SERVICE_DIRECTORY_TYPE" + }, + { + "name": "lpPathBuffer", + "type": "PWCHAR" + }, + { + "name": "cchPathBufferLength", + "type": "DWORD" + }, + { + "name": "lpcchRequiredBufferLength", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winsxs.json b/qiling/extensions/windows_sdk/winsxs.json new file mode 100644 index 000000000..d4ee206b9 --- /dev/null +++ b/qiling/extensions/windows_sdk/winsxs.json @@ -0,0 +1,30 @@ +{ + "CreateAssemblyNameObject": [ + { + "name": "ppAssemblyNameObj", + "type": "LPASSEMBLYNAME" + }, + { + "name": "szAssemblyName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CreateAssemblyCache": [ + { + "name": "ppAsmCache", + "type": "IAssemblyCache" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winternl.json b/qiling/extensions/windows_sdk/winternl.json new file mode 100644 index 000000000..6c10dfe8a --- /dev/null +++ b/qiling/extensions/windows_sdk/winternl.json @@ -0,0 +1,484 @@ +{ + "NtClose": [ + { + "name": "Handle", + "type": "HANDLE" + } + ], + "NtCreateFile": [ + { + "name": "FileHandle", + "type": "PHANDLE" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "ObjectAttributes", + "type": "POBJECT_ATTRIBUTES" + }, + { + "name": "IoStatusBlock", + "type": "PIO_STATUS_BLOCK" + }, + { + "name": "AllocationSize", + "type": "PLARGE_INTEGER" + }, + { + "name": "FileAttributes", + "type": "ULONG" + }, + { + "name": "ShareAccess", + "type": "ULONG" + }, + { + "name": "CreateDisposition", + "type": "ULONG" + }, + { + "name": "CreateOptions", + "type": "ULONG" + }, + { + "name": "EaBuffer", + "type": "PVOID" + }, + { + "name": "EaLength", + "type": "ULONG" + } + ], + "NtOpenFile": [ + { + "name": "FileHandle", + "type": "PHANDLE" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "ObjectAttributes", + "type": "POBJECT_ATTRIBUTES" + }, + { + "name": "IoStatusBlock", + "type": "PIO_STATUS_BLOCK" + }, + { + "name": "ShareAccess", + "type": "ULONG" + }, + { + "name": "OpenOptions", + "type": "ULONG" + } + ], + "NtRenameKey": [ + { + "name": "KeyHandle", + "type": "HANDLE" + }, + { + "name": "NewName", + "type": "PUNICODE_STRING" + } + ], + "NtNotifyChangeMultipleKeys": [ + { + "name": "MasterKeyHandle", + "type": "HANDLE" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "SubordinateObjects", + "type": "OBJECT_ATTRIBUTES" + }, + { + "name": "Event", + "type": "HANDLE" + }, + { + "name": "ApcRoutine", + "type": "PIO_APC_ROUTINE" + }, + { + "name": "ApcContext", + "type": "PVOID" + }, + { + "name": "IoStatusBlock", + "type": "PIO_STATUS_BLOCK" + }, + { + "name": "CompletionFilter", + "type": "ULONG" + }, + { + "name": "WatchTree", + "type": "BOOLEAN" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "BufferSize", + "type": "ULONG" + }, + { + "name": "Asynchronous", + "type": "BOOLEAN" + } + ], + "NtQueryMultipleValueKey": [ + { + "name": "KeyHandle", + "type": "HANDLE" + }, + { + "name": "ValueEntries", + "type": "PKEY_VALUE_ENTRY" + }, + { + "name": "EntryCount", + "type": "ULONG" + }, + { + "name": "ValueBuffer", + "type": "PVOID" + }, + { + "name": "BufferLength", + "type": "PULONG" + }, + { + "name": "RequiredBufferLength", + "type": "PULONG" + } + ], + "NtSetInformationKey": [ + { + "name": "KeyHandle", + "type": "HANDLE" + }, + { + "name": "KeySetInformationClass", + "type": "KEY_SET_INFORMATION_CLASS" + }, + { + "name": "KeySetInformation", + "type": "PVOID" + }, + { + "name": "KeySetInformationLength", + "type": "ULONG" + } + ], + "NtDeviceIoControlFile": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Event", + "type": "HANDLE" + }, + { + "name": "ApcRoutine", + "type": "PIO_APC_ROUTINE" + }, + { + "name": "ApcContext", + "type": "PVOID" + }, + { + "name": "IoStatusBlock", + "type": "PIO_STATUS_BLOCK" + }, + { + "name": "IoControlCode", + "type": "ULONG" + }, + { + "name": "InputBuffer", + "type": "PVOID" + }, + { + "name": "InputBufferLength", + "type": "ULONG" + }, + { + "name": "OutputBuffer", + "type": "PVOID" + }, + { + "name": "OutputBufferLength", + "type": "ULONG" + } + ], + "RtlIsNameLegalDOS8Dot3": [ + { + "name": "Name", + "type": "PUNICODE_STRING" + }, + { + "name": "OemName", + "type": "POEM_STRING" + }, + { + "name": "NameContainsSpaces", + "type": "PBOOLEAN" + } + ], + "RtlNtStatusToDosError": [ + { + "name": "Status", + "type": "NTSTATUS" + } + ], + "NtQueryInformationProcess": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "ProcessInformationClass", + "type": "PROCESSINFOCLASS" + }, + { + "name": "ProcessInformation", + "type": "PVOID" + }, + { + "name": "ProcessInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "NtQueryInformationThread": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "ThreadInformationClass", + "type": "THREADINFOCLASS" + }, + { + "name": "ThreadInformation", + "type": "PVOID" + }, + { + "name": "ThreadInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "NtQueryObject": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "ObjectInformationClass", + "type": "OBJECT_INFORMATION_CLASS" + }, + { + "name": "ObjectInformation", + "type": "PVOID" + }, + { + "name": "ObjectInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "NtQuerySystemInformation": [ + { + "name": "SystemInformationClass", + "type": "SYSTEM_INFORMATION_CLASS" + }, + { + "name": "SystemInformation", + "type": "PVOID" + }, + { + "name": "SystemInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "NtQuerySystemTime": [ + { + "name": "SystemTime", + "type": "PLARGE_INTEGER" + } + ], + "RtlLocalTimeToSystemTime": [ + { + "name": "LocalTime", + "type": "PLARGE_INTEGER" + }, + { + "name": "SystemTime", + "type": "PLARGE_INTEGER" + } + ], + "RtlTimeToSecondsSince1970": [ + { + "name": "Time", + "type": "PLARGE_INTEGER" + }, + { + "name": "ElapsedSeconds", + "type": "PULONG" + } + ], + "RtlFreeAnsiString": [ + { + "name": "AnsiString", + "type": "PANSI_STRING" + } + ], + "RtlFreeUnicodeString": [ + { + "name": "UnicodeString", + "type": "PUNICODE_STRING" + } + ], + "RtlFreeOemString": [ + { + "name": "OemString", + "type": "POEM_STRING" + } + ], + "RtlInitString": [ + { + "name": "DestinationString", + "type": "PSTRING" + }, + { + "name": "SourceString", + "type": "PCSZ" + } + ], + "RtlInitUnicodeString": [ + { + "name": "DestinationString", + "type": "PUNICODE_STRING" + }, + { + "name": "SourceString", + "type": "PCWSTR" + } + ], + "RtlAnsiStringToUnicodeString": [ + { + "name": "DestinationString", + "type": "PUNICODE_STRING" + }, + { + "name": "SourceString", + "type": "PCANSI_STRING" + }, + { + "name": "AllocateDestinationString", + "type": "BOOLEAN" + } + ], + "RtlUnicodeStringToAnsiString": [ + { + "name": "DestinationString", + "type": "PANSI_STRING" + }, + { + "name": "SourceString", + "type": "PCUNICODE_STRING" + }, + { + "name": "AllocateDestinationString", + "type": "BOOLEAN" + } + ], + "RtlUnicodeStringToOemString": [ + { + "name": "DestinationString", + "type": "POEM_STRING" + }, + { + "name": "SourceString", + "type": "PCUNICODE_STRING" + }, + { + "name": "AllocateDestinationString", + "type": "BOOLEAN" + } + ], + "RtlUnicodeToMultiByteSize": [ + { + "name": "BytesInMultiByteString", + "type": "PULONG" + }, + { + "name": "UnicodeString", + "type": "PWCH" + }, + { + "name": "BytesInUnicodeString", + "type": "ULONG" + } + ], + "RtlCharToInteger": [ + { + "name": "String", + "type": "PCSZ" + }, + { + "name": "Base", + "type": "ULONG" + }, + { + "name": "Value", + "type": "PULONG" + } + ], + "RtlConvertSidToUnicodeString": [ + { + "name": "UnicodeString", + "type": "PUNICODE_STRING" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "AllocateDestinationString", + "type": "BOOLEAN" + } + ], + "RtlUniform": [ + { + "name": "Seed", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wintrust.json b/qiling/extensions/windows_sdk/wintrust.json new file mode 100644 index 000000000..402578b27 --- /dev/null +++ b/qiling/extensions/windows_sdk/wintrust.json @@ -0,0 +1,138 @@ +{ + "WinVerifyTrust": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pgActionID", + "type": "GUID" + }, + { + "name": "pWVTData", + "type": "LPVOID" + } + ], + "WinVerifyTrustEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pgActionID", + "type": "GUID" + }, + { + "name": "pWinTrustData", + "type": "WINTRUST_DATA" + } + ], + "WintrustGetRegPolicyFlags": [ + { + "name": "pdwPolicyFlags", + "type": "DWORD" + } + ], + "WintrustSetRegPolicyFlags": [ + { + "name": "dwPolicyFlags", + "type": "DWORD" + } + ], + "WintrustAddActionID": [ + { + "name": "pgActionID", + "type": "GUID" + }, + { + "name": "fdwFlags", + "type": "DWORD" + }, + { + "name": "psProvInfo", + "type": "CRYPT_REGISTER_ACTIONID" + } + ], + "WintrustRemoveActionID": [ + { + "name": "pgActionID", + "type": "GUID" + } + ], + "WintrustLoadFunctionPointers": [ + { + "name": "pgActionID", + "type": "GUID" + }, + { + "name": "pPfns", + "type": "CRYPT_PROVIDER_FUNCTIONS" + } + ], + "WintrustAddDefaultForUsage": [ + { + "name": "pszUsageOID", + "type": "char" + }, + { + "name": "psDefUsage", + "type": "CRYPT_PROVIDER_REGDEFUSAGE" + } + ], + "WintrustGetDefaultForUsage": [ + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "pszUsageOID", + "type": "char" + }, + { + "name": "psUsage", + "type": "CRYPT_PROVIDER_DEFUSAGE" + } + ], + "WTHelperCertIsSelfSigned": [ + { + "name": "dwEncoding", + "type": "DWORD" + }, + { + "name": "pCert", + "type": "CERT_INFO" + } + ], + "WTHelperCertCheckValidSignature": [ + { + "name": "pProvData", + "type": "CRYPT_PROVIDER_DATA" + } + ], + "OpenPersonalTrustDBDialogEx": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "OpenPersonalTrustDBDialog": [ + { + "name": "hwndParent", + "type": "HWND" + } + ], + "WintrustSetDefaultIncludePEPageHashes": [ + { + "name": "fIncludePEPageHashes", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winusb.json b/qiling/extensions/windows_sdk/winusb.json new file mode 100644 index 000000000..03dd301ab --- /dev/null +++ b/qiling/extensions/windows_sdk/winusb.json @@ -0,0 +1,542 @@ +{ + "WinUsb_Initialize": [ + { + "name": "DeviceHandle", + "type": "HANDLE" + }, + { + "name": "InterfaceHandle", + "type": "PWINUSB_INTERFACE_HANDLE" + } + ], + "WinUsb_Free": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + } + ], + "WinUsb_GetAssociatedInterface": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "AssociatedInterfaceIndex", + "type": "UCHAR" + }, + { + "name": "AssociatedInterfaceHandle", + "type": "PWINUSB_INTERFACE_HANDLE" + } + ], + "WinUsb_GetDescriptor": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "DescriptorType", + "type": "UCHAR" + }, + { + "name": "Index", + "type": "UCHAR" + }, + { + "name": "LanguageID", + "type": "USHORT" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferLength", + "type": "ULONG" + }, + { + "name": "LengthTransferred", + "type": "PULONG" + } + ], + "WinUsb_QueryInterfaceSettings": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "AlternateInterfaceNumber", + "type": "UCHAR" + }, + { + "name": "UsbAltInterfaceDescriptor", + "type": "PUSB_INTERFACE_DESCRIPTOR" + } + ], + "WinUsb_QueryDeviceInformation": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "InformationType", + "type": "ULONG" + }, + { + "name": "BufferLength", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "WinUsb_SetCurrentAlternateSetting": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "SettingNumber", + "type": "UCHAR" + } + ], + "WinUsb_GetCurrentAlternateSetting": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "SettingNumber", + "type": "PUCHAR" + } + ], + "WinUsb_QueryPipe": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "AlternateInterfaceNumber", + "type": "UCHAR" + }, + { + "name": "PipeIndex", + "type": "UCHAR" + }, + { + "name": "PipeInformation", + "type": "PWINUSB_PIPE_INFORMATION" + } + ], + "WinUsb_QueryPipeEx": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "AlternateSettingNumber", + "type": "UCHAR" + }, + { + "name": "PipeIndex", + "type": "UCHAR" + }, + { + "name": "PipeInformationEx", + "type": "PWINUSB_PIPE_INFORMATION_EX" + } + ], + "WinUsb_SetPipePolicy": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + }, + { + "name": "PolicyType", + "type": "ULONG" + }, + { + "name": "ValueLength", + "type": "ULONG" + }, + { + "name": "Value", + "type": "PVOID" + } + ], + "WinUsb_GetPipePolicy": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + }, + { + "name": "PolicyType", + "type": "ULONG" + }, + { + "name": "ValueLength", + "type": "PULONG" + }, + { + "name": "Value", + "type": "PVOID" + } + ], + "WinUsb_ReadPipe": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferLength", + "type": "ULONG" + }, + { + "name": "LengthTransferred", + "type": "PULONG" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_WritePipe": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferLength", + "type": "ULONG" + }, + { + "name": "LengthTransferred", + "type": "PULONG" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_ControlTransfer": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "SetupPacket", + "type": "WINUSB_SETUP_PACKET" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferLength", + "type": "ULONG" + }, + { + "name": "LengthTransferred", + "type": "PULONG" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_ResetPipe": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + } + ], + "WinUsb_AbortPipe": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + } + ], + "WinUsb_FlushPipe": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + } + ], + "WinUsb_SetPowerPolicy": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PolicyType", + "type": "ULONG" + }, + { + "name": "ValueLength", + "type": "ULONG" + }, + { + "name": "Value", + "type": "PVOID" + } + ], + "WinUsb_GetPowerPolicy": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PolicyType", + "type": "ULONG" + }, + { + "name": "ValueLength", + "type": "PULONG" + }, + { + "name": "Value", + "type": "PVOID" + } + ], + "WinUsb_GetOverlappedResult": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpNumberOfBytesTransferred", + "type": "LPDWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WinUsb_GetCurrentFrameNumber": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "CurrentFrameNumber", + "type": "PULONG" + }, + { + "name": "TimeStamp", + "type": "LARGE_INTEGER" + } + ], + "WinUsb_GetAdjustedFrameNumber": [ + { + "name": "CurrentFrameNumber", + "type": "PULONG" + }, + { + "name": "TimeStamp", + "type": "LARGE_INTEGER" + } + ], + "WinUsb_RegisterIsochBuffer": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "PipeID", + "type": "UCHAR" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferLength", + "type": "ULONG" + }, + { + "name": "IsochBufferHandle", + "type": "PWINUSB_ISOCH_BUFFER_HANDLE" + } + ], + "WinUsb_UnregisterIsochBuffer": [ + { + "name": "IsochBufferHandle", + "type": "WINUSB_ISOCH_BUFFER_HANDLE" + } + ], + "WinUsb_WriteIsochPipe": [ + { + "name": "BufferHandle", + "type": "WINUSB_ISOCH_BUFFER_HANDLE" + }, + { + "name": "Offset", + "type": "ULONG" + }, + { + "name": "Length", + "type": "ULONG" + }, + { + "name": "FrameNumber", + "type": "PULONG" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_ReadIsochPipe": [ + { + "name": "BufferHandle", + "type": "WINUSB_ISOCH_BUFFER_HANDLE" + }, + { + "name": "Offset", + "type": "ULONG" + }, + { + "name": "Length", + "type": "ULONG" + }, + { + "name": "FrameNumber", + "type": "PULONG" + }, + { + "name": "NumberOfPackets", + "type": "ULONG" + }, + { + "name": "IsoPacketDescriptors", + "type": "PUSBD_ISO_PACKET_DESCRIPTOR" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_WriteIsochPipeAsap": [ + { + "name": "BufferHandle", + "type": "WINUSB_ISOCH_BUFFER_HANDLE" + }, + { + "name": "Offset", + "type": "ULONG" + }, + { + "name": "Length", + "type": "ULONG" + }, + { + "name": "ContinueStream", + "type": "BOOL" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_ReadIsochPipeAsap": [ + { + "name": "BufferHandle", + "type": "WINUSB_ISOCH_BUFFER_HANDLE" + }, + { + "name": "Offset", + "type": "ULONG" + }, + { + "name": "Length", + "type": "ULONG" + }, + { + "name": "ContinueStream", + "type": "BOOL" + }, + { + "name": "NumberOfPackets", + "type": "ULONG" + }, + { + "name": "IsoPacketDescriptors", + "type": "PUSBD_ISO_PACKET_DESCRIPTOR" + }, + { + "name": "Overlapped", + "type": "LPOVERLAPPED" + } + ], + "WinUsb_StartTrackingForTimeSync": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "StartTrackingInfo", + "type": "PUSB_START_TRACKING_FOR_TIME_SYNC_INFORMATION" + } + ], + "WinUsb_GetCurrentFrameNumberAndQpc": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "FrameQpcInfo", + "type": "PUSB_FRAME_NUMBER_AND_QPC_FOR_TIME_SYNC_INFORMATION" + } + ], + "WinUsb_StopTrackingForTimeSync": [ + { + "name": "InterfaceHandle", + "type": "WINUSB_INTERFACE_HANDLE" + }, + { + "name": "StopTrackingInfo", + "type": "PUSB_STOP_TRACKING_FOR_TIME_SYNC_INFORMATION" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winuser.json b/qiling/extensions/windows_sdk/winuser.json new file mode 100644 index 000000000..365e9667a --- /dev/null +++ b/qiling/extensions/windows_sdk/winuser.json @@ -0,0 +1,8974 @@ +{ + "LoadStringA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "uID", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "cchBufferMax", + "type": "int" + } + ], + "LoadStringW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "uID", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "cchBufferMax", + "type": "int" + } + ], + "wvsprintfA": [ + { + "name": "VOID", + "type": "LPSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wvsprintfW": [ + { + "name": "VOID", + "type": "LPWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wsprintfA": [ + { + "name": "VOID", + "type": "LPSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "wsprintfW": [ + { + "name": "VOID", + "type": "LPWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "LoadKeyboardLayoutA": [ + { + "name": "pwszKLID", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "LoadKeyboardLayoutW": [ + { + "name": "pwszKLID", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "ActivateKeyboardLayout": [ + { + "name": "hkl", + "type": "HKL" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "ToUnicodeEx": [ + { + "name": "wVirtKey", + "type": "UINT" + }, + { + "name": "wScanCode", + "type": "UINT" + }, + { + "name": "lpKeyState", + "type": "BYTE" + }, + { + "name": "pwszBuff", + "type": "LPWSTR" + }, + { + "name": "cchBuff", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "UnloadKeyboardLayout": [ + { + "name": "hkl", + "type": "HKL" + } + ], + "GetKeyboardLayoutNameA": [ + { + "name": "pwszKLID", + "type": "LPSTR" + } + ], + "GetKeyboardLayoutNameW": [ + { + "name": "pwszKLID", + "type": "LPWSTR" + } + ], + "GetKeyboardLayoutList": [ + { + "name": "nBuff", + "type": "int" + }, + { + "name": "lpList", + "type": "HKL" + } + ], + "GetKeyboardLayout": [ + { + "name": "idThread", + "type": "DWORD" + } + ], + "GetMouseMovePointsEx": [ + { + "name": "cbSize", + "type": "UINT" + }, + { + "name": "lppt", + "type": "LPMOUSEMOVEPOINT" + }, + { + "name": "lpptBuf", + "type": "LPMOUSEMOVEPOINT" + }, + { + "name": "nBufPoints", + "type": "int" + }, + { + "name": "resolution", + "type": "DWORD" + } + ], + "CreateDesktopA": [ + { + "name": "lpszDesktop", + "type": "LPCSTR" + }, + { + "name": "lpszDevice", + "type": "LPCSTR" + }, + { + "name": "pDevmode", + "type": "DEVMODEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDesktopW": [ + { + "name": "lpszDesktop", + "type": "LPCWSTR" + }, + { + "name": "lpszDevice", + "type": "LPCWSTR" + }, + { + "name": "pDevmode", + "type": "DEVMODEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDesktopExA": [ + { + "name": "lpszDesktop", + "type": "LPCSTR" + }, + { + "name": "lpszDevice", + "type": "LPCSTR" + }, + { + "name": "pDevmode", + "type": "DEVMODEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ulHeapSize", + "type": "ULONG" + }, + { + "name": "pvoid", + "type": "PVOID" + } + ], + "CreateDesktopExW": [ + { + "name": "lpszDesktop", + "type": "LPCWSTR" + }, + { + "name": "lpszDevice", + "type": "LPCWSTR" + }, + { + "name": "pDevmode", + "type": "DEVMODEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ulHeapSize", + "type": "ULONG" + }, + { + "name": "pvoid", + "type": "PVOID" + } + ], + "OpenDesktopA": [ + { + "name": "lpszDesktop", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "OpenDesktopW": [ + { + "name": "lpszDesktop", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "OpenInputDesktop": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "EnumDesktopsA": [ + { + "name": "hwinsta", + "type": "HWINSTA" + }, + { + "name": "lpEnumFunc", + "type": "DESKTOPENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumDesktopsW": [ + { + "name": "hwinsta", + "type": "HWINSTA" + }, + { + "name": "lpEnumFunc", + "type": "DESKTOPENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumDesktopWindows": [ + { + "name": "hDesktop", + "type": "HDESK" + }, + { + "name": "lpfn", + "type": "WNDENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SwitchDesktop": [ + { + "name": "hDesktop", + "type": "HDESK" + } + ], + "SetThreadDesktop": [ + { + "name": "hDesktop", + "type": "HDESK" + } + ], + "CloseDesktop": [ + { + "name": "hDesktop", + "type": "HDESK" + } + ], + "GetThreadDesktop": [ + { + "name": "dwThreadId", + "type": "DWORD" + } + ], + "CreateWindowStationA": [ + { + "name": "lpwinsta", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateWindowStationW": [ + { + "name": "lpwinsta", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "OpenWindowStationA": [ + { + "name": "lpszWinSta", + "type": "LPCSTR" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "OpenWindowStationW": [ + { + "name": "lpszWinSta", + "type": "LPCWSTR" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "EnumWindowStationsA": [ + { + "name": "lpEnumFunc", + "type": "WINSTAENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumWindowStationsW": [ + { + "name": "lpEnumFunc", + "type": "WINSTAENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CloseWindowStation": [ + { + "name": "hWinSta", + "type": "HWINSTA" + } + ], + "SetProcessWindowStation": [ + { + "name": "hWinSta", + "type": "HWINSTA" + } + ], + "GetProcessWindowStation": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetUserObjectSecurity": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "pSIRequested", + "type": "PSECURITY_INFORMATION" + }, + { + "name": "pSID", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetUserObjectSecurity": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "pSIRequested", + "type": "PSECURITY_INFORMATION" + }, + { + "name": "pSID", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "GetUserObjectInformationA": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "pvInfo", + "type": "PVOID" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "GetUserObjectInformationW": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "pvInfo", + "type": "PVOID" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "SetUserObjectInformationA": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "pvInfo", + "type": "PVOID" + }, + { + "name": "nLength", + "type": "DWORD" + } + ], + "SetUserObjectInformationW": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "pvInfo", + "type": "PVOID" + }, + { + "name": "nLength", + "type": "DWORD" + } + ], + "IsHungAppWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DisableProcessWindowsGhosting": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterWindowMessageA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "RegisterWindowMessageW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "TrackMouseEvent": [ + { + "name": "lpEventTrack", + "type": "LPTRACKMOUSEEVENT" + } + ], + "DrawEdge": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "qrc", + "type": "LPRECT" + }, + { + "name": "edge", + "type": "UINT" + }, + { + "name": "grfFlags", + "type": "UINT" + } + ], + "DrawFrameControl": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "LPRECT" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "UINT" + } + ], + "DrawCaption": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "DrawAnimatedRects": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idAni", + "type": "int" + }, + { + "name": "lprcFrom", + "type": "RECT" + }, + { + "name": "lprcTo", + "type": "RECT" + } + ], + "GetMessageA": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsgFilterMin", + "type": "UINT" + }, + { + "name": "wMsgFilterMax", + "type": "UINT" + } + ], + "GetMessageW": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsgFilterMin", + "type": "UINT" + }, + { + "name": "wMsgFilterMax", + "type": "UINT" + } + ], + "TranslateMessage": [ + { + "name": "lpMsg", + "type": "MSG" + } + ], + "DispatchMessageA": [ + { + "name": "lpMsg", + "type": "MSG" + } + ], + "DispatchMessageW": [ + { + "name": "lpMsg", + "type": "MSG" + } + ], + "PeekMessageA": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsgFilterMin", + "type": "UINT" + }, + { + "name": "wMsgFilterMax", + "type": "UINT" + }, + { + "name": "wRemoveMsg", + "type": "UINT" + } + ], + "PeekMessageW": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsgFilterMin", + "type": "UINT" + }, + { + "name": "wMsgFilterMax", + "type": "UINT" + }, + { + "name": "wRemoveMsg", + "type": "UINT" + } + ], + "RegisterHotKey": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + }, + { + "name": "fsModifiers", + "type": "UINT" + }, + { + "name": "vk", + "type": "UINT" + } + ], + "UnregisterHotKey": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + } + ], + "ExitWindowsEx": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "SwapMouseButton": [ + { + "name": "fSwap", + "type": "BOOL" + } + ], + "GetMessagePos": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetMessageTime": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetMessageExtraInfo": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetUnpredictedMessagePos": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsWow64Message": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetMessageExtraInfo": [ + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendMessageA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendMessageW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendMessageTimeoutA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "fuFlags", + "type": "UINT" + }, + { + "name": "uTimeout", + "type": "UINT" + }, + { + "name": "lpdwResult", + "type": "PDWORD_PTR" + } + ], + "SendMessageTimeoutW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "fuFlags", + "type": "UINT" + }, + { + "name": "uTimeout", + "type": "UINT" + }, + { + "name": "lpdwResult", + "type": "PDWORD_PTR" + } + ], + "SendNotifyMessageA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendNotifyMessageW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendMessageCallbackA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "lpResultCallBack", + "type": "SENDASYNCPROC" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "SendMessageCallbackW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "lpResultCallBack", + "type": "SENDASYNCPROC" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "BroadcastSystemMessageExA": [ + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPDWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "pbsmInfo", + "type": "PBSMINFO" + } + ], + "BroadcastSystemMessageExW": [ + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPDWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "pbsmInfo", + "type": "PBSMINFO" + } + ], + "BroadcastSystemMessageW": [ + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPDWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "RegisterDeviceNotificationA": [ + { + "name": "hRecipient", + "type": "HANDLE" + }, + { + "name": "NotificationFilter", + "type": "LPVOID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "RegisterDeviceNotificationW": [ + { + "name": "hRecipient", + "type": "HANDLE" + }, + { + "name": "NotificationFilter", + "type": "LPVOID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "UnregisterDeviceNotification": [ + { + "name": "Handle", + "type": "HDEVNOTIFY" + } + ], + "RegisterPowerSettingNotification": [ + { + "name": "hRecipient", + "type": "HANDLE" + }, + { + "name": "PowerSettingGuid", + "type": "LPCGUID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "UnregisterPowerSettingNotification": [ + { + "name": "Handle", + "type": "HPOWERNOTIFY" + } + ], + "RegisterSuspendResumeNotification": [ + { + "name": "hRecipient", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "UnregisterSuspendResumeNotification": [ + { + "name": "Handle", + "type": "HPOWERNOTIFY" + } + ], + "PostMessageA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "PostMessageW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "PostThreadMessageA": [ + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "PostThreadMessageW": [ + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "AttachThreadInput": [ + { + "name": "idAttach", + "type": "DWORD" + }, + { + "name": "idAttachTo", + "type": "DWORD" + }, + { + "name": "fAttach", + "type": "BOOL" + } + ], + "ReplyMessage": [ + { + "name": "lResult", + "type": "LRESULT" + } + ], + "WaitMessage": [ + { + "name": "VOID", + "type": "void" + } + ], + "WaitForInputIdle": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "DefWindowProcA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefWindowProcW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "PostQuitMessage": [ + { + "name": "nExitCode", + "type": "int" + } + ], + "CallWindowProcA": [ + { + "name": "lpPrevWndFunc", + "type": "WNDPROC" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CallWindowProcW": [ + { + "name": "lpPrevWndFunc", + "type": "WNDPROC" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "InSendMessage": [ + { + "name": "VOID", + "type": "void" + } + ], + "InSendMessageEx": [ + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "GetDoubleClickTime": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetDoubleClickTime": [ + { + "name": "VOID", + "type": "UINT" + } + ], + "RegisterClassA": [ + { + "name": "lpWndClass", + "type": "WNDCLASSA" + } + ], + "RegisterClassW": [ + { + "name": "lpWndClass", + "type": "WNDCLASSW" + } + ], + "UnregisterClassA": [ + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + } + ], + "UnregisterClassW": [ + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + } + ], + "GetClassInfoA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "lpWndClass", + "type": "LPWNDCLASSA" + } + ], + "GetClassInfoW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "lpWndClass", + "type": "LPWNDCLASSW" + } + ], + "RegisterClassExA": [ + { + "name": "VOID", + "type": "WNDCLASSEXA" + } + ], + "RegisterClassExW": [ + { + "name": "VOID", + "type": "WNDCLASSEXW" + } + ], + "GetClassInfoExA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpszClass", + "type": "LPCSTR" + }, + { + "name": "lpwcx", + "type": "LPWNDCLASSEXA" + } + ], + "GetClassInfoExW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpszClass", + "type": "LPCWSTR" + }, + { + "name": "lpwcx", + "type": "LPWNDCLASSEXW" + } + ], + "CreateWindowExA": [ + { + "name": "dwExStyle", + "type": "DWORD" + }, + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "lpWindowName", + "type": "LPCSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpParam", + "type": "LPVOID" + } + ], + "CreateWindowExW": [ + { + "name": "dwExStyle", + "type": "DWORD" + }, + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "lpWindowName", + "type": "LPCWSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpParam", + "type": "LPVOID" + } + ], + "IsWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "IsMenu": [ + { + "name": "hMenu", + "type": "HMENU" + } + ], + "IsChild": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hWnd", + "type": "HWND" + } + ], + "DestroyWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "ShowWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nCmdShow", + "type": "int" + } + ], + "AnimateWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dwTime", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UpdateLayeredWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hdcDst", + "type": "HDC" + }, + { + "name": "pptDst", + "type": "POINT" + }, + { + "name": "psize", + "type": "SIZE" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "pptSrc", + "type": "POINT" + }, + { + "name": "crKey", + "type": "COLORREF" + }, + { + "name": "pblend", + "type": "BLENDFUNCTION" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetLayeredWindowAttributes": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pcrKey", + "type": "COLORREF" + }, + { + "name": "pbAlpha", + "type": "BYTE" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "PrintWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdcBlt", + "type": "HDC" + }, + { + "name": "nFlags", + "type": "UINT" + } + ], + "SetLayeredWindowAttributes": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "crKey", + "type": "COLORREF" + }, + { + "name": "bAlpha", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ShowWindowAsync": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nCmdShow", + "type": "int" + } + ], + "FlashWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "bInvert", + "type": "BOOL" + } + ], + "FlashWindowEx": [ + { + "name": "pfwi", + "type": "PFLASHWINFO" + } + ], + "ShowOwnedPopups": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "fShow", + "type": "BOOL" + } + ], + "OpenIcon": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "CloseWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "MoveWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "bRepaint", + "type": "BOOL" + } + ], + "SetWindowPos": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hWndInsertAfter", + "type": "HWND" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "GetWindowPlacement": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpwndpl", + "type": "WINDOWPLACEMENT" + } + ], + "SetWindowPlacement": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpwndpl", + "type": "WINDOWPLACEMENT" + } + ], + "GetWindowDisplayAffinity": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pdwAffinity", + "type": "DWORD" + } + ], + "SetWindowDisplayAffinity": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dwAffinity", + "type": "DWORD" + } + ], + "BeginDeferWindowPos": [ + { + "name": "nNumWindows", + "type": "int" + } + ], + "DeferWindowPos": [ + { + "name": "hWinPosInfo", + "type": "HDWP" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hWndInsertAfter", + "type": "HWND" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "EndDeferWindowPos": [ + { + "name": "hWinPosInfo", + "type": "HDWP" + } + ], + "IsWindowVisible": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "IsIconic": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "AnyPopup": [ + { + "name": "VOID", + "type": "void" + } + ], + "BringWindowToTop": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "IsZoomed": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "CreateDialogParamA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplateName", + "type": "LPCSTR" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "CreateDialogParamW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplateName", + "type": "LPCWSTR" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "CreateDialogIndirectParamA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplate", + "type": "LPCDLGTEMPLATEA" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "CreateDialogIndirectParamW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplate", + "type": "LPCDLGTEMPLATEW" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "DialogBoxParamA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplateName", + "type": "LPCSTR" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "DialogBoxParamW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplateName", + "type": "LPCWSTR" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "DialogBoxIndirectParamA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "hDialogTemplate", + "type": "LPCDLGTEMPLATEA" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "DialogBoxIndirectParamW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "hDialogTemplate", + "type": "LPCDLGTEMPLATEW" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "EndDialog": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nResult", + "type": "INT_PTR" + } + ], + "GetDlgItem": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + } + ], + "SetDlgItemInt": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "uValue", + "type": "UINT" + }, + { + "name": "bSigned", + "type": "BOOL" + } + ], + "GetDlgItemInt": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpTranslated", + "type": "BOOL" + }, + { + "name": "bSigned", + "type": "BOOL" + } + ], + "SetDlgItemTextA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "SetDlgItemTextW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetDlgItemTextA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "GetDlgItemTextW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "CheckDlgButton": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDButton", + "type": "int" + }, + { + "name": "uCheck", + "type": "UINT" + } + ], + "CheckRadioButton": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDFirstButton", + "type": "int" + }, + { + "name": "nIDLastButton", + "type": "int" + }, + { + "name": "nIDCheckButton", + "type": "int" + } + ], + "IsDlgButtonChecked": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDButton", + "type": "int" + } + ], + "SendDlgItemMessageA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendDlgItemMessageW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "GetNextDlgGroupItem": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "hCtl", + "type": "HWND" + }, + { + "name": "bPrevious", + "type": "BOOL" + } + ], + "GetNextDlgTabItem": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "hCtl", + "type": "HWND" + }, + { + "name": "bPrevious", + "type": "BOOL" + } + ], + "GetDlgCtrlID": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetDialogBaseUnits": [ + { + "name": "VOID", + "type": "void" + } + ], + "DefDlgProcW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "GetDialogControlDpiChangeBehavior": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetDialogDpiChangeBehavior": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "mask", + "type": "DIALOG_DPI_CHANGE_BEHAVIORS" + }, + { + "name": "values", + "type": "DIALOG_DPI_CHANGE_BEHAVIORS" + } + ], + "GetDialogDpiChangeBehavior": [ + { + "name": "hDlg", + "type": "HWND" + } + ], + "CallMsgFilterA": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "nCode", + "type": "int" + } + ], + "CallMsgFilterW": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "nCode", + "type": "int" + } + ], + "OpenClipboard": [ + { + "name": "hWndNewOwner", + "type": "HWND" + } + ], + "CloseClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetClipboardSequenceNumber": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetClipboardOwner": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetClipboardViewer": [ + { + "name": "hWndNewViewer", + "type": "HWND" + } + ], + "GetClipboardViewer": [ + { + "name": "VOID", + "type": "void" + } + ], + "ChangeClipboardChain": [ + { + "name": "hWndRemove", + "type": "HWND" + }, + { + "name": "hWndNewNext", + "type": "HWND" + } + ], + "SetClipboardData": [ + { + "name": "uFormat", + "type": "UINT" + }, + { + "name": "hMem", + "type": "HANDLE" + } + ], + "GetClipboardData": [ + { + "name": "uFormat", + "type": "UINT" + } + ], + "RegisterClipboardFormatA": [ + { + "name": "lpszFormat", + "type": "LPCSTR" + } + ], + "RegisterClipboardFormatW": [ + { + "name": "lpszFormat", + "type": "LPCWSTR" + } + ], + "CountClipboardFormats": [ + { + "name": "VOID", + "type": "void" + } + ], + "EnumClipboardFormats": [ + { + "name": "format", + "type": "UINT" + } + ], + "GetClipboardFormatNameA": [ + { + "name": "format", + "type": "UINT" + }, + { + "name": "lpszFormatName", + "type": "LPSTR" + }, + { + "name": "cchMaxCount", + "type": "int" + } + ], + "GetClipboardFormatNameW": [ + { + "name": "format", + "type": "UINT" + }, + { + "name": "lpszFormatName", + "type": "LPWSTR" + }, + { + "name": "cchMaxCount", + "type": "int" + } + ], + "EmptyClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsClipboardFormatAvailable": [ + { + "name": "format", + "type": "UINT" + } + ], + "GetPriorityClipboardFormat": [ + { + "name": "paFormatPriorityList", + "type": "UINT" + }, + { + "name": "cFormats", + "type": "int" + } + ], + "GetOpenClipboardWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "AddClipboardFormatListener": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "RemoveClipboardFormatListener": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetUpdatedClipboardFormats": [ + { + "name": "lpuiFormats", + "type": "PUINT" + }, + { + "name": "cFormats", + "type": "UINT" + }, + { + "name": "pcFormatsOut", + "type": "PUINT" + } + ], + "CharToOemA": [ + { + "name": "pSrc", + "type": "LPCSTR" + }, + { + "name": "pDst", + "type": "LPSTR" + } + ], + "CharToOemW": [ + { + "name": "pSrc", + "type": "LPCWSTR" + }, + { + "name": "pDst", + "type": "LPSTR" + } + ], + "OemToCharA": [ + { + "name": "pSrc", + "type": "LPCSTR" + }, + { + "name": "pDst", + "type": "LPSTR" + } + ], + "OemToCharW": [ + { + "name": "pSrc", + "type": "LPCSTR" + }, + { + "name": "pDst", + "type": "LPWSTR" + } + ], + "CharToOemBuffA": [ + { + "name": "lpszSrc", + "type": "LPCSTR" + }, + { + "name": "lpszDst", + "type": "LPSTR" + }, + { + "name": "cchDstLength", + "type": "DWORD" + } + ], + "CharToOemBuffW": [ + { + "name": "lpszSrc", + "type": "LPCWSTR" + }, + { + "name": "lpszDst", + "type": "LPSTR" + }, + { + "name": "cchDstLength", + "type": "DWORD" + } + ], + "OemToCharBuffA": [ + { + "name": "lpszSrc", + "type": "LPCSTR" + }, + { + "name": "lpszDst", + "type": "LPSTR" + }, + { + "name": "cchDstLength", + "type": "DWORD" + } + ], + "OemToCharBuffW": [ + { + "name": "lpszSrc", + "type": "LPCSTR" + }, + { + "name": "lpszDst", + "type": "LPWSTR" + }, + { + "name": "cchDstLength", + "type": "DWORD" + } + ], + "CharUpperA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "CharUpperW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "CharUpperBuffA": [ + { + "name": "lpsz", + "type": "LPSTR" + }, + { + "name": "cchLength", + "type": "DWORD" + } + ], + "CharUpperBuffW": [ + { + "name": "lpsz", + "type": "LPWSTR" + }, + { + "name": "cchLength", + "type": "DWORD" + } + ], + "CharLowerA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "CharLowerW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "CharLowerBuffA": [ + { + "name": "lpsz", + "type": "LPSTR" + }, + { + "name": "cchLength", + "type": "DWORD" + } + ], + "CharLowerBuffW": [ + { + "name": "lpsz", + "type": "LPWSTR" + }, + { + "name": "cchLength", + "type": "DWORD" + } + ], + "CharNextA": [ + { + "name": "lpsz", + "type": "LPCSTR" + } + ], + "CharNextW": [ + { + "name": "lpsz", + "type": "LPCWSTR" + } + ], + "CharPrevA": [ + { + "name": "lpszStart", + "type": "LPCSTR" + }, + { + "name": "lpszCurrent", + "type": "LPCSTR" + } + ], + "CharPrevW": [ + { + "name": "lpszStart", + "type": "LPCWSTR" + }, + { + "name": "lpszCurrent", + "type": "LPCWSTR" + } + ], + "CharNextExA": [ + { + "name": "CodePage", + "type": "WORD" + }, + { + "name": "lpCurrentChar", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CharPrevExA": [ + { + "name": "CodePage", + "type": "WORD" + }, + { + "name": "lpStart", + "type": "LPCSTR" + }, + { + "name": "lpCurrentChar", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "IsCharAlphaA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "IsCharAlphaW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "IsCharAlphaNumericA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "IsCharAlphaNumericW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "IsCharUpperA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "IsCharUpperW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "IsCharLowerA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "IsCharLowerW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "SetFocus": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetActiveWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetFocus": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetKBCodePage": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetKeyState": [ + { + "name": "nVirtKey", + "type": "int" + } + ], + "GetAsyncKeyState": [ + { + "name": "vKey", + "type": "int" + } + ], + "GetKeyboardState": [ + { + "name": "lpKeyState", + "type": "PBYTE" + } + ], + "SetKeyboardState": [ + { + "name": "lpKeyState", + "type": "LPBYTE" + } + ], + "GetKeyNameTextA": [ + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "cchSize", + "type": "int" + } + ], + "GetKeyNameTextW": [ + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "cchSize", + "type": "int" + } + ], + "GetKeyboardType": [ + { + "name": "nTypeFlag", + "type": "int" + } + ], + "ToAscii": [ + { + "name": "uVirtKey", + "type": "UINT" + }, + { + "name": "uScanCode", + "type": "UINT" + }, + { + "name": "lpKeyState", + "type": "BYTE" + }, + { + "name": "lpChar", + "type": "LPWORD" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "ToAsciiEx": [ + { + "name": "uVirtKey", + "type": "UINT" + }, + { + "name": "uScanCode", + "type": "UINT" + }, + { + "name": "lpKeyState", + "type": "BYTE" + }, + { + "name": "lpChar", + "type": "LPWORD" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "ToUnicode": [ + { + "name": "wVirtKey", + "type": "UINT" + }, + { + "name": "wScanCode", + "type": "UINT" + }, + { + "name": "lpKeyState", + "type": "BYTE" + }, + { + "name": "pwszBuff", + "type": "LPWSTR" + }, + { + "name": "cchBuff", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "OemKeyScan": [ + { + "name": "wOemChar", + "type": "WORD" + } + ], + "VkKeyScanA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "VkKeyScanW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "VkKeyScanExA": [ + { + "name": "ch", + "type": "CHAR" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "VkKeyScanExW": [ + { + "name": "ch", + "type": "WCHAR" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "keybd_event": [ + { + "name": "bVk", + "type": "BYTE" + }, + { + "name": "bScan", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwExtraInfo", + "type": "ULONG_PTR" + } + ], + "mouse_event": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dx", + "type": "DWORD" + }, + { + "name": "dy", + "type": "DWORD" + }, + { + "name": "dwData", + "type": "DWORD" + }, + { + "name": "dwExtraInfo", + "type": "ULONG_PTR" + } + ], + "SendInput": [ + { + "name": "cInputs", + "type": "UINT" + }, + { + "name": "pInputs", + "type": "LPINPUT" + }, + { + "name": "cbSize", + "type": "int" + } + ], + "GetTouchInputInfo": [ + { + "name": "hTouchInput", + "type": "HTOUCHINPUT" + }, + { + "name": "cInputs", + "type": "UINT" + }, + { + "name": "pInputs", + "type": "PTOUCHINPUT" + }, + { + "name": "cbSize", + "type": "int" + } + ], + "CloseTouchInputHandle": [ + { + "name": "hTouchInput", + "type": "HTOUCHINPUT" + } + ], + "RegisterTouchWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "UnregisterTouchWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "IsTouchWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pulFlags", + "type": "PULONG" + } + ], + "InitializeTouchInjection": [ + { + "name": "maxCount", + "type": "UINT32" + }, + { + "name": "dwMode", + "type": "DWORD" + } + ], + "InjectTouchInput": [ + { + "name": "count", + "type": "UINT32" + }, + { + "name": "contacts", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerType": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + } + ], + "GetPointerCursorId": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "cursorId", + "type": "UINT32" + } + ], + "GetPointerInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "GetPointerInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "GetPointerFrameInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "GetPointerFrameInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "GetPointerTouchInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "touchInfo", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerTouchInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "touchInfo", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerFrameTouchInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "touchInfo", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerFrameTouchInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "touchInfo", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerPenInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "penInfo", + "type": "POINTER_PEN_INFO" + } + ], + "GetPointerPenInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "penInfo", + "type": "POINTER_PEN_INFO" + } + ], + "GetPointerFramePenInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "penInfo", + "type": "POINTER_PEN_INFO" + } + ], + "GetPointerFramePenInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "penInfo", + "type": "POINTER_PEN_INFO" + } + ], + "SkipPointerFrameMessages": [ + { + "name": "pointerId", + "type": "UINT32" + } + ], + "RegisterPointerInputTarget": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + } + ], + "UnregisterPointerInputTarget": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + } + ], + "RegisterPointerInputTargetEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + }, + { + "name": "fObserve", + "type": "BOOL" + } + ], + "UnregisterPointerInputTargetEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + } + ], + "CreateSyntheticPointerDevice": [ + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + }, + { + "name": "maxCount", + "type": "ULONG" + }, + { + "name": "mode", + "type": "POINTER_FEEDBACK_MODE" + } + ], + "InjectSyntheticPointerInput": [ + { + "name": "device", + "type": "HSYNTHETICPOINTERDEVICE" + }, + { + "name": "pointerInfo", + "type": "POINTER_TYPE_INFO" + }, + { + "name": "count", + "type": "UINT32" + } + ], + "DestroySyntheticPointerDevice": [ + { + "name": "device", + "type": "HSYNTHETICPOINTERDEVICE" + } + ], + "EnableMouseInPointer": [ + { + "name": "fEnable", + "type": "BOOL" + } + ], + "IsMouseInPointerEnabled": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterTouchHitTestingWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "value", + "type": "ULONG" + } + ], + "EvaluateProximityToRect": [ + { + "name": "controlBoundingBox", + "type": "RECT" + }, + { + "name": "pHitTestingInput", + "type": "TOUCH_HIT_TESTING_INPUT" + }, + { + "name": "pProximityEval", + "type": "TOUCH_HIT_TESTING_PROXIMITY_EVALUATION" + } + ], + "EvaluateProximityToPolygon": [ + { + "name": "numVertices", + "type": "UINT32" + }, + { + "name": "controlPolygon", + "type": "POINT" + }, + { + "name": "pHitTestingInput", + "type": "TOUCH_HIT_TESTING_INPUT" + }, + { + "name": "pProximityEval", + "type": "TOUCH_HIT_TESTING_PROXIMITY_EVALUATION" + } + ], + "PackTouchHitTestingProximityEvaluation": [ + { + "name": "pHitTestingInput", + "type": "TOUCH_HIT_TESTING_INPUT" + }, + { + "name": "pProximityEval", + "type": "TOUCH_HIT_TESTING_PROXIMITY_EVALUATION" + } + ], + "GetWindowFeedbackSetting": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "feedback", + "type": "FEEDBACK_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pSize", + "type": "UINT32" + }, + { + "name": "config", + "type": "void" + } + ], + "SetWindowFeedbackSetting": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "feedback", + "type": "FEEDBACK_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "size", + "type": "UINT32" + }, + { + "name": "configuration", + "type": "void" + } + ], + "GetPointerInputTransform": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "historyCount", + "type": "UINT32" + }, + { + "name": "inputTransform", + "type": "INPUT_TRANSFORM" + } + ], + "GetLastInputInfo": [ + { + "name": "plii", + "type": "PLASTINPUTINFO" + } + ], + "MapVirtualKeyA": [ + { + "name": "uCode", + "type": "UINT" + }, + { + "name": "uMapType", + "type": "UINT" + } + ], + "MapVirtualKeyW": [ + { + "name": "uCode", + "type": "UINT" + }, + { + "name": "uMapType", + "type": "UINT" + } + ], + "MapVirtualKeyExA": [ + { + "name": "uCode", + "type": "UINT" + }, + { + "name": "uMapType", + "type": "UINT" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "MapVirtualKeyExW": [ + { + "name": "uCode", + "type": "UINT" + }, + { + "name": "uMapType", + "type": "UINT" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "GetInputState": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetQueueStatus": [ + { + "name": "flags", + "type": "UINT" + } + ], + "GetCapture": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetCapture": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "ReleaseCapture": [ + { + "name": "VOID", + "type": "void" + } + ], + "MsgWaitForMultipleObjects": [ + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "pHandles", + "type": "HANDLE" + }, + { + "name": "fWaitAll", + "type": "BOOL" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "dwWakeMask", + "type": "DWORD" + } + ], + "MsgWaitForMultipleObjectsEx": [ + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "pHandles", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "dwWakeMask", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SetTimer": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIDEvent", + "type": "UINT_PTR" + }, + { + "name": "uElapse", + "type": "UINT" + }, + { + "name": "lpTimerFunc", + "type": "TIMERPROC" + } + ], + "SetCoalescableTimer": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIDEvent", + "type": "UINT_PTR" + }, + { + "name": "uElapse", + "type": "UINT" + }, + { + "name": "lpTimerFunc", + "type": "TIMERPROC" + }, + { + "name": "uToleranceDelay", + "type": "ULONG" + } + ], + "KillTimer": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uIDEvent", + "type": "UINT_PTR" + } + ], + "IsWindowUnicode": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "EnableWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "bEnable", + "type": "BOOL" + } + ], + "IsWindowEnabled": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "LoadAcceleratorsA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTableName", + "type": "LPCSTR" + } + ], + "LoadAcceleratorsW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTableName", + "type": "LPCWSTR" + } + ], + "CreateAcceleratorTableA": [ + { + "name": "paccel", + "type": "LPACCEL" + }, + { + "name": "cAccel", + "type": "int" + } + ], + "CreateAcceleratorTableW": [ + { + "name": "paccel", + "type": "LPACCEL" + }, + { + "name": "cAccel", + "type": "int" + } + ], + "DestroyAcceleratorTable": [ + { + "name": "hAccel", + "type": "HACCEL" + } + ], + "CopyAcceleratorTableA": [ + { + "name": "hAccelSrc", + "type": "HACCEL" + }, + { + "name": "lpAccelDst", + "type": "LPACCEL" + }, + { + "name": "cAccelEntries", + "type": "int" + } + ], + "CopyAcceleratorTableW": [ + { + "name": "hAccelSrc", + "type": "HACCEL" + }, + { + "name": "lpAccelDst", + "type": "LPACCEL" + }, + { + "name": "cAccelEntries", + "type": "int" + } + ], + "TranslateAcceleratorA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hAccTable", + "type": "HACCEL" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "TranslateAcceleratorW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hAccTable", + "type": "HACCEL" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "GetSystemMetrics": [ + { + "name": "nIndex", + "type": "int" + } + ], + "GetSystemMetricsForDpi": [ + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dpi", + "type": "UINT" + } + ], + "LoadMenuA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpMenuName", + "type": "LPCSTR" + } + ], + "LoadMenuW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpMenuName", + "type": "LPCWSTR" + } + ], + "LoadMenuIndirectA": [ + { + "name": "lpMenuTemplate", + "type": "MENUTEMPLATEA" + } + ], + "LoadMenuIndirectW": [ + { + "name": "lpMenuTemplate", + "type": "MENUTEMPLATEW" + } + ], + "GetMenu": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetMenu": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + } + ], + "HiliteMenuItem": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDHiliteItem", + "type": "UINT" + }, + { + "name": "uHilite", + "type": "UINT" + } + ], + "GetMenuStringA": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDItem", + "type": "UINT" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "cchMax", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetMenuStringW": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDItem", + "type": "UINT" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "cchMax", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetMenuState": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uId", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "DrawMenuBar": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetSystemMenu": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "bRevert", + "type": "BOOL" + } + ], + "CreateMenu": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreatePopupMenu": [ + { + "name": "VOID", + "type": "void" + } + ], + "DestroyMenu": [ + { + "name": "hMenu", + "type": "HMENU" + } + ], + "CheckMenuItem": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDCheckItem", + "type": "UINT" + }, + { + "name": "uCheck", + "type": "UINT" + } + ], + "EnableMenuItem": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDEnableItem", + "type": "UINT" + }, + { + "name": "uEnable", + "type": "UINT" + } + ], + "GetSubMenu": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "nPos", + "type": "int" + } + ], + "GetMenuItemID": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "nPos", + "type": "int" + } + ], + "GetMenuItemCount": [ + { + "name": "hMenu", + "type": "HMENU" + } + ], + "InsertMenuA": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCSTR" + } + ], + "InsertMenuW": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCWSTR" + } + ], + "AppendMenuA": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCSTR" + } + ], + "AppendMenuW": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCWSTR" + } + ], + "ModifyMenuA": [ + { + "name": "hMnu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCSTR" + } + ], + "ModifyMenuW": [ + { + "name": "hMnu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCWSTR" + } + ], + "RemoveMenu": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "DeleteMenu": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "SetMenuItemBitmaps": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "hBitmapUnchecked", + "type": "HBITMAP" + }, + { + "name": "hBitmapChecked", + "type": "HBITMAP" + } + ], + "GetMenuCheckMarkDimensions": [ + { + "name": "VOID", + "type": "void" + } + ], + "TrackPopupMenu": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nReserved", + "type": "int" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "prcRect", + "type": "RECT" + } + ], + "TrackPopupMenuEx": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "lptpm", + "type": "LPTPMPARAMS" + } + ], + "CalculatePopupWindowPosition": [ + { + "name": "anchorPoint", + "type": "POINT" + }, + { + "name": "windowSize", + "type": "SIZE" + }, + { + "name": "flags", + "type": "UINT" + }, + { + "name": "excludeRect", + "type": "RECT" + }, + { + "name": "popupWindowPosition", + "type": "RECT" + } + ], + "GetMenuInfo": [ + { + "name": "VOID", + "type": "HMENU" + }, + { + "name": "VOID", + "type": "LPMENUINFO" + } + ], + "SetMenuInfo": [ + { + "name": "VOID", + "type": "HMENU" + }, + { + "name": "VOID", + "type": "LPCMENUINFO" + } + ], + "EndMenu": [ + { + "name": "VOID", + "type": "void" + } + ], + "InsertMenuItemA": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPosition", + "type": "BOOL" + }, + { + "name": "lpmi", + "type": "LPCMENUITEMINFOA" + } + ], + "InsertMenuItemW": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPosition", + "type": "BOOL" + }, + { + "name": "lpmi", + "type": "LPCMENUITEMINFOW" + } + ], + "GetMenuItemInfoA": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPosition", + "type": "BOOL" + }, + { + "name": "lpmii", + "type": "LPMENUITEMINFOA" + } + ], + "GetMenuItemInfoW": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPosition", + "type": "BOOL" + }, + { + "name": "lpmii", + "type": "LPMENUITEMINFOW" + } + ], + "SetMenuItemInfoA": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPositon", + "type": "BOOL" + }, + { + "name": "lpmii", + "type": "LPCMENUITEMINFOA" + } + ], + "SetMenuItemInfoW": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPositon", + "type": "BOOL" + }, + { + "name": "lpmii", + "type": "LPCMENUITEMINFOW" + } + ], + "GetMenuDefaultItem": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "fByPos", + "type": "UINT" + }, + { + "name": "gmdiFlags", + "type": "UINT" + } + ], + "SetMenuDefaultItem": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uItem", + "type": "UINT" + }, + { + "name": "fByPos", + "type": "UINT" + } + ], + "GetMenuItemRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uItem", + "type": "UINT" + }, + { + "name": "lprcItem", + "type": "LPRECT" + } + ], + "MenuItemFromPoint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "ptScreen", + "type": "POINT" + } + ], + "DragDetect": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pt", + "type": "POINT" + } + ], + "DrawIcon": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], + "DrawTextA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpchText", + "type": "LPCSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "format", + "type": "UINT" + } + ], + "DrawTextW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpchText", + "type": "LPCWSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "format", + "type": "UINT" + } + ], + "DrawTextExA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpchText", + "type": "LPSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "format", + "type": "UINT" + }, + { + "name": "lpdtp", + "type": "LPDRAWTEXTPARAMS" + } + ], + "DrawTextExW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpchText", + "type": "LPWSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "format", + "type": "UINT" + }, + { + "name": "lpdtp", + "type": "LPDRAWTEXTPARAMS" + } + ], + "GrayStringA": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "hBrush", + "type": "HBRUSH" + }, + { + "name": "lpOutputFunc", + "type": "GRAYSTRINGPROC" + }, + { + "name": "lpData", + "type": "LPARAM" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + } + ], + "GrayStringW": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "hBrush", + "type": "HBRUSH" + }, + { + "name": "lpOutputFunc", + "type": "GRAYSTRINGPROC" + }, + { + "name": "lpData", + "type": "LPARAM" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + } + ], + "DrawStateA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbrFore", + "type": "HBRUSH" + }, + { + "name": "qfnCallBack", + "type": "DRAWSTATEPROC" + }, + { + "name": "lData", + "type": "LPARAM" + }, + { + "name": "wData", + "type": "WPARAM" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "DrawStateW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbrFore", + "type": "HBRUSH" + }, + { + "name": "qfnCallBack", + "type": "DRAWSTATEPROC" + }, + { + "name": "lData", + "type": "LPARAM" + }, + { + "name": "wData", + "type": "WPARAM" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "TabbedTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "nTabPositions", + "type": "int" + }, + { + "name": "lpnTabStopPositions", + "type": "INT" + }, + { + "name": "nTabOrigin", + "type": "int" + } + ], + "TabbedTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "nTabPositions", + "type": "int" + }, + { + "name": "lpnTabStopPositions", + "type": "INT" + }, + { + "name": "nTabOrigin", + "type": "int" + } + ], + "GetTabbedTextExtentA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "nTabPositions", + "type": "int" + }, + { + "name": "lpnTabStopPositions", + "type": "INT" + } + ], + "GetTabbedTextExtentW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "nTabPositions", + "type": "int" + }, + { + "name": "lpnTabStopPositions", + "type": "INT" + } + ], + "UpdateWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetActiveWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetForegroundWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "PaintDesktop": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SwitchToThisWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "fUnknown", + "type": "BOOL" + } + ], + "SetForegroundWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "AllowSetForegroundWindow": [ + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "LockSetForegroundWindow": [ + { + "name": "uLockCode", + "type": "UINT" + } + ], + "WindowFromDC": [ + { + "name": "hDC", + "type": "HDC" + } + ], + "GetDC": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetDCEx": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hrgnClip", + "type": "HRGN" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "GetWindowDC": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "ReleaseDC": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hDC", + "type": "HDC" + } + ], + "BeginPaint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPaint", + "type": "LPPAINTSTRUCT" + } + ], + "EndPaint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPaint", + "type": "PAINTSTRUCT" + } + ], + "GetUpdateRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "LPRECT" + }, + { + "name": "bErase", + "type": "BOOL" + } + ], + "GetUpdateRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + }, + { + "name": "bErase", + "type": "BOOL" + } + ], + "SetWindowRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + }, + { + "name": "bRedraw", + "type": "BOOL" + } + ], + "GetWindowRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + } + ], + "GetWindowRgnBox": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lprc", + "type": "LPRECT" + } + ], + "ExcludeUpdateRgn": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "hWnd", + "type": "HWND" + } + ], + "InvalidateRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "RECT" + }, + { + "name": "bErase", + "type": "BOOL" + } + ], + "ValidateRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "RECT" + } + ], + "InvalidateRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + }, + { + "name": "bErase", + "type": "BOOL" + } + ], + "ValidateRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + } + ], + "RedrawWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lprcUpdate", + "type": "RECT" + }, + { + "name": "hrgnUpdate", + "type": "HRGN" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "LockWindowUpdate": [ + { + "name": "hWndLock", + "type": "HWND" + } + ], + "ScrollWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "XAmount", + "type": "int" + }, + { + "name": "YAmount", + "type": "int" + }, + { + "name": "lpRect", + "type": "RECT" + }, + { + "name": "lpClipRect", + "type": "RECT" + } + ], + "ScrollDC": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + }, + { + "name": "lprcScroll", + "type": "RECT" + }, + { + "name": "lprcClip", + "type": "RECT" + }, + { + "name": "hrgnUpdate", + "type": "HRGN" + }, + { + "name": "lprcUpdate", + "type": "LPRECT" + } + ], + "ScrollWindowEx": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + }, + { + "name": "prcScroll", + "type": "RECT" + }, + { + "name": "prcClip", + "type": "RECT" + }, + { + "name": "hrgnUpdate", + "type": "HRGN" + }, + { + "name": "prcUpdate", + "type": "LPRECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "SetScrollPos": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "nPos", + "type": "int" + }, + { + "name": "bRedraw", + "type": "BOOL" + } + ], + "GetScrollPos": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + } + ], + "SetScrollRange": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "nMinPos", + "type": "int" + }, + { + "name": "nMaxPos", + "type": "int" + }, + { + "name": "bRedraw", + "type": "BOOL" + } + ], + "GetScrollRange": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "lpMinPos", + "type": "LPINT" + }, + { + "name": "lpMaxPos", + "type": "LPINT" + } + ], + "ShowScrollBar": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wBar", + "type": "int" + }, + { + "name": "bShow", + "type": "BOOL" + } + ], + "EnableScrollBar": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wSBflags", + "type": "UINT" + }, + { + "name": "wArrows", + "type": "UINT" + } + ], + "SetPropA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "hData", + "type": "HANDLE" + } + ], + "SetPropW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "hData", + "type": "HANDLE" + } + ], + "GetPropA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "GetPropW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "RemovePropA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "RemovePropW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "EnumPropsExA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "PROPENUMPROCEXA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumPropsExW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "PROPENUMPROCEXW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumPropsA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "PROPENUMPROCA" + } + ], + "EnumPropsW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "PROPENUMPROCW" + } + ], + "SetWindowTextA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "SetWindowTextW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetWindowTextA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "nMaxCount", + "type": "int" + } + ], + "GetWindowTextW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "nMaxCount", + "type": "int" + } + ], + "GetWindowTextLengthA": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetWindowTextLengthW": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetClientRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "LPRECT" + } + ], + "GetWindowRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "LPRECT" + } + ], + "AdjustWindowRect": [ + { + "name": "lpRect", + "type": "LPRECT" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "bMenu", + "type": "BOOL" + } + ], + "AdjustWindowRectEx": [ + { + "name": "lpRect", + "type": "LPRECT" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "bMenu", + "type": "BOOL" + }, + { + "name": "dwExStyle", + "type": "DWORD" + } + ], + "AdjustWindowRectExForDpi": [ + { + "name": "lpRect", + "type": "LPRECT" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "bMenu", + "type": "BOOL" + }, + { + "name": "dwExStyle", + "type": "DWORD" + }, + { + "name": "dpi", + "type": "UINT" + } + ], + "SetWindowContextHelpId": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "GetWindowContextHelpId": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "SetMenuContextHelpId": [ + { + "name": "VOID", + "type": "HMENU" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "GetMenuContextHelpId": [ + { + "name": "VOID", + "type": "HMENU" + } + ], + "MessageBoxA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpText", + "type": "LPCSTR" + }, + { + "name": "lpCaption", + "type": "LPCSTR" + }, + { + "name": "uType", + "type": "UINT" + } + ], + "MessageBoxW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpText", + "type": "LPCWSTR" + }, + { + "name": "lpCaption", + "type": "LPCWSTR" + }, + { + "name": "uType", + "type": "UINT" + } + ], + "MessageBoxExA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpText", + "type": "LPCSTR" + }, + { + "name": "lpCaption", + "type": "LPCSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "wLanguageId", + "type": "WORD" + } + ], + "MessageBoxExW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpText", + "type": "LPCWSTR" + }, + { + "name": "lpCaption", + "type": "LPCWSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "wLanguageId", + "type": "WORD" + } + ], + "MessageBoxIndirectA": [ + { + "name": "lpmbp", + "type": "MSGBOXPARAMSA" + } + ], + "MessageBoxIndirectW": [ + { + "name": "lpmbp", + "type": "MSGBOXPARAMSW" + } + ], + "MessageBeep": [ + { + "name": "uType", + "type": "UINT" + } + ], + "ShowCursor": [ + { + "name": "bShow", + "type": "BOOL" + } + ], + "SetCursorPos": [ + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + } + ], + "SetPhysicalCursorPos": [ + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + } + ], + "SetCursor": [ + { + "name": "hCursor", + "type": "HCURSOR" + } + ], + "GetCursorPos": [ + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "GetPhysicalCursorPos": [ + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "GetClipCursor": [ + { + "name": "lpRect", + "type": "LPRECT" + } + ], + "GetCursor": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateCaret": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hBitmap", + "type": "HBITMAP" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + } + ], + "GetCaretBlinkTime": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetCaretBlinkTime": [ + { + "name": "uMSeconds", + "type": "UINT" + } + ], + "DestroyCaret": [ + { + "name": "VOID", + "type": "void" + } + ], + "HideCaret": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "ShowCaret": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetCaretPos": [ + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + } + ], + "GetCaretPos": [ + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "ClientToScreen": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "ScreenToClient": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "LogicalToPhysicalPoint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "PhysicalToLogicalPoint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "LogicalToPhysicalPointForPerMonitorDPI": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "PhysicalToLogicalPointForPerMonitorDPI": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "MapWindowPoints": [ + { + "name": "hWndFrom", + "type": "HWND" + }, + { + "name": "hWndTo", + "type": "HWND" + }, + { + "name": "lpPoints", + "type": "LPPOINT" + }, + { + "name": "cPoints", + "type": "UINT" + } + ], + "WindowFromPoint": [ + { + "name": "Point", + "type": "POINT" + } + ], + "WindowFromPhysicalPoint": [ + { + "name": "Point", + "type": "POINT" + } + ], + "ChildWindowFromPoint": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "Point", + "type": "POINT" + } + ], + "ClipCursor": [ + { + "name": "lpRect", + "type": "RECT" + } + ], + "ChildWindowFromPointEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pt", + "type": "POINT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetSysColor": [ + { + "name": "nIndex", + "type": "int" + } + ], + "GetSysColorBrush": [ + { + "name": "nIndex", + "type": "int" + } + ], + "SetSysColors": [ + { + "name": "cElements", + "type": "int" + }, + { + "name": "lpaElements", + "type": "INT" + }, + { + "name": "lpaRgbValues", + "type": "COLORREF" + } + ], + "DrawFocusRect": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "RECT" + } + ], + "FillRect": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "hbr", + "type": "HBRUSH" + } + ], + "FrameRect": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "hbr", + "type": "HBRUSH" + } + ], + "InvertRect": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "RECT" + } + ], + "SetRect": [ + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "xLeft", + "type": "int" + }, + { + "name": "yTop", + "type": "int" + }, + { + "name": "xRight", + "type": "int" + }, + { + "name": "yBottom", + "type": "int" + } + ], + "SetRectEmpty": [ + { + "name": "lprc", + "type": "LPRECT" + } + ], + "CopyRect": [ + { + "name": "lprcDst", + "type": "LPRECT" + }, + { + "name": "lprcSrc", + "type": "RECT" + } + ], + "InflateRect": [ + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "IntersectRect": [ + { + "name": "lprcDst", + "type": "LPRECT" + }, + { + "name": "lprcSrc1", + "type": "RECT" + }, + { + "name": "lprcSrc2", + "type": "RECT" + } + ], + "UnionRect": [ + { + "name": "lprcDst", + "type": "LPRECT" + }, + { + "name": "lprcSrc1", + "type": "RECT" + }, + { + "name": "lprcSrc2", + "type": "RECT" + } + ], + "SubtractRect": [ + { + "name": "lprcDst", + "type": "LPRECT" + }, + { + "name": "lprcSrc1", + "type": "RECT" + }, + { + "name": "lprcSrc2", + "type": "RECT" + } + ], + "OffsetRect": [ + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "IsRectEmpty": [ + { + "name": "lprc", + "type": "RECT" + } + ], + "EqualRect": [ + { + "name": "lprc1", + "type": "RECT" + }, + { + "name": "lprc2", + "type": "RECT" + } + ], + "PtInRect": [ + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "pt", + "type": "POINT" + } + ], + "GetWindowLongA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "GetWindowLongW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetWindowLongA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG" + } + ], + "SetWindowLongW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG" + } + ], + "GetWindowLongPtrA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "GetWindowLongPtrW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetWindowLongPtrA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG_PTR" + } + ], + "SetWindowLongPtrW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG_PTR" + } + ], + "GetClassWord": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetClassWord": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "wNewWord", + "type": "WORD" + } + ], + "GetClassLongA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "GetClassLongW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetClassLongA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG" + } + ], + "SetClassLongW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG" + } + ], + "GetClassLongPtrA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "GetClassLongPtrW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetClassLongPtrA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG_PTR" + } + ], + "SetClassLongPtrW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG_PTR" + } + ], + "GetProcessDefaultLayout": [ + { + "name": "pdwDefaultLayout", + "type": "DWORD" + } + ], + "SetProcessDefaultLayout": [ + { + "name": "dwDefaultLayout", + "type": "DWORD" + } + ], + "GetDesktopWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetParent": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetParent": [ + { + "name": "hWndChild", + "type": "HWND" + }, + { + "name": "hWndNewParent", + "type": "HWND" + } + ], + "EnumChildWindows": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "WNDENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "FindWindowA": [ + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "lpWindowName", + "type": "LPCSTR" + } + ], + "FindWindowW": [ + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "lpWindowName", + "type": "LPCWSTR" + } + ], + "FindWindowExA": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hWndChildAfter", + "type": "HWND" + }, + { + "name": "lpszClass", + "type": "LPCSTR" + }, + { + "name": "lpszWindow", + "type": "LPCSTR" + } + ], + "FindWindowExW": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hWndChildAfter", + "type": "HWND" + }, + { + "name": "lpszClass", + "type": "LPCWSTR" + }, + { + "name": "lpszWindow", + "type": "LPCWSTR" + } + ], + "GetShellWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterShellHookWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DeregisterShellHookWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "EnumWindows": [ + { + "name": "lpEnumFunc", + "type": "WNDENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumThreadWindows": [ + { + "name": "dwThreadId", + "type": "DWORD" + }, + { + "name": "lpfn", + "type": "WNDENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "GetClassNameA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpClassName", + "type": "LPSTR" + }, + { + "name": "nMaxCount", + "type": "int" + } + ], + "GetClassNameW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpClassName", + "type": "LPWSTR" + }, + { + "name": "nMaxCount", + "type": "int" + } + ], + "GetTopWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetWindowThreadProcessId": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpdwProcessId", + "type": "LPDWORD" + } + ], + "IsGUIThread": [ + { + "name": "bConvert", + "type": "BOOL" + } + ], + "GetLastActivePopup": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uCmd", + "type": "UINT" + } + ], + "SetWindowsHookExA": [ + { + "name": "idHook", + "type": "int" + }, + { + "name": "lpfn", + "type": "HOOKPROC" + }, + { + "name": "hmod", + "type": "HINSTANCE" + }, + { + "name": "dwThreadId", + "type": "DWORD" + } + ], + "SetWindowsHookExW": [ + { + "name": "idHook", + "type": "int" + }, + { + "name": "lpfn", + "type": "HOOKPROC" + }, + { + "name": "hmod", + "type": "HINSTANCE" + }, + { + "name": "dwThreadId", + "type": "DWORD" + } + ], + "UnhookWindowsHookEx": [ + { + "name": "hhk", + "type": "HHOOK" + } + ], + "CallNextHookEx": [ + { + "name": "hhk", + "type": "HHOOK" + }, + { + "name": "nCode", + "type": "int" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CheckMenuRadioItem": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "first", + "type": "UINT" + }, + { + "name": "last", + "type": "UINT" + }, + { + "name": "check", + "type": "UINT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "LoadBitmapA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpBitmapName", + "type": "LPCSTR" + } + ], + "LoadBitmapW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpBitmapName", + "type": "LPCWSTR" + } + ], + "LoadCursorA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpCursorName", + "type": "LPCSTR" + } + ], + "LoadCursorW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpCursorName", + "type": "LPCWSTR" + } + ], + "LoadCursorFromFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "LoadCursorFromFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "CreateCursor": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "xHotSpot", + "type": "int" + }, + { + "name": "yHotSpot", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "pvANDPlane", + "type": "void" + }, + { + "name": "pvXORPlane", + "type": "void" + } + ], + "DestroyCursor": [ + { + "name": "hCursor", + "type": "HCURSOR" + } + ], + "SetSystemCursor": [ + { + "name": "hcur", + "type": "HCURSOR" + }, + { + "name": "id", + "type": "DWORD" + } + ], + "LoadIconA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpIconName", + "type": "LPCSTR" + } + ], + "LoadIconW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpIconName", + "type": "LPCWSTR" + } + ], + "PrivateExtractIconsA": [ + { + "name": "szFileName", + "type": "LPCSTR" + }, + { + "name": "nIconIndex", + "type": "int" + }, + { + "name": "cxIcon", + "type": "int" + }, + { + "name": "cyIcon", + "type": "int" + }, + { + "name": "phicon", + "type": "HICON" + }, + { + "name": "piconid", + "type": "UINT" + }, + { + "name": "nIcons", + "type": "UINT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "PrivateExtractIconsW": [ + { + "name": "szFileName", + "type": "LPCWSTR" + }, + { + "name": "nIconIndex", + "type": "int" + }, + { + "name": "cxIcon", + "type": "int" + }, + { + "name": "cyIcon", + "type": "int" + }, + { + "name": "phicon", + "type": "HICON" + }, + { + "name": "piconid", + "type": "UINT" + }, + { + "name": "nIcons", + "type": "UINT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "CreateIcon": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "cPlanes", + "type": "BYTE" + }, + { + "name": "cBitsPixel", + "type": "BYTE" + }, + { + "name": "lpbANDbits", + "type": "BYTE" + }, + { + "name": "lpbXORbits", + "type": "BYTE" + } + ], + "DestroyIcon": [ + { + "name": "hIcon", + "type": "HICON" + } + ], + "LookupIconIdFromDirectory": [ + { + "name": "presbits", + "type": "PBYTE" + }, + { + "name": "fIcon", + "type": "BOOL" + } + ], + "LookupIconIdFromDirectoryEx": [ + { + "name": "presbits", + "type": "PBYTE" + }, + { + "name": "fIcon", + "type": "BOOL" + }, + { + "name": "cxDesired", + "type": "int" + }, + { + "name": "cyDesired", + "type": "int" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "CreateIconFromResource": [ + { + "name": "presbits", + "type": "PBYTE" + }, + { + "name": "dwResSize", + "type": "DWORD" + }, + { + "name": "fIcon", + "type": "BOOL" + }, + { + "name": "dwVer", + "type": "DWORD" + } + ], + "CreateIconFromResourceEx": [ + { + "name": "presbits", + "type": "PBYTE" + }, + { + "name": "dwResSize", + "type": "DWORD" + }, + { + "name": "fIcon", + "type": "BOOL" + }, + { + "name": "dwVer", + "type": "DWORD" + }, + { + "name": "cxDesired", + "type": "int" + }, + { + "name": "cyDesired", + "type": "int" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "LoadImageA": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "type", + "type": "UINT" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "fuLoad", + "type": "UINT" + } + ], + "LoadImageW": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "type", + "type": "UINT" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "fuLoad", + "type": "UINT" + } + ], + "CopyImage": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "type", + "type": "UINT" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "DrawIconEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xLeft", + "type": "int" + }, + { + "name": "yTop", + "type": "int" + }, + { + "name": "hIcon", + "type": "HICON" + }, + { + "name": "cxWidth", + "type": "int" + }, + { + "name": "cyWidth", + "type": "int" + }, + { + "name": "istepIfAniCur", + "type": "UINT" + }, + { + "name": "hbrFlickerFreeDraw", + "type": "HBRUSH" + }, + { + "name": "diFlags", + "type": "UINT" + } + ], + "CreateIconIndirect": [ + { + "name": "piconinfo", + "type": "PICONINFO" + } + ], + "CopyIcon": [ + { + "name": "hIcon", + "type": "HICON" + } + ], + "GetIconInfo": [ + { + "name": "hIcon", + "type": "HICON" + }, + { + "name": "piconinfo", + "type": "PICONINFO" + } + ], + "GetIconInfoExA": [ + { + "name": "hicon", + "type": "HICON" + }, + { + "name": "piconinfo", + "type": "PICONINFOEXA" + } + ], + "GetIconInfoExW": [ + { + "name": "hicon", + "type": "HICON" + }, + { + "name": "piconinfo", + "type": "PICONINFOEXW" + } + ], + "IsDialogMessageA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "IsDialogMessageW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "MapDialogRect": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "LPRECT" + } + ], + "DlgDirListA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpPathSpec", + "type": "LPSTR" + }, + { + "name": "nIDListBox", + "type": "int" + }, + { + "name": "nIDStaticPath", + "type": "int" + }, + { + "name": "uFileType", + "type": "UINT" + } + ], + "DlgDirListW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpPathSpec", + "type": "LPWSTR" + }, + { + "name": "nIDListBox", + "type": "int" + }, + { + "name": "nIDStaticPath", + "type": "int" + }, + { + "name": "uFileType", + "type": "UINT" + } + ], + "DlgDirSelectExA": [ + { + "name": "hwndDlg", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "idListBox", + "type": "int" + } + ], + "DlgDirSelectExW": [ + { + "name": "hwndDlg", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "idListBox", + "type": "int" + } + ], + "DlgDirListComboBoxA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpPathSpec", + "type": "LPSTR" + }, + { + "name": "nIDComboBox", + "type": "int" + }, + { + "name": "nIDStaticPath", + "type": "int" + }, + { + "name": "uFiletype", + "type": "UINT" + } + ], + "DlgDirListComboBoxW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpPathSpec", + "type": "LPWSTR" + }, + { + "name": "nIDComboBox", + "type": "int" + }, + { + "name": "nIDStaticPath", + "type": "int" + }, + { + "name": "uFiletype", + "type": "UINT" + } + ], + "DlgDirSelectComboBoxExA": [ + { + "name": "hwndDlg", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "cchOut", + "type": "int" + }, + { + "name": "idComboBox", + "type": "int" + } + ], + "DlgDirSelectComboBoxExW": [ + { + "name": "hwndDlg", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "cchOut", + "type": "int" + }, + { + "name": "idComboBox", + "type": "int" + } + ], + "SetScrollInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "lpsi", + "type": "LPCSCROLLINFO" + }, + { + "name": "redraw", + "type": "BOOL" + } + ], + "GetScrollInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "lpsi", + "type": "LPSCROLLINFO" + } + ], + "DefFrameProcA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hWndMDIClient", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefFrameProcW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hWndMDIClient", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefMDIChildProcA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefMDIChildProcW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "TranslateMDISysAccel": [ + { + "name": "hWndClient", + "type": "HWND" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "ArrangeIconicWindows": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "CreateMDIWindowA": [ + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "lpWindowName", + "type": "LPCSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CreateMDIWindowW": [ + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "lpWindowName", + "type": "LPCWSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "TileWindows": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "wHow", + "type": "UINT" + }, + { + "name": "lpRect", + "type": "RECT" + }, + { + "name": "cKids", + "type": "UINT" + }, + { + "name": "lpKids", + "type": "HWND" + } + ], + "CascadeWindows": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "wHow", + "type": "UINT" + }, + { + "name": "lpRect", + "type": "RECT" + }, + { + "name": "cKids", + "type": "UINT" + }, + { + "name": "lpKids", + "type": "HWND" + } + ], + "WinHelpA": [ + { + "name": "hWndMain", + "type": "HWND" + }, + { + "name": "lpszHelp", + "type": "LPCSTR" + }, + { + "name": "uCommand", + "type": "UINT" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "WinHelpW": [ + { + "name": "hWndMain", + "type": "HWND" + }, + { + "name": "lpszHelp", + "type": "LPCWSTR" + }, + { + "name": "uCommand", + "type": "UINT" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "GetGuiResources": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "uiFlags", + "type": "DWORD" + } + ], + "ChangeDisplaySettingsA": [ + { + "name": "lpDevMode", + "type": "DEVMODEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ChangeDisplaySettingsW": [ + { + "name": "lpDevMode", + "type": "DEVMODEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ChangeDisplaySettingsExA": [ + { + "name": "lpszDeviceName", + "type": "LPCSTR" + }, + { + "name": "lpDevMode", + "type": "DEVMODEA" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwflags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPVOID" + } + ], + "ChangeDisplaySettingsExW": [ + { + "name": "lpszDeviceName", + "type": "LPCWSTR" + }, + { + "name": "lpDevMode", + "type": "DEVMODEW" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwflags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPVOID" + } + ], + "EnumDisplaySettingsA": [ + { + "name": "lpszDeviceName", + "type": "LPCSTR" + }, + { + "name": "iModeNum", + "type": "DWORD" + }, + { + "name": "lpDevMode", + "type": "DEVMODEA" + } + ], + "EnumDisplaySettingsW": [ + { + "name": "lpszDeviceName", + "type": "LPCWSTR" + }, + { + "name": "iModeNum", + "type": "DWORD" + }, + { + "name": "lpDevMode", + "type": "DEVMODEW" + } + ], + "EnumDisplaySettingsExA": [ + { + "name": "lpszDeviceName", + "type": "LPCSTR" + }, + { + "name": "iModeNum", + "type": "DWORD" + }, + { + "name": "lpDevMode", + "type": "DEVMODEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDisplaySettingsExW": [ + { + "name": "lpszDeviceName", + "type": "LPCWSTR" + }, + { + "name": "iModeNum", + "type": "DWORD" + }, + { + "name": "lpDevMode", + "type": "DEVMODEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDisplayDevicesA": [ + { + "name": "lpDevice", + "type": "LPCSTR" + }, + { + "name": "iDevNum", + "type": "DWORD" + }, + { + "name": "lpDisplayDevice", + "type": "PDISPLAY_DEVICEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDisplayDevicesW": [ + { + "name": "lpDevice", + "type": "LPCWSTR" + }, + { + "name": "iDevNum", + "type": "DWORD" + }, + { + "name": "lpDisplayDevice", + "type": "PDISPLAY_DEVICEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetDisplayConfigBufferSizes": [ + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "numPathArrayElements", + "type": "UINT32" + }, + { + "name": "numModeInfoArrayElements", + "type": "UINT32" + } + ], + "SetDisplayConfig": [ + { + "name": "numPathArrayElements", + "type": "UINT32" + }, + { + "name": "pathArray", + "type": "DISPLAYCONFIG_PATH_INFO" + }, + { + "name": "numModeInfoArrayElements", + "type": "UINT32" + }, + { + "name": "modeInfoArray", + "type": "DISPLAYCONFIG_MODE_INFO" + }, + { + "name": "flags", + "type": "UINT32" + } + ], + "QueryDisplayConfig": [ + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "numPathArrayElements", + "type": "UINT32" + }, + { + "name": "pathArray", + "type": "DISPLAYCONFIG_PATH_INFO" + }, + { + "name": "numModeInfoArrayElements", + "type": "UINT32" + }, + { + "name": "modeInfoArray", + "type": "DISPLAYCONFIG_MODE_INFO" + }, + { + "name": "currentTopologyId", + "type": "DISPLAYCONFIG_TOPOLOGY_ID" + } + ], + "DisplayConfigGetDeviceInfo": [ + { + "name": "requestPacket", + "type": "DISPLAYCONFIG_DEVICE_INFO_HEADER" + } + ], + "DisplayConfigSetDeviceInfo": [ + { + "name": "setPacket", + "type": "DISPLAYCONFIG_DEVICE_INFO_HEADER" + } + ], + "SystemParametersInfoA": [ + { + "name": "uiAction", + "type": "UINT" + }, + { + "name": "uiParam", + "type": "UINT" + }, + { + "name": "pvParam", + "type": "PVOID" + }, + { + "name": "fWinIni", + "type": "UINT" + } + ], + "SystemParametersInfoW": [ + { + "name": "uiAction", + "type": "UINT" + }, + { + "name": "uiParam", + "type": "UINT" + }, + { + "name": "pvParam", + "type": "PVOID" + }, + { + "name": "fWinIni", + "type": "UINT" + } + ], + "SystemParametersInfoForDpi": [ + { + "name": "uiAction", + "type": "UINT" + }, + { + "name": "uiParam", + "type": "UINT" + }, + { + "name": "pvParam", + "type": "PVOID" + }, + { + "name": "fWinIni", + "type": "UINT" + }, + { + "name": "dpi", + "type": "UINT" + } + ], + "SoundSentry": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetLastErrorEx": [ + { + "name": "dwErrCode", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "InternalGetWindowText": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pString", + "type": "LPWSTR" + }, + { + "name": "cchMaxCount", + "type": "int" + } + ], + "MonitorFromPoint": [ + { + "name": "pt", + "type": "POINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MonitorFromRect": [ + { + "name": "lprc", + "type": "LPCRECT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MonitorFromWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetMonitorInfoA": [ + { + "name": "hMonitor", + "type": "HMONITOR" + }, + { + "name": "lpmi", + "type": "LPMONITORINFO" + } + ], + "GetMonitorInfoW": [ + { + "name": "hMonitor", + "type": "HMONITOR" + }, + { + "name": "lpmi", + "type": "LPMONITORINFO" + } + ], + "EnumDisplayMonitors": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprcClip", + "type": "LPCRECT" + }, + { + "name": "lpfnEnum", + "type": "MONITORENUMPROC" + }, + { + "name": "dwData", + "type": "LPARAM" + } + ], + "NotifyWinEvent": [ + { + "name": "event", + "type": "DWORD" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "idChild", + "type": "LONG" + } + ], + "SetWinEventHook": [ + { + "name": "eventMin", + "type": "DWORD" + }, + { + "name": "eventMax", + "type": "DWORD" + }, + { + "name": "hmodWinEventProc", + "type": "HMODULE" + }, + { + "name": "pfnWinEventProc", + "type": "WINEVENTPROC" + }, + { + "name": "idProcess", + "type": "DWORD" + }, + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "IsWinEventHookInstalled": [ + { + "name": "event", + "type": "DWORD" + } + ], + "UnhookWinEvent": [ + { + "name": "hWinEventHook", + "type": "HWINEVENTHOOK" + } + ], + "GetGUIThreadInfo": [ + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "pgui", + "type": "PGUITHREADINFO" + } + ], + "BlockInput": [ + { + "name": "fBlockIt", + "type": "BOOL" + } + ], + "SetProcessDPIAware": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsProcessDPIAware": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadDpiAwarenessContext": [ + { + "name": "dpiContext", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "GetThreadDpiAwarenessContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetWindowDpiAwarenessContext": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetAwarenessFromDpiAwarenessContext": [ + { + "name": "value", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "GetDpiFromDpiAwarenessContext": [ + { + "name": "value", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "AreDpiAwarenessContextsEqual": [ + { + "name": "dpiContextA", + "type": "DPI_AWARENESS_CONTEXT" + }, + { + "name": "dpiContextB", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "IsValidDpiAwarenessContext": [ + { + "name": "value", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "GetDpiForWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetDpiForSystem": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemDpiForProcess": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "EnableNonClientDpiScaling": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "SetProcessDpiAwarenessContext": [ + { + "name": "value", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "SetThreadDpiHostingBehavior": [ + { + "name": "value", + "type": "DPI_HOSTING_BEHAVIOR" + } + ], + "GetThreadDpiHostingBehavior": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetWindowDpiHostingBehavior": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetWindowModuleFileNameA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszFileName", + "type": "LPSTR" + }, + { + "name": "cchFileNameMax", + "type": "UINT" + } + ], + "GetWindowModuleFileNameW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszFileName", + "type": "LPWSTR" + }, + { + "name": "cchFileNameMax", + "type": "UINT" + } + ], + "GetCursorInfo": [ + { + "name": "pci", + "type": "PCURSORINFO" + } + ], + "GetWindowInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pwi", + "type": "PWINDOWINFO" + } + ], + "GetTitleBarInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pti", + "type": "PTITLEBARINFO" + } + ], + "GetMenuBarInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "idItem", + "type": "LONG" + }, + { + "name": "pmbi", + "type": "PMENUBARINFO" + } + ], + "GetScrollBarInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "psbi", + "type": "PSCROLLBARINFO" + } + ], + "GetComboBoxInfo": [ + { + "name": "hwndCombo", + "type": "HWND" + }, + { + "name": "pcbi", + "type": "PCOMBOBOXINFO" + } + ], + "GetAncestor": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "gaFlags", + "type": "UINT" + } + ], + "RealChildWindowFromPoint": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "ptParentClientCoords", + "type": "POINT" + } + ], + "RealGetWindowClassW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ptszClassName", + "type": "LPWSTR" + }, + { + "name": "cchClassNameMax", + "type": "UINT" + } + ], + "GetAltTabInfoA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "iItem", + "type": "int" + }, + { + "name": "pati", + "type": "PALTTABINFO" + }, + { + "name": "pszItemText", + "type": "LPSTR" + }, + { + "name": "cchItemText", + "type": "UINT" + } + ], + "GetAltTabInfoW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "iItem", + "type": "int" + }, + { + "name": "pati", + "type": "PALTTABINFO" + }, + { + "name": "pszItemText", + "type": "LPWSTR" + }, + { + "name": "cchItemText", + "type": "UINT" + } + ], + "GetListBoxInfo": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "LockWorkStation": [ + { + "name": "VOID", + "type": "void" + } + ], + "UserHandleGrantAccess": [ + { + "name": "hUserHandle", + "type": "HANDLE" + }, + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "bGrant", + "type": "BOOL" + } + ], + "GetRawInputData": [ + { + "name": "hRawInput", + "type": "HRAWINPUT" + }, + { + "name": "uiCommand", + "type": "UINT" + }, + { + "name": "pData", + "type": "LPVOID" + }, + { + "name": "pcbSize", + "type": "PUINT" + }, + { + "name": "cbSizeHeader", + "type": "UINT" + } + ], + "GetRawInputDeviceInfoA": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "uiCommand", + "type": "UINT" + }, + { + "name": "pData", + "type": "LPVOID" + }, + { + "name": "pcbSize", + "type": "PUINT" + } + ], + "GetRawInputDeviceInfoW": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "uiCommand", + "type": "UINT" + }, + { + "name": "pData", + "type": "LPVOID" + }, + { + "name": "pcbSize", + "type": "PUINT" + } + ], + "GetRawInputBuffer": [ + { + "name": "pData", + "type": "PRAWINPUT" + }, + { + "name": "pcbSize", + "type": "PUINT" + }, + { + "name": "cbSizeHeader", + "type": "UINT" + } + ], + "RegisterRawInputDevices": [ + { + "name": "pRawInputDevices", + "type": "PCRAWINPUTDEVICE" + }, + { + "name": "uiNumDevices", + "type": "UINT" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "GetRegisteredRawInputDevices": [ + { + "name": "pRawInputDevices", + "type": "PRAWINPUTDEVICE" + }, + { + "name": "puiNumDevices", + "type": "PUINT" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "GetRawInputDeviceList": [ + { + "name": "pRawInputDeviceList", + "type": "PRAWINPUTDEVICELIST" + }, + { + "name": "puiNumDevices", + "type": "PUINT" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "DefRawInputProc": [ + { + "name": "paRawInput", + "type": "PRAWINPUT" + }, + { + "name": "nInput", + "type": "INT" + }, + { + "name": "cbSizeHeader", + "type": "UINT" + } + ], + "GetPointerDevices": [ + { + "name": "deviceCount", + "type": "UINT32" + }, + { + "name": "pointerDevices", + "type": "POINTER_DEVICE_INFO" + } + ], + "GetPointerDevice": [ + { + "name": "device", + "type": "HANDLE" + }, + { + "name": "pointerDevice", + "type": "POINTER_DEVICE_INFO" + } + ], + "GetPointerDeviceProperties": [ + { + "name": "device", + "type": "HANDLE" + }, + { + "name": "propertyCount", + "type": "UINT32" + }, + { + "name": "pointerProperties", + "type": "POINTER_DEVICE_PROPERTY" + } + ], + "RegisterPointerDeviceNotifications": [ + { + "name": "window", + "type": "HWND" + }, + { + "name": "notifyRange", + "type": "BOOL" + } + ], + "GetPointerDeviceRects": [ + { + "name": "device", + "type": "HANDLE" + }, + { + "name": "pointerDeviceRect", + "type": "RECT" + }, + { + "name": "displayRect", + "type": "RECT" + } + ], + "GetPointerDeviceCursors": [ + { + "name": "device", + "type": "HANDLE" + }, + { + "name": "cursorCount", + "type": "UINT32" + }, + { + "name": "deviceCursors", + "type": "POINTER_DEVICE_CURSOR_INFO" + } + ], + "GetRawPointerDeviceData": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "historyCount", + "type": "UINT32" + }, + { + "name": "propertiesCount", + "type": "UINT32" + }, + { + "name": "pProperties", + "type": "POINTER_DEVICE_PROPERTY" + }, + { + "name": "pValues", + "type": "LONG" + } + ], + "ChangeWindowMessageFilter": [ + { + "name": "message", + "type": "UINT" + }, + { + "name": "dwFlag", + "type": "DWORD" + } + ], + "ChangeWindowMessageFilterEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "message", + "type": "UINT" + }, + { + "name": "action", + "type": "DWORD" + }, + { + "name": "pChangeFilterStruct", + "type": "PCHANGEFILTERSTRUCT" + } + ], + "GetGestureInfo": [ + { + "name": "hGestureInfo", + "type": "HGESTUREINFO" + }, + { + "name": "pGestureInfo", + "type": "PGESTUREINFO" + } + ], + "GetGestureExtraArgs": [ + { + "name": "hGestureInfo", + "type": "HGESTUREINFO" + }, + { + "name": "cbExtraArgs", + "type": "UINT" + }, + { + "name": "pExtraArgs", + "type": "PBYTE" + } + ], + "CloseGestureInfoHandle": [ + { + "name": "hGestureInfo", + "type": "HGESTUREINFO" + } + ], + "SetGestureConfig": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "cIDs", + "type": "UINT" + }, + { + "name": "pGestureConfig", + "type": "PGESTURECONFIG" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "GetGestureConfig": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pcIDs", + "type": "PUINT" + }, + { + "name": "pGestureConfig", + "type": "PGESTURECONFIG" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "ShutdownBlockReasonCreate": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pwszReason", + "type": "LPCWSTR" + } + ], + "ShutdownBlockReasonQuery": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pwszBuff", + "type": "LPWSTR" + }, + { + "name": "pcchBuff", + "type": "DWORD" + } + ], + "ShutdownBlockReasonDestroy": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetCurrentInputMessageSource": [ + { + "name": "inputMessageSource", + "type": "INPUT_MESSAGE_SOURCE" + } + ], + "GetCIMSSM": [ + { + "name": "inputMessageSource", + "type": "INPUT_MESSAGE_SOURCE" + } + ], + "GetAutoRotationState": [ + { + "name": "pState", + "type": "PAR_STATE" + } + ], + "GetDisplayAutoRotationPreferences": [ + { + "name": "pOrientation", + "type": "ORIENTATION_PREFERENCE" + } + ], + "GetDisplayAutoRotationPreferencesByProcessId": [ + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "pOrientation", + "type": "ORIENTATION_PREFERENCE" + }, + { + "name": "fRotateScreen", + "type": "BOOL" + } + ], + "SetDisplayAutoRotationPreferences": [ + { + "name": "orientation", + "type": "ORIENTATION_PREFERENCE" + } + ], + "IsImmersiveProcess": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "SetProcessRestrictionExemption": [ + { + "name": "fEnableExemption", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winver.json b/qiling/extensions/windows_sdk/winver.json new file mode 100644 index 000000000..dcceeffe9 --- /dev/null +++ b/qiling/extensions/windows_sdk/winver.json @@ -0,0 +1,330 @@ +{ + "VerFindFileA": [ + { + "name": "uFlags", + "type": "DWORD" + }, + { + "name": "szFileName", + "type": "LPCSTR" + }, + { + "name": "szWinDir", + "type": "LPCSTR" + }, + { + "name": "szAppDir", + "type": "LPCSTR" + }, + { + "name": "szCurDir", + "type": "LPSTR" + }, + { + "name": "puCurDirLen", + "type": "PUINT" + }, + { + "name": "szDestDir", + "type": "LPSTR" + }, + { + "name": "puDestDirLen", + "type": "PUINT" + } + ], + "VerFindFileW": [ + { + "name": "uFlags", + "type": "DWORD" + }, + { + "name": "szFileName", + "type": "LPCWSTR" + }, + { + "name": "szWinDir", + "type": "LPCWSTR" + }, + { + "name": "szAppDir", + "type": "LPCWSTR" + }, + { + "name": "szCurDir", + "type": "LPWSTR" + }, + { + "name": "puCurDirLen", + "type": "PUINT" + }, + { + "name": "szDestDir", + "type": "LPWSTR" + }, + { + "name": "puDestDirLen", + "type": "PUINT" + } + ], + "VerInstallFileA": [ + { + "name": "uFlags", + "type": "DWORD" + }, + { + "name": "szSrcFileName", + "type": "LPCSTR" + }, + { + "name": "szDestFileName", + "type": "LPCSTR" + }, + { + "name": "szSrcDir", + "type": "LPCSTR" + }, + { + "name": "szDestDir", + "type": "LPCSTR" + }, + { + "name": "szCurDir", + "type": "LPCSTR" + }, + { + "name": "szTmpFile", + "type": "LPSTR" + }, + { + "name": "puTmpFileLen", + "type": "PUINT" + } + ], + "VerInstallFileW": [ + { + "name": "uFlags", + "type": "DWORD" + }, + { + "name": "szSrcFileName", + "type": "LPCWSTR" + }, + { + "name": "szDestFileName", + "type": "LPCWSTR" + }, + { + "name": "szSrcDir", + "type": "LPCWSTR" + }, + { + "name": "szDestDir", + "type": "LPCWSTR" + }, + { + "name": "szCurDir", + "type": "LPCWSTR" + }, + { + "name": "szTmpFile", + "type": "LPWSTR" + }, + { + "name": "puTmpFileLen", + "type": "PUINT" + } + ], + "GetFileVersionInfoSizeA": [ + { + "name": "lptstrFilename", + "type": "LPCSTR" + }, + { + "name": "lpdwHandle", + "type": "LPDWORD" + } + ], + "GetFileVersionInfoSizeW": [ + { + "name": "lptstrFilename", + "type": "LPCWSTR" + }, + { + "name": "lpdwHandle", + "type": "LPDWORD" + } + ], + "GetFileVersionInfoA": [ + { + "name": "lptstrFilename", + "type": "LPCSTR" + }, + { + "name": "dwHandle", + "type": "DWORD" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetFileVersionInfoW": [ + { + "name": "lptstrFilename", + "type": "LPCWSTR" + }, + { + "name": "dwHandle", + "type": "DWORD" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetFileVersionInfoSizeExA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpwstrFilename", + "type": "LPCSTR" + }, + { + "name": "lpdwHandle", + "type": "LPDWORD" + } + ], + "GetFileVersionInfoSizeExW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpwstrFilename", + "type": "LPCWSTR" + }, + { + "name": "lpdwHandle", + "type": "LPDWORD" + } + ], + "GetFileVersionInfoExA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpwstrFilename", + "type": "LPCSTR" + }, + { + "name": "dwHandle", + "type": "DWORD" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetFileVersionInfoExW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpwstrFilename", + "type": "LPCWSTR" + }, + { + "name": "dwHandle", + "type": "DWORD" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "VerLanguageNameA": [ + { + "name": "wLang", + "type": "DWORD" + }, + { + "name": "szLang", + "type": "LPSTR" + }, + { + "name": "cchLang", + "type": "DWORD" + } + ], + "VerLanguageNameW": [ + { + "name": "wLang", + "type": "DWORD" + }, + { + "name": "szLang", + "type": "LPWSTR" + }, + { + "name": "cchLang", + "type": "DWORD" + } + ], + "VerQueryValueA": [ + { + "name": "pBlock", + "type": "LPCVOID" + }, + { + "name": "lpSubBlock", + "type": "LPCSTR" + }, + { + "name": "lplpBuffer", + "type": "LPVOID" + }, + { + "name": "puLen", + "type": "PUINT" + } + ], + "VerQueryValueW": [ + { + "name": "pBlock", + "type": "LPCVOID" + }, + { + "name": "lpSubBlock", + "type": "LPCWSTR" + }, + { + "name": "lplpBuffer", + "type": "LPVOID" + }, + { + "name": "puLen", + "type": "PUINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winwlx.json b/qiling/extensions/windows_sdk/winwlx.json new file mode 100644 index 000000000..354056461 --- /dev/null +++ b/qiling/extensions/windows_sdk/winwlx.json @@ -0,0 +1,14 @@ +{ + "WlxReconnectNotify": [ + { + "name": "pWlxContext", + "type": "PVOID" + } + ], + "WlxDisconnectNotify": [ + { + "name": "pWlxContext", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wlanapi.json b/qiling/extensions/windows_sdk/wlanapi.json new file mode 100644 index 000000000..c8cb7840d --- /dev/null +++ b/qiling/extensions/windows_sdk/wlanapi.json @@ -0,0 +1,1184 @@ +{ + "WlanOpenHandle": [ + { + "name": "dwClientVersion", + "type": "DWORD" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwNegotiatedVersion", + "type": "PDWORD" + }, + { + "name": "phClientHandle", + "type": "PHANDLE" + } + ], + "WlanCloseHandle": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanEnumInterfaces": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppInterfaceList", + "type": "PWLAN_INTERFACE_INFO_LIST" + } + ], + "WlanSetAutoConfigParameter": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "OpCode", + "type": "WLAN_AUTOCONF_OPCODE" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pData", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanQueryAutoConfigParameter": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "OpCode", + "type": "WLAN_AUTOCONF_OPCODE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwDataSize", + "type": "PDWORD" + }, + { + "name": "ppData", + "type": "PVOID" + }, + { + "name": "pWlanOpcodeValueType", + "type": "PWLAN_OPCODE_VALUE_TYPE" + } + ], + "WlanGetInterfaceCapability": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppCapability", + "type": "PWLAN_INTERFACE_CAPABILITY" + } + ], + "WlanSetInterface": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "OpCode", + "type": "WLAN_INTF_OPCODE" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pData", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanQueryInterface": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "OpCode", + "type": "WLAN_INTF_OPCODE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwDataSize", + "type": "PDWORD" + }, + { + "name": "ppData", + "type": "PVOID" + }, + { + "name": "pWlanOpcodeValueType", + "type": "PWLAN_OPCODE_VALUE_TYPE" + } + ], + "WlanIhvControl": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "WLAN_IHV_CONTROL_TYPE" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + }, + { + "name": "pInBuffer", + "type": "PVOID" + }, + { + "name": "dwOutBufferSize", + "type": "DWORD" + }, + { + "name": "pOutBuffer", + "type": "PVOID" + }, + { + "name": "pdwBytesReturned", + "type": "PDWORD" + } + ], + "WlanScan": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pDot11Ssid", + "type": "PDOT11_SSID" + }, + { + "name": "pIeData", + "type": "PWLAN_RAW_DATA" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanGetAvailableNetworkList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppAvailableNetworkList", + "type": "PWLAN_AVAILABLE_NETWORK_LIST" + } + ], + "WlanGetNetworkBssList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pDot11Ssid", + "type": "PDOT11_SSID" + }, + { + "name": "dot11BssType", + "type": "DOT11_BSS_TYPE" + }, + { + "name": "bSecurityEnabled", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppWlanBssList", + "type": "PWLAN_BSS_LIST" + } + ], + "WlanConnect": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pConnectionParameters", + "type": "PWLAN_CONNECTION_PARAMETERS" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanDisconnect": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanRegisterNotification": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "dwNotifSource", + "type": "DWORD" + }, + { + "name": "bIgnoreDuplicate", + "type": "BOOL" + }, + { + "name": "funcCallback", + "type": "WLAN_NOTIFICATION_CALLBACK" + }, + { + "name": "pCallbackContext", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwPrevNotifSource", + "type": "PDWORD" + } + ], + "WlanGetProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pstrProfileXml", + "type": "LPWSTR" + }, + { + "name": "pdwFlags", + "type": "DWORD" + }, + { + "name": "pdwGrantedAccess", + "type": "DWORD" + } + ], + "WlanSetProfileEapUserData": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "eapType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwEapUserDataSize", + "type": "DWORD" + }, + { + "name": "pbEapUserData", + "type": "LPBYTE" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSetProfileEapXmlUserData": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "strEapXmlUserData", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSetProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "strProfileXml", + "type": "LPCWSTR" + }, + { + "name": "strAllUserProfileSecurity", + "type": "LPCWSTR" + }, + { + "name": "bOverwrite", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwReasonCode", + "type": "DWORD" + } + ], + "WlanDeleteProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanRenameProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strOldProfileName", + "type": "LPCWSTR" + }, + { + "name": "strNewProfileName", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanGetProfileList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppProfileList", + "type": "PWLAN_PROFILE_INFO_LIST" + } + ], + "WlanSetProfileList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "dwItems", + "type": "DWORD" + }, + { + "name": "strProfileNames", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSetProfilePosition": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "dwPosition", + "type": "DWORD" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSetProfileCustomUserData": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pData", + "type": "PBYTE" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanGetProfileCustomUserData": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwDataSize", + "type": "DWORD" + }, + { + "name": "ppData", + "type": "PBYTE" + } + ], + "WlanSetFilterList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "wlanFilterListType", + "type": "WLAN_FILTER_LIST_TYPE" + }, + { + "name": "pNetworkList", + "type": "PDOT11_NETWORK_LIST" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanGetFilterList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "wlanFilterListType", + "type": "WLAN_FILTER_LIST_TYPE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppNetworkList", + "type": "PDOT11_NETWORK_LIST" + } + ], + "WlanSetPsdIEDataList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "strFormat", + "type": "LPCWSTR" + }, + { + "name": "pPsdIEDataList", + "type": "PWLAN_RAW_DATA_LIST" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSaveTemporaryProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "strAllUserProfileSecurity", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "bOverWrite", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanDeviceServiceCommand": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pDeviceServiceGuid", + "type": "LPGUID" + }, + { + "name": "dwOpCode", + "type": "DWORD" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + }, + { + "name": "pInBuffer", + "type": "PVOID" + }, + { + "name": "dwOutBufferSize", + "type": "DWORD" + }, + { + "name": "pOutBuffer", + "type": "PVOID" + }, + { + "name": "pdwBytesReturned", + "type": "PDWORD" + } + ], + "WlanGetSupportedDeviceServices": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "ppDevSvcGuidList", + "type": "PWLAN_DEVICE_SERVICE_GUID_LIST" + } + ], + "WlanRegisterDeviceServiceNotification": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pDevSvcGuidList", + "type": "PWLAN_DEVICE_SERVICE_GUID_LIST" + } + ], + "WlanExtractPsdIEDataList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "dwIeDataSize", + "type": "DWORD" + }, + { + "name": "pRawIeData", + "type": "PBYTE" + }, + { + "name": "strFormat", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppPsdIEDataList", + "type": "PWLAN_RAW_DATA_LIST" + } + ], + "WlanReasonCodeToString": [ + { + "name": "dwReasonCode", + "type": "DWORD" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "pStringBuffer", + "type": "PWCHAR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanAllocateMemory": [ + { + "name": "dwMemorySize", + "type": "DWORD" + } + ], + "WlanFreeMemory": [ + { + "name": "pMemory", + "type": "PVOID" + } + ], + "WlanSetSecuritySettings": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "SecurableObject", + "type": "WLAN_SECURABLE_OBJECT" + }, + { + "name": "strModifiedSDDL", + "type": "LPCWSTR" + } + ], + "WlanGetSecuritySettings": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "SecurableObject", + "type": "WLAN_SECURABLE_OBJECT" + }, + { + "name": "pValueType", + "type": "PWLAN_OPCODE_VALUE_TYPE" + }, + { + "name": "pstrCurrentSDDL", + "type": "LPWSTR" + }, + { + "name": "pdwGrantedAccess", + "type": "PDWORD" + } + ], + "WlanUIEditProfile": [ + { + "name": "dwClientVersion", + "type": "DWORD" + }, + { + "name": "wstrProfileName", + "type": "LPCWSTR" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wlStartPage", + "type": "WL_DISPLAY_PAGES" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pWlanReasonCode", + "type": "PWLAN_REASON_CODE" + } + ], + "WlanHostedNetworkStartUsing": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkStopUsing": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkForceStart": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkForceStop": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkQueryProperty": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "OpCode", + "type": "WLAN_HOSTED_NETWORK_OPCODE" + }, + { + "name": "pdwDataSize", + "type": "PDWORD" + }, + { + "name": "ppvData", + "type": "PVOID" + }, + { + "name": "pWlanOpcodeValueType", + "type": "PWLAN_OPCODE_VALUE_TYPE" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkSetProperty": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "OpCode", + "type": "WLAN_HOSTED_NETWORK_OPCODE" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "PVOID" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkInitSettings": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkRefreshSecuritySettings": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkQueryStatus": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "ppWlanHostedNetworkStatus", + "type": "PWLAN_HOSTED_NETWORK_STATUS" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkSetSecondaryKey": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "dwKeyLength", + "type": "DWORD" + }, + { + "name": "pucKeyData", + "type": "PUCHAR" + }, + { + "name": "bIsPassPhrase", + "type": "BOOL" + }, + { + "name": "bPersistent", + "type": "BOOL" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkQuerySecondaryKey": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pdwKeyLength", + "type": "PDWORD" + }, + { + "name": "ppucKeyData", + "type": "PUCHAR" + }, + { + "name": "pbIsPassPhrase", + "type": "PBOOL" + }, + { + "name": "pbPersistent", + "type": "PBOOL" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanRegisterVirtualStationNotification": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "bRegister", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WFDOpenHandle": [ + { + "name": "dwClientVersion", + "type": "DWORD" + }, + { + "name": "pdwNegotiatedVersion", + "type": "PDWORD" + }, + { + "name": "phClientHandle", + "type": "PHANDLE" + } + ], + "WFDCloseHandle": [ + { + "name": "hClientHandle", + "type": "HANDLE" + } + ], + "WFDStartOpenSession": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pDeviceAddress", + "type": "PDOT11_MAC_ADDRESS" + }, + { + "name": "pvContext", + "type": "PVOID" + }, + { + "name": "pfnCallback", + "type": "WFD_OPEN_SESSION_COMPLETE_CALLBACK" + }, + { + "name": "phSessionHandle", + "type": "PHANDLE" + } + ], + "WFDCancelOpenSession": [ + { + "name": "hSessionHandle", + "type": "HANDLE" + } + ], + "WFDOpenLegacySession": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pLegacyMacAddress", + "type": "PDOT11_MAC_ADDRESS" + }, + { + "name": "phSessionHandle", + "type": "HANDLE" + }, + { + "name": "pGuidSessionInterface", + "type": "GUID" + } + ], + "WFDCloseSession": [ + { + "name": "hSessionHandle", + "type": "HANDLE" + } + ], + "WFDUpdateDeviceVisibility": [ + { + "name": "pDeviceAddress", + "type": "PDOT11_MAC_ADDRESS" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wmcontainer.json b/qiling/extensions/windows_sdk/wmcontainer.json new file mode 100644 index 000000000..4658f78bf --- /dev/null +++ b/qiling/extensions/windows_sdk/wmcontainer.json @@ -0,0 +1,152 @@ +{ + "MFCreateASFContentInfo": [ + { + "name": "ppIContentInfo", + "type": "IMFASFContentInfo" + } + ], + "MFCreateASFIndexer": [ + { + "name": "ppIIndexer", + "type": "IMFASFIndexer" + } + ], + "MFCreateASFIndexerByteStream": [ + { + "name": "pIContentByteStream", + "type": "IMFByteStream" + }, + { + "name": "cbIndexStartOffset", + "type": "QWORD" + }, + { + "name": "pIIndexByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateASFSplitter": [ + { + "name": "ppISplitter", + "type": "IMFASFSplitter" + } + ], + "MFCreateASFProfile": [ + { + "name": "ppIProfile", + "type": "IMFASFProfile" + } + ], + "MFCreateASFProfileFromPresentationDescriptor": [ + { + "name": "pIPD", + "type": "IMFPresentationDescriptor" + }, + { + "name": "ppIProfile", + "type": "IMFASFProfile" + } + ], + "MFCreatePresentationDescriptorFromASFProfile": [ + { + "name": "pIProfile", + "type": "IMFASFProfile" + }, + { + "name": "ppIPD", + "type": "IMFPresentationDescriptor" + } + ], + "MFCreateASFMultiplexer": [ + { + "name": "ppIMultiplexer", + "type": "IMFASFMultiplexer" + } + ], + "MFCreateASFStreamSelector": [ + { + "name": "pIASFProfile", + "type": "IMFASFProfile" + }, + { + "name": "ppSelector", + "type": "IMFASFStreamSelector" + } + ], + "MFCreateASFMediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateASFMediaSinkActivate": [ + { + "name": "pwszFileName", + "type": "LPCWSTR" + }, + { + "name": "pContentInfo", + "type": "IMFASFContentInfo" + }, + { + "name": "ppIActivate", + "type": "IMFActivate" + } + ], + "MFCreateWMVEncoderActivate": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "pEncodingConfigurationProperties", + "type": "IPropertyStore" + }, + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateWMAEncoderActivate": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "pEncodingConfigurationProperties", + "type": "IPropertyStore" + }, + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateASFStreamingMediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateASFStreamingMediaSinkActivate": [ + { + "name": "pByteStreamActivate", + "type": "IMFActivate" + }, + { + "name": "pContentInfo", + "type": "IMFASFContentInfo" + }, + { + "name": "ppIActivate", + "type": "IMFActivate" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wmpservices.json b/qiling/extensions/windows_sdk/wmpservices.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/wmpservices.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wmsdkidl.json b/qiling/extensions/windows_sdk/wmsdkidl.json new file mode 100644 index 000000000..1b331945e --- /dev/null +++ b/qiling/extensions/windows_sdk/wmsdkidl.json @@ -0,0 +1,118 @@ +{ + "WMIsContentProtected": [ + { + "name": "pwszFileName", + "type": "WCHAR" + }, + { + "name": "pfIsProtected", + "type": "BOOL" + } + ], + "WMCreateWriter": [ + { + "name": "pUnkCert", + "type": "IUnknown" + }, + { + "name": "ppWriter", + "type": "IWMWriter" + } + ], + "WMCreateReader": [ + { + "name": "pUnkCert", + "type": "IUnknown" + }, + { + "name": "dwRights", + "type": "DWORD" + }, + { + "name": "ppReader", + "type": "IWMReader" + } + ], + "WMCreateSyncReader": [ + { + "name": "pUnkCert", + "type": "IUnknown" + }, + { + "name": "dwRights", + "type": "DWORD" + }, + { + "name": "ppSyncReader", + "type": "IWMSyncReader" + } + ], + "WMCreateEditor": [ + { + "name": "ppEditor", + "type": "IWMMetadataEditor" + } + ], + "WMCreateIndexer": [ + { + "name": "ppIndexer", + "type": "IWMIndexer" + } + ], + "WMCreateBackupRestorer": [ + { + "name": "pCallback", + "type": "IUnknown" + }, + { + "name": "ppBackup", + "type": "IWMLicenseBackup" + } + ], + "WMCreateProfileManager": [ + { + "name": "ppProfileManager", + "type": "IWMProfileManager" + } + ], + "WMCreateWriterFileSink": [ + { + "name": "ppSink", + "type": "IWMWriterFileSink" + } + ], + "WMCreateWriterNetworkSink": [ + { + "name": "ppSink", + "type": "IWMWriterNetworkSink" + } + ], + "WMCreateWriterPushSink": [ + { + "name": "ppSink", + "type": "IWMWriterPushSink" + } + ], + "WMCreateDeviceRegistration": [ + { + "name": "ppDevReg", + "type": "IWMDeviceRegistration" + } + ], + "WMCreateDRMTranscryptor": [ + { + "name": "ppTranscryptor", + "type": "IWMDRMTranscryptor" + } + ], + "WMCreateLicenseRevocationAgent": [ + { + "name": "pCallback", + "type": "IUnknown" + }, + { + "name": "ppLicenseRevocationAgent", + "type": "IWMLicenseRevocationAgent" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wmsdkvalidate.json b/qiling/extensions/windows_sdk/wmsdkvalidate.json new file mode 100644 index 000000000..f613d9792 --- /dev/null +++ b/qiling/extensions/windows_sdk/wmsdkvalidate.json @@ -0,0 +1,38 @@ +{ + "WMCheckURLExtension": [ + { + "name": "pwszURL", + "type": "LPCWSTR" + } + ], + "WMCheckURLScheme": [ + { + "name": "pwszURLScheme", + "type": "LPCWSTR" + } + ], + "WMValidateData": [ + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataSize", + "type": "DWORD" + } + ], + "WMIsAvailableOffline": [ + { + "name": "pwszURL", + "type": "LPCWSTR" + }, + { + "name": "pwszLanguage", + "type": "LPCWSTR" + }, + { + "name": "pfIsAvailableOffline", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wofapi.json b/qiling/extensions/windows_sdk/wofapi.json new file mode 100644 index 000000000..8feaea870 --- /dev/null +++ b/qiling/extensions/windows_sdk/wofapi.json @@ -0,0 +1,176 @@ +{ + "WofShouldCompressBinaries": [ + { + "name": "Volume", + "type": "LPCWSTR" + }, + { + "name": "Algorithm", + "type": "PULONG" + } + ], + "WofGetDriverVersion": [ + { + "name": "FileOrVolumeHandle", + "type": "HANDLE" + }, + { + "name": "Provider", + "type": "ULONG" + }, + { + "name": "WofVersion", + "type": "PULONG" + } + ], + "WofSetFileDataLocation": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Provider", + "type": "ULONG" + }, + { + "name": "ExternalFileInfo", + "type": "PVOID" + }, + { + "name": "Length", + "type": "ULONG" + } + ], + "WofIsExternalFile": [ + { + "name": "FilePath", + "type": "LPCWSTR" + }, + { + "name": "IsExternalFile", + "type": "PBOOL" + }, + { + "name": "Provider", + "type": "PULONG" + }, + { + "name": "ExternalFileInfo", + "type": "PVOID" + }, + { + "name": "BufferLength", + "type": "PULONG" + } + ], + "WofEnumEntries": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "Provider", + "type": "ULONG" + }, + { + "name": "EnumProc", + "type": "WofEnumEntryProc" + }, + { + "name": "UserData", + "type": "PVOID" + } + ], + "WofWimAddEntry": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "WimPath", + "type": "PCWSTR" + }, + { + "name": "WimType", + "type": "DWORD" + }, + { + "name": "WimIndex", + "type": "DWORD" + }, + { + "name": "DataSourceId", + "type": "PLARGE_INTEGER" + } + ], + "WofWimEnumFiles": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "DataSourceId", + "type": "LARGE_INTEGER" + }, + { + "name": "EnumProc", + "type": "WofEnumFilesProc" + }, + { + "name": "UserData", + "type": "PVOID" + } + ], + "WofWimSuspendEntry": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "DataSourceId", + "type": "LARGE_INTEGER" + } + ], + "WofWimRemoveEntry": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "DataSourceId", + "type": "LARGE_INTEGER" + } + ], + "WofWimUpdateEntry": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "DataSourceId", + "type": "LARGE_INTEGER" + }, + { + "name": "NewWimPath", + "type": "PCWSTR" + } + ], + "WofFileEnumFiles": [ + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "Algorithm", + "type": "ULONG" + }, + { + "name": "EnumProc", + "type": "WofEnumFilesProc" + }, + { + "name": "UserData", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wow64apiset.json b/qiling/extensions/windows_sdk/wow64apiset.json new file mode 100644 index 000000000..57be90613 --- /dev/null +++ b/qiling/extensions/windows_sdk/wow64apiset.json @@ -0,0 +1,96 @@ +{ + "Wow64DisableWow64FsRedirection": [ + { + "name": "OldValue", + "type": "PVOID" + } + ], + "Wow64RevertWow64FsRedirection": [ + { + "name": "OlValue", + "type": "PVOID" + } + ], + "IsWow64Process": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Wow64Process", + "type": "PBOOL" + } + ], + "GetSystemWow64DirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemWow64DirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "IsWow64Process2": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pProcessMachine", + "type": "USHORT" + }, + { + "name": "pNativeMachine", + "type": "USHORT" + } + ], + "GetSystemWow64Directory2A": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + }, + { + "name": "ImageFileMachineType", + "type": "WORD" + } + ], + "GetSystemWow64Directory2W": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + }, + { + "name": "ImageFileMachineType", + "type": "WORD" + } + ], + "IsWow64GuestMachineSupported": [ + { + "name": "WowGuestMachine", + "type": "USHORT" + }, + { + "name": "MachineIsSupported", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ws2spi.json b/qiling/extensions/windows_sdk/ws2spi.json new file mode 100644 index 000000000..64ab1a7f7 --- /dev/null +++ b/qiling/extensions/windows_sdk/ws2spi.json @@ -0,0 +1,526 @@ +{ + "WSCEnumProtocols": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCEnumProtocols32": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCDeinstallProvider": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCDeinstallProvider32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCInstallProvider": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCInstallProvider64_32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetProviderPath": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProviderDllPathLen", + "type": "LPINT" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetProviderPath32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProviderDllPathLen", + "type": "LPINT" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCUpdateProvider": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCUpdateProvider32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCSetProviderInfo": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "InfoType", + "type": "WSC_PROVIDER_INFO_TYPE" + }, + { + "name": "Info", + "type": "PBYTE" + }, + { + "name": "InfoSize", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetProviderInfo": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "InfoType", + "type": "WSC_PROVIDER_INFO_TYPE" + }, + { + "name": "Info", + "type": "PBYTE" + }, + { + "name": "InfoSize", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCSetProviderInfo32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "InfoType", + "type": "WSC_PROVIDER_INFO_TYPE" + }, + { + "name": "Info", + "type": "PBYTE" + }, + { + "name": "InfoSize", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetProviderInfo32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "InfoType", + "type": "WSC_PROVIDER_INFO_TYPE" + }, + { + "name": "Info", + "type": "PBYTE" + }, + { + "name": "InfoSize", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCSetApplicationCategory": [ + { + "name": "Path", + "type": "LPCWSTR" + }, + { + "name": "PathLength", + "type": "DWORD" + }, + { + "name": "Extra", + "type": "LPCWSTR" + }, + { + "name": "ExtraLength", + "type": "DWORD" + }, + { + "name": "PermittedLspCategories", + "type": "DWORD" + }, + { + "name": "pPrevPermLspCat", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetApplicationCategory": [ + { + "name": "Path", + "type": "LPCWSTR" + }, + { + "name": "PathLength", + "type": "DWORD" + }, + { + "name": "Extra", + "type": "LPCWSTR" + }, + { + "name": "ExtraLength", + "type": "DWORD" + }, + { + "name": "pPermittedLspCategories", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCEnumNameSpaceProviders32": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOW" + } + ], + "WSCEnumNameSpaceProvidersEx32": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOEXW" + } + ], + "WSCInstallNameSpace": [ + { + "name": "lpszIdentifier", + "type": "LPWSTR" + }, + { + "name": "lpszPathName", + "type": "LPWSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "lpProviderId", + "type": "LPGUID" + } + ], + "WSCUnInstallNameSpace": [ + { + "name": "lpProviderId", + "type": "LPGUID" + } + ], + "WSCInstallNameSpaceEx": [ + { + "name": "lpszIdentifier", + "type": "LPWSTR" + }, + { + "name": "lpszPathName", + "type": "LPWSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpProviderSpecific", + "type": "LPBLOB" + } + ], + "WSCInstallNameSpaceEx32": [ + { + "name": "lpszIdentifier", + "type": "LPWSTR" + }, + { + "name": "lpszPathName", + "type": "LPWSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpProviderSpecific", + "type": "LPBLOB" + } + ], + "WSCEnableNSProvider": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "fEnable", + "type": "BOOL" + } + ], + "WSCEnableNSProvider32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "fEnable", + "type": "BOOL" + } + ], + "WSCInstallProviderAndChains64_32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "LPWSTR" + }, + { + "name": "lpszProviderDllPath32", + "type": "LPWSTR" + }, + { + "name": "lpszLspName", + "type": "LPWSTR" + }, + { + "name": "dwServiceFlags", + "type": "DWORD" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpdwCatalogEntryId", + "type": "LPDWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSAAdvertiseProvider": [ + { + "name": "puuidProviderId", + "type": "GUID" + }, + { + "name": "pNSPv2Routine", + "type": "LPCNSPV2_ROUTINE" + } + ], + "WSAUnadvertiseProvider": [ + { + "name": "puuidProviderId", + "type": "GUID" + } + ], + "WSAProviderCompleteAsyncCall": [ + { + "name": "hAsyncCall", + "type": "HANDLE" + }, + { + "name": "iRetCode", + "type": "INT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ws2tcpip.json b/qiling/extensions/windows_sdk/ws2tcpip.json new file mode 100644 index 000000000..63d370ca6 --- /dev/null +++ b/qiling/extensions/windows_sdk/ws2tcpip.json @@ -0,0 +1,568 @@ +{ + "getaddrinfo": [ + { + "name": "pNodeName", + "type": "PCSTR" + }, + { + "name": "pServiceName", + "type": "PCSTR" + }, + { + "name": "pHints", + "type": "ADDRINFOA" + }, + { + "name": "ppResult", + "type": "PADDRINFOA" + } + ], + "GetAddrInfoW": [ + { + "name": "pNodeName", + "type": "PCWSTR" + }, + { + "name": "pServiceName", + "type": "PCWSTR" + }, + { + "name": "pHints", + "type": "ADDRINFOW" + }, + { + "name": "ppResult", + "type": "PADDRINFOW" + } + ], + "GetAddrInfoExA": [ + { + "name": "pName", + "type": "PCSTR" + }, + { + "name": "pServiceName", + "type": "PCSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpNspId", + "type": "LPGUID" + }, + { + "name": "hints", + "type": "ADDRINFOEXA" + }, + { + "name": "ppResult", + "type": "PADDRINFOEXA" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" + }, + { + "name": "lpNameHandle", + "type": "LPHANDLE" + } + ], + "GetAddrInfoExW": [ + { + "name": "pName", + "type": "PCWSTR" + }, + { + "name": "pServiceName", + "type": "PCWSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpNspId", + "type": "LPGUID" + }, + { + "name": "hints", + "type": "ADDRINFOEXW" + }, + { + "name": "ppResult", + "type": "PADDRINFOEXW" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" + }, + { + "name": "lpHandle", + "type": "LPHANDLE" + } + ], + "GetAddrInfoExCancel": [ + { + "name": "lpHandle", + "type": "LPHANDLE" + } + ], + "GetAddrInfoExOverlappedResult": [ + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "SetAddrInfoExA": [ + { + "name": "pName", + "type": "PCSTR" + }, + { + "name": "pServiceName", + "type": "PCSTR" + }, + { + "name": "pAddresses", + "type": "SOCKET_ADDRESS" + }, + { + "name": "dwAddressCount", + "type": "DWORD" + }, + { + "name": "lpBlob", + "type": "LPBLOB" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpNspId", + "type": "LPGUID" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" + }, + { + "name": "lpNameHandle", + "type": "LPHANDLE" + } + ], + "SetAddrInfoExW": [ + { + "name": "pName", + "type": "PCWSTR" + }, + { + "name": "pServiceName", + "type": "PCWSTR" + }, + { + "name": "pAddresses", + "type": "SOCKET_ADDRESS" + }, + { + "name": "dwAddressCount", + "type": "DWORD" + }, + { + "name": "lpBlob", + "type": "LPBLOB" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpNspId", + "type": "LPGUID" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" + }, + { + "name": "lpNameHandle", + "type": "LPHANDLE" + } + ], + "freeaddrinfo": [ + { + "name": "pAddrInfo", + "type": "PADDRINFOA" + } + ], + "FreeAddrInfoW": [ + { + "name": "pAddrInfo", + "type": "PADDRINFOW" + } + ], + "FreeAddrInfoEx": [ + { + "name": "pAddrInfoEx", + "type": "PADDRINFOEXA" + } + ], + "FreeAddrInfoExW": [ + { + "name": "pAddrInfoEx", + "type": "PADDRINFOEXW" + } + ], + "getnameinfo": [ + { + "name": "pSockaddr", + "type": "SOCKADDR" + }, + { + "name": "SockaddrLength", + "type": "socklen_t" + }, + { + "name": "pNodeBuffer", + "type": "PCHAR" + }, + { + "name": "NodeBufferSize", + "type": "DWORD" + }, + { + "name": "pServiceBuffer", + "type": "PCHAR" + }, + { + "name": "ServiceBufferSize", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "INT" + } + ], + "GetNameInfoW": [ + { + "name": "pSockaddr", + "type": "SOCKADDR" + }, + { + "name": "SockaddrLength", + "type": "socklen_t" + }, + { + "name": "pNodeBuffer", + "type": "PWCHAR" + }, + { + "name": "NodeBufferSize", + "type": "DWORD" + }, + { + "name": "pServiceBuffer", + "type": "PWCHAR" + }, + { + "name": "ServiceBufferSize", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "INT" + } + ], + "InetPtonW": [ + { + "name": "Family", + "type": "INT" + }, + { + "name": "pszAddrString", + "type": "PCWSTR" + }, + { + "name": "pAddrBuf", + "type": "PVOID" + } + ], + "InetNtopW": [ + { + "name": "Family", + "type": "INT" + }, + { + "name": "pAddr", + "type": "void" + }, + { + "name": "pStringBuf", + "type": "PWSTR" + }, + { + "name": "StringBufSize", + "type": "size_t" + } + ], + "setipv4sourcefilter": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Interface", + "type": "IN_ADDR" + }, + { + "name": "Group", + "type": "IN_ADDR" + }, + { + "name": "FilterMode", + "type": "MULTICAST_MODE_TYPE" + }, + { + "name": "SourceCount", + "type": "ULONG" + }, + { + "name": "SourceList", + "type": "IN_ADDR" + } + ], + "getipv4sourcefilter": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Interface", + "type": "IN_ADDR" + }, + { + "name": "Group", + "type": "IN_ADDR" + }, + { + "name": "FilterMode", + "type": "MULTICAST_MODE_TYPE" + }, + { + "name": "SourceCount", + "type": "ULONG" + }, + { + "name": "SourceList", + "type": "IN_ADDR" + } + ], + "setsourcefilter": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Interface", + "type": "ULONG" + }, + { + "name": "Group", + "type": "SOCKADDR" + }, + { + "name": "GroupLength", + "type": "int" + }, + { + "name": "FilterMode", + "type": "MULTICAST_MODE_TYPE" + }, + { + "name": "SourceCount", + "type": "ULONG" + }, + { + "name": "SourceList", + "type": "SOCKADDR_STORAGE" + } + ], + "getsourcefilter": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Interface", + "type": "ULONG" + }, + { + "name": "Group", + "type": "SOCKADDR" + }, + { + "name": "GroupLength", + "type": "int" + }, + { + "name": "FilterMode", + "type": "MULTICAST_MODE_TYPE" + }, + { + "name": "SourceCount", + "type": "ULONG" + }, + { + "name": "SourceList", + "type": "SOCKADDR_STORAGE" + } + ], + "WSAGetIPUserMtu": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Mtu", + "type": "DWORD" + } + ], + "WSASetIPUserMtu": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Mtu", + "type": "DWORD" + } + ], + "WSAGetFailConnectOnIcmpError": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Enabled", + "type": "DWORD" + } + ], + "WSASetFailConnectOnIcmpError": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Enabled", + "type": "DWORD" + } + ], + "WSAGetIcmpErrorInfo": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Info", + "type": "ICMP_ERROR_INFO" + } + ], + "WSAGetUdpSendMessageSize": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "MsgSize", + "type": "DWORD" + } + ], + "WSASetUdpSendMessageSize": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "MsgSize", + "type": "DWORD" + } + ], + "WSAGetUdpRecvMaxCoalescedSize": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "MaxCoalescedMsgSize", + "type": "DWORD" + } + ], + "WSASetUdpRecvMaxCoalescedSize": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "MaxCoalescedMsgSize", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wsbonline.json b/qiling/extensions/windows_sdk/wsbonline.json new file mode 100644 index 000000000..d7f1ebc95 --- /dev/null +++ b/qiling/extensions/windows_sdk/wsbonline.json @@ -0,0 +1,20 @@ +{ + "RegisterOnlineBackupWithWindowsServerBackup": [ + { + "name": "pOBRegistrationInfo", + "type": "WSB_OB_REGISTRATION_INFO" + } + ], + "DeregisterOnlineBackupFromWindowsServerBackup": [ + { + "name": "guidSnapinId", + "type": "GUID" + } + ], + "UpdateOBStatusInWindowsServerBackup": [ + { + "name": "pOBRegistrationInfo", + "type": "WSB_OB_STATUS_INFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wscapi.json b/qiling/extensions/windows_sdk/wscapi.json new file mode 100644 index 000000000..18c8c75da --- /dev/null +++ b/qiling/extensions/windows_sdk/wscapi.json @@ -0,0 +1,36 @@ +{ + "WscRegisterForChanges": [ + { + "name": "Reserved", + "type": "LPVOID" + }, + { + "name": "phCallbackRegistration", + "type": "PHANDLE" + }, + { + "name": "lpCallbackAddress", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pContext", + "type": "PVOID" + } + ], + "WscUnRegisterChanges": [ + { + "name": "hRegistrationHandle", + "type": "HANDLE" + } + ], + "WscGetSecurityProviderHealth": [ + { + "name": "Providers", + "type": "DWORD" + }, + { + "name": "pHealth", + "type": "PWSC_SECURITY_PROVIDER_HEALTH" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wsdattachment.json b/qiling/extensions/windows_sdk/wsdattachment.json new file mode 100644 index 000000000..857d8010b --- /dev/null +++ b/qiling/extensions/windows_sdk/wsdattachment.json @@ -0,0 +1,8 @@ +{ + "WSDCreateOutboundAttachment": [ + { + "name": "ppAttachment", + "type": "IWSDOutboundAttachment" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wsdevlicensing.json b/qiling/extensions/windows_sdk/wsdevlicensing.json new file mode 100644 index 000000000..bbf4c002c --- /dev/null +++ b/qiling/extensions/windows_sdk/wsdevlicensing.json @@ -0,0 +1,24 @@ +{ + "CheckDeveloperLicense": [ + { + "name": "pExpiration", + "type": "FILETIME" + } + ], + "AcquireDeveloperLicense": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "pExpiration", + "type": "FILETIME" + } + ], + "RemoveDeveloperLicense": [ + { + "name": "hwndParent", + "type": "HWND" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wsdxml.json b/qiling/extensions/windows_sdk/wsdxml.json new file mode 100644 index 000000000..79ab5ba33 --- /dev/null +++ b/qiling/extensions/windows_sdk/wsdxml.json @@ -0,0 +1,22 @@ +{ + "WSDXMLGetNameFromBuiltinNamespace": [ + { + "name": "pszNamespace", + "type": "LPCWSTR" + }, + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "ppName", + "type": "WSDXML_NAME" + } + ], + "WSDXMLCreateContext": [ + { + "name": "ppContext", + "type": "IWSDXMLContext" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wsipv6ok.json b/qiling/extensions/windows_sdk/wsipv6ok.json new file mode 100644 index 000000000..0fe99711d --- /dev/null +++ b/qiling/extensions/windows_sdk/wsipv6ok.json @@ -0,0 +1,60 @@ +{ + "inet_addr": [ + { + "name": "cp", + "type": "char" + } + ], + "WSAAsyncGetHostByName": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "name", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetHostByAddr": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "addr", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "type", + "type": "int" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wslapi.json b/qiling/extensions/windows_sdk/wslapi.json new file mode 100644 index 000000000..240ece5e8 --- /dev/null +++ b/qiling/extensions/windows_sdk/wslapi.json @@ -0,0 +1,112 @@ +{ + "WslIsDistributionRegistered": [ + { + "name": "distributionName", + "type": "PCWSTR" + } + ], + "WslRegisterDistribution": [ + { + "name": "distributionName", + "type": "PCWSTR" + }, + { + "name": "tarGzFilename", + "type": "PCWSTR" + } + ], + "WslUnregisterDistribution": [ + { + "name": "distributionName", + "type": "PCWSTR" + } + ], + "WslConfigureDistribution": [ + { + "name": "distributionName", + "type": "PCWSTR" + }, + { + "name": "defaultUID", + "type": "ULONG" + }, + { + "name": "wslDistributionFlags", + "type": "WSL_DISTRIBUTION_FLAGS" + } + ], + "WslGetDistributionConfiguration": [ + { + "name": "distributionName", + "type": "PCWSTR" + }, + { + "name": "distributionVersion", + "type": "ULONG" + }, + { + "name": "defaultUID", + "type": "ULONG" + }, + { + "name": "wslDistributionFlags", + "type": "WSL_DISTRIBUTION_FLAGS" + }, + { + "name": "defaultEnvironmentVariables", + "type": "PSTR" + }, + { + "name": "defaultEnvironmentVariableCount", + "type": "ULONG" + } + ], + "WslLaunchInteractive": [ + { + "name": "distributionName", + "type": "PCWSTR" + }, + { + "name": "command", + "type": "PCWSTR" + }, + { + "name": "useCurrentWorkingDirectory", + "type": "BOOL" + }, + { + "name": "exitCode", + "type": "DWORD" + } + ], + "WslLaunch": [ + { + "name": "distributionName", + "type": "PCWSTR" + }, + { + "name": "command", + "type": "PCWSTR" + }, + { + "name": "useCurrentWorkingDirectory", + "type": "BOOL" + }, + { + "name": "stdIn", + "type": "HANDLE" + }, + { + "name": "stdOut", + "type": "HANDLE" + }, + { + "name": "stdErr", + "type": "HANDLE" + }, + { + "name": "process", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wsman.json b/qiling/extensions/windows_sdk/wsman.json new file mode 100644 index 000000000..9e26dfeeb --- /dev/null +++ b/qiling/extensions/windows_sdk/wsman.json @@ -0,0 +1 @@ +{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wtsapi32.json b/qiling/extensions/windows_sdk/wtsapi32.json new file mode 100644 index 000000000..ba07c4cdd --- /dev/null +++ b/qiling/extensions/windows_sdk/wtsapi32.json @@ -0,0 +1,1078 @@ +{ + "WTSStopRemoteControlSession": [ + { + "name": "LogonId", + "type": "ULONG" + } + ], + "WTSStartRemoteControlSessionW": [ + { + "name": "pTargetServerName", + "type": "LPWSTR" + }, + { + "name": "TargetLogonId", + "type": "ULONG" + }, + { + "name": "HotkeyVk", + "type": "BYTE" + }, + { + "name": "HotkeyModifiers", + "type": "USHORT" + } + ], + "WTSStartRemoteControlSessionA": [ + { + "name": "pTargetServerName", + "type": "LPSTR" + }, + { + "name": "TargetLogonId", + "type": "ULONG" + }, + { + "name": "HotkeyVk", + "type": "BYTE" + }, + { + "name": "HotkeyModifiers", + "type": "USHORT" + } + ], + "WTSConnectSessionA": [ + { + "name": "LogonId", + "type": "ULONG" + }, + { + "name": "TargetLogonId", + "type": "ULONG" + }, + { + "name": "pPassword", + "type": "PSTR" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WTSConnectSessionW": [ + { + "name": "LogonId", + "type": "ULONG" + }, + { + "name": "TargetLogonId", + "type": "ULONG" + }, + { + "name": "pPassword", + "type": "PWSTR" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WTSEnumerateServersW": [ + { + "name": "pDomainName", + "type": "LPWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "Version", + "type": "DWORD" + }, + { + "name": "ppServerInfo", + "type": "PWTS_SERVER_INFOW" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateServersA": [ + { + "name": "pDomainName", + "type": "LPSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "Version", + "type": "DWORD" + }, + { + "name": "ppServerInfo", + "type": "PWTS_SERVER_INFOA" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSOpenServerW": [ + { + "name": "pServerName", + "type": "LPWSTR" + } + ], + "WTSOpenServerA": [ + { + "name": "pServerName", + "type": "LPSTR" + } + ], + "WTSOpenServerExW": [ + { + "name": "pServerName", + "type": "LPWSTR" + } + ], + "WTSOpenServerExA": [ + { + "name": "pServerName", + "type": "LPSTR" + } + ], + "WTSCloseServer": [ + { + "name": "hServer", + "type": "HANDLE" + } + ], + "WTSEnumerateSessionsW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "Version", + "type": "DWORD" + }, + { + "name": "ppSessionInfo", + "type": "PWTS_SESSION_INFOW" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateSessionsA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "Version", + "type": "DWORD" + }, + { + "name": "ppSessionInfo", + "type": "PWTS_SESSION_INFOA" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateSessionsExW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pLevel", + "type": "DWORD" + }, + { + "name": "Filter", + "type": "DWORD" + }, + { + "name": "ppSessionInfo", + "type": "PWTS_SESSION_INFO_1W" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateSessionsExA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pLevel", + "type": "DWORD" + }, + { + "name": "Filter", + "type": "DWORD" + }, + { + "name": "ppSessionInfo", + "type": "PWTS_SESSION_INFO_1A" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateProcessesW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "Version", + "type": "DWORD" + }, + { + "name": "ppProcessInfo", + "type": "PWTS_PROCESS_INFOW" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateProcessesA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "Version", + "type": "DWORD" + }, + { + "name": "ppProcessInfo", + "type": "PWTS_PROCESS_INFOA" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSTerminateProcess": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "ProcessId", + "type": "DWORD" + }, + { + "name": "ExitCode", + "type": "DWORD" + } + ], + "WTSQuerySessionInformationW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "WTSInfoClass", + "type": "WTS_INFO_CLASS" + }, + { + "name": "ppBuffer", + "type": "LPWSTR" + }, + { + "name": "pBytesReturned", + "type": "DWORD" + } + ], + "WTSQuerySessionInformationA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "WTSInfoClass", + "type": "WTS_INFO_CLASS" + }, + { + "name": "ppBuffer", + "type": "LPSTR" + }, + { + "name": "pBytesReturned", + "type": "DWORD" + } + ], + "WTSQueryUserConfigW": [ + { + "name": "pServerName", + "type": "LPWSTR" + }, + { + "name": "pUserName", + "type": "LPWSTR" + }, + { + "name": "WTSConfigClass", + "type": "WTS_CONFIG_CLASS" + }, + { + "name": "ppBuffer", + "type": "LPWSTR" + }, + { + "name": "pBytesReturned", + "type": "DWORD" + } + ], + "WTSQueryUserConfigA": [ + { + "name": "pServerName", + "type": "LPSTR" + }, + { + "name": "pUserName", + "type": "LPSTR" + }, + { + "name": "WTSConfigClass", + "type": "WTS_CONFIG_CLASS" + }, + { + "name": "ppBuffer", + "type": "LPSTR" + }, + { + "name": "pBytesReturned", + "type": "DWORD" + } + ], + "WTSSetUserConfigW": [ + { + "name": "pServerName", + "type": "LPWSTR" + }, + { + "name": "pUserName", + "type": "LPWSTR" + }, + { + "name": "WTSConfigClass", + "type": "WTS_CONFIG_CLASS" + }, + { + "name": "pBuffer", + "type": "LPWSTR" + }, + { + "name": "DataLength", + "type": "DWORD" + } + ], + "WTSSetUserConfigA": [ + { + "name": "pServerName", + "type": "LPSTR" + }, + { + "name": "pUserName", + "type": "LPSTR" + }, + { + "name": "WTSConfigClass", + "type": "WTS_CONFIG_CLASS" + }, + { + "name": "pBuffer", + "type": "LPSTR" + }, + { + "name": "DataLength", + "type": "DWORD" + } + ], + "WTSSendMessageW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "pTitle", + "type": "LPWSTR" + }, + { + "name": "TitleLength", + "type": "DWORD" + }, + { + "name": "pMessage", + "type": "LPWSTR" + }, + { + "name": "MessageLength", + "type": "DWORD" + }, + { + "name": "Style", + "type": "DWORD" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "pResponse", + "type": "DWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WTSSendMessageA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "pTitle", + "type": "LPSTR" + }, + { + "name": "TitleLength", + "type": "DWORD" + }, + { + "name": "pMessage", + "type": "LPSTR" + }, + { + "name": "MessageLength", + "type": "DWORD" + }, + { + "name": "Style", + "type": "DWORD" + }, + { + "name": "Timeout", + "type": "DWORD" + }, + { + "name": "pResponse", + "type": "DWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WTSDisconnectSession": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WTSLogoffSession": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "WTSShutdownSystem": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "ShutdownFlag", + "type": "DWORD" + } + ], + "WTSWaitSystemEvent": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "EventMask", + "type": "DWORD" + }, + { + "name": "pEventFlags", + "type": "DWORD" + } + ], + "WTSVirtualChannelOpen": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "pVirtualName", + "type": "LPSTR" + } + ], + "WTSVirtualChannelOpenEx": [ + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "pVirtualName", + "type": "LPSTR" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "WTSVirtualChannelClose": [ + { + "name": "hChannelHandle", + "type": "HANDLE" + } + ], + "WTSVirtualChannelRead": [ + { + "name": "hChannelHandle", + "type": "HANDLE" + }, + { + "name": "TimeOut", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PCHAR" + }, + { + "name": "BufferSize", + "type": "ULONG" + }, + { + "name": "pBytesRead", + "type": "PULONG" + } + ], + "WTSVirtualChannelWrite": [ + { + "name": "hChannelHandle", + "type": "HANDLE" + }, + { + "name": "Buffer", + "type": "PCHAR" + }, + { + "name": "Length", + "type": "ULONG" + }, + { + "name": "pBytesWritten", + "type": "PULONG" + } + ], + "WTSVirtualChannelPurgeInput": [ + { + "name": "hChannelHandle", + "type": "HANDLE" + } + ], + "WTSVirtualChannelPurgeOutput": [ + { + "name": "hChannelHandle", + "type": "HANDLE" + } + ], + "WTSVirtualChannelQuery": [ + { + "name": "hChannelHandle", + "type": "HANDLE" + }, + { + "name": "VOID", + "type": "WTS_VIRTUAL_CLASS" + }, + { + "name": "ppBuffer", + "type": "PVOID" + }, + { + "name": "pBytesReturned", + "type": "DWORD" + } + ], + "WTSFreeMemory": [ + { + "name": "pMemory", + "type": "PVOID" + } + ], + "WTSRegisterSessionNotification": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WTSUnRegisterSessionNotification": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "WTSRegisterSessionNotificationEx": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WTSUnRegisterSessionNotificationEx": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "hWnd", + "type": "HWND" + } + ], + "WTSQueryUserToken": [ + { + "name": "SessionId", + "type": "ULONG" + }, + { + "name": "phToken", + "type": "PHANDLE" + } + ], + "WTSFreeMemoryExW": [ + { + "name": "WTSTypeClass", + "type": "WTS_TYPE_CLASS" + }, + { + "name": "pMemory", + "type": "PVOID" + }, + { + "name": "NumberOfEntries", + "type": "ULONG" + } + ], + "WTSFreeMemoryExA": [ + { + "name": "WTSTypeClass", + "type": "WTS_TYPE_CLASS" + }, + { + "name": "pMemory", + "type": "PVOID" + }, + { + "name": "NumberOfEntries", + "type": "ULONG" + } + ], + "WTSEnumerateProcessesExW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pLevel", + "type": "DWORD" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "ppProcessInfo", + "type": "LPWSTR" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateProcessesExA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pLevel", + "type": "DWORD" + }, + { + "name": "SessionId", + "type": "DWORD" + }, + { + "name": "ppProcessInfo", + "type": "LPSTR" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateListenersW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListeners", + "type": "PWTSLISTENERNAMEW" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSEnumerateListenersA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListeners", + "type": "PWTSLISTENERNAMEA" + }, + { + "name": "pCount", + "type": "DWORD" + } + ], + "WTSQueryListenerConfigW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPWSTR" + }, + { + "name": "pBuffer", + "type": "PWTSLISTENERCONFIGW" + } + ], + "WTSQueryListenerConfigA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPSTR" + }, + { + "name": "pBuffer", + "type": "PWTSLISTENERCONFIGA" + } + ], + "WTSCreateListenerW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPWSTR" + }, + { + "name": "pBuffer", + "type": "PWTSLISTENERCONFIGW" + }, + { + "name": "flag", + "type": "DWORD" + } + ], + "WTSCreateListenerA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPSTR" + }, + { + "name": "pBuffer", + "type": "PWTSLISTENERCONFIGA" + }, + { + "name": "flag", + "type": "DWORD" + } + ], + "WTSSetListenerSecurityW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPWSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "WTSSetListenerSecurityA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "WTSGetListenerSecurityW": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPWSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "WTSGetListenerSecurityA": [ + { + "name": "hServer", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "pListenerName", + "type": "LPSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "WTSEnableChildSessions": [ + { + "name": "bEnable", + "type": "BOOL" + } + ], + "WTSIsChildSessionsEnabled": [ + { + "name": "pbEnabled", + "type": "PBOOL" + } + ], + "WTSGetChildSessionId": [ + { + "name": "pSessionId", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wtshintapi.json b/qiling/extensions/windows_sdk/wtshintapi.json new file mode 100644 index 000000000..8b660654a --- /dev/null +++ b/qiling/extensions/windows_sdk/wtshintapi.json @@ -0,0 +1,24 @@ +{ + "WTSSetRenderHint": [ + { + "name": "pRenderHintID", + "type": "UINT64" + }, + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "renderHintType", + "type": "DWORD" + }, + { + "name": "cbHintDataLength", + "type": "DWORD" + }, + { + "name": "pHintData", + "type": "BYTE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/xamlom.json b/qiling/extensions/windows_sdk/xamlom.json new file mode 100644 index 000000000..e08cc8008 --- /dev/null +++ b/qiling/extensions/windows_sdk/xamlom.json @@ -0,0 +1,28 @@ +{ + "InitializeXamlDiagnosticsEx": [ + { + "name": "endPointName", + "type": "LPCWSTR" + }, + { + "name": "pid", + "type": "DWORD" + }, + { + "name": "wszDllXamlDiagnostics", + "type": "LPCWSTR" + }, + { + "name": "wszTAPDllName", + "type": "LPCWSTR" + }, + { + "name": "tapClsid", + "type": "CLSID" + }, + { + "name": "wszInitializationData", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/xapofx.json b/qiling/extensions/windows_sdk/xapofx.json new file mode 100644 index 000000000..69ee3c914 --- /dev/null +++ b/qiling/extensions/windows_sdk/xapofx.json @@ -0,0 +1,20 @@ +{ + "CreateFX": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "pEffect", + "type": "IUnknown" + }, + { + "name": "pInitDat", + "type": "void" + }, + { + "name": "InitDataByteSize", + "type": "UINT32" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/xaudio2.json b/qiling/extensions/windows_sdk/xaudio2.json new file mode 100644 index 000000000..61a21f969 --- /dev/null +++ b/qiling/extensions/windows_sdk/xaudio2.json @@ -0,0 +1,16 @@ +{ + "XAudio2Create": [ + { + "name": "ppXAudio2", + "type": "IXAudio2" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "XAudio2Processor", + "type": "XAUDIO2_PROCESSOR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/xaudio2fx.json b/qiling/extensions/windows_sdk/xaudio2fx.json new file mode 100644 index 000000000..9e4e1c559 --- /dev/null +++ b/qiling/extensions/windows_sdk/xaudio2fx.json @@ -0,0 +1,12 @@ +{ + "XAudio2CreateReverb": [ + { + "name": "ppApo", + "type": "IUnknown" + }, + { + "name": "Flags", + "type": "UINT32" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/xinput.json b/qiling/extensions/windows_sdk/xinput.json new file mode 100644 index 000000000..81bf2eb58 --- /dev/null +++ b/qiling/extensions/windows_sdk/xinput.json @@ -0,0 +1,92 @@ +{ + "XInputGetState": [ + { + "name": "dwUserIndex", + "type": "DWORD" + }, + { + "name": "pState", + "type": "XINPUT_STATE" + } + ], + "XInputSetState": [ + { + "name": "dwUserIndex", + "type": "DWORD" + }, + { + "name": "pVibration", + "type": "XINPUT_VIBRATION" + } + ], + "XInputGetCapabilities": [ + { + "name": "dwUserIndex", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pCapabilities", + "type": "XINPUT_CAPABILITIES" + } + ], + "XInputEnable": [ + { + "name": "enable", + "type": "BOOL" + } + ], + "XInputGetAudioDeviceIds": [ + { + "name": "dwUserIndex", + "type": "DWORD" + }, + { + "name": "pRenderDeviceId", + "type": "LPWSTR" + }, + { + "name": "pRenderCount", + "type": "UINT" + }, + { + "name": "pCaptureDeviceId", + "type": "LPWSTR" + }, + { + "name": "pCaptureCount", + "type": "UINT" + } + ], + "XInputGetBatteryInformation": [ + { + "name": "dwUserIndex", + "type": "DWORD" + }, + { + "name": "devType", + "type": "BYTE" + }, + { + "name": "pBatteryInformation", + "type": "XINPUT_BATTERY_INFORMATION" + } + ], + "XInputGetKeystroke": [ + { + "name": "dwUserIndex", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pKeystroke", + "type": "PXINPUT_KEYSTROKE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/xpsprint.json b/qiling/extensions/windows_sdk/xpsprint.json new file mode 100644 index 000000000..29e1bb921 --- /dev/null +++ b/qiling/extensions/windows_sdk/xpsprint.json @@ -0,0 +1,74 @@ +{ + "StartXpsPrintJob": [ + { + "name": "printerName", + "type": "LPCWSTR" + }, + { + "name": "jobName", + "type": "LPCWSTR" + }, + { + "name": "outputFileName", + "type": "LPCWSTR" + }, + { + "name": "progressEvent", + "type": "HANDLE" + }, + { + "name": "completionEvent", + "type": "HANDLE" + }, + { + "name": "printablePagesOn", + "type": "UINT8" + }, + { + "name": "printablePagesOnCount", + "type": "UINT32" + }, + { + "name": "xpsPrintJob", + "type": "IXpsPrintJob" + }, + { + "name": "documentStream", + "type": "IXpsPrintJobStream" + }, + { + "name": "printTicketStream", + "type": "IXpsPrintJobStream" + } + ], + "StartXpsPrintJob1": [ + { + "name": "printerName", + "type": "LPCWSTR" + }, + { + "name": "jobName", + "type": "LPCWSTR" + }, + { + "name": "outputFileName", + "type": "LPCWSTR" + }, + { + "name": "progressEvent", + "type": "HANDLE" + }, + { + "name": "completionEvent", + "type": "HANDLE" + }, + { + "name": "xpsPrintJob", + "type": "IXpsPrintJob" + }, + { + "name": "printContentReceiver", + "type": "IXpsOMPackageTarget" + } + ] +} \ No newline at end of file From c73e78796b1445c9d58b2dbfba171b974c4af3c6 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Thu, 18 Jun 2020 13:11:22 +0800 Subject: [PATCH 03/86] update windows_sdk json file --- ...on => API-MS-Win-Core-SysInfo-L1-2-3.json} | 0 .../{winreg.json => Advapi32.json} | 0 .../Api-ms-win-core-version-l1-2-3.json | 364 + .../{appcompatapi.json => Apphelp.json} | 0 .../windows_sdk/{vfw.json => Avicap32.json} | 0 qiling/extensions/windows_sdk/Avifil32.json | 1722 ++++ qiling/extensions/windows_sdk/Bthprops.json | 426 + .../{gb18030.json => C_g18030.json} | 0 .../{compressapi.json => Cabinet.json} | 0 .../{certbcli.json => Certadm.json} | 0 .../windows_sdk/{cfapi.json => CldApi.json} | 0 .../{objbase.json => ComBase.json} | 0 .../{dpa_dsa.json => Comctl32.json} | 0 .../{commdlg.json => Comdlg32.json} | 0 .../windows_sdk/{wincred.json => Credui.json} | 0 .../{wincrypt.json => Crypt32.json} | 0 qiling/extensions/windows_sdk/Cryptnet.json | 5200 ++++++++++ .../{cryptuiapi.json => Cryptui.json} | 0 ...shadertracing.json => D3D11SDKLayers.json} | 0 .../windows_sdk/D3DCompiler_47.json | 568 ++ .../{dciman.json => Dciman32.json} | 0 qiling/extensions/windows_sdk/DfLayout.json | 518 + .../{dhcpcsdk.json => Dhcpcsvc.json} | 0 .../{dhcpv6csdk.json => Dhcpcsvc6.json} | 0 .../windows_sdk/{windns.json => Dnsapi.json} | 0 .../{errorrep.json => Faultrep.json} | 0 .../windows_sdk/{fltuser.json => FltLib.json} | 0 .../windows_sdk/{fwpmu.json => Fwpuclnt.json} | 0 .../windows_sdk/{imm.json => Imm32.json} | 0 .../windows_sdk/{icwcfg.json => Inetcfg.json} | 0 qiling/extensions/windows_sdk/Instrsa5.json | 5200 ++++++++++ qiling/extensions/windows_sdk/JSProxy.json | 3146 ++++++ .../{wow64apiset.json => Kernel32.json} | 0 .../{handleapi.json => KernelBase.json} | 0 .../windows_sdk/{lzexpand.json => Lz32.json} | 0 .../{msajtransport.json => MSAJApi.json} | 0 .../{mfidl.json => Mfsensorgroup.json} | 0 .../{mmdeviceapi.json => Mmdevapi.json} | 0 .../{windowsdefender.json => MpClient.json} | 0 .../windows_sdk/{npapi.json => Mpr.json} | 0 .../windows_sdk/{dmoreg.json => Msdmo.json} | 0 .../windows_sdk/{wingdi.json => Msimg32.json} | 0 .../windows_sdk/{atacct.json => Mstask.json} | 0 qiling/extensions/windows_sdk/Msvfw32.json | 1722 ++++ .../windows_sdk/{nspapi.json => Mswsock.json} | 0 .../windows_sdk/{shlobj.json => Mydocs.json} | 0 .../{smbclnt.json => NTLanMan.json} | 0 qiling/extensions/windows_sdk/Netapi32.json | 132 + .../{netcon.json => Netshell.json} | 0 .../windows_sdk/{scrnsave.json => None.json} | 0 .../{winnls.json => Normaliz.json} | 0 .../windows_sdk/{winternl.json => Ntdll.json} | 0 .../{comppkgsup.json => Ole32.json} | 0 .../{oleauto.json => OleAut32.json} | 0 qiling/extensions/windows_sdk/P2PGraph.json | 1638 +++ qiling/extensions/windows_sdk/Query.json | 62 + .../windows_sdk/{ras.json => Rasapi32.json} | 0 .../{rasshost.json => Rasman.json} | 0 .../windows_sdk/{rpcnsi.json => Rpcns4.json} | 0 .../{rpcasync.json => Rpcrt4.json} | 0 .../{restartmanager.json => Rstrtmgr.json} | 0 .../windows_sdk/{rtmv2.json => Rtm.json} | 0 qiling/extensions/windows_sdk/Scarddlg.json | 1100 ++ .../{ntsecapi.json => Secur32.json} | 0 qiling/extensions/windows_sdk/Shdocvw.json | 188 + qiling/extensions/windows_sdk/Shell32.json | 4606 +++++++++ .../windows_sdk/{slpublic.json => Slc.json} | 0 qiling/extensions/windows_sdk/Slcext.json | 956 ++ qiling/extensions/windows_sdk/Slwga.json | 956 ++ .../windows_sdk/{snmp.json => Snmpapi.json} | 0 .../{prnasnot.json => Spoolss.json} | 0 .../{srrestoreptapi.json => SrClient.json} | 0 .../{t2embapi.json => T2embed.json} | 0 .../windows_sdk/{ual.json => Ualapi.json} | 0 .../windows_sdk/{intshcut.json => Url.json} | 0 .../windows_sdk/{winuser.json => User32.json} | 0 .../{avrfsdk.json => Verifier.json} | 0 .../{enclaveapi.json => Vertdll.json} | 0 .../{wsdevlicensing.json => WSClient.json} | 0 .../windows_sdk/{wdstpdi.json => Wdsmc.json} | 0 .../windows_sdk/{wdstci.json => Wdstptc.json} | 0 .../windows_sdk/{evcoll.json => Wecapi.json} | 0 .../windows_sdk/{werapi.json => Wer.json} | 0 .../windows_sdk/{winevt.json => Wevtapi.json} | 0 qiling/extensions/windows_sdk/WinRTType.json | 294 + qiling/extensions/windows_sdk/WinSpool.json | 5434 ++++++++++ .../windows_sdk/{mmddk.json => Winmm.json} | 0 .../{wmsdkidl.json => Wmvcore.json} | 0 .../{winsock2.json => Ws2_32.json} | 0 .../windows_sdk/{wsdxml.json => Wsdapi.json} | 0 .../{winsnmp.json => Wsnmp32.json} | 0 qiling/extensions/windows_sdk/aclapi.json | 956 -- .../windows_sdk/{advpub.json => advpack.json} | 0 ...> api-ms-win-appmodel-runtime-l1-1-2.json} | 0 .../api-ms-win-core-enclave-l1-1-0.json | 146 + ...pi-ms-win-core-featurestaging-l1-1-0.json} | 0 ....json => api-ms-win-core-heap-l1-1-0.json} | 0 ...api-ms-win-core-libraryloader-l1-1-1.json} | 0 ... api-ms-win-core-localization-l1-2-1.json} | 0 ...son => api-ms-win-core-memory-l1-1-4.json} | 0 .../api-ms-win-core-memory-l1-1-5.json | 914 ++ ...s-win-core-processenvironment-l1-1-0.json} | 0 .../api-ms-win-core-slapi-l1-1-0.json | 956 ++ .../api-ms-win-core-version-l1-1-0.json | 330 + .../api-ms-win-core-winrt-error-l1-1-1.json | 194 + .../api-ms-win-shcore-thread-L1-1-0.json | 4606 +++++++++ ...pi.json => api-ms-win-wsl-api-l1-1-0.json} | 0 qiling/extensions/windows_sdk/appmgmt.json | 64 - .../extensions/windows_sdk/bluetoothapis.json | 414 +- .../windows_sdk/bluetoothleapis.json | 276 - qiling/extensions/windows_sdk/callobj.json | 20 - qiling/extensions/windows_sdk/clfs.json | 38 - qiling/extensions/windows_sdk/combaseapi.json | 1006 -- qiling/extensions/windows_sdk/coml2api.json | 340 - qiling/extensions/windows_sdk/commctrl.json | 1260 --- qiling/extensions/windows_sdk/d2d1.json | 76 +- qiling/extensions/windows_sdk/d2d1_1.json | 78 - .../extensions/windows_sdk/d2d1_1helper.json | 1 - qiling/extensions/windows_sdk/d2d1_2.json | 8 - qiling/extensions/windows_sdk/d2d1_3.json | 68 - .../extensions/windows_sdk/d2d1_3helper.json | 1 - qiling/extensions/windows_sdk/d2d1helper.json | 24 - qiling/extensions/windows_sdk/d3d10.json | 73 +- .../extensions/windows_sdk/d3d10effect.json | 220 - qiling/extensions/windows_sdk/d3d10misc.json | 72 - qiling/extensions/windows_sdk/d3d11on12.json | 44 - qiling/extensions/windows_sdk/d3d9helper.json | 1 - .../extensions/windows_sdk/datetimeapi.json | 162 - qiling/extensions/windows_sdk/dde.json | 90 - qiling/extensions/windows_sdk/ddeml.json | 436 - qiling/extensions/windows_sdk/debugapi.json | 82 - qiling/extensions/windows_sdk/dpapi.json | 112 - qiling/extensions/windows_sdk/dsgetdc.json | 194 - qiling/extensions/windows_sdk/dsparse.json | 312 - qiling/extensions/windows_sdk/dsrole.json | 22 - qiling/extensions/windows_sdk/dxgi1_3.json | 30 - qiling/extensions/windows_sdk/dxgi1_6.json | 1 - ...lmonitorenumerationapi.json => dxva2.json} | 0 ...aphostpeerconfigapis.json => eappcfg.json} | 0 .../windows_sdk/errhandlingapi.json | 142 - qiling/extensions/windows_sdk/evntprov.json | 174 - qiling/extensions/windows_sdk/evntrace.json | 632 -- .../windows_sdk/{mfapi.json => evr.json} | 0 qiling/extensions/windows_sdk/fci.json | 128 - qiling/extensions/windows_sdk/fdi.json | 104 - qiling/extensions/windows_sdk/fibersapi.json | 36 - qiling/extensions/windows_sdk/fileapi.json | 1134 --- ...networkisolation.json => firewallapi.json} | 0 .../{expandedresources.json => gamemode.json} | 0 qiling/extensions/windows_sdk/gdi32.json | 5434 ++++++++++ qiling/extensions/windows_sdk/guiddef.json | 1 - .../highlevelmonitorconfigurationapi.json | 270 - qiling/extensions/windows_sdk/http.json | 1 - qiling/extensions/windows_sdk/ime.json | 22 - qiling/extensions/windows_sdk/immdev.json | 932 -- qiling/extensions/windows_sdk/inputscope.json | 78 - .../extensions/windows_sdk/inspectable.json | 50 - .../windows_sdk/interlockedapi.json | 54 - qiling/extensions/windows_sdk/ioapiset.json | 182 - qiling/extensions/windows_sdk/ip2string.json | 278 - qiling/extensions/windows_sdk/jobapi.json | 16 - qiling/extensions/windows_sdk/jobapi2.json | 96 - .../extensions/windows_sdk/joystickapi.json | 92 - qiling/extensions/windows_sdk/kernel.json | 8974 +++++++++++++++++ .../extensions/windows_sdk/libloaderapi.json | 374 - qiling/extensions/windows_sdk/lmaccess.json | 952 -- qiling/extensions/windows_sdk/lmserver.json | 216 - qiling/extensions/windows_sdk/lmshare.json | 306 - qiling/extensions/windows_sdk/lmstats.json | 24 - qiling/extensions/windows_sdk/lmuse.json | 82 - qiling/extensions/windows_sdk/lmwksta.json | 158 - .../lowlevelmonitorconfigurationapi.json | 78 - .../windows_sdk/messagedispatcherapi.json | 1 - qiling/extensions/windows_sdk/mf.json | 764 ++ qiling/extensions/windows_sdk/mfobjects.json | 30 - qiling/extensions/windows_sdk/mfplat.json | 1702 ++++ .../extensions/windows_sdk/mftransform.json | 8 - qiling/extensions/windows_sdk/midles.json | 166 - .../windows_sdk/minidumpapiset.json | 54 - qiling/extensions/windows_sdk/mmeapi.json | 1142 --- .../extensions/windows_sdk/mmtasksignal.json | 40 + .../{resourceindexer.json => mrmsupport.json} | 0 qiling/extensions/windows_sdk/msacm.json | 1 - qiling/extensions/windows_sdk/mscat.json | 244 - qiling/extensions/windows_sdk/mschapp.json | 62 - qiling/extensions/windows_sdk/msctf.json | 88 +- .../windows_sdk/{winwlx.json => msgina.json} | 0 qiling/extensions/windows_sdk/msi.json | 3138 ++---- qiling/extensions/windows_sdk/msiquery.json | 1432 --- qiling/extensions/windows_sdk/mssip.json | 144 - .../extensions/windows_sdk/namedpipeapi.json | 138 - .../extensions/windows_sdk/namespaceapi.json | 28 - qiling/extensions/windows_sdk/nb30.json | 8 - qiling/extensions/windows_sdk/ncrypt.json | 554 +- .../extensions/windows_sdk/ncryptprotect.json | 222 - qiling/extensions/windows_sdk/netfw.json | 144 - qiling/extensions/windows_sdk/netioapi.json | 1 - .../{interactioncontext.json => ninput.json} | 0 qiling/extensions/windows_sdk/ntdsapi.json | 1472 +-- qiling/extensions/windows_sdk/oaidl.json | 98 - qiling/extensions/windows_sdk/ole.json | 132 - qiling/extensions/windows_sdk/ole2.json | 1142 --- qiling/extensions/windows_sdk/olectl.json | 246 - .../windows_sdk/oobenotification.json | 22 - qiling/extensions/windows_sdk/opengl32.json | 5434 ++++++++++ qiling/extensions/windows_sdk/perflib.json | 372 - qiling/extensions/windows_sdk/powerbase.json | 56 - .../extensions/windows_sdk/powersetting.json | 174 - qiling/extensions/windows_sdk/powrprof.json | 926 +- .../windows_sdk/processsnapshot.json | 134 - .../windows_sdk/processthreadsapi.json | 1030 -- .../windows_sdk/processtopologyapi.json | 40 - qiling/extensions/windows_sdk/profileapi.json | 14 - qiling/extensions/windows_sdk/propapi.json | 20 - qiling/extensions/windows_sdk/propidl.json | 28 - qiling/extensions/windows_sdk/propsys.json | 1962 +++- .../extensions/windows_sdk/propvarutil.json | 1972 ---- qiling/extensions/windows_sdk/prsht.json | 32 - qiling/extensions/windows_sdk/psapi.json | 364 - .../windows_sdk/realtimeapiset.json | 104 - .../remotesystemadditionalinfo.json | 50 - .../windows_sdk/roregistrationapi.json | 26 - qiling/extensions/windows_sdk/rpcdce.json | 1866 ---- qiling/extensions/windows_sdk/rpcdcep.json | 12 - qiling/extensions/windows_sdk/rpcndr.json | 534 - qiling/extensions/windows_sdk/rpcproxy.json | 380 - qiling/extensions/windows_sdk/rpcssl.json | 30 - qiling/extensions/windows_sdk/rrascfg.json | 1 - .../extensions/windows_sdk/rtlsupportapi.json | 1 - qiling/extensions/windows_sdk/rtworkq.json | 1 - .../extensions/windows_sdk/runtimeobject.json | 194 + qiling/extensions/windows_sdk/sddl.json | 122 - .../extensions/windows_sdk/secforwarder.json | 5200 ++++++++++ .../{evntcons.json => sechost.json} | 0 .../windows_sdk/securityappcontainer.json | 24 - .../windows_sdk/securitybaseapi.json | 1586 --- qiling/extensions/windows_sdk/shcore.json | 94 +- qiling/extensions/windows_sdk/shellapi.json | 922 -- .../windows_sdk/shellscalingapi.json | 96 - qiling/extensions/windows_sdk/shobjidl.json | 40 - .../extensions/windows_sdk/shobjidl_core.json | 382 - qiling/extensions/windows_sdk/socketapi.json | 8 - qiling/extensions/windows_sdk/sspi.json | 1 - qiling/extensions/windows_sdk/stralign.json | 8 - .../extensions/windows_sdk/stringapiset.json | 280 - qiling/extensions/windows_sdk/swdevice.json | 144 - .../windows_sdk/{winsxs.json => sxs.json} | 0 qiling/extensions/windows_sdk/synchapi.json | 778 -- qiling/extensions/windows_sdk/syncmgr.json | 1 - .../windows_sdk/systemtopologyapi.json | 28 - qiling/extensions/windows_sdk/tapi.json | 1 - .../windows_sdk/threadpoolapiset.json | 376 - .../windows_sdk/threadpoollegacyapiset.json | 104 - qiling/extensions/windows_sdk/timeapi.json | 40 - .../extensions/windows_sdk/timezoneapi.json | 140 - qiling/extensions/windows_sdk/tlhelp32.json | 174 - .../{appnotify.json => twinapi.json} | 0 qiling/extensions/windows_sdk/unknwn.json | 1 - qiling/extensions/windows_sdk/unknwnbase.json | 28 - qiling/extensions/windows_sdk/utilapiset.json | 12 - .../windows_sdk/versionhelpers.json | 1 - qiling/extensions/windows_sdk/wct.json | 58 - qiling/extensions/windows_sdk/wia_xp.json | 50 - qiling/extensions/windows_sdk/winbase.json | 7596 -------------- qiling/extensions/windows_sdk/windef.json | 4864 --------- qiling/extensions/windows_sdk/windows.json | 29 +- .../extensions/windows_sdk/windowsceip.json | 1 - qiling/extensions/windows_sdk/winefs.json | 86 - .../extensions/windows_sdk/winenclaveapi.json | 1 - .../{mmiscapi.json => winmmbse.json} | 0 qiling/extensions/windows_sdk/winnetwk.json | 624 -- qiling/extensions/windows_sdk/winnls32.json | 12 - qiling/extensions/windows_sdk/winnt.json | 1 - qiling/extensions/windows_sdk/winsafer.json | 182 - qiling/extensions/windows_sdk/winsock.json | 582 -- qiling/extensions/windows_sdk/winsvc.json | 1006 -- qiling/extensions/windows_sdk/wintrust.json | 236 +- .../{robuffer.json => wintypes.json} | 0 qiling/extensions/windows_sdk/wlanui.json | 1184 +++ .../extensions/windows_sdk/wmcontainer.json | 152 - .../extensions/windows_sdk/wmpservices.json | 1 - .../extensions/windows_sdk/wmsdkvalidate.json | 38 - .../windows_sdk/{wofapi.json => wofutil.json} | 0 qiling/extensions/windows_sdk/ws2spi.json | 526 - qiling/extensions/windows_sdk/ws2tcpip.json | 568 -- .../extensions/windows_sdk/wsdattachment.json | 8 - qiling/extensions/windows_sdk/wsipv6ok.json | 60 - qiling/extensions/windows_sdk/wsman.json | 1 - qiling/extensions/windows_sdk/wtshintapi.json | 24 - qiling/extensions/windows_sdk/xamlom.json | 28 - qiling/extensions/windows_sdk/xapofx.json | 20 - qiling/extensions/windows_sdk/xaudio2.json | 16 - qiling/extensions/windows_sdk/xaudio2fx.json | 12 - .../{xinput.json => xinput1_4.json} | 0 294 files changed, 73330 insertions(+), 53086 deletions(-) rename qiling/extensions/windows_sdk/{sysinfoapi.json => API-MS-Win-Core-SysInfo-L1-2-3.json} (100%) rename qiling/extensions/windows_sdk/{winreg.json => Advapi32.json} (100%) create mode 100644 qiling/extensions/windows_sdk/Api-ms-win-core-version-l1-2-3.json rename qiling/extensions/windows_sdk/{appcompatapi.json => Apphelp.json} (100%) rename qiling/extensions/windows_sdk/{vfw.json => Avicap32.json} (100%) create mode 100644 qiling/extensions/windows_sdk/Avifil32.json create mode 100644 qiling/extensions/windows_sdk/Bthprops.json rename qiling/extensions/windows_sdk/{gb18030.json => C_g18030.json} (100%) rename qiling/extensions/windows_sdk/{compressapi.json => Cabinet.json} (100%) rename qiling/extensions/windows_sdk/{certbcli.json => Certadm.json} (100%) rename qiling/extensions/windows_sdk/{cfapi.json => CldApi.json} (100%) rename qiling/extensions/windows_sdk/{objbase.json => ComBase.json} (100%) rename qiling/extensions/windows_sdk/{dpa_dsa.json => Comctl32.json} (100%) rename qiling/extensions/windows_sdk/{commdlg.json => Comdlg32.json} (100%) rename qiling/extensions/windows_sdk/{wincred.json => Credui.json} (100%) rename qiling/extensions/windows_sdk/{wincrypt.json => Crypt32.json} (100%) create mode 100644 qiling/extensions/windows_sdk/Cryptnet.json rename qiling/extensions/windows_sdk/{cryptuiapi.json => Cryptui.json} (100%) rename qiling/extensions/windows_sdk/{d3d11shadertracing.json => D3D11SDKLayers.json} (100%) create mode 100644 qiling/extensions/windows_sdk/D3DCompiler_47.json rename qiling/extensions/windows_sdk/{dciman.json => Dciman32.json} (100%) create mode 100644 qiling/extensions/windows_sdk/DfLayout.json rename qiling/extensions/windows_sdk/{dhcpcsdk.json => Dhcpcsvc.json} (100%) rename qiling/extensions/windows_sdk/{dhcpv6csdk.json => Dhcpcsvc6.json} (100%) rename qiling/extensions/windows_sdk/{windns.json => Dnsapi.json} (100%) rename qiling/extensions/windows_sdk/{errorrep.json => Faultrep.json} (100%) rename qiling/extensions/windows_sdk/{fltuser.json => FltLib.json} (100%) rename qiling/extensions/windows_sdk/{fwpmu.json => Fwpuclnt.json} (100%) rename qiling/extensions/windows_sdk/{imm.json => Imm32.json} (100%) rename qiling/extensions/windows_sdk/{icwcfg.json => Inetcfg.json} (100%) create mode 100644 qiling/extensions/windows_sdk/Instrsa5.json create mode 100644 qiling/extensions/windows_sdk/JSProxy.json rename qiling/extensions/windows_sdk/{wow64apiset.json => Kernel32.json} (100%) rename qiling/extensions/windows_sdk/{handleapi.json => KernelBase.json} (100%) rename qiling/extensions/windows_sdk/{lzexpand.json => Lz32.json} (100%) rename qiling/extensions/windows_sdk/{msajtransport.json => MSAJApi.json} (100%) rename qiling/extensions/windows_sdk/{mfidl.json => Mfsensorgroup.json} (100%) rename qiling/extensions/windows_sdk/{mmdeviceapi.json => Mmdevapi.json} (100%) rename qiling/extensions/windows_sdk/{windowsdefender.json => MpClient.json} (100%) rename qiling/extensions/windows_sdk/{npapi.json => Mpr.json} (100%) rename qiling/extensions/windows_sdk/{dmoreg.json => Msdmo.json} (100%) rename qiling/extensions/windows_sdk/{wingdi.json => Msimg32.json} (100%) rename qiling/extensions/windows_sdk/{atacct.json => Mstask.json} (100%) create mode 100644 qiling/extensions/windows_sdk/Msvfw32.json rename qiling/extensions/windows_sdk/{nspapi.json => Mswsock.json} (100%) rename qiling/extensions/windows_sdk/{shlobj.json => Mydocs.json} (100%) rename qiling/extensions/windows_sdk/{smbclnt.json => NTLanMan.json} (100%) create mode 100644 qiling/extensions/windows_sdk/Netapi32.json rename qiling/extensions/windows_sdk/{netcon.json => Netshell.json} (100%) rename qiling/extensions/windows_sdk/{scrnsave.json => None.json} (100%) rename qiling/extensions/windows_sdk/{winnls.json => Normaliz.json} (100%) rename qiling/extensions/windows_sdk/{winternl.json => Ntdll.json} (100%) rename qiling/extensions/windows_sdk/{comppkgsup.json => Ole32.json} (100%) rename qiling/extensions/windows_sdk/{oleauto.json => OleAut32.json} (100%) create mode 100644 qiling/extensions/windows_sdk/P2PGraph.json create mode 100644 qiling/extensions/windows_sdk/Query.json rename qiling/extensions/windows_sdk/{ras.json => Rasapi32.json} (100%) rename qiling/extensions/windows_sdk/{rasshost.json => Rasman.json} (100%) rename qiling/extensions/windows_sdk/{rpcnsi.json => Rpcns4.json} (100%) rename qiling/extensions/windows_sdk/{rpcasync.json => Rpcrt4.json} (100%) rename qiling/extensions/windows_sdk/{restartmanager.json => Rstrtmgr.json} (100%) rename qiling/extensions/windows_sdk/{rtmv2.json => Rtm.json} (100%) create mode 100644 qiling/extensions/windows_sdk/Scarddlg.json rename qiling/extensions/windows_sdk/{ntsecapi.json => Secur32.json} (100%) create mode 100644 qiling/extensions/windows_sdk/Shdocvw.json create mode 100644 qiling/extensions/windows_sdk/Shell32.json rename qiling/extensions/windows_sdk/{slpublic.json => Slc.json} (100%) create mode 100644 qiling/extensions/windows_sdk/Slcext.json create mode 100644 qiling/extensions/windows_sdk/Slwga.json rename qiling/extensions/windows_sdk/{snmp.json => Snmpapi.json} (100%) rename qiling/extensions/windows_sdk/{prnasnot.json => Spoolss.json} (100%) rename qiling/extensions/windows_sdk/{srrestoreptapi.json => SrClient.json} (100%) rename qiling/extensions/windows_sdk/{t2embapi.json => T2embed.json} (100%) rename qiling/extensions/windows_sdk/{ual.json => Ualapi.json} (100%) rename qiling/extensions/windows_sdk/{intshcut.json => Url.json} (100%) rename qiling/extensions/windows_sdk/{winuser.json => User32.json} (100%) rename qiling/extensions/windows_sdk/{avrfsdk.json => Verifier.json} (100%) rename qiling/extensions/windows_sdk/{enclaveapi.json => Vertdll.json} (100%) rename qiling/extensions/windows_sdk/{wsdevlicensing.json => WSClient.json} (100%) rename qiling/extensions/windows_sdk/{wdstpdi.json => Wdsmc.json} (100%) rename qiling/extensions/windows_sdk/{wdstci.json => Wdstptc.json} (100%) rename qiling/extensions/windows_sdk/{evcoll.json => Wecapi.json} (100%) rename qiling/extensions/windows_sdk/{werapi.json => Wer.json} (100%) rename qiling/extensions/windows_sdk/{winevt.json => Wevtapi.json} (100%) create mode 100644 qiling/extensions/windows_sdk/WinRTType.json create mode 100644 qiling/extensions/windows_sdk/WinSpool.json rename qiling/extensions/windows_sdk/{mmddk.json => Winmm.json} (100%) rename qiling/extensions/windows_sdk/{wmsdkidl.json => Wmvcore.json} (100%) rename qiling/extensions/windows_sdk/{winsock2.json => Ws2_32.json} (100%) rename qiling/extensions/windows_sdk/{wsdxml.json => Wsdapi.json} (100%) rename qiling/extensions/windows_sdk/{winsnmp.json => Wsnmp32.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/aclapi.json rename qiling/extensions/windows_sdk/{advpub.json => advpack.json} (100%) rename qiling/extensions/windows_sdk/{appmodel.json => api-ms-win-appmodel-runtime-l1-1-2.json} (100%) create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0.json rename qiling/extensions/windows_sdk/{featurestagingapi.json => api-ms-win-core-featurestaging-l1-1-0.json} (100%) rename qiling/extensions/windows_sdk/{heapapi.json => api-ms-win-core-heap-l1-1-0.json} (100%) rename qiling/extensions/windows_sdk/{libloaderapi2.json => api-ms-win-core-libraryloader-l1-1-1.json} (100%) rename qiling/extensions/windows_sdk/{winver.json => api-ms-win-core-localization-l1-2-1.json} (100%) rename qiling/extensions/windows_sdk/{memoryapi.json => api-ms-win-core-memory-l1-1-4.json} (100%) create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5.json rename qiling/extensions/windows_sdk/{processenv.json => api-ms-win-core-processenvironment-l1-1-0.json} (100%) create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0.json create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0.json create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1.json create mode 100644 qiling/extensions/windows_sdk/api-ms-win-shcore-thread-L1-1-0.json rename qiling/extensions/windows_sdk/{wslapi.json => api-ms-win-wsl-api-l1-1-0.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/appmgmt.json delete mode 100644 qiling/extensions/windows_sdk/bluetoothleapis.json delete mode 100644 qiling/extensions/windows_sdk/callobj.json delete mode 100644 qiling/extensions/windows_sdk/clfs.json delete mode 100644 qiling/extensions/windows_sdk/combaseapi.json delete mode 100644 qiling/extensions/windows_sdk/coml2api.json delete mode 100644 qiling/extensions/windows_sdk/commctrl.json delete mode 100644 qiling/extensions/windows_sdk/d2d1_1.json delete mode 100644 qiling/extensions/windows_sdk/d2d1_1helper.json delete mode 100644 qiling/extensions/windows_sdk/d2d1_2.json delete mode 100644 qiling/extensions/windows_sdk/d2d1_3.json delete mode 100644 qiling/extensions/windows_sdk/d2d1_3helper.json delete mode 100644 qiling/extensions/windows_sdk/d2d1helper.json delete mode 100644 qiling/extensions/windows_sdk/d3d10effect.json delete mode 100644 qiling/extensions/windows_sdk/d3d10misc.json delete mode 100644 qiling/extensions/windows_sdk/d3d11on12.json delete mode 100644 qiling/extensions/windows_sdk/d3d9helper.json delete mode 100644 qiling/extensions/windows_sdk/datetimeapi.json delete mode 100644 qiling/extensions/windows_sdk/dde.json delete mode 100644 qiling/extensions/windows_sdk/ddeml.json delete mode 100644 qiling/extensions/windows_sdk/debugapi.json delete mode 100644 qiling/extensions/windows_sdk/dpapi.json delete mode 100644 qiling/extensions/windows_sdk/dsgetdc.json delete mode 100644 qiling/extensions/windows_sdk/dsparse.json delete mode 100644 qiling/extensions/windows_sdk/dsrole.json delete mode 100644 qiling/extensions/windows_sdk/dxgi1_3.json delete mode 100644 qiling/extensions/windows_sdk/dxgi1_6.json rename qiling/extensions/windows_sdk/{physicalmonitorenumerationapi.json => dxva2.json} (100%) rename qiling/extensions/windows_sdk/{eaphostpeerconfigapis.json => eappcfg.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/errhandlingapi.json delete mode 100644 qiling/extensions/windows_sdk/evntprov.json delete mode 100644 qiling/extensions/windows_sdk/evntrace.json rename qiling/extensions/windows_sdk/{mfapi.json => evr.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/fci.json delete mode 100644 qiling/extensions/windows_sdk/fdi.json delete mode 100644 qiling/extensions/windows_sdk/fibersapi.json delete mode 100644 qiling/extensions/windows_sdk/fileapi.json rename qiling/extensions/windows_sdk/{networkisolation.json => firewallapi.json} (100%) rename qiling/extensions/windows_sdk/{expandedresources.json => gamemode.json} (100%) create mode 100644 qiling/extensions/windows_sdk/gdi32.json delete mode 100644 qiling/extensions/windows_sdk/guiddef.json delete mode 100644 qiling/extensions/windows_sdk/highlevelmonitorconfigurationapi.json delete mode 100644 qiling/extensions/windows_sdk/http.json delete mode 100644 qiling/extensions/windows_sdk/ime.json delete mode 100644 qiling/extensions/windows_sdk/immdev.json delete mode 100644 qiling/extensions/windows_sdk/inputscope.json delete mode 100644 qiling/extensions/windows_sdk/inspectable.json delete mode 100644 qiling/extensions/windows_sdk/interlockedapi.json delete mode 100644 qiling/extensions/windows_sdk/ioapiset.json delete mode 100644 qiling/extensions/windows_sdk/ip2string.json delete mode 100644 qiling/extensions/windows_sdk/jobapi.json delete mode 100644 qiling/extensions/windows_sdk/jobapi2.json delete mode 100644 qiling/extensions/windows_sdk/joystickapi.json create mode 100644 qiling/extensions/windows_sdk/kernel.json delete mode 100644 qiling/extensions/windows_sdk/libloaderapi.json delete mode 100644 qiling/extensions/windows_sdk/lmaccess.json delete mode 100644 qiling/extensions/windows_sdk/lmserver.json delete mode 100644 qiling/extensions/windows_sdk/lmshare.json delete mode 100644 qiling/extensions/windows_sdk/lmstats.json delete mode 100644 qiling/extensions/windows_sdk/lmuse.json delete mode 100644 qiling/extensions/windows_sdk/lmwksta.json delete mode 100644 qiling/extensions/windows_sdk/lowlevelmonitorconfigurationapi.json delete mode 100644 qiling/extensions/windows_sdk/messagedispatcherapi.json create mode 100644 qiling/extensions/windows_sdk/mf.json delete mode 100644 qiling/extensions/windows_sdk/mfobjects.json create mode 100644 qiling/extensions/windows_sdk/mfplat.json delete mode 100644 qiling/extensions/windows_sdk/mftransform.json delete mode 100644 qiling/extensions/windows_sdk/midles.json delete mode 100644 qiling/extensions/windows_sdk/minidumpapiset.json delete mode 100644 qiling/extensions/windows_sdk/mmeapi.json create mode 100644 qiling/extensions/windows_sdk/mmtasksignal.json rename qiling/extensions/windows_sdk/{resourceindexer.json => mrmsupport.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/msacm.json delete mode 100644 qiling/extensions/windows_sdk/mscat.json delete mode 100644 qiling/extensions/windows_sdk/mschapp.json rename qiling/extensions/windows_sdk/{winwlx.json => msgina.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/msiquery.json delete mode 100644 qiling/extensions/windows_sdk/mssip.json delete mode 100644 qiling/extensions/windows_sdk/namedpipeapi.json delete mode 100644 qiling/extensions/windows_sdk/namespaceapi.json delete mode 100644 qiling/extensions/windows_sdk/nb30.json delete mode 100644 qiling/extensions/windows_sdk/ncryptprotect.json delete mode 100644 qiling/extensions/windows_sdk/netfw.json delete mode 100644 qiling/extensions/windows_sdk/netioapi.json rename qiling/extensions/windows_sdk/{interactioncontext.json => ninput.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/oaidl.json delete mode 100644 qiling/extensions/windows_sdk/ole.json delete mode 100644 qiling/extensions/windows_sdk/ole2.json delete mode 100644 qiling/extensions/windows_sdk/olectl.json delete mode 100644 qiling/extensions/windows_sdk/oobenotification.json create mode 100644 qiling/extensions/windows_sdk/opengl32.json delete mode 100644 qiling/extensions/windows_sdk/perflib.json delete mode 100644 qiling/extensions/windows_sdk/powerbase.json delete mode 100644 qiling/extensions/windows_sdk/powersetting.json delete mode 100644 qiling/extensions/windows_sdk/processsnapshot.json delete mode 100644 qiling/extensions/windows_sdk/processthreadsapi.json delete mode 100644 qiling/extensions/windows_sdk/processtopologyapi.json delete mode 100644 qiling/extensions/windows_sdk/profileapi.json delete mode 100644 qiling/extensions/windows_sdk/propapi.json delete mode 100644 qiling/extensions/windows_sdk/propidl.json delete mode 100644 qiling/extensions/windows_sdk/propvarutil.json delete mode 100644 qiling/extensions/windows_sdk/prsht.json delete mode 100644 qiling/extensions/windows_sdk/psapi.json delete mode 100644 qiling/extensions/windows_sdk/realtimeapiset.json delete mode 100644 qiling/extensions/windows_sdk/remotesystemadditionalinfo.json delete mode 100644 qiling/extensions/windows_sdk/roregistrationapi.json delete mode 100644 qiling/extensions/windows_sdk/rpcdce.json delete mode 100644 qiling/extensions/windows_sdk/rpcdcep.json delete mode 100644 qiling/extensions/windows_sdk/rpcndr.json delete mode 100644 qiling/extensions/windows_sdk/rpcproxy.json delete mode 100644 qiling/extensions/windows_sdk/rpcssl.json delete mode 100644 qiling/extensions/windows_sdk/rrascfg.json delete mode 100644 qiling/extensions/windows_sdk/rtlsupportapi.json delete mode 100644 qiling/extensions/windows_sdk/rtworkq.json create mode 100644 qiling/extensions/windows_sdk/runtimeobject.json delete mode 100644 qiling/extensions/windows_sdk/sddl.json create mode 100644 qiling/extensions/windows_sdk/secforwarder.json rename qiling/extensions/windows_sdk/{evntcons.json => sechost.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/securityappcontainer.json delete mode 100644 qiling/extensions/windows_sdk/securitybaseapi.json delete mode 100644 qiling/extensions/windows_sdk/shellapi.json delete mode 100644 qiling/extensions/windows_sdk/shellscalingapi.json delete mode 100644 qiling/extensions/windows_sdk/shobjidl.json delete mode 100644 qiling/extensions/windows_sdk/shobjidl_core.json delete mode 100644 qiling/extensions/windows_sdk/socketapi.json delete mode 100644 qiling/extensions/windows_sdk/sspi.json delete mode 100644 qiling/extensions/windows_sdk/stralign.json delete mode 100644 qiling/extensions/windows_sdk/stringapiset.json delete mode 100644 qiling/extensions/windows_sdk/swdevice.json rename qiling/extensions/windows_sdk/{winsxs.json => sxs.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/synchapi.json delete mode 100644 qiling/extensions/windows_sdk/syncmgr.json delete mode 100644 qiling/extensions/windows_sdk/systemtopologyapi.json delete mode 100644 qiling/extensions/windows_sdk/tapi.json delete mode 100644 qiling/extensions/windows_sdk/threadpoolapiset.json delete mode 100644 qiling/extensions/windows_sdk/threadpoollegacyapiset.json delete mode 100644 qiling/extensions/windows_sdk/timeapi.json delete mode 100644 qiling/extensions/windows_sdk/timezoneapi.json delete mode 100644 qiling/extensions/windows_sdk/tlhelp32.json rename qiling/extensions/windows_sdk/{appnotify.json => twinapi.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/unknwn.json delete mode 100644 qiling/extensions/windows_sdk/unknwnbase.json delete mode 100644 qiling/extensions/windows_sdk/utilapiset.json delete mode 100644 qiling/extensions/windows_sdk/versionhelpers.json delete mode 100644 qiling/extensions/windows_sdk/wct.json delete mode 100644 qiling/extensions/windows_sdk/wia_xp.json delete mode 100644 qiling/extensions/windows_sdk/winbase.json delete mode 100644 qiling/extensions/windows_sdk/windef.json delete mode 100644 qiling/extensions/windows_sdk/windowsceip.json delete mode 100644 qiling/extensions/windows_sdk/winefs.json delete mode 100644 qiling/extensions/windows_sdk/winenclaveapi.json rename qiling/extensions/windows_sdk/{mmiscapi.json => winmmbse.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/winnetwk.json delete mode 100644 qiling/extensions/windows_sdk/winnls32.json delete mode 100644 qiling/extensions/windows_sdk/winnt.json delete mode 100644 qiling/extensions/windows_sdk/winsafer.json delete mode 100644 qiling/extensions/windows_sdk/winsock.json delete mode 100644 qiling/extensions/windows_sdk/winsvc.json rename qiling/extensions/windows_sdk/{robuffer.json => wintypes.json} (100%) create mode 100644 qiling/extensions/windows_sdk/wlanui.json delete mode 100644 qiling/extensions/windows_sdk/wmcontainer.json delete mode 100644 qiling/extensions/windows_sdk/wmpservices.json delete mode 100644 qiling/extensions/windows_sdk/wmsdkvalidate.json rename qiling/extensions/windows_sdk/{wofapi.json => wofutil.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/ws2spi.json delete mode 100644 qiling/extensions/windows_sdk/ws2tcpip.json delete mode 100644 qiling/extensions/windows_sdk/wsdattachment.json delete mode 100644 qiling/extensions/windows_sdk/wsipv6ok.json delete mode 100644 qiling/extensions/windows_sdk/wsman.json delete mode 100644 qiling/extensions/windows_sdk/wtshintapi.json delete mode 100644 qiling/extensions/windows_sdk/xamlom.json delete mode 100644 qiling/extensions/windows_sdk/xapofx.json delete mode 100644 qiling/extensions/windows_sdk/xaudio2.json delete mode 100644 qiling/extensions/windows_sdk/xaudio2fx.json rename qiling/extensions/windows_sdk/{xinput.json => xinput1_4.json} (100%) diff --git a/qiling/extensions/windows_sdk/sysinfoapi.json b/qiling/extensions/windows_sdk/API-MS-Win-Core-SysInfo-L1-2-3.json similarity index 100% rename from qiling/extensions/windows_sdk/sysinfoapi.json rename to qiling/extensions/windows_sdk/API-MS-Win-Core-SysInfo-L1-2-3.json diff --git a/qiling/extensions/windows_sdk/winreg.json b/qiling/extensions/windows_sdk/Advapi32.json similarity index 100% rename from qiling/extensions/windows_sdk/winreg.json rename to qiling/extensions/windows_sdk/Advapi32.json diff --git a/qiling/extensions/windows_sdk/Api-ms-win-core-version-l1-2-3.json b/qiling/extensions/windows_sdk/Api-ms-win-core-version-l1-2-3.json new file mode 100644 index 000000000..e9887ce36 --- /dev/null +++ b/qiling/extensions/windows_sdk/Api-ms-win-core-version-l1-2-3.json @@ -0,0 +1,364 @@ +{ + "GlobalMemoryStatusEx": [ + { + "name": "lpBuffer", + "type": "LPMEMORYSTATUSEX" + } + ], + "GetSystemInfo": [ + { + "name": "lpSystemInfo", + "type": "LPSYSTEM_INFO" + } + ], + "GetSystemTime": [ + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "GetSystemTimeAsFileTime": [ + { + "name": "lpSystemTimeAsFileTime", + "type": "LPFILETIME" + } + ], + "GetLocalTime": [ + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "GetVersion": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetLocalTime": [ + { + "name": "lpSystemTime", + "type": "SYSTEMTIME" + } + ], + "GetTickCount": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetTickCount64": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemTimeAdjustment": [ + { + "name": "lpTimeAdjustment", + "type": "PDWORD" + }, + { + "name": "lpTimeIncrement", + "type": "PDWORD" + }, + { + "name": "lpTimeAdjustmentDisabled", + "type": "PBOOL" + } + ], + "GetSystemTimeAdjustmentPrecise": [ + { + "name": "lpTimeAdjustment", + "type": "PDWORD64" + }, + { + "name": "lpTimeIncrement", + "type": "PDWORD64" + }, + { + "name": "lpTimeAdjustmentDisabled", + "type": "PBOOL" + } + ], + "GetSystemDirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemDirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetWindowsDirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetWindowsDirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemWindowsDirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemWindowsDirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetComputerNameExA": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "GetComputerNameExW": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "SetComputerNameExW": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPCWSTR" + } + ], + "SetSystemTime": [ + { + "name": "lpSystemTime", + "type": "SYSTEMTIME" + } + ], + "GetVersionExA": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOA" + } + ], + "GetVersionExW": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOW" + } + ], + "GetLogicalProcessorInformation": [ + { + "name": "Buffer", + "type": "PSYSTEM_LOGICAL_PROCESSOR_INFORMATION" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "GetLogicalProcessorInformationEx": [ + { + "name": "RelationshipType", + "type": "LOGICAL_PROCESSOR_RELATIONSHIP" + }, + { + "name": "Buffer", + "type": "PSYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "GetNativeSystemInfo": [ + { + "name": "lpSystemInfo", + "type": "LPSYSTEM_INFO" + } + ], + "GetSystemTimePreciseAsFileTime": [ + { + "name": "lpSystemTimeAsFileTime", + "type": "LPFILETIME" + } + ], + "GetProductInfo": [ + { + "name": "dwOSMajorVersion", + "type": "DWORD" + }, + { + "name": "dwOSMinorVersion", + "type": "DWORD" + }, + { + "name": "dwSpMajorVersion", + "type": "DWORD" + }, + { + "name": "dwSpMinorVersion", + "type": "DWORD" + }, + { + "name": "pdwReturnedProductType", + "type": "PDWORD" + } + ], + "EnumSystemFirmwareTables": [ + { + "name": "FirmwareTableProviderSignature", + "type": "DWORD" + }, + { + "name": "pFirmwareTableEnumBuffer", + "type": "PVOID" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "GetSystemFirmwareTable": [ + { + "name": "FirmwareTableProviderSignature", + "type": "DWORD" + }, + { + "name": "FirmwareTableID", + "type": "DWORD" + }, + { + "name": "pFirmwareTableBuffer", + "type": "PVOID" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "GetPhysicallyInstalledSystemMemory": [ + { + "name": "TotalMemoryInKilobytes", + "type": "PULONGLONG" + } + ], + "SetSystemTimeAdjustment": [ + { + "name": "dwTimeAdjustment", + "type": "DWORD" + }, + { + "name": "bTimeAdjustmentDisabled", + "type": "BOOL" + } + ], + "SetSystemTimeAdjustmentPrecise": [ + { + "name": "dwTimeAdjustment", + "type": "DWORD64" + }, + { + "name": "bTimeAdjustmentDisabled", + "type": "BOOL" + } + ], + "InstallELAMCertificateInfo": [ + { + "name": "ELAMFile", + "type": "HANDLE" + } + ], + "GetProcessorSystemCycleTime": [ + { + "name": "Group", + "type": "USHORT" + }, + { + "name": "Buffer", + "type": "PSYSTEM_PROCESSOR_CYCLE_TIME_INFORMATION" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "GetIntegratedDisplaySize": [ + { + "name": "sizeInInches", + "type": "double" + } + ], + "SetComputerNameA": [ + { + "name": "lpComputerName", + "type": "LPCSTR" + } + ], + "SetComputerNameW": [ + { + "name": "lpComputerName", + "type": "LPCWSTR" + } + ], + "SetComputerNameExA": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPCSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/appcompatapi.json b/qiling/extensions/windows_sdk/Apphelp.json similarity index 100% rename from qiling/extensions/windows_sdk/appcompatapi.json rename to qiling/extensions/windows_sdk/Apphelp.json diff --git a/qiling/extensions/windows_sdk/vfw.json b/qiling/extensions/windows_sdk/Avicap32.json similarity index 100% rename from qiling/extensions/windows_sdk/vfw.json rename to qiling/extensions/windows_sdk/Avicap32.json diff --git a/qiling/extensions/windows_sdk/Avifil32.json b/qiling/extensions/windows_sdk/Avifil32.json new file mode 100644 index 000000000..382f95441 --- /dev/null +++ b/qiling/extensions/windows_sdk/Avifil32.json @@ -0,0 +1,1722 @@ +{ + "ICInfo": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lpicinfo", + "type": "ICINFO" + } + ], + "ICInstall": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "szDesc", + "type": "LPSTR" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "ICRemove": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "ICGetInfo": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "picinfo", + "type": "ICINFO" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "ICOpen": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wMode", + "type": "UINT" + } + ], + "ICOpenFunction": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wMode", + "type": "UINT" + }, + { + "name": "lpfnHandler", + "type": "FARPROC" + } + ], + "ICClose": [ + { + "name": "hic", + "type": "HIC" + } + ], + "ICSendMessage": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "msg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "ICCompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpbiOutput", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpbiInput", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpckid", + "type": "LPDWORD" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lFrameNum", + "type": "LONG" + }, + { + "name": "dwFrameSize", + "type": "DWORD" + }, + { + "name": "dwQuality", + "type": "DWORD" + }, + { + "name": "lpbiPrev", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpPrev", + "type": "LPVOID" + } + ], + "ICDecompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpbiFormat", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + } + ], + "ICDrawBegin": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDst", + "type": "int" + }, + { + "name": "yDst", + "type": "int" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "dwRate", + "type": "DWORD" + }, + { + "name": "dwScale", + "type": "DWORD" + } + ], + "ICDraw": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "lTime", + "type": "LONG" + } + ], + "ICLocate": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "wFlags", + "type": "WORD" + } + ], + "ICGetDisplayFormat": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "BitDepth", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "ICImageCompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFO" + }, + { + "name": "lQuality", + "type": "LONG" + }, + { + "name": "plSize", + "type": "LONG" + } + ], + "ICImageDecompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFO" + } + ], + "ICCompressorChoose": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "pvIn", + "type": "LPVOID" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "lpszTitle", + "type": "LPSTR" + } + ], + "ICSeqCompressFrameStart": [ + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + } + ], + "ICSeqCompressFrameEnd": [ + { + "name": "pc", + "type": "PCOMPVARS" + } + ], + "ICSeqCompressFrame": [ + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "pfKey", + "type": "BOOL" + }, + { + "name": "plSize", + "type": "LONG" + } + ], + "ICCompressorFree": [ + { + "name": "pc", + "type": "PCOMPVARS" + } + ], + "DrawDibOpen": [ + { + "name": "VOID", + "type": "void" + } + ], + "DrawDibClose": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibGetBuffer": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "dwSize", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DrawDibGetPalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibSetPalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hpal", + "type": "HPALETTE" + } + ], + "DrawDibChangePalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "iStart", + "type": "int" + }, + { + "name": "iLen", + "type": "int" + }, + { + "name": "lppe", + "type": "LPPALETTEENTRY" + } + ], + "DrawDibRealize": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "fBackground", + "type": "BOOL" + } + ], + "DrawDibStart": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "rate", + "type": "DWORD" + } + ], + "DrawDibStop": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibBegin": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "DrawDibDraw": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDst", + "type": "int" + }, + { + "name": "yDst", + "type": "int" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "DrawDibEnd": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibTime": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "lpddtime", + "type": "LPDRAWDIBTIME" + } + ], + "DrawDibProfileDisplay": [ + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + } + ], + "AVIFileInit": [ + { + "name": "VOID", + "type": "void" + } + ], + "AVIFileExit": [ + { + "name": "VOID", + "type": "void" + } + ], + "AVIFileAddRef": [ + { + "name": "pfile", + "type": "PAVIFILE" + } + ], + "AVIFileRelease": [ + { + "name": "pfile", + "type": "PAVIFILE" + } + ], + "AVIFileOpenA": [ + { + "name": "ppfile", + "type": "PAVIFILE" + }, + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "uMode", + "type": "UINT" + }, + { + "name": "lpHandler", + "type": "LPCLSID" + } + ], + "AVIFileOpenW": [ + { + "name": "ppfile", + "type": "PAVIFILE" + }, + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "uMode", + "type": "UINT" + }, + { + "name": "lpHandler", + "type": "LPCLSID" + } + ], + "AVIFileInfoW": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "pfi", + "type": "LPAVIFILEINFOW" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIFileInfoA": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "pfi", + "type": "LPAVIFILEINFOA" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIFileGetStream": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG" + } + ], + "AVIFileCreateStreamW": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "AVISTREAMINFOW" + } + ], + "AVIFileCreateStreamA": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "AVISTREAMINFOA" + } + ], + "AVIFileWriteData": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ckid", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cbData", + "type": "LONG" + } + ], + "AVIFileReadData": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ckid", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpcbData", + "type": "LONG" + } + ], + "AVIFileEndRecord": [ + { + "name": "pfile", + "type": "PAVIFILE" + } + ], + "AVIStreamAddRef": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamRelease": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamInfoW": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "LPAVISTREAMINFOW" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIStreamInfoA": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "LPAVISTREAMINFOA" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIStreamFindSample": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lPos", + "type": "LONG" + }, + { + "name": "lFlags", + "type": "LONG" + } + ], + "AVIStreamReadFormat": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lPos", + "type": "LONG" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "lpcbFormat", + "type": "LONG" + } + ], + "AVIStreamSetFormat": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lPos", + "type": "LONG" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "cbFormat", + "type": "LONG" + } + ], + "AVIStreamReadData": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "fcc", + "type": "DWORD" + }, + { + "name": "lp", + "type": "LPVOID" + }, + { + "name": "lpcb", + "type": "LONG" + } + ], + "AVIStreamWriteData": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "fcc", + "type": "DWORD" + }, + { + "name": "lp", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "LONG" + } + ], + "AVIStreamRead": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lSamples", + "type": "LONG" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbBuffer", + "type": "LONG" + }, + { + "name": "plBytes", + "type": "LONG" + }, + { + "name": "plSamples", + "type": "LONG" + } + ], + "AVIStreamWrite": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lSamples", + "type": "LONG" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbBuffer", + "type": "LONG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "plSampWritten", + "type": "LONG" + }, + { + "name": "plBytesWritten", + "type": "LONG" + } + ], + "AVIStreamStart": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamLength": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamTimeToSample": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lTime", + "type": "LONG" + } + ], + "AVIStreamSampleToTime": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lSample", + "type": "LONG" + } + ], + "AVIStreamBeginStreaming": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lEnd", + "type": "LONG" + }, + { + "name": "lRate", + "type": "LONG" + } + ], + "AVIStreamEndStreaming": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamGetFrameOpen": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpbiWanted", + "type": "LPBITMAPINFOHEADER" + } + ], + "AVIStreamGetFrame": [ + { + "name": "pg", + "type": "PGETFRAME" + }, + { + "name": "lPos", + "type": "LONG" + } + ], + "AVIStreamGetFrameClose": [ + { + "name": "pg", + "type": "PGETFRAME" + } + ], + "AVIStreamOpenFromFileA": [ + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "mode", + "type": "UINT" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVIStreamOpenFromFileW": [ + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "mode", + "type": "UINT" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVIStreamCreate": [ + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "lParam1", + "type": "LONG" + }, + { + "name": "lParam2", + "type": "LONG" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVIMakeCompressedStream": [ + { + "name": "ppsCompressed", + "type": "PAVISTREAM" + }, + { + "name": "ppsSource", + "type": "PAVISTREAM" + }, + { + "name": "lpOptions", + "type": "AVICOMPRESSOPTIONS" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVISaveA": [ + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "pfile", + "type": "PAVISTREAM" + }, + { + "name": "lpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveVA": [ + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveW": [ + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "pfile", + "type": "PAVISTREAM" + }, + { + "name": "lpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveVW": [ + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveOptions": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveOptionsFree": [ + { + "name": "nStreams", + "type": "int" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVIBuildFilterW": [ + { + "name": "lpszFilter", + "type": "LPWSTR" + }, + { + "name": "cbFilter", + "type": "LONG" + }, + { + "name": "fSaving", + "type": "BOOL" + } + ], + "AVIBuildFilterA": [ + { + "name": "lpszFilter", + "type": "LPSTR" + }, + { + "name": "cbFilter", + "type": "LONG" + }, + { + "name": "fSaving", + "type": "BOOL" + } + ], + "AVIMakeFileFromStreams": [ + { + "name": "ppfile", + "type": "PAVIFILE" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "papStreams", + "type": "PAVISTREAM" + } + ], + "AVIMakeStreamFromClipboard": [ + { + "name": "cfFormat", + "type": "UINT" + }, + { + "name": "hGlobal", + "type": "HANDLE" + }, + { + "name": "ppstream", + "type": "PAVISTREAM" + } + ], + "AVIPutFileOnClipboard": [ + { + "name": "pf", + "type": "PAVIFILE" + } + ], + "AVIGetFromClipboard": [ + { + "name": "lppf", + "type": "PAVIFILE" + } + ], + "AVIClearClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateEditableStream": [ + { + "name": "ppsEditable", + "type": "PAVISTREAM" + }, + { + "name": "psSource", + "type": "PAVISTREAM" + } + ], + "EditStreamCut": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "plStart", + "type": "LONG" + }, + { + "name": "plLength", + "type": "LONG" + }, + { + "name": "ppResult", + "type": "PAVISTREAM" + } + ], + "EditStreamCopy": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "plStart", + "type": "LONG" + }, + { + "name": "plLength", + "type": "LONG" + }, + { + "name": "ppResult", + "type": "PAVISTREAM" + } + ], + "EditStreamPaste": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "plPos", + "type": "LONG" + }, + { + "name": "plLength", + "type": "LONG" + }, + { + "name": "pstream", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lEnd", + "type": "LONG" + } + ], + "EditStreamClone": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "ppResult", + "type": "PAVISTREAM" + } + ], + "EditStreamSetNameA": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpszName", + "type": "LPCSTR" + } + ], + "EditStreamSetNameW": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpszName", + "type": "LPCWSTR" + } + ], + "EditStreamSetInfoW": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpInfo", + "type": "LPAVISTREAMINFOW" + }, + { + "name": "cbInfo", + "type": "LONG" + } + ], + "EditStreamSetInfoA": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpInfo", + "type": "LPAVISTREAMINFOA" + }, + { + "name": "cbInfo", + "type": "LONG" + } + ], + "MCIWndCreateA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "MCIWndCreateW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "MCIWndRegisterClass": [ + { + "name": "VOID", + "type": "void" + } + ], + "capCreateCaptureWindowA": [ + { + "name": "lpszWindowName", + "type": "LPCSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + } + ], + "capGetDriverDescriptionA": [ + { + "name": "wDriverIndex", + "type": "UINT" + }, + { + "name": "lpszName", + "type": "LPSTR" + }, + { + "name": "cbName", + "type": "int" + }, + { + "name": "lpszVer", + "type": "LPSTR" + }, + { + "name": "cbVer", + "type": "int" + } + ], + "capCreateCaptureWindowW": [ + { + "name": "lpszWindowName", + "type": "LPCWSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + } + ], + "capGetDriverDescriptionW": [ + { + "name": "wDriverIndex", + "type": "UINT" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "cbName", + "type": "int" + }, + { + "name": "lpszVer", + "type": "LPWSTR" + }, + { + "name": "cbVer", + "type": "int" + } + ], + "GetOpenFileNamePreviewA": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEA" + } + ], + "GetSaveFileNamePreviewA": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEA" + } + ], + "GetOpenFileNamePreviewW": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEW" + } + ], + "GetSaveFileNamePreviewW": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEW" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Bthprops.json b/qiling/extensions/windows_sdk/Bthprops.json new file mode 100644 index 000000000..51ef19def --- /dev/null +++ b/qiling/extensions/windows_sdk/Bthprops.json @@ -0,0 +1,426 @@ +{ + "BluetoothFindFirstRadio": [ + { + "name": "pbtfrp", + "type": "BLUETOOTH_FIND_RADIO_PARAMS" + }, + { + "name": "phRadio", + "type": "HANDLE" + } + ], + "BluetoothFindNextRadio": [ + { + "name": "hFind", + "type": "HBLUETOOTH_RADIO_FIND" + }, + { + "name": "phRadio", + "type": "HANDLE" + } + ], + "BluetoothFindRadioClose": [ + { + "name": "hFind", + "type": "HBLUETOOTH_RADIO_FIND" + } + ], + "BluetoothGetRadioInfo": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pRadioInfo", + "type": "PBLUETOOTH_RADIO_INFO" + } + ], + "BluetoothFindFirstDevice": [ + { + "name": "pbtsp", + "type": "BLUETOOTH_DEVICE_SEARCH_PARAMS" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothFindNextDevice": [ + { + "name": "hFind", + "type": "HBLUETOOTH_DEVICE_FIND" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothFindDeviceClose": [ + { + "name": "hFind", + "type": "HBLUETOOTH_DEVICE_FIND" + } + ], + "BluetoothGetDeviceInfo": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothUpdateDeviceRecord": [ + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothRemoveDevice": [ + { + "name": "pAddress", + "type": "BLUETOOTH_ADDRESS_STRUCT" + } + ], + "BluetoothSelectDevices": [ + { + "name": "pbtsdp", + "type": "BLUETOOTH_SELECT_DEVICE_PARAMS" + } + ], + "BluetoothSelectDevicesFree": [ + { + "name": "pbtsdp", + "type": "BLUETOOTH_SELECT_DEVICE_PARAMS" + } + ], + "BluetoothDisplayDeviceProperties": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothAuthenticateDevice": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtbi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pszPasskey", + "type": "PWSTR" + }, + { + "name": "ulPasskeyLength", + "type": "ULONG" + } + ], + "BluetoothAuthenticateDeviceEx": [ + { + "name": "hwndParentIn", + "type": "HWND" + }, + { + "name": "hRadioIn", + "type": "HANDLE" + }, + { + "name": "pbtdiInout", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pbtOobData", + "type": "PBLUETOOTH_OOB_DATA_INFO" + }, + { + "name": "authenticationRequirement", + "type": "AUTHENTICATION_REQUIREMENTS" + } + ], + "BluetoothAuthenticateMultipleDevices": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "cDevices", + "type": "DWORD" + }, + { + "name": "rgbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + } + ], + "BluetoothSetServiceState": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pGuidService", + "type": "GUID" + }, + { + "name": "dwServiceFlags", + "type": "DWORD" + } + ], + "BluetoothEnumerateInstalledServices": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pcServiceInout", + "type": "DWORD" + }, + { + "name": "pGuidServices", + "type": "GUID" + } + ], + "BluetoothEnableDiscovery": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "fEnabled", + "type": "BOOL" + } + ], + "BluetoothIsDiscoverable": [ + { + "name": "hRadio", + "type": "HANDLE" + } + ], + "BluetoothEnableIncomingConnections": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "fEnabled", + "type": "BOOL" + } + ], + "BluetoothIsConnectable": [ + { + "name": "hRadio", + "type": "HANDLE" + } + ], + "BluetoothRegisterForAuthentication": [ + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "phRegHandle", + "type": "HBLUETOOTH_AUTHENTICATION_REGISTRATION" + }, + { + "name": "pfnCallback", + "type": "PFN_AUTHENTICATION_CALLBACK" + }, + { + "name": "pvParam", + "type": "PVOID" + } + ], + "BluetoothRegisterForAuthenticationEx": [ + { + "name": "pbtdiIn", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "phRegHandleOut", + "type": "HBLUETOOTH_AUTHENTICATION_REGISTRATION" + }, + { + "name": "pfnCallbackIn", + "type": "PFN_AUTHENTICATION_CALLBACK_EX" + }, + { + "name": "pvParam", + "type": "PVOID" + } + ], + "BluetoothUnregisterAuthentication": [ + { + "name": "hRegHandle", + "type": "HBLUETOOTH_AUTHENTICATION_REGISTRATION" + } + ], + "BluetoothSendAuthenticationResponse": [ + { + "name": "hRadio", + "type": "HANDLE" + }, + { + "name": "pbtdi", + "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + }, + { + "name": "pszPasskey", + "type": "LPCWSTR" + } + ], + "BluetoothSendAuthenticationResponseEx": [ + { + "name": "hRadioIn", + "type": "HANDLE" + }, + { + "name": "pauthResponse", + "type": "PBLUETOOTH_AUTHENTICATE_RESPONSE" + } + ], + "BluetoothSdpGetElementData": [ + { + "name": "pSdpStream", + "type": "LPBYTE" + }, + { + "name": "cbSdpStreamLength", + "type": "ULONG" + }, + { + "name": "pData", + "type": "PSDP_ELEMENT_DATA" + } + ], + "BluetoothSdpGetContainerElementData": [ + { + "name": "pContainerStream", + "type": "LPBYTE" + }, + { + "name": "cbContainerLength", + "type": "ULONG" + }, + { + "name": "pElement", + "type": "HBLUETOOTH_CONTAINER_ELEMENT" + }, + { + "name": "pData", + "type": "PSDP_ELEMENT_DATA" + } + ], + "BluetoothSdpGetAttributeValue": [ + { + "name": "pRecordStream", + "type": "LPBYTE" + }, + { + "name": "cbRecordLength", + "type": "ULONG" + }, + { + "name": "usAttributeId", + "type": "USHORT" + }, + { + "name": "pAttributeData", + "type": "PSDP_ELEMENT_DATA" + } + ], + "BluetoothSdpGetString": [ + { + "name": "pRecordStream", + "type": "LPBYTE" + }, + { + "name": "cbRecordLength", + "type": "ULONG" + }, + { + "name": "pStringData", + "type": "PSDP_STRING_TYPE_DATA" + }, + { + "name": "usStringOffset", + "type": "USHORT" + }, + { + "name": "pszString", + "type": "PWSTR" + }, + { + "name": "pcchStringLength", + "type": "PULONG" + } + ], + "BluetoothSdpEnumAttributes": [ + { + "name": "pSDPStream", + "type": "LPBYTE" + }, + { + "name": "cbStreamSize", + "type": "ULONG" + }, + { + "name": "pfnCallback", + "type": "PFN_BLUETOOTH_ENUM_ATTRIBUTES_CALLBACK" + }, + { + "name": "pvParam", + "type": "LPVOID" + } + ], + "BluetoothSetLocalServiceInfo": [ + { + "name": "hRadioIn", + "type": "HANDLE" + }, + { + "name": "pClassGuid", + "type": "GUID" + }, + { + "name": "ulInstance", + "type": "ULONG" + }, + { + "name": "pServiceInfoIn", + "type": "BLUETOOTH_LOCAL_SERVICE_INFO_STRUCT" + } + ], + "BluetoothIsVersionAvailable": [ + { + "name": "MajorVersion", + "type": "UCHAR" + }, + { + "name": "MinorVersion", + "type": "UCHAR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/gb18030.json b/qiling/extensions/windows_sdk/C_g18030.json similarity index 100% rename from qiling/extensions/windows_sdk/gb18030.json rename to qiling/extensions/windows_sdk/C_g18030.json diff --git a/qiling/extensions/windows_sdk/compressapi.json b/qiling/extensions/windows_sdk/Cabinet.json similarity index 100% rename from qiling/extensions/windows_sdk/compressapi.json rename to qiling/extensions/windows_sdk/Cabinet.json diff --git a/qiling/extensions/windows_sdk/certbcli.json b/qiling/extensions/windows_sdk/Certadm.json similarity index 100% rename from qiling/extensions/windows_sdk/certbcli.json rename to qiling/extensions/windows_sdk/Certadm.json diff --git a/qiling/extensions/windows_sdk/cfapi.json b/qiling/extensions/windows_sdk/CldApi.json similarity index 100% rename from qiling/extensions/windows_sdk/cfapi.json rename to qiling/extensions/windows_sdk/CldApi.json diff --git a/qiling/extensions/windows_sdk/objbase.json b/qiling/extensions/windows_sdk/ComBase.json similarity index 100% rename from qiling/extensions/windows_sdk/objbase.json rename to qiling/extensions/windows_sdk/ComBase.json diff --git a/qiling/extensions/windows_sdk/dpa_dsa.json b/qiling/extensions/windows_sdk/Comctl32.json similarity index 100% rename from qiling/extensions/windows_sdk/dpa_dsa.json rename to qiling/extensions/windows_sdk/Comctl32.json diff --git a/qiling/extensions/windows_sdk/commdlg.json b/qiling/extensions/windows_sdk/Comdlg32.json similarity index 100% rename from qiling/extensions/windows_sdk/commdlg.json rename to qiling/extensions/windows_sdk/Comdlg32.json diff --git a/qiling/extensions/windows_sdk/wincred.json b/qiling/extensions/windows_sdk/Credui.json similarity index 100% rename from qiling/extensions/windows_sdk/wincred.json rename to qiling/extensions/windows_sdk/Credui.json diff --git a/qiling/extensions/windows_sdk/wincrypt.json b/qiling/extensions/windows_sdk/Crypt32.json similarity index 100% rename from qiling/extensions/windows_sdk/wincrypt.json rename to qiling/extensions/windows_sdk/Crypt32.json diff --git a/qiling/extensions/windows_sdk/Cryptnet.json b/qiling/extensions/windows_sdk/Cryptnet.json new file mode 100644 index 000000000..ec5bda91f --- /dev/null +++ b/qiling/extensions/windows_sdk/Cryptnet.json @@ -0,0 +1,5200 @@ +{ + "CryptAcquireContextA": [ + { + "name": "phProv", + "type": "HCRYPTPROV" + }, + { + "name": "szContainer", + "type": "LPCSTR" + }, + { + "name": "szProvider", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptAcquireContextW": [ + { + "name": "phProv", + "type": "HCRYPTPROV" + }, + { + "name": "szContainer", + "type": "LPCWSTR" + }, + { + "name": "szProvider", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptReleaseContext": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGenKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDeriveKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "hBaseData", + "type": "HCRYPTHASH" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDestroyKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + } + ], + "CryptSetKeyParam": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetKeyParam": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetHashParam": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetHashParam": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProvParam": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetProvParam": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGenRandom": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "CryptGetUserKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "phUserKey", + "type": "HCRYPTKEY" + } + ], + "CryptExportKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hExpKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwBlobType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + } + ], + "CryptImportKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwDataLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptEncrypt": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "Final", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "CryptDecrypt": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "Final", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + } + ], + "CryptCreateHash": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phHash", + "type": "HCRYPTHASH" + } + ], + "CryptHashData": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptHashSessionKey": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptDestroyHash": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + } + ], + "CryptSignHashA": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "szDescription", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pdwSigLen", + "type": "DWORD" + } + ], + "CryptSignHashW": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "szDescription", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pdwSigLen", + "type": "DWORD" + } + ], + "CryptVerifySignatureA": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "dwSigLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "szDescription", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptVerifySignatureW": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "dwSigLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "szDescription", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProviderA": [ + { + "name": "pszProvName", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + } + ], + "CryptSetProviderW": [ + { + "name": "pszProvName", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + } + ], + "CryptSetProviderExA": [ + { + "name": "pszProvName", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProviderExW": [ + { + "name": "pszProvName", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetDefaultProviderA": [ + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszProvName", + "type": "LPSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptGetDefaultProviderW": [ + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszProvName", + "type": "LPWSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptEnumProviderTypesA": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szTypeName", + "type": "LPSTR" + }, + { + "name": "pcbTypeName", + "type": "DWORD" + } + ], + "CryptEnumProviderTypesW": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szTypeName", + "type": "LPWSTR" + }, + { + "name": "pcbTypeName", + "type": "DWORD" + } + ], + "CryptEnumProvidersA": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szProvName", + "type": "LPSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptEnumProvidersW": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szProvName", + "type": "LPWSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptContextAddRef": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptDuplicateKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDuplicateHash": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phHash", + "type": "HCRYPTHASH" + } + ], + "GetEncSChannel": [ + { + "name": "pData", + "type": "BYTE" + }, + { + "name": "dwDecSize", + "type": "DWORD" + } + ], + "CryptFormatObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFormatType", + "type": "DWORD" + }, + { + "name": "dwFormatStrType", + "type": "DWORD" + }, + { + "name": "pFormatStruct", + "type": "void" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbFormat", + "type": "void" + }, + { + "name": "pcbFormat", + "type": "DWORD" + } + ], + "CryptEncodeObjectEx": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pEncodePara", + "type": "PCRYPT_ENCODE_PARA" + }, + { + "name": "pvEncoded", + "type": "void" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptEncodeObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptDecodeObjectEx": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pDecodePara", + "type": "PCRYPT_DECODE_PARA" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pcbStructInfo", + "type": "DWORD" + } + ], + "CryptDecodeObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pcbStructInfo", + "type": "DWORD" + } + ], + "CryptInstallOIDFunctionAddress": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "cFuncEntry", + "type": "DWORD" + }, + { + "name": "rgFuncEntry", + "type": "CRYPT_OID_FUNC_ENTRY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptInitOIDFunctionSet": [ + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetOIDFunctionAddress": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppvFuncAddr", + "type": "void" + }, + { + "name": "phFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + } + ], + "CryptGetDefaultOIDDllList": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pwszDllList", + "type": "WCHAR" + }, + { + "name": "pcchDllList", + "type": "DWORD" + } + ], + "CryptGetDefaultOIDFunctionAddress": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppvFuncAddr", + "type": "void" + }, + { + "name": "phFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + } + ], + "CryptFreeOIDFunctionAddress": [ + { + "name": "hFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptRegisterOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + }, + { + "name": "pszOverrideFuncName", + "type": "LPCSTR" + } + ], + "CryptUnregisterOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + } + ], + "CryptRegisterDefaultOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + } + ], + "CryptUnregisterDefaultOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + } + ], + "CryptSetOIDFunctionValue": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszValueName", + "type": "LPCWSTR" + }, + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pbValueData", + "type": "BYTE" + }, + { + "name": "cbValueData", + "type": "DWORD" + } + ], + "CryptGetOIDFunctionValue": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszValueName", + "type": "LPCWSTR" + }, + { + "name": "pdwValueType", + "type": "DWORD" + }, + { + "name": "pbValueData", + "type": "BYTE" + }, + { + "name": "pcbValueData", + "type": "DWORD" + } + ], + "CryptEnumOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnumOIDFunc", + "type": "PFN_CRYPT_ENUM_OID_FUNC" + } + ], + "CryptFindOIDInfo": [ + { + "name": "dwKeyType", + "type": "DWORD" + }, + { + "name": "pvKey", + "type": "void" + }, + { + "name": "dwGroupId", + "type": "DWORD" + } + ], + "CryptRegisterOIDInfo": [ + { + "name": "pInfo", + "type": "PCCRYPT_OID_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptUnregisterOIDInfo": [ + { + "name": "pInfo", + "type": "PCCRYPT_OID_INFO" + } + ], + "CryptEnumOIDInfo": [ + { + "name": "dwGroupId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnumOIDInfo", + "type": "PFN_CRYPT_ENUM_OID_INFO" + } + ], + "CryptFindLocalizedName": [ + { + "name": "pwszCryptName", + "type": "LPCWSTR" + } + ], + "CryptMsgOpenToEncode": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "pvMsgEncodeInfo", + "type": "void" + }, + { + "name": "pszInnerContentObjID", + "type": "LPSTR" + }, + { + "name": "pStreamInfo", + "type": "PCMSG_STREAM_INFO" + } + ], + "CryptMsgCalculateEncodedLength": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "pvMsgEncodeInfo", + "type": "void" + }, + { + "name": "pszInnerContentObjID", + "type": "LPSTR" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "CryptMsgOpenToDecode": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "pRecipientInfo", + "type": "PCERT_INFO" + }, + { + "name": "pStreamInfo", + "type": "PCMSG_STREAM_INFO" + } + ], + "CryptMsgDuplicate": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + } + ], + "CryptMsgClose": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + } + ], + "CryptMsgUpdate": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "fFinal", + "type": "BOOL" + } + ], + "CryptMsgGetParam": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwParamType", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CryptMsgControl": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCtrlType", + "type": "DWORD" + }, + { + "name": "pvCtrlPara", + "type": "void" + } + ], + "CryptMsgVerifyCountersignatureEncoded": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "pbSignerInfoCountersignature", + "type": "PBYTE" + }, + { + "name": "cbSignerInfoCountersignature", + "type": "DWORD" + }, + { + "name": "pciCountersigner", + "type": "PCERT_INFO" + } + ], + "CryptMsgVerifyCountersignatureEncodedEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "pbSignerInfoCountersignature", + "type": "PBYTE" + }, + { + "name": "cbSignerInfoCountersignature", + "type": "DWORD" + }, + { + "name": "dwSignerType", + "type": "DWORD" + }, + { + "name": "pvSigner", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvExtra", + "type": "void" + } + ], + "CryptMsgCountersign": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "cCountersigners", + "type": "DWORD" + }, + { + "name": "rgCountersigners", + "type": "PCMSG_SIGNER_ENCODE_INFO" + } + ], + "CryptMsgCountersignEncoded": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "cCountersigners", + "type": "DWORD" + }, + { + "name": "rgCountersigners", + "type": "PCMSG_SIGNER_ENCODE_INFO" + }, + { + "name": "pbCountersignature", + "type": "PBYTE" + }, + { + "name": "pcbCountersignature", + "type": "PDWORD" + } + ], + "CertOpenStore": [ + { + "name": "lpszStoreProvider", + "type": "LPCSTR" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvPara", + "type": "void" + } + ], + "CertDuplicateStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + } + ], + "CertSaveStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSaveAs", + "type": "DWORD" + }, + { + "name": "dwSaveTo", + "type": "DWORD" + }, + { + "name": "pvSaveToPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertCloseStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetSubjectCertificateFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId", + "type": "PCERT_INFO" + } + ], + "CertEnumCertificatesInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertFindCertificateInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertGetIssuerCertificateFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pSubjectContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pPrevIssuerContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertVerifySubjectCertificateContext": [ + { + "name": "pSubject", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pIssuer", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertDuplicateCertificateContext": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertCreateCertificateContext": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CertFreeCertificateContext": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertSetCertificateContextProperty": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCertificateContextProperty": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCertificateContextProperties": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertCreateCTLEntryFromCertificateContextProperties": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "cOptAttr", + "type": "DWORD" + }, + { + "name": "rgOptAttr", + "type": "PCRYPT_ATTRIBUTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pCtlEntry", + "type": "PCTL_ENTRY" + }, + { + "name": "pcbCtlEntry", + "type": "DWORD" + } + ], + "CertSetCertificateContextPropertiesFromCTLEntry": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCtlEntry", + "type": "PCTL_ENTRY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetCRLFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pIssuerContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertEnumCRLsInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertFindCRLInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertDuplicateCRLContext": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertCreateCRLContext": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCrlEncoded", + "type": "BYTE" + }, + { + "name": "cbCrlEncoded", + "type": "DWORD" + } + ], + "CertFreeCRLContext": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertSetCRLContextProperty": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCRLContextProperty": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCRLContextProperties": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertFindCertificateInCRL": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "ppCrlEntry", + "type": "PCRL_ENTRY" + } + ], + "CertIsValidCRLForCertificate": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCrl", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertAddEncodedCertificateToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddCertificateContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddSerializedElementToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "cbElement", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContextTypeFlags", + "type": "DWORD" + }, + { + "name": "pdwContextType", + "type": "DWORD" + }, + { + "name": "ppvContext", + "type": "void" + } + ], + "CertDeleteCertificateFromStore": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddEncodedCRLToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCrlEncoded", + "type": "BYTE" + }, + { + "name": "cbCrlEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertAddCRLContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertDeleteCRLFromStore": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertSerializeCertificateStoreElement": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertSerializeCRLStoreElement": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertDuplicateCTLContext": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertCreateCTLContext": [ + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlEncoded", + "type": "BYTE" + }, + { + "name": "cbCtlEncoded", + "type": "DWORD" + } + ], + "CertFreeCTLContext": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertSetCTLContextProperty": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCTLContextProperty": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCTLContextProperties": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertEnumCTLsInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertFindSubjectInCTL": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertFindCTLInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddEncodedCTLToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlEncoded", + "type": "BYTE" + }, + { + "name": "cbCtlEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddCTLContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertSerializeCTLStoreElement": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertDeleteCTLFromStore": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddCertificateLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddCRLLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertAddCTLLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddStoreToCollection": [ + { + "name": "hCollectionStore", + "type": "HCERTSTORE" + }, + { + "name": "hSiblingStore", + "type": "HCERTSTORE" + }, + { + "name": "dwUpdateFlags", + "type": "DWORD" + }, + { + "name": "dwPriority", + "type": "DWORD" + } + ], + "CertRemoveStoreFromCollection": [ + { + "name": "hCollectionStore", + "type": "HCERTSTORE" + }, + { + "name": "hSiblingStore", + "type": "HCERTSTORE" + } + ], + "CertControlStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCtrlType", + "type": "DWORD" + }, + { + "name": "pvCtrlPara", + "type": "void" + } + ], + "CertSetStoreProperty": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetStoreProperty": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertRegisterSystemStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pStoreInfo", + "type": "PCERT_SYSTEM_STORE_INFO" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertRegisterPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszStoreName", + "type": "LPCWSTR" + }, + { + "name": "pStoreInfo", + "type": "PCERT_PHYSICAL_STORE_INFO" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertUnregisterSystemStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertUnregisterPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszStoreName", + "type": "LPCWSTR" + } + ], + "CertEnumSystemStoreLocation": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_SYSTEM_STORE_LOCATION" + } + ], + "CertEnumSystemStore": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvSystemStoreLocationPara", + "type": "void" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_SYSTEM_STORE" + } + ], + "CertEnumPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_PHYSICAL_STORE" + } + ], + "CertGetEnhancedKeyUsage": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pUsage", + "type": "PCERT_ENHKEY_USAGE" + }, + { + "name": "pcbUsage", + "type": "DWORD" + } + ], + "CertSetEnhancedKeyUsage": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pUsage", + "type": "PCERT_ENHKEY_USAGE" + } + ], + "CertAddEnhancedKeyUsageIdentifier": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pszUsageIdentifier", + "type": "LPCSTR" + } + ], + "CertRemoveEnhancedKeyUsageIdentifier": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pszUsageIdentifier", + "type": "LPCSTR" + } + ], + "CertGetValidUsages": [ + { + "name": "cCerts", + "type": "DWORD" + }, + { + "name": "rghCerts", + "type": "PCCERT_CONTEXT" + }, + { + "name": "cNumOIDs", + "type": "int" + }, + { + "name": "rghOIDs", + "type": "LPSTR" + }, + { + "name": "pcbOIDs", + "type": "DWORD" + } + ], + "CryptMsgGetAndVerifySigner": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "cSignerStore", + "type": "DWORD" + }, + { + "name": "rghSignerStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwSignerIndex", + "type": "DWORD" + } + ], + "CryptMsgSignCTL": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlContent", + "type": "BYTE" + }, + { + "name": "cbCtlContent", + "type": "DWORD" + }, + { + "name": "pSignInfo", + "type": "PCMSG_SIGNED_ENCODE_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptMsgEncodeAndSignCTL": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pCtlInfo", + "type": "PCTL_INFO" + }, + { + "name": "pSignInfo", + "type": "PCMSG_SIGNED_ENCODE_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CertFindSubjectInSortedCTL": [ + { + "name": "pSubjectIdentifier", + "type": "PCRYPT_DATA_BLOB" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pEncodedAttributes", + "type": "PCRYPT_DER_BLOB" + } + ], + "CertEnumSubjectInSortedCTL": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "ppvNextSubject", + "type": "void" + }, + { + "name": "pSubjectIdentifier", + "type": "PCRYPT_DER_BLOB" + }, + { + "name": "pEncodedAttributes", + "type": "PCRYPT_DER_BLOB" + } + ], + "CertVerifyCTLUsage": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "pSubjectUsage", + "type": "PCTL_USAGE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pVerifyUsagePara", + "type": "PCTL_VERIFY_USAGE_PARA" + }, + { + "name": "pVerifyUsageStatus", + "type": "PCTL_VERIFY_USAGE_STATUS" + } + ], + "CertVerifyRevocation": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwRevType", + "type": "DWORD" + }, + { + "name": "cContext", + "type": "DWORD" + }, + { + "name": "rgpvContext", + "type": "PVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pRevPara", + "type": "PCERT_REVOCATION_PARA" + }, + { + "name": "pRevStatus", + "type": "PCERT_REVOCATION_STATUS" + } + ], + "CertCompareIntegerBlob": [ + { + "name": "pInt1", + "type": "PCRYPT_INTEGER_BLOB" + }, + { + "name": "pInt2", + "type": "PCRYPT_INTEGER_BLOB" + } + ], + "CertCompareCertificate": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId1", + "type": "PCERT_INFO" + }, + { + "name": "pCertId2", + "type": "PCERT_INFO" + } + ], + "CertCompareCertificateName": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertName1", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "pCertName2", + "type": "PCERT_NAME_BLOB" + } + ], + "CertIsRDNAttrsInCertificateName": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pCertName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "pRDN", + "type": "PCERT_RDN" + } + ], + "CertComparePublicKeyInfo": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pPublicKey1", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pPublicKey2", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CertGetPublicKeyLength": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pPublicKey", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CryptVerifyCertificateSignature": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pPublicKey", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CryptVerifyCertificateSignatureEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "dwIssuerType", + "type": "DWORD" + }, + { + "name": "pvIssuer", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvExtra", + "type": "void" + } + ], + "CertIsStrongHashToSign": [ + { + "name": "pStrongSignPara", + "type": "PCCERT_STRONG_SIGN_PARA" + }, + { + "name": "pwszCNGHashAlgid", + "type": "LPCWSTR" + }, + { + "name": "pSigningCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptHashToBeSigned": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptHashCertificate": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptHashCertificate2": [ + { + "name": "pwszCNGHashAlgid", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptSignCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncodedToBeSigned", + "type": "BYTE" + }, + { + "name": "cbEncodedToBeSigned", + "type": "DWORD" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pvHashAuxInfo", + "type": "void" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pcbSignature", + "type": "DWORD" + } + ], + "CryptSignAndEncodeCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pvHashAuxInfo", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CertVerifyTimeValidity": [ + { + "name": "pTimeToVerify", + "type": "LPFILETIME" + }, + { + "name": "pCertInfo", + "type": "PCERT_INFO" + } + ], + "CertVerifyCRLTimeValidity": [ + { + "name": "pTimeToVerify", + "type": "LPFILETIME" + }, + { + "name": "pCrlInfo", + "type": "PCRL_INFO" + } + ], + "CertVerifyValidityNesting": [ + { + "name": "pSubjectInfo", + "type": "PCERT_INFO" + }, + { + "name": "pIssuerInfo", + "type": "PCERT_INFO" + } + ], + "CertVerifyCRLRevocation": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId", + "type": "PCERT_INFO" + }, + { + "name": "cCrlInfo", + "type": "DWORD" + }, + { + "name": "rgpCrlInfo", + "type": "PCRL_INFO" + } + ], + "CertAlgIdToOID": [ + { + "name": "dwAlgId", + "type": "DWORD" + } + ], + "CertOIDToAlgId": [ + { + "name": "pszObjId", + "type": "LPCSTR" + } + ], + "CertFindExtension": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "cExtensions", + "type": "DWORD" + }, + { + "name": "rgExtensions", + "type": "CERT_EXTENSION" + } + ], + "CertFindAttribute": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "cAttr", + "type": "DWORD" + }, + { + "name": "rgAttr", + "type": "CRYPT_ATTRIBUTE" + } + ], + "CertFindRDNAttr": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "pName", + "type": "PCERT_NAME_INFO" + } + ], + "CertGetIntendedKeyUsage": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertInfo", + "type": "PCERT_INFO" + }, + { + "name": "pbKeyUsage", + "type": "BYTE" + }, + { + "name": "cbKeyUsage", + "type": "DWORD" + } + ], + "CryptInstallDefaultContext": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwDefaultType", + "type": "DWORD" + }, + { + "name": "pvDefaultPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "phDefaultContext", + "type": "HCRYPTDEFAULTCONTEXT" + } + ], + "CryptUninstallDefaultContext": [ + { + "name": "hDefaultContext", + "type": "HCRYPTDEFAULTCONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CryptExportPublicKeyInfo": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptExportPublicKeyInfoEx": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPublicKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptExportPublicKeyInfoFromBCryptKeyHandle": [ + { + "name": "hBCryptKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPublicKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptImportPublicKeyInfo": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptImportPublicKeyInfoEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "aiKeyAlg", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptImportPublicKeyInfoEx2": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + } + ], + "CryptAcquireCertificatePrivateKey": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvParameters", + "type": "void" + }, + { + "name": "phCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "pdwKeySpec", + "type": "DWORD" + }, + { + "name": "pfCallerFreeProvOrNCryptKey", + "type": "BOOL" + } + ], + "CryptFindCertificateKeyProvInfo": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CryptImportPKCS8": [ + { + "name": "sPrivateKeyAndParams", + "type": "CRYPT_PKCS8_IMPORT_PARAMS" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "pvAuxInfo", + "type": "void" + } + ], + "CryptExportPKCS8": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "pszPrivateKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pbPrivateKeyBlob", + "type": "BYTE" + }, + { + "name": "pcbPrivateKeyBlob", + "type": "DWORD" + } + ], + "CryptExportPKCS8Ex": [ + { + "name": "psExportParams", + "type": "CRYPT_PKCS8_EXPORT_PARAMS" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pbPrivateKeyBlob", + "type": "BYTE" + }, + { + "name": "pcbPrivateKeyBlob", + "type": "DWORD" + } + ], + "CryptHashPublicKeyInfo": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CertRDNValueToStrA": [ + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pValue", + "type": "PCERT_RDN_VALUE_BLOB" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertRDNValueToStrW": [ + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pValue", + "type": "PCERT_RDN_VALUE_BLOB" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertNameToStrA": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertNameToStrW": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertStrToNameA": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszX500", + "type": "LPCSTR" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + }, + { + "name": "ppszError", + "type": "LPCSTR" + } + ], + "CertStrToNameW": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszX500", + "type": "LPCWSTR" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + }, + { + "name": "ppszError", + "type": "LPCWSTR" + } + ], + "CertGetNameStringA": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvTypePara", + "type": "void" + }, + { + "name": "pszNameString", + "type": "LPSTR" + }, + { + "name": "cchNameString", + "type": "DWORD" + } + ], + "CertGetNameStringW": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvTypePara", + "type": "void" + }, + { + "name": "pszNameString", + "type": "LPWSTR" + }, + { + "name": "cchNameString", + "type": "DWORD" + } + ], + "CryptSignMessage": [ + { + "name": "pSignPara", + "type": "PCRYPT_SIGN_MESSAGE_PARA" + }, + { + "name": "fDetachedSignature", + "type": "BOOL" + }, + { + "name": "cToBeSigned", + "type": "DWORD" + }, + { + "name": "rgpbToBeSigned", + "type": "BYTE" + }, + { + "name": "rgcbToBeSigned", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyMessageSignature": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptGetMessageSignerCount": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + } + ], + "CryptGetMessageCertificates": [ + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyDetachedMessageSignature": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbDetachedSignBlob", + "type": "BYTE" + }, + { + "name": "cbDetachedSignBlob", + "type": "DWORD" + }, + { + "name": "cToBeSigned", + "type": "DWORD" + }, + { + "name": "rgpbToBeSigned", + "type": "BYTE" + }, + { + "name": "rgcbToBeSigned", + "type": "DWORD" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptEncryptMessage": [ + { + "name": "pEncryptPara", + "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" + }, + { + "name": "cRecipientCert", + "type": "DWORD" + }, + { + "name": "rgpRecipientCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbToBeEncrypted", + "type": "BYTE" + }, + { + "name": "cbToBeEncrypted", + "type": "DWORD" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "pcbEncryptedBlob", + "type": "DWORD" + } + ], + "CryptDecryptMessage": [ + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "cbEncryptedBlob", + "type": "DWORD" + }, + { + "name": "pbDecrypted", + "type": "BYTE" + }, + { + "name": "pcbDecrypted", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptSignAndEncryptMessage": [ + { + "name": "pSignPara", + "type": "PCRYPT_SIGN_MESSAGE_PARA" + }, + { + "name": "pEncryptPara", + "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" + }, + { + "name": "cRecipientCert", + "type": "DWORD" + }, + { + "name": "rgpRecipientCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbToBeSignedAndEncrypted", + "type": "BYTE" + }, + { + "name": "cbToBeSignedAndEncrypted", + "type": "DWORD" + }, + { + "name": "pbSignedAndEncryptedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedAndEncryptedBlob", + "type": "DWORD" + } + ], + "CryptDecryptAndVerifyMessageSignature": [ + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "cbEncryptedBlob", + "type": "DWORD" + }, + { + "name": "pbDecrypted", + "type": "BYTE" + }, + { + "name": "pcbDecrypted", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptDecodeMessage": [ + { + "name": "dwMsgTypeFlags", + "type": "DWORD" + }, + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbEncodedBlob", + "type": "BYTE" + }, + { + "name": "cbEncodedBlob", + "type": "DWORD" + }, + { + "name": "dwPrevInnerContentType", + "type": "DWORD" + }, + { + "name": "pdwMsgType", + "type": "DWORD" + }, + { + "name": "pdwInnerContentType", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptHashMessage": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "fDetachedHash", + "type": "BOOL" + }, + { + "name": "cToBeHashed", + "type": "DWORD" + }, + { + "name": "rgpbToBeHashed", + "type": "BYTE" + }, + { + "name": "rgcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbHashedBlob", + "type": "BYTE" + }, + { + "name": "pcbHashedBlob", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptVerifyMessageHash": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "pbHashedBlob", + "type": "BYTE" + }, + { + "name": "cbHashedBlob", + "type": "DWORD" + }, + { + "name": "pbToBeHashed", + "type": "BYTE" + }, + { + "name": "pcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptVerifyDetachedMessageHash": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "pbDetachedHashBlob", + "type": "BYTE" + }, + { + "name": "cbDetachedHashBlob", + "type": "DWORD" + }, + { + "name": "cToBeHashed", + "type": "DWORD" + }, + { + "name": "rgpbToBeHashed", + "type": "BYTE" + }, + { + "name": "rgcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptSignMessageWithKey": [ + { + "name": "pSignPara", + "type": "PCRYPT_KEY_SIGN_MESSAGE_PARA" + }, + { + "name": "pbToBeSigned", + "type": "BYTE" + }, + { + "name": "cbToBeSigned", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyMessageSignatureWithKey": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_KEY_VERIFY_MESSAGE_PARA" + }, + { + "name": "pPublicKeyInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + } + ], + "CertOpenSystemStoreA": [ + { + "name": "hProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "szSubsystemProtocol", + "type": "LPCSTR" + } + ], + "CertOpenSystemStoreW": [ + { + "name": "hProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "szSubsystemProtocol", + "type": "LPCWSTR" + } + ], + "CertAddEncodedCertificateToSystemStoreA": [ + { + "name": "szCertStoreName", + "type": "LPCSTR" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CertAddEncodedCertificateToSystemStoreW": [ + { + "name": "szCertStoreName", + "type": "LPCWSTR" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CryptQueryObject": [ + { + "name": "dwObjectType", + "type": "DWORD" + }, + { + "name": "pvObject", + "type": "void" + }, + { + "name": "dwExpectedContentTypeFlags", + "type": "DWORD" + }, + { + "name": "dwExpectedFormatTypeFlags", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pdwContentType", + "type": "DWORD" + }, + { + "name": "pdwFormatType", + "type": "DWORD" + }, + { + "name": "phCertStore", + "type": "HCERTSTORE" + }, + { + "name": "phMsg", + "type": "HCRYPTMSG" + }, + { + "name": "ppvContext", + "type": "void" + } + ], + "CryptMemAlloc": [ + { + "name": "cbSize", + "type": "ULONG" + } + ], + "CryptMemRealloc": [ + { + "name": "pv", + "type": "LPVOID" + }, + { + "name": "cbSize", + "type": "ULONG" + } + ], + "CryptMemFree": [ + { + "name": "pv", + "type": "LPVOID" + } + ], + "CryptCreateAsyncHandle": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phAsync", + "type": "PHCRYPTASYNC" + } + ], + "CryptGetAsyncParam": [ + { + "name": "hAsync", + "type": "HCRYPTASYNC" + }, + { + "name": "pszParamOid", + "type": "LPSTR" + }, + { + "name": "ppvParam", + "type": "LPVOID" + }, + { + "name": "ppfnFree", + "type": "PFN_CRYPT_ASYNC_PARAM_FREE_FUNC" + } + ], + "CryptCloseAsyncHandle": [ + { + "name": "hAsync", + "type": "HCRYPTASYNC" + } + ], + "CryptRetrieveObjectByUrlA": [ + { + "name": "pszUrl", + "type": "LPCSTR" + }, + { + "name": "pszObjectOid", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "hAsyncRetrieve", + "type": "HCRYPTASYNC" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pvVerify", + "type": "LPVOID" + }, + { + "name": "pAuxInfo", + "type": "PCRYPT_RETRIEVE_AUX_INFO" + } + ], + "CryptRetrieveObjectByUrlW": [ + { + "name": "pszUrl", + "type": "LPCWSTR" + }, + { + "name": "pszObjectOid", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "hAsyncRetrieve", + "type": "HCRYPTASYNC" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pvVerify", + "type": "LPVOID" + }, + { + "name": "pAuxInfo", + "type": "PCRYPT_RETRIEVE_AUX_INFO" + } + ], + "CryptGetObjectUrl": [ + { + "name": "pszUrlOid", + "type": "LPCSTR" + }, + { + "name": "pvPara", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pUrlArray", + "type": "PCRYPT_URL_ARRAY" + }, + { + "name": "pcbUrlArray", + "type": "DWORD" + }, + { + "name": "pUrlInfo", + "type": "PCRYPT_URL_INFO" + }, + { + "name": "pcbUrlInfo", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CryptGetTimeValidObject": [ + { + "name": "pszTimeValidOid", + "type": "LPCSTR" + }, + { + "name": "pvPara", + "type": "LPVOID" + }, + { + "name": "pIssuer", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pftValidFor", + "type": "LPFILETIME" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pExtraInfo", + "type": "PCRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO" + } + ], + "CertCreateSelfSignCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "pSubjectIssuerBlob", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pKeyProvInfo", + "type": "PCRYPT_KEY_PROV_INFO" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pStartTime", + "type": "PSYSTEMTIME" + }, + { + "name": "pEndTime", + "type": "PSYSTEMTIME" + }, + { + "name": "pExtensions", + "type": "PCERT_EXTENSIONS" + } + ], + "CryptGetKeyIdentifierProperty": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CryptSetKeyIdentifierProperty": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CryptEnumKeyIdentifierProperties": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CRYPT_ENUM_KEYID_PROP" + } + ], + "CryptCreateKeyIdentifierFromCSP": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPubKeyOID", + "type": "LPCSTR" + }, + { + "name": "pPubKeyStruc", + "type": "PUBLICKEYSTRUC" + }, + { + "name": "cbPubKeyStruc", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "pcbHash", + "type": "DWORD" + } + ], + "CertCreateCertificateChainEngine": [ + { + "name": "pConfig", + "type": "PCERT_CHAIN_ENGINE_CONFIG" + }, + { + "name": "phChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertFreeCertificateChainEngine": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertResyncCertificateChainEngine": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertGetCertificateChain": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pTime", + "type": "LPFILETIME" + }, + { + "name": "hAdditionalStore", + "type": "HCERTSTORE" + }, + { + "name": "pChainPara", + "type": "PCERT_CHAIN_PARA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + }, + { + "name": "ppChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFreeCertificateChain": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertDuplicateCertificateChain": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFindChainInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertVerifyCertificateChainPolicy": [ + { + "name": "pszPolicyOID", + "type": "LPCSTR" + }, + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + }, + { + "name": "pPolicyPara", + "type": "PCERT_CHAIN_POLICY_PARA" + }, + { + "name": "pPolicyStatus", + "type": "PCERT_CHAIN_POLICY_STATUS" + } + ], + "CryptStringToBinaryA": [ + { + "name": "pszString", + "type": "LPCSTR" + }, + { + "name": "cchString", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "pcbBinary", + "type": "DWORD" + }, + { + "name": "pdwSkip", + "type": "DWORD" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CryptStringToBinaryW": [ + { + "name": "pszString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "pcbBinary", + "type": "DWORD" + }, + { + "name": "pdwSkip", + "type": "DWORD" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CryptBinaryToStringA": [ + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "cbBinary", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszString", + "type": "LPSTR" + }, + { + "name": "pcchString", + "type": "DWORD" + } + ], + "CryptBinaryToStringW": [ + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "cbBinary", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszString", + "type": "LPWSTR" + }, + { + "name": "pcchString", + "type": "DWORD" + } + ], + "PFXImportCertStore": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXIsPFXBlob": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + } + ], + "PFXVerifyPassword": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXExportCertStoreEx": [ + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "pvPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXExportCertStore": [ + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertOpenServerOcspResponse": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pOpenPara", + "type": "PCERT_SERVER_OCSP_RESPONSE_OPEN_PARA" + } + ], + "CertAddRefServerOcspResponse": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + } + ], + "CertCloseServerOcspResponse": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetServerOcspResponseContext": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CertAddRefServerOcspResponseContext": [ + { + "name": "pServerOcspResponseContext", + "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" + } + ], + "CertFreeServerOcspResponseContext": [ + { + "name": "pServerOcspResponseContext", + "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" + } + ], + "CertRetrieveLogoOrBiometricInfo": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "lpszLogoOrBiometricType", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "ppbData", + "type": "BYTE" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "ppwszMimeType", + "type": "LPWSTR" + } + ], + "CertSelectCertificateChains": [ + { + "name": "pSelectionContext", + "type": "LPCGUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pChainParameters", + "type": "PCCERT_SELECT_CHAIN_PARA" + }, + { + "name": "cCriteria", + "type": "DWORD" + }, + { + "name": "rgpCriteria", + "type": "PCCERT_SELECT_CRITERIA" + }, + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pcSelection", + "type": "PDWORD" + }, + { + "name": "pprgpSelection", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFreeCertificateChainList": [ + { + "name": "prgpSelection", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CryptRetrieveTimeStamp": [ + { + "name": "wszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "pszHashId", + "type": "LPCSTR" + }, + { + "name": "pPara", + "type": "CRYPT_TIMESTAMP_PARA" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "ppTsContext", + "type": "PCRYPT_TIMESTAMP_CONTEXT" + }, + { + "name": "ppTsSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "phStore", + "type": "HCERTSTORE" + } + ], + "CryptVerifyTimeStampSignature": [ + { + "name": "pbTSContentInfo", + "type": "BYTE" + }, + { + "name": "cbTSContentInfo", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "hAdditionalStore", + "type": "HCERTSTORE" + }, + { + "name": "ppTsContext", + "type": "PCRYPT_TIMESTAMP_CONTEXT" + }, + { + "name": "ppTsSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "phStore", + "type": "HCERTSTORE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/cryptuiapi.json b/qiling/extensions/windows_sdk/Cryptui.json similarity index 100% rename from qiling/extensions/windows_sdk/cryptuiapi.json rename to qiling/extensions/windows_sdk/Cryptui.json diff --git a/qiling/extensions/windows_sdk/d3d11shadertracing.json b/qiling/extensions/windows_sdk/D3D11SDKLayers.json similarity index 100% rename from qiling/extensions/windows_sdk/d3d11shadertracing.json rename to qiling/extensions/windows_sdk/D3D11SDKLayers.json diff --git a/qiling/extensions/windows_sdk/D3DCompiler_47.json b/qiling/extensions/windows_sdk/D3DCompiler_47.json new file mode 100644 index 000000000..6a457e9b6 --- /dev/null +++ b/qiling/extensions/windows_sdk/D3DCompiler_47.json @@ -0,0 +1,568 @@ +{ + "D3DReadFileToBlob": [ + { + "name": "pFileName", + "type": "LPCWSTR" + }, + { + "name": "ppContents", + "type": "ID3DBlob" + } + ], + "D3DWriteBlobToFile": [ + { + "name": "pBlob", + "type": "ID3DBlob" + }, + { + "name": "pFileName", + "type": "LPCWSTR" + }, + { + "name": "bOverwrite", + "type": "BOOL" + } + ], + "D3DCompile": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pSourceName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "pEntrypoint", + "type": "LPCSTR" + }, + { + "name": "pTarget", + "type": "LPCSTR" + }, + { + "name": "Flags1", + "type": "UINT" + }, + { + "name": "Flags2", + "type": "UINT" + }, + { + "name": "ppCode", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ], + "D3DCompile2": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pSourceName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "pEntrypoint", + "type": "LPCSTR" + }, + { + "name": "pTarget", + "type": "LPCSTR" + }, + { + "name": "Flags1", + "type": "UINT" + }, + { + "name": "Flags2", + "type": "UINT" + }, + { + "name": "SecondaryDataFlags", + "type": "UINT" + }, + { + "name": "pSecondaryData", + "type": "LPCVOID" + }, + { + "name": "SecondaryDataSize", + "type": "SIZE_T" + }, + { + "name": "ppCode", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ], + "D3DCompileFromFile": [ + { + "name": "pFileName", + "type": "LPCWSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "pEntrypoint", + "type": "LPCSTR" + }, + { + "name": "pTarget", + "type": "LPCSTR" + }, + { + "name": "Flags1", + "type": "UINT" + }, + { + "name": "Flags2", + "type": "UINT" + }, + { + "name": "ppCode", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ], + "D3DPreprocess": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pSourceName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "ppCodeText", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ], + "D3DGetDebugInfo": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppDebugInfo", + "type": "ID3DBlob" + } + ], + "D3DReflect": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pInterface", + "type": "IID" + }, + { + "name": "ppReflector", + "type": "void" + } + ], + "D3DReflectLibrary": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppReflector", + "type": "LPVOID" + } + ], + "D3DDisassemble": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "szComments", + "type": "LPCSTR" + }, + { + "name": "ppDisassembly", + "type": "ID3DBlob" + } + ], + "D3DDisassembleRegion": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "szComments", + "type": "LPCSTR" + }, + { + "name": "StartByteOffset", + "type": "SIZE_T" + }, + { + "name": "NumInsts", + "type": "SIZE_T" + }, + { + "name": "pFinishByteOffset", + "type": "SIZE_T" + }, + { + "name": "ppDisassembly", + "type": "ID3DBlob" + } + ], + "D3DCreateLinker": [ + { + "name": "ppLinker", + "type": { + "name": "ID3D11Linker", + "data_type": "Struct", + "elements": [] + } + } + ], + "D3DLoadModule": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "cbSrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppModule", + "type": { + "name": "ID3D11Module", + "data_type": "Struct", + "elements": [] + } + } + ], + "D3DCreateFunctionLinkingGraph": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "ppFunctionLinkingGraph", + "type": { + "name": "ID3D11FunctionLinkingGraph", + "data_type": "Struct", + "elements": [] + } + } + ], + "D3DGetTraceInstructionOffsets": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "StartInstIndex", + "type": "SIZE_T" + }, + { + "name": "NumInsts", + "type": "SIZE_T" + }, + { + "name": "pOffsets", + "type": "SIZE_T" + }, + { + "name": "pTotalInsts", + "type": "SIZE_T" + } + ], + "D3DGetInputSignatureBlob": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppSignatureBlob", + "type": "ID3DBlob" + } + ], + "D3DGetOutputSignatureBlob": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppSignatureBlob", + "type": "ID3DBlob" + } + ], + "D3DGetInputAndOutputSignatureBlob": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "ppSignatureBlob", + "type": "ID3DBlob" + } + ], + "D3DStripShader": [ + { + "name": "pShaderBytecode", + "type": "LPCVOID" + }, + { + "name": "BytecodeLength", + "type": "SIZE_T" + }, + { + "name": "uStripFlags", + "type": "UINT" + }, + { + "name": "ppStrippedBlob", + "type": "ID3DBlob" + } + ], + "D3DGetBlobPart": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Part", + "type": "D3D_BLOB_PART" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "ppPart", + "type": "ID3DBlob" + } + ], + "D3DSetBlobPart": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "Part", + "type": "D3D_BLOB_PART" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "pPart", + "type": "LPCVOID" + }, + { + "name": "PartSize", + "type": "SIZE_T" + }, + { + "name": "ppNewShader", + "type": "ID3DBlob" + } + ], + "D3DCreateBlob": [ + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "ppBlob", + "type": "ID3DBlob" + } + ], + "D3DCompressShaders": [ + { + "name": "uNumShaders", + "type": "UINT" + }, + { + "name": "pShaderData", + "type": "D3D_SHADER_DATA" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "ppCompressedData", + "type": "ID3DBlob" + } + ], + "D3DDecompressShaders": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "uNumShaders", + "type": "UINT" + }, + { + "name": "uStartIndex", + "type": "UINT" + }, + { + "name": "pIndices", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "ppShaders", + "type": "ID3DBlob" + }, + { + "name": "pTotalShaders", + "type": "UINT" + } + ], + "D3DDisassemble10Effect": [ + { + "name": "pEffect", + "type": { + "name": "ID3D10Effect", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "ppDisassembly", + "type": "ID3DBlob" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dciman.json b/qiling/extensions/windows_sdk/Dciman32.json similarity index 100% rename from qiling/extensions/windows_sdk/dciman.json rename to qiling/extensions/windows_sdk/Dciman32.json diff --git a/qiling/extensions/windows_sdk/DfLayout.json b/qiling/extensions/windows_sdk/DfLayout.json new file mode 100644 index 000000000..faa6d1683 --- /dev/null +++ b/qiling/extensions/windows_sdk/DfLayout.json @@ -0,0 +1,518 @@ +{ + "CoFileTimeNow": [ + { + "name": "lpFileTime", + "type": "FILETIME" + } + ], + "CLSIDFromProgIDEx": [ + { + "name": "lpszProgID", + "type": "LPCOLESTR" + }, + { + "name": "lpclsid", + "type": "LPCLSID" + } + ], + "CoInitialize": [ + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CoRegisterMallocSpy": [ + { + "name": "pMallocSpy", + "type": "LPMALLOCSPY" + } + ], + "CoRevokeMallocSpy": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoRegisterInitializeSpy": [ + { + "name": "pSpy", + "type": "IInitializeSpy" + }, + { + "name": "puliCookie", + "type": "ULARGE_INTEGER" + } + ], + "CoRevokeInitializeSpy": [ + { + "name": "uliCookie", + "type": "ULARGE_INTEGER" + } + ], + "CoGetSystemSecurityPermissions": [ + { + "name": "comSDType", + "type": "COMSD" + }, + { + "name": "ppSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "CoLoadLibrary": [ + { + "name": "lpszLibName", + "type": "LPOLESTR" + }, + { + "name": "bAutoFree", + "type": "BOOL" + } + ], + "CoFreeLibrary": [ + { + "name": "hInst", + "type": "HINSTANCE" + } + ], + "CoFreeAllLibraries": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoGetInstanceFromFile": [ + { + "name": "pServerInfo", + "type": "COSERVERINFO" + }, + { + "name": "pClsid", + "type": "CLSID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "pwszName", + "type": "OLECHAR" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoGetInstanceFromIStorage": [ + { + "name": "pServerInfo", + "type": "COSERVERINFO" + }, + { + "name": "pClsid", + "type": "CLSID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "pstg", + "type": { + "name": "IStorage", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoAllowSetForegroundWindow": [ + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "lpvReserved", + "type": "LPVOID" + } + ], + "CoIsOle1Class": [ + { + "name": "rclsid", + "type": "IID" + } + ], + "CoFileTimeToDosDateTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpDosDate", + "type": "LPWORD" + }, + { + "name": "lpDosTime", + "type": "LPWORD" + } + ], + "CoDosDateTimeToFileTime": [ + { + "name": "nDosDate", + "type": "WORD" + }, + { + "name": "nDosTime", + "type": "WORD" + }, + { + "name": "lpFileTime", + "type": "FILETIME" + } + ], + "CoRegisterMessageFilter": [ + { + "name": "lpMessageFilter", + "type": "LPMESSAGEFILTER" + }, + { + "name": "lplpMessageFilter", + "type": "LPMESSAGEFILTER" + } + ], + "CoRegisterChannelHook": [ + { + "name": "ExtensionUuid", + "type": "GUID" + }, + { + "name": "pChannelHook", + "type": "IChannelHook" + } + ], + "CoTreatAsClass": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "clsidNew", + "type": "IID" + } + ], + "CreateDataAdviseHolder": [ + { + "name": "ppDAHolder", + "type": "LPDATAADVISEHOLDER" + } + ], + "CreateDataCache": [ + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "StgOpenAsyncDocfileOnIFillLockBytes": [ + { + "name": "pflb", + "type": "IFillLockBytes" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "asyncFlags", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgGetIFillLockBytesOnILockBytes": [ + { + "name": "pilb", + "type": "ILockBytes" + }, + { + "name": "ppflb", + "type": "IFillLockBytes" + } + ], + "StgGetIFillLockBytesOnFile": [ + { + "name": "pwcsName", + "type": "OLECHAR" + }, + { + "name": "ppflb", + "type": "IFillLockBytes" + } + ], + "StgOpenLayoutDocfile": [ + { + "name": "pwcsDfName", + "type": "OLECHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "CoInstall": [ + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pClassSpec", + "type": "uCLSSPEC" + }, + { + "name": "pQuery", + "type": "QUERYCONTEXT" + }, + { + "name": "pszCodeBase", + "type": "LPWSTR" + } + ], + "BindMoniker": [ + { + "name": "pmk", + "type": "LPMONIKER" + }, + { + "name": "grfOpt", + "type": "DWORD" + }, + { + "name": "iidResult", + "type": "IID" + }, + { + "name": "ppvResult", + "type": "LPVOID" + } + ], + "CoGetObject": [ + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "pBindOptions", + "type": "BIND_OPTS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "MkParseDisplayName": [ + { + "name": "pbc", + "type": "LPBC" + }, + { + "name": "szUserName", + "type": "LPCOLESTR" + }, + { + "name": "pchEaten", + "type": "ULONG" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "MonikerRelativePathTo": [ + { + "name": "pmkSrc", + "type": "LPMONIKER" + }, + { + "name": "pmkDest", + "type": "LPMONIKER" + }, + { + "name": "ppmkRelPath", + "type": "LPMONIKER" + }, + { + "name": "dwReserved", + "type": "BOOL" + } + ], + "MonikerCommonPrefixWith": [ + { + "name": "pmkThis", + "type": "LPMONIKER" + }, + { + "name": "pmkOther", + "type": "LPMONIKER" + }, + { + "name": "ppmkCommon", + "type": "LPMONIKER" + } + ], + "CreateBindCtx": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppbc", + "type": "LPBC" + } + ], + "CreateGenericComposite": [ + { + "name": "pmkFirst", + "type": "LPMONIKER" + }, + { + "name": "pmkRest", + "type": "LPMONIKER" + }, + { + "name": "ppmkComposite", + "type": "LPMONIKER" + } + ], + "GetClassFile": [ + { + "name": "szFilename", + "type": "LPCOLESTR" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "CreateClassMoniker": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateFileMoniker": [ + { + "name": "lpszPathName", + "type": "LPCOLESTR" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateItemMoniker": [ + { + "name": "lpszDelim", + "type": "LPCOLESTR" + }, + { + "name": "lpszItem", + "type": "LPCOLESTR" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateAntiMoniker": [ + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreatePointerMoniker": [ + { + "name": "punk", + "type": "LPUNKNOWN" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateObjrefMoniker": [ + { + "name": "punk", + "type": "LPUNKNOWN" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "GetRunningObjectTable": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "pprot", + "type": "LPRUNNINGOBJECTTABLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dhcpcsdk.json b/qiling/extensions/windows_sdk/Dhcpcsvc.json similarity index 100% rename from qiling/extensions/windows_sdk/dhcpcsdk.json rename to qiling/extensions/windows_sdk/Dhcpcsvc.json diff --git a/qiling/extensions/windows_sdk/dhcpv6csdk.json b/qiling/extensions/windows_sdk/Dhcpcsvc6.json similarity index 100% rename from qiling/extensions/windows_sdk/dhcpv6csdk.json rename to qiling/extensions/windows_sdk/Dhcpcsvc6.json diff --git a/qiling/extensions/windows_sdk/windns.json b/qiling/extensions/windows_sdk/Dnsapi.json similarity index 100% rename from qiling/extensions/windows_sdk/windns.json rename to qiling/extensions/windows_sdk/Dnsapi.json diff --git a/qiling/extensions/windows_sdk/errorrep.json b/qiling/extensions/windows_sdk/Faultrep.json similarity index 100% rename from qiling/extensions/windows_sdk/errorrep.json rename to qiling/extensions/windows_sdk/Faultrep.json diff --git a/qiling/extensions/windows_sdk/fltuser.json b/qiling/extensions/windows_sdk/FltLib.json similarity index 100% rename from qiling/extensions/windows_sdk/fltuser.json rename to qiling/extensions/windows_sdk/FltLib.json diff --git a/qiling/extensions/windows_sdk/fwpmu.json b/qiling/extensions/windows_sdk/Fwpuclnt.json similarity index 100% rename from qiling/extensions/windows_sdk/fwpmu.json rename to qiling/extensions/windows_sdk/Fwpuclnt.json diff --git a/qiling/extensions/windows_sdk/imm.json b/qiling/extensions/windows_sdk/Imm32.json similarity index 100% rename from qiling/extensions/windows_sdk/imm.json rename to qiling/extensions/windows_sdk/Imm32.json diff --git a/qiling/extensions/windows_sdk/icwcfg.json b/qiling/extensions/windows_sdk/Inetcfg.json similarity index 100% rename from qiling/extensions/windows_sdk/icwcfg.json rename to qiling/extensions/windows_sdk/Inetcfg.json diff --git a/qiling/extensions/windows_sdk/Instrsa5.json b/qiling/extensions/windows_sdk/Instrsa5.json new file mode 100644 index 000000000..ec5bda91f --- /dev/null +++ b/qiling/extensions/windows_sdk/Instrsa5.json @@ -0,0 +1,5200 @@ +{ + "CryptAcquireContextA": [ + { + "name": "phProv", + "type": "HCRYPTPROV" + }, + { + "name": "szContainer", + "type": "LPCSTR" + }, + { + "name": "szProvider", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptAcquireContextW": [ + { + "name": "phProv", + "type": "HCRYPTPROV" + }, + { + "name": "szContainer", + "type": "LPCWSTR" + }, + { + "name": "szProvider", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptReleaseContext": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGenKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDeriveKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "hBaseData", + "type": "HCRYPTHASH" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDestroyKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + } + ], + "CryptSetKeyParam": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetKeyParam": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetHashParam": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetHashParam": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProvParam": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetProvParam": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGenRandom": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "CryptGetUserKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "phUserKey", + "type": "HCRYPTKEY" + } + ], + "CryptExportKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hExpKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwBlobType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + } + ], + "CryptImportKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwDataLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptEncrypt": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "Final", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "CryptDecrypt": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "Final", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + } + ], + "CryptCreateHash": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phHash", + "type": "HCRYPTHASH" + } + ], + "CryptHashData": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptHashSessionKey": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptDestroyHash": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + } + ], + "CryptSignHashA": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "szDescription", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pdwSigLen", + "type": "DWORD" + } + ], + "CryptSignHashW": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "szDescription", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pdwSigLen", + "type": "DWORD" + } + ], + "CryptVerifySignatureA": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "dwSigLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "szDescription", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptVerifySignatureW": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "dwSigLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "szDescription", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProviderA": [ + { + "name": "pszProvName", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + } + ], + "CryptSetProviderW": [ + { + "name": "pszProvName", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + } + ], + "CryptSetProviderExA": [ + { + "name": "pszProvName", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProviderExW": [ + { + "name": "pszProvName", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetDefaultProviderA": [ + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszProvName", + "type": "LPSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptGetDefaultProviderW": [ + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszProvName", + "type": "LPWSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptEnumProviderTypesA": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szTypeName", + "type": "LPSTR" + }, + { + "name": "pcbTypeName", + "type": "DWORD" + } + ], + "CryptEnumProviderTypesW": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szTypeName", + "type": "LPWSTR" + }, + { + "name": "pcbTypeName", + "type": "DWORD" + } + ], + "CryptEnumProvidersA": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szProvName", + "type": "LPSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptEnumProvidersW": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szProvName", + "type": "LPWSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptContextAddRef": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptDuplicateKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDuplicateHash": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phHash", + "type": "HCRYPTHASH" + } + ], + "GetEncSChannel": [ + { + "name": "pData", + "type": "BYTE" + }, + { + "name": "dwDecSize", + "type": "DWORD" + } + ], + "CryptFormatObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFormatType", + "type": "DWORD" + }, + { + "name": "dwFormatStrType", + "type": "DWORD" + }, + { + "name": "pFormatStruct", + "type": "void" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbFormat", + "type": "void" + }, + { + "name": "pcbFormat", + "type": "DWORD" + } + ], + "CryptEncodeObjectEx": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pEncodePara", + "type": "PCRYPT_ENCODE_PARA" + }, + { + "name": "pvEncoded", + "type": "void" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptEncodeObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptDecodeObjectEx": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pDecodePara", + "type": "PCRYPT_DECODE_PARA" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pcbStructInfo", + "type": "DWORD" + } + ], + "CryptDecodeObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pcbStructInfo", + "type": "DWORD" + } + ], + "CryptInstallOIDFunctionAddress": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "cFuncEntry", + "type": "DWORD" + }, + { + "name": "rgFuncEntry", + "type": "CRYPT_OID_FUNC_ENTRY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptInitOIDFunctionSet": [ + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetOIDFunctionAddress": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppvFuncAddr", + "type": "void" + }, + { + "name": "phFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + } + ], + "CryptGetDefaultOIDDllList": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pwszDllList", + "type": "WCHAR" + }, + { + "name": "pcchDllList", + "type": "DWORD" + } + ], + "CryptGetDefaultOIDFunctionAddress": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppvFuncAddr", + "type": "void" + }, + { + "name": "phFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + } + ], + "CryptFreeOIDFunctionAddress": [ + { + "name": "hFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptRegisterOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + }, + { + "name": "pszOverrideFuncName", + "type": "LPCSTR" + } + ], + "CryptUnregisterOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + } + ], + "CryptRegisterDefaultOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + } + ], + "CryptUnregisterDefaultOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + } + ], + "CryptSetOIDFunctionValue": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszValueName", + "type": "LPCWSTR" + }, + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pbValueData", + "type": "BYTE" + }, + { + "name": "cbValueData", + "type": "DWORD" + } + ], + "CryptGetOIDFunctionValue": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszValueName", + "type": "LPCWSTR" + }, + { + "name": "pdwValueType", + "type": "DWORD" + }, + { + "name": "pbValueData", + "type": "BYTE" + }, + { + "name": "pcbValueData", + "type": "DWORD" + } + ], + "CryptEnumOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnumOIDFunc", + "type": "PFN_CRYPT_ENUM_OID_FUNC" + } + ], + "CryptFindOIDInfo": [ + { + "name": "dwKeyType", + "type": "DWORD" + }, + { + "name": "pvKey", + "type": "void" + }, + { + "name": "dwGroupId", + "type": "DWORD" + } + ], + "CryptRegisterOIDInfo": [ + { + "name": "pInfo", + "type": "PCCRYPT_OID_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptUnregisterOIDInfo": [ + { + "name": "pInfo", + "type": "PCCRYPT_OID_INFO" + } + ], + "CryptEnumOIDInfo": [ + { + "name": "dwGroupId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnumOIDInfo", + "type": "PFN_CRYPT_ENUM_OID_INFO" + } + ], + "CryptFindLocalizedName": [ + { + "name": "pwszCryptName", + "type": "LPCWSTR" + } + ], + "CryptMsgOpenToEncode": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "pvMsgEncodeInfo", + "type": "void" + }, + { + "name": "pszInnerContentObjID", + "type": "LPSTR" + }, + { + "name": "pStreamInfo", + "type": "PCMSG_STREAM_INFO" + } + ], + "CryptMsgCalculateEncodedLength": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "pvMsgEncodeInfo", + "type": "void" + }, + { + "name": "pszInnerContentObjID", + "type": "LPSTR" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "CryptMsgOpenToDecode": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "pRecipientInfo", + "type": "PCERT_INFO" + }, + { + "name": "pStreamInfo", + "type": "PCMSG_STREAM_INFO" + } + ], + "CryptMsgDuplicate": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + } + ], + "CryptMsgClose": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + } + ], + "CryptMsgUpdate": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "fFinal", + "type": "BOOL" + } + ], + "CryptMsgGetParam": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwParamType", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CryptMsgControl": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCtrlType", + "type": "DWORD" + }, + { + "name": "pvCtrlPara", + "type": "void" + } + ], + "CryptMsgVerifyCountersignatureEncoded": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "pbSignerInfoCountersignature", + "type": "PBYTE" + }, + { + "name": "cbSignerInfoCountersignature", + "type": "DWORD" + }, + { + "name": "pciCountersigner", + "type": "PCERT_INFO" + } + ], + "CryptMsgVerifyCountersignatureEncodedEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "pbSignerInfoCountersignature", + "type": "PBYTE" + }, + { + "name": "cbSignerInfoCountersignature", + "type": "DWORD" + }, + { + "name": "dwSignerType", + "type": "DWORD" + }, + { + "name": "pvSigner", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvExtra", + "type": "void" + } + ], + "CryptMsgCountersign": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "cCountersigners", + "type": "DWORD" + }, + { + "name": "rgCountersigners", + "type": "PCMSG_SIGNER_ENCODE_INFO" + } + ], + "CryptMsgCountersignEncoded": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "cCountersigners", + "type": "DWORD" + }, + { + "name": "rgCountersigners", + "type": "PCMSG_SIGNER_ENCODE_INFO" + }, + { + "name": "pbCountersignature", + "type": "PBYTE" + }, + { + "name": "pcbCountersignature", + "type": "PDWORD" + } + ], + "CertOpenStore": [ + { + "name": "lpszStoreProvider", + "type": "LPCSTR" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvPara", + "type": "void" + } + ], + "CertDuplicateStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + } + ], + "CertSaveStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSaveAs", + "type": "DWORD" + }, + { + "name": "dwSaveTo", + "type": "DWORD" + }, + { + "name": "pvSaveToPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertCloseStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetSubjectCertificateFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId", + "type": "PCERT_INFO" + } + ], + "CertEnumCertificatesInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertFindCertificateInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertGetIssuerCertificateFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pSubjectContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pPrevIssuerContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertVerifySubjectCertificateContext": [ + { + "name": "pSubject", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pIssuer", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertDuplicateCertificateContext": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertCreateCertificateContext": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CertFreeCertificateContext": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertSetCertificateContextProperty": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCertificateContextProperty": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCertificateContextProperties": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertCreateCTLEntryFromCertificateContextProperties": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "cOptAttr", + "type": "DWORD" + }, + { + "name": "rgOptAttr", + "type": "PCRYPT_ATTRIBUTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pCtlEntry", + "type": "PCTL_ENTRY" + }, + { + "name": "pcbCtlEntry", + "type": "DWORD" + } + ], + "CertSetCertificateContextPropertiesFromCTLEntry": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCtlEntry", + "type": "PCTL_ENTRY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetCRLFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pIssuerContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertEnumCRLsInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertFindCRLInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertDuplicateCRLContext": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertCreateCRLContext": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCrlEncoded", + "type": "BYTE" + }, + { + "name": "cbCrlEncoded", + "type": "DWORD" + } + ], + "CertFreeCRLContext": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertSetCRLContextProperty": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCRLContextProperty": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCRLContextProperties": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertFindCertificateInCRL": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "ppCrlEntry", + "type": "PCRL_ENTRY" + } + ], + "CertIsValidCRLForCertificate": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCrl", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertAddEncodedCertificateToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddCertificateContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddSerializedElementToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "cbElement", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContextTypeFlags", + "type": "DWORD" + }, + { + "name": "pdwContextType", + "type": "DWORD" + }, + { + "name": "ppvContext", + "type": "void" + } + ], + "CertDeleteCertificateFromStore": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddEncodedCRLToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCrlEncoded", + "type": "BYTE" + }, + { + "name": "cbCrlEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertAddCRLContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertDeleteCRLFromStore": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertSerializeCertificateStoreElement": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertSerializeCRLStoreElement": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertDuplicateCTLContext": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertCreateCTLContext": [ + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlEncoded", + "type": "BYTE" + }, + { + "name": "cbCtlEncoded", + "type": "DWORD" + } + ], + "CertFreeCTLContext": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertSetCTLContextProperty": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCTLContextProperty": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCTLContextProperties": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertEnumCTLsInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertFindSubjectInCTL": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertFindCTLInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddEncodedCTLToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlEncoded", + "type": "BYTE" + }, + { + "name": "cbCtlEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddCTLContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertSerializeCTLStoreElement": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertDeleteCTLFromStore": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddCertificateLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddCRLLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertAddCTLLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddStoreToCollection": [ + { + "name": "hCollectionStore", + "type": "HCERTSTORE" + }, + { + "name": "hSiblingStore", + "type": "HCERTSTORE" + }, + { + "name": "dwUpdateFlags", + "type": "DWORD" + }, + { + "name": "dwPriority", + "type": "DWORD" + } + ], + "CertRemoveStoreFromCollection": [ + { + "name": "hCollectionStore", + "type": "HCERTSTORE" + }, + { + "name": "hSiblingStore", + "type": "HCERTSTORE" + } + ], + "CertControlStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCtrlType", + "type": "DWORD" + }, + { + "name": "pvCtrlPara", + "type": "void" + } + ], + "CertSetStoreProperty": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetStoreProperty": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertRegisterSystemStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pStoreInfo", + "type": "PCERT_SYSTEM_STORE_INFO" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertRegisterPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszStoreName", + "type": "LPCWSTR" + }, + { + "name": "pStoreInfo", + "type": "PCERT_PHYSICAL_STORE_INFO" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertUnregisterSystemStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertUnregisterPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszStoreName", + "type": "LPCWSTR" + } + ], + "CertEnumSystemStoreLocation": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_SYSTEM_STORE_LOCATION" + } + ], + "CertEnumSystemStore": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvSystemStoreLocationPara", + "type": "void" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_SYSTEM_STORE" + } + ], + "CertEnumPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_PHYSICAL_STORE" + } + ], + "CertGetEnhancedKeyUsage": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pUsage", + "type": "PCERT_ENHKEY_USAGE" + }, + { + "name": "pcbUsage", + "type": "DWORD" + } + ], + "CertSetEnhancedKeyUsage": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pUsage", + "type": "PCERT_ENHKEY_USAGE" + } + ], + "CertAddEnhancedKeyUsageIdentifier": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pszUsageIdentifier", + "type": "LPCSTR" + } + ], + "CertRemoveEnhancedKeyUsageIdentifier": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pszUsageIdentifier", + "type": "LPCSTR" + } + ], + "CertGetValidUsages": [ + { + "name": "cCerts", + "type": "DWORD" + }, + { + "name": "rghCerts", + "type": "PCCERT_CONTEXT" + }, + { + "name": "cNumOIDs", + "type": "int" + }, + { + "name": "rghOIDs", + "type": "LPSTR" + }, + { + "name": "pcbOIDs", + "type": "DWORD" + } + ], + "CryptMsgGetAndVerifySigner": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "cSignerStore", + "type": "DWORD" + }, + { + "name": "rghSignerStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwSignerIndex", + "type": "DWORD" + } + ], + "CryptMsgSignCTL": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlContent", + "type": "BYTE" + }, + { + "name": "cbCtlContent", + "type": "DWORD" + }, + { + "name": "pSignInfo", + "type": "PCMSG_SIGNED_ENCODE_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptMsgEncodeAndSignCTL": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pCtlInfo", + "type": "PCTL_INFO" + }, + { + "name": "pSignInfo", + "type": "PCMSG_SIGNED_ENCODE_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CertFindSubjectInSortedCTL": [ + { + "name": "pSubjectIdentifier", + "type": "PCRYPT_DATA_BLOB" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pEncodedAttributes", + "type": "PCRYPT_DER_BLOB" + } + ], + "CertEnumSubjectInSortedCTL": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "ppvNextSubject", + "type": "void" + }, + { + "name": "pSubjectIdentifier", + "type": "PCRYPT_DER_BLOB" + }, + { + "name": "pEncodedAttributes", + "type": "PCRYPT_DER_BLOB" + } + ], + "CertVerifyCTLUsage": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "pSubjectUsage", + "type": "PCTL_USAGE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pVerifyUsagePara", + "type": "PCTL_VERIFY_USAGE_PARA" + }, + { + "name": "pVerifyUsageStatus", + "type": "PCTL_VERIFY_USAGE_STATUS" + } + ], + "CertVerifyRevocation": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwRevType", + "type": "DWORD" + }, + { + "name": "cContext", + "type": "DWORD" + }, + { + "name": "rgpvContext", + "type": "PVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pRevPara", + "type": "PCERT_REVOCATION_PARA" + }, + { + "name": "pRevStatus", + "type": "PCERT_REVOCATION_STATUS" + } + ], + "CertCompareIntegerBlob": [ + { + "name": "pInt1", + "type": "PCRYPT_INTEGER_BLOB" + }, + { + "name": "pInt2", + "type": "PCRYPT_INTEGER_BLOB" + } + ], + "CertCompareCertificate": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId1", + "type": "PCERT_INFO" + }, + { + "name": "pCertId2", + "type": "PCERT_INFO" + } + ], + "CertCompareCertificateName": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertName1", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "pCertName2", + "type": "PCERT_NAME_BLOB" + } + ], + "CertIsRDNAttrsInCertificateName": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pCertName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "pRDN", + "type": "PCERT_RDN" + } + ], + "CertComparePublicKeyInfo": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pPublicKey1", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pPublicKey2", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CertGetPublicKeyLength": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pPublicKey", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CryptVerifyCertificateSignature": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pPublicKey", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CryptVerifyCertificateSignatureEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "dwIssuerType", + "type": "DWORD" + }, + { + "name": "pvIssuer", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvExtra", + "type": "void" + } + ], + "CertIsStrongHashToSign": [ + { + "name": "pStrongSignPara", + "type": "PCCERT_STRONG_SIGN_PARA" + }, + { + "name": "pwszCNGHashAlgid", + "type": "LPCWSTR" + }, + { + "name": "pSigningCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptHashToBeSigned": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptHashCertificate": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptHashCertificate2": [ + { + "name": "pwszCNGHashAlgid", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptSignCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncodedToBeSigned", + "type": "BYTE" + }, + { + "name": "cbEncodedToBeSigned", + "type": "DWORD" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pvHashAuxInfo", + "type": "void" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pcbSignature", + "type": "DWORD" + } + ], + "CryptSignAndEncodeCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pvHashAuxInfo", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CertVerifyTimeValidity": [ + { + "name": "pTimeToVerify", + "type": "LPFILETIME" + }, + { + "name": "pCertInfo", + "type": "PCERT_INFO" + } + ], + "CertVerifyCRLTimeValidity": [ + { + "name": "pTimeToVerify", + "type": "LPFILETIME" + }, + { + "name": "pCrlInfo", + "type": "PCRL_INFO" + } + ], + "CertVerifyValidityNesting": [ + { + "name": "pSubjectInfo", + "type": "PCERT_INFO" + }, + { + "name": "pIssuerInfo", + "type": "PCERT_INFO" + } + ], + "CertVerifyCRLRevocation": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId", + "type": "PCERT_INFO" + }, + { + "name": "cCrlInfo", + "type": "DWORD" + }, + { + "name": "rgpCrlInfo", + "type": "PCRL_INFO" + } + ], + "CertAlgIdToOID": [ + { + "name": "dwAlgId", + "type": "DWORD" + } + ], + "CertOIDToAlgId": [ + { + "name": "pszObjId", + "type": "LPCSTR" + } + ], + "CertFindExtension": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "cExtensions", + "type": "DWORD" + }, + { + "name": "rgExtensions", + "type": "CERT_EXTENSION" + } + ], + "CertFindAttribute": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "cAttr", + "type": "DWORD" + }, + { + "name": "rgAttr", + "type": "CRYPT_ATTRIBUTE" + } + ], + "CertFindRDNAttr": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "pName", + "type": "PCERT_NAME_INFO" + } + ], + "CertGetIntendedKeyUsage": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertInfo", + "type": "PCERT_INFO" + }, + { + "name": "pbKeyUsage", + "type": "BYTE" + }, + { + "name": "cbKeyUsage", + "type": "DWORD" + } + ], + "CryptInstallDefaultContext": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwDefaultType", + "type": "DWORD" + }, + { + "name": "pvDefaultPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "phDefaultContext", + "type": "HCRYPTDEFAULTCONTEXT" + } + ], + "CryptUninstallDefaultContext": [ + { + "name": "hDefaultContext", + "type": "HCRYPTDEFAULTCONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CryptExportPublicKeyInfo": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptExportPublicKeyInfoEx": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPublicKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptExportPublicKeyInfoFromBCryptKeyHandle": [ + { + "name": "hBCryptKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPublicKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptImportPublicKeyInfo": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptImportPublicKeyInfoEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "aiKeyAlg", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptImportPublicKeyInfoEx2": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + } + ], + "CryptAcquireCertificatePrivateKey": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvParameters", + "type": "void" + }, + { + "name": "phCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "pdwKeySpec", + "type": "DWORD" + }, + { + "name": "pfCallerFreeProvOrNCryptKey", + "type": "BOOL" + } + ], + "CryptFindCertificateKeyProvInfo": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CryptImportPKCS8": [ + { + "name": "sPrivateKeyAndParams", + "type": "CRYPT_PKCS8_IMPORT_PARAMS" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "pvAuxInfo", + "type": "void" + } + ], + "CryptExportPKCS8": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "pszPrivateKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pbPrivateKeyBlob", + "type": "BYTE" + }, + { + "name": "pcbPrivateKeyBlob", + "type": "DWORD" + } + ], + "CryptExportPKCS8Ex": [ + { + "name": "psExportParams", + "type": "CRYPT_PKCS8_EXPORT_PARAMS" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pbPrivateKeyBlob", + "type": "BYTE" + }, + { + "name": "pcbPrivateKeyBlob", + "type": "DWORD" + } + ], + "CryptHashPublicKeyInfo": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CertRDNValueToStrA": [ + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pValue", + "type": "PCERT_RDN_VALUE_BLOB" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertRDNValueToStrW": [ + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pValue", + "type": "PCERT_RDN_VALUE_BLOB" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertNameToStrA": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertNameToStrW": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertStrToNameA": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszX500", + "type": "LPCSTR" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + }, + { + "name": "ppszError", + "type": "LPCSTR" + } + ], + "CertStrToNameW": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszX500", + "type": "LPCWSTR" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + }, + { + "name": "ppszError", + "type": "LPCWSTR" + } + ], + "CertGetNameStringA": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvTypePara", + "type": "void" + }, + { + "name": "pszNameString", + "type": "LPSTR" + }, + { + "name": "cchNameString", + "type": "DWORD" + } + ], + "CertGetNameStringW": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvTypePara", + "type": "void" + }, + { + "name": "pszNameString", + "type": "LPWSTR" + }, + { + "name": "cchNameString", + "type": "DWORD" + } + ], + "CryptSignMessage": [ + { + "name": "pSignPara", + "type": "PCRYPT_SIGN_MESSAGE_PARA" + }, + { + "name": "fDetachedSignature", + "type": "BOOL" + }, + { + "name": "cToBeSigned", + "type": "DWORD" + }, + { + "name": "rgpbToBeSigned", + "type": "BYTE" + }, + { + "name": "rgcbToBeSigned", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyMessageSignature": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptGetMessageSignerCount": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + } + ], + "CryptGetMessageCertificates": [ + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyDetachedMessageSignature": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbDetachedSignBlob", + "type": "BYTE" + }, + { + "name": "cbDetachedSignBlob", + "type": "DWORD" + }, + { + "name": "cToBeSigned", + "type": "DWORD" + }, + { + "name": "rgpbToBeSigned", + "type": "BYTE" + }, + { + "name": "rgcbToBeSigned", + "type": "DWORD" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptEncryptMessage": [ + { + "name": "pEncryptPara", + "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" + }, + { + "name": "cRecipientCert", + "type": "DWORD" + }, + { + "name": "rgpRecipientCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbToBeEncrypted", + "type": "BYTE" + }, + { + "name": "cbToBeEncrypted", + "type": "DWORD" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "pcbEncryptedBlob", + "type": "DWORD" + } + ], + "CryptDecryptMessage": [ + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "cbEncryptedBlob", + "type": "DWORD" + }, + { + "name": "pbDecrypted", + "type": "BYTE" + }, + { + "name": "pcbDecrypted", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptSignAndEncryptMessage": [ + { + "name": "pSignPara", + "type": "PCRYPT_SIGN_MESSAGE_PARA" + }, + { + "name": "pEncryptPara", + "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" + }, + { + "name": "cRecipientCert", + "type": "DWORD" + }, + { + "name": "rgpRecipientCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbToBeSignedAndEncrypted", + "type": "BYTE" + }, + { + "name": "cbToBeSignedAndEncrypted", + "type": "DWORD" + }, + { + "name": "pbSignedAndEncryptedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedAndEncryptedBlob", + "type": "DWORD" + } + ], + "CryptDecryptAndVerifyMessageSignature": [ + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "cbEncryptedBlob", + "type": "DWORD" + }, + { + "name": "pbDecrypted", + "type": "BYTE" + }, + { + "name": "pcbDecrypted", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptDecodeMessage": [ + { + "name": "dwMsgTypeFlags", + "type": "DWORD" + }, + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbEncodedBlob", + "type": "BYTE" + }, + { + "name": "cbEncodedBlob", + "type": "DWORD" + }, + { + "name": "dwPrevInnerContentType", + "type": "DWORD" + }, + { + "name": "pdwMsgType", + "type": "DWORD" + }, + { + "name": "pdwInnerContentType", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptHashMessage": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "fDetachedHash", + "type": "BOOL" + }, + { + "name": "cToBeHashed", + "type": "DWORD" + }, + { + "name": "rgpbToBeHashed", + "type": "BYTE" + }, + { + "name": "rgcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbHashedBlob", + "type": "BYTE" + }, + { + "name": "pcbHashedBlob", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptVerifyMessageHash": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "pbHashedBlob", + "type": "BYTE" + }, + { + "name": "cbHashedBlob", + "type": "DWORD" + }, + { + "name": "pbToBeHashed", + "type": "BYTE" + }, + { + "name": "pcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptVerifyDetachedMessageHash": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "pbDetachedHashBlob", + "type": "BYTE" + }, + { + "name": "cbDetachedHashBlob", + "type": "DWORD" + }, + { + "name": "cToBeHashed", + "type": "DWORD" + }, + { + "name": "rgpbToBeHashed", + "type": "BYTE" + }, + { + "name": "rgcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptSignMessageWithKey": [ + { + "name": "pSignPara", + "type": "PCRYPT_KEY_SIGN_MESSAGE_PARA" + }, + { + "name": "pbToBeSigned", + "type": "BYTE" + }, + { + "name": "cbToBeSigned", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyMessageSignatureWithKey": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_KEY_VERIFY_MESSAGE_PARA" + }, + { + "name": "pPublicKeyInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + } + ], + "CertOpenSystemStoreA": [ + { + "name": "hProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "szSubsystemProtocol", + "type": "LPCSTR" + } + ], + "CertOpenSystemStoreW": [ + { + "name": "hProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "szSubsystemProtocol", + "type": "LPCWSTR" + } + ], + "CertAddEncodedCertificateToSystemStoreA": [ + { + "name": "szCertStoreName", + "type": "LPCSTR" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CertAddEncodedCertificateToSystemStoreW": [ + { + "name": "szCertStoreName", + "type": "LPCWSTR" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CryptQueryObject": [ + { + "name": "dwObjectType", + "type": "DWORD" + }, + { + "name": "pvObject", + "type": "void" + }, + { + "name": "dwExpectedContentTypeFlags", + "type": "DWORD" + }, + { + "name": "dwExpectedFormatTypeFlags", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pdwContentType", + "type": "DWORD" + }, + { + "name": "pdwFormatType", + "type": "DWORD" + }, + { + "name": "phCertStore", + "type": "HCERTSTORE" + }, + { + "name": "phMsg", + "type": "HCRYPTMSG" + }, + { + "name": "ppvContext", + "type": "void" + } + ], + "CryptMemAlloc": [ + { + "name": "cbSize", + "type": "ULONG" + } + ], + "CryptMemRealloc": [ + { + "name": "pv", + "type": "LPVOID" + }, + { + "name": "cbSize", + "type": "ULONG" + } + ], + "CryptMemFree": [ + { + "name": "pv", + "type": "LPVOID" + } + ], + "CryptCreateAsyncHandle": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phAsync", + "type": "PHCRYPTASYNC" + } + ], + "CryptGetAsyncParam": [ + { + "name": "hAsync", + "type": "HCRYPTASYNC" + }, + { + "name": "pszParamOid", + "type": "LPSTR" + }, + { + "name": "ppvParam", + "type": "LPVOID" + }, + { + "name": "ppfnFree", + "type": "PFN_CRYPT_ASYNC_PARAM_FREE_FUNC" + } + ], + "CryptCloseAsyncHandle": [ + { + "name": "hAsync", + "type": "HCRYPTASYNC" + } + ], + "CryptRetrieveObjectByUrlA": [ + { + "name": "pszUrl", + "type": "LPCSTR" + }, + { + "name": "pszObjectOid", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "hAsyncRetrieve", + "type": "HCRYPTASYNC" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pvVerify", + "type": "LPVOID" + }, + { + "name": "pAuxInfo", + "type": "PCRYPT_RETRIEVE_AUX_INFO" + } + ], + "CryptRetrieveObjectByUrlW": [ + { + "name": "pszUrl", + "type": "LPCWSTR" + }, + { + "name": "pszObjectOid", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "hAsyncRetrieve", + "type": "HCRYPTASYNC" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pvVerify", + "type": "LPVOID" + }, + { + "name": "pAuxInfo", + "type": "PCRYPT_RETRIEVE_AUX_INFO" + } + ], + "CryptGetObjectUrl": [ + { + "name": "pszUrlOid", + "type": "LPCSTR" + }, + { + "name": "pvPara", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pUrlArray", + "type": "PCRYPT_URL_ARRAY" + }, + { + "name": "pcbUrlArray", + "type": "DWORD" + }, + { + "name": "pUrlInfo", + "type": "PCRYPT_URL_INFO" + }, + { + "name": "pcbUrlInfo", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CryptGetTimeValidObject": [ + { + "name": "pszTimeValidOid", + "type": "LPCSTR" + }, + { + "name": "pvPara", + "type": "LPVOID" + }, + { + "name": "pIssuer", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pftValidFor", + "type": "LPFILETIME" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pExtraInfo", + "type": "PCRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO" + } + ], + "CertCreateSelfSignCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "pSubjectIssuerBlob", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pKeyProvInfo", + "type": "PCRYPT_KEY_PROV_INFO" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pStartTime", + "type": "PSYSTEMTIME" + }, + { + "name": "pEndTime", + "type": "PSYSTEMTIME" + }, + { + "name": "pExtensions", + "type": "PCERT_EXTENSIONS" + } + ], + "CryptGetKeyIdentifierProperty": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CryptSetKeyIdentifierProperty": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CryptEnumKeyIdentifierProperties": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CRYPT_ENUM_KEYID_PROP" + } + ], + "CryptCreateKeyIdentifierFromCSP": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPubKeyOID", + "type": "LPCSTR" + }, + { + "name": "pPubKeyStruc", + "type": "PUBLICKEYSTRUC" + }, + { + "name": "cbPubKeyStruc", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "pcbHash", + "type": "DWORD" + } + ], + "CertCreateCertificateChainEngine": [ + { + "name": "pConfig", + "type": "PCERT_CHAIN_ENGINE_CONFIG" + }, + { + "name": "phChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertFreeCertificateChainEngine": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertResyncCertificateChainEngine": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertGetCertificateChain": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pTime", + "type": "LPFILETIME" + }, + { + "name": "hAdditionalStore", + "type": "HCERTSTORE" + }, + { + "name": "pChainPara", + "type": "PCERT_CHAIN_PARA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + }, + { + "name": "ppChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFreeCertificateChain": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertDuplicateCertificateChain": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFindChainInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertVerifyCertificateChainPolicy": [ + { + "name": "pszPolicyOID", + "type": "LPCSTR" + }, + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + }, + { + "name": "pPolicyPara", + "type": "PCERT_CHAIN_POLICY_PARA" + }, + { + "name": "pPolicyStatus", + "type": "PCERT_CHAIN_POLICY_STATUS" + } + ], + "CryptStringToBinaryA": [ + { + "name": "pszString", + "type": "LPCSTR" + }, + { + "name": "cchString", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "pcbBinary", + "type": "DWORD" + }, + { + "name": "pdwSkip", + "type": "DWORD" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CryptStringToBinaryW": [ + { + "name": "pszString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "pcbBinary", + "type": "DWORD" + }, + { + "name": "pdwSkip", + "type": "DWORD" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CryptBinaryToStringA": [ + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "cbBinary", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszString", + "type": "LPSTR" + }, + { + "name": "pcchString", + "type": "DWORD" + } + ], + "CryptBinaryToStringW": [ + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "cbBinary", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszString", + "type": "LPWSTR" + }, + { + "name": "pcchString", + "type": "DWORD" + } + ], + "PFXImportCertStore": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXIsPFXBlob": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + } + ], + "PFXVerifyPassword": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXExportCertStoreEx": [ + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "pvPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXExportCertStore": [ + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertOpenServerOcspResponse": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pOpenPara", + "type": "PCERT_SERVER_OCSP_RESPONSE_OPEN_PARA" + } + ], + "CertAddRefServerOcspResponse": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + } + ], + "CertCloseServerOcspResponse": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetServerOcspResponseContext": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CertAddRefServerOcspResponseContext": [ + { + "name": "pServerOcspResponseContext", + "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" + } + ], + "CertFreeServerOcspResponseContext": [ + { + "name": "pServerOcspResponseContext", + "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" + } + ], + "CertRetrieveLogoOrBiometricInfo": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "lpszLogoOrBiometricType", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "ppbData", + "type": "BYTE" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "ppwszMimeType", + "type": "LPWSTR" + } + ], + "CertSelectCertificateChains": [ + { + "name": "pSelectionContext", + "type": "LPCGUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pChainParameters", + "type": "PCCERT_SELECT_CHAIN_PARA" + }, + { + "name": "cCriteria", + "type": "DWORD" + }, + { + "name": "rgpCriteria", + "type": "PCCERT_SELECT_CRITERIA" + }, + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pcSelection", + "type": "PDWORD" + }, + { + "name": "pprgpSelection", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFreeCertificateChainList": [ + { + "name": "prgpSelection", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CryptRetrieveTimeStamp": [ + { + "name": "wszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "pszHashId", + "type": "LPCSTR" + }, + { + "name": "pPara", + "type": "CRYPT_TIMESTAMP_PARA" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "ppTsContext", + "type": "PCRYPT_TIMESTAMP_CONTEXT" + }, + { + "name": "ppTsSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "phStore", + "type": "HCERTSTORE" + } + ], + "CryptVerifyTimeStampSignature": [ + { + "name": "pbTSContentInfo", + "type": "BYTE" + }, + { + "name": "cbTSContentInfo", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "hAdditionalStore", + "type": "HCERTSTORE" + }, + { + "name": "ppTsContext", + "type": "PCRYPT_TIMESTAMP_CONTEXT" + }, + { + "name": "ppTsSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "phStore", + "type": "HCERTSTORE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/JSProxy.json b/qiling/extensions/windows_sdk/JSProxy.json new file mode 100644 index 000000000..4dfb75562 --- /dev/null +++ b/qiling/extensions/windows_sdk/JSProxy.json @@ -0,0 +1,3146 @@ +{ + "InternetTimeFromSystemTimeA": [ + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwRFC", + "type": "DWORD" + }, + { + "name": "lpszTime", + "type": "LPSTR" + }, + { + "name": "cbTime", + "type": "DWORD" + } + ], + "InternetTimeFromSystemTimeW": [ + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwRFC", + "type": "DWORD" + }, + { + "name": "lpszTime", + "type": "LPWSTR" + }, + { + "name": "cbTime", + "type": "DWORD" + } + ], + "InternetTimeFromSystemTime": [ + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwRFC", + "type": "DWORD" + }, + { + "name": "lpszTime", + "type": "LPSTR" + }, + { + "name": "cbTime", + "type": "DWORD" + } + ], + "InternetTimeToSystemTimeA": [ + { + "name": "lpszTime", + "type": "LPCSTR" + }, + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetTimeToSystemTimeW": [ + { + "name": "lpszTime", + "type": "LPCWSTR" + }, + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetTimeToSystemTime": [ + { + "name": "lpszTime", + "type": "LPCSTR" + }, + { + "name": "pst", + "type": "SYSTEMTIME" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetCrackUrlA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "dwUrlLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTSA" + } + ], + "InternetCrackUrlW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwUrlLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTSW" + } + ], + "InternetCreateUrlA": [ + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpszUrl", + "type": "LPSTR" + }, + { + "name": "lpdwUrlLength", + "type": "LPDWORD" + } + ], + "InternetCreateUrlW": [ + { + "name": "lpUrlComponents", + "type": "LPURL_COMPONENTSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpszUrl", + "type": "LPWSTR" + }, + { + "name": "lpdwUrlLength", + "type": "LPDWORD" + } + ], + "InternetCanonicalizeUrlA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszBuffer", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetCanonicalizeUrlW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszBuffer", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetCombineUrlA": [ + { + "name": "lpszBaseUrl", + "type": "LPCSTR" + }, + { + "name": "lpszRelativeUrl", + "type": "LPCSTR" + }, + { + "name": "lpszBuffer", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetCombineUrlW": [ + { + "name": "lpszBaseUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszRelativeUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszBuffer", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetOpenA": [ + { + "name": "lpszAgent", + "type": "LPCSTR" + }, + { + "name": "dwAccessType", + "type": "DWORD" + }, + { + "name": "lpszProxy", + "type": "LPCSTR" + }, + { + "name": "lpszProxyBypass", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetOpenW": [ + { + "name": "lpszAgent", + "type": "LPCWSTR" + }, + { + "name": "dwAccessType", + "type": "DWORD" + }, + { + "name": "lpszProxy", + "type": "LPCWSTR" + }, + { + "name": "lpszProxyBypass", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetCloseHandle": [ + { + "name": "hInternet", + "type": "HINTERNET" + } + ], + "InternetConnectA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpszServerName", + "type": "LPCSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "lpszUserName", + "type": "LPCSTR" + }, + { + "name": "lpszPassword", + "type": "LPCSTR" + }, + { + "name": "dwService", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetConnectW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpszServerName", + "type": "LPCWSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "lpszUserName", + "type": "LPCWSTR" + }, + { + "name": "lpszPassword", + "type": "LPCWSTR" + }, + { + "name": "dwService", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetOpenUrlA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszHeaders", + "type": "LPCSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetOpenUrlW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetReadFile": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpdwNumberOfBytesRead", + "type": "LPDWORD" + } + ], + "InternetReadFileExA": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetReadFileExW": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetSetFilePointer": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lDistanceToMove", + "type": "LONG" + }, + { + "name": "lpDistanceToMoveHigh", + "type": "PLONG" + }, + { + "name": "dwMoveMethod", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetWriteFile": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "dwNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpdwNumberOfBytesWritten", + "type": "LPDWORD" + } + ], + "InternetQueryDataAvailable": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpdwNumberOfBytesAvailable", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "InternetFindNextFileA": [ + { + "name": "hFind", + "type": "HINTERNET" + }, + { + "name": "lpvFindData", + "type": "LPVOID" + } + ], + "InternetFindNextFileW": [ + { + "name": "hFind", + "type": "HINTERNET" + }, + { + "name": "lpvFindData", + "type": "LPVOID" + } + ], + "InternetQueryOptionA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "InternetQueryOptionW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "InternetSetOptionA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + } + ], + "InternetSetOptionW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + } + ], + "InternetSetOptionExA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetSetOptionExW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "dwOption", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetLockRequestFile": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lphLockRequestInfo", + "type": "HANDLE" + } + ], + "InternetUnlockRequestFile": [ + { + "name": "hLockRequestInfo", + "type": "HANDLE" + } + ], + "InternetGetLastResponseInfoA": [ + { + "name": "lpdwError", + "type": "LPDWORD" + }, + { + "name": "lpszBuffer", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "InternetGetLastResponseInfoW": [ + { + "name": "lpdwError", + "type": "LPDWORD" + }, + { + "name": "lpszBuffer", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "InternetSetStatusCallbackA": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpfnInternetCallback", + "type": "INTERNET_STATUS_CALLBACK" + } + ], + "InternetSetStatusCallbackW": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpfnInternetCallback", + "type": "INTERNET_STATUS_CALLBACK" + } + ], + "InternetSetStatusCallback": [ + { + "name": "hInternet", + "type": "HINTERNET" + }, + { + "name": "lpfnInternetCallback", + "type": "INTERNET_STATUS_CALLBACK" + } + ], + "FtpFindFirstFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszSearchFile", + "type": "LPCSTR" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpFindFirstFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszSearchFile", + "type": "LPCWSTR" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpGetFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszRemoteFile", + "type": "LPCSTR" + }, + { + "name": "lpszNewFile", + "type": "LPCSTR" + }, + { + "name": "fFailIfExists", + "type": "BOOL" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpGetFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszRemoteFile", + "type": "LPCWSTR" + }, + { + "name": "lpszNewFile", + "type": "LPCWSTR" + }, + { + "name": "fFailIfExists", + "type": "BOOL" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpPutFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocalFile", + "type": "LPCSTR" + }, + { + "name": "lpszNewRemoteFile", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpPutFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocalFile", + "type": "LPCWSTR" + }, + { + "name": "lpszNewRemoteFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpDeleteFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszFileName", + "type": "LPCSTR" + } + ], + "FtpDeleteFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszFileName", + "type": "LPCWSTR" + } + ], + "FtpRenameFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszExisting", + "type": "LPCSTR" + }, + { + "name": "lpszNew", + "type": "LPCSTR" + } + ], + "FtpRenameFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszExisting", + "type": "LPCWSTR" + }, + { + "name": "lpszNew", + "type": "LPCWSTR" + } + ], + "FtpOpenFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszFileName", + "type": "LPCSTR" + }, + { + "name": "dwAccess", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpOpenFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszFileName", + "type": "LPCWSTR" + }, + { + "name": "dwAccess", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "FtpCreateDirectoryA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCSTR" + } + ], + "FtpCreateDirectoryW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCWSTR" + } + ], + "FtpRemoveDirectoryA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCSTR" + } + ], + "FtpRemoveDirectoryW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCWSTR" + } + ], + "FtpSetCurrentDirectoryA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCSTR" + } + ], + "FtpSetCurrentDirectoryW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszDirectory", + "type": "LPCWSTR" + } + ], + "FtpGetCurrentDirectoryA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszCurrentDirectory", + "type": "LPSTR" + }, + { + "name": "lpdwCurrentDirectory", + "type": "LPDWORD" + } + ], + "FtpGetCurrentDirectoryW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszCurrentDirectory", + "type": "LPWSTR" + }, + { + "name": "lpdwCurrentDirectory", + "type": "LPDWORD" + } + ], + "FtpCommandA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "fExpectResponse", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpszCommand", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + }, + { + "name": "phFtpCommand", + "type": "HINTERNET" + } + ], + "FtpCommandW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "fExpectResponse", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpszCommand", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + }, + { + "name": "phFtpCommand", + "type": "HINTERNET" + } + ], + "FtpGetFileSize": [ + { + "name": "hFile", + "type": "HINTERNET" + }, + { + "name": "lpdwFileSizeHigh", + "type": "LPDWORD" + } + ], + "GopherCreateLocatorA": [ + { + "name": "lpszHost", + "type": "LPCSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "lpszDisplayString", + "type": "LPCSTR" + }, + { + "name": "lpszSelectorString", + "type": "LPCSTR" + }, + { + "name": "dwGopherType", + "type": "DWORD" + }, + { + "name": "lpszLocator", + "type": "LPSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "GopherCreateLocatorW": [ + { + "name": "lpszHost", + "type": "LPCWSTR" + }, + { + "name": "nServerPort", + "type": "INTERNET_PORT" + }, + { + "name": "lpszDisplayString", + "type": "LPCWSTR" + }, + { + "name": "lpszSelectorString", + "type": "LPCWSTR" + }, + { + "name": "dwGopherType", + "type": "DWORD" + }, + { + "name": "lpszLocator", + "type": "LPWSTR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "GopherGetLocatorTypeA": [ + { + "name": "lpszLocator", + "type": "LPCSTR" + }, + { + "name": "lpdwGopherType", + "type": "LPDWORD" + } + ], + "GopherGetLocatorTypeW": [ + { + "name": "lpszLocator", + "type": "LPCWSTR" + }, + { + "name": "lpdwGopherType", + "type": "LPDWORD" + } + ], + "GopherFindFirstFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCSTR" + }, + { + "name": "lpszSearchString", + "type": "LPCSTR" + }, + { + "name": "lpFindData", + "type": "LPGOPHER_FIND_DATAA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherFindFirstFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCWSTR" + }, + { + "name": "lpszSearchString", + "type": "LPCWSTR" + }, + { + "name": "lpFindData", + "type": "LPGOPHER_FIND_DATAW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherOpenFileA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCSTR" + }, + { + "name": "lpszView", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherOpenFileW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCWSTR" + }, + { + "name": "lpszView", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherGetAttributeA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCSTR" + }, + { + "name": "lpszAttributeName", + "type": "LPCSTR" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "lpdwCharactersReturned", + "type": "LPDWORD" + }, + { + "name": "lpfnEnumerator", + "type": "GOPHER_ATTRIBUTE_ENUMERATOR" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "GopherGetAttributeW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszLocator", + "type": "LPCWSTR" + }, + { + "name": "lpszAttributeName", + "type": "LPCWSTR" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "dwBufferLength", + "type": "DWORD" + }, + { + "name": "lpdwCharactersReturned", + "type": "LPDWORD" + }, + { + "name": "lpfnEnumerator", + "type": "GOPHER_ATTRIBUTE_ENUMERATOR" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpOpenRequestA": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszVerb", + "type": "LPCSTR" + }, + { + "name": "lpszObjectName", + "type": "LPCSTR" + }, + { + "name": "lpszVersion", + "type": "LPCSTR" + }, + { + "name": "lpszReferrer", + "type": "LPCSTR" + }, + { + "name": "lplpszAcceptTypes", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpOpenRequestW": [ + { + "name": "hConnect", + "type": "HINTERNET" + }, + { + "name": "lpszVerb", + "type": "LPCWSTR" + }, + { + "name": "lpszObjectName", + "type": "LPCWSTR" + }, + { + "name": "lpszVersion", + "type": "LPCWSTR" + }, + { + "name": "lpszReferrer", + "type": "LPCWSTR" + }, + { + "name": "lplpszAcceptTypes", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpAddRequestHeadersA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwModifiers", + "type": "DWORD" + } + ], + "HttpAddRequestHeadersW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "dwModifiers", + "type": "DWORD" + } + ], + "HttpSendRequestA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "lpOptional", + "type": "LPVOID" + }, + { + "name": "dwOptionalLength", + "type": "DWORD" + } + ], + "HttpSendRequestW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpszHeaders", + "type": "LPCWSTR" + }, + { + "name": "dwHeadersLength", + "type": "DWORD" + }, + { + "name": "lpOptional", + "type": "LPVOID" + }, + { + "name": "dwOptionalLength", + "type": "DWORD" + } + ], + "HttpSendRequestExA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffersIn", + "type": "LPINTERNET_BUFFERSA" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpSendRequestExW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffersIn", + "type": "LPINTERNET_BUFFERSW" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpEndRequestA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpEndRequestW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "lpBuffersOut", + "type": "LPINTERNET_BUFFERSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContext", + "type": "DWORD_PTR" + } + ], + "HttpQueryInfoA": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpdwIndex", + "type": "LPDWORD" + } + ], + "HttpQueryInfoW": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpdwIndex", + "type": "LPDWORD" + } + ], + "InternetSetCookieA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCSTR" + }, + { + "name": "lpszCookieData", + "type": "LPCSTR" + } + ], + "InternetSetCookieW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieData", + "type": "LPCWSTR" + } + ], + "InternetGetCookieA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCSTR" + }, + { + "name": "lpszCookieData", + "type": "LPSTR" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "InternetGetCookieW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieData", + "type": "LPWSTR" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "InternetSetCookieExA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCSTR" + }, + { + "name": "lpszCookieData", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD_PTR" + } + ], + "InternetSetCookieExW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieData", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD_PTR" + } + ], + "InternetGetCookieExA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCSTR" + }, + { + "name": "lpszCookieData", + "type": "LPSTR" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "InternetGetCookieExW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieName", + "type": "LPCWSTR" + }, + { + "name": "lpszCookieData", + "type": "LPWSTR" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "InternetAttemptConnect": [ + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetCheckConnectionA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetCheckConnectionW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "ResumeSuspendedDownload": [ + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwResultCode", + "type": "DWORD" + } + ], + "InternetErrorDlg": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRequest", + "type": "HINTERNET" + }, + { + "name": "dwError", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lppvData", + "type": "LPVOID" + } + ], + "InternetConfirmZoneCrossingA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szUrlPrev", + "type": "LPSTR" + }, + { + "name": "szUrlNew", + "type": "LPSTR" + }, + { + "name": "bPost", + "type": "BOOL" + } + ], + "InternetConfirmZoneCrossingW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szUrlPrev", + "type": "LPWSTR" + }, + { + "name": "szUrlNew", + "type": "LPWSTR" + }, + { + "name": "bPost", + "type": "BOOL" + } + ], + "InternetConfirmZoneCrossing": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "szUrlPrev", + "type": "LPSTR" + }, + { + "name": "szUrlNew", + "type": "LPSTR" + }, + { + "name": "bPost", + "type": "BOOL" + } + ], + "CreateUrlCacheEntryA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwExpectedFileSize", + "type": "DWORD" + }, + { + "name": "lpszFileExtension", + "type": "LPCSTR" + }, + { + "name": "lpszFileName", + "type": "LPSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "CreateUrlCacheEntryW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "dwExpectedFileSize", + "type": "DWORD" + }, + { + "name": "lpszFileExtension", + "type": "LPCWSTR" + }, + { + "name": "lpszFileName", + "type": "LPWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "CommitUrlCacheEntryA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpszLocalFileName", + "type": "LPCSTR" + }, + { + "name": "ExpireTime", + "type": "FILETIME" + }, + { + "name": "LastModifiedTime", + "type": "FILETIME" + }, + { + "name": "CacheEntryType", + "type": "DWORD" + }, + { + "name": "lpHeaderInfo", + "type": "LPBYTE" + }, + { + "name": "cchHeaderInfo", + "type": "DWORD" + }, + { + "name": "lpszFileExtension", + "type": "LPCSTR" + }, + { + "name": "lpszOriginalUrl", + "type": "LPCSTR" + } + ], + "CommitUrlCacheEntryW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpszLocalFileName", + "type": "LPCWSTR" + }, + { + "name": "ExpireTime", + "type": "FILETIME" + }, + { + "name": "LastModifiedTime", + "type": "FILETIME" + }, + { + "name": "CacheEntryType", + "type": "DWORD" + }, + { + "name": "lpszHeaderInfo", + "type": "LPWSTR" + }, + { + "name": "cchHeaderInfo", + "type": "DWORD" + }, + { + "name": "lpszFileExtension", + "type": "LPCWSTR" + }, + { + "name": "lpszOriginalUrl", + "type": "LPCWSTR" + } + ], + "RetrieveUrlCacheEntryFileA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "RetrieveUrlCacheEntryFileW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "UnlockUrlCacheEntryFileA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "UnlockUrlCacheEntryFileW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "UnlockUrlCacheEntryFile": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "RetrieveUrlCacheEntryStreamA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "fRandomRead", + "type": "BOOL" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "RetrieveUrlCacheEntryStreamW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "fRandomRead", + "type": "BOOL" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "ReadUrlCacheEntryStream": [ + { + "name": "hUrlCacheStream", + "type": "HANDLE" + }, + { + "name": "dwLocation", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpdwLen", + "type": "LPDWORD" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "UnlockUrlCacheEntryStream": [ + { + "name": "hUrlCacheStream", + "type": "HANDLE" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "GetUrlCacheEntryInfoA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "GetUrlCacheEntryInfoW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindFirstUrlCacheGroup": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "lpSearchCondition", + "type": "LPVOID" + }, + { + "name": "dwSearchCondition", + "type": "DWORD" + }, + { + "name": "lpGroupId", + "type": "GROUPID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindNextUrlCacheGroup": [ + { + "name": "hFind", + "type": "HANDLE" + }, + { + "name": "lpGroupId", + "type": "GROUPID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "GetUrlCacheGroupAttributeA": [ + { + "name": "gid", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpGroupInfo", + "type": "LPINTERNET_CACHE_GROUP_INFOA" + }, + { + "name": "lpcbGroupInfo", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "GetUrlCacheGroupAttributeW": [ + { + "name": "gid", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpGroupInfo", + "type": "LPINTERNET_CACHE_GROUP_INFOW" + }, + { + "name": "lpcbGroupInfo", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheGroupAttributeA": [ + { + "name": "gid", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpGroupInfo", + "type": "LPINTERNET_CACHE_GROUP_INFOA" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheGroupAttributeW": [ + { + "name": "gid", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpGroupInfo", + "type": "LPINTERNET_CACHE_GROUP_INFOW" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "GetUrlCacheEntryInfoExA": [ + { + "name": "lpszUrl", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpszRedirectUrl", + "type": "LPSTR" + }, + { + "name": "lpcbRedirectUrl", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetUrlCacheEntryInfoExW": [ + { + "name": "lpszUrl", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpszRedirectUrl", + "type": "LPWSTR" + }, + { + "name": "lpcbRedirectUrl", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SetUrlCacheEntryInfoA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "dwFieldControl", + "type": "DWORD" + } + ], + "SetUrlCacheEntryInfoW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "lpCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "dwFieldControl", + "type": "DWORD" + } + ], + "CreateUrlCacheGroup": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "DeleteUrlCacheGroup": [ + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheEntryGroupA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "pbGroupAttributes", + "type": "LPBYTE" + }, + { + "name": "cbGroupAttributes", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheEntryGroupW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "pbGroupAttributes", + "type": "LPBYTE" + }, + { + "name": "cbGroupAttributes", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SetUrlCacheEntryGroup": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "pbGroupAttributes", + "type": "LPBYTE" + }, + { + "name": "cbGroupAttributes", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindFirstUrlCacheEntryExA": [ + { + "name": "lpszUrlSearchPattern", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "lpFirstCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpGroupAttributes", + "type": "LPVOID" + }, + { + "name": "lpcbGroupAttributes", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindFirstUrlCacheEntryExW": [ + { + "name": "lpszUrlSearchPattern", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "GroupId", + "type": "GROUPID" + }, + { + "name": "lpFirstCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpGroupAttributes", + "type": "LPVOID" + }, + { + "name": "lpcbGroupAttributes", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindNextUrlCacheEntryExA": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + }, + { + "name": "lpNextCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpGroupAttributes", + "type": "LPVOID" + }, + { + "name": "lpcbGroupAttributes", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindNextUrlCacheEntryExW": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + }, + { + "name": "lpNextCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + }, + { + "name": "lpGroupAttributes", + "type": "LPVOID" + }, + { + "name": "lpcbGroupAttributes", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "FindFirstUrlCacheEntryA": [ + { + "name": "lpszUrlSearchPattern", + "type": "LPCSTR" + }, + { + "name": "lpFirstCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindFirstUrlCacheEntryW": [ + { + "name": "lpszUrlSearchPattern", + "type": "LPCWSTR" + }, + { + "name": "lpFirstCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindNextUrlCacheEntryA": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + }, + { + "name": "lpNextCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOA" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindNextUrlCacheEntryW": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + }, + { + "name": "lpNextCacheEntryInfo", + "type": "LPINTERNET_CACHE_ENTRY_INFOW" + }, + { + "name": "lpcbCacheEntryInfo", + "type": "LPDWORD" + } + ], + "FindCloseUrlCache": [ + { + "name": "hEnumHandle", + "type": "HANDLE" + } + ], + "DeleteUrlCacheEntryA": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + } + ], + "DeleteUrlCacheEntryW": [ + { + "name": "lpszUrlName", + "type": "LPCWSTR" + } + ], + "DeleteUrlCacheEntry": [ + { + "name": "lpszUrlName", + "type": "LPCSTR" + } + ], + "InternetDialA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszConnectoid", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpdwConnection", + "type": "DWORD_PTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetDialW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszConnectoid", + "type": "LPWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpdwConnection", + "type": "DWORD_PTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetDial": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "lpszConnectoid", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpdwConnection", + "type": "LPDWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetHangUp": [ + { + "name": "dwConnection", + "type": "DWORD_PTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetGoOnlineA": [ + { + "name": "lpszURL", + "type": "LPCSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetGoOnlineW": [ + { + "name": "lpszURL", + "type": "LPCWSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetGoOnline": [ + { + "name": "lpszURL", + "type": "LPSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InternetAutodial": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hwndParent", + "type": "HWND" + } + ], + "InternetAutodialHangup": [ + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetGetConnectedState": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetGetConnectedStateExA": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lpszConnectionName", + "type": "LPSTR" + }, + { + "name": "cchNameLen", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetGetConnectedStateExW": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lpszConnectionName", + "type": "LPWSTR" + }, + { + "name": "cchNameLen", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetInitializeAutoProxyDll": [ + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "DetectAutoProxyUrl": [ + { + "name": "pszAutoProxyUrl", + "type": "PSTR" + }, + { + "name": "cchAutoProxyUrl", + "type": "DWORD" + }, + { + "name": "dwDetectFlags", + "type": "DWORD" + } + ], + "CreateMD5SSOHash": [ + { + "name": "pszChallengeInfo", + "type": "PWSTR" + }, + { + "name": "pwszRealm", + "type": "PWSTR" + }, + { + "name": "pwszTarget", + "type": "PWSTR" + }, + { + "name": "pbHexHash", + "type": "PBYTE" + } + ], + "InternetGetConnectedStateEx": [ + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lpszConnectionName", + "type": "LPSTR" + }, + { + "name": "dwNameLen", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetSetDialStateA": [ + { + "name": "lpszConnectoid", + "type": "LPCSTR" + }, + { + "name": "dwState", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetSetDialStateW": [ + { + "name": "lpszConnectoid", + "type": "LPCWSTR" + }, + { + "name": "dwState", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetSetDialState": [ + { + "name": "lpszConnectoid", + "type": "LPCSTR" + }, + { + "name": "dwState", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "InternetSetPerSiteCookieDecisionA": [ + { + "name": "pchHostName", + "type": "LPCSTR" + }, + { + "name": "dwDecision", + "type": "DWORD" + } + ], + "InternetSetPerSiteCookieDecisionW": [ + { + "name": "pchHostName", + "type": "LPCWSTR" + }, + { + "name": "dwDecision", + "type": "DWORD" + } + ], + "InternetGetPerSiteCookieDecisionA": [ + { + "name": "pchHostName", + "type": "LPCSTR" + }, + { + "name": "pResult", + "type": "unsigned long" + } + ], + "InternetGetPerSiteCookieDecisionW": [ + { + "name": "pchHostName", + "type": "LPCWSTR" + }, + { + "name": "pResult", + "type": "unsigned long" + } + ], + "InternetEnumPerSiteCookieDecisionA": [ + { + "name": "pszSiteName", + "type": "LPSTR" + }, + { + "name": "pcSiteNameSize", + "type": "unsigned long" + }, + { + "name": "pdwDecision", + "type": "unsigned long" + }, + { + "name": "dwIndex", + "type": "unsigned long" + } + ], + "InternetEnumPerSiteCookieDecisionW": [ + { + "name": "pszSiteName", + "type": "LPWSTR" + }, + { + "name": "pcSiteNameSize", + "type": "unsigned long" + }, + { + "name": "pdwDecision", + "type": "unsigned long" + }, + { + "name": "dwIndex", + "type": "unsigned long" + } + ], + "PrivacySetZonePreferenceW": [ + { + "name": "dwZone", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwTemplate", + "type": "DWORD" + }, + { + "name": "pszPreference", + "type": "LPCWSTR" + } + ], + "PrivacyGetZonePreferenceW": [ + { + "name": "dwZone", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pdwTemplate", + "type": "LPDWORD" + }, + { + "name": "pszBuffer", + "type": "LPWSTR" + }, + { + "name": "pdwBufferLength", + "type": "LPDWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wow64apiset.json b/qiling/extensions/windows_sdk/Kernel32.json similarity index 100% rename from qiling/extensions/windows_sdk/wow64apiset.json rename to qiling/extensions/windows_sdk/Kernel32.json diff --git a/qiling/extensions/windows_sdk/handleapi.json b/qiling/extensions/windows_sdk/KernelBase.json similarity index 100% rename from qiling/extensions/windows_sdk/handleapi.json rename to qiling/extensions/windows_sdk/KernelBase.json diff --git a/qiling/extensions/windows_sdk/lzexpand.json b/qiling/extensions/windows_sdk/Lz32.json similarity index 100% rename from qiling/extensions/windows_sdk/lzexpand.json rename to qiling/extensions/windows_sdk/Lz32.json diff --git a/qiling/extensions/windows_sdk/msajtransport.json b/qiling/extensions/windows_sdk/MSAJApi.json similarity index 100% rename from qiling/extensions/windows_sdk/msajtransport.json rename to qiling/extensions/windows_sdk/MSAJApi.json diff --git a/qiling/extensions/windows_sdk/mfidl.json b/qiling/extensions/windows_sdk/Mfsensorgroup.json similarity index 100% rename from qiling/extensions/windows_sdk/mfidl.json rename to qiling/extensions/windows_sdk/Mfsensorgroup.json diff --git a/qiling/extensions/windows_sdk/mmdeviceapi.json b/qiling/extensions/windows_sdk/Mmdevapi.json similarity index 100% rename from qiling/extensions/windows_sdk/mmdeviceapi.json rename to qiling/extensions/windows_sdk/Mmdevapi.json diff --git a/qiling/extensions/windows_sdk/windowsdefender.json b/qiling/extensions/windows_sdk/MpClient.json similarity index 100% rename from qiling/extensions/windows_sdk/windowsdefender.json rename to qiling/extensions/windows_sdk/MpClient.json diff --git a/qiling/extensions/windows_sdk/npapi.json b/qiling/extensions/windows_sdk/Mpr.json similarity index 100% rename from qiling/extensions/windows_sdk/npapi.json rename to qiling/extensions/windows_sdk/Mpr.json diff --git a/qiling/extensions/windows_sdk/dmoreg.json b/qiling/extensions/windows_sdk/Msdmo.json similarity index 100% rename from qiling/extensions/windows_sdk/dmoreg.json rename to qiling/extensions/windows_sdk/Msdmo.json diff --git a/qiling/extensions/windows_sdk/wingdi.json b/qiling/extensions/windows_sdk/Msimg32.json similarity index 100% rename from qiling/extensions/windows_sdk/wingdi.json rename to qiling/extensions/windows_sdk/Msimg32.json diff --git a/qiling/extensions/windows_sdk/atacct.json b/qiling/extensions/windows_sdk/Mstask.json similarity index 100% rename from qiling/extensions/windows_sdk/atacct.json rename to qiling/extensions/windows_sdk/Mstask.json diff --git a/qiling/extensions/windows_sdk/Msvfw32.json b/qiling/extensions/windows_sdk/Msvfw32.json new file mode 100644 index 000000000..382f95441 --- /dev/null +++ b/qiling/extensions/windows_sdk/Msvfw32.json @@ -0,0 +1,1722 @@ +{ + "ICInfo": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lpicinfo", + "type": "ICINFO" + } + ], + "ICInstall": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "szDesc", + "type": "LPSTR" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "ICRemove": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "ICGetInfo": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "picinfo", + "type": "ICINFO" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "ICOpen": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wMode", + "type": "UINT" + } + ], + "ICOpenFunction": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wMode", + "type": "UINT" + }, + { + "name": "lpfnHandler", + "type": "FARPROC" + } + ], + "ICClose": [ + { + "name": "hic", + "type": "HIC" + } + ], + "ICSendMessage": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "msg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "ICCompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpbiOutput", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpbiInput", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpckid", + "type": "LPDWORD" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lFrameNum", + "type": "LONG" + }, + { + "name": "dwFrameSize", + "type": "DWORD" + }, + { + "name": "dwQuality", + "type": "DWORD" + }, + { + "name": "lpbiPrev", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpPrev", + "type": "LPVOID" + } + ], + "ICDecompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpbiFormat", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + } + ], + "ICDrawBegin": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDst", + "type": "int" + }, + { + "name": "yDst", + "type": "int" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "dwRate", + "type": "DWORD" + }, + { + "name": "dwScale", + "type": "DWORD" + } + ], + "ICDraw": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "lTime", + "type": "LONG" + } + ], + "ICLocate": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "wFlags", + "type": "WORD" + } + ], + "ICGetDisplayFormat": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "BitDepth", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "ICImageCompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFO" + }, + { + "name": "lQuality", + "type": "LONG" + }, + { + "name": "plSize", + "type": "LONG" + } + ], + "ICImageDecompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFO" + } + ], + "ICCompressorChoose": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "pvIn", + "type": "LPVOID" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "lpszTitle", + "type": "LPSTR" + } + ], + "ICSeqCompressFrameStart": [ + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + } + ], + "ICSeqCompressFrameEnd": [ + { + "name": "pc", + "type": "PCOMPVARS" + } + ], + "ICSeqCompressFrame": [ + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "pfKey", + "type": "BOOL" + }, + { + "name": "plSize", + "type": "LONG" + } + ], + "ICCompressorFree": [ + { + "name": "pc", + "type": "PCOMPVARS" + } + ], + "DrawDibOpen": [ + { + "name": "VOID", + "type": "void" + } + ], + "DrawDibClose": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibGetBuffer": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "dwSize", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DrawDibGetPalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibSetPalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hpal", + "type": "HPALETTE" + } + ], + "DrawDibChangePalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "iStart", + "type": "int" + }, + { + "name": "iLen", + "type": "int" + }, + { + "name": "lppe", + "type": "LPPALETTEENTRY" + } + ], + "DrawDibRealize": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "fBackground", + "type": "BOOL" + } + ], + "DrawDibStart": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "rate", + "type": "DWORD" + } + ], + "DrawDibStop": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibBegin": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "DrawDibDraw": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDst", + "type": "int" + }, + { + "name": "yDst", + "type": "int" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "DrawDibEnd": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibTime": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "lpddtime", + "type": "LPDRAWDIBTIME" + } + ], + "DrawDibProfileDisplay": [ + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + } + ], + "AVIFileInit": [ + { + "name": "VOID", + "type": "void" + } + ], + "AVIFileExit": [ + { + "name": "VOID", + "type": "void" + } + ], + "AVIFileAddRef": [ + { + "name": "pfile", + "type": "PAVIFILE" + } + ], + "AVIFileRelease": [ + { + "name": "pfile", + "type": "PAVIFILE" + } + ], + "AVIFileOpenA": [ + { + "name": "ppfile", + "type": "PAVIFILE" + }, + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "uMode", + "type": "UINT" + }, + { + "name": "lpHandler", + "type": "LPCLSID" + } + ], + "AVIFileOpenW": [ + { + "name": "ppfile", + "type": "PAVIFILE" + }, + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "uMode", + "type": "UINT" + }, + { + "name": "lpHandler", + "type": "LPCLSID" + } + ], + "AVIFileInfoW": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "pfi", + "type": "LPAVIFILEINFOW" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIFileInfoA": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "pfi", + "type": "LPAVIFILEINFOA" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIFileGetStream": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG" + } + ], + "AVIFileCreateStreamW": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "AVISTREAMINFOW" + } + ], + "AVIFileCreateStreamA": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "AVISTREAMINFOA" + } + ], + "AVIFileWriteData": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ckid", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cbData", + "type": "LONG" + } + ], + "AVIFileReadData": [ + { + "name": "pfile", + "type": "PAVIFILE" + }, + { + "name": "ckid", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpcbData", + "type": "LONG" + } + ], + "AVIFileEndRecord": [ + { + "name": "pfile", + "type": "PAVIFILE" + } + ], + "AVIStreamAddRef": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamRelease": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamInfoW": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "LPAVISTREAMINFOW" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIStreamInfoA": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "psi", + "type": "LPAVISTREAMINFOA" + }, + { + "name": "lSize", + "type": "LONG" + } + ], + "AVIStreamFindSample": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lPos", + "type": "LONG" + }, + { + "name": "lFlags", + "type": "LONG" + } + ], + "AVIStreamReadFormat": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lPos", + "type": "LONG" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "lpcbFormat", + "type": "LONG" + } + ], + "AVIStreamSetFormat": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lPos", + "type": "LONG" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "cbFormat", + "type": "LONG" + } + ], + "AVIStreamReadData": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "fcc", + "type": "DWORD" + }, + { + "name": "lp", + "type": "LPVOID" + }, + { + "name": "lpcb", + "type": "LONG" + } + ], + "AVIStreamWriteData": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "fcc", + "type": "DWORD" + }, + { + "name": "lp", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "LONG" + } + ], + "AVIStreamRead": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lSamples", + "type": "LONG" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbBuffer", + "type": "LONG" + }, + { + "name": "plBytes", + "type": "LONG" + }, + { + "name": "plSamples", + "type": "LONG" + } + ], + "AVIStreamWrite": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lSamples", + "type": "LONG" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbBuffer", + "type": "LONG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "plSampWritten", + "type": "LONG" + }, + { + "name": "plBytesWritten", + "type": "LONG" + } + ], + "AVIStreamStart": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamLength": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamTimeToSample": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lTime", + "type": "LONG" + } + ], + "AVIStreamSampleToTime": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lSample", + "type": "LONG" + } + ], + "AVIStreamBeginStreaming": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lEnd", + "type": "LONG" + }, + { + "name": "lRate", + "type": "LONG" + } + ], + "AVIStreamEndStreaming": [ + { + "name": "pavi", + "type": "PAVISTREAM" + } + ], + "AVIStreamGetFrameOpen": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpbiWanted", + "type": "LPBITMAPINFOHEADER" + } + ], + "AVIStreamGetFrame": [ + { + "name": "pg", + "type": "PGETFRAME" + }, + { + "name": "lPos", + "type": "LONG" + } + ], + "AVIStreamGetFrameClose": [ + { + "name": "pg", + "type": "PGETFRAME" + } + ], + "AVIStreamOpenFromFileA": [ + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "mode", + "type": "UINT" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVIStreamOpenFromFileW": [ + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "mode", + "type": "UINT" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVIStreamCreate": [ + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "lParam1", + "type": "LONG" + }, + { + "name": "lParam2", + "type": "LONG" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVIMakeCompressedStream": [ + { + "name": "ppsCompressed", + "type": "PAVISTREAM" + }, + { + "name": "ppsSource", + "type": "PAVISTREAM" + }, + { + "name": "lpOptions", + "type": "AVICOMPRESSOPTIONS" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + } + ], + "AVISaveA": [ + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "pfile", + "type": "PAVISTREAM" + }, + { + "name": "lpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveVA": [ + { + "name": "szFile", + "type": "LPCSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveW": [ + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "pfile", + "type": "PAVISTREAM" + }, + { + "name": "lpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveVW": [ + { + "name": "szFile", + "type": "LPCWSTR" + }, + { + "name": "pclsidHandler", + "type": "CLSID" + }, + { + "name": "lpfnCallback", + "type": "AVISAVECALLBACK" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveOptions": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "ppavi", + "type": "PAVISTREAM" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVISaveOptionsFree": [ + { + "name": "nStreams", + "type": "int" + }, + { + "name": "plpOptions", + "type": "LPAVICOMPRESSOPTIONS" + } + ], + "AVIBuildFilterW": [ + { + "name": "lpszFilter", + "type": "LPWSTR" + }, + { + "name": "cbFilter", + "type": "LONG" + }, + { + "name": "fSaving", + "type": "BOOL" + } + ], + "AVIBuildFilterA": [ + { + "name": "lpszFilter", + "type": "LPSTR" + }, + { + "name": "cbFilter", + "type": "LONG" + }, + { + "name": "fSaving", + "type": "BOOL" + } + ], + "AVIMakeFileFromStreams": [ + { + "name": "ppfile", + "type": "PAVIFILE" + }, + { + "name": "nStreams", + "type": "int" + }, + { + "name": "papStreams", + "type": "PAVISTREAM" + } + ], + "AVIMakeStreamFromClipboard": [ + { + "name": "cfFormat", + "type": "UINT" + }, + { + "name": "hGlobal", + "type": "HANDLE" + }, + { + "name": "ppstream", + "type": "PAVISTREAM" + } + ], + "AVIPutFileOnClipboard": [ + { + "name": "pf", + "type": "PAVIFILE" + } + ], + "AVIGetFromClipboard": [ + { + "name": "lppf", + "type": "PAVIFILE" + } + ], + "AVIClearClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateEditableStream": [ + { + "name": "ppsEditable", + "type": "PAVISTREAM" + }, + { + "name": "psSource", + "type": "PAVISTREAM" + } + ], + "EditStreamCut": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "plStart", + "type": "LONG" + }, + { + "name": "plLength", + "type": "LONG" + }, + { + "name": "ppResult", + "type": "PAVISTREAM" + } + ], + "EditStreamCopy": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "plStart", + "type": "LONG" + }, + { + "name": "plLength", + "type": "LONG" + }, + { + "name": "ppResult", + "type": "PAVISTREAM" + } + ], + "EditStreamPaste": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "plPos", + "type": "LONG" + }, + { + "name": "plLength", + "type": "LONG" + }, + { + "name": "pstream", + "type": "PAVISTREAM" + }, + { + "name": "lStart", + "type": "LONG" + }, + { + "name": "lEnd", + "type": "LONG" + } + ], + "EditStreamClone": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "ppResult", + "type": "PAVISTREAM" + } + ], + "EditStreamSetNameA": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpszName", + "type": "LPCSTR" + } + ], + "EditStreamSetNameW": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpszName", + "type": "LPCWSTR" + } + ], + "EditStreamSetInfoW": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpInfo", + "type": "LPAVISTREAMINFOW" + }, + { + "name": "cbInfo", + "type": "LONG" + } + ], + "EditStreamSetInfoA": [ + { + "name": "pavi", + "type": "PAVISTREAM" + }, + { + "name": "lpInfo", + "type": "LPAVISTREAMINFOA" + }, + { + "name": "cbInfo", + "type": "LONG" + } + ], + "MCIWndCreateA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "MCIWndCreateW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "MCIWndRegisterClass": [ + { + "name": "VOID", + "type": "void" + } + ], + "capCreateCaptureWindowA": [ + { + "name": "lpszWindowName", + "type": "LPCSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + } + ], + "capGetDriverDescriptionA": [ + { + "name": "wDriverIndex", + "type": "UINT" + }, + { + "name": "lpszName", + "type": "LPSTR" + }, + { + "name": "cbName", + "type": "int" + }, + { + "name": "lpszVer", + "type": "LPSTR" + }, + { + "name": "cbVer", + "type": "int" + } + ], + "capCreateCaptureWindowW": [ + { + "name": "lpszWindowName", + "type": "LPCWSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + } + ], + "capGetDriverDescriptionW": [ + { + "name": "wDriverIndex", + "type": "UINT" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "cbName", + "type": "int" + }, + { + "name": "lpszVer", + "type": "LPWSTR" + }, + { + "name": "cbVer", + "type": "int" + } + ], + "GetOpenFileNamePreviewA": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEA" + } + ], + "GetSaveFileNamePreviewA": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEA" + } + ], + "GetOpenFileNamePreviewW": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEW" + } + ], + "GetSaveFileNamePreviewW": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEW" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/nspapi.json b/qiling/extensions/windows_sdk/Mswsock.json similarity index 100% rename from qiling/extensions/windows_sdk/nspapi.json rename to qiling/extensions/windows_sdk/Mswsock.json diff --git a/qiling/extensions/windows_sdk/shlobj.json b/qiling/extensions/windows_sdk/Mydocs.json similarity index 100% rename from qiling/extensions/windows_sdk/shlobj.json rename to qiling/extensions/windows_sdk/Mydocs.json diff --git a/qiling/extensions/windows_sdk/smbclnt.json b/qiling/extensions/windows_sdk/NTLanMan.json similarity index 100% rename from qiling/extensions/windows_sdk/smbclnt.json rename to qiling/extensions/windows_sdk/NTLanMan.json diff --git a/qiling/extensions/windows_sdk/Netapi32.json b/qiling/extensions/windows_sdk/Netapi32.json new file mode 100644 index 000000000..2b689a000 --- /dev/null +++ b/qiling/extensions/windows_sdk/Netapi32.json @@ -0,0 +1,132 @@ +{ + "DavAddConnection": [ + { + "name": "ConnectionHandle", + "type": "HANDLE" + }, + { + "name": "RemoteName", + "type": "LPCWSTR" + }, + { + "name": "UserName", + "type": "LPCWSTR" + }, + { + "name": "Password", + "type": "LPCWSTR" + }, + { + "name": "ClientCert", + "type": "PBYTE" + }, + { + "name": "CertSize", + "type": "DWORD" + } + ], + "DavDeleteConnection": [ + { + "name": "ConnectionHandle", + "type": "HANDLE" + } + ], + "DavGetUNCFromHTTPPath": [ + { + "name": "Url", + "type": "LPCWSTR" + }, + { + "name": "UncPath", + "type": "LPWSTR" + }, + { + "name": "lpSize", + "type": "LPDWORD" + } + ], + "DavGetHTTPFromUNCPath": [ + { + "name": "UncPath", + "type": "LPCWSTR" + }, + { + "name": "Url", + "type": "LPWSTR" + }, + { + "name": "lpSize", + "type": "LPDWORD" + } + ], + "DavGetTheLockOwnerOfTheFile": [ + { + "name": "FileName", + "type": "LPCWSTR" + }, + { + "name": "LockOwnerName", + "type": "PWSTR" + }, + { + "name": "LockOwnerNameLengthInBytes", + "type": "PULONG" + } + ], + "DavGetExtendedError": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ExtError", + "type": "DWORD" + }, + { + "name": "ExtErrorString", + "type": "LPWSTR" + }, + { + "name": "cChSize", + "type": "DWORD" + } + ], + "DavFlushFile": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "DavInvalidateCache": [ + { + "name": "URLName", + "type": "LPCWSTR" + } + ], + "DavCancelConnectionsToServer": [ + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "DavRegisterAuthCallback": [ + { + "name": "CallBack", + "type": "PFNDAVAUTHCALLBACK" + }, + { + "name": "Version", + "type": "ULONG" + } + ], + "DavUnregisterAuthCallback": [ + { + "name": "hCallback", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/netcon.json b/qiling/extensions/windows_sdk/Netshell.json similarity index 100% rename from qiling/extensions/windows_sdk/netcon.json rename to qiling/extensions/windows_sdk/Netshell.json diff --git a/qiling/extensions/windows_sdk/scrnsave.json b/qiling/extensions/windows_sdk/None.json similarity index 100% rename from qiling/extensions/windows_sdk/scrnsave.json rename to qiling/extensions/windows_sdk/None.json diff --git a/qiling/extensions/windows_sdk/winnls.json b/qiling/extensions/windows_sdk/Normaliz.json similarity index 100% rename from qiling/extensions/windows_sdk/winnls.json rename to qiling/extensions/windows_sdk/Normaliz.json diff --git a/qiling/extensions/windows_sdk/winternl.json b/qiling/extensions/windows_sdk/Ntdll.json similarity index 100% rename from qiling/extensions/windows_sdk/winternl.json rename to qiling/extensions/windows_sdk/Ntdll.json diff --git a/qiling/extensions/windows_sdk/comppkgsup.json b/qiling/extensions/windows_sdk/Ole32.json similarity index 100% rename from qiling/extensions/windows_sdk/comppkgsup.json rename to qiling/extensions/windows_sdk/Ole32.json diff --git a/qiling/extensions/windows_sdk/oleauto.json b/qiling/extensions/windows_sdk/OleAut32.json similarity index 100% rename from qiling/extensions/windows_sdk/oleauto.json rename to qiling/extensions/windows_sdk/OleAut32.json diff --git a/qiling/extensions/windows_sdk/P2PGraph.json b/qiling/extensions/windows_sdk/P2PGraph.json new file mode 100644 index 000000000..819ad8f5d --- /dev/null +++ b/qiling/extensions/windows_sdk/P2PGraph.json @@ -0,0 +1,1638 @@ +{ + "PeerGraphStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + }, + { + "name": "pVersionData", + "type": "PPEER_VERSION_DATA" + } + ], + "PeerGraphFreeData": [ + { + "name": "pvData", + "type": "PVOID" + } + ], + "PeerGraphGetItemCount": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + } + ], + "PeerGraphGetNextItem": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + }, + { + "name": "pppvItems", + "type": "PVOID" + } + ], + "PeerGraphEndEnumeration": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphCreate": [ + { + "name": "pGraphProperties", + "type": "PPEER_GRAPH_PROPERTIES" + }, + { + "name": "pwzDatabaseName", + "type": "PCWSTR" + }, + { + "name": "pSecurityInterface", + "type": "PPEER_SECURITY_INTERFACE" + }, + { + "name": "phGraph", + "type": "HGRAPH" + } + ], + "PeerGraphOpen": [ + { + "name": "pwzGraphId", + "type": "PCWSTR" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pwzDatabaseName", + "type": "PCWSTR" + }, + { + "name": "pSecurityInterface", + "type": "PPEER_SECURITY_INTERFACE" + }, + { + "name": "cRecordTypeSyncPrecedence", + "type": "ULONG" + }, + { + "name": "pRecordTypeSyncPrecedence", + "type": "GUID" + }, + { + "name": "phGraph", + "type": "HGRAPH" + } + ], + "PeerGraphListen": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "wPort", + "type": "WORD" + } + ], + "PeerGraphConnect": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pAddress", + "type": "PPEER_ADDRESS" + }, + { + "name": "pullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGraphClose": [ + { + "name": "hGraph", + "type": "HGRAPH" + } + ], + "PeerGraphDelete": [ + { + "name": "pwzGraphId", + "type": "PCWSTR" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pwzDatabaseName", + "type": "PCWSTR" + } + ], + "PeerGraphGetStatus": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pdwStatus", + "type": "DWORD" + } + ], + "PeerGraphGetProperties": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ppGraphProperties", + "type": "PPEER_GRAPH_PROPERTIES" + } + ], + "PeerGraphSetProperties": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pGraphProperties", + "type": "PPEER_GRAPH_PROPERTIES" + } + ], + "PeerGraphRegisterEvent": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "cEventRegistrations", + "type": "ULONG" + }, + { + "name": "pEventRegistrations", + "type": "PEER_GRAPH_EVENT_REGISTRATION" + }, + { + "name": "phPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGraphUnregisterEvent": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGraphGetEventData": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + }, + { + "name": "ppEventData", + "type": "PPEER_GRAPH_EVENT_DATA" + } + ], + "PeerGraphGetRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecordId", + "type": "GUID" + }, + { + "name": "ppRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGraphAddRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + }, + { + "name": "pRecordId", + "type": "GUID" + } + ], + "PeerGraphUpdateRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGraphDeleteRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecordId", + "type": "GUID" + }, + { + "name": "fLocal", + "type": "BOOL" + } + ], + "PeerGraphEnumRecords": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecordType", + "type": "GUID" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphSearchRecords": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzCriteria", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphExportDatabase": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGraphImportDatabase": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGraphValidateDeferredRecords": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "cRecordIds", + "type": "ULONG" + }, + { + "name": "pRecordIds", + "type": "GUID" + } + ], + "PeerGraphOpenDirectConnection": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pAddress", + "type": "PPEER_ADDRESS" + }, + { + "name": "pullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGraphSendData": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + }, + { + "name": "pType", + "type": "GUID" + }, + { + "name": "cbData", + "type": "ULONG" + }, + { + "name": "pvData", + "type": "PVOID" + } + ], + "PeerGraphCloseDirectConnection": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGraphEnumConnections": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphEnumNodes": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphSetPresence": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "fPresent", + "type": "BOOL" + } + ], + "PeerGraphGetNodeInfo": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ullNodeId", + "type": "ULONGLONG" + }, + { + "name": "ppNodeInfo", + "type": "PPEER_NODE_INFO" + } + ], + "PeerGraphSetNodeAttributes": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzAttributes", + "type": "PCWSTR" + } + ], + "PeerGraphPeerTimeToUniversalTime": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + } + ], + "PeerGraphUniversalTimeToPeerTime": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + } + ], + "PeerFreeData": [ + { + "name": "pvData", + "type": "LPCVOID" + } + ], + "PeerGetItemCount": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + } + ], + "PeerGetNextItem": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + }, + { + "name": "pppvItems", + "type": "PVOID" + } + ], + "PeerEndEnumeration": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + }, + { + "name": "pVersionData", + "type": "PPEER_VERSION_DATA" + } + ], + "PeerGroupCreate": [ + { + "name": "pProperties", + "type": "PPEER_GROUP_PROPERTIES" + }, + { + "name": "phGroup", + "type": "HGROUP" + } + ], + "PeerGroupOpen": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzGroupPeerName", + "type": "PCWSTR" + }, + { + "name": "pwzCloud", + "type": "PCWSTR" + }, + { + "name": "phGroup", + "type": "HGROUP" + } + ], + "PeerGroupJoin": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzInvitation", + "type": "PCWSTR" + }, + { + "name": "pwzCloud", + "type": "PCWSTR" + }, + { + "name": "phGroup", + "type": "HGROUP" + } + ], + "PeerGroupPasswordJoin": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzInvitation", + "type": "PCWSTR" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "pwzCloud", + "type": "PCWSTR" + }, + { + "name": "phGroup", + "type": "HGROUP" + } + ], + "PeerGroupConnect": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "PeerGroupConnectByAddress": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "cAddresses", + "type": "ULONG" + }, + { + "name": "pAddresses", + "type": "PPEER_ADDRESS" + } + ], + "PeerGroupClose": [ + { + "name": "hGroup", + "type": "HGROUP" + } + ], + "PeerGroupDelete": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzGroupPeerName", + "type": "PCWSTR" + } + ], + "PeerGroupCreateInvitation": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzIdentityInfo", + "type": "PCWSTR" + }, + { + "name": "pftExpiration", + "type": "FILETIME" + }, + { + "name": "cRoles", + "type": "ULONG" + }, + { + "name": "pRoles", + "type": "GUID" + }, + { + "name": "ppwzInvitation", + "type": "PWSTR" + } + ], + "PeerGroupCreatePasswordInvitation": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "ppwzInvitation", + "type": "PWSTR" + } + ], + "PeerGroupParseInvitation": [ + { + "name": "pwzInvitation", + "type": "PCWSTR" + }, + { + "name": "ppInvitationInfo", + "type": "PPEER_INVITATION_INFO" + } + ], + "PeerGroupGetStatus": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pdwStatus", + "type": "DWORD" + } + ], + "PeerGroupGetProperties": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "ppProperties", + "type": "PPEER_GROUP_PROPERTIES" + } + ], + "PeerGroupSetProperties": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pProperties", + "type": "PPEER_GROUP_PROPERTIES" + } + ], + "PeerGroupEnumMembers": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupOpenDirectConnection": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pAddress", + "type": "PPEER_ADDRESS" + }, + { + "name": "pullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGroupCloseDirectConnection": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGroupEnumConnections": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupSendData": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + }, + { + "name": "pType", + "type": "GUID" + }, + { + "name": "cbData", + "type": "ULONG" + }, + { + "name": "pvData", + "type": "PVOID" + } + ], + "PeerGroupRegisterEvent": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "cEventRegistration", + "type": "DWORD" + }, + { + "name": "pEventRegistrations", + "type": "PEER_GROUP_EVENT_REGISTRATION" + }, + { + "name": "phPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGroupUnregisterEvent": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGroupGetEventData": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + }, + { + "name": "ppEventData", + "type": "PPEER_GROUP_EVENT_DATA" + } + ], + "PeerGroupGetRecord": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecordId", + "type": "GUID" + }, + { + "name": "ppRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGroupAddRecord": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + }, + { + "name": "pRecordId", + "type": "GUID" + } + ], + "PeerGroupUpdateRecord": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGroupDeleteRecord": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecordId", + "type": "GUID" + } + ], + "PeerGroupEnumRecords": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pRecordType", + "type": "GUID" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupSearchRecords": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzCriteria", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGroupExportDatabase": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGroupImportDatabase": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGroupIssueCredentials": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzSubjectIdentity", + "type": "PCWSTR" + }, + { + "name": "pCredentialInfo", + "type": "PEER_CREDENTIAL_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppwzInvitation", + "type": "PWSTR" + } + ], + "PeerGroupExportConfig": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "ppwzXML", + "type": "PWSTR" + } + ], + "PeerGroupImportConfig": [ + { + "name": "pwzXML", + "type": "PCWSTR" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "fOverwrite", + "type": "BOOL" + }, + { + "name": "ppwzIdentity", + "type": "PWSTR" + }, + { + "name": "ppwzGroup", + "type": "PWSTR" + } + ], + "PeerGroupPeerTimeToUniversalTime": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + } + ], + "PeerGroupUniversalTimeToPeerTime": [ + { + "name": "hGroup", + "type": "HGROUP" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + } + ], + "PeerIdentityCreate": [ + { + "name": "pwzClassifier", + "type": "PCWSTR" + }, + { + "name": "pwzFriendlyName", + "type": "PCWSTR" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "ppwzIdentity", + "type": "PWSTR" + } + ], + "PeerIdentityGetFriendlyName": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "ppwzFriendlyName", + "type": "PWSTR" + } + ], + "PeerIdentitySetFriendlyName": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzFriendlyName", + "type": "PCWSTR" + } + ], + "PeerIdentityGetCryptKey": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "phCryptProv", + "type": "HCRYPTPROV" + } + ], + "PeerIdentityDelete": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + } + ], + "PeerEnumIdentities": [ + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerEnumGroups": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCreatePeerName": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzClassifier", + "type": "PCWSTR" + }, + { + "name": "ppwzPeerName", + "type": "PWSTR" + } + ], + "PeerIdentityGetXML": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "ppwzIdentityXML", + "type": "PWSTR" + } + ], + "PeerIdentityExport": [ + { + "name": "pwzIdentity", + "type": "PCWSTR" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "ppwzExportXML", + "type": "PWSTR" + } + ], + "PeerIdentityImport": [ + { + "name": "pwzImportXML", + "type": "PCWSTR" + }, + { + "name": "pwzPassword", + "type": "PCWSTR" + }, + { + "name": "ppwzIdentity", + "type": "PWSTR" + } + ], + "PeerIdentityGetDefault": [ + { + "name": "ppwzPeerName", + "type": "PWSTR" + } + ], + "PeerCollabStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + } + ], + "PeerCollabSignin": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwSigninOptions", + "type": "DWORD" + } + ], + "PeerCollabSignout": [ + { + "name": "dwSigninOptions", + "type": "DWORD" + } + ], + "PeerCollabGetSigninOptions": [ + { + "name": "pdwSigninOptions", + "type": "DWORD" + } + ], + "PeerCollabAsyncInviteContact": [ + { + "name": "pcContact", + "type": "PCPEER_CONTACT" + }, + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pcInvitation", + "type": "PCPEER_INVITATION" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "phInvitation", + "type": "HANDLE" + } + ], + "PeerCollabGetInvitationResponse": [ + { + "name": "hInvitation", + "type": "HANDLE" + }, + { + "name": "ppInvitationResponse", + "type": "PPEER_INVITATION_RESPONSE" + } + ], + "PeerCollabCancelInvitation": [ + { + "name": "hInvitation", + "type": "HANDLE" + } + ], + "PeerCollabCloseHandle": [ + { + "name": "hInvitation", + "type": "HANDLE" + } + ], + "PeerCollabInviteContact": [ + { + "name": "pcContact", + "type": "PCPEER_CONTACT" + }, + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pcInvitation", + "type": "PCPEER_INVITATION" + }, + { + "name": "ppResponse", + "type": "PPEER_INVITATION_RESPONSE" + } + ], + "PeerCollabAsyncInviteEndpoint": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pcInvitation", + "type": "PCPEER_INVITATION" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "phInvitation", + "type": "HANDLE" + } + ], + "PeerCollabInviteEndpoint": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pcInvitation", + "type": "PCPEER_INVITATION" + }, + { + "name": "ppResponse", + "type": "PPEER_INVITATION_RESPONSE" + } + ], + "PeerCollabGetAppLaunchInfo": [ + { + "name": "ppLaunchInfo", + "type": "PPEER_APP_LAUNCH_INFO" + } + ], + "PeerCollabRegisterApplication": [ + { + "name": "pcApplication", + "type": "PCPEER_APPLICATION_REGISTRATION_INFO" + }, + { + "name": "registrationType", + "type": "PEER_APPLICATION_REGISTRATION_TYPE" + } + ], + "PeerCollabUnregisterApplication": [ + { + "name": "pApplicationId", + "type": "GUID" + }, + { + "name": "registrationType", + "type": "PEER_APPLICATION_REGISTRATION_TYPE" + } + ], + "PeerCollabGetApplicationRegistrationInfo": [ + { + "name": "pApplicationId", + "type": "GUID" + }, + { + "name": "registrationType", + "type": "PEER_APPLICATION_REGISTRATION_TYPE" + }, + { + "name": "ppApplication", + "type": "PPEER_APPLICATION_REGISTRATION_INFO" + } + ], + "PeerCollabEnumApplicationRegistrationInfo": [ + { + "name": "registrationType", + "type": "PEER_APPLICATION_REGISTRATION_TYPE" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabGetPresenceInfo": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "ppPresenceInfo", + "type": "PPEER_PRESENCE_INFO" + } + ], + "PeerCollabEnumApplications": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pApplicationId", + "type": "GUID" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabEnumObjects": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "pObjectId", + "type": "GUID" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabEnumEndpoints": [ + { + "name": "pcContact", + "type": "PCPEER_CONTACT" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabRefreshEndpointData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + } + ], + "PeerCollabDeleteEndpointData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + } + ], + "PeerCollabQueryContactData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + }, + { + "name": "ppwzContactData", + "type": "PWSTR" + } + ], + "PeerCollabSubscribeEndpointData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + } + ], + "PeerCollabUnsubscribeEndpointData": [ + { + "name": "pcEndpoint", + "type": "PCPEER_ENDPOINT" + } + ], + "PeerCollabSetPresenceInfo": [ + { + "name": "pcPresenceInfo", + "type": "PCPEER_PRESENCE_INFO" + } + ], + "PeerCollabGetEndpointName": [ + { + "name": "ppwzEndpointName", + "type": "PWSTR" + } + ], + "PeerCollabSetEndpointName": [ + { + "name": "pwzEndpointName", + "type": "PCWSTR" + } + ], + "PeerCollabSetObject": [ + { + "name": "pcObject", + "type": "PCPEER_OBJECT" + } + ], + "PeerCollabDeleteObject": [ + { + "name": "pObjectId", + "type": "GUID" + } + ], + "PeerCollabRegisterEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "cEventRegistration", + "type": "DWORD" + }, + { + "name": "pEventRegistrations", + "type": "PEER_COLLAB_EVENT_REGISTRATION" + }, + { + "name": "phPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerCollabGetEventData": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + }, + { + "name": "ppEventData", + "type": "PPEER_COLLAB_EVENT_DATA" + } + ], + "PeerCollabUnregisterEvent": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerCollabEnumPeopleNearMe": [ + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabAddContact": [ + { + "name": "pwzContactData", + "type": "PCWSTR" + }, + { + "name": "ppContact", + "type": "PPEER_CONTACT" + } + ], + "PeerCollabDeleteContact": [ + { + "name": "pwzPeerName", + "type": "PCWSTR" + } + ], + "PeerCollabGetContact": [ + { + "name": "pwzPeerName", + "type": "PCWSTR" + }, + { + "name": "ppContact", + "type": "PPEER_CONTACT" + } + ], + "PeerCollabUpdateContact": [ + { + "name": "pContact", + "type": "PCPEER_CONTACT" + } + ], + "PeerCollabEnumContacts": [ + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerCollabExportContact": [ + { + "name": "pwzPeerName", + "type": "PCWSTR" + }, + { + "name": "ppwzContactData", + "type": "PWSTR" + } + ], + "PeerCollabParseContact": [ + { + "name": "pwzContactData", + "type": "PCWSTR" + }, + { + "name": "ppContact", + "type": "PPEER_CONTACT" + } + ], + "PeerNameToPeerHostName": [ + { + "name": "pwzPeerName", + "type": "PCWSTR" + }, + { + "name": "ppwzHostName", + "type": "PWSTR" + } + ], + "PeerHostNameToPeerName": [ + { + "name": "pwzHostName", + "type": "PCWSTR" + }, + { + "name": "ppwzPeerName", + "type": "PWSTR" + } + ], + "PeerPnrpStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + } + ], + "PeerPnrpRegister": [ + { + "name": "pcwzPeerName", + "type": "PCWSTR" + }, + { + "name": "pRegistrationInfo", + "type": "PPEER_PNRP_REGISTRATION_INFO" + }, + { + "name": "phRegistration", + "type": "HREGISTRATION" + } + ], + "PeerPnrpUpdateRegistration": [ + { + "name": "hRegistration", + "type": "HREGISTRATION" + }, + { + "name": "pRegistrationInfo", + "type": "PPEER_PNRP_REGISTRATION_INFO" + } + ], + "PeerPnrpUnregister": [ + { + "name": "hRegistration", + "type": "HREGISTRATION" + } + ], + "PeerPnrpResolve": [ + { + "name": "pcwzPeerName", + "type": "PCWSTR" + }, + { + "name": "pcwzCloudName", + "type": "PCWSTR" + }, + { + "name": "pcEndpoints", + "type": "ULONG" + }, + { + "name": "ppEndpoints", + "type": "PPEER_PNRP_ENDPOINT_INFO" + } + ], + "PeerPnrpStartResolve": [ + { + "name": "pcwzPeerName", + "type": "PCWSTR" + }, + { + "name": "pcwzCloudName", + "type": "PCWSTR" + }, + { + "name": "cMaxEndpoints", + "type": "ULONG" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "phResolve", + "type": "HRESOLUTION" + } + ], + "PeerPnrpGetCloudInfo": [ + { + "name": "pcNumClouds", + "type": "ULONG" + }, + { + "name": "ppCloudInfo", + "type": "PPEER_PNRP_CLOUD_INFO" + } + ], + "PeerPnrpGetEndpoint": [ + { + "name": "hResolve", + "type": "HRESOLUTION" + }, + { + "name": "ppEndpoint", + "type": "PPEER_PNRP_ENDPOINT_INFO" + } + ], + "PeerPnrpEndResolve": [ + { + "name": "hResolve", + "type": "HRESOLUTION" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Query.json b/qiling/extensions/windows_sdk/Query.json new file mode 100644 index 000000000..65cdba3f8 --- /dev/null +++ b/qiling/extensions/windows_sdk/Query.json @@ -0,0 +1,62 @@ +{ + "LoadIFilter": [ + { + "name": "pwcsPath", + "type": "PCWSTR" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "ppIUnk", + "type": "void" + } + ], + "BindIFilterFromStorage": [ + { + "name": "pStg", + "type": "IStorage" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "ppIUnk", + "type": "void" + } + ], + "BindIFilterFromStream": [ + { + "name": "pStm", + "type": "IStream" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "ppIUnk", + "type": "void" + } + ], + "SetCatalogState": [ + { + "name": "pwcsCat", + "type": "WCHAR" + }, + { + "name": "pwcsMachine", + "type": "WCHAR" + }, + { + "name": "dwNewState", + "type": "DWORD" + }, + { + "name": "pdwOldState", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ras.json b/qiling/extensions/windows_sdk/Rasapi32.json similarity index 100% rename from qiling/extensions/windows_sdk/ras.json rename to qiling/extensions/windows_sdk/Rasapi32.json diff --git a/qiling/extensions/windows_sdk/rasshost.json b/qiling/extensions/windows_sdk/Rasman.json similarity index 100% rename from qiling/extensions/windows_sdk/rasshost.json rename to qiling/extensions/windows_sdk/Rasman.json diff --git a/qiling/extensions/windows_sdk/rpcnsi.json b/qiling/extensions/windows_sdk/Rpcns4.json similarity index 100% rename from qiling/extensions/windows_sdk/rpcnsi.json rename to qiling/extensions/windows_sdk/Rpcns4.json diff --git a/qiling/extensions/windows_sdk/rpcasync.json b/qiling/extensions/windows_sdk/Rpcrt4.json similarity index 100% rename from qiling/extensions/windows_sdk/rpcasync.json rename to qiling/extensions/windows_sdk/Rpcrt4.json diff --git a/qiling/extensions/windows_sdk/restartmanager.json b/qiling/extensions/windows_sdk/Rstrtmgr.json similarity index 100% rename from qiling/extensions/windows_sdk/restartmanager.json rename to qiling/extensions/windows_sdk/Rstrtmgr.json diff --git a/qiling/extensions/windows_sdk/rtmv2.json b/qiling/extensions/windows_sdk/Rtm.json similarity index 100% rename from qiling/extensions/windows_sdk/rtmv2.json rename to qiling/extensions/windows_sdk/Rtm.json diff --git a/qiling/extensions/windows_sdk/Scarddlg.json b/qiling/extensions/windows_sdk/Scarddlg.json new file mode 100644 index 000000000..4cfc92ef9 --- /dev/null +++ b/qiling/extensions/windows_sdk/Scarddlg.json @@ -0,0 +1,1100 @@ +{ + "SCardEstablishContext": [ + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "pvReserved1", + "type": "LPCVOID" + }, + { + "name": "pvReserved2", + "type": "LPCVOID" + }, + { + "name": "phContext", + "type": "LPSCARDCONTEXT" + } + ], + "SCardReleaseContext": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + } + ], + "SCardIsValidContext": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + } + ], + "SCardListReaderGroupsA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszGroups", + "type": "LPSTR" + }, + { + "name": "pcchGroups", + "type": "LPDWORD" + } + ], + "SCardListReaderGroupsW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszGroups", + "type": "LPWSTR" + }, + { + "name": "pcchGroups", + "type": "LPDWORD" + } + ], + "SCardListReadersA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszGroups", + "type": "LPCSTR" + }, + { + "name": "mszReaders", + "type": "LPSTR" + }, + { + "name": "pcchReaders", + "type": "LPDWORD" + } + ], + "SCardListReadersW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszGroups", + "type": "LPCWSTR" + }, + { + "name": "mszReaders", + "type": "LPWSTR" + }, + { + "name": "pcchReaders", + "type": "LPDWORD" + } + ], + "SCardListCardsA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "pbAtr", + "type": "LPCBYTE" + }, + { + "name": "rgquidInterfaces", + "type": "LPCGUID" + }, + { + "name": "cguidInterfaceCount", + "type": "DWORD" + }, + { + "name": "mszCards", + "type": "CHAR" + }, + { + "name": "pcchCards", + "type": "LPDWORD" + } + ], + "SCardListCardsW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "pbAtr", + "type": "LPCBYTE" + }, + { + "name": "rgquidInterfaces", + "type": "LPCGUID" + }, + { + "name": "cguidInterfaceCount", + "type": "DWORD" + }, + { + "name": "mszCards", + "type": "WCHAR" + }, + { + "name": "pcchCards", + "type": "LPDWORD" + } + ], + "SCardListInterfacesA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCard", + "type": "LPCSTR" + }, + { + "name": "pguidInterfaces", + "type": "LPGUID" + }, + { + "name": "pcguidInterfaces", + "type": "LPDWORD" + } + ], + "SCardListInterfacesW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCard", + "type": "LPCWSTR" + }, + { + "name": "pguidInterfaces", + "type": "LPGUID" + }, + { + "name": "pcguidInterfaces", + "type": "LPDWORD" + } + ], + "SCardGetProviderIdA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCard", + "type": "LPCSTR" + }, + { + "name": "pguidProviderId", + "type": "LPGUID" + } + ], + "SCardGetProviderIdW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCard", + "type": "LPCWSTR" + }, + { + "name": "pguidProviderId", + "type": "LPGUID" + } + ], + "SCardGetCardTypeProviderNameA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCSTR" + }, + { + "name": "dwProviderId", + "type": "DWORD" + }, + { + "name": "szProvider", + "type": "CHAR" + }, + { + "name": "pcchProvider", + "type": "LPDWORD" + } + ], + "SCardGetCardTypeProviderNameW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCWSTR" + }, + { + "name": "dwProviderId", + "type": "DWORD" + }, + { + "name": "szProvider", + "type": "WCHAR" + }, + { + "name": "pcchProvider", + "type": "LPDWORD" + } + ], + "SCardIntroduceReaderGroupA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szGroupName", + "type": "LPCSTR" + } + ], + "SCardIntroduceReaderGroupW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szGroupName", + "type": "LPCWSTR" + } + ], + "SCardForgetReaderGroupA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szGroupName", + "type": "LPCSTR" + } + ], + "SCardForgetReaderGroupW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szGroupName", + "type": "LPCWSTR" + } + ], + "SCardIntroduceReaderA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + }, + { + "name": "szDeviceName", + "type": "LPCSTR" + } + ], + "SCardIntroduceReaderW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + }, + { + "name": "szDeviceName", + "type": "LPCWSTR" + } + ], + "SCardForgetReaderA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + } + ], + "SCardForgetReaderW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + } + ], + "SCardAddReaderToGroupA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + }, + { + "name": "szGroupName", + "type": "LPCSTR" + } + ], + "SCardAddReaderToGroupW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + }, + { + "name": "szGroupName", + "type": "LPCWSTR" + } + ], + "SCardRemoveReaderFromGroupA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + }, + { + "name": "szGroupName", + "type": "LPCSTR" + } + ], + "SCardRemoveReaderFromGroupW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + }, + { + "name": "szGroupName", + "type": "LPCWSTR" + } + ], + "SCardIntroduceCardTypeA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCSTR" + }, + { + "name": "pguidPrimaryProvider", + "type": "LPCGUID" + }, + { + "name": "rgguidInterfaces", + "type": "LPCGUID" + }, + { + "name": "dwInterfaceCount", + "type": "DWORD" + }, + { + "name": "pbAtr", + "type": "LPCBYTE" + }, + { + "name": "pbAtrMask", + "type": "LPCBYTE" + }, + { + "name": "cbAtrLen", + "type": "DWORD" + } + ], + "SCardIntroduceCardTypeW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCWSTR" + }, + { + "name": "pguidPrimaryProvider", + "type": "LPCGUID" + }, + { + "name": "rgguidInterfaces", + "type": "LPCGUID" + }, + { + "name": "dwInterfaceCount", + "type": "DWORD" + }, + { + "name": "pbAtr", + "type": "LPCBYTE" + }, + { + "name": "pbAtrMask", + "type": "LPCBYTE" + }, + { + "name": "cbAtrLen", + "type": "DWORD" + } + ], + "SCardSetCardTypeProviderNameA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCSTR" + }, + { + "name": "dwProviderId", + "type": "DWORD" + }, + { + "name": "szProvider", + "type": "LPCSTR" + } + ], + "SCardSetCardTypeProviderNameW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCWSTR" + }, + { + "name": "dwProviderId", + "type": "DWORD" + }, + { + "name": "szProvider", + "type": "LPCWSTR" + } + ], + "SCardForgetCardTypeA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCSTR" + } + ], + "SCardForgetCardTypeW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szCardName", + "type": "LPCWSTR" + } + ], + "SCardFreeMemory": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "pvMem", + "type": "LPCVOID" + } + ], + "SCardAccessStartedEvent": [ + { + "name": "VOID", + "type": "void" + } + ], + "SCardReleaseStartedEvent": [ + { + "name": "VOID", + "type": "void" + } + ], + "SCardLocateCardsA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszCards", + "type": "LPCSTR" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEA" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardLocateCardsW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "mszCards", + "type": "LPCWSTR" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEW" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardLocateCardsByATRA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "rgAtrMasks", + "type": "LPSCARD_ATRMASK" + }, + { + "name": "cAtrs", + "type": "DWORD" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEA" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardLocateCardsByATRW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "rgAtrMasks", + "type": "LPSCARD_ATRMASK" + }, + { + "name": "cAtrs", + "type": "DWORD" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEW" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardGetStatusChangeA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEA" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardGetStatusChangeW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "rgReaderStates", + "type": "LPSCARD_READERSTATEW" + }, + { + "name": "cReaders", + "type": "DWORD" + } + ], + "SCardCancel": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + } + ], + "SCardConnectA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReader", + "type": "LPCSTR" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwPreferredProtocols", + "type": "DWORD" + }, + { + "name": "phCard", + "type": "LPSCARDHANDLE" + }, + { + "name": "pdwActiveProtocol", + "type": "LPDWORD" + } + ], + "SCardConnectW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReader", + "type": "LPCWSTR" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwPreferredProtocols", + "type": "DWORD" + }, + { + "name": "phCard", + "type": "LPSCARDHANDLE" + }, + { + "name": "pdwActiveProtocol", + "type": "LPDWORD" + } + ], + "SCardReconnect": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwPreferredProtocols", + "type": "DWORD" + }, + { + "name": "dwInitialization", + "type": "DWORD" + }, + { + "name": "pdwActiveProtocol", + "type": "LPDWORD" + } + ], + "SCardDisconnect": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwDisposition", + "type": "DWORD" + } + ], + "SCardBeginTransaction": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + } + ], + "SCardEndTransaction": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwDisposition", + "type": "DWORD" + } + ], + "SCardStatusA": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "mszReaderNames", + "type": "LPSTR" + }, + { + "name": "pcchReaderLen", + "type": "LPDWORD" + }, + { + "name": "pdwState", + "type": "LPDWORD" + }, + { + "name": "pdwProtocol", + "type": "LPDWORD" + }, + { + "name": "pbAtr", + "type": "LPBYTE" + }, + { + "name": "pcbAtrLen", + "type": "LPDWORD" + } + ], + "SCardStatusW": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "mszReaderNames", + "type": "LPWSTR" + }, + { + "name": "pcchReaderLen", + "type": "LPDWORD" + }, + { + "name": "pdwState", + "type": "LPDWORD" + }, + { + "name": "pdwProtocol", + "type": "LPDWORD" + }, + { + "name": "pbAtr", + "type": "LPBYTE" + }, + { + "name": "pcbAtrLen", + "type": "LPDWORD" + } + ], + "SCardTransmit": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "pioSendPci", + "type": "LPCSCARD_IO_REQUEST" + }, + { + "name": "pbSendBuffer", + "type": "LPCBYTE" + }, + { + "name": "cbSendLength", + "type": "DWORD" + }, + { + "name": "pioRecvPci", + "type": "LPSCARD_IO_REQUEST" + }, + { + "name": "pbRecvBuffer", + "type": "LPBYTE" + }, + { + "name": "pcbRecvLength", + "type": "LPDWORD" + } + ], + "SCardGetTransmitCount": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "pcTransmitCount", + "type": "LPDWORD" + } + ], + "SCardControl": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPCVOID" + }, + { + "name": "cbInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "cbOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + } + ], + "SCardGetAttrib": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwAttrId", + "type": "DWORD" + }, + { + "name": "pbAttr", + "type": "LPBYTE" + }, + { + "name": "pcbAttrLen", + "type": "LPDWORD" + } + ], + "SCardSetAttrib": [ + { + "name": "hCard", + "type": "SCARDHANDLE" + }, + { + "name": "dwAttrId", + "type": "DWORD" + }, + { + "name": "pbAttr", + "type": "LPCBYTE" + }, + { + "name": "cbAttrLen", + "type": "DWORD" + } + ], + "SCardUIDlgSelectCardA": [ + { + "name": "VOID", + "type": "LPOPENCARDNAME_EXA" + } + ], + "SCardUIDlgSelectCardW": [ + { + "name": "VOID", + "type": "LPOPENCARDNAME_EXW" + } + ], + "GetOpenCardNameA": [ + { + "name": "VOID", + "type": "LPOPENCARDNAMEA" + } + ], + "GetOpenCardNameW": [ + { + "name": "VOID", + "type": "LPOPENCARDNAMEW" + } + ], + "SCardReadCacheA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "CardIdentifier", + "type": "UUID" + }, + { + "name": "FreshnessCounter", + "type": "DWORD" + }, + { + "name": "LookupName", + "type": "LPSTR" + }, + { + "name": "Data", + "type": "PBYTE" + }, + { + "name": "DataLen", + "type": "DWORD" + } + ], + "SCardReadCacheW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "CardIdentifier", + "type": "UUID" + }, + { + "name": "FreshnessCounter", + "type": "DWORD" + }, + { + "name": "LookupName", + "type": "LPWSTR" + }, + { + "name": "Data", + "type": "PBYTE" + }, + { + "name": "DataLen", + "type": "DWORD" + } + ], + "SCardWriteCacheA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "CardIdentifier", + "type": "UUID" + }, + { + "name": "FreshnessCounter", + "type": "DWORD" + }, + { + "name": "LookupName", + "type": "LPSTR" + }, + { + "name": "Data", + "type": "PBYTE" + }, + { + "name": "DataLen", + "type": "DWORD" + } + ], + "SCardWriteCacheW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "CardIdentifier", + "type": "UUID" + }, + { + "name": "FreshnessCounter", + "type": "DWORD" + }, + { + "name": "LookupName", + "type": "LPWSTR" + }, + { + "name": "Data", + "type": "PBYTE" + }, + { + "name": "DataLen", + "type": "DWORD" + } + ], + "SCardGetDeviceTypeIdA": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCSTR" + }, + { + "name": "pdwDeviceTypeId", + "type": "LPDWORD" + } + ], + "SCardGetDeviceTypeIdW": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "szReaderName", + "type": "LPCWSTR" + }, + { + "name": "pdwDeviceTypeId", + "type": "LPDWORD" + } + ], + "SCardAudit": [ + { + "name": "hContext", + "type": "SCARDCONTEXT" + }, + { + "name": "dwEvent", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ntsecapi.json b/qiling/extensions/windows_sdk/Secur32.json similarity index 100% rename from qiling/extensions/windows_sdk/ntsecapi.json rename to qiling/extensions/windows_sdk/Secur32.json diff --git a/qiling/extensions/windows_sdk/Shdocvw.json b/qiling/extensions/windows_sdk/Shdocvw.json new file mode 100644 index 000000000..456aa00b9 --- /dev/null +++ b/qiling/extensions/windows_sdk/Shdocvw.json @@ -0,0 +1,188 @@ +{ + "GetFileNameFromBrowse": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszFilePath", + "type": "PWSTR" + }, + { + "name": "cchFilePath", + "type": "UINT" + }, + { + "name": "pszWorkingDir", + "type": "PCWSTR" + }, + { + "name": "pszDefExt", + "type": "PCWSTR" + }, + { + "name": "pszFilters", + "type": "PCWSTR" + }, + { + "name": "pszTitle", + "type": "PCWSTR" + } + ], + "DriveType": [ + { + "name": "iDrive", + "type": "int" + } + ], + "SHChangeNotifyRegisterThread": [ + { + "name": "status", + "type": "SCNRT_STATUS" + } + ], + "PathIsSlowA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "dwAttr", + "type": "DWORD" + } + ], + "PathIsSlowW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "dwAttr", + "type": "DWORD" + } + ], + "SHCreatePropSheetExtArray": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "PCWSTR" + }, + { + "name": "max_iface", + "type": "UINT" + } + ], + "SHOpenPropSheetA": [ + { + "name": "pszCaption", + "type": "LPCSTR" + }, + { + "name": "ahkeys", + "type": "HKEY" + }, + { + "name": "ckeys", + "type": "UINT" + }, + { + "name": "pclsidDefault", + "type": "CLSID" + }, + { + "name": "pdtobj", + "type": "IDataObject" + }, + { + "name": "psb", + "type": "IShellBrowser" + }, + { + "name": "pStartPage", + "type": "LPCSTR" + } + ], + "SHOpenPropSheetW": [ + { + "name": "pszCaption", + "type": "LPCWSTR" + }, + { + "name": "ahkeys", + "type": "HKEY" + }, + { + "name": "ckeys", + "type": "UINT" + }, + { + "name": "pclsidDefault", + "type": "CLSID" + }, + { + "name": "pdtobj", + "type": "IDataObject" + }, + { + "name": "psb", + "type": "IShellBrowser" + }, + { + "name": "pStartPage", + "type": "LPCWSTR" + } + ], + "SoftwareUpdateMessageBox": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pszDistUnit", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "psdi", + "type": "LPSOFTDISTINFO" + } + ], + "SHMultiFileProperties": [ + { + "name": "pdtobj", + "type": "IDataObject" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHCreateQueryCancelAutoPlayMoniker": [ + { + "name": "ppmoniker", + "type": "IMoniker" + } + ], + "PerUserInit": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHRunControlPanel": [ + { + "name": "lpcszCmdLine", + "type": "PCWSTR" + }, + { + "name": "hwndMsgParent", + "type": "HWND" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Shell32.json b/qiling/extensions/windows_sdk/Shell32.json new file mode 100644 index 000000000..94251ac13 --- /dev/null +++ b/qiling/extensions/windows_sdk/Shell32.json @@ -0,0 +1,4606 @@ +{ + "StrChrA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrChrW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrChrIA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrChrIW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrChrNW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrChrNIW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrCmpNA": [ + { + "name": "psz1", + "type": "PCSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNIA": [ + { + "name": "psz1", + "type": "PCSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNIW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCSpnA": [ + { + "name": "pszStr", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrCSpnW": [ + { + "name": "pszStr", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrCSpnIA": [ + { + "name": "pszStr", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrCSpnIW": [ + { + "name": "pszStr", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrDupA": [ + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrDupW": [ + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrFormatByteSizeEx": [ + { + "name": "ull", + "type": "ULONGLONG" + }, + { + "name": "flags", + "type": "SFBS_FLAGS" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatByteSizeA": [ + { + "name": "dw", + "type": "DWORD" + }, + { + "name": "pszBuf", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatByteSize64A": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatByteSizeW": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatKBSizeW": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatKBSizeA": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFromTimeIntervalA": [ + { + "name": "pszOut", + "type": "PSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwTimeMS", + "type": "DWORD" + }, + { + "name": "digits", + "type": "int" + } + ], + "StrFromTimeIntervalW": [ + { + "name": "pszOut", + "type": "PWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwTimeMS", + "type": "DWORD" + }, + { + "name": "digits", + "type": "int" + } + ], + "StrIsIntlEqualA": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "pszString1", + "type": "PCSTR" + }, + { + "name": "pszString2", + "type": "PCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrIsIntlEqualW": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "pszString1", + "type": "PCWSTR" + }, + { + "name": "pszString2", + "type": "PCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrNCatA": [ + { + "name": "psz1", + "type": "PSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "StrNCatW": [ + { + "name": "psz1", + "type": "PWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "StrPBrkA": [ + { + "name": "psz", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrPBrkW": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrRChrA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "pszEnd", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrRChrW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "pszEnd", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrRChrIA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "pszEnd", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrRChrIW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "pszEnd", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrRStrIA": [ + { + "name": "pszSource", + "type": "PCSTR" + }, + { + "name": "pszLast", + "type": "PCSTR" + }, + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrRStrIW": [ + { + "name": "pszSource", + "type": "PCWSTR" + }, + { + "name": "pszLast", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrSpnA": [ + { + "name": "psz", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrSpnW": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrStrA": [ + { + "name": "pszFirst", + "type": "PCSTR" + }, + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrStrW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrStrIA": [ + { + "name": "pszFirst", + "type": "PCSTR" + }, + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrStrIW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrStrNW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrStrNIW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrToIntA": [ + { + "name": "pszSrc", + "type": "PCSTR" + } + ], + "StrToIntW": [ + { + "name": "pszSrc", + "type": "PCWSTR" + } + ], + "StrToIntExA": [ + { + "name": "pszString", + "type": "PCSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "piRet", + "type": "int" + } + ], + "StrToIntExW": [ + { + "name": "pszString", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "piRet", + "type": "int" + } + ], + "StrToInt64ExA": [ + { + "name": "pszString", + "type": "PCSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "StrToInt64ExW": [ + { + "name": "pszString", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "StrTrimA": [ + { + "name": "psz", + "type": "PSTR" + }, + { + "name": "pszTrimChars", + "type": "PCSTR" + } + ], + "StrTrimW": [ + { + "name": "psz", + "type": "PWSTR" + }, + { + "name": "pszTrimChars", + "type": "PCWSTR" + } + ], + "StrCatW": [ + { + "name": "psz1", + "type": "PWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCmpW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCmpIW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCpyW": [ + { + "name": "psz1", + "type": "PWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCpyNW": [ + { + "name": "pszDst", + "type": "PWSTR" + }, + { + "name": "pszSrc", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "StrCatBuffW": [ + { + "name": "pszDest", + "type": "PWSTR" + }, + { + "name": "pszSrc", + "type": "PCWSTR" + }, + { + "name": "cchDestBuffSize", + "type": "int" + } + ], + "StrCatBuffA": [ + { + "name": "pszDest", + "type": "PSTR" + }, + { + "name": "pszSrc", + "type": "PCSTR" + }, + { + "name": "cchDestBuffSize", + "type": "int" + } + ], + "ChrCmpIA": [ + { + "name": "w1", + "type": "WORD" + }, + { + "name": "w2", + "type": "WORD" + } + ], + "ChrCmpIW": [ + { + "name": "w1", + "type": "WCHAR" + }, + { + "name": "w2", + "type": "WCHAR" + } + ], + "wvnsprintfA": [ + { + "name": "pszDest", + "type": "PSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wvnsprintfW": [ + { + "name": "pszDest", + "type": "PWSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCWSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wnsprintfA": [ + { + "name": "pszDest", + "type": "PSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCSTR" + } + ], + "wnsprintfW": [ + { + "name": "pszDest", + "type": "PWSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCWSTR" + } + ], + "StrRetToStrA": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsz", + "type": "LPSTR" + } + ], + "StrRetToStrW": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsz", + "type": "LPWSTR" + } + ], + "StrRetToBufA": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrRetToBufW": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "SHStrDupA": [ + { + "name": "psz", + "type": "LPCSTR" + }, + { + "name": "ppwsz", + "type": "LPWSTR" + } + ], + "SHStrDupW": [ + { + "name": "psz", + "type": "LPCWSTR" + }, + { + "name": "ppwsz", + "type": "LPWSTR" + } + ], + "StrCmpLogicalW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCatChainW": [ + { + "name": "pszDst", + "type": "PWSTR" + }, + { + "name": "cchDst", + "type": "DWORD" + }, + { + "name": "ichAt", + "type": "DWORD" + }, + { + "name": "pszSrc", + "type": "PCWSTR" + } + ], + "StrRetToBSTR": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pbstr", + "type": "BSTR" + } + ], + "SHLoadIndirectString": [ + { + "name": "pszSource", + "type": "PCWSTR" + }, + { + "name": "pszOutBuf", + "type": "PWSTR" + }, + { + "name": "cchOutBuf", + "type": "UINT" + }, + { + "name": "ppvReserved", + "type": "void" + } + ], + "IsCharSpaceA": [ + { + "name": "wch", + "type": "CHAR" + } + ], + "IsCharSpaceW": [ + { + "name": "wch", + "type": "WCHAR" + } + ], + "StrCmpCA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + } + ], + "StrCmpCW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + } + ], + "StrCmpICA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + } + ], + "StrCmpICW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + } + ], + "StrCmpNCA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNCW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNICA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNICW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "IntlStrEqWorkerA": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "lpString1", + "type": "LPCSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "IntlStrEqWorkerW": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "lpString1", + "type": "LPCWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "PathAddBackslashA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathAddBackslashW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathBuildRootA": [ + { + "name": "pszRoot", + "type": "LPSTR" + }, + { + "name": "iDrive", + "type": "int" + } + ], + "PathBuildRootW": [ + { + "name": "pszRoot", + "type": "LPWSTR" + }, + { + "name": "iDrive", + "type": "int" + } + ], + "PathCombineA": [ + { + "name": "pszDest", + "type": "LPSTR" + }, + { + "name": "pszDir", + "type": "LPCSTR" + }, + { + "name": "pszFile", + "type": "LPCSTR" + } + ], + "PathCombineW": [ + { + "name": "pszDest", + "type": "LPWSTR" + }, + { + "name": "pszDir", + "type": "LPCWSTR" + }, + { + "name": "pszFile", + "type": "LPCWSTR" + } + ], + "PathCompactPathA": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "dx", + "type": "UINT" + } + ], + "PathCompactPathW": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "dx", + "type": "UINT" + } + ], + "PathCompactPathExA": [ + { + "name": "pszOut", + "type": "LPSTR" + }, + { + "name": "pszSrc", + "type": "LPCSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCompactPathExW": [ + { + "name": "pszOut", + "type": "LPWSTR" + }, + { + "name": "pszSrc", + "type": "LPCWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCommonPrefixA": [ + { + "name": "pszFile1", + "type": "LPCSTR" + }, + { + "name": "pszFile2", + "type": "LPCSTR" + }, + { + "name": "achPath", + "type": "LPSTR" + } + ], + "PathCommonPrefixW": [ + { + "name": "pszFile1", + "type": "LPCWSTR" + }, + { + "name": "pszFile2", + "type": "LPCWSTR" + }, + { + "name": "achPath", + "type": "LPWSTR" + } + ], + "PathFileExistsA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFileExistsW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindExtensionA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFindExtensionW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindFileNameA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFindFileNameW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindNextComponentA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFindNextComponentW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindOnPathA": [ + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "ppszOtherDirs", + "type": "PZPCSTR" + } + ], + "PathFindOnPathW": [ + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "ppszOtherDirs", + "type": "PZPCWSTR" + } + ], + "PathFindSuffixArrayA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "apszSuffix", + "type": "LPCSTR" + }, + { + "name": "iArraySize", + "type": "int" + } + ], + "PathFindSuffixArrayW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "apszSuffix", + "type": "LPCWSTR" + }, + { + "name": "iArraySize", + "type": "int" + } + ], + "PathGetArgsA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathGetArgsW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsLFNFileSpecA": [ + { + "name": "pszName", + "type": "LPCSTR" + } + ], + "PathIsLFNFileSpecW": [ + { + "name": "pszName", + "type": "LPCWSTR" + } + ], + "PathGetCharTypeA": [ + { + "name": "ch", + "type": "UCHAR" + } + ], + "PathGetCharTypeW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "PathGetDriveNumberA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathGetDriveNumberW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsDirectoryA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsDirectoryW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsDirectoryEmptyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsDirectoryEmptyW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsFileSpecA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsFileSpecW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsPrefixA": [ + { + "name": "pszPrefix", + "type": "LPCSTR" + }, + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsPrefixW": [ + { + "name": "pszPrefix", + "type": "LPCWSTR" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsRelativeA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsRelativeW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsRootA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsRootW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsSameRootA": [ + { + "name": "pszPath1", + "type": "LPCSTR" + }, + { + "name": "pszPath2", + "type": "LPCSTR" + } + ], + "PathIsSameRootW": [ + { + "name": "pszPath1", + "type": "LPCWSTR" + }, + { + "name": "pszPath2", + "type": "LPCWSTR" + } + ], + "PathIsUNCA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsUNCW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsNetworkPathA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsNetworkPathW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsUNCServerA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsUNCServerW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsUNCServerShareA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsUNCServerShareW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsContentTypeA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "pszContentType", + "type": "LPCSTR" + } + ], + "PathIsContentTypeW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "pszContentType", + "type": "LPCWSTR" + } + ], + "PathIsURLA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsURLW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathMakePrettyA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathMakePrettyW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathMatchSpecA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "pszSpec", + "type": "LPCSTR" + } + ], + "PathMatchSpecW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "pszSpec", + "type": "LPCWSTR" + } + ], + "PathMatchSpecExA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "pszSpec", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathMatchSpecExW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "pszSpec", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathParseIconLocationA": [ + { + "name": "pszIconFile", + "type": "LPSTR" + } + ], + "PathParseIconLocationW": [ + { + "name": "pszIconFile", + "type": "LPWSTR" + } + ], + "PathQuoteSpacesA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "PathQuoteSpacesW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "PathRelativePathToA": [ + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "pszFrom", + "type": "LPCSTR" + }, + { + "name": "dwAttrFrom", + "type": "DWORD" + }, + { + "name": "pszTo", + "type": "LPCSTR" + }, + { + "name": "dwAttrTo", + "type": "DWORD" + } + ], + "PathRelativePathToW": [ + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "pszFrom", + "type": "LPCWSTR" + }, + { + "name": "dwAttrFrom", + "type": "DWORD" + }, + { + "name": "pszTo", + "type": "LPCWSTR" + }, + { + "name": "dwAttrTo", + "type": "DWORD" + } + ], + "PathRemoveArgsA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveArgsW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveBackslashA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveBackslashW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveBlanksA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveBlanksW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveExtensionA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveExtensionW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveFileSpecA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveFileSpecW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRenameExtensionA": [ + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "pszExt", + "type": "LPCSTR" + } + ], + "PathRenameExtensionW": [ + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "pszExt", + "type": "LPCWSTR" + } + ], + "PathSearchAndQualifyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "PathSearchAndQualifyW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "PathSetDlgItemPathA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + }, + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathSetDlgItemPathW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathSkipRootA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathSkipRootW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathStripPathA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathStripPathW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathStripToRootA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathStripToRootW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathUnquoteSpacesA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "PathUnquoteSpacesW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "PathMakeSystemFolderA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathMakeSystemFolderW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathUnmakeSystemFolderA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathUnmakeSystemFolderW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsSystemFolderA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "dwAttrb", + "type": "DWORD" + } + ], + "PathIsSystemFolderW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "dwAttrb", + "type": "DWORD" + } + ], + "PathUndecorateA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathUndecorateW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathUnExpandEnvStringsA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "PathUnExpandEnvStringsW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "UrlCompareA": [ + { + "name": "psz1", + "type": "PCSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "fIgnoreSlash", + "type": "BOOL" + } + ], + "UrlCompareW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "fIgnoreSlash", + "type": "BOOL" + } + ], + "UrlCombineA": [ + { + "name": "pszBase", + "type": "PCSTR" + }, + { + "name": "pszRelative", + "type": "PCSTR" + }, + { + "name": "pszCombined", + "type": "PSTR" + }, + { + "name": "pcchCombined", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCombineW": [ + { + "name": "pszBase", + "type": "PCWSTR" + }, + { + "name": "pszRelative", + "type": "PCWSTR" + }, + { + "name": "pszCombined", + "type": "PWSTR" + }, + { + "name": "pcchCombined", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCanonicalizeA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pszCanonicalized", + "type": "PSTR" + }, + { + "name": "pcchCanonicalized", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCanonicalizeW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pszCanonicalized", + "type": "PWSTR" + }, + { + "name": "pcchCanonicalized", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlIsOpaqueA": [ + { + "name": "pszURL", + "type": "PCSTR" + } + ], + "UrlIsOpaqueW": [ + { + "name": "pszURL", + "type": "PCWSTR" + } + ], + "UrlIsNoHistoryA": [ + { + "name": "pszURL", + "type": "PCSTR" + } + ], + "UrlIsNoHistoryW": [ + { + "name": "pszURL", + "type": "PCWSTR" + } + ], + "UrlIsA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "UrlIs", + "type": "URLIS" + } + ], + "UrlIsW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "UrlIs", + "type": "URLIS" + } + ], + "UrlGetLocationA": [ + { + "name": "pszURL", + "type": "PCSTR" + } + ], + "UrlGetLocationW": [ + { + "name": "pszURL", + "type": "PCWSTR" + } + ], + "UrlUnescapeA": [ + { + "name": "pszUrl", + "type": "PSTR" + }, + { + "name": "pszUnescaped", + "type": "PSTR" + }, + { + "name": "pcchUnescaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlUnescapeW": [ + { + "name": "pszUrl", + "type": "PWSTR" + }, + { + "name": "pszUnescaped", + "type": "PWSTR" + }, + { + "name": "pcchUnescaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlEscapeA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pszEscaped", + "type": "PSTR" + }, + { + "name": "pcchEscaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlEscapeW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pszEscaped", + "type": "PWSTR" + }, + { + "name": "pcchEscaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCreateFromPathA": [ + { + "name": "pszPath", + "type": "PCSTR" + }, + { + "name": "pszUrl", + "type": "PSTR" + }, + { + "name": "pcchUrl", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCreateFromPathW": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pszUrl", + "type": "PWSTR" + }, + { + "name": "pcchUrl", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCreateFromUrlA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pszPath", + "type": "PSTR" + }, + { + "name": "pcchPath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCreateFromUrlW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "pcchPath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCreateFromUrlAlloc": [ + { + "name": "pszIn", + "type": "PCWSTR" + }, + { + "name": "ppszOut", + "type": "PWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlHashA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + } + ], + "UrlHashW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + } + ], + "UrlGetPartW": [ + { + "name": "pszIn", + "type": "PCWSTR" + }, + { + "name": "pszOut", + "type": "PWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwPart", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlGetPartA": [ + { + "name": "pszIn", + "type": "PCSTR" + }, + { + "name": "pszOut", + "type": "PSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwPart", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlApplySchemeA": [ + { + "name": "pszIn", + "type": "PCSTR" + }, + { + "name": "pszOut", + "type": "PSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlApplySchemeW": [ + { + "name": "pszIn", + "type": "PCWSTR" + }, + { + "name": "pszOut", + "type": "PWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "HashData": [ + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + } + ], + "UrlFixupW": [ + { + "name": "pcszUrl", + "type": "PCWSTR" + }, + { + "name": "pszTranslatedUrl", + "type": "PWSTR" + }, + { + "name": "cchMax", + "type": "DWORD" + } + ], + "SHDeleteEmptyKeyA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + } + ], + "SHDeleteEmptyKeyW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + } + ], + "SHDeleteKeyA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + } + ], + "SHDeleteKeyW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + } + ], + "SHRegDuplicateHKey": [ + { + "name": "hkey", + "type": "HKEY" + } + ], + "SHDeleteValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + } + ], + "SHDeleteValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + } + ], + "SHGetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHGetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHSetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SHSetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SHRegGetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHRegGetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHRegSetValue": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SHRegGetValueFromHKCUHKLM": [ + { + "name": "pwszKey", + "type": "PCWSTR" + }, + { + "name": "pwszValue", + "type": "PCWSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHRegGetBoolValueFromHKCUHKLM": [ + { + "name": "pszKey", + "type": "PCWSTR" + }, + { + "name": "pszValue", + "type": "PCWSTR" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "SHQueryValueExA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHQueryValueExW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHEnumKeyExA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + } + ], + "SHEnumKeyExW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPWSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + } + ], + "SHEnumValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "PSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "SHEnumValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "PWSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "SHQueryInfoKeyA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + } + ], + "SHQueryInfoKeyW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + } + ], + "SHCopyKeyA": [ + { + "name": "hkeySrc", + "type": "HKEY" + }, + { + "name": "pszSrcSubKey", + "type": "LPCSTR" + }, + { + "name": "hkeyDest", + "type": "HKEY" + }, + { + "name": "fReserved", + "type": "DWORD" + } + ], + "SHCopyKeyW": [ + { + "name": "hkeySrc", + "type": "HKEY" + }, + { + "name": "pszSrcSubKey", + "type": "LPCWSTR" + }, + { + "name": "hkeyDest", + "type": "HKEY" + }, + { + "name": "fReserved", + "type": "DWORD" + } + ], + "SHRegGetPathA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCSTR" + }, + { + "name": "pcszValue", + "type": "LPCSTR" + }, + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegGetPathW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pcszValue", + "type": "LPCWSTR" + }, + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegSetPathA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCSTR" + }, + { + "name": "pcszValue", + "type": "LPCSTR" + }, + { + "name": "pcszPath", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegSetPathW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pcszValue", + "type": "LPCWSTR" + }, + { + "name": "pcszPath", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegCreateUSKeyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegCreateUSKeyW": [ + { + "name": "pwzPath", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegOpenUSKeyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + } + ], + "SHRegOpenUSKeyW": [ + { + "name": "pwzPath", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + } + ], + "SHRegQueryUSValueA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegQueryUSValueW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegWriteUSValueA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegWriteUSValueW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pwzValue", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegDeleteUSValueA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegDeleteUSValueW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pwzValue", + "type": "LPCWSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegDeleteEmptyUSKeyW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pwzSubKey", + "type": "LPCWSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegDeleteEmptyUSKeyA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegEnumUSKeyA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegEnumUSKeyW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pwzName", + "type": "LPWSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegEnumUSValueA": [ + { + "name": "hUSkey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "LPSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegEnumUSValueW": [ + { + "name": "hUSkey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "LPWSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegQueryInfoUSKeyA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegQueryInfoUSKeyW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegCloseUSKey": [ + { + "name": "hUSKey", + "type": "HUSKEY" + } + ], + "SHRegGetUSValueA": [ + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegGetUSValueW": [ + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegSetUSValueA": [ + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegSetUSValueW": [ + { + "name": "pwzSubKey", + "type": "LPCWSTR" + }, + { + "name": "pwzValue", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegGetIntW": [ + { + "name": "hk", + "type": "HKEY" + }, + { + "name": "pwzKey", + "type": "PCWSTR" + }, + { + "name": "iDefault", + "type": "int" + } + ], + "SHRegGetBoolUSValueA": [ + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "SHRegGetBoolUSValueW": [ + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "AssocCreate": [ + { + "name": "clsid", + "type": "CLSID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetAssocKeys": [ + { + "name": "pqa", + "type": "IQueryAssociations" + }, + { + "name": "rgKeys", + "type": "HKEY" + }, + { + "name": "cKeys", + "type": "DWORD" + } + ], + "AssocQueryStringA": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "pszAssoc", + "type": "LPCSTR" + }, + { + "name": "pszExtra", + "type": "LPCSTR" + }, + { + "name": "pszOut", + "type": "LPSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryStringW": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "pszAssoc", + "type": "LPCWSTR" + }, + { + "name": "pszExtra", + "type": "LPCWSTR" + }, + { + "name": "pszOut", + "type": "LPWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryStringByKeyA": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "hkAssoc", + "type": "HKEY" + }, + { + "name": "pszExtra", + "type": "LPCSTR" + }, + { + "name": "pszOut", + "type": "LPSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryStringByKeyW": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "hkAssoc", + "type": "HKEY" + }, + { + "name": "pszExtra", + "type": "LPCWSTR" + }, + { + "name": "pszOut", + "type": "LPWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryKeyA": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "key", + "type": "ASSOCKEY" + }, + { + "name": "pszAssoc", + "type": "LPCSTR" + }, + { + "name": "pszExtra", + "type": "LPCSTR" + }, + { + "name": "phkeyOut", + "type": "HKEY" + } + ], + "AssocQueryKeyW": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "key", + "type": "ASSOCKEY" + }, + { + "name": "pszAssoc", + "type": "LPCWSTR" + }, + { + "name": "pszExtra", + "type": "LPCWSTR" + }, + { + "name": "phkeyOut", + "type": "HKEY" + } + ], + "AssocIsDangerous": [ + { + "name": "pszAssoc", + "type": "PCWSTR" + } + ], + "AssocGetPerceivedType": [ + { + "name": "pszExt", + "type": "PCWSTR" + }, + { + "name": "ptype", + "type": "PERCEIVED" + }, + { + "name": "pflag", + "type": "PERCEIVEDFLAG" + }, + { + "name": "ppszType", + "type": "PWSTR" + } + ], + "SHCreateStreamOnFileA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "ppstm", + "type": "IStream" + } + ], + "SHCreateStreamOnFileW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "ppstm", + "type": "IStream" + } + ], + "SHCreateStreamOnFileEx": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "fCreate", + "type": "BOOL" + }, + { + "name": "pstmTemplate", + "type": "IStream" + }, + { + "name": "ppstm", + "type": "IStream" + } + ], + "GetAcceptLanguagesA": [ + { + "name": "pszLanguages", + "type": "LPSTR" + }, + { + "name": "pcchLanguages", + "type": "DWORD" + } + ], + "GetAcceptLanguagesW": [ + { + "name": "pszLanguages", + "type": "LPWSTR" + }, + { + "name": "pcchLanguages", + "type": "DWORD" + } + ], + "IUnknown_Set": [ + { + "name": "ppunk", + "type": "IUnknown" + }, + { + "name": "punk", + "type": "IUnknown" + } + ], + "IUnknown_AtomicRelease": [ + { + "name": "ppunk", + "type": "void" + } + ], + "IUnknown_GetWindow": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "phwnd", + "type": "HWND" + } + ], + "IUnknown_SetSite": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "punkSite", + "type": "IUnknown" + } + ], + "IUnknown_GetSite": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "IUnknown_QueryService": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "guidService", + "type": "GUID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvOut", + "type": "void" + } + ], + "IStream_Read": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "ULONG" + } + ], + "IStream_Write": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "ULONG" + } + ], + "IStream_Reset": [ + { + "name": "pstm", + "type": "IStream" + } + ], + "IStream_Size": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pui", + "type": "ULARGE_INTEGER" + } + ], + "ConnectToConnectionPoint": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "riidEvent", + "type": "IID" + }, + { + "name": "fConnect", + "type": "BOOL" + }, + { + "name": "punkTarget", + "type": "IUnknown" + }, + { + "name": "pdwCookie", + "type": "DWORD" + }, + { + "name": "ppcpOut", + "type": "IConnectionPoint" + } + ], + "IStream_ReadPidl": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "ppidlOut", + "type": "LPITEMIDLIST" + } + ], + "IStream_WritePidl": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidlWrite", + "type": "LPCITEMIDLIST" + } + ], + "IStream_ReadStr": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "ppsz", + "type": "PWSTR" + } + ], + "IStream_WriteStr": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "psz", + "type": "PCWSTR" + } + ], + "IStream_Copy": [ + { + "name": "pstmFrom", + "type": "IStream" + }, + { + "name": "pstmTo", + "type": "IStream" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "SHGetViewStatePropertyBag": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszBagName", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHFormatDateTimeA": [ + { + "name": "pft", + "type": "FILETIME" + }, + { + "name": "pdwFlags", + "type": "DWORD" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "SHFormatDateTimeW": [ + { + "name": "pft", + "type": "FILETIME" + }, + { + "name": "pdwFlags", + "type": "DWORD" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "SHAnsiToUnicode": [ + { + "name": "pszSrc", + "type": "PCSTR" + }, + { + "name": "pwszDst", + "type": "PWSTR" + }, + { + "name": "cwchBuf", + "type": "int" + } + ], + "SHAnsiToAnsi": [ + { + "name": "pszSrc", + "type": "PCSTR" + }, + { + "name": "pszDst", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "int" + } + ], + "SHUnicodeToAnsi": [ + { + "name": "pwszSrc", + "type": "PCWSTR" + }, + { + "name": "pszDst", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "int" + } + ], + "SHUnicodeToUnicode": [ + { + "name": "pwzSrc", + "type": "PCWSTR" + }, + { + "name": "pwzDst", + "type": "PWSTR" + }, + { + "name": "cwchBuf", + "type": "int" + } + ], + "SHMessageBoxCheckA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszText", + "type": "LPCSTR" + }, + { + "name": "pszCaption", + "type": "LPCSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "iDefault", + "type": "int" + }, + { + "name": "pszRegVal", + "type": "LPCSTR" + } + ], + "SHMessageBoxCheckW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "pszCaption", + "type": "LPCWSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "iDefault", + "type": "int" + }, + { + "name": "pszRegVal", + "type": "LPCWSTR" + } + ], + "SHSendMessageBroadcastA": [ + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHSendMessageBroadcastW": [ + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHStripMneumonicA": [ + { + "name": "pszMenu", + "type": "LPSTR" + } + ], + "SHStripMneumonicW": [ + { + "name": "pszMenu", + "type": "LPWSTR" + } + ], + "IsOS": [ + { + "name": "dwOS", + "type": "DWORD" + } + ], + "SHGlobalCounterGetValue": [ + { + "name": "id", + "type": "SHGLOBALCOUNTER" + } + ], + "SHGlobalCounterIncrement": [ + { + "name": "id", + "type": "SHGLOBALCOUNTER" + } + ], + "SHGlobalCounterDecrement": [ + { + "name": "id", + "type": "SHGLOBALCOUNTER" + } + ], + "SHAllocShared": [ + { + "name": "pvData", + "type": "void" + }, + { + "name": "dwSize", + "type": "DWORD" + }, + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "SHFreeShared": [ + { + "name": "hData", + "type": "HANDLE" + }, + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "SHUnlockShared": [ + { + "name": "pvData", + "type": "void" + } + ], + "WhichPlatform": [ + { + "name": "VOID", + "type": "void" + } + ], + "QISearch": [ + { + "name": "that", + "type": "void" + }, + { + "name": "pqit", + "type": "LPCQITAB" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHIsLowMemoryMachine": [ + { + "name": "dwType", + "type": "DWORD" + } + ], + "GetMenuPosFromID": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "id", + "type": "UINT" + } + ], + "SHGetInverseCMAP": [ + { + "name": "pbMap", + "type": "BYTE" + }, + { + "name": "cbMap", + "type": "ULONG" + } + ], + "SHAutoComplete": [ + { + "name": "hwndEdit", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHCreateThreadRef": [ + { + "name": "pcRef", + "type": "LONG" + }, + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SHSetThreadRef": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "SHGetThreadRef": [ + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SHSkipJunction": [ + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "SHCreateThread": [ + { + "name": "pfnThreadProc", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pData", + "type": "void" + }, + { + "name": "flags", + "type": "SHCT_FLAGS" + }, + { + "name": "pfnCallback", + "type": "LPTHREAD_START_ROUTINE" + } + ], + "SHCreateThreadWithHandle": [ + { + "name": "pfnThreadProc", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pData", + "type": "void" + }, + { + "name": "flags", + "type": "SHCT_FLAGS" + }, + { + "name": "pfnCallback", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pHandle", + "type": "HANDLE" + } + ], + "SetProcessReference": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "GetProcessReference": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "SHReleaseThreadRef": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHCreateShellPalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ColorRGBToHLS": [ + { + "name": "clrRGB", + "type": "COLORREF" + }, + { + "name": "pwHue", + "type": "WORD" + }, + { + "name": "pwLuminance", + "type": "WORD" + }, + { + "name": "pwSaturation", + "type": "WORD" + } + ], + "ColorHLSToRGB": [ + { + "name": "wHue", + "type": "WORD" + }, + { + "name": "wLuminance", + "type": "WORD" + }, + { + "name": "wSaturation", + "type": "WORD" + } + ], + "ColorAdjustLuma": [ + { + "name": "clrRGB", + "type": "COLORREF" + }, + { + "name": "n", + "type": "int" + }, + { + "name": "fScale", + "type": "BOOL" + } + ], + "DllInstall": [ + { + "name": "bInstall", + "type": "BOOL" + }, + { + "name": "pszCmdLine", + "type": "PCWSTR" + } + ], + "IsInternetESCEnabled": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/slpublic.json b/qiling/extensions/windows_sdk/Slc.json similarity index 100% rename from qiling/extensions/windows_sdk/slpublic.json rename to qiling/extensions/windows_sdk/Slc.json diff --git a/qiling/extensions/windows_sdk/Slcext.json b/qiling/extensions/windows_sdk/Slcext.json new file mode 100644 index 000000000..48dd28d3f --- /dev/null +++ b/qiling/extensions/windows_sdk/Slcext.json @@ -0,0 +1,956 @@ +{ + "SLOpen": [ + { + "name": "phSLC", + "type": "HSLC" + } + ], + "SLClose": [ + { + "name": "hSLC", + "type": "HSLC" + } + ], + "SLInstallProofOfPurchase": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "PBYTE" + }, + { + "name": "pPkeyId", + "type": "SLID" + } + ], + "SLInstallProofOfPurchaseEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "PBYTE" + }, + { + "name": "pPkeyId", + "type": "SLID" + } + ], + "SLUninstallProofOfPurchase": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pPKeyId", + "type": "SLID" + } + ], + "SLInstallLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbLicenseBlob", + "type": "UINT" + }, + { + "name": "pbLicenseBlob", + "type": "BYTE" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLUninstallLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLConsumeRight": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszRightName", + "type": "PCWSTR" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "SLGetProductSkuInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetPKeyInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pPKeyId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetLicenseInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pSLLicenseId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetLicensingStatusInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pAppID", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszRightName", + "type": "PCWSTR" + }, + { + "name": "pnStatusCount", + "type": "UINT" + }, + { + "name": "ppLicensingStatus", + "type": "SL_LICENSING_STATUS" + } + ], + "SLGetPolicyInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetPolicyInformationDWORD": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "pdwValue", + "type": "DWORD" + } + ], + "SLGetServiceInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetApplicationInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLActivateProduct": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "cbAppSpecificData", + "type": "UINT" + }, + { + "name": "pvAppSpecificData", + "type": "PVOID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "pwszProxyServer", + "type": "PCWSTR" + }, + { + "name": "wProxyPort", + "type": "WORD" + } + ], + "SLGetServerStatus": [ + { + "name": "pwszServerURL", + "type": "PCWSTR" + }, + { + "name": "pwszAcquisitionType", + "type": "PCWSTR" + }, + { + "name": "pwszProxyServer", + "type": "PCWSTR" + }, + { + "name": "wProxyPort", + "type": "WORD" + }, + { + "name": "phrStatus", + "type": "HRESULT" + } + ], + "SLReArm": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGenerateOfflineInstallationId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "ppwszInstallationId", + "type": "PWSTR" + } + ], + "SLGenerateOfflineInstallationIdEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "ppwszInstallationId", + "type": "PWSTR" + } + ], + "SLDepositOfflineConfirmationId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszInstallationId", + "type": "PCWSTR" + }, + { + "name": "pwszConfirmationId", + "type": "PCWSTR" + } + ], + "SLDepositOfflineConfirmationIdEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "pwszInstallationId", + "type": "PCWSTR" + }, + { + "name": "pwszConfirmationId", + "type": "PCWSTR" + } + ], + "SLGetPKeyId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "BYTE" + }, + { + "name": "pPKeyId", + "type": "SLID" + } + ], + "SLGetInstalledProductKeyIds": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pnProductKeyIds", + "type": "UINT" + }, + { + "name": "ppProductKeyIds", + "type": "SLID" + } + ], + "SLSetCurrentProductKey": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pProductKeyId", + "type": "SLID" + } + ], + "SLGetSLIDList": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "eQueryIdType", + "type": "SLIDTYPE" + }, + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "eReturnIdType", + "type": "SLIDTYPE" + }, + { + "name": "pnReturnIds", + "type": "UINT" + }, + { + "name": "ppReturnIds", + "type": "SLID" + } + ], + "SLGetLicenseFileId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbLicenseBlob", + "type": "UINT" + }, + { + "name": "pbLicenseBlob", + "type": "BYTE" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLGetLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + }, + { + "name": "pcbLicenseFile", + "type": "UINT" + }, + { + "name": "ppbLicenseFile", + "type": "PBYTE" + } + ], + "SLFireEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + } + ], + "SLRegisterEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "SLUnregisterEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "SLGetWindowsInformation": [ + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetWindowsInformationDWORD": [ + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "pdwValue", + "type": "DWORD" + } + ], + "SLIsGenuineLocal": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pGenuineState", + "type": "SL_GENUINE_STATE" + }, + { + "name": "pUIOptions", + "type": "SL_NONGENUINE_UI_OPTIONS" + } + ], + "SLIsGenuineLocalEx": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pSkuId", + "type": "SLID" + }, + { + "name": "pGenuineState", + "type": "SL_GENUINE_STATE" + } + ], + "SLAcquireGenuineTicket": [ + { + "name": "ppTicketBlob", + "type": "void" + }, + { + "name": "pcbTicketBlob", + "type": "UINT" + }, + { + "name": "pwszTemplateId", + "type": "PCWSTR" + }, + { + "name": "pwszServerUrl", + "type": "PCWSTR" + }, + { + "name": "pwszClientToken", + "type": "PCWSTR" + } + ], + "SLSetGenuineInformation": [ + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "eDataType", + "type": "SLDATATYPE" + }, + { + "name": "cbValue", + "type": "UINT" + }, + { + "name": "pbValue", + "type": "BYTE" + } + ], + "SLGetReferralInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "eReferralType", + "type": "SLREFERRALTYPE" + }, + { + "name": "pSkuOrAppId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "SLPersistRTSPayloadOverride": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SLPersistApplicationPolicies": [ + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGetApplicationPolicy": [ + { + "name": "hPolicyContext", + "type": "HSLP" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLLoadApplicationPolicies": [ + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPolicyContext", + "type": "HSLP" + } + ], + "SLUnloadApplicationPolicies": [ + { + "name": "hPolicyContext", + "type": "HSLP" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGetAuthenticationResult": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLSetAuthenticationData": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbValue", + "type": "UINT" + }, + { + "name": "pbValue", + "type": "BYTE" + } + ], + "SLGetGenuineInformation": [ + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "BYTE" + } + ], + "SLGetGenuineInformationEx": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "BYTE" + } + ], + "SLGatherMigrationBlob": [ + { + "name": "bMigratableOnly", + "type": "BOOL" + }, + { + "name": "pwszEncryptorUri", + "type": "LPCWSTR" + }, + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SLDepositMigrationBlob": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SLQueryLicenseValueFromApp": [ + { + "name": "valueName", + "type": "PCWSTR" + }, + { + "name": "valueType", + "type": "ULONG" + }, + { + "name": "dataBuffer", + "type": "PVOID" + }, + { + "name": "dataSize", + "type": "ULONG" + }, + { + "name": "resultDataSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Slwga.json b/qiling/extensions/windows_sdk/Slwga.json new file mode 100644 index 000000000..48dd28d3f --- /dev/null +++ b/qiling/extensions/windows_sdk/Slwga.json @@ -0,0 +1,956 @@ +{ + "SLOpen": [ + { + "name": "phSLC", + "type": "HSLC" + } + ], + "SLClose": [ + { + "name": "hSLC", + "type": "HSLC" + } + ], + "SLInstallProofOfPurchase": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "PBYTE" + }, + { + "name": "pPkeyId", + "type": "SLID" + } + ], + "SLInstallProofOfPurchaseEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "PBYTE" + }, + { + "name": "pPkeyId", + "type": "SLID" + } + ], + "SLUninstallProofOfPurchase": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pPKeyId", + "type": "SLID" + } + ], + "SLInstallLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbLicenseBlob", + "type": "UINT" + }, + { + "name": "pbLicenseBlob", + "type": "BYTE" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLUninstallLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLConsumeRight": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszRightName", + "type": "PCWSTR" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "SLGetProductSkuInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetPKeyInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pPKeyId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetLicenseInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pSLLicenseId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetLicensingStatusInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pAppID", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszRightName", + "type": "PCWSTR" + }, + { + "name": "pnStatusCount", + "type": "UINT" + }, + { + "name": "ppLicensingStatus", + "type": "SL_LICENSING_STATUS" + } + ], + "SLGetPolicyInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetPolicyInformationDWORD": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "pdwValue", + "type": "DWORD" + } + ], + "SLGetServiceInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetApplicationInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLActivateProduct": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "cbAppSpecificData", + "type": "UINT" + }, + { + "name": "pvAppSpecificData", + "type": "PVOID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "pwszProxyServer", + "type": "PCWSTR" + }, + { + "name": "wProxyPort", + "type": "WORD" + } + ], + "SLGetServerStatus": [ + { + "name": "pwszServerURL", + "type": "PCWSTR" + }, + { + "name": "pwszAcquisitionType", + "type": "PCWSTR" + }, + { + "name": "pwszProxyServer", + "type": "PCWSTR" + }, + { + "name": "wProxyPort", + "type": "WORD" + }, + { + "name": "phrStatus", + "type": "HRESULT" + } + ], + "SLReArm": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGenerateOfflineInstallationId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "ppwszInstallationId", + "type": "PWSTR" + } + ], + "SLGenerateOfflineInstallationIdEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "ppwszInstallationId", + "type": "PWSTR" + } + ], + "SLDepositOfflineConfirmationId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszInstallationId", + "type": "PCWSTR" + }, + { + "name": "pwszConfirmationId", + "type": "PCWSTR" + } + ], + "SLDepositOfflineConfirmationIdEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "pwszInstallationId", + "type": "PCWSTR" + }, + { + "name": "pwszConfirmationId", + "type": "PCWSTR" + } + ], + "SLGetPKeyId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "BYTE" + }, + { + "name": "pPKeyId", + "type": "SLID" + } + ], + "SLGetInstalledProductKeyIds": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pnProductKeyIds", + "type": "UINT" + }, + { + "name": "ppProductKeyIds", + "type": "SLID" + } + ], + "SLSetCurrentProductKey": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pProductKeyId", + "type": "SLID" + } + ], + "SLGetSLIDList": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "eQueryIdType", + "type": "SLIDTYPE" + }, + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "eReturnIdType", + "type": "SLIDTYPE" + }, + { + "name": "pnReturnIds", + "type": "UINT" + }, + { + "name": "ppReturnIds", + "type": "SLID" + } + ], + "SLGetLicenseFileId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbLicenseBlob", + "type": "UINT" + }, + { + "name": "pbLicenseBlob", + "type": "BYTE" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLGetLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + }, + { + "name": "pcbLicenseFile", + "type": "UINT" + }, + { + "name": "ppbLicenseFile", + "type": "PBYTE" + } + ], + "SLFireEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + } + ], + "SLRegisterEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "SLUnregisterEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "SLGetWindowsInformation": [ + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetWindowsInformationDWORD": [ + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "pdwValue", + "type": "DWORD" + } + ], + "SLIsGenuineLocal": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pGenuineState", + "type": "SL_GENUINE_STATE" + }, + { + "name": "pUIOptions", + "type": "SL_NONGENUINE_UI_OPTIONS" + } + ], + "SLIsGenuineLocalEx": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pSkuId", + "type": "SLID" + }, + { + "name": "pGenuineState", + "type": "SL_GENUINE_STATE" + } + ], + "SLAcquireGenuineTicket": [ + { + "name": "ppTicketBlob", + "type": "void" + }, + { + "name": "pcbTicketBlob", + "type": "UINT" + }, + { + "name": "pwszTemplateId", + "type": "PCWSTR" + }, + { + "name": "pwszServerUrl", + "type": "PCWSTR" + }, + { + "name": "pwszClientToken", + "type": "PCWSTR" + } + ], + "SLSetGenuineInformation": [ + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "eDataType", + "type": "SLDATATYPE" + }, + { + "name": "cbValue", + "type": "UINT" + }, + { + "name": "pbValue", + "type": "BYTE" + } + ], + "SLGetReferralInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "eReferralType", + "type": "SLREFERRALTYPE" + }, + { + "name": "pSkuOrAppId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "SLPersistRTSPayloadOverride": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SLPersistApplicationPolicies": [ + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGetApplicationPolicy": [ + { + "name": "hPolicyContext", + "type": "HSLP" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLLoadApplicationPolicies": [ + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPolicyContext", + "type": "HSLP" + } + ], + "SLUnloadApplicationPolicies": [ + { + "name": "hPolicyContext", + "type": "HSLP" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGetAuthenticationResult": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLSetAuthenticationData": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbValue", + "type": "UINT" + }, + { + "name": "pbValue", + "type": "BYTE" + } + ], + "SLGetGenuineInformation": [ + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "BYTE" + } + ], + "SLGetGenuineInformationEx": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "BYTE" + } + ], + "SLGatherMigrationBlob": [ + { + "name": "bMigratableOnly", + "type": "BOOL" + }, + { + "name": "pwszEncryptorUri", + "type": "LPCWSTR" + }, + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SLDepositMigrationBlob": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SLQueryLicenseValueFromApp": [ + { + "name": "valueName", + "type": "PCWSTR" + }, + { + "name": "valueType", + "type": "ULONG" + }, + { + "name": "dataBuffer", + "type": "PVOID" + }, + { + "name": "dataSize", + "type": "ULONG" + }, + { + "name": "resultDataSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/snmp.json b/qiling/extensions/windows_sdk/Snmpapi.json similarity index 100% rename from qiling/extensions/windows_sdk/snmp.json rename to qiling/extensions/windows_sdk/Snmpapi.json diff --git a/qiling/extensions/windows_sdk/prnasnot.json b/qiling/extensions/windows_sdk/Spoolss.json similarity index 100% rename from qiling/extensions/windows_sdk/prnasnot.json rename to qiling/extensions/windows_sdk/Spoolss.json diff --git a/qiling/extensions/windows_sdk/srrestoreptapi.json b/qiling/extensions/windows_sdk/SrClient.json similarity index 100% rename from qiling/extensions/windows_sdk/srrestoreptapi.json rename to qiling/extensions/windows_sdk/SrClient.json diff --git a/qiling/extensions/windows_sdk/t2embapi.json b/qiling/extensions/windows_sdk/T2embed.json similarity index 100% rename from qiling/extensions/windows_sdk/t2embapi.json rename to qiling/extensions/windows_sdk/T2embed.json diff --git a/qiling/extensions/windows_sdk/ual.json b/qiling/extensions/windows_sdk/Ualapi.json similarity index 100% rename from qiling/extensions/windows_sdk/ual.json rename to qiling/extensions/windows_sdk/Ualapi.json diff --git a/qiling/extensions/windows_sdk/intshcut.json b/qiling/extensions/windows_sdk/Url.json similarity index 100% rename from qiling/extensions/windows_sdk/intshcut.json rename to qiling/extensions/windows_sdk/Url.json diff --git a/qiling/extensions/windows_sdk/winuser.json b/qiling/extensions/windows_sdk/User32.json similarity index 100% rename from qiling/extensions/windows_sdk/winuser.json rename to qiling/extensions/windows_sdk/User32.json diff --git a/qiling/extensions/windows_sdk/avrfsdk.json b/qiling/extensions/windows_sdk/Verifier.json similarity index 100% rename from qiling/extensions/windows_sdk/avrfsdk.json rename to qiling/extensions/windows_sdk/Verifier.json diff --git a/qiling/extensions/windows_sdk/enclaveapi.json b/qiling/extensions/windows_sdk/Vertdll.json similarity index 100% rename from qiling/extensions/windows_sdk/enclaveapi.json rename to qiling/extensions/windows_sdk/Vertdll.json diff --git a/qiling/extensions/windows_sdk/wsdevlicensing.json b/qiling/extensions/windows_sdk/WSClient.json similarity index 100% rename from qiling/extensions/windows_sdk/wsdevlicensing.json rename to qiling/extensions/windows_sdk/WSClient.json diff --git a/qiling/extensions/windows_sdk/wdstpdi.json b/qiling/extensions/windows_sdk/Wdsmc.json similarity index 100% rename from qiling/extensions/windows_sdk/wdstpdi.json rename to qiling/extensions/windows_sdk/Wdsmc.json diff --git a/qiling/extensions/windows_sdk/wdstci.json b/qiling/extensions/windows_sdk/Wdstptc.json similarity index 100% rename from qiling/extensions/windows_sdk/wdstci.json rename to qiling/extensions/windows_sdk/Wdstptc.json diff --git a/qiling/extensions/windows_sdk/evcoll.json b/qiling/extensions/windows_sdk/Wecapi.json similarity index 100% rename from qiling/extensions/windows_sdk/evcoll.json rename to qiling/extensions/windows_sdk/Wecapi.json diff --git a/qiling/extensions/windows_sdk/werapi.json b/qiling/extensions/windows_sdk/Wer.json similarity index 100% rename from qiling/extensions/windows_sdk/werapi.json rename to qiling/extensions/windows_sdk/Wer.json diff --git a/qiling/extensions/windows_sdk/winevt.json b/qiling/extensions/windows_sdk/Wevtapi.json similarity index 100% rename from qiling/extensions/windows_sdk/winevt.json rename to qiling/extensions/windows_sdk/Wevtapi.json diff --git a/qiling/extensions/windows_sdk/WinRTType.json b/qiling/extensions/windows_sdk/WinRTType.json new file mode 100644 index 000000000..e3c575976 --- /dev/null +++ b/qiling/extensions/windows_sdk/WinRTType.json @@ -0,0 +1,294 @@ +{ + "WindowsCreateString": [ + { + "name": "sourceString", + "type": "PCNZWCH" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsCreateStringReference": [ + { + "name": "sourceString", + "type": "PCWSTR" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "hstringHeader", + "type": "HSTRING_HEADER" + }, + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsDeleteString": [ + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsDuplicateString": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsGetStringLen": [ + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsGetStringRawBuffer": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "length", + "type": "UINT32" + } + ], + "WindowsIsStringEmpty": [ + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsStringHasEmbeddedNull": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "hasEmbedNull", + "type": "BOOL" + } + ], + "WindowsCompareStringOrdinal": [ + { + "name": "string1", + "type": "HSTRING" + }, + { + "name": "string2", + "type": "HSTRING" + }, + { + "name": "result", + "type": "INT32" + } + ], + "WindowsSubstring": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "startIndex", + "type": "UINT32" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsSubstringWithSpecifiedLength": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "startIndex", + "type": "UINT32" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsConcatString": [ + { + "name": "string1", + "type": "HSTRING" + }, + { + "name": "string2", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsReplaceString": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "stringReplaced", + "type": "HSTRING" + }, + { + "name": "stringReplaceWith", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsTrimStringStart": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "trimString", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsTrimStringEnd": [ + { + "name": "string", + "type": "HSTRING" + }, + { + "name": "trimString", + "type": "HSTRING" + }, + { + "name": "newString", + "type": "HSTRING" + } + ], + "WindowsPreallocateStringBuffer": [ + { + "name": "length", + "type": "UINT32" + }, + { + "name": "charBuffer", + "type": "WCHAR" + }, + { + "name": "bufferHandle", + "type": "HSTRING_BUFFER" + } + ], + "WindowsPromoteStringBuffer": [ + { + "name": "bufferHandle", + "type": "HSTRING_BUFFER" + }, + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsDeleteStringBuffer": [ + { + "name": "bufferHandle", + "type": "HSTRING_BUFFER" + } + ], + "HSTRING_UserSize": [ + { + "name": "pFlags", + "type": "ULONG" + }, + { + "name": "StartingSize", + "type": "ULONG" + }, + { + "name": "ppidl", + "type": "HSTRING" + } + ], + "HSTRING_UserFree": [ + { + "name": "pFlags", + "type": "ULONG" + }, + { + "name": "ppidl", + "type": "HSTRING" + } + ], + "WindowsInspectString": [ + { + "name": "targetHString", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "callback", + "type": "PINSPECT_HSTRING_CALLBACK" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "targetStringAddress", + "type": "UINT_PTR" + } + ], + "WindowsInspectString2": [ + { + "name": "targetHString", + "type": "UINT64" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "callback", + "type": "PINSPECT_HSTRING_CALLBACK2" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "targetStringAddress", + "type": "UINT64" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/WinSpool.json b/qiling/extensions/windows_sdk/WinSpool.json new file mode 100644 index 000000000..f57fee6e4 --- /dev/null +++ b/qiling/extensions/windows_sdk/WinSpool.json @@ -0,0 +1,5434 @@ +{ + "AddFontResourceA": [ + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "AddFontResourceW": [ + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "AnimatePalette": [ + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "iStartIndex", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "ppe", + "type": "PALETTEENTRY" + } + ], + "Arc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "x3", + "type": "int" + }, + { + "name": "y3", + "type": "int" + }, + { + "name": "x4", + "type": "int" + }, + { + "name": "y4", + "type": "int" + } + ], + "BitBlt": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "CancelDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "Chord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "x3", + "type": "int" + }, + { + "name": "y3", + "type": "int" + }, + { + "name": "x4", + "type": "int" + }, + { + "name": "y4", + "type": "int" + } + ], + "ChoosePixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "CloseMetaFile": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CombineRgn": [ + { + "name": "hrgnDst", + "type": "HRGN" + }, + { + "name": "hrgnSrc1", + "type": "HRGN" + }, + { + "name": "hrgnSrc2", + "type": "HRGN" + }, + { + "name": "iMode", + "type": "int" + } + ], + "CopyMetaFileA": [ + { + "name": "VOID", + "type": "HMETAFILE" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "CopyMetaFileW": [ + { + "name": "VOID", + "type": "HMETAFILE" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "CreateBitmap": [ + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "nPlanes", + "type": "UINT" + }, + { + "name": "nBitCount", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "void" + } + ], + "CreateBitmapIndirect": [ + { + "name": "pbm", + "type": "BITMAP" + } + ], + "CreateBrushIndirect": [ + { + "name": "plbrush", + "type": "LOGBRUSH" + } + ], + "CreateCompatibleBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "CreateDiscardableBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "CreateCompatibleDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CreateDCA": [ + { + "name": "pwszDriver", + "type": "LPCSTR" + }, + { + "name": "pwszDevice", + "type": "LPCSTR" + }, + { + "name": "pszPort", + "type": "LPCSTR" + }, + { + "name": "pdm", + "type": "DEVMODEA" + } + ], + "CreateDCW": [ + { + "name": "pwszDriver", + "type": "LPCWSTR" + }, + { + "name": "pwszDevice", + "type": "LPCWSTR" + }, + { + "name": "pszPort", + "type": "LPCWSTR" + }, + { + "name": "pdm", + "type": "DEVMODEW" + } + ], + "CreateDIBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pbmih", + "type": "BITMAPINFOHEADER" + }, + { + "name": "flInit", + "type": "DWORD" + }, + { + "name": "pjBits", + "type": "void" + }, + { + "name": "pbmi", + "type": "BITMAPINFO" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateDIBPatternBrush": [ + { + "name": "h", + "type": "HGLOBAL" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateDIBPatternBrushPt": [ + { + "name": "lpPackedDIB", + "type": "void" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateEllipticRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + } + ], + "CreateEllipticRgnIndirect": [ + { + "name": "lprect", + "type": "RECT" + } + ], + "CreateFontIndirectA": [ + { + "name": "lplf", + "type": "LOGFONTA" + } + ], + "CreateFontIndirectW": [ + { + "name": "lplf", + "type": "LOGFONTW" + } + ], + "CreateFontA": [ + { + "name": "cHeight", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "cEscapement", + "type": "int" + }, + { + "name": "cOrientation", + "type": "int" + }, + { + "name": "cWeight", + "type": "int" + }, + { + "name": "bItalic", + "type": "DWORD" + }, + { + "name": "bUnderline", + "type": "DWORD" + }, + { + "name": "bStrikeOut", + "type": "DWORD" + }, + { + "name": "iCharSet", + "type": "DWORD" + }, + { + "name": "iOutPrecision", + "type": "DWORD" + }, + { + "name": "iClipPrecision", + "type": "DWORD" + }, + { + "name": "iQuality", + "type": "DWORD" + }, + { + "name": "iPitchAndFamily", + "type": "DWORD" + }, + { + "name": "pszFaceName", + "type": "LPCSTR" + } + ], + "CreateFontW": [ + { + "name": "cHeight", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "cEscapement", + "type": "int" + }, + { + "name": "cOrientation", + "type": "int" + }, + { + "name": "cWeight", + "type": "int" + }, + { + "name": "bItalic", + "type": "DWORD" + }, + { + "name": "bUnderline", + "type": "DWORD" + }, + { + "name": "bStrikeOut", + "type": "DWORD" + }, + { + "name": "iCharSet", + "type": "DWORD" + }, + { + "name": "iOutPrecision", + "type": "DWORD" + }, + { + "name": "iClipPrecision", + "type": "DWORD" + }, + { + "name": "iQuality", + "type": "DWORD" + }, + { + "name": "iPitchAndFamily", + "type": "DWORD" + }, + { + "name": "pszFaceName", + "type": "LPCWSTR" + } + ], + "CreateHatchBrush": [ + { + "name": "iHatch", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "CreateICA": [ + { + "name": "pszDriver", + "type": "LPCSTR" + }, + { + "name": "pszDevice", + "type": "LPCSTR" + }, + { + "name": "pszPort", + "type": "LPCSTR" + }, + { + "name": "pdm", + "type": "DEVMODEA" + } + ], + "CreateICW": [ + { + "name": "pszDriver", + "type": "LPCWSTR" + }, + { + "name": "pszDevice", + "type": "LPCWSTR" + }, + { + "name": "pszPort", + "type": "LPCWSTR" + }, + { + "name": "pdm", + "type": "DEVMODEW" + } + ], + "CreateMetaFileA": [ + { + "name": "pszFile", + "type": "LPCSTR" + } + ], + "CreateMetaFileW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + } + ], + "CreatePalette": [ + { + "name": "plpal", + "type": "LOGPALETTE" + } + ], + "CreatePen": [ + { + "name": "iStyle", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "CreatePenIndirect": [ + { + "name": "plpen", + "type": "LOGPEN" + } + ], + "CreatePolyPolygonRgn": [ + { + "name": "pptl", + "type": "POINT" + }, + { + "name": "pc", + "type": "INT" + }, + { + "name": "cPoly", + "type": "int" + }, + { + "name": "iMode", + "type": "int" + } + ], + "CreatePatternBrush": [ + { + "name": "hbm", + "type": "HBITMAP" + } + ], + "CreateRectRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + } + ], + "CreateRectRgnIndirect": [ + { + "name": "lprect", + "type": "RECT" + } + ], + "CreateRoundRectRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + } + ], + "CreateScalableFontResourceA": [ + { + "name": "fdwHidden", + "type": "DWORD" + }, + { + "name": "lpszFont", + "type": "LPCSTR" + }, + { + "name": "lpszFile", + "type": "LPCSTR" + }, + { + "name": "lpszPath", + "type": "LPCSTR" + } + ], + "CreateScalableFontResourceW": [ + { + "name": "fdwHidden", + "type": "DWORD" + }, + { + "name": "lpszFont", + "type": "LPCWSTR" + }, + { + "name": "lpszFile", + "type": "LPCWSTR" + }, + { + "name": "lpszPath", + "type": "LPCWSTR" + } + ], + "CreateSolidBrush": [ + { + "name": "color", + "type": "COLORREF" + } + ], + "DeleteDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "DeleteMetaFile": [ + { + "name": "hmf", + "type": "HMETAFILE" + } + ], + "DeleteObject": [ + { + "name": "ho", + "type": "HGDIOBJ" + } + ], + "DescribePixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPixelFormat", + "type": "int" + }, + { + "name": "nBytes", + "type": "UINT" + }, + { + "name": "ppfd", + "type": "LPPIXELFORMATDESCRIPTOR" + } + ], + "DeviceCapabilitiesA": [ + { + "name": "pDevice", + "type": "LPCSTR" + }, + { + "name": "pPort", + "type": "LPCSTR" + }, + { + "name": "fwCapability", + "type": "WORD" + }, + { + "name": "pOutput", + "type": "LPSTR" + }, + { + "name": "pDevMode", + "type": "DEVMODEA" + } + ], + "DeviceCapabilitiesW": [ + { + "name": "pDevice", + "type": "LPCWSTR" + }, + { + "name": "pPort", + "type": "LPCWSTR" + }, + { + "name": "fwCapability", + "type": "WORD" + }, + { + "name": "pOutput", + "type": "LPWSTR" + }, + { + "name": "pDevMode", + "type": "DEVMODEW" + } + ], + "DrawEscape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjIn", + "type": "int" + }, + { + "name": "lpIn", + "type": "LPCSTR" + } + ], + "Ellipse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "EnumFontFamiliesExA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPLOGFONTA" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumFontFamiliesExW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPLOGFONTW" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumFontFamiliesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontFamiliesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCWSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCWSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumObjects": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nType", + "type": "int" + }, + { + "name": "lpFunc", + "type": "GOBJENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EqualRgn": [ + { + "name": "hrgn1", + "type": "HRGN" + }, + { + "name": "hrgn2", + "type": "HRGN" + } + ], + "Escape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjIn", + "type": "int" + }, + { + "name": "pvIn", + "type": "LPCSTR" + }, + { + "name": "pvOut", + "type": "LPVOID" + } + ], + "ExtEscape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjInput", + "type": "int" + }, + { + "name": "lpInData", + "type": "LPCSTR" + }, + { + "name": "cjOutput", + "type": "int" + }, + { + "name": "lpOutData", + "type": "LPSTR" + } + ], + "ExcludeClipRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "ExtCreateRegion": [ + { + "name": "lpx", + "type": "XFORM" + }, + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "RGNDATA" + } + ], + "ExtFloodFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + }, + { + "name": "type", + "type": "UINT" + } + ], + "FillRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "hbr", + "type": "HBRUSH" + } + ], + "FloodFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "FrameRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "hbr", + "type": "HBRUSH" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + } + ], + "GetROP2": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetAspectRatioFilterEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetBkColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetDCBrushColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetDCPenColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetBkMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetBitmapBits": [ + { + "name": "hbit", + "type": "HBITMAP" + }, + { + "name": "cb", + "type": "LONG" + }, + { + "name": "lpvBits", + "type": "LPVOID" + } + ], + "GetBitmapDimensionEx": [ + { + "name": "hbit", + "type": "HBITMAP" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetBoundsRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "LPRECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetBrushOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetCharWidthA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidthW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidth32A": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidth32W": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidthFloatA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "PFLOAT" + } + ], + "GetCharWidthFloatW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "PFLOAT" + } + ], + "GetCharABCWidthsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "wFirst", + "type": "UINT" + }, + { + "name": "wLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABC" + } + ], + "GetCharABCWidthsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "wFirst", + "type": "UINT" + }, + { + "name": "wLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABC" + } + ], + "GetCharABCWidthsFloatA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABCFLOAT" + } + ], + "GetCharABCWidthsFloatW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABCFLOAT" + } + ], + "GetClipBox": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "LPRECT" + } + ], + "GetClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "GetMetaRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "GetCurrentObject": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "type", + "type": "UINT" + } + ], + "GetCurrentPositionEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetDeviceCaps": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "index", + "type": "int" + } + ], + "GetDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "start", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpvBits", + "type": "LPVOID" + }, + { + "name": "lpbmi", + "type": "LPBITMAPINFO" + }, + { + "name": "usage", + "type": "UINT" + } + ], + "GetFontData": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dwTable", + "type": "DWORD" + }, + { + "name": "dwOffset", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "PVOID" + }, + { + "name": "cjBuffer", + "type": "DWORD" + } + ], + "GetGlyphOutlineA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "uChar", + "type": "UINT" + }, + { + "name": "fuFormat", + "type": "UINT" + }, + { + "name": "lpgm", + "type": "LPGLYPHMETRICS" + }, + { + "name": "cjBuffer", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "LPVOID" + }, + { + "name": "lpmat2", + "type": "MAT2" + } + ], + "GetGlyphOutlineW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "uChar", + "type": "UINT" + }, + { + "name": "fuFormat", + "type": "UINT" + }, + { + "name": "lpgm", + "type": "LPGLYPHMETRICS" + }, + { + "name": "cjBuffer", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "LPVOID" + }, + { + "name": "lpmat2", + "type": "MAT2" + } + ], + "GetGraphicsMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetMapMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetMetaFileBitsEx": [ + { + "name": "hMF", + "type": "HMETAFILE" + }, + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetMetaFileA": [ + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetMetaFileW": [ + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "GetNearestColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "GetNearestPaletteIndex": [ + { + "name": "h", + "type": "HPALETTE" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "GetObjectType": [ + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "GetOutlineTextMetricsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cjCopy", + "type": "UINT" + }, + { + "name": "potm", + "type": "LPOUTLINETEXTMETRICA" + } + ], + "GetOutlineTextMetricsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cjCopy", + "type": "UINT" + }, + { + "name": "potm", + "type": "LPOUTLINETEXTMETRICW" + } + ], + "GetPaletteEntries": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetPixel": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "GetPixelFormat": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetPolyFillMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetRasterizerCaps": [ + { + "name": "lpraststat", + "type": "LPRASTERIZER_STATUS" + }, + { + "name": "cjBytes", + "type": "UINT" + } + ], + "GetRandomRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "i", + "type": "INT" + } + ], + "GetRegionData": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpRgnData", + "type": "LPRGNDATA" + } + ], + "GetRgnBox": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "lprc", + "type": "LPRECT" + } + ], + "GetStockObject": [ + { + "name": "i", + "type": "int" + } + ], + "GetStretchBltMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetSystemPaletteEntries": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetSystemPaletteUse": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextCharacterExtra": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextAlign": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextExtentPointA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "GetTextExtentPointW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "GetTextExtentPoint32A": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "psizl", + "type": "LPSIZE" + } + ], + "GetTextExtentPoint32W": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "psizl", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpszString", + "type": "LPCSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpszString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetTextCharset": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextCharsetInfo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpSig", + "type": "LPFONTSIGNATURE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "TranslateCharsetInfo": [ + { + "name": "lpSrc", + "type": "DWORD" + }, + { + "name": "lpCs", + "type": "LPCHARSETINFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFontLanguageInfo": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetCharacterPlacementA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "nMexExtent", + "type": "int" + }, + { + "name": "lpResults", + "type": "LPGCP_RESULTSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetCharacterPlacementW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "nMexExtent", + "type": "int" + }, + { + "name": "lpResults", + "type": "LPGCP_RESULTSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFontUnicodeRanges": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpgs", + "type": "LPGLYPHSET" + } + ], + "GetGlyphIndicesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpstr", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "fl", + "type": "DWORD" + } + ], + "GetGlyphIndicesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpstr", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "fl", + "type": "DWORD" + } + ], + "GetTextExtentPointI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pgiIn", + "type": "LPWORD" + }, + { + "name": "cgi", + "type": "int" + }, + { + "name": "psize", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpwszString", + "type": "LPWORD" + }, + { + "name": "cwchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetCharWidthI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "giFirst", + "type": "UINT" + }, + { + "name": "cgi", + "type": "UINT" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "piWidths", + "type": "LPINT" + } + ], + "GetCharABCWidthsI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "giFirst", + "type": "UINT" + }, + { + "name": "cgi", + "type": "UINT" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "pabc", + "type": "LPABC" + } + ], + "AddFontResourceExA": [ + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "res", + "type": "PVOID" + } + ], + "AddFontResourceExW": [ + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "res", + "type": "PVOID" + } + ], + "RemoveFontResourceExA": [ + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "pdv", + "type": "PVOID" + } + ], + "RemoveFontResourceExW": [ + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "pdv", + "type": "PVOID" + } + ], + "AddFontMemResourceEx": [ + { + "name": "pFileView", + "type": "PVOID" + }, + { + "name": "cjSize", + "type": "DWORD" + }, + { + "name": "pvResrved", + "type": "PVOID" + }, + { + "name": "pNumFonts", + "type": "DWORD" + } + ], + "RemoveFontMemResourceEx": [ + { + "name": "h", + "type": "HANDLE" + } + ], + "CreateFontIndirectExA": [ + { + "name": "VOID", + "type": "ENUMLOGFONTEXDVA" + } + ], + "CreateFontIndirectExW": [ + { + "name": "VOID", + "type": "ENUMLOGFONTEXDVW" + } + ], + "GetViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppoint", + "type": "LPPOINT" + } + ], + "GetWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppoint", + "type": "LPPOINT" + } + ], + "IntersectClipRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "InvertRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "LineDDA": [ + { + "name": "xStart", + "type": "int" + }, + { + "name": "yStart", + "type": "int" + }, + { + "name": "xEnd", + "type": "int" + }, + { + "name": "yEnd", + "type": "int" + }, + { + "name": "lpProc", + "type": "LINEDDAPROC" + }, + { + "name": "data", + "type": "LPARAM" + } + ], + "LineTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "MaskBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + }, + { + "name": "xMask", + "type": "int" + }, + { + "name": "yMask", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "PlgBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "lpPoint", + "type": "POINT" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + }, + { + "name": "xMask", + "type": "int" + }, + { + "name": "yMask", + "type": "int" + } + ], + "OffsetClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "OffsetRgn": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "PatBlt": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "Pie": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "xr1", + "type": "int" + }, + { + "name": "yr1", + "type": "int" + }, + { + "name": "xr2", + "type": "int" + }, + { + "name": "yr2", + "type": "int" + } + ], + "PlayMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HMETAFILE" + } + ], + "PaintRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "PolyPolygon": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "asz", + "type": "INT" + }, + { + "name": "csz", + "type": "int" + } + ], + "PtInRegion": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "PtVisible": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "RectInRegion": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "RectVisible": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "Rectangle": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "RestoreDC": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nSavedDC", + "type": "int" + } + ], + "ResetDCA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdm", + "type": "DEVMODEA" + } + ], + "ResetDCW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdm", + "type": "DEVMODEW" + } + ], + "RealizePalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "RemoveFontResourceA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "RemoveFontResourceW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "RoundRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + } + ], + "ResizePalette": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "n", + "type": "UINT" + } + ], + "SaveDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SelectClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "ExtSelectClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetMetaRgn": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SelectObject": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "SelectPalette": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "bForceBkgd", + "type": "BOOL" + } + ], + "SetBkColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetDCBrushColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetDCPenColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetBkMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetBitmapBits": [ + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "pvBits", + "type": "void" + } + ], + "SetBoundsRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "SetDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "start", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "ColorUse", + "type": "UINT" + } + ], + "SetDIBitsToDevice": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "w", + "type": "DWORD" + }, + { + "name": "h", + "type": "DWORD" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "StartScan", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpvBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "ColorUse", + "type": "UINT" + } + ], + "SetMapperFlags": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "SetGraphicsMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iMode", + "type": "int" + } + ], + "SetMapMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iMode", + "type": "int" + } + ], + "SetLayout": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "l", + "type": "DWORD" + } + ], + "GetLayout": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SetMetaFileBitsEx": [ + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "lpData", + "type": "BYTE" + } + ], + "SetPaletteEntries": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "PALETTEENTRY" + } + ], + "SetPixel": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetPixelV": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetPixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "format", + "type": "int" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "SetPolyFillMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "StretchBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "SetRectRgn": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "StretchDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "DestWidth", + "type": "int" + }, + { + "name": "DestHeight", + "type": "int" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "SrcWidth", + "type": "int" + }, + { + "name": "SrcHeight", + "type": "int" + }, + { + "name": "lpBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "iUsage", + "type": "UINT" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "SetROP2": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "rop2", + "type": "int" + } + ], + "SetStretchBltMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetSystemPaletteUse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "use", + "type": "UINT" + } + ], + "SetTextCharacterExtra": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "extra", + "type": "int" + } + ], + "SetTextColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetTextAlign": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "align", + "type": "UINT" + } + ], + "SetTextJustification": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "extra", + "type": "int" + }, + { + "name": "count", + "type": "int" + } + ], + "UpdateColors": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "AlphaBlend": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "ftn", + "type": "BLENDFUNCTION" + } + ], + "TransparentBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "crTransparent", + "type": "UINT" + } + ], + "GradientFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pVertex", + "type": "PTRIVERTEX" + }, + { + "name": "nVertex", + "type": "ULONG" + }, + { + "name": "pMesh", + "type": "PVOID" + }, + { + "name": "nMesh", + "type": "ULONG" + }, + { + "name": "ulMode", + "type": "ULONG" + } + ], + "GdiAlphaBlend": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "ftn", + "type": "BLENDFUNCTION" + } + ], + "GdiTransparentBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "crTransparent", + "type": "UINT" + } + ], + "GdiGradientFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pVertex", + "type": "PTRIVERTEX" + }, + { + "name": "nVertex", + "type": "ULONG" + }, + { + "name": "pMesh", + "type": "PVOID" + }, + { + "name": "nCount", + "type": "ULONG" + }, + { + "name": "ulMode", + "type": "ULONG" + } + ], + "PlayMetaFileRecord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpHandleTable", + "type": "LPHANDLETABLE" + }, + { + "name": "lpMR", + "type": "LPMETARECORD" + }, + { + "name": "noObjs", + "type": "UINT" + } + ], + "EnumMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HMETAFILE" + }, + { + "name": "proc", + "type": "MFENUMPROC" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "CloseEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CopyEnhMetaFileA": [ + { + "name": "hEnh", + "type": "HENHMETAFILE" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "CopyEnhMetaFileW": [ + { + "name": "hEnh", + "type": "HENHMETAFILE" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "CreateEnhMetaFileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFilename", + "type": "LPCSTR" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "lpDesc", + "type": "LPCSTR" + } + ], + "CreateEnhMetaFileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFilename", + "type": "LPCWSTR" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "lpDesc", + "type": "LPCWSTR" + } + ], + "DeleteEnhMetaFile": [ + { + "name": "hmf", + "type": "HENHMETAFILE" + } + ], + "EnumEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HENHMETAFILE" + }, + { + "name": "proc", + "type": "ENHMFENUMPROC" + }, + { + "name": "param", + "type": "LPVOID" + }, + { + "name": "lpRect", + "type": "RECT" + } + ], + "GetEnhMetaFileA": [ + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetEnhMetaFileW": [ + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "GetEnhMetaFileBits": [ + { + "name": "hEMF", + "type": "HENHMETAFILE" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpData", + "type": "LPBYTE" + } + ], + "GetEnhMetaFileDescriptionA": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cchBuffer", + "type": "UINT" + }, + { + "name": "lpDescription", + "type": "LPSTR" + } + ], + "GetEnhMetaFileDescriptionW": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cchBuffer", + "type": "UINT" + }, + { + "name": "lpDescription", + "type": "LPWSTR" + } + ], + "GetEnhMetaFileHeader": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpEnhMetaHeader", + "type": "LPENHMETAHEADER" + } + ], + "GetEnhMetaFilePaletteEntries": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "nNumEntries", + "type": "UINT" + }, + { + "name": "lpPaletteEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetEnhMetaFilePixelFormat": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "GetWinMetaFileBits": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cbData16", + "type": "UINT" + }, + { + "name": "pData16", + "type": "LPBYTE" + }, + { + "name": "iMapMode", + "type": "INT" + }, + { + "name": "hdcRef", + "type": "HDC" + } + ], + "PlayEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HENHMETAFILE" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "PlayEnhMetaFileRecord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pht", + "type": "LPHANDLETABLE" + }, + { + "name": "pmr", + "type": "ENHMETARECORD" + }, + { + "name": "cht", + "type": "UINT" + } + ], + "SetEnhMetaFileBits": [ + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "pb", + "type": "BYTE" + } + ], + "SetWinMetaFileBits": [ + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpMeta16Data", + "type": "BYTE" + }, + { + "name": "hdcRef", + "type": "HDC" + }, + { + "name": "lpMFP", + "type": "METAFILEPICT" + } + ], + "GdiComment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpData", + "type": "BYTE" + } + ], + "GetTextMetricsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lptm", + "type": "LPTEXTMETRICA" + } + ], + "GetTextMetricsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lptm", + "type": "LPTEXTMETRICW" + } + ], + "AngleArc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "r", + "type": "DWORD" + }, + { + "name": "StartAngle", + "type": "FLOAT" + }, + { + "name": "SweepAngle", + "type": "FLOAT" + } + ], + "PolyPolyline": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "asz", + "type": "DWORD" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "GetWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "LPXFORM" + } + ], + "SetWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "XFORM" + } + ], + "ModifyWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "XFORM" + }, + { + "name": "mode", + "type": "DWORD" + } + ], + "CombineTransform": [ + { + "name": "lpxfOut", + "type": "LPXFORM" + }, + { + "name": "lpxf1", + "type": "XFORM" + }, + { + "name": "lpxf2", + "type": "XFORM" + } + ], + "CreateDIBSection": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pbmi", + "type": "BITMAPINFO" + }, + { + "name": "usage", + "type": "UINT" + }, + { + "name": "ppvBits", + "type": "void" + }, + { + "name": "hSection", + "type": "HANDLE" + }, + { + "name": "offset", + "type": "DWORD" + } + ], + "GetDIBColorTable": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "prgbq", + "type": "RGBQUAD" + } + ], + "SetDIBColorTable": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "prgbq", + "type": "RGBQUAD" + } + ], + "SetColorAdjustment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpca", + "type": "COLORADJUSTMENT" + } + ], + "GetColorAdjustment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpca", + "type": "LPCOLORADJUSTMENT" + } + ], + "CreateHalftonePalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StartDocA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdi", + "type": "DOCINFOA" + } + ], + "StartDocW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdi", + "type": "DOCINFOW" + } + ], + "EndDoc": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StartPage": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "EndPage": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "AbortDoc": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SetAbortProc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ABORTPROC" + } + ], + "AbortPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ArcTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "xr1", + "type": "int" + }, + { + "name": "yr1", + "type": "int" + }, + { + "name": "xr2", + "type": "int" + }, + { + "name": "yr2", + "type": "int" + } + ], + "BeginPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CloseFigure": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "EndPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "FillPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "FlattenPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetPath": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "LPPOINT" + }, + { + "name": "aj", + "type": "LPBYTE" + }, + { + "name": "cpt", + "type": "int" + } + ], + "PathToRegion": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "PolyDraw": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "aj", + "type": "BYTE" + }, + { + "name": "cpt", + "type": "int" + } + ], + "SelectClipPath": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetArcDirection": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dir", + "type": "int" + } + ], + "SetMiterLimit": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "limit", + "type": "FLOAT" + }, + { + "name": "old", + "type": "PFLOAT" + } + ], + "StrokeAndFillPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StrokePath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "WidenPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ExtCreatePen": [ + { + "name": "iPenStyle", + "type": "DWORD" + }, + { + "name": "cWidth", + "type": "DWORD" + }, + { + "name": "plbrush", + "type": "LOGBRUSH" + }, + { + "name": "cStyle", + "type": "DWORD" + }, + { + "name": "pstyle", + "type": "DWORD" + } + ], + "GetMiterLimit": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "plimit", + "type": "PFLOAT" + } + ], + "GetArcDirection": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetObjectA": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pv", + "type": "LPVOID" + } + ], + "GetObjectW": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pv", + "type": "LPVOID" + } + ], + "MoveToEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "TextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + } + ], + "TextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + } + ], + "ExtTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "options", + "type": "UINT" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "UINT" + }, + { + "name": "lpDx", + "type": "INT" + } + ], + "ExtTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "options", + "type": "UINT" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "UINT" + }, + { + "name": "lpDx", + "type": "INT" + } + ], + "PolyTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppt", + "type": "POLYTEXTA" + }, + { + "name": "nstrings", + "type": "int" + } + ], + "PolyTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppt", + "type": "POLYTEXTW" + }, + { + "name": "nstrings", + "type": "int" + } + ], + "CreatePolygonRgn": [ + { + "name": "pptl", + "type": "POINT" + }, + { + "name": "cPoint", + "type": "int" + }, + { + "name": "iMode", + "type": "int" + } + ], + "DPtoLP": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + }, + { + "name": "c", + "type": "int" + } + ], + "LPtoDP": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + }, + { + "name": "c", + "type": "int" + } + ], + "Polygon": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "int" + } + ], + "Polyline": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "int" + } + ], + "PolyBezier": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "PolyBezierTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "PolylineTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "SetViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "SetWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "OffsetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "OffsetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "ScaleViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xn", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "yn", + "type": "int" + }, + { + "name": "yd", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "ScaleWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xn", + "type": "int" + }, + { + "name": "xd", + "type": "int" + }, + { + "name": "yn", + "type": "int" + }, + { + "name": "yd", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetBitmapDimensionEx": [ + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetBrushOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetTextFaceA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpName", + "type": "LPSTR" + } + ], + "GetTextFaceW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpName", + "type": "LPWSTR" + } + ], + "GetKerningPairsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nPairs", + "type": "DWORD" + }, + { + "name": "lpKernPair", + "type": "LPKERNINGPAIR" + } + ], + "GetKerningPairsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nPairs", + "type": "DWORD" + }, + { + "name": "lpKernPair", + "type": "LPKERNINGPAIR" + } + ], + "GetDCOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "UnrealizeObject": [ + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "GdiFlush": [ + { + "name": "VOID", + "type": "void" + } + ], + "GdiSetBatchLimit": [ + { + "name": "dw", + "type": "DWORD" + } + ], + "GdiGetBatchLimit": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetICMMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "CheckColorsInGamut": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRGBTriple", + "type": "LPRGBTRIPLE" + }, + { + "name": "dlpBuffer", + "type": "LPVOID" + }, + { + "name": "nCount", + "type": "DWORD" + } + ], + "GetColorSpace": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetLogColorSpaceA": [ + { + "name": "hColorSpace", + "type": "HCOLORSPACE" + }, + { + "name": "lpBuffer", + "type": "LPLOGCOLORSPACEA" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetLogColorSpaceW": [ + { + "name": "hColorSpace", + "type": "HCOLORSPACE" + }, + { + "name": "lpBuffer", + "type": "LPLOGCOLORSPACEW" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "CreateColorSpaceA": [ + { + "name": "lplcs", + "type": "LPLOGCOLORSPACEA" + } + ], + "CreateColorSpaceW": [ + { + "name": "lplcs", + "type": "LPLOGCOLORSPACEW" + } + ], + "SetColorSpace": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hcs", + "type": "HCOLORSPACE" + } + ], + "DeleteColorSpace": [ + { + "name": "hcs", + "type": "HCOLORSPACE" + } + ], + "GetICMProfileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pBufSize", + "type": "LPDWORD" + }, + { + "name": "pszFilename", + "type": "LPSTR" + } + ], + "GetICMProfileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pBufSize", + "type": "LPDWORD" + }, + { + "name": "pszFilename", + "type": "LPWSTR" + } + ], + "SetICMProfileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFileName", + "type": "LPSTR" + } + ], + "SetICMProfileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFileName", + "type": "LPWSTR" + } + ], + "GetDeviceGammaRamp": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRamp", + "type": "LPVOID" + } + ], + "SetDeviceGammaRamp": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRamp", + "type": "LPVOID" + } + ], + "ColorMatchToTarget": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hdcTarget", + "type": "HDC" + }, + { + "name": "action", + "type": "DWORD" + } + ], + "EnumICMProfilesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ICMENUMPROCA" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "EnumICMProfilesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ICMENUMPROCW" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "UpdateICMRegKeyA": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "lpszCMID", + "type": "LPSTR" + }, + { + "name": "lpszFileName", + "type": "LPSTR" + }, + { + "name": "command", + "type": "UINT" + } + ], + "UpdateICMRegKeyW": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "lpszCMID", + "type": "LPWSTR" + }, + { + "name": "lpszFileName", + "type": "LPWSTR" + }, + { + "name": "command", + "type": "UINT" + } + ], + "ColorCorrectPalette": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "deFirst", + "type": "DWORD" + }, + { + "name": "num", + "type": "DWORD" + } + ], + "wglCopyContext": [ + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "UINT" + } + ], + "wglCreateContext": [ + { + "name": "VOID", + "type": "HDC" + } + ], + "wglCreateLayerContext": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + } + ], + "wglDeleteContext": [ + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglGetCurrentContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "wglGetCurrentDC": [ + { + "name": "VOID", + "type": "void" + } + ], + "wglGetProcAddress": [ + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "wglMakeCurrent": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglShareLists": [ + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglUseFontBitmapsA": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "wglUseFontBitmapsW": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "SwapBuffers": [ + { + "name": "VOID", + "type": "HDC" + } + ], + "wglUseFontOutlinesA": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "LPGLYPHMETRICSFLOAT" + } + ], + "wglUseFontOutlinesW": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "LPGLYPHMETRICSFLOAT" + } + ], + "wglDescribeLayerPlane": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "LPLAYERPLANEDESCRIPTOR" + } + ], + "wglSetLayerPaletteEntries": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "COLORREF" + } + ], + "wglGetLayerPaletteEntries": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "COLORREF" + } + ], + "wglRealizeLayerPalette": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "wglSwapLayerBuffers": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mmddk.json b/qiling/extensions/windows_sdk/Winmm.json similarity index 100% rename from qiling/extensions/windows_sdk/mmddk.json rename to qiling/extensions/windows_sdk/Winmm.json diff --git a/qiling/extensions/windows_sdk/wmsdkidl.json b/qiling/extensions/windows_sdk/Wmvcore.json similarity index 100% rename from qiling/extensions/windows_sdk/wmsdkidl.json rename to qiling/extensions/windows_sdk/Wmvcore.json diff --git a/qiling/extensions/windows_sdk/winsock2.json b/qiling/extensions/windows_sdk/Ws2_32.json similarity index 100% rename from qiling/extensions/windows_sdk/winsock2.json rename to qiling/extensions/windows_sdk/Ws2_32.json diff --git a/qiling/extensions/windows_sdk/wsdxml.json b/qiling/extensions/windows_sdk/Wsdapi.json similarity index 100% rename from qiling/extensions/windows_sdk/wsdxml.json rename to qiling/extensions/windows_sdk/Wsdapi.json diff --git a/qiling/extensions/windows_sdk/winsnmp.json b/qiling/extensions/windows_sdk/Wsnmp32.json similarity index 100% rename from qiling/extensions/windows_sdk/winsnmp.json rename to qiling/extensions/windows_sdk/Wsnmp32.json diff --git a/qiling/extensions/windows_sdk/aclapi.json b/qiling/extensions/windows_sdk/aclapi.json deleted file mode 100644 index fefad2313..000000000 --- a/qiling/extensions/windows_sdk/aclapi.json +++ /dev/null @@ -1,956 +0,0 @@ -{ - "SetEntriesInAclA": [ - { - "name": "cCountOfExplicitEntries", - "type": "ULONG" - }, - { - "name": "pListOfExplicitEntries", - "type": "PEXPLICIT_ACCESS_A" - }, - { - "name": "OldAcl", - "type": "PACL" - }, - { - "name": "NewAcl", - "type": "PACL" - } - ], - "SetEntriesInAclW": [ - { - "name": "cCountOfExplicitEntries", - "type": "ULONG" - }, - { - "name": "pListOfExplicitEntries", - "type": "PEXPLICIT_ACCESS_W" - }, - { - "name": "OldAcl", - "type": "PACL" - }, - { - "name": "NewAcl", - "type": "PACL" - } - ], - "GetExplicitEntriesFromAclA": [ - { - "name": "pacl", - "type": "PACL" - }, - { - "name": "pcCountOfExplicitEntries", - "type": "PULONG" - }, - { - "name": "pListOfExplicitEntries", - "type": "PEXPLICIT_ACCESS_A" - } - ], - "GetExplicitEntriesFromAclW": [ - { - "name": "pacl", - "type": "PACL" - }, - { - "name": "pcCountOfExplicitEntries", - "type": "PULONG" - }, - { - "name": "pListOfExplicitEntries", - "type": "PEXPLICIT_ACCESS_W" - } - ], - "GetEffectiveRightsFromAclA": [ - { - "name": "pacl", - "type": "PACL" - }, - { - "name": "pTrustee", - "type": "PTRUSTEE_A" - }, - { - "name": "pAccessRights", - "type": "PACCESS_MASK" - } - ], - "GetEffectiveRightsFromAclW": [ - { - "name": "pacl", - "type": "PACL" - }, - { - "name": "pTrustee", - "type": "PTRUSTEE_W" - }, - { - "name": "pAccessRights", - "type": "PACCESS_MASK" - } - ], - "GetAuditedPermissionsFromAclA": [ - { - "name": "pacl", - "type": "PACL" - }, - { - "name": "pTrustee", - "type": "PTRUSTEE_A" - }, - { - "name": "pSuccessfulAuditedRights", - "type": "PACCESS_MASK" - }, - { - "name": "pFailedAuditRights", - "type": "PACCESS_MASK" - } - ], - "GetAuditedPermissionsFromAclW": [ - { - "name": "pacl", - "type": "PACL" - }, - { - "name": "pTrustee", - "type": "PTRUSTEE_W" - }, - { - "name": "pSuccessfulAuditedRights", - "type": "PACCESS_MASK" - }, - { - "name": "pFailedAuditRights", - "type": "PACCESS_MASK" - } - ], - "GetNamedSecurityInfoA": [ - { - "name": "pObjectName", - "type": "LPCSTR" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "SecurityInfo", - "type": "SECURITY_INFORMATION" - }, - { - "name": "ppsidOwner", - "type": "PSID" - }, - { - "name": "ppsidGroup", - "type": "PSID" - }, - { - "name": "ppDacl", - "type": "PACL" - }, - { - "name": "ppSacl", - "type": "PACL" - }, - { - "name": "ppSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "GetNamedSecurityInfoW": [ - { - "name": "pObjectName", - "type": "LPCWSTR" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "SecurityInfo", - "type": "SECURITY_INFORMATION" - }, - { - "name": "ppsidOwner", - "type": "PSID" - }, - { - "name": "ppsidGroup", - "type": "PSID" - }, - { - "name": "ppDacl", - "type": "PACL" - }, - { - "name": "ppSacl", - "type": "PACL" - }, - { - "name": "ppSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "GetSecurityInfo": [ - { - "name": "handle", - "type": "HANDLE" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "SecurityInfo", - "type": "SECURITY_INFORMATION" - }, - { - "name": "ppsidOwner", - "type": "PSID" - }, - { - "name": "ppsidGroup", - "type": "PSID" - }, - { - "name": "ppDacl", - "type": "PACL" - }, - { - "name": "ppSacl", - "type": "PACL" - }, - { - "name": "ppSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "SetNamedSecurityInfoA": [ - { - "name": "pObjectName", - "type": "LPSTR" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "SecurityInfo", - "type": "SECURITY_INFORMATION" - }, - { - "name": "psidOwner", - "type": "PSID" - }, - { - "name": "psidGroup", - "type": "PSID" - }, - { - "name": "pDacl", - "type": "PACL" - }, - { - "name": "pSacl", - "type": "PACL" - } - ], - "SetNamedSecurityInfoW": [ - { - "name": "pObjectName", - "type": "LPWSTR" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "SecurityInfo", - "type": "SECURITY_INFORMATION" - }, - { - "name": "psidOwner", - "type": "PSID" - }, - { - "name": "psidGroup", - "type": "PSID" - }, - { - "name": "pDacl", - "type": "PACL" - }, - { - "name": "pSacl", - "type": "PACL" - } - ], - "SetSecurityInfo": [ - { - "name": "handle", - "type": "HANDLE" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "SecurityInfo", - "type": "SECURITY_INFORMATION" - }, - { - "name": "psidOwner", - "type": "PSID" - }, - { - "name": "psidGroup", - "type": "PSID" - }, - { - "name": "pDacl", - "type": "PACL" - }, - { - "name": "pSacl", - "type": "PACL" - } - ], - "GetInheritanceSourceA": [ - { - "name": "pObjectName", - "type": "LPSTR" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "SecurityInfo", - "type": "SECURITY_INFORMATION" - }, - { - "name": "Container", - "type": "BOOL" - }, - { - "name": "pObjectClassGuids", - "type": "GUID" - }, - { - "name": "GuidCount", - "type": "DWORD" - }, - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "pfnArray", - "type": "PFN_OBJECT_MGR_FUNCTS" - }, - { - "name": "pGenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "pInheritArray", - "type": "PINHERITED_FROMA" - } - ], - "GetInheritanceSourceW": [ - { - "name": "pObjectName", - "type": "LPWSTR" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "SecurityInfo", - "type": "SECURITY_INFORMATION" - }, - { - "name": "Container", - "type": "BOOL" - }, - { - "name": "pObjectClassGuids", - "type": "GUID" - }, - { - "name": "GuidCount", - "type": "DWORD" - }, - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "pfnArray", - "type": "PFN_OBJECT_MGR_FUNCTS" - }, - { - "name": "pGenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "pInheritArray", - "type": "PINHERITED_FROMW" - } - ], - "FreeInheritedFromArray": [ - { - "name": "pInheritArray", - "type": "PINHERITED_FROMW" - }, - { - "name": "AceCnt", - "type": "USHORT" - }, - { - "name": "pfnArray", - "type": "PFN_OBJECT_MGR_FUNCTS" - } - ], - "TreeResetNamedSecurityInfoA": [ - { - "name": "pObjectName", - "type": "LPSTR" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "SecurityInfo", - "type": "SECURITY_INFORMATION" - }, - { - "name": "pOwner", - "type": "PSID" - }, - { - "name": "pGroup", - "type": "PSID" - }, - { - "name": "pDacl", - "type": "PACL" - }, - { - "name": "pSacl", - "type": "PACL" - }, - { - "name": "KeepExplicit", - "type": "BOOL" - }, - { - "name": "fnProgress", - "type": "FN_PROGRESS" - }, - { - "name": "ProgressInvokeSetting", - "type": "PROG_INVOKE_SETTING" - }, - { - "name": "Args", - "type": "PVOID" - } - ], - "TreeResetNamedSecurityInfoW": [ - { - "name": "pObjectName", - "type": "LPWSTR" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "SecurityInfo", - "type": "SECURITY_INFORMATION" - }, - { - "name": "pOwner", - "type": "PSID" - }, - { - "name": "pGroup", - "type": "PSID" - }, - { - "name": "pDacl", - "type": "PACL" - }, - { - "name": "pSacl", - "type": "PACL" - }, - { - "name": "KeepExplicit", - "type": "BOOL" - }, - { - "name": "fnProgress", - "type": "FN_PROGRESS" - }, - { - "name": "ProgressInvokeSetting", - "type": "PROG_INVOKE_SETTING" - }, - { - "name": "Args", - "type": "PVOID" - } - ], - "TreeSetNamedSecurityInfoA": [ - { - "name": "pObjectName", - "type": "LPSTR" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "SecurityInfo", - "type": "SECURITY_INFORMATION" - }, - { - "name": "pOwner", - "type": "PSID" - }, - { - "name": "pGroup", - "type": "PSID" - }, - { - "name": "pDacl", - "type": "PACL" - }, - { - "name": "pSacl", - "type": "PACL" - }, - { - "name": "dwAction", - "type": "DWORD" - }, - { - "name": "fnProgress", - "type": "FN_PROGRESS" - }, - { - "name": "ProgressInvokeSetting", - "type": "PROG_INVOKE_SETTING" - }, - { - "name": "Args", - "type": "PVOID" - } - ], - "TreeSetNamedSecurityInfoW": [ - { - "name": "pObjectName", - "type": "LPWSTR" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "SecurityInfo", - "type": "SECURITY_INFORMATION" - }, - { - "name": "pOwner", - "type": "PSID" - }, - { - "name": "pGroup", - "type": "PSID" - }, - { - "name": "pDacl", - "type": "PACL" - }, - { - "name": "pSacl", - "type": "PACL" - }, - { - "name": "dwAction", - "type": "DWORD" - }, - { - "name": "fnProgress", - "type": "FN_PROGRESS" - }, - { - "name": "ProgressInvokeSetting", - "type": "PROG_INVOKE_SETTING" - }, - { - "name": "Args", - "type": "PVOID" - } - ], - "BuildSecurityDescriptorA": [ - { - "name": "pOwner", - "type": "PTRUSTEE_A" - }, - { - "name": "pGroup", - "type": "PTRUSTEE_A" - }, - { - "name": "cCountOfAccessEntries", - "type": "ULONG" - }, - { - "name": "pListOfAccessEntries", - "type": "PEXPLICIT_ACCESS_A" - }, - { - "name": "cCountOfAuditEntries", - "type": "ULONG" - }, - { - "name": "pListOfAuditEntries", - "type": "PEXPLICIT_ACCESS_A" - }, - { - "name": "pOldSD", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "pSizeNewSD", - "type": "PULONG" - }, - { - "name": "pNewSD", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "BuildSecurityDescriptorW": [ - { - "name": "pOwner", - "type": "PTRUSTEE_W" - }, - { - "name": "pGroup", - "type": "PTRUSTEE_W" - }, - { - "name": "cCountOfAccessEntries", - "type": "ULONG" - }, - { - "name": "pListOfAccessEntries", - "type": "PEXPLICIT_ACCESS_W" - }, - { - "name": "cCountOfAuditEntries", - "type": "ULONG" - }, - { - "name": "pListOfAuditEntries", - "type": "PEXPLICIT_ACCESS_W" - }, - { - "name": "pOldSD", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "pSizeNewSD", - "type": "PULONG" - }, - { - "name": "pNewSD", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "LookupSecurityDescriptorPartsA": [ - { - "name": "ppOwner", - "type": "PTRUSTEE_A" - }, - { - "name": "ppGroup", - "type": "PTRUSTEE_A" - }, - { - "name": "pcCountOfAccessEntries", - "type": "PULONG" - }, - { - "name": "ppListOfAccessEntries", - "type": "PEXPLICIT_ACCESS_A" - }, - { - "name": "pcCountOfAuditEntries", - "type": "PULONG" - }, - { - "name": "ppListOfAuditEntries", - "type": "PEXPLICIT_ACCESS_A" - }, - { - "name": "pSD", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "LookupSecurityDescriptorPartsW": [ - { - "name": "ppOwner", - "type": "PTRUSTEE_W" - }, - { - "name": "ppGroup", - "type": "PTRUSTEE_W" - }, - { - "name": "pcCountOfAccessEntries", - "type": "PULONG" - }, - { - "name": "ppListOfAccessEntries", - "type": "PEXPLICIT_ACCESS_W" - }, - { - "name": "pcCountOfAuditEntries", - "type": "PULONG" - }, - { - "name": "ppListOfAuditEntries", - "type": "PEXPLICIT_ACCESS_W" - }, - { - "name": "pSD", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "BuildExplicitAccessWithNameA": [ - { - "name": "pExplicitAccess", - "type": "PEXPLICIT_ACCESS_A" - }, - { - "name": "pTrusteeName", - "type": "LPSTR" - }, - { - "name": "AccessPermissions", - "type": "DWORD" - }, - { - "name": "AccessMode", - "type": "ACCESS_MODE" - }, - { - "name": "Inheritance", - "type": "DWORD" - } - ], - "BuildExplicitAccessWithNameW": [ - { - "name": "pExplicitAccess", - "type": "PEXPLICIT_ACCESS_W" - }, - { - "name": "pTrusteeName", - "type": "LPWSTR" - }, - { - "name": "AccessPermissions", - "type": "DWORD" - }, - { - "name": "AccessMode", - "type": "ACCESS_MODE" - }, - { - "name": "Inheritance", - "type": "DWORD" - } - ], - "BuildTrusteeWithNameA": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_A" - }, - { - "name": "pName", - "type": "LPSTR" - } - ], - "BuildTrusteeWithNameW": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_W" - }, - { - "name": "pName", - "type": "LPWSTR" - } - ], - "BuildTrusteeWithSidA": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_A" - }, - { - "name": "pSid", - "type": "PSID" - } - ], - "BuildTrusteeWithSidW": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_W" - }, - { - "name": "pSid", - "type": "PSID" - } - ], - "BuildTrusteeWithObjectsAndSidA": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_A" - }, - { - "name": "pObjSid", - "type": "POBJECTS_AND_SID" - }, - { - "name": "pObjectGuid", - "type": "GUID" - }, - { - "name": "pInheritedObjectGuid", - "type": "GUID" - }, - { - "name": "pSid", - "type": "PSID" - } - ], - "BuildTrusteeWithObjectsAndSidW": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_W" - }, - { - "name": "pObjSid", - "type": "POBJECTS_AND_SID" - }, - { - "name": "pObjectGuid", - "type": "GUID" - }, - { - "name": "pInheritedObjectGuid", - "type": "GUID" - }, - { - "name": "pSid", - "type": "PSID" - } - ], - "BuildTrusteeWithObjectsAndNameA": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_A" - }, - { - "name": "pObjName", - "type": "POBJECTS_AND_NAME_A" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "ObjectTypeName", - "type": "LPSTR" - }, - { - "name": "InheritedObjectTypeName", - "type": "LPSTR" - }, - { - "name": "Name", - "type": "LPSTR" - } - ], - "BuildTrusteeWithObjectsAndNameW": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_W" - }, - { - "name": "pObjName", - "type": "POBJECTS_AND_NAME_W" - }, - { - "name": "ObjectType", - "type": "SE_OBJECT_TYPE" - }, - { - "name": "ObjectTypeName", - "type": "LPWSTR" - }, - { - "name": "InheritedObjectTypeName", - "type": "LPWSTR" - }, - { - "name": "Name", - "type": "LPWSTR" - } - ], - "GetTrusteeNameA": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_A" - } - ], - "GetTrusteeNameW": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_W" - } - ], - "GetTrusteeTypeA": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_A" - } - ], - "GetTrusteeTypeW": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_W" - } - ], - "GetTrusteeFormA": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_A" - } - ], - "GetTrusteeFormW": [ - { - "name": "pTrustee", - "type": "PTRUSTEE_W" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/advpub.json b/qiling/extensions/windows_sdk/advpack.json similarity index 100% rename from qiling/extensions/windows_sdk/advpub.json rename to qiling/extensions/windows_sdk/advpack.json diff --git a/qiling/extensions/windows_sdk/appmodel.json b/qiling/extensions/windows_sdk/api-ms-win-appmodel-runtime-l1-1-2.json similarity index 100% rename from qiling/extensions/windows_sdk/appmodel.json rename to qiling/extensions/windows_sdk/api-ms-win-appmodel-runtime-l1-1-2.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0.json b/qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0.json new file mode 100644 index 000000000..1142355a7 --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0.json @@ -0,0 +1,146 @@ +{ + "IsEnclaveTypeSupported": [ + { + "name": "flEnclaveType", + "type": "DWORD" + } + ], + "CreateEnclave": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "dwInitialCommitment", + "type": "SIZE_T" + }, + { + "name": "flEnclaveType", + "type": "DWORD" + }, + { + "name": "lpEnclaveInformation", + "type": "LPCVOID" + }, + { + "name": "dwInfoLength", + "type": "DWORD" + }, + { + "name": "lpEnclaveError", + "type": "LPDWORD" + } + ], + "LoadEnclaveData": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nSize", + "type": "SIZE_T" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "lpPageInformation", + "type": "LPCVOID" + }, + { + "name": "dwInfoLength", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "PSIZE_T" + }, + { + "name": "lpEnclaveError", + "type": "LPDWORD" + } + ], + "InitializeEnclave": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "lpEnclaveInformation", + "type": "LPCVOID" + }, + { + "name": "dwInfoLength", + "type": "DWORD" + }, + { + "name": "lpEnclaveError", + "type": "LPDWORD" + } + ], + "LoadEnclaveImageW": [ + { + "name": "lpEnclaveAddress", + "type": "LPVOID" + }, + { + "name": "lpImageName", + "type": "LPCWSTR" + } + ], + "CallEnclave": [ + { + "name": "lpRoutine", + "type": "LPENCLAVE_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "fWaitForThread", + "type": "BOOL" + }, + { + "name": "lpReturnValue", + "type": "LPVOID" + } + ], + "TerminateEnclave": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "fWait", + "type": "BOOL" + } + ], + "DeleteEnclave": [ + { + "name": "lpAddress", + "type": "LPVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/featurestagingapi.json b/qiling/extensions/windows_sdk/api-ms-win-core-featurestaging-l1-1-0.json similarity index 100% rename from qiling/extensions/windows_sdk/featurestagingapi.json rename to qiling/extensions/windows_sdk/api-ms-win-core-featurestaging-l1-1-0.json diff --git a/qiling/extensions/windows_sdk/heapapi.json b/qiling/extensions/windows_sdk/api-ms-win-core-heap-l1-1-0.json similarity index 100% rename from qiling/extensions/windows_sdk/heapapi.json rename to qiling/extensions/windows_sdk/api-ms-win-core-heap-l1-1-0.json diff --git a/qiling/extensions/windows_sdk/libloaderapi2.json b/qiling/extensions/windows_sdk/api-ms-win-core-libraryloader-l1-1-1.json similarity index 100% rename from qiling/extensions/windows_sdk/libloaderapi2.json rename to qiling/extensions/windows_sdk/api-ms-win-core-libraryloader-l1-1-1.json diff --git a/qiling/extensions/windows_sdk/winver.json b/qiling/extensions/windows_sdk/api-ms-win-core-localization-l1-2-1.json similarity index 100% rename from qiling/extensions/windows_sdk/winver.json rename to qiling/extensions/windows_sdk/api-ms-win-core-localization-l1-2-1.json diff --git a/qiling/extensions/windows_sdk/memoryapi.json b/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-4.json similarity index 100% rename from qiling/extensions/windows_sdk/memoryapi.json rename to qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-4.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5.json b/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5.json new file mode 100644 index 000000000..e487090ad --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5.json @@ -0,0 +1,914 @@ +{ + "VirtualAlloc": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flAllocationType", + "type": "DWORD" + }, + { + "name": "flProtect", + "type": "DWORD" + } + ], + "VirtualProtect": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flNewProtect", + "type": "DWORD" + }, + { + "name": "lpflOldProtect", + "type": "PDWORD" + } + ], + "VirtualFree": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "dwFreeType", + "type": "DWORD" + } + ], + "VirtualQuery": [ + { + "name": "lpAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "PMEMORY_BASIC_INFORMATION" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "VirtualAllocEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flAllocationType", + "type": "DWORD" + }, + { + "name": "flProtect", + "type": "DWORD" + } + ], + "VirtualProtectEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flNewProtect", + "type": "DWORD" + }, + { + "name": "lpflOldProtect", + "type": "PDWORD" + } + ], + "VirtualQueryEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "PMEMORY_BASIC_INFORMATION" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "ReadProcessMemory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nSize", + "type": "SIZE_T" + }, + { + "name": "lpNumberOfBytesRead", + "type": "SIZE_T" + } + ], + "WriteProcessMemory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpBaseAddress", + "type": "LPVOID" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nSize", + "type": "SIZE_T" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "SIZE_T" + } + ], + "MapViewOfFile": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwNumberOfBytesToMap", + "type": "SIZE_T" + } + ], + "MapViewOfFileEx": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwNumberOfBytesToMap", + "type": "SIZE_T" + }, + { + "name": "lpBaseAddress", + "type": "LPVOID" + } + ], + "VirtualFreeEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "dwFreeType", + "type": "DWORD" + } + ], + "FlushViewOfFile": [ + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "dwNumberOfBytesToFlush", + "type": "SIZE_T" + } + ], + "UnmapViewOfFile": [ + { + "name": "lpBaseAddress", + "type": "LPCVOID" + } + ], + "GetLargePageMinimum": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetProcessWorkingSetSizeEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpMinimumWorkingSetSize", + "type": "PSIZE_T" + }, + { + "name": "lpMaximumWorkingSetSize", + "type": "PSIZE_T" + }, + { + "name": "Flags", + "type": "PDWORD" + } + ], + "SetProcessWorkingSetSizeEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwMinimumWorkingSetSize", + "type": "SIZE_T" + }, + { + "name": "dwMaximumWorkingSetSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "VirtualLock": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + } + ], + "VirtualUnlock": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + } + ], + "GetWriteWatch": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpBaseAddress", + "type": "PVOID" + }, + { + "name": "dwRegionSize", + "type": "SIZE_T" + }, + { + "name": "lpAddresses", + "type": "PVOID" + }, + { + "name": "lpdwCount", + "type": "ULONG_PTR" + }, + { + "name": "lpdwGranularity", + "type": "LPDWORD" + } + ], + "ResetWriteWatch": [ + { + "name": "lpBaseAddress", + "type": "LPVOID" + }, + { + "name": "dwRegionSize", + "type": "SIZE_T" + } + ], + "CreateMemoryResourceNotification": [ + { + "name": "NotificationType", + "type": "MEMORY_RESOURCE_NOTIFICATION_TYPE" + } + ], + "QueryMemoryResourceNotification": [ + { + "name": "ResourceNotificationHandle", + "type": "HANDLE" + }, + { + "name": "ResourceState", + "type": "PBOOL" + } + ], + "GetSystemFileCacheSize": [ + { + "name": "lpMinimumFileCacheSize", + "type": "PSIZE_T" + }, + { + "name": "lpMaximumFileCacheSize", + "type": "PSIZE_T" + }, + { + "name": "lpFlags", + "type": "PDWORD" + } + ], + "SetSystemFileCacheSize": [ + { + "name": "MinimumFileCacheSize", + "type": "SIZE_T" + }, + { + "name": "MaximumFileCacheSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "PrefetchVirtualMemory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfEntries", + "type": "ULONG_PTR" + }, + { + "name": "VirtualAddresses", + "type": "PWIN32_MEMORY_RANGE_ENTRY" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "CreateFileMappingFromApp": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "SecurityAttributes", + "type": "PSECURITY_ATTRIBUTES" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "MaximumSize", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCWSTR" + } + ], + "MapViewOfFileFromApp": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "ULONG" + }, + { + "name": "FileOffset", + "type": "ULONG64" + }, + { + "name": "NumberOfBytesToMap", + "type": "SIZE_T" + } + ], + "UnmapViewOfFileEx": [ + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "UnmapFlags", + "type": "ULONG" + } + ], + "AllocateUserPhysicalPages": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfPages", + "type": "PULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "FreeUserPhysicalPages": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfPages", + "type": "PULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "MapUserPhysicalPages": [ + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "NumberOfPages", + "type": "ULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "AllocateUserPhysicalPagesNuma": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfPages", + "type": "PULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "VirtualAllocExNuma": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flAllocationType", + "type": "DWORD" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "GetMemoryErrorHandlingCapabilities": [ + { + "name": "Capabilities", + "type": "PULONG" + } + ], + "RegisterBadMemoryNotification": [ + { + "name": "Callback", + "type": "PBAD_MEMORY_CALLBACK_ROUTINE" + } + ], + "UnregisterBadMemoryNotification": [ + { + "name": "RegistrationHandle", + "type": "PVOID" + } + ], + "OfferVirtualMemory": [ + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "Priority", + "type": "OFFER_PRIORITY" + } + ], + "ReclaimVirtualMemory": [ + { + "name": "VirtualAddress", + "type": "void" + }, + { + "name": "Size", + "type": "SIZE_T" + } + ], + "DiscardVirtualMemory": [ + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + } + ], + "SetProcessValidCallTargets": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "RegionSize", + "type": "SIZE_T" + }, + { + "name": "NumberOfOffsets", + "type": "ULONG" + }, + { + "name": "OffsetInformation", + "type": "PCFG_CALL_TARGET_INFO" + } + ], + "VirtualAllocFromApp": [ + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "Protection", + "type": "ULONG" + } + ], + "VirtualProtectFromApp": [ + { + "name": "Address", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "NewProtection", + "type": "ULONG" + }, + { + "name": "OldProtection", + "type": "PULONG" + } + ], + "OpenFileMappingFromApp": [ + { + "name": "DesiredAccess", + "type": "ULONG" + }, + { + "name": "InheritHandle", + "type": "BOOL" + }, + { + "name": "Name", + "type": "PCWSTR" + } + ], + "QueryVirtualMemoryInformation": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "VirtualAddress", + "type": "void" + }, + { + "name": "MemoryInformationClass", + "type": "WIN32_MEMORY_INFORMATION_CLASS" + }, + { + "name": "MemoryInformation", + "type": "PVOID" + }, + { + "name": "MemoryInformationSize", + "type": "SIZE_T" + }, + { + "name": "ReturnSize", + "type": "PSIZE_T" + } + ], + "MapViewOfFileNuma2": [ + { + "name": "FileMappingHandle", + "type": "HANDLE" + }, + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "PreferredNode", + "type": "ULONG" + } + ], + "MapViewOfFile2": [ + { + "name": "FileMappingHandle", + "type": "HANDLE" + }, + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + } + ], + "UnmapViewOfFile2": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "UnmapFlags", + "type": "ULONG" + } + ], + "VirtualAlloc2": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "MapViewOfFile3": [ + { + "name": "FileMapping", + "type": "HANDLE" + }, + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "VirtualAlloc2FromApp": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "MapViewOfFile3FromApp": [ + { + "name": "FileMapping", + "type": "HANDLE" + }, + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/processenv.json b/qiling/extensions/windows_sdk/api-ms-win-core-processenvironment-l1-1-0.json similarity index 100% rename from qiling/extensions/windows_sdk/processenv.json rename to qiling/extensions/windows_sdk/api-ms-win-core-processenvironment-l1-1-0.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0.json b/qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0.json new file mode 100644 index 000000000..48dd28d3f --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0.json @@ -0,0 +1,956 @@ +{ + "SLOpen": [ + { + "name": "phSLC", + "type": "HSLC" + } + ], + "SLClose": [ + { + "name": "hSLC", + "type": "HSLC" + } + ], + "SLInstallProofOfPurchase": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "PBYTE" + }, + { + "name": "pPkeyId", + "type": "SLID" + } + ], + "SLInstallProofOfPurchaseEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "PBYTE" + }, + { + "name": "pPkeyId", + "type": "SLID" + } + ], + "SLUninstallProofOfPurchase": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pPKeyId", + "type": "SLID" + } + ], + "SLInstallLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbLicenseBlob", + "type": "UINT" + }, + { + "name": "pbLicenseBlob", + "type": "BYTE" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLUninstallLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLConsumeRight": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszRightName", + "type": "PCWSTR" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "SLGetProductSkuInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetPKeyInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pPKeyId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetLicenseInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pSLLicenseId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetLicensingStatusInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pAppID", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszRightName", + "type": "PCWSTR" + }, + { + "name": "pnStatusCount", + "type": "UINT" + }, + { + "name": "ppLicensingStatus", + "type": "SL_LICENSING_STATUS" + } + ], + "SLGetPolicyInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetPolicyInformationDWORD": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "pdwValue", + "type": "DWORD" + } + ], + "SLGetServiceInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetApplicationInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLActivateProduct": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "cbAppSpecificData", + "type": "UINT" + }, + { + "name": "pvAppSpecificData", + "type": "PVOID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "pwszProxyServer", + "type": "PCWSTR" + }, + { + "name": "wProxyPort", + "type": "WORD" + } + ], + "SLGetServerStatus": [ + { + "name": "pwszServerURL", + "type": "PCWSTR" + }, + { + "name": "pwszAcquisitionType", + "type": "PCWSTR" + }, + { + "name": "pwszProxyServer", + "type": "PCWSTR" + }, + { + "name": "wProxyPort", + "type": "WORD" + }, + { + "name": "phrStatus", + "type": "HRESULT" + } + ], + "SLReArm": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGenerateOfflineInstallationId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "ppwszInstallationId", + "type": "PWSTR" + } + ], + "SLGenerateOfflineInstallationIdEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "ppwszInstallationId", + "type": "PWSTR" + } + ], + "SLDepositOfflineConfirmationId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pwszInstallationId", + "type": "PCWSTR" + }, + { + "name": "pwszConfirmationId", + "type": "PCWSTR" + } + ], + "SLDepositOfflineConfirmationIdEx": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pActivationInfo", + "type": "SL_ACTIVATION_INFO_HEADER" + }, + { + "name": "pwszInstallationId", + "type": "PCWSTR" + }, + { + "name": "pwszConfirmationId", + "type": "PCWSTR" + } + ], + "SLGetPKeyId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszPKeyAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pwszPKeyString", + "type": "PCWSTR" + }, + { + "name": "cbPKeySpecificData", + "type": "UINT" + }, + { + "name": "pbPKeySpecificData", + "type": "BYTE" + }, + { + "name": "pPKeyId", + "type": "SLID" + } + ], + "SLGetInstalledProductKeyIds": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pnProductKeyIds", + "type": "UINT" + }, + { + "name": "ppProductKeyIds", + "type": "SLID" + } + ], + "SLSetCurrentProductKey": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pProductKeyId", + "type": "SLID" + } + ], + "SLGetSLIDList": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "eQueryIdType", + "type": "SLIDTYPE" + }, + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "eReturnIdType", + "type": "SLIDTYPE" + }, + { + "name": "pnReturnIds", + "type": "UINT" + }, + { + "name": "ppReturnIds", + "type": "SLID" + } + ], + "SLGetLicenseFileId": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbLicenseBlob", + "type": "UINT" + }, + { + "name": "pbLicenseBlob", + "type": "BYTE" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + } + ], + "SLGetLicense": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pLicenseFileId", + "type": "SLID" + }, + { + "name": "pcbLicenseFile", + "type": "UINT" + }, + { + "name": "ppbLicenseFile", + "type": "PBYTE" + } + ], + "SLFireEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + } + ], + "SLRegisterEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "SLUnregisterEvent": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pwszEventId", + "type": "PCWSTR" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "SLGetWindowsInformation": [ + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLGetWindowsInformationDWORD": [ + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "pdwValue", + "type": "DWORD" + } + ], + "SLIsGenuineLocal": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pGenuineState", + "type": "SL_GENUINE_STATE" + }, + { + "name": "pUIOptions", + "type": "SL_NONGENUINE_UI_OPTIONS" + } + ], + "SLIsGenuineLocalEx": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pSkuId", + "type": "SLID" + }, + { + "name": "pGenuineState", + "type": "SL_GENUINE_STATE" + } + ], + "SLAcquireGenuineTicket": [ + { + "name": "ppTicketBlob", + "type": "void" + }, + { + "name": "pcbTicketBlob", + "type": "UINT" + }, + { + "name": "pwszTemplateId", + "type": "PCWSTR" + }, + { + "name": "pwszServerUrl", + "type": "PCWSTR" + }, + { + "name": "pwszClientToken", + "type": "PCWSTR" + } + ], + "SLSetGenuineInformation": [ + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "eDataType", + "type": "SLDATATYPE" + }, + { + "name": "cbValue", + "type": "UINT" + }, + { + "name": "pbValue", + "type": "BYTE" + } + ], + "SLGetReferralInformation": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "eReferralType", + "type": "SLREFERRALTYPE" + }, + { + "name": "pSkuOrAppId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "ppwszValue", + "type": "PWSTR" + } + ], + "SLPersistRTSPayloadOverride": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SLPersistApplicationPolicies": [ + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGetApplicationPolicy": [ + { + "name": "hPolicyContext", + "type": "HSLP" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLLoadApplicationPolicies": [ + { + "name": "pApplicationId", + "type": "SLID" + }, + { + "name": "pProductSkuId", + "type": "SLID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPolicyContext", + "type": "HSLP" + } + ], + "SLUnloadApplicationPolicies": [ + { + "name": "hPolicyContext", + "type": "HSLP" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SLGetAuthenticationResult": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "PBYTE" + } + ], + "SLSetAuthenticationData": [ + { + "name": "hSLC", + "type": "HSLC" + }, + { + "name": "cbValue", + "type": "UINT" + }, + { + "name": "pbValue", + "type": "BYTE" + } + ], + "SLGetGenuineInformation": [ + { + "name": "pQueryId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "BYTE" + } + ], + "SLGetGenuineInformationEx": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pwszValueName", + "type": "PCWSTR" + }, + { + "name": "peDataType", + "type": "SLDATATYPE" + }, + { + "name": "pcbValue", + "type": "UINT" + }, + { + "name": "ppbValue", + "type": "BYTE" + } + ], + "SLGatherMigrationBlob": [ + { + "name": "bMigratableOnly", + "type": "BOOL" + }, + { + "name": "pwszEncryptorUri", + "type": "LPCWSTR" + }, + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SLDepositMigrationBlob": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SLQueryLicenseValueFromApp": [ + { + "name": "valueName", + "type": "PCWSTR" + }, + { + "name": "valueType", + "type": "ULONG" + }, + { + "name": "dataBuffer", + "type": "PVOID" + }, + { + "name": "dataSize", + "type": "ULONG" + }, + { + "name": "resultDataSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0.json b/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0.json new file mode 100644 index 000000000..dcceeffe9 --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0.json @@ -0,0 +1,330 @@ +{ + "VerFindFileA": [ + { + "name": "uFlags", + "type": "DWORD" + }, + { + "name": "szFileName", + "type": "LPCSTR" + }, + { + "name": "szWinDir", + "type": "LPCSTR" + }, + { + "name": "szAppDir", + "type": "LPCSTR" + }, + { + "name": "szCurDir", + "type": "LPSTR" + }, + { + "name": "puCurDirLen", + "type": "PUINT" + }, + { + "name": "szDestDir", + "type": "LPSTR" + }, + { + "name": "puDestDirLen", + "type": "PUINT" + } + ], + "VerFindFileW": [ + { + "name": "uFlags", + "type": "DWORD" + }, + { + "name": "szFileName", + "type": "LPCWSTR" + }, + { + "name": "szWinDir", + "type": "LPCWSTR" + }, + { + "name": "szAppDir", + "type": "LPCWSTR" + }, + { + "name": "szCurDir", + "type": "LPWSTR" + }, + { + "name": "puCurDirLen", + "type": "PUINT" + }, + { + "name": "szDestDir", + "type": "LPWSTR" + }, + { + "name": "puDestDirLen", + "type": "PUINT" + } + ], + "VerInstallFileA": [ + { + "name": "uFlags", + "type": "DWORD" + }, + { + "name": "szSrcFileName", + "type": "LPCSTR" + }, + { + "name": "szDestFileName", + "type": "LPCSTR" + }, + { + "name": "szSrcDir", + "type": "LPCSTR" + }, + { + "name": "szDestDir", + "type": "LPCSTR" + }, + { + "name": "szCurDir", + "type": "LPCSTR" + }, + { + "name": "szTmpFile", + "type": "LPSTR" + }, + { + "name": "puTmpFileLen", + "type": "PUINT" + } + ], + "VerInstallFileW": [ + { + "name": "uFlags", + "type": "DWORD" + }, + { + "name": "szSrcFileName", + "type": "LPCWSTR" + }, + { + "name": "szDestFileName", + "type": "LPCWSTR" + }, + { + "name": "szSrcDir", + "type": "LPCWSTR" + }, + { + "name": "szDestDir", + "type": "LPCWSTR" + }, + { + "name": "szCurDir", + "type": "LPCWSTR" + }, + { + "name": "szTmpFile", + "type": "LPWSTR" + }, + { + "name": "puTmpFileLen", + "type": "PUINT" + } + ], + "GetFileVersionInfoSizeA": [ + { + "name": "lptstrFilename", + "type": "LPCSTR" + }, + { + "name": "lpdwHandle", + "type": "LPDWORD" + } + ], + "GetFileVersionInfoSizeW": [ + { + "name": "lptstrFilename", + "type": "LPCWSTR" + }, + { + "name": "lpdwHandle", + "type": "LPDWORD" + } + ], + "GetFileVersionInfoA": [ + { + "name": "lptstrFilename", + "type": "LPCSTR" + }, + { + "name": "dwHandle", + "type": "DWORD" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetFileVersionInfoW": [ + { + "name": "lptstrFilename", + "type": "LPCWSTR" + }, + { + "name": "dwHandle", + "type": "DWORD" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetFileVersionInfoSizeExA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpwstrFilename", + "type": "LPCSTR" + }, + { + "name": "lpdwHandle", + "type": "LPDWORD" + } + ], + "GetFileVersionInfoSizeExW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpwstrFilename", + "type": "LPCWSTR" + }, + { + "name": "lpdwHandle", + "type": "LPDWORD" + } + ], + "GetFileVersionInfoExA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpwstrFilename", + "type": "LPCSTR" + }, + { + "name": "dwHandle", + "type": "DWORD" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetFileVersionInfoExW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpwstrFilename", + "type": "LPCWSTR" + }, + { + "name": "dwHandle", + "type": "DWORD" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "VerLanguageNameA": [ + { + "name": "wLang", + "type": "DWORD" + }, + { + "name": "szLang", + "type": "LPSTR" + }, + { + "name": "cchLang", + "type": "DWORD" + } + ], + "VerLanguageNameW": [ + { + "name": "wLang", + "type": "DWORD" + }, + { + "name": "szLang", + "type": "LPWSTR" + }, + { + "name": "cchLang", + "type": "DWORD" + } + ], + "VerQueryValueA": [ + { + "name": "pBlock", + "type": "LPCVOID" + }, + { + "name": "lpSubBlock", + "type": "LPCSTR" + }, + { + "name": "lplpBuffer", + "type": "LPVOID" + }, + { + "name": "puLen", + "type": "PUINT" + } + ], + "VerQueryValueW": [ + { + "name": "pBlock", + "type": "LPCVOID" + }, + { + "name": "lpSubBlock", + "type": "LPCWSTR" + }, + { + "name": "lplpBuffer", + "type": "LPVOID" + }, + { + "name": "puLen", + "type": "PUINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1.json b/qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1.json new file mode 100644 index 000000000..fa976cd6d --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1.json @@ -0,0 +1,194 @@ +{ + "RoGetErrorReportingFlags": [ + { + "name": "pflags", + "type": "UINT32" + } + ], + "RoSetErrorReportingFlags": [ + { + "name": "flags", + "type": "UINT32" + } + ], + "RoResolveRestrictedErrorInfoReference": [ + { + "name": "reference", + "type": "PCWSTR" + }, + { + "name": "ppRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "SetRestrictedErrorInfo": [ + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "GetRestrictedErrorInfo": [ + { + "name": "ppRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "RoOriginateErrorW": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "message", + "type": "PCWSTR" + } + ], + "RoOriginateError": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + } + ], + "RoTransformErrorW": [ + { + "name": "oldError", + "type": "HRESULT" + }, + { + "name": "newError", + "type": "HRESULT" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "message", + "type": "PCWSTR" + } + ], + "RoTransformError": [ + { + "name": "oldError", + "type": "HRESULT" + }, + { + "name": "newError", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + } + ], + "RoCaptureErrorContext": [ + { + "name": "hr", + "type": "HRESULT" + } + ], + "RoFailFastWithErrorContext": [ + { + "name": "hrError", + "type": "HRESULT" + } + ], + "RoOriginateLanguageException": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + }, + { + "name": "languageException", + "type": "IUnknown" + } + ], + "RoClearError": [ + { + "name": "VOID", + "type": "void" + } + ], + "RoReportUnhandledError": [ + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "RoInspectThreadErrorInfo": [ + { + "name": "targetTebAddress", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "readMemoryCallback", + "type": "PINSPECT_MEMORY_CALLBACK" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "targetErrorInfoAddress", + "type": "UINT_PTR" + } + ], + "RoInspectCapturedStackBackTrace": [ + { + "name": "targetErrorInfoAddress", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "readMemoryCallback", + "type": "PINSPECT_MEMORY_CALLBACK" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "frameCount", + "type": "UINT32" + }, + { + "name": "targetBackTraceAddress", + "type": "UINT_PTR" + } + ], + "RoReportFailedDelegate": [ + { + "name": "punkDelegate", + "type": "IUnknown" + }, + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "IsErrorPropagationEnabled": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-shcore-thread-L1-1-0.json b/qiling/extensions/windows_sdk/api-ms-win-shcore-thread-L1-1-0.json new file mode 100644 index 000000000..94251ac13 --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-shcore-thread-L1-1-0.json @@ -0,0 +1,4606 @@ +{ + "StrChrA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrChrW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrChrIA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrChrIW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrChrNW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrChrNIW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrCmpNA": [ + { + "name": "psz1", + "type": "PCSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNIA": [ + { + "name": "psz1", + "type": "PCSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNIW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCSpnA": [ + { + "name": "pszStr", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrCSpnW": [ + { + "name": "pszStr", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrCSpnIA": [ + { + "name": "pszStr", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrCSpnIW": [ + { + "name": "pszStr", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrDupA": [ + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrDupW": [ + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrFormatByteSizeEx": [ + { + "name": "ull", + "type": "ULONGLONG" + }, + { + "name": "flags", + "type": "SFBS_FLAGS" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatByteSizeA": [ + { + "name": "dw", + "type": "DWORD" + }, + { + "name": "pszBuf", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatByteSize64A": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatByteSizeW": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatKBSizeW": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFormatKBSizeA": [ + { + "name": "qdw", + "type": "LONGLONG" + }, + { + "name": "pszBuf", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrFromTimeIntervalA": [ + { + "name": "pszOut", + "type": "PSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwTimeMS", + "type": "DWORD" + }, + { + "name": "digits", + "type": "int" + } + ], + "StrFromTimeIntervalW": [ + { + "name": "pszOut", + "type": "PWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwTimeMS", + "type": "DWORD" + }, + { + "name": "digits", + "type": "int" + } + ], + "StrIsIntlEqualA": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "pszString1", + "type": "PCSTR" + }, + { + "name": "pszString2", + "type": "PCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrIsIntlEqualW": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "pszString1", + "type": "PCWSTR" + }, + { + "name": "pszString2", + "type": "PCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrNCatA": [ + { + "name": "psz1", + "type": "PSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "StrNCatW": [ + { + "name": "psz1", + "type": "PWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "StrPBrkA": [ + { + "name": "psz", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrPBrkW": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrRChrA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "pszEnd", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrRChrW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "pszEnd", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrRChrIA": [ + { + "name": "pszStart", + "type": "PCSTR" + }, + { + "name": "pszEnd", + "type": "PCSTR" + }, + { + "name": "wMatch", + "type": "WORD" + } + ], + "StrRChrIW": [ + { + "name": "pszStart", + "type": "PCWSTR" + }, + { + "name": "pszEnd", + "type": "PCWSTR" + }, + { + "name": "wMatch", + "type": "WCHAR" + } + ], + "StrRStrIA": [ + { + "name": "pszSource", + "type": "PCSTR" + }, + { + "name": "pszLast", + "type": "PCSTR" + }, + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrRStrIW": [ + { + "name": "pszSource", + "type": "PCWSTR" + }, + { + "name": "pszLast", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrSpnA": [ + { + "name": "psz", + "type": "PCSTR" + }, + { + "name": "pszSet", + "type": "PCSTR" + } + ], + "StrSpnW": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "pszSet", + "type": "PCWSTR" + } + ], + "StrStrA": [ + { + "name": "pszFirst", + "type": "PCSTR" + }, + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrStrW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrStrIA": [ + { + "name": "pszFirst", + "type": "PCSTR" + }, + { + "name": "pszSrch", + "type": "PCSTR" + } + ], + "StrStrIW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + } + ], + "StrStrNW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrStrNIW": [ + { + "name": "pszFirst", + "type": "PCWSTR" + }, + { + "name": "pszSrch", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + } + ], + "StrToIntA": [ + { + "name": "pszSrc", + "type": "PCSTR" + } + ], + "StrToIntW": [ + { + "name": "pszSrc", + "type": "PCWSTR" + } + ], + "StrToIntExA": [ + { + "name": "pszString", + "type": "PCSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "piRet", + "type": "int" + } + ], + "StrToIntExW": [ + { + "name": "pszString", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "piRet", + "type": "int" + } + ], + "StrToInt64ExA": [ + { + "name": "pszString", + "type": "PCSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "StrToInt64ExW": [ + { + "name": "pszString", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "STIF_FLAGS" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "StrTrimA": [ + { + "name": "psz", + "type": "PSTR" + }, + { + "name": "pszTrimChars", + "type": "PCSTR" + } + ], + "StrTrimW": [ + { + "name": "psz", + "type": "PWSTR" + }, + { + "name": "pszTrimChars", + "type": "PCWSTR" + } + ], + "StrCatW": [ + { + "name": "psz1", + "type": "PWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCmpW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCmpIW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCpyW": [ + { + "name": "psz1", + "type": "PWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCpyNW": [ + { + "name": "pszDst", + "type": "PWSTR" + }, + { + "name": "pszSrc", + "type": "PCWSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "StrCatBuffW": [ + { + "name": "pszDest", + "type": "PWSTR" + }, + { + "name": "pszSrc", + "type": "PCWSTR" + }, + { + "name": "cchDestBuffSize", + "type": "int" + } + ], + "StrCatBuffA": [ + { + "name": "pszDest", + "type": "PSTR" + }, + { + "name": "pszSrc", + "type": "PCSTR" + }, + { + "name": "cchDestBuffSize", + "type": "int" + } + ], + "ChrCmpIA": [ + { + "name": "w1", + "type": "WORD" + }, + { + "name": "w2", + "type": "WORD" + } + ], + "ChrCmpIW": [ + { + "name": "w1", + "type": "WCHAR" + }, + { + "name": "w2", + "type": "WCHAR" + } + ], + "wvnsprintfA": [ + { + "name": "pszDest", + "type": "PSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wvnsprintfW": [ + { + "name": "pszDest", + "type": "PWSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCWSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wnsprintfA": [ + { + "name": "pszDest", + "type": "PSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCSTR" + } + ], + "wnsprintfW": [ + { + "name": "pszDest", + "type": "PWSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "pszFmt", + "type": "PCWSTR" + } + ], + "StrRetToStrA": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsz", + "type": "LPSTR" + } + ], + "StrRetToStrW": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsz", + "type": "LPWSTR" + } + ], + "StrRetToBufA": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "StrRetToBufW": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "SHStrDupA": [ + { + "name": "psz", + "type": "LPCSTR" + }, + { + "name": "ppwsz", + "type": "LPWSTR" + } + ], + "SHStrDupW": [ + { + "name": "psz", + "type": "LPCWSTR" + }, + { + "name": "ppwsz", + "type": "LPWSTR" + } + ], + "StrCmpLogicalW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + } + ], + "StrCatChainW": [ + { + "name": "pszDst", + "type": "PWSTR" + }, + { + "name": "cchDst", + "type": "DWORD" + }, + { + "name": "ichAt", + "type": "DWORD" + }, + { + "name": "pszSrc", + "type": "PCWSTR" + } + ], + "StrRetToBSTR": [ + { + "name": "pstr", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pbstr", + "type": "BSTR" + } + ], + "SHLoadIndirectString": [ + { + "name": "pszSource", + "type": "PCWSTR" + }, + { + "name": "pszOutBuf", + "type": "PWSTR" + }, + { + "name": "cchOutBuf", + "type": "UINT" + }, + { + "name": "ppvReserved", + "type": "void" + } + ], + "IsCharSpaceA": [ + { + "name": "wch", + "type": "CHAR" + } + ], + "IsCharSpaceW": [ + { + "name": "wch", + "type": "WCHAR" + } + ], + "StrCmpCA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + } + ], + "StrCmpCW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + } + ], + "StrCmpICA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + } + ], + "StrCmpICW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + } + ], + "StrCmpNCA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNCW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNICA": [ + { + "name": "pszStr1", + "type": "LPCSTR" + }, + { + "name": "pszStr2", + "type": "LPCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "StrCmpNICW": [ + { + "name": "pszStr1", + "type": "LPCWSTR" + }, + { + "name": "pszStr2", + "type": "LPCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "IntlStrEqWorkerA": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "lpString1", + "type": "LPCSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "IntlStrEqWorkerW": [ + { + "name": "fCaseSens", + "type": "BOOL" + }, + { + "name": "lpString1", + "type": "LPCWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + }, + { + "name": "nChar", + "type": "int" + } + ], + "PathAddBackslashA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathAddBackslashW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathBuildRootA": [ + { + "name": "pszRoot", + "type": "LPSTR" + }, + { + "name": "iDrive", + "type": "int" + } + ], + "PathBuildRootW": [ + { + "name": "pszRoot", + "type": "LPWSTR" + }, + { + "name": "iDrive", + "type": "int" + } + ], + "PathCombineA": [ + { + "name": "pszDest", + "type": "LPSTR" + }, + { + "name": "pszDir", + "type": "LPCSTR" + }, + { + "name": "pszFile", + "type": "LPCSTR" + } + ], + "PathCombineW": [ + { + "name": "pszDest", + "type": "LPWSTR" + }, + { + "name": "pszDir", + "type": "LPCWSTR" + }, + { + "name": "pszFile", + "type": "LPCWSTR" + } + ], + "PathCompactPathA": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "dx", + "type": "UINT" + } + ], + "PathCompactPathW": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "dx", + "type": "UINT" + } + ], + "PathCompactPathExA": [ + { + "name": "pszOut", + "type": "LPSTR" + }, + { + "name": "pszSrc", + "type": "LPCSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCompactPathExW": [ + { + "name": "pszOut", + "type": "LPWSTR" + }, + { + "name": "pszSrc", + "type": "LPCWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCommonPrefixA": [ + { + "name": "pszFile1", + "type": "LPCSTR" + }, + { + "name": "pszFile2", + "type": "LPCSTR" + }, + { + "name": "achPath", + "type": "LPSTR" + } + ], + "PathCommonPrefixW": [ + { + "name": "pszFile1", + "type": "LPCWSTR" + }, + { + "name": "pszFile2", + "type": "LPCWSTR" + }, + { + "name": "achPath", + "type": "LPWSTR" + } + ], + "PathFileExistsA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFileExistsW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindExtensionA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFindExtensionW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindFileNameA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFindFileNameW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindNextComponentA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathFindNextComponentW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathFindOnPathA": [ + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "ppszOtherDirs", + "type": "PZPCSTR" + } + ], + "PathFindOnPathW": [ + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "ppszOtherDirs", + "type": "PZPCWSTR" + } + ], + "PathFindSuffixArrayA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "apszSuffix", + "type": "LPCSTR" + }, + { + "name": "iArraySize", + "type": "int" + } + ], + "PathFindSuffixArrayW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "apszSuffix", + "type": "LPCWSTR" + }, + { + "name": "iArraySize", + "type": "int" + } + ], + "PathGetArgsA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathGetArgsW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsLFNFileSpecA": [ + { + "name": "pszName", + "type": "LPCSTR" + } + ], + "PathIsLFNFileSpecW": [ + { + "name": "pszName", + "type": "LPCWSTR" + } + ], + "PathGetCharTypeA": [ + { + "name": "ch", + "type": "UCHAR" + } + ], + "PathGetCharTypeW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "PathGetDriveNumberA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathGetDriveNumberW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsDirectoryA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsDirectoryW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsDirectoryEmptyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsDirectoryEmptyW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsFileSpecA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsFileSpecW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsPrefixA": [ + { + "name": "pszPrefix", + "type": "LPCSTR" + }, + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsPrefixW": [ + { + "name": "pszPrefix", + "type": "LPCWSTR" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsRelativeA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsRelativeW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsRootA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsRootW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsSameRootA": [ + { + "name": "pszPath1", + "type": "LPCSTR" + }, + { + "name": "pszPath2", + "type": "LPCSTR" + } + ], + "PathIsSameRootW": [ + { + "name": "pszPath1", + "type": "LPCWSTR" + }, + { + "name": "pszPath2", + "type": "LPCWSTR" + } + ], + "PathIsUNCA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsUNCW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsNetworkPathA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsNetworkPathW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsUNCServerA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsUNCServerW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsUNCServerShareA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsUNCServerShareW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsContentTypeA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "pszContentType", + "type": "LPCSTR" + } + ], + "PathIsContentTypeW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "pszContentType", + "type": "LPCWSTR" + } + ], + "PathIsURLA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathIsURLW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathMakePrettyA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathMakePrettyW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathMatchSpecA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "pszSpec", + "type": "LPCSTR" + } + ], + "PathMatchSpecW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "pszSpec", + "type": "LPCWSTR" + } + ], + "PathMatchSpecExA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "pszSpec", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathMatchSpecExW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "pszSpec", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathParseIconLocationA": [ + { + "name": "pszIconFile", + "type": "LPSTR" + } + ], + "PathParseIconLocationW": [ + { + "name": "pszIconFile", + "type": "LPWSTR" + } + ], + "PathQuoteSpacesA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "PathQuoteSpacesW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "PathRelativePathToA": [ + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "pszFrom", + "type": "LPCSTR" + }, + { + "name": "dwAttrFrom", + "type": "DWORD" + }, + { + "name": "pszTo", + "type": "LPCSTR" + }, + { + "name": "dwAttrTo", + "type": "DWORD" + } + ], + "PathRelativePathToW": [ + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "pszFrom", + "type": "LPCWSTR" + }, + { + "name": "dwAttrFrom", + "type": "DWORD" + }, + { + "name": "pszTo", + "type": "LPCWSTR" + }, + { + "name": "dwAttrTo", + "type": "DWORD" + } + ], + "PathRemoveArgsA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveArgsW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveBackslashA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveBackslashW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveBlanksA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveBlanksW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveExtensionA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveExtensionW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRemoveFileSpecA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathRemoveFileSpecW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathRenameExtensionA": [ + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "pszExt", + "type": "LPCSTR" + } + ], + "PathRenameExtensionW": [ + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "pszExt", + "type": "LPCWSTR" + } + ], + "PathSearchAndQualifyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "PathSearchAndQualifyW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "PathSetDlgItemPathA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + }, + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathSetDlgItemPathW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathSkipRootA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathSkipRootW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathStripPathA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathStripPathW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathStripToRootA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathStripToRootW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathUnquoteSpacesA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "PathUnquoteSpacesW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "PathMakeSystemFolderA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathMakeSystemFolderW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathUnmakeSystemFolderA": [ + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "PathUnmakeSystemFolderW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "PathIsSystemFolderA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "dwAttrb", + "type": "DWORD" + } + ], + "PathIsSystemFolderW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "dwAttrb", + "type": "DWORD" + } + ], + "PathUndecorateA": [ + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "PathUndecorateW": [ + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "PathUnExpandEnvStringsA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "PathUnExpandEnvStringsW": [ + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "UrlCompareA": [ + { + "name": "psz1", + "type": "PCSTR" + }, + { + "name": "psz2", + "type": "PCSTR" + }, + { + "name": "fIgnoreSlash", + "type": "BOOL" + } + ], + "UrlCompareW": [ + { + "name": "psz1", + "type": "PCWSTR" + }, + { + "name": "psz2", + "type": "PCWSTR" + }, + { + "name": "fIgnoreSlash", + "type": "BOOL" + } + ], + "UrlCombineA": [ + { + "name": "pszBase", + "type": "PCSTR" + }, + { + "name": "pszRelative", + "type": "PCSTR" + }, + { + "name": "pszCombined", + "type": "PSTR" + }, + { + "name": "pcchCombined", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCombineW": [ + { + "name": "pszBase", + "type": "PCWSTR" + }, + { + "name": "pszRelative", + "type": "PCWSTR" + }, + { + "name": "pszCombined", + "type": "PWSTR" + }, + { + "name": "pcchCombined", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCanonicalizeA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pszCanonicalized", + "type": "PSTR" + }, + { + "name": "pcchCanonicalized", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCanonicalizeW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pszCanonicalized", + "type": "PWSTR" + }, + { + "name": "pcchCanonicalized", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlIsOpaqueA": [ + { + "name": "pszURL", + "type": "PCSTR" + } + ], + "UrlIsOpaqueW": [ + { + "name": "pszURL", + "type": "PCWSTR" + } + ], + "UrlIsNoHistoryA": [ + { + "name": "pszURL", + "type": "PCSTR" + } + ], + "UrlIsNoHistoryW": [ + { + "name": "pszURL", + "type": "PCWSTR" + } + ], + "UrlIsA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "UrlIs", + "type": "URLIS" + } + ], + "UrlIsW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "UrlIs", + "type": "URLIS" + } + ], + "UrlGetLocationA": [ + { + "name": "pszURL", + "type": "PCSTR" + } + ], + "UrlGetLocationW": [ + { + "name": "pszURL", + "type": "PCWSTR" + } + ], + "UrlUnescapeA": [ + { + "name": "pszUrl", + "type": "PSTR" + }, + { + "name": "pszUnescaped", + "type": "PSTR" + }, + { + "name": "pcchUnescaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlUnescapeW": [ + { + "name": "pszUrl", + "type": "PWSTR" + }, + { + "name": "pszUnescaped", + "type": "PWSTR" + }, + { + "name": "pcchUnescaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlEscapeA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pszEscaped", + "type": "PSTR" + }, + { + "name": "pcchEscaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlEscapeW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pszEscaped", + "type": "PWSTR" + }, + { + "name": "pcchEscaped", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCreateFromPathA": [ + { + "name": "pszPath", + "type": "PCSTR" + }, + { + "name": "pszUrl", + "type": "PSTR" + }, + { + "name": "pcchUrl", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlCreateFromPathW": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pszUrl", + "type": "PWSTR" + }, + { + "name": "pcchUrl", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCreateFromUrlA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pszPath", + "type": "PSTR" + }, + { + "name": "pcchPath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCreateFromUrlW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "pcchPath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PathCreateFromUrlAlloc": [ + { + "name": "pszIn", + "type": "PCWSTR" + }, + { + "name": "ppszOut", + "type": "PWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlHashA": [ + { + "name": "pszUrl", + "type": "PCSTR" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + } + ], + "UrlHashW": [ + { + "name": "pszUrl", + "type": "PCWSTR" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + } + ], + "UrlGetPartW": [ + { + "name": "pszIn", + "type": "PCWSTR" + }, + { + "name": "pszOut", + "type": "PWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwPart", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlGetPartA": [ + { + "name": "pszIn", + "type": "PCSTR" + }, + { + "name": "pszOut", + "type": "PSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwPart", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlApplySchemeA": [ + { + "name": "pszIn", + "type": "PCSTR" + }, + { + "name": "pszOut", + "type": "PSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UrlApplySchemeW": [ + { + "name": "pszIn", + "type": "PCWSTR" + }, + { + "name": "pszOut", + "type": "PWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "HashData": [ + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "cbHash", + "type": "DWORD" + } + ], + "UrlFixupW": [ + { + "name": "pcszUrl", + "type": "PCWSTR" + }, + { + "name": "pszTranslatedUrl", + "type": "PWSTR" + }, + { + "name": "cchMax", + "type": "DWORD" + } + ], + "SHDeleteEmptyKeyA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + } + ], + "SHDeleteEmptyKeyW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + } + ], + "SHDeleteKeyA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + } + ], + "SHDeleteKeyW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + } + ], + "SHRegDuplicateHKey": [ + { + "name": "hkey", + "type": "HKEY" + } + ], + "SHDeleteValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + } + ], + "SHDeleteValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + } + ], + "SHGetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHGetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHSetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SHSetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SHRegGetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHRegGetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHRegSetValue": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "SHRegGetValueFromHKCUHKLM": [ + { + "name": "pwszKey", + "type": "PCWSTR" + }, + { + "name": "pwszValue", + "type": "PCWSTR" + }, + { + "name": "srrfFlags", + "type": "SRRF" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHRegGetBoolValueFromHKCUHKLM": [ + { + "name": "pszKey", + "type": "PCWSTR" + }, + { + "name": "pszValue", + "type": "PCWSTR" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "SHQueryValueExA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHQueryValueExW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "SHEnumKeyExA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + } + ], + "SHEnumKeyExW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPWSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + } + ], + "SHEnumValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "PSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "SHEnumValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "PWSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "SHQueryInfoKeyA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + } + ], + "SHQueryInfoKeyW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + } + ], + "SHCopyKeyA": [ + { + "name": "hkeySrc", + "type": "HKEY" + }, + { + "name": "pszSrcSubKey", + "type": "LPCSTR" + }, + { + "name": "hkeyDest", + "type": "HKEY" + }, + { + "name": "fReserved", + "type": "DWORD" + } + ], + "SHCopyKeyW": [ + { + "name": "hkeySrc", + "type": "HKEY" + }, + { + "name": "pszSrcSubKey", + "type": "LPCWSTR" + }, + { + "name": "hkeyDest", + "type": "HKEY" + }, + { + "name": "fReserved", + "type": "DWORD" + } + ], + "SHRegGetPathA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCSTR" + }, + { + "name": "pcszValue", + "type": "LPCSTR" + }, + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegGetPathW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pcszValue", + "type": "LPCWSTR" + }, + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegSetPathA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCSTR" + }, + { + "name": "pcszValue", + "type": "LPCSTR" + }, + { + "name": "pcszPath", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegSetPathW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pcszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pcszValue", + "type": "LPCWSTR" + }, + { + "name": "pcszPath", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegCreateUSKeyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegCreateUSKeyW": [ + { + "name": "pwzPath", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegOpenUSKeyA": [ + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + } + ], + "SHRegOpenUSKeyW": [ + { + "name": "pwzPath", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "hRelativeUSKey", + "type": "HUSKEY" + }, + { + "name": "phNewUSKey", + "type": "PHUSKEY" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + } + ], + "SHRegQueryUSValueA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegQueryUSValueW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegWriteUSValueA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegWriteUSValueW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pwzValue", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegDeleteUSValueA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegDeleteUSValueW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pwzValue", + "type": "LPCWSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegDeleteEmptyUSKeyW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pwzSubKey", + "type": "LPCWSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegDeleteEmptyUSKeyA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "delRegFlags", + "type": "SHREGDEL_FLAGS" + } + ], + "SHRegEnumUSKeyA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegEnumUSKeyW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pwzName", + "type": "LPWSTR" + }, + { + "name": "pcchName", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegEnumUSValueA": [ + { + "name": "hUSkey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "LPSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegEnumUSValueW": [ + { + "name": "hUSkey", + "type": "HUSKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pszValueName", + "type": "LPWSTR" + }, + { + "name": "pcchValueName", + "type": "LPDWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegQueryInfoUSKeyA": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegQueryInfoUSKeyW": [ + { + "name": "hUSKey", + "type": "HUSKEY" + }, + { + "name": "pcSubKeys", + "type": "LPDWORD" + }, + { + "name": "pcchMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "pcValues", + "type": "LPDWORD" + }, + { + "name": "pcchMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "enumRegFlags", + "type": "SHREGENUM_FLAGS" + } + ], + "SHRegCloseUSKey": [ + { + "name": "hUSKey", + "type": "HUSKEY" + } + ], + "SHRegGetUSValueA": [ + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegGetUSValueW": [ + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pdwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "pvDefaultData", + "type": "void" + }, + { + "name": "dwDefaultDataSize", + "type": "DWORD" + } + ], + "SHRegSetUSValueA": [ + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegSetUSValueW": [ + { + "name": "pwzSubKey", + "type": "LPCWSTR" + }, + { + "name": "pwzValue", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHRegGetIntW": [ + { + "name": "hk", + "type": "HKEY" + }, + { + "name": "pwzKey", + "type": "PCWSTR" + }, + { + "name": "iDefault", + "type": "int" + } + ], + "SHRegGetBoolUSValueA": [ + { + "name": "pszSubKey", + "type": "LPCSTR" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "SHRegGetBoolUSValueW": [ + { + "name": "pszSubKey", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "fIgnoreHKCU", + "type": "BOOL" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "AssocCreate": [ + { + "name": "clsid", + "type": "CLSID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetAssocKeys": [ + { + "name": "pqa", + "type": "IQueryAssociations" + }, + { + "name": "rgKeys", + "type": "HKEY" + }, + { + "name": "cKeys", + "type": "DWORD" + } + ], + "AssocQueryStringA": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "pszAssoc", + "type": "LPCSTR" + }, + { + "name": "pszExtra", + "type": "LPCSTR" + }, + { + "name": "pszOut", + "type": "LPSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryStringW": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "pszAssoc", + "type": "LPCWSTR" + }, + { + "name": "pszExtra", + "type": "LPCWSTR" + }, + { + "name": "pszOut", + "type": "LPWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryStringByKeyA": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "hkAssoc", + "type": "HKEY" + }, + { + "name": "pszExtra", + "type": "LPCSTR" + }, + { + "name": "pszOut", + "type": "LPSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryStringByKeyW": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "str", + "type": "ASSOCSTR" + }, + { + "name": "hkAssoc", + "type": "HKEY" + }, + { + "name": "pszExtra", + "type": "LPCWSTR" + }, + { + "name": "pszOut", + "type": "LPWSTR" + }, + { + "name": "pcchOut", + "type": "DWORD" + } + ], + "AssocQueryKeyA": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "key", + "type": "ASSOCKEY" + }, + { + "name": "pszAssoc", + "type": "LPCSTR" + }, + { + "name": "pszExtra", + "type": "LPCSTR" + }, + { + "name": "phkeyOut", + "type": "HKEY" + } + ], + "AssocQueryKeyW": [ + { + "name": "flags", + "type": "ASSOCF" + }, + { + "name": "key", + "type": "ASSOCKEY" + }, + { + "name": "pszAssoc", + "type": "LPCWSTR" + }, + { + "name": "pszExtra", + "type": "LPCWSTR" + }, + { + "name": "phkeyOut", + "type": "HKEY" + } + ], + "AssocIsDangerous": [ + { + "name": "pszAssoc", + "type": "PCWSTR" + } + ], + "AssocGetPerceivedType": [ + { + "name": "pszExt", + "type": "PCWSTR" + }, + { + "name": "ptype", + "type": "PERCEIVED" + }, + { + "name": "pflag", + "type": "PERCEIVEDFLAG" + }, + { + "name": "ppszType", + "type": "PWSTR" + } + ], + "SHCreateStreamOnFileA": [ + { + "name": "pszFile", + "type": "LPCSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "ppstm", + "type": "IStream" + } + ], + "SHCreateStreamOnFileW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "ppstm", + "type": "IStream" + } + ], + "SHCreateStreamOnFileEx": [ + { + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "fCreate", + "type": "BOOL" + }, + { + "name": "pstmTemplate", + "type": "IStream" + }, + { + "name": "ppstm", + "type": "IStream" + } + ], + "GetAcceptLanguagesA": [ + { + "name": "pszLanguages", + "type": "LPSTR" + }, + { + "name": "pcchLanguages", + "type": "DWORD" + } + ], + "GetAcceptLanguagesW": [ + { + "name": "pszLanguages", + "type": "LPWSTR" + }, + { + "name": "pcchLanguages", + "type": "DWORD" + } + ], + "IUnknown_Set": [ + { + "name": "ppunk", + "type": "IUnknown" + }, + { + "name": "punk", + "type": "IUnknown" + } + ], + "IUnknown_AtomicRelease": [ + { + "name": "ppunk", + "type": "void" + } + ], + "IUnknown_GetWindow": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "phwnd", + "type": "HWND" + } + ], + "IUnknown_SetSite": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "punkSite", + "type": "IUnknown" + } + ], + "IUnknown_GetSite": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "IUnknown_QueryService": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "guidService", + "type": "GUID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvOut", + "type": "void" + } + ], + "IStream_Read": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "ULONG" + } + ], + "IStream_Write": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "ULONG" + } + ], + "IStream_Reset": [ + { + "name": "pstm", + "type": "IStream" + } + ], + "IStream_Size": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pui", + "type": "ULARGE_INTEGER" + } + ], + "ConnectToConnectionPoint": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "riidEvent", + "type": "IID" + }, + { + "name": "fConnect", + "type": "BOOL" + }, + { + "name": "punkTarget", + "type": "IUnknown" + }, + { + "name": "pdwCookie", + "type": "DWORD" + }, + { + "name": "ppcpOut", + "type": "IConnectionPoint" + } + ], + "IStream_ReadPidl": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "ppidlOut", + "type": "LPITEMIDLIST" + } + ], + "IStream_WritePidl": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidlWrite", + "type": "LPCITEMIDLIST" + } + ], + "IStream_ReadStr": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "ppsz", + "type": "PWSTR" + } + ], + "IStream_WriteStr": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "psz", + "type": "PCWSTR" + } + ], + "IStream_Copy": [ + { + "name": "pstmFrom", + "type": "IStream" + }, + { + "name": "pstmTo", + "type": "IStream" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "SHGetViewStatePropertyBag": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszBagName", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHFormatDateTimeA": [ + { + "name": "pft", + "type": "FILETIME" + }, + { + "name": "pdwFlags", + "type": "DWORD" + }, + { + "name": "pszBuf", + "type": "LPSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "SHFormatDateTimeW": [ + { + "name": "pft", + "type": "FILETIME" + }, + { + "name": "pdwFlags", + "type": "DWORD" + }, + { + "name": "pszBuf", + "type": "LPWSTR" + }, + { + "name": "cchBuf", + "type": "UINT" + } + ], + "SHAnsiToUnicode": [ + { + "name": "pszSrc", + "type": "PCSTR" + }, + { + "name": "pwszDst", + "type": "PWSTR" + }, + { + "name": "cwchBuf", + "type": "int" + } + ], + "SHAnsiToAnsi": [ + { + "name": "pszSrc", + "type": "PCSTR" + }, + { + "name": "pszDst", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "int" + } + ], + "SHUnicodeToAnsi": [ + { + "name": "pwszSrc", + "type": "PCWSTR" + }, + { + "name": "pszDst", + "type": "PSTR" + }, + { + "name": "cchBuf", + "type": "int" + } + ], + "SHUnicodeToUnicode": [ + { + "name": "pwzSrc", + "type": "PCWSTR" + }, + { + "name": "pwzDst", + "type": "PWSTR" + }, + { + "name": "cwchBuf", + "type": "int" + } + ], + "SHMessageBoxCheckA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszText", + "type": "LPCSTR" + }, + { + "name": "pszCaption", + "type": "LPCSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "iDefault", + "type": "int" + }, + { + "name": "pszRegVal", + "type": "LPCSTR" + } + ], + "SHMessageBoxCheckW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "pszCaption", + "type": "LPCWSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "iDefault", + "type": "int" + }, + { + "name": "pszRegVal", + "type": "LPCWSTR" + } + ], + "SHSendMessageBroadcastA": [ + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHSendMessageBroadcastW": [ + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SHStripMneumonicA": [ + { + "name": "pszMenu", + "type": "LPSTR" + } + ], + "SHStripMneumonicW": [ + { + "name": "pszMenu", + "type": "LPWSTR" + } + ], + "IsOS": [ + { + "name": "dwOS", + "type": "DWORD" + } + ], + "SHGlobalCounterGetValue": [ + { + "name": "id", + "type": "SHGLOBALCOUNTER" + } + ], + "SHGlobalCounterIncrement": [ + { + "name": "id", + "type": "SHGLOBALCOUNTER" + } + ], + "SHGlobalCounterDecrement": [ + { + "name": "id", + "type": "SHGLOBALCOUNTER" + } + ], + "SHAllocShared": [ + { + "name": "pvData", + "type": "void" + }, + { + "name": "dwSize", + "type": "DWORD" + }, + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "SHFreeShared": [ + { + "name": "hData", + "type": "HANDLE" + }, + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "SHUnlockShared": [ + { + "name": "pvData", + "type": "void" + } + ], + "WhichPlatform": [ + { + "name": "VOID", + "type": "void" + } + ], + "QISearch": [ + { + "name": "that", + "type": "void" + }, + { + "name": "pqit", + "type": "LPCQITAB" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHIsLowMemoryMachine": [ + { + "name": "dwType", + "type": "DWORD" + } + ], + "GetMenuPosFromID": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "id", + "type": "UINT" + } + ], + "SHGetInverseCMAP": [ + { + "name": "pbMap", + "type": "BYTE" + }, + { + "name": "cbMap", + "type": "ULONG" + } + ], + "SHAutoComplete": [ + { + "name": "hwndEdit", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHCreateThreadRef": [ + { + "name": "pcRef", + "type": "LONG" + }, + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SHSetThreadRef": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "SHGetThreadRef": [ + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SHSkipJunction": [ + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "SHCreateThread": [ + { + "name": "pfnThreadProc", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pData", + "type": "void" + }, + { + "name": "flags", + "type": "SHCT_FLAGS" + }, + { + "name": "pfnCallback", + "type": "LPTHREAD_START_ROUTINE" + } + ], + "SHCreateThreadWithHandle": [ + { + "name": "pfnThreadProc", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pData", + "type": "void" + }, + { + "name": "flags", + "type": "SHCT_FLAGS" + }, + { + "name": "pfnCallback", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "pHandle", + "type": "HANDLE" + } + ], + "SetProcessReference": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "GetProcessReference": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "SHReleaseThreadRef": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHCreateShellPalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ColorRGBToHLS": [ + { + "name": "clrRGB", + "type": "COLORREF" + }, + { + "name": "pwHue", + "type": "WORD" + }, + { + "name": "pwLuminance", + "type": "WORD" + }, + { + "name": "pwSaturation", + "type": "WORD" + } + ], + "ColorHLSToRGB": [ + { + "name": "wHue", + "type": "WORD" + }, + { + "name": "wLuminance", + "type": "WORD" + }, + { + "name": "wSaturation", + "type": "WORD" + } + ], + "ColorAdjustLuma": [ + { + "name": "clrRGB", + "type": "COLORREF" + }, + { + "name": "n", + "type": "int" + }, + { + "name": "fScale", + "type": "BOOL" + } + ], + "DllInstall": [ + { + "name": "bInstall", + "type": "BOOL" + }, + { + "name": "pszCmdLine", + "type": "PCWSTR" + } + ], + "IsInternetESCEnabled": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wslapi.json b/qiling/extensions/windows_sdk/api-ms-win-wsl-api-l1-1-0.json similarity index 100% rename from qiling/extensions/windows_sdk/wslapi.json rename to qiling/extensions/windows_sdk/api-ms-win-wsl-api-l1-1-0.json diff --git a/qiling/extensions/windows_sdk/appmgmt.json b/qiling/extensions/windows_sdk/appmgmt.json deleted file mode 100644 index b69a32991..000000000 --- a/qiling/extensions/windows_sdk/appmgmt.json +++ /dev/null @@ -1,64 +0,0 @@ -{ - "InstallApplication": [ - { - "name": "pInstallInfo", - "type": "PINSTALLDATA" - } - ], - "UninstallApplication": [ - { - "name": "ProductCode", - "type": "LPWSTR" - }, - { - "name": "dwStatus", - "type": "DWORD" - } - ], - "GetManagedApplications": [ - { - "name": "pCategory", - "type": "GUID" - }, - { - "name": "dwQueryFlags", - "type": "DWORD" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "pdwApps", - "type": "LPDWORD" - }, - { - "name": "prgManagedApps", - "type": "PMANAGEDAPPLICATION" - } - ], - "GetLocalManagedApplications": [ - { - "name": "bUserApps", - "type": "BOOL" - }, - { - "name": "pdwApps", - "type": "LPDWORD" - }, - { - "name": "prgLocalApps", - "type": "PLOCALMANAGEDAPPLICATION" - } - ], - "GetManagedApplicationCategories": [ - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "pAppCategory", - "type": "APPCATEGORYINFOLIST" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/bluetoothapis.json b/qiling/extensions/windows_sdk/bluetoothapis.json index 51ef19def..fe01e43b1 100644 --- a/qiling/extensions/windows_sdk/bluetoothapis.json +++ b/qiling/extensions/windows_sdk/bluetoothapis.json @@ -1,426 +1,276 @@ { - "BluetoothFindFirstRadio": [ + "BluetoothGATTGetServices": [ { - "name": "pbtfrp", - "type": "BLUETOOTH_FIND_RADIO_PARAMS" - }, - { - "name": "phRadio", + "name": "hDevice", "type": "HANDLE" - } - ], - "BluetoothFindNextRadio": [ - { - "name": "hFind", - "type": "HBLUETOOTH_RADIO_FIND" }, { - "name": "phRadio", - "type": "HANDLE" - } - ], - "BluetoothFindRadioClose": [ - { - "name": "hFind", - "type": "HBLUETOOTH_RADIO_FIND" - } - ], - "BluetoothGetRadioInfo": [ - { - "name": "hRadio", - "type": "HANDLE" + "name": "ServicesBufferCount", + "type": "USHORT" }, { - "name": "pRadioInfo", - "type": "PBLUETOOTH_RADIO_INFO" - } - ], - "BluetoothFindFirstDevice": [ - { - "name": "pbtsp", - "type": "BLUETOOTH_DEVICE_SEARCH_PARAMS" + "name": "ServicesBuffer", + "type": "PBTH_LE_GATT_SERVICE" }, { - "name": "pbtdi", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" - } - ], - "BluetoothFindNextDevice": [ - { - "name": "hFind", - "type": "HBLUETOOTH_DEVICE_FIND" + "name": "ServicesBufferActual", + "type": "USHORT" }, { - "name": "pbtdi", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" - } - ], - "BluetoothFindDeviceClose": [ - { - "name": "hFind", - "type": "HBLUETOOTH_DEVICE_FIND" + "name": "Flags", + "type": "ULONG" } ], - "BluetoothGetDeviceInfo": [ + "BluetoothGATTGetIncludedServices": [ { - "name": "hRadio", + "name": "hDevice", "type": "HANDLE" }, { - "name": "pbtdi", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" - } - ], - "BluetoothUpdateDeviceRecord": [ - { - "name": "pbtdi", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" - } - ], - "BluetoothRemoveDevice": [ - { - "name": "pAddress", - "type": "BLUETOOTH_ADDRESS_STRUCT" - } - ], - "BluetoothSelectDevices": [ - { - "name": "pbtsdp", - "type": "BLUETOOTH_SELECT_DEVICE_PARAMS" - } - ], - "BluetoothSelectDevicesFree": [ - { - "name": "pbtsdp", - "type": "BLUETOOTH_SELECT_DEVICE_PARAMS" - } - ], - "BluetoothDisplayDeviceProperties": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "pbtdi", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" - } - ], - "BluetoothAuthenticateDevice": [ - { - "name": "hwndParent", - "type": "HWND" + "name": "ParentService", + "type": "PBTH_LE_GATT_SERVICE" }, { - "name": "hRadio", - "type": "HANDLE" + "name": "IncludedServicesBufferCount", + "type": "USHORT" }, { - "name": "pbtbi", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + "name": "IncludedServicesBuffer", + "type": "PBTH_LE_GATT_SERVICE" }, { - "name": "pszPasskey", - "type": "PWSTR" + "name": "IncludedServicesBufferActual", + "type": "USHORT" }, { - "name": "ulPasskeyLength", + "name": "Flags", "type": "ULONG" } ], - "BluetoothAuthenticateDeviceEx": [ + "BluetoothGATTGetCharacteristics": [ { - "name": "hwndParentIn", - "type": "HWND" + "name": "hDevice", + "type": "HANDLE" }, { - "name": "hRadioIn", - "type": "HANDLE" + "name": "Service", + "type": "PBTH_LE_GATT_SERVICE" }, { - "name": "pbtdiInout", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + "name": "CharacteristicsBufferCount", + "type": "USHORT" + }, + { + "name": "CharacteristicsBuffer", + "type": "PBTH_LE_GATT_CHARACTERISTIC" }, { - "name": "pbtOobData", - "type": "PBLUETOOTH_OOB_DATA_INFO" + "name": "CharacteristicsBufferActual", + "type": "USHORT" }, { - "name": "authenticationRequirement", - "type": "AUTHENTICATION_REQUIREMENTS" + "name": "Flags", + "type": "ULONG" } ], - "BluetoothAuthenticateMultipleDevices": [ - { - "name": "hwndParent", - "type": "HWND" - }, + "BluetoothGATTGetDescriptors": [ { - "name": "hRadio", + "name": "hDevice", "type": "HANDLE" }, { - "name": "cDevices", - "type": "DWORD" + "name": "Characteristic", + "type": "PBTH_LE_GATT_CHARACTERISTIC" }, { - "name": "rgbtdi", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" - } - ], - "BluetoothSetServiceState": [ - { - "name": "hRadio", - "type": "HANDLE" + "name": "DescriptorsBufferCount", + "type": "USHORT" }, { - "name": "pbtdi", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + "name": "DescriptorsBuffer", + "type": "PBTH_LE_GATT_DESCRIPTOR" }, { - "name": "pGuidService", - "type": "GUID" + "name": "DescriptorsBufferActual", + "type": "USHORT" }, { - "name": "dwServiceFlags", - "type": "DWORD" + "name": "Flags", + "type": "ULONG" } ], - "BluetoothEnumerateInstalledServices": [ + "BluetoothGATTGetCharacteristicValue": [ { - "name": "hRadio", + "name": "hDevice", "type": "HANDLE" }, { - "name": "pbtdi", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + "name": "Characteristic", + "type": "PBTH_LE_GATT_CHARACTERISTIC" }, { - "name": "pcServiceInout", - "type": "DWORD" + "name": "CharacteristicValueDataSize", + "type": "ULONG" }, { - "name": "pGuidServices", - "type": "GUID" - } - ], - "BluetoothEnableDiscovery": [ - { - "name": "hRadio", - "type": "HANDLE" + "name": "CharacteristicValue", + "type": "PBTH_LE_GATT_CHARACTERISTIC_VALUE" }, { - "name": "fEnabled", - "type": "BOOL" - } - ], - "BluetoothIsDiscoverable": [ - { - "name": "hRadio", - "type": "HANDLE" - } - ], - "BluetoothEnableIncomingConnections": [ - { - "name": "hRadio", - "type": "HANDLE" + "name": "CharacteristicValueSizeRequired", + "type": "USHORT" }, { - "name": "fEnabled", - "type": "BOOL" + "name": "Flags", + "type": "ULONG" } ], - "BluetoothIsConnectable": [ + "BluetoothGATTGetDescriptorValue": [ { - "name": "hRadio", + "name": "hDevice", "type": "HANDLE" - } - ], - "BluetoothRegisterForAuthentication": [ - { - "name": "pbtdi", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" }, { - "name": "phRegHandle", - "type": "HBLUETOOTH_AUTHENTICATION_REGISTRATION" + "name": "Descriptor", + "type": "PBTH_LE_GATT_DESCRIPTOR" }, { - "name": "pfnCallback", - "type": "PFN_AUTHENTICATION_CALLBACK" - }, - { - "name": "pvParam", - "type": "PVOID" - } - ], - "BluetoothRegisterForAuthenticationEx": [ - { - "name": "pbtdiIn", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + "name": "DescriptorValueDataSize", + "type": "ULONG" }, { - "name": "phRegHandleOut", - "type": "HBLUETOOTH_AUTHENTICATION_REGISTRATION" + "name": "DescriptorValue", + "type": "PBTH_LE_GATT_DESCRIPTOR_VALUE" }, { - "name": "pfnCallbackIn", - "type": "PFN_AUTHENTICATION_CALLBACK_EX" + "name": "DescriptorValueSizeRequired", + "type": "USHORT" }, { - "name": "pvParam", - "type": "PVOID" - } - ], - "BluetoothUnregisterAuthentication": [ - { - "name": "hRegHandle", - "type": "HBLUETOOTH_AUTHENTICATION_REGISTRATION" + "name": "Flags", + "type": "ULONG" } ], - "BluetoothSendAuthenticationResponse": [ + "BluetoothGATTBeginReliableWrite": [ { - "name": "hRadio", + "name": "hDevice", "type": "HANDLE" }, { - "name": "pbtdi", - "type": "BLUETOOTH_DEVICE_INFO_STRUCT" + "name": "ReliableWriteContext", + "type": "PBTH_LE_GATT_RELIABLE_WRITE_CONTEXT" }, { - "name": "pszPasskey", - "type": "LPCWSTR" + "name": "Flags", + "type": "ULONG" } ], - "BluetoothSendAuthenticationResponseEx": [ + "BluetoothGATTSetCharacteristicValue": [ { - "name": "hRadioIn", + "name": "hDevice", "type": "HANDLE" }, { - "name": "pauthResponse", - "type": "PBLUETOOTH_AUTHENTICATE_RESPONSE" - } - ], - "BluetoothSdpGetElementData": [ + "name": "Characteristic", + "type": "PBTH_LE_GATT_CHARACTERISTIC" + }, { - "name": "pSdpStream", - "type": "LPBYTE" + "name": "CharacteristicValue", + "type": "PBTH_LE_GATT_CHARACTERISTIC_VALUE" }, { - "name": "cbSdpStreamLength", - "type": "ULONG" + "name": "ReliableWriteContext", + "type": "BTH_LE_GATT_RELIABLE_WRITE_CONTEXT" }, { - "name": "pData", - "type": "PSDP_ELEMENT_DATA" + "name": "Flags", + "type": "ULONG" } ], - "BluetoothSdpGetContainerElementData": [ - { - "name": "pContainerStream", - "type": "LPBYTE" - }, + "BluetoothGATTEndReliableWrite": [ { - "name": "cbContainerLength", - "type": "ULONG" + "name": "hDevice", + "type": "HANDLE" }, { - "name": "pElement", - "type": "HBLUETOOTH_CONTAINER_ELEMENT" + "name": "ReliableWriteContext", + "type": "BTH_LE_GATT_RELIABLE_WRITE_CONTEXT" }, { - "name": "pData", - "type": "PSDP_ELEMENT_DATA" + "name": "Flags", + "type": "ULONG" } ], - "BluetoothSdpGetAttributeValue": [ - { - "name": "pRecordStream", - "type": "LPBYTE" - }, + "BluetoothGATTAbortReliableWrite": [ { - "name": "cbRecordLength", - "type": "ULONG" + "name": "hDevice", + "type": "HANDLE" }, { - "name": "usAttributeId", - "type": "USHORT" + "name": "ReliableWriteContext", + "type": "BTH_LE_GATT_RELIABLE_WRITE_CONTEXT" }, { - "name": "pAttributeData", - "type": "PSDP_ELEMENT_DATA" + "name": "Flags", + "type": "ULONG" } ], - "BluetoothSdpGetString": [ - { - "name": "pRecordStream", - "type": "LPBYTE" - }, - { - "name": "cbRecordLength", - "type": "ULONG" - }, + "BluetoothGATTSetDescriptorValue": [ { - "name": "pStringData", - "type": "PSDP_STRING_TYPE_DATA" + "name": "hDevice", + "type": "HANDLE" }, { - "name": "usStringOffset", - "type": "USHORT" + "name": "Descriptor", + "type": "PBTH_LE_GATT_DESCRIPTOR" }, { - "name": "pszString", - "type": "PWSTR" + "name": "DescriptorValue", + "type": "PBTH_LE_GATT_DESCRIPTOR_VALUE" }, { - "name": "pcchStringLength", - "type": "PULONG" + "name": "Flags", + "type": "ULONG" } ], - "BluetoothSdpEnumAttributes": [ + "BluetoothGATTRegisterEvent": [ { - "name": "pSDPStream", - "type": "LPBYTE" + "name": "hService", + "type": "HANDLE" }, { - "name": "cbStreamSize", - "type": "ULONG" + "name": "EventType", + "type": "BTH_LE_GATT_EVENT_TYPE" }, { - "name": "pfnCallback", - "type": "PFN_BLUETOOTH_ENUM_ATTRIBUTES_CALLBACK" + "name": "EventParameterIn", + "type": "PVOID" }, { - "name": "pvParam", - "type": "LPVOID" - } - ], - "BluetoothSetLocalServiceInfo": [ - { - "name": "hRadioIn", - "type": "HANDLE" + "name": "Callback", + "type": "PFNBLUETOOTH_GATT_EVENT_CALLBACK" }, { - "name": "pClassGuid", - "type": "GUID" + "name": "CallbackContext", + "type": "PVOID" }, { - "name": "ulInstance", - "type": "ULONG" + "name": "pEventHandle", + "type": "BLUETOOTH_GATT_EVENT_HANDLE" }, { - "name": "pServiceInfoIn", - "type": "BLUETOOTH_LOCAL_SERVICE_INFO_STRUCT" + "name": "Flags", + "type": "ULONG" } ], - "BluetoothIsVersionAvailable": [ + "BluetoothGATTUnregisterEvent": [ { - "name": "MajorVersion", - "type": "UCHAR" + "name": "EventHandle", + "type": "BLUETOOTH_GATT_EVENT_HANDLE" }, { - "name": "MinorVersion", - "type": "UCHAR" + "name": "Flags", + "type": "ULONG" } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/bluetoothleapis.json b/qiling/extensions/windows_sdk/bluetoothleapis.json deleted file mode 100644 index fe01e43b1..000000000 --- a/qiling/extensions/windows_sdk/bluetoothleapis.json +++ /dev/null @@ -1,276 +0,0 @@ -{ - "BluetoothGATTGetServices": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "ServicesBufferCount", - "type": "USHORT" - }, - { - "name": "ServicesBuffer", - "type": "PBTH_LE_GATT_SERVICE" - }, - { - "name": "ServicesBufferActual", - "type": "USHORT" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "BluetoothGATTGetIncludedServices": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "ParentService", - "type": "PBTH_LE_GATT_SERVICE" - }, - { - "name": "IncludedServicesBufferCount", - "type": "USHORT" - }, - { - "name": "IncludedServicesBuffer", - "type": "PBTH_LE_GATT_SERVICE" - }, - { - "name": "IncludedServicesBufferActual", - "type": "USHORT" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "BluetoothGATTGetCharacteristics": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "Service", - "type": "PBTH_LE_GATT_SERVICE" - }, - { - "name": "CharacteristicsBufferCount", - "type": "USHORT" - }, - { - "name": "CharacteristicsBuffer", - "type": "PBTH_LE_GATT_CHARACTERISTIC" - }, - { - "name": "CharacteristicsBufferActual", - "type": "USHORT" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "BluetoothGATTGetDescriptors": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "Characteristic", - "type": "PBTH_LE_GATT_CHARACTERISTIC" - }, - { - "name": "DescriptorsBufferCount", - "type": "USHORT" - }, - { - "name": "DescriptorsBuffer", - "type": "PBTH_LE_GATT_DESCRIPTOR" - }, - { - "name": "DescriptorsBufferActual", - "type": "USHORT" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "BluetoothGATTGetCharacteristicValue": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "Characteristic", - "type": "PBTH_LE_GATT_CHARACTERISTIC" - }, - { - "name": "CharacteristicValueDataSize", - "type": "ULONG" - }, - { - "name": "CharacteristicValue", - "type": "PBTH_LE_GATT_CHARACTERISTIC_VALUE" - }, - { - "name": "CharacteristicValueSizeRequired", - "type": "USHORT" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "BluetoothGATTGetDescriptorValue": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "Descriptor", - "type": "PBTH_LE_GATT_DESCRIPTOR" - }, - { - "name": "DescriptorValueDataSize", - "type": "ULONG" - }, - { - "name": "DescriptorValue", - "type": "PBTH_LE_GATT_DESCRIPTOR_VALUE" - }, - { - "name": "DescriptorValueSizeRequired", - "type": "USHORT" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "BluetoothGATTBeginReliableWrite": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "ReliableWriteContext", - "type": "PBTH_LE_GATT_RELIABLE_WRITE_CONTEXT" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "BluetoothGATTSetCharacteristicValue": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "Characteristic", - "type": "PBTH_LE_GATT_CHARACTERISTIC" - }, - { - "name": "CharacteristicValue", - "type": "PBTH_LE_GATT_CHARACTERISTIC_VALUE" - }, - { - "name": "ReliableWriteContext", - "type": "BTH_LE_GATT_RELIABLE_WRITE_CONTEXT" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "BluetoothGATTEndReliableWrite": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "ReliableWriteContext", - "type": "BTH_LE_GATT_RELIABLE_WRITE_CONTEXT" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "BluetoothGATTAbortReliableWrite": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "ReliableWriteContext", - "type": "BTH_LE_GATT_RELIABLE_WRITE_CONTEXT" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "BluetoothGATTSetDescriptorValue": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "Descriptor", - "type": "PBTH_LE_GATT_DESCRIPTOR" - }, - { - "name": "DescriptorValue", - "type": "PBTH_LE_GATT_DESCRIPTOR_VALUE" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "BluetoothGATTRegisterEvent": [ - { - "name": "hService", - "type": "HANDLE" - }, - { - "name": "EventType", - "type": "BTH_LE_GATT_EVENT_TYPE" - }, - { - "name": "EventParameterIn", - "type": "PVOID" - }, - { - "name": "Callback", - "type": "PFNBLUETOOTH_GATT_EVENT_CALLBACK" - }, - { - "name": "CallbackContext", - "type": "PVOID" - }, - { - "name": "pEventHandle", - "type": "BLUETOOTH_GATT_EVENT_HANDLE" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "BluetoothGATTUnregisterEvent": [ - { - "name": "EventHandle", - "type": "BLUETOOTH_GATT_EVENT_HANDLE" - }, - { - "name": "Flags", - "type": "ULONG" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/callobj.json b/qiling/extensions/windows_sdk/callobj.json deleted file mode 100644 index 263e3d656..000000000 --- a/qiling/extensions/windows_sdk/callobj.json +++ /dev/null @@ -1,20 +0,0 @@ -{ - "CoGetInterceptor": [ - { - "name": "iidIntercepted", - "type": "IID" - }, - { - "name": "punkOuter", - "type": "IUnknown" - }, - { - "name": "iid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/clfs.json b/qiling/extensions/windows_sdk/clfs.json deleted file mode 100644 index 7f5cf5055..000000000 --- a/qiling/extensions/windows_sdk/clfs.json +++ /dev/null @@ -1,38 +0,0 @@ -{ - "LsnEqual": [ - { - "name": "plsn1", - "type": "CLFS_LSN" - }, - { - "name": "plsn2", - "type": "CLFS_LSN" - } - ], - "LsnLess": [ - { - "name": "plsn1", - "type": "CLFS_LSN" - }, - { - "name": "plsn2", - "type": "CLFS_LSN" - } - ], - "LsnGreater": [ - { - "name": "plsn1", - "type": "CLFS_LSN" - }, - { - "name": "plsn2", - "type": "CLFS_LSN" - } - ], - "LsnNull": [ - { - "name": "plsn", - "type": "CLFS_LSN" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/combaseapi.json b/qiling/extensions/windows_sdk/combaseapi.json deleted file mode 100644 index ebef88ba0..000000000 --- a/qiling/extensions/windows_sdk/combaseapi.json +++ /dev/null @@ -1,1006 +0,0 @@ -{ - "CoGetMalloc": [ - { - "name": "dwMemContext", - "type": "DWORD" - }, - { - "name": "ppMalloc", - "type": "LPMALLOC" - } - ], - "CreateStreamOnHGlobal": [ - { - "name": "hGlobal", - "type": "HGLOBAL" - }, - { - "name": "fDeleteOnRelease", - "type": "BOOL" - }, - { - "name": "ppstm", - "type": "LPSTREAM" - } - ], - "GetHGlobalFromStream": [ - { - "name": "pstm", - "type": "LPSTREAM" - }, - { - "name": "phglobal", - "type": "HGLOBAL" - } - ], - "CoUninitialize": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoGetCurrentProcess": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoInitializeEx": [ - { - "name": "pvReserved", - "type": "LPVOID" - }, - { - "name": "dwCoInit", - "type": "DWORD" - } - ], - "CoGetCallerTID": [ - { - "name": "lpdwTID", - "type": "LPDWORD" - } - ], - "CoGetCurrentLogicalThreadId": [ - { - "name": "pguid", - "type": "GUID" - } - ], - "CoGetContextToken": [ - { - "name": "pToken", - "type": "ULONG_PTR" - } - ], - "CoGetDefaultContext": [ - { - "name": "aptType", - "type": "APTTYPE" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "CoGetApartmentType": [ - { - "name": "pAptType", - "type": "APTTYPE" - }, - { - "name": "pAptQualifier", - "type": "APTTYPEQUALIFIER" - } - ], - "CoDecodeProxy": [ - { - "name": "dwClientPid", - "type": "DWORD" - }, - { - "name": "ui64ProxyAddress", - "type": "UINT64" - }, - { - "name": "pServerInformation", - "type": "PServerInformation" - } - ], - "CoIncrementMTAUsage": [ - { - "name": "pCookie", - "type": "CO_MTA_USAGE_COOKIE" - } - ], - "CoDecrementMTAUsage": [ - { - "name": "Cookie", - "type": "CO_MTA_USAGE_COOKIE" - } - ], - "CoAllowUnmarshalerCLSID": [ - { - "name": "clsid", - "type": "IID" - } - ], - "CoGetObjectContext": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "LPVOID" - } - ], - "CoGetClassObject": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "dwClsContext", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "LPVOID" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "LPVOID" - } - ], - "CoRegisterClassObject": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "pUnk", - "type": "LPUNKNOWN" - }, - { - "name": "dwClsContext", - "type": "DWORD" - }, - { - "name": "flags", - "type": "DWORD" - }, - { - "name": "lpdwRegister", - "type": "LPDWORD" - } - ], - "CoRevokeClassObject": [ - { - "name": "dwRegister", - "type": "DWORD" - } - ], - "CoResumeClassObjects": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoSuspendClassObjects": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoAddRefServerProcess": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoReleaseServerProcess": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoGetPSClsid": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "pClsid", - "type": "CLSID" - } - ], - "CoRegisterPSClsid": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "rclsid", - "type": "IID" - } - ], - "CoRegisterSurrogate": [ - { - "name": "pSurrogate", - "type": "LPSURROGATE" - } - ], - "CoGetMarshalSizeMax": [ - { - "name": "pulSize", - "type": "ULONG" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "pUnk", - "type": "LPUNKNOWN" - }, - { - "name": "dwDestContext", - "type": "DWORD" - }, - { - "name": "pvDestContext", - "type": "LPVOID" - }, - { - "name": "mshlflags", - "type": "DWORD" - } - ], - "CoMarshalInterface": [ - { - "name": "pStm", - "type": "LPSTREAM" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "pUnk", - "type": "LPUNKNOWN" - }, - { - "name": "dwDestContext", - "type": "DWORD" - }, - { - "name": "pvDestContext", - "type": "LPVOID" - }, - { - "name": "mshlflags", - "type": "DWORD" - } - ], - "CoUnmarshalInterface": [ - { - "name": "pStm", - "type": "LPSTREAM" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "LPVOID" - } - ], - "CoMarshalHresult": [ - { - "name": "pstm", - "type": "LPSTREAM" - }, - { - "name": "hresult", - "type": "HRESULT" - } - ], - "CoUnmarshalHresult": [ - { - "name": "pstm", - "type": "LPSTREAM" - }, - { - "name": "phresult", - "type": "HRESULT" - } - ], - "CoReleaseMarshalData": [ - { - "name": "pStm", - "type": "LPSTREAM" - } - ], - "CoDisconnectObject": [ - { - "name": "pUnk", - "type": "LPUNKNOWN" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "CoLockObjectExternal": [ - { - "name": "pUnk", - "type": "LPUNKNOWN" - }, - { - "name": "fLock", - "type": "BOOL" - }, - { - "name": "fLastUnlockReleases", - "type": "BOOL" - } - ], - "CoGetStandardMarshal": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "pUnk", - "type": "LPUNKNOWN" - }, - { - "name": "dwDestContext", - "type": "DWORD" - }, - { - "name": "pvDestContext", - "type": "LPVOID" - }, - { - "name": "mshlflags", - "type": "DWORD" - }, - { - "name": "ppMarshal", - "type": "LPMARSHAL" - } - ], - "CoGetStdMarshalEx": [ - { - "name": "pUnkOuter", - "type": "LPUNKNOWN" - }, - { - "name": "smexflags", - "type": "DWORD" - }, - { - "name": "ppUnkInner", - "type": "LPUNKNOWN" - } - ], - "CoIsHandlerConnected": [ - { - "name": "pUnk", - "type": "LPUNKNOWN" - } - ], - "CoMarshalInterThreadInterfaceInStream": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "pUnk", - "type": "LPUNKNOWN" - }, - { - "name": "ppStm", - "type": "LPSTREAM" - } - ], - "CoGetInterfaceAndReleaseStream": [ - { - "name": "pStm", - "type": "LPSTREAM" - }, - { - "name": "iid", - "type": "IID" - }, - { - "name": "ppv", - "type": "LPVOID" - } - ], - "CoCreateFreeThreadedMarshaler": [ - { - "name": "punkOuter", - "type": "LPUNKNOWN" - }, - { - "name": "ppunkMarshal", - "type": "LPUNKNOWN" - } - ], - "CoFreeUnusedLibraries": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoFreeUnusedLibrariesEx": [ - { - "name": "dwUnloadDelay", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "CoDisconnectContext": [ - { - "name": "dwTimeout", - "type": "DWORD" - } - ], - "CoInitializeSecurity": [ - { - "name": "pSecDesc", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "cAuthSvc", - "type": "LONG" - }, - { - "name": "asAuthSvc", - "type": "SOLE_AUTHENTICATION_SERVICE" - }, - { - "name": "pReserved1", - "type": "void" - }, - { - "name": "dwAuthnLevel", - "type": "DWORD" - }, - { - "name": "dwImpLevel", - "type": "DWORD" - }, - { - "name": "pAuthList", - "type": "void" - }, - { - "name": "dwCapabilities", - "type": "DWORD" - }, - { - "name": "pReserved3", - "type": "void" - } - ], - "CoGetCallContext": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppInterface", - "type": "void" - } - ], - "CoQueryProxyBlanket": [ - { - "name": "pProxy", - "type": "IUnknown" - }, - { - "name": "pwAuthnSvc", - "type": "DWORD" - }, - { - "name": "pAuthzSvc", - "type": "DWORD" - }, - { - "name": "pServerPrincName", - "type": "LPOLESTR" - }, - { - "name": "pAuthnLevel", - "type": "DWORD" - }, - { - "name": "pImpLevel", - "type": "DWORD" - }, - { - "name": "pAuthInfo", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "pCapabilites", - "type": "DWORD" - } - ], - "CoSetProxyBlanket": [ - { - "name": "pProxy", - "type": "IUnknown" - }, - { - "name": "dwAuthnSvc", - "type": "DWORD" - }, - { - "name": "dwAuthzSvc", - "type": "DWORD" - }, - { - "name": "pServerPrincName", - "type": "OLECHAR" - }, - { - "name": "dwAuthnLevel", - "type": "DWORD" - }, - { - "name": "dwImpLevel", - "type": "DWORD" - }, - { - "name": "pAuthInfo", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "dwCapabilities", - "type": "DWORD" - } - ], - "CoCopyProxy": [ - { - "name": "pProxy", - "type": "IUnknown" - }, - { - "name": "ppCopy", - "type": "IUnknown" - } - ], - "CoQueryClientBlanket": [ - { - "name": "pAuthnSvc", - "type": "DWORD" - }, - { - "name": "pAuthzSvc", - "type": "DWORD" - }, - { - "name": "pServerPrincName", - "type": "LPOLESTR" - }, - { - "name": "pAuthnLevel", - "type": "DWORD" - }, - { - "name": "pImpLevel", - "type": "DWORD" - }, - { - "name": "pPrivs", - "type": "RPC_AUTHZ_HANDLE" - }, - { - "name": "pCapabilities", - "type": "DWORD" - } - ], - "CoImpersonateClient": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoRevertToSelf": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoQueryAuthenticationServices": [ - { - "name": "pcAuthSvc", - "type": "DWORD" - }, - { - "name": "asAuthSvc", - "type": "SOLE_AUTHENTICATION_SERVICE" - } - ], - "CoSwitchCallContext": [ - { - "name": "pNewObject", - "type": "IUnknown" - }, - { - "name": "ppOldObject", - "type": "IUnknown" - } - ], - "CoCreateInstance": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "pUnkOuter", - "type": "LPUNKNOWN" - }, - { - "name": "dwClsContext", - "type": "DWORD" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "LPVOID" - } - ], - "CoCreateInstanceEx": [ - { - "name": "Clsid", - "type": "IID" - }, - { - "name": "punkOuter", - "type": "IUnknown" - }, - { - "name": "dwClsCtx", - "type": "DWORD" - }, - { - "name": "pServerInfo", - "type": "COSERVERINFO" - }, - { - "name": "dwCount", - "type": "DWORD" - }, - { - "name": "pResults", - "type": "MULTI_QI" - } - ], - "CoCreateInstanceFromApp": [ - { - "name": "Clsid", - "type": "IID" - }, - { - "name": "punkOuter", - "type": "IUnknown" - }, - { - "name": "dwClsCtx", - "type": "DWORD" - }, - { - "name": "reserved", - "type": "PVOID" - }, - { - "name": "dwCount", - "type": "DWORD" - }, - { - "name": "pResults", - "type": "MULTI_QI" - } - ], - "CoRegisterActivationFilter": [ - { - "name": "pActivationFilter", - "type": "IActivationFilter" - } - ], - "CoGetCancelObject": [ - { - "name": "dwThreadId", - "type": "DWORD" - }, - { - "name": "iid", - "type": "IID" - }, - { - "name": "ppUnk", - "type": "void" - } - ], - "CoSetCancelObject": [ - { - "name": "pUnk", - "type": "IUnknown" - } - ], - "CoCancelCall": [ - { - "name": "dwThreadId", - "type": "DWORD" - }, - { - "name": "ulTimeout", - "type": "ULONG" - } - ], - "CoTestCancel": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoEnableCallCancellation": [ - { - "name": "pReserved", - "type": "LPVOID" - } - ], - "CoDisableCallCancellation": [ - { - "name": "pReserved", - "type": "LPVOID" - } - ], - "StringFromCLSID": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "lplpsz", - "type": "LPOLESTR" - } - ], - "CLSIDFromString": [ - { - "name": "lpsz", - "type": "LPCOLESTR" - }, - { - "name": "pclsid", - "type": "LPCLSID" - } - ], - "StringFromIID": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "lplpsz", - "type": "LPOLESTR" - } - ], - "IIDFromString": [ - { - "name": "lpsz", - "type": "LPCOLESTR" - }, - { - "name": "lpiid", - "type": "LPIID" - } - ], - "ProgIDFromCLSID": [ - { - "name": "clsid", - "type": "IID" - }, - { - "name": "lplpszProgID", - "type": "LPOLESTR" - } - ], - "CLSIDFromProgID": [ - { - "name": "lpszProgID", - "type": "LPCOLESTR" - }, - { - "name": "lpclsid", - "type": "LPCLSID" - } - ], - "StringFromGUID2": [ - { - "name": "rguid", - "type": "GUID" - }, - { - "name": "lpsz", - "type": "LPOLESTR" - }, - { - "name": "cchMax", - "type": "int" - } - ], - "CoCreateGuid": [ - { - "name": "pguid", - "type": "GUID" - } - ], - "PropVariantCopy": [ - { - "name": "pvarDest", - "type": "PROPVARIANT" - }, - { - "name": "pvarSrc", - "type": "PROPVARIANT" - } - ], - "PropVariantClear": [ - { - "name": "pvar", - "type": "PROPVARIANT" - } - ], - "FreePropVariantArray": [ - { - "name": "cVariants", - "type": "ULONG" - }, - { - "name": "rgvars", - "type": "PROPVARIANT" - } - ], - "CoWaitForMultipleHandles": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "cHandles", - "type": "ULONG" - }, - { - "name": "pHandles", - "type": "LPHANDLE" - }, - { - "name": "lpdwindex", - "type": "LPDWORD" - } - ], - "CoWaitForMultipleObjects": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "cHandles", - "type": "ULONG" - }, - { - "name": "pHandles", - "type": "HANDLE" - }, - { - "name": "lpdwindex", - "type": "LPDWORD" - } - ], - "CoGetTreatAsClass": [ - { - "name": "clsidOld", - "type": "IID" - }, - { - "name": "pClsidNew", - "type": "LPCLSID" - } - ], - "CoInvalidateRemoteMachineBindings": [ - { - "name": "pszMachineName", - "type": "LPOLESTR" - } - ], - "RoGetAgileReference": [ - { - "name": "options", - "type": { - "name": "AgileReferenceOptions", - "data_type": "Enum", - "enumerators": [] - } - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "pUnk", - "type": "IUnknown" - }, - { - "name": "ppAgileReference", - "type": "IAgileReference" - } - ], - "CoTaskMemAlloc": [ - { - "name": "cb", - "type": "SIZE_T" - } - ], - "CoTaskMemRealloc": [ - { - "name": "pv", - "type": "LPVOID" - }, - { - "name": "cb", - "type": "SIZE_T" - } - ], - "CoTaskMemFree": [ - { - "name": "pv", - "type": "LPVOID" - } - ], - "CoFileTimeNow": [ - { - "name": "lpFileTime", - "type": "FILETIME" - } - ], - "CLSIDFromProgIDEx": [ - { - "name": "lpszProgID", - "type": "LPCOLESTR" - }, - { - "name": "lpclsid", - "type": "LPCLSID" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/coml2api.json b/qiling/extensions/windows_sdk/coml2api.json deleted file mode 100644 index 33c8f1ee8..000000000 --- a/qiling/extensions/windows_sdk/coml2api.json +++ /dev/null @@ -1,340 +0,0 @@ -{ - "StgCreateDocfile": [ - { - "name": "pwcsName", - "type": "WCHAR" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "ppstgOpen", - "type": "IStorage" - } - ], - "StgCreateDocfileOnILockBytes": [ - { - "name": "plkbyt", - "type": "ILockBytes" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "ppstgOpen", - "type": "IStorage" - } - ], - "StgOpenStorage": [ - { - "name": "pwcsName", - "type": "WCHAR" - }, - { - "name": "pstgPriority", - "type": "IStorage" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "snbExclude", - "type": "SNB" - }, - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "ppstgOpen", - "type": "IStorage" - } - ], - "StgOpenStorageOnILockBytes": [ - { - "name": "plkbyt", - "type": "ILockBytes" - }, - { - "name": "pstgPriority", - "type": "IStorage" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "snbExclude", - "type": "SNB" - }, - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "ppstgOpen", - "type": "IStorage" - } - ], - "StgIsStorageFile": [ - { - "name": "pwcsName", - "type": "WCHAR" - } - ], - "StgIsStorageILockBytes": [ - { - "name": "plkbyt", - "type": "ILockBytes" - } - ], - "StgSetTimes": [ - { - "name": "lpszName", - "type": "WCHAR" - }, - { - "name": "pctime", - "type": "FILETIME" - }, - { - "name": "patime", - "type": "FILETIME" - }, - { - "name": "pmtime", - "type": "FILETIME" - } - ], - "StgCreateStorageEx": [ - { - "name": "pwcsName", - "type": "WCHAR" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "stgfmt", - "type": "DWORD" - }, - { - "name": "grfAttrs", - "type": "DWORD" - }, - { - "name": "pStgOptions", - "type": "STGOPTIONS" - }, - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppObjectOpen", - "type": "void" - } - ], - "StgOpenStorageEx": [ - { - "name": "pwcsName", - "type": "WCHAR" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "stgfmt", - "type": "DWORD" - }, - { - "name": "grfAttrs", - "type": "DWORD" - }, - { - "name": "pStgOptions", - "type": "STGOPTIONS" - }, - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppObjectOpen", - "type": "void" - } - ], - "StgCreatePropStg": [ - { - "name": "pUnk", - "type": "IUnknown" - }, - { - "name": "fmtid", - "type": "IID" - }, - { - "name": "pclsid", - "type": "CLSID" - }, - { - "name": "grfFlags", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "ppPropStg", - "type": "IPropertyStorage" - } - ], - "StgOpenPropStg": [ - { - "name": "pUnk", - "type": "IUnknown" - }, - { - "name": "fmtid", - "type": "IID" - }, - { - "name": "grfFlags", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "ppPropStg", - "type": "IPropertyStorage" - } - ], - "StgCreatePropSetStg": [ - { - "name": "pStorage", - "type": "IStorage" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "ppPropSetStg", - "type": "IPropertySetStorage" - } - ], - "FmtIdToPropStgName": [ - { - "name": "pfmtid", - "type": "FMTID" - }, - { - "name": "oszName", - "type": "LPOLESTR" - } - ], - "PropStgNameToFmtId": [ - { - "name": "oszName", - "type": "LPOLESTR" - }, - { - "name": "pfmtid", - "type": "FMTID" - } - ], - "ReadClassStg": [ - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "pclsid", - "type": "CLSID" - } - ], - "WriteClassStg": [ - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "rclsid", - "type": "IID" - } - ], - "ReadClassStm": [ - { - "name": "pStm", - "type": "LPSTREAM" - }, - { - "name": "pclsid", - "type": "CLSID" - } - ], - "WriteClassStm": [ - { - "name": "pStm", - "type": "LPSTREAM" - }, - { - "name": "rclsid", - "type": "IID" - } - ], - "GetHGlobalFromILockBytes": [ - { - "name": "plkbyt", - "type": "LPLOCKBYTES" - }, - { - "name": "phglobal", - "type": "HGLOBAL" - } - ], - "CreateILockBytesOnHGlobal": [ - { - "name": "hGlobal", - "type": "HGLOBAL" - }, - { - "name": "fDeleteOnRelease", - "type": "BOOL" - }, - { - "name": "pplkbyt", - "type": "LPLOCKBYTES" - } - ], - "GetConvertStg": [ - { - "name": "pStg", - "type": "LPSTORAGE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/commctrl.json b/qiling/extensions/windows_sdk/commctrl.json deleted file mode 100644 index 9d054d64f..000000000 --- a/qiling/extensions/windows_sdk/commctrl.json +++ /dev/null @@ -1,1260 +0,0 @@ -{ - "InitCommonControls": [ - { - "name": "VOID", - "type": "void" - } - ], - "InitCommonControlsEx": [ - { - "name": "picce", - "type": "INITCOMMONCONTROLSEX" - } - ], - "ImageList_Create": [ - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "flags", - "type": "UINT" - }, - { - "name": "cInitial", - "type": "int" - }, - { - "name": "cGrow", - "type": "int" - } - ], - "ImageList_Destroy": [ - { - "name": "himl", - "type": "HIMAGELIST" - } - ], - "ImageList_GetImageCount": [ - { - "name": "himl", - "type": "HIMAGELIST" - } - ], - "ImageList_SetImageCount": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "uNewCount", - "type": "UINT" - } - ], - "ImageList_Add": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "hbmImage", - "type": "HBITMAP" - }, - { - "name": "hbmMask", - "type": "HBITMAP" - } - ], - "ImageList_ReplaceIcon": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "i", - "type": "int" - }, - { - "name": "hicon", - "type": "HICON" - } - ], - "ImageList_SetBkColor": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "clrBk", - "type": "COLORREF" - } - ], - "ImageList_GetBkColor": [ - { - "name": "himl", - "type": "HIMAGELIST" - } - ], - "ImageList_SetOverlayImage": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "iImage", - "type": "int" - }, - { - "name": "iOverlay", - "type": "int" - } - ], - "ImageList_Draw": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "i", - "type": "int" - }, - { - "name": "hdcDst", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "fStyle", - "type": "UINT" - } - ], - "ImageList_Replace": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "i", - "type": "int" - }, - { - "name": "hbmImage", - "type": "HBITMAP" - }, - { - "name": "hbmMask", - "type": "HBITMAP" - } - ], - "ImageList_AddMasked": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "hbmImage", - "type": "HBITMAP" - }, - { - "name": "crMask", - "type": "COLORREF" - } - ], - "ImageList_DrawEx": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "i", - "type": "int" - }, - { - "name": "hdcDst", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "dx", - "type": "int" - }, - { - "name": "dy", - "type": "int" - }, - { - "name": "rgbBk", - "type": "COLORREF" - }, - { - "name": "rgbFg", - "type": "COLORREF" - }, - { - "name": "fStyle", - "type": "UINT" - } - ], - "ImageList_DrawIndirect": [ - { - "name": "pimldp", - "type": "IMAGELISTDRAWPARAMS" - } - ], - "ImageList_Remove": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "i", - "type": "int" - } - ], - "ImageList_GetIcon": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "i", - "type": "int" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "ImageList_LoadImageA": [ - { - "name": "hi", - "type": "HINSTANCE" - }, - { - "name": "lpbmp", - "type": "LPCSTR" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cGrow", - "type": "int" - }, - { - "name": "crMask", - "type": "COLORREF" - }, - { - "name": "uType", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "ImageList_LoadImageW": [ - { - "name": "hi", - "type": "HINSTANCE" - }, - { - "name": "lpbmp", - "type": "LPCWSTR" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cGrow", - "type": "int" - }, - { - "name": "crMask", - "type": "COLORREF" - }, - { - "name": "uType", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "ImageList_Copy": [ - { - "name": "himlDst", - "type": "HIMAGELIST" - }, - { - "name": "iDst", - "type": "int" - }, - { - "name": "himlSrc", - "type": "HIMAGELIST" - }, - { - "name": "iSrc", - "type": "int" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "ImageList_BeginDrag": [ - { - "name": "himlTrack", - "type": "HIMAGELIST" - }, - { - "name": "iTrack", - "type": "int" - }, - { - "name": "dxHotspot", - "type": "int" - }, - { - "name": "dyHotspot", - "type": "int" - } - ], - "ImageList_EndDrag": [ - { - "name": "VOID", - "type": "void" - } - ], - "ImageList_DragEnter": [ - { - "name": "hwndLock", - "type": "HWND" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "ImageList_DragLeave": [ - { - "name": "hwndLock", - "type": "HWND" - } - ], - "ImageList_DragMove": [ - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "ImageList_SetDragCursorImage": [ - { - "name": "himlDrag", - "type": "HIMAGELIST" - }, - { - "name": "iDrag", - "type": "int" - }, - { - "name": "dxHotspot", - "type": "int" - }, - { - "name": "dyHotspot", - "type": "int" - } - ], - "ImageList_DragShowNolock": [ - { - "name": "fShow", - "type": "BOOL" - } - ], - "ImageList_GetDragImage": [ - { - "name": "ppt", - "type": "POINT" - }, - { - "name": "pptHotspot", - "type": "POINT" - } - ], - "ImageList_Read": [ - { - "name": "pstm", - "type": { - "name": "IStream", - "data_type": "Struct", - "elements": [] - } - } - ], - "ImageList_Write": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "pstm", - "type": { - "name": "IStream", - "data_type": "Struct", - "elements": [] - } - } - ], - "ImageList_ReadEx": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pstm", - "type": { - "name": "IStream", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "PVOID" - } - ], - "ImageList_WriteEx": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pstm", - "type": { - "name": "IStream", - "data_type": "Struct", - "elements": [] - } - } - ], - "ImageList_GetIconSize": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - } - ], - "ImageList_SetIconSize": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - } - ], - "ImageList_GetImageInfo": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "i", - "type": "int" - }, - { - "name": "pImageInfo", - "type": "IMAGEINFO" - } - ], - "ImageList_Merge": [ - { - "name": "himl1", - "type": "HIMAGELIST" - }, - { - "name": "i1", - "type": "int" - }, - { - "name": "himl2", - "type": "HIMAGELIST" - }, - { - "name": "i2", - "type": "int" - }, - { - "name": "dx", - "type": "int" - }, - { - "name": "dy", - "type": "int" - } - ], - "ImageList_Duplicate": [ - { - "name": "himl", - "type": "HIMAGELIST" - } - ], - "HIMAGELIST_QueryInterface": [ - { - "name": "himl", - "type": "HIMAGELIST" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "CreateToolbarEx": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "ws", - "type": "DWORD" - }, - { - "name": "wID", - "type": "UINT" - }, - { - "name": "nBitmaps", - "type": "int" - }, - { - "name": "hBMInst", - "type": "HINSTANCE" - }, - { - "name": "wBMID", - "type": "UINT_PTR" - }, - { - "name": "lpButtons", - "type": "LPCTBBUTTON" - }, - { - "name": "iNumButtons", - "type": "int" - }, - { - "name": "dxButton", - "type": "int" - }, - { - "name": "dyButton", - "type": "int" - }, - { - "name": "dxBitmap", - "type": "int" - }, - { - "name": "dyBitmap", - "type": "int" - }, - { - "name": "uStructSize", - "type": "UINT" - } - ], - "CreateMappedBitmap": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "idBitmap", - "type": "INT_PTR" - }, - { - "name": "wFlags", - "type": "UINT" - }, - { - "name": "lpColorMap", - "type": "LPCOLORMAP" - }, - { - "name": "iNumMaps", - "type": "int" - } - ], - "DrawStatusTextA": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "lprc", - "type": "LPCRECT" - }, - { - "name": "pszText", - "type": "LPCSTR" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "DrawStatusTextW": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "lprc", - "type": "LPCRECT" - }, - { - "name": "pszText", - "type": "LPCWSTR" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "CreateStatusWindowA": [ - { - "name": "style", - "type": "LONG" - }, - { - "name": "lpszText", - "type": "LPCSTR" - }, - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "wID", - "type": "UINT" - } - ], - "CreateStatusWindowW": [ - { - "name": "style", - "type": "LONG" - }, - { - "name": "lpszText", - "type": "LPCWSTR" - }, - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "wID", - "type": "UINT" - } - ], - "MenuHelp": [ - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "hMainMenu", - "type": "HMENU" - }, - { - "name": "hInst", - "type": "HINSTANCE" - }, - { - "name": "hwndStatus", - "type": "HWND" - }, - { - "name": "lpwIDs", - "type": "UINT" - } - ], - "ShowHideMenuCtl": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "uFlags", - "type": "UINT_PTR" - }, - { - "name": "lpInfo", - "type": "LPINT" - } - ], - "GetEffectiveClientRect": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lprc", - "type": "LPRECT" - }, - { - "name": "lpInfo", - "type": "INT" - } - ], - "MakeDragList": [ - { - "name": "hLB", - "type": "HWND" - } - ], - "DrawInsert": [ - { - "name": "handParent", - "type": "HWND" - }, - { - "name": "hLB", - "type": "HWND" - }, - { - "name": "nItem", - "type": "int" - } - ], - "LBItemFromPt": [ - { - "name": "hLB", - "type": "HWND" - }, - { - "name": "pt", - "type": "POINT" - }, - { - "name": "bAutoScroll", - "type": "BOOL" - } - ], - "CreateUpDownControl": [ - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "hParent", - "type": "HWND" - }, - { - "name": "nID", - "type": "int" - }, - { - "name": "hInst", - "type": "HINSTANCE" - }, - { - "name": "hBuddy", - "type": "HWND" - }, - { - "name": "nUpper", - "type": "int" - }, - { - "name": "nLower", - "type": "int" - }, - { - "name": "nPos", - "type": "int" - } - ], - "TaskDialogIndirect": [ - { - "name": "pTaskConfig", - "type": "TASKDIALOGCONFIG" - }, - { - "name": "pnButton", - "type": "int" - }, - { - "name": "pnRadioButton", - "type": "int" - }, - { - "name": "pfVerificationFlagChecked", - "type": "BOOL" - } - ], - "TaskDialog": [ - { - "name": "hwndOwner", - "type": "HWND" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "pszWindowTitle", - "type": "PCWSTR" - }, - { - "name": "pszMainInstruction", - "type": "PCWSTR" - }, - { - "name": "pszContent", - "type": "PCWSTR" - }, - { - "name": "dwCommonButtons", - "type": "TASKDIALOG_COMMON_BUTTON_FLAGS" - }, - { - "name": "pszIcon", - "type": "PCWSTR" - }, - { - "name": "pnButton", - "type": "int" - } - ], - "InitMUILanguage": [ - { - "name": "uiLang", - "type": "LANGID" - } - ], - "GetMUILanguage": [ - { - "name": "VOID", - "type": "void" - } - ], - "_TrackMouseEvent": [ - { - "name": "lpEventTrack", - "type": "LPTRACKMOUSEEVENT" - } - ], - "FlatSB_EnableScrollBar": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "UINT" - } - ], - "FlatSB_ShowScrollBar": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "code", - "type": "int" - }, - { - "name": "VOID", - "type": "BOOL" - } - ], - "FlatSB_GetScrollRange": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "code", - "type": "int" - }, - { - "name": "VOID", - "type": "LPINT" - }, - { - "name": "VOID", - "type": "LPINT" - } - ], - "FlatSB_GetScrollInfo": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "code", - "type": "int" - }, - { - "name": "VOID", - "type": "LPSCROLLINFO" - } - ], - "FlatSB_GetScrollPos": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "code", - "type": "int" - } - ], - "FlatSB_GetScrollProp": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "propIndex", - "type": "int" - }, - { - "name": "VOID", - "type": "LPINT" - } - ], - "FlatSB_GetScrollPropPtr": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "propIndex", - "type": "int" - }, - { - "name": "VOID", - "type": "PINT_PTR" - } - ], - "FlatSB_SetScrollPos": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "code", - "type": "int" - }, - { - "name": "pos", - "type": "int" - }, - { - "name": "fRedraw", - "type": "BOOL" - } - ], - "FlatSB_SetScrollInfo": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "code", - "type": "int" - }, - { - "name": "psi", - "type": "LPSCROLLINFO" - }, - { - "name": "fRedraw", - "type": "BOOL" - } - ], - "FlatSB_SetScrollRange": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "code", - "type": "int" - }, - { - "name": "min", - "type": "int" - }, - { - "name": "max", - "type": "int" - }, - { - "name": "fRedraw", - "type": "BOOL" - } - ], - "FlatSB_SetScrollProp": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "index", - "type": "UINT" - }, - { - "name": "newValue", - "type": "INT_PTR" - }, - { - "name": "VOID", - "type": "BOOL" - } - ], - "InitializeFlatSB": [ - { - "name": "VOID", - "type": "HWND" - } - ], - "UninitializeFlatSB": [ - { - "name": "VOID", - "type": "HWND" - } - ], - "SetWindowSubclass": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "pfnSubclass", - "type": "SUBCLASSPROC" - }, - { - "name": "uIdSubclass", - "type": "UINT_PTR" - }, - { - "name": "dwRefData", - "type": "DWORD_PTR" - } - ], - "GetWindowSubclass": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "pfnSubclass", - "type": "SUBCLASSPROC" - }, - { - "name": "uIdSubclass", - "type": "UINT_PTR" - }, - { - "name": "pdwRefData", - "type": "DWORD_PTR" - } - ], - "RemoveWindowSubclass": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "pfnSubclass", - "type": "SUBCLASSPROC" - }, - { - "name": "uIdSubclass", - "type": "UINT_PTR" - } - ], - "DefSubclassProc": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "LoadIconMetric": [ - { - "name": "hinst", - "type": "HINSTANCE" - }, - { - "name": "pszName", - "type": "PCWSTR" - }, - { - "name": "lims", - "type": "int" - }, - { - "name": "phico", - "type": "HICON" - } - ], - "LoadIconWithScaleDown": [ - { - "name": "hinst", - "type": "HINSTANCE" - }, - { - "name": "pszName", - "type": "PCWSTR" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "phico", - "type": "HICON" - } - ], - "DrawShadowText": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pszText", - "type": "LPCWSTR" - }, - { - "name": "cch", - "type": "UINT" - }, - { - "name": "prc", - "type": "RECT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "crText", - "type": "COLORREF" - }, - { - "name": "crShadow", - "type": "COLORREF" - }, - { - "name": "ixOffset", - "type": "int" - }, - { - "name": "iyOffset", - "type": "int" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1.json b/qiling/extensions/windows_sdk/d2d1.json index a76e22a4e..461dc4e15 100644 --- a/qiling/extensions/windows_sdk/d2d1.json +++ b/qiling/extensions/windows_sdk/d2d1.json @@ -1,64 +1,78 @@ { - "D2D1CreateFactory": [ + "D2D1CreateDevice": [ { - "name": "factoryType", - "type": "D2D1_FACTORY_TYPE" + "name": "dxgiDevice", + "type": "IDXGIDevice" }, { - "name": "riid", - "type": "IID" + "name": "creationProperties", + "type": "D2D1_CREATION_PROPERTIES" }, { - "name": "pFactoryOptions", - "type": "D2D1_FACTORY_OPTIONS" + "name": "d2dDevice", + "type": "ID2D1Device" + } + ], + "D2D1CreateDeviceContext": [ + { + "name": "dxgiSurface", + "type": "IDXGISurface" + }, + { + "name": "creationProperties", + "type": "D2D1_CREATION_PROPERTIES" }, { - "name": "ppIFactory", - "type": "void" + "name": "d2dDeviceContext", + "type": "ID2D1DeviceContext" } ], - "D2D1MakeRotateMatrix": [ + "D2D1ConvertColorSpace": [ { - "name": "angle", - "type": "FLOAT" + "name": "sourceColorSpace", + "type": "D2D1_COLOR_SPACE" }, { - "name": "center", - "type": "D2D1_POINT_2F" + "name": "destinationColorSpace", + "type": "D2D1_COLOR_SPACE" }, { - "name": "matrix", - "type": "D2D1_MATRIX_3X2_F" + "name": "color", + "type": "D2D1_COLOR_F" } ], - "D2D1MakeSkewMatrix": [ + "D2D1SinCos": [ { - "name": "angleX", + "name": "angle", "type": "FLOAT" }, { - "name": "angleY", + "name": "s", "type": "FLOAT" }, { - "name": "center", - "type": "D2D1_POINT_2F" - }, - { - "name": "matrix", - "type": "D2D1_MATRIX_3X2_F" + "name": "c", + "type": "FLOAT" } ], - "D2D1IsMatrixInvertible": [ + "D2D1Tan": [ { - "name": "matrix", - "type": "D2D1_MATRIX_3X2_F" + "name": "angle", + "type": "FLOAT" } ], - "D2D1InvertMatrix": [ + "D2D1Vec3Length": [ + { + "name": "x", + "type": "FLOAT" + }, { - "name": "matrix", - "type": "D2D1_MATRIX_3X2_F" + "name": "y", + "type": "FLOAT" + }, + { + "name": "z", + "type": "FLOAT" } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1_1.json b/qiling/extensions/windows_sdk/d2d1_1.json deleted file mode 100644 index 461dc4e15..000000000 --- a/qiling/extensions/windows_sdk/d2d1_1.json +++ /dev/null @@ -1,78 +0,0 @@ -{ - "D2D1CreateDevice": [ - { - "name": "dxgiDevice", - "type": "IDXGIDevice" - }, - { - "name": "creationProperties", - "type": "D2D1_CREATION_PROPERTIES" - }, - { - "name": "d2dDevice", - "type": "ID2D1Device" - } - ], - "D2D1CreateDeviceContext": [ - { - "name": "dxgiSurface", - "type": "IDXGISurface" - }, - { - "name": "creationProperties", - "type": "D2D1_CREATION_PROPERTIES" - }, - { - "name": "d2dDeviceContext", - "type": "ID2D1DeviceContext" - } - ], - "D2D1ConvertColorSpace": [ - { - "name": "sourceColorSpace", - "type": "D2D1_COLOR_SPACE" - }, - { - "name": "destinationColorSpace", - "type": "D2D1_COLOR_SPACE" - }, - { - "name": "color", - "type": "D2D1_COLOR_F" - } - ], - "D2D1SinCos": [ - { - "name": "angle", - "type": "FLOAT" - }, - { - "name": "s", - "type": "FLOAT" - }, - { - "name": "c", - "type": "FLOAT" - } - ], - "D2D1Tan": [ - { - "name": "angle", - "type": "FLOAT" - } - ], - "D2D1Vec3Length": [ - { - "name": "x", - "type": "FLOAT" - }, - { - "name": "y", - "type": "FLOAT" - }, - { - "name": "z", - "type": "FLOAT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1_1helper.json b/qiling/extensions/windows_sdk/d2d1_1helper.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/d2d1_1helper.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1_2.json b/qiling/extensions/windows_sdk/d2d1_2.json deleted file mode 100644 index 232398d71..000000000 --- a/qiling/extensions/windows_sdk/d2d1_2.json +++ /dev/null @@ -1,8 +0,0 @@ -{ - "D2D1ComputeMaximumScaleFactor": [ - { - "name": "matrix", - "type": "D2D1_MATRIX_3X2_F" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1_3.json b/qiling/extensions/windows_sdk/d2d1_3.json deleted file mode 100644 index ca2951973..000000000 --- a/qiling/extensions/windows_sdk/d2d1_3.json +++ /dev/null @@ -1,68 +0,0 @@ -{ - "D2D1GetGradientMeshInteriorPointsFromCoonsPatch": [ - { - "name": "pPoint0", - "type": "D2D1_POINT_2F" - }, - { - "name": "pPoint1", - "type": "D2D1_POINT_2F" - }, - { - "name": "pPoint2", - "type": "D2D1_POINT_2F" - }, - { - "name": "pPoint3", - "type": "D2D1_POINT_2F" - }, - { - "name": "pPoint4", - "type": "D2D1_POINT_2F" - }, - { - "name": "pPoint5", - "type": "D2D1_POINT_2F" - }, - { - "name": "pPoint6", - "type": "D2D1_POINT_2F" - }, - { - "name": "pPoint7", - "type": "D2D1_POINT_2F" - }, - { - "name": "pPoint8", - "type": "D2D1_POINT_2F" - }, - { - "name": "pPoint9", - "type": "D2D1_POINT_2F" - }, - { - "name": "pPoint10", - "type": "D2D1_POINT_2F" - }, - { - "name": "pPoint11", - "type": "D2D1_POINT_2F" - }, - { - "name": "pTensorPoint11", - "type": "D2D1_POINT_2F" - }, - { - "name": "pTensorPoint12", - "type": "D2D1_POINT_2F" - }, - { - "name": "pTensorPoint21", - "type": "D2D1_POINT_2F" - }, - { - "name": "pTensorPoint22", - "type": "D2D1_POINT_2F" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1_3helper.json b/qiling/extensions/windows_sdk/d2d1_3helper.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/d2d1_3helper.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1helper.json b/qiling/extensions/windows_sdk/d2d1helper.json deleted file mode 100644 index d2acb8612..000000000 --- a/qiling/extensions/windows_sdk/d2d1helper.json +++ /dev/null @@ -1,24 +0,0 @@ -{ - "Ellipse": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d10.json b/qiling/extensions/windows_sdk/d3d10.json index 9e26dfeeb..2eb98e60d 100644 --- a/qiling/extensions/windows_sdk/d3d10.json +++ b/qiling/extensions/windows_sdk/d3d10.json @@ -1 +1,72 @@ -{} \ No newline at end of file +{ + "D3D10CreateDevice": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D10_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "ppDevice", + "type": "ID3D10Device" + } + ], + "D3D10CreateDeviceAndSwapChain": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D10_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "pSwapChainDesc", + "type": "DXGI_SWAP_CHAIN_DESC" + }, + { + "name": "ppSwapChain", + "type": "IDXGISwapChain" + }, + { + "name": "ppDevice", + "type": "ID3D10Device" + } + ], + "D3D10CreateBlob": [ + { + "name": "NumBytes", + "type": "SIZE_T" + }, + { + "name": "ppBuffer", + "type": "LPD3D10BLOB" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d10effect.json b/qiling/extensions/windows_sdk/d3d10effect.json deleted file mode 100644 index 2bdf171a7..000000000 --- a/qiling/extensions/windows_sdk/d3d10effect.json +++ /dev/null @@ -1,220 +0,0 @@ -{ - "D3D10StateBlockMaskUnion": [ - { - "name": "pA", - "type": "D3D10_STATE_BLOCK_MASK" - }, - { - "name": "pB", - "type": "D3D10_STATE_BLOCK_MASK" - }, - { - "name": "pResult", - "type": "D3D10_STATE_BLOCK_MASK" - } - ], - "D3D10StateBlockMaskIntersect": [ - { - "name": "pA", - "type": "D3D10_STATE_BLOCK_MASK" - }, - { - "name": "pB", - "type": "D3D10_STATE_BLOCK_MASK" - }, - { - "name": "pResult", - "type": "D3D10_STATE_BLOCK_MASK" - } - ], - "D3D10StateBlockMaskDifference": [ - { - "name": "pA", - "type": "D3D10_STATE_BLOCK_MASK" - }, - { - "name": "pB", - "type": "D3D10_STATE_BLOCK_MASK" - }, - { - "name": "pResult", - "type": "D3D10_STATE_BLOCK_MASK" - } - ], - "D3D10StateBlockMaskEnableCapture": [ - { - "name": "pMask", - "type": "D3D10_STATE_BLOCK_MASK" - }, - { - "name": "StateType", - "type": "D3D10_DEVICE_STATE_TYPES" - }, - { - "name": "RangeStart", - "type": "UINT" - }, - { - "name": "RangeLength", - "type": "UINT" - } - ], - "D3D10StateBlockMaskDisableCapture": [ - { - "name": "pMask", - "type": "D3D10_STATE_BLOCK_MASK" - }, - { - "name": "StateType", - "type": "D3D10_DEVICE_STATE_TYPES" - }, - { - "name": "RangeStart", - "type": "UINT" - }, - { - "name": "RangeLength", - "type": "UINT" - } - ], - "D3D10StateBlockMaskEnableAll": [ - { - "name": "pMask", - "type": "D3D10_STATE_BLOCK_MASK" - } - ], - "D3D10StateBlockMaskDisableAll": [ - { - "name": "pMask", - "type": "D3D10_STATE_BLOCK_MASK" - } - ], - "D3D10StateBlockMaskGetSetting": [ - { - "name": "pMask", - "type": "D3D10_STATE_BLOCK_MASK" - }, - { - "name": "StateType", - "type": "D3D10_DEVICE_STATE_TYPES" - }, - { - "name": "Entry", - "type": "UINT" - } - ], - "D3D10CreateStateBlock": [ - { - "name": "pDevice", - "type": "ID3D10Device" - }, - { - "name": "pStateBlockMask", - "type": "D3D10_STATE_BLOCK_MASK" - }, - { - "name": "ppStateBlock", - "type": "ID3D10StateBlock" - } - ], - "D3D10CompileEffectFromMemory": [ - { - "name": "pData", - "type": "void" - }, - { - "name": "DataLength", - "type": "SIZE_T" - }, - { - "name": "pSrcFileName", - "type": "LPCSTR" - }, - { - "name": "pDefines", - "type": "D3D10_SHADER_MACRO" - }, - { - "name": "pInclude", - "type": "ID3D10Include" - }, - { - "name": "HLSLFlags", - "type": "UINT" - }, - { - "name": "FXFlags", - "type": "UINT" - }, - { - "name": "ppCompiledEffect", - "type": "ID3D10Blob" - }, - { - "name": "ppErrors", - "type": "ID3D10Blob" - } - ], - "D3D10CreateEffectFromMemory": [ - { - "name": "pData", - "type": "void" - }, - { - "name": "DataLength", - "type": "SIZE_T" - }, - { - "name": "FXFlags", - "type": "UINT" - }, - { - "name": "pDevice", - "type": "ID3D10Device" - }, - { - "name": "pEffectPool", - "type": "ID3D10EffectPool" - }, - { - "name": "ppEffect", - "type": "ID3D10Effect" - } - ], - "D3D10CreateEffectPoolFromMemory": [ - { - "name": "pData", - "type": "void" - }, - { - "name": "DataLength", - "type": "SIZE_T" - }, - { - "name": "FXFlags", - "type": "UINT" - }, - { - "name": "pDevice", - "type": "ID3D10Device" - }, - { - "name": "ppEffectPool", - "type": "ID3D10EffectPool" - } - ], - "D3D10DisassembleEffect": [ - { - "name": "pEffect", - "type": "ID3D10Effect" - }, - { - "name": "EnableColorCode", - "type": "BOOL" - }, - { - "name": "ppDisassembly", - "type": "ID3D10Blob" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d10misc.json b/qiling/extensions/windows_sdk/d3d10misc.json deleted file mode 100644 index 2eb98e60d..000000000 --- a/qiling/extensions/windows_sdk/d3d10misc.json +++ /dev/null @@ -1,72 +0,0 @@ -{ - "D3D10CreateDevice": [ - { - "name": "pAdapter", - "type": "IDXGIAdapter" - }, - { - "name": "DriverType", - "type": "D3D10_DRIVER_TYPE" - }, - { - "name": "Software", - "type": "HMODULE" - }, - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "SDKVersion", - "type": "UINT" - }, - { - "name": "ppDevice", - "type": "ID3D10Device" - } - ], - "D3D10CreateDeviceAndSwapChain": [ - { - "name": "pAdapter", - "type": "IDXGIAdapter" - }, - { - "name": "DriverType", - "type": "D3D10_DRIVER_TYPE" - }, - { - "name": "Software", - "type": "HMODULE" - }, - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "SDKVersion", - "type": "UINT" - }, - { - "name": "pSwapChainDesc", - "type": "DXGI_SWAP_CHAIN_DESC" - }, - { - "name": "ppSwapChain", - "type": "IDXGISwapChain" - }, - { - "name": "ppDevice", - "type": "ID3D10Device" - } - ], - "D3D10CreateBlob": [ - { - "name": "NumBytes", - "type": "SIZE_T" - }, - { - "name": "ppBuffer", - "type": "LPD3D10BLOB" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d11on12.json b/qiling/extensions/windows_sdk/d3d11on12.json deleted file mode 100644 index 8883f33cd..000000000 --- a/qiling/extensions/windows_sdk/d3d11on12.json +++ /dev/null @@ -1,44 +0,0 @@ -{ - "D3D11On12CreateDevice": [ - { - "name": "pDevice", - "type": "IUnknown" - }, - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "pFeatureLevels", - "type": "D3D_FEATURE_LEVEL" - }, - { - "name": "FeatureLevels", - "type": "UINT" - }, - { - "name": "ppCommandQueues", - "type": "IUnknown" - }, - { - "name": "NumQueues", - "type": "UINT" - }, - { - "name": "NodeMask", - "type": "UINT" - }, - { - "name": "ppDevice", - "type": "ID3D11Device" - }, - { - "name": "ppImmediateContext", - "type": "ID3D11DeviceContext" - }, - { - "name": "pChosenFeatureLevel", - "type": "D3D_FEATURE_LEVEL" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d9helper.json b/qiling/extensions/windows_sdk/d3d9helper.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/d3d9helper.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/datetimeapi.json b/qiling/extensions/windows_sdk/datetimeapi.json deleted file mode 100644 index b44e209a9..000000000 --- a/qiling/extensions/windows_sdk/datetimeapi.json +++ /dev/null @@ -1,162 +0,0 @@ -{ - "GetDateFormatA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpDate", - "type": "SYSTEMTIME" - }, - { - "name": "lpFormat", - "type": "LPCSTR" - }, - { - "name": "lpDateStr", - "type": "LPSTR" - }, - { - "name": "cchDate", - "type": "int" - } - ], - "GetDateFormatW": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpDate", - "type": "SYSTEMTIME" - }, - { - "name": "lpFormat", - "type": "LPCWSTR" - }, - { - "name": "lpDateStr", - "type": "LPWSTR" - }, - { - "name": "cchDate", - "type": "int" - } - ], - "GetTimeFormatA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpTime", - "type": "SYSTEMTIME" - }, - { - "name": "lpFormat", - "type": "LPCSTR" - }, - { - "name": "lpTimeStr", - "type": "LPSTR" - }, - { - "name": "cchTime", - "type": "int" - } - ], - "GetTimeFormatW": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpTime", - "type": "SYSTEMTIME" - }, - { - "name": "lpFormat", - "type": "LPCWSTR" - }, - { - "name": "lpTimeStr", - "type": "LPWSTR" - }, - { - "name": "cchTime", - "type": "int" - } - ], - "GetTimeFormatEx": [ - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpTime", - "type": "SYSTEMTIME" - }, - { - "name": "lpFormat", - "type": "LPCWSTR" - }, - { - "name": "lpTimeStr", - "type": "LPWSTR" - }, - { - "name": "cchTime", - "type": "int" - } - ], - "GetDateFormatEx": [ - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpDate", - "type": "SYSTEMTIME" - }, - { - "name": "lpFormat", - "type": "LPCWSTR" - }, - { - "name": "lpDateStr", - "type": "LPWSTR" - }, - { - "name": "cchDate", - "type": "int" - }, - { - "name": "lpCalendar", - "type": "LPCWSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dde.json b/qiling/extensions/windows_sdk/dde.json deleted file mode 100644 index bb7bede60..000000000 --- a/qiling/extensions/windows_sdk/dde.json +++ /dev/null @@ -1,90 +0,0 @@ -{ - "DdeSetQualityOfService": [ - { - "name": "hwndClient", - "type": "HWND" - }, - { - "name": "pqosNew", - "type": "SECURITY_QUALITY_OF_SERVICE" - }, - { - "name": "pqosPrev", - "type": "PSECURITY_QUALITY_OF_SERVICE" - } - ], - "ImpersonateDdeClientWindow": [ - { - "name": "hWndClient", - "type": "HWND" - }, - { - "name": "hWndServer", - "type": "HWND" - } - ], - "PackDDElParam": [ - { - "name": "msg", - "type": "UINT" - }, - { - "name": "uiLo", - "type": "UINT_PTR" - }, - { - "name": "uiHi", - "type": "UINT_PTR" - } - ], - "UnpackDDElParam": [ - { - "name": "msg", - "type": "UINT" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "puiLo", - "type": "PUINT_PTR" - }, - { - "name": "puiHi", - "type": "PUINT_PTR" - } - ], - "FreeDDElParam": [ - { - "name": "msg", - "type": "UINT" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "ReuseDDElParam": [ - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "msgIn", - "type": "UINT" - }, - { - "name": "msgOut", - "type": "UINT" - }, - { - "name": "uiLo", - "type": "UINT_PTR" - }, - { - "name": "uiHi", - "type": "UINT_PTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ddeml.json b/qiling/extensions/windows_sdk/ddeml.json deleted file mode 100644 index 3f881d563..000000000 --- a/qiling/extensions/windows_sdk/ddeml.json +++ /dev/null @@ -1,436 +0,0 @@ -{ - "DdeInitializeA": [ - { - "name": "pidInst", - "type": "LPDWORD" - }, - { - "name": "pfnCallback", - "type": "PFNCALLBACK" - }, - { - "name": "afCmd", - "type": "DWORD" - }, - { - "name": "ulRes", - "type": "DWORD" - } - ], - "DdeInitializeW": [ - { - "name": "pidInst", - "type": "LPDWORD" - }, - { - "name": "pfnCallback", - "type": "PFNCALLBACK" - }, - { - "name": "afCmd", - "type": "DWORD" - }, - { - "name": "ulRes", - "type": "DWORD" - } - ], - "DdeUninitialize": [ - { - "name": "idInst", - "type": "DWORD" - } - ], - "DdeConnectList": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "hszService", - "type": "HSZ" - }, - { - "name": "hszTopic", - "type": "HSZ" - }, - { - "name": "hConvList", - "type": "HCONVLIST" - }, - { - "name": "pCC", - "type": "PCONVCONTEXT" - } - ], - "DdeQueryNextServer": [ - { - "name": "hConvList", - "type": "HCONVLIST" - }, - { - "name": "hConvPrev", - "type": "HCONV" - } - ], - "DdeDisconnectList": [ - { - "name": "hConvList", - "type": "HCONVLIST" - } - ], - "DdeConnect": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "hszService", - "type": "HSZ" - }, - { - "name": "hszTopic", - "type": "HSZ" - }, - { - "name": "pCC", - "type": "PCONVCONTEXT" - } - ], - "DdeDisconnect": [ - { - "name": "hConv", - "type": "HCONV" - } - ], - "DdeReconnect": [ - { - "name": "hConv", - "type": "HCONV" - } - ], - "DdeQueryConvInfo": [ - { - "name": "hConv", - "type": "HCONV" - }, - { - "name": "idTransaction", - "type": "DWORD" - }, - { - "name": "pConvInfo", - "type": "PCONVINFO" - } - ], - "DdeSetUserHandle": [ - { - "name": "hConv", - "type": "HCONV" - }, - { - "name": "id", - "type": "DWORD" - }, - { - "name": "hUser", - "type": "DWORD_PTR" - } - ], - "DdeAbandonTransaction": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "hConv", - "type": "HCONV" - }, - { - "name": "idTransaction", - "type": "DWORD" - } - ], - "DdePostAdvise": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "hszTopic", - "type": "HSZ" - }, - { - "name": "hszItem", - "type": "HSZ" - } - ], - "DdeEnableCallback": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "hConv", - "type": "HCONV" - }, - { - "name": "wCmd", - "type": "UINT" - } - ], - "DdeImpersonateClient": [ - { - "name": "hConv", - "type": "HCONV" - } - ], - "DdeNameService": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "hsz1", - "type": "HSZ" - }, - { - "name": "hsz2", - "type": "HSZ" - }, - { - "name": "afCmd", - "type": "UINT" - } - ], - "DdeClientTransaction": [ - { - "name": "pData", - "type": "LPBYTE" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "hConv", - "type": "HCONV" - }, - { - "name": "hszItem", - "type": "HSZ" - }, - { - "name": "wFmt", - "type": "UINT" - }, - { - "name": "wType", - "type": "UINT" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "pdwResult", - "type": "LPDWORD" - } - ], - "DdeCreateDataHandle": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "pSrc", - "type": "LPBYTE" - }, - { - "name": "cb", - "type": "DWORD" - }, - { - "name": "cbOff", - "type": "DWORD" - }, - { - "name": "hszItem", - "type": "HSZ" - }, - { - "name": "wFmt", - "type": "UINT" - }, - { - "name": "afCmd", - "type": "UINT" - } - ], - "DdeAddData": [ - { - "name": "hData", - "type": "HDDEDATA" - }, - { - "name": "pSrc", - "type": "LPBYTE" - }, - { - "name": "cb", - "type": "DWORD" - }, - { - "name": "cbOff", - "type": "DWORD" - } - ], - "DdeGetData": [ - { - "name": "hData", - "type": "HDDEDATA" - }, - { - "name": "pDst", - "type": "LPBYTE" - }, - { - "name": "cbMax", - "type": "DWORD" - }, - { - "name": "cbOff", - "type": "DWORD" - } - ], - "DdeAccessData": [ - { - "name": "hData", - "type": "HDDEDATA" - }, - { - "name": "pcbDataSize", - "type": "LPDWORD" - } - ], - "DdeUnaccessData": [ - { - "name": "hData", - "type": "HDDEDATA" - } - ], - "DdeFreeDataHandle": [ - { - "name": "hData", - "type": "HDDEDATA" - } - ], - "DdeGetLastError": [ - { - "name": "idInst", - "type": "DWORD" - } - ], - "DdeCreateStringHandleA": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "psz", - "type": "LPCSTR" - }, - { - "name": "iCodePage", - "type": "int" - } - ], - "DdeCreateStringHandleW": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "psz", - "type": "LPCWSTR" - }, - { - "name": "iCodePage", - "type": "int" - } - ], - "DdeQueryStringA": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "hsz", - "type": "HSZ" - }, - { - "name": "psz", - "type": "LPSTR" - }, - { - "name": "cchMax", - "type": "DWORD" - }, - { - "name": "iCodePage", - "type": "int" - } - ], - "DdeQueryStringW": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "hsz", - "type": "HSZ" - }, - { - "name": "psz", - "type": "LPWSTR" - }, - { - "name": "cchMax", - "type": "DWORD" - }, - { - "name": "iCodePage", - "type": "int" - } - ], - "DdeFreeStringHandle": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "hsz", - "type": "HSZ" - } - ], - "DdeKeepStringHandle": [ - { - "name": "idInst", - "type": "DWORD" - }, - { - "name": "hsz", - "type": "HSZ" - } - ], - "DdeCmpStringHandles": [ - { - "name": "hsz1", - "type": "HSZ" - }, - { - "name": "hsz2", - "type": "HSZ" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/debugapi.json b/qiling/extensions/windows_sdk/debugapi.json deleted file mode 100644 index 1aa5b045b..000000000 --- a/qiling/extensions/windows_sdk/debugapi.json +++ /dev/null @@ -1,82 +0,0 @@ -{ - "IsDebuggerPresent": [ - { - "name": "VOID", - "type": "void" - } - ], - "DebugBreak": [ - { - "name": "VOID", - "type": "void" - } - ], - "OutputDebugStringA": [ - { - "name": "lpOutputString", - "type": "LPCSTR" - } - ], - "OutputDebugStringW": [ - { - "name": "lpOutputString", - "type": "LPCWSTR" - } - ], - "ContinueDebugEvent": [ - { - "name": "dwProcessId", - "type": "DWORD" - }, - { - "name": "dwThreadId", - "type": "DWORD" - }, - { - "name": "dwContinueStatus", - "type": "DWORD" - } - ], - "WaitForDebugEvent": [ - { - "name": "lpDebugEvent", - "type": "LPDEBUG_EVENT" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - } - ], - "DebugActiveProcess": [ - { - "name": "dwProcessId", - "type": "DWORD" - } - ], - "DebugActiveProcessStop": [ - { - "name": "dwProcessId", - "type": "DWORD" - } - ], - "CheckRemoteDebuggerPresent": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "pbDebuggerPresent", - "type": "PBOOL" - } - ], - "WaitForDebugEventEx": [ - { - "name": "lpDebugEvent", - "type": "LPDEBUG_EVENT" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dpapi.json b/qiling/extensions/windows_sdk/dpapi.json deleted file mode 100644 index 6e2f4e73e..000000000 --- a/qiling/extensions/windows_sdk/dpapi.json +++ /dev/null @@ -1,112 +0,0 @@ -{ - "CryptProtectData": [ - { - "name": "pDataIn", - "type": "DATA_BLOB" - }, - { - "name": "szDataDescr", - "type": "LPCWSTR" - }, - { - "name": "pOptionalEntropy", - "type": "DATA_BLOB" - }, - { - "name": "pvReserved", - "type": "PVOID" - }, - { - "name": "pPromptStruct", - "type": "CRYPTPROTECT_PROMPTSTRUCT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pDataOut", - "type": "DATA_BLOB" - } - ], - "CryptUnprotectData": [ - { - "name": "pDataIn", - "type": "DATA_BLOB" - }, - { - "name": "ppszDataDescr", - "type": "LPWSTR" - }, - { - "name": "pOptionalEntropy", - "type": "DATA_BLOB" - }, - { - "name": "pvReserved", - "type": "PVOID" - }, - { - "name": "pPromptStruct", - "type": "CRYPTPROTECT_PROMPTSTRUCT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pDataOut", - "type": "DATA_BLOB" - } - ], - "CryptUpdateProtectedState": [ - { - "name": "pOldSid", - "type": "PSID" - }, - { - "name": "pwszOldPassword", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwSuccessCount", - "type": "DWORD" - }, - { - "name": "pdwFailureCount", - "type": "DWORD" - } - ], - "CryptProtectMemory": [ - { - "name": "pDataIn", - "type": "LPVOID" - }, - { - "name": "cbDataIn", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptUnprotectMemory": [ - { - "name": "pDataIn", - "type": "LPVOID" - }, - { - "name": "cbDataIn", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dsgetdc.json b/qiling/extensions/windows_sdk/dsgetdc.json deleted file mode 100644 index e479849a7..000000000 --- a/qiling/extensions/windows_sdk/dsgetdc.json +++ /dev/null @@ -1,194 +0,0 @@ -{ - "DsGetDcNameA": [ - { - "name": "ComputerName", - "type": "LPCSTR" - }, - { - "name": "DomainName", - "type": "LPCSTR" - }, - { - "name": "DomainGuid", - "type": "GUID" - }, - { - "name": "SiteName", - "type": "LPCSTR" - }, - { - "name": "Flags", - "type": "ULONG" - }, - { - "name": "DomainControllerInfo", - "type": "PDOMAIN_CONTROLLER_INFOA" - } - ], - "DsGetDcNameW": [ - { - "name": "ComputerName", - "type": "LPCWSTR" - }, - { - "name": "DomainName", - "type": "LPCWSTR" - }, - { - "name": "DomainGuid", - "type": "GUID" - }, - { - "name": "SiteName", - "type": "LPCWSTR" - }, - { - "name": "Flags", - "type": "ULONG" - }, - { - "name": "DomainControllerInfo", - "type": "PDOMAIN_CONTROLLER_INFOW" - } - ], - "DsGetSiteNameA": [ - { - "name": "ComputerName", - "type": "LPCSTR" - }, - { - "name": "SiteName", - "type": "LPSTR" - } - ], - "DsGetSiteNameW": [ - { - "name": "ComputerName", - "type": "LPCWSTR" - }, - { - "name": "SiteName", - "type": "LPWSTR" - } - ], - "DsValidateSubnetNameW": [ - { - "name": "SubnetName", - "type": "LPCWSTR" - } - ], - "DsValidateSubnetNameA": [ - { - "name": "SubnetName", - "type": "LPCSTR" - } - ], - "DsEnumerateDomainTrustsW": [ - { - "name": "ServerName", - "type": "LPWSTR" - }, - { - "name": "Flags", - "type": "ULONG" - }, - { - "name": "Domains", - "type": "PDS_DOMAIN_TRUSTSW" - }, - { - "name": "DomainCount", - "type": "PULONG" - } - ], - "DsEnumerateDomainTrustsA": [ - { - "name": "ServerName", - "type": "LPSTR" - }, - { - "name": "Flags", - "type": "ULONG" - }, - { - "name": "Domains", - "type": "PDS_DOMAIN_TRUSTSA" - }, - { - "name": "DomainCount", - "type": "PULONG" - } - ], - "DsGetDcSiteCoverageW": [ - { - "name": "ServerName", - "type": "LPCWSTR" - }, - { - "name": "EntryCount", - "type": "PULONG" - }, - { - "name": "SiteNames", - "type": "LPWSTR" - } - ], - "DsGetDcSiteCoverageA": [ - { - "name": "ServerName", - "type": "LPCSTR" - }, - { - "name": "EntryCount", - "type": "PULONG" - }, - { - "name": "SiteNames", - "type": "LPSTR" - } - ], - "DsDeregisterDnsHostRecordsW": [ - { - "name": "ServerName", - "type": "LPWSTR" - }, - { - "name": "DnsDomainName", - "type": "LPWSTR" - }, - { - "name": "DomainGuid", - "type": "GUID" - }, - { - "name": "DsaGuid", - "type": "GUID" - }, - { - "name": "DnsHostName", - "type": "LPWSTR" - } - ], - "DsDeregisterDnsHostRecordsA": [ - { - "name": "ServerName", - "type": "LPSTR" - }, - { - "name": "DnsDomainName", - "type": "LPSTR" - }, - { - "name": "DomainGuid", - "type": "GUID" - }, - { - "name": "DsaGuid", - "type": "GUID" - }, - { - "name": "DnsHostName", - "type": "LPSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dsparse.json b/qiling/extensions/windows_sdk/dsparse.json deleted file mode 100644 index 6d1400022..000000000 --- a/qiling/extensions/windows_sdk/dsparse.json +++ /dev/null @@ -1,312 +0,0 @@ -{ - "DsMakeSpnW": [ - { - "name": "ServiceClass", - "type": "LPCWSTR" - }, - { - "name": "ServiceName", - "type": "LPCWSTR" - }, - { - "name": "InstanceName", - "type": "LPCWSTR" - }, - { - "name": "InstancePort", - "type": "USHORT" - }, - { - "name": "Referrer", - "type": "LPCWSTR" - }, - { - "name": "pcSpnLength", - "type": "DWORD" - }, - { - "name": "pszSpn", - "type": "LPWSTR" - } - ], - "DsMakeSpnA": [ - { - "name": "ServiceClass", - "type": "LPCSTR" - }, - { - "name": "ServiceName", - "type": "LPCSTR" - }, - { - "name": "InstanceName", - "type": "LPCSTR" - }, - { - "name": "InstancePort", - "type": "USHORT" - }, - { - "name": "Referrer", - "type": "LPCSTR" - }, - { - "name": "pcSpnLength", - "type": "DWORD" - }, - { - "name": "pszSpn", - "type": "LPSTR" - } - ], - "DsCrackSpnA": [ - { - "name": "pszSpn", - "type": "LPCSTR" - }, - { - "name": "pcServiceClass", - "type": "LPDWORD" - }, - { - "name": "ServiceClass", - "type": "LPSTR" - }, - { - "name": "pcServiceName", - "type": "LPDWORD" - }, - { - "name": "ServiceName", - "type": "LPSTR" - }, - { - "name": "pcInstanceName", - "type": "LPDWORD" - }, - { - "name": "InstanceName", - "type": "LPSTR" - }, - { - "name": "pInstancePort", - "type": "USHORT" - } - ], - "DsCrackSpnW": [ - { - "name": "pszSpn", - "type": "LPCWSTR" - }, - { - "name": "pcServiceClass", - "type": "DWORD" - }, - { - "name": "ServiceClass", - "type": "LPWSTR" - }, - { - "name": "pcServiceName", - "type": "DWORD" - }, - { - "name": "ServiceName", - "type": "LPWSTR" - }, - { - "name": "pcInstanceName", - "type": "DWORD" - }, - { - "name": "InstanceName", - "type": "LPWSTR" - }, - { - "name": "pInstancePort", - "type": "USHORT" - } - ], - "DsQuoteRdnValueW": [ - { - "name": "cUnquotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psUnquotedRdnValue", - "type": "LPCWCH" - }, - { - "name": "pcQuotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psQuotedRdnValue", - "type": "LPWCH" - } - ], - "DsQuoteRdnValueA": [ - { - "name": "cUnquotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psUnquotedRdnValue", - "type": "LPCCH" - }, - { - "name": "pcQuotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psQuotedRdnValue", - "type": "LPCH" - } - ], - "DsUnquoteRdnValueW": [ - { - "name": "cQuotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psQuotedRdnValue", - "type": "LPCWCH" - }, - { - "name": "pcUnquotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psUnquotedRdnValue", - "type": "LPWCH" - } - ], - "DsUnquoteRdnValueA": [ - { - "name": "cQuotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psQuotedRdnValue", - "type": "LPCCH" - }, - { - "name": "pcUnquotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psUnquotedRdnValue", - "type": "LPCH" - } - ], - "DsGetRdnW": [ - { - "name": "ppDN", - "type": "LPCWCH" - }, - { - "name": "pcDN", - "type": "DWORD" - }, - { - "name": "ppKey", - "type": "LPCWCH" - }, - { - "name": "pcKey", - "type": "DWORD" - }, - { - "name": "ppVal", - "type": "LPCWCH" - }, - { - "name": "pcVal", - "type": "DWORD" - } - ], - "DsCrackUnquotedMangledRdnW": [ - { - "name": "pszRDN", - "type": "LPCWSTR" - }, - { - "name": "cchRDN", - "type": "DWORD" - }, - { - "name": "pGuid", - "type": "GUID" - }, - { - "name": "peDsMangleFor", - "type": "DS_MANGLE_FOR" - } - ], - "DsCrackUnquotedMangledRdnA": [ - { - "name": "pszRDN", - "type": "LPCSTR" - }, - { - "name": "cchRDN", - "type": "DWORD" - }, - { - "name": "pGuid", - "type": "GUID" - }, - { - "name": "peDsMangleFor", - "type": "DS_MANGLE_FOR" - } - ], - "DsIsMangledRdnValueW": [ - { - "name": "pszRdn", - "type": "LPCWSTR" - }, - { - "name": "cRdn", - "type": "DWORD" - }, - { - "name": "eDsMangleForDesired", - "type": "DS_MANGLE_FOR" - } - ], - "DsIsMangledRdnValueA": [ - { - "name": "pszRdn", - "type": "LPCSTR" - }, - { - "name": "cRdn", - "type": "DWORD" - }, - { - "name": "eDsMangleForDesired", - "type": "DS_MANGLE_FOR" - } - ], - "DsIsMangledDnA": [ - { - "name": "pszDn", - "type": "LPCSTR" - }, - { - "name": "eDsMangleFor", - "type": "DS_MANGLE_FOR" - } - ], - "DsIsMangledDnW": [ - { - "name": "pszDn", - "type": "LPCWSTR" - }, - { - "name": "eDsMangleFor", - "type": "DS_MANGLE_FOR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dsrole.json b/qiling/extensions/windows_sdk/dsrole.json deleted file mode 100644 index 29bc98c4d..000000000 --- a/qiling/extensions/windows_sdk/dsrole.json +++ /dev/null @@ -1,22 +0,0 @@ -{ - "DsRoleGetPrimaryDomainInformation": [ - { - "name": "lpServer", - "type": "LPCWSTR" - }, - { - "name": "InfoLevel", - "type": "DSROLE_PRIMARY_DOMAIN_INFO_LEVEL" - }, - { - "name": "Buffer", - "type": "PBYTE" - } - ], - "DsRoleFreeMemory": [ - { - "name": "Buffer", - "type": "PVOID" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dxgi1_3.json b/qiling/extensions/windows_sdk/dxgi1_3.json deleted file mode 100644 index 3d79d4d5d..000000000 --- a/qiling/extensions/windows_sdk/dxgi1_3.json +++ /dev/null @@ -1,30 +0,0 @@ -{ - "CreateDXGIFactory2": [ - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppFactory", - "type": "void" - } - ], - "DXGIGetDebugInterface1": [ - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "pDebug", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dxgi1_6.json b/qiling/extensions/windows_sdk/dxgi1_6.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/dxgi1_6.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/physicalmonitorenumerationapi.json b/qiling/extensions/windows_sdk/dxva2.json similarity index 100% rename from qiling/extensions/windows_sdk/physicalmonitorenumerationapi.json rename to qiling/extensions/windows_sdk/dxva2.json diff --git a/qiling/extensions/windows_sdk/eaphostpeerconfigapis.json b/qiling/extensions/windows_sdk/eappcfg.json similarity index 100% rename from qiling/extensions/windows_sdk/eaphostpeerconfigapis.json rename to qiling/extensions/windows_sdk/eappcfg.json diff --git a/qiling/extensions/windows_sdk/errhandlingapi.json b/qiling/extensions/windows_sdk/errhandlingapi.json deleted file mode 100644 index d1191ee63..000000000 --- a/qiling/extensions/windows_sdk/errhandlingapi.json +++ /dev/null @@ -1,142 +0,0 @@ -{ - "RaiseException": [ - { - "name": "dwExceptionCode", - "type": "DWORD" - }, - { - "name": "dwExceptionFlags", - "type": "DWORD" - }, - { - "name": "nNumberOfArguments", - "type": "DWORD" - }, - { - "name": "lpArguments", - "type": "ULONG_PTR" - } - ], - "UnhandledExceptionFilter": [ - { - "name": "ExceptionInfo", - "type": { - "name": "_EXCEPTION_POINTERS", - "data_type": "Struct", - "elements": [] - } - } - ], - "SetUnhandledExceptionFilter": [ - { - "name": "lpTopLevelExceptionFilter", - "type": "LPTOP_LEVEL_EXCEPTION_FILTER" - } - ], - "GetLastError": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetLastError": [ - { - "name": "dwErrCode", - "type": "DWORD" - } - ], - "GetErrorMode": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetErrorMode": [ - { - "name": "uMode", - "type": "UINT" - } - ], - "AddVectoredExceptionHandler": [ - { - "name": "First", - "type": "ULONG" - }, - { - "name": "Handler", - "type": "PVECTORED_EXCEPTION_HANDLER" - } - ], - "RemoveVectoredExceptionHandler": [ - { - "name": "Handle", - "type": "PVOID" - } - ], - "AddVectoredContinueHandler": [ - { - "name": "First", - "type": "ULONG" - }, - { - "name": "Handler", - "type": "PVECTORED_EXCEPTION_HANDLER" - } - ], - "RemoveVectoredContinueHandler": [ - { - "name": "Handle", - "type": "PVOID" - } - ], - "RaiseFailFastException": [ - { - "name": "pExceptionRecord", - "type": "PEXCEPTION_RECORD" - }, - { - "name": "pContextRecord", - "type": "PCONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "FatalAppExitA": [ - { - "name": "uAction", - "type": "UINT" - }, - { - "name": "lpMessageText", - "type": "LPCSTR" - } - ], - "FatalAppExitW": [ - { - "name": "uAction", - "type": "UINT" - }, - { - "name": "lpMessageText", - "type": "LPCWSTR" - } - ], - "GetThreadErrorMode": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetThreadErrorMode": [ - { - "name": "dwNewMode", - "type": "DWORD" - }, - { - "name": "lpOldMode", - "type": "LPDWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/evntprov.json b/qiling/extensions/windows_sdk/evntprov.json deleted file mode 100644 index 35981282d..000000000 --- a/qiling/extensions/windows_sdk/evntprov.json +++ /dev/null @@ -1,174 +0,0 @@ -{ - "EventRegister": [ - { - "name": "ProviderId", - "type": "LPCGUID" - }, - { - "name": "EnableCallback", - "type": "PENABLECALLBACK" - }, - { - "name": "CallbackContext", - "type": "PVOID" - }, - { - "name": "RegHandle", - "type": "PREGHANDLE" - } - ], - "EventUnregister": [ - { - "name": "RegHandle", - "type": "REGHANDLE" - } - ], - "EventSetInformation": [ - { - "name": "RegHandle", - "type": "REGHANDLE" - }, - { - "name": "InformationClass", - "type": "EVENT_INFO_CLASS" - }, - { - "name": "EventInformation", - "type": "PVOID" - }, - { - "name": "InformationLength", - "type": "ULONG" - } - ], - "EventEnabled": [ - { - "name": "RegHandle", - "type": "REGHANDLE" - }, - { - "name": "EventDescriptor", - "type": "PCEVENT_DESCRIPTOR" - } - ], - "EventProviderEnabled": [ - { - "name": "RegHandle", - "type": "REGHANDLE" - }, - { - "name": "Level", - "type": "UCHAR" - }, - { - "name": "Keyword", - "type": "ULONGLONG" - } - ], - "EventWrite": [ - { - "name": "RegHandle", - "type": "REGHANDLE" - }, - { - "name": "EventDescriptor", - "type": "PCEVENT_DESCRIPTOR" - }, - { - "name": "UserDataCount", - "type": "ULONG" - }, - { - "name": "UserData", - "type": "PEVENT_DATA_DESCRIPTOR" - } - ], - "EventWriteTransfer": [ - { - "name": "RegHandle", - "type": "REGHANDLE" - }, - { - "name": "EventDescriptor", - "type": "PCEVENT_DESCRIPTOR" - }, - { - "name": "ActivityId", - "type": "LPCGUID" - }, - { - "name": "RelatedActivityId", - "type": "LPCGUID" - }, - { - "name": "UserDataCount", - "type": "ULONG" - }, - { - "name": "UserData", - "type": "PEVENT_DATA_DESCRIPTOR" - } - ], - "EventWriteEx": [ - { - "name": "RegHandle", - "type": "REGHANDLE" - }, - { - "name": "EventDescriptor", - "type": "PCEVENT_DESCRIPTOR" - }, - { - "name": "Filter", - "type": "ULONG64" - }, - { - "name": "Flags", - "type": "ULONG" - }, - { - "name": "ActivityId", - "type": "LPCGUID" - }, - { - "name": "RelatedActivityId", - "type": "LPCGUID" - }, - { - "name": "UserDataCount", - "type": "ULONG" - }, - { - "name": "UserData", - "type": "PEVENT_DATA_DESCRIPTOR" - } - ], - "EventWriteString": [ - { - "name": "RegHandle", - "type": "REGHANDLE" - }, - { - "name": "Level", - "type": "UCHAR" - }, - { - "name": "Keyword", - "type": "ULONGLONG" - }, - { - "name": "String", - "type": "PCWSTR" - } - ], - "EventActivityIdControl": [ - { - "name": "ControlCode", - "type": "ULONG" - }, - { - "name": "ActivityId", - "type": "LPGUID" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/evntrace.json b/qiling/extensions/windows_sdk/evntrace.json deleted file mode 100644 index ddcf8ea2a..000000000 --- a/qiling/extensions/windows_sdk/evntrace.json +++ /dev/null @@ -1,632 +0,0 @@ -{ - "StartTraceW": [ - { - "name": "TraceHandle", - "type": "PTRACEHANDLE" - }, - { - "name": "InstanceName", - "type": "LPCWSTR" - }, - { - "name": "Properties", - "type": "PEVENT_TRACE_PROPERTIES" - } - ], - "StartTraceA": [ - { - "name": "TraceHandle", - "type": "PTRACEHANDLE" - }, - { - "name": "InstanceName", - "type": "LPCSTR" - }, - { - "name": "Properties", - "type": "PEVENT_TRACE_PROPERTIES" - } - ], - "StopTraceW": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InstanceName", - "type": "LPCWSTR" - }, - { - "name": "Properties", - "type": "PEVENT_TRACE_PROPERTIES" - } - ], - "StopTraceA": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InstanceName", - "type": "LPCSTR" - }, - { - "name": "Properties", - "type": "PEVENT_TRACE_PROPERTIES" - } - ], - "QueryTraceW": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InstanceName", - "type": "LPCWSTR" - }, - { - "name": "Properties", - "type": "PEVENT_TRACE_PROPERTIES" - } - ], - "QueryTraceA": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InstanceName", - "type": "LPCSTR" - }, - { - "name": "Properties", - "type": "PEVENT_TRACE_PROPERTIES" - } - ], - "UpdateTraceW": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InstanceName", - "type": "LPCWSTR" - }, - { - "name": "Properties", - "type": "PEVENT_TRACE_PROPERTIES" - } - ], - "UpdateTraceA": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InstanceName", - "type": "LPCSTR" - }, - { - "name": "Properties", - "type": "PEVENT_TRACE_PROPERTIES" - } - ], - "FlushTraceW": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InstanceName", - "type": "LPCWSTR" - }, - { - "name": "Properties", - "type": "PEVENT_TRACE_PROPERTIES" - } - ], - "FlushTraceA": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InstanceName", - "type": "LPCSTR" - }, - { - "name": "Properties", - "type": "PEVENT_TRACE_PROPERTIES" - } - ], - "ControlTraceW": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InstanceName", - "type": "LPCWSTR" - }, - { - "name": "Properties", - "type": "PEVENT_TRACE_PROPERTIES" - }, - { - "name": "ControlCode", - "type": "ULONG" - } - ], - "ControlTraceA": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InstanceName", - "type": "LPCSTR" - }, - { - "name": "Properties", - "type": "PEVENT_TRACE_PROPERTIES" - }, - { - "name": "ControlCode", - "type": "ULONG" - } - ], - "QueryAllTracesW": [ - { - "name": "PropertyArray", - "type": "PEVENT_TRACE_PROPERTIES" - }, - { - "name": "PropertyArrayCount", - "type": "ULONG" - }, - { - "name": "LoggerCount", - "type": "PULONG" - } - ], - "QueryAllTracesA": [ - { - "name": "PropertyArray", - "type": "PEVENT_TRACE_PROPERTIES" - }, - { - "name": "PropertyArrayCount", - "type": "ULONG" - }, - { - "name": "LoggerCount", - "type": "PULONG" - } - ], - "EnableTrace": [ - { - "name": "Enable", - "type": "ULONG" - }, - { - "name": "EnableFlag", - "type": "ULONG" - }, - { - "name": "EnableLevel", - "type": "ULONG" - }, - { - "name": "ControlGuid", - "type": "LPCGUID" - }, - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - } - ], - "EnableTraceEx": [ - { - "name": "ProviderId", - "type": "LPCGUID" - }, - { - "name": "SourceId", - "type": "LPCGUID" - }, - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "IsEnabled", - "type": "ULONG" - }, - { - "name": "Level", - "type": "UCHAR" - }, - { - "name": "MatchAnyKeyword", - "type": "ULONGLONG" - }, - { - "name": "MatchAllKeyword", - "type": "ULONGLONG" - }, - { - "name": "EnableProperty", - "type": "ULONG" - }, - { - "name": "EnableFilterDesc", - "type": "PEVENT_FILTER_DESCRIPTOR" - } - ], - "EnableTraceEx2": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "ProviderId", - "type": "LPCGUID" - }, - { - "name": "ControlCode", - "type": "ULONG" - }, - { - "name": "Level", - "type": "UCHAR" - }, - { - "name": "MatchAnyKeyword", - "type": "ULONGLONG" - }, - { - "name": "MatchAllKeyword", - "type": "ULONGLONG" - }, - { - "name": "Timeout", - "type": "ULONG" - }, - { - "name": "EnableParameters", - "type": "PENABLE_TRACE_PARAMETERS" - } - ], - "EnumerateTraceGuidsEx": [ - { - "name": "TraceQueryInfoClass", - "type": "TRACE_QUERY_INFO_CLASS" - }, - { - "name": "InBuffer", - "type": "PVOID" - }, - { - "name": "InBufferSize", - "type": "ULONG" - }, - { - "name": "OutBuffer", - "type": "PVOID" - }, - { - "name": "OutBufferSize", - "type": "ULONG" - }, - { - "name": "ReturnLength", - "type": "PULONG" - } - ], - "TraceSetInformation": [ - { - "name": "SessionHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InformationClass", - "type": "TRACE_INFO_CLASS" - }, - { - "name": "TraceInformation", - "type": "PVOID" - }, - { - "name": "InformationLength", - "type": "ULONG" - } - ], - "TraceQueryInformation": [ - { - "name": "SessionHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InformationClass", - "type": "TRACE_INFO_CLASS" - }, - { - "name": "TraceInformation", - "type": "PVOID" - }, - { - "name": "InformationLength", - "type": "ULONG" - }, - { - "name": "ReturnLength", - "type": "PULONG" - } - ], - "CreateTraceInstanceId": [ - { - "name": "RegHandle", - "type": "HANDLE" - }, - { - "name": "InstInfo", - "type": "PEVENT_INSTANCE_INFO" - } - ], - "TraceEvent": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "EventTrace", - "type": "PEVENT_TRACE_HEADER" - } - ], - "TraceEventInstance": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - }, - { - "name": "EventTrace", - "type": "PEVENT_INSTANCE_HEADER" - }, - { - "name": "InstInfo", - "type": "PEVENT_INSTANCE_INFO" - }, - { - "name": "ParentInstInfo", - "type": "PEVENT_INSTANCE_INFO" - } - ], - "RegisterTraceGuidsW": [ - { - "name": "RequestAddress", - "type": "WMIDPREQUEST" - }, - { - "name": "RequestContext", - "type": "PVOID" - }, - { - "name": "ControlGuid", - "type": "LPCGUID" - }, - { - "name": "GuidCount", - "type": "ULONG" - }, - { - "name": "TraceGuidReg", - "type": "PTRACE_GUID_REGISTRATION" - }, - { - "name": "MofImagePath", - "type": "LPCWSTR" - }, - { - "name": "MofResourceName", - "type": "LPCWSTR" - }, - { - "name": "RegistrationHandle", - "type": "PTRACEHANDLE" - } - ], - "RegisterTraceGuidsA": [ - { - "name": "RequestAddress", - "type": "WMIDPREQUEST" - }, - { - "name": "RequestContext", - "type": "PVOID" - }, - { - "name": "ControlGuid", - "type": "LPCGUID" - }, - { - "name": "GuidCount", - "type": "ULONG" - }, - { - "name": "TraceGuidReg", - "type": "PTRACE_GUID_REGISTRATION" - }, - { - "name": "MofImagePath", - "type": "LPCSTR" - }, - { - "name": "MofResourceName", - "type": "LPCSTR" - }, - { - "name": "RegistrationHandle", - "type": "PTRACEHANDLE" - } - ], - "EnumerateTraceGuids": [ - { - "name": "GuidPropertiesArray", - "type": "PTRACE_GUID_PROPERTIES" - }, - { - "name": "PropertyArrayCount", - "type": "ULONG" - }, - { - "name": "GuidCount", - "type": "PULONG" - } - ], - "UnregisterTraceGuids": [ - { - "name": "RegistrationHandle", - "type": "TRACEHANDLE" - } - ], - "GetTraceLoggerHandle": [ - { - "name": "Buffer", - "type": "PVOID" - } - ], - "GetTraceEnableLevel": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - } - ], - "GetTraceEnableFlags": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - } - ], - "OpenTraceW": [ - { - "name": "Logfile", - "type": "PEVENT_TRACE_LOGFILEW" - } - ], - "ProcessTrace": [ - { - "name": "HandleArray", - "type": "PTRACEHANDLE" - }, - { - "name": "HandleCount", - "type": "ULONG" - }, - { - "name": "StartTime", - "type": "LPFILETIME" - }, - { - "name": "EndTime", - "type": "LPFILETIME" - } - ], - "CloseTrace": [ - { - "name": "TraceHandle", - "type": "TRACEHANDLE" - } - ], - "QueryTraceProcessingHandle": [ - { - "name": "ProcessingHandle", - "type": "TRACEHANDLE" - }, - { - "name": "InformationClass", - "type": "ETW_PROCESS_HANDLE_INFO_TYPE" - }, - { - "name": "InBuffer", - "type": "PVOID" - }, - { - "name": "InBufferSize", - "type": "ULONG" - }, - { - "name": "OutBuffer", - "type": "PVOID" - }, - { - "name": "OutBufferSize", - "type": "ULONG" - }, - { - "name": "ReturnLength", - "type": "PULONG" - } - ], - "OpenTraceA": [ - { - "name": "Logfile", - "type": "PEVENT_TRACE_LOGFILEA" - } - ], - "SetTraceCallback": [ - { - "name": "pGuid", - "type": "LPCGUID" - }, - { - "name": "EventCallback", - "type": "PEVENT_CALLBACK" - } - ], - "RemoveTraceCallback": [ - { - "name": "pGuid", - "type": "LPCGUID" - } - ], - "TraceMessage": [ - { - "name": "LoggerHandle", - "type": "TRACEHANDLE" - }, - { - "name": "MessageFlags", - "type": "ULONG" - }, - { - "name": "MessageGuid", - "type": "LPCGUID" - }, - { - "name": "MessageNumber", - "type": "USHORT" - } - ], - "TraceMessageVa": [ - { - "name": "LoggerHandle", - "type": "TRACEHANDLE" - }, - { - "name": "MessageFlags", - "type": "ULONG" - }, - { - "name": "MessageGuid", - "type": "LPCGUID" - }, - { - "name": "MessageNumber", - "type": "USHORT" - }, - { - "name": "MessageArgList", - "type": "va_list" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mfapi.json b/qiling/extensions/windows_sdk/evr.json similarity index 100% rename from qiling/extensions/windows_sdk/mfapi.json rename to qiling/extensions/windows_sdk/evr.json diff --git a/qiling/extensions/windows_sdk/fci.json b/qiling/extensions/windows_sdk/fci.json deleted file mode 100644 index 2504c6aa2..000000000 --- a/qiling/extensions/windows_sdk/fci.json +++ /dev/null @@ -1,128 +0,0 @@ -{ - "FCICreate": [ - { - "name": "perf", - "type": "PERF" - }, - { - "name": "pfnfcifp", - "type": "PFNFCIFILEPLACED" - }, - { - "name": "pfna", - "type": "PFNFCIALLOC" - }, - { - "name": "pfnf", - "type": "PFNFCIFREE" - }, - { - "name": "pfnopen", - "type": "PFNFCIOPEN" - }, - { - "name": "pfnread", - "type": "PFNFCIREAD" - }, - { - "name": "pfnwrite", - "type": "PFNFCIWRITE" - }, - { - "name": "pfnclose", - "type": "PFNFCICLOSE" - }, - { - "name": "pfnseek", - "type": "PFNFCISEEK" - }, - { - "name": "pfndelete", - "type": "PFNFCIDELETE" - }, - { - "name": "pfnfcigtf", - "type": "PFNFCIGETTEMPFILE" - }, - { - "name": "pccab", - "type": "PCCAB" - }, - { - "name": "pv", - "type": "void" - } - ], - "FCIAddFile": [ - { - "name": "hfci", - "type": "HFCI" - }, - { - "name": "pszSourceFile", - "type": "LPSTR" - }, - { - "name": "pszFileName", - "type": "LPSTR" - }, - { - "name": "fExecute", - "type": "BOOL" - }, - { - "name": "pfnfcignc", - "type": "PFNFCIGETNEXTCABINET" - }, - { - "name": "pfnfcis", - "type": "PFNFCISTATUS" - }, - { - "name": "pfnfcigoi", - "type": "PFNFCIGETOPENINFO" - }, - { - "name": "typeCompress", - "type": "TCOMP" - } - ], - "FCIFlushCabinet": [ - { - "name": "hfci", - "type": "HFCI" - }, - { - "name": "fGetNextCab", - "type": "BOOL" - }, - { - "name": "pfnfcignc", - "type": "PFNFCIGETNEXTCABINET" - }, - { - "name": "pfnfcis", - "type": "PFNFCISTATUS" - } - ], - "FCIFlushFolder": [ - { - "name": "hfci", - "type": "HFCI" - }, - { - "name": "pfnfcignc", - "type": "PFNFCIGETNEXTCABINET" - }, - { - "name": "pfnfcis", - "type": "PFNFCISTATUS" - } - ], - "FCIDestroy": [ - { - "name": "hfci", - "type": "HFCI" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/fdi.json b/qiling/extensions/windows_sdk/fdi.json deleted file mode 100644 index 0b9d2d256..000000000 --- a/qiling/extensions/windows_sdk/fdi.json +++ /dev/null @@ -1,104 +0,0 @@ -{ - "FDICreate": [ - { - "name": "pfnalloc", - "type": "PFNALLOC" - }, - { - "name": "pfnfree", - "type": "PFNFREE" - }, - { - "name": "pfnopen", - "type": "PFNOPEN" - }, - { - "name": "pfnread", - "type": "PFNREAD" - }, - { - "name": "pfnwrite", - "type": "PFNWRITE" - }, - { - "name": "pfnclose", - "type": "PFNCLOSE" - }, - { - "name": "pfnseek", - "type": "PFNSEEK" - }, - { - "name": "cpuType", - "type": "int" - }, - { - "name": "perf", - "type": "PERF" - } - ], - "FDIIsCabinet": [ - { - "name": "hfdi", - "type": "HFDI" - }, - { - "name": "hf", - "type": "INT_PTR" - }, - { - "name": "pfdici", - "type": "PFDICABINETINFO" - } - ], - "FDICopy": [ - { - "name": "hfdi", - "type": "HFDI" - }, - { - "name": "pszCabinet", - "type": "LPSTR" - }, - { - "name": "pszCabPath", - "type": "LPSTR" - }, - { - "name": "flags", - "type": "int" - }, - { - "name": "pfnfdin", - "type": "PFNFDINOTIFY" - }, - { - "name": "pfnfdid", - "type": "PFNFDIDECRYPT" - }, - { - "name": "pvUser", - "type": "void" - } - ], - "FDIDestroy": [ - { - "name": "hfdi", - "type": "HFDI" - } - ], - "FDITruncateCabinet": [ - { - "name": "hfdi", - "type": "HFDI" - }, - { - "name": "pszCabinetName", - "type": "LPSTR" - }, - { - "name": "iFolderToDelete", - "type": "USHORT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/fibersapi.json b/qiling/extensions/windows_sdk/fibersapi.json deleted file mode 100644 index e15bbf447..000000000 --- a/qiling/extensions/windows_sdk/fibersapi.json +++ /dev/null @@ -1,36 +0,0 @@ -{ - "FlsAlloc": [ - { - "name": "lpCallback", - "type": "PFLS_CALLBACK_FUNCTION" - } - ], - "FlsGetValue": [ - { - "name": "dwFlsIndex", - "type": "DWORD" - } - ], - "FlsSetValue": [ - { - "name": "dwFlsIndex", - "type": "DWORD" - }, - { - "name": "lpFlsData", - "type": "PVOID" - } - ], - "FlsFree": [ - { - "name": "dwFlsIndex", - "type": "DWORD" - } - ], - "IsThreadAFiber": [ - { - "name": "VOID", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/fileapi.json b/qiling/extensions/windows_sdk/fileapi.json deleted file mode 100644 index f899dd3b1..000000000 --- a/qiling/extensions/windows_sdk/fileapi.json +++ /dev/null @@ -1,1134 +0,0 @@ -{ - "CompareFileTime": [ - { - "name": "lpFileTime1", - "type": "FILETIME" - }, - { - "name": "lpFileTime2", - "type": "FILETIME" - } - ], - "CreateFileA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwShareMode", - "type": "DWORD" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "dwCreationDisposition", - "type": "DWORD" - }, - { - "name": "dwFlagsAndAttributes", - "type": "DWORD" - }, - { - "name": "hTemplateFile", - "type": "HANDLE" - } - ], - "CreateFileW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwShareMode", - "type": "DWORD" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "dwCreationDisposition", - "type": "DWORD" - }, - { - "name": "dwFlagsAndAttributes", - "type": "DWORD" - }, - { - "name": "hTemplateFile", - "type": "HANDLE" - } - ], - "FileTimeToLocalFileTime": [ - { - "name": "lpFileTime", - "type": "FILETIME" - }, - { - "name": "lpLocalFileTime", - "type": "LPFILETIME" - } - ], - "FindClose": [ - { - "name": "hFindFile", - "type": "HANDLE" - } - ], - "FindCloseChangeNotification": [ - { - "name": "hChangeHandle", - "type": "HANDLE" - } - ], - "FindFirstChangeNotificationA": [ - { - "name": "lpPathName", - "type": "LPCSTR" - }, - { - "name": "bWatchSubtree", - "type": "BOOL" - }, - { - "name": "dwNotifyFilter", - "type": "DWORD" - } - ], - "FindFirstChangeNotificationW": [ - { - "name": "lpPathName", - "type": "LPCWSTR" - }, - { - "name": "bWatchSubtree", - "type": "BOOL" - }, - { - "name": "dwNotifyFilter", - "type": "DWORD" - } - ], - "FindFirstFileA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "lpFindFileData", - "type": "LPWIN32_FIND_DATAA" - } - ], - "FindFirstFileW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "lpFindFileData", - "type": "LPWIN32_FIND_DATAW" - } - ], - "FindFirstFileExA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "fInfoLevelId", - "type": "FINDEX_INFO_LEVELS" - }, - { - "name": "lpFindFileData", - "type": "LPVOID" - }, - { - "name": "fSearchOp", - "type": "FINDEX_SEARCH_OPS" - }, - { - "name": "lpSearchFilter", - "type": "LPVOID" - }, - { - "name": "dwAdditionalFlags", - "type": "DWORD" - } - ], - "FindFirstFileExW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "fInfoLevelId", - "type": "FINDEX_INFO_LEVELS" - }, - { - "name": "lpFindFileData", - "type": "LPVOID" - }, - { - "name": "fSearchOp", - "type": "FINDEX_SEARCH_OPS" - }, - { - "name": "lpSearchFilter", - "type": "LPVOID" - }, - { - "name": "dwAdditionalFlags", - "type": "DWORD" - } - ], - "FindNextChangeNotification": [ - { - "name": "hChangeHandle", - "type": "HANDLE" - } - ], - "FindNextFileA": [ - { - "name": "hFindFile", - "type": "HANDLE" - }, - { - "name": "lpFindFileData", - "type": "LPWIN32_FIND_DATAA" - } - ], - "FindNextFileW": [ - { - "name": "hFindFile", - "type": "HANDLE" - }, - { - "name": "lpFindFileData", - "type": "LPWIN32_FIND_DATAW" - } - ], - "FindVolumeClose": [ - { - "name": "hFindVolume", - "type": "HANDLE" - } - ], - "FlushFileBuffers": [ - { - "name": "hFile", - "type": "HANDLE" - } - ], - "GetDiskFreeSpaceA": [ - { - "name": "lpRootPathName", - "type": "LPCSTR" - }, - { - "name": "lpSectorsPerCluster", - "type": "LPDWORD" - }, - { - "name": "lpBytesPerSector", - "type": "LPDWORD" - }, - { - "name": "lpNumberOfFreeClusters", - "type": "LPDWORD" - }, - { - "name": "lpTotalNumberOfClusters", - "type": "LPDWORD" - } - ], - "GetDiskFreeSpaceW": [ - { - "name": "lpRootPathName", - "type": "LPCWSTR" - }, - { - "name": "lpSectorsPerCluster", - "type": "LPDWORD" - }, - { - "name": "lpBytesPerSector", - "type": "LPDWORD" - }, - { - "name": "lpNumberOfFreeClusters", - "type": "LPDWORD" - }, - { - "name": "lpTotalNumberOfClusters", - "type": "LPDWORD" - } - ], - "GetDiskFreeSpaceExA": [ - { - "name": "lpDirectoryName", - "type": "LPCSTR" - }, - { - "name": "lpFreeBytesAvailableToCaller", - "type": "PULARGE_INTEGER" - }, - { - "name": "lpTotalNumberOfBytes", - "type": "PULARGE_INTEGER" - }, - { - "name": "lpTotalNumberOfFreeBytes", - "type": "PULARGE_INTEGER" - } - ], - "GetDiskFreeSpaceExW": [ - { - "name": "lpDirectoryName", - "type": "LPCWSTR" - }, - { - "name": "lpFreeBytesAvailableToCaller", - "type": "PULARGE_INTEGER" - }, - { - "name": "lpTotalNumberOfBytes", - "type": "PULARGE_INTEGER" - }, - { - "name": "lpTotalNumberOfFreeBytes", - "type": "PULARGE_INTEGER" - } - ], - "GetDriveTypeA": [ - { - "name": "lpRootPathName", - "type": "LPCSTR" - } - ], - "GetDriveTypeW": [ - { - "name": "lpRootPathName", - "type": "LPCWSTR" - } - ], - "GetFileAttributesA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "GetFileAttributesW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "GetFileAttributesExA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "fInfoLevelId", - "type": "GET_FILEEX_INFO_LEVELS" - }, - { - "name": "lpFileInformation", - "type": "LPVOID" - } - ], - "GetFileAttributesExW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "fInfoLevelId", - "type": "GET_FILEEX_INFO_LEVELS" - }, - { - "name": "lpFileInformation", - "type": "LPVOID" - } - ], - "GetFileInformationByHandle": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpFileInformation", - "type": "LPBY_HANDLE_FILE_INFORMATION" - } - ], - "GetFileSize": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpFileSizeHigh", - "type": "LPDWORD" - } - ], - "GetFileSizeEx": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpFileSize", - "type": "PLARGE_INTEGER" - } - ], - "GetFileType": [ - { - "name": "hFile", - "type": "HANDLE" - } - ], - "GetFinalPathNameByHandleA": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpszFilePath", - "type": "LPSTR" - }, - { - "name": "cchFilePath", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetFinalPathNameByHandleW": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpszFilePath", - "type": "LPWSTR" - }, - { - "name": "cchFilePath", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetFileTime": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpCreationTime", - "type": "LPFILETIME" - }, - { - "name": "lpLastAccessTime", - "type": "LPFILETIME" - }, - { - "name": "lpLastWriteTime", - "type": "LPFILETIME" - } - ], - "GetFullPathNameW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "lpFilePart", - "type": "LPWSTR" - } - ], - "GetFullPathNameA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "lpFilePart", - "type": "LPSTR" - } - ], - "GetLogicalDrives": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetLongPathNameA": [ - { - "name": "lpszShortPath", - "type": "LPCSTR" - }, - { - "name": "lpszLongPath", - "type": "LPSTR" - }, - { - "name": "cchBuffer", - "type": "DWORD" - } - ], - "GetLongPathNameW": [ - { - "name": "lpszShortPath", - "type": "LPCWSTR" - }, - { - "name": "lpszLongPath", - "type": "LPWSTR" - }, - { - "name": "cchBuffer", - "type": "DWORD" - } - ], - "GetVolumeInformationByHandleW": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpVolumeNameBuffer", - "type": "LPWSTR" - }, - { - "name": "nVolumeNameSize", - "type": "DWORD" - }, - { - "name": "lpVolumeSerialNumber", - "type": "LPDWORD" - }, - { - "name": "lpMaximumComponentLength", - "type": "LPDWORD" - }, - { - "name": "lpFileSystemFlags", - "type": "LPDWORD" - }, - { - "name": "lpFileSystemNameBuffer", - "type": "LPWSTR" - }, - { - "name": "nFileSystemNameSize", - "type": "DWORD" - } - ], - "GetVolumeInformationW": [ - { - "name": "lpRootPathName", - "type": "LPCWSTR" - }, - { - "name": "lpVolumeNameBuffer", - "type": "LPWSTR" - }, - { - "name": "nVolumeNameSize", - "type": "DWORD" - }, - { - "name": "lpVolumeSerialNumber", - "type": "LPDWORD" - }, - { - "name": "lpMaximumComponentLength", - "type": "LPDWORD" - }, - { - "name": "lpFileSystemFlags", - "type": "LPDWORD" - }, - { - "name": "lpFileSystemNameBuffer", - "type": "LPWSTR" - }, - { - "name": "nFileSystemNameSize", - "type": "DWORD" - } - ], - "LocalFileTimeToFileTime": [ - { - "name": "lpLocalFileTime", - "type": "FILETIME" - }, - { - "name": "lpFileTime", - "type": "LPFILETIME" - } - ], - "LockFile": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "dwFileOffsetLow", - "type": "DWORD" - }, - { - "name": "dwFileOffsetHigh", - "type": "DWORD" - }, - { - "name": "nNumberOfBytesToLockLow", - "type": "DWORD" - }, - { - "name": "nNumberOfBytesToLockHigh", - "type": "DWORD" - } - ], - "LockFileEx": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "nNumberOfBytesToLockLow", - "type": "DWORD" - }, - { - "name": "nNumberOfBytesToLockHigh", - "type": "DWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "ReadFile": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "nNumberOfBytesToRead", - "type": "DWORD" - }, - { - "name": "lpNumberOfBytesRead", - "type": "LPDWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "ReadFileEx": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "nNumberOfBytesToRead", - "type": "DWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - }, - { - "name": "lpCompletionRoutine", - "type": "LPOVERLAPPED_COMPLETION_ROUTINE" - } - ], - "ReadFileScatter": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "aSegmentArray", - "type": "FILE_SEGMENT_ELEMENT" - }, - { - "name": "nNumberOfBytesToRead", - "type": "DWORD" - }, - { - "name": "lpReserved", - "type": "LPDWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "RemoveDirectoryA": [ - { - "name": "lpPathName", - "type": "LPCSTR" - } - ], - "RemoveDirectoryW": [ - { - "name": "lpPathName", - "type": "LPCWSTR" - } - ], - "SetEndOfFile": [ - { - "name": "hFile", - "type": "HANDLE" - } - ], - "SetFileAttributesA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "dwFileAttributes", - "type": "DWORD" - } - ], - "SetFileAttributesW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "dwFileAttributes", - "type": "DWORD" - } - ], - "SetFileInformationByHandle": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "FileInformationClass", - "type": "FILE_INFO_BY_HANDLE_CLASS" - }, - { - "name": "lpFileInformation", - "type": "LPVOID" - }, - { - "name": "dwBufferSize", - "type": "DWORD" - } - ], - "SetFilePointer": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lDistanceToMove", - "type": "LONG" - }, - { - "name": "lpDistanceToMoveHigh", - "type": "PLONG" - }, - { - "name": "dwMoveMethod", - "type": "DWORD" - } - ], - "SetFilePointerEx": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "liDistanceToMove", - "type": "LARGE_INTEGER" - }, - { - "name": "lpNewFilePointer", - "type": "PLARGE_INTEGER" - }, - { - "name": "dwMoveMethod", - "type": "DWORD" - } - ], - "SetFileTime": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpCreationTime", - "type": "FILETIME" - }, - { - "name": "lpLastAccessTime", - "type": "FILETIME" - }, - { - "name": "lpLastWriteTime", - "type": "FILETIME" - } - ], - "SetFileValidData": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "ValidDataLength", - "type": "LONGLONG" - } - ], - "UnlockFile": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "dwFileOffsetLow", - "type": "DWORD" - }, - { - "name": "dwFileOffsetHigh", - "type": "DWORD" - }, - { - "name": "nNumberOfBytesToUnlockLow", - "type": "DWORD" - }, - { - "name": "nNumberOfBytesToUnlockHigh", - "type": "DWORD" - } - ], - "UnlockFileEx": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "nNumberOfBytesToUnlockLow", - "type": "DWORD" - }, - { - "name": "nNumberOfBytesToUnlockHigh", - "type": "DWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "WriteFile": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpBuffer", - "type": "LPCVOID" - }, - { - "name": "nNumberOfBytesToWrite", - "type": "DWORD" - }, - { - "name": "lpNumberOfBytesWritten", - "type": "LPDWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "WriteFileEx": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpBuffer", - "type": "LPCVOID" - }, - { - "name": "nNumberOfBytesToWrite", - "type": "DWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - }, - { - "name": "lpCompletionRoutine", - "type": "LPOVERLAPPED_COMPLETION_ROUTINE" - } - ], - "WriteFileGather": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "aSegmentArray", - "type": "FILE_SEGMENT_ELEMENT" - }, - { - "name": "nNumberOfBytesToWrite", - "type": "DWORD" - }, - { - "name": "lpReserved", - "type": "LPDWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "GetTempPathW": [ - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - } - ], - "CreateFile2": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwShareMode", - "type": "DWORD" - }, - { - "name": "dwCreationDisposition", - "type": "DWORD" - }, - { - "name": "pCreateExParams", - "type": "LPCREATEFILE2_EXTENDED_PARAMETERS" - } - ], - "SetFileIoOverlappedRange": [ - { - "name": "FileHandle", - "type": "HANDLE" - }, - { - "name": "OverlappedRangeStart", - "type": "PUCHAR" - }, - { - "name": "Length", - "type": "ULONG" - } - ], - "GetCompressedFileSizeA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "lpFileSizeHigh", - "type": "LPDWORD" - } - ], - "GetCompressedFileSizeW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "lpFileSizeHigh", - "type": "LPDWORD" - } - ], - "FindFirstStreamW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "InfoLevel", - "type": "STREAM_INFO_LEVELS" - }, - { - "name": "lpFindStreamData", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "FindNextStreamW": [ - { - "name": "hFindStream", - "type": "HANDLE" - }, - { - "name": "lpFindStreamData", - "type": "LPVOID" - } - ], - "AreFileApisANSI": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetTempPathA": [ - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - } - ], - "FindFirstFileNameW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "StringLength", - "type": "LPDWORD" - }, - { - "name": "LinkName", - "type": "PWSTR" - } - ], - "FindNextFileNameW": [ - { - "name": "hFindStream", - "type": "HANDLE" - }, - { - "name": "StringLength", - "type": "LPDWORD" - }, - { - "name": "LinkName", - "type": "PWSTR" - } - ], - "GetVolumeInformationA": [ - { - "name": "lpRootPathName", - "type": "LPCSTR" - }, - { - "name": "lpVolumeNameBuffer", - "type": "LPSTR" - }, - { - "name": "nVolumeNameSize", - "type": "DWORD" - }, - { - "name": "lpVolumeSerialNumber", - "type": "LPDWORD" - }, - { - "name": "lpMaximumComponentLength", - "type": "LPDWORD" - }, - { - "name": "lpFileSystemFlags", - "type": "LPDWORD" - }, - { - "name": "lpFileSystemNameBuffer", - "type": "LPSTR" - }, - { - "name": "nFileSystemNameSize", - "type": "DWORD" - } - ], - "SetFileApisToOEM": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetFileApisToANSI": [ - { - "name": "VOID", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/networkisolation.json b/qiling/extensions/windows_sdk/firewallapi.json similarity index 100% rename from qiling/extensions/windows_sdk/networkisolation.json rename to qiling/extensions/windows_sdk/firewallapi.json diff --git a/qiling/extensions/windows_sdk/expandedresources.json b/qiling/extensions/windows_sdk/gamemode.json similarity index 100% rename from qiling/extensions/windows_sdk/expandedresources.json rename to qiling/extensions/windows_sdk/gamemode.json diff --git a/qiling/extensions/windows_sdk/gdi32.json b/qiling/extensions/windows_sdk/gdi32.json new file mode 100644 index 000000000..f57fee6e4 --- /dev/null +++ b/qiling/extensions/windows_sdk/gdi32.json @@ -0,0 +1,5434 @@ +{ + "AddFontResourceA": [ + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "AddFontResourceW": [ + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "AnimatePalette": [ + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "iStartIndex", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "ppe", + "type": "PALETTEENTRY" + } + ], + "Arc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "x3", + "type": "int" + }, + { + "name": "y3", + "type": "int" + }, + { + "name": "x4", + "type": "int" + }, + { + "name": "y4", + "type": "int" + } + ], + "BitBlt": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "CancelDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "Chord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "x3", + "type": "int" + }, + { + "name": "y3", + "type": "int" + }, + { + "name": "x4", + "type": "int" + }, + { + "name": "y4", + "type": "int" + } + ], + "ChoosePixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "CloseMetaFile": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CombineRgn": [ + { + "name": "hrgnDst", + "type": "HRGN" + }, + { + "name": "hrgnSrc1", + "type": "HRGN" + }, + { + "name": "hrgnSrc2", + "type": "HRGN" + }, + { + "name": "iMode", + "type": "int" + } + ], + "CopyMetaFileA": [ + { + "name": "VOID", + "type": "HMETAFILE" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "CopyMetaFileW": [ + { + "name": "VOID", + "type": "HMETAFILE" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "CreateBitmap": [ + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "nPlanes", + "type": "UINT" + }, + { + "name": "nBitCount", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "void" + } + ], + "CreateBitmapIndirect": [ + { + "name": "pbm", + "type": "BITMAP" + } + ], + "CreateBrushIndirect": [ + { + "name": "plbrush", + "type": "LOGBRUSH" + } + ], + "CreateCompatibleBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "CreateDiscardableBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "CreateCompatibleDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CreateDCA": [ + { + "name": "pwszDriver", + "type": "LPCSTR" + }, + { + "name": "pwszDevice", + "type": "LPCSTR" + }, + { + "name": "pszPort", + "type": "LPCSTR" + }, + { + "name": "pdm", + "type": "DEVMODEA" + } + ], + "CreateDCW": [ + { + "name": "pwszDriver", + "type": "LPCWSTR" + }, + { + "name": "pwszDevice", + "type": "LPCWSTR" + }, + { + "name": "pszPort", + "type": "LPCWSTR" + }, + { + "name": "pdm", + "type": "DEVMODEW" + } + ], + "CreateDIBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pbmih", + "type": "BITMAPINFOHEADER" + }, + { + "name": "flInit", + "type": "DWORD" + }, + { + "name": "pjBits", + "type": "void" + }, + { + "name": "pbmi", + "type": "BITMAPINFO" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateDIBPatternBrush": [ + { + "name": "h", + "type": "HGLOBAL" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateDIBPatternBrushPt": [ + { + "name": "lpPackedDIB", + "type": "void" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateEllipticRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + } + ], + "CreateEllipticRgnIndirect": [ + { + "name": "lprect", + "type": "RECT" + } + ], + "CreateFontIndirectA": [ + { + "name": "lplf", + "type": "LOGFONTA" + } + ], + "CreateFontIndirectW": [ + { + "name": "lplf", + "type": "LOGFONTW" + } + ], + "CreateFontA": [ + { + "name": "cHeight", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "cEscapement", + "type": "int" + }, + { + "name": "cOrientation", + "type": "int" + }, + { + "name": "cWeight", + "type": "int" + }, + { + "name": "bItalic", + "type": "DWORD" + }, + { + "name": "bUnderline", + "type": "DWORD" + }, + { + "name": "bStrikeOut", + "type": "DWORD" + }, + { + "name": "iCharSet", + "type": "DWORD" + }, + { + "name": "iOutPrecision", + "type": "DWORD" + }, + { + "name": "iClipPrecision", + "type": "DWORD" + }, + { + "name": "iQuality", + "type": "DWORD" + }, + { + "name": "iPitchAndFamily", + "type": "DWORD" + }, + { + "name": "pszFaceName", + "type": "LPCSTR" + } + ], + "CreateFontW": [ + { + "name": "cHeight", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "cEscapement", + "type": "int" + }, + { + "name": "cOrientation", + "type": "int" + }, + { + "name": "cWeight", + "type": "int" + }, + { + "name": "bItalic", + "type": "DWORD" + }, + { + "name": "bUnderline", + "type": "DWORD" + }, + { + "name": "bStrikeOut", + "type": "DWORD" + }, + { + "name": "iCharSet", + "type": "DWORD" + }, + { + "name": "iOutPrecision", + "type": "DWORD" + }, + { + "name": "iClipPrecision", + "type": "DWORD" + }, + { + "name": "iQuality", + "type": "DWORD" + }, + { + "name": "iPitchAndFamily", + "type": "DWORD" + }, + { + "name": "pszFaceName", + "type": "LPCWSTR" + } + ], + "CreateHatchBrush": [ + { + "name": "iHatch", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "CreateICA": [ + { + "name": "pszDriver", + "type": "LPCSTR" + }, + { + "name": "pszDevice", + "type": "LPCSTR" + }, + { + "name": "pszPort", + "type": "LPCSTR" + }, + { + "name": "pdm", + "type": "DEVMODEA" + } + ], + "CreateICW": [ + { + "name": "pszDriver", + "type": "LPCWSTR" + }, + { + "name": "pszDevice", + "type": "LPCWSTR" + }, + { + "name": "pszPort", + "type": "LPCWSTR" + }, + { + "name": "pdm", + "type": "DEVMODEW" + } + ], + "CreateMetaFileA": [ + { + "name": "pszFile", + "type": "LPCSTR" + } + ], + "CreateMetaFileW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + } + ], + "CreatePalette": [ + { + "name": "plpal", + "type": "LOGPALETTE" + } + ], + "CreatePen": [ + { + "name": "iStyle", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "CreatePenIndirect": [ + { + "name": "plpen", + "type": "LOGPEN" + } + ], + "CreatePolyPolygonRgn": [ + { + "name": "pptl", + "type": "POINT" + }, + { + "name": "pc", + "type": "INT" + }, + { + "name": "cPoly", + "type": "int" + }, + { + "name": "iMode", + "type": "int" + } + ], + "CreatePatternBrush": [ + { + "name": "hbm", + "type": "HBITMAP" + } + ], + "CreateRectRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + } + ], + "CreateRectRgnIndirect": [ + { + "name": "lprect", + "type": "RECT" + } + ], + "CreateRoundRectRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + } + ], + "CreateScalableFontResourceA": [ + { + "name": "fdwHidden", + "type": "DWORD" + }, + { + "name": "lpszFont", + "type": "LPCSTR" + }, + { + "name": "lpszFile", + "type": "LPCSTR" + }, + { + "name": "lpszPath", + "type": "LPCSTR" + } + ], + "CreateScalableFontResourceW": [ + { + "name": "fdwHidden", + "type": "DWORD" + }, + { + "name": "lpszFont", + "type": "LPCWSTR" + }, + { + "name": "lpszFile", + "type": "LPCWSTR" + }, + { + "name": "lpszPath", + "type": "LPCWSTR" + } + ], + "CreateSolidBrush": [ + { + "name": "color", + "type": "COLORREF" + } + ], + "DeleteDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "DeleteMetaFile": [ + { + "name": "hmf", + "type": "HMETAFILE" + } + ], + "DeleteObject": [ + { + "name": "ho", + "type": "HGDIOBJ" + } + ], + "DescribePixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPixelFormat", + "type": "int" + }, + { + "name": "nBytes", + "type": "UINT" + }, + { + "name": "ppfd", + "type": "LPPIXELFORMATDESCRIPTOR" + } + ], + "DeviceCapabilitiesA": [ + { + "name": "pDevice", + "type": "LPCSTR" + }, + { + "name": "pPort", + "type": "LPCSTR" + }, + { + "name": "fwCapability", + "type": "WORD" + }, + { + "name": "pOutput", + "type": "LPSTR" + }, + { + "name": "pDevMode", + "type": "DEVMODEA" + } + ], + "DeviceCapabilitiesW": [ + { + "name": "pDevice", + "type": "LPCWSTR" + }, + { + "name": "pPort", + "type": "LPCWSTR" + }, + { + "name": "fwCapability", + "type": "WORD" + }, + { + "name": "pOutput", + "type": "LPWSTR" + }, + { + "name": "pDevMode", + "type": "DEVMODEW" + } + ], + "DrawEscape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjIn", + "type": "int" + }, + { + "name": "lpIn", + "type": "LPCSTR" + } + ], + "Ellipse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "EnumFontFamiliesExA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPLOGFONTA" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumFontFamiliesExW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPLOGFONTW" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumFontFamiliesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontFamiliesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCWSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCWSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumObjects": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nType", + "type": "int" + }, + { + "name": "lpFunc", + "type": "GOBJENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EqualRgn": [ + { + "name": "hrgn1", + "type": "HRGN" + }, + { + "name": "hrgn2", + "type": "HRGN" + } + ], + "Escape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjIn", + "type": "int" + }, + { + "name": "pvIn", + "type": "LPCSTR" + }, + { + "name": "pvOut", + "type": "LPVOID" + } + ], + "ExtEscape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjInput", + "type": "int" + }, + { + "name": "lpInData", + "type": "LPCSTR" + }, + { + "name": "cjOutput", + "type": "int" + }, + { + "name": "lpOutData", + "type": "LPSTR" + } + ], + "ExcludeClipRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "ExtCreateRegion": [ + { + "name": "lpx", + "type": "XFORM" + }, + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "RGNDATA" + } + ], + "ExtFloodFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + }, + { + "name": "type", + "type": "UINT" + } + ], + "FillRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "hbr", + "type": "HBRUSH" + } + ], + "FloodFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "FrameRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "hbr", + "type": "HBRUSH" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + } + ], + "GetROP2": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetAspectRatioFilterEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetBkColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetDCBrushColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetDCPenColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetBkMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetBitmapBits": [ + { + "name": "hbit", + "type": "HBITMAP" + }, + { + "name": "cb", + "type": "LONG" + }, + { + "name": "lpvBits", + "type": "LPVOID" + } + ], + "GetBitmapDimensionEx": [ + { + "name": "hbit", + "type": "HBITMAP" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetBoundsRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "LPRECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetBrushOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetCharWidthA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidthW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidth32A": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidth32W": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidthFloatA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "PFLOAT" + } + ], + "GetCharWidthFloatW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "PFLOAT" + } + ], + "GetCharABCWidthsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "wFirst", + "type": "UINT" + }, + { + "name": "wLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABC" + } + ], + "GetCharABCWidthsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "wFirst", + "type": "UINT" + }, + { + "name": "wLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABC" + } + ], + "GetCharABCWidthsFloatA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABCFLOAT" + } + ], + "GetCharABCWidthsFloatW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABCFLOAT" + } + ], + "GetClipBox": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "LPRECT" + } + ], + "GetClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "GetMetaRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "GetCurrentObject": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "type", + "type": "UINT" + } + ], + "GetCurrentPositionEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetDeviceCaps": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "index", + "type": "int" + } + ], + "GetDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "start", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpvBits", + "type": "LPVOID" + }, + { + "name": "lpbmi", + "type": "LPBITMAPINFO" + }, + { + "name": "usage", + "type": "UINT" + } + ], + "GetFontData": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dwTable", + "type": "DWORD" + }, + { + "name": "dwOffset", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "PVOID" + }, + { + "name": "cjBuffer", + "type": "DWORD" + } + ], + "GetGlyphOutlineA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "uChar", + "type": "UINT" + }, + { + "name": "fuFormat", + "type": "UINT" + }, + { + "name": "lpgm", + "type": "LPGLYPHMETRICS" + }, + { + "name": "cjBuffer", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "LPVOID" + }, + { + "name": "lpmat2", + "type": "MAT2" + } + ], + "GetGlyphOutlineW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "uChar", + "type": "UINT" + }, + { + "name": "fuFormat", + "type": "UINT" + }, + { + "name": "lpgm", + "type": "LPGLYPHMETRICS" + }, + { + "name": "cjBuffer", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "LPVOID" + }, + { + "name": "lpmat2", + "type": "MAT2" + } + ], + "GetGraphicsMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetMapMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetMetaFileBitsEx": [ + { + "name": "hMF", + "type": "HMETAFILE" + }, + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetMetaFileA": [ + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetMetaFileW": [ + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "GetNearestColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "GetNearestPaletteIndex": [ + { + "name": "h", + "type": "HPALETTE" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "GetObjectType": [ + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "GetOutlineTextMetricsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cjCopy", + "type": "UINT" + }, + { + "name": "potm", + "type": "LPOUTLINETEXTMETRICA" + } + ], + "GetOutlineTextMetricsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cjCopy", + "type": "UINT" + }, + { + "name": "potm", + "type": "LPOUTLINETEXTMETRICW" + } + ], + "GetPaletteEntries": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetPixel": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "GetPixelFormat": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetPolyFillMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetRasterizerCaps": [ + { + "name": "lpraststat", + "type": "LPRASTERIZER_STATUS" + }, + { + "name": "cjBytes", + "type": "UINT" + } + ], + "GetRandomRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "i", + "type": "INT" + } + ], + "GetRegionData": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpRgnData", + "type": "LPRGNDATA" + } + ], + "GetRgnBox": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "lprc", + "type": "LPRECT" + } + ], + "GetStockObject": [ + { + "name": "i", + "type": "int" + } + ], + "GetStretchBltMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetSystemPaletteEntries": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetSystemPaletteUse": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextCharacterExtra": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextAlign": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextExtentPointA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "GetTextExtentPointW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "GetTextExtentPoint32A": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "psizl", + "type": "LPSIZE" + } + ], + "GetTextExtentPoint32W": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "psizl", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpszString", + "type": "LPCSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpszString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetTextCharset": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextCharsetInfo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpSig", + "type": "LPFONTSIGNATURE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "TranslateCharsetInfo": [ + { + "name": "lpSrc", + "type": "DWORD" + }, + { + "name": "lpCs", + "type": "LPCHARSETINFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFontLanguageInfo": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetCharacterPlacementA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "nMexExtent", + "type": "int" + }, + { + "name": "lpResults", + "type": "LPGCP_RESULTSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetCharacterPlacementW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "nMexExtent", + "type": "int" + }, + { + "name": "lpResults", + "type": "LPGCP_RESULTSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFontUnicodeRanges": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpgs", + "type": "LPGLYPHSET" + } + ], + "GetGlyphIndicesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpstr", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "fl", + "type": "DWORD" + } + ], + "GetGlyphIndicesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpstr", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "fl", + "type": "DWORD" + } + ], + "GetTextExtentPointI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pgiIn", + "type": "LPWORD" + }, + { + "name": "cgi", + "type": "int" + }, + { + "name": "psize", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpwszString", + "type": "LPWORD" + }, + { + "name": "cwchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetCharWidthI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "giFirst", + "type": "UINT" + }, + { + "name": "cgi", + "type": "UINT" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "piWidths", + "type": "LPINT" + } + ], + "GetCharABCWidthsI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "giFirst", + "type": "UINT" + }, + { + "name": "cgi", + "type": "UINT" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "pabc", + "type": "LPABC" + } + ], + "AddFontResourceExA": [ + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "res", + "type": "PVOID" + } + ], + "AddFontResourceExW": [ + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "res", + "type": "PVOID" + } + ], + "RemoveFontResourceExA": [ + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "pdv", + "type": "PVOID" + } + ], + "RemoveFontResourceExW": [ + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "pdv", + "type": "PVOID" + } + ], + "AddFontMemResourceEx": [ + { + "name": "pFileView", + "type": "PVOID" + }, + { + "name": "cjSize", + "type": "DWORD" + }, + { + "name": "pvResrved", + "type": "PVOID" + }, + { + "name": "pNumFonts", + "type": "DWORD" + } + ], + "RemoveFontMemResourceEx": [ + { + "name": "h", + "type": "HANDLE" + } + ], + "CreateFontIndirectExA": [ + { + "name": "VOID", + "type": "ENUMLOGFONTEXDVA" + } + ], + "CreateFontIndirectExW": [ + { + "name": "VOID", + "type": "ENUMLOGFONTEXDVW" + } + ], + "GetViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppoint", + "type": "LPPOINT" + } + ], + "GetWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppoint", + "type": "LPPOINT" + } + ], + "IntersectClipRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "InvertRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "LineDDA": [ + { + "name": "xStart", + "type": "int" + }, + { + "name": "yStart", + "type": "int" + }, + { + "name": "xEnd", + "type": "int" + }, + { + "name": "yEnd", + "type": "int" + }, + { + "name": "lpProc", + "type": "LINEDDAPROC" + }, + { + "name": "data", + "type": "LPARAM" + } + ], + "LineTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "MaskBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + }, + { + "name": "xMask", + "type": "int" + }, + { + "name": "yMask", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "PlgBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "lpPoint", + "type": "POINT" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + }, + { + "name": "xMask", + "type": "int" + }, + { + "name": "yMask", + "type": "int" + } + ], + "OffsetClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "OffsetRgn": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "PatBlt": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "Pie": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "xr1", + "type": "int" + }, + { + "name": "yr1", + "type": "int" + }, + { + "name": "xr2", + "type": "int" + }, + { + "name": "yr2", + "type": "int" + } + ], + "PlayMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HMETAFILE" + } + ], + "PaintRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "PolyPolygon": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "asz", + "type": "INT" + }, + { + "name": "csz", + "type": "int" + } + ], + "PtInRegion": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "PtVisible": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "RectInRegion": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "RectVisible": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "Rectangle": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "RestoreDC": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nSavedDC", + "type": "int" + } + ], + "ResetDCA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdm", + "type": "DEVMODEA" + } + ], + "ResetDCW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdm", + "type": "DEVMODEW" + } + ], + "RealizePalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "RemoveFontResourceA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "RemoveFontResourceW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "RoundRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + } + ], + "ResizePalette": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "n", + "type": "UINT" + } + ], + "SaveDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SelectClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "ExtSelectClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetMetaRgn": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SelectObject": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "SelectPalette": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "bForceBkgd", + "type": "BOOL" + } + ], + "SetBkColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetDCBrushColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetDCPenColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetBkMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetBitmapBits": [ + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "pvBits", + "type": "void" + } + ], + "SetBoundsRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "SetDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "start", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "ColorUse", + "type": "UINT" + } + ], + "SetDIBitsToDevice": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "w", + "type": "DWORD" + }, + { + "name": "h", + "type": "DWORD" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "StartScan", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpvBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "ColorUse", + "type": "UINT" + } + ], + "SetMapperFlags": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "SetGraphicsMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iMode", + "type": "int" + } + ], + "SetMapMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iMode", + "type": "int" + } + ], + "SetLayout": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "l", + "type": "DWORD" + } + ], + "GetLayout": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SetMetaFileBitsEx": [ + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "lpData", + "type": "BYTE" + } + ], + "SetPaletteEntries": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "PALETTEENTRY" + } + ], + "SetPixel": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetPixelV": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetPixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "format", + "type": "int" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "SetPolyFillMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "StretchBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "SetRectRgn": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "StretchDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "DestWidth", + "type": "int" + }, + { + "name": "DestHeight", + "type": "int" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "SrcWidth", + "type": "int" + }, + { + "name": "SrcHeight", + "type": "int" + }, + { + "name": "lpBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "iUsage", + "type": "UINT" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "SetROP2": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "rop2", + "type": "int" + } + ], + "SetStretchBltMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetSystemPaletteUse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "use", + "type": "UINT" + } + ], + "SetTextCharacterExtra": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "extra", + "type": "int" + } + ], + "SetTextColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetTextAlign": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "align", + "type": "UINT" + } + ], + "SetTextJustification": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "extra", + "type": "int" + }, + { + "name": "count", + "type": "int" + } + ], + "UpdateColors": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "AlphaBlend": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "ftn", + "type": "BLENDFUNCTION" + } + ], + "TransparentBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "crTransparent", + "type": "UINT" + } + ], + "GradientFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pVertex", + "type": "PTRIVERTEX" + }, + { + "name": "nVertex", + "type": "ULONG" + }, + { + "name": "pMesh", + "type": "PVOID" + }, + { + "name": "nMesh", + "type": "ULONG" + }, + { + "name": "ulMode", + "type": "ULONG" + } + ], + "GdiAlphaBlend": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "ftn", + "type": "BLENDFUNCTION" + } + ], + "GdiTransparentBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "crTransparent", + "type": "UINT" + } + ], + "GdiGradientFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pVertex", + "type": "PTRIVERTEX" + }, + { + "name": "nVertex", + "type": "ULONG" + }, + { + "name": "pMesh", + "type": "PVOID" + }, + { + "name": "nCount", + "type": "ULONG" + }, + { + "name": "ulMode", + "type": "ULONG" + } + ], + "PlayMetaFileRecord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpHandleTable", + "type": "LPHANDLETABLE" + }, + { + "name": "lpMR", + "type": "LPMETARECORD" + }, + { + "name": "noObjs", + "type": "UINT" + } + ], + "EnumMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HMETAFILE" + }, + { + "name": "proc", + "type": "MFENUMPROC" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "CloseEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CopyEnhMetaFileA": [ + { + "name": "hEnh", + "type": "HENHMETAFILE" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "CopyEnhMetaFileW": [ + { + "name": "hEnh", + "type": "HENHMETAFILE" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "CreateEnhMetaFileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFilename", + "type": "LPCSTR" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "lpDesc", + "type": "LPCSTR" + } + ], + "CreateEnhMetaFileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFilename", + "type": "LPCWSTR" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "lpDesc", + "type": "LPCWSTR" + } + ], + "DeleteEnhMetaFile": [ + { + "name": "hmf", + "type": "HENHMETAFILE" + } + ], + "EnumEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HENHMETAFILE" + }, + { + "name": "proc", + "type": "ENHMFENUMPROC" + }, + { + "name": "param", + "type": "LPVOID" + }, + { + "name": "lpRect", + "type": "RECT" + } + ], + "GetEnhMetaFileA": [ + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetEnhMetaFileW": [ + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "GetEnhMetaFileBits": [ + { + "name": "hEMF", + "type": "HENHMETAFILE" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpData", + "type": "LPBYTE" + } + ], + "GetEnhMetaFileDescriptionA": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cchBuffer", + "type": "UINT" + }, + { + "name": "lpDescription", + "type": "LPSTR" + } + ], + "GetEnhMetaFileDescriptionW": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cchBuffer", + "type": "UINT" + }, + { + "name": "lpDescription", + "type": "LPWSTR" + } + ], + "GetEnhMetaFileHeader": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpEnhMetaHeader", + "type": "LPENHMETAHEADER" + } + ], + "GetEnhMetaFilePaletteEntries": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "nNumEntries", + "type": "UINT" + }, + { + "name": "lpPaletteEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetEnhMetaFilePixelFormat": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "GetWinMetaFileBits": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cbData16", + "type": "UINT" + }, + { + "name": "pData16", + "type": "LPBYTE" + }, + { + "name": "iMapMode", + "type": "INT" + }, + { + "name": "hdcRef", + "type": "HDC" + } + ], + "PlayEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HENHMETAFILE" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "PlayEnhMetaFileRecord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pht", + "type": "LPHANDLETABLE" + }, + { + "name": "pmr", + "type": "ENHMETARECORD" + }, + { + "name": "cht", + "type": "UINT" + } + ], + "SetEnhMetaFileBits": [ + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "pb", + "type": "BYTE" + } + ], + "SetWinMetaFileBits": [ + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpMeta16Data", + "type": "BYTE" + }, + { + "name": "hdcRef", + "type": "HDC" + }, + { + "name": "lpMFP", + "type": "METAFILEPICT" + } + ], + "GdiComment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpData", + "type": "BYTE" + } + ], + "GetTextMetricsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lptm", + "type": "LPTEXTMETRICA" + } + ], + "GetTextMetricsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lptm", + "type": "LPTEXTMETRICW" + } + ], + "AngleArc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "r", + "type": "DWORD" + }, + { + "name": "StartAngle", + "type": "FLOAT" + }, + { + "name": "SweepAngle", + "type": "FLOAT" + } + ], + "PolyPolyline": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "asz", + "type": "DWORD" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "GetWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "LPXFORM" + } + ], + "SetWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "XFORM" + } + ], + "ModifyWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "XFORM" + }, + { + "name": "mode", + "type": "DWORD" + } + ], + "CombineTransform": [ + { + "name": "lpxfOut", + "type": "LPXFORM" + }, + { + "name": "lpxf1", + "type": "XFORM" + }, + { + "name": "lpxf2", + "type": "XFORM" + } + ], + "CreateDIBSection": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pbmi", + "type": "BITMAPINFO" + }, + { + "name": "usage", + "type": "UINT" + }, + { + "name": "ppvBits", + "type": "void" + }, + { + "name": "hSection", + "type": "HANDLE" + }, + { + "name": "offset", + "type": "DWORD" + } + ], + "GetDIBColorTable": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "prgbq", + "type": "RGBQUAD" + } + ], + "SetDIBColorTable": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "prgbq", + "type": "RGBQUAD" + } + ], + "SetColorAdjustment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpca", + "type": "COLORADJUSTMENT" + } + ], + "GetColorAdjustment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpca", + "type": "LPCOLORADJUSTMENT" + } + ], + "CreateHalftonePalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StartDocA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdi", + "type": "DOCINFOA" + } + ], + "StartDocW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdi", + "type": "DOCINFOW" + } + ], + "EndDoc": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StartPage": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "EndPage": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "AbortDoc": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SetAbortProc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ABORTPROC" + } + ], + "AbortPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ArcTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "xr1", + "type": "int" + }, + { + "name": "yr1", + "type": "int" + }, + { + "name": "xr2", + "type": "int" + }, + { + "name": "yr2", + "type": "int" + } + ], + "BeginPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CloseFigure": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "EndPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "FillPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "FlattenPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetPath": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "LPPOINT" + }, + { + "name": "aj", + "type": "LPBYTE" + }, + { + "name": "cpt", + "type": "int" + } + ], + "PathToRegion": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "PolyDraw": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "aj", + "type": "BYTE" + }, + { + "name": "cpt", + "type": "int" + } + ], + "SelectClipPath": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetArcDirection": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dir", + "type": "int" + } + ], + "SetMiterLimit": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "limit", + "type": "FLOAT" + }, + { + "name": "old", + "type": "PFLOAT" + } + ], + "StrokeAndFillPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StrokePath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "WidenPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ExtCreatePen": [ + { + "name": "iPenStyle", + "type": "DWORD" + }, + { + "name": "cWidth", + "type": "DWORD" + }, + { + "name": "plbrush", + "type": "LOGBRUSH" + }, + { + "name": "cStyle", + "type": "DWORD" + }, + { + "name": "pstyle", + "type": "DWORD" + } + ], + "GetMiterLimit": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "plimit", + "type": "PFLOAT" + } + ], + "GetArcDirection": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetObjectA": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pv", + "type": "LPVOID" + } + ], + "GetObjectW": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pv", + "type": "LPVOID" + } + ], + "MoveToEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "TextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + } + ], + "TextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + } + ], + "ExtTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "options", + "type": "UINT" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "UINT" + }, + { + "name": "lpDx", + "type": "INT" + } + ], + "ExtTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "options", + "type": "UINT" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "UINT" + }, + { + "name": "lpDx", + "type": "INT" + } + ], + "PolyTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppt", + "type": "POLYTEXTA" + }, + { + "name": "nstrings", + "type": "int" + } + ], + "PolyTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppt", + "type": "POLYTEXTW" + }, + { + "name": "nstrings", + "type": "int" + } + ], + "CreatePolygonRgn": [ + { + "name": "pptl", + "type": "POINT" + }, + { + "name": "cPoint", + "type": "int" + }, + { + "name": "iMode", + "type": "int" + } + ], + "DPtoLP": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + }, + { + "name": "c", + "type": "int" + } + ], + "LPtoDP": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + }, + { + "name": "c", + "type": "int" + } + ], + "Polygon": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "int" + } + ], + "Polyline": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "int" + } + ], + "PolyBezier": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "PolyBezierTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "PolylineTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "SetViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "SetWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "OffsetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "OffsetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "ScaleViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xn", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "yn", + "type": "int" + }, + { + "name": "yd", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "ScaleWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xn", + "type": "int" + }, + { + "name": "xd", + "type": "int" + }, + { + "name": "yn", + "type": "int" + }, + { + "name": "yd", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetBitmapDimensionEx": [ + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetBrushOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetTextFaceA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpName", + "type": "LPSTR" + } + ], + "GetTextFaceW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpName", + "type": "LPWSTR" + } + ], + "GetKerningPairsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nPairs", + "type": "DWORD" + }, + { + "name": "lpKernPair", + "type": "LPKERNINGPAIR" + } + ], + "GetKerningPairsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nPairs", + "type": "DWORD" + }, + { + "name": "lpKernPair", + "type": "LPKERNINGPAIR" + } + ], + "GetDCOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "UnrealizeObject": [ + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "GdiFlush": [ + { + "name": "VOID", + "type": "void" + } + ], + "GdiSetBatchLimit": [ + { + "name": "dw", + "type": "DWORD" + } + ], + "GdiGetBatchLimit": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetICMMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "CheckColorsInGamut": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRGBTriple", + "type": "LPRGBTRIPLE" + }, + { + "name": "dlpBuffer", + "type": "LPVOID" + }, + { + "name": "nCount", + "type": "DWORD" + } + ], + "GetColorSpace": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetLogColorSpaceA": [ + { + "name": "hColorSpace", + "type": "HCOLORSPACE" + }, + { + "name": "lpBuffer", + "type": "LPLOGCOLORSPACEA" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetLogColorSpaceW": [ + { + "name": "hColorSpace", + "type": "HCOLORSPACE" + }, + { + "name": "lpBuffer", + "type": "LPLOGCOLORSPACEW" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "CreateColorSpaceA": [ + { + "name": "lplcs", + "type": "LPLOGCOLORSPACEA" + } + ], + "CreateColorSpaceW": [ + { + "name": "lplcs", + "type": "LPLOGCOLORSPACEW" + } + ], + "SetColorSpace": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hcs", + "type": "HCOLORSPACE" + } + ], + "DeleteColorSpace": [ + { + "name": "hcs", + "type": "HCOLORSPACE" + } + ], + "GetICMProfileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pBufSize", + "type": "LPDWORD" + }, + { + "name": "pszFilename", + "type": "LPSTR" + } + ], + "GetICMProfileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pBufSize", + "type": "LPDWORD" + }, + { + "name": "pszFilename", + "type": "LPWSTR" + } + ], + "SetICMProfileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFileName", + "type": "LPSTR" + } + ], + "SetICMProfileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFileName", + "type": "LPWSTR" + } + ], + "GetDeviceGammaRamp": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRamp", + "type": "LPVOID" + } + ], + "SetDeviceGammaRamp": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRamp", + "type": "LPVOID" + } + ], + "ColorMatchToTarget": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hdcTarget", + "type": "HDC" + }, + { + "name": "action", + "type": "DWORD" + } + ], + "EnumICMProfilesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ICMENUMPROCA" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "EnumICMProfilesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ICMENUMPROCW" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "UpdateICMRegKeyA": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "lpszCMID", + "type": "LPSTR" + }, + { + "name": "lpszFileName", + "type": "LPSTR" + }, + { + "name": "command", + "type": "UINT" + } + ], + "UpdateICMRegKeyW": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "lpszCMID", + "type": "LPWSTR" + }, + { + "name": "lpszFileName", + "type": "LPWSTR" + }, + { + "name": "command", + "type": "UINT" + } + ], + "ColorCorrectPalette": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "deFirst", + "type": "DWORD" + }, + { + "name": "num", + "type": "DWORD" + } + ], + "wglCopyContext": [ + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "UINT" + } + ], + "wglCreateContext": [ + { + "name": "VOID", + "type": "HDC" + } + ], + "wglCreateLayerContext": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + } + ], + "wglDeleteContext": [ + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglGetCurrentContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "wglGetCurrentDC": [ + { + "name": "VOID", + "type": "void" + } + ], + "wglGetProcAddress": [ + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "wglMakeCurrent": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglShareLists": [ + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglUseFontBitmapsA": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "wglUseFontBitmapsW": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "SwapBuffers": [ + { + "name": "VOID", + "type": "HDC" + } + ], + "wglUseFontOutlinesA": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "LPGLYPHMETRICSFLOAT" + } + ], + "wglUseFontOutlinesW": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "LPGLYPHMETRICSFLOAT" + } + ], + "wglDescribeLayerPlane": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "LPLAYERPLANEDESCRIPTOR" + } + ], + "wglSetLayerPaletteEntries": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "COLORREF" + } + ], + "wglGetLayerPaletteEntries": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "COLORREF" + } + ], + "wglRealizeLayerPalette": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "wglSwapLayerBuffers": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/guiddef.json b/qiling/extensions/windows_sdk/guiddef.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/guiddef.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/highlevelmonitorconfigurationapi.json b/qiling/extensions/windows_sdk/highlevelmonitorconfigurationapi.json deleted file mode 100644 index a42b7a1ab..000000000 --- a/qiling/extensions/windows_sdk/highlevelmonitorconfigurationapi.json +++ /dev/null @@ -1,270 +0,0 @@ -{ - "GetMonitorCapabilities": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "pdwMonitorCapabilities", - "type": "LPDWORD" - }, - { - "name": "pdwSupportedColorTemperatures", - "type": "LPDWORD" - } - ], - "SaveCurrentMonitorSettings": [ - { - "name": "hMonitor", - "type": "HANDLE" - } - ], - "GetMonitorTechnologyType": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "pdtyDisplayTechnologyType", - "type": "LPMC_DISPLAY_TECHNOLOGY_TYPE" - } - ], - "GetMonitorBrightness": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "pdwMinimumBrightness", - "type": "LPDWORD" - }, - { - "name": "pdwCurrentBrightness", - "type": "LPDWORD" - }, - { - "name": "pdwMaximumBrightness", - "type": "LPDWORD" - } - ], - "GetMonitorContrast": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "pdwMinimumContrast", - "type": "LPDWORD" - }, - { - "name": "pdwCurrentContrast", - "type": "LPDWORD" - }, - { - "name": "pdwMaximumContrast", - "type": "LPDWORD" - } - ], - "GetMonitorColorTemperature": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "pctCurrentColorTemperature", - "type": "LPMC_COLOR_TEMPERATURE" - } - ], - "GetMonitorRedGreenOrBlueDrive": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "dtDriveType", - "type": "MC_DRIVE_TYPE" - }, - { - "name": "pdwMinimumDrive", - "type": "LPDWORD" - }, - { - "name": "pdwCurrentDrive", - "type": "LPDWORD" - }, - { - "name": "pdwMaximumDrive", - "type": "LPDWORD" - } - ], - "GetMonitorRedGreenOrBlueGain": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "gtGainType", - "type": "MC_GAIN_TYPE" - }, - { - "name": "pdwMinimumGain", - "type": "LPDWORD" - }, - { - "name": "pdwCurrentGain", - "type": "LPDWORD" - }, - { - "name": "pdwMaximumGain", - "type": "LPDWORD" - } - ], - "SetMonitorBrightness": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "dwNewBrightness", - "type": "DWORD" - } - ], - "SetMonitorContrast": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "dwNewContrast", - "type": "DWORD" - } - ], - "SetMonitorColorTemperature": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "ctCurrentColorTemperature", - "type": "MC_COLOR_TEMPERATURE" - } - ], - "SetMonitorRedGreenOrBlueDrive": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "dtDriveType", - "type": "MC_DRIVE_TYPE" - }, - { - "name": "dwNewDrive", - "type": "DWORD" - } - ], - "SetMonitorRedGreenOrBlueGain": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "gtGainType", - "type": "MC_GAIN_TYPE" - }, - { - "name": "dwNewGain", - "type": "DWORD" - } - ], - "DegaussMonitor": [ - { - "name": "hMonitor", - "type": "HANDLE" - } - ], - "GetMonitorDisplayAreaSize": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "stSizeType", - "type": "MC_SIZE_TYPE" - }, - { - "name": "pdwMinimumWidthOrHeight", - "type": "LPDWORD" - }, - { - "name": "pdwCurrentWidthOrHeight", - "type": "LPDWORD" - }, - { - "name": "pdwMaximumWidthOrHeight", - "type": "LPDWORD" - } - ], - "GetMonitorDisplayAreaPosition": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "ptPositionType", - "type": "MC_POSITION_TYPE" - }, - { - "name": "pdwMinimumPosition", - "type": "LPDWORD" - }, - { - "name": "pdwCurrentPosition", - "type": "LPDWORD" - }, - { - "name": "pdwMaximumPosition", - "type": "LPDWORD" - } - ], - "SetMonitorDisplayAreaSize": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "stSizeType", - "type": "MC_SIZE_TYPE" - }, - { - "name": "dwNewDisplayAreaWidthOrHeight", - "type": "DWORD" - } - ], - "SetMonitorDisplayAreaPosition": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "ptPositionType", - "type": "MC_POSITION_TYPE" - }, - { - "name": "dwNewPosition", - "type": "DWORD" - } - ], - "RestoreMonitorFactoryColorDefaults": [ - { - "name": "hMonitor", - "type": "HANDLE" - } - ], - "RestoreMonitorFactoryDefaults": [ - { - "name": "hMonitor", - "type": "HANDLE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/http.json b/qiling/extensions/windows_sdk/http.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/http.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ime.json b/qiling/extensions/windows_sdk/ime.json deleted file mode 100644 index 24248426e..000000000 --- a/qiling/extensions/windows_sdk/ime.json +++ /dev/null @@ -1,22 +0,0 @@ -{ - "SendIMEMessageExA": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "LPARAM" - } - ], - "SendIMEMessageExW": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "LPARAM" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/immdev.json b/qiling/extensions/windows_sdk/immdev.json deleted file mode 100644 index db9653b71..000000000 --- a/qiling/extensions/windows_sdk/immdev.json +++ /dev/null @@ -1,932 +0,0 @@ -{ - "ImmInstallIMEA": [ - { - "name": "lpszIMEFileName", - "type": "LPCSTR" - }, - { - "name": "lpszLayoutText", - "type": "LPCSTR" - } - ], - "ImmInstallIMEW": [ - { - "name": "lpszIMEFileName", - "type": "LPCWSTR" - }, - { - "name": "lpszLayoutText", - "type": "LPCWSTR" - } - ], - "ImmGetDefaultIMEWnd": [ - { - "name": "VOID", - "type": "HWND" - } - ], - "ImmGetDescriptionA": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "lpszDescription", - "type": "LPSTR" - }, - { - "name": "uBufLen", - "type": "UINT" - } - ], - "ImmGetDescriptionW": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "lpszDescription", - "type": "LPWSTR" - }, - { - "name": "uBufLen", - "type": "UINT" - } - ], - "ImmGetIMEFileNameA": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "lpszFileName", - "type": "LPSTR" - }, - { - "name": "uBufLen", - "type": "UINT" - } - ], - "ImmGetIMEFileNameW": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "lpszFileName", - "type": "LPWSTR" - }, - { - "name": "uBufLen", - "type": "UINT" - } - ], - "ImmGetProperty": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "ImmIsIME": [ - { - "name": "VOID", - "type": "HKL" - } - ], - "ImmSimulateHotKey": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "ImmCreateContext": [ - { - "name": "VOID", - "type": "void" - } - ], - "ImmDestroyContext": [ - { - "name": "VOID", - "type": "HIMC" - } - ], - "ImmGetContext": [ - { - "name": "VOID", - "type": "HWND" - } - ], - "ImmReleaseContext": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "HIMC" - } - ], - "ImmAssociateContext": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "HIMC" - } - ], - "ImmAssociateContextEx": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "ImmGetCompositionStringA": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "lpBuf", - "type": "LPVOID" - }, - { - "name": "dwBufLen", - "type": "DWORD" - } - ], - "ImmGetCompositionStringW": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "lpBuf", - "type": "LPVOID" - }, - { - "name": "dwBufLen", - "type": "DWORD" - } - ], - "ImmSetCompositionStringA": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "lpComp", - "type": "LPVOID" - }, - { - "name": "dwCompLen", - "type": "DWORD" - }, - { - "name": "lpRead", - "type": "LPVOID" - }, - { - "name": "dwReadLen", - "type": "DWORD" - } - ], - "ImmSetCompositionStringW": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "lpComp", - "type": "LPVOID" - }, - { - "name": "dwCompLen", - "type": "DWORD" - }, - { - "name": "lpRead", - "type": "LPVOID" - }, - { - "name": "dwReadLen", - "type": "DWORD" - } - ], - "ImmGetCandidateListCountA": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lpdwListCount", - "type": "LPDWORD" - } - ], - "ImmGetCandidateListCountW": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lpdwListCount", - "type": "LPDWORD" - } - ], - "ImmGetCandidateListA": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "deIndex", - "type": "DWORD" - }, - { - "name": "lpCandList", - "type": "LPCANDIDATELIST" - }, - { - "name": "dwBufLen", - "type": "DWORD" - } - ], - "ImmGetCandidateListW": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "deIndex", - "type": "DWORD" - }, - { - "name": "lpCandList", - "type": "LPCANDIDATELIST" - }, - { - "name": "dwBufLen", - "type": "DWORD" - } - ], - "ImmGetGuideLineA": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "lpBuf", - "type": "LPSTR" - }, - { - "name": "dwBufLen", - "type": "DWORD" - } - ], - "ImmGetGuideLineW": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "lpBuf", - "type": "LPWSTR" - }, - { - "name": "dwBufLen", - "type": "DWORD" - } - ], - "ImmGetConversionStatus": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lpfdwConversion", - "type": "LPDWORD" - }, - { - "name": "lpfdwSentence", - "type": "LPDWORD" - } - ], - "ImmSetConversionStatus": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "ImmGetOpenStatus": [ - { - "name": "VOID", - "type": "HIMC" - } - ], - "ImmSetOpenStatus": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "VOID", - "type": "BOOL" - } - ], - "ImmGetCompositionFontA": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lplf", - "type": "LPLOGFONTA" - } - ], - "ImmGetCompositionFontW": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lplf", - "type": "LPLOGFONTW" - } - ], - "ImmSetCompositionFontA": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lplf", - "type": "LPLOGFONTA" - } - ], - "ImmSetCompositionFontW": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lplf", - "type": "LPLOGFONTW" - } - ], - "ImmConfigureIMEA": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "LPVOID" - } - ], - "ImmConfigureIMEW": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "LPVOID" - } - ], - "ImmEscapeA": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "VOID", - "type": "UINT" - }, - { - "name": "VOID", - "type": "LPVOID" - } - ], - "ImmEscapeW": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "VOID", - "type": "UINT" - }, - { - "name": "VOID", - "type": "LPVOID" - } - ], - "ImmGetConversionListA": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lpSrc", - "type": "LPCSTR" - }, - { - "name": "lpDst", - "type": "LPCANDIDATELIST" - }, - { - "name": "dwBufLen", - "type": "DWORD" - }, - { - "name": "uFlag", - "type": "UINT" - } - ], - "ImmGetConversionListW": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lpSrc", - "type": "LPCWSTR" - }, - { - "name": "lpDst", - "type": "LPCANDIDATELIST" - }, - { - "name": "dwBufLen", - "type": "DWORD" - }, - { - "name": "uFlag", - "type": "UINT" - } - ], - "ImmNotifyIME": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "dwAction", - "type": "DWORD" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "dwValue", - "type": "DWORD" - } - ], - "ImmGetStatusWindowPos": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lpptPos", - "type": "LPPOINT" - } - ], - "ImmSetStatusWindowPos": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lpptPos", - "type": "LPPOINT" - } - ], - "ImmGetCompositionWindow": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lpCompForm", - "type": "LPCOMPOSITIONFORM" - } - ], - "ImmSetCompositionWindow": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lpCompForm", - "type": "LPCOMPOSITIONFORM" - } - ], - "ImmGetCandidateWindow": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "lpCandidate", - "type": "LPCANDIDATEFORM" - } - ], - "ImmSetCandidateWindow": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "lpCandidate", - "type": "LPCANDIDATEFORM" - } - ], - "ImmIsUIMessageA": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "UINT" - }, - { - "name": "VOID", - "type": "WPARAM" - }, - { - "name": "VOID", - "type": "LPARAM" - } - ], - "ImmIsUIMessageW": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "UINT" - }, - { - "name": "VOID", - "type": "WPARAM" - }, - { - "name": "VOID", - "type": "LPARAM" - } - ], - "ImmGetVirtualKey": [ - { - "name": "VOID", - "type": "HWND" - } - ], - "ImmRegisterWordA": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "lpszReading", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "lpszRegister", - "type": "LPCSTR" - } - ], - "ImmRegisterWordW": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "lpszReading", - "type": "LPCWSTR" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "lpszRegister", - "type": "LPCWSTR" - } - ], - "ImmUnregisterWordA": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "lpszReading", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "lpszUnregister", - "type": "LPCSTR" - } - ], - "ImmUnregisterWordW": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "lpszReading", - "type": "LPCWSTR" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "lpszUnregister", - "type": "LPCWSTR" - } - ], - "ImmGetRegisterWordStyleA": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "nItem", - "type": "UINT" - }, - { - "name": "lpStyleBuf", - "type": "LPSTYLEBUFA" - } - ], - "ImmGetRegisterWordStyleW": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "nItem", - "type": "UINT" - }, - { - "name": "lpStyleBuf", - "type": "LPSTYLEBUFW" - } - ], - "ImmEnumRegisterWordA": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "VOID", - "type": "REGISTERWORDENUMPROCA" - }, - { - "name": "lpszReading", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "lpszRegister", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "LPVOID" - } - ], - "ImmEnumRegisterWordW": [ - { - "name": "VOID", - "type": "HKL" - }, - { - "name": "VOID", - "type": "REGISTERWORDENUMPROCW" - }, - { - "name": "lpszReading", - "type": "LPCWSTR" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "lpszRegister", - "type": "LPCWSTR" - }, - { - "name": "VOID", - "type": "LPVOID" - } - ], - "ImmDisableIME": [ - { - "name": "VOID", - "type": "DWORD" - } - ], - "ImmEnumInputContext": [ - { - "name": "idThread", - "type": "DWORD" - }, - { - "name": "lpfn", - "type": "IMCENUMPROC" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "ImmGetImeMenuItemsA": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "lpImeParentMenu", - "type": "LPIMEMENUITEMINFOA" - }, - { - "name": "lpImeMenu", - "type": "LPIMEMENUITEMINFOA" - }, - { - "name": "dwSize", - "type": "DWORD" - } - ], - "ImmGetImeMenuItemsW": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "lpImeParentMenu", - "type": "LPIMEMENUITEMINFOW" - }, - { - "name": "lpImeMenu", - "type": "LPIMEMENUITEMINFOW" - }, - { - "name": "dwSize", - "type": "DWORD" - } - ], - "ImmDisableTextFrameService": [ - { - "name": "idThread", - "type": "DWORD" - } - ], - "ImmRequestMessageA": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "VOID", - "type": "WPARAM" - }, - { - "name": "VOID", - "type": "LPARAM" - } - ], - "ImmRequestMessageW": [ - { - "name": "VOID", - "type": "HIMC" - }, - { - "name": "VOID", - "type": "WPARAM" - }, - { - "name": "VOID", - "type": "LPARAM" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/inputscope.json b/qiling/extensions/windows_sdk/inputscope.json deleted file mode 100644 index 906940df8..000000000 --- a/qiling/extensions/windows_sdk/inputscope.json +++ /dev/null @@ -1,78 +0,0 @@ -{ - "SetInputScope": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "inputscope", - "type": "InputScope" - } - ], - "SetInputScopes": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pInputScopes", - "type": "InputScope" - }, - { - "name": "cInputScopes", - "type": "UINT" - }, - { - "name": "ppszPhraseList", - "type": "PWSTR" - }, - { - "name": "cPhrases", - "type": "UINT" - }, - { - "name": "pszRegExp", - "type": "PWSTR" - }, - { - "name": "pszSRGS", - "type": "PWSTR" - } - ], - "SetInputScopeXML": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pszXML", - "type": "PWSTR" - } - ], - "SetInputScopes2": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pInputScopes", - "type": "InputScope" - }, - { - "name": "cInputScopes", - "type": "UINT" - }, - { - "name": "pEnumString", - "type": "IEnumString" - }, - { - "name": "pszRegExp", - "type": "PWSTR" - }, - { - "name": "pszSRGS", - "type": "PWSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/inspectable.json b/qiling/extensions/windows_sdk/inspectable.json deleted file mode 100644 index 7e0f77c47..000000000 --- a/qiling/extensions/windows_sdk/inspectable.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "HSTRING_UserSize": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "HSTRING" - } - ], - "HSTRING_UserFree": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "HSTRING" - } - ], - "HSTRING_UserSize64": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "HSTRING" - } - ], - "HSTRING_UserFree64": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "HSTRING" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/interlockedapi.json b/qiling/extensions/windows_sdk/interlockedapi.json deleted file mode 100644 index 09c671f1e..000000000 --- a/qiling/extensions/windows_sdk/interlockedapi.json +++ /dev/null @@ -1,54 +0,0 @@ -{ - "InitializeSListHead": [ - { - "name": "ListHead", - "type": "PSLIST_HEADER" - } - ], - "InterlockedPopEntrySList": [ - { - "name": "ListHead", - "type": "PSLIST_HEADER" - } - ], - "InterlockedPushEntrySList": [ - { - "name": "ListHead", - "type": "PSLIST_HEADER" - }, - { - "name": "ListEntry", - "type": "PSLIST_ENTRY" - } - ], - "InterlockedPushListSListEx": [ - { - "name": "ListHead", - "type": "PSLIST_HEADER" - }, - { - "name": "List", - "type": "PSLIST_ENTRY" - }, - { - "name": "ListEnd", - "type": "PSLIST_ENTRY" - }, - { - "name": "Count", - "type": "ULONG" - } - ], - "InterlockedFlushSList": [ - { - "name": "ListHead", - "type": "PSLIST_HEADER" - } - ], - "QueryDepthSList": [ - { - "name": "ListHead", - "type": "PSLIST_HEADER" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ioapiset.json b/qiling/extensions/windows_sdk/ioapiset.json deleted file mode 100644 index 22ea80cd9..000000000 --- a/qiling/extensions/windows_sdk/ioapiset.json +++ /dev/null @@ -1,182 +0,0 @@ -{ - "CreateIoCompletionPort": [ - { - "name": "FileHandle", - "type": "HANDLE" - }, - { - "name": "ExistingCompletionPort", - "type": "HANDLE" - }, - { - "name": "CompletionKey", - "type": "ULONG_PTR" - }, - { - "name": "NumberOfConcurrentThreads", - "type": "DWORD" - } - ], - "GetQueuedCompletionStatus": [ - { - "name": "CompletionPort", - "type": "HANDLE" - }, - { - "name": "lpNumberOfBytesTransferred", - "type": "LPDWORD" - }, - { - "name": "lpCompletionKey", - "type": "PULONG_PTR" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - } - ], - "GetQueuedCompletionStatusEx": [ - { - "name": "CompletionPort", - "type": "HANDLE" - }, - { - "name": "lpCompletionPortEntries", - "type": "LPOVERLAPPED_ENTRY" - }, - { - "name": "ulCount", - "type": "ULONG" - }, - { - "name": "ulNumEntriesRemoved", - "type": "PULONG" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - }, - { - "name": "fAlertable", - "type": "BOOL" - } - ], - "PostQueuedCompletionStatus": [ - { - "name": "CompletionPort", - "type": "HANDLE" - }, - { - "name": "dwNumberOfBytesTransferred", - "type": "DWORD" - }, - { - "name": "dwCompletionKey", - "type": "ULONG_PTR" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "DeviceIoControl": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "dwIoControlCode", - "type": "DWORD" - }, - { - "name": "lpInBuffer", - "type": "LPVOID" - }, - { - "name": "nInBufferSize", - "type": "DWORD" - }, - { - "name": "lpOutBuffer", - "type": "LPVOID" - }, - { - "name": "nOutBufferSize", - "type": "DWORD" - }, - { - "name": "lpBytesReturned", - "type": "LPDWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "GetOverlappedResult": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - }, - { - "name": "lpNumberOfBytesTransferred", - "type": "LPDWORD" - }, - { - "name": "bWait", - "type": "BOOL" - } - ], - "CancelIoEx": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "CancelIo": [ - { - "name": "hFile", - "type": "HANDLE" - } - ], - "GetOverlappedResultEx": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - }, - { - "name": "lpNumberOfBytesTransferred", - "type": "LPDWORD" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - }, - { - "name": "bAlertable", - "type": "BOOL" - } - ], - "CancelSynchronousIo": [ - { - "name": "hThread", - "type": "HANDLE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ip2string.json b/qiling/extensions/windows_sdk/ip2string.json deleted file mode 100644 index c1ae5ba03..000000000 --- a/qiling/extensions/windows_sdk/ip2string.json +++ /dev/null @@ -1,278 +0,0 @@ -{ - "RtlIpv4AddressToStringA": [ - { - "name": "Addr", - "type": { - "name": "in_addr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "S", - "type": "PSTR" - } - ], - "RtlIpv6AddressToStringA": [ - { - "name": "Addr", - "type": { - "name": "in6_addr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "S", - "type": "PSTR" - } - ], - "RtlEthernetAddressToStringA": [ - { - "name": "Addr", - "type": "DL_EUI48" - }, - { - "name": "S", - "type": "PSTR" - } - ], - "RtlIpv4AddressToStringW": [ - { - "name": "Addr", - "type": { - "name": "in_addr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "S", - "type": "PWSTR" - } - ], - "RtlIpv6AddressToStringW": [ - { - "name": "Addr", - "type": { - "name": "in6_addr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "S", - "type": "PWSTR" - } - ], - "RtlEthernetAddressToStringW": [ - { - "name": "Addr", - "type": "DL_EUI48" - }, - { - "name": "S", - "type": "PWSTR" - } - ], - "RtlIpv4AddressToStringExW": [ - { - "name": "Address", - "type": { - "name": "in_addr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "Port", - "type": "USHORT" - }, - { - "name": "AddressString", - "type": "PWSTR" - }, - { - "name": "AddressStringLength", - "type": "PULONG" - } - ], - "RtlIpv6AddressToStringExW": [ - { - "name": "Address", - "type": { - "name": "in6_addr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "ScopeId", - "type": "ULONG" - }, - { - "name": "Port", - "type": "USHORT" - }, - { - "name": "AddressString", - "type": "PWSTR" - }, - { - "name": "AddressStringLength", - "type": "PULONG" - } - ], - "RtlIpv4StringToAddressA": [ - { - "name": "S", - "type": "PCSTR" - }, - { - "name": "Strict", - "type": "BOOLEAN" - }, - { - "name": "Terminator", - "type": "PCSTR" - }, - { - "name": "Addr", - "type": { - "name": "in_addr", - "data_type": "Struct", - "elements": [] - } - } - ], - "RtlIpv6StringToAddressA": [ - { - "name": "S", - "type": "PCSTR" - }, - { - "name": "Terminator", - "type": "PCSTR" - }, - { - "name": "Addr", - "type": { - "name": "in6_addr", - "data_type": "Struct", - "elements": [] - } - } - ], - "RtlEthernetStringToAddressA": [ - { - "name": "S", - "type": "PCSTR" - }, - { - "name": "Terminator", - "type": "PCSTR" - }, - { - "name": "Addr", - "type": "DL_EUI48" - } - ], - "RtlIpv4StringToAddressW": [ - { - "name": "S", - "type": "PCWSTR" - }, - { - "name": "Strict", - "type": "BOOLEAN" - }, - { - "name": "Terminator", - "type": "LPCWSTR" - }, - { - "name": "Addr", - "type": { - "name": "in_addr", - "data_type": "Struct", - "elements": [] - } - } - ], - "RtlIpv6StringToAddressW": [ - { - "name": "S", - "type": "PCWSTR" - }, - { - "name": "Terminator", - "type": "PCWSTR" - }, - { - "name": "Addr", - "type": { - "name": "in6_addr", - "data_type": "Struct", - "elements": [] - } - } - ], - "RtlEthernetStringToAddressW": [ - { - "name": "S", - "type": "PCWSTR" - }, - { - "name": "Terminator", - "type": "LPCWSTR" - }, - { - "name": "Addr", - "type": "DL_EUI48" - } - ], - "RtlIpv4StringToAddressExW": [ - { - "name": "AddressString", - "type": "PCWSTR" - }, - { - "name": "Strict", - "type": "BOOLEAN" - }, - { - "name": "Address", - "type": { - "name": "in_addr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "Port", - "type": "PUSHORT" - } - ], - "RtlIpv6StringToAddressExW": [ - { - "name": "AddressString", - "type": "PCWSTR" - }, - { - "name": "Address", - "type": { - "name": "in6_addr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "ScopeId", - "type": "PULONG" - }, - { - "name": "Port", - "type": "PUSHORT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/jobapi.json b/qiling/extensions/windows_sdk/jobapi.json deleted file mode 100644 index 25c18cf32..000000000 --- a/qiling/extensions/windows_sdk/jobapi.json +++ /dev/null @@ -1,16 +0,0 @@ -{ - "IsProcessInJob": [ - { - "name": "ProcessHandle", - "type": "HANDLE" - }, - { - "name": "JobHandle", - "type": "HANDLE" - }, - { - "name": "Result", - "type": "PBOOL" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/jobapi2.json b/qiling/extensions/windows_sdk/jobapi2.json deleted file mode 100644 index f132f68e7..000000000 --- a/qiling/extensions/windows_sdk/jobapi2.json +++ /dev/null @@ -1,96 +0,0 @@ -{ - "FreeMemoryJobObject": [ - { - "name": "Buffer", - "type": "void" - } - ], - "AssignProcessToJobObject": [ - { - "name": "hJob", - "type": "HANDLE" - }, - { - "name": "hProcess", - "type": "HANDLE" - } - ], - "TerminateJobObject": [ - { - "name": "hJob", - "type": "HANDLE" - }, - { - "name": "uExitCode", - "type": "UINT" - } - ], - "SetInformationJobObject": [ - { - "name": "hJob", - "type": "HANDLE" - }, - { - "name": "JobObjectInformationClass", - "type": "JOBOBJECTINFOCLASS" - }, - { - "name": "lpJobObjectInformation", - "type": "LPVOID" - }, - { - "name": "cbJobObjectInformationLength", - "type": "DWORD" - } - ], - "SetIoRateControlInformationJobObject": [ - { - "name": "hJob", - "type": "HANDLE" - }, - { - "name": "IoRateControlInfo", - "type": "JOBOBJECT_IO_RATE_CONTROL_INFORMATION" - } - ], - "QueryInformationJobObject": [ - { - "name": "hJob", - "type": "HANDLE" - }, - { - "name": "JobObjectInformationClass", - "type": "JOBOBJECTINFOCLASS" - }, - { - "name": "lpJobObjectInformation", - "type": "LPVOID" - }, - { - "name": "cbJobObjectInformationLength", - "type": "DWORD" - }, - { - "name": "lpReturnLength", - "type": "LPDWORD" - } - ], - "QueryIoRateControlInformationJobObject": [ - { - "name": "hJob", - "type": "HANDLE" - }, - { - "name": "VolumeName", - "type": "PCWSTR" - }, - { - "name": "InfoBlocks", - "type": "JOBOBJECT_IO_RATE_CONTROL_INFORMATION" - }, - { - "name": "InfoBlockCount", - "type": "ULONG" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/joystickapi.json b/qiling/extensions/windows_sdk/joystickapi.json deleted file mode 100644 index ceec35667..000000000 --- a/qiling/extensions/windows_sdk/joystickapi.json +++ /dev/null @@ -1,92 +0,0 @@ -{ - "joyGetPosEx": [ - { - "name": "uJoyID", - "type": "UINT" - }, - { - "name": "pji", - "type": "LPJOYINFOEX" - } - ], - "joyGetNumDevs": [ - { - "name": "VOID", - "type": "void" - } - ], - "joyGetDevCapsW": [ - { - "name": "uJoyID", - "type": "UINT_PTR" - }, - { - "name": "pjc", - "type": "LPJOYCAPSW" - }, - { - "name": "cbjc", - "type": "UINT" - } - ], - "joyGetPos": [ - { - "name": "uJoyID", - "type": "UINT" - }, - { - "name": "pji", - "type": "LPJOYINFO" - } - ], - "joyGetThreshold": [ - { - "name": "uJoyID", - "type": "UINT" - }, - { - "name": "puThreshold", - "type": "LPUINT" - } - ], - "joyReleaseCapture": [ - { - "name": "uJoyID", - "type": "UINT" - } - ], - "joySetCapture": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "uJoyID", - "type": "UINT" - }, - { - "name": "uPeriod", - "type": "UINT" - }, - { - "name": "fChanged", - "type": "BOOL" - } - ], - "joySetThreshold": [ - { - "name": "uJoyID", - "type": "UINT" - }, - { - "name": "uThreshold", - "type": "UINT" - } - ], - "joyConfigChanged": [ - { - "name": "dwFlags", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/kernel.json b/qiling/extensions/windows_sdk/kernel.json new file mode 100644 index 000000000..365e9667a --- /dev/null +++ b/qiling/extensions/windows_sdk/kernel.json @@ -0,0 +1,8974 @@ +{ + "LoadStringA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "uID", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "cchBufferMax", + "type": "int" + } + ], + "LoadStringW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "uID", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "cchBufferMax", + "type": "int" + } + ], + "wvsprintfA": [ + { + "name": "VOID", + "type": "LPSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wvsprintfW": [ + { + "name": "VOID", + "type": "LPWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + }, + { + "name": "arglist", + "type": "va_list" + } + ], + "wsprintfA": [ + { + "name": "VOID", + "type": "LPSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "wsprintfW": [ + { + "name": "VOID", + "type": "LPWSTR" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "LoadKeyboardLayoutA": [ + { + "name": "pwszKLID", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "LoadKeyboardLayoutW": [ + { + "name": "pwszKLID", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "ActivateKeyboardLayout": [ + { + "name": "hkl", + "type": "HKL" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "ToUnicodeEx": [ + { + "name": "wVirtKey", + "type": "UINT" + }, + { + "name": "wScanCode", + "type": "UINT" + }, + { + "name": "lpKeyState", + "type": "BYTE" + }, + { + "name": "pwszBuff", + "type": "LPWSTR" + }, + { + "name": "cchBuff", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "UnloadKeyboardLayout": [ + { + "name": "hkl", + "type": "HKL" + } + ], + "GetKeyboardLayoutNameA": [ + { + "name": "pwszKLID", + "type": "LPSTR" + } + ], + "GetKeyboardLayoutNameW": [ + { + "name": "pwszKLID", + "type": "LPWSTR" + } + ], + "GetKeyboardLayoutList": [ + { + "name": "nBuff", + "type": "int" + }, + { + "name": "lpList", + "type": "HKL" + } + ], + "GetKeyboardLayout": [ + { + "name": "idThread", + "type": "DWORD" + } + ], + "GetMouseMovePointsEx": [ + { + "name": "cbSize", + "type": "UINT" + }, + { + "name": "lppt", + "type": "LPMOUSEMOVEPOINT" + }, + { + "name": "lpptBuf", + "type": "LPMOUSEMOVEPOINT" + }, + { + "name": "nBufPoints", + "type": "int" + }, + { + "name": "resolution", + "type": "DWORD" + } + ], + "CreateDesktopA": [ + { + "name": "lpszDesktop", + "type": "LPCSTR" + }, + { + "name": "lpszDevice", + "type": "LPCSTR" + }, + { + "name": "pDevmode", + "type": "DEVMODEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDesktopW": [ + { + "name": "lpszDesktop", + "type": "LPCWSTR" + }, + { + "name": "lpszDevice", + "type": "LPCWSTR" + }, + { + "name": "pDevmode", + "type": "DEVMODEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDesktopExA": [ + { + "name": "lpszDesktop", + "type": "LPCSTR" + }, + { + "name": "lpszDevice", + "type": "LPCSTR" + }, + { + "name": "pDevmode", + "type": "DEVMODEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ulHeapSize", + "type": "ULONG" + }, + { + "name": "pvoid", + "type": "PVOID" + } + ], + "CreateDesktopExW": [ + { + "name": "lpszDesktop", + "type": "LPCWSTR" + }, + { + "name": "lpszDevice", + "type": "LPCWSTR" + }, + { + "name": "pDevmode", + "type": "DEVMODEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ulHeapSize", + "type": "ULONG" + }, + { + "name": "pvoid", + "type": "PVOID" + } + ], + "OpenDesktopA": [ + { + "name": "lpszDesktop", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "OpenDesktopW": [ + { + "name": "lpszDesktop", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "OpenInputDesktop": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "EnumDesktopsA": [ + { + "name": "hwinsta", + "type": "HWINSTA" + }, + { + "name": "lpEnumFunc", + "type": "DESKTOPENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumDesktopsW": [ + { + "name": "hwinsta", + "type": "HWINSTA" + }, + { + "name": "lpEnumFunc", + "type": "DESKTOPENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumDesktopWindows": [ + { + "name": "hDesktop", + "type": "HDESK" + }, + { + "name": "lpfn", + "type": "WNDENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SwitchDesktop": [ + { + "name": "hDesktop", + "type": "HDESK" + } + ], + "SetThreadDesktop": [ + { + "name": "hDesktop", + "type": "HDESK" + } + ], + "CloseDesktop": [ + { + "name": "hDesktop", + "type": "HDESK" + } + ], + "GetThreadDesktop": [ + { + "name": "dwThreadId", + "type": "DWORD" + } + ], + "CreateWindowStationA": [ + { + "name": "lpwinsta", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateWindowStationW": [ + { + "name": "lpwinsta", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "lpsa", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "OpenWindowStationA": [ + { + "name": "lpszWinSta", + "type": "LPCSTR" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "OpenWindowStationW": [ + { + "name": "lpszWinSta", + "type": "LPCWSTR" + }, + { + "name": "fInherit", + "type": "BOOL" + }, + { + "name": "dwDesiredAccess", + "type": "ACCESS_MASK" + } + ], + "EnumWindowStationsA": [ + { + "name": "lpEnumFunc", + "type": "WINSTAENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumWindowStationsW": [ + { + "name": "lpEnumFunc", + "type": "WINSTAENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CloseWindowStation": [ + { + "name": "hWinSta", + "type": "HWINSTA" + } + ], + "SetProcessWindowStation": [ + { + "name": "hWinSta", + "type": "HWINSTA" + } + ], + "GetProcessWindowStation": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetUserObjectSecurity": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "pSIRequested", + "type": "PSECURITY_INFORMATION" + }, + { + "name": "pSID", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetUserObjectSecurity": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "pSIRequested", + "type": "PSECURITY_INFORMATION" + }, + { + "name": "pSID", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "GetUserObjectInformationA": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "pvInfo", + "type": "PVOID" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "GetUserObjectInformationW": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "pvInfo", + "type": "PVOID" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "SetUserObjectInformationA": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "pvInfo", + "type": "PVOID" + }, + { + "name": "nLength", + "type": "DWORD" + } + ], + "SetUserObjectInformationW": [ + { + "name": "hObj", + "type": "HANDLE" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "pvInfo", + "type": "PVOID" + }, + { + "name": "nLength", + "type": "DWORD" + } + ], + "IsHungAppWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DisableProcessWindowsGhosting": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterWindowMessageA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "RegisterWindowMessageW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "TrackMouseEvent": [ + { + "name": "lpEventTrack", + "type": "LPTRACKMOUSEEVENT" + } + ], + "DrawEdge": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "qrc", + "type": "LPRECT" + }, + { + "name": "edge", + "type": "UINT" + }, + { + "name": "grfFlags", + "type": "UINT" + } + ], + "DrawFrameControl": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "LPRECT" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "UINT" + } + ], + "DrawCaption": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "DrawAnimatedRects": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idAni", + "type": "int" + }, + { + "name": "lprcFrom", + "type": "RECT" + }, + { + "name": "lprcTo", + "type": "RECT" + } + ], + "GetMessageA": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsgFilterMin", + "type": "UINT" + }, + { + "name": "wMsgFilterMax", + "type": "UINT" + } + ], + "GetMessageW": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsgFilterMin", + "type": "UINT" + }, + { + "name": "wMsgFilterMax", + "type": "UINT" + } + ], + "TranslateMessage": [ + { + "name": "lpMsg", + "type": "MSG" + } + ], + "DispatchMessageA": [ + { + "name": "lpMsg", + "type": "MSG" + } + ], + "DispatchMessageW": [ + { + "name": "lpMsg", + "type": "MSG" + } + ], + "PeekMessageA": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsgFilterMin", + "type": "UINT" + }, + { + "name": "wMsgFilterMax", + "type": "UINT" + }, + { + "name": "wRemoveMsg", + "type": "UINT" + } + ], + "PeekMessageW": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsgFilterMin", + "type": "UINT" + }, + { + "name": "wMsgFilterMax", + "type": "UINT" + }, + { + "name": "wRemoveMsg", + "type": "UINT" + } + ], + "RegisterHotKey": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + }, + { + "name": "fsModifiers", + "type": "UINT" + }, + { + "name": "vk", + "type": "UINT" + } + ], + "UnregisterHotKey": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "id", + "type": "int" + } + ], + "ExitWindowsEx": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "SwapMouseButton": [ + { + "name": "fSwap", + "type": "BOOL" + } + ], + "GetMessagePos": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetMessageTime": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetMessageExtraInfo": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetUnpredictedMessagePos": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsWow64Message": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetMessageExtraInfo": [ + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendMessageA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendMessageW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendMessageTimeoutA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "fuFlags", + "type": "UINT" + }, + { + "name": "uTimeout", + "type": "UINT" + }, + { + "name": "lpdwResult", + "type": "PDWORD_PTR" + } + ], + "SendMessageTimeoutW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "fuFlags", + "type": "UINT" + }, + { + "name": "uTimeout", + "type": "UINT" + }, + { + "name": "lpdwResult", + "type": "PDWORD_PTR" + } + ], + "SendNotifyMessageA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendNotifyMessageW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendMessageCallbackA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "lpResultCallBack", + "type": "SENDASYNCPROC" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "SendMessageCallbackW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "lpResultCallBack", + "type": "SENDASYNCPROC" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "BroadcastSystemMessageExA": [ + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPDWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "pbsmInfo", + "type": "PBSMINFO" + } + ], + "BroadcastSystemMessageExW": [ + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPDWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "pbsmInfo", + "type": "PBSMINFO" + } + ], + "BroadcastSystemMessageW": [ + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPDWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "RegisterDeviceNotificationA": [ + { + "name": "hRecipient", + "type": "HANDLE" + }, + { + "name": "NotificationFilter", + "type": "LPVOID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "RegisterDeviceNotificationW": [ + { + "name": "hRecipient", + "type": "HANDLE" + }, + { + "name": "NotificationFilter", + "type": "LPVOID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "UnregisterDeviceNotification": [ + { + "name": "Handle", + "type": "HDEVNOTIFY" + } + ], + "RegisterPowerSettingNotification": [ + { + "name": "hRecipient", + "type": "HANDLE" + }, + { + "name": "PowerSettingGuid", + "type": "LPCGUID" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "UnregisterPowerSettingNotification": [ + { + "name": "Handle", + "type": "HPOWERNOTIFY" + } + ], + "RegisterSuspendResumeNotification": [ + { + "name": "hRecipient", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "UnregisterSuspendResumeNotification": [ + { + "name": "Handle", + "type": "HPOWERNOTIFY" + } + ], + "PostMessageA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "PostMessageW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "PostThreadMessageA": [ + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "PostThreadMessageW": [ + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "AttachThreadInput": [ + { + "name": "idAttach", + "type": "DWORD" + }, + { + "name": "idAttachTo", + "type": "DWORD" + }, + { + "name": "fAttach", + "type": "BOOL" + } + ], + "ReplyMessage": [ + { + "name": "lResult", + "type": "LRESULT" + } + ], + "WaitMessage": [ + { + "name": "VOID", + "type": "void" + } + ], + "WaitForInputIdle": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "DefWindowProcA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefWindowProcW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "PostQuitMessage": [ + { + "name": "nExitCode", + "type": "int" + } + ], + "CallWindowProcA": [ + { + "name": "lpPrevWndFunc", + "type": "WNDPROC" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CallWindowProcW": [ + { + "name": "lpPrevWndFunc", + "type": "WNDPROC" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "InSendMessage": [ + { + "name": "VOID", + "type": "void" + } + ], + "InSendMessageEx": [ + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "GetDoubleClickTime": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetDoubleClickTime": [ + { + "name": "VOID", + "type": "UINT" + } + ], + "RegisterClassA": [ + { + "name": "lpWndClass", + "type": "WNDCLASSA" + } + ], + "RegisterClassW": [ + { + "name": "lpWndClass", + "type": "WNDCLASSW" + } + ], + "UnregisterClassA": [ + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + } + ], + "UnregisterClassW": [ + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + } + ], + "GetClassInfoA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "lpWndClass", + "type": "LPWNDCLASSA" + } + ], + "GetClassInfoW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "lpWndClass", + "type": "LPWNDCLASSW" + } + ], + "RegisterClassExA": [ + { + "name": "VOID", + "type": "WNDCLASSEXA" + } + ], + "RegisterClassExW": [ + { + "name": "VOID", + "type": "WNDCLASSEXW" + } + ], + "GetClassInfoExA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpszClass", + "type": "LPCSTR" + }, + { + "name": "lpwcx", + "type": "LPWNDCLASSEXA" + } + ], + "GetClassInfoExW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpszClass", + "type": "LPCWSTR" + }, + { + "name": "lpwcx", + "type": "LPWNDCLASSEXW" + } + ], + "CreateWindowExA": [ + { + "name": "dwExStyle", + "type": "DWORD" + }, + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "lpWindowName", + "type": "LPCSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpParam", + "type": "LPVOID" + } + ], + "CreateWindowExW": [ + { + "name": "dwExStyle", + "type": "DWORD" + }, + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "lpWindowName", + "type": "LPCWSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpParam", + "type": "LPVOID" + } + ], + "IsWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "IsMenu": [ + { + "name": "hMenu", + "type": "HMENU" + } + ], + "IsChild": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hWnd", + "type": "HWND" + } + ], + "DestroyWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "ShowWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nCmdShow", + "type": "int" + } + ], + "AnimateWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dwTime", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UpdateLayeredWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hdcDst", + "type": "HDC" + }, + { + "name": "pptDst", + "type": "POINT" + }, + { + "name": "psize", + "type": "SIZE" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "pptSrc", + "type": "POINT" + }, + { + "name": "crKey", + "type": "COLORREF" + }, + { + "name": "pblend", + "type": "BLENDFUNCTION" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetLayeredWindowAttributes": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pcrKey", + "type": "COLORREF" + }, + { + "name": "pbAlpha", + "type": "BYTE" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "PrintWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdcBlt", + "type": "HDC" + }, + { + "name": "nFlags", + "type": "UINT" + } + ], + "SetLayeredWindowAttributes": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "crKey", + "type": "COLORREF" + }, + { + "name": "bAlpha", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ShowWindowAsync": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nCmdShow", + "type": "int" + } + ], + "FlashWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "bInvert", + "type": "BOOL" + } + ], + "FlashWindowEx": [ + { + "name": "pfwi", + "type": "PFLASHWINFO" + } + ], + "ShowOwnedPopups": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "fShow", + "type": "BOOL" + } + ], + "OpenIcon": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "CloseWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "MoveWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "bRepaint", + "type": "BOOL" + } + ], + "SetWindowPos": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hWndInsertAfter", + "type": "HWND" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "GetWindowPlacement": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpwndpl", + "type": "WINDOWPLACEMENT" + } + ], + "SetWindowPlacement": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpwndpl", + "type": "WINDOWPLACEMENT" + } + ], + "GetWindowDisplayAffinity": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pdwAffinity", + "type": "DWORD" + } + ], + "SetWindowDisplayAffinity": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dwAffinity", + "type": "DWORD" + } + ], + "BeginDeferWindowPos": [ + { + "name": "nNumWindows", + "type": "int" + } + ], + "DeferWindowPos": [ + { + "name": "hWinPosInfo", + "type": "HDWP" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hWndInsertAfter", + "type": "HWND" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "EndDeferWindowPos": [ + { + "name": "hWinPosInfo", + "type": "HDWP" + } + ], + "IsWindowVisible": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "IsIconic": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "AnyPopup": [ + { + "name": "VOID", + "type": "void" + } + ], + "BringWindowToTop": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "IsZoomed": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "CreateDialogParamA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplateName", + "type": "LPCSTR" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "CreateDialogParamW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplateName", + "type": "LPCWSTR" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "CreateDialogIndirectParamA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplate", + "type": "LPCDLGTEMPLATEA" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "CreateDialogIndirectParamW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplate", + "type": "LPCDLGTEMPLATEW" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "DialogBoxParamA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplateName", + "type": "LPCSTR" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "DialogBoxParamW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTemplateName", + "type": "LPCWSTR" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "DialogBoxIndirectParamA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "hDialogTemplate", + "type": "LPCDLGTEMPLATEA" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "DialogBoxIndirectParamW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "hDialogTemplate", + "type": "LPCDLGTEMPLATEW" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpDialogFunc", + "type": "DLGPROC" + }, + { + "name": "dwInitParam", + "type": "LPARAM" + } + ], + "EndDialog": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nResult", + "type": "INT_PTR" + } + ], + "GetDlgItem": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + } + ], + "SetDlgItemInt": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "uValue", + "type": "UINT" + }, + { + "name": "bSigned", + "type": "BOOL" + } + ], + "GetDlgItemInt": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpTranslated", + "type": "BOOL" + }, + { + "name": "bSigned", + "type": "BOOL" + } + ], + "SetDlgItemTextA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "SetDlgItemTextW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetDlgItemTextA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "GetDlgItemTextW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "CheckDlgButton": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDButton", + "type": "int" + }, + { + "name": "uCheck", + "type": "UINT" + } + ], + "CheckRadioButton": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDFirstButton", + "type": "int" + }, + { + "name": "nIDLastButton", + "type": "int" + }, + { + "name": "nIDCheckButton", + "type": "int" + } + ], + "IsDlgButtonChecked": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDButton", + "type": "int" + } + ], + "SendDlgItemMessageA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "SendDlgItemMessageW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "nIDDlgItem", + "type": "int" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "GetNextDlgGroupItem": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "hCtl", + "type": "HWND" + }, + { + "name": "bPrevious", + "type": "BOOL" + } + ], + "GetNextDlgTabItem": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "hCtl", + "type": "HWND" + }, + { + "name": "bPrevious", + "type": "BOOL" + } + ], + "GetDlgCtrlID": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetDialogBaseUnits": [ + { + "name": "VOID", + "type": "void" + } + ], + "DefDlgProcW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "Msg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "GetDialogControlDpiChangeBehavior": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetDialogDpiChangeBehavior": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "mask", + "type": "DIALOG_DPI_CHANGE_BEHAVIORS" + }, + { + "name": "values", + "type": "DIALOG_DPI_CHANGE_BEHAVIORS" + } + ], + "GetDialogDpiChangeBehavior": [ + { + "name": "hDlg", + "type": "HWND" + } + ], + "CallMsgFilterA": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "nCode", + "type": "int" + } + ], + "CallMsgFilterW": [ + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "nCode", + "type": "int" + } + ], + "OpenClipboard": [ + { + "name": "hWndNewOwner", + "type": "HWND" + } + ], + "CloseClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetClipboardSequenceNumber": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetClipboardOwner": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetClipboardViewer": [ + { + "name": "hWndNewViewer", + "type": "HWND" + } + ], + "GetClipboardViewer": [ + { + "name": "VOID", + "type": "void" + } + ], + "ChangeClipboardChain": [ + { + "name": "hWndRemove", + "type": "HWND" + }, + { + "name": "hWndNewNext", + "type": "HWND" + } + ], + "SetClipboardData": [ + { + "name": "uFormat", + "type": "UINT" + }, + { + "name": "hMem", + "type": "HANDLE" + } + ], + "GetClipboardData": [ + { + "name": "uFormat", + "type": "UINT" + } + ], + "RegisterClipboardFormatA": [ + { + "name": "lpszFormat", + "type": "LPCSTR" + } + ], + "RegisterClipboardFormatW": [ + { + "name": "lpszFormat", + "type": "LPCWSTR" + } + ], + "CountClipboardFormats": [ + { + "name": "VOID", + "type": "void" + } + ], + "EnumClipboardFormats": [ + { + "name": "format", + "type": "UINT" + } + ], + "GetClipboardFormatNameA": [ + { + "name": "format", + "type": "UINT" + }, + { + "name": "lpszFormatName", + "type": "LPSTR" + }, + { + "name": "cchMaxCount", + "type": "int" + } + ], + "GetClipboardFormatNameW": [ + { + "name": "format", + "type": "UINT" + }, + { + "name": "lpszFormatName", + "type": "LPWSTR" + }, + { + "name": "cchMaxCount", + "type": "int" + } + ], + "EmptyClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsClipboardFormatAvailable": [ + { + "name": "format", + "type": "UINT" + } + ], + "GetPriorityClipboardFormat": [ + { + "name": "paFormatPriorityList", + "type": "UINT" + }, + { + "name": "cFormats", + "type": "int" + } + ], + "GetOpenClipboardWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "AddClipboardFormatListener": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "RemoveClipboardFormatListener": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetUpdatedClipboardFormats": [ + { + "name": "lpuiFormats", + "type": "PUINT" + }, + { + "name": "cFormats", + "type": "UINT" + }, + { + "name": "pcFormatsOut", + "type": "PUINT" + } + ], + "CharToOemA": [ + { + "name": "pSrc", + "type": "LPCSTR" + }, + { + "name": "pDst", + "type": "LPSTR" + } + ], + "CharToOemW": [ + { + "name": "pSrc", + "type": "LPCWSTR" + }, + { + "name": "pDst", + "type": "LPSTR" + } + ], + "OemToCharA": [ + { + "name": "pSrc", + "type": "LPCSTR" + }, + { + "name": "pDst", + "type": "LPSTR" + } + ], + "OemToCharW": [ + { + "name": "pSrc", + "type": "LPCSTR" + }, + { + "name": "pDst", + "type": "LPWSTR" + } + ], + "CharToOemBuffA": [ + { + "name": "lpszSrc", + "type": "LPCSTR" + }, + { + "name": "lpszDst", + "type": "LPSTR" + }, + { + "name": "cchDstLength", + "type": "DWORD" + } + ], + "CharToOemBuffW": [ + { + "name": "lpszSrc", + "type": "LPCWSTR" + }, + { + "name": "lpszDst", + "type": "LPSTR" + }, + { + "name": "cchDstLength", + "type": "DWORD" + } + ], + "OemToCharBuffA": [ + { + "name": "lpszSrc", + "type": "LPCSTR" + }, + { + "name": "lpszDst", + "type": "LPSTR" + }, + { + "name": "cchDstLength", + "type": "DWORD" + } + ], + "OemToCharBuffW": [ + { + "name": "lpszSrc", + "type": "LPCSTR" + }, + { + "name": "lpszDst", + "type": "LPWSTR" + }, + { + "name": "cchDstLength", + "type": "DWORD" + } + ], + "CharUpperA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "CharUpperW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "CharUpperBuffA": [ + { + "name": "lpsz", + "type": "LPSTR" + }, + { + "name": "cchLength", + "type": "DWORD" + } + ], + "CharUpperBuffW": [ + { + "name": "lpsz", + "type": "LPWSTR" + }, + { + "name": "cchLength", + "type": "DWORD" + } + ], + "CharLowerA": [ + { + "name": "lpsz", + "type": "LPSTR" + } + ], + "CharLowerW": [ + { + "name": "lpsz", + "type": "LPWSTR" + } + ], + "CharLowerBuffA": [ + { + "name": "lpsz", + "type": "LPSTR" + }, + { + "name": "cchLength", + "type": "DWORD" + } + ], + "CharLowerBuffW": [ + { + "name": "lpsz", + "type": "LPWSTR" + }, + { + "name": "cchLength", + "type": "DWORD" + } + ], + "CharNextA": [ + { + "name": "lpsz", + "type": "LPCSTR" + } + ], + "CharNextW": [ + { + "name": "lpsz", + "type": "LPCWSTR" + } + ], + "CharPrevA": [ + { + "name": "lpszStart", + "type": "LPCSTR" + }, + { + "name": "lpszCurrent", + "type": "LPCSTR" + } + ], + "CharPrevW": [ + { + "name": "lpszStart", + "type": "LPCWSTR" + }, + { + "name": "lpszCurrent", + "type": "LPCWSTR" + } + ], + "CharNextExA": [ + { + "name": "CodePage", + "type": "WORD" + }, + { + "name": "lpCurrentChar", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CharPrevExA": [ + { + "name": "CodePage", + "type": "WORD" + }, + { + "name": "lpStart", + "type": "LPCSTR" + }, + { + "name": "lpCurrentChar", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "IsCharAlphaA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "IsCharAlphaW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "IsCharAlphaNumericA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "IsCharAlphaNumericW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "IsCharUpperA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "IsCharUpperW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "IsCharLowerA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "IsCharLowerW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "SetFocus": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetActiveWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetFocus": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetKBCodePage": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetKeyState": [ + { + "name": "nVirtKey", + "type": "int" + } + ], + "GetAsyncKeyState": [ + { + "name": "vKey", + "type": "int" + } + ], + "GetKeyboardState": [ + { + "name": "lpKeyState", + "type": "PBYTE" + } + ], + "SetKeyboardState": [ + { + "name": "lpKeyState", + "type": "LPBYTE" + } + ], + "GetKeyNameTextA": [ + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "cchSize", + "type": "int" + } + ], + "GetKeyNameTextW": [ + { + "name": "lParam", + "type": "LONG" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "cchSize", + "type": "int" + } + ], + "GetKeyboardType": [ + { + "name": "nTypeFlag", + "type": "int" + } + ], + "ToAscii": [ + { + "name": "uVirtKey", + "type": "UINT" + }, + { + "name": "uScanCode", + "type": "UINT" + }, + { + "name": "lpKeyState", + "type": "BYTE" + }, + { + "name": "lpChar", + "type": "LPWORD" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "ToAsciiEx": [ + { + "name": "uVirtKey", + "type": "UINT" + }, + { + "name": "uScanCode", + "type": "UINT" + }, + { + "name": "lpKeyState", + "type": "BYTE" + }, + { + "name": "lpChar", + "type": "LPWORD" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "ToUnicode": [ + { + "name": "wVirtKey", + "type": "UINT" + }, + { + "name": "wScanCode", + "type": "UINT" + }, + { + "name": "lpKeyState", + "type": "BYTE" + }, + { + "name": "pwszBuff", + "type": "LPWSTR" + }, + { + "name": "cchBuff", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "OemKeyScan": [ + { + "name": "wOemChar", + "type": "WORD" + } + ], + "VkKeyScanA": [ + { + "name": "ch", + "type": "CHAR" + } + ], + "VkKeyScanW": [ + { + "name": "ch", + "type": "WCHAR" + } + ], + "VkKeyScanExA": [ + { + "name": "ch", + "type": "CHAR" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "VkKeyScanExW": [ + { + "name": "ch", + "type": "WCHAR" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "keybd_event": [ + { + "name": "bVk", + "type": "BYTE" + }, + { + "name": "bScan", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwExtraInfo", + "type": "ULONG_PTR" + } + ], + "mouse_event": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dx", + "type": "DWORD" + }, + { + "name": "dy", + "type": "DWORD" + }, + { + "name": "dwData", + "type": "DWORD" + }, + { + "name": "dwExtraInfo", + "type": "ULONG_PTR" + } + ], + "SendInput": [ + { + "name": "cInputs", + "type": "UINT" + }, + { + "name": "pInputs", + "type": "LPINPUT" + }, + { + "name": "cbSize", + "type": "int" + } + ], + "GetTouchInputInfo": [ + { + "name": "hTouchInput", + "type": "HTOUCHINPUT" + }, + { + "name": "cInputs", + "type": "UINT" + }, + { + "name": "pInputs", + "type": "PTOUCHINPUT" + }, + { + "name": "cbSize", + "type": "int" + } + ], + "CloseTouchInputHandle": [ + { + "name": "hTouchInput", + "type": "HTOUCHINPUT" + } + ], + "RegisterTouchWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "UnregisterTouchWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "IsTouchWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pulFlags", + "type": "PULONG" + } + ], + "InitializeTouchInjection": [ + { + "name": "maxCount", + "type": "UINT32" + }, + { + "name": "dwMode", + "type": "DWORD" + } + ], + "InjectTouchInput": [ + { + "name": "count", + "type": "UINT32" + }, + { + "name": "contacts", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerType": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + } + ], + "GetPointerCursorId": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "cursorId", + "type": "UINT32" + } + ], + "GetPointerInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "GetPointerInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "GetPointerFrameInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "GetPointerFrameInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "pointerInfo", + "type": "POINTER_INFO" + } + ], + "GetPointerTouchInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "touchInfo", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerTouchInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "touchInfo", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerFrameTouchInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "touchInfo", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerFrameTouchInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "touchInfo", + "type": "POINTER_TOUCH_INFO" + } + ], + "GetPointerPenInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "penInfo", + "type": "POINTER_PEN_INFO" + } + ], + "GetPointerPenInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "penInfo", + "type": "POINTER_PEN_INFO" + } + ], + "GetPointerFramePenInfo": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "penInfo", + "type": "POINTER_PEN_INFO" + } + ], + "GetPointerFramePenInfoHistory": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "entriesCount", + "type": "UINT32" + }, + { + "name": "pointerCount", + "type": "UINT32" + }, + { + "name": "penInfo", + "type": "POINTER_PEN_INFO" + } + ], + "SkipPointerFrameMessages": [ + { + "name": "pointerId", + "type": "UINT32" + } + ], + "RegisterPointerInputTarget": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + } + ], + "UnregisterPointerInputTarget": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + } + ], + "RegisterPointerInputTargetEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + }, + { + "name": "fObserve", + "type": "BOOL" + } + ], + "UnregisterPointerInputTargetEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + } + ], + "CreateSyntheticPointerDevice": [ + { + "name": "pointerType", + "type": "POINTER_INPUT_TYPE" + }, + { + "name": "maxCount", + "type": "ULONG" + }, + { + "name": "mode", + "type": "POINTER_FEEDBACK_MODE" + } + ], + "InjectSyntheticPointerInput": [ + { + "name": "device", + "type": "HSYNTHETICPOINTERDEVICE" + }, + { + "name": "pointerInfo", + "type": "POINTER_TYPE_INFO" + }, + { + "name": "count", + "type": "UINT32" + } + ], + "DestroySyntheticPointerDevice": [ + { + "name": "device", + "type": "HSYNTHETICPOINTERDEVICE" + } + ], + "EnableMouseInPointer": [ + { + "name": "fEnable", + "type": "BOOL" + } + ], + "IsMouseInPointerEnabled": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterTouchHitTestingWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "value", + "type": "ULONG" + } + ], + "EvaluateProximityToRect": [ + { + "name": "controlBoundingBox", + "type": "RECT" + }, + { + "name": "pHitTestingInput", + "type": "TOUCH_HIT_TESTING_INPUT" + }, + { + "name": "pProximityEval", + "type": "TOUCH_HIT_TESTING_PROXIMITY_EVALUATION" + } + ], + "EvaluateProximityToPolygon": [ + { + "name": "numVertices", + "type": "UINT32" + }, + { + "name": "controlPolygon", + "type": "POINT" + }, + { + "name": "pHitTestingInput", + "type": "TOUCH_HIT_TESTING_INPUT" + }, + { + "name": "pProximityEval", + "type": "TOUCH_HIT_TESTING_PROXIMITY_EVALUATION" + } + ], + "PackTouchHitTestingProximityEvaluation": [ + { + "name": "pHitTestingInput", + "type": "TOUCH_HIT_TESTING_INPUT" + }, + { + "name": "pProximityEval", + "type": "TOUCH_HIT_TESTING_PROXIMITY_EVALUATION" + } + ], + "GetWindowFeedbackSetting": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "feedback", + "type": "FEEDBACK_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pSize", + "type": "UINT32" + }, + { + "name": "config", + "type": "void" + } + ], + "SetWindowFeedbackSetting": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "feedback", + "type": "FEEDBACK_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "size", + "type": "UINT32" + }, + { + "name": "configuration", + "type": "void" + } + ], + "GetPointerInputTransform": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "historyCount", + "type": "UINT32" + }, + { + "name": "inputTransform", + "type": "INPUT_TRANSFORM" + } + ], + "GetLastInputInfo": [ + { + "name": "plii", + "type": "PLASTINPUTINFO" + } + ], + "MapVirtualKeyA": [ + { + "name": "uCode", + "type": "UINT" + }, + { + "name": "uMapType", + "type": "UINT" + } + ], + "MapVirtualKeyW": [ + { + "name": "uCode", + "type": "UINT" + }, + { + "name": "uMapType", + "type": "UINT" + } + ], + "MapVirtualKeyExA": [ + { + "name": "uCode", + "type": "UINT" + }, + { + "name": "uMapType", + "type": "UINT" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "MapVirtualKeyExW": [ + { + "name": "uCode", + "type": "UINT" + }, + { + "name": "uMapType", + "type": "UINT" + }, + { + "name": "dwhkl", + "type": "HKL" + } + ], + "GetInputState": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetQueueStatus": [ + { + "name": "flags", + "type": "UINT" + } + ], + "GetCapture": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetCapture": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "ReleaseCapture": [ + { + "name": "VOID", + "type": "void" + } + ], + "MsgWaitForMultipleObjects": [ + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "pHandles", + "type": "HANDLE" + }, + { + "name": "fWaitAll", + "type": "BOOL" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "dwWakeMask", + "type": "DWORD" + } + ], + "MsgWaitForMultipleObjectsEx": [ + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "pHandles", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "dwWakeMask", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SetTimer": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIDEvent", + "type": "UINT_PTR" + }, + { + "name": "uElapse", + "type": "UINT" + }, + { + "name": "lpTimerFunc", + "type": "TIMERPROC" + } + ], + "SetCoalescableTimer": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIDEvent", + "type": "UINT_PTR" + }, + { + "name": "uElapse", + "type": "UINT" + }, + { + "name": "lpTimerFunc", + "type": "TIMERPROC" + }, + { + "name": "uToleranceDelay", + "type": "ULONG" + } + ], + "KillTimer": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uIDEvent", + "type": "UINT_PTR" + } + ], + "IsWindowUnicode": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "EnableWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "bEnable", + "type": "BOOL" + } + ], + "IsWindowEnabled": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "LoadAcceleratorsA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTableName", + "type": "LPCSTR" + } + ], + "LoadAcceleratorsW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpTableName", + "type": "LPCWSTR" + } + ], + "CreateAcceleratorTableA": [ + { + "name": "paccel", + "type": "LPACCEL" + }, + { + "name": "cAccel", + "type": "int" + } + ], + "CreateAcceleratorTableW": [ + { + "name": "paccel", + "type": "LPACCEL" + }, + { + "name": "cAccel", + "type": "int" + } + ], + "DestroyAcceleratorTable": [ + { + "name": "hAccel", + "type": "HACCEL" + } + ], + "CopyAcceleratorTableA": [ + { + "name": "hAccelSrc", + "type": "HACCEL" + }, + { + "name": "lpAccelDst", + "type": "LPACCEL" + }, + { + "name": "cAccelEntries", + "type": "int" + } + ], + "CopyAcceleratorTableW": [ + { + "name": "hAccelSrc", + "type": "HACCEL" + }, + { + "name": "lpAccelDst", + "type": "LPACCEL" + }, + { + "name": "cAccelEntries", + "type": "int" + } + ], + "TranslateAcceleratorA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hAccTable", + "type": "HACCEL" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "TranslateAcceleratorW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hAccTable", + "type": "HACCEL" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "GetSystemMetrics": [ + { + "name": "nIndex", + "type": "int" + } + ], + "GetSystemMetricsForDpi": [ + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dpi", + "type": "UINT" + } + ], + "LoadMenuA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpMenuName", + "type": "LPCSTR" + } + ], + "LoadMenuW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpMenuName", + "type": "LPCWSTR" + } + ], + "LoadMenuIndirectA": [ + { + "name": "lpMenuTemplate", + "type": "MENUTEMPLATEA" + } + ], + "LoadMenuIndirectW": [ + { + "name": "lpMenuTemplate", + "type": "MENUTEMPLATEW" + } + ], + "GetMenu": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetMenu": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + } + ], + "HiliteMenuItem": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDHiliteItem", + "type": "UINT" + }, + { + "name": "uHilite", + "type": "UINT" + } + ], + "GetMenuStringA": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDItem", + "type": "UINT" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "cchMax", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetMenuStringW": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDItem", + "type": "UINT" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "cchMax", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetMenuState": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uId", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "DrawMenuBar": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetSystemMenu": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "bRevert", + "type": "BOOL" + } + ], + "CreateMenu": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreatePopupMenu": [ + { + "name": "VOID", + "type": "void" + } + ], + "DestroyMenu": [ + { + "name": "hMenu", + "type": "HMENU" + } + ], + "CheckMenuItem": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDCheckItem", + "type": "UINT" + }, + { + "name": "uCheck", + "type": "UINT" + } + ], + "EnableMenuItem": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uIDEnableItem", + "type": "UINT" + }, + { + "name": "uEnable", + "type": "UINT" + } + ], + "GetSubMenu": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "nPos", + "type": "int" + } + ], + "GetMenuItemID": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "nPos", + "type": "int" + } + ], + "GetMenuItemCount": [ + { + "name": "hMenu", + "type": "HMENU" + } + ], + "InsertMenuA": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCSTR" + } + ], + "InsertMenuW": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCWSTR" + } + ], + "AppendMenuA": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCSTR" + } + ], + "AppendMenuW": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCWSTR" + } + ], + "ModifyMenuA": [ + { + "name": "hMnu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCSTR" + } + ], + "ModifyMenuW": [ + { + "name": "hMnu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uIDNewItem", + "type": "UINT_PTR" + }, + { + "name": "lpNewItem", + "type": "LPCWSTR" + } + ], + "RemoveMenu": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "DeleteMenu": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "SetMenuItemBitmaps": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uPosition", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "hBitmapUnchecked", + "type": "HBITMAP" + }, + { + "name": "hBitmapChecked", + "type": "HBITMAP" + } + ], + "GetMenuCheckMarkDimensions": [ + { + "name": "VOID", + "type": "void" + } + ], + "TrackPopupMenu": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nReserved", + "type": "int" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "prcRect", + "type": "RECT" + } + ], + "TrackPopupMenuEx": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "lptpm", + "type": "LPTPMPARAMS" + } + ], + "CalculatePopupWindowPosition": [ + { + "name": "anchorPoint", + "type": "POINT" + }, + { + "name": "windowSize", + "type": "SIZE" + }, + { + "name": "flags", + "type": "UINT" + }, + { + "name": "excludeRect", + "type": "RECT" + }, + { + "name": "popupWindowPosition", + "type": "RECT" + } + ], + "GetMenuInfo": [ + { + "name": "VOID", + "type": "HMENU" + }, + { + "name": "VOID", + "type": "LPMENUINFO" + } + ], + "SetMenuInfo": [ + { + "name": "VOID", + "type": "HMENU" + }, + { + "name": "VOID", + "type": "LPCMENUINFO" + } + ], + "EndMenu": [ + { + "name": "VOID", + "type": "void" + } + ], + "InsertMenuItemA": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPosition", + "type": "BOOL" + }, + { + "name": "lpmi", + "type": "LPCMENUITEMINFOA" + } + ], + "InsertMenuItemW": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPosition", + "type": "BOOL" + }, + { + "name": "lpmi", + "type": "LPCMENUITEMINFOW" + } + ], + "GetMenuItemInfoA": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPosition", + "type": "BOOL" + }, + { + "name": "lpmii", + "type": "LPMENUITEMINFOA" + } + ], + "GetMenuItemInfoW": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPosition", + "type": "BOOL" + }, + { + "name": "lpmii", + "type": "LPMENUITEMINFOW" + } + ], + "SetMenuItemInfoA": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPositon", + "type": "BOOL" + }, + { + "name": "lpmii", + "type": "LPCMENUITEMINFOA" + } + ], + "SetMenuItemInfoW": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "item", + "type": "UINT" + }, + { + "name": "fByPositon", + "type": "BOOL" + }, + { + "name": "lpmii", + "type": "LPCMENUITEMINFOW" + } + ], + "GetMenuDefaultItem": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "fByPos", + "type": "UINT" + }, + { + "name": "gmdiFlags", + "type": "UINT" + } + ], + "SetMenuDefaultItem": [ + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uItem", + "type": "UINT" + }, + { + "name": "fByPos", + "type": "UINT" + } + ], + "GetMenuItemRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "uItem", + "type": "UINT" + }, + { + "name": "lprcItem", + "type": "LPRECT" + } + ], + "MenuItemFromPoint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hMenu", + "type": "HMENU" + }, + { + "name": "ptScreen", + "type": "POINT" + } + ], + "DragDetect": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pt", + "type": "POINT" + } + ], + "DrawIcon": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], + "DrawTextA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpchText", + "type": "LPCSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "format", + "type": "UINT" + } + ], + "DrawTextW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpchText", + "type": "LPCWSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "format", + "type": "UINT" + } + ], + "DrawTextExA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpchText", + "type": "LPSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "format", + "type": "UINT" + }, + { + "name": "lpdtp", + "type": "LPDRAWTEXTPARAMS" + } + ], + "DrawTextExW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpchText", + "type": "LPWSTR" + }, + { + "name": "cchText", + "type": "int" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "format", + "type": "UINT" + }, + { + "name": "lpdtp", + "type": "LPDRAWTEXTPARAMS" + } + ], + "GrayStringA": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "hBrush", + "type": "HBRUSH" + }, + { + "name": "lpOutputFunc", + "type": "GRAYSTRINGPROC" + }, + { + "name": "lpData", + "type": "LPARAM" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + } + ], + "GrayStringW": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "hBrush", + "type": "HBRUSH" + }, + { + "name": "lpOutputFunc", + "type": "GRAYSTRINGPROC" + }, + { + "name": "lpData", + "type": "LPARAM" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + } + ], + "DrawStateA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbrFore", + "type": "HBRUSH" + }, + { + "name": "qfnCallBack", + "type": "DRAWSTATEPROC" + }, + { + "name": "lData", + "type": "LPARAM" + }, + { + "name": "wData", + "type": "WPARAM" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "DrawStateW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbrFore", + "type": "HBRUSH" + }, + { + "name": "qfnCallBack", + "type": "DRAWSTATEPROC" + }, + { + "name": "lData", + "type": "LPARAM" + }, + { + "name": "wData", + "type": "WPARAM" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "TabbedTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "nTabPositions", + "type": "int" + }, + { + "name": "lpnTabStopPositions", + "type": "INT" + }, + { + "name": "nTabOrigin", + "type": "int" + } + ], + "TabbedTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "nTabPositions", + "type": "int" + }, + { + "name": "lpnTabStopPositions", + "type": "INT" + }, + { + "name": "nTabOrigin", + "type": "int" + } + ], + "GetTabbedTextExtentA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "nTabPositions", + "type": "int" + }, + { + "name": "lpnTabStopPositions", + "type": "INT" + } + ], + "GetTabbedTextExtentW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "nTabPositions", + "type": "int" + }, + { + "name": "lpnTabStopPositions", + "type": "INT" + } + ], + "UpdateWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetActiveWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetForegroundWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "PaintDesktop": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SwitchToThisWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "fUnknown", + "type": "BOOL" + } + ], + "SetForegroundWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "AllowSetForegroundWindow": [ + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "LockSetForegroundWindow": [ + { + "name": "uLockCode", + "type": "UINT" + } + ], + "WindowFromDC": [ + { + "name": "hDC", + "type": "HDC" + } + ], + "GetDC": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetDCEx": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hrgnClip", + "type": "HRGN" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "GetWindowDC": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "ReleaseDC": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hDC", + "type": "HDC" + } + ], + "BeginPaint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPaint", + "type": "LPPAINTSTRUCT" + } + ], + "EndPaint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPaint", + "type": "PAINTSTRUCT" + } + ], + "GetUpdateRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "LPRECT" + }, + { + "name": "bErase", + "type": "BOOL" + } + ], + "GetUpdateRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + }, + { + "name": "bErase", + "type": "BOOL" + } + ], + "SetWindowRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + }, + { + "name": "bRedraw", + "type": "BOOL" + } + ], + "GetWindowRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + } + ], + "GetWindowRgnBox": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lprc", + "type": "LPRECT" + } + ], + "ExcludeUpdateRgn": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "hWnd", + "type": "HWND" + } + ], + "InvalidateRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "RECT" + }, + { + "name": "bErase", + "type": "BOOL" + } + ], + "ValidateRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "RECT" + } + ], + "InvalidateRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + }, + { + "name": "bErase", + "type": "BOOL" + } + ], + "ValidateRgn": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hRgn", + "type": "HRGN" + } + ], + "RedrawWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lprcUpdate", + "type": "RECT" + }, + { + "name": "hrgnUpdate", + "type": "HRGN" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "LockWindowUpdate": [ + { + "name": "hWndLock", + "type": "HWND" + } + ], + "ScrollWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "XAmount", + "type": "int" + }, + { + "name": "YAmount", + "type": "int" + }, + { + "name": "lpRect", + "type": "RECT" + }, + { + "name": "lpClipRect", + "type": "RECT" + } + ], + "ScrollDC": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + }, + { + "name": "lprcScroll", + "type": "RECT" + }, + { + "name": "lprcClip", + "type": "RECT" + }, + { + "name": "hrgnUpdate", + "type": "HRGN" + }, + { + "name": "lprcUpdate", + "type": "LPRECT" + } + ], + "ScrollWindowEx": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + }, + { + "name": "prcScroll", + "type": "RECT" + }, + { + "name": "prcClip", + "type": "RECT" + }, + { + "name": "hrgnUpdate", + "type": "HRGN" + }, + { + "name": "prcUpdate", + "type": "LPRECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "SetScrollPos": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "nPos", + "type": "int" + }, + { + "name": "bRedraw", + "type": "BOOL" + } + ], + "GetScrollPos": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + } + ], + "SetScrollRange": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "nMinPos", + "type": "int" + }, + { + "name": "nMaxPos", + "type": "int" + }, + { + "name": "bRedraw", + "type": "BOOL" + } + ], + "GetScrollRange": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "lpMinPos", + "type": "LPINT" + }, + { + "name": "lpMaxPos", + "type": "LPINT" + } + ], + "ShowScrollBar": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wBar", + "type": "int" + }, + { + "name": "bShow", + "type": "BOOL" + } + ], + "EnableScrollBar": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wSBflags", + "type": "UINT" + }, + { + "name": "wArrows", + "type": "UINT" + } + ], + "SetPropA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "hData", + "type": "HANDLE" + } + ], + "SetPropW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "hData", + "type": "HANDLE" + } + ], + "GetPropA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "GetPropW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "RemovePropA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "RemovePropW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "EnumPropsExA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "PROPENUMPROCEXA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumPropsExW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "PROPENUMPROCEXW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumPropsA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "PROPENUMPROCA" + } + ], + "EnumPropsW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "PROPENUMPROCW" + } + ], + "SetWindowTextA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "SetWindowTextW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetWindowTextA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "nMaxCount", + "type": "int" + } + ], + "GetWindowTextW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "nMaxCount", + "type": "int" + } + ], + "GetWindowTextLengthA": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetWindowTextLengthW": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetClientRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "LPRECT" + } + ], + "GetWindowRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "LPRECT" + } + ], + "AdjustWindowRect": [ + { + "name": "lpRect", + "type": "LPRECT" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "bMenu", + "type": "BOOL" + } + ], + "AdjustWindowRectEx": [ + { + "name": "lpRect", + "type": "LPRECT" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "bMenu", + "type": "BOOL" + }, + { + "name": "dwExStyle", + "type": "DWORD" + } + ], + "AdjustWindowRectExForDpi": [ + { + "name": "lpRect", + "type": "LPRECT" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "bMenu", + "type": "BOOL" + }, + { + "name": "dwExStyle", + "type": "DWORD" + }, + { + "name": "dpi", + "type": "UINT" + } + ], + "SetWindowContextHelpId": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "GetWindowContextHelpId": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "SetMenuContextHelpId": [ + { + "name": "VOID", + "type": "HMENU" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "GetMenuContextHelpId": [ + { + "name": "VOID", + "type": "HMENU" + } + ], + "MessageBoxA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpText", + "type": "LPCSTR" + }, + { + "name": "lpCaption", + "type": "LPCSTR" + }, + { + "name": "uType", + "type": "UINT" + } + ], + "MessageBoxW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpText", + "type": "LPCWSTR" + }, + { + "name": "lpCaption", + "type": "LPCWSTR" + }, + { + "name": "uType", + "type": "UINT" + } + ], + "MessageBoxExA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpText", + "type": "LPCSTR" + }, + { + "name": "lpCaption", + "type": "LPCSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "wLanguageId", + "type": "WORD" + } + ], + "MessageBoxExW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpText", + "type": "LPCWSTR" + }, + { + "name": "lpCaption", + "type": "LPCWSTR" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "wLanguageId", + "type": "WORD" + } + ], + "MessageBoxIndirectA": [ + { + "name": "lpmbp", + "type": "MSGBOXPARAMSA" + } + ], + "MessageBoxIndirectW": [ + { + "name": "lpmbp", + "type": "MSGBOXPARAMSW" + } + ], + "MessageBeep": [ + { + "name": "uType", + "type": "UINT" + } + ], + "ShowCursor": [ + { + "name": "bShow", + "type": "BOOL" + } + ], + "SetCursorPos": [ + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + } + ], + "SetPhysicalCursorPos": [ + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + } + ], + "SetCursor": [ + { + "name": "hCursor", + "type": "HCURSOR" + } + ], + "GetCursorPos": [ + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "GetPhysicalCursorPos": [ + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "GetClipCursor": [ + { + "name": "lpRect", + "type": "LPRECT" + } + ], + "GetCursor": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateCaret": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hBitmap", + "type": "HBITMAP" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + } + ], + "GetCaretBlinkTime": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetCaretBlinkTime": [ + { + "name": "uMSeconds", + "type": "UINT" + } + ], + "DestroyCaret": [ + { + "name": "VOID", + "type": "void" + } + ], + "HideCaret": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "ShowCaret": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetCaretPos": [ + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + } + ], + "GetCaretPos": [ + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "ClientToScreen": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "ScreenToClient": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "LogicalToPhysicalPoint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "PhysicalToLogicalPoint": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "LogicalToPhysicalPointForPerMonitorDPI": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "PhysicalToLogicalPointForPerMonitorDPI": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpPoint", + "type": "LPPOINT" + } + ], + "MapWindowPoints": [ + { + "name": "hWndFrom", + "type": "HWND" + }, + { + "name": "hWndTo", + "type": "HWND" + }, + { + "name": "lpPoints", + "type": "LPPOINT" + }, + { + "name": "cPoints", + "type": "UINT" + } + ], + "WindowFromPoint": [ + { + "name": "Point", + "type": "POINT" + } + ], + "WindowFromPhysicalPoint": [ + { + "name": "Point", + "type": "POINT" + } + ], + "ChildWindowFromPoint": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "Point", + "type": "POINT" + } + ], + "ClipCursor": [ + { + "name": "lpRect", + "type": "RECT" + } + ], + "ChildWindowFromPointEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pt", + "type": "POINT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetSysColor": [ + { + "name": "nIndex", + "type": "int" + } + ], + "GetSysColorBrush": [ + { + "name": "nIndex", + "type": "int" + } + ], + "SetSysColors": [ + { + "name": "cElements", + "type": "int" + }, + { + "name": "lpaElements", + "type": "INT" + }, + { + "name": "lpaRgbValues", + "type": "COLORREF" + } + ], + "DrawFocusRect": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "RECT" + } + ], + "FillRect": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "hbr", + "type": "HBRUSH" + } + ], + "FrameRect": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "hbr", + "type": "HBRUSH" + } + ], + "InvertRect": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "RECT" + } + ], + "SetRect": [ + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "xLeft", + "type": "int" + }, + { + "name": "yTop", + "type": "int" + }, + { + "name": "xRight", + "type": "int" + }, + { + "name": "yBottom", + "type": "int" + } + ], + "SetRectEmpty": [ + { + "name": "lprc", + "type": "LPRECT" + } + ], + "CopyRect": [ + { + "name": "lprcDst", + "type": "LPRECT" + }, + { + "name": "lprcSrc", + "type": "RECT" + } + ], + "InflateRect": [ + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "IntersectRect": [ + { + "name": "lprcDst", + "type": "LPRECT" + }, + { + "name": "lprcSrc1", + "type": "RECT" + }, + { + "name": "lprcSrc2", + "type": "RECT" + } + ], + "UnionRect": [ + { + "name": "lprcDst", + "type": "LPRECT" + }, + { + "name": "lprcSrc1", + "type": "RECT" + }, + { + "name": "lprcSrc2", + "type": "RECT" + } + ], + "SubtractRect": [ + { + "name": "lprcDst", + "type": "LPRECT" + }, + { + "name": "lprcSrc1", + "type": "RECT" + }, + { + "name": "lprcSrc2", + "type": "RECT" + } + ], + "OffsetRect": [ + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "IsRectEmpty": [ + { + "name": "lprc", + "type": "RECT" + } + ], + "EqualRect": [ + { + "name": "lprc1", + "type": "RECT" + }, + { + "name": "lprc2", + "type": "RECT" + } + ], + "PtInRect": [ + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "pt", + "type": "POINT" + } + ], + "GetWindowLongA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "GetWindowLongW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetWindowLongA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG" + } + ], + "SetWindowLongW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG" + } + ], + "GetWindowLongPtrA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "GetWindowLongPtrW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetWindowLongPtrA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG_PTR" + } + ], + "SetWindowLongPtrW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG_PTR" + } + ], + "GetClassWord": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetClassWord": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "wNewWord", + "type": "WORD" + } + ], + "GetClassLongA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "GetClassLongW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetClassLongA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG" + } + ], + "SetClassLongW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG" + } + ], + "GetClassLongPtrA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "GetClassLongPtrW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + } + ], + "SetClassLongPtrA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG_PTR" + } + ], + "SetClassLongPtrW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "nIndex", + "type": "int" + }, + { + "name": "dwNewLong", + "type": "LONG_PTR" + } + ], + "GetProcessDefaultLayout": [ + { + "name": "pdwDefaultLayout", + "type": "DWORD" + } + ], + "SetProcessDefaultLayout": [ + { + "name": "dwDefaultLayout", + "type": "DWORD" + } + ], + "GetDesktopWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetParent": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "SetParent": [ + { + "name": "hWndChild", + "type": "HWND" + }, + { + "name": "hWndNewParent", + "type": "HWND" + } + ], + "EnumChildWindows": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "lpEnumFunc", + "type": "WNDENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "FindWindowA": [ + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "lpWindowName", + "type": "LPCSTR" + } + ], + "FindWindowW": [ + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "lpWindowName", + "type": "LPCWSTR" + } + ], + "FindWindowExA": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hWndChildAfter", + "type": "HWND" + }, + { + "name": "lpszClass", + "type": "LPCSTR" + }, + { + "name": "lpszWindow", + "type": "LPCSTR" + } + ], + "FindWindowExW": [ + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hWndChildAfter", + "type": "HWND" + }, + { + "name": "lpszClass", + "type": "LPCWSTR" + }, + { + "name": "lpszWindow", + "type": "LPCWSTR" + } + ], + "GetShellWindow": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterShellHookWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DeregisterShellHookWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "EnumWindows": [ + { + "name": "lpEnumFunc", + "type": "WNDENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumThreadWindows": [ + { + "name": "dwThreadId", + "type": "DWORD" + }, + { + "name": "lpfn", + "type": "WNDENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "GetClassNameA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpClassName", + "type": "LPSTR" + }, + { + "name": "nMaxCount", + "type": "int" + } + ], + "GetClassNameW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpClassName", + "type": "LPWSTR" + }, + { + "name": "nMaxCount", + "type": "int" + } + ], + "GetTopWindow": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetWindowThreadProcessId": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpdwProcessId", + "type": "LPDWORD" + } + ], + "IsGUIThread": [ + { + "name": "bConvert", + "type": "BOOL" + } + ], + "GetLastActivePopup": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetWindow": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uCmd", + "type": "UINT" + } + ], + "SetWindowsHookExA": [ + { + "name": "idHook", + "type": "int" + }, + { + "name": "lpfn", + "type": "HOOKPROC" + }, + { + "name": "hmod", + "type": "HINSTANCE" + }, + { + "name": "dwThreadId", + "type": "DWORD" + } + ], + "SetWindowsHookExW": [ + { + "name": "idHook", + "type": "int" + }, + { + "name": "lpfn", + "type": "HOOKPROC" + }, + { + "name": "hmod", + "type": "HINSTANCE" + }, + { + "name": "dwThreadId", + "type": "DWORD" + } + ], + "UnhookWindowsHookEx": [ + { + "name": "hhk", + "type": "HHOOK" + } + ], + "CallNextHookEx": [ + { + "name": "hhk", + "type": "HHOOK" + }, + { + "name": "nCode", + "type": "int" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CheckMenuRadioItem": [ + { + "name": "hmenu", + "type": "HMENU" + }, + { + "name": "first", + "type": "UINT" + }, + { + "name": "last", + "type": "UINT" + }, + { + "name": "check", + "type": "UINT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "LoadBitmapA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpBitmapName", + "type": "LPCSTR" + } + ], + "LoadBitmapW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpBitmapName", + "type": "LPCWSTR" + } + ], + "LoadCursorA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpCursorName", + "type": "LPCSTR" + } + ], + "LoadCursorW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpCursorName", + "type": "LPCWSTR" + } + ], + "LoadCursorFromFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "LoadCursorFromFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "CreateCursor": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "xHotSpot", + "type": "int" + }, + { + "name": "yHotSpot", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "pvANDPlane", + "type": "void" + }, + { + "name": "pvXORPlane", + "type": "void" + } + ], + "DestroyCursor": [ + { + "name": "hCursor", + "type": "HCURSOR" + } + ], + "SetSystemCursor": [ + { + "name": "hcur", + "type": "HCURSOR" + }, + { + "name": "id", + "type": "DWORD" + } + ], + "LoadIconA": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpIconName", + "type": "LPCSTR" + } + ], + "LoadIconW": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lpIconName", + "type": "LPCWSTR" + } + ], + "PrivateExtractIconsA": [ + { + "name": "szFileName", + "type": "LPCSTR" + }, + { + "name": "nIconIndex", + "type": "int" + }, + { + "name": "cxIcon", + "type": "int" + }, + { + "name": "cyIcon", + "type": "int" + }, + { + "name": "phicon", + "type": "HICON" + }, + { + "name": "piconid", + "type": "UINT" + }, + { + "name": "nIcons", + "type": "UINT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "PrivateExtractIconsW": [ + { + "name": "szFileName", + "type": "LPCWSTR" + }, + { + "name": "nIconIndex", + "type": "int" + }, + { + "name": "cxIcon", + "type": "int" + }, + { + "name": "cyIcon", + "type": "int" + }, + { + "name": "phicon", + "type": "HICON" + }, + { + "name": "piconid", + "type": "UINT" + }, + { + "name": "nIcons", + "type": "UINT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "CreateIcon": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "cPlanes", + "type": "BYTE" + }, + { + "name": "cBitsPixel", + "type": "BYTE" + }, + { + "name": "lpbANDbits", + "type": "BYTE" + }, + { + "name": "lpbXORbits", + "type": "BYTE" + } + ], + "DestroyIcon": [ + { + "name": "hIcon", + "type": "HICON" + } + ], + "LookupIconIdFromDirectory": [ + { + "name": "presbits", + "type": "PBYTE" + }, + { + "name": "fIcon", + "type": "BOOL" + } + ], + "LookupIconIdFromDirectoryEx": [ + { + "name": "presbits", + "type": "PBYTE" + }, + { + "name": "fIcon", + "type": "BOOL" + }, + { + "name": "cxDesired", + "type": "int" + }, + { + "name": "cyDesired", + "type": "int" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "CreateIconFromResource": [ + { + "name": "presbits", + "type": "PBYTE" + }, + { + "name": "dwResSize", + "type": "DWORD" + }, + { + "name": "fIcon", + "type": "BOOL" + }, + { + "name": "dwVer", + "type": "DWORD" + } + ], + "CreateIconFromResourceEx": [ + { + "name": "presbits", + "type": "PBYTE" + }, + { + "name": "dwResSize", + "type": "DWORD" + }, + { + "name": "fIcon", + "type": "BOOL" + }, + { + "name": "dwVer", + "type": "DWORD" + }, + { + "name": "cxDesired", + "type": "int" + }, + { + "name": "cyDesired", + "type": "int" + }, + { + "name": "Flags", + "type": "UINT" + } + ], + "LoadImageA": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "type", + "type": "UINT" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "fuLoad", + "type": "UINT" + } + ], + "LoadImageW": [ + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "type", + "type": "UINT" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "fuLoad", + "type": "UINT" + } + ], + "CopyImage": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "type", + "type": "UINT" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "DrawIconEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xLeft", + "type": "int" + }, + { + "name": "yTop", + "type": "int" + }, + { + "name": "hIcon", + "type": "HICON" + }, + { + "name": "cxWidth", + "type": "int" + }, + { + "name": "cyWidth", + "type": "int" + }, + { + "name": "istepIfAniCur", + "type": "UINT" + }, + { + "name": "hbrFlickerFreeDraw", + "type": "HBRUSH" + }, + { + "name": "diFlags", + "type": "UINT" + } + ], + "CreateIconIndirect": [ + { + "name": "piconinfo", + "type": "PICONINFO" + } + ], + "CopyIcon": [ + { + "name": "hIcon", + "type": "HICON" + } + ], + "GetIconInfo": [ + { + "name": "hIcon", + "type": "HICON" + }, + { + "name": "piconinfo", + "type": "PICONINFO" + } + ], + "GetIconInfoExA": [ + { + "name": "hicon", + "type": "HICON" + }, + { + "name": "piconinfo", + "type": "PICONINFOEXA" + } + ], + "GetIconInfoExW": [ + { + "name": "hicon", + "type": "HICON" + }, + { + "name": "piconinfo", + "type": "PICONINFOEXW" + } + ], + "IsDialogMessageA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "IsDialogMessageW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "MapDialogRect": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpRect", + "type": "LPRECT" + } + ], + "DlgDirListA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpPathSpec", + "type": "LPSTR" + }, + { + "name": "nIDListBox", + "type": "int" + }, + { + "name": "nIDStaticPath", + "type": "int" + }, + { + "name": "uFileType", + "type": "UINT" + } + ], + "DlgDirListW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpPathSpec", + "type": "LPWSTR" + }, + { + "name": "nIDListBox", + "type": "int" + }, + { + "name": "nIDStaticPath", + "type": "int" + }, + { + "name": "uFileType", + "type": "UINT" + } + ], + "DlgDirSelectExA": [ + { + "name": "hwndDlg", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "idListBox", + "type": "int" + } + ], + "DlgDirSelectExW": [ + { + "name": "hwndDlg", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "chCount", + "type": "int" + }, + { + "name": "idListBox", + "type": "int" + } + ], + "DlgDirListComboBoxA": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpPathSpec", + "type": "LPSTR" + }, + { + "name": "nIDComboBox", + "type": "int" + }, + { + "name": "nIDStaticPath", + "type": "int" + }, + { + "name": "uFiletype", + "type": "UINT" + } + ], + "DlgDirListComboBoxW": [ + { + "name": "hDlg", + "type": "HWND" + }, + { + "name": "lpPathSpec", + "type": "LPWSTR" + }, + { + "name": "nIDComboBox", + "type": "int" + }, + { + "name": "nIDStaticPath", + "type": "int" + }, + { + "name": "uFiletype", + "type": "UINT" + } + ], + "DlgDirSelectComboBoxExA": [ + { + "name": "hwndDlg", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPSTR" + }, + { + "name": "cchOut", + "type": "int" + }, + { + "name": "idComboBox", + "type": "int" + } + ], + "DlgDirSelectComboBoxExW": [ + { + "name": "hwndDlg", + "type": "HWND" + }, + { + "name": "lpString", + "type": "LPWSTR" + }, + { + "name": "cchOut", + "type": "int" + }, + { + "name": "idComboBox", + "type": "int" + } + ], + "SetScrollInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "lpsi", + "type": "LPCSCROLLINFO" + }, + { + "name": "redraw", + "type": "BOOL" + } + ], + "GetScrollInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "nBar", + "type": "int" + }, + { + "name": "lpsi", + "type": "LPSCROLLINFO" + } + ], + "DefFrameProcA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hWndMDIClient", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefFrameProcW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "hWndMDIClient", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefMDIChildProcA": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DefMDIChildProcW": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "TranslateMDISysAccel": [ + { + "name": "hWndClient", + "type": "HWND" + }, + { + "name": "lpMsg", + "type": "LPMSG" + } + ], + "ArrangeIconicWindows": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "CreateMDIWindowA": [ + { + "name": "lpClassName", + "type": "LPCSTR" + }, + { + "name": "lpWindowName", + "type": "LPCSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CreateMDIWindowW": [ + { + "name": "lpClassName", + "type": "LPCWSTR" + }, + { + "name": "lpWindowName", + "type": "LPCWSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "X", + "type": "int" + }, + { + "name": "Y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hWndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "TileWindows": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "wHow", + "type": "UINT" + }, + { + "name": "lpRect", + "type": "RECT" + }, + { + "name": "cKids", + "type": "UINT" + }, + { + "name": "lpKids", + "type": "HWND" + } + ], + "CascadeWindows": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "wHow", + "type": "UINT" + }, + { + "name": "lpRect", + "type": "RECT" + }, + { + "name": "cKids", + "type": "UINT" + }, + { + "name": "lpKids", + "type": "HWND" + } + ], + "WinHelpA": [ + { + "name": "hWndMain", + "type": "HWND" + }, + { + "name": "lpszHelp", + "type": "LPCSTR" + }, + { + "name": "uCommand", + "type": "UINT" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "WinHelpW": [ + { + "name": "hWndMain", + "type": "HWND" + }, + { + "name": "lpszHelp", + "type": "LPCWSTR" + }, + { + "name": "uCommand", + "type": "UINT" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "GetGuiResources": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "uiFlags", + "type": "DWORD" + } + ], + "ChangeDisplaySettingsA": [ + { + "name": "lpDevMode", + "type": "DEVMODEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ChangeDisplaySettingsW": [ + { + "name": "lpDevMode", + "type": "DEVMODEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "ChangeDisplaySettingsExA": [ + { + "name": "lpszDeviceName", + "type": "LPCSTR" + }, + { + "name": "lpDevMode", + "type": "DEVMODEA" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwflags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPVOID" + } + ], + "ChangeDisplaySettingsExW": [ + { + "name": "lpszDeviceName", + "type": "LPCWSTR" + }, + { + "name": "lpDevMode", + "type": "DEVMODEW" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwflags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPVOID" + } + ], + "EnumDisplaySettingsA": [ + { + "name": "lpszDeviceName", + "type": "LPCSTR" + }, + { + "name": "iModeNum", + "type": "DWORD" + }, + { + "name": "lpDevMode", + "type": "DEVMODEA" + } + ], + "EnumDisplaySettingsW": [ + { + "name": "lpszDeviceName", + "type": "LPCWSTR" + }, + { + "name": "iModeNum", + "type": "DWORD" + }, + { + "name": "lpDevMode", + "type": "DEVMODEW" + } + ], + "EnumDisplaySettingsExA": [ + { + "name": "lpszDeviceName", + "type": "LPCSTR" + }, + { + "name": "iModeNum", + "type": "DWORD" + }, + { + "name": "lpDevMode", + "type": "DEVMODEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDisplaySettingsExW": [ + { + "name": "lpszDeviceName", + "type": "LPCWSTR" + }, + { + "name": "iModeNum", + "type": "DWORD" + }, + { + "name": "lpDevMode", + "type": "DEVMODEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDisplayDevicesA": [ + { + "name": "lpDevice", + "type": "LPCSTR" + }, + { + "name": "iDevNum", + "type": "DWORD" + }, + { + "name": "lpDisplayDevice", + "type": "PDISPLAY_DEVICEA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDisplayDevicesW": [ + { + "name": "lpDevice", + "type": "LPCWSTR" + }, + { + "name": "iDevNum", + "type": "DWORD" + }, + { + "name": "lpDisplayDevice", + "type": "PDISPLAY_DEVICEW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetDisplayConfigBufferSizes": [ + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "numPathArrayElements", + "type": "UINT32" + }, + { + "name": "numModeInfoArrayElements", + "type": "UINT32" + } + ], + "SetDisplayConfig": [ + { + "name": "numPathArrayElements", + "type": "UINT32" + }, + { + "name": "pathArray", + "type": "DISPLAYCONFIG_PATH_INFO" + }, + { + "name": "numModeInfoArrayElements", + "type": "UINT32" + }, + { + "name": "modeInfoArray", + "type": "DISPLAYCONFIG_MODE_INFO" + }, + { + "name": "flags", + "type": "UINT32" + } + ], + "QueryDisplayConfig": [ + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "numPathArrayElements", + "type": "UINT32" + }, + { + "name": "pathArray", + "type": "DISPLAYCONFIG_PATH_INFO" + }, + { + "name": "numModeInfoArrayElements", + "type": "UINT32" + }, + { + "name": "modeInfoArray", + "type": "DISPLAYCONFIG_MODE_INFO" + }, + { + "name": "currentTopologyId", + "type": "DISPLAYCONFIG_TOPOLOGY_ID" + } + ], + "DisplayConfigGetDeviceInfo": [ + { + "name": "requestPacket", + "type": "DISPLAYCONFIG_DEVICE_INFO_HEADER" + } + ], + "DisplayConfigSetDeviceInfo": [ + { + "name": "setPacket", + "type": "DISPLAYCONFIG_DEVICE_INFO_HEADER" + } + ], + "SystemParametersInfoA": [ + { + "name": "uiAction", + "type": "UINT" + }, + { + "name": "uiParam", + "type": "UINT" + }, + { + "name": "pvParam", + "type": "PVOID" + }, + { + "name": "fWinIni", + "type": "UINT" + } + ], + "SystemParametersInfoW": [ + { + "name": "uiAction", + "type": "UINT" + }, + { + "name": "uiParam", + "type": "UINT" + }, + { + "name": "pvParam", + "type": "PVOID" + }, + { + "name": "fWinIni", + "type": "UINT" + } + ], + "SystemParametersInfoForDpi": [ + { + "name": "uiAction", + "type": "UINT" + }, + { + "name": "uiParam", + "type": "UINT" + }, + { + "name": "pvParam", + "type": "PVOID" + }, + { + "name": "fWinIni", + "type": "UINT" + }, + { + "name": "dpi", + "type": "UINT" + } + ], + "SoundSentry": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetLastErrorEx": [ + { + "name": "dwErrCode", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "InternalGetWindowText": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pString", + "type": "LPWSTR" + }, + { + "name": "cchMaxCount", + "type": "int" + } + ], + "MonitorFromPoint": [ + { + "name": "pt", + "type": "POINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MonitorFromRect": [ + { + "name": "lprc", + "type": "LPCRECT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MonitorFromWindow": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetMonitorInfoA": [ + { + "name": "hMonitor", + "type": "HMONITOR" + }, + { + "name": "lpmi", + "type": "LPMONITORINFO" + } + ], + "GetMonitorInfoW": [ + { + "name": "hMonitor", + "type": "HMONITOR" + }, + { + "name": "lpmi", + "type": "LPMONITORINFO" + } + ], + "EnumDisplayMonitors": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprcClip", + "type": "LPCRECT" + }, + { + "name": "lpfnEnum", + "type": "MONITORENUMPROC" + }, + { + "name": "dwData", + "type": "LPARAM" + } + ], + "NotifyWinEvent": [ + { + "name": "event", + "type": "DWORD" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "idChild", + "type": "LONG" + } + ], + "SetWinEventHook": [ + { + "name": "eventMin", + "type": "DWORD" + }, + { + "name": "eventMax", + "type": "DWORD" + }, + { + "name": "hmodWinEventProc", + "type": "HMODULE" + }, + { + "name": "pfnWinEventProc", + "type": "WINEVENTPROC" + }, + { + "name": "idProcess", + "type": "DWORD" + }, + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "IsWinEventHookInstalled": [ + { + "name": "event", + "type": "DWORD" + } + ], + "UnhookWinEvent": [ + { + "name": "hWinEventHook", + "type": "HWINEVENTHOOK" + } + ], + "GetGUIThreadInfo": [ + { + "name": "idThread", + "type": "DWORD" + }, + { + "name": "pgui", + "type": "PGUITHREADINFO" + } + ], + "BlockInput": [ + { + "name": "fBlockIt", + "type": "BOOL" + } + ], + "SetProcessDPIAware": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsProcessDPIAware": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadDpiAwarenessContext": [ + { + "name": "dpiContext", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "GetThreadDpiAwarenessContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetWindowDpiAwarenessContext": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetAwarenessFromDpiAwarenessContext": [ + { + "name": "value", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "GetDpiFromDpiAwarenessContext": [ + { + "name": "value", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "AreDpiAwarenessContextsEqual": [ + { + "name": "dpiContextA", + "type": "DPI_AWARENESS_CONTEXT" + }, + { + "name": "dpiContextB", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "IsValidDpiAwarenessContext": [ + { + "name": "value", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "GetDpiForWindow": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetDpiForSystem": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemDpiForProcess": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "EnableNonClientDpiScaling": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "SetProcessDpiAwarenessContext": [ + { + "name": "value", + "type": "DPI_AWARENESS_CONTEXT" + } + ], + "SetThreadDpiHostingBehavior": [ + { + "name": "value", + "type": "DPI_HOSTING_BEHAVIOR" + } + ], + "GetThreadDpiHostingBehavior": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetWindowDpiHostingBehavior": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "GetWindowModuleFileNameA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszFileName", + "type": "LPSTR" + }, + { + "name": "cchFileNameMax", + "type": "UINT" + } + ], + "GetWindowModuleFileNameW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszFileName", + "type": "LPWSTR" + }, + { + "name": "cchFileNameMax", + "type": "UINT" + } + ], + "GetCursorInfo": [ + { + "name": "pci", + "type": "PCURSORINFO" + } + ], + "GetWindowInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pwi", + "type": "PWINDOWINFO" + } + ], + "GetTitleBarInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pti", + "type": "PTITLEBARINFO" + } + ], + "GetMenuBarInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "idItem", + "type": "LONG" + }, + { + "name": "pmbi", + "type": "PMENUBARINFO" + } + ], + "GetScrollBarInfo": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "idObject", + "type": "LONG" + }, + { + "name": "psbi", + "type": "PSCROLLBARINFO" + } + ], + "GetComboBoxInfo": [ + { + "name": "hwndCombo", + "type": "HWND" + }, + { + "name": "pcbi", + "type": "PCOMBOBOXINFO" + } + ], + "GetAncestor": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "gaFlags", + "type": "UINT" + } + ], + "RealChildWindowFromPoint": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "ptParentClientCoords", + "type": "POINT" + } + ], + "RealGetWindowClassW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ptszClassName", + "type": "LPWSTR" + }, + { + "name": "cchClassNameMax", + "type": "UINT" + } + ], + "GetAltTabInfoA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "iItem", + "type": "int" + }, + { + "name": "pati", + "type": "PALTTABINFO" + }, + { + "name": "pszItemText", + "type": "LPSTR" + }, + { + "name": "cchItemText", + "type": "UINT" + } + ], + "GetAltTabInfoW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "iItem", + "type": "int" + }, + { + "name": "pati", + "type": "PALTTABINFO" + }, + { + "name": "pszItemText", + "type": "LPWSTR" + }, + { + "name": "cchItemText", + "type": "UINT" + } + ], + "GetListBoxInfo": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "LockWorkStation": [ + { + "name": "VOID", + "type": "void" + } + ], + "UserHandleGrantAccess": [ + { + "name": "hUserHandle", + "type": "HANDLE" + }, + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "bGrant", + "type": "BOOL" + } + ], + "GetRawInputData": [ + { + "name": "hRawInput", + "type": "HRAWINPUT" + }, + { + "name": "uiCommand", + "type": "UINT" + }, + { + "name": "pData", + "type": "LPVOID" + }, + { + "name": "pcbSize", + "type": "PUINT" + }, + { + "name": "cbSizeHeader", + "type": "UINT" + } + ], + "GetRawInputDeviceInfoA": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "uiCommand", + "type": "UINT" + }, + { + "name": "pData", + "type": "LPVOID" + }, + { + "name": "pcbSize", + "type": "PUINT" + } + ], + "GetRawInputDeviceInfoW": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "uiCommand", + "type": "UINT" + }, + { + "name": "pData", + "type": "LPVOID" + }, + { + "name": "pcbSize", + "type": "PUINT" + } + ], + "GetRawInputBuffer": [ + { + "name": "pData", + "type": "PRAWINPUT" + }, + { + "name": "pcbSize", + "type": "PUINT" + }, + { + "name": "cbSizeHeader", + "type": "UINT" + } + ], + "RegisterRawInputDevices": [ + { + "name": "pRawInputDevices", + "type": "PCRAWINPUTDEVICE" + }, + { + "name": "uiNumDevices", + "type": "UINT" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "GetRegisteredRawInputDevices": [ + { + "name": "pRawInputDevices", + "type": "PRAWINPUTDEVICE" + }, + { + "name": "puiNumDevices", + "type": "PUINT" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "GetRawInputDeviceList": [ + { + "name": "pRawInputDeviceList", + "type": "PRAWINPUTDEVICELIST" + }, + { + "name": "puiNumDevices", + "type": "PUINT" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "DefRawInputProc": [ + { + "name": "paRawInput", + "type": "PRAWINPUT" + }, + { + "name": "nInput", + "type": "INT" + }, + { + "name": "cbSizeHeader", + "type": "UINT" + } + ], + "GetPointerDevices": [ + { + "name": "deviceCount", + "type": "UINT32" + }, + { + "name": "pointerDevices", + "type": "POINTER_DEVICE_INFO" + } + ], + "GetPointerDevice": [ + { + "name": "device", + "type": "HANDLE" + }, + { + "name": "pointerDevice", + "type": "POINTER_DEVICE_INFO" + } + ], + "GetPointerDeviceProperties": [ + { + "name": "device", + "type": "HANDLE" + }, + { + "name": "propertyCount", + "type": "UINT32" + }, + { + "name": "pointerProperties", + "type": "POINTER_DEVICE_PROPERTY" + } + ], + "RegisterPointerDeviceNotifications": [ + { + "name": "window", + "type": "HWND" + }, + { + "name": "notifyRange", + "type": "BOOL" + } + ], + "GetPointerDeviceRects": [ + { + "name": "device", + "type": "HANDLE" + }, + { + "name": "pointerDeviceRect", + "type": "RECT" + }, + { + "name": "displayRect", + "type": "RECT" + } + ], + "GetPointerDeviceCursors": [ + { + "name": "device", + "type": "HANDLE" + }, + { + "name": "cursorCount", + "type": "UINT32" + }, + { + "name": "deviceCursors", + "type": "POINTER_DEVICE_CURSOR_INFO" + } + ], + "GetRawPointerDeviceData": [ + { + "name": "pointerId", + "type": "UINT32" + }, + { + "name": "historyCount", + "type": "UINT32" + }, + { + "name": "propertiesCount", + "type": "UINT32" + }, + { + "name": "pProperties", + "type": "POINTER_DEVICE_PROPERTY" + }, + { + "name": "pValues", + "type": "LONG" + } + ], + "ChangeWindowMessageFilter": [ + { + "name": "message", + "type": "UINT" + }, + { + "name": "dwFlag", + "type": "DWORD" + } + ], + "ChangeWindowMessageFilterEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "message", + "type": "UINT" + }, + { + "name": "action", + "type": "DWORD" + }, + { + "name": "pChangeFilterStruct", + "type": "PCHANGEFILTERSTRUCT" + } + ], + "GetGestureInfo": [ + { + "name": "hGestureInfo", + "type": "HGESTUREINFO" + }, + { + "name": "pGestureInfo", + "type": "PGESTUREINFO" + } + ], + "GetGestureExtraArgs": [ + { + "name": "hGestureInfo", + "type": "HGESTUREINFO" + }, + { + "name": "cbExtraArgs", + "type": "UINT" + }, + { + "name": "pExtraArgs", + "type": "PBYTE" + } + ], + "CloseGestureInfoHandle": [ + { + "name": "hGestureInfo", + "type": "HGESTUREINFO" + } + ], + "SetGestureConfig": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "cIDs", + "type": "UINT" + }, + { + "name": "pGestureConfig", + "type": "PGESTURECONFIG" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "GetGestureConfig": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pcIDs", + "type": "PUINT" + }, + { + "name": "pGestureConfig", + "type": "PGESTURECONFIG" + }, + { + "name": "cbSize", + "type": "UINT" + } + ], + "ShutdownBlockReasonCreate": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pwszReason", + "type": "LPCWSTR" + } + ], + "ShutdownBlockReasonQuery": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pwszBuff", + "type": "LPWSTR" + }, + { + "name": "pcchBuff", + "type": "DWORD" + } + ], + "ShutdownBlockReasonDestroy": [ + { + "name": "hWnd", + "type": "HWND" + } + ], + "GetCurrentInputMessageSource": [ + { + "name": "inputMessageSource", + "type": "INPUT_MESSAGE_SOURCE" + } + ], + "GetCIMSSM": [ + { + "name": "inputMessageSource", + "type": "INPUT_MESSAGE_SOURCE" + } + ], + "GetAutoRotationState": [ + { + "name": "pState", + "type": "PAR_STATE" + } + ], + "GetDisplayAutoRotationPreferences": [ + { + "name": "pOrientation", + "type": "ORIENTATION_PREFERENCE" + } + ], + "GetDisplayAutoRotationPreferencesByProcessId": [ + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "pOrientation", + "type": "ORIENTATION_PREFERENCE" + }, + { + "name": "fRotateScreen", + "type": "BOOL" + } + ], + "SetDisplayAutoRotationPreferences": [ + { + "name": "orientation", + "type": "ORIENTATION_PREFERENCE" + } + ], + "IsImmersiveProcess": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "SetProcessRestrictionExemption": [ + { + "name": "fEnableExemption", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/libloaderapi.json b/qiling/extensions/windows_sdk/libloaderapi.json deleted file mode 100644 index 35e1e6ac9..000000000 --- a/qiling/extensions/windows_sdk/libloaderapi.json +++ /dev/null @@ -1,374 +0,0 @@ -{ - "DisableThreadLibraryCalls": [ - { - "name": "hLibModule", - "type": "HMODULE" - } - ], - "FindStringOrdinal": [ - { - "name": "dwFindStringOrdinalFlags", - "type": "DWORD" - }, - { - "name": "lpStringSource", - "type": "LPCWSTR" - }, - { - "name": "cchSource", - "type": "int" - }, - { - "name": "lpStringValue", - "type": "LPCWSTR" - }, - { - "name": "cchValue", - "type": "int" - }, - { - "name": "bIgnoreCase", - "type": "BOOL" - } - ], - "FreeLibrary": [ - { - "name": "hLibModule", - "type": "HMODULE" - } - ], - "FreeLibraryAndExitThread": [ - { - "name": "hLibModule", - "type": "HMODULE" - }, - { - "name": "dwExitCode", - "type": "DWORD" - } - ], - "FreeResource": [ - { - "name": "hResData", - "type": "HGLOBAL" - } - ], - "GetModuleFileNameA": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpFilename", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "GetModuleFileNameW": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpFilename", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "GetModuleHandleA": [ - { - "name": "lpModuleName", - "type": "LPCSTR" - } - ], - "GetModuleHandleW": [ - { - "name": "lpModuleName", - "type": "LPCWSTR" - } - ], - "GetModuleHandleExA": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpModuleName", - "type": "LPCSTR" - }, - { - "name": "phModule", - "type": "HMODULE" - } - ], - "GetModuleHandleExW": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpModuleName", - "type": "LPCWSTR" - }, - { - "name": "phModule", - "type": "HMODULE" - } - ], - "GetProcAddress": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpProcName", - "type": "LPCSTR" - } - ], - "LoadLibraryExA": [ - { - "name": "lpLibFileName", - "type": "LPCSTR" - }, - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "LoadLibraryExW": [ - { - "name": "lpLibFileName", - "type": "LPCWSTR" - }, - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "LoadResource": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "hResInfo", - "type": "HRSRC" - } - ], - "LockResource": [ - { - "name": "hResData", - "type": "HGLOBAL" - } - ], - "SizeofResource": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "hResInfo", - "type": "HRSRC" - } - ], - "AddDllDirectory": [ - { - "name": "NewDirectory", - "type": "PCWSTR" - } - ], - "RemoveDllDirectory": [ - { - "name": "Cookie", - "type": "DLL_DIRECTORY_COOKIE" - } - ], - "SetDefaultDllDirectories": [ - { - "name": "DirectoryFlags", - "type": "DWORD" - } - ], - "EnumResourceLanguagesExA": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpType", - "type": "LPCSTR" - }, - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpEnumFunc", - "type": "ENUMRESLANGPROCA" - }, - { - "name": "lParam", - "type": "LONG_PTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "LangId", - "type": "LANGID" - } - ], - "EnumResourceLanguagesExW": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpType", - "type": "LPCWSTR" - }, - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpEnumFunc", - "type": "ENUMRESLANGPROCW" - }, - { - "name": "lParam", - "type": "LONG_PTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "LangId", - "type": "LANGID" - } - ], - "EnumResourceNamesExA": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpType", - "type": "LPCSTR" - }, - { - "name": "lpEnumFunc", - "type": "ENUMRESNAMEPROCA" - }, - { - "name": "lParam", - "type": "LONG_PTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "LangId", - "type": "LANGID" - } - ], - "EnumResourceNamesExW": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpType", - "type": "LPCWSTR" - }, - { - "name": "lpEnumFunc", - "type": "ENUMRESNAMEPROCW" - }, - { - "name": "lParam", - "type": "LONG_PTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "LangId", - "type": "LANGID" - } - ], - "EnumResourceTypesExA": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpEnumFunc", - "type": "ENUMRESTYPEPROCA" - }, - { - "name": "lParam", - "type": "LONG_PTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "LangId", - "type": "LANGID" - } - ], - "EnumResourceTypesExW": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpEnumFunc", - "type": "ENUMRESTYPEPROCW" - }, - { - "name": "lParam", - "type": "LONG_PTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "LangId", - "type": "LANGID" - } - ], - "LoadLibraryA": [ - { - "name": "lpLibFileName", - "type": "LPCSTR" - } - ], - "LoadLibraryW": [ - { - "name": "lpLibFileName", - "type": "LPCWSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lmaccess.json b/qiling/extensions/windows_sdk/lmaccess.json deleted file mode 100644 index 03e936e43..000000000 --- a/qiling/extensions/windows_sdk/lmaccess.json +++ /dev/null @@ -1,952 +0,0 @@ -{ - "NetUserAdd": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetUserEnum": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "filter", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resume_handle", - "type": "PDWORD" - } - ], - "NetUserGetInfo": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "username", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetUserSetInfo": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "username", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetUserDel": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "username", - "type": "LPCWSTR" - } - ], - "NetUserGetGroups": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "username", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - } - ], - "NetUserSetGroups": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "username", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "num_entries", - "type": "DWORD" - } - ], - "NetUserGetLocalGroups": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "username", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "flags", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - } - ], - "NetUserModalsGet": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetUserModalsSet": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetUserChangePassword": [ - { - "name": "domainname", - "type": "LPCWSTR" - }, - { - "name": "username", - "type": "LPCWSTR" - }, - { - "name": "oldpassword", - "type": "LPCWSTR" - }, - { - "name": "newpassword", - "type": "LPCWSTR" - } - ], - "NetGroupAdd": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetGroupAddUser": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "GroupName", - "type": "LPCWSTR" - }, - { - "name": "username", - "type": "LPCWSTR" - } - ], - "NetGroupEnum": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resume_handle", - "type": "PDWORD_PTR" - } - ], - "NetGroupGetInfo": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "groupname", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetGroupSetInfo": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "groupname", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetGroupDel": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "groupname", - "type": "LPCWSTR" - } - ], - "NetGroupDelUser": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "GroupName", - "type": "LPCWSTR" - }, - { - "name": "Username", - "type": "LPCWSTR" - } - ], - "NetGroupGetUsers": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "groupname", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "ResumeHandle", - "type": "PDWORD_PTR" - } - ], - "NetGroupSetUsers": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "groupname", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "totalentries", - "type": "DWORD" - } - ], - "NetLocalGroupAdd": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetLocalGroupEnum": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resumehandle", - "type": "PDWORD_PTR" - } - ], - "NetLocalGroupGetInfo": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "groupname", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetLocalGroupSetInfo": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "groupname", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetLocalGroupDel": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "groupname", - "type": "LPCWSTR" - } - ], - "NetLocalGroupGetMembers": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "localgroupname", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resumehandle", - "type": "PDWORD_PTR" - } - ], - "NetLocalGroupSetMembers": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "groupname", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "totalentries", - "type": "DWORD" - } - ], - "NetLocalGroupAddMembers": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "groupname", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "totalentries", - "type": "DWORD" - } - ], - "NetLocalGroupDelMembers": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "groupname", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "totalentries", - "type": "DWORD" - } - ], - "NetQueryDisplayInformation": [ - { - "name": "ServerName", - "type": "LPCWSTR" - }, - { - "name": "Level", - "type": "DWORD" - }, - { - "name": "Index", - "type": "DWORD" - }, - { - "name": "EntriesRequested", - "type": "DWORD" - }, - { - "name": "PreferredMaximumLength", - "type": "DWORD" - }, - { - "name": "ReturnedEntryCount", - "type": "LPDWORD" - }, - { - "name": "SortedBuffer", - "type": "PVOID" - } - ], - "NetGetDisplayInformationIndex": [ - { - "name": "ServerName", - "type": "LPCWSTR" - }, - { - "name": "Level", - "type": "DWORD" - }, - { - "name": "Prefix", - "type": "LPCWSTR" - }, - { - "name": "Index", - "type": "LPDWORD" - } - ], - "NetAccessAdd": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetAccessEnum": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "BasePath", - "type": "LPCWSTR" - }, - { - "name": "Recursive", - "type": "DWORD" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resume_handle", - "type": "LPDWORD" - } - ], - "NetAccessGetInfo": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "resource", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetAccessSetInfo": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "resource", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetAccessDel": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "resource", - "type": "LPCWSTR" - } - ], - "NetAccessGetUserPerms": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "UGname", - "type": "LPCWSTR" - }, - { - "name": "resource", - "type": "LPCWSTR" - }, - { - "name": "Perms", - "type": "LPDWORD" - } - ], - "NetValidatePasswordPolicy": [ - { - "name": "ServerName", - "type": "LPCWSTR" - }, - { - "name": "Qualifier", - "type": "LPVOID" - }, - { - "name": "ValidationType", - "type": "NET_VALIDATE_PASSWORD_TYPE" - }, - { - "name": "InputArg", - "type": "LPVOID" - }, - { - "name": "OutputArg", - "type": "LPVOID" - } - ], - "NetValidatePasswordPolicyFree": [ - { - "name": "OutputArg", - "type": "LPVOID" - } - ], - "NetGetDCName": [ - { - "name": "ServerName", - "type": "LPCWSTR" - }, - { - "name": "DomainName", - "type": "LPCWSTR" - }, - { - "name": "Buffer", - "type": "LPBYTE" - } - ], - "NetGetAnyDCName": [ - { - "name": "ServerName", - "type": "LPCWSTR" - }, - { - "name": "DomainName", - "type": "LPCWSTR" - }, - { - "name": "Buffer", - "type": "LPBYTE" - } - ], - "I_NetLogonControl2": [ - { - "name": "ServerName", - "type": "LPCWSTR" - }, - { - "name": "FunctionCode", - "type": "DWORD" - }, - { - "name": "QueryLevel", - "type": "DWORD" - }, - { - "name": "Data", - "type": "LPBYTE" - }, - { - "name": "Buffer", - "type": "LPBYTE" - } - ], - "NetAddServiceAccount": [ - { - "name": "ServerName", - "type": "LPWSTR" - }, - { - "name": "AccountName", - "type": "LPWSTR" - }, - { - "name": "Password", - "type": "LPWSTR" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "NetRemoveServiceAccount": [ - { - "name": "ServerName", - "type": "LPWSTR" - }, - { - "name": "AccountName", - "type": "LPWSTR" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "NetEnumerateServiceAccounts": [ - { - "name": "ServerName", - "type": "LPWSTR" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "AccountsCount", - "type": "DWORD" - }, - { - "name": "Accounts", - "type": "PZPWSTR" - } - ], - "NetIsServiceAccount": [ - { - "name": "ServerName", - "type": "LPWSTR" - }, - { - "name": "AccountName", - "type": "LPWSTR" - }, - { - "name": "IsService", - "type": "BOOL" - } - ], - "NetQueryServiceAccount": [ - { - "name": "ServerName", - "type": "LPWSTR" - }, - { - "name": "AccountName", - "type": "LPWSTR" - }, - { - "name": "InfoLevel", - "type": "DWORD" - }, - { - "name": "Buffer", - "type": "PBYTE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lmserver.json b/qiling/extensions/windows_sdk/lmserver.json deleted file mode 100644 index 508f13ede..000000000 --- a/qiling/extensions/windows_sdk/lmserver.json +++ /dev/null @@ -1,216 +0,0 @@ -{ - "NetServerEnum": [ - { - "name": "servername", - "type": "LPCWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "servertype", - "type": "DWORD" - }, - { - "name": "domain", - "type": "LPCWSTR" - }, - { - "name": "resume_handle", - "type": "LPDWORD" - } - ], - "NetServerGetInfo": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetServerSetInfo": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "ParmError", - "type": "LPDWORD" - } - ], - "NetServerDiskEnum": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resume_handle", - "type": "LPDWORD" - } - ], - "NetServerComputerNameAdd": [ - { - "name": "ServerName", - "type": "LPWSTR" - }, - { - "name": "EmulatedDomainName", - "type": "LPWSTR" - }, - { - "name": "EmulatedServerName", - "type": "LPWSTR" - } - ], - "NetServerComputerNameDel": [ - { - "name": "ServerName", - "type": "LPWSTR" - }, - { - "name": "EmulatedServerName", - "type": "LPWSTR" - } - ], - "NetServerTransportAdd": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetServerTransportAddEx": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetServerTransportDel": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetServerTransportEnum": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resume_handle", - "type": "LPDWORD" - } - ], - "SetServiceBits": [ - { - "name": "hServiceStatus", - "type": "SERVICE_STATUS_HANDLE" - }, - { - "name": "dwServiceBits", - "type": "DWORD" - }, - { - "name": "bSetBitsOn", - "type": "BOOL" - }, - { - "name": "bUpdateImmediately", - "type": "BOOL" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lmshare.json b/qiling/extensions/windows_sdk/lmshare.json deleted file mode 100644 index bce78a490..000000000 --- a/qiling/extensions/windows_sdk/lmshare.json +++ /dev/null @@ -1,306 +0,0 @@ -{ - "NetShareAdd": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetShareEnum": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resume_handle", - "type": "LPDWORD" - } - ], - "NetShareGetInfo": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "netname", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetShareSetInfo": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "netname", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetShareDel": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "netname", - "type": "LPWSTR" - }, - { - "name": "reserved", - "type": "DWORD" - } - ], - "NetShareCheck": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "device", - "type": "LPWSTR" - }, - { - "name": "type", - "type": "LPDWORD" - } - ], - "NetShareDelEx": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - } - ], - "NetSessionEnum": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "UncClientName", - "type": "LPWSTR" - }, - { - "name": "username", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resume_handle", - "type": "LPDWORD" - } - ], - "NetSessionDel": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "UncClientName", - "type": "LPWSTR" - }, - { - "name": "username", - "type": "LPWSTR" - } - ], - "NetSessionGetInfo": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "UncClientName", - "type": "LPWSTR" - }, - { - "name": "username", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetConnectionEnum": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "qualifier", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resume_handle", - "type": "LPDWORD" - } - ], - "NetFileClose": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "fileid", - "type": "DWORD" - } - ], - "NetFileEnum": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "basepath", - "type": "LPWSTR" - }, - { - "name": "username", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resume_handle", - "type": "PDWORD_PTR" - } - ], - "NetFileGetInfo": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "fileid", - "type": "DWORD" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lmstats.json b/qiling/extensions/windows_sdk/lmstats.json deleted file mode 100644 index f648ec774..000000000 --- a/qiling/extensions/windows_sdk/lmstats.json +++ /dev/null @@ -1,24 +0,0 @@ -{ - "NetStatisticsGet": [ - { - "name": "ServerName", - "type": "LPTSTR" - }, - { - "name": "Service", - "type": "LPTSTR" - }, - { - "name": "Level", - "type": "DWORD" - }, - { - "name": "Options", - "type": "DWORD" - }, - { - "name": "Buffer", - "type": "LPBYTE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lmuse.json b/qiling/extensions/windows_sdk/lmuse.json deleted file mode 100644 index f6389f757..000000000 --- a/qiling/extensions/windows_sdk/lmuse.json +++ /dev/null @@ -1,82 +0,0 @@ -{ - "NetUseAdd": [ - { - "name": "servername", - "type": "LPTSTR" - }, - { - "name": "LevelFlags", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetUseDel": [ - { - "name": "UncServerName", - "type": "LPWSTR" - }, - { - "name": "UseName", - "type": "LPWSTR" - }, - { - "name": "ForceLevelFlags", - "type": "DWORD" - } - ], - "NetUseEnum": [ - { - "name": "UncServerName", - "type": "LPWSTR" - }, - { - "name": "LevelFlags", - "type": "DWORD" - }, - { - "name": "BufPtr", - "type": "LPBYTE" - }, - { - "name": "PreferedMaximumSize", - "type": "DWORD" - }, - { - "name": "EntriesRead", - "type": "LPDWORD" - }, - { - "name": "TotalEntries", - "type": "LPDWORD" - }, - { - "name": "ResumeHandle", - "type": "LPDWORD" - } - ], - "NetUseGetInfo": [ - { - "name": "UncServerName", - "type": "LPWSTR" - }, - { - "name": "UseName", - "type": "LPWSTR" - }, - { - "name": "LevelFlags", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lmwksta.json b/qiling/extensions/windows_sdk/lmwksta.json deleted file mode 100644 index 0719058e3..000000000 --- a/qiling/extensions/windows_sdk/lmwksta.json +++ /dev/null @@ -1,158 +0,0 @@ -{ - "NetWkstaGetInfo": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetWkstaSetInfo": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buffer", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetWkstaUserGetInfo": [ - { - "name": "reserved", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - } - ], - "NetWkstaUserSetInfo": [ - { - "name": "reserved", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetWkstaUserEnum": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resumehandle", - "type": "LPDWORD" - } - ], - "NetWkstaTransportAdd": [ - { - "name": "servername", - "type": "LPTSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "buf", - "type": "LPBYTE" - }, - { - "name": "parm_err", - "type": "LPDWORD" - } - ], - "NetWkstaTransportDel": [ - { - "name": "servername", - "type": "LPWSTR" - }, - { - "name": "transportname", - "type": "LPWSTR" - }, - { - "name": "ucond", - "type": "DWORD" - } - ], - "NetWkstaTransportEnum": [ - { - "name": "servername", - "type": "LPTSTR" - }, - { - "name": "level", - "type": "DWORD" - }, - { - "name": "bufptr", - "type": "LPBYTE" - }, - { - "name": "prefmaxlen", - "type": "DWORD" - }, - { - "name": "entriesread", - "type": "LPDWORD" - }, - { - "name": "totalentries", - "type": "LPDWORD" - }, - { - "name": "resume_handle", - "type": "LPDWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/lowlevelmonitorconfigurationapi.json b/qiling/extensions/windows_sdk/lowlevelmonitorconfigurationapi.json deleted file mode 100644 index 289fcdf7a..000000000 --- a/qiling/extensions/windows_sdk/lowlevelmonitorconfigurationapi.json +++ /dev/null @@ -1,78 +0,0 @@ -{ - "GetVCPFeatureAndVCPFeatureReply": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "bVCPCode", - "type": "BYTE" - }, - { - "name": "pvct", - "type": "LPMC_VCP_CODE_TYPE" - }, - { - "name": "pdwCurrentValue", - "type": "LPDWORD" - }, - { - "name": "pdwMaximumValue", - "type": "LPDWORD" - } - ], - "SetVCPFeature": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "bVCPCode", - "type": "BYTE" - }, - { - "name": "dwNewValue", - "type": "DWORD" - } - ], - "SaveCurrentSettings": [ - { - "name": "hMonitor", - "type": "HANDLE" - } - ], - "GetCapabilitiesStringLength": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "pdwCapabilitiesStringLengthInCharacters", - "type": "LPDWORD" - } - ], - "CapabilitiesRequestAndCapabilitiesReply": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "pszASCIICapabilitiesString", - "type": "LPSTR" - }, - { - "name": "dwCapabilitiesStringLengthInCharacters", - "type": "DWORD" - } - ], - "GetTimingReport": [ - { - "name": "hMonitor", - "type": "HANDLE" - }, - { - "name": "pmtrMonitorTimingReport", - "type": "LPMC_TIMING_REPORT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/messagedispatcherapi.json b/qiling/extensions/windows_sdk/messagedispatcherapi.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/messagedispatcherapi.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mf.json b/qiling/extensions/windows_sdk/mf.json new file mode 100644 index 000000000..ba2fa52cf --- /dev/null +++ b/qiling/extensions/windows_sdk/mf.json @@ -0,0 +1,764 @@ +{ + "MFCreateMediaSession": [ + { + "name": "pConfiguration", + "type": "IMFAttributes" + }, + { + "name": "ppMediaSession", + "type": "IMFMediaSession" + } + ], + "MFCreatePMPMediaSession": [ + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "pConfiguration", + "type": "IMFAttributes" + }, + { + "name": "ppMediaSession", + "type": "IMFMediaSession" + }, + { + "name": "ppEnablerActivate", + "type": "IMFActivate" + } + ], + "MFCreateSourceResolver": [ + { + "name": "ppISourceResolver", + "type": "IMFSourceResolver" + } + ], + "CreatePropertyStore": [ + { + "name": "ppStore", + "type": "IPropertyStore" + } + ], + "MFGetSupportedSchemes": [ + { + "name": "pPropVarSchemeArray", + "type": "PROPVARIANT" + } + ], + "MFGetSupportedMimeTypes": [ + { + "name": "pPropVarMimeTypeArray", + "type": "PROPVARIANT" + } + ], + "MFCreateTopology": [ + { + "name": "ppTopo", + "type": "IMFTopology" + } + ], + "MFCreateTopologyNode": [ + { + "name": "NodeType", + "type": "MF_TOPOLOGY_TYPE" + }, + { + "name": "ppNode", + "type": "IMFTopologyNode" + } + ], + "MFGetTopoNodeCurrentType": [ + { + "name": "pNode", + "type": "IMFTopologyNode" + }, + { + "name": "dwStreamIndex", + "type": "DWORD" + }, + { + "name": "fOutput", + "type": "BOOL" + }, + { + "name": "ppType", + "type": "IMFMediaType" + } + ], + "MFGetService": [ + { + "name": "punkObject", + "type": "IUnknown" + }, + { + "name": "guidService", + "type": "GUID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "LPVOID" + } + ], + "MFCreatePresentationClock": [ + { + "name": "ppPresentationClock", + "type": "IMFPresentationClock" + } + ], + "MFCreateSystemTimeSource": [ + { + "name": "ppSystemTimeSource", + "type": "IMFPresentationTimeSource" + } + ], + "MFCreatePresentationDescriptor": [ + { + "name": "cStreamDescriptors", + "type": "DWORD" + }, + { + "name": "apStreamDescriptors", + "type": "IMFStreamDescriptor" + }, + { + "name": "ppPresentationDescriptor", + "type": "IMFPresentationDescriptor" + } + ], + "MFRequireProtectedEnvironment": [ + { + "name": "pPresentationDescriptor", + "type": "IMFPresentationDescriptor" + } + ], + "MFSerializePresentationDescriptor": [ + { + "name": "pPD", + "type": "IMFPresentationDescriptor" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "ppbData", + "type": "BYTE" + } + ], + "MFDeserializePresentationDescriptor": [ + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "ppPD", + "type": "IMFPresentationDescriptor" + } + ], + "MFCreateStreamDescriptor": [ + { + "name": "dwStreamIdentifier", + "type": "DWORD" + }, + { + "name": "cMediaTypes", + "type": "DWORD" + }, + { + "name": "apMediaTypes", + "type": "IMFMediaType" + }, + { + "name": "ppDescriptor", + "type": "IMFStreamDescriptor" + } + ], + "MFCreateSimpleTypeHandler": [ + { + "name": "ppHandler", + "type": "IMFMediaTypeHandler" + } + ], + "MFShutdownObject": [ + { + "name": "pUnk", + "type": "IUnknown" + } + ], + "MFCreateAudioRenderer": [ + { + "name": "pAudioAttributes", + "type": "IMFAttributes" + }, + { + "name": "ppSink", + "type": "IMFMediaSink" + } + ], + "MFCreateAudioRendererActivate": [ + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateVideoRendererActivate": [ + { + "name": "hwndVideo", + "type": "HWND" + }, + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateMPEG4MediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "pVideoMediaType", + "type": "IMFMediaType" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreate3GPMediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "pVideoMediaType", + "type": "IMFMediaType" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateMP3MediaSink": [ + { + "name": "pTargetByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateAC3MediaSink": [ + { + "name": "pTargetByteStream", + "type": "IMFByteStream" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateADTSMediaSink": [ + { + "name": "pTargetByteStream", + "type": "IMFByteStream" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateMuxSink": [ + { + "name": "guidOutputSubType", + "type": "GUID" + }, + { + "name": "pOutputAttributes", + "type": "IMFAttributes" + }, + { + "name": "pOutputByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppMuxSink", + "type": "IMFMediaSink" + } + ], + "MFCreateFMPEG4MediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "pVideoMediaType", + "type": "IMFMediaType" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateAVIMediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "pVideoMediaType", + "type": "IMFMediaType" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateWAVEMediaSink": [ + { + "name": "pTargetByteStream", + "type": "IMFByteStream" + }, + { + "name": "pAudioMediaType", + "type": "IMFMediaType" + }, + { + "name": "ppMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateTopoLoader": [ + { + "name": "ppObj", + "type": "IMFTopoLoader" + } + ], + "MFCreateSampleGrabberSinkActivate": [ + { + "name": "pIMFMediaType", + "type": "IMFMediaType" + }, + { + "name": "pIMFSampleGrabberSinkCallback", + "type": "IMFSampleGrabberSinkCallback" + }, + { + "name": "ppIActivate", + "type": "IMFActivate" + } + ], + "MFCreateStandardQualityManager": [ + { + "name": "ppQualityManager", + "type": "IMFQualityManager" + } + ], + "MFCreateSequencerSource": [ + { + "name": "pReserved", + "type": "IUnknown" + }, + { + "name": "ppSequencerSource", + "type": "IMFSequencerSource" + } + ], + "MFCreateSequencerSegmentOffset": [ + { + "name": "dwId", + "type": "MFSequencerElementId" + }, + { + "name": "hnsOffset", + "type": "MFTIME" + }, + { + "name": "pvarSegmentOffset", + "type": "PROPVARIANT" + } + ], + "MFCreateAggregateSource": [ + { + "name": "pSourceCollection", + "type": "IMFCollection" + }, + { + "name": "ppAggSource", + "type": "IMFMediaSource" + } + ], + "MFCreateCredentialCache": [ + { + "name": "ppCache", + "type": "IMFNetCredentialCache" + } + ], + "MFCreateProxyLocator": [ + { + "name": "pszProtocol", + "type": "LPCWSTR" + }, + { + "name": "pProxyConfig", + "type": "IPropertyStore" + }, + { + "name": "ppProxyLocator", + "type": "IMFNetProxyLocator" + } + ], + "MFCreateNetSchemePlugin": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvHandler", + "type": "LPVOID" + } + ], + "MFCreatePMPServer": [ + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "ppPMPServer", + "type": "IMFPMPServer" + } + ], + "MFCreateRemoteDesktopPlugin": [ + { + "name": "ppPlugin", + "type": "IMFRemoteDesktopPlugin" + } + ], + "CreateNamedPropertyStore": [ + { + "name": "ppStore", + "type": "INamedPropertyStore" + } + ], + "MFCreateSampleCopierMFT": [ + { + "name": "ppCopierMFT", + "type": "IMFTransform" + } + ], + "MFCreateTranscodeProfile": [ + { + "name": "ppTranscodeProfile", + "type": "IMFTranscodeProfile" + } + ], + "MFCreateTranscodeTopology": [ + { + "name": "pSrc", + "type": "IMFMediaSource" + }, + { + "name": "pwszOutputFilePath", + "type": "LPCWSTR" + }, + { + "name": "pProfile", + "type": "IMFTranscodeProfile" + }, + { + "name": "ppTranscodeTopo", + "type": "IMFTopology" + } + ], + "MFCreateTranscodeTopologyFromByteStream": [ + { + "name": "pSrc", + "type": "IMFMediaSource" + }, + { + "name": "pOutputStream", + "type": "IMFByteStream" + }, + { + "name": "pProfile", + "type": "IMFTranscodeProfile" + }, + { + "name": "ppTranscodeTopo", + "type": "IMFTopology" + } + ], + "MFTranscodeGetAudioOutputAvailableTypes": [ + { + "name": "guidSubType", + "type": "GUID" + }, + { + "name": "dwMFTFlags", + "type": "DWORD" + }, + { + "name": "pCodecConfig", + "type": "IMFAttributes" + }, + { + "name": "ppAvailableTypes", + "type": "IMFCollection" + } + ], + "MFCreateTranscodeSinkActivate": [ + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateTrackedSample": [ + { + "name": "ppMFSample", + "type": "IMFTrackedSample" + } + ], + "MFCreateMFByteStreamOnStream": [ + { + "name": "pStream", + "type": "IStream" + }, + { + "name": "ppByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateStreamOnMFByteStream": [ + { + "name": "pByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppStream", + "type": "IStream" + } + ], + "MFCreateMFByteStreamOnStreamEx": [ + { + "name": "punkStream", + "type": "IUnknown" + }, + { + "name": "ppByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateStreamOnMFByteStreamEx": [ + { + "name": "pByteStream", + "type": "IMFByteStream" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "MFCreateMediaTypeFromProperties": [ + { + "name": "punkStream", + "type": "IUnknown" + }, + { + "name": "ppMediaType", + "type": "IMFMediaType" + } + ], + "MFCreatePropertiesFromMediaType": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "MFEnumDeviceSources": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pppSourceActivate", + "type": "IMFActivate" + }, + { + "name": "pcSourceActivate", + "type": "UINT32" + } + ], + "MFCreateDeviceSource": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "ppSource", + "type": "IMFMediaSource" + } + ], + "MFCreateDeviceSourceActivate": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateProtectedEnvironmentAccess": [ + { + "name": "ppAccess", + "type": "IMFProtectedEnvironmentAccess" + } + ], + "MFLoadSignedLibrary": [ + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "ppLib", + "type": "IMFSignedLibrary" + } + ], + "MFGetSystemId": [ + { + "name": "ppId", + "type": "IMFSystemId" + } + ], + "MFGetLocalId": [ + { + "name": "verifier", + "type": "BYTE" + }, + { + "name": "size", + "type": "UINT32" + }, + { + "name": "id", + "type": "LPWSTR" + } + ], + "MFCreateContentProtectionDevice": [ + { + "name": "ProtectionSystemId", + "type": "GUID" + }, + { + "name": "ContentProtectionDevice", + "type": "IMFContentProtectionDevice" + } + ], + "MFIsContentProtectionDeviceSupported": [ + { + "name": "ProtectionSystemId", + "type": "GUID" + }, + { + "name": "isSupported", + "type": "BOOL" + } + ], + "MFCreateContentDecryptorContext": [ + { + "name": "guidMediaProtectionSystemId", + "type": "GUID" + }, + { + "name": "pD3DManager", + "type": "IMFDXGIDeviceManager" + }, + { + "name": "pContentProtectionDevice", + "type": "IMFContentProtectionDevice" + }, + { + "name": "ppContentDecryptorContext", + "type": "IMFContentDecryptorContext" + } + ], + "MFCreateSensorProfile": [ + { + "name": "ProfileType", + "type": "GUID" + }, + { + "name": "ProfileIndex", + "type": "UINT32" + }, + { + "name": "Constraints", + "type": "LPCWSTR" + }, + { + "name": "ppProfile", + "type": "IMFSensorProfile" + } + ], + "MFCreateSensorProfileCollection": [ + { + "name": "ppSensorProfile", + "type": "IMFSensorProfileCollection" + } + ], + "MFCreateSensorActivityMonitor": [ + { + "name": "pCallback", + "type": "IMFSensorActivitiesReportCallback" + }, + { + "name": "ppActivityMonitor", + "type": "IMFSensorActivityMonitor" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mfobjects.json b/qiling/extensions/windows_sdk/mfobjects.json deleted file mode 100644 index e663f9e5e..000000000 --- a/qiling/extensions/windows_sdk/mfobjects.json +++ /dev/null @@ -1,30 +0,0 @@ -{ - "MFSerializeAttributesToStream": [ - { - "name": "pAttr", - "type": "IMFAttributes" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "pStm", - "type": "IStream" - } - ], - "MFDeserializeAttributesFromStream": [ - { - "name": "pAttr", - "type": "IMFAttributes" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "pStm", - "type": "IStream" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mfplat.json b/qiling/extensions/windows_sdk/mfplat.json new file mode 100644 index 000000000..7f7bc7db9 --- /dev/null +++ b/qiling/extensions/windows_sdk/mfplat.json @@ -0,0 +1,1702 @@ +{ + "MFStartup": [ + { + "name": "Version", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MFPutWorkItem": [ + { + "name": "dwQueue", + "type": "DWORD" + }, + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pState", + "type": "IUnknown" + } + ], + "MFPutWorkItem2": [ + { + "name": "dwQueue", + "type": "DWORD" + }, + { + "name": "Priority", + "type": "LONG" + }, + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pState", + "type": "IUnknown" + } + ], + "MFPutWorkItemEx": [ + { + "name": "dwQueue", + "type": "DWORD" + }, + { + "name": "pResult", + "type": "IMFAsyncResult" + } + ], + "MFPutWorkItemEx2": [ + { + "name": "dwQueue", + "type": "DWORD" + }, + { + "name": "Priority", + "type": "LONG" + }, + { + "name": "pResult", + "type": "IMFAsyncResult" + } + ], + "MFPutWaitingWorkItem": [ + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "Priority", + "type": "LONG" + }, + { + "name": "pResult", + "type": "IMFAsyncResult" + }, + { + "name": "pKey", + "type": "MFWORKITEM_KEY" + } + ], + "MFAllocateSerialWorkQueue": [ + { + "name": "dwWorkQueue", + "type": "DWORD" + }, + { + "name": "pdwWorkQueue", + "type": "DWORD" + } + ], + "MFScheduleWorkItemEx": [ + { + "name": "pResult", + "type": "IMFAsyncResult" + }, + { + "name": "Timeout", + "type": "INT64" + }, + { + "name": "pKey", + "type": "MFWORKITEM_KEY" + } + ], + "MFScheduleWorkItem": [ + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pState", + "type": "IUnknown" + }, + { + "name": "Timeout", + "type": "INT64" + }, + { + "name": "pKey", + "type": "MFWORKITEM_KEY" + } + ], + "MFCancelWorkItem": [ + { + "name": "Key", + "type": "MFWORKITEM_KEY" + } + ], + "MFGetTimerPeriodicity": [ + { + "name": "Periodicity", + "type": "DWORD" + } + ], + "MFAddPeriodicCallback": [ + { + "name": "Callback", + "type": "MFPERIODICCALLBACK" + }, + { + "name": "pContext", + "type": "IUnknown" + }, + { + "name": "pdwKey", + "type": "DWORD" + } + ], + "MFRemovePeriodicCallback": [ + { + "name": "dwKey", + "type": "DWORD" + } + ], + "MFAllocateWorkQueueEx": [ + { + "name": "WorkQueueType", + "type": "MFASYNC_WORKQUEUE_TYPE" + }, + { + "name": "pdwWorkQueue", + "type": "DWORD" + } + ], + "MFAllocateWorkQueue": [ + { + "name": "pdwWorkQueue", + "type": "DWORD" + } + ], + "MFLockWorkQueue": [ + { + "name": "dwWorkQueue", + "type": "DWORD" + } + ], + "MFUnlockWorkQueue": [ + { + "name": "dwWorkQueue", + "type": "DWORD" + } + ], + "MFBeginRegisterWorkQueueWithMMCSS": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "wszClass", + "type": "LPCWSTR" + }, + { + "name": "dwTaskId", + "type": "DWORD" + }, + { + "name": "pDoneCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pDoneState", + "type": "IUnknown" + } + ], + "MFBeginRegisterWorkQueueWithMMCSSEx": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "wszClass", + "type": "LPCWSTR" + }, + { + "name": "dwTaskId", + "type": "DWORD" + }, + { + "name": "lPriority", + "type": "LONG" + }, + { + "name": "pDoneCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pDoneState", + "type": "IUnknown" + } + ], + "MFEndRegisterWorkQueueWithMMCSS": [ + { + "name": "pResult", + "type": "IMFAsyncResult" + }, + { + "name": "pdwTaskId", + "type": "DWORD" + } + ], + "MFBeginUnregisterWorkQueueWithMMCSS": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "pDoneCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pDoneState", + "type": "IUnknown" + } + ], + "MFEndUnregisterWorkQueueWithMMCSS": [ + { + "name": "pResult", + "type": "IMFAsyncResult" + } + ], + "MFGetWorkQueueMMCSSClass": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "pwszClass", + "type": "LPWSTR" + }, + { + "name": "pcchClass", + "type": "DWORD" + } + ], + "MFGetWorkQueueMMCSSTaskId": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "pdwTaskId", + "type": "LPDWORD" + } + ], + "MFRegisterPlatformWithMMCSS": [ + { + "name": "wszClass", + "type": "PCWSTR" + }, + { + "name": "pdwTaskId", + "type": "DWORD" + }, + { + "name": "lPriority", + "type": "LONG" + } + ], + "MFLockSharedWorkQueue": [ + { + "name": "wszClass", + "type": "PCWSTR" + }, + { + "name": "BasePriority", + "type": "LONG" + }, + { + "name": "pdwTaskId", + "type": "DWORD" + }, + { + "name": "pID", + "type": "DWORD" + } + ], + "MFGetWorkQueueMMCSSPriority": [ + { + "name": "dwWorkQueueId", + "type": "DWORD" + }, + { + "name": "lPriority", + "type": "LONG" + } + ], + "MFCreateAsyncResult": [ + { + "name": "punkObject", + "type": "IUnknown" + }, + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "punkState", + "type": "IUnknown" + }, + { + "name": "ppAsyncResult", + "type": "IMFAsyncResult" + } + ], + "MFInvokeCallback": [ + { + "name": "pAsyncResult", + "type": "IMFAsyncResult" + } + ], + "MFCreateFile": [ + { + "name": "AccessMode", + "type": "MF_FILE_ACCESSMODE" + }, + { + "name": "OpenMode", + "type": "MF_FILE_OPENMODE" + }, + { + "name": "fFlags", + "type": "MF_FILE_FLAGS" + }, + { + "name": "pwszFileURL", + "type": "LPCWSTR" + }, + { + "name": "ppIByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateTempFile": [ + { + "name": "AccessMode", + "type": "MF_FILE_ACCESSMODE" + }, + { + "name": "OpenMode", + "type": "MF_FILE_OPENMODE" + }, + { + "name": "fFlags", + "type": "MF_FILE_FLAGS" + }, + { + "name": "ppIByteStream", + "type": "IMFByteStream" + } + ], + "MFBeginCreateFile": [ + { + "name": "AccessMode", + "type": "MF_FILE_ACCESSMODE" + }, + { + "name": "OpenMode", + "type": "MF_FILE_OPENMODE" + }, + { + "name": "fFlags", + "type": "MF_FILE_FLAGS" + }, + { + "name": "pwszFilePath", + "type": "LPCWSTR" + }, + { + "name": "pCallback", + "type": "IMFAsyncCallback" + }, + { + "name": "pState", + "type": "IUnknown" + }, + { + "name": "ppCancelCookie", + "type": "IUnknown" + } + ], + "MFEndCreateFile": [ + { + "name": "pResult", + "type": "IMFAsyncResult" + }, + { + "name": "ppFile", + "type": "IMFByteStream" + } + ], + "MFCancelCreateFile": [ + { + "name": "pCancelCookie", + "type": "IUnknown" + } + ], + "MFCreateMemoryBuffer": [ + { + "name": "cbMaxLength", + "type": "DWORD" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateMediaBufferWrapper": [ + { + "name": "pBuffer", + "type": "IMFMediaBuffer" + }, + { + "name": "cbOffset", + "type": "DWORD" + }, + { + "name": "dwLength", + "type": "DWORD" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateLegacyMediaBufferOnMFMediaBuffer": [ + { + "name": "pSample", + "type": "IMFSample" + }, + { + "name": "pMFMediaBuffer", + "type": "IMFMediaBuffer" + }, + { + "name": "cbOffset", + "type": "DWORD" + }, + { + "name": "ppMediaBuffer", + "type": "IMediaBuffer" + } + ], + "MFMapDX9FormatToDXGIFormat": [ + { + "name": "dx9", + "type": "DWORD" + } + ], + "MFMapDXGIFormatToDX9Format": [ + { + "name": "dx11", + "type": "DXGI_FORMAT" + } + ], + "MFLockDXGIDeviceManager": [ + { + "name": "pResetToken", + "type": "UINT" + }, + { + "name": "ppManager", + "type": "IMFDXGIDeviceManager" + } + ], + "MFCreateDXSurfaceBuffer": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "punkSurface", + "type": "IUnknown" + }, + { + "name": "fBottomUpWhenLinear", + "type": "BOOL" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateWICBitmapBuffer": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "punkSurface", + "type": "IUnknown" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateDXGISurfaceBuffer": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "punkSurface", + "type": "IUnknown" + }, + { + "name": "uSubresourceIndex", + "type": "UINT" + }, + { + "name": "fBottomUpWhenLinear", + "type": "BOOL" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateVideoSampleAllocatorEx": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppSampleAllocator", + "type": "void" + } + ], + "MFCreateDXGIDeviceManager": [ + { + "name": "resetToken", + "type": "UINT" + }, + { + "name": "ppDeviceManager", + "type": "IMFDXGIDeviceManager" + } + ], + "MFCreateAlignedMemoryBuffer": [ + { + "name": "cbMaxLength", + "type": "DWORD" + }, + { + "name": "cbAligment", + "type": "DWORD" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateMediaEvent": [ + { + "name": "met", + "type": "MediaEventType" + }, + { + "name": "guidExtendedType", + "type": "GUID" + }, + { + "name": "hrStatus", + "type": "HRESULT" + }, + { + "name": "pvValue", + "type": "PROPVARIANT" + }, + { + "name": "ppEvent", + "type": "IMFMediaEvent" + } + ], + "MFCreateEventQueue": [ + { + "name": "ppMediaEventQueue", + "type": "IMFMediaEventQueue" + } + ], + "MFCreateSample": [ + { + "name": "ppIMFSample", + "type": "IMFSample" + } + ], + "MFCreateAttributes": [ + { + "name": "ppMFAttributes", + "type": "IMFAttributes" + }, + { + "name": "cInitialSize", + "type": "UINT32" + } + ], + "MFInitAttributesFromBlob": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pBuf", + "type": "UINT8" + }, + { + "name": "cbBufSize", + "type": "UINT" + } + ], + "MFGetAttributesAsBlobSize": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pcbBufSize", + "type": "UINT32" + } + ], + "MFGetAttributesAsBlob": [ + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pBuf", + "type": "UINT8" + }, + { + "name": "cbBufSize", + "type": "UINT" + } + ], + "MFTRegister": [ + { + "name": "clsidMFT", + "type": "CLSID" + }, + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "pszName", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "cInputTypes", + "type": "UINT32" + }, + { + "name": "pInputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "cOutputTypes", + "type": "UINT32" + }, + { + "name": "pOutputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pAttributes", + "type": "IMFAttributes" + } + ], + "MFTUnregister": [ + { + "name": "clsidMFT", + "type": "CLSID" + } + ], + "MFTRegisterLocal": [ + { + "name": "pClassFactory", + "type": "IClassFactory" + }, + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "cInputTypes", + "type": "UINT32" + }, + { + "name": "pInputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "cOutputTypes", + "type": "UINT32" + }, + { + "name": "pOutputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + } + ], + "MFTUnregisterLocal": [ + { + "name": "pClassFactory", + "type": "IClassFactory" + } + ], + "MFTRegisterLocalByCLSID": [ + { + "name": "clisdMFT", + "type": "IID" + }, + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "cInputTypes", + "type": "UINT32" + }, + { + "name": "pInputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "cOutputTypes", + "type": "UINT32" + }, + { + "name": "pOutputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + } + ], + "MFTUnregisterLocalByCLSID": [ + { + "name": "clsidMFT", + "type": "CLSID" + } + ], + "MFTEnum": [ + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "pInputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pOutputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "ppclsidMFT", + "type": "CLSID" + }, + { + "name": "pcMFTs", + "type": "UINT32" + } + ], + "MFTEnumEx": [ + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "pInputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pOutputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pppMFTActivate", + "type": "IMFActivate" + }, + { + "name": "pnumMFTActivate", + "type": "UINT32" + } + ], + "MFTEnum2": [ + { + "name": "guidCategory", + "type": "GUID" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "pInputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pOutputType", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pAttributes", + "type": "IMFAttributes" + }, + { + "name": "pppMFTActivate", + "type": "IMFActivate" + }, + { + "name": "pnumMFTActivate", + "type": "UINT32" + } + ], + "MFTGetInfo": [ + { + "name": "clsidMFT", + "type": "CLSID" + }, + { + "name": "pszName", + "type": "LPWSTR" + }, + { + "name": "ppInputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pcInputTypes", + "type": "UINT32" + }, + { + "name": "ppOutputTypes", + "type": "MFT_REGISTER_TYPE_INFO" + }, + { + "name": "pcOutputTypes", + "type": "UINT32" + }, + { + "name": "ppAttributes", + "type": "IMFAttributes" + } + ], + "MFGetPluginControl": [ + { + "name": "ppPluginControl", + "type": "IMFPluginControl" + } + ], + "MFGetMFTMerit": [ + { + "name": "pMFT", + "type": "IUnknown" + }, + { + "name": "cbVerifier", + "type": "UINT32" + }, + { + "name": "verifier", + "type": "BYTE" + }, + { + "name": "merit", + "type": "DWORD" + } + ], + "MFRegisterLocalSchemeHandler": [ + { + "name": "szScheme", + "type": "PCWSTR" + }, + { + "name": "pActivate", + "type": "IMFActivate" + } + ], + "MFRegisterLocalByteStreamHandler": [ + { + "name": "szFileExtension", + "type": "PCWSTR" + }, + { + "name": "szMimeType", + "type": "PCWSTR" + }, + { + "name": "pActivate", + "type": "IMFActivate" + } + ], + "MFCreateMFByteStreamWrapper": [ + { + "name": "pStream", + "type": "IMFByteStream" + }, + { + "name": "ppStreamWrapper", + "type": "IMFByteStream" + } + ], + "MFCreateMediaExtensionActivate": [ + { + "name": "szActivatableClassId", + "type": "PCWSTR" + }, + { + "name": "pConfiguration", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "LPVOID" + } + ], + "MFCreateMuxStreamAttributes": [ + { + "name": "pAttributesToMux", + "type": "IMFCollection" + }, + { + "name": "ppMuxAttribs", + "type": "IMFAttributes" + } + ], + "MFCreateMuxStreamMediaType": [ + { + "name": "pMediaTypesToMux", + "type": "IMFCollection" + }, + { + "name": "ppMuxMediaType", + "type": "IMFMediaType" + } + ], + "MFCreateMuxStreamSample": [ + { + "name": "pSamplesToMux", + "type": "IMFCollection" + }, + { + "name": "ppMuxSample", + "type": "IMFSample" + } + ], + "MFValidateMediaTypeSize": [ + { + "name": "FormatType", + "type": "GUID" + }, + { + "name": "pBlock", + "type": "UINT8" + }, + { + "name": "cbSize", + "type": "UINT32" + } + ], + "MFCreateMediaType": [ + { + "name": "ppMFType", + "type": "IMFMediaType" + } + ], + "MFCreateMFVideoFormatFromMFMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "ppMFVF", + "type": "MFVIDEOFORMAT" + }, + { + "name": "pcbSize", + "type": "UINT32" + } + ], + "MFCreateWaveFormatExFromMFMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "ppWF", + "type": "WAVEFORMATEX" + }, + { + "name": "pcbSize", + "type": "UINT32" + }, + { + "name": "Flags", + "type": "UINT32" + } + ], + "MFInitMediaTypeFromVideoInfoHeader": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pVIH", + "type": "VIDEOINFOHEADER" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pSubtype", + "type": "GUID" + } + ], + "MFInitMediaTypeFromVideoInfoHeader2": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pVIH2", + "type": "VIDEOINFOHEADER2" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pSubtype", + "type": "GUID" + } + ], + "MFInitMediaTypeFromMPEG1VideoInfo": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pMP1VI", + "type": "MPEG1VIDEOINFO" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pSubtype", + "type": "GUID" + } + ], + "MFInitMediaTypeFromMPEG2VideoInfo": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pMP2VI", + "type": "MPEG2VIDEOINFO" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pSubtype", + "type": "GUID" + } + ], + "MFCalculateBitmapImageSize": [ + { + "name": "pBMIH", + "type": "BITMAPINFOHEADER" + }, + { + "name": "cbBufSize", + "type": "UINT32" + }, + { + "name": "pcbImageSize", + "type": "UINT32" + }, + { + "name": "pbKnown", + "type": "BOOL" + } + ], + "MFCalculateImageSize": [ + { + "name": "guidSubtype", + "type": "GUID" + }, + { + "name": "unWidth", + "type": "UINT32" + }, + { + "name": "unHeight", + "type": "UINT32" + }, + { + "name": "pcbImageSize", + "type": "UINT32" + } + ], + "MFFrameRateToAverageTimePerFrame": [ + { + "name": "unNumerator", + "type": "UINT32" + }, + { + "name": "unDenominator", + "type": "UINT32" + }, + { + "name": "punAverageTimePerFrame", + "type": "UINT64" + } + ], + "MFAverageTimePerFrameToFrameRate": [ + { + "name": "unAverageTimePerFrame", + "type": "UINT64" + }, + { + "name": "punNumerator", + "type": "UINT32" + }, + { + "name": "punDenominator", + "type": "UINT32" + } + ], + "MFInitMediaTypeFromMFVideoFormat": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pMFVF", + "type": "MFVIDEOFORMAT" + }, + { + "name": "cbBufSize", + "type": "UINT32" + } + ], + "MFInitMediaTypeFromWaveFormatEx": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pWaveFormat", + "type": "WAVEFORMATEX" + }, + { + "name": "cbBufSize", + "type": "UINT32" + } + ], + "MFInitMediaTypeFromAMMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "pAMType", + "type": "AM_MEDIA_TYPE" + } + ], + "MFInitAMMediaTypeFromMFMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "guidFormatBlockType", + "type": "GUID" + }, + { + "name": "pAMType", + "type": "AM_MEDIA_TYPE" + } + ], + "MFCreateAMMediaTypeFromMFMediaType": [ + { + "name": "pMFType", + "type": "IMFMediaType" + }, + { + "name": "guidFormatBlockType", + "type": "GUID" + }, + { + "name": "ppAMType", + "type": "AM_MEDIA_TYPE" + } + ], + "MFCompareFullToPartialMediaType": [ + { + "name": "pMFTypeFull", + "type": "IMFMediaType" + }, + { + "name": "pMFTypePartial", + "type": "IMFMediaType" + } + ], + "MFWrapMediaType": [ + { + "name": "pOrig", + "type": "IMFMediaType" + }, + { + "name": "MajorType", + "type": "GUID" + }, + { + "name": "SubType", + "type": "GUID" + }, + { + "name": "ppWrap", + "type": "IMFMediaType" + } + ], + "MFUnwrapMediaType": [ + { + "name": "pWrap", + "type": "IMFMediaType" + }, + { + "name": "ppOrig", + "type": "IMFMediaType" + } + ], + "MFCreateVideoMediaType": [ + { + "name": "pVideoFormat", + "type": "MFVIDEOFORMAT" + }, + { + "name": "ppIVideoMediaType", + "type": "IMFVideoMediaType" + } + ], + "MFCreateVideoMediaTypeFromSubtype": [ + { + "name": "pAMSubtype", + "type": "GUID" + }, + { + "name": "ppIVideoMediaType", + "type": "IMFVideoMediaType" + } + ], + "MFIsFormatYUV": [ + { + "name": "Format", + "type": "DWORD" + } + ], + "MFCreateVideoMediaTypeFromBitMapInfoHeader": [ + { + "name": "pbmihBitMapInfoHeader", + "type": "BITMAPINFOHEADER" + }, + { + "name": "dwPixelAspectRatioX", + "type": "DWORD" + }, + { + "name": "dwPixelAspectRatioY", + "type": "DWORD" + }, + { + "name": "InterlaceMode", + "type": "MFVideoInterlaceMode" + }, + { + "name": "VideoFlags", + "type": "QWORD" + }, + { + "name": "qwFramesPerSecondNumerator", + "type": "QWORD" + }, + { + "name": "qwFramesPerSecondDenominator", + "type": "QWORD" + }, + { + "name": "dwMaxBitRate", + "type": "DWORD" + }, + { + "name": "ppIVideoMediaType", + "type": "IMFVideoMediaType" + } + ], + "MFGetStrideForBitmapInfoHeader": [ + { + "name": "format", + "type": "DWORD" + }, + { + "name": "dwWidth", + "type": "DWORD" + }, + { + "name": "pStride", + "type": "LONG" + } + ], + "MFGetPlaneSize": [ + { + "name": "format", + "type": "DWORD" + }, + { + "name": "dwWidth", + "type": "DWORD" + }, + { + "name": "dwHeight", + "type": "DWORD" + }, + { + "name": "pdwPlaneSize", + "type": "DWORD" + } + ], + "MFCreateVideoMediaTypeFromBitMapInfoHeaderEx": [ + { + "name": "pbmihBitMapInfoHeader", + "type": "BITMAPINFOHEADER" + }, + { + "name": "cbBitMapInfoHeader", + "type": "UINT32" + }, + { + "name": "dwPixelAspectRatioX", + "type": "DWORD" + }, + { + "name": "dwPixelAspectRatioY", + "type": "DWORD" + }, + { + "name": "InterlaceMode", + "type": "MFVideoInterlaceMode" + }, + { + "name": "VideoFlags", + "type": "QWORD" + }, + { + "name": "dwFramesPerSecondNumerator", + "type": "DWORD" + }, + { + "name": "dwFramesPerSecondDenominator", + "type": "DWORD" + }, + { + "name": "dwMaxBitRate", + "type": "DWORD" + }, + { + "name": "ppIVideoMediaType", + "type": "IMFVideoMediaType" + } + ], + "MFCreateMediaTypeFromRepresentation": [ + { + "name": "guidRepresentation", + "type": "GUID" + }, + { + "name": "pvRepresentation", + "type": "LPVOID" + }, + { + "name": "ppIMediaType", + "type": "IMFMediaType" + } + ], + "MFCreateAudioMediaType": [ + { + "name": "pAudioFormat", + "type": "WAVEFORMATEX" + }, + { + "name": "ppIAudioMediaType", + "type": "IMFAudioMediaType" + } + ], + "MFGetUncompressedVideoFormat": [ + { + "name": "pVideoFormat", + "type": "MFVIDEOFORMAT" + } + ], + "MFInitVideoFormat": [ + { + "name": "pVideoFormat", + "type": "MFVIDEOFORMAT" + }, + { + "name": "type", + "type": "MFStandardVideoFormat" + } + ], + "MFInitVideoFormat_RGB": [ + { + "name": "pVideoFormat", + "type": "MFVIDEOFORMAT" + }, + { + "name": "dwWidth", + "type": "DWORD" + }, + { + "name": "dwHeight", + "type": "DWORD" + }, + { + "name": "D3Dfmt", + "type": "DWORD" + } + ], + "MFConvertColorInfoToDXVA": [ + { + "name": "pdwToDXVA", + "type": "DWORD" + }, + { + "name": "pFromFormat", + "type": "MFVIDEOFORMAT" + } + ], + "MFConvertColorInfoFromDXVA": [ + { + "name": "pToFormat", + "type": "MFVIDEOFORMAT" + }, + { + "name": "dwFromDXVA", + "type": "DWORD" + } + ], + "MFCopyImage": [ + { + "name": "pDest", + "type": "BYTE" + }, + { + "name": "lDestStride", + "type": "LONG" + }, + { + "name": "pSrc", + "type": "BYTE" + }, + { + "name": "lSrcStride", + "type": "LONG" + }, + { + "name": "dwWidthInBytes", + "type": "DWORD" + }, + { + "name": "dwLines", + "type": "DWORD" + } + ], + "MFConvertFromFP16Array": [ + { + "name": "pDest", + "type": "float" + }, + { + "name": "pSrc", + "type": "WORD" + }, + { + "name": "dwCount", + "type": "DWORD" + } + ], + "MFConvertToFP16Array": [ + { + "name": "pDest", + "type": "WORD" + }, + { + "name": "pSrc", + "type": "float" + }, + { + "name": "dwCount", + "type": "DWORD" + } + ], + "MFCreate2DMediaBuffer": [ + { + "name": "dwWidth", + "type": "DWORD" + }, + { + "name": "dwHeight", + "type": "DWORD" + }, + { + "name": "dwFourCC", + "type": "DWORD" + }, + { + "name": "fBottomUp", + "type": "BOOL" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFCreateMediaBufferFromMediaType": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "llDuration", + "type": "LONGLONG" + }, + { + "name": "dwMinLength", + "type": "DWORD" + }, + { + "name": "dwMinAlignment", + "type": "DWORD" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFHeapFree": [ + { + "name": "pv", + "type": "void" + } + ], + "MFllMulDiv": [ + { + "name": "a", + "type": "LONGLONG" + }, + { + "name": "b", + "type": "LONGLONG" + }, + { + "name": "c", + "type": "LONGLONG" + }, + { + "name": "d", + "type": "LONGLONG" + } + ], + "MFGetContentProtectionSystemCLSID": [ + { + "name": "guidProtectionSystemID", + "type": "GUID" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "MFCombineSamples": [ + { + "name": "pSample", + "type": "IMFSample" + }, + { + "name": "pSampleToAdd", + "type": "IMFSample" + }, + { + "name": "dwMaxMergedDurationInMS", + "type": "DWORD" + }, + { + "name": "pMerged", + "type": "BOOL" + } + ], + "MFSplitSample": [ + { + "name": "pSample", + "type": "IMFSample" + }, + { + "name": "pOutputSamples", + "type": "IMFSample" + }, + { + "name": "dwOutputSampleMaxCount", + "type": "DWORD" + }, + { + "name": "pdwOutputSampleCount", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mftransform.json b/qiling/extensions/windows_sdk/mftransform.json deleted file mode 100644 index 7267ced04..000000000 --- a/qiling/extensions/windows_sdk/mftransform.json +++ /dev/null @@ -1,8 +0,0 @@ -{ - "MFCreateTransformActivate": [ - { - "name": "ppActivate", - "type": "IMFActivate" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/midles.json b/qiling/extensions/windows_sdk/midles.json deleted file mode 100644 index 7a194ea02..000000000 --- a/qiling/extensions/windows_sdk/midles.json +++ /dev/null @@ -1,166 +0,0 @@ -{ - "MesEncodeIncrementalHandleCreate": [ - { - "name": "UserState", - "type": "void" - }, - { - "name": "AllocFn", - "type": "MIDL_ES_ALLOC" - }, - { - "name": "WriteFn", - "type": "MIDL_ES_WRITE" - }, - { - "name": "pHandle", - "type": "handle_t" - } - ], - "MesDecodeIncrementalHandleCreate": [ - { - "name": "UserState", - "type": "void" - }, - { - "name": "ReadFn", - "type": "MIDL_ES_READ" - }, - { - "name": "pHandle", - "type": "handle_t" - } - ], - "MesIncrementalHandleReset": [ - { - "name": "Handle", - "type": "handle_t" - }, - { - "name": "UserState", - "type": "void" - }, - { - "name": "AllocFn", - "type": "MIDL_ES_ALLOC" - }, - { - "name": "WriteFn", - "type": "MIDL_ES_WRITE" - }, - { - "name": "ReadFn", - "type": "MIDL_ES_READ" - }, - { - "name": "Operation", - "type": "MIDL_ES_CODE" - } - ], - "MesEncodeFixedBufferHandleCreate": [ - { - "name": "pBuffer", - "type": "char" - }, - { - "name": "BufferSize", - "type": "unsigned long" - }, - { - "name": "pEncodedSize", - "type": "unsigned long" - }, - { - "name": "pHandle", - "type": "handle_t" - } - ], - "MesEncodeDynBufferHandleCreate": [ - { - "name": "pBuffer", - "type": "char" - }, - { - "name": "pEncodedSize", - "type": "unsigned long" - }, - { - "name": "pHandle", - "type": "handle_t" - } - ], - "MesDecodeBufferHandleCreate": [ - { - "name": "Buffer", - "type": "char" - }, - { - "name": "BufferSize", - "type": "unsigned long" - }, - { - "name": "pHandle", - "type": "handle_t" - } - ], - "MesBufferHandleReset": [ - { - "name": "Handle", - "type": "handle_t" - }, - { - "name": "HandleStyle", - "type": "unsigned long" - }, - { - "name": "Operation", - "type": "MIDL_ES_CODE" - }, - { - "name": "pBuffer", - "type": "char" - }, - { - "name": "BufferSize", - "type": "unsigned long" - }, - { - "name": "pEncodedSize", - "type": "unsigned long" - } - ], - "MesHandleFree": [ - { - "name": "Handle", - "type": "handle_t" - } - ], - "MesInqProcEncodingId": [ - { - "name": "Handle", - "type": "handle_t" - }, - { - "name": "pInterfaceId", - "type": "PRPC_SYNTAX_IDENTIFIER" - }, - { - "name": "pProcNum", - "type": "unsigned long" - } - ], - "NdrMesProcEncodeDecode2": [ - { - "name": "Handle", - "type": "handle_t" - }, - { - "name": "pStubDesc", - "type": "MIDL_STUB_DESC" - }, - { - "name": "pFormatString", - "type": "PFORMAT_STRING" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/minidumpapiset.json b/qiling/extensions/windows_sdk/minidumpapiset.json deleted file mode 100644 index 0b798e86d..000000000 --- a/qiling/extensions/windows_sdk/minidumpapiset.json +++ /dev/null @@ -1,54 +0,0 @@ -{ - "MiniDumpWriteDump": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "ProcessId", - "type": "DWORD" - }, - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "DumpType", - "type": "MINIDUMP_TYPE" - }, - { - "name": "ExceptionParam", - "type": "PMINIDUMP_EXCEPTION_INFORMATION" - }, - { - "name": "UserStreamParam", - "type": "PMINIDUMP_USER_STREAM_INFORMATION" - }, - { - "name": "CallbackParam", - "type": "PMINIDUMP_CALLBACK_INFORMATION" - } - ], - "MiniDumpReadDumpStream": [ - { - "name": "BaseOfDump", - "type": "PVOID" - }, - { - "name": "StreamNumber", - "type": "ULONG" - }, - { - "name": "Dir", - "type": "PMINIDUMP_DIRECTORY" - }, - { - "name": "StreamPointer", - "type": "PVOID" - }, - { - "name": "StreamSize", - "type": "ULONG" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mmeapi.json b/qiling/extensions/windows_sdk/mmeapi.json deleted file mode 100644 index 8e114b2f2..000000000 --- a/qiling/extensions/windows_sdk/mmeapi.json +++ /dev/null @@ -1,1142 +0,0 @@ -{ - "waveOutGetNumDevs": [ - { - "name": "VOID", - "type": "void" - } - ], - "waveOutGetVolume": [ - { - "name": "hwo", - "type": "HWAVEOUT" - }, - { - "name": "pdwVolume", - "type": "LPDWORD" - } - ], - "waveOutSetVolume": [ - { - "name": "hwo", - "type": "HWAVEOUT" - }, - { - "name": "dwVolume", - "type": "DWORD" - } - ], - "waveOutOpen": [ - { - "name": "phwo", - "type": "LPHWAVEOUT" - }, - { - "name": "uDeviceID", - "type": "UINT" - }, - { - "name": "pwfx", - "type": "LPCWAVEFORMATEX" - }, - { - "name": "dwCallback", - "type": "DWORD_PTR" - }, - { - "name": "dwInstance", - "type": "DWORD_PTR" - }, - { - "name": "fdwOpen", - "type": "DWORD" - } - ], - "waveOutClose": [ - { - "name": "hwo", - "type": "HWAVEOUT" - } - ], - "waveOutPrepareHeader": [ - { - "name": "hwo", - "type": "HWAVEOUT" - }, - { - "name": "pwh", - "type": "LPWAVEHDR" - }, - { - "name": "cbwh", - "type": "UINT" - } - ], - "waveOutUnprepareHeader": [ - { - "name": "hwo", - "type": "HWAVEOUT" - }, - { - "name": "pwh", - "type": "LPWAVEHDR" - }, - { - "name": "cbwh", - "type": "UINT" - } - ], - "waveOutWrite": [ - { - "name": "hwo", - "type": "HWAVEOUT" - }, - { - "name": "pwh", - "type": "LPWAVEHDR" - }, - { - "name": "cbwh", - "type": "UINT" - } - ], - "waveOutPause": [ - { - "name": "hwo", - "type": "HWAVEOUT" - } - ], - "waveOutRestart": [ - { - "name": "hwo", - "type": "HWAVEOUT" - } - ], - "waveOutReset": [ - { - "name": "hwo", - "type": "HWAVEOUT" - } - ], - "waveOutBreakLoop": [ - { - "name": "hwo", - "type": "HWAVEOUT" - } - ], - "waveOutGetPosition": [ - { - "name": "hwo", - "type": "HWAVEOUT" - }, - { - "name": "pmmt", - "type": "LPMMTIME" - }, - { - "name": "cbmmt", - "type": "UINT" - } - ], - "waveOutGetPitch": [ - { - "name": "hwo", - "type": "HWAVEOUT" - }, - { - "name": "pdwPitch", - "type": "LPDWORD" - } - ], - "waveOutSetPitch": [ - { - "name": "hwo", - "type": "HWAVEOUT" - }, - { - "name": "dwPitch", - "type": "DWORD" - } - ], - "waveOutGetPlaybackRate": [ - { - "name": "hwo", - "type": "HWAVEOUT" - }, - { - "name": "pdwRate", - "type": "LPDWORD" - } - ], - "waveOutSetPlaybackRate": [ - { - "name": "hwo", - "type": "HWAVEOUT" - }, - { - "name": "dwRate", - "type": "DWORD" - } - ], - "waveOutGetID": [ - { - "name": "hwo", - "type": "HWAVEOUT" - }, - { - "name": "puDeviceID", - "type": "LPUINT" - } - ], - "waveOutMessage": [ - { - "name": "hwo", - "type": "HWAVEOUT" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "dw1", - "type": "DWORD_PTR" - }, - { - "name": "dw2", - "type": "DWORD_PTR" - } - ], - "waveInGetNumDevs": [ - { - "name": "VOID", - "type": "void" - } - ], - "waveInOpen": [ - { - "name": "phwi", - "type": "LPHWAVEIN" - }, - { - "name": "uDeviceID", - "type": "UINT" - }, - { - "name": "pwfx", - "type": "LPCWAVEFORMATEX" - }, - { - "name": "dwCallback", - "type": "DWORD_PTR" - }, - { - "name": "dwInstance", - "type": "DWORD_PTR" - }, - { - "name": "fdwOpen", - "type": "DWORD" - } - ], - "waveInClose": [ - { - "name": "hwi", - "type": "HWAVEIN" - } - ], - "waveInPrepareHeader": [ - { - "name": "hwi", - "type": "HWAVEIN" - }, - { - "name": "pwh", - "type": "LPWAVEHDR" - }, - { - "name": "cbwh", - "type": "UINT" - } - ], - "waveInUnprepareHeader": [ - { - "name": "hwi", - "type": "HWAVEIN" - }, - { - "name": "pwh", - "type": "LPWAVEHDR" - }, - { - "name": "cbwh", - "type": "UINT" - } - ], - "waveInAddBuffer": [ - { - "name": "hwi", - "type": "HWAVEIN" - }, - { - "name": "pwh", - "type": "LPWAVEHDR" - }, - { - "name": "cbwh", - "type": "UINT" - } - ], - "waveInStart": [ - { - "name": "hwi", - "type": "HWAVEIN" - } - ], - "waveInStop": [ - { - "name": "hwi", - "type": "HWAVEIN" - } - ], - "waveInReset": [ - { - "name": "hwi", - "type": "HWAVEIN" - } - ], - "waveInGetPosition": [ - { - "name": "hwi", - "type": "HWAVEIN" - }, - { - "name": "pmmt", - "type": "LPMMTIME" - }, - { - "name": "cbmmt", - "type": "UINT" - } - ], - "waveInGetID": [ - { - "name": "hwi", - "type": "HWAVEIN" - }, - { - "name": "puDeviceID", - "type": "LPUINT" - } - ], - "waveInMessage": [ - { - "name": "hwi", - "type": "HWAVEIN" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "dw1", - "type": "DWORD_PTR" - }, - { - "name": "dw2", - "type": "DWORD_PTR" - } - ], - "midiOutGetNumDevs": [ - { - "name": "VOID", - "type": "void" - } - ], - "midiStreamOpen": [ - { - "name": "phms", - "type": "LPHMIDISTRM" - }, - { - "name": "puDeviceID", - "type": "LPUINT" - }, - { - "name": "cMidi", - "type": "DWORD" - }, - { - "name": "dwCallback", - "type": "DWORD_PTR" - }, - { - "name": "dwInstance", - "type": "DWORD_PTR" - }, - { - "name": "fdwOpen", - "type": "DWORD" - } - ], - "midiStreamClose": [ - { - "name": "hms", - "type": "HMIDISTRM" - } - ], - "midiStreamProperty": [ - { - "name": "hms", - "type": "HMIDISTRM" - }, - { - "name": "lppropdata", - "type": "LPBYTE" - }, - { - "name": "dwProperty", - "type": "DWORD" - } - ], - "midiStreamPosition": [ - { - "name": "hms", - "type": "HMIDISTRM" - }, - { - "name": "lpmmt", - "type": "LPMMTIME" - }, - { - "name": "cbmmt", - "type": "UINT" - } - ], - "midiStreamOut": [ - { - "name": "hms", - "type": "HMIDISTRM" - }, - { - "name": "pmh", - "type": "LPMIDIHDR" - }, - { - "name": "cbmh", - "type": "UINT" - } - ], - "midiStreamPause": [ - { - "name": "hms", - "type": "HMIDISTRM" - } - ], - "midiStreamRestart": [ - { - "name": "hms", - "type": "HMIDISTRM" - } - ], - "midiStreamStop": [ - { - "name": "hms", - "type": "HMIDISTRM" - } - ], - "midiConnect": [ - { - "name": "hmi", - "type": "HMIDI" - }, - { - "name": "hmo", - "type": "HMIDIOUT" - }, - { - "name": "pReserved", - "type": "LPVOID" - } - ], - "midiDisconnect": [ - { - "name": "hmi", - "type": "HMIDI" - }, - { - "name": "hmo", - "type": "HMIDIOUT" - }, - { - "name": "pReserved", - "type": "LPVOID" - } - ], - "midiOutGetDevCapsA": [ - { - "name": "uDeviceID", - "type": "UINT_PTR" - }, - { - "name": "pmoc", - "type": "LPMIDIOUTCAPSA" - }, - { - "name": "cbmoc", - "type": "UINT" - } - ], - "midiOutGetDevCapsW": [ - { - "name": "uDeviceID", - "type": "UINT_PTR" - }, - { - "name": "pmoc", - "type": "LPMIDIOUTCAPSW" - }, - { - "name": "cbmoc", - "type": "UINT" - } - ], - "midiOutGetVolume": [ - { - "name": "hmo", - "type": "HMIDIOUT" - }, - { - "name": "pdwVolume", - "type": "LPDWORD" - } - ], - "midiOutSetVolume": [ - { - "name": "hmo", - "type": "HMIDIOUT" - }, - { - "name": "dwVolume", - "type": "DWORD" - } - ], - "midiOutGetErrorTextA": [ - { - "name": "mmrError", - "type": "MMRESULT" - }, - { - "name": "pszText", - "type": "LPSTR" - }, - { - "name": "cchText", - "type": "UINT" - } - ], - "midiOutGetErrorTextW": [ - { - "name": "mmrError", - "type": "MMRESULT" - }, - { - "name": "pszText", - "type": "LPWSTR" - }, - { - "name": "cchText", - "type": "UINT" - } - ], - "midiOutOpen": [ - { - "name": "phmo", - "type": "LPHMIDIOUT" - }, - { - "name": "uDeviceID", - "type": "UINT" - }, - { - "name": "dwCallback", - "type": "DWORD_PTR" - }, - { - "name": "dwInstance", - "type": "DWORD_PTR" - }, - { - "name": "fdwOpen", - "type": "DWORD" - } - ], - "midiOutClose": [ - { - "name": "hmo", - "type": "HMIDIOUT" - } - ], - "midiOutPrepareHeader": [ - { - "name": "hmo", - "type": "HMIDIOUT" - }, - { - "name": "pmh", - "type": "LPMIDIHDR" - }, - { - "name": "cbmh", - "type": "UINT" - } - ], - "midiOutUnprepareHeader": [ - { - "name": "hmo", - "type": "HMIDIOUT" - }, - { - "name": "pmh", - "type": "LPMIDIHDR" - }, - { - "name": "cbmh", - "type": "UINT" - } - ], - "midiOutShortMsg": [ - { - "name": "hmo", - "type": "HMIDIOUT" - }, - { - "name": "dwMsg", - "type": "DWORD" - } - ], - "midiOutLongMsg": [ - { - "name": "hmo", - "type": "HMIDIOUT" - }, - { - "name": "pmh", - "type": "LPMIDIHDR" - }, - { - "name": "cbmh", - "type": "UINT" - } - ], - "midiOutReset": [ - { - "name": "hmo", - "type": "HMIDIOUT" - } - ], - "midiOutCachePatches": [ - { - "name": "hmo", - "type": "HMIDIOUT" - }, - { - "name": "uBank", - "type": "UINT" - }, - { - "name": "pwpa", - "type": "LPWORD" - }, - { - "name": "fuCache", - "type": "UINT" - } - ], - "midiOutCacheDrumPatches": [ - { - "name": "hmo", - "type": "HMIDIOUT" - }, - { - "name": "uPatch", - "type": "UINT" - }, - { - "name": "pwkya", - "type": "LPWORD" - }, - { - "name": "fuCache", - "type": "UINT" - } - ], - "midiOutGetID": [ - { - "name": "hmo", - "type": "HMIDIOUT" - }, - { - "name": "puDeviceID", - "type": "LPUINT" - } - ], - "midiOutMessage": [ - { - "name": "hmo", - "type": "HMIDIOUT" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "dw1", - "type": "DWORD_PTR" - }, - { - "name": "dw2", - "type": "DWORD_PTR" - } - ], - "midiInGetNumDevs": [ - { - "name": "VOID", - "type": "void" - } - ], - "midiInGetDevCapsA": [ - { - "name": "uDeviceID", - "type": "UINT_PTR" - }, - { - "name": "pmic", - "type": "LPMIDIINCAPSA" - }, - { - "name": "cbmic", - "type": "UINT" - } - ], - "midiInGetDevCapsW": [ - { - "name": "uDeviceID", - "type": "UINT_PTR" - }, - { - "name": "pmic", - "type": "LPMIDIINCAPSW" - }, - { - "name": "cbmic", - "type": "UINT" - } - ], - "midiInGetErrorTextA": [ - { - "name": "mmrError", - "type": "MMRESULT" - }, - { - "name": "pszText", - "type": "LPSTR" - }, - { - "name": "cchText", - "type": "UINT" - } - ], - "midiInGetErrorTextW": [ - { - "name": "mmrError", - "type": "MMRESULT" - }, - { - "name": "pszText", - "type": "LPWSTR" - }, - { - "name": "cchText", - "type": "UINT" - } - ], - "midiInOpen": [ - { - "name": "phmi", - "type": "LPHMIDIIN" - }, - { - "name": "uDeviceID", - "type": "UINT" - }, - { - "name": "dwCallback", - "type": "DWORD_PTR" - }, - { - "name": "dwInstance", - "type": "DWORD_PTR" - }, - { - "name": "fdwOpen", - "type": "DWORD" - } - ], - "midiInClose": [ - { - "name": "hmi", - "type": "HMIDIIN" - } - ], - "midiInPrepareHeader": [ - { - "name": "hmi", - "type": "HMIDIIN" - }, - { - "name": "pmh", - "type": "LPMIDIHDR" - }, - { - "name": "cbmh", - "type": "UINT" - } - ], - "midiInUnprepareHeader": [ - { - "name": "hmi", - "type": "HMIDIIN" - }, - { - "name": "pmh", - "type": "LPMIDIHDR" - }, - { - "name": "cbmh", - "type": "UINT" - } - ], - "midiInAddBuffer": [ - { - "name": "hmi", - "type": "HMIDIIN" - }, - { - "name": "pmh", - "type": "LPMIDIHDR" - }, - { - "name": "cbmh", - "type": "UINT" - } - ], - "midiInStart": [ - { - "name": "hmi", - "type": "HMIDIIN" - } - ], - "midiInStop": [ - { - "name": "hmi", - "type": "HMIDIIN" - } - ], - "midiInReset": [ - { - "name": "hmi", - "type": "HMIDIIN" - } - ], - "midiInGetID": [ - { - "name": "hmi", - "type": "HMIDIIN" - }, - { - "name": "puDeviceID", - "type": "LPUINT" - } - ], - "midiInMessage": [ - { - "name": "hmi", - "type": "HMIDIIN" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "dw1", - "type": "DWORD_PTR" - }, - { - "name": "dw2", - "type": "DWORD_PTR" - } - ], - "auxGetNumDevs": [ - { - "name": "VOID", - "type": "void" - } - ], - "auxGetDevCapsA": [ - { - "name": "uDeviceID", - "type": "UINT_PTR" - }, - { - "name": "pac", - "type": "LPAUXCAPSA" - }, - { - "name": "cbac", - "type": "UINT" - } - ], - "auxGetDevCapsW": [ - { - "name": "uDeviceID", - "type": "UINT_PTR" - }, - { - "name": "pac", - "type": "LPAUXCAPSW" - }, - { - "name": "cbac", - "type": "UINT" - } - ], - "auxSetVolume": [ - { - "name": "uDeviceID", - "type": "UINT" - }, - { - "name": "dwVolume", - "type": "DWORD" - } - ], - "auxGetVolume": [ - { - "name": "uDeviceID", - "type": "UINT" - }, - { - "name": "pdwVolume", - "type": "LPDWORD" - } - ], - "auxOutMessage": [ - { - "name": "uDeviceID", - "type": "UINT" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "dw1", - "type": "DWORD_PTR" - }, - { - "name": "dw2", - "type": "DWORD_PTR" - } - ], - "mixerGetNumDevs": [ - { - "name": "VOID", - "type": "void" - } - ], - "mixerGetDevCapsA": [ - { - "name": "uMxId", - "type": "UINT_PTR" - }, - { - "name": "pmxcaps", - "type": "LPMIXERCAPSA" - }, - { - "name": "cbmxcaps", - "type": "UINT" - } - ], - "mixerGetDevCapsW": [ - { - "name": "uMxId", - "type": "UINT_PTR" - }, - { - "name": "pmxcaps", - "type": "LPMIXERCAPSW" - }, - { - "name": "cbmxcaps", - "type": "UINT" - } - ], - "mixerOpen": [ - { - "name": "phmx", - "type": "LPHMIXER" - }, - { - "name": "uMxId", - "type": "UINT" - }, - { - "name": "dwCallback", - "type": "DWORD_PTR" - }, - { - "name": "dwInstance", - "type": "DWORD_PTR" - }, - { - "name": "fdwOpen", - "type": "DWORD" - } - ], - "mixerClose": [ - { - "name": "hmx", - "type": "HMIXER" - } - ], - "mixerMessage": [ - { - "name": "hmx", - "type": "HMIXER" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "dwParam1", - "type": "DWORD_PTR" - }, - { - "name": "dwParam2", - "type": "DWORD_PTR" - } - ], - "mixerGetLineInfoA": [ - { - "name": "hmxobj", - "type": "HMIXEROBJ" - }, - { - "name": "pmxl", - "type": "LPMIXERLINEA" - }, - { - "name": "fdwInfo", - "type": "DWORD" - } - ], - "mixerGetLineInfoW": [ - { - "name": "hmxobj", - "type": "HMIXEROBJ" - }, - { - "name": "pmxl", - "type": "LPMIXERLINEW" - }, - { - "name": "fdwInfo", - "type": "DWORD" - } - ], - "mixerGetID": [ - { - "name": "hmxobj", - "type": "HMIXEROBJ" - }, - { - "name": "puMxId", - "type": "UINT" - }, - { - "name": "fdwId", - "type": "DWORD" - } - ], - "mixerGetLineControlsA": [ - { - "name": "hmxobj", - "type": "HMIXEROBJ" - }, - { - "name": "pmxlc", - "type": "LPMIXERLINECONTROLSA" - }, - { - "name": "fdwControls", - "type": "DWORD" - } - ], - "mixerGetLineControlsW": [ - { - "name": "hmxobj", - "type": "HMIXEROBJ" - }, - { - "name": "pmxlc", - "type": "LPMIXERLINECONTROLSW" - }, - { - "name": "fdwControls", - "type": "DWORD" - } - ], - "mixerGetControlDetailsA": [ - { - "name": "hmxobj", - "type": "HMIXEROBJ" - }, - { - "name": "pmxcd", - "type": "LPMIXERCONTROLDETAILS" - }, - { - "name": "fdwDetails", - "type": "DWORD" - } - ], - "mixerGetControlDetailsW": [ - { - "name": "hmxobj", - "type": "HMIXEROBJ" - }, - { - "name": "pmxcd", - "type": "LPMIXERCONTROLDETAILS" - }, - { - "name": "fdwDetails", - "type": "DWORD" - } - ], - "mixerSetControlDetails": [ - { - "name": "hmxobj", - "type": "HMIXEROBJ" - }, - { - "name": "pmxcd", - "type": "LPMIXERCONTROLDETAILS" - }, - { - "name": "fdwDetails", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mmtasksignal.json b/qiling/extensions/windows_sdk/mmtasksignal.json new file mode 100644 index 000000000..588d16bc5 --- /dev/null +++ b/qiling/extensions/windows_sdk/mmtasksignal.json @@ -0,0 +1,40 @@ +{ + "mmTaskCreate": [ + { + "name": "lpfn", + "type": "LPTASKCALLBACK" + }, + { + "name": "lph", + "type": "HANDLE" + }, + { + "name": "dwInst", + "type": "DWORD_PTR" + } + ], + "mmTaskBlock": [ + { + "name": "h", + "type": "DWORD" + } + ], + "mmTaskSignal": [ + { + "name": "h", + "type": "DWORD" + } + ], + "mmTaskYield": [ + { + "name": "VOID", + "type": "void" + } + ], + "mmGetCurrentTask": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/resourceindexer.json b/qiling/extensions/windows_sdk/mrmsupport.json similarity index 100% rename from qiling/extensions/windows_sdk/resourceindexer.json rename to qiling/extensions/windows_sdk/mrmsupport.json diff --git a/qiling/extensions/windows_sdk/msacm.json b/qiling/extensions/windows_sdk/msacm.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/msacm.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mscat.json b/qiling/extensions/windows_sdk/mscat.json deleted file mode 100644 index 46f394d79..000000000 --- a/qiling/extensions/windows_sdk/mscat.json +++ /dev/null @@ -1,244 +0,0 @@ -{ - "CryptCATOpen": [ - { - "name": "pwszFileName", - "type": "LPWSTR" - }, - { - "name": "fdwOpenFlags", - "type": "DWORD" - }, - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwPublicVersion", - "type": "DWORD" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - } - ], - "CryptCATClose": [ - { - "name": "hCatalog", - "type": "HANDLE" - } - ], - "CryptCATHandleFromStore": [ - { - "name": "pCatStore", - "type": "CRYPTCATSTORE" - } - ], - "CryptCATPersistStore": [ - { - "name": "hCatalog", - "type": "HANDLE" - } - ], - "CryptCATCDFClose": [ - { - "name": "pCDF", - "type": "CRYPTCATCDF" - } - ], - "IsCatalogFile": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "pwszFileName", - "type": "WCHAR" - } - ], - "CryptCATAdminAcquireContext": [ - { - "name": "phCatAdmin", - "type": "HCATADMIN" - }, - { - "name": "pgSubsystem", - "type": "GUID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptCATAdminAcquireContext2": [ - { - "name": "phCatAdmin", - "type": "HCATADMIN" - }, - { - "name": "pgSubsystem", - "type": "GUID" - }, - { - "name": "pwszHashAlgorithm", - "type": "PCWSTR" - }, - { - "name": "pStrongHashPolicy", - "type": "PCCERT_STRONG_SIGN_PARA" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptCATAdminReleaseContext": [ - { - "name": "hCatAdmin", - "type": "HCATADMIN" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptCATAdminReleaseCatalogContext": [ - { - "name": "hCatAdmin", - "type": "HCATADMIN" - }, - { - "name": "hCatInfo", - "type": "HCATINFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptCATAdminEnumCatalogFromHash": [ - { - "name": "hCatAdmin", - "type": "HCATADMIN" - }, - { - "name": "pbHash", - "type": "BYTE" - }, - { - "name": "cbHash", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phPrevCatInfo", - "type": "HCATINFO" - } - ], - "CryptCATAdminCalcHashFromFileHandle": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "pcbHash", - "type": "DWORD" - }, - { - "name": "pbHash", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptCATAdminCalcHashFromFileHandle2": [ - { - "name": "hCatAdmin", - "type": "HCATADMIN" - }, - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "pcbHash", - "type": "DWORD" - }, - { - "name": "pbHash", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptCATAdminAddCatalog": [ - { - "name": "hCatAdmin", - "type": "HCATADMIN" - }, - { - "name": "pwszCatalogFile", - "type": "PWSTR" - }, - { - "name": "pwszSelectBaseName", - "type": "PWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptCATAdminRemoveCatalog": [ - { - "name": "hCatAdmin", - "type": "HCATADMIN" - }, - { - "name": "pwszCatalogFile", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptCATCatalogInfoFromContext": [ - { - "name": "hCatInfo", - "type": "HCATINFO" - }, - { - "name": "psCatInfo", - "type": "CATALOG_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptCATAdminResolveCatalogPath": [ - { - "name": "hCatAdmin", - "type": "HCATADMIN" - }, - { - "name": "pwszCatalogFile", - "type": "WCHAR" - }, - { - "name": "psCatInfo", - "type": "CATALOG_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mschapp.json b/qiling/extensions/windows_sdk/mschapp.json deleted file mode 100644 index d6792311d..000000000 --- a/qiling/extensions/windows_sdk/mschapp.json +++ /dev/null @@ -1,62 +0,0 @@ -{ - "MSChapSrvChangePassword": [ - { - "name": "ServerName", - "type": "PWSTR" - }, - { - "name": "UserName", - "type": "PWSTR" - }, - { - "name": "LmOldPresent", - "type": "BOOLEAN" - }, - { - "name": "LmOldOwfPassword", - "type": "PLM_OWF_PASSWORD" - }, - { - "name": "LmNewOwfPassword", - "type": "PLM_OWF_PASSWORD" - }, - { - "name": "NtOldOwfPassword", - "type": "PNT_OWF_PASSWORD" - }, - { - "name": "NtNewOwfPassword", - "type": "PNT_OWF_PASSWORD" - } - ], - "MSChapSrvChangePassword2": [ - { - "name": "ServerName", - "type": "PWSTR" - }, - { - "name": "UserName", - "type": "PWSTR" - }, - { - "name": "NewPasswordEncryptedWithOldNt", - "type": "PSAMPR_ENCRYPTED_USER_PASSWORD" - }, - { - "name": "OldNtOwfPasswordEncryptedWithNewNt", - "type": "PENCRYPTED_NT_OWF_PASSWORD" - }, - { - "name": "LmPresent", - "type": "BOOLEAN" - }, - { - "name": "NewPasswordEncryptedWithOldLm", - "type": "PSAMPR_ENCRYPTED_USER_PASSWORD" - }, - { - "name": "OldLmOwfPasswordEncryptedWithNewLmOrNt", - "type": "PENCRYPTED_LM_OWF_PASSWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/msctf.json b/qiling/extensions/windows_sdk/msctf.json index 249e69b90..906940df8 100644 --- a/qiling/extensions/windows_sdk/msctf.json +++ b/qiling/extensions/windows_sdk/msctf.json @@ -1,44 +1,78 @@ { - "TF_CreateThreadMgr": [ + "SetInputScope": [ { - "name": "pptim", - "type": "ITfThreadMgr" - } - ], - "TF_GetThreadMgr": [ + "name": "hwnd", + "type": "HWND" + }, { - "name": "pptim", - "type": "ITfThreadMgr" + "name": "inputscope", + "type": "InputScope" } ], - "TF_CreateInputProcessorProfiles": [ + "SetInputScopes": [ { - "name": "ppipr", - "type": "ITfInputProcessorProfiles" - } - ], - "TF_CreateDisplayAttributeMgr": [ + "name": "hwnd", + "type": "HWND" + }, { - "name": "ppdam", - "type": "ITfDisplayAttributeMgr" - } - ], - "TF_CreateLangBarMgr": [ + "name": "pInputScopes", + "type": "InputScope" + }, + { + "name": "cInputScopes", + "type": "UINT" + }, + { + "name": "ppszPhraseList", + "type": "PWSTR" + }, { - "name": "pppbm", - "type": "ITfLangBarMgr" + "name": "cPhrases", + "type": "UINT" + }, + { + "name": "pszRegExp", + "type": "PWSTR" + }, + { + "name": "pszSRGS", + "type": "PWSTR" } ], - "TF_CreateLangBarItemMgr": [ + "SetInputScopeXML": [ { - "name": "pplbim", - "type": "ITfLangBarItemMgr" + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszXML", + "type": "PWSTR" } ], - "TF_CreateCategoryMgr": [ + "SetInputScopes2": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pInputScopes", + "type": "InputScope" + }, + { + "name": "cInputScopes", + "type": "UINT" + }, + { + "name": "pEnumString", + "type": "IEnumString" + }, + { + "name": "pszRegExp", + "type": "PWSTR" + }, { - "name": "ppcat", - "type": "ITfCategoryMgr" + "name": "pszSRGS", + "type": "PWSTR" } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winwlx.json b/qiling/extensions/windows_sdk/msgina.json similarity index 100% rename from qiling/extensions/windows_sdk/winwlx.json rename to qiling/extensions/windows_sdk/msgina.json diff --git a/qiling/extensions/windows_sdk/msi.json b/qiling/extensions/windows_sdk/msi.json index c0486f3ed..a2e26985d 100644 --- a/qiling/extensions/windows_sdk/msi.json +++ b/qiling/extensions/windows_sdk/msi.json @@ -1,3160 +1,1432 @@ { - "MsiCloseHandle": [ + "MsiDatabaseOpenViewA": [ { - "name": "hAny", + "name": "hDatabase", "type": "MSIHANDLE" - } - ], - "MsiSetInternalUI": [ + }, { - "name": "dwUILevel", - "type": "INSTALLUILEVEL" + "name": "szQuery", + "type": "LPCSTR" }, { - "name": "phWnd", - "type": "HWND" + "name": "phView", + "type": "MSIHANDLE" } ], - "MsiSetExternalUIA": [ + "MsiDatabaseOpenViewW": [ { - "name": "puiHandler", - "type": "INSTALLUI_HANDLERA" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "dwMessageFilter", - "type": "DWORD" + "name": "szQuery", + "type": "LPCWSTR" }, { - "name": "pvContext", - "type": "LPVOID" + "name": "phView", + "type": "MSIHANDLE" } ], - "MsiSetExternalUIW": [ + "MsiViewGetErrorA": [ { - "name": "puiHandler", - "type": "INSTALLUI_HANDLERW" + "name": "hView", + "type": "MSIHANDLE" }, { - "name": "dwMessageFilter", - "type": "DWORD" + "name": "szColumnNameBuffer", + "type": "LPSTR" }, { - "name": "pvContext", - "type": "LPVOID" + "name": "pcchBuf", + "type": "LPDWORD" } ], - "MsiSetExternalUIRecord": [ - { - "name": "puiHandler", - "type": "INSTALLUI_HANDLER_RECORD" - }, + "MsiViewGetErrorW": [ { - "name": "dwMessageFilter", - "type": "DWORD" + "name": "hView", + "type": "MSIHANDLE" }, { - "name": "pvContext", - "type": "LPVOID" + "name": "szColumnNameBuffer", + "type": "LPWSTR" }, { - "name": "ppuiPrevHandler", - "type": "PINSTALLUI_HANDLER_RECORD" + "name": "pcchBuf", + "type": "LPDWORD" } ], - "MsiEnableLogA": [ + "MsiViewExecute": [ { - "name": "dwLogMode", - "type": "DWORD" + "name": "hView", + "type": "MSIHANDLE" }, { - "name": "szLogFile", - "type": "LPCSTR" + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewFetch": [ + { + "name": "hView", + "type": "MSIHANDLE" }, { - "name": "dwLogAttributes", - "type": "DWORD" + "name": "phRecord", + "type": "MSIHANDLE" } ], - "MsiEnableLogW": [ + "MsiViewModify": [ { - "name": "dwLogMode", - "type": "DWORD" + "name": "hView", + "type": "MSIHANDLE" }, { - "name": "szLogFile", - "type": "LPCWSTR" + "name": "eModifyMode", + "type": "MSIMODIFY" }, { - "name": "dwLogAttributes", - "type": "DWORD" + "name": "hRecord", + "type": "MSIHANDLE" } ], - "MsiQueryProductStateA": [ + "MsiViewGetColumnInfo": [ { - "name": "szProduct", - "type": "LPCSTR" + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "eColumnInfo", + "type": "MSICOLINFO" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" } ], - "MsiQueryProductStateW": [ + "MsiViewClose": [ { - "name": "szProduct", - "type": "LPCWSTR" + "name": "hView", + "type": "MSIHANDLE" } ], - "MsiGetProductInfoA": [ + "MsiDatabaseGetPrimaryKeysA": [ { - "name": "szProduct", - "type": "LPCSTR" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "szAttribute", + "name": "szTableName", "type": "LPCSTR" }, { - "name": "lpValueBuf", - "type": "LPSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" + "name": "phRecord", + "type": "MSIHANDLE" } ], - "MsiGetProductInfoW": [ + "MsiDatabaseGetPrimaryKeysW": [ { - "name": "szProduct", - "type": "LPCWSTR" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "szAttribute", + "name": "szTableName", "type": "LPCWSTR" }, { - "name": "lpValueBuf", - "type": "LPWSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" + "name": "phRecord", + "type": "MSIHANDLE" } ], - "MsiGetProductInfoExA": [ - { - "name": "szProductCode", - "type": "LPCSTR" - }, + "MsiDatabaseIsTablePersistentA": [ { - "name": "szUserSid", - "type": "LPCSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "szProperty", + "name": "szTableName", "type": "LPCSTR" - }, - { - "name": "szValue", - "type": "LPSTR" - }, - { - "name": "pcchValue", - "type": "LPDWORD" } ], - "MsiGetProductInfoExW": [ + "MsiDatabaseIsTablePersistentW": [ { - "name": "szProductCode", - "type": "LPCWSTR" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "szUserSid", + "name": "szTableName", "type": "LPCWSTR" - }, + } + ], + "MsiGetSummaryInformationA": [ { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "szProperty", - "type": "LPCWSTR" + "name": "szDatabasePath", + "type": "LPCSTR" }, { - "name": "szValue", - "type": "LPWSTR" + "name": "uiUpdateCount", + "type": "UINT" }, { - "name": "pcchValue", - "type": "LPDWORD" + "name": "phSummaryInfo", + "type": "MSIHANDLE" } ], - "MsiInstallProductA": [ + "MsiGetSummaryInformationW": [ { - "name": "szPackagePath", - "type": "LPCSTR" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "szCommandLine", - "type": "LPCSTR" - } - ], - "MsiInstallProductW": [ - { - "name": "szPackagePath", + "name": "szDatabasePath", "type": "LPCWSTR" }, { - "name": "szCommandLine", - "type": "LPCWSTR" + "name": "uiUpdateCount", + "type": "UINT" + }, + { + "name": "phSummaryInfo", + "type": "MSIHANDLE" } ], - "MsiConfigureProductA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, + "MsiSummaryInfoGetPropertyCount": [ { - "name": "iInstallLevel", - "type": "int" + "name": "hSummaryInfo", + "type": "MSIHANDLE" }, { - "name": "eInstallState", - "type": "INSTALLSTATE" + "name": "puiPropertyCount", + "type": "PUINT" } ], - "MsiConfigureProductW": [ + "MsiSummaryInfoSetPropertyA": [ { - "name": "szProduct", - "type": "LPCWSTR" + "name": "hSummaryInfo", + "type": "MSIHANDLE" }, { - "name": "iInstallLevel", - "type": "int" + "name": "uiProperty", + "type": "UINT" }, { - "name": "eInstallState", - "type": "INSTALLSTATE" - } - ], - "MsiConfigureProductExA": [ - { - "name": "szProduct", - "type": "LPCSTR" + "name": "uiDataType", + "type": "UINT" }, { - "name": "iInstallLevel", - "type": "int" + "name": "iValue", + "type": "INT" }, { - "name": "eInstallState", - "type": "INSTALLSTATE" + "name": "pftValue", + "type": "FILETIME" }, { - "name": "szCommandLine", + "name": "szValue", "type": "LPCSTR" } ], - "MsiConfigureProductExW": [ + "MsiSummaryInfoSetPropertyW": [ { - "name": "szProduct", - "type": "LPCWSTR" + "name": "hSummaryInfo", + "type": "MSIHANDLE" }, { - "name": "iInstallLevel", - "type": "int" + "name": "uiProperty", + "type": "UINT" }, { - "name": "eInstallState", - "type": "INSTALLSTATE" + "name": "uiDataType", + "type": "UINT" }, { - "name": "szCommandLine", - "type": "LPCWSTR" - } - ], - "MsiReinstallProductA": [ + "name": "iValue", + "type": "INT" + }, { - "name": "szProduct", - "type": "LPCSTR" + "name": "pftValue", + "type": "FILETIME" }, { - "name": "szReinstallMode", - "type": "DWORD" + "name": "szValue", + "type": "LPCWSTR" } ], - "MsiReinstallProductW": [ + "MsiSummaryInfoGetPropertyA": [ { - "name": "szProduct", - "type": "LPCWSTR" + "name": "hSummaryInfo", + "type": "MSIHANDLE" }, { - "name": "szReinstallMode", - "type": "DWORD" - } - ], - "MsiAdvertiseProductExA": [ - { - "name": "szPackagePath", - "type": "LPCSTR" + "name": "uiProperty", + "type": "UINT" }, { - "name": "szScriptfilePath", - "type": "LPCSTR" + "name": "puiDataType", + "type": "PUINT" }, { - "name": "szTransforms", - "type": "LPCSTR" + "name": "piValue", + "type": "LPINT" }, { - "name": "lgidLanguage", - "type": "LANGID" + "name": "pftValue", + "type": "FILETIME" }, { - "name": "dwPlatform", - "type": "DWORD" + "name": "szValueBuf", + "type": "LPSTR" }, { - "name": "dwOptions", - "type": "DWORD" + "name": "pcchValueBuf", + "type": "LPDWORD" } ], - "MsiAdvertiseProductExW": [ + "MsiSummaryInfoGetPropertyW": [ { - "name": "szPackagePath", - "type": "LPCWSTR" + "name": "hSummaryInfo", + "type": "MSIHANDLE" }, { - "name": "szScriptfilePath", - "type": "LPCWSTR" + "name": "uiProperty", + "type": "UINT" }, { - "name": "szTransforms", - "type": "LPCWSTR" + "name": "puiDataType", + "type": "PUINT" }, { - "name": "lgidLanguage", - "type": "LANGID" + "name": "piValue", + "type": "LPINT" }, { - "name": "dwPlatform", - "type": "DWORD" + "name": "pftValue", + "type": "FILETIME" }, { - "name": "dwOptions", - "type": "DWORD" + "name": "szValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" } ], - "MsiAdvertiseProductA": [ + "MsiSummaryInfoPersist": [ { - "name": "szPackagePath", - "type": "LPCSTR" - }, + "name": "hSummaryInfo", + "type": "MSIHANDLE" + } + ], + "MsiOpenDatabaseA": [ { - "name": "szScriptfilePath", + "name": "szDatabasePath", "type": "LPCSTR" }, { - "name": "szTransforms", + "name": "szPersist", "type": "LPCSTR" }, { - "name": "lgidLanguage", - "type": "LANGID" + "name": "phDatabase", + "type": "MSIHANDLE" } ], - "MsiAdvertiseProductW": [ - { - "name": "szPackagePath", - "type": "LPCWSTR" - }, + "MsiOpenDatabaseW": [ { - "name": "szScriptfilePath", + "name": "szDatabasePath", "type": "LPCWSTR" }, { - "name": "szTransforms", + "name": "szPersist", "type": "LPCWSTR" }, { - "name": "lgidLanguage", - "type": "LANGID" + "name": "phDatabase", + "type": "MSIHANDLE" } ], - "MsiProcessAdvertiseScriptA": [ + "MsiDatabaseImportA": [ { - "name": "szScriptFile", - "type": "LPCSTR" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "szIconFolder", + "name": "szFolderPath", "type": "LPCSTR" }, { - "name": "hRegData", - "type": "HKEY" - }, - { - "name": "fShortcuts", - "type": "BOOL" - }, - { - "name": "fRemoveItems", - "type": "BOOL" + "name": "szFileName", + "type": "LPCSTR" } ], - "MsiProcessAdvertiseScriptW": [ + "MsiDatabaseImportW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, { - "name": "szScriptFile", + "name": "szFolderPath", "type": "LPCWSTR" }, { - "name": "szIconFolder", + "name": "szFileName", "type": "LPCWSTR" + } + ], + "MsiDatabaseExportA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "hRegData", - "type": "HKEY" + "name": "szTableName", + "type": "LPCSTR" }, { - "name": "fShortcuts", - "type": "BOOL" + "name": "szFolderPath", + "type": "LPCSTR" }, { - "name": "fRemoveItems", - "type": "BOOL" + "name": "szFileName", + "type": "LPCSTR" } ], - "MsiAdvertiseScriptA": [ + "MsiDatabaseExportW": [ { - "name": "szScriptFile", - "type": "LPCSTR" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "szTableName", + "type": "LPCWSTR" }, { - "name": "phRegData", - "type": "PHKEY" + "name": "szFolderPath", + "type": "LPCWSTR" }, { - "name": "fRemoveItems", - "type": "BOOL" + "name": "szFileName", + "type": "LPCWSTR" } ], - "MsiAdvertiseScriptW": [ - { - "name": "szScriptFile", - "type": "LPCWSTR" - }, + "MsiDatabaseMergeA": [ { - "name": "dwFlags", - "type": "DWORD" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "phRegData", - "type": "PHKEY" + "name": "hDatabaseMerge", + "type": "MSIHANDLE" }, { - "name": "fRemoveItems", - "type": "BOOL" + "name": "szTableName", + "type": "LPCSTR" } ], - "MsiGetProductInfoFromScriptA": [ + "MsiDatabaseMergeW": [ { - "name": "szScriptFile", - "type": "LPCSTR" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "lpProductBuf39", - "type": "LPSTR" + "name": "hDatabaseMerge", + "type": "MSIHANDLE" }, { - "name": "plgidLanguage", - "type": "LANGID" - }, + "name": "szTableName", + "type": "LPCWSTR" + } + ], + "MsiDatabaseGenerateTransformA": [ { - "name": "pdwVersion", - "type": "LPDWORD" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "lpNameBuf", - "type": "LPSTR" + "name": "hDatabaseReference", + "type": "MSIHANDLE" }, { - "name": "pcchNameBuf", - "type": "LPDWORD" + "name": "szTransformFile", + "type": "LPCSTR" }, { - "name": "lpPackageBuf", - "type": "LPSTR" + "name": "iReserved1", + "type": "int" }, { - "name": "pcchPackageBuf", - "type": "LPDWORD" + "name": "iReserved2", + "type": "int" } ], - "MsiGetProductInfoFromScriptW": [ + "MsiDatabaseGenerateTransformW": [ { - "name": "szScriptFile", - "type": "LPCWSTR" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "lpProductBuf39", - "type": "LPWSTR" + "name": "hDatabaseReference", + "type": "MSIHANDLE" }, { - "name": "plgidLanguage", - "type": "LANGID" + "name": "szTransformFile", + "type": "LPCWSTR" }, { - "name": "pdwVersion", - "type": "LPDWORD" + "name": "iReserved1", + "type": "int" }, { - "name": "lpNameBuf", - "type": "LPWSTR" - }, + "name": "iReserved2", + "type": "int" + } + ], + "MsiDatabaseApplyTransformA": [ { - "name": "pcchNameBuf", - "type": "LPDWORD" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "lpPackageBuf", - "type": "LPWSTR" + "name": "szTransformFile", + "type": "LPCSTR" }, { - "name": "pcchPackageBuf", - "type": "LPDWORD" + "name": "iErrorConditions", + "type": "int" } ], - "MsiGetProductCodeA": [ + "MsiDatabaseApplyTransformW": [ { - "name": "szComponent", - "type": "LPCSTR" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "lpBuf39", - "type": "LPSTR" - } - ], - "MsiGetProductCodeW": [ - { - "name": "szComponent", + "name": "szTransformFile", "type": "LPCWSTR" }, { - "name": "lpBuf39", - "type": "LPWSTR" + "name": "iErrorConditions", + "type": "int" } ], - "MsiGetUserInfoA": [ + "MsiCreateTransformSummaryInfoA": [ { - "name": "szProduct", - "type": "LPCSTR" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "lpUserNameBuf", - "type": "LPSTR" + "name": "hDatabaseReference", + "type": "MSIHANDLE" }, { - "name": "pcchUserNameBuf", - "type": "LPDWORD" + "name": "szTransformFile", + "type": "LPCSTR" }, { - "name": "lpOrgNameBuf", - "type": "LPSTR" + "name": "iErrorConditions", + "type": "int" }, { - "name": "pcchOrgNameBuf", - "type": "LPDWORD" - }, - { - "name": "lpSerialBuf", - "type": "LPSTR" - }, - { - "name": "pcchSerialBuf", - "type": "LPDWORD" + "name": "iValidation", + "type": "int" } ], - "MsiGetUserInfoW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, + "MsiCreateTransformSummaryInfoW": [ { - "name": "lpUserNameBuf", - "type": "LPWSTR" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "pcchUserNameBuf", - "type": "LPDWORD" + "name": "hDatabaseReference", + "type": "MSIHANDLE" }, { - "name": "lpOrgNameBuf", - "type": "LPWSTR" + "name": "szTransformFile", + "type": "LPCWSTR" }, { - "name": "pcchOrgNameBuf", - "type": "LPDWORD" + "name": "iErrorConditions", + "type": "int" }, { - "name": "lpSerialBuf", - "type": "LPWSTR" - }, + "name": "iValidation", + "type": "int" + } + ], + "MsiDatabaseCommit": [ { - "name": "pcchSerialBuf", - "type": "LPDWORD" + "name": "hDatabase", + "type": "MSIHANDLE" } ], - "MsiCollectUserInfoA": [ + "MsiGetDatabaseState": [ { - "name": "szProduct", - "type": "LPCSTR" + "name": "hDatabase", + "type": "MSIHANDLE" } ], - "MsiCollectUserInfoW": [ + "MsiCreateRecord": [ { - "name": "szProduct", - "type": "LPCWSTR" + "name": "cParams", + "type": "UINT" } ], - "MsiApplyPatchA": [ + "MsiRecordIsNull": [ { - "name": "szPatchPackage", - "type": "LPCSTR" + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "szInstallPackage", - "type": "LPCSTR" - }, + "name": "iField", + "type": "UINT" + } + ], + "MsiRecordDataSize": [ { - "name": "eInstallType", - "type": "INSTALLTYPE" + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "szCommandLine", - "type": "LPCSTR" + "name": "iField", + "type": "UINT" } ], - "MsiApplyPatchW": [ + "MsiRecordSetInteger": [ { - "name": "szPatchPackage", - "type": "LPCWSTR" - }, - { - "name": "szInstallPackage", - "type": "LPCWSTR" + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "eInstallType", - "type": "INSTALLTYPE" + "name": "iField", + "type": "UINT" }, { - "name": "szCommandLine", - "type": "LPCWSTR" + "name": "iValue", + "type": "int" } ], - "MsiGetPatchInfoA": [ - { - "name": "szPatch", - "type": "LPCSTR" - }, + "MsiRecordSetStringA": [ { - "name": "szAttribute", - "type": "LPCSTR" + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "lpValueBuf", - "type": "LPSTR" + "name": "iField", + "type": "UINT" }, { - "name": "pcchValueBuf", - "type": "LPDWORD" + "name": "szValue", + "type": "LPCSTR" } ], - "MsiGetPatchInfoW": [ - { - "name": "szPatch", - "type": "LPCWSTR" - }, + "MsiRecordSetStringW": [ { - "name": "szAttribute", - "type": "LPCWSTR" + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "lpValueBuf", - "type": "LPWSTR" + "name": "iField", + "type": "UINT" }, { - "name": "pcchValueBuf", - "type": "LPDWORD" + "name": "szValue", + "type": "LPCWSTR" } ], - "MsiEnumPatchesA": [ + "MsiRecordGetInteger": [ { - "name": "szProduct", - "type": "LPCSTR" + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "iPatchIndex", - "type": "DWORD" + "name": "iField", + "type": "UINT" + } + ], + "MsiRecordGetStringA": [ + { + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "lpPatchBuf", - "type": "LPSTR" + "name": "iField", + "type": "UINT" }, { - "name": "lpTransformsBuf", + "name": "szValueBuf", "type": "LPSTR" }, { - "name": "pcchTransformsBuf", + "name": "pcchValueBuf", "type": "LPDWORD" } ], - "MsiEnumPatchesW": [ + "MsiRecordGetStringW": [ { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "iPatchIndex", - "type": "DWORD" + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "lpPatchBuf", - "type": "LPWSTR" + "name": "iField", + "type": "UINT" }, { - "name": "lpTransformsBuf", + "name": "szValueBuf", "type": "LPWSTR" }, { - "name": "pcchTransformsBuf", + "name": "pcchValueBuf", "type": "LPDWORD" } ], - "MsiRemovePatchesA": [ - { - "name": "szPatchList", - "type": "LPCSTR" - }, - { - "name": "szProductCode", - "type": "LPCSTR" - }, - { - "name": "eUninstallType", - "type": "INSTALLTYPE" - }, + "MsiRecordGetFieldCount": [ { - "name": "szPropertyList", - "type": "LPCSTR" + "name": "hRecord", + "type": "MSIHANDLE" } ], - "MsiRemovePatchesW": [ - { - "name": "szPatchList", - "type": "LPCWSTR" - }, + "MsiRecordSetStreamA": [ { - "name": "szProductCode", - "type": "LPCWSTR" + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "eUninstallType", - "type": "INSTALLTYPE" + "name": "iField", + "type": "UINT" }, { - "name": "szPropertyList", - "type": "LPCWSTR" + "name": "szFilePath", + "type": "LPCSTR" } ], - "MsiExtractPatchXMLDataA": [ - { - "name": "szPatchPath", - "type": "LPCSTR" - }, + "MsiRecordSetStreamW": [ { - "name": "dwReserved", - "type": "DWORD" + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "szXMLData", - "type": "LPSTR" + "name": "iField", + "type": "UINT" }, { - "name": "pcchXMLData", - "type": "LPDWORD" + "name": "szFilePath", + "type": "LPCWSTR" } ], - "MsiExtractPatchXMLDataW": [ + "MsiRecordReadStream": [ { - "name": "szPatchPath", - "type": "LPCWSTR" + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "dwReserved", - "type": "DWORD" + "name": "iField", + "type": "UINT" }, { - "name": "szXMLData", - "type": "LPWSTR" + "name": "szDataBuf", + "type": "char" }, { - "name": "pcchXMLData", + "name": "pcbDataBuf", "type": "LPDWORD" } ], - "MsiGetPatchInfoExA": [ - { - "name": "szPatchCode", - "type": "LPCSTR" - }, - { - "name": "szProductCode", - "type": "LPCSTR" - }, - { - "name": "szUserSid", - "type": "LPCSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "szProperty", - "type": "LPCSTR" - }, + "MsiRecordClearData": [ { - "name": "lpValue", - "type": "LPSTR" - }, - { - "name": "pcchValue", - "type": "LPDWORD" + "name": "hRecord", + "type": "MSIHANDLE" } ], - "MsiGetPatchInfoExW": [ - { - "name": "szPatchCode", - "type": "LPCWSTR" - }, - { - "name": "szProductCode", - "type": "LPCWSTR" - }, - { - "name": "szUserSid", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "szProperty", - "type": "LPCWSTR" - }, - { - "name": "lpValue", - "type": "LPWSTR" - }, + "MsiGetActiveDatabase": [ { - "name": "pcchValue", - "type": "LPDWORD" + "name": "hInstall", + "type": "MSIHANDLE" } ], - "MsiApplyMultiplePatchesA": [ + "MsiSetPropertyA": [ { - "name": "szPatchPackages", - "type": "LPCSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szProductCode", + "name": "szName", "type": "LPCSTR" }, { - "name": "szPropertiesList", + "name": "szValue", "type": "LPCSTR" } ], - "MsiApplyMultiplePatchesW": [ + "MsiSetPropertyW": [ { - "name": "szPatchPackages", - "type": "LPCWSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szProductCode", + "name": "szName", "type": "LPCWSTR" }, { - "name": "szPropertiesList", + "name": "szValue", "type": "LPCWSTR" } ], - "MsiDeterminePatchSequenceA": [ + "MsiGetPropertyA": [ { - "name": "szProductCode", - "type": "LPCSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szUserSid", + "name": "szName", "type": "LPCSTR" }, { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "cPatchInfo", - "type": "DWORD" + "name": "szValueBuf", + "type": "LPSTR" }, { - "name": "pPatchInfo", - "type": "PMSIPATCHSEQUENCEINFOA" + "name": "pcchValueBuf", + "type": "LPDWORD" } ], - "MsiDeterminePatchSequenceW": [ + "MsiGetPropertyW": [ { - "name": "szProductCode", - "type": "LPCWSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szUserSid", + "name": "szName", "type": "LPCWSTR" }, { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "cPatchInfo", - "type": "DWORD" + "name": "szValueBuf", + "type": "LPWSTR" }, { - "name": "pPatchInfo", - "type": "PMSIPATCHSEQUENCEINFOW" + "name": "pcchValueBuf", + "type": "LPDWORD" } ], - "MsiDetermineApplicablePatchesA": [ - { - "name": "szProductPackagePath", - "type": "LPCSTR" - }, - { - "name": "cPatchInfo", - "type": "DWORD" - }, + "MsiGetLanguage": [ { - "name": "pPatchInfo", - "type": "PMSIPATCHSEQUENCEINFOA" + "name": "hInstall", + "type": "MSIHANDLE" } ], - "MsiDetermineApplicablePatchesW": [ - { - "name": "szProductPackagePath", - "type": "LPCWSTR" - }, + "MsiGetMode": [ { - "name": "cPatchInfo", - "type": "DWORD" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "pPatchInfo", - "type": "PMSIPATCHSEQUENCEINFOW" + "name": "eRunMode", + "type": "MSIRUNMODE" } ], - "MsiEnumPatchesExA": [ - { - "name": "szProductCode", - "type": "LPCSTR" - }, - { - "name": "szUserSid", - "type": "LPCSTR" - }, + "MsiSetMode": [ { - "name": "dwContext", - "type": "DWORD" - }, - { - "name": "dwFilter", - "type": "DWORD" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "dwIndex", - "type": "DWORD" + "name": "eRunMode", + "type": "MSIRUNMODE" }, { - "name": "szPatchCode", - "type": "CHAR" - }, + "name": "fState", + "type": "BOOL" + } + ], + "MsiFormatRecordA": [ { - "name": "szTargetProductCode", - "type": "CHAR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "pdwTargetProductContext", - "type": "MSIINSTALLCONTEXT" + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "szTargetUserSid", + "name": "szResultBuf", "type": "LPSTR" }, { - "name": "pcchTargetUserSid", + "name": "pcchResultBuf", "type": "LPDWORD" } ], - "MsiEnumPatchesExW": [ - { - "name": "szProductCode", - "type": "LPCWSTR" - }, + "MsiFormatRecordW": [ { - "name": "szUserSid", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "DWORD" - }, - { - "name": "dwFilter", - "type": "DWORD" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "szPatchCode", - "type": "WCHAR" - }, - { - "name": "szTargetProductCode", - "type": "WCHAR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "pdwTargetProductContext", - "type": "MSIINSTALLCONTEXT" + "name": "hRecord", + "type": "MSIHANDLE" }, { - "name": "szTargetUserSid", + "name": "szResultBuf", "type": "LPWSTR" }, { - "name": "pcchTargetUserSid", + "name": "pcchResultBuf", "type": "LPDWORD" } ], - "MsiQueryFeatureStateA": [ + "MsiDoActionA": [ { - "name": "szProduct", - "type": "LPCSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szFeature", + "name": "szAction", "type": "LPCSTR" } ], - "MsiQueryFeatureStateW": [ + "MsiDoActionW": [ { - "name": "szProduct", - "type": "LPCWSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szFeature", + "name": "szAction", "type": "LPCWSTR" } ], - "MsiQueryFeatureStateExA": [ - { - "name": "szProductCode", - "type": "LPCSTR" - }, - { - "name": "szUserSid", - "type": "LPCSTR" - }, + "MsiSequenceA": [ { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szFeature", + "name": "szTable", "type": "LPCSTR" }, { - "name": "pdwState", - "type": "INSTALLSTATE" + "name": "iSequenceMode", + "type": "INT" } ], - "MsiQueryFeatureStateExW": [ + "MsiSequenceW": [ { - "name": "szProductCode", - "type": "LPCWSTR" - }, - { - "name": "szUserSid", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szFeature", + "name": "szTable", "type": "LPCWSTR" }, { - "name": "pdwState", - "type": "INSTALLSTATE" + "name": "iSequenceMode", + "type": "INT" } ], - "MsiUseFeatureA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, + "MsiProcessMessage": [ { - "name": "szFeature", - "type": "LPCSTR" - } - ], - "MsiUseFeatureW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - } - ], - "MsiUseFeatureExA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "dwInstallMode", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "MsiUseFeatureExW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "dwInstallMode", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "MsiGetFeatureUsageA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "pdwUseCount", - "type": "LPDWORD" - }, - { - "name": "pwDateUsed", - "type": "LPWORD" - } - ], - "MsiGetFeatureUsageW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "pdwUseCount", - "type": "LPDWORD" - }, - { - "name": "pwDateUsed", - "type": "LPWORD" - } - ], - "MsiConfigureFeatureA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "eInstallState", - "type": "INSTALLSTATE" - } - ], - "MsiConfigureFeatureW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "eInstallState", - "type": "INSTALLSTATE" - } - ], - "MsiReinstallFeatureA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "dwReinstallMode", - "type": "DWORD" - } - ], - "MsiReinstallFeatureW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "dwReinstallMode", - "type": "DWORD" - } - ], - "MsiProvideComponentA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "dwInstallMode", - "type": "DWORD" - }, - { - "name": "lpPathBuf", - "type": "LPSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiProvideComponentW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "dwInstallMode", - "type": "DWORD" - }, - { - "name": "lpPathBuf", - "type": "LPWSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiProvideQualifiedComponentA": [ - { - "name": "szCategory", - "type": "LPCSTR" - }, - { - "name": "szQualifier", - "type": "LPCSTR" - }, - { - "name": "dwInstallMode", - "type": "DWORD" - }, - { - "name": "lpPathBuf", - "type": "LPSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiProvideQualifiedComponentW": [ - { - "name": "szCategory", - "type": "LPCWSTR" - }, - { - "name": "szQualifier", - "type": "LPCWSTR" - }, - { - "name": "dwInstallMode", - "type": "DWORD" - }, - { - "name": "lpPathBuf", - "type": "LPWSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiProvideQualifiedComponentExA": [ - { - "name": "szCategory", - "type": "LPCSTR" - }, - { - "name": "szQualifier", - "type": "LPCSTR" - }, - { - "name": "dwInstallMode", - "type": "DWORD" - }, - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "dwUnused1", - "type": "DWORD" - }, - { - "name": "dwUnused2", - "type": "DWORD" - }, - { - "name": "lpPathBuf", - "type": "LPSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiProvideQualifiedComponentExW": [ - { - "name": "szCategory", - "type": "LPCWSTR" - }, - { - "name": "szQualifier", - "type": "LPCWSTR" - }, - { - "name": "dwInstallMode", - "type": "DWORD" - }, - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "dwUnused1", - "type": "DWORD" - }, - { - "name": "dwUnused2", - "type": "DWORD" - }, - { - "name": "lpPathBuf", - "type": "LPWSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiGetComponentPathA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "lpPathBuf", - "type": "LPSTR" - }, - { - "name": "pcchBuf", - "type": "LPDWORD" - } - ], - "MsiGetComponentPathW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "lpPathBuf", - "type": "LPWSTR" - }, - { - "name": "pcchBuf", - "type": "LPDWORD" - } - ], - "MsiGetComponentPathExA": [ - { - "name": "szProductCode", - "type": "LPCSTR" - }, - { - "name": "szComponentCode", - "type": "LPCSTR" - }, - { - "name": "szUserSid", - "type": "LPCSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "lpOutPathBuffer", - "type": "LPSTR" - }, - { - "name": "pcchOutPathBuffer", - "type": "LPDWORD" - } - ], - "MsiGetComponentPathExW": [ - { - "name": "szProductCode", - "type": "LPCWSTR" - }, - { - "name": "szComponentCode", - "type": "LPCWSTR" - }, - { - "name": "szUserSid", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "lpOutPathBuffer", - "type": "LPWSTR" - }, - { - "name": "pcchOutPathBuffer", - "type": "LPDWORD" - } - ], - "MsiProvideAssemblyA": [ - { - "name": "szAssemblyName", - "type": "LPCSTR" - }, - { - "name": "szAppContext", - "type": "LPCSTR" - }, - { - "name": "dwInstallMode", - "type": "DWORD" - }, - { - "name": "dwAssemblyInfo", - "type": "DWORD" - }, - { - "name": "lpPathBuf", - "type": "LPSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiProvideAssemblyW": [ - { - "name": "szAssemblyName", - "type": "LPCWSTR" - }, - { - "name": "szAppContext", - "type": "LPCWSTR" - }, - { - "name": "dwInstallMode", - "type": "DWORD" - }, - { - "name": "dwAssemblyInfo", - "type": "DWORD" - }, - { - "name": "lpPathBuf", - "type": "LPWSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiQueryComponentStateA": [ - { - "name": "szProductCode", - "type": "LPCSTR" - }, - { - "name": "szUserSid", - "type": "LPCSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "szComponentCode", - "type": "LPCSTR" - }, - { - "name": "pdwState", - "type": "INSTALLSTATE" - } - ], - "MsiQueryComponentStateW": [ - { - "name": "szProductCode", - "type": "LPCWSTR" - }, - { - "name": "szUserSid", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "szComponentCode", - "type": "LPCWSTR" - }, - { - "name": "pdwState", - "type": "INSTALLSTATE" - } - ], - "MsiEnumProductsA": [ - { - "name": "iProductIndex", - "type": "DWORD" - }, - { - "name": "lpProductBuf", - "type": "LPSTR" - } - ], - "MsiEnumProductsW": [ - { - "name": "iProductIndex", - "type": "DWORD" - }, - { - "name": "lpProductBuf", - "type": "LPWSTR" - } - ], - "MsiEnumProductsExA": [ - { - "name": "szProductCode", - "type": "LPCSTR" - }, - { - "name": "szUserSid", - "type": "LPCSTR" - }, - { - "name": "dwContext", - "type": "DWORD" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "szInstalledProductCode", - "type": "CHAR" - }, - { - "name": "pdwInstalledContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "szSid", - "type": "LPSTR" - }, - { - "name": "pcchSid", - "type": "LPDWORD" - } - ], - "MsiEnumProductsExW": [ - { - "name": "szProductCode", - "type": "LPCWSTR" - }, - { - "name": "szUserSid", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "DWORD" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "szInstalledProductCode", - "type": "WCHAR" - }, - { - "name": "pdwInstalledContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "szSid", - "type": "LPWSTR" - }, - { - "name": "pcchSid", - "type": "LPDWORD" - } - ], - "MsiEnumRelatedProductsA": [ - { - "name": "lpUpgradeCode", - "type": "LPCSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "iProductIndex", - "type": "DWORD" - }, - { - "name": "lpProductBuf", - "type": "LPSTR" - } - ], - "MsiEnumRelatedProductsW": [ - { - "name": "lpUpgradeCode", - "type": "LPCWSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "iProductIndex", - "type": "DWORD" - }, - { - "name": "lpProductBuf", - "type": "LPWSTR" - } - ], - "MsiEnumFeaturesA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "iFeatureIndex", - "type": "DWORD" - }, - { - "name": "lpFeatureBuf", - "type": "LPSTR" - }, - { - "name": "lpParentBuf", - "type": "LPSTR" - } - ], - "MsiEnumFeaturesW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "iFeatureIndex", - "type": "DWORD" - }, - { - "name": "lpFeatureBuf", - "type": "LPWSTR" - }, - { - "name": "lpParentBuf", - "type": "LPWSTR" - } - ], - "MsiEnumComponentsA": [ - { - "name": "iComponentIndex", - "type": "DWORD" - }, - { - "name": "lpComponentBuf", - "type": "LPSTR" - } - ], - "MsiEnumComponentsW": [ - { - "name": "iComponentIndex", - "type": "DWORD" - }, - { - "name": "lpComponentBuf", - "type": "LPWSTR" - } - ], - "MsiEnumComponentsExA": [ - { - "name": "szUserSid", - "type": "LPCSTR" - }, - { - "name": "dwContext", - "type": "DWORD" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "szInstalledComponentCode", - "type": "CHAR" - }, - { - "name": "pdwInstalledContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "szSid", - "type": "LPSTR" - }, - { - "name": "pcchSid", - "type": "LPDWORD" - } - ], - "MsiEnumComponentsExW": [ - { - "name": "szUserSid", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "DWORD" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "szInstalledComponentCode", - "type": "WCHAR" - }, - { - "name": "pdwInstalledContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "szSid", - "type": "LPWSTR" - }, - { - "name": "pcchSid", - "type": "LPDWORD" - } - ], - "MsiEnumClientsA": [ - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "iProductIndex", - "type": "DWORD" - }, - { - "name": "lpProductBuf", - "type": "LPSTR" - } - ], - "MsiEnumClientsW": [ - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "iProductIndex", - "type": "DWORD" - }, - { - "name": "lpProductBuf", - "type": "LPWSTR" - } - ], - "MsiEnumClientsExA": [ - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "szUserSid", - "type": "LPCSTR" - }, - { - "name": "dwContext", - "type": "DWORD" - }, - { - "name": "dwProductIndex", - "type": "DWORD" - }, - { - "name": "szProductBuf", - "type": "CHAR" - }, - { - "name": "pdwInstalledContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "szSid", - "type": "LPSTR" - }, - { - "name": "pcchSid", - "type": "LPDWORD" - } - ], - "MsiEnumClientsExW": [ - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "szUserSid", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "DWORD" - }, - { - "name": "dwProductIndex", - "type": "DWORD" - }, - { - "name": "szProductBuf", - "type": "WCHAR" - }, - { - "name": "pdwInstalledContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "szSid", - "type": "LPWSTR" - }, - { - "name": "pcchSid", - "type": "LPDWORD" - } - ], - "MsiEnumComponentQualifiersA": [ - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "iIndex", - "type": "DWORD" - }, - { - "name": "lpQualifierBuf", - "type": "LPSTR" - }, - { - "name": "pcchQualifierBuf", - "type": "LPDWORD" - }, - { - "name": "lpApplicationDataBuf", - "type": "LPSTR" - }, - { - "name": "pcchApplicationDataBuf", - "type": "LPDWORD" - } - ], - "MsiEnumComponentQualifiersW": [ - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "iIndex", - "type": "DWORD" - }, - { - "name": "lpQualifierBuf", - "type": "LPWSTR" - }, - { - "name": "pcchQualifierBuf", - "type": "LPDWORD" - }, - { - "name": "lpApplicationDataBuf", - "type": "LPWSTR" - }, - { - "name": "pcchApplicationDataBuf", - "type": "LPDWORD" - } - ], - "MsiOpenProductA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "hProduct", - "type": "MSIHANDLE" - } - ], - "MsiOpenProductW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "hProduct", - "type": "MSIHANDLE" - } - ], - "MsiOpenPackageA": [ - { - "name": "szPackagePath", - "type": "LPCSTR" - }, - { - "name": "hProduct", - "type": "MSIHANDLE" - } - ], - "MsiOpenPackageW": [ - { - "name": "szPackagePath", - "type": "LPCWSTR" - }, - { - "name": "hProduct", - "type": "MSIHANDLE" - } - ], - "MsiOpenPackageExA": [ - { - "name": "szPackagePath", - "type": "LPCSTR" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "hProduct", - "type": "MSIHANDLE" - } - ], - "MsiOpenPackageExW": [ - { - "name": "szPackagePath", - "type": "LPCWSTR" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "hProduct", - "type": "MSIHANDLE" - } - ], - "MsiGetPatchFileListA": [ - { - "name": "szProductCode", - "type": "LPCSTR" - }, - { - "name": "szPatchPackages", - "type": "LPCSTR" - }, - { - "name": "pcFiles", - "type": "LPDWORD" - }, - { - "name": "pphFileRecords", - "type": "MSIHANDLE" - } - ], - "MsiGetPatchFileListW": [ - { - "name": "szProductCode", - "type": "LPCWSTR" - }, - { - "name": "szPatchPackages", - "type": "LPCWSTR" - }, - { - "name": "pcFiles", - "type": "LPDWORD" - }, - { - "name": "pphFileRecords", - "type": "MSIHANDLE" - } - ], - "MsiGetProductPropertyA": [ - { - "name": "hProduct", - "type": "MSIHANDLE" - }, - { - "name": "szProperty", - "type": "LPCSTR" - }, - { - "name": "lpValueBuf", - "type": "LPSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiGetProductPropertyW": [ - { - "name": "hProduct", - "type": "MSIHANDLE" - }, - { - "name": "szProperty", - "type": "LPCWSTR" - }, - { - "name": "lpValueBuf", - "type": "LPWSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiVerifyPackageA": [ - { - "name": "szPackagePath", - "type": "LPCSTR" - } - ], - "MsiVerifyPackageW": [ - { - "name": "szPackagePath", - "type": "LPCWSTR" - } - ], - "MsiGetFeatureInfoA": [ - { - "name": "hProduct", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "lpAttributes", - "type": "LPDWORD" - }, - { - "name": "lpTitleBuf", - "type": "LPSTR" - }, - { - "name": "pcchTitleBuf", - "type": "LPDWORD" - }, - { - "name": "lpHelpBuf", - "type": "LPSTR" - }, - { - "name": "pcchHelpBuf", - "type": "LPDWORD" - } - ], - "MsiGetFeatureInfoW": [ - { - "name": "hProduct", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "lpAttributes", - "type": "LPDWORD" - }, - { - "name": "lpTitleBuf", - "type": "LPWSTR" - }, - { - "name": "pcchTitleBuf", - "type": "LPDWORD" - }, - { - "name": "lpHelpBuf", - "type": "LPWSTR" - }, - { - "name": "pcchHelpBuf", - "type": "LPDWORD" - } - ], - "MsiInstallMissingComponentA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "eInstallState", - "type": "INSTALLSTATE" - } - ], - "MsiInstallMissingComponentW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "eInstallState", - "type": "INSTALLSTATE" - } - ], - "MsiInstallMissingFileA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "szFile", - "type": "LPCSTR" - } - ], - "MsiInstallMissingFileW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "szFile", - "type": "LPCWSTR" - } - ], - "MsiLocateComponentA": [ - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "lpPathBuf", - "type": "LPSTR" - }, - { - "name": "pcchBuf", - "type": "LPDWORD" - } - ], - "MsiLocateComponentW": [ - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "lpPathBuf", - "type": "LPWSTR" - }, - { - "name": "pcchBuf", - "type": "LPDWORD" - } - ], - "MsiSourceListClearAllA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "szUserName", - "type": "LPCSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "MsiSourceListClearAllW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "szUserName", - "type": "LPCWSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "MsiSourceListAddSourceA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "szUserName", - "type": "LPCSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "szSource", - "type": "LPCSTR" - } - ], - "MsiSourceListAddSourceW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "szUserName", - "type": "LPCWSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "szSource", - "type": "LPCWSTR" - } - ], - "MsiSourceListForceResolutionA": [ - { - "name": "szProduct", - "type": "LPCSTR" - }, - { - "name": "szUserName", - "type": "LPCSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "MsiSourceListForceResolutionW": [ - { - "name": "szProduct", - "type": "LPCWSTR" - }, - { - "name": "szUserName", - "type": "LPCWSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "MsiSourceListAddSourceExA": [ - { - "name": "szProductCodeOrPatchCode", - "type": "LPCSTR" - }, - { - "name": "szUserSid", - "type": "LPCSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "szSource", - "type": "LPCSTR" - }, - { - "name": "dwIndex", - "type": "DWORD" - } - ], - "MsiSourceListAddSourceExW": [ - { - "name": "szProductCodeOrPatchCode", - "type": "LPCWSTR" - }, - { - "name": "szUserSid", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "szSource", - "type": "LPCWSTR" - }, - { - "name": "dwIndex", - "type": "DWORD" - } - ], - "MsiSourceListAddMediaDiskA": [ - { - "name": "szProductCodeOrPatchCode", - "type": "LPCSTR" - }, - { - "name": "szUserSid", - "type": "LPCSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "dwDiskId", - "type": "DWORD" - }, - { - "name": "szVolumeLabel", - "type": "LPCSTR" - }, - { - "name": "szDiskPrompt", - "type": "LPCSTR" - } - ], - "MsiSourceListAddMediaDiskW": [ - { - "name": "szProductCodeOrPatchCode", - "type": "LPCWSTR" - }, - { - "name": "szUserSid", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "dwDiskId", - "type": "DWORD" - }, - { - "name": "szVolumeLabel", - "type": "LPCWSTR" - }, - { - "name": "szDiskPrompt", - "type": "LPCWSTR" - } - ], - "MsiSourceListClearSourceA": [ - { - "name": "szProductCodeOrPatchCode", - "type": "LPCSTR" - }, - { - "name": "szUserSid", - "type": "LPCSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "szSource", - "type": "LPCSTR" - } - ], - "MsiSourceListClearSourceW": [ - { - "name": "szProductCodeOrPatchCode", - "type": "LPCWSTR" - }, - { - "name": "szUserSid", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "szSource", - "type": "LPCWSTR" - } - ], - "MsiSourceListClearMediaDiskA": [ - { - "name": "szProductCodeOrPatchCode", - "type": "LPCSTR" - }, - { - "name": "szUserSid", - "type": "LPCSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "dwDiskId", - "type": "DWORD" - } - ], - "MsiSourceListClearMediaDiskW": [ - { - "name": "szProductCodeOrPatchCode", - "type": "LPCWSTR" - }, - { - "name": "szUserSid", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "dwDiskId", - "type": "DWORD" - } - ], - "MsiSourceListClearAllExA": [ - { - "name": "szProductCodeOrPatchCode", - "type": "LPCSTR" - }, - { - "name": "szUserSid", - "type": "LPCSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" + "name": "eMessageType", + "type": "INSTALLMESSAGE" }, { - "name": "dwOptions", - "type": "DWORD" + "name": "hRecord", + "type": "MSIHANDLE" } ], - "MsiSourceListClearAllExW": [ + "MsiEvaluateConditionA": [ { - "name": "szProductCodeOrPatchCode", - "type": "LPCWSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szUserSid", - "type": "LPCWSTR" - }, + "name": "szCondition", + "type": "LPCSTR" + } + ], + "MsiEvaluateConditionW": [ { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "dwOptions", - "type": "DWORD" + "name": "szCondition", + "type": "LPCWSTR" } ], - "MsiSourceListForceResolutionExA": [ + "MsiGetFeatureStateA": [ { - "name": "szProductCodeOrPatchCode", - "type": "LPCSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szUserSid", + "name": "szFeature", "type": "LPCSTR" }, { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" + "name": "piInstalled", + "type": "INSTALLSTATE" }, { - "name": "dwOptions", - "type": "DWORD" + "name": "piAction", + "type": "INSTALLSTATE" } ], - "MsiSourceListForceResolutionExW": [ + "MsiGetFeatureStateW": [ { - "name": "szProductCodeOrPatchCode", - "type": "LPCWSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szUserSid", + "name": "szFeature", "type": "LPCWSTR" }, { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" + "name": "piInstalled", + "type": "INSTALLSTATE" }, { - "name": "dwOptions", - "type": "DWORD" + "name": "piAction", + "type": "INSTALLSTATE" } ], - "MsiSourceListSetInfoA": [ + "MsiSetFeatureStateA": [ { - "name": "szProductCodeOrPatchCode", - "type": "LPCSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szUserSid", + "name": "szFeature", "type": "LPCSTR" }, { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiSetFeatureStateW": [ { - "name": "dwOptions", - "type": "DWORD" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szProperty", - "type": "LPCSTR" + "name": "szFeature", + "type": "LPCWSTR" }, { - "name": "szValue", - "type": "LPCSTR" + "name": "iState", + "type": "INSTALLSTATE" } ], - "MsiSourceListSetInfoW": [ - { - "name": "szProductCodeOrPatchCode", - "type": "LPCWSTR" - }, + "MsiSetFeatureAttributesA": [ { - "name": "szUserSid", - "type": "LPCWSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" + "name": "szFeature", + "type": "LPCSTR" }, { - "name": "dwOptions", + "name": "dwAttributes", "type": "DWORD" + } + ], + "MsiSetFeatureAttributesW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szProperty", + "name": "szFeature", "type": "LPCWSTR" }, { - "name": "szValue", - "type": "LPCWSTR" + "name": "dwAttributes", + "type": "DWORD" } ], - "MsiSourceListGetInfoA": [ + "MsiGetComponentStateA": [ { - "name": "szProductCodeOrPatchCode", - "type": "LPCSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szUserSid", + "name": "szComponent", "type": "LPCSTR" }, { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" + "name": "piInstalled", + "type": "INSTALLSTATE" }, { - "name": "dwOptions", - "type": "DWORD" + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiGetComponentStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szProperty", - "type": "LPCSTR" + "name": "szComponent", + "type": "LPCWSTR" }, { - "name": "szValue", - "type": "LPSTR" + "name": "piInstalled", + "type": "INSTALLSTATE" }, { - "name": "pcchValue", - "type": "LPDWORD" + "name": "piAction", + "type": "INSTALLSTATE" } ], - "MsiSourceListGetInfoW": [ + "MsiSetComponentStateA": [ { - "name": "szProductCodeOrPatchCode", - "type": "LPCWSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szUserSid", - "type": "LPCWSTR" + "name": "szComponent", + "type": "LPCSTR" }, { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiSetComponentStateW": [ { - "name": "dwOptions", - "type": "DWORD" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szProperty", + "name": "szComponent", "type": "LPCWSTR" }, { - "name": "szValue", - "type": "LPWSTR" - }, - { - "name": "pcchValue", - "type": "LPDWORD" + "name": "iState", + "type": "INSTALLSTATE" } ], - "MsiSourceListEnumSourcesA": [ + "MsiGetFeatureCostA": [ { - "name": "szProductCodeOrPatchCode", - "type": "LPCSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szUserSid", + "name": "szFeature", "type": "LPCSTR" }, { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "dwIndex", - "type": "DWORD" + "name": "iCostTree", + "type": "MSICOSTTREE" }, { - "name": "szSource", - "type": "LPSTR" + "name": "iState", + "type": "INSTALLSTATE" }, { - "name": "pcchSource", - "type": "LPDWORD" + "name": "piCost", + "type": "LPINT" } ], - "MsiSourceListEnumSourcesW": [ + "MsiGetFeatureCostW": [ { - "name": "szProductCodeOrPatchCode", - "type": "LPCWSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szUserSid", + "name": "szFeature", "type": "LPCWSTR" }, { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "dwIndex", - "type": "DWORD" + "name": "iCostTree", + "type": "MSICOSTTREE" }, { - "name": "szSource", - "type": "LPWSTR" + "name": "iState", + "type": "INSTALLSTATE" }, { - "name": "pcchSource", - "type": "LPDWORD" + "name": "piCost", + "type": "LPINT" } ], - "MsiSourceListEnumMediaDisksA": [ + "MsiEnumComponentCostsA": [ { - "name": "szProductCodeOrPatchCode", - "type": "LPCSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szUserSid", + "name": "szComponent", "type": "LPCSTR" }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, { "name": "dwIndex", "type": "DWORD" }, { - "name": "pdwDiskId", - "type": "LPDWORD" + "name": "iState", + "type": "INSTALLSTATE" }, { - "name": "szVolumeLabel", + "name": "szDriveBuf", "type": "LPSTR" }, { - "name": "pcchVolumeLabel", + "name": "pcchDriveBuf", "type": "LPDWORD" }, { - "name": "szDiskPrompt", - "type": "LPSTR" + "name": "piCost", + "type": "LPINT" }, { - "name": "pcchDiskPrompt", - "type": "LPDWORD" + "name": "piTempCost", + "type": "LPINT" } ], - "MsiSourceListEnumMediaDisksW": [ + "MsiEnumComponentCostsW": [ { - "name": "szProductCodeOrPatchCode", - "type": "LPCWSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szUserSid", + "name": "szComponent", "type": "LPCWSTR" }, - { - "name": "dwContext", - "type": "MSIINSTALLCONTEXT" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, { "name": "dwIndex", "type": "DWORD" }, { - "name": "pdwDiskId", - "type": "LPDWORD" + "name": "iState", + "type": "INSTALLSTATE" }, { - "name": "szVolumeLabel", + "name": "szDriveBuf", "type": "LPWSTR" }, { - "name": "pcchVolumeLabel", + "name": "pcchDriveBuf", "type": "LPDWORD" }, { - "name": "szDiskPrompt", - "type": "LPWSTR" + "name": "piCost", + "type": "LPINT" }, { - "name": "pcchDiskPrompt", - "type": "LPDWORD" + "name": "piTempCost", + "type": "LPINT" } ], - "MsiGetFileVersionA": [ - { - "name": "szFilePath", - "type": "LPCSTR" - }, + "MsiSetInstallLevel": [ { - "name": "lpVersionBuf", - "type": "LPSTR" - }, - { - "name": "pcchVersionBuf", - "type": "LPDWORD" - }, - { - "name": "lpLangBuf", - "type": "LPSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "pcchLangBuf", - "type": "LPDWORD" + "name": "iInstallLevel", + "type": "int" } ], - "MsiGetFileVersionW": [ - { - "name": "szFilePath", - "type": "LPCWSTR" - }, - { - "name": "lpVersionBuf", - "type": "LPWSTR" - }, + "MsiGetFeatureValidStatesA": [ { - "name": "pcchVersionBuf", - "type": "LPDWORD" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "lpLangBuf", - "type": "LPWSTR" + "name": "szFeature", + "type": "LPCSTR" }, { - "name": "pcchLangBuf", + "name": "lpInstallStates", "type": "LPDWORD" } ], - "MsiGetFileHashA": [ - { - "name": "szFilePath", - "type": "LPCSTR" - }, + "MsiGetFeatureValidStatesW": [ { - "name": "dwOptions", - "type": "DWORD" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "pHash", - "type": "PMSIFILEHASHINFO" - } - ], - "MsiGetFileHashW": [ - { - "name": "szFilePath", + "name": "szFeature", "type": "LPCWSTR" }, { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "pHash", - "type": "PMSIFILEHASHINFO" + "name": "lpInstallStates", + "type": "LPDWORD" } ], - "MsiGetFileSignatureInformationA": [ - { - "name": "szSignedObjectPath", - "type": "LPCSTR" - }, + "MsiGetSourcePathA": [ { - "name": "dwFlags", - "type": "DWORD" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "ppcCertContext", - "type": "PCCERT_CONTEXT" + "name": "szFolder", + "type": "LPCSTR" }, { - "name": "pbHashData", - "type": "LPBYTE" + "name": "szPathBuf", + "type": "LPSTR" }, { - "name": "pcbHashData", + "name": "pcchPathBuf", "type": "LPDWORD" } ], - "MsiGetFileSignatureInformationW": [ - { - "name": "szSignedObjectPath", - "type": "LPCWSTR" - }, + "MsiGetSourcePathW": [ { - "name": "dwFlags", - "type": "DWORD" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "ppcCertContext", - "type": "PCCERT_CONTEXT" + "name": "szFolder", + "type": "LPCWSTR" }, { - "name": "pbHashData", - "type": "LPBYTE" + "name": "szPathBuf", + "type": "LPWSTR" }, { - "name": "pcbHashData", + "name": "pcchPathBuf", "type": "LPDWORD" } ], - "MsiGetShortcutTargetA": [ + "MsiGetTargetPathA": [ { - "name": "szShortcutPath", - "type": "LPCSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szProductCode", - "type": "LPSTR" + "name": "szFolder", + "type": "LPCSTR" }, { - "name": "szFeatureId", + "name": "szPathBuf", "type": "LPSTR" }, { - "name": "szComponentCode", - "type": "LPSTR" + "name": "pcchPathBuf", + "type": "LPDWORD" } ], - "MsiGetShortcutTargetW": [ + "MsiGetTargetPathW": [ { - "name": "szShortcutPath", - "type": "LPCWSTR" + "name": "hInstall", + "type": "MSIHANDLE" }, { - "name": "szProductCode", - "type": "LPWSTR" + "name": "szFolder", + "type": "LPCWSTR" }, { - "name": "szFeatureId", + "name": "szPathBuf", "type": "LPWSTR" }, { - "name": "szComponentCode", - "type": "LPWSTR" + "name": "pcchPathBuf", + "type": "LPDWORD" } ], - "MsiIsProductElevatedA": [ + "MsiSetTargetPathA": [ { - "name": "szProduct", + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", "type": "LPCSTR" }, { - "name": "pfElevated", - "type": "BOOL" + "name": "szFolderPath", + "type": "LPCSTR" } ], - "MsiIsProductElevatedW": [ + "MsiSetTargetPathW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, { - "name": "szProduct", + "name": "szFolder", "type": "LPCWSTR" }, { - "name": "pfElevated", - "type": "BOOL" + "name": "szFolderPath", + "type": "LPCWSTR" } ], - "MsiNotifySidChangeA": [ - { - "name": "pOldSid", - "type": "LPCSTR" - }, + "MsiVerifyDiskSpace": [ { - "name": "pNewSid", - "type": "LPCSTR" + "name": "hInstall", + "type": "MSIHANDLE" } ], - "MsiNotifySidChangeW": [ + "MsiEnableUIPreview": [ { - "name": "pOldSid", - "type": "LPCWSTR" + "name": "hDatabase", + "type": "MSIHANDLE" }, { - "name": "pNewSid", - "type": "LPCWSTR" + "name": "phPreview", + "type": "MSIHANDLE" } ], - "MsiBeginTransactionA": [ - { - "name": "szName", - "type": "LPCSTR" - }, - { - "name": "dwTransactionAttributes", - "type": "DWORD" - }, + "MsiPreviewDialogA": [ { - "name": "phTransactionHandle", + "name": "hPreview", "type": "MSIHANDLE" }, { - "name": "phChangeOfOwnerEvent", - "type": "HANDLE" + "name": "szDialogName", + "type": "LPCSTR" } ], - "MsiBeginTransactionW": [ + "MsiPreviewDialogW": [ { - "name": "szName", - "type": "LPCWSTR" + "name": "hPreview", + "type": "MSIHANDLE" }, { - "name": "dwTransactionAttributes", - "type": "DWORD" - }, + "name": "szDialogName", + "type": "LPCWSTR" + } + ], + "MsiPreviewBillboardA": [ { - "name": "phTransactionHandle", + "name": "hPreview", "type": "MSIHANDLE" }, { - "name": "phChangeOfOwnerEvent", - "type": "HANDLE" - } - ], - "MsiEndTransaction": [ + "name": "szControlName", + "type": "LPCSTR" + }, { - "name": "dwTransactionState", - "type": "DWORD" + "name": "szBillboard", + "type": "LPCSTR" } ], - "MsiJoinTransaction": [ + "MsiPreviewBillboardW": [ { - "name": "hTransactionHandle", + "name": "hPreview", "type": "MSIHANDLE" }, { - "name": "dwTransactionAttributes", - "type": "DWORD" + "name": "szControlName", + "type": "LPCWSTR" }, { - "name": "phChangeOfOwnerEvent", - "type": "HANDLE" + "name": "szBillboard", + "type": "LPCWSTR" } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/msiquery.json b/qiling/extensions/windows_sdk/msiquery.json deleted file mode 100644 index a2e26985d..000000000 --- a/qiling/extensions/windows_sdk/msiquery.json +++ /dev/null @@ -1,1432 +0,0 @@ -{ - "MsiDatabaseOpenViewA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szQuery", - "type": "LPCSTR" - }, - { - "name": "phView", - "type": "MSIHANDLE" - } - ], - "MsiDatabaseOpenViewW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szQuery", - "type": "LPCWSTR" - }, - { - "name": "phView", - "type": "MSIHANDLE" - } - ], - "MsiViewGetErrorA": [ - { - "name": "hView", - "type": "MSIHANDLE" - }, - { - "name": "szColumnNameBuffer", - "type": "LPSTR" - }, - { - "name": "pcchBuf", - "type": "LPDWORD" - } - ], - "MsiViewGetErrorW": [ - { - "name": "hView", - "type": "MSIHANDLE" - }, - { - "name": "szColumnNameBuffer", - "type": "LPWSTR" - }, - { - "name": "pcchBuf", - "type": "LPDWORD" - } - ], - "MsiViewExecute": [ - { - "name": "hView", - "type": "MSIHANDLE" - }, - { - "name": "hRecord", - "type": "MSIHANDLE" - } - ], - "MsiViewFetch": [ - { - "name": "hView", - "type": "MSIHANDLE" - }, - { - "name": "phRecord", - "type": "MSIHANDLE" - } - ], - "MsiViewModify": [ - { - "name": "hView", - "type": "MSIHANDLE" - }, - { - "name": "eModifyMode", - "type": "MSIMODIFY" - }, - { - "name": "hRecord", - "type": "MSIHANDLE" - } - ], - "MsiViewGetColumnInfo": [ - { - "name": "hView", - "type": "MSIHANDLE" - }, - { - "name": "eColumnInfo", - "type": "MSICOLINFO" - }, - { - "name": "phRecord", - "type": "MSIHANDLE" - } - ], - "MsiViewClose": [ - { - "name": "hView", - "type": "MSIHANDLE" - } - ], - "MsiDatabaseGetPrimaryKeysA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCSTR" - }, - { - "name": "phRecord", - "type": "MSIHANDLE" - } - ], - "MsiDatabaseGetPrimaryKeysW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCWSTR" - }, - { - "name": "phRecord", - "type": "MSIHANDLE" - } - ], - "MsiDatabaseIsTablePersistentA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCSTR" - } - ], - "MsiDatabaseIsTablePersistentW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCWSTR" - } - ], - "MsiGetSummaryInformationA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szDatabasePath", - "type": "LPCSTR" - }, - { - "name": "uiUpdateCount", - "type": "UINT" - }, - { - "name": "phSummaryInfo", - "type": "MSIHANDLE" - } - ], - "MsiGetSummaryInformationW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szDatabasePath", - "type": "LPCWSTR" - }, - { - "name": "uiUpdateCount", - "type": "UINT" - }, - { - "name": "phSummaryInfo", - "type": "MSIHANDLE" - } - ], - "MsiSummaryInfoGetPropertyCount": [ - { - "name": "hSummaryInfo", - "type": "MSIHANDLE" - }, - { - "name": "puiPropertyCount", - "type": "PUINT" - } - ], - "MsiSummaryInfoSetPropertyA": [ - { - "name": "hSummaryInfo", - "type": "MSIHANDLE" - }, - { - "name": "uiProperty", - "type": "UINT" - }, - { - "name": "uiDataType", - "type": "UINT" - }, - { - "name": "iValue", - "type": "INT" - }, - { - "name": "pftValue", - "type": "FILETIME" - }, - { - "name": "szValue", - "type": "LPCSTR" - } - ], - "MsiSummaryInfoSetPropertyW": [ - { - "name": "hSummaryInfo", - "type": "MSIHANDLE" - }, - { - "name": "uiProperty", - "type": "UINT" - }, - { - "name": "uiDataType", - "type": "UINT" - }, - { - "name": "iValue", - "type": "INT" - }, - { - "name": "pftValue", - "type": "FILETIME" - }, - { - "name": "szValue", - "type": "LPCWSTR" - } - ], - "MsiSummaryInfoGetPropertyA": [ - { - "name": "hSummaryInfo", - "type": "MSIHANDLE" - }, - { - "name": "uiProperty", - "type": "UINT" - }, - { - "name": "puiDataType", - "type": "PUINT" - }, - { - "name": "piValue", - "type": "LPINT" - }, - { - "name": "pftValue", - "type": "FILETIME" - }, - { - "name": "szValueBuf", - "type": "LPSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiSummaryInfoGetPropertyW": [ - { - "name": "hSummaryInfo", - "type": "MSIHANDLE" - }, - { - "name": "uiProperty", - "type": "UINT" - }, - { - "name": "puiDataType", - "type": "PUINT" - }, - { - "name": "piValue", - "type": "LPINT" - }, - { - "name": "pftValue", - "type": "FILETIME" - }, - { - "name": "szValueBuf", - "type": "LPWSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiSummaryInfoPersist": [ - { - "name": "hSummaryInfo", - "type": "MSIHANDLE" - } - ], - "MsiOpenDatabaseA": [ - { - "name": "szDatabasePath", - "type": "LPCSTR" - }, - { - "name": "szPersist", - "type": "LPCSTR" - }, - { - "name": "phDatabase", - "type": "MSIHANDLE" - } - ], - "MsiOpenDatabaseW": [ - { - "name": "szDatabasePath", - "type": "LPCWSTR" - }, - { - "name": "szPersist", - "type": "LPCWSTR" - }, - { - "name": "phDatabase", - "type": "MSIHANDLE" - } - ], - "MsiDatabaseImportA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szFolderPath", - "type": "LPCSTR" - }, - { - "name": "szFileName", - "type": "LPCSTR" - } - ], - "MsiDatabaseImportW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szFolderPath", - "type": "LPCWSTR" - }, - { - "name": "szFileName", - "type": "LPCWSTR" - } - ], - "MsiDatabaseExportA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCSTR" - }, - { - "name": "szFolderPath", - "type": "LPCSTR" - }, - { - "name": "szFileName", - "type": "LPCSTR" - } - ], - "MsiDatabaseExportW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCWSTR" - }, - { - "name": "szFolderPath", - "type": "LPCWSTR" - }, - { - "name": "szFileName", - "type": "LPCWSTR" - } - ], - "MsiDatabaseMergeA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "hDatabaseMerge", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCSTR" - } - ], - "MsiDatabaseMergeW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "hDatabaseMerge", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCWSTR" - } - ], - "MsiDatabaseGenerateTransformA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "hDatabaseReference", - "type": "MSIHANDLE" - }, - { - "name": "szTransformFile", - "type": "LPCSTR" - }, - { - "name": "iReserved1", - "type": "int" - }, - { - "name": "iReserved2", - "type": "int" - } - ], - "MsiDatabaseGenerateTransformW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "hDatabaseReference", - "type": "MSIHANDLE" - }, - { - "name": "szTransformFile", - "type": "LPCWSTR" - }, - { - "name": "iReserved1", - "type": "int" - }, - { - "name": "iReserved2", - "type": "int" - } - ], - "MsiDatabaseApplyTransformA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTransformFile", - "type": "LPCSTR" - }, - { - "name": "iErrorConditions", - "type": "int" - } - ], - "MsiDatabaseApplyTransformW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTransformFile", - "type": "LPCWSTR" - }, - { - "name": "iErrorConditions", - "type": "int" - } - ], - "MsiCreateTransformSummaryInfoA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "hDatabaseReference", - "type": "MSIHANDLE" - }, - { - "name": "szTransformFile", - "type": "LPCSTR" - }, - { - "name": "iErrorConditions", - "type": "int" - }, - { - "name": "iValidation", - "type": "int" - } - ], - "MsiCreateTransformSummaryInfoW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "hDatabaseReference", - "type": "MSIHANDLE" - }, - { - "name": "szTransformFile", - "type": "LPCWSTR" - }, - { - "name": "iErrorConditions", - "type": "int" - }, - { - "name": "iValidation", - "type": "int" - } - ], - "MsiDatabaseCommit": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - } - ], - "MsiGetDatabaseState": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - } - ], - "MsiCreateRecord": [ - { - "name": "cParams", - "type": "UINT" - } - ], - "MsiRecordIsNull": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - } - ], - "MsiRecordDataSize": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - } - ], - "MsiRecordSetInteger": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "iValue", - "type": "int" - } - ], - "MsiRecordSetStringA": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szValue", - "type": "LPCSTR" - } - ], - "MsiRecordSetStringW": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szValue", - "type": "LPCWSTR" - } - ], - "MsiRecordGetInteger": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - } - ], - "MsiRecordGetStringA": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szValueBuf", - "type": "LPSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiRecordGetStringW": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szValueBuf", - "type": "LPWSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiRecordGetFieldCount": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - } - ], - "MsiRecordSetStreamA": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szFilePath", - "type": "LPCSTR" - } - ], - "MsiRecordSetStreamW": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szFilePath", - "type": "LPCWSTR" - } - ], - "MsiRecordReadStream": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szDataBuf", - "type": "char" - }, - { - "name": "pcbDataBuf", - "type": "LPDWORD" - } - ], - "MsiRecordClearData": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - } - ], - "MsiGetActiveDatabase": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - } - ], - "MsiSetPropertyA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szName", - "type": "LPCSTR" - }, - { - "name": "szValue", - "type": "LPCSTR" - } - ], - "MsiSetPropertyW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szName", - "type": "LPCWSTR" - }, - { - "name": "szValue", - "type": "LPCWSTR" - } - ], - "MsiGetPropertyA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szName", - "type": "LPCSTR" - }, - { - "name": "szValueBuf", - "type": "LPSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiGetPropertyW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szName", - "type": "LPCWSTR" - }, - { - "name": "szValueBuf", - "type": "LPWSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiGetLanguage": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - } - ], - "MsiGetMode": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "eRunMode", - "type": "MSIRUNMODE" - } - ], - "MsiSetMode": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "eRunMode", - "type": "MSIRUNMODE" - }, - { - "name": "fState", - "type": "BOOL" - } - ], - "MsiFormatRecordA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "szResultBuf", - "type": "LPSTR" - }, - { - "name": "pcchResultBuf", - "type": "LPDWORD" - } - ], - "MsiFormatRecordW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "szResultBuf", - "type": "LPWSTR" - }, - { - "name": "pcchResultBuf", - "type": "LPDWORD" - } - ], - "MsiDoActionA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szAction", - "type": "LPCSTR" - } - ], - "MsiDoActionW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szAction", - "type": "LPCWSTR" - } - ], - "MsiSequenceA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szTable", - "type": "LPCSTR" - }, - { - "name": "iSequenceMode", - "type": "INT" - } - ], - "MsiSequenceW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szTable", - "type": "LPCWSTR" - }, - { - "name": "iSequenceMode", - "type": "INT" - } - ], - "MsiProcessMessage": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "eMessageType", - "type": "INSTALLMESSAGE" - }, - { - "name": "hRecord", - "type": "MSIHANDLE" - } - ], - "MsiEvaluateConditionA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szCondition", - "type": "LPCSTR" - } - ], - "MsiEvaluateConditionW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szCondition", - "type": "LPCWSTR" - } - ], - "MsiGetFeatureStateA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "piInstalled", - "type": "INSTALLSTATE" - }, - { - "name": "piAction", - "type": "INSTALLSTATE" - } - ], - "MsiGetFeatureStateW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "piInstalled", - "type": "INSTALLSTATE" - }, - { - "name": "piAction", - "type": "INSTALLSTATE" - } - ], - "MsiSetFeatureStateA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - } - ], - "MsiSetFeatureStateW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - } - ], - "MsiSetFeatureAttributesA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "dwAttributes", - "type": "DWORD" - } - ], - "MsiSetFeatureAttributesW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "dwAttributes", - "type": "DWORD" - } - ], - "MsiGetComponentStateA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "piInstalled", - "type": "INSTALLSTATE" - }, - { - "name": "piAction", - "type": "INSTALLSTATE" - } - ], - "MsiGetComponentStateW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "piInstalled", - "type": "INSTALLSTATE" - }, - { - "name": "piAction", - "type": "INSTALLSTATE" - } - ], - "MsiSetComponentStateA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - } - ], - "MsiSetComponentStateW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - } - ], - "MsiGetFeatureCostA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "iCostTree", - "type": "MSICOSTTREE" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - }, - { - "name": "piCost", - "type": "LPINT" - } - ], - "MsiGetFeatureCostW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "iCostTree", - "type": "MSICOSTTREE" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - }, - { - "name": "piCost", - "type": "LPINT" - } - ], - "MsiEnumComponentCostsA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - }, - { - "name": "szDriveBuf", - "type": "LPSTR" - }, - { - "name": "pcchDriveBuf", - "type": "LPDWORD" - }, - { - "name": "piCost", - "type": "LPINT" - }, - { - "name": "piTempCost", - "type": "LPINT" - } - ], - "MsiEnumComponentCostsW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - }, - { - "name": "szDriveBuf", - "type": "LPWSTR" - }, - { - "name": "pcchDriveBuf", - "type": "LPDWORD" - }, - { - "name": "piCost", - "type": "LPINT" - }, - { - "name": "piTempCost", - "type": "LPINT" - } - ], - "MsiSetInstallLevel": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "iInstallLevel", - "type": "int" - } - ], - "MsiGetFeatureValidStatesA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "lpInstallStates", - "type": "LPDWORD" - } - ], - "MsiGetFeatureValidStatesW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "lpInstallStates", - "type": "LPDWORD" - } - ], - "MsiGetSourcePathA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFolder", - "type": "LPCSTR" - }, - { - "name": "szPathBuf", - "type": "LPSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiGetSourcePathW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFolder", - "type": "LPCWSTR" - }, - { - "name": "szPathBuf", - "type": "LPWSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiGetTargetPathA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFolder", - "type": "LPCSTR" - }, - { - "name": "szPathBuf", - "type": "LPSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiGetTargetPathW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFolder", - "type": "LPCWSTR" - }, - { - "name": "szPathBuf", - "type": "LPWSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiSetTargetPathA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFolder", - "type": "LPCSTR" - }, - { - "name": "szFolderPath", - "type": "LPCSTR" - } - ], - "MsiSetTargetPathW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFolder", - "type": "LPCWSTR" - }, - { - "name": "szFolderPath", - "type": "LPCWSTR" - } - ], - "MsiVerifyDiskSpace": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - } - ], - "MsiEnableUIPreview": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "phPreview", - "type": "MSIHANDLE" - } - ], - "MsiPreviewDialogA": [ - { - "name": "hPreview", - "type": "MSIHANDLE" - }, - { - "name": "szDialogName", - "type": "LPCSTR" - } - ], - "MsiPreviewDialogW": [ - { - "name": "hPreview", - "type": "MSIHANDLE" - }, - { - "name": "szDialogName", - "type": "LPCWSTR" - } - ], - "MsiPreviewBillboardA": [ - { - "name": "hPreview", - "type": "MSIHANDLE" - }, - { - "name": "szControlName", - "type": "LPCSTR" - }, - { - "name": "szBillboard", - "type": "LPCSTR" - } - ], - "MsiPreviewBillboardW": [ - { - "name": "hPreview", - "type": "MSIHANDLE" - }, - { - "name": "szControlName", - "type": "LPCWSTR" - }, - { - "name": "szBillboard", - "type": "LPCWSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mssip.json b/qiling/extensions/windows_sdk/mssip.json deleted file mode 100644 index 31bb403b3..000000000 --- a/qiling/extensions/windows_sdk/mssip.json +++ /dev/null @@ -1,144 +0,0 @@ -{ - "CryptSIPGetSignedDataMsg": [ - { - "name": "pSubjectInfo", - "type": "SIP_SUBJECTINFO" - }, - { - "name": "pdwEncodingType", - "type": "DWORD" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pcbSignedDataMsg", - "type": "DWORD" - }, - { - "name": "pbSignedDataMsg", - "type": "BYTE" - } - ], - "CryptSIPPutSignedDataMsg": [ - { - "name": "pSubjectInfo", - "type": "SIP_SUBJECTINFO" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pdwIndex", - "type": "DWORD" - }, - { - "name": "cbSignedDataMsg", - "type": "DWORD" - }, - { - "name": "pbSignedDataMsg", - "type": "BYTE" - } - ], - "CryptSIPCreateIndirectData": [ - { - "name": "pSubjectInfo", - "type": "SIP_SUBJECTINFO" - }, - { - "name": "pcbIndirectData", - "type": "DWORD" - }, - { - "name": "pIndirectData", - "type": "SIP_INDIRECT_DATA" - } - ], - "CryptSIPVerifyIndirectData": [ - { - "name": "pSubjectInfo", - "type": "SIP_SUBJECTINFO" - }, - { - "name": "pIndirectData", - "type": "SIP_INDIRECT_DATA" - } - ], - "CryptSIPRemoveSignedDataMsg": [ - { - "name": "pSubjectInfo", - "type": "SIP_SUBJECTINFO" - }, - { - "name": "dwIndex", - "type": "DWORD" - } - ], - "CryptSIPLoad": [ - { - "name": "pgSubject", - "type": "GUID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pSipDispatch", - "type": "SIP_DISPATCH_INFO" - } - ], - "CryptSIPRetrieveSubjectGuid": [ - { - "name": "FileName", - "type": "LPCWSTR" - }, - { - "name": "hFileIn", - "type": "HANDLE" - }, - { - "name": "pgSubject", - "type": "GUID" - } - ], - "CryptSIPRetrieveSubjectGuidForCatalogFile": [ - { - "name": "FileName", - "type": "LPCWSTR" - }, - { - "name": "hFileIn", - "type": "HANDLE" - }, - { - "name": "pgSubject", - "type": "GUID" - } - ], - "CryptSIPAddProvider": [ - { - "name": "psNewProv", - "type": "SIP_ADD_NEWPROVIDER" - } - ], - "CryptSIPRemoveProvider": [ - { - "name": "pgProv", - "type": "GUID" - } - ], - "CryptSIPGetCaps": [ - { - "name": "pSubjInfo", - "type": "SIP_SUBJECTINFO" - }, - { - "name": "pCaps", - "type": "SIP_CAP_SET" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/namedpipeapi.json b/qiling/extensions/windows_sdk/namedpipeapi.json deleted file mode 100644 index b70b04b87..000000000 --- a/qiling/extensions/windows_sdk/namedpipeapi.json +++ /dev/null @@ -1,138 +0,0 @@ -{ - "CreatePipe": [ - { - "name": "hReadPipe", - "type": "PHANDLE" - }, - { - "name": "hWritePipe", - "type": "PHANDLE" - }, - { - "name": "lpPipeAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "ConnectNamedPipe": [ - { - "name": "hNamedPipe", - "type": "HANDLE" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "DisconnectNamedPipe": [ - { - "name": "hNamedPipe", - "type": "HANDLE" - } - ], - "SetNamedPipeHandleState": [ - { - "name": "hNamedPipe", - "type": "HANDLE" - }, - { - "name": "lpMode", - "type": "LPDWORD" - }, - { - "name": "lpMaxCollectionCount", - "type": "LPDWORD" - }, - { - "name": "lpCollectDataTimeout", - "type": "LPDWORD" - } - ], - "PeekNamedPipe": [ - { - "name": "hNamedPipe", - "type": "HANDLE" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "nBufferSize", - "type": "DWORD" - }, - { - "name": "lpBytesRead", - "type": "LPDWORD" - }, - { - "name": "lpTotalBytesAvail", - "type": "LPDWORD" - }, - { - "name": "lpBytesLeftThisMessage", - "type": "LPDWORD" - } - ], - "TransactNamedPipe": [ - { - "name": "hNamedPipe", - "type": "HANDLE" - }, - { - "name": "lpInBuffer", - "type": "LPVOID" - }, - { - "name": "nInBufferSize", - "type": "DWORD" - }, - { - "name": "lpOutBuffer", - "type": "LPVOID" - }, - { - "name": "nOutBufferSize", - "type": "DWORD" - }, - { - "name": "lpBytesRead", - "type": "LPDWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "ImpersonateNamedPipeClient": [ - { - "name": "hNamedPipe", - "type": "HANDLE" - } - ], - "GetNamedPipeInfo": [ - { - "name": "hNamedPipe", - "type": "HANDLE" - }, - { - "name": "lpFlags", - "type": "LPDWORD" - }, - { - "name": "lpOutBufferSize", - "type": "LPDWORD" - }, - { - "name": "lpInBufferSize", - "type": "LPDWORD" - }, - { - "name": "lpMaxInstances", - "type": "LPDWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/namespaceapi.json b/qiling/extensions/windows_sdk/namespaceapi.json deleted file mode 100644 index 978397f0f..000000000 --- a/qiling/extensions/windows_sdk/namespaceapi.json +++ /dev/null @@ -1,28 +0,0 @@ -{ - "ClosePrivateNamespace": [ - { - "name": "Handle", - "type": "HANDLE" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "AddSIDToBoundaryDescriptor": [ - { - "name": "BoundaryDescriptor", - "type": "HANDLE" - }, - { - "name": "RequiredSid", - "type": "PSID" - } - ], - "DeleteBoundaryDescriptor": [ - { - "name": "BoundaryDescriptor", - "type": "HANDLE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/nb30.json b/qiling/extensions/windows_sdk/nb30.json deleted file mode 100644 index 84a3ee53f..000000000 --- a/qiling/extensions/windows_sdk/nb30.json +++ /dev/null @@ -1,8 +0,0 @@ -{ - "Netbios": [ - { - "name": "pncb", - "type": "PNCB" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ncrypt.json b/qiling/extensions/windows_sdk/ncrypt.json index 98f9b4afb..46e3b019d 100644 --- a/qiling/extensions/windows_sdk/ncrypt.json +++ b/qiling/extensions/windows_sdk/ncrypt.json @@ -1,47 +1,11 @@ { - "NCryptOpenStorageProvider": [ + "NCryptRegisterProtectionDescriptorName": [ { - "name": "phProvider", - "type": "NCRYPT_PROV_HANDLE" - }, - { - "name": "pszProviderName", + "name": "pwszName", "type": "LPCWSTR" }, { - "name": "dwFlags", - "type": "DWORD" - } - ], - "NCryptEnumAlgorithms": [ - { - "name": "hProvider", - "type": "NCRYPT_PROV_HANDLE" - }, - { - "name": "dwAlgOperations", - "type": "DWORD" - }, - { - "name": "pdwAlgCount", - "type": "DWORD" - }, - { - "name": "ppAlgList", - "type": "NCryptAlgorithmName" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "NCryptIsAlgSupported": [ - { - "name": "hProvider", - "type": "NCRYPT_PROV_HANDLE" - }, - { - "name": "pszAlgId", + "name": "pwszDescriptorString", "type": "LPCWSTR" }, { @@ -49,556 +13,210 @@ "type": "DWORD" } ], - "NCryptEnumKeys": [ - { - "name": "hProvider", - "type": "NCRYPT_PROV_HANDLE" - }, + "NCryptQueryProtectionDescriptorName": [ { - "name": "pszScope", + "name": "pwszName", "type": "LPCWSTR" }, { - "name": "ppKeyName", - "type": "NCryptKeyName" - }, - { - "name": "ppEnumState", - "type": "PVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "NCryptEnumStorageProviders": [ - { - "name": "pdwProviderCount", - "type": "DWORD" + "name": "pwszDescriptorString", + "type": "LPWSTR" }, { - "name": "ppProviderList", - "type": "NCryptProviderName" + "name": "pcDescriptorString", + "type": "SIZE_T" }, { "name": "dwFlags", "type": "DWORD" } ], - "NCryptFreeBuffer": [ - { - "name": "pvInput", - "type": "PVOID" - } - ], - "NCryptOpenKey": [ - { - "name": "hProvider", - "type": "NCRYPT_PROV_HANDLE" - }, - { - "name": "phKey", - "type": "NCRYPT_KEY_HANDLE" - }, + "NCryptCreateProtectionDescriptor": [ { - "name": "pszKeyName", + "name": "pwszDescriptorString", "type": "LPCWSTR" }, - { - "name": "dwLegacyKeySpec", - "type": "DWORD" - }, { "name": "dwFlags", "type": "DWORD" - } - ], - "NCryptCreatePersistedKey": [ - { - "name": "hProvider", - "type": "NCRYPT_PROV_HANDLE" - }, - { - "name": "phKey", - "type": "NCRYPT_KEY_HANDLE" - }, - { - "name": "pszAlgId", - "type": "LPCWSTR" - }, - { - "name": "pszKeyName", - "type": "LPCWSTR" - }, - { - "name": "dwLegacyKeySpec", - "type": "DWORD" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "phDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" } ], - "NCryptGetProperty": [ - { - "name": "hObject", - "type": "NCRYPT_HANDLE" - }, + "NCryptCloseProtectionDescriptor": [ { - "name": "pszProperty", - "type": "LPCWSTR" - }, - { - "name": "pbOutput", - "type": "PBYTE" - }, - { - "name": "cbOutput", - "type": "DWORD" - }, - { - "name": "pcbResult", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "NCryptSetProperty": [ - { - "name": "hObject", - "type": "NCRYPT_HANDLE" - }, - { - "name": "pszProperty", - "type": "LPCWSTR" - }, - { - "name": "pbInput", - "type": "PBYTE" - }, - { - "name": "cbInput", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" } ], - "NCryptFinalizeKey": [ + "NCryptGetProtectionDescriptorInfo": [ { - "name": "hKey", - "type": "NCRYPT_KEY_HANDLE" + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" }, { - "name": "dwFlags", - "type": "DWORD" - } - ], - "NCryptEncrypt": [ - { - "name": "hKey", - "type": "NCRYPT_KEY_HANDLE" - }, - { - "name": "pbInput", - "type": "PBYTE" + "name": "pMemPara", + "type": "NCRYPT_ALLOC_PARA" }, { - "name": "cbInput", + "name": "dwInfoType", "type": "DWORD" }, { - "name": "pPaddingInfo", + "name": "ppvInfo", "type": "void" - }, - { - "name": "pbOutput", - "type": "PBYTE" - }, - { - "name": "cbOutput", - "type": "DWORD" - }, - { - "name": "pcbResult", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" } ], - "NCryptDecrypt": [ + "NCryptProtectSecret": [ { - "name": "hKey", - "type": "NCRYPT_KEY_HANDLE" - }, - { - "name": "pbInput", - "type": "PBYTE" - }, - { - "name": "cbInput", - "type": "DWORD" - }, - { - "name": "pPaddingInfo", - "type": "void" - }, - { - "name": "pbOutput", - "type": "PBYTE" - }, - { - "name": "cbOutput", - "type": "DWORD" - }, - { - "name": "pcbResult", - "type": "DWORD" + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" }, { "name": "dwFlags", "type": "DWORD" - } - ], - "NCryptImportKey": [ - { - "name": "hProvider", - "type": "NCRYPT_PROV_HANDLE" - }, - { - "name": "hImportKey", - "type": "NCRYPT_KEY_HANDLE" - }, - { - "name": "pszBlobType", - "type": "LPCWSTR" - }, - { - "name": "pParameterList", - "type": "NCryptBufferDesc" - }, - { - "name": "phKey", - "type": "NCRYPT_KEY_HANDLE" }, { "name": "pbData", - "type": "PBYTE" + "type": "BYTE" }, { "name": "cbData", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "NCryptExportKey": [ - { - "name": "hKey", - "type": "NCRYPT_KEY_HANDLE" - }, - { - "name": "hExportKey", - "type": "NCRYPT_KEY_HANDLE" - }, - { - "name": "pszBlobType", - "type": "LPCWSTR" + "type": "ULONG" }, { - "name": "pParameterList", - "type": "NCryptBufferDesc" + "name": "pMemPara", + "type": "NCRYPT_ALLOC_PARA" }, { - "name": "pbOutput", - "type": "PBYTE" + "name": "hWnd", + "type": "HWND" }, { - "name": "cbOutput", - "type": "DWORD" - }, - { - "name": "pcbResult", - "type": "DWORD" + "name": "ppbProtectedBlob", + "type": "BYTE" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "pcbProtectedBlob", + "type": "ULONG" } ], - "NCryptSignHash": [ - { - "name": "hKey", - "type": "NCRYPT_KEY_HANDLE" - }, - { - "name": "pPaddingInfo", - "type": "void" - }, - { - "name": "pbHashValue", - "type": "PBYTE" - }, - { - "name": "cbHashValue", - "type": "DWORD" - }, + "NCryptUnprotectSecret": [ { - "name": "pbSignature", - "type": "PBYTE" - }, - { - "name": "cbSignature", - "type": "DWORD" - }, - { - "name": "pcbResult", - "type": "DWORD" + "name": "phDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" }, { "name": "dwFlags", "type": "DWORD" - } - ], - "NCryptVerifySignature": [ - { - "name": "hKey", - "type": "NCRYPT_KEY_HANDLE" }, { - "name": "pPaddingInfo", - "type": "void" + "name": "pbProtectedBlob", + "type": "BYTE" }, { - "name": "pbHashValue", - "type": "PBYTE" + "name": "cbProtectedBlob", + "type": "ULONG" }, { - "name": "cbHashValue", - "type": "DWORD" + "name": "pMemPara", + "type": "NCRYPT_ALLOC_PARA" }, { - "name": "pbSignature", - "type": "PBYTE" + "name": "hWnd", + "type": "HWND" }, { - "name": "cbSignature", - "type": "DWORD" + "name": "ppbData", + "type": "BYTE" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "pcbData", + "type": "ULONG" } ], - "NCryptDeleteKey": [ + "NCryptStreamOpenToProtect": [ { - "name": "hKey", - "type": "NCRYPT_KEY_HANDLE" + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" }, { "name": "dwFlags", "type": "DWORD" - } - ], - "NCryptFreeObject": [ - { - "name": "hObject", - "type": "NCRYPT_HANDLE" - } - ], - "NCryptIsKeyHandle": [ - { - "name": "hKey", - "type": "NCRYPT_KEY_HANDLE" - } - ], - "NCryptTranslateHandle": [ - { - "name": "phProvider", - "type": "NCRYPT_PROV_HANDLE" }, { - "name": "phKey", - "type": "NCRYPT_KEY_HANDLE" + "name": "hWnd", + "type": "HWND" }, { - "name": "hLegacyProv", - "type": "HCRYPTPROV" + "name": "pStreamInfo", + "type": "NCRYPT_PROTECT_STREAM_INFO" }, { - "name": "hLegacyKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwLegacyKeySpec", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" + "name": "phStream", + "type": "NCRYPT_STREAM_HANDLE" } ], - "NCryptNotifyChangeKey": [ + "NCryptStreamOpenToUnprotect": [ { - "name": "hProvider", - "type": "NCRYPT_PROV_HANDLE" - }, - { - "name": "phEvent", - "type": "HANDLE" + "name": "pStreamInfo", + "type": "NCRYPT_PROTECT_STREAM_INFO" }, { "name": "dwFlags", "type": "DWORD" - } - ], - "NCryptSecretAgreement": [ - { - "name": "hPrivKey", - "type": "NCRYPT_KEY_HANDLE" }, { - "name": "hPubKey", - "type": "NCRYPT_KEY_HANDLE" + "name": "hWnd", + "type": "HWND" }, { - "name": "phAgreedSecret", - "type": "NCRYPT_SECRET_HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" + "name": "phStream", + "type": "NCRYPT_STREAM_HANDLE" } ], - "NCryptDeriveKey": [ - { - "name": "hSharedSecret", - "type": "NCRYPT_SECRET_HANDLE" - }, - { - "name": "pwszKDF", - "type": "LPCWSTR" - }, - { - "name": "pParameterList", - "type": "NCryptBufferDesc" - }, - { - "name": "pbDerivedKey", - "type": "PBYTE" - }, + "NCryptStreamOpenToUnprotectEx": [ { - "name": "cbDerivedKey", - "type": "DWORD" - }, - { - "name": "pcbResult", - "type": "DWORD" + "name": "pStreamInfo", + "type": "NCRYPT_PROTECT_STREAM_INFO_EX" }, { "name": "dwFlags", - "type": "ULONG" - } - ], - "NCryptKeyDerivation": [ - { - "name": "hKey", - "type": "NCRYPT_KEY_HANDLE" - }, - { - "name": "pParameterList", - "type": "NCryptBufferDesc" - }, - { - "name": "pbDerivedKey", - "type": "PUCHAR" - }, - { - "name": "cbDerivedKey", "type": "DWORD" }, { - "name": "pcbResult", - "type": "DWORD" + "name": "hWnd", + "type": "HWND" }, { - "name": "dwFlags", - "type": "ULONG" + "name": "phStream", + "type": "NCRYPT_STREAM_HANDLE" } ], - "NCryptCreateClaim": [ + "NCryptStreamUpdate": [ { - "name": "hSubjectKey", - "type": "NCRYPT_KEY_HANDLE" + "name": "hStream", + "type": "NCRYPT_STREAM_HANDLE" }, { - "name": "hAuthorityKey", - "type": "NCRYPT_KEY_HANDLE" - }, - { - "name": "dwClaimType", - "type": "DWORD" - }, - { - "name": "pParameterList", - "type": "NCryptBufferDesc" - }, - { - "name": "pbClaimBlob", - "type": "PBYTE" - }, - { - "name": "cbClaimBlob", - "type": "DWORD" + "name": "pbData", + "type": "BYTE" }, { - "name": "pcbResult", - "type": "DWORD" + "name": "cbData", + "type": "SIZE_T" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "fFinal", + "type": "BOOL" } ], - "NCryptVerifyClaim": [ - { - "name": "hSubjectKey", - "type": "NCRYPT_KEY_HANDLE" - }, + "NCryptStreamClose": [ { - "name": "hAuthorityKey", - "type": "NCRYPT_KEY_HANDLE" - }, - { - "name": "dwClaimType", - "type": "DWORD" - }, - { - "name": "pParameterList", - "type": "NCryptBufferDesc" - }, - { - "name": "pbClaimBlob", - "type": "PBYTE" - }, - { - "name": "cbClaimBlob", - "type": "DWORD" - }, - { - "name": "pOutput", - "type": "NCryptBufferDesc" - }, - { - "name": "dwFlags", - "type": "DWORD" + "name": "hStream", + "type": "NCRYPT_STREAM_HANDLE" } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ncryptprotect.json b/qiling/extensions/windows_sdk/ncryptprotect.json deleted file mode 100644 index 46e3b019d..000000000 --- a/qiling/extensions/windows_sdk/ncryptprotect.json +++ /dev/null @@ -1,222 +0,0 @@ -{ - "NCryptRegisterProtectionDescriptorName": [ - { - "name": "pwszName", - "type": "LPCWSTR" - }, - { - "name": "pwszDescriptorString", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "NCryptQueryProtectionDescriptorName": [ - { - "name": "pwszName", - "type": "LPCWSTR" - }, - { - "name": "pwszDescriptorString", - "type": "LPWSTR" - }, - { - "name": "pcDescriptorString", - "type": "SIZE_T" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "NCryptCreateProtectionDescriptor": [ - { - "name": "pwszDescriptorString", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phDescriptor", - "type": "NCRYPT_DESCRIPTOR_HANDLE" - } - ], - "NCryptCloseProtectionDescriptor": [ - { - "name": "hDescriptor", - "type": "NCRYPT_DESCRIPTOR_HANDLE" - } - ], - "NCryptGetProtectionDescriptorInfo": [ - { - "name": "hDescriptor", - "type": "NCRYPT_DESCRIPTOR_HANDLE" - }, - { - "name": "pMemPara", - "type": "NCRYPT_ALLOC_PARA" - }, - { - "name": "dwInfoType", - "type": "DWORD" - }, - { - "name": "ppvInfo", - "type": "void" - } - ], - "NCryptProtectSecret": [ - { - "name": "hDescriptor", - "type": "NCRYPT_DESCRIPTOR_HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "ULONG" - }, - { - "name": "pMemPara", - "type": "NCRYPT_ALLOC_PARA" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "ppbProtectedBlob", - "type": "BYTE" - }, - { - "name": "pcbProtectedBlob", - "type": "ULONG" - } - ], - "NCryptUnprotectSecret": [ - { - "name": "phDescriptor", - "type": "NCRYPT_DESCRIPTOR_HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbProtectedBlob", - "type": "BYTE" - }, - { - "name": "cbProtectedBlob", - "type": "ULONG" - }, - { - "name": "pMemPara", - "type": "NCRYPT_ALLOC_PARA" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "ppbData", - "type": "BYTE" - }, - { - "name": "pcbData", - "type": "ULONG" - } - ], - "NCryptStreamOpenToProtect": [ - { - "name": "hDescriptor", - "type": "NCRYPT_DESCRIPTOR_HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "pStreamInfo", - "type": "NCRYPT_PROTECT_STREAM_INFO" - }, - { - "name": "phStream", - "type": "NCRYPT_STREAM_HANDLE" - } - ], - "NCryptStreamOpenToUnprotect": [ - { - "name": "pStreamInfo", - "type": "NCRYPT_PROTECT_STREAM_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "phStream", - "type": "NCRYPT_STREAM_HANDLE" - } - ], - "NCryptStreamOpenToUnprotectEx": [ - { - "name": "pStreamInfo", - "type": "NCRYPT_PROTECT_STREAM_INFO_EX" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "phStream", - "type": "NCRYPT_STREAM_HANDLE" - } - ], - "NCryptStreamUpdate": [ - { - "name": "hStream", - "type": "NCRYPT_STREAM_HANDLE" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "SIZE_T" - }, - { - "name": "fFinal", - "type": "BOOL" - } - ], - "NCryptStreamClose": [ - { - "name": "hStream", - "type": "NCRYPT_STREAM_HANDLE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/netfw.json b/qiling/extensions/windows_sdk/netfw.json deleted file mode 100644 index d9001a316..000000000 --- a/qiling/extensions/windows_sdk/netfw.json +++ /dev/null @@ -1,144 +0,0 @@ -{ - "NetworkIsolationSetupAppContainerBinaries": [ - { - "name": "applicationContainerSid", - "type": "PSID" - }, - { - "name": "packageFullName", - "type": "LPCWSTR" - }, - { - "name": "packageFolder", - "type": "LPCWSTR" - }, - { - "name": "displayName", - "type": "LPCWSTR" - }, - { - "name": "bBinariesFullyComputed", - "type": "BOOL" - }, - { - "name": "binaries", - "type": "LPCWSTR" - }, - { - "name": "binariesCount", - "type": "DWORD" - } - ], - "NetworkIsolationRegisterForAppContainerChanges": [ - { - "name": "flags", - "type": "DWORD" - }, - { - "name": "callback", - "type": "PAC_CHANGES_CALLBACK_FN" - }, - { - "name": "context", - "type": "PVOID" - }, - { - "name": "registrationObject", - "type": "HANDLE" - } - ], - "NetworkIsolationUnregisterForAppContainerChanges": [ - { - "name": "registrationObject", - "type": "HANDLE" - } - ], - "NetworkIsolationEnumerateAppContainerRules": [ - { - "name": "newEnum", - "type": "IEnumVARIANT" - } - ], - "NetworkIsolationFreeAppContainers": [ - { - "name": "pPublicAppCs", - "type": "PINET_FIREWALL_APP_CONTAINER" - } - ], - "NetworkIsolationEnumAppContainers": [ - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "pdwNumPublicAppCs", - "type": "DWORD" - }, - { - "name": "ppPublicAppCs", - "type": "PINET_FIREWALL_APP_CONTAINER" - } - ], - "NetworkIsolationGetAppContainerConfig": [ - { - "name": "pdwNumPublicAppCs", - "type": "DWORD" - }, - { - "name": "appContainerSids", - "type": "PSID_AND_ATTRIBUTES" - } - ], - "NetworkIsolationSetAppContainerConfig": [ - { - "name": "dwNumPublicAppCs", - "type": "DWORD" - }, - { - "name": "appContainerSids", - "type": "PSID_AND_ATTRIBUTES" - } - ], - "NetworkIsolationDiagnoseConnectFailureAndGetInfo": [ - { - "name": "wszServerName", - "type": "LPCWSTR" - }, - { - "name": "netIsoError", - "type": "NETISO_ERROR_TYPE" - } - ], - "NetworkIsolationGetEnterpriseIdAsync": [ - { - "name": "wszServerName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "context", - "type": "void" - }, - { - "name": "callback", - "type": "PNETISO_EDP_ID_CALLBACK_FN" - }, - { - "name": "hOperation", - "type": "HANDLE" - } - ], - "NetworkIsolationGetEnterpriseIdClose": [ - { - "name": "hOperation", - "type": "HANDLE" - }, - { - "name": "bWaitForOperation", - "type": "BOOL" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/netioapi.json b/qiling/extensions/windows_sdk/netioapi.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/netioapi.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/interactioncontext.json b/qiling/extensions/windows_sdk/ninput.json similarity index 100% rename from qiling/extensions/windows_sdk/interactioncontext.json rename to qiling/extensions/windows_sdk/ninput.json diff --git a/qiling/extensions/windows_sdk/ntdsapi.json b/qiling/extensions/windows_sdk/ntdsapi.json index e0b6ea401..6d1400022 100644 --- a/qiling/extensions/windows_sdk/ntdsapi.json +++ b/qiling/extensions/windows_sdk/ntdsapi.json @@ -1,1520 +1,312 @@ { - "DsBindW": [ - { - "name": "DomainControllerName", - "type": "LPCWSTR" - }, - { - "name": "DnsDomainName", - "type": "LPCWSTR" - }, - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsBindA": [ - { - "name": "DomainControllerName", - "type": "LPCSTR" - }, - { - "name": "DnsDomainName", - "type": "LPCSTR" - }, - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsBindWithCredW": [ - { - "name": "DomainControllerName", - "type": "LPCWSTR" - }, - { - "name": "DnsDomainName", - "type": "LPCWSTR" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsBindWithCredA": [ - { - "name": "DomainControllerName", - "type": "LPCSTR" - }, - { - "name": "DnsDomainName", - "type": "LPCSTR" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsBindWithSpnW": [ - { - "name": "DomainControllerName", - "type": "LPCWSTR" - }, - { - "name": "DnsDomainName", - "type": "LPCWSTR" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "ServicePrincipalName", - "type": "LPCWSTR" - }, - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsBindWithSpnA": [ - { - "name": "DomainControllerName", - "type": "LPCSTR" - }, - { - "name": "DnsDomainName", - "type": "LPCSTR" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "ServicePrincipalName", - "type": "LPCSTR" - }, - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsBindWithSpnExW": [ - { - "name": "DomainControllerName", - "type": "LPCWSTR" - }, - { - "name": "DnsDomainName", - "type": "LPCWSTR" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "ServicePrincipalName", - "type": "LPCWSTR" - }, - { - "name": "BindFlags", - "type": "DWORD" - }, - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsBindWithSpnExA": [ - { - "name": "DomainControllerName", - "type": "LPCSTR" - }, - { - "name": "DnsDomainName", - "type": "LPCSTR" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "ServicePrincipalName", - "type": "LPCSTR" - }, - { - "name": "BindFlags", - "type": "DWORD" - }, - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsBindByInstanceW": [ - { - "name": "ServerName", - "type": "LPCWSTR" - }, - { - "name": "Annotation", - "type": "LPCWSTR" - }, - { - "name": "InstanceGuid", - "type": "GUID" - }, - { - "name": "DnsDomainName", - "type": "LPCWSTR" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "ServicePrincipalName", - "type": "LPCWSTR" - }, - { - "name": "BindFlags", - "type": "DWORD" - }, - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsBindByInstanceA": [ - { - "name": "ServerName", - "type": "LPCSTR" - }, - { - "name": "Annotation", - "type": "LPCSTR" - }, - { - "name": "InstanceGuid", - "type": "GUID" - }, - { - "name": "DnsDomainName", - "type": "LPCSTR" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "ServicePrincipalName", - "type": "LPCSTR" - }, - { - "name": "BindFlags", - "type": "DWORD" - }, - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsBindToISTGW": [ - { - "name": "SiteName", - "type": "LPCWSTR" - }, - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsBindToISTGA": [ - { - "name": "SiteName", - "type": "LPCSTR" - }, - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsBindingSetTimeout": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "cTimeoutSecs", - "type": "ULONG" - } - ], - "DsUnBindW": [ - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsUnBindA": [ - { - "name": "phDS", - "type": "HANDLE" - } - ], - "DsMakePasswordCredentialsW": [ - { - "name": "User", - "type": "LPCWSTR" - }, - { - "name": "Domain", - "type": "LPCWSTR" - }, - { - "name": "Password", - "type": "LPCWSTR" - }, - { - "name": "pAuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - } - ], - "DsMakePasswordCredentialsA": [ - { - "name": "User", - "type": "LPCSTR" - }, - { - "name": "Domain", - "type": "LPCSTR" - }, - { - "name": "Password", - "type": "LPCSTR" - }, - { - "name": "pAuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - } - ], - "DsFreePasswordCredentials": [ - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - } - ], - "DsCrackNamesW": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "flags", - "type": "DS_NAME_FLAGS" - }, - { - "name": "formatOffered", - "type": "DS_NAME_FORMAT" - }, - { - "name": "formatDesired", - "type": "DS_NAME_FORMAT" - }, - { - "name": "cNames", - "type": "DWORD" - }, - { - "name": "rpNames", - "type": "LPCWSTR" - }, - { - "name": "ppResult", - "type": "PDS_NAME_RESULTW" - } - ], - "DsCrackNamesA": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "flags", - "type": "DS_NAME_FLAGS" - }, - { - "name": "formatOffered", - "type": "DS_NAME_FORMAT" - }, - { - "name": "formatDesired", - "type": "DS_NAME_FORMAT" - }, - { - "name": "cNames", - "type": "DWORD" - }, - { - "name": "rpNames", - "type": "LPCSTR" - }, - { - "name": "ppResult", - "type": "PDS_NAME_RESULTA" - } - ], - "DsFreeNameResultW": [ - { - "name": "pResult", - "type": "DS_NAME_RESULTW" - } - ], - "DsFreeNameResultA": [ - { - "name": "pResult", - "type": "DS_NAME_RESULTA" - } - ], - "DsGetSpnA": [ - { - "name": "ServiceType", - "type": "DS_SPN_NAME_TYPE" - }, - { - "name": "ServiceClass", - "type": "LPCSTR" - }, - { - "name": "ServiceName", - "type": "LPCSTR" - }, - { - "name": "InstancePort", - "type": "USHORT" - }, - { - "name": "cInstanceNames", - "type": "USHORT" - }, - { - "name": "pInstanceNames", - "type": "LPCSTR" - }, - { - "name": "pInstancePorts", - "type": "USHORT" - }, - { - "name": "pcSpn", - "type": "DWORD" - }, - { - "name": "prpszSpn", - "type": "LPSTR" - } - ], - "DsGetSpnW": [ - { - "name": "ServiceType", - "type": "DS_SPN_NAME_TYPE" - }, - { - "name": "ServiceClass", - "type": "LPCWSTR" - }, - { - "name": "ServiceName", - "type": "LPCWSTR" - }, - { - "name": "InstancePort", - "type": "USHORT" - }, - { - "name": "cInstanceNames", - "type": "USHORT" - }, - { - "name": "pInstanceNames", - "type": "LPCWSTR" - }, - { - "name": "pInstancePorts", - "type": "USHORT" - }, - { - "name": "pcSpn", - "type": "DWORD" - }, - { - "name": "prpszSpn", - "type": "LPWSTR" - } - ], - "DsFreeSpnArrayA": [ - { - "name": "cSpn", - "type": "DWORD" - }, - { - "name": "rpszSpn", - "type": "LPSTR" - } - ], - "DsFreeSpnArrayW": [ - { - "name": "cSpn", - "type": "DWORD" - }, - { - "name": "rpszSpn", - "type": "LPWSTR" - } - ], - "DsWriteAccountSpnA": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "Operation", - "type": "DS_SPN_WRITE_OP" - }, - { - "name": "pszAccount", - "type": "LPCSTR" - }, - { - "name": "cSpn", - "type": "DWORD" - }, - { - "name": "rpszSpn", - "type": "LPCSTR" - } - ], - "DsWriteAccountSpnW": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "Operation", - "type": "DS_SPN_WRITE_OP" - }, - { - "name": "pszAccount", - "type": "LPCWSTR" - }, - { - "name": "cSpn", - "type": "DWORD" - }, - { - "name": "rpszSpn", - "type": "LPCWSTR" - } - ], - "DsClientMakeSpnForTargetServerW": [ - { - "name": "ServiceClass", - "type": "LPCWSTR" - }, - { - "name": "ServiceName", - "type": "LPCWSTR" - }, - { - "name": "pcSpnLength", - "type": "DWORD" - }, - { - "name": "pszSpn", - "type": "LPWSTR" - } - ], - "DsClientMakeSpnForTargetServerA": [ - { - "name": "ServiceClass", - "type": "LPCSTR" - }, - { - "name": "ServiceName", - "type": "LPCSTR" - }, - { - "name": "pcSpnLength", - "type": "DWORD" - }, - { - "name": "pszSpn", - "type": "LPSTR" - } - ], - "DsServerRegisterSpnA": [ - { - "name": "Operation", - "type": "DS_SPN_WRITE_OP" - }, - { - "name": "ServiceClass", - "type": "LPCSTR" - }, - { - "name": "UserObjectDN", - "type": "LPCSTR" - } - ], - "DsServerRegisterSpnW": [ - { - "name": "Operation", - "type": "DS_SPN_WRITE_OP" - }, + "DsMakeSpnW": [ { "name": "ServiceClass", "type": "LPCWSTR" }, { - "name": "UserObjectDN", - "type": "LPCWSTR" - } - ], - "DsReplicaSyncA": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "NameContext", - "type": "LPCSTR" - }, - { - "name": "pUuidDsaSrc", - "type": "UUID" - }, - { - "name": "Options", - "type": "ULONG" - } - ], - "DsReplicaSyncW": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "NameContext", - "type": "LPCWSTR" - }, - { - "name": "pUuidDsaSrc", - "type": "UUID" - }, - { - "name": "Options", - "type": "ULONG" - } - ], - "DsReplicaAddA": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "NameContext", - "type": "LPCSTR" - }, - { - "name": "SourceDsaDn", - "type": "LPCSTR" - }, - { - "name": "TransportDn", - "type": "LPCSTR" - }, - { - "name": "SourceDsaAddress", - "type": "LPCSTR" - }, - { - "name": "pSchedule", - "type": "PSCHEDULE" - }, - { - "name": "Options", - "type": "DWORD" - } - ], - "DsReplicaAddW": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "NameContext", - "type": "LPCWSTR" - }, - { - "name": "SourceDsaDn", - "type": "LPCWSTR" - }, - { - "name": "TransportDn", - "type": "LPCWSTR" - }, - { - "name": "SourceDsaAddress", - "type": "LPCWSTR" - }, - { - "name": "pSchedule", - "type": "PSCHEDULE" - }, - { - "name": "Options", - "type": "DWORD" - } - ], - "DsReplicaDelA": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "NameContext", - "type": "LPCSTR" - }, - { - "name": "DsaSrc", - "type": "LPCSTR" - }, - { - "name": "Options", - "type": "ULONG" - } - ], - "DsReplicaDelW": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "NameContext", - "type": "LPCWSTR" - }, - { - "name": "DsaSrc", - "type": "LPCWSTR" - }, - { - "name": "Options", - "type": "ULONG" - } - ], - "DsReplicaModifyA": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "NameContext", - "type": "LPCSTR" - }, - { - "name": "pUuidSourceDsa", - "type": "UUID" - }, - { - "name": "TransportDn", - "type": "LPCSTR" - }, - { - "name": "SourceDsaAddress", - "type": "LPCSTR" - }, - { - "name": "pSchedule", - "type": "PSCHEDULE" - }, - { - "name": "ReplicaFlags", - "type": "DWORD" - }, - { - "name": "ModifyFields", - "type": "DWORD" - }, - { - "name": "Options", - "type": "DWORD" - } - ], - "DsReplicaModifyW": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "NameContext", - "type": "LPCWSTR" - }, - { - "name": "pUuidSourceDsa", - "type": "UUID" - }, - { - "name": "TransportDn", - "type": "LPCWSTR" - }, - { - "name": "SourceDsaAddress", - "type": "LPCWSTR" - }, - { - "name": "pSchedule", - "type": "PSCHEDULE" - }, - { - "name": "ReplicaFlags", - "type": "DWORD" - }, - { - "name": "ModifyFields", - "type": "DWORD" - }, - { - "name": "Options", - "type": "DWORD" - } - ], - "DsReplicaUpdateRefsA": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "NameContext", - "type": "LPCSTR" - }, - { - "name": "DsaDest", - "type": "LPCSTR" - }, - { - "name": "pUuidDsaDest", - "type": "UUID" - }, - { - "name": "Options", - "type": "ULONG" - } - ], - "DsReplicaUpdateRefsW": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "NameContext", - "type": "LPCWSTR" - }, - { - "name": "DsaDest", - "type": "LPCWSTR" - }, - { - "name": "pUuidDsaDest", - "type": "UUID" - }, - { - "name": "Options", - "type": "ULONG" - } - ], - "DsReplicaSyncAllA": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "pszNameContext", - "type": "LPCSTR" - }, - { - "name": "ulFlags", - "type": "ULONG" - }, - { - "name": "pFnCallBack", - "type": "BOOL" - }, - { - "name": "pCallbackData", - "type": "LPVOID" - }, - { - "name": "pErrors", - "type": "PDS_REPSYNCALL_ERRINFOA" - } - ], - "DsReplicaSyncAllW": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "pszNameContext", - "type": "LPCWSTR" - }, - { - "name": "ulFlags", - "type": "ULONG" - }, - { - "name": "pFnCallBack", - "type": "BOOL" - }, - { - "name": "pCallbackData", - "type": "LPVOID" - }, - { - "name": "pErrors", - "type": "PDS_REPSYNCALL_ERRINFOW" - } - ], - "DsRemoveDsServerW": [ - { - "name": "hDs", - "type": "HANDLE" - }, - { - "name": "ServerDN", - "type": "LPWSTR" - }, - { - "name": "DomainDN", - "type": "LPWSTR" - }, - { - "name": "fLastDcInDomain", - "type": "BOOL" - }, - { - "name": "fCommit", - "type": "BOOL" - } - ], - "DsRemoveDsServerA": [ - { - "name": "hDs", - "type": "HANDLE" + "name": "ServiceName", + "type": "LPCWSTR" }, { - "name": "ServerDN", - "type": "LPSTR" + "name": "InstanceName", + "type": "LPCWSTR" }, { - "name": "DomainDN", - "type": "LPSTR" + "name": "InstancePort", + "type": "USHORT" }, { - "name": "fLastDcInDomain", - "type": "BOOL" + "name": "Referrer", + "type": "LPCWSTR" }, { - "name": "fCommit", - "type": "BOOL" - } - ], - "DsRemoveDsDomainW": [ - { - "name": "hDs", - "type": "HANDLE" + "name": "pcSpnLength", + "type": "DWORD" }, { - "name": "DomainDN", + "name": "pszSpn", "type": "LPWSTR" } ], - "DsRemoveDsDomainA": [ - { - "name": "hDs", - "type": "HANDLE" - }, - { - "name": "DomainDN", - "type": "LPSTR" - } - ], - "DsListSitesA": [ - { - "name": "hDs", - "type": "HANDLE" - }, - { - "name": "ppSites", - "type": "PDS_NAME_RESULTA" - } - ], - "DsListSitesW": [ - { - "name": "hDs", - "type": "HANDLE" - }, - { - "name": "ppSites", - "type": "PDS_NAME_RESULTW" - } - ], - "DsListServersInSiteA": [ + "DsMakeSpnA": [ { - "name": "hDs", - "type": "HANDLE" - }, - { - "name": "site", + "name": "ServiceClass", "type": "LPCSTR" }, { - "name": "ppServers", - "type": "PDS_NAME_RESULTA" - } - ], - "DsListServersInSiteW": [ - { - "name": "hDs", - "type": "HANDLE" + "name": "ServiceName", + "type": "LPCSTR" }, { - "name": "site", - "type": "LPCWSTR" + "name": "InstanceName", + "type": "LPCSTR" }, { - "name": "ppServers", - "type": "PDS_NAME_RESULTW" - } - ], - "DsListDomainsInSiteA": [ - { - "name": "hDs", - "type": "HANDLE" + "name": "InstancePort", + "type": "USHORT" }, { - "name": "site", + "name": "Referrer", "type": "LPCSTR" }, { - "name": "ppDomains", - "type": "PDS_NAME_RESULTA" - } - ], - "DsListDomainsInSiteW": [ - { - "name": "hDs", - "type": "HANDLE" - }, - { - "name": "site", - "type": "LPCWSTR" + "name": "pcSpnLength", + "type": "DWORD" }, { - "name": "ppDomains", - "type": "PDS_NAME_RESULTW" + "name": "pszSpn", + "type": "LPSTR" } ], - "DsListServersForDomainInSiteA": [ - { - "name": "hDs", - "type": "HANDLE" - }, + "DsCrackSpnA": [ { - "name": "domain", + "name": "pszSpn", "type": "LPCSTR" }, { - "name": "site", - "type": "LPCSTR" + "name": "pcServiceClass", + "type": "LPDWORD" }, { - "name": "ppServers", - "type": "PDS_NAME_RESULTA" - } - ], - "DsListServersForDomainInSiteW": [ - { - "name": "hDs", - "type": "HANDLE" + "name": "ServiceClass", + "type": "LPSTR" }, { - "name": "domain", - "type": "LPCWSTR" + "name": "pcServiceName", + "type": "LPDWORD" }, { - "name": "site", - "type": "LPCWSTR" + "name": "ServiceName", + "type": "LPSTR" }, { - "name": "ppServers", - "type": "PDS_NAME_RESULTW" - } - ], - "DsListInfoForServerA": [ - { - "name": "hDs", - "type": "HANDLE" + "name": "pcInstanceName", + "type": "LPDWORD" }, { - "name": "server", - "type": "LPCSTR" + "name": "InstanceName", + "type": "LPSTR" }, { - "name": "ppInfo", - "type": "PDS_NAME_RESULTA" + "name": "pInstancePort", + "type": "USHORT" } ], - "DsListInfoForServerW": [ + "DsCrackSpnW": [ { - "name": "hDs", - "type": "HANDLE" - }, - { - "name": "server", + "name": "pszSpn", "type": "LPCWSTR" }, { - "name": "ppInfo", - "type": "PDS_NAME_RESULTW" - } - ], - "DsListRolesA": [ - { - "name": "hDs", - "type": "HANDLE" - }, - { - "name": "ppRoles", - "type": "PDS_NAME_RESULTA" - } - ], - "DsListRolesW": [ - { - "name": "hDs", - "type": "HANDLE" + "name": "pcServiceClass", + "type": "DWORD" }, { - "name": "ppRoles", - "type": "PDS_NAME_RESULTW" - } - ], - "DsQuerySitesByCostW": [ - { - "name": "hDS", - "type": "HANDLE" + "name": "ServiceClass", + "type": "LPWSTR" }, { - "name": "pwszFromSite", - "type": "LPWSTR" + "name": "pcServiceName", + "type": "DWORD" }, { - "name": "rgwszToSites", + "name": "ServiceName", "type": "LPWSTR" }, { - "name": "cToSites", + "name": "pcInstanceName", "type": "DWORD" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "InstanceName", + "type": "LPWSTR" }, { - "name": "prgSiteInfo", - "type": "PDS_SITE_COST_INFO" + "name": "pInstancePort", + "type": "USHORT" } ], - "DsQuerySitesByCostA": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "pszFromSite", - "type": "LPSTR" - }, + "DsQuoteRdnValueW": [ { - "name": "rgszToSites", - "type": "LPSTR" + "name": "cUnquotedRdnValueLength", + "type": "DWORD" }, { - "name": "cToSites", - "type": "DWORD" + "name": "psUnquotedRdnValue", + "type": "LPCWCH" }, { - "name": "dwFlags", + "name": "pcQuotedRdnValueLength", "type": "DWORD" }, { - "name": "prgSiteInfo", - "type": "PDS_SITE_COST_INFO" - } - ], - "DsQuerySitesFree": [ - { - "name": "rgSiteInfo", - "type": "PDS_SITE_COST_INFO" + "name": "psQuotedRdnValue", + "type": "LPWCH" } ], - "DsMapSchemaGuidsA": [ - { - "name": "hDs", - "type": "HANDLE" - }, + "DsQuoteRdnValueA": [ { - "name": "cGuids", + "name": "cUnquotedRdnValueLength", "type": "DWORD" }, { - "name": "rGuids", - "type": "GUID" - }, - { - "name": "ppGuidMap", - "type": "DS_SCHEMA_GUID_MAPA" - } - ], - "DsFreeSchemaGuidMapA": [ - { - "name": "pGuidMap", - "type": "PDS_SCHEMA_GUID_MAPA" - } - ], - "DsMapSchemaGuidsW": [ - { - "name": "hDs", - "type": "HANDLE" + "name": "psUnquotedRdnValue", + "type": "LPCCH" }, { - "name": "cGuids", + "name": "pcQuotedRdnValueLength", "type": "DWORD" }, { - "name": "rGuids", - "type": "GUID" - }, - { - "name": "ppGuidMap", - "type": "DS_SCHEMA_GUID_MAPW" + "name": "psQuotedRdnValue", + "type": "LPCH" } ], - "DsFreeSchemaGuidMapW": [ + "DsUnquoteRdnValueW": [ { - "name": "pGuidMap", - "type": "PDS_SCHEMA_GUID_MAPW" - } - ], - "DsGetDomainControllerInfoA": [ - { - "name": "hDs", - "type": "HANDLE" - }, - { - "name": "DomainName", - "type": "LPCSTR" + "name": "cQuotedRdnValueLength", + "type": "DWORD" }, { - "name": "InfoLevel", - "type": "DWORD" + "name": "psQuotedRdnValue", + "type": "LPCWCH" }, { - "name": "pcOut", + "name": "pcUnquotedRdnValueLength", "type": "DWORD" }, { - "name": "ppInfo", - "type": "void" + "name": "psUnquotedRdnValue", + "type": "LPWCH" } ], - "DsGetDomainControllerInfoW": [ + "DsUnquoteRdnValueA": [ { - "name": "hDs", - "type": "HANDLE" - }, - { - "name": "DomainName", - "type": "LPCWSTR" + "name": "cQuotedRdnValueLength", + "type": "DWORD" }, { - "name": "InfoLevel", - "type": "DWORD" + "name": "psQuotedRdnValue", + "type": "LPCCH" }, { - "name": "pcOut", + "name": "pcUnquotedRdnValueLength", "type": "DWORD" }, { - "name": "ppInfo", - "type": "void" + "name": "psUnquotedRdnValue", + "type": "LPCH" } ], - "DsFreeDomainControllerInfoA": [ + "DsGetRdnW": [ { - "name": "InfoLevel", - "type": "DWORD" + "name": "ppDN", + "type": "LPCWCH" }, { - "name": "cInfo", + "name": "pcDN", "type": "DWORD" }, { - "name": "pInfo", - "type": "void" - } - ], - "DsFreeDomainControllerInfoW": [ - { - "name": "InfoLevel", - "type": "DWORD" + "name": "ppKey", + "type": "LPCWCH" }, { - "name": "cInfo", + "name": "pcKey", "type": "DWORD" }, { - "name": "pInfo", - "type": "void" - } - ], - "DsReplicaConsistencyCheck": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "TaskID", - "type": "DS_KCC_TASKID" + "name": "ppVal", + "type": "LPCWCH" }, { - "name": "dwFlags", + "name": "pcVal", "type": "DWORD" } ], - "DsReplicaVerifyObjectsW": [ - { - "name": "hDS", - "type": "HANDLE" - }, + "DsCrackUnquotedMangledRdnW": [ { - "name": "NameContext", + "name": "pszRDN", "type": "LPCWSTR" }, { - "name": "pUuidDsaSrc", - "type": "UUID" - }, - { - "name": "ulOptions", - "type": "ULONG" - } - ], - "DsReplicaVerifyObjectsA": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "NameContext", - "type": "LPCSTR" + "name": "cchRDN", + "type": "DWORD" }, { - "name": "pUuidDsaSrc", - "type": "UUID" + "name": "pGuid", + "type": "GUID" }, { - "name": "ulOptions", - "type": "ULONG" + "name": "peDsMangleFor", + "type": "DS_MANGLE_FOR" } ], - "DsReplicaGetInfoW": [ - { - "name": "hDS", - "type": "HANDLE" - }, + "DsCrackUnquotedMangledRdnA": [ { - "name": "InfoType", - "type": "DS_REPL_INFO_TYPE" + "name": "pszRDN", + "type": "LPCSTR" }, { - "name": "pszObject", - "type": "LPCWSTR" + "name": "cchRDN", + "type": "DWORD" }, { - "name": "puuidForSourceDsaObjGuid", - "type": "UUID" + "name": "pGuid", + "type": "GUID" }, { - "name": "ppInfo", - "type": "void" + "name": "peDsMangleFor", + "type": "DS_MANGLE_FOR" } ], - "DsReplicaGetInfo2W": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "InfoType", - "type": "DS_REPL_INFO_TYPE" - }, - { - "name": "pszObject", - "type": "LPCWSTR" - }, + "DsIsMangledRdnValueW": [ { - "name": "puuidForSourceDsaObjGuid", - "type": "UUID" - }, - { - "name": "pszAttributeName", - "type": "LPCWSTR" - }, - { - "name": "pszValue", + "name": "pszRdn", "type": "LPCWSTR" }, { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwEnumerationContext", + "name": "cRdn", "type": "DWORD" }, { - "name": "ppInfo", - "type": "void" + "name": "eDsMangleForDesired", + "type": "DS_MANGLE_FOR" } ], - "DsReplicaFreeInfo": [ + "DsIsMangledRdnValueA": [ { - "name": "InfoType", - "type": "DS_REPL_INFO_TYPE" - }, - { - "name": "pInfo", - "type": "void" - } - ], - "DsAddSidHistoryW": [ - { - "name": "hDS", - "type": "HANDLE" + "name": "pszRdn", + "type": "LPCSTR" }, { - "name": "Flags", + "name": "cRdn", "type": "DWORD" }, { - "name": "SrcDomain", - "type": "LPCWSTR" - }, - { - "name": "SrcPrincipal", - "type": "LPCWSTR" - }, - { - "name": "SrcDomainController", - "type": "LPCWSTR" - }, - { - "name": "SrcDomainCreds", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "DstDomain", - "type": "LPCWSTR" - }, - { - "name": "DstPrincipal", - "type": "LPCWSTR" + "name": "eDsMangleForDesired", + "type": "DS_MANGLE_FOR" } ], - "DsAddSidHistoryA": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "SrcDomain", - "type": "LPCSTR" - }, - { - "name": "SrcPrincipal", - "type": "LPCSTR" - }, + "DsIsMangledDnA": [ { - "name": "SrcDomainController", + "name": "pszDn", "type": "LPCSTR" }, { - "name": "SrcDomainCreds", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "DstDomain", - "type": "LPCSTR" - }, - { - "name": "DstPrincipal", - "type": "LPCSTR" + "name": "eDsMangleFor", + "type": "DS_MANGLE_FOR" } ], - "DsInheritSecurityIdentityW": [ - { - "name": "hDS", - "type": "HANDLE" - }, + "DsIsMangledDnW": [ { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "SrcPrincipal", - "type": "LPCWSTR" - }, - { - "name": "DstPrincipal", + "name": "pszDn", "type": "LPCWSTR" - } - ], - "DsInheritSecurityIdentityA": [ - { - "name": "hDS", - "type": "HANDLE" - }, - { - "name": "Flags", - "type": "DWORD" }, { - "name": "SrcPrincipal", - "type": "LPCSTR" - }, - { - "name": "DstPrincipal", - "type": "LPCSTR" + "name": "eDsMangleFor", + "type": "DS_MANGLE_FOR" } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/oaidl.json b/qiling/extensions/windows_sdk/oaidl.json deleted file mode 100644 index bcb41e7da..000000000 --- a/qiling/extensions/windows_sdk/oaidl.json +++ /dev/null @@ -1,98 +0,0 @@ -{ - "BSTR_UserSize": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "BSTR" - } - ], - "BSTR_UserFree": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "BSTR" - } - ], - "VARIANT_UserSize": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "VARIANT" - } - ], - "VARIANT_UserFree": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "VARIANT" - } - ], - "BSTR_UserSize64": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "BSTR" - } - ], - "BSTR_UserFree64": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "BSTR" - } - ], - "VARIANT_UserSize64": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "VARIANT" - } - ], - "VARIANT_UserFree64": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "VARIANT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ole.json b/qiling/extensions/windows_sdk/ole.json deleted file mode 100644 index 2e33aa31c..000000000 --- a/qiling/extensions/windows_sdk/ole.json +++ /dev/null @@ -1,132 +0,0 @@ -{ - "OleCreate": [ - { - "name": "VOID", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "LPOLECLIENT" - }, - { - "name": "VOID", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "LHCLIENTDOC" - }, - { - "name": "VOID", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "LPOLEOBJECT" - }, - { - "name": "VOID", - "type": "OLEOPT_RENDER" - }, - { - "name": "VOID", - "type": "OLECLIPFORMAT" - } - ], - "OleCreateFromFile": [ - { - "name": "VOID", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "LPOLECLIENT" - }, - { - "name": "VOID", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "LHCLIENTDOC" - }, - { - "name": "VOID", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "LPOLEOBJECT" - }, - { - "name": "VOID", - "type": "OLEOPT_RENDER" - }, - { - "name": "VOID", - "type": "OLECLIPFORMAT" - } - ], - "OleLoadFromStream": [ - { - "name": "VOID", - "type": "LPOLESTREAM" - }, - { - "name": "VOID", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "LPOLECLIENT" - }, - { - "name": "VOID", - "type": "LHCLIENTDOC" - }, - { - "name": "VOID", - "type": "LPCSTR" - }, - { - "name": "VOID", - "type": "LPOLEOBJECT" - } - ], - "OleSaveToStream": [ - { - "name": "VOID", - "type": "LPOLEOBJECT" - }, - { - "name": "VOID", - "type": "LPOLESTREAM" - } - ], - "OleDraw": [ - { - "name": "VOID", - "type": "LPOLEOBJECT" - }, - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "RECT" - }, - { - "name": "VOID", - "type": "RECT" - }, - { - "name": "VOID", - "type": "HDC" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ole2.json b/qiling/extensions/windows_sdk/ole2.json deleted file mode 100644 index 7814d140e..000000000 --- a/qiling/extensions/windows_sdk/ole2.json +++ /dev/null @@ -1,1142 +0,0 @@ -{ - "CreateDataAdviseHolder": [ - { - "name": "ppDAHolder", - "type": "LPDATAADVISEHOLDER" - } - ], - "OleBuildVersion": [ - { - "name": "VOID", - "type": "void" - } - ], - "WriteFmtUserTypeStg": [ - { - "name": "pstg", - "type": "LPSTORAGE" - }, - { - "name": "cf", - "type": "CLIPFORMAT" - }, - { - "name": "lpszUserType", - "type": "LPOLESTR" - } - ], - "ReadFmtUserTypeStg": [ - { - "name": "pstg", - "type": "LPSTORAGE" - }, - { - "name": "pcf", - "type": "CLIPFORMAT" - }, - { - "name": "lplpszUserType", - "type": "LPOLESTR" - } - ], - "OleInitialize": [ - { - "name": "pvReserved", - "type": "LPVOID" - } - ], - "OleUninitialize": [ - { - "name": "VOID", - "type": "void" - } - ], - "OleQueryLinkFromData": [ - { - "name": "pSrcDataObject", - "type": "LPDATAOBJECT" - } - ], - "OleQueryCreateFromData": [ - { - "name": "pSrcDataObject", - "type": "LPDATAOBJECT" - } - ], - "OleCreate": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "pFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleCreateEx": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "cFormats", - "type": "ULONG" - }, - { - "name": "rgAdvf", - "type": "DWORD" - }, - { - "name": "rgFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "lpAdviseSink", - "type": "IAdviseSink" - }, - { - "name": "rgdwConnection", - "type": "DWORD" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleCreateFromData": [ - { - "name": "pSrcDataObj", - "type": "LPDATAOBJECT" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "pFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleCreateFromDataEx": [ - { - "name": "pSrcDataObj", - "type": "LPDATAOBJECT" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "cFormats", - "type": "ULONG" - }, - { - "name": "rgAdvf", - "type": "DWORD" - }, - { - "name": "rgFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "lpAdviseSink", - "type": "IAdviseSink" - }, - { - "name": "rgdwConnection", - "type": "DWORD" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleCreateLinkFromData": [ - { - "name": "pSrcDataObj", - "type": "LPDATAOBJECT" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "pFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleCreateLinkFromDataEx": [ - { - "name": "pSrcDataObj", - "type": "LPDATAOBJECT" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "cFormats", - "type": "ULONG" - }, - { - "name": "rgAdvf", - "type": "DWORD" - }, - { - "name": "rgFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "lpAdviseSink", - "type": "IAdviseSink" - }, - { - "name": "rgdwConnection", - "type": "DWORD" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleCreateStaticFromData": [ - { - "name": "pSrcDataObj", - "type": "LPDATAOBJECT" - }, - { - "name": "iid", - "type": "IID" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "pFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleCreateLink": [ - { - "name": "pmkLinkSrc", - "type": "LPMONIKER" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "lpFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleCreateLinkEx": [ - { - "name": "pmkLinkSrc", - "type": "LPMONIKER" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "cFormats", - "type": "ULONG" - }, - { - "name": "rgAdvf", - "type": "DWORD" - }, - { - "name": "rgFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "lpAdviseSink", - "type": "IAdviseSink" - }, - { - "name": "rgdwConnection", - "type": "DWORD" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleCreateLinkToFile": [ - { - "name": "lpszFileName", - "type": "LPCOLESTR" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "lpFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleCreateLinkToFileEx": [ - { - "name": "lpszFileName", - "type": "LPCOLESTR" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "cFormats", - "type": "ULONG" - }, - { - "name": "rgAdvf", - "type": "DWORD" - }, - { - "name": "rgFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "lpAdviseSink", - "type": "IAdviseSink" - }, - { - "name": "rgdwConnection", - "type": "DWORD" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleCreateFromFile": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "lpszFileName", - "type": "LPCOLESTR" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "lpFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleCreateFromFileEx": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "lpszFileName", - "type": "LPCOLESTR" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "renderopt", - "type": "DWORD" - }, - { - "name": "cFormats", - "type": "ULONG" - }, - { - "name": "rgAdvf", - "type": "DWORD" - }, - { - "name": "rgFormatEtc", - "type": "LPFORMATETC" - }, - { - "name": "lpAdviseSink", - "type": "IAdviseSink" - }, - { - "name": "rgdwConnection", - "type": "DWORD" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleLoad": [ - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "pClientSite", - "type": "LPOLECLIENTSITE" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleSave": [ - { - "name": "pPS", - "type": "LPPERSISTSTORAGE" - }, - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "fSameAsLoad", - "type": "BOOL" - } - ], - "OleLoadFromStream": [ - { - "name": "pStm", - "type": "LPSTREAM" - }, - { - "name": "iidInterface", - "type": "IID" - }, - { - "name": "ppvObj", - "type": "LPVOID" - } - ], - "OleSaveToStream": [ - { - "name": "pPStm", - "type": "LPPERSISTSTREAM" - }, - { - "name": "pStm", - "type": "LPSTREAM" - } - ], - "OleSetContainedObject": [ - { - "name": "pUnknown", - "type": "LPUNKNOWN" - }, - { - "name": "fContained", - "type": "BOOL" - } - ], - "OleNoteObjectVisible": [ - { - "name": "pUnknown", - "type": "LPUNKNOWN" - }, - { - "name": "fVisible", - "type": "BOOL" - } - ], - "RegisterDragDrop": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pDropTarget", - "type": "LPDROPTARGET" - } - ], - "RevokeDragDrop": [ - { - "name": "hwnd", - "type": "HWND" - } - ], - "DoDragDrop": [ - { - "name": "pDataObj", - "type": "LPDATAOBJECT" - }, - { - "name": "pDropSource", - "type": "LPDROPSOURCE" - }, - { - "name": "dwOKEffects", - "type": "DWORD" - }, - { - "name": "pdwEffect", - "type": "LPDWORD" - } - ], - "OleSetClipboard": [ - { - "name": "pDataObj", - "type": "LPDATAOBJECT" - } - ], - "OleGetClipboard": [ - { - "name": "ppDataObj", - "type": "LPDATAOBJECT" - } - ], - "OleGetClipboardWithEnterpriseInfo": [ - { - "name": "dataObject", - "type": "IDataObject" - }, - { - "name": "dataEnterpriseId", - "type": "PWSTR" - }, - { - "name": "sourceDescription", - "type": "PWSTR" - }, - { - "name": "targetDescription", - "type": "PWSTR" - }, - { - "name": "dataDescription", - "type": "PWSTR" - } - ], - "OleFlushClipboard": [ - { - "name": "VOID", - "type": "void" - } - ], - "OleIsCurrentClipboard": [ - { - "name": "pDataObj", - "type": "LPDATAOBJECT" - } - ], - "OleCreateMenuDescriptor": [ - { - "name": "hmenuCombined", - "type": "HMENU" - }, - { - "name": "lpMenuWidths", - "type": "LPOLEMENUGROUPWIDTHS" - } - ], - "OleSetMenuDescriptor": [ - { - "name": "holemenu", - "type": "HOLEMENU" - }, - { - "name": "hwndFrame", - "type": "HWND" - }, - { - "name": "hwndActiveObject", - "type": "HWND" - }, - { - "name": "lpFrame", - "type": "LPOLEINPLACEFRAME" - }, - { - "name": "lpActiveObj", - "type": "LPOLEINPLACEACTIVEOBJECT" - } - ], - "OleDestroyMenuDescriptor": [ - { - "name": "holemenu", - "type": "HOLEMENU" - } - ], - "OleTranslateAccelerator": [ - { - "name": "lpFrame", - "type": "LPOLEINPLACEFRAME" - }, - { - "name": "lpFrameInfo", - "type": "LPOLEINPLACEFRAMEINFO" - }, - { - "name": "lpmsg", - "type": "LPMSG" - } - ], - "OleDuplicateData": [ - { - "name": "hSrc", - "type": "HANDLE" - }, - { - "name": "cfFormat", - "type": "CLIPFORMAT" - }, - { - "name": "uiFlags", - "type": "UINT" - } - ], - "OleDraw": [ - { - "name": "pUnknown", - "type": "LPUNKNOWN" - }, - { - "name": "dwAspect", - "type": "DWORD" - }, - { - "name": "hdcDraw", - "type": "HDC" - }, - { - "name": "lprcBounds", - "type": "LPCRECT" - } - ], - "OleRun": [ - { - "name": "pUnknown", - "type": "LPUNKNOWN" - } - ], - "OleIsRunning": [ - { - "name": "pObject", - "type": "LPOLEOBJECT" - } - ], - "OleLockRunning": [ - { - "name": "pUnknown", - "type": "LPUNKNOWN" - }, - { - "name": "fLock", - "type": "BOOL" - }, - { - "name": "fLastUnlockCloses", - "type": "BOOL" - } - ], - "ReleaseStgMedium": [ - { - "name": "VOID", - "type": "LPSTGMEDIUM" - } - ], - "CreateOleAdviseHolder": [ - { - "name": "ppOAHolder", - "type": "LPOLEADVISEHOLDER" - } - ], - "OleCreateDefaultHandler": [ - { - "name": "clsid", - "type": "IID" - }, - { - "name": "pUnkOuter", - "type": "LPUNKNOWN" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "lplpObj", - "type": "LPVOID" - } - ], - "OleCreateEmbeddingHelper": [ - { - "name": "clsid", - "type": "IID" - }, - { - "name": "pUnkOuter", - "type": "LPUNKNOWN" - }, - { - "name": "flags", - "type": "DWORD" - }, - { - "name": "pCF", - "type": "LPCLASSFACTORY" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "lplpObj", - "type": "LPVOID" - } - ], - "IsAccelerator": [ - { - "name": "hAccel", - "type": "HACCEL" - }, - { - "name": "cAccelEntries", - "type": "int" - }, - { - "name": "lpMsg", - "type": "LPMSG" - }, - { - "name": "lpwCmd", - "type": "WORD" - } - ], - "OleGetIconOfFile": [ - { - "name": "lpszPath", - "type": "LPOLESTR" - }, - { - "name": "fUseFileAsLabel", - "type": "BOOL" - } - ], - "OleGetIconOfClass": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "lpszLabel", - "type": "LPOLESTR" - }, - { - "name": "fUseTypeAsLabel", - "type": "BOOL" - } - ], - "OleMetafilePictFromIconAndLabel": [ - { - "name": "hIcon", - "type": "HICON" - }, - { - "name": "lpszLabel", - "type": "LPOLESTR" - }, - { - "name": "lpszSourceFile", - "type": "LPOLESTR" - }, - { - "name": "iIconIndex", - "type": "UINT" - } - ], - "OleRegGetUserType": [ - { - "name": "clsid", - "type": "IID" - }, - { - "name": "dwFormOfType", - "type": "DWORD" - }, - { - "name": "pszUserType", - "type": "LPOLESTR" - } - ], - "OleRegGetMiscStatus": [ - { - "name": "clsid", - "type": "IID" - }, - { - "name": "dwAspect", - "type": "DWORD" - }, - { - "name": "pdwStatus", - "type": "DWORD" - } - ], - "OleRegEnumFormatEtc": [ - { - "name": "clsid", - "type": "IID" - }, - { - "name": "dwDirection", - "type": "DWORD" - }, - { - "name": "ppenum", - "type": "LPENUMFORMATETC" - } - ], - "OleRegEnumVerbs": [ - { - "name": "clsid", - "type": "IID" - }, - { - "name": "ppenum", - "type": "LPENUMOLEVERB" - } - ], - "OleConvertOLESTREAMToIStorage": [ - { - "name": "lpolestream", - "type": "LPOLESTREAM" - }, - { - "name": "pstg", - "type": "LPSTORAGE" - }, - { - "name": "ptd", - "type": "DVTARGETDEVICE" - } - ], - "OleConvertIStorageToOLESTREAM": [ - { - "name": "pstg", - "type": "LPSTORAGE" - }, - { - "name": "lpolestream", - "type": "LPOLESTREAM" - } - ], - "OleDoAutoConvert": [ - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "pClsidNew", - "type": "LPCLSID" - } - ], - "OleGetAutoConvert": [ - { - "name": "clsidOld", - "type": "IID" - }, - { - "name": "pClsidNew", - "type": "LPCLSID" - } - ], - "OleSetAutoConvert": [ - { - "name": "clsidOld", - "type": "IID" - }, - { - "name": "clsidNew", - "type": "IID" - } - ], - "SetConvertStg": [ - { - "name": "pStg", - "type": "LPSTORAGE" - }, - { - "name": "fConvert", - "type": "BOOL" - } - ], - "OleConvertIStorageToOLESTREAMEx": [ - { - "name": "pstg", - "type": "LPSTORAGE" - }, - { - "name": "cfFormat", - "type": "CLIPFORMAT" - }, - { - "name": "lWidth", - "type": "LONG" - }, - { - "name": "lHeight", - "type": "LONG" - }, - { - "name": "dwSize", - "type": "DWORD" - }, - { - "name": "pmedium", - "type": "LPSTGMEDIUM" - }, - { - "name": "polestm", - "type": "LPOLESTREAM" - } - ], - "OleConvertOLESTREAMToIStorageEx": [ - { - "name": "polestm", - "type": "LPOLESTREAM" - }, - { - "name": "pstg", - "type": "LPSTORAGE" - }, - { - "name": "pcfFormat", - "type": "CLIPFORMAT" - }, - { - "name": "plwWidth", - "type": "LONG" - }, - { - "name": "plHeight", - "type": "LONG" - }, - { - "name": "pdwSize", - "type": "DWORD" - }, - { - "name": "pmedium", - "type": "LPSTGMEDIUM" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/olectl.json b/qiling/extensions/windows_sdk/olectl.json deleted file mode 100644 index 2f6917c9a..000000000 --- a/qiling/extensions/windows_sdk/olectl.json +++ /dev/null @@ -1,246 +0,0 @@ -{ - "DllRegisterServer": [ - { - "name": "VOID", - "type": "void" - } - ], - "DllUnregisterServer": [ - { - "name": "VOID", - "type": "void" - } - ], - "OleCreatePropertyFrame": [ - { - "name": "hwndOwner", - "type": "HWND" - }, - { - "name": "x", - "type": "UINT" - }, - { - "name": "y", - "type": "UINT" - }, - { - "name": "lpszCaption", - "type": "LPCOLESTR" - }, - { - "name": "cObjects", - "type": "ULONG" - }, - { - "name": "ppUnk", - "type": "LPUNKNOWN" - }, - { - "name": "cPages", - "type": "ULONG" - }, - { - "name": "pPageClsID", - "type": "LPCLSID" - }, - { - "name": "lcid", - "type": "LCID" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "LPVOID" - } - ], - "OleCreatePropertyFrameIndirect": [ - { - "name": "lpParams", - "type": "LPOCPFIPARAMS" - } - ], - "OleTranslateColor": [ - { - "name": "clr", - "type": "OLE_COLOR" - }, - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "lpcolorref", - "type": "COLORREF" - } - ], - "OleCreateFontIndirect": [ - { - "name": "lpFontDesc", - "type": "LPFONTDESC" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "lplpvObj", - "type": "LPVOID" - } - ], - "OleCreatePictureIndirect": [ - { - "name": "lpPictDesc", - "type": "LPPICTDESC" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "fOwn", - "type": "BOOL" - }, - { - "name": "lplpvObj", - "type": "LPVOID" - } - ], - "OleLoadPicture": [ - { - "name": "lpstream", - "type": "LPSTREAM" - }, - { - "name": "lSize", - "type": "LONG" - }, - { - "name": "fRunmode", - "type": "BOOL" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "lplpvObj", - "type": "LPVOID" - } - ], - "OleLoadPictureEx": [ - { - "name": "lpstream", - "type": "LPSTREAM" - }, - { - "name": "lSize", - "type": "LONG" - }, - { - "name": "fRunmode", - "type": "BOOL" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "xSizeDesired", - "type": "DWORD" - }, - { - "name": "ySizeDesired", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lplpvObj", - "type": "LPVOID" - } - ], - "OleLoadPicturePath": [ - { - "name": "szURLorPath", - "type": "LPOLESTR" - }, - { - "name": "punkCaller", - "type": "LPUNKNOWN" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "clrReserved", - "type": "OLE_COLOR" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppvRet", - "type": "LPVOID" - } - ], - "OleLoadPictureFile": [ - { - "name": "varFileName", - "type": "VARIANT" - }, - { - "name": "lplpdispPicture", - "type": "LPDISPATCH" - } - ], - "OleLoadPictureFileEx": [ - { - "name": "varFileName", - "type": "VARIANT" - }, - { - "name": "xSizeDesired", - "type": "DWORD" - }, - { - "name": "ySizeDesired", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lplpdispPicture", - "type": "LPDISPATCH" - } - ], - "OleSavePictureFile": [ - { - "name": "lpdispPicture", - "type": "LPDISPATCH" - }, - { - "name": "bstrFileName", - "type": "BSTR" - } - ], - "OleIconToCursor": [ - { - "name": "hinstExe", - "type": "HINSTANCE" - }, - { - "name": "hIcon", - "type": "HICON" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/oobenotification.json b/qiling/extensions/windows_sdk/oobenotification.json deleted file mode 100644 index 4f58e35f5..000000000 --- a/qiling/extensions/windows_sdk/oobenotification.json +++ /dev/null @@ -1,22 +0,0 @@ -{ - "RegisterWaitUntilOOBECompleted": [ - { - "name": "OOBECompletedCallback", - "type": "OOBE_COMPLETED_CALLBACK" - }, - { - "name": "CallbackContext", - "type": "PVOID" - }, - { - "name": "WaitHandle", - "type": "PVOID" - } - ], - "UnregisterWaitUntilOOBECompleted": [ - { - "name": "WaitHandle", - "type": "PVOID" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/opengl32.json b/qiling/extensions/windows_sdk/opengl32.json new file mode 100644 index 000000000..f57fee6e4 --- /dev/null +++ b/qiling/extensions/windows_sdk/opengl32.json @@ -0,0 +1,5434 @@ +{ + "AddFontResourceA": [ + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "AddFontResourceW": [ + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "AnimatePalette": [ + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "iStartIndex", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "ppe", + "type": "PALETTEENTRY" + } + ], + "Arc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "x3", + "type": "int" + }, + { + "name": "y3", + "type": "int" + }, + { + "name": "x4", + "type": "int" + }, + { + "name": "y4", + "type": "int" + } + ], + "BitBlt": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "CancelDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "Chord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "x3", + "type": "int" + }, + { + "name": "y3", + "type": "int" + }, + { + "name": "x4", + "type": "int" + }, + { + "name": "y4", + "type": "int" + } + ], + "ChoosePixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "CloseMetaFile": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CombineRgn": [ + { + "name": "hrgnDst", + "type": "HRGN" + }, + { + "name": "hrgnSrc1", + "type": "HRGN" + }, + { + "name": "hrgnSrc2", + "type": "HRGN" + }, + { + "name": "iMode", + "type": "int" + } + ], + "CopyMetaFileA": [ + { + "name": "VOID", + "type": "HMETAFILE" + }, + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "CopyMetaFileW": [ + { + "name": "VOID", + "type": "HMETAFILE" + }, + { + "name": "VOID", + "type": "LPCWSTR" + } + ], + "CreateBitmap": [ + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "nPlanes", + "type": "UINT" + }, + { + "name": "nBitCount", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "void" + } + ], + "CreateBitmapIndirect": [ + { + "name": "pbm", + "type": "BITMAP" + } + ], + "CreateBrushIndirect": [ + { + "name": "plbrush", + "type": "LOGBRUSH" + } + ], + "CreateCompatibleBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "CreateDiscardableBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "CreateCompatibleDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CreateDCA": [ + { + "name": "pwszDriver", + "type": "LPCSTR" + }, + { + "name": "pwszDevice", + "type": "LPCSTR" + }, + { + "name": "pszPort", + "type": "LPCSTR" + }, + { + "name": "pdm", + "type": "DEVMODEA" + } + ], + "CreateDCW": [ + { + "name": "pwszDriver", + "type": "LPCWSTR" + }, + { + "name": "pwszDevice", + "type": "LPCWSTR" + }, + { + "name": "pszPort", + "type": "LPCWSTR" + }, + { + "name": "pdm", + "type": "DEVMODEW" + } + ], + "CreateDIBitmap": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pbmih", + "type": "BITMAPINFOHEADER" + }, + { + "name": "flInit", + "type": "DWORD" + }, + { + "name": "pjBits", + "type": "void" + }, + { + "name": "pbmi", + "type": "BITMAPINFO" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateDIBPatternBrush": [ + { + "name": "h", + "type": "HGLOBAL" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateDIBPatternBrushPt": [ + { + "name": "lpPackedDIB", + "type": "void" + }, + { + "name": "iUsage", + "type": "UINT" + } + ], + "CreateEllipticRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + } + ], + "CreateEllipticRgnIndirect": [ + { + "name": "lprect", + "type": "RECT" + } + ], + "CreateFontIndirectA": [ + { + "name": "lplf", + "type": "LOGFONTA" + } + ], + "CreateFontIndirectW": [ + { + "name": "lplf", + "type": "LOGFONTW" + } + ], + "CreateFontA": [ + { + "name": "cHeight", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "cEscapement", + "type": "int" + }, + { + "name": "cOrientation", + "type": "int" + }, + { + "name": "cWeight", + "type": "int" + }, + { + "name": "bItalic", + "type": "DWORD" + }, + { + "name": "bUnderline", + "type": "DWORD" + }, + { + "name": "bStrikeOut", + "type": "DWORD" + }, + { + "name": "iCharSet", + "type": "DWORD" + }, + { + "name": "iOutPrecision", + "type": "DWORD" + }, + { + "name": "iClipPrecision", + "type": "DWORD" + }, + { + "name": "iQuality", + "type": "DWORD" + }, + { + "name": "iPitchAndFamily", + "type": "DWORD" + }, + { + "name": "pszFaceName", + "type": "LPCSTR" + } + ], + "CreateFontW": [ + { + "name": "cHeight", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "cEscapement", + "type": "int" + }, + { + "name": "cOrientation", + "type": "int" + }, + { + "name": "cWeight", + "type": "int" + }, + { + "name": "bItalic", + "type": "DWORD" + }, + { + "name": "bUnderline", + "type": "DWORD" + }, + { + "name": "bStrikeOut", + "type": "DWORD" + }, + { + "name": "iCharSet", + "type": "DWORD" + }, + { + "name": "iOutPrecision", + "type": "DWORD" + }, + { + "name": "iClipPrecision", + "type": "DWORD" + }, + { + "name": "iQuality", + "type": "DWORD" + }, + { + "name": "iPitchAndFamily", + "type": "DWORD" + }, + { + "name": "pszFaceName", + "type": "LPCWSTR" + } + ], + "CreateHatchBrush": [ + { + "name": "iHatch", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "CreateICA": [ + { + "name": "pszDriver", + "type": "LPCSTR" + }, + { + "name": "pszDevice", + "type": "LPCSTR" + }, + { + "name": "pszPort", + "type": "LPCSTR" + }, + { + "name": "pdm", + "type": "DEVMODEA" + } + ], + "CreateICW": [ + { + "name": "pszDriver", + "type": "LPCWSTR" + }, + { + "name": "pszDevice", + "type": "LPCWSTR" + }, + { + "name": "pszPort", + "type": "LPCWSTR" + }, + { + "name": "pdm", + "type": "DEVMODEW" + } + ], + "CreateMetaFileA": [ + { + "name": "pszFile", + "type": "LPCSTR" + } + ], + "CreateMetaFileW": [ + { + "name": "pszFile", + "type": "LPCWSTR" + } + ], + "CreatePalette": [ + { + "name": "plpal", + "type": "LOGPALETTE" + } + ], + "CreatePen": [ + { + "name": "iStyle", + "type": "int" + }, + { + "name": "cWidth", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "CreatePenIndirect": [ + { + "name": "plpen", + "type": "LOGPEN" + } + ], + "CreatePolyPolygonRgn": [ + { + "name": "pptl", + "type": "POINT" + }, + { + "name": "pc", + "type": "INT" + }, + { + "name": "cPoly", + "type": "int" + }, + { + "name": "iMode", + "type": "int" + } + ], + "CreatePatternBrush": [ + { + "name": "hbm", + "type": "HBITMAP" + } + ], + "CreateRectRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + } + ], + "CreateRectRgnIndirect": [ + { + "name": "lprect", + "type": "RECT" + } + ], + "CreateRoundRectRgn": [ + { + "name": "x1", + "type": "int" + }, + { + "name": "y1", + "type": "int" + }, + { + "name": "x2", + "type": "int" + }, + { + "name": "y2", + "type": "int" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + } + ], + "CreateScalableFontResourceA": [ + { + "name": "fdwHidden", + "type": "DWORD" + }, + { + "name": "lpszFont", + "type": "LPCSTR" + }, + { + "name": "lpszFile", + "type": "LPCSTR" + }, + { + "name": "lpszPath", + "type": "LPCSTR" + } + ], + "CreateScalableFontResourceW": [ + { + "name": "fdwHidden", + "type": "DWORD" + }, + { + "name": "lpszFont", + "type": "LPCWSTR" + }, + { + "name": "lpszFile", + "type": "LPCWSTR" + }, + { + "name": "lpszPath", + "type": "LPCWSTR" + } + ], + "CreateSolidBrush": [ + { + "name": "color", + "type": "COLORREF" + } + ], + "DeleteDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "DeleteMetaFile": [ + { + "name": "hmf", + "type": "HMETAFILE" + } + ], + "DeleteObject": [ + { + "name": "ho", + "type": "HGDIOBJ" + } + ], + "DescribePixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iPixelFormat", + "type": "int" + }, + { + "name": "nBytes", + "type": "UINT" + }, + { + "name": "ppfd", + "type": "LPPIXELFORMATDESCRIPTOR" + } + ], + "DeviceCapabilitiesA": [ + { + "name": "pDevice", + "type": "LPCSTR" + }, + { + "name": "pPort", + "type": "LPCSTR" + }, + { + "name": "fwCapability", + "type": "WORD" + }, + { + "name": "pOutput", + "type": "LPSTR" + }, + { + "name": "pDevMode", + "type": "DEVMODEA" + } + ], + "DeviceCapabilitiesW": [ + { + "name": "pDevice", + "type": "LPCWSTR" + }, + { + "name": "pPort", + "type": "LPCWSTR" + }, + { + "name": "fwCapability", + "type": "WORD" + }, + { + "name": "pOutput", + "type": "LPWSTR" + }, + { + "name": "pDevMode", + "type": "DEVMODEW" + } + ], + "DrawEscape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjIn", + "type": "int" + }, + { + "name": "lpIn", + "type": "LPCSTR" + } + ], + "Ellipse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "EnumFontFamiliesExA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPLOGFONTA" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumFontFamiliesExW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPLOGFONTW" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumFontFamiliesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontFamiliesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCWSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCA" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumFontsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpLogfont", + "type": "LPCWSTR" + }, + { + "name": "lpProc", + "type": "FONTENUMPROCW" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumObjects": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nType", + "type": "int" + }, + { + "name": "lpFunc", + "type": "GOBJENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EqualRgn": [ + { + "name": "hrgn1", + "type": "HRGN" + }, + { + "name": "hrgn2", + "type": "HRGN" + } + ], + "Escape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjIn", + "type": "int" + }, + { + "name": "pvIn", + "type": "LPCSTR" + }, + { + "name": "pvOut", + "type": "LPVOID" + } + ], + "ExtEscape": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iEscape", + "type": "int" + }, + { + "name": "cjInput", + "type": "int" + }, + { + "name": "lpInData", + "type": "LPCSTR" + }, + { + "name": "cjOutput", + "type": "int" + }, + { + "name": "lpOutData", + "type": "LPSTR" + } + ], + "ExcludeClipRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "ExtCreateRegion": [ + { + "name": "lpx", + "type": "XFORM" + }, + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "RGNDATA" + } + ], + "ExtFloodFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + }, + { + "name": "type", + "type": "UINT" + } + ], + "FillRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "hbr", + "type": "HBRUSH" + } + ], + "FloodFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "FrameRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "hbr", + "type": "HBRUSH" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + } + ], + "GetROP2": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetAspectRatioFilterEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetBkColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetDCBrushColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetDCPenColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetBkMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetBitmapBits": [ + { + "name": "hbit", + "type": "HBITMAP" + }, + { + "name": "cb", + "type": "LONG" + }, + { + "name": "lpvBits", + "type": "LPVOID" + } + ], + "GetBitmapDimensionEx": [ + { + "name": "hbit", + "type": "HBITMAP" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetBoundsRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "LPRECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "GetBrushOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetCharWidthA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidthW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidth32A": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidth32W": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "LPINT" + } + ], + "GetCharWidthFloatA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "PFLOAT" + } + ], + "GetCharWidthFloatW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpBuffer", + "type": "PFLOAT" + } + ], + "GetCharABCWidthsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "wFirst", + "type": "UINT" + }, + { + "name": "wLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABC" + } + ], + "GetCharABCWidthsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "wFirst", + "type": "UINT" + }, + { + "name": "wLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABC" + } + ], + "GetCharABCWidthsFloatA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABCFLOAT" + } + ], + "GetCharABCWidthsFloatW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iFirst", + "type": "UINT" + }, + { + "name": "iLast", + "type": "UINT" + }, + { + "name": "lpABC", + "type": "LPABCFLOAT" + } + ], + "GetClipBox": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "LPRECT" + } + ], + "GetClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "GetMetaRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "GetCurrentObject": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "type", + "type": "UINT" + } + ], + "GetCurrentPositionEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetDeviceCaps": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "index", + "type": "int" + } + ], + "GetDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "start", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpvBits", + "type": "LPVOID" + }, + { + "name": "lpbmi", + "type": "LPBITMAPINFO" + }, + { + "name": "usage", + "type": "UINT" + } + ], + "GetFontData": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dwTable", + "type": "DWORD" + }, + { + "name": "dwOffset", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "PVOID" + }, + { + "name": "cjBuffer", + "type": "DWORD" + } + ], + "GetGlyphOutlineA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "uChar", + "type": "UINT" + }, + { + "name": "fuFormat", + "type": "UINT" + }, + { + "name": "lpgm", + "type": "LPGLYPHMETRICS" + }, + { + "name": "cjBuffer", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "LPVOID" + }, + { + "name": "lpmat2", + "type": "MAT2" + } + ], + "GetGlyphOutlineW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "uChar", + "type": "UINT" + }, + { + "name": "fuFormat", + "type": "UINT" + }, + { + "name": "lpgm", + "type": "LPGLYPHMETRICS" + }, + { + "name": "cjBuffer", + "type": "DWORD" + }, + { + "name": "pvBuffer", + "type": "LPVOID" + }, + { + "name": "lpmat2", + "type": "MAT2" + } + ], + "GetGraphicsMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetMapMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetMetaFileBitsEx": [ + { + "name": "hMF", + "type": "HMETAFILE" + }, + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "lpData", + "type": "LPVOID" + } + ], + "GetMetaFileA": [ + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetMetaFileW": [ + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "GetNearestColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "GetNearestPaletteIndex": [ + { + "name": "h", + "type": "HPALETTE" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "GetObjectType": [ + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "GetOutlineTextMetricsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cjCopy", + "type": "UINT" + }, + { + "name": "potm", + "type": "LPOUTLINETEXTMETRICA" + } + ], + "GetOutlineTextMetricsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "cjCopy", + "type": "UINT" + }, + { + "name": "potm", + "type": "LPOUTLINETEXTMETRICW" + } + ], + "GetPaletteEntries": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetPixel": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "GetPixelFormat": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetPolyFillMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetRasterizerCaps": [ + { + "name": "lpraststat", + "type": "LPRASTERIZER_STATUS" + }, + { + "name": "cjBytes", + "type": "UINT" + } + ], + "GetRandomRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "i", + "type": "INT" + } + ], + "GetRegionData": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpRgnData", + "type": "LPRGNDATA" + } + ], + "GetRgnBox": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "lprc", + "type": "LPRECT" + } + ], + "GetStockObject": [ + { + "name": "i", + "type": "int" + } + ], + "GetStretchBltMode": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetSystemPaletteEntries": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetSystemPaletteUse": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextCharacterExtra": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextAlign": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextColor": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextExtentPointA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "GetTextExtentPointW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "GetTextExtentPoint32A": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "psizl", + "type": "LPSIZE" + } + ], + "GetTextExtentPoint32W": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "psizl", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpszString", + "type": "LPCSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpszString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetTextCharset": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetTextCharsetInfo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpSig", + "type": "LPFONTSIGNATURE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "TranslateCharsetInfo": [ + { + "name": "lpSrc", + "type": "DWORD" + }, + { + "name": "lpCs", + "type": "LPCHARSETINFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFontLanguageInfo": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetCharacterPlacementA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "nMexExtent", + "type": "int" + }, + { + "name": "lpResults", + "type": "LPGCP_RESULTSA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetCharacterPlacementW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "nCount", + "type": "int" + }, + { + "name": "nMexExtent", + "type": "int" + }, + { + "name": "lpResults", + "type": "LPGCP_RESULTSW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFontUnicodeRanges": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpgs", + "type": "LPGLYPHSET" + } + ], + "GetGlyphIndicesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpstr", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "fl", + "type": "DWORD" + } + ], + "GetGlyphIndicesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpstr", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "fl", + "type": "DWORD" + } + ], + "GetTextExtentPointI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pgiIn", + "type": "LPWORD" + }, + { + "name": "cgi", + "type": "int" + }, + { + "name": "psize", + "type": "LPSIZE" + } + ], + "GetTextExtentExPointI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpwszString", + "type": "LPWORD" + }, + { + "name": "cwchString", + "type": "int" + }, + { + "name": "nMaxExtent", + "type": "int" + }, + { + "name": "lpnFit", + "type": "LPINT" + }, + { + "name": "lpnDx", + "type": "LPINT" + }, + { + "name": "lpSize", + "type": "LPSIZE" + } + ], + "GetCharWidthI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "giFirst", + "type": "UINT" + }, + { + "name": "cgi", + "type": "UINT" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "piWidths", + "type": "LPINT" + } + ], + "GetCharABCWidthsI": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "giFirst", + "type": "UINT" + }, + { + "name": "cgi", + "type": "UINT" + }, + { + "name": "pgi", + "type": "LPWORD" + }, + { + "name": "pabc", + "type": "LPABC" + } + ], + "AddFontResourceExA": [ + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "res", + "type": "PVOID" + } + ], + "AddFontResourceExW": [ + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "res", + "type": "PVOID" + } + ], + "RemoveFontResourceExA": [ + { + "name": "name", + "type": "LPCSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "pdv", + "type": "PVOID" + } + ], + "RemoveFontResourceExW": [ + { + "name": "name", + "type": "LPCWSTR" + }, + { + "name": "fl", + "type": "DWORD" + }, + { + "name": "pdv", + "type": "PVOID" + } + ], + "AddFontMemResourceEx": [ + { + "name": "pFileView", + "type": "PVOID" + }, + { + "name": "cjSize", + "type": "DWORD" + }, + { + "name": "pvResrved", + "type": "PVOID" + }, + { + "name": "pNumFonts", + "type": "DWORD" + } + ], + "RemoveFontMemResourceEx": [ + { + "name": "h", + "type": "HANDLE" + } + ], + "CreateFontIndirectExA": [ + { + "name": "VOID", + "type": "ENUMLOGFONTEXDVA" + } + ], + "CreateFontIndirectExW": [ + { + "name": "VOID", + "type": "ENUMLOGFONTEXDVW" + } + ], + "GetViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppoint", + "type": "LPPOINT" + } + ], + "GetWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpsize", + "type": "LPSIZE" + } + ], + "GetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppoint", + "type": "LPPOINT" + } + ], + "IntersectClipRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "InvertRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "LineDDA": [ + { + "name": "xStart", + "type": "int" + }, + { + "name": "yStart", + "type": "int" + }, + { + "name": "xEnd", + "type": "int" + }, + { + "name": "yEnd", + "type": "int" + }, + { + "name": "lpProc", + "type": "LINEDDAPROC" + }, + { + "name": "data", + "type": "LPARAM" + } + ], + "LineTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "MaskBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + }, + { + "name": "xMask", + "type": "int" + }, + { + "name": "yMask", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "PlgBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "lpPoint", + "type": "POINT" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + }, + { + "name": "xMask", + "type": "int" + }, + { + "name": "yMask", + "type": "int" + } + ], + "OffsetClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "OffsetRgn": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "PatBlt": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "Pie": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "xr1", + "type": "int" + }, + { + "name": "yr1", + "type": "int" + }, + { + "name": "xr2", + "type": "int" + }, + { + "name": "yr2", + "type": "int" + } + ], + "PlayMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HMETAFILE" + } + ], + "PaintRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "PolyPolygon": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "asz", + "type": "INT" + }, + { + "name": "csz", + "type": "int" + } + ], + "PtInRegion": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "PtVisible": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "RectInRegion": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "RectVisible": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "Rectangle": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "RestoreDC": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nSavedDC", + "type": "int" + } + ], + "ResetDCA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdm", + "type": "DEVMODEA" + } + ], + "ResetDCW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdm", + "type": "DEVMODEW" + } + ], + "RealizePalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "RemoveFontResourceA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "RemoveFontResourceW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "RoundRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "width", + "type": "int" + }, + { + "name": "height", + "type": "int" + } + ], + "ResizePalette": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "n", + "type": "UINT" + } + ], + "SaveDC": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SelectClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + } + ], + "ExtSelectClipRgn": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetMetaRgn": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SelectObject": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "SelectPalette": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "bForceBkgd", + "type": "BOOL" + } + ], + "SetBkColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetDCBrushColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetDCPenColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetBkMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetBitmapBits": [ + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "pvBits", + "type": "void" + } + ], + "SetBoundsRect": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "SetDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "start", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "ColorUse", + "type": "UINT" + } + ], + "SetDIBitsToDevice": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "w", + "type": "DWORD" + }, + { + "name": "h", + "type": "DWORD" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "StartScan", + "type": "UINT" + }, + { + "name": "cLines", + "type": "UINT" + }, + { + "name": "lpvBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "ColorUse", + "type": "UINT" + } + ], + "SetMapperFlags": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "flags", + "type": "DWORD" + } + ], + "SetGraphicsMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iMode", + "type": "int" + } + ], + "SetMapMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iMode", + "type": "int" + } + ], + "SetLayout": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "l", + "type": "DWORD" + } + ], + "GetLayout": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SetMetaFileBitsEx": [ + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "lpData", + "type": "BYTE" + } + ], + "SetPaletteEntries": [ + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "pPalEntries", + "type": "PALETTEENTRY" + } + ], + "SetPixel": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetPixelV": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetPixelFormat": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "format", + "type": "int" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "SetPolyFillMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "StretchBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "SetRectRgn": [ + { + "name": "hrgn", + "type": "HRGN" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "StretchDIBits": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDest", + "type": "int" + }, + { + "name": "yDest", + "type": "int" + }, + { + "name": "DestWidth", + "type": "int" + }, + { + "name": "DestHeight", + "type": "int" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "SrcWidth", + "type": "int" + }, + { + "name": "SrcHeight", + "type": "int" + }, + { + "name": "lpBits", + "type": "void" + }, + { + "name": "lpbmi", + "type": "BITMAPINFO" + }, + { + "name": "iUsage", + "type": "UINT" + }, + { + "name": "rop", + "type": "DWORD" + } + ], + "SetROP2": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "rop2", + "type": "int" + } + ], + "SetStretchBltMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetSystemPaletteUse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "use", + "type": "UINT" + } + ], + "SetTextCharacterExtra": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "extra", + "type": "int" + } + ], + "SetTextColor": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "color", + "type": "COLORREF" + } + ], + "SetTextAlign": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "align", + "type": "UINT" + } + ], + "SetTextJustification": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "extra", + "type": "int" + }, + { + "name": "count", + "type": "int" + } + ], + "UpdateColors": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "AlphaBlend": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "ftn", + "type": "BLENDFUNCTION" + } + ], + "TransparentBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "crTransparent", + "type": "UINT" + } + ], + "GradientFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pVertex", + "type": "PTRIVERTEX" + }, + { + "name": "nVertex", + "type": "ULONG" + }, + { + "name": "pMesh", + "type": "PVOID" + }, + { + "name": "nMesh", + "type": "ULONG" + }, + { + "name": "ulMode", + "type": "ULONG" + } + ], + "GdiAlphaBlend": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "ftn", + "type": "BLENDFUNCTION" + } + ], + "GdiTransparentBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "crTransparent", + "type": "UINT" + } + ], + "GdiGradientFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pVertex", + "type": "PTRIVERTEX" + }, + { + "name": "nVertex", + "type": "ULONG" + }, + { + "name": "pMesh", + "type": "PVOID" + }, + { + "name": "nCount", + "type": "ULONG" + }, + { + "name": "ulMode", + "type": "ULONG" + } + ], + "PlayMetaFileRecord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpHandleTable", + "type": "LPHANDLETABLE" + }, + { + "name": "lpMR", + "type": "LPMETARECORD" + }, + { + "name": "noObjs", + "type": "UINT" + } + ], + "EnumMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HMETAFILE" + }, + { + "name": "proc", + "type": "MFENUMPROC" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "CloseEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CopyEnhMetaFileA": [ + { + "name": "hEnh", + "type": "HENHMETAFILE" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "CopyEnhMetaFileW": [ + { + "name": "hEnh", + "type": "HENHMETAFILE" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "CreateEnhMetaFileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFilename", + "type": "LPCSTR" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "lpDesc", + "type": "LPCSTR" + } + ], + "CreateEnhMetaFileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFilename", + "type": "LPCWSTR" + }, + { + "name": "lprc", + "type": "RECT" + }, + { + "name": "lpDesc", + "type": "LPCWSTR" + } + ], + "DeleteEnhMetaFile": [ + { + "name": "hmf", + "type": "HENHMETAFILE" + } + ], + "EnumEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HENHMETAFILE" + }, + { + "name": "proc", + "type": "ENHMFENUMPROC" + }, + { + "name": "param", + "type": "LPVOID" + }, + { + "name": "lpRect", + "type": "RECT" + } + ], + "GetEnhMetaFileA": [ + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetEnhMetaFileW": [ + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "GetEnhMetaFileBits": [ + { + "name": "hEMF", + "type": "HENHMETAFILE" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpData", + "type": "LPBYTE" + } + ], + "GetEnhMetaFileDescriptionA": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cchBuffer", + "type": "UINT" + }, + { + "name": "lpDescription", + "type": "LPSTR" + } + ], + "GetEnhMetaFileDescriptionW": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cchBuffer", + "type": "UINT" + }, + { + "name": "lpDescription", + "type": "LPWSTR" + } + ], + "GetEnhMetaFileHeader": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpEnhMetaHeader", + "type": "LPENHMETAHEADER" + } + ], + "GetEnhMetaFilePaletteEntries": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "nNumEntries", + "type": "UINT" + }, + { + "name": "lpPaletteEntries", + "type": "LPPALETTEENTRY" + } + ], + "GetEnhMetaFilePixelFormat": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cbBuffer", + "type": "UINT" + }, + { + "name": "ppfd", + "type": "PIXELFORMATDESCRIPTOR" + } + ], + "GetWinMetaFileBits": [ + { + "name": "hemf", + "type": "HENHMETAFILE" + }, + { + "name": "cbData16", + "type": "UINT" + }, + { + "name": "pData16", + "type": "LPBYTE" + }, + { + "name": "iMapMode", + "type": "INT" + }, + { + "name": "hdcRef", + "type": "HDC" + } + ], + "PlayEnhMetaFile": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hmf", + "type": "HENHMETAFILE" + }, + { + "name": "lprect", + "type": "RECT" + } + ], + "PlayEnhMetaFileRecord": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pht", + "type": "LPHANDLETABLE" + }, + { + "name": "pmr", + "type": "ENHMETARECORD" + }, + { + "name": "cht", + "type": "UINT" + } + ], + "SetEnhMetaFileBits": [ + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "pb", + "type": "BYTE" + } + ], + "SetWinMetaFileBits": [ + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpMeta16Data", + "type": "BYTE" + }, + { + "name": "hdcRef", + "type": "HDC" + }, + { + "name": "lpMFP", + "type": "METAFILEPICT" + } + ], + "GdiComment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nSize", + "type": "UINT" + }, + { + "name": "lpData", + "type": "BYTE" + } + ], + "GetTextMetricsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lptm", + "type": "LPTEXTMETRICA" + } + ], + "GetTextMetricsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lptm", + "type": "LPTEXTMETRICW" + } + ], + "AngleArc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "r", + "type": "DWORD" + }, + { + "name": "StartAngle", + "type": "FLOAT" + }, + { + "name": "SweepAngle", + "type": "FLOAT" + } + ], + "PolyPolyline": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "asz", + "type": "DWORD" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "GetWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "LPXFORM" + } + ], + "SetWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "XFORM" + } + ], + "ModifyWorldTransform": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpxf", + "type": "XFORM" + }, + { + "name": "mode", + "type": "DWORD" + } + ], + "CombineTransform": [ + { + "name": "lpxfOut", + "type": "LPXFORM" + }, + { + "name": "lpxf1", + "type": "XFORM" + }, + { + "name": "lpxf2", + "type": "XFORM" + } + ], + "CreateDIBSection": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pbmi", + "type": "BITMAPINFO" + }, + { + "name": "usage", + "type": "UINT" + }, + { + "name": "ppvBits", + "type": "void" + }, + { + "name": "hSection", + "type": "HANDLE" + }, + { + "name": "offset", + "type": "DWORD" + } + ], + "GetDIBColorTable": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "prgbq", + "type": "RGBQUAD" + } + ], + "SetDIBColorTable": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "iStart", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "UINT" + }, + { + "name": "prgbq", + "type": "RGBQUAD" + } + ], + "SetColorAdjustment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpca", + "type": "COLORADJUSTMENT" + } + ], + "GetColorAdjustment": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpca", + "type": "LPCOLORADJUSTMENT" + } + ], + "CreateHalftonePalette": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StartDocA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdi", + "type": "DOCINFOA" + } + ], + "StartDocW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpdi", + "type": "DOCINFOW" + } + ], + "EndDoc": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StartPage": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "EndPage": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "AbortDoc": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "SetAbortProc": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ABORTPROC" + } + ], + "AbortPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ArcTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + }, + { + "name": "xr1", + "type": "int" + }, + { + "name": "yr1", + "type": "int" + }, + { + "name": "xr2", + "type": "int" + }, + { + "name": "yr2", + "type": "int" + } + ], + "BeginPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "CloseFigure": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "EndPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "FillPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "FlattenPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetPath": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "LPPOINT" + }, + { + "name": "aj", + "type": "LPBYTE" + }, + { + "name": "cpt", + "type": "int" + } + ], + "PathToRegion": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "PolyDraw": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "aj", + "type": "BYTE" + }, + { + "name": "cpt", + "type": "int" + } + ], + "SelectClipPath": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "SetArcDirection": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dir", + "type": "int" + } + ], + "SetMiterLimit": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "limit", + "type": "FLOAT" + }, + { + "name": "old", + "type": "PFLOAT" + } + ], + "StrokeAndFillPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "StrokePath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "WidenPath": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "ExtCreatePen": [ + { + "name": "iPenStyle", + "type": "DWORD" + }, + { + "name": "cWidth", + "type": "DWORD" + }, + { + "name": "plbrush", + "type": "LOGBRUSH" + }, + { + "name": "cStyle", + "type": "DWORD" + }, + { + "name": "pstyle", + "type": "DWORD" + } + ], + "GetMiterLimit": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "plimit", + "type": "PFLOAT" + } + ], + "GetArcDirection": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetObjectA": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pv", + "type": "LPVOID" + } + ], + "GetObjectW": [ + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "pv", + "type": "LPVOID" + } + ], + "MoveToEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "TextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "int" + } + ], + "TextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "int" + } + ], + "ExtTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "options", + "type": "UINT" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "c", + "type": "UINT" + }, + { + "name": "lpDx", + "type": "INT" + } + ], + "ExtTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "options", + "type": "UINT" + }, + { + "name": "lprect", + "type": "RECT" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "c", + "type": "UINT" + }, + { + "name": "lpDx", + "type": "INT" + } + ], + "PolyTextOutA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppt", + "type": "POLYTEXTA" + }, + { + "name": "nstrings", + "type": "int" + } + ], + "PolyTextOutW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "ppt", + "type": "POLYTEXTW" + }, + { + "name": "nstrings", + "type": "int" + } + ], + "CreatePolygonRgn": [ + { + "name": "pptl", + "type": "POINT" + }, + { + "name": "cPoint", + "type": "int" + }, + { + "name": "iMode", + "type": "int" + } + ], + "DPtoLP": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + }, + { + "name": "c", + "type": "int" + } + ], + "LPtoDP": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + }, + { + "name": "c", + "type": "int" + } + ], + "Polygon": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "int" + } + ], + "Polyline": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "int" + } + ], + "PolyBezier": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "PolyBezierTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "PolylineTo": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "apt", + "type": "POINT" + }, + { + "name": "cpt", + "type": "DWORD" + } + ], + "SetViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "SetWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "OffsetViewportOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "OffsetWindowOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "ScaleViewportExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xn", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "yn", + "type": "int" + }, + { + "name": "yd", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "ScaleWindowExtEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xn", + "type": "int" + }, + { + "name": "xd", + "type": "int" + }, + { + "name": "yn", + "type": "int" + }, + { + "name": "yd", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetBitmapDimensionEx": [ + { + "name": "hbm", + "type": "HBITMAP" + }, + { + "name": "w", + "type": "int" + }, + { + "name": "h", + "type": "int" + }, + { + "name": "lpsz", + "type": "LPSIZE" + } + ], + "SetBrushOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "GetTextFaceA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpName", + "type": "LPSTR" + } + ], + "GetTextFaceW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "c", + "type": "int" + }, + { + "name": "lpName", + "type": "LPWSTR" + } + ], + "GetKerningPairsA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nPairs", + "type": "DWORD" + }, + { + "name": "lpKernPair", + "type": "LPKERNINGPAIR" + } + ], + "GetKerningPairsW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "nPairs", + "type": "DWORD" + }, + { + "name": "lpKernPair", + "type": "LPKERNINGPAIR" + } + ], + "GetDCOrgEx": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lppt", + "type": "LPPOINT" + } + ], + "UnrealizeObject": [ + { + "name": "h", + "type": "HGDIOBJ" + } + ], + "GdiFlush": [ + { + "name": "VOID", + "type": "void" + } + ], + "GdiSetBatchLimit": [ + { + "name": "dw", + "type": "DWORD" + } + ], + "GdiGetBatchLimit": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetICMMode": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "mode", + "type": "int" + } + ], + "CheckColorsInGamut": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRGBTriple", + "type": "LPRGBTRIPLE" + }, + { + "name": "dlpBuffer", + "type": "LPVOID" + }, + { + "name": "nCount", + "type": "DWORD" + } + ], + "GetColorSpace": [ + { + "name": "hdc", + "type": "HDC" + } + ], + "GetLogColorSpaceA": [ + { + "name": "hColorSpace", + "type": "HCOLORSPACE" + }, + { + "name": "lpBuffer", + "type": "LPLOGCOLORSPACEA" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetLogColorSpaceW": [ + { + "name": "hColorSpace", + "type": "HCOLORSPACE" + }, + { + "name": "lpBuffer", + "type": "LPLOGCOLORSPACEW" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "CreateColorSpaceA": [ + { + "name": "lplcs", + "type": "LPLOGCOLORSPACEA" + } + ], + "CreateColorSpaceW": [ + { + "name": "lplcs", + "type": "LPLOGCOLORSPACEW" + } + ], + "SetColorSpace": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hcs", + "type": "HCOLORSPACE" + } + ], + "DeleteColorSpace": [ + { + "name": "hcs", + "type": "HCOLORSPACE" + } + ], + "GetICMProfileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pBufSize", + "type": "LPDWORD" + }, + { + "name": "pszFilename", + "type": "LPSTR" + } + ], + "GetICMProfileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pBufSize", + "type": "LPDWORD" + }, + { + "name": "pszFilename", + "type": "LPWSTR" + } + ], + "SetICMProfileA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFileName", + "type": "LPSTR" + } + ], + "SetICMProfileW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpFileName", + "type": "LPWSTR" + } + ], + "GetDeviceGammaRamp": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRamp", + "type": "LPVOID" + } + ], + "SetDeviceGammaRamp": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "lpRamp", + "type": "LPVOID" + } + ], + "ColorMatchToTarget": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hdcTarget", + "type": "HDC" + }, + { + "name": "action", + "type": "DWORD" + } + ], + "EnumICMProfilesA": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ICMENUMPROCA" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "EnumICMProfilesW": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "proc", + "type": "ICMENUMPROCW" + }, + { + "name": "param", + "type": "LPARAM" + } + ], + "UpdateICMRegKeyA": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "lpszCMID", + "type": "LPSTR" + }, + { + "name": "lpszFileName", + "type": "LPSTR" + }, + { + "name": "command", + "type": "UINT" + } + ], + "UpdateICMRegKeyW": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "lpszCMID", + "type": "LPWSTR" + }, + { + "name": "lpszFileName", + "type": "LPWSTR" + }, + { + "name": "command", + "type": "UINT" + } + ], + "ColorCorrectPalette": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "hPal", + "type": "HPALETTE" + }, + { + "name": "deFirst", + "type": "DWORD" + }, + { + "name": "num", + "type": "DWORD" + } + ], + "wglCopyContext": [ + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "UINT" + } + ], + "wglCreateContext": [ + { + "name": "VOID", + "type": "HDC" + } + ], + "wglCreateLayerContext": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + } + ], + "wglDeleteContext": [ + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglGetCurrentContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "wglGetCurrentDC": [ + { + "name": "VOID", + "type": "void" + } + ], + "wglGetProcAddress": [ + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "wglMakeCurrent": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglShareLists": [ + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglUseFontBitmapsA": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "wglUseFontBitmapsW": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "SwapBuffers": [ + { + "name": "VOID", + "type": "HDC" + } + ], + "wglUseFontOutlinesA": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "LPGLYPHMETRICSFLOAT" + } + ], + "wglUseFontOutlinesW": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "LPGLYPHMETRICSFLOAT" + } + ], + "wglDescribeLayerPlane": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "LPLAYERPLANEDESCRIPTOR" + } + ], + "wglSetLayerPaletteEntries": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "COLORREF" + } + ], + "wglGetLayerPaletteEntries": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "COLORREF" + } + ], + "wglRealizeLayerPalette": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "wglSwapLayerBuffers": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/perflib.json b/qiling/extensions/windows_sdk/perflib.json deleted file mode 100644 index 248960a6a..000000000 --- a/qiling/extensions/windows_sdk/perflib.json +++ /dev/null @@ -1,372 +0,0 @@ -{ - "PerfStartProvider": [ - { - "name": "ProviderGuid", - "type": "LPGUID" - }, - { - "name": "ControlCallback", - "type": "PERFLIBREQUEST" - }, - { - "name": "Provider", - "type": "PHANDLE" - } - ], - "PerfStartProviderEx": [ - { - "name": "ProviderGuid", - "type": "LPGUID" - }, - { - "name": "ProviderContext", - "type": "PPERF_PROVIDER_CONTEXT" - }, - { - "name": "Provider", - "type": "PHANDLE" - } - ], - "PerfStopProvider": [ - { - "name": "ProviderHandle", - "type": "HANDLE" - } - ], - "PerfSetCounterSetInfo": [ - { - "name": "ProviderHandle", - "type": "HANDLE" - }, - { - "name": "Template", - "type": "PPERF_COUNTERSET_INFO" - }, - { - "name": "TemplateSize", - "type": "ULONG" - } - ], - "PerfCreateInstance": [ - { - "name": "ProviderHandle", - "type": "HANDLE" - }, - { - "name": "CounterSetGuid", - "type": "LPCGUID" - }, - { - "name": "Name", - "type": "PCWSTR" - }, - { - "name": "Id", - "type": "ULONG" - } - ], - "PerfDeleteInstance": [ - { - "name": "Provider", - "type": "HANDLE" - }, - { - "name": "InstanceBlock", - "type": "PPERF_COUNTERSET_INSTANCE" - } - ], - "PerfQueryInstance": [ - { - "name": "ProviderHandle", - "type": "HANDLE" - }, - { - "name": "CounterSetGuid", - "type": "LPCGUID" - }, - { - "name": "Name", - "type": "PCWSTR" - }, - { - "name": "Id", - "type": "ULONG" - } - ], - "PerfSetCounterRefValue": [ - { - "name": "Provider", - "type": "HANDLE" - }, - { - "name": "Instance", - "type": "PPERF_COUNTERSET_INSTANCE" - }, - { - "name": "CounterId", - "type": "ULONG" - }, - { - "name": "Address", - "type": "PVOID" - } - ], - "PerfSetULongCounterValue": [ - { - "name": "Provider", - "type": "HANDLE" - }, - { - "name": "Instance", - "type": "PPERF_COUNTERSET_INSTANCE" - }, - { - "name": "CounterId", - "type": "ULONG" - }, - { - "name": "Value", - "type": "ULONG" - } - ], - "PerfSetULongLongCounterValue": [ - { - "name": "Provider", - "type": "HANDLE" - }, - { - "name": "Instance", - "type": "PPERF_COUNTERSET_INSTANCE" - }, - { - "name": "CounterId", - "type": "ULONG" - }, - { - "name": "Value", - "type": "ULONGLONG" - } - ], - "PerfIncrementULongCounterValue": [ - { - "name": "Provider", - "type": "HANDLE" - }, - { - "name": "Instance", - "type": "PPERF_COUNTERSET_INSTANCE" - }, - { - "name": "CounterId", - "type": "ULONG" - }, - { - "name": "Value", - "type": "ULONG" - } - ], - "PerfIncrementULongLongCounterValue": [ - { - "name": "Provider", - "type": "HANDLE" - }, - { - "name": "Instance", - "type": "PPERF_COUNTERSET_INSTANCE" - }, - { - "name": "CounterId", - "type": "ULONG" - }, - { - "name": "Value", - "type": "ULONGLONG" - } - ], - "PerfDecrementULongCounterValue": [ - { - "name": "Provider", - "type": "HANDLE" - }, - { - "name": "Instance", - "type": "PPERF_COUNTERSET_INSTANCE" - }, - { - "name": "CounterId", - "type": "ULONG" - }, - { - "name": "Value", - "type": "ULONG" - } - ], - "PerfDecrementULongLongCounterValue": [ - { - "name": "Provider", - "type": "HANDLE" - }, - { - "name": "Instance", - "type": "PPERF_COUNTERSET_INSTANCE" - }, - { - "name": "CounterId", - "type": "ULONG" - }, - { - "name": "Value", - "type": "ULONGLONG" - } - ], - "PerfEnumerateCounterSet": [ - { - "name": "szMachine", - "type": "LPCWSTR" - }, - { - "name": "pCounterSetIds", - "type": "LPGUID" - }, - { - "name": "cCounterSetIds", - "type": "DWORD" - }, - { - "name": "pcCounterSetIdsActual", - "type": "LPDWORD" - } - ], - "PerfEnumerateCounterSetInstances": [ - { - "name": "szMachine", - "type": "LPCWSTR" - }, - { - "name": "pCounterSetId", - "type": "LPCGUID" - }, - { - "name": "pInstances", - "type": "PPERF_INSTANCE_HEADER" - }, - { - "name": "cbInstances", - "type": "DWORD" - }, - { - "name": "pcbInstancesActual", - "type": "LPDWORD" - } - ], - "PerfQueryCounterSetRegistrationInfo": [ - { - "name": "szMachine", - "type": "LPCWSTR" - }, - { - "name": "pCounterSetId", - "type": "LPCGUID" - }, - { - "name": "requestCode", - "type": "PerfRegInfoType" - }, - { - "name": "requestLangId", - "type": "DWORD" - }, - { - "name": "pbRegInfo", - "type": "LPBYTE" - }, - { - "name": "cbRegInfo", - "type": "DWORD" - }, - { - "name": "pcbRegInfoActual", - "type": "LPDWORD" - } - ], - "PerfOpenQueryHandle": [ - { - "name": "szMachine", - "type": "LPCWSTR" - }, - { - "name": "phQuery", - "type": "HANDLE" - } - ], - "PerfCloseQueryHandle": [ - { - "name": "hQuery", - "type": "HANDLE" - } - ], - "PerfQueryCounterInfo": [ - { - "name": "hQuery", - "type": "HANDLE" - }, - { - "name": "pCounters", - "type": "PPERF_COUNTER_IDENTIFIER" - }, - { - "name": "cbCounters", - "type": "DWORD" - }, - { - "name": "pcbCountersActual", - "type": "LPDWORD" - } - ], - "PerfQueryCounterData": [ - { - "name": "hQuery", - "type": "HANDLE" - }, - { - "name": "pCounterBlock", - "type": "PPERF_DATA_HEADER" - }, - { - "name": "cbCounterBlock", - "type": "DWORD" - }, - { - "name": "pcbCounterBlockActual", - "type": "LPDWORD" - } - ], - "PerfAddCounters": [ - { - "name": "hQuery", - "type": "HANDLE" - }, - { - "name": "pCounters", - "type": "PPERF_COUNTER_IDENTIFIER" - }, - { - "name": "cbCounters", - "type": "DWORD" - } - ], - "PerfDeleteCounters": [ - { - "name": "hQuery", - "type": "HANDLE" - }, - { - "name": "pCounters", - "type": "PPERF_COUNTER_IDENTIFIER" - }, - { - "name": "cbCounters", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/powerbase.json b/qiling/extensions/windows_sdk/powerbase.json deleted file mode 100644 index 391e32679..000000000 --- a/qiling/extensions/windows_sdk/powerbase.json +++ /dev/null @@ -1,56 +0,0 @@ -{ - "CallNtPowerInformation": [ - { - "name": "InformationLevel", - "type": "POWER_INFORMATION_LEVEL" - }, - { - "name": "InputBuffer", - "type": "PVOID" - }, - { - "name": "InputBufferLength", - "type": "ULONG" - }, - { - "name": "OutputBuffer", - "type": "PVOID" - }, - { - "name": "OutputBufferLength", - "type": "ULONG" - } - ], - "GetPwrCapabilities": [ - { - "name": "lpspc", - "type": "PSYSTEM_POWER_CAPABILITIES" - } - ], - "PowerDeterminePlatformRoleEx": [ - { - "name": "Version", - "type": "ULONG" - } - ], - "PowerRegisterSuspendResumeNotification": [ - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "Recipient", - "type": "HANDLE" - }, - { - "name": "RegistrationHandle", - "type": "PHPOWERNOTIFY" - } - ], - "PowerUnregisterSuspendResumeNotification": [ - { - "name": "RegistrationHandle", - "type": "HPOWERNOTIFY" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/powersetting.json b/qiling/extensions/windows_sdk/powersetting.json deleted file mode 100644 index 0bed5d151..000000000 --- a/qiling/extensions/windows_sdk/powersetting.json +++ /dev/null @@ -1,174 +0,0 @@ -{ - "PowerReadACValue": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Type", - "type": "PULONG" - }, - { - "name": "Buffer", - "type": "LPBYTE" - }, - { - "name": "BufferSize", - "type": "LPDWORD" - } - ], - "PowerReadDCValue": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Type", - "type": "PULONG" - }, - { - "name": "Buffer", - "type": "PUCHAR" - }, - { - "name": "BufferSize", - "type": "LPDWORD" - } - ], - "PowerWriteACValueIndex": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "AcValueIndex", - "type": "DWORD" - } - ], - "PowerWriteDCValueIndex": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "DcValueIndex", - "type": "DWORD" - } - ], - "PowerGetActiveScheme": [ - { - "name": "UserRootPowerKey", - "type": "HKEY" - }, - { - "name": "ActivePolicyGuid", - "type": "GUID" - } - ], - "PowerSetActiveScheme": [ - { - "name": "UserRootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - } - ], - "PowerSettingRegisterNotification": [ - { - "name": "SettingGuid", - "type": "LPCGUID" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "Recipient", - "type": "HANDLE" - }, - { - "name": "RegistrationHandle", - "type": "PHPOWERNOTIFY" - } - ], - "PowerSettingUnregisterNotification": [ - { - "name": "RegistrationHandle", - "type": "HPOWERNOTIFY" - } - ], - "PowerRegisterForEffectivePowerModeNotifications": [ - { - "name": "Version", - "type": "ULONG" - }, - { - "name": "Callback", - "type": "EFFECTIVE_POWER_MODE_CALLBACK" - }, - { - "name": "Context", - "type": "void" - }, - { - "name": "RegistrationHandle", - "type": "void" - } - ], - "PowerUnregisterFromEffectivePowerModeNotifications": [ - { - "name": "RegistrationHandle", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/powrprof.json b/qiling/extensions/windows_sdk/powrprof.json index 7b52bd22b..0bed5d151 100644 --- a/qiling/extensions/windows_sdk/powrprof.json +++ b/qiling/extensions/windows_sdk/powrprof.json @@ -1,639 +1,13 @@ { - "GetPwrDiskSpindownRange": [ - { - "name": "puiMax", - "type": "PUINT" - }, - { - "name": "puiMin", - "type": "PUINT" - } - ], - "EnumPwrSchemes": [ - { - "name": "lpfn", - "type": "PWRSCHEMESENUMPROC" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "ReadGlobalPwrPolicy": [ - { - "name": "pGlobalPowerPolicy", - "type": "PGLOBAL_POWER_POLICY" - } - ], - "ReadPwrScheme": [ - { - "name": "uiID", - "type": "UINT" - }, - { - "name": "pPowerPolicy", - "type": "PPOWER_POLICY" - } - ], - "WritePwrScheme": [ - { - "name": "puiID", - "type": "PUINT" - }, - { - "name": "lpszSchemeName", - "type": "LPCWSTR" - }, - { - "name": "lpszDescription", - "type": "LPCWSTR" - }, - { - "name": "lpScheme", - "type": "PPOWER_POLICY" - } - ], - "WriteGlobalPwrPolicy": [ - { - "name": "pGlobalPowerPolicy", - "type": "PGLOBAL_POWER_POLICY" - } - ], - "DeletePwrScheme": [ - { - "name": "uiID", - "type": "UINT" - } - ], - "GetActivePwrScheme": [ - { - "name": "puiID", - "type": "PUINT" - } - ], - "SetActivePwrScheme": [ - { - "name": "uiID", - "type": "UINT" - }, - { - "name": "pGlobalPowerPolicy", - "type": "PGLOBAL_POWER_POLICY" - }, - { - "name": "pPowerPolicy", - "type": "PPOWER_POLICY" - } - ], - "IsPwrSuspendAllowed": [ - { - "name": "VOID", - "type": "void" - } - ], - "IsPwrHibernateAllowed": [ - { - "name": "VOID", - "type": "void" - } - ], - "IsPwrShutdownAllowed": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetSuspendState": [ - { - "name": "bHibernate", - "type": "BOOLEAN" - }, - { - "name": "bForce", - "type": "BOOLEAN" - }, - { - "name": "bWakeupEventsDisabled", - "type": "BOOLEAN" - } - ], - "GetCurrentPowerPolicies": [ - { - "name": "pGlobalPowerPolicy", - "type": "PGLOBAL_POWER_POLICY" - }, - { - "name": "pPowerPolicy", - "type": "PPOWER_POLICY" - } - ], - "CanUserWritePwrScheme": [ - { - "name": "VOID", - "type": "void" - } - ], - "ReadProcessorPwrScheme": [ - { - "name": "uiID", - "type": "UINT" - }, - { - "name": "pMachineProcessorPowerPolicy", - "type": "PMACHINE_PROCESSOR_POWER_POLICY" - } - ], - "WriteProcessorPwrScheme": [ - { - "name": "uiID", - "type": "UINT" - }, - { - "name": "pMachineProcessorPowerPolicy", - "type": "PMACHINE_PROCESSOR_POWER_POLICY" - } - ], - "PowerIsSettingRangeDefined": [ - { - "name": "SubKeyGuid", - "type": "GUID" - }, - { - "name": "SettingGuid", - "type": "GUID" - } - ], - "PowerSettingAccessCheckEx": [ - { - "name": "AccessFlags", - "type": "POWER_DATA_ACCESSOR" - }, - { - "name": "PowerGuid", - "type": "GUID" - }, - { - "name": "AccessType", - "type": "REGSAM" - } - ], - "PowerSettingAccessCheck": [ - { - "name": "AccessFlags", - "type": "POWER_DATA_ACCESSOR" - }, - { - "name": "PowerGuid", - "type": "GUID" - } - ], - "PowerReadACValueIndex": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "AcValueIndex", - "type": "LPDWORD" - } - ], - "PowerReadDCValueIndex": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "DcValueIndex", - "type": "LPDWORD" - } - ], - "PowerReadFriendlyName": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Buffer", - "type": "PUCHAR" - }, - { - "name": "BufferSize", - "type": "LPDWORD" - } - ], - "PowerReadDescription": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Buffer", - "type": "PUCHAR" - }, - { - "name": "BufferSize", - "type": "LPDWORD" - } - ], - "PowerReadPossibleValue": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Type", - "type": "PULONG" - }, - { - "name": "PossibleSettingIndex", - "type": "ULONG" - }, - { - "name": "Buffer", - "type": "PUCHAR" - }, - { - "name": "BufferSize", - "type": "LPDWORD" - } - ], - "PowerReadPossibleFriendlyName": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "PossibleSettingIndex", - "type": "ULONG" - }, - { - "name": "Buffer", - "type": "PUCHAR" - }, - { - "name": "BufferSize", - "type": "LPDWORD" - } - ], - "PowerReadPossibleDescription": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "PossibleSettingIndex", - "type": "ULONG" - }, - { - "name": "Buffer", - "type": "PUCHAR" - }, - { - "name": "BufferSize", - "type": "LPDWORD" - } - ], - "PowerReadValueMin": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "ValueMinimum", - "type": "LPDWORD" - } - ], - "PowerReadValueMax": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "ValueMaximum", - "type": "LPDWORD" - } - ], - "PowerReadValueIncrement": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "ValueIncrement", - "type": "LPDWORD" - } - ], - "PowerReadValueUnitsSpecifier": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Buffer", - "type": "UCHAR" - }, - { - "name": "BufferSize", - "type": "LPDWORD" - } - ], - "PowerReadACDefaultIndex": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemePersonalityGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "AcDefaultIndex", - "type": "LPDWORD" - } - ], - "PowerReadDCDefaultIndex": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemePersonalityGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "DcDefaultIndex", - "type": "LPDWORD" - } - ], - "PowerReadIconResourceSpecifier": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Buffer", - "type": "PUCHAR" - }, - { - "name": "BufferSize", - "type": "LPDWORD" - } - ], - "PowerReadSettingAttributes": [ - { - "name": "SubGroupGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - } - ], - "PowerWriteFriendlyName": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Buffer", - "type": "UCHAR" - }, - { - "name": "BufferSize", - "type": "DWORD" - } - ], - "PowerWriteDescription": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Buffer", - "type": "UCHAR" - }, - { - "name": "BufferSize", - "type": "DWORD" - } - ], - "PowerWritePossibleValue": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Type", - "type": "ULONG" - }, - { - "name": "PossibleSettingIndex", - "type": "ULONG" - }, - { - "name": "Buffer", - "type": "UCHAR" - }, - { - "name": "BufferSize", - "type": "DWORD" - } - ], - "PowerWritePossibleFriendlyName": [ + "PowerReadACValue": [ { "name": "RootPowerKey", "type": "HKEY" }, { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", + "name": "SchemeGuid", "type": "GUID" }, - { - "name": "PossibleSettingIndex", - "type": "ULONG" - }, - { - "name": "Buffer", - "type": "UCHAR" - }, - { - "name": "BufferSize", - "type": "DWORD" - } - ], - "PowerWritePossibleDescription": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, { "name": "SubGroupOfPowerSettingsGuid", "type": "GUID" @@ -643,59 +17,27 @@ "type": "GUID" }, { - "name": "PossibleSettingIndex", - "type": "ULONG" + "name": "Type", + "type": "PULONG" }, { "name": "Buffer", - "type": "UCHAR" + "type": "LPBYTE" }, { "name": "BufferSize", - "type": "DWORD" - } - ], - "PowerWriteValueMin": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "ValueMinimum", - "type": "DWORD" + "type": "LPDWORD" } ], - "PowerWriteValueMax": [ + "PowerReadDCValue": [ { "name": "RootPowerKey", "type": "HKEY" }, { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", + "name": "SchemeGuid", "type": "GUID" }, - { - "name": "ValueMaximum", - "type": "DWORD" - } - ], - "PowerWriteValueIncrement": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, { "name": "SubGroupOfPowerSettingsGuid", "type": "GUID" @@ -705,61 +47,25 @@ "type": "GUID" }, { - "name": "ValueIncrement", - "type": "DWORD" - } - ], - "PowerWriteValueUnitsSpecifier": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" + "name": "Type", + "type": "PULONG" }, { "name": "Buffer", - "type": "UCHAR" + "type": "PUCHAR" }, { "name": "BufferSize", - "type": "DWORD" - } - ], - "PowerWriteACDefaultIndex": [ - { - "name": "RootSystemPowerKey", - "type": "HKEY" - }, - { - "name": "SchemePersonalityGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "DefaultAcIndex", - "type": "DWORD" + "type": "LPDWORD" } ], - "PowerWriteDCDefaultIndex": [ + "PowerWriteACValueIndex": [ { - "name": "RootSystemPowerKey", + "name": "RootPowerKey", "type": "HKEY" }, { - "name": "SchemePersonalityGuid", + "name": "SchemeGuid", "type": "GUID" }, { @@ -771,11 +77,11 @@ "type": "GUID" }, { - "name": "DefaultDcIndex", + "name": "AcValueIndex", "type": "DWORD" } ], - "PowerWriteIconResourceSpecifier": [ + "PowerWriteDCValueIndex": [ { "name": "RootPowerKey", "type": "HKEY" @@ -793,59 +99,23 @@ "type": "GUID" }, { - "name": "Buffer", - "type": "UCHAR" - }, - { - "name": "BufferSize", - "type": "DWORD" - } - ], - "PowerWriteSettingAttributes": [ - { - "name": "SubGroupGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Attributes", + "name": "DcValueIndex", "type": "DWORD" } ], - "PowerDuplicateScheme": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SourceSchemeGuid", - "type": "GUID" - }, - { - "name": "DestinationSchemeGuid", - "type": "GUID" - } - ], - "PowerImportPowerScheme": [ + "PowerGetActiveScheme": [ { - "name": "RootPowerKey", + "name": "UserRootPowerKey", "type": "HKEY" }, { - "name": "ImportFileNamePath", - "type": "LPCWSTR" - }, - { - "name": "DestinationSchemeGuid", + "name": "ActivePolicyGuid", "type": "GUID" } ], - "PowerDeleteScheme": [ + "PowerSetActiveScheme": [ { - "name": "RootPowerKey", + "name": "UserRootPowerKey", "type": "HKEY" }, { @@ -853,160 +123,52 @@ "type": "GUID" } ], - "PowerRemovePowerSetting": [ + "PowerSettingRegisterNotification": [ { - "name": "PowerSettingSubKeyGuid", - "type": "GUID" + "name": "SettingGuid", + "type": "LPCGUID" }, { - "name": "PowerSettingGuid", - "type": "GUID" - } - ], - "PowerCreateSetting": [ - { - "name": "RootSystemPowerKey", - "type": "HKEY" + "name": "Flags", + "type": "DWORD" }, { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" + "name": "Recipient", + "type": "HANDLE" }, { - "name": "PowerSettingGuid", - "type": "GUID" + "name": "RegistrationHandle", + "type": "PHPOWERNOTIFY" } ], - "PowerCreatePossibleSetting": [ - { - "name": "RootSystemPowerKey", - "type": "HKEY" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, + "PowerSettingUnregisterNotification": [ { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "PossibleSettingIndex", - "type": "ULONG" + "name": "RegistrationHandle", + "type": "HPOWERNOTIFY" } ], - "PowerEnumerate": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "AccessFlags", - "type": "POWER_DATA_ACCESSOR" - }, + "PowerRegisterForEffectivePowerModeNotifications": [ { - "name": "Index", + "name": "Version", "type": "ULONG" }, { - "name": "Buffer", - "type": "UCHAR" + "name": "Callback", + "type": "EFFECTIVE_POWER_MODE_CALLBACK" }, { - "name": "BufferSize", - "type": "DWORD" - } - ], - "PowerCanRestoreIndividualDefaultPowerScheme": [ - { - "name": "SchemeGuid", - "type": "GUID" - } - ], - "PowerRestoreIndividualDefaultPowerScheme": [ - { - "name": "SchemeGuid", - "type": "GUID" - } - ], - "PowerRestoreDefaultPowerSchemes": [ - { - "name": "VOID", - "type": "void" - } - ], - "PowerReplaceDefaultPowerSchemes": [ - { - "name": "VOID", - "type": "void" - } - ], - "PowerDeterminePlatformRole": [ - { - "name": "VOID", + "name": "Context", "type": "void" - } - ], - "DevicePowerEnumDevices": [ - { - "name": "QueryIndex", - "type": "ULONG" - }, - { - "name": "QueryInterpretationFlags", - "type": "ULONG" - }, - { - "name": "QueryFlags", - "type": "ULONG" - }, - { - "name": "pReturnBuffer", - "type": "PBYTE" - }, - { - "name": "pBufferSize", - "type": "PULONG" - } - ], - "DevicePowerSetDeviceState": [ - { - "name": "DeviceDescription", - "type": "LPCWSTR" - }, - { - "name": "SetFlags", - "type": "ULONG" }, { - "name": "SetData", - "type": "PVOID" - } - ], - "DevicePowerOpen": [ - { - "name": "DebugMask", - "type": "ULONG" - } - ], - "DevicePowerClose": [ - { - "name": "VOID", + "name": "RegistrationHandle", "type": "void" } ], - "PowerReportThermalEvent": [ + "PowerUnregisterFromEffectivePowerModeNotifications": [ { - "name": "Event", - "type": "PTHERMAL_EVENT" + "name": "RegistrationHandle", + "type": "void" } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/processsnapshot.json b/qiling/extensions/windows_sdk/processsnapshot.json deleted file mode 100644 index aa9859605..000000000 --- a/qiling/extensions/windows_sdk/processsnapshot.json +++ /dev/null @@ -1,134 +0,0 @@ -{ - "PssCaptureSnapshot": [ - { - "name": "ProcessHandle", - "type": "HANDLE" - }, - { - "name": "CaptureFlags", - "type": "PSS_CAPTURE_FLAGS" - }, - { - "name": "ThreadContextFlags", - "type": "DWORD" - }, - { - "name": "SnapshotHandle", - "type": "HPSS" - } - ], - "PssFreeSnapshot": [ - { - "name": "ProcessHandle", - "type": "HANDLE" - }, - { - "name": "SnapshotHandle", - "type": "HPSS" - } - ], - "PssQuerySnapshot": [ - { - "name": "SnapshotHandle", - "type": "HPSS" - }, - { - "name": "InformationClass", - "type": "PSS_QUERY_INFORMATION_CLASS" - }, - { - "name": "Buffer", - "type": "void" - }, - { - "name": "BufferLength", - "type": "DWORD" - } - ], - "PssWalkSnapshot": [ - { - "name": "SnapshotHandle", - "type": "HPSS" - }, - { - "name": "InformationClass", - "type": "PSS_WALK_INFORMATION_CLASS" - }, - { - "name": "WalkMarkerHandle", - "type": "HPSSWALK" - }, - { - "name": "Buffer", - "type": "void" - }, - { - "name": "BufferLength", - "type": "DWORD" - } - ], - "PssDuplicateSnapshot": [ - { - "name": "SourceProcessHandle", - "type": "HANDLE" - }, - { - "name": "SnapshotHandle", - "type": "HPSS" - }, - { - "name": "TargetProcessHandle", - "type": "HANDLE" - }, - { - "name": "TargetSnapshotHandle", - "type": "HPSS" - }, - { - "name": "Flags", - "type": "PSS_DUPLICATE_FLAGS" - } - ], - "PssWalkMarkerCreate": [ - { - "name": "Allocator", - "type": "PSS_ALLOCATOR" - }, - { - "name": "WalkMarkerHandle", - "type": "HPSSWALK" - } - ], - "PssWalkMarkerFree": [ - { - "name": "WalkMarkerHandle", - "type": "HPSSWALK" - } - ], - "PssWalkMarkerGetPosition": [ - { - "name": "WalkMarkerHandle", - "type": "HPSSWALK" - }, - { - "name": "Position", - "type": "ULONG_PTR" - } - ], - "PssWalkMarkerSetPosition": [ - { - "name": "WalkMarkerHandle", - "type": "HPSSWALK" - }, - { - "name": "Position", - "type": "ULONG_PTR" - } - ], - "PssWalkMarkerSeekToBeginning": [ - { - "name": "WalkMarkerHandle", - "type": "HPSSWALK" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/processthreadsapi.json b/qiling/extensions/windows_sdk/processthreadsapi.json deleted file mode 100644 index 5cbfb7003..000000000 --- a/qiling/extensions/windows_sdk/processthreadsapi.json +++ /dev/null @@ -1,1030 +0,0 @@ -{ - "QueueUserAPC": [ - { - "name": "pfnAPC", - "type": "PAPCFUNC" - }, - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "dwData", - "type": "ULONG_PTR" - } - ], - "GetProcessTimes": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpCreationTime", - "type": "LPFILETIME" - }, - { - "name": "lpExitTime", - "type": "LPFILETIME" - }, - { - "name": "lpKernelTime", - "type": "LPFILETIME" - }, - { - "name": "lpUserTime", - "type": "LPFILETIME" - } - ], - "GetCurrentProcess": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetCurrentProcessId": [ - { - "name": "VOID", - "type": "void" - } - ], - "ExitProcess": [ - { - "name": "uExitCode", - "type": "UINT" - } - ], - "TerminateProcess": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "uExitCode", - "type": "UINT" - } - ], - "GetExitCodeProcess": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpExitCode", - "type": "LPDWORD" - } - ], - "SwitchToThread": [ - { - "name": "VOID", - "type": "void" - } - ], - "CreateThread": [ - { - "name": "lpThreadAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "dwStackSize", - "type": "SIZE_T" - }, - { - "name": "lpStartAddress", - "type": "LPTHREAD_START_ROUTINE" - }, - { - "name": "lpParameter", - "type": "LPVOID" - }, - { - "name": "dwCreationFlags", - "type": "DWORD" - }, - { - "name": "lpThreadId", - "type": "LPDWORD" - } - ], - "CreateRemoteThread": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpThreadAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "dwStackSize", - "type": "SIZE_T" - }, - { - "name": "lpStartAddress", - "type": "LPTHREAD_START_ROUTINE" - }, - { - "name": "lpParameter", - "type": "LPVOID" - }, - { - "name": "dwCreationFlags", - "type": "DWORD" - }, - { - "name": "lpThreadId", - "type": "LPDWORD" - } - ], - "GetCurrentThread": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetCurrentThreadId": [ - { - "name": "VOID", - "type": "void" - } - ], - "OpenThread": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "dwThreadId", - "type": "DWORD" - } - ], - "SetThreadPriority": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "nPriority", - "type": "int" - } - ], - "SetThreadPriorityBoost": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "bDisablePriorityBoost", - "type": "BOOL" - } - ], - "GetThreadPriorityBoost": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "pDisablePriorityBoost", - "type": "PBOOL" - } - ], - "GetThreadPriority": [ - { - "name": "hThread", - "type": "HANDLE" - } - ], - "ExitThread": [ - { - "name": "dwExitCode", - "type": "DWORD" - } - ], - "TerminateThread": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "dwExitCode", - "type": "DWORD" - } - ], - "GetExitCodeThread": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "lpExitCode", - "type": "LPDWORD" - } - ], - "SuspendThread": [ - { - "name": "hThread", - "type": "HANDLE" - } - ], - "ResumeThread": [ - { - "name": "hThread", - "type": "HANDLE" - } - ], - "TlsAlloc": [ - { - "name": "VOID", - "type": "void" - } - ], - "TlsGetValue": [ - { - "name": "dwTlsIndex", - "type": "DWORD" - } - ], - "TlsSetValue": [ - { - "name": "dwTlsIndex", - "type": "DWORD" - }, - { - "name": "lpTlsValue", - "type": "LPVOID" - } - ], - "TlsFree": [ - { - "name": "dwTlsIndex", - "type": "DWORD" - } - ], - "CreateProcessA": [ - { - "name": "lpApplicationName", - "type": "LPCSTR" - }, - { - "name": "lpCommandLine", - "type": "LPSTR" - }, - { - "name": "lpProcessAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpThreadAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "bInheritHandles", - "type": "BOOL" - }, - { - "name": "dwCreationFlags", - "type": "DWORD" - }, - { - "name": "lpEnvironment", - "type": "LPVOID" - }, - { - "name": "lpCurrentDirectory", - "type": "LPCSTR" - }, - { - "name": "lpStartupInfo", - "type": "LPSTARTUPINFOA" - }, - { - "name": "lpProcessInformation", - "type": "LPPROCESS_INFORMATION" - } - ], - "CreateProcessW": [ - { - "name": "lpApplicationName", - "type": "LPCWSTR" - }, - { - "name": "lpCommandLine", - "type": "LPWSTR" - }, - { - "name": "lpProcessAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpThreadAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "bInheritHandles", - "type": "BOOL" - }, - { - "name": "dwCreationFlags", - "type": "DWORD" - }, - { - "name": "lpEnvironment", - "type": "LPVOID" - }, - { - "name": "lpCurrentDirectory", - "type": "LPCWSTR" - }, - { - "name": "lpStartupInfo", - "type": "LPSTARTUPINFOW" - }, - { - "name": "lpProcessInformation", - "type": "LPPROCESS_INFORMATION" - } - ], - "SetProcessShutdownParameters": [ - { - "name": "dwLevel", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetProcessVersion": [ - { - "name": "ProcessId", - "type": "DWORD" - } - ], - "GetStartupInfoW": [ - { - "name": "lpStartupInfo", - "type": "LPSTARTUPINFOW" - } - ], - "CreateProcessAsUserW": [ - { - "name": "hToken", - "type": "HANDLE" - }, - { - "name": "lpApplicationName", - "type": "LPCWSTR" - }, - { - "name": "lpCommandLine", - "type": "LPWSTR" - }, - { - "name": "lpProcessAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpThreadAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "bInheritHandles", - "type": "BOOL" - }, - { - "name": "dwCreationFlags", - "type": "DWORD" - }, - { - "name": "lpEnvironment", - "type": "LPVOID" - }, - { - "name": "lpCurrentDirectory", - "type": "LPCWSTR" - }, - { - "name": "lpStartupInfo", - "type": "LPSTARTUPINFOW" - }, - { - "name": "lpProcessInformation", - "type": "LPPROCESS_INFORMATION" - } - ], - "SetThreadToken": [ - { - "name": "Thread", - "type": "PHANDLE" - }, - { - "name": "Token", - "type": "HANDLE" - } - ], - "OpenProcessToken": [ - { - "name": "ProcessHandle", - "type": "HANDLE" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "TokenHandle", - "type": "PHANDLE" - } - ], - "OpenThreadToken": [ - { - "name": "ThreadHandle", - "type": "HANDLE" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "OpenAsSelf", - "type": "BOOL" - }, - { - "name": "TokenHandle", - "type": "PHANDLE" - } - ], - "SetPriorityClass": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "dwPriorityClass", - "type": "DWORD" - } - ], - "GetPriorityClass": [ - { - "name": "hProcess", - "type": "HANDLE" - } - ], - "SetThreadStackGuarantee": [ - { - "name": "StackSizeInBytes", - "type": "PULONG" - } - ], - "ProcessIdToSessionId": [ - { - "name": "dwProcessId", - "type": "DWORD" - }, - { - "name": "pSessionId", - "type": "DWORD" - } - ], - "GetProcessId": [ - { - "name": "Process", - "type": "HANDLE" - } - ], - "GetThreadId": [ - { - "name": "Thread", - "type": "HANDLE" - } - ], - "FlushProcessWriteBuffers": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetProcessIdOfThread": [ - { - "name": "Thread", - "type": "HANDLE" - } - ], - "InitializeProcThreadAttributeList": [ - { - "name": "lpAttributeList", - "type": "LPPROC_THREAD_ATTRIBUTE_LIST" - }, - { - "name": "dwAttributeCount", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpSize", - "type": "PSIZE_T" - } - ], - "DeleteProcThreadAttributeList": [ - { - "name": "lpAttributeList", - "type": "LPPROC_THREAD_ATTRIBUTE_LIST" - } - ], - "UpdateProcThreadAttribute": [ - { - "name": "lpAttributeList", - "type": "LPPROC_THREAD_ATTRIBUTE_LIST" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "Attribute", - "type": "DWORD_PTR" - }, - { - "name": "lpValue", - "type": "PVOID" - }, - { - "name": "cbSize", - "type": "SIZE_T" - }, - { - "name": "lpPreviousValue", - "type": "PVOID" - }, - { - "name": "lpReturnSize", - "type": "PSIZE_T" - } - ], - "SetProcessAffinityUpdateMode": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "QueryProcessAffinityUpdateMode": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpdwFlags", - "type": "LPDWORD" - } - ], - "CreateRemoteThreadEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpThreadAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "dwStackSize", - "type": "SIZE_T" - }, - { - "name": "lpStartAddress", - "type": "LPTHREAD_START_ROUTINE" - }, - { - "name": "lpParameter", - "type": "LPVOID" - }, - { - "name": "dwCreationFlags", - "type": "DWORD" - }, - { - "name": "lpAttributeList", - "type": "LPPROC_THREAD_ATTRIBUTE_LIST" - }, - { - "name": "lpThreadId", - "type": "LPDWORD" - } - ], - "GetCurrentThreadStackLimits": [ - { - "name": "LowLimit", - "type": "PULONG_PTR" - }, - { - "name": "HighLimit", - "type": "PULONG_PTR" - } - ], - "GetThreadContext": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "lpContext", - "type": "LPCONTEXT" - } - ], - "GetProcessMitigationPolicy": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "MitigationPolicy", - "type": "PROCESS_MITIGATION_POLICY" - }, - { - "name": "lpBuffer", - "type": "PVOID" - }, - { - "name": "dwLength", - "type": "SIZE_T" - } - ], - "SetThreadContext": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "lpContext", - "type": "CONTEXT" - } - ], - "SetProcessMitigationPolicy": [ - { - "name": "MitigationPolicy", - "type": "PROCESS_MITIGATION_POLICY" - }, - { - "name": "lpBuffer", - "type": "PVOID" - }, - { - "name": "dwLength", - "type": "SIZE_T" - } - ], - "FlushInstructionCache": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpBaseAddress", - "type": "LPCVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - } - ], - "GetThreadTimes": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "lpCreationTime", - "type": "LPFILETIME" - }, - { - "name": "lpExitTime", - "type": "LPFILETIME" - }, - { - "name": "lpKernelTime", - "type": "LPFILETIME" - }, - { - "name": "lpUserTime", - "type": "LPFILETIME" - } - ], - "OpenProcess": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "dwProcessId", - "type": "DWORD" - } - ], - "IsProcessorFeaturePresent": [ - { - "name": "ProcessorFeature", - "type": "DWORD" - } - ], - "GetProcessHandleCount": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "pdwHandleCount", - "type": "PDWORD" - } - ], - "GetCurrentProcessorNumber": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetThreadIdealProcessorEx": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "lpIdealProcessor", - "type": "PPROCESSOR_NUMBER" - }, - { - "name": "lpPreviousIdealProcessor", - "type": "PPROCESSOR_NUMBER" - } - ], - "GetThreadIdealProcessorEx": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "lpIdealProcessor", - "type": "PPROCESSOR_NUMBER" - } - ], - "GetCurrentProcessorNumberEx": [ - { - "name": "ProcNumber", - "type": "PPROCESSOR_NUMBER" - } - ], - "GetProcessPriorityBoost": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "pDisablePriorityBoost", - "type": "PBOOL" - } - ], - "SetProcessPriorityBoost": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "bDisablePriorityBoost", - "type": "BOOL" - } - ], - "GetThreadIOPendingFlag": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "lpIOIsPending", - "type": "PBOOL" - } - ], - "GetSystemTimes": [ - { - "name": "lpIdleTime", - "type": "PFILETIME" - }, - { - "name": "lpKernelTime", - "type": "PFILETIME" - }, - { - "name": "lpUserTime", - "type": "PFILETIME" - } - ], - "GetThreadInformation": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "ThreadInformationClass", - "type": "THREAD_INFORMATION_CLASS" - }, - { - "name": "ThreadInformation", - "type": "LPVOID" - }, - { - "name": "ThreadInformationSize", - "type": "DWORD" - } - ], - "SetThreadInformation": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "ThreadInformationClass", - "type": "THREAD_INFORMATION_CLASS" - }, - { - "name": "ThreadInformation", - "type": "LPVOID" - }, - { - "name": "ThreadInformationSize", - "type": "DWORD" - } - ], - "IsProcessCritical": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "Critical", - "type": "PBOOL" - } - ], - "SetProtectedPolicy": [ - { - "name": "PolicyGuid", - "type": "LPCGUID" - }, - { - "name": "PolicyValue", - "type": "ULONG_PTR" - }, - { - "name": "OldPolicyValue", - "type": "PULONG_PTR" - } - ], - "QueryProtectedPolicy": [ - { - "name": "PolicyGuid", - "type": "LPCGUID" - }, - { - "name": "PolicyValue", - "type": "PULONG_PTR" - } - ], - "SetThreadIdealProcessor": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "dwIdealProcessor", - "type": "DWORD" - } - ], - "SetProcessInformation": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "ProcessInformationClass", - "type": "PROCESS_INFORMATION_CLASS" - }, - { - "name": "ProcessInformation", - "type": "LPVOID" - }, - { - "name": "ProcessInformationSize", - "type": "DWORD" - } - ], - "GetProcessInformation": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "ProcessInformationClass", - "type": "PROCESS_INFORMATION_CLASS" - }, - { - "name": "ProcessInformation", - "type": "LPVOID" - }, - { - "name": "ProcessInformationSize", - "type": "DWORD" - } - ], - "CreateProcessAsUserA": [ - { - "name": "hToken", - "type": "HANDLE" - }, - { - "name": "lpApplicationName", - "type": "LPCSTR" - }, - { - "name": "lpCommandLine", - "type": "LPSTR" - }, - { - "name": "lpProcessAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpThreadAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "bInheritHandles", - "type": "BOOL" - }, - { - "name": "dwCreationFlags", - "type": "DWORD" - }, - { - "name": "lpEnvironment", - "type": "LPVOID" - }, - { - "name": "lpCurrentDirectory", - "type": "LPCSTR" - }, - { - "name": "lpStartupInfo", - "type": "LPSTARTUPINFOA" - }, - { - "name": "lpProcessInformation", - "type": "LPPROCESS_INFORMATION" - } - ], - "GetProcessShutdownParameters": [ - { - "name": "lpdwLevel", - "type": "LPDWORD" - }, - { - "name": "lpdwFlags", - "type": "LPDWORD" - } - ], - "SetThreadDescription": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "lpThreadDescription", - "type": "PCWSTR" - } - ], - "GetThreadDescription": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "ppszThreadDescription", - "type": "PWSTR" - } - ], - "GetStartupInfoA": [ - { - "name": "lpStartupInfo", - "type": "LPSTARTUPINFOA" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/processtopologyapi.json b/qiling/extensions/windows_sdk/processtopologyapi.json deleted file mode 100644 index eb18fb089..000000000 --- a/qiling/extensions/windows_sdk/processtopologyapi.json +++ /dev/null @@ -1,40 +0,0 @@ -{ - "GetProcessGroupAffinity": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "GroupCount", - "type": "PUSHORT" - }, - { - "name": "GroupArray", - "type": "PUSHORT" - } - ], - "GetThreadGroupAffinity": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "GroupAffinity", - "type": "PGROUP_AFFINITY" - } - ], - "SetThreadGroupAffinity": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "GroupAffinity", - "type": "GROUP_AFFINITY" - }, - { - "name": "PreviousGroupAffinity", - "type": "PGROUP_AFFINITY" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/profileapi.json b/qiling/extensions/windows_sdk/profileapi.json deleted file mode 100644 index 4dd8173de..000000000 --- a/qiling/extensions/windows_sdk/profileapi.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "QueryPerformanceCounter": [ - { - "name": "lpPerformanceCount", - "type": "LARGE_INTEGER" - } - ], - "QueryPerformanceFrequency": [ - { - "name": "lpFrequency", - "type": "LARGE_INTEGER" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/propapi.json b/qiling/extensions/windows_sdk/propapi.json deleted file mode 100644 index 0737740bb..000000000 --- a/qiling/extensions/windows_sdk/propapi.json +++ /dev/null @@ -1,20 +0,0 @@ -{ - "StgPropertyLengthAsVariant": [ - { - "name": "pProp", - "type": "SERIALIZEDPROPERTYVALUE" - }, - { - "name": "cbProp", - "type": "ULONG" - }, - { - "name": "CodePage", - "type": "USHORT" - }, - { - "name": "bReserved", - "type": "BYTE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/propidl.json b/qiling/extensions/windows_sdk/propidl.json deleted file mode 100644 index a606ba2a5..000000000 --- a/qiling/extensions/windows_sdk/propidl.json +++ /dev/null @@ -1,28 +0,0 @@ -{ - "PropVariantCopy": [ - { - "name": "pvarDest", - "type": "PROPVARIANT" - }, - { - "name": "pvarSrc", - "type": "PROPVARIANT" - } - ], - "PropVariantClear": [ - { - "name": "pvar", - "type": "PROPVARIANT" - } - ], - "FreePropVariantArray": [ - { - "name": "cVariants", - "type": "ULONG" - }, - { - "name": "rgvars", - "type": "PROPVARIANT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/propsys.json b/qiling/extensions/windows_sdk/propsys.json index abb14dc3d..64107abeb 100644 --- a/qiling/extensions/windows_sdk/propsys.json +++ b/qiling/extensions/windows_sdk/propsys.json @@ -1,972 +1,1972 @@ { - "PropVariantToWinRTPropertyValue": [ + "InitPropVariantFromResource": [ + { + "name": "hinst", + "type": "HINSTANCE" + }, + { + "name": "id", + "type": "UINT" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromBuffer": [ + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "UINT" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromCLSID": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromGUIDAsString": [ + { + "name": "guid", + "type": "GUID" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromFileTime": [ + { + "name": "pftIn", + "type": "FILETIME" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromPropVariantVectorElem": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantVectorFromPropVariant": [ + { + "name": "propvarSingle", + "type": "PROPVARIANT" + }, + { + "name": "ppropvarVector", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromStrRet": [ + { + "name": "pstrret", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromBooleanVector": [ + { + "name": "prgf", + "type": "BOOL" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromInt16Vector": [ + { + "name": "prgn", + "type": "SHORT" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromUInt16Vector": [ + { + "name": "prgn", + "type": "USHORT" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromInt32Vector": [ + { + "name": "prgn", + "type": "LONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromUInt32Vector": [ + { + "name": "prgn", + "type": "ULONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromInt64Vector": [ + { + "name": "prgn", + "type": "LONGLONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromUInt64Vector": [ + { + "name": "prgn", + "type": "ULONGLONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromDoubleVector": [ + { + "name": "prgn", + "type": "DOUBLE" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromFileTimeVector": [ + { + "name": "prgft", + "type": "FILETIME" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromStringVector": [ + { + "name": "prgsz", + "type": "PCWSTR" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "InitPropVariantFromStringAsVector": [ + { + "name": "psz", + "type": "PCWSTR" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PropVariantToBooleanWithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "fDefault", + "type": "BOOL" + } + ], + "PropVariantToInt16WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "iDefault", + "type": "SHORT" + } + ], + "PropVariantToUInt16WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "uiDefault", + "type": "USHORT" + } + ], + "PropVariantToInt32WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "lDefault", + "type": "LONG" + } + ], + "PropVariantToUInt32WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "ulDefault", + "type": "ULONG" + } + ], + "PropVariantToInt64WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "llDefault", + "type": "LONGLONG" + } + ], + "PropVariantToUInt64WithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "ullDefault", + "type": "ULONGLONG" + } + ], + "PropVariantToDoubleWithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "dblDefault", + "type": "DOUBLE" + } + ], + "PropVariantToStringWithDefault": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pszDefault", + "type": "LPCWSTR" + } + ], + "PropVariantToBoolean": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pfRet", + "type": "BOOL" + } + ], + "PropVariantToInt16": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "piRet", + "type": "SHORT" + } + ], + "PropVariantToUInt16": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "puiRet", + "type": "USHORT" + } + ], + "PropVariantToInt32": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "plRet", + "type": "LONG" + } + ], + "PropVariantToUInt32": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pulRet", + "type": "ULONG" + } + ], + "PropVariantToInt64": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pllRet", + "type": "LONGLONG" + } + ], + "PropVariantToUInt64": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pullRet", + "type": "ULONGLONG" + } + ], + "PropVariantToDouble": [ + { + "name": "propvarIn", + "type": "PROPVARIANT" + }, + { + "name": "pdblRet", + "type": "DOUBLE" + } + ], + "PropVariantToBuffer": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "UINT" + } + ], + "PropVariantToString": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "psz", + "type": "PWSTR" + }, + { + "name": "cch", + "type": "UINT" + } + ], + "PropVariantToGUID": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pguid", + "type": "GUID" + } + ], + "PropVariantToStringAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "ppszOut", + "type": "PWSTR" + } + ], + "PropVariantToBSTR": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pbstrOut", + "type": "BSTR" + } + ], + "PropVariantToStrRet": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pstrret", + "type": "STRRET" + } + ], + "PropVariantToFileTime": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pstfOut", + "type": "PSTIME_FLAGS" + }, + { + "name": "pftOut", + "type": "FILETIME" + } + ], + "PropVariantGetElementCount": [ + { + "name": "propvar", + "type": "PROPVARIANT" + } + ], + "PropVariantToBooleanVector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgf", + "type": "BOOL" + }, + { + "name": "crgf", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt16Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "SHORT" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt16Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "USHORT" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt32Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "LONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt32Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "ULONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt64Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "LONGLONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt64Vector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "ULONGLONG" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToDoubleVector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "prgn", + "type": "DOUBLE" + }, + { + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToFileTimeVector": [ { "name": "propvar", "type": "PROPVARIANT" }, { - "name": "riid", - "type": "IID" + "name": "prgft", + "type": "FILETIME" }, { - "name": "ppv", - "type": "void" + "name": "crgft", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" } ], - "WinRTPropertyValueToPropVariant": [ + "PropVariantToStringVector": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, { - "name": "punkPropertyValue", - "type": "IUnknown" + "name": "prgsz", + "type": "PWSTR" }, { - "name": "ppropvar", + "name": "crgsz", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToBooleanVectorAlloc": [ + { + "name": "propvar", "type": "PROPVARIANT" + }, + { + "name": "pprgf", + "type": "BOOL" + }, + { + "name": "pcElem", + "type": "ULONG" } ], - "PSFormatForDisplay": [ + "PropVariantToInt16VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, { - "name": "propkey", - "type": "PROPERTYKEY" + "name": "pprgn", + "type": "SHORT" }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToUInt16VectorAlloc": [ { "name": "propvar", "type": "PROPVARIANT" }, { - "name": "pdfFlags", - "type": "PROPDESC_FORMAT_FLAGS" + "name": "pprgn", + "type": "USHORT" + }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt32VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" }, { - "name": "pwszText", - "type": "LPWSTR" + "name": "pprgn", + "type": "LONG" }, { - "name": "cchText", - "type": "DWORD" + "name": "pcElem", + "type": "ULONG" } ], - "PSFormatForDisplayAlloc": [ + "PropVariantToUInt32VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, { - "name": "key", - "type": "PROPERTYKEY" + "name": "pprgn", + "type": "ULONG" }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToInt64VectorAlloc": [ { "name": "propvar", "type": "PROPVARIANT" }, { - "name": "pdff", - "type": "PROPDESC_FORMAT_FLAGS" + "name": "pprgn", + "type": "LONGLONG" }, { - "name": "ppszDisplay", - "type": "PWSTR" + "name": "pcElem", + "type": "ULONG" } ], - "PSFormatPropertyValue": [ + "PropVariantToUInt64VectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, { - "name": "pps", - "type": "IPropertyStore" + "name": "pprgn", + "type": "ULONGLONG" }, { - "name": "ppd", - "type": "IPropertyDescription" + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToDoubleVectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" }, { - "name": "pdff", - "type": "PROPDESC_FORMAT_FLAGS" + "name": "pprgn", + "type": "DOUBLE" }, { - "name": "ppszDisplay", - "type": "LPWSTR" + "name": "pcElem", + "type": "ULONG" } ], - "PSGetImageReferenceForValue": [ + "PropVariantToFileTimeVectorAlloc": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, { - "name": "propkey", - "type": "PROPERTYKEY" + "name": "pprgft", + "type": "FILETIME" }, + { + "name": "pcElem", + "type": "ULONG" + } + ], + "PropVariantToStringVectorAlloc": [ { "name": "propvar", "type": "PROPVARIANT" }, { - "name": "ppszImageRes", + "name": "pprgsz", "type": "PWSTR" + }, + { + "name": "pcElem", + "type": "ULONG" } ], - "PSStringFromPropertyKey": [ + "PropVariantGetBooleanElem": [ { - "name": "pkey", - "type": "PROPERTYKEY" + "name": "propvar", + "type": "PROPVARIANT" }, { - "name": "psz", - "type": "LPWSTR" + "name": "iElem", + "type": "ULONG" }, { - "name": "cch", - "type": "UINT" + "name": "pfVal", + "type": "BOOL" } ], - "PSPropertyKeyFromString": [ + "PropVariantGetInt16Elem": [ { - "name": "pszString", - "type": "LPCWSTR" + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" }, { - "name": "pkey", - "type": "PROPERTYKEY" + "name": "pnVal", + "type": "SHORT" } ], - "PSCreateMemoryPropertyStore": [ + "PropVariantGetUInt16Elem": [ { - "name": "riid", - "type": "IID" + "name": "propvar", + "type": "PROPVARIANT" }, { - "name": "ppv", - "type": "void" + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "USHORT" } ], - "PSCreateDelayedMultiplexPropertyStore": [ + "PropVariantGetInt32Elem": [ { - "name": "flags", - "type": "GETPROPERTYSTOREFLAGS" + "name": "propvar", + "type": "PROPVARIANT" }, { - "name": "pdpsf", - "type": "IDelayedPropertyStoreFactory" + "name": "iElem", + "type": "ULONG" }, { - "name": "rgStoreIds", - "type": "DWORD" + "name": "pnVal", + "type": "LONG" + } + ], + "PropVariantGetUInt32Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" }, { - "name": "cStores", - "type": "DWORD" + "name": "iElem", + "type": "ULONG" }, { - "name": "riid", - "type": "IID" + "name": "pnVal", + "type": "ULONG" + } + ], + "PropVariantGetInt64Elem": [ + { + "name": "propvar", + "type": "PROPVARIANT" }, { - "name": "ppv", - "type": "void" + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "LONGLONG" } ], - "PSCreateMultiplexPropertyStore": [ + "PropVariantGetUInt64Elem": [ { - "name": "prgpunkStores", - "type": "IUnknown" + "name": "propvar", + "type": "PROPVARIANT" }, { - "name": "cStores", - "type": "DWORD" + "name": "iElem", + "type": "ULONG" }, { - "name": "riid", - "type": "IID" + "name": "pnVal", + "type": "ULONGLONG" + } + ], + "PropVariantGetDoubleElem": [ + { + "name": "propvar", + "type": "PROPVARIANT" }, { - "name": "ppv", - "type": "void" + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pnVal", + "type": "DOUBLE" + } + ], + "PropVariantGetFileTimeElem": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "iElem", + "type": "ULONG" + }, + { + "name": "pftVal", + "type": "FILETIME" } ], - "PSCreatePropertyChangeArray": [ + "PropVariantGetStringElem": [ { - "name": "rgpropkey", - "type": "PROPERTYKEY" + "name": "propvar", + "type": "PROPVARIANT" }, { - "name": "rgflags", - "type": "PKA_FLAGS" + "name": "iElem", + "type": "ULONG" }, { - "name": "rgpropvar", + "name": "ppszVal", + "type": "PWSTR" + } + ], + "ClearPropVariantArray": [ + { + "name": "rgPropVar", "type": "PROPVARIANT" }, { - "name": "cChanges", + "name": "cVars", "type": "UINT" + } + ], + "PropVariantCompareEx": [ + { + "name": "propvar1", + "type": "PROPVARIANT" }, { - "name": "riid", - "type": "IID" + "name": "propvar2", + "type": "PROPVARIANT" }, { - "name": "ppv", - "type": "void" + "name": "unit", + "type": "PROPVAR_COMPARE_UNIT" + }, + { + "name": "flags", + "type": "PROPVAR_COMPARE_FLAGS" } ], - "PSCreateSimplePropertyChange": [ + "PropVariantChangeType": [ + { + "name": "ppropvarDest", + "type": "PROPVARIANT" + }, + { + "name": "propvarSrc", + "type": "PROPVARIANT" + }, { "name": "flags", - "type": "PKA_FLAGS" + "type": "PROPVAR_CHANGE_FLAGS" }, { - "name": "key", - "type": "PROPERTYKEY" + "name": "vt", + "type": "VARTYPE" + } + ], + "PropVariantToVariant": [ + { + "name": "pPropVar", + "type": "PROPVARIANT" }, { - "name": "propvar", + "name": "pVar", + "type": "VARIANT" + } + ], + "VariantToPropVariant": [ + { + "name": "pVar", + "type": "VARIANT" + }, + { + "name": "pPropVar", + "type": "PROPVARIANT" + } + ], + "StgSerializePropVariant": [ + { + "name": "ppropvar", "type": "PROPVARIANT" }, { - "name": "riid", - "type": "IID" + "name": "ppProp", + "type": "SERIALIZEDPROPERTYVALUE" }, { - "name": "ppv", - "type": "void" + "name": "pcb", + "type": "ULONG" } ], - "PSGetPropertyDescription": [ + "StgDeserializePropVariant": [ { - "name": "propkey", - "type": "PROPERTYKEY" + "name": "pprop", + "type": "SERIALIZEDPROPERTYVALUE" }, { - "name": "riid", - "type": "IID" + "name": "cbMax", + "type": "ULONG" }, { - "name": "ppv", - "type": "void" + "name": "ppropvar", + "type": "PROPVARIANT" } ], - "PSGetPropertyDescriptionByName": [ + "InitVariantFromResource": [ { - "name": "pszCanonicalName", - "type": "LPCWSTR" + "name": "hinst", + "type": "HINSTANCE" }, { - "name": "riid", - "type": "IID" + "name": "id", + "type": "UINT" }, { - "name": "ppv", + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromBuffer": [ + { + "name": "pv", "type": "void" + }, + { + "name": "cb", + "type": "UINT" + }, + { + "name": "pvar", + "type": "VARIANT" } ], - "PSLookupPropertyHandlerCLSID": [ + "InitVariantFromGUIDAsString": [ { - "name": "pszFilePath", - "type": "PCWSTR" + "name": "guid", + "type": "GUID" }, { - "name": "pclsid", - "type": "CLSID" + "name": "pvar", + "type": "VARIANT" } ], - "PSGetItemPropertyHandler": [ + "InitVariantFromFileTime": [ { - "name": "punkItem", - "type": "IUnknown" + "name": "pft", + "type": "FILETIME" }, { - "name": "fReadWrite", - "type": "BOOL" + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromFileTimeArray": [ + { + "name": "prgft", + "type": "FILETIME" }, { - "name": "riid", - "type": "IID" + "name": "cElems", + "type": "ULONG" }, { - "name": "ppv", - "type": "void" + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromStrRet": [ + { + "name": "pstrret", + "type": "STRRET" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pvar", + "type": "VARIANT" } ], - "PSGetItemPropertyHandlerWithCreateObject": [ + "InitVariantFromVariantArrayElem": [ + { + "name": "varIn", + "type": "VARIANT" + }, { - "name": "punkItem", - "type": "IUnknown" + "name": "iElem", + "type": "ULONG" }, { - "name": "fReadWrite", + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromBooleanArray": [ + { + "name": "prgf", "type": "BOOL" }, { - "name": "punkCreateObject", - "type": "IUnknown" + "name": "cElems", + "type": "ULONG" }, { - "name": "riid", - "type": "IID" + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromInt16Array": [ + { + "name": "prgn", + "type": "SHORT" }, { - "name": "ppv", - "type": "void" + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" } ], - "PSGetPropertyValue": [ + "InitVariantFromUInt16Array": [ { - "name": "pps", - "type": "IPropertyStore" + "name": "prgn", + "type": "USHORT" }, { - "name": "ppd", - "type": "IPropertyDescription" + "name": "cElems", + "type": "ULONG" }, { - "name": "ppropvar", - "type": "PROPVARIANT" + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromInt32Array": [ + { + "name": "prgn", + "type": "LONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromUInt32Array": [ + { + "name": "prgn", + "type": "ULONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromInt64Array": [ + { + "name": "prgn", + "type": "LONGLONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" + } + ], + "InitVariantFromUInt64Array": [ + { + "name": "prgn", + "type": "ULONGLONG" + }, + { + "name": "cElems", + "type": "ULONG" + }, + { + "name": "pvar", + "type": "VARIANT" } ], - "PSSetPropertyValue": [ + "InitVariantFromDoubleArray": [ { - "name": "pps", - "type": "IPropertyStore" + "name": "prgn", + "type": "DOUBLE" }, { - "name": "ppd", - "type": "IPropertyDescription" + "name": "cElems", + "type": "ULONG" }, { - "name": "propvar", - "type": "PROPVARIANT" + "name": "pvar", + "type": "VARIANT" } ], - "PSRegisterPropertySchema": [ + "InitVariantFromStringArray": [ { - "name": "pszPath", + "name": "prgsz", "type": "PCWSTR" - } - ], - "PSUnregisterPropertySchema": [ + }, { - "name": "pszPath", - "type": "PCWSTR" - } - ], - "PSRefreshPropertySchema": [ + "name": "cElems", + "type": "ULONG" + }, { - "name": "VOID", - "type": "void" + "name": "pvar", + "type": "VARIANT" } ], - "PSEnumeratePropertyDescriptions": [ + "VariantToBooleanWithDefault": [ { - "name": "filterOn", - "type": "PROPDESC_ENUMFILTER" - }, - { - "name": "riid", - "type": "IID" + "name": "varIn", + "type": "VARIANT" }, { - "name": "ppv", - "type": "void" + "name": "fDefault", + "type": "BOOL" } ], - "PSGetPropertyKeyFromName": [ + "VariantToInt16WithDefault": [ { - "name": "pszName", - "type": "PCWSTR" + "name": "varIn", + "type": "VARIANT" }, { - "name": "ppropkey", - "type": "PROPERTYKEY" + "name": "iDefault", + "type": "SHORT" } ], - "PSGetNameFromPropertyKey": [ + "VariantToUInt16WithDefault": [ { - "name": "propkey", - "type": "PROPERTYKEY" + "name": "varIn", + "type": "VARIANT" }, { - "name": "ppszCanonicalName", - "type": "PWSTR" + "name": "uiDefault", + "type": "USHORT" } ], - "PSCoerceToCanonicalValue": [ + "VariantToInt32WithDefault": [ { - "name": "key", - "type": "PROPERTYKEY" + "name": "varIn", + "type": "VARIANT" }, { - "name": "ppropvar", - "type": "PROPVARIANT" + "name": "lDefault", + "type": "LONG" } ], - "PSGetPropertyDescriptionListFromString": [ + "VariantToUInt32WithDefault": [ { - "name": "pszPropList", - "type": "LPCWSTR" + "name": "varIn", + "type": "VARIANT" }, { - "name": "riid", - "type": "IID" + "name": "ulDefault", + "type": "ULONG" + } + ], + "VariantToInt64WithDefault": [ + { + "name": "varIn", + "type": "VARIANT" }, { - "name": "ppv", - "type": "void" + "name": "llDefault", + "type": "LONGLONG" } ], - "PSCreatePropertyStoreFromPropertySetStorage": [ + "VariantToUInt64WithDefault": [ { - "name": "ppss", - "type": "IPropertySetStorage" + "name": "varIn", + "type": "VARIANT" }, { - "name": "grfMode", - "type": "DWORD" - }, + "name": "ullDefault", + "type": "ULONGLONG" + } + ], + "VariantToDoubleWithDefault": [ { - "name": "riid", - "type": "IID" + "name": "varIn", + "type": "VARIANT" }, { - "name": "ppv", - "type": "void" + "name": "dblDefault", + "type": "DOUBLE" } ], - "PSCreatePropertyStoreFromObject": [ + "VariantToStringWithDefault": [ { - "name": "punk", - "type": "IUnknown" + "name": "varIn", + "type": "VARIANT" }, { - "name": "grfMode", - "type": "DWORD" - }, + "name": "pszDefault", + "type": "LPCWSTR" + } + ], + "VariantToBoolean": [ { - "name": "riid", - "type": "IID" + "name": "varIn", + "type": "VARIANT" }, { - "name": "ppv", - "type": "void" + "name": "pfRet", + "type": "BOOL" } ], - "PSCreateAdapterFromPropertyStore": [ + "VariantToInt16": [ { - "name": "pps", - "type": "IPropertyStore" + "name": "varIn", + "type": "VARIANT" }, { - "name": "riid", - "type": "IID" + "name": "piRet", + "type": "SHORT" + } + ], + "VariantToUInt16": [ + { + "name": "varIn", + "type": "VARIANT" }, { - "name": "ppv", - "type": "void" + "name": "puiRet", + "type": "USHORT" } ], - "PSGetPropertySystem": [ + "VariantToInt32": [ { - "name": "riid", - "type": "IID" + "name": "varIn", + "type": "VARIANT" }, { - "name": "ppv", - "type": "void" + "name": "plRet", + "type": "LONG" } ], - "PSGetPropertyFromPropertyStorage": [ + "VariantToUInt32": [ { - "name": "psps", - "type": "PCUSERIALIZEDPROPSTORAGE" + "name": "varIn", + "type": "VARIANT" }, { - "name": "cb", - "type": "DWORD" - }, + "name": "pulRet", + "type": "ULONG" + } + ], + "VariantToInt64": [ { - "name": "rpkey", - "type": "PROPERTYKEY" + "name": "varIn", + "type": "VARIANT" }, { - "name": "ppropvar", - "type": "PROPVARIANT" + "name": "pllRet", + "type": "LONGLONG" } ], - "PSGetNamedPropertyFromPropertyStorage": [ + "VariantToUInt64": [ { - "name": "psps", - "type": "PCUSERIALIZEDPROPSTORAGE" + "name": "varIn", + "type": "VARIANT" }, { - "name": "cb", - "type": "DWORD" - }, + "name": "pullRet", + "type": "ULONGLONG" + } + ], + "VariantToDouble": [ { - "name": "pszName", - "type": "LPCWSTR" + "name": "varIn", + "type": "VARIANT" }, { - "name": "ppropvar", - "type": "PROPVARIANT" + "name": "pdblRet", + "type": "DOUBLE" } ], - "PSPropertyBag_ReadType": [ + "VariantToBuffer": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "varIn", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pv", + "type": "void" }, { - "name": "var", + "name": "cb", + "type": "UINT" + } + ], + "VariantToGUID": [ + { + "name": "varIn", "type": "VARIANT" }, { - "name": "type", - "type": "VARTYPE" + "name": "pguid", + "type": "GUID" } ], - "PSPropertyBag_ReadStr": [ + "VariantToString": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "varIn", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pszBuf", + "type": "PWSTR" }, { - "name": "value", - "type": "LPWSTR" + "name": "cchBuf", + "type": "UINT" + } + ], + "VariantToStringAlloc": [ + { + "name": "varIn", + "type": "VARIANT" }, { - "name": "characterCount", - "type": "int" + "name": "ppszBuf", + "type": "PWSTR" } ], - "PSPropertyBag_ReadStrAlloc": [ + "VariantToDosDateTime": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "varIn", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pwDate", + "type": "WORD" }, { - "name": "value", - "type": "PWSTR" + "name": "pwTime", + "type": "WORD" } ], - "PSPropertyBag_ReadBSTR": [ - { - "name": "propBag", - "type": "IPropertyBag" - }, + "VariantToStrRet": [ { - "name": "propName", - "type": "LPCWSTR" + "name": "varIn", + "type": "VARIANT" }, { - "name": "value", - "type": "BSTR" + "name": "pstrret", + "type": "STRRET" } ], - "PSPropertyBag_WriteStr": [ + "VariantToFileTime": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "varIn", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "stfOut", + "type": "PSTIME_FLAGS" }, { - "name": "value", - "type": "LPCWSTR" + "name": "pftOut", + "type": "FILETIME" + } + ], + "VariantGetElementCount": [ + { + "name": "varIn", + "type": "VARIANT" } ], - "PSPropertyBag_WriteBSTR": [ + "VariantToBooleanArray": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "prgf", + "type": "BOOL" }, { - "name": "value", - "type": "BSTR" + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_ReadInt": [ + "VariantToInt16Array": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "prgn", + "type": "SHORT" }, { - "name": "value", - "type": "INT" + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_WriteInt": [ + "VariantToUInt16Array": [ + { + "name": "var", + "type": "VARIANT" + }, { - "name": "propBag", - "type": "IPropertyBag" + "name": "prgn", + "type": "USHORT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "crgn", + "type": "ULONG" }, { - "name": "value", - "type": "INT" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_ReadSHORT": [ + "VariantToInt32Array": [ + { + "name": "var", + "type": "VARIANT" + }, { - "name": "propBag", - "type": "IPropertyBag" + "name": "prgn", + "type": "LONG" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "crgn", + "type": "ULONG" }, { - "name": "value", - "type": "SHORT" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_WriteSHORT": [ + "VariantToUInt32Array": [ + { + "name": "var", + "type": "VARIANT" + }, { - "name": "propBag", - "type": "IPropertyBag" + "name": "prgn", + "type": "ULONG" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "crgn", + "type": "ULONG" }, { - "name": "value", - "type": "SHORT" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_ReadLONG": [ + "VariantToInt64Array": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "prgn", + "type": "LONGLONG" }, { - "name": "value", - "type": "LONG" + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_WriteLONG": [ + "VariantToUInt64Array": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "prgn", + "type": "ULONGLONG" }, { - "name": "value", - "type": "LONG" + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_ReadDWORD": [ + "VariantToDoubleArray": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "prgn", + "type": "DOUBLE" }, { - "name": "value", - "type": "DWORD" + "name": "crgn", + "type": "ULONG" + }, + { + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_WriteDWORD": [ + "VariantToStringArray": [ + { + "name": "var", + "type": "VARIANT" + }, { - "name": "propBag", - "type": "IPropertyBag" + "name": "prgsz", + "type": "PWSTR" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "crgsz", + "type": "ULONG" }, { - "name": "value", - "type": "DWORD" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_ReadBOOL": [ + "VariantToBooleanArrayAlloc": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pprgf", + "type": "BOOL" }, { - "name": "value", - "type": "BOOL" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_WriteBOOL": [ + "VariantToInt16ArrayAlloc": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pprgn", + "type": "SHORT" }, { - "name": "value", - "type": "BOOL" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_ReadPOINTL": [ + "VariantToUInt16ArrayAlloc": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pprgn", + "type": "USHORT" }, { - "name": "value", - "type": "POINTL" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_WritePOINTL": [ + "VariantToInt32ArrayAlloc": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pprgn", + "type": "LONG" }, { - "name": "value", - "type": "POINTL" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_ReadPOINTS": [ + "VariantToUInt32ArrayAlloc": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pprgn", + "type": "ULONG" }, { - "name": "value", - "type": "POINTS" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_WritePOINTS": [ + "VariantToInt64ArrayAlloc": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pprgn", + "type": "LONGLONG" }, { - "name": "value", - "type": "POINTS" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_ReadRECTL": [ + "VariantToUInt64ArrayAlloc": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pprgn", + "type": "ULONGLONG" }, { - "name": "value", - "type": "RECTL" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_WriteRECTL": [ + "VariantToDoubleArrayAlloc": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pprgn", + "type": "DOUBLE" }, { - "name": "value", - "type": "RECTL" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_ReadStream": [ + "VariantToStringArrayAlloc": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pprgsz", + "type": "PWSTR" }, { - "name": "value", - "type": "IStream" + "name": "pcElem", + "type": "ULONG" } ], - "PSPropertyBag_WriteStream": [ + "VariantGetBooleanElem": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "iElem", + "type": "ULONG" }, { - "name": "value", - "type": "IStream" + "name": "pfVal", + "type": "BOOL" } ], - "PSPropertyBag_Delete": [ + "VariantGetInt16Elem": [ + { + "name": "var", + "type": "VARIANT" + }, { - "name": "propBag", - "type": "IPropertyBag" + "name": "iElem", + "type": "ULONG" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "pnVal", + "type": "SHORT" } ], - "PSPropertyBag_ReadULONGLONG": [ + "VariantGetUInt16Elem": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "iElem", + "type": "ULONG" }, { - "name": "value", - "type": "ULONGLONG" + "name": "pnVal", + "type": "USHORT" } ], - "PSPropertyBag_WriteULONGLONG": [ + "VariantGetInt32Elem": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "iElem", + "type": "ULONG" }, { - "name": "value", - "type": "ULONGLONG" + "name": "pnVal", + "type": "LONG" } ], - "PSPropertyBag_ReadUnknown": [ - { - "name": "propBag", - "type": "IPropertyBag" - }, + "VariantGetUInt32Elem": [ { - "name": "propName", - "type": "LPCWSTR" + "name": "var", + "type": "VARIANT" }, { - "name": "riid", - "type": "IID" + "name": "iElem", + "type": "ULONG" }, { - "name": "ppv", - "type": "void" + "name": "pnVal", + "type": "ULONG" } ], - "PSPropertyBag_WriteUnknown": [ + "VariantGetInt64Elem": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "iElem", + "type": "ULONG" }, { - "name": "punk", - "type": "IUnknown" + "name": "pnVal", + "type": "LONGLONG" } ], - "PSPropertyBag_ReadGUID": [ + "VariantGetUInt64Elem": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "iElem", + "type": "ULONG" }, { - "name": "value", - "type": "GUID" + "name": "pnVal", + "type": "ULONGLONG" } ], - "PSPropertyBag_WriteGUID": [ + "VariantGetDoubleElem": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "iElem", + "type": "ULONG" }, { - "name": "value", - "type": "GUID" + "name": "pnVal", + "type": "DOUBLE" } ], - "PSPropertyBag_ReadPropertyKey": [ + "VariantGetStringElem": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "var", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "iElem", + "type": "ULONG" }, { - "name": "value", - "type": "PROPERTYKEY" + "name": "ppszVal", + "type": "PWSTR" } ], - "PSPropertyBag_WritePropertyKey": [ + "ClearVariantArray": [ { - "name": "propBag", - "type": "IPropertyBag" + "name": "pvars", + "type": "VARIANT" }, { - "name": "propName", - "type": "LPCWSTR" + "name": "cvars", + "type": "UINT" + } + ], + "VariantCompare": [ + { + "name": "var1", + "type": "VARIANT" }, { - "name": "value", - "type": "PROPERTYKEY" + "name": "var2", + "type": "VARIANT" } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/propvarutil.json b/qiling/extensions/windows_sdk/propvarutil.json deleted file mode 100644 index 64107abeb..000000000 --- a/qiling/extensions/windows_sdk/propvarutil.json +++ /dev/null @@ -1,1972 +0,0 @@ -{ - "InitPropVariantFromResource": [ - { - "name": "hinst", - "type": "HINSTANCE" - }, - { - "name": "id", - "type": "UINT" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromBuffer": [ - { - "name": "pv", - "type": "void" - }, - { - "name": "cb", - "type": "UINT" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromCLSID": [ - { - "name": "clsid", - "type": "IID" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromGUIDAsString": [ - { - "name": "guid", - "type": "GUID" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromFileTime": [ - { - "name": "pftIn", - "type": "FILETIME" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromPropVariantVectorElem": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantVectorFromPropVariant": [ - { - "name": "propvarSingle", - "type": "PROPVARIANT" - }, - { - "name": "ppropvarVector", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromStrRet": [ - { - "name": "pstrret", - "type": "STRRET" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromBooleanVector": [ - { - "name": "prgf", - "type": "BOOL" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromInt16Vector": [ - { - "name": "prgn", - "type": "SHORT" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromUInt16Vector": [ - { - "name": "prgn", - "type": "USHORT" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromInt32Vector": [ - { - "name": "prgn", - "type": "LONG" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromUInt32Vector": [ - { - "name": "prgn", - "type": "ULONG" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromInt64Vector": [ - { - "name": "prgn", - "type": "LONGLONG" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromUInt64Vector": [ - { - "name": "prgn", - "type": "ULONGLONG" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromDoubleVector": [ - { - "name": "prgn", - "type": "DOUBLE" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromFileTimeVector": [ - { - "name": "prgft", - "type": "FILETIME" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromStringVector": [ - { - "name": "prgsz", - "type": "PCWSTR" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitPropVariantFromStringAsVector": [ - { - "name": "psz", - "type": "PCWSTR" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "PropVariantToBooleanWithDefault": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "fDefault", - "type": "BOOL" - } - ], - "PropVariantToInt16WithDefault": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "iDefault", - "type": "SHORT" - } - ], - "PropVariantToUInt16WithDefault": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "uiDefault", - "type": "USHORT" - } - ], - "PropVariantToInt32WithDefault": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "lDefault", - "type": "LONG" - } - ], - "PropVariantToUInt32WithDefault": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "ulDefault", - "type": "ULONG" - } - ], - "PropVariantToInt64WithDefault": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "llDefault", - "type": "LONGLONG" - } - ], - "PropVariantToUInt64WithDefault": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "ullDefault", - "type": "ULONGLONG" - } - ], - "PropVariantToDoubleWithDefault": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "dblDefault", - "type": "DOUBLE" - } - ], - "PropVariantToStringWithDefault": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "pszDefault", - "type": "LPCWSTR" - } - ], - "PropVariantToBoolean": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "pfRet", - "type": "BOOL" - } - ], - "PropVariantToInt16": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "piRet", - "type": "SHORT" - } - ], - "PropVariantToUInt16": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "puiRet", - "type": "USHORT" - } - ], - "PropVariantToInt32": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "plRet", - "type": "LONG" - } - ], - "PropVariantToUInt32": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "pulRet", - "type": "ULONG" - } - ], - "PropVariantToInt64": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "pllRet", - "type": "LONGLONG" - } - ], - "PropVariantToUInt64": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "pullRet", - "type": "ULONGLONG" - } - ], - "PropVariantToDouble": [ - { - "name": "propvarIn", - "type": "PROPVARIANT" - }, - { - "name": "pdblRet", - "type": "DOUBLE" - } - ], - "PropVariantToBuffer": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pv", - "type": "void" - }, - { - "name": "cb", - "type": "UINT" - } - ], - "PropVariantToString": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "psz", - "type": "PWSTR" - }, - { - "name": "cch", - "type": "UINT" - } - ], - "PropVariantToGUID": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pguid", - "type": "GUID" - } - ], - "PropVariantToStringAlloc": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "ppszOut", - "type": "PWSTR" - } - ], - "PropVariantToBSTR": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pbstrOut", - "type": "BSTR" - } - ], - "PropVariantToStrRet": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pstrret", - "type": "STRRET" - } - ], - "PropVariantToFileTime": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pstfOut", - "type": "PSTIME_FLAGS" - }, - { - "name": "pftOut", - "type": "FILETIME" - } - ], - "PropVariantGetElementCount": [ - { - "name": "propvar", - "type": "PROPVARIANT" - } - ], - "PropVariantToBooleanVector": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "prgf", - "type": "BOOL" - }, - { - "name": "crgf", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToInt16Vector": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "prgn", - "type": "SHORT" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToUInt16Vector": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "prgn", - "type": "USHORT" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToInt32Vector": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "prgn", - "type": "LONG" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToUInt32Vector": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "prgn", - "type": "ULONG" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToInt64Vector": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "prgn", - "type": "LONGLONG" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToUInt64Vector": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "prgn", - "type": "ULONGLONG" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToDoubleVector": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "prgn", - "type": "DOUBLE" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToFileTimeVector": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "prgft", - "type": "FILETIME" - }, - { - "name": "crgft", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToStringVector": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "prgsz", - "type": "PWSTR" - }, - { - "name": "crgsz", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToBooleanVectorAlloc": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pprgf", - "type": "BOOL" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToInt16VectorAlloc": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pprgn", - "type": "SHORT" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToUInt16VectorAlloc": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pprgn", - "type": "USHORT" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToInt32VectorAlloc": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pprgn", - "type": "LONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToUInt32VectorAlloc": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pprgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToInt64VectorAlloc": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pprgn", - "type": "LONGLONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToUInt64VectorAlloc": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pprgn", - "type": "ULONGLONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToDoubleVectorAlloc": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pprgn", - "type": "DOUBLE" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToFileTimeVectorAlloc": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pprgft", - "type": "FILETIME" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantToStringVectorAlloc": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "pprgsz", - "type": "PWSTR" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "PropVariantGetBooleanElem": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pfVal", - "type": "BOOL" - } - ], - "PropVariantGetInt16Elem": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "SHORT" - } - ], - "PropVariantGetUInt16Elem": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "USHORT" - } - ], - "PropVariantGetInt32Elem": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "LONG" - } - ], - "PropVariantGetUInt32Elem": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "ULONG" - } - ], - "PropVariantGetInt64Elem": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "LONGLONG" - } - ], - "PropVariantGetUInt64Elem": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "ULONGLONG" - } - ], - "PropVariantGetDoubleElem": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "DOUBLE" - } - ], - "PropVariantGetFileTimeElem": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pftVal", - "type": "FILETIME" - } - ], - "PropVariantGetStringElem": [ - { - "name": "propvar", - "type": "PROPVARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "ppszVal", - "type": "PWSTR" - } - ], - "ClearPropVariantArray": [ - { - "name": "rgPropVar", - "type": "PROPVARIANT" - }, - { - "name": "cVars", - "type": "UINT" - } - ], - "PropVariantCompareEx": [ - { - "name": "propvar1", - "type": "PROPVARIANT" - }, - { - "name": "propvar2", - "type": "PROPVARIANT" - }, - { - "name": "unit", - "type": "PROPVAR_COMPARE_UNIT" - }, - { - "name": "flags", - "type": "PROPVAR_COMPARE_FLAGS" - } - ], - "PropVariantChangeType": [ - { - "name": "ppropvarDest", - "type": "PROPVARIANT" - }, - { - "name": "propvarSrc", - "type": "PROPVARIANT" - }, - { - "name": "flags", - "type": "PROPVAR_CHANGE_FLAGS" - }, - { - "name": "vt", - "type": "VARTYPE" - } - ], - "PropVariantToVariant": [ - { - "name": "pPropVar", - "type": "PROPVARIANT" - }, - { - "name": "pVar", - "type": "VARIANT" - } - ], - "VariantToPropVariant": [ - { - "name": "pVar", - "type": "VARIANT" - }, - { - "name": "pPropVar", - "type": "PROPVARIANT" - } - ], - "StgSerializePropVariant": [ - { - "name": "ppropvar", - "type": "PROPVARIANT" - }, - { - "name": "ppProp", - "type": "SERIALIZEDPROPERTYVALUE" - }, - { - "name": "pcb", - "type": "ULONG" - } - ], - "StgDeserializePropVariant": [ - { - "name": "pprop", - "type": "SERIALIZEDPROPERTYVALUE" - }, - { - "name": "cbMax", - "type": "ULONG" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "InitVariantFromResource": [ - { - "name": "hinst", - "type": "HINSTANCE" - }, - { - "name": "id", - "type": "UINT" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromBuffer": [ - { - "name": "pv", - "type": "void" - }, - { - "name": "cb", - "type": "UINT" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromGUIDAsString": [ - { - "name": "guid", - "type": "GUID" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromFileTime": [ - { - "name": "pft", - "type": "FILETIME" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromFileTimeArray": [ - { - "name": "prgft", - "type": "FILETIME" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromStrRet": [ - { - "name": "pstrret", - "type": "STRRET" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromVariantArrayElem": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromBooleanArray": [ - { - "name": "prgf", - "type": "BOOL" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromInt16Array": [ - { - "name": "prgn", - "type": "SHORT" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromUInt16Array": [ - { - "name": "prgn", - "type": "USHORT" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromInt32Array": [ - { - "name": "prgn", - "type": "LONG" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromUInt32Array": [ - { - "name": "prgn", - "type": "ULONG" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromInt64Array": [ - { - "name": "prgn", - "type": "LONGLONG" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromUInt64Array": [ - { - "name": "prgn", - "type": "ULONGLONG" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromDoubleArray": [ - { - "name": "prgn", - "type": "DOUBLE" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "InitVariantFromStringArray": [ - { - "name": "prgsz", - "type": "PCWSTR" - }, - { - "name": "cElems", - "type": "ULONG" - }, - { - "name": "pvar", - "type": "VARIANT" - } - ], - "VariantToBooleanWithDefault": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "fDefault", - "type": "BOOL" - } - ], - "VariantToInt16WithDefault": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "iDefault", - "type": "SHORT" - } - ], - "VariantToUInt16WithDefault": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "uiDefault", - "type": "USHORT" - } - ], - "VariantToInt32WithDefault": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "lDefault", - "type": "LONG" - } - ], - "VariantToUInt32WithDefault": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "ulDefault", - "type": "ULONG" - } - ], - "VariantToInt64WithDefault": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "llDefault", - "type": "LONGLONG" - } - ], - "VariantToUInt64WithDefault": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "ullDefault", - "type": "ULONGLONG" - } - ], - "VariantToDoubleWithDefault": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "dblDefault", - "type": "DOUBLE" - } - ], - "VariantToStringWithDefault": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "pszDefault", - "type": "LPCWSTR" - } - ], - "VariantToBoolean": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "pfRet", - "type": "BOOL" - } - ], - "VariantToInt16": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "piRet", - "type": "SHORT" - } - ], - "VariantToUInt16": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "puiRet", - "type": "USHORT" - } - ], - "VariantToInt32": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "plRet", - "type": "LONG" - } - ], - "VariantToUInt32": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "pulRet", - "type": "ULONG" - } - ], - "VariantToInt64": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "pllRet", - "type": "LONGLONG" - } - ], - "VariantToUInt64": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "pullRet", - "type": "ULONGLONG" - } - ], - "VariantToDouble": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "pdblRet", - "type": "DOUBLE" - } - ], - "VariantToBuffer": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "pv", - "type": "void" - }, - { - "name": "cb", - "type": "UINT" - } - ], - "VariantToGUID": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "pguid", - "type": "GUID" - } - ], - "VariantToString": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "pszBuf", - "type": "PWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "VariantToStringAlloc": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "ppszBuf", - "type": "PWSTR" - } - ], - "VariantToDosDateTime": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "pwDate", - "type": "WORD" - }, - { - "name": "pwTime", - "type": "WORD" - } - ], - "VariantToStrRet": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "pstrret", - "type": "STRRET" - } - ], - "VariantToFileTime": [ - { - "name": "varIn", - "type": "VARIANT" - }, - { - "name": "stfOut", - "type": "PSTIME_FLAGS" - }, - { - "name": "pftOut", - "type": "FILETIME" - } - ], - "VariantGetElementCount": [ - { - "name": "varIn", - "type": "VARIANT" - } - ], - "VariantToBooleanArray": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "prgf", - "type": "BOOL" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToInt16Array": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "prgn", - "type": "SHORT" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToUInt16Array": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "prgn", - "type": "USHORT" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToInt32Array": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "prgn", - "type": "LONG" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToUInt32Array": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "prgn", - "type": "ULONG" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToInt64Array": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "prgn", - "type": "LONGLONG" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToUInt64Array": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "prgn", - "type": "ULONGLONG" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToDoubleArray": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "prgn", - "type": "DOUBLE" - }, - { - "name": "crgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToStringArray": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "prgsz", - "type": "PWSTR" - }, - { - "name": "crgsz", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToBooleanArrayAlloc": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "pprgf", - "type": "BOOL" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToInt16ArrayAlloc": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "pprgn", - "type": "SHORT" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToUInt16ArrayAlloc": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "pprgn", - "type": "USHORT" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToInt32ArrayAlloc": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "pprgn", - "type": "LONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToUInt32ArrayAlloc": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "pprgn", - "type": "ULONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToInt64ArrayAlloc": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "pprgn", - "type": "LONGLONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToUInt64ArrayAlloc": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "pprgn", - "type": "ULONGLONG" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToDoubleArrayAlloc": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "pprgn", - "type": "DOUBLE" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantToStringArrayAlloc": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "pprgsz", - "type": "PWSTR" - }, - { - "name": "pcElem", - "type": "ULONG" - } - ], - "VariantGetBooleanElem": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pfVal", - "type": "BOOL" - } - ], - "VariantGetInt16Elem": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "SHORT" - } - ], - "VariantGetUInt16Elem": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "USHORT" - } - ], - "VariantGetInt32Elem": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "LONG" - } - ], - "VariantGetUInt32Elem": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "ULONG" - } - ], - "VariantGetInt64Elem": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "LONGLONG" - } - ], - "VariantGetUInt64Elem": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "ULONGLONG" - } - ], - "VariantGetDoubleElem": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "pnVal", - "type": "DOUBLE" - } - ], - "VariantGetStringElem": [ - { - "name": "var", - "type": "VARIANT" - }, - { - "name": "iElem", - "type": "ULONG" - }, - { - "name": "ppszVal", - "type": "PWSTR" - } - ], - "ClearVariantArray": [ - { - "name": "pvars", - "type": "VARIANT" - }, - { - "name": "cvars", - "type": "UINT" - } - ], - "VariantCompare": [ - { - "name": "var1", - "type": "VARIANT" - }, - { - "name": "var2", - "type": "VARIANT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/prsht.json b/qiling/extensions/windows_sdk/prsht.json deleted file mode 100644 index c3d5929ce..000000000 --- a/qiling/extensions/windows_sdk/prsht.json +++ /dev/null @@ -1,32 +0,0 @@ -{ - "CreatePropertySheetPageA": [ - { - "name": "constPropSheetPagePointer", - "type": "LPCPROPSHEETPAGEA" - } - ], - "CreatePropertySheetPageW": [ - { - "name": "constPropSheetPagePointer", - "type": "LPCPROPSHEETPAGEW" - } - ], - "DestroyPropertySheetPage": [ - { - "name": "VOID", - "type": "HPROPSHEETPAGE" - } - ], - "PropertySheetA": [ - { - "name": "VOID", - "type": "LPCPROPSHEETHEADERA" - } - ], - "PropertySheetW": [ - { - "name": "VOID", - "type": "LPCPROPSHEETHEADERW" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/psapi.json b/qiling/extensions/windows_sdk/psapi.json deleted file mode 100644 index 7ea3a8426..000000000 --- a/qiling/extensions/windows_sdk/psapi.json +++ /dev/null @@ -1,364 +0,0 @@ -{ - "K32EnumProcesses": [ - { - "name": "lpidProcess", - "type": "DWORD" - }, - { - "name": "cb", - "type": "DWORD" - }, - { - "name": "lpcbNeeded", - "type": "LPDWORD" - } - ], - "K32EnumProcessModules": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lphModule", - "type": "HMODULE" - }, - { - "name": "cb", - "type": "DWORD" - }, - { - "name": "lpcbNeeded", - "type": "LPDWORD" - } - ], - "K32EnumProcessModulesEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lphModule", - "type": "HMODULE" - }, - { - "name": "cb", - "type": "DWORD" - }, - { - "name": "lpcbNeeded", - "type": "LPDWORD" - }, - { - "name": "dwFilterFlag", - "type": "DWORD" - } - ], - "K32GetModuleBaseNameA": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpBaseName", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "K32GetModuleBaseNameW": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpBaseName", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "K32GetModuleFileNameExA": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpFilename", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "K32GetModuleFileNameExW": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpFilename", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "K32GetModuleInformation": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpmodinfo", - "type": "LPMODULEINFO" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "K32EmptyWorkingSet": [ - { - "name": "hProcess", - "type": "HANDLE" - } - ], - "K32QueryWorkingSet": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "pv", - "type": "PVOID" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "K32QueryWorkingSetEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "pv", - "type": "PVOID" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "K32InitializeProcessForWsWatch": [ - { - "name": "hProcess", - "type": "HANDLE" - } - ], - "K32GetWsChanges": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpWatchInfo", - "type": "PPSAPI_WS_WATCH_INFORMATION" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "K32GetWsChangesEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpWatchInfoEx", - "type": "PPSAPI_WS_WATCH_INFORMATION_EX" - }, - { - "name": "cb", - "type": "PDWORD" - } - ], - "K32GetMappedFileNameW": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpv", - "type": "LPVOID" - }, - { - "name": "lpFilename", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "K32GetMappedFileNameA": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpv", - "type": "LPVOID" - }, - { - "name": "lpFilename", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "K32EnumDeviceDrivers": [ - { - "name": "lpImageBase", - "type": "LPVOID" - }, - { - "name": "cb", - "type": "DWORD" - }, - { - "name": "lpcbNeeded", - "type": "LPDWORD" - } - ], - "K32GetDeviceDriverBaseNameA": [ - { - "name": "ImageBase", - "type": "LPVOID" - }, - { - "name": "lpFilename", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "K32GetDeviceDriverBaseNameW": [ - { - "name": "ImageBase", - "type": "LPVOID" - }, - { - "name": "lpBaseName", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "K32GetDeviceDriverFileNameA": [ - { - "name": "ImageBase", - "type": "LPVOID" - }, - { - "name": "lpFilename", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "K32GetDeviceDriverFileNameW": [ - { - "name": "ImageBase", - "type": "LPVOID" - }, - { - "name": "lpFilename", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "K32GetProcessMemoryInfo": [ - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "ppsmemCounters", - "type": "PPROCESS_MEMORY_COUNTERS" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "K32GetPerformanceInfo": [ - { - "name": "pPerformanceInformation", - "type": "PPERFORMANCE_INFORMATION" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "K32EnumPageFilesW": [ - { - "name": "pCallBackRoutine", - "type": "PENUM_PAGE_FILE_CALLBACKW" - }, - { - "name": "pContext", - "type": "LPVOID" - } - ], - "K32EnumPageFilesA": [ - { - "name": "pCallBackRoutine", - "type": "PENUM_PAGE_FILE_CALLBACKA" - }, - { - "name": "pContext", - "type": "LPVOID" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/realtimeapiset.json b/qiling/extensions/windows_sdk/realtimeapiset.json deleted file mode 100644 index d8509a250..000000000 --- a/qiling/extensions/windows_sdk/realtimeapiset.json +++ /dev/null @@ -1,104 +0,0 @@ -{ - "QueryThreadCycleTime": [ - { - "name": "ThreadHandle", - "type": "HANDLE" - }, - { - "name": "CycleTime", - "type": "PULONG64" - } - ], - "QueryProcessCycleTime": [ - { - "name": "ProcessHandle", - "type": "HANDLE" - }, - { - "name": "CycleTime", - "type": "PULONG64" - } - ], - "QueryIdleProcessorCycleTime": [ - { - "name": "BufferLength", - "type": "PULONG" - }, - { - "name": "ProcessorIdleCycleTime", - "type": "PULONG64" - } - ], - "QueryIdleProcessorCycleTimeEx": [ - { - "name": "Group", - "type": "USHORT" - }, - { - "name": "BufferLength", - "type": "PULONG" - }, - { - "name": "ProcessorIdleCycleTime", - "type": "PULONG64" - } - ], - "QueryInterruptTimePrecise": [ - { - "name": "lpInterruptTimePrecise", - "type": "PULONGLONG" - } - ], - "QueryUnbiasedInterruptTimePrecise": [ - { - "name": "lpUnbiasedInterruptTimePrecise", - "type": "PULONGLONG" - } - ], - "QueryInterruptTime": [ - { - "name": "lpInterruptTime", - "type": "PULONGLONG" - } - ], - "QueryUnbiasedInterruptTime": [ - { - "name": "UnbiasedTime", - "type": "PULONGLONG" - } - ], - "QueryAuxiliaryCounterFrequency": [ - { - "name": "lpAuxiliaryCounterFrequency", - "type": "PULONGLONG" - } - ], - "ConvertAuxiliaryCounterToPerformanceCounter": [ - { - "name": "ullAuxiliaryCounterValue", - "type": "ULONGLONG" - }, - { - "name": "lpPerformanceCounterValue", - "type": "PULONGLONG" - }, - { - "name": "lpConversionError", - "type": "PULONGLONG" - } - ], - "ConvertPerformanceCounterToAuxiliaryCounter": [ - { - "name": "ullPerformanceCounterValue", - "type": "ULONGLONG" - }, - { - "name": "lpAuxiliaryCounterValue", - "type": "PULONGLONG" - }, - { - "name": "lpConversionError", - "type": "PULONGLONG" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/remotesystemadditionalinfo.json b/qiling/extensions/windows_sdk/remotesystemadditionalinfo.json deleted file mode 100644 index 7e0f77c47..000000000 --- a/qiling/extensions/windows_sdk/remotesystemadditionalinfo.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "HSTRING_UserSize": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "HSTRING" - } - ], - "HSTRING_UserFree": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "HSTRING" - } - ], - "HSTRING_UserSize64": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "HSTRING" - } - ], - "HSTRING_UserFree64": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "HSTRING" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/roregistrationapi.json b/qiling/extensions/windows_sdk/roregistrationapi.json deleted file mode 100644 index 274f35530..000000000 --- a/qiling/extensions/windows_sdk/roregistrationapi.json +++ /dev/null @@ -1,26 +0,0 @@ -{ - "RoGetActivatableClassRegistration": [ - { - "name": "activatableClassId", - "type": "HSTRING" - }, - { - "name": "activatableClassRegistration", - "type": "PActivatableClassRegistration" - } - ], - "RoGetServerActivatableClasses": [ - { - "name": "serverName", - "type": "HSTRING" - }, - { - "name": "activatableClassIds", - "type": "HSTRING" - }, - { - "name": "count", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rpcdce.json b/qiling/extensions/windows_sdk/rpcdce.json deleted file mode 100644 index 6e531780b..000000000 --- a/qiling/extensions/windows_sdk/rpcdce.json +++ /dev/null @@ -1,1866 +0,0 @@ -{ - "RpcBindingCopy": [ - { - "name": "SourceBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "DestinationBinding", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcBindingFree": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcBindingSetOption": [ - { - "name": "hBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "option", - "type": "unsigned long" - }, - { - "name": "optionValue", - "type": "ULONG_PTR" - } - ], - "RpcBindingInqOption": [ - { - "name": "hBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "option", - "type": "unsigned long" - }, - { - "name": "pOptionValue", - "type": "ULONG_PTR" - } - ], - "RpcBindingFromStringBindingA": [ - { - "name": "StringBinding", - "type": "RPC_CSTR" - }, - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcBindingFromStringBindingW": [ - { - "name": "StringBinding", - "type": "RPC_WSTR" - }, - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcBindingInqObject": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ObjectUuid", - "type": "UUID" - } - ], - "RpcBindingReset": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcBindingSetObject": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ObjectUuid", - "type": "UUID" - } - ], - "RpcMgmtInqDefaultProtectLevel": [ - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - } - ], - "RpcBindingToStringBindingA": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "StringBinding", - "type": "RPC_CSTR" - } - ], - "RpcBindingToStringBindingW": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "StringBinding", - "type": "RPC_WSTR" - } - ], - "RpcBindingVectorFree": [ - { - "name": "BindingVector", - "type": "RPC_BINDING_VECTOR" - } - ], - "RpcStringBindingComposeA": [ - { - "name": "ObjUuid", - "type": "RPC_CSTR" - }, - { - "name": "ProtSeq", - "type": "RPC_CSTR" - }, - { - "name": "NetworkAddr", - "type": "RPC_CSTR" - }, - { - "name": "Endpoint", - "type": "RPC_CSTR" - }, - { - "name": "Options", - "type": "RPC_CSTR" - }, - { - "name": "StringBinding", - "type": "RPC_CSTR" - } - ], - "RpcStringBindingComposeW": [ - { - "name": "ObjUuid", - "type": "RPC_WSTR" - }, - { - "name": "ProtSeq", - "type": "RPC_WSTR" - }, - { - "name": "NetworkAddr", - "type": "RPC_WSTR" - }, - { - "name": "Endpoint", - "type": "RPC_WSTR" - }, - { - "name": "Options", - "type": "RPC_WSTR" - }, - { - "name": "StringBinding", - "type": "RPC_WSTR" - } - ], - "RpcStringBindingParseA": [ - { - "name": "StringBinding", - "type": "RPC_CSTR" - }, - { - "name": "ObjUuid", - "type": "RPC_CSTR" - }, - { - "name": "Protseq", - "type": "RPC_CSTR" - }, - { - "name": "NetworkAddr", - "type": "RPC_CSTR" - }, - { - "name": "Endpoint", - "type": "RPC_CSTR" - }, - { - "name": "NetworkOptions", - "type": "RPC_CSTR" - } - ], - "RpcStringBindingParseW": [ - { - "name": "StringBinding", - "type": "RPC_WSTR" - }, - { - "name": "ObjUuid", - "type": "RPC_WSTR" - }, - { - "name": "Protseq", - "type": "RPC_WSTR" - }, - { - "name": "NetworkAddr", - "type": "RPC_WSTR" - }, - { - "name": "Endpoint", - "type": "RPC_WSTR" - }, - { - "name": "NetworkOptions", - "type": "RPC_WSTR" - } - ], - "RpcStringFreeA": [ - { - "name": "String", - "type": "RPC_CSTR" - } - ], - "RpcStringFreeW": [ - { - "name": "String", - "type": "RPC_WSTR" - } - ], - "RpcIfInqId": [ - { - "name": "RpcIfHandle", - "type": "RPC_IF_HANDLE" - }, - { - "name": "RpcIfId", - "type": "RPC_IF_ID" - } - ], - "RpcNetworkIsProtseqValidA": [ - { - "name": "Protseq", - "type": "RPC_CSTR" - } - ], - "RpcNetworkIsProtseqValidW": [ - { - "name": "Protseq", - "type": "RPC_WSTR" - } - ], - "RpcMgmtInqComTimeout": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "Timeout", - "type": "unsigned int" - } - ], - "RpcMgmtSetComTimeout": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "Timeout", - "type": "unsigned int" - } - ], - "RpcMgmtSetCancelTimeout": [ - { - "name": "Timeout", - "type": "long" - } - ], - "RpcNetworkInqProtseqsA": [ - { - "name": "ProtseqVector", - "type": "RPC_PROTSEQ_VECTORA" - } - ], - "RpcNetworkInqProtseqsW": [ - { - "name": "ProtseqVector", - "type": "RPC_PROTSEQ_VECTORW" - } - ], - "RpcObjectInqType": [ - { - "name": "ObjUuid", - "type": "UUID" - }, - { - "name": "TypeUuid", - "type": "UUID" - } - ], - "RpcObjectSetInqFn": [ - { - "name": "InquiryFn", - "type": "RPC_OBJECT_INQ_FN" - } - ], - "RpcObjectSetType": [ - { - "name": "ObjUuid", - "type": "UUID" - }, - { - "name": "TypeUuid", - "type": "UUID" - } - ], - "RpcProtseqVectorFreeA": [ - { - "name": "ProtseqVector", - "type": "RPC_PROTSEQ_VECTORA" - } - ], - "RpcProtseqVectorFreeW": [ - { - "name": "ProtseqVector", - "type": "RPC_PROTSEQ_VECTORW" - } - ], - "RpcServerInqBindings": [ - { - "name": "BindingVector", - "type": "RPC_BINDING_VECTOR" - } - ], - "RpcServerInqIf": [ - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "MgrTypeUuid", - "type": "UUID" - }, - { - "name": "MgrEpv", - "type": "void" - } - ], - "RpcServerListen": [ - { - "name": "MinimumCallThreads", - "type": "unsigned int" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "DontWait", - "type": "unsigned int" - } - ], - "RpcServerRegisterIf": [ - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "MgrTypeUuid", - "type": "UUID" - }, - { - "name": "MgrEpv", - "type": "void" - } - ], - "RpcServerRegisterIfEx": [ - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "MgrTypeUuid", - "type": "UUID" - }, - { - "name": "MgrEpv", - "type": "void" - }, - { - "name": "Flags", - "type": "unsigned int" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "IfCallback", - "type": "RPC_IF_CALLBACK_FN" - } - ], - "RpcServerRegisterIf2": [ - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "MgrTypeUuid", - "type": "UUID" - }, - { - "name": "MgrEpv", - "type": "void" - }, - { - "name": "Flags", - "type": "unsigned int" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "MaxRpcSize", - "type": "unsigned int" - }, - { - "name": "IfCallbackFn", - "type": "RPC_IF_CALLBACK_FN" - } - ], - "RpcServerRegisterIf3": [ - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "MgrTypeUuid", - "type": "UUID" - }, - { - "name": "MgrEpv", - "type": "void" - }, - { - "name": "Flags", - "type": "unsigned int" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "MaxRpcSize", - "type": "unsigned int" - }, - { - "name": "IfCallback", - "type": "RPC_IF_CALLBACK_FN" - }, - { - "name": "SecurityDescriptor", - "type": "void" - } - ], - "RpcServerUnregisterIf": [ - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "MgrTypeUuid", - "type": "UUID" - }, - { - "name": "WaitForCallsToComplete", - "type": "unsigned int" - } - ], - "RpcServerUnregisterIfEx": [ - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "MgrTypeUuid", - "type": "UUID" - }, - { - "name": "RundownContextHandles", - "type": "int" - } - ], - "RpcServerUseAllProtseqs": [ - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "SecurityDescriptor", - "type": "void" - } - ], - "RpcServerUseAllProtseqsEx": [ - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "SecurityDescriptor", - "type": "void" - }, - { - "name": "Policy", - "type": "PRPC_POLICY" - } - ], - "RpcServerUseAllProtseqsIf": [ - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "SecurityDescriptor", - "type": "void" - } - ], - "RpcServerUseAllProtseqsIfEx": [ - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "SecurityDescriptor", - "type": "void" - }, - { - "name": "Policy", - "type": "PRPC_POLICY" - } - ], - "RpcServerUseProtseqA": [ - { - "name": "Protseq", - "type": "RPC_CSTR" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "SecurityDescriptor", - "type": "void" - } - ], - "RpcServerUseProtseqExA": [ - { - "name": "Protseq", - "type": "RPC_CSTR" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "SecurityDescriptor", - "type": "void" - }, - { - "name": "Policy", - "type": "PRPC_POLICY" - } - ], - "RpcServerUseProtseqW": [ - { - "name": "Protseq", - "type": "RPC_WSTR" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "SecurityDescriptor", - "type": "void" - } - ], - "RpcServerUseProtseqExW": [ - { - "name": "Protseq", - "type": "RPC_WSTR" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "SecurityDescriptor", - "type": "void" - }, - { - "name": "Policy", - "type": "PRPC_POLICY" - } - ], - "RpcServerUseProtseqEpA": [ - { - "name": "Protseq", - "type": "RPC_CSTR" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "Endpoint", - "type": "RPC_CSTR" - }, - { - "name": "SecurityDescriptor", - "type": "void" - } - ], - "RpcServerUseProtseqEpExA": [ - { - "name": "Protseq", - "type": "RPC_CSTR" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "Endpoint", - "type": "RPC_CSTR" - }, - { - "name": "SecurityDescriptor", - "type": "void" - }, - { - "name": "Policy", - "type": "PRPC_POLICY" - } - ], - "RpcServerUseProtseqEpW": [ - { - "name": "Protseq", - "type": "RPC_WSTR" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "Endpoint", - "type": "RPC_WSTR" - }, - { - "name": "SecurityDescriptor", - "type": "void" - } - ], - "RpcServerUseProtseqEpExW": [ - { - "name": "Protseq", - "type": "RPC_WSTR" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "Endpoint", - "type": "RPC_WSTR" - }, - { - "name": "SecurityDescriptor", - "type": "void" - }, - { - "name": "Policy", - "type": "PRPC_POLICY" - } - ], - "RpcServerUseProtseqIfA": [ - { - "name": "Protseq", - "type": "RPC_CSTR" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "SecurityDescriptor", - "type": "void" - } - ], - "RpcServerUseProtseqIfExA": [ - { - "name": "Protseq", - "type": "RPC_CSTR" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "SecurityDescriptor", - "type": "void" - }, - { - "name": "Policy", - "type": "PRPC_POLICY" - } - ], - "RpcServerUseProtseqIfW": [ - { - "name": "Protseq", - "type": "RPC_WSTR" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "SecurityDescriptor", - "type": "void" - } - ], - "RpcServerUseProtseqIfExW": [ - { - "name": "Protseq", - "type": "RPC_WSTR" - }, - { - "name": "MaxCalls", - "type": "unsigned int" - }, - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "SecurityDescriptor", - "type": "void" - }, - { - "name": "Policy", - "type": "PRPC_POLICY" - } - ], - "RpcMgmtStatsVectorFree": [ - { - "name": "StatsVector", - "type": "RPC_STATS_VECTOR" - } - ], - "RpcMgmtInqStats": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "Statistics", - "type": "RPC_STATS_VECTOR" - } - ], - "RpcMgmtIsServerListening": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcMgmtStopServerListening": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcMgmtWaitServerListen": [ - { - "name": "VOID", - "type": "void" - } - ], - "RpcMgmtSetServerStackSize": [ - { - "name": "ThreadStackSize", - "type": "unsigned long" - } - ], - "RpcSsDontSerializeContext": [ - { - "name": "VOID", - "type": "void" - } - ], - "RpcMgmtEnableIdleCleanup": [ - { - "name": "VOID", - "type": "void" - } - ], - "RpcMgmtInqIfIds": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "IfIdVector", - "type": "RPC_IF_ID_VECTOR" - } - ], - "RpcIfIdVectorFree": [ - { - "name": "IfIdVector", - "type": "RPC_IF_ID_VECTOR" - } - ], - "RpcMgmtInqServerPrincNameA": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "ServerPrincName", - "type": "RPC_CSTR" - } - ], - "RpcMgmtInqServerPrincNameW": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "ServerPrincName", - "type": "RPC_WSTR" - } - ], - "RpcServerInqDefaultPrincNameA": [ - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "PrincName", - "type": "RPC_CSTR" - } - ], - "RpcServerInqDefaultPrincNameW": [ - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "PrincName", - "type": "RPC_WSTR" - } - ], - "RpcEpResolveBinding": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - } - ], - "RpcNsBindingInqEntryNameA": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "EntryNameSyntax", - "type": "unsigned long" - }, - { - "name": "EntryName", - "type": "RPC_CSTR" - } - ], - "RpcNsBindingInqEntryNameW": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "EntryNameSyntax", - "type": "unsigned long" - }, - { - "name": "EntryName", - "type": "RPC_WSTR" - } - ], - "RpcBindingCreateA": [ - { - "name": "Template", - "type": "RPC_BINDING_HANDLE_TEMPLATE_V1_A" - }, - { - "name": "Security", - "type": "RPC_BINDING_HANDLE_SECURITY_V1_A" - }, - { - "name": "Options", - "type": "RPC_BINDING_HANDLE_OPTIONS_V1" - }, - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcBindingCreateW": [ - { - "name": "Template", - "type": "RPC_BINDING_HANDLE_TEMPLATE_V1_W" - }, - { - "name": "Security", - "type": "RPC_BINDING_HANDLE_SECURITY_V1_W" - }, - { - "name": "Options", - "type": "RPC_BINDING_HANDLE_OPTIONS_V1" - }, - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcServerInqBindingHandle": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcImpersonateClient": [ - { - "name": "BindingHandle", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcRevertToSelfEx": [ - { - "name": "BindingHandle", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcRevertToSelf": [ - { - "name": "VOID", - "type": "void" - } - ], - "RpcImpersonateClientContainer": [ - { - "name": "BindingHandle", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcRevertContainerImpersonation": [ - { - "name": "VOID", - "type": "void" - } - ], - "RpcBindingInqAuthClientA": [ - { - "name": "ClientBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "Privs", - "type": "RPC_AUTHZ_HANDLE" - }, - { - "name": "ServerPrincName", - "type": "RPC_CSTR" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthzSvc", - "type": "unsigned long" - } - ], - "RpcBindingInqAuthClientW": [ - { - "name": "ClientBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "Privs", - "type": "RPC_AUTHZ_HANDLE" - }, - { - "name": "ServerPrincName", - "type": "RPC_WSTR" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthzSvc", - "type": "unsigned long" - } - ], - "RpcBindingInqAuthClientExA": [ - { - "name": "ClientBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "Privs", - "type": "RPC_AUTHZ_HANDLE" - }, - { - "name": "ServerPrincName", - "type": "RPC_CSTR" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthzSvc", - "type": "unsigned long" - }, - { - "name": "Flags", - "type": "unsigned long" - } - ], - "RpcBindingInqAuthClientExW": [ - { - "name": "ClientBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "Privs", - "type": "RPC_AUTHZ_HANDLE" - }, - { - "name": "ServerPrincName", - "type": "RPC_WSTR" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthzSvc", - "type": "unsigned long" - }, - { - "name": "Flags", - "type": "unsigned long" - } - ], - "RpcBindingInqAuthInfoA": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ServerPrincName", - "type": "RPC_CSTR" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "AuthzSvc", - "type": "unsigned long" - } - ], - "RpcBindingInqAuthInfoW": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ServerPrincName", - "type": "RPC_WSTR" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "AuthzSvc", - "type": "unsigned long" - } - ], - "RpcBindingSetAuthInfoA": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ServerPrincName", - "type": "RPC_CSTR" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "AuthzSvc", - "type": "unsigned long" - } - ], - "RpcBindingSetAuthInfoExA": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ServerPrincName", - "type": "RPC_CSTR" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "AuthzSvc", - "type": "unsigned long" - }, - { - "name": "SecurityQos", - "type": "RPC_SECURITY_QOS" - } - ], - "RpcBindingSetAuthInfoW": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ServerPrincName", - "type": "RPC_WSTR" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "AuthzSvc", - "type": "unsigned long" - } - ], - "RpcBindingSetAuthInfoExW": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ServerPrincName", - "type": "RPC_WSTR" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "AuthzSvc", - "type": "unsigned long" - }, - { - "name": "SecurityQOS", - "type": "RPC_SECURITY_QOS" - } - ], - "RpcBindingInqAuthInfoExA": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ServerPrincName", - "type": "RPC_CSTR" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "AuthzSvc", - "type": "unsigned long" - }, - { - "name": "RpcQosVersion", - "type": "unsigned long" - }, - { - "name": "SecurityQOS", - "type": "RPC_SECURITY_QOS" - } - ], - "RpcBindingInqAuthInfoExW": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ServerPrincName", - "type": "RPC_WSTR" - }, - { - "name": "AuthnLevel", - "type": "unsigned long" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "AuthIdentity", - "type": "RPC_AUTH_IDENTITY_HANDLE" - }, - { - "name": "AuthzSvc", - "type": "unsigned long" - }, - { - "name": "RpcQosVersion", - "type": "unsigned long" - }, - { - "name": "SecurityQOS", - "type": "RPC_SECURITY_QOS" - } - ], - "RpcServerCompleteSecurityCallback": [ - { - "name": "BindingHandle", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "Status", - "type": "RPC_STATUS" - } - ], - "RpcServerRegisterAuthInfoA": [ - { - "name": "ServerPrincName", - "type": "RPC_CSTR" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "GetKeyFn", - "type": "RPC_AUTH_KEY_RETRIEVAL_FN" - }, - { - "name": "Arg", - "type": "void" - } - ], - "RpcServerRegisterAuthInfoW": [ - { - "name": "ServerPrincName", - "type": "RPC_WSTR" - }, - { - "name": "AuthnSvc", - "type": "unsigned long" - }, - { - "name": "GetKeyFn", - "type": "RPC_AUTH_KEY_RETRIEVAL_FN" - }, - { - "name": "Arg", - "type": "void" - } - ], - "RpcBindingServerFromClient": [ - { - "name": "ClientBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ServerBinding", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcRaiseException": [ - { - "name": "exception", - "type": "RPC_STATUS" - } - ], - "RpcTestCancel": [ - { - "name": "VOID", - "type": "void" - } - ], - "RpcServerTestCancel": [ - { - "name": "BindingHandle", - "type": "RPC_BINDING_HANDLE" - } - ], - "RpcCancelThread": [ - { - "name": "Thread", - "type": "void" - } - ], - "RpcCancelThreadEx": [ - { - "name": "Thread", - "type": "void" - }, - { - "name": "Timeout", - "type": "long" - } - ], - "UuidCreate": [ - { - "name": "Uuid", - "type": "UUID" - } - ], - "UuidCreateSequential": [ - { - "name": "Uuid", - "type": "UUID" - } - ], - "UuidToStringA": [ - { - "name": "Uuid", - "type": "UUID" - }, - { - "name": "StringUuid", - "type": "RPC_CSTR" - } - ], - "UuidFromStringA": [ - { - "name": "StringUuid", - "type": "RPC_CSTR" - }, - { - "name": "Uuid", - "type": "UUID" - } - ], - "UuidToStringW": [ - { - "name": "Uuid", - "type": "UUID" - }, - { - "name": "StringUuid", - "type": "RPC_WSTR" - } - ], - "UuidFromStringW": [ - { - "name": "StringUuid", - "type": "RPC_WSTR" - }, - { - "name": "Uuid", - "type": "UUID" - } - ], - "UuidCompare": [ - { - "name": "Uuid1", - "type": "UUID" - }, - { - "name": "Uuid2", - "type": "UUID" - }, - { - "name": "Status", - "type": "RPC_STATUS" - } - ], - "UuidCreateNil": [ - { - "name": "NilUuid", - "type": "UUID" - } - ], - "UuidEqual": [ - { - "name": "Uuid1", - "type": "UUID" - }, - { - "name": "Uuid2", - "type": "UUID" - }, - { - "name": "Status", - "type": "RPC_STATUS" - } - ], - "UuidHash": [ - { - "name": "Uuid", - "type": "UUID" - }, - { - "name": "Status", - "type": "RPC_STATUS" - } - ], - "UuidIsNil": [ - { - "name": "Uuid", - "type": "UUID" - }, - { - "name": "Status", - "type": "RPC_STATUS" - } - ], - "RpcEpRegisterNoReplaceA": [ - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "BindingVector", - "type": "RPC_BINDING_VECTOR" - }, - { - "name": "UuidVector", - "type": "UUID_VECTOR" - }, - { - "name": "Annotation", - "type": "RPC_CSTR" - } - ], - "RpcEpRegisterNoReplaceW": [ - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "BindingVector", - "type": "RPC_BINDING_VECTOR" - }, - { - "name": "UuidVector", - "type": "UUID_VECTOR" - }, - { - "name": "Annotation", - "type": "RPC_WSTR" - } - ], - "RpcEpRegisterA": [ - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "BindingVector", - "type": "RPC_BINDING_VECTOR" - }, - { - "name": "UuidVector", - "type": "UUID_VECTOR" - }, - { - "name": "Annotation", - "type": "RPC_CSTR" - } - ], - "RpcEpRegisterW": [ - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "BindingVector", - "type": "RPC_BINDING_VECTOR" - }, - { - "name": "UuidVector", - "type": "UUID_VECTOR" - }, - { - "name": "Annotation", - "type": "RPC_WSTR" - } - ], - "RpcEpUnregister": [ - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - }, - { - "name": "BindingVector", - "type": "RPC_BINDING_VECTOR" - }, - { - "name": "UuidVector", - "type": "UUID_VECTOR" - } - ], - "DceErrorInqTextA": [ - { - "name": "RpcStatus", - "type": "RPC_STATUS" - }, - { - "name": "ErrorText", - "type": "RPC_CSTR" - } - ], - "DceErrorInqTextW": [ - { - "name": "RpcStatus", - "type": "RPC_STATUS" - }, - { - "name": "ErrorText", - "type": "RPC_WSTR" - } - ], - "RpcMgmtEpEltInqBegin": [ - { - "name": "EpBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "InquiryType", - "type": "unsigned long" - }, - { - "name": "IfId", - "type": "RPC_IF_ID" - }, - { - "name": "VersOption", - "type": "unsigned long" - }, - { - "name": "ObjectUuid", - "type": "UUID" - }, - { - "name": "InquiryContext", - "type": "RPC_EP_INQ_HANDLE" - } - ], - "RpcMgmtEpEltInqDone": [ - { - "name": "InquiryContext", - "type": "RPC_EP_INQ_HANDLE" - } - ], - "RpcMgmtEpEltInqNextA": [ - { - "name": "InquiryContext", - "type": "RPC_EP_INQ_HANDLE" - }, - { - "name": "IfId", - "type": "RPC_IF_ID" - }, - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ObjectUuid", - "type": "UUID" - }, - { - "name": "Annotation", - "type": "RPC_CSTR" - } - ], - "RpcMgmtEpEltInqNextW": [ - { - "name": "InquiryContext", - "type": "RPC_EP_INQ_HANDLE" - }, - { - "name": "IfId", - "type": "RPC_IF_ID" - }, - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ObjectUuid", - "type": "UUID" - }, - { - "name": "Annotation", - "type": "RPC_WSTR" - } - ], - "RpcMgmtEpUnregister": [ - { - "name": "EpBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "IfId", - "type": "RPC_IF_ID" - }, - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ObjectUuid", - "type": "UUID" - } - ], - "RpcMgmtSetAuthorizationFn": [ - { - "name": "AuthorizationFn", - "type": "RPC_MGMT_AUTHORIZATION_FN" - } - ], - "RpcExceptionFilter": [ - { - "name": "ExceptionCode", - "type": "unsigned long" - } - ], - "RpcServerInterfaceGroupCreateW": [ - { - "name": "Interfaces", - "type": "RPC_INTERFACE_TEMPLATEW" - }, - { - "name": "NumIfs", - "type": "unsigned long" - }, - { - "name": "Endpoints", - "type": "RPC_ENDPOINT_TEMPLATEW" - }, - { - "name": "NumEndpoints", - "type": "unsigned long" - }, - { - "name": "IdlePeriod", - "type": "unsigned long" - }, - { - "name": "IdleCallbackFn", - "type": "RPC_INTERFACE_GROUP_IDLE_CALLBACK_FN" - }, - { - "name": "IdleCallbackContext", - "type": "void" - }, - { - "name": "IfGroup", - "type": "PRPC_INTERFACE_GROUP" - } - ], - "RpcServerInterfaceGroupCreateA": [ - { - "name": "Interfaces", - "type": "RPC_INTERFACE_TEMPLATEA" - }, - { - "name": "NumIfs", - "type": "unsigned long" - }, - { - "name": "Endpoints", - "type": "RPC_ENDPOINT_TEMPLATEA" - }, - { - "name": "NumEndpoints", - "type": "unsigned long" - }, - { - "name": "IdlePeriod", - "type": "unsigned long" - }, - { - "name": "IdleCallbackFn", - "type": "RPC_INTERFACE_GROUP_IDLE_CALLBACK_FN" - }, - { - "name": "IdleCallbackContext", - "type": "void" - }, - { - "name": "IfGroup", - "type": "PRPC_INTERFACE_GROUP" - } - ], - "RpcServerInterfaceGroupClose": [ - { - "name": "IfGroup", - "type": "RPC_INTERFACE_GROUP" - } - ], - "RpcServerInterfaceGroupActivate": [ - { - "name": "IfGroup", - "type": "RPC_INTERFACE_GROUP" - } - ], - "RpcServerInterfaceGroupDeactivate": [ - { - "name": "IfGroup", - "type": "RPC_INTERFACE_GROUP" - }, - { - "name": "ForceDeactivation", - "type": "unsigned long" - } - ], - "RpcServerInterfaceGroupInqBindings": [ - { - "name": "IfGroup", - "type": "RPC_INTERFACE_GROUP" - }, - { - "name": "BindingVector", - "type": "RPC_BINDING_VECTOR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rpcdcep.json b/qiling/extensions/windows_sdk/rpcdcep.json deleted file mode 100644 index 612c93961..000000000 --- a/qiling/extensions/windows_sdk/rpcdcep.json +++ /dev/null @@ -1,12 +0,0 @@ -{ - "I_RpcBindingInqLocalClientPID": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "Pid", - "type": "unsigned long" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rpcndr.json b/qiling/extensions/windows_sdk/rpcndr.json deleted file mode 100644 index 86d3be2be..000000000 --- a/qiling/extensions/windows_sdk/rpcndr.json +++ /dev/null @@ -1,534 +0,0 @@ -{ - "RpcSsDestroyClientContext": [ - { - "name": "ContextHandle", - "type": "void" - } - ], - "NdrSimpleTypeMarshall": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "FormatChar", - "type": "unsigned char" - } - ], - "NdrSimpleTypeUnmarshall": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "FormatChar", - "type": "unsigned char" - } - ], - "NdrContextHandleInitialize": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrPointerBufferSize": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrSimpleStructBufferSize": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrComplexStructBufferSize": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrConformantArrayBufferSize": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrComplexArrayBufferSize": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrConformantStringBufferSize": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrUserMarshalBufferSize": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrInterfacePointerBufferSize": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrContextHandleSize": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrContextHandleMemorySize": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrPointerFree": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrUserMarshalFree": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrInterfacePointerFree": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pMemory", - "type": "unsigned char" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrConvert": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrClientCall2": [ - { - "name": "pStubDescriptor", - "type": "PMIDL_STUB_DESC" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrClientCall": [ - { - "name": "pStubDescriptor", - "type": "PMIDL_STUB_DESC" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrAsyncClientCall": [ - { - "name": "pStubDescriptor", - "type": "PMIDL_STUB_DESC" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrDcomAsyncClientCall": [ - { - "name": "pStubDescriptor", - "type": "PMIDL_STUB_DESC" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - } - ], - "NdrAsyncServerCall": [ - { - "name": "pRpcMsg", - "type": "PRPC_MESSAGE" - } - ], - "NdrStubCall2": [ - { - "name": "pThis", - "type": "void" - }, - { - "name": "pChannel", - "type": "void" - }, - { - "name": "pRpcMsg", - "type": "PRPC_MESSAGE" - }, - { - "name": "pdwStubPhase", - "type": "unsigned long" - } - ], - "NdrServerCall2": [ - { - "name": "pRpcMsg", - "type": "PRPC_MESSAGE" - } - ], - "RpcSsDisableAllocate": [ - { - "name": "VOID", - "type": "void" - } - ], - "RpcSsEnableAllocate": [ - { - "name": "VOID", - "type": "void" - } - ], - "RpcSsFree": [ - { - "name": "NodeToFree", - "type": "void" - } - ], - "RpcSsGetThreadHandle": [ - { - "name": "VOID", - "type": "void" - } - ], - "RpcSsSetClientAllocFree": [ - { - "name": "ClientAlloc", - "type": "RPC_CLIENT_ALLOC" - }, - { - "name": "ClientFree", - "type": "RPC_CLIENT_FREE" - } - ], - "RpcSsSetThreadHandle": [ - { - "name": "Id", - "type": "RPC_SS_THREAD_HANDLE" - } - ], - "RpcSsSwapClientAllocFree": [ - { - "name": "ClientAlloc", - "type": "RPC_CLIENT_ALLOC" - }, - { - "name": "ClientFree", - "type": "RPC_CLIENT_FREE" - }, - { - "name": "OldClientAlloc", - "type": "RPC_CLIENT_ALLOC" - }, - { - "name": "OldClientFree", - "type": "RPC_CLIENT_FREE" - } - ], - "RpcSmClientFree": [ - { - "name": "pNodeToFree", - "type": "void" - } - ], - "RpcSmDestroyClientContext": [ - { - "name": "ContextHandle", - "type": "void" - } - ], - "RpcSmDisableAllocate": [ - { - "name": "VOID", - "type": "void" - } - ], - "RpcSmEnableAllocate": [ - { - "name": "VOID", - "type": "void" - } - ], - "RpcSmFree": [ - { - "name": "NodeToFree", - "type": "void" - } - ], - "RpcSmGetThreadHandle": [ - { - "name": "pStatus", - "type": "RPC_STATUS" - } - ], - "RpcSmSetClientAllocFree": [ - { - "name": "ClientAlloc", - "type": "RPC_CLIENT_ALLOC" - }, - { - "name": "ClientFree", - "type": "RPC_CLIENT_FREE" - } - ], - "RpcSmSetThreadHandle": [ - { - "name": "Id", - "type": "RPC_SS_THREAD_HANDLE" - } - ], - "RpcSmSwapClientAllocFree": [ - { - "name": "ClientAlloc", - "type": "RPC_CLIENT_ALLOC" - }, - { - "name": "ClientFree", - "type": "RPC_CLIENT_FREE" - }, - { - "name": "OldClientAlloc", - "type": "RPC_CLIENT_ALLOC" - }, - { - "name": "OldClientFree", - "type": "RPC_CLIENT_FREE" - } - ], - "NdrClearOutParameters": [ - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pFormat", - "type": "PFORMAT_STRING" - }, - { - "name": "ArgAddr", - "type": "void" - } - ], - "NdrOleFree": [ - { - "name": "NodeToFree", - "type": "void" - } - ], - "NdrGetUserMarshalInfo": [ - { - "name": "pFlags", - "type": "unsigned long" - }, - { - "name": "InformationLevel", - "type": "unsigned long" - }, - { - "name": "pMarshalInfo", - "type": "NDR_USER_MARSHAL_INFO" - } - ], - "NdrClientCall3": [ - { - "name": "pProxyInfo", - "type": "MIDL_STUBLESS_PROXY_INFO" - }, - { - "name": "nProcNum", - "type": "unsigned long" - }, - { - "name": "pReturnValue", - "type": "void" - } - ], - "Ndr64AsyncClientCall": [ - { - "name": "pProxyInfo", - "type": "MIDL_STUBLESS_PROXY_INFO" - }, - { - "name": "nProcNum", - "type": "unsigned long" - }, - { - "name": "pReturnValue", - "type": "void" - } - ], - "Ndr64AsyncServerCallAll": [ - { - "name": "pRpcMsg", - "type": "PRPC_MESSAGE" - } - ], - "NdrStubCall3": [ - { - "name": "pThis", - "type": "void" - }, - { - "name": "pChannel", - "type": "void" - }, - { - "name": "pRpcMsg", - "type": "PRPC_MESSAGE" - }, - { - "name": "pdwStubPhase", - "type": "unsigned long" - } - ], - "NdrServerCallAll": [ - { - "name": "pRpcMsg", - "type": "PRPC_MESSAGE" - } - ], - "RpcUserFree": [ - { - "name": "AsyncHandle", - "type": "handle_t" - }, - { - "name": "pBuffer", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rpcproxy.json b/qiling/extensions/windows_sdk/rpcproxy.json deleted file mode 100644 index b781d013f..000000000 --- a/qiling/extensions/windows_sdk/rpcproxy.json +++ /dev/null @@ -1,380 +0,0 @@ -{ - "NdrProxyInitialize": [ - { - "name": "This", - "type": "void" - }, - { - "name": "pRpcMsg", - "type": "PRPC_MESSAGE" - }, - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pStubDescriptor", - "type": "PMIDL_STUB_DESC" - }, - { - "name": "ProcNum", - "type": "unsigned int" - } - ], - "NdrProxyGetBuffer": [ - { - "name": "This", - "type": "void" - }, - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - } - ], - "NdrProxySendReceive": [ - { - "name": "This", - "type": "void" - }, - { - "name": "pStubMsg", - "type": "MIDL_STUB_MESSAGE" - } - ], - "NdrProxyFreeBuffer": [ - { - "name": "This", - "type": "void" - }, - { - "name": "pStubMsg", - "type": "MIDL_STUB_MESSAGE" - } - ], - "NdrProxyErrorHandler": [ - { - "name": "dwExceptionCode", - "type": "DWORD" - } - ], - "NdrStubInitialize": [ - { - "name": "pRpcMsg", - "type": "PRPC_MESSAGE" - }, - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - }, - { - "name": "pStubDescriptor", - "type": "PMIDL_STUB_DESC" - }, - { - "name": "pRpcChannelBuffer", - "type": "IRpcChannelBuffer" - } - ], - "NdrStubForwardingFunction": [ - { - "name": "This", - "type": "IRpcStubBuffer" - }, - { - "name": "pChannel", - "type": "IRpcChannelBuffer" - }, - { - "name": "pmsg", - "type": "PRPC_MESSAGE" - }, - { - "name": "pdwStubPhase", - "type": "DWORD" - } - ], - "NdrStubGetBuffer": [ - { - "name": "This", - "type": "IRpcStubBuffer" - }, - { - "name": "pRpcChannelBuffer", - "type": "IRpcChannelBuffer" - }, - { - "name": "pStubMsg", - "type": "PMIDL_STUB_MESSAGE" - } - ], - "CStdStubBuffer_QueryInterface": [ - { - "name": "This", - "type": "IRpcStubBuffer" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppvObject", - "type": "void" - } - ], - "CStdStubBuffer_AddRef": [ - { - "name": "This", - "type": "IRpcStubBuffer" - } - ], - "NdrCStdStubBuffer_Release": [ - { - "name": "This", - "type": "IRpcStubBuffer" - }, - { - "name": "pPSF", - "type": "IPSFactoryBuffer" - } - ], - "CStdStubBuffer_Connect": [ - { - "name": "This", - "type": "IRpcStubBuffer" - }, - { - "name": "pUnkServer", - "type": "IUnknown" - } - ], - "CStdStubBuffer_Disconnect": [ - { - "name": "This", - "type": "IRpcStubBuffer" - } - ], - "CStdStubBuffer_Invoke": [ - { - "name": "This", - "type": "IRpcStubBuffer" - }, - { - "name": "pRpcMsg", - "type": "RPCOLEMESSAGE" - }, - { - "name": "pRpcChannelBuffer", - "type": "IRpcChannelBuffer" - } - ], - "CStdStubBuffer_CountRefs": [ - { - "name": "This", - "type": "IRpcStubBuffer" - } - ], - "CStdStubBuffer_DebugServerQueryInterface": [ - { - "name": "This", - "type": "IRpcStubBuffer" - }, - { - "name": "ppv", - "type": "void" - } - ], - "CStdStubBuffer_DebugServerRelease": [ - { - "name": "This", - "type": "IRpcStubBuffer" - }, - { - "name": "pv", - "type": "void" - } - ], - "CStdStubBuffer2_QueryInterface": [ - { - "name": "This", - "type": "IRpcStubBuffer" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppvObject", - "type": "void" - } - ], - "CStdStubBuffer2_Connect": [ - { - "name": "pthis", - "type": "IRpcStubBuffer" - }, - { - "name": "pUnkServer", - "type": "IUnknown" - } - ], - "CStdStubBuffer2_Disconnect": [ - { - "name": "pthis", - "type": "IRpcStubBuffer" - } - ], - "CStdStubBuffer2_CountRefs": [ - { - "name": "pthis", - "type": "IRpcStubBuffer" - } - ], - "NdrCStdStubBuffer2_Release": [ - { - "name": "This", - "type": "IRpcStubBuffer" - }, - { - "name": "pPSF", - "type": "IPSFactoryBuffer" - } - ], - "CStdAsyncStubBuffer_QueryInterface": [ - { - "name": "pthis", - "type": "IRpcStubBuffer" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppvObject", - "type": "void" - } - ], - "CStdAsyncStubBuffer_AddRef": [ - { - "name": "pthis", - "type": "IRpcStubBuffer" - } - ], - "CStdAsyncStubBuffer_Release": [ - { - "name": "pthis", - "type": "IRpcStubBuffer" - } - ], - "CStdAsyncStubBuffer_Connect": [ - { - "name": "pthis", - "type": "IRpcStubBuffer" - }, - { - "name": "pUnkServer", - "type": "IUnknown" - } - ], - "CStdAsyncStubBuffer_Disconnect": [ - { - "name": "pthis", - "type": "IRpcStubBuffer" - } - ], - "CStdAsyncStubBuffer_Invoke": [ - { - "name": "pthis", - "type": "IRpcStubBuffer" - }, - { - "name": "_prpcmsg", - "type": "RPCOLEMESSAGE" - }, - { - "name": "_pRpcChannelBuffer", - "type": "IRpcChannelBuffer" - } - ], - "CStdAsyncStubBuffer2_Release": [ - { - "name": "pthis", - "type": "IRpcStubBuffer" - } - ], - "CStdAsyncStubBuffer2_Connect": [ - { - "name": "pthis", - "type": "IRpcStubBuffer" - }, - { - "name": "pUnkServer", - "type": "IUnknown" - } - ], - "CStdAsyncStubBuffer2_Disconnect": [ - { - "name": "pthis", - "type": "IRpcStubBuffer" - } - ], - "NdrDllGetClassObject": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - }, - { - "name": "pProxyFileList", - "type": "ProxyFileInfo" - }, - { - "name": "pclsid", - "type": "CLSID" - }, - { - "name": "pPSFactoryBuffer", - "type": "CStdPSFactoryBuffer" - } - ], - "NdrDllCanUnloadNow": [ - { - "name": "pPSFactoryBuffer", - "type": "CStdPSFactoryBuffer" - } - ], - "NdrDllRegisterProxy": [ - { - "name": "hDll", - "type": "HMODULE" - }, - { - "name": "pProxyFileList", - "type": "ProxyFileInfo" - }, - { - "name": "pclsid", - "type": "CLSID" - } - ], - "NdrDllUnregisterProxy": [ - { - "name": "hDll", - "type": "HMODULE" - }, - { - "name": "pProxyFileList", - "type": "ProxyFileInfo" - }, - { - "name": "pclsid", - "type": "CLSID" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rpcssl.json b/qiling/extensions/windows_sdk/rpcssl.json deleted file mode 100644 index bd29f6670..000000000 --- a/qiling/extensions/windows_sdk/rpcssl.json +++ /dev/null @@ -1,30 +0,0 @@ -{ - "RpcCertGeneratePrincipalNameW": [ - { - "name": "Context", - "type": "PCCERT_CONTEXT" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "pBuffer", - "type": "RPC_WSTR" - } - ], - "RpcCertGeneratePrincipalNameA": [ - { - "name": "Context", - "type": "PCCERT_CONTEXT" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "pBuffer", - "type": "RPC_CSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rrascfg.json b/qiling/extensions/windows_sdk/rrascfg.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/rrascfg.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rtlsupportapi.json b/qiling/extensions/windows_sdk/rtlsupportapi.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/rtlsupportapi.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rtworkq.json b/qiling/extensions/windows_sdk/rtworkq.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/rtworkq.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/runtimeobject.json b/qiling/extensions/windows_sdk/runtimeobject.json new file mode 100644 index 000000000..fa976cd6d --- /dev/null +++ b/qiling/extensions/windows_sdk/runtimeobject.json @@ -0,0 +1,194 @@ +{ + "RoGetErrorReportingFlags": [ + { + "name": "pflags", + "type": "UINT32" + } + ], + "RoSetErrorReportingFlags": [ + { + "name": "flags", + "type": "UINT32" + } + ], + "RoResolveRestrictedErrorInfoReference": [ + { + "name": "reference", + "type": "PCWSTR" + }, + { + "name": "ppRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "SetRestrictedErrorInfo": [ + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "GetRestrictedErrorInfo": [ + { + "name": "ppRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "RoOriginateErrorW": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "message", + "type": "PCWSTR" + } + ], + "RoOriginateError": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + } + ], + "RoTransformErrorW": [ + { + "name": "oldError", + "type": "HRESULT" + }, + { + "name": "newError", + "type": "HRESULT" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "message", + "type": "PCWSTR" + } + ], + "RoTransformError": [ + { + "name": "oldError", + "type": "HRESULT" + }, + { + "name": "newError", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + } + ], + "RoCaptureErrorContext": [ + { + "name": "hr", + "type": "HRESULT" + } + ], + "RoFailFastWithErrorContext": [ + { + "name": "hrError", + "type": "HRESULT" + } + ], + "RoOriginateLanguageException": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + }, + { + "name": "languageException", + "type": "IUnknown" + } + ], + "RoClearError": [ + { + "name": "VOID", + "type": "void" + } + ], + "RoReportUnhandledError": [ + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "RoInspectThreadErrorInfo": [ + { + "name": "targetTebAddress", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "readMemoryCallback", + "type": "PINSPECT_MEMORY_CALLBACK" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "targetErrorInfoAddress", + "type": "UINT_PTR" + } + ], + "RoInspectCapturedStackBackTrace": [ + { + "name": "targetErrorInfoAddress", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "readMemoryCallback", + "type": "PINSPECT_MEMORY_CALLBACK" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "frameCount", + "type": "UINT32" + }, + { + "name": "targetBackTraceAddress", + "type": "UINT_PTR" + } + ], + "RoReportFailedDelegate": [ + { + "name": "punkDelegate", + "type": "IUnknown" + }, + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "IsErrorPropagationEnabled": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sddl.json b/qiling/extensions/windows_sdk/sddl.json deleted file mode 100644 index cb5c508c7..000000000 --- a/qiling/extensions/windows_sdk/sddl.json +++ /dev/null @@ -1,122 +0,0 @@ -{ - "ConvertSidToStringSidA": [ - { - "name": "Sid", - "type": "PSID" - }, - { - "name": "StringSid", - "type": "LPSTR" - } - ], - "ConvertSidToStringSidW": [ - { - "name": "Sid", - "type": "PSID" - }, - { - "name": "StringSid", - "type": "LPWSTR" - } - ], - "ConvertStringSidToSidA": [ - { - "name": "StringSid", - "type": "LPCSTR" - }, - { - "name": "Sid", - "type": "PSID" - } - ], - "ConvertStringSidToSidW": [ - { - "name": "StringSid", - "type": "LPCWSTR" - }, - { - "name": "Sid", - "type": "PSID" - } - ], - "ConvertStringSecurityDescriptorToSecurityDescriptorA": [ - { - "name": "StringSecurityDescriptor", - "type": "LPCSTR" - }, - { - "name": "StringSDRevision", - "type": "DWORD" - }, - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "SecurityDescriptorSize", - "type": "PULONG" - } - ], - "ConvertStringSecurityDescriptorToSecurityDescriptorW": [ - { - "name": "StringSecurityDescriptor", - "type": "LPCWSTR" - }, - { - "name": "StringSDRevision", - "type": "DWORD" - }, - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "SecurityDescriptorSize", - "type": "PULONG" - } - ], - "ConvertSecurityDescriptorToStringSecurityDescriptorA": [ - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "RequestedStringSDRevision", - "type": "DWORD" - }, - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "StringSecurityDescriptor", - "type": "LPSTR" - }, - { - "name": "StringSecurityDescriptorLen", - "type": "PULONG" - } - ], - "ConvertSecurityDescriptorToStringSecurityDescriptorW": [ - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "RequestedStringSDRevision", - "type": "DWORD" - }, - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "StringSecurityDescriptor", - "type": "LPWSTR" - }, - { - "name": "StringSecurityDescriptorLen", - "type": "PULONG" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/secforwarder.json b/qiling/extensions/windows_sdk/secforwarder.json new file mode 100644 index 000000000..ec5bda91f --- /dev/null +++ b/qiling/extensions/windows_sdk/secforwarder.json @@ -0,0 +1,5200 @@ +{ + "CryptAcquireContextA": [ + { + "name": "phProv", + "type": "HCRYPTPROV" + }, + { + "name": "szContainer", + "type": "LPCSTR" + }, + { + "name": "szProvider", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptAcquireContextW": [ + { + "name": "phProv", + "type": "HCRYPTPROV" + }, + { + "name": "szContainer", + "type": "LPCWSTR" + }, + { + "name": "szProvider", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptReleaseContext": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGenKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDeriveKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "hBaseData", + "type": "HCRYPTHASH" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDestroyKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + } + ], + "CryptSetKeyParam": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetKeyParam": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetHashParam": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetHashParam": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProvParam": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetProvParam": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGenRandom": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "CryptGetUserKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "phUserKey", + "type": "HCRYPTKEY" + } + ], + "CryptExportKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hExpKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwBlobType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + } + ], + "CryptImportKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwDataLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptEncrypt": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "Final", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "CryptDecrypt": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "Final", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + } + ], + "CryptCreateHash": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phHash", + "type": "HCRYPTHASH" + } + ], + "CryptHashData": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptHashSessionKey": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptDestroyHash": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + } + ], + "CryptSignHashA": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "szDescription", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pdwSigLen", + "type": "DWORD" + } + ], + "CryptSignHashW": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "szDescription", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pdwSigLen", + "type": "DWORD" + } + ], + "CryptVerifySignatureA": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "dwSigLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "szDescription", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptVerifySignatureW": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "dwSigLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "szDescription", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProviderA": [ + { + "name": "pszProvName", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + } + ], + "CryptSetProviderW": [ + { + "name": "pszProvName", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + } + ], + "CryptSetProviderExA": [ + { + "name": "pszProvName", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProviderExW": [ + { + "name": "pszProvName", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetDefaultProviderA": [ + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszProvName", + "type": "LPSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptGetDefaultProviderW": [ + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszProvName", + "type": "LPWSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptEnumProviderTypesA": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szTypeName", + "type": "LPSTR" + }, + { + "name": "pcbTypeName", + "type": "DWORD" + } + ], + "CryptEnumProviderTypesW": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szTypeName", + "type": "LPWSTR" + }, + { + "name": "pcbTypeName", + "type": "DWORD" + } + ], + "CryptEnumProvidersA": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szProvName", + "type": "LPSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptEnumProvidersW": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szProvName", + "type": "LPWSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptContextAddRef": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptDuplicateKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDuplicateHash": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phHash", + "type": "HCRYPTHASH" + } + ], + "GetEncSChannel": [ + { + "name": "pData", + "type": "BYTE" + }, + { + "name": "dwDecSize", + "type": "DWORD" + } + ], + "CryptFormatObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFormatType", + "type": "DWORD" + }, + { + "name": "dwFormatStrType", + "type": "DWORD" + }, + { + "name": "pFormatStruct", + "type": "void" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbFormat", + "type": "void" + }, + { + "name": "pcbFormat", + "type": "DWORD" + } + ], + "CryptEncodeObjectEx": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pEncodePara", + "type": "PCRYPT_ENCODE_PARA" + }, + { + "name": "pvEncoded", + "type": "void" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptEncodeObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptDecodeObjectEx": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pDecodePara", + "type": "PCRYPT_DECODE_PARA" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pcbStructInfo", + "type": "DWORD" + } + ], + "CryptDecodeObject": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pcbStructInfo", + "type": "DWORD" + } + ], + "CryptInstallOIDFunctionAddress": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "cFuncEntry", + "type": "DWORD" + }, + { + "name": "rgFuncEntry", + "type": "CRYPT_OID_FUNC_ENTRY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptInitOIDFunctionSet": [ + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetOIDFunctionAddress": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppvFuncAddr", + "type": "void" + }, + { + "name": "phFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + } + ], + "CryptGetDefaultOIDDllList": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pwszDllList", + "type": "WCHAR" + }, + { + "name": "pcchDllList", + "type": "DWORD" + } + ], + "CryptGetDefaultOIDFunctionAddress": [ + { + "name": "hFuncSet", + "type": "HCRYPTOIDFUNCSET" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppvFuncAddr", + "type": "void" + }, + { + "name": "phFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + } + ], + "CryptFreeOIDFunctionAddress": [ + { + "name": "hFuncAddr", + "type": "HCRYPTOIDFUNCADDR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptRegisterOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + }, + { + "name": "pszOverrideFuncName", + "type": "LPCSTR" + } + ], + "CryptUnregisterOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + } + ], + "CryptRegisterDefaultOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + } + ], + "CryptUnregisterDefaultOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pwszDll", + "type": "LPCWSTR" + } + ], + "CryptSetOIDFunctionValue": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszValueName", + "type": "LPCWSTR" + }, + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pbValueData", + "type": "BYTE" + }, + { + "name": "cbValueData", + "type": "DWORD" + } + ], + "CryptGetOIDFunctionValue": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "pwszValueName", + "type": "LPCWSTR" + }, + { + "name": "pdwValueType", + "type": "DWORD" + }, + { + "name": "pbValueData", + "type": "BYTE" + }, + { + "name": "pcbValueData", + "type": "DWORD" + } + ], + "CryptEnumOIDFunction": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pszFuncName", + "type": "LPCSTR" + }, + { + "name": "pszOID", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnumOIDFunc", + "type": "PFN_CRYPT_ENUM_OID_FUNC" + } + ], + "CryptFindOIDInfo": [ + { + "name": "dwKeyType", + "type": "DWORD" + }, + { + "name": "pvKey", + "type": "void" + }, + { + "name": "dwGroupId", + "type": "DWORD" + } + ], + "CryptRegisterOIDInfo": [ + { + "name": "pInfo", + "type": "PCCRYPT_OID_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptUnregisterOIDInfo": [ + { + "name": "pInfo", + "type": "PCCRYPT_OID_INFO" + } + ], + "CryptEnumOIDInfo": [ + { + "name": "dwGroupId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnumOIDInfo", + "type": "PFN_CRYPT_ENUM_OID_INFO" + } + ], + "CryptFindLocalizedName": [ + { + "name": "pwszCryptName", + "type": "LPCWSTR" + } + ], + "CryptMsgOpenToEncode": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "pvMsgEncodeInfo", + "type": "void" + }, + { + "name": "pszInnerContentObjID", + "type": "LPSTR" + }, + { + "name": "pStreamInfo", + "type": "PCMSG_STREAM_INFO" + } + ], + "CryptMsgCalculateEncodedLength": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "pvMsgEncodeInfo", + "type": "void" + }, + { + "name": "pszInnerContentObjID", + "type": "LPSTR" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "CryptMsgOpenToDecode": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwMsgType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "pRecipientInfo", + "type": "PCERT_INFO" + }, + { + "name": "pStreamInfo", + "type": "PCMSG_STREAM_INFO" + } + ], + "CryptMsgDuplicate": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + } + ], + "CryptMsgClose": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + } + ], + "CryptMsgUpdate": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "fFinal", + "type": "BOOL" + } + ], + "CryptMsgGetParam": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwParamType", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CryptMsgControl": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCtrlType", + "type": "DWORD" + }, + { + "name": "pvCtrlPara", + "type": "void" + } + ], + "CryptMsgVerifyCountersignatureEncoded": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "pbSignerInfoCountersignature", + "type": "PBYTE" + }, + { + "name": "cbSignerInfoCountersignature", + "type": "DWORD" + }, + { + "name": "pciCountersigner", + "type": "PCERT_INFO" + } + ], + "CryptMsgVerifyCountersignatureEncodedEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "pbSignerInfoCountersignature", + "type": "PBYTE" + }, + { + "name": "cbSignerInfoCountersignature", + "type": "DWORD" + }, + { + "name": "dwSignerType", + "type": "DWORD" + }, + { + "name": "pvSigner", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvExtra", + "type": "void" + } + ], + "CryptMsgCountersign": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "cCountersigners", + "type": "DWORD" + }, + { + "name": "rgCountersigners", + "type": "PCMSG_SIGNER_ENCODE_INFO" + } + ], + "CryptMsgCountersignEncoded": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignerInfo", + "type": "PBYTE" + }, + { + "name": "cbSignerInfo", + "type": "DWORD" + }, + { + "name": "cCountersigners", + "type": "DWORD" + }, + { + "name": "rgCountersigners", + "type": "PCMSG_SIGNER_ENCODE_INFO" + }, + { + "name": "pbCountersignature", + "type": "PBYTE" + }, + { + "name": "pcbCountersignature", + "type": "PDWORD" + } + ], + "CertOpenStore": [ + { + "name": "lpszStoreProvider", + "type": "LPCSTR" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvPara", + "type": "void" + } + ], + "CertDuplicateStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + } + ], + "CertSaveStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSaveAs", + "type": "DWORD" + }, + { + "name": "dwSaveTo", + "type": "DWORD" + }, + { + "name": "pvSaveToPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertCloseStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetSubjectCertificateFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId", + "type": "PCERT_INFO" + } + ], + "CertEnumCertificatesInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertFindCertificateInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertGetIssuerCertificateFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pSubjectContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pPrevIssuerContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertVerifySubjectCertificateContext": [ + { + "name": "pSubject", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pIssuer", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertDuplicateCertificateContext": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertCreateCertificateContext": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CertFreeCertificateContext": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertSetCertificateContextProperty": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCertificateContextProperty": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCertificateContextProperties": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertCreateCTLEntryFromCertificateContextProperties": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "cOptAttr", + "type": "DWORD" + }, + { + "name": "rgOptAttr", + "type": "PCRYPT_ATTRIBUTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pCtlEntry", + "type": "PCTL_ENTRY" + }, + { + "name": "pcbCtlEntry", + "type": "DWORD" + } + ], + "CertSetCertificateContextPropertiesFromCTLEntry": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCtlEntry", + "type": "PCTL_ENTRY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetCRLFromStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pIssuerContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CertEnumCRLsInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertFindCRLInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertDuplicateCRLContext": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertCreateCRLContext": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCrlEncoded", + "type": "BYTE" + }, + { + "name": "cbCrlEncoded", + "type": "DWORD" + } + ], + "CertFreeCRLContext": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertSetCRLContextProperty": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCRLContextProperty": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCRLContextProperties": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertFindCertificateInCRL": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "ppCrlEntry", + "type": "PCRL_ENTRY" + } + ], + "CertIsValidCRLForCertificate": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pCrl", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertAddEncodedCertificateToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddCertificateContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddSerializedElementToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "cbElement", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwContextTypeFlags", + "type": "DWORD" + }, + { + "name": "pdwContextType", + "type": "DWORD" + }, + { + "name": "ppvContext", + "type": "void" + } + ], + "CertDeleteCertificateFromStore": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddEncodedCRLToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCrlEncoded", + "type": "BYTE" + }, + { + "name": "cbCrlEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertAddCRLContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertDeleteCRLFromStore": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertSerializeCertificateStoreElement": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertSerializeCRLStoreElement": [ + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertDuplicateCTLContext": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertCreateCTLContext": [ + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlEncoded", + "type": "BYTE" + }, + { + "name": "cbCtlEncoded", + "type": "DWORD" + } + ], + "CertFreeCTLContext": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertSetCTLContextProperty": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetCTLContextProperty": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertEnumCTLContextProperties": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwPropId", + "type": "DWORD" + } + ], + "CertEnumCTLsInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pPrevCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertFindSubjectInCTL": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertFindCTLInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddEncodedCTLToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlEncoded", + "type": "BYTE" + }, + { + "name": "cbCtlEncoded", + "type": "DWORD" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddCTLContextToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertSerializeCTLStoreElement": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbElement", + "type": "BYTE" + }, + { + "name": "pcbElement", + "type": "DWORD" + } + ], + "CertDeleteCTLFromStore": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddCertificateLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCERT_CONTEXT" + } + ], + "CertAddCRLLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCrlContext", + "type": "PCCRL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCRL_CONTEXT" + } + ], + "CertAddCTLLinkToStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwAddDisposition", + "type": "DWORD" + }, + { + "name": "ppStoreContext", + "type": "PCCTL_CONTEXT" + } + ], + "CertAddStoreToCollection": [ + { + "name": "hCollectionStore", + "type": "HCERTSTORE" + }, + { + "name": "hSiblingStore", + "type": "HCERTSTORE" + }, + { + "name": "dwUpdateFlags", + "type": "DWORD" + }, + { + "name": "dwPriority", + "type": "DWORD" + } + ], + "CertRemoveStoreFromCollection": [ + { + "name": "hCollectionStore", + "type": "HCERTSTORE" + }, + { + "name": "hSiblingStore", + "type": "HCERTSTORE" + } + ], + "CertControlStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCtrlType", + "type": "DWORD" + }, + { + "name": "pvCtrlPara", + "type": "void" + } + ], + "CertSetStoreProperty": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CertGetStoreProperty": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CertRegisterSystemStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pStoreInfo", + "type": "PCERT_SYSTEM_STORE_INFO" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertRegisterPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszStoreName", + "type": "LPCWSTR" + }, + { + "name": "pStoreInfo", + "type": "PCERT_PHYSICAL_STORE_INFO" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CertUnregisterSystemStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertUnregisterPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszStoreName", + "type": "LPCWSTR" + } + ], + "CertEnumSystemStoreLocation": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_SYSTEM_STORE_LOCATION" + } + ], + "CertEnumSystemStore": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvSystemStoreLocationPara", + "type": "void" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_SYSTEM_STORE" + } + ], + "CertEnumPhysicalStore": [ + { + "name": "pvSystemStore", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CERT_ENUM_PHYSICAL_STORE" + } + ], + "CertGetEnhancedKeyUsage": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pUsage", + "type": "PCERT_ENHKEY_USAGE" + }, + { + "name": "pcbUsage", + "type": "DWORD" + } + ], + "CertSetEnhancedKeyUsage": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pUsage", + "type": "PCERT_ENHKEY_USAGE" + } + ], + "CertAddEnhancedKeyUsageIdentifier": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pszUsageIdentifier", + "type": "LPCSTR" + } + ], + "CertRemoveEnhancedKeyUsageIdentifier": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pszUsageIdentifier", + "type": "LPCSTR" + } + ], + "CertGetValidUsages": [ + { + "name": "cCerts", + "type": "DWORD" + }, + { + "name": "rghCerts", + "type": "PCCERT_CONTEXT" + }, + { + "name": "cNumOIDs", + "type": "int" + }, + { + "name": "rghOIDs", + "type": "LPSTR" + }, + { + "name": "pcbOIDs", + "type": "DWORD" + } + ], + "CryptMsgGetAndVerifySigner": [ + { + "name": "hCryptMsg", + "type": "HCRYPTMSG" + }, + { + "name": "cSignerStore", + "type": "DWORD" + }, + { + "name": "rghSignerStore", + "type": "HCERTSTORE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pdwSignerIndex", + "type": "DWORD" + } + ], + "CryptMsgSignCTL": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pbCtlContent", + "type": "BYTE" + }, + { + "name": "cbCtlContent", + "type": "DWORD" + }, + { + "name": "pSignInfo", + "type": "PCMSG_SIGNED_ENCODE_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CryptMsgEncodeAndSignCTL": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pCtlInfo", + "type": "PCTL_INFO" + }, + { + "name": "pSignInfo", + "type": "PCMSG_SIGNED_ENCODE_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CertFindSubjectInSortedCTL": [ + { + "name": "pSubjectIdentifier", + "type": "PCRYPT_DATA_BLOB" + }, + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pEncodedAttributes", + "type": "PCRYPT_DER_BLOB" + } + ], + "CertEnumSubjectInSortedCTL": [ + { + "name": "pCtlContext", + "type": "PCCTL_CONTEXT" + }, + { + "name": "ppvNextSubject", + "type": "void" + }, + { + "name": "pSubjectIdentifier", + "type": "PCRYPT_DER_BLOB" + }, + { + "name": "pEncodedAttributes", + "type": "PCRYPT_DER_BLOB" + } + ], + "CertVerifyCTLUsage": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "pSubjectUsage", + "type": "PCTL_USAGE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pVerifyUsagePara", + "type": "PCTL_VERIFY_USAGE_PARA" + }, + { + "name": "pVerifyUsageStatus", + "type": "PCTL_VERIFY_USAGE_STATUS" + } + ], + "CertVerifyRevocation": [ + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "dwRevType", + "type": "DWORD" + }, + { + "name": "cContext", + "type": "DWORD" + }, + { + "name": "rgpvContext", + "type": "PVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pRevPara", + "type": "PCERT_REVOCATION_PARA" + }, + { + "name": "pRevStatus", + "type": "PCERT_REVOCATION_STATUS" + } + ], + "CertCompareIntegerBlob": [ + { + "name": "pInt1", + "type": "PCRYPT_INTEGER_BLOB" + }, + { + "name": "pInt2", + "type": "PCRYPT_INTEGER_BLOB" + } + ], + "CertCompareCertificate": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId1", + "type": "PCERT_INFO" + }, + { + "name": "pCertId2", + "type": "PCERT_INFO" + } + ], + "CertCompareCertificateName": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertName1", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "pCertName2", + "type": "PCERT_NAME_BLOB" + } + ], + "CertIsRDNAttrsInCertificateName": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pCertName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "pRDN", + "type": "PCERT_RDN" + } + ], + "CertComparePublicKeyInfo": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pPublicKey1", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pPublicKey2", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CertGetPublicKeyLength": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pPublicKey", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CryptVerifyCertificateSignature": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pPublicKey", + "type": "PCERT_PUBLIC_KEY_INFO" + } + ], + "CryptVerifyCertificateSignatureEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwSubjectType", + "type": "DWORD" + }, + { + "name": "pvSubject", + "type": "void" + }, + { + "name": "dwIssuerType", + "type": "DWORD" + }, + { + "name": "pvIssuer", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvExtra", + "type": "void" + } + ], + "CertIsStrongHashToSign": [ + { + "name": "pStrongSignPara", + "type": "PCCERT_STRONG_SIGN_PARA" + }, + { + "name": "pwszCNGHashAlgid", + "type": "LPCWSTR" + }, + { + "name": "pSigningCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptHashToBeSigned": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptHashCertificate": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptHashCertificate2": [ + { + "name": "pwszCNGHashAlgid", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "cbEncoded", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptSignCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pbEncodedToBeSigned", + "type": "BYTE" + }, + { + "name": "cbEncodedToBeSigned", + "type": "DWORD" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pvHashAuxInfo", + "type": "void" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pcbSignature", + "type": "DWORD" + } + ], + "CryptSignAndEncodeCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "lpszStructType", + "type": "LPCSTR" + }, + { + "name": "pvStructInfo", + "type": "void" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pvHashAuxInfo", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + } + ], + "CertVerifyTimeValidity": [ + { + "name": "pTimeToVerify", + "type": "LPFILETIME" + }, + { + "name": "pCertInfo", + "type": "PCERT_INFO" + } + ], + "CertVerifyCRLTimeValidity": [ + { + "name": "pTimeToVerify", + "type": "LPFILETIME" + }, + { + "name": "pCrlInfo", + "type": "PCRL_INFO" + } + ], + "CertVerifyValidityNesting": [ + { + "name": "pSubjectInfo", + "type": "PCERT_INFO" + }, + { + "name": "pIssuerInfo", + "type": "PCERT_INFO" + } + ], + "CertVerifyCRLRevocation": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertId", + "type": "PCERT_INFO" + }, + { + "name": "cCrlInfo", + "type": "DWORD" + }, + { + "name": "rgpCrlInfo", + "type": "PCRL_INFO" + } + ], + "CertAlgIdToOID": [ + { + "name": "dwAlgId", + "type": "DWORD" + } + ], + "CertOIDToAlgId": [ + { + "name": "pszObjId", + "type": "LPCSTR" + } + ], + "CertFindExtension": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "cExtensions", + "type": "DWORD" + }, + { + "name": "rgExtensions", + "type": "CERT_EXTENSION" + } + ], + "CertFindAttribute": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "cAttr", + "type": "DWORD" + }, + { + "name": "rgAttr", + "type": "CRYPT_ATTRIBUTE" + } + ], + "CertFindRDNAttr": [ + { + "name": "pszObjId", + "type": "LPCSTR" + }, + { + "name": "pName", + "type": "PCERT_NAME_INFO" + } + ], + "CertGetIntendedKeyUsage": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pCertInfo", + "type": "PCERT_INFO" + }, + { + "name": "pbKeyUsage", + "type": "BYTE" + }, + { + "name": "cbKeyUsage", + "type": "DWORD" + } + ], + "CryptInstallDefaultContext": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwDefaultType", + "type": "DWORD" + }, + { + "name": "pvDefaultPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "phDefaultContext", + "type": "HCRYPTDEFAULTCONTEXT" + } + ], + "CryptUninstallDefaultContext": [ + { + "name": "hDefaultContext", + "type": "HCRYPTDEFAULTCONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CryptExportPublicKeyInfo": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptExportPublicKeyInfoEx": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPublicKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptExportPublicKeyInfoFromBCryptKeyHandle": [ + { + "name": "hBCryptKey", + "type": "BCRYPT_KEY_HANDLE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPublicKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pcbInfo", + "type": "DWORD" + } + ], + "CryptImportPublicKeyInfo": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptImportPublicKeyInfoEx": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "aiKeyAlg", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptImportPublicKeyInfoEx2": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "phKey", + "type": "BCRYPT_KEY_HANDLE" + } + ], + "CryptAcquireCertificatePrivateKey": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvParameters", + "type": "void" + }, + { + "name": "phCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "pdwKeySpec", + "type": "DWORD" + }, + { + "name": "pfCallerFreeProvOrNCryptKey", + "type": "BOOL" + } + ], + "CryptFindCertificateKeyProvInfo": [ + { + "name": "pCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + } + ], + "CryptImportPKCS8": [ + { + "name": "sPrivateKeyAndParams", + "type": "CRYPT_PKCS8_IMPORT_PARAMS" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "pvAuxInfo", + "type": "void" + } + ], + "CryptExportPKCS8": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "pszPrivateKeyObjId", + "type": "LPSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pbPrivateKeyBlob", + "type": "BYTE" + }, + { + "name": "pcbPrivateKeyBlob", + "type": "DWORD" + } + ], + "CryptExportPKCS8Ex": [ + { + "name": "psExportParams", + "type": "CRYPT_PKCS8_EXPORT_PARAMS" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvAuxInfo", + "type": "void" + }, + { + "name": "pbPrivateKeyBlob", + "type": "BYTE" + }, + { + "name": "pcbPrivateKeyBlob", + "type": "DWORD" + } + ], + "CryptHashPublicKeyInfo": [ + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CertRDNValueToStrA": [ + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pValue", + "type": "PCERT_RDN_VALUE_BLOB" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertRDNValueToStrW": [ + { + "name": "dwValueType", + "type": "DWORD" + }, + { + "name": "pValue", + "type": "PCERT_RDN_VALUE_BLOB" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertNameToStrA": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertNameToStrW": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pName", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "csz", + "type": "DWORD" + } + ], + "CertStrToNameA": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszX500", + "type": "LPCSTR" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + }, + { + "name": "ppszError", + "type": "LPCSTR" + } + ], + "CertStrToNameW": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszX500", + "type": "LPCWSTR" + }, + { + "name": "dwStrType", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbEncoded", + "type": "BYTE" + }, + { + "name": "pcbEncoded", + "type": "DWORD" + }, + { + "name": "ppszError", + "type": "LPCWSTR" + } + ], + "CertGetNameStringA": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvTypePara", + "type": "void" + }, + { + "name": "pszNameString", + "type": "LPSTR" + }, + { + "name": "cchNameString", + "type": "DWORD" + } + ], + "CertGetNameStringW": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvTypePara", + "type": "void" + }, + { + "name": "pszNameString", + "type": "LPWSTR" + }, + { + "name": "cchNameString", + "type": "DWORD" + } + ], + "CryptSignMessage": [ + { + "name": "pSignPara", + "type": "PCRYPT_SIGN_MESSAGE_PARA" + }, + { + "name": "fDetachedSignature", + "type": "BOOL" + }, + { + "name": "cToBeSigned", + "type": "DWORD" + }, + { + "name": "rgpbToBeSigned", + "type": "BYTE" + }, + { + "name": "rgcbToBeSigned", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyMessageSignature": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptGetMessageSignerCount": [ + { + "name": "dwMsgEncodingType", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + } + ], + "CryptGetMessageCertificates": [ + { + "name": "dwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "hCryptProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyDetachedMessageSignature": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbDetachedSignBlob", + "type": "BYTE" + }, + { + "name": "cbDetachedSignBlob", + "type": "DWORD" + }, + { + "name": "cToBeSigned", + "type": "DWORD" + }, + { + "name": "rgpbToBeSigned", + "type": "BYTE" + }, + { + "name": "rgcbToBeSigned", + "type": "DWORD" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptEncryptMessage": [ + { + "name": "pEncryptPara", + "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" + }, + { + "name": "cRecipientCert", + "type": "DWORD" + }, + { + "name": "rgpRecipientCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbToBeEncrypted", + "type": "BYTE" + }, + { + "name": "cbToBeEncrypted", + "type": "DWORD" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "pcbEncryptedBlob", + "type": "DWORD" + } + ], + "CryptDecryptMessage": [ + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "cbEncryptedBlob", + "type": "DWORD" + }, + { + "name": "pbDecrypted", + "type": "BYTE" + }, + { + "name": "pcbDecrypted", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptSignAndEncryptMessage": [ + { + "name": "pSignPara", + "type": "PCRYPT_SIGN_MESSAGE_PARA" + }, + { + "name": "pEncryptPara", + "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" + }, + { + "name": "cRecipientCert", + "type": "DWORD" + }, + { + "name": "rgpRecipientCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbToBeSignedAndEncrypted", + "type": "BYTE" + }, + { + "name": "cbToBeSignedAndEncrypted", + "type": "DWORD" + }, + { + "name": "pbSignedAndEncryptedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedAndEncryptedBlob", + "type": "DWORD" + } + ], + "CryptDecryptAndVerifyMessageSignature": [ + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbEncryptedBlob", + "type": "BYTE" + }, + { + "name": "cbEncryptedBlob", + "type": "DWORD" + }, + { + "name": "pbDecrypted", + "type": "BYTE" + }, + { + "name": "pcbDecrypted", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptDecodeMessage": [ + { + "name": "dwMsgTypeFlags", + "type": "DWORD" + }, + { + "name": "pDecryptPara", + "type": "PCRYPT_DECRYPT_MESSAGE_PARA" + }, + { + "name": "pVerifyPara", + "type": "PCRYPT_VERIFY_MESSAGE_PARA" + }, + { + "name": "dwSignerIndex", + "type": "DWORD" + }, + { + "name": "pbEncodedBlob", + "type": "BYTE" + }, + { + "name": "cbEncodedBlob", + "type": "DWORD" + }, + { + "name": "dwPrevInnerContentType", + "type": "DWORD" + }, + { + "name": "pdwMsgType", + "type": "DWORD" + }, + { + "name": "pdwInnerContentType", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + }, + { + "name": "ppXchgCert", + "type": "PCCERT_CONTEXT" + }, + { + "name": "ppSignerCert", + "type": "PCCERT_CONTEXT" + } + ], + "CryptHashMessage": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "fDetachedHash", + "type": "BOOL" + }, + { + "name": "cToBeHashed", + "type": "DWORD" + }, + { + "name": "rgpbToBeHashed", + "type": "BYTE" + }, + { + "name": "rgcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbHashedBlob", + "type": "BYTE" + }, + { + "name": "pcbHashedBlob", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptVerifyMessageHash": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "pbHashedBlob", + "type": "BYTE" + }, + { + "name": "cbHashedBlob", + "type": "DWORD" + }, + { + "name": "pbToBeHashed", + "type": "BYTE" + }, + { + "name": "pcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptVerifyDetachedMessageHash": [ + { + "name": "pHashPara", + "type": "PCRYPT_HASH_MESSAGE_PARA" + }, + { + "name": "pbDetachedHashBlob", + "type": "BYTE" + }, + { + "name": "cbDetachedHashBlob", + "type": "DWORD" + }, + { + "name": "cToBeHashed", + "type": "DWORD" + }, + { + "name": "rgpbToBeHashed", + "type": "BYTE" + }, + { + "name": "rgcbToBeHashed", + "type": "DWORD" + }, + { + "name": "pbComputedHash", + "type": "BYTE" + }, + { + "name": "pcbComputedHash", + "type": "DWORD" + } + ], + "CryptSignMessageWithKey": [ + { + "name": "pSignPara", + "type": "PCRYPT_KEY_SIGN_MESSAGE_PARA" + }, + { + "name": "pbToBeSigned", + "type": "BYTE" + }, + { + "name": "cbToBeSigned", + "type": "DWORD" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "pcbSignedBlob", + "type": "DWORD" + } + ], + "CryptVerifyMessageSignatureWithKey": [ + { + "name": "pVerifyPara", + "type": "PCRYPT_KEY_VERIFY_MESSAGE_PARA" + }, + { + "name": "pPublicKeyInfo", + "type": "PCERT_PUBLIC_KEY_INFO" + }, + { + "name": "pbSignedBlob", + "type": "BYTE" + }, + { + "name": "cbSignedBlob", + "type": "DWORD" + }, + { + "name": "pbDecoded", + "type": "BYTE" + }, + { + "name": "pcbDecoded", + "type": "DWORD" + } + ], + "CertOpenSystemStoreA": [ + { + "name": "hProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "szSubsystemProtocol", + "type": "LPCSTR" + } + ], + "CertOpenSystemStoreW": [ + { + "name": "hProv", + "type": "HCRYPTPROV_LEGACY" + }, + { + "name": "szSubsystemProtocol", + "type": "LPCWSTR" + } + ], + "CertAddEncodedCertificateToSystemStoreA": [ + { + "name": "szCertStoreName", + "type": "LPCSTR" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CertAddEncodedCertificateToSystemStoreW": [ + { + "name": "szCertStoreName", + "type": "LPCWSTR" + }, + { + "name": "pbCertEncoded", + "type": "BYTE" + }, + { + "name": "cbCertEncoded", + "type": "DWORD" + } + ], + "CryptQueryObject": [ + { + "name": "dwObjectType", + "type": "DWORD" + }, + { + "name": "pvObject", + "type": "void" + }, + { + "name": "dwExpectedContentTypeFlags", + "type": "DWORD" + }, + { + "name": "dwExpectedFormatTypeFlags", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwMsgAndCertEncodingType", + "type": "DWORD" + }, + { + "name": "pdwContentType", + "type": "DWORD" + }, + { + "name": "pdwFormatType", + "type": "DWORD" + }, + { + "name": "phCertStore", + "type": "HCERTSTORE" + }, + { + "name": "phMsg", + "type": "HCRYPTMSG" + }, + { + "name": "ppvContext", + "type": "void" + } + ], + "CryptMemAlloc": [ + { + "name": "cbSize", + "type": "ULONG" + } + ], + "CryptMemRealloc": [ + { + "name": "pv", + "type": "LPVOID" + }, + { + "name": "cbSize", + "type": "ULONG" + } + ], + "CryptMemFree": [ + { + "name": "pv", + "type": "LPVOID" + } + ], + "CryptCreateAsyncHandle": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phAsync", + "type": "PHCRYPTASYNC" + } + ], + "CryptGetAsyncParam": [ + { + "name": "hAsync", + "type": "HCRYPTASYNC" + }, + { + "name": "pszParamOid", + "type": "LPSTR" + }, + { + "name": "ppvParam", + "type": "LPVOID" + }, + { + "name": "ppfnFree", + "type": "PFN_CRYPT_ASYNC_PARAM_FREE_FUNC" + } + ], + "CryptCloseAsyncHandle": [ + { + "name": "hAsync", + "type": "HCRYPTASYNC" + } + ], + "CryptRetrieveObjectByUrlA": [ + { + "name": "pszUrl", + "type": "LPCSTR" + }, + { + "name": "pszObjectOid", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "hAsyncRetrieve", + "type": "HCRYPTASYNC" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pvVerify", + "type": "LPVOID" + }, + { + "name": "pAuxInfo", + "type": "PCRYPT_RETRIEVE_AUX_INFO" + } + ], + "CryptRetrieveObjectByUrlW": [ + { + "name": "pszUrl", + "type": "LPCWSTR" + }, + { + "name": "pszObjectOid", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "hAsyncRetrieve", + "type": "HCRYPTASYNC" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pvVerify", + "type": "LPVOID" + }, + { + "name": "pAuxInfo", + "type": "PCRYPT_RETRIEVE_AUX_INFO" + } + ], + "CryptGetObjectUrl": [ + { + "name": "pszUrlOid", + "type": "LPCSTR" + }, + { + "name": "pvPara", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pUrlArray", + "type": "PCRYPT_URL_ARRAY" + }, + { + "name": "pcbUrlArray", + "type": "DWORD" + }, + { + "name": "pUrlInfo", + "type": "PCRYPT_URL_INFO" + }, + { + "name": "pcbUrlInfo", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CryptGetTimeValidObject": [ + { + "name": "pszTimeValidOid", + "type": "LPCSTR" + }, + { + "name": "pvPara", + "type": "LPVOID" + }, + { + "name": "pIssuer", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pftValidFor", + "type": "LPFILETIME" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pExtraInfo", + "type": "PCRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO" + } + ], + "CertCreateSelfSignCertificate": [ + { + "name": "hCryptProvOrNCryptKey", + "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" + }, + { + "name": "pSubjectIssuerBlob", + "type": "PCERT_NAME_BLOB" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pKeyProvInfo", + "type": "PCRYPT_KEY_PROV_INFO" + }, + { + "name": "pSignatureAlgorithm", + "type": "PCRYPT_ALGORITHM_IDENTIFIER" + }, + { + "name": "pStartTime", + "type": "PSYSTEMTIME" + }, + { + "name": "pEndTime", + "type": "PSYSTEMTIME" + }, + { + "name": "pExtensions", + "type": "PCERT_EXTENSIONS" + } + ], + "CryptGetKeyIdentifierProperty": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvData", + "type": "void" + }, + { + "name": "pcbData", + "type": "DWORD" + } + ], + "CryptSetKeyIdentifierProperty": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvData", + "type": "void" + } + ], + "CryptEnumKeyIdentifierProperties": [ + { + "name": "pKeyIdentifier", + "type": "CRYPT_HASH_BLOB" + }, + { + "name": "dwPropId", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszComputerName", + "type": "LPCWSTR" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pvArg", + "type": "void" + }, + { + "name": "pfnEnum", + "type": "PFN_CRYPT_ENUM_KEYID_PROP" + } + ], + "CryptCreateKeyIdentifierFromCSP": [ + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "pszPubKeyOID", + "type": "LPCSTR" + }, + { + "name": "pPubKeyStruc", + "type": "PUBLICKEYSTRUC" + }, + { + "name": "cbPubKeyStruc", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "pcbHash", + "type": "DWORD" + } + ], + "CertCreateCertificateChainEngine": [ + { + "name": "pConfig", + "type": "PCERT_CHAIN_ENGINE_CONFIG" + }, + { + "name": "phChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertFreeCertificateChainEngine": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertResyncCertificateChainEngine": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + } + ], + "CertGetCertificateChain": [ + { + "name": "hChainEngine", + "type": "HCERTCHAINENGINE" + }, + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pTime", + "type": "LPFILETIME" + }, + { + "name": "hAdditionalStore", + "type": "HCERTSTORE" + }, + { + "name": "pChainPara", + "type": "PCERT_CHAIN_PARA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + }, + { + "name": "ppChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFreeCertificateChain": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertDuplicateCertificateChain": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFindChainInStore": [ + { + "name": "hCertStore", + "type": "HCERTSTORE" + }, + { + "name": "dwCertEncodingType", + "type": "DWORD" + }, + { + "name": "dwFindFlags", + "type": "DWORD" + }, + { + "name": "dwFindType", + "type": "DWORD" + }, + { + "name": "pvFindPara", + "type": "void" + }, + { + "name": "pPrevChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertVerifyCertificateChainPolicy": [ + { + "name": "pszPolicyOID", + "type": "LPCSTR" + }, + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + }, + { + "name": "pPolicyPara", + "type": "PCERT_CHAIN_POLICY_PARA" + }, + { + "name": "pPolicyStatus", + "type": "PCERT_CHAIN_POLICY_STATUS" + } + ], + "CryptStringToBinaryA": [ + { + "name": "pszString", + "type": "LPCSTR" + }, + { + "name": "cchString", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "pcbBinary", + "type": "DWORD" + }, + { + "name": "pdwSkip", + "type": "DWORD" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CryptStringToBinaryW": [ + { + "name": "pszString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "pcbBinary", + "type": "DWORD" + }, + { + "name": "pdwSkip", + "type": "DWORD" + }, + { + "name": "pdwFlags", + "type": "DWORD" + } + ], + "CryptBinaryToStringA": [ + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "cbBinary", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszString", + "type": "LPSTR" + }, + { + "name": "pcchString", + "type": "DWORD" + } + ], + "CryptBinaryToStringW": [ + { + "name": "pbBinary", + "type": "BYTE" + }, + { + "name": "cbBinary", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszString", + "type": "LPWSTR" + }, + { + "name": "pcchString", + "type": "DWORD" + } + ], + "PFXImportCertStore": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXIsPFXBlob": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + } + ], + "PFXVerifyPassword": [ + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXExportCertStoreEx": [ + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "pvPara", + "type": "void" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "PFXExportCertStore": [ + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pPFX", + "type": "CRYPT_DATA_BLOB" + }, + { + "name": "szPassword", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertOpenServerOcspResponse": [ + { + "name": "pChainContext", + "type": "PCCERT_CHAIN_CONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pOpenPara", + "type": "PCERT_SERVER_OCSP_RESPONSE_OPEN_PARA" + } + ], + "CertAddRefServerOcspResponse": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + } + ], + "CertCloseServerOcspResponse": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CertGetServerOcspResponseContext": [ + { + "name": "hServerOcspResponse", + "type": "HCERT_SERVER_OCSP_RESPONSE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CertAddRefServerOcspResponseContext": [ + { + "name": "pServerOcspResponseContext", + "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" + } + ], + "CertFreeServerOcspResponseContext": [ + { + "name": "pServerOcspResponseContext", + "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" + } + ], + "CertRetrieveLogoOrBiometricInfo": [ + { + "name": "pCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "lpszLogoOrBiometricType", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "void" + }, + { + "name": "ppbData", + "type": "BYTE" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "ppwszMimeType", + "type": "LPWSTR" + } + ], + "CertSelectCertificateChains": [ + { + "name": "pSelectionContext", + "type": "LPCGUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pChainParameters", + "type": "PCCERT_SELECT_CHAIN_PARA" + }, + { + "name": "cCriteria", + "type": "DWORD" + }, + { + "name": "rgpCriteria", + "type": "PCCERT_SELECT_CRITERIA" + }, + { + "name": "hStore", + "type": "HCERTSTORE" + }, + { + "name": "pcSelection", + "type": "PDWORD" + }, + { + "name": "pprgpSelection", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CertFreeCertificateChainList": [ + { + "name": "prgpSelection", + "type": "PCCERT_CHAIN_CONTEXT" + } + ], + "CryptRetrieveTimeStamp": [ + { + "name": "wszUrl", + "type": "LPCWSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "pszHashId", + "type": "LPCSTR" + }, + { + "name": "pPara", + "type": "CRYPT_TIMESTAMP_PARA" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "ppTsContext", + "type": "PCRYPT_TIMESTAMP_CONTEXT" + }, + { + "name": "ppTsSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "phStore", + "type": "HCERTSTORE" + } + ], + "CryptVerifyTimeStampSignature": [ + { + "name": "pbTSContentInfo", + "type": "BYTE" + }, + { + "name": "cbTSContentInfo", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "hAdditionalStore", + "type": "HCERTSTORE" + }, + { + "name": "ppTsContext", + "type": "PCRYPT_TIMESTAMP_CONTEXT" + }, + { + "name": "ppTsSigner", + "type": "PCCERT_CONTEXT" + }, + { + "name": "phStore", + "type": "HCERTSTORE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/evntcons.json b/qiling/extensions/windows_sdk/sechost.json similarity index 100% rename from qiling/extensions/windows_sdk/evntcons.json rename to qiling/extensions/windows_sdk/sechost.json diff --git a/qiling/extensions/windows_sdk/securityappcontainer.json b/qiling/extensions/windows_sdk/securityappcontainer.json deleted file mode 100644 index 0db836b65..000000000 --- a/qiling/extensions/windows_sdk/securityappcontainer.json +++ /dev/null @@ -1,24 +0,0 @@ -{ - "GetAppContainerNamedObjectPath": [ - { - "name": "Token", - "type": "HANDLE" - }, - { - "name": "AppContainerSid", - "type": "PSID" - }, - { - "name": "ObjectPathLength", - "type": "ULONG" - }, - { - "name": "ObjectPath", - "type": "LPWSTR" - }, - { - "name": "ReturnLength", - "type": "PULONG" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/securitybaseapi.json b/qiling/extensions/windows_sdk/securitybaseapi.json deleted file mode 100644 index ea80d7425..000000000 --- a/qiling/extensions/windows_sdk/securitybaseapi.json +++ /dev/null @@ -1,1586 +0,0 @@ -{ - "AccessCheck": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "ClientToken", - "type": "HANDLE" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "PrivilegeSet", - "type": "PPRIVILEGE_SET" - }, - { - "name": "PrivilegeSetLength", - "type": "LPDWORD" - }, - { - "name": "GrantedAccess", - "type": "LPDWORD" - }, - { - "name": "AccessStatus", - "type": "LPBOOL" - } - ], - "AccessCheckByType": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "PrincipalSelfSid", - "type": "PSID" - }, - { - "name": "ClientToken", - "type": "HANDLE" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "ObjectTypeList", - "type": "POBJECT_TYPE_LIST" - }, - { - "name": "ObjectTypeListLength", - "type": "DWORD" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "PrivilegeSet", - "type": "PPRIVILEGE_SET" - }, - { - "name": "PrivilegeSetLength", - "type": "LPDWORD" - }, - { - "name": "GrantedAccess", - "type": "LPDWORD" - }, - { - "name": "AccessStatus", - "type": "LPBOOL" - } - ], - "AccessCheckByTypeResultList": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "PrincipalSelfSid", - "type": "PSID" - }, - { - "name": "ClientToken", - "type": "HANDLE" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "ObjectTypeList", - "type": "POBJECT_TYPE_LIST" - }, - { - "name": "ObjectTypeListLength", - "type": "DWORD" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "PrivilegeSet", - "type": "PPRIVILEGE_SET" - }, - { - "name": "PrivilegeSetLength", - "type": "LPDWORD" - }, - { - "name": "GrantedAccessList", - "type": "LPDWORD" - }, - { - "name": "AccessStatusList", - "type": "LPDWORD" - } - ], - "AddAccessAllowedAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "AccessMask", - "type": "DWORD" - }, - { - "name": "pSid", - "type": "PSID" - } - ], - "AddAccessAllowedAceEx": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "AceFlags", - "type": "DWORD" - }, - { - "name": "AccessMask", - "type": "DWORD" - }, - { - "name": "pSid", - "type": "PSID" - } - ], - "AddAccessAllowedObjectAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "AceFlags", - "type": "DWORD" - }, - { - "name": "AccessMask", - "type": "DWORD" - }, - { - "name": "ObjectTypeGuid", - "type": "GUID" - }, - { - "name": "InheritedObjectTypeGuid", - "type": "GUID" - }, - { - "name": "pSid", - "type": "PSID" - } - ], - "AddAccessDeniedAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "AccessMask", - "type": "DWORD" - }, - { - "name": "pSid", - "type": "PSID" - } - ], - "AddAccessDeniedAceEx": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "AceFlags", - "type": "DWORD" - }, - { - "name": "AccessMask", - "type": "DWORD" - }, - { - "name": "pSid", - "type": "PSID" - } - ], - "AddAccessDeniedObjectAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "AceFlags", - "type": "DWORD" - }, - { - "name": "AccessMask", - "type": "DWORD" - }, - { - "name": "ObjectTypeGuid", - "type": "GUID" - }, - { - "name": "InheritedObjectTypeGuid", - "type": "GUID" - }, - { - "name": "pSid", - "type": "PSID" - } - ], - "AddAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "dwStartingAceIndex", - "type": "DWORD" - }, - { - "name": "pAceList", - "type": "LPVOID" - }, - { - "name": "nAceListLength", - "type": "DWORD" - } - ], - "AddAuditAccessAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "dwAccessMask", - "type": "DWORD" - }, - { - "name": "pSid", - "type": "PSID" - }, - { - "name": "bAuditSuccess", - "type": "BOOL" - }, - { - "name": "bAuditFailure", - "type": "BOOL" - } - ], - "AddAuditAccessAceEx": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "AceFlags", - "type": "DWORD" - }, - { - "name": "dwAccessMask", - "type": "DWORD" - }, - { - "name": "pSid", - "type": "PSID" - }, - { - "name": "bAuditSuccess", - "type": "BOOL" - }, - { - "name": "bAuditFailure", - "type": "BOOL" - } - ], - "AddAuditAccessObjectAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "AceFlags", - "type": "DWORD" - }, - { - "name": "AccessMask", - "type": "DWORD" - }, - { - "name": "ObjectTypeGuid", - "type": "GUID" - }, - { - "name": "InheritedObjectTypeGuid", - "type": "GUID" - }, - { - "name": "pSid", - "type": "PSID" - }, - { - "name": "bAuditSuccess", - "type": "BOOL" - }, - { - "name": "bAuditFailure", - "type": "BOOL" - } - ], - "AddMandatoryAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "AceFlags", - "type": "DWORD" - }, - { - "name": "MandatoryPolicy", - "type": "DWORD" - }, - { - "name": "pLabelSid", - "type": "PSID" - } - ], - "AddResourceAttributeAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "AceFlags", - "type": "DWORD" - }, - { - "name": "AccessMask", - "type": "DWORD" - }, - { - "name": "pSid", - "type": "PSID" - }, - { - "name": "pAttributeInfo", - "type": "PCLAIM_SECURITY_ATTRIBUTES_INFORMATION" - }, - { - "name": "pReturnLength", - "type": "PDWORD" - } - ], - "AddScopedPolicyIDAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "AceFlags", - "type": "DWORD" - }, - { - "name": "AccessMask", - "type": "DWORD" - }, - { - "name": "pSid", - "type": "PSID" - } - ], - "AdjustTokenGroups": [ - { - "name": "TokenHandle", - "type": "HANDLE" - }, - { - "name": "ResetToDefault", - "type": "BOOL" - }, - { - "name": "NewState", - "type": "PTOKEN_GROUPS" - }, - { - "name": "BufferLength", - "type": "DWORD" - }, - { - "name": "PreviousState", - "type": "PTOKEN_GROUPS" - }, - { - "name": "ReturnLength", - "type": "PDWORD" - } - ], - "AdjustTokenPrivileges": [ - { - "name": "TokenHandle", - "type": "HANDLE" - }, - { - "name": "DisableAllPrivileges", - "type": "BOOL" - }, - { - "name": "NewState", - "type": "PTOKEN_PRIVILEGES" - }, - { - "name": "BufferLength", - "type": "DWORD" - }, - { - "name": "PreviousState", - "type": "PTOKEN_PRIVILEGES" - }, - { - "name": "ReturnLength", - "type": "PDWORD" - } - ], - "AllocateAndInitializeSid": [ - { - "name": "pIdentifierAuthority", - "type": "PSID_IDENTIFIER_AUTHORITY" - }, - { - "name": "nSubAuthorityCount", - "type": "BYTE" - }, - { - "name": "nSubAuthority0", - "type": "DWORD" - }, - { - "name": "nSubAuthority1", - "type": "DWORD" - }, - { - "name": "nSubAuthority2", - "type": "DWORD" - }, - { - "name": "nSubAuthority3", - "type": "DWORD" - }, - { - "name": "nSubAuthority4", - "type": "DWORD" - }, - { - "name": "nSubAuthority5", - "type": "DWORD" - }, - { - "name": "nSubAuthority6", - "type": "DWORD" - }, - { - "name": "nSubAuthority7", - "type": "DWORD" - }, - { - "name": "pSid", - "type": "PSID" - } - ], - "AllocateLocallyUniqueId": [ - { - "name": "Luid", - "type": "PLUID" - } - ], - "AreAllAccessesGranted": [ - { - "name": "GrantedAccess", - "type": "DWORD" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - } - ], - "AreAnyAccessesGranted": [ - { - "name": "GrantedAccess", - "type": "DWORD" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - } - ], - "CheckTokenMembership": [ - { - "name": "TokenHandle", - "type": "HANDLE" - }, - { - "name": "SidToCheck", - "type": "PSID" - }, - { - "name": "IsMember", - "type": "PBOOL" - } - ], - "CheckTokenCapability": [ - { - "name": "TokenHandle", - "type": "HANDLE" - }, - { - "name": "CapabilitySidToCheck", - "type": "PSID" - }, - { - "name": "HasCapability", - "type": "PBOOL" - } - ], - "CheckTokenMembershipEx": [ - { - "name": "TokenHandle", - "type": "HANDLE" - }, - { - "name": "SidToCheck", - "type": "PSID" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "IsMember", - "type": "PBOOL" - } - ], - "ConvertToAutoInheritPrivateObjectSecurity": [ - { - "name": "ParentDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "CurrentSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "NewSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "ObjectType", - "type": "GUID" - }, - { - "name": "IsDirectoryObject", - "type": "BOOLEAN" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - } - ], - "CopySid": [ - { - "name": "nDestinationSidLength", - "type": "DWORD" - }, - { - "name": "pDestinationSid", - "type": "PSID" - }, - { - "name": "pSourceSid", - "type": "PSID" - } - ], - "CreatePrivateObjectSecurity": [ - { - "name": "ParentDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "CreatorDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "NewDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "IsDirectoryObject", - "type": "BOOL" - }, - { - "name": "Token", - "type": "HANDLE" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - } - ], - "CreatePrivateObjectSecurityEx": [ - { - "name": "ParentDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "CreatorDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "NewDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "ObjectType", - "type": "GUID" - }, - { - "name": "IsContainerObject", - "type": "BOOL" - }, - { - "name": "AutoInheritFlags", - "type": "ULONG" - }, - { - "name": "Token", - "type": "HANDLE" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - } - ], - "CreatePrivateObjectSecurityWithMultipleInheritance": [ - { - "name": "ParentDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "CreatorDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "NewDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "ObjectTypes", - "type": "GUID" - }, - { - "name": "GuidCount", - "type": "ULONG" - }, - { - "name": "IsContainerObject", - "type": "BOOL" - }, - { - "name": "AutoInheritFlags", - "type": "ULONG" - }, - { - "name": "Token", - "type": "HANDLE" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - } - ], - "CreateRestrictedToken": [ - { - "name": "ExistingTokenHandle", - "type": "HANDLE" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "DisableSidCount", - "type": "DWORD" - }, - { - "name": "SidsToDisable", - "type": "PSID_AND_ATTRIBUTES" - }, - { - "name": "DeletePrivilegeCount", - "type": "DWORD" - }, - { - "name": "PrivilegesToDelete", - "type": "PLUID_AND_ATTRIBUTES" - }, - { - "name": "RestrictedSidCount", - "type": "DWORD" - }, - { - "name": "SidsToRestrict", - "type": "PSID_AND_ATTRIBUTES" - }, - { - "name": "NewTokenHandle", - "type": "PHANDLE" - } - ], - "CreateWellKnownSid": [ - { - "name": "WellKnownSidType", - "type": "WELL_KNOWN_SID_TYPE" - }, - { - "name": "DomainSid", - "type": "PSID" - }, - { - "name": "pSid", - "type": "PSID" - }, - { - "name": "cbSid", - "type": "DWORD" - } - ], - "EqualDomainSid": [ - { - "name": "pSid1", - "type": "PSID" - }, - { - "name": "pSid2", - "type": "PSID" - }, - { - "name": "pfEqual", - "type": "BOOL" - } - ], - "DeleteAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceIndex", - "type": "DWORD" - } - ], - "DestroyPrivateObjectSecurity": [ - { - "name": "ObjectDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "DuplicateToken": [ - { - "name": "ExistingTokenHandle", - "type": "HANDLE" - }, - { - "name": "ImpersonationLevel", - "type": "SECURITY_IMPERSONATION_LEVEL" - }, - { - "name": "DuplicateTokenHandle", - "type": "PHANDLE" - } - ], - "DuplicateTokenEx": [ - { - "name": "hExistingToken", - "type": "HANDLE" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "lpTokenAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "ImpersonationLevel", - "type": "SECURITY_IMPERSONATION_LEVEL" - }, - { - "name": "TokenType", - "type": "TOKEN_TYPE" - }, - { - "name": "phNewToken", - "type": "PHANDLE" - } - ], - "EqualPrefixSid": [ - { - "name": "pSid1", - "type": "PSID" - }, - { - "name": "pSid2", - "type": "PSID" - } - ], - "EqualSid": [ - { - "name": "pSid1", - "type": "PSID" - }, - { - "name": "pSid2", - "type": "PSID" - } - ], - "FindFirstFreeAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "pAce", - "type": "LPVOID" - } - ], - "FreeSid": [ - { - "name": "pSid", - "type": "PSID" - } - ], - "GetAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceIndex", - "type": "DWORD" - }, - { - "name": "pAce", - "type": "LPVOID" - } - ], - "GetAclInformation": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "pAclInformation", - "type": "LPVOID" - }, - { - "name": "nAclInformationLength", - "type": "DWORD" - }, - { - "name": "dwAclInformationClass", - "type": "ACL_INFORMATION_CLASS" - } - ], - "GetKernelObjectSecurity": [ - { - "name": "Handle", - "type": "HANDLE" - }, - { - "name": "RequestedInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "nLength", - "type": "DWORD" - }, - { - "name": "lpnLengthNeeded", - "type": "LPDWORD" - } - ], - "GetLengthSid": [ - { - "name": "pSid", - "type": "PSID" - } - ], - "GetPrivateObjectSecurity": [ - { - "name": "ObjectDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "ResultantDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "DescriptorLength", - "type": "DWORD" - }, - { - "name": "ReturnLength", - "type": "PDWORD" - } - ], - "GetSecurityDescriptorControl": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "pControl", - "type": "PSECURITY_DESCRIPTOR_CONTROL" - }, - { - "name": "lpdwRevision", - "type": "LPDWORD" - } - ], - "GetSecurityDescriptorDacl": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "lpbDaclPresent", - "type": "LPBOOL" - }, - { - "name": "pDacl", - "type": "PACL" - }, - { - "name": "lpbDaclDefaulted", - "type": "LPBOOL" - } - ], - "GetSecurityDescriptorGroup": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "pGroup", - "type": "PSID" - }, - { - "name": "lpbGroupDefaulted", - "type": "LPBOOL" - } - ], - "GetSecurityDescriptorLength": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "GetSecurityDescriptorOwner": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "pOwner", - "type": "PSID" - }, - { - "name": "lpbOwnerDefaulted", - "type": "LPBOOL" - } - ], - "GetSecurityDescriptorRMControl": [ - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "RMControl", - "type": "PUCHAR" - } - ], - "GetSecurityDescriptorSacl": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "lpbSaclPresent", - "type": "LPBOOL" - }, - { - "name": "pSacl", - "type": "PACL" - }, - { - "name": "lpbSaclDefaulted", - "type": "LPBOOL" - } - ], - "GetSidIdentifierAuthority": [ - { - "name": "pSid", - "type": "PSID" - } - ], - "GetSidLengthRequired": [ - { - "name": "nSubAuthorityCount", - "type": "UCHAR" - } - ], - "GetSidSubAuthority": [ - { - "name": "pSid", - "type": "PSID" - }, - { - "name": "nSubAuthority", - "type": "DWORD" - } - ], - "GetSidSubAuthorityCount": [ - { - "name": "pSid", - "type": "PSID" - } - ], - "GetTokenInformation": [ - { - "name": "TokenHandle", - "type": "HANDLE" - }, - { - "name": "TokenInformationClass", - "type": "TOKEN_INFORMATION_CLASS" - }, - { - "name": "TokenInformation", - "type": "LPVOID" - }, - { - "name": "TokenInformationLength", - "type": "DWORD" - }, - { - "name": "ReturnLength", - "type": "PDWORD" - } - ], - "GetWindowsAccountDomainSid": [ - { - "name": "pSid", - "type": "PSID" - }, - { - "name": "pDomainSid", - "type": "PSID" - }, - { - "name": "cbDomainSid", - "type": "DWORD" - } - ], - "ImpersonateAnonymousToken": [ - { - "name": "ThreadHandle", - "type": "HANDLE" - } - ], - "ImpersonateLoggedOnUser": [ - { - "name": "hToken", - "type": "HANDLE" - } - ], - "ImpersonateSelf": [ - { - "name": "ImpersonationLevel", - "type": "SECURITY_IMPERSONATION_LEVEL" - } - ], - "InitializeAcl": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "nAclLength", - "type": "DWORD" - }, - { - "name": "dwAclRevision", - "type": "DWORD" - } - ], - "InitializeSecurityDescriptor": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "dwRevision", - "type": "DWORD" - } - ], - "InitializeSid": [ - { - "name": "Sid", - "type": "PSID" - }, - { - "name": "pIdentifierAuthority", - "type": "PSID_IDENTIFIER_AUTHORITY" - }, - { - "name": "nSubAuthorityCount", - "type": "BYTE" - } - ], - "IsTokenRestricted": [ - { - "name": "TokenHandle", - "type": "HANDLE" - } - ], - "IsValidAcl": [ - { - "name": "pAcl", - "type": "PACL" - } - ], - "IsValidSecurityDescriptor": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "IsValidSid": [ - { - "name": "pSid", - "type": "PSID" - } - ], - "IsWellKnownSid": [ - { - "name": "pSid", - "type": "PSID" - }, - { - "name": "WellKnownSidType", - "type": "WELL_KNOWN_SID_TYPE" - } - ], - "MakeAbsoluteSD": [ - { - "name": "pSelfRelativeSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "pAbsoluteSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "lpdwAbsoluteSecurityDescriptorSize", - "type": "LPDWORD" - }, - { - "name": "pDacl", - "type": "PACL" - }, - { - "name": "lpdwDaclSize", - "type": "LPDWORD" - }, - { - "name": "pSacl", - "type": "PACL" - }, - { - "name": "lpdwSaclSize", - "type": "LPDWORD" - }, - { - "name": "pOwner", - "type": "PSID" - }, - { - "name": "lpdwOwnerSize", - "type": "LPDWORD" - }, - { - "name": "pPrimaryGroup", - "type": "PSID" - }, - { - "name": "lpdwPrimaryGroupSize", - "type": "LPDWORD" - } - ], - "MakeSelfRelativeSD": [ - { - "name": "pAbsoluteSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "pSelfRelativeSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - } - ], - "MapGenericMask": [ - { - "name": "AccessMask", - "type": "PDWORD" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - } - ], - "PrivilegeCheck": [ - { - "name": "ClientToken", - "type": "HANDLE" - }, - { - "name": "RequiredPrivileges", - "type": "PPRIVILEGE_SET" - }, - { - "name": "pfResult", - "type": "LPBOOL" - } - ], - "QuerySecurityAccessMask": [ - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "DesiredAccess", - "type": "LPDWORD" - } - ], - "RevertToSelf": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetAclInformation": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "pAclInformation", - "type": "LPVOID" - }, - { - "name": "nAclInformationLength", - "type": "DWORD" - }, - { - "name": "dwAclInformationClass", - "type": "ACL_INFORMATION_CLASS" - } - ], - "SetKernelObjectSecurity": [ - { - "name": "Handle", - "type": "HANDLE" - }, - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "SetPrivateObjectSecurity": [ - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "ModificationDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "ObjectsSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "Token", - "type": "HANDLE" - } - ], - "SetPrivateObjectSecurityEx": [ - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "ModificationDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "ObjectsSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "AutoInheritFlags", - "type": "ULONG" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "Token", - "type": "HANDLE" - } - ], - "SetSecurityAccessMask": [ - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "DesiredAccess", - "type": "LPDWORD" - } - ], - "SetSecurityDescriptorControl": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "ControlBitsOfInterest", - "type": "SECURITY_DESCRIPTOR_CONTROL" - }, - { - "name": "ControlBitsToSet", - "type": "SECURITY_DESCRIPTOR_CONTROL" - } - ], - "SetSecurityDescriptorDacl": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "bDaclPresent", - "type": "BOOL" - }, - { - "name": "pDacl", - "type": "PACL" - }, - { - "name": "bDaclDefaulted", - "type": "BOOL" - } - ], - "SetSecurityDescriptorGroup": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "pGroup", - "type": "PSID" - }, - { - "name": "bGroupDefaulted", - "type": "BOOL" - } - ], - "SetSecurityDescriptorOwner": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "pOwner", - "type": "PSID" - }, - { - "name": "bOwnerDefaulted", - "type": "BOOL" - } - ], - "SetSecurityDescriptorRMControl": [ - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "RMControl", - "type": "PUCHAR" - } - ], - "SetSecurityDescriptorSacl": [ - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "bSaclPresent", - "type": "BOOL" - }, - { - "name": "pSacl", - "type": "PACL" - }, - { - "name": "bSaclDefaulted", - "type": "BOOL" - } - ], - "SetTokenInformation": [ - { - "name": "TokenHandle", - "type": "HANDLE" - }, - { - "name": "TokenInformationClass", - "type": "TOKEN_INFORMATION_CLASS" - }, - { - "name": "TokenInformation", - "type": "LPVOID" - }, - { - "name": "TokenInformationLength", - "type": "DWORD" - } - ], - "CveEventWrite": [ - { - "name": "CveId", - "type": "PCWSTR" - }, - { - "name": "AdditionalDetails", - "type": "PCWSTR" - } - ], - "DeriveCapabilitySidsFromName": [ - { - "name": "CapName", - "type": "LPCWSTR" - }, - { - "name": "CapabilityGroupSids", - "type": "PSID" - }, - { - "name": "CapabilityGroupSidCount", - "type": "DWORD" - }, - { - "name": "CapabilitySids", - "type": "PSID" - }, - { - "name": "CapabilitySidCount", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shcore.json b/qiling/extensions/windows_sdk/shcore.json index 3ac9a12ed..f59724c18 100644 --- a/qiling/extensions/windows_sdk/shcore.json +++ b/qiling/extensions/windows_sdk/shcore.json @@ -1,52 +1,96 @@ { - "CreateRandomAccessStreamOnFile": [ + "GetScaleFactorForDevice": [ { - "name": "filePath", - "type": "PCWSTR" + "name": "deviceType", + "type": "DISPLAY_DEVICE_TYPE" + } + ], + "RegisterScaleChangeNotifications": [ + { + "name": "displayDevice", + "type": "DISPLAY_DEVICE_TYPE" }, { - "name": "accessMode", - "type": "DWORD" + "name": "hwndNotify", + "type": "HWND" }, { - "name": "riid", - "type": "IID" + "name": "uMsgNotify", + "type": "UINT" }, { - "name": "ppv", - "type": "void" + "name": "pdwCookie", + "type": "DWORD" } ], - "CreateRandomAccessStreamOverStream": [ + "RevokeScaleChangeNotifications": [ { - "name": "stream", - "type": "IStream" + "name": "displayDevice", + "type": "DISPLAY_DEVICE_TYPE" }, { - "name": "options", - "type": "BSOS_OPTIONS" + "name": "dwCookie", + "type": "DWORD" + } + ], + "GetScaleFactorForMonitor": [ + { + "name": "hMon", + "type": "HMONITOR" }, { - "name": "riid", - "type": "IID" + "name": "pScale", + "type": "DEVICE_SCALE_FACTOR" + } + ], + "RegisterScaleChangeEvent": [ + { + "name": "hEvent", + "type": "HANDLE" }, { - "name": "ppv", - "type": "void" + "name": "pdwCookie", + "type": "DWORD_PTR" } ], - "CreateStreamOverRandomAccessStream": [ + "UnregisterScaleChangeEvent": [ + { + "name": "dwCookie", + "type": "DWORD_PTR" + } + ], + "SetProcessDpiAwareness": [ + { + "name": "value", + "type": "PROCESS_DPI_AWARENESS" + } + ], + "GetProcessDpiAwareness": [ + { + "name": "hprocess", + "type": "HANDLE" + }, + { + "name": "value", + "type": "PROCESS_DPI_AWARENESS" + } + ], + "GetDpiForMonitor": [ + { + "name": "hmonitor", + "type": "HMONITOR" + }, { - "name": "randomAccessStream", - "type": "IUnknown" + "name": "dpiType", + "type": "MONITOR_DPI_TYPE" }, { - "name": "riid", - "type": "IID" + "name": "dpiX", + "type": "UINT" }, { - "name": "ppv", - "type": "void" + "name": "dpiY", + "type": "UINT" } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shellapi.json b/qiling/extensions/windows_sdk/shellapi.json deleted file mode 100644 index 5f7ce9a14..000000000 --- a/qiling/extensions/windows_sdk/shellapi.json +++ /dev/null @@ -1,922 +0,0 @@ -{ - "DragQueryFileA": [ - { - "name": "hDrop", - "type": "HDROP" - }, - { - "name": "iFile", - "type": "UINT" - }, - { - "name": "lpszFile", - "type": "LPSTR" - }, - { - "name": "cch", - "type": "UINT" - } - ], - "DragQueryFileW": [ - { - "name": "hDrop", - "type": "HDROP" - }, - { - "name": "iFile", - "type": "UINT" - }, - { - "name": "lpszFile", - "type": "LPWSTR" - }, - { - "name": "cch", - "type": "UINT" - } - ], - "DragQueryPoint": [ - { - "name": "hDrop", - "type": "HDROP" - }, - { - "name": "ppt", - "type": "POINT" - } - ], - "DragFinish": [ - { - "name": "hDrop", - "type": "HDROP" - } - ], - "DragAcceptFiles": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "fAccept", - "type": "BOOL" - } - ], - "ShellExecuteA": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "lpOperation", - "type": "LPCSTR" - }, - { - "name": "lpFile", - "type": "LPCSTR" - }, - { - "name": "lpParameters", - "type": "LPCSTR" - }, - { - "name": "lpDirectory", - "type": "LPCSTR" - }, - { - "name": "nShowCmd", - "type": "INT" - } - ], - "ShellExecuteW": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "lpOperation", - "type": "LPCWSTR" - }, - { - "name": "lpFile", - "type": "LPCWSTR" - }, - { - "name": "lpParameters", - "type": "LPCWSTR" - }, - { - "name": "lpDirectory", - "type": "LPCWSTR" - }, - { - "name": "nShowCmd", - "type": "INT" - } - ], - "FindExecutableA": [ - { - "name": "lpFile", - "type": "LPCSTR" - }, - { - "name": "lpDirectory", - "type": "LPCSTR" - }, - { - "name": "lpResult", - "type": "LPSTR" - } - ], - "FindExecutableW": [ - { - "name": "lpFile", - "type": "LPCWSTR" - }, - { - "name": "lpDirectory", - "type": "LPCWSTR" - }, - { - "name": "lpResult", - "type": "LPWSTR" - } - ], - "ShellAboutA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "szApp", - "type": "LPCSTR" - }, - { - "name": "szOtherStuff", - "type": "LPCSTR" - }, - { - "name": "hIcon", - "type": "HICON" - } - ], - "ShellAboutW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "szApp", - "type": "LPCWSTR" - }, - { - "name": "szOtherStuff", - "type": "LPCWSTR" - }, - { - "name": "hIcon", - "type": "HICON" - } - ], - "DuplicateIcon": [ - { - "name": "hInst", - "type": "HINSTANCE" - }, - { - "name": "hIcon", - "type": "HICON" - } - ], - "ExtractAssociatedIconA": [ - { - "name": "hInst", - "type": "HINSTANCE" - }, - { - "name": "pszIconPath", - "type": "LPSTR" - }, - { - "name": "piIcon", - "type": "WORD" - } - ], - "ExtractAssociatedIconW": [ - { - "name": "hInst", - "type": "HINSTANCE" - }, - { - "name": "pszIconPath", - "type": "LPWSTR" - }, - { - "name": "piIcon", - "type": "WORD" - } - ], - "ExtractAssociatedIconExA": [ - { - "name": "hInst", - "type": "HINSTANCE" - }, - { - "name": "pszIconPath", - "type": "LPSTR" - }, - { - "name": "piIconIndex", - "type": "WORD" - }, - { - "name": "piIconId", - "type": "WORD" - } - ], - "ExtractAssociatedIconExW": [ - { - "name": "hInst", - "type": "HINSTANCE" - }, - { - "name": "pszIconPath", - "type": "LPWSTR" - }, - { - "name": "piIconIndex", - "type": "WORD" - }, - { - "name": "piIconId", - "type": "WORD" - } - ], - "ExtractIconA": [ - { - "name": "hInst", - "type": "HINSTANCE" - }, - { - "name": "pszExeFileName", - "type": "LPCSTR" - }, - { - "name": "nIconIndex", - "type": "UINT" - } - ], - "ExtractIconW": [ - { - "name": "hInst", - "type": "HINSTANCE" - }, - { - "name": "pszExeFileName", - "type": "LPCWSTR" - }, - { - "name": "nIconIndex", - "type": "UINT" - } - ], - "SHAppBarMessage": [ - { - "name": "dwMessage", - "type": "DWORD" - }, - { - "name": "pData", - "type": "PAPPBARDATA" - } - ], - "DoEnvironmentSubstA": [ - { - "name": "pszSrc", - "type": "LPSTR" - }, - { - "name": "cchSrc", - "type": "UINT" - } - ], - "DoEnvironmentSubstW": [ - { - "name": "pszSrc", - "type": "LPWSTR" - }, - { - "name": "cchSrc", - "type": "UINT" - } - ], - "ExtractIconExA": [ - { - "name": "lpszFile", - "type": "LPCSTR" - }, - { - "name": "nIconIndex", - "type": "int" - }, - { - "name": "phiconLarge", - "type": "HICON" - }, - { - "name": "phiconSmall", - "type": "HICON" - }, - { - "name": "nIcons", - "type": "UINT" - } - ], - "ExtractIconExW": [ - { - "name": "lpszFile", - "type": "LPCWSTR" - }, - { - "name": "nIconIndex", - "type": "int" - }, - { - "name": "phiconLarge", - "type": "HICON" - }, - { - "name": "phiconSmall", - "type": "HICON" - }, - { - "name": "nIcons", - "type": "UINT" - } - ], - "SHFileOperationA": [ - { - "name": "lpFileOp", - "type": "LPSHFILEOPSTRUCTA" - } - ], - "SHFileOperationW": [ - { - "name": "lpFileOp", - "type": "LPSHFILEOPSTRUCTW" - } - ], - "SHFreeNameMappings": [ - { - "name": "hNameMappings", - "type": "HANDLE" - } - ], - "ShellExecuteExA": [ - { - "name": "pExecInfo", - "type": "SHELLEXECUTEINFOA" - } - ], - "ShellExecuteExW": [ - { - "name": "pExecInfo", - "type": "SHELLEXECUTEINFOW" - } - ], - "SHCreateProcessAsUserW": [ - { - "name": "pscpi", - "type": "PSHCREATEPROCESSINFOW" - } - ], - "SHEvaluateSystemCommandTemplate": [ - { - "name": "pszCmdTemplate", - "type": "PCWSTR" - }, - { - "name": "ppszApplication", - "type": "PWSTR" - }, - { - "name": "ppszCommandLine", - "type": "PWSTR" - }, - { - "name": "ppszParameters", - "type": "PWSTR" - } - ], - "AssocCreateForClasses": [ - { - "name": "rgClasses", - "type": "ASSOCIATIONELEMENT" - }, - { - "name": "cClasses", - "type": "ULONG" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHQueryRecycleBinA": [ - { - "name": "pszRootPath", - "type": "LPCSTR" - }, - { - "name": "pSHQueryRBInfo", - "type": "LPSHQUERYRBINFO" - } - ], - "SHQueryRecycleBinW": [ - { - "name": "pszRootPath", - "type": "LPCWSTR" - }, - { - "name": "pSHQueryRBInfo", - "type": "LPSHQUERYRBINFO" - } - ], - "SHEmptyRecycleBinA": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pszRootPath", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHEmptyRecycleBinW": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pszRootPath", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHQueryUserNotificationState": [ - { - "name": "pquns", - "type": "QUERY_USER_NOTIFICATION_STATE" - } - ], - "SHGetPropertyStoreForWindow": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "Shell_NotifyIconA": [ - { - "name": "dwMessage", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "PNOTIFYICONDATAA" - } - ], - "Shell_NotifyIconW": [ - { - "name": "dwMessage", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "PNOTIFYICONDATAW" - } - ], - "Shell_NotifyIconGetRect": [ - { - "name": "identifier", - "type": "NOTIFYICONIDENTIFIER" - }, - { - "name": "iconLocation", - "type": "RECT" - } - ], - "SHGetFileInfoA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "dwFileAttributes", - "type": "DWORD" - }, - { - "name": "psfi", - "type": "SHFILEINFOA" - }, - { - "name": "cbFileInfo", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "SHGetFileInfoW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - }, - { - "name": "dwFileAttributes", - "type": "DWORD" - }, - { - "name": "psfi", - "type": "SHFILEINFOW" - }, - { - "name": "cbFileInfo", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "SHGetStockIconInfo": [ - { - "name": "siid", - "type": "SHSTOCKICONID" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "psii", - "type": "SHSTOCKICONINFO" - } - ], - "SHGetDiskFreeSpaceExA": [ - { - "name": "pszDirectoryName", - "type": "LPCSTR" - }, - { - "name": "pulFreeBytesAvailableToCaller", - "type": "ULARGE_INTEGER" - }, - { - "name": "pulTotalNumberOfBytes", - "type": "ULARGE_INTEGER" - }, - { - "name": "pulTotalNumberOfFreeBytes", - "type": "ULARGE_INTEGER" - } - ], - "SHGetDiskFreeSpaceExW": [ - { - "name": "pszDirectoryName", - "type": "LPCWSTR" - }, - { - "name": "pulFreeBytesAvailableToCaller", - "type": "ULARGE_INTEGER" - }, - { - "name": "pulTotalNumberOfBytes", - "type": "ULARGE_INTEGER" - }, - { - "name": "pulTotalNumberOfFreeBytes", - "type": "ULARGE_INTEGER" - } - ], - "SHGetNewLinkInfoA": [ - { - "name": "pszLinkTo", - "type": "LPCSTR" - }, - { - "name": "pszDir", - "type": "LPCSTR" - }, - { - "name": "pszName", - "type": "LPSTR" - }, - { - "name": "pfMustCopy", - "type": "BOOL" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "SHGetNewLinkInfoW": [ - { - "name": "pszLinkTo", - "type": "LPCWSTR" - }, - { - "name": "pszDir", - "type": "LPCWSTR" - }, - { - "name": "pszName", - "type": "LPWSTR" - }, - { - "name": "pfMustCopy", - "type": "BOOL" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "SHInvokePrinterCommandA": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "uAction", - "type": "UINT" - }, - { - "name": "lpBuf1", - "type": "LPCSTR" - }, - { - "name": "lpBuf2", - "type": "LPCSTR" - }, - { - "name": "fModal", - "type": "BOOL" - } - ], - "SHInvokePrinterCommandW": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "uAction", - "type": "UINT" - }, - { - "name": "lpBuf1", - "type": "LPCWSTR" - }, - { - "name": "lpBuf2", - "type": "LPCWSTR" - }, - { - "name": "fModal", - "type": "BOOL" - } - ], - "SHLoadNonloadedIconOverlayIdentifiers": [ - { - "name": "VOID", - "type": "void" - } - ], - "SHIsFileAvailableOffline": [ - { - "name": "pwszPath", - "type": "PCWSTR" - }, - { - "name": "pdwStatus", - "type": "DWORD" - } - ], - "SHSetLocalizedName": [ - { - "name": "pszPath", - "type": "PCWSTR" - }, - { - "name": "pszResModule", - "type": "PCWSTR" - }, - { - "name": "idsRes", - "type": "int" - } - ], - "SHRemoveLocalizedName": [ - { - "name": "pszPath", - "type": "PCWSTR" - } - ], - "SHGetLocalizedName": [ - { - "name": "pszPath", - "type": "PCWSTR" - }, - { - "name": "pszResModule", - "type": "PWSTR" - }, - { - "name": "cch", - "type": "UINT" - }, - { - "name": "pidsRes", - "type": "int" - } - ], - "ShellMessageBoxA": [ - { - "name": "hAppInst", - "type": "HINSTANCE" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpcText", - "type": "LPCSTR" - }, - { - "name": "lpcTitle", - "type": "LPCSTR" - }, - { - "name": "fuStyle", - "type": "UINT" - } - ], - "ShellMessageBoxW": [ - { - "name": "hAppInst", - "type": "HINSTANCE" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpcText", - "type": "LPCWSTR" - }, - { - "name": "lpcTitle", - "type": "LPCWSTR" - }, - { - "name": "fuStyle", - "type": "UINT" - } - ], - "SHEnumerateUnreadMailAccountsA": [ - { - "name": "hKeyUser", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszMailAddress", - "type": "LPSTR" - }, - { - "name": "cchMailAddress", - "type": "int" - } - ], - "SHEnumerateUnreadMailAccountsW": [ - { - "name": "hKeyUser", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszMailAddress", - "type": "LPWSTR" - }, - { - "name": "cchMailAddress", - "type": "int" - } - ], - "SHGetUnreadMailCountW": [ - { - "name": "hKeyUser", - "type": "HKEY" - }, - { - "name": "pszMailAddress", - "type": "LPCWSTR" - }, - { - "name": "pdwCount", - "type": "DWORD" - }, - { - "name": "pFileTime", - "type": "FILETIME" - }, - { - "name": "pszShellExecuteCommand", - "type": "LPWSTR" - }, - { - "name": "cchShellExecuteCommand", - "type": "int" - } - ], - "SHSetUnreadMailCountW": [ - { - "name": "pszMailAddress", - "type": "LPCWSTR" - }, - { - "name": "dwCount", - "type": "DWORD" - }, - { - "name": "pszShellExecuteCommand", - "type": "LPCWSTR" - } - ], - "SHTestTokenMembership": [ - { - "name": "hToken", - "type": "HANDLE" - }, - { - "name": "ulRID", - "type": "ULONG" - } - ], - "SHGetImageList": [ - { - "name": "iImageList", - "type": "int" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppvObj", - "type": "void" - } - ], - "InitNetworkAddressControl": [ - { - "name": "VOID", - "type": "void" - } - ], - "SHGetDriveMedia": [ - { - "name": "pszDrive", - "type": "PCWSTR" - }, - { - "name": "pdwMediaContent", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shellscalingapi.json b/qiling/extensions/windows_sdk/shellscalingapi.json deleted file mode 100644 index f59724c18..000000000 --- a/qiling/extensions/windows_sdk/shellscalingapi.json +++ /dev/null @@ -1,96 +0,0 @@ -{ - "GetScaleFactorForDevice": [ - { - "name": "deviceType", - "type": "DISPLAY_DEVICE_TYPE" - } - ], - "RegisterScaleChangeNotifications": [ - { - "name": "displayDevice", - "type": "DISPLAY_DEVICE_TYPE" - }, - { - "name": "hwndNotify", - "type": "HWND" - }, - { - "name": "uMsgNotify", - "type": "UINT" - }, - { - "name": "pdwCookie", - "type": "DWORD" - } - ], - "RevokeScaleChangeNotifications": [ - { - "name": "displayDevice", - "type": "DISPLAY_DEVICE_TYPE" - }, - { - "name": "dwCookie", - "type": "DWORD" - } - ], - "GetScaleFactorForMonitor": [ - { - "name": "hMon", - "type": "HMONITOR" - }, - { - "name": "pScale", - "type": "DEVICE_SCALE_FACTOR" - } - ], - "RegisterScaleChangeEvent": [ - { - "name": "hEvent", - "type": "HANDLE" - }, - { - "name": "pdwCookie", - "type": "DWORD_PTR" - } - ], - "UnregisterScaleChangeEvent": [ - { - "name": "dwCookie", - "type": "DWORD_PTR" - } - ], - "SetProcessDpiAwareness": [ - { - "name": "value", - "type": "PROCESS_DPI_AWARENESS" - } - ], - "GetProcessDpiAwareness": [ - { - "name": "hprocess", - "type": "HANDLE" - }, - { - "name": "value", - "type": "PROCESS_DPI_AWARENESS" - } - ], - "GetDpiForMonitor": [ - { - "name": "hmonitor", - "type": "HMONITOR" - }, - { - "name": "dpiType", - "type": "MONITOR_DPI_TYPE" - }, - { - "name": "dpiX", - "type": "UINT" - }, - { - "name": "dpiY", - "type": "UINT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shobjidl.json b/qiling/extensions/windows_sdk/shobjidl.json deleted file mode 100644 index df44170d7..000000000 --- a/qiling/extensions/windows_sdk/shobjidl.json +++ /dev/null @@ -1,40 +0,0 @@ -{ - "SHAddDefaultPropertiesByExt": [ - { - "name": "pszExt", - "type": "PCWSTR" - }, - { - "name": "pPropStore", - "type": "IPropertyStore" - } - ], - "SHCreateDefaultPropertiesOp": [ - { - "name": "psi", - "type": "IShellItem" - }, - { - "name": "ppFileOp", - "type": "IFileOperation" - } - ], - "SHSetDefaultProperties": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "psi", - "type": "IShellItem" - }, - { - "name": "dwFileOpFlags", - "type": "DWORD" - }, - { - "name": "pfops", - "type": "IFileOperationProgressSink" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shobjidl_core.json b/qiling/extensions/windows_sdk/shobjidl_core.json deleted file mode 100644 index 5795d6045..000000000 --- a/qiling/extensions/windows_sdk/shobjidl_core.json +++ /dev/null @@ -1,382 +0,0 @@ -{ - "SHSimpleIDListFromPath": [ - { - "name": "pszPath", - "type": "PCWSTR" - } - ], - "SHCreateItemFromIDList": [ - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHCreateItemFromParsingName": [ - { - "name": "pszPath", - "type": "PCWSTR" - }, - { - "name": "pbc", - "type": "IBindCtx" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHCreateItemWithParent": [ - { - "name": "pidlParent", - "type": "LPCITEMIDLIST" - }, - { - "name": "psfParent", - "type": "IShellFolder" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppvItem", - "type": "void" - } - ], - "SHCreateItemFromRelativeName": [ - { - "name": "psiParent", - "type": "IShellItem" - }, - { - "name": "pszName", - "type": "PCWSTR" - }, - { - "name": "pbc", - "type": "IBindCtx" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHCreateItemInKnownFolder": [ - { - "name": "kfid", - "type": "KNOWNFOLDERID" - }, - { - "name": "dwKFFlags", - "type": "DWORD" - }, - { - "name": "pszItem", - "type": "PCWSTR" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHGetIDListFromObject": [ - { - "name": "punk", - "type": "IUnknown" - }, - { - "name": "ppidl", - "type": "LPITEMIDLIST" - } - ], - "SHGetItemFromObject": [ - { - "name": "punk", - "type": "IUnknown" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHGetPropertyStoreFromIDList": [ - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "flags", - "type": "GETPROPERTYSTOREFLAGS" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHGetPropertyStoreFromParsingName": [ - { - "name": "pszPath", - "type": "PCWSTR" - }, - { - "name": "pbc", - "type": "IBindCtx" - }, - { - "name": "flags", - "type": "GETPROPERTYSTOREFLAGS" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHGetNameFromIDList": [ - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "sigdnName", - "type": "SIGDN" - }, - { - "name": "ppszName", - "type": "PWSTR" - } - ], - "SHGetItemFromDataObject": [ - { - "name": "pdtobj", - "type": "IDataObject" - }, - { - "name": "dwFlags", - "type": "DATAOBJ_GET_ITEM_FLAGS" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHCreateShellItemArray": [ - { - "name": "pidlParent", - "type": "LPCITEMIDLIST" - }, - { - "name": "psf", - "type": "IShellFolder" - }, - { - "name": "cidl", - "type": "UINT" - }, - { - "name": "ppidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "ppsiItemArray", - "type": "IShellItemArray" - } - ], - "SHCreateShellItemArrayFromDataObject": [ - { - "name": "pdo", - "type": "IDataObject" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHCreateShellItemArrayFromIDLists": [ - { - "name": "cidl", - "type": "UINT" - }, - { - "name": "rgpidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "ppsiItemArray", - "type": "IShellItemArray" - } - ], - "SHCreateShellItemArrayFromShellItem": [ - { - "name": "psi", - "type": "IShellItem" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHCreateAssociationRegistration": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHCreateDefaultExtractIcon": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SetCurrentProcessExplicitAppUserModelID": [ - { - "name": "AppID", - "type": "PCWSTR" - } - ], - "GetCurrentProcessExplicitAppUserModelID": [ - { - "name": "AppID", - "type": "PWSTR" - } - ], - "SHGetTemporaryPropertyForItem": [ - { - "name": "psi", - "type": "IShellItem" - }, - { - "name": "propkey", - "type": "PROPERTYKEY" - }, - { - "name": "ppropvar", - "type": "PROPVARIANT" - } - ], - "SHSetTemporaryPropertyForItem": [ - { - "name": "psi", - "type": "IShellItem" - }, - { - "name": "propkey", - "type": "PROPERTYKEY" - }, - { - "name": "propvar", - "type": "PROPVARIANT" - } - ], - "SHShowManageLibraryUI": [ - { - "name": "psiLibrary", - "type": "IShellItem" - }, - { - "name": "hwndOwner", - "type": "HWND" - }, - { - "name": "pszTitle", - "type": "LPCWSTR" - }, - { - "name": "pszInstruction", - "type": "LPCWSTR" - }, - { - "name": "lmdOptions", - "type": "LIBRARYMANAGEDIALOGOPTIONS" - } - ], - "SHResolveLibrary": [ - { - "name": "psiLibrary", - "type": "IShellItem" - } - ], - "SHAssocEnumHandlers": [ - { - "name": "pszExtra", - "type": "PCWSTR" - }, - { - "name": "afFilter", - "type": "ASSOC_FILTER" - }, - { - "name": "ppEnumHandler", - "type": "IEnumAssocHandlers" - } - ], - "SHAssocEnumHandlersForProtocolByApplication": [ - { - "name": "protocol", - "type": "PCWSTR" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "enumHandlers", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/socketapi.json b/qiling/extensions/windows_sdk/socketapi.json deleted file mode 100644 index ff7c0827e..000000000 --- a/qiling/extensions/windows_sdk/socketapi.json +++ /dev/null @@ -1,8 +0,0 @@ -{ - "SetSocketMediaStreamingMode": [ - { - "name": "value", - "type": "BOOL" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sspi.json b/qiling/extensions/windows_sdk/sspi.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/sspi.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/stralign.json b/qiling/extensions/windows_sdk/stralign.json deleted file mode 100644 index 514211a53..000000000 --- a/qiling/extensions/windows_sdk/stralign.json +++ /dev/null @@ -1,8 +0,0 @@ -{ - "uaw_wcslen": [ - { - "name": "String", - "type": "PCUWSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/stringapiset.json b/qiling/extensions/windows_sdk/stringapiset.json deleted file mode 100644 index 46b7547fc..000000000 --- a/qiling/extensions/windows_sdk/stringapiset.json +++ /dev/null @@ -1,280 +0,0 @@ -{ - "CompareStringEx": [ - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "dwCmpFlags", - "type": "DWORD" - }, - { - "name": "lpString1", - "type": "LPCWCH" - }, - { - "name": "cchCount1", - "type": "int" - }, - { - "name": "lpString2", - "type": "LPCWCH" - }, - { - "name": "cchCount2", - "type": "int" - }, - { - "name": "lpVersionInformation", - "type": "LPNLSVERSIONINFO" - }, - { - "name": "lpReserved", - "type": "LPVOID" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "CompareStringOrdinal": [ - { - "name": "lpString1", - "type": "LPCWCH" - }, - { - "name": "cchCount1", - "type": "int" - }, - { - "name": "lpString2", - "type": "LPCWCH" - }, - { - "name": "cchCount2", - "type": "int" - }, - { - "name": "bIgnoreCase", - "type": "BOOL" - } - ], - "CompareStringW": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwCmpFlags", - "type": "DWORD" - }, - { - "name": "lpString1", - "type": "PCNZWCH" - }, - { - "name": "cchCount1", - "type": "int" - }, - { - "name": "lpString2", - "type": "PCNZWCH" - }, - { - "name": "cchCount2", - "type": "int" - } - ], - "FoldStringW": [ - { - "name": "dwMapFlags", - "type": "DWORD" - }, - { - "name": "lpSrcStr", - "type": "LPCWCH" - }, - { - "name": "cchSrc", - "type": "int" - }, - { - "name": "lpDestStr", - "type": "LPWSTR" - }, - { - "name": "cchDest", - "type": "int" - } - ], - "GetStringTypeExW": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwInfoType", - "type": "DWORD" - }, - { - "name": "lpSrcStr", - "type": "LPCWCH" - }, - { - "name": "cchSrc", - "type": "int" - }, - { - "name": "lpCharType", - "type": "LPWORD" - } - ], - "GetStringTypeW": [ - { - "name": "dwInfoType", - "type": "DWORD" - }, - { - "name": "lpSrcStr", - "type": "LPCWCH" - }, - { - "name": "cchSrc", - "type": "int" - }, - { - "name": "lpCharType", - "type": "LPWORD" - } - ], - "MultiByteToWideChar": [ - { - "name": "CodePage", - "type": "UINT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpMultiByteStr", - "type": "LPCCH" - }, - { - "name": "cbMultiByte", - "type": "int" - }, - { - "name": "lpWideCharStr", - "type": "LPWSTR" - }, - { - "name": "cchWideChar", - "type": "int" - } - ], - "WideCharToMultiByte": [ - { - "name": "CodePage", - "type": "UINT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpWideCharStr", - "type": "LPCWCH" - }, - { - "name": "cchWideChar", - "type": "int" - }, - { - "name": "lpMultiByteStr", - "type": "LPSTR" - }, - { - "name": "cbMultiByte", - "type": "int" - }, - { - "name": "lpDefaultChar", - "type": "LPCCH" - }, - { - "name": "lpUsedDefaultChar", - "type": "LPBOOL" - } - ], - "CompareStringA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwCmpFlags", - "type": "DWORD" - }, - { - "name": "lpString1", - "type": "PCNZCH" - }, - { - "name": "cchCount1", - "type": "int" - }, - { - "name": "lpString2", - "type": "PCNZCH" - }, - { - "name": "cchCount2", - "type": "int" - } - ], - "GetStringTypeExA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwInfoType", - "type": "DWORD" - }, - { - "name": "lpSrcStr", - "type": "LPCSTR" - }, - { - "name": "cchSrc", - "type": "int" - }, - { - "name": "lpCharType", - "type": "LPWORD" - } - ], - "FoldStringA": [ - { - "name": "dwMapFlags", - "type": "DWORD" - }, - { - "name": "lpSrcStr", - "type": "LPCSTR" - }, - { - "name": "cchSrc", - "type": "int" - }, - { - "name": "lpDestStr", - "type": "LPSTR" - }, - { - "name": "cchDest", - "type": "int" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/swdevice.json b/qiling/extensions/windows_sdk/swdevice.json deleted file mode 100644 index 9bc83a210..000000000 --- a/qiling/extensions/windows_sdk/swdevice.json +++ /dev/null @@ -1,144 +0,0 @@ -{ - "SwDeviceCreate": [ - { - "name": "pszEnumeratorName", - "type": "PCWSTR" - }, - { - "name": "pszParentDeviceInstance", - "type": "PCWSTR" - }, - { - "name": "pCreateInfo", - "type": "SW_DEVICE_CREATE_INFO" - }, - { - "name": "cPropertyCount", - "type": "ULONG" - }, - { - "name": "pProperties", - "type": "DEVPROPERTY" - }, - { - "name": "pCallback", - "type": "SW_DEVICE_CREATE_CALLBACK" - }, - { - "name": "pContext", - "type": "PVOID" - }, - { - "name": "phSwDevice", - "type": "PHSWDEVICE" - } - ], - "SwDeviceClose": [ - { - "name": "hSwDevice", - "type": "HSWDEVICE" - } - ], - "SwDeviceSetLifetime": [ - { - "name": "hSwDevice", - "type": "HSWDEVICE" - }, - { - "name": "Lifetime", - "type": "SW_DEVICE_LIFETIME" - } - ], - "SwDeviceGetLifetime": [ - { - "name": "hSwDevice", - "type": "HSWDEVICE" - }, - { - "name": "pLifetime", - "type": "PSW_DEVICE_LIFETIME" - } - ], - "SwDevicePropertySet": [ - { - "name": "hSwDevice", - "type": "HSWDEVICE" - }, - { - "name": "cPropertyCount", - "type": "ULONG" - }, - { - "name": "pProperties", - "type": "DEVPROPERTY" - } - ], - "SwDeviceInterfaceRegister": [ - { - "name": "hSwDevice", - "type": "HSWDEVICE" - }, - { - "name": "pInterfaceClassGuid", - "type": "GUID" - }, - { - "name": "pszReferenceString", - "type": "PCWSTR" - }, - { - "name": "cPropertyCount", - "type": "ULONG" - }, - { - "name": "pProperties", - "type": "DEVPROPERTY" - }, - { - "name": "fEnabled", - "type": "BOOL" - }, - { - "name": "ppszDeviceInterfaceId", - "type": "PWSTR" - } - ], - "SwMemFree": [ - { - "name": "pMem", - "type": "PVOID" - } - ], - "SwDeviceInterfaceSetState": [ - { - "name": "hSwDevice", - "type": "HSWDEVICE" - }, - { - "name": "pszDeviceInterfaceId", - "type": "PCWSTR" - }, - { - "name": "fEnabled", - "type": "BOOL" - } - ], - "SwDeviceInterfacePropertySet": [ - { - "name": "hSwDevice", - "type": "HSWDEVICE" - }, - { - "name": "pszDeviceInterfaceId", - "type": "PCWSTR" - }, - { - "name": "cPropertyCount", - "type": "ULONG" - }, - { - "name": "pProperties", - "type": "DEVPROPERTY" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winsxs.json b/qiling/extensions/windows_sdk/sxs.json similarity index 100% rename from qiling/extensions/windows_sdk/winsxs.json rename to qiling/extensions/windows_sdk/sxs.json diff --git a/qiling/extensions/windows_sdk/synchapi.json b/qiling/extensions/windows_sdk/synchapi.json deleted file mode 100644 index eff06556c..000000000 --- a/qiling/extensions/windows_sdk/synchapi.json +++ /dev/null @@ -1,778 +0,0 @@ -{ - "InitializeSRWLock": [ - { - "name": "SRWLock", - "type": "PSRWLOCK" - } - ], - "ReleaseSRWLockExclusive": [ - { - "name": "SRWLock", - "type": "PSRWLOCK" - } - ], - "ReleaseSRWLockShared": [ - { - "name": "SRWLock", - "type": "PSRWLOCK" - } - ], - "AcquireSRWLockExclusive": [ - { - "name": "SRWLock", - "type": "PSRWLOCK" - } - ], - "AcquireSRWLockShared": [ - { - "name": "SRWLock", - "type": "PSRWLOCK" - } - ], - "TryAcquireSRWLockExclusive": [ - { - "name": "SRWLock", - "type": "PSRWLOCK" - } - ], - "TryAcquireSRWLockShared": [ - { - "name": "SRWLock", - "type": "PSRWLOCK" - } - ], - "InitializeCriticalSection": [ - { - "name": "lpCriticalSection", - "type": "LPCRITICAL_SECTION" - } - ], - "EnterCriticalSection": [ - { - "name": "lpCriticalSection", - "type": "LPCRITICAL_SECTION" - } - ], - "LeaveCriticalSection": [ - { - "name": "lpCriticalSection", - "type": "LPCRITICAL_SECTION" - } - ], - "InitializeCriticalSectionAndSpinCount": [ - { - "name": "lpCriticalSection", - "type": "LPCRITICAL_SECTION" - }, - { - "name": "dwSpinCount", - "type": "DWORD" - } - ], - "InitializeCriticalSectionEx": [ - { - "name": "lpCriticalSection", - "type": "LPCRITICAL_SECTION" - }, - { - "name": "dwSpinCount", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "SetCriticalSectionSpinCount": [ - { - "name": "lpCriticalSection", - "type": "LPCRITICAL_SECTION" - }, - { - "name": "dwSpinCount", - "type": "DWORD" - } - ], - "TryEnterCriticalSection": [ - { - "name": "lpCriticalSection", - "type": "LPCRITICAL_SECTION" - } - ], - "DeleteCriticalSection": [ - { - "name": "lpCriticalSection", - "type": "LPCRITICAL_SECTION" - } - ], - "InitOnceInitialize": [ - { - "name": "InitOnce", - "type": "PINIT_ONCE" - } - ], - "InitOnceExecuteOnce": [ - { - "name": "InitOnce", - "type": "PINIT_ONCE" - }, - { - "name": "InitFn", - "type": "PINIT_ONCE_FN" - }, - { - "name": "Parameter", - "type": "PVOID" - }, - { - "name": "Context", - "type": "LPVOID" - } - ], - "InitOnceBeginInitialize": [ - { - "name": "lpInitOnce", - "type": "LPINIT_ONCE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "fPending", - "type": "PBOOL" - }, - { - "name": "lpContext", - "type": "LPVOID" - } - ], - "InitOnceComplete": [ - { - "name": "lpInitOnce", - "type": "LPINIT_ONCE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpContext", - "type": "LPVOID" - } - ], - "InitializeConditionVariable": [ - { - "name": "ConditionVariable", - "type": "PCONDITION_VARIABLE" - } - ], - "WakeConditionVariable": [ - { - "name": "ConditionVariable", - "type": "PCONDITION_VARIABLE" - } - ], - "WakeAllConditionVariable": [ - { - "name": "ConditionVariable", - "type": "PCONDITION_VARIABLE" - } - ], - "SleepConditionVariableCS": [ - { - "name": "ConditionVariable", - "type": "PCONDITION_VARIABLE" - }, - { - "name": "CriticalSection", - "type": "PCRITICAL_SECTION" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - } - ], - "SleepConditionVariableSRW": [ - { - "name": "ConditionVariable", - "type": "PCONDITION_VARIABLE" - }, - { - "name": "SRWLock", - "type": "PSRWLOCK" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "SetEvent": [ - { - "name": "hEvent", - "type": "HANDLE" - } - ], - "ResetEvent": [ - { - "name": "hEvent", - "type": "HANDLE" - } - ], - "ReleaseSemaphore": [ - { - "name": "hSemaphore", - "type": "HANDLE" - }, - { - "name": "lReleaseCount", - "type": "LONG" - }, - { - "name": "lpPreviousCount", - "type": "LPLONG" - } - ], - "ReleaseMutex": [ - { - "name": "hMutex", - "type": "HANDLE" - } - ], - "WaitForSingleObject": [ - { - "name": "hHandle", - "type": "HANDLE" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - } - ], - "SleepEx": [ - { - "name": "dwMilliseconds", - "type": "DWORD" - }, - { - "name": "bAlertable", - "type": "BOOL" - } - ], - "WaitForSingleObjectEx": [ - { - "name": "hHandle", - "type": "HANDLE" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - }, - { - "name": "bAlertable", - "type": "BOOL" - } - ], - "WaitForMultipleObjectsEx": [ - { - "name": "nCount", - "type": "DWORD" - }, - { - "name": "lpHandles", - "type": "HANDLE" - }, - { - "name": "bWaitAll", - "type": "BOOL" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - }, - { - "name": "bAlertable", - "type": "BOOL" - } - ], - "CreateMutexA": [ - { - "name": "lpMutexAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "bInitialOwner", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "CreateMutexW": [ - { - "name": "lpMutexAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "bInitialOwner", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "OpenMutexW": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "CreateEventA": [ - { - "name": "lpEventAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "bManualReset", - "type": "BOOL" - }, - { - "name": "bInitialState", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "CreateEventW": [ - { - "name": "lpEventAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "bManualReset", - "type": "BOOL" - }, - { - "name": "bInitialState", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "OpenEventA": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "OpenEventW": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "OpenSemaphoreW": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "OpenWaitableTimerW": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "lpTimerName", - "type": "LPCWSTR" - } - ], - "SetWaitableTimerEx": [ - { - "name": "hTimer", - "type": "HANDLE" - }, - { - "name": "lpDueTime", - "type": "LARGE_INTEGER" - }, - { - "name": "lPeriod", - "type": "LONG" - }, - { - "name": "pfnCompletionRoutine", - "type": "PTIMERAPCROUTINE" - }, - { - "name": "lpArgToCompletionRoutine", - "type": "LPVOID" - }, - { - "name": "WakeContext", - "type": "PREASON_CONTEXT" - }, - { - "name": "TolerableDelay", - "type": "ULONG" - } - ], - "SetWaitableTimer": [ - { - "name": "hTimer", - "type": "HANDLE" - }, - { - "name": "lpDueTime", - "type": "LARGE_INTEGER" - }, - { - "name": "lPeriod", - "type": "LONG" - }, - { - "name": "pfnCompletionRoutine", - "type": "PTIMERAPCROUTINE" - }, - { - "name": "lpArgToCompletionRoutine", - "type": "LPVOID" - }, - { - "name": "fResume", - "type": "BOOL" - } - ], - "CancelWaitableTimer": [ - { - "name": "hTimer", - "type": "HANDLE" - } - ], - "CreateMutexExA": [ - { - "name": "lpMutexAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - } - ], - "CreateMutexExW": [ - { - "name": "lpMutexAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - } - ], - "CreateEventExA": [ - { - "name": "lpEventAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - } - ], - "CreateEventExW": [ - { - "name": "lpEventAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - } - ], - "CreateWaitableTimerExW": [ - { - "name": "lpTimerAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpTimerName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - } - ], - "EnterSynchronizationBarrier": [ - { - "name": "lpBarrier", - "type": "LPSYNCHRONIZATION_BARRIER" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "InitializeSynchronizationBarrier": [ - { - "name": "lpBarrier", - "type": "LPSYNCHRONIZATION_BARRIER" - }, - { - "name": "lTotalThreads", - "type": "LONG" - }, - { - "name": "lSpinCount", - "type": "LONG" - } - ], - "DeleteSynchronizationBarrier": [ - { - "name": "lpBarrier", - "type": "LPSYNCHRONIZATION_BARRIER" - } - ], - "Sleep": [ - { - "name": "dwMilliseconds", - "type": "DWORD" - } - ], - "WaitOnAddress": [ - { - "name": "Address", - "type": "void" - }, - { - "name": "CompareAddress", - "type": "PVOID" - }, - { - "name": "AddressSize", - "type": "SIZE_T" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - } - ], - "WakeByAddressSingle": [ - { - "name": "Address", - "type": "PVOID" - } - ], - "WakeByAddressAll": [ - { - "name": "Address", - "type": "PVOID" - } - ], - "SignalObjectAndWait": [ - { - "name": "hObjectToSignal", - "type": "HANDLE" - }, - { - "name": "hObjectToWaitOn", - "type": "HANDLE" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - }, - { - "name": "bAlertable", - "type": "BOOL" - } - ], - "WaitForMultipleObjects": [ - { - "name": "nCount", - "type": "DWORD" - }, - { - "name": "lpHandles", - "type": "HANDLE" - }, - { - "name": "bWaitAll", - "type": "BOOL" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - } - ], - "CreateWaitableTimerW": [ - { - "name": "lpTimerAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "bManualReset", - "type": "BOOL" - }, - { - "name": "lpTimerName", - "type": "LPCWSTR" - } - ], - "OpenMutexA": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "OpenSemaphoreA": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "CreateWaitableTimerA": [ - { - "name": "lpTimerAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "bManualReset", - "type": "BOOL" - }, - { - "name": "lpTimerName", - "type": "LPCSTR" - } - ], - "OpenWaitableTimerA": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "lpTimerName", - "type": "LPCSTR" - } - ], - "CreateWaitableTimerExA": [ - { - "name": "lpTimerAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpTimerName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/syncmgr.json b/qiling/extensions/windows_sdk/syncmgr.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/syncmgr.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/systemtopologyapi.json b/qiling/extensions/windows_sdk/systemtopologyapi.json deleted file mode 100644 index cd9665d47..000000000 --- a/qiling/extensions/windows_sdk/systemtopologyapi.json +++ /dev/null @@ -1,28 +0,0 @@ -{ - "GetNumaHighestNodeNumber": [ - { - "name": "HighestNodeNumber", - "type": "PULONG" - } - ], - "GetNumaNodeProcessorMaskEx": [ - { - "name": "Node", - "type": "USHORT" - }, - { - "name": "ProcessorMask", - "type": "PGROUP_AFFINITY" - } - ], - "GetNumaProximityNodeEx": [ - { - "name": "ProximityId", - "type": "ULONG" - }, - { - "name": "NodeNumber", - "type": "PUSHORT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/tapi.json b/qiling/extensions/windows_sdk/tapi.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/tapi.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/threadpoolapiset.json b/qiling/extensions/windows_sdk/threadpoolapiset.json deleted file mode 100644 index 372f84c67..000000000 --- a/qiling/extensions/windows_sdk/threadpoolapiset.json +++ /dev/null @@ -1,376 +0,0 @@ -{ - "CreateThreadpool": [ - { - "name": "reserved", - "type": "PVOID" - } - ], - "SetThreadpoolThreadMaximum": [ - { - "name": "ptpp", - "type": "PTP_POOL" - }, - { - "name": "cthrdMost", - "type": "DWORD" - } - ], - "SetThreadpoolThreadMinimum": [ - { - "name": "ptpp", - "type": "PTP_POOL" - }, - { - "name": "cthrdMic", - "type": "DWORD" - } - ], - "SetThreadpoolStackInformation": [ - { - "name": "ptpp", - "type": "PTP_POOL" - }, - { - "name": "ptpsi", - "type": "PTP_POOL_STACK_INFORMATION" - } - ], - "QueryThreadpoolStackInformation": [ - { - "name": "ptpp", - "type": "PTP_POOL" - }, - { - "name": "ptpsi", - "type": "PTP_POOL_STACK_INFORMATION" - } - ], - "CloseThreadpool": [ - { - "name": "ptpp", - "type": "PTP_POOL" - } - ], - "CreateThreadpoolCleanupGroup": [ - { - "name": "VOID", - "type": "void" - } - ], - "CloseThreadpoolCleanupGroupMembers": [ - { - "name": "ptpcg", - "type": "PTP_CLEANUP_GROUP" - }, - { - "name": "fCancelPendingCallbacks", - "type": "BOOL" - }, - { - "name": "pvCleanupContext", - "type": "PVOID" - } - ], - "CloseThreadpoolCleanupGroup": [ - { - "name": "ptpcg", - "type": "PTP_CLEANUP_GROUP" - } - ], - "SetEventWhenCallbackReturns": [ - { - "name": "pci", - "type": "PTP_CALLBACK_INSTANCE" - }, - { - "name": "evt", - "type": "HANDLE" - } - ], - "ReleaseSemaphoreWhenCallbackReturns": [ - { - "name": "pci", - "type": "PTP_CALLBACK_INSTANCE" - }, - { - "name": "sem", - "type": "HANDLE" - }, - { - "name": "crel", - "type": "DWORD" - } - ], - "ReleaseMutexWhenCallbackReturns": [ - { - "name": "pci", - "type": "PTP_CALLBACK_INSTANCE" - }, - { - "name": "mut", - "type": "HANDLE" - } - ], - "LeaveCriticalSectionWhenCallbackReturns": [ - { - "name": "pci", - "type": "PTP_CALLBACK_INSTANCE" - }, - { - "name": "pcs", - "type": "PCRITICAL_SECTION" - } - ], - "FreeLibraryWhenCallbackReturns": [ - { - "name": "pci", - "type": "PTP_CALLBACK_INSTANCE" - }, - { - "name": "mod", - "type": "HMODULE" - } - ], - "CallbackMayRunLong": [ - { - "name": "pci", - "type": "PTP_CALLBACK_INSTANCE" - } - ], - "DisassociateCurrentThreadFromCallback": [ - { - "name": "pci", - "type": "PTP_CALLBACK_INSTANCE" - } - ], - "TrySubmitThreadpoolCallback": [ - { - "name": "pfns", - "type": "PTP_SIMPLE_CALLBACK" - }, - { - "name": "pv", - "type": "PVOID" - }, - { - "name": "pcbe", - "type": "PTP_CALLBACK_ENVIRON" - } - ], - "CreateThreadpoolWork": [ - { - "name": "pfnwk", - "type": "PTP_WORK_CALLBACK" - }, - { - "name": "pv", - "type": "PVOID" - }, - { - "name": "pcbe", - "type": "PTP_CALLBACK_ENVIRON" - } - ], - "SubmitThreadpoolWork": [ - { - "name": "pwk", - "type": "PTP_WORK" - } - ], - "WaitForThreadpoolWorkCallbacks": [ - { - "name": "pwk", - "type": "PTP_WORK" - }, - { - "name": "fCancelPendingCallbacks", - "type": "BOOL" - } - ], - "CloseThreadpoolWork": [ - { - "name": "pwk", - "type": "PTP_WORK" - } - ], - "CreateThreadpoolTimer": [ - { - "name": "pfnti", - "type": "PTP_TIMER_CALLBACK" - }, - { - "name": "pv", - "type": "PVOID" - }, - { - "name": "pcbe", - "type": "PTP_CALLBACK_ENVIRON" - } - ], - "SetThreadpoolTimer": [ - { - "name": "pti", - "type": "PTP_TIMER" - }, - { - "name": "pftDueTime", - "type": "PFILETIME" - }, - { - "name": "msPeriod", - "type": "DWORD" - }, - { - "name": "msWindowLength", - "type": "DWORD" - } - ], - "IsThreadpoolTimerSet": [ - { - "name": "pti", - "type": "PTP_TIMER" - } - ], - "WaitForThreadpoolTimerCallbacks": [ - { - "name": "pti", - "type": "PTP_TIMER" - }, - { - "name": "fCancelPendingCallbacks", - "type": "BOOL" - } - ], - "CloseThreadpoolTimer": [ - { - "name": "pti", - "type": "PTP_TIMER" - } - ], - "CreateThreadpoolWait": [ - { - "name": "pfnwa", - "type": "PTP_WAIT_CALLBACK" - }, - { - "name": "pv", - "type": "PVOID" - }, - { - "name": "pcbe", - "type": "PTP_CALLBACK_ENVIRON" - } - ], - "SetThreadpoolWait": [ - { - "name": "pwa", - "type": "PTP_WAIT" - }, - { - "name": "h", - "type": "HANDLE" - }, - { - "name": "pftTimeout", - "type": "PFILETIME" - } - ], - "WaitForThreadpoolWaitCallbacks": [ - { - "name": "pwa", - "type": "PTP_WAIT" - }, - { - "name": "fCancelPendingCallbacks", - "type": "BOOL" - } - ], - "CloseThreadpoolWait": [ - { - "name": "pwa", - "type": "PTP_WAIT" - } - ], - "CreateThreadpoolIo": [ - { - "name": "fl", - "type": "HANDLE" - }, - { - "name": "pfnio", - "type": "PTP_WIN32_IO_CALLBACK" - }, - { - "name": "pv", - "type": "PVOID" - }, - { - "name": "pcbe", - "type": "PTP_CALLBACK_ENVIRON" - } - ], - "StartThreadpoolIo": [ - { - "name": "pio", - "type": "PTP_IO" - } - ], - "CancelThreadpoolIo": [ - { - "name": "pio", - "type": "PTP_IO" - } - ], - "WaitForThreadpoolIoCallbacks": [ - { - "name": "pio", - "type": "PTP_IO" - }, - { - "name": "fCancelPendingCallbacks", - "type": "BOOL" - } - ], - "CloseThreadpoolIo": [ - { - "name": "pio", - "type": "PTP_IO" - } - ], - "SetThreadpoolTimerEx": [ - { - "name": "pti", - "type": "PTP_TIMER" - }, - { - "name": "pftDueTime", - "type": "PFILETIME" - }, - { - "name": "msPeriod", - "type": "DWORD" - }, - { - "name": "msWindowLength", - "type": "DWORD" - } - ], - "SetThreadpoolWaitEx": [ - { - "name": "pwa", - "type": "PTP_WAIT" - }, - { - "name": "h", - "type": "HANDLE" - }, - { - "name": "pftTimeout", - "type": "PFILETIME" - }, - { - "name": "Reserved", - "type": "PVOID" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/threadpoollegacyapiset.json b/qiling/extensions/windows_sdk/threadpoollegacyapiset.json deleted file mode 100644 index 6043cdaa4..000000000 --- a/qiling/extensions/windows_sdk/threadpoollegacyapiset.json +++ /dev/null @@ -1,104 +0,0 @@ -{ - "QueueUserWorkItem": [ - { - "name": "Function", - "type": "LPTHREAD_START_ROUTINE" - }, - { - "name": "Context", - "type": "PVOID" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "UnregisterWaitEx": [ - { - "name": "WaitHandle", - "type": "HANDLE" - }, - { - "name": "CompletionEvent", - "type": "HANDLE" - } - ], - "CreateTimerQueue": [ - { - "name": "VOID", - "type": "void" - } - ], - "CreateTimerQueueTimer": [ - { - "name": "phNewTimer", - "type": "PHANDLE" - }, - { - "name": "TimerQueue", - "type": "HANDLE" - }, - { - "name": "Callback", - "type": "WAITORTIMERCALLBACK" - }, - { - "name": "Parameter", - "type": "PVOID" - }, - { - "name": "DueTime", - "type": "DWORD" - }, - { - "name": "Period", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "ChangeTimerQueueTimer": [ - { - "name": "TimerQueue", - "type": "HANDLE" - }, - { - "name": "Timer", - "type": "HANDLE" - }, - { - "name": "DueTime", - "type": "ULONG" - }, - { - "name": "Period", - "type": "ULONG" - } - ], - "DeleteTimerQueueTimer": [ - { - "name": "TimerQueue", - "type": "HANDLE" - }, - { - "name": "Timer", - "type": "HANDLE" - }, - { - "name": "CompletionEvent", - "type": "HANDLE" - } - ], - "DeleteTimerQueueEx": [ - { - "name": "TimerQueue", - "type": "HANDLE" - }, - { - "name": "CompletionEvent", - "type": "HANDLE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/timeapi.json b/qiling/extensions/windows_sdk/timeapi.json deleted file mode 100644 index 15e2a3601..000000000 --- a/qiling/extensions/windows_sdk/timeapi.json +++ /dev/null @@ -1,40 +0,0 @@ -{ - "timeGetSystemTime": [ - { - "name": "pmmt", - "type": "LPMMTIME" - }, - { - "name": "cbmmt", - "type": "UINT" - } - ], - "timeGetTime": [ - { - "name": "VOID", - "type": "void" - } - ], - "timeGetDevCaps": [ - { - "name": "ptc", - "type": "LPTIMECAPS" - }, - { - "name": "cbtc", - "type": "UINT" - } - ], - "timeBeginPeriod": [ - { - "name": "uPeriod", - "type": "UINT" - } - ], - "timeEndPeriod": [ - { - "name": "uPeriod", - "type": "UINT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/timezoneapi.json b/qiling/extensions/windows_sdk/timezoneapi.json deleted file mode 100644 index 68215878a..000000000 --- a/qiling/extensions/windows_sdk/timezoneapi.json +++ /dev/null @@ -1,140 +0,0 @@ -{ - "SystemTimeToTzSpecificLocalTime": [ - { - "name": "lpTimeZoneInformation", - "type": "TIME_ZONE_INFORMATION" - }, - { - "name": "lpUniversalTime", - "type": "SYSTEMTIME" - }, - { - "name": "lpLocalTime", - "type": "LPSYSTEMTIME" - } - ], - "TzSpecificLocalTimeToSystemTime": [ - { - "name": "lpTimeZoneInformation", - "type": "TIME_ZONE_INFORMATION" - }, - { - "name": "lpLocalTime", - "type": "SYSTEMTIME" - }, - { - "name": "lpUniversalTime", - "type": "LPSYSTEMTIME" - } - ], - "FileTimeToSystemTime": [ - { - "name": "lpFileTime", - "type": "FILETIME" - }, - { - "name": "lpSystemTime", - "type": "LPSYSTEMTIME" - } - ], - "SystemTimeToFileTime": [ - { - "name": "lpSystemTime", - "type": "SYSTEMTIME" - }, - { - "name": "lpFileTime", - "type": "LPFILETIME" - } - ], - "GetTimeZoneInformation": [ - { - "name": "lpTimeZoneInformation", - "type": "LPTIME_ZONE_INFORMATION" - } - ], - "SetTimeZoneInformation": [ - { - "name": "lpTimeZoneInformation", - "type": "TIME_ZONE_INFORMATION" - } - ], - "SetDynamicTimeZoneInformation": [ - { - "name": "lpTimeZoneInformation", - "type": "DYNAMIC_TIME_ZONE_INFORMATION" - } - ], - "GetDynamicTimeZoneInformation": [ - { - "name": "pTimeZoneInformation", - "type": "PDYNAMIC_TIME_ZONE_INFORMATION" - } - ], - "GetTimeZoneInformationForYear": [ - { - "name": "wYear", - "type": "USHORT" - }, - { - "name": "pdtzi", - "type": "PDYNAMIC_TIME_ZONE_INFORMATION" - }, - { - "name": "ptzi", - "type": "LPTIME_ZONE_INFORMATION" - } - ], - "EnumDynamicTimeZoneInformation": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "lpTimeZoneInformation", - "type": "PDYNAMIC_TIME_ZONE_INFORMATION" - } - ], - "GetDynamicTimeZoneInformationEffectiveYears": [ - { - "name": "lpTimeZoneInformation", - "type": "PDYNAMIC_TIME_ZONE_INFORMATION" - }, - { - "name": "FirstYear", - "type": "LPDWORD" - }, - { - "name": "LastYear", - "type": "LPDWORD" - } - ], - "SystemTimeToTzSpecificLocalTimeEx": [ - { - "name": "lpTimeZoneInformation", - "type": "DYNAMIC_TIME_ZONE_INFORMATION" - }, - { - "name": "lpUniversalTime", - "type": "SYSTEMTIME" - }, - { - "name": "lpLocalTime", - "type": "LPSYSTEMTIME" - } - ], - "TzSpecificLocalTimeToSystemTimeEx": [ - { - "name": "lpTimeZoneInformation", - "type": "DYNAMIC_TIME_ZONE_INFORMATION" - }, - { - "name": "lpLocalTime", - "type": "SYSTEMTIME" - }, - { - "name": "lpUniversalTime", - "type": "LPSYSTEMTIME" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/tlhelp32.json b/qiling/extensions/windows_sdk/tlhelp32.json deleted file mode 100644 index 0a3f8b637..000000000 --- a/qiling/extensions/windows_sdk/tlhelp32.json +++ /dev/null @@ -1,174 +0,0 @@ -{ - "CreateToolhelp32Snapshot": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "th32ProcessID", - "type": "DWORD" - } - ], - "Heap32ListFirst": [ - { - "name": "hSnapshot", - "type": "HANDLE" - }, - { - "name": "lphl", - "type": "LPHEAPLIST32" - } - ], - "Heap32ListNext": [ - { - "name": "hSnapshot", - "type": "HANDLE" - }, - { - "name": "lphl", - "type": "LPHEAPLIST32" - } - ], - "Heap32First": [ - { - "name": "lphe", - "type": "LPHEAPENTRY32" - }, - { - "name": "th32ProcessID", - "type": "DWORD" - }, - { - "name": "th32HeapID", - "type": "ULONG_PTR" - } - ], - "Heap32Next": [ - { - "name": "lphe", - "type": "LPHEAPENTRY32" - } - ], - "Toolhelp32ReadProcessMemory": [ - { - "name": "th32ProcessID", - "type": "DWORD" - }, - { - "name": "lpBaseAddress", - "type": "LPCVOID" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "cbRead", - "type": "SIZE_T" - }, - { - "name": "lpNumberOfBytesRead", - "type": "SIZE_T" - } - ], - "Process32FirstW": [ - { - "name": "hSnapshot", - "type": "HANDLE" - }, - { - "name": "lppe", - "type": "LPPROCESSENTRY32W" - } - ], - "Process32NextW": [ - { - "name": "hSnapshot", - "type": "HANDLE" - }, - { - "name": "lppe", - "type": "LPPROCESSENTRY32W" - } - ], - "Process32First": [ - { - "name": "hSnapshot", - "type": "HANDLE" - }, - { - "name": "lppe", - "type": "LPPROCESSENTRY32" - } - ], - "Process32Next": [ - { - "name": "hSnapshot", - "type": "HANDLE" - }, - { - "name": "lppe", - "type": "LPPROCESSENTRY32" - } - ], - "Thread32First": [ - { - "name": "hSnapshot", - "type": "HANDLE" - }, - { - "name": "lpte", - "type": "LPTHREADENTRY32" - } - ], - "Thread32Next": [ - { - "name": "hSnapshot", - "type": "HANDLE" - }, - { - "name": "lpte", - "type": "LPTHREADENTRY32" - } - ], - "Module32FirstW": [ - { - "name": "hSnapshot", - "type": "HANDLE" - }, - { - "name": "lpme", - "type": "LPMODULEENTRY32W" - } - ], - "Module32NextW": [ - { - "name": "hSnapshot", - "type": "HANDLE" - }, - { - "name": "lpme", - "type": "LPMODULEENTRY32W" - } - ], - "Module32First": [ - { - "name": "hSnapshot", - "type": "HANDLE" - }, - { - "name": "lpme", - "type": "LPMODULEENTRY32" - } - ], - "Module32Next": [ - { - "name": "hSnapshot", - "type": "HANDLE" - }, - { - "name": "lpme", - "type": "LPMODULEENTRY32" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/appnotify.json b/qiling/extensions/windows_sdk/twinapi.json similarity index 100% rename from qiling/extensions/windows_sdk/appnotify.json rename to qiling/extensions/windows_sdk/twinapi.json diff --git a/qiling/extensions/windows_sdk/unknwn.json b/qiling/extensions/windows_sdk/unknwn.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/unknwn.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/unknwnbase.json b/qiling/extensions/windows_sdk/unknwnbase.json deleted file mode 100644 index af298d5f0..000000000 --- a/qiling/extensions/windows_sdk/unknwnbase.json +++ /dev/null @@ -1,28 +0,0 @@ -{ - "IUnknown_QueryInterface_Proxy": [ - { - "name": "This", - "type": "IUnknown" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppvObject", - "type": "void" - } - ], - "IUnknown_AddRef_Proxy": [ - { - "name": "This", - "type": "IUnknown" - } - ], - "IUnknown_Release_Proxy": [ - { - "name": "This", - "type": "IUnknown" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/utilapiset.json b/qiling/extensions/windows_sdk/utilapiset.json deleted file mode 100644 index aa69638be..000000000 --- a/qiling/extensions/windows_sdk/utilapiset.json +++ /dev/null @@ -1,12 +0,0 @@ -{ - "Beep": [ - { - "name": "dwFreq", - "type": "DWORD" - }, - { - "name": "dwDuration", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/versionhelpers.json b/qiling/extensions/windows_sdk/versionhelpers.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/versionhelpers.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wct.json b/qiling/extensions/windows_sdk/wct.json deleted file mode 100644 index 9b7afa768..000000000 --- a/qiling/extensions/windows_sdk/wct.json +++ /dev/null @@ -1,58 +0,0 @@ -{ - "OpenThreadWaitChainSession": [ - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "callback", - "type": "PWAITCHAINCALLBACK" - } - ], - "CloseThreadWaitChainSession": [ - { - "name": "WctHandle", - "type": "HWCT" - } - ], - "GetThreadWaitChain": [ - { - "name": "WctHandle", - "type": "HWCT" - }, - { - "name": "Context", - "type": "DWORD_PTR" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "ThreadId", - "type": "DWORD" - }, - { - "name": "NodeCount", - "type": "LPDWORD" - }, - { - "name": "NodeInfoArray", - "type": "PWAITCHAIN_NODE_INFO" - }, - { - "name": "IsCycle", - "type": "LPBOOL" - } - ], - "RegisterWaitChainCOMCallback": [ - { - "name": "CallStateCallback", - "type": "PCOGETCALLSTATE" - }, - { - "name": "ActivationStateCallback", - "type": "PCOGETACTIVATIONSTATE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wia_xp.json b/qiling/extensions/windows_sdk/wia_xp.json deleted file mode 100644 index a452ee800..000000000 --- a/qiling/extensions/windows_sdk/wia_xp.json +++ /dev/null @@ -1,50 +0,0 @@ -{ - "LPSAFEARRAY_UserSize": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "LPSAFEARRAY" - } - ], - "LPSAFEARRAY_UserFree": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "LPSAFEARRAY" - } - ], - "LPSAFEARRAY_UserSize64": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "LPSAFEARRAY" - } - ], - "LPSAFEARRAY_UserFree64": [ - { - "name": "VOID", - "type": "unsigned long" - }, - { - "name": "VOID", - "type": "LPSAFEARRAY" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winbase.json b/qiling/extensions/windows_sdk/winbase.json deleted file mode 100644 index 60f5a5cd4..000000000 --- a/qiling/extensions/windows_sdk/winbase.json +++ /dev/null @@ -1,7596 +0,0 @@ -{ - "GetEnvironmentVariableA": [ - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "GetEnvironmentVariableW": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "SetEnvironmentVariableA": [ - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpValue", - "type": "LPCSTR" - } - ], - "SetEnvironmentVariableW": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpValue", - "type": "LPCWSTR" - } - ], - "SetCurrentDirectoryA": [ - { - "name": "lpPathName", - "type": "LPCSTR" - } - ], - "SetCurrentDirectoryW": [ - { - "name": "lpPathName", - "type": "LPCWSTR" - } - ], - "GetCurrentDirectoryA": [ - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - } - ], - "GetCurrentDirectoryW": [ - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - } - ], - "CreateDirectoryA": [ - { - "name": "lpPathName", - "type": "LPCSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "CreateDirectoryW": [ - { - "name": "lpPathName", - "type": "LPCWSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "DefineDosDeviceW": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpDeviceName", - "type": "LPCWSTR" - }, - { - "name": "lpTargetPath", - "type": "LPCWSTR" - } - ], - "DeleteFileA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "DeleteFileW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "DeleteVolumeMountPointW": [ - { - "name": "lpszVolumeMountPoint", - "type": "LPCWSTR" - } - ], - "FindFirstVolumeW": [ - { - "name": "lpszVolumeName", - "type": "LPWSTR" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - } - ], - "FindNextVolumeW": [ - { - "name": "hFindVolume", - "type": "HANDLE" - }, - { - "name": "lpszVolumeName", - "type": "LPWSTR" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - } - ], - "GetLogicalDriveStringsW": [ - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - } - ], - "GetShortPathNameW": [ - { - "name": "lpszLongPath", - "type": "LPCWSTR" - }, - { - "name": "lpszShortPath", - "type": "LPWSTR" - }, - { - "name": "cchBuffer", - "type": "DWORD" - } - ], - "GetTempFileNameW": [ - { - "name": "lpPathName", - "type": "LPCWSTR" - }, - { - "name": "lpPrefixString", - "type": "LPCWSTR" - }, - { - "name": "uUnique", - "type": "UINT" - }, - { - "name": "lpTempFileName", - "type": "LPWSTR" - } - ], - "GetVolumePathNameW": [ - { - "name": "lpszFileName", - "type": "LPCWSTR" - }, - { - "name": "lpszVolumePathName", - "type": "LPWSTR" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - } - ], - "QueryDosDeviceW": [ - { - "name": "lpDeviceName", - "type": "LPCWSTR" - }, - { - "name": "lpTargetPath", - "type": "LPWSTR" - }, - { - "name": "ucchMax", - "type": "DWORD" - } - ], - "GetVolumeNameForVolumeMountPointW": [ - { - "name": "lpszVolumeMountPoint", - "type": "LPCWSTR" - }, - { - "name": "lpszVolumeName", - "type": "LPWSTR" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - } - ], - "GetVolumePathNamesForVolumeNameW": [ - { - "name": "lpszVolumeName", - "type": "LPCWSTR" - }, - { - "name": "lpszVolumePathNames", - "type": "LPWCH" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - }, - { - "name": "lpcchReturnLength", - "type": "PDWORD" - } - ], - "GetTempFileNameA": [ - { - "name": "lpPathName", - "type": "LPCSTR" - }, - { - "name": "lpPrefixString", - "type": "LPCSTR" - }, - { - "name": "uUnique", - "type": "UINT" - }, - { - "name": "lpTempFileName", - "type": "LPSTR" - } - ], - "CreateNamedPipeW": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "dwOpenMode", - "type": "DWORD" - }, - { - "name": "dwPipeMode", - "type": "DWORD" - }, - { - "name": "nMaxInstances", - "type": "DWORD" - }, - { - "name": "nOutBufferSize", - "type": "DWORD" - }, - { - "name": "nInBufferSize", - "type": "DWORD" - }, - { - "name": "nDefaultTimeOut", - "type": "DWORD" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "WaitNamedPipeW": [ - { - "name": "lpNamedPipeName", - "type": "LPCWSTR" - }, - { - "name": "nTimeOut", - "type": "DWORD" - } - ], - "GetNamedPipeClientComputerNameW": [ - { - "name": "Pipe", - "type": "HANDLE" - }, - { - "name": "ClientComputerName", - "type": "LPWSTR" - }, - { - "name": "ClientComputerNameLength", - "type": "ULONG" - } - ], - "GetNamedPipeHandleStateW": [ - { - "name": "hNamedPipe", - "type": "HANDLE" - }, - { - "name": "lpState", - "type": "LPDWORD" - }, - { - "name": "lpCurInstances", - "type": "LPDWORD" - }, - { - "name": "lpMaxCollectionCount", - "type": "LPDWORD" - }, - { - "name": "lpCollectDataTimeout", - "type": "LPDWORD" - }, - { - "name": "lpUserName", - "type": "LPWSTR" - }, - { - "name": "nMaxUserNameSize", - "type": "DWORD" - } - ], - "CallNamedPipeW": [ - { - "name": "lpNamedPipeName", - "type": "LPCWSTR" - }, - { - "name": "lpInBuffer", - "type": "LPVOID" - }, - { - "name": "nInBufferSize", - "type": "DWORD" - }, - { - "name": "lpOutBuffer", - "type": "LPVOID" - }, - { - "name": "nOutBufferSize", - "type": "DWORD" - }, - { - "name": "lpBytesRead", - "type": "LPDWORD" - }, - { - "name": "nTimeOut", - "type": "DWORD" - } - ], - "CreateSemaphoreExW": [ - { - "name": "lpSemaphoreAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lInitialCount", - "type": "LONG" - }, - { - "name": "lMaximumCount", - "type": "LONG" - }, - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - } - ], - "CreateSemaphoreW": [ - { - "name": "lpSemaphoreAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lInitialCount", - "type": "LONG" - }, - { - "name": "lMaximumCount", - "type": "LONG" - }, - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "CreateFileMappingW": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpFileMappingAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "flProtect", - "type": "DWORD" - }, - { - "name": "dwMaximumSizeHigh", - "type": "DWORD" - }, - { - "name": "dwMaximumSizeLow", - "type": "DWORD" - }, - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "OpenFileMappingW": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "CreateFileMappingNumaW": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpFileMappingAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "flProtect", - "type": "DWORD" - }, - { - "name": "dwMaximumSizeHigh", - "type": "DWORD" - }, - { - "name": "dwMaximumSizeLow", - "type": "DWORD" - }, - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "nndPreferred", - "type": "DWORD" - } - ], - "CreateJobObjectW": [ - { - "name": "lpJobAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "OpenJobObjectW": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "Wow64GetThreadContext": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "lpContext", - "type": "PWOW64_CONTEXT" - } - ], - "Wow64SetThreadContext": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "lpContext", - "type": "WOW64_CONTEXT" - } - ], - "Wow64SuspendThread": [ - { - "name": "hThread", - "type": "HANDLE" - } - ], - "FindResourceExW": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpType", - "type": "LPCWSTR" - }, - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "wLanguage", - "type": "WORD" - } - ], - "FindResourceW": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpType", - "type": "LPCWSTR" - } - ], - "EnumResourceNamesW": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpType", - "type": "LPCWSTR" - }, - { - "name": "lpEnumFunc", - "type": "ENUMRESNAMEPROCW" - }, - { - "name": "lParam", - "type": "LONG_PTR" - } - ], - "AccessCheckAndAuditAlarmW": [ - { - "name": "SubsystemName", - "type": "LPCWSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "ObjectTypeName", - "type": "LPWSTR" - }, - { - "name": "ObjectName", - "type": "LPWSTR" - }, - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "ObjectCreation", - "type": "BOOL" - }, - { - "name": "GrantedAccess", - "type": "LPDWORD" - }, - { - "name": "AccessStatus", - "type": "LPBOOL" - }, - { - "name": "pfGenerateOnClose", - "type": "LPBOOL" - } - ], - "AccessCheckByTypeAndAuditAlarmW": [ - { - "name": "SubsystemName", - "type": "LPCWSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "ObjectTypeName", - "type": "LPCWSTR" - }, - { - "name": "ObjectName", - "type": "LPCWSTR" - }, - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "PrincipalSelfSid", - "type": "PSID" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "AuditType", - "type": "AUDIT_EVENT_TYPE" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "ObjectTypeList", - "type": "POBJECT_TYPE_LIST" - }, - { - "name": "ObjectTypeListLength", - "type": "DWORD" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "ObjectCreation", - "type": "BOOL" - }, - { - "name": "GrantedAccess", - "type": "LPDWORD" - }, - { - "name": "AccessStatus", - "type": "LPBOOL" - }, - { - "name": "pfGenerateOnClose", - "type": "LPBOOL" - } - ], - "AccessCheckByTypeResultListAndAuditAlarmW": [ - { - "name": "SubsystemName", - "type": "LPCWSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "ObjectTypeName", - "type": "LPCWSTR" - }, - { - "name": "ObjectName", - "type": "LPCWSTR" - }, - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "PrincipalSelfSid", - "type": "PSID" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "AuditType", - "type": "AUDIT_EVENT_TYPE" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "ObjectTypeList", - "type": "POBJECT_TYPE_LIST" - }, - { - "name": "ObjectTypeListLength", - "type": "DWORD" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "ObjectCreation", - "type": "BOOL" - }, - { - "name": "GrantedAccessList", - "type": "LPDWORD" - }, - { - "name": "AccessStatusList", - "type": "LPDWORD" - }, - { - "name": "pfGenerateOnClose", - "type": "LPBOOL" - } - ], - "AccessCheckByTypeResultListAndAuditAlarmByHandleW": [ - { - "name": "SubsystemName", - "type": "LPCWSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "ClientToken", - "type": "HANDLE" - }, - { - "name": "ObjectTypeName", - "type": "LPCWSTR" - }, - { - "name": "ObjectName", - "type": "LPCWSTR" - }, - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "PrincipalSelfSid", - "type": "PSID" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "AuditType", - "type": "AUDIT_EVENT_TYPE" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "ObjectTypeList", - "type": "POBJECT_TYPE_LIST" - }, - { - "name": "ObjectTypeListLength", - "type": "DWORD" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "ObjectCreation", - "type": "BOOL" - }, - { - "name": "GrantedAccessList", - "type": "LPDWORD" - }, - { - "name": "AccessStatusList", - "type": "LPDWORD" - }, - { - "name": "pfGenerateOnClose", - "type": "LPBOOL" - } - ], - "GetFileSecurityW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "RequestedInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "nLength", - "type": "DWORD" - }, - { - "name": "lpnLengthNeeded", - "type": "LPDWORD" - } - ], - "ObjectCloseAuditAlarmW": [ - { - "name": "SubsystemName", - "type": "LPCWSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "GenerateOnClose", - "type": "BOOL" - } - ], - "ObjectDeleteAuditAlarmW": [ - { - "name": "SubsystemName", - "type": "LPCWSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "GenerateOnClose", - "type": "BOOL" - } - ], - "ObjectOpenAuditAlarmW": [ - { - "name": "SubsystemName", - "type": "LPCWSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "ObjectTypeName", - "type": "LPWSTR" - }, - { - "name": "ObjectName", - "type": "LPWSTR" - }, - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "ClientToken", - "type": "HANDLE" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "GrantedAccess", - "type": "DWORD" - }, - { - "name": "Privileges", - "type": "PPRIVILEGE_SET" - }, - { - "name": "ObjectCreation", - "type": "BOOL" - }, - { - "name": "AccessGranted", - "type": "BOOL" - }, - { - "name": "GenerateOnClose", - "type": "LPBOOL" - } - ], - "ObjectPrivilegeAuditAlarmW": [ - { - "name": "SubsystemName", - "type": "LPCWSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "ClientToken", - "type": "HANDLE" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "Privileges", - "type": "PPRIVILEGE_SET" - }, - { - "name": "AccessGranted", - "type": "BOOL" - } - ], - "PrivilegedServiceAuditAlarmW": [ - { - "name": "SubsystemName", - "type": "LPCWSTR" - }, - { - "name": "ServiceName", - "type": "LPCWSTR" - }, - { - "name": "ClientToken", - "type": "HANDLE" - }, - { - "name": "Privileges", - "type": "PPRIVILEGE_SET" - }, - { - "name": "AccessGranted", - "type": "BOOL" - } - ], - "SetFileSecurityW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "CreatePrivateNamespaceW": [ - { - "name": "lpPrivateNamespaceAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpBoundaryDescriptor", - "type": "LPVOID" - }, - { - "name": "lpAliasPrefix", - "type": "LPCWSTR" - } - ], - "OpenPrivateNamespaceW": [ - { - "name": "lpBoundaryDescriptor", - "type": "LPVOID" - }, - { - "name": "lpAliasPrefix", - "type": "LPCWSTR" - } - ], - "CreateBoundaryDescriptorW": [ - { - "name": "Name", - "type": "LPCWSTR" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "GlobalAlloc": [ - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "dwBytes", - "type": "SIZE_T" - } - ], - "GlobalReAlloc": [ - { - "name": "hMem", - "type": "HGLOBAL" - }, - { - "name": "dwBytes", - "type": "SIZE_T" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "GlobalSize": [ - { - "name": "hMem", - "type": "HGLOBAL" - } - ], - "GlobalUnlock": [ - { - "name": "hMem", - "type": "HGLOBAL" - } - ], - "GlobalLock": [ - { - "name": "hMem", - "type": "HGLOBAL" - } - ], - "GlobalFlags": [ - { - "name": "hMem", - "type": "HGLOBAL" - } - ], - "GlobalHandle": [ - { - "name": "pMem", - "type": "LPCVOID" - } - ], - "GlobalFree": [ - { - "name": "hMem", - "type": "HGLOBAL" - } - ], - "GlobalMemoryStatus": [ - { - "name": "lpBuffer", - "type": "LPMEMORYSTATUS" - } - ], - "LocalAlloc": [ - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "uBytes", - "type": "SIZE_T" - } - ], - "LocalReAlloc": [ - { - "name": "hMem", - "type": "HLOCAL" - }, - { - "name": "uBytes", - "type": "SIZE_T" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "LocalLock": [ - { - "name": "hMem", - "type": "HLOCAL" - } - ], - "LocalHandle": [ - { - "name": "pMem", - "type": "LPCVOID" - } - ], - "LocalUnlock": [ - { - "name": "hMem", - "type": "HLOCAL" - } - ], - "LocalSize": [ - { - "name": "hMem", - "type": "HLOCAL" - } - ], - "LocalFlags": [ - { - "name": "hMem", - "type": "HLOCAL" - } - ], - "LocalFree": [ - { - "name": "hMem", - "type": "HLOCAL" - } - ], - "GetBinaryTypeA": [ - { - "name": "lpApplicationName", - "type": "LPCSTR" - }, - { - "name": "lpBinaryType", - "type": "LPDWORD" - } - ], - "GetBinaryTypeW": [ - { - "name": "lpApplicationName", - "type": "LPCWSTR" - }, - { - "name": "lpBinaryType", - "type": "LPDWORD" - } - ], - "GetShortPathNameA": [ - { - "name": "lpszLongPath", - "type": "LPCSTR" - }, - { - "name": "lpszShortPath", - "type": "LPSTR" - }, - { - "name": "cchBuffer", - "type": "DWORD" - } - ], - "GetLongPathNameTransactedA": [ - { - "name": "lpszShortPath", - "type": "LPCSTR" - }, - { - "name": "lpszLongPath", - "type": "LPSTR" - }, - { - "name": "cchBuffer", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "GetLongPathNameTransactedW": [ - { - "name": "lpszShortPath", - "type": "LPCWSTR" - }, - { - "name": "lpszLongPath", - "type": "LPWSTR" - }, - { - "name": "cchBuffer", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "GetProcessAffinityMask": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpProcessAffinityMask", - "type": "PDWORD_PTR" - }, - { - "name": "lpSystemAffinityMask", - "type": "PDWORD_PTR" - } - ], - "SetProcessAffinityMask": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "dwProcessAffinityMask", - "type": "DWORD_PTR" - } - ], - "GetProcessIoCounters": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpIoCounters", - "type": "PIO_COUNTERS" - } - ], - "GetProcessWorkingSetSize": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpMinimumWorkingSetSize", - "type": "PSIZE_T" - }, - { - "name": "lpMaximumWorkingSetSize", - "type": "PSIZE_T" - } - ], - "SetProcessWorkingSetSize": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "dwMinimumWorkingSetSize", - "type": "SIZE_T" - }, - { - "name": "dwMaximumWorkingSetSize", - "type": "SIZE_T" - } - ], - "FatalExit": [ - { - "name": "ExitCode", - "type": "int" - } - ], - "SwitchToFiber": [ - { - "name": "lpFiber", - "type": "LPVOID" - } - ], - "DeleteFiber": [ - { - "name": "lpFiber", - "type": "LPVOID" - } - ], - "ConvertFiberToThread": [ - { - "name": "VOID", - "type": "void" - } - ], - "CreateFiberEx": [ - { - "name": "dwStackCommitSize", - "type": "SIZE_T" - }, - { - "name": "dwStackReserveSize", - "type": "SIZE_T" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpStartAddress", - "type": "LPFIBER_START_ROUTINE" - }, - { - "name": "lpParameter", - "type": "LPVOID" - } - ], - "ConvertThreadToFiberEx": [ - { - "name": "lpParameter", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CreateFiber": [ - { - "name": "dwStackSize", - "type": "SIZE_T" - }, - { - "name": "lpStartAddress", - "type": "LPFIBER_START_ROUTINE" - }, - { - "name": "lpParameter", - "type": "LPVOID" - } - ], - "ConvertThreadToFiber": [ - { - "name": "lpParameter", - "type": "LPVOID" - } - ], - "CreateUmsCompletionList": [ - { - "name": "UmsCompletionList", - "type": "PUMS_COMPLETION_LIST" - } - ], - "DequeueUmsCompletionListItems": [ - { - "name": "UmsCompletionList", - "type": "PUMS_COMPLETION_LIST" - }, - { - "name": "WaitTimeOut", - "type": "DWORD" - }, - { - "name": "UmsThreadList", - "type": "PUMS_CONTEXT" - } - ], - "GetUmsCompletionListEvent": [ - { - "name": "UmsCompletionList", - "type": "PUMS_COMPLETION_LIST" - }, - { - "name": "UmsCompletionEvent", - "type": "PHANDLE" - } - ], - "ExecuteUmsThread": [ - { - "name": "UmsThread", - "type": "PUMS_CONTEXT" - } - ], - "UmsThreadYield": [ - { - "name": "SchedulerParam", - "type": "PVOID" - } - ], - "DeleteUmsCompletionList": [ - { - "name": "UmsCompletionList", - "type": "PUMS_COMPLETION_LIST" - } - ], - "GetCurrentUmsThread": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetNextUmsListItem": [ - { - "name": "UmsContext", - "type": "PUMS_CONTEXT" - } - ], - "QueryUmsThreadInformation": [ - { - "name": "UmsThread", - "type": "PUMS_CONTEXT" - }, - { - "name": "UmsThreadInfoClass", - "type": "UMS_THREAD_INFO_CLASS" - }, - { - "name": "UmsThreadInformation", - "type": "PVOID" - }, - { - "name": "UmsThreadInformationLength", - "type": "ULONG" - }, - { - "name": "ReturnLength", - "type": "PULONG" - } - ], - "SetUmsThreadInformation": [ - { - "name": "UmsThread", - "type": "PUMS_CONTEXT" - }, - { - "name": "UmsThreadInfoClass", - "type": "UMS_THREAD_INFO_CLASS" - }, - { - "name": "UmsThreadInformation", - "type": "PVOID" - }, - { - "name": "UmsThreadInformationLength", - "type": "ULONG" - } - ], - "DeleteUmsThreadContext": [ - { - "name": "UmsThread", - "type": "PUMS_CONTEXT" - } - ], - "CreateUmsThreadContext": [ - { - "name": "lpUmsThread", - "type": "PUMS_CONTEXT" - } - ], - "EnterUmsSchedulingMode": [ - { - "name": "SchedulerStartupInfo", - "type": "PUMS_SCHEDULER_STARTUP_INFO" - } - ], - "GetUmsSystemThreadInformation": [ - { - "name": "ThreadHandle", - "type": "HANDLE" - }, - { - "name": "SystemThreadInfo", - "type": "PUMS_SYSTEM_THREAD_INFORMATION" - } - ], - "SetThreadAffinityMask": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "dwThreadAffinityMask", - "type": "DWORD_PTR" - } - ], - "SetProcessDEPPolicy": [ - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetProcessDEPPolicy": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpFlags", - "type": "LPDWORD" - }, - { - "name": "lpPermanent", - "type": "PBOOL" - } - ], - "RequestWakeupLatency": [ - { - "name": "latency", - "type": "LATENCY_TIME" - } - ], - "IsSystemResumeAutomatic": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetThreadSelectorEntry": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "dwSelector", - "type": "DWORD" - }, - { - "name": "lpSelectorEntry", - "type": "LPLDT_ENTRY" - } - ], - "SetThreadExecutionState": [ - { - "name": "esFlags", - "type": "EXECUTION_STATE" - } - ], - "PowerCreateRequest": [ - { - "name": "Context", - "type": "PREASON_CONTEXT" - } - ], - "PowerSetRequest": [ - { - "name": "PowerRequest", - "type": "HANDLE" - }, - { - "name": "RequestType", - "type": "POWER_REQUEST_TYPE" - } - ], - "PowerClearRequest": [ - { - "name": "PowerRequest", - "type": "HANDLE" - }, - { - "name": "RequestType", - "type": "POWER_REQUEST_TYPE" - } - ], - "SetFileCompletionNotificationModes": [ - { - "name": "FileHandle", - "type": "HANDLE" - }, - { - "name": "Flags", - "type": "UCHAR" - } - ], - "Wow64GetThreadSelectorEntry": [ - { - "name": "hThread", - "type": "HANDLE" - }, - { - "name": "dwSelector", - "type": "DWORD" - }, - { - "name": "lpSelectorEntry", - "type": "PWOW64_LDT_ENTRY" - } - ], - "DebugSetProcessKillOnExit": [ - { - "name": "KillOnExit", - "type": "BOOL" - } - ], - "DebugBreakProcess": [ - { - "name": "Process", - "type": "HANDLE" - } - ], - "PulseEvent": [ - { - "name": "hEvent", - "type": "HANDLE" - } - ], - "GlobalDeleteAtom": [ - { - "name": "nAtom", - "type": "ATOM" - } - ], - "InitAtomTable": [ - { - "name": "nSize", - "type": "DWORD" - } - ], - "DeleteAtom": [ - { - "name": "nAtom", - "type": "ATOM" - } - ], - "SetHandleCount": [ - { - "name": "uNumber", - "type": "UINT" - } - ], - "GetDevicePowerState": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "pfOn", - "type": "BOOL" - } - ], - "SetFileShortNameA": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpShortName", - "type": "LPCSTR" - } - ], - "SetFileShortNameW": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpShortName", - "type": "LPCWSTR" - } - ], - "LoadModule": [ - { - "name": "lpModuleName", - "type": "LPCSTR" - }, - { - "name": "lpParameterBlock", - "type": "LPVOID" - } - ], - "WinExec": [ - { - "name": "lpCmdLine", - "type": "LPCSTR" - }, - { - "name": "uCmdShow", - "type": "UINT" - } - ], - "ClearCommBreak": [ - { - "name": "hFile", - "type": "HANDLE" - } - ], - "ClearCommError": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpErrors", - "type": "LPDWORD" - }, - { - "name": "lpStat", - "type": "LPCOMSTAT" - } - ], - "SetupComm": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "dwInQueue", - "type": "DWORD" - }, - { - "name": "dwOutQueue", - "type": "DWORD" - } - ], - "EscapeCommFunction": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "dwFunc", - "type": "DWORD" - } - ], - "GetCommConfig": [ - { - "name": "hCommDev", - "type": "HANDLE" - }, - { - "name": "lpCC", - "type": "LPCOMMCONFIG" - }, - { - "name": "lpdwSize", - "type": "LPDWORD" - } - ], - "GetCommMask": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpEvtMask", - "type": "LPDWORD" - } - ], - "GetCommProperties": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpCommProp", - "type": "LPCOMMPROP" - } - ], - "GetCommModemStatus": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpModemStat", - "type": "LPDWORD" - } - ], - "GetCommState": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpDCB", - "type": "LPDCB" - } - ], - "GetCommTimeouts": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpCommTimeouts", - "type": "LPCOMMTIMEOUTS" - } - ], - "PurgeComm": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SetCommBreak": [ - { - "name": "hFile", - "type": "HANDLE" - } - ], - "SetCommConfig": [ - { - "name": "hCommDev", - "type": "HANDLE" - }, - { - "name": "lpCC", - "type": "LPCOMMCONFIG" - }, - { - "name": "dwSize", - "type": "DWORD" - } - ], - "SetCommMask": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "dwEvtMask", - "type": "DWORD" - } - ], - "SetCommState": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpDCB", - "type": "LPDCB" - } - ], - "SetCommTimeouts": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpCommTimeouts", - "type": "LPCOMMTIMEOUTS" - } - ], - "TransmitCommChar": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "cChar", - "type": "char" - } - ], - "WaitCommEvent": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpEvtMask", - "type": "LPDWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "OpenCommPort": [ - { - "name": "uPortNumber", - "type": "ULONG" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwFlagsAndAttributes", - "type": "DWORD" - } - ], - "GetCommPorts": [ - { - "name": "lpPortNumbers", - "type": "PULONG" - }, - { - "name": "uPortNumbersCount", - "type": "ULONG" - }, - { - "name": "puPortNumbersFound", - "type": "PULONG" - } - ], - "SetTapePosition": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "dwPositionMethod", - "type": "DWORD" - }, - { - "name": "dwPartition", - "type": "DWORD" - }, - { - "name": "dwOffsetLow", - "type": "DWORD" - }, - { - "name": "dwOffsetHigh", - "type": "DWORD" - }, - { - "name": "bImmediate", - "type": "BOOL" - } - ], - "GetTapePosition": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "dwPositionType", - "type": "DWORD" - }, - { - "name": "lpdwPartition", - "type": "LPDWORD" - }, - { - "name": "lpdwOffsetLow", - "type": "LPDWORD" - }, - { - "name": "lpdwOffsetHigh", - "type": "LPDWORD" - } - ], - "PrepareTape": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "dwOperation", - "type": "DWORD" - }, - { - "name": "bImmediate", - "type": "BOOL" - } - ], - "EraseTape": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "dwEraseType", - "type": "DWORD" - }, - { - "name": "bImmediate", - "type": "BOOL" - } - ], - "CreateTapePartition": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "dwPartitionMethod", - "type": "DWORD" - }, - { - "name": "dwCount", - "type": "DWORD" - }, - { - "name": "dwSize", - "type": "DWORD" - } - ], - "WriteTapemark": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "dwTapemarkType", - "type": "DWORD" - }, - { - "name": "dwTapemarkCount", - "type": "DWORD" - }, - { - "name": "bImmediate", - "type": "BOOL" - } - ], - "GetTapeStatus": [ - { - "name": "hDevice", - "type": "HANDLE" - } - ], - "GetTapeParameters": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "dwOperation", - "type": "DWORD" - }, - { - "name": "lpdwSize", - "type": "LPDWORD" - }, - { - "name": "lpTapeInformation", - "type": "LPVOID" - } - ], - "SetTapeParameters": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "dwOperation", - "type": "DWORD" - }, - { - "name": "lpTapeInformation", - "type": "LPVOID" - } - ], - "MulDiv": [ - { - "name": "nNumber", - "type": "int" - }, - { - "name": "nNumerator", - "type": "int" - }, - { - "name": "nDenominator", - "type": "int" - } - ], - "GetSystemDEPPolicy": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetSystemRegistryQuota": [ - { - "name": "pdwQuotaAllowed", - "type": "PDWORD" - }, - { - "name": "pdwQuotaUsed", - "type": "PDWORD" - } - ], - "FileTimeToDosDateTime": [ - { - "name": "lpFileTime", - "type": "FILETIME" - }, - { - "name": "lpFatDate", - "type": "LPWORD" - }, - { - "name": "lpFatTime", - "type": "LPWORD" - } - ], - "DosDateTimeToFileTime": [ - { - "name": "wFatDate", - "type": "WORD" - }, - { - "name": "wFatTime", - "type": "WORD" - }, - { - "name": "lpFileTime", - "type": "LPFILETIME" - } - ], - "FormatMessageA": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpSource", - "type": "LPCVOID" - }, - { - "name": "dwMessageId", - "type": "DWORD" - }, - { - "name": "dwLanguageId", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - }, - { - "name": "Arguments", - "type": "va_list" - } - ], - "FormatMessageW": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpSource", - "type": "LPCVOID" - }, - { - "name": "dwMessageId", - "type": "DWORD" - }, - { - "name": "dwLanguageId", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - }, - { - "name": "Arguments", - "type": "va_list" - } - ], - "CreateMailslotA": [ - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "nMaxMessageSize", - "type": "DWORD" - }, - { - "name": "lReadTimeout", - "type": "DWORD" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "CreateMailslotW": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "nMaxMessageSize", - "type": "DWORD" - }, - { - "name": "lReadTimeout", - "type": "DWORD" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "GetMailslotInfo": [ - { - "name": "hMailslot", - "type": "HANDLE" - }, - { - "name": "lpMaxMessageSize", - "type": "LPDWORD" - }, - { - "name": "lpNextSize", - "type": "LPDWORD" - }, - { - "name": "lpMessageCount", - "type": "LPDWORD" - }, - { - "name": "lpReadTimeout", - "type": "LPDWORD" - } - ], - "SetMailslotInfo": [ - { - "name": "hMailslot", - "type": "HANDLE" - }, - { - "name": "lReadTimeout", - "type": "DWORD" - } - ], - "EncryptFileA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "EncryptFileW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "DecryptFileA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "DecryptFileW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "FileEncryptionStatusA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "lpStatus", - "type": "LPDWORD" - } - ], - "FileEncryptionStatusW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "lpStatus", - "type": "LPDWORD" - } - ], - "OpenEncryptedFileRawA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "ulFlags", - "type": "ULONG" - }, - { - "name": "pvContext", - "type": "PVOID" - } - ], - "OpenEncryptedFileRawW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "ulFlags", - "type": "ULONG" - }, - { - "name": "pvContext", - "type": "PVOID" - } - ], - "ReadEncryptedFileRaw": [ - { - "name": "pfExportCallback", - "type": "PFE_EXPORT_FUNC" - }, - { - "name": "pvCallbackContext", - "type": "PVOID" - }, - { - "name": "pvContext", - "type": "PVOID" - } - ], - "WriteEncryptedFileRaw": [ - { - "name": "pfImportCallback", - "type": "PFE_IMPORT_FUNC" - }, - { - "name": "pvCallbackContext", - "type": "PVOID" - }, - { - "name": "pvContext", - "type": "PVOID" - } - ], - "CloseEncryptedFileRaw": [ - { - "name": "pvContext", - "type": "PVOID" - } - ], - "lstrcmpA": [ - { - "name": "lpString1", - "type": "LPCSTR" - }, - { - "name": "lpString2", - "type": "LPCSTR" - } - ], - "lstrcmpW": [ - { - "name": "lpString1", - "type": "LPCWSTR" - }, - { - "name": "lpString2", - "type": "LPCWSTR" - } - ], - "lstrcmpiA": [ - { - "name": "lpString1", - "type": "LPCSTR" - }, - { - "name": "lpString2", - "type": "LPCSTR" - } - ], - "lstrcmpiW": [ - { - "name": "lpString1", - "type": "LPCWSTR" - }, - { - "name": "lpString2", - "type": "LPCWSTR" - } - ], - "lstrcpynA": [ - { - "name": "lpString1", - "type": "LPSTR" - }, - { - "name": "lpString2", - "type": "LPCSTR" - }, - { - "name": "iMaxLength", - "type": "int" - } - ], - "lstrcpynW": [ - { - "name": "lpString1", - "type": "LPWSTR" - }, - { - "name": "lpString2", - "type": "LPCWSTR" - }, - { - "name": "iMaxLength", - "type": "int" - } - ], - "lstrcpyA": [ - { - "name": "lpString1", - "type": "LPSTR" - }, - { - "name": "lpString2", - "type": "LPCSTR" - } - ], - "lstrcpyW": [ - { - "name": "lpString1", - "type": "LPWSTR" - }, - { - "name": "lpString2", - "type": "LPCWSTR" - } - ], - "lstrcatA": [ - { - "name": "lpString1", - "type": "LPSTR" - }, - { - "name": "lpString2", - "type": "LPCSTR" - } - ], - "lstrcatW": [ - { - "name": "lpString1", - "type": "LPWSTR" - }, - { - "name": "lpString2", - "type": "LPCWSTR" - } - ], - "lstrlenA": [ - { - "name": "lpString", - "type": "LPCSTR" - } - ], - "lstrlenW": [ - { - "name": "lpString", - "type": "LPCWSTR" - } - ], - "OpenFile": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "lpReOpenBuff", - "type": "LPOFSTRUCT" - }, - { - "name": "uStyle", - "type": "UINT" - } - ], - "_lopen": [ - { - "name": "lpPathName", - "type": "LPCSTR" - }, - { - "name": "iReadWrite", - "type": "int" - } - ], - "_lcreat": [ - { - "name": "lpPathName", - "type": "LPCSTR" - }, - { - "name": "iAttribute", - "type": "int" - } - ], - "_lread": [ - { - "name": "hFile", - "type": "HFILE" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "uBytes", - "type": "UINT" - } - ], - "_lwrite": [ - { - "name": "hFile", - "type": "HFILE" - }, - { - "name": "lpBuffer", - "type": "LPCCH" - }, - { - "name": "uBytes", - "type": "UINT" - } - ], - "_lclose": [ - { - "name": "hFile", - "type": "HFILE" - } - ], - "_llseek": [ - { - "name": "hFile", - "type": "HFILE" - }, - { - "name": "lOffset", - "type": "LONG" - }, - { - "name": "iOrigin", - "type": "int" - } - ], - "IsTextUnicode": [ - { - "name": "lpv", - "type": "void" - }, - { - "name": "iSize", - "type": "int" - }, - { - "name": "lpiResult", - "type": "LPINT" - } - ], - "BackupRead": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpBuffer", - "type": "LPBYTE" - }, - { - "name": "nNumberOfBytesToRead", - "type": "DWORD" - }, - { - "name": "lpNumberOfBytesRead", - "type": "LPDWORD" - }, - { - "name": "bAbort", - "type": "BOOL" - }, - { - "name": "bProcessSecurity", - "type": "BOOL" - }, - { - "name": "lpContext", - "type": "LPVOID" - } - ], - "BackupSeek": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "dwLowBytesToSeek", - "type": "DWORD" - }, - { - "name": "dwHighBytesToSeek", - "type": "DWORD" - }, - { - "name": "lpdwLowByteSeeked", - "type": "LPDWORD" - }, - { - "name": "lpdwHighByteSeeked", - "type": "LPDWORD" - }, - { - "name": "lpContext", - "type": "LPVOID" - } - ], - "BackupWrite": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpBuffer", - "type": "LPBYTE" - }, - { - "name": "nNumberOfBytesToWrite", - "type": "DWORD" - }, - { - "name": "lpNumberOfBytesWritten", - "type": "LPDWORD" - }, - { - "name": "bAbort", - "type": "BOOL" - }, - { - "name": "bProcessSecurity", - "type": "BOOL" - }, - { - "name": "lpContext", - "type": "LPVOID" - } - ], - "CreateSemaphoreA": [ - { - "name": "lpSemaphoreAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lInitialCount", - "type": "LONG" - }, - { - "name": "lMaximumCount", - "type": "LONG" - }, - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "CreateSemaphoreExA": [ - { - "name": "lpSemaphoreAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lInitialCount", - "type": "LONG" - }, - { - "name": "lMaximumCount", - "type": "LONG" - }, - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - } - ], - "CreateFileMappingA": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpFileMappingAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "flProtect", - "type": "DWORD" - }, - { - "name": "dwMaximumSizeHigh", - "type": "DWORD" - }, - { - "name": "dwMaximumSizeLow", - "type": "DWORD" - }, - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "CreateFileMappingNumaA": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpFileMappingAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "flProtect", - "type": "DWORD" - }, - { - "name": "dwMaximumSizeHigh", - "type": "DWORD" - }, - { - "name": "dwMaximumSizeLow", - "type": "DWORD" - }, - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "nndPreferred", - "type": "DWORD" - } - ], - "OpenFileMappingA": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "GetLogicalDriveStringsA": [ - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - } - ], - "LoadPackagedLibrary": [ - { - "name": "lpwLibFileName", - "type": "LPCWSTR" - }, - { - "name": "Reserved", - "type": "DWORD" - } - ], - "QueryFullProcessImageNameA": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpExeName", - "type": "LPSTR" - }, - { - "name": "lpdwSize", - "type": "PDWORD" - } - ], - "QueryFullProcessImageNameW": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpExeName", - "type": "LPWSTR" - }, - { - "name": "lpdwSize", - "type": "PDWORD" - } - ], - "GetFirmwareEnvironmentVariableA": [ - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpGuid", - "type": "LPCSTR" - }, - { - "name": "pBuffer", - "type": "PVOID" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "GetFirmwareEnvironmentVariableW": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpGuid", - "type": "LPCWSTR" - }, - { - "name": "pBuffer", - "type": "PVOID" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "GetFirmwareEnvironmentVariableExA": [ - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpGuid", - "type": "LPCSTR" - }, - { - "name": "pBuffer", - "type": "PVOID" - }, - { - "name": "nSize", - "type": "DWORD" - }, - { - "name": "pdwAttribubutes", - "type": "PDWORD" - } - ], - "GetFirmwareEnvironmentVariableExW": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpGuid", - "type": "LPCWSTR" - }, - { - "name": "pBuffer", - "type": "PVOID" - }, - { - "name": "nSize", - "type": "DWORD" - }, - { - "name": "pdwAttribubutes", - "type": "PDWORD" - } - ], - "SetFirmwareEnvironmentVariableA": [ - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpGuid", - "type": "LPCSTR" - }, - { - "name": "pValue", - "type": "PVOID" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "SetFirmwareEnvironmentVariableW": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpGuid", - "type": "LPCWSTR" - }, - { - "name": "pValue", - "type": "PVOID" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "SetFirmwareEnvironmentVariableExA": [ - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpGuid", - "type": "LPCSTR" - }, - { - "name": "pValue", - "type": "PVOID" - }, - { - "name": "nSize", - "type": "DWORD" - }, - { - "name": "dwAttributes", - "type": "DWORD" - } - ], - "SetFirmwareEnvironmentVariableExW": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpGuid", - "type": "LPCWSTR" - }, - { - "name": "pValue", - "type": "PVOID" - }, - { - "name": "nSize", - "type": "DWORD" - }, - { - "name": "dwAttributes", - "type": "DWORD" - } - ], - "GetFirmwareType": [ - { - "name": "FirmwareType", - "type": "PFIRMWARE_TYPE" - } - ], - "IsNativeVhdBoot": [ - { - "name": "NativeVhdBoot", - "type": "PBOOL" - } - ], - "FindResourceA": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpType", - "type": "LPCSTR" - } - ], - "FindResourceExA": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpType", - "type": "LPCSTR" - }, - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "wLanguage", - "type": "WORD" - } - ], - "EnumResourceTypesA": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpEnumFunc", - "type": "ENUMRESTYPEPROCA" - }, - { - "name": "lParam", - "type": "LONG_PTR" - } - ], - "EnumResourceTypesW": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpEnumFunc", - "type": "ENUMRESTYPEPROCW" - }, - { - "name": "lParam", - "type": "LONG_PTR" - } - ], - "EnumResourceNamesA": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpType", - "type": "LPCSTR" - }, - { - "name": "lpEnumFunc", - "type": "ENUMRESNAMEPROCA" - }, - { - "name": "lParam", - "type": "LONG_PTR" - } - ], - "EnumResourceLanguagesA": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpType", - "type": "LPCSTR" - }, - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpEnumFunc", - "type": "ENUMRESLANGPROCA" - }, - { - "name": "lParam", - "type": "LONG_PTR" - } - ], - "EnumResourceLanguagesW": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "lpType", - "type": "LPCWSTR" - }, - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpEnumFunc", - "type": "ENUMRESLANGPROCW" - }, - { - "name": "lParam", - "type": "LONG_PTR" - } - ], - "BeginUpdateResourceA": [ - { - "name": "pFileName", - "type": "LPCSTR" - }, - { - "name": "bDeleteExistingResources", - "type": "BOOL" - } - ], - "BeginUpdateResourceW": [ - { - "name": "pFileName", - "type": "LPCWSTR" - }, - { - "name": "bDeleteExistingResources", - "type": "BOOL" - } - ], - "UpdateResourceA": [ - { - "name": "hUpdate", - "type": "HANDLE" - }, - { - "name": "lpType", - "type": "LPCSTR" - }, - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "wLanguage", - "type": "WORD" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "UpdateResourceW": [ - { - "name": "hUpdate", - "type": "HANDLE" - }, - { - "name": "lpType", - "type": "LPCWSTR" - }, - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "wLanguage", - "type": "WORD" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "EndUpdateResourceA": [ - { - "name": "hUpdate", - "type": "HANDLE" - }, - { - "name": "fDiscard", - "type": "BOOL" - } - ], - "EndUpdateResourceW": [ - { - "name": "hUpdate", - "type": "HANDLE" - }, - { - "name": "fDiscard", - "type": "BOOL" - } - ], - "GlobalAddAtomA": [ - { - "name": "lpString", - "type": "LPCSTR" - } - ], - "GlobalAddAtomW": [ - { - "name": "lpString", - "type": "LPCWSTR" - } - ], - "GlobalAddAtomExA": [ - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "GlobalAddAtomExW": [ - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "GlobalFindAtomA": [ - { - "name": "lpString", - "type": "LPCSTR" - } - ], - "GlobalFindAtomW": [ - { - "name": "lpString", - "type": "LPCWSTR" - } - ], - "GlobalGetAtomNameA": [ - { - "name": "nAtom", - "type": "ATOM" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "int" - } - ], - "GlobalGetAtomNameW": [ - { - "name": "nAtom", - "type": "ATOM" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "int" - } - ], - "AddAtomA": [ - { - "name": "lpString", - "type": "LPCSTR" - } - ], - "AddAtomW": [ - { - "name": "lpString", - "type": "LPCWSTR" - } - ], - "FindAtomA": [ - { - "name": "lpString", - "type": "LPCSTR" - } - ], - "FindAtomW": [ - { - "name": "lpString", - "type": "LPCWSTR" - } - ], - "GetAtomNameA": [ - { - "name": "nAtom", - "type": "ATOM" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "int" - } - ], - "GetAtomNameW": [ - { - "name": "nAtom", - "type": "ATOM" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "int" - } - ], - "GetProfileIntA": [ - { - "name": "lpAppName", - "type": "LPCSTR" - }, - { - "name": "lpKeyName", - "type": "LPCSTR" - }, - { - "name": "nDefault", - "type": "INT" - } - ], - "GetProfileIntW": [ - { - "name": "lpAppName", - "type": "LPCWSTR" - }, - { - "name": "lpKeyName", - "type": "LPCWSTR" - }, - { - "name": "nDefault", - "type": "INT" - } - ], - "GetProfileStringA": [ - { - "name": "lpAppName", - "type": "LPCSTR" - }, - { - "name": "lpKeyName", - "type": "LPCSTR" - }, - { - "name": "lpDefault", - "type": "LPCSTR" - }, - { - "name": "lpReturnedString", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "GetProfileStringW": [ - { - "name": "lpAppName", - "type": "LPCWSTR" - }, - { - "name": "lpKeyName", - "type": "LPCWSTR" - }, - { - "name": "lpDefault", - "type": "LPCWSTR" - }, - { - "name": "lpReturnedString", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "WriteProfileStringA": [ - { - "name": "lpAppName", - "type": "LPCSTR" - }, - { - "name": "lpKeyName", - "type": "LPCSTR" - }, - { - "name": "lpString", - "type": "LPCSTR" - } - ], - "WriteProfileStringW": [ - { - "name": "lpAppName", - "type": "LPCWSTR" - }, - { - "name": "lpKeyName", - "type": "LPCWSTR" - }, - { - "name": "lpString", - "type": "LPCWSTR" - } - ], - "GetProfileSectionA": [ - { - "name": "lpAppName", - "type": "LPCSTR" - }, - { - "name": "lpReturnedString", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "GetProfileSectionW": [ - { - "name": "lpAppName", - "type": "LPCWSTR" - }, - { - "name": "lpReturnedString", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "WriteProfileSectionA": [ - { - "name": "lpAppName", - "type": "LPCSTR" - }, - { - "name": "lpString", - "type": "LPCSTR" - } - ], - "WriteProfileSectionW": [ - { - "name": "lpAppName", - "type": "LPCWSTR" - }, - { - "name": "lpString", - "type": "LPCWSTR" - } - ], - "GetPrivateProfileIntA": [ - { - "name": "lpAppName", - "type": "LPCSTR" - }, - { - "name": "lpKeyName", - "type": "LPCSTR" - }, - { - "name": "nDefault", - "type": "INT" - }, - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "GetPrivateProfileIntW": [ - { - "name": "lpAppName", - "type": "LPCWSTR" - }, - { - "name": "lpKeyName", - "type": "LPCWSTR" - }, - { - "name": "nDefault", - "type": "INT" - }, - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "GetPrivateProfileStringA": [ - { - "name": "lpAppName", - "type": "LPCSTR" - }, - { - "name": "lpKeyName", - "type": "LPCSTR" - }, - { - "name": "lpDefault", - "type": "LPCSTR" - }, - { - "name": "lpReturnedString", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - }, - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "GetPrivateProfileStringW": [ - { - "name": "lpAppName", - "type": "LPCWSTR" - }, - { - "name": "lpKeyName", - "type": "LPCWSTR" - }, - { - "name": "lpDefault", - "type": "LPCWSTR" - }, - { - "name": "lpReturnedString", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - }, - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "WritePrivateProfileStringA": [ - { - "name": "lpAppName", - "type": "LPCSTR" - }, - { - "name": "lpKeyName", - "type": "LPCSTR" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "WritePrivateProfileStringW": [ - { - "name": "lpAppName", - "type": "LPCWSTR" - }, - { - "name": "lpKeyName", - "type": "LPCWSTR" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "GetPrivateProfileSectionA": [ - { - "name": "lpAppName", - "type": "LPCSTR" - }, - { - "name": "lpReturnedString", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - }, - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "GetPrivateProfileSectionW": [ - { - "name": "lpAppName", - "type": "LPCWSTR" - }, - { - "name": "lpReturnedString", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - }, - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "WritePrivateProfileSectionA": [ - { - "name": "lpAppName", - "type": "LPCSTR" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "WritePrivateProfileSectionW": [ - { - "name": "lpAppName", - "type": "LPCWSTR" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "GetPrivateProfileSectionNamesA": [ - { - "name": "lpszReturnBuffer", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - }, - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "GetPrivateProfileSectionNamesW": [ - { - "name": "lpszReturnBuffer", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - }, - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "GetPrivateProfileStructA": [ - { - "name": "lpszSection", - "type": "LPCSTR" - }, - { - "name": "lpszKey", - "type": "LPCSTR" - }, - { - "name": "lpStruct", - "type": "LPVOID" - }, - { - "name": "uSizeStruct", - "type": "UINT" - }, - { - "name": "szFile", - "type": "LPCSTR" - } - ], - "GetPrivateProfileStructW": [ - { - "name": "lpszSection", - "type": "LPCWSTR" - }, - { - "name": "lpszKey", - "type": "LPCWSTR" - }, - { - "name": "lpStruct", - "type": "LPVOID" - }, - { - "name": "uSizeStruct", - "type": "UINT" - }, - { - "name": "szFile", - "type": "LPCWSTR" - } - ], - "WritePrivateProfileStructA": [ - { - "name": "lpszSection", - "type": "LPCSTR" - }, - { - "name": "lpszKey", - "type": "LPCSTR" - }, - { - "name": "lpStruct", - "type": "LPVOID" - }, - { - "name": "uSizeStruct", - "type": "UINT" - }, - { - "name": "szFile", - "type": "LPCSTR" - } - ], - "WritePrivateProfileStructW": [ - { - "name": "lpszSection", - "type": "LPCWSTR" - }, - { - "name": "lpszKey", - "type": "LPCWSTR" - }, - { - "name": "lpStruct", - "type": "LPVOID" - }, - { - "name": "uSizeStruct", - "type": "UINT" - }, - { - "name": "szFile", - "type": "LPCWSTR" - } - ], - "Wow64EnableWow64FsRedirection": [ - { - "name": "Wow64FsEnableRedirection", - "type": "BOOLEAN" - } - ], - "SetDllDirectoryA": [ - { - "name": "lpPathName", - "type": "LPCSTR" - } - ], - "SetDllDirectoryW": [ - { - "name": "lpPathName", - "type": "LPCWSTR" - } - ], - "GetDllDirectoryA": [ - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - } - ], - "GetDllDirectoryW": [ - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - } - ], - "SetSearchPathMode": [ - { - "name": "Flags", - "type": "DWORD" - } - ], - "CreateDirectoryExA": [ - { - "name": "lpTemplateDirectory", - "type": "LPCSTR" - }, - { - "name": "lpNewDirectory", - "type": "LPCSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "CreateDirectoryExW": [ - { - "name": "lpTemplateDirectory", - "type": "LPCWSTR" - }, - { - "name": "lpNewDirectory", - "type": "LPCWSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "CreateDirectoryTransactedA": [ - { - "name": "lpTemplateDirectory", - "type": "LPCSTR" - }, - { - "name": "lpNewDirectory", - "type": "LPCSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "CreateDirectoryTransactedW": [ - { - "name": "lpTemplateDirectory", - "type": "LPCWSTR" - }, - { - "name": "lpNewDirectory", - "type": "LPCWSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "RemoveDirectoryTransactedA": [ - { - "name": "lpPathName", - "type": "LPCSTR" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "RemoveDirectoryTransactedW": [ - { - "name": "lpPathName", - "type": "LPCWSTR" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "GetFullPathNameTransactedA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "lpFilePart", - "type": "LPSTR" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "GetFullPathNameTransactedW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "lpFilePart", - "type": "LPWSTR" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "DefineDosDeviceA": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpDeviceName", - "type": "LPCSTR" - }, - { - "name": "lpTargetPath", - "type": "LPCSTR" - } - ], - "QueryDosDeviceA": [ - { - "name": "lpDeviceName", - "type": "LPCSTR" - }, - { - "name": "lpTargetPath", - "type": "LPSTR" - }, - { - "name": "ucchMax", - "type": "DWORD" - } - ], - "CreateFileTransactedA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwShareMode", - "type": "DWORD" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "dwCreationDisposition", - "type": "DWORD" - }, - { - "name": "dwFlagsAndAttributes", - "type": "DWORD" - }, - { - "name": "hTemplateFile", - "type": "HANDLE" - }, - { - "name": "hTransaction", - "type": "HANDLE" - }, - { - "name": "pusMiniVersion", - "type": "PUSHORT" - }, - { - "name": "lpExtendedParameter", - "type": "PVOID" - } - ], - "CreateFileTransactedW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwShareMode", - "type": "DWORD" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "dwCreationDisposition", - "type": "DWORD" - }, - { - "name": "dwFlagsAndAttributes", - "type": "DWORD" - }, - { - "name": "hTemplateFile", - "type": "HANDLE" - }, - { - "name": "hTransaction", - "type": "HANDLE" - }, - { - "name": "pusMiniVersion", - "type": "PUSHORT" - }, - { - "name": "lpExtendedParameter", - "type": "PVOID" - } - ], - "ReOpenFile": [ - { - "name": "hOriginalFile", - "type": "HANDLE" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwShareMode", - "type": "DWORD" - }, - { - "name": "dwFlagsAndAttributes", - "type": "DWORD" - } - ], - "SetFileAttributesTransactedA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "dwFileAttributes", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "SetFileAttributesTransactedW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "dwFileAttributes", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "GetFileAttributesTransactedA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "fInfoLevelId", - "type": "GET_FILEEX_INFO_LEVELS" - }, - { - "name": "lpFileInformation", - "type": "LPVOID" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "GetFileAttributesTransactedW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "fInfoLevelId", - "type": "GET_FILEEX_INFO_LEVELS" - }, - { - "name": "lpFileInformation", - "type": "LPVOID" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "GetCompressedFileSizeTransactedA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "lpFileSizeHigh", - "type": "LPDWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "GetCompressedFileSizeTransactedW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "lpFileSizeHigh", - "type": "LPDWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "DeleteFileTransactedA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "DeleteFileTransactedW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "CheckNameLegalDOS8Dot3A": [ - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpOemName", - "type": "LPSTR" - }, - { - "name": "OemNameSize", - "type": "DWORD" - }, - { - "name": "pbNameContainsSpaces", - "type": "PBOOL" - }, - { - "name": "pbNameLegal", - "type": "PBOOL" - } - ], - "CheckNameLegalDOS8Dot3W": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpOemName", - "type": "LPSTR" - }, - { - "name": "OemNameSize", - "type": "DWORD" - }, - { - "name": "pbNameContainsSpaces", - "type": "PBOOL" - }, - { - "name": "pbNameLegal", - "type": "PBOOL" - } - ], - "FindFirstFileTransactedA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "fInfoLevelId", - "type": "FINDEX_INFO_LEVELS" - }, - { - "name": "lpFindFileData", - "type": "LPVOID" - }, - { - "name": "fSearchOp", - "type": "FINDEX_SEARCH_OPS" - }, - { - "name": "lpSearchFilter", - "type": "LPVOID" - }, - { - "name": "dwAdditionalFlags", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "FindFirstFileTransactedW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "fInfoLevelId", - "type": "FINDEX_INFO_LEVELS" - }, - { - "name": "lpFindFileData", - "type": "LPVOID" - }, - { - "name": "fSearchOp", - "type": "FINDEX_SEARCH_OPS" - }, - { - "name": "lpSearchFilter", - "type": "LPVOID" - }, - { - "name": "dwAdditionalFlags", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "CopyFileA": [ - { - "name": "lpExistingFileName", - "type": "LPCSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCSTR" - }, - { - "name": "bFailIfExists", - "type": "BOOL" - } - ], - "CopyFileW": [ - { - "name": "lpExistingFileName", - "type": "LPCWSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCWSTR" - }, - { - "name": "bFailIfExists", - "type": "BOOL" - } - ], - "CopyFileExA": [ - { - "name": "lpExistingFileName", - "type": "LPCSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCSTR" - }, - { - "name": "lpProgressRoutine", - "type": "LPPROGRESS_ROUTINE" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "pbCancel", - "type": "LPBOOL" - }, - { - "name": "dwCopyFlags", - "type": "DWORD" - } - ], - "CopyFileExW": [ - { - "name": "lpExistingFileName", - "type": "LPCWSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCWSTR" - }, - { - "name": "lpProgressRoutine", - "type": "LPPROGRESS_ROUTINE" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "pbCancel", - "type": "LPBOOL" - }, - { - "name": "dwCopyFlags", - "type": "DWORD" - } - ], - "CopyFileTransactedA": [ - { - "name": "lpExistingFileName", - "type": "LPCSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCSTR" - }, - { - "name": "lpProgressRoutine", - "type": "LPPROGRESS_ROUTINE" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "pbCancel", - "type": "LPBOOL" - }, - { - "name": "dwCopyFlags", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "CopyFileTransactedW": [ - { - "name": "lpExistingFileName", - "type": "LPCWSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCWSTR" - }, - { - "name": "lpProgressRoutine", - "type": "LPPROGRESS_ROUTINE" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "pbCancel", - "type": "LPBOOL" - }, - { - "name": "dwCopyFlags", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "CopyFile2": [ - { - "name": "pwszExistingFileName", - "type": "PCWSTR" - }, - { - "name": "pwszNewFileName", - "type": "PCWSTR" - }, - { - "name": "pExtendedParameters", - "type": "COPYFILE2_EXTENDED_PARAMETERS" - } - ], - "MoveFileA": [ - { - "name": "lpExistingFileName", - "type": "LPCSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCSTR" - } - ], - "MoveFileW": [ - { - "name": "lpExistingFileName", - "type": "LPCWSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCWSTR" - } - ], - "MoveFileExA": [ - { - "name": "lpExistingFileName", - "type": "LPCSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "MoveFileExW": [ - { - "name": "lpExistingFileName", - "type": "LPCWSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "MoveFileWithProgressA": [ - { - "name": "lpExistingFileName", - "type": "LPCSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCSTR" - }, - { - "name": "lpProgressRoutine", - "type": "LPPROGRESS_ROUTINE" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "MoveFileWithProgressW": [ - { - "name": "lpExistingFileName", - "type": "LPCWSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCWSTR" - }, - { - "name": "lpProgressRoutine", - "type": "LPPROGRESS_ROUTINE" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "MoveFileTransactedA": [ - { - "name": "lpExistingFileName", - "type": "LPCSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCSTR" - }, - { - "name": "lpProgressRoutine", - "type": "LPPROGRESS_ROUTINE" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "MoveFileTransactedW": [ - { - "name": "lpExistingFileName", - "type": "LPCWSTR" - }, - { - "name": "lpNewFileName", - "type": "LPCWSTR" - }, - { - "name": "lpProgressRoutine", - "type": "LPPROGRESS_ROUTINE" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "ReplaceFileA": [ - { - "name": "lpReplacedFileName", - "type": "LPCSTR" - }, - { - "name": "lpReplacementFileName", - "type": "LPCSTR" - }, - { - "name": "lpBackupFileName", - "type": "LPCSTR" - }, - { - "name": "dwReplaceFlags", - "type": "DWORD" - }, - { - "name": "lpExclude", - "type": "LPVOID" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "ReplaceFileW": [ - { - "name": "lpReplacedFileName", - "type": "LPCWSTR" - }, - { - "name": "lpReplacementFileName", - "type": "LPCWSTR" - }, - { - "name": "lpBackupFileName", - "type": "LPCWSTR" - }, - { - "name": "dwReplaceFlags", - "type": "DWORD" - }, - { - "name": "lpExclude", - "type": "LPVOID" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "CreateHardLinkA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "lpExistingFileName", - "type": "LPCSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "CreateHardLinkW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "lpExistingFileName", - "type": "LPCWSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "CreateHardLinkTransactedA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "lpExistingFileName", - "type": "LPCSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "CreateHardLinkTransactedW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "lpExistingFileName", - "type": "LPCWSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "FindFirstStreamTransactedW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "InfoLevel", - "type": "STREAM_INFO_LEVELS" - }, - { - "name": "lpFindStreamData", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "FindFirstFileNameTransactedW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "StringLength", - "type": "LPDWORD" - }, - { - "name": "LinkName", - "type": "PWSTR" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "CreateNamedPipeA": [ - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "dwOpenMode", - "type": "DWORD" - }, - { - "name": "dwPipeMode", - "type": "DWORD" - }, - { - "name": "nMaxInstances", - "type": "DWORD" - }, - { - "name": "nOutBufferSize", - "type": "DWORD" - }, - { - "name": "nInBufferSize", - "type": "DWORD" - }, - { - "name": "nDefaultTimeOut", - "type": "DWORD" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "GetNamedPipeHandleStateA": [ - { - "name": "hNamedPipe", - "type": "HANDLE" - }, - { - "name": "lpState", - "type": "LPDWORD" - }, - { - "name": "lpCurInstances", - "type": "LPDWORD" - }, - { - "name": "lpMaxCollectionCount", - "type": "LPDWORD" - }, - { - "name": "lpCollectDataTimeout", - "type": "LPDWORD" - }, - { - "name": "lpUserName", - "type": "LPSTR" - }, - { - "name": "nMaxUserNameSize", - "type": "DWORD" - } - ], - "CallNamedPipeA": [ - { - "name": "lpNamedPipeName", - "type": "LPCSTR" - }, - { - "name": "lpInBuffer", - "type": "LPVOID" - }, - { - "name": "nInBufferSize", - "type": "DWORD" - }, - { - "name": "lpOutBuffer", - "type": "LPVOID" - }, - { - "name": "nOutBufferSize", - "type": "DWORD" - }, - { - "name": "lpBytesRead", - "type": "LPDWORD" - }, - { - "name": "nTimeOut", - "type": "DWORD" - } - ], - "WaitNamedPipeA": [ - { - "name": "lpNamedPipeName", - "type": "LPCSTR" - }, - { - "name": "nTimeOut", - "type": "DWORD" - } - ], - "GetNamedPipeClientComputerNameA": [ - { - "name": "Pipe", - "type": "HANDLE" - }, - { - "name": "ClientComputerName", - "type": "LPSTR" - }, - { - "name": "ClientComputerNameLength", - "type": "ULONG" - } - ], - "GetNamedPipeClientProcessId": [ - { - "name": "Pipe", - "type": "HANDLE" - }, - { - "name": "ClientProcessId", - "type": "PULONG" - } - ], - "GetNamedPipeClientSessionId": [ - { - "name": "Pipe", - "type": "HANDLE" - }, - { - "name": "ClientSessionId", - "type": "PULONG" - } - ], - "GetNamedPipeServerProcessId": [ - { - "name": "Pipe", - "type": "HANDLE" - }, - { - "name": "ServerProcessId", - "type": "PULONG" - } - ], - "GetNamedPipeServerSessionId": [ - { - "name": "Pipe", - "type": "HANDLE" - }, - { - "name": "ServerSessionId", - "type": "PULONG" - } - ], - "SetVolumeLabelA": [ - { - "name": "lpRootPathName", - "type": "LPCSTR" - }, - { - "name": "lpVolumeName", - "type": "LPCSTR" - } - ], - "SetVolumeLabelW": [ - { - "name": "lpRootPathName", - "type": "LPCWSTR" - }, - { - "name": "lpVolumeName", - "type": "LPCWSTR" - } - ], - "SetFileBandwidthReservation": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "nPeriodMilliseconds", - "type": "DWORD" - }, - { - "name": "nBytesPerPeriod", - "type": "DWORD" - }, - { - "name": "bDiscardable", - "type": "BOOL" - }, - { - "name": "lpTransferSize", - "type": "LPDWORD" - }, - { - "name": "lpNumOutstandingRequests", - "type": "LPDWORD" - } - ], - "GetFileBandwidthReservation": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "lpPeriodMilliseconds", - "type": "LPDWORD" - }, - { - "name": "lpBytesPerPeriod", - "type": "LPDWORD" - }, - { - "name": "pDiscardable", - "type": "LPBOOL" - }, - { - "name": "lpTransferSize", - "type": "LPDWORD" - }, - { - "name": "lpNumOutstandingRequests", - "type": "LPDWORD" - } - ], - "ClearEventLogA": [ - { - "name": "hEventLog", - "type": "HANDLE" - }, - { - "name": "lpBackupFileName", - "type": "LPCSTR" - } - ], - "ClearEventLogW": [ - { - "name": "hEventLog", - "type": "HANDLE" - }, - { - "name": "lpBackupFileName", - "type": "LPCWSTR" - } - ], - "BackupEventLogA": [ - { - "name": "hEventLog", - "type": "HANDLE" - }, - { - "name": "lpBackupFileName", - "type": "LPCSTR" - } - ], - "BackupEventLogW": [ - { - "name": "hEventLog", - "type": "HANDLE" - }, - { - "name": "lpBackupFileName", - "type": "LPCWSTR" - } - ], - "CloseEventLog": [ - { - "name": "hEventLog", - "type": "HANDLE" - } - ], - "DeregisterEventSource": [ - { - "name": "hEventLog", - "type": "HANDLE" - } - ], - "NotifyChangeEventLog": [ - { - "name": "hEventLog", - "type": "HANDLE" - }, - { - "name": "hEvent", - "type": "HANDLE" - } - ], - "GetNumberOfEventLogRecords": [ - { - "name": "hEventLog", - "type": "HANDLE" - }, - { - "name": "NumberOfRecords", - "type": "PDWORD" - } - ], - "GetOldestEventLogRecord": [ - { - "name": "hEventLog", - "type": "HANDLE" - }, - { - "name": "OldestRecord", - "type": "PDWORD" - } - ], - "OpenEventLogA": [ - { - "name": "lpUNCServerName", - "type": "LPCSTR" - }, - { - "name": "lpSourceName", - "type": "LPCSTR" - } - ], - "OpenEventLogW": [ - { - "name": "lpUNCServerName", - "type": "LPCWSTR" - }, - { - "name": "lpSourceName", - "type": "LPCWSTR" - } - ], - "RegisterEventSourceA": [ - { - "name": "lpUNCServerName", - "type": "LPCSTR" - }, - { - "name": "lpSourceName", - "type": "LPCSTR" - } - ], - "RegisterEventSourceW": [ - { - "name": "lpUNCServerName", - "type": "LPCWSTR" - }, - { - "name": "lpSourceName", - "type": "LPCWSTR" - } - ], - "OpenBackupEventLogA": [ - { - "name": "lpUNCServerName", - "type": "LPCSTR" - }, - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "OpenBackupEventLogW": [ - { - "name": "lpUNCServerName", - "type": "LPCWSTR" - }, - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "ReadEventLogA": [ - { - "name": "hEventLog", - "type": "HANDLE" - }, - { - "name": "dwReadFlags", - "type": "DWORD" - }, - { - "name": "dwRecordOffset", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "nNumberOfBytesToRead", - "type": "DWORD" - }, - { - "name": "pnBytesRead", - "type": "DWORD" - }, - { - "name": "pnMinNumberOfBytesNeeded", - "type": "DWORD" - } - ], - "ReadEventLogW": [ - { - "name": "hEventLog", - "type": "HANDLE" - }, - { - "name": "dwReadFlags", - "type": "DWORD" - }, - { - "name": "dwRecordOffset", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "nNumberOfBytesToRead", - "type": "DWORD" - }, - { - "name": "pnBytesRead", - "type": "DWORD" - }, - { - "name": "pnMinNumberOfBytesNeeded", - "type": "DWORD" - } - ], - "ReportEventA": [ - { - "name": "hEventLog", - "type": "HANDLE" - }, - { - "name": "wType", - "type": "WORD" - }, - { - "name": "wCategory", - "type": "WORD" - }, - { - "name": "dwEventID", - "type": "DWORD" - }, - { - "name": "lpUserSid", - "type": "PSID" - }, - { - "name": "wNumStrings", - "type": "WORD" - }, - { - "name": "dwDataSize", - "type": "DWORD" - }, - { - "name": "lpStrings", - "type": "LPCSTR" - }, - { - "name": "lpRawData", - "type": "LPVOID" - } - ], - "ReportEventW": [ - { - "name": "hEventLog", - "type": "HANDLE" - }, - { - "name": "wType", - "type": "WORD" - }, - { - "name": "wCategory", - "type": "WORD" - }, - { - "name": "dwEventID", - "type": "DWORD" - }, - { - "name": "lpUserSid", - "type": "PSID" - }, - { - "name": "wNumStrings", - "type": "WORD" - }, - { - "name": "dwDataSize", - "type": "DWORD" - }, - { - "name": "lpStrings", - "type": "LPCWSTR" - }, - { - "name": "lpRawData", - "type": "LPVOID" - } - ], - "GetEventLogInformation": [ - { - "name": "hEventLog", - "type": "HANDLE" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - } - ], - "OperationStart": [ - { - "name": "OperationStartParams", - "type": "OPERATION_START_PARAMETERS" - } - ], - "OperationEnd": [ - { - "name": "OperationEndParams", - "type": "OPERATION_END_PARAMETERS" - } - ], - "AccessCheckAndAuditAlarmA": [ - { - "name": "SubsystemName", - "type": "LPCSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "ObjectTypeName", - "type": "LPSTR" - }, - { - "name": "ObjectName", - "type": "LPSTR" - }, - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "ObjectCreation", - "type": "BOOL" - }, - { - "name": "GrantedAccess", - "type": "LPDWORD" - }, - { - "name": "AccessStatus", - "type": "LPBOOL" - }, - { - "name": "pfGenerateOnClose", - "type": "LPBOOL" - } - ], - "AccessCheckByTypeAndAuditAlarmA": [ - { - "name": "SubsystemName", - "type": "LPCSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "ObjectTypeName", - "type": "LPCSTR" - }, - { - "name": "ObjectName", - "type": "LPCSTR" - }, - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "PrincipalSelfSid", - "type": "PSID" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "AuditType", - "type": "AUDIT_EVENT_TYPE" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "ObjectTypeList", - "type": "POBJECT_TYPE_LIST" - }, - { - "name": "ObjectTypeListLength", - "type": "DWORD" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "ObjectCreation", - "type": "BOOL" - }, - { - "name": "GrantedAccess", - "type": "LPDWORD" - }, - { - "name": "AccessStatus", - "type": "LPBOOL" - }, - { - "name": "pfGenerateOnClose", - "type": "LPBOOL" - } - ], - "AccessCheckByTypeResultListAndAuditAlarmA": [ - { - "name": "SubsystemName", - "type": "LPCSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "ObjectTypeName", - "type": "LPCSTR" - }, - { - "name": "ObjectName", - "type": "LPCSTR" - }, - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "PrincipalSelfSid", - "type": "PSID" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "AuditType", - "type": "AUDIT_EVENT_TYPE" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "ObjectTypeList", - "type": "POBJECT_TYPE_LIST" - }, - { - "name": "ObjectTypeListLength", - "type": "DWORD" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "ObjectCreation", - "type": "BOOL" - }, - { - "name": "GrantedAccess", - "type": "LPDWORD" - }, - { - "name": "AccessStatusList", - "type": "LPDWORD" - }, - { - "name": "pfGenerateOnClose", - "type": "LPBOOL" - } - ], - "AccessCheckByTypeResultListAndAuditAlarmByHandleA": [ - { - "name": "SubsystemName", - "type": "LPCSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "ClientToken", - "type": "HANDLE" - }, - { - "name": "ObjectTypeName", - "type": "LPCSTR" - }, - { - "name": "ObjectName", - "type": "LPCSTR" - }, - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "PrincipalSelfSid", - "type": "PSID" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "AuditType", - "type": "AUDIT_EVENT_TYPE" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "ObjectTypeList", - "type": "POBJECT_TYPE_LIST" - }, - { - "name": "ObjectTypeListLength", - "type": "DWORD" - }, - { - "name": "GenericMapping", - "type": "PGENERIC_MAPPING" - }, - { - "name": "ObjectCreation", - "type": "BOOL" - }, - { - "name": "GrantedAccess", - "type": "LPDWORD" - }, - { - "name": "AccessStatusList", - "type": "LPDWORD" - }, - { - "name": "pfGenerateOnClose", - "type": "LPBOOL" - } - ], - "ObjectOpenAuditAlarmA": [ - { - "name": "SubsystemName", - "type": "LPCSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "ObjectTypeName", - "type": "LPSTR" - }, - { - "name": "ObjectName", - "type": "LPSTR" - }, - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "ClientToken", - "type": "HANDLE" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "GrantedAccess", - "type": "DWORD" - }, - { - "name": "Privileges", - "type": "PPRIVILEGE_SET" - }, - { - "name": "ObjectCreation", - "type": "BOOL" - }, - { - "name": "AccessGranted", - "type": "BOOL" - }, - { - "name": "GenerateOnClose", - "type": "LPBOOL" - } - ], - "ObjectPrivilegeAuditAlarmA": [ - { - "name": "SubsystemName", - "type": "LPCSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "ClientToken", - "type": "HANDLE" - }, - { - "name": "DesiredAccess", - "type": "DWORD" - }, - { - "name": "Privileges", - "type": "PPRIVILEGE_SET" - }, - { - "name": "AccessGranted", - "type": "BOOL" - } - ], - "ObjectCloseAuditAlarmA": [ - { - "name": "SubsystemName", - "type": "LPCSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "GenerateOnClose", - "type": "BOOL" - } - ], - "ObjectDeleteAuditAlarmA": [ - { - "name": "SubsystemName", - "type": "LPCSTR" - }, - { - "name": "HandleId", - "type": "LPVOID" - }, - { - "name": "GenerateOnClose", - "type": "BOOL" - } - ], - "PrivilegedServiceAuditAlarmA": [ - { - "name": "SubsystemName", - "type": "LPCSTR" - }, - { - "name": "ServiceName", - "type": "LPCSTR" - }, - { - "name": "ClientToken", - "type": "HANDLE" - }, - { - "name": "Privileges", - "type": "PPRIVILEGE_SET" - }, - { - "name": "AccessGranted", - "type": "BOOL" - } - ], - "AddConditionalAce": [ - { - "name": "pAcl", - "type": "PACL" - }, - { - "name": "dwAceRevision", - "type": "DWORD" - }, - { - "name": "AceFlags", - "type": "DWORD" - }, - { - "name": "AceType", - "type": "UCHAR" - }, - { - "name": "AccessMask", - "type": "DWORD" - }, - { - "name": "pSid", - "type": "PSID" - }, - { - "name": "ConditionStr", - "type": "PWCHAR" - }, - { - "name": "ReturnLength", - "type": "DWORD" - } - ], - "SetFileSecurityA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "GetFileSecurityA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "RequestedInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "nLength", - "type": "DWORD" - }, - { - "name": "lpnLengthNeeded", - "type": "LPDWORD" - } - ], - "ReadDirectoryChangesW": [ - { - "name": "hDirectory", - "type": "HANDLE" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "bWatchSubtree", - "type": "BOOL" - }, - { - "name": "dwNotifyFilter", - "type": "DWORD" - }, - { - "name": "lpBytesReturned", - "type": "LPDWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - }, - { - "name": "lpCompletionRoutine", - "type": "LPOVERLAPPED_COMPLETION_ROUTINE" - } - ], - "ReadDirectoryChangesExW": [ - { - "name": "hDirectory", - "type": "HANDLE" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "bWatchSubtree", - "type": "BOOL" - }, - { - "name": "dwNotifyFilter", - "type": "DWORD" - }, - { - "name": "lpBytesReturned", - "type": "LPDWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - }, - { - "name": "lpCompletionRoutine", - "type": "LPOVERLAPPED_COMPLETION_ROUTINE" - }, - { - "name": "ReadDirectoryNotifyInformationClass", - "type": "READ_DIRECTORY_NOTIFY_INFORMATION_CLASS" - } - ], - "MapViewOfFileExNuma": [ - { - "name": "hFileMappingObject", - "type": "HANDLE" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwFileOffsetHigh", - "type": "DWORD" - }, - { - "name": "dwFileOffsetLow", - "type": "DWORD" - }, - { - "name": "dwNumberOfBytesToMap", - "type": "SIZE_T" - }, - { - "name": "lpBaseAddress", - "type": "LPVOID" - }, - { - "name": "nndPreferred", - "type": "DWORD" - } - ], - "IsBadReadPtr": [ - { - "name": "lp", - "type": "void" - }, - { - "name": "ucb", - "type": "UINT_PTR" - } - ], - "IsBadWritePtr": [ - { - "name": "lp", - "type": "LPVOID" - }, - { - "name": "ucb", - "type": "UINT_PTR" - } - ], - "IsBadCodePtr": [ - { - "name": "lpfn", - "type": "FARPROC" - } - ], - "IsBadStringPtrA": [ - { - "name": "lpsz", - "type": "LPCSTR" - }, - { - "name": "ucchMax", - "type": "UINT_PTR" - } - ], - "IsBadStringPtrW": [ - { - "name": "lpsz", - "type": "LPCWSTR" - }, - { - "name": "ucchMax", - "type": "UINT_PTR" - } - ], - "LookupAccountSidA": [ - { - "name": "lpSystemName", - "type": "LPCSTR" - }, - { - "name": "Sid", - "type": "PSID" - }, - { - "name": "Name", - "type": "LPSTR" - }, - { - "name": "cchName", - "type": "LPDWORD" - }, - { - "name": "ReferencedDomainName", - "type": "LPSTR" - }, - { - "name": "cchReferencedDomainName", - "type": "LPDWORD" - }, - { - "name": "peUse", - "type": "PSID_NAME_USE" - } - ], - "LookupAccountSidW": [ - { - "name": "lpSystemName", - "type": "LPCWSTR" - }, - { - "name": "Sid", - "type": "PSID" - }, - { - "name": "Name", - "type": "LPWSTR" - }, - { - "name": "cchName", - "type": "LPDWORD" - }, - { - "name": "ReferencedDomainName", - "type": "LPWSTR" - }, - { - "name": "cchReferencedDomainName", - "type": "LPDWORD" - }, - { - "name": "peUse", - "type": "PSID_NAME_USE" - } - ], - "LookupAccountNameA": [ - { - "name": "lpSystemName", - "type": "LPCSTR" - }, - { - "name": "lpAccountName", - "type": "LPCSTR" - }, - { - "name": "Sid", - "type": "PSID" - }, - { - "name": "cbSid", - "type": "LPDWORD" - }, - { - "name": "ReferencedDomainName", - "type": "LPSTR" - }, - { - "name": "cchReferencedDomainName", - "type": "LPDWORD" - }, - { - "name": "peUse", - "type": "PSID_NAME_USE" - } - ], - "LookupAccountNameW": [ - { - "name": "lpSystemName", - "type": "LPCWSTR" - }, - { - "name": "lpAccountName", - "type": "LPCWSTR" - }, - { - "name": "Sid", - "type": "PSID" - }, - { - "name": "cbSid", - "type": "LPDWORD" - }, - { - "name": "ReferencedDomainName", - "type": "LPWSTR" - }, - { - "name": "cchReferencedDomainName", - "type": "LPDWORD" - }, - { - "name": "peUse", - "type": "PSID_NAME_USE" - } - ], - "LookupAccountSidLocalA": [ - { - "name": "Sid", - "type": "PSID" - }, - { - "name": "Name", - "type": "LPSTR" - }, - { - "name": "cchName", - "type": "LPDWORD" - }, - { - "name": "ReferencedDomainName", - "type": "LPSTR" - }, - { - "name": "cchReferencedDomainName", - "type": "LPDWORD" - }, - { - "name": "peUse", - "type": "PSID_NAME_USE" - } - ], - "LookupAccountSidLocalW": [ - { - "name": "Sid", - "type": "PSID" - }, - { - "name": "Name", - "type": "LPWSTR" - }, - { - "name": "cchName", - "type": "LPDWORD" - }, - { - "name": "ReferencedDomainName", - "type": "LPWSTR" - }, - { - "name": "cchReferencedDomainName", - "type": "LPDWORD" - }, - { - "name": "peUse", - "type": "PSID_NAME_USE" - } - ], - "LookupPrivilegeValueA": [ - { - "name": "lpSystemName", - "type": "LPCSTR" - }, - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpLuid", - "type": "PLUID" - } - ], - "LookupPrivilegeValueW": [ - { - "name": "lpSystemName", - "type": "LPCWSTR" - }, - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpLuid", - "type": "PLUID" - } - ], - "LookupPrivilegeNameA": [ - { - "name": "lpSystemName", - "type": "LPCSTR" - }, - { - "name": "lpLuid", - "type": "PLUID" - }, - { - "name": "lpName", - "type": "LPSTR" - }, - { - "name": "cchName", - "type": "LPDWORD" - } - ], - "LookupPrivilegeNameW": [ - { - "name": "lpSystemName", - "type": "LPCWSTR" - }, - { - "name": "lpLuid", - "type": "PLUID" - }, - { - "name": "lpName", - "type": "LPWSTR" - }, - { - "name": "cchName", - "type": "LPDWORD" - } - ], - "LookupPrivilegeDisplayNameA": [ - { - "name": "lpSystemName", - "type": "LPCSTR" - }, - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpDisplayName", - "type": "LPSTR" - }, - { - "name": "cchDisplayName", - "type": "LPDWORD" - }, - { - "name": "lpLanguageId", - "type": "LPDWORD" - } - ], - "LookupPrivilegeDisplayNameW": [ - { - "name": "lpSystemName", - "type": "LPCWSTR" - }, - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpDisplayName", - "type": "LPWSTR" - }, - { - "name": "cchDisplayName", - "type": "LPDWORD" - }, - { - "name": "lpLanguageId", - "type": "LPDWORD" - } - ], - "BuildCommDCBA": [ - { - "name": "lpDef", - "type": "LPCSTR" - }, - { - "name": "lpDCB", - "type": "LPDCB" - } - ], - "BuildCommDCBW": [ - { - "name": "lpDef", - "type": "LPCWSTR" - }, - { - "name": "lpDCB", - "type": "LPDCB" - } - ], - "BuildCommDCBAndTimeoutsA": [ - { - "name": "lpDef", - "type": "LPCSTR" - }, - { - "name": "lpDCB", - "type": "LPDCB" - }, - { - "name": "lpCommTimeouts", - "type": "LPCOMMTIMEOUTS" - } - ], - "BuildCommDCBAndTimeoutsW": [ - { - "name": "lpDef", - "type": "LPCWSTR" - }, - { - "name": "lpDCB", - "type": "LPDCB" - }, - { - "name": "lpCommTimeouts", - "type": "LPCOMMTIMEOUTS" - } - ], - "CommConfigDialogA": [ - { - "name": "lpszName", - "type": "LPCSTR" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpCC", - "type": "LPCOMMCONFIG" - } - ], - "CommConfigDialogW": [ - { - "name": "lpszName", - "type": "LPCWSTR" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpCC", - "type": "LPCOMMCONFIG" - } - ], - "GetDefaultCommConfigA": [ - { - "name": "lpszName", - "type": "LPCSTR" - }, - { - "name": "lpCC", - "type": "LPCOMMCONFIG" - }, - { - "name": "lpdwSize", - "type": "LPDWORD" - } - ], - "GetDefaultCommConfigW": [ - { - "name": "lpszName", - "type": "LPCWSTR" - }, - { - "name": "lpCC", - "type": "LPCOMMCONFIG" - }, - { - "name": "lpdwSize", - "type": "LPDWORD" - } - ], - "SetDefaultCommConfigA": [ - { - "name": "lpszName", - "type": "LPCSTR" - }, - { - "name": "lpCC", - "type": "LPCOMMCONFIG" - }, - { - "name": "dwSize", - "type": "DWORD" - } - ], - "SetDefaultCommConfigW": [ - { - "name": "lpszName", - "type": "LPCWSTR" - }, - { - "name": "lpCC", - "type": "LPCOMMCONFIG" - }, - { - "name": "dwSize", - "type": "DWORD" - } - ], - "GetComputerNameA": [ - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "LPDWORD" - } - ], - "GetComputerNameW": [ - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "LPDWORD" - } - ], - "DnsHostnameToComputerNameA": [ - { - "name": "Hostname", - "type": "LPCSTR" - }, - { - "name": "ComputerName", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "LPDWORD" - } - ], - "DnsHostnameToComputerNameW": [ - { - "name": "Hostname", - "type": "LPCWSTR" - }, - { - "name": "ComputerName", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "LPDWORD" - } - ], - "GetUserNameA": [ - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "pcbBuffer", - "type": "LPDWORD" - } - ], - "GetUserNameW": [ - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "pcbBuffer", - "type": "LPDWORD" - } - ], - "LogonUserA": [ - { - "name": "lpszUsername", - "type": "LPCSTR" - }, - { - "name": "lpszDomain", - "type": "LPCSTR" - }, - { - "name": "lpszPassword", - "type": "LPCSTR" - }, - { - "name": "dwLogonType", - "type": "DWORD" - }, - { - "name": "dwLogonProvider", - "type": "DWORD" - }, - { - "name": "phToken", - "type": "PHANDLE" - } - ], - "LogonUserW": [ - { - "name": "lpszUsername", - "type": "LPCWSTR" - }, - { - "name": "lpszDomain", - "type": "LPCWSTR" - }, - { - "name": "lpszPassword", - "type": "LPCWSTR" - }, - { - "name": "dwLogonType", - "type": "DWORD" - }, - { - "name": "dwLogonProvider", - "type": "DWORD" - }, - { - "name": "phToken", - "type": "PHANDLE" - } - ], - "LogonUserExA": [ - { - "name": "lpszUsername", - "type": "LPCSTR" - }, - { - "name": "lpszDomain", - "type": "LPCSTR" - }, - { - "name": "lpszPassword", - "type": "LPCSTR" - }, - { - "name": "dwLogonType", - "type": "DWORD" - }, - { - "name": "dwLogonProvider", - "type": "DWORD" - }, - { - "name": "phToken", - "type": "PHANDLE" - }, - { - "name": "ppLogonSid", - "type": "PSID" - }, - { - "name": "ppProfileBuffer", - "type": "PVOID" - }, - { - "name": "pdwProfileLength", - "type": "LPDWORD" - }, - { - "name": "pQuotaLimits", - "type": "PQUOTA_LIMITS" - } - ], - "LogonUserExW": [ - { - "name": "lpszUsername", - "type": "LPCWSTR" - }, - { - "name": "lpszDomain", - "type": "LPCWSTR" - }, - { - "name": "lpszPassword", - "type": "LPCWSTR" - }, - { - "name": "dwLogonType", - "type": "DWORD" - }, - { - "name": "dwLogonProvider", - "type": "DWORD" - }, - { - "name": "phToken", - "type": "PHANDLE" - }, - { - "name": "ppLogonSid", - "type": "PSID" - }, - { - "name": "ppProfileBuffer", - "type": "PVOID" - }, - { - "name": "pdwProfileLength", - "type": "LPDWORD" - }, - { - "name": "pQuotaLimits", - "type": "PQUOTA_LIMITS" - } - ], - "CreateProcessWithLogonW": [ - { - "name": "lpUsername", - "type": "LPCWSTR" - }, - { - "name": "lpDomain", - "type": "LPCWSTR" - }, - { - "name": "lpPassword", - "type": "LPCWSTR" - }, - { - "name": "dwLogonFlags", - "type": "DWORD" - }, - { - "name": "lpApplicationName", - "type": "LPCWSTR" - }, - { - "name": "lpCommandLine", - "type": "LPWSTR" - }, - { - "name": "dwCreationFlags", - "type": "DWORD" - }, - { - "name": "lpEnvironment", - "type": "LPVOID" - }, - { - "name": "lpCurrentDirectory", - "type": "LPCWSTR" - }, - { - "name": "lpStartupInfo", - "type": "LPSTARTUPINFOW" - }, - { - "name": "lpProcessInformation", - "type": "LPPROCESS_INFORMATION" - } - ], - "CreateProcessWithTokenW": [ - { - "name": "hToken", - "type": "HANDLE" - }, - { - "name": "dwLogonFlags", - "type": "DWORD" - }, - { - "name": "lpApplicationName", - "type": "LPCWSTR" - }, - { - "name": "lpCommandLine", - "type": "LPWSTR" - }, - { - "name": "dwCreationFlags", - "type": "DWORD" - }, - { - "name": "lpEnvironment", - "type": "LPVOID" - }, - { - "name": "lpCurrentDirectory", - "type": "LPCWSTR" - }, - { - "name": "lpStartupInfo", - "type": "LPSTARTUPINFOW" - }, - { - "name": "lpProcessInformation", - "type": "LPPROCESS_INFORMATION" - } - ], - "RegisterWaitForSingleObject": [ - { - "name": "phNewWaitObject", - "type": "PHANDLE" - }, - { - "name": "hObject", - "type": "HANDLE" - }, - { - "name": "Callback", - "type": "WAITORTIMERCALLBACK" - }, - { - "name": "Context", - "type": "PVOID" - }, - { - "name": "dwMilliseconds", - "type": "ULONG" - }, - { - "name": "dwFlags", - "type": "ULONG" - } - ], - "UnregisterWait": [ - { - "name": "WaitHandle", - "type": "HANDLE" - } - ], - "BindIoCompletionCallback": [ - { - "name": "FileHandle", - "type": "HANDLE" - }, - { - "name": "Function", - "type": "LPOVERLAPPED_COMPLETION_ROUTINE" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "DeleteTimerQueue": [ - { - "name": "TimerQueue", - "type": "HANDLE" - } - ], - "CreatePrivateNamespaceA": [ - { - "name": "lpPrivateNamespaceAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpBoundaryDescriptor", - "type": "LPVOID" - }, - { - "name": "lpAliasPrefix", - "type": "LPCSTR" - } - ], - "OpenPrivateNamespaceA": [ - { - "name": "lpBoundaryDescriptor", - "type": "LPVOID" - }, - { - "name": "lpAliasPrefix", - "type": "LPCSTR" - } - ], - "CreateBoundaryDescriptorA": [ - { - "name": "Name", - "type": "LPCSTR" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "AddIntegrityLabelToBoundaryDescriptor": [ - { - "name": "BoundaryDescriptor", - "type": "HANDLE" - }, - { - "name": "IntegrityLabel", - "type": "PSID" - } - ], - "GetCurrentHwProfileA": [ - { - "name": "lpHwProfileInfo", - "type": "LPHW_PROFILE_INFOA" - } - ], - "GetCurrentHwProfileW": [ - { - "name": "lpHwProfileInfo", - "type": "LPHW_PROFILE_INFOW" - } - ], - "VerifyVersionInfoA": [ - { - "name": "lpVersionInformation", - "type": "LPOSVERSIONINFOEXA" - }, - { - "name": "dwTypeMask", - "type": "DWORD" - }, - { - "name": "dwlConditionMask", - "type": "DWORDLONG" - } - ], - "VerifyVersionInfoW": [ - { - "name": "lpVersionInformation", - "type": "LPOSVERSIONINFOEXW" - }, - { - "name": "dwTypeMask", - "type": "DWORD" - }, - { - "name": "dwlConditionMask", - "type": "DWORDLONG" - } - ], - "SetSystemPowerState": [ - { - "name": "fSuspend", - "type": "BOOL" - }, - { - "name": "fForce", - "type": "BOOL" - } - ], - "GetSystemPowerStatus": [ - { - "name": "lpSystemPowerStatus", - "type": "LPSYSTEM_POWER_STATUS" - } - ], - "MapUserPhysicalPagesScatter": [ - { - "name": "VirtualAddresses", - "type": "PVOID" - }, - { - "name": "NumberOfPages", - "type": "ULONG_PTR" - }, - { - "name": "PageArray", - "type": "PULONG_PTR" - } - ], - "CreateJobObjectA": [ - { - "name": "lpJobAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "OpenJobObjectA": [ - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "FindFirstVolumeA": [ - { - "name": "lpszVolumeName", - "type": "LPSTR" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - } - ], - "FindNextVolumeA": [ - { - "name": "hFindVolume", - "type": "HANDLE" - }, - { - "name": "lpszVolumeName", - "type": "LPSTR" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - } - ], - "FindFirstVolumeMountPointA": [ - { - "name": "lpszRootPathName", - "type": "LPCSTR" - }, - { - "name": "lpszVolumeMountPoint", - "type": "LPSTR" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - } - ], - "FindFirstVolumeMountPointW": [ - { - "name": "lpszRootPathName", - "type": "LPCWSTR" - }, - { - "name": "lpszVolumeMountPoint", - "type": "LPWSTR" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - } - ], - "FindNextVolumeMountPointA": [ - { - "name": "hFindVolumeMountPoint", - "type": "HANDLE" - }, - { - "name": "lpszVolumeMountPoint", - "type": "LPSTR" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - } - ], - "FindNextVolumeMountPointW": [ - { - "name": "hFindVolumeMountPoint", - "type": "HANDLE" - }, - { - "name": "lpszVolumeMountPoint", - "type": "LPWSTR" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - } - ], - "FindVolumeMountPointClose": [ - { - "name": "hFindVolumeMountPoint", - "type": "HANDLE" - } - ], - "SetVolumeMountPointA": [ - { - "name": "lpszVolumeMountPoint", - "type": "LPCSTR" - }, - { - "name": "lpszVolumeName", - "type": "LPCSTR" - } - ], - "SetVolumeMountPointW": [ - { - "name": "lpszVolumeMountPoint", - "type": "LPCWSTR" - }, - { - "name": "lpszVolumeName", - "type": "LPCWSTR" - } - ], - "DeleteVolumeMountPointA": [ - { - "name": "lpszVolumeMountPoint", - "type": "LPCSTR" - } - ], - "GetVolumeNameForVolumeMountPointA": [ - { - "name": "lpszVolumeMountPoint", - "type": "LPCSTR" - }, - { - "name": "lpszVolumeName", - "type": "LPSTR" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - } - ], - "GetVolumePathNameA": [ - { - "name": "lpszFileName", - "type": "LPCSTR" - }, - { - "name": "lpszVolumePathName", - "type": "LPSTR" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - } - ], - "GetVolumePathNamesForVolumeNameA": [ - { - "name": "lpszVolumeName", - "type": "LPCSTR" - }, - { - "name": "lpszVolumePathNames", - "type": "LPCH" - }, - { - "name": "cchBufferLength", - "type": "DWORD" - }, - { - "name": "lpcchReturnLength", - "type": "PDWORD" - } - ], - "CreateActCtxA": [ - { - "name": "pActCtx", - "type": "PCACTCTXA" - } - ], - "CreateActCtxW": [ - { - "name": "pActCtx", - "type": "PCACTCTXW" - } - ], - "AddRefActCtx": [ - { - "name": "hActCtx", - "type": "HANDLE" - } - ], - "ReleaseActCtx": [ - { - "name": "hActCtx", - "type": "HANDLE" - } - ], - "ZombifyActCtx": [ - { - "name": "hActCtx", - "type": "HANDLE" - } - ], - "ActivateActCtx": [ - { - "name": "hActCtx", - "type": "HANDLE" - }, - { - "name": "lpCookie", - "type": "ULONG_PTR" - } - ], - "DeactivateActCtx": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "ulCookie", - "type": "ULONG_PTR" - } - ], - "GetCurrentActCtx": [ - { - "name": "lphActCtx", - "type": "HANDLE" - } - ], - "FindActCtxSectionStringA": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpExtensionGuid", - "type": "GUID" - }, - { - "name": "ulSectionId", - "type": "ULONG" - }, - { - "name": "lpStringToFind", - "type": "LPCSTR" - }, - { - "name": "ReturnedData", - "type": "PACTCTX_SECTION_KEYED_DATA" - } - ], - "FindActCtxSectionStringW": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpExtensionGuid", - "type": "GUID" - }, - { - "name": "ulSectionId", - "type": "ULONG" - }, - { - "name": "lpStringToFind", - "type": "LPCWSTR" - }, - { - "name": "ReturnedData", - "type": "PACTCTX_SECTION_KEYED_DATA" - } - ], - "FindActCtxSectionGuid": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpExtensionGuid", - "type": "GUID" - }, - { - "name": "ulSectionId", - "type": "ULONG" - }, - { - "name": "lpGuidToFind", - "type": "GUID" - }, - { - "name": "ReturnedData", - "type": "PACTCTX_SECTION_KEYED_DATA" - } - ], - "QueryActCtxW": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hActCtx", - "type": "HANDLE" - }, - { - "name": "pvSubInstance", - "type": "PVOID" - }, - { - "name": "ulInfoClass", - "type": "ULONG" - }, - { - "name": "pvBuffer", - "type": "PVOID" - }, - { - "name": "cbBuffer", - "type": "SIZE_T" - }, - { - "name": "pcbWrittenOrRequired", - "type": "SIZE_T" - } - ], - "WTSGetActiveConsoleSessionId": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetActiveProcessorGroupCount": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetMaximumProcessorGroupCount": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetActiveProcessorCount": [ - { - "name": "GroupNumber", - "type": "WORD" - } - ], - "GetMaximumProcessorCount": [ - { - "name": "GroupNumber", - "type": "WORD" - } - ], - "GetNumaProcessorNode": [ - { - "name": "Processor", - "type": "UCHAR" - }, - { - "name": "NodeNumber", - "type": "PUCHAR" - } - ], - "GetNumaNodeNumberFromHandle": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "NodeNumber", - "type": "PUSHORT" - } - ], - "GetNumaProcessorNodeEx": [ - { - "name": "Processor", - "type": "PPROCESSOR_NUMBER" - }, - { - "name": "NodeNumber", - "type": "PUSHORT" - } - ], - "GetNumaNodeProcessorMask": [ - { - "name": "Node", - "type": "UCHAR" - }, - { - "name": "ProcessorMask", - "type": "PULONGLONG" - } - ], - "GetNumaAvailableMemoryNode": [ - { - "name": "Node", - "type": "UCHAR" - }, - { - "name": "AvailableBytes", - "type": "PULONGLONG" - } - ], - "GetNumaAvailableMemoryNodeEx": [ - { - "name": "Node", - "type": "USHORT" - }, - { - "name": "AvailableBytes", - "type": "PULONGLONG" - } - ], - "GetNumaProximityNode": [ - { - "name": "ProximityId", - "type": "ULONG" - }, - { - "name": "NodeNumber", - "type": "PUCHAR" - } - ], - "RegisterApplicationRecoveryCallback": [ - { - "name": "pRecoveyCallback", - "type": "APPLICATION_RECOVERY_CALLBACK" - }, - { - "name": "pvParameter", - "type": "PVOID" - }, - { - "name": "dwPingInterval", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UnregisterApplicationRecoveryCallback": [ - { - "name": "VOID", - "type": "void" - } - ], - "RegisterApplicationRestart": [ - { - "name": "pwzCommandline", - "type": "PCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UnregisterApplicationRestart": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetApplicationRecoveryCallback": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "pRecoveryCallback", - "type": "APPLICATION_RECOVERY_CALLBACK" - }, - { - "name": "ppvParameter", - "type": "PVOID" - }, - { - "name": "pdwPingInterval", - "type": "PDWORD" - }, - { - "name": "pdwFlags", - "type": "PDWORD" - } - ], - "GetApplicationRestartSettings": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "pwzCommandline", - "type": "PWSTR" - }, - { - "name": "pcchSize", - "type": "PDWORD" - }, - { - "name": "pdwFlags", - "type": "PDWORD" - } - ], - "ApplicationRecoveryInProgress": [ - { - "name": "pbCancelled", - "type": "PBOOL" - } - ], - "ApplicationRecoveryFinished": [ - { - "name": "bSuccess", - "type": "BOOL" - } - ], - "GetFileInformationByHandleEx": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "FileInformationClass", - "type": "FILE_INFO_BY_HANDLE_CLASS" - }, - { - "name": "lpFileInformation", - "type": "LPVOID" - }, - { - "name": "dwBufferSize", - "type": "DWORD" - } - ], - "OpenFileById": [ - { - "name": "hVolumeHint", - "type": "HANDLE" - }, - { - "name": "lpFileId", - "type": "LPFILE_ID_DESCRIPTOR" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwShareMode", - "type": "DWORD" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "dwFlagsAndAttributes", - "type": "DWORD" - } - ], - "CreateSymbolicLinkA": [ - { - "name": "lpSymlinkFileName", - "type": "LPCSTR" - }, - { - "name": "lpTargetFileName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CreateSymbolicLinkW": [ - { - "name": "lpSymlinkFileName", - "type": "LPCWSTR" - }, - { - "name": "lpTargetFileName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "QueryActCtxSettingsW": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hActCtx", - "type": "HANDLE" - }, - { - "name": "settingsNameSpace", - "type": "PCWSTR" - }, - { - "name": "settingName", - "type": "PCWSTR" - }, - { - "name": "pvBuffer", - "type": "PWSTR" - }, - { - "name": "dwBuffer", - "type": "SIZE_T" - }, - { - "name": "pdwWrittenOrRequired", - "type": "SIZE_T" - } - ], - "CreateSymbolicLinkTransactedA": [ - { - "name": "lpSymlinkFileName", - "type": "LPCSTR" - }, - { - "name": "lpTargetFileName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "CreateSymbolicLinkTransactedW": [ - { - "name": "lpSymlinkFileName", - "type": "LPCWSTR" - }, - { - "name": "lpTargetFileName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - } - ], - "AddSecureMemoryCacheCallback": [ - { - "name": "pfnCallBack", - "type": "PSECURE_MEMORY_CACHE_CALLBACK" - } - ], - "RemoveSecureMemoryCacheCallback": [ - { - "name": "pfnCallBack", - "type": "PSECURE_MEMORY_CACHE_CALLBACK" - } - ], - "CopyContext": [ - { - "name": "Destination", - "type": "PCONTEXT" - }, - { - "name": "ContextFlags", - "type": "DWORD" - }, - { - "name": "Source", - "type": "PCONTEXT" - } - ], - "InitializeContext": [ - { - "name": "Buffer", - "type": "PVOID" - }, - { - "name": "ContextFlags", - "type": "DWORD" - }, - { - "name": "Context", - "type": "PCONTEXT" - }, - { - "name": "ContextLength", - "type": "PDWORD" - } - ], - "GetEnabledXStateFeatures": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetXStateFeaturesMask": [ - { - "name": "Context", - "type": "PCONTEXT" - }, - { - "name": "FeatureMask", - "type": "PDWORD64" - } - ], - "LocateXStateFeature": [ - { - "name": "Context", - "type": "PCONTEXT" - }, - { - "name": "FeatureId", - "type": "DWORD" - }, - { - "name": "Length", - "type": "PDWORD" - } - ], - "SetXStateFeaturesMask": [ - { - "name": "Context", - "type": "PCONTEXT" - }, - { - "name": "FeatureMask", - "type": "DWORD64" - } - ], - "EnableThreadProfiling": [ - { - "name": "ThreadHandle", - "type": "HANDLE" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "HardwareCounters", - "type": "DWORD64" - }, - { - "name": "PerformanceDataHandle", - "type": "HANDLE" - } - ], - "DisableThreadProfiling": [ - { - "name": "PerformanceDataHandle", - "type": "HANDLE" - } - ], - "QueryThreadProfiling": [ - { - "name": "ThreadHandle", - "type": "HANDLE" - }, - { - "name": "Enabled", - "type": "PBOOLEAN" - } - ], - "ReadThreadProfilingData": [ - { - "name": "PerformanceDataHandle", - "type": "HANDLE" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "PerformanceData", - "type": "PPERFORMANCE_DATA" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/windef.json b/qiling/extensions/windows_sdk/windef.json deleted file mode 100644 index a0f7d6f99..000000000 --- a/qiling/extensions/windows_sdk/windef.json +++ /dev/null @@ -1,4864 +0,0 @@ -{ - "__va_start": [ - { - "name": "VOID", - "type": "va_list" - } - ], - "__security_init_cookie": [ - { - "name": "VOID", - "type": "void" - } - ], - "__security_check_cookie": [ - { - "name": "_StackCookie", - "type": "uintptr_t" - } - ], - "__report_gsfailure": [ - { - "name": "_StackCookie", - "type": "uintptr_t" - } - ], - "_invalid_parameter_noinfo": [ - { - "name": "VOID", - "type": "void" - } - ], - "_invalid_parameter_noinfo_noreturn": [ - { - "name": "VOID", - "type": "void" - } - ], - "_invoke_watson": [ - { - "name": "_Expression", - "type": "wchar_t" - }, - { - "name": "_FunctionName", - "type": "wchar_t" - }, - { - "name": "_FileName", - "type": "wchar_t" - }, - { - "name": "_LineNo", - "type": "unsigned int" - }, - { - "name": "_Reserved", - "type": "uintptr_t" - } - ], - "__pctype_func": [ - { - "name": "VOID", - "type": "void" - } - ], - "__pwctype_func": [ - { - "name": "VOID", - "type": "void" - } - ], - "iswalnum": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswalpha": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswascii": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswblank": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswcntrl": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswdigit": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswgraph": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswlower": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswprint": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswpunct": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswspace": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswupper": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswxdigit": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "__iswcsymf": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "__iswcsym": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "_iswalnum_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswalpha_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswblank_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswcntrl_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswdigit_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswgraph_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswlower_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswprint_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswpunct_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswspace_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswupper_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswxdigit_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswcsymf_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswcsym_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "towupper": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "towlower": [ - { - "name": "_C", - "type": "wint_t" - } - ], - "iswctype": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Type", - "type": "wctype_t" - } - ], - "_towupper_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_towlower_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_iswctype_l": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Type", - "type": "wctype_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "isleadbyte": [ - { - "name": "_C", - "type": "int" - } - ], - "_isleadbyte_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "is_wctype": [ - { - "name": "_C", - "type": "wint_t" - }, - { - "name": "_Type", - "type": "wctype_t" - } - ], - "_isctype": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Type", - "type": "int" - } - ], - "_isctype_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Type", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "isalpha": [ - { - "name": "_C", - "type": "int" - } - ], - "_isalpha_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "isupper": [ - { - "name": "_C", - "type": "int" - } - ], - "_isupper_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "islower": [ - { - "name": "_C", - "type": "int" - } - ], - "_islower_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "isdigit": [ - { - "name": "_C", - "type": "int" - } - ], - "_isdigit_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "isxdigit": [ - { - "name": "_C", - "type": "int" - } - ], - "_isxdigit_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "isspace": [ - { - "name": "_C", - "type": "int" - } - ], - "_isspace_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "ispunct": [ - { - "name": "_C", - "type": "int" - } - ], - "_ispunct_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "isblank": [ - { - "name": "_C", - "type": "int" - } - ], - "_isblank_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "isalnum": [ - { - "name": "_C", - "type": "int" - } - ], - "_isalnum_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "isprint": [ - { - "name": "_C", - "type": "int" - } - ], - "_isprint_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "isgraph": [ - { - "name": "_C", - "type": "int" - } - ], - "_isgraph_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "iscntrl": [ - { - "name": "_C", - "type": "int" - } - ], - "_iscntrl_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "toupper": [ - { - "name": "_C", - "type": "int" - } - ], - "tolower": [ - { - "name": "_C", - "type": "int" - } - ], - "_tolower": [ - { - "name": "_C", - "type": "int" - } - ], - "_tolower_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_toupper": [ - { - "name": "_C", - "type": "int" - } - ], - "_toupper_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "__isascii": [ - { - "name": "_C", - "type": "int" - } - ], - "__toascii": [ - { - "name": "_C", - "type": "int" - } - ], - "__iscsymf": [ - { - "name": "_C", - "type": "int" - } - ], - "__iscsym": [ - { - "name": "_C", - "type": "int" - } - ], - "__acrt_locale_get_ctype_array_value": [ - { - "name": "_Locale_pctype_array", - "type": "unsigned short" - }, - { - "name": "_Char_value", - "type": "int" - }, - { - "name": "_Mask", - "type": "int" - } - ], - "___mb_cur_max_func": [ - { - "name": "VOID", - "type": "void" - } - ], - "___mb_cur_max_l_func": [ - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "__ascii_tolower": [ - { - "name": "_C", - "type": "int" - } - ], - "__ascii_toupper": [ - { - "name": "_C", - "type": "int" - } - ], - "__ascii_iswalpha": [ - { - "name": "_C", - "type": "int" - } - ], - "__ascii_iswdigit": [ - { - "name": "_C", - "type": "int" - } - ], - "__ascii_towlower": [ - { - "name": "_C", - "type": "int" - } - ], - "__ascii_towupper": [ - { - "name": "_C", - "type": "int" - } - ], - "__acrt_get_locale_data_prefix": [ - { - "name": "_LocalePointers", - "type": "void" - } - ], - "_chvalidchk_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Mask", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_ischartype_l": [ - { - "name": "_C", - "type": "int" - }, - { - "name": "_Mask", - "type": "int" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "HandleToULong": [ - { - "name": "h", - "type": "void" - } - ], - "HandleToLong": [ - { - "name": "h", - "type": "void" - } - ], - "ULongToHandle": [ - { - "name": "h", - "type": "unsigned long" - } - ], - "LongToHandle": [ - { - "name": "h", - "type": "long" - } - ], - "PtrToUlong": [ - { - "name": "p", - "type": "void" - } - ], - "PtrToUint": [ - { - "name": "p", - "type": "void" - } - ], - "PtrToUshort": [ - { - "name": "p", - "type": "void" - } - ], - "PtrToLong": [ - { - "name": "p", - "type": "void" - } - ], - "PtrToInt": [ - { - "name": "p", - "type": "void" - } - ], - "PtrToShort": [ - { - "name": "p", - "type": "void" - } - ], - "IntToPtr": [ - { - "name": "i", - "type": "int" - } - ], - "UIntToPtr": [ - { - "name": "ui", - "type": "unsigned int" - } - ], - "LongToPtr": [ - { - "name": "l", - "type": "long" - } - ], - "ULongToPtr": [ - { - "name": "ul", - "type": "unsigned long" - } - ], - "Ptr32ToPtr": [ - { - "name": "p", - "type": "void" - } - ], - "Handle32ToHandle": [ - { - "name": "h", - "type": "void" - } - ], - "PtrToPtr32": [ - { - "name": "p", - "type": "void" - } - ], - "_rotl8": [ - { - "name": "Value", - "type": "unsigned char" - }, - { - "name": "Shift", - "type": "unsigned char" - } - ], - "_rotl16": [ - { - "name": "Value", - "type": "unsigned short" - }, - { - "name": "Shift", - "type": "unsigned char" - } - ], - "_rotr8": [ - { - "name": "Value", - "type": "unsigned char" - }, - { - "name": "Shift", - "type": "unsigned char" - } - ], - "_rotr16": [ - { - "name": "Value", - "type": "unsigned short" - }, - { - "name": "Shift", - "type": "unsigned char" - } - ], - "_rotl": [ - { - "name": "Value", - "type": "unsigned int" - }, - { - "name": "Shift", - "type": "int" - } - ], - "_rotl64": [ - { - "name": "Value", - "type": "unsigned long long int" - }, - { - "name": "Shift", - "type": "int" - } - ], - "_rotr": [ - { - "name": "Value", - "type": "unsigned int" - }, - { - "name": "Shift", - "type": "int" - } - ], - "_rotr64": [ - { - "name": "Value", - "type": "unsigned long long int" - }, - { - "name": "Shift", - "type": "int" - } - ], - "_errno": [ - { - "name": "VOID", - "type": "void" - } - ], - "_set_errno": [ - { - "name": "_Value", - "type": "int" - } - ], - "_get_errno": [ - { - "name": "_Value", - "type": "int" - } - ], - "__doserrno": [ - { - "name": "VOID", - "type": "void" - } - ], - "_set_doserrno": [ - { - "name": "_Value", - "type": "unsigned long" - } - ], - "_get_doserrno": [ - { - "name": "_Value", - "type": "unsigned long" - } - ], - "memchr": [ - { - "name": "_Buf", - "type": "void" - }, - { - "name": "_Val", - "type": "int" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "memcmp": [ - { - "name": "_Buf1", - "type": "void" - }, - { - "name": "_Buf2", - "type": "void" - }, - { - "name": "_Size", - "type": "size_t" - } - ], - "memcpy": [ - { - "name": "_Dst", - "type": "void" - }, - { - "name": "_Src", - "type": "void" - }, - { - "name": "_Size", - "type": "size_t" - } - ], - "memmove": [ - { - "name": "_Dst", - "type": "void" - }, - { - "name": "_Src", - "type": "void" - }, - { - "name": "_Size", - "type": "size_t" - } - ], - "memset": [ - { - "name": "_Dst", - "type": "void" - }, - { - "name": "_Val", - "type": "int" - }, - { - "name": "_Size", - "type": "size_t" - } - ], - "strchr": [ - { - "name": "_Str", - "type": "char" - }, - { - "name": "_Val", - "type": "int" - } - ], - "strrchr": [ - { - "name": "_Str", - "type": "char" - }, - { - "name": "_Ch", - "type": "int" - } - ], - "strstr": [ - { - "name": "_Str", - "type": "char" - }, - { - "name": "_SubStr", - "type": "char" - } - ], - "wcschr": [ - { - "name": "_Str", - "type": "wchar_t" - }, - { - "name": "_Ch", - "type": "wchar_t" - } - ], - "wcsrchr": [ - { - "name": "_Str", - "type": "wchar_t" - }, - { - "name": "_Ch", - "type": "wchar_t" - } - ], - "wcsstr": [ - { - "name": "_Str", - "type": "wchar_t" - }, - { - "name": "_SubStr", - "type": "wchar_t" - } - ], - "memcpy_s": [ - { - "name": "_Destination", - "type": "void" - }, - { - "name": "_DestinationSize", - "type": "rsize_t" - }, - { - "name": "_Source", - "type": "void" - }, - { - "name": "_SourceSize", - "type": "rsize_t" - } - ], - "memmove_s": [ - { - "name": "_Destination", - "type": "void" - }, - { - "name": "_DestinationSize", - "type": "rsize_t" - }, - { - "name": "_Source", - "type": "void" - }, - { - "name": "_SourceSize", - "type": "rsize_t" - } - ], - "_memicmp": [ - { - "name": "_Buf1", - "type": "void" - }, - { - "name": "_Buf2", - "type": "void" - }, - { - "name": "_Size", - "type": "size_t" - } - ], - "_memicmp_l": [ - { - "name": "_Buf1", - "type": "void" - }, - { - "name": "_Buf2", - "type": "void" - }, - { - "name": "_Size", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "memccpy": [ - { - "name": "_Dst", - "type": "void" - }, - { - "name": "_Src", - "type": "void" - }, - { - "name": "_Val", - "type": "int" - }, - { - "name": "_Size", - "type": "size_t" - } - ], - "memicmp": [ - { - "name": "_Buf1", - "type": "void" - }, - { - "name": "_Buf2", - "type": "void" - }, - { - "name": "_Size", - "type": "size_t" - } - ], - "wcscat_s": [ - { - "name": "_Destination", - "type": "wchar_t" - }, - { - "name": "_SizeInWords", - "type": "rsize_t" - }, - { - "name": "_Source", - "type": "wchar_t" - } - ], - "wcscpy_s": [ - { - "name": "_Destination", - "type": "wchar_t" - }, - { - "name": "_SizeInWords", - "type": "rsize_t" - }, - { - "name": "_Source", - "type": "wchar_t" - } - ], - "wcsncat_s": [ - { - "name": "_Destination", - "type": "wchar_t" - }, - { - "name": "_SizeInWords", - "type": "rsize_t" - }, - { - "name": "_Source", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "rsize_t" - } - ], - "wcsncpy_s": [ - { - "name": "_Destination", - "type": "wchar_t" - }, - { - "name": "_SizeInWords", - "type": "rsize_t" - }, - { - "name": "_Source", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "rsize_t" - } - ], - "wcstok_s": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Delimiter", - "type": "wchar_t" - }, - { - "name": "_Context", - "type": "wchar_t" - } - ], - "_wcsdup": [ - { - "name": "_String", - "type": "wchar_t" - } - ], - "wcscat": [ - { - "name": "_Destination", - "type": "wchar_t" - }, - { - "name": "_Source", - "type": "wchar_t" - } - ], - "wcscmp": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - } - ], - "wcscpy": [ - { - "name": "_Destination", - "type": "wchar_t" - }, - { - "name": "_Source", - "type": "wchar_t" - } - ], - "wcscspn": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Control", - "type": "wchar_t" - } - ], - "wcslen": [ - { - "name": "_String", - "type": "wchar_t" - } - ], - "wcsnlen": [ - { - "name": "_Source", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "wcsnlen_s": [ - { - "name": "_Source", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "wcsncat": [ - { - "name": "_Destination", - "type": "wchar_t" - }, - { - "name": "_Source", - "type": "wchar_t" - }, - { - "name": "_Count", - "type": "size_t" - } - ], - "wcsncmp": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "wcsncpy": [ - { - "name": "_Destination", - "type": "wchar_t" - }, - { - "name": "_Source", - "type": "wchar_t" - }, - { - "name": "_Count", - "type": "size_t" - } - ], - "wcspbrk": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Control", - "type": "wchar_t" - } - ], - "wcsspn": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Control", - "type": "wchar_t" - } - ], - "wcstok": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Delimiter", - "type": "wchar_t" - }, - { - "name": "_Context", - "type": "wchar_t" - } - ], - "_wcstok": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Delimiter", - "type": "wchar_t" - } - ], - "_wcserror": [ - { - "name": "_ErrorNumber", - "type": "int" - } - ], - "_wcserror_s": [ - { - "name": "_Buffer", - "type": "wchar_t" - }, - { - "name": "_SizeInWords", - "type": "size_t" - }, - { - "name": "_ErrorNumber", - "type": "int" - } - ], - "__wcserror": [ - { - "name": "_String", - "type": "wchar_t" - } - ], - "__wcserror_s": [ - { - "name": "_Buffer", - "type": "wchar_t" - }, - { - "name": "_SizeInWords", - "type": "size_t" - }, - { - "name": "_ErrorMessage", - "type": "wchar_t" - } - ], - "_wcsicmp": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - } - ], - "_wcsicmp_l": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_wcsnicmp": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_wcsnicmp_l": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_wcsnset_s": [ - { - "name": "_Destination", - "type": "wchar_t" - }, - { - "name": "_SizeInWords", - "type": "size_t" - }, - { - "name": "_Value", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_wcsnset": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Value", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_wcsrev": [ - { - "name": "_String", - "type": "wchar_t" - } - ], - "_wcsset_s": [ - { - "name": "_Destination", - "type": "wchar_t" - }, - { - "name": "_SizeInWords", - "type": "size_t" - }, - { - "name": "_Value", - "type": "wchar_t" - } - ], - "_wcsset": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Value", - "type": "wchar_t" - } - ], - "_wcslwr_s": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_SizeInWords", - "type": "size_t" - } - ], - "_wcslwr": [ - { - "name": "_String", - "type": "wchar_t" - } - ], - "_wcslwr_s_l": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_SizeInWords", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_wcslwr_l": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_wcsupr_s": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Size", - "type": "size_t" - } - ], - "_wcsupr": [ - { - "name": "_String", - "type": "wchar_t" - } - ], - "_wcsupr_s_l": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Size", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_wcsupr_l": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "wcsxfrm": [ - { - "name": "_Destination", - "type": "wchar_t" - }, - { - "name": "_Source", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_wcsxfrm_l": [ - { - "name": "_Destination", - "type": "wchar_t" - }, - { - "name": "_Source", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "wcscoll": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - } - ], - "_wcscoll_l": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_wcsicoll": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - } - ], - "_wcsicoll_l": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_wcsncoll": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_wcsncoll_l": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_wcsnicoll": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_wcsnicoll_l": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "wcsdup": [ - { - "name": "_String", - "type": "wchar_t" - } - ], - "wcsicmp": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - } - ], - "wcsnicmp": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "wcsnset": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Value", - "type": "wchar_t" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "wcsrev": [ - { - "name": "_String", - "type": "wchar_t" - } - ], - "wcsset": [ - { - "name": "_String", - "type": "wchar_t" - }, - { - "name": "_Value", - "type": "wchar_t" - } - ], - "wcslwr": [ - { - "name": "_String", - "type": "wchar_t" - } - ], - "wcsupr": [ - { - "name": "_String", - "type": "wchar_t" - } - ], - "wcsicoll": [ - { - "name": "_String1", - "type": "wchar_t" - }, - { - "name": "_String2", - "type": "wchar_t" - } - ], - "strcpy_s": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_SizeInBytes", - "type": "rsize_t" - }, - { - "name": "_Source", - "type": "char" - } - ], - "strcat_s": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_SizeInBytes", - "type": "rsize_t" - }, - { - "name": "_Source", - "type": "char" - } - ], - "strerror_s": [ - { - "name": "_Buffer", - "type": "char" - }, - { - "name": "_SizeInBytes", - "type": "size_t" - }, - { - "name": "_ErrorNumber", - "type": "int" - } - ], - "strncat_s": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_SizeInBytes", - "type": "rsize_t" - }, - { - "name": "_Source", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "rsize_t" - } - ], - "strncpy_s": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_SizeInBytes", - "type": "rsize_t" - }, - { - "name": "_Source", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "rsize_t" - } - ], - "strtok_s": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_Delimiter", - "type": "char" - }, - { - "name": "_Context", - "type": "char" - } - ], - "_memccpy": [ - { - "name": "_Dst", - "type": "void" - }, - { - "name": "_Src", - "type": "void" - }, - { - "name": "_Val", - "type": "int" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "strcat": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_Source", - "type": "char" - } - ], - "strcmp": [ - { - "name": "_Str1", - "type": "char" - }, - { - "name": "_Str2", - "type": "char" - } - ], - "_strcmpi": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - } - ], - "strcoll": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - } - ], - "_strcoll_l": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "strcpy": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_Source", - "type": "char" - } - ], - "strcspn": [ - { - "name": "_Str", - "type": "char" - }, - { - "name": "_Control", - "type": "char" - } - ], - "_strdup": [ - { - "name": "_Source", - "type": "char" - } - ], - "_strerror": [ - { - "name": "_ErrorMessage", - "type": "char" - } - ], - "_strerror_s": [ - { - "name": "_Buffer", - "type": "char" - }, - { - "name": "_SizeInBytes", - "type": "size_t" - }, - { - "name": "_ErrorMessage", - "type": "char" - } - ], - "strerror": [ - { - "name": "_ErrorMessage", - "type": "int" - } - ], - "_stricmp": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - } - ], - "_stricoll": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - } - ], - "_stricoll_l": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_stricmp_l": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "strlen": [ - { - "name": "_Str", - "type": "char" - } - ], - "_strlwr_s": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_Size", - "type": "size_t" - } - ], - "_strlwr": [ - { - "name": "_String", - "type": "char" - } - ], - "_strlwr_s_l": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_Size", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_strlwr_l": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "strncat": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_Source", - "type": "char" - }, - { - "name": "_Count", - "type": "size_t" - } - ], - "strncmp": [ - { - "name": "_Str1", - "type": "char" - }, - { - "name": "_Str2", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_strnicmp": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_strnicmp_l": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_strnicoll": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_strnicoll_l": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_strncoll": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_strncoll_l": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "__strncnt": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_Count", - "type": "size_t" - } - ], - "strncpy": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_Source", - "type": "char" - }, - { - "name": "_Count", - "type": "size_t" - } - ], - "strnlen": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "strnlen_s": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_strnset_s": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_SizeInBytes", - "type": "size_t" - }, - { - "name": "_Value", - "type": "int" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_strnset": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_Value", - "type": "int" - }, - { - "name": "_Count", - "type": "size_t" - } - ], - "strpbrk": [ - { - "name": "_Str", - "type": "char" - }, - { - "name": "_Control", - "type": "char" - } - ], - "_strrev": [ - { - "name": "_Str", - "type": "char" - } - ], - "_strset_s": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_DestinationSize", - "type": "size_t" - }, - { - "name": "_Value", - "type": "int" - } - ], - "_strset": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_Value", - "type": "int" - } - ], - "strspn": [ - { - "name": "_Str", - "type": "char" - }, - { - "name": "_Control", - "type": "char" - } - ], - "strtok": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_Delimiter", - "type": "char" - } - ], - "_strupr_s": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_Size", - "type": "size_t" - } - ], - "_strupr": [ - { - "name": "_String", - "type": "char" - } - ], - "_strupr_s_l": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_Size", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "_strupr_l": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "strxfrm": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_Source", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "_strxfrm_l": [ - { - "name": "_Destination", - "type": "char" - }, - { - "name": "_Source", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "size_t" - }, - { - "name": "_Locale", - "type": "_locale_t" - } - ], - "strdup": [ - { - "name": "_String", - "type": "char" - } - ], - "strcmpi": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - } - ], - "stricmp": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - } - ], - "strlwr": [ - { - "name": "_String", - "type": "char" - } - ], - "strnicmp": [ - { - "name": "_String1", - "type": "char" - }, - { - "name": "_String2", - "type": "char" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "strnset": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_Value", - "type": "int" - }, - { - "name": "_MaxCount", - "type": "size_t" - } - ], - "strrev": [ - { - "name": "_String", - "type": "char" - } - ], - "strset": [ - { - "name": "_String", - "type": "char" - }, - { - "name": "_Value", - "type": "int" - } - ], - "strupr": [ - { - "name": "_String", - "type": "char" - } - ], - "__C_specific_handler": [ - { - "name": "ExceptionRecord", - "type": { - "name": "_EXCEPTION_RECORD", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "EstablisherFrame", - "type": "void" - }, - { - "name": "ContextRecord", - "type": { - "name": "_CONTEXT", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "DispatcherContext", - "type": { - "name": "_DISPATCHER_CONTEXT", - "data_type": "Struct", - "elements": [] - } - } - ], - "_exception_code": [ - { - "name": "VOID", - "type": "void" - } - ], - "_exception_info": [ - { - "name": "VOID", - "type": "void" - } - ], - "_abnormal_termination": [ - { - "name": "VOID", - "type": "void" - } - ], - "_bittest": [ - { - "name": "Base", - "type": "LONG" - }, - { - "name": "Offset", - "type": "LONG" - } - ], - "_bittestandcomplement": [ - { - "name": "Base", - "type": "LONG" - }, - { - "name": "Offset", - "type": "LONG" - } - ], - "_bittestandset": [ - { - "name": "Base", - "type": "LONG" - }, - { - "name": "Offset", - "type": "LONG" - } - ], - "_bittestandreset": [ - { - "name": "Base", - "type": "LONG" - }, - { - "name": "Offset", - "type": "LONG" - } - ], - "_interlockedbittestandset": [ - { - "name": "Base", - "type": "LONG" - }, - { - "name": "Offset", - "type": "LONG" - } - ], - "_interlockedbittestandreset": [ - { - "name": "Base", - "type": "LONG" - }, - { - "name": "Offset", - "type": "LONG" - } - ], - "_bittest64": [ - { - "name": "Base", - "type": "LONG64" - }, - { - "name": "Offset", - "type": "LONG64" - } - ], - "_bittestandcomplement64": [ - { - "name": "Base", - "type": "LONG64" - }, - { - "name": "Offset", - "type": "LONG64" - } - ], - "_bittestandset64": [ - { - "name": "Base", - "type": "LONG64" - }, - { - "name": "Offset", - "type": "LONG64" - } - ], - "_bittestandreset64": [ - { - "name": "Base", - "type": "LONG64" - }, - { - "name": "Offset", - "type": "LONG64" - } - ], - "_interlockedbittestandset64": [ - { - "name": "Base", - "type": "LONG64" - }, - { - "name": "Offset", - "type": "LONG64" - } - ], - "_interlockedbittestandreset64": [ - { - "name": "Base", - "type": "LONG64" - }, - { - "name": "Offset", - "type": "LONG64" - } - ], - "_BitScanForward": [ - { - "name": "Index", - "type": "DWORD" - }, - { - "name": "Mask", - "type": "DWORD" - } - ], - "_BitScanReverse": [ - { - "name": "Index", - "type": "DWORD" - }, - { - "name": "Mask", - "type": "DWORD" - } - ], - "_BitScanForward64": [ - { - "name": "Index", - "type": "DWORD" - }, - { - "name": "Mask", - "type": "DWORD64" - } - ], - "_BitScanReverse64": [ - { - "name": "Index", - "type": "DWORD" - }, - { - "name": "Mask", - "type": "DWORD64" - } - ], - "_InterlockedIncrement16": [ - { - "name": "Addend", - "type": "SHORT" - } - ], - "_InterlockedDecrement16": [ - { - "name": "Addend", - "type": "SHORT" - } - ], - "_InterlockedCompareExchange16": [ - { - "name": "Destination", - "type": "SHORT" - }, - { - "name": "ExChange", - "type": "SHORT" - }, - { - "name": "Comperand", - "type": "SHORT" - } - ], - "_InterlockedAnd": [ - { - "name": "Destination", - "type": "LONG" - }, - { - "name": "Value", - "type": "LONG" - } - ], - "_InterlockedOr": [ - { - "name": "Destination", - "type": "LONG" - }, - { - "name": "Value", - "type": "LONG" - } - ], - "_InterlockedXor": [ - { - "name": "Destination", - "type": "LONG" - }, - { - "name": "Value", - "type": "LONG" - } - ], - "_InterlockedAnd64": [ - { - "name": "Destination", - "type": "LONG64" - }, - { - "name": "Value", - "type": "LONG64" - } - ], - "_InterlockedOr64": [ - { - "name": "Destination", - "type": "LONG64" - }, - { - "name": "Value", - "type": "LONG64" - } - ], - "_InterlockedXor64": [ - { - "name": "Destination", - "type": "LONG64" - }, - { - "name": "Value", - "type": "LONG64" - } - ], - "_InterlockedIncrement": [ - { - "name": "Addend", - "type": "LONG" - } - ], - "_InterlockedDecrement": [ - { - "name": "Addend", - "type": "LONG" - } - ], - "_InterlockedExchange": [ - { - "name": "Target", - "type": "LONG" - }, - { - "name": "Value", - "type": "LONG" - } - ], - "_InterlockedExchangeAdd": [ - { - "name": "Addend", - "type": "LONG" - }, - { - "name": "Value", - "type": "LONG" - } - ], - "_InlineInterlockedAdd": [ - { - "name": "Addend", - "type": "LONG" - }, - { - "name": "Value", - "type": "LONG" - } - ], - "_InterlockedCompareExchange": [ - { - "name": "Destination", - "type": "LONG" - }, - { - "name": "ExChange", - "type": "LONG" - }, - { - "name": "Comperand", - "type": "LONG" - } - ], - "_InterlockedIncrement64": [ - { - "name": "Addend", - "type": "LONG64" - } - ], - "_InterlockedDecrement64": [ - { - "name": "Addend", - "type": "LONG64" - } - ], - "_InterlockedExchange64": [ - { - "name": "Target", - "type": "LONG64" - }, - { - "name": "Value", - "type": "LONG64" - } - ], - "_InterlockedExchangeAdd64": [ - { - "name": "Addend", - "type": "LONG64" - }, - { - "name": "Value", - "type": "LONG64" - } - ], - "_InlineInterlockedAdd64": [ - { - "name": "Addend", - "type": "LONG64" - }, - { - "name": "Value", - "type": "LONG64" - } - ], - "_InterlockedCompareExchange64": [ - { - "name": "Destination", - "type": "LONG64" - }, - { - "name": "ExChange", - "type": "LONG64" - }, - { - "name": "Comperand", - "type": "LONG64" - } - ], - "_InterlockedCompareExchange128": [ - { - "name": "Destination", - "type": "LONG64" - }, - { - "name": "ExchangeHigh", - "type": "LONG64" - }, - { - "name": "ExchangeLow", - "type": "LONG64" - }, - { - "name": "ComparandResult", - "type": "LONG64" - } - ], - "_InterlockedCompareExchangePointer": [ - { - "name": "Destination", - "type": "PVOID" - }, - { - "name": "Exchange", - "type": "PVOID" - }, - { - "name": "Comperand", - "type": "PVOID" - } - ], - "_InterlockedExchangePointer": [ - { - "name": "Target", - "type": "PVOID" - }, - { - "name": "Value", - "type": "PVOID" - } - ], - "_InterlockedExchange8": [ - { - "name": "Target", - "type": "CHAR" - }, - { - "name": "Value", - "type": "CHAR" - } - ], - "_InterlockedExchange16": [ - { - "name": "Destination", - "type": "SHORT" - }, - { - "name": "ExChange", - "type": "SHORT" - } - ], - "_InterlockedExchangeAdd8": [ - { - "name": "_Addend", - "type": "char" - }, - { - "name": "_Value", - "type": "char" - } - ], - "_InterlockedAnd8": [ - { - "name": "Destination", - "type": "char" - }, - { - "name": "Value", - "type": "char" - } - ], - "_InterlockedOr8": [ - { - "name": "Destination", - "type": "char" - }, - { - "name": "Value", - "type": "char" - } - ], - "_InterlockedXor8": [ - { - "name": "Destination", - "type": "char" - }, - { - "name": "Value", - "type": "char" - } - ], - "_InterlockedAnd16": [ - { - "name": "Destination", - "type": "SHORT" - }, - { - "name": "Value", - "type": "SHORT" - } - ], - "_InterlockedOr16": [ - { - "name": "Destination", - "type": "SHORT" - }, - { - "name": "Value", - "type": "SHORT" - } - ], - "_InterlockedXor16": [ - { - "name": "Destination", - "type": "SHORT" - }, - { - "name": "Value", - "type": "SHORT" - } - ], - "__cpuidex": [ - { - "name": "CPUInfo", - "type": "int" - }, - { - "name": "Function", - "type": "int" - }, - { - "name": "SubLeaf", - "type": "int" - } - ], - "_mm_clflush": [ - { - "name": "Address", - "type": "void" - } - ], - "_ReadWriteBarrier": [ - { - "name": "VOID", - "type": "void" - } - ], - "__faststorefence": [ - { - "name": "VOID", - "type": "void" - } - ], - "_mm_lfence": [ - { - "name": "VOID", - "type": "void" - } - ], - "_mm_mfence": [ - { - "name": "VOID", - "type": "void" - } - ], - "_mm_sfence": [ - { - "name": "VOID", - "type": "void" - } - ], - "_mm_pause": [ - { - "name": "VOID", - "type": "void" - } - ], - "_mm_prefetch": [ - { - "name": "a", - "type": "CHAR" - }, - { - "name": "sel", - "type": "int" - } - ], - "_m_prefetchw": [ - { - "name": "Source", - "type": "void" - } - ], - "_mm_getcsr": [ - { - "name": "VOID", - "type": "void" - } - ], - "_mm_setcsr": [ - { - "name": "MxCsr", - "type": "unsigned int" - } - ], - "__getcallerseflags": [ - { - "name": "VOID", - "type": "void" - } - ], - "__segmentlimit": [ - { - "name": "Selector", - "type": "DWORD" - } - ], - "__readpmc": [ - { - "name": "Counter", - "type": "DWORD" - } - ], - "__rdtsc": [ - { - "name": "VOID", - "type": "void" - } - ], - "__movsb": [ - { - "name": "Destination", - "type": "PBYTE" - }, - { - "name": "Source", - "type": "BYTE" - }, - { - "name": "Count", - "type": "SIZE_T" - } - ], - "__movsw": [ - { - "name": "Destination", - "type": "PWORD" - }, - { - "name": "Source", - "type": "WORD" - }, - { - "name": "Count", - "type": "SIZE_T" - } - ], - "__movsd": [ - { - "name": "Destination", - "type": "PDWORD" - }, - { - "name": "Source", - "type": "DWORD" - }, - { - "name": "Count", - "type": "SIZE_T" - } - ], - "__movsq": [ - { - "name": "Destination", - "type": "PDWORD64" - }, - { - "name": "Source", - "type": "DWORD64" - }, - { - "name": "Count", - "type": "SIZE_T" - } - ], - "__stosb": [ - { - "name": "Destination", - "type": "PBYTE" - }, - { - "name": "Value", - "type": "BYTE" - }, - { - "name": "Count", - "type": "SIZE_T" - } - ], - "__stosw": [ - { - "name": "Destination", - "type": "PWORD" - }, - { - "name": "Value", - "type": "WORD" - }, - { - "name": "Count", - "type": "SIZE_T" - } - ], - "__stosd": [ - { - "name": "Destination", - "type": "PDWORD" - }, - { - "name": "Value", - "type": "DWORD" - }, - { - "name": "Count", - "type": "SIZE_T" - } - ], - "__stosq": [ - { - "name": "Destination", - "type": "PDWORD64" - }, - { - "name": "Value", - "type": "DWORD64" - }, - { - "name": "Count", - "type": "SIZE_T" - } - ], - "__mulh": [ - { - "name": "Multiplier", - "type": "LONG64" - }, - { - "name": "Multiplicand", - "type": "LONG64" - } - ], - "__umulh": [ - { - "name": "Multiplier", - "type": "DWORD64" - }, - { - "name": "Multiplicand", - "type": "DWORD64" - } - ], - "__popcnt64": [ - { - "name": "operand", - "type": "DWORD64" - } - ], - "__shiftleft128": [ - { - "name": "LowPart", - "type": "DWORD64" - }, - { - "name": "HighPart", - "type": "DWORD64" - }, - { - "name": "Shift", - "type": "BYTE" - } - ], - "__shiftright128": [ - { - "name": "LowPart", - "type": "DWORD64" - }, - { - "name": "HighPart", - "type": "DWORD64" - }, - { - "name": "Shift", - "type": "BYTE" - } - ], - "_mul128": [ - { - "name": "Multiplier", - "type": "LONG64" - }, - { - "name": "Multiplicand", - "type": "LONG64" - }, - { - "name": "HighProduct", - "type": "LONG64" - } - ], - "_umul128": [ - { - "name": "Multiplier", - "type": "DWORD64" - }, - { - "name": "Multiplicand", - "type": "DWORD64" - }, - { - "name": "HighProduct", - "type": "DWORD64" - } - ], - "MultiplyExtract128": [ - { - "name": "Multiplier", - "type": "LONG64" - }, - { - "name": "Multiplicand", - "type": "LONG64" - }, - { - "name": "Shift", - "type": "BYTE" - } - ], - "UnsignedMultiplyExtract128": [ - { - "name": "Multiplier", - "type": "DWORD64" - }, - { - "name": "Multiplicand", - "type": "DWORD64" - }, - { - "name": "Shift", - "type": "BYTE" - } - ], - "__readgsbyte": [ - { - "name": "Offset", - "type": "DWORD" - } - ], - "__readgsword": [ - { - "name": "Offset", - "type": "DWORD" - } - ], - "__readgsdword": [ - { - "name": "Offset", - "type": "DWORD" - } - ], - "__readgsqword": [ - { - "name": "Offset", - "type": "DWORD" - } - ], - "__writegsbyte": [ - { - "name": "Offset", - "type": "DWORD" - }, - { - "name": "Data", - "type": "BYTE" - } - ], - "__writegsword": [ - { - "name": "Offset", - "type": "DWORD" - }, - { - "name": "Data", - "type": "WORD" - } - ], - "__writegsdword": [ - { - "name": "Offset", - "type": "DWORD" - }, - { - "name": "Data", - "type": "DWORD" - } - ], - "__writegsqword": [ - { - "name": "Offset", - "type": "DWORD" - }, - { - "name": "Data", - "type": "DWORD64" - } - ], - "__incgsbyte": [ - { - "name": "Offset", - "type": "DWORD" - } - ], - "__addgsbyte": [ - { - "name": "Offset", - "type": "DWORD" - }, - { - "name": "Value", - "type": "BYTE" - } - ], - "__incgsword": [ - { - "name": "Offset", - "type": "DWORD" - } - ], - "__addgsword": [ - { - "name": "Offset", - "type": "DWORD" - }, - { - "name": "Value", - "type": "WORD" - } - ], - "__incgsdword": [ - { - "name": "Offset", - "type": "DWORD" - } - ], - "__addgsdword": [ - { - "name": "Offset", - "type": "DWORD" - }, - { - "name": "Value", - "type": "DWORD" - } - ], - "__incgsqword": [ - { - "name": "Offset", - "type": "DWORD" - } - ], - "__addgsqword": [ - { - "name": "Offset", - "type": "DWORD" - }, - { - "name": "Value", - "type": "DWORD64" - } - ], - "__int2c": [ - { - "name": "VOID", - "type": "void" - } - ], - "ReadAcquire8": [ - { - "name": "Source", - "type": "CHAR" - } - ], - "ReadNoFence8": [ - { - "name": "Source", - "type": "CHAR" - } - ], - "WriteRelease8": [ - { - "name": "Destination", - "type": "CHAR" - }, - { - "name": "Value", - "type": "CHAR" - } - ], - "WriteNoFence8": [ - { - "name": "Destination", - "type": "CHAR" - }, - { - "name": "Value", - "type": "CHAR" - } - ], - "ReadAcquire16": [ - { - "name": "Source", - "type": "SHORT" - } - ], - "ReadNoFence16": [ - { - "name": "Source", - "type": "SHORT" - } - ], - "WriteRelease16": [ - { - "name": "Destination", - "type": "SHORT" - }, - { - "name": "Value", - "type": "SHORT" - } - ], - "WriteNoFence16": [ - { - "name": "Destination", - "type": "SHORT" - }, - { - "name": "Value", - "type": "SHORT" - } - ], - "ReadAcquire": [ - { - "name": "Source", - "type": "LONG" - } - ], - "ReadNoFence": [ - { - "name": "Source", - "type": "LONG" - } - ], - "WriteRelease": [ - { - "name": "Destination", - "type": "LONG" - }, - { - "name": "Value", - "type": "LONG" - } - ], - "WriteNoFence": [ - { - "name": "Destination", - "type": "LONG" - }, - { - "name": "Value", - "type": "LONG" - } - ], - "ReadAcquire64": [ - { - "name": "Source", - "type": "LONG64" - } - ], - "ReadNoFence64": [ - { - "name": "Source", - "type": "LONG64" - } - ], - "WriteRelease64": [ - { - "name": "Destination", - "type": "LONG64" - }, - { - "name": "Value", - "type": "LONG64" - } - ], - "WriteNoFence64": [ - { - "name": "Destination", - "type": "LONG64" - }, - { - "name": "Value", - "type": "LONG64" - } - ], - "ReadRaw8": [ - { - "name": "Source", - "type": "CHAR" - } - ], - "WriteRaw8": [ - { - "name": "Destination", - "type": "CHAR" - }, - { - "name": "Value", - "type": "CHAR" - } - ], - "ReadRaw16": [ - { - "name": "Source", - "type": "SHORT" - } - ], - "WriteRaw16": [ - { - "name": "Destination", - "type": "SHORT" - }, - { - "name": "Value", - "type": "SHORT" - } - ], - "ReadRaw": [ - { - "name": "Source", - "type": "LONG" - } - ], - "WriteRaw": [ - { - "name": "Destination", - "type": "LONG" - }, - { - "name": "Value", - "type": "LONG" - } - ], - "ReadRaw64": [ - { - "name": "Source", - "type": "LONG64" - } - ], - "WriteRaw64": [ - { - "name": "Destination", - "type": "LONG64" - }, - { - "name": "Value", - "type": "LONG64" - } - ], - "ReadUCharAcquire": [ - { - "name": "Source", - "type": "BYTE" - } - ], - "ReadUCharNoFence": [ - { - "name": "Source", - "type": "BYTE" - } - ], - "ReadBooleanAcquire": [ - { - "name": "Source", - "type": "BOOLEAN" - } - ], - "ReadBooleanNoFence": [ - { - "name": "Source", - "type": "BOOLEAN" - } - ], - "ReadUCharRaw": [ - { - "name": "Source", - "type": "BYTE" - } - ], - "WriteUCharRelease": [ - { - "name": "Destination", - "type": "BYTE" - }, - { - "name": "Value", - "type": "BYTE" - } - ], - "WriteUCharNoFence": [ - { - "name": "Destination", - "type": "BYTE" - }, - { - "name": "Value", - "type": "BYTE" - } - ], - "WriteBooleanRelease": [ - { - "name": "Destination", - "type": "BOOLEAN" - }, - { - "name": "Value", - "type": "BOOLEAN" - } - ], - "WriteBooleanNoFence": [ - { - "name": "Destination", - "type": "BOOLEAN" - }, - { - "name": "Value", - "type": "BOOLEAN" - } - ], - "WriteUCharRaw": [ - { - "name": "Destination", - "type": "BYTE" - }, - { - "name": "Value", - "type": "BYTE" - } - ], - "ReadUShortAcquire": [ - { - "name": "Source", - "type": "WORD" - } - ], - "ReadUShortNoFence": [ - { - "name": "Source", - "type": "WORD" - } - ], - "ReadUShortRaw": [ - { - "name": "Source", - "type": "WORD" - } - ], - "WriteUShortRelease": [ - { - "name": "Destination", - "type": "WORD" - }, - { - "name": "Value", - "type": "WORD" - } - ], - "WriteUShortNoFence": [ - { - "name": "Destination", - "type": "WORD" - }, - { - "name": "Value", - "type": "WORD" - } - ], - "WriteUShortRaw": [ - { - "name": "Destination", - "type": "WORD" - }, - { - "name": "Value", - "type": "WORD" - } - ], - "ReadULongAcquire": [ - { - "name": "Source", - "type": "DWORD" - } - ], - "ReadULongNoFence": [ - { - "name": "Source", - "type": "DWORD" - } - ], - "ReadULongRaw": [ - { - "name": "Source", - "type": "DWORD" - } - ], - "WriteULongRelease": [ - { - "name": "Destination", - "type": "DWORD" - }, - { - "name": "Value", - "type": "DWORD" - } - ], - "WriteULongNoFence": [ - { - "name": "Destination", - "type": "DWORD" - }, - { - "name": "Value", - "type": "DWORD" - } - ], - "WriteULongRaw": [ - { - "name": "Destination", - "type": "DWORD" - }, - { - "name": "Value", - "type": "DWORD" - } - ], - "ReadULong64Acquire": [ - { - "name": "Source", - "type": "DWORD64" - } - ], - "ReadULong64NoFence": [ - { - "name": "Source", - "type": "DWORD64" - } - ], - "ReadULong64Raw": [ - { - "name": "Source", - "type": "DWORD64" - } - ], - "WriteULong64Release": [ - { - "name": "Destination", - "type": "DWORD64" - }, - { - "name": "Value", - "type": "DWORD64" - } - ], - "WriteULong64NoFence": [ - { - "name": "Destination", - "type": "DWORD64" - }, - { - "name": "Value", - "type": "DWORD64" - } - ], - "WriteULong64Raw": [ - { - "name": "Destination", - "type": "DWORD64" - }, - { - "name": "Value", - "type": "DWORD64" - } - ], - "ReadPointerAcquire": [ - { - "name": "Source", - "type": "PVOID" - } - ], - "ReadPointerNoFence": [ - { - "name": "Source", - "type": "PVOID" - } - ], - "ReadPointerRaw": [ - { - "name": "Source", - "type": "PVOID" - } - ], - "WritePointerRelease": [ - { - "name": "Destination", - "type": "PVOID" - }, - { - "name": "Value", - "type": "PVOID" - } - ], - "WritePointerNoFence": [ - { - "name": "Destination", - "type": "PVOID" - }, - { - "name": "Value", - "type": "PVOID" - } - ], - "WritePointerRaw": [ - { - "name": "Destination", - "type": "PVOID" - }, - { - "name": "Value", - "type": "PVOID" - } - ], - "RtlCaptureStackBackTrace": [ - { - "name": "FramesToSkip", - "type": "DWORD" - }, - { - "name": "FramesToCapture", - "type": "DWORD" - }, - { - "name": "BackTrace", - "type": "PVOID" - }, - { - "name": "BackTraceHash", - "type": "PDWORD" - } - ], - "RtlCaptureContext": [ - { - "name": "ContextRecord", - "type": "PCONTEXT" - } - ], - "RtlCaptureContext2": [ - { - "name": "ContextRecord", - "type": "PCONTEXT" - } - ], - "RtlUnwind": [ - { - "name": "TargetFrame", - "type": "PVOID" - }, - { - "name": "TargetIp", - "type": "PVOID" - }, - { - "name": "ExceptionRecord", - "type": "PEXCEPTION_RECORD" - }, - { - "name": "ReturnValue", - "type": "PVOID" - } - ], - "RtlAddFunctionTable": [ - { - "name": "FunctionTable", - "type": "PRUNTIME_FUNCTION" - }, - { - "name": "EntryCount", - "type": "DWORD" - }, - { - "name": "BaseAddress", - "type": "DWORD64" - } - ], - "RtlDeleteFunctionTable": [ - { - "name": "FunctionTable", - "type": "PRUNTIME_FUNCTION" - } - ], - "RtlInstallFunctionTableCallback": [ - { - "name": "TableIdentifier", - "type": "DWORD64" - }, - { - "name": "BaseAddress", - "type": "DWORD64" - }, - { - "name": "Length", - "type": "DWORD" - }, - { - "name": "Callback", - "type": "PGET_RUNTIME_FUNCTION_CALLBACK" - }, - { - "name": "Context", - "type": "PVOID" - }, - { - "name": "OutOfProcessCallbackDll", - "type": "PCWSTR" - } - ], - "RtlAddGrowableFunctionTable": [ - { - "name": "DynamicTable", - "type": "PVOID" - }, - { - "name": "FunctionTable", - "type": "PRUNTIME_FUNCTION" - }, - { - "name": "EntryCount", - "type": "DWORD" - }, - { - "name": "MaximumEntryCount", - "type": "DWORD" - }, - { - "name": "RangeBase", - "type": "ULONG_PTR" - }, - { - "name": "RangeEnd", - "type": "ULONG_PTR" - } - ], - "RtlGrowFunctionTable": [ - { - "name": "DynamicTable", - "type": "PVOID" - }, - { - "name": "NewEntryCount", - "type": "DWORD" - } - ], - "RtlDeleteGrowableFunctionTable": [ - { - "name": "DynamicTable", - "type": "PVOID" - } - ], - "RtlLookupFunctionEntry": [ - { - "name": "ControlPc", - "type": "DWORD64" - }, - { - "name": "ImageBase", - "type": "PDWORD64" - }, - { - "name": "HistoryTable", - "type": "PUNWIND_HISTORY_TABLE" - } - ], - "RtlRestoreContext": [ - { - "name": "ContextRecord", - "type": "PCONTEXT" - }, - { - "name": "ExceptionRecord", - "type": { - "name": "_EXCEPTION_RECORD", - "data_type": "Struct", - "elements": [] - } - } - ], - "RtlUnwindEx": [ - { - "name": "TargetFrame", - "type": "PVOID" - }, - { - "name": "TargetIp", - "type": "PVOID" - }, - { - "name": "ExceptionRecord", - "type": "PEXCEPTION_RECORD" - }, - { - "name": "ReturnValue", - "type": "PVOID" - }, - { - "name": "ContextRecord", - "type": "PCONTEXT" - }, - { - "name": "HistoryTable", - "type": "PUNWIND_HISTORY_TABLE" - } - ], - "RtlVirtualUnwind": [ - { - "name": "HandlerType", - "type": "DWORD" - }, - { - "name": "ImageBase", - "type": "DWORD64" - }, - { - "name": "ControlPc", - "type": "DWORD64" - }, - { - "name": "FunctionEntry", - "type": "PRUNTIME_FUNCTION" - }, - { - "name": "ContextRecord", - "type": "PCONTEXT" - }, - { - "name": "HandlerData", - "type": "PVOID" - }, - { - "name": "EstablisherFrame", - "type": "PDWORD64" - }, - { - "name": "ContextPointers", - "type": "PKNONVOLATILE_CONTEXT_POINTERS" - } - ], - "RtlRaiseException": [ - { - "name": "ExceptionRecord", - "type": "PEXCEPTION_RECORD" - } - ], - "RtlPcToFileHeader": [ - { - "name": "PcValue", - "type": "PVOID" - }, - { - "name": "BaseOfImage", - "type": "PVOID" - } - ], - "RtlCompareMemory": [ - { - "name": "Source1", - "type": "void" - }, - { - "name": "Source2", - "type": "void" - }, - { - "name": "Length", - "type": "SIZE_T" - } - ], - "RtlInitializeSListHead": [ - { - "name": "ListHead", - "type": "PSLIST_HEADER" - } - ], - "RtlFirstEntrySList": [ - { - "name": "ListHead", - "type": "SLIST_HEADER" - } - ], - "RtlInterlockedPopEntrySList": [ - { - "name": "ListHead", - "type": "PSLIST_HEADER" - } - ], - "RtlInterlockedPushEntrySList": [ - { - "name": "ListHead", - "type": "PSLIST_HEADER" - }, - { - "name": "ListEntry", - "type": "PSLIST_ENTRY" - } - ], - "RtlInterlockedPushListSListEx": [ - { - "name": "ListHead", - "type": "PSLIST_HEADER" - }, - { - "name": "List", - "type": "PSLIST_ENTRY" - }, - { - "name": "ListEnd", - "type": "PSLIST_ENTRY" - }, - { - "name": "Count", - "type": "DWORD" - } - ], - "RtlInterlockedFlushSList": [ - { - "name": "ListHead", - "type": "PSLIST_HEADER" - } - ], - "RtlQueryDepthSList": [ - { - "name": "ListHead", - "type": "PSLIST_HEADER" - } - ], - "RtlGetReturnAddressHijackTarget": [ - { - "name": "VOID", - "type": "void" - } - ], - "__fastfail": [ - { - "name": "Code", - "type": "unsigned int" - } - ], - "HEAP_MAKE_TAG_FLAGS": [ - { - "name": "TagBase", - "type": "DWORD" - }, - { - "name": "Tag", - "type": "DWORD" - } - ], - "RtlSecureZeroMemory": [ - { - "name": "ptr", - "type": "PVOID" - }, - { - "name": "cnt", - "type": "SIZE_T" - } - ], - "VerSetConditionMask": [ - { - "name": "ConditionMask", - "type": "ULONGLONG" - }, - { - "name": "TypeMask", - "type": "DWORD" - }, - { - "name": "Condition", - "type": "BYTE" - } - ], - "RtlGetProductInfo": [ - { - "name": "OSMajorVersion", - "type": "DWORD" - }, - { - "name": "OSMinorVersion", - "type": "DWORD" - }, - { - "name": "SpMajorVersion", - "type": "DWORD" - }, - { - "name": "SpMinorVersion", - "type": "DWORD" - }, - { - "name": "ReturnedProductType", - "type": "PDWORD" - } - ], - "RtlCrc32": [ - { - "name": "Buffer", - "type": "void" - }, - { - "name": "Size", - "type": "size_t" - }, - { - "name": "InitialCrc", - "type": "DWORD" - } - ], - "RtlCrc64": [ - { - "name": "Buffer", - "type": "void" - }, - { - "name": "Size", - "type": "size_t" - }, - { - "name": "InitialCrc", - "type": "ULONGLONG" - } - ], - "RtlOsDeploymentState": [ - { - "name": "Flags", - "type": "DWORD" - } - ], - "RtlGetNonVolatileToken": [ - { - "name": "NvBuffer", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "NvToken", - "type": "PVOID" - } - ], - "RtlFreeNonVolatileToken": [ - { - "name": "NvToken", - "type": "PVOID" - } - ], - "RtlFlushNonVolatileMemory": [ - { - "name": "NvToken", - "type": "PVOID" - }, - { - "name": "NvBuffer", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "RtlDrainNonVolatileFlush": [ - { - "name": "NvToken", - "type": "PVOID" - } - ], - "RtlWriteNonVolatileMemory": [ - { - "name": "NvToken", - "type": "PVOID" - }, - { - "name": "NvDestination", - "type": "void" - }, - { - "name": "Source", - "type": "void" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "RtlFillNonVolatileMemory": [ - { - "name": "NvToken", - "type": "PVOID" - }, - { - "name": "NvDestination", - "type": "void" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "Value", - "type": "BYTE" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "RtlFlushNonVolatileMemoryRanges": [ - { - "name": "NvToken", - "type": "PVOID" - }, - { - "name": "NvRanges", - "type": "PNV_MEMORY_RANGE" - }, - { - "name": "NumRanges", - "type": "SIZE_T" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "RtlInitializeCorrelationVector": [ - { - "name": "CorrelationVector", - "type": "PCORRELATION_VECTOR" - }, - { - "name": "Version", - "type": "int" - }, - { - "name": "Guid", - "type": "GUID" - } - ], - "RtlIncrementCorrelationVector": [ - { - "name": "CorrelationVector", - "type": "PCORRELATION_VECTOR" - } - ], - "RtlExtendCorrelationVector": [ - { - "name": "CorrelationVector", - "type": "PCORRELATION_VECTOR" - } - ], - "RtlValidateCorrelationVector": [ - { - "name": "Vector", - "type": "PCORRELATION_VECTOR" - } - ], - "CUSTOM_SYSTEM_EVENT_TRIGGER_INIT": [ - { - "name": "Config", - "type": "PCUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG" - }, - { - "name": "TriggerId", - "type": "PCWSTR" - } - ], - "RtlRaiseCustomSystemEventTrigger": [ - { - "name": "TriggerConfig", - "type": "PCUSTOM_SYSTEM_EVENT_TRIGGER_CONFIG" - } - ], - "RtlIsZeroMemory": [ - { - "name": "Buffer", - "type": "PVOID" - }, - { - "name": "Length", - "type": "SIZE_T" - } - ], - "RtlNormalizeSecurityDescriptor": [ - { - "name": "SecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "SecurityDescriptorLength", - "type": "DWORD" - }, - { - "name": "NewSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "NewSecurityDescriptorLength", - "type": "PDWORD" - }, - { - "name": "CheckOnly", - "type": "BOOLEAN" - } - ], - "RtlGetDeviceFamilyInfoEnum": [ - { - "name": "pullUAPInfo", - "type": "ULONGLONG" - }, - { - "name": "pulDeviceFamily", - "type": "DWORD" - }, - { - "name": "pulDeviceForm", - "type": "DWORD" - } - ], - "RtlConvertDeviceFamilyInfoToString": [ - { - "name": "pulDeviceFamilyBufferSize", - "type": "PDWORD" - }, - { - "name": "pulDeviceFormBufferSize", - "type": "PDWORD" - }, - { - "name": "DeviceFamily", - "type": "PWSTR" - }, - { - "name": "DeviceForm", - "type": "PWSTR" - } - ], - "RtlSwitchedVVI": [ - { - "name": "VersionInfo", - "type": "PRTL_OSVERSIONINFOEXW" - }, - { - "name": "TypeMask", - "type": "DWORD" - }, - { - "name": "ConditionMask", - "type": "ULONGLONG" - } - ], - "TpInitializeCallbackEnviron": [ - { - "name": "CallbackEnviron", - "type": "PTP_CALLBACK_ENVIRON" - } - ], - "TpSetCallbackThreadpool": [ - { - "name": "CallbackEnviron", - "type": "PTP_CALLBACK_ENVIRON" - }, - { - "name": "Pool", - "type": "PTP_POOL" - } - ], - "TpSetCallbackCleanupGroup": [ - { - "name": "CallbackEnviron", - "type": "PTP_CALLBACK_ENVIRON" - }, - { - "name": "CleanupGroup", - "type": "PTP_CLEANUP_GROUP" - }, - { - "name": "CleanupGroupCancelCallback", - "type": "PTP_CLEANUP_GROUP_CANCEL_CALLBACK" - } - ], - "TpSetCallbackActivationContext": [ - { - "name": "CallbackEnviron", - "type": "PTP_CALLBACK_ENVIRON" - }, - { - "name": "ActivationContext", - "type": { - "name": "_ACTIVATION_CONTEXT", - "data_type": "Struct", - "elements": [] - } - } - ], - "TpSetCallbackNoActivationContext": [ - { - "name": "CallbackEnviron", - "type": "PTP_CALLBACK_ENVIRON" - } - ], - "TpSetCallbackLongFunction": [ - { - "name": "CallbackEnviron", - "type": "PTP_CALLBACK_ENVIRON" - } - ], - "TpSetCallbackRaceWithDll": [ - { - "name": "CallbackEnviron", - "type": "PTP_CALLBACK_ENVIRON" - }, - { - "name": "DllHandle", - "type": "PVOID" - } - ], - "TpSetCallbackFinalizationCallback": [ - { - "name": "CallbackEnviron", - "type": "PTP_CALLBACK_ENVIRON" - }, - { - "name": "FinalizationCallback", - "type": "PTP_SIMPLE_CALLBACK" - } - ], - "TpSetCallbackPriority": [ - { - "name": "CallbackEnviron", - "type": "PTP_CALLBACK_ENVIRON" - }, - { - "name": "Priority", - "type": "TP_CALLBACK_PRIORITY" - } - ], - "TpSetCallbackPersistent": [ - { - "name": "CallbackEnviron", - "type": "PTP_CALLBACK_ENVIRON" - } - ], - "TpDestroyCallbackEnviron": [ - { - "name": "CallbackEnviron", - "type": "PTP_CALLBACK_ENVIRON" - } - ], - "NtCurrentTeb": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetCurrentFiber": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetFiberData": [ - { - "name": "VOID", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/windows.json b/qiling/extensions/windows_sdk/windows.json index 9e26dfeeb..e08cc8008 100644 --- a/qiling/extensions/windows_sdk/windows.json +++ b/qiling/extensions/windows_sdk/windows.json @@ -1 +1,28 @@ -{} \ No newline at end of file +{ + "InitializeXamlDiagnosticsEx": [ + { + "name": "endPointName", + "type": "LPCWSTR" + }, + { + "name": "pid", + "type": "DWORD" + }, + { + "name": "wszDllXamlDiagnostics", + "type": "LPCWSTR" + }, + { + "name": "wszTAPDllName", + "type": "LPCWSTR" + }, + { + "name": "tapClsid", + "type": "CLSID" + }, + { + "name": "wszInitializationData", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/windowsceip.json b/qiling/extensions/windows_sdk/windowsceip.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/windowsceip.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winefs.json b/qiling/extensions/windows_sdk/winefs.json deleted file mode 100644 index 426db0cc8..000000000 --- a/qiling/extensions/windows_sdk/winefs.json +++ /dev/null @@ -1,86 +0,0 @@ -{ - "QueryUsersOnEncryptedFile": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "pUsers", - "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" - } - ], - "QueryRecoveryAgentsOnEncryptedFile": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "pRecoveryAgents", - "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" - } - ], - "RemoveUsersFromEncryptedFile": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "pHashes", - "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" - } - ], - "AddUsersToEncryptedFile": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "pEncryptionCertificates", - "type": "PENCRYPTION_CERTIFICATE_LIST" - } - ], - "SetUserFileEncryptionKey": [ - { - "name": "pEncryptionCertificate", - "type": "PENCRYPTION_CERTIFICATE" - } - ], - "FreeEncryptionCertificateHashList": [ - { - "name": "pUsers", - "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" - } - ], - "EncryptionDisable": [ - { - "name": "DirPath", - "type": "LPCWSTR" - }, - { - "name": "Disable", - "type": "BOOL" - } - ], - "DuplicateEncryptionInfoFile": [ - { - "name": "SrcFileName", - "type": "LPCWSTR" - }, - { - "name": "DstFileName", - "type": "LPCWSTR" - }, - { - "name": "dwCreationDistribution", - "type": "DWORD" - }, - { - "name": "dwAttributes", - "type": "DWORD" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winenclaveapi.json b/qiling/extensions/windows_sdk/winenclaveapi.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/winenclaveapi.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mmiscapi.json b/qiling/extensions/windows_sdk/winmmbse.json similarity index 100% rename from qiling/extensions/windows_sdk/mmiscapi.json rename to qiling/extensions/windows_sdk/winmmbse.json diff --git a/qiling/extensions/windows_sdk/winnetwk.json b/qiling/extensions/windows_sdk/winnetwk.json deleted file mode 100644 index aedbf1124..000000000 --- a/qiling/extensions/windows_sdk/winnetwk.json +++ /dev/null @@ -1,624 +0,0 @@ -{ - "WNetAddConnectionA": [ - { - "name": "lpRemoteName", - "type": "LPCSTR" - }, - { - "name": "lpPassword", - "type": "LPCSTR" - }, - { - "name": "lpLocalName", - "type": "LPCSTR" - } - ], - "WNetAddConnectionW": [ - { - "name": "lpRemoteName", - "type": "LPCWSTR" - }, - { - "name": "lpPassword", - "type": "LPCWSTR" - }, - { - "name": "lpLocalName", - "type": "LPCWSTR" - } - ], - "WNetAddConnection2A": [ - { - "name": "lpNetResource", - "type": "LPNETRESOURCEA" - }, - { - "name": "lpPassword", - "type": "LPCSTR" - }, - { - "name": "lpUserName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "WNetAddConnection2W": [ - { - "name": "lpNetResource", - "type": "LPNETRESOURCEW" - }, - { - "name": "lpPassword", - "type": "LPCWSTR" - }, - { - "name": "lpUserName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "WNetAddConnection3A": [ - { - "name": "hwndOwner", - "type": "HWND" - }, - { - "name": "lpNetResource", - "type": "LPNETRESOURCEA" - }, - { - "name": "lpPassword", - "type": "LPCSTR" - }, - { - "name": "lpUserName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "WNetAddConnection3W": [ - { - "name": "hwndOwner", - "type": "HWND" - }, - { - "name": "lpNetResource", - "type": "LPNETRESOURCEW" - }, - { - "name": "lpPassword", - "type": "LPCWSTR" - }, - { - "name": "lpUserName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "WNetCancelConnectionA": [ - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "fForce", - "type": "BOOL" - } - ], - "WNetCancelConnectionW": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "fForce", - "type": "BOOL" - } - ], - "WNetCancelConnection2A": [ - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "fForce", - "type": "BOOL" - } - ], - "WNetCancelConnection2W": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "fForce", - "type": "BOOL" - } - ], - "WNetGetConnectionA": [ - { - "name": "lpLocalName", - "type": "LPCSTR" - }, - { - "name": "lpRemoteName", - "type": "LPSTR" - }, - { - "name": "lpnLength", - "type": "LPDWORD" - } - ], - "WNetGetConnectionW": [ - { - "name": "lpLocalName", - "type": "LPCWSTR" - }, - { - "name": "lpRemoteName", - "type": "LPWSTR" - }, - { - "name": "lpnLength", - "type": "LPDWORD" - } - ], - "WNetUseConnectionA": [ - { - "name": "hwndOwner", - "type": "HWND" - }, - { - "name": "lpNetResource", - "type": "LPNETRESOURCEA" - }, - { - "name": "lpPassword", - "type": "LPCSTR" - }, - { - "name": "lpUserId", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpAccessName", - "type": "LPSTR" - }, - { - "name": "lpBufferSize", - "type": "LPDWORD" - }, - { - "name": "lpResult", - "type": "LPDWORD" - } - ], - "WNetUseConnectionW": [ - { - "name": "hwndOwner", - "type": "HWND" - }, - { - "name": "lpNetResource", - "type": "LPNETRESOURCEW" - }, - { - "name": "lpPassword", - "type": "LPCWSTR" - }, - { - "name": "lpUserId", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpAccessName", - "type": "LPWSTR" - }, - { - "name": "lpBufferSize", - "type": "LPDWORD" - }, - { - "name": "lpResult", - "type": "LPDWORD" - } - ], - "WNetConnectionDialog": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "dwType", - "type": "DWORD" - } - ], - "WNetDisconnectDialog": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "dwType", - "type": "DWORD" - } - ], - "WNetConnectionDialog1A": [ - { - "name": "lpConnDlgStruct", - "type": "LPCONNECTDLGSTRUCTA" - } - ], - "WNetConnectionDialog1W": [ - { - "name": "lpConnDlgStruct", - "type": "LPCONNECTDLGSTRUCTW" - } - ], - "WNetDisconnectDialog1A": [ - { - "name": "lpConnDlgStruct", - "type": "LPDISCDLGSTRUCTA" - } - ], - "WNetDisconnectDialog1W": [ - { - "name": "lpConnDlgStruct", - "type": "LPDISCDLGSTRUCTW" - } - ], - "WNetOpenEnumA": [ - { - "name": "dwScope", - "type": "DWORD" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "dwUsage", - "type": "DWORD" - }, - { - "name": "lpNetResource", - "type": "LPNETRESOURCEA" - }, - { - "name": "lphEnum", - "type": "LPHANDLE" - } - ], - "WNetOpenEnumW": [ - { - "name": "dwScope", - "type": "DWORD" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "dwUsage", - "type": "DWORD" - }, - { - "name": "lpNetResource", - "type": "LPNETRESOURCEW" - }, - { - "name": "lphEnum", - "type": "LPHANDLE" - } - ], - "WNetEnumResourceA": [ - { - "name": "hEnum", - "type": "HANDLE" - }, - { - "name": "lpcCount", - "type": "LPDWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpBufferSize", - "type": "LPDWORD" - } - ], - "WNetEnumResourceW": [ - { - "name": "hEnum", - "type": "HANDLE" - }, - { - "name": "lpcCount", - "type": "LPDWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpBufferSize", - "type": "LPDWORD" - } - ], - "WNetCloseEnum": [ - { - "name": "hEnum", - "type": "HANDLE" - } - ], - "WNetGetResourceParentA": [ - { - "name": "lpNetResource", - "type": "LPNETRESOURCEA" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpcbBuffer", - "type": "LPDWORD" - } - ], - "WNetGetResourceParentW": [ - { - "name": "lpNetResource", - "type": "LPNETRESOURCEW" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpcbBuffer", - "type": "LPDWORD" - } - ], - "WNetGetResourceInformationA": [ - { - "name": "lpNetResource", - "type": "LPNETRESOURCEA" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpcbBuffer", - "type": "LPDWORD" - }, - { - "name": "lplpSystem", - "type": "LPSTR" - } - ], - "WNetGetResourceInformationW": [ - { - "name": "lpNetResource", - "type": "LPNETRESOURCEW" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpcbBuffer", - "type": "LPDWORD" - }, - { - "name": "lplpSystem", - "type": "LPWSTR" - } - ], - "WNetGetUniversalNameA": [ - { - "name": "lpLocalPath", - "type": "LPCSTR" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpBufferSize", - "type": "LPDWORD" - } - ], - "WNetGetUniversalNameW": [ - { - "name": "lpLocalPath", - "type": "LPCWSTR" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpBufferSize", - "type": "LPDWORD" - } - ], - "WNetGetUserA": [ - { - "name": "lpName", - "type": "LPCSTR" - }, - { - "name": "lpUserName", - "type": "LPSTR" - }, - { - "name": "lpnLength", - "type": "LPDWORD" - } - ], - "WNetGetUserW": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "lpUserName", - "type": "LPWSTR" - }, - { - "name": "lpnLength", - "type": "LPDWORD" - } - ], - "WNetGetProviderNameA": [ - { - "name": "dwNetType", - "type": "DWORD" - }, - { - "name": "lpProviderName", - "type": "LPSTR" - }, - { - "name": "lpBufferSize", - "type": "LPDWORD" - } - ], - "WNetGetProviderNameW": [ - { - "name": "dwNetType", - "type": "DWORD" - }, - { - "name": "lpProviderName", - "type": "LPWSTR" - }, - { - "name": "lpBufferSize", - "type": "LPDWORD" - } - ], - "WNetGetNetworkInformationA": [ - { - "name": "lpProvider", - "type": "LPCSTR" - }, - { - "name": "lpNetInfoStruct", - "type": "LPNETINFOSTRUCT" - } - ], - "WNetGetNetworkInformationW": [ - { - "name": "lpProvider", - "type": "LPCWSTR" - }, - { - "name": "lpNetInfoStruct", - "type": "LPNETINFOSTRUCT" - } - ], - "WNetGetLastErrorA": [ - { - "name": "lpError", - "type": "LPDWORD" - }, - { - "name": "lpErrorBuf", - "type": "LPSTR" - }, - { - "name": "nErrorBufSize", - "type": "DWORD" - }, - { - "name": "lpNameBuf", - "type": "LPSTR" - }, - { - "name": "nNameBufSize", - "type": "DWORD" - } - ], - "WNetGetLastErrorW": [ - { - "name": "lpError", - "type": "LPDWORD" - }, - { - "name": "lpErrorBuf", - "type": "LPWSTR" - }, - { - "name": "nErrorBufSize", - "type": "DWORD" - }, - { - "name": "lpNameBuf", - "type": "LPWSTR" - }, - { - "name": "nNameBufSize", - "type": "DWORD" - } - ], - "MultinetGetConnectionPerformanceA": [ - { - "name": "lpNetResource", - "type": "LPNETRESOURCEA" - }, - { - "name": "lpNetConnectInfoStruct", - "type": "LPNETCONNECTINFOSTRUCT" - } - ], - "MultinetGetConnectionPerformanceW": [ - { - "name": "lpNetResource", - "type": "LPNETRESOURCEW" - }, - { - "name": "lpNetConnectInfoStruct", - "type": "LPNETCONNECTINFOSTRUCT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winnls32.json b/qiling/extensions/windows_sdk/winnls32.json deleted file mode 100644 index 58da93a0b..000000000 --- a/qiling/extensions/windows_sdk/winnls32.json +++ /dev/null @@ -1,12 +0,0 @@ -{ - "WINNLSEnableIME": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "BOOL" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winnt.json b/qiling/extensions/windows_sdk/winnt.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/winnt.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winsafer.json b/qiling/extensions/windows_sdk/winsafer.json deleted file mode 100644 index 6812521a7..000000000 --- a/qiling/extensions/windows_sdk/winsafer.json +++ /dev/null @@ -1,182 +0,0 @@ -{ - "SaferGetPolicyInformation": [ - { - "name": "dwScopeId", - "type": "DWORD" - }, - { - "name": "SaferPolicyInfoClass", - "type": "SAFER_POLICY_INFO_CLASS" - }, - { - "name": "InfoBufferSize", - "type": "DWORD" - }, - { - "name": "InfoBuffer", - "type": "PVOID" - }, - { - "name": "InfoBufferRetSize", - "type": "PDWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "SaferSetPolicyInformation": [ - { - "name": "dwScopeId", - "type": "DWORD" - }, - { - "name": "SaferPolicyInfoClass", - "type": "SAFER_POLICY_INFO_CLASS" - }, - { - "name": "InfoBufferSize", - "type": "DWORD" - }, - { - "name": "InfoBuffer", - "type": "PVOID" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "SaferCreateLevel": [ - { - "name": "dwScopeId", - "type": "DWORD" - }, - { - "name": "dwLevelId", - "type": "DWORD" - }, - { - "name": "OpenFlags", - "type": "DWORD" - }, - { - "name": "pLevelHandle", - "type": "SAFER_LEVEL_HANDLE" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "SaferCloseLevel": [ - { - "name": "hLevelHandle", - "type": "SAFER_LEVEL_HANDLE" - } - ], - "SaferIdentifyLevel": [ - { - "name": "dwNumProperties", - "type": "DWORD" - }, - { - "name": "pCodeProperties", - "type": "PSAFER_CODE_PROPERTIES" - }, - { - "name": "pLevelHandle", - "type": "SAFER_LEVEL_HANDLE" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "SaferComputeTokenFromLevel": [ - { - "name": "LevelHandle", - "type": "SAFER_LEVEL_HANDLE" - }, - { - "name": "InAccessToken", - "type": "HANDLE" - }, - { - "name": "OutAccessToken", - "type": "PHANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "SaferGetLevelInformation": [ - { - "name": "LevelHandle", - "type": "SAFER_LEVEL_HANDLE" - }, - { - "name": "dwInfoType", - "type": "SAFER_OBJECT_INFO_CLASS" - }, - { - "name": "lpQueryBuffer", - "type": "LPVOID" - }, - { - "name": "dwInBufferSize", - "type": "DWORD" - }, - { - "name": "lpdwOutBufferSize", - "type": "LPDWORD" - } - ], - "SaferSetLevelInformation": [ - { - "name": "LevelHandle", - "type": "SAFER_LEVEL_HANDLE" - }, - { - "name": "dwInfoType", - "type": "SAFER_OBJECT_INFO_CLASS" - }, - { - "name": "lpQueryBuffer", - "type": "LPVOID" - }, - { - "name": "dwInBufferSize", - "type": "DWORD" - } - ], - "SaferRecordEventLogEntry": [ - { - "name": "hLevel", - "type": "SAFER_LEVEL_HANDLE" - }, - { - "name": "szTargetPath", - "type": "LPCWSTR" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "SaferiIsExecutableFileType": [ - { - "name": "szFullPathname", - "type": "LPCWSTR" - }, - { - "name": "bFromShellExecute", - "type": "BOOLEAN" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winsock.json b/qiling/extensions/windows_sdk/winsock.json deleted file mode 100644 index aa6c7e12f..000000000 --- a/qiling/extensions/windows_sdk/winsock.json +++ /dev/null @@ -1,582 +0,0 @@ -{ - "__WSAFDIsSet": [ - { - "name": "VOID", - "type": "SOCKET" - }, - { - "name": "VOID", - "type": "fd_set" - } - ], - "bind": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "addr", - "type": { - "name": "sockaddr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "namelen", - "type": "int" - } - ], - "closesocket": [ - { - "name": "s", - "type": "SOCKET" - } - ], - "ioctlsocket": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "cmd", - "type": "long" - }, - { - "name": "argp", - "type": "u_long" - } - ], - "getpeername": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "name", - "type": { - "name": "sockaddr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "namelen", - "type": "int" - } - ], - "getsockname": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "name", - "type": { - "name": "sockaddr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "namelen", - "type": "int" - } - ], - "getsockopt": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "level", - "type": "int" - }, - { - "name": "optname", - "type": "int" - }, - { - "name": "optval", - "type": "char" - }, - { - "name": "optlen", - "type": "int" - } - ], - "htonl": [ - { - "name": "hostlong", - "type": "u_long" - } - ], - "htons": [ - { - "name": "hostshort", - "type": "u_short" - } - ], - "inet_addr": [ - { - "name": "cp", - "type": "char" - } - ], - "ntohl": [ - { - "name": "netlong", - "type": "u_long" - } - ], - "ntohs": [ - { - "name": "netshort", - "type": "u_short" - } - ], - "recv": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "len", - "type": "int" - }, - { - "name": "flags", - "type": "int" - } - ], - "recvfrom": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "len", - "type": "int" - }, - { - "name": "flags", - "type": "int" - }, - { - "name": "from", - "type": { - "name": "sockaddr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "fromlen", - "type": "int" - } - ], - "sendto": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "len", - "type": "int" - }, - { - "name": "flags", - "type": "int" - }, - { - "name": "to", - "type": { - "name": "sockaddr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "tolen", - "type": "int" - } - ], - "setsockopt": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "level", - "type": "int" - }, - { - "name": "optname", - "type": "int" - }, - { - "name": "optval", - "type": "char" - }, - { - "name": "optlen", - "type": "int" - } - ], - "shutdown": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "how", - "type": "int" - } - ], - "gethostname": [ - { - "name": "name", - "type": "char" - }, - { - "name": "namelen", - "type": "int" - } - ], - "WSAStartup": [ - { - "name": "wVersionRequired", - "type": "WORD" - }, - { - "name": "lpWSAData", - "type": "LPWSADATA" - } - ], - "WSACleanup": [ - { - "name": "VOID", - "type": "void" - } - ], - "WSASetLastError": [ - { - "name": "iError", - "type": "int" - } - ], - "WSAGetLastError": [ - { - "name": "VOID", - "type": "void" - } - ], - "WSAAsyncGetServByName": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsg", - "type": "u_int" - }, - { - "name": "name", - "type": "char" - }, - { - "name": "proto", - "type": "char" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "buflen", - "type": "int" - } - ], - "WSAAsyncGetServByPort": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsg", - "type": "u_int" - }, - { - "name": "port", - "type": "int" - }, - { - "name": "proto", - "type": "char" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "buflen", - "type": "int" - } - ], - "WSAAsyncGetProtoByName": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsg", - "type": "u_int" - }, - { - "name": "name", - "type": "char" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "buflen", - "type": "int" - } - ], - "WSAAsyncGetProtoByNumber": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsg", - "type": "u_int" - }, - { - "name": "number", - "type": "int" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "buflen", - "type": "int" - } - ], - "WSAAsyncGetHostByName": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsg", - "type": "u_int" - }, - { - "name": "name", - "type": "char" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "buflen", - "type": "int" - } - ], - "WSAAsyncGetHostByAddr": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsg", - "type": "u_int" - }, - { - "name": "addr", - "type": "char" - }, - { - "name": "len", - "type": "int" - }, - { - "name": "type", - "type": "int" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "buflen", - "type": "int" - } - ], - "WSACancelAsyncRequest": [ - { - "name": "hAsyncTaskHandle", - "type": "HANDLE" - } - ], - "WSAAsyncSelect": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsg", - "type": "u_int" - }, - { - "name": "lEvent", - "type": "long" - } - ], - "WSARecvEx": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "len", - "type": "int" - }, - { - "name": "flags", - "type": "int" - } - ], - "TransmitFile": [ - { - "name": "hSocket", - "type": "SOCKET" - }, - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "nNumberOfBytesToWrite", - "type": "DWORD" - }, - { - "name": "nNumberOfBytesPerSend", - "type": "DWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - }, - { - "name": "lpTransmitBuffers", - "type": "LPTRANSMIT_FILE_BUFFERS" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "AcceptEx": [ - { - "name": "sListenSocket", - "type": "SOCKET" - }, - { - "name": "sAcceptSocket", - "type": "SOCKET" - }, - { - "name": "lpOutputBuffer", - "type": "PVOID" - }, - { - "name": "dwReceiveDataLength", - "type": "DWORD" - }, - { - "name": "dwLocalAddressLength", - "type": "DWORD" - }, - { - "name": "dwRemoteAddressLength", - "type": "DWORD" - }, - { - "name": "lpdwBytesReceived", - "type": "LPDWORD" - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "GetAcceptExSockaddrs": [ - { - "name": "lpOutputBuffer", - "type": "PVOID" - }, - { - "name": "dwReceiveDataLength", - "type": "DWORD" - }, - { - "name": "dwLocalAddressLength", - "type": "DWORD" - }, - { - "name": "dwRemoteAddressLength", - "type": "DWORD" - }, - { - "name": "LocalSockaddr", - "type": { - "name": "sockaddr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "LocalSockaddrLength", - "type": "LPINT" - }, - { - "name": "RemoteSockaddr", - "type": { - "name": "sockaddr", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "RemoteSockaddrLength", - "type": "LPINT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winsvc.json b/qiling/extensions/windows_sdk/winsvc.json deleted file mode 100644 index e2b924279..000000000 --- a/qiling/extensions/windows_sdk/winsvc.json +++ /dev/null @@ -1,1006 +0,0 @@ -{ - "ChangeServiceConfigA": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwServiceType", - "type": "DWORD" - }, - { - "name": "dwStartType", - "type": "DWORD" - }, - { - "name": "dwErrorControl", - "type": "DWORD" - }, - { - "name": "lpBinaryPathName", - "type": "LPCSTR" - }, - { - "name": "lpLoadOrderGroup", - "type": "LPCSTR" - }, - { - "name": "lpdwTagId", - "type": "LPDWORD" - }, - { - "name": "lpDependencies", - "type": "LPCSTR" - }, - { - "name": "lpServiceStartName", - "type": "LPCSTR" - }, - { - "name": "lpPassword", - "type": "LPCSTR" - }, - { - "name": "lpDisplayName", - "type": "LPCSTR" - } - ], - "ChangeServiceConfigW": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwServiceType", - "type": "DWORD" - }, - { - "name": "dwStartType", - "type": "DWORD" - }, - { - "name": "dwErrorControl", - "type": "DWORD" - }, - { - "name": "lpBinaryPathName", - "type": "LPCWSTR" - }, - { - "name": "lpLoadOrderGroup", - "type": "LPCWSTR" - }, - { - "name": "lpdwTagId", - "type": "LPDWORD" - }, - { - "name": "lpDependencies", - "type": "LPCWSTR" - }, - { - "name": "lpServiceStartName", - "type": "LPCWSTR" - }, - { - "name": "lpPassword", - "type": "LPCWSTR" - }, - { - "name": "lpDisplayName", - "type": "LPCWSTR" - } - ], - "ChangeServiceConfig2A": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "lpInfo", - "type": "LPVOID" - } - ], - "ChangeServiceConfig2W": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "lpInfo", - "type": "LPVOID" - } - ], - "CloseServiceHandle": [ - { - "name": "hSCObject", - "type": "SC_HANDLE" - } - ], - "ControlService": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwControl", - "type": "DWORD" - }, - { - "name": "lpServiceStatus", - "type": "LPSERVICE_STATUS" - } - ], - "CreateServiceA": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "lpServiceName", - "type": "LPCSTR" - }, - { - "name": "lpDisplayName", - "type": "LPCSTR" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwServiceType", - "type": "DWORD" - }, - { - "name": "dwStartType", - "type": "DWORD" - }, - { - "name": "dwErrorControl", - "type": "DWORD" - }, - { - "name": "lpBinaryPathName", - "type": "LPCSTR" - }, - { - "name": "lpLoadOrderGroup", - "type": "LPCSTR" - }, - { - "name": "lpdwTagId", - "type": "LPDWORD" - }, - { - "name": "lpDependencies", - "type": "LPCSTR" - }, - { - "name": "lpServiceStartName", - "type": "LPCSTR" - }, - { - "name": "lpPassword", - "type": "LPCSTR" - } - ], - "CreateServiceW": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "lpServiceName", - "type": "LPCWSTR" - }, - { - "name": "lpDisplayName", - "type": "LPCWSTR" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwServiceType", - "type": "DWORD" - }, - { - "name": "dwStartType", - "type": "DWORD" - }, - { - "name": "dwErrorControl", - "type": "DWORD" - }, - { - "name": "lpBinaryPathName", - "type": "LPCWSTR" - }, - { - "name": "lpLoadOrderGroup", - "type": "LPCWSTR" - }, - { - "name": "lpdwTagId", - "type": "LPDWORD" - }, - { - "name": "lpDependencies", - "type": "LPCWSTR" - }, - { - "name": "lpServiceStartName", - "type": "LPCWSTR" - }, - { - "name": "lpPassword", - "type": "LPCWSTR" - } - ], - "DeleteService": [ - { - "name": "hService", - "type": "SC_HANDLE" - } - ], - "EnumDependentServicesA": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwServiceState", - "type": "DWORD" - }, - { - "name": "lpServices", - "type": "LPENUM_SERVICE_STATUSA" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - }, - { - "name": "lpServicesReturned", - "type": "LPDWORD" - } - ], - "EnumDependentServicesW": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwServiceState", - "type": "DWORD" - }, - { - "name": "lpServices", - "type": "LPENUM_SERVICE_STATUSW" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - }, - { - "name": "lpServicesReturned", - "type": "LPDWORD" - } - ], - "EnumServicesStatusA": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "dwServiceType", - "type": "DWORD" - }, - { - "name": "dwServiceState", - "type": "DWORD" - }, - { - "name": "lpServices", - "type": "LPENUM_SERVICE_STATUSA" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - }, - { - "name": "lpServicesReturned", - "type": "LPDWORD" - }, - { - "name": "lpResumeHandle", - "type": "LPDWORD" - } - ], - "EnumServicesStatusW": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "dwServiceType", - "type": "DWORD" - }, - { - "name": "dwServiceState", - "type": "DWORD" - }, - { - "name": "lpServices", - "type": "LPENUM_SERVICE_STATUSW" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - }, - { - "name": "lpServicesReturned", - "type": "LPDWORD" - }, - { - "name": "lpResumeHandle", - "type": "LPDWORD" - } - ], - "EnumServicesStatusExA": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "InfoLevel", - "type": "SC_ENUM_TYPE" - }, - { - "name": "dwServiceType", - "type": "DWORD" - }, - { - "name": "dwServiceState", - "type": "DWORD" - }, - { - "name": "lpServices", - "type": "LPBYTE" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - }, - { - "name": "lpServicesReturned", - "type": "LPDWORD" - }, - { - "name": "lpResumeHandle", - "type": "LPDWORD" - }, - { - "name": "pszGroupName", - "type": "LPCSTR" - } - ], - "EnumServicesStatusExW": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "InfoLevel", - "type": "SC_ENUM_TYPE" - }, - { - "name": "dwServiceType", - "type": "DWORD" - }, - { - "name": "dwServiceState", - "type": "DWORD" - }, - { - "name": "lpServices", - "type": "LPBYTE" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - }, - { - "name": "lpServicesReturned", - "type": "LPDWORD" - }, - { - "name": "lpResumeHandle", - "type": "LPDWORD" - }, - { - "name": "pszGroupName", - "type": "LPCWSTR" - } - ], - "GetServiceKeyNameA": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "lpDisplayName", - "type": "LPCSTR" - }, - { - "name": "lpServiceName", - "type": "LPSTR" - }, - { - "name": "lpcchBuffer", - "type": "LPDWORD" - } - ], - "GetServiceKeyNameW": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "lpDisplayName", - "type": "LPCWSTR" - }, - { - "name": "lpServiceName", - "type": "LPWSTR" - }, - { - "name": "lpcchBuffer", - "type": "LPDWORD" - } - ], - "GetServiceDisplayNameA": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "lpServiceName", - "type": "LPCSTR" - }, - { - "name": "lpDisplayName", - "type": "LPSTR" - }, - { - "name": "lpcchBuffer", - "type": "LPDWORD" - } - ], - "GetServiceDisplayNameW": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "lpServiceName", - "type": "LPCWSTR" - }, - { - "name": "lpDisplayName", - "type": "LPWSTR" - }, - { - "name": "lpcchBuffer", - "type": "LPDWORD" - } - ], - "LockServiceDatabase": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - } - ], - "NotifyBootConfigStatus": [ - { - "name": "BootAcceptable", - "type": "BOOL" - } - ], - "OpenSCManagerA": [ - { - "name": "lpMachineName", - "type": "LPCSTR" - }, - { - "name": "lpDatabaseName", - "type": "LPCSTR" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - } - ], - "OpenSCManagerW": [ - { - "name": "lpMachineName", - "type": "LPCWSTR" - }, - { - "name": "lpDatabaseName", - "type": "LPCWSTR" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - } - ], - "OpenServiceA": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "lpServiceName", - "type": "LPCSTR" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - } - ], - "OpenServiceW": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "lpServiceName", - "type": "LPCWSTR" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - } - ], - "QueryServiceConfigA": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "lpServiceConfig", - "type": "LPQUERY_SERVICE_CONFIGA" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - } - ], - "QueryServiceConfigW": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "lpServiceConfig", - "type": "LPQUERY_SERVICE_CONFIGW" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - } - ], - "QueryServiceConfig2A": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPBYTE" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - } - ], - "QueryServiceConfig2W": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPBYTE" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - } - ], - "QueryServiceLockStatusA": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "lpLockStatus", - "type": "LPQUERY_SERVICE_LOCK_STATUSA" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - } - ], - "QueryServiceLockStatusW": [ - { - "name": "hSCManager", - "type": "SC_HANDLE" - }, - { - "name": "lpLockStatus", - "type": "LPQUERY_SERVICE_LOCK_STATUSW" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - } - ], - "QueryServiceObjectSecurity": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwSecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "lpSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - } - ], - "QueryServiceStatus": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "lpServiceStatus", - "type": "LPSERVICE_STATUS" - } - ], - "QueryServiceStatusEx": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "InfoLevel", - "type": "SC_STATUS_TYPE" - }, - { - "name": "lpBuffer", - "type": "LPBYTE" - }, - { - "name": "cbBufSize", - "type": "DWORD" - }, - { - "name": "pcbBytesNeeded", - "type": "LPDWORD" - } - ], - "RegisterServiceCtrlHandlerA": [ - { - "name": "lpServiceName", - "type": "LPCSTR" - }, - { - "name": "lpHandlerProc", - "type": "LPHANDLER_FUNCTION" - } - ], - "RegisterServiceCtrlHandlerW": [ - { - "name": "lpServiceName", - "type": "LPCWSTR" - }, - { - "name": "lpHandlerProc", - "type": "LPHANDLER_FUNCTION" - } - ], - "RegisterServiceCtrlHandlerExA": [ - { - "name": "lpServiceName", - "type": "LPCSTR" - }, - { - "name": "lpHandlerProc", - "type": "LPHANDLER_FUNCTION_EX" - }, - { - "name": "lpContext", - "type": "LPVOID" - } - ], - "RegisterServiceCtrlHandlerExW": [ - { - "name": "lpServiceName", - "type": "LPCWSTR" - }, - { - "name": "lpHandlerProc", - "type": "LPHANDLER_FUNCTION_EX" - }, - { - "name": "lpContext", - "type": "LPVOID" - } - ], - "SetServiceObjectSecurity": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwSecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "lpSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "SetServiceStatus": [ - { - "name": "hServiceStatus", - "type": "SERVICE_STATUS_HANDLE" - }, - { - "name": "lpServiceStatus", - "type": "LPSERVICE_STATUS" - } - ], - "StartServiceCtrlDispatcherA": [ - { - "name": "lpServiceStartTable", - "type": "SERVICE_TABLE_ENTRYA" - } - ], - "StartServiceCtrlDispatcherW": [ - { - "name": "lpServiceStartTable", - "type": "SERVICE_TABLE_ENTRYW" - } - ], - "StartServiceA": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwNumServiceArgs", - "type": "DWORD" - }, - { - "name": "lpServiceArgVectors", - "type": "LPCSTR" - } - ], - "StartServiceW": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwNumServiceArgs", - "type": "DWORD" - }, - { - "name": "lpServiceArgVectors", - "type": "LPCWSTR" - } - ], - "UnlockServiceDatabase": [ - { - "name": "ScLock", - "type": "SC_LOCK" - } - ], - "NotifyServiceStatusChangeA": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwNotifyMask", - "type": "DWORD" - }, - { - "name": "pNotifyBuffer", - "type": "PSERVICE_NOTIFYA" - } - ], - "NotifyServiceStatusChangeW": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwNotifyMask", - "type": "DWORD" - }, - { - "name": "pNotifyBuffer", - "type": "PSERVICE_NOTIFYW" - } - ], - "ControlServiceExA": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwControl", - "type": "DWORD" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "pControlParams", - "type": "PVOID" - } - ], - "ControlServiceExW": [ - { - "name": "hService", - "type": "SC_HANDLE" - }, - { - "name": "dwControl", - "type": "DWORD" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "pControlParams", - "type": "PVOID" - } - ], - "QueryServiceDynamicInformation": [ - { - "name": "hServiceStatus", - "type": "SERVICE_STATUS_HANDLE" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "ppDynamicInfo", - "type": "PVOID" - } - ], - "GetServiceRegistryStateKey": [ - { - "name": "ServiceStatusHandle", - "type": "SERVICE_STATUS_HANDLE" - }, - { - "name": "StateType", - "type": "SERVICE_REGISTRY_STATE_TYPE" - }, - { - "name": "AccessMask", - "type": "DWORD" - }, - { - "name": "ServiceStateKey", - "type": "HKEY" - } - ], - "GetServiceDirectory": [ - { - "name": "hServiceStatus", - "type": "SERVICE_STATUS_HANDLE" - }, - { - "name": "eDirectoryType", - "type": "SERVICE_DIRECTORY_TYPE" - }, - { - "name": "lpPathBuffer", - "type": "PWCHAR" - }, - { - "name": "cchPathBufferLength", - "type": "DWORD" - }, - { - "name": "lpcchRequiredBufferLength", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wintrust.json b/qiling/extensions/windows_sdk/wintrust.json index 402578b27..46f394d79 100644 --- a/qiling/extensions/windows_sdk/wintrust.json +++ b/qiling/extensions/windows_sdk/wintrust.json @@ -1,138 +1,244 @@ { - "WinVerifyTrust": [ + "CryptCATOpen": [ { - "name": "hwnd", - "type": "HWND" + "name": "pwszFileName", + "type": "LPWSTR" }, { - "name": "pgActionID", - "type": "GUID" + "name": "fdwOpenFlags", + "type": "DWORD" + }, + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwPublicVersion", + "type": "DWORD" }, { - "name": "pWVTData", - "type": "LPVOID" + "name": "dwEncodingType", + "type": "DWORD" } ], - "WinVerifyTrustEx": [ + "CryptCATClose": [ { - "name": "hwnd", - "type": "HWND" - }, + "name": "hCatalog", + "type": "HANDLE" + } + ], + "CryptCATHandleFromStore": [ { - "name": "pgActionID", - "type": "GUID" - }, + "name": "pCatStore", + "type": "CRYPTCATSTORE" + } + ], + "CryptCATPersistStore": [ { - "name": "pWinTrustData", - "type": "WINTRUST_DATA" + "name": "hCatalog", + "type": "HANDLE" } ], - "WintrustGetRegPolicyFlags": [ + "CryptCATCDFClose": [ { - "name": "pdwPolicyFlags", - "type": "DWORD" + "name": "pCDF", + "type": "CRYPTCATCDF" } ], - "WintrustSetRegPolicyFlags": [ + "IsCatalogFile": [ { - "name": "dwPolicyFlags", - "type": "DWORD" + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "pwszFileName", + "type": "WCHAR" } ], - "WintrustAddActionID": [ + "CryptCATAdminAcquireContext": [ { - "name": "pgActionID", - "type": "GUID" + "name": "phCatAdmin", + "type": "HCATADMIN" }, { - "name": "fdwFlags", - "type": "DWORD" + "name": "pgSubsystem", + "type": "GUID" }, { - "name": "psProvInfo", - "type": "CRYPT_REGISTER_ACTIONID" + "name": "dwFlags", + "type": "DWORD" } ], - "WintrustRemoveActionID": [ + "CryptCATAdminAcquireContext2": [ + { + "name": "phCatAdmin", + "type": "HCATADMIN" + }, { - "name": "pgActionID", + "name": "pgSubsystem", "type": "GUID" + }, + { + "name": "pwszHashAlgorithm", + "type": "PCWSTR" + }, + { + "name": "pStrongHashPolicy", + "type": "PCCERT_STRONG_SIGN_PARA" + }, + { + "name": "dwFlags", + "type": "DWORD" } ], - "WintrustLoadFunctionPointers": [ + "CryptCATAdminReleaseContext": [ { - "name": "pgActionID", - "type": "GUID" + "name": "hCatAdmin", + "type": "HCATADMIN" }, { - "name": "pPfns", - "type": "CRYPT_PROVIDER_FUNCTIONS" + "name": "dwFlags", + "type": "DWORD" } ], - "WintrustAddDefaultForUsage": [ + "CryptCATAdminReleaseCatalogContext": [ { - "name": "pszUsageOID", - "type": "char" + "name": "hCatAdmin", + "type": "HCATADMIN" }, { - "name": "psDefUsage", - "type": "CRYPT_PROVIDER_REGDEFUSAGE" + "name": "hCatInfo", + "type": "HCATINFO" + }, + { + "name": "dwFlags", + "type": "DWORD" } ], - "WintrustGetDefaultForUsage": [ + "CryptCATAdminEnumCatalogFromHash": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pbHash", + "type": "BYTE" + }, { - "name": "dwAction", + "name": "cbHash", "type": "DWORD" }, { - "name": "pszUsageOID", - "type": "char" + "name": "dwFlags", + "type": "DWORD" }, { - "name": "psUsage", - "type": "CRYPT_PROVIDER_DEFUSAGE" + "name": "phPrevCatInfo", + "type": "HCATINFO" } ], - "WTHelperCertIsSelfSigned": [ + "CryptCATAdminCalcHashFromFileHandle": [ + { + "name": "hFile", + "type": "HANDLE" + }, { - "name": "dwEncoding", + "name": "pcbHash", "type": "DWORD" }, { - "name": "pCert", - "type": "CERT_INFO" + "name": "pbHash", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" } ], - "WTHelperCertCheckValidSignature": [ + "CryptCATAdminCalcHashFromFileHandle2": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "pcbHash", + "type": "DWORD" + }, + { + "name": "pbHash", + "type": "BYTE" + }, { - "name": "pProvData", - "type": "CRYPT_PROVIDER_DATA" + "name": "dwFlags", + "type": "DWORD" } ], - "OpenPersonalTrustDBDialogEx": [ + "CryptCATAdminAddCatalog": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pwszCatalogFile", + "type": "PWSTR" + }, { - "name": "hwndParent", - "type": "HWND" + "name": "pwszSelectBaseName", + "type": "PWSTR" }, { "name": "dwFlags", "type": "DWORD" + } + ], + "CryptCATAdminRemoveCatalog": [ + { + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pwszCatalogFile", + "type": "LPCWSTR" }, { - "name": "pvReserved", - "type": "PVOID" + "name": "dwFlags", + "type": "DWORD" } ], - "OpenPersonalTrustDBDialog": [ + "CryptCATCatalogInfoFromContext": [ + { + "name": "hCatInfo", + "type": "HCATINFO" + }, + { + "name": "psCatInfo", + "type": "CATALOG_INFO" + }, { - "name": "hwndParent", - "type": "HWND" + "name": "dwFlags", + "type": "DWORD" } ], - "WintrustSetDefaultIncludePEPageHashes": [ + "CryptCATAdminResolveCatalogPath": [ { - "name": "fIncludePEPageHashes", - "type": "BOOL" + "name": "hCatAdmin", + "type": "HCATADMIN" + }, + { + "name": "pwszCatalogFile", + "type": "WCHAR" + }, + { + "name": "psCatInfo", + "type": "CATALOG_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/robuffer.json b/qiling/extensions/windows_sdk/wintypes.json similarity index 100% rename from qiling/extensions/windows_sdk/robuffer.json rename to qiling/extensions/windows_sdk/wintypes.json diff --git a/qiling/extensions/windows_sdk/wlanui.json b/qiling/extensions/windows_sdk/wlanui.json new file mode 100644 index 000000000..c8cb7840d --- /dev/null +++ b/qiling/extensions/windows_sdk/wlanui.json @@ -0,0 +1,1184 @@ +{ + "WlanOpenHandle": [ + { + "name": "dwClientVersion", + "type": "DWORD" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwNegotiatedVersion", + "type": "PDWORD" + }, + { + "name": "phClientHandle", + "type": "PHANDLE" + } + ], + "WlanCloseHandle": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanEnumInterfaces": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppInterfaceList", + "type": "PWLAN_INTERFACE_INFO_LIST" + } + ], + "WlanSetAutoConfigParameter": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "OpCode", + "type": "WLAN_AUTOCONF_OPCODE" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pData", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanQueryAutoConfigParameter": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "OpCode", + "type": "WLAN_AUTOCONF_OPCODE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwDataSize", + "type": "PDWORD" + }, + { + "name": "ppData", + "type": "PVOID" + }, + { + "name": "pWlanOpcodeValueType", + "type": "PWLAN_OPCODE_VALUE_TYPE" + } + ], + "WlanGetInterfaceCapability": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppCapability", + "type": "PWLAN_INTERFACE_CAPABILITY" + } + ], + "WlanSetInterface": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "OpCode", + "type": "WLAN_INTF_OPCODE" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pData", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanQueryInterface": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "OpCode", + "type": "WLAN_INTF_OPCODE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwDataSize", + "type": "PDWORD" + }, + { + "name": "ppData", + "type": "PVOID" + }, + { + "name": "pWlanOpcodeValueType", + "type": "PWLAN_OPCODE_VALUE_TYPE" + } + ], + "WlanIhvControl": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "WLAN_IHV_CONTROL_TYPE" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + }, + { + "name": "pInBuffer", + "type": "PVOID" + }, + { + "name": "dwOutBufferSize", + "type": "DWORD" + }, + { + "name": "pOutBuffer", + "type": "PVOID" + }, + { + "name": "pdwBytesReturned", + "type": "PDWORD" + } + ], + "WlanScan": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pDot11Ssid", + "type": "PDOT11_SSID" + }, + { + "name": "pIeData", + "type": "PWLAN_RAW_DATA" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanGetAvailableNetworkList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppAvailableNetworkList", + "type": "PWLAN_AVAILABLE_NETWORK_LIST" + } + ], + "WlanGetNetworkBssList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pDot11Ssid", + "type": "PDOT11_SSID" + }, + { + "name": "dot11BssType", + "type": "DOT11_BSS_TYPE" + }, + { + "name": "bSecurityEnabled", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppWlanBssList", + "type": "PWLAN_BSS_LIST" + } + ], + "WlanConnect": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pConnectionParameters", + "type": "PWLAN_CONNECTION_PARAMETERS" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanDisconnect": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanRegisterNotification": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "dwNotifSource", + "type": "DWORD" + }, + { + "name": "bIgnoreDuplicate", + "type": "BOOL" + }, + { + "name": "funcCallback", + "type": "WLAN_NOTIFICATION_CALLBACK" + }, + { + "name": "pCallbackContext", + "type": "PVOID" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwPrevNotifSource", + "type": "PDWORD" + } + ], + "WlanGetProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pstrProfileXml", + "type": "LPWSTR" + }, + { + "name": "pdwFlags", + "type": "DWORD" + }, + { + "name": "pdwGrantedAccess", + "type": "DWORD" + } + ], + "WlanSetProfileEapUserData": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "eapType", + "type": "EAP_METHOD_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwEapUserDataSize", + "type": "DWORD" + }, + { + "name": "pbEapUserData", + "type": "LPBYTE" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSetProfileEapXmlUserData": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "strEapXmlUserData", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSetProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "strProfileXml", + "type": "LPCWSTR" + }, + { + "name": "strAllUserProfileSecurity", + "type": "LPCWSTR" + }, + { + "name": "bOverwrite", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwReasonCode", + "type": "DWORD" + } + ], + "WlanDeleteProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanRenameProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strOldProfileName", + "type": "LPCWSTR" + }, + { + "name": "strNewProfileName", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanGetProfileList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppProfileList", + "type": "PWLAN_PROFILE_INFO_LIST" + } + ], + "WlanSetProfileList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "dwItems", + "type": "DWORD" + }, + { + "name": "strProfileNames", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSetProfilePosition": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "dwPosition", + "type": "DWORD" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSetProfileCustomUserData": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pData", + "type": "PBYTE" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanGetProfileCustomUserData": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pdwDataSize", + "type": "DWORD" + }, + { + "name": "ppData", + "type": "PBYTE" + } + ], + "WlanSetFilterList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "wlanFilterListType", + "type": "WLAN_FILTER_LIST_TYPE" + }, + { + "name": "pNetworkList", + "type": "PDOT11_NETWORK_LIST" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanGetFilterList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "wlanFilterListType", + "type": "WLAN_FILTER_LIST_TYPE" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppNetworkList", + "type": "PDOT11_NETWORK_LIST" + } + ], + "WlanSetPsdIEDataList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "strFormat", + "type": "LPCWSTR" + }, + { + "name": "pPsdIEDataList", + "type": "PWLAN_RAW_DATA_LIST" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanSaveTemporaryProfile": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "strProfileName", + "type": "LPCWSTR" + }, + { + "name": "strAllUserProfileSecurity", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "bOverWrite", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanDeviceServiceCommand": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "pDeviceServiceGuid", + "type": "LPGUID" + }, + { + "name": "dwOpCode", + "type": "DWORD" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + }, + { + "name": "pInBuffer", + "type": "PVOID" + }, + { + "name": "dwOutBufferSize", + "type": "DWORD" + }, + { + "name": "pOutBuffer", + "type": "PVOID" + }, + { + "name": "pdwBytesReturned", + "type": "PDWORD" + } + ], + "WlanGetSupportedDeviceServices": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "ppDevSvcGuidList", + "type": "PWLAN_DEVICE_SERVICE_GUID_LIST" + } + ], + "WlanRegisterDeviceServiceNotification": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pDevSvcGuidList", + "type": "PWLAN_DEVICE_SERVICE_GUID_LIST" + } + ], + "WlanExtractPsdIEDataList": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "dwIeDataSize", + "type": "DWORD" + }, + { + "name": "pRawIeData", + "type": "PBYTE" + }, + { + "name": "strFormat", + "type": "LPCWSTR" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "ppPsdIEDataList", + "type": "PWLAN_RAW_DATA_LIST" + } + ], + "WlanReasonCodeToString": [ + { + "name": "dwReasonCode", + "type": "DWORD" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + }, + { + "name": "pStringBuffer", + "type": "PWCHAR" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WlanAllocateMemory": [ + { + "name": "dwMemorySize", + "type": "DWORD" + } + ], + "WlanFreeMemory": [ + { + "name": "pMemory", + "type": "PVOID" + } + ], + "WlanSetSecuritySettings": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "SecurableObject", + "type": "WLAN_SECURABLE_OBJECT" + }, + { + "name": "strModifiedSDDL", + "type": "LPCWSTR" + } + ], + "WlanGetSecuritySettings": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "SecurableObject", + "type": "WLAN_SECURABLE_OBJECT" + }, + { + "name": "pValueType", + "type": "PWLAN_OPCODE_VALUE_TYPE" + }, + { + "name": "pstrCurrentSDDL", + "type": "LPWSTR" + }, + { + "name": "pdwGrantedAccess", + "type": "PDWORD" + } + ], + "WlanUIEditProfile": [ + { + "name": "dwClientVersion", + "type": "DWORD" + }, + { + "name": "wstrProfileName", + "type": "LPCWSTR" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wlStartPage", + "type": "WL_DISPLAY_PAGES" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pWlanReasonCode", + "type": "PWLAN_REASON_CODE" + } + ], + "WlanHostedNetworkStartUsing": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkStopUsing": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkForceStart": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkForceStop": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkQueryProperty": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "OpCode", + "type": "WLAN_HOSTED_NETWORK_OPCODE" + }, + { + "name": "pdwDataSize", + "type": "PDWORD" + }, + { + "name": "ppvData", + "type": "PVOID" + }, + { + "name": "pWlanOpcodeValueType", + "type": "PWLAN_OPCODE_VALUE_TYPE" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkSetProperty": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "OpCode", + "type": "WLAN_HOSTED_NETWORK_OPCODE" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "pvData", + "type": "PVOID" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkInitSettings": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkRefreshSecuritySettings": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkQueryStatus": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "ppWlanHostedNetworkStatus", + "type": "PWLAN_HOSTED_NETWORK_STATUS" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkSetSecondaryKey": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "dwKeyLength", + "type": "DWORD" + }, + { + "name": "pucKeyData", + "type": "PUCHAR" + }, + { + "name": "bIsPassPhrase", + "type": "BOOL" + }, + { + "name": "bPersistent", + "type": "BOOL" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanHostedNetworkQuerySecondaryKey": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pdwKeyLength", + "type": "PDWORD" + }, + { + "name": "ppucKeyData", + "type": "PUCHAR" + }, + { + "name": "pbIsPassPhrase", + "type": "PBOOL" + }, + { + "name": "pbPersistent", + "type": "PBOOL" + }, + { + "name": "pFailReason", + "type": "PWLAN_HOSTED_NETWORK_REASON" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "WlanRegisterVirtualStationNotification": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "bRegister", + "type": "BOOL" + }, + { + "name": "pReserved", + "type": "PVOID" + } + ], + "WFDOpenHandle": [ + { + "name": "dwClientVersion", + "type": "DWORD" + }, + { + "name": "pdwNegotiatedVersion", + "type": "PDWORD" + }, + { + "name": "phClientHandle", + "type": "PHANDLE" + } + ], + "WFDCloseHandle": [ + { + "name": "hClientHandle", + "type": "HANDLE" + } + ], + "WFDStartOpenSession": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pDeviceAddress", + "type": "PDOT11_MAC_ADDRESS" + }, + { + "name": "pvContext", + "type": "PVOID" + }, + { + "name": "pfnCallback", + "type": "WFD_OPEN_SESSION_COMPLETE_CALLBACK" + }, + { + "name": "phSessionHandle", + "type": "PHANDLE" + } + ], + "WFDCancelOpenSession": [ + { + "name": "hSessionHandle", + "type": "HANDLE" + } + ], + "WFDOpenLegacySession": [ + { + "name": "hClientHandle", + "type": "HANDLE" + }, + { + "name": "pLegacyMacAddress", + "type": "PDOT11_MAC_ADDRESS" + }, + { + "name": "phSessionHandle", + "type": "HANDLE" + }, + { + "name": "pGuidSessionInterface", + "type": "GUID" + } + ], + "WFDCloseSession": [ + { + "name": "hSessionHandle", + "type": "HANDLE" + } + ], + "WFDUpdateDeviceVisibility": [ + { + "name": "pDeviceAddress", + "type": "PDOT11_MAC_ADDRESS" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wmcontainer.json b/qiling/extensions/windows_sdk/wmcontainer.json deleted file mode 100644 index 4658f78bf..000000000 --- a/qiling/extensions/windows_sdk/wmcontainer.json +++ /dev/null @@ -1,152 +0,0 @@ -{ - "MFCreateASFContentInfo": [ - { - "name": "ppIContentInfo", - "type": "IMFASFContentInfo" - } - ], - "MFCreateASFIndexer": [ - { - "name": "ppIIndexer", - "type": "IMFASFIndexer" - } - ], - "MFCreateASFIndexerByteStream": [ - { - "name": "pIContentByteStream", - "type": "IMFByteStream" - }, - { - "name": "cbIndexStartOffset", - "type": "QWORD" - }, - { - "name": "pIIndexByteStream", - "type": "IMFByteStream" - } - ], - "MFCreateASFSplitter": [ - { - "name": "ppISplitter", - "type": "IMFASFSplitter" - } - ], - "MFCreateASFProfile": [ - { - "name": "ppIProfile", - "type": "IMFASFProfile" - } - ], - "MFCreateASFProfileFromPresentationDescriptor": [ - { - "name": "pIPD", - "type": "IMFPresentationDescriptor" - }, - { - "name": "ppIProfile", - "type": "IMFASFProfile" - } - ], - "MFCreatePresentationDescriptorFromASFProfile": [ - { - "name": "pIProfile", - "type": "IMFASFProfile" - }, - { - "name": "ppIPD", - "type": "IMFPresentationDescriptor" - } - ], - "MFCreateASFMultiplexer": [ - { - "name": "ppIMultiplexer", - "type": "IMFASFMultiplexer" - } - ], - "MFCreateASFStreamSelector": [ - { - "name": "pIASFProfile", - "type": "IMFASFProfile" - }, - { - "name": "ppSelector", - "type": "IMFASFStreamSelector" - } - ], - "MFCreateASFMediaSink": [ - { - "name": "pIByteStream", - "type": "IMFByteStream" - }, - { - "name": "ppIMediaSink", - "type": "IMFMediaSink" - } - ], - "MFCreateASFMediaSinkActivate": [ - { - "name": "pwszFileName", - "type": "LPCWSTR" - }, - { - "name": "pContentInfo", - "type": "IMFASFContentInfo" - }, - { - "name": "ppIActivate", - "type": "IMFActivate" - } - ], - "MFCreateWMVEncoderActivate": [ - { - "name": "pMediaType", - "type": "IMFMediaType" - }, - { - "name": "pEncodingConfigurationProperties", - "type": "IPropertyStore" - }, - { - "name": "ppActivate", - "type": "IMFActivate" - } - ], - "MFCreateWMAEncoderActivate": [ - { - "name": "pMediaType", - "type": "IMFMediaType" - }, - { - "name": "pEncodingConfigurationProperties", - "type": "IPropertyStore" - }, - { - "name": "ppActivate", - "type": "IMFActivate" - } - ], - "MFCreateASFStreamingMediaSink": [ - { - "name": "pIByteStream", - "type": "IMFByteStream" - }, - { - "name": "ppIMediaSink", - "type": "IMFMediaSink" - } - ], - "MFCreateASFStreamingMediaSinkActivate": [ - { - "name": "pByteStreamActivate", - "type": "IMFActivate" - }, - { - "name": "pContentInfo", - "type": "IMFASFContentInfo" - }, - { - "name": "ppIActivate", - "type": "IMFActivate" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wmpservices.json b/qiling/extensions/windows_sdk/wmpservices.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/wmpservices.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wmsdkvalidate.json b/qiling/extensions/windows_sdk/wmsdkvalidate.json deleted file mode 100644 index f613d9792..000000000 --- a/qiling/extensions/windows_sdk/wmsdkvalidate.json +++ /dev/null @@ -1,38 +0,0 @@ -{ - "WMCheckURLExtension": [ - { - "name": "pwszURL", - "type": "LPCWSTR" - } - ], - "WMCheckURLScheme": [ - { - "name": "pwszURLScheme", - "type": "LPCWSTR" - } - ], - "WMValidateData": [ - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataSize", - "type": "DWORD" - } - ], - "WMIsAvailableOffline": [ - { - "name": "pwszURL", - "type": "LPCWSTR" - }, - { - "name": "pwszLanguage", - "type": "LPCWSTR" - }, - { - "name": "pfIsAvailableOffline", - "type": "BOOL" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wofapi.json b/qiling/extensions/windows_sdk/wofutil.json similarity index 100% rename from qiling/extensions/windows_sdk/wofapi.json rename to qiling/extensions/windows_sdk/wofutil.json diff --git a/qiling/extensions/windows_sdk/ws2spi.json b/qiling/extensions/windows_sdk/ws2spi.json deleted file mode 100644 index 64ab1a7f7..000000000 --- a/qiling/extensions/windows_sdk/ws2spi.json +++ /dev/null @@ -1,526 +0,0 @@ -{ - "WSCEnumProtocols": [ - { - "name": "lpiProtocols", - "type": "LPINT" - }, - { - "name": "lpProtocolBuffer", - "type": "LPWSAPROTOCOL_INFOW" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCEnumProtocols32": [ - { - "name": "lpiProtocols", - "type": "LPINT" - }, - { - "name": "lpProtocolBuffer", - "type": "LPWSAPROTOCOL_INFOW" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCDeinstallProvider": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCDeinstallProvider32": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCInstallProvider": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "lpszProviderDllPath", - "type": "WCHAR" - }, - { - "name": "lpProtocolInfoList", - "type": "LPWSAPROTOCOL_INFOW" - }, - { - "name": "dwNumberOfEntries", - "type": "DWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCInstallProvider64_32": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "lpszProviderDllPath", - "type": "WCHAR" - }, - { - "name": "lpProtocolInfoList", - "type": "LPWSAPROTOCOL_INFOW" - }, - { - "name": "dwNumberOfEntries", - "type": "DWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCGetProviderPath": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "lpszProviderDllPath", - "type": "WCHAR" - }, - { - "name": "lpProviderDllPathLen", - "type": "LPINT" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCGetProviderPath32": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "lpszProviderDllPath", - "type": "WCHAR" - }, - { - "name": "lpProviderDllPathLen", - "type": "LPINT" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCUpdateProvider": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "lpszProviderDllPath", - "type": "WCHAR" - }, - { - "name": "lpProtocolInfoList", - "type": "LPWSAPROTOCOL_INFOW" - }, - { - "name": "dwNumberOfEntries", - "type": "DWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCUpdateProvider32": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "lpszProviderDllPath", - "type": "WCHAR" - }, - { - "name": "lpProtocolInfoList", - "type": "LPWSAPROTOCOL_INFOW" - }, - { - "name": "dwNumberOfEntries", - "type": "DWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCSetProviderInfo": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "InfoType", - "type": "WSC_PROVIDER_INFO_TYPE" - }, - { - "name": "Info", - "type": "PBYTE" - }, - { - "name": "InfoSize", - "type": "size_t" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCGetProviderInfo": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "InfoType", - "type": "WSC_PROVIDER_INFO_TYPE" - }, - { - "name": "Info", - "type": "PBYTE" - }, - { - "name": "InfoSize", - "type": "size_t" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCSetProviderInfo32": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "InfoType", - "type": "WSC_PROVIDER_INFO_TYPE" - }, - { - "name": "Info", - "type": "PBYTE" - }, - { - "name": "InfoSize", - "type": "size_t" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCGetProviderInfo32": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "InfoType", - "type": "WSC_PROVIDER_INFO_TYPE" - }, - { - "name": "Info", - "type": "PBYTE" - }, - { - "name": "InfoSize", - "type": "size_t" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCSetApplicationCategory": [ - { - "name": "Path", - "type": "LPCWSTR" - }, - { - "name": "PathLength", - "type": "DWORD" - }, - { - "name": "Extra", - "type": "LPCWSTR" - }, - { - "name": "ExtraLength", - "type": "DWORD" - }, - { - "name": "PermittedLspCategories", - "type": "DWORD" - }, - { - "name": "pPrevPermLspCat", - "type": "DWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCGetApplicationCategory": [ - { - "name": "Path", - "type": "LPCWSTR" - }, - { - "name": "PathLength", - "type": "DWORD" - }, - { - "name": "Extra", - "type": "LPCWSTR" - }, - { - "name": "ExtraLength", - "type": "DWORD" - }, - { - "name": "pPermittedLspCategories", - "type": "DWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSCEnumNameSpaceProviders32": [ - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - }, - { - "name": "lpnspBuffer", - "type": "LPWSANAMESPACE_INFOW" - } - ], - "WSCEnumNameSpaceProvidersEx32": [ - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - }, - { - "name": "lpnspBuffer", - "type": "LPWSANAMESPACE_INFOEXW" - } - ], - "WSCInstallNameSpace": [ - { - "name": "lpszIdentifier", - "type": "LPWSTR" - }, - { - "name": "lpszPathName", - "type": "LPWSTR" - }, - { - "name": "dwNameSpace", - "type": "DWORD" - }, - { - "name": "dwVersion", - "type": "DWORD" - }, - { - "name": "lpProviderId", - "type": "LPGUID" - } - ], - "WSCUnInstallNameSpace": [ - { - "name": "lpProviderId", - "type": "LPGUID" - } - ], - "WSCInstallNameSpaceEx": [ - { - "name": "lpszIdentifier", - "type": "LPWSTR" - }, - { - "name": "lpszPathName", - "type": "LPWSTR" - }, - { - "name": "dwNameSpace", - "type": "DWORD" - }, - { - "name": "dwVersion", - "type": "DWORD" - }, - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "lpProviderSpecific", - "type": "LPBLOB" - } - ], - "WSCInstallNameSpaceEx32": [ - { - "name": "lpszIdentifier", - "type": "LPWSTR" - }, - { - "name": "lpszPathName", - "type": "LPWSTR" - }, - { - "name": "dwNameSpace", - "type": "DWORD" - }, - { - "name": "dwVersion", - "type": "DWORD" - }, - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "lpProviderSpecific", - "type": "LPBLOB" - } - ], - "WSCEnableNSProvider": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "fEnable", - "type": "BOOL" - } - ], - "WSCEnableNSProvider32": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "fEnable", - "type": "BOOL" - } - ], - "WSCInstallProviderAndChains64_32": [ - { - "name": "lpProviderId", - "type": "LPGUID" - }, - { - "name": "lpszProviderDllPath", - "type": "LPWSTR" - }, - { - "name": "lpszProviderDllPath32", - "type": "LPWSTR" - }, - { - "name": "lpszLspName", - "type": "LPWSTR" - }, - { - "name": "dwServiceFlags", - "type": "DWORD" - }, - { - "name": "lpProtocolInfoList", - "type": "LPWSAPROTOCOL_INFOW" - }, - { - "name": "dwNumberOfEntries", - "type": "DWORD" - }, - { - "name": "lpdwCatalogEntryId", - "type": "LPDWORD" - }, - { - "name": "lpErrno", - "type": "LPINT" - } - ], - "WSAAdvertiseProvider": [ - { - "name": "puuidProviderId", - "type": "GUID" - }, - { - "name": "pNSPv2Routine", - "type": "LPCNSPV2_ROUTINE" - } - ], - "WSAUnadvertiseProvider": [ - { - "name": "puuidProviderId", - "type": "GUID" - } - ], - "WSAProviderCompleteAsyncCall": [ - { - "name": "hAsyncCall", - "type": "HANDLE" - }, - { - "name": "iRetCode", - "type": "INT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ws2tcpip.json b/qiling/extensions/windows_sdk/ws2tcpip.json deleted file mode 100644 index 63d370ca6..000000000 --- a/qiling/extensions/windows_sdk/ws2tcpip.json +++ /dev/null @@ -1,568 +0,0 @@ -{ - "getaddrinfo": [ - { - "name": "pNodeName", - "type": "PCSTR" - }, - { - "name": "pServiceName", - "type": "PCSTR" - }, - { - "name": "pHints", - "type": "ADDRINFOA" - }, - { - "name": "ppResult", - "type": "PADDRINFOA" - } - ], - "GetAddrInfoW": [ - { - "name": "pNodeName", - "type": "PCWSTR" - }, - { - "name": "pServiceName", - "type": "PCWSTR" - }, - { - "name": "pHints", - "type": "ADDRINFOW" - }, - { - "name": "ppResult", - "type": "PADDRINFOW" - } - ], - "GetAddrInfoExA": [ - { - "name": "pName", - "type": "PCSTR" - }, - { - "name": "pServiceName", - "type": "PCSTR" - }, - { - "name": "dwNameSpace", - "type": "DWORD" - }, - { - "name": "lpNspId", - "type": "LPGUID" - }, - { - "name": "hints", - "type": "ADDRINFOEXA" - }, - { - "name": "ppResult", - "type": "PADDRINFOEXA" - }, - { - "name": "timeout", - "type": { - "name": "timeval", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - }, - { - "name": "lpCompletionRoutine", - "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" - }, - { - "name": "lpNameHandle", - "type": "LPHANDLE" - } - ], - "GetAddrInfoExW": [ - { - "name": "pName", - "type": "PCWSTR" - }, - { - "name": "pServiceName", - "type": "PCWSTR" - }, - { - "name": "dwNameSpace", - "type": "DWORD" - }, - { - "name": "lpNspId", - "type": "LPGUID" - }, - { - "name": "hints", - "type": "ADDRINFOEXW" - }, - { - "name": "ppResult", - "type": "PADDRINFOEXW" - }, - { - "name": "timeout", - "type": { - "name": "timeval", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - }, - { - "name": "lpCompletionRoutine", - "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" - }, - { - "name": "lpHandle", - "type": "LPHANDLE" - } - ], - "GetAddrInfoExCancel": [ - { - "name": "lpHandle", - "type": "LPHANDLE" - } - ], - "GetAddrInfoExOverlappedResult": [ - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - } - ], - "SetAddrInfoExA": [ - { - "name": "pName", - "type": "PCSTR" - }, - { - "name": "pServiceName", - "type": "PCSTR" - }, - { - "name": "pAddresses", - "type": "SOCKET_ADDRESS" - }, - { - "name": "dwAddressCount", - "type": "DWORD" - }, - { - "name": "lpBlob", - "type": "LPBLOB" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwNameSpace", - "type": "DWORD" - }, - { - "name": "lpNspId", - "type": "LPGUID" - }, - { - "name": "timeout", - "type": { - "name": "timeval", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - }, - { - "name": "lpCompletionRoutine", - "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" - }, - { - "name": "lpNameHandle", - "type": "LPHANDLE" - } - ], - "SetAddrInfoExW": [ - { - "name": "pName", - "type": "PCWSTR" - }, - { - "name": "pServiceName", - "type": "PCWSTR" - }, - { - "name": "pAddresses", - "type": "SOCKET_ADDRESS" - }, - { - "name": "dwAddressCount", - "type": "DWORD" - }, - { - "name": "lpBlob", - "type": "LPBLOB" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwNameSpace", - "type": "DWORD" - }, - { - "name": "lpNspId", - "type": "LPGUID" - }, - { - "name": "timeout", - "type": { - "name": "timeval", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "lpOverlapped", - "type": "LPOVERLAPPED" - }, - { - "name": "lpCompletionRoutine", - "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" - }, - { - "name": "lpNameHandle", - "type": "LPHANDLE" - } - ], - "freeaddrinfo": [ - { - "name": "pAddrInfo", - "type": "PADDRINFOA" - } - ], - "FreeAddrInfoW": [ - { - "name": "pAddrInfo", - "type": "PADDRINFOW" - } - ], - "FreeAddrInfoEx": [ - { - "name": "pAddrInfoEx", - "type": "PADDRINFOEXA" - } - ], - "FreeAddrInfoExW": [ - { - "name": "pAddrInfoEx", - "type": "PADDRINFOEXW" - } - ], - "getnameinfo": [ - { - "name": "pSockaddr", - "type": "SOCKADDR" - }, - { - "name": "SockaddrLength", - "type": "socklen_t" - }, - { - "name": "pNodeBuffer", - "type": "PCHAR" - }, - { - "name": "NodeBufferSize", - "type": "DWORD" - }, - { - "name": "pServiceBuffer", - "type": "PCHAR" - }, - { - "name": "ServiceBufferSize", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "INT" - } - ], - "GetNameInfoW": [ - { - "name": "pSockaddr", - "type": "SOCKADDR" - }, - { - "name": "SockaddrLength", - "type": "socklen_t" - }, - { - "name": "pNodeBuffer", - "type": "PWCHAR" - }, - { - "name": "NodeBufferSize", - "type": "DWORD" - }, - { - "name": "pServiceBuffer", - "type": "PWCHAR" - }, - { - "name": "ServiceBufferSize", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "INT" - } - ], - "InetPtonW": [ - { - "name": "Family", - "type": "INT" - }, - { - "name": "pszAddrString", - "type": "PCWSTR" - }, - { - "name": "pAddrBuf", - "type": "PVOID" - } - ], - "InetNtopW": [ - { - "name": "Family", - "type": "INT" - }, - { - "name": "pAddr", - "type": "void" - }, - { - "name": "pStringBuf", - "type": "PWSTR" - }, - { - "name": "StringBufSize", - "type": "size_t" - } - ], - "setipv4sourcefilter": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "Interface", - "type": "IN_ADDR" - }, - { - "name": "Group", - "type": "IN_ADDR" - }, - { - "name": "FilterMode", - "type": "MULTICAST_MODE_TYPE" - }, - { - "name": "SourceCount", - "type": "ULONG" - }, - { - "name": "SourceList", - "type": "IN_ADDR" - } - ], - "getipv4sourcefilter": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "Interface", - "type": "IN_ADDR" - }, - { - "name": "Group", - "type": "IN_ADDR" - }, - { - "name": "FilterMode", - "type": "MULTICAST_MODE_TYPE" - }, - { - "name": "SourceCount", - "type": "ULONG" - }, - { - "name": "SourceList", - "type": "IN_ADDR" - } - ], - "setsourcefilter": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "Interface", - "type": "ULONG" - }, - { - "name": "Group", - "type": "SOCKADDR" - }, - { - "name": "GroupLength", - "type": "int" - }, - { - "name": "FilterMode", - "type": "MULTICAST_MODE_TYPE" - }, - { - "name": "SourceCount", - "type": "ULONG" - }, - { - "name": "SourceList", - "type": "SOCKADDR_STORAGE" - } - ], - "getsourcefilter": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "Interface", - "type": "ULONG" - }, - { - "name": "Group", - "type": "SOCKADDR" - }, - { - "name": "GroupLength", - "type": "int" - }, - { - "name": "FilterMode", - "type": "MULTICAST_MODE_TYPE" - }, - { - "name": "SourceCount", - "type": "ULONG" - }, - { - "name": "SourceList", - "type": "SOCKADDR_STORAGE" - } - ], - "WSAGetIPUserMtu": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "Mtu", - "type": "DWORD" - } - ], - "WSASetIPUserMtu": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "Mtu", - "type": "DWORD" - } - ], - "WSAGetFailConnectOnIcmpError": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "Enabled", - "type": "DWORD" - } - ], - "WSASetFailConnectOnIcmpError": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "Enabled", - "type": "DWORD" - } - ], - "WSAGetIcmpErrorInfo": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "Info", - "type": "ICMP_ERROR_INFO" - } - ], - "WSAGetUdpSendMessageSize": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "MsgSize", - "type": "DWORD" - } - ], - "WSASetUdpSendMessageSize": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "MsgSize", - "type": "DWORD" - } - ], - "WSAGetUdpRecvMaxCoalescedSize": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "MaxCoalescedMsgSize", - "type": "DWORD" - } - ], - "WSASetUdpRecvMaxCoalescedSize": [ - { - "name": "Socket", - "type": "SOCKET" - }, - { - "name": "MaxCoalescedMsgSize", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wsdattachment.json b/qiling/extensions/windows_sdk/wsdattachment.json deleted file mode 100644 index 857d8010b..000000000 --- a/qiling/extensions/windows_sdk/wsdattachment.json +++ /dev/null @@ -1,8 +0,0 @@ -{ - "WSDCreateOutboundAttachment": [ - { - "name": "ppAttachment", - "type": "IWSDOutboundAttachment" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wsipv6ok.json b/qiling/extensions/windows_sdk/wsipv6ok.json deleted file mode 100644 index 0fe99711d..000000000 --- a/qiling/extensions/windows_sdk/wsipv6ok.json +++ /dev/null @@ -1,60 +0,0 @@ -{ - "inet_addr": [ - { - "name": "cp", - "type": "char" - } - ], - "WSAAsyncGetHostByName": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsg", - "type": "u_int" - }, - { - "name": "name", - "type": "char" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "buflen", - "type": "int" - } - ], - "WSAAsyncGetHostByAddr": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsg", - "type": "u_int" - }, - { - "name": "addr", - "type": "char" - }, - { - "name": "len", - "type": "int" - }, - { - "name": "type", - "type": "int" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "buflen", - "type": "int" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wsman.json b/qiling/extensions/windows_sdk/wsman.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/wsman.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wtshintapi.json b/qiling/extensions/windows_sdk/wtshintapi.json deleted file mode 100644 index 8b660654a..000000000 --- a/qiling/extensions/windows_sdk/wtshintapi.json +++ /dev/null @@ -1,24 +0,0 @@ -{ - "WTSSetRenderHint": [ - { - "name": "pRenderHintID", - "type": "UINT64" - }, - { - "name": "hwndOwner", - "type": "HWND" - }, - { - "name": "renderHintType", - "type": "DWORD" - }, - { - "name": "cbHintDataLength", - "type": "DWORD" - }, - { - "name": "pHintData", - "type": "BYTE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/xamlom.json b/qiling/extensions/windows_sdk/xamlom.json deleted file mode 100644 index e08cc8008..000000000 --- a/qiling/extensions/windows_sdk/xamlom.json +++ /dev/null @@ -1,28 +0,0 @@ -{ - "InitializeXamlDiagnosticsEx": [ - { - "name": "endPointName", - "type": "LPCWSTR" - }, - { - "name": "pid", - "type": "DWORD" - }, - { - "name": "wszDllXamlDiagnostics", - "type": "LPCWSTR" - }, - { - "name": "wszTAPDllName", - "type": "LPCWSTR" - }, - { - "name": "tapClsid", - "type": "CLSID" - }, - { - "name": "wszInitializationData", - "type": "LPCWSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/xapofx.json b/qiling/extensions/windows_sdk/xapofx.json deleted file mode 100644 index 69ee3c914..000000000 --- a/qiling/extensions/windows_sdk/xapofx.json +++ /dev/null @@ -1,20 +0,0 @@ -{ - "CreateFX": [ - { - "name": "clsid", - "type": "IID" - }, - { - "name": "pEffect", - "type": "IUnknown" - }, - { - "name": "pInitDat", - "type": "void" - }, - { - "name": "InitDataByteSize", - "type": "UINT32" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/xaudio2.json b/qiling/extensions/windows_sdk/xaudio2.json deleted file mode 100644 index 61a21f969..000000000 --- a/qiling/extensions/windows_sdk/xaudio2.json +++ /dev/null @@ -1,16 +0,0 @@ -{ - "XAudio2Create": [ - { - "name": "ppXAudio2", - "type": "IXAudio2" - }, - { - "name": "Flags", - "type": "UINT32" - }, - { - "name": "XAudio2Processor", - "type": "XAUDIO2_PROCESSOR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/xaudio2fx.json b/qiling/extensions/windows_sdk/xaudio2fx.json deleted file mode 100644 index 9e4e1c559..000000000 --- a/qiling/extensions/windows_sdk/xaudio2fx.json +++ /dev/null @@ -1,12 +0,0 @@ -{ - "XAudio2CreateReverb": [ - { - "name": "ppApo", - "type": "IUnknown" - }, - { - "name": "Flags", - "type": "UINT32" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/xinput.json b/qiling/extensions/windows_sdk/xinput1_4.json similarity index 100% rename from qiling/extensions/windows_sdk/xinput.json rename to qiling/extensions/windows_sdk/xinput1_4.json From 002b4d407bd9e1d4dfba560e279f1da607b58891 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Thu, 18 Jun 2020 20:13:01 +0800 Subject: [PATCH 04/86] update windows_sdk json file --- .../API-MS-Win-Core-SysInfo-L1-2-3.json | 364 - qiling/extensions/windows_sdk/Advapi32.json | 1744 -- .../Api-ms-win-core-version-l1-2-3.json | 364 - qiling/extensions/windows_sdk/Avicap32.json | 1722 -- qiling/extensions/windows_sdk/Cabinet.json | 178 - qiling/extensions/windows_sdk/ComBase.json | 518 - qiling/extensions/windows_sdk/Comctl32.json | 400 - qiling/extensions/windows_sdk/Credui.json | 934 - qiling/extensions/windows_sdk/Cryptnet.json | 5200 ------ .../windows_sdk/D3DCompiler_47.json | 568 - qiling/extensions/windows_sdk/DfLayout.json | 518 - qiling/extensions/windows_sdk/Instrsa5.json | 5200 ------ qiling/extensions/windows_sdk/Kernel32.json | 96 - qiling/extensions/windows_sdk/KernelBase.json | 72 - .../extensions/windows_sdk/Mfsensorgroup.json | 764 - qiling/extensions/windows_sdk/Mpr.json | 16 - qiling/extensions/windows_sdk/Msimg32.json | 5434 ------ qiling/extensions/windows_sdk/Msvfw32.json | 1722 -- qiling/extensions/windows_sdk/Mydocs.json | 188 - qiling/extensions/windows_sdk/Netapi32.json | 132 - qiling/extensions/windows_sdk/Normaliz.json | 1842 -- qiling/extensions/windows_sdk/Ole32.json | 1 - qiling/extensions/windows_sdk/Query.json | 62 - qiling/extensions/windows_sdk/Rpcrt4.json | 274 - qiling/extensions/windows_sdk/Scarddlg.json | 1100 -- qiling/extensions/windows_sdk/Secur32.json | 922 - qiling/extensions/windows_sdk/Shdocvw.json | 188 - qiling/extensions/windows_sdk/Shell32.json | 4606 ----- qiling/extensions/windows_sdk/Slc.json | 956 - qiling/extensions/windows_sdk/Slcext.json | 956 - qiling/extensions/windows_sdk/WinSpool.json | 5434 ------ qiling/extensions/windows_sdk/Winmm.json | 40 - .../{aclui.json => aclui_dll.json} | 0 .../extensions/windows_sdk/advapi32_dll.json | 10562 +++++++++++ .../{advpack.json => advpack_dll.json} | 0 .../windows_sdk/{amsi.json => amsi_dll.json} | 0 .../api-ms-win-appmodel-runtime-l1-1-2.json | 538 - ...pi-ms-win-appmodel-runtime-l1-1-2_dll.json | 82 + .../api-ms-win-core-enclave-l1-1-0.json | 146 - ...> api-ms-win-core-enclave-l1-1-0_dll.json} | 44 - ...s-win-core-featurestaging-l1-1-0_dll.json} | 0 .../api-ms-win-core-heap-l1-1-0.json | 198 - .../api-ms-win-core-heap-l1-1-0_dll.json | 16 + ...ms-win-core-libraryloader-l1-1-1_dll.json} | 0 ...i-ms-win-core-localization-l1-2-1_dll.json | 30 + .../api-ms-win-core-memory-l1-1-4.json | 914 - .../api-ms-win-core-memory-l1-1-4_dll.json | 28 + .../api-ms-win-core-memory-l1-1-5.json | 914 - .../api-ms-win-core-memory-l1-1-5_dll.json | 36 + ...ms-win-core-processenvironment-l1-1-0.json | 150 - ...in-core-processenvironment-l1-1-0_dll.json | 22 + .../api-ms-win-core-slapi-l1-1-0.json | 956 - .../api-ms-win-core-slapi-l1-1-0_dll.json | 24 + .../api-ms-win-core-sysinfo-l1-2-3_dll.json | 8 + .../api-ms-win-core-version-l1-1-0.json | 330 - ...> api-ms-win-core-version-l1-1-0_dll.json} | 28 - .../api-ms-win-core-version-l1-2-3_dll.json | 26 + .../api-ms-win-core-winrt-error-l1-1-1.json | 194 - ...pi-ms-win-core-winrt-error-l1-1-1_dll.json | 8 + .../api-ms-win-shcore-thread-l1-1-0_dll.json | 14 + ...son => api-ms-win-wsl-api-l1-1-0_dll.json} | 0 .../{Apphelp.json => apphelp_dll.json} | 0 .../{atlthunk.json => atlthunk_dll.json} | 0 .../{authz.json => authz_dll.json} | 0 .../extensions/windows_sdk/avicap32_dll.json | 114 + .../{Avifil32.json => avifil32_dll.json} | 844 - .../windows_sdk/{avrt.json => avrt_dll.json} | 0 .../{bcrypt.json => bcrypt_dll.json} | 6 - qiling/extensions/windows_sdk/bcrypt_h.json | 8 + ...etoothapis.json => bluetoothapis_dll.json} | 0 .../extensions/windows_sdk/bthprops_cpl.json | 12 + .../{Bthprops.json => bthprops_dll.json} | 10 - .../{C_g18030.json => c_g18030_dll.json} | 0 .../extensions/windows_sdk/cabinet_dll.json | 406 + .../{Certadm.json => certadm_dll.json} | 0 .../{cfgmgr32.json => cfgmgr32_dll.json} | 518 +- .../extensions/windows_sdk/cfgmgr32_lib.json | 426 + .../{CldApi.json => cldapi_dll.json} | 0 .../{clfsw32.json => clfsw32_dll.json} | 36 + .../{clusapi.json => clusapi_dll.json} | 0 .../extensions/windows_sdk/combase_dll.json | 350 + .../extensions/windows_sdk/comctl32_dll.json | 1688 ++ .../{Comdlg32.json => comdlg32_dll.json} | 0 .../{comsvcs.json => comsvcs_dll.json} | 0 qiling/extensions/windows_sdk/credui_dll.json | 450 + .../{Crypt32.json => crypt32_dll.json} | 1088 +- .../{cryptdlg.json => cryptdlg_dll.json} | 0 .../extensions/windows_sdk/cryptnet_dll.json | 150 + .../{Cryptui.json => cryptui_dll.json} | 0 .../{cryptxml.json => cryptxml_dll.json} | 0 .../{cscapi.json => cscapi_dll.json} | 0 qiling/extensions/windows_sdk/d2d1.json | 78 - qiling/extensions/windows_sdk/d2d1_dll.json | 234 + qiling/extensions/windows_sdk/d3d10.json | 72 - .../{d3d10_1.json => d3d10_1_dll.json} | 0 qiling/extensions/windows_sdk/d3d10_dll.json | 290 + .../{d3d11.json => d3d11_dll.json} | 42 + ...SDKLayers.json => d3d11sdklayers_dll.json} | 0 .../{d3d12.json => d3d12_dll.json} | 0 .../windows_sdk/{d3d9.json => d3d9_dll.json} | 0 ...dcompiler.json => d3dcompiler_47_dll.json} | 46 - .../windows_sdk/d3dcompiler_dll.json | 48 + qiling/extensions/windows_sdk/davclnt.json | 132 - .../extensions/windows_sdk/davclnt_dll.json | 48 + .../{dbghelp.json => dbghelp_dll.json} | 52 + .../{Dciman32.json => dciman32_dll.json} | 0 .../{ddraw.json => ddraw_dll.json} | 0 ...eviceaccess.json => deviceaccess_dll.json} | 0 .../extensions/windows_sdk/dflayout_dll.json | 20 + .../{Dhcpcsvc6.json => dhcpcsvc6_dll.json} | 0 .../{Dhcpcsvc.json => dhcpcsvc_dll.json} | 0 .../{dhcpsapi.json => dhcpsapi_dll.json} | 0 .../{Dnsapi.json => dnsapi_dll.json} | 0 .../windows_sdk/{drt.json => drt_dll.json} | 0 .../{dssec.json => dssec_dll.json} | 0 .../{dwmapi.json => dwmapi_dll.json} | 0 qiling/extensions/windows_sdk/dxgi.json | 22 - qiling/extensions/windows_sdk/dxgi_dll.json | 50 + .../{dxgidebug.json => dxgidebug_dll.json} | 0 qiling/extensions/windows_sdk/dxva2.json | 66 - qiling/extensions/windows_sdk/dxva2_dll.json | 410 + .../{eappcfg.json => eappcfg_dll.json} | 0 .../{elscore.json => elscore_dll.json} | 0 qiling/extensions/windows_sdk/evr_dll.json | 26 + .../{Faultrep.json => faultrep_dll.json} | 0 ...{firewallapi.json => firewallapi_dll.json} | 38 + .../{FltLib.json => fltlib_dll.json} | 0 .../{fontsub.json => fontsub_dll.json} | 0 .../{Fwpuclnt.json => fwpuclnt_dll.json} | 0 .../{fxsutility.json => fxsutility_dll.json} | 0 .../{gamemode.json => gamemode_dll.json} | 0 .../{gdi32.json => gdi32_dll.json} | 430 - .../{gpedit.json => gpedit_dll.json} | 0 .../{htmlhelp.json => htmlhelp_dll.json} | 0 .../{imagehlp.json => imagehlp_dll.json} | 0 .../{Imm32.json => imm32_dll.json} | 28 + .../{Inetcfg.json => inetcfg_dll.json} | 0 .../extensions/windows_sdk/instrsa5_dll.json | 12 + .../{iphlpapi.json => iphlpapi_dll.json} | 0 .../extensions/windows_sdk/jsproxy_dll.json | 8 + qiling/extensions/windows_sdk/kernel.json | 8974 --------- .../extensions/windows_sdk/kernel32_dll.json | 15504 ++++++++++++++++ .../extensions/windows_sdk/kernel32_lib.json | 40 + qiling/extensions/windows_sdk/kernel_dll.json | 34 + .../windows_sdk/kernelbase_dll.json | 106 + .../{ktmw32.json => ktmw32_dll.json} | 0 .../{loadperf.json => loadperf_dll.json} | 0 .../windows_sdk/{Lz32.json => lz32_dll.json} | 0 ...stration.json => mdmregistration_dll.json} | 0 .../windows_sdk/{mf.json => mf_dll.json} | 374 +- qiling/extensions/windows_sdk/mfplat.json | 1702 -- .../windows_sdk/{evr.json => mfplat_dll.json} | 248 +- .../{mfplay.json => mfplay_dll.json} | 0 .../windows_sdk/mfsensorgroup_dll.json | 26 + .../windows_sdk/mfsensorgroup_lib.json | 12 + .../{mgmtapi.json => mgmtapi_dll.json} | 0 .../windows_sdk/{mi.json => mi_dll.json} | 0 .../{Mmdevapi.json => mmdevapi_dll.json} | 0 .../extensions/windows_sdk/mmtasksignal.json | 40 - .../windows_sdk/mmtasksignal_dll.json | 8 + .../{MpClient.json => mpclient_dll.json} | 0 qiling/extensions/windows_sdk/mpr_dll.json | 638 + .../{mprapi.json => mprapi_dll.json} | 0 .../{mrmsupport.json => mrmsupport_dll.json} | 0 .../{MSAJApi.json => msajapi_dll.json} | 0 .../{msctf.json => msctf_dll.json} | 42 + .../{Msdmo.json => msdmo_dll.json} | 0 .../{msdrm.json => msdrm_dll.json} | 0 .../{msgina.json => msgina_dll.json} | 0 qiling/extensions/windows_sdk/msi.json | 1432 -- qiling/extensions/windows_sdk/msi_dll.json | 4590 +++++ .../extensions/windows_sdk/msimg32_dll.json | 120 + .../{msports.json => msports_dll.json} | 0 .../{Mstask.json => mstask_dll.json} | 0 .../extensions/windows_sdk/msvfw32_dll.json | 734 + .../{Mswsock.json => mswsock_dll.json} | 124 + .../{mtxdm.json => mtxdm_dll.json} | 0 qiling/extensions/windows_sdk/mydocs_dll.json | 8 + qiling/extensions/windows_sdk/ncrypt.json | 222 - qiling/extensions/windows_sdk/ncrypt_dll.json | 824 + .../extensions/windows_sdk/netapi32_dll.json | 2012 ++ .../{netsh.json => netsh_exe.json} | 0 .../{Netshell.json => netshell_dll.json} | 0 .../{newdev.json => newdev_dll.json} | 0 .../{ninput.json => ninput_dll.json} | 0 .../extensions/windows_sdk/normaliz_dll.json | 104 + .../{Ntdll.json => ntdll_dll.json} | 286 + qiling/extensions/windows_sdk/ntdsapi.json | 312 - .../extensions/windows_sdk/ntdsapi_dll.json | 1830 ++ .../{NTLanMan.json => ntlanman_dll.json} | 0 .../{ntmsapi.json => ntmsapi_dll.json} | 0 .../{ntquery.json => ntquery_dll.json} | 14 - qiling/extensions/windows_sdk/ole32_dll.json | 3020 +++ .../{oleacc.json => oleacc_dll.json} | 0 .../{OleAut32.json => oleaut32_dll.json} | 376 + .../{oledlg.json => oledlg_dll.json} | 0 ....json => ondemandconnroutehelper_dll.json} | 0 qiling/extensions/windows_sdk/opengl32.json | 5434 ------ .../extensions/windows_sdk/opengl32_dll.json | 270 + qiling/extensions/windows_sdk/p2p.json | 1638 -- .../{P2PGraph.json => p2p_dll.json} | 476 - .../extensions/windows_sdk/p2pgraph_dll.json | 478 + .../{pathcch.json => pathcch_lib.json} | 0 .../windows_sdk/{pdh.json => pdh_dll.json} | 0 .../{peerdist.json => peerdist_dll.json} | 0 qiling/extensions/windows_sdk/powrprof.json | 174 - .../extensions/windows_sdk/powrprof_dll.json | 1238 ++ .../{prntvpt.json => prntvpt_dll.json} | 0 .../{propsys.json => propsys_dll.json} | 970 + qiling/extensions/windows_sdk/query_dll.json | 16 + .../{Rasapi32.json => rasapi32_dll.json} | 0 .../{rasdlg.json => rasdlg_dll.json} | 0 .../{Rasman.json => rasman_dll.json} | 0 qiling/extensions/windows_sdk/roerrorapi.json | 194 - .../extensions/windows_sdk/roerrorapi_h.json | 46 + .../{rometadata.json => rometadata_dll.json} | 0 .../{Rpcns4.json => rpcns4_dll.json} | 0 qiling/extensions/windows_sdk/rpcrt4_dll.json | 3162 ++++ .../{Rstrtmgr.json => rstrtmgr_dll.json} | 0 .../windows_sdk/{Rtm.json => rtm_dll.json} | 0 .../extensions/windows_sdk/runtimeobject.json | 194 - .../windows_sdk/runtimeobject_lib.json | 76 + .../windows_sdk/{sas.json => sas_dll.json} | 0 .../extensions/windows_sdk/scarddlg_dll.json | 26 + .../{schannel.json => schannel_dll.json} | 0 .../extensions/windows_sdk/secforwarder.json | 5200 ------ .../windows_sdk/secforwarder_dll.json | 36 + qiling/extensions/windows_sdk/sechost.json | 44 - .../extensions/windows_sdk/sechost_dll.json | 384 + .../extensions/windows_sdk/secur32_dll.json | 176 + .../{sensapi.json => sensapi_dll.json} | 0 .../{setupapi.json => setupapi_dll.json} | 24 - .../extensions/windows_sdk/setupapi_lib.json | 26 + .../windows_sdk/{sfc.json => sfc_dll.json} | 0 .../{shcore.json => shcore_dll.json} | 50 + .../extensions/windows_sdk/shdocvw_dll.json | 20 + .../{shlobj_core.json => shell32_dll.json} | 3576 ++-- .../extensions/windows_sdk/shlobj_core_h.json | 12 + qiling/extensions/windows_sdk/shlwapi.json | 4606 ----- ...re-thread-L1-1-0.json => shlwapi_dll.json} | 98 +- .../windows_sdk/{Slwga.json => slc_dll.json} | 72 - qiling/extensions/windows_sdk/slcext_dll.json | 24 + qiling/extensions/windows_sdk/slwga_dll.json | 30 + .../{Snmpapi.json => snmpapi_dll.json} | 0 .../{Spoolss.json => spoolss_dll.json} | 0 .../{SrClient.json => srclient_dll.json} | 0 .../{srpapi.json => srpapi_dll.json} | 0 .../{storprop.json => storprop_dll.json} | 0 .../windows_sdk/{sxs.json => sxs_dll.json} | 0 .../{T2embed.json => t2embed_dll.json} | 0 .../windows_sdk/{tbs.json => tbs_dll.json} | 0 .../windows_sdk/{tdh.json => tdh_dll.json} | 0 ...okenbinding.json => tokenbinding_dll.json} | 0 .../{twinapi.json => twinapi_core_dll.json} | 0 .../{txfw32.json => txfw32_dll.json} | 0 .../{Ualapi.json => ualapi_dll.json} | 0 .../windows_sdk/{Url.json => url_dll.json} | 0 .../{urlmon.json => urlmon_dll.json} | 0 .../{User32.json => user32_dll.json} | 598 +- .../{userenv.json => userenv_dll.json} | 0 .../{usp10.json => usp10_dll.json} | 0 .../{uxtheme.json => uxtheme_dll.json} | 14 - .../{vdmdbg.json => vdmdbg_dll.json} | 0 .../{Verifier.json => verifier_dll.json} | 0 .../extensions/windows_sdk/vertdll_dll.json | 20 + .../{virtdisk.json => virtdisk_dll.json} | 0 .../{wcmapi.json => wcmapi_dll.json} | 0 .../{wdsbp.json => wdsbp_dll.json} | 0 ...dsclientapi.json => wdsclientapi_dll.json} | 0 .../{Wdsmc.json => wdsmc_dll.json} | 0 .../{wdspxe.json => wdspxe_dll.json} | 0 .../{Wdstptc.json => wdstptc_dll.json} | 0 .../{websocket.json => websocket_dll.json} | 0 .../{Wecapi.json => wecapi_dll.json} | 0 .../windows_sdk/{Wer.json => wer_dll.json} | 120 - .../{Wevtapi.json => wevtapi_dll.json} | 0 .../{winbio.json => winbio_dll.json} | 0 .../windows_sdk/windows_media_audio_dll.json | 44 + .../windows_sdk/windows_networking_dll.json | 8 + ...{windows.json => windows_ui_xaml_dll.json} | 0 .../{winhttp.json => winhttp_dll.json} | 0 qiling/extensions/windows_sdk/wininet.json | 3146 ---- .../{JSProxy.json => wininet_dll.json} | 6 - qiling/extensions/windows_sdk/winmm_dll.json | 1710 ++ qiling/extensions/windows_sdk/winmmbse.json | 428 - .../extensions/windows_sdk/winmmbse_dll.json | 20 + .../extensions/windows_sdk/winrttype_lib.json | 16 + .../{winscard.json => winscard_dll.json} | 24 - .../extensions/windows_sdk/winspool_drv.json | 46 + qiling/extensions/windows_sdk/winstring.json | 294 - .../{WinRTType.json => winstring_h.json} | 120 - .../{wintrust.json => wintrust_dll.json} | 136 + .../{wintypes.json => wintypes_dll.json} | 0 .../{winusb.json => winusb_dll.json} | 0 .../{wlanapi.json => wlanapi_dll.json} | 30 - qiling/extensions/windows_sdk/wlanui.json | 1184 -- qiling/extensions/windows_sdk/wlanui_dll.json | 32 + .../{Wmvcore.json => wmvcore_dll.json} | 36 + .../{wofutil.json => wofutil_dll.json} | 0 .../{Ws2_32.json => ws2_32_dll.json} | 1376 +- .../{wsbonline.json => wsbonline_dll.json} | 0 .../{wscapi.json => wscapi_dll.json} | 0 .../{WSClient.json => wsclient_dll.json} | 0 .../{Wsdapi.json => wsdapi_dll.json} | 6 + .../{Wsnmp32.json => wsnmp32_dll.json} | 0 .../{wtsapi32.json => wtsapi32_dll.json} | 22 + .../{xinput1_4.json => xinput1_4_dll.json} | 0 .../{xpsprint.json => xpsprint_dll.json} | 0 308 files changed, 60412 insertions(+), 87591 deletions(-) delete mode 100644 qiling/extensions/windows_sdk/API-MS-Win-Core-SysInfo-L1-2-3.json delete mode 100644 qiling/extensions/windows_sdk/Advapi32.json delete mode 100644 qiling/extensions/windows_sdk/Api-ms-win-core-version-l1-2-3.json delete mode 100644 qiling/extensions/windows_sdk/Avicap32.json delete mode 100644 qiling/extensions/windows_sdk/Cabinet.json delete mode 100644 qiling/extensions/windows_sdk/ComBase.json delete mode 100644 qiling/extensions/windows_sdk/Comctl32.json delete mode 100644 qiling/extensions/windows_sdk/Credui.json delete mode 100644 qiling/extensions/windows_sdk/Cryptnet.json delete mode 100644 qiling/extensions/windows_sdk/D3DCompiler_47.json delete mode 100644 qiling/extensions/windows_sdk/DfLayout.json delete mode 100644 qiling/extensions/windows_sdk/Instrsa5.json delete mode 100644 qiling/extensions/windows_sdk/Kernel32.json delete mode 100644 qiling/extensions/windows_sdk/KernelBase.json delete mode 100644 qiling/extensions/windows_sdk/Mfsensorgroup.json delete mode 100644 qiling/extensions/windows_sdk/Mpr.json delete mode 100644 qiling/extensions/windows_sdk/Msimg32.json delete mode 100644 qiling/extensions/windows_sdk/Msvfw32.json delete mode 100644 qiling/extensions/windows_sdk/Mydocs.json delete mode 100644 qiling/extensions/windows_sdk/Netapi32.json delete mode 100644 qiling/extensions/windows_sdk/Normaliz.json delete mode 100644 qiling/extensions/windows_sdk/Ole32.json delete mode 100644 qiling/extensions/windows_sdk/Query.json delete mode 100644 qiling/extensions/windows_sdk/Rpcrt4.json delete mode 100644 qiling/extensions/windows_sdk/Scarddlg.json delete mode 100644 qiling/extensions/windows_sdk/Secur32.json delete mode 100644 qiling/extensions/windows_sdk/Shdocvw.json delete mode 100644 qiling/extensions/windows_sdk/Shell32.json delete mode 100644 qiling/extensions/windows_sdk/Slc.json delete mode 100644 qiling/extensions/windows_sdk/Slcext.json delete mode 100644 qiling/extensions/windows_sdk/WinSpool.json delete mode 100644 qiling/extensions/windows_sdk/Winmm.json rename qiling/extensions/windows_sdk/{aclui.json => aclui_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/advapi32_dll.json rename qiling/extensions/windows_sdk/{advpack.json => advpack_dll.json} (100%) rename qiling/extensions/windows_sdk/{amsi.json => amsi_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/api-ms-win-appmodel-runtime-l1-1-2.json create mode 100644 qiling/extensions/windows_sdk/api-ms-win-appmodel-runtime-l1-1-2_dll.json delete mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0.json rename qiling/extensions/windows_sdk/{Vertdll.json => api-ms-win-core-enclave-l1-1-0_dll.json} (70%) rename qiling/extensions/windows_sdk/{api-ms-win-core-featurestaging-l1-1-0.json => api-ms-win-core-featurestaging-l1-1-0_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-heap-l1-1-0.json create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-heap-l1-1-0_dll.json rename qiling/extensions/windows_sdk/{api-ms-win-core-libraryloader-l1-1-1.json => api-ms-win-core-libraryloader-l1-1-1_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-localization-l1-2-1_dll.json delete mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-4.json create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-4_dll.json delete mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5.json create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5_dll.json delete mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-processenvironment-l1-1-0.json create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-processenvironment-l1-1-0_dll.json delete mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0.json create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0_dll.json create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-sysinfo-l1-2-3_dll.json delete mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0.json rename qiling/extensions/windows_sdk/{api-ms-win-core-localization-l1-2-1.json => api-ms-win-core-version-l1-1-0_dll.json} (91%) create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-version-l1-2-3_dll.json delete mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1.json create mode 100644 qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1_dll.json create mode 100644 qiling/extensions/windows_sdk/api-ms-win-shcore-thread-l1-1-0_dll.json rename qiling/extensions/windows_sdk/{api-ms-win-wsl-api-l1-1-0.json => api-ms-win-wsl-api-l1-1-0_dll.json} (100%) rename qiling/extensions/windows_sdk/{Apphelp.json => apphelp_dll.json} (100%) rename qiling/extensions/windows_sdk/{atlthunk.json => atlthunk_dll.json} (100%) rename qiling/extensions/windows_sdk/{authz.json => authz_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/avicap32_dll.json rename qiling/extensions/windows_sdk/{Avifil32.json => avifil32_dll.json} (51%) rename qiling/extensions/windows_sdk/{avrt.json => avrt_dll.json} (100%) rename qiling/extensions/windows_sdk/{bcrypt.json => bcrypt_dll.json} (99%) create mode 100644 qiling/extensions/windows_sdk/bcrypt_h.json rename qiling/extensions/windows_sdk/{bluetoothapis.json => bluetoothapis_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/bthprops_cpl.json rename qiling/extensions/windows_sdk/{Bthprops.json => bthprops_dll.json} (97%) rename qiling/extensions/windows_sdk/{C_g18030.json => c_g18030_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/cabinet_dll.json rename qiling/extensions/windows_sdk/{Certadm.json => certadm_dll.json} (100%) rename qiling/extensions/windows_sdk/{cfgmgr32.json => cfgmgr32_dll.json} (76%) create mode 100644 qiling/extensions/windows_sdk/cfgmgr32_lib.json rename qiling/extensions/windows_sdk/{CldApi.json => cldapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{clfsw32.json => clfsw32_dll.json} (96%) rename qiling/extensions/windows_sdk/{clusapi.json => clusapi_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/combase_dll.json create mode 100644 qiling/extensions/windows_sdk/comctl32_dll.json rename qiling/extensions/windows_sdk/{Comdlg32.json => comdlg32_dll.json} (100%) rename qiling/extensions/windows_sdk/{comsvcs.json => comsvcs_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/credui_dll.json rename qiling/extensions/windows_sdk/{Crypt32.json => crypt32_dll.json} (84%) rename qiling/extensions/windows_sdk/{cryptdlg.json => cryptdlg_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/cryptnet_dll.json rename qiling/extensions/windows_sdk/{Cryptui.json => cryptui_dll.json} (100%) rename qiling/extensions/windows_sdk/{cryptxml.json => cryptxml_dll.json} (100%) rename qiling/extensions/windows_sdk/{cscapi.json => cscapi_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/d2d1.json create mode 100644 qiling/extensions/windows_sdk/d2d1_dll.json delete mode 100644 qiling/extensions/windows_sdk/d3d10.json rename qiling/extensions/windows_sdk/{d3d10_1.json => d3d10_1_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/d3d10_dll.json rename qiling/extensions/windows_sdk/{d3d11.json => d3d11_dll.json} (69%) rename qiling/extensions/windows_sdk/{D3D11SDKLayers.json => d3d11sdklayers_dll.json} (100%) rename qiling/extensions/windows_sdk/{d3d12.json => d3d12_dll.json} (100%) rename qiling/extensions/windows_sdk/{d3d9.json => d3d9_dll.json} (100%) rename qiling/extensions/windows_sdk/{d3dcompiler.json => d3dcompiler_47_dll.json} (91%) create mode 100644 qiling/extensions/windows_sdk/d3dcompiler_dll.json delete mode 100644 qiling/extensions/windows_sdk/davclnt.json create mode 100644 qiling/extensions/windows_sdk/davclnt_dll.json rename qiling/extensions/windows_sdk/{dbghelp.json => dbghelp_dll.json} (98%) rename qiling/extensions/windows_sdk/{Dciman32.json => dciman32_dll.json} (100%) rename qiling/extensions/windows_sdk/{ddraw.json => ddraw_dll.json} (100%) rename qiling/extensions/windows_sdk/{deviceaccess.json => deviceaccess_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/dflayout_dll.json rename qiling/extensions/windows_sdk/{Dhcpcsvc6.json => dhcpcsvc6_dll.json} (100%) rename qiling/extensions/windows_sdk/{Dhcpcsvc.json => dhcpcsvc_dll.json} (100%) rename qiling/extensions/windows_sdk/{dhcpsapi.json => dhcpsapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{Dnsapi.json => dnsapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{drt.json => drt_dll.json} (100%) rename qiling/extensions/windows_sdk/{dssec.json => dssec_dll.json} (100%) rename qiling/extensions/windows_sdk/{dwmapi.json => dwmapi_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/dxgi.json create mode 100644 qiling/extensions/windows_sdk/dxgi_dll.json rename qiling/extensions/windows_sdk/{dxgidebug.json => dxgidebug_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/dxva2.json create mode 100644 qiling/extensions/windows_sdk/dxva2_dll.json rename qiling/extensions/windows_sdk/{eappcfg.json => eappcfg_dll.json} (100%) rename qiling/extensions/windows_sdk/{elscore.json => elscore_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/evr_dll.json rename qiling/extensions/windows_sdk/{Faultrep.json => faultrep_dll.json} (100%) rename qiling/extensions/windows_sdk/{firewallapi.json => firewallapi_dll.json} (74%) rename qiling/extensions/windows_sdk/{FltLib.json => fltlib_dll.json} (100%) rename qiling/extensions/windows_sdk/{fontsub.json => fontsub_dll.json} (100%) rename qiling/extensions/windows_sdk/{Fwpuclnt.json => fwpuclnt_dll.json} (100%) rename qiling/extensions/windows_sdk/{fxsutility.json => fxsutility_dll.json} (100%) rename qiling/extensions/windows_sdk/{gamemode.json => gamemode_dll.json} (100%) rename qiling/extensions/windows_sdk/{gdi32.json => gdi32_dll.json} (91%) rename qiling/extensions/windows_sdk/{gpedit.json => gpedit_dll.json} (100%) rename qiling/extensions/windows_sdk/{htmlhelp.json => htmlhelp_dll.json} (100%) rename qiling/extensions/windows_sdk/{imagehlp.json => imagehlp_dll.json} (100%) rename qiling/extensions/windows_sdk/{Imm32.json => imm32_dll.json} (97%) rename qiling/extensions/windows_sdk/{Inetcfg.json => inetcfg_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/instrsa5_dll.json rename qiling/extensions/windows_sdk/{iphlpapi.json => iphlpapi_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/jsproxy_dll.json delete mode 100644 qiling/extensions/windows_sdk/kernel.json create mode 100644 qiling/extensions/windows_sdk/kernel32_dll.json create mode 100644 qiling/extensions/windows_sdk/kernel32_lib.json create mode 100644 qiling/extensions/windows_sdk/kernel_dll.json create mode 100644 qiling/extensions/windows_sdk/kernelbase_dll.json rename qiling/extensions/windows_sdk/{ktmw32.json => ktmw32_dll.json} (100%) rename qiling/extensions/windows_sdk/{loadperf.json => loadperf_dll.json} (100%) rename qiling/extensions/windows_sdk/{Lz32.json => lz32_dll.json} (100%) rename qiling/extensions/windows_sdk/{mdmregistration.json => mdmregistration_dll.json} (100%) rename qiling/extensions/windows_sdk/{mf.json => mf_dll.json} (76%) delete mode 100644 qiling/extensions/windows_sdk/mfplat.json rename qiling/extensions/windows_sdk/{evr.json => mfplat_dll.json} (88%) rename qiling/extensions/windows_sdk/{mfplay.json => mfplay_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/mfsensorgroup_dll.json create mode 100644 qiling/extensions/windows_sdk/mfsensorgroup_lib.json rename qiling/extensions/windows_sdk/{mgmtapi.json => mgmtapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{mi.json => mi_dll.json} (100%) rename qiling/extensions/windows_sdk/{Mmdevapi.json => mmdevapi_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/mmtasksignal.json create mode 100644 qiling/extensions/windows_sdk/mmtasksignal_dll.json rename qiling/extensions/windows_sdk/{MpClient.json => mpclient_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/mpr_dll.json rename qiling/extensions/windows_sdk/{mprapi.json => mprapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{mrmsupport.json => mrmsupport_dll.json} (100%) rename qiling/extensions/windows_sdk/{MSAJApi.json => msajapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{msctf.json => msctf_dll.json} (63%) rename qiling/extensions/windows_sdk/{Msdmo.json => msdmo_dll.json} (100%) rename qiling/extensions/windows_sdk/{msdrm.json => msdrm_dll.json} (100%) rename qiling/extensions/windows_sdk/{msgina.json => msgina_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/msi.json create mode 100644 qiling/extensions/windows_sdk/msi_dll.json create mode 100644 qiling/extensions/windows_sdk/msimg32_dll.json rename qiling/extensions/windows_sdk/{msports.json => msports_dll.json} (100%) rename qiling/extensions/windows_sdk/{Mstask.json => mstask_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/msvfw32_dll.json rename qiling/extensions/windows_sdk/{Mswsock.json => mswsock_dll.json} (68%) rename qiling/extensions/windows_sdk/{mtxdm.json => mtxdm_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/mydocs_dll.json delete mode 100644 qiling/extensions/windows_sdk/ncrypt.json create mode 100644 qiling/extensions/windows_sdk/ncrypt_dll.json create mode 100644 qiling/extensions/windows_sdk/netapi32_dll.json rename qiling/extensions/windows_sdk/{netsh.json => netsh_exe.json} (100%) rename qiling/extensions/windows_sdk/{Netshell.json => netshell_dll.json} (100%) rename qiling/extensions/windows_sdk/{newdev.json => newdev_dll.json} (100%) rename qiling/extensions/windows_sdk/{ninput.json => ninput_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/normaliz_dll.json rename qiling/extensions/windows_sdk/{Ntdll.json => ntdll_dll.json} (63%) delete mode 100644 qiling/extensions/windows_sdk/ntdsapi.json create mode 100644 qiling/extensions/windows_sdk/ntdsapi_dll.json rename qiling/extensions/windows_sdk/{NTLanMan.json => ntlanman_dll.json} (100%) rename qiling/extensions/windows_sdk/{ntmsapi.json => ntmsapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{ntquery.json => ntquery_dll.json} (77%) create mode 100644 qiling/extensions/windows_sdk/ole32_dll.json rename qiling/extensions/windows_sdk/{oleacc.json => oleacc_dll.json} (100%) rename qiling/extensions/windows_sdk/{OleAut32.json => oleaut32_dll.json} (91%) rename qiling/extensions/windows_sdk/{oledlg.json => oledlg_dll.json} (100%) rename qiling/extensions/windows_sdk/{ondemandconnroutehelper.json => ondemandconnroutehelper_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/opengl32.json create mode 100644 qiling/extensions/windows_sdk/opengl32_dll.json delete mode 100644 qiling/extensions/windows_sdk/p2p.json rename qiling/extensions/windows_sdk/{P2PGraph.json => p2p_dll.json} (71%) create mode 100644 qiling/extensions/windows_sdk/p2pgraph_dll.json rename qiling/extensions/windows_sdk/{pathcch.json => pathcch_lib.json} (100%) rename qiling/extensions/windows_sdk/{pdh.json => pdh_dll.json} (100%) rename qiling/extensions/windows_sdk/{peerdist.json => peerdist_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/powrprof.json create mode 100644 qiling/extensions/windows_sdk/powrprof_dll.json rename qiling/extensions/windows_sdk/{prntvpt.json => prntvpt_dll.json} (100%) rename qiling/extensions/windows_sdk/{propsys.json => propsys_dll.json} (66%) create mode 100644 qiling/extensions/windows_sdk/query_dll.json rename qiling/extensions/windows_sdk/{Rasapi32.json => rasapi32_dll.json} (100%) rename qiling/extensions/windows_sdk/{rasdlg.json => rasdlg_dll.json} (100%) rename qiling/extensions/windows_sdk/{Rasman.json => rasman_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/roerrorapi.json create mode 100644 qiling/extensions/windows_sdk/roerrorapi_h.json rename qiling/extensions/windows_sdk/{rometadata.json => rometadata_dll.json} (100%) rename qiling/extensions/windows_sdk/{Rpcns4.json => rpcns4_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/rpcrt4_dll.json rename qiling/extensions/windows_sdk/{Rstrtmgr.json => rstrtmgr_dll.json} (100%) rename qiling/extensions/windows_sdk/{Rtm.json => rtm_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/runtimeobject.json create mode 100644 qiling/extensions/windows_sdk/runtimeobject_lib.json rename qiling/extensions/windows_sdk/{sas.json => sas_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/scarddlg_dll.json rename qiling/extensions/windows_sdk/{schannel.json => schannel_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/secforwarder.json create mode 100644 qiling/extensions/windows_sdk/secforwarder_dll.json delete mode 100644 qiling/extensions/windows_sdk/sechost.json create mode 100644 qiling/extensions/windows_sdk/sechost_dll.json create mode 100644 qiling/extensions/windows_sdk/secur32_dll.json rename qiling/extensions/windows_sdk/{sensapi.json => sensapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{setupapi.json => setupapi_dll.json} (99%) create mode 100644 qiling/extensions/windows_sdk/setupapi_lib.json rename qiling/extensions/windows_sdk/{sfc.json => sfc_dll.json} (100%) rename qiling/extensions/windows_sdk/{shcore.json => shcore_dll.json} (66%) create mode 100644 qiling/extensions/windows_sdk/shdocvw_dll.json rename qiling/extensions/windows_sdk/{shlobj_core.json => shell32_dll.json} (57%) create mode 100644 qiling/extensions/windows_sdk/shlobj_core_h.json delete mode 100644 qiling/extensions/windows_sdk/shlwapi.json rename qiling/extensions/windows_sdk/{api-ms-win-shcore-thread-L1-1-0.json => shlwapi_dll.json} (99%) rename qiling/extensions/windows_sdk/{Slwga.json => slc_dll.json} (92%) create mode 100644 qiling/extensions/windows_sdk/slcext_dll.json create mode 100644 qiling/extensions/windows_sdk/slwga_dll.json rename qiling/extensions/windows_sdk/{Snmpapi.json => snmpapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{Spoolss.json => spoolss_dll.json} (100%) rename qiling/extensions/windows_sdk/{SrClient.json => srclient_dll.json} (100%) rename qiling/extensions/windows_sdk/{srpapi.json => srpapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{storprop.json => storprop_dll.json} (100%) rename qiling/extensions/windows_sdk/{sxs.json => sxs_dll.json} (100%) rename qiling/extensions/windows_sdk/{T2embed.json => t2embed_dll.json} (100%) rename qiling/extensions/windows_sdk/{tbs.json => tbs_dll.json} (100%) rename qiling/extensions/windows_sdk/{tdh.json => tdh_dll.json} (100%) rename qiling/extensions/windows_sdk/{tokenbinding.json => tokenbinding_dll.json} (100%) rename qiling/extensions/windows_sdk/{twinapi.json => twinapi_core_dll.json} (100%) rename qiling/extensions/windows_sdk/{txfw32.json => txfw32_dll.json} (100%) rename qiling/extensions/windows_sdk/{Ualapi.json => ualapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{Url.json => url_dll.json} (100%) rename qiling/extensions/windows_sdk/{urlmon.json => urlmon_dll.json} (100%) rename qiling/extensions/windows_sdk/{User32.json => user32_dll.json} (94%) rename qiling/extensions/windows_sdk/{userenv.json => userenv_dll.json} (100%) rename qiling/extensions/windows_sdk/{usp10.json => usp10_dll.json} (100%) rename qiling/extensions/windows_sdk/{uxtheme.json => uxtheme_dll.json} (99%) rename qiling/extensions/windows_sdk/{vdmdbg.json => vdmdbg_dll.json} (100%) rename qiling/extensions/windows_sdk/{Verifier.json => verifier_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/vertdll_dll.json rename qiling/extensions/windows_sdk/{virtdisk.json => virtdisk_dll.json} (100%) rename qiling/extensions/windows_sdk/{wcmapi.json => wcmapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{wdsbp.json => wdsbp_dll.json} (100%) rename qiling/extensions/windows_sdk/{wdsclientapi.json => wdsclientapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{Wdsmc.json => wdsmc_dll.json} (100%) rename qiling/extensions/windows_sdk/{wdspxe.json => wdspxe_dll.json} (100%) rename qiling/extensions/windows_sdk/{Wdstptc.json => wdstptc_dll.json} (100%) rename qiling/extensions/windows_sdk/{websocket.json => websocket_dll.json} (100%) rename qiling/extensions/windows_sdk/{Wecapi.json => wecapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{Wer.json => wer_dll.json} (62%) rename qiling/extensions/windows_sdk/{Wevtapi.json => wevtapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{winbio.json => winbio_dll.json} (100%) create mode 100644 qiling/extensions/windows_sdk/windows_media_audio_dll.json create mode 100644 qiling/extensions/windows_sdk/windows_networking_dll.json rename qiling/extensions/windows_sdk/{windows.json => windows_ui_xaml_dll.json} (100%) rename qiling/extensions/windows_sdk/{winhttp.json => winhttp_dll.json} (100%) delete mode 100644 qiling/extensions/windows_sdk/wininet.json rename qiling/extensions/windows_sdk/{JSProxy.json => wininet_dll.json} (99%) create mode 100644 qiling/extensions/windows_sdk/winmm_dll.json delete mode 100644 qiling/extensions/windows_sdk/winmmbse.json create mode 100644 qiling/extensions/windows_sdk/winmmbse_dll.json create mode 100644 qiling/extensions/windows_sdk/winrttype_lib.json rename qiling/extensions/windows_sdk/{winscard.json => winscard_dll.json} (97%) create mode 100644 qiling/extensions/windows_sdk/winspool_drv.json delete mode 100644 qiling/extensions/windows_sdk/winstring.json rename qiling/extensions/windows_sdk/{WinRTType.json => winstring_h.json} (58%) rename qiling/extensions/windows_sdk/{wintrust.json => wintrust_dll.json} (63%) rename qiling/extensions/windows_sdk/{wintypes.json => wintypes_dll.json} (100%) rename qiling/extensions/windows_sdk/{winusb.json => winusb_dll.json} (100%) rename qiling/extensions/windows_sdk/{wlanapi.json => wlanapi_dll.json} (97%) delete mode 100644 qiling/extensions/windows_sdk/wlanui.json create mode 100644 qiling/extensions/windows_sdk/wlanui_dll.json rename qiling/extensions/windows_sdk/{Wmvcore.json => wmvcore_dll.json} (77%) rename qiling/extensions/windows_sdk/{wofutil.json => wofutil_dll.json} (100%) rename qiling/extensions/windows_sdk/{Ws2_32.json => ws2_32_dll.json} (59%) rename qiling/extensions/windows_sdk/{wsbonline.json => wsbonline_dll.json} (100%) rename qiling/extensions/windows_sdk/{wscapi.json => wscapi_dll.json} (100%) rename qiling/extensions/windows_sdk/{WSClient.json => wsclient_dll.json} (100%) rename qiling/extensions/windows_sdk/{Wsdapi.json => wsdapi_dll.json} (74%) rename qiling/extensions/windows_sdk/{Wsnmp32.json => wsnmp32_dll.json} (100%) rename qiling/extensions/windows_sdk/{wtsapi32.json => wtsapi32_dll.json} (97%) rename qiling/extensions/windows_sdk/{xinput1_4.json => xinput1_4_dll.json} (100%) rename qiling/extensions/windows_sdk/{xpsprint.json => xpsprint_dll.json} (100%) diff --git a/qiling/extensions/windows_sdk/API-MS-Win-Core-SysInfo-L1-2-3.json b/qiling/extensions/windows_sdk/API-MS-Win-Core-SysInfo-L1-2-3.json deleted file mode 100644 index e9887ce36..000000000 --- a/qiling/extensions/windows_sdk/API-MS-Win-Core-SysInfo-L1-2-3.json +++ /dev/null @@ -1,364 +0,0 @@ -{ - "GlobalMemoryStatusEx": [ - { - "name": "lpBuffer", - "type": "LPMEMORYSTATUSEX" - } - ], - "GetSystemInfo": [ - { - "name": "lpSystemInfo", - "type": "LPSYSTEM_INFO" - } - ], - "GetSystemTime": [ - { - "name": "lpSystemTime", - "type": "LPSYSTEMTIME" - } - ], - "GetSystemTimeAsFileTime": [ - { - "name": "lpSystemTimeAsFileTime", - "type": "LPFILETIME" - } - ], - "GetLocalTime": [ - { - "name": "lpSystemTime", - "type": "LPSYSTEMTIME" - } - ], - "GetVersion": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetLocalTime": [ - { - "name": "lpSystemTime", - "type": "SYSTEMTIME" - } - ], - "GetTickCount": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetTickCount64": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetSystemTimeAdjustment": [ - { - "name": "lpTimeAdjustment", - "type": "PDWORD" - }, - { - "name": "lpTimeIncrement", - "type": "PDWORD" - }, - { - "name": "lpTimeAdjustmentDisabled", - "type": "PBOOL" - } - ], - "GetSystemTimeAdjustmentPrecise": [ - { - "name": "lpTimeAdjustment", - "type": "PDWORD64" - }, - { - "name": "lpTimeIncrement", - "type": "PDWORD64" - }, - { - "name": "lpTimeAdjustmentDisabled", - "type": "PBOOL" - } - ], - "GetSystemDirectoryA": [ - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetSystemDirectoryW": [ - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetWindowsDirectoryA": [ - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetWindowsDirectoryW": [ - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetSystemWindowsDirectoryA": [ - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetSystemWindowsDirectoryW": [ - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetComputerNameExA": [ - { - "name": "NameType", - "type": "COMPUTER_NAME_FORMAT" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "LPDWORD" - } - ], - "GetComputerNameExW": [ - { - "name": "NameType", - "type": "COMPUTER_NAME_FORMAT" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "LPDWORD" - } - ], - "SetComputerNameExW": [ - { - "name": "NameType", - "type": "COMPUTER_NAME_FORMAT" - }, - { - "name": "lpBuffer", - "type": "LPCWSTR" - } - ], - "SetSystemTime": [ - { - "name": "lpSystemTime", - "type": "SYSTEMTIME" - } - ], - "GetVersionExA": [ - { - "name": "lpVersionInformation", - "type": "LPOSVERSIONINFOA" - } - ], - "GetVersionExW": [ - { - "name": "lpVersionInformation", - "type": "LPOSVERSIONINFOW" - } - ], - "GetLogicalProcessorInformation": [ - { - "name": "Buffer", - "type": "PSYSTEM_LOGICAL_PROCESSOR_INFORMATION" - }, - { - "name": "ReturnedLength", - "type": "PDWORD" - } - ], - "GetLogicalProcessorInformationEx": [ - { - "name": "RelationshipType", - "type": "LOGICAL_PROCESSOR_RELATIONSHIP" - }, - { - "name": "Buffer", - "type": "PSYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX" - }, - { - "name": "ReturnedLength", - "type": "PDWORD" - } - ], - "GetNativeSystemInfo": [ - { - "name": "lpSystemInfo", - "type": "LPSYSTEM_INFO" - } - ], - "GetSystemTimePreciseAsFileTime": [ - { - "name": "lpSystemTimeAsFileTime", - "type": "LPFILETIME" - } - ], - "GetProductInfo": [ - { - "name": "dwOSMajorVersion", - "type": "DWORD" - }, - { - "name": "dwOSMinorVersion", - "type": "DWORD" - }, - { - "name": "dwSpMajorVersion", - "type": "DWORD" - }, - { - "name": "dwSpMinorVersion", - "type": "DWORD" - }, - { - "name": "pdwReturnedProductType", - "type": "PDWORD" - } - ], - "EnumSystemFirmwareTables": [ - { - "name": "FirmwareTableProviderSignature", - "type": "DWORD" - }, - { - "name": "pFirmwareTableEnumBuffer", - "type": "PVOID" - }, - { - "name": "BufferSize", - "type": "DWORD" - } - ], - "GetSystemFirmwareTable": [ - { - "name": "FirmwareTableProviderSignature", - "type": "DWORD" - }, - { - "name": "FirmwareTableID", - "type": "DWORD" - }, - { - "name": "pFirmwareTableBuffer", - "type": "PVOID" - }, - { - "name": "BufferSize", - "type": "DWORD" - } - ], - "GetPhysicallyInstalledSystemMemory": [ - { - "name": "TotalMemoryInKilobytes", - "type": "PULONGLONG" - } - ], - "SetSystemTimeAdjustment": [ - { - "name": "dwTimeAdjustment", - "type": "DWORD" - }, - { - "name": "bTimeAdjustmentDisabled", - "type": "BOOL" - } - ], - "SetSystemTimeAdjustmentPrecise": [ - { - "name": "dwTimeAdjustment", - "type": "DWORD64" - }, - { - "name": "bTimeAdjustmentDisabled", - "type": "BOOL" - } - ], - "InstallELAMCertificateInfo": [ - { - "name": "ELAMFile", - "type": "HANDLE" - } - ], - "GetProcessorSystemCycleTime": [ - { - "name": "Group", - "type": "USHORT" - }, - { - "name": "Buffer", - "type": "PSYSTEM_PROCESSOR_CYCLE_TIME_INFORMATION" - }, - { - "name": "ReturnedLength", - "type": "PDWORD" - } - ], - "GetIntegratedDisplaySize": [ - { - "name": "sizeInInches", - "type": "double" - } - ], - "SetComputerNameA": [ - { - "name": "lpComputerName", - "type": "LPCSTR" - } - ], - "SetComputerNameW": [ - { - "name": "lpComputerName", - "type": "LPCWSTR" - } - ], - "SetComputerNameExA": [ - { - "name": "NameType", - "type": "COMPUTER_NAME_FORMAT" - }, - { - "name": "lpBuffer", - "type": "LPCSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Advapi32.json b/qiling/extensions/windows_sdk/Advapi32.json deleted file mode 100644 index 7a030334d..000000000 --- a/qiling/extensions/windows_sdk/Advapi32.json +++ /dev/null @@ -1,1744 +0,0 @@ -{ - "RegCloseKey": [ - { - "name": "hKey", - "type": "HKEY" - } - ], - "RegOverridePredefKey": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "hNewHKey", - "type": "HKEY" - } - ], - "RegOpenUserClassesRoot": [ - { - "name": "hToken", - "type": "HANDLE" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "phkResult", - "type": "PHKEY" - } - ], - "RegOpenCurrentUser": [ - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "phkResult", - "type": "PHKEY" - } - ], - "RegDisablePredefinedCache": [ - { - "name": "VOID", - "type": "void" - } - ], - "RegDisablePredefinedCacheEx": [ - { - "name": "VOID", - "type": "void" - } - ], - "RegConnectRegistryA": [ - { - "name": "lpMachineName", - "type": "LPCSTR" - }, - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "phkResult", - "type": "PHKEY" - } - ], - "RegConnectRegistryW": [ - { - "name": "lpMachineName", - "type": "LPCWSTR" - }, - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "phkResult", - "type": "PHKEY" - } - ], - "RegCreateKeyA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "phkResult", - "type": "PHKEY" - } - ], - "RegCreateKeyW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "phkResult", - "type": "PHKEY" - } - ], - "RegCreateKeyExA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "Reserved", - "type": "DWORD" - }, - { - "name": "lpClass", - "type": "LPSTR" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "phkResult", - "type": "PHKEY" - }, - { - "name": "lpdwDisposition", - "type": "LPDWORD" - } - ], - "RegCreateKeyExW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "Reserved", - "type": "DWORD" - }, - { - "name": "lpClass", - "type": "LPWSTR" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "phkResult", - "type": "PHKEY" - }, - { - "name": "lpdwDisposition", - "type": "LPDWORD" - } - ], - "RegCreateKeyTransactedA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "Reserved", - "type": "DWORD" - }, - { - "name": "lpClass", - "type": "LPSTR" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "phkResult", - "type": "PHKEY" - }, - { - "name": "lpdwDisposition", - "type": "LPDWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - }, - { - "name": "pExtendedParemeter", - "type": "PVOID" - } - ], - "RegCreateKeyTransactedW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "Reserved", - "type": "DWORD" - }, - { - "name": "lpClass", - "type": "LPWSTR" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "phkResult", - "type": "PHKEY" - }, - { - "name": "lpdwDisposition", - "type": "LPDWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - }, - { - "name": "pExtendedParemeter", - "type": "PVOID" - } - ], - "RegDeleteKeyA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - } - ], - "RegDeleteKeyW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - } - ], - "RegDeleteKeyExA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "Reserved", - "type": "DWORD" - } - ], - "RegDeleteKeyExW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "Reserved", - "type": "DWORD" - } - ], - "RegDeleteKeyTransactedA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "Reserved", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - }, - { - "name": "pExtendedParameter", - "type": "PVOID" - } - ], - "RegDeleteKeyTransactedW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "Reserved", - "type": "DWORD" - }, - { - "name": "hTransaction", - "type": "HANDLE" - }, - { - "name": "pExtendedParameter", - "type": "PVOID" - } - ], - "RegDisableReflectionKey": [ - { - "name": "hBase", - "type": "HKEY" - } - ], - "RegEnableReflectionKey": [ - { - "name": "hBase", - "type": "HKEY" - } - ], - "RegQueryReflectionKey": [ - { - "name": "hBase", - "type": "HKEY" - }, - { - "name": "bIsReflectionDisabled", - "type": "BOOL" - } - ], - "RegDeleteValueA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpValueName", - "type": "LPCSTR" - } - ], - "RegDeleteValueW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpValueName", - "type": "LPCWSTR" - } - ], - "RegEnumKeyA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "lpName", - "type": "LPSTR" - }, - { - "name": "cchName", - "type": "DWORD" - } - ], - "RegEnumKeyW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "lpName", - "type": "LPWSTR" - }, - { - "name": "cchName", - "type": "DWORD" - } - ], - "RegEnumKeyExA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "lpName", - "type": "LPSTR" - }, - { - "name": "lpcchName", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPDWORD" - }, - { - "name": "lpClass", - "type": "LPSTR" - }, - { - "name": "lpcchClass", - "type": "LPDWORD" - }, - { - "name": "lpftLastWriteTime", - "type": "PFILETIME" - } - ], - "RegEnumKeyExW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "lpName", - "type": "LPWSTR" - }, - { - "name": "lpcchName", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPDWORD" - }, - { - "name": "lpClass", - "type": "LPWSTR" - }, - { - "name": "lpcchClass", - "type": "LPDWORD" - }, - { - "name": "lpftLastWriteTime", - "type": "PFILETIME" - } - ], - "RegEnumValueA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "lpValueName", - "type": "LPSTR" - }, - { - "name": "lpcchValueName", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPDWORD" - }, - { - "name": "lpType", - "type": "LPDWORD" - }, - { - "name": "lpData", - "type": "LPBYTE" - }, - { - "name": "lpcbData", - "type": "LPDWORD" - } - ], - "RegEnumValueW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "lpValueName", - "type": "LPWSTR" - }, - { - "name": "lpcchValueName", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPDWORD" - }, - { - "name": "lpType", - "type": "LPDWORD" - }, - { - "name": "lpData", - "type": "LPBYTE" - }, - { - "name": "lpcbData", - "type": "LPDWORD" - } - ], - "RegFlushKey": [ - { - "name": "hKey", - "type": "HKEY" - } - ], - "RegGetKeySecurity": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "lpcbSecurityDescriptor", - "type": "LPDWORD" - } - ], - "RegLoadKeyA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "lpFile", - "type": "LPCSTR" - } - ], - "RegLoadKeyW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "lpFile", - "type": "LPCWSTR" - } - ], - "RegNotifyChangeKeyValue": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "bWatchSubtree", - "type": "BOOL" - }, - { - "name": "dwNotifyFilter", - "type": "DWORD" - }, - { - "name": "hEvent", - "type": "HANDLE" - }, - { - "name": "fAsynchronous", - "type": "BOOL" - } - ], - "RegOpenKeyA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "phkResult", - "type": "PHKEY" - } - ], - "RegOpenKeyW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "phkResult", - "type": "PHKEY" - } - ], - "RegOpenKeyExA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "ulOptions", - "type": "DWORD" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "phkResult", - "type": "PHKEY" - } - ], - "RegOpenKeyExW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "ulOptions", - "type": "DWORD" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "phkResult", - "type": "PHKEY" - } - ], - "RegOpenKeyTransactedA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "ulOptions", - "type": "DWORD" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "phkResult", - "type": "PHKEY" - }, - { - "name": "hTransaction", - "type": "HANDLE" - }, - { - "name": "pExtendedParemeter", - "type": "PVOID" - } - ], - "RegOpenKeyTransactedW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "ulOptions", - "type": "DWORD" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "phkResult", - "type": "PHKEY" - }, - { - "name": "hTransaction", - "type": "HANDLE" - }, - { - "name": "pExtendedParemeter", - "type": "PVOID" - } - ], - "RegQueryInfoKeyA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpClass", - "type": "LPSTR" - }, - { - "name": "lpcchClass", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPDWORD" - }, - { - "name": "lpcSubKeys", - "type": "LPDWORD" - }, - { - "name": "lpcbMaxSubKeyLen", - "type": "LPDWORD" - }, - { - "name": "lpcbMaxClassLen", - "type": "LPDWORD" - }, - { - "name": "lpcValues", - "type": "LPDWORD" - }, - { - "name": "lpcbMaxValueNameLen", - "type": "LPDWORD" - }, - { - "name": "lpcbMaxValueLen", - "type": "LPDWORD" - }, - { - "name": "lpcbSecurityDescriptor", - "type": "LPDWORD" - }, - { - "name": "lpftLastWriteTime", - "type": "PFILETIME" - } - ], - "RegQueryInfoKeyW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpClass", - "type": "LPWSTR" - }, - { - "name": "lpcchClass", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPDWORD" - }, - { - "name": "lpcSubKeys", - "type": "LPDWORD" - }, - { - "name": "lpcbMaxSubKeyLen", - "type": "LPDWORD" - }, - { - "name": "lpcbMaxClassLen", - "type": "LPDWORD" - }, - { - "name": "lpcValues", - "type": "LPDWORD" - }, - { - "name": "lpcbMaxValueNameLen", - "type": "LPDWORD" - }, - { - "name": "lpcbMaxValueLen", - "type": "LPDWORD" - }, - { - "name": "lpcbSecurityDescriptor", - "type": "LPDWORD" - }, - { - "name": "lpftLastWriteTime", - "type": "PFILETIME" - } - ], - "RegQueryValueA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "lpData", - "type": "LPSTR" - }, - { - "name": "lpcbData", - "type": "PLONG" - } - ], - "RegQueryValueW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "lpData", - "type": "LPWSTR" - }, - { - "name": "lpcbData", - "type": "PLONG" - } - ], - "RegQueryMultipleValuesA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "val_list", - "type": "PVALENTA" - }, - { - "name": "num_vals", - "type": "DWORD" - }, - { - "name": "lpValueBuf", - "type": "LPSTR" - }, - { - "name": "ldwTotsize", - "type": "LPDWORD" - } - ], - "RegQueryMultipleValuesW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "val_list", - "type": "PVALENTW" - }, - { - "name": "num_vals", - "type": "DWORD" - }, - { - "name": "lpValueBuf", - "type": "LPWSTR" - }, - { - "name": "ldwTotsize", - "type": "LPDWORD" - } - ], - "RegQueryValueExA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpValueName", - "type": "LPCSTR" - }, - { - "name": "lpReserved", - "type": "LPDWORD" - }, - { - "name": "lpType", - "type": "LPDWORD" - }, - { - "name": "lpData", - "type": "LPBYTE" - }, - { - "name": "lpcbData", - "type": "LPDWORD" - } - ], - "RegQueryValueExW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpValueName", - "type": "LPCWSTR" - }, - { - "name": "lpReserved", - "type": "LPDWORD" - }, - { - "name": "lpType", - "type": "LPDWORD" - }, - { - "name": "lpData", - "type": "LPBYTE" - }, - { - "name": "lpcbData", - "type": "LPDWORD" - } - ], - "RegReplaceKeyA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "lpNewFile", - "type": "LPCSTR" - }, - { - "name": "lpOldFile", - "type": "LPCSTR" - } - ], - "RegReplaceKeyW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "lpNewFile", - "type": "LPCWSTR" - }, - { - "name": "lpOldFile", - "type": "LPCWSTR" - } - ], - "RegRestoreKeyA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpFile", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "RegRestoreKeyW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpFile", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "RegSaveKeyA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpFile", - "type": "LPCSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "RegSaveKeyW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpFile", - "type": "LPCWSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "RegSetKeySecurity": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "RegSetValueA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "LPCSTR" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "RegSetValueW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "LPCWSTR" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "RegSetValueExA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpValueName", - "type": "LPCSTR" - }, - { - "name": "Reserved", - "type": "DWORD" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "RegSetValueExW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpValueName", - "type": "LPCWSTR" - }, - { - "name": "Reserved", - "type": "DWORD" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "RegUnLoadKeyA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - } - ], - "RegUnLoadKeyW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - } - ], - "RegDeleteKeyValueA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "lpValueName", - "type": "LPCSTR" - } - ], - "RegDeleteKeyValueW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "lpValueName", - "type": "LPCWSTR" - } - ], - "RegSetKeyValueA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "lpValueName", - "type": "LPCSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "LPCVOID" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "RegSetKeyValueW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "lpValueName", - "type": "LPCWSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "LPCVOID" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "RegDeleteTreeA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - } - ], - "RegDeleteTreeW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - } - ], - "RegCopyTreeA": [ - { - "name": "hKeySrc", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "hKeyDest", - "type": "HKEY" - } - ], - "RegGetValueA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCSTR" - }, - { - "name": "lpValue", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwType", - "type": "LPDWORD" - }, - { - "name": "pvData", - "type": "PVOID" - }, - { - "name": "pcbData", - "type": "LPDWORD" - } - ], - "RegGetValueW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "lpValue", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwType", - "type": "LPDWORD" - }, - { - "name": "pvData", - "type": "PVOID" - }, - { - "name": "pcbData", - "type": "LPDWORD" - } - ], - "RegCopyTreeW": [ - { - "name": "hKeySrc", - "type": "HKEY" - }, - { - "name": "lpSubKey", - "type": "LPCWSTR" - }, - { - "name": "hKeyDest", - "type": "HKEY" - } - ], - "RegLoadMUIStringA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "pszOutBuf", - "type": "LPSTR" - }, - { - "name": "cbOutBuf", - "type": "DWORD" - }, - { - "name": "pcbData", - "type": "LPDWORD" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "pszDirectory", - "type": "LPCSTR" - } - ], - "RegLoadMUIStringW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "pszOutBuf", - "type": "LPWSTR" - }, - { - "name": "cbOutBuf", - "type": "DWORD" - }, - { - "name": "pcbData", - "type": "LPDWORD" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "pszDirectory", - "type": "LPCWSTR" - } - ], - "RegLoadAppKeyA": [ - { - "name": "lpFile", - "type": "LPCSTR" - }, - { - "name": "phkResult", - "type": "PHKEY" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "Reserved", - "type": "DWORD" - } - ], - "RegLoadAppKeyW": [ - { - "name": "lpFile", - "type": "LPCWSTR" - }, - { - "name": "phkResult", - "type": "PHKEY" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "dwOptions", - "type": "DWORD" - }, - { - "name": "Reserved", - "type": "DWORD" - } - ], - "InitiateSystemShutdownA": [ - { - "name": "lpMachineName", - "type": "LPSTR" - }, - { - "name": "lpMessage", - "type": "LPSTR" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "bForceAppsClosed", - "type": "BOOL" - }, - { - "name": "bRebootAfterShutdown", - "type": "BOOL" - } - ], - "InitiateSystemShutdownW": [ - { - "name": "lpMachineName", - "type": "LPWSTR" - }, - { - "name": "lpMessage", - "type": "LPWSTR" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "bForceAppsClosed", - "type": "BOOL" - }, - { - "name": "bRebootAfterShutdown", - "type": "BOOL" - } - ], - "AbortSystemShutdownA": [ - { - "name": "lpMachineName", - "type": "LPSTR" - } - ], - "AbortSystemShutdownW": [ - { - "name": "lpMachineName", - "type": "LPWSTR" - } - ], - "InitiateSystemShutdownExA": [ - { - "name": "lpMachineName", - "type": "LPSTR" - }, - { - "name": "lpMessage", - "type": "LPSTR" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "bForceAppsClosed", - "type": "BOOL" - }, - { - "name": "bRebootAfterShutdown", - "type": "BOOL" - }, - { - "name": "dwReason", - "type": "DWORD" - } - ], - "InitiateSystemShutdownExW": [ - { - "name": "lpMachineName", - "type": "LPWSTR" - }, - { - "name": "lpMessage", - "type": "LPWSTR" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "bForceAppsClosed", - "type": "BOOL" - }, - { - "name": "bRebootAfterShutdown", - "type": "BOOL" - }, - { - "name": "dwReason", - "type": "DWORD" - } - ], - "InitiateShutdownA": [ - { - "name": "lpMachineName", - "type": "LPSTR" - }, - { - "name": "lpMessage", - "type": "LPSTR" - }, - { - "name": "dwGracePeriod", - "type": "DWORD" - }, - { - "name": "dwShutdownFlags", - "type": "DWORD" - }, - { - "name": "dwReason", - "type": "DWORD" - } - ], - "InitiateShutdownW": [ - { - "name": "lpMachineName", - "type": "LPWSTR" - }, - { - "name": "lpMessage", - "type": "LPWSTR" - }, - { - "name": "dwGracePeriod", - "type": "DWORD" - }, - { - "name": "dwShutdownFlags", - "type": "DWORD" - }, - { - "name": "dwReason", - "type": "DWORD" - } - ], - "RegSaveKeyExA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpFile", - "type": "LPCSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "RegSaveKeyExW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "lpFile", - "type": "LPCWSTR" - }, - { - "name": "lpSecurityAttributes", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "Flags", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Api-ms-win-core-version-l1-2-3.json b/qiling/extensions/windows_sdk/Api-ms-win-core-version-l1-2-3.json deleted file mode 100644 index e9887ce36..000000000 --- a/qiling/extensions/windows_sdk/Api-ms-win-core-version-l1-2-3.json +++ /dev/null @@ -1,364 +0,0 @@ -{ - "GlobalMemoryStatusEx": [ - { - "name": "lpBuffer", - "type": "LPMEMORYSTATUSEX" - } - ], - "GetSystemInfo": [ - { - "name": "lpSystemInfo", - "type": "LPSYSTEM_INFO" - } - ], - "GetSystemTime": [ - { - "name": "lpSystemTime", - "type": "LPSYSTEMTIME" - } - ], - "GetSystemTimeAsFileTime": [ - { - "name": "lpSystemTimeAsFileTime", - "type": "LPFILETIME" - } - ], - "GetLocalTime": [ - { - "name": "lpSystemTime", - "type": "LPSYSTEMTIME" - } - ], - "GetVersion": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetLocalTime": [ - { - "name": "lpSystemTime", - "type": "SYSTEMTIME" - } - ], - "GetTickCount": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetTickCount64": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetSystemTimeAdjustment": [ - { - "name": "lpTimeAdjustment", - "type": "PDWORD" - }, - { - "name": "lpTimeIncrement", - "type": "PDWORD" - }, - { - "name": "lpTimeAdjustmentDisabled", - "type": "PBOOL" - } - ], - "GetSystemTimeAdjustmentPrecise": [ - { - "name": "lpTimeAdjustment", - "type": "PDWORD64" - }, - { - "name": "lpTimeIncrement", - "type": "PDWORD64" - }, - { - "name": "lpTimeAdjustmentDisabled", - "type": "PBOOL" - } - ], - "GetSystemDirectoryA": [ - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetSystemDirectoryW": [ - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetWindowsDirectoryA": [ - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetWindowsDirectoryW": [ - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetSystemWindowsDirectoryA": [ - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetSystemWindowsDirectoryW": [ - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetComputerNameExA": [ - { - "name": "NameType", - "type": "COMPUTER_NAME_FORMAT" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "LPDWORD" - } - ], - "GetComputerNameExW": [ - { - "name": "NameType", - "type": "COMPUTER_NAME_FORMAT" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "LPDWORD" - } - ], - "SetComputerNameExW": [ - { - "name": "NameType", - "type": "COMPUTER_NAME_FORMAT" - }, - { - "name": "lpBuffer", - "type": "LPCWSTR" - } - ], - "SetSystemTime": [ - { - "name": "lpSystemTime", - "type": "SYSTEMTIME" - } - ], - "GetVersionExA": [ - { - "name": "lpVersionInformation", - "type": "LPOSVERSIONINFOA" - } - ], - "GetVersionExW": [ - { - "name": "lpVersionInformation", - "type": "LPOSVERSIONINFOW" - } - ], - "GetLogicalProcessorInformation": [ - { - "name": "Buffer", - "type": "PSYSTEM_LOGICAL_PROCESSOR_INFORMATION" - }, - { - "name": "ReturnedLength", - "type": "PDWORD" - } - ], - "GetLogicalProcessorInformationEx": [ - { - "name": "RelationshipType", - "type": "LOGICAL_PROCESSOR_RELATIONSHIP" - }, - { - "name": "Buffer", - "type": "PSYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX" - }, - { - "name": "ReturnedLength", - "type": "PDWORD" - } - ], - "GetNativeSystemInfo": [ - { - "name": "lpSystemInfo", - "type": "LPSYSTEM_INFO" - } - ], - "GetSystemTimePreciseAsFileTime": [ - { - "name": "lpSystemTimeAsFileTime", - "type": "LPFILETIME" - } - ], - "GetProductInfo": [ - { - "name": "dwOSMajorVersion", - "type": "DWORD" - }, - { - "name": "dwOSMinorVersion", - "type": "DWORD" - }, - { - "name": "dwSpMajorVersion", - "type": "DWORD" - }, - { - "name": "dwSpMinorVersion", - "type": "DWORD" - }, - { - "name": "pdwReturnedProductType", - "type": "PDWORD" - } - ], - "EnumSystemFirmwareTables": [ - { - "name": "FirmwareTableProviderSignature", - "type": "DWORD" - }, - { - "name": "pFirmwareTableEnumBuffer", - "type": "PVOID" - }, - { - "name": "BufferSize", - "type": "DWORD" - } - ], - "GetSystemFirmwareTable": [ - { - "name": "FirmwareTableProviderSignature", - "type": "DWORD" - }, - { - "name": "FirmwareTableID", - "type": "DWORD" - }, - { - "name": "pFirmwareTableBuffer", - "type": "PVOID" - }, - { - "name": "BufferSize", - "type": "DWORD" - } - ], - "GetPhysicallyInstalledSystemMemory": [ - { - "name": "TotalMemoryInKilobytes", - "type": "PULONGLONG" - } - ], - "SetSystemTimeAdjustment": [ - { - "name": "dwTimeAdjustment", - "type": "DWORD" - }, - { - "name": "bTimeAdjustmentDisabled", - "type": "BOOL" - } - ], - "SetSystemTimeAdjustmentPrecise": [ - { - "name": "dwTimeAdjustment", - "type": "DWORD64" - }, - { - "name": "bTimeAdjustmentDisabled", - "type": "BOOL" - } - ], - "InstallELAMCertificateInfo": [ - { - "name": "ELAMFile", - "type": "HANDLE" - } - ], - "GetProcessorSystemCycleTime": [ - { - "name": "Group", - "type": "USHORT" - }, - { - "name": "Buffer", - "type": "PSYSTEM_PROCESSOR_CYCLE_TIME_INFORMATION" - }, - { - "name": "ReturnedLength", - "type": "PDWORD" - } - ], - "GetIntegratedDisplaySize": [ - { - "name": "sizeInInches", - "type": "double" - } - ], - "SetComputerNameA": [ - { - "name": "lpComputerName", - "type": "LPCSTR" - } - ], - "SetComputerNameW": [ - { - "name": "lpComputerName", - "type": "LPCWSTR" - } - ], - "SetComputerNameExA": [ - { - "name": "NameType", - "type": "COMPUTER_NAME_FORMAT" - }, - { - "name": "lpBuffer", - "type": "LPCSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Avicap32.json b/qiling/extensions/windows_sdk/Avicap32.json deleted file mode 100644 index 382f95441..000000000 --- a/qiling/extensions/windows_sdk/Avicap32.json +++ /dev/null @@ -1,1722 +0,0 @@ -{ - "ICInfo": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "lpicinfo", - "type": "ICINFO" - } - ], - "ICInstall": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "szDesc", - "type": "LPSTR" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "ICRemove": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "ICGetInfo": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "picinfo", - "type": "ICINFO" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "ICOpen": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "wMode", - "type": "UINT" - } - ], - "ICOpenFunction": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "wMode", - "type": "UINT" - }, - { - "name": "lpfnHandler", - "type": "FARPROC" - } - ], - "ICClose": [ - { - "name": "hic", - "type": "HIC" - } - ], - "ICSendMessage": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "msg", - "type": "UINT" - }, - { - "name": "dw1", - "type": "DWORD_PTR" - }, - { - "name": "dw2", - "type": "DWORD_PTR" - } - ], - "ICCompress": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpbiOutput", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "lpbiInput", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "lpckid", - "type": "LPDWORD" - }, - { - "name": "lpdwFlags", - "type": "LPDWORD" - }, - { - "name": "lFrameNum", - "type": "LONG" - }, - { - "name": "dwFrameSize", - "type": "DWORD" - }, - { - "name": "dwQuality", - "type": "DWORD" - }, - { - "name": "lpbiPrev", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpPrev", - "type": "LPVOID" - } - ], - "ICDecompress": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpbiFormat", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpBits", - "type": "LPVOID" - } - ], - "ICDrawBegin": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xDst", - "type": "int" - }, - { - "name": "yDst", - "type": "int" - }, - { - "name": "dxDst", - "type": "int" - }, - { - "name": "dyDst", - "type": "int" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "dxSrc", - "type": "int" - }, - { - "name": "dySrc", - "type": "int" - }, - { - "name": "dwRate", - "type": "DWORD" - }, - { - "name": "dwScale", - "type": "DWORD" - } - ], - "ICDraw": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpFormat", - "type": "LPVOID" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "lTime", - "type": "LONG" - } - ], - "ICLocate": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpbiOut", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "wFlags", - "type": "WORD" - } - ], - "ICGetDisplayFormat": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpbiOut", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "BitDepth", - "type": "int" - }, - { - "name": "dx", - "type": "int" - }, - { - "name": "dy", - "type": "int" - } - ], - "ICImageCompress": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFO" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "lpbiOut", - "type": "LPBITMAPINFO" - }, - { - "name": "lQuality", - "type": "LONG" - }, - { - "name": "plSize", - "type": "LONG" - } - ], - "ICImageDecompress": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFO" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "lpbiOut", - "type": "LPBITMAPINFO" - } - ], - "ICCompressorChoose": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "pvIn", - "type": "LPVOID" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "pc", - "type": "PCOMPVARS" - }, - { - "name": "lpszTitle", - "type": "LPSTR" - } - ], - "ICSeqCompressFrameStart": [ - { - "name": "pc", - "type": "PCOMPVARS" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFO" - } - ], - "ICSeqCompressFrameEnd": [ - { - "name": "pc", - "type": "PCOMPVARS" - } - ], - "ICSeqCompressFrame": [ - { - "name": "pc", - "type": "PCOMPVARS" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "pfKey", - "type": "BOOL" - }, - { - "name": "plSize", - "type": "LONG" - } - ], - "ICCompressorFree": [ - { - "name": "pc", - "type": "PCOMPVARS" - } - ], - "DrawDibOpen": [ - { - "name": "VOID", - "type": "void" - } - ], - "DrawDibClose": [ - { - "name": "hdd", - "type": "HDRAWDIB" - } - ], - "DrawDibGetBuffer": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "dwSize", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "DrawDibGetPalette": [ - { - "name": "hdd", - "type": "HDRAWDIB" - } - ], - "DrawDibSetPalette": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "hpal", - "type": "HPALETTE" - } - ], - "DrawDibChangePalette": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "iStart", - "type": "int" - }, - { - "name": "iLen", - "type": "int" - }, - { - "name": "lppe", - "type": "LPPALETTEENTRY" - } - ], - "DrawDibRealize": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "fBackground", - "type": "BOOL" - } - ], - "DrawDibStart": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "rate", - "type": "DWORD" - } - ], - "DrawDibStop": [ - { - "name": "hdd", - "type": "HDRAWDIB" - } - ], - "DrawDibBegin": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "dxDst", - "type": "int" - }, - { - "name": "dyDst", - "type": "int" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "dxSrc", - "type": "int" - }, - { - "name": "dySrc", - "type": "int" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "DrawDibDraw": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xDst", - "type": "int" - }, - { - "name": "yDst", - "type": "int" - }, - { - "name": "dxDst", - "type": "int" - }, - { - "name": "dyDst", - "type": "int" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "dxSrc", - "type": "int" - }, - { - "name": "dySrc", - "type": "int" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "DrawDibEnd": [ - { - "name": "hdd", - "type": "HDRAWDIB" - } - ], - "DrawDibTime": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "lpddtime", - "type": "LPDRAWDIBTIME" - } - ], - "DrawDibProfileDisplay": [ - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - } - ], - "AVIFileInit": [ - { - "name": "VOID", - "type": "void" - } - ], - "AVIFileExit": [ - { - "name": "VOID", - "type": "void" - } - ], - "AVIFileAddRef": [ - { - "name": "pfile", - "type": "PAVIFILE" - } - ], - "AVIFileRelease": [ - { - "name": "pfile", - "type": "PAVIFILE" - } - ], - "AVIFileOpenA": [ - { - "name": "ppfile", - "type": "PAVIFILE" - }, - { - "name": "szFile", - "type": "LPCSTR" - }, - { - "name": "uMode", - "type": "UINT" - }, - { - "name": "lpHandler", - "type": "LPCLSID" - } - ], - "AVIFileOpenW": [ - { - "name": "ppfile", - "type": "PAVIFILE" - }, - { - "name": "szFile", - "type": "LPCWSTR" - }, - { - "name": "uMode", - "type": "UINT" - }, - { - "name": "lpHandler", - "type": "LPCLSID" - } - ], - "AVIFileInfoW": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "pfi", - "type": "LPAVIFILEINFOW" - }, - { - "name": "lSize", - "type": "LONG" - } - ], - "AVIFileInfoA": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "pfi", - "type": "LPAVIFILEINFOA" - }, - { - "name": "lSize", - "type": "LONG" - } - ], - "AVIFileGetStream": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LONG" - } - ], - "AVIFileCreateStreamW": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "psi", - "type": "AVISTREAMINFOW" - } - ], - "AVIFileCreateStreamA": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "psi", - "type": "AVISTREAMINFOA" - } - ], - "AVIFileWriteData": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "ckid", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "cbData", - "type": "LONG" - } - ], - "AVIFileReadData": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "ckid", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "lpcbData", - "type": "LONG" - } - ], - "AVIFileEndRecord": [ - { - "name": "pfile", - "type": "PAVIFILE" - } - ], - "AVIStreamAddRef": [ - { - "name": "pavi", - "type": "PAVISTREAM" - } - ], - "AVIStreamRelease": [ - { - "name": "pavi", - "type": "PAVISTREAM" - } - ], - "AVIStreamInfoW": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "psi", - "type": "LPAVISTREAMINFOW" - }, - { - "name": "lSize", - "type": "LONG" - } - ], - "AVIStreamInfoA": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "psi", - "type": "LPAVISTREAMINFOA" - }, - { - "name": "lSize", - "type": "LONG" - } - ], - "AVIStreamFindSample": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lPos", - "type": "LONG" - }, - { - "name": "lFlags", - "type": "LONG" - } - ], - "AVIStreamReadFormat": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lPos", - "type": "LONG" - }, - { - "name": "lpFormat", - "type": "LPVOID" - }, - { - "name": "lpcbFormat", - "type": "LONG" - } - ], - "AVIStreamSetFormat": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lPos", - "type": "LONG" - }, - { - "name": "lpFormat", - "type": "LPVOID" - }, - { - "name": "cbFormat", - "type": "LONG" - } - ], - "AVIStreamReadData": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "fcc", - "type": "DWORD" - }, - { - "name": "lp", - "type": "LPVOID" - }, - { - "name": "lpcb", - "type": "LONG" - } - ], - "AVIStreamWriteData": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "fcc", - "type": "DWORD" - }, - { - "name": "lp", - "type": "LPVOID" - }, - { - "name": "cb", - "type": "LONG" - } - ], - "AVIStreamRead": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lStart", - "type": "LONG" - }, - { - "name": "lSamples", - "type": "LONG" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "cbBuffer", - "type": "LONG" - }, - { - "name": "plBytes", - "type": "LONG" - }, - { - "name": "plSamples", - "type": "LONG" - } - ], - "AVIStreamWrite": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lStart", - "type": "LONG" - }, - { - "name": "lSamples", - "type": "LONG" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "cbBuffer", - "type": "LONG" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "plSampWritten", - "type": "LONG" - }, - { - "name": "plBytesWritten", - "type": "LONG" - } - ], - "AVIStreamStart": [ - { - "name": "pavi", - "type": "PAVISTREAM" - } - ], - "AVIStreamLength": [ - { - "name": "pavi", - "type": "PAVISTREAM" - } - ], - "AVIStreamTimeToSample": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lTime", - "type": "LONG" - } - ], - "AVIStreamSampleToTime": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lSample", - "type": "LONG" - } - ], - "AVIStreamBeginStreaming": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lStart", - "type": "LONG" - }, - { - "name": "lEnd", - "type": "LONG" - }, - { - "name": "lRate", - "type": "LONG" - } - ], - "AVIStreamEndStreaming": [ - { - "name": "pavi", - "type": "PAVISTREAM" - } - ], - "AVIStreamGetFrameOpen": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lpbiWanted", - "type": "LPBITMAPINFOHEADER" - } - ], - "AVIStreamGetFrame": [ - { - "name": "pg", - "type": "PGETFRAME" - }, - { - "name": "lPos", - "type": "LONG" - } - ], - "AVIStreamGetFrameClose": [ - { - "name": "pg", - "type": "PGETFRAME" - } - ], - "AVIStreamOpenFromFileA": [ - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "szFile", - "type": "LPCSTR" - }, - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LONG" - }, - { - "name": "mode", - "type": "UINT" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - } - ], - "AVIStreamOpenFromFileW": [ - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "szFile", - "type": "LPCWSTR" - }, - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LONG" - }, - { - "name": "mode", - "type": "UINT" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - } - ], - "AVIStreamCreate": [ - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "lParam1", - "type": "LONG" - }, - { - "name": "lParam2", - "type": "LONG" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - } - ], - "AVIMakeCompressedStream": [ - { - "name": "ppsCompressed", - "type": "PAVISTREAM" - }, - { - "name": "ppsSource", - "type": "PAVISTREAM" - }, - { - "name": "lpOptions", - "type": "AVICOMPRESSOPTIONS" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - } - ], - "AVISaveA": [ - { - "name": "szFile", - "type": "LPCSTR" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - }, - { - "name": "lpfnCallback", - "type": "AVISAVECALLBACK" - }, - { - "name": "nStreams", - "type": "int" - }, - { - "name": "pfile", - "type": "PAVISTREAM" - }, - { - "name": "lpOptions", - "type": "LPAVICOMPRESSOPTIONS" - } - ], - "AVISaveVA": [ - { - "name": "szFile", - "type": "LPCSTR" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - }, - { - "name": "lpfnCallback", - "type": "AVISAVECALLBACK" - }, - { - "name": "nStreams", - "type": "int" - }, - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "plpOptions", - "type": "LPAVICOMPRESSOPTIONS" - } - ], - "AVISaveW": [ - { - "name": "szFile", - "type": "LPCWSTR" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - }, - { - "name": "lpfnCallback", - "type": "AVISAVECALLBACK" - }, - { - "name": "nStreams", - "type": "int" - }, - { - "name": "pfile", - "type": "PAVISTREAM" - }, - { - "name": "lpOptions", - "type": "LPAVICOMPRESSOPTIONS" - } - ], - "AVISaveVW": [ - { - "name": "szFile", - "type": "LPCWSTR" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - }, - { - "name": "lpfnCallback", - "type": "AVISAVECALLBACK" - }, - { - "name": "nStreams", - "type": "int" - }, - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "plpOptions", - "type": "LPAVICOMPRESSOPTIONS" - } - ], - "AVISaveOptions": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "nStreams", - "type": "int" - }, - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "plpOptions", - "type": "LPAVICOMPRESSOPTIONS" - } - ], - "AVISaveOptionsFree": [ - { - "name": "nStreams", - "type": "int" - }, - { - "name": "plpOptions", - "type": "LPAVICOMPRESSOPTIONS" - } - ], - "AVIBuildFilterW": [ - { - "name": "lpszFilter", - "type": "LPWSTR" - }, - { - "name": "cbFilter", - "type": "LONG" - }, - { - "name": "fSaving", - "type": "BOOL" - } - ], - "AVIBuildFilterA": [ - { - "name": "lpszFilter", - "type": "LPSTR" - }, - { - "name": "cbFilter", - "type": "LONG" - }, - { - "name": "fSaving", - "type": "BOOL" - } - ], - "AVIMakeFileFromStreams": [ - { - "name": "ppfile", - "type": "PAVIFILE" - }, - { - "name": "nStreams", - "type": "int" - }, - { - "name": "papStreams", - "type": "PAVISTREAM" - } - ], - "AVIMakeStreamFromClipboard": [ - { - "name": "cfFormat", - "type": "UINT" - }, - { - "name": "hGlobal", - "type": "HANDLE" - }, - { - "name": "ppstream", - "type": "PAVISTREAM" - } - ], - "AVIPutFileOnClipboard": [ - { - "name": "pf", - "type": "PAVIFILE" - } - ], - "AVIGetFromClipboard": [ - { - "name": "lppf", - "type": "PAVIFILE" - } - ], - "AVIClearClipboard": [ - { - "name": "VOID", - "type": "void" - } - ], - "CreateEditableStream": [ - { - "name": "ppsEditable", - "type": "PAVISTREAM" - }, - { - "name": "psSource", - "type": "PAVISTREAM" - } - ], - "EditStreamCut": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "plStart", - "type": "LONG" - }, - { - "name": "plLength", - "type": "LONG" - }, - { - "name": "ppResult", - "type": "PAVISTREAM" - } - ], - "EditStreamCopy": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "plStart", - "type": "LONG" - }, - { - "name": "plLength", - "type": "LONG" - }, - { - "name": "ppResult", - "type": "PAVISTREAM" - } - ], - "EditStreamPaste": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "plPos", - "type": "LONG" - }, - { - "name": "plLength", - "type": "LONG" - }, - { - "name": "pstream", - "type": "PAVISTREAM" - }, - { - "name": "lStart", - "type": "LONG" - }, - { - "name": "lEnd", - "type": "LONG" - } - ], - "EditStreamClone": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "ppResult", - "type": "PAVISTREAM" - } - ], - "EditStreamSetNameA": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lpszName", - "type": "LPCSTR" - } - ], - "EditStreamSetNameW": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lpszName", - "type": "LPCWSTR" - } - ], - "EditStreamSetInfoW": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lpInfo", - "type": "LPAVISTREAMINFOW" - }, - { - "name": "cbInfo", - "type": "LONG" - } - ], - "EditStreamSetInfoA": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lpInfo", - "type": "LPAVISTREAMINFOA" - }, - { - "name": "cbInfo", - "type": "LONG" - } - ], - "MCIWndCreateA": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "szFile", - "type": "LPCSTR" - } - ], - "MCIWndCreateW": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "szFile", - "type": "LPCWSTR" - } - ], - "MCIWndRegisterClass": [ - { - "name": "VOID", - "type": "void" - } - ], - "capCreateCaptureWindowA": [ - { - "name": "lpszWindowName", - "type": "LPCSTR" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "nID", - "type": "int" - } - ], - "capGetDriverDescriptionA": [ - { - "name": "wDriverIndex", - "type": "UINT" - }, - { - "name": "lpszName", - "type": "LPSTR" - }, - { - "name": "cbName", - "type": "int" - }, - { - "name": "lpszVer", - "type": "LPSTR" - }, - { - "name": "cbVer", - "type": "int" - } - ], - "capCreateCaptureWindowW": [ - { - "name": "lpszWindowName", - "type": "LPCWSTR" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "nID", - "type": "int" - } - ], - "capGetDriverDescriptionW": [ - { - "name": "wDriverIndex", - "type": "UINT" - }, - { - "name": "lpszName", - "type": "LPWSTR" - }, - { - "name": "cbName", - "type": "int" - }, - { - "name": "lpszVer", - "type": "LPWSTR" - }, - { - "name": "cbVer", - "type": "int" - } - ], - "GetOpenFileNamePreviewA": [ - { - "name": "lpofn", - "type": "LPOPENFILENAMEA" - } - ], - "GetSaveFileNamePreviewA": [ - { - "name": "lpofn", - "type": "LPOPENFILENAMEA" - } - ], - "GetOpenFileNamePreviewW": [ - { - "name": "lpofn", - "type": "LPOPENFILENAMEW" - } - ], - "GetSaveFileNamePreviewW": [ - { - "name": "lpofn", - "type": "LPOPENFILENAMEW" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Cabinet.json b/qiling/extensions/windows_sdk/Cabinet.json deleted file mode 100644 index c6fa6cdbd..000000000 --- a/qiling/extensions/windows_sdk/Cabinet.json +++ /dev/null @@ -1,178 +0,0 @@ -{ - "CreateCompressor": [ - { - "name": "Algorithm", - "type": "DWORD" - }, - { - "name": "AllocationRoutines", - "type": "PCOMPRESS_ALLOCATION_ROUTINES" - }, - { - "name": "CompressorHandle", - "type": "PCOMPRESSOR_HANDLE" - } - ], - "SetCompressorInformation": [ - { - "name": "CompressorHandle", - "type": "COMPRESSOR_HANDLE" - }, - { - "name": "CompressInformationClass", - "type": "COMPRESS_INFORMATION_CLASS" - }, - { - "name": "CompressInformation", - "type": "LPCVOID" - }, - { - "name": "CompressInformationSize", - "type": "SIZE_T" - } - ], - "QueryCompressorInformation": [ - { - "name": "CompressorHandle", - "type": "COMPRESSOR_HANDLE" - }, - { - "name": "CompressInformationClass", - "type": "COMPRESS_INFORMATION_CLASS" - }, - { - "name": "CompressInformation", - "type": "PVOID" - }, - { - "name": "CompressInformationSize", - "type": "SIZE_T" - } - ], - "Compress": [ - { - "name": "CompressorHandle", - "type": "COMPRESSOR_HANDLE" - }, - { - "name": "UncompressedData", - "type": "LPCVOID" - }, - { - "name": "UncompressedDataSize", - "type": "SIZE_T" - }, - { - "name": "CompressedBuffer", - "type": "PVOID" - }, - { - "name": "CompressedBufferSize", - "type": "SIZE_T" - }, - { - "name": "CompressedDataSize", - "type": "PSIZE_T" - } - ], - "ResetCompressor": [ - { - "name": "CompressorHandle", - "type": "COMPRESSOR_HANDLE" - } - ], - "CloseCompressor": [ - { - "name": "CompressorHandle", - "type": "COMPRESSOR_HANDLE" - } - ], - "CreateDecompressor": [ - { - "name": "Algorithm", - "type": "DWORD" - }, - { - "name": "AllocationRoutines", - "type": "PCOMPRESS_ALLOCATION_ROUTINES" - }, - { - "name": "DecompressorHandle", - "type": "PDECOMPRESSOR_HANDLE" - } - ], - "SetDecompressorInformation": [ - { - "name": "DecompressorHandle", - "type": "DECOMPRESSOR_HANDLE" - }, - { - "name": "CompressInformationClass", - "type": "COMPRESS_INFORMATION_CLASS" - }, - { - "name": "CompressInformation", - "type": "LPCVOID" - }, - { - "name": "CompressInformationSize", - "type": "SIZE_T" - } - ], - "QueryDecompressorInformation": [ - { - "name": "DecompressorHandle", - "type": "DECOMPRESSOR_HANDLE" - }, - { - "name": "CompressInformationClass", - "type": "COMPRESS_INFORMATION_CLASS" - }, - { - "name": "CompressInformation", - "type": "PVOID" - }, - { - "name": "CompressInformationSize", - "type": "SIZE_T" - } - ], - "Decompress": [ - { - "name": "DecompressorHandle", - "type": "DECOMPRESSOR_HANDLE" - }, - { - "name": "CompressedData", - "type": "LPCVOID" - }, - { - "name": "CompressedDataSize", - "type": "SIZE_T" - }, - { - "name": "UncompressedBuffer", - "type": "PVOID" - }, - { - "name": "UncompressedBufferSize", - "type": "SIZE_T" - }, - { - "name": "UncompressedDataSize", - "type": "PSIZE_T" - } - ], - "ResetDecompressor": [ - { - "name": "DecompressorHandle", - "type": "DECOMPRESSOR_HANDLE" - } - ], - "CloseDecompressor": [ - { - "name": "DecompressorHandle", - "type": "DECOMPRESSOR_HANDLE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ComBase.json b/qiling/extensions/windows_sdk/ComBase.json deleted file mode 100644 index faa6d1683..000000000 --- a/qiling/extensions/windows_sdk/ComBase.json +++ /dev/null @@ -1,518 +0,0 @@ -{ - "CoFileTimeNow": [ - { - "name": "lpFileTime", - "type": "FILETIME" - } - ], - "CLSIDFromProgIDEx": [ - { - "name": "lpszProgID", - "type": "LPCOLESTR" - }, - { - "name": "lpclsid", - "type": "LPCLSID" - } - ], - "CoInitialize": [ - { - "name": "pvReserved", - "type": "LPVOID" - } - ], - "CoRegisterMallocSpy": [ - { - "name": "pMallocSpy", - "type": "LPMALLOCSPY" - } - ], - "CoRevokeMallocSpy": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoRegisterInitializeSpy": [ - { - "name": "pSpy", - "type": "IInitializeSpy" - }, - { - "name": "puliCookie", - "type": "ULARGE_INTEGER" - } - ], - "CoRevokeInitializeSpy": [ - { - "name": "uliCookie", - "type": "ULARGE_INTEGER" - } - ], - "CoGetSystemSecurityPermissions": [ - { - "name": "comSDType", - "type": "COMSD" - }, - { - "name": "ppSD", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "CoLoadLibrary": [ - { - "name": "lpszLibName", - "type": "LPOLESTR" - }, - { - "name": "bAutoFree", - "type": "BOOL" - } - ], - "CoFreeLibrary": [ - { - "name": "hInst", - "type": "HINSTANCE" - } - ], - "CoFreeAllLibraries": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoGetInstanceFromFile": [ - { - "name": "pServerInfo", - "type": "COSERVERINFO" - }, - { - "name": "pClsid", - "type": "CLSID" - }, - { - "name": "punkOuter", - "type": "IUnknown" - }, - { - "name": "dwClsCtx", - "type": "DWORD" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "pwszName", - "type": "OLECHAR" - }, - { - "name": "dwCount", - "type": "DWORD" - }, - { - "name": "pResults", - "type": "MULTI_QI" - } - ], - "CoGetInstanceFromIStorage": [ - { - "name": "pServerInfo", - "type": "COSERVERINFO" - }, - { - "name": "pClsid", - "type": "CLSID" - }, - { - "name": "punkOuter", - "type": "IUnknown" - }, - { - "name": "dwClsCtx", - "type": "DWORD" - }, - { - "name": "pstg", - "type": { - "name": "IStorage", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "dwCount", - "type": "DWORD" - }, - { - "name": "pResults", - "type": "MULTI_QI" - } - ], - "CoAllowSetForegroundWindow": [ - { - "name": "pUnk", - "type": "IUnknown" - }, - { - "name": "lpvReserved", - "type": "LPVOID" - } - ], - "CoIsOle1Class": [ - { - "name": "rclsid", - "type": "IID" - } - ], - "CoFileTimeToDosDateTime": [ - { - "name": "lpFileTime", - "type": "FILETIME" - }, - { - "name": "lpDosDate", - "type": "LPWORD" - }, - { - "name": "lpDosTime", - "type": "LPWORD" - } - ], - "CoDosDateTimeToFileTime": [ - { - "name": "nDosDate", - "type": "WORD" - }, - { - "name": "nDosTime", - "type": "WORD" - }, - { - "name": "lpFileTime", - "type": "FILETIME" - } - ], - "CoRegisterMessageFilter": [ - { - "name": "lpMessageFilter", - "type": "LPMESSAGEFILTER" - }, - { - "name": "lplpMessageFilter", - "type": "LPMESSAGEFILTER" - } - ], - "CoRegisterChannelHook": [ - { - "name": "ExtensionUuid", - "type": "GUID" - }, - { - "name": "pChannelHook", - "type": "IChannelHook" - } - ], - "CoTreatAsClass": [ - { - "name": "clsidOld", - "type": "IID" - }, - { - "name": "clsidNew", - "type": "IID" - } - ], - "CreateDataAdviseHolder": [ - { - "name": "ppDAHolder", - "type": "LPDATAADVISEHOLDER" - } - ], - "CreateDataCache": [ - { - "name": "pUnkOuter", - "type": "LPUNKNOWN" - }, - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "iid", - "type": "IID" - }, - { - "name": "ppv", - "type": "LPVOID" - } - ], - "StgOpenAsyncDocfileOnIFillLockBytes": [ - { - "name": "pflb", - "type": "IFillLockBytes" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "asyncFlags", - "type": "DWORD" - }, - { - "name": "ppstgOpen", - "type": "IStorage" - } - ], - "StgGetIFillLockBytesOnILockBytes": [ - { - "name": "pilb", - "type": "ILockBytes" - }, - { - "name": "ppflb", - "type": "IFillLockBytes" - } - ], - "StgGetIFillLockBytesOnFile": [ - { - "name": "pwcsName", - "type": "OLECHAR" - }, - { - "name": "ppflb", - "type": "IFillLockBytes" - } - ], - "StgOpenLayoutDocfile": [ - { - "name": "pwcsDfName", - "type": "OLECHAR" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "ppstgOpen", - "type": "IStorage" - } - ], - "CoInstall": [ - { - "name": "pbc", - "type": "IBindCtx" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pClassSpec", - "type": "uCLSSPEC" - }, - { - "name": "pQuery", - "type": "QUERYCONTEXT" - }, - { - "name": "pszCodeBase", - "type": "LPWSTR" - } - ], - "BindMoniker": [ - { - "name": "pmk", - "type": "LPMONIKER" - }, - { - "name": "grfOpt", - "type": "DWORD" - }, - { - "name": "iidResult", - "type": "IID" - }, - { - "name": "ppvResult", - "type": "LPVOID" - } - ], - "CoGetObject": [ - { - "name": "pszName", - "type": "LPCWSTR" - }, - { - "name": "pBindOptions", - "type": "BIND_OPTS" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "MkParseDisplayName": [ - { - "name": "pbc", - "type": "LPBC" - }, - { - "name": "szUserName", - "type": "LPCOLESTR" - }, - { - "name": "pchEaten", - "type": "ULONG" - }, - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "MonikerRelativePathTo": [ - { - "name": "pmkSrc", - "type": "LPMONIKER" - }, - { - "name": "pmkDest", - "type": "LPMONIKER" - }, - { - "name": "ppmkRelPath", - "type": "LPMONIKER" - }, - { - "name": "dwReserved", - "type": "BOOL" - } - ], - "MonikerCommonPrefixWith": [ - { - "name": "pmkThis", - "type": "LPMONIKER" - }, - { - "name": "pmkOther", - "type": "LPMONIKER" - }, - { - "name": "ppmkCommon", - "type": "LPMONIKER" - } - ], - "CreateBindCtx": [ - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "ppbc", - "type": "LPBC" - } - ], - "CreateGenericComposite": [ - { - "name": "pmkFirst", - "type": "LPMONIKER" - }, - { - "name": "pmkRest", - "type": "LPMONIKER" - }, - { - "name": "ppmkComposite", - "type": "LPMONIKER" - } - ], - "GetClassFile": [ - { - "name": "szFilename", - "type": "LPCOLESTR" - }, - { - "name": "pclsid", - "type": "CLSID" - } - ], - "CreateClassMoniker": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "CreateFileMoniker": [ - { - "name": "lpszPathName", - "type": "LPCOLESTR" - }, - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "CreateItemMoniker": [ - { - "name": "lpszDelim", - "type": "LPCOLESTR" - }, - { - "name": "lpszItem", - "type": "LPCOLESTR" - }, - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "CreateAntiMoniker": [ - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "CreatePointerMoniker": [ - { - "name": "punk", - "type": "LPUNKNOWN" - }, - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "CreateObjrefMoniker": [ - { - "name": "punk", - "type": "LPUNKNOWN" - }, - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "GetRunningObjectTable": [ - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "pprot", - "type": "LPRUNNINGOBJECTTABLE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Comctl32.json b/qiling/extensions/windows_sdk/Comctl32.json deleted file mode 100644 index 8fc5a916b..000000000 --- a/qiling/extensions/windows_sdk/Comctl32.json +++ /dev/null @@ -1,400 +0,0 @@ -{ - "DSA_Create": [ - { - "name": "cbItem", - "type": "int" - }, - { - "name": "cItemGrow", - "type": "int" - } - ], - "DSA_Destroy": [ - { - "name": "hdsa", - "type": "HDSA" - } - ], - "DSA_DestroyCallback": [ - { - "name": "hdsa", - "type": "HDSA" - }, - { - "name": "pfnCB", - "type": "PFNDAENUMCALLBACK" - }, - { - "name": "pData", - "type": "void" - } - ], - "DSA_DeleteItem": [ - { - "name": "hdsa", - "type": "HDSA" - }, - { - "name": "i", - "type": "int" - } - ], - "DSA_DeleteAllItems": [ - { - "name": "hdsa", - "type": "HDSA" - } - ], - "DSA_EnumCallback": [ - { - "name": "hdsa", - "type": "HDSA" - }, - { - "name": "pfnCB", - "type": "PFNDAENUMCALLBACK" - }, - { - "name": "pData", - "type": "void" - } - ], - "DSA_InsertItem": [ - { - "name": "hdsa", - "type": "HDSA" - }, - { - "name": "i", - "type": "int" - }, - { - "name": "pitem", - "type": "void" - } - ], - "DSA_GetItemPtr": [ - { - "name": "hdsa", - "type": "HDSA" - }, - { - "name": "i", - "type": "int" - } - ], - "DSA_GetItem": [ - { - "name": "hdsa", - "type": "HDSA" - }, - { - "name": "i", - "type": "int" - }, - { - "name": "pitem", - "type": "void" - } - ], - "DSA_SetItem": [ - { - "name": "hdsa", - "type": "HDSA" - }, - { - "name": "i", - "type": "int" - }, - { - "name": "pitem", - "type": "void" - } - ], - "DSA_Clone": [ - { - "name": "hdsa", - "type": "HDSA" - } - ], - "DSA_GetSize": [ - { - "name": "hdsa", - "type": "HDSA" - } - ], - "DSA_Sort": [ - { - "name": "pdsa", - "type": "HDSA" - }, - { - "name": "pfnCompare", - "type": "PFNDACOMPARE" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "DPA_Create": [ - { - "name": "cItemGrow", - "type": "int" - } - ], - "DPA_CreateEx": [ - { - "name": "cpGrow", - "type": "int" - }, - { - "name": "hheap", - "type": "HANDLE" - } - ], - "DPA_Clone": [ - { - "name": "hdpa", - "type": "HDPA" - }, - { - "name": "hdpaNew", - "type": "HDPA" - } - ], - "DPA_Destroy": [ - { - "name": "hdpa", - "type": "HDPA" - } - ], - "DPA_DestroyCallback": [ - { - "name": "hdpa", - "type": "HDPA" - }, - { - "name": "pfnCB", - "type": "PFNDAENUMCALLBACK" - }, - { - "name": "pData", - "type": "void" - } - ], - "DPA_DeletePtr": [ - { - "name": "hdpa", - "type": "HDPA" - }, - { - "name": "i", - "type": "int" - } - ], - "DPA_DeleteAllPtrs": [ - { - "name": "hdpa", - "type": "HDPA" - } - ], - "DPA_EnumCallback": [ - { - "name": "hdpa", - "type": "HDPA" - }, - { - "name": "pfnCB", - "type": "PFNDAENUMCALLBACK" - }, - { - "name": "pData", - "type": "void" - } - ], - "DPA_Grow": [ - { - "name": "pdpa", - "type": "HDPA" - }, - { - "name": "cp", - "type": "int" - } - ], - "DPA_InsertPtr": [ - { - "name": "hdpa", - "type": "HDPA" - }, - { - "name": "i", - "type": "int" - }, - { - "name": "p", - "type": "void" - } - ], - "DPA_SetPtr": [ - { - "name": "hdpa", - "type": "HDPA" - }, - { - "name": "i", - "type": "int" - }, - { - "name": "p", - "type": "void" - } - ], - "DPA_GetPtr": [ - { - "name": "hdpa", - "type": "HDPA" - }, - { - "name": "i", - "type": "INT_PTR" - } - ], - "DPA_GetPtrIndex": [ - { - "name": "hdpa", - "type": "HDPA" - }, - { - "name": "p", - "type": "void" - } - ], - "DPA_GetSize": [ - { - "name": "hdpa", - "type": "HDPA" - } - ], - "DPA_Sort": [ - { - "name": "hdpa", - "type": "HDPA" - }, - { - "name": "pfnCompare", - "type": "PFNDACOMPARE" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "DPA_LoadStream": [ - { - "name": "phdpa", - "type": "HDPA" - }, - { - "name": "pfn", - "type": "PFNDPASTREAM" - }, - { - "name": "pstream", - "type": { - "name": "IStream", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "pvInstData", - "type": "void" - } - ], - "DPA_SaveStream": [ - { - "name": "hdpa", - "type": "HDPA" - }, - { - "name": "pfn", - "type": "PFNDPASTREAM" - }, - { - "name": "pstream", - "type": { - "name": "IStream", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "pvInstData", - "type": "void" - } - ], - "DPA_Merge": [ - { - "name": "hdpaDest", - "type": "HDPA" - }, - { - "name": "hdpaSrc", - "type": "HDPA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pfnCompare", - "type": "PFNDACOMPARE" - }, - { - "name": "pfnMerge", - "type": "PFNDPAMERGE" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "DPA_Search": [ - { - "name": "hdpa", - "type": "HDPA" - }, - { - "name": "pFind", - "type": "void" - }, - { - "name": "iStart", - "type": "int" - }, - { - "name": "pfnCompare", - "type": "PFNDACOMPARE" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "options", - "type": "UINT" - } - ], - "Str_SetPtrW": [ - { - "name": "ppsz", - "type": "LPWSTR" - }, - { - "name": "psz", - "type": "LPCWSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Credui.json b/qiling/extensions/windows_sdk/Credui.json deleted file mode 100644 index 374fb879d..000000000 --- a/qiling/extensions/windows_sdk/Credui.json +++ /dev/null @@ -1,934 +0,0 @@ -{ - "CredWriteW": [ - { - "name": "Credential", - "type": "PCREDENTIALW" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "CredWriteA": [ - { - "name": "Credential", - "type": "PCREDENTIALA" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "CredReadW": [ - { - "name": "TargetName", - "type": "LPCWSTR" - }, - { - "name": "Type", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "Credential", - "type": "PCREDENTIALW" - } - ], - "CredReadA": [ - { - "name": "TargetName", - "type": "LPCSTR" - }, - { - "name": "Type", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "Credential", - "type": "PCREDENTIALA" - } - ], - "CredEnumerateW": [ - { - "name": "Filter", - "type": "LPCWSTR" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "Count", - "type": "DWORD" - }, - { - "name": "Credential", - "type": "PCREDENTIALW" - } - ], - "CredEnumerateA": [ - { - "name": "Filter", - "type": "LPCSTR" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "Count", - "type": "DWORD" - }, - { - "name": "Credential", - "type": "PCREDENTIALA" - } - ], - "CredWriteDomainCredentialsW": [ - { - "name": "TargetInfo", - "type": "PCREDENTIAL_TARGET_INFORMATIONW" - }, - { - "name": "Credential", - "type": "PCREDENTIALW" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "CredWriteDomainCredentialsA": [ - { - "name": "TargetInfo", - "type": "PCREDENTIAL_TARGET_INFORMATIONA" - }, - { - "name": "Credential", - "type": "PCREDENTIALA" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "CredReadDomainCredentialsW": [ - { - "name": "TargetInfo", - "type": "PCREDENTIAL_TARGET_INFORMATIONW" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "Count", - "type": "DWORD" - }, - { - "name": "Credential", - "type": "PCREDENTIALW" - } - ], - "CredReadDomainCredentialsA": [ - { - "name": "TargetInfo", - "type": "PCREDENTIAL_TARGET_INFORMATIONA" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "Count", - "type": "DWORD" - }, - { - "name": "Credential", - "type": "PCREDENTIALA" - } - ], - "CredDeleteW": [ - { - "name": "TargetName", - "type": "LPCWSTR" - }, - { - "name": "Type", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "CredDeleteA": [ - { - "name": "TargetName", - "type": "LPCSTR" - }, - { - "name": "Type", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "CredRenameW": [ - { - "name": "OldTargetName", - "type": "LPCWSTR" - }, - { - "name": "NewTargetName", - "type": "LPCWSTR" - }, - { - "name": "Type", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "CredRenameA": [ - { - "name": "OldTargetName", - "type": "LPCSTR" - }, - { - "name": "NewTargetName", - "type": "LPCSTR" - }, - { - "name": "Type", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "CredGetTargetInfoW": [ - { - "name": "TargetName", - "type": "LPCWSTR" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "TargetInfo", - "type": "PCREDENTIAL_TARGET_INFORMATIONW" - } - ], - "CredGetTargetInfoA": [ - { - "name": "TargetName", - "type": "LPCSTR" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "TargetInfo", - "type": "PCREDENTIAL_TARGET_INFORMATIONA" - } - ], - "CredMarshalCredentialW": [ - { - "name": "CredType", - "type": "CRED_MARSHAL_TYPE" - }, - { - "name": "Credential", - "type": "PVOID" - }, - { - "name": "MarshaledCredential", - "type": "LPWSTR" - } - ], - "CredMarshalCredentialA": [ - { - "name": "CredType", - "type": "CRED_MARSHAL_TYPE" - }, - { - "name": "Credential", - "type": "PVOID" - }, - { - "name": "MarshaledCredential", - "type": "LPSTR" - } - ], - "CredUnmarshalCredentialW": [ - { - "name": "MarshaledCredential", - "type": "LPCWSTR" - }, - { - "name": "CredType", - "type": "PCRED_MARSHAL_TYPE" - }, - { - "name": "Credential", - "type": "PVOID" - } - ], - "CredUnmarshalCredentialA": [ - { - "name": "MarshaledCredential", - "type": "LPCSTR" - }, - { - "name": "CredType", - "type": "PCRED_MARSHAL_TYPE" - }, - { - "name": "Credential", - "type": "PVOID" - } - ], - "CredIsMarshaledCredentialW": [ - { - "name": "MarshaledCredential", - "type": "LPCWSTR" - } - ], - "CredIsMarshaledCredentialA": [ - { - "name": "MarshaledCredential", - "type": "LPCSTR" - } - ], - "CredUnPackAuthenticationBufferW": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pAuthBuffer", - "type": "PVOID" - }, - { - "name": "cbAuthBuffer", - "type": "DWORD" - }, - { - "name": "pszUserName", - "type": "LPWSTR" - }, - { - "name": "pcchMaxUserName", - "type": "DWORD" - }, - { - "name": "pszDomainName", - "type": "LPWSTR" - }, - { - "name": "pcchMaxDomainName", - "type": "DWORD" - }, - { - "name": "pszPassword", - "type": "LPWSTR" - }, - { - "name": "pcchMaxPassword", - "type": "DWORD" - } - ], - "CredUnPackAuthenticationBufferA": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pAuthBuffer", - "type": "PVOID" - }, - { - "name": "cbAuthBuffer", - "type": "DWORD" - }, - { - "name": "pszUserName", - "type": "LPSTR" - }, - { - "name": "pcchlMaxUserName", - "type": "DWORD" - }, - { - "name": "pszDomainName", - "type": "LPSTR" - }, - { - "name": "pcchMaxDomainName", - "type": "DWORD" - }, - { - "name": "pszPassword", - "type": "LPSTR" - }, - { - "name": "pcchMaxPassword", - "type": "DWORD" - } - ], - "CredPackAuthenticationBufferW": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszUserName", - "type": "LPWSTR" - }, - { - "name": "pszPassword", - "type": "LPWSTR" - }, - { - "name": "pPackedCredentials", - "type": "PBYTE" - }, - { - "name": "pcbPackedCredentials", - "type": "DWORD" - } - ], - "CredPackAuthenticationBufferA": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszUserName", - "type": "LPSTR" - }, - { - "name": "pszPassword", - "type": "LPSTR" - }, - { - "name": "pPackedCredentials", - "type": "PBYTE" - }, - { - "name": "pcbPackedCredentials", - "type": "DWORD" - } - ], - "CredProtectW": [ - { - "name": "fAsSelf", - "type": "BOOL" - }, - { - "name": "pszCredentials", - "type": "LPWSTR" - }, - { - "name": "cchCredentials", - "type": "DWORD" - }, - { - "name": "pszProtectedCredentials", - "type": "LPWSTR" - }, - { - "name": "pcchMaxChars", - "type": "DWORD" - }, - { - "name": "ProtectionType", - "type": "CRED_PROTECTION_TYPE" - } - ], - "CredProtectA": [ - { - "name": "fAsSelf", - "type": "BOOL" - }, - { - "name": "pszCredentials", - "type": "LPSTR" - }, - { - "name": "cchCredentials", - "type": "DWORD" - }, - { - "name": "pszProtectedCredentials", - "type": "LPSTR" - }, - { - "name": "pcchMaxChars", - "type": "DWORD" - }, - { - "name": "ProtectionType", - "type": "CRED_PROTECTION_TYPE" - } - ], - "CredUnprotectW": [ - { - "name": "fAsSelf", - "type": "BOOL" - }, - { - "name": "pszProtectedCredentials", - "type": "LPWSTR" - }, - { - "name": "cchProtectedCredentials", - "type": "DWORD" - }, - { - "name": "pszCredentials", - "type": "LPWSTR" - }, - { - "name": "pcchMaxChars", - "type": "DWORD" - } - ], - "CredUnprotectA": [ - { - "name": "fAsSelf", - "type": "BOOL" - }, - { - "name": "pszProtectedCredentials", - "type": "LPSTR" - }, - { - "name": "cchProtectedCredentials", - "type": "DWORD" - }, - { - "name": "pszCredentials", - "type": "LPSTR" - }, - { - "name": "pcchMaxChars", - "type": "DWORD" - } - ], - "CredIsProtectedW": [ - { - "name": "pszProtectedCredentials", - "type": "LPWSTR" - }, - { - "name": "pProtectionType", - "type": "CRED_PROTECTION_TYPE" - } - ], - "CredIsProtectedA": [ - { - "name": "pszProtectedCredentials", - "type": "LPSTR" - }, - { - "name": "pProtectionType", - "type": "CRED_PROTECTION_TYPE" - } - ], - "CredFindBestCredentialW": [ - { - "name": "TargetName", - "type": "LPCWSTR" - }, - { - "name": "Type", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "Credential", - "type": "PCREDENTIALW" - } - ], - "CredFindBestCredentialA": [ - { - "name": "TargetName", - "type": "LPCSTR" - }, - { - "name": "Type", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "Credential", - "type": "PCREDENTIALA" - } - ], - "CredGetSessionTypes": [ - { - "name": "MaximumPersistCount", - "type": "DWORD" - }, - { - "name": "MaximumPersist", - "type": "LPDWORD" - } - ], - "CredFree": [ - { - "name": "Buffer", - "type": "PVOID" - } - ], - "CredUIPromptForCredentialsW": [ - { - "name": "pUiInfo", - "type": "PCREDUI_INFOW" - }, - { - "name": "pszTargetName", - "type": "PCWSTR" - }, - { - "name": "pContext", - "type": "PCtxtHandle" - }, - { - "name": "dwAuthError", - "type": "DWORD" - }, - { - "name": "pszUserName", - "type": "PWSTR" - }, - { - "name": "ulUserNameBufferSize", - "type": "ULONG" - }, - { - "name": "pszPassword", - "type": "PWSTR" - }, - { - "name": "ulPasswordBufferSize", - "type": "ULONG" - }, - { - "name": "save", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CredUIPromptForCredentialsA": [ - { - "name": "pUiInfo", - "type": "PCREDUI_INFOA" - }, - { - "name": "pszTargetName", - "type": "PCSTR" - }, - { - "name": "pContext", - "type": "PCtxtHandle" - }, - { - "name": "dwAuthError", - "type": "DWORD" - }, - { - "name": "pszUserName", - "type": "PSTR" - }, - { - "name": "ulUserNameBufferSize", - "type": "ULONG" - }, - { - "name": "pszPassword", - "type": "PSTR" - }, - { - "name": "ulPasswordBufferSize", - "type": "ULONG" - }, - { - "name": "save", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CredUIPromptForWindowsCredentialsW": [ - { - "name": "pUiInfo", - "type": "PCREDUI_INFOW" - }, - { - "name": "dwAuthError", - "type": "DWORD" - }, - { - "name": "pulAuthPackage", - "type": "ULONG" - }, - { - "name": "pvInAuthBuffer", - "type": "LPCVOID" - }, - { - "name": "ulInAuthBufferSize", - "type": "ULONG" - }, - { - "name": "ppvOutAuthBuffer", - "type": "LPVOID" - }, - { - "name": "pulOutAuthBufferSize", - "type": "ULONG" - }, - { - "name": "pfSave", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CredUIPromptForWindowsCredentialsA": [ - { - "name": "pUiInfo", - "type": "PCREDUI_INFOA" - }, - { - "name": "dwAuthError", - "type": "DWORD" - }, - { - "name": "pulAuthPackage", - "type": "ULONG" - }, - { - "name": "pvInAuthBuffer", - "type": "LPCVOID" - }, - { - "name": "ulInAuthBufferSize", - "type": "ULONG" - }, - { - "name": "ppvOutAuthBuffer", - "type": "LPVOID" - }, - { - "name": "pulOutAuthBufferSize", - "type": "ULONG" - }, - { - "name": "pfSave", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CredUIParseUserNameW": [ - { - "name": "UserName", - "type": "PCWSTR" - }, - { - "name": "user", - "type": "WCHAR" - }, - { - "name": "userBufferSize", - "type": "ULONG" - }, - { - "name": "domain", - "type": "WCHAR" - }, - { - "name": "domainBufferSize", - "type": "ULONG" - } - ], - "CredUIParseUserNameA": [ - { - "name": "userName", - "type": "PCSTR" - }, - { - "name": "user", - "type": "CHAR" - }, - { - "name": "userBufferSize", - "type": "ULONG" - }, - { - "name": "domain", - "type": "CHAR" - }, - { - "name": "domainBufferSize", - "type": "ULONG" - } - ], - "CredUICmdLinePromptForCredentialsW": [ - { - "name": "pszTargetName", - "type": "PCWSTR" - }, - { - "name": "pContext", - "type": "PCtxtHandle" - }, - { - "name": "dwAuthError", - "type": "DWORD" - }, - { - "name": "UserName", - "type": "PWSTR" - }, - { - "name": "ulUserBufferSize", - "type": "ULONG" - }, - { - "name": "pszPassword", - "type": "PWSTR" - }, - { - "name": "ulPasswordBufferSize", - "type": "ULONG" - }, - { - "name": "pfSave", - "type": "PBOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CredUICmdLinePromptForCredentialsA": [ - { - "name": "pszTargetName", - "type": "PCSTR" - }, - { - "name": "pContext", - "type": "PCtxtHandle" - }, - { - "name": "dwAuthError", - "type": "DWORD" - }, - { - "name": "UserName", - "type": "PSTR" - }, - { - "name": "ulUserBufferSize", - "type": "ULONG" - }, - { - "name": "pszPassword", - "type": "PSTR" - }, - { - "name": "ulPasswordBufferSize", - "type": "ULONG" - }, - { - "name": "pfSave", - "type": "PBOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CredUIConfirmCredentialsW": [ - { - "name": "pszTargetName", - "type": "PCWSTR" - }, - { - "name": "bConfirm", - "type": "BOOL" - } - ], - "CredUIConfirmCredentialsA": [ - { - "name": "pszTargetName", - "type": "PCSTR" - }, - { - "name": "bConfirm", - "type": "BOOL" - } - ], - "CredUIStoreSSOCredW": [ - { - "name": "pszRealm", - "type": "PCWSTR" - }, - { - "name": "pszUsername", - "type": "PCWSTR" - }, - { - "name": "pszPassword", - "type": "PCWSTR" - }, - { - "name": "bPersist", - "type": "BOOL" - } - ], - "CredUIReadSSOCredW": [ - { - "name": "pszRealm", - "type": "PCWSTR" - }, - { - "name": "ppszUsername", - "type": "PWSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Cryptnet.json b/qiling/extensions/windows_sdk/Cryptnet.json deleted file mode 100644 index ec5bda91f..000000000 --- a/qiling/extensions/windows_sdk/Cryptnet.json +++ /dev/null @@ -1,5200 +0,0 @@ -{ - "CryptAcquireContextA": [ - { - "name": "phProv", - "type": "HCRYPTPROV" - }, - { - "name": "szContainer", - "type": "LPCSTR" - }, - { - "name": "szProvider", - "type": "LPCSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptAcquireContextW": [ - { - "name": "phProv", - "type": "HCRYPTPROV" - }, - { - "name": "szContainer", - "type": "LPCWSTR" - }, - { - "name": "szProvider", - "type": "LPCWSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptReleaseContext": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGenKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptDeriveKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "hBaseData", - "type": "HCRYPTHASH" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptDestroyKey": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - } - ], - "CryptSetKeyParam": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetKeyParam": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetHashParam": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetHashParam": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetProvParam": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetProvParam": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGenRandom": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwLen", - "type": "DWORD" - }, - { - "name": "pbBuffer", - "type": "BYTE" - } - ], - "CryptGetUserKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "phUserKey", - "type": "HCRYPTKEY" - } - ], - "CryptExportKey": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "hExpKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwBlobType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - } - ], - "CryptImportKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwDataLen", - "type": "DWORD" - }, - { - "name": "hPubKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptEncrypt": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "Final", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwBufLen", - "type": "DWORD" - } - ], - "CryptDecrypt": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "Final", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - } - ], - "CryptCreateHash": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phHash", - "type": "HCRYPTHASH" - } - ], - "CryptHashData": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptHashSessionKey": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptDestroyHash": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - } - ], - "CryptSignHashA": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "szDescription", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "pdwSigLen", - "type": "DWORD" - } - ], - "CryptSignHashW": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "szDescription", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "pdwSigLen", - "type": "DWORD" - } - ], - "CryptVerifySignatureA": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "dwSigLen", - "type": "DWORD" - }, - { - "name": "hPubKey", - "type": "HCRYPTKEY" - }, - { - "name": "szDescription", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptVerifySignatureW": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "dwSigLen", - "type": "DWORD" - }, - { - "name": "hPubKey", - "type": "HCRYPTKEY" - }, - { - "name": "szDescription", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetProviderA": [ - { - "name": "pszProvName", - "type": "LPCSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - } - ], - "CryptSetProviderW": [ - { - "name": "pszProvName", - "type": "LPCWSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - } - ], - "CryptSetProviderExA": [ - { - "name": "pszProvName", - "type": "LPCSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetProviderExW": [ - { - "name": "pszProvName", - "type": "LPCWSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetDefaultProviderA": [ - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszProvName", - "type": "LPSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptGetDefaultProviderW": [ - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszProvName", - "type": "LPWSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptEnumProviderTypesA": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szTypeName", - "type": "LPSTR" - }, - { - "name": "pcbTypeName", - "type": "DWORD" - } - ], - "CryptEnumProviderTypesW": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szTypeName", - "type": "LPWSTR" - }, - { - "name": "pcbTypeName", - "type": "DWORD" - } - ], - "CryptEnumProvidersA": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szProvName", - "type": "LPSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptEnumProvidersW": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szProvName", - "type": "LPWSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptContextAddRef": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptDuplicateKey": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptDuplicateHash": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phHash", - "type": "HCRYPTHASH" - } - ], - "GetEncSChannel": [ - { - "name": "pData", - "type": "BYTE" - }, - { - "name": "dwDecSize", - "type": "DWORD" - } - ], - "CryptFormatObject": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFormatType", - "type": "DWORD" - }, - { - "name": "dwFormatStrType", - "type": "DWORD" - }, - { - "name": "pFormatStruct", - "type": "void" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pbFormat", - "type": "void" - }, - { - "name": "pcbFormat", - "type": "DWORD" - } - ], - "CryptEncodeObjectEx": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pEncodePara", - "type": "PCRYPT_ENCODE_PARA" - }, - { - "name": "pvEncoded", - "type": "void" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CryptEncodeObject": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CryptDecodeObjectEx": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pDecodePara", - "type": "PCRYPT_DECODE_PARA" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "pcbStructInfo", - "type": "DWORD" - } - ], - "CryptDecodeObject": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "pcbStructInfo", - "type": "DWORD" - } - ], - "CryptInstallOIDFunctionAddress": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "cFuncEntry", - "type": "DWORD" - }, - { - "name": "rgFuncEntry", - "type": "CRYPT_OID_FUNC_ENTRY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptInitOIDFunctionSet": [ - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetOIDFunctionAddress": [ - { - "name": "hFuncSet", - "type": "HCRYPTOIDFUNCSET" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "ppvFuncAddr", - "type": "void" - }, - { - "name": "phFuncAddr", - "type": "HCRYPTOIDFUNCADDR" - } - ], - "CryptGetDefaultOIDDllList": [ - { - "name": "hFuncSet", - "type": "HCRYPTOIDFUNCSET" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pwszDllList", - "type": "WCHAR" - }, - { - "name": "pcchDllList", - "type": "DWORD" - } - ], - "CryptGetDefaultOIDFunctionAddress": [ - { - "name": "hFuncSet", - "type": "HCRYPTOIDFUNCSET" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pwszDll", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "ppvFuncAddr", - "type": "void" - }, - { - "name": "phFuncAddr", - "type": "HCRYPTOIDFUNCADDR" - } - ], - "CryptFreeOIDFunctionAddress": [ - { - "name": "hFuncAddr", - "type": "HCRYPTOIDFUNCADDR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptRegisterOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "pwszDll", - "type": "LPCWSTR" - }, - { - "name": "pszOverrideFuncName", - "type": "LPCSTR" - } - ], - "CryptUnregisterOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - } - ], - "CryptRegisterDefaultOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pwszDll", - "type": "LPCWSTR" - } - ], - "CryptUnregisterDefaultOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pwszDll", - "type": "LPCWSTR" - } - ], - "CryptSetOIDFunctionValue": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "pwszValueName", - "type": "LPCWSTR" - }, - { - "name": "dwValueType", - "type": "DWORD" - }, - { - "name": "pbValueData", - "type": "BYTE" - }, - { - "name": "cbValueData", - "type": "DWORD" - } - ], - "CryptGetOIDFunctionValue": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "pwszValueName", - "type": "LPCWSTR" - }, - { - "name": "pdwValueType", - "type": "DWORD" - }, - { - "name": "pbValueData", - "type": "BYTE" - }, - { - "name": "pcbValueData", - "type": "DWORD" - } - ], - "CryptEnumOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnumOIDFunc", - "type": "PFN_CRYPT_ENUM_OID_FUNC" - } - ], - "CryptFindOIDInfo": [ - { - "name": "dwKeyType", - "type": "DWORD" - }, - { - "name": "pvKey", - "type": "void" - }, - { - "name": "dwGroupId", - "type": "DWORD" - } - ], - "CryptRegisterOIDInfo": [ - { - "name": "pInfo", - "type": "PCCRYPT_OID_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptUnregisterOIDInfo": [ - { - "name": "pInfo", - "type": "PCCRYPT_OID_INFO" - } - ], - "CryptEnumOIDInfo": [ - { - "name": "dwGroupId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnumOIDInfo", - "type": "PFN_CRYPT_ENUM_OID_INFO" - } - ], - "CryptFindLocalizedName": [ - { - "name": "pwszCryptName", - "type": "LPCWSTR" - } - ], - "CryptMsgOpenToEncode": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwMsgType", - "type": "DWORD" - }, - { - "name": "pvMsgEncodeInfo", - "type": "void" - }, - { - "name": "pszInnerContentObjID", - "type": "LPSTR" - }, - { - "name": "pStreamInfo", - "type": "PCMSG_STREAM_INFO" - } - ], - "CryptMsgCalculateEncodedLength": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwMsgType", - "type": "DWORD" - }, - { - "name": "pvMsgEncodeInfo", - "type": "void" - }, - { - "name": "pszInnerContentObjID", - "type": "LPSTR" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "CryptMsgOpenToDecode": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwMsgType", - "type": "DWORD" - }, - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "pRecipientInfo", - "type": "PCERT_INFO" - }, - { - "name": "pStreamInfo", - "type": "PCMSG_STREAM_INFO" - } - ], - "CryptMsgDuplicate": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - } - ], - "CryptMsgClose": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - } - ], - "CryptMsgUpdate": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "fFinal", - "type": "BOOL" - } - ], - "CryptMsgGetParam": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "dwParamType", - "type": "DWORD" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CryptMsgControl": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwCtrlType", - "type": "DWORD" - }, - { - "name": "pvCtrlPara", - "type": "void" - } - ], - "CryptMsgVerifyCountersignatureEncoded": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pbSignerInfo", - "type": "PBYTE" - }, - { - "name": "cbSignerInfo", - "type": "DWORD" - }, - { - "name": "pbSignerInfoCountersignature", - "type": "PBYTE" - }, - { - "name": "cbSignerInfoCountersignature", - "type": "DWORD" - }, - { - "name": "pciCountersigner", - "type": "PCERT_INFO" - } - ], - "CryptMsgVerifyCountersignatureEncodedEx": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pbSignerInfo", - "type": "PBYTE" - }, - { - "name": "cbSignerInfo", - "type": "DWORD" - }, - { - "name": "pbSignerInfoCountersignature", - "type": "PBYTE" - }, - { - "name": "cbSignerInfoCountersignature", - "type": "DWORD" - }, - { - "name": "dwSignerType", - "type": "DWORD" - }, - { - "name": "pvSigner", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvExtra", - "type": "void" - } - ], - "CryptMsgCountersign": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "cCountersigners", - "type": "DWORD" - }, - { - "name": "rgCountersigners", - "type": "PCMSG_SIGNER_ENCODE_INFO" - } - ], - "CryptMsgCountersignEncoded": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pbSignerInfo", - "type": "PBYTE" - }, - { - "name": "cbSignerInfo", - "type": "DWORD" - }, - { - "name": "cCountersigners", - "type": "DWORD" - }, - { - "name": "rgCountersigners", - "type": "PCMSG_SIGNER_ENCODE_INFO" - }, - { - "name": "pbCountersignature", - "type": "PBYTE" - }, - { - "name": "pcbCountersignature", - "type": "PDWORD" - } - ], - "CertOpenStore": [ - { - "name": "lpszStoreProvider", - "type": "LPCSTR" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvPara", - "type": "void" - } - ], - "CertDuplicateStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - } - ], - "CertSaveStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "dwSaveAs", - "type": "DWORD" - }, - { - "name": "dwSaveTo", - "type": "DWORD" - }, - { - "name": "pvSaveToPara", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertCloseStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertGetSubjectCertificateFromStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertId", - "type": "PCERT_INFO" - } - ], - "CertEnumCertificatesInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pPrevCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertFindCertificateInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFindFlags", - "type": "DWORD" - }, - { - "name": "dwFindType", - "type": "DWORD" - }, - { - "name": "pvFindPara", - "type": "void" - }, - { - "name": "pPrevCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertGetIssuerCertificateFromStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pSubjectContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pPrevIssuerContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CertVerifySubjectCertificateContext": [ - { - "name": "pSubject", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pIssuer", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CertDuplicateCertificateContext": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertCreateCertificateContext": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCertEncoded", - "type": "BYTE" - }, - { - "name": "cbCertEncoded", - "type": "DWORD" - } - ], - "CertFreeCertificateContext": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertSetCertificateContextProperty": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CertGetCertificateContextProperty": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CertEnumCertificateContextProperties": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - } - ], - "CertCreateCTLEntryFromCertificateContextProperties": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "cOptAttr", - "type": "DWORD" - }, - { - "name": "rgOptAttr", - "type": "PCRYPT_ATTRIBUTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pCtlEntry", - "type": "PCTL_ENTRY" - }, - { - "name": "pcbCtlEntry", - "type": "DWORD" - } - ], - "CertSetCertificateContextPropertiesFromCTLEntry": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pCtlEntry", - "type": "PCTL_ENTRY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertGetCRLFromStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pIssuerContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pPrevCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CertEnumCRLsInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pPrevCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertFindCRLInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFindFlags", - "type": "DWORD" - }, - { - "name": "dwFindType", - "type": "DWORD" - }, - { - "name": "pvFindPara", - "type": "void" - }, - { - "name": "pPrevCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertDuplicateCRLContext": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertCreateCRLContext": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCrlEncoded", - "type": "BYTE" - }, - { - "name": "cbCrlEncoded", - "type": "DWORD" - } - ], - "CertFreeCRLContext": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertSetCRLContextProperty": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CertGetCRLContextProperty": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CertEnumCRLContextProperties": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - } - ], - "CertFindCertificateInCRL": [ - { - "name": "pCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "ppCrlEntry", - "type": "PCRL_ENTRY" - } - ], - "CertIsValidCRLForCertificate": [ - { - "name": "pCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pCrl", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CertAddEncodedCertificateToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCertEncoded", - "type": "BYTE" - }, - { - "name": "cbCertEncoded", - "type": "DWORD" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertAddCertificateContextToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertAddSerializedElementToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pbElement", - "type": "BYTE" - }, - { - "name": "cbElement", - "type": "DWORD" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContextTypeFlags", - "type": "DWORD" - }, - { - "name": "pdwContextType", - "type": "DWORD" - }, - { - "name": "ppvContext", - "type": "void" - } - ], - "CertDeleteCertificateFromStore": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertAddEncodedCRLToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCrlEncoded", - "type": "BYTE" - }, - { - "name": "cbCrlEncoded", - "type": "DWORD" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertAddCRLContextToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertDeleteCRLFromStore": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertSerializeCertificateStoreElement": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbElement", - "type": "BYTE" - }, - { - "name": "pcbElement", - "type": "DWORD" - } - ], - "CertSerializeCRLStoreElement": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbElement", - "type": "BYTE" - }, - { - "name": "pcbElement", - "type": "DWORD" - } - ], - "CertDuplicateCTLContext": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertCreateCTLContext": [ - { - "name": "dwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCtlEncoded", - "type": "BYTE" - }, - { - "name": "cbCtlEncoded", - "type": "DWORD" - } - ], - "CertFreeCTLContext": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertSetCTLContextProperty": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CertGetCTLContextProperty": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CertEnumCTLContextProperties": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - } - ], - "CertEnumCTLsInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pPrevCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertFindSubjectInCTL": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "dwSubjectType", - "type": "DWORD" - }, - { - "name": "pvSubject", - "type": "void" - }, - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertFindCTLInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFindFlags", - "type": "DWORD" - }, - { - "name": "dwFindType", - "type": "DWORD" - }, - { - "name": "pvFindPara", - "type": "void" - }, - { - "name": "pPrevCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertAddEncodedCTLToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCtlEncoded", - "type": "BYTE" - }, - { - "name": "cbCtlEncoded", - "type": "DWORD" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertAddCTLContextToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertSerializeCTLStoreElement": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbElement", - "type": "BYTE" - }, - { - "name": "pcbElement", - "type": "DWORD" - } - ], - "CertDeleteCTLFromStore": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertAddCertificateLinkToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertAddCRLLinkToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertAddCTLLinkToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertAddStoreToCollection": [ - { - "name": "hCollectionStore", - "type": "HCERTSTORE" - }, - { - "name": "hSiblingStore", - "type": "HCERTSTORE" - }, - { - "name": "dwUpdateFlags", - "type": "DWORD" - }, - { - "name": "dwPriority", - "type": "DWORD" - } - ], - "CertRemoveStoreFromCollection": [ - { - "name": "hCollectionStore", - "type": "HCERTSTORE" - }, - { - "name": "hSiblingStore", - "type": "HCERTSTORE" - } - ], - "CertControlStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwCtrlType", - "type": "DWORD" - }, - { - "name": "pvCtrlPara", - "type": "void" - } - ], - "CertSetStoreProperty": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CertGetStoreProperty": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CertRegisterSystemStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pStoreInfo", - "type": "PCERT_SYSTEM_STORE_INFO" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CertRegisterPhysicalStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszStoreName", - "type": "LPCWSTR" - }, - { - "name": "pStoreInfo", - "type": "PCERT_PHYSICAL_STORE_INFO" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CertUnregisterSystemStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertUnregisterPhysicalStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszStoreName", - "type": "LPCWSTR" - } - ], - "CertEnumSystemStoreLocation": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnum", - "type": "PFN_CERT_ENUM_SYSTEM_STORE_LOCATION" - } - ], - "CertEnumSystemStore": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvSystemStoreLocationPara", - "type": "void" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnum", - "type": "PFN_CERT_ENUM_SYSTEM_STORE" - } - ], - "CertEnumPhysicalStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnum", - "type": "PFN_CERT_ENUM_PHYSICAL_STORE" - } - ], - "CertGetEnhancedKeyUsage": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pUsage", - "type": "PCERT_ENHKEY_USAGE" - }, - { - "name": "pcbUsage", - "type": "DWORD" - } - ], - "CertSetEnhancedKeyUsage": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pUsage", - "type": "PCERT_ENHKEY_USAGE" - } - ], - "CertAddEnhancedKeyUsageIdentifier": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pszUsageIdentifier", - "type": "LPCSTR" - } - ], - "CertRemoveEnhancedKeyUsageIdentifier": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pszUsageIdentifier", - "type": "LPCSTR" - } - ], - "CertGetValidUsages": [ - { - "name": "cCerts", - "type": "DWORD" - }, - { - "name": "rghCerts", - "type": "PCCERT_CONTEXT" - }, - { - "name": "cNumOIDs", - "type": "int" - }, - { - "name": "rghOIDs", - "type": "LPSTR" - }, - { - "name": "pcbOIDs", - "type": "DWORD" - } - ], - "CryptMsgGetAndVerifySigner": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "cSignerStore", - "type": "DWORD" - }, - { - "name": "rghSignerStore", - "type": "HCERTSTORE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "ppSigner", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pdwSignerIndex", - "type": "DWORD" - } - ], - "CryptMsgSignCTL": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "pbCtlContent", - "type": "BYTE" - }, - { - "name": "cbCtlContent", - "type": "DWORD" - }, - { - "name": "pSignInfo", - "type": "PCMSG_SIGNED_ENCODE_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CryptMsgEncodeAndSignCTL": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "pCtlInfo", - "type": "PCTL_INFO" - }, - { - "name": "pSignInfo", - "type": "PCMSG_SIGNED_ENCODE_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CertFindSubjectInSortedCTL": [ - { - "name": "pSubjectIdentifier", - "type": "PCRYPT_DATA_BLOB" - }, - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pEncodedAttributes", - "type": "PCRYPT_DER_BLOB" - } - ], - "CertEnumSubjectInSortedCTL": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "ppvNextSubject", - "type": "void" - }, - { - "name": "pSubjectIdentifier", - "type": "PCRYPT_DER_BLOB" - }, - { - "name": "pEncodedAttributes", - "type": "PCRYPT_DER_BLOB" - } - ], - "CertVerifyCTLUsage": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "dwSubjectType", - "type": "DWORD" - }, - { - "name": "pvSubject", - "type": "void" - }, - { - "name": "pSubjectUsage", - "type": "PCTL_USAGE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pVerifyUsagePara", - "type": "PCTL_VERIFY_USAGE_PARA" - }, - { - "name": "pVerifyUsageStatus", - "type": "PCTL_VERIFY_USAGE_STATUS" - } - ], - "CertVerifyRevocation": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "dwRevType", - "type": "DWORD" - }, - { - "name": "cContext", - "type": "DWORD" - }, - { - "name": "rgpvContext", - "type": "PVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pRevPara", - "type": "PCERT_REVOCATION_PARA" - }, - { - "name": "pRevStatus", - "type": "PCERT_REVOCATION_STATUS" - } - ], - "CertCompareIntegerBlob": [ - { - "name": "pInt1", - "type": "PCRYPT_INTEGER_BLOB" - }, - { - "name": "pInt2", - "type": "PCRYPT_INTEGER_BLOB" - } - ], - "CertCompareCertificate": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertId1", - "type": "PCERT_INFO" - }, - { - "name": "pCertId2", - "type": "PCERT_INFO" - } - ], - "CertCompareCertificateName": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertName1", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "pCertName2", - "type": "PCERT_NAME_BLOB" - } - ], - "CertIsRDNAttrsInCertificateName": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pCertName", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "pRDN", - "type": "PCERT_RDN" - } - ], - "CertComparePublicKeyInfo": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pPublicKey1", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pPublicKey2", - "type": "PCERT_PUBLIC_KEY_INFO" - } - ], - "CertGetPublicKeyLength": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pPublicKey", - "type": "PCERT_PUBLIC_KEY_INFO" - } - ], - "CryptVerifyCertificateSignature": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pPublicKey", - "type": "PCERT_PUBLIC_KEY_INFO" - } - ], - "CryptVerifyCertificateSignatureEx": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwSubjectType", - "type": "DWORD" - }, - { - "name": "pvSubject", - "type": "void" - }, - { - "name": "dwIssuerType", - "type": "DWORD" - }, - { - "name": "pvIssuer", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvExtra", - "type": "void" - } - ], - "CertIsStrongHashToSign": [ - { - "name": "pStrongSignPara", - "type": "PCCERT_STRONG_SIGN_PARA" - }, - { - "name": "pwszCNGHashAlgid", - "type": "LPCWSTR" - }, - { - "name": "pSigningCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptHashToBeSigned": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptHashCertificate": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptHashCertificate2": [ - { - "name": "pwszCNGHashAlgid", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptSignCertificate": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbEncodedToBeSigned", - "type": "BYTE" - }, - { - "name": "cbEncodedToBeSigned", - "type": "DWORD" - }, - { - "name": "pSignatureAlgorithm", - "type": "PCRYPT_ALGORITHM_IDENTIFIER" - }, - { - "name": "pvHashAuxInfo", - "type": "void" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "pcbSignature", - "type": "DWORD" - } - ], - "CryptSignAndEncodeCertificate": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "pSignatureAlgorithm", - "type": "PCRYPT_ALGORITHM_IDENTIFIER" - }, - { - "name": "pvHashAuxInfo", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CertVerifyTimeValidity": [ - { - "name": "pTimeToVerify", - "type": "LPFILETIME" - }, - { - "name": "pCertInfo", - "type": "PCERT_INFO" - } - ], - "CertVerifyCRLTimeValidity": [ - { - "name": "pTimeToVerify", - "type": "LPFILETIME" - }, - { - "name": "pCrlInfo", - "type": "PCRL_INFO" - } - ], - "CertVerifyValidityNesting": [ - { - "name": "pSubjectInfo", - "type": "PCERT_INFO" - }, - { - "name": "pIssuerInfo", - "type": "PCERT_INFO" - } - ], - "CertVerifyCRLRevocation": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertId", - "type": "PCERT_INFO" - }, - { - "name": "cCrlInfo", - "type": "DWORD" - }, - { - "name": "rgpCrlInfo", - "type": "PCRL_INFO" - } - ], - "CertAlgIdToOID": [ - { - "name": "dwAlgId", - "type": "DWORD" - } - ], - "CertOIDToAlgId": [ - { - "name": "pszObjId", - "type": "LPCSTR" - } - ], - "CertFindExtension": [ - { - "name": "pszObjId", - "type": "LPCSTR" - }, - { - "name": "cExtensions", - "type": "DWORD" - }, - { - "name": "rgExtensions", - "type": "CERT_EXTENSION" - } - ], - "CertFindAttribute": [ - { - "name": "pszObjId", - "type": "LPCSTR" - }, - { - "name": "cAttr", - "type": "DWORD" - }, - { - "name": "rgAttr", - "type": "CRYPT_ATTRIBUTE" - } - ], - "CertFindRDNAttr": [ - { - "name": "pszObjId", - "type": "LPCSTR" - }, - { - "name": "pName", - "type": "PCERT_NAME_INFO" - } - ], - "CertGetIntendedKeyUsage": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertInfo", - "type": "PCERT_INFO" - }, - { - "name": "pbKeyUsage", - "type": "BYTE" - }, - { - "name": "cbKeyUsage", - "type": "DWORD" - } - ], - "CryptInstallDefaultContext": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwDefaultType", - "type": "DWORD" - }, - { - "name": "pvDefaultPara", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "phDefaultContext", - "type": "HCRYPTDEFAULTCONTEXT" - } - ], - "CryptUninstallDefaultContext": [ - { - "name": "hDefaultContext", - "type": "HCRYPTDEFAULTCONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CryptExportPublicKeyInfo": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pcbInfo", - "type": "DWORD" - } - ], - "CryptExportPublicKeyInfoEx": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszPublicKeyObjId", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pcbInfo", - "type": "DWORD" - } - ], - "CryptExportPublicKeyInfoFromBCryptKeyHandle": [ - { - "name": "hBCryptKey", - "type": "BCRYPT_KEY_HANDLE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszPublicKeyObjId", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pcbInfo", - "type": "DWORD" - } - ], - "CryptImportPublicKeyInfo": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptImportPublicKeyInfoEx": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "aiKeyAlg", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptImportPublicKeyInfoEx2": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "phKey", - "type": "BCRYPT_KEY_HANDLE" - } - ], - "CryptAcquireCertificatePrivateKey": [ - { - "name": "pCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvParameters", - "type": "void" - }, - { - "name": "phCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "pdwKeySpec", - "type": "DWORD" - }, - { - "name": "pfCallerFreeProvOrNCryptKey", - "type": "BOOL" - } - ], - "CryptFindCertificateKeyProvInfo": [ - { - "name": "pCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CryptImportPKCS8": [ - { - "name": "sPrivateKeyAndParams", - "type": "CRYPT_PKCS8_IMPORT_PARAMS" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "pvAuxInfo", - "type": "void" - } - ], - "CryptExportPKCS8": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "pszPrivateKeyObjId", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "pbPrivateKeyBlob", - "type": "BYTE" - }, - { - "name": "pcbPrivateKeyBlob", - "type": "DWORD" - } - ], - "CryptExportPKCS8Ex": [ - { - "name": "psExportParams", - "type": "CRYPT_PKCS8_EXPORT_PARAMS" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "pbPrivateKeyBlob", - "type": "BYTE" - }, - { - "name": "pcbPrivateKeyBlob", - "type": "DWORD" - } - ], - "CryptHashPublicKeyInfo": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CertRDNValueToStrA": [ - { - "name": "dwValueType", - "type": "DWORD" - }, - { - "name": "pValue", - "type": "PCERT_RDN_VALUE_BLOB" - }, - { - "name": "psz", - "type": "LPSTR" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "CertRDNValueToStrW": [ - { - "name": "dwValueType", - "type": "DWORD" - }, - { - "name": "pValue", - "type": "PCERT_RDN_VALUE_BLOB" - }, - { - "name": "psz", - "type": "LPWSTR" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "CertNameToStrA": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pName", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "dwStrType", - "type": "DWORD" - }, - { - "name": "psz", - "type": "LPSTR" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "CertNameToStrW": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pName", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "dwStrType", - "type": "DWORD" - }, - { - "name": "psz", - "type": "LPWSTR" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "CertStrToNameA": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszX500", - "type": "LPCSTR" - }, - { - "name": "dwStrType", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - }, - { - "name": "ppszError", - "type": "LPCSTR" - } - ], - "CertStrToNameW": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszX500", - "type": "LPCWSTR" - }, - { - "name": "dwStrType", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - }, - { - "name": "ppszError", - "type": "LPCWSTR" - } - ], - "CertGetNameStringA": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvTypePara", - "type": "void" - }, - { - "name": "pszNameString", - "type": "LPSTR" - }, - { - "name": "cchNameString", - "type": "DWORD" - } - ], - "CertGetNameStringW": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvTypePara", - "type": "void" - }, - { - "name": "pszNameString", - "type": "LPWSTR" - }, - { - "name": "cchNameString", - "type": "DWORD" - } - ], - "CryptSignMessage": [ - { - "name": "pSignPara", - "type": "PCRYPT_SIGN_MESSAGE_PARA" - }, - { - "name": "fDetachedSignature", - "type": "BOOL" - }, - { - "name": "cToBeSigned", - "type": "DWORD" - }, - { - "name": "rgpbToBeSigned", - "type": "BYTE" - }, - { - "name": "rgcbToBeSigned", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "pcbSignedBlob", - "type": "DWORD" - } - ], - "CryptVerifyMessageSignature": [ - { - "name": "pVerifyPara", - "type": "PCRYPT_VERIFY_MESSAGE_PARA" - }, - { - "name": "dwSignerIndex", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "cbSignedBlob", - "type": "DWORD" - }, - { - "name": "pbDecoded", - "type": "BYTE" - }, - { - "name": "pcbDecoded", - "type": "DWORD" - }, - { - "name": "ppSignerCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptGetMessageSignerCount": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "cbSignedBlob", - "type": "DWORD" - } - ], - "CryptGetMessageCertificates": [ - { - "name": "dwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "cbSignedBlob", - "type": "DWORD" - } - ], - "CryptVerifyDetachedMessageSignature": [ - { - "name": "pVerifyPara", - "type": "PCRYPT_VERIFY_MESSAGE_PARA" - }, - { - "name": "dwSignerIndex", - "type": "DWORD" - }, - { - "name": "pbDetachedSignBlob", - "type": "BYTE" - }, - { - "name": "cbDetachedSignBlob", - "type": "DWORD" - }, - { - "name": "cToBeSigned", - "type": "DWORD" - }, - { - "name": "rgpbToBeSigned", - "type": "BYTE" - }, - { - "name": "rgcbToBeSigned", - "type": "DWORD" - }, - { - "name": "ppSignerCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptEncryptMessage": [ - { - "name": "pEncryptPara", - "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" - }, - { - "name": "cRecipientCert", - "type": "DWORD" - }, - { - "name": "rgpRecipientCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pbToBeEncrypted", - "type": "BYTE" - }, - { - "name": "cbToBeEncrypted", - "type": "DWORD" - }, - { - "name": "pbEncryptedBlob", - "type": "BYTE" - }, - { - "name": "pcbEncryptedBlob", - "type": "DWORD" - } - ], - "CryptDecryptMessage": [ - { - "name": "pDecryptPara", - "type": "PCRYPT_DECRYPT_MESSAGE_PARA" - }, - { - "name": "pbEncryptedBlob", - "type": "BYTE" - }, - { - "name": "cbEncryptedBlob", - "type": "DWORD" - }, - { - "name": "pbDecrypted", - "type": "BYTE" - }, - { - "name": "pcbDecrypted", - "type": "DWORD" - }, - { - "name": "ppXchgCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptSignAndEncryptMessage": [ - { - "name": "pSignPara", - "type": "PCRYPT_SIGN_MESSAGE_PARA" - }, - { - "name": "pEncryptPara", - "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" - }, - { - "name": "cRecipientCert", - "type": "DWORD" - }, - { - "name": "rgpRecipientCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pbToBeSignedAndEncrypted", - "type": "BYTE" - }, - { - "name": "cbToBeSignedAndEncrypted", - "type": "DWORD" - }, - { - "name": "pbSignedAndEncryptedBlob", - "type": "BYTE" - }, - { - "name": "pcbSignedAndEncryptedBlob", - "type": "DWORD" - } - ], - "CryptDecryptAndVerifyMessageSignature": [ - { - "name": "pDecryptPara", - "type": "PCRYPT_DECRYPT_MESSAGE_PARA" - }, - { - "name": "pVerifyPara", - "type": "PCRYPT_VERIFY_MESSAGE_PARA" - }, - { - "name": "dwSignerIndex", - "type": "DWORD" - }, - { - "name": "pbEncryptedBlob", - "type": "BYTE" - }, - { - "name": "cbEncryptedBlob", - "type": "DWORD" - }, - { - "name": "pbDecrypted", - "type": "BYTE" - }, - { - "name": "pcbDecrypted", - "type": "DWORD" - }, - { - "name": "ppXchgCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "ppSignerCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptDecodeMessage": [ - { - "name": "dwMsgTypeFlags", - "type": "DWORD" - }, - { - "name": "pDecryptPara", - "type": "PCRYPT_DECRYPT_MESSAGE_PARA" - }, - { - "name": "pVerifyPara", - "type": "PCRYPT_VERIFY_MESSAGE_PARA" - }, - { - "name": "dwSignerIndex", - "type": "DWORD" - }, - { - "name": "pbEncodedBlob", - "type": "BYTE" - }, - { - "name": "cbEncodedBlob", - "type": "DWORD" - }, - { - "name": "dwPrevInnerContentType", - "type": "DWORD" - }, - { - "name": "pdwMsgType", - "type": "DWORD" - }, - { - "name": "pdwInnerContentType", - "type": "DWORD" - }, - { - "name": "pbDecoded", - "type": "BYTE" - }, - { - "name": "pcbDecoded", - "type": "DWORD" - }, - { - "name": "ppXchgCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "ppSignerCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptHashMessage": [ - { - "name": "pHashPara", - "type": "PCRYPT_HASH_MESSAGE_PARA" - }, - { - "name": "fDetachedHash", - "type": "BOOL" - }, - { - "name": "cToBeHashed", - "type": "DWORD" - }, - { - "name": "rgpbToBeHashed", - "type": "BYTE" - }, - { - "name": "rgcbToBeHashed", - "type": "DWORD" - }, - { - "name": "pbHashedBlob", - "type": "BYTE" - }, - { - "name": "pcbHashedBlob", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptVerifyMessageHash": [ - { - "name": "pHashPara", - "type": "PCRYPT_HASH_MESSAGE_PARA" - }, - { - "name": "pbHashedBlob", - "type": "BYTE" - }, - { - "name": "cbHashedBlob", - "type": "DWORD" - }, - { - "name": "pbToBeHashed", - "type": "BYTE" - }, - { - "name": "pcbToBeHashed", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptVerifyDetachedMessageHash": [ - { - "name": "pHashPara", - "type": "PCRYPT_HASH_MESSAGE_PARA" - }, - { - "name": "pbDetachedHashBlob", - "type": "BYTE" - }, - { - "name": "cbDetachedHashBlob", - "type": "DWORD" - }, - { - "name": "cToBeHashed", - "type": "DWORD" - }, - { - "name": "rgpbToBeHashed", - "type": "BYTE" - }, - { - "name": "rgcbToBeHashed", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptSignMessageWithKey": [ - { - "name": "pSignPara", - "type": "PCRYPT_KEY_SIGN_MESSAGE_PARA" - }, - { - "name": "pbToBeSigned", - "type": "BYTE" - }, - { - "name": "cbToBeSigned", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "pcbSignedBlob", - "type": "DWORD" - } - ], - "CryptVerifyMessageSignatureWithKey": [ - { - "name": "pVerifyPara", - "type": "PCRYPT_KEY_VERIFY_MESSAGE_PARA" - }, - { - "name": "pPublicKeyInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "cbSignedBlob", - "type": "DWORD" - }, - { - "name": "pbDecoded", - "type": "BYTE" - }, - { - "name": "pcbDecoded", - "type": "DWORD" - } - ], - "CertOpenSystemStoreA": [ - { - "name": "hProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "szSubsystemProtocol", - "type": "LPCSTR" - } - ], - "CertOpenSystemStoreW": [ - { - "name": "hProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "szSubsystemProtocol", - "type": "LPCWSTR" - } - ], - "CertAddEncodedCertificateToSystemStoreA": [ - { - "name": "szCertStoreName", - "type": "LPCSTR" - }, - { - "name": "pbCertEncoded", - "type": "BYTE" - }, - { - "name": "cbCertEncoded", - "type": "DWORD" - } - ], - "CertAddEncodedCertificateToSystemStoreW": [ - { - "name": "szCertStoreName", - "type": "LPCWSTR" - }, - { - "name": "pbCertEncoded", - "type": "BYTE" - }, - { - "name": "cbCertEncoded", - "type": "DWORD" - } - ], - "CryptQueryObject": [ - { - "name": "dwObjectType", - "type": "DWORD" - }, - { - "name": "pvObject", - "type": "void" - }, - { - "name": "dwExpectedContentTypeFlags", - "type": "DWORD" - }, - { - "name": "dwExpectedFormatTypeFlags", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "pdwContentType", - "type": "DWORD" - }, - { - "name": "pdwFormatType", - "type": "DWORD" - }, - { - "name": "phCertStore", - "type": "HCERTSTORE" - }, - { - "name": "phMsg", - "type": "HCRYPTMSG" - }, - { - "name": "ppvContext", - "type": "void" - } - ], - "CryptMemAlloc": [ - { - "name": "cbSize", - "type": "ULONG" - } - ], - "CryptMemRealloc": [ - { - "name": "pv", - "type": "LPVOID" - }, - { - "name": "cbSize", - "type": "ULONG" - } - ], - "CryptMemFree": [ - { - "name": "pv", - "type": "LPVOID" - } - ], - "CryptCreateAsyncHandle": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phAsync", - "type": "PHCRYPTASYNC" - } - ], - "CryptGetAsyncParam": [ - { - "name": "hAsync", - "type": "HCRYPTASYNC" - }, - { - "name": "pszParamOid", - "type": "LPSTR" - }, - { - "name": "ppvParam", - "type": "LPVOID" - }, - { - "name": "ppfnFree", - "type": "PFN_CRYPT_ASYNC_PARAM_FREE_FUNC" - } - ], - "CryptCloseAsyncHandle": [ - { - "name": "hAsync", - "type": "HCRYPTASYNC" - } - ], - "CryptRetrieveObjectByUrlA": [ - { - "name": "pszUrl", - "type": "LPCSTR" - }, - { - "name": "pszObjectOid", - "type": "LPCSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "ppvObject", - "type": "LPVOID" - }, - { - "name": "hAsyncRetrieve", - "type": "HCRYPTASYNC" - }, - { - "name": "pCredentials", - "type": "PCRYPT_CREDENTIALS" - }, - { - "name": "pvVerify", - "type": "LPVOID" - }, - { - "name": "pAuxInfo", - "type": "PCRYPT_RETRIEVE_AUX_INFO" - } - ], - "CryptRetrieveObjectByUrlW": [ - { - "name": "pszUrl", - "type": "LPCWSTR" - }, - { - "name": "pszObjectOid", - "type": "LPCSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "ppvObject", - "type": "LPVOID" - }, - { - "name": "hAsyncRetrieve", - "type": "HCRYPTASYNC" - }, - { - "name": "pCredentials", - "type": "PCRYPT_CREDENTIALS" - }, - { - "name": "pvVerify", - "type": "LPVOID" - }, - { - "name": "pAuxInfo", - "type": "PCRYPT_RETRIEVE_AUX_INFO" - } - ], - "CryptGetObjectUrl": [ - { - "name": "pszUrlOid", - "type": "LPCSTR" - }, - { - "name": "pvPara", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pUrlArray", - "type": "PCRYPT_URL_ARRAY" - }, - { - "name": "pcbUrlArray", - "type": "DWORD" - }, - { - "name": "pUrlInfo", - "type": "PCRYPT_URL_INFO" - }, - { - "name": "pcbUrlInfo", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "LPVOID" - } - ], - "CryptGetTimeValidObject": [ - { - "name": "pszTimeValidOid", - "type": "LPCSTR" - }, - { - "name": "pvPara", - "type": "LPVOID" - }, - { - "name": "pIssuer", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pftValidFor", - "type": "LPFILETIME" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "ppvObject", - "type": "LPVOID" - }, - { - "name": "pCredentials", - "type": "PCRYPT_CREDENTIALS" - }, - { - "name": "pExtraInfo", - "type": "PCRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO" - } - ], - "CertCreateSelfSignCertificate": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "pSubjectIssuerBlob", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pKeyProvInfo", - "type": "PCRYPT_KEY_PROV_INFO" - }, - { - "name": "pSignatureAlgorithm", - "type": "PCRYPT_ALGORITHM_IDENTIFIER" - }, - { - "name": "pStartTime", - "type": "PSYSTEMTIME" - }, - { - "name": "pEndTime", - "type": "PSYSTEMTIME" - }, - { - "name": "pExtensions", - "type": "PCERT_EXTENSIONS" - } - ], - "CryptGetKeyIdentifierProperty": [ - { - "name": "pKeyIdentifier", - "type": "CRYPT_HASH_BLOB" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszComputerName", - "type": "LPCWSTR" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CryptSetKeyIdentifierProperty": [ - { - "name": "pKeyIdentifier", - "type": "CRYPT_HASH_BLOB" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszComputerName", - "type": "LPCWSTR" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CryptEnumKeyIdentifierProperties": [ - { - "name": "pKeyIdentifier", - "type": "CRYPT_HASH_BLOB" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszComputerName", - "type": "LPCWSTR" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnum", - "type": "PFN_CRYPT_ENUM_KEYID_PROP" - } - ], - "CryptCreateKeyIdentifierFromCSP": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszPubKeyOID", - "type": "LPCSTR" - }, - { - "name": "pPubKeyStruc", - "type": "PUBLICKEYSTRUC" - }, - { - "name": "cbPubKeyStruc", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pbHash", - "type": "BYTE" - }, - { - "name": "pcbHash", - "type": "DWORD" - } - ], - "CertCreateCertificateChainEngine": [ - { - "name": "pConfig", - "type": "PCERT_CHAIN_ENGINE_CONFIG" - }, - { - "name": "phChainEngine", - "type": "HCERTCHAINENGINE" - } - ], - "CertFreeCertificateChainEngine": [ - { - "name": "hChainEngine", - "type": "HCERTCHAINENGINE" - } - ], - "CertResyncCertificateChainEngine": [ - { - "name": "hChainEngine", - "type": "HCERTCHAINENGINE" - } - ], - "CertGetCertificateChain": [ - { - "name": "hChainEngine", - "type": "HCERTCHAINENGINE" - }, - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pTime", - "type": "LPFILETIME" - }, - { - "name": "hAdditionalStore", - "type": "HCERTSTORE" - }, - { - "name": "pChainPara", - "type": "PCERT_CHAIN_PARA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "LPVOID" - }, - { - "name": "ppChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertFreeCertificateChain": [ - { - "name": "pChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertDuplicateCertificateChain": [ - { - "name": "pChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertFindChainInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFindFlags", - "type": "DWORD" - }, - { - "name": "dwFindType", - "type": "DWORD" - }, - { - "name": "pvFindPara", - "type": "void" - }, - { - "name": "pPrevChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertVerifyCertificateChainPolicy": [ - { - "name": "pszPolicyOID", - "type": "LPCSTR" - }, - { - "name": "pChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - }, - { - "name": "pPolicyPara", - "type": "PCERT_CHAIN_POLICY_PARA" - }, - { - "name": "pPolicyStatus", - "type": "PCERT_CHAIN_POLICY_STATUS" - } - ], - "CryptStringToBinaryA": [ - { - "name": "pszString", - "type": "LPCSTR" - }, - { - "name": "cchString", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbBinary", - "type": "BYTE" - }, - { - "name": "pcbBinary", - "type": "DWORD" - }, - { - "name": "pdwSkip", - "type": "DWORD" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CryptStringToBinaryW": [ - { - "name": "pszString", - "type": "LPCWSTR" - }, - { - "name": "cchString", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbBinary", - "type": "BYTE" - }, - { - "name": "pcbBinary", - "type": "DWORD" - }, - { - "name": "pdwSkip", - "type": "DWORD" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CryptBinaryToStringA": [ - { - "name": "pbBinary", - "type": "BYTE" - }, - { - "name": "cbBinary", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszString", - "type": "LPSTR" - }, - { - "name": "pcchString", - "type": "DWORD" - } - ], - "CryptBinaryToStringW": [ - { - "name": "pbBinary", - "type": "BYTE" - }, - { - "name": "cbBinary", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszString", - "type": "LPWSTR" - }, - { - "name": "pcchString", - "type": "DWORD" - } - ], - "PFXImportCertStore": [ - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - }, - { - "name": "szPassword", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PFXIsPFXBlob": [ - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - } - ], - "PFXVerifyPassword": [ - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - }, - { - "name": "szPassword", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PFXExportCertStoreEx": [ - { - "name": "hStore", - "type": "HCERTSTORE" - }, - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - }, - { - "name": "szPassword", - "type": "LPCWSTR" - }, - { - "name": "pvPara", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PFXExportCertStore": [ - { - "name": "hStore", - "type": "HCERTSTORE" - }, - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - }, - { - "name": "szPassword", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertOpenServerOcspResponse": [ - { - "name": "pChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pOpenPara", - "type": "PCERT_SERVER_OCSP_RESPONSE_OPEN_PARA" - } - ], - "CertAddRefServerOcspResponse": [ - { - "name": "hServerOcspResponse", - "type": "HCERT_SERVER_OCSP_RESPONSE" - } - ], - "CertCloseServerOcspResponse": [ - { - "name": "hServerOcspResponse", - "type": "HCERT_SERVER_OCSP_RESPONSE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertGetServerOcspResponseContext": [ - { - "name": "hServerOcspResponse", - "type": "HCERT_SERVER_OCSP_RESPONSE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "LPVOID" - } - ], - "CertAddRefServerOcspResponseContext": [ - { - "name": "pServerOcspResponseContext", - "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" - } - ], - "CertFreeServerOcspResponseContext": [ - { - "name": "pServerOcspResponseContext", - "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" - } - ], - "CertRetrieveLogoOrBiometricInfo": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "lpszLogoOrBiometricType", - "type": "LPCSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "ppbData", - "type": "BYTE" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "ppwszMimeType", - "type": "LPWSTR" - } - ], - "CertSelectCertificateChains": [ - { - "name": "pSelectionContext", - "type": "LPCGUID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pChainParameters", - "type": "PCCERT_SELECT_CHAIN_PARA" - }, - { - "name": "cCriteria", - "type": "DWORD" - }, - { - "name": "rgpCriteria", - "type": "PCCERT_SELECT_CRITERIA" - }, - { - "name": "hStore", - "type": "HCERTSTORE" - }, - { - "name": "pcSelection", - "type": "PDWORD" - }, - { - "name": "pprgpSelection", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertFreeCertificateChainList": [ - { - "name": "prgpSelection", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CryptRetrieveTimeStamp": [ - { - "name": "wszUrl", - "type": "LPCWSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "pszHashId", - "type": "LPCSTR" - }, - { - "name": "pPara", - "type": "CRYPT_TIMESTAMP_PARA" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "ppTsContext", - "type": "PCRYPT_TIMESTAMP_CONTEXT" - }, - { - "name": "ppTsSigner", - "type": "PCCERT_CONTEXT" - }, - { - "name": "phStore", - "type": "HCERTSTORE" - } - ], - "CryptVerifyTimeStampSignature": [ - { - "name": "pbTSContentInfo", - "type": "BYTE" - }, - { - "name": "cbTSContentInfo", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "hAdditionalStore", - "type": "HCERTSTORE" - }, - { - "name": "ppTsContext", - "type": "PCRYPT_TIMESTAMP_CONTEXT" - }, - { - "name": "ppTsSigner", - "type": "PCCERT_CONTEXT" - }, - { - "name": "phStore", - "type": "HCERTSTORE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/D3DCompiler_47.json b/qiling/extensions/windows_sdk/D3DCompiler_47.json deleted file mode 100644 index 6a457e9b6..000000000 --- a/qiling/extensions/windows_sdk/D3DCompiler_47.json +++ /dev/null @@ -1,568 +0,0 @@ -{ - "D3DReadFileToBlob": [ - { - "name": "pFileName", - "type": "LPCWSTR" - }, - { - "name": "ppContents", - "type": "ID3DBlob" - } - ], - "D3DWriteBlobToFile": [ - { - "name": "pBlob", - "type": "ID3DBlob" - }, - { - "name": "pFileName", - "type": "LPCWSTR" - }, - { - "name": "bOverwrite", - "type": "BOOL" - } - ], - "D3DCompile": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "pSourceName", - "type": "LPCSTR" - }, - { - "name": "pDefines", - "type": "D3D_SHADER_MACRO" - }, - { - "name": "pInclude", - "type": "ID3DInclude" - }, - { - "name": "pEntrypoint", - "type": "LPCSTR" - }, - { - "name": "pTarget", - "type": "LPCSTR" - }, - { - "name": "Flags1", - "type": "UINT" - }, - { - "name": "Flags2", - "type": "UINT" - }, - { - "name": "ppCode", - "type": "ID3DBlob" - }, - { - "name": "ppErrorMsgs", - "type": "ID3DBlob" - } - ], - "D3DCompile2": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "pSourceName", - "type": "LPCSTR" - }, - { - "name": "pDefines", - "type": "D3D_SHADER_MACRO" - }, - { - "name": "pInclude", - "type": "ID3DInclude" - }, - { - "name": "pEntrypoint", - "type": "LPCSTR" - }, - { - "name": "pTarget", - "type": "LPCSTR" - }, - { - "name": "Flags1", - "type": "UINT" - }, - { - "name": "Flags2", - "type": "UINT" - }, - { - "name": "SecondaryDataFlags", - "type": "UINT" - }, - { - "name": "pSecondaryData", - "type": "LPCVOID" - }, - { - "name": "SecondaryDataSize", - "type": "SIZE_T" - }, - { - "name": "ppCode", - "type": "ID3DBlob" - }, - { - "name": "ppErrorMsgs", - "type": "ID3DBlob" - } - ], - "D3DCompileFromFile": [ - { - "name": "pFileName", - "type": "LPCWSTR" - }, - { - "name": "pDefines", - "type": "D3D_SHADER_MACRO" - }, - { - "name": "pInclude", - "type": "ID3DInclude" - }, - { - "name": "pEntrypoint", - "type": "LPCSTR" - }, - { - "name": "pTarget", - "type": "LPCSTR" - }, - { - "name": "Flags1", - "type": "UINT" - }, - { - "name": "Flags2", - "type": "UINT" - }, - { - "name": "ppCode", - "type": "ID3DBlob" - }, - { - "name": "ppErrorMsgs", - "type": "ID3DBlob" - } - ], - "D3DPreprocess": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "pSourceName", - "type": "LPCSTR" - }, - { - "name": "pDefines", - "type": "D3D_SHADER_MACRO" - }, - { - "name": "pInclude", - "type": "ID3DInclude" - }, - { - "name": "ppCodeText", - "type": "ID3DBlob" - }, - { - "name": "ppErrorMsgs", - "type": "ID3DBlob" - } - ], - "D3DGetDebugInfo": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "ppDebugInfo", - "type": "ID3DBlob" - } - ], - "D3DReflect": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "pInterface", - "type": "IID" - }, - { - "name": "ppReflector", - "type": "void" - } - ], - "D3DReflectLibrary": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppReflector", - "type": "LPVOID" - } - ], - "D3DDisassemble": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "szComments", - "type": "LPCSTR" - }, - { - "name": "ppDisassembly", - "type": "ID3DBlob" - } - ], - "D3DDisassembleRegion": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "szComments", - "type": "LPCSTR" - }, - { - "name": "StartByteOffset", - "type": "SIZE_T" - }, - { - "name": "NumInsts", - "type": "SIZE_T" - }, - { - "name": "pFinishByteOffset", - "type": "SIZE_T" - }, - { - "name": "ppDisassembly", - "type": "ID3DBlob" - } - ], - "D3DCreateLinker": [ - { - "name": "ppLinker", - "type": { - "name": "ID3D11Linker", - "data_type": "Struct", - "elements": [] - } - } - ], - "D3DLoadModule": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "cbSrcDataSize", - "type": "SIZE_T" - }, - { - "name": "ppModule", - "type": { - "name": "ID3D11Module", - "data_type": "Struct", - "elements": [] - } - } - ], - "D3DCreateFunctionLinkingGraph": [ - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "ppFunctionLinkingGraph", - "type": { - "name": "ID3D11FunctionLinkingGraph", - "data_type": "Struct", - "elements": [] - } - } - ], - "D3DGetTraceInstructionOffsets": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "StartInstIndex", - "type": "SIZE_T" - }, - { - "name": "NumInsts", - "type": "SIZE_T" - }, - { - "name": "pOffsets", - "type": "SIZE_T" - }, - { - "name": "pTotalInsts", - "type": "SIZE_T" - } - ], - "D3DGetInputSignatureBlob": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "ppSignatureBlob", - "type": "ID3DBlob" - } - ], - "D3DGetOutputSignatureBlob": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "ppSignatureBlob", - "type": "ID3DBlob" - } - ], - "D3DGetInputAndOutputSignatureBlob": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "ppSignatureBlob", - "type": "ID3DBlob" - } - ], - "D3DStripShader": [ - { - "name": "pShaderBytecode", - "type": "LPCVOID" - }, - { - "name": "BytecodeLength", - "type": "SIZE_T" - }, - { - "name": "uStripFlags", - "type": "UINT" - }, - { - "name": "ppStrippedBlob", - "type": "ID3DBlob" - } - ], - "D3DGetBlobPart": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "Part", - "type": "D3D_BLOB_PART" - }, - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "ppPart", - "type": "ID3DBlob" - } - ], - "D3DSetBlobPart": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "Part", - "type": "D3D_BLOB_PART" - }, - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "pPart", - "type": "LPCVOID" - }, - { - "name": "PartSize", - "type": "SIZE_T" - }, - { - "name": "ppNewShader", - "type": "ID3DBlob" - } - ], - "D3DCreateBlob": [ - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "ppBlob", - "type": "ID3DBlob" - } - ], - "D3DCompressShaders": [ - { - "name": "uNumShaders", - "type": "UINT" - }, - { - "name": "pShaderData", - "type": "D3D_SHADER_DATA" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "ppCompressedData", - "type": "ID3DBlob" - } - ], - "D3DDecompressShaders": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "uNumShaders", - "type": "UINT" - }, - { - "name": "uStartIndex", - "type": "UINT" - }, - { - "name": "pIndices", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "ppShaders", - "type": "ID3DBlob" - }, - { - "name": "pTotalShaders", - "type": "UINT" - } - ], - "D3DDisassemble10Effect": [ - { - "name": "pEffect", - "type": { - "name": "ID3D10Effect", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "ppDisassembly", - "type": "ID3DBlob" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/DfLayout.json b/qiling/extensions/windows_sdk/DfLayout.json deleted file mode 100644 index faa6d1683..000000000 --- a/qiling/extensions/windows_sdk/DfLayout.json +++ /dev/null @@ -1,518 +0,0 @@ -{ - "CoFileTimeNow": [ - { - "name": "lpFileTime", - "type": "FILETIME" - } - ], - "CLSIDFromProgIDEx": [ - { - "name": "lpszProgID", - "type": "LPCOLESTR" - }, - { - "name": "lpclsid", - "type": "LPCLSID" - } - ], - "CoInitialize": [ - { - "name": "pvReserved", - "type": "LPVOID" - } - ], - "CoRegisterMallocSpy": [ - { - "name": "pMallocSpy", - "type": "LPMALLOCSPY" - } - ], - "CoRevokeMallocSpy": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoRegisterInitializeSpy": [ - { - "name": "pSpy", - "type": "IInitializeSpy" - }, - { - "name": "puliCookie", - "type": "ULARGE_INTEGER" - } - ], - "CoRevokeInitializeSpy": [ - { - "name": "uliCookie", - "type": "ULARGE_INTEGER" - } - ], - "CoGetSystemSecurityPermissions": [ - { - "name": "comSDType", - "type": "COMSD" - }, - { - "name": "ppSD", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "CoLoadLibrary": [ - { - "name": "lpszLibName", - "type": "LPOLESTR" - }, - { - "name": "bAutoFree", - "type": "BOOL" - } - ], - "CoFreeLibrary": [ - { - "name": "hInst", - "type": "HINSTANCE" - } - ], - "CoFreeAllLibraries": [ - { - "name": "VOID", - "type": "void" - } - ], - "CoGetInstanceFromFile": [ - { - "name": "pServerInfo", - "type": "COSERVERINFO" - }, - { - "name": "pClsid", - "type": "CLSID" - }, - { - "name": "punkOuter", - "type": "IUnknown" - }, - { - "name": "dwClsCtx", - "type": "DWORD" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "pwszName", - "type": "OLECHAR" - }, - { - "name": "dwCount", - "type": "DWORD" - }, - { - "name": "pResults", - "type": "MULTI_QI" - } - ], - "CoGetInstanceFromIStorage": [ - { - "name": "pServerInfo", - "type": "COSERVERINFO" - }, - { - "name": "pClsid", - "type": "CLSID" - }, - { - "name": "punkOuter", - "type": "IUnknown" - }, - { - "name": "dwClsCtx", - "type": "DWORD" - }, - { - "name": "pstg", - "type": { - "name": "IStorage", - "data_type": "Struct", - "elements": [] - } - }, - { - "name": "dwCount", - "type": "DWORD" - }, - { - "name": "pResults", - "type": "MULTI_QI" - } - ], - "CoAllowSetForegroundWindow": [ - { - "name": "pUnk", - "type": "IUnknown" - }, - { - "name": "lpvReserved", - "type": "LPVOID" - } - ], - "CoIsOle1Class": [ - { - "name": "rclsid", - "type": "IID" - } - ], - "CoFileTimeToDosDateTime": [ - { - "name": "lpFileTime", - "type": "FILETIME" - }, - { - "name": "lpDosDate", - "type": "LPWORD" - }, - { - "name": "lpDosTime", - "type": "LPWORD" - } - ], - "CoDosDateTimeToFileTime": [ - { - "name": "nDosDate", - "type": "WORD" - }, - { - "name": "nDosTime", - "type": "WORD" - }, - { - "name": "lpFileTime", - "type": "FILETIME" - } - ], - "CoRegisterMessageFilter": [ - { - "name": "lpMessageFilter", - "type": "LPMESSAGEFILTER" - }, - { - "name": "lplpMessageFilter", - "type": "LPMESSAGEFILTER" - } - ], - "CoRegisterChannelHook": [ - { - "name": "ExtensionUuid", - "type": "GUID" - }, - { - "name": "pChannelHook", - "type": "IChannelHook" - } - ], - "CoTreatAsClass": [ - { - "name": "clsidOld", - "type": "IID" - }, - { - "name": "clsidNew", - "type": "IID" - } - ], - "CreateDataAdviseHolder": [ - { - "name": "ppDAHolder", - "type": "LPDATAADVISEHOLDER" - } - ], - "CreateDataCache": [ - { - "name": "pUnkOuter", - "type": "LPUNKNOWN" - }, - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "iid", - "type": "IID" - }, - { - "name": "ppv", - "type": "LPVOID" - } - ], - "StgOpenAsyncDocfileOnIFillLockBytes": [ - { - "name": "pflb", - "type": "IFillLockBytes" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "asyncFlags", - "type": "DWORD" - }, - { - "name": "ppstgOpen", - "type": "IStorage" - } - ], - "StgGetIFillLockBytesOnILockBytes": [ - { - "name": "pilb", - "type": "ILockBytes" - }, - { - "name": "ppflb", - "type": "IFillLockBytes" - } - ], - "StgGetIFillLockBytesOnFile": [ - { - "name": "pwcsName", - "type": "OLECHAR" - }, - { - "name": "ppflb", - "type": "IFillLockBytes" - } - ], - "StgOpenLayoutDocfile": [ - { - "name": "pwcsDfName", - "type": "OLECHAR" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "ppstgOpen", - "type": "IStorage" - } - ], - "CoInstall": [ - { - "name": "pbc", - "type": "IBindCtx" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pClassSpec", - "type": "uCLSSPEC" - }, - { - "name": "pQuery", - "type": "QUERYCONTEXT" - }, - { - "name": "pszCodeBase", - "type": "LPWSTR" - } - ], - "BindMoniker": [ - { - "name": "pmk", - "type": "LPMONIKER" - }, - { - "name": "grfOpt", - "type": "DWORD" - }, - { - "name": "iidResult", - "type": "IID" - }, - { - "name": "ppvResult", - "type": "LPVOID" - } - ], - "CoGetObject": [ - { - "name": "pszName", - "type": "LPCWSTR" - }, - { - "name": "pBindOptions", - "type": "BIND_OPTS" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "MkParseDisplayName": [ - { - "name": "pbc", - "type": "LPBC" - }, - { - "name": "szUserName", - "type": "LPCOLESTR" - }, - { - "name": "pchEaten", - "type": "ULONG" - }, - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "MonikerRelativePathTo": [ - { - "name": "pmkSrc", - "type": "LPMONIKER" - }, - { - "name": "pmkDest", - "type": "LPMONIKER" - }, - { - "name": "ppmkRelPath", - "type": "LPMONIKER" - }, - { - "name": "dwReserved", - "type": "BOOL" - } - ], - "MonikerCommonPrefixWith": [ - { - "name": "pmkThis", - "type": "LPMONIKER" - }, - { - "name": "pmkOther", - "type": "LPMONIKER" - }, - { - "name": "ppmkCommon", - "type": "LPMONIKER" - } - ], - "CreateBindCtx": [ - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "ppbc", - "type": "LPBC" - } - ], - "CreateGenericComposite": [ - { - "name": "pmkFirst", - "type": "LPMONIKER" - }, - { - "name": "pmkRest", - "type": "LPMONIKER" - }, - { - "name": "ppmkComposite", - "type": "LPMONIKER" - } - ], - "GetClassFile": [ - { - "name": "szFilename", - "type": "LPCOLESTR" - }, - { - "name": "pclsid", - "type": "CLSID" - } - ], - "CreateClassMoniker": [ - { - "name": "rclsid", - "type": "IID" - }, - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "CreateFileMoniker": [ - { - "name": "lpszPathName", - "type": "LPCOLESTR" - }, - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "CreateItemMoniker": [ - { - "name": "lpszDelim", - "type": "LPCOLESTR" - }, - { - "name": "lpszItem", - "type": "LPCOLESTR" - }, - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "CreateAntiMoniker": [ - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "CreatePointerMoniker": [ - { - "name": "punk", - "type": "LPUNKNOWN" - }, - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "CreateObjrefMoniker": [ - { - "name": "punk", - "type": "LPUNKNOWN" - }, - { - "name": "ppmk", - "type": "LPMONIKER" - } - ], - "GetRunningObjectTable": [ - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "pprot", - "type": "LPRUNNINGOBJECTTABLE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Instrsa5.json b/qiling/extensions/windows_sdk/Instrsa5.json deleted file mode 100644 index ec5bda91f..000000000 --- a/qiling/extensions/windows_sdk/Instrsa5.json +++ /dev/null @@ -1,5200 +0,0 @@ -{ - "CryptAcquireContextA": [ - { - "name": "phProv", - "type": "HCRYPTPROV" - }, - { - "name": "szContainer", - "type": "LPCSTR" - }, - { - "name": "szProvider", - "type": "LPCSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptAcquireContextW": [ - { - "name": "phProv", - "type": "HCRYPTPROV" - }, - { - "name": "szContainer", - "type": "LPCWSTR" - }, - { - "name": "szProvider", - "type": "LPCWSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptReleaseContext": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGenKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptDeriveKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "hBaseData", - "type": "HCRYPTHASH" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptDestroyKey": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - } - ], - "CryptSetKeyParam": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetKeyParam": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetHashParam": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetHashParam": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetProvParam": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetProvParam": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGenRandom": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwLen", - "type": "DWORD" - }, - { - "name": "pbBuffer", - "type": "BYTE" - } - ], - "CryptGetUserKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "phUserKey", - "type": "HCRYPTKEY" - } - ], - "CryptExportKey": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "hExpKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwBlobType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - } - ], - "CryptImportKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwDataLen", - "type": "DWORD" - }, - { - "name": "hPubKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptEncrypt": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "Final", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwBufLen", - "type": "DWORD" - } - ], - "CryptDecrypt": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "Final", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - } - ], - "CryptCreateHash": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phHash", - "type": "HCRYPTHASH" - } - ], - "CryptHashData": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptHashSessionKey": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptDestroyHash": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - } - ], - "CryptSignHashA": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "szDescription", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "pdwSigLen", - "type": "DWORD" - } - ], - "CryptSignHashW": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "szDescription", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "pdwSigLen", - "type": "DWORD" - } - ], - "CryptVerifySignatureA": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "dwSigLen", - "type": "DWORD" - }, - { - "name": "hPubKey", - "type": "HCRYPTKEY" - }, - { - "name": "szDescription", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptVerifySignatureW": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "dwSigLen", - "type": "DWORD" - }, - { - "name": "hPubKey", - "type": "HCRYPTKEY" - }, - { - "name": "szDescription", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetProviderA": [ - { - "name": "pszProvName", - "type": "LPCSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - } - ], - "CryptSetProviderW": [ - { - "name": "pszProvName", - "type": "LPCWSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - } - ], - "CryptSetProviderExA": [ - { - "name": "pszProvName", - "type": "LPCSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetProviderExW": [ - { - "name": "pszProvName", - "type": "LPCWSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetDefaultProviderA": [ - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszProvName", - "type": "LPSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptGetDefaultProviderW": [ - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszProvName", - "type": "LPWSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptEnumProviderTypesA": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szTypeName", - "type": "LPSTR" - }, - { - "name": "pcbTypeName", - "type": "DWORD" - } - ], - "CryptEnumProviderTypesW": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szTypeName", - "type": "LPWSTR" - }, - { - "name": "pcbTypeName", - "type": "DWORD" - } - ], - "CryptEnumProvidersA": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szProvName", - "type": "LPSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptEnumProvidersW": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szProvName", - "type": "LPWSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptContextAddRef": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptDuplicateKey": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptDuplicateHash": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phHash", - "type": "HCRYPTHASH" - } - ], - "GetEncSChannel": [ - { - "name": "pData", - "type": "BYTE" - }, - { - "name": "dwDecSize", - "type": "DWORD" - } - ], - "CryptFormatObject": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFormatType", - "type": "DWORD" - }, - { - "name": "dwFormatStrType", - "type": "DWORD" - }, - { - "name": "pFormatStruct", - "type": "void" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pbFormat", - "type": "void" - }, - { - "name": "pcbFormat", - "type": "DWORD" - } - ], - "CryptEncodeObjectEx": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pEncodePara", - "type": "PCRYPT_ENCODE_PARA" - }, - { - "name": "pvEncoded", - "type": "void" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CryptEncodeObject": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CryptDecodeObjectEx": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pDecodePara", - "type": "PCRYPT_DECODE_PARA" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "pcbStructInfo", - "type": "DWORD" - } - ], - "CryptDecodeObject": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "pcbStructInfo", - "type": "DWORD" - } - ], - "CryptInstallOIDFunctionAddress": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "cFuncEntry", - "type": "DWORD" - }, - { - "name": "rgFuncEntry", - "type": "CRYPT_OID_FUNC_ENTRY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptInitOIDFunctionSet": [ - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetOIDFunctionAddress": [ - { - "name": "hFuncSet", - "type": "HCRYPTOIDFUNCSET" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "ppvFuncAddr", - "type": "void" - }, - { - "name": "phFuncAddr", - "type": "HCRYPTOIDFUNCADDR" - } - ], - "CryptGetDefaultOIDDllList": [ - { - "name": "hFuncSet", - "type": "HCRYPTOIDFUNCSET" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pwszDllList", - "type": "WCHAR" - }, - { - "name": "pcchDllList", - "type": "DWORD" - } - ], - "CryptGetDefaultOIDFunctionAddress": [ - { - "name": "hFuncSet", - "type": "HCRYPTOIDFUNCSET" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pwszDll", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "ppvFuncAddr", - "type": "void" - }, - { - "name": "phFuncAddr", - "type": "HCRYPTOIDFUNCADDR" - } - ], - "CryptFreeOIDFunctionAddress": [ - { - "name": "hFuncAddr", - "type": "HCRYPTOIDFUNCADDR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptRegisterOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "pwszDll", - "type": "LPCWSTR" - }, - { - "name": "pszOverrideFuncName", - "type": "LPCSTR" - } - ], - "CryptUnregisterOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - } - ], - "CryptRegisterDefaultOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pwszDll", - "type": "LPCWSTR" - } - ], - "CryptUnregisterDefaultOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pwszDll", - "type": "LPCWSTR" - } - ], - "CryptSetOIDFunctionValue": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "pwszValueName", - "type": "LPCWSTR" - }, - { - "name": "dwValueType", - "type": "DWORD" - }, - { - "name": "pbValueData", - "type": "BYTE" - }, - { - "name": "cbValueData", - "type": "DWORD" - } - ], - "CryptGetOIDFunctionValue": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "pwszValueName", - "type": "LPCWSTR" - }, - { - "name": "pdwValueType", - "type": "DWORD" - }, - { - "name": "pbValueData", - "type": "BYTE" - }, - { - "name": "pcbValueData", - "type": "DWORD" - } - ], - "CryptEnumOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnumOIDFunc", - "type": "PFN_CRYPT_ENUM_OID_FUNC" - } - ], - "CryptFindOIDInfo": [ - { - "name": "dwKeyType", - "type": "DWORD" - }, - { - "name": "pvKey", - "type": "void" - }, - { - "name": "dwGroupId", - "type": "DWORD" - } - ], - "CryptRegisterOIDInfo": [ - { - "name": "pInfo", - "type": "PCCRYPT_OID_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptUnregisterOIDInfo": [ - { - "name": "pInfo", - "type": "PCCRYPT_OID_INFO" - } - ], - "CryptEnumOIDInfo": [ - { - "name": "dwGroupId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnumOIDInfo", - "type": "PFN_CRYPT_ENUM_OID_INFO" - } - ], - "CryptFindLocalizedName": [ - { - "name": "pwszCryptName", - "type": "LPCWSTR" - } - ], - "CryptMsgOpenToEncode": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwMsgType", - "type": "DWORD" - }, - { - "name": "pvMsgEncodeInfo", - "type": "void" - }, - { - "name": "pszInnerContentObjID", - "type": "LPSTR" - }, - { - "name": "pStreamInfo", - "type": "PCMSG_STREAM_INFO" - } - ], - "CryptMsgCalculateEncodedLength": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwMsgType", - "type": "DWORD" - }, - { - "name": "pvMsgEncodeInfo", - "type": "void" - }, - { - "name": "pszInnerContentObjID", - "type": "LPSTR" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "CryptMsgOpenToDecode": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwMsgType", - "type": "DWORD" - }, - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "pRecipientInfo", - "type": "PCERT_INFO" - }, - { - "name": "pStreamInfo", - "type": "PCMSG_STREAM_INFO" - } - ], - "CryptMsgDuplicate": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - } - ], - "CryptMsgClose": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - } - ], - "CryptMsgUpdate": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "fFinal", - "type": "BOOL" - } - ], - "CryptMsgGetParam": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "dwParamType", - "type": "DWORD" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CryptMsgControl": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwCtrlType", - "type": "DWORD" - }, - { - "name": "pvCtrlPara", - "type": "void" - } - ], - "CryptMsgVerifyCountersignatureEncoded": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pbSignerInfo", - "type": "PBYTE" - }, - { - "name": "cbSignerInfo", - "type": "DWORD" - }, - { - "name": "pbSignerInfoCountersignature", - "type": "PBYTE" - }, - { - "name": "cbSignerInfoCountersignature", - "type": "DWORD" - }, - { - "name": "pciCountersigner", - "type": "PCERT_INFO" - } - ], - "CryptMsgVerifyCountersignatureEncodedEx": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pbSignerInfo", - "type": "PBYTE" - }, - { - "name": "cbSignerInfo", - "type": "DWORD" - }, - { - "name": "pbSignerInfoCountersignature", - "type": "PBYTE" - }, - { - "name": "cbSignerInfoCountersignature", - "type": "DWORD" - }, - { - "name": "dwSignerType", - "type": "DWORD" - }, - { - "name": "pvSigner", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvExtra", - "type": "void" - } - ], - "CryptMsgCountersign": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "cCountersigners", - "type": "DWORD" - }, - { - "name": "rgCountersigners", - "type": "PCMSG_SIGNER_ENCODE_INFO" - } - ], - "CryptMsgCountersignEncoded": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pbSignerInfo", - "type": "PBYTE" - }, - { - "name": "cbSignerInfo", - "type": "DWORD" - }, - { - "name": "cCountersigners", - "type": "DWORD" - }, - { - "name": "rgCountersigners", - "type": "PCMSG_SIGNER_ENCODE_INFO" - }, - { - "name": "pbCountersignature", - "type": "PBYTE" - }, - { - "name": "pcbCountersignature", - "type": "PDWORD" - } - ], - "CertOpenStore": [ - { - "name": "lpszStoreProvider", - "type": "LPCSTR" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvPara", - "type": "void" - } - ], - "CertDuplicateStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - } - ], - "CertSaveStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "dwSaveAs", - "type": "DWORD" - }, - { - "name": "dwSaveTo", - "type": "DWORD" - }, - { - "name": "pvSaveToPara", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertCloseStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertGetSubjectCertificateFromStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertId", - "type": "PCERT_INFO" - } - ], - "CertEnumCertificatesInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pPrevCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertFindCertificateInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFindFlags", - "type": "DWORD" - }, - { - "name": "dwFindType", - "type": "DWORD" - }, - { - "name": "pvFindPara", - "type": "void" - }, - { - "name": "pPrevCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertGetIssuerCertificateFromStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pSubjectContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pPrevIssuerContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CertVerifySubjectCertificateContext": [ - { - "name": "pSubject", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pIssuer", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CertDuplicateCertificateContext": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertCreateCertificateContext": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCertEncoded", - "type": "BYTE" - }, - { - "name": "cbCertEncoded", - "type": "DWORD" - } - ], - "CertFreeCertificateContext": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertSetCertificateContextProperty": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CertGetCertificateContextProperty": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CertEnumCertificateContextProperties": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - } - ], - "CertCreateCTLEntryFromCertificateContextProperties": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "cOptAttr", - "type": "DWORD" - }, - { - "name": "rgOptAttr", - "type": "PCRYPT_ATTRIBUTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pCtlEntry", - "type": "PCTL_ENTRY" - }, - { - "name": "pcbCtlEntry", - "type": "DWORD" - } - ], - "CertSetCertificateContextPropertiesFromCTLEntry": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pCtlEntry", - "type": "PCTL_ENTRY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertGetCRLFromStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pIssuerContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pPrevCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CertEnumCRLsInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pPrevCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertFindCRLInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFindFlags", - "type": "DWORD" - }, - { - "name": "dwFindType", - "type": "DWORD" - }, - { - "name": "pvFindPara", - "type": "void" - }, - { - "name": "pPrevCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertDuplicateCRLContext": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertCreateCRLContext": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCrlEncoded", - "type": "BYTE" - }, - { - "name": "cbCrlEncoded", - "type": "DWORD" - } - ], - "CertFreeCRLContext": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertSetCRLContextProperty": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CertGetCRLContextProperty": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CertEnumCRLContextProperties": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - } - ], - "CertFindCertificateInCRL": [ - { - "name": "pCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "ppCrlEntry", - "type": "PCRL_ENTRY" - } - ], - "CertIsValidCRLForCertificate": [ - { - "name": "pCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pCrl", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CertAddEncodedCertificateToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCertEncoded", - "type": "BYTE" - }, - { - "name": "cbCertEncoded", - "type": "DWORD" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertAddCertificateContextToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertAddSerializedElementToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pbElement", - "type": "BYTE" - }, - { - "name": "cbElement", - "type": "DWORD" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContextTypeFlags", - "type": "DWORD" - }, - { - "name": "pdwContextType", - "type": "DWORD" - }, - { - "name": "ppvContext", - "type": "void" - } - ], - "CertDeleteCertificateFromStore": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertAddEncodedCRLToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCrlEncoded", - "type": "BYTE" - }, - { - "name": "cbCrlEncoded", - "type": "DWORD" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertAddCRLContextToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertDeleteCRLFromStore": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertSerializeCertificateStoreElement": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbElement", - "type": "BYTE" - }, - { - "name": "pcbElement", - "type": "DWORD" - } - ], - "CertSerializeCRLStoreElement": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbElement", - "type": "BYTE" - }, - { - "name": "pcbElement", - "type": "DWORD" - } - ], - "CertDuplicateCTLContext": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertCreateCTLContext": [ - { - "name": "dwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCtlEncoded", - "type": "BYTE" - }, - { - "name": "cbCtlEncoded", - "type": "DWORD" - } - ], - "CertFreeCTLContext": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertSetCTLContextProperty": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CertGetCTLContextProperty": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CertEnumCTLContextProperties": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - } - ], - "CertEnumCTLsInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pPrevCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertFindSubjectInCTL": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "dwSubjectType", - "type": "DWORD" - }, - { - "name": "pvSubject", - "type": "void" - }, - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertFindCTLInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFindFlags", - "type": "DWORD" - }, - { - "name": "dwFindType", - "type": "DWORD" - }, - { - "name": "pvFindPara", - "type": "void" - }, - { - "name": "pPrevCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertAddEncodedCTLToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCtlEncoded", - "type": "BYTE" - }, - { - "name": "cbCtlEncoded", - "type": "DWORD" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertAddCTLContextToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertSerializeCTLStoreElement": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbElement", - "type": "BYTE" - }, - { - "name": "pcbElement", - "type": "DWORD" - } - ], - "CertDeleteCTLFromStore": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertAddCertificateLinkToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertAddCRLLinkToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertAddCTLLinkToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertAddStoreToCollection": [ - { - "name": "hCollectionStore", - "type": "HCERTSTORE" - }, - { - "name": "hSiblingStore", - "type": "HCERTSTORE" - }, - { - "name": "dwUpdateFlags", - "type": "DWORD" - }, - { - "name": "dwPriority", - "type": "DWORD" - } - ], - "CertRemoveStoreFromCollection": [ - { - "name": "hCollectionStore", - "type": "HCERTSTORE" - }, - { - "name": "hSiblingStore", - "type": "HCERTSTORE" - } - ], - "CertControlStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwCtrlType", - "type": "DWORD" - }, - { - "name": "pvCtrlPara", - "type": "void" - } - ], - "CertSetStoreProperty": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CertGetStoreProperty": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CertRegisterSystemStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pStoreInfo", - "type": "PCERT_SYSTEM_STORE_INFO" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CertRegisterPhysicalStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszStoreName", - "type": "LPCWSTR" - }, - { - "name": "pStoreInfo", - "type": "PCERT_PHYSICAL_STORE_INFO" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CertUnregisterSystemStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertUnregisterPhysicalStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszStoreName", - "type": "LPCWSTR" - } - ], - "CertEnumSystemStoreLocation": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnum", - "type": "PFN_CERT_ENUM_SYSTEM_STORE_LOCATION" - } - ], - "CertEnumSystemStore": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvSystemStoreLocationPara", - "type": "void" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnum", - "type": "PFN_CERT_ENUM_SYSTEM_STORE" - } - ], - "CertEnumPhysicalStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnum", - "type": "PFN_CERT_ENUM_PHYSICAL_STORE" - } - ], - "CertGetEnhancedKeyUsage": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pUsage", - "type": "PCERT_ENHKEY_USAGE" - }, - { - "name": "pcbUsage", - "type": "DWORD" - } - ], - "CertSetEnhancedKeyUsage": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pUsage", - "type": "PCERT_ENHKEY_USAGE" - } - ], - "CertAddEnhancedKeyUsageIdentifier": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pszUsageIdentifier", - "type": "LPCSTR" - } - ], - "CertRemoveEnhancedKeyUsageIdentifier": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pszUsageIdentifier", - "type": "LPCSTR" - } - ], - "CertGetValidUsages": [ - { - "name": "cCerts", - "type": "DWORD" - }, - { - "name": "rghCerts", - "type": "PCCERT_CONTEXT" - }, - { - "name": "cNumOIDs", - "type": "int" - }, - { - "name": "rghOIDs", - "type": "LPSTR" - }, - { - "name": "pcbOIDs", - "type": "DWORD" - } - ], - "CryptMsgGetAndVerifySigner": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "cSignerStore", - "type": "DWORD" - }, - { - "name": "rghSignerStore", - "type": "HCERTSTORE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "ppSigner", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pdwSignerIndex", - "type": "DWORD" - } - ], - "CryptMsgSignCTL": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "pbCtlContent", - "type": "BYTE" - }, - { - "name": "cbCtlContent", - "type": "DWORD" - }, - { - "name": "pSignInfo", - "type": "PCMSG_SIGNED_ENCODE_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CryptMsgEncodeAndSignCTL": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "pCtlInfo", - "type": "PCTL_INFO" - }, - { - "name": "pSignInfo", - "type": "PCMSG_SIGNED_ENCODE_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CertFindSubjectInSortedCTL": [ - { - "name": "pSubjectIdentifier", - "type": "PCRYPT_DATA_BLOB" - }, - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pEncodedAttributes", - "type": "PCRYPT_DER_BLOB" - } - ], - "CertEnumSubjectInSortedCTL": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "ppvNextSubject", - "type": "void" - }, - { - "name": "pSubjectIdentifier", - "type": "PCRYPT_DER_BLOB" - }, - { - "name": "pEncodedAttributes", - "type": "PCRYPT_DER_BLOB" - } - ], - "CertVerifyCTLUsage": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "dwSubjectType", - "type": "DWORD" - }, - { - "name": "pvSubject", - "type": "void" - }, - { - "name": "pSubjectUsage", - "type": "PCTL_USAGE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pVerifyUsagePara", - "type": "PCTL_VERIFY_USAGE_PARA" - }, - { - "name": "pVerifyUsageStatus", - "type": "PCTL_VERIFY_USAGE_STATUS" - } - ], - "CertVerifyRevocation": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "dwRevType", - "type": "DWORD" - }, - { - "name": "cContext", - "type": "DWORD" - }, - { - "name": "rgpvContext", - "type": "PVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pRevPara", - "type": "PCERT_REVOCATION_PARA" - }, - { - "name": "pRevStatus", - "type": "PCERT_REVOCATION_STATUS" - } - ], - "CertCompareIntegerBlob": [ - { - "name": "pInt1", - "type": "PCRYPT_INTEGER_BLOB" - }, - { - "name": "pInt2", - "type": "PCRYPT_INTEGER_BLOB" - } - ], - "CertCompareCertificate": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertId1", - "type": "PCERT_INFO" - }, - { - "name": "pCertId2", - "type": "PCERT_INFO" - } - ], - "CertCompareCertificateName": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertName1", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "pCertName2", - "type": "PCERT_NAME_BLOB" - } - ], - "CertIsRDNAttrsInCertificateName": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pCertName", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "pRDN", - "type": "PCERT_RDN" - } - ], - "CertComparePublicKeyInfo": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pPublicKey1", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pPublicKey2", - "type": "PCERT_PUBLIC_KEY_INFO" - } - ], - "CertGetPublicKeyLength": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pPublicKey", - "type": "PCERT_PUBLIC_KEY_INFO" - } - ], - "CryptVerifyCertificateSignature": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pPublicKey", - "type": "PCERT_PUBLIC_KEY_INFO" - } - ], - "CryptVerifyCertificateSignatureEx": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwSubjectType", - "type": "DWORD" - }, - { - "name": "pvSubject", - "type": "void" - }, - { - "name": "dwIssuerType", - "type": "DWORD" - }, - { - "name": "pvIssuer", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvExtra", - "type": "void" - } - ], - "CertIsStrongHashToSign": [ - { - "name": "pStrongSignPara", - "type": "PCCERT_STRONG_SIGN_PARA" - }, - { - "name": "pwszCNGHashAlgid", - "type": "LPCWSTR" - }, - { - "name": "pSigningCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptHashToBeSigned": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptHashCertificate": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptHashCertificate2": [ - { - "name": "pwszCNGHashAlgid", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptSignCertificate": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbEncodedToBeSigned", - "type": "BYTE" - }, - { - "name": "cbEncodedToBeSigned", - "type": "DWORD" - }, - { - "name": "pSignatureAlgorithm", - "type": "PCRYPT_ALGORITHM_IDENTIFIER" - }, - { - "name": "pvHashAuxInfo", - "type": "void" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "pcbSignature", - "type": "DWORD" - } - ], - "CryptSignAndEncodeCertificate": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "pSignatureAlgorithm", - "type": "PCRYPT_ALGORITHM_IDENTIFIER" - }, - { - "name": "pvHashAuxInfo", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CertVerifyTimeValidity": [ - { - "name": "pTimeToVerify", - "type": "LPFILETIME" - }, - { - "name": "pCertInfo", - "type": "PCERT_INFO" - } - ], - "CertVerifyCRLTimeValidity": [ - { - "name": "pTimeToVerify", - "type": "LPFILETIME" - }, - { - "name": "pCrlInfo", - "type": "PCRL_INFO" - } - ], - "CertVerifyValidityNesting": [ - { - "name": "pSubjectInfo", - "type": "PCERT_INFO" - }, - { - "name": "pIssuerInfo", - "type": "PCERT_INFO" - } - ], - "CertVerifyCRLRevocation": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertId", - "type": "PCERT_INFO" - }, - { - "name": "cCrlInfo", - "type": "DWORD" - }, - { - "name": "rgpCrlInfo", - "type": "PCRL_INFO" - } - ], - "CertAlgIdToOID": [ - { - "name": "dwAlgId", - "type": "DWORD" - } - ], - "CertOIDToAlgId": [ - { - "name": "pszObjId", - "type": "LPCSTR" - } - ], - "CertFindExtension": [ - { - "name": "pszObjId", - "type": "LPCSTR" - }, - { - "name": "cExtensions", - "type": "DWORD" - }, - { - "name": "rgExtensions", - "type": "CERT_EXTENSION" - } - ], - "CertFindAttribute": [ - { - "name": "pszObjId", - "type": "LPCSTR" - }, - { - "name": "cAttr", - "type": "DWORD" - }, - { - "name": "rgAttr", - "type": "CRYPT_ATTRIBUTE" - } - ], - "CertFindRDNAttr": [ - { - "name": "pszObjId", - "type": "LPCSTR" - }, - { - "name": "pName", - "type": "PCERT_NAME_INFO" - } - ], - "CertGetIntendedKeyUsage": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertInfo", - "type": "PCERT_INFO" - }, - { - "name": "pbKeyUsage", - "type": "BYTE" - }, - { - "name": "cbKeyUsage", - "type": "DWORD" - } - ], - "CryptInstallDefaultContext": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwDefaultType", - "type": "DWORD" - }, - { - "name": "pvDefaultPara", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "phDefaultContext", - "type": "HCRYPTDEFAULTCONTEXT" - } - ], - "CryptUninstallDefaultContext": [ - { - "name": "hDefaultContext", - "type": "HCRYPTDEFAULTCONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CryptExportPublicKeyInfo": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pcbInfo", - "type": "DWORD" - } - ], - "CryptExportPublicKeyInfoEx": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszPublicKeyObjId", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pcbInfo", - "type": "DWORD" - } - ], - "CryptExportPublicKeyInfoFromBCryptKeyHandle": [ - { - "name": "hBCryptKey", - "type": "BCRYPT_KEY_HANDLE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszPublicKeyObjId", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pcbInfo", - "type": "DWORD" - } - ], - "CryptImportPublicKeyInfo": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptImportPublicKeyInfoEx": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "aiKeyAlg", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptImportPublicKeyInfoEx2": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "phKey", - "type": "BCRYPT_KEY_HANDLE" - } - ], - "CryptAcquireCertificatePrivateKey": [ - { - "name": "pCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvParameters", - "type": "void" - }, - { - "name": "phCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "pdwKeySpec", - "type": "DWORD" - }, - { - "name": "pfCallerFreeProvOrNCryptKey", - "type": "BOOL" - } - ], - "CryptFindCertificateKeyProvInfo": [ - { - "name": "pCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CryptImportPKCS8": [ - { - "name": "sPrivateKeyAndParams", - "type": "CRYPT_PKCS8_IMPORT_PARAMS" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "pvAuxInfo", - "type": "void" - } - ], - "CryptExportPKCS8": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "pszPrivateKeyObjId", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "pbPrivateKeyBlob", - "type": "BYTE" - }, - { - "name": "pcbPrivateKeyBlob", - "type": "DWORD" - } - ], - "CryptExportPKCS8Ex": [ - { - "name": "psExportParams", - "type": "CRYPT_PKCS8_EXPORT_PARAMS" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "pbPrivateKeyBlob", - "type": "BYTE" - }, - { - "name": "pcbPrivateKeyBlob", - "type": "DWORD" - } - ], - "CryptHashPublicKeyInfo": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CertRDNValueToStrA": [ - { - "name": "dwValueType", - "type": "DWORD" - }, - { - "name": "pValue", - "type": "PCERT_RDN_VALUE_BLOB" - }, - { - "name": "psz", - "type": "LPSTR" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "CertRDNValueToStrW": [ - { - "name": "dwValueType", - "type": "DWORD" - }, - { - "name": "pValue", - "type": "PCERT_RDN_VALUE_BLOB" - }, - { - "name": "psz", - "type": "LPWSTR" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "CertNameToStrA": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pName", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "dwStrType", - "type": "DWORD" - }, - { - "name": "psz", - "type": "LPSTR" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "CertNameToStrW": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pName", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "dwStrType", - "type": "DWORD" - }, - { - "name": "psz", - "type": "LPWSTR" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "CertStrToNameA": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszX500", - "type": "LPCSTR" - }, - { - "name": "dwStrType", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - }, - { - "name": "ppszError", - "type": "LPCSTR" - } - ], - "CertStrToNameW": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszX500", - "type": "LPCWSTR" - }, - { - "name": "dwStrType", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - }, - { - "name": "ppszError", - "type": "LPCWSTR" - } - ], - "CertGetNameStringA": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvTypePara", - "type": "void" - }, - { - "name": "pszNameString", - "type": "LPSTR" - }, - { - "name": "cchNameString", - "type": "DWORD" - } - ], - "CertGetNameStringW": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvTypePara", - "type": "void" - }, - { - "name": "pszNameString", - "type": "LPWSTR" - }, - { - "name": "cchNameString", - "type": "DWORD" - } - ], - "CryptSignMessage": [ - { - "name": "pSignPara", - "type": "PCRYPT_SIGN_MESSAGE_PARA" - }, - { - "name": "fDetachedSignature", - "type": "BOOL" - }, - { - "name": "cToBeSigned", - "type": "DWORD" - }, - { - "name": "rgpbToBeSigned", - "type": "BYTE" - }, - { - "name": "rgcbToBeSigned", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "pcbSignedBlob", - "type": "DWORD" - } - ], - "CryptVerifyMessageSignature": [ - { - "name": "pVerifyPara", - "type": "PCRYPT_VERIFY_MESSAGE_PARA" - }, - { - "name": "dwSignerIndex", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "cbSignedBlob", - "type": "DWORD" - }, - { - "name": "pbDecoded", - "type": "BYTE" - }, - { - "name": "pcbDecoded", - "type": "DWORD" - }, - { - "name": "ppSignerCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptGetMessageSignerCount": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "cbSignedBlob", - "type": "DWORD" - } - ], - "CryptGetMessageCertificates": [ - { - "name": "dwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "cbSignedBlob", - "type": "DWORD" - } - ], - "CryptVerifyDetachedMessageSignature": [ - { - "name": "pVerifyPara", - "type": "PCRYPT_VERIFY_MESSAGE_PARA" - }, - { - "name": "dwSignerIndex", - "type": "DWORD" - }, - { - "name": "pbDetachedSignBlob", - "type": "BYTE" - }, - { - "name": "cbDetachedSignBlob", - "type": "DWORD" - }, - { - "name": "cToBeSigned", - "type": "DWORD" - }, - { - "name": "rgpbToBeSigned", - "type": "BYTE" - }, - { - "name": "rgcbToBeSigned", - "type": "DWORD" - }, - { - "name": "ppSignerCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptEncryptMessage": [ - { - "name": "pEncryptPara", - "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" - }, - { - "name": "cRecipientCert", - "type": "DWORD" - }, - { - "name": "rgpRecipientCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pbToBeEncrypted", - "type": "BYTE" - }, - { - "name": "cbToBeEncrypted", - "type": "DWORD" - }, - { - "name": "pbEncryptedBlob", - "type": "BYTE" - }, - { - "name": "pcbEncryptedBlob", - "type": "DWORD" - } - ], - "CryptDecryptMessage": [ - { - "name": "pDecryptPara", - "type": "PCRYPT_DECRYPT_MESSAGE_PARA" - }, - { - "name": "pbEncryptedBlob", - "type": "BYTE" - }, - { - "name": "cbEncryptedBlob", - "type": "DWORD" - }, - { - "name": "pbDecrypted", - "type": "BYTE" - }, - { - "name": "pcbDecrypted", - "type": "DWORD" - }, - { - "name": "ppXchgCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptSignAndEncryptMessage": [ - { - "name": "pSignPara", - "type": "PCRYPT_SIGN_MESSAGE_PARA" - }, - { - "name": "pEncryptPara", - "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" - }, - { - "name": "cRecipientCert", - "type": "DWORD" - }, - { - "name": "rgpRecipientCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pbToBeSignedAndEncrypted", - "type": "BYTE" - }, - { - "name": "cbToBeSignedAndEncrypted", - "type": "DWORD" - }, - { - "name": "pbSignedAndEncryptedBlob", - "type": "BYTE" - }, - { - "name": "pcbSignedAndEncryptedBlob", - "type": "DWORD" - } - ], - "CryptDecryptAndVerifyMessageSignature": [ - { - "name": "pDecryptPara", - "type": "PCRYPT_DECRYPT_MESSAGE_PARA" - }, - { - "name": "pVerifyPara", - "type": "PCRYPT_VERIFY_MESSAGE_PARA" - }, - { - "name": "dwSignerIndex", - "type": "DWORD" - }, - { - "name": "pbEncryptedBlob", - "type": "BYTE" - }, - { - "name": "cbEncryptedBlob", - "type": "DWORD" - }, - { - "name": "pbDecrypted", - "type": "BYTE" - }, - { - "name": "pcbDecrypted", - "type": "DWORD" - }, - { - "name": "ppXchgCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "ppSignerCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptDecodeMessage": [ - { - "name": "dwMsgTypeFlags", - "type": "DWORD" - }, - { - "name": "pDecryptPara", - "type": "PCRYPT_DECRYPT_MESSAGE_PARA" - }, - { - "name": "pVerifyPara", - "type": "PCRYPT_VERIFY_MESSAGE_PARA" - }, - { - "name": "dwSignerIndex", - "type": "DWORD" - }, - { - "name": "pbEncodedBlob", - "type": "BYTE" - }, - { - "name": "cbEncodedBlob", - "type": "DWORD" - }, - { - "name": "dwPrevInnerContentType", - "type": "DWORD" - }, - { - "name": "pdwMsgType", - "type": "DWORD" - }, - { - "name": "pdwInnerContentType", - "type": "DWORD" - }, - { - "name": "pbDecoded", - "type": "BYTE" - }, - { - "name": "pcbDecoded", - "type": "DWORD" - }, - { - "name": "ppXchgCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "ppSignerCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptHashMessage": [ - { - "name": "pHashPara", - "type": "PCRYPT_HASH_MESSAGE_PARA" - }, - { - "name": "fDetachedHash", - "type": "BOOL" - }, - { - "name": "cToBeHashed", - "type": "DWORD" - }, - { - "name": "rgpbToBeHashed", - "type": "BYTE" - }, - { - "name": "rgcbToBeHashed", - "type": "DWORD" - }, - { - "name": "pbHashedBlob", - "type": "BYTE" - }, - { - "name": "pcbHashedBlob", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptVerifyMessageHash": [ - { - "name": "pHashPara", - "type": "PCRYPT_HASH_MESSAGE_PARA" - }, - { - "name": "pbHashedBlob", - "type": "BYTE" - }, - { - "name": "cbHashedBlob", - "type": "DWORD" - }, - { - "name": "pbToBeHashed", - "type": "BYTE" - }, - { - "name": "pcbToBeHashed", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptVerifyDetachedMessageHash": [ - { - "name": "pHashPara", - "type": "PCRYPT_HASH_MESSAGE_PARA" - }, - { - "name": "pbDetachedHashBlob", - "type": "BYTE" - }, - { - "name": "cbDetachedHashBlob", - "type": "DWORD" - }, - { - "name": "cToBeHashed", - "type": "DWORD" - }, - { - "name": "rgpbToBeHashed", - "type": "BYTE" - }, - { - "name": "rgcbToBeHashed", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptSignMessageWithKey": [ - { - "name": "pSignPara", - "type": "PCRYPT_KEY_SIGN_MESSAGE_PARA" - }, - { - "name": "pbToBeSigned", - "type": "BYTE" - }, - { - "name": "cbToBeSigned", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "pcbSignedBlob", - "type": "DWORD" - } - ], - "CryptVerifyMessageSignatureWithKey": [ - { - "name": "pVerifyPara", - "type": "PCRYPT_KEY_VERIFY_MESSAGE_PARA" - }, - { - "name": "pPublicKeyInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "cbSignedBlob", - "type": "DWORD" - }, - { - "name": "pbDecoded", - "type": "BYTE" - }, - { - "name": "pcbDecoded", - "type": "DWORD" - } - ], - "CertOpenSystemStoreA": [ - { - "name": "hProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "szSubsystemProtocol", - "type": "LPCSTR" - } - ], - "CertOpenSystemStoreW": [ - { - "name": "hProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "szSubsystemProtocol", - "type": "LPCWSTR" - } - ], - "CertAddEncodedCertificateToSystemStoreA": [ - { - "name": "szCertStoreName", - "type": "LPCSTR" - }, - { - "name": "pbCertEncoded", - "type": "BYTE" - }, - { - "name": "cbCertEncoded", - "type": "DWORD" - } - ], - "CertAddEncodedCertificateToSystemStoreW": [ - { - "name": "szCertStoreName", - "type": "LPCWSTR" - }, - { - "name": "pbCertEncoded", - "type": "BYTE" - }, - { - "name": "cbCertEncoded", - "type": "DWORD" - } - ], - "CryptQueryObject": [ - { - "name": "dwObjectType", - "type": "DWORD" - }, - { - "name": "pvObject", - "type": "void" - }, - { - "name": "dwExpectedContentTypeFlags", - "type": "DWORD" - }, - { - "name": "dwExpectedFormatTypeFlags", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "pdwContentType", - "type": "DWORD" - }, - { - "name": "pdwFormatType", - "type": "DWORD" - }, - { - "name": "phCertStore", - "type": "HCERTSTORE" - }, - { - "name": "phMsg", - "type": "HCRYPTMSG" - }, - { - "name": "ppvContext", - "type": "void" - } - ], - "CryptMemAlloc": [ - { - "name": "cbSize", - "type": "ULONG" - } - ], - "CryptMemRealloc": [ - { - "name": "pv", - "type": "LPVOID" - }, - { - "name": "cbSize", - "type": "ULONG" - } - ], - "CryptMemFree": [ - { - "name": "pv", - "type": "LPVOID" - } - ], - "CryptCreateAsyncHandle": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phAsync", - "type": "PHCRYPTASYNC" - } - ], - "CryptGetAsyncParam": [ - { - "name": "hAsync", - "type": "HCRYPTASYNC" - }, - { - "name": "pszParamOid", - "type": "LPSTR" - }, - { - "name": "ppvParam", - "type": "LPVOID" - }, - { - "name": "ppfnFree", - "type": "PFN_CRYPT_ASYNC_PARAM_FREE_FUNC" - } - ], - "CryptCloseAsyncHandle": [ - { - "name": "hAsync", - "type": "HCRYPTASYNC" - } - ], - "CryptRetrieveObjectByUrlA": [ - { - "name": "pszUrl", - "type": "LPCSTR" - }, - { - "name": "pszObjectOid", - "type": "LPCSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "ppvObject", - "type": "LPVOID" - }, - { - "name": "hAsyncRetrieve", - "type": "HCRYPTASYNC" - }, - { - "name": "pCredentials", - "type": "PCRYPT_CREDENTIALS" - }, - { - "name": "pvVerify", - "type": "LPVOID" - }, - { - "name": "pAuxInfo", - "type": "PCRYPT_RETRIEVE_AUX_INFO" - } - ], - "CryptRetrieveObjectByUrlW": [ - { - "name": "pszUrl", - "type": "LPCWSTR" - }, - { - "name": "pszObjectOid", - "type": "LPCSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "ppvObject", - "type": "LPVOID" - }, - { - "name": "hAsyncRetrieve", - "type": "HCRYPTASYNC" - }, - { - "name": "pCredentials", - "type": "PCRYPT_CREDENTIALS" - }, - { - "name": "pvVerify", - "type": "LPVOID" - }, - { - "name": "pAuxInfo", - "type": "PCRYPT_RETRIEVE_AUX_INFO" - } - ], - "CryptGetObjectUrl": [ - { - "name": "pszUrlOid", - "type": "LPCSTR" - }, - { - "name": "pvPara", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pUrlArray", - "type": "PCRYPT_URL_ARRAY" - }, - { - "name": "pcbUrlArray", - "type": "DWORD" - }, - { - "name": "pUrlInfo", - "type": "PCRYPT_URL_INFO" - }, - { - "name": "pcbUrlInfo", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "LPVOID" - } - ], - "CryptGetTimeValidObject": [ - { - "name": "pszTimeValidOid", - "type": "LPCSTR" - }, - { - "name": "pvPara", - "type": "LPVOID" - }, - { - "name": "pIssuer", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pftValidFor", - "type": "LPFILETIME" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "ppvObject", - "type": "LPVOID" - }, - { - "name": "pCredentials", - "type": "PCRYPT_CREDENTIALS" - }, - { - "name": "pExtraInfo", - "type": "PCRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO" - } - ], - "CertCreateSelfSignCertificate": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "pSubjectIssuerBlob", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pKeyProvInfo", - "type": "PCRYPT_KEY_PROV_INFO" - }, - { - "name": "pSignatureAlgorithm", - "type": "PCRYPT_ALGORITHM_IDENTIFIER" - }, - { - "name": "pStartTime", - "type": "PSYSTEMTIME" - }, - { - "name": "pEndTime", - "type": "PSYSTEMTIME" - }, - { - "name": "pExtensions", - "type": "PCERT_EXTENSIONS" - } - ], - "CryptGetKeyIdentifierProperty": [ - { - "name": "pKeyIdentifier", - "type": "CRYPT_HASH_BLOB" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszComputerName", - "type": "LPCWSTR" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CryptSetKeyIdentifierProperty": [ - { - "name": "pKeyIdentifier", - "type": "CRYPT_HASH_BLOB" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszComputerName", - "type": "LPCWSTR" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CryptEnumKeyIdentifierProperties": [ - { - "name": "pKeyIdentifier", - "type": "CRYPT_HASH_BLOB" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszComputerName", - "type": "LPCWSTR" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnum", - "type": "PFN_CRYPT_ENUM_KEYID_PROP" - } - ], - "CryptCreateKeyIdentifierFromCSP": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszPubKeyOID", - "type": "LPCSTR" - }, - { - "name": "pPubKeyStruc", - "type": "PUBLICKEYSTRUC" - }, - { - "name": "cbPubKeyStruc", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pbHash", - "type": "BYTE" - }, - { - "name": "pcbHash", - "type": "DWORD" - } - ], - "CertCreateCertificateChainEngine": [ - { - "name": "pConfig", - "type": "PCERT_CHAIN_ENGINE_CONFIG" - }, - { - "name": "phChainEngine", - "type": "HCERTCHAINENGINE" - } - ], - "CertFreeCertificateChainEngine": [ - { - "name": "hChainEngine", - "type": "HCERTCHAINENGINE" - } - ], - "CertResyncCertificateChainEngine": [ - { - "name": "hChainEngine", - "type": "HCERTCHAINENGINE" - } - ], - "CertGetCertificateChain": [ - { - "name": "hChainEngine", - "type": "HCERTCHAINENGINE" - }, - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pTime", - "type": "LPFILETIME" - }, - { - "name": "hAdditionalStore", - "type": "HCERTSTORE" - }, - { - "name": "pChainPara", - "type": "PCERT_CHAIN_PARA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "LPVOID" - }, - { - "name": "ppChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertFreeCertificateChain": [ - { - "name": "pChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertDuplicateCertificateChain": [ - { - "name": "pChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertFindChainInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFindFlags", - "type": "DWORD" - }, - { - "name": "dwFindType", - "type": "DWORD" - }, - { - "name": "pvFindPara", - "type": "void" - }, - { - "name": "pPrevChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertVerifyCertificateChainPolicy": [ - { - "name": "pszPolicyOID", - "type": "LPCSTR" - }, - { - "name": "pChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - }, - { - "name": "pPolicyPara", - "type": "PCERT_CHAIN_POLICY_PARA" - }, - { - "name": "pPolicyStatus", - "type": "PCERT_CHAIN_POLICY_STATUS" - } - ], - "CryptStringToBinaryA": [ - { - "name": "pszString", - "type": "LPCSTR" - }, - { - "name": "cchString", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbBinary", - "type": "BYTE" - }, - { - "name": "pcbBinary", - "type": "DWORD" - }, - { - "name": "pdwSkip", - "type": "DWORD" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CryptStringToBinaryW": [ - { - "name": "pszString", - "type": "LPCWSTR" - }, - { - "name": "cchString", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbBinary", - "type": "BYTE" - }, - { - "name": "pcbBinary", - "type": "DWORD" - }, - { - "name": "pdwSkip", - "type": "DWORD" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CryptBinaryToStringA": [ - { - "name": "pbBinary", - "type": "BYTE" - }, - { - "name": "cbBinary", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszString", - "type": "LPSTR" - }, - { - "name": "pcchString", - "type": "DWORD" - } - ], - "CryptBinaryToStringW": [ - { - "name": "pbBinary", - "type": "BYTE" - }, - { - "name": "cbBinary", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszString", - "type": "LPWSTR" - }, - { - "name": "pcchString", - "type": "DWORD" - } - ], - "PFXImportCertStore": [ - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - }, - { - "name": "szPassword", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PFXIsPFXBlob": [ - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - } - ], - "PFXVerifyPassword": [ - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - }, - { - "name": "szPassword", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PFXExportCertStoreEx": [ - { - "name": "hStore", - "type": "HCERTSTORE" - }, - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - }, - { - "name": "szPassword", - "type": "LPCWSTR" - }, - { - "name": "pvPara", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PFXExportCertStore": [ - { - "name": "hStore", - "type": "HCERTSTORE" - }, - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - }, - { - "name": "szPassword", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertOpenServerOcspResponse": [ - { - "name": "pChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pOpenPara", - "type": "PCERT_SERVER_OCSP_RESPONSE_OPEN_PARA" - } - ], - "CertAddRefServerOcspResponse": [ - { - "name": "hServerOcspResponse", - "type": "HCERT_SERVER_OCSP_RESPONSE" - } - ], - "CertCloseServerOcspResponse": [ - { - "name": "hServerOcspResponse", - "type": "HCERT_SERVER_OCSP_RESPONSE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertGetServerOcspResponseContext": [ - { - "name": "hServerOcspResponse", - "type": "HCERT_SERVER_OCSP_RESPONSE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "LPVOID" - } - ], - "CertAddRefServerOcspResponseContext": [ - { - "name": "pServerOcspResponseContext", - "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" - } - ], - "CertFreeServerOcspResponseContext": [ - { - "name": "pServerOcspResponseContext", - "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" - } - ], - "CertRetrieveLogoOrBiometricInfo": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "lpszLogoOrBiometricType", - "type": "LPCSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "ppbData", - "type": "BYTE" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "ppwszMimeType", - "type": "LPWSTR" - } - ], - "CertSelectCertificateChains": [ - { - "name": "pSelectionContext", - "type": "LPCGUID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pChainParameters", - "type": "PCCERT_SELECT_CHAIN_PARA" - }, - { - "name": "cCriteria", - "type": "DWORD" - }, - { - "name": "rgpCriteria", - "type": "PCCERT_SELECT_CRITERIA" - }, - { - "name": "hStore", - "type": "HCERTSTORE" - }, - { - "name": "pcSelection", - "type": "PDWORD" - }, - { - "name": "pprgpSelection", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertFreeCertificateChainList": [ - { - "name": "prgpSelection", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CryptRetrieveTimeStamp": [ - { - "name": "wszUrl", - "type": "LPCWSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "pszHashId", - "type": "LPCSTR" - }, - { - "name": "pPara", - "type": "CRYPT_TIMESTAMP_PARA" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "ppTsContext", - "type": "PCRYPT_TIMESTAMP_CONTEXT" - }, - { - "name": "ppTsSigner", - "type": "PCCERT_CONTEXT" - }, - { - "name": "phStore", - "type": "HCERTSTORE" - } - ], - "CryptVerifyTimeStampSignature": [ - { - "name": "pbTSContentInfo", - "type": "BYTE" - }, - { - "name": "cbTSContentInfo", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "hAdditionalStore", - "type": "HCERTSTORE" - }, - { - "name": "ppTsContext", - "type": "PCRYPT_TIMESTAMP_CONTEXT" - }, - { - "name": "ppTsSigner", - "type": "PCCERT_CONTEXT" - }, - { - "name": "phStore", - "type": "HCERTSTORE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Kernel32.json b/qiling/extensions/windows_sdk/Kernel32.json deleted file mode 100644 index 57be90613..000000000 --- a/qiling/extensions/windows_sdk/Kernel32.json +++ /dev/null @@ -1,96 +0,0 @@ -{ - "Wow64DisableWow64FsRedirection": [ - { - "name": "OldValue", - "type": "PVOID" - } - ], - "Wow64RevertWow64FsRedirection": [ - { - "name": "OlValue", - "type": "PVOID" - } - ], - "IsWow64Process": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "Wow64Process", - "type": "PBOOL" - } - ], - "GetSystemWow64DirectoryA": [ - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "GetSystemWow64DirectoryW": [ - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "uSize", - "type": "UINT" - } - ], - "IsWow64Process2": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "pProcessMachine", - "type": "USHORT" - }, - { - "name": "pNativeMachine", - "type": "USHORT" - } - ], - "GetSystemWow64Directory2A": [ - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "uSize", - "type": "UINT" - }, - { - "name": "ImageFileMachineType", - "type": "WORD" - } - ], - "GetSystemWow64Directory2W": [ - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "uSize", - "type": "UINT" - }, - { - "name": "ImageFileMachineType", - "type": "WORD" - } - ], - "IsWow64GuestMachineSupported": [ - { - "name": "WowGuestMachine", - "type": "USHORT" - }, - { - "name": "MachineIsSupported", - "type": "BOOL" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/KernelBase.json b/qiling/extensions/windows_sdk/KernelBase.json deleted file mode 100644 index 37b56a7dd..000000000 --- a/qiling/extensions/windows_sdk/KernelBase.json +++ /dev/null @@ -1,72 +0,0 @@ -{ - "CloseHandle": [ - { - "name": "hObject", - "type": "HANDLE" - } - ], - "DuplicateHandle": [ - { - "name": "hSourceProcessHandle", - "type": "HANDLE" - }, - { - "name": "hSourceHandle", - "type": "HANDLE" - }, - { - "name": "hTargetProcessHandle", - "type": "HANDLE" - }, - { - "name": "lpTargetHandle", - "type": "LPHANDLE" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "bInheritHandle", - "type": "BOOL" - }, - { - "name": "dwOptions", - "type": "DWORD" - } - ], - "CompareObjectHandles": [ - { - "name": "hFirstObjectHandle", - "type": "HANDLE" - }, - { - "name": "hSecondObjectHandle", - "type": "HANDLE" - } - ], - "GetHandleInformation": [ - { - "name": "hObject", - "type": "HANDLE" - }, - { - "name": "lpdwFlags", - "type": "LPDWORD" - } - ], - "SetHandleInformation": [ - { - "name": "hObject", - "type": "HANDLE" - }, - { - "name": "dwMask", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Mfsensorgroup.json b/qiling/extensions/windows_sdk/Mfsensorgroup.json deleted file mode 100644 index ba2fa52cf..000000000 --- a/qiling/extensions/windows_sdk/Mfsensorgroup.json +++ /dev/null @@ -1,764 +0,0 @@ -{ - "MFCreateMediaSession": [ - { - "name": "pConfiguration", - "type": "IMFAttributes" - }, - { - "name": "ppMediaSession", - "type": "IMFMediaSession" - } - ], - "MFCreatePMPMediaSession": [ - { - "name": "dwCreationFlags", - "type": "DWORD" - }, - { - "name": "pConfiguration", - "type": "IMFAttributes" - }, - { - "name": "ppMediaSession", - "type": "IMFMediaSession" - }, - { - "name": "ppEnablerActivate", - "type": "IMFActivate" - } - ], - "MFCreateSourceResolver": [ - { - "name": "ppISourceResolver", - "type": "IMFSourceResolver" - } - ], - "CreatePropertyStore": [ - { - "name": "ppStore", - "type": "IPropertyStore" - } - ], - "MFGetSupportedSchemes": [ - { - "name": "pPropVarSchemeArray", - "type": "PROPVARIANT" - } - ], - "MFGetSupportedMimeTypes": [ - { - "name": "pPropVarMimeTypeArray", - "type": "PROPVARIANT" - } - ], - "MFCreateTopology": [ - { - "name": "ppTopo", - "type": "IMFTopology" - } - ], - "MFCreateTopologyNode": [ - { - "name": "NodeType", - "type": "MF_TOPOLOGY_TYPE" - }, - { - "name": "ppNode", - "type": "IMFTopologyNode" - } - ], - "MFGetTopoNodeCurrentType": [ - { - "name": "pNode", - "type": "IMFTopologyNode" - }, - { - "name": "dwStreamIndex", - "type": "DWORD" - }, - { - "name": "fOutput", - "type": "BOOL" - }, - { - "name": "ppType", - "type": "IMFMediaType" - } - ], - "MFGetService": [ - { - "name": "punkObject", - "type": "IUnknown" - }, - { - "name": "guidService", - "type": "GUID" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppvObject", - "type": "LPVOID" - } - ], - "MFCreatePresentationClock": [ - { - "name": "ppPresentationClock", - "type": "IMFPresentationClock" - } - ], - "MFCreateSystemTimeSource": [ - { - "name": "ppSystemTimeSource", - "type": "IMFPresentationTimeSource" - } - ], - "MFCreatePresentationDescriptor": [ - { - "name": "cStreamDescriptors", - "type": "DWORD" - }, - { - "name": "apStreamDescriptors", - "type": "IMFStreamDescriptor" - }, - { - "name": "ppPresentationDescriptor", - "type": "IMFPresentationDescriptor" - } - ], - "MFRequireProtectedEnvironment": [ - { - "name": "pPresentationDescriptor", - "type": "IMFPresentationDescriptor" - } - ], - "MFSerializePresentationDescriptor": [ - { - "name": "pPD", - "type": "IMFPresentationDescriptor" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "ppbData", - "type": "BYTE" - } - ], - "MFDeserializePresentationDescriptor": [ - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "ppPD", - "type": "IMFPresentationDescriptor" - } - ], - "MFCreateStreamDescriptor": [ - { - "name": "dwStreamIdentifier", - "type": "DWORD" - }, - { - "name": "cMediaTypes", - "type": "DWORD" - }, - { - "name": "apMediaTypes", - "type": "IMFMediaType" - }, - { - "name": "ppDescriptor", - "type": "IMFStreamDescriptor" - } - ], - "MFCreateSimpleTypeHandler": [ - { - "name": "ppHandler", - "type": "IMFMediaTypeHandler" - } - ], - "MFShutdownObject": [ - { - "name": "pUnk", - "type": "IUnknown" - } - ], - "MFCreateAudioRenderer": [ - { - "name": "pAudioAttributes", - "type": "IMFAttributes" - }, - { - "name": "ppSink", - "type": "IMFMediaSink" - } - ], - "MFCreateAudioRendererActivate": [ - { - "name": "ppActivate", - "type": "IMFActivate" - } - ], - "MFCreateVideoRendererActivate": [ - { - "name": "hwndVideo", - "type": "HWND" - }, - { - "name": "ppActivate", - "type": "IMFActivate" - } - ], - "MFCreateMPEG4MediaSink": [ - { - "name": "pIByteStream", - "type": "IMFByteStream" - }, - { - "name": "pVideoMediaType", - "type": "IMFMediaType" - }, - { - "name": "pAudioMediaType", - "type": "IMFMediaType" - }, - { - "name": "ppIMediaSink", - "type": "IMFMediaSink" - } - ], - "MFCreate3GPMediaSink": [ - { - "name": "pIByteStream", - "type": "IMFByteStream" - }, - { - "name": "pVideoMediaType", - "type": "IMFMediaType" - }, - { - "name": "pAudioMediaType", - "type": "IMFMediaType" - }, - { - "name": "ppIMediaSink", - "type": "IMFMediaSink" - } - ], - "MFCreateMP3MediaSink": [ - { - "name": "pTargetByteStream", - "type": "IMFByteStream" - }, - { - "name": "ppMediaSink", - "type": "IMFMediaSink" - } - ], - "MFCreateAC3MediaSink": [ - { - "name": "pTargetByteStream", - "type": "IMFByteStream" - }, - { - "name": "pAudioMediaType", - "type": "IMFMediaType" - }, - { - "name": "ppMediaSink", - "type": "IMFMediaSink" - } - ], - "MFCreateADTSMediaSink": [ - { - "name": "pTargetByteStream", - "type": "IMFByteStream" - }, - { - "name": "pAudioMediaType", - "type": "IMFMediaType" - }, - { - "name": "ppMediaSink", - "type": "IMFMediaSink" - } - ], - "MFCreateMuxSink": [ - { - "name": "guidOutputSubType", - "type": "GUID" - }, - { - "name": "pOutputAttributes", - "type": "IMFAttributes" - }, - { - "name": "pOutputByteStream", - "type": "IMFByteStream" - }, - { - "name": "ppMuxSink", - "type": "IMFMediaSink" - } - ], - "MFCreateFMPEG4MediaSink": [ - { - "name": "pIByteStream", - "type": "IMFByteStream" - }, - { - "name": "pVideoMediaType", - "type": "IMFMediaType" - }, - { - "name": "pAudioMediaType", - "type": "IMFMediaType" - }, - { - "name": "ppIMediaSink", - "type": "IMFMediaSink" - } - ], - "MFCreateAVIMediaSink": [ - { - "name": "pIByteStream", - "type": "IMFByteStream" - }, - { - "name": "pVideoMediaType", - "type": "IMFMediaType" - }, - { - "name": "pAudioMediaType", - "type": "IMFMediaType" - }, - { - "name": "ppIMediaSink", - "type": "IMFMediaSink" - } - ], - "MFCreateWAVEMediaSink": [ - { - "name": "pTargetByteStream", - "type": "IMFByteStream" - }, - { - "name": "pAudioMediaType", - "type": "IMFMediaType" - }, - { - "name": "ppMediaSink", - "type": "IMFMediaSink" - } - ], - "MFCreateTopoLoader": [ - { - "name": "ppObj", - "type": "IMFTopoLoader" - } - ], - "MFCreateSampleGrabberSinkActivate": [ - { - "name": "pIMFMediaType", - "type": "IMFMediaType" - }, - { - "name": "pIMFSampleGrabberSinkCallback", - "type": "IMFSampleGrabberSinkCallback" - }, - { - "name": "ppIActivate", - "type": "IMFActivate" - } - ], - "MFCreateStandardQualityManager": [ - { - "name": "ppQualityManager", - "type": "IMFQualityManager" - } - ], - "MFCreateSequencerSource": [ - { - "name": "pReserved", - "type": "IUnknown" - }, - { - "name": "ppSequencerSource", - "type": "IMFSequencerSource" - } - ], - "MFCreateSequencerSegmentOffset": [ - { - "name": "dwId", - "type": "MFSequencerElementId" - }, - { - "name": "hnsOffset", - "type": "MFTIME" - }, - { - "name": "pvarSegmentOffset", - "type": "PROPVARIANT" - } - ], - "MFCreateAggregateSource": [ - { - "name": "pSourceCollection", - "type": "IMFCollection" - }, - { - "name": "ppAggSource", - "type": "IMFMediaSource" - } - ], - "MFCreateCredentialCache": [ - { - "name": "ppCache", - "type": "IMFNetCredentialCache" - } - ], - "MFCreateProxyLocator": [ - { - "name": "pszProtocol", - "type": "LPCWSTR" - }, - { - "name": "pProxyConfig", - "type": "IPropertyStore" - }, - { - "name": "ppProxyLocator", - "type": "IMFNetProxyLocator" - } - ], - "MFCreateNetSchemePlugin": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppvHandler", - "type": "LPVOID" - } - ], - "MFCreatePMPServer": [ - { - "name": "dwCreationFlags", - "type": "DWORD" - }, - { - "name": "ppPMPServer", - "type": "IMFPMPServer" - } - ], - "MFCreateRemoteDesktopPlugin": [ - { - "name": "ppPlugin", - "type": "IMFRemoteDesktopPlugin" - } - ], - "CreateNamedPropertyStore": [ - { - "name": "ppStore", - "type": "INamedPropertyStore" - } - ], - "MFCreateSampleCopierMFT": [ - { - "name": "ppCopierMFT", - "type": "IMFTransform" - } - ], - "MFCreateTranscodeProfile": [ - { - "name": "ppTranscodeProfile", - "type": "IMFTranscodeProfile" - } - ], - "MFCreateTranscodeTopology": [ - { - "name": "pSrc", - "type": "IMFMediaSource" - }, - { - "name": "pwszOutputFilePath", - "type": "LPCWSTR" - }, - { - "name": "pProfile", - "type": "IMFTranscodeProfile" - }, - { - "name": "ppTranscodeTopo", - "type": "IMFTopology" - } - ], - "MFCreateTranscodeTopologyFromByteStream": [ - { - "name": "pSrc", - "type": "IMFMediaSource" - }, - { - "name": "pOutputStream", - "type": "IMFByteStream" - }, - { - "name": "pProfile", - "type": "IMFTranscodeProfile" - }, - { - "name": "ppTranscodeTopo", - "type": "IMFTopology" - } - ], - "MFTranscodeGetAudioOutputAvailableTypes": [ - { - "name": "guidSubType", - "type": "GUID" - }, - { - "name": "dwMFTFlags", - "type": "DWORD" - }, - { - "name": "pCodecConfig", - "type": "IMFAttributes" - }, - { - "name": "ppAvailableTypes", - "type": "IMFCollection" - } - ], - "MFCreateTranscodeSinkActivate": [ - { - "name": "ppActivate", - "type": "IMFActivate" - } - ], - "MFCreateTrackedSample": [ - { - "name": "ppMFSample", - "type": "IMFTrackedSample" - } - ], - "MFCreateMFByteStreamOnStream": [ - { - "name": "pStream", - "type": "IStream" - }, - { - "name": "ppByteStream", - "type": "IMFByteStream" - } - ], - "MFCreateStreamOnMFByteStream": [ - { - "name": "pByteStream", - "type": "IMFByteStream" - }, - { - "name": "ppStream", - "type": "IStream" - } - ], - "MFCreateMFByteStreamOnStreamEx": [ - { - "name": "punkStream", - "type": "IUnknown" - }, - { - "name": "ppByteStream", - "type": "IMFByteStream" - } - ], - "MFCreateStreamOnMFByteStreamEx": [ - { - "name": "pByteStream", - "type": "IMFByteStream" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "MFCreateMediaTypeFromProperties": [ - { - "name": "punkStream", - "type": "IUnknown" - }, - { - "name": "ppMediaType", - "type": "IMFMediaType" - } - ], - "MFCreatePropertiesFromMediaType": [ - { - "name": "pMediaType", - "type": "IMFMediaType" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "MFEnumDeviceSources": [ - { - "name": "pAttributes", - "type": "IMFAttributes" - }, - { - "name": "pppSourceActivate", - "type": "IMFActivate" - }, - { - "name": "pcSourceActivate", - "type": "UINT32" - } - ], - "MFCreateDeviceSource": [ - { - "name": "pAttributes", - "type": "IMFAttributes" - }, - { - "name": "ppSource", - "type": "IMFMediaSource" - } - ], - "MFCreateDeviceSourceActivate": [ - { - "name": "pAttributes", - "type": "IMFAttributes" - }, - { - "name": "ppActivate", - "type": "IMFActivate" - } - ], - "MFCreateProtectedEnvironmentAccess": [ - { - "name": "ppAccess", - "type": "IMFProtectedEnvironmentAccess" - } - ], - "MFLoadSignedLibrary": [ - { - "name": "pszName", - "type": "LPCWSTR" - }, - { - "name": "ppLib", - "type": "IMFSignedLibrary" - } - ], - "MFGetSystemId": [ - { - "name": "ppId", - "type": "IMFSystemId" - } - ], - "MFGetLocalId": [ - { - "name": "verifier", - "type": "BYTE" - }, - { - "name": "size", - "type": "UINT32" - }, - { - "name": "id", - "type": "LPWSTR" - } - ], - "MFCreateContentProtectionDevice": [ - { - "name": "ProtectionSystemId", - "type": "GUID" - }, - { - "name": "ContentProtectionDevice", - "type": "IMFContentProtectionDevice" - } - ], - "MFIsContentProtectionDeviceSupported": [ - { - "name": "ProtectionSystemId", - "type": "GUID" - }, - { - "name": "isSupported", - "type": "BOOL" - } - ], - "MFCreateContentDecryptorContext": [ - { - "name": "guidMediaProtectionSystemId", - "type": "GUID" - }, - { - "name": "pD3DManager", - "type": "IMFDXGIDeviceManager" - }, - { - "name": "pContentProtectionDevice", - "type": "IMFContentProtectionDevice" - }, - { - "name": "ppContentDecryptorContext", - "type": "IMFContentDecryptorContext" - } - ], - "MFCreateSensorProfile": [ - { - "name": "ProfileType", - "type": "GUID" - }, - { - "name": "ProfileIndex", - "type": "UINT32" - }, - { - "name": "Constraints", - "type": "LPCWSTR" - }, - { - "name": "ppProfile", - "type": "IMFSensorProfile" - } - ], - "MFCreateSensorProfileCollection": [ - { - "name": "ppSensorProfile", - "type": "IMFSensorProfileCollection" - } - ], - "MFCreateSensorActivityMonitor": [ - { - "name": "pCallback", - "type": "IMFSensorActivitiesReportCallback" - }, - { - "name": "ppActivityMonitor", - "type": "IMFSensorActivityMonitor" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Mpr.json b/qiling/extensions/windows_sdk/Mpr.json deleted file mode 100644 index 92beff586..000000000 --- a/qiling/extensions/windows_sdk/Mpr.json +++ /dev/null @@ -1,16 +0,0 @@ -{ - "WNetSetLastErrorA": [ - { - "name": "err", - "type": "DWORD" - }, - { - "name": "lpError", - "type": "LPSTR" - }, - { - "name": "lpProviders", - "type": "LPSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Msimg32.json b/qiling/extensions/windows_sdk/Msimg32.json deleted file mode 100644 index f57fee6e4..000000000 --- a/qiling/extensions/windows_sdk/Msimg32.json +++ /dev/null @@ -1,5434 +0,0 @@ -{ - "AddFontResourceA": [ - { - "name": "VOID", - "type": "LPCSTR" - } - ], - "AddFontResourceW": [ - { - "name": "VOID", - "type": "LPCWSTR" - } - ], - "AnimatePalette": [ - { - "name": "hPal", - "type": "HPALETTE" - }, - { - "name": "iStartIndex", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "ppe", - "type": "PALETTEENTRY" - } - ], - "Arc": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - }, - { - "name": "x3", - "type": "int" - }, - { - "name": "y3", - "type": "int" - }, - { - "name": "x4", - "type": "int" - }, - { - "name": "y4", - "type": "int" - } - ], - "BitBlt": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "CancelDC": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "Chord": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - }, - { - "name": "x3", - "type": "int" - }, - { - "name": "y3", - "type": "int" - }, - { - "name": "x4", - "type": "int" - }, - { - "name": "y4", - "type": "int" - } - ], - "ChoosePixelFormat": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "ppfd", - "type": "PIXELFORMATDESCRIPTOR" - } - ], - "CloseMetaFile": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "CombineRgn": [ - { - "name": "hrgnDst", - "type": "HRGN" - }, - { - "name": "hrgnSrc1", - "type": "HRGN" - }, - { - "name": "hrgnSrc2", - "type": "HRGN" - }, - { - "name": "iMode", - "type": "int" - } - ], - "CopyMetaFileA": [ - { - "name": "VOID", - "type": "HMETAFILE" - }, - { - "name": "VOID", - "type": "LPCSTR" - } - ], - "CopyMetaFileW": [ - { - "name": "VOID", - "type": "HMETAFILE" - }, - { - "name": "VOID", - "type": "LPCWSTR" - } - ], - "CreateBitmap": [ - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "nPlanes", - "type": "UINT" - }, - { - "name": "nBitCount", - "type": "UINT" - }, - { - "name": "lpBits", - "type": "void" - } - ], - "CreateBitmapIndirect": [ - { - "name": "pbm", - "type": "BITMAP" - } - ], - "CreateBrushIndirect": [ - { - "name": "plbrush", - "type": "LOGBRUSH" - } - ], - "CreateCompatibleBitmap": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - } - ], - "CreateDiscardableBitmap": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - } - ], - "CreateCompatibleDC": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "CreateDCA": [ - { - "name": "pwszDriver", - "type": "LPCSTR" - }, - { - "name": "pwszDevice", - "type": "LPCSTR" - }, - { - "name": "pszPort", - "type": "LPCSTR" - }, - { - "name": "pdm", - "type": "DEVMODEA" - } - ], - "CreateDCW": [ - { - "name": "pwszDriver", - "type": "LPCWSTR" - }, - { - "name": "pwszDevice", - "type": "LPCWSTR" - }, - { - "name": "pszPort", - "type": "LPCWSTR" - }, - { - "name": "pdm", - "type": "DEVMODEW" - } - ], - "CreateDIBitmap": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pbmih", - "type": "BITMAPINFOHEADER" - }, - { - "name": "flInit", - "type": "DWORD" - }, - { - "name": "pjBits", - "type": "void" - }, - { - "name": "pbmi", - "type": "BITMAPINFO" - }, - { - "name": "iUsage", - "type": "UINT" - } - ], - "CreateDIBPatternBrush": [ - { - "name": "h", - "type": "HGLOBAL" - }, - { - "name": "iUsage", - "type": "UINT" - } - ], - "CreateDIBPatternBrushPt": [ - { - "name": "lpPackedDIB", - "type": "void" - }, - { - "name": "iUsage", - "type": "UINT" - } - ], - "CreateEllipticRgn": [ - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - } - ], - "CreateEllipticRgnIndirect": [ - { - "name": "lprect", - "type": "RECT" - } - ], - "CreateFontIndirectA": [ - { - "name": "lplf", - "type": "LOGFONTA" - } - ], - "CreateFontIndirectW": [ - { - "name": "lplf", - "type": "LOGFONTW" - } - ], - "CreateFontA": [ - { - "name": "cHeight", - "type": "int" - }, - { - "name": "cWidth", - "type": "int" - }, - { - "name": "cEscapement", - "type": "int" - }, - { - "name": "cOrientation", - "type": "int" - }, - { - "name": "cWeight", - "type": "int" - }, - { - "name": "bItalic", - "type": "DWORD" - }, - { - "name": "bUnderline", - "type": "DWORD" - }, - { - "name": "bStrikeOut", - "type": "DWORD" - }, - { - "name": "iCharSet", - "type": "DWORD" - }, - { - "name": "iOutPrecision", - "type": "DWORD" - }, - { - "name": "iClipPrecision", - "type": "DWORD" - }, - { - "name": "iQuality", - "type": "DWORD" - }, - { - "name": "iPitchAndFamily", - "type": "DWORD" - }, - { - "name": "pszFaceName", - "type": "LPCSTR" - } - ], - "CreateFontW": [ - { - "name": "cHeight", - "type": "int" - }, - { - "name": "cWidth", - "type": "int" - }, - { - "name": "cEscapement", - "type": "int" - }, - { - "name": "cOrientation", - "type": "int" - }, - { - "name": "cWeight", - "type": "int" - }, - { - "name": "bItalic", - "type": "DWORD" - }, - { - "name": "bUnderline", - "type": "DWORD" - }, - { - "name": "bStrikeOut", - "type": "DWORD" - }, - { - "name": "iCharSet", - "type": "DWORD" - }, - { - "name": "iOutPrecision", - "type": "DWORD" - }, - { - "name": "iClipPrecision", - "type": "DWORD" - }, - { - "name": "iQuality", - "type": "DWORD" - }, - { - "name": "iPitchAndFamily", - "type": "DWORD" - }, - { - "name": "pszFaceName", - "type": "LPCWSTR" - } - ], - "CreateHatchBrush": [ - { - "name": "iHatch", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "CreateICA": [ - { - "name": "pszDriver", - "type": "LPCSTR" - }, - { - "name": "pszDevice", - "type": "LPCSTR" - }, - { - "name": "pszPort", - "type": "LPCSTR" - }, - { - "name": "pdm", - "type": "DEVMODEA" - } - ], - "CreateICW": [ - { - "name": "pszDriver", - "type": "LPCWSTR" - }, - { - "name": "pszDevice", - "type": "LPCWSTR" - }, - { - "name": "pszPort", - "type": "LPCWSTR" - }, - { - "name": "pdm", - "type": "DEVMODEW" - } - ], - "CreateMetaFileA": [ - { - "name": "pszFile", - "type": "LPCSTR" - } - ], - "CreateMetaFileW": [ - { - "name": "pszFile", - "type": "LPCWSTR" - } - ], - "CreatePalette": [ - { - "name": "plpal", - "type": "LOGPALETTE" - } - ], - "CreatePen": [ - { - "name": "iStyle", - "type": "int" - }, - { - "name": "cWidth", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "CreatePenIndirect": [ - { - "name": "plpen", - "type": "LOGPEN" - } - ], - "CreatePolyPolygonRgn": [ - { - "name": "pptl", - "type": "POINT" - }, - { - "name": "pc", - "type": "INT" - }, - { - "name": "cPoly", - "type": "int" - }, - { - "name": "iMode", - "type": "int" - } - ], - "CreatePatternBrush": [ - { - "name": "hbm", - "type": "HBITMAP" - } - ], - "CreateRectRgn": [ - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - } - ], - "CreateRectRgnIndirect": [ - { - "name": "lprect", - "type": "RECT" - } - ], - "CreateRoundRectRgn": [ - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - }, - { - "name": "w", - "type": "int" - }, - { - "name": "h", - "type": "int" - } - ], - "CreateScalableFontResourceA": [ - { - "name": "fdwHidden", - "type": "DWORD" - }, - { - "name": "lpszFont", - "type": "LPCSTR" - }, - { - "name": "lpszFile", - "type": "LPCSTR" - }, - { - "name": "lpszPath", - "type": "LPCSTR" - } - ], - "CreateScalableFontResourceW": [ - { - "name": "fdwHidden", - "type": "DWORD" - }, - { - "name": "lpszFont", - "type": "LPCWSTR" - }, - { - "name": "lpszFile", - "type": "LPCWSTR" - }, - { - "name": "lpszPath", - "type": "LPCWSTR" - } - ], - "CreateSolidBrush": [ - { - "name": "color", - "type": "COLORREF" - } - ], - "DeleteDC": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "DeleteMetaFile": [ - { - "name": "hmf", - "type": "HMETAFILE" - } - ], - "DeleteObject": [ - { - "name": "ho", - "type": "HGDIOBJ" - } - ], - "DescribePixelFormat": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iPixelFormat", - "type": "int" - }, - { - "name": "nBytes", - "type": "UINT" - }, - { - "name": "ppfd", - "type": "LPPIXELFORMATDESCRIPTOR" - } - ], - "DeviceCapabilitiesA": [ - { - "name": "pDevice", - "type": "LPCSTR" - }, - { - "name": "pPort", - "type": "LPCSTR" - }, - { - "name": "fwCapability", - "type": "WORD" - }, - { - "name": "pOutput", - "type": "LPSTR" - }, - { - "name": "pDevMode", - "type": "DEVMODEA" - } - ], - "DeviceCapabilitiesW": [ - { - "name": "pDevice", - "type": "LPCWSTR" - }, - { - "name": "pPort", - "type": "LPCWSTR" - }, - { - "name": "fwCapability", - "type": "WORD" - }, - { - "name": "pOutput", - "type": "LPWSTR" - }, - { - "name": "pDevMode", - "type": "DEVMODEW" - } - ], - "DrawEscape": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iEscape", - "type": "int" - }, - { - "name": "cjIn", - "type": "int" - }, - { - "name": "lpIn", - "type": "LPCSTR" - } - ], - "Ellipse": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "EnumFontFamiliesExA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPLOGFONTA" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCA" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumFontFamiliesExW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPLOGFONTW" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCW" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumFontFamiliesA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPCSTR" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCA" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumFontFamiliesW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPCWSTR" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCW" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumFontsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPCSTR" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCA" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumFontsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPCWSTR" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCW" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumObjects": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nType", - "type": "int" - }, - { - "name": "lpFunc", - "type": "GOBJENUMPROC" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EqualRgn": [ - { - "name": "hrgn1", - "type": "HRGN" - }, - { - "name": "hrgn2", - "type": "HRGN" - } - ], - "Escape": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iEscape", - "type": "int" - }, - { - "name": "cjIn", - "type": "int" - }, - { - "name": "pvIn", - "type": "LPCSTR" - }, - { - "name": "pvOut", - "type": "LPVOID" - } - ], - "ExtEscape": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iEscape", - "type": "int" - }, - { - "name": "cjInput", - "type": "int" - }, - { - "name": "lpInData", - "type": "LPCSTR" - }, - { - "name": "cjOutput", - "type": "int" - }, - { - "name": "lpOutData", - "type": "LPSTR" - } - ], - "ExcludeClipRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "ExtCreateRegion": [ - { - "name": "lpx", - "type": "XFORM" - }, - { - "name": "nCount", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "RGNDATA" - } - ], - "ExtFloodFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - }, - { - "name": "type", - "type": "UINT" - } - ], - "FillRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "hbr", - "type": "HBRUSH" - } - ], - "FloodFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "FrameRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "hbr", - "type": "HBRUSH" - }, - { - "name": "w", - "type": "int" - }, - { - "name": "h", - "type": "int" - } - ], - "GetROP2": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetAspectRatioFilterEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpsize", - "type": "LPSIZE" - } - ], - "GetBkColor": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetDCBrushColor": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetDCPenColor": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetBkMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetBitmapBits": [ - { - "name": "hbit", - "type": "HBITMAP" - }, - { - "name": "cb", - "type": "LONG" - }, - { - "name": "lpvBits", - "type": "LPVOID" - } - ], - "GetBitmapDimensionEx": [ - { - "name": "hbit", - "type": "HBITMAP" - }, - { - "name": "lpsize", - "type": "LPSIZE" - } - ], - "GetBoundsRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "LPRECT" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "GetBrushOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "GetCharWidthA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPINT" - } - ], - "GetCharWidthW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPINT" - } - ], - "GetCharWidth32A": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPINT" - } - ], - "GetCharWidth32W": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPINT" - } - ], - "GetCharWidthFloatA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "PFLOAT" - } - ], - "GetCharWidthFloatW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "PFLOAT" - } - ], - "GetCharABCWidthsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "wFirst", - "type": "UINT" - }, - { - "name": "wLast", - "type": "UINT" - }, - { - "name": "lpABC", - "type": "LPABC" - } - ], - "GetCharABCWidthsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "wFirst", - "type": "UINT" - }, - { - "name": "wLast", - "type": "UINT" - }, - { - "name": "lpABC", - "type": "LPABC" - } - ], - "GetCharABCWidthsFloatA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpABC", - "type": "LPABCFLOAT" - } - ], - "GetCharABCWidthsFloatW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpABC", - "type": "LPABCFLOAT" - } - ], - "GetClipBox": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "LPRECT" - } - ], - "GetClipRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "GetMetaRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "GetCurrentObject": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "type", - "type": "UINT" - } - ], - "GetCurrentPositionEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "GetDeviceCaps": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "index", - "type": "int" - } - ], - "GetDIBits": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hbm", - "type": "HBITMAP" - }, - { - "name": "start", - "type": "UINT" - }, - { - "name": "cLines", - "type": "UINT" - }, - { - "name": "lpvBits", - "type": "LPVOID" - }, - { - "name": "lpbmi", - "type": "LPBITMAPINFO" - }, - { - "name": "usage", - "type": "UINT" - } - ], - "GetFontData": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "dwTable", - "type": "DWORD" - }, - { - "name": "dwOffset", - "type": "DWORD" - }, - { - "name": "pvBuffer", - "type": "PVOID" - }, - { - "name": "cjBuffer", - "type": "DWORD" - } - ], - "GetGlyphOutlineA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "uChar", - "type": "UINT" - }, - { - "name": "fuFormat", - "type": "UINT" - }, - { - "name": "lpgm", - "type": "LPGLYPHMETRICS" - }, - { - "name": "cjBuffer", - "type": "DWORD" - }, - { - "name": "pvBuffer", - "type": "LPVOID" - }, - { - "name": "lpmat2", - "type": "MAT2" - } - ], - "GetGlyphOutlineW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "uChar", - "type": "UINT" - }, - { - "name": "fuFormat", - "type": "UINT" - }, - { - "name": "lpgm", - "type": "LPGLYPHMETRICS" - }, - { - "name": "cjBuffer", - "type": "DWORD" - }, - { - "name": "pvBuffer", - "type": "LPVOID" - }, - { - "name": "lpmat2", - "type": "MAT2" - } - ], - "GetGraphicsMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetMapMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetMetaFileBitsEx": [ - { - "name": "hMF", - "type": "HMETAFILE" - }, - { - "name": "cbBuffer", - "type": "UINT" - }, - { - "name": "lpData", - "type": "LPVOID" - } - ], - "GetMetaFileA": [ - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "GetMetaFileW": [ - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "GetNearestColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "GetNearestPaletteIndex": [ - { - "name": "h", - "type": "HPALETTE" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "GetObjectType": [ - { - "name": "h", - "type": "HGDIOBJ" - } - ], - "GetOutlineTextMetricsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "cjCopy", - "type": "UINT" - }, - { - "name": "potm", - "type": "LPOUTLINETEXTMETRICA" - } - ], - "GetOutlineTextMetricsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "cjCopy", - "type": "UINT" - }, - { - "name": "potm", - "type": "LPOUTLINETEXTMETRICW" - } - ], - "GetPaletteEntries": [ - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "pPalEntries", - "type": "LPPALETTEENTRY" - } - ], - "GetPixel": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "GetPixelFormat": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetPolyFillMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetRasterizerCaps": [ - { - "name": "lpraststat", - "type": "LPRASTERIZER_STATUS" - }, - { - "name": "cjBytes", - "type": "UINT" - } - ], - "GetRandomRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "i", - "type": "INT" - } - ], - "GetRegionData": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "nCount", - "type": "DWORD" - }, - { - "name": "lpRgnData", - "type": "LPRGNDATA" - } - ], - "GetRgnBox": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "lprc", - "type": "LPRECT" - } - ], - "GetStockObject": [ - { - "name": "i", - "type": "int" - } - ], - "GetStretchBltMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetSystemPaletteEntries": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "pPalEntries", - "type": "LPPALETTEENTRY" - } - ], - "GetSystemPaletteUse": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextCharacterExtra": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextAlign": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextColor": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextExtentPointA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "GetTextExtentPointW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "GetTextExtentPoint32A": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "psizl", - "type": "LPSIZE" - } - ], - "GetTextExtentPoint32W": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "psizl", - "type": "LPSIZE" - } - ], - "GetTextExtentExPointA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpszString", - "type": "LPCSTR" - }, - { - "name": "cchString", - "type": "int" - }, - { - "name": "nMaxExtent", - "type": "int" - }, - { - "name": "lpnFit", - "type": "LPINT" - }, - { - "name": "lpnDx", - "type": "LPINT" - }, - { - "name": "lpSize", - "type": "LPSIZE" - } - ], - "GetTextExtentExPointW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpszString", - "type": "LPCWSTR" - }, - { - "name": "cchString", - "type": "int" - }, - { - "name": "nMaxExtent", - "type": "int" - }, - { - "name": "lpnFit", - "type": "LPINT" - }, - { - "name": "lpnDx", - "type": "LPINT" - }, - { - "name": "lpSize", - "type": "LPSIZE" - } - ], - "GetTextCharset": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextCharsetInfo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpSig", - "type": "LPFONTSIGNATURE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "TranslateCharsetInfo": [ - { - "name": "lpSrc", - "type": "DWORD" - }, - { - "name": "lpCs", - "type": "LPCHARSETINFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetFontLanguageInfo": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetCharacterPlacementA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "nCount", - "type": "int" - }, - { - "name": "nMexExtent", - "type": "int" - }, - { - "name": "lpResults", - "type": "LPGCP_RESULTSA" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetCharacterPlacementW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "nCount", - "type": "int" - }, - { - "name": "nMexExtent", - "type": "int" - }, - { - "name": "lpResults", - "type": "LPGCP_RESULTSW" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetFontUnicodeRanges": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpgs", - "type": "LPGLYPHSET" - } - ], - "GetGlyphIndicesA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpstr", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "pgi", - "type": "LPWORD" - }, - { - "name": "fl", - "type": "DWORD" - } - ], - "GetGlyphIndicesW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpstr", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "pgi", - "type": "LPWORD" - }, - { - "name": "fl", - "type": "DWORD" - } - ], - "GetTextExtentPointI": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pgiIn", - "type": "LPWORD" - }, - { - "name": "cgi", - "type": "int" - }, - { - "name": "psize", - "type": "LPSIZE" - } - ], - "GetTextExtentExPointI": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpwszString", - "type": "LPWORD" - }, - { - "name": "cwchString", - "type": "int" - }, - { - "name": "nMaxExtent", - "type": "int" - }, - { - "name": "lpnFit", - "type": "LPINT" - }, - { - "name": "lpnDx", - "type": "LPINT" - }, - { - "name": "lpSize", - "type": "LPSIZE" - } - ], - "GetCharWidthI": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "giFirst", - "type": "UINT" - }, - { - "name": "cgi", - "type": "UINT" - }, - { - "name": "pgi", - "type": "LPWORD" - }, - { - "name": "piWidths", - "type": "LPINT" - } - ], - "GetCharABCWidthsI": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "giFirst", - "type": "UINT" - }, - { - "name": "cgi", - "type": "UINT" - }, - { - "name": "pgi", - "type": "LPWORD" - }, - { - "name": "pabc", - "type": "LPABC" - } - ], - "AddFontResourceExA": [ - { - "name": "name", - "type": "LPCSTR" - }, - { - "name": "fl", - "type": "DWORD" - }, - { - "name": "res", - "type": "PVOID" - } - ], - "AddFontResourceExW": [ - { - "name": "name", - "type": "LPCWSTR" - }, - { - "name": "fl", - "type": "DWORD" - }, - { - "name": "res", - "type": "PVOID" - } - ], - "RemoveFontResourceExA": [ - { - "name": "name", - "type": "LPCSTR" - }, - { - "name": "fl", - "type": "DWORD" - }, - { - "name": "pdv", - "type": "PVOID" - } - ], - "RemoveFontResourceExW": [ - { - "name": "name", - "type": "LPCWSTR" - }, - { - "name": "fl", - "type": "DWORD" - }, - { - "name": "pdv", - "type": "PVOID" - } - ], - "AddFontMemResourceEx": [ - { - "name": "pFileView", - "type": "PVOID" - }, - { - "name": "cjSize", - "type": "DWORD" - }, - { - "name": "pvResrved", - "type": "PVOID" - }, - { - "name": "pNumFonts", - "type": "DWORD" - } - ], - "RemoveFontMemResourceEx": [ - { - "name": "h", - "type": "HANDLE" - } - ], - "CreateFontIndirectExA": [ - { - "name": "VOID", - "type": "ENUMLOGFONTEXDVA" - } - ], - "CreateFontIndirectExW": [ - { - "name": "VOID", - "type": "ENUMLOGFONTEXDVW" - } - ], - "GetViewportExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpsize", - "type": "LPSIZE" - } - ], - "GetViewportOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppoint", - "type": "LPPOINT" - } - ], - "GetWindowExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpsize", - "type": "LPSIZE" - } - ], - "GetWindowOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppoint", - "type": "LPPOINT" - } - ], - "IntersectClipRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "InvertRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "LineDDA": [ - { - "name": "xStart", - "type": "int" - }, - { - "name": "yStart", - "type": "int" - }, - { - "name": "xEnd", - "type": "int" - }, - { - "name": "yEnd", - "type": "int" - }, - { - "name": "lpProc", - "type": "LINEDDAPROC" - }, - { - "name": "data", - "type": "LPARAM" - } - ], - "LineTo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "MaskBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xDest", - "type": "int" - }, - { - "name": "yDest", - "type": "int" - }, - { - "name": "width", - "type": "int" - }, - { - "name": "height", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "hbmMask", - "type": "HBITMAP" - }, - { - "name": "xMask", - "type": "int" - }, - { - "name": "yMask", - "type": "int" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "PlgBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "lpPoint", - "type": "POINT" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "width", - "type": "int" - }, - { - "name": "height", - "type": "int" - }, - { - "name": "hbmMask", - "type": "HBITMAP" - }, - { - "name": "xMask", - "type": "int" - }, - { - "name": "yMask", - "type": "int" - } - ], - "OffsetClipRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "OffsetRgn": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "PatBlt": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "w", - "type": "int" - }, - { - "name": "h", - "type": "int" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "Pie": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - }, - { - "name": "xr1", - "type": "int" - }, - { - "name": "yr1", - "type": "int" - }, - { - "name": "xr2", - "type": "int" - }, - { - "name": "yr2", - "type": "int" - } - ], - "PlayMetaFile": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hmf", - "type": "HMETAFILE" - } - ], - "PaintRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "PolyPolygon": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "asz", - "type": "INT" - }, - { - "name": "csz", - "type": "int" - } - ], - "PtInRegion": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "PtVisible": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "RectInRegion": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "lprect", - "type": "RECT" - } - ], - "RectVisible": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "RECT" - } - ], - "Rectangle": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "RestoreDC": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nSavedDC", - "type": "int" - } - ], - "ResetDCA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpdm", - "type": "DEVMODEA" - } - ], - "ResetDCW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpdm", - "type": "DEVMODEW" - } - ], - "RealizePalette": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "RemoveFontResourceA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "RemoveFontResourceW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "RoundRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - }, - { - "name": "width", - "type": "int" - }, - { - "name": "height", - "type": "int" - } - ], - "ResizePalette": [ - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "n", - "type": "UINT" - } - ], - "SaveDC": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SelectClipRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "ExtSelectClipRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "mode", - "type": "int" - } - ], - "SetMetaRgn": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SelectObject": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "h", - "type": "HGDIOBJ" - } - ], - "SelectPalette": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hPal", - "type": "HPALETTE" - }, - { - "name": "bForceBkgd", - "type": "BOOL" - } - ], - "SetBkColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetDCBrushColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetDCPenColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetBkMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "SetBitmapBits": [ - { - "name": "hbm", - "type": "HBITMAP" - }, - { - "name": "cb", - "type": "DWORD" - }, - { - "name": "pvBits", - "type": "void" - } - ], - "SetBoundsRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "RECT" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "SetDIBits": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hbm", - "type": "HBITMAP" - }, - { - "name": "start", - "type": "UINT" - }, - { - "name": "cLines", - "type": "UINT" - }, - { - "name": "lpBits", - "type": "void" - }, - { - "name": "lpbmi", - "type": "BITMAPINFO" - }, - { - "name": "ColorUse", - "type": "UINT" - } - ], - "SetDIBitsToDevice": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xDest", - "type": "int" - }, - { - "name": "yDest", - "type": "int" - }, - { - "name": "w", - "type": "DWORD" - }, - { - "name": "h", - "type": "DWORD" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "StartScan", - "type": "UINT" - }, - { - "name": "cLines", - "type": "UINT" - }, - { - "name": "lpvBits", - "type": "void" - }, - { - "name": "lpbmi", - "type": "BITMAPINFO" - }, - { - "name": "ColorUse", - "type": "UINT" - } - ], - "SetMapperFlags": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "flags", - "type": "DWORD" - } - ], - "SetGraphicsMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iMode", - "type": "int" - } - ], - "SetMapMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iMode", - "type": "int" - } - ], - "SetLayout": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "l", - "type": "DWORD" - } - ], - "GetLayout": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SetMetaFileBitsEx": [ - { - "name": "cbBuffer", - "type": "UINT" - }, - { - "name": "lpData", - "type": "BYTE" - } - ], - "SetPaletteEntries": [ - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "pPalEntries", - "type": "PALETTEENTRY" - } - ], - "SetPixel": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetPixelV": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetPixelFormat": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "format", - "type": "int" - }, - { - "name": "ppfd", - "type": "PIXELFORMATDESCRIPTOR" - } - ], - "SetPolyFillMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "StretchBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xDest", - "type": "int" - }, - { - "name": "yDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "SetRectRgn": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "StretchDIBits": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xDest", - "type": "int" - }, - { - "name": "yDest", - "type": "int" - }, - { - "name": "DestWidth", - "type": "int" - }, - { - "name": "DestHeight", - "type": "int" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "SrcWidth", - "type": "int" - }, - { - "name": "SrcHeight", - "type": "int" - }, - { - "name": "lpBits", - "type": "void" - }, - { - "name": "lpbmi", - "type": "BITMAPINFO" - }, - { - "name": "iUsage", - "type": "UINT" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "SetROP2": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "rop2", - "type": "int" - } - ], - "SetStretchBltMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "SetSystemPaletteUse": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "use", - "type": "UINT" - } - ], - "SetTextCharacterExtra": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "extra", - "type": "int" - } - ], - "SetTextColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetTextAlign": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "align", - "type": "UINT" - } - ], - "SetTextJustification": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "extra", - "type": "int" - }, - { - "name": "count", - "type": "int" - } - ], - "UpdateColors": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "AlphaBlend": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "ftn", - "type": "BLENDFUNCTION" - } - ], - "TransparentBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "crTransparent", - "type": "UINT" - } - ], - "GradientFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pVertex", - "type": "PTRIVERTEX" - }, - { - "name": "nVertex", - "type": "ULONG" - }, - { - "name": "pMesh", - "type": "PVOID" - }, - { - "name": "nMesh", - "type": "ULONG" - }, - { - "name": "ulMode", - "type": "ULONG" - } - ], - "GdiAlphaBlend": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "ftn", - "type": "BLENDFUNCTION" - } - ], - "GdiTransparentBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "crTransparent", - "type": "UINT" - } - ], - "GdiGradientFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pVertex", - "type": "PTRIVERTEX" - }, - { - "name": "nVertex", - "type": "ULONG" - }, - { - "name": "pMesh", - "type": "PVOID" - }, - { - "name": "nCount", - "type": "ULONG" - }, - { - "name": "ulMode", - "type": "ULONG" - } - ], - "PlayMetaFileRecord": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpHandleTable", - "type": "LPHANDLETABLE" - }, - { - "name": "lpMR", - "type": "LPMETARECORD" - }, - { - "name": "noObjs", - "type": "UINT" - } - ], - "EnumMetaFile": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hmf", - "type": "HMETAFILE" - }, - { - "name": "proc", - "type": "MFENUMPROC" - }, - { - "name": "param", - "type": "LPARAM" - } - ], - "CloseEnhMetaFile": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "CopyEnhMetaFileA": [ - { - "name": "hEnh", - "type": "HENHMETAFILE" - }, - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "CopyEnhMetaFileW": [ - { - "name": "hEnh", - "type": "HENHMETAFILE" - }, - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "CreateEnhMetaFileA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpFilename", - "type": "LPCSTR" - }, - { - "name": "lprc", - "type": "RECT" - }, - { - "name": "lpDesc", - "type": "LPCSTR" - } - ], - "CreateEnhMetaFileW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpFilename", - "type": "LPCWSTR" - }, - { - "name": "lprc", - "type": "RECT" - }, - { - "name": "lpDesc", - "type": "LPCWSTR" - } - ], - "DeleteEnhMetaFile": [ - { - "name": "hmf", - "type": "HENHMETAFILE" - } - ], - "EnumEnhMetaFile": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hmf", - "type": "HENHMETAFILE" - }, - { - "name": "proc", - "type": "ENHMFENUMPROC" - }, - { - "name": "param", - "type": "LPVOID" - }, - { - "name": "lpRect", - "type": "RECT" - } - ], - "GetEnhMetaFileA": [ - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "GetEnhMetaFileW": [ - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "GetEnhMetaFileBits": [ - { - "name": "hEMF", - "type": "HENHMETAFILE" - }, - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "lpData", - "type": "LPBYTE" - } - ], - "GetEnhMetaFileDescriptionA": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "cchBuffer", - "type": "UINT" - }, - { - "name": "lpDescription", - "type": "LPSTR" - } - ], - "GetEnhMetaFileDescriptionW": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "cchBuffer", - "type": "UINT" - }, - { - "name": "lpDescription", - "type": "LPWSTR" - } - ], - "GetEnhMetaFileHeader": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "lpEnhMetaHeader", - "type": "LPENHMETAHEADER" - } - ], - "GetEnhMetaFilePaletteEntries": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "nNumEntries", - "type": "UINT" - }, - { - "name": "lpPaletteEntries", - "type": "LPPALETTEENTRY" - } - ], - "GetEnhMetaFilePixelFormat": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "cbBuffer", - "type": "UINT" - }, - { - "name": "ppfd", - "type": "PIXELFORMATDESCRIPTOR" - } - ], - "GetWinMetaFileBits": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "cbData16", - "type": "UINT" - }, - { - "name": "pData16", - "type": "LPBYTE" - }, - { - "name": "iMapMode", - "type": "INT" - }, - { - "name": "hdcRef", - "type": "HDC" - } - ], - "PlayEnhMetaFile": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hmf", - "type": "HENHMETAFILE" - }, - { - "name": "lprect", - "type": "RECT" - } - ], - "PlayEnhMetaFileRecord": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pht", - "type": "LPHANDLETABLE" - }, - { - "name": "pmr", - "type": "ENHMETARECORD" - }, - { - "name": "cht", - "type": "UINT" - } - ], - "SetEnhMetaFileBits": [ - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "pb", - "type": "BYTE" - } - ], - "SetWinMetaFileBits": [ - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "lpMeta16Data", - "type": "BYTE" - }, - { - "name": "hdcRef", - "type": "HDC" - }, - { - "name": "lpMFP", - "type": "METAFILEPICT" - } - ], - "GdiComment": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "lpData", - "type": "BYTE" - } - ], - "GetTextMetricsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lptm", - "type": "LPTEXTMETRICA" - } - ], - "GetTextMetricsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lptm", - "type": "LPTEXTMETRICW" - } - ], - "AngleArc": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "r", - "type": "DWORD" - }, - { - "name": "StartAngle", - "type": "FLOAT" - }, - { - "name": "SweepAngle", - "type": "FLOAT" - } - ], - "PolyPolyline": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "asz", - "type": "DWORD" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "GetWorldTransform": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpxf", - "type": "LPXFORM" - } - ], - "SetWorldTransform": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpxf", - "type": "XFORM" - } - ], - "ModifyWorldTransform": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpxf", - "type": "XFORM" - }, - { - "name": "mode", - "type": "DWORD" - } - ], - "CombineTransform": [ - { - "name": "lpxfOut", - "type": "LPXFORM" - }, - { - "name": "lpxf1", - "type": "XFORM" - }, - { - "name": "lpxf2", - "type": "XFORM" - } - ], - "CreateDIBSection": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pbmi", - "type": "BITMAPINFO" - }, - { - "name": "usage", - "type": "UINT" - }, - { - "name": "ppvBits", - "type": "void" - }, - { - "name": "hSection", - "type": "HANDLE" - }, - { - "name": "offset", - "type": "DWORD" - } - ], - "GetDIBColorTable": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "prgbq", - "type": "RGBQUAD" - } - ], - "SetDIBColorTable": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "prgbq", - "type": "RGBQUAD" - } - ], - "SetColorAdjustment": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpca", - "type": "COLORADJUSTMENT" - } - ], - "GetColorAdjustment": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpca", - "type": "LPCOLORADJUSTMENT" - } - ], - "CreateHalftonePalette": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "StartDocA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpdi", - "type": "DOCINFOA" - } - ], - "StartDocW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpdi", - "type": "DOCINFOW" - } - ], - "EndDoc": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "StartPage": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "EndPage": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "AbortDoc": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SetAbortProc": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "proc", - "type": "ABORTPROC" - } - ], - "AbortPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "ArcTo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - }, - { - "name": "xr1", - "type": "int" - }, - { - "name": "yr1", - "type": "int" - }, - { - "name": "xr2", - "type": "int" - }, - { - "name": "yr2", - "type": "int" - } - ], - "BeginPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "CloseFigure": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "EndPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "FillPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "FlattenPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetPath": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "LPPOINT" - }, - { - "name": "aj", - "type": "LPBYTE" - }, - { - "name": "cpt", - "type": "int" - } - ], - "PathToRegion": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "PolyDraw": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "aj", - "type": "BYTE" - }, - { - "name": "cpt", - "type": "int" - } - ], - "SelectClipPath": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "SetArcDirection": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "dir", - "type": "int" - } - ], - "SetMiterLimit": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "limit", - "type": "FLOAT" - }, - { - "name": "old", - "type": "PFLOAT" - } - ], - "StrokeAndFillPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "StrokePath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "WidenPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "ExtCreatePen": [ - { - "name": "iPenStyle", - "type": "DWORD" - }, - { - "name": "cWidth", - "type": "DWORD" - }, - { - "name": "plbrush", - "type": "LOGBRUSH" - }, - { - "name": "cStyle", - "type": "DWORD" - }, - { - "name": "pstyle", - "type": "DWORD" - } - ], - "GetMiterLimit": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "plimit", - "type": "PFLOAT" - } - ], - "GetArcDirection": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetObjectA": [ - { - "name": "h", - "type": "HANDLE" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "pv", - "type": "LPVOID" - } - ], - "GetObjectW": [ - { - "name": "h", - "type": "HANDLE" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "pv", - "type": "LPVOID" - } - ], - "MoveToEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "TextOutA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "int" - } - ], - "TextOutW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "int" - } - ], - "ExtTextOutA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "options", - "type": "UINT" - }, - { - "name": "lprect", - "type": "RECT" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "UINT" - }, - { - "name": "lpDx", - "type": "INT" - } - ], - "ExtTextOutW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "options", - "type": "UINT" - }, - { - "name": "lprect", - "type": "RECT" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "UINT" - }, - { - "name": "lpDx", - "type": "INT" - } - ], - "PolyTextOutA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "ppt", - "type": "POLYTEXTA" - }, - { - "name": "nstrings", - "type": "int" - } - ], - "PolyTextOutW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "ppt", - "type": "POLYTEXTW" - }, - { - "name": "nstrings", - "type": "int" - } - ], - "CreatePolygonRgn": [ - { - "name": "pptl", - "type": "POINT" - }, - { - "name": "cPoint", - "type": "int" - }, - { - "name": "iMode", - "type": "int" - } - ], - "DPtoLP": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - }, - { - "name": "c", - "type": "int" - } - ], - "LPtoDP": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - }, - { - "name": "c", - "type": "int" - } - ], - "Polygon": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "int" - } - ], - "Polyline": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "int" - } - ], - "PolyBezier": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "DWORD" - } - ], - "PolyBezierTo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "DWORD" - } - ], - "PolylineTo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "DWORD" - } - ], - "SetViewportExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "SetViewportOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "SetWindowExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "SetWindowOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "OffsetViewportOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "OffsetWindowOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "ScaleViewportExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xn", - "type": "int" - }, - { - "name": "dx", - "type": "int" - }, - { - "name": "yn", - "type": "int" - }, - { - "name": "yd", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "ScaleWindowExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xn", - "type": "int" - }, - { - "name": "xd", - "type": "int" - }, - { - "name": "yn", - "type": "int" - }, - { - "name": "yd", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "SetBitmapDimensionEx": [ - { - "name": "hbm", - "type": "HBITMAP" - }, - { - "name": "w", - "type": "int" - }, - { - "name": "h", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "SetBrushOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "GetTextFaceA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "lpName", - "type": "LPSTR" - } - ], - "GetTextFaceW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "lpName", - "type": "LPWSTR" - } - ], - "GetKerningPairsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nPairs", - "type": "DWORD" - }, - { - "name": "lpKernPair", - "type": "LPKERNINGPAIR" - } - ], - "GetKerningPairsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nPairs", - "type": "DWORD" - }, - { - "name": "lpKernPair", - "type": "LPKERNINGPAIR" - } - ], - "GetDCOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "UnrealizeObject": [ - { - "name": "h", - "type": "HGDIOBJ" - } - ], - "GdiFlush": [ - { - "name": "VOID", - "type": "void" - } - ], - "GdiSetBatchLimit": [ - { - "name": "dw", - "type": "DWORD" - } - ], - "GdiGetBatchLimit": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetICMMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "CheckColorsInGamut": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpRGBTriple", - "type": "LPRGBTRIPLE" - }, - { - "name": "dlpBuffer", - "type": "LPVOID" - }, - { - "name": "nCount", - "type": "DWORD" - } - ], - "GetColorSpace": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetLogColorSpaceA": [ - { - "name": "hColorSpace", - "type": "HCOLORSPACE" - }, - { - "name": "lpBuffer", - "type": "LPLOGCOLORSPACEA" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "GetLogColorSpaceW": [ - { - "name": "hColorSpace", - "type": "HCOLORSPACE" - }, - { - "name": "lpBuffer", - "type": "LPLOGCOLORSPACEW" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "CreateColorSpaceA": [ - { - "name": "lplcs", - "type": "LPLOGCOLORSPACEA" - } - ], - "CreateColorSpaceW": [ - { - "name": "lplcs", - "type": "LPLOGCOLORSPACEW" - } - ], - "SetColorSpace": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hcs", - "type": "HCOLORSPACE" - } - ], - "DeleteColorSpace": [ - { - "name": "hcs", - "type": "HCOLORSPACE" - } - ], - "GetICMProfileA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pBufSize", - "type": "LPDWORD" - }, - { - "name": "pszFilename", - "type": "LPSTR" - } - ], - "GetICMProfileW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pBufSize", - "type": "LPDWORD" - }, - { - "name": "pszFilename", - "type": "LPWSTR" - } - ], - "SetICMProfileA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpFileName", - "type": "LPSTR" - } - ], - "SetICMProfileW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpFileName", - "type": "LPWSTR" - } - ], - "GetDeviceGammaRamp": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpRamp", - "type": "LPVOID" - } - ], - "SetDeviceGammaRamp": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpRamp", - "type": "LPVOID" - } - ], - "ColorMatchToTarget": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hdcTarget", - "type": "HDC" - }, - { - "name": "action", - "type": "DWORD" - } - ], - "EnumICMProfilesA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "proc", - "type": "ICMENUMPROCA" - }, - { - "name": "param", - "type": "LPARAM" - } - ], - "EnumICMProfilesW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "proc", - "type": "ICMENUMPROCW" - }, - { - "name": "param", - "type": "LPARAM" - } - ], - "UpdateICMRegKeyA": [ - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "lpszCMID", - "type": "LPSTR" - }, - { - "name": "lpszFileName", - "type": "LPSTR" - }, - { - "name": "command", - "type": "UINT" - } - ], - "UpdateICMRegKeyW": [ - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "lpszCMID", - "type": "LPWSTR" - }, - { - "name": "lpszFileName", - "type": "LPWSTR" - }, - { - "name": "command", - "type": "UINT" - } - ], - "ColorCorrectPalette": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hPal", - "type": "HPALETTE" - }, - { - "name": "deFirst", - "type": "DWORD" - }, - { - "name": "num", - "type": "DWORD" - } - ], - "wglCopyContext": [ - { - "name": "VOID", - "type": "HGLRC" - }, - { - "name": "VOID", - "type": "HGLRC" - }, - { - "name": "VOID", - "type": "UINT" - } - ], - "wglCreateContext": [ - { - "name": "VOID", - "type": "HDC" - } - ], - "wglCreateLayerContext": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - } - ], - "wglDeleteContext": [ - { - "name": "VOID", - "type": "HGLRC" - } - ], - "wglGetCurrentContext": [ - { - "name": "VOID", - "type": "void" - } - ], - "wglGetCurrentDC": [ - { - "name": "VOID", - "type": "void" - } - ], - "wglGetProcAddress": [ - { - "name": "VOID", - "type": "LPCSTR" - } - ], - "wglMakeCurrent": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "HGLRC" - } - ], - "wglShareLists": [ - { - "name": "VOID", - "type": "HGLRC" - }, - { - "name": "VOID", - "type": "HGLRC" - } - ], - "wglUseFontBitmapsA": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "wglUseFontBitmapsW": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "SwapBuffers": [ - { - "name": "VOID", - "type": "HDC" - } - ], - "wglUseFontOutlinesA": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "LPGLYPHMETRICSFLOAT" - } - ], - "wglUseFontOutlinesW": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "LPGLYPHMETRICSFLOAT" - } - ], - "wglDescribeLayerPlane": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "UINT" - }, - { - "name": "VOID", - "type": "LPLAYERPLANEDESCRIPTOR" - } - ], - "wglSetLayerPaletteEntries": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "COLORREF" - } - ], - "wglGetLayerPaletteEntries": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "COLORREF" - } - ], - "wglRealizeLayerPalette": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "BOOL" - } - ], - "wglSwapLayerBuffers": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "UINT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Msvfw32.json b/qiling/extensions/windows_sdk/Msvfw32.json deleted file mode 100644 index 382f95441..000000000 --- a/qiling/extensions/windows_sdk/Msvfw32.json +++ /dev/null @@ -1,1722 +0,0 @@ -{ - "ICInfo": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "lpicinfo", - "type": "ICINFO" - } - ], - "ICInstall": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "szDesc", - "type": "LPSTR" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "ICRemove": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "ICGetInfo": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "picinfo", - "type": "ICINFO" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "ICOpen": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "wMode", - "type": "UINT" - } - ], - "ICOpenFunction": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "wMode", - "type": "UINT" - }, - { - "name": "lpfnHandler", - "type": "FARPROC" - } - ], - "ICClose": [ - { - "name": "hic", - "type": "HIC" - } - ], - "ICSendMessage": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "msg", - "type": "UINT" - }, - { - "name": "dw1", - "type": "DWORD_PTR" - }, - { - "name": "dw2", - "type": "DWORD_PTR" - } - ], - "ICCompress": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpbiOutput", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "lpbiInput", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "lpckid", - "type": "LPDWORD" - }, - { - "name": "lpdwFlags", - "type": "LPDWORD" - }, - { - "name": "lFrameNum", - "type": "LONG" - }, - { - "name": "dwFrameSize", - "type": "DWORD" - }, - { - "name": "dwQuality", - "type": "DWORD" - }, - { - "name": "lpbiPrev", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpPrev", - "type": "LPVOID" - } - ], - "ICDecompress": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpbiFormat", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpBits", - "type": "LPVOID" - } - ], - "ICDrawBegin": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xDst", - "type": "int" - }, - { - "name": "yDst", - "type": "int" - }, - { - "name": "dxDst", - "type": "int" - }, - { - "name": "dyDst", - "type": "int" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "dxSrc", - "type": "int" - }, - { - "name": "dySrc", - "type": "int" - }, - { - "name": "dwRate", - "type": "DWORD" - }, - { - "name": "dwScale", - "type": "DWORD" - } - ], - "ICDraw": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpFormat", - "type": "LPVOID" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "lTime", - "type": "LONG" - } - ], - "ICLocate": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpbiOut", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "wFlags", - "type": "WORD" - } - ], - "ICGetDisplayFormat": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpbiOut", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "BitDepth", - "type": "int" - }, - { - "name": "dx", - "type": "int" - }, - { - "name": "dy", - "type": "int" - } - ], - "ICImageCompress": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFO" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "lpbiOut", - "type": "LPBITMAPINFO" - }, - { - "name": "lQuality", - "type": "LONG" - }, - { - "name": "plSize", - "type": "LONG" - } - ], - "ICImageDecompress": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFO" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "lpbiOut", - "type": "LPBITMAPINFO" - } - ], - "ICCompressorChoose": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "pvIn", - "type": "LPVOID" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "pc", - "type": "PCOMPVARS" - }, - { - "name": "lpszTitle", - "type": "LPSTR" - } - ], - "ICSeqCompressFrameStart": [ - { - "name": "pc", - "type": "PCOMPVARS" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFO" - } - ], - "ICSeqCompressFrameEnd": [ - { - "name": "pc", - "type": "PCOMPVARS" - } - ], - "ICSeqCompressFrame": [ - { - "name": "pc", - "type": "PCOMPVARS" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "pfKey", - "type": "BOOL" - }, - { - "name": "plSize", - "type": "LONG" - } - ], - "ICCompressorFree": [ - { - "name": "pc", - "type": "PCOMPVARS" - } - ], - "DrawDibOpen": [ - { - "name": "VOID", - "type": "void" - } - ], - "DrawDibClose": [ - { - "name": "hdd", - "type": "HDRAWDIB" - } - ], - "DrawDibGetBuffer": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "dwSize", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "DrawDibGetPalette": [ - { - "name": "hdd", - "type": "HDRAWDIB" - } - ], - "DrawDibSetPalette": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "hpal", - "type": "HPALETTE" - } - ], - "DrawDibChangePalette": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "iStart", - "type": "int" - }, - { - "name": "iLen", - "type": "int" - }, - { - "name": "lppe", - "type": "LPPALETTEENTRY" - } - ], - "DrawDibRealize": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "fBackground", - "type": "BOOL" - } - ], - "DrawDibStart": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "rate", - "type": "DWORD" - } - ], - "DrawDibStop": [ - { - "name": "hdd", - "type": "HDRAWDIB" - } - ], - "DrawDibBegin": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "dxDst", - "type": "int" - }, - { - "name": "dyDst", - "type": "int" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "dxSrc", - "type": "int" - }, - { - "name": "dySrc", - "type": "int" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "DrawDibDraw": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xDst", - "type": "int" - }, - { - "name": "yDst", - "type": "int" - }, - { - "name": "dxDst", - "type": "int" - }, - { - "name": "dyDst", - "type": "int" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "dxSrc", - "type": "int" - }, - { - "name": "dySrc", - "type": "int" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "DrawDibEnd": [ - { - "name": "hdd", - "type": "HDRAWDIB" - } - ], - "DrawDibTime": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "lpddtime", - "type": "LPDRAWDIBTIME" - } - ], - "DrawDibProfileDisplay": [ - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - } - ], - "AVIFileInit": [ - { - "name": "VOID", - "type": "void" - } - ], - "AVIFileExit": [ - { - "name": "VOID", - "type": "void" - } - ], - "AVIFileAddRef": [ - { - "name": "pfile", - "type": "PAVIFILE" - } - ], - "AVIFileRelease": [ - { - "name": "pfile", - "type": "PAVIFILE" - } - ], - "AVIFileOpenA": [ - { - "name": "ppfile", - "type": "PAVIFILE" - }, - { - "name": "szFile", - "type": "LPCSTR" - }, - { - "name": "uMode", - "type": "UINT" - }, - { - "name": "lpHandler", - "type": "LPCLSID" - } - ], - "AVIFileOpenW": [ - { - "name": "ppfile", - "type": "PAVIFILE" - }, - { - "name": "szFile", - "type": "LPCWSTR" - }, - { - "name": "uMode", - "type": "UINT" - }, - { - "name": "lpHandler", - "type": "LPCLSID" - } - ], - "AVIFileInfoW": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "pfi", - "type": "LPAVIFILEINFOW" - }, - { - "name": "lSize", - "type": "LONG" - } - ], - "AVIFileInfoA": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "pfi", - "type": "LPAVIFILEINFOA" - }, - { - "name": "lSize", - "type": "LONG" - } - ], - "AVIFileGetStream": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LONG" - } - ], - "AVIFileCreateStreamW": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "psi", - "type": "AVISTREAMINFOW" - } - ], - "AVIFileCreateStreamA": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "psi", - "type": "AVISTREAMINFOA" - } - ], - "AVIFileWriteData": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "ckid", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "cbData", - "type": "LONG" - } - ], - "AVIFileReadData": [ - { - "name": "pfile", - "type": "PAVIFILE" - }, - { - "name": "ckid", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "lpcbData", - "type": "LONG" - } - ], - "AVIFileEndRecord": [ - { - "name": "pfile", - "type": "PAVIFILE" - } - ], - "AVIStreamAddRef": [ - { - "name": "pavi", - "type": "PAVISTREAM" - } - ], - "AVIStreamRelease": [ - { - "name": "pavi", - "type": "PAVISTREAM" - } - ], - "AVIStreamInfoW": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "psi", - "type": "LPAVISTREAMINFOW" - }, - { - "name": "lSize", - "type": "LONG" - } - ], - "AVIStreamInfoA": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "psi", - "type": "LPAVISTREAMINFOA" - }, - { - "name": "lSize", - "type": "LONG" - } - ], - "AVIStreamFindSample": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lPos", - "type": "LONG" - }, - { - "name": "lFlags", - "type": "LONG" - } - ], - "AVIStreamReadFormat": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lPos", - "type": "LONG" - }, - { - "name": "lpFormat", - "type": "LPVOID" - }, - { - "name": "lpcbFormat", - "type": "LONG" - } - ], - "AVIStreamSetFormat": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lPos", - "type": "LONG" - }, - { - "name": "lpFormat", - "type": "LPVOID" - }, - { - "name": "cbFormat", - "type": "LONG" - } - ], - "AVIStreamReadData": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "fcc", - "type": "DWORD" - }, - { - "name": "lp", - "type": "LPVOID" - }, - { - "name": "lpcb", - "type": "LONG" - } - ], - "AVIStreamWriteData": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "fcc", - "type": "DWORD" - }, - { - "name": "lp", - "type": "LPVOID" - }, - { - "name": "cb", - "type": "LONG" - } - ], - "AVIStreamRead": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lStart", - "type": "LONG" - }, - { - "name": "lSamples", - "type": "LONG" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "cbBuffer", - "type": "LONG" - }, - { - "name": "plBytes", - "type": "LONG" - }, - { - "name": "plSamples", - "type": "LONG" - } - ], - "AVIStreamWrite": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lStart", - "type": "LONG" - }, - { - "name": "lSamples", - "type": "LONG" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "cbBuffer", - "type": "LONG" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "plSampWritten", - "type": "LONG" - }, - { - "name": "plBytesWritten", - "type": "LONG" - } - ], - "AVIStreamStart": [ - { - "name": "pavi", - "type": "PAVISTREAM" - } - ], - "AVIStreamLength": [ - { - "name": "pavi", - "type": "PAVISTREAM" - } - ], - "AVIStreamTimeToSample": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lTime", - "type": "LONG" - } - ], - "AVIStreamSampleToTime": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lSample", - "type": "LONG" - } - ], - "AVIStreamBeginStreaming": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lStart", - "type": "LONG" - }, - { - "name": "lEnd", - "type": "LONG" - }, - { - "name": "lRate", - "type": "LONG" - } - ], - "AVIStreamEndStreaming": [ - { - "name": "pavi", - "type": "PAVISTREAM" - } - ], - "AVIStreamGetFrameOpen": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lpbiWanted", - "type": "LPBITMAPINFOHEADER" - } - ], - "AVIStreamGetFrame": [ - { - "name": "pg", - "type": "PGETFRAME" - }, - { - "name": "lPos", - "type": "LONG" - } - ], - "AVIStreamGetFrameClose": [ - { - "name": "pg", - "type": "PGETFRAME" - } - ], - "AVIStreamOpenFromFileA": [ - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "szFile", - "type": "LPCSTR" - }, - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LONG" - }, - { - "name": "mode", - "type": "UINT" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - } - ], - "AVIStreamOpenFromFileW": [ - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "szFile", - "type": "LPCWSTR" - }, - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LONG" - }, - { - "name": "mode", - "type": "UINT" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - } - ], - "AVIStreamCreate": [ - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "lParam1", - "type": "LONG" - }, - { - "name": "lParam2", - "type": "LONG" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - } - ], - "AVIMakeCompressedStream": [ - { - "name": "ppsCompressed", - "type": "PAVISTREAM" - }, - { - "name": "ppsSource", - "type": "PAVISTREAM" - }, - { - "name": "lpOptions", - "type": "AVICOMPRESSOPTIONS" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - } - ], - "AVISaveA": [ - { - "name": "szFile", - "type": "LPCSTR" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - }, - { - "name": "lpfnCallback", - "type": "AVISAVECALLBACK" - }, - { - "name": "nStreams", - "type": "int" - }, - { - "name": "pfile", - "type": "PAVISTREAM" - }, - { - "name": "lpOptions", - "type": "LPAVICOMPRESSOPTIONS" - } - ], - "AVISaveVA": [ - { - "name": "szFile", - "type": "LPCSTR" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - }, - { - "name": "lpfnCallback", - "type": "AVISAVECALLBACK" - }, - { - "name": "nStreams", - "type": "int" - }, - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "plpOptions", - "type": "LPAVICOMPRESSOPTIONS" - } - ], - "AVISaveW": [ - { - "name": "szFile", - "type": "LPCWSTR" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - }, - { - "name": "lpfnCallback", - "type": "AVISAVECALLBACK" - }, - { - "name": "nStreams", - "type": "int" - }, - { - "name": "pfile", - "type": "PAVISTREAM" - }, - { - "name": "lpOptions", - "type": "LPAVICOMPRESSOPTIONS" - } - ], - "AVISaveVW": [ - { - "name": "szFile", - "type": "LPCWSTR" - }, - { - "name": "pclsidHandler", - "type": "CLSID" - }, - { - "name": "lpfnCallback", - "type": "AVISAVECALLBACK" - }, - { - "name": "nStreams", - "type": "int" - }, - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "plpOptions", - "type": "LPAVICOMPRESSOPTIONS" - } - ], - "AVISaveOptions": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "nStreams", - "type": "int" - }, - { - "name": "ppavi", - "type": "PAVISTREAM" - }, - { - "name": "plpOptions", - "type": "LPAVICOMPRESSOPTIONS" - } - ], - "AVISaveOptionsFree": [ - { - "name": "nStreams", - "type": "int" - }, - { - "name": "plpOptions", - "type": "LPAVICOMPRESSOPTIONS" - } - ], - "AVIBuildFilterW": [ - { - "name": "lpszFilter", - "type": "LPWSTR" - }, - { - "name": "cbFilter", - "type": "LONG" - }, - { - "name": "fSaving", - "type": "BOOL" - } - ], - "AVIBuildFilterA": [ - { - "name": "lpszFilter", - "type": "LPSTR" - }, - { - "name": "cbFilter", - "type": "LONG" - }, - { - "name": "fSaving", - "type": "BOOL" - } - ], - "AVIMakeFileFromStreams": [ - { - "name": "ppfile", - "type": "PAVIFILE" - }, - { - "name": "nStreams", - "type": "int" - }, - { - "name": "papStreams", - "type": "PAVISTREAM" - } - ], - "AVIMakeStreamFromClipboard": [ - { - "name": "cfFormat", - "type": "UINT" - }, - { - "name": "hGlobal", - "type": "HANDLE" - }, - { - "name": "ppstream", - "type": "PAVISTREAM" - } - ], - "AVIPutFileOnClipboard": [ - { - "name": "pf", - "type": "PAVIFILE" - } - ], - "AVIGetFromClipboard": [ - { - "name": "lppf", - "type": "PAVIFILE" - } - ], - "AVIClearClipboard": [ - { - "name": "VOID", - "type": "void" - } - ], - "CreateEditableStream": [ - { - "name": "ppsEditable", - "type": "PAVISTREAM" - }, - { - "name": "psSource", - "type": "PAVISTREAM" - } - ], - "EditStreamCut": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "plStart", - "type": "LONG" - }, - { - "name": "plLength", - "type": "LONG" - }, - { - "name": "ppResult", - "type": "PAVISTREAM" - } - ], - "EditStreamCopy": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "plStart", - "type": "LONG" - }, - { - "name": "plLength", - "type": "LONG" - }, - { - "name": "ppResult", - "type": "PAVISTREAM" - } - ], - "EditStreamPaste": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "plPos", - "type": "LONG" - }, - { - "name": "plLength", - "type": "LONG" - }, - { - "name": "pstream", - "type": "PAVISTREAM" - }, - { - "name": "lStart", - "type": "LONG" - }, - { - "name": "lEnd", - "type": "LONG" - } - ], - "EditStreamClone": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "ppResult", - "type": "PAVISTREAM" - } - ], - "EditStreamSetNameA": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lpszName", - "type": "LPCSTR" - } - ], - "EditStreamSetNameW": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lpszName", - "type": "LPCWSTR" - } - ], - "EditStreamSetInfoW": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lpInfo", - "type": "LPAVISTREAMINFOW" - }, - { - "name": "cbInfo", - "type": "LONG" - } - ], - "EditStreamSetInfoA": [ - { - "name": "pavi", - "type": "PAVISTREAM" - }, - { - "name": "lpInfo", - "type": "LPAVISTREAMINFOA" - }, - { - "name": "cbInfo", - "type": "LONG" - } - ], - "MCIWndCreateA": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "szFile", - "type": "LPCSTR" - } - ], - "MCIWndCreateW": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "szFile", - "type": "LPCWSTR" - } - ], - "MCIWndRegisterClass": [ - { - "name": "VOID", - "type": "void" - } - ], - "capCreateCaptureWindowA": [ - { - "name": "lpszWindowName", - "type": "LPCSTR" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "nID", - "type": "int" - } - ], - "capGetDriverDescriptionA": [ - { - "name": "wDriverIndex", - "type": "UINT" - }, - { - "name": "lpszName", - "type": "LPSTR" - }, - { - "name": "cbName", - "type": "int" - }, - { - "name": "lpszVer", - "type": "LPSTR" - }, - { - "name": "cbVer", - "type": "int" - } - ], - "capCreateCaptureWindowW": [ - { - "name": "lpszWindowName", - "type": "LPCWSTR" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "nID", - "type": "int" - } - ], - "capGetDriverDescriptionW": [ - { - "name": "wDriverIndex", - "type": "UINT" - }, - { - "name": "lpszName", - "type": "LPWSTR" - }, - { - "name": "cbName", - "type": "int" - }, - { - "name": "lpszVer", - "type": "LPWSTR" - }, - { - "name": "cbVer", - "type": "int" - } - ], - "GetOpenFileNamePreviewA": [ - { - "name": "lpofn", - "type": "LPOPENFILENAMEA" - } - ], - "GetSaveFileNamePreviewA": [ - { - "name": "lpofn", - "type": "LPOPENFILENAMEA" - } - ], - "GetOpenFileNamePreviewW": [ - { - "name": "lpofn", - "type": "LPOPENFILENAMEW" - } - ], - "GetSaveFileNamePreviewW": [ - { - "name": "lpofn", - "type": "LPOPENFILENAMEW" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Mydocs.json b/qiling/extensions/windows_sdk/Mydocs.json deleted file mode 100644 index 456aa00b9..000000000 --- a/qiling/extensions/windows_sdk/Mydocs.json +++ /dev/null @@ -1,188 +0,0 @@ -{ - "GetFileNameFromBrowse": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pszFilePath", - "type": "PWSTR" - }, - { - "name": "cchFilePath", - "type": "UINT" - }, - { - "name": "pszWorkingDir", - "type": "PCWSTR" - }, - { - "name": "pszDefExt", - "type": "PCWSTR" - }, - { - "name": "pszFilters", - "type": "PCWSTR" - }, - { - "name": "pszTitle", - "type": "PCWSTR" - } - ], - "DriveType": [ - { - "name": "iDrive", - "type": "int" - } - ], - "SHChangeNotifyRegisterThread": [ - { - "name": "status", - "type": "SCNRT_STATUS" - } - ], - "PathIsSlowA": [ - { - "name": "pszFile", - "type": "LPCSTR" - }, - { - "name": "dwAttr", - "type": "DWORD" - } - ], - "PathIsSlowW": [ - { - "name": "pszFile", - "type": "LPCWSTR" - }, - { - "name": "dwAttr", - "type": "DWORD" - } - ], - "SHCreatePropSheetExtArray": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "PCWSTR" - }, - { - "name": "max_iface", - "type": "UINT" - } - ], - "SHOpenPropSheetA": [ - { - "name": "pszCaption", - "type": "LPCSTR" - }, - { - "name": "ahkeys", - "type": "HKEY" - }, - { - "name": "ckeys", - "type": "UINT" - }, - { - "name": "pclsidDefault", - "type": "CLSID" - }, - { - "name": "pdtobj", - "type": "IDataObject" - }, - { - "name": "psb", - "type": "IShellBrowser" - }, - { - "name": "pStartPage", - "type": "LPCSTR" - } - ], - "SHOpenPropSheetW": [ - { - "name": "pszCaption", - "type": "LPCWSTR" - }, - { - "name": "ahkeys", - "type": "HKEY" - }, - { - "name": "ckeys", - "type": "UINT" - }, - { - "name": "pclsidDefault", - "type": "CLSID" - }, - { - "name": "pdtobj", - "type": "IDataObject" - }, - { - "name": "psb", - "type": "IShellBrowser" - }, - { - "name": "pStartPage", - "type": "LPCWSTR" - } - ], - "SoftwareUpdateMessageBox": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "pszDistUnit", - "type": "PCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "psdi", - "type": "LPSOFTDISTINFO" - } - ], - "SHMultiFileProperties": [ - { - "name": "pdtobj", - "type": "IDataObject" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHCreateQueryCancelAutoPlayMoniker": [ - { - "name": "ppmoniker", - "type": "IMoniker" - } - ], - "PerUserInit": [ - { - "name": "VOID", - "type": "void" - } - ], - "SHRunControlPanel": [ - { - "name": "lpcszCmdLine", - "type": "PCWSTR" - }, - { - "name": "hwndMsgParent", - "type": "HWND" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Netapi32.json b/qiling/extensions/windows_sdk/Netapi32.json deleted file mode 100644 index 2b689a000..000000000 --- a/qiling/extensions/windows_sdk/Netapi32.json +++ /dev/null @@ -1,132 +0,0 @@ -{ - "DavAddConnection": [ - { - "name": "ConnectionHandle", - "type": "HANDLE" - }, - { - "name": "RemoteName", - "type": "LPCWSTR" - }, - { - "name": "UserName", - "type": "LPCWSTR" - }, - { - "name": "Password", - "type": "LPCWSTR" - }, - { - "name": "ClientCert", - "type": "PBYTE" - }, - { - "name": "CertSize", - "type": "DWORD" - } - ], - "DavDeleteConnection": [ - { - "name": "ConnectionHandle", - "type": "HANDLE" - } - ], - "DavGetUNCFromHTTPPath": [ - { - "name": "Url", - "type": "LPCWSTR" - }, - { - "name": "UncPath", - "type": "LPWSTR" - }, - { - "name": "lpSize", - "type": "LPDWORD" - } - ], - "DavGetHTTPFromUNCPath": [ - { - "name": "UncPath", - "type": "LPCWSTR" - }, - { - "name": "Url", - "type": "LPWSTR" - }, - { - "name": "lpSize", - "type": "LPDWORD" - } - ], - "DavGetTheLockOwnerOfTheFile": [ - { - "name": "FileName", - "type": "LPCWSTR" - }, - { - "name": "LockOwnerName", - "type": "PWSTR" - }, - { - "name": "LockOwnerNameLengthInBytes", - "type": "PULONG" - } - ], - "DavGetExtendedError": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "ExtError", - "type": "DWORD" - }, - { - "name": "ExtErrorString", - "type": "LPWSTR" - }, - { - "name": "cChSize", - "type": "DWORD" - } - ], - "DavFlushFile": [ - { - "name": "hFile", - "type": "HANDLE" - } - ], - "DavInvalidateCache": [ - { - "name": "URLName", - "type": "LPCWSTR" - } - ], - "DavCancelConnectionsToServer": [ - { - "name": "lpName", - "type": "LPWSTR" - }, - { - "name": "fForce", - "type": "BOOL" - } - ], - "DavRegisterAuthCallback": [ - { - "name": "CallBack", - "type": "PFNDAVAUTHCALLBACK" - }, - { - "name": "Version", - "type": "ULONG" - } - ], - "DavUnregisterAuthCallback": [ - { - "name": "hCallback", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Normaliz.json b/qiling/extensions/windows_sdk/Normaliz.json deleted file mode 100644 index 8492e842f..000000000 --- a/qiling/extensions/windows_sdk/Normaliz.json +++ /dev/null @@ -1,1842 +0,0 @@ -{ - "GetDurationFormatEx": [ - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpDuration", - "type": "SYSTEMTIME" - }, - { - "name": "ullDuration", - "type": "ULONGLONG" - }, - { - "name": "lpFormat", - "type": "LPCWSTR" - }, - { - "name": "lpDurationStr", - "type": "LPWSTR" - }, - { - "name": "cchDuration", - "type": "int" - } - ], - "CompareStringW": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwCmpFlags", - "type": "DWORD" - }, - { - "name": "lpString1", - "type": "PCNZWCH" - }, - { - "name": "cchCount1", - "type": "int" - }, - { - "name": "lpString2", - "type": "PCNZWCH" - }, - { - "name": "cchCount2", - "type": "int" - } - ], - "FoldStringW": [ - { - "name": "dwMapFlags", - "type": "DWORD" - }, - { - "name": "lpSrcStr", - "type": "LPCWCH" - }, - { - "name": "cchSrc", - "type": "int" - }, - { - "name": "lpDestStr", - "type": "LPWSTR" - }, - { - "name": "cchDest", - "type": "int" - } - ], - "IsValidCodePage": [ - { - "name": "CodePage", - "type": "UINT" - } - ], - "GetACP": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetOEMCP": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetCPInfo": [ - { - "name": "CodePage", - "type": "UINT" - }, - { - "name": "lpCPInfo", - "type": "LPCPINFO" - } - ], - "GetCPInfoExA": [ - { - "name": "CodePage", - "type": "UINT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpCPInfoEx", - "type": "LPCPINFOEXA" - } - ], - "GetCPInfoExW": [ - { - "name": "CodePage", - "type": "UINT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpCPInfoEx", - "type": "LPCPINFOEXW" - } - ], - "CompareStringA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwCmpFlags", - "type": "DWORD" - }, - { - "name": "lpString1", - "type": "PCNZCH" - }, - { - "name": "cchCount1", - "type": "int" - }, - { - "name": "lpString2", - "type": "PCNZCH" - }, - { - "name": "cchCount2", - "type": "int" - } - ], - "FindNLSString": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFindNLSStringFlags", - "type": "DWORD" - }, - { - "name": "lpStringSource", - "type": "LPCWSTR" - }, - { - "name": "cchSource", - "type": "int" - }, - { - "name": "lpStringValue", - "type": "LPCWSTR" - }, - { - "name": "cchValue", - "type": "int" - }, - { - "name": "pcchFound", - "type": "LPINT" - } - ], - "LCMapStringW": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwMapFlags", - "type": "DWORD" - }, - { - "name": "lpSrcStr", - "type": "LPCWSTR" - }, - { - "name": "cchSrc", - "type": "int" - }, - { - "name": "lpDestStr", - "type": "LPWSTR" - }, - { - "name": "cchDest", - "type": "int" - } - ], - "LCMapStringA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwMapFlags", - "type": "DWORD" - }, - { - "name": "lpSrcStr", - "type": "LPCSTR" - }, - { - "name": "cchSrc", - "type": "int" - }, - { - "name": "lpDestStr", - "type": "LPSTR" - }, - { - "name": "cchDest", - "type": "int" - } - ], - "GetLocaleInfoW": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "LCType", - "type": "LCTYPE" - }, - { - "name": "lpLCData", - "type": "LPWSTR" - }, - { - "name": "cchData", - "type": "int" - } - ], - "GetLocaleInfoA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "LCType", - "type": "LCTYPE" - }, - { - "name": "lpLCData", - "type": "LPSTR" - }, - { - "name": "cchData", - "type": "int" - } - ], - "SetLocaleInfoA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "LCType", - "type": "LCTYPE" - }, - { - "name": "lpLCData", - "type": "LPCSTR" - } - ], - "SetLocaleInfoW": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "LCType", - "type": "LCTYPE" - }, - { - "name": "lpLCData", - "type": "LPCWSTR" - } - ], - "GetCalendarInfoA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "Calendar", - "type": "CALID" - }, - { - "name": "CalType", - "type": "CALTYPE" - }, - { - "name": "lpCalData", - "type": "LPSTR" - }, - { - "name": "cchData", - "type": "int" - }, - { - "name": "lpValue", - "type": "LPDWORD" - } - ], - "GetCalendarInfoW": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "Calendar", - "type": "CALID" - }, - { - "name": "CalType", - "type": "CALTYPE" - }, - { - "name": "lpCalData", - "type": "LPWSTR" - }, - { - "name": "cchData", - "type": "int" - }, - { - "name": "lpValue", - "type": "LPDWORD" - } - ], - "SetCalendarInfoA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "Calendar", - "type": "CALID" - }, - { - "name": "CalType", - "type": "CALTYPE" - }, - { - "name": "lpCalData", - "type": "LPCSTR" - } - ], - "SetCalendarInfoW": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "Calendar", - "type": "CALID" - }, - { - "name": "CalType", - "type": "CALTYPE" - }, - { - "name": "lpCalData", - "type": "LPCWSTR" - } - ], - "LoadStringByReference": [ - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "Language", - "type": "PCWSTR" - }, - { - "name": "SourceString", - "type": "PCWSTR" - }, - { - "name": "Buffer", - "type": "PWSTR" - }, - { - "name": "cchBuffer", - "type": "ULONG" - }, - { - "name": "Directory", - "type": "PCWSTR" - }, - { - "name": "pcchBufferOut", - "type": "PULONG" - } - ], - "IsDBCSLeadByte": [ - { - "name": "TestChar", - "type": "BYTE" - } - ], - "IsDBCSLeadByteEx": [ - { - "name": "CodePage", - "type": "UINT" - }, - { - "name": "TestChar", - "type": "BYTE" - } - ], - "LocaleNameToLCID": [ - { - "name": "lpName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "LCIDToLocaleName": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "lpName", - "type": "LPWSTR" - }, - { - "name": "cchName", - "type": "int" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetDurationFormat": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpDuration", - "type": "SYSTEMTIME" - }, - { - "name": "ullDuration", - "type": "ULONGLONG" - }, - { - "name": "lpFormat", - "type": "LPCWSTR" - }, - { - "name": "lpDurationStr", - "type": "LPWSTR" - }, - { - "name": "cchDuration", - "type": "int" - } - ], - "GetNumberFormatA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpValue", - "type": "LPCSTR" - }, - { - "name": "lpFormat", - "type": "NUMBERFMTA" - }, - { - "name": "lpNumberStr", - "type": "LPSTR" - }, - { - "name": "cchNumber", - "type": "int" - } - ], - "GetNumberFormatW": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpValue", - "type": "LPCWSTR" - }, - { - "name": "lpFormat", - "type": "NUMBERFMTW" - }, - { - "name": "lpNumberStr", - "type": "LPWSTR" - }, - { - "name": "cchNumber", - "type": "int" - } - ], - "GetCurrencyFormatA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpValue", - "type": "LPCSTR" - }, - { - "name": "lpFormat", - "type": "CURRENCYFMTA" - }, - { - "name": "lpCurrencyStr", - "type": "LPSTR" - }, - { - "name": "cchCurrency", - "type": "int" - } - ], - "GetCurrencyFormatW": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpValue", - "type": "LPCWSTR" - }, - { - "name": "lpFormat", - "type": "CURRENCYFMTW" - }, - { - "name": "lpCurrencyStr", - "type": "LPWSTR" - }, - { - "name": "cchCurrency", - "type": "int" - } - ], - "EnumCalendarInfoA": [ - { - "name": "lpCalInfoEnumProc", - "type": "CALINFO_ENUMPROCA" - }, - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "Calendar", - "type": "CALID" - }, - { - "name": "CalType", - "type": "CALTYPE" - } - ], - "EnumCalendarInfoW": [ - { - "name": "lpCalInfoEnumProc", - "type": "CALINFO_ENUMPROCW" - }, - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "Calendar", - "type": "CALID" - }, - { - "name": "CalType", - "type": "CALTYPE" - } - ], - "EnumCalendarInfoExA": [ - { - "name": "lpCalInfoEnumProcEx", - "type": "CALINFO_ENUMPROCEXA" - }, - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "Calendar", - "type": "CALID" - }, - { - "name": "CalType", - "type": "CALTYPE" - } - ], - "EnumCalendarInfoExW": [ - { - "name": "lpCalInfoEnumProcEx", - "type": "CALINFO_ENUMPROCEXW" - }, - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "Calendar", - "type": "CALID" - }, - { - "name": "CalType", - "type": "CALTYPE" - } - ], - "EnumTimeFormatsA": [ - { - "name": "lpTimeFmtEnumProc", - "type": "TIMEFMT_ENUMPROCA" - }, - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumTimeFormatsW": [ - { - "name": "lpTimeFmtEnumProc", - "type": "TIMEFMT_ENUMPROCW" - }, - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumDateFormatsA": [ - { - "name": "lpDateFmtEnumProc", - "type": "DATEFMT_ENUMPROCA" - }, - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumDateFormatsW": [ - { - "name": "lpDateFmtEnumProc", - "type": "DATEFMT_ENUMPROCW" - }, - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumDateFormatsExA": [ - { - "name": "lpDateFmtEnumProcEx", - "type": "DATEFMT_ENUMPROCEXA" - }, - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumDateFormatsExW": [ - { - "name": "lpDateFmtEnumProcEx", - "type": "DATEFMT_ENUMPROCEXW" - }, - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "IsValidLanguageGroup": [ - { - "name": "LanguageGroup", - "type": "LGRPID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetNLSVersion": [ - { - "name": "Function", - "type": "NLS_FUNCTION" - }, - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "lpVersionInformation", - "type": "LPNLSVERSIONINFO" - } - ], - "IsValidLocale": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetGeoInfoA": [ - { - "name": "Location", - "type": "GEOID" - }, - { - "name": "GeoType", - "type": "GEOTYPE" - }, - { - "name": "lpGeoData", - "type": "LPSTR" - }, - { - "name": "cchData", - "type": "int" - }, - { - "name": "LangId", - "type": "LANGID" - } - ], - "GetGeoInfoW": [ - { - "name": "Location", - "type": "GEOID" - }, - { - "name": "GeoType", - "type": "GEOTYPE" - }, - { - "name": "lpGeoData", - "type": "LPWSTR" - }, - { - "name": "cchData", - "type": "int" - }, - { - "name": "LangId", - "type": "LANGID" - } - ], - "GetGeoInfoEx": [ - { - "name": "location", - "type": "PWSTR" - }, - { - "name": "geoType", - "type": "GEOTYPE" - }, - { - "name": "geoData", - "type": "PWSTR" - }, - { - "name": "geoDataCount", - "type": "int" - } - ], - "EnumSystemGeoID": [ - { - "name": "GeoClass", - "type": "GEOCLASS" - }, - { - "name": "ParentGeoId", - "type": "GEOID" - }, - { - "name": "lpGeoEnumProc", - "type": "GEO_ENUMPROC" - } - ], - "EnumSystemGeoNames": [ - { - "name": "geoClass", - "type": "GEOCLASS" - }, - { - "name": "geoEnumProc", - "type": "GEO_ENUMNAMEPROC" - }, - { - "name": "data", - "type": "LPARAM" - } - ], - "GetUserGeoID": [ - { - "name": "GeoClass", - "type": "GEOCLASS" - } - ], - "GetUserDefaultGeoName": [ - { - "name": "geoName", - "type": "LPWSTR" - }, - { - "name": "geoNameCount", - "type": "int" - } - ], - "SetUserGeoID": [ - { - "name": "GeoId", - "type": "GEOID" - } - ], - "SetUserGeoName": [ - { - "name": "geoName", - "type": "PWSTR" - } - ], - "ConvertDefaultLocale": [ - { - "name": "Locale", - "type": "LCID" - } - ], - "GetSystemDefaultUILanguage": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetThreadLocale": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetThreadLocale": [ - { - "name": "Locale", - "type": "LCID" - } - ], - "GetUserDefaultUILanguage": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetUserDefaultLangID": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetSystemDefaultLangID": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetSystemDefaultLCID": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetUserDefaultLCID": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetThreadUILanguage": [ - { - "name": "LangId", - "type": "LANGID" - } - ], - "GetThreadUILanguage": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetProcessPreferredUILanguages": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pulNumLanguages", - "type": "PULONG" - }, - { - "name": "pwszLanguagesBuffer", - "type": "PZZWSTR" - }, - { - "name": "pcchLanguagesBuffer", - "type": "PULONG" - } - ], - "SetProcessPreferredUILanguages": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszLanguagesBuffer", - "type": "PCZZWSTR" - }, - { - "name": "pulNumLanguages", - "type": "PULONG" - } - ], - "GetUserPreferredUILanguages": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pulNumLanguages", - "type": "PULONG" - }, - { - "name": "pwszLanguagesBuffer", - "type": "PZZWSTR" - }, - { - "name": "pcchLanguagesBuffer", - "type": "PULONG" - } - ], - "GetSystemPreferredUILanguages": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pulNumLanguages", - "type": "PULONG" - }, - { - "name": "pwszLanguagesBuffer", - "type": "PZZWSTR" - }, - { - "name": "pcchLanguagesBuffer", - "type": "PULONG" - } - ], - "GetThreadPreferredUILanguages": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pulNumLanguages", - "type": "PULONG" - }, - { - "name": "pwszLanguagesBuffer", - "type": "PZZWSTR" - }, - { - "name": "pcchLanguagesBuffer", - "type": "PULONG" - } - ], - "SetThreadPreferredUILanguages": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszLanguagesBuffer", - "type": "PCZZWSTR" - }, - { - "name": "pulNumLanguages", - "type": "PULONG" - } - ], - "GetFileMUIInfo": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pcwszFilePath", - "type": "PCWSTR" - }, - { - "name": "pFileMUIInfo", - "type": "PFILEMUIINFO" - }, - { - "name": "pcbFileMUIInfo", - "type": "DWORD" - } - ], - "GetFileMUIPath": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pcwszFilePath", - "type": "PCWSTR" - }, - { - "name": "pwszLanguage", - "type": "PWSTR" - }, - { - "name": "pcchLanguage", - "type": "PULONG" - }, - { - "name": "pwszFileMUIPath", - "type": "PWSTR" - }, - { - "name": "pcchFileMUIPath", - "type": "PULONG" - }, - { - "name": "pululEnumerator", - "type": "PULONGLONG" - } - ], - "GetUILanguageInfo": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwmszLanguage", - "type": "PCZZWSTR" - }, - { - "name": "pwszFallbackLanguages", - "type": "PZZWSTR" - }, - { - "name": "pcchFallbackLanguages", - "type": "PDWORD" - }, - { - "name": "pAttributes", - "type": "PDWORD" - } - ], - "NotifyUILanguageChange": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pcwstrNewLanguage", - "type": "PCWSTR" - }, - { - "name": "pcwstrPreviousLanguage", - "type": "PCWSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "pdwStatusRtrn", - "type": "PDWORD" - } - ], - "GetStringTypeA": [ - { - "name": "Locale", - "type": "LCID" - }, - { - "name": "dwInfoType", - "type": "DWORD" - }, - { - "name": "lpSrcStr", - "type": "LPCSTR" - }, - { - "name": "cchSrc", - "type": "int" - }, - { - "name": "lpCharType", - "type": "LPWORD" - } - ], - "FoldStringA": [ - { - "name": "dwMapFlags", - "type": "DWORD" - }, - { - "name": "lpSrcStr", - "type": "LPCSTR" - }, - { - "name": "cchSrc", - "type": "int" - }, - { - "name": "lpDestStr", - "type": "LPSTR" - }, - { - "name": "cchDest", - "type": "int" - } - ], - "EnumSystemLocalesA": [ - { - "name": "lpLocaleEnumProc", - "type": "LOCALE_ENUMPROCA" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumSystemLocalesW": [ - { - "name": "lpLocaleEnumProc", - "type": "LOCALE_ENUMPROCW" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumSystemLanguageGroupsA": [ - { - "name": "lpLanguageGroupEnumProc", - "type": "LANGUAGEGROUP_ENUMPROCA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LONG_PTR" - } - ], - "EnumSystemLanguageGroupsW": [ - { - "name": "lpLanguageGroupEnumProc", - "type": "LANGUAGEGROUP_ENUMPROCW" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LONG_PTR" - } - ], - "EnumLanguageGroupLocalesA": [ - { - "name": "lpLangGroupLocaleEnumProc", - "type": "LANGGROUPLOCALE_ENUMPROCA" - }, - { - "name": "LanguageGroup", - "type": "LGRPID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LONG_PTR" - } - ], - "EnumLanguageGroupLocalesW": [ - { - "name": "lpLangGroupLocaleEnumProc", - "type": "LANGGROUPLOCALE_ENUMPROCW" - }, - { - "name": "LanguageGroup", - "type": "LGRPID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LONG_PTR" - } - ], - "EnumUILanguagesA": [ - { - "name": "lpUILanguageEnumProc", - "type": "UILANGUAGE_ENUMPROCA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LONG_PTR" - } - ], - "EnumUILanguagesW": [ - { - "name": "lpUILanguageEnumProc", - "type": "UILANGUAGE_ENUMPROCW" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LONG_PTR" - } - ], - "EnumSystemCodePagesA": [ - { - "name": "lpCodePageEnumProc", - "type": "CODEPAGE_ENUMPROCA" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumSystemCodePagesW": [ - { - "name": "lpCodePageEnumProc", - "type": "CODEPAGE_ENUMPROCW" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "IdnToAscii": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpUnicodeCharStr", - "type": "LPCWSTR" - }, - { - "name": "cchUnicodeChar", - "type": "int" - }, - { - "name": "lpASCIICharStr", - "type": "LPWSTR" - }, - { - "name": "cchASCIIChar", - "type": "int" - } - ], - "IdnToUnicode": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpASCIICharStr", - "type": "LPCWSTR" - }, - { - "name": "cchASCIIChar", - "type": "int" - }, - { - "name": "lpUnicodeCharStr", - "type": "LPWSTR" - }, - { - "name": "cchUnicodeChar", - "type": "int" - } - ], - "IdnToNameprepUnicode": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpUnicodeCharStr", - "type": "LPCWSTR" - }, - { - "name": "cchUnicodeChar", - "type": "int" - }, - { - "name": "lpNameprepCharStr", - "type": "LPWSTR" - }, - { - "name": "cchNameprepChar", - "type": "int" - } - ], - "NormalizeString": [ - { - "name": "NormForm", - "type": "NORM_FORM" - }, - { - "name": "lpSrcString", - "type": "LPCWSTR" - }, - { - "name": "cwSrcLength", - "type": "int" - }, - { - "name": "lpDstString", - "type": "LPWSTR" - }, - { - "name": "cwDstLength", - "type": "int" - } - ], - "IsNormalizedString": [ - { - "name": "NormForm", - "type": "NORM_FORM" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "cwLength", - "type": "int" - } - ], - "VerifyScripts": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpLocaleScripts", - "type": "LPCWSTR" - }, - { - "name": "cchLocaleScripts", - "type": "int" - }, - { - "name": "lpTestScripts", - "type": "LPCWSTR" - }, - { - "name": "cchTestScripts", - "type": "int" - } - ], - "GetStringScripts": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "cchString", - "type": "int" - }, - { - "name": "lpScripts", - "type": "LPWSTR" - }, - { - "name": "cchScripts", - "type": "int" - } - ], - "GetLocaleInfoEx": [ - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "LCType", - "type": "LCTYPE" - }, - { - "name": "lpLCData", - "type": "LPWSTR" - }, - { - "name": "cchData", - "type": "int" - } - ], - "GetCalendarInfoEx": [ - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "Calendar", - "type": "CALID" - }, - { - "name": "lpReserved", - "type": "LPCWSTR" - }, - { - "name": "CalType", - "type": "CALTYPE" - }, - { - "name": "lpCalData", - "type": "LPWSTR" - }, - { - "name": "cchData", - "type": "int" - }, - { - "name": "lpValue", - "type": "LPDWORD" - } - ], - "GetNumberFormatEx": [ - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpValue", - "type": "LPCWSTR" - }, - { - "name": "lpFormat", - "type": "NUMBERFMTW" - }, - { - "name": "lpNumberStr", - "type": "LPWSTR" - }, - { - "name": "cchNumber", - "type": "int" - } - ], - "GetCurrencyFormatEx": [ - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpValue", - "type": "LPCWSTR" - }, - { - "name": "lpFormat", - "type": "CURRENCYFMTW" - }, - { - "name": "lpCurrencyStr", - "type": "LPWSTR" - }, - { - "name": "cchCurrency", - "type": "int" - } - ], - "GetUserDefaultLocaleName": [ - { - "name": "lpLocaleName", - "type": "LPWSTR" - }, - { - "name": "cchLocaleName", - "type": "int" - } - ], - "GetSystemDefaultLocaleName": [ - { - "name": "lpLocaleName", - "type": "LPWSTR" - }, - { - "name": "cchLocaleName", - "type": "int" - } - ], - "IsNLSDefinedString": [ - { - "name": "Function", - "type": "NLS_FUNCTION" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpVersionInformation", - "type": "LPNLSVERSIONINFO" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "cchStr", - "type": "INT" - } - ], - "GetNLSVersionEx": [ - { - "name": "function", - "type": "NLS_FUNCTION" - }, - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "lpVersionInformation", - "type": "LPNLSVERSIONINFOEX" - } - ], - "IsValidNLSVersion": [ - { - "name": "function", - "type": "NLS_FUNCTION" - }, - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "lpVersionInformation", - "type": "LPNLSVERSIONINFOEX" - } - ], - "FindNLSStringEx": [ - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "dwFindNLSStringFlags", - "type": "DWORD" - }, - { - "name": "lpStringSource", - "type": "LPCWSTR" - }, - { - "name": "cchSource", - "type": "int" - }, - { - "name": "lpStringValue", - "type": "LPCWSTR" - }, - { - "name": "cchValue", - "type": "int" - }, - { - "name": "pcchFound", - "type": "LPINT" - }, - { - "name": "lpVersionInformation", - "type": "LPNLSVERSIONINFO" - }, - { - "name": "lpReserved", - "type": "LPVOID" - }, - { - "name": "sortHandle", - "type": "LPARAM" - } - ], - "LCMapStringEx": [ - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "dwMapFlags", - "type": "DWORD" - }, - { - "name": "lpSrcStr", - "type": "LPCWSTR" - }, - { - "name": "cchSrc", - "type": "int" - }, - { - "name": "lpDestStr", - "type": "LPWSTR" - }, - { - "name": "cchDest", - "type": "int" - }, - { - "name": "lpVersionInformation", - "type": "LPNLSVERSIONINFO" - }, - { - "name": "lpReserved", - "type": "LPVOID" - }, - { - "name": "sortHandle", - "type": "LPARAM" - } - ], - "IsValidLocaleName": [ - { - "name": "lpLocaleName", - "type": "LPCWSTR" - } - ], - "EnumCalendarInfoExEx": [ - { - "name": "pCalInfoEnumProcExEx", - "type": "CALINFO_ENUMPROCEXEX" - }, - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "Calendar", - "type": "CALID" - }, - { - "name": "lpReserved", - "type": "LPCWSTR" - }, - { - "name": "CalType", - "type": "CALTYPE" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumDateFormatsExEx": [ - { - "name": "lpDateFmtEnumProcExEx", - "type": "DATEFMT_ENUMPROCEXEX" - }, - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumTimeFormatsEx": [ - { - "name": "lpTimeFmtEnumProcEx", - "type": "TIMEFMT_ENUMPROCEX" - }, - { - "name": "lpLocaleName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumSystemLocalesEx": [ - { - "name": "lpLocaleEnumProcEx", - "type": "LOCALE_ENUMPROCEX" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "ResolveLocaleName": [ - { - "name": "lpNameToResolve", - "type": "LPCWSTR" - }, - { - "name": "lpLocaleName", - "type": "LPWSTR" - }, - { - "name": "cchLocaleName", - "type": "int" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Ole32.json b/qiling/extensions/windows_sdk/Ole32.json deleted file mode 100644 index 9e26dfeeb..000000000 --- a/qiling/extensions/windows_sdk/Ole32.json +++ /dev/null @@ -1 +0,0 @@ -{} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Query.json b/qiling/extensions/windows_sdk/Query.json deleted file mode 100644 index 65cdba3f8..000000000 --- a/qiling/extensions/windows_sdk/Query.json +++ /dev/null @@ -1,62 +0,0 @@ -{ - "LoadIFilter": [ - { - "name": "pwcsPath", - "type": "PCWSTR" - }, - { - "name": "pUnkOuter", - "type": "IUnknown" - }, - { - "name": "ppIUnk", - "type": "void" - } - ], - "BindIFilterFromStorage": [ - { - "name": "pStg", - "type": "IStorage" - }, - { - "name": "pUnkOuter", - "type": "IUnknown" - }, - { - "name": "ppIUnk", - "type": "void" - } - ], - "BindIFilterFromStream": [ - { - "name": "pStm", - "type": "IStream" - }, - { - "name": "pUnkOuter", - "type": "IUnknown" - }, - { - "name": "ppIUnk", - "type": "void" - } - ], - "SetCatalogState": [ - { - "name": "pwcsCat", - "type": "WCHAR" - }, - { - "name": "pwcsMachine", - "type": "WCHAR" - }, - { - "name": "dwNewState", - "type": "DWORD" - }, - { - "name": "pdwOldState", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Rpcrt4.json b/qiling/extensions/windows_sdk/Rpcrt4.json deleted file mode 100644 index 4d74a432e..000000000 --- a/qiling/extensions/windows_sdk/Rpcrt4.json +++ /dev/null @@ -1,274 +0,0 @@ -{ - "RpcAsyncRegisterInfo": [ - { - "name": "pAsync", - "type": "PRPC_ASYNC_STATE" - } - ], - "RpcAsyncInitializeHandle": [ - { - "name": "pAsync", - "type": "PRPC_ASYNC_STATE" - }, - { - "name": "Size", - "type": "unsigned int" - } - ], - "RpcAsyncGetCallStatus": [ - { - "name": "pAsync", - "type": "PRPC_ASYNC_STATE" - } - ], - "RpcAsyncCompleteCall": [ - { - "name": "pAsync", - "type": "PRPC_ASYNC_STATE" - }, - { - "name": "Reply", - "type": "void" - } - ], - "RpcAsyncAbortCall": [ - { - "name": "pAsync", - "type": "PRPC_ASYNC_STATE" - }, - { - "name": "ExceptionCode", - "type": "unsigned long" - } - ], - "RpcAsyncCancelCall": [ - { - "name": "pAsync", - "type": "PRPC_ASYNC_STATE" - }, - { - "name": "fAbort", - "type": "BOOL" - } - ], - "RpcErrorStartEnumeration": [ - { - "name": "EnumHandle", - "type": "RPC_ERROR_ENUM_HANDLE" - } - ], - "RpcErrorGetNextRecord": [ - { - "name": "EnumHandle", - "type": "RPC_ERROR_ENUM_HANDLE" - }, - { - "name": "CopyStrings", - "type": "BOOL" - }, - { - "name": "ErrorInfo", - "type": "RPC_EXTENDED_ERROR_INFO" - } - ], - "RpcErrorEndEnumeration": [ - { - "name": "EnumHandle", - "type": "RPC_ERROR_ENUM_HANDLE" - } - ], - "RpcErrorResetEnumeration": [ - { - "name": "EnumHandle", - "type": "RPC_ERROR_ENUM_HANDLE" - } - ], - "RpcErrorGetNumberOfRecords": [ - { - "name": "EnumHandle", - "type": "RPC_ERROR_ENUM_HANDLE" - }, - { - "name": "Records", - "type": "int" - } - ], - "RpcErrorSaveErrorInfo": [ - { - "name": "EnumHandle", - "type": "RPC_ERROR_ENUM_HANDLE" - }, - { - "name": "ErrorBlob", - "type": "PVOID" - }, - { - "name": "BlobSize", - "type": "size_t" - } - ], - "RpcErrorLoadErrorInfo": [ - { - "name": "ErrorBlob", - "type": "PVOID" - }, - { - "name": "BlobSize", - "type": "size_t" - }, - { - "name": "EnumHandle", - "type": "RPC_ERROR_ENUM_HANDLE" - } - ], - "RpcErrorAddRecord": [ - { - "name": "ErrorInfo", - "type": "RPC_EXTENDED_ERROR_INFO" - } - ], - "RpcErrorClearInformation": [ - { - "name": "VOID", - "type": "void" - } - ], - "RpcGetAuthorizationContextForClient": [ - { - "name": "ClientBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "ImpersonateOnReturn", - "type": "BOOL" - }, - { - "name": "Reserved1", - "type": "PVOID" - }, - { - "name": "pExpirationTime", - "type": "PLARGE_INTEGER" - }, - { - "name": "Reserved2", - "type": "LUID" - }, - { - "name": "Reserved3", - "type": "DWORD" - }, - { - "name": "Reserved4", - "type": "PVOID" - }, - { - "name": "pAuthzClientContext", - "type": "PVOID" - } - ], - "RpcFreeAuthorizationContext": [ - { - "name": "pAuthzClientContext", - "type": "PVOID" - } - ], - "RpcSsContextLockExclusive": [ - { - "name": "ServerBindingHandle", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "UserContext", - "type": "PVOID" - } - ], - "RpcSsContextLockShared": [ - { - "name": "ServerBindingHandle", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "UserContext", - "type": "PVOID" - } - ], - "RpcServerInqCallAttributesW": [ - { - "name": "ClientBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "RpcCallAttributes", - "type": "void" - } - ], - "RpcServerInqCallAttributesA": [ - { - "name": "ClientBinding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "RpcCallAttributes", - "type": "void" - } - ], - "RpcServerSubscribeForNotification": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "Notification", - "type": "RPC_NOTIFICATIONS" - }, - { - "name": "NotificationType", - "type": "RPC_NOTIFICATION_TYPES" - }, - { - "name": "NotificationInfo", - "type": "RPC_ASYNC_NOTIFICATION_INFO" - } - ], - "RpcServerUnsubscribeForNotification": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "Notification", - "type": "RPC_NOTIFICATIONS" - }, - { - "name": "NotificationsQueued", - "type": "unsigned long" - } - ], - "RpcBindingBind": [ - { - "name": "pAsync", - "type": "PRPC_ASYNC_STATE" - }, - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - }, - { - "name": "IfSpec", - "type": "RPC_IF_HANDLE" - } - ], - "RpcBindingUnbind": [ - { - "name": "Binding", - "type": "RPC_BINDING_HANDLE" - } - ], - "I_RpcExceptionFilter": [ - { - "name": "ExceptionCode", - "type": "unsigned long" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Scarddlg.json b/qiling/extensions/windows_sdk/Scarddlg.json deleted file mode 100644 index 4cfc92ef9..000000000 --- a/qiling/extensions/windows_sdk/Scarddlg.json +++ /dev/null @@ -1,1100 +0,0 @@ -{ - "SCardEstablishContext": [ - { - "name": "dwScope", - "type": "DWORD" - }, - { - "name": "pvReserved1", - "type": "LPCVOID" - }, - { - "name": "pvReserved2", - "type": "LPCVOID" - }, - { - "name": "phContext", - "type": "LPSCARDCONTEXT" - } - ], - "SCardReleaseContext": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - } - ], - "SCardIsValidContext": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - } - ], - "SCardListReaderGroupsA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "mszGroups", - "type": "LPSTR" - }, - { - "name": "pcchGroups", - "type": "LPDWORD" - } - ], - "SCardListReaderGroupsW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "mszGroups", - "type": "LPWSTR" - }, - { - "name": "pcchGroups", - "type": "LPDWORD" - } - ], - "SCardListReadersA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "mszGroups", - "type": "LPCSTR" - }, - { - "name": "mszReaders", - "type": "LPSTR" - }, - { - "name": "pcchReaders", - "type": "LPDWORD" - } - ], - "SCardListReadersW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "mszGroups", - "type": "LPCWSTR" - }, - { - "name": "mszReaders", - "type": "LPWSTR" - }, - { - "name": "pcchReaders", - "type": "LPDWORD" - } - ], - "SCardListCardsA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "pbAtr", - "type": "LPCBYTE" - }, - { - "name": "rgquidInterfaces", - "type": "LPCGUID" - }, - { - "name": "cguidInterfaceCount", - "type": "DWORD" - }, - { - "name": "mszCards", - "type": "CHAR" - }, - { - "name": "pcchCards", - "type": "LPDWORD" - } - ], - "SCardListCardsW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "pbAtr", - "type": "LPCBYTE" - }, - { - "name": "rgquidInterfaces", - "type": "LPCGUID" - }, - { - "name": "cguidInterfaceCount", - "type": "DWORD" - }, - { - "name": "mszCards", - "type": "WCHAR" - }, - { - "name": "pcchCards", - "type": "LPDWORD" - } - ], - "SCardListInterfacesA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szCard", - "type": "LPCSTR" - }, - { - "name": "pguidInterfaces", - "type": "LPGUID" - }, - { - "name": "pcguidInterfaces", - "type": "LPDWORD" - } - ], - "SCardListInterfacesW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szCard", - "type": "LPCWSTR" - }, - { - "name": "pguidInterfaces", - "type": "LPGUID" - }, - { - "name": "pcguidInterfaces", - "type": "LPDWORD" - } - ], - "SCardGetProviderIdA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szCard", - "type": "LPCSTR" - }, - { - "name": "pguidProviderId", - "type": "LPGUID" - } - ], - "SCardGetProviderIdW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szCard", - "type": "LPCWSTR" - }, - { - "name": "pguidProviderId", - "type": "LPGUID" - } - ], - "SCardGetCardTypeProviderNameA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szCardName", - "type": "LPCSTR" - }, - { - "name": "dwProviderId", - "type": "DWORD" - }, - { - "name": "szProvider", - "type": "CHAR" - }, - { - "name": "pcchProvider", - "type": "LPDWORD" - } - ], - "SCardGetCardTypeProviderNameW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szCardName", - "type": "LPCWSTR" - }, - { - "name": "dwProviderId", - "type": "DWORD" - }, - { - "name": "szProvider", - "type": "WCHAR" - }, - { - "name": "pcchProvider", - "type": "LPDWORD" - } - ], - "SCardIntroduceReaderGroupA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szGroupName", - "type": "LPCSTR" - } - ], - "SCardIntroduceReaderGroupW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szGroupName", - "type": "LPCWSTR" - } - ], - "SCardForgetReaderGroupA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szGroupName", - "type": "LPCSTR" - } - ], - "SCardForgetReaderGroupW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szGroupName", - "type": "LPCWSTR" - } - ], - "SCardIntroduceReaderA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szReaderName", - "type": "LPCSTR" - }, - { - "name": "szDeviceName", - "type": "LPCSTR" - } - ], - "SCardIntroduceReaderW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szReaderName", - "type": "LPCWSTR" - }, - { - "name": "szDeviceName", - "type": "LPCWSTR" - } - ], - "SCardForgetReaderA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szReaderName", - "type": "LPCSTR" - } - ], - "SCardForgetReaderW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szReaderName", - "type": "LPCWSTR" - } - ], - "SCardAddReaderToGroupA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szReaderName", - "type": "LPCSTR" - }, - { - "name": "szGroupName", - "type": "LPCSTR" - } - ], - "SCardAddReaderToGroupW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szReaderName", - "type": "LPCWSTR" - }, - { - "name": "szGroupName", - "type": "LPCWSTR" - } - ], - "SCardRemoveReaderFromGroupA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szReaderName", - "type": "LPCSTR" - }, - { - "name": "szGroupName", - "type": "LPCSTR" - } - ], - "SCardRemoveReaderFromGroupW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szReaderName", - "type": "LPCWSTR" - }, - { - "name": "szGroupName", - "type": "LPCWSTR" - } - ], - "SCardIntroduceCardTypeA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szCardName", - "type": "LPCSTR" - }, - { - "name": "pguidPrimaryProvider", - "type": "LPCGUID" - }, - { - "name": "rgguidInterfaces", - "type": "LPCGUID" - }, - { - "name": "dwInterfaceCount", - "type": "DWORD" - }, - { - "name": "pbAtr", - "type": "LPCBYTE" - }, - { - "name": "pbAtrMask", - "type": "LPCBYTE" - }, - { - "name": "cbAtrLen", - "type": "DWORD" - } - ], - "SCardIntroduceCardTypeW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szCardName", - "type": "LPCWSTR" - }, - { - "name": "pguidPrimaryProvider", - "type": "LPCGUID" - }, - { - "name": "rgguidInterfaces", - "type": "LPCGUID" - }, - { - "name": "dwInterfaceCount", - "type": "DWORD" - }, - { - "name": "pbAtr", - "type": "LPCBYTE" - }, - { - "name": "pbAtrMask", - "type": "LPCBYTE" - }, - { - "name": "cbAtrLen", - "type": "DWORD" - } - ], - "SCardSetCardTypeProviderNameA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szCardName", - "type": "LPCSTR" - }, - { - "name": "dwProviderId", - "type": "DWORD" - }, - { - "name": "szProvider", - "type": "LPCSTR" - } - ], - "SCardSetCardTypeProviderNameW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szCardName", - "type": "LPCWSTR" - }, - { - "name": "dwProviderId", - "type": "DWORD" - }, - { - "name": "szProvider", - "type": "LPCWSTR" - } - ], - "SCardForgetCardTypeA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szCardName", - "type": "LPCSTR" - } - ], - "SCardForgetCardTypeW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szCardName", - "type": "LPCWSTR" - } - ], - "SCardFreeMemory": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "pvMem", - "type": "LPCVOID" - } - ], - "SCardAccessStartedEvent": [ - { - "name": "VOID", - "type": "void" - } - ], - "SCardReleaseStartedEvent": [ - { - "name": "VOID", - "type": "void" - } - ], - "SCardLocateCardsA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "mszCards", - "type": "LPCSTR" - }, - { - "name": "rgReaderStates", - "type": "LPSCARD_READERSTATEA" - }, - { - "name": "cReaders", - "type": "DWORD" - } - ], - "SCardLocateCardsW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "mszCards", - "type": "LPCWSTR" - }, - { - "name": "rgReaderStates", - "type": "LPSCARD_READERSTATEW" - }, - { - "name": "cReaders", - "type": "DWORD" - } - ], - "SCardLocateCardsByATRA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "rgAtrMasks", - "type": "LPSCARD_ATRMASK" - }, - { - "name": "cAtrs", - "type": "DWORD" - }, - { - "name": "rgReaderStates", - "type": "LPSCARD_READERSTATEA" - }, - { - "name": "cReaders", - "type": "DWORD" - } - ], - "SCardLocateCardsByATRW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "rgAtrMasks", - "type": "LPSCARD_ATRMASK" - }, - { - "name": "cAtrs", - "type": "DWORD" - }, - { - "name": "rgReaderStates", - "type": "LPSCARD_READERSTATEW" - }, - { - "name": "cReaders", - "type": "DWORD" - } - ], - "SCardGetStatusChangeA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "rgReaderStates", - "type": "LPSCARD_READERSTATEA" - }, - { - "name": "cReaders", - "type": "DWORD" - } - ], - "SCardGetStatusChangeW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "rgReaderStates", - "type": "LPSCARD_READERSTATEW" - }, - { - "name": "cReaders", - "type": "DWORD" - } - ], - "SCardCancel": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - } - ], - "SCardConnectA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szReader", - "type": "LPCSTR" - }, - { - "name": "dwShareMode", - "type": "DWORD" - }, - { - "name": "dwPreferredProtocols", - "type": "DWORD" - }, - { - "name": "phCard", - "type": "LPSCARDHANDLE" - }, - { - "name": "pdwActiveProtocol", - "type": "LPDWORD" - } - ], - "SCardConnectW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szReader", - "type": "LPCWSTR" - }, - { - "name": "dwShareMode", - "type": "DWORD" - }, - { - "name": "dwPreferredProtocols", - "type": "DWORD" - }, - { - "name": "phCard", - "type": "LPSCARDHANDLE" - }, - { - "name": "pdwActiveProtocol", - "type": "LPDWORD" - } - ], - "SCardReconnect": [ - { - "name": "hCard", - "type": "SCARDHANDLE" - }, - { - "name": "dwShareMode", - "type": "DWORD" - }, - { - "name": "dwPreferredProtocols", - "type": "DWORD" - }, - { - "name": "dwInitialization", - "type": "DWORD" - }, - { - "name": "pdwActiveProtocol", - "type": "LPDWORD" - } - ], - "SCardDisconnect": [ - { - "name": "hCard", - "type": "SCARDHANDLE" - }, - { - "name": "dwDisposition", - "type": "DWORD" - } - ], - "SCardBeginTransaction": [ - { - "name": "hCard", - "type": "SCARDHANDLE" - } - ], - "SCardEndTransaction": [ - { - "name": "hCard", - "type": "SCARDHANDLE" - }, - { - "name": "dwDisposition", - "type": "DWORD" - } - ], - "SCardStatusA": [ - { - "name": "hCard", - "type": "SCARDHANDLE" - }, - { - "name": "mszReaderNames", - "type": "LPSTR" - }, - { - "name": "pcchReaderLen", - "type": "LPDWORD" - }, - { - "name": "pdwState", - "type": "LPDWORD" - }, - { - "name": "pdwProtocol", - "type": "LPDWORD" - }, - { - "name": "pbAtr", - "type": "LPBYTE" - }, - { - "name": "pcbAtrLen", - "type": "LPDWORD" - } - ], - "SCardStatusW": [ - { - "name": "hCard", - "type": "SCARDHANDLE" - }, - { - "name": "mszReaderNames", - "type": "LPWSTR" - }, - { - "name": "pcchReaderLen", - "type": "LPDWORD" - }, - { - "name": "pdwState", - "type": "LPDWORD" - }, - { - "name": "pdwProtocol", - "type": "LPDWORD" - }, - { - "name": "pbAtr", - "type": "LPBYTE" - }, - { - "name": "pcbAtrLen", - "type": "LPDWORD" - } - ], - "SCardTransmit": [ - { - "name": "hCard", - "type": "SCARDHANDLE" - }, - { - "name": "pioSendPci", - "type": "LPCSCARD_IO_REQUEST" - }, - { - "name": "pbSendBuffer", - "type": "LPCBYTE" - }, - { - "name": "cbSendLength", - "type": "DWORD" - }, - { - "name": "pioRecvPci", - "type": "LPSCARD_IO_REQUEST" - }, - { - "name": "pbRecvBuffer", - "type": "LPBYTE" - }, - { - "name": "pcbRecvLength", - "type": "LPDWORD" - } - ], - "SCardGetTransmitCount": [ - { - "name": "hCard", - "type": "SCARDHANDLE" - }, - { - "name": "pcTransmitCount", - "type": "LPDWORD" - } - ], - "SCardControl": [ - { - "name": "hCard", - "type": "SCARDHANDLE" - }, - { - "name": "dwControlCode", - "type": "DWORD" - }, - { - "name": "lpInBuffer", - "type": "LPCVOID" - }, - { - "name": "cbInBufferSize", - "type": "DWORD" - }, - { - "name": "lpOutBuffer", - "type": "LPVOID" - }, - { - "name": "cbOutBufferSize", - "type": "DWORD" - }, - { - "name": "lpBytesReturned", - "type": "LPDWORD" - } - ], - "SCardGetAttrib": [ - { - "name": "hCard", - "type": "SCARDHANDLE" - }, - { - "name": "dwAttrId", - "type": "DWORD" - }, - { - "name": "pbAttr", - "type": "LPBYTE" - }, - { - "name": "pcbAttrLen", - "type": "LPDWORD" - } - ], - "SCardSetAttrib": [ - { - "name": "hCard", - "type": "SCARDHANDLE" - }, - { - "name": "dwAttrId", - "type": "DWORD" - }, - { - "name": "pbAttr", - "type": "LPCBYTE" - }, - { - "name": "cbAttrLen", - "type": "DWORD" - } - ], - "SCardUIDlgSelectCardA": [ - { - "name": "VOID", - "type": "LPOPENCARDNAME_EXA" - } - ], - "SCardUIDlgSelectCardW": [ - { - "name": "VOID", - "type": "LPOPENCARDNAME_EXW" - } - ], - "GetOpenCardNameA": [ - { - "name": "VOID", - "type": "LPOPENCARDNAMEA" - } - ], - "GetOpenCardNameW": [ - { - "name": "VOID", - "type": "LPOPENCARDNAMEW" - } - ], - "SCardReadCacheA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "CardIdentifier", - "type": "UUID" - }, - { - "name": "FreshnessCounter", - "type": "DWORD" - }, - { - "name": "LookupName", - "type": "LPSTR" - }, - { - "name": "Data", - "type": "PBYTE" - }, - { - "name": "DataLen", - "type": "DWORD" - } - ], - "SCardReadCacheW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "CardIdentifier", - "type": "UUID" - }, - { - "name": "FreshnessCounter", - "type": "DWORD" - }, - { - "name": "LookupName", - "type": "LPWSTR" - }, - { - "name": "Data", - "type": "PBYTE" - }, - { - "name": "DataLen", - "type": "DWORD" - } - ], - "SCardWriteCacheA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "CardIdentifier", - "type": "UUID" - }, - { - "name": "FreshnessCounter", - "type": "DWORD" - }, - { - "name": "LookupName", - "type": "LPSTR" - }, - { - "name": "Data", - "type": "PBYTE" - }, - { - "name": "DataLen", - "type": "DWORD" - } - ], - "SCardWriteCacheW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "CardIdentifier", - "type": "UUID" - }, - { - "name": "FreshnessCounter", - "type": "DWORD" - }, - { - "name": "LookupName", - "type": "LPWSTR" - }, - { - "name": "Data", - "type": "PBYTE" - }, - { - "name": "DataLen", - "type": "DWORD" - } - ], - "SCardGetDeviceTypeIdA": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szReaderName", - "type": "LPCSTR" - }, - { - "name": "pdwDeviceTypeId", - "type": "LPDWORD" - } - ], - "SCardGetDeviceTypeIdW": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "szReaderName", - "type": "LPCWSTR" - }, - { - "name": "pdwDeviceTypeId", - "type": "LPDWORD" - } - ], - "SCardAudit": [ - { - "name": "hContext", - "type": "SCARDCONTEXT" - }, - { - "name": "dwEvent", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Secur32.json b/qiling/extensions/windows_sdk/Secur32.json deleted file mode 100644 index 739dfa299..000000000 --- a/qiling/extensions/windows_sdk/Secur32.json +++ /dev/null @@ -1,922 +0,0 @@ -{ - "LsaRegisterLogonProcess": [ - { - "name": "LogonProcessName", - "type": "PLSA_STRING" - }, - { - "name": "LsaHandle", - "type": "PHANDLE" - }, - { - "name": "SecurityMode", - "type": "PLSA_OPERATIONAL_MODE" - } - ], - "LsaLogonUser": [ - { - "name": "LsaHandle", - "type": "HANDLE" - }, - { - "name": "OriginName", - "type": "PLSA_STRING" - }, - { - "name": "LogonType", - "type": "SECURITY_LOGON_TYPE" - }, - { - "name": "AuthenticationPackage", - "type": "ULONG" - }, - { - "name": "AuthenticationInformation", - "type": "PVOID" - }, - { - "name": "AuthenticationInformationLength", - "type": "ULONG" - }, - { - "name": "LocalGroups", - "type": "PTOKEN_GROUPS" - }, - { - "name": "SourceContext", - "type": "PTOKEN_SOURCE" - }, - { - "name": "ProfileBuffer", - "type": "PVOID" - }, - { - "name": "ProfileBufferLength", - "type": "PULONG" - }, - { - "name": "LogonId", - "type": "PLUID" - }, - { - "name": "Token", - "type": "PHANDLE" - }, - { - "name": "Quotas", - "type": "PQUOTA_LIMITS" - }, - { - "name": "SubStatus", - "type": "PNTSTATUS" - } - ], - "LsaLookupAuthenticationPackage": [ - { - "name": "LsaHandle", - "type": "HANDLE" - }, - { - "name": "PackageName", - "type": "PLSA_STRING" - }, - { - "name": "AuthenticationPackage", - "type": "PULONG" - } - ], - "LsaFreeReturnBuffer": [ - { - "name": "Buffer", - "type": "PVOID" - } - ], - "LsaCallAuthenticationPackage": [ - { - "name": "LsaHandle", - "type": "HANDLE" - }, - { - "name": "AuthenticationPackage", - "type": "ULONG" - }, - { - "name": "ProtocolSubmitBuffer", - "type": "PVOID" - }, - { - "name": "SubmitBufferLength", - "type": "ULONG" - }, - { - "name": "ProtocolReturnBuffer", - "type": "PVOID" - }, - { - "name": "ReturnBufferLength", - "type": "PULONG" - }, - { - "name": "ProtocolStatus", - "type": "PNTSTATUS" - } - ], - "LsaDeregisterLogonProcess": [ - { - "name": "LsaHandle", - "type": "HANDLE" - } - ], - "LsaConnectUntrusted": [ - { - "name": "LsaHandle", - "type": "PHANDLE" - } - ], - "LsaFreeMemory": [ - { - "name": "Buffer", - "type": "PVOID" - } - ], - "LsaClose": [ - { - "name": "ObjectHandle", - "type": "LSA_HANDLE" - } - ], - "LsaEnumerateLogonSessions": [ - { - "name": "LogonSessionCount", - "type": "PULONG" - }, - { - "name": "LogonSessionList", - "type": "PLUID" - } - ], - "LsaGetLogonSessionData": [ - { - "name": "LogonId", - "type": "PLUID" - }, - { - "name": "ppLogonSessionData", - "type": "PSECURITY_LOGON_SESSION_DATA" - } - ], - "LsaOpenPolicy": [ - { - "name": "SystemName", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "ObjectAttributes", - "type": "PLSA_OBJECT_ATTRIBUTES" - }, - { - "name": "DesiredAccess", - "type": "ACCESS_MASK" - }, - { - "name": "PolicyHandle", - "type": "PLSA_HANDLE" - } - ], - "LsaQueryInformationPolicy": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "InformationClass", - "type": "POLICY_INFORMATION_CLASS" - }, - { - "name": "Buffer", - "type": "PVOID" - } - ], - "LsaSetInformationPolicy": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "InformationClass", - "type": "POLICY_INFORMATION_CLASS" - }, - { - "name": "Buffer", - "type": "PVOID" - } - ], - "LsaQueryDomainInformationPolicy": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "InformationClass", - "type": "POLICY_DOMAIN_INFORMATION_CLASS" - }, - { - "name": "Buffer", - "type": "PVOID" - } - ], - "LsaSetDomainInformationPolicy": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "InformationClass", - "type": "POLICY_DOMAIN_INFORMATION_CLASS" - }, - { - "name": "Buffer", - "type": "PVOID" - } - ], - "LsaRegisterPolicyChangeNotification": [ - { - "name": "InformationClass", - "type": "POLICY_NOTIFICATION_INFORMATION_CLASS" - }, - { - "name": "NotificationEventHandle", - "type": "HANDLE" - } - ], - "LsaUnregisterPolicyChangeNotification": [ - { - "name": "InformationClass", - "type": "POLICY_NOTIFICATION_INFORMATION_CLASS" - }, - { - "name": "NotificationEventHandle", - "type": "HANDLE" - } - ], - "LsaEnumerateTrustedDomains": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "EnumerationContext", - "type": "PLSA_ENUMERATION_HANDLE" - }, - { - "name": "Buffer", - "type": "PVOID" - }, - { - "name": "PreferedMaximumLength", - "type": "ULONG" - }, - { - "name": "CountReturned", - "type": "PULONG" - } - ], - "LsaLookupNames": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "Count", - "type": "ULONG" - }, - { - "name": "Names", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "ReferencedDomains", - "type": "PLSA_REFERENCED_DOMAIN_LIST" - }, - { - "name": "Sids", - "type": "PLSA_TRANSLATED_SID" - } - ], - "LsaLookupNames2": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "Flags", - "type": "ULONG" - }, - { - "name": "Count", - "type": "ULONG" - }, - { - "name": "Names", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "ReferencedDomains", - "type": "PLSA_REFERENCED_DOMAIN_LIST" - }, - { - "name": "Sids", - "type": "PLSA_TRANSLATED_SID2" - } - ], - "LsaLookupSids": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "Count", - "type": "ULONG" - }, - { - "name": "Sids", - "type": "PSID" - }, - { - "name": "ReferencedDomains", - "type": "PLSA_REFERENCED_DOMAIN_LIST" - }, - { - "name": "Names", - "type": "PLSA_TRANSLATED_NAME" - } - ], - "LsaLookupSids2": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "LookupOptions", - "type": "ULONG" - }, - { - "name": "Count", - "type": "ULONG" - }, - { - "name": "Sids", - "type": "PSID" - }, - { - "name": "ReferencedDomains", - "type": "PLSA_REFERENCED_DOMAIN_LIST" - }, - { - "name": "Names", - "type": "PLSA_TRANSLATED_NAME" - } - ], - "LsaEnumerateAccountsWithUserRight": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "UserRight", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "Buffer", - "type": "PVOID" - }, - { - "name": "CountReturned", - "type": "PULONG" - } - ], - "LsaEnumerateAccountRights": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "AccountSid", - "type": "PSID" - }, - { - "name": "UserRights", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "CountOfRights", - "type": "PULONG" - } - ], - "LsaAddAccountRights": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "AccountSid", - "type": "PSID" - }, - { - "name": "UserRights", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "CountOfRights", - "type": "ULONG" - } - ], - "LsaRemoveAccountRights": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "AccountSid", - "type": "PSID" - }, - { - "name": "AllRights", - "type": "BOOLEAN" - }, - { - "name": "UserRights", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "CountOfRights", - "type": "ULONG" - } - ], - "LsaOpenTrustedDomainByName": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "TrustedDomainName", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "DesiredAccess", - "type": "ACCESS_MASK" - }, - { - "name": "TrustedDomainHandle", - "type": "PLSA_HANDLE" - } - ], - "LsaQueryTrustedDomainInfo": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "TrustedDomainSid", - "type": "PSID" - }, - { - "name": "InformationClass", - "type": "TRUSTED_INFORMATION_CLASS" - }, - { - "name": "Buffer", - "type": "PVOID" - } - ], - "LsaSetTrustedDomainInformation": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "TrustedDomainSid", - "type": "PSID" - }, - { - "name": "InformationClass", - "type": "TRUSTED_INFORMATION_CLASS" - }, - { - "name": "Buffer", - "type": "PVOID" - } - ], - "LsaDeleteTrustedDomain": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "TrustedDomainSid", - "type": "PSID" - } - ], - "LsaQueryTrustedDomainInfoByName": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "TrustedDomainName", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "InformationClass", - "type": "TRUSTED_INFORMATION_CLASS" - }, - { - "name": "Buffer", - "type": "PVOID" - } - ], - "LsaSetTrustedDomainInfoByName": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "TrustedDomainName", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "InformationClass", - "type": "TRUSTED_INFORMATION_CLASS" - }, - { - "name": "Buffer", - "type": "PVOID" - } - ], - "LsaEnumerateTrustedDomainsEx": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "EnumerationContext", - "type": "PLSA_ENUMERATION_HANDLE" - }, - { - "name": "Buffer", - "type": "PVOID" - }, - { - "name": "PreferedMaximumLength", - "type": "ULONG" - }, - { - "name": "CountReturned", - "type": "PULONG" - } - ], - "LsaCreateTrustedDomainEx": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "TrustedDomainInformation", - "type": "PTRUSTED_DOMAIN_INFORMATION_EX" - }, - { - "name": "AuthenticationInformation", - "type": "PTRUSTED_DOMAIN_AUTH_INFORMATION" - }, - { - "name": "DesiredAccess", - "type": "ACCESS_MASK" - }, - { - "name": "TrustedDomainHandle", - "type": "PLSA_HANDLE" - } - ], - "LsaQueryForestTrustInformation": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "TrustedDomainName", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "ForestTrustInfo", - "type": "PLSA_FOREST_TRUST_INFORMATION" - } - ], - "LsaSetForestTrustInformation": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "TrustedDomainName", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "ForestTrustInfo", - "type": "PLSA_FOREST_TRUST_INFORMATION" - }, - { - "name": "CheckOnly", - "type": "BOOLEAN" - }, - { - "name": "CollisionInfo", - "type": "PLSA_FOREST_TRUST_COLLISION_INFORMATION" - } - ], - "LsaStorePrivateData": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "KeyName", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "PrivateData", - "type": "PLSA_UNICODE_STRING" - } - ], - "LsaRetrievePrivateData": [ - { - "name": "PolicyHandle", - "type": "LSA_HANDLE" - }, - { - "name": "KeyName", - "type": "PLSA_UNICODE_STRING" - }, - { - "name": "PrivateData", - "type": "PLSA_UNICODE_STRING" - } - ], - "LsaNtStatusToWinError": [ - { - "name": "Status", - "type": "NTSTATUS" - } - ], - "AuditSetSystemPolicy": [ - { - "name": "pAuditPolicy", - "type": "PCAUDIT_POLICY_INFORMATION" - }, - { - "name": "dwPolicyCount", - "type": "ULONG" - } - ], - "AuditSetPerUserPolicy": [ - { - "name": "pSid", - "type": "PSID" - }, - { - "name": "pAuditPolicy", - "type": "PCAUDIT_POLICY_INFORMATION" - }, - { - "name": "dwPolicyCount", - "type": "ULONG" - } - ], - "AuditQuerySystemPolicy": [ - { - "name": "pSubCategoryGuids", - "type": "GUID" - }, - { - "name": "dwPolicyCount", - "type": "ULONG" - }, - { - "name": "ppAuditPolicy", - "type": "PAUDIT_POLICY_INFORMATION" - } - ], - "AuditQueryPerUserPolicy": [ - { - "name": "pSid", - "type": "PSID" - }, - { - "name": "pSubCategoryGuids", - "type": "GUID" - }, - { - "name": "dwPolicyCount", - "type": "ULONG" - }, - { - "name": "ppAuditPolicy", - "type": "PAUDIT_POLICY_INFORMATION" - } - ], - "AuditEnumeratePerUserPolicy": [ - { - "name": "ppAuditSidArray", - "type": "PPOLICY_AUDIT_SID_ARRAY" - } - ], - "AuditComputeEffectivePolicyBySid": [ - { - "name": "pSid", - "type": "PSID" - }, - { - "name": "pSubCategoryGuids", - "type": "GUID" - }, - { - "name": "dwPolicyCount", - "type": "ULONG" - }, - { - "name": "ppAuditPolicy", - "type": "PAUDIT_POLICY_INFORMATION" - } - ], - "AuditComputeEffectivePolicyByToken": [ - { - "name": "hTokenHandle", - "type": "HANDLE" - }, - { - "name": "pSubCategoryGuids", - "type": "GUID" - }, - { - "name": "dwPolicyCount", - "type": "ULONG" - }, - { - "name": "ppAuditPolicy", - "type": "PAUDIT_POLICY_INFORMATION" - } - ], - "AuditEnumerateCategories": [ - { - "name": "ppAuditCategoriesArray", - "type": "GUID" - }, - { - "name": "pdwCountReturned", - "type": "PULONG" - } - ], - "AuditEnumerateSubCategories": [ - { - "name": "pAuditCategoryGuid", - "type": "GUID" - }, - { - "name": "bRetrieveAllSubCategories", - "type": "BOOLEAN" - }, - { - "name": "ppAuditSubCategoriesArray", - "type": "GUID" - }, - { - "name": "pdwCountReturned", - "type": "PULONG" - } - ], - "AuditLookupCategoryNameW": [ - { - "name": "pAuditCategoryGuid", - "type": "GUID" - }, - { - "name": "ppszCategoryName", - "type": "PWSTR" - } - ], - "AuditLookupCategoryNameA": [ - { - "name": "pAuditCategoryGuid", - "type": "GUID" - }, - { - "name": "ppszCategoryName", - "type": "PSTR" - } - ], - "AuditLookupSubCategoryNameW": [ - { - "name": "pAuditSubCategoryGuid", - "type": "GUID" - }, - { - "name": "ppszSubCategoryName", - "type": "PWSTR" - } - ], - "AuditLookupSubCategoryNameA": [ - { - "name": "pAuditSubCategoryGuid", - "type": "GUID" - }, - { - "name": "ppszSubCategoryName", - "type": "PSTR" - } - ], - "AuditLookupCategoryIdFromCategoryGuid": [ - { - "name": "pAuditCategoryGuid", - "type": "GUID" - }, - { - "name": "pAuditCategoryId", - "type": "PPOLICY_AUDIT_EVENT_TYPE" - } - ], - "AuditLookupCategoryGuidFromCategoryId": [ - { - "name": "AuditCategoryId", - "type": "POLICY_AUDIT_EVENT_TYPE" - }, - { - "name": "pAuditCategoryGuid", - "type": "GUID" - } - ], - "AuditSetSecurity": [ - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "pSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "AuditQuerySecurity": [ - { - "name": "SecurityInformation", - "type": "SECURITY_INFORMATION" - }, - { - "name": "ppSecurityDescriptor", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "AuditSetGlobalSaclW": [ - { - "name": "ObjectTypeName", - "type": "PCWSTR" - }, - { - "name": "Acl", - "type": "PACL" - } - ], - "AuditSetGlobalSaclA": [ - { - "name": "ObjectTypeName", - "type": "PCSTR" - }, - { - "name": "Acl", - "type": "PACL" - } - ], - "AuditQueryGlobalSaclW": [ - { - "name": "ObjectTypeName", - "type": "PCWSTR" - }, - { - "name": "Acl", - "type": "PACL" - } - ], - "AuditQueryGlobalSaclA": [ - { - "name": "ObjectTypeName", - "type": "PCSTR" - }, - { - "name": "Acl", - "type": "PACL" - } - ], - "AuditFree": [ - { - "name": "Buffer", - "type": "PVOID" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Shdocvw.json b/qiling/extensions/windows_sdk/Shdocvw.json deleted file mode 100644 index 456aa00b9..000000000 --- a/qiling/extensions/windows_sdk/Shdocvw.json +++ /dev/null @@ -1,188 +0,0 @@ -{ - "GetFileNameFromBrowse": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pszFilePath", - "type": "PWSTR" - }, - { - "name": "cchFilePath", - "type": "UINT" - }, - { - "name": "pszWorkingDir", - "type": "PCWSTR" - }, - { - "name": "pszDefExt", - "type": "PCWSTR" - }, - { - "name": "pszFilters", - "type": "PCWSTR" - }, - { - "name": "pszTitle", - "type": "PCWSTR" - } - ], - "DriveType": [ - { - "name": "iDrive", - "type": "int" - } - ], - "SHChangeNotifyRegisterThread": [ - { - "name": "status", - "type": "SCNRT_STATUS" - } - ], - "PathIsSlowA": [ - { - "name": "pszFile", - "type": "LPCSTR" - }, - { - "name": "dwAttr", - "type": "DWORD" - } - ], - "PathIsSlowW": [ - { - "name": "pszFile", - "type": "LPCWSTR" - }, - { - "name": "dwAttr", - "type": "DWORD" - } - ], - "SHCreatePropSheetExtArray": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "PCWSTR" - }, - { - "name": "max_iface", - "type": "UINT" - } - ], - "SHOpenPropSheetA": [ - { - "name": "pszCaption", - "type": "LPCSTR" - }, - { - "name": "ahkeys", - "type": "HKEY" - }, - { - "name": "ckeys", - "type": "UINT" - }, - { - "name": "pclsidDefault", - "type": "CLSID" - }, - { - "name": "pdtobj", - "type": "IDataObject" - }, - { - "name": "psb", - "type": "IShellBrowser" - }, - { - "name": "pStartPage", - "type": "LPCSTR" - } - ], - "SHOpenPropSheetW": [ - { - "name": "pszCaption", - "type": "LPCWSTR" - }, - { - "name": "ahkeys", - "type": "HKEY" - }, - { - "name": "ckeys", - "type": "UINT" - }, - { - "name": "pclsidDefault", - "type": "CLSID" - }, - { - "name": "pdtobj", - "type": "IDataObject" - }, - { - "name": "psb", - "type": "IShellBrowser" - }, - { - "name": "pStartPage", - "type": "LPCWSTR" - } - ], - "SoftwareUpdateMessageBox": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "pszDistUnit", - "type": "PCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "psdi", - "type": "LPSOFTDISTINFO" - } - ], - "SHMultiFileProperties": [ - { - "name": "pdtobj", - "type": "IDataObject" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHCreateQueryCancelAutoPlayMoniker": [ - { - "name": "ppmoniker", - "type": "IMoniker" - } - ], - "PerUserInit": [ - { - "name": "VOID", - "type": "void" - } - ], - "SHRunControlPanel": [ - { - "name": "lpcszCmdLine", - "type": "PCWSTR" - }, - { - "name": "hwndMsgParent", - "type": "HWND" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Shell32.json b/qiling/extensions/windows_sdk/Shell32.json deleted file mode 100644 index 94251ac13..000000000 --- a/qiling/extensions/windows_sdk/Shell32.json +++ /dev/null @@ -1,4606 +0,0 @@ -{ - "StrChrA": [ - { - "name": "pszStart", - "type": "PCSTR" - }, - { - "name": "wMatch", - "type": "WORD" - } - ], - "StrChrW": [ - { - "name": "pszStart", - "type": "PCWSTR" - }, - { - "name": "wMatch", - "type": "WCHAR" - } - ], - "StrChrIA": [ - { - "name": "pszStart", - "type": "PCSTR" - }, - { - "name": "wMatch", - "type": "WORD" - } - ], - "StrChrIW": [ - { - "name": "pszStart", - "type": "PCWSTR" - }, - { - "name": "wMatch", - "type": "WCHAR" - } - ], - "StrChrNW": [ - { - "name": "pszStart", - "type": "PCWSTR" - }, - { - "name": "wMatch", - "type": "WCHAR" - }, - { - "name": "cchMax", - "type": "UINT" - } - ], - "StrChrNIW": [ - { - "name": "pszStart", - "type": "PCWSTR" - }, - { - "name": "wMatch", - "type": "WCHAR" - }, - { - "name": "cchMax", - "type": "UINT" - } - ], - "StrCmpNA": [ - { - "name": "psz1", - "type": "PCSTR" - }, - { - "name": "psz2", - "type": "PCSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCmpNW": [ - { - "name": "psz1", - "type": "PCWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCmpNIA": [ - { - "name": "psz1", - "type": "PCSTR" - }, - { - "name": "psz2", - "type": "PCSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCmpNIW": [ - { - "name": "psz1", - "type": "PCWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCSpnA": [ - { - "name": "pszStr", - "type": "PCSTR" - }, - { - "name": "pszSet", - "type": "PCSTR" - } - ], - "StrCSpnW": [ - { - "name": "pszStr", - "type": "PCWSTR" - }, - { - "name": "pszSet", - "type": "PCWSTR" - } - ], - "StrCSpnIA": [ - { - "name": "pszStr", - "type": "PCSTR" - }, - { - "name": "pszSet", - "type": "PCSTR" - } - ], - "StrCSpnIW": [ - { - "name": "pszStr", - "type": "PCWSTR" - }, - { - "name": "pszSet", - "type": "PCWSTR" - } - ], - "StrDupA": [ - { - "name": "pszSrch", - "type": "PCSTR" - } - ], - "StrDupW": [ - { - "name": "pszSrch", - "type": "PCWSTR" - } - ], - "StrFormatByteSizeEx": [ - { - "name": "ull", - "type": "ULONGLONG" - }, - { - "name": "flags", - "type": "SFBS_FLAGS" - }, - { - "name": "pszBuf", - "type": "PWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrFormatByteSizeA": [ - { - "name": "dw", - "type": "DWORD" - }, - { - "name": "pszBuf", - "type": "PSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrFormatByteSize64A": [ - { - "name": "qdw", - "type": "LONGLONG" - }, - { - "name": "pszBuf", - "type": "PSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrFormatByteSizeW": [ - { - "name": "qdw", - "type": "LONGLONG" - }, - { - "name": "pszBuf", - "type": "PWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrFormatKBSizeW": [ - { - "name": "qdw", - "type": "LONGLONG" - }, - { - "name": "pszBuf", - "type": "PWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrFormatKBSizeA": [ - { - "name": "qdw", - "type": "LONGLONG" - }, - { - "name": "pszBuf", - "type": "PSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrFromTimeIntervalA": [ - { - "name": "pszOut", - "type": "PSTR" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "dwTimeMS", - "type": "DWORD" - }, - { - "name": "digits", - "type": "int" - } - ], - "StrFromTimeIntervalW": [ - { - "name": "pszOut", - "type": "PWSTR" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "dwTimeMS", - "type": "DWORD" - }, - { - "name": "digits", - "type": "int" - } - ], - "StrIsIntlEqualA": [ - { - "name": "fCaseSens", - "type": "BOOL" - }, - { - "name": "pszString1", - "type": "PCSTR" - }, - { - "name": "pszString2", - "type": "PCSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrIsIntlEqualW": [ - { - "name": "fCaseSens", - "type": "BOOL" - }, - { - "name": "pszString1", - "type": "PCWSTR" - }, - { - "name": "pszString2", - "type": "PCWSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrNCatA": [ - { - "name": "psz1", - "type": "PSTR" - }, - { - "name": "psz2", - "type": "PCSTR" - }, - { - "name": "cchMax", - "type": "int" - } - ], - "StrNCatW": [ - { - "name": "psz1", - "type": "PWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - }, - { - "name": "cchMax", - "type": "int" - } - ], - "StrPBrkA": [ - { - "name": "psz", - "type": "PCSTR" - }, - { - "name": "pszSet", - "type": "PCSTR" - } - ], - "StrPBrkW": [ - { - "name": "psz", - "type": "PCWSTR" - }, - { - "name": "pszSet", - "type": "PCWSTR" - } - ], - "StrRChrA": [ - { - "name": "pszStart", - "type": "PCSTR" - }, - { - "name": "pszEnd", - "type": "PCSTR" - }, - { - "name": "wMatch", - "type": "WORD" - } - ], - "StrRChrW": [ - { - "name": "pszStart", - "type": "PCWSTR" - }, - { - "name": "pszEnd", - "type": "PCWSTR" - }, - { - "name": "wMatch", - "type": "WCHAR" - } - ], - "StrRChrIA": [ - { - "name": "pszStart", - "type": "PCSTR" - }, - { - "name": "pszEnd", - "type": "PCSTR" - }, - { - "name": "wMatch", - "type": "WORD" - } - ], - "StrRChrIW": [ - { - "name": "pszStart", - "type": "PCWSTR" - }, - { - "name": "pszEnd", - "type": "PCWSTR" - }, - { - "name": "wMatch", - "type": "WCHAR" - } - ], - "StrRStrIA": [ - { - "name": "pszSource", - "type": "PCSTR" - }, - { - "name": "pszLast", - "type": "PCSTR" - }, - { - "name": "pszSrch", - "type": "PCSTR" - } - ], - "StrRStrIW": [ - { - "name": "pszSource", - "type": "PCWSTR" - }, - { - "name": "pszLast", - "type": "PCWSTR" - }, - { - "name": "pszSrch", - "type": "PCWSTR" - } - ], - "StrSpnA": [ - { - "name": "psz", - "type": "PCSTR" - }, - { - "name": "pszSet", - "type": "PCSTR" - } - ], - "StrSpnW": [ - { - "name": "psz", - "type": "PCWSTR" - }, - { - "name": "pszSet", - "type": "PCWSTR" - } - ], - "StrStrA": [ - { - "name": "pszFirst", - "type": "PCSTR" - }, - { - "name": "pszSrch", - "type": "PCSTR" - } - ], - "StrStrW": [ - { - "name": "pszFirst", - "type": "PCWSTR" - }, - { - "name": "pszSrch", - "type": "PCWSTR" - } - ], - "StrStrIA": [ - { - "name": "pszFirst", - "type": "PCSTR" - }, - { - "name": "pszSrch", - "type": "PCSTR" - } - ], - "StrStrIW": [ - { - "name": "pszFirst", - "type": "PCWSTR" - }, - { - "name": "pszSrch", - "type": "PCWSTR" - } - ], - "StrStrNW": [ - { - "name": "pszFirst", - "type": "PCWSTR" - }, - { - "name": "pszSrch", - "type": "PCWSTR" - }, - { - "name": "cchMax", - "type": "UINT" - } - ], - "StrStrNIW": [ - { - "name": "pszFirst", - "type": "PCWSTR" - }, - { - "name": "pszSrch", - "type": "PCWSTR" - }, - { - "name": "cchMax", - "type": "UINT" - } - ], - "StrToIntA": [ - { - "name": "pszSrc", - "type": "PCSTR" - } - ], - "StrToIntW": [ - { - "name": "pszSrc", - "type": "PCWSTR" - } - ], - "StrToIntExA": [ - { - "name": "pszString", - "type": "PCSTR" - }, - { - "name": "dwFlags", - "type": "STIF_FLAGS" - }, - { - "name": "piRet", - "type": "int" - } - ], - "StrToIntExW": [ - { - "name": "pszString", - "type": "PCWSTR" - }, - { - "name": "dwFlags", - "type": "STIF_FLAGS" - }, - { - "name": "piRet", - "type": "int" - } - ], - "StrToInt64ExA": [ - { - "name": "pszString", - "type": "PCSTR" - }, - { - "name": "dwFlags", - "type": "STIF_FLAGS" - }, - { - "name": "pllRet", - "type": "LONGLONG" - } - ], - "StrToInt64ExW": [ - { - "name": "pszString", - "type": "PCWSTR" - }, - { - "name": "dwFlags", - "type": "STIF_FLAGS" - }, - { - "name": "pllRet", - "type": "LONGLONG" - } - ], - "StrTrimA": [ - { - "name": "psz", - "type": "PSTR" - }, - { - "name": "pszTrimChars", - "type": "PCSTR" - } - ], - "StrTrimW": [ - { - "name": "psz", - "type": "PWSTR" - }, - { - "name": "pszTrimChars", - "type": "PCWSTR" - } - ], - "StrCatW": [ - { - "name": "psz1", - "type": "PWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - } - ], - "StrCmpW": [ - { - "name": "psz1", - "type": "PCWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - } - ], - "StrCmpIW": [ - { - "name": "psz1", - "type": "PCWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - } - ], - "StrCpyW": [ - { - "name": "psz1", - "type": "PWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - } - ], - "StrCpyNW": [ - { - "name": "pszDst", - "type": "PWSTR" - }, - { - "name": "pszSrc", - "type": "PCWSTR" - }, - { - "name": "cchMax", - "type": "int" - } - ], - "StrCatBuffW": [ - { - "name": "pszDest", - "type": "PWSTR" - }, - { - "name": "pszSrc", - "type": "PCWSTR" - }, - { - "name": "cchDestBuffSize", - "type": "int" - } - ], - "StrCatBuffA": [ - { - "name": "pszDest", - "type": "PSTR" - }, - { - "name": "pszSrc", - "type": "PCSTR" - }, - { - "name": "cchDestBuffSize", - "type": "int" - } - ], - "ChrCmpIA": [ - { - "name": "w1", - "type": "WORD" - }, - { - "name": "w2", - "type": "WORD" - } - ], - "ChrCmpIW": [ - { - "name": "w1", - "type": "WCHAR" - }, - { - "name": "w2", - "type": "WCHAR" - } - ], - "wvnsprintfA": [ - { - "name": "pszDest", - "type": "PSTR" - }, - { - "name": "cchDest", - "type": "int" - }, - { - "name": "pszFmt", - "type": "PCSTR" - }, - { - "name": "arglist", - "type": "va_list" - } - ], - "wvnsprintfW": [ - { - "name": "pszDest", - "type": "PWSTR" - }, - { - "name": "cchDest", - "type": "int" - }, - { - "name": "pszFmt", - "type": "PCWSTR" - }, - { - "name": "arglist", - "type": "va_list" - } - ], - "wnsprintfA": [ - { - "name": "pszDest", - "type": "PSTR" - }, - { - "name": "cchDest", - "type": "int" - }, - { - "name": "pszFmt", - "type": "PCSTR" - } - ], - "wnsprintfW": [ - { - "name": "pszDest", - "type": "PWSTR" - }, - { - "name": "cchDest", - "type": "int" - }, - { - "name": "pszFmt", - "type": "PCWSTR" - } - ], - "StrRetToStrA": [ - { - "name": "pstr", - "type": "STRRET" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "ppsz", - "type": "LPSTR" - } - ], - "StrRetToStrW": [ - { - "name": "pstr", - "type": "STRRET" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "ppsz", - "type": "LPWSTR" - } - ], - "StrRetToBufA": [ - { - "name": "pstr", - "type": "STRRET" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "pszBuf", - "type": "LPSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrRetToBufW": [ - { - "name": "pstr", - "type": "STRRET" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "pszBuf", - "type": "LPWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "SHStrDupA": [ - { - "name": "psz", - "type": "LPCSTR" - }, - { - "name": "ppwsz", - "type": "LPWSTR" - } - ], - "SHStrDupW": [ - { - "name": "psz", - "type": "LPCWSTR" - }, - { - "name": "ppwsz", - "type": "LPWSTR" - } - ], - "StrCmpLogicalW": [ - { - "name": "psz1", - "type": "PCWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - } - ], - "StrCatChainW": [ - { - "name": "pszDst", - "type": "PWSTR" - }, - { - "name": "cchDst", - "type": "DWORD" - }, - { - "name": "ichAt", - "type": "DWORD" - }, - { - "name": "pszSrc", - "type": "PCWSTR" - } - ], - "StrRetToBSTR": [ - { - "name": "pstr", - "type": "STRRET" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "pbstr", - "type": "BSTR" - } - ], - "SHLoadIndirectString": [ - { - "name": "pszSource", - "type": "PCWSTR" - }, - { - "name": "pszOutBuf", - "type": "PWSTR" - }, - { - "name": "cchOutBuf", - "type": "UINT" - }, - { - "name": "ppvReserved", - "type": "void" - } - ], - "IsCharSpaceA": [ - { - "name": "wch", - "type": "CHAR" - } - ], - "IsCharSpaceW": [ - { - "name": "wch", - "type": "WCHAR" - } - ], - "StrCmpCA": [ - { - "name": "pszStr1", - "type": "LPCSTR" - }, - { - "name": "pszStr2", - "type": "LPCSTR" - } - ], - "StrCmpCW": [ - { - "name": "pszStr1", - "type": "LPCWSTR" - }, - { - "name": "pszStr2", - "type": "LPCWSTR" - } - ], - "StrCmpICA": [ - { - "name": "pszStr1", - "type": "LPCSTR" - }, - { - "name": "pszStr2", - "type": "LPCSTR" - } - ], - "StrCmpICW": [ - { - "name": "pszStr1", - "type": "LPCWSTR" - }, - { - "name": "pszStr2", - "type": "LPCWSTR" - } - ], - "StrCmpNCA": [ - { - "name": "pszStr1", - "type": "LPCSTR" - }, - { - "name": "pszStr2", - "type": "LPCSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCmpNCW": [ - { - "name": "pszStr1", - "type": "LPCWSTR" - }, - { - "name": "pszStr2", - "type": "LPCWSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCmpNICA": [ - { - "name": "pszStr1", - "type": "LPCSTR" - }, - { - "name": "pszStr2", - "type": "LPCSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCmpNICW": [ - { - "name": "pszStr1", - "type": "LPCWSTR" - }, - { - "name": "pszStr2", - "type": "LPCWSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "IntlStrEqWorkerA": [ - { - "name": "fCaseSens", - "type": "BOOL" - }, - { - "name": "lpString1", - "type": "LPCSTR" - }, - { - "name": "lpString2", - "type": "LPCSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "IntlStrEqWorkerW": [ - { - "name": "fCaseSens", - "type": "BOOL" - }, - { - "name": "lpString1", - "type": "LPCWSTR" - }, - { - "name": "lpString2", - "type": "LPCWSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "PathAddBackslashA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathAddBackslashW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathBuildRootA": [ - { - "name": "pszRoot", - "type": "LPSTR" - }, - { - "name": "iDrive", - "type": "int" - } - ], - "PathBuildRootW": [ - { - "name": "pszRoot", - "type": "LPWSTR" - }, - { - "name": "iDrive", - "type": "int" - } - ], - "PathCombineA": [ - { - "name": "pszDest", - "type": "LPSTR" - }, - { - "name": "pszDir", - "type": "LPCSTR" - }, - { - "name": "pszFile", - "type": "LPCSTR" - } - ], - "PathCombineW": [ - { - "name": "pszDest", - "type": "LPWSTR" - }, - { - "name": "pszDir", - "type": "LPCWSTR" - }, - { - "name": "pszFile", - "type": "LPCWSTR" - } - ], - "PathCompactPathA": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "pszPath", - "type": "LPSTR" - }, - { - "name": "dx", - "type": "UINT" - } - ], - "PathCompactPathW": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "pszPath", - "type": "LPWSTR" - }, - { - "name": "dx", - "type": "UINT" - } - ], - "PathCompactPathExA": [ - { - "name": "pszOut", - "type": "LPSTR" - }, - { - "name": "pszSrc", - "type": "LPCSTR" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathCompactPathExW": [ - { - "name": "pszOut", - "type": "LPWSTR" - }, - { - "name": "pszSrc", - "type": "LPCWSTR" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathCommonPrefixA": [ - { - "name": "pszFile1", - "type": "LPCSTR" - }, - { - "name": "pszFile2", - "type": "LPCSTR" - }, - { - "name": "achPath", - "type": "LPSTR" - } - ], - "PathCommonPrefixW": [ - { - "name": "pszFile1", - "type": "LPCWSTR" - }, - { - "name": "pszFile2", - "type": "LPCWSTR" - }, - { - "name": "achPath", - "type": "LPWSTR" - } - ], - "PathFileExistsA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathFileExistsW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathFindExtensionA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathFindExtensionW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathFindFileNameA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathFindFileNameW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathFindNextComponentA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathFindNextComponentW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathFindOnPathA": [ - { - "name": "pszPath", - "type": "LPSTR" - }, - { - "name": "ppszOtherDirs", - "type": "PZPCSTR" - } - ], - "PathFindOnPathW": [ - { - "name": "pszPath", - "type": "LPWSTR" - }, - { - "name": "ppszOtherDirs", - "type": "PZPCWSTR" - } - ], - "PathFindSuffixArrayA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "apszSuffix", - "type": "LPCSTR" - }, - { - "name": "iArraySize", - "type": "int" - } - ], - "PathFindSuffixArrayW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - }, - { - "name": "apszSuffix", - "type": "LPCWSTR" - }, - { - "name": "iArraySize", - "type": "int" - } - ], - "PathGetArgsA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathGetArgsW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsLFNFileSpecA": [ - { - "name": "pszName", - "type": "LPCSTR" - } - ], - "PathIsLFNFileSpecW": [ - { - "name": "pszName", - "type": "LPCWSTR" - } - ], - "PathGetCharTypeA": [ - { - "name": "ch", - "type": "UCHAR" - } - ], - "PathGetCharTypeW": [ - { - "name": "ch", - "type": "WCHAR" - } - ], - "PathGetDriveNumberA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathGetDriveNumberW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsDirectoryA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsDirectoryW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsDirectoryEmptyA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsDirectoryEmptyW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsFileSpecA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsFileSpecW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsPrefixA": [ - { - "name": "pszPrefix", - "type": "LPCSTR" - }, - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsPrefixW": [ - { - "name": "pszPrefix", - "type": "LPCWSTR" - }, - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsRelativeA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsRelativeW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsRootA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsRootW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsSameRootA": [ - { - "name": "pszPath1", - "type": "LPCSTR" - }, - { - "name": "pszPath2", - "type": "LPCSTR" - } - ], - "PathIsSameRootW": [ - { - "name": "pszPath1", - "type": "LPCWSTR" - }, - { - "name": "pszPath2", - "type": "LPCWSTR" - } - ], - "PathIsUNCA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsUNCW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsNetworkPathA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsNetworkPathW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsUNCServerA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsUNCServerW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsUNCServerShareA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsUNCServerShareW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsContentTypeA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "pszContentType", - "type": "LPCSTR" - } - ], - "PathIsContentTypeW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - }, - { - "name": "pszContentType", - "type": "LPCWSTR" - } - ], - "PathIsURLA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsURLW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathMakePrettyA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathMakePrettyW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathMatchSpecA": [ - { - "name": "pszFile", - "type": "LPCSTR" - }, - { - "name": "pszSpec", - "type": "LPCSTR" - } - ], - "PathMatchSpecW": [ - { - "name": "pszFile", - "type": "LPCWSTR" - }, - { - "name": "pszSpec", - "type": "LPCWSTR" - } - ], - "PathMatchSpecExA": [ - { - "name": "pszFile", - "type": "LPCSTR" - }, - { - "name": "pszSpec", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathMatchSpecExW": [ - { - "name": "pszFile", - "type": "LPCWSTR" - }, - { - "name": "pszSpec", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathParseIconLocationA": [ - { - "name": "pszIconFile", - "type": "LPSTR" - } - ], - "PathParseIconLocationW": [ - { - "name": "pszIconFile", - "type": "LPWSTR" - } - ], - "PathQuoteSpacesA": [ - { - "name": "lpsz", - "type": "LPSTR" - } - ], - "PathQuoteSpacesW": [ - { - "name": "lpsz", - "type": "LPWSTR" - } - ], - "PathRelativePathToA": [ - { - "name": "pszPath", - "type": "LPSTR" - }, - { - "name": "pszFrom", - "type": "LPCSTR" - }, - { - "name": "dwAttrFrom", - "type": "DWORD" - }, - { - "name": "pszTo", - "type": "LPCSTR" - }, - { - "name": "dwAttrTo", - "type": "DWORD" - } - ], - "PathRelativePathToW": [ - { - "name": "pszPath", - "type": "LPWSTR" - }, - { - "name": "pszFrom", - "type": "LPCWSTR" - }, - { - "name": "dwAttrFrom", - "type": "DWORD" - }, - { - "name": "pszTo", - "type": "LPCWSTR" - }, - { - "name": "dwAttrTo", - "type": "DWORD" - } - ], - "PathRemoveArgsA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathRemoveArgsW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathRemoveBackslashA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathRemoveBackslashW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathRemoveBlanksA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathRemoveBlanksW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathRemoveExtensionA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathRemoveExtensionW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathRemoveFileSpecA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathRemoveFileSpecW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathRenameExtensionA": [ - { - "name": "pszPath", - "type": "LPSTR" - }, - { - "name": "pszExt", - "type": "LPCSTR" - } - ], - "PathRenameExtensionW": [ - { - "name": "pszPath", - "type": "LPWSTR" - }, - { - "name": "pszExt", - "type": "LPCWSTR" - } - ], - "PathSearchAndQualifyA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "pszBuf", - "type": "LPSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "PathSearchAndQualifyW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - }, - { - "name": "pszBuf", - "type": "LPWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "PathSetDlgItemPathA": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "id", - "type": "int" - }, - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathSetDlgItemPathW": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "id", - "type": "int" - }, - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathSkipRootA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathSkipRootW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathStripPathA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathStripPathW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathStripToRootA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathStripToRootW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathUnquoteSpacesA": [ - { - "name": "lpsz", - "type": "LPSTR" - } - ], - "PathUnquoteSpacesW": [ - { - "name": "lpsz", - "type": "LPWSTR" - } - ], - "PathMakeSystemFolderA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathMakeSystemFolderW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathUnmakeSystemFolderA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathUnmakeSystemFolderW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsSystemFolderA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "dwAttrb", - "type": "DWORD" - } - ], - "PathIsSystemFolderW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - }, - { - "name": "dwAttrb", - "type": "DWORD" - } - ], - "PathUndecorateA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathUndecorateW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathUnExpandEnvStringsA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "pszBuf", - "type": "LPSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "PathUnExpandEnvStringsW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - }, - { - "name": "pszBuf", - "type": "LPWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "UrlCompareA": [ - { - "name": "psz1", - "type": "PCSTR" - }, - { - "name": "psz2", - "type": "PCSTR" - }, - { - "name": "fIgnoreSlash", - "type": "BOOL" - } - ], - "UrlCompareW": [ - { - "name": "psz1", - "type": "PCWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - }, - { - "name": "fIgnoreSlash", - "type": "BOOL" - } - ], - "UrlCombineA": [ - { - "name": "pszBase", - "type": "PCSTR" - }, - { - "name": "pszRelative", - "type": "PCSTR" - }, - { - "name": "pszCombined", - "type": "PSTR" - }, - { - "name": "pcchCombined", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlCombineW": [ - { - "name": "pszBase", - "type": "PCWSTR" - }, - { - "name": "pszRelative", - "type": "PCWSTR" - }, - { - "name": "pszCombined", - "type": "PWSTR" - }, - { - "name": "pcchCombined", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlCanonicalizeA": [ - { - "name": "pszUrl", - "type": "PCSTR" - }, - { - "name": "pszCanonicalized", - "type": "PSTR" - }, - { - "name": "pcchCanonicalized", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlCanonicalizeW": [ - { - "name": "pszUrl", - "type": "PCWSTR" - }, - { - "name": "pszCanonicalized", - "type": "PWSTR" - }, - { - "name": "pcchCanonicalized", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlIsOpaqueA": [ - { - "name": "pszURL", - "type": "PCSTR" - } - ], - "UrlIsOpaqueW": [ - { - "name": "pszURL", - "type": "PCWSTR" - } - ], - "UrlIsNoHistoryA": [ - { - "name": "pszURL", - "type": "PCSTR" - } - ], - "UrlIsNoHistoryW": [ - { - "name": "pszURL", - "type": "PCWSTR" - } - ], - "UrlIsA": [ - { - "name": "pszUrl", - "type": "PCSTR" - }, - { - "name": "UrlIs", - "type": "URLIS" - } - ], - "UrlIsW": [ - { - "name": "pszUrl", - "type": "PCWSTR" - }, - { - "name": "UrlIs", - "type": "URLIS" - } - ], - "UrlGetLocationA": [ - { - "name": "pszURL", - "type": "PCSTR" - } - ], - "UrlGetLocationW": [ - { - "name": "pszURL", - "type": "PCWSTR" - } - ], - "UrlUnescapeA": [ - { - "name": "pszUrl", - "type": "PSTR" - }, - { - "name": "pszUnescaped", - "type": "PSTR" - }, - { - "name": "pcchUnescaped", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlUnescapeW": [ - { - "name": "pszUrl", - "type": "PWSTR" - }, - { - "name": "pszUnescaped", - "type": "PWSTR" - }, - { - "name": "pcchUnescaped", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlEscapeA": [ - { - "name": "pszUrl", - "type": "PCSTR" - }, - { - "name": "pszEscaped", - "type": "PSTR" - }, - { - "name": "pcchEscaped", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlEscapeW": [ - { - "name": "pszUrl", - "type": "PCWSTR" - }, - { - "name": "pszEscaped", - "type": "PWSTR" - }, - { - "name": "pcchEscaped", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlCreateFromPathA": [ - { - "name": "pszPath", - "type": "PCSTR" - }, - { - "name": "pszUrl", - "type": "PSTR" - }, - { - "name": "pcchUrl", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlCreateFromPathW": [ - { - "name": "pszPath", - "type": "PCWSTR" - }, - { - "name": "pszUrl", - "type": "PWSTR" - }, - { - "name": "pcchUrl", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathCreateFromUrlA": [ - { - "name": "pszUrl", - "type": "PCSTR" - }, - { - "name": "pszPath", - "type": "PSTR" - }, - { - "name": "pcchPath", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathCreateFromUrlW": [ - { - "name": "pszUrl", - "type": "PCWSTR" - }, - { - "name": "pszPath", - "type": "PWSTR" - }, - { - "name": "pcchPath", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathCreateFromUrlAlloc": [ - { - "name": "pszIn", - "type": "PCWSTR" - }, - { - "name": "ppszOut", - "type": "PWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlHashA": [ - { - "name": "pszUrl", - "type": "PCSTR" - }, - { - "name": "pbHash", - "type": "BYTE" - }, - { - "name": "cbHash", - "type": "DWORD" - } - ], - "UrlHashW": [ - { - "name": "pszUrl", - "type": "PCWSTR" - }, - { - "name": "pbHash", - "type": "BYTE" - }, - { - "name": "cbHash", - "type": "DWORD" - } - ], - "UrlGetPartW": [ - { - "name": "pszIn", - "type": "PCWSTR" - }, - { - "name": "pszOut", - "type": "PWSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - }, - { - "name": "dwPart", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlGetPartA": [ - { - "name": "pszIn", - "type": "PCSTR" - }, - { - "name": "pszOut", - "type": "PSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - }, - { - "name": "dwPart", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlApplySchemeA": [ - { - "name": "pszIn", - "type": "PCSTR" - }, - { - "name": "pszOut", - "type": "PSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlApplySchemeW": [ - { - "name": "pszIn", - "type": "PCWSTR" - }, - { - "name": "pszOut", - "type": "PWSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "HashData": [ - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "pbHash", - "type": "BYTE" - }, - { - "name": "cbHash", - "type": "DWORD" - } - ], - "UrlFixupW": [ - { - "name": "pcszUrl", - "type": "PCWSTR" - }, - { - "name": "pszTranslatedUrl", - "type": "PWSTR" - }, - { - "name": "cchMax", - "type": "DWORD" - } - ], - "SHDeleteEmptyKeyA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - } - ], - "SHDeleteEmptyKeyW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - } - ], - "SHDeleteKeyA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - } - ], - "SHDeleteKeyW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - } - ], - "SHRegDuplicateHKey": [ - { - "name": "hkey", - "type": "HKEY" - } - ], - "SHDeleteValueA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - } - ], - "SHDeleteValueW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - } - ], - "SHGetValueA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHGetValueW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHSetValueA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "LPCVOID" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "SHSetValueW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "LPCVOID" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "SHRegGetValueA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "srrfFlags", - "type": "SRRF" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHRegGetValueW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "srrfFlags", - "type": "SRRF" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHRegSetValue": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "srrfFlags", - "type": "SRRF" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "LPCVOID" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "SHRegGetValueFromHKCUHKLM": [ - { - "name": "pwszKey", - "type": "PCWSTR" - }, - { - "name": "pwszValue", - "type": "PCWSTR" - }, - { - "name": "srrfFlags", - "type": "SRRF" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHRegGetBoolValueFromHKCUHKLM": [ - { - "name": "pszKey", - "type": "PCWSTR" - }, - { - "name": "pszValue", - "type": "PCWSTR" - }, - { - "name": "fDefault", - "type": "BOOL" - } - ], - "SHQueryValueExA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHQueryValueExW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHEnumKeyExA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszName", - "type": "LPSTR" - }, - { - "name": "pcchName", - "type": "LPDWORD" - } - ], - "SHEnumKeyExW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszName", - "type": "LPWSTR" - }, - { - "name": "pcchName", - "type": "LPDWORD" - } - ], - "SHEnumValueA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszValueName", - "type": "PSTR" - }, - { - "name": "pcchValueName", - "type": "LPDWORD" - }, - { - "name": "pdwType", - "type": "LPDWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "LPDWORD" - } - ], - "SHEnumValueW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszValueName", - "type": "PWSTR" - }, - { - "name": "pcchValueName", - "type": "LPDWORD" - }, - { - "name": "pdwType", - "type": "LPDWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "LPDWORD" - } - ], - "SHQueryInfoKeyA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pcSubKeys", - "type": "LPDWORD" - }, - { - "name": "pcchMaxSubKeyLen", - "type": "LPDWORD" - }, - { - "name": "pcValues", - "type": "LPDWORD" - }, - { - "name": "pcchMaxValueNameLen", - "type": "LPDWORD" - } - ], - "SHQueryInfoKeyW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pcSubKeys", - "type": "LPDWORD" - }, - { - "name": "pcchMaxSubKeyLen", - "type": "LPDWORD" - }, - { - "name": "pcValues", - "type": "LPDWORD" - }, - { - "name": "pcchMaxValueNameLen", - "type": "LPDWORD" - } - ], - "SHCopyKeyA": [ - { - "name": "hkeySrc", - "type": "HKEY" - }, - { - "name": "pszSrcSubKey", - "type": "LPCSTR" - }, - { - "name": "hkeyDest", - "type": "HKEY" - }, - { - "name": "fReserved", - "type": "DWORD" - } - ], - "SHCopyKeyW": [ - { - "name": "hkeySrc", - "type": "HKEY" - }, - { - "name": "pszSrcSubKey", - "type": "LPCWSTR" - }, - { - "name": "hkeyDest", - "type": "HKEY" - }, - { - "name": "fReserved", - "type": "DWORD" - } - ], - "SHRegGetPathA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "pcszSubKey", - "type": "LPCSTR" - }, - { - "name": "pcszValue", - "type": "LPCSTR" - }, - { - "name": "pszPath", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegGetPathW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "pcszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pcszValue", - "type": "LPCWSTR" - }, - { - "name": "pszPath", - "type": "LPWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegSetPathA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "pcszSubKey", - "type": "LPCSTR" - }, - { - "name": "pcszValue", - "type": "LPCSTR" - }, - { - "name": "pcszPath", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegSetPathW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "pcszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pcszValue", - "type": "LPCWSTR" - }, - { - "name": "pcszPath", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegCreateUSKeyA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "hRelativeUSKey", - "type": "HUSKEY" - }, - { - "name": "phNewUSKey", - "type": "PHUSKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegCreateUSKeyW": [ - { - "name": "pwzPath", - "type": "LPCWSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "hRelativeUSKey", - "type": "HUSKEY" - }, - { - "name": "phNewUSKey", - "type": "PHUSKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegOpenUSKeyA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "hRelativeUSKey", - "type": "HUSKEY" - }, - { - "name": "phNewUSKey", - "type": "PHUSKEY" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - } - ], - "SHRegOpenUSKeyW": [ - { - "name": "pwzPath", - "type": "LPCWSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "hRelativeUSKey", - "type": "HUSKEY" - }, - { - "name": "phNewUSKey", - "type": "PHUSKEY" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - } - ], - "SHRegQueryUSValueA": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - }, - { - "name": "pvDefaultData", - "type": "void" - }, - { - "name": "dwDefaultDataSize", - "type": "DWORD" - } - ], - "SHRegQueryUSValueW": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - }, - { - "name": "pvDefaultData", - "type": "void" - }, - { - "name": "dwDefaultDataSize", - "type": "DWORD" - } - ], - "SHRegWriteUSValueA": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegWriteUSValueW": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pwzValue", - "type": "LPCWSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegDeleteUSValueA": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "delRegFlags", - "type": "SHREGDEL_FLAGS" - } - ], - "SHRegDeleteUSValueW": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pwzValue", - "type": "LPCWSTR" - }, - { - "name": "delRegFlags", - "type": "SHREGDEL_FLAGS" - } - ], - "SHRegDeleteEmptyUSKeyW": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pwzSubKey", - "type": "LPCWSTR" - }, - { - "name": "delRegFlags", - "type": "SHREGDEL_FLAGS" - } - ], - "SHRegDeleteEmptyUSKeyA": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "delRegFlags", - "type": "SHREGDEL_FLAGS" - } - ], - "SHRegEnumUSKeyA": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszName", - "type": "LPSTR" - }, - { - "name": "pcchName", - "type": "LPDWORD" - }, - { - "name": "enumRegFlags", - "type": "SHREGENUM_FLAGS" - } - ], - "SHRegEnumUSKeyW": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pwzName", - "type": "LPWSTR" - }, - { - "name": "pcchName", - "type": "LPDWORD" - }, - { - "name": "enumRegFlags", - "type": "SHREGENUM_FLAGS" - } - ], - "SHRegEnumUSValueA": [ - { - "name": "hUSkey", - "type": "HUSKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszValueName", - "type": "LPSTR" - }, - { - "name": "pcchValueName", - "type": "LPDWORD" - }, - { - "name": "pdwType", - "type": "LPDWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "LPDWORD" - }, - { - "name": "enumRegFlags", - "type": "SHREGENUM_FLAGS" - } - ], - "SHRegEnumUSValueW": [ - { - "name": "hUSkey", - "type": "HUSKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszValueName", - "type": "LPWSTR" - }, - { - "name": "pcchValueName", - "type": "LPDWORD" - }, - { - "name": "pdwType", - "type": "LPDWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "LPDWORD" - }, - { - "name": "enumRegFlags", - "type": "SHREGENUM_FLAGS" - } - ], - "SHRegQueryInfoUSKeyA": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pcSubKeys", - "type": "LPDWORD" - }, - { - "name": "pcchMaxSubKeyLen", - "type": "LPDWORD" - }, - { - "name": "pcValues", - "type": "LPDWORD" - }, - { - "name": "pcchMaxValueNameLen", - "type": "LPDWORD" - }, - { - "name": "enumRegFlags", - "type": "SHREGENUM_FLAGS" - } - ], - "SHRegQueryInfoUSKeyW": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pcSubKeys", - "type": "LPDWORD" - }, - { - "name": "pcchMaxSubKeyLen", - "type": "LPDWORD" - }, - { - "name": "pcValues", - "type": "LPDWORD" - }, - { - "name": "pcchMaxValueNameLen", - "type": "LPDWORD" - }, - { - "name": "enumRegFlags", - "type": "SHREGENUM_FLAGS" - } - ], - "SHRegCloseUSKey": [ - { - "name": "hUSKey", - "type": "HUSKEY" - } - ], - "SHRegGetUSValueA": [ - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - }, - { - "name": "pvDefaultData", - "type": "void" - }, - { - "name": "dwDefaultDataSize", - "type": "DWORD" - } - ], - "SHRegGetUSValueW": [ - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - }, - { - "name": "pvDefaultData", - "type": "void" - }, - { - "name": "dwDefaultDataSize", - "type": "DWORD" - } - ], - "SHRegSetUSValueA": [ - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegSetUSValueW": [ - { - "name": "pwzSubKey", - "type": "LPCWSTR" - }, - { - "name": "pwzValue", - "type": "LPCWSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegGetIntW": [ - { - "name": "hk", - "type": "HKEY" - }, - { - "name": "pwzKey", - "type": "PCWSTR" - }, - { - "name": "iDefault", - "type": "int" - } - ], - "SHRegGetBoolUSValueA": [ - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - }, - { - "name": "fDefault", - "type": "BOOL" - } - ], - "SHRegGetBoolUSValueW": [ - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - }, - { - "name": "fDefault", - "type": "BOOL" - } - ], - "AssocCreate": [ - { - "name": "clsid", - "type": "CLSID" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHGetAssocKeys": [ - { - "name": "pqa", - "type": "IQueryAssociations" - }, - { - "name": "rgKeys", - "type": "HKEY" - }, - { - "name": "cKeys", - "type": "DWORD" - } - ], - "AssocQueryStringA": [ - { - "name": "flags", - "type": "ASSOCF" - }, - { - "name": "str", - "type": "ASSOCSTR" - }, - { - "name": "pszAssoc", - "type": "LPCSTR" - }, - { - "name": "pszExtra", - "type": "LPCSTR" - }, - { - "name": "pszOut", - "type": "LPSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - } - ], - "AssocQueryStringW": [ - { - "name": "flags", - "type": "ASSOCF" - }, - { - "name": "str", - "type": "ASSOCSTR" - }, - { - "name": "pszAssoc", - "type": "LPCWSTR" - }, - { - "name": "pszExtra", - "type": "LPCWSTR" - }, - { - "name": "pszOut", - "type": "LPWSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - } - ], - "AssocQueryStringByKeyA": [ - { - "name": "flags", - "type": "ASSOCF" - }, - { - "name": "str", - "type": "ASSOCSTR" - }, - { - "name": "hkAssoc", - "type": "HKEY" - }, - { - "name": "pszExtra", - "type": "LPCSTR" - }, - { - "name": "pszOut", - "type": "LPSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - } - ], - "AssocQueryStringByKeyW": [ - { - "name": "flags", - "type": "ASSOCF" - }, - { - "name": "str", - "type": "ASSOCSTR" - }, - { - "name": "hkAssoc", - "type": "HKEY" - }, - { - "name": "pszExtra", - "type": "LPCWSTR" - }, - { - "name": "pszOut", - "type": "LPWSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - } - ], - "AssocQueryKeyA": [ - { - "name": "flags", - "type": "ASSOCF" - }, - { - "name": "key", - "type": "ASSOCKEY" - }, - { - "name": "pszAssoc", - "type": "LPCSTR" - }, - { - "name": "pszExtra", - "type": "LPCSTR" - }, - { - "name": "phkeyOut", - "type": "HKEY" - } - ], - "AssocQueryKeyW": [ - { - "name": "flags", - "type": "ASSOCF" - }, - { - "name": "key", - "type": "ASSOCKEY" - }, - { - "name": "pszAssoc", - "type": "LPCWSTR" - }, - { - "name": "pszExtra", - "type": "LPCWSTR" - }, - { - "name": "phkeyOut", - "type": "HKEY" - } - ], - "AssocIsDangerous": [ - { - "name": "pszAssoc", - "type": "PCWSTR" - } - ], - "AssocGetPerceivedType": [ - { - "name": "pszExt", - "type": "PCWSTR" - }, - { - "name": "ptype", - "type": "PERCEIVED" - }, - { - "name": "pflag", - "type": "PERCEIVEDFLAG" - }, - { - "name": "ppszType", - "type": "PWSTR" - } - ], - "SHCreateStreamOnFileA": [ - { - "name": "pszFile", - "type": "LPCSTR" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "ppstm", - "type": "IStream" - } - ], - "SHCreateStreamOnFileW": [ - { - "name": "pszFile", - "type": "LPCWSTR" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "ppstm", - "type": "IStream" - } - ], - "SHCreateStreamOnFileEx": [ - { - "name": "pszFile", - "type": "LPCWSTR" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "dwAttributes", - "type": "DWORD" - }, - { - "name": "fCreate", - "type": "BOOL" - }, - { - "name": "pstmTemplate", - "type": "IStream" - }, - { - "name": "ppstm", - "type": "IStream" - } - ], - "GetAcceptLanguagesA": [ - { - "name": "pszLanguages", - "type": "LPSTR" - }, - { - "name": "pcchLanguages", - "type": "DWORD" - } - ], - "GetAcceptLanguagesW": [ - { - "name": "pszLanguages", - "type": "LPWSTR" - }, - { - "name": "pcchLanguages", - "type": "DWORD" - } - ], - "IUnknown_Set": [ - { - "name": "ppunk", - "type": "IUnknown" - }, - { - "name": "punk", - "type": "IUnknown" - } - ], - "IUnknown_AtomicRelease": [ - { - "name": "ppunk", - "type": "void" - } - ], - "IUnknown_GetWindow": [ - { - "name": "punk", - "type": "IUnknown" - }, - { - "name": "phwnd", - "type": "HWND" - } - ], - "IUnknown_SetSite": [ - { - "name": "punk", - "type": "IUnknown" - }, - { - "name": "punkSite", - "type": "IUnknown" - } - ], - "IUnknown_GetSite": [ - { - "name": "punk", - "type": "IUnknown" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "IUnknown_QueryService": [ - { - "name": "punk", - "type": "IUnknown" - }, - { - "name": "guidService", - "type": "GUID" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppvOut", - "type": "void" - } - ], - "IStream_Read": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "pv", - "type": "void" - }, - { - "name": "cb", - "type": "ULONG" - } - ], - "IStream_Write": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "pv", - "type": "void" - }, - { - "name": "cb", - "type": "ULONG" - } - ], - "IStream_Reset": [ - { - "name": "pstm", - "type": "IStream" - } - ], - "IStream_Size": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "pui", - "type": "ULARGE_INTEGER" - } - ], - "ConnectToConnectionPoint": [ - { - "name": "punk", - "type": "IUnknown" - }, - { - "name": "riidEvent", - "type": "IID" - }, - { - "name": "fConnect", - "type": "BOOL" - }, - { - "name": "punkTarget", - "type": "IUnknown" - }, - { - "name": "pdwCookie", - "type": "DWORD" - }, - { - "name": "ppcpOut", - "type": "IConnectionPoint" - } - ], - "IStream_ReadPidl": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "ppidlOut", - "type": "LPITEMIDLIST" - } - ], - "IStream_WritePidl": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "pidlWrite", - "type": "LPCITEMIDLIST" - } - ], - "IStream_ReadStr": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "ppsz", - "type": "PWSTR" - } - ], - "IStream_WriteStr": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "psz", - "type": "PCWSTR" - } - ], - "IStream_Copy": [ - { - "name": "pstmFrom", - "type": "IStream" - }, - { - "name": "pstmTo", - "type": "IStream" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "SHGetViewStatePropertyBag": [ - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "pszBagName", - "type": "PCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHFormatDateTimeA": [ - { - "name": "pft", - "type": "FILETIME" - }, - { - "name": "pdwFlags", - "type": "DWORD" - }, - { - "name": "pszBuf", - "type": "LPSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "SHFormatDateTimeW": [ - { - "name": "pft", - "type": "FILETIME" - }, - { - "name": "pdwFlags", - "type": "DWORD" - }, - { - "name": "pszBuf", - "type": "LPWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "SHAnsiToUnicode": [ - { - "name": "pszSrc", - "type": "PCSTR" - }, - { - "name": "pwszDst", - "type": "PWSTR" - }, - { - "name": "cwchBuf", - "type": "int" - } - ], - "SHAnsiToAnsi": [ - { - "name": "pszSrc", - "type": "PCSTR" - }, - { - "name": "pszDst", - "type": "PSTR" - }, - { - "name": "cchBuf", - "type": "int" - } - ], - "SHUnicodeToAnsi": [ - { - "name": "pwszSrc", - "type": "PCWSTR" - }, - { - "name": "pszDst", - "type": "PSTR" - }, - { - "name": "cchBuf", - "type": "int" - } - ], - "SHUnicodeToUnicode": [ - { - "name": "pwzSrc", - "type": "PCWSTR" - }, - { - "name": "pwzDst", - "type": "PWSTR" - }, - { - "name": "cwchBuf", - "type": "int" - } - ], - "SHMessageBoxCheckA": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pszText", - "type": "LPCSTR" - }, - { - "name": "pszCaption", - "type": "LPCSTR" - }, - { - "name": "uType", - "type": "UINT" - }, - { - "name": "iDefault", - "type": "int" - }, - { - "name": "pszRegVal", - "type": "LPCSTR" - } - ], - "SHMessageBoxCheckW": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pszText", - "type": "LPCWSTR" - }, - { - "name": "pszCaption", - "type": "LPCWSTR" - }, - { - "name": "uType", - "type": "UINT" - }, - { - "name": "iDefault", - "type": "int" - }, - { - "name": "pszRegVal", - "type": "LPCWSTR" - } - ], - "SHSendMessageBroadcastA": [ - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "SHSendMessageBroadcastW": [ - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "SHStripMneumonicA": [ - { - "name": "pszMenu", - "type": "LPSTR" - } - ], - "SHStripMneumonicW": [ - { - "name": "pszMenu", - "type": "LPWSTR" - } - ], - "IsOS": [ - { - "name": "dwOS", - "type": "DWORD" - } - ], - "SHGlobalCounterGetValue": [ - { - "name": "id", - "type": "SHGLOBALCOUNTER" - } - ], - "SHGlobalCounterIncrement": [ - { - "name": "id", - "type": "SHGLOBALCOUNTER" - } - ], - "SHGlobalCounterDecrement": [ - { - "name": "id", - "type": "SHGLOBALCOUNTER" - } - ], - "SHAllocShared": [ - { - "name": "pvData", - "type": "void" - }, - { - "name": "dwSize", - "type": "DWORD" - }, - { - "name": "dwProcessId", - "type": "DWORD" - } - ], - "SHFreeShared": [ - { - "name": "hData", - "type": "HANDLE" - }, - { - "name": "dwProcessId", - "type": "DWORD" - } - ], - "SHUnlockShared": [ - { - "name": "pvData", - "type": "void" - } - ], - "WhichPlatform": [ - { - "name": "VOID", - "type": "void" - } - ], - "QISearch": [ - { - "name": "that", - "type": "void" - }, - { - "name": "pqit", - "type": "LPCQITAB" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHIsLowMemoryMachine": [ - { - "name": "dwType", - "type": "DWORD" - } - ], - "GetMenuPosFromID": [ - { - "name": "hmenu", - "type": "HMENU" - }, - { - "name": "id", - "type": "UINT" - } - ], - "SHGetInverseCMAP": [ - { - "name": "pbMap", - "type": "BYTE" - }, - { - "name": "cbMap", - "type": "ULONG" - } - ], - "SHAutoComplete": [ - { - "name": "hwndEdit", - "type": "HWND" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHCreateThreadRef": [ - { - "name": "pcRef", - "type": "LONG" - }, - { - "name": "ppunk", - "type": "IUnknown" - } - ], - "SHSetThreadRef": [ - { - "name": "punk", - "type": "IUnknown" - } - ], - "SHGetThreadRef": [ - { - "name": "ppunk", - "type": "IUnknown" - } - ], - "SHSkipJunction": [ - { - "name": "pbc", - "type": "IBindCtx" - }, - { - "name": "pclsid", - "type": "CLSID" - } - ], - "SHCreateThread": [ - { - "name": "pfnThreadProc", - "type": "LPTHREAD_START_ROUTINE" - }, - { - "name": "pData", - "type": "void" - }, - { - "name": "flags", - "type": "SHCT_FLAGS" - }, - { - "name": "pfnCallback", - "type": "LPTHREAD_START_ROUTINE" - } - ], - "SHCreateThreadWithHandle": [ - { - "name": "pfnThreadProc", - "type": "LPTHREAD_START_ROUTINE" - }, - { - "name": "pData", - "type": "void" - }, - { - "name": "flags", - "type": "SHCT_FLAGS" - }, - { - "name": "pfnCallback", - "type": "LPTHREAD_START_ROUTINE" - }, - { - "name": "pHandle", - "type": "HANDLE" - } - ], - "SetProcessReference": [ - { - "name": "punk", - "type": "IUnknown" - } - ], - "GetProcessReference": [ - { - "name": "punk", - "type": "IUnknown" - } - ], - "SHReleaseThreadRef": [ - { - "name": "VOID", - "type": "void" - } - ], - "SHCreateShellPalette": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "ColorRGBToHLS": [ - { - "name": "clrRGB", - "type": "COLORREF" - }, - { - "name": "pwHue", - "type": "WORD" - }, - { - "name": "pwLuminance", - "type": "WORD" - }, - { - "name": "pwSaturation", - "type": "WORD" - } - ], - "ColorHLSToRGB": [ - { - "name": "wHue", - "type": "WORD" - }, - { - "name": "wLuminance", - "type": "WORD" - }, - { - "name": "wSaturation", - "type": "WORD" - } - ], - "ColorAdjustLuma": [ - { - "name": "clrRGB", - "type": "COLORREF" - }, - { - "name": "n", - "type": "int" - }, - { - "name": "fScale", - "type": "BOOL" - } - ], - "DllInstall": [ - { - "name": "bInstall", - "type": "BOOL" - }, - { - "name": "pszCmdLine", - "type": "PCWSTR" - } - ], - "IsInternetESCEnabled": [ - { - "name": "VOID", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Slc.json b/qiling/extensions/windows_sdk/Slc.json deleted file mode 100644 index 48dd28d3f..000000000 --- a/qiling/extensions/windows_sdk/Slc.json +++ /dev/null @@ -1,956 +0,0 @@ -{ - "SLOpen": [ - { - "name": "phSLC", - "type": "HSLC" - } - ], - "SLClose": [ - { - "name": "hSLC", - "type": "HSLC" - } - ], - "SLInstallProofOfPurchase": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszPKeyAlgorithm", - "type": "PCWSTR" - }, - { - "name": "pwszPKeyString", - "type": "PCWSTR" - }, - { - "name": "cbPKeySpecificData", - "type": "UINT" - }, - { - "name": "pbPKeySpecificData", - "type": "PBYTE" - }, - { - "name": "pPkeyId", - "type": "SLID" - } - ], - "SLInstallProofOfPurchaseEx": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszPKeyAlgorithm", - "type": "PCWSTR" - }, - { - "name": "pwszPKeyString", - "type": "PCWSTR" - }, - { - "name": "cbPKeySpecificData", - "type": "UINT" - }, - { - "name": "pbPKeySpecificData", - "type": "PBYTE" - }, - { - "name": "pPkeyId", - "type": "SLID" - } - ], - "SLUninstallProofOfPurchase": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pPKeyId", - "type": "SLID" - } - ], - "SLInstallLicense": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "cbLicenseBlob", - "type": "UINT" - }, - { - "name": "pbLicenseBlob", - "type": "BYTE" - }, - { - "name": "pLicenseFileId", - "type": "SLID" - } - ], - "SLUninstallLicense": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pLicenseFileId", - "type": "SLID" - } - ], - "SLConsumeRight": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszRightName", - "type": "PCWSTR" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "SLGetProductSkuInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetPKeyInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pPKeyId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetLicenseInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pSLLicenseId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetLicensingStatusInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pAppID", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszRightName", - "type": "PCWSTR" - }, - { - "name": "pnStatusCount", - "type": "UINT" - }, - { - "name": "ppLicensingStatus", - "type": "SL_LICENSING_STATUS" - } - ], - "SLGetPolicyInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetPolicyInformationDWORD": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "pdwValue", - "type": "DWORD" - } - ], - "SLGetServiceInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetApplicationInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLActivateProduct": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "cbAppSpecificData", - "type": "UINT" - }, - { - "name": "pvAppSpecificData", - "type": "PVOID" - }, - { - "name": "pActivationInfo", - "type": "SL_ACTIVATION_INFO_HEADER" - }, - { - "name": "pwszProxyServer", - "type": "PCWSTR" - }, - { - "name": "wProxyPort", - "type": "WORD" - } - ], - "SLGetServerStatus": [ - { - "name": "pwszServerURL", - "type": "PCWSTR" - }, - { - "name": "pwszAcquisitionType", - "type": "PCWSTR" - }, - { - "name": "pwszProxyServer", - "type": "PCWSTR" - }, - { - "name": "wProxyPort", - "type": "WORD" - }, - { - "name": "phrStatus", - "type": "HRESULT" - } - ], - "SLReArm": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SLGenerateOfflineInstallationId": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "ppwszInstallationId", - "type": "PWSTR" - } - ], - "SLGenerateOfflineInstallationIdEx": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pActivationInfo", - "type": "SL_ACTIVATION_INFO_HEADER" - }, - { - "name": "ppwszInstallationId", - "type": "PWSTR" - } - ], - "SLDepositOfflineConfirmationId": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszInstallationId", - "type": "PCWSTR" - }, - { - "name": "pwszConfirmationId", - "type": "PCWSTR" - } - ], - "SLDepositOfflineConfirmationIdEx": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pActivationInfo", - "type": "SL_ACTIVATION_INFO_HEADER" - }, - { - "name": "pwszInstallationId", - "type": "PCWSTR" - }, - { - "name": "pwszConfirmationId", - "type": "PCWSTR" - } - ], - "SLGetPKeyId": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszPKeyAlgorithm", - "type": "PCWSTR" - }, - { - "name": "pwszPKeyString", - "type": "PCWSTR" - }, - { - "name": "cbPKeySpecificData", - "type": "UINT" - }, - { - "name": "pbPKeySpecificData", - "type": "BYTE" - }, - { - "name": "pPKeyId", - "type": "SLID" - } - ], - "SLGetInstalledProductKeyIds": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pnProductKeyIds", - "type": "UINT" - }, - { - "name": "ppProductKeyIds", - "type": "SLID" - } - ], - "SLSetCurrentProductKey": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pProductKeyId", - "type": "SLID" - } - ], - "SLGetSLIDList": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "eQueryIdType", - "type": "SLIDTYPE" - }, - { - "name": "pQueryId", - "type": "SLID" - }, - { - "name": "eReturnIdType", - "type": "SLIDTYPE" - }, - { - "name": "pnReturnIds", - "type": "UINT" - }, - { - "name": "ppReturnIds", - "type": "SLID" - } - ], - "SLGetLicenseFileId": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "cbLicenseBlob", - "type": "UINT" - }, - { - "name": "pbLicenseBlob", - "type": "BYTE" - }, - { - "name": "pLicenseFileId", - "type": "SLID" - } - ], - "SLGetLicense": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pLicenseFileId", - "type": "SLID" - }, - { - "name": "pcbLicenseFile", - "type": "UINT" - }, - { - "name": "ppbLicenseFile", - "type": "PBYTE" - } - ], - "SLFireEvent": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszEventId", - "type": "PCWSTR" - }, - { - "name": "pApplicationId", - "type": "SLID" - } - ], - "SLRegisterEvent": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszEventId", - "type": "PCWSTR" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "hEvent", - "type": "HANDLE" - } - ], - "SLUnregisterEvent": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszEventId", - "type": "PCWSTR" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "hEvent", - "type": "HANDLE" - } - ], - "SLGetWindowsInformation": [ - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetWindowsInformationDWORD": [ - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "pdwValue", - "type": "DWORD" - } - ], - "SLIsGenuineLocal": [ - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pGenuineState", - "type": "SL_GENUINE_STATE" - }, - { - "name": "pUIOptions", - "type": "SL_NONGENUINE_UI_OPTIONS" - } - ], - "SLIsGenuineLocalEx": [ - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pSkuId", - "type": "SLID" - }, - { - "name": "pGenuineState", - "type": "SL_GENUINE_STATE" - } - ], - "SLAcquireGenuineTicket": [ - { - "name": "ppTicketBlob", - "type": "void" - }, - { - "name": "pcbTicketBlob", - "type": "UINT" - }, - { - "name": "pwszTemplateId", - "type": "PCWSTR" - }, - { - "name": "pwszServerUrl", - "type": "PCWSTR" - }, - { - "name": "pwszClientToken", - "type": "PCWSTR" - } - ], - "SLSetGenuineInformation": [ - { - "name": "pQueryId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "eDataType", - "type": "SLDATATYPE" - }, - { - "name": "cbValue", - "type": "UINT" - }, - { - "name": "pbValue", - "type": "BYTE" - } - ], - "SLGetReferralInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "eReferralType", - "type": "SLREFERRALTYPE" - }, - { - "name": "pSkuOrAppId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "ppwszValue", - "type": "PWSTR" - } - ], - "SLPersistRTSPayloadOverride": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "SLPersistApplicationPolicies": [ - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SLGetApplicationPolicy": [ - { - "name": "hPolicyContext", - "type": "HSLP" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLLoadApplicationPolicies": [ - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phPolicyContext", - "type": "HSLP" - } - ], - "SLUnloadApplicationPolicies": [ - { - "name": "hPolicyContext", - "type": "HSLP" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SLGetAuthenticationResult": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLSetAuthenticationData": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "cbValue", - "type": "UINT" - }, - { - "name": "pbValue", - "type": "BYTE" - } - ], - "SLGetGenuineInformation": [ - { - "name": "pQueryId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "BYTE" - } - ], - "SLGetGenuineInformationEx": [ - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "BYTE" - } - ], - "SLGatherMigrationBlob": [ - { - "name": "bMigratableOnly", - "type": "BOOL" - }, - { - "name": "pwszEncryptorUri", - "type": "LPCWSTR" - }, - { - "name": "hFile", - "type": "HANDLE" - } - ], - "SLDepositMigrationBlob": [ - { - "name": "hFile", - "type": "HANDLE" - } - ], - "SLQueryLicenseValueFromApp": [ - { - "name": "valueName", - "type": "PCWSTR" - }, - { - "name": "valueType", - "type": "ULONG" - }, - { - "name": "dataBuffer", - "type": "PVOID" - }, - { - "name": "dataSize", - "type": "ULONG" - }, - { - "name": "resultDataSize", - "type": "ULONG" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Slcext.json b/qiling/extensions/windows_sdk/Slcext.json deleted file mode 100644 index 48dd28d3f..000000000 --- a/qiling/extensions/windows_sdk/Slcext.json +++ /dev/null @@ -1,956 +0,0 @@ -{ - "SLOpen": [ - { - "name": "phSLC", - "type": "HSLC" - } - ], - "SLClose": [ - { - "name": "hSLC", - "type": "HSLC" - } - ], - "SLInstallProofOfPurchase": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszPKeyAlgorithm", - "type": "PCWSTR" - }, - { - "name": "pwszPKeyString", - "type": "PCWSTR" - }, - { - "name": "cbPKeySpecificData", - "type": "UINT" - }, - { - "name": "pbPKeySpecificData", - "type": "PBYTE" - }, - { - "name": "pPkeyId", - "type": "SLID" - } - ], - "SLInstallProofOfPurchaseEx": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszPKeyAlgorithm", - "type": "PCWSTR" - }, - { - "name": "pwszPKeyString", - "type": "PCWSTR" - }, - { - "name": "cbPKeySpecificData", - "type": "UINT" - }, - { - "name": "pbPKeySpecificData", - "type": "PBYTE" - }, - { - "name": "pPkeyId", - "type": "SLID" - } - ], - "SLUninstallProofOfPurchase": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pPKeyId", - "type": "SLID" - } - ], - "SLInstallLicense": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "cbLicenseBlob", - "type": "UINT" - }, - { - "name": "pbLicenseBlob", - "type": "BYTE" - }, - { - "name": "pLicenseFileId", - "type": "SLID" - } - ], - "SLUninstallLicense": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pLicenseFileId", - "type": "SLID" - } - ], - "SLConsumeRight": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszRightName", - "type": "PCWSTR" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "SLGetProductSkuInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetPKeyInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pPKeyId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetLicenseInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pSLLicenseId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetLicensingStatusInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pAppID", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszRightName", - "type": "PCWSTR" - }, - { - "name": "pnStatusCount", - "type": "UINT" - }, - { - "name": "ppLicensingStatus", - "type": "SL_LICENSING_STATUS" - } - ], - "SLGetPolicyInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetPolicyInformationDWORD": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "pdwValue", - "type": "DWORD" - } - ], - "SLGetServiceInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetApplicationInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLActivateProduct": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "cbAppSpecificData", - "type": "UINT" - }, - { - "name": "pvAppSpecificData", - "type": "PVOID" - }, - { - "name": "pActivationInfo", - "type": "SL_ACTIVATION_INFO_HEADER" - }, - { - "name": "pwszProxyServer", - "type": "PCWSTR" - }, - { - "name": "wProxyPort", - "type": "WORD" - } - ], - "SLGetServerStatus": [ - { - "name": "pwszServerURL", - "type": "PCWSTR" - }, - { - "name": "pwszAcquisitionType", - "type": "PCWSTR" - }, - { - "name": "pwszProxyServer", - "type": "PCWSTR" - }, - { - "name": "wProxyPort", - "type": "WORD" - }, - { - "name": "phrStatus", - "type": "HRESULT" - } - ], - "SLReArm": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SLGenerateOfflineInstallationId": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "ppwszInstallationId", - "type": "PWSTR" - } - ], - "SLGenerateOfflineInstallationIdEx": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pActivationInfo", - "type": "SL_ACTIVATION_INFO_HEADER" - }, - { - "name": "ppwszInstallationId", - "type": "PWSTR" - } - ], - "SLDepositOfflineConfirmationId": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszInstallationId", - "type": "PCWSTR" - }, - { - "name": "pwszConfirmationId", - "type": "PCWSTR" - } - ], - "SLDepositOfflineConfirmationIdEx": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pActivationInfo", - "type": "SL_ACTIVATION_INFO_HEADER" - }, - { - "name": "pwszInstallationId", - "type": "PCWSTR" - }, - { - "name": "pwszConfirmationId", - "type": "PCWSTR" - } - ], - "SLGetPKeyId": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszPKeyAlgorithm", - "type": "PCWSTR" - }, - { - "name": "pwszPKeyString", - "type": "PCWSTR" - }, - { - "name": "cbPKeySpecificData", - "type": "UINT" - }, - { - "name": "pbPKeySpecificData", - "type": "BYTE" - }, - { - "name": "pPKeyId", - "type": "SLID" - } - ], - "SLGetInstalledProductKeyIds": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pnProductKeyIds", - "type": "UINT" - }, - { - "name": "ppProductKeyIds", - "type": "SLID" - } - ], - "SLSetCurrentProductKey": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pProductKeyId", - "type": "SLID" - } - ], - "SLGetSLIDList": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "eQueryIdType", - "type": "SLIDTYPE" - }, - { - "name": "pQueryId", - "type": "SLID" - }, - { - "name": "eReturnIdType", - "type": "SLIDTYPE" - }, - { - "name": "pnReturnIds", - "type": "UINT" - }, - { - "name": "ppReturnIds", - "type": "SLID" - } - ], - "SLGetLicenseFileId": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "cbLicenseBlob", - "type": "UINT" - }, - { - "name": "pbLicenseBlob", - "type": "BYTE" - }, - { - "name": "pLicenseFileId", - "type": "SLID" - } - ], - "SLGetLicense": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pLicenseFileId", - "type": "SLID" - }, - { - "name": "pcbLicenseFile", - "type": "UINT" - }, - { - "name": "ppbLicenseFile", - "type": "PBYTE" - } - ], - "SLFireEvent": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszEventId", - "type": "PCWSTR" - }, - { - "name": "pApplicationId", - "type": "SLID" - } - ], - "SLRegisterEvent": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszEventId", - "type": "PCWSTR" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "hEvent", - "type": "HANDLE" - } - ], - "SLUnregisterEvent": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszEventId", - "type": "PCWSTR" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "hEvent", - "type": "HANDLE" - } - ], - "SLGetWindowsInformation": [ - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetWindowsInformationDWORD": [ - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "pdwValue", - "type": "DWORD" - } - ], - "SLIsGenuineLocal": [ - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pGenuineState", - "type": "SL_GENUINE_STATE" - }, - { - "name": "pUIOptions", - "type": "SL_NONGENUINE_UI_OPTIONS" - } - ], - "SLIsGenuineLocalEx": [ - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pSkuId", - "type": "SLID" - }, - { - "name": "pGenuineState", - "type": "SL_GENUINE_STATE" - } - ], - "SLAcquireGenuineTicket": [ - { - "name": "ppTicketBlob", - "type": "void" - }, - { - "name": "pcbTicketBlob", - "type": "UINT" - }, - { - "name": "pwszTemplateId", - "type": "PCWSTR" - }, - { - "name": "pwszServerUrl", - "type": "PCWSTR" - }, - { - "name": "pwszClientToken", - "type": "PCWSTR" - } - ], - "SLSetGenuineInformation": [ - { - "name": "pQueryId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "eDataType", - "type": "SLDATATYPE" - }, - { - "name": "cbValue", - "type": "UINT" - }, - { - "name": "pbValue", - "type": "BYTE" - } - ], - "SLGetReferralInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "eReferralType", - "type": "SLREFERRALTYPE" - }, - { - "name": "pSkuOrAppId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "ppwszValue", - "type": "PWSTR" - } - ], - "SLPersistRTSPayloadOverride": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "SLPersistApplicationPolicies": [ - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SLGetApplicationPolicy": [ - { - "name": "hPolicyContext", - "type": "HSLP" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLLoadApplicationPolicies": [ - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phPolicyContext", - "type": "HSLP" - } - ], - "SLUnloadApplicationPolicies": [ - { - "name": "hPolicyContext", - "type": "HSLP" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SLGetAuthenticationResult": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLSetAuthenticationData": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "cbValue", - "type": "UINT" - }, - { - "name": "pbValue", - "type": "BYTE" - } - ], - "SLGetGenuineInformation": [ - { - "name": "pQueryId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "BYTE" - } - ], - "SLGetGenuineInformationEx": [ - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "BYTE" - } - ], - "SLGatherMigrationBlob": [ - { - "name": "bMigratableOnly", - "type": "BOOL" - }, - { - "name": "pwszEncryptorUri", - "type": "LPCWSTR" - }, - { - "name": "hFile", - "type": "HANDLE" - } - ], - "SLDepositMigrationBlob": [ - { - "name": "hFile", - "type": "HANDLE" - } - ], - "SLQueryLicenseValueFromApp": [ - { - "name": "valueName", - "type": "PCWSTR" - }, - { - "name": "valueType", - "type": "ULONG" - }, - { - "name": "dataBuffer", - "type": "PVOID" - }, - { - "name": "dataSize", - "type": "ULONG" - }, - { - "name": "resultDataSize", - "type": "ULONG" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/WinSpool.json b/qiling/extensions/windows_sdk/WinSpool.json deleted file mode 100644 index f57fee6e4..000000000 --- a/qiling/extensions/windows_sdk/WinSpool.json +++ /dev/null @@ -1,5434 +0,0 @@ -{ - "AddFontResourceA": [ - { - "name": "VOID", - "type": "LPCSTR" - } - ], - "AddFontResourceW": [ - { - "name": "VOID", - "type": "LPCWSTR" - } - ], - "AnimatePalette": [ - { - "name": "hPal", - "type": "HPALETTE" - }, - { - "name": "iStartIndex", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "ppe", - "type": "PALETTEENTRY" - } - ], - "Arc": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - }, - { - "name": "x3", - "type": "int" - }, - { - "name": "y3", - "type": "int" - }, - { - "name": "x4", - "type": "int" - }, - { - "name": "y4", - "type": "int" - } - ], - "BitBlt": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "CancelDC": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "Chord": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - }, - { - "name": "x3", - "type": "int" - }, - { - "name": "y3", - "type": "int" - }, - { - "name": "x4", - "type": "int" - }, - { - "name": "y4", - "type": "int" - } - ], - "ChoosePixelFormat": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "ppfd", - "type": "PIXELFORMATDESCRIPTOR" - } - ], - "CloseMetaFile": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "CombineRgn": [ - { - "name": "hrgnDst", - "type": "HRGN" - }, - { - "name": "hrgnSrc1", - "type": "HRGN" - }, - { - "name": "hrgnSrc2", - "type": "HRGN" - }, - { - "name": "iMode", - "type": "int" - } - ], - "CopyMetaFileA": [ - { - "name": "VOID", - "type": "HMETAFILE" - }, - { - "name": "VOID", - "type": "LPCSTR" - } - ], - "CopyMetaFileW": [ - { - "name": "VOID", - "type": "HMETAFILE" - }, - { - "name": "VOID", - "type": "LPCWSTR" - } - ], - "CreateBitmap": [ - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "nPlanes", - "type": "UINT" - }, - { - "name": "nBitCount", - "type": "UINT" - }, - { - "name": "lpBits", - "type": "void" - } - ], - "CreateBitmapIndirect": [ - { - "name": "pbm", - "type": "BITMAP" - } - ], - "CreateBrushIndirect": [ - { - "name": "plbrush", - "type": "LOGBRUSH" - } - ], - "CreateCompatibleBitmap": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - } - ], - "CreateDiscardableBitmap": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - } - ], - "CreateCompatibleDC": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "CreateDCA": [ - { - "name": "pwszDriver", - "type": "LPCSTR" - }, - { - "name": "pwszDevice", - "type": "LPCSTR" - }, - { - "name": "pszPort", - "type": "LPCSTR" - }, - { - "name": "pdm", - "type": "DEVMODEA" - } - ], - "CreateDCW": [ - { - "name": "pwszDriver", - "type": "LPCWSTR" - }, - { - "name": "pwszDevice", - "type": "LPCWSTR" - }, - { - "name": "pszPort", - "type": "LPCWSTR" - }, - { - "name": "pdm", - "type": "DEVMODEW" - } - ], - "CreateDIBitmap": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pbmih", - "type": "BITMAPINFOHEADER" - }, - { - "name": "flInit", - "type": "DWORD" - }, - { - "name": "pjBits", - "type": "void" - }, - { - "name": "pbmi", - "type": "BITMAPINFO" - }, - { - "name": "iUsage", - "type": "UINT" - } - ], - "CreateDIBPatternBrush": [ - { - "name": "h", - "type": "HGLOBAL" - }, - { - "name": "iUsage", - "type": "UINT" - } - ], - "CreateDIBPatternBrushPt": [ - { - "name": "lpPackedDIB", - "type": "void" - }, - { - "name": "iUsage", - "type": "UINT" - } - ], - "CreateEllipticRgn": [ - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - } - ], - "CreateEllipticRgnIndirect": [ - { - "name": "lprect", - "type": "RECT" - } - ], - "CreateFontIndirectA": [ - { - "name": "lplf", - "type": "LOGFONTA" - } - ], - "CreateFontIndirectW": [ - { - "name": "lplf", - "type": "LOGFONTW" - } - ], - "CreateFontA": [ - { - "name": "cHeight", - "type": "int" - }, - { - "name": "cWidth", - "type": "int" - }, - { - "name": "cEscapement", - "type": "int" - }, - { - "name": "cOrientation", - "type": "int" - }, - { - "name": "cWeight", - "type": "int" - }, - { - "name": "bItalic", - "type": "DWORD" - }, - { - "name": "bUnderline", - "type": "DWORD" - }, - { - "name": "bStrikeOut", - "type": "DWORD" - }, - { - "name": "iCharSet", - "type": "DWORD" - }, - { - "name": "iOutPrecision", - "type": "DWORD" - }, - { - "name": "iClipPrecision", - "type": "DWORD" - }, - { - "name": "iQuality", - "type": "DWORD" - }, - { - "name": "iPitchAndFamily", - "type": "DWORD" - }, - { - "name": "pszFaceName", - "type": "LPCSTR" - } - ], - "CreateFontW": [ - { - "name": "cHeight", - "type": "int" - }, - { - "name": "cWidth", - "type": "int" - }, - { - "name": "cEscapement", - "type": "int" - }, - { - "name": "cOrientation", - "type": "int" - }, - { - "name": "cWeight", - "type": "int" - }, - { - "name": "bItalic", - "type": "DWORD" - }, - { - "name": "bUnderline", - "type": "DWORD" - }, - { - "name": "bStrikeOut", - "type": "DWORD" - }, - { - "name": "iCharSet", - "type": "DWORD" - }, - { - "name": "iOutPrecision", - "type": "DWORD" - }, - { - "name": "iClipPrecision", - "type": "DWORD" - }, - { - "name": "iQuality", - "type": "DWORD" - }, - { - "name": "iPitchAndFamily", - "type": "DWORD" - }, - { - "name": "pszFaceName", - "type": "LPCWSTR" - } - ], - "CreateHatchBrush": [ - { - "name": "iHatch", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "CreateICA": [ - { - "name": "pszDriver", - "type": "LPCSTR" - }, - { - "name": "pszDevice", - "type": "LPCSTR" - }, - { - "name": "pszPort", - "type": "LPCSTR" - }, - { - "name": "pdm", - "type": "DEVMODEA" - } - ], - "CreateICW": [ - { - "name": "pszDriver", - "type": "LPCWSTR" - }, - { - "name": "pszDevice", - "type": "LPCWSTR" - }, - { - "name": "pszPort", - "type": "LPCWSTR" - }, - { - "name": "pdm", - "type": "DEVMODEW" - } - ], - "CreateMetaFileA": [ - { - "name": "pszFile", - "type": "LPCSTR" - } - ], - "CreateMetaFileW": [ - { - "name": "pszFile", - "type": "LPCWSTR" - } - ], - "CreatePalette": [ - { - "name": "plpal", - "type": "LOGPALETTE" - } - ], - "CreatePen": [ - { - "name": "iStyle", - "type": "int" - }, - { - "name": "cWidth", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "CreatePenIndirect": [ - { - "name": "plpen", - "type": "LOGPEN" - } - ], - "CreatePolyPolygonRgn": [ - { - "name": "pptl", - "type": "POINT" - }, - { - "name": "pc", - "type": "INT" - }, - { - "name": "cPoly", - "type": "int" - }, - { - "name": "iMode", - "type": "int" - } - ], - "CreatePatternBrush": [ - { - "name": "hbm", - "type": "HBITMAP" - } - ], - "CreateRectRgn": [ - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - } - ], - "CreateRectRgnIndirect": [ - { - "name": "lprect", - "type": "RECT" - } - ], - "CreateRoundRectRgn": [ - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - }, - { - "name": "w", - "type": "int" - }, - { - "name": "h", - "type": "int" - } - ], - "CreateScalableFontResourceA": [ - { - "name": "fdwHidden", - "type": "DWORD" - }, - { - "name": "lpszFont", - "type": "LPCSTR" - }, - { - "name": "lpszFile", - "type": "LPCSTR" - }, - { - "name": "lpszPath", - "type": "LPCSTR" - } - ], - "CreateScalableFontResourceW": [ - { - "name": "fdwHidden", - "type": "DWORD" - }, - { - "name": "lpszFont", - "type": "LPCWSTR" - }, - { - "name": "lpszFile", - "type": "LPCWSTR" - }, - { - "name": "lpszPath", - "type": "LPCWSTR" - } - ], - "CreateSolidBrush": [ - { - "name": "color", - "type": "COLORREF" - } - ], - "DeleteDC": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "DeleteMetaFile": [ - { - "name": "hmf", - "type": "HMETAFILE" - } - ], - "DeleteObject": [ - { - "name": "ho", - "type": "HGDIOBJ" - } - ], - "DescribePixelFormat": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iPixelFormat", - "type": "int" - }, - { - "name": "nBytes", - "type": "UINT" - }, - { - "name": "ppfd", - "type": "LPPIXELFORMATDESCRIPTOR" - } - ], - "DeviceCapabilitiesA": [ - { - "name": "pDevice", - "type": "LPCSTR" - }, - { - "name": "pPort", - "type": "LPCSTR" - }, - { - "name": "fwCapability", - "type": "WORD" - }, - { - "name": "pOutput", - "type": "LPSTR" - }, - { - "name": "pDevMode", - "type": "DEVMODEA" - } - ], - "DeviceCapabilitiesW": [ - { - "name": "pDevice", - "type": "LPCWSTR" - }, - { - "name": "pPort", - "type": "LPCWSTR" - }, - { - "name": "fwCapability", - "type": "WORD" - }, - { - "name": "pOutput", - "type": "LPWSTR" - }, - { - "name": "pDevMode", - "type": "DEVMODEW" - } - ], - "DrawEscape": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iEscape", - "type": "int" - }, - { - "name": "cjIn", - "type": "int" - }, - { - "name": "lpIn", - "type": "LPCSTR" - } - ], - "Ellipse": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "EnumFontFamiliesExA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPLOGFONTA" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCA" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumFontFamiliesExW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPLOGFONTW" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCW" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumFontFamiliesA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPCSTR" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCA" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumFontFamiliesW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPCWSTR" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCW" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumFontsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPCSTR" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCA" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumFontsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPCWSTR" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCW" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumObjects": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nType", - "type": "int" - }, - { - "name": "lpFunc", - "type": "GOBJENUMPROC" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EqualRgn": [ - { - "name": "hrgn1", - "type": "HRGN" - }, - { - "name": "hrgn2", - "type": "HRGN" - } - ], - "Escape": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iEscape", - "type": "int" - }, - { - "name": "cjIn", - "type": "int" - }, - { - "name": "pvIn", - "type": "LPCSTR" - }, - { - "name": "pvOut", - "type": "LPVOID" - } - ], - "ExtEscape": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iEscape", - "type": "int" - }, - { - "name": "cjInput", - "type": "int" - }, - { - "name": "lpInData", - "type": "LPCSTR" - }, - { - "name": "cjOutput", - "type": "int" - }, - { - "name": "lpOutData", - "type": "LPSTR" - } - ], - "ExcludeClipRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "ExtCreateRegion": [ - { - "name": "lpx", - "type": "XFORM" - }, - { - "name": "nCount", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "RGNDATA" - } - ], - "ExtFloodFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - }, - { - "name": "type", - "type": "UINT" - } - ], - "FillRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "hbr", - "type": "HBRUSH" - } - ], - "FloodFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "FrameRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "hbr", - "type": "HBRUSH" - }, - { - "name": "w", - "type": "int" - }, - { - "name": "h", - "type": "int" - } - ], - "GetROP2": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetAspectRatioFilterEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpsize", - "type": "LPSIZE" - } - ], - "GetBkColor": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetDCBrushColor": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetDCPenColor": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetBkMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetBitmapBits": [ - { - "name": "hbit", - "type": "HBITMAP" - }, - { - "name": "cb", - "type": "LONG" - }, - { - "name": "lpvBits", - "type": "LPVOID" - } - ], - "GetBitmapDimensionEx": [ - { - "name": "hbit", - "type": "HBITMAP" - }, - { - "name": "lpsize", - "type": "LPSIZE" - } - ], - "GetBoundsRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "LPRECT" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "GetBrushOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "GetCharWidthA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPINT" - } - ], - "GetCharWidthW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPINT" - } - ], - "GetCharWidth32A": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPINT" - } - ], - "GetCharWidth32W": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPINT" - } - ], - "GetCharWidthFloatA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "PFLOAT" - } - ], - "GetCharWidthFloatW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "PFLOAT" - } - ], - "GetCharABCWidthsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "wFirst", - "type": "UINT" - }, - { - "name": "wLast", - "type": "UINT" - }, - { - "name": "lpABC", - "type": "LPABC" - } - ], - "GetCharABCWidthsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "wFirst", - "type": "UINT" - }, - { - "name": "wLast", - "type": "UINT" - }, - { - "name": "lpABC", - "type": "LPABC" - } - ], - "GetCharABCWidthsFloatA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpABC", - "type": "LPABCFLOAT" - } - ], - "GetCharABCWidthsFloatW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpABC", - "type": "LPABCFLOAT" - } - ], - "GetClipBox": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "LPRECT" - } - ], - "GetClipRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "GetMetaRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "GetCurrentObject": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "type", - "type": "UINT" - } - ], - "GetCurrentPositionEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "GetDeviceCaps": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "index", - "type": "int" - } - ], - "GetDIBits": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hbm", - "type": "HBITMAP" - }, - { - "name": "start", - "type": "UINT" - }, - { - "name": "cLines", - "type": "UINT" - }, - { - "name": "lpvBits", - "type": "LPVOID" - }, - { - "name": "lpbmi", - "type": "LPBITMAPINFO" - }, - { - "name": "usage", - "type": "UINT" - } - ], - "GetFontData": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "dwTable", - "type": "DWORD" - }, - { - "name": "dwOffset", - "type": "DWORD" - }, - { - "name": "pvBuffer", - "type": "PVOID" - }, - { - "name": "cjBuffer", - "type": "DWORD" - } - ], - "GetGlyphOutlineA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "uChar", - "type": "UINT" - }, - { - "name": "fuFormat", - "type": "UINT" - }, - { - "name": "lpgm", - "type": "LPGLYPHMETRICS" - }, - { - "name": "cjBuffer", - "type": "DWORD" - }, - { - "name": "pvBuffer", - "type": "LPVOID" - }, - { - "name": "lpmat2", - "type": "MAT2" - } - ], - "GetGlyphOutlineW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "uChar", - "type": "UINT" - }, - { - "name": "fuFormat", - "type": "UINT" - }, - { - "name": "lpgm", - "type": "LPGLYPHMETRICS" - }, - { - "name": "cjBuffer", - "type": "DWORD" - }, - { - "name": "pvBuffer", - "type": "LPVOID" - }, - { - "name": "lpmat2", - "type": "MAT2" - } - ], - "GetGraphicsMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetMapMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetMetaFileBitsEx": [ - { - "name": "hMF", - "type": "HMETAFILE" - }, - { - "name": "cbBuffer", - "type": "UINT" - }, - { - "name": "lpData", - "type": "LPVOID" - } - ], - "GetMetaFileA": [ - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "GetMetaFileW": [ - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "GetNearestColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "GetNearestPaletteIndex": [ - { - "name": "h", - "type": "HPALETTE" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "GetObjectType": [ - { - "name": "h", - "type": "HGDIOBJ" - } - ], - "GetOutlineTextMetricsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "cjCopy", - "type": "UINT" - }, - { - "name": "potm", - "type": "LPOUTLINETEXTMETRICA" - } - ], - "GetOutlineTextMetricsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "cjCopy", - "type": "UINT" - }, - { - "name": "potm", - "type": "LPOUTLINETEXTMETRICW" - } - ], - "GetPaletteEntries": [ - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "pPalEntries", - "type": "LPPALETTEENTRY" - } - ], - "GetPixel": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "GetPixelFormat": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetPolyFillMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetRasterizerCaps": [ - { - "name": "lpraststat", - "type": "LPRASTERIZER_STATUS" - }, - { - "name": "cjBytes", - "type": "UINT" - } - ], - "GetRandomRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "i", - "type": "INT" - } - ], - "GetRegionData": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "nCount", - "type": "DWORD" - }, - { - "name": "lpRgnData", - "type": "LPRGNDATA" - } - ], - "GetRgnBox": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "lprc", - "type": "LPRECT" - } - ], - "GetStockObject": [ - { - "name": "i", - "type": "int" - } - ], - "GetStretchBltMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetSystemPaletteEntries": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "pPalEntries", - "type": "LPPALETTEENTRY" - } - ], - "GetSystemPaletteUse": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextCharacterExtra": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextAlign": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextColor": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextExtentPointA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "GetTextExtentPointW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "GetTextExtentPoint32A": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "psizl", - "type": "LPSIZE" - } - ], - "GetTextExtentPoint32W": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "psizl", - "type": "LPSIZE" - } - ], - "GetTextExtentExPointA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpszString", - "type": "LPCSTR" - }, - { - "name": "cchString", - "type": "int" - }, - { - "name": "nMaxExtent", - "type": "int" - }, - { - "name": "lpnFit", - "type": "LPINT" - }, - { - "name": "lpnDx", - "type": "LPINT" - }, - { - "name": "lpSize", - "type": "LPSIZE" - } - ], - "GetTextExtentExPointW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpszString", - "type": "LPCWSTR" - }, - { - "name": "cchString", - "type": "int" - }, - { - "name": "nMaxExtent", - "type": "int" - }, - { - "name": "lpnFit", - "type": "LPINT" - }, - { - "name": "lpnDx", - "type": "LPINT" - }, - { - "name": "lpSize", - "type": "LPSIZE" - } - ], - "GetTextCharset": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextCharsetInfo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpSig", - "type": "LPFONTSIGNATURE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "TranslateCharsetInfo": [ - { - "name": "lpSrc", - "type": "DWORD" - }, - { - "name": "lpCs", - "type": "LPCHARSETINFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetFontLanguageInfo": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetCharacterPlacementA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "nCount", - "type": "int" - }, - { - "name": "nMexExtent", - "type": "int" - }, - { - "name": "lpResults", - "type": "LPGCP_RESULTSA" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetCharacterPlacementW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "nCount", - "type": "int" - }, - { - "name": "nMexExtent", - "type": "int" - }, - { - "name": "lpResults", - "type": "LPGCP_RESULTSW" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetFontUnicodeRanges": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpgs", - "type": "LPGLYPHSET" - } - ], - "GetGlyphIndicesA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpstr", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "pgi", - "type": "LPWORD" - }, - { - "name": "fl", - "type": "DWORD" - } - ], - "GetGlyphIndicesW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpstr", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "pgi", - "type": "LPWORD" - }, - { - "name": "fl", - "type": "DWORD" - } - ], - "GetTextExtentPointI": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pgiIn", - "type": "LPWORD" - }, - { - "name": "cgi", - "type": "int" - }, - { - "name": "psize", - "type": "LPSIZE" - } - ], - "GetTextExtentExPointI": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpwszString", - "type": "LPWORD" - }, - { - "name": "cwchString", - "type": "int" - }, - { - "name": "nMaxExtent", - "type": "int" - }, - { - "name": "lpnFit", - "type": "LPINT" - }, - { - "name": "lpnDx", - "type": "LPINT" - }, - { - "name": "lpSize", - "type": "LPSIZE" - } - ], - "GetCharWidthI": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "giFirst", - "type": "UINT" - }, - { - "name": "cgi", - "type": "UINT" - }, - { - "name": "pgi", - "type": "LPWORD" - }, - { - "name": "piWidths", - "type": "LPINT" - } - ], - "GetCharABCWidthsI": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "giFirst", - "type": "UINT" - }, - { - "name": "cgi", - "type": "UINT" - }, - { - "name": "pgi", - "type": "LPWORD" - }, - { - "name": "pabc", - "type": "LPABC" - } - ], - "AddFontResourceExA": [ - { - "name": "name", - "type": "LPCSTR" - }, - { - "name": "fl", - "type": "DWORD" - }, - { - "name": "res", - "type": "PVOID" - } - ], - "AddFontResourceExW": [ - { - "name": "name", - "type": "LPCWSTR" - }, - { - "name": "fl", - "type": "DWORD" - }, - { - "name": "res", - "type": "PVOID" - } - ], - "RemoveFontResourceExA": [ - { - "name": "name", - "type": "LPCSTR" - }, - { - "name": "fl", - "type": "DWORD" - }, - { - "name": "pdv", - "type": "PVOID" - } - ], - "RemoveFontResourceExW": [ - { - "name": "name", - "type": "LPCWSTR" - }, - { - "name": "fl", - "type": "DWORD" - }, - { - "name": "pdv", - "type": "PVOID" - } - ], - "AddFontMemResourceEx": [ - { - "name": "pFileView", - "type": "PVOID" - }, - { - "name": "cjSize", - "type": "DWORD" - }, - { - "name": "pvResrved", - "type": "PVOID" - }, - { - "name": "pNumFonts", - "type": "DWORD" - } - ], - "RemoveFontMemResourceEx": [ - { - "name": "h", - "type": "HANDLE" - } - ], - "CreateFontIndirectExA": [ - { - "name": "VOID", - "type": "ENUMLOGFONTEXDVA" - } - ], - "CreateFontIndirectExW": [ - { - "name": "VOID", - "type": "ENUMLOGFONTEXDVW" - } - ], - "GetViewportExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpsize", - "type": "LPSIZE" - } - ], - "GetViewportOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppoint", - "type": "LPPOINT" - } - ], - "GetWindowExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpsize", - "type": "LPSIZE" - } - ], - "GetWindowOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppoint", - "type": "LPPOINT" - } - ], - "IntersectClipRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "InvertRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "LineDDA": [ - { - "name": "xStart", - "type": "int" - }, - { - "name": "yStart", - "type": "int" - }, - { - "name": "xEnd", - "type": "int" - }, - { - "name": "yEnd", - "type": "int" - }, - { - "name": "lpProc", - "type": "LINEDDAPROC" - }, - { - "name": "data", - "type": "LPARAM" - } - ], - "LineTo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "MaskBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xDest", - "type": "int" - }, - { - "name": "yDest", - "type": "int" - }, - { - "name": "width", - "type": "int" - }, - { - "name": "height", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "hbmMask", - "type": "HBITMAP" - }, - { - "name": "xMask", - "type": "int" - }, - { - "name": "yMask", - "type": "int" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "PlgBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "lpPoint", - "type": "POINT" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "width", - "type": "int" - }, - { - "name": "height", - "type": "int" - }, - { - "name": "hbmMask", - "type": "HBITMAP" - }, - { - "name": "xMask", - "type": "int" - }, - { - "name": "yMask", - "type": "int" - } - ], - "OffsetClipRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "OffsetRgn": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "PatBlt": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "w", - "type": "int" - }, - { - "name": "h", - "type": "int" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "Pie": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - }, - { - "name": "xr1", - "type": "int" - }, - { - "name": "yr1", - "type": "int" - }, - { - "name": "xr2", - "type": "int" - }, - { - "name": "yr2", - "type": "int" - } - ], - "PlayMetaFile": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hmf", - "type": "HMETAFILE" - } - ], - "PaintRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "PolyPolygon": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "asz", - "type": "INT" - }, - { - "name": "csz", - "type": "int" - } - ], - "PtInRegion": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "PtVisible": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "RectInRegion": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "lprect", - "type": "RECT" - } - ], - "RectVisible": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "RECT" - } - ], - "Rectangle": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "RestoreDC": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nSavedDC", - "type": "int" - } - ], - "ResetDCA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpdm", - "type": "DEVMODEA" - } - ], - "ResetDCW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpdm", - "type": "DEVMODEW" - } - ], - "RealizePalette": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "RemoveFontResourceA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "RemoveFontResourceW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "RoundRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - }, - { - "name": "width", - "type": "int" - }, - { - "name": "height", - "type": "int" - } - ], - "ResizePalette": [ - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "n", - "type": "UINT" - } - ], - "SaveDC": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SelectClipRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "ExtSelectClipRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "mode", - "type": "int" - } - ], - "SetMetaRgn": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SelectObject": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "h", - "type": "HGDIOBJ" - } - ], - "SelectPalette": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hPal", - "type": "HPALETTE" - }, - { - "name": "bForceBkgd", - "type": "BOOL" - } - ], - "SetBkColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetDCBrushColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetDCPenColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetBkMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "SetBitmapBits": [ - { - "name": "hbm", - "type": "HBITMAP" - }, - { - "name": "cb", - "type": "DWORD" - }, - { - "name": "pvBits", - "type": "void" - } - ], - "SetBoundsRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "RECT" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "SetDIBits": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hbm", - "type": "HBITMAP" - }, - { - "name": "start", - "type": "UINT" - }, - { - "name": "cLines", - "type": "UINT" - }, - { - "name": "lpBits", - "type": "void" - }, - { - "name": "lpbmi", - "type": "BITMAPINFO" - }, - { - "name": "ColorUse", - "type": "UINT" - } - ], - "SetDIBitsToDevice": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xDest", - "type": "int" - }, - { - "name": "yDest", - "type": "int" - }, - { - "name": "w", - "type": "DWORD" - }, - { - "name": "h", - "type": "DWORD" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "StartScan", - "type": "UINT" - }, - { - "name": "cLines", - "type": "UINT" - }, - { - "name": "lpvBits", - "type": "void" - }, - { - "name": "lpbmi", - "type": "BITMAPINFO" - }, - { - "name": "ColorUse", - "type": "UINT" - } - ], - "SetMapperFlags": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "flags", - "type": "DWORD" - } - ], - "SetGraphicsMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iMode", - "type": "int" - } - ], - "SetMapMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iMode", - "type": "int" - } - ], - "SetLayout": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "l", - "type": "DWORD" - } - ], - "GetLayout": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SetMetaFileBitsEx": [ - { - "name": "cbBuffer", - "type": "UINT" - }, - { - "name": "lpData", - "type": "BYTE" - } - ], - "SetPaletteEntries": [ - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "pPalEntries", - "type": "PALETTEENTRY" - } - ], - "SetPixel": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetPixelV": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetPixelFormat": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "format", - "type": "int" - }, - { - "name": "ppfd", - "type": "PIXELFORMATDESCRIPTOR" - } - ], - "SetPolyFillMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "StretchBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xDest", - "type": "int" - }, - { - "name": "yDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "SetRectRgn": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "StretchDIBits": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xDest", - "type": "int" - }, - { - "name": "yDest", - "type": "int" - }, - { - "name": "DestWidth", - "type": "int" - }, - { - "name": "DestHeight", - "type": "int" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "SrcWidth", - "type": "int" - }, - { - "name": "SrcHeight", - "type": "int" - }, - { - "name": "lpBits", - "type": "void" - }, - { - "name": "lpbmi", - "type": "BITMAPINFO" - }, - { - "name": "iUsage", - "type": "UINT" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "SetROP2": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "rop2", - "type": "int" - } - ], - "SetStretchBltMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "SetSystemPaletteUse": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "use", - "type": "UINT" - } - ], - "SetTextCharacterExtra": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "extra", - "type": "int" - } - ], - "SetTextColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetTextAlign": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "align", - "type": "UINT" - } - ], - "SetTextJustification": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "extra", - "type": "int" - }, - { - "name": "count", - "type": "int" - } - ], - "UpdateColors": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "AlphaBlend": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "ftn", - "type": "BLENDFUNCTION" - } - ], - "TransparentBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "crTransparent", - "type": "UINT" - } - ], - "GradientFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pVertex", - "type": "PTRIVERTEX" - }, - { - "name": "nVertex", - "type": "ULONG" - }, - { - "name": "pMesh", - "type": "PVOID" - }, - { - "name": "nMesh", - "type": "ULONG" - }, - { - "name": "ulMode", - "type": "ULONG" - } - ], - "GdiAlphaBlend": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "ftn", - "type": "BLENDFUNCTION" - } - ], - "GdiTransparentBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "crTransparent", - "type": "UINT" - } - ], - "GdiGradientFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pVertex", - "type": "PTRIVERTEX" - }, - { - "name": "nVertex", - "type": "ULONG" - }, - { - "name": "pMesh", - "type": "PVOID" - }, - { - "name": "nCount", - "type": "ULONG" - }, - { - "name": "ulMode", - "type": "ULONG" - } - ], - "PlayMetaFileRecord": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpHandleTable", - "type": "LPHANDLETABLE" - }, - { - "name": "lpMR", - "type": "LPMETARECORD" - }, - { - "name": "noObjs", - "type": "UINT" - } - ], - "EnumMetaFile": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hmf", - "type": "HMETAFILE" - }, - { - "name": "proc", - "type": "MFENUMPROC" - }, - { - "name": "param", - "type": "LPARAM" - } - ], - "CloseEnhMetaFile": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "CopyEnhMetaFileA": [ - { - "name": "hEnh", - "type": "HENHMETAFILE" - }, - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "CopyEnhMetaFileW": [ - { - "name": "hEnh", - "type": "HENHMETAFILE" - }, - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "CreateEnhMetaFileA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpFilename", - "type": "LPCSTR" - }, - { - "name": "lprc", - "type": "RECT" - }, - { - "name": "lpDesc", - "type": "LPCSTR" - } - ], - "CreateEnhMetaFileW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpFilename", - "type": "LPCWSTR" - }, - { - "name": "lprc", - "type": "RECT" - }, - { - "name": "lpDesc", - "type": "LPCWSTR" - } - ], - "DeleteEnhMetaFile": [ - { - "name": "hmf", - "type": "HENHMETAFILE" - } - ], - "EnumEnhMetaFile": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hmf", - "type": "HENHMETAFILE" - }, - { - "name": "proc", - "type": "ENHMFENUMPROC" - }, - { - "name": "param", - "type": "LPVOID" - }, - { - "name": "lpRect", - "type": "RECT" - } - ], - "GetEnhMetaFileA": [ - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "GetEnhMetaFileW": [ - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "GetEnhMetaFileBits": [ - { - "name": "hEMF", - "type": "HENHMETAFILE" - }, - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "lpData", - "type": "LPBYTE" - } - ], - "GetEnhMetaFileDescriptionA": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "cchBuffer", - "type": "UINT" - }, - { - "name": "lpDescription", - "type": "LPSTR" - } - ], - "GetEnhMetaFileDescriptionW": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "cchBuffer", - "type": "UINT" - }, - { - "name": "lpDescription", - "type": "LPWSTR" - } - ], - "GetEnhMetaFileHeader": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "lpEnhMetaHeader", - "type": "LPENHMETAHEADER" - } - ], - "GetEnhMetaFilePaletteEntries": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "nNumEntries", - "type": "UINT" - }, - { - "name": "lpPaletteEntries", - "type": "LPPALETTEENTRY" - } - ], - "GetEnhMetaFilePixelFormat": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "cbBuffer", - "type": "UINT" - }, - { - "name": "ppfd", - "type": "PIXELFORMATDESCRIPTOR" - } - ], - "GetWinMetaFileBits": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "cbData16", - "type": "UINT" - }, - { - "name": "pData16", - "type": "LPBYTE" - }, - { - "name": "iMapMode", - "type": "INT" - }, - { - "name": "hdcRef", - "type": "HDC" - } - ], - "PlayEnhMetaFile": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hmf", - "type": "HENHMETAFILE" - }, - { - "name": "lprect", - "type": "RECT" - } - ], - "PlayEnhMetaFileRecord": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pht", - "type": "LPHANDLETABLE" - }, - { - "name": "pmr", - "type": "ENHMETARECORD" - }, - { - "name": "cht", - "type": "UINT" - } - ], - "SetEnhMetaFileBits": [ - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "pb", - "type": "BYTE" - } - ], - "SetWinMetaFileBits": [ - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "lpMeta16Data", - "type": "BYTE" - }, - { - "name": "hdcRef", - "type": "HDC" - }, - { - "name": "lpMFP", - "type": "METAFILEPICT" - } - ], - "GdiComment": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "lpData", - "type": "BYTE" - } - ], - "GetTextMetricsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lptm", - "type": "LPTEXTMETRICA" - } - ], - "GetTextMetricsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lptm", - "type": "LPTEXTMETRICW" - } - ], - "AngleArc": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "r", - "type": "DWORD" - }, - { - "name": "StartAngle", - "type": "FLOAT" - }, - { - "name": "SweepAngle", - "type": "FLOAT" - } - ], - "PolyPolyline": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "asz", - "type": "DWORD" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "GetWorldTransform": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpxf", - "type": "LPXFORM" - } - ], - "SetWorldTransform": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpxf", - "type": "XFORM" - } - ], - "ModifyWorldTransform": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpxf", - "type": "XFORM" - }, - { - "name": "mode", - "type": "DWORD" - } - ], - "CombineTransform": [ - { - "name": "lpxfOut", - "type": "LPXFORM" - }, - { - "name": "lpxf1", - "type": "XFORM" - }, - { - "name": "lpxf2", - "type": "XFORM" - } - ], - "CreateDIBSection": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pbmi", - "type": "BITMAPINFO" - }, - { - "name": "usage", - "type": "UINT" - }, - { - "name": "ppvBits", - "type": "void" - }, - { - "name": "hSection", - "type": "HANDLE" - }, - { - "name": "offset", - "type": "DWORD" - } - ], - "GetDIBColorTable": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "prgbq", - "type": "RGBQUAD" - } - ], - "SetDIBColorTable": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "prgbq", - "type": "RGBQUAD" - } - ], - "SetColorAdjustment": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpca", - "type": "COLORADJUSTMENT" - } - ], - "GetColorAdjustment": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpca", - "type": "LPCOLORADJUSTMENT" - } - ], - "CreateHalftonePalette": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "StartDocA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpdi", - "type": "DOCINFOA" - } - ], - "StartDocW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpdi", - "type": "DOCINFOW" - } - ], - "EndDoc": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "StartPage": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "EndPage": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "AbortDoc": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SetAbortProc": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "proc", - "type": "ABORTPROC" - } - ], - "AbortPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "ArcTo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - }, - { - "name": "xr1", - "type": "int" - }, - { - "name": "yr1", - "type": "int" - }, - { - "name": "xr2", - "type": "int" - }, - { - "name": "yr2", - "type": "int" - } - ], - "BeginPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "CloseFigure": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "EndPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "FillPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "FlattenPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetPath": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "LPPOINT" - }, - { - "name": "aj", - "type": "LPBYTE" - }, - { - "name": "cpt", - "type": "int" - } - ], - "PathToRegion": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "PolyDraw": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "aj", - "type": "BYTE" - }, - { - "name": "cpt", - "type": "int" - } - ], - "SelectClipPath": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "SetArcDirection": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "dir", - "type": "int" - } - ], - "SetMiterLimit": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "limit", - "type": "FLOAT" - }, - { - "name": "old", - "type": "PFLOAT" - } - ], - "StrokeAndFillPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "StrokePath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "WidenPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "ExtCreatePen": [ - { - "name": "iPenStyle", - "type": "DWORD" - }, - { - "name": "cWidth", - "type": "DWORD" - }, - { - "name": "plbrush", - "type": "LOGBRUSH" - }, - { - "name": "cStyle", - "type": "DWORD" - }, - { - "name": "pstyle", - "type": "DWORD" - } - ], - "GetMiterLimit": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "plimit", - "type": "PFLOAT" - } - ], - "GetArcDirection": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetObjectA": [ - { - "name": "h", - "type": "HANDLE" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "pv", - "type": "LPVOID" - } - ], - "GetObjectW": [ - { - "name": "h", - "type": "HANDLE" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "pv", - "type": "LPVOID" - } - ], - "MoveToEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "TextOutA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "int" - } - ], - "TextOutW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "int" - } - ], - "ExtTextOutA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "options", - "type": "UINT" - }, - { - "name": "lprect", - "type": "RECT" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "UINT" - }, - { - "name": "lpDx", - "type": "INT" - } - ], - "ExtTextOutW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "options", - "type": "UINT" - }, - { - "name": "lprect", - "type": "RECT" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "UINT" - }, - { - "name": "lpDx", - "type": "INT" - } - ], - "PolyTextOutA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "ppt", - "type": "POLYTEXTA" - }, - { - "name": "nstrings", - "type": "int" - } - ], - "PolyTextOutW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "ppt", - "type": "POLYTEXTW" - }, - { - "name": "nstrings", - "type": "int" - } - ], - "CreatePolygonRgn": [ - { - "name": "pptl", - "type": "POINT" - }, - { - "name": "cPoint", - "type": "int" - }, - { - "name": "iMode", - "type": "int" - } - ], - "DPtoLP": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - }, - { - "name": "c", - "type": "int" - } - ], - "LPtoDP": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - }, - { - "name": "c", - "type": "int" - } - ], - "Polygon": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "int" - } - ], - "Polyline": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "int" - } - ], - "PolyBezier": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "DWORD" - } - ], - "PolyBezierTo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "DWORD" - } - ], - "PolylineTo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "DWORD" - } - ], - "SetViewportExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "SetViewportOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "SetWindowExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "SetWindowOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "OffsetViewportOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "OffsetWindowOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "ScaleViewportExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xn", - "type": "int" - }, - { - "name": "dx", - "type": "int" - }, - { - "name": "yn", - "type": "int" - }, - { - "name": "yd", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "ScaleWindowExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xn", - "type": "int" - }, - { - "name": "xd", - "type": "int" - }, - { - "name": "yn", - "type": "int" - }, - { - "name": "yd", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "SetBitmapDimensionEx": [ - { - "name": "hbm", - "type": "HBITMAP" - }, - { - "name": "w", - "type": "int" - }, - { - "name": "h", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "SetBrushOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "GetTextFaceA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "lpName", - "type": "LPSTR" - } - ], - "GetTextFaceW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "lpName", - "type": "LPWSTR" - } - ], - "GetKerningPairsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nPairs", - "type": "DWORD" - }, - { - "name": "lpKernPair", - "type": "LPKERNINGPAIR" - } - ], - "GetKerningPairsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nPairs", - "type": "DWORD" - }, - { - "name": "lpKernPair", - "type": "LPKERNINGPAIR" - } - ], - "GetDCOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "UnrealizeObject": [ - { - "name": "h", - "type": "HGDIOBJ" - } - ], - "GdiFlush": [ - { - "name": "VOID", - "type": "void" - } - ], - "GdiSetBatchLimit": [ - { - "name": "dw", - "type": "DWORD" - } - ], - "GdiGetBatchLimit": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetICMMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "CheckColorsInGamut": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpRGBTriple", - "type": "LPRGBTRIPLE" - }, - { - "name": "dlpBuffer", - "type": "LPVOID" - }, - { - "name": "nCount", - "type": "DWORD" - } - ], - "GetColorSpace": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetLogColorSpaceA": [ - { - "name": "hColorSpace", - "type": "HCOLORSPACE" - }, - { - "name": "lpBuffer", - "type": "LPLOGCOLORSPACEA" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "GetLogColorSpaceW": [ - { - "name": "hColorSpace", - "type": "HCOLORSPACE" - }, - { - "name": "lpBuffer", - "type": "LPLOGCOLORSPACEW" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "CreateColorSpaceA": [ - { - "name": "lplcs", - "type": "LPLOGCOLORSPACEA" - } - ], - "CreateColorSpaceW": [ - { - "name": "lplcs", - "type": "LPLOGCOLORSPACEW" - } - ], - "SetColorSpace": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hcs", - "type": "HCOLORSPACE" - } - ], - "DeleteColorSpace": [ - { - "name": "hcs", - "type": "HCOLORSPACE" - } - ], - "GetICMProfileA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pBufSize", - "type": "LPDWORD" - }, - { - "name": "pszFilename", - "type": "LPSTR" - } - ], - "GetICMProfileW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pBufSize", - "type": "LPDWORD" - }, - { - "name": "pszFilename", - "type": "LPWSTR" - } - ], - "SetICMProfileA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpFileName", - "type": "LPSTR" - } - ], - "SetICMProfileW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpFileName", - "type": "LPWSTR" - } - ], - "GetDeviceGammaRamp": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpRamp", - "type": "LPVOID" - } - ], - "SetDeviceGammaRamp": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpRamp", - "type": "LPVOID" - } - ], - "ColorMatchToTarget": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hdcTarget", - "type": "HDC" - }, - { - "name": "action", - "type": "DWORD" - } - ], - "EnumICMProfilesA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "proc", - "type": "ICMENUMPROCA" - }, - { - "name": "param", - "type": "LPARAM" - } - ], - "EnumICMProfilesW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "proc", - "type": "ICMENUMPROCW" - }, - { - "name": "param", - "type": "LPARAM" - } - ], - "UpdateICMRegKeyA": [ - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "lpszCMID", - "type": "LPSTR" - }, - { - "name": "lpszFileName", - "type": "LPSTR" - }, - { - "name": "command", - "type": "UINT" - } - ], - "UpdateICMRegKeyW": [ - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "lpszCMID", - "type": "LPWSTR" - }, - { - "name": "lpszFileName", - "type": "LPWSTR" - }, - { - "name": "command", - "type": "UINT" - } - ], - "ColorCorrectPalette": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hPal", - "type": "HPALETTE" - }, - { - "name": "deFirst", - "type": "DWORD" - }, - { - "name": "num", - "type": "DWORD" - } - ], - "wglCopyContext": [ - { - "name": "VOID", - "type": "HGLRC" - }, - { - "name": "VOID", - "type": "HGLRC" - }, - { - "name": "VOID", - "type": "UINT" - } - ], - "wglCreateContext": [ - { - "name": "VOID", - "type": "HDC" - } - ], - "wglCreateLayerContext": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - } - ], - "wglDeleteContext": [ - { - "name": "VOID", - "type": "HGLRC" - } - ], - "wglGetCurrentContext": [ - { - "name": "VOID", - "type": "void" - } - ], - "wglGetCurrentDC": [ - { - "name": "VOID", - "type": "void" - } - ], - "wglGetProcAddress": [ - { - "name": "VOID", - "type": "LPCSTR" - } - ], - "wglMakeCurrent": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "HGLRC" - } - ], - "wglShareLists": [ - { - "name": "VOID", - "type": "HGLRC" - }, - { - "name": "VOID", - "type": "HGLRC" - } - ], - "wglUseFontBitmapsA": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "wglUseFontBitmapsW": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "SwapBuffers": [ - { - "name": "VOID", - "type": "HDC" - } - ], - "wglUseFontOutlinesA": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "LPGLYPHMETRICSFLOAT" - } - ], - "wglUseFontOutlinesW": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "LPGLYPHMETRICSFLOAT" - } - ], - "wglDescribeLayerPlane": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "UINT" - }, - { - "name": "VOID", - "type": "LPLAYERPLANEDESCRIPTOR" - } - ], - "wglSetLayerPaletteEntries": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "COLORREF" - } - ], - "wglGetLayerPaletteEntries": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "COLORREF" - } - ], - "wglRealizeLayerPalette": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "BOOL" - } - ], - "wglSwapLayerBuffers": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "UINT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Winmm.json b/qiling/extensions/windows_sdk/Winmm.json deleted file mode 100644 index 588d16bc5..000000000 --- a/qiling/extensions/windows_sdk/Winmm.json +++ /dev/null @@ -1,40 +0,0 @@ -{ - "mmTaskCreate": [ - { - "name": "lpfn", - "type": "LPTASKCALLBACK" - }, - { - "name": "lph", - "type": "HANDLE" - }, - { - "name": "dwInst", - "type": "DWORD_PTR" - } - ], - "mmTaskBlock": [ - { - "name": "h", - "type": "DWORD" - } - ], - "mmTaskSignal": [ - { - "name": "h", - "type": "DWORD" - } - ], - "mmTaskYield": [ - { - "name": "VOID", - "type": "void" - } - ], - "mmGetCurrentTask": [ - { - "name": "VOID", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/aclui.json b/qiling/extensions/windows_sdk/aclui_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/aclui.json rename to qiling/extensions/windows_sdk/aclui_dll.json diff --git a/qiling/extensions/windows_sdk/advapi32_dll.json b/qiling/extensions/windows_sdk/advapi32_dll.json new file mode 100644 index 000000000..edba41c7f --- /dev/null +++ b/qiling/extensions/windows_sdk/advapi32_dll.json @@ -0,0 +1,10562 @@ +{ + "PerfStartProvider": [ + { + "name": "ProviderGuid", + "type": "LPGUID" + }, + { + "name": "ControlCallback", + "type": "PERFLIBREQUEST" + }, + { + "name": "Provider", + "type": "PHANDLE" + } + ], + "PerfStartProviderEx": [ + { + "name": "ProviderGuid", + "type": "LPGUID" + }, + { + "name": "ProviderContext", + "type": "PPERF_PROVIDER_CONTEXT" + }, + { + "name": "Provider", + "type": "PHANDLE" + } + ], + "PerfStopProvider": [ + { + "name": "ProviderHandle", + "type": "HANDLE" + } + ], + "PerfSetCounterSetInfo": [ + { + "name": "ProviderHandle", + "type": "HANDLE" + }, + { + "name": "Template", + "type": "PPERF_COUNTERSET_INFO" + }, + { + "name": "TemplateSize", + "type": "ULONG" + } + ], + "PerfCreateInstance": [ + { + "name": "ProviderHandle", + "type": "HANDLE" + }, + { + "name": "CounterSetGuid", + "type": "LPCGUID" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Id", + "type": "ULONG" + } + ], + "PerfDeleteInstance": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "InstanceBlock", + "type": "PPERF_COUNTERSET_INSTANCE" + } + ], + "PerfQueryInstance": [ + { + "name": "ProviderHandle", + "type": "HANDLE" + }, + { + "name": "CounterSetGuid", + "type": "LPCGUID" + }, + { + "name": "Name", + "type": "PCWSTR" + }, + { + "name": "Id", + "type": "ULONG" + } + ], + "PerfSetCounterRefValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Address", + "type": "PVOID" + } + ], + "PerfSetULongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONG" + } + ], + "PerfSetULongLongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONGLONG" + } + ], + "PerfIncrementULongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONG" + } + ], + "PerfIncrementULongLongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONGLONG" + } + ], + "PerfDecrementULongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONG" + } + ], + "PerfDecrementULongLongCounterValue": [ + { + "name": "Provider", + "type": "HANDLE" + }, + { + "name": "Instance", + "type": "PPERF_COUNTERSET_INSTANCE" + }, + { + "name": "CounterId", + "type": "ULONG" + }, + { + "name": "Value", + "type": "ULONGLONG" + } + ], + "PerfEnumerateCounterSet": [ + { + "name": "szMachine", + "type": "LPCWSTR" + }, + { + "name": "pCounterSetIds", + "type": "LPGUID" + }, + { + "name": "cCounterSetIds", + "type": "DWORD" + }, + { + "name": "pcCounterSetIdsActual", + "type": "LPDWORD" + } + ], + "PerfEnumerateCounterSetInstances": [ + { + "name": "szMachine", + "type": "LPCWSTR" + }, + { + "name": "pCounterSetId", + "type": "LPCGUID" + }, + { + "name": "pInstances", + "type": "PPERF_INSTANCE_HEADER" + }, + { + "name": "cbInstances", + "type": "DWORD" + }, + { + "name": "pcbInstancesActual", + "type": "LPDWORD" + } + ], + "PerfQueryCounterSetRegistrationInfo": [ + { + "name": "szMachine", + "type": "LPCWSTR" + }, + { + "name": "pCounterSetId", + "type": "LPCGUID" + }, + { + "name": "requestCode", + "type": "PerfRegInfoType" + }, + { + "name": "requestLangId", + "type": "DWORD" + }, + { + "name": "pbRegInfo", + "type": "LPBYTE" + }, + { + "name": "cbRegInfo", + "type": "DWORD" + }, + { + "name": "pcbRegInfoActual", + "type": "LPDWORD" + } + ], + "PerfOpenQueryHandle": [ + { + "name": "szMachine", + "type": "LPCWSTR" + }, + { + "name": "phQuery", + "type": "HANDLE" + } + ], + "PerfCloseQueryHandle": [ + { + "name": "hQuery", + "type": "HANDLE" + } + ], + "PerfQueryCounterInfo": [ + { + "name": "hQuery", + "type": "HANDLE" + }, + { + "name": "pCounters", + "type": "PPERF_COUNTER_IDENTIFIER" + }, + { + "name": "cbCounters", + "type": "DWORD" + }, + { + "name": "pcbCountersActual", + "type": "LPDWORD" + } + ], + "PerfQueryCounterData": [ + { + "name": "hQuery", + "type": "HANDLE" + }, + { + "name": "pCounterBlock", + "type": "PPERF_DATA_HEADER" + }, + { + "name": "cbCounterBlock", + "type": "DWORD" + }, + { + "name": "pcbCounterBlockActual", + "type": "LPDWORD" + } + ], + "PerfAddCounters": [ + { + "name": "hQuery", + "type": "HANDLE" + }, + { + "name": "pCounters", + "type": "PPERF_COUNTER_IDENTIFIER" + }, + { + "name": "cbCounters", + "type": "DWORD" + } + ], + "PerfDeleteCounters": [ + { + "name": "hQuery", + "type": "HANDLE" + }, + { + "name": "pCounters", + "type": "PPERF_COUNTER_IDENTIFIER" + }, + { + "name": "cbCounters", + "type": "DWORD" + } + ], + "SetServiceBits": [ + { + "name": "hServiceStatus", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "dwServiceBits", + "type": "DWORD" + }, + { + "name": "bSetBitsOn", + "type": "BOOL" + }, + { + "name": "bUpdateImmediately", + "type": "BOOL" + } + ], + "CreateProcessAsUserW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "lpProcessAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInheritHandles", + "type": "BOOL" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "SetThreadToken": [ + { + "name": "Thread", + "type": "PHANDLE" + }, + { + "name": "Token", + "type": "HANDLE" + } + ], + "OpenProcessToken": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "TokenHandle", + "type": "PHANDLE" + } + ], + "OpenThreadToken": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "OpenAsSelf", + "type": "BOOL" + }, + { + "name": "TokenHandle", + "type": "PHANDLE" + } + ], + "CreateProcessAsUserA": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "lpApplicationName", + "type": "LPCSTR" + }, + { + "name": "lpCommandLine", + "type": "LPSTR" + }, + { + "name": "lpProcessAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInheritHandles", + "type": "BOOL" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOA" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "QueryUsersOnEncryptedFile": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "pUsers", + "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" + } + ], + "QueryRecoveryAgentsOnEncryptedFile": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "pRecoveryAgents", + "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" + } + ], + "RemoveUsersFromEncryptedFile": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "pHashes", + "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" + } + ], + "AddUsersToEncryptedFile": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "pEncryptionCertificates", + "type": "PENCRYPTION_CERTIFICATE_LIST" + } + ], + "SetUserFileEncryptionKey": [ + { + "name": "pEncryptionCertificate", + "type": "PENCRYPTION_CERTIFICATE" + } + ], + "FreeEncryptionCertificateHashList": [ + { + "name": "pUsers", + "type": "PENCRYPTION_CERTIFICATE_HASH_LIST" + } + ], + "EncryptionDisable": [ + { + "name": "DirPath", + "type": "LPCWSTR" + }, + { + "name": "Disable", + "type": "BOOL" + } + ], + "DuplicateEncryptionInfoFile": [ + { + "name": "SrcFileName", + "type": "LPCWSTR" + }, + { + "name": "DstFileName", + "type": "LPCWSTR" + }, + { + "name": "dwCreationDistribution", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "OpenThreadWaitChainSession": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "callback", + "type": "PWAITCHAINCALLBACK" + } + ], + "CloseThreadWaitChainSession": [ + { + "name": "WctHandle", + "type": "HWCT" + } + ], + "GetThreadWaitChain": [ + { + "name": "WctHandle", + "type": "HWCT" + }, + { + "name": "Context", + "type": "DWORD_PTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ThreadId", + "type": "DWORD" + }, + { + "name": "NodeCount", + "type": "LPDWORD" + }, + { + "name": "NodeInfoArray", + "type": "PWAITCHAIN_NODE_INFO" + }, + { + "name": "IsCycle", + "type": "LPBOOL" + } + ], + "RegisterWaitChainCOMCallback": [ + { + "name": "CallStateCallback", + "type": "PCOGETCALLSTATE" + }, + { + "name": "ActivationStateCallback", + "type": "PCOGETACTIVATIONSTATE" + } + ], + "EventRegister": [ + { + "name": "ProviderId", + "type": "LPCGUID" + }, + { + "name": "EnableCallback", + "type": "PENABLECALLBACK" + }, + { + "name": "CallbackContext", + "type": "PVOID" + }, + { + "name": "RegHandle", + "type": "PREGHANDLE" + } + ], + "EventUnregister": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + } + ], + "EventSetInformation": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "InformationClass", + "type": "EVENT_INFO_CLASS" + }, + { + "name": "EventInformation", + "type": "PVOID" + }, + { + "name": "InformationLength", + "type": "ULONG" + } + ], + "EventEnabled": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + } + ], + "EventProviderEnabled": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "Level", + "type": "UCHAR" + }, + { + "name": "Keyword", + "type": "ULONGLONG" + } + ], + "EventWrite": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + }, + { + "name": "UserDataCount", + "type": "ULONG" + }, + { + "name": "UserData", + "type": "PEVENT_DATA_DESCRIPTOR" + } + ], + "EventWriteTransfer": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + }, + { + "name": "ActivityId", + "type": "LPCGUID" + }, + { + "name": "RelatedActivityId", + "type": "LPCGUID" + }, + { + "name": "UserDataCount", + "type": "ULONG" + }, + { + "name": "UserData", + "type": "PEVENT_DATA_DESCRIPTOR" + } + ], + "EventWriteEx": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "EventDescriptor", + "type": "PCEVENT_DESCRIPTOR" + }, + { + "name": "Filter", + "type": "ULONG64" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "ActivityId", + "type": "LPCGUID" + }, + { + "name": "RelatedActivityId", + "type": "LPCGUID" + }, + { + "name": "UserDataCount", + "type": "ULONG" + }, + { + "name": "UserData", + "type": "PEVENT_DATA_DESCRIPTOR" + } + ], + "EventWriteString": [ + { + "name": "RegHandle", + "type": "REGHANDLE" + }, + { + "name": "Level", + "type": "UCHAR" + }, + { + "name": "Keyword", + "type": "ULONGLONG" + }, + { + "name": "String", + "type": "PCWSTR" + } + ], + "EventActivityIdControl": [ + { + "name": "ControlCode", + "type": "ULONG" + }, + { + "name": "ActivityId", + "type": "LPGUID" + } + ], + "ChangeServiceConfigA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwStartType", + "type": "DWORD" + }, + { + "name": "dwErrorControl", + "type": "DWORD" + }, + { + "name": "lpBinaryPathName", + "type": "LPCSTR" + }, + { + "name": "lpLoadOrderGroup", + "type": "LPCSTR" + }, + { + "name": "lpdwTagId", + "type": "LPDWORD" + }, + { + "name": "lpDependencies", + "type": "LPCSTR" + }, + { + "name": "lpServiceStartName", + "type": "LPCSTR" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpDisplayName", + "type": "LPCSTR" + } + ], + "ChangeServiceConfigW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwStartType", + "type": "DWORD" + }, + { + "name": "dwErrorControl", + "type": "DWORD" + }, + { + "name": "lpBinaryPathName", + "type": "LPCWSTR" + }, + { + "name": "lpLoadOrderGroup", + "type": "LPCWSTR" + }, + { + "name": "lpdwTagId", + "type": "LPDWORD" + }, + { + "name": "lpDependencies", + "type": "LPCWSTR" + }, + { + "name": "lpServiceStartName", + "type": "LPCWSTR" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpDisplayName", + "type": "LPCWSTR" + } + ], + "ChangeServiceConfig2A": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPVOID" + } + ], + "ChangeServiceConfig2W": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpInfo", + "type": "LPVOID" + } + ], + "CloseServiceHandle": [ + { + "name": "hSCObject", + "type": "SC_HANDLE" + } + ], + "ControlService": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwControl", + "type": "DWORD" + }, + { + "name": "lpServiceStatus", + "type": "LPSERVICE_STATUS" + } + ], + "CreateServiceA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "lpDisplayName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwStartType", + "type": "DWORD" + }, + { + "name": "dwErrorControl", + "type": "DWORD" + }, + { + "name": "lpBinaryPathName", + "type": "LPCSTR" + }, + { + "name": "lpLoadOrderGroup", + "type": "LPCSTR" + }, + { + "name": "lpdwTagId", + "type": "LPDWORD" + }, + { + "name": "lpDependencies", + "type": "LPCSTR" + }, + { + "name": "lpServiceStartName", + "type": "LPCSTR" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + } + ], + "CreateServiceW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "lpDisplayName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwStartType", + "type": "DWORD" + }, + { + "name": "dwErrorControl", + "type": "DWORD" + }, + { + "name": "lpBinaryPathName", + "type": "LPCWSTR" + }, + { + "name": "lpLoadOrderGroup", + "type": "LPCWSTR" + }, + { + "name": "lpdwTagId", + "type": "LPDWORD" + }, + { + "name": "lpDependencies", + "type": "LPCWSTR" + }, + { + "name": "lpServiceStartName", + "type": "LPCWSTR" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + } + ], + "DeleteService": [ + { + "name": "hService", + "type": "SC_HANDLE" + } + ], + "EnumDependentServicesA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPENUM_SERVICE_STATUSA" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + } + ], + "EnumDependentServicesW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPENUM_SERVICE_STATUSW" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + } + ], + "EnumServicesStatusA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPENUM_SERVICE_STATUSA" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + }, + { + "name": "lpResumeHandle", + "type": "LPDWORD" + } + ], + "EnumServicesStatusW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPENUM_SERVICE_STATUSW" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + }, + { + "name": "lpResumeHandle", + "type": "LPDWORD" + } + ], + "EnumServicesStatusExA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "InfoLevel", + "type": "SC_ENUM_TYPE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + }, + { + "name": "lpResumeHandle", + "type": "LPDWORD" + }, + { + "name": "pszGroupName", + "type": "LPCSTR" + } + ], + "EnumServicesStatusExW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "InfoLevel", + "type": "SC_ENUM_TYPE" + }, + { + "name": "dwServiceType", + "type": "DWORD" + }, + { + "name": "dwServiceState", + "type": "DWORD" + }, + { + "name": "lpServices", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + }, + { + "name": "lpServicesReturned", + "type": "LPDWORD" + }, + { + "name": "lpResumeHandle", + "type": "LPDWORD" + }, + { + "name": "pszGroupName", + "type": "LPCWSTR" + } + ], + "GetServiceKeyNameA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpDisplayName", + "type": "LPCSTR" + }, + { + "name": "lpServiceName", + "type": "LPSTR" + }, + { + "name": "lpcchBuffer", + "type": "LPDWORD" + } + ], + "GetServiceKeyNameW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpDisplayName", + "type": "LPCWSTR" + }, + { + "name": "lpServiceName", + "type": "LPWSTR" + }, + { + "name": "lpcchBuffer", + "type": "LPDWORD" + } + ], + "GetServiceDisplayNameA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "lpDisplayName", + "type": "LPSTR" + }, + { + "name": "lpcchBuffer", + "type": "LPDWORD" + } + ], + "GetServiceDisplayNameW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "lpDisplayName", + "type": "LPWSTR" + }, + { + "name": "lpcchBuffer", + "type": "LPDWORD" + } + ], + "LockServiceDatabase": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + } + ], + "NotifyBootConfigStatus": [ + { + "name": "BootAcceptable", + "type": "BOOL" + } + ], + "OpenSCManagerA": [ + { + "name": "lpMachineName", + "type": "LPCSTR" + }, + { + "name": "lpDatabaseName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "OpenSCManagerW": [ + { + "name": "lpMachineName", + "type": "LPCWSTR" + }, + { + "name": "lpDatabaseName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "OpenServiceA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "OpenServiceW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "QueryServiceConfigA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceConfig", + "type": "LPQUERY_SERVICE_CONFIGA" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceConfigW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceConfig", + "type": "LPQUERY_SERVICE_CONFIGW" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceConfig2A": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceConfig2W": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceLockStatusA": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpLockStatus", + "type": "LPQUERY_SERVICE_LOCK_STATUSA" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceLockStatusW": [ + { + "name": "hSCManager", + "type": "SC_HANDLE" + }, + { + "name": "lpLockStatus", + "type": "LPQUERY_SERVICE_LOCK_STATUSW" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceObjectSecurity": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwSecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "lpSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "QueryServiceStatus": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "lpServiceStatus", + "type": "LPSERVICE_STATUS" + } + ], + "QueryServiceStatusEx": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "InfoLevel", + "type": "SC_STATUS_TYPE" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "RegisterServiceCtrlHandlerA": [ + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "lpHandlerProc", + "type": "LPHANDLER_FUNCTION" + } + ], + "RegisterServiceCtrlHandlerW": [ + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "lpHandlerProc", + "type": "LPHANDLER_FUNCTION" + } + ], + "RegisterServiceCtrlHandlerExA": [ + { + "name": "lpServiceName", + "type": "LPCSTR" + }, + { + "name": "lpHandlerProc", + "type": "LPHANDLER_FUNCTION_EX" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "RegisterServiceCtrlHandlerExW": [ + { + "name": "lpServiceName", + "type": "LPCWSTR" + }, + { + "name": "lpHandlerProc", + "type": "LPHANDLER_FUNCTION_EX" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "SetServiceObjectSecurity": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwSecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "lpSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "SetServiceStatus": [ + { + "name": "hServiceStatus", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "lpServiceStatus", + "type": "LPSERVICE_STATUS" + } + ], + "StartServiceCtrlDispatcherA": [ + { + "name": "lpServiceStartTable", + "type": "SERVICE_TABLE_ENTRYA" + } + ], + "StartServiceCtrlDispatcherW": [ + { + "name": "lpServiceStartTable", + "type": "SERVICE_TABLE_ENTRYW" + } + ], + "StartServiceA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwNumServiceArgs", + "type": "DWORD" + }, + { + "name": "lpServiceArgVectors", + "type": "LPCSTR" + } + ], + "StartServiceW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwNumServiceArgs", + "type": "DWORD" + }, + { + "name": "lpServiceArgVectors", + "type": "LPCWSTR" + } + ], + "UnlockServiceDatabase": [ + { + "name": "ScLock", + "type": "SC_LOCK" + } + ], + "NotifyServiceStatusChangeA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwNotifyMask", + "type": "DWORD" + }, + { + "name": "pNotifyBuffer", + "type": "PSERVICE_NOTIFYA" + } + ], + "NotifyServiceStatusChangeW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwNotifyMask", + "type": "DWORD" + }, + { + "name": "pNotifyBuffer", + "type": "PSERVICE_NOTIFYW" + } + ], + "ControlServiceExA": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwControl", + "type": "DWORD" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "pControlParams", + "type": "PVOID" + } + ], + "ControlServiceExW": [ + { + "name": "hService", + "type": "SC_HANDLE" + }, + { + "name": "dwControl", + "type": "DWORD" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "pControlParams", + "type": "PVOID" + } + ], + "QueryServiceDynamicInformation": [ + { + "name": "hServiceStatus", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "ppDynamicInfo", + "type": "PVOID" + } + ], + "QueryTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "QueryTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "UpdateTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "UpdateTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "FlushTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "FlushTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "EnableTrace": [ + { + "name": "Enable", + "type": "ULONG" + }, + { + "name": "EnableFlag", + "type": "ULONG" + }, + { + "name": "EnableLevel", + "type": "ULONG" + }, + { + "name": "ControlGuid", + "type": "LPCGUID" + }, + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + } + ], + "EnableTraceEx": [ + { + "name": "ProviderId", + "type": "LPCGUID" + }, + { + "name": "SourceId", + "type": "LPCGUID" + }, + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "IsEnabled", + "type": "ULONG" + }, + { + "name": "Level", + "type": "UCHAR" + }, + { + "name": "MatchAnyKeyword", + "type": "ULONGLONG" + }, + { + "name": "MatchAllKeyword", + "type": "ULONGLONG" + }, + { + "name": "EnableProperty", + "type": "ULONG" + }, + { + "name": "EnableFilterDesc", + "type": "PEVENT_FILTER_DESCRIPTOR" + } + ], + "EnumerateTraceGuidsEx": [ + { + "name": "TraceQueryInfoClass", + "type": "TRACE_QUERY_INFO_CLASS" + }, + { + "name": "InBuffer", + "type": "PVOID" + }, + { + "name": "InBufferSize", + "type": "ULONG" + }, + { + "name": "OutBuffer", + "type": "PVOID" + }, + { + "name": "OutBufferSize", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "CreateTraceInstanceId": [ + { + "name": "RegHandle", + "type": "HANDLE" + }, + { + "name": "InstInfo", + "type": "PEVENT_INSTANCE_INFO" + } + ], + "TraceEvent": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "EventTrace", + "type": "PEVENT_TRACE_HEADER" + } + ], + "TraceEventInstance": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "EventTrace", + "type": "PEVENT_INSTANCE_HEADER" + }, + { + "name": "InstInfo", + "type": "PEVENT_INSTANCE_INFO" + }, + { + "name": "ParentInstInfo", + "type": "PEVENT_INSTANCE_INFO" + } + ], + "EnumerateTraceGuids": [ + { + "name": "GuidPropertiesArray", + "type": "PTRACE_GUID_PROPERTIES" + }, + { + "name": "PropertyArrayCount", + "type": "ULONG" + }, + { + "name": "GuidCount", + "type": "PULONG" + } + ], + "UnregisterTraceGuids": [ + { + "name": "RegistrationHandle", + "type": "TRACEHANDLE" + } + ], + "GetTraceLoggerHandle": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "GetTraceEnableLevel": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + } + ], + "GetTraceEnableFlags": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + } + ], + "QueryTraceProcessingHandle": [ + { + "name": "ProcessingHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InformationClass", + "type": "ETW_PROCESS_HANDLE_INFO_TYPE" + }, + { + "name": "InBuffer", + "type": "PVOID" + }, + { + "name": "InBufferSize", + "type": "ULONG" + }, + { + "name": "OutBuffer", + "type": "PVOID" + }, + { + "name": "OutBufferSize", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "TraceMessage": [ + { + "name": "LoggerHandle", + "type": "TRACEHANDLE" + }, + { + "name": "MessageFlags", + "type": "ULONG" + }, + { + "name": "MessageGuid", + "type": "LPCGUID" + }, + { + "name": "MessageNumber", + "type": "USHORT" + } + ], + "TraceMessageVa": [ + { + "name": "LoggerHandle", + "type": "TRACEHANDLE" + }, + { + "name": "MessageFlags", + "type": "ULONG" + }, + { + "name": "MessageGuid", + "type": "LPCGUID" + }, + { + "name": "MessageNumber", + "type": "USHORT" + }, + { + "name": "MessageArgList", + "type": "va_list" + } + ], + "AccessCheck": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "PrivilegeSet", + "type": "PPRIVILEGE_SET" + }, + { + "name": "PrivilegeSetLength", + "type": "LPDWORD" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + } + ], + "AccessCheckByType": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "PrivilegeSet", + "type": "PPRIVILEGE_SET" + }, + { + "name": "PrivilegeSetLength", + "type": "LPDWORD" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultList": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "PrivilegeSet", + "type": "PPRIVILEGE_SET" + }, + { + "name": "PrivilegeSetLength", + "type": "LPDWORD" + }, + { + "name": "GrantedAccessList", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + } + ], + "AddAccessAllowedAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessAllowedAceEx": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessAllowedObjectAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "ObjectTypeGuid", + "type": "GUID" + }, + { + "name": "InheritedObjectTypeGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessDeniedAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessDeniedAceEx": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAccessDeniedObjectAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "ObjectTypeGuid", + "type": "GUID" + }, + { + "name": "InheritedObjectTypeGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AddAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "dwStartingAceIndex", + "type": "DWORD" + }, + { + "name": "pAceList", + "type": "LPVOID" + }, + { + "name": "nAceListLength", + "type": "DWORD" + } + ], + "AddAuditAccessAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "dwAccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "bAuditSuccess", + "type": "BOOL" + }, + { + "name": "bAuditFailure", + "type": "BOOL" + } + ], + "AddAuditAccessAceEx": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "dwAccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "bAuditSuccess", + "type": "BOOL" + }, + { + "name": "bAuditFailure", + "type": "BOOL" + } + ], + "AddAuditAccessObjectAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "ObjectTypeGuid", + "type": "GUID" + }, + { + "name": "InheritedObjectTypeGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "bAuditSuccess", + "type": "BOOL" + }, + { + "name": "bAuditFailure", + "type": "BOOL" + } + ], + "AddMandatoryAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "MandatoryPolicy", + "type": "DWORD" + }, + { + "name": "pLabelSid", + "type": "PSID" + } + ], + "AdjustTokenGroups": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "ResetToDefault", + "type": "BOOL" + }, + { + "name": "NewState", + "type": "PTOKEN_GROUPS" + }, + { + "name": "BufferLength", + "type": "DWORD" + }, + { + "name": "PreviousState", + "type": "PTOKEN_GROUPS" + }, + { + "name": "ReturnLength", + "type": "PDWORD" + } + ], + "AdjustTokenPrivileges": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "DisableAllPrivileges", + "type": "BOOL" + }, + { + "name": "NewState", + "type": "PTOKEN_PRIVILEGES" + }, + { + "name": "BufferLength", + "type": "DWORD" + }, + { + "name": "PreviousState", + "type": "PTOKEN_PRIVILEGES" + }, + { + "name": "ReturnLength", + "type": "PDWORD" + } + ], + "AllocateAndInitializeSid": [ + { + "name": "pIdentifierAuthority", + "type": "PSID_IDENTIFIER_AUTHORITY" + }, + { + "name": "nSubAuthorityCount", + "type": "BYTE" + }, + { + "name": "nSubAuthority0", + "type": "DWORD" + }, + { + "name": "nSubAuthority1", + "type": "DWORD" + }, + { + "name": "nSubAuthority2", + "type": "DWORD" + }, + { + "name": "nSubAuthority3", + "type": "DWORD" + }, + { + "name": "nSubAuthority4", + "type": "DWORD" + }, + { + "name": "nSubAuthority5", + "type": "DWORD" + }, + { + "name": "nSubAuthority6", + "type": "DWORD" + }, + { + "name": "nSubAuthority7", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "AllocateLocallyUniqueId": [ + { + "name": "Luid", + "type": "PLUID" + } + ], + "AreAllAccessesGranted": [ + { + "name": "GrantedAccess", + "type": "DWORD" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + } + ], + "AreAnyAccessesGranted": [ + { + "name": "GrantedAccess", + "type": "DWORD" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + } + ], + "CheckTokenMembership": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "SidToCheck", + "type": "PSID" + }, + { + "name": "IsMember", + "type": "PBOOL" + } + ], + "ConvertToAutoInheritPrivateObjectSecurity": [ + { + "name": "ParentDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "CurrentSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectType", + "type": "GUID" + }, + { + "name": "IsDirectoryObject", + "type": "BOOLEAN" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "CopySid": [ + { + "name": "nDestinationSidLength", + "type": "DWORD" + }, + { + "name": "pDestinationSid", + "type": "PSID" + }, + { + "name": "pSourceSid", + "type": "PSID" + } + ], + "CreatePrivateObjectSecurity": [ + { + "name": "ParentDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "CreatorDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "IsDirectoryObject", + "type": "BOOL" + }, + { + "name": "Token", + "type": "HANDLE" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "CreatePrivateObjectSecurityEx": [ + { + "name": "ParentDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "CreatorDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectType", + "type": "GUID" + }, + { + "name": "IsContainerObject", + "type": "BOOL" + }, + { + "name": "AutoInheritFlags", + "type": "ULONG" + }, + { + "name": "Token", + "type": "HANDLE" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "CreatePrivateObjectSecurityWithMultipleInheritance": [ + { + "name": "ParentDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "CreatorDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "NewDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectTypes", + "type": "GUID" + }, + { + "name": "GuidCount", + "type": "ULONG" + }, + { + "name": "IsContainerObject", + "type": "BOOL" + }, + { + "name": "AutoInheritFlags", + "type": "ULONG" + }, + { + "name": "Token", + "type": "HANDLE" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "CreateRestrictedToken": [ + { + "name": "ExistingTokenHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "DisableSidCount", + "type": "DWORD" + }, + { + "name": "SidsToDisable", + "type": "PSID_AND_ATTRIBUTES" + }, + { + "name": "DeletePrivilegeCount", + "type": "DWORD" + }, + { + "name": "PrivilegesToDelete", + "type": "PLUID_AND_ATTRIBUTES" + }, + { + "name": "RestrictedSidCount", + "type": "DWORD" + }, + { + "name": "SidsToRestrict", + "type": "PSID_AND_ATTRIBUTES" + }, + { + "name": "NewTokenHandle", + "type": "PHANDLE" + } + ], + "CreateWellKnownSid": [ + { + "name": "WellKnownSidType", + "type": "WELL_KNOWN_SID_TYPE" + }, + { + "name": "DomainSid", + "type": "PSID" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "cbSid", + "type": "DWORD" + } + ], + "EqualDomainSid": [ + { + "name": "pSid1", + "type": "PSID" + }, + { + "name": "pSid2", + "type": "PSID" + }, + { + "name": "pfEqual", + "type": "BOOL" + } + ], + "DeleteAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceIndex", + "type": "DWORD" + } + ], + "DestroyPrivateObjectSecurity": [ + { + "name": "ObjectDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "DuplicateToken": [ + { + "name": "ExistingTokenHandle", + "type": "HANDLE" + }, + { + "name": "ImpersonationLevel", + "type": "SECURITY_IMPERSONATION_LEVEL" + }, + { + "name": "DuplicateTokenHandle", + "type": "PHANDLE" + } + ], + "DuplicateTokenEx": [ + { + "name": "hExistingToken", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "lpTokenAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "ImpersonationLevel", + "type": "SECURITY_IMPERSONATION_LEVEL" + }, + { + "name": "TokenType", + "type": "TOKEN_TYPE" + }, + { + "name": "phNewToken", + "type": "PHANDLE" + } + ], + "EqualPrefixSid": [ + { + "name": "pSid1", + "type": "PSID" + }, + { + "name": "pSid2", + "type": "PSID" + } + ], + "EqualSid": [ + { + "name": "pSid1", + "type": "PSID" + }, + { + "name": "pSid2", + "type": "PSID" + } + ], + "FindFirstFreeAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pAce", + "type": "LPVOID" + } + ], + "FreeSid": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "GetAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceIndex", + "type": "DWORD" + }, + { + "name": "pAce", + "type": "LPVOID" + } + ], + "GetAclInformation": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pAclInformation", + "type": "LPVOID" + }, + { + "name": "nAclInformationLength", + "type": "DWORD" + }, + { + "name": "dwAclInformationClass", + "type": "ACL_INFORMATION_CLASS" + } + ], + "GetKernelObjectSecurity": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "GetLengthSid": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "GetPrivateObjectSecurity": [ + { + "name": "ObjectDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ResultantDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "DescriptorLength", + "type": "DWORD" + }, + { + "name": "ReturnLength", + "type": "PDWORD" + } + ], + "GetSecurityDescriptorControl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pControl", + "type": "PSECURITY_DESCRIPTOR_CONTROL" + }, + { + "name": "lpdwRevision", + "type": "LPDWORD" + } + ], + "GetSecurityDescriptorDacl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpbDaclPresent", + "type": "LPBOOL" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "lpbDaclDefaulted", + "type": "LPBOOL" + } + ], + "GetSecurityDescriptorGroup": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "lpbGroupDefaulted", + "type": "LPBOOL" + } + ], + "GetSecurityDescriptorLength": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetSecurityDescriptorOwner": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "lpbOwnerDefaulted", + "type": "LPBOOL" + } + ], + "GetSecurityDescriptorRMControl": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "RMControl", + "type": "PUCHAR" + } + ], + "GetSecurityDescriptorSacl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpbSaclPresent", + "type": "LPBOOL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "lpbSaclDefaulted", + "type": "LPBOOL" + } + ], + "GetSidIdentifierAuthority": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "GetSidLengthRequired": [ + { + "name": "nSubAuthorityCount", + "type": "UCHAR" + } + ], + "GetSidSubAuthority": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "nSubAuthority", + "type": "DWORD" + } + ], + "GetSidSubAuthorityCount": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "GetTokenInformation": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "TokenInformationClass", + "type": "TOKEN_INFORMATION_CLASS" + }, + { + "name": "TokenInformation", + "type": "LPVOID" + }, + { + "name": "TokenInformationLength", + "type": "DWORD" + }, + { + "name": "ReturnLength", + "type": "PDWORD" + } + ], + "GetWindowsAccountDomainSid": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pDomainSid", + "type": "PSID" + }, + { + "name": "cbDomainSid", + "type": "DWORD" + } + ], + "ImpersonateAnonymousToken": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + } + ], + "ImpersonateLoggedOnUser": [ + { + "name": "hToken", + "type": "HANDLE" + } + ], + "ImpersonateSelf": [ + { + "name": "ImpersonationLevel", + "type": "SECURITY_IMPERSONATION_LEVEL" + } + ], + "InitializeAcl": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "nAclLength", + "type": "DWORD" + }, + { + "name": "dwAclRevision", + "type": "DWORD" + } + ], + "InitializeSecurityDescriptor": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "dwRevision", + "type": "DWORD" + } + ], + "InitializeSid": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "pIdentifierAuthority", + "type": "PSID_IDENTIFIER_AUTHORITY" + }, + { + "name": "nSubAuthorityCount", + "type": "BYTE" + } + ], + "IsTokenRestricted": [ + { + "name": "TokenHandle", + "type": "HANDLE" + } + ], + "IsValidAcl": [ + { + "name": "pAcl", + "type": "PACL" + } + ], + "IsValidSecurityDescriptor": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "IsValidSid": [ + { + "name": "pSid", + "type": "PSID" + } + ], + "IsWellKnownSid": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "WellKnownSidType", + "type": "WELL_KNOWN_SID_TYPE" + } + ], + "MakeAbsoluteSD": [ + { + "name": "pSelfRelativeSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pAbsoluteSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpdwAbsoluteSecurityDescriptorSize", + "type": "LPDWORD" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "lpdwDaclSize", + "type": "LPDWORD" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "lpdwSaclSize", + "type": "LPDWORD" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "lpdwOwnerSize", + "type": "LPDWORD" + }, + { + "name": "pPrimaryGroup", + "type": "PSID" + }, + { + "name": "lpdwPrimaryGroupSize", + "type": "LPDWORD" + } + ], + "MakeSelfRelativeSD": [ + { + "name": "pAbsoluteSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pSelfRelativeSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + } + ], + "MapGenericMask": [ + { + "name": "AccessMask", + "type": "PDWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + } + ], + "PrivilegeCheck": [ + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "RequiredPrivileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "pfResult", + "type": "LPBOOL" + } + ], + "QuerySecurityAccessMask": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "DesiredAccess", + "type": "LPDWORD" + } + ], + "RevertToSelf": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetAclInformation": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pAclInformation", + "type": "LPVOID" + }, + { + "name": "nAclInformationLength", + "type": "DWORD" + }, + { + "name": "dwAclInformationClass", + "type": "ACL_INFORMATION_CLASS" + } + ], + "SetKernelObjectSecurity": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "SetPrivateObjectSecurity": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ModificationDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectsSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "Token", + "type": "HANDLE" + } + ], + "SetPrivateObjectSecurityEx": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ModificationDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ObjectsSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "AutoInheritFlags", + "type": "ULONG" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "Token", + "type": "HANDLE" + } + ], + "SetSecurityAccessMask": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "DesiredAccess", + "type": "LPDWORD" + } + ], + "SetSecurityDescriptorControl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ControlBitsOfInterest", + "type": "SECURITY_DESCRIPTOR_CONTROL" + }, + { + "name": "ControlBitsToSet", + "type": "SECURITY_DESCRIPTOR_CONTROL" + } + ], + "SetSecurityDescriptorDacl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "bDaclPresent", + "type": "BOOL" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "bDaclDefaulted", + "type": "BOOL" + } + ], + "SetSecurityDescriptorGroup": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "bGroupDefaulted", + "type": "BOOL" + } + ], + "SetSecurityDescriptorOwner": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "bOwnerDefaulted", + "type": "BOOL" + } + ], + "SetSecurityDescriptorRMControl": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "RMControl", + "type": "PUCHAR" + } + ], + "SetSecurityDescriptorSacl": [ + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "bSaclPresent", + "type": "BOOL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "bSaclDefaulted", + "type": "BOOL" + } + ], + "SetTokenInformation": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "TokenInformationClass", + "type": "TOKEN_INFORMATION_CLASS" + }, + { + "name": "TokenInformation", + "type": "LPVOID" + }, + { + "name": "TokenInformationLength", + "type": "DWORD" + } + ], + "CveEventWrite": [ + { + "name": "CveId", + "type": "PCWSTR" + }, + { + "name": "AdditionalDetails", + "type": "PCWSTR" + } + ], + "SaferGetPolicyInformation": [ + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "SaferPolicyInfoClass", + "type": "SAFER_POLICY_INFO_CLASS" + }, + { + "name": "InfoBufferSize", + "type": "DWORD" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "InfoBufferRetSize", + "type": "PDWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferSetPolicyInformation": [ + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "SaferPolicyInfoClass", + "type": "SAFER_POLICY_INFO_CLASS" + }, + { + "name": "InfoBufferSize", + "type": "DWORD" + }, + { + "name": "InfoBuffer", + "type": "PVOID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferCreateLevel": [ + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "dwLevelId", + "type": "DWORD" + }, + { + "name": "OpenFlags", + "type": "DWORD" + }, + { + "name": "pLevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferCloseLevel": [ + { + "name": "hLevelHandle", + "type": "SAFER_LEVEL_HANDLE" + } + ], + "SaferIdentifyLevel": [ + { + "name": "dwNumProperties", + "type": "DWORD" + }, + { + "name": "pCodeProperties", + "type": "PSAFER_CODE_PROPERTIES" + }, + { + "name": "pLevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferComputeTokenFromLevel": [ + { + "name": "LevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "InAccessToken", + "type": "HANDLE" + }, + { + "name": "OutAccessToken", + "type": "PHANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferGetLevelInformation": [ + { + "name": "LevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "dwInfoType", + "type": "SAFER_OBJECT_INFO_CLASS" + }, + { + "name": "lpQueryBuffer", + "type": "LPVOID" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + }, + { + "name": "lpdwOutBufferSize", + "type": "LPDWORD" + } + ], + "SaferSetLevelInformation": [ + { + "name": "LevelHandle", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "dwInfoType", + "type": "SAFER_OBJECT_INFO_CLASS" + }, + { + "name": "lpQueryBuffer", + "type": "LPVOID" + }, + { + "name": "dwInBufferSize", + "type": "DWORD" + } + ], + "SaferRecordEventLogEntry": [ + { + "name": "hLevel", + "type": "SAFER_LEVEL_HANDLE" + }, + { + "name": "szTargetPath", + "type": "LPCWSTR" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "SaferiIsExecutableFileType": [ + { + "name": "szFullPathname", + "type": "LPCWSTR" + }, + { + "name": "bFromShellExecute", + "type": "BOOLEAN" + } + ], + "RegCloseKey": [ + { + "name": "hKey", + "type": "HKEY" + } + ], + "RegOverridePredefKey": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "hNewHKey", + "type": "HKEY" + } + ], + "RegOpenUserClassesRoot": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenCurrentUser": [ + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegDisablePredefinedCache": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegDisablePredefinedCacheEx": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegConnectRegistryA": [ + { + "name": "lpMachineName", + "type": "LPCSTR" + }, + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegConnectRegistryW": [ + { + "name": "lpMachineName", + "type": "LPCWSTR" + }, + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegCreateKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegCreateKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegCreateKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "lpClass", + "type": "LPSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + } + ], + "RegCreateKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "lpClass", + "type": "LPWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + } + ], + "RegCreateKeyTransactedA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "lpClass", + "type": "LPSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParemeter", + "type": "PVOID" + } + ], + "RegCreateKeyTransactedW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "lpClass", + "type": "LPWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "lpdwDisposition", + "type": "LPDWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParemeter", + "type": "PVOID" + } + ], + "RegDeleteKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + } + ], + "RegDeleteKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + } + ], + "RegDeleteKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "RegDeleteKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "RegDeleteKeyTransactedA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParameter", + "type": "PVOID" + } + ], + "RegDeleteKeyTransactedW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParameter", + "type": "PVOID" + } + ], + "RegDisableReflectionKey": [ + { + "name": "hBase", + "type": "HKEY" + } + ], + "RegEnableReflectionKey": [ + { + "name": "hBase", + "type": "HKEY" + } + ], + "RegQueryReflectionKey": [ + { + "name": "hBase", + "type": "HKEY" + }, + { + "name": "bIsReflectionDisabled", + "type": "BOOL" + } + ], + "RegDeleteValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + } + ], + "RegDeleteValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + } + ], + "RegEnumKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPSTR" + }, + { + "name": "cchName", + "type": "DWORD" + } + ], + "RegEnumKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "DWORD" + } + ], + "RegEnumKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpClass", + "type": "LPSTR" + }, + { + "name": "lpcchClass", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "RegEnumKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "lpcchName", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpClass", + "type": "LPWSTR" + }, + { + "name": "lpcchClass", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "RegEnumValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpValueName", + "type": "LPSTR" + }, + { + "name": "lpcchValueName", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "RegEnumValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpValueName", + "type": "LPWSTR" + }, + { + "name": "lpcchValueName", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "RegFlushKey": [ + { + "name": "hKey", + "type": "HKEY" + } + ], + "RegGetKeySecurity": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + } + ], + "RegLoadKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpFile", + "type": "LPCSTR" + } + ], + "RegLoadKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + } + ], + "RegNotifyChangeKeyValue": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "fAsynchronous", + "type": "BOOL" + } + ], + "RegOpenKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "ulOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "ulOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + } + ], + "RegOpenKeyTransactedA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "ulOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParemeter", + "type": "PVOID" + } + ], + "RegOpenKeyTransactedW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "ulOptions", + "type": "DWORD" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pExtendedParemeter", + "type": "PVOID" + } + ], + "RegQueryInfoKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpClass", + "type": "LPSTR" + }, + { + "name": "lpcchClass", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpcSubKeys", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxClassLen", + "type": "LPDWORD" + }, + { + "name": "lpcValues", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueLen", + "type": "LPDWORD" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "RegQueryInfoKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpClass", + "type": "LPWSTR" + }, + { + "name": "lpcchClass", + "type": "LPDWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpcSubKeys", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxSubKeyLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxClassLen", + "type": "LPDWORD" + }, + { + "name": "lpcValues", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueNameLen", + "type": "LPDWORD" + }, + { + "name": "lpcbMaxValueLen", + "type": "LPDWORD" + }, + { + "name": "lpcbSecurityDescriptor", + "type": "LPDWORD" + }, + { + "name": "lpftLastWriteTime", + "type": "PFILETIME" + } + ], + "RegQueryValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpData", + "type": "LPSTR" + }, + { + "name": "lpcbData", + "type": "PLONG" + } + ], + "RegQueryValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpData", + "type": "LPWSTR" + }, + { + "name": "lpcbData", + "type": "PLONG" + } + ], + "RegQueryMultipleValuesA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "val_list", + "type": "PVALENTA" + }, + { + "name": "num_vals", + "type": "DWORD" + }, + { + "name": "lpValueBuf", + "type": "LPSTR" + }, + { + "name": "ldwTotsize", + "type": "LPDWORD" + } + ], + "RegQueryMultipleValuesW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "val_list", + "type": "PVALENTW" + }, + { + "name": "num_vals", + "type": "DWORD" + }, + { + "name": "lpValueBuf", + "type": "LPWSTR" + }, + { + "name": "ldwTotsize", + "type": "LPDWORD" + } + ], + "RegQueryValueExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "RegQueryValueExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpType", + "type": "LPDWORD" + }, + { + "name": "lpData", + "type": "LPBYTE" + }, + { + "name": "lpcbData", + "type": "LPDWORD" + } + ], + "RegReplaceKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpNewFile", + "type": "LPCSTR" + }, + { + "name": "lpOldFile", + "type": "LPCSTR" + } + ], + "RegReplaceKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpNewFile", + "type": "LPCWSTR" + }, + { + "name": "lpOldFile", + "type": "LPCWSTR" + } + ], + "RegRestoreKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "RegRestoreKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "RegSaveKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "RegSaveKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "RegSetKeySecurity": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "RegSetValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPCSTR" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegSetValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPCWSTR" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegSetValueExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegSetValueExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegUnLoadKeyA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + } + ], + "RegUnLoadKeyW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + } + ], + "RegDeleteKeyValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + } + ], + "RegDeleteKeyValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + } + ], + "RegSetKeyValueA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpValueName", + "type": "LPCSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegSetKeyValueW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpValueName", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "lpData", + "type": "LPCVOID" + }, + { + "name": "cbData", + "type": "DWORD" + } + ], + "RegDeleteTreeA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + } + ], + "RegDeleteTreeW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + } + ], + "RegCopyTreeA": [ + { + "name": "hKeySrc", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "hKeyDest", + "type": "HKEY" + } + ], + "RegGetValueA": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCSTR" + }, + { + "name": "lpValue", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "PVOID" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "RegGetValueW": [ + { + "name": "hkey", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwType", + "type": "LPDWORD" + }, + { + "name": "pvData", + "type": "PVOID" + }, + { + "name": "pcbData", + "type": "LPDWORD" + } + ], + "RegCopyTreeW": [ + { + "name": "hKeySrc", + "type": "HKEY" + }, + { + "name": "lpSubKey", + "type": "LPCWSTR" + }, + { + "name": "hKeyDest", + "type": "HKEY" + } + ], + "RegLoadMUIStringA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCSTR" + }, + { + "name": "pszOutBuf", + "type": "LPSTR" + }, + { + "name": "cbOutBuf", + "type": "DWORD" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pszDirectory", + "type": "LPCSTR" + } + ], + "RegLoadMUIStringW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "pszOutBuf", + "type": "LPWSTR" + }, + { + "name": "cbOutBuf", + "type": "DWORD" + }, + { + "name": "pcbData", + "type": "LPDWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pszDirectory", + "type": "LPCWSTR" + } + ], + "RegLoadAppKeyA": [ + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "RegLoadAppKeyW": [ + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "phkResult", + "type": "PHKEY" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "InitiateSystemShutdownA": [ + { + "name": "lpMachineName", + "type": "LPSTR" + }, + { + "name": "lpMessage", + "type": "LPSTR" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "bForceAppsClosed", + "type": "BOOL" + }, + { + "name": "bRebootAfterShutdown", + "type": "BOOL" + } + ], + "InitiateSystemShutdownW": [ + { + "name": "lpMachineName", + "type": "LPWSTR" + }, + { + "name": "lpMessage", + "type": "LPWSTR" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "bForceAppsClosed", + "type": "BOOL" + }, + { + "name": "bRebootAfterShutdown", + "type": "BOOL" + } + ], + "AbortSystemShutdownA": [ + { + "name": "lpMachineName", + "type": "LPSTR" + } + ], + "AbortSystemShutdownW": [ + { + "name": "lpMachineName", + "type": "LPWSTR" + } + ], + "InitiateSystemShutdownExA": [ + { + "name": "lpMachineName", + "type": "LPSTR" + }, + { + "name": "lpMessage", + "type": "LPSTR" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "bForceAppsClosed", + "type": "BOOL" + }, + { + "name": "bRebootAfterShutdown", + "type": "BOOL" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "InitiateSystemShutdownExW": [ + { + "name": "lpMachineName", + "type": "LPWSTR" + }, + { + "name": "lpMessage", + "type": "LPWSTR" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "bForceAppsClosed", + "type": "BOOL" + }, + { + "name": "bRebootAfterShutdown", + "type": "BOOL" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "InitiateShutdownA": [ + { + "name": "lpMachineName", + "type": "LPSTR" + }, + { + "name": "lpMessage", + "type": "LPSTR" + }, + { + "name": "dwGracePeriod", + "type": "DWORD" + }, + { + "name": "dwShutdownFlags", + "type": "DWORD" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "InitiateShutdownW": [ + { + "name": "lpMachineName", + "type": "LPWSTR" + }, + { + "name": "lpMessage", + "type": "LPWSTR" + }, + { + "name": "dwGracePeriod", + "type": "DWORD" + }, + { + "name": "dwShutdownFlags", + "type": "DWORD" + }, + { + "name": "dwReason", + "type": "DWORD" + } + ], + "RegSaveKeyExA": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "RegSaveKeyExW": [ + { + "name": "hKey", + "type": "HKEY" + }, + { + "name": "lpFile", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "InstallApplication": [ + { + "name": "pInstallInfo", + "type": "PINSTALLDATA" + } + ], + "UninstallApplication": [ + { + "name": "ProductCode", + "type": "LPWSTR" + }, + { + "name": "dwStatus", + "type": "DWORD" + } + ], + "GetManagedApplications": [ + { + "name": "pCategory", + "type": "GUID" + }, + { + "name": "dwQueryFlags", + "type": "DWORD" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "pdwApps", + "type": "LPDWORD" + }, + { + "name": "prgManagedApps", + "type": "PMANAGEDAPPLICATION" + } + ], + "GetLocalManagedApplications": [ + { + "name": "bUserApps", + "type": "BOOL" + }, + { + "name": "pdwApps", + "type": "LPDWORD" + }, + { + "name": "prgLocalApps", + "type": "PLOCALMANAGEDAPPLICATION" + } + ], + "GetManagedApplicationCategories": [ + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pAppCategory", + "type": "APPCATEGORYINFOLIST" + } + ], + "CryptAcquireContextA": [ + { + "name": "phProv", + "type": "HCRYPTPROV" + }, + { + "name": "szContainer", + "type": "LPCSTR" + }, + { + "name": "szProvider", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptAcquireContextW": [ + { + "name": "phProv", + "type": "HCRYPTPROV" + }, + { + "name": "szContainer", + "type": "LPCWSTR" + }, + { + "name": "szProvider", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptReleaseContext": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGenKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDeriveKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "hBaseData", + "type": "HCRYPTHASH" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDestroyKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + } + ], + "CryptSetKeyParam": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetKeyParam": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetHashParam": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetHashParam": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProvParam": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetProvParam": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwParam", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGenRandom": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwLen", + "type": "DWORD" + }, + { + "name": "pbBuffer", + "type": "BYTE" + } + ], + "CryptGetUserKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "phUserKey", + "type": "HCRYPTKEY" + } + ], + "CryptExportKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hExpKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwBlobType", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + } + ], + "CryptImportKey": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwDataLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptEncrypt": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "Final", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + }, + { + "name": "dwBufLen", + "type": "DWORD" + } + ], + "CryptDecrypt": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "Final", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataLen", + "type": "DWORD" + } + ], + "CryptCreateHash": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "Algid", + "type": "ALG_ID" + }, + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phHash", + "type": "HCRYPTHASH" + } + ], + "CryptHashData": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "dwDataLen", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptHashSessionKey": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptDestroyHash": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + } + ], + "CryptSignHashA": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "szDescription", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pdwSigLen", + "type": "DWORD" + } + ], + "CryptSignHashW": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "dwKeySpec", + "type": "DWORD" + }, + { + "name": "szDescription", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "pdwSigLen", + "type": "DWORD" + } + ], + "CryptVerifySignatureA": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "dwSigLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "szDescription", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptVerifySignatureW": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pbSignature", + "type": "BYTE" + }, + { + "name": "dwSigLen", + "type": "DWORD" + }, + { + "name": "hPubKey", + "type": "HCRYPTKEY" + }, + { + "name": "szDescription", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProviderA": [ + { + "name": "pszProvName", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + } + ], + "CryptSetProviderW": [ + { + "name": "pszProvName", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + } + ], + "CryptSetProviderExA": [ + { + "name": "pszProvName", + "type": "LPCSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptSetProviderExW": [ + { + "name": "pszProvName", + "type": "LPCWSTR" + }, + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptGetDefaultProviderA": [ + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszProvName", + "type": "LPSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptGetDefaultProviderW": [ + { + "name": "dwProvType", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszProvName", + "type": "LPWSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptEnumProviderTypesA": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szTypeName", + "type": "LPSTR" + }, + { + "name": "pcbTypeName", + "type": "DWORD" + } + ], + "CryptEnumProviderTypesW": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szTypeName", + "type": "LPWSTR" + }, + { + "name": "pcbTypeName", + "type": "DWORD" + } + ], + "CryptEnumProvidersA": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szProvName", + "type": "LPSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptEnumProvidersW": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pdwProvType", + "type": "DWORD" + }, + { + "name": "szProvName", + "type": "LPWSTR" + }, + { + "name": "pcbProvName", + "type": "DWORD" + } + ], + "CryptContextAddRef": [ + { + "name": "hProv", + "type": "HCRYPTPROV" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CryptDuplicateKey": [ + { + "name": "hKey", + "type": "HCRYPTKEY" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phKey", + "type": "HCRYPTKEY" + } + ], + "CryptDuplicateHash": [ + { + "name": "hHash", + "type": "HCRYPTHASH" + }, + { + "name": "pdwReserved", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phHash", + "type": "HCRYPTHASH" + } + ], + "CredWriteW": [ + { + "name": "Credential", + "type": "PCREDENTIALW" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredWriteA": [ + { + "name": "Credential", + "type": "PCREDENTIALA" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredReadW": [ + { + "name": "TargetName", + "type": "LPCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + } + ], + "CredReadA": [ + { + "name": "TargetName", + "type": "LPCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + } + ], + "CredEnumerateW": [ + { + "name": "Filter", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Count", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + } + ], + "CredEnumerateA": [ + { + "name": "Filter", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Count", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + } + ], + "CredWriteDomainCredentialsW": [ + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONW" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredWriteDomainCredentialsA": [ + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONA" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredReadDomainCredentialsW": [ + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONW" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Count", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + } + ], + "CredReadDomainCredentialsA": [ + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONA" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Count", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + } + ], + "CredDeleteW": [ + { + "name": "TargetName", + "type": "LPCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredDeleteA": [ + { + "name": "TargetName", + "type": "LPCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredRenameW": [ + { + "name": "OldTargetName", + "type": "LPCWSTR" + }, + { + "name": "NewTargetName", + "type": "LPCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredRenameA": [ + { + "name": "OldTargetName", + "type": "LPCSTR" + }, + { + "name": "NewTargetName", + "type": "LPCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "CredGetTargetInfoW": [ + { + "name": "TargetName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONW" + } + ], + "CredGetTargetInfoA": [ + { + "name": "TargetName", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "TargetInfo", + "type": "PCREDENTIAL_TARGET_INFORMATIONA" + } + ], + "CredMarshalCredentialW": [ + { + "name": "CredType", + "type": "CRED_MARSHAL_TYPE" + }, + { + "name": "Credential", + "type": "PVOID" + }, + { + "name": "MarshaledCredential", + "type": "LPWSTR" + } + ], + "CredMarshalCredentialA": [ + { + "name": "CredType", + "type": "CRED_MARSHAL_TYPE" + }, + { + "name": "Credential", + "type": "PVOID" + }, + { + "name": "MarshaledCredential", + "type": "LPSTR" + } + ], + "CredUnmarshalCredentialW": [ + { + "name": "MarshaledCredential", + "type": "LPCWSTR" + }, + { + "name": "CredType", + "type": "PCRED_MARSHAL_TYPE" + }, + { + "name": "Credential", + "type": "PVOID" + } + ], + "CredUnmarshalCredentialA": [ + { + "name": "MarshaledCredential", + "type": "LPCSTR" + }, + { + "name": "CredType", + "type": "PCRED_MARSHAL_TYPE" + }, + { + "name": "Credential", + "type": "PVOID" + } + ], + "CredIsMarshaledCredentialW": [ + { + "name": "MarshaledCredential", + "type": "LPCWSTR" + } + ], + "CredIsMarshaledCredentialA": [ + { + "name": "MarshaledCredential", + "type": "LPCSTR" + } + ], + "CredProtectW": [ + { + "name": "fAsSelf", + "type": "BOOL" + }, + { + "name": "pszCredentials", + "type": "LPWSTR" + }, + { + "name": "cchCredentials", + "type": "DWORD" + }, + { + "name": "pszProtectedCredentials", + "type": "LPWSTR" + }, + { + "name": "pcchMaxChars", + "type": "DWORD" + }, + { + "name": "ProtectionType", + "type": "CRED_PROTECTION_TYPE" + } + ], + "CredProtectA": [ + { + "name": "fAsSelf", + "type": "BOOL" + }, + { + "name": "pszCredentials", + "type": "LPSTR" + }, + { + "name": "cchCredentials", + "type": "DWORD" + }, + { + "name": "pszProtectedCredentials", + "type": "LPSTR" + }, + { + "name": "pcchMaxChars", + "type": "DWORD" + }, + { + "name": "ProtectionType", + "type": "CRED_PROTECTION_TYPE" + } + ], + "CredUnprotectW": [ + { + "name": "fAsSelf", + "type": "BOOL" + }, + { + "name": "pszProtectedCredentials", + "type": "LPWSTR" + }, + { + "name": "cchProtectedCredentials", + "type": "DWORD" + }, + { + "name": "pszCredentials", + "type": "LPWSTR" + }, + { + "name": "pcchMaxChars", + "type": "DWORD" + } + ], + "CredUnprotectA": [ + { + "name": "fAsSelf", + "type": "BOOL" + }, + { + "name": "pszProtectedCredentials", + "type": "LPSTR" + }, + { + "name": "cchProtectedCredentials", + "type": "DWORD" + }, + { + "name": "pszCredentials", + "type": "LPSTR" + }, + { + "name": "pcchMaxChars", + "type": "DWORD" + } + ], + "CredIsProtectedW": [ + { + "name": "pszProtectedCredentials", + "type": "LPWSTR" + }, + { + "name": "pProtectionType", + "type": "CRED_PROTECTION_TYPE" + } + ], + "CredIsProtectedA": [ + { + "name": "pszProtectedCredentials", + "type": "LPSTR" + }, + { + "name": "pProtectionType", + "type": "CRED_PROTECTION_TYPE" + } + ], + "CredFindBestCredentialW": [ + { + "name": "TargetName", + "type": "LPCWSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALW" + } + ], + "CredFindBestCredentialA": [ + { + "name": "TargetName", + "type": "LPCSTR" + }, + { + "name": "Type", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Credential", + "type": "PCREDENTIALA" + } + ], + "CredGetSessionTypes": [ + { + "name": "MaximumPersistCount", + "type": "DWORD" + }, + { + "name": "MaximumPersist", + "type": "LPDWORD" + } + ], + "CredFree": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "ConvertSidToStringSidA": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "StringSid", + "type": "LPSTR" + } + ], + "ConvertSidToStringSidW": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "StringSid", + "type": "LPWSTR" + } + ], + "ConvertStringSidToSidA": [ + { + "name": "StringSid", + "type": "LPCSTR" + }, + { + "name": "Sid", + "type": "PSID" + } + ], + "ConvertStringSidToSidW": [ + { + "name": "StringSid", + "type": "LPCWSTR" + }, + { + "name": "Sid", + "type": "PSID" + } + ], + "ConvertStringSecurityDescriptorToSecurityDescriptorA": [ + { + "name": "StringSecurityDescriptor", + "type": "LPCSTR" + }, + { + "name": "StringSDRevision", + "type": "DWORD" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "SecurityDescriptorSize", + "type": "PULONG" + } + ], + "ConvertStringSecurityDescriptorToSecurityDescriptorW": [ + { + "name": "StringSecurityDescriptor", + "type": "LPCWSTR" + }, + { + "name": "StringSDRevision", + "type": "DWORD" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "SecurityDescriptorSize", + "type": "PULONG" + } + ], + "ConvertSecurityDescriptorToStringSecurityDescriptorA": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "RequestedStringSDRevision", + "type": "DWORD" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "StringSecurityDescriptor", + "type": "LPSTR" + }, + { + "name": "StringSecurityDescriptorLen", + "type": "PULONG" + } + ], + "ConvertSecurityDescriptorToStringSecurityDescriptorW": [ + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "RequestedStringSDRevision", + "type": "DWORD" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "StringSecurityDescriptor", + "type": "LPWSTR" + }, + { + "name": "StringSecurityDescriptorLen", + "type": "PULONG" + } + ], + "ImpersonateNamedPipeClient": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + } + ], + "MSChapSrvChangePassword": [ + { + "name": "ServerName", + "type": "PWSTR" + }, + { + "name": "UserName", + "type": "PWSTR" + }, + { + "name": "LmOldPresent", + "type": "BOOLEAN" + }, + { + "name": "LmOldOwfPassword", + "type": "PLM_OWF_PASSWORD" + }, + { + "name": "LmNewOwfPassword", + "type": "PLM_OWF_PASSWORD" + }, + { + "name": "NtOldOwfPassword", + "type": "PNT_OWF_PASSWORD" + }, + { + "name": "NtNewOwfPassword", + "type": "PNT_OWF_PASSWORD" + } + ], + "MSChapSrvChangePassword2": [ + { + "name": "ServerName", + "type": "PWSTR" + }, + { + "name": "UserName", + "type": "PWSTR" + }, + { + "name": "NewPasswordEncryptedWithOldNt", + "type": "PSAMPR_ENCRYPTED_USER_PASSWORD" + }, + { + "name": "OldNtOwfPasswordEncryptedWithNewNt", + "type": "PENCRYPTED_NT_OWF_PASSWORD" + }, + { + "name": "LmPresent", + "type": "BOOLEAN" + }, + { + "name": "NewPasswordEncryptedWithOldLm", + "type": "PSAMPR_ENCRYPTED_USER_PASSWORD" + }, + { + "name": "OldLmOwfPasswordEncryptedWithNewLmOrNt", + "type": "PENCRYPTED_LM_OWF_PASSWORD" + } + ], + "AccessCheckAndAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPWSTR" + }, + { + "name": "ObjectName", + "type": "LPWSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeAndAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPCWSTR" + }, + { + "name": "ObjectName", + "type": "LPCWSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultListAndAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPCWSTR" + }, + { + "name": "ObjectName", + "type": "LPCWSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccessList", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultListAndAuditAlarmByHandleW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "ObjectTypeName", + "type": "LPCWSTR" + }, + { + "name": "ObjectName", + "type": "LPCWSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccessList", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "GetFileSecurityW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "ObjectCloseAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "GenerateOnClose", + "type": "BOOL" + } + ], + "ObjectDeleteAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "GenerateOnClose", + "type": "BOOL" + } + ], + "ObjectOpenAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPWSTR" + }, + { + "name": "ObjectName", + "type": "LPWSTR" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GrantedAccess", + "type": "DWORD" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "AccessGranted", + "type": "BOOL" + }, + { + "name": "GenerateOnClose", + "type": "LPBOOL" + } + ], + "ObjectPrivilegeAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "AccessGranted", + "type": "BOOL" + } + ], + "PrivilegedServiceAuditAlarmW": [ + { + "name": "SubsystemName", + "type": "LPCWSTR" + }, + { + "name": "ServiceName", + "type": "LPCWSTR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "AccessGranted", + "type": "BOOL" + } + ], + "SetFileSecurityW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "EncryptFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "EncryptFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "DecryptFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "DecryptFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "FileEncryptionStatusA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpStatus", + "type": "LPDWORD" + } + ], + "FileEncryptionStatusW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpStatus", + "type": "LPDWORD" + } + ], + "OpenEncryptedFileRawA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "OpenEncryptedFileRawW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "ReadEncryptedFileRaw": [ + { + "name": "pfExportCallback", + "type": "PFE_EXPORT_FUNC" + }, + { + "name": "pvCallbackContext", + "type": "PVOID" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "WriteEncryptedFileRaw": [ + { + "name": "pfImportCallback", + "type": "PFE_IMPORT_FUNC" + }, + { + "name": "pvCallbackContext", + "type": "PVOID" + }, + { + "name": "pvContext", + "type": "PVOID" + } + ], + "CloseEncryptedFileRaw": [ + { + "name": "pvContext", + "type": "PVOID" + } + ], + "IsTextUnicode": [ + { + "name": "lpv", + "type": "void" + }, + { + "name": "iSize", + "type": "int" + }, + { + "name": "lpiResult", + "type": "LPINT" + } + ], + "ClearEventLogA": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "lpBackupFileName", + "type": "LPCSTR" + } + ], + "ClearEventLogW": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "lpBackupFileName", + "type": "LPCWSTR" + } + ], + "BackupEventLogA": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "lpBackupFileName", + "type": "LPCSTR" + } + ], + "BackupEventLogW": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "lpBackupFileName", + "type": "LPCWSTR" + } + ], + "CloseEventLog": [ + { + "name": "hEventLog", + "type": "HANDLE" + } + ], + "DeregisterEventSource": [ + { + "name": "hEventLog", + "type": "HANDLE" + } + ], + "NotifyChangeEventLog": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "GetNumberOfEventLogRecords": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "NumberOfRecords", + "type": "PDWORD" + } + ], + "GetOldestEventLogRecord": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "OldestRecord", + "type": "PDWORD" + } + ], + "OpenEventLogA": [ + { + "name": "lpUNCServerName", + "type": "LPCSTR" + }, + { + "name": "lpSourceName", + "type": "LPCSTR" + } + ], + "OpenEventLogW": [ + { + "name": "lpUNCServerName", + "type": "LPCWSTR" + }, + { + "name": "lpSourceName", + "type": "LPCWSTR" + } + ], + "RegisterEventSourceA": [ + { + "name": "lpUNCServerName", + "type": "LPCSTR" + }, + { + "name": "lpSourceName", + "type": "LPCSTR" + } + ], + "RegisterEventSourceW": [ + { + "name": "lpUNCServerName", + "type": "LPCWSTR" + }, + { + "name": "lpSourceName", + "type": "LPCWSTR" + } + ], + "OpenBackupEventLogA": [ + { + "name": "lpUNCServerName", + "type": "LPCSTR" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "OpenBackupEventLogW": [ + { + "name": "lpUNCServerName", + "type": "LPCWSTR" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "ReadEventLogA": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "dwReadFlags", + "type": "DWORD" + }, + { + "name": "dwRecordOffset", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "pnBytesRead", + "type": "DWORD" + }, + { + "name": "pnMinNumberOfBytesNeeded", + "type": "DWORD" + } + ], + "ReadEventLogW": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "dwReadFlags", + "type": "DWORD" + }, + { + "name": "dwRecordOffset", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "pnBytesRead", + "type": "DWORD" + }, + { + "name": "pnMinNumberOfBytesNeeded", + "type": "DWORD" + } + ], + "ReportEventA": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "wCategory", + "type": "WORD" + }, + { + "name": "dwEventID", + "type": "DWORD" + }, + { + "name": "lpUserSid", + "type": "PSID" + }, + { + "name": "wNumStrings", + "type": "WORD" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "lpStrings", + "type": "LPCSTR" + }, + { + "name": "lpRawData", + "type": "LPVOID" + } + ], + "ReportEventW": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "wType", + "type": "WORD" + }, + { + "name": "wCategory", + "type": "WORD" + }, + { + "name": "dwEventID", + "type": "DWORD" + }, + { + "name": "lpUserSid", + "type": "PSID" + }, + { + "name": "wNumStrings", + "type": "WORD" + }, + { + "name": "dwDataSize", + "type": "DWORD" + }, + { + "name": "lpStrings", + "type": "LPCWSTR" + }, + { + "name": "lpRawData", + "type": "LPVOID" + } + ], + "GetEventLogInformation": [ + { + "name": "hEventLog", + "type": "HANDLE" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbBufSize", + "type": "DWORD" + }, + { + "name": "pcbBytesNeeded", + "type": "LPDWORD" + } + ], + "OperationStart": [ + { + "name": "OperationStartParams", + "type": "OPERATION_START_PARAMETERS" + } + ], + "OperationEnd": [ + { + "name": "OperationEndParams", + "type": "OPERATION_END_PARAMETERS" + } + ], + "AccessCheckAndAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPSTR" + }, + { + "name": "ObjectName", + "type": "LPSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeAndAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPCSTR" + }, + { + "name": "ObjectName", + "type": "LPCSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatus", + "type": "LPBOOL" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultListAndAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPCSTR" + }, + { + "name": "ObjectName", + "type": "LPCSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "AccessCheckByTypeResultListAndAuditAlarmByHandleA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "ObjectTypeName", + "type": "LPCSTR" + }, + { + "name": "ObjectName", + "type": "LPCSTR" + }, + { + "name": "SecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "PrincipalSelfSid", + "type": "PSID" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "AuditType", + "type": "AUDIT_EVENT_TYPE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "ObjectTypeList", + "type": "POBJECT_TYPE_LIST" + }, + { + "name": "ObjectTypeListLength", + "type": "DWORD" + }, + { + "name": "GenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "GrantedAccess", + "type": "LPDWORD" + }, + { + "name": "AccessStatusList", + "type": "LPDWORD" + }, + { + "name": "pfGenerateOnClose", + "type": "LPBOOL" + } + ], + "ObjectOpenAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ObjectTypeName", + "type": "LPSTR" + }, + { + "name": "ObjectName", + "type": "LPSTR" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "GrantedAccess", + "type": "DWORD" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "ObjectCreation", + "type": "BOOL" + }, + { + "name": "AccessGranted", + "type": "BOOL" + }, + { + "name": "GenerateOnClose", + "type": "LPBOOL" + } + ], + "ObjectPrivilegeAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "DWORD" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "AccessGranted", + "type": "BOOL" + } + ], + "ObjectCloseAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "GenerateOnClose", + "type": "BOOL" + } + ], + "ObjectDeleteAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "HandleId", + "type": "LPVOID" + }, + { + "name": "GenerateOnClose", + "type": "BOOL" + } + ], + "PrivilegedServiceAuditAlarmA": [ + { + "name": "SubsystemName", + "type": "LPCSTR" + }, + { + "name": "ServiceName", + "type": "LPCSTR" + }, + { + "name": "ClientToken", + "type": "HANDLE" + }, + { + "name": "Privileges", + "type": "PPRIVILEGE_SET" + }, + { + "name": "AccessGranted", + "type": "BOOL" + } + ], + "AddConditionalAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AceType", + "type": "UCHAR" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "ConditionStr", + "type": "PWCHAR" + }, + { + "name": "ReturnLength", + "type": "DWORD" + } + ], + "SetFileSecurityA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetFileSecurityA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "RequestedInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "nLength", + "type": "DWORD" + }, + { + "name": "lpnLengthNeeded", + "type": "LPDWORD" + } + ], + "LookupAccountSidA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Name", + "type": "LPSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountSidW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Name", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPWSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountNameA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "lpAccountName", + "type": "LPCSTR" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "cbSid", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountNameW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "lpAccountName", + "type": "LPCWSTR" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "cbSid", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPWSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountSidLocalA": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Name", + "type": "LPSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupAccountSidLocalW": [ + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Name", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + }, + { + "name": "ReferencedDomainName", + "type": "LPWSTR" + }, + { + "name": "cchReferencedDomainName", + "type": "LPDWORD" + }, + { + "name": "peUse", + "type": "PSID_NAME_USE" + } + ], + "LookupPrivilegeValueA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpLuid", + "type": "PLUID" + } + ], + "LookupPrivilegeValueW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpLuid", + "type": "PLUID" + } + ], + "LookupPrivilegeNameA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "lpLuid", + "type": "PLUID" + }, + { + "name": "lpName", + "type": "LPSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + } + ], + "LookupPrivilegeNameW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "lpLuid", + "type": "PLUID" + }, + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "LPDWORD" + } + ], + "LookupPrivilegeDisplayNameA": [ + { + "name": "lpSystemName", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpDisplayName", + "type": "LPSTR" + }, + { + "name": "cchDisplayName", + "type": "LPDWORD" + }, + { + "name": "lpLanguageId", + "type": "LPDWORD" + } + ], + "LookupPrivilegeDisplayNameW": [ + { + "name": "lpSystemName", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpDisplayName", + "type": "LPWSTR" + }, + { + "name": "cchDisplayName", + "type": "LPDWORD" + }, + { + "name": "lpLanguageId", + "type": "LPDWORD" + } + ], + "GetUserNameA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "pcbBuffer", + "type": "LPDWORD" + } + ], + "GetUserNameW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "pcbBuffer", + "type": "LPDWORD" + } + ], + "LogonUserA": [ + { + "name": "lpszUsername", + "type": "LPCSTR" + }, + { + "name": "lpszDomain", + "type": "LPCSTR" + }, + { + "name": "lpszPassword", + "type": "LPCSTR" + }, + { + "name": "dwLogonType", + "type": "DWORD" + }, + { + "name": "dwLogonProvider", + "type": "DWORD" + }, + { + "name": "phToken", + "type": "PHANDLE" + } + ], + "LogonUserW": [ + { + "name": "lpszUsername", + "type": "LPCWSTR" + }, + { + "name": "lpszDomain", + "type": "LPCWSTR" + }, + { + "name": "lpszPassword", + "type": "LPCWSTR" + }, + { + "name": "dwLogonType", + "type": "DWORD" + }, + { + "name": "dwLogonProvider", + "type": "DWORD" + }, + { + "name": "phToken", + "type": "PHANDLE" + } + ], + "LogonUserExA": [ + { + "name": "lpszUsername", + "type": "LPCSTR" + }, + { + "name": "lpszDomain", + "type": "LPCSTR" + }, + { + "name": "lpszPassword", + "type": "LPCSTR" + }, + { + "name": "dwLogonType", + "type": "DWORD" + }, + { + "name": "dwLogonProvider", + "type": "DWORD" + }, + { + "name": "phToken", + "type": "PHANDLE" + }, + { + "name": "ppLogonSid", + "type": "PSID" + }, + { + "name": "ppProfileBuffer", + "type": "PVOID" + }, + { + "name": "pdwProfileLength", + "type": "LPDWORD" + }, + { + "name": "pQuotaLimits", + "type": "PQUOTA_LIMITS" + } + ], + "LogonUserExW": [ + { + "name": "lpszUsername", + "type": "LPCWSTR" + }, + { + "name": "lpszDomain", + "type": "LPCWSTR" + }, + { + "name": "lpszPassword", + "type": "LPCWSTR" + }, + { + "name": "dwLogonType", + "type": "DWORD" + }, + { + "name": "dwLogonProvider", + "type": "DWORD" + }, + { + "name": "phToken", + "type": "PHANDLE" + }, + { + "name": "ppLogonSid", + "type": "PSID" + }, + { + "name": "ppProfileBuffer", + "type": "PVOID" + }, + { + "name": "pdwProfileLength", + "type": "LPDWORD" + }, + { + "name": "pQuotaLimits", + "type": "PQUOTA_LIMITS" + } + ], + "CreateProcessWithLogonW": [ + { + "name": "lpUsername", + "type": "LPCWSTR" + }, + { + "name": "lpDomain", + "type": "LPCWSTR" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "dwLogonFlags", + "type": "DWORD" + }, + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "CreateProcessWithTokenW": [ + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwLogonFlags", + "type": "DWORD" + }, + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "GetCurrentHwProfileA": [ + { + "name": "lpHwProfileInfo", + "type": "LPHW_PROFILE_INFOA" + } + ], + "GetCurrentHwProfileW": [ + { + "name": "lpHwProfileInfo", + "type": "LPHW_PROFILE_INFOW" + } + ], + "SetEntriesInAclA": [ + { + "name": "cCountOfExplicitEntries", + "type": "ULONG" + }, + { + "name": "pListOfExplicitEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "OldAcl", + "type": "PACL" + }, + { + "name": "NewAcl", + "type": "PACL" + } + ], + "SetEntriesInAclW": [ + { + "name": "cCountOfExplicitEntries", + "type": "ULONG" + }, + { + "name": "pListOfExplicitEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "OldAcl", + "type": "PACL" + }, + { + "name": "NewAcl", + "type": "PACL" + } + ], + "GetExplicitEntriesFromAclA": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pcCountOfExplicitEntries", + "type": "PULONG" + }, + { + "name": "pListOfExplicitEntries", + "type": "PEXPLICIT_ACCESS_A" + } + ], + "GetExplicitEntriesFromAclW": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pcCountOfExplicitEntries", + "type": "PULONG" + }, + { + "name": "pListOfExplicitEntries", + "type": "PEXPLICIT_ACCESS_W" + } + ], + "GetEffectiveRightsFromAclA": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pAccessRights", + "type": "PACCESS_MASK" + } + ], + "GetEffectiveRightsFromAclW": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pAccessRights", + "type": "PACCESS_MASK" + } + ], + "GetAuditedPermissionsFromAclA": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pSuccessfulAuditedRights", + "type": "PACCESS_MASK" + }, + { + "name": "pFailedAuditRights", + "type": "PACCESS_MASK" + } + ], + "GetAuditedPermissionsFromAclW": [ + { + "name": "pacl", + "type": "PACL" + }, + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pSuccessfulAuditedRights", + "type": "PACCESS_MASK" + }, + { + "name": "pFailedAuditRights", + "type": "PACCESS_MASK" + } + ], + "GetNamedSecurityInfoA": [ + { + "name": "pObjectName", + "type": "LPCSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ppsidOwner", + "type": "PSID" + }, + { + "name": "ppsidGroup", + "type": "PSID" + }, + { + "name": "ppDacl", + "type": "PACL" + }, + { + "name": "ppSacl", + "type": "PACL" + }, + { + "name": "ppSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetNamedSecurityInfoW": [ + { + "name": "pObjectName", + "type": "LPCWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ppsidOwner", + "type": "PSID" + }, + { + "name": "ppsidGroup", + "type": "PSID" + }, + { + "name": "ppDacl", + "type": "PACL" + }, + { + "name": "ppSacl", + "type": "PACL" + }, + { + "name": "ppSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "GetSecurityInfo": [ + { + "name": "handle", + "type": "HANDLE" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ppsidOwner", + "type": "PSID" + }, + { + "name": "ppsidGroup", + "type": "PSID" + }, + { + "name": "ppDacl", + "type": "PACL" + }, + { + "name": "ppSacl", + "type": "PACL" + }, + { + "name": "ppSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "SetNamedSecurityInfoA": [ + { + "name": "pObjectName", + "type": "LPSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "psidOwner", + "type": "PSID" + }, + { + "name": "psidGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + } + ], + "SetNamedSecurityInfoW": [ + { + "name": "pObjectName", + "type": "LPWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "psidOwner", + "type": "PSID" + }, + { + "name": "psidGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + } + ], + "SetSecurityInfo": [ + { + "name": "handle", + "type": "HANDLE" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "psidOwner", + "type": "PSID" + }, + { + "name": "psidGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + } + ], + "GetInheritanceSourceA": [ + { + "name": "pObjectName", + "type": "LPSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "Container", + "type": "BOOL" + }, + { + "name": "pObjectClassGuids", + "type": "GUID" + }, + { + "name": "GuidCount", + "type": "DWORD" + }, + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pfnArray", + "type": "PFN_OBJECT_MGR_FUNCTS" + }, + { + "name": "pGenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "pInheritArray", + "type": "PINHERITED_FROMA" + } + ], + "GetInheritanceSourceW": [ + { + "name": "pObjectName", + "type": "LPWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "Container", + "type": "BOOL" + }, + { + "name": "pObjectClassGuids", + "type": "GUID" + }, + { + "name": "GuidCount", + "type": "DWORD" + }, + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "pfnArray", + "type": "PFN_OBJECT_MGR_FUNCTS" + }, + { + "name": "pGenericMapping", + "type": "PGENERIC_MAPPING" + }, + { + "name": "pInheritArray", + "type": "PINHERITED_FROMW" + } + ], + "FreeInheritedFromArray": [ + { + "name": "pInheritArray", + "type": "PINHERITED_FROMW" + }, + { + "name": "AceCnt", + "type": "USHORT" + }, + { + "name": "pfnArray", + "type": "PFN_OBJECT_MGR_FUNCTS" + } + ], + "TreeResetNamedSecurityInfoA": [ + { + "name": "pObjectName", + "type": "LPSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "KeepExplicit", + "type": "BOOL" + }, + { + "name": "fnProgress", + "type": "FN_PROGRESS" + }, + { + "name": "ProgressInvokeSetting", + "type": "PROG_INVOKE_SETTING" + }, + { + "name": "Args", + "type": "PVOID" + } + ], + "TreeResetNamedSecurityInfoW": [ + { + "name": "pObjectName", + "type": "LPWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "KeepExplicit", + "type": "BOOL" + }, + { + "name": "fnProgress", + "type": "FN_PROGRESS" + }, + { + "name": "ProgressInvokeSetting", + "type": "PROG_INVOKE_SETTING" + }, + { + "name": "Args", + "type": "PVOID" + } + ], + "TreeSetNamedSecurityInfoA": [ + { + "name": "pObjectName", + "type": "LPSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "fnProgress", + "type": "FN_PROGRESS" + }, + { + "name": "ProgressInvokeSetting", + "type": "PROG_INVOKE_SETTING" + }, + { + "name": "Args", + "type": "PVOID" + } + ], + "TreeSetNamedSecurityInfoW": [ + { + "name": "pObjectName", + "type": "LPWSTR" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "SecurityInfo", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pOwner", + "type": "PSID" + }, + { + "name": "pGroup", + "type": "PSID" + }, + { + "name": "pDacl", + "type": "PACL" + }, + { + "name": "pSacl", + "type": "PACL" + }, + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "fnProgress", + "type": "FN_PROGRESS" + }, + { + "name": "ProgressInvokeSetting", + "type": "PROG_INVOKE_SETTING" + }, + { + "name": "Args", + "type": "PVOID" + } + ], + "BuildSecurityDescriptorA": [ + { + "name": "pOwner", + "type": "PTRUSTEE_A" + }, + { + "name": "pGroup", + "type": "PTRUSTEE_A" + }, + { + "name": "cCountOfAccessEntries", + "type": "ULONG" + }, + { + "name": "pListOfAccessEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "cCountOfAuditEntries", + "type": "ULONG" + }, + { + "name": "pListOfAuditEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "pOldSD", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pSizeNewSD", + "type": "PULONG" + }, + { + "name": "pNewSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "BuildSecurityDescriptorW": [ + { + "name": "pOwner", + "type": "PTRUSTEE_W" + }, + { + "name": "pGroup", + "type": "PTRUSTEE_W" + }, + { + "name": "cCountOfAccessEntries", + "type": "ULONG" + }, + { + "name": "pListOfAccessEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "cCountOfAuditEntries", + "type": "ULONG" + }, + { + "name": "pListOfAuditEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "pOldSD", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "pSizeNewSD", + "type": "PULONG" + }, + { + "name": "pNewSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "LookupSecurityDescriptorPartsA": [ + { + "name": "ppOwner", + "type": "PTRUSTEE_A" + }, + { + "name": "ppGroup", + "type": "PTRUSTEE_A" + }, + { + "name": "pcCountOfAccessEntries", + "type": "PULONG" + }, + { + "name": "ppListOfAccessEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "pcCountOfAuditEntries", + "type": "PULONG" + }, + { + "name": "ppListOfAuditEntries", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "pSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "LookupSecurityDescriptorPartsW": [ + { + "name": "ppOwner", + "type": "PTRUSTEE_W" + }, + { + "name": "ppGroup", + "type": "PTRUSTEE_W" + }, + { + "name": "pcCountOfAccessEntries", + "type": "PULONG" + }, + { + "name": "ppListOfAccessEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "pcCountOfAuditEntries", + "type": "PULONG" + }, + { + "name": "ppListOfAuditEntries", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "pSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "BuildExplicitAccessWithNameA": [ + { + "name": "pExplicitAccess", + "type": "PEXPLICIT_ACCESS_A" + }, + { + "name": "pTrusteeName", + "type": "LPSTR" + }, + { + "name": "AccessPermissions", + "type": "DWORD" + }, + { + "name": "AccessMode", + "type": "ACCESS_MODE" + }, + { + "name": "Inheritance", + "type": "DWORD" + } + ], + "BuildExplicitAccessWithNameW": [ + { + "name": "pExplicitAccess", + "type": "PEXPLICIT_ACCESS_W" + }, + { + "name": "pTrusteeName", + "type": "LPWSTR" + }, + { + "name": "AccessPermissions", + "type": "DWORD" + }, + { + "name": "AccessMode", + "type": "ACCESS_MODE" + }, + { + "name": "Inheritance", + "type": "DWORD" + } + ], + "BuildTrusteeWithNameA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pName", + "type": "LPSTR" + } + ], + "BuildTrusteeWithNameW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pName", + "type": "LPWSTR" + } + ], + "BuildTrusteeWithSidA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "BuildTrusteeWithSidW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "BuildTrusteeWithObjectsAndSidA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pObjSid", + "type": "POBJECTS_AND_SID" + }, + { + "name": "pObjectGuid", + "type": "GUID" + }, + { + "name": "pInheritedObjectGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "BuildTrusteeWithObjectsAndSidW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pObjSid", + "type": "POBJECTS_AND_SID" + }, + { + "name": "pObjectGuid", + "type": "GUID" + }, + { + "name": "pInheritedObjectGuid", + "type": "GUID" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "BuildTrusteeWithObjectsAndNameA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + }, + { + "name": "pObjName", + "type": "POBJECTS_AND_NAME_A" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "ObjectTypeName", + "type": "LPSTR" + }, + { + "name": "InheritedObjectTypeName", + "type": "LPSTR" + }, + { + "name": "Name", + "type": "LPSTR" + } + ], + "BuildTrusteeWithObjectsAndNameW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + }, + { + "name": "pObjName", + "type": "POBJECTS_AND_NAME_W" + }, + { + "name": "ObjectType", + "type": "SE_OBJECT_TYPE" + }, + { + "name": "ObjectTypeName", + "type": "LPWSTR" + }, + { + "name": "InheritedObjectTypeName", + "type": "LPWSTR" + }, + { + "name": "Name", + "type": "LPWSTR" + } + ], + "GetTrusteeNameA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + } + ], + "GetTrusteeNameW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + } + ], + "GetTrusteeTypeA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + } + ], + "GetTrusteeTypeW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + } + ], + "GetTrusteeFormA": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_A" + } + ], + "GetTrusteeFormW": [ + { + "name": "pTrustee", + "type": "PTRUSTEE_W" + } + ], + "LsaFreeMemory": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaClose": [ + { + "name": "ObjectHandle", + "type": "LSA_HANDLE" + } + ], + "LsaOpenPolicy": [ + { + "name": "SystemName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ObjectAttributes", + "type": "PLSA_OBJECT_ATTRIBUTES" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "PolicyHandle", + "type": "PLSA_HANDLE" + } + ], + "LsaQueryInformationPolicy": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "InformationClass", + "type": "POLICY_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaSetInformationPolicy": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "InformationClass", + "type": "POLICY_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaQueryDomainInformationPolicy": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "InformationClass", + "type": "POLICY_DOMAIN_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaSetDomainInformationPolicy": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "InformationClass", + "type": "POLICY_DOMAIN_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaEnumerateTrustedDomains": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "EnumerationContext", + "type": "PLSA_ENUMERATION_HANDLE" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "PreferedMaximumLength", + "type": "ULONG" + }, + { + "name": "CountReturned", + "type": "PULONG" + } + ], + "LsaLookupNames": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "Names", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ReferencedDomains", + "type": "PLSA_REFERENCED_DOMAIN_LIST" + }, + { + "name": "Sids", + "type": "PLSA_TRANSLATED_SID" + } + ], + "LsaLookupNames2": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "Names", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ReferencedDomains", + "type": "PLSA_REFERENCED_DOMAIN_LIST" + }, + { + "name": "Sids", + "type": "PLSA_TRANSLATED_SID2" + } + ], + "LsaLookupSids": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "Sids", + "type": "PSID" + }, + { + "name": "ReferencedDomains", + "type": "PLSA_REFERENCED_DOMAIN_LIST" + }, + { + "name": "Names", + "type": "PLSA_TRANSLATED_NAME" + } + ], + "LsaLookupSids2": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "LookupOptions", + "type": "ULONG" + }, + { + "name": "Count", + "type": "ULONG" + }, + { + "name": "Sids", + "type": "PSID" + }, + { + "name": "ReferencedDomains", + "type": "PLSA_REFERENCED_DOMAIN_LIST" + }, + { + "name": "Names", + "type": "PLSA_TRANSLATED_NAME" + } + ], + "LsaEnumerateAccountsWithUserRight": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "UserRight", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "CountReturned", + "type": "PULONG" + } + ], + "LsaEnumerateAccountRights": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "AccountSid", + "type": "PSID" + }, + { + "name": "UserRights", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "CountOfRights", + "type": "PULONG" + } + ], + "LsaAddAccountRights": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "AccountSid", + "type": "PSID" + }, + { + "name": "UserRights", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "CountOfRights", + "type": "ULONG" + } + ], + "LsaRemoveAccountRights": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "AccountSid", + "type": "PSID" + }, + { + "name": "AllRights", + "type": "BOOLEAN" + }, + { + "name": "UserRights", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "CountOfRights", + "type": "ULONG" + } + ], + "LsaOpenTrustedDomainByName": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "TrustedDomainHandle", + "type": "PLSA_HANDLE" + } + ], + "LsaQueryTrustedDomainInfo": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainSid", + "type": "PSID" + }, + { + "name": "InformationClass", + "type": "TRUSTED_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaSetTrustedDomainInformation": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainSid", + "type": "PSID" + }, + { + "name": "InformationClass", + "type": "TRUSTED_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaDeleteTrustedDomain": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainSid", + "type": "PSID" + } + ], + "LsaQueryTrustedDomainInfoByName": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "InformationClass", + "type": "TRUSTED_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaSetTrustedDomainInfoByName": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "InformationClass", + "type": "TRUSTED_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaEnumerateTrustedDomainsEx": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "EnumerationContext", + "type": "PLSA_ENUMERATION_HANDLE" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "PreferedMaximumLength", + "type": "ULONG" + }, + { + "name": "CountReturned", + "type": "PULONG" + } + ], + "LsaCreateTrustedDomainEx": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainInformation", + "type": "PTRUSTED_DOMAIN_INFORMATION_EX" + }, + { + "name": "AuthenticationInformation", + "type": "PTRUSTED_DOMAIN_AUTH_INFORMATION" + }, + { + "name": "DesiredAccess", + "type": "ACCESS_MASK" + }, + { + "name": "TrustedDomainHandle", + "type": "PLSA_HANDLE" + } + ], + "LsaQueryForestTrustInformation": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ForestTrustInfo", + "type": "PLSA_FOREST_TRUST_INFORMATION" + } + ], + "LsaSetForestTrustInformation": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "TrustedDomainName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "ForestTrustInfo", + "type": "PLSA_FOREST_TRUST_INFORMATION" + }, + { + "name": "CheckOnly", + "type": "BOOLEAN" + }, + { + "name": "CollisionInfo", + "type": "PLSA_FOREST_TRUST_COLLISION_INFORMATION" + } + ], + "LsaStorePrivateData": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "KeyName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "PrivateData", + "type": "PLSA_UNICODE_STRING" + } + ], + "LsaRetrievePrivateData": [ + { + "name": "PolicyHandle", + "type": "LSA_HANDLE" + }, + { + "name": "KeyName", + "type": "PLSA_UNICODE_STRING" + }, + { + "name": "PrivateData", + "type": "PLSA_UNICODE_STRING" + } + ], + "LsaNtStatusToWinError": [ + { + "name": "Status", + "type": "NTSTATUS" + } + ], + "AuditSetSystemPolicy": [ + { + "name": "pAuditPolicy", + "type": "PCAUDIT_POLICY_INFORMATION" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + } + ], + "AuditSetPerUserPolicy": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pAuditPolicy", + "type": "PCAUDIT_POLICY_INFORMATION" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + } + ], + "AuditQuerySystemPolicy": [ + { + "name": "pSubCategoryGuids", + "type": "GUID" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + }, + { + "name": "ppAuditPolicy", + "type": "PAUDIT_POLICY_INFORMATION" + } + ], + "AuditQueryPerUserPolicy": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pSubCategoryGuids", + "type": "GUID" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + }, + { + "name": "ppAuditPolicy", + "type": "PAUDIT_POLICY_INFORMATION" + } + ], + "AuditEnumeratePerUserPolicy": [ + { + "name": "ppAuditSidArray", + "type": "PPOLICY_AUDIT_SID_ARRAY" + } + ], + "AuditComputeEffectivePolicyBySid": [ + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pSubCategoryGuids", + "type": "GUID" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + }, + { + "name": "ppAuditPolicy", + "type": "PAUDIT_POLICY_INFORMATION" + } + ], + "AuditComputeEffectivePolicyByToken": [ + { + "name": "hTokenHandle", + "type": "HANDLE" + }, + { + "name": "pSubCategoryGuids", + "type": "GUID" + }, + { + "name": "dwPolicyCount", + "type": "ULONG" + }, + { + "name": "ppAuditPolicy", + "type": "PAUDIT_POLICY_INFORMATION" + } + ], + "AuditEnumerateCategories": [ + { + "name": "ppAuditCategoriesArray", + "type": "GUID" + }, + { + "name": "pdwCountReturned", + "type": "PULONG" + } + ], + "AuditEnumerateSubCategories": [ + { + "name": "pAuditCategoryGuid", + "type": "GUID" + }, + { + "name": "bRetrieveAllSubCategories", + "type": "BOOLEAN" + }, + { + "name": "ppAuditSubCategoriesArray", + "type": "GUID" + }, + { + "name": "pdwCountReturned", + "type": "PULONG" + } + ], + "AuditLookupCategoryNameW": [ + { + "name": "pAuditCategoryGuid", + "type": "GUID" + }, + { + "name": "ppszCategoryName", + "type": "PWSTR" + } + ], + "AuditLookupCategoryNameA": [ + { + "name": "pAuditCategoryGuid", + "type": "GUID" + }, + { + "name": "ppszCategoryName", + "type": "PSTR" + } + ], + "AuditLookupSubCategoryNameW": [ + { + "name": "pAuditSubCategoryGuid", + "type": "GUID" + }, + { + "name": "ppszSubCategoryName", + "type": "PWSTR" + } + ], + "AuditLookupSubCategoryNameA": [ + { + "name": "pAuditSubCategoryGuid", + "type": "GUID" + }, + { + "name": "ppszSubCategoryName", + "type": "PSTR" + } + ], + "AuditLookupCategoryIdFromCategoryGuid": [ + { + "name": "pAuditCategoryGuid", + "type": "GUID" + }, + { + "name": "pAuditCategoryId", + "type": "PPOLICY_AUDIT_EVENT_TYPE" + } + ], + "AuditLookupCategoryGuidFromCategoryId": [ + { + "name": "AuditCategoryId", + "type": "POLICY_AUDIT_EVENT_TYPE" + }, + { + "name": "pAuditCategoryGuid", + "type": "GUID" + } + ], + "AuditSetSecurity": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "AuditQuerySecurity": [ + { + "name": "SecurityInformation", + "type": "SECURITY_INFORMATION" + }, + { + "name": "ppSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "AuditSetGlobalSaclW": [ + { + "name": "ObjectTypeName", + "type": "PCWSTR" + }, + { + "name": "Acl", + "type": "PACL" + } + ], + "AuditSetGlobalSaclA": [ + { + "name": "ObjectTypeName", + "type": "PCSTR" + }, + { + "name": "Acl", + "type": "PACL" + } + ], + "AuditQueryGlobalSaclW": [ + { + "name": "ObjectTypeName", + "type": "PCWSTR" + }, + { + "name": "Acl", + "type": "PACL" + } + ], + "AuditQueryGlobalSaclA": [ + { + "name": "ObjectTypeName", + "type": "PCSTR" + }, + { + "name": "Acl", + "type": "PACL" + } + ], + "AuditFree": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "EventAccessQuery": [ + { + "name": "Guid", + "type": "LPGUID" + }, + { + "name": "Buffer", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "BufferSize", + "type": "PULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/advpack.json b/qiling/extensions/windows_sdk/advpack_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/advpack.json rename to qiling/extensions/windows_sdk/advpack_dll.json diff --git a/qiling/extensions/windows_sdk/amsi.json b/qiling/extensions/windows_sdk/amsi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/amsi.json rename to qiling/extensions/windows_sdk/amsi_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-appmodel-runtime-l1-1-2.json b/qiling/extensions/windows_sdk/api-ms-win-appmodel-runtime-l1-1-2.json deleted file mode 100644 index 42df21249..000000000 --- a/qiling/extensions/windows_sdk/api-ms-win-appmodel-runtime-l1-1-2.json +++ /dev/null @@ -1,538 +0,0 @@ -{ - "GetCurrentPackageId": [ - { - "name": "bufferLength", - "type": "UINT32" - }, - { - "name": "buffer", - "type": "BYTE" - } - ], - "GetCurrentPackageFullName": [ - { - "name": "packageFullNameLength", - "type": "UINT32" - }, - { - "name": "packageFullName", - "type": "PWSTR" - } - ], - "GetCurrentPackageFamilyName": [ - { - "name": "packageFamilyNameLength", - "type": "UINT32" - }, - { - "name": "packageFamilyName", - "type": "PWSTR" - } - ], - "GetCurrentPackagePath": [ - { - "name": "pathLength", - "type": "UINT32" - }, - { - "name": "path", - "type": "PWSTR" - } - ], - "GetPackageId": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "bufferLength", - "type": "UINT32" - }, - { - "name": "buffer", - "type": "BYTE" - } - ], - "GetPackageFullName": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "packageFullNameLength", - "type": "UINT32" - }, - { - "name": "packageFullName", - "type": "PWSTR" - } - ], - "GetPackageFullNameFromToken": [ - { - "name": "token", - "type": "HANDLE" - }, - { - "name": "packageFullNameLength", - "type": "UINT32" - }, - { - "name": "packageFullName", - "type": "PWSTR" - } - ], - "GetPackageFamilyName": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "packageFamilyNameLength", - "type": "UINT32" - }, - { - "name": "packageFamilyName", - "type": "PWSTR" - } - ], - "GetPackageFamilyNameFromToken": [ - { - "name": "token", - "type": "HANDLE" - }, - { - "name": "packageFamilyNameLength", - "type": "UINT32" - }, - { - "name": "packageFamilyName", - "type": "PWSTR" - } - ], - "GetPackagePath": [ - { - "name": "packageId", - "type": "PACKAGE_ID" - }, - { - "name": "reserved", - "type": "UINT32" - }, - { - "name": "pathLength", - "type": "UINT32" - }, - { - "name": "path", - "type": "PWSTR" - } - ], - "GetPackagePathByFullName": [ - { - "name": "packageFullName", - "type": "PCWSTR" - }, - { - "name": "pathLength", - "type": "UINT32" - }, - { - "name": "path", - "type": "PWSTR" - } - ], - "GetStagedPackagePathByFullName": [ - { - "name": "packageFullName", - "type": "PCWSTR" - }, - { - "name": "pathLength", - "type": "UINT32" - }, - { - "name": "path", - "type": "PWSTR" - } - ], - "GetCurrentApplicationUserModelId": [ - { - "name": "applicationUserModelIdLength", - "type": "UINT32" - }, - { - "name": "applicationUserModelId", - "type": "PWSTR" - } - ], - "GetApplicationUserModelId": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "applicationUserModelIdLength", - "type": "UINT32" - }, - { - "name": "applicationUserModelId", - "type": "PWSTR" - } - ], - "GetApplicationUserModelIdFromToken": [ - { - "name": "token", - "type": "HANDLE" - }, - { - "name": "applicationUserModelIdLength", - "type": "UINT32" - }, - { - "name": "applicationUserModelId", - "type": "PWSTR" - } - ], - "PackageIdFromFullName": [ - { - "name": "packageFullName", - "type": "PCWSTR" - }, - { - "name": "flags", - "type": "UINT32" - }, - { - "name": "bufferLength", - "type": "UINT32" - }, - { - "name": "buffer", - "type": "BYTE" - } - ], - "PackageFullNameFromId": [ - { - "name": "packageId", - "type": "PACKAGE_ID" - }, - { - "name": "packageFullNameLength", - "type": "UINT32" - }, - { - "name": "packageFullName", - "type": "PWSTR" - } - ], - "PackageFamilyNameFromId": [ - { - "name": "packageId", - "type": "PACKAGE_ID" - }, - { - "name": "packageFamilyNameLength", - "type": "UINT32" - }, - { - "name": "packageFamilyName", - "type": "PWSTR" - } - ], - "PackageFamilyNameFromFullName": [ - { - "name": "packageFullName", - "type": "PCWSTR" - }, - { - "name": "packageFamilyNameLength", - "type": "UINT32" - }, - { - "name": "packageFamilyName", - "type": "PWSTR" - } - ], - "PackageNameAndPublisherIdFromFamilyName": [ - { - "name": "packageFamilyName", - "type": "PCWSTR" - }, - { - "name": "packageNameLength", - "type": "UINT32" - }, - { - "name": "packageName", - "type": "PWSTR" - }, - { - "name": "packagePublisherIdLength", - "type": "UINT32" - }, - { - "name": "packagePublisherId", - "type": "PWSTR" - } - ], - "FormatApplicationUserModelId": [ - { - "name": "packageFamilyName", - "type": "PCWSTR" - }, - { - "name": "packageRelativeApplicationId", - "type": "PCWSTR" - }, - { - "name": "applicationUserModelIdLength", - "type": "UINT32" - }, - { - "name": "applicationUserModelId", - "type": "PWSTR" - } - ], - "ParseApplicationUserModelId": [ - { - "name": "applicationUserModelId", - "type": "PCWSTR" - }, - { - "name": "packageFamilyNameLength", - "type": "UINT32" - }, - { - "name": "packageFamilyName", - "type": "PWSTR" - }, - { - "name": "packageRelativeApplicationIdLength", - "type": "UINT32" - }, - { - "name": "packageRelativeApplicationId", - "type": "PWSTR" - } - ], - "GetPackagesByPackageFamily": [ - { - "name": "packageFamilyName", - "type": "PCWSTR" - }, - { - "name": "count", - "type": "UINT32" - }, - { - "name": "packageFullNames", - "type": "PWSTR" - }, - { - "name": "bufferLength", - "type": "UINT32" - }, - { - "name": "buffer", - "type": "WCHAR" - } - ], - "FindPackagesByPackageFamily": [ - { - "name": "packageFamilyName", - "type": "PCWSTR" - }, - { - "name": "packageFilters", - "type": "UINT32" - }, - { - "name": "count", - "type": "UINT32" - }, - { - "name": "packageFullNames", - "type": "PWSTR" - }, - { - "name": "bufferLength", - "type": "UINT32" - }, - { - "name": "buffer", - "type": "WCHAR" - }, - { - "name": "packageProperties", - "type": "UINT32" - } - ], - "GetStagedPackageOrigin": [ - { - "name": "packageFullName", - "type": "PCWSTR" - }, - { - "name": "origin", - "type": "PackageOrigin" - } - ], - "GetCurrentPackageInfo": [ - { - "name": "flags", - "type": "UINT32" - }, - { - "name": "bufferLength", - "type": "UINT32" - }, - { - "name": "buffer", - "type": "BYTE" - }, - { - "name": "count", - "type": "UINT32" - } - ], - "OpenPackageInfoByFullName": [ - { - "name": "packageFullName", - "type": "PCWSTR" - }, - { - "name": "reserved", - "type": "UINT32" - }, - { - "name": "packageInfoReference", - "type": "PACKAGE_INFO_REFERENCE" - } - ], - "ClosePackageInfo": [ - { - "name": "packageInfoReference", - "type": "PACKAGE_INFO_REFERENCE" - } - ], - "GetPackageInfo": [ - { - "name": "packageInfoReference", - "type": "PACKAGE_INFO_REFERENCE" - }, - { - "name": "flags", - "type": "UINT32" - }, - { - "name": "bufferLength", - "type": "UINT32" - }, - { - "name": "buffer", - "type": "BYTE" - }, - { - "name": "count", - "type": "UINT32" - } - ], - "GetPackageApplicationIds": [ - { - "name": "packageInfoReference", - "type": "PACKAGE_INFO_REFERENCE" - }, - { - "name": "bufferLength", - "type": "UINT32" - }, - { - "name": "buffer", - "type": "BYTE" - }, - { - "name": "count", - "type": "UINT32" - } - ], - "AppPolicyGetLifecycleManagement": [ - { - "name": "processToken", - "type": "HANDLE" - }, - { - "name": "policy", - "type": "AppPolicyLifecycleManagement" - } - ], - "AppPolicyGetWindowingModel": [ - { - "name": "processToken", - "type": "HANDLE" - }, - { - "name": "policy", - "type": "AppPolicyWindowingModel" - } - ], - "AppPolicyGetMediaFoundationCodecLoading": [ - { - "name": "processToken", - "type": "HANDLE" - }, - { - "name": "policy", - "type": "AppPolicyMediaFoundationCodecLoading" - } - ], - "AppPolicyGetClrCompat": [ - { - "name": "processToken", - "type": "HANDLE" - }, - { - "name": "policy", - "type": "AppPolicyClrCompat" - } - ], - "AppPolicyGetThreadInitializationType": [ - { - "name": "processToken", - "type": "HANDLE" - }, - { - "name": "policy", - "type": "AppPolicyThreadInitializationType" - } - ], - "AppPolicyGetShowDeveloperDiagnostic": [ - { - "name": "processToken", - "type": "HANDLE" - }, - { - "name": "policy", - "type": "AppPolicyShowDeveloperDiagnostic" - } - ], - "AppPolicyGetProcessTerminationMethod": [ - { - "name": "processToken", - "type": "HANDLE" - }, - { - "name": "policy", - "type": "AppPolicyProcessTerminationMethod" - } - ], - "AppPolicyGetCreateFileAccess": [ - { - "name": "processToken", - "type": "HANDLE" - }, - { - "name": "policy", - "type": "AppPolicyCreateFileAccess" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-appmodel-runtime-l1-1-2_dll.json b/qiling/extensions/windows_sdk/api-ms-win-appmodel-runtime-l1-1-2_dll.json new file mode 100644 index 000000000..3799c0b33 --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-appmodel-runtime-l1-1-2_dll.json @@ -0,0 +1,82 @@ +{ + "AppPolicyGetLifecycleManagement": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyLifecycleManagement" + } + ], + "AppPolicyGetWindowingModel": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyWindowingModel" + } + ], + "AppPolicyGetMediaFoundationCodecLoading": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyMediaFoundationCodecLoading" + } + ], + "AppPolicyGetClrCompat": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyClrCompat" + } + ], + "AppPolicyGetThreadInitializationType": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyThreadInitializationType" + } + ], + "AppPolicyGetShowDeveloperDiagnostic": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyShowDeveloperDiagnostic" + } + ], + "AppPolicyGetProcessTerminationMethod": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyProcessTerminationMethod" + } + ], + "AppPolicyGetCreateFileAccess": [ + { + "name": "processToken", + "type": "HANDLE" + }, + { + "name": "policy", + "type": "AppPolicyCreateFileAccess" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0.json b/qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0.json deleted file mode 100644 index 1142355a7..000000000 --- a/qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0.json +++ /dev/null @@ -1,146 +0,0 @@ -{ - "IsEnclaveTypeSupported": [ - { - "name": "flEnclaveType", - "type": "DWORD" - } - ], - "CreateEnclave": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "dwInitialCommitment", - "type": "SIZE_T" - }, - { - "name": "flEnclaveType", - "type": "DWORD" - }, - { - "name": "lpEnclaveInformation", - "type": "LPCVOID" - }, - { - "name": "dwInfoLength", - "type": "DWORD" - }, - { - "name": "lpEnclaveError", - "type": "LPDWORD" - } - ], - "LoadEnclaveData": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "lpBuffer", - "type": "LPCVOID" - }, - { - "name": "nSize", - "type": "SIZE_T" - }, - { - "name": "flProtect", - "type": "DWORD" - }, - { - "name": "lpPageInformation", - "type": "LPCVOID" - }, - { - "name": "dwInfoLength", - "type": "DWORD" - }, - { - "name": "lpNumberOfBytesWritten", - "type": "PSIZE_T" - }, - { - "name": "lpEnclaveError", - "type": "LPDWORD" - } - ], - "InitializeEnclave": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "lpEnclaveInformation", - "type": "LPCVOID" - }, - { - "name": "dwInfoLength", - "type": "DWORD" - }, - { - "name": "lpEnclaveError", - "type": "LPDWORD" - } - ], - "LoadEnclaveImageW": [ - { - "name": "lpEnclaveAddress", - "type": "LPVOID" - }, - { - "name": "lpImageName", - "type": "LPCWSTR" - } - ], - "CallEnclave": [ - { - "name": "lpRoutine", - "type": "LPENCLAVE_ROUTINE" - }, - { - "name": "lpParameter", - "type": "LPVOID" - }, - { - "name": "fWaitForThread", - "type": "BOOL" - }, - { - "name": "lpReturnValue", - "type": "LPVOID" - } - ], - "TerminateEnclave": [ - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "fWait", - "type": "BOOL" - } - ], - "DeleteEnclave": [ - { - "name": "lpAddress", - "type": "LPVOID" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Vertdll.json b/qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0_dll.json similarity index 70% rename from qiling/extensions/windows_sdk/Vertdll.json rename to qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0_dll.json index 1142355a7..018691d15 100644 --- a/qiling/extensions/windows_sdk/Vertdll.json +++ b/qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0_dll.json @@ -98,49 +98,5 @@ "name": "lpEnclaveError", "type": "LPDWORD" } - ], - "LoadEnclaveImageW": [ - { - "name": "lpEnclaveAddress", - "type": "LPVOID" - }, - { - "name": "lpImageName", - "type": "LPCWSTR" - } - ], - "CallEnclave": [ - { - "name": "lpRoutine", - "type": "LPENCLAVE_ROUTINE" - }, - { - "name": "lpParameter", - "type": "LPVOID" - }, - { - "name": "fWaitForThread", - "type": "BOOL" - }, - { - "name": "lpReturnValue", - "type": "LPVOID" - } - ], - "TerminateEnclave": [ - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "fWait", - "type": "BOOL" - } - ], - "DeleteEnclave": [ - { - "name": "lpAddress", - "type": "LPVOID" - } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-featurestaging-l1-1-0.json b/qiling/extensions/windows_sdk/api-ms-win-core-featurestaging-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-featurestaging-l1-1-0.json rename to qiling/extensions/windows_sdk/api-ms-win-core-featurestaging-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-heap-l1-1-0.json b/qiling/extensions/windows_sdk/api-ms-win-core-heap-l1-1-0.json deleted file mode 100644 index a67b54cb0..000000000 --- a/qiling/extensions/windows_sdk/api-ms-win-core-heap-l1-1-0.json +++ /dev/null @@ -1,198 +0,0 @@ -{ - "HeapCreate": [ - { - "name": "flOptions", - "type": "DWORD" - }, - { - "name": "dwInitialSize", - "type": "SIZE_T" - }, - { - "name": "dwMaximumSize", - "type": "SIZE_T" - } - ], - "HeapDestroy": [ - { - "name": "hHeap", - "type": "HANDLE" - } - ], - "HeapAlloc": [ - { - "name": "hHeap", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwBytes", - "type": "SIZE_T" - } - ], - "HeapReAlloc": [ - { - "name": "hHeap", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpMem", - "type": "LPVOID" - }, - { - "name": "dwBytes", - "type": "SIZE_T" - } - ], - "HeapFree": [ - { - "name": "hHeap", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpMem", - "type": "LPVOID" - } - ], - "HeapSize": [ - { - "name": "hHeap", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpMem", - "type": "LPCVOID" - } - ], - "GetProcessHeap": [ - { - "name": "VOID", - "type": "void" - } - ], - "HeapCompact": [ - { - "name": "hHeap", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "HeapSetInformation": [ - { - "name": "HeapHandle", - "type": "HANDLE" - }, - { - "name": "HeapInformationClass", - "type": "HEAP_INFORMATION_CLASS" - }, - { - "name": "HeapInformation", - "type": "PVOID" - }, - { - "name": "HeapInformationLength", - "type": "SIZE_T" - } - ], - "HeapValidate": [ - { - "name": "hHeap", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpMem", - "type": "LPCVOID" - } - ], - "HeapSummary": [ - { - "name": "hHeap", - "type": "HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpSummary", - "type": "LPHEAP_SUMMARY" - } - ], - "GetProcessHeaps": [ - { - "name": "NumberOfHeaps", - "type": "DWORD" - }, - { - "name": "ProcessHeaps", - "type": "PHANDLE" - } - ], - "HeapLock": [ - { - "name": "hHeap", - "type": "HANDLE" - } - ], - "HeapUnlock": [ - { - "name": "hHeap", - "type": "HANDLE" - } - ], - "HeapWalk": [ - { - "name": "hHeap", - "type": "HANDLE" - }, - { - "name": "lpEntry", - "type": "LPPROCESS_HEAP_ENTRY" - } - ], - "HeapQueryInformation": [ - { - "name": "HeapHandle", - "type": "HANDLE" - }, - { - "name": "HeapInformationClass", - "type": "HEAP_INFORMATION_CLASS" - }, - { - "name": "HeapInformation", - "type": "PVOID" - }, - { - "name": "HeapInformationLength", - "type": "SIZE_T" - }, - { - "name": "ReturnLength", - "type": "PSIZE_T" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-heap-l1-1-0_dll.json b/qiling/extensions/windows_sdk/api-ms-win-core-heap-l1-1-0_dll.json new file mode 100644 index 000000000..d544677af --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-heap-l1-1-0_dll.json @@ -0,0 +1,16 @@ +{ + "HeapSummary": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpSummary", + "type": "LPHEAP_SUMMARY" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-libraryloader-l1-1-1.json b/qiling/extensions/windows_sdk/api-ms-win-core-libraryloader-l1-1-1_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-libraryloader-l1-1-1.json rename to qiling/extensions/windows_sdk/api-ms-win-core-libraryloader-l1-1-1_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-localization-l1-2-1_dll.json b/qiling/extensions/windows_sdk/api-ms-win-core-localization-l1-2-1_dll.json new file mode 100644 index 000000000..1af65dad7 --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-localization-l1-2-1_dll.json @@ -0,0 +1,30 @@ +{ + "VerLanguageNameA": [ + { + "name": "wLang", + "type": "DWORD" + }, + { + "name": "szLang", + "type": "LPSTR" + }, + { + "name": "cchLang", + "type": "DWORD" + } + ], + "VerLanguageNameW": [ + { + "name": "wLang", + "type": "DWORD" + }, + { + "name": "szLang", + "type": "LPWSTR" + }, + { + "name": "cchLang", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-4.json b/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-4.json deleted file mode 100644 index e487090ad..000000000 --- a/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-4.json +++ /dev/null @@ -1,914 +0,0 @@ -{ - "VirtualAlloc": [ - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "flAllocationType", - "type": "DWORD" - }, - { - "name": "flProtect", - "type": "DWORD" - } - ], - "VirtualProtect": [ - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "flNewProtect", - "type": "DWORD" - }, - { - "name": "lpflOldProtect", - "type": "PDWORD" - } - ], - "VirtualFree": [ - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "dwFreeType", - "type": "DWORD" - } - ], - "VirtualQuery": [ - { - "name": "lpAddress", - "type": "LPCVOID" - }, - { - "name": "lpBuffer", - "type": "PMEMORY_BASIC_INFORMATION" - }, - { - "name": "dwLength", - "type": "SIZE_T" - } - ], - "VirtualAllocEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "flAllocationType", - "type": "DWORD" - }, - { - "name": "flProtect", - "type": "DWORD" - } - ], - "VirtualProtectEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "flNewProtect", - "type": "DWORD" - }, - { - "name": "lpflOldProtect", - "type": "PDWORD" - } - ], - "VirtualQueryEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPCVOID" - }, - { - "name": "lpBuffer", - "type": "PMEMORY_BASIC_INFORMATION" - }, - { - "name": "dwLength", - "type": "SIZE_T" - } - ], - "ReadProcessMemory": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpBaseAddress", - "type": "LPCVOID" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "nSize", - "type": "SIZE_T" - }, - { - "name": "lpNumberOfBytesRead", - "type": "SIZE_T" - } - ], - "WriteProcessMemory": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpBaseAddress", - "type": "LPVOID" - }, - { - "name": "lpBuffer", - "type": "LPCVOID" - }, - { - "name": "nSize", - "type": "SIZE_T" - }, - { - "name": "lpNumberOfBytesWritten", - "type": "SIZE_T" - } - ], - "MapViewOfFile": [ - { - "name": "hFileMappingObject", - "type": "HANDLE" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwFileOffsetHigh", - "type": "DWORD" - }, - { - "name": "dwFileOffsetLow", - "type": "DWORD" - }, - { - "name": "dwNumberOfBytesToMap", - "type": "SIZE_T" - } - ], - "MapViewOfFileEx": [ - { - "name": "hFileMappingObject", - "type": "HANDLE" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwFileOffsetHigh", - "type": "DWORD" - }, - { - "name": "dwFileOffsetLow", - "type": "DWORD" - }, - { - "name": "dwNumberOfBytesToMap", - "type": "SIZE_T" - }, - { - "name": "lpBaseAddress", - "type": "LPVOID" - } - ], - "VirtualFreeEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "dwFreeType", - "type": "DWORD" - } - ], - "FlushViewOfFile": [ - { - "name": "lpBaseAddress", - "type": "LPCVOID" - }, - { - "name": "dwNumberOfBytesToFlush", - "type": "SIZE_T" - } - ], - "UnmapViewOfFile": [ - { - "name": "lpBaseAddress", - "type": "LPCVOID" - } - ], - "GetLargePageMinimum": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetProcessWorkingSetSizeEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpMinimumWorkingSetSize", - "type": "PSIZE_T" - }, - { - "name": "lpMaximumWorkingSetSize", - "type": "PSIZE_T" - }, - { - "name": "Flags", - "type": "PDWORD" - } - ], - "SetProcessWorkingSetSizeEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "dwMinimumWorkingSetSize", - "type": "SIZE_T" - }, - { - "name": "dwMaximumWorkingSetSize", - "type": "SIZE_T" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "VirtualLock": [ - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - } - ], - "VirtualUnlock": [ - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - } - ], - "GetWriteWatch": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpBaseAddress", - "type": "PVOID" - }, - { - "name": "dwRegionSize", - "type": "SIZE_T" - }, - { - "name": "lpAddresses", - "type": "PVOID" - }, - { - "name": "lpdwCount", - "type": "ULONG_PTR" - }, - { - "name": "lpdwGranularity", - "type": "LPDWORD" - } - ], - "ResetWriteWatch": [ - { - "name": "lpBaseAddress", - "type": "LPVOID" - }, - { - "name": "dwRegionSize", - "type": "SIZE_T" - } - ], - "CreateMemoryResourceNotification": [ - { - "name": "NotificationType", - "type": "MEMORY_RESOURCE_NOTIFICATION_TYPE" - } - ], - "QueryMemoryResourceNotification": [ - { - "name": "ResourceNotificationHandle", - "type": "HANDLE" - }, - { - "name": "ResourceState", - "type": "PBOOL" - } - ], - "GetSystemFileCacheSize": [ - { - "name": "lpMinimumFileCacheSize", - "type": "PSIZE_T" - }, - { - "name": "lpMaximumFileCacheSize", - "type": "PSIZE_T" - }, - { - "name": "lpFlags", - "type": "PDWORD" - } - ], - "SetSystemFileCacheSize": [ - { - "name": "MinimumFileCacheSize", - "type": "SIZE_T" - }, - { - "name": "MaximumFileCacheSize", - "type": "SIZE_T" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "PrefetchVirtualMemory": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "NumberOfEntries", - "type": "ULONG_PTR" - }, - { - "name": "VirtualAddresses", - "type": "PWIN32_MEMORY_RANGE_ENTRY" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "CreateFileMappingFromApp": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "SecurityAttributes", - "type": "PSECURITY_ATTRIBUTES" - }, - { - "name": "PageProtection", - "type": "ULONG" - }, - { - "name": "MaximumSize", - "type": "ULONG64" - }, - { - "name": "Name", - "type": "PCWSTR" - } - ], - "MapViewOfFileFromApp": [ - { - "name": "hFileMappingObject", - "type": "HANDLE" - }, - { - "name": "DesiredAccess", - "type": "ULONG" - }, - { - "name": "FileOffset", - "type": "ULONG64" - }, - { - "name": "NumberOfBytesToMap", - "type": "SIZE_T" - } - ], - "UnmapViewOfFileEx": [ - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "UnmapFlags", - "type": "ULONG" - } - ], - "AllocateUserPhysicalPages": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "NumberOfPages", - "type": "PULONG_PTR" - }, - { - "name": "PageArray", - "type": "PULONG_PTR" - } - ], - "FreeUserPhysicalPages": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "NumberOfPages", - "type": "PULONG_PTR" - }, - { - "name": "PageArray", - "type": "PULONG_PTR" - } - ], - "MapUserPhysicalPages": [ - { - "name": "VirtualAddress", - "type": "PVOID" - }, - { - "name": "NumberOfPages", - "type": "ULONG_PTR" - }, - { - "name": "PageArray", - "type": "PULONG_PTR" - } - ], - "AllocateUserPhysicalPagesNuma": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "NumberOfPages", - "type": "PULONG_PTR" - }, - { - "name": "PageArray", - "type": "PULONG_PTR" - }, - { - "name": "nndPreferred", - "type": "DWORD" - } - ], - "VirtualAllocExNuma": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "flAllocationType", - "type": "DWORD" - }, - { - "name": "flProtect", - "type": "DWORD" - }, - { - "name": "nndPreferred", - "type": "DWORD" - } - ], - "GetMemoryErrorHandlingCapabilities": [ - { - "name": "Capabilities", - "type": "PULONG" - } - ], - "RegisterBadMemoryNotification": [ - { - "name": "Callback", - "type": "PBAD_MEMORY_CALLBACK_ROUTINE" - } - ], - "UnregisterBadMemoryNotification": [ - { - "name": "RegistrationHandle", - "type": "PVOID" - } - ], - "OfferVirtualMemory": [ - { - "name": "VirtualAddress", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "Priority", - "type": "OFFER_PRIORITY" - } - ], - "ReclaimVirtualMemory": [ - { - "name": "VirtualAddress", - "type": "void" - }, - { - "name": "Size", - "type": "SIZE_T" - } - ], - "DiscardVirtualMemory": [ - { - "name": "VirtualAddress", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - } - ], - "SetProcessValidCallTargets": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "VirtualAddress", - "type": "PVOID" - }, - { - "name": "RegionSize", - "type": "SIZE_T" - }, - { - "name": "NumberOfOffsets", - "type": "ULONG" - }, - { - "name": "OffsetInformation", - "type": "PCFG_CALL_TARGET_INFO" - } - ], - "VirtualAllocFromApp": [ - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "Protection", - "type": "ULONG" - } - ], - "VirtualProtectFromApp": [ - { - "name": "Address", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "NewProtection", - "type": "ULONG" - }, - { - "name": "OldProtection", - "type": "PULONG" - } - ], - "OpenFileMappingFromApp": [ - { - "name": "DesiredAccess", - "type": "ULONG" - }, - { - "name": "InheritHandle", - "type": "BOOL" - }, - { - "name": "Name", - "type": "PCWSTR" - } - ], - "QueryVirtualMemoryInformation": [ - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "VirtualAddress", - "type": "void" - }, - { - "name": "MemoryInformationClass", - "type": "WIN32_MEMORY_INFORMATION_CLASS" - }, - { - "name": "MemoryInformation", - "type": "PVOID" - }, - { - "name": "MemoryInformationSize", - "type": "SIZE_T" - }, - { - "name": "ReturnSize", - "type": "PSIZE_T" - } - ], - "MapViewOfFileNuma2": [ - { - "name": "FileMappingHandle", - "type": "HANDLE" - }, - { - "name": "ProcessHandle", - "type": "HANDLE" - }, - { - "name": "Offset", - "type": "ULONG64" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "ViewSize", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "PageProtection", - "type": "ULONG" - }, - { - "name": "PreferredNode", - "type": "ULONG" - } - ], - "MapViewOfFile2": [ - { - "name": "FileMappingHandle", - "type": "HANDLE" - }, - { - "name": "ProcessHandle", - "type": "HANDLE" - }, - { - "name": "Offset", - "type": "ULONG64" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "ViewSize", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "PageProtection", - "type": "ULONG" - } - ], - "UnmapViewOfFile2": [ - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "UnmapFlags", - "type": "ULONG" - } - ], - "VirtualAlloc2": [ - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "PageProtection", - "type": "ULONG" - }, - { - "name": "ExtendedParameters", - "type": "MEM_EXTENDED_PARAMETER" - }, - { - "name": "ParameterCount", - "type": "ULONG" - } - ], - "MapViewOfFile3": [ - { - "name": "FileMapping", - "type": "HANDLE" - }, - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "Offset", - "type": "ULONG64" - }, - { - "name": "ViewSize", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "PageProtection", - "type": "ULONG" - }, - { - "name": "ExtendedParameters", - "type": "MEM_EXTENDED_PARAMETER" - }, - { - "name": "ParameterCount", - "type": "ULONG" - } - ], - "VirtualAlloc2FromApp": [ - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "PageProtection", - "type": "ULONG" - }, - { - "name": "ExtendedParameters", - "type": "MEM_EXTENDED_PARAMETER" - }, - { - "name": "ParameterCount", - "type": "ULONG" - } - ], - "MapViewOfFile3FromApp": [ - { - "name": "FileMapping", - "type": "HANDLE" - }, - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "Offset", - "type": "ULONG64" - }, - { - "name": "ViewSize", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "PageProtection", - "type": "ULONG" - }, - { - "name": "ExtendedParameters", - "type": "MEM_EXTENDED_PARAMETER" - }, - { - "name": "ParameterCount", - "type": "ULONG" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-4_dll.json b/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-4_dll.json new file mode 100644 index 000000000..0ac562cc8 --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-4_dll.json @@ -0,0 +1,28 @@ +{ + "QueryVirtualMemoryInformation": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "VirtualAddress", + "type": "void" + }, + { + "name": "MemoryInformationClass", + "type": "WIN32_MEMORY_INFORMATION_CLASS" + }, + { + "name": "MemoryInformation", + "type": "PVOID" + }, + { + "name": "MemoryInformationSize", + "type": "SIZE_T" + }, + { + "name": "ReturnSize", + "type": "PSIZE_T" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5.json b/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5.json deleted file mode 100644 index e487090ad..000000000 --- a/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5.json +++ /dev/null @@ -1,914 +0,0 @@ -{ - "VirtualAlloc": [ - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "flAllocationType", - "type": "DWORD" - }, - { - "name": "flProtect", - "type": "DWORD" - } - ], - "VirtualProtect": [ - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "flNewProtect", - "type": "DWORD" - }, - { - "name": "lpflOldProtect", - "type": "PDWORD" - } - ], - "VirtualFree": [ - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "dwFreeType", - "type": "DWORD" - } - ], - "VirtualQuery": [ - { - "name": "lpAddress", - "type": "LPCVOID" - }, - { - "name": "lpBuffer", - "type": "PMEMORY_BASIC_INFORMATION" - }, - { - "name": "dwLength", - "type": "SIZE_T" - } - ], - "VirtualAllocEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "flAllocationType", - "type": "DWORD" - }, - { - "name": "flProtect", - "type": "DWORD" - } - ], - "VirtualProtectEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "flNewProtect", - "type": "DWORD" - }, - { - "name": "lpflOldProtect", - "type": "PDWORD" - } - ], - "VirtualQueryEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPCVOID" - }, - { - "name": "lpBuffer", - "type": "PMEMORY_BASIC_INFORMATION" - }, - { - "name": "dwLength", - "type": "SIZE_T" - } - ], - "ReadProcessMemory": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpBaseAddress", - "type": "LPCVOID" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "nSize", - "type": "SIZE_T" - }, - { - "name": "lpNumberOfBytesRead", - "type": "SIZE_T" - } - ], - "WriteProcessMemory": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpBaseAddress", - "type": "LPVOID" - }, - { - "name": "lpBuffer", - "type": "LPCVOID" - }, - { - "name": "nSize", - "type": "SIZE_T" - }, - { - "name": "lpNumberOfBytesWritten", - "type": "SIZE_T" - } - ], - "MapViewOfFile": [ - { - "name": "hFileMappingObject", - "type": "HANDLE" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwFileOffsetHigh", - "type": "DWORD" - }, - { - "name": "dwFileOffsetLow", - "type": "DWORD" - }, - { - "name": "dwNumberOfBytesToMap", - "type": "SIZE_T" - } - ], - "MapViewOfFileEx": [ - { - "name": "hFileMappingObject", - "type": "HANDLE" - }, - { - "name": "dwDesiredAccess", - "type": "DWORD" - }, - { - "name": "dwFileOffsetHigh", - "type": "DWORD" - }, - { - "name": "dwFileOffsetLow", - "type": "DWORD" - }, - { - "name": "dwNumberOfBytesToMap", - "type": "SIZE_T" - }, - { - "name": "lpBaseAddress", - "type": "LPVOID" - } - ], - "VirtualFreeEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "dwFreeType", - "type": "DWORD" - } - ], - "FlushViewOfFile": [ - { - "name": "lpBaseAddress", - "type": "LPCVOID" - }, - { - "name": "dwNumberOfBytesToFlush", - "type": "SIZE_T" - } - ], - "UnmapViewOfFile": [ - { - "name": "lpBaseAddress", - "type": "LPCVOID" - } - ], - "GetLargePageMinimum": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetProcessWorkingSetSizeEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpMinimumWorkingSetSize", - "type": "PSIZE_T" - }, - { - "name": "lpMaximumWorkingSetSize", - "type": "PSIZE_T" - }, - { - "name": "Flags", - "type": "PDWORD" - } - ], - "SetProcessWorkingSetSizeEx": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "dwMinimumWorkingSetSize", - "type": "SIZE_T" - }, - { - "name": "dwMaximumWorkingSetSize", - "type": "SIZE_T" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "VirtualLock": [ - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - } - ], - "VirtualUnlock": [ - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - } - ], - "GetWriteWatch": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpBaseAddress", - "type": "PVOID" - }, - { - "name": "dwRegionSize", - "type": "SIZE_T" - }, - { - "name": "lpAddresses", - "type": "PVOID" - }, - { - "name": "lpdwCount", - "type": "ULONG_PTR" - }, - { - "name": "lpdwGranularity", - "type": "LPDWORD" - } - ], - "ResetWriteWatch": [ - { - "name": "lpBaseAddress", - "type": "LPVOID" - }, - { - "name": "dwRegionSize", - "type": "SIZE_T" - } - ], - "CreateMemoryResourceNotification": [ - { - "name": "NotificationType", - "type": "MEMORY_RESOURCE_NOTIFICATION_TYPE" - } - ], - "QueryMemoryResourceNotification": [ - { - "name": "ResourceNotificationHandle", - "type": "HANDLE" - }, - { - "name": "ResourceState", - "type": "PBOOL" - } - ], - "GetSystemFileCacheSize": [ - { - "name": "lpMinimumFileCacheSize", - "type": "PSIZE_T" - }, - { - "name": "lpMaximumFileCacheSize", - "type": "PSIZE_T" - }, - { - "name": "lpFlags", - "type": "PDWORD" - } - ], - "SetSystemFileCacheSize": [ - { - "name": "MinimumFileCacheSize", - "type": "SIZE_T" - }, - { - "name": "MaximumFileCacheSize", - "type": "SIZE_T" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "PrefetchVirtualMemory": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "NumberOfEntries", - "type": "ULONG_PTR" - }, - { - "name": "VirtualAddresses", - "type": "PWIN32_MEMORY_RANGE_ENTRY" - }, - { - "name": "Flags", - "type": "ULONG" - } - ], - "CreateFileMappingFromApp": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "SecurityAttributes", - "type": "PSECURITY_ATTRIBUTES" - }, - { - "name": "PageProtection", - "type": "ULONG" - }, - { - "name": "MaximumSize", - "type": "ULONG64" - }, - { - "name": "Name", - "type": "PCWSTR" - } - ], - "MapViewOfFileFromApp": [ - { - "name": "hFileMappingObject", - "type": "HANDLE" - }, - { - "name": "DesiredAccess", - "type": "ULONG" - }, - { - "name": "FileOffset", - "type": "ULONG64" - }, - { - "name": "NumberOfBytesToMap", - "type": "SIZE_T" - } - ], - "UnmapViewOfFileEx": [ - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "UnmapFlags", - "type": "ULONG" - } - ], - "AllocateUserPhysicalPages": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "NumberOfPages", - "type": "PULONG_PTR" - }, - { - "name": "PageArray", - "type": "PULONG_PTR" - } - ], - "FreeUserPhysicalPages": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "NumberOfPages", - "type": "PULONG_PTR" - }, - { - "name": "PageArray", - "type": "PULONG_PTR" - } - ], - "MapUserPhysicalPages": [ - { - "name": "VirtualAddress", - "type": "PVOID" - }, - { - "name": "NumberOfPages", - "type": "ULONG_PTR" - }, - { - "name": "PageArray", - "type": "PULONG_PTR" - } - ], - "AllocateUserPhysicalPagesNuma": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "NumberOfPages", - "type": "PULONG_PTR" - }, - { - "name": "PageArray", - "type": "PULONG_PTR" - }, - { - "name": "nndPreferred", - "type": "DWORD" - } - ], - "VirtualAllocExNuma": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "lpAddress", - "type": "LPVOID" - }, - { - "name": "dwSize", - "type": "SIZE_T" - }, - { - "name": "flAllocationType", - "type": "DWORD" - }, - { - "name": "flProtect", - "type": "DWORD" - }, - { - "name": "nndPreferred", - "type": "DWORD" - } - ], - "GetMemoryErrorHandlingCapabilities": [ - { - "name": "Capabilities", - "type": "PULONG" - } - ], - "RegisterBadMemoryNotification": [ - { - "name": "Callback", - "type": "PBAD_MEMORY_CALLBACK_ROUTINE" - } - ], - "UnregisterBadMemoryNotification": [ - { - "name": "RegistrationHandle", - "type": "PVOID" - } - ], - "OfferVirtualMemory": [ - { - "name": "VirtualAddress", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "Priority", - "type": "OFFER_PRIORITY" - } - ], - "ReclaimVirtualMemory": [ - { - "name": "VirtualAddress", - "type": "void" - }, - { - "name": "Size", - "type": "SIZE_T" - } - ], - "DiscardVirtualMemory": [ - { - "name": "VirtualAddress", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - } - ], - "SetProcessValidCallTargets": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "VirtualAddress", - "type": "PVOID" - }, - { - "name": "RegionSize", - "type": "SIZE_T" - }, - { - "name": "NumberOfOffsets", - "type": "ULONG" - }, - { - "name": "OffsetInformation", - "type": "PCFG_CALL_TARGET_INFO" - } - ], - "VirtualAllocFromApp": [ - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "Protection", - "type": "ULONG" - } - ], - "VirtualProtectFromApp": [ - { - "name": "Address", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "NewProtection", - "type": "ULONG" - }, - { - "name": "OldProtection", - "type": "PULONG" - } - ], - "OpenFileMappingFromApp": [ - { - "name": "DesiredAccess", - "type": "ULONG" - }, - { - "name": "InheritHandle", - "type": "BOOL" - }, - { - "name": "Name", - "type": "PCWSTR" - } - ], - "QueryVirtualMemoryInformation": [ - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "VirtualAddress", - "type": "void" - }, - { - "name": "MemoryInformationClass", - "type": "WIN32_MEMORY_INFORMATION_CLASS" - }, - { - "name": "MemoryInformation", - "type": "PVOID" - }, - { - "name": "MemoryInformationSize", - "type": "SIZE_T" - }, - { - "name": "ReturnSize", - "type": "PSIZE_T" - } - ], - "MapViewOfFileNuma2": [ - { - "name": "FileMappingHandle", - "type": "HANDLE" - }, - { - "name": "ProcessHandle", - "type": "HANDLE" - }, - { - "name": "Offset", - "type": "ULONG64" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "ViewSize", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "PageProtection", - "type": "ULONG" - }, - { - "name": "PreferredNode", - "type": "ULONG" - } - ], - "MapViewOfFile2": [ - { - "name": "FileMappingHandle", - "type": "HANDLE" - }, - { - "name": "ProcessHandle", - "type": "HANDLE" - }, - { - "name": "Offset", - "type": "ULONG64" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "ViewSize", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "PageProtection", - "type": "ULONG" - } - ], - "UnmapViewOfFile2": [ - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "UnmapFlags", - "type": "ULONG" - } - ], - "VirtualAlloc2": [ - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "PageProtection", - "type": "ULONG" - }, - { - "name": "ExtendedParameters", - "type": "MEM_EXTENDED_PARAMETER" - }, - { - "name": "ParameterCount", - "type": "ULONG" - } - ], - "MapViewOfFile3": [ - { - "name": "FileMapping", - "type": "HANDLE" - }, - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "Offset", - "type": "ULONG64" - }, - { - "name": "ViewSize", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "PageProtection", - "type": "ULONG" - }, - { - "name": "ExtendedParameters", - "type": "MEM_EXTENDED_PARAMETER" - }, - { - "name": "ParameterCount", - "type": "ULONG" - } - ], - "VirtualAlloc2FromApp": [ - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "Size", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "PageProtection", - "type": "ULONG" - }, - { - "name": "ExtendedParameters", - "type": "MEM_EXTENDED_PARAMETER" - }, - { - "name": "ParameterCount", - "type": "ULONG" - } - ], - "MapViewOfFile3FromApp": [ - { - "name": "FileMapping", - "type": "HANDLE" - }, - { - "name": "Process", - "type": "HANDLE" - }, - { - "name": "BaseAddress", - "type": "PVOID" - }, - { - "name": "Offset", - "type": "ULONG64" - }, - { - "name": "ViewSize", - "type": "SIZE_T" - }, - { - "name": "AllocationType", - "type": "ULONG" - }, - { - "name": "PageProtection", - "type": "ULONG" - }, - { - "name": "ExtendedParameters", - "type": "MEM_EXTENDED_PARAMETER" - }, - { - "name": "ParameterCount", - "type": "ULONG" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5_dll.json b/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5_dll.json new file mode 100644 index 000000000..779939785 --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5_dll.json @@ -0,0 +1,36 @@ +{ + "MapViewOfFileNuma2": [ + { + "name": "FileMappingHandle", + "type": "HANDLE" + }, + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "PreferredNode", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-processenvironment-l1-1-0.json b/qiling/extensions/windows_sdk/api-ms-win-core-processenvironment-l1-1-0.json deleted file mode 100644 index bc510812a..000000000 --- a/qiling/extensions/windows_sdk/api-ms-win-core-processenvironment-l1-1-0.json +++ /dev/null @@ -1,150 +0,0 @@ -{ - "SetEnvironmentStringsW": [ - { - "name": "NewEnvironment", - "type": "LPWCH" - } - ], - "SetStdHandleEx": [ - { - "name": "nStdHandle", - "type": "DWORD" - }, - { - "name": "hHandle", - "type": "HANDLE" - }, - { - "name": "phPrevValue", - "type": "PHANDLE" - } - ], - "GetCommandLineA": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetCommandLineW": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetEnvironmentStrings": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetEnvironmentStringsW": [ - { - "name": "VOID", - "type": "void" - } - ], - "FreeEnvironmentStringsA": [ - { - "name": "penv", - "type": "LPCH" - } - ], - "FreeEnvironmentStringsW": [ - { - "name": "penv", - "type": "LPWCH" - } - ], - "ExpandEnvironmentStringsA": [ - { - "name": "lpSrc", - "type": "LPCSTR" - }, - { - "name": "lpDst", - "type": "LPSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "ExpandEnvironmentStringsW": [ - { - "name": "lpSrc", - "type": "LPCWSTR" - }, - { - "name": "lpDst", - "type": "LPWSTR" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "SearchPathW": [ - { - "name": "lpPath", - "type": "LPCWSTR" - }, - { - "name": "lpFileName", - "type": "LPCWSTR" - }, - { - "name": "lpExtension", - "type": "LPCWSTR" - }, - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "lpFilePart", - "type": "LPWSTR" - } - ], - "SearchPathA": [ - { - "name": "lpPath", - "type": "LPCSTR" - }, - { - "name": "lpFileName", - "type": "LPCSTR" - }, - { - "name": "lpExtension", - "type": "LPCSTR" - }, - { - "name": "nBufferLength", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "lpFilePart", - "type": "LPSTR" - } - ], - "NeedCurrentDirectoryForExePathA": [ - { - "name": "ExeName", - "type": "LPCSTR" - } - ], - "NeedCurrentDirectoryForExePathW": [ - { - "name": "ExeName", - "type": "LPCWSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-processenvironment-l1-1-0_dll.json b/qiling/extensions/windows_sdk/api-ms-win-core-processenvironment-l1-1-0_dll.json new file mode 100644 index 000000000..a614ec01e --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-processenvironment-l1-1-0_dll.json @@ -0,0 +1,22 @@ +{ + "SetEnvironmentStringsW": [ + { + "name": "NewEnvironment", + "type": "LPWCH" + } + ], + "SetStdHandleEx": [ + { + "name": "nStdHandle", + "type": "DWORD" + }, + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "phPrevValue", + "type": "PHANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0.json b/qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0.json deleted file mode 100644 index 48dd28d3f..000000000 --- a/qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0.json +++ /dev/null @@ -1,956 +0,0 @@ -{ - "SLOpen": [ - { - "name": "phSLC", - "type": "HSLC" - } - ], - "SLClose": [ - { - "name": "hSLC", - "type": "HSLC" - } - ], - "SLInstallProofOfPurchase": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszPKeyAlgorithm", - "type": "PCWSTR" - }, - { - "name": "pwszPKeyString", - "type": "PCWSTR" - }, - { - "name": "cbPKeySpecificData", - "type": "UINT" - }, - { - "name": "pbPKeySpecificData", - "type": "PBYTE" - }, - { - "name": "pPkeyId", - "type": "SLID" - } - ], - "SLInstallProofOfPurchaseEx": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszPKeyAlgorithm", - "type": "PCWSTR" - }, - { - "name": "pwszPKeyString", - "type": "PCWSTR" - }, - { - "name": "cbPKeySpecificData", - "type": "UINT" - }, - { - "name": "pbPKeySpecificData", - "type": "PBYTE" - }, - { - "name": "pPkeyId", - "type": "SLID" - } - ], - "SLUninstallProofOfPurchase": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pPKeyId", - "type": "SLID" - } - ], - "SLInstallLicense": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "cbLicenseBlob", - "type": "UINT" - }, - { - "name": "pbLicenseBlob", - "type": "BYTE" - }, - { - "name": "pLicenseFileId", - "type": "SLID" - } - ], - "SLUninstallLicense": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pLicenseFileId", - "type": "SLID" - } - ], - "SLConsumeRight": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszRightName", - "type": "PCWSTR" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "SLGetProductSkuInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetPKeyInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pPKeyId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetLicenseInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pSLLicenseId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetLicensingStatusInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pAppID", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszRightName", - "type": "PCWSTR" - }, - { - "name": "pnStatusCount", - "type": "UINT" - }, - { - "name": "ppLicensingStatus", - "type": "SL_LICENSING_STATUS" - } - ], - "SLGetPolicyInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetPolicyInformationDWORD": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "pdwValue", - "type": "DWORD" - } - ], - "SLGetServiceInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetApplicationInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLActivateProduct": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "cbAppSpecificData", - "type": "UINT" - }, - { - "name": "pvAppSpecificData", - "type": "PVOID" - }, - { - "name": "pActivationInfo", - "type": "SL_ACTIVATION_INFO_HEADER" - }, - { - "name": "pwszProxyServer", - "type": "PCWSTR" - }, - { - "name": "wProxyPort", - "type": "WORD" - } - ], - "SLGetServerStatus": [ - { - "name": "pwszServerURL", - "type": "PCWSTR" - }, - { - "name": "pwszAcquisitionType", - "type": "PCWSTR" - }, - { - "name": "pwszProxyServer", - "type": "PCWSTR" - }, - { - "name": "wProxyPort", - "type": "WORD" - }, - { - "name": "phrStatus", - "type": "HRESULT" - } - ], - "SLReArm": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SLGenerateOfflineInstallationId": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "ppwszInstallationId", - "type": "PWSTR" - } - ], - "SLGenerateOfflineInstallationIdEx": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pActivationInfo", - "type": "SL_ACTIVATION_INFO_HEADER" - }, - { - "name": "ppwszInstallationId", - "type": "PWSTR" - } - ], - "SLDepositOfflineConfirmationId": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pwszInstallationId", - "type": "PCWSTR" - }, - { - "name": "pwszConfirmationId", - "type": "PCWSTR" - } - ], - "SLDepositOfflineConfirmationIdEx": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pActivationInfo", - "type": "SL_ACTIVATION_INFO_HEADER" - }, - { - "name": "pwszInstallationId", - "type": "PCWSTR" - }, - { - "name": "pwszConfirmationId", - "type": "PCWSTR" - } - ], - "SLGetPKeyId": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszPKeyAlgorithm", - "type": "PCWSTR" - }, - { - "name": "pwszPKeyString", - "type": "PCWSTR" - }, - { - "name": "cbPKeySpecificData", - "type": "UINT" - }, - { - "name": "pbPKeySpecificData", - "type": "BYTE" - }, - { - "name": "pPKeyId", - "type": "SLID" - } - ], - "SLGetInstalledProductKeyIds": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pnProductKeyIds", - "type": "UINT" - }, - { - "name": "ppProductKeyIds", - "type": "SLID" - } - ], - "SLSetCurrentProductKey": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pProductKeyId", - "type": "SLID" - } - ], - "SLGetSLIDList": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "eQueryIdType", - "type": "SLIDTYPE" - }, - { - "name": "pQueryId", - "type": "SLID" - }, - { - "name": "eReturnIdType", - "type": "SLIDTYPE" - }, - { - "name": "pnReturnIds", - "type": "UINT" - }, - { - "name": "ppReturnIds", - "type": "SLID" - } - ], - "SLGetLicenseFileId": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "cbLicenseBlob", - "type": "UINT" - }, - { - "name": "pbLicenseBlob", - "type": "BYTE" - }, - { - "name": "pLicenseFileId", - "type": "SLID" - } - ], - "SLGetLicense": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pLicenseFileId", - "type": "SLID" - }, - { - "name": "pcbLicenseFile", - "type": "UINT" - }, - { - "name": "ppbLicenseFile", - "type": "PBYTE" - } - ], - "SLFireEvent": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszEventId", - "type": "PCWSTR" - }, - { - "name": "pApplicationId", - "type": "SLID" - } - ], - "SLRegisterEvent": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszEventId", - "type": "PCWSTR" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "hEvent", - "type": "HANDLE" - } - ], - "SLUnregisterEvent": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pwszEventId", - "type": "PCWSTR" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "hEvent", - "type": "HANDLE" - } - ], - "SLGetWindowsInformation": [ - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLGetWindowsInformationDWORD": [ - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "pdwValue", - "type": "DWORD" - } - ], - "SLIsGenuineLocal": [ - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pGenuineState", - "type": "SL_GENUINE_STATE" - }, - { - "name": "pUIOptions", - "type": "SL_NONGENUINE_UI_OPTIONS" - } - ], - "SLIsGenuineLocalEx": [ - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pSkuId", - "type": "SLID" - }, - { - "name": "pGenuineState", - "type": "SL_GENUINE_STATE" - } - ], - "SLAcquireGenuineTicket": [ - { - "name": "ppTicketBlob", - "type": "void" - }, - { - "name": "pcbTicketBlob", - "type": "UINT" - }, - { - "name": "pwszTemplateId", - "type": "PCWSTR" - }, - { - "name": "pwszServerUrl", - "type": "PCWSTR" - }, - { - "name": "pwszClientToken", - "type": "PCWSTR" - } - ], - "SLSetGenuineInformation": [ - { - "name": "pQueryId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "eDataType", - "type": "SLDATATYPE" - }, - { - "name": "cbValue", - "type": "UINT" - }, - { - "name": "pbValue", - "type": "BYTE" - } - ], - "SLGetReferralInformation": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "eReferralType", - "type": "SLREFERRALTYPE" - }, - { - "name": "pSkuOrAppId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "ppwszValue", - "type": "PWSTR" - } - ], - "SLPersistRTSPayloadOverride": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "SLPersistApplicationPolicies": [ - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SLGetApplicationPolicy": [ - { - "name": "hPolicyContext", - "type": "HSLP" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLLoadApplicationPolicies": [ - { - "name": "pApplicationId", - "type": "SLID" - }, - { - "name": "pProductSkuId", - "type": "SLID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phPolicyContext", - "type": "HSLP" - } - ], - "SLUnloadApplicationPolicies": [ - { - "name": "hPolicyContext", - "type": "HSLP" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SLGetAuthenticationResult": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "PBYTE" - } - ], - "SLSetAuthenticationData": [ - { - "name": "hSLC", - "type": "HSLC" - }, - { - "name": "cbValue", - "type": "UINT" - }, - { - "name": "pbValue", - "type": "BYTE" - } - ], - "SLGetGenuineInformation": [ - { - "name": "pQueryId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "BYTE" - } - ], - "SLGetGenuineInformationEx": [ - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pwszValueName", - "type": "PCWSTR" - }, - { - "name": "peDataType", - "type": "SLDATATYPE" - }, - { - "name": "pcbValue", - "type": "UINT" - }, - { - "name": "ppbValue", - "type": "BYTE" - } - ], - "SLGatherMigrationBlob": [ - { - "name": "bMigratableOnly", - "type": "BOOL" - }, - { - "name": "pwszEncryptorUri", - "type": "LPCWSTR" - }, - { - "name": "hFile", - "type": "HANDLE" - } - ], - "SLDepositMigrationBlob": [ - { - "name": "hFile", - "type": "HANDLE" - } - ], - "SLQueryLicenseValueFromApp": [ - { - "name": "valueName", - "type": "PCWSTR" - }, - { - "name": "valueType", - "type": "ULONG" - }, - { - "name": "dataBuffer", - "type": "PVOID" - }, - { - "name": "dataSize", - "type": "ULONG" - }, - { - "name": "resultDataSize", - "type": "ULONG" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0_dll.json b/qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0_dll.json new file mode 100644 index 000000000..b507f2fc5 --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0_dll.json @@ -0,0 +1,24 @@ +{ + "SLQueryLicenseValueFromApp": [ + { + "name": "valueName", + "type": "PCWSTR" + }, + { + "name": "valueType", + "type": "ULONG" + }, + { + "name": "dataBuffer", + "type": "PVOID" + }, + { + "name": "dataSize", + "type": "ULONG" + }, + { + "name": "resultDataSize", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-sysinfo-l1-2-3_dll.json b/qiling/extensions/windows_sdk/api-ms-win-core-sysinfo-l1-2-3_dll.json new file mode 100644 index 000000000..e4dc41716 --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-sysinfo-l1-2-3_dll.json @@ -0,0 +1,8 @@ +{ + "GetIntegratedDisplaySize": [ + { + "name": "sizeInInches", + "type": "double" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0.json b/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0.json deleted file mode 100644 index dcceeffe9..000000000 --- a/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0.json +++ /dev/null @@ -1,330 +0,0 @@ -{ - "VerFindFileA": [ - { - "name": "uFlags", - "type": "DWORD" - }, - { - "name": "szFileName", - "type": "LPCSTR" - }, - { - "name": "szWinDir", - "type": "LPCSTR" - }, - { - "name": "szAppDir", - "type": "LPCSTR" - }, - { - "name": "szCurDir", - "type": "LPSTR" - }, - { - "name": "puCurDirLen", - "type": "PUINT" - }, - { - "name": "szDestDir", - "type": "LPSTR" - }, - { - "name": "puDestDirLen", - "type": "PUINT" - } - ], - "VerFindFileW": [ - { - "name": "uFlags", - "type": "DWORD" - }, - { - "name": "szFileName", - "type": "LPCWSTR" - }, - { - "name": "szWinDir", - "type": "LPCWSTR" - }, - { - "name": "szAppDir", - "type": "LPCWSTR" - }, - { - "name": "szCurDir", - "type": "LPWSTR" - }, - { - "name": "puCurDirLen", - "type": "PUINT" - }, - { - "name": "szDestDir", - "type": "LPWSTR" - }, - { - "name": "puDestDirLen", - "type": "PUINT" - } - ], - "VerInstallFileA": [ - { - "name": "uFlags", - "type": "DWORD" - }, - { - "name": "szSrcFileName", - "type": "LPCSTR" - }, - { - "name": "szDestFileName", - "type": "LPCSTR" - }, - { - "name": "szSrcDir", - "type": "LPCSTR" - }, - { - "name": "szDestDir", - "type": "LPCSTR" - }, - { - "name": "szCurDir", - "type": "LPCSTR" - }, - { - "name": "szTmpFile", - "type": "LPSTR" - }, - { - "name": "puTmpFileLen", - "type": "PUINT" - } - ], - "VerInstallFileW": [ - { - "name": "uFlags", - "type": "DWORD" - }, - { - "name": "szSrcFileName", - "type": "LPCWSTR" - }, - { - "name": "szDestFileName", - "type": "LPCWSTR" - }, - { - "name": "szSrcDir", - "type": "LPCWSTR" - }, - { - "name": "szDestDir", - "type": "LPCWSTR" - }, - { - "name": "szCurDir", - "type": "LPCWSTR" - }, - { - "name": "szTmpFile", - "type": "LPWSTR" - }, - { - "name": "puTmpFileLen", - "type": "PUINT" - } - ], - "GetFileVersionInfoSizeA": [ - { - "name": "lptstrFilename", - "type": "LPCSTR" - }, - { - "name": "lpdwHandle", - "type": "LPDWORD" - } - ], - "GetFileVersionInfoSizeW": [ - { - "name": "lptstrFilename", - "type": "LPCWSTR" - }, - { - "name": "lpdwHandle", - "type": "LPDWORD" - } - ], - "GetFileVersionInfoA": [ - { - "name": "lptstrFilename", - "type": "LPCSTR" - }, - { - "name": "dwHandle", - "type": "DWORD" - }, - { - "name": "dwLen", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "LPVOID" - } - ], - "GetFileVersionInfoW": [ - { - "name": "lptstrFilename", - "type": "LPCWSTR" - }, - { - "name": "dwHandle", - "type": "DWORD" - }, - { - "name": "dwLen", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "LPVOID" - } - ], - "GetFileVersionInfoSizeExA": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpwstrFilename", - "type": "LPCSTR" - }, - { - "name": "lpdwHandle", - "type": "LPDWORD" - } - ], - "GetFileVersionInfoSizeExW": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpwstrFilename", - "type": "LPCWSTR" - }, - { - "name": "lpdwHandle", - "type": "LPDWORD" - } - ], - "GetFileVersionInfoExA": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpwstrFilename", - "type": "LPCSTR" - }, - { - "name": "dwHandle", - "type": "DWORD" - }, - { - "name": "dwLen", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "LPVOID" - } - ], - "GetFileVersionInfoExW": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpwstrFilename", - "type": "LPCWSTR" - }, - { - "name": "dwHandle", - "type": "DWORD" - }, - { - "name": "dwLen", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "LPVOID" - } - ], - "VerLanguageNameA": [ - { - "name": "wLang", - "type": "DWORD" - }, - { - "name": "szLang", - "type": "LPSTR" - }, - { - "name": "cchLang", - "type": "DWORD" - } - ], - "VerLanguageNameW": [ - { - "name": "wLang", - "type": "DWORD" - }, - { - "name": "szLang", - "type": "LPWSTR" - }, - { - "name": "cchLang", - "type": "DWORD" - } - ], - "VerQueryValueA": [ - { - "name": "pBlock", - "type": "LPCVOID" - }, - { - "name": "lpSubBlock", - "type": "LPCSTR" - }, - { - "name": "lplpBuffer", - "type": "LPVOID" - }, - { - "name": "puLen", - "type": "PUINT" - } - ], - "VerQueryValueW": [ - { - "name": "pBlock", - "type": "LPCVOID" - }, - { - "name": "lpSubBlock", - "type": "LPCWSTR" - }, - { - "name": "lplpBuffer", - "type": "LPVOID" - }, - { - "name": "puLen", - "type": "PUINT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-localization-l1-2-1.json b/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0_dll.json similarity index 91% rename from qiling/extensions/windows_sdk/api-ms-win-core-localization-l1-2-1.json rename to qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0_dll.json index dcceeffe9..d9afbfc5c 100644 --- a/qiling/extensions/windows_sdk/api-ms-win-core-localization-l1-2-1.json +++ b/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0_dll.json @@ -263,34 +263,6 @@ "type": "LPVOID" } ], - "VerLanguageNameA": [ - { - "name": "wLang", - "type": "DWORD" - }, - { - "name": "szLang", - "type": "LPSTR" - }, - { - "name": "cchLang", - "type": "DWORD" - } - ], - "VerLanguageNameW": [ - { - "name": "wLang", - "type": "DWORD" - }, - { - "name": "szLang", - "type": "LPWSTR" - }, - { - "name": "cchLang", - "type": "DWORD" - } - ], "VerQueryValueA": [ { "name": "pBlock", diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-2-3_dll.json b/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-2-3_dll.json new file mode 100644 index 000000000..36f13d472 --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-2-3_dll.json @@ -0,0 +1,26 @@ +{ + "GetSystemTimeAdjustmentPrecise": [ + { + "name": "lpTimeAdjustment", + "type": "PDWORD64" + }, + { + "name": "lpTimeIncrement", + "type": "PDWORD64" + }, + { + "name": "lpTimeAdjustmentDisabled", + "type": "PBOOL" + } + ], + "SetSystemTimeAdjustmentPrecise": [ + { + "name": "dwTimeAdjustment", + "type": "DWORD64" + }, + { + "name": "bTimeAdjustmentDisabled", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1.json b/qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1.json deleted file mode 100644 index fa976cd6d..000000000 --- a/qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1.json +++ /dev/null @@ -1,194 +0,0 @@ -{ - "RoGetErrorReportingFlags": [ - { - "name": "pflags", - "type": "UINT32" - } - ], - "RoSetErrorReportingFlags": [ - { - "name": "flags", - "type": "UINT32" - } - ], - "RoResolveRestrictedErrorInfoReference": [ - { - "name": "reference", - "type": "PCWSTR" - }, - { - "name": "ppRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "SetRestrictedErrorInfo": [ - { - "name": "pRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "GetRestrictedErrorInfo": [ - { - "name": "ppRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "RoOriginateErrorW": [ - { - "name": "error", - "type": "HRESULT" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "message", - "type": "PCWSTR" - } - ], - "RoOriginateError": [ - { - "name": "error", - "type": "HRESULT" - }, - { - "name": "message", - "type": "HSTRING" - } - ], - "RoTransformErrorW": [ - { - "name": "oldError", - "type": "HRESULT" - }, - { - "name": "newError", - "type": "HRESULT" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "message", - "type": "PCWSTR" - } - ], - "RoTransformError": [ - { - "name": "oldError", - "type": "HRESULT" - }, - { - "name": "newError", - "type": "HRESULT" - }, - { - "name": "message", - "type": "HSTRING" - } - ], - "RoCaptureErrorContext": [ - { - "name": "hr", - "type": "HRESULT" - } - ], - "RoFailFastWithErrorContext": [ - { - "name": "hrError", - "type": "HRESULT" - } - ], - "RoOriginateLanguageException": [ - { - "name": "error", - "type": "HRESULT" - }, - { - "name": "message", - "type": "HSTRING" - }, - { - "name": "languageException", - "type": "IUnknown" - } - ], - "RoClearError": [ - { - "name": "VOID", - "type": "void" - } - ], - "RoReportUnhandledError": [ - { - "name": "pRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "RoInspectThreadErrorInfo": [ - { - "name": "targetTebAddress", - "type": "UINT_PTR" - }, - { - "name": "machine", - "type": "USHORT" - }, - { - "name": "readMemoryCallback", - "type": "PINSPECT_MEMORY_CALLBACK" - }, - { - "name": "context", - "type": "PVOID" - }, - { - "name": "targetErrorInfoAddress", - "type": "UINT_PTR" - } - ], - "RoInspectCapturedStackBackTrace": [ - { - "name": "targetErrorInfoAddress", - "type": "UINT_PTR" - }, - { - "name": "machine", - "type": "USHORT" - }, - { - "name": "readMemoryCallback", - "type": "PINSPECT_MEMORY_CALLBACK" - }, - { - "name": "context", - "type": "PVOID" - }, - { - "name": "frameCount", - "type": "UINT32" - }, - { - "name": "targetBackTraceAddress", - "type": "UINT_PTR" - } - ], - "RoReportFailedDelegate": [ - { - "name": "punkDelegate", - "type": "IUnknown" - }, - { - "name": "pRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "IsErrorPropagationEnabled": [ - { - "name": "VOID", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1_dll.json b/qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1_dll.json new file mode 100644 index 000000000..b4bc9eb45 --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1_dll.json @@ -0,0 +1,8 @@ +{ + "RoReportUnhandledError": [ + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-shcore-thread-l1-1-0_dll.json b/qiling/extensions/windows_sdk/api-ms-win-shcore-thread-l1-1-0_dll.json new file mode 100644 index 000000000..8cc9bd088 --- /dev/null +++ b/qiling/extensions/windows_sdk/api-ms-win-shcore-thread-l1-1-0_dll.json @@ -0,0 +1,14 @@ +{ + "SetProcessReference": [ + { + "name": "punk", + "type": "IUnknown" + } + ], + "GetProcessReference": [ + { + "name": "punk", + "type": "IUnknown" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-wsl-api-l1-1-0.json b/qiling/extensions/windows_sdk/api-ms-win-wsl-api-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-wsl-api-l1-1-0.json rename to qiling/extensions/windows_sdk/api-ms-win-wsl-api-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/Apphelp.json b/qiling/extensions/windows_sdk/apphelp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Apphelp.json rename to qiling/extensions/windows_sdk/apphelp_dll.json diff --git a/qiling/extensions/windows_sdk/atlthunk.json b/qiling/extensions/windows_sdk/atlthunk_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/atlthunk.json rename to qiling/extensions/windows_sdk/atlthunk_dll.json diff --git a/qiling/extensions/windows_sdk/authz.json b/qiling/extensions/windows_sdk/authz_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/authz.json rename to qiling/extensions/windows_sdk/authz_dll.json diff --git a/qiling/extensions/windows_sdk/avicap32_dll.json b/qiling/extensions/windows_sdk/avicap32_dll.json new file mode 100644 index 000000000..c1d87400a --- /dev/null +++ b/qiling/extensions/windows_sdk/avicap32_dll.json @@ -0,0 +1,114 @@ +{ + "capCreateCaptureWindowA": [ + { + "name": "lpszWindowName", + "type": "LPCSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + } + ], + "capGetDriverDescriptionA": [ + { + "name": "wDriverIndex", + "type": "UINT" + }, + { + "name": "lpszName", + "type": "LPSTR" + }, + { + "name": "cbName", + "type": "int" + }, + { + "name": "lpszVer", + "type": "LPSTR" + }, + { + "name": "cbVer", + "type": "int" + } + ], + "capCreateCaptureWindowW": [ + { + "name": "lpszWindowName", + "type": "LPCWSTR" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "nWidth", + "type": "int" + }, + { + "name": "nHeight", + "type": "int" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + } + ], + "capGetDriverDescriptionW": [ + { + "name": "wDriverIndex", + "type": "UINT" + }, + { + "name": "lpszName", + "type": "LPWSTR" + }, + { + "name": "cbName", + "type": "int" + }, + { + "name": "lpszVer", + "type": "LPWSTR" + }, + { + "name": "cbVer", + "type": "int" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Avifil32.json b/qiling/extensions/windows_sdk/avifil32_dll.json similarity index 51% rename from qiling/extensions/windows_sdk/Avifil32.json rename to qiling/extensions/windows_sdk/avifil32_dll.json index 382f95441..699dceb17 100644 --- a/qiling/extensions/windows_sdk/Avifil32.json +++ b/qiling/extensions/windows_sdk/avifil32_dll.json @@ -1,670 +1,4 @@ { - "ICInfo": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "lpicinfo", - "type": "ICINFO" - } - ], - "ICInstall": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "szDesc", - "type": "LPSTR" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "ICRemove": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "ICGetInfo": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "picinfo", - "type": "ICINFO" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "ICOpen": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "wMode", - "type": "UINT" - } - ], - "ICOpenFunction": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "wMode", - "type": "UINT" - }, - { - "name": "lpfnHandler", - "type": "FARPROC" - } - ], - "ICClose": [ - { - "name": "hic", - "type": "HIC" - } - ], - "ICSendMessage": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "msg", - "type": "UINT" - }, - { - "name": "dw1", - "type": "DWORD_PTR" - }, - { - "name": "dw2", - "type": "DWORD_PTR" - } - ], - "ICCompress": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpbiOutput", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "lpbiInput", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "lpckid", - "type": "LPDWORD" - }, - { - "name": "lpdwFlags", - "type": "LPDWORD" - }, - { - "name": "lFrameNum", - "type": "LONG" - }, - { - "name": "dwFrameSize", - "type": "DWORD" - }, - { - "name": "dwQuality", - "type": "DWORD" - }, - { - "name": "lpbiPrev", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpPrev", - "type": "LPVOID" - } - ], - "ICDecompress": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpbiFormat", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpBits", - "type": "LPVOID" - } - ], - "ICDrawBegin": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xDst", - "type": "int" - }, - { - "name": "yDst", - "type": "int" - }, - { - "name": "dxDst", - "type": "int" - }, - { - "name": "dyDst", - "type": "int" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "dxSrc", - "type": "int" - }, - { - "name": "dySrc", - "type": "int" - }, - { - "name": "dwRate", - "type": "DWORD" - }, - { - "name": "dwScale", - "type": "DWORD" - } - ], - "ICDraw": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpFormat", - "type": "LPVOID" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "lTime", - "type": "LONG" - } - ], - "ICLocate": [ - { - "name": "fccType", - "type": "DWORD" - }, - { - "name": "fccHandler", - "type": "DWORD" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpbiOut", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "wFlags", - "type": "WORD" - } - ], - "ICGetDisplayFormat": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpbiOut", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "BitDepth", - "type": "int" - }, - { - "name": "dx", - "type": "int" - }, - { - "name": "dy", - "type": "int" - } - ], - "ICImageCompress": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFO" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "lpbiOut", - "type": "LPBITMAPINFO" - }, - { - "name": "lQuality", - "type": "LONG" - }, - { - "name": "plSize", - "type": "LONG" - } - ], - "ICImageDecompress": [ - { - "name": "hic", - "type": "HIC" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFO" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "lpbiOut", - "type": "LPBITMAPINFO" - } - ], - "ICCompressorChoose": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "pvIn", - "type": "LPVOID" - }, - { - "name": "lpData", - "type": "LPVOID" - }, - { - "name": "pc", - "type": "PCOMPVARS" - }, - { - "name": "lpszTitle", - "type": "LPSTR" - } - ], - "ICSeqCompressFrameStart": [ - { - "name": "pc", - "type": "PCOMPVARS" - }, - { - "name": "lpbiIn", - "type": "LPBITMAPINFO" - } - ], - "ICSeqCompressFrameEnd": [ - { - "name": "pc", - "type": "PCOMPVARS" - } - ], - "ICSeqCompressFrame": [ - { - "name": "pc", - "type": "PCOMPVARS" - }, - { - "name": "uiFlags", - "type": "UINT" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "pfKey", - "type": "BOOL" - }, - { - "name": "plSize", - "type": "LONG" - } - ], - "ICCompressorFree": [ - { - "name": "pc", - "type": "PCOMPVARS" - } - ], - "DrawDibOpen": [ - { - "name": "VOID", - "type": "void" - } - ], - "DrawDibClose": [ - { - "name": "hdd", - "type": "HDRAWDIB" - } - ], - "DrawDibGetBuffer": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "dwSize", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "DrawDibGetPalette": [ - { - "name": "hdd", - "type": "HDRAWDIB" - } - ], - "DrawDibSetPalette": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "hpal", - "type": "HPALETTE" - } - ], - "DrawDibChangePalette": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "iStart", - "type": "int" - }, - { - "name": "iLen", - "type": "int" - }, - { - "name": "lppe", - "type": "LPPALETTEENTRY" - } - ], - "DrawDibRealize": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "fBackground", - "type": "BOOL" - } - ], - "DrawDibStart": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "rate", - "type": "DWORD" - } - ], - "DrawDibStop": [ - { - "name": "hdd", - "type": "HDRAWDIB" - } - ], - "DrawDibBegin": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "dxDst", - "type": "int" - }, - { - "name": "dyDst", - "type": "int" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "dxSrc", - "type": "int" - }, - { - "name": "dySrc", - "type": "int" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "DrawDibDraw": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xDst", - "type": "int" - }, - { - "name": "yDst", - "type": "int" - }, - { - "name": "dxDst", - "type": "int" - }, - { - "name": "dyDst", - "type": "int" - }, - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - }, - { - "name": "lpBits", - "type": "LPVOID" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "dxSrc", - "type": "int" - }, - { - "name": "dySrc", - "type": "int" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "DrawDibEnd": [ - { - "name": "hdd", - "type": "HDRAWDIB" - } - ], - "DrawDibTime": [ - { - "name": "hdd", - "type": "HDRAWDIB" - }, - { - "name": "lpddtime", - "type": "LPDRAWDIBTIME" - } - ], - "DrawDibProfileDisplay": [ - { - "name": "lpbi", - "type": "LPBITMAPINFOHEADER" - } - ], "AVIFileInit": [ { "name": "VOID", @@ -1540,183 +874,5 @@ "name": "cbInfo", "type": "LONG" } - ], - "MCIWndCreateA": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "szFile", - "type": "LPCSTR" - } - ], - "MCIWndCreateW": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "szFile", - "type": "LPCWSTR" - } - ], - "MCIWndRegisterClass": [ - { - "name": "VOID", - "type": "void" - } - ], - "capCreateCaptureWindowA": [ - { - "name": "lpszWindowName", - "type": "LPCSTR" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "nID", - "type": "int" - } - ], - "capGetDriverDescriptionA": [ - { - "name": "wDriverIndex", - "type": "UINT" - }, - { - "name": "lpszName", - "type": "LPSTR" - }, - { - "name": "cbName", - "type": "int" - }, - { - "name": "lpszVer", - "type": "LPSTR" - }, - { - "name": "cbVer", - "type": "int" - } - ], - "capCreateCaptureWindowW": [ - { - "name": "lpszWindowName", - "type": "LPCWSTR" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "nID", - "type": "int" - } - ], - "capGetDriverDescriptionW": [ - { - "name": "wDriverIndex", - "type": "UINT" - }, - { - "name": "lpszName", - "type": "LPWSTR" - }, - { - "name": "cbName", - "type": "int" - }, - { - "name": "lpszVer", - "type": "LPWSTR" - }, - { - "name": "cbVer", - "type": "int" - } - ], - "GetOpenFileNamePreviewA": [ - { - "name": "lpofn", - "type": "LPOPENFILENAMEA" - } - ], - "GetSaveFileNamePreviewA": [ - { - "name": "lpofn", - "type": "LPOPENFILENAMEA" - } - ], - "GetOpenFileNamePreviewW": [ - { - "name": "lpofn", - "type": "LPOPENFILENAMEW" - } - ], - "GetSaveFileNamePreviewW": [ - { - "name": "lpofn", - "type": "LPOPENFILENAMEW" - } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/avrt.json b/qiling/extensions/windows_sdk/avrt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/avrt.json rename to qiling/extensions/windows_sdk/avrt_dll.json diff --git a/qiling/extensions/windows_sdk/bcrypt.json b/qiling/extensions/windows_sdk/bcrypt_dll.json similarity index 99% rename from qiling/extensions/windows_sdk/bcrypt.json rename to qiling/extensions/windows_sdk/bcrypt_dll.json index ba10490c0..0e24ed2b2 100644 --- a/qiling/extensions/windows_sdk/bcrypt.json +++ b/qiling/extensions/windows_sdk/bcrypt_dll.json @@ -1091,12 +1091,6 @@ "type": "HANDLE" } ], - "BCryptUnregisterConfigChangeNotify": [ - { - "name": "hEvent", - "type": "HANDLE" - } - ], "BCryptResolveProviders": [ { "name": "pszContext", diff --git a/qiling/extensions/windows_sdk/bcrypt_h.json b/qiling/extensions/windows_sdk/bcrypt_h.json new file mode 100644 index 000000000..539491d3b --- /dev/null +++ b/qiling/extensions/windows_sdk/bcrypt_h.json @@ -0,0 +1,8 @@ +{ + "BCryptUnregisterConfigChangeNotify": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/bluetoothapis.json b/qiling/extensions/windows_sdk/bluetoothapis_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/bluetoothapis.json rename to qiling/extensions/windows_sdk/bluetoothapis_dll.json diff --git a/qiling/extensions/windows_sdk/bthprops_cpl.json b/qiling/extensions/windows_sdk/bthprops_cpl.json new file mode 100644 index 000000000..808606bed --- /dev/null +++ b/qiling/extensions/windows_sdk/bthprops_cpl.json @@ -0,0 +1,12 @@ +{ + "BluetoothIsVersionAvailable": [ + { + "name": "MajorVersion", + "type": "UCHAR" + }, + { + "name": "MinorVersion", + "type": "UCHAR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Bthprops.json b/qiling/extensions/windows_sdk/bthprops_dll.json similarity index 97% rename from qiling/extensions/windows_sdk/Bthprops.json rename to qiling/extensions/windows_sdk/bthprops_dll.json index 51ef19def..560389c08 100644 --- a/qiling/extensions/windows_sdk/Bthprops.json +++ b/qiling/extensions/windows_sdk/bthprops_dll.json @@ -412,15 +412,5 @@ "name": "pServiceInfoIn", "type": "BLUETOOTH_LOCAL_SERVICE_INFO_STRUCT" } - ], - "BluetoothIsVersionAvailable": [ - { - "name": "MajorVersion", - "type": "UCHAR" - }, - { - "name": "MinorVersion", - "type": "UCHAR" - } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/C_g18030.json b/qiling/extensions/windows_sdk/c_g18030_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/C_g18030.json rename to qiling/extensions/windows_sdk/c_g18030_dll.json diff --git a/qiling/extensions/windows_sdk/cabinet_dll.json b/qiling/extensions/windows_sdk/cabinet_dll.json new file mode 100644 index 000000000..12c92ac59 --- /dev/null +++ b/qiling/extensions/windows_sdk/cabinet_dll.json @@ -0,0 +1,406 @@ +{ + "FCICreate": [ + { + "name": "perf", + "type": "PERF" + }, + { + "name": "pfnfcifp", + "type": "PFNFCIFILEPLACED" + }, + { + "name": "pfna", + "type": "PFNFCIALLOC" + }, + { + "name": "pfnf", + "type": "PFNFCIFREE" + }, + { + "name": "pfnopen", + "type": "PFNFCIOPEN" + }, + { + "name": "pfnread", + "type": "PFNFCIREAD" + }, + { + "name": "pfnwrite", + "type": "PFNFCIWRITE" + }, + { + "name": "pfnclose", + "type": "PFNFCICLOSE" + }, + { + "name": "pfnseek", + "type": "PFNFCISEEK" + }, + { + "name": "pfndelete", + "type": "PFNFCIDELETE" + }, + { + "name": "pfnfcigtf", + "type": "PFNFCIGETTEMPFILE" + }, + { + "name": "pccab", + "type": "PCCAB" + }, + { + "name": "pv", + "type": "void" + } + ], + "FCIAddFile": [ + { + "name": "hfci", + "type": "HFCI" + }, + { + "name": "pszSourceFile", + "type": "LPSTR" + }, + { + "name": "pszFileName", + "type": "LPSTR" + }, + { + "name": "fExecute", + "type": "BOOL" + }, + { + "name": "pfnfcignc", + "type": "PFNFCIGETNEXTCABINET" + }, + { + "name": "pfnfcis", + "type": "PFNFCISTATUS" + }, + { + "name": "pfnfcigoi", + "type": "PFNFCIGETOPENINFO" + }, + { + "name": "typeCompress", + "type": "TCOMP" + } + ], + "FCIFlushCabinet": [ + { + "name": "hfci", + "type": "HFCI" + }, + { + "name": "fGetNextCab", + "type": "BOOL" + }, + { + "name": "pfnfcignc", + "type": "PFNFCIGETNEXTCABINET" + }, + { + "name": "pfnfcis", + "type": "PFNFCISTATUS" + } + ], + "FCIFlushFolder": [ + { + "name": "hfci", + "type": "HFCI" + }, + { + "name": "pfnfcignc", + "type": "PFNFCIGETNEXTCABINET" + }, + { + "name": "pfnfcis", + "type": "PFNFCISTATUS" + } + ], + "FCIDestroy": [ + { + "name": "hfci", + "type": "HFCI" + } + ], + "FDICreate": [ + { + "name": "pfnalloc", + "type": "PFNALLOC" + }, + { + "name": "pfnfree", + "type": "PFNFREE" + }, + { + "name": "pfnopen", + "type": "PFNOPEN" + }, + { + "name": "pfnread", + "type": "PFNREAD" + }, + { + "name": "pfnwrite", + "type": "PFNWRITE" + }, + { + "name": "pfnclose", + "type": "PFNCLOSE" + }, + { + "name": "pfnseek", + "type": "PFNSEEK" + }, + { + "name": "cpuType", + "type": "int" + }, + { + "name": "perf", + "type": "PERF" + } + ], + "FDIIsCabinet": [ + { + "name": "hfdi", + "type": "HFDI" + }, + { + "name": "hf", + "type": "INT_PTR" + }, + { + "name": "pfdici", + "type": "PFDICABINETINFO" + } + ], + "FDICopy": [ + { + "name": "hfdi", + "type": "HFDI" + }, + { + "name": "pszCabinet", + "type": "LPSTR" + }, + { + "name": "pszCabPath", + "type": "LPSTR" + }, + { + "name": "flags", + "type": "int" + }, + { + "name": "pfnfdin", + "type": "PFNFDINOTIFY" + }, + { + "name": "pfnfdid", + "type": "PFNFDIDECRYPT" + }, + { + "name": "pvUser", + "type": "void" + } + ], + "FDIDestroy": [ + { + "name": "hfdi", + "type": "HFDI" + } + ], + "FDITruncateCabinet": [ + { + "name": "hfdi", + "type": "HFDI" + }, + { + "name": "pszCabinetName", + "type": "LPSTR" + }, + { + "name": "iFolderToDelete", + "type": "USHORT" + } + ], + "CreateCompressor": [ + { + "name": "Algorithm", + "type": "DWORD" + }, + { + "name": "AllocationRoutines", + "type": "PCOMPRESS_ALLOCATION_ROUTINES" + }, + { + "name": "CompressorHandle", + "type": "PCOMPRESSOR_HANDLE" + } + ], + "SetCompressorInformation": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + }, + { + "name": "CompressInformationClass", + "type": "COMPRESS_INFORMATION_CLASS" + }, + { + "name": "CompressInformation", + "type": "LPCVOID" + }, + { + "name": "CompressInformationSize", + "type": "SIZE_T" + } + ], + "QueryCompressorInformation": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + }, + { + "name": "CompressInformationClass", + "type": "COMPRESS_INFORMATION_CLASS" + }, + { + "name": "CompressInformation", + "type": "PVOID" + }, + { + "name": "CompressInformationSize", + "type": "SIZE_T" + } + ], + "Compress": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + }, + { + "name": "UncompressedData", + "type": "LPCVOID" + }, + { + "name": "UncompressedDataSize", + "type": "SIZE_T" + }, + { + "name": "CompressedBuffer", + "type": "PVOID" + }, + { + "name": "CompressedBufferSize", + "type": "SIZE_T" + }, + { + "name": "CompressedDataSize", + "type": "PSIZE_T" + } + ], + "ResetCompressor": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + } + ], + "CloseCompressor": [ + { + "name": "CompressorHandle", + "type": "COMPRESSOR_HANDLE" + } + ], + "CreateDecompressor": [ + { + "name": "Algorithm", + "type": "DWORD" + }, + { + "name": "AllocationRoutines", + "type": "PCOMPRESS_ALLOCATION_ROUTINES" + }, + { + "name": "DecompressorHandle", + "type": "PDECOMPRESSOR_HANDLE" + } + ], + "SetDecompressorInformation": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + }, + { + "name": "CompressInformationClass", + "type": "COMPRESS_INFORMATION_CLASS" + }, + { + "name": "CompressInformation", + "type": "LPCVOID" + }, + { + "name": "CompressInformationSize", + "type": "SIZE_T" + } + ], + "QueryDecompressorInformation": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + }, + { + "name": "CompressInformationClass", + "type": "COMPRESS_INFORMATION_CLASS" + }, + { + "name": "CompressInformation", + "type": "PVOID" + }, + { + "name": "CompressInformationSize", + "type": "SIZE_T" + } + ], + "Decompress": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + }, + { + "name": "CompressedData", + "type": "LPCVOID" + }, + { + "name": "CompressedDataSize", + "type": "SIZE_T" + }, + { + "name": "UncompressedBuffer", + "type": "PVOID" + }, + { + "name": "UncompressedBufferSize", + "type": "SIZE_T" + }, + { + "name": "UncompressedDataSize", + "type": "PSIZE_T" + } + ], + "ResetDecompressor": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + } + ], + "CloseDecompressor": [ + { + "name": "DecompressorHandle", + "type": "DECOMPRESSOR_HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Certadm.json b/qiling/extensions/windows_sdk/certadm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Certadm.json rename to qiling/extensions/windows_sdk/certadm_dll.json diff --git a/qiling/extensions/windows_sdk/cfgmgr32.json b/qiling/extensions/windows_sdk/cfgmgr32_dll.json similarity index 76% rename from qiling/extensions/windows_sdk/cfgmgr32.json rename to qiling/extensions/windows_sdk/cfgmgr32_dll.json index 59859ee0b..a54ebeaca 100644 --- a/qiling/extensions/windows_sdk/cfgmgr32.json +++ b/qiling/extensions/windows_sdk/cfgmgr32_dll.json @@ -309,24 +309,6 @@ "type": "HMACHINE" } ], - "CM_Get_Device_IDW": [ - { - "name": "dnDevInst", - "type": "DEVINST" - }, - { - "name": "Buffer", - "type": "PWSTR" - }, - { - "name": "BufferLen", - "type": "ULONG" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], "CM_Get_Device_ID_ListA": [ { "name": "pszFilter", @@ -489,32 +471,6 @@ "type": "HMACHINE" } ], - "CM_Get_DevNode_Registry_PropertyW": [ - { - "name": "dnDevInst", - "type": "DEVINST" - }, - { - "name": "ulProperty", - "type": "ULONG" - }, - { - "name": "pulRegDataType", - "type": "PULONG" - }, - { - "name": "Buffer", - "type": "PVOID" - }, - { - "name": "pulLength", - "type": "PULONG" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], "CM_Get_DevNode_Status": [ { "name": "pulStatus", @@ -667,32 +623,6 @@ "type": "ULONG" } ], - "CM_Get_Device_Interface_PropertyW": [ - { - "name": "pszDeviceInterface", - "type": "LPCWSTR" - }, - { - "name": "PropertyKey", - "type": "DEVPROPKEY" - }, - { - "name": "PropertyType", - "type": "DEVPROPTYPE" - }, - { - "name": "PropertyBuffer", - "type": "PBYTE" - }, - { - "name": "PropertyBufferSize", - "type": "PULONG" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], "CM_Get_Device_Interface_Property_ExW": [ { "name": "pszDeviceInterface", @@ -723,24 +653,6 @@ "type": "HMACHINE" } ], - "CM_Get_Device_Interface_Property_KeysW": [ - { - "name": "pszDeviceInterface", - "type": "LPCWSTR" - }, - { - "name": "PropertyKeyArray", - "type": "DEVPROPKEY" - }, - { - "name": "PropertyKeyCount", - "type": "PULONG" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], "CM_Get_Log_Conf_Priority": [ { "name": "lcLogConf", @@ -1101,32 +1013,6 @@ "type": "HMACHINE" } ], - "CM_Open_Class_KeyW": [ - { - "name": "ClassGuid", - "type": "LPGUID" - }, - { - "name": "pszClassName", - "type": "LPCWSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "Disposition", - "type": "REGDISPOSITION" - }, - { - "name": "phkClass", - "type": "PHKEY" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], "CM_Open_DevNode_Key": [ { "name": "dnDevNode", @@ -1153,134 +1039,6 @@ "type": "ULONG" } ], - "CM_Open_Device_Interface_KeyA": [ - { - "name": "pszDeviceInterface", - "type": "LPCSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "Disposition", - "type": "REGDISPOSITION" - }, - { - "name": "phkDeviceInterface", - "type": "PHKEY" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], - "CM_Open_Device_Interface_KeyW": [ - { - "name": "pszDeviceInterface", - "type": "LPCWSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "Disposition", - "type": "REGDISPOSITION" - }, - { - "name": "phkDeviceInterface", - "type": "PHKEY" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], - "CM_Open_Device_Interface_Key_ExA": [ - { - "name": "pszDeviceInterface", - "type": "LPCSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "Disposition", - "type": "REGDISPOSITION" - }, - { - "name": "phkDeviceInterface", - "type": "PHKEY" - }, - { - "name": "ulFlags", - "type": "ULONG" - }, - { - "name": "hMachine", - "type": "HMACHINE" - } - ], - "CM_Open_Device_Interface_Key_ExW": [ - { - "name": "pszDeviceInterface", - "type": "LPCWSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "Disposition", - "type": "REGDISPOSITION" - }, - { - "name": "phkDeviceInterface", - "type": "PHKEY" - }, - { - "name": "ulFlags", - "type": "ULONG" - }, - { - "name": "hMachine", - "type": "HMACHINE" - } - ], - "CM_Delete_Device_Interface_KeyW": [ - { - "name": "pszDeviceInterface", - "type": "LPCWSTR" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], - "CM_Query_And_Remove_SubTreeW": [ - { - "name": "dnAncestor", - "type": "DEVINST" - }, - { - "name": "pVetoType", - "type": "PPNP_VETO_TYPE" - }, - { - "name": "pszVetoName", - "type": "LPWSTR" - }, - { - "name": "ulNameLength", - "type": "ULONG" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], "CM_Reenumerate_DevNode": [ { "name": "dnDevInst", @@ -1337,80 +1095,6 @@ "type": "ULONG" } ], - "CM_Set_DevNode_PropertyW": [ - { - "name": "dnDevInst", - "type": "DEVINST" - }, - { - "name": "PropertyKey", - "type": "DEVPROPKEY" - }, - { - "name": "PropertyType", - "type": "DEVPROPTYPE" - }, - { - "name": "PropertyBuffer", - "type": "PBYTE" - }, - { - "name": "PropertyBufferSize", - "type": "ULONG" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], - "CM_Set_DevNode_Registry_PropertyW": [ - { - "name": "dnDevInst", - "type": "DEVINST" - }, - { - "name": "ulProperty", - "type": "ULONG" - }, - { - "name": "Buffer", - "type": "PCVOID" - }, - { - "name": "ulLength", - "type": "ULONG" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], - "CM_Set_Device_Interface_PropertyW": [ - { - "name": "pszDeviceInterface", - "type": "LPCWSTR" - }, - { - "name": "PropertyKey", - "type": "DEVPROPKEY" - }, - { - "name": "PropertyType", - "type": "DEVPROPTYPE" - }, - { - "name": "PropertyBuffer", - "type": "PBYTE" - }, - { - "name": "PropertyBufferSize", - "type": "ULONG" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], "CM_Is_Dock_Station_Present": [ { "name": "pbPresent", @@ -1505,32 +1189,6 @@ "type": "PULONG" } ], - "CM_Get_Class_PropertyW": [ - { - "name": "ClassGUID", - "type": "LPCGUID" - }, - { - "name": "PropertyKey", - "type": "DEVPROPKEY" - }, - { - "name": "PropertyType", - "type": "DEVPROPTYPE" - }, - { - "name": "PropertyBuffer", - "type": "PBYTE" - }, - { - "name": "PropertyBufferSize", - "type": "PULONG" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], "CM_Get_Class_Property_Keys": [ { "name": "ClassGUID", @@ -1571,120 +1229,180 @@ "type": "HMACHINE" } ], - "CM_Set_Class_PropertyW": [ + "CM_Register_Notification": [ { - "name": "ClassGUID", - "type": "LPCGUID" + "name": "pFilter", + "type": "PCM_NOTIFY_FILTER" }, { - "name": "PropertyKey", - "type": "DEVPROPKEY" + "name": "pContext", + "type": "PVOID" }, { - "name": "PropertyType", - "type": "DEVPROPTYPE" + "name": "pCallback", + "type": "PCM_NOTIFY_CALLBACK" }, { - "name": "PropertyBuffer", - "type": "PBYTE" - }, + "name": "pNotifyContext", + "type": "PHCMNOTIFICATION" + } + ], + "CM_Unregister_Notification": [ { - "name": "PropertyBufferSize", - "type": "ULONG" + "name": "NotifyContext", + "type": "HCMNOTIFICATION" + } + ], + "CM_MapCrToWin32Err": [ + { + "name": "CmReturnCode", + "type": "CONFIGRET" }, { - "name": "ulFlags", - "type": "ULONG" + "name": "DefaultErr", + "type": "DWORD" } ], - "CM_Get_Class_Registry_PropertyW": [ + "SwDeviceCreate": [ { - "name": "ClassGuid", - "type": "LPGUID" + "name": "pszEnumeratorName", + "type": "PCWSTR" }, { - "name": "ulProperty", + "name": "pszParentDeviceInstance", + "type": "PCWSTR" + }, + { + "name": "pCreateInfo", + "type": "SW_DEVICE_CREATE_INFO" + }, + { + "name": "cPropertyCount", "type": "ULONG" }, { - "name": "pulRegDataType", - "type": "PULONG" + "name": "pProperties", + "type": "DEVPROPERTY" }, { - "name": "Buffer", + "name": "pCallback", + "type": "SW_DEVICE_CREATE_CALLBACK" + }, + { + "name": "pContext", "type": "PVOID" }, { - "name": "pulLength", - "type": "PULONG" + "name": "phSwDevice", + "type": "PHSWDEVICE" + } + ], + "SwDeviceClose": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" + } + ], + "SwDeviceSetLifetime": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" }, { - "name": "ulFlags", - "type": "ULONG" + "name": "Lifetime", + "type": "SW_DEVICE_LIFETIME" + } + ], + "SwDeviceGetLifetime": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" }, { - "name": "hMachine", - "type": "HMACHINE" + "name": "pLifetime", + "type": "PSW_DEVICE_LIFETIME" } ], - "CM_Set_Class_Registry_PropertyW": [ + "SwDevicePropertySet": [ { - "name": "ClassGuid", - "type": "LPGUID" + "name": "hSwDevice", + "type": "HSWDEVICE" }, { - "name": "ulProperty", + "name": "cPropertyCount", "type": "ULONG" }, { - "name": "Buffer", - "type": "PCVOID" + "name": "pProperties", + "type": "DEVPROPERTY" + } + ], + "SwDeviceInterfaceRegister": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" }, { - "name": "ulLength", - "type": "ULONG" + "name": "pInterfaceClassGuid", + "type": "GUID" }, { - "name": "ulFlags", + "name": "pszReferenceString", + "type": "PCWSTR" + }, + { + "name": "cPropertyCount", "type": "ULONG" }, { - "name": "hMachine", - "type": "HMACHINE" - } - ], - "CM_Register_Notification": [ + "name": "pProperties", + "type": "DEVPROPERTY" + }, { - "name": "pFilter", - "type": "PCM_NOTIFY_FILTER" + "name": "fEnabled", + "type": "BOOL" }, { - "name": "pContext", + "name": "ppszDeviceInterfaceId", + "type": "PWSTR" + } + ], + "SwMemFree": [ + { + "name": "pMem", "type": "PVOID" + } + ], + "SwDeviceInterfaceSetState": [ + { + "name": "hSwDevice", + "type": "HSWDEVICE" }, { - "name": "pCallback", - "type": "PCM_NOTIFY_CALLBACK" + "name": "pszDeviceInterfaceId", + "type": "PCWSTR" }, { - "name": "pNotifyContext", - "type": "PHCMNOTIFICATION" + "name": "fEnabled", + "type": "BOOL" } ], - "CM_Unregister_Notification": [ + "SwDeviceInterfacePropertySet": [ { - "name": "NotifyContext", - "type": "HCMNOTIFICATION" - } - ], - "CM_MapCrToWin32Err": [ + "name": "hSwDevice", + "type": "HSWDEVICE" + }, { - "name": "CmReturnCode", - "type": "CONFIGRET" + "name": "pszDeviceInterfaceId", + "type": "PCWSTR" }, { - "name": "DefaultErr", - "type": "DWORD" + "name": "cPropertyCount", + "type": "ULONG" + }, + { + "name": "pProperties", + "type": "DEVPROPERTY" } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/cfgmgr32_lib.json b/qiling/extensions/windows_sdk/cfgmgr32_lib.json new file mode 100644 index 000000000..9aa2cb193 --- /dev/null +++ b/qiling/extensions/windows_sdk/cfgmgr32_lib.json @@ -0,0 +1,426 @@ +{ + "CM_Get_Device_IDW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "Buffer", + "type": "PWSTR" + }, + { + "name": "BufferLen", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_DevNode_Registry_PropertyW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulProperty", + "type": "ULONG" + }, + { + "name": "pulRegDataType", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "pulLength", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_PropertyW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Device_Interface_Property_KeysW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "PropertyKeyArray", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyKeyCount", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Open_Class_KeyW": [ + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "pszClassName", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkClass", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Open_Device_Interface_KeyA": [ + { + "name": "pszDeviceInterface", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDeviceInterface", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Open_Device_Interface_KeyW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDeviceInterface", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Open_Device_Interface_Key_ExA": [ + { + "name": "pszDeviceInterface", + "type": "LPCSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDeviceInterface", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Open_Device_Interface_Key_ExW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "samDesired", + "type": "REGSAM" + }, + { + "name": "Disposition", + "type": "REGDISPOSITION" + }, + { + "name": "phkDeviceInterface", + "type": "PHKEY" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Delete_Device_Interface_KeyW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Query_And_Remove_SubTreeW": [ + { + "name": "dnAncestor", + "type": "DEVINST" + }, + { + "name": "pVetoType", + "type": "PPNP_VETO_TYPE" + }, + { + "name": "pszVetoName", + "type": "LPWSTR" + }, + { + "name": "ulNameLength", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Set_DevNode_PropertyW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Set_DevNode_Registry_PropertyW": [ + { + "name": "dnDevInst", + "type": "DEVINST" + }, + { + "name": "ulProperty", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PCVOID" + }, + { + "name": "ulLength", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Set_Device_Interface_PropertyW": [ + { + "name": "pszDeviceInterface", + "type": "LPCWSTR" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Class_PropertyW": [ + { + "name": "ClassGUID", + "type": "LPCGUID" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Set_Class_PropertyW": [ + { + "name": "ClassGUID", + "type": "LPCGUID" + }, + { + "name": "PropertyKey", + "type": "DEVPROPKEY" + }, + { + "name": "PropertyType", + "type": "DEVPROPTYPE" + }, + { + "name": "PropertyBuffer", + "type": "PBYTE" + }, + { + "name": "PropertyBufferSize", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + } + ], + "CM_Get_Class_Registry_PropertyW": [ + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "ulProperty", + "type": "ULONG" + }, + { + "name": "pulRegDataType", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "pulLength", + "type": "PULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ], + "CM_Set_Class_Registry_PropertyW": [ + { + "name": "ClassGuid", + "type": "LPGUID" + }, + { + "name": "ulProperty", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PCVOID" + }, + { + "name": "ulLength", + "type": "ULONG" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "hMachine", + "type": "HMACHINE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/CldApi.json b/qiling/extensions/windows_sdk/cldapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/CldApi.json rename to qiling/extensions/windows_sdk/cldapi_dll.json diff --git a/qiling/extensions/windows_sdk/clfsw32.json b/qiling/extensions/windows_sdk/clfsw32_dll.json similarity index 96% rename from qiling/extensions/windows_sdk/clfsw32.json rename to qiling/extensions/windows_sdk/clfsw32_dll.json index f10348dc8..ddf01643e 100644 --- a/qiling/extensions/windows_sdk/clfsw32.json +++ b/qiling/extensions/windows_sdk/clfsw32_dll.json @@ -856,5 +856,41 @@ "name": "pcbStatsWritten", "type": "PULONG" } + ], + "LsnEqual": [ + { + "name": "plsn1", + "type": "CLFS_LSN" + }, + { + "name": "plsn2", + "type": "CLFS_LSN" + } + ], + "LsnLess": [ + { + "name": "plsn1", + "type": "CLFS_LSN" + }, + { + "name": "plsn2", + "type": "CLFS_LSN" + } + ], + "LsnGreater": [ + { + "name": "plsn1", + "type": "CLFS_LSN" + }, + { + "name": "plsn2", + "type": "CLFS_LSN" + } + ], + "LsnNull": [ + { + "name": "plsn", + "type": "CLFS_LSN" + } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/clusapi.json b/qiling/extensions/windows_sdk/clusapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/clusapi.json rename to qiling/extensions/windows_sdk/clusapi_dll.json diff --git a/qiling/extensions/windows_sdk/combase_dll.json b/qiling/extensions/windows_sdk/combase_dll.json new file mode 100644 index 000000000..f3cb5c456 --- /dev/null +++ b/qiling/extensions/windows_sdk/combase_dll.json @@ -0,0 +1,350 @@ +{ + "WindowsPreallocateStringBuffer": [ + { + "name": "length", + "type": "UINT32" + }, + { + "name": "charBuffer", + "type": "WCHAR" + }, + { + "name": "bufferHandle", + "type": "HSTRING_BUFFER" + } + ], + "WindowsPromoteStringBuffer": [ + { + "name": "bufferHandle", + "type": "HSTRING_BUFFER" + }, + { + "name": "string", + "type": "HSTRING" + } + ], + "WindowsDeleteStringBuffer": [ + { + "name": "bufferHandle", + "type": "HSTRING_BUFFER" + } + ], + "HSTRING_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "HSTRING_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "WindowsInspectString": [ + { + "name": "targetHString", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "callback", + "type": "PINSPECT_HSTRING_CALLBACK" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "targetStringAddress", + "type": "UINT_PTR" + } + ], + "WindowsInspectString2": [ + { + "name": "targetHString", + "type": "UINT64" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "callback", + "type": "PINSPECT_HSTRING_CALLBACK2" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "length", + "type": "UINT32" + }, + { + "name": "targetStringAddress", + "type": "UINT64" + } + ], + "CoDecodeProxy": [ + { + "name": "dwClientPid", + "type": "DWORD" + }, + { + "name": "ui64ProxyAddress", + "type": "UINT64" + }, + { + "name": "pServerInformation", + "type": "PServerInformation" + } + ], + "CoFreeUnusedLibrariesEx": [ + { + "name": "dwUnloadDelay", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "CoCreateInstanceFromApp": [ + { + "name": "Clsid", + "type": "IID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "PVOID" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoWaitForMultipleObjects": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "cHandles", + "type": "ULONG" + }, + { + "name": "pHandles", + "type": "HANDLE" + }, + { + "name": "lpdwindex", + "type": "LPDWORD" + } + ], + "HSTRING_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "HSTRING_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "HSTRING" + } + ], + "SetRestrictedErrorInfo": [ + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "GetRestrictedErrorInfo": [ + { + "name": "ppRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "RoCaptureErrorContext": [ + { + "name": "hr", + "type": "HRESULT" + } + ], + "RoFailFastWithErrorContext": [ + { + "name": "hrError", + "type": "HRESULT" + } + ], + "RoOriginateLanguageException": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + }, + { + "name": "languageException", + "type": "IUnknown" + } + ], + "RoClearError": [ + { + "name": "VOID", + "type": "void" + } + ], + "RoInspectThreadErrorInfo": [ + { + "name": "targetTebAddress", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "readMemoryCallback", + "type": "PINSPECT_MEMORY_CALLBACK" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "targetErrorInfoAddress", + "type": "UINT_PTR" + } + ], + "RoInspectCapturedStackBackTrace": [ + { + "name": "targetErrorInfoAddress", + "type": "UINT_PTR" + }, + { + "name": "machine", + "type": "USHORT" + }, + { + "name": "readMemoryCallback", + "type": "PINSPECT_MEMORY_CALLBACK" + }, + { + "name": "context", + "type": "PVOID" + }, + { + "name": "frameCount", + "type": "UINT32" + }, + { + "name": "targetBackTraceAddress", + "type": "UINT_PTR" + } + ], + "CoGetSystemSecurityPermissions": [ + { + "name": "comSDType", + "type": "COMSD" + }, + { + "name": "ppSD", + "type": "PSECURITY_DESCRIPTOR" + } + ], + "CoGetInstanceFromFile": [ + { + "name": "pServerInfo", + "type": "COSERVERINFO" + }, + { + "name": "pClsid", + "type": "CLSID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "pwszName", + "type": "OLECHAR" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoRegisterChannelHook": [ + { + "name": "ExtensionUuid", + "type": "GUID" + }, + { + "name": "pChannelHook", + "type": "IChannelHook" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/comctl32_dll.json b/qiling/extensions/windows_sdk/comctl32_dll.json new file mode 100644 index 000000000..3877351ff --- /dev/null +++ b/qiling/extensions/windows_sdk/comctl32_dll.json @@ -0,0 +1,1688 @@ +{ + "CreatePropertySheetPageA": [ + { + "name": "constPropSheetPagePointer", + "type": "LPCPROPSHEETPAGEA" + } + ], + "CreatePropertySheetPageW": [ + { + "name": "constPropSheetPagePointer", + "type": "LPCPROPSHEETPAGEW" + } + ], + "DestroyPropertySheetPage": [ + { + "name": "VOID", + "type": "HPROPSHEETPAGE" + } + ], + "PropertySheetA": [ + { + "name": "VOID", + "type": "LPCPROPSHEETHEADERA" + } + ], + "PropertySheetW": [ + { + "name": "VOID", + "type": "LPCPROPSHEETHEADERW" + } + ], + "InitCommonControls": [ + { + "name": "VOID", + "type": "void" + } + ], + "InitCommonControlsEx": [ + { + "name": "picce", + "type": "INITCOMMONCONTROLSEX" + } + ], + "ImageList_Create": [ + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + }, + { + "name": "cInitial", + "type": "int" + }, + { + "name": "cGrow", + "type": "int" + } + ], + "ImageList_Destroy": [ + { + "name": "himl", + "type": "HIMAGELIST" + } + ], + "ImageList_GetImageCount": [ + { + "name": "himl", + "type": "HIMAGELIST" + } + ], + "ImageList_SetImageCount": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "uNewCount", + "type": "UINT" + } + ], + "ImageList_Add": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "hbmImage", + "type": "HBITMAP" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + } + ], + "ImageList_ReplaceIcon": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "hicon", + "type": "HICON" + } + ], + "ImageList_SetBkColor": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "clrBk", + "type": "COLORREF" + } + ], + "ImageList_GetBkColor": [ + { + "name": "himl", + "type": "HIMAGELIST" + } + ], + "ImageList_SetOverlayImage": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "iImage", + "type": "int" + }, + { + "name": "iOverlay", + "type": "int" + } + ], + "ImageList_Draw": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "hdcDst", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "fStyle", + "type": "UINT" + } + ], + "ImageList_Replace": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "hbmImage", + "type": "HBITMAP" + }, + { + "name": "hbmMask", + "type": "HBITMAP" + } + ], + "ImageList_AddMasked": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "hbmImage", + "type": "HBITMAP" + }, + { + "name": "crMask", + "type": "COLORREF" + } + ], + "ImageList_DrawEx": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "hdcDst", + "type": "HDC" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + }, + { + "name": "rgbBk", + "type": "COLORREF" + }, + { + "name": "rgbFg", + "type": "COLORREF" + }, + { + "name": "fStyle", + "type": "UINT" + } + ], + "ImageList_DrawIndirect": [ + { + "name": "pimldp", + "type": "IMAGELISTDRAWPARAMS" + } + ], + "ImageList_Remove": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + } + ], + "ImageList_GetIcon": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "flags", + "type": "UINT" + } + ], + "ImageList_LoadImageA": [ + { + "name": "hi", + "type": "HINSTANCE" + }, + { + "name": "lpbmp", + "type": "LPCSTR" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cGrow", + "type": "int" + }, + { + "name": "crMask", + "type": "COLORREF" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "ImageList_LoadImageW": [ + { + "name": "hi", + "type": "HINSTANCE" + }, + { + "name": "lpbmp", + "type": "LPCWSTR" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cGrow", + "type": "int" + }, + { + "name": "crMask", + "type": "COLORREF" + }, + { + "name": "uType", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "ImageList_Copy": [ + { + "name": "himlDst", + "type": "HIMAGELIST" + }, + { + "name": "iDst", + "type": "int" + }, + { + "name": "himlSrc", + "type": "HIMAGELIST" + }, + { + "name": "iSrc", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "ImageList_BeginDrag": [ + { + "name": "himlTrack", + "type": "HIMAGELIST" + }, + { + "name": "iTrack", + "type": "int" + }, + { + "name": "dxHotspot", + "type": "int" + }, + { + "name": "dyHotspot", + "type": "int" + } + ], + "ImageList_EndDrag": [ + { + "name": "VOID", + "type": "void" + } + ], + "ImageList_DragEnter": [ + { + "name": "hwndLock", + "type": "HWND" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "ImageList_DragLeave": [ + { + "name": "hwndLock", + "type": "HWND" + } + ], + "ImageList_DragMove": [ + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + } + ], + "ImageList_SetDragCursorImage": [ + { + "name": "himlDrag", + "type": "HIMAGELIST" + }, + { + "name": "iDrag", + "type": "int" + }, + { + "name": "dxHotspot", + "type": "int" + }, + { + "name": "dyHotspot", + "type": "int" + } + ], + "ImageList_DragShowNolock": [ + { + "name": "fShow", + "type": "BOOL" + } + ], + "ImageList_GetDragImage": [ + { + "name": "ppt", + "type": "POINT" + }, + { + "name": "pptHotspot", + "type": "POINT" + } + ], + "ImageList_Read": [ + { + "name": "pstm", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + } + ], + "ImageList_Write": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "pstm", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + } + ], + "ImageList_ReadEx": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pstm", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "PVOID" + } + ], + "ImageList_WriteEx": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pstm", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + } + ], + "ImageList_GetIconSize": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "ImageList_SetIconSize": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + } + ], + "ImageList_GetImageInfo": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "pImageInfo", + "type": "IMAGEINFO" + } + ], + "ImageList_Merge": [ + { + "name": "himl1", + "type": "HIMAGELIST" + }, + { + "name": "i1", + "type": "int" + }, + { + "name": "himl2", + "type": "HIMAGELIST" + }, + { + "name": "i2", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "ImageList_Duplicate": [ + { + "name": "himl", + "type": "HIMAGELIST" + } + ], + "HIMAGELIST_QueryInterface": [ + { + "name": "himl", + "type": "HIMAGELIST" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CreateToolbarEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "ws", + "type": "DWORD" + }, + { + "name": "wID", + "type": "UINT" + }, + { + "name": "nBitmaps", + "type": "int" + }, + { + "name": "hBMInst", + "type": "HINSTANCE" + }, + { + "name": "wBMID", + "type": "UINT_PTR" + }, + { + "name": "lpButtons", + "type": "LPCTBBUTTON" + }, + { + "name": "iNumButtons", + "type": "int" + }, + { + "name": "dxButton", + "type": "int" + }, + { + "name": "dyButton", + "type": "int" + }, + { + "name": "dxBitmap", + "type": "int" + }, + { + "name": "dyBitmap", + "type": "int" + }, + { + "name": "uStructSize", + "type": "UINT" + } + ], + "CreateMappedBitmap": [ + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "idBitmap", + "type": "INT_PTR" + }, + { + "name": "wFlags", + "type": "UINT" + }, + { + "name": "lpColorMap", + "type": "LPCOLORMAP" + }, + { + "name": "iNumMaps", + "type": "int" + } + ], + "DrawStatusTextA": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "LPCRECT" + }, + { + "name": "pszText", + "type": "LPCSTR" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "DrawStatusTextW": [ + { + "name": "hDC", + "type": "HDC" + }, + { + "name": "lprc", + "type": "LPCRECT" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "CreateStatusWindowA": [ + { + "name": "style", + "type": "LONG" + }, + { + "name": "lpszText", + "type": "LPCSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "wID", + "type": "UINT" + } + ], + "CreateStatusWindowW": [ + { + "name": "style", + "type": "LONG" + }, + { + "name": "lpszText", + "type": "LPCWSTR" + }, + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "wID", + "type": "UINT" + } + ], + "MenuHelp": [ + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "hMainMenu", + "type": "HMENU" + }, + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "hwndStatus", + "type": "HWND" + }, + { + "name": "lpwIDs", + "type": "UINT" + } + ], + "ShowHideMenuCtl": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uFlags", + "type": "UINT_PTR" + }, + { + "name": "lpInfo", + "type": "LPINT" + } + ], + "GetEffectiveClientRect": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lprc", + "type": "LPRECT" + }, + { + "name": "lpInfo", + "type": "INT" + } + ], + "MakeDragList": [ + { + "name": "hLB", + "type": "HWND" + } + ], + "DrawInsert": [ + { + "name": "handParent", + "type": "HWND" + }, + { + "name": "hLB", + "type": "HWND" + }, + { + "name": "nItem", + "type": "int" + } + ], + "LBItemFromPt": [ + { + "name": "hLB", + "type": "HWND" + }, + { + "name": "pt", + "type": "POINT" + }, + { + "name": "bAutoScroll", + "type": "BOOL" + } + ], + "CreateUpDownControl": [ + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "x", + "type": "int" + }, + { + "name": "y", + "type": "int" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "hParent", + "type": "HWND" + }, + { + "name": "nID", + "type": "int" + }, + { + "name": "hInst", + "type": "HINSTANCE" + }, + { + "name": "hBuddy", + "type": "HWND" + }, + { + "name": "nUpper", + "type": "int" + }, + { + "name": "nLower", + "type": "int" + }, + { + "name": "nPos", + "type": "int" + } + ], + "TaskDialogIndirect": [ + { + "name": "pTaskConfig", + "type": "TASKDIALOGCONFIG" + }, + { + "name": "pnButton", + "type": "int" + }, + { + "name": "pnRadioButton", + "type": "int" + }, + { + "name": "pfVerificationFlagChecked", + "type": "BOOL" + } + ], + "TaskDialog": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "pszWindowTitle", + "type": "PCWSTR" + }, + { + "name": "pszMainInstruction", + "type": "PCWSTR" + }, + { + "name": "pszContent", + "type": "PCWSTR" + }, + { + "name": "dwCommonButtons", + "type": "TASKDIALOG_COMMON_BUTTON_FLAGS" + }, + { + "name": "pszIcon", + "type": "PCWSTR" + }, + { + "name": "pnButton", + "type": "int" + } + ], + "InitMUILanguage": [ + { + "name": "uiLang", + "type": "LANGID" + } + ], + "GetMUILanguage": [ + { + "name": "VOID", + "type": "void" + } + ], + "_TrackMouseEvent": [ + { + "name": "lpEventTrack", + "type": "LPTRACKMOUSEEVENT" + } + ], + "FlatSB_EnableScrollBar": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "UINT" + } + ], + "FlatSB_ShowScrollBar": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "FlatSB_GetScrollRange": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "VOID", + "type": "LPINT" + }, + { + "name": "VOID", + "type": "LPINT" + } + ], + "FlatSB_GetScrollInfo": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "VOID", + "type": "LPSCROLLINFO" + } + ], + "FlatSB_GetScrollPos": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + } + ], + "FlatSB_GetScrollProp": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "propIndex", + "type": "int" + }, + { + "name": "VOID", + "type": "LPINT" + } + ], + "FlatSB_GetScrollPropPtr": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "propIndex", + "type": "int" + }, + { + "name": "VOID", + "type": "PINT_PTR" + } + ], + "FlatSB_SetScrollPos": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "pos", + "type": "int" + }, + { + "name": "fRedraw", + "type": "BOOL" + } + ], + "FlatSB_SetScrollInfo": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "psi", + "type": "LPSCROLLINFO" + }, + { + "name": "fRedraw", + "type": "BOOL" + } + ], + "FlatSB_SetScrollRange": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "code", + "type": "int" + }, + { + "name": "min", + "type": "int" + }, + { + "name": "max", + "type": "int" + }, + { + "name": "fRedraw", + "type": "BOOL" + } + ], + "FlatSB_SetScrollProp": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "index", + "type": "UINT" + }, + { + "name": "newValue", + "type": "INT_PTR" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "InitializeFlatSB": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "UninitializeFlatSB": [ + { + "name": "VOID", + "type": "HWND" + } + ], + "SetWindowSubclass": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pfnSubclass", + "type": "SUBCLASSPROC" + }, + { + "name": "uIdSubclass", + "type": "UINT_PTR" + }, + { + "name": "dwRefData", + "type": "DWORD_PTR" + } + ], + "GetWindowSubclass": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pfnSubclass", + "type": "SUBCLASSPROC" + }, + { + "name": "uIdSubclass", + "type": "UINT_PTR" + }, + { + "name": "pdwRefData", + "type": "DWORD_PTR" + } + ], + "RemoveWindowSubclass": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pfnSubclass", + "type": "SUBCLASSPROC" + }, + { + "name": "uIdSubclass", + "type": "UINT_PTR" + } + ], + "DefSubclassProc": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "wParam", + "type": "WPARAM" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "LoadIconMetric": [ + { + "name": "hinst", + "type": "HINSTANCE" + }, + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "lims", + "type": "int" + }, + { + "name": "phico", + "type": "HICON" + } + ], + "LoadIconWithScaleDown": [ + { + "name": "hinst", + "type": "HINSTANCE" + }, + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "cx", + "type": "int" + }, + { + "name": "cy", + "type": "int" + }, + { + "name": "phico", + "type": "HICON" + } + ], + "DrawShadowText": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pszText", + "type": "LPCWSTR" + }, + { + "name": "cch", + "type": "UINT" + }, + { + "name": "prc", + "type": "RECT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "crText", + "type": "COLORREF" + }, + { + "name": "crShadow", + "type": "COLORREF" + }, + { + "name": "ixOffset", + "type": "int" + }, + { + "name": "iyOffset", + "type": "int" + } + ], + "DSA_Create": [ + { + "name": "cbItem", + "type": "int" + }, + { + "name": "cItemGrow", + "type": "int" + } + ], + "DSA_Destroy": [ + { + "name": "hdsa", + "type": "HDSA" + } + ], + "DSA_DestroyCallback": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "pfnCB", + "type": "PFNDAENUMCALLBACK" + }, + { + "name": "pData", + "type": "void" + } + ], + "DSA_DeleteItem": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + } + ], + "DSA_DeleteAllItems": [ + { + "name": "hdsa", + "type": "HDSA" + } + ], + "DSA_EnumCallback": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "pfnCB", + "type": "PFNDAENUMCALLBACK" + }, + { + "name": "pData", + "type": "void" + } + ], + "DSA_InsertItem": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "pitem", + "type": "void" + } + ], + "DSA_GetItemPtr": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + } + ], + "DSA_GetItem": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "pitem", + "type": "void" + } + ], + "DSA_SetItem": [ + { + "name": "hdsa", + "type": "HDSA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "pitem", + "type": "void" + } + ], + "DSA_Clone": [ + { + "name": "hdsa", + "type": "HDSA" + } + ], + "DSA_GetSize": [ + { + "name": "hdsa", + "type": "HDSA" + } + ], + "DSA_Sort": [ + { + "name": "pdsa", + "type": "HDSA" + }, + { + "name": "pfnCompare", + "type": "PFNDACOMPARE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DPA_Create": [ + { + "name": "cItemGrow", + "type": "int" + } + ], + "DPA_CreateEx": [ + { + "name": "cpGrow", + "type": "int" + }, + { + "name": "hheap", + "type": "HANDLE" + } + ], + "DPA_Clone": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "hdpaNew", + "type": "HDPA" + } + ], + "DPA_Destroy": [ + { + "name": "hdpa", + "type": "HDPA" + } + ], + "DPA_DestroyCallback": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pfnCB", + "type": "PFNDAENUMCALLBACK" + }, + { + "name": "pData", + "type": "void" + } + ], + "DPA_DeletePtr": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "i", + "type": "int" + } + ], + "DPA_DeleteAllPtrs": [ + { + "name": "hdpa", + "type": "HDPA" + } + ], + "DPA_EnumCallback": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pfnCB", + "type": "PFNDAENUMCALLBACK" + }, + { + "name": "pData", + "type": "void" + } + ], + "DPA_Grow": [ + { + "name": "pdpa", + "type": "HDPA" + }, + { + "name": "cp", + "type": "int" + } + ], + "DPA_InsertPtr": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "p", + "type": "void" + } + ], + "DPA_SetPtr": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "i", + "type": "int" + }, + { + "name": "p", + "type": "void" + } + ], + "DPA_GetPtr": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "i", + "type": "INT_PTR" + } + ], + "DPA_GetPtrIndex": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "p", + "type": "void" + } + ], + "DPA_GetSize": [ + { + "name": "hdpa", + "type": "HDPA" + } + ], + "DPA_Sort": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pfnCompare", + "type": "PFNDACOMPARE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DPA_LoadStream": [ + { + "name": "phdpa", + "type": "HDPA" + }, + { + "name": "pfn", + "type": "PFNDPASTREAM" + }, + { + "name": "pstream", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "pvInstData", + "type": "void" + } + ], + "DPA_SaveStream": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pfn", + "type": "PFNDPASTREAM" + }, + { + "name": "pstream", + "type": { + "name": "IStream", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "pvInstData", + "type": "void" + } + ], + "DPA_Merge": [ + { + "name": "hdpaDest", + "type": "HDPA" + }, + { + "name": "hdpaSrc", + "type": "HDPA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pfnCompare", + "type": "PFNDACOMPARE" + }, + { + "name": "pfnMerge", + "type": "PFNDPAMERGE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "DPA_Search": [ + { + "name": "hdpa", + "type": "HDPA" + }, + { + "name": "pFind", + "type": "void" + }, + { + "name": "iStart", + "type": "int" + }, + { + "name": "pfnCompare", + "type": "PFNDACOMPARE" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "options", + "type": "UINT" + } + ], + "Str_SetPtrW": [ + { + "name": "ppsz", + "type": "LPWSTR" + }, + { + "name": "psz", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Comdlg32.json b/qiling/extensions/windows_sdk/comdlg32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Comdlg32.json rename to qiling/extensions/windows_sdk/comdlg32_dll.json diff --git a/qiling/extensions/windows_sdk/comsvcs.json b/qiling/extensions/windows_sdk/comsvcs_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/comsvcs.json rename to qiling/extensions/windows_sdk/comsvcs_dll.json diff --git a/qiling/extensions/windows_sdk/credui_dll.json b/qiling/extensions/windows_sdk/credui_dll.json new file mode 100644 index 000000000..e5da904f0 --- /dev/null +++ b/qiling/extensions/windows_sdk/credui_dll.json @@ -0,0 +1,450 @@ +{ + "CredUnPackAuthenticationBufferW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pAuthBuffer", + "type": "PVOID" + }, + { + "name": "cbAuthBuffer", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "LPWSTR" + }, + { + "name": "pcchMaxUserName", + "type": "DWORD" + }, + { + "name": "pszDomainName", + "type": "LPWSTR" + }, + { + "name": "pcchMaxDomainName", + "type": "DWORD" + }, + { + "name": "pszPassword", + "type": "LPWSTR" + }, + { + "name": "pcchMaxPassword", + "type": "DWORD" + } + ], + "CredUnPackAuthenticationBufferA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pAuthBuffer", + "type": "PVOID" + }, + { + "name": "cbAuthBuffer", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "LPSTR" + }, + { + "name": "pcchlMaxUserName", + "type": "DWORD" + }, + { + "name": "pszDomainName", + "type": "LPSTR" + }, + { + "name": "pcchMaxDomainName", + "type": "DWORD" + }, + { + "name": "pszPassword", + "type": "LPSTR" + }, + { + "name": "pcchMaxPassword", + "type": "DWORD" + } + ], + "CredPackAuthenticationBufferW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "LPWSTR" + }, + { + "name": "pszPassword", + "type": "LPWSTR" + }, + { + "name": "pPackedCredentials", + "type": "PBYTE" + }, + { + "name": "pcbPackedCredentials", + "type": "DWORD" + } + ], + "CredPackAuthenticationBufferA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "LPSTR" + }, + { + "name": "pszPassword", + "type": "LPSTR" + }, + { + "name": "pPackedCredentials", + "type": "PBYTE" + }, + { + "name": "pcbPackedCredentials", + "type": "DWORD" + } + ], + "CredUIPromptForCredentialsW": [ + { + "name": "pUiInfo", + "type": "PCREDUI_INFOW" + }, + { + "name": "pszTargetName", + "type": "PCWSTR" + }, + { + "name": "pContext", + "type": "PCtxtHandle" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "PWSTR" + }, + { + "name": "ulUserNameBufferSize", + "type": "ULONG" + }, + { + "name": "pszPassword", + "type": "PWSTR" + }, + { + "name": "ulPasswordBufferSize", + "type": "ULONG" + }, + { + "name": "save", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIPromptForCredentialsA": [ + { + "name": "pUiInfo", + "type": "PCREDUI_INFOA" + }, + { + "name": "pszTargetName", + "type": "PCSTR" + }, + { + "name": "pContext", + "type": "PCtxtHandle" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "pszUserName", + "type": "PSTR" + }, + { + "name": "ulUserNameBufferSize", + "type": "ULONG" + }, + { + "name": "pszPassword", + "type": "PSTR" + }, + { + "name": "ulPasswordBufferSize", + "type": "ULONG" + }, + { + "name": "save", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIPromptForWindowsCredentialsW": [ + { + "name": "pUiInfo", + "type": "PCREDUI_INFOW" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "pulAuthPackage", + "type": "ULONG" + }, + { + "name": "pvInAuthBuffer", + "type": "LPCVOID" + }, + { + "name": "ulInAuthBufferSize", + "type": "ULONG" + }, + { + "name": "ppvOutAuthBuffer", + "type": "LPVOID" + }, + { + "name": "pulOutAuthBufferSize", + "type": "ULONG" + }, + { + "name": "pfSave", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIPromptForWindowsCredentialsA": [ + { + "name": "pUiInfo", + "type": "PCREDUI_INFOA" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "pulAuthPackage", + "type": "ULONG" + }, + { + "name": "pvInAuthBuffer", + "type": "LPCVOID" + }, + { + "name": "ulInAuthBufferSize", + "type": "ULONG" + }, + { + "name": "ppvOutAuthBuffer", + "type": "LPVOID" + }, + { + "name": "pulOutAuthBufferSize", + "type": "ULONG" + }, + { + "name": "pfSave", + "type": "BOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIParseUserNameW": [ + { + "name": "UserName", + "type": "PCWSTR" + }, + { + "name": "user", + "type": "WCHAR" + }, + { + "name": "userBufferSize", + "type": "ULONG" + }, + { + "name": "domain", + "type": "WCHAR" + }, + { + "name": "domainBufferSize", + "type": "ULONG" + } + ], + "CredUIParseUserNameA": [ + { + "name": "userName", + "type": "PCSTR" + }, + { + "name": "user", + "type": "CHAR" + }, + { + "name": "userBufferSize", + "type": "ULONG" + }, + { + "name": "domain", + "type": "CHAR" + }, + { + "name": "domainBufferSize", + "type": "ULONG" + } + ], + "CredUICmdLinePromptForCredentialsW": [ + { + "name": "pszTargetName", + "type": "PCWSTR" + }, + { + "name": "pContext", + "type": "PCtxtHandle" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "UserName", + "type": "PWSTR" + }, + { + "name": "ulUserBufferSize", + "type": "ULONG" + }, + { + "name": "pszPassword", + "type": "PWSTR" + }, + { + "name": "ulPasswordBufferSize", + "type": "ULONG" + }, + { + "name": "pfSave", + "type": "PBOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUICmdLinePromptForCredentialsA": [ + { + "name": "pszTargetName", + "type": "PCSTR" + }, + { + "name": "pContext", + "type": "PCtxtHandle" + }, + { + "name": "dwAuthError", + "type": "DWORD" + }, + { + "name": "UserName", + "type": "PSTR" + }, + { + "name": "ulUserBufferSize", + "type": "ULONG" + }, + { + "name": "pszPassword", + "type": "PSTR" + }, + { + "name": "ulPasswordBufferSize", + "type": "ULONG" + }, + { + "name": "pfSave", + "type": "PBOOL" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CredUIConfirmCredentialsW": [ + { + "name": "pszTargetName", + "type": "PCWSTR" + }, + { + "name": "bConfirm", + "type": "BOOL" + } + ], + "CredUIConfirmCredentialsA": [ + { + "name": "pszTargetName", + "type": "PCSTR" + }, + { + "name": "bConfirm", + "type": "BOOL" + } + ], + "CredUIStoreSSOCredW": [ + { + "name": "pszRealm", + "type": "PCWSTR" + }, + { + "name": "pszUsername", + "type": "PCWSTR" + }, + { + "name": "pszPassword", + "type": "PCWSTR" + }, + { + "name": "bPersist", + "type": "BOOL" + } + ], + "CredUIReadSSOCredW": [ + { + "name": "pszRealm", + "type": "PCWSTR" + }, + { + "name": "ppszUsername", + "type": "PWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Crypt32.json b/qiling/extensions/windows_sdk/crypt32_dll.json similarity index 84% rename from qiling/extensions/windows_sdk/Crypt32.json rename to qiling/extensions/windows_sdk/crypt32_dll.json index ec5bda91f..55b2a40e8 100644 --- a/qiling/extensions/windows_sdk/Crypt32.json +++ b/qiling/extensions/windows_sdk/crypt32_dll.json @@ -1,785 +1,111 @@ { - "CryptAcquireContextA": [ + "CryptProtectData": [ { - "name": "phProv", - "type": "HCRYPTPROV" - }, - { - "name": "szContainer", - "type": "LPCSTR" - }, - { - "name": "szProvider", - "type": "LPCSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptAcquireContextW": [ - { - "name": "phProv", - "type": "HCRYPTPROV" - }, - { - "name": "szContainer", - "type": "LPCWSTR" - }, - { - "name": "szProvider", - "type": "LPCWSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptReleaseContext": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGenKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptDeriveKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "hBaseData", - "type": "HCRYPTHASH" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptDestroyKey": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - } - ], - "CryptSetKeyParam": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetKeyParam": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetHashParam": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetHashParam": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetProvParam": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetProvParam": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGenRandom": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwLen", - "type": "DWORD" - }, - { - "name": "pbBuffer", - "type": "BYTE" - } - ], - "CryptGetUserKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "phUserKey", - "type": "HCRYPTKEY" - } - ], - "CryptExportKey": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "hExpKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwBlobType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - } - ], - "CryptImportKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwDataLen", - "type": "DWORD" - }, - { - "name": "hPubKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptEncrypt": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "Final", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwBufLen", - "type": "DWORD" - } - ], - "CryptDecrypt": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "Final", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - } - ], - "CryptCreateHash": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phHash", - "type": "HCRYPTHASH" - } - ], - "CryptHashData": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptHashSessionKey": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptDestroyHash": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - } - ], - "CryptSignHashA": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "szDescription", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "pdwSigLen", - "type": "DWORD" - } - ], - "CryptSignHashW": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "szDescription", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "pdwSigLen", - "type": "DWORD" - } - ], - "CryptVerifySignatureA": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "dwSigLen", - "type": "DWORD" - }, - { - "name": "hPubKey", - "type": "HCRYPTKEY" - }, - { - "name": "szDescription", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptVerifySignatureW": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "dwSigLen", - "type": "DWORD" - }, - { - "name": "hPubKey", - "type": "HCRYPTKEY" - }, - { - "name": "szDescription", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetProviderA": [ - { - "name": "pszProvName", - "type": "LPCSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - } - ], - "CryptSetProviderW": [ - { - "name": "pszProvName", - "type": "LPCWSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - } - ], - "CryptSetProviderExA": [ - { - "name": "pszProvName", - "type": "LPCSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" + "name": "pDataIn", + "type": "DATA_BLOB" }, { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetProviderExW": [ - { - "name": "pszProvName", + "name": "szDataDescr", "type": "LPCWSTR" }, { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetDefaultProviderA": [ - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszProvName", - "type": "LPSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptGetDefaultProviderW": [ - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszProvName", - "type": "LPWSTR" + "name": "pOptionalEntropy", + "type": "DATA_BLOB" }, { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptEnumProviderTypesA": [ - { - "name": "dwIndex", - "type": "DWORD" + "name": "pvReserved", + "type": "PVOID" }, { - "name": "pdwReserved", - "type": "DWORD" + "name": "pPromptStruct", + "type": "CRYPTPROTECT_PROMPTSTRUCT" }, { "name": "dwFlags", "type": "DWORD" }, { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szTypeName", - "type": "LPSTR" - }, - { - "name": "pcbTypeName", - "type": "DWORD" + "name": "pDataOut", + "type": "DATA_BLOB" } ], - "CryptEnumProviderTypesW": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, + "CryptUnprotectData": [ { - "name": "pdwProvType", - "type": "DWORD" + "name": "pDataIn", + "type": "DATA_BLOB" }, { - "name": "szTypeName", + "name": "ppszDataDescr", "type": "LPWSTR" }, { - "name": "pcbTypeName", - "type": "DWORD" - } - ], - "CryptEnumProvidersA": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szProvName", - "type": "LPSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptEnumProvidersW": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" + "name": "pOptionalEntropy", + "type": "DATA_BLOB" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "pvReserved", + "type": "PVOID" }, { - "name": "pdwProvType", - "type": "DWORD" + "name": "pPromptStruct", + "type": "CRYPTPROTECT_PROMPTSTRUCT" }, { - "name": "szProvName", - "type": "LPWSTR" + "name": "dwFlags", + "type": "DWORD" }, { - "name": "pcbProvName", - "type": "DWORD" + "name": "pDataOut", + "type": "DATA_BLOB" } ], - "CryptContextAddRef": [ + "CryptUpdateProtectedState": [ { - "name": "hProv", - "type": "HCRYPTPROV" + "name": "pOldSid", + "type": "PSID" }, { - "name": "pdwReserved", - "type": "DWORD" + "name": "pwszOldPassword", + "type": "LPCWSTR" }, { "name": "dwFlags", "type": "DWORD" - } - ], - "CryptDuplicateKey": [ - { - "name": "hKey", - "type": "HCRYPTKEY" }, { - "name": "pdwReserved", + "name": "pdwSuccessCount", "type": "DWORD" }, { - "name": "dwFlags", + "name": "pdwFailureCount", "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" } ], - "CryptDuplicateHash": [ + "CryptProtectMemory": [ { - "name": "hHash", - "type": "HCRYPTHASH" + "name": "pDataIn", + "type": "LPVOID" }, { - "name": "pdwReserved", + "name": "cbDataIn", "type": "DWORD" }, { "name": "dwFlags", "type": "DWORD" - }, - { - "name": "phHash", - "type": "HCRYPTHASH" } ], - "GetEncSChannel": [ + "CryptUnprotectMemory": [ { - "name": "pData", - "type": "BYTE" + "name": "pDataIn", + "type": "LPVOID" }, { - "name": "dwDecSize", + "name": "cbDataIn", + "type": "DWORD" + }, + { + "name": "dwFlags", "type": "DWORD" } ], @@ -4361,188 +3687,6 @@ "type": "LPVOID" } ], - "CryptCreateAsyncHandle": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phAsync", - "type": "PHCRYPTASYNC" - } - ], - "CryptGetAsyncParam": [ - { - "name": "hAsync", - "type": "HCRYPTASYNC" - }, - { - "name": "pszParamOid", - "type": "LPSTR" - }, - { - "name": "ppvParam", - "type": "LPVOID" - }, - { - "name": "ppfnFree", - "type": "PFN_CRYPT_ASYNC_PARAM_FREE_FUNC" - } - ], - "CryptCloseAsyncHandle": [ - { - "name": "hAsync", - "type": "HCRYPTASYNC" - } - ], - "CryptRetrieveObjectByUrlA": [ - { - "name": "pszUrl", - "type": "LPCSTR" - }, - { - "name": "pszObjectOid", - "type": "LPCSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "ppvObject", - "type": "LPVOID" - }, - { - "name": "hAsyncRetrieve", - "type": "HCRYPTASYNC" - }, - { - "name": "pCredentials", - "type": "PCRYPT_CREDENTIALS" - }, - { - "name": "pvVerify", - "type": "LPVOID" - }, - { - "name": "pAuxInfo", - "type": "PCRYPT_RETRIEVE_AUX_INFO" - } - ], - "CryptRetrieveObjectByUrlW": [ - { - "name": "pszUrl", - "type": "LPCWSTR" - }, - { - "name": "pszObjectOid", - "type": "LPCSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "ppvObject", - "type": "LPVOID" - }, - { - "name": "hAsyncRetrieve", - "type": "HCRYPTASYNC" - }, - { - "name": "pCredentials", - "type": "PCRYPT_CREDENTIALS" - }, - { - "name": "pvVerify", - "type": "LPVOID" - }, - { - "name": "pAuxInfo", - "type": "PCRYPT_RETRIEVE_AUX_INFO" - } - ], - "CryptGetObjectUrl": [ - { - "name": "pszUrlOid", - "type": "LPCSTR" - }, - { - "name": "pvPara", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pUrlArray", - "type": "PCRYPT_URL_ARRAY" - }, - { - "name": "pcbUrlArray", - "type": "DWORD" - }, - { - "name": "pUrlInfo", - "type": "PCRYPT_URL_INFO" - }, - { - "name": "pcbUrlInfo", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "LPVOID" - } - ], - "CryptGetTimeValidObject": [ - { - "name": "pszTimeValidOid", - "type": "LPCSTR" - }, - { - "name": "pvPara", - "type": "LPVOID" - }, - { - "name": "pIssuer", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pftValidFor", - "type": "LPFILETIME" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "ppvObject", - "type": "LPVOID" - }, - { - "name": "pCredentials", - "type": "PCRYPT_CREDENTIALS" - }, - { - "name": "pExtraInfo", - "type": "PCRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO" - } - ], "CertCreateSelfSignCertificate": [ { "name": "hCryptProvOrNCryptKey", @@ -5196,5 +4340,147 @@ "name": "phStore", "type": "HCERTSTORE" } + ], + "CryptSIPGetSignedDataMsg": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "pdwEncodingType", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pcbSignedDataMsg", + "type": "DWORD" + }, + { + "name": "pbSignedDataMsg", + "type": "BYTE" + } + ], + "CryptSIPPutSignedDataMsg": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "dwEncodingType", + "type": "DWORD" + }, + { + "name": "pdwIndex", + "type": "DWORD" + }, + { + "name": "cbSignedDataMsg", + "type": "DWORD" + }, + { + "name": "pbSignedDataMsg", + "type": "BYTE" + } + ], + "CryptSIPCreateIndirectData": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "pcbIndirectData", + "type": "DWORD" + }, + { + "name": "pIndirectData", + "type": "SIP_INDIRECT_DATA" + } + ], + "CryptSIPVerifyIndirectData": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "pIndirectData", + "type": "SIP_INDIRECT_DATA" + } + ], + "CryptSIPRemoveSignedDataMsg": [ + { + "name": "pSubjectInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "dwIndex", + "type": "DWORD" + } + ], + "CryptSIPLoad": [ + { + "name": "pgSubject", + "type": "GUID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pSipDispatch", + "type": "SIP_DISPATCH_INFO" + } + ], + "CryptSIPRetrieveSubjectGuid": [ + { + "name": "FileName", + "type": "LPCWSTR" + }, + { + "name": "hFileIn", + "type": "HANDLE" + }, + { + "name": "pgSubject", + "type": "GUID" + } + ], + "CryptSIPRetrieveSubjectGuidForCatalogFile": [ + { + "name": "FileName", + "type": "LPCWSTR" + }, + { + "name": "hFileIn", + "type": "HANDLE" + }, + { + "name": "pgSubject", + "type": "GUID" + } + ], + "CryptSIPAddProvider": [ + { + "name": "psNewProv", + "type": "SIP_ADD_NEWPROVIDER" + } + ], + "CryptSIPRemoveProvider": [ + { + "name": "pgProv", + "type": "GUID" + } + ], + "CryptSIPGetCaps": [ + { + "name": "pSubjInfo", + "type": "SIP_SUBJECTINFO" + }, + { + "name": "pCaps", + "type": "SIP_CAP_SET" + } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/cryptdlg.json b/qiling/extensions/windows_sdk/cryptdlg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/cryptdlg.json rename to qiling/extensions/windows_sdk/cryptdlg_dll.json diff --git a/qiling/extensions/windows_sdk/cryptnet_dll.json b/qiling/extensions/windows_sdk/cryptnet_dll.json new file mode 100644 index 000000000..4de2b7604 --- /dev/null +++ b/qiling/extensions/windows_sdk/cryptnet_dll.json @@ -0,0 +1,150 @@ +{ + "CryptRetrieveObjectByUrlA": [ + { + "name": "pszUrl", + "type": "LPCSTR" + }, + { + "name": "pszObjectOid", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "hAsyncRetrieve", + "type": "HCRYPTASYNC" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pvVerify", + "type": "LPVOID" + }, + { + "name": "pAuxInfo", + "type": "PCRYPT_RETRIEVE_AUX_INFO" + } + ], + "CryptRetrieveObjectByUrlW": [ + { + "name": "pszUrl", + "type": "LPCWSTR" + }, + { + "name": "pszObjectOid", + "type": "LPCSTR" + }, + { + "name": "dwRetrievalFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "hAsyncRetrieve", + "type": "HCRYPTASYNC" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pvVerify", + "type": "LPVOID" + }, + { + "name": "pAuxInfo", + "type": "PCRYPT_RETRIEVE_AUX_INFO" + } + ], + "CryptGetObjectUrl": [ + { + "name": "pszUrlOid", + "type": "LPCSTR" + }, + { + "name": "pvPara", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pUrlArray", + "type": "PCRYPT_URL_ARRAY" + }, + { + "name": "pcbUrlArray", + "type": "DWORD" + }, + { + "name": "pUrlInfo", + "type": "PCRYPT_URL_INFO" + }, + { + "name": "pcbUrlInfo", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CryptGetTimeValidObject": [ + { + "name": "pszTimeValidOid", + "type": "LPCSTR" + }, + { + "name": "pvPara", + "type": "LPVOID" + }, + { + "name": "pIssuer", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pftValidFor", + "type": "LPFILETIME" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "ppvObject", + "type": "LPVOID" + }, + { + "name": "pCredentials", + "type": "PCRYPT_CREDENTIALS" + }, + { + "name": "pExtraInfo", + "type": "PCRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Cryptui.json b/qiling/extensions/windows_sdk/cryptui_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Cryptui.json rename to qiling/extensions/windows_sdk/cryptui_dll.json diff --git a/qiling/extensions/windows_sdk/cryptxml.json b/qiling/extensions/windows_sdk/cryptxml_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/cryptxml.json rename to qiling/extensions/windows_sdk/cryptxml_dll.json diff --git a/qiling/extensions/windows_sdk/cscapi.json b/qiling/extensions/windows_sdk/cscapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/cscapi.json rename to qiling/extensions/windows_sdk/cscapi_dll.json diff --git a/qiling/extensions/windows_sdk/d2d1.json b/qiling/extensions/windows_sdk/d2d1.json deleted file mode 100644 index 461dc4e15..000000000 --- a/qiling/extensions/windows_sdk/d2d1.json +++ /dev/null @@ -1,78 +0,0 @@ -{ - "D2D1CreateDevice": [ - { - "name": "dxgiDevice", - "type": "IDXGIDevice" - }, - { - "name": "creationProperties", - "type": "D2D1_CREATION_PROPERTIES" - }, - { - "name": "d2dDevice", - "type": "ID2D1Device" - } - ], - "D2D1CreateDeviceContext": [ - { - "name": "dxgiSurface", - "type": "IDXGISurface" - }, - { - "name": "creationProperties", - "type": "D2D1_CREATION_PROPERTIES" - }, - { - "name": "d2dDeviceContext", - "type": "ID2D1DeviceContext" - } - ], - "D2D1ConvertColorSpace": [ - { - "name": "sourceColorSpace", - "type": "D2D1_COLOR_SPACE" - }, - { - "name": "destinationColorSpace", - "type": "D2D1_COLOR_SPACE" - }, - { - "name": "color", - "type": "D2D1_COLOR_F" - } - ], - "D2D1SinCos": [ - { - "name": "angle", - "type": "FLOAT" - }, - { - "name": "s", - "type": "FLOAT" - }, - { - "name": "c", - "type": "FLOAT" - } - ], - "D2D1Tan": [ - { - "name": "angle", - "type": "FLOAT" - } - ], - "D2D1Vec3Length": [ - { - "name": "x", - "type": "FLOAT" - }, - { - "name": "y", - "type": "FLOAT" - }, - { - "name": "z", - "type": "FLOAT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d2d1_dll.json b/qiling/extensions/windows_sdk/d2d1_dll.json new file mode 100644 index 000000000..1ff8218f5 --- /dev/null +++ b/qiling/extensions/windows_sdk/d2d1_dll.json @@ -0,0 +1,234 @@ +{ + "D2D1ComputeMaximumScaleFactor": [ + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ], + "D2D1GetGradientMeshInteriorPointsFromCoonsPatch": [ + { + "name": "pPoint0", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint1", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint2", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint3", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint4", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint5", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint6", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint7", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint8", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint9", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint10", + "type": "D2D1_POINT_2F" + }, + { + "name": "pPoint11", + "type": "D2D1_POINT_2F" + }, + { + "name": "pTensorPoint11", + "type": "D2D1_POINT_2F" + }, + { + "name": "pTensorPoint12", + "type": "D2D1_POINT_2F" + }, + { + "name": "pTensorPoint21", + "type": "D2D1_POINT_2F" + }, + { + "name": "pTensorPoint22", + "type": "D2D1_POINT_2F" + } + ], + "D2D1CreateDevice": [ + { + "name": "dxgiDevice", + "type": "IDXGIDevice" + }, + { + "name": "creationProperties", + "type": "D2D1_CREATION_PROPERTIES" + }, + { + "name": "d2dDevice", + "type": "ID2D1Device" + } + ], + "D2D1CreateDeviceContext": [ + { + "name": "dxgiSurface", + "type": "IDXGISurface" + }, + { + "name": "creationProperties", + "type": "D2D1_CREATION_PROPERTIES" + }, + { + "name": "d2dDeviceContext", + "type": "ID2D1DeviceContext" + } + ], + "D2D1ConvertColorSpace": [ + { + "name": "sourceColorSpace", + "type": "D2D1_COLOR_SPACE" + }, + { + "name": "destinationColorSpace", + "type": "D2D1_COLOR_SPACE" + }, + { + "name": "color", + "type": "D2D1_COLOR_F" + } + ], + "D2D1SinCos": [ + { + "name": "angle", + "type": "FLOAT" + }, + { + "name": "s", + "type": "FLOAT" + }, + { + "name": "c", + "type": "FLOAT" + } + ], + "D2D1Tan": [ + { + "name": "angle", + "type": "FLOAT" + } + ], + "D2D1Vec3Length": [ + { + "name": "x", + "type": "FLOAT" + }, + { + "name": "y", + "type": "FLOAT" + }, + { + "name": "z", + "type": "FLOAT" + } + ], + "Ellipse": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "left", + "type": "int" + }, + { + "name": "top", + "type": "int" + }, + { + "name": "right", + "type": "int" + }, + { + "name": "bottom", + "type": "int" + } + ], + "D2D1CreateFactory": [ + { + "name": "factoryType", + "type": "D2D1_FACTORY_TYPE" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pFactoryOptions", + "type": "D2D1_FACTORY_OPTIONS" + }, + { + "name": "ppIFactory", + "type": "void" + } + ], + "D2D1MakeRotateMatrix": [ + { + "name": "angle", + "type": "FLOAT" + }, + { + "name": "center", + "type": "D2D1_POINT_2F" + }, + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ], + "D2D1MakeSkewMatrix": [ + { + "name": "angleX", + "type": "FLOAT" + }, + { + "name": "angleY", + "type": "FLOAT" + }, + { + "name": "center", + "type": "D2D1_POINT_2F" + }, + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ], + "D2D1IsMatrixInvertible": [ + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ], + "D2D1InvertMatrix": [ + { + "name": "matrix", + "type": "D2D1_MATRIX_3X2_F" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d10.json b/qiling/extensions/windows_sdk/d3d10.json deleted file mode 100644 index 2eb98e60d..000000000 --- a/qiling/extensions/windows_sdk/d3d10.json +++ /dev/null @@ -1,72 +0,0 @@ -{ - "D3D10CreateDevice": [ - { - "name": "pAdapter", - "type": "IDXGIAdapter" - }, - { - "name": "DriverType", - "type": "D3D10_DRIVER_TYPE" - }, - { - "name": "Software", - "type": "HMODULE" - }, - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "SDKVersion", - "type": "UINT" - }, - { - "name": "ppDevice", - "type": "ID3D10Device" - } - ], - "D3D10CreateDeviceAndSwapChain": [ - { - "name": "pAdapter", - "type": "IDXGIAdapter" - }, - { - "name": "DriverType", - "type": "D3D10_DRIVER_TYPE" - }, - { - "name": "Software", - "type": "HMODULE" - }, - { - "name": "Flags", - "type": "UINT" - }, - { - "name": "SDKVersion", - "type": "UINT" - }, - { - "name": "pSwapChainDesc", - "type": "DXGI_SWAP_CHAIN_DESC" - }, - { - "name": "ppSwapChain", - "type": "IDXGISwapChain" - }, - { - "name": "ppDevice", - "type": "ID3D10Device" - } - ], - "D3D10CreateBlob": [ - { - "name": "NumBytes", - "type": "SIZE_T" - }, - { - "name": "ppBuffer", - "type": "LPD3D10BLOB" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d10_1.json b/qiling/extensions/windows_sdk/d3d10_1_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/d3d10_1.json rename to qiling/extensions/windows_sdk/d3d10_1_dll.json diff --git a/qiling/extensions/windows_sdk/d3d10_dll.json b/qiling/extensions/windows_sdk/d3d10_dll.json new file mode 100644 index 000000000..55335c7c7 --- /dev/null +++ b/qiling/extensions/windows_sdk/d3d10_dll.json @@ -0,0 +1,290 @@ +{ + "D3D10StateBlockMaskUnion": [ + { + "name": "pA", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pB", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pResult", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskIntersect": [ + { + "name": "pA", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pB", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pResult", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskDifference": [ + { + "name": "pA", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pB", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "pResult", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskEnableCapture": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "StateType", + "type": "D3D10_DEVICE_STATE_TYPES" + }, + { + "name": "RangeStart", + "type": "UINT" + }, + { + "name": "RangeLength", + "type": "UINT" + } + ], + "D3D10StateBlockMaskDisableCapture": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "StateType", + "type": "D3D10_DEVICE_STATE_TYPES" + }, + { + "name": "RangeStart", + "type": "UINT" + }, + { + "name": "RangeLength", + "type": "UINT" + } + ], + "D3D10StateBlockMaskEnableAll": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskDisableAll": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + } + ], + "D3D10StateBlockMaskGetSetting": [ + { + "name": "pMask", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "StateType", + "type": "D3D10_DEVICE_STATE_TYPES" + }, + { + "name": "Entry", + "type": "UINT" + } + ], + "D3D10CreateStateBlock": [ + { + "name": "pDevice", + "type": "ID3D10Device" + }, + { + "name": "pStateBlockMask", + "type": "D3D10_STATE_BLOCK_MASK" + }, + { + "name": "ppStateBlock", + "type": "ID3D10StateBlock" + } + ], + "D3D10CompileEffectFromMemory": [ + { + "name": "pData", + "type": "void" + }, + { + "name": "DataLength", + "type": "SIZE_T" + }, + { + "name": "pSrcFileName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D10_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3D10Include" + }, + { + "name": "HLSLFlags", + "type": "UINT" + }, + { + "name": "FXFlags", + "type": "UINT" + }, + { + "name": "ppCompiledEffect", + "type": "ID3D10Blob" + }, + { + "name": "ppErrors", + "type": "ID3D10Blob" + } + ], + "D3D10CreateEffectFromMemory": [ + { + "name": "pData", + "type": "void" + }, + { + "name": "DataLength", + "type": "SIZE_T" + }, + { + "name": "FXFlags", + "type": "UINT" + }, + { + "name": "pDevice", + "type": "ID3D10Device" + }, + { + "name": "pEffectPool", + "type": "ID3D10EffectPool" + }, + { + "name": "ppEffect", + "type": "ID3D10Effect" + } + ], + "D3D10CreateEffectPoolFromMemory": [ + { + "name": "pData", + "type": "void" + }, + { + "name": "DataLength", + "type": "SIZE_T" + }, + { + "name": "FXFlags", + "type": "UINT" + }, + { + "name": "pDevice", + "type": "ID3D10Device" + }, + { + "name": "ppEffectPool", + "type": "ID3D10EffectPool" + } + ], + "D3D10DisassembleEffect": [ + { + "name": "pEffect", + "type": "ID3D10Effect" + }, + { + "name": "EnableColorCode", + "type": "BOOL" + }, + { + "name": "ppDisassembly", + "type": "ID3D10Blob" + } + ], + "D3D10CreateDevice": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D10_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "ppDevice", + "type": "ID3D10Device" + } + ], + "D3D10CreateDeviceAndSwapChain": [ + { + "name": "pAdapter", + "type": "IDXGIAdapter" + }, + { + "name": "DriverType", + "type": "D3D10_DRIVER_TYPE" + }, + { + "name": "Software", + "type": "HMODULE" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "SDKVersion", + "type": "UINT" + }, + { + "name": "pSwapChainDesc", + "type": "DXGI_SWAP_CHAIN_DESC" + }, + { + "name": "ppSwapChain", + "type": "IDXGISwapChain" + }, + { + "name": "ppDevice", + "type": "ID3D10Device" + } + ], + "D3D10CreateBlob": [ + { + "name": "NumBytes", + "type": "SIZE_T" + }, + { + "name": "ppBuffer", + "type": "LPD3D10BLOB" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/d3d11.json b/qiling/extensions/windows_sdk/d3d11_dll.json similarity index 69% rename from qiling/extensions/windows_sdk/d3d11.json rename to qiling/extensions/windows_sdk/d3d11_dll.json index 60c158916..31b320ce0 100644 --- a/qiling/extensions/windows_sdk/d3d11.json +++ b/qiling/extensions/windows_sdk/d3d11_dll.json @@ -1,4 +1,46 @@ { + "D3D11On12CreateDevice": [ + { + "name": "pDevice", + "type": "IUnknown" + }, + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "pFeatureLevels", + "type": "D3D_FEATURE_LEVEL" + }, + { + "name": "FeatureLevels", + "type": "UINT" + }, + { + "name": "ppCommandQueues", + "type": "IUnknown" + }, + { + "name": "NumQueues", + "type": "UINT" + }, + { + "name": "NodeMask", + "type": "UINT" + }, + { + "name": "ppDevice", + "type": "ID3D11Device" + }, + { + "name": "ppImmediateContext", + "type": "ID3D11DeviceContext" + }, + { + "name": "pChosenFeatureLevel", + "type": "D3D_FEATURE_LEVEL" + } + ], "D3D11CreateDevice": [ { "name": "pAdapter", diff --git a/qiling/extensions/windows_sdk/D3D11SDKLayers.json b/qiling/extensions/windows_sdk/d3d11sdklayers_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/D3D11SDKLayers.json rename to qiling/extensions/windows_sdk/d3d11sdklayers_dll.json diff --git a/qiling/extensions/windows_sdk/d3d12.json b/qiling/extensions/windows_sdk/d3d12_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/d3d12.json rename to qiling/extensions/windows_sdk/d3d12_dll.json diff --git a/qiling/extensions/windows_sdk/d3d9.json b/qiling/extensions/windows_sdk/d3d9_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/d3d9.json rename to qiling/extensions/windows_sdk/d3d9_dll.json diff --git a/qiling/extensions/windows_sdk/d3dcompiler.json b/qiling/extensions/windows_sdk/d3dcompiler_47_dll.json similarity index 91% rename from qiling/extensions/windows_sdk/d3dcompiler.json rename to qiling/extensions/windows_sdk/d3dcompiler_47_dll.json index 6a457e9b6..626e4ba3a 100644 --- a/qiling/extensions/windows_sdk/d3dcompiler.json +++ b/qiling/extensions/windows_sdk/d3dcompiler_47_dll.json @@ -23,52 +23,6 @@ "type": "BOOL" } ], - "D3DCompile": [ - { - "name": "pSrcData", - "type": "LPCVOID" - }, - { - "name": "SrcDataSize", - "type": "SIZE_T" - }, - { - "name": "pSourceName", - "type": "LPCSTR" - }, - { - "name": "pDefines", - "type": "D3D_SHADER_MACRO" - }, - { - "name": "pInclude", - "type": "ID3DInclude" - }, - { - "name": "pEntrypoint", - "type": "LPCSTR" - }, - { - "name": "pTarget", - "type": "LPCSTR" - }, - { - "name": "Flags1", - "type": "UINT" - }, - { - "name": "Flags2", - "type": "UINT" - }, - { - "name": "ppCode", - "type": "ID3DBlob" - }, - { - "name": "ppErrorMsgs", - "type": "ID3DBlob" - } - ], "D3DCompile2": [ { "name": "pSrcData", diff --git a/qiling/extensions/windows_sdk/d3dcompiler_dll.json b/qiling/extensions/windows_sdk/d3dcompiler_dll.json new file mode 100644 index 000000000..75a9dcc36 --- /dev/null +++ b/qiling/extensions/windows_sdk/d3dcompiler_dll.json @@ -0,0 +1,48 @@ +{ + "D3DCompile": [ + { + "name": "pSrcData", + "type": "LPCVOID" + }, + { + "name": "SrcDataSize", + "type": "SIZE_T" + }, + { + "name": "pSourceName", + "type": "LPCSTR" + }, + { + "name": "pDefines", + "type": "D3D_SHADER_MACRO" + }, + { + "name": "pInclude", + "type": "ID3DInclude" + }, + { + "name": "pEntrypoint", + "type": "LPCSTR" + }, + { + "name": "pTarget", + "type": "LPCSTR" + }, + { + "name": "Flags1", + "type": "UINT" + }, + { + "name": "Flags2", + "type": "UINT" + }, + { + "name": "ppCode", + "type": "ID3DBlob" + }, + { + "name": "ppErrorMsgs", + "type": "ID3DBlob" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/davclnt.json b/qiling/extensions/windows_sdk/davclnt.json deleted file mode 100644 index 2b689a000..000000000 --- a/qiling/extensions/windows_sdk/davclnt.json +++ /dev/null @@ -1,132 +0,0 @@ -{ - "DavAddConnection": [ - { - "name": "ConnectionHandle", - "type": "HANDLE" - }, - { - "name": "RemoteName", - "type": "LPCWSTR" - }, - { - "name": "UserName", - "type": "LPCWSTR" - }, - { - "name": "Password", - "type": "LPCWSTR" - }, - { - "name": "ClientCert", - "type": "PBYTE" - }, - { - "name": "CertSize", - "type": "DWORD" - } - ], - "DavDeleteConnection": [ - { - "name": "ConnectionHandle", - "type": "HANDLE" - } - ], - "DavGetUNCFromHTTPPath": [ - { - "name": "Url", - "type": "LPCWSTR" - }, - { - "name": "UncPath", - "type": "LPWSTR" - }, - { - "name": "lpSize", - "type": "LPDWORD" - } - ], - "DavGetHTTPFromUNCPath": [ - { - "name": "UncPath", - "type": "LPCWSTR" - }, - { - "name": "Url", - "type": "LPWSTR" - }, - { - "name": "lpSize", - "type": "LPDWORD" - } - ], - "DavGetTheLockOwnerOfTheFile": [ - { - "name": "FileName", - "type": "LPCWSTR" - }, - { - "name": "LockOwnerName", - "type": "PWSTR" - }, - { - "name": "LockOwnerNameLengthInBytes", - "type": "PULONG" - } - ], - "DavGetExtendedError": [ - { - "name": "hFile", - "type": "HANDLE" - }, - { - "name": "ExtError", - "type": "DWORD" - }, - { - "name": "ExtErrorString", - "type": "LPWSTR" - }, - { - "name": "cChSize", - "type": "DWORD" - } - ], - "DavFlushFile": [ - { - "name": "hFile", - "type": "HANDLE" - } - ], - "DavInvalidateCache": [ - { - "name": "URLName", - "type": "LPCWSTR" - } - ], - "DavCancelConnectionsToServer": [ - { - "name": "lpName", - "type": "LPWSTR" - }, - { - "name": "fForce", - "type": "BOOL" - } - ], - "DavRegisterAuthCallback": [ - { - "name": "CallBack", - "type": "PFNDAVAUTHCALLBACK" - }, - { - "name": "Version", - "type": "ULONG" - } - ], - "DavUnregisterAuthCallback": [ - { - "name": "hCallback", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/davclnt_dll.json b/qiling/extensions/windows_sdk/davclnt_dll.json new file mode 100644 index 000000000..e2c6a9ccd --- /dev/null +++ b/qiling/extensions/windows_sdk/davclnt_dll.json @@ -0,0 +1,48 @@ +{ + "DavGetTheLockOwnerOfTheFile": [ + { + "name": "FileName", + "type": "LPCWSTR" + }, + { + "name": "LockOwnerName", + "type": "PWSTR" + }, + { + "name": "LockOwnerNameLengthInBytes", + "type": "PULONG" + } + ], + "DavInvalidateCache": [ + { + "name": "URLName", + "type": "LPCWSTR" + } + ], + "DavCancelConnectionsToServer": [ + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "DavRegisterAuthCallback": [ + { + "name": "CallBack", + "type": "PFNDAVAUTHCALLBACK" + }, + { + "name": "Version", + "type": "ULONG" + } + ], + "DavUnregisterAuthCallback": [ + { + "name": "hCallback", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dbghelp.json b/qiling/extensions/windows_sdk/dbghelp_dll.json similarity index 98% rename from qiling/extensions/windows_sdk/dbghelp.json rename to qiling/extensions/windows_sdk/dbghelp_dll.json index 283966c59..8b4548849 100644 --- a/qiling/extensions/windows_sdk/dbghelp.json +++ b/qiling/extensions/windows_sdk/dbghelp_dll.json @@ -1,4 +1,56 @@ { + "MiniDumpWriteDump": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ProcessId", + "type": "DWORD" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "DumpType", + "type": "MINIDUMP_TYPE" + }, + { + "name": "ExceptionParam", + "type": "PMINIDUMP_EXCEPTION_INFORMATION" + }, + { + "name": "UserStreamParam", + "type": "PMINIDUMP_USER_STREAM_INFORMATION" + }, + { + "name": "CallbackParam", + "type": "PMINIDUMP_CALLBACK_INFORMATION" + } + ], + "MiniDumpReadDumpStream": [ + { + "name": "BaseOfDump", + "type": "PVOID" + }, + { + "name": "StreamNumber", + "type": "ULONG" + }, + { + "name": "Dir", + "type": "PMINIDUMP_DIRECTORY" + }, + { + "name": "StreamPointer", + "type": "PVOID" + }, + { + "name": "StreamSize", + "type": "ULONG" + } + ], "SymFindDebugInfoFile": [ { "name": "hProcess", diff --git a/qiling/extensions/windows_sdk/Dciman32.json b/qiling/extensions/windows_sdk/dciman32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Dciman32.json rename to qiling/extensions/windows_sdk/dciman32_dll.json diff --git a/qiling/extensions/windows_sdk/ddraw.json b/qiling/extensions/windows_sdk/ddraw_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ddraw.json rename to qiling/extensions/windows_sdk/ddraw_dll.json diff --git a/qiling/extensions/windows_sdk/deviceaccess.json b/qiling/extensions/windows_sdk/deviceaccess_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/deviceaccess.json rename to qiling/extensions/windows_sdk/deviceaccess_dll.json diff --git a/qiling/extensions/windows_sdk/dflayout_dll.json b/qiling/extensions/windows_sdk/dflayout_dll.json new file mode 100644 index 000000000..e3449d84d --- /dev/null +++ b/qiling/extensions/windows_sdk/dflayout_dll.json @@ -0,0 +1,20 @@ +{ + "StgOpenLayoutDocfile": [ + { + "name": "pwcsDfName", + "type": "OLECHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Dhcpcsvc6.json b/qiling/extensions/windows_sdk/dhcpcsvc6_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Dhcpcsvc6.json rename to qiling/extensions/windows_sdk/dhcpcsvc6_dll.json diff --git a/qiling/extensions/windows_sdk/Dhcpcsvc.json b/qiling/extensions/windows_sdk/dhcpcsvc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Dhcpcsvc.json rename to qiling/extensions/windows_sdk/dhcpcsvc_dll.json diff --git a/qiling/extensions/windows_sdk/dhcpsapi.json b/qiling/extensions/windows_sdk/dhcpsapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dhcpsapi.json rename to qiling/extensions/windows_sdk/dhcpsapi_dll.json diff --git a/qiling/extensions/windows_sdk/Dnsapi.json b/qiling/extensions/windows_sdk/dnsapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Dnsapi.json rename to qiling/extensions/windows_sdk/dnsapi_dll.json diff --git a/qiling/extensions/windows_sdk/drt.json b/qiling/extensions/windows_sdk/drt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/drt.json rename to qiling/extensions/windows_sdk/drt_dll.json diff --git a/qiling/extensions/windows_sdk/dssec.json b/qiling/extensions/windows_sdk/dssec_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dssec.json rename to qiling/extensions/windows_sdk/dssec_dll.json diff --git a/qiling/extensions/windows_sdk/dwmapi.json b/qiling/extensions/windows_sdk/dwmapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dwmapi.json rename to qiling/extensions/windows_sdk/dwmapi_dll.json diff --git a/qiling/extensions/windows_sdk/dxgi.json b/qiling/extensions/windows_sdk/dxgi.json deleted file mode 100644 index ca8311e2a..000000000 --- a/qiling/extensions/windows_sdk/dxgi.json +++ /dev/null @@ -1,22 +0,0 @@ -{ - "CreateDXGIFactory": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppFactory", - "type": "void" - } - ], - "CreateDXGIFactory1": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppFactory", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dxgi_dll.json b/qiling/extensions/windows_sdk/dxgi_dll.json new file mode 100644 index 000000000..11138d457 --- /dev/null +++ b/qiling/extensions/windows_sdk/dxgi_dll.json @@ -0,0 +1,50 @@ +{ + "CreateDXGIFactory2": [ + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppFactory", + "type": "void" + } + ], + "DXGIGetDebugInterface1": [ + { + "name": "Flags", + "type": "UINT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pDebug", + "type": "void" + } + ], + "CreateDXGIFactory": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppFactory", + "type": "void" + } + ], + "CreateDXGIFactory1": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppFactory", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dxgidebug.json b/qiling/extensions/windows_sdk/dxgidebug_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dxgidebug.json rename to qiling/extensions/windows_sdk/dxgidebug_dll.json diff --git a/qiling/extensions/windows_sdk/dxva2.json b/qiling/extensions/windows_sdk/dxva2.json deleted file mode 100644 index 329e3e714..000000000 --- a/qiling/extensions/windows_sdk/dxva2.json +++ /dev/null @@ -1,66 +0,0 @@ -{ - "GetNumberOfPhysicalMonitorsFromHMONITOR": [ - { - "name": "hMonitor", - "type": "HMONITOR" - }, - { - "name": "pdwNumberOfPhysicalMonitors", - "type": "LPDWORD" - } - ], - "GetNumberOfPhysicalMonitorsFromIDirect3DDevice9": [ - { - "name": "pDirect3DDevice9", - "type": "IDirect3DDevice9" - }, - { - "name": "pdwNumberOfPhysicalMonitors", - "type": "LPDWORD" - } - ], - "GetPhysicalMonitorsFromHMONITOR": [ - { - "name": "hMonitor", - "type": "HMONITOR" - }, - { - "name": "dwPhysicalMonitorArraySize", - "type": "DWORD" - }, - { - "name": "pPhysicalMonitorArray", - "type": "LPPHYSICAL_MONITOR" - } - ], - "GetPhysicalMonitorsFromIDirect3DDevice9": [ - { - "name": "pDirect3DDevice9", - "type": "IDirect3DDevice9" - }, - { - "name": "dwPhysicalMonitorArraySize", - "type": "DWORD" - }, - { - "name": "pPhysicalMonitorArray", - "type": "LPPHYSICAL_MONITOR" - } - ], - "DestroyPhysicalMonitor": [ - { - "name": "hMonitor", - "type": "HANDLE" - } - ], - "DestroyPhysicalMonitors": [ - { - "name": "dwPhysicalMonitorArraySize", - "type": "DWORD" - }, - { - "name": "pPhysicalMonitorArray", - "type": "LPPHYSICAL_MONITOR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/dxva2_dll.json b/qiling/extensions/windows_sdk/dxva2_dll.json new file mode 100644 index 000000000..3d69b60f9 --- /dev/null +++ b/qiling/extensions/windows_sdk/dxva2_dll.json @@ -0,0 +1,410 @@ +{ + "GetVCPFeatureAndVCPFeatureReply": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "bVCPCode", + "type": "BYTE" + }, + { + "name": "pvct", + "type": "LPMC_VCP_CODE_TYPE" + }, + { + "name": "pdwCurrentValue", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumValue", + "type": "LPDWORD" + } + ], + "SetVCPFeature": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "bVCPCode", + "type": "BYTE" + }, + { + "name": "dwNewValue", + "type": "DWORD" + } + ], + "SaveCurrentSettings": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "GetCapabilitiesStringLength": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdwCapabilitiesStringLengthInCharacters", + "type": "LPDWORD" + } + ], + "CapabilitiesRequestAndCapabilitiesReply": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pszASCIICapabilitiesString", + "type": "LPSTR" + }, + { + "name": "dwCapabilitiesStringLengthInCharacters", + "type": "DWORD" + } + ], + "GetTimingReport": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pmtrMonitorTimingReport", + "type": "LPMC_TIMING_REPORT" + } + ], + "GetMonitorCapabilities": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdwMonitorCapabilities", + "type": "LPDWORD" + }, + { + "name": "pdwSupportedColorTemperatures", + "type": "LPDWORD" + } + ], + "SaveCurrentMonitorSettings": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "GetMonitorTechnologyType": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdtyDisplayTechnologyType", + "type": "LPMC_DISPLAY_TECHNOLOGY_TYPE" + } + ], + "GetMonitorBrightness": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdwMinimumBrightness", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentBrightness", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumBrightness", + "type": "LPDWORD" + } + ], + "GetMonitorContrast": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pdwMinimumContrast", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentContrast", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumContrast", + "type": "LPDWORD" + } + ], + "GetMonitorColorTemperature": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "pctCurrentColorTemperature", + "type": "LPMC_COLOR_TEMPERATURE" + } + ], + "GetMonitorRedGreenOrBlueDrive": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "dtDriveType", + "type": "MC_DRIVE_TYPE" + }, + { + "name": "pdwMinimumDrive", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentDrive", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumDrive", + "type": "LPDWORD" + } + ], + "GetMonitorRedGreenOrBlueGain": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "gtGainType", + "type": "MC_GAIN_TYPE" + }, + { + "name": "pdwMinimumGain", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentGain", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumGain", + "type": "LPDWORD" + } + ], + "SetMonitorBrightness": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "dwNewBrightness", + "type": "DWORD" + } + ], + "SetMonitorContrast": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "dwNewContrast", + "type": "DWORD" + } + ], + "SetMonitorColorTemperature": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "ctCurrentColorTemperature", + "type": "MC_COLOR_TEMPERATURE" + } + ], + "SetMonitorRedGreenOrBlueDrive": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "dtDriveType", + "type": "MC_DRIVE_TYPE" + }, + { + "name": "dwNewDrive", + "type": "DWORD" + } + ], + "SetMonitorRedGreenOrBlueGain": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "gtGainType", + "type": "MC_GAIN_TYPE" + }, + { + "name": "dwNewGain", + "type": "DWORD" + } + ], + "DegaussMonitor": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "GetMonitorDisplayAreaSize": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "stSizeType", + "type": "MC_SIZE_TYPE" + }, + { + "name": "pdwMinimumWidthOrHeight", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentWidthOrHeight", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumWidthOrHeight", + "type": "LPDWORD" + } + ], + "GetMonitorDisplayAreaPosition": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "ptPositionType", + "type": "MC_POSITION_TYPE" + }, + { + "name": "pdwMinimumPosition", + "type": "LPDWORD" + }, + { + "name": "pdwCurrentPosition", + "type": "LPDWORD" + }, + { + "name": "pdwMaximumPosition", + "type": "LPDWORD" + } + ], + "SetMonitorDisplayAreaSize": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "stSizeType", + "type": "MC_SIZE_TYPE" + }, + { + "name": "dwNewDisplayAreaWidthOrHeight", + "type": "DWORD" + } + ], + "SetMonitorDisplayAreaPosition": [ + { + "name": "hMonitor", + "type": "HANDLE" + }, + { + "name": "ptPositionType", + "type": "MC_POSITION_TYPE" + }, + { + "name": "dwNewPosition", + "type": "DWORD" + } + ], + "RestoreMonitorFactoryColorDefaults": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "RestoreMonitorFactoryDefaults": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "GetNumberOfPhysicalMonitorsFromHMONITOR": [ + { + "name": "hMonitor", + "type": "HMONITOR" + }, + { + "name": "pdwNumberOfPhysicalMonitors", + "type": "LPDWORD" + } + ], + "GetNumberOfPhysicalMonitorsFromIDirect3DDevice9": [ + { + "name": "pDirect3DDevice9", + "type": "IDirect3DDevice9" + }, + { + "name": "pdwNumberOfPhysicalMonitors", + "type": "LPDWORD" + } + ], + "GetPhysicalMonitorsFromHMONITOR": [ + { + "name": "hMonitor", + "type": "HMONITOR" + }, + { + "name": "dwPhysicalMonitorArraySize", + "type": "DWORD" + }, + { + "name": "pPhysicalMonitorArray", + "type": "LPPHYSICAL_MONITOR" + } + ], + "GetPhysicalMonitorsFromIDirect3DDevice9": [ + { + "name": "pDirect3DDevice9", + "type": "IDirect3DDevice9" + }, + { + "name": "dwPhysicalMonitorArraySize", + "type": "DWORD" + }, + { + "name": "pPhysicalMonitorArray", + "type": "LPPHYSICAL_MONITOR" + } + ], + "DestroyPhysicalMonitor": [ + { + "name": "hMonitor", + "type": "HANDLE" + } + ], + "DestroyPhysicalMonitors": [ + { + "name": "dwPhysicalMonitorArraySize", + "type": "DWORD" + }, + { + "name": "pPhysicalMonitorArray", + "type": "LPPHYSICAL_MONITOR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/eappcfg.json b/qiling/extensions/windows_sdk/eappcfg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/eappcfg.json rename to qiling/extensions/windows_sdk/eappcfg_dll.json diff --git a/qiling/extensions/windows_sdk/elscore.json b/qiling/extensions/windows_sdk/elscore_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/elscore.json rename to qiling/extensions/windows_sdk/elscore_dll.json diff --git a/qiling/extensions/windows_sdk/evr_dll.json b/qiling/extensions/windows_sdk/evr_dll.json new file mode 100644 index 000000000..d6c42eee0 --- /dev/null +++ b/qiling/extensions/windows_sdk/evr_dll.json @@ -0,0 +1,26 @@ +{ + "MFCreateDXSurfaceBuffer": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "punkSurface", + "type": "IUnknown" + }, + { + "name": "fBottomUpWhenLinear", + "type": "BOOL" + }, + { + "name": "ppBuffer", + "type": "IMFMediaBuffer" + } + ], + "MFIsFormatYUV": [ + { + "name": "Format", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Faultrep.json b/qiling/extensions/windows_sdk/faultrep_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Faultrep.json rename to qiling/extensions/windows_sdk/faultrep_dll.json diff --git a/qiling/extensions/windows_sdk/firewallapi.json b/qiling/extensions/windows_sdk/firewallapi_dll.json similarity index 74% rename from qiling/extensions/windows_sdk/firewallapi.json rename to qiling/extensions/windows_sdk/firewallapi_dll.json index 1d77f45ad..d9001a316 100644 --- a/qiling/extensions/windows_sdk/firewallapi.json +++ b/qiling/extensions/windows_sdk/firewallapi_dll.json @@ -53,6 +53,12 @@ "type": "HANDLE" } ], + "NetworkIsolationEnumerateAppContainerRules": [ + { + "name": "newEnum", + "type": "IEnumVARIANT" + } + ], "NetworkIsolationFreeAppContainers": [ { "name": "pPublicAppCs", @@ -102,5 +108,37 @@ "name": "netIsoError", "type": "NETISO_ERROR_TYPE" } + ], + "NetworkIsolationGetEnterpriseIdAsync": [ + { + "name": "wszServerName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "context", + "type": "void" + }, + { + "name": "callback", + "type": "PNETISO_EDP_ID_CALLBACK_FN" + }, + { + "name": "hOperation", + "type": "HANDLE" + } + ], + "NetworkIsolationGetEnterpriseIdClose": [ + { + "name": "hOperation", + "type": "HANDLE" + }, + { + "name": "bWaitForOperation", + "type": "BOOL" + } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/FltLib.json b/qiling/extensions/windows_sdk/fltlib_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/FltLib.json rename to qiling/extensions/windows_sdk/fltlib_dll.json diff --git a/qiling/extensions/windows_sdk/fontsub.json b/qiling/extensions/windows_sdk/fontsub_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/fontsub.json rename to qiling/extensions/windows_sdk/fontsub_dll.json diff --git a/qiling/extensions/windows_sdk/Fwpuclnt.json b/qiling/extensions/windows_sdk/fwpuclnt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Fwpuclnt.json rename to qiling/extensions/windows_sdk/fwpuclnt_dll.json diff --git a/qiling/extensions/windows_sdk/fxsutility.json b/qiling/extensions/windows_sdk/fxsutility_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/fxsutility.json rename to qiling/extensions/windows_sdk/fxsutility_dll.json diff --git a/qiling/extensions/windows_sdk/gamemode.json b/qiling/extensions/windows_sdk/gamemode_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/gamemode.json rename to qiling/extensions/windows_sdk/gamemode_dll.json diff --git a/qiling/extensions/windows_sdk/gdi32.json b/qiling/extensions/windows_sdk/gdi32_dll.json similarity index 91% rename from qiling/extensions/windows_sdk/gdi32.json rename to qiling/extensions/windows_sdk/gdi32_dll.json index f57fee6e4..bcf97d5f8 100644 --- a/qiling/extensions/windows_sdk/gdi32.json +++ b/qiling/extensions/windows_sdk/gdi32_dll.json @@ -741,50 +741,6 @@ "type": "LPPIXELFORMATDESCRIPTOR" } ], - "DeviceCapabilitiesA": [ - { - "name": "pDevice", - "type": "LPCSTR" - }, - { - "name": "pPort", - "type": "LPCSTR" - }, - { - "name": "fwCapability", - "type": "WORD" - }, - { - "name": "pOutput", - "type": "LPSTR" - }, - { - "name": "pDevMode", - "type": "DEVMODEA" - } - ], - "DeviceCapabilitiesW": [ - { - "name": "pDevice", - "type": "LPCWSTR" - }, - { - "name": "pPort", - "type": "LPCWSTR" - }, - { - "name": "fwCapability", - "type": "WORD" - }, - { - "name": "pOutput", - "type": "LPWSTR" - }, - { - "name": "pDevMode", - "type": "DEVMODEW" - } - ], "DrawEscape": [ { "name": "hdc", @@ -3305,124 +3261,6 @@ "type": "HDC" } ], - "AlphaBlend": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "ftn", - "type": "BLENDFUNCTION" - } - ], - "TransparentBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "crTransparent", - "type": "UINT" - } - ], - "GradientFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pVertex", - "type": "PTRIVERTEX" - }, - { - "name": "nVertex", - "type": "ULONG" - }, - { - "name": "pMesh", - "type": "PVOID" - }, - { - "name": "nMesh", - "type": "ULONG" - }, - { - "name": "ulMode", - "type": "ULONG" - } - ], "GdiAlphaBlend": [ { "name": "hdcDest", @@ -5157,278 +4995,10 @@ "type": "DWORD" } ], - "wglCopyContext": [ - { - "name": "VOID", - "type": "HGLRC" - }, - { - "name": "VOID", - "type": "HGLRC" - }, - { - "name": "VOID", - "type": "UINT" - } - ], - "wglCreateContext": [ - { - "name": "VOID", - "type": "HDC" - } - ], - "wglCreateLayerContext": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - } - ], - "wglDeleteContext": [ - { - "name": "VOID", - "type": "HGLRC" - } - ], - "wglGetCurrentContext": [ - { - "name": "VOID", - "type": "void" - } - ], - "wglGetCurrentDC": [ - { - "name": "VOID", - "type": "void" - } - ], - "wglGetProcAddress": [ - { - "name": "VOID", - "type": "LPCSTR" - } - ], - "wglMakeCurrent": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "HGLRC" - } - ], - "wglShareLists": [ - { - "name": "VOID", - "type": "HGLRC" - }, - { - "name": "VOID", - "type": "HGLRC" - } - ], - "wglUseFontBitmapsA": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "wglUseFontBitmapsW": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], "SwapBuffers": [ { "name": "VOID", "type": "HDC" } - ], - "wglUseFontOutlinesA": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "LPGLYPHMETRICSFLOAT" - } - ], - "wglUseFontOutlinesW": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "LPGLYPHMETRICSFLOAT" - } - ], - "wglDescribeLayerPlane": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "UINT" - }, - { - "name": "VOID", - "type": "LPLAYERPLANEDESCRIPTOR" - } - ], - "wglSetLayerPaletteEntries": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "COLORREF" - } - ], - "wglGetLayerPaletteEntries": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "COLORREF" - } - ], - "wglRealizeLayerPalette": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "BOOL" - } - ], - "wglSwapLayerBuffers": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "UINT" - } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/gpedit.json b/qiling/extensions/windows_sdk/gpedit_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/gpedit.json rename to qiling/extensions/windows_sdk/gpedit_dll.json diff --git a/qiling/extensions/windows_sdk/htmlhelp.json b/qiling/extensions/windows_sdk/htmlhelp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/htmlhelp.json rename to qiling/extensions/windows_sdk/htmlhelp_dll.json diff --git a/qiling/extensions/windows_sdk/imagehlp.json b/qiling/extensions/windows_sdk/imagehlp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/imagehlp.json rename to qiling/extensions/windows_sdk/imagehlp_dll.json diff --git a/qiling/extensions/windows_sdk/Imm32.json b/qiling/extensions/windows_sdk/imm32_dll.json similarity index 97% rename from qiling/extensions/windows_sdk/Imm32.json rename to qiling/extensions/windows_sdk/imm32_dll.json index 0ad14c9bd..db9653b71 100644 --- a/qiling/extensions/windows_sdk/Imm32.json +++ b/qiling/extensions/windows_sdk/imm32_dll.json @@ -900,5 +900,33 @@ "name": "idThread", "type": "DWORD" } + ], + "ImmRequestMessageA": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "WPARAM" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "ImmRequestMessageW": [ + { + "name": "VOID", + "type": "HIMC" + }, + { + "name": "VOID", + "type": "WPARAM" + }, + { + "name": "VOID", + "type": "LPARAM" + } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Inetcfg.json b/qiling/extensions/windows_sdk/inetcfg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Inetcfg.json rename to qiling/extensions/windows_sdk/inetcfg_dll.json diff --git a/qiling/extensions/windows_sdk/instrsa5_dll.json b/qiling/extensions/windows_sdk/instrsa5_dll.json new file mode 100644 index 000000000..406874b73 --- /dev/null +++ b/qiling/extensions/windows_sdk/instrsa5_dll.json @@ -0,0 +1,12 @@ +{ + "GetEncSChannel": [ + { + "name": "pData", + "type": "BYTE" + }, + { + "name": "dwDecSize", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/iphlpapi.json b/qiling/extensions/windows_sdk/iphlpapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/iphlpapi.json rename to qiling/extensions/windows_sdk/iphlpapi_dll.json diff --git a/qiling/extensions/windows_sdk/jsproxy_dll.json b/qiling/extensions/windows_sdk/jsproxy_dll.json new file mode 100644 index 000000000..eb57e02dd --- /dev/null +++ b/qiling/extensions/windows_sdk/jsproxy_dll.json @@ -0,0 +1,8 @@ +{ + "InternetInitializeAutoProxyDll": [ + { + "name": "dwReserved", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/kernel.json b/qiling/extensions/windows_sdk/kernel.json deleted file mode 100644 index 365e9667a..000000000 --- a/qiling/extensions/windows_sdk/kernel.json +++ /dev/null @@ -1,8974 +0,0 @@ -{ - "LoadStringA": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "uID", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPSTR" - }, - { - "name": "cchBufferMax", - "type": "int" - } - ], - "LoadStringW": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "uID", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPWSTR" - }, - { - "name": "cchBufferMax", - "type": "int" - } - ], - "wvsprintfA": [ - { - "name": "VOID", - "type": "LPSTR" - }, - { - "name": "VOID", - "type": "LPCSTR" - }, - { - "name": "arglist", - "type": "va_list" - } - ], - "wvsprintfW": [ - { - "name": "VOID", - "type": "LPWSTR" - }, - { - "name": "VOID", - "type": "LPCWSTR" - }, - { - "name": "arglist", - "type": "va_list" - } - ], - "wsprintfA": [ - { - "name": "VOID", - "type": "LPSTR" - }, - { - "name": "VOID", - "type": "LPCSTR" - } - ], - "wsprintfW": [ - { - "name": "VOID", - "type": "LPWSTR" - }, - { - "name": "VOID", - "type": "LPCWSTR" - } - ], - "LoadKeyboardLayoutA": [ - { - "name": "pwszKLID", - "type": "LPCSTR" - }, - { - "name": "Flags", - "type": "UINT" - } - ], - "LoadKeyboardLayoutW": [ - { - "name": "pwszKLID", - "type": "LPCWSTR" - }, - { - "name": "Flags", - "type": "UINT" - } - ], - "ActivateKeyboardLayout": [ - { - "name": "hkl", - "type": "HKL" - }, - { - "name": "Flags", - "type": "UINT" - } - ], - "ToUnicodeEx": [ - { - "name": "wVirtKey", - "type": "UINT" - }, - { - "name": "wScanCode", - "type": "UINT" - }, - { - "name": "lpKeyState", - "type": "BYTE" - }, - { - "name": "pwszBuff", - "type": "LPWSTR" - }, - { - "name": "cchBuff", - "type": "int" - }, - { - "name": "wFlags", - "type": "UINT" - }, - { - "name": "dwhkl", - "type": "HKL" - } - ], - "UnloadKeyboardLayout": [ - { - "name": "hkl", - "type": "HKL" - } - ], - "GetKeyboardLayoutNameA": [ - { - "name": "pwszKLID", - "type": "LPSTR" - } - ], - "GetKeyboardLayoutNameW": [ - { - "name": "pwszKLID", - "type": "LPWSTR" - } - ], - "GetKeyboardLayoutList": [ - { - "name": "nBuff", - "type": "int" - }, - { - "name": "lpList", - "type": "HKL" - } - ], - "GetKeyboardLayout": [ - { - "name": "idThread", - "type": "DWORD" - } - ], - "GetMouseMovePointsEx": [ - { - "name": "cbSize", - "type": "UINT" - }, - { - "name": "lppt", - "type": "LPMOUSEMOVEPOINT" - }, - { - "name": "lpptBuf", - "type": "LPMOUSEMOVEPOINT" - }, - { - "name": "nBufPoints", - "type": "int" - }, - { - "name": "resolution", - "type": "DWORD" - } - ], - "CreateDesktopA": [ - { - "name": "lpszDesktop", - "type": "LPCSTR" - }, - { - "name": "lpszDevice", - "type": "LPCSTR" - }, - { - "name": "pDevmode", - "type": "DEVMODEA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "ACCESS_MASK" - }, - { - "name": "lpsa", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "CreateDesktopW": [ - { - "name": "lpszDesktop", - "type": "LPCWSTR" - }, - { - "name": "lpszDevice", - "type": "LPCWSTR" - }, - { - "name": "pDevmode", - "type": "DEVMODEW" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "ACCESS_MASK" - }, - { - "name": "lpsa", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "CreateDesktopExA": [ - { - "name": "lpszDesktop", - "type": "LPCSTR" - }, - { - "name": "lpszDevice", - "type": "LPCSTR" - }, - { - "name": "pDevmode", - "type": "DEVMODEA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "ACCESS_MASK" - }, - { - "name": "lpsa", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "ulHeapSize", - "type": "ULONG" - }, - { - "name": "pvoid", - "type": "PVOID" - } - ], - "CreateDesktopExW": [ - { - "name": "lpszDesktop", - "type": "LPCWSTR" - }, - { - "name": "lpszDevice", - "type": "LPCWSTR" - }, - { - "name": "pDevmode", - "type": "DEVMODEW" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "ACCESS_MASK" - }, - { - "name": "lpsa", - "type": "LPSECURITY_ATTRIBUTES" - }, - { - "name": "ulHeapSize", - "type": "ULONG" - }, - { - "name": "pvoid", - "type": "PVOID" - } - ], - "OpenDesktopA": [ - { - "name": "lpszDesktop", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "fInherit", - "type": "BOOL" - }, - { - "name": "dwDesiredAccess", - "type": "ACCESS_MASK" - } - ], - "OpenDesktopW": [ - { - "name": "lpszDesktop", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "fInherit", - "type": "BOOL" - }, - { - "name": "dwDesiredAccess", - "type": "ACCESS_MASK" - } - ], - "OpenInputDesktop": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "fInherit", - "type": "BOOL" - }, - { - "name": "dwDesiredAccess", - "type": "ACCESS_MASK" - } - ], - "EnumDesktopsA": [ - { - "name": "hwinsta", - "type": "HWINSTA" - }, - { - "name": "lpEnumFunc", - "type": "DESKTOPENUMPROCA" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumDesktopsW": [ - { - "name": "hwinsta", - "type": "HWINSTA" - }, - { - "name": "lpEnumFunc", - "type": "DESKTOPENUMPROCW" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumDesktopWindows": [ - { - "name": "hDesktop", - "type": "HDESK" - }, - { - "name": "lpfn", - "type": "WNDENUMPROC" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "SwitchDesktop": [ - { - "name": "hDesktop", - "type": "HDESK" - } - ], - "SetThreadDesktop": [ - { - "name": "hDesktop", - "type": "HDESK" - } - ], - "CloseDesktop": [ - { - "name": "hDesktop", - "type": "HDESK" - } - ], - "GetThreadDesktop": [ - { - "name": "dwThreadId", - "type": "DWORD" - } - ], - "CreateWindowStationA": [ - { - "name": "lpwinsta", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "ACCESS_MASK" - }, - { - "name": "lpsa", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "CreateWindowStationW": [ - { - "name": "lpwinsta", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwDesiredAccess", - "type": "ACCESS_MASK" - }, - { - "name": "lpsa", - "type": "LPSECURITY_ATTRIBUTES" - } - ], - "OpenWindowStationA": [ - { - "name": "lpszWinSta", - "type": "LPCSTR" - }, - { - "name": "fInherit", - "type": "BOOL" - }, - { - "name": "dwDesiredAccess", - "type": "ACCESS_MASK" - } - ], - "OpenWindowStationW": [ - { - "name": "lpszWinSta", - "type": "LPCWSTR" - }, - { - "name": "fInherit", - "type": "BOOL" - }, - { - "name": "dwDesiredAccess", - "type": "ACCESS_MASK" - } - ], - "EnumWindowStationsA": [ - { - "name": "lpEnumFunc", - "type": "WINSTAENUMPROCA" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumWindowStationsW": [ - { - "name": "lpEnumFunc", - "type": "WINSTAENUMPROCW" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "CloseWindowStation": [ - { - "name": "hWinSta", - "type": "HWINSTA" - } - ], - "SetProcessWindowStation": [ - { - "name": "hWinSta", - "type": "HWINSTA" - } - ], - "GetProcessWindowStation": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetUserObjectSecurity": [ - { - "name": "hObj", - "type": "HANDLE" - }, - { - "name": "pSIRequested", - "type": "PSECURITY_INFORMATION" - }, - { - "name": "pSID", - "type": "PSECURITY_DESCRIPTOR" - } - ], - "GetUserObjectSecurity": [ - { - "name": "hObj", - "type": "HANDLE" - }, - { - "name": "pSIRequested", - "type": "PSECURITY_INFORMATION" - }, - { - "name": "pSID", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "nLength", - "type": "DWORD" - }, - { - "name": "lpnLengthNeeded", - "type": "LPDWORD" - } - ], - "GetUserObjectInformationA": [ - { - "name": "hObj", - "type": "HANDLE" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "pvInfo", - "type": "PVOID" - }, - { - "name": "nLength", - "type": "DWORD" - }, - { - "name": "lpnLengthNeeded", - "type": "LPDWORD" - } - ], - "GetUserObjectInformationW": [ - { - "name": "hObj", - "type": "HANDLE" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "pvInfo", - "type": "PVOID" - }, - { - "name": "nLength", - "type": "DWORD" - }, - { - "name": "lpnLengthNeeded", - "type": "LPDWORD" - } - ], - "SetUserObjectInformationA": [ - { - "name": "hObj", - "type": "HANDLE" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "pvInfo", - "type": "PVOID" - }, - { - "name": "nLength", - "type": "DWORD" - } - ], - "SetUserObjectInformationW": [ - { - "name": "hObj", - "type": "HANDLE" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "pvInfo", - "type": "PVOID" - }, - { - "name": "nLength", - "type": "DWORD" - } - ], - "IsHungAppWindow": [ - { - "name": "hwnd", - "type": "HWND" - } - ], - "DisableProcessWindowsGhosting": [ - { - "name": "VOID", - "type": "void" - } - ], - "RegisterWindowMessageA": [ - { - "name": "lpString", - "type": "LPCSTR" - } - ], - "RegisterWindowMessageW": [ - { - "name": "lpString", - "type": "LPCWSTR" - } - ], - "TrackMouseEvent": [ - { - "name": "lpEventTrack", - "type": "LPTRACKMOUSEEVENT" - } - ], - "DrawEdge": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "qrc", - "type": "LPRECT" - }, - { - "name": "edge", - "type": "UINT" - }, - { - "name": "grfFlags", - "type": "UINT" - } - ], - "DrawFrameControl": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "LPRECT" - }, - { - "name": "VOID", - "type": "UINT" - }, - { - "name": "VOID", - "type": "UINT" - } - ], - "DrawCaption": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "RECT" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "DrawAnimatedRects": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "idAni", - "type": "int" - }, - { - "name": "lprcFrom", - "type": "RECT" - }, - { - "name": "lprcTo", - "type": "RECT" - } - ], - "GetMessageA": [ - { - "name": "lpMsg", - "type": "LPMSG" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsgFilterMin", - "type": "UINT" - }, - { - "name": "wMsgFilterMax", - "type": "UINT" - } - ], - "GetMessageW": [ - { - "name": "lpMsg", - "type": "LPMSG" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsgFilterMin", - "type": "UINT" - }, - { - "name": "wMsgFilterMax", - "type": "UINT" - } - ], - "TranslateMessage": [ - { - "name": "lpMsg", - "type": "MSG" - } - ], - "DispatchMessageA": [ - { - "name": "lpMsg", - "type": "MSG" - } - ], - "DispatchMessageW": [ - { - "name": "lpMsg", - "type": "MSG" - } - ], - "PeekMessageA": [ - { - "name": "lpMsg", - "type": "LPMSG" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsgFilterMin", - "type": "UINT" - }, - { - "name": "wMsgFilterMax", - "type": "UINT" - }, - { - "name": "wRemoveMsg", - "type": "UINT" - } - ], - "PeekMessageW": [ - { - "name": "lpMsg", - "type": "LPMSG" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wMsgFilterMin", - "type": "UINT" - }, - { - "name": "wMsgFilterMax", - "type": "UINT" - }, - { - "name": "wRemoveMsg", - "type": "UINT" - } - ], - "RegisterHotKey": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "id", - "type": "int" - }, - { - "name": "fsModifiers", - "type": "UINT" - }, - { - "name": "vk", - "type": "UINT" - } - ], - "UnregisterHotKey": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "id", - "type": "int" - } - ], - "ExitWindowsEx": [ - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "dwReason", - "type": "DWORD" - } - ], - "SwapMouseButton": [ - { - "name": "fSwap", - "type": "BOOL" - } - ], - "GetMessagePos": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetMessageTime": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetMessageExtraInfo": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetUnpredictedMessagePos": [ - { - "name": "VOID", - "type": "void" - } - ], - "IsWow64Message": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetMessageExtraInfo": [ - { - "name": "lParam", - "type": "LPARAM" - } - ], - "SendMessageA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "SendMessageW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "SendMessageTimeoutA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "fuFlags", - "type": "UINT" - }, - { - "name": "uTimeout", - "type": "UINT" - }, - { - "name": "lpdwResult", - "type": "PDWORD_PTR" - } - ], - "SendMessageTimeoutW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "fuFlags", - "type": "UINT" - }, - { - "name": "uTimeout", - "type": "UINT" - }, - { - "name": "lpdwResult", - "type": "PDWORD_PTR" - } - ], - "SendNotifyMessageA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "SendNotifyMessageW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "SendMessageCallbackA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "lpResultCallBack", - "type": "SENDASYNCPROC" - }, - { - "name": "dwData", - "type": "ULONG_PTR" - } - ], - "SendMessageCallbackW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "lpResultCallBack", - "type": "SENDASYNCPROC" - }, - { - "name": "dwData", - "type": "ULONG_PTR" - } - ], - "BroadcastSystemMessageExA": [ - { - "name": "flags", - "type": "DWORD" - }, - { - "name": "lpInfo", - "type": "LPDWORD" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "pbsmInfo", - "type": "PBSMINFO" - } - ], - "BroadcastSystemMessageExW": [ - { - "name": "flags", - "type": "DWORD" - }, - { - "name": "lpInfo", - "type": "LPDWORD" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "pbsmInfo", - "type": "PBSMINFO" - } - ], - "BroadcastSystemMessageW": [ - { - "name": "flags", - "type": "DWORD" - }, - { - "name": "lpInfo", - "type": "LPDWORD" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "RegisterDeviceNotificationA": [ - { - "name": "hRecipient", - "type": "HANDLE" - }, - { - "name": "NotificationFilter", - "type": "LPVOID" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "RegisterDeviceNotificationW": [ - { - "name": "hRecipient", - "type": "HANDLE" - }, - { - "name": "NotificationFilter", - "type": "LPVOID" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "UnregisterDeviceNotification": [ - { - "name": "Handle", - "type": "HDEVNOTIFY" - } - ], - "RegisterPowerSettingNotification": [ - { - "name": "hRecipient", - "type": "HANDLE" - }, - { - "name": "PowerSettingGuid", - "type": "LPCGUID" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "UnregisterPowerSettingNotification": [ - { - "name": "Handle", - "type": "HPOWERNOTIFY" - } - ], - "RegisterSuspendResumeNotification": [ - { - "name": "hRecipient", - "type": "HANDLE" - }, - { - "name": "Flags", - "type": "DWORD" - } - ], - "UnregisterSuspendResumeNotification": [ - { - "name": "Handle", - "type": "HPOWERNOTIFY" - } - ], - "PostMessageA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "PostMessageW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "PostThreadMessageA": [ - { - "name": "idThread", - "type": "DWORD" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "PostThreadMessageW": [ - { - "name": "idThread", - "type": "DWORD" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "AttachThreadInput": [ - { - "name": "idAttach", - "type": "DWORD" - }, - { - "name": "idAttachTo", - "type": "DWORD" - }, - { - "name": "fAttach", - "type": "BOOL" - } - ], - "ReplyMessage": [ - { - "name": "lResult", - "type": "LRESULT" - } - ], - "WaitMessage": [ - { - "name": "VOID", - "type": "void" - } - ], - "WaitForInputIdle": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - } - ], - "DefWindowProcA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "DefWindowProcW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "PostQuitMessage": [ - { - "name": "nExitCode", - "type": "int" - } - ], - "CallWindowProcA": [ - { - "name": "lpPrevWndFunc", - "type": "WNDPROC" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "CallWindowProcW": [ - { - "name": "lpPrevWndFunc", - "type": "WNDPROC" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "InSendMessage": [ - { - "name": "VOID", - "type": "void" - } - ], - "InSendMessageEx": [ - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "GetDoubleClickTime": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetDoubleClickTime": [ - { - "name": "VOID", - "type": "UINT" - } - ], - "RegisterClassA": [ - { - "name": "lpWndClass", - "type": "WNDCLASSA" - } - ], - "RegisterClassW": [ - { - "name": "lpWndClass", - "type": "WNDCLASSW" - } - ], - "UnregisterClassA": [ - { - "name": "lpClassName", - "type": "LPCSTR" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - } - ], - "UnregisterClassW": [ - { - "name": "lpClassName", - "type": "LPCWSTR" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - } - ], - "GetClassInfoA": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpClassName", - "type": "LPCSTR" - }, - { - "name": "lpWndClass", - "type": "LPWNDCLASSA" - } - ], - "GetClassInfoW": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpClassName", - "type": "LPCWSTR" - }, - { - "name": "lpWndClass", - "type": "LPWNDCLASSW" - } - ], - "RegisterClassExA": [ - { - "name": "VOID", - "type": "WNDCLASSEXA" - } - ], - "RegisterClassExW": [ - { - "name": "VOID", - "type": "WNDCLASSEXW" - } - ], - "GetClassInfoExA": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpszClass", - "type": "LPCSTR" - }, - { - "name": "lpwcx", - "type": "LPWNDCLASSEXA" - } - ], - "GetClassInfoExW": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpszClass", - "type": "LPCWSTR" - }, - { - "name": "lpwcx", - "type": "LPWNDCLASSEXW" - } - ], - "CreateWindowExA": [ - { - "name": "dwExStyle", - "type": "DWORD" - }, - { - "name": "lpClassName", - "type": "LPCSTR" - }, - { - "name": "lpWindowName", - "type": "LPCSTR" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "X", - "type": "int" - }, - { - "name": "Y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpParam", - "type": "LPVOID" - } - ], - "CreateWindowExW": [ - { - "name": "dwExStyle", - "type": "DWORD" - }, - { - "name": "lpClassName", - "type": "LPCWSTR" - }, - { - "name": "lpWindowName", - "type": "LPCWSTR" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "X", - "type": "int" - }, - { - "name": "Y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpParam", - "type": "LPVOID" - } - ], - "IsWindow": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "IsMenu": [ - { - "name": "hMenu", - "type": "HMENU" - } - ], - "IsChild": [ - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "hWnd", - "type": "HWND" - } - ], - "DestroyWindow": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "ShowWindow": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nCmdShow", - "type": "int" - } - ], - "AnimateWindow": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "dwTime", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UpdateLayeredWindow": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hdcDst", - "type": "HDC" - }, - { - "name": "pptDst", - "type": "POINT" - }, - { - "name": "psize", - "type": "SIZE" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "pptSrc", - "type": "POINT" - }, - { - "name": "crKey", - "type": "COLORREF" - }, - { - "name": "pblend", - "type": "BLENDFUNCTION" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetLayeredWindowAttributes": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pcrKey", - "type": "COLORREF" - }, - { - "name": "pbAlpha", - "type": "BYTE" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "PrintWindow": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "hdcBlt", - "type": "HDC" - }, - { - "name": "nFlags", - "type": "UINT" - } - ], - "SetLayeredWindowAttributes": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "crKey", - "type": "COLORREF" - }, - { - "name": "bAlpha", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "ShowWindowAsync": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nCmdShow", - "type": "int" - } - ], - "FlashWindow": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "bInvert", - "type": "BOOL" - } - ], - "FlashWindowEx": [ - { - "name": "pfwi", - "type": "PFLASHWINFO" - } - ], - "ShowOwnedPopups": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "fShow", - "type": "BOOL" - } - ], - "OpenIcon": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "CloseWindow": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "MoveWindow": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "X", - "type": "int" - }, - { - "name": "Y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "bRepaint", - "type": "BOOL" - } - ], - "SetWindowPos": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hWndInsertAfter", - "type": "HWND" - }, - { - "name": "X", - "type": "int" - }, - { - "name": "Y", - "type": "int" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "GetWindowPlacement": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpwndpl", - "type": "WINDOWPLACEMENT" - } - ], - "SetWindowPlacement": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpwndpl", - "type": "WINDOWPLACEMENT" - } - ], - "GetWindowDisplayAffinity": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "pdwAffinity", - "type": "DWORD" - } - ], - "SetWindowDisplayAffinity": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "dwAffinity", - "type": "DWORD" - } - ], - "BeginDeferWindowPos": [ - { - "name": "nNumWindows", - "type": "int" - } - ], - "DeferWindowPos": [ - { - "name": "hWinPosInfo", - "type": "HDWP" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hWndInsertAfter", - "type": "HWND" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "EndDeferWindowPos": [ - { - "name": "hWinPosInfo", - "type": "HDWP" - } - ], - "IsWindowVisible": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "IsIconic": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "AnyPopup": [ - { - "name": "VOID", - "type": "void" - } - ], - "BringWindowToTop": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "IsZoomed": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "CreateDialogParamA": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpTemplateName", - "type": "LPCSTR" - }, - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "lpDialogFunc", - "type": "DLGPROC" - }, - { - "name": "dwInitParam", - "type": "LPARAM" - } - ], - "CreateDialogParamW": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpTemplateName", - "type": "LPCWSTR" - }, - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "lpDialogFunc", - "type": "DLGPROC" - }, - { - "name": "dwInitParam", - "type": "LPARAM" - } - ], - "CreateDialogIndirectParamA": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpTemplate", - "type": "LPCDLGTEMPLATEA" - }, - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "lpDialogFunc", - "type": "DLGPROC" - }, - { - "name": "dwInitParam", - "type": "LPARAM" - } - ], - "CreateDialogIndirectParamW": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpTemplate", - "type": "LPCDLGTEMPLATEW" - }, - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "lpDialogFunc", - "type": "DLGPROC" - }, - { - "name": "dwInitParam", - "type": "LPARAM" - } - ], - "DialogBoxParamA": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpTemplateName", - "type": "LPCSTR" - }, - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "lpDialogFunc", - "type": "DLGPROC" - }, - { - "name": "dwInitParam", - "type": "LPARAM" - } - ], - "DialogBoxParamW": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpTemplateName", - "type": "LPCWSTR" - }, - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "lpDialogFunc", - "type": "DLGPROC" - }, - { - "name": "dwInitParam", - "type": "LPARAM" - } - ], - "DialogBoxIndirectParamA": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "hDialogTemplate", - "type": "LPCDLGTEMPLATEA" - }, - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "lpDialogFunc", - "type": "DLGPROC" - }, - { - "name": "dwInitParam", - "type": "LPARAM" - } - ], - "DialogBoxIndirectParamW": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "hDialogTemplate", - "type": "LPCDLGTEMPLATEW" - }, - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "lpDialogFunc", - "type": "DLGPROC" - }, - { - "name": "dwInitParam", - "type": "LPARAM" - } - ], - "EndDialog": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nResult", - "type": "INT_PTR" - } - ], - "GetDlgItem": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nIDDlgItem", - "type": "int" - } - ], - "SetDlgItemInt": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nIDDlgItem", - "type": "int" - }, - { - "name": "uValue", - "type": "UINT" - }, - { - "name": "bSigned", - "type": "BOOL" - } - ], - "GetDlgItemInt": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nIDDlgItem", - "type": "int" - }, - { - "name": "lpTranslated", - "type": "BOOL" - }, - { - "name": "bSigned", - "type": "BOOL" - } - ], - "SetDlgItemTextA": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nIDDlgItem", - "type": "int" - }, - { - "name": "lpString", - "type": "LPCSTR" - } - ], - "SetDlgItemTextW": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nIDDlgItem", - "type": "int" - }, - { - "name": "lpString", - "type": "LPCWSTR" - } - ], - "GetDlgItemTextA": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nIDDlgItem", - "type": "int" - }, - { - "name": "lpString", - "type": "LPSTR" - }, - { - "name": "cchMax", - "type": "int" - } - ], - "GetDlgItemTextW": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nIDDlgItem", - "type": "int" - }, - { - "name": "lpString", - "type": "LPWSTR" - }, - { - "name": "cchMax", - "type": "int" - } - ], - "CheckDlgButton": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nIDButton", - "type": "int" - }, - { - "name": "uCheck", - "type": "UINT" - } - ], - "CheckRadioButton": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nIDFirstButton", - "type": "int" - }, - { - "name": "nIDLastButton", - "type": "int" - }, - { - "name": "nIDCheckButton", - "type": "int" - } - ], - "IsDlgButtonChecked": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nIDButton", - "type": "int" - } - ], - "SendDlgItemMessageA": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nIDDlgItem", - "type": "int" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "SendDlgItemMessageW": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "nIDDlgItem", - "type": "int" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "GetNextDlgGroupItem": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "hCtl", - "type": "HWND" - }, - { - "name": "bPrevious", - "type": "BOOL" - } - ], - "GetNextDlgTabItem": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "hCtl", - "type": "HWND" - }, - { - "name": "bPrevious", - "type": "BOOL" - } - ], - "GetDlgCtrlID": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "GetDialogBaseUnits": [ - { - "name": "VOID", - "type": "void" - } - ], - "DefDlgProcW": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "Msg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "GetDialogControlDpiChangeBehavior": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "SetDialogDpiChangeBehavior": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "mask", - "type": "DIALOG_DPI_CHANGE_BEHAVIORS" - }, - { - "name": "values", - "type": "DIALOG_DPI_CHANGE_BEHAVIORS" - } - ], - "GetDialogDpiChangeBehavior": [ - { - "name": "hDlg", - "type": "HWND" - } - ], - "CallMsgFilterA": [ - { - "name": "lpMsg", - "type": "LPMSG" - }, - { - "name": "nCode", - "type": "int" - } - ], - "CallMsgFilterW": [ - { - "name": "lpMsg", - "type": "LPMSG" - }, - { - "name": "nCode", - "type": "int" - } - ], - "OpenClipboard": [ - { - "name": "hWndNewOwner", - "type": "HWND" - } - ], - "CloseClipboard": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetClipboardSequenceNumber": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetClipboardOwner": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetClipboardViewer": [ - { - "name": "hWndNewViewer", - "type": "HWND" - } - ], - "GetClipboardViewer": [ - { - "name": "VOID", - "type": "void" - } - ], - "ChangeClipboardChain": [ - { - "name": "hWndRemove", - "type": "HWND" - }, - { - "name": "hWndNewNext", - "type": "HWND" - } - ], - "SetClipboardData": [ - { - "name": "uFormat", - "type": "UINT" - }, - { - "name": "hMem", - "type": "HANDLE" - } - ], - "GetClipboardData": [ - { - "name": "uFormat", - "type": "UINT" - } - ], - "RegisterClipboardFormatA": [ - { - "name": "lpszFormat", - "type": "LPCSTR" - } - ], - "RegisterClipboardFormatW": [ - { - "name": "lpszFormat", - "type": "LPCWSTR" - } - ], - "CountClipboardFormats": [ - { - "name": "VOID", - "type": "void" - } - ], - "EnumClipboardFormats": [ - { - "name": "format", - "type": "UINT" - } - ], - "GetClipboardFormatNameA": [ - { - "name": "format", - "type": "UINT" - }, - { - "name": "lpszFormatName", - "type": "LPSTR" - }, - { - "name": "cchMaxCount", - "type": "int" - } - ], - "GetClipboardFormatNameW": [ - { - "name": "format", - "type": "UINT" - }, - { - "name": "lpszFormatName", - "type": "LPWSTR" - }, - { - "name": "cchMaxCount", - "type": "int" - } - ], - "EmptyClipboard": [ - { - "name": "VOID", - "type": "void" - } - ], - "IsClipboardFormatAvailable": [ - { - "name": "format", - "type": "UINT" - } - ], - "GetPriorityClipboardFormat": [ - { - "name": "paFormatPriorityList", - "type": "UINT" - }, - { - "name": "cFormats", - "type": "int" - } - ], - "GetOpenClipboardWindow": [ - { - "name": "VOID", - "type": "void" - } - ], - "AddClipboardFormatListener": [ - { - "name": "hwnd", - "type": "HWND" - } - ], - "RemoveClipboardFormatListener": [ - { - "name": "hwnd", - "type": "HWND" - } - ], - "GetUpdatedClipboardFormats": [ - { - "name": "lpuiFormats", - "type": "PUINT" - }, - { - "name": "cFormats", - "type": "UINT" - }, - { - "name": "pcFormatsOut", - "type": "PUINT" - } - ], - "CharToOemA": [ - { - "name": "pSrc", - "type": "LPCSTR" - }, - { - "name": "pDst", - "type": "LPSTR" - } - ], - "CharToOemW": [ - { - "name": "pSrc", - "type": "LPCWSTR" - }, - { - "name": "pDst", - "type": "LPSTR" - } - ], - "OemToCharA": [ - { - "name": "pSrc", - "type": "LPCSTR" - }, - { - "name": "pDst", - "type": "LPSTR" - } - ], - "OemToCharW": [ - { - "name": "pSrc", - "type": "LPCSTR" - }, - { - "name": "pDst", - "type": "LPWSTR" - } - ], - "CharToOemBuffA": [ - { - "name": "lpszSrc", - "type": "LPCSTR" - }, - { - "name": "lpszDst", - "type": "LPSTR" - }, - { - "name": "cchDstLength", - "type": "DWORD" - } - ], - "CharToOemBuffW": [ - { - "name": "lpszSrc", - "type": "LPCWSTR" - }, - { - "name": "lpszDst", - "type": "LPSTR" - }, - { - "name": "cchDstLength", - "type": "DWORD" - } - ], - "OemToCharBuffA": [ - { - "name": "lpszSrc", - "type": "LPCSTR" - }, - { - "name": "lpszDst", - "type": "LPSTR" - }, - { - "name": "cchDstLength", - "type": "DWORD" - } - ], - "OemToCharBuffW": [ - { - "name": "lpszSrc", - "type": "LPCSTR" - }, - { - "name": "lpszDst", - "type": "LPWSTR" - }, - { - "name": "cchDstLength", - "type": "DWORD" - } - ], - "CharUpperA": [ - { - "name": "lpsz", - "type": "LPSTR" - } - ], - "CharUpperW": [ - { - "name": "lpsz", - "type": "LPWSTR" - } - ], - "CharUpperBuffA": [ - { - "name": "lpsz", - "type": "LPSTR" - }, - { - "name": "cchLength", - "type": "DWORD" - } - ], - "CharUpperBuffW": [ - { - "name": "lpsz", - "type": "LPWSTR" - }, - { - "name": "cchLength", - "type": "DWORD" - } - ], - "CharLowerA": [ - { - "name": "lpsz", - "type": "LPSTR" - } - ], - "CharLowerW": [ - { - "name": "lpsz", - "type": "LPWSTR" - } - ], - "CharLowerBuffA": [ - { - "name": "lpsz", - "type": "LPSTR" - }, - { - "name": "cchLength", - "type": "DWORD" - } - ], - "CharLowerBuffW": [ - { - "name": "lpsz", - "type": "LPWSTR" - }, - { - "name": "cchLength", - "type": "DWORD" - } - ], - "CharNextA": [ - { - "name": "lpsz", - "type": "LPCSTR" - } - ], - "CharNextW": [ - { - "name": "lpsz", - "type": "LPCWSTR" - } - ], - "CharPrevA": [ - { - "name": "lpszStart", - "type": "LPCSTR" - }, - { - "name": "lpszCurrent", - "type": "LPCSTR" - } - ], - "CharPrevW": [ - { - "name": "lpszStart", - "type": "LPCWSTR" - }, - { - "name": "lpszCurrent", - "type": "LPCWSTR" - } - ], - "CharNextExA": [ - { - "name": "CodePage", - "type": "WORD" - }, - { - "name": "lpCurrentChar", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CharPrevExA": [ - { - "name": "CodePage", - "type": "WORD" - }, - { - "name": "lpStart", - "type": "LPCSTR" - }, - { - "name": "lpCurrentChar", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "IsCharAlphaA": [ - { - "name": "ch", - "type": "CHAR" - } - ], - "IsCharAlphaW": [ - { - "name": "ch", - "type": "WCHAR" - } - ], - "IsCharAlphaNumericA": [ - { - "name": "ch", - "type": "CHAR" - } - ], - "IsCharAlphaNumericW": [ - { - "name": "ch", - "type": "WCHAR" - } - ], - "IsCharUpperA": [ - { - "name": "ch", - "type": "CHAR" - } - ], - "IsCharUpperW": [ - { - "name": "ch", - "type": "WCHAR" - } - ], - "IsCharLowerA": [ - { - "name": "ch", - "type": "CHAR" - } - ], - "IsCharLowerW": [ - { - "name": "ch", - "type": "WCHAR" - } - ], - "SetFocus": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "GetActiveWindow": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetFocus": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetKBCodePage": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetKeyState": [ - { - "name": "nVirtKey", - "type": "int" - } - ], - "GetAsyncKeyState": [ - { - "name": "vKey", - "type": "int" - } - ], - "GetKeyboardState": [ - { - "name": "lpKeyState", - "type": "PBYTE" - } - ], - "SetKeyboardState": [ - { - "name": "lpKeyState", - "type": "LPBYTE" - } - ], - "GetKeyNameTextA": [ - { - "name": "lParam", - "type": "LONG" - }, - { - "name": "lpString", - "type": "LPSTR" - }, - { - "name": "cchSize", - "type": "int" - } - ], - "GetKeyNameTextW": [ - { - "name": "lParam", - "type": "LONG" - }, - { - "name": "lpString", - "type": "LPWSTR" - }, - { - "name": "cchSize", - "type": "int" - } - ], - "GetKeyboardType": [ - { - "name": "nTypeFlag", - "type": "int" - } - ], - "ToAscii": [ - { - "name": "uVirtKey", - "type": "UINT" - }, - { - "name": "uScanCode", - "type": "UINT" - }, - { - "name": "lpKeyState", - "type": "BYTE" - }, - { - "name": "lpChar", - "type": "LPWORD" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "ToAsciiEx": [ - { - "name": "uVirtKey", - "type": "UINT" - }, - { - "name": "uScanCode", - "type": "UINT" - }, - { - "name": "lpKeyState", - "type": "BYTE" - }, - { - "name": "lpChar", - "type": "LPWORD" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "dwhkl", - "type": "HKL" - } - ], - "ToUnicode": [ - { - "name": "wVirtKey", - "type": "UINT" - }, - { - "name": "wScanCode", - "type": "UINT" - }, - { - "name": "lpKeyState", - "type": "BYTE" - }, - { - "name": "pwszBuff", - "type": "LPWSTR" - }, - { - "name": "cchBuff", - "type": "int" - }, - { - "name": "wFlags", - "type": "UINT" - } - ], - "OemKeyScan": [ - { - "name": "wOemChar", - "type": "WORD" - } - ], - "VkKeyScanA": [ - { - "name": "ch", - "type": "CHAR" - } - ], - "VkKeyScanW": [ - { - "name": "ch", - "type": "WCHAR" - } - ], - "VkKeyScanExA": [ - { - "name": "ch", - "type": "CHAR" - }, - { - "name": "dwhkl", - "type": "HKL" - } - ], - "VkKeyScanExW": [ - { - "name": "ch", - "type": "WCHAR" - }, - { - "name": "dwhkl", - "type": "HKL" - } - ], - "keybd_event": [ - { - "name": "bVk", - "type": "BYTE" - }, - { - "name": "bScan", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwExtraInfo", - "type": "ULONG_PTR" - } - ], - "mouse_event": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dx", - "type": "DWORD" - }, - { - "name": "dy", - "type": "DWORD" - }, - { - "name": "dwData", - "type": "DWORD" - }, - { - "name": "dwExtraInfo", - "type": "ULONG_PTR" - } - ], - "SendInput": [ - { - "name": "cInputs", - "type": "UINT" - }, - { - "name": "pInputs", - "type": "LPINPUT" - }, - { - "name": "cbSize", - "type": "int" - } - ], - "GetTouchInputInfo": [ - { - "name": "hTouchInput", - "type": "HTOUCHINPUT" - }, - { - "name": "cInputs", - "type": "UINT" - }, - { - "name": "pInputs", - "type": "PTOUCHINPUT" - }, - { - "name": "cbSize", - "type": "int" - } - ], - "CloseTouchInputHandle": [ - { - "name": "hTouchInput", - "type": "HTOUCHINPUT" - } - ], - "RegisterTouchWindow": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "ulFlags", - "type": "ULONG" - } - ], - "UnregisterTouchWindow": [ - { - "name": "hwnd", - "type": "HWND" - } - ], - "IsTouchWindow": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pulFlags", - "type": "PULONG" - } - ], - "InitializeTouchInjection": [ - { - "name": "maxCount", - "type": "UINT32" - }, - { - "name": "dwMode", - "type": "DWORD" - } - ], - "InjectTouchInput": [ - { - "name": "count", - "type": "UINT32" - }, - { - "name": "contacts", - "type": "POINTER_TOUCH_INFO" - } - ], - "GetPointerType": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "pointerType", - "type": "POINTER_INPUT_TYPE" - } - ], - "GetPointerCursorId": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "cursorId", - "type": "UINT32" - } - ], - "GetPointerInfo": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "pointerInfo", - "type": "POINTER_INFO" - } - ], - "GetPointerInfoHistory": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "entriesCount", - "type": "UINT32" - }, - { - "name": "pointerInfo", - "type": "POINTER_INFO" - } - ], - "GetPointerFrameInfo": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "pointerCount", - "type": "UINT32" - }, - { - "name": "pointerInfo", - "type": "POINTER_INFO" - } - ], - "GetPointerFrameInfoHistory": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "entriesCount", - "type": "UINT32" - }, - { - "name": "pointerCount", - "type": "UINT32" - }, - { - "name": "pointerInfo", - "type": "POINTER_INFO" - } - ], - "GetPointerTouchInfo": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "touchInfo", - "type": "POINTER_TOUCH_INFO" - } - ], - "GetPointerTouchInfoHistory": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "entriesCount", - "type": "UINT32" - }, - { - "name": "touchInfo", - "type": "POINTER_TOUCH_INFO" - } - ], - "GetPointerFrameTouchInfo": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "pointerCount", - "type": "UINT32" - }, - { - "name": "touchInfo", - "type": "POINTER_TOUCH_INFO" - } - ], - "GetPointerFrameTouchInfoHistory": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "entriesCount", - "type": "UINT32" - }, - { - "name": "pointerCount", - "type": "UINT32" - }, - { - "name": "touchInfo", - "type": "POINTER_TOUCH_INFO" - } - ], - "GetPointerPenInfo": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "penInfo", - "type": "POINTER_PEN_INFO" - } - ], - "GetPointerPenInfoHistory": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "entriesCount", - "type": "UINT32" - }, - { - "name": "penInfo", - "type": "POINTER_PEN_INFO" - } - ], - "GetPointerFramePenInfo": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "pointerCount", - "type": "UINT32" - }, - { - "name": "penInfo", - "type": "POINTER_PEN_INFO" - } - ], - "GetPointerFramePenInfoHistory": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "entriesCount", - "type": "UINT32" - }, - { - "name": "pointerCount", - "type": "UINT32" - }, - { - "name": "penInfo", - "type": "POINTER_PEN_INFO" - } - ], - "SkipPointerFrameMessages": [ - { - "name": "pointerId", - "type": "UINT32" - } - ], - "RegisterPointerInputTarget": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pointerType", - "type": "POINTER_INPUT_TYPE" - } - ], - "UnregisterPointerInputTarget": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pointerType", - "type": "POINTER_INPUT_TYPE" - } - ], - "RegisterPointerInputTargetEx": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pointerType", - "type": "POINTER_INPUT_TYPE" - }, - { - "name": "fObserve", - "type": "BOOL" - } - ], - "UnregisterPointerInputTargetEx": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pointerType", - "type": "POINTER_INPUT_TYPE" - } - ], - "CreateSyntheticPointerDevice": [ - { - "name": "pointerType", - "type": "POINTER_INPUT_TYPE" - }, - { - "name": "maxCount", - "type": "ULONG" - }, - { - "name": "mode", - "type": "POINTER_FEEDBACK_MODE" - } - ], - "InjectSyntheticPointerInput": [ - { - "name": "device", - "type": "HSYNTHETICPOINTERDEVICE" - }, - { - "name": "pointerInfo", - "type": "POINTER_TYPE_INFO" - }, - { - "name": "count", - "type": "UINT32" - } - ], - "DestroySyntheticPointerDevice": [ - { - "name": "device", - "type": "HSYNTHETICPOINTERDEVICE" - } - ], - "EnableMouseInPointer": [ - { - "name": "fEnable", - "type": "BOOL" - } - ], - "IsMouseInPointerEnabled": [ - { - "name": "VOID", - "type": "void" - } - ], - "RegisterTouchHitTestingWindow": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "value", - "type": "ULONG" - } - ], - "EvaluateProximityToRect": [ - { - "name": "controlBoundingBox", - "type": "RECT" - }, - { - "name": "pHitTestingInput", - "type": "TOUCH_HIT_TESTING_INPUT" - }, - { - "name": "pProximityEval", - "type": "TOUCH_HIT_TESTING_PROXIMITY_EVALUATION" - } - ], - "EvaluateProximityToPolygon": [ - { - "name": "numVertices", - "type": "UINT32" - }, - { - "name": "controlPolygon", - "type": "POINT" - }, - { - "name": "pHitTestingInput", - "type": "TOUCH_HIT_TESTING_INPUT" - }, - { - "name": "pProximityEval", - "type": "TOUCH_HIT_TESTING_PROXIMITY_EVALUATION" - } - ], - "PackTouchHitTestingProximityEvaluation": [ - { - "name": "pHitTestingInput", - "type": "TOUCH_HIT_TESTING_INPUT" - }, - { - "name": "pProximityEval", - "type": "TOUCH_HIT_TESTING_PROXIMITY_EVALUATION" - } - ], - "GetWindowFeedbackSetting": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "feedback", - "type": "FEEDBACK_TYPE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pSize", - "type": "UINT32" - }, - { - "name": "config", - "type": "void" - } - ], - "SetWindowFeedbackSetting": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "feedback", - "type": "FEEDBACK_TYPE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "size", - "type": "UINT32" - }, - { - "name": "configuration", - "type": "void" - } - ], - "GetPointerInputTransform": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "historyCount", - "type": "UINT32" - }, - { - "name": "inputTransform", - "type": "INPUT_TRANSFORM" - } - ], - "GetLastInputInfo": [ - { - "name": "plii", - "type": "PLASTINPUTINFO" - } - ], - "MapVirtualKeyA": [ - { - "name": "uCode", - "type": "UINT" - }, - { - "name": "uMapType", - "type": "UINT" - } - ], - "MapVirtualKeyW": [ - { - "name": "uCode", - "type": "UINT" - }, - { - "name": "uMapType", - "type": "UINT" - } - ], - "MapVirtualKeyExA": [ - { - "name": "uCode", - "type": "UINT" - }, - { - "name": "uMapType", - "type": "UINT" - }, - { - "name": "dwhkl", - "type": "HKL" - } - ], - "MapVirtualKeyExW": [ - { - "name": "uCode", - "type": "UINT" - }, - { - "name": "uMapType", - "type": "UINT" - }, - { - "name": "dwhkl", - "type": "HKL" - } - ], - "GetInputState": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetQueueStatus": [ - { - "name": "flags", - "type": "UINT" - } - ], - "GetCapture": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetCapture": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "ReleaseCapture": [ - { - "name": "VOID", - "type": "void" - } - ], - "MsgWaitForMultipleObjects": [ - { - "name": "nCount", - "type": "DWORD" - }, - { - "name": "pHandles", - "type": "HANDLE" - }, - { - "name": "fWaitAll", - "type": "BOOL" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - }, - { - "name": "dwWakeMask", - "type": "DWORD" - } - ], - "MsgWaitForMultipleObjectsEx": [ - { - "name": "nCount", - "type": "DWORD" - }, - { - "name": "pHandles", - "type": "HANDLE" - }, - { - "name": "dwMilliseconds", - "type": "DWORD" - }, - { - "name": "dwWakeMask", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SetTimer": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIDEvent", - "type": "UINT_PTR" - }, - { - "name": "uElapse", - "type": "UINT" - }, - { - "name": "lpTimerFunc", - "type": "TIMERPROC" - } - ], - "SetCoalescableTimer": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIDEvent", - "type": "UINT_PTR" - }, - { - "name": "uElapse", - "type": "UINT" - }, - { - "name": "lpTimerFunc", - "type": "TIMERPROC" - }, - { - "name": "uToleranceDelay", - "type": "ULONG" - } - ], - "KillTimer": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "uIDEvent", - "type": "UINT_PTR" - } - ], - "IsWindowUnicode": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "EnableWindow": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "bEnable", - "type": "BOOL" - } - ], - "IsWindowEnabled": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "LoadAcceleratorsA": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpTableName", - "type": "LPCSTR" - } - ], - "LoadAcceleratorsW": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpTableName", - "type": "LPCWSTR" - } - ], - "CreateAcceleratorTableA": [ - { - "name": "paccel", - "type": "LPACCEL" - }, - { - "name": "cAccel", - "type": "int" - } - ], - "CreateAcceleratorTableW": [ - { - "name": "paccel", - "type": "LPACCEL" - }, - { - "name": "cAccel", - "type": "int" - } - ], - "DestroyAcceleratorTable": [ - { - "name": "hAccel", - "type": "HACCEL" - } - ], - "CopyAcceleratorTableA": [ - { - "name": "hAccelSrc", - "type": "HACCEL" - }, - { - "name": "lpAccelDst", - "type": "LPACCEL" - }, - { - "name": "cAccelEntries", - "type": "int" - } - ], - "CopyAcceleratorTableW": [ - { - "name": "hAccelSrc", - "type": "HACCEL" - }, - { - "name": "lpAccelDst", - "type": "LPACCEL" - }, - { - "name": "cAccelEntries", - "type": "int" - } - ], - "TranslateAcceleratorA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hAccTable", - "type": "HACCEL" - }, - { - "name": "lpMsg", - "type": "LPMSG" - } - ], - "TranslateAcceleratorW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hAccTable", - "type": "HACCEL" - }, - { - "name": "lpMsg", - "type": "LPMSG" - } - ], - "GetSystemMetrics": [ - { - "name": "nIndex", - "type": "int" - } - ], - "GetSystemMetricsForDpi": [ - { - "name": "nIndex", - "type": "int" - }, - { - "name": "dpi", - "type": "UINT" - } - ], - "LoadMenuA": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpMenuName", - "type": "LPCSTR" - } - ], - "LoadMenuW": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpMenuName", - "type": "LPCWSTR" - } - ], - "LoadMenuIndirectA": [ - { - "name": "lpMenuTemplate", - "type": "MENUTEMPLATEA" - } - ], - "LoadMenuIndirectW": [ - { - "name": "lpMenuTemplate", - "type": "MENUTEMPLATEW" - } - ], - "GetMenu": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "SetMenu": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hMenu", - "type": "HMENU" - } - ], - "HiliteMenuItem": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uIDHiliteItem", - "type": "UINT" - }, - { - "name": "uHilite", - "type": "UINT" - } - ], - "GetMenuStringA": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uIDItem", - "type": "UINT" - }, - { - "name": "lpString", - "type": "LPSTR" - }, - { - "name": "cchMax", - "type": "int" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "GetMenuStringW": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uIDItem", - "type": "UINT" - }, - { - "name": "lpString", - "type": "LPWSTR" - }, - { - "name": "cchMax", - "type": "int" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "GetMenuState": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uId", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "DrawMenuBar": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "GetSystemMenu": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "bRevert", - "type": "BOOL" - } - ], - "CreateMenu": [ - { - "name": "VOID", - "type": "void" - } - ], - "CreatePopupMenu": [ - { - "name": "VOID", - "type": "void" - } - ], - "DestroyMenu": [ - { - "name": "hMenu", - "type": "HMENU" - } - ], - "CheckMenuItem": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uIDCheckItem", - "type": "UINT" - }, - { - "name": "uCheck", - "type": "UINT" - } - ], - "EnableMenuItem": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uIDEnableItem", - "type": "UINT" - }, - { - "name": "uEnable", - "type": "UINT" - } - ], - "GetSubMenu": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "nPos", - "type": "int" - } - ], - "GetMenuItemID": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "nPos", - "type": "int" - } - ], - "GetMenuItemCount": [ - { - "name": "hMenu", - "type": "HMENU" - } - ], - "InsertMenuA": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uPosition", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "uIDNewItem", - "type": "UINT_PTR" - }, - { - "name": "lpNewItem", - "type": "LPCSTR" - } - ], - "InsertMenuW": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uPosition", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "uIDNewItem", - "type": "UINT_PTR" - }, - { - "name": "lpNewItem", - "type": "LPCWSTR" - } - ], - "AppendMenuA": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "uIDNewItem", - "type": "UINT_PTR" - }, - { - "name": "lpNewItem", - "type": "LPCSTR" - } - ], - "AppendMenuW": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "uIDNewItem", - "type": "UINT_PTR" - }, - { - "name": "lpNewItem", - "type": "LPCWSTR" - } - ], - "ModifyMenuA": [ - { - "name": "hMnu", - "type": "HMENU" - }, - { - "name": "uPosition", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "uIDNewItem", - "type": "UINT_PTR" - }, - { - "name": "lpNewItem", - "type": "LPCSTR" - } - ], - "ModifyMenuW": [ - { - "name": "hMnu", - "type": "HMENU" - }, - { - "name": "uPosition", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "uIDNewItem", - "type": "UINT_PTR" - }, - { - "name": "lpNewItem", - "type": "LPCWSTR" - } - ], - "RemoveMenu": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uPosition", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "DeleteMenu": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uPosition", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "SetMenuItemBitmaps": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uPosition", - "type": "UINT" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "hBitmapUnchecked", - "type": "HBITMAP" - }, - { - "name": "hBitmapChecked", - "type": "HBITMAP" - } - ], - "GetMenuCheckMarkDimensions": [ - { - "name": "VOID", - "type": "void" - } - ], - "TrackPopupMenu": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "nReserved", - "type": "int" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "prcRect", - "type": "RECT" - } - ], - "TrackPopupMenuEx": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uFlags", - "type": "UINT" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "lptpm", - "type": "LPTPMPARAMS" - } - ], - "CalculatePopupWindowPosition": [ - { - "name": "anchorPoint", - "type": "POINT" - }, - { - "name": "windowSize", - "type": "SIZE" - }, - { - "name": "flags", - "type": "UINT" - }, - { - "name": "excludeRect", - "type": "RECT" - }, - { - "name": "popupWindowPosition", - "type": "RECT" - } - ], - "GetMenuInfo": [ - { - "name": "VOID", - "type": "HMENU" - }, - { - "name": "VOID", - "type": "LPMENUINFO" - } - ], - "SetMenuInfo": [ - { - "name": "VOID", - "type": "HMENU" - }, - { - "name": "VOID", - "type": "LPCMENUINFO" - } - ], - "EndMenu": [ - { - "name": "VOID", - "type": "void" - } - ], - "InsertMenuItemA": [ - { - "name": "hmenu", - "type": "HMENU" - }, - { - "name": "item", - "type": "UINT" - }, - { - "name": "fByPosition", - "type": "BOOL" - }, - { - "name": "lpmi", - "type": "LPCMENUITEMINFOA" - } - ], - "InsertMenuItemW": [ - { - "name": "hmenu", - "type": "HMENU" - }, - { - "name": "item", - "type": "UINT" - }, - { - "name": "fByPosition", - "type": "BOOL" - }, - { - "name": "lpmi", - "type": "LPCMENUITEMINFOW" - } - ], - "GetMenuItemInfoA": [ - { - "name": "hmenu", - "type": "HMENU" - }, - { - "name": "item", - "type": "UINT" - }, - { - "name": "fByPosition", - "type": "BOOL" - }, - { - "name": "lpmii", - "type": "LPMENUITEMINFOA" - } - ], - "GetMenuItemInfoW": [ - { - "name": "hmenu", - "type": "HMENU" - }, - { - "name": "item", - "type": "UINT" - }, - { - "name": "fByPosition", - "type": "BOOL" - }, - { - "name": "lpmii", - "type": "LPMENUITEMINFOW" - } - ], - "SetMenuItemInfoA": [ - { - "name": "hmenu", - "type": "HMENU" - }, - { - "name": "item", - "type": "UINT" - }, - { - "name": "fByPositon", - "type": "BOOL" - }, - { - "name": "lpmii", - "type": "LPCMENUITEMINFOA" - } - ], - "SetMenuItemInfoW": [ - { - "name": "hmenu", - "type": "HMENU" - }, - { - "name": "item", - "type": "UINT" - }, - { - "name": "fByPositon", - "type": "BOOL" - }, - { - "name": "lpmii", - "type": "LPCMENUITEMINFOW" - } - ], - "GetMenuDefaultItem": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "fByPos", - "type": "UINT" - }, - { - "name": "gmdiFlags", - "type": "UINT" - } - ], - "SetMenuDefaultItem": [ - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uItem", - "type": "UINT" - }, - { - "name": "fByPos", - "type": "UINT" - } - ], - "GetMenuItemRect": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "uItem", - "type": "UINT" - }, - { - "name": "lprcItem", - "type": "LPRECT" - } - ], - "MenuItemFromPoint": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hMenu", - "type": "HMENU" - }, - { - "name": "ptScreen", - "type": "POINT" - } - ], - "DragDetect": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pt", - "type": "POINT" - } - ], - "DrawIcon": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "X", - "type": "int" - }, - { - "name": "Y", - "type": "int" - }, - { - "name": "hIcon", - "type": "HICON" - } - ], - "DrawTextA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpchText", - "type": "LPCSTR" - }, - { - "name": "cchText", - "type": "int" - }, - { - "name": "lprc", - "type": "LPRECT" - }, - { - "name": "format", - "type": "UINT" - } - ], - "DrawTextW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpchText", - "type": "LPCWSTR" - }, - { - "name": "cchText", - "type": "int" - }, - { - "name": "lprc", - "type": "LPRECT" - }, - { - "name": "format", - "type": "UINT" - } - ], - "DrawTextExA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpchText", - "type": "LPSTR" - }, - { - "name": "cchText", - "type": "int" - }, - { - "name": "lprc", - "type": "LPRECT" - }, - { - "name": "format", - "type": "UINT" - }, - { - "name": "lpdtp", - "type": "LPDRAWTEXTPARAMS" - } - ], - "DrawTextExW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpchText", - "type": "LPWSTR" - }, - { - "name": "cchText", - "type": "int" - }, - { - "name": "lprc", - "type": "LPRECT" - }, - { - "name": "format", - "type": "UINT" - }, - { - "name": "lpdtp", - "type": "LPDRAWTEXTPARAMS" - } - ], - "GrayStringA": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "hBrush", - "type": "HBRUSH" - }, - { - "name": "lpOutputFunc", - "type": "GRAYSTRINGPROC" - }, - { - "name": "lpData", - "type": "LPARAM" - }, - { - "name": "nCount", - "type": "int" - }, - { - "name": "X", - "type": "int" - }, - { - "name": "Y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - } - ], - "GrayStringW": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "hBrush", - "type": "HBRUSH" - }, - { - "name": "lpOutputFunc", - "type": "GRAYSTRINGPROC" - }, - { - "name": "lpData", - "type": "LPARAM" - }, - { - "name": "nCount", - "type": "int" - }, - { - "name": "X", - "type": "int" - }, - { - "name": "Y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - } - ], - "DrawStateA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hbrFore", - "type": "HBRUSH" - }, - { - "name": "qfnCallBack", - "type": "DRAWSTATEPROC" - }, - { - "name": "lData", - "type": "LPARAM" - }, - { - "name": "wData", - "type": "WPARAM" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "DrawStateW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hbrFore", - "type": "HBRUSH" - }, - { - "name": "qfnCallBack", - "type": "DRAWSTATEPROC" - }, - { - "name": "lData", - "type": "LPARAM" - }, - { - "name": "wData", - "type": "WPARAM" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "TabbedTextOutA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "chCount", - "type": "int" - }, - { - "name": "nTabPositions", - "type": "int" - }, - { - "name": "lpnTabStopPositions", - "type": "INT" - }, - { - "name": "nTabOrigin", - "type": "int" - } - ], - "TabbedTextOutW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "chCount", - "type": "int" - }, - { - "name": "nTabPositions", - "type": "int" - }, - { - "name": "lpnTabStopPositions", - "type": "INT" - }, - { - "name": "nTabOrigin", - "type": "int" - } - ], - "GetTabbedTextExtentA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "chCount", - "type": "int" - }, - { - "name": "nTabPositions", - "type": "int" - }, - { - "name": "lpnTabStopPositions", - "type": "INT" - } - ], - "GetTabbedTextExtentW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "chCount", - "type": "int" - }, - { - "name": "nTabPositions", - "type": "int" - }, - { - "name": "lpnTabStopPositions", - "type": "INT" - } - ], - "UpdateWindow": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "SetActiveWindow": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "GetForegroundWindow": [ - { - "name": "VOID", - "type": "void" - } - ], - "PaintDesktop": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SwitchToThisWindow": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "fUnknown", - "type": "BOOL" - } - ], - "SetForegroundWindow": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "AllowSetForegroundWindow": [ - { - "name": "dwProcessId", - "type": "DWORD" - } - ], - "LockSetForegroundWindow": [ - { - "name": "uLockCode", - "type": "UINT" - } - ], - "WindowFromDC": [ - { - "name": "hDC", - "type": "HDC" - } - ], - "GetDC": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "GetDCEx": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hrgnClip", - "type": "HRGN" - }, - { - "name": "flags", - "type": "DWORD" - } - ], - "GetWindowDC": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "ReleaseDC": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hDC", - "type": "HDC" - } - ], - "BeginPaint": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpPaint", - "type": "LPPAINTSTRUCT" - } - ], - "EndPaint": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpPaint", - "type": "PAINTSTRUCT" - } - ], - "GetUpdateRect": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpRect", - "type": "LPRECT" - }, - { - "name": "bErase", - "type": "BOOL" - } - ], - "GetUpdateRgn": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hRgn", - "type": "HRGN" - }, - { - "name": "bErase", - "type": "BOOL" - } - ], - "SetWindowRgn": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hRgn", - "type": "HRGN" - }, - { - "name": "bRedraw", - "type": "BOOL" - } - ], - "GetWindowRgn": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hRgn", - "type": "HRGN" - } - ], - "GetWindowRgnBox": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lprc", - "type": "LPRECT" - } - ], - "ExcludeUpdateRgn": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "hWnd", - "type": "HWND" - } - ], - "InvalidateRect": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpRect", - "type": "RECT" - }, - { - "name": "bErase", - "type": "BOOL" - } - ], - "ValidateRect": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpRect", - "type": "RECT" - } - ], - "InvalidateRgn": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hRgn", - "type": "HRGN" - }, - { - "name": "bErase", - "type": "BOOL" - } - ], - "ValidateRgn": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hRgn", - "type": "HRGN" - } - ], - "RedrawWindow": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lprcUpdate", - "type": "RECT" - }, - { - "name": "hrgnUpdate", - "type": "HRGN" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "LockWindowUpdate": [ - { - "name": "hWndLock", - "type": "HWND" - } - ], - "ScrollWindow": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "XAmount", - "type": "int" - }, - { - "name": "YAmount", - "type": "int" - }, - { - "name": "lpRect", - "type": "RECT" - }, - { - "name": "lpClipRect", - "type": "RECT" - } - ], - "ScrollDC": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "dx", - "type": "int" - }, - { - "name": "dy", - "type": "int" - }, - { - "name": "lprcScroll", - "type": "RECT" - }, - { - "name": "lprcClip", - "type": "RECT" - }, - { - "name": "hrgnUpdate", - "type": "HRGN" - }, - { - "name": "lprcUpdate", - "type": "LPRECT" - } - ], - "ScrollWindowEx": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "dx", - "type": "int" - }, - { - "name": "dy", - "type": "int" - }, - { - "name": "prcScroll", - "type": "RECT" - }, - { - "name": "prcClip", - "type": "RECT" - }, - { - "name": "hrgnUpdate", - "type": "HRGN" - }, - { - "name": "prcUpdate", - "type": "LPRECT" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "SetScrollPos": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nBar", - "type": "int" - }, - { - "name": "nPos", - "type": "int" - }, - { - "name": "bRedraw", - "type": "BOOL" - } - ], - "GetScrollPos": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nBar", - "type": "int" - } - ], - "SetScrollRange": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nBar", - "type": "int" - }, - { - "name": "nMinPos", - "type": "int" - }, - { - "name": "nMaxPos", - "type": "int" - }, - { - "name": "bRedraw", - "type": "BOOL" - } - ], - "GetScrollRange": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nBar", - "type": "int" - }, - { - "name": "lpMinPos", - "type": "LPINT" - }, - { - "name": "lpMaxPos", - "type": "LPINT" - } - ], - "ShowScrollBar": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wBar", - "type": "int" - }, - { - "name": "bShow", - "type": "BOOL" - } - ], - "EnableScrollBar": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wSBflags", - "type": "UINT" - }, - { - "name": "wArrows", - "type": "UINT" - } - ], - "SetPropA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "hData", - "type": "HANDLE" - } - ], - "SetPropW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "hData", - "type": "HANDLE" - } - ], - "GetPropA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPCSTR" - } - ], - "GetPropW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPCWSTR" - } - ], - "RemovePropA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPCSTR" - } - ], - "RemovePropW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPCWSTR" - } - ], - "EnumPropsExA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpEnumFunc", - "type": "PROPENUMPROCEXA" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumPropsExW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpEnumFunc", - "type": "PROPENUMPROCEXW" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumPropsA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpEnumFunc", - "type": "PROPENUMPROCA" - } - ], - "EnumPropsW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpEnumFunc", - "type": "PROPENUMPROCW" - } - ], - "SetWindowTextA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPCSTR" - } - ], - "SetWindowTextW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPCWSTR" - } - ], - "GetWindowTextA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPSTR" - }, - { - "name": "nMaxCount", - "type": "int" - } - ], - "GetWindowTextW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPWSTR" - }, - { - "name": "nMaxCount", - "type": "int" - } - ], - "GetWindowTextLengthA": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "GetWindowTextLengthW": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "GetClientRect": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpRect", - "type": "LPRECT" - } - ], - "GetWindowRect": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpRect", - "type": "LPRECT" - } - ], - "AdjustWindowRect": [ - { - "name": "lpRect", - "type": "LPRECT" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "bMenu", - "type": "BOOL" - } - ], - "AdjustWindowRectEx": [ - { - "name": "lpRect", - "type": "LPRECT" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "bMenu", - "type": "BOOL" - }, - { - "name": "dwExStyle", - "type": "DWORD" - } - ], - "AdjustWindowRectExForDpi": [ - { - "name": "lpRect", - "type": "LPRECT" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "bMenu", - "type": "BOOL" - }, - { - "name": "dwExStyle", - "type": "DWORD" - }, - { - "name": "dpi", - "type": "UINT" - } - ], - "SetWindowContextHelpId": [ - { - "name": "VOID", - "type": "HWND" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "GetWindowContextHelpId": [ - { - "name": "VOID", - "type": "HWND" - } - ], - "SetMenuContextHelpId": [ - { - "name": "VOID", - "type": "HMENU" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "GetMenuContextHelpId": [ - { - "name": "VOID", - "type": "HMENU" - } - ], - "MessageBoxA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpText", - "type": "LPCSTR" - }, - { - "name": "lpCaption", - "type": "LPCSTR" - }, - { - "name": "uType", - "type": "UINT" - } - ], - "MessageBoxW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpText", - "type": "LPCWSTR" - }, - { - "name": "lpCaption", - "type": "LPCWSTR" - }, - { - "name": "uType", - "type": "UINT" - } - ], - "MessageBoxExA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpText", - "type": "LPCSTR" - }, - { - "name": "lpCaption", - "type": "LPCSTR" - }, - { - "name": "uType", - "type": "UINT" - }, - { - "name": "wLanguageId", - "type": "WORD" - } - ], - "MessageBoxExW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpText", - "type": "LPCWSTR" - }, - { - "name": "lpCaption", - "type": "LPCWSTR" - }, - { - "name": "uType", - "type": "UINT" - }, - { - "name": "wLanguageId", - "type": "WORD" - } - ], - "MessageBoxIndirectA": [ - { - "name": "lpmbp", - "type": "MSGBOXPARAMSA" - } - ], - "MessageBoxIndirectW": [ - { - "name": "lpmbp", - "type": "MSGBOXPARAMSW" - } - ], - "MessageBeep": [ - { - "name": "uType", - "type": "UINT" - } - ], - "ShowCursor": [ - { - "name": "bShow", - "type": "BOOL" - } - ], - "SetCursorPos": [ - { - "name": "X", - "type": "int" - }, - { - "name": "Y", - "type": "int" - } - ], - "SetPhysicalCursorPos": [ - { - "name": "X", - "type": "int" - }, - { - "name": "Y", - "type": "int" - } - ], - "SetCursor": [ - { - "name": "hCursor", - "type": "HCURSOR" - } - ], - "GetCursorPos": [ - { - "name": "lpPoint", - "type": "LPPOINT" - } - ], - "GetPhysicalCursorPos": [ - { - "name": "lpPoint", - "type": "LPPOINT" - } - ], - "GetClipCursor": [ - { - "name": "lpRect", - "type": "LPRECT" - } - ], - "GetCursor": [ - { - "name": "VOID", - "type": "void" - } - ], - "CreateCaret": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hBitmap", - "type": "HBITMAP" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - } - ], - "GetCaretBlinkTime": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetCaretBlinkTime": [ - { - "name": "uMSeconds", - "type": "UINT" - } - ], - "DestroyCaret": [ - { - "name": "VOID", - "type": "void" - } - ], - "HideCaret": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "ShowCaret": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "SetCaretPos": [ - { - "name": "X", - "type": "int" - }, - { - "name": "Y", - "type": "int" - } - ], - "GetCaretPos": [ - { - "name": "lpPoint", - "type": "LPPOINT" - } - ], - "ClientToScreen": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpPoint", - "type": "LPPOINT" - } - ], - "ScreenToClient": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpPoint", - "type": "LPPOINT" - } - ], - "LogicalToPhysicalPoint": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpPoint", - "type": "LPPOINT" - } - ], - "PhysicalToLogicalPoint": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpPoint", - "type": "LPPOINT" - } - ], - "LogicalToPhysicalPointForPerMonitorDPI": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpPoint", - "type": "LPPOINT" - } - ], - "PhysicalToLogicalPointForPerMonitorDPI": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpPoint", - "type": "LPPOINT" - } - ], - "MapWindowPoints": [ - { - "name": "hWndFrom", - "type": "HWND" - }, - { - "name": "hWndTo", - "type": "HWND" - }, - { - "name": "lpPoints", - "type": "LPPOINT" - }, - { - "name": "cPoints", - "type": "UINT" - } - ], - "WindowFromPoint": [ - { - "name": "Point", - "type": "POINT" - } - ], - "WindowFromPhysicalPoint": [ - { - "name": "Point", - "type": "POINT" - } - ], - "ChildWindowFromPoint": [ - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "Point", - "type": "POINT" - } - ], - "ClipCursor": [ - { - "name": "lpRect", - "type": "RECT" - } - ], - "ChildWindowFromPointEx": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pt", - "type": "POINT" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "GetSysColor": [ - { - "name": "nIndex", - "type": "int" - } - ], - "GetSysColorBrush": [ - { - "name": "nIndex", - "type": "int" - } - ], - "SetSysColors": [ - { - "name": "cElements", - "type": "int" - }, - { - "name": "lpaElements", - "type": "INT" - }, - { - "name": "lpaRgbValues", - "type": "COLORREF" - } - ], - "DrawFocusRect": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "lprc", - "type": "RECT" - } - ], - "FillRect": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "lprc", - "type": "RECT" - }, - { - "name": "hbr", - "type": "HBRUSH" - } - ], - "FrameRect": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "lprc", - "type": "RECT" - }, - { - "name": "hbr", - "type": "HBRUSH" - } - ], - "InvertRect": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "lprc", - "type": "RECT" - } - ], - "SetRect": [ - { - "name": "lprc", - "type": "LPRECT" - }, - { - "name": "xLeft", - "type": "int" - }, - { - "name": "yTop", - "type": "int" - }, - { - "name": "xRight", - "type": "int" - }, - { - "name": "yBottom", - "type": "int" - } - ], - "SetRectEmpty": [ - { - "name": "lprc", - "type": "LPRECT" - } - ], - "CopyRect": [ - { - "name": "lprcDst", - "type": "LPRECT" - }, - { - "name": "lprcSrc", - "type": "RECT" - } - ], - "InflateRect": [ - { - "name": "lprc", - "type": "LPRECT" - }, - { - "name": "dx", - "type": "int" - }, - { - "name": "dy", - "type": "int" - } - ], - "IntersectRect": [ - { - "name": "lprcDst", - "type": "LPRECT" - }, - { - "name": "lprcSrc1", - "type": "RECT" - }, - { - "name": "lprcSrc2", - "type": "RECT" - } - ], - "UnionRect": [ - { - "name": "lprcDst", - "type": "LPRECT" - }, - { - "name": "lprcSrc1", - "type": "RECT" - }, - { - "name": "lprcSrc2", - "type": "RECT" - } - ], - "SubtractRect": [ - { - "name": "lprcDst", - "type": "LPRECT" - }, - { - "name": "lprcSrc1", - "type": "RECT" - }, - { - "name": "lprcSrc2", - "type": "RECT" - } - ], - "OffsetRect": [ - { - "name": "lprc", - "type": "LPRECT" - }, - { - "name": "dx", - "type": "int" - }, - { - "name": "dy", - "type": "int" - } - ], - "IsRectEmpty": [ - { - "name": "lprc", - "type": "RECT" - } - ], - "EqualRect": [ - { - "name": "lprc1", - "type": "RECT" - }, - { - "name": "lprc2", - "type": "RECT" - } - ], - "PtInRect": [ - { - "name": "lprc", - "type": "RECT" - }, - { - "name": "pt", - "type": "POINT" - } - ], - "GetWindowLongA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - } - ], - "GetWindowLongW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - } - ], - "SetWindowLongA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "dwNewLong", - "type": "LONG" - } - ], - "SetWindowLongW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "dwNewLong", - "type": "LONG" - } - ], - "GetWindowLongPtrA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - } - ], - "GetWindowLongPtrW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - } - ], - "SetWindowLongPtrA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "dwNewLong", - "type": "LONG_PTR" - } - ], - "SetWindowLongPtrW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "dwNewLong", - "type": "LONG_PTR" - } - ], - "GetClassWord": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - } - ], - "SetClassWord": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "wNewWord", - "type": "WORD" - } - ], - "GetClassLongA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - } - ], - "GetClassLongW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - } - ], - "SetClassLongA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "dwNewLong", - "type": "LONG" - } - ], - "SetClassLongW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "dwNewLong", - "type": "LONG" - } - ], - "GetClassLongPtrA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - } - ], - "GetClassLongPtrW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - } - ], - "SetClassLongPtrA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "dwNewLong", - "type": "LONG_PTR" - } - ], - "SetClassLongPtrW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "nIndex", - "type": "int" - }, - { - "name": "dwNewLong", - "type": "LONG_PTR" - } - ], - "GetProcessDefaultLayout": [ - { - "name": "pdwDefaultLayout", - "type": "DWORD" - } - ], - "SetProcessDefaultLayout": [ - { - "name": "dwDefaultLayout", - "type": "DWORD" - } - ], - "GetDesktopWindow": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetParent": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "SetParent": [ - { - "name": "hWndChild", - "type": "HWND" - }, - { - "name": "hWndNewParent", - "type": "HWND" - } - ], - "EnumChildWindows": [ - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "lpEnumFunc", - "type": "WNDENUMPROC" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "FindWindowA": [ - { - "name": "lpClassName", - "type": "LPCSTR" - }, - { - "name": "lpWindowName", - "type": "LPCSTR" - } - ], - "FindWindowW": [ - { - "name": "lpClassName", - "type": "LPCWSTR" - }, - { - "name": "lpWindowName", - "type": "LPCWSTR" - } - ], - "FindWindowExA": [ - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "hWndChildAfter", - "type": "HWND" - }, - { - "name": "lpszClass", - "type": "LPCSTR" - }, - { - "name": "lpszWindow", - "type": "LPCSTR" - } - ], - "FindWindowExW": [ - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "hWndChildAfter", - "type": "HWND" - }, - { - "name": "lpszClass", - "type": "LPCWSTR" - }, - { - "name": "lpszWindow", - "type": "LPCWSTR" - } - ], - "GetShellWindow": [ - { - "name": "VOID", - "type": "void" - } - ], - "RegisterShellHookWindow": [ - { - "name": "hwnd", - "type": "HWND" - } - ], - "DeregisterShellHookWindow": [ - { - "name": "hwnd", - "type": "HWND" - } - ], - "EnumWindows": [ - { - "name": "lpEnumFunc", - "type": "WNDENUMPROC" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumThreadWindows": [ - { - "name": "dwThreadId", - "type": "DWORD" - }, - { - "name": "lpfn", - "type": "WNDENUMPROC" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "GetClassNameA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpClassName", - "type": "LPSTR" - }, - { - "name": "nMaxCount", - "type": "int" - } - ], - "GetClassNameW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpClassName", - "type": "LPWSTR" - }, - { - "name": "nMaxCount", - "type": "int" - } - ], - "GetTopWindow": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "GetWindowThreadProcessId": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "lpdwProcessId", - "type": "LPDWORD" - } - ], - "IsGUIThread": [ - { - "name": "bConvert", - "type": "BOOL" - } - ], - "GetLastActivePopup": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "GetWindow": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "uCmd", - "type": "UINT" - } - ], - "SetWindowsHookExA": [ - { - "name": "idHook", - "type": "int" - }, - { - "name": "lpfn", - "type": "HOOKPROC" - }, - { - "name": "hmod", - "type": "HINSTANCE" - }, - { - "name": "dwThreadId", - "type": "DWORD" - } - ], - "SetWindowsHookExW": [ - { - "name": "idHook", - "type": "int" - }, - { - "name": "lpfn", - "type": "HOOKPROC" - }, - { - "name": "hmod", - "type": "HINSTANCE" - }, - { - "name": "dwThreadId", - "type": "DWORD" - } - ], - "UnhookWindowsHookEx": [ - { - "name": "hhk", - "type": "HHOOK" - } - ], - "CallNextHookEx": [ - { - "name": "hhk", - "type": "HHOOK" - }, - { - "name": "nCode", - "type": "int" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "CheckMenuRadioItem": [ - { - "name": "hmenu", - "type": "HMENU" - }, - { - "name": "first", - "type": "UINT" - }, - { - "name": "last", - "type": "UINT" - }, - { - "name": "check", - "type": "UINT" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "LoadBitmapA": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpBitmapName", - "type": "LPCSTR" - } - ], - "LoadBitmapW": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpBitmapName", - "type": "LPCWSTR" - } - ], - "LoadCursorA": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpCursorName", - "type": "LPCSTR" - } - ], - "LoadCursorW": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpCursorName", - "type": "LPCWSTR" - } - ], - "LoadCursorFromFileA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "LoadCursorFromFileW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "CreateCursor": [ - { - "name": "hInst", - "type": "HINSTANCE" - }, - { - "name": "xHotSpot", - "type": "int" - }, - { - "name": "yHotSpot", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "pvANDPlane", - "type": "void" - }, - { - "name": "pvXORPlane", - "type": "void" - } - ], - "DestroyCursor": [ - { - "name": "hCursor", - "type": "HCURSOR" - } - ], - "SetSystemCursor": [ - { - "name": "hcur", - "type": "HCURSOR" - }, - { - "name": "id", - "type": "DWORD" - } - ], - "LoadIconA": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpIconName", - "type": "LPCSTR" - } - ], - "LoadIconW": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lpIconName", - "type": "LPCWSTR" - } - ], - "PrivateExtractIconsA": [ - { - "name": "szFileName", - "type": "LPCSTR" - }, - { - "name": "nIconIndex", - "type": "int" - }, - { - "name": "cxIcon", - "type": "int" - }, - { - "name": "cyIcon", - "type": "int" - }, - { - "name": "phicon", - "type": "HICON" - }, - { - "name": "piconid", - "type": "UINT" - }, - { - "name": "nIcons", - "type": "UINT" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "PrivateExtractIconsW": [ - { - "name": "szFileName", - "type": "LPCWSTR" - }, - { - "name": "nIconIndex", - "type": "int" - }, - { - "name": "cxIcon", - "type": "int" - }, - { - "name": "cyIcon", - "type": "int" - }, - { - "name": "phicon", - "type": "HICON" - }, - { - "name": "piconid", - "type": "UINT" - }, - { - "name": "nIcons", - "type": "UINT" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "CreateIcon": [ - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "cPlanes", - "type": "BYTE" - }, - { - "name": "cBitsPixel", - "type": "BYTE" - }, - { - "name": "lpbANDbits", - "type": "BYTE" - }, - { - "name": "lpbXORbits", - "type": "BYTE" - } - ], - "DestroyIcon": [ - { - "name": "hIcon", - "type": "HICON" - } - ], - "LookupIconIdFromDirectory": [ - { - "name": "presbits", - "type": "PBYTE" - }, - { - "name": "fIcon", - "type": "BOOL" - } - ], - "LookupIconIdFromDirectoryEx": [ - { - "name": "presbits", - "type": "PBYTE" - }, - { - "name": "fIcon", - "type": "BOOL" - }, - { - "name": "cxDesired", - "type": "int" - }, - { - "name": "cyDesired", - "type": "int" - }, - { - "name": "Flags", - "type": "UINT" - } - ], - "CreateIconFromResource": [ - { - "name": "presbits", - "type": "PBYTE" - }, - { - "name": "dwResSize", - "type": "DWORD" - }, - { - "name": "fIcon", - "type": "BOOL" - }, - { - "name": "dwVer", - "type": "DWORD" - } - ], - "CreateIconFromResourceEx": [ - { - "name": "presbits", - "type": "PBYTE" - }, - { - "name": "dwResSize", - "type": "DWORD" - }, - { - "name": "fIcon", - "type": "BOOL" - }, - { - "name": "dwVer", - "type": "DWORD" - }, - { - "name": "cxDesired", - "type": "int" - }, - { - "name": "cyDesired", - "type": "int" - }, - { - "name": "Flags", - "type": "UINT" - } - ], - "LoadImageA": [ - { - "name": "hInst", - "type": "HINSTANCE" - }, - { - "name": "name", - "type": "LPCSTR" - }, - { - "name": "type", - "type": "UINT" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "fuLoad", - "type": "UINT" - } - ], - "LoadImageW": [ - { - "name": "hInst", - "type": "HINSTANCE" - }, - { - "name": "name", - "type": "LPCWSTR" - }, - { - "name": "type", - "type": "UINT" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "fuLoad", - "type": "UINT" - } - ], - "CopyImage": [ - { - "name": "h", - "type": "HANDLE" - }, - { - "name": "type", - "type": "UINT" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "DrawIconEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xLeft", - "type": "int" - }, - { - "name": "yTop", - "type": "int" - }, - { - "name": "hIcon", - "type": "HICON" - }, - { - "name": "cxWidth", - "type": "int" - }, - { - "name": "cyWidth", - "type": "int" - }, - { - "name": "istepIfAniCur", - "type": "UINT" - }, - { - "name": "hbrFlickerFreeDraw", - "type": "HBRUSH" - }, - { - "name": "diFlags", - "type": "UINT" - } - ], - "CreateIconIndirect": [ - { - "name": "piconinfo", - "type": "PICONINFO" - } - ], - "CopyIcon": [ - { - "name": "hIcon", - "type": "HICON" - } - ], - "GetIconInfo": [ - { - "name": "hIcon", - "type": "HICON" - }, - { - "name": "piconinfo", - "type": "PICONINFO" - } - ], - "GetIconInfoExA": [ - { - "name": "hicon", - "type": "HICON" - }, - { - "name": "piconinfo", - "type": "PICONINFOEXA" - } - ], - "GetIconInfoExW": [ - { - "name": "hicon", - "type": "HICON" - }, - { - "name": "piconinfo", - "type": "PICONINFOEXW" - } - ], - "IsDialogMessageA": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "lpMsg", - "type": "LPMSG" - } - ], - "IsDialogMessageW": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "lpMsg", - "type": "LPMSG" - } - ], - "MapDialogRect": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "lpRect", - "type": "LPRECT" - } - ], - "DlgDirListA": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "lpPathSpec", - "type": "LPSTR" - }, - { - "name": "nIDListBox", - "type": "int" - }, - { - "name": "nIDStaticPath", - "type": "int" - }, - { - "name": "uFileType", - "type": "UINT" - } - ], - "DlgDirListW": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "lpPathSpec", - "type": "LPWSTR" - }, - { - "name": "nIDListBox", - "type": "int" - }, - { - "name": "nIDStaticPath", - "type": "int" - }, - { - "name": "uFileType", - "type": "UINT" - } - ], - "DlgDirSelectExA": [ - { - "name": "hwndDlg", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPSTR" - }, - { - "name": "chCount", - "type": "int" - }, - { - "name": "idListBox", - "type": "int" - } - ], - "DlgDirSelectExW": [ - { - "name": "hwndDlg", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPWSTR" - }, - { - "name": "chCount", - "type": "int" - }, - { - "name": "idListBox", - "type": "int" - } - ], - "DlgDirListComboBoxA": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "lpPathSpec", - "type": "LPSTR" - }, - { - "name": "nIDComboBox", - "type": "int" - }, - { - "name": "nIDStaticPath", - "type": "int" - }, - { - "name": "uFiletype", - "type": "UINT" - } - ], - "DlgDirListComboBoxW": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "lpPathSpec", - "type": "LPWSTR" - }, - { - "name": "nIDComboBox", - "type": "int" - }, - { - "name": "nIDStaticPath", - "type": "int" - }, - { - "name": "uFiletype", - "type": "UINT" - } - ], - "DlgDirSelectComboBoxExA": [ - { - "name": "hwndDlg", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPSTR" - }, - { - "name": "cchOut", - "type": "int" - }, - { - "name": "idComboBox", - "type": "int" - } - ], - "DlgDirSelectComboBoxExW": [ - { - "name": "hwndDlg", - "type": "HWND" - }, - { - "name": "lpString", - "type": "LPWSTR" - }, - { - "name": "cchOut", - "type": "int" - }, - { - "name": "idComboBox", - "type": "int" - } - ], - "SetScrollInfo": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "nBar", - "type": "int" - }, - { - "name": "lpsi", - "type": "LPCSCROLLINFO" - }, - { - "name": "redraw", - "type": "BOOL" - } - ], - "GetScrollInfo": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "nBar", - "type": "int" - }, - { - "name": "lpsi", - "type": "LPSCROLLINFO" - } - ], - "DefFrameProcA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hWndMDIClient", - "type": "HWND" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "DefFrameProcW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hWndMDIClient", - "type": "HWND" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "DefMDIChildProcA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "DefMDIChildProcW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "TranslateMDISysAccel": [ - { - "name": "hWndClient", - "type": "HWND" - }, - { - "name": "lpMsg", - "type": "LPMSG" - } - ], - "ArrangeIconicWindows": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "CreateMDIWindowA": [ - { - "name": "lpClassName", - "type": "LPCSTR" - }, - { - "name": "lpWindowName", - "type": "LPCSTR" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "X", - "type": "int" - }, - { - "name": "Y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "CreateMDIWindowW": [ - { - "name": "lpClassName", - "type": "LPCWSTR" - }, - { - "name": "lpWindowName", - "type": "LPCWSTR" - }, - { - "name": "dwStyle", - "type": "DWORD" - }, - { - "name": "X", - "type": "int" - }, - { - "name": "Y", - "type": "int" - }, - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "hWndParent", - "type": "HWND" - }, - { - "name": "hInstance", - "type": "HINSTANCE" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "TileWindows": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "wHow", - "type": "UINT" - }, - { - "name": "lpRect", - "type": "RECT" - }, - { - "name": "cKids", - "type": "UINT" - }, - { - "name": "lpKids", - "type": "HWND" - } - ], - "CascadeWindows": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "wHow", - "type": "UINT" - }, - { - "name": "lpRect", - "type": "RECT" - }, - { - "name": "cKids", - "type": "UINT" - }, - { - "name": "lpKids", - "type": "HWND" - } - ], - "WinHelpA": [ - { - "name": "hWndMain", - "type": "HWND" - }, - { - "name": "lpszHelp", - "type": "LPCSTR" - }, - { - "name": "uCommand", - "type": "UINT" - }, - { - "name": "dwData", - "type": "ULONG_PTR" - } - ], - "WinHelpW": [ - { - "name": "hWndMain", - "type": "HWND" - }, - { - "name": "lpszHelp", - "type": "LPCWSTR" - }, - { - "name": "uCommand", - "type": "UINT" - }, - { - "name": "dwData", - "type": "ULONG_PTR" - } - ], - "GetGuiResources": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "uiFlags", - "type": "DWORD" - } - ], - "ChangeDisplaySettingsA": [ - { - "name": "lpDevMode", - "type": "DEVMODEA" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "ChangeDisplaySettingsW": [ - { - "name": "lpDevMode", - "type": "DEVMODEW" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "ChangeDisplaySettingsExA": [ - { - "name": "lpszDeviceName", - "type": "LPCSTR" - }, - { - "name": "lpDevMode", - "type": "DEVMODEA" - }, - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "dwflags", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LPVOID" - } - ], - "ChangeDisplaySettingsExW": [ - { - "name": "lpszDeviceName", - "type": "LPCWSTR" - }, - { - "name": "lpDevMode", - "type": "DEVMODEW" - }, - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "dwflags", - "type": "DWORD" - }, - { - "name": "lParam", - "type": "LPVOID" - } - ], - "EnumDisplaySettingsA": [ - { - "name": "lpszDeviceName", - "type": "LPCSTR" - }, - { - "name": "iModeNum", - "type": "DWORD" - }, - { - "name": "lpDevMode", - "type": "DEVMODEA" - } - ], - "EnumDisplaySettingsW": [ - { - "name": "lpszDeviceName", - "type": "LPCWSTR" - }, - { - "name": "iModeNum", - "type": "DWORD" - }, - { - "name": "lpDevMode", - "type": "DEVMODEW" - } - ], - "EnumDisplaySettingsExA": [ - { - "name": "lpszDeviceName", - "type": "LPCSTR" - }, - { - "name": "iModeNum", - "type": "DWORD" - }, - { - "name": "lpDevMode", - "type": "DEVMODEA" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumDisplaySettingsExW": [ - { - "name": "lpszDeviceName", - "type": "LPCWSTR" - }, - { - "name": "iModeNum", - "type": "DWORD" - }, - { - "name": "lpDevMode", - "type": "DEVMODEW" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumDisplayDevicesA": [ - { - "name": "lpDevice", - "type": "LPCSTR" - }, - { - "name": "iDevNum", - "type": "DWORD" - }, - { - "name": "lpDisplayDevice", - "type": "PDISPLAY_DEVICEA" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumDisplayDevicesW": [ - { - "name": "lpDevice", - "type": "LPCWSTR" - }, - { - "name": "iDevNum", - "type": "DWORD" - }, - { - "name": "lpDisplayDevice", - "type": "PDISPLAY_DEVICEW" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetDisplayConfigBufferSizes": [ - { - "name": "flags", - "type": "UINT32" - }, - { - "name": "numPathArrayElements", - "type": "UINT32" - }, - { - "name": "numModeInfoArrayElements", - "type": "UINT32" - } - ], - "SetDisplayConfig": [ - { - "name": "numPathArrayElements", - "type": "UINT32" - }, - { - "name": "pathArray", - "type": "DISPLAYCONFIG_PATH_INFO" - }, - { - "name": "numModeInfoArrayElements", - "type": "UINT32" - }, - { - "name": "modeInfoArray", - "type": "DISPLAYCONFIG_MODE_INFO" - }, - { - "name": "flags", - "type": "UINT32" - } - ], - "QueryDisplayConfig": [ - { - "name": "flags", - "type": "UINT32" - }, - { - "name": "numPathArrayElements", - "type": "UINT32" - }, - { - "name": "pathArray", - "type": "DISPLAYCONFIG_PATH_INFO" - }, - { - "name": "numModeInfoArrayElements", - "type": "UINT32" - }, - { - "name": "modeInfoArray", - "type": "DISPLAYCONFIG_MODE_INFO" - }, - { - "name": "currentTopologyId", - "type": "DISPLAYCONFIG_TOPOLOGY_ID" - } - ], - "DisplayConfigGetDeviceInfo": [ - { - "name": "requestPacket", - "type": "DISPLAYCONFIG_DEVICE_INFO_HEADER" - } - ], - "DisplayConfigSetDeviceInfo": [ - { - "name": "setPacket", - "type": "DISPLAYCONFIG_DEVICE_INFO_HEADER" - } - ], - "SystemParametersInfoA": [ - { - "name": "uiAction", - "type": "UINT" - }, - { - "name": "uiParam", - "type": "UINT" - }, - { - "name": "pvParam", - "type": "PVOID" - }, - { - "name": "fWinIni", - "type": "UINT" - } - ], - "SystemParametersInfoW": [ - { - "name": "uiAction", - "type": "UINT" - }, - { - "name": "uiParam", - "type": "UINT" - }, - { - "name": "pvParam", - "type": "PVOID" - }, - { - "name": "fWinIni", - "type": "UINT" - } - ], - "SystemParametersInfoForDpi": [ - { - "name": "uiAction", - "type": "UINT" - }, - { - "name": "uiParam", - "type": "UINT" - }, - { - "name": "pvParam", - "type": "PVOID" - }, - { - "name": "fWinIni", - "type": "UINT" - }, - { - "name": "dpi", - "type": "UINT" - } - ], - "SoundSentry": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetLastErrorEx": [ - { - "name": "dwErrCode", - "type": "DWORD" - }, - { - "name": "dwType", - "type": "DWORD" - } - ], - "InternalGetWindowText": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "pString", - "type": "LPWSTR" - }, - { - "name": "cchMaxCount", - "type": "int" - } - ], - "MonitorFromPoint": [ - { - "name": "pt", - "type": "POINT" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "MonitorFromRect": [ - { - "name": "lprc", - "type": "LPCRECT" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "MonitorFromWindow": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetMonitorInfoA": [ - { - "name": "hMonitor", - "type": "HMONITOR" - }, - { - "name": "lpmi", - "type": "LPMONITORINFO" - } - ], - "GetMonitorInfoW": [ - { - "name": "hMonitor", - "type": "HMONITOR" - }, - { - "name": "lpmi", - "type": "LPMONITORINFO" - } - ], - "EnumDisplayMonitors": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprcClip", - "type": "LPCRECT" - }, - { - "name": "lpfnEnum", - "type": "MONITORENUMPROC" - }, - { - "name": "dwData", - "type": "LPARAM" - } - ], - "NotifyWinEvent": [ - { - "name": "event", - "type": "DWORD" - }, - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "idObject", - "type": "LONG" - }, - { - "name": "idChild", - "type": "LONG" - } - ], - "SetWinEventHook": [ - { - "name": "eventMin", - "type": "DWORD" - }, - { - "name": "eventMax", - "type": "DWORD" - }, - { - "name": "hmodWinEventProc", - "type": "HMODULE" - }, - { - "name": "pfnWinEventProc", - "type": "WINEVENTPROC" - }, - { - "name": "idProcess", - "type": "DWORD" - }, - { - "name": "idThread", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "IsWinEventHookInstalled": [ - { - "name": "event", - "type": "DWORD" - } - ], - "UnhookWinEvent": [ - { - "name": "hWinEventHook", - "type": "HWINEVENTHOOK" - } - ], - "GetGUIThreadInfo": [ - { - "name": "idThread", - "type": "DWORD" - }, - { - "name": "pgui", - "type": "PGUITHREADINFO" - } - ], - "BlockInput": [ - { - "name": "fBlockIt", - "type": "BOOL" - } - ], - "SetProcessDPIAware": [ - { - "name": "VOID", - "type": "void" - } - ], - "IsProcessDPIAware": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetThreadDpiAwarenessContext": [ - { - "name": "dpiContext", - "type": "DPI_AWARENESS_CONTEXT" - } - ], - "GetThreadDpiAwarenessContext": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetWindowDpiAwarenessContext": [ - { - "name": "hwnd", - "type": "HWND" - } - ], - "GetAwarenessFromDpiAwarenessContext": [ - { - "name": "value", - "type": "DPI_AWARENESS_CONTEXT" - } - ], - "GetDpiFromDpiAwarenessContext": [ - { - "name": "value", - "type": "DPI_AWARENESS_CONTEXT" - } - ], - "AreDpiAwarenessContextsEqual": [ - { - "name": "dpiContextA", - "type": "DPI_AWARENESS_CONTEXT" - }, - { - "name": "dpiContextB", - "type": "DPI_AWARENESS_CONTEXT" - } - ], - "IsValidDpiAwarenessContext": [ - { - "name": "value", - "type": "DPI_AWARENESS_CONTEXT" - } - ], - "GetDpiForWindow": [ - { - "name": "hwnd", - "type": "HWND" - } - ], - "GetDpiForSystem": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetSystemDpiForProcess": [ - { - "name": "hProcess", - "type": "HANDLE" - } - ], - "EnableNonClientDpiScaling": [ - { - "name": "hwnd", - "type": "HWND" - } - ], - "SetProcessDpiAwarenessContext": [ - { - "name": "value", - "type": "DPI_AWARENESS_CONTEXT" - } - ], - "SetThreadDpiHostingBehavior": [ - { - "name": "value", - "type": "DPI_HOSTING_BEHAVIOR" - } - ], - "GetThreadDpiHostingBehavior": [ - { - "name": "VOID", - "type": "void" - } - ], - "GetWindowDpiHostingBehavior": [ - { - "name": "hwnd", - "type": "HWND" - } - ], - "GetWindowModuleFileNameA": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pszFileName", - "type": "LPSTR" - }, - { - "name": "cchFileNameMax", - "type": "UINT" - } - ], - "GetWindowModuleFileNameW": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pszFileName", - "type": "LPWSTR" - }, - { - "name": "cchFileNameMax", - "type": "UINT" - } - ], - "GetCursorInfo": [ - { - "name": "pci", - "type": "PCURSORINFO" - } - ], - "GetWindowInfo": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pwi", - "type": "PWINDOWINFO" - } - ], - "GetTitleBarInfo": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pti", - "type": "PTITLEBARINFO" - } - ], - "GetMenuBarInfo": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "idObject", - "type": "LONG" - }, - { - "name": "idItem", - "type": "LONG" - }, - { - "name": "pmbi", - "type": "PMENUBARINFO" - } - ], - "GetScrollBarInfo": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "idObject", - "type": "LONG" - }, - { - "name": "psbi", - "type": "PSCROLLBARINFO" - } - ], - "GetComboBoxInfo": [ - { - "name": "hwndCombo", - "type": "HWND" - }, - { - "name": "pcbi", - "type": "PCOMBOBOXINFO" - } - ], - "GetAncestor": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "gaFlags", - "type": "UINT" - } - ], - "RealChildWindowFromPoint": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "ptParentClientCoords", - "type": "POINT" - } - ], - "RealGetWindowClassW": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "ptszClassName", - "type": "LPWSTR" - }, - { - "name": "cchClassNameMax", - "type": "UINT" - } - ], - "GetAltTabInfoA": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "iItem", - "type": "int" - }, - { - "name": "pati", - "type": "PALTTABINFO" - }, - { - "name": "pszItemText", - "type": "LPSTR" - }, - { - "name": "cchItemText", - "type": "UINT" - } - ], - "GetAltTabInfoW": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "iItem", - "type": "int" - }, - { - "name": "pati", - "type": "PALTTABINFO" - }, - { - "name": "pszItemText", - "type": "LPWSTR" - }, - { - "name": "cchItemText", - "type": "UINT" - } - ], - "GetListBoxInfo": [ - { - "name": "hwnd", - "type": "HWND" - } - ], - "LockWorkStation": [ - { - "name": "VOID", - "type": "void" - } - ], - "UserHandleGrantAccess": [ - { - "name": "hUserHandle", - "type": "HANDLE" - }, - { - "name": "hJob", - "type": "HANDLE" - }, - { - "name": "bGrant", - "type": "BOOL" - } - ], - "GetRawInputData": [ - { - "name": "hRawInput", - "type": "HRAWINPUT" - }, - { - "name": "uiCommand", - "type": "UINT" - }, - { - "name": "pData", - "type": "LPVOID" - }, - { - "name": "pcbSize", - "type": "PUINT" - }, - { - "name": "cbSizeHeader", - "type": "UINT" - } - ], - "GetRawInputDeviceInfoA": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "uiCommand", - "type": "UINT" - }, - { - "name": "pData", - "type": "LPVOID" - }, - { - "name": "pcbSize", - "type": "PUINT" - } - ], - "GetRawInputDeviceInfoW": [ - { - "name": "hDevice", - "type": "HANDLE" - }, - { - "name": "uiCommand", - "type": "UINT" - }, - { - "name": "pData", - "type": "LPVOID" - }, - { - "name": "pcbSize", - "type": "PUINT" - } - ], - "GetRawInputBuffer": [ - { - "name": "pData", - "type": "PRAWINPUT" - }, - { - "name": "pcbSize", - "type": "PUINT" - }, - { - "name": "cbSizeHeader", - "type": "UINT" - } - ], - "RegisterRawInputDevices": [ - { - "name": "pRawInputDevices", - "type": "PCRAWINPUTDEVICE" - }, - { - "name": "uiNumDevices", - "type": "UINT" - }, - { - "name": "cbSize", - "type": "UINT" - } - ], - "GetRegisteredRawInputDevices": [ - { - "name": "pRawInputDevices", - "type": "PRAWINPUTDEVICE" - }, - { - "name": "puiNumDevices", - "type": "PUINT" - }, - { - "name": "cbSize", - "type": "UINT" - } - ], - "GetRawInputDeviceList": [ - { - "name": "pRawInputDeviceList", - "type": "PRAWINPUTDEVICELIST" - }, - { - "name": "puiNumDevices", - "type": "PUINT" - }, - { - "name": "cbSize", - "type": "UINT" - } - ], - "DefRawInputProc": [ - { - "name": "paRawInput", - "type": "PRAWINPUT" - }, - { - "name": "nInput", - "type": "INT" - }, - { - "name": "cbSizeHeader", - "type": "UINT" - } - ], - "GetPointerDevices": [ - { - "name": "deviceCount", - "type": "UINT32" - }, - { - "name": "pointerDevices", - "type": "POINTER_DEVICE_INFO" - } - ], - "GetPointerDevice": [ - { - "name": "device", - "type": "HANDLE" - }, - { - "name": "pointerDevice", - "type": "POINTER_DEVICE_INFO" - } - ], - "GetPointerDeviceProperties": [ - { - "name": "device", - "type": "HANDLE" - }, - { - "name": "propertyCount", - "type": "UINT32" - }, - { - "name": "pointerProperties", - "type": "POINTER_DEVICE_PROPERTY" - } - ], - "RegisterPointerDeviceNotifications": [ - { - "name": "window", - "type": "HWND" - }, - { - "name": "notifyRange", - "type": "BOOL" - } - ], - "GetPointerDeviceRects": [ - { - "name": "device", - "type": "HANDLE" - }, - { - "name": "pointerDeviceRect", - "type": "RECT" - }, - { - "name": "displayRect", - "type": "RECT" - } - ], - "GetPointerDeviceCursors": [ - { - "name": "device", - "type": "HANDLE" - }, - { - "name": "cursorCount", - "type": "UINT32" - }, - { - "name": "deviceCursors", - "type": "POINTER_DEVICE_CURSOR_INFO" - } - ], - "GetRawPointerDeviceData": [ - { - "name": "pointerId", - "type": "UINT32" - }, - { - "name": "historyCount", - "type": "UINT32" - }, - { - "name": "propertiesCount", - "type": "UINT32" - }, - { - "name": "pProperties", - "type": "POINTER_DEVICE_PROPERTY" - }, - { - "name": "pValues", - "type": "LONG" - } - ], - "ChangeWindowMessageFilter": [ - { - "name": "message", - "type": "UINT" - }, - { - "name": "dwFlag", - "type": "DWORD" - } - ], - "ChangeWindowMessageFilterEx": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "message", - "type": "UINT" - }, - { - "name": "action", - "type": "DWORD" - }, - { - "name": "pChangeFilterStruct", - "type": "PCHANGEFILTERSTRUCT" - } - ], - "GetGestureInfo": [ - { - "name": "hGestureInfo", - "type": "HGESTUREINFO" - }, - { - "name": "pGestureInfo", - "type": "PGESTUREINFO" - } - ], - "GetGestureExtraArgs": [ - { - "name": "hGestureInfo", - "type": "HGESTUREINFO" - }, - { - "name": "cbExtraArgs", - "type": "UINT" - }, - { - "name": "pExtraArgs", - "type": "PBYTE" - } - ], - "CloseGestureInfoHandle": [ - { - "name": "hGestureInfo", - "type": "HGESTUREINFO" - } - ], - "SetGestureConfig": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "cIDs", - "type": "UINT" - }, - { - "name": "pGestureConfig", - "type": "PGESTURECONFIG" - }, - { - "name": "cbSize", - "type": "UINT" - } - ], - "GetGestureConfig": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "dwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pcIDs", - "type": "PUINT" - }, - { - "name": "pGestureConfig", - "type": "PGESTURECONFIG" - }, - { - "name": "cbSize", - "type": "UINT" - } - ], - "ShutdownBlockReasonCreate": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "pwszReason", - "type": "LPCWSTR" - } - ], - "ShutdownBlockReasonQuery": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "pwszBuff", - "type": "LPWSTR" - }, - { - "name": "pcchBuff", - "type": "DWORD" - } - ], - "ShutdownBlockReasonDestroy": [ - { - "name": "hWnd", - "type": "HWND" - } - ], - "GetCurrentInputMessageSource": [ - { - "name": "inputMessageSource", - "type": "INPUT_MESSAGE_SOURCE" - } - ], - "GetCIMSSM": [ - { - "name": "inputMessageSource", - "type": "INPUT_MESSAGE_SOURCE" - } - ], - "GetAutoRotationState": [ - { - "name": "pState", - "type": "PAR_STATE" - } - ], - "GetDisplayAutoRotationPreferences": [ - { - "name": "pOrientation", - "type": "ORIENTATION_PREFERENCE" - } - ], - "GetDisplayAutoRotationPreferencesByProcessId": [ - { - "name": "dwProcessId", - "type": "DWORD" - }, - { - "name": "pOrientation", - "type": "ORIENTATION_PREFERENCE" - }, - { - "name": "fRotateScreen", - "type": "BOOL" - } - ], - "SetDisplayAutoRotationPreferences": [ - { - "name": "orientation", - "type": "ORIENTATION_PREFERENCE" - } - ], - "IsImmersiveProcess": [ - { - "name": "hProcess", - "type": "HANDLE" - } - ], - "SetProcessRestrictionExemption": [ - { - "name": "fEnableExemption", - "type": "BOOL" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/kernel32_dll.json b/qiling/extensions/windows_sdk/kernel32_dll.json new file mode 100644 index 000000000..24f3c1435 --- /dev/null +++ b/qiling/extensions/windows_sdk/kernel32_dll.json @@ -0,0 +1,15504 @@ +{ + "WerRegisterFile": [ + { + "name": "pwzFile", + "type": "PCWSTR" + }, + { + "name": "regFileType", + "type": "WER_REGISTER_FILE_TYPE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WerUnregisterFile": [ + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "WerRegisterMemoryBlock": [ + { + "name": "pvAddress", + "type": "PVOID" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "WerUnregisterMemoryBlock": [ + { + "name": "pvAddress", + "type": "PVOID" + } + ], + "WerRegisterExcludedMemoryBlock": [ + { + "name": "address", + "type": "void" + }, + { + "name": "size", + "type": "DWORD" + } + ], + "WerUnregisterExcludedMemoryBlock": [ + { + "name": "address", + "type": "void" + } + ], + "WerRegisterCustomMetadata": [ + { + "name": "key", + "type": "PCWSTR" + }, + { + "name": "value", + "type": "PCWSTR" + } + ], + "WerRegisterAdditionalProcess": [ + { + "name": "processId", + "type": "DWORD" + }, + { + "name": "captureExtraInfoForThreadId", + "type": "DWORD" + } + ], + "WerUnregisterAdditionalProcess": [ + { + "name": "processId", + "type": "DWORD" + } + ], + "WerSetFlags": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WerGetFlags": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pdwFlags", + "type": "PDWORD" + } + ], + "WerRegisterRuntimeExceptionModule": [ + { + "name": "pwszOutOfProcessCallbackDll", + "type": "PCWSTR" + }, + { + "name": "pContext", + "type": "PVOID" + } + ], + "WerUnregisterRuntimeExceptionModule": [ + { + "name": "pwszOutOfProcessCallbackDll", + "type": "PCWSTR" + }, + { + "name": "pContext", + "type": "PVOID" + } + ], + "CreateThreadpool": [ + { + "name": "reserved", + "type": "PVOID" + } + ], + "SetThreadpoolThreadMaximum": [ + { + "name": "ptpp", + "type": "PTP_POOL" + }, + { + "name": "cthrdMost", + "type": "DWORD" + } + ], + "SetThreadpoolThreadMinimum": [ + { + "name": "ptpp", + "type": "PTP_POOL" + }, + { + "name": "cthrdMic", + "type": "DWORD" + } + ], + "SetThreadpoolStackInformation": [ + { + "name": "ptpp", + "type": "PTP_POOL" + }, + { + "name": "ptpsi", + "type": "PTP_POOL_STACK_INFORMATION" + } + ], + "QueryThreadpoolStackInformation": [ + { + "name": "ptpp", + "type": "PTP_POOL" + }, + { + "name": "ptpsi", + "type": "PTP_POOL_STACK_INFORMATION" + } + ], + "CloseThreadpool": [ + { + "name": "ptpp", + "type": "PTP_POOL" + } + ], + "CreateThreadpoolCleanupGroup": [ + { + "name": "VOID", + "type": "void" + } + ], + "CloseThreadpoolCleanupGroupMembers": [ + { + "name": "ptpcg", + "type": "PTP_CLEANUP_GROUP" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + }, + { + "name": "pvCleanupContext", + "type": "PVOID" + } + ], + "CloseThreadpoolCleanupGroup": [ + { + "name": "ptpcg", + "type": "PTP_CLEANUP_GROUP" + } + ], + "SetEventWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "evt", + "type": "HANDLE" + } + ], + "ReleaseSemaphoreWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "sem", + "type": "HANDLE" + }, + { + "name": "crel", + "type": "DWORD" + } + ], + "ReleaseMutexWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "mut", + "type": "HANDLE" + } + ], + "LeaveCriticalSectionWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "pcs", + "type": "PCRITICAL_SECTION" + } + ], + "FreeLibraryWhenCallbackReturns": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + }, + { + "name": "mod", + "type": "HMODULE" + } + ], + "CallbackMayRunLong": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + } + ], + "DisassociateCurrentThreadFromCallback": [ + { + "name": "pci", + "type": "PTP_CALLBACK_INSTANCE" + } + ], + "TrySubmitThreadpoolCallback": [ + { + "name": "pfns", + "type": "PTP_SIMPLE_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "CreateThreadpoolWork": [ + { + "name": "pfnwk", + "type": "PTP_WORK_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "SubmitThreadpoolWork": [ + { + "name": "pwk", + "type": "PTP_WORK" + } + ], + "WaitForThreadpoolWorkCallbacks": [ + { + "name": "pwk", + "type": "PTP_WORK" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + } + ], + "CloseThreadpoolWork": [ + { + "name": "pwk", + "type": "PTP_WORK" + } + ], + "CreateThreadpoolTimer": [ + { + "name": "pfnti", + "type": "PTP_TIMER_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "SetThreadpoolTimer": [ + { + "name": "pti", + "type": "PTP_TIMER" + }, + { + "name": "pftDueTime", + "type": "PFILETIME" + }, + { + "name": "msPeriod", + "type": "DWORD" + }, + { + "name": "msWindowLength", + "type": "DWORD" + } + ], + "IsThreadpoolTimerSet": [ + { + "name": "pti", + "type": "PTP_TIMER" + } + ], + "WaitForThreadpoolTimerCallbacks": [ + { + "name": "pti", + "type": "PTP_TIMER" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + } + ], + "CloseThreadpoolTimer": [ + { + "name": "pti", + "type": "PTP_TIMER" + } + ], + "CreateThreadpoolWait": [ + { + "name": "pfnwa", + "type": "PTP_WAIT_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "SetThreadpoolWait": [ + { + "name": "pwa", + "type": "PTP_WAIT" + }, + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "pftTimeout", + "type": "PFILETIME" + } + ], + "WaitForThreadpoolWaitCallbacks": [ + { + "name": "pwa", + "type": "PTP_WAIT" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + } + ], + "CloseThreadpoolWait": [ + { + "name": "pwa", + "type": "PTP_WAIT" + } + ], + "CreateThreadpoolIo": [ + { + "name": "fl", + "type": "HANDLE" + }, + { + "name": "pfnio", + "type": "PTP_WIN32_IO_CALLBACK" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "pcbe", + "type": "PTP_CALLBACK_ENVIRON" + } + ], + "StartThreadpoolIo": [ + { + "name": "pio", + "type": "PTP_IO" + } + ], + "CancelThreadpoolIo": [ + { + "name": "pio", + "type": "PTP_IO" + } + ], + "WaitForThreadpoolIoCallbacks": [ + { + "name": "pio", + "type": "PTP_IO" + }, + { + "name": "fCancelPendingCallbacks", + "type": "BOOL" + } + ], + "CloseThreadpoolIo": [ + { + "name": "pio", + "type": "PTP_IO" + } + ], + "SetThreadpoolTimerEx": [ + { + "name": "pti", + "type": "PTP_TIMER" + }, + { + "name": "pftDueTime", + "type": "PFILETIME" + }, + { + "name": "msPeriod", + "type": "DWORD" + }, + { + "name": "msWindowLength", + "type": "DWORD" + } + ], + "SetThreadpoolWaitEx": [ + { + "name": "pwa", + "type": "PTP_WAIT" + }, + { + "name": "h", + "type": "HANDLE" + }, + { + "name": "pftTimeout", + "type": "PFILETIME" + }, + { + "name": "Reserved", + "type": "PVOID" + } + ], + "IsProcessInJob": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "JobHandle", + "type": "HANDLE" + }, + { + "name": "Result", + "type": "PBOOL" + } + ], + "LoadEnclaveImageW": [ + { + "name": "lpEnclaveAddress", + "type": "LPVOID" + }, + { + "name": "lpImageName", + "type": "LPCWSTR" + } + ], + "TerminateEnclave": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "fWait", + "type": "BOOL" + } + ], + "DeleteEnclave": [ + { + "name": "lpAddress", + "type": "LPVOID" + } + ], + "K32EnumProcesses": [ + { + "name": "lpidProcess", + "type": "DWORD" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "lpcbNeeded", + "type": "LPDWORD" + } + ], + "K32EnumProcessModules": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lphModule", + "type": "HMODULE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "lpcbNeeded", + "type": "LPDWORD" + } + ], + "K32EnumProcessModulesEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lphModule", + "type": "HMODULE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "lpcbNeeded", + "type": "LPDWORD" + }, + { + "name": "dwFilterFlag", + "type": "DWORD" + } + ], + "K32GetModuleBaseNameA": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpBaseName", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetModuleBaseNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpBaseName", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetModuleFileNameExA": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetModuleFileNameExW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpFilename", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetModuleInformation": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpmodinfo", + "type": "LPMODULEINFO" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32EmptyWorkingSet": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "K32QueryWorkingSet": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32QueryWorkingSetEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pv", + "type": "PVOID" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32InitializeProcessForWsWatch": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "K32GetWsChanges": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpWatchInfo", + "type": "PPSAPI_WS_WATCH_INFORMATION" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32GetWsChangesEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpWatchInfoEx", + "type": "PPSAPI_WS_WATCH_INFORMATION_EX" + }, + { + "name": "cb", + "type": "PDWORD" + } + ], + "K32GetMappedFileNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpv", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetMappedFileNameA": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpv", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32EnumDeviceDrivers": [ + { + "name": "lpImageBase", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "lpcbNeeded", + "type": "LPDWORD" + } + ], + "K32GetDeviceDriverBaseNameA": [ + { + "name": "ImageBase", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetDeviceDriverBaseNameW": [ + { + "name": "ImageBase", + "type": "LPVOID" + }, + { + "name": "lpBaseName", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetDeviceDriverFileNameA": [ + { + "name": "ImageBase", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetDeviceDriverFileNameW": [ + { + "name": "ImageBase", + "type": "LPVOID" + }, + { + "name": "lpFilename", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "K32GetProcessMemoryInfo": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "ppsmemCounters", + "type": "PPROCESS_MEMORY_COUNTERS" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32GetPerformanceInfo": [ + { + "name": "pPerformanceInformation", + "type": "PPERFORMANCE_INFORMATION" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "K32EnumPageFilesW": [ + { + "name": "pCallBackRoutine", + "type": "PENUM_PAGE_FILE_CALLBACKW" + }, + { + "name": "pContext", + "type": "LPVOID" + } + ], + "K32EnumPageFilesA": [ + { + "name": "pCallBackRoutine", + "type": "PENUM_PAGE_FILE_CALLBACKA" + }, + { + "name": "pContext", + "type": "LPVOID" + } + ], + "GetCurrentPackageId": [ + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + } + ], + "GetCurrentPackageFullName": [ + { + "name": "packageFullNameLength", + "type": "UINT32" + }, + { + "name": "packageFullName", + "type": "PWSTR" + } + ], + "GetCurrentPackageFamilyName": [ + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "GetCurrentPackagePath": [ + { + "name": "pathLength", + "type": "UINT32" + }, + { + "name": "path", + "type": "PWSTR" + } + ], + "GetPackageId": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + } + ], + "GetPackageFullName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "packageFullNameLength", + "type": "UINT32" + }, + { + "name": "packageFullName", + "type": "PWSTR" + } + ], + "GetPackageFullNameFromToken": [ + { + "name": "token", + "type": "HANDLE" + }, + { + "name": "packageFullNameLength", + "type": "UINT32" + }, + { + "name": "packageFullName", + "type": "PWSTR" + } + ], + "GetPackageFamilyName": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "GetPackageFamilyNameFromToken": [ + { + "name": "token", + "type": "HANDLE" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "GetPackagePath": [ + { + "name": "packageId", + "type": "PACKAGE_ID" + }, + { + "name": "reserved", + "type": "UINT32" + }, + { + "name": "pathLength", + "type": "UINT32" + }, + { + "name": "path", + "type": "PWSTR" + } + ], + "GetPackagePathByFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "pathLength", + "type": "UINT32" + }, + { + "name": "path", + "type": "PWSTR" + } + ], + "GetStagedPackagePathByFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "pathLength", + "type": "UINT32" + }, + { + "name": "path", + "type": "PWSTR" + } + ], + "GetCurrentApplicationUserModelId": [ + { + "name": "applicationUserModelIdLength", + "type": "UINT32" + }, + { + "name": "applicationUserModelId", + "type": "PWSTR" + } + ], + "GetApplicationUserModelId": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "applicationUserModelIdLength", + "type": "UINT32" + }, + { + "name": "applicationUserModelId", + "type": "PWSTR" + } + ], + "GetApplicationUserModelIdFromToken": [ + { + "name": "token", + "type": "HANDLE" + }, + { + "name": "applicationUserModelIdLength", + "type": "UINT32" + }, + { + "name": "applicationUserModelId", + "type": "PWSTR" + } + ], + "PackageIdFromFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + } + ], + "PackageFullNameFromId": [ + { + "name": "packageId", + "type": "PACKAGE_ID" + }, + { + "name": "packageFullNameLength", + "type": "UINT32" + }, + { + "name": "packageFullName", + "type": "PWSTR" + } + ], + "PackageFamilyNameFromId": [ + { + "name": "packageId", + "type": "PACKAGE_ID" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "PackageFamilyNameFromFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + } + ], + "PackageNameAndPublisherIdFromFamilyName": [ + { + "name": "packageFamilyName", + "type": "PCWSTR" + }, + { + "name": "packageNameLength", + "type": "UINT32" + }, + { + "name": "packageName", + "type": "PWSTR" + }, + { + "name": "packagePublisherIdLength", + "type": "UINT32" + }, + { + "name": "packagePublisherId", + "type": "PWSTR" + } + ], + "FormatApplicationUserModelId": [ + { + "name": "packageFamilyName", + "type": "PCWSTR" + }, + { + "name": "packageRelativeApplicationId", + "type": "PCWSTR" + }, + { + "name": "applicationUserModelIdLength", + "type": "UINT32" + }, + { + "name": "applicationUserModelId", + "type": "PWSTR" + } + ], + "ParseApplicationUserModelId": [ + { + "name": "applicationUserModelId", + "type": "PCWSTR" + }, + { + "name": "packageFamilyNameLength", + "type": "UINT32" + }, + { + "name": "packageFamilyName", + "type": "PWSTR" + }, + { + "name": "packageRelativeApplicationIdLength", + "type": "UINT32" + }, + { + "name": "packageRelativeApplicationId", + "type": "PWSTR" + } + ], + "GetPackagesByPackageFamily": [ + { + "name": "packageFamilyName", + "type": "PCWSTR" + }, + { + "name": "count", + "type": "UINT32" + }, + { + "name": "packageFullNames", + "type": "PWSTR" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "WCHAR" + } + ], + "FindPackagesByPackageFamily": [ + { + "name": "packageFamilyName", + "type": "PCWSTR" + }, + { + "name": "packageFilters", + "type": "UINT32" + }, + { + "name": "count", + "type": "UINT32" + }, + { + "name": "packageFullNames", + "type": "PWSTR" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "WCHAR" + }, + { + "name": "packageProperties", + "type": "UINT32" + } + ], + "GetStagedPackageOrigin": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "origin", + "type": "PackageOrigin" + } + ], + "GetCurrentPackageInfo": [ + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + }, + { + "name": "count", + "type": "UINT32" + } + ], + "OpenPackageInfoByFullName": [ + { + "name": "packageFullName", + "type": "PCWSTR" + }, + { + "name": "reserved", + "type": "UINT32" + }, + { + "name": "packageInfoReference", + "type": "PACKAGE_INFO_REFERENCE" + } + ], + "ClosePackageInfo": [ + { + "name": "packageInfoReference", + "type": "PACKAGE_INFO_REFERENCE" + } + ], + "GetPackageInfo": [ + { + "name": "packageInfoReference", + "type": "PACKAGE_INFO_REFERENCE" + }, + { + "name": "flags", + "type": "UINT32" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + }, + { + "name": "count", + "type": "UINT32" + } + ], + "GetPackageApplicationIds": [ + { + "name": "packageInfoReference", + "type": "PACKAGE_INFO_REFERENCE" + }, + { + "name": "bufferLength", + "type": "UINT32" + }, + { + "name": "buffer", + "type": "BYTE" + }, + { + "name": "count", + "type": "UINT32" + } + ], + "CreateIoCompletionPort": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "ExistingCompletionPort", + "type": "HANDLE" + }, + { + "name": "CompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "NumberOfConcurrentThreads", + "type": "DWORD" + } + ], + "GetQueuedCompletionStatus": [ + { + "name": "CompletionPort", + "type": "HANDLE" + }, + { + "name": "lpNumberOfBytesTransferred", + "type": "LPDWORD" + }, + { + "name": "lpCompletionKey", + "type": "PULONG_PTR" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "GetQueuedCompletionStatusEx": [ + { + "name": "CompletionPort", + "type": "HANDLE" + }, + { + "name": "lpCompletionPortEntries", + "type": "LPOVERLAPPED_ENTRY" + }, + { + "name": "ulCount", + "type": "ULONG" + }, + { + "name": "ulNumEntriesRemoved", + "type": "PULONG" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "fAlertable", + "type": "BOOL" + } + ], + "PostQueuedCompletionStatus": [ + { + "name": "CompletionPort", + "type": "HANDLE" + }, + { + "name": "dwNumberOfBytesTransferred", + "type": "DWORD" + }, + { + "name": "dwCompletionKey", + "type": "ULONG_PTR" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "DeviceIoControl": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwIoControlCode", + "type": "DWORD" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetOverlappedResult": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpNumberOfBytesTransferred", + "type": "LPDWORD" + }, + { + "name": "bWait", + "type": "BOOL" + } + ], + "CancelIoEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "CancelIo": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "GetOverlappedResultEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpNumberOfBytesTransferred", + "type": "LPDWORD" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "CancelSynchronousIo": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "SystemTimeToTzSpecificLocalTime": [ + { + "name": "lpTimeZoneInformation", + "type": "TIME_ZONE_INFORMATION" + }, + { + "name": "lpUniversalTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpLocalTime", + "type": "LPSYSTEMTIME" + } + ], + "TzSpecificLocalTimeToSystemTime": [ + { + "name": "lpTimeZoneInformation", + "type": "TIME_ZONE_INFORMATION" + }, + { + "name": "lpLocalTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpUniversalTime", + "type": "LPSYSTEMTIME" + } + ], + "FileTimeToSystemTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "SystemTimeToFileTime": [ + { + "name": "lpSystemTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpFileTime", + "type": "LPFILETIME" + } + ], + "GetTimeZoneInformation": [ + { + "name": "lpTimeZoneInformation", + "type": "LPTIME_ZONE_INFORMATION" + } + ], + "SetTimeZoneInformation": [ + { + "name": "lpTimeZoneInformation", + "type": "TIME_ZONE_INFORMATION" + } + ], + "SetDynamicTimeZoneInformation": [ + { + "name": "lpTimeZoneInformation", + "type": "DYNAMIC_TIME_ZONE_INFORMATION" + } + ], + "GetDynamicTimeZoneInformation": [ + { + "name": "pTimeZoneInformation", + "type": "PDYNAMIC_TIME_ZONE_INFORMATION" + } + ], + "GetTimeZoneInformationForYear": [ + { + "name": "wYear", + "type": "USHORT" + }, + { + "name": "pdtzi", + "type": "PDYNAMIC_TIME_ZONE_INFORMATION" + }, + { + "name": "ptzi", + "type": "LPTIME_ZONE_INFORMATION" + } + ], + "EnumDynamicTimeZoneInformation": [ + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "lpTimeZoneInformation", + "type": "PDYNAMIC_TIME_ZONE_INFORMATION" + } + ], + "GetDynamicTimeZoneInformationEffectiveYears": [ + { + "name": "lpTimeZoneInformation", + "type": "PDYNAMIC_TIME_ZONE_INFORMATION" + }, + { + "name": "FirstYear", + "type": "LPDWORD" + }, + { + "name": "LastYear", + "type": "LPDWORD" + } + ], + "SystemTimeToTzSpecificLocalTimeEx": [ + { + "name": "lpTimeZoneInformation", + "type": "DYNAMIC_TIME_ZONE_INFORMATION" + }, + { + "name": "lpUniversalTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpLocalTime", + "type": "LPSYSTEMTIME" + } + ], + "TzSpecificLocalTimeToSystemTimeEx": [ + { + "name": "lpTimeZoneInformation", + "type": "DYNAMIC_TIME_ZONE_INFORMATION" + }, + { + "name": "lpLocalTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpUniversalTime", + "type": "LPSYSTEMTIME" + } + ], + "HeapCreate": [ + { + "name": "flOptions", + "type": "DWORD" + }, + { + "name": "dwInitialSize", + "type": "SIZE_T" + }, + { + "name": "dwMaximumSize", + "type": "SIZE_T" + } + ], + "HeapDestroy": [ + { + "name": "hHeap", + "type": "HANDLE" + } + ], + "HeapAlloc": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwBytes", + "type": "SIZE_T" + } + ], + "HeapReAlloc": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMem", + "type": "LPVOID" + }, + { + "name": "dwBytes", + "type": "SIZE_T" + } + ], + "HeapFree": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMem", + "type": "LPVOID" + } + ], + "HeapSize": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMem", + "type": "LPCVOID" + } + ], + "GetProcessHeap": [ + { + "name": "VOID", + "type": "void" + } + ], + "HeapCompact": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "HeapSetInformation": [ + { + "name": "HeapHandle", + "type": "HANDLE" + }, + { + "name": "HeapInformationClass", + "type": "HEAP_INFORMATION_CLASS" + }, + { + "name": "HeapInformation", + "type": "PVOID" + }, + { + "name": "HeapInformationLength", + "type": "SIZE_T" + } + ], + "HeapValidate": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMem", + "type": "LPCVOID" + } + ], + "GetProcessHeaps": [ + { + "name": "NumberOfHeaps", + "type": "DWORD" + }, + { + "name": "ProcessHeaps", + "type": "PHANDLE" + } + ], + "HeapLock": [ + { + "name": "hHeap", + "type": "HANDLE" + } + ], + "HeapUnlock": [ + { + "name": "hHeap", + "type": "HANDLE" + } + ], + "HeapWalk": [ + { + "name": "hHeap", + "type": "HANDLE" + }, + { + "name": "lpEntry", + "type": "LPPROCESS_HEAP_ENTRY" + } + ], + "HeapQueryInformation": [ + { + "name": "HeapHandle", + "type": "HANDLE" + }, + { + "name": "HeapInformationClass", + "type": "HEAP_INFORMATION_CLASS" + }, + { + "name": "HeapInformation", + "type": "PVOID" + }, + { + "name": "HeapInformationLength", + "type": "SIZE_T" + }, + { + "name": "ReturnLength", + "type": "PSIZE_T" + } + ], + "QueueUserAPC": [ + { + "name": "pfnAPC", + "type": "PAPCFUNC" + }, + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwData", + "type": "ULONG_PTR" + } + ], + "GetProcessTimes": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpCreationTime", + "type": "LPFILETIME" + }, + { + "name": "lpExitTime", + "type": "LPFILETIME" + }, + { + "name": "lpKernelTime", + "type": "LPFILETIME" + }, + { + "name": "lpUserTime", + "type": "LPFILETIME" + } + ], + "GetCurrentProcess": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCurrentProcessId": [ + { + "name": "VOID", + "type": "void" + } + ], + "ExitProcess": [ + { + "name": "uExitCode", + "type": "UINT" + } + ], + "TerminateProcess": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "uExitCode", + "type": "UINT" + } + ], + "GetExitCodeProcess": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpExitCode", + "type": "LPDWORD" + } + ], + "SwitchToThread": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateThread": [ + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwStackSize", + "type": "SIZE_T" + }, + { + "name": "lpStartAddress", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpThreadId", + "type": "LPDWORD" + } + ], + "CreateRemoteThread": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwStackSize", + "type": "SIZE_T" + }, + { + "name": "lpStartAddress", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpThreadId", + "type": "LPDWORD" + } + ], + "GetCurrentThread": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCurrentThreadId": [ + { + "name": "VOID", + "type": "void" + } + ], + "OpenThread": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "dwThreadId", + "type": "DWORD" + } + ], + "SetThreadPriority": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "nPriority", + "type": "int" + } + ], + "SetThreadPriorityBoost": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "bDisablePriorityBoost", + "type": "BOOL" + } + ], + "GetThreadPriorityBoost": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "pDisablePriorityBoost", + "type": "PBOOL" + } + ], + "GetThreadPriority": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "ExitThread": [ + { + "name": "dwExitCode", + "type": "DWORD" + } + ], + "TerminateThread": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwExitCode", + "type": "DWORD" + } + ], + "GetExitCodeThread": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpExitCode", + "type": "LPDWORD" + } + ], + "SuspendThread": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "ResumeThread": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "CreateProcessA": [ + { + "name": "lpApplicationName", + "type": "LPCSTR" + }, + { + "name": "lpCommandLine", + "type": "LPSTR" + }, + { + "name": "lpProcessAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInheritHandles", + "type": "BOOL" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOA" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "CreateProcessW": [ + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpCommandLine", + "type": "LPWSTR" + }, + { + "name": "lpProcessAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInheritHandles", + "type": "BOOL" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpEnvironment", + "type": "LPVOID" + }, + { + "name": "lpCurrentDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + }, + { + "name": "lpProcessInformation", + "type": "LPPROCESS_INFORMATION" + } + ], + "SetProcessShutdownParameters": [ + { + "name": "dwLevel", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetProcessVersion": [ + { + "name": "ProcessId", + "type": "DWORD" + } + ], + "GetStartupInfoW": [ + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOW" + } + ], + "SetPriorityClass": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwPriorityClass", + "type": "DWORD" + } + ], + "GetPriorityClass": [ + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "SetThreadStackGuarantee": [ + { + "name": "StackSizeInBytes", + "type": "PULONG" + } + ], + "ProcessIdToSessionId": [ + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "pSessionId", + "type": "DWORD" + } + ], + "GetProcessId": [ + { + "name": "Process", + "type": "HANDLE" + } + ], + "GetThreadId": [ + { + "name": "Thread", + "type": "HANDLE" + } + ], + "FlushProcessWriteBuffers": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetProcessIdOfThread": [ + { + "name": "Thread", + "type": "HANDLE" + } + ], + "InitializeProcThreadAttributeList": [ + { + "name": "lpAttributeList", + "type": "LPPROC_THREAD_ATTRIBUTE_LIST" + }, + { + "name": "dwAttributeCount", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpSize", + "type": "PSIZE_T" + } + ], + "DeleteProcThreadAttributeList": [ + { + "name": "lpAttributeList", + "type": "LPPROC_THREAD_ATTRIBUTE_LIST" + } + ], + "UpdateProcThreadAttribute": [ + { + "name": "lpAttributeList", + "type": "LPPROC_THREAD_ATTRIBUTE_LIST" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "Attribute", + "type": "DWORD_PTR" + }, + { + "name": "lpValue", + "type": "PVOID" + }, + { + "name": "cbSize", + "type": "SIZE_T" + }, + { + "name": "lpPreviousValue", + "type": "PVOID" + }, + { + "name": "lpReturnSize", + "type": "PSIZE_T" + } + ], + "SetProcessAffinityUpdateMode": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "QueryProcessAffinityUpdateMode": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ], + "CreateRemoteThreadEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpThreadAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwStackSize", + "type": "SIZE_T" + }, + { + "name": "lpStartAddress", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "dwCreationFlags", + "type": "DWORD" + }, + { + "name": "lpAttributeList", + "type": "LPPROC_THREAD_ATTRIBUTE_LIST" + }, + { + "name": "lpThreadId", + "type": "LPDWORD" + } + ], + "GetCurrentThreadStackLimits": [ + { + "name": "LowLimit", + "type": "PULONG_PTR" + }, + { + "name": "HighLimit", + "type": "PULONG_PTR" + } + ], + "GetThreadContext": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpContext", + "type": "LPCONTEXT" + } + ], + "GetProcessMitigationPolicy": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "MitigationPolicy", + "type": "PROCESS_MITIGATION_POLICY" + }, + { + "name": "lpBuffer", + "type": "PVOID" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "SetThreadContext": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpContext", + "type": "CONTEXT" + } + ], + "SetProcessMitigationPolicy": [ + { + "name": "MitigationPolicy", + "type": "PROCESS_MITIGATION_POLICY" + }, + { + "name": "lpBuffer", + "type": "PVOID" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "FlushInstructionCache": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + } + ], + "GetThreadTimes": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpCreationTime", + "type": "LPFILETIME" + }, + { + "name": "lpExitTime", + "type": "LPFILETIME" + }, + { + "name": "lpKernelTime", + "type": "LPFILETIME" + }, + { + "name": "lpUserTime", + "type": "LPFILETIME" + } + ], + "OpenProcess": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "IsProcessorFeaturePresent": [ + { + "name": "ProcessorFeature", + "type": "DWORD" + } + ], + "GetProcessHandleCount": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pdwHandleCount", + "type": "PDWORD" + } + ], + "GetCurrentProcessorNumber": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadIdealProcessorEx": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpIdealProcessor", + "type": "PPROCESSOR_NUMBER" + }, + { + "name": "lpPreviousIdealProcessor", + "type": "PPROCESSOR_NUMBER" + } + ], + "GetThreadIdealProcessorEx": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpIdealProcessor", + "type": "PPROCESSOR_NUMBER" + } + ], + "GetCurrentProcessorNumberEx": [ + { + "name": "ProcNumber", + "type": "PPROCESSOR_NUMBER" + } + ], + "GetProcessPriorityBoost": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pDisablePriorityBoost", + "type": "PBOOL" + } + ], + "SetProcessPriorityBoost": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "bDisablePriorityBoost", + "type": "BOOL" + } + ], + "GetThreadIOPendingFlag": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpIOIsPending", + "type": "PBOOL" + } + ], + "GetSystemTimes": [ + { + "name": "lpIdleTime", + "type": "PFILETIME" + }, + { + "name": "lpKernelTime", + "type": "PFILETIME" + }, + { + "name": "lpUserTime", + "type": "PFILETIME" + } + ], + "GetThreadInformation": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "ThreadInformationClass", + "type": "THREAD_INFORMATION_CLASS" + }, + { + "name": "ThreadInformation", + "type": "LPVOID" + }, + { + "name": "ThreadInformationSize", + "type": "DWORD" + } + ], + "SetThreadInformation": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "ThreadInformationClass", + "type": "THREAD_INFORMATION_CLASS" + }, + { + "name": "ThreadInformation", + "type": "LPVOID" + }, + { + "name": "ThreadInformationSize", + "type": "DWORD" + } + ], + "SetProtectedPolicy": [ + { + "name": "PolicyGuid", + "type": "LPCGUID" + }, + { + "name": "PolicyValue", + "type": "ULONG_PTR" + }, + { + "name": "OldPolicyValue", + "type": "PULONG_PTR" + } + ], + "QueryProtectedPolicy": [ + { + "name": "PolicyGuid", + "type": "LPCGUID" + }, + { + "name": "PolicyValue", + "type": "PULONG_PTR" + } + ], + "SetThreadIdealProcessor": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwIdealProcessor", + "type": "DWORD" + } + ], + "SetProcessInformation": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ProcessInformationClass", + "type": "PROCESS_INFORMATION_CLASS" + }, + { + "name": "ProcessInformation", + "type": "LPVOID" + }, + { + "name": "ProcessInformationSize", + "type": "DWORD" + } + ], + "GetProcessInformation": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "ProcessInformationClass", + "type": "PROCESS_INFORMATION_CLASS" + }, + { + "name": "ProcessInformation", + "type": "LPVOID" + }, + { + "name": "ProcessInformationSize", + "type": "DWORD" + } + ], + "GetProcessShutdownParameters": [ + { + "name": "lpdwLevel", + "type": "LPDWORD" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ], + "SetThreadDescription": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpThreadDescription", + "type": "PCWSTR" + } + ], + "GetThreadDescription": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "ppszThreadDescription", + "type": "PWSTR" + } + ], + "GetStartupInfoA": [ + { + "name": "lpStartupInfo", + "type": "LPSTARTUPINFOA" + } + ], + "VirtualAlloc": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flAllocationType", + "type": "DWORD" + }, + { + "name": "flProtect", + "type": "DWORD" + } + ], + "VirtualProtect": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flNewProtect", + "type": "DWORD" + }, + { + "name": "lpflOldProtect", + "type": "PDWORD" + } + ], + "VirtualFree": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "dwFreeType", + "type": "DWORD" + } + ], + "VirtualQuery": [ + { + "name": "lpAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "PMEMORY_BASIC_INFORMATION" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "VirtualAllocEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flAllocationType", + "type": "DWORD" + }, + { + "name": "flProtect", + "type": "DWORD" + } + ], + "VirtualProtectEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flNewProtect", + "type": "DWORD" + }, + { + "name": "lpflOldProtect", + "type": "PDWORD" + } + ], + "VirtualQueryEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "PMEMORY_BASIC_INFORMATION" + }, + { + "name": "dwLength", + "type": "SIZE_T" + } + ], + "ReadProcessMemory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nSize", + "type": "SIZE_T" + }, + { + "name": "lpNumberOfBytesRead", + "type": "SIZE_T" + } + ], + "WriteProcessMemory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpBaseAddress", + "type": "LPVOID" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nSize", + "type": "SIZE_T" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "SIZE_T" + } + ], + "MapViewOfFile": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwNumberOfBytesToMap", + "type": "SIZE_T" + } + ], + "MapViewOfFileEx": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwNumberOfBytesToMap", + "type": "SIZE_T" + }, + { + "name": "lpBaseAddress", + "type": "LPVOID" + } + ], + "VirtualFreeEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "dwFreeType", + "type": "DWORD" + } + ], + "FlushViewOfFile": [ + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "dwNumberOfBytesToFlush", + "type": "SIZE_T" + } + ], + "UnmapViewOfFile": [ + { + "name": "lpBaseAddress", + "type": "LPCVOID" + } + ], + "GetLargePageMinimum": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetProcessWorkingSetSizeEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpMinimumWorkingSetSize", + "type": "PSIZE_T" + }, + { + "name": "lpMaximumWorkingSetSize", + "type": "PSIZE_T" + }, + { + "name": "Flags", + "type": "PDWORD" + } + ], + "SetProcessWorkingSetSizeEx": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwMinimumWorkingSetSize", + "type": "SIZE_T" + }, + { + "name": "dwMaximumWorkingSetSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "VirtualLock": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + } + ], + "VirtualUnlock": [ + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + } + ], + "GetWriteWatch": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpBaseAddress", + "type": "PVOID" + }, + { + "name": "dwRegionSize", + "type": "SIZE_T" + }, + { + "name": "lpAddresses", + "type": "PVOID" + }, + { + "name": "lpdwCount", + "type": "ULONG_PTR" + }, + { + "name": "lpdwGranularity", + "type": "LPDWORD" + } + ], + "ResetWriteWatch": [ + { + "name": "lpBaseAddress", + "type": "LPVOID" + }, + { + "name": "dwRegionSize", + "type": "SIZE_T" + } + ], + "CreateMemoryResourceNotification": [ + { + "name": "NotificationType", + "type": "MEMORY_RESOURCE_NOTIFICATION_TYPE" + } + ], + "QueryMemoryResourceNotification": [ + { + "name": "ResourceNotificationHandle", + "type": "HANDLE" + }, + { + "name": "ResourceState", + "type": "PBOOL" + } + ], + "GetSystemFileCacheSize": [ + { + "name": "lpMinimumFileCacheSize", + "type": "PSIZE_T" + }, + { + "name": "lpMaximumFileCacheSize", + "type": "PSIZE_T" + }, + { + "name": "lpFlags", + "type": "PDWORD" + } + ], + "SetSystemFileCacheSize": [ + { + "name": "MinimumFileCacheSize", + "type": "SIZE_T" + }, + { + "name": "MaximumFileCacheSize", + "type": "SIZE_T" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "PrefetchVirtualMemory": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfEntries", + "type": "ULONG_PTR" + }, + { + "name": "VirtualAddresses", + "type": "PWIN32_MEMORY_RANGE_ENTRY" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "CreateFileMappingFromApp": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "SecurityAttributes", + "type": "PSECURITY_ATTRIBUTES" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "MaximumSize", + "type": "ULONG64" + }, + { + "name": "Name", + "type": "PCWSTR" + } + ], + "MapViewOfFileFromApp": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "DesiredAccess", + "type": "ULONG" + }, + { + "name": "FileOffset", + "type": "ULONG64" + }, + { + "name": "NumberOfBytesToMap", + "type": "SIZE_T" + } + ], + "UnmapViewOfFileEx": [ + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "UnmapFlags", + "type": "ULONG" + } + ], + "AllocateUserPhysicalPages": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfPages", + "type": "PULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "FreeUserPhysicalPages": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfPages", + "type": "PULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "MapUserPhysicalPages": [ + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "NumberOfPages", + "type": "ULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "AllocateUserPhysicalPagesNuma": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "NumberOfPages", + "type": "PULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "VirtualAllocExNuma": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpAddress", + "type": "LPVOID" + }, + { + "name": "dwSize", + "type": "SIZE_T" + }, + { + "name": "flAllocationType", + "type": "DWORD" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "GetMemoryErrorHandlingCapabilities": [ + { + "name": "Capabilities", + "type": "PULONG" + } + ], + "RegisterBadMemoryNotification": [ + { + "name": "Callback", + "type": "PBAD_MEMORY_CALLBACK_ROUTINE" + } + ], + "UnregisterBadMemoryNotification": [ + { + "name": "RegistrationHandle", + "type": "PVOID" + } + ], + "OfferVirtualMemory": [ + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "Priority", + "type": "OFFER_PRIORITY" + } + ], + "ReclaimVirtualMemory": [ + { + "name": "VirtualAddress", + "type": "void" + }, + { + "name": "Size", + "type": "SIZE_T" + } + ], + "DiscardVirtualMemory": [ + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + } + ], + "VirtualAllocFromApp": [ + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "Protection", + "type": "ULONG" + } + ], + "VirtualProtectFromApp": [ + { + "name": "Address", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "NewProtection", + "type": "ULONG" + }, + { + "name": "OldProtection", + "type": "PULONG" + } + ], + "OpenFileMappingFromApp": [ + { + "name": "DesiredAccess", + "type": "ULONG" + }, + { + "name": "InheritHandle", + "type": "BOOL" + }, + { + "name": "Name", + "type": "PCWSTR" + } + ], + "MapViewOfFile2": [ + { + "name": "FileMappingHandle", + "type": "HANDLE" + }, + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + } + ], + "UnmapViewOfFile2": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "UnmapFlags", + "type": "ULONG" + } + ], + "VirtualAlloc2": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "MapViewOfFile3": [ + { + "name": "FileMapping", + "type": "HANDLE" + }, + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "VirtualAlloc2FromApp": [ + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Size", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "MapViewOfFile3FromApp": [ + { + "name": "FileMapping", + "type": "HANDLE" + }, + { + "name": "Process", + "type": "HANDLE" + }, + { + "name": "BaseAddress", + "type": "PVOID" + }, + { + "name": "Offset", + "type": "ULONG64" + }, + { + "name": "ViewSize", + "type": "SIZE_T" + }, + { + "name": "AllocationType", + "type": "ULONG" + }, + { + "name": "PageProtection", + "type": "ULONG" + }, + { + "name": "ExtendedParameters", + "type": "MEM_EXTENDED_PARAMETER" + }, + { + "name": "ParameterCount", + "type": "ULONG" + } + ], + "Wow64DisableWow64FsRedirection": [ + { + "name": "OldValue", + "type": "PVOID" + } + ], + "Wow64RevertWow64FsRedirection": [ + { + "name": "OlValue", + "type": "PVOID" + } + ], + "IsWow64Process": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Wow64Process", + "type": "PBOOL" + } + ], + "GetSystemWow64DirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemWow64DirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "IsWow64Process2": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pProcessMachine", + "type": "USHORT" + }, + { + "name": "pNativeMachine", + "type": "USHORT" + } + ], + "GetDurationFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDuration", + "type": "SYSTEMTIME" + }, + { + "name": "ullDuration", + "type": "ULONGLONG" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpDurationStr", + "type": "LPWSTR" + }, + { + "name": "cchDuration", + "type": "int" + } + ], + "CompareStringW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwCmpFlags", + "type": "DWORD" + }, + { + "name": "lpString1", + "type": "PCNZWCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "PCNZWCH" + }, + { + "name": "cchCount2", + "type": "int" + } + ], + "FoldStringW": [ + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWCH" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPWSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "IsValidCodePage": [ + { + "name": "CodePage", + "type": "UINT" + } + ], + "GetACP": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetOEMCP": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCPInfo": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "lpCPInfo", + "type": "LPCPINFO" + } + ], + "GetCPInfoExA": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpCPInfoEx", + "type": "LPCPINFOEXA" + } + ], + "GetCPInfoExW": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpCPInfoEx", + "type": "LPCPINFOEXW" + } + ], + "CompareStringA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwCmpFlags", + "type": "DWORD" + }, + { + "name": "lpString1", + "type": "PCNZCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "PCNZCH" + }, + { + "name": "cchCount2", + "type": "int" + } + ], + "FindNLSString": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFindNLSStringFlags", + "type": "DWORD" + }, + { + "name": "lpStringSource", + "type": "LPCWSTR" + }, + { + "name": "cchSource", + "type": "int" + }, + { + "name": "lpStringValue", + "type": "LPCWSTR" + }, + { + "name": "cchValue", + "type": "int" + }, + { + "name": "pcchFound", + "type": "LPINT" + } + ], + "LCMapStringW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPWSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "LCMapStringA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "GetLocaleInfoW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + } + ], + "GetLocaleInfoA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPSTR" + }, + { + "name": "cchData", + "type": "int" + } + ], + "SetLocaleInfoA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPCSTR" + } + ], + "SetLocaleInfoW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPCWSTR" + } + ], + "GetCalendarInfoA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "lpValue", + "type": "LPDWORD" + } + ], + "GetCalendarInfoW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "lpValue", + "type": "LPDWORD" + } + ], + "SetCalendarInfoA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPCSTR" + } + ], + "SetCalendarInfoW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPCWSTR" + } + ], + "LoadStringByReference": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Language", + "type": "PCWSTR" + }, + { + "name": "SourceString", + "type": "PCWSTR" + }, + { + "name": "Buffer", + "type": "PWSTR" + }, + { + "name": "cchBuffer", + "type": "ULONG" + }, + { + "name": "Directory", + "type": "PCWSTR" + }, + { + "name": "pcchBufferOut", + "type": "PULONG" + } + ], + "IsDBCSLeadByte": [ + { + "name": "TestChar", + "type": "BYTE" + } + ], + "IsDBCSLeadByteEx": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "TestChar", + "type": "BYTE" + } + ], + "LocaleNameToLCID": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "LCIDToLocaleName": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "lpName", + "type": "LPWSTR" + }, + { + "name": "cchName", + "type": "int" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetDurationFormat": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDuration", + "type": "SYSTEMTIME" + }, + { + "name": "ullDuration", + "type": "ULONGLONG" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpDurationStr", + "type": "LPWSTR" + }, + { + "name": "cchDuration", + "type": "int" + } + ], + "GetNumberFormatA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCSTR" + }, + { + "name": "lpFormat", + "type": "NUMBERFMTA" + }, + { + "name": "lpNumberStr", + "type": "LPSTR" + }, + { + "name": "cchNumber", + "type": "int" + } + ], + "GetNumberFormatW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "lpFormat", + "type": "NUMBERFMTW" + }, + { + "name": "lpNumberStr", + "type": "LPWSTR" + }, + { + "name": "cchNumber", + "type": "int" + } + ], + "GetCurrencyFormatA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCSTR" + }, + { + "name": "lpFormat", + "type": "CURRENCYFMTA" + }, + { + "name": "lpCurrencyStr", + "type": "LPSTR" + }, + { + "name": "cchCurrency", + "type": "int" + } + ], + "GetCurrencyFormatW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "lpFormat", + "type": "CURRENCYFMTW" + }, + { + "name": "lpCurrencyStr", + "type": "LPWSTR" + }, + { + "name": "cchCurrency", + "type": "int" + } + ], + "EnumCalendarInfoA": [ + { + "name": "lpCalInfoEnumProc", + "type": "CALINFO_ENUMPROCA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + } + ], + "EnumCalendarInfoW": [ + { + "name": "lpCalInfoEnumProc", + "type": "CALINFO_ENUMPROCW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + } + ], + "EnumCalendarInfoExA": [ + { + "name": "lpCalInfoEnumProcEx", + "type": "CALINFO_ENUMPROCEXA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + } + ], + "EnumCalendarInfoExW": [ + { + "name": "lpCalInfoEnumProcEx", + "type": "CALINFO_ENUMPROCEXW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "CalType", + "type": "CALTYPE" + } + ], + "EnumTimeFormatsA": [ + { + "name": "lpTimeFmtEnumProc", + "type": "TIMEFMT_ENUMPROCA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumTimeFormatsW": [ + { + "name": "lpTimeFmtEnumProc", + "type": "TIMEFMT_ENUMPROCW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDateFormatsA": [ + { + "name": "lpDateFmtEnumProc", + "type": "DATEFMT_ENUMPROCA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDateFormatsW": [ + { + "name": "lpDateFmtEnumProc", + "type": "DATEFMT_ENUMPROCW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDateFormatsExA": [ + { + "name": "lpDateFmtEnumProcEx", + "type": "DATEFMT_ENUMPROCEXA" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumDateFormatsExW": [ + { + "name": "lpDateFmtEnumProcEx", + "type": "DATEFMT_ENUMPROCEXW" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "IsValidLanguageGroup": [ + { + "name": "LanguageGroup", + "type": "LGRPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetNLSVersion": [ + { + "name": "Function", + "type": "NLS_FUNCTION" + }, + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + } + ], + "IsValidLocale": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetGeoInfoA": [ + { + "name": "Location", + "type": "GEOID" + }, + { + "name": "GeoType", + "type": "GEOTYPE" + }, + { + "name": "lpGeoData", + "type": "LPSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "GetGeoInfoW": [ + { + "name": "Location", + "type": "GEOID" + }, + { + "name": "GeoType", + "type": "GEOTYPE" + }, + { + "name": "lpGeoData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "GetGeoInfoEx": [ + { + "name": "location", + "type": "PWSTR" + }, + { + "name": "geoType", + "type": "GEOTYPE" + }, + { + "name": "geoData", + "type": "PWSTR" + }, + { + "name": "geoDataCount", + "type": "int" + } + ], + "EnumSystemGeoID": [ + { + "name": "GeoClass", + "type": "GEOCLASS" + }, + { + "name": "ParentGeoId", + "type": "GEOID" + }, + { + "name": "lpGeoEnumProc", + "type": "GEO_ENUMPROC" + } + ], + "EnumSystemGeoNames": [ + { + "name": "geoClass", + "type": "GEOCLASS" + }, + { + "name": "geoEnumProc", + "type": "GEO_ENUMNAMEPROC" + }, + { + "name": "data", + "type": "LPARAM" + } + ], + "GetUserGeoID": [ + { + "name": "GeoClass", + "type": "GEOCLASS" + } + ], + "GetUserDefaultGeoName": [ + { + "name": "geoName", + "type": "LPWSTR" + }, + { + "name": "geoNameCount", + "type": "int" + } + ], + "SetUserGeoID": [ + { + "name": "GeoId", + "type": "GEOID" + } + ], + "SetUserGeoName": [ + { + "name": "geoName", + "type": "PWSTR" + } + ], + "ConvertDefaultLocale": [ + { + "name": "Locale", + "type": "LCID" + } + ], + "GetSystemDefaultUILanguage": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetThreadLocale": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadLocale": [ + { + "name": "Locale", + "type": "LCID" + } + ], + "GetUserDefaultUILanguage": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetUserDefaultLangID": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemDefaultLangID": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemDefaultLCID": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetUserDefaultLCID": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadUILanguage": [ + { + "name": "LangId", + "type": "LANGID" + } + ], + "GetThreadUILanguage": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetProcessPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PZZWSTR" + }, + { + "name": "pcchLanguagesBuffer", + "type": "PULONG" + } + ], + "SetProcessPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PCZZWSTR" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + } + ], + "GetUserPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PZZWSTR" + }, + { + "name": "pcchLanguagesBuffer", + "type": "PULONG" + } + ], + "GetSystemPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PZZWSTR" + }, + { + "name": "pcchLanguagesBuffer", + "type": "PULONG" + } + ], + "GetThreadPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PZZWSTR" + }, + { + "name": "pcchLanguagesBuffer", + "type": "PULONG" + } + ], + "SetThreadPreferredUILanguages": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwszLanguagesBuffer", + "type": "PCZZWSTR" + }, + { + "name": "pulNumLanguages", + "type": "PULONG" + } + ], + "GetFileMUIInfo": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pcwszFilePath", + "type": "PCWSTR" + }, + { + "name": "pFileMUIInfo", + "type": "PFILEMUIINFO" + }, + { + "name": "pcbFileMUIInfo", + "type": "DWORD" + } + ], + "GetFileMUIPath": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pcwszFilePath", + "type": "PCWSTR" + }, + { + "name": "pwszLanguage", + "type": "PWSTR" + }, + { + "name": "pcchLanguage", + "type": "PULONG" + }, + { + "name": "pwszFileMUIPath", + "type": "PWSTR" + }, + { + "name": "pcchFileMUIPath", + "type": "PULONG" + }, + { + "name": "pululEnumerator", + "type": "PULONGLONG" + } + ], + "GetUILanguageInfo": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pwmszLanguage", + "type": "PCZZWSTR" + }, + { + "name": "pwszFallbackLanguages", + "type": "PZZWSTR" + }, + { + "name": "pcchFallbackLanguages", + "type": "PDWORD" + }, + { + "name": "pAttributes", + "type": "PDWORD" + } + ], + "NotifyUILanguageChange": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pcwstrNewLanguage", + "type": "PCWSTR" + }, + { + "name": "pcwstrPreviousLanguage", + "type": "PCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pdwStatusRtrn", + "type": "PDWORD" + } + ], + "GetStringTypeA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpCharType", + "type": "LPWORD" + } + ], + "FoldStringA": [ + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPSTR" + }, + { + "name": "cchDest", + "type": "int" + } + ], + "EnumSystemLocalesA": [ + { + "name": "lpLocaleEnumProc", + "type": "LOCALE_ENUMPROCA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumSystemLocalesW": [ + { + "name": "lpLocaleEnumProc", + "type": "LOCALE_ENUMPROCW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumSystemLanguageGroupsA": [ + { + "name": "lpLanguageGroupEnumProc", + "type": "LANGUAGEGROUP_ENUMPROCA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumSystemLanguageGroupsW": [ + { + "name": "lpLanguageGroupEnumProc", + "type": "LANGUAGEGROUP_ENUMPROCW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumLanguageGroupLocalesA": [ + { + "name": "lpLangGroupLocaleEnumProc", + "type": "LANGGROUPLOCALE_ENUMPROCA" + }, + { + "name": "LanguageGroup", + "type": "LGRPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumLanguageGroupLocalesW": [ + { + "name": "lpLangGroupLocaleEnumProc", + "type": "LANGGROUPLOCALE_ENUMPROCW" + }, + { + "name": "LanguageGroup", + "type": "LGRPID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumUILanguagesA": [ + { + "name": "lpUILanguageEnumProc", + "type": "UILANGUAGE_ENUMPROCA" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumUILanguagesW": [ + { + "name": "lpUILanguageEnumProc", + "type": "UILANGUAGE_ENUMPROCW" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumSystemCodePagesA": [ + { + "name": "lpCodePageEnumProc", + "type": "CODEPAGE_ENUMPROCA" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "EnumSystemCodePagesW": [ + { + "name": "lpCodePageEnumProc", + "type": "CODEPAGE_ENUMPROCW" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "VerifyScripts": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpLocaleScripts", + "type": "LPCWSTR" + }, + { + "name": "cchLocaleScripts", + "type": "int" + }, + { + "name": "lpTestScripts", + "type": "LPCWSTR" + }, + { + "name": "cchTestScripts", + "type": "int" + } + ], + "GetStringScripts": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "cchString", + "type": "int" + }, + { + "name": "lpScripts", + "type": "LPWSTR" + }, + { + "name": "cchScripts", + "type": "int" + } + ], + "GetLocaleInfoEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "LCType", + "type": "LCTYPE" + }, + { + "name": "lpLCData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + } + ], + "GetCalendarInfoEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "lpReserved", + "type": "LPCWSTR" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lpCalData", + "type": "LPWSTR" + }, + { + "name": "cchData", + "type": "int" + }, + { + "name": "lpValue", + "type": "LPDWORD" + } + ], + "GetNumberFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "lpFormat", + "type": "NUMBERFMTW" + }, + { + "name": "lpNumberStr", + "type": "LPWSTR" + }, + { + "name": "cchNumber", + "type": "int" + } + ], + "GetCurrencyFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + }, + { + "name": "lpFormat", + "type": "CURRENCYFMTW" + }, + { + "name": "lpCurrencyStr", + "type": "LPWSTR" + }, + { + "name": "cchCurrency", + "type": "int" + } + ], + "GetUserDefaultLocaleName": [ + { + "name": "lpLocaleName", + "type": "LPWSTR" + }, + { + "name": "cchLocaleName", + "type": "int" + } + ], + "GetSystemDefaultLocaleName": [ + { + "name": "lpLocaleName", + "type": "LPWSTR" + }, + { + "name": "cchLocaleName", + "type": "int" + } + ], + "IsNLSDefinedString": [ + { + "name": "Function", + "type": "NLS_FUNCTION" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "cchStr", + "type": "INT" + } + ], + "GetNLSVersionEx": [ + { + "name": "function", + "type": "NLS_FUNCTION" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFOEX" + } + ], + "IsValidNLSVersion": [ + { + "name": "function", + "type": "NLS_FUNCTION" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFOEX" + } + ], + "FindNLSStringEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFindNLSStringFlags", + "type": "DWORD" + }, + { + "name": "lpStringSource", + "type": "LPCWSTR" + }, + { + "name": "cchSource", + "type": "int" + }, + { + "name": "lpStringValue", + "type": "LPCWSTR" + }, + { + "name": "cchValue", + "type": "int" + }, + { + "name": "pcchFound", + "type": "LPINT" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "sortHandle", + "type": "LPARAM" + } + ], + "LCMapStringEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwMapFlags", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpDestStr", + "type": "LPWSTR" + }, + { + "name": "cchDest", + "type": "int" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "sortHandle", + "type": "LPARAM" + } + ], + "IsValidLocaleName": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + } + ], + "EnumCalendarInfoExEx": [ + { + "name": "pCalInfoEnumProcExEx", + "type": "CALINFO_ENUMPROCEXEX" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "Calendar", + "type": "CALID" + }, + { + "name": "lpReserved", + "type": "LPCWSTR" + }, + { + "name": "CalType", + "type": "CALTYPE" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumDateFormatsExEx": [ + { + "name": "lpDateFmtEnumProcExEx", + "type": "DATEFMT_ENUMPROCEXEX" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumTimeFormatsEx": [ + { + "name": "lpTimeFmtEnumProcEx", + "type": "TIMEFMT_ENUMPROCEX" + }, + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "EnumSystemLocalesEx": [ + { + "name": "lpLocaleEnumProcEx", + "type": "LOCALE_ENUMPROCEX" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "ResolveLocaleName": [ + { + "name": "lpNameToResolve", + "type": "LPCWSTR" + }, + { + "name": "lpLocaleName", + "type": "LPWSTR" + }, + { + "name": "cchLocaleName", + "type": "int" + } + ], + "GetProcessGroupAffinity": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "GroupCount", + "type": "PUSHORT" + }, + { + "name": "GroupArray", + "type": "PUSHORT" + } + ], + "GetThreadGroupAffinity": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "GroupAffinity", + "type": "PGROUP_AFFINITY" + } + ], + "SetThreadGroupAffinity": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "GroupAffinity", + "type": "GROUP_AFFINITY" + }, + { + "name": "PreviousGroupAffinity", + "type": "PGROUP_AFFINITY" + } + ], + "FlsAlloc": [ + { + "name": "lpCallback", + "type": "PFLS_CALLBACK_FUNCTION" + } + ], + "FlsGetValue": [ + { + "name": "dwFlsIndex", + "type": "DWORD" + } + ], + "FlsSetValue": [ + { + "name": "dwFlsIndex", + "type": "DWORD" + }, + { + "name": "lpFlsData", + "type": "PVOID" + } + ], + "FlsFree": [ + { + "name": "dwFlsIndex", + "type": "DWORD" + } + ], + "IsThreadAFiber": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterWaitUntilOOBECompleted": [ + { + "name": "OOBECompletedCallback", + "type": "OOBE_COMPLETED_CALLBACK" + }, + { + "name": "CallbackContext", + "type": "PVOID" + }, + { + "name": "WaitHandle", + "type": "PVOID" + } + ], + "UnregisterWaitUntilOOBECompleted": [ + { + "name": "WaitHandle", + "type": "PVOID" + } + ], + "GetDateFormatA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDate", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCSTR" + }, + { + "name": "lpDateStr", + "type": "LPSTR" + }, + { + "name": "cchDate", + "type": "int" + } + ], + "GetDateFormatW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDate", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpDateStr", + "type": "LPWSTR" + }, + { + "name": "cchDate", + "type": "int" + } + ], + "GetTimeFormatA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCSTR" + }, + { + "name": "lpTimeStr", + "type": "LPSTR" + }, + { + "name": "cchTime", + "type": "int" + } + ], + "GetTimeFormatW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpTimeStr", + "type": "LPWSTR" + }, + { + "name": "cchTime", + "type": "int" + } + ], + "GetTimeFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpTime", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpTimeStr", + "type": "LPWSTR" + }, + { + "name": "cchTime", + "type": "int" + } + ], + "GetDateFormatEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDate", + "type": "SYSTEMTIME" + }, + { + "name": "lpFormat", + "type": "LPCWSTR" + }, + { + "name": "lpDateStr", + "type": "LPWSTR" + }, + { + "name": "cchDate", + "type": "int" + }, + { + "name": "lpCalendar", + "type": "LPCWSTR" + } + ], + "QueryThreadCycleTime": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "CycleTime", + "type": "PULONG64" + } + ], + "QueryProcessCycleTime": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "CycleTime", + "type": "PULONG64" + } + ], + "QueryIdleProcessorCycleTime": [ + { + "name": "BufferLength", + "type": "PULONG" + }, + { + "name": "ProcessorIdleCycleTime", + "type": "PULONG64" + } + ], + "QueryIdleProcessorCycleTimeEx": [ + { + "name": "Group", + "type": "USHORT" + }, + { + "name": "BufferLength", + "type": "PULONG" + }, + { + "name": "ProcessorIdleCycleTime", + "type": "PULONG64" + } + ], + "QueryInterruptTimePrecise": [ + { + "name": "lpInterruptTimePrecise", + "type": "PULONGLONG" + } + ], + "QueryUnbiasedInterruptTimePrecise": [ + { + "name": "lpUnbiasedInterruptTimePrecise", + "type": "PULONGLONG" + } + ], + "QueryInterruptTime": [ + { + "name": "lpInterruptTime", + "type": "PULONGLONG" + } + ], + "QueryUnbiasedInterruptTime": [ + { + "name": "UnbiasedTime", + "type": "PULONGLONG" + } + ], + "QueryAuxiliaryCounterFrequency": [ + { + "name": "lpAuxiliaryCounterFrequency", + "type": "PULONGLONG" + } + ], + "ConvertAuxiliaryCounterToPerformanceCounter": [ + { + "name": "ullAuxiliaryCounterValue", + "type": "ULONGLONG" + }, + { + "name": "lpPerformanceCounterValue", + "type": "PULONGLONG" + }, + { + "name": "lpConversionError", + "type": "PULONGLONG" + } + ], + "ConvertPerformanceCounterToAuxiliaryCounter": [ + { + "name": "ullPerformanceCounterValue", + "type": "ULONGLONG" + }, + { + "name": "lpAuxiliaryCounterValue", + "type": "PULONGLONG" + }, + { + "name": "lpConversionError", + "type": "PULONGLONG" + } + ], + "IsDebuggerPresent": [ + { + "name": "VOID", + "type": "void" + } + ], + "DebugBreak": [ + { + "name": "VOID", + "type": "void" + } + ], + "OutputDebugStringA": [ + { + "name": "lpOutputString", + "type": "LPCSTR" + } + ], + "OutputDebugStringW": [ + { + "name": "lpOutputString", + "type": "LPCWSTR" + } + ], + "ContinueDebugEvent": [ + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "dwThreadId", + "type": "DWORD" + }, + { + "name": "dwContinueStatus", + "type": "DWORD" + } + ], + "WaitForDebugEvent": [ + { + "name": "lpDebugEvent", + "type": "LPDEBUG_EVENT" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "DebugActiveProcess": [ + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "DebugActiveProcessStop": [ + { + "name": "dwProcessId", + "type": "DWORD" + } + ], + "CheckRemoteDebuggerPresent": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pbDebuggerPresent", + "type": "PBOOL" + } + ], + "WaitForDebugEventEx": [ + { + "name": "lpDebugEvent", + "type": "LPDEBUG_EVENT" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "AddResourceAttributeAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + }, + { + "name": "pAttributeInfo", + "type": "PCLAIM_SECURITY_ATTRIBUTES_INFORMATION" + }, + { + "name": "pReturnLength", + "type": "PDWORD" + } + ], + "AddScopedPolicyIDAce": [ + { + "name": "pAcl", + "type": "PACL" + }, + { + "name": "dwAceRevision", + "type": "DWORD" + }, + { + "name": "AceFlags", + "type": "DWORD" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "pSid", + "type": "PSID" + } + ], + "CheckTokenCapability": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "CapabilitySidToCheck", + "type": "PSID" + }, + { + "name": "HasCapability", + "type": "PBOOL" + } + ], + "CheckTokenMembershipEx": [ + { + "name": "TokenHandle", + "type": "HANDLE" + }, + { + "name": "SidToCheck", + "type": "PSID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "IsMember", + "type": "PBOOL" + } + ], + "DeriveCapabilitySidsFromName": [ + { + "name": "CapName", + "type": "LPCWSTR" + }, + { + "name": "CapabilityGroupSids", + "type": "PSID" + }, + { + "name": "CapabilityGroupSidCount", + "type": "DWORD" + }, + { + "name": "CapabilitySids", + "type": "PSID" + }, + { + "name": "CapabilitySidCount", + "type": "DWORD" + } + ], + "DisableThreadLibraryCalls": [ + { + "name": "hLibModule", + "type": "HMODULE" + } + ], + "FindStringOrdinal": [ + { + "name": "dwFindStringOrdinalFlags", + "type": "DWORD" + }, + { + "name": "lpStringSource", + "type": "LPCWSTR" + }, + { + "name": "cchSource", + "type": "int" + }, + { + "name": "lpStringValue", + "type": "LPCWSTR" + }, + { + "name": "cchValue", + "type": "int" + }, + { + "name": "bIgnoreCase", + "type": "BOOL" + } + ], + "FreeLibrary": [ + { + "name": "hLibModule", + "type": "HMODULE" + } + ], + "FreeLibraryAndExitThread": [ + { + "name": "hLibModule", + "type": "HMODULE" + }, + { + "name": "dwExitCode", + "type": "DWORD" + } + ], + "FreeResource": [ + { + "name": "hResData", + "type": "HGLOBAL" + } + ], + "GetModuleFileNameA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpFilename", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetModuleFileNameW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpFilename", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetModuleHandleA": [ + { + "name": "lpModuleName", + "type": "LPCSTR" + } + ], + "GetModuleHandleW": [ + { + "name": "lpModuleName", + "type": "LPCWSTR" + } + ], + "GetModuleHandleExA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpModuleName", + "type": "LPCSTR" + }, + { + "name": "phModule", + "type": "HMODULE" + } + ], + "GetModuleHandleExW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpModuleName", + "type": "LPCWSTR" + }, + { + "name": "phModule", + "type": "HMODULE" + } + ], + "GetProcAddress": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpProcName", + "type": "LPCSTR" + } + ], + "LoadLibraryExA": [ + { + "name": "lpLibFileName", + "type": "LPCSTR" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "LoadLibraryExW": [ + { + "name": "lpLibFileName", + "type": "LPCWSTR" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "LoadResource": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "hResInfo", + "type": "HRSRC" + } + ], + "LockResource": [ + { + "name": "hResData", + "type": "HGLOBAL" + } + ], + "SizeofResource": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "hResInfo", + "type": "HRSRC" + } + ], + "AddDllDirectory": [ + { + "name": "NewDirectory", + "type": "PCWSTR" + } + ], + "RemoveDllDirectory": [ + { + "name": "Cookie", + "type": "DLL_DIRECTORY_COOKIE" + } + ], + "SetDefaultDllDirectories": [ + { + "name": "DirectoryFlags", + "type": "DWORD" + } + ], + "EnumResourceLanguagesExA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESLANGPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceLanguagesExW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESLANGPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceNamesExA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESNAMEPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceNamesExW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESNAMEPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceTypesExA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESTYPEPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "EnumResourceTypesExW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESTYPEPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "LangId", + "type": "LANGID" + } + ], + "LoadLibraryA": [ + { + "name": "lpLibFileName", + "type": "LPCSTR" + } + ], + "LoadLibraryW": [ + { + "name": "lpLibFileName", + "type": "LPCWSTR" + } + ], + "QueryPerformanceCounter": [ + { + "name": "lpPerformanceCount", + "type": "LARGE_INTEGER" + } + ], + "QueryPerformanceFrequency": [ + { + "name": "lpFrequency", + "type": "LARGE_INTEGER" + } + ], + "FreeMemoryJobObject": [ + { + "name": "Buffer", + "type": "void" + } + ], + "AssignProcessToJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "hProcess", + "type": "HANDLE" + } + ], + "TerminateJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "uExitCode", + "type": "UINT" + } + ], + "SetInformationJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "JobObjectInformationClass", + "type": "JOBOBJECTINFOCLASS" + }, + { + "name": "lpJobObjectInformation", + "type": "LPVOID" + }, + { + "name": "cbJobObjectInformationLength", + "type": "DWORD" + } + ], + "SetIoRateControlInformationJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "IoRateControlInfo", + "type": "JOBOBJECT_IO_RATE_CONTROL_INFORMATION" + } + ], + "QueryInformationJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "JobObjectInformationClass", + "type": "JOBOBJECTINFOCLASS" + }, + { + "name": "lpJobObjectInformation", + "type": "LPVOID" + }, + { + "name": "cbJobObjectInformationLength", + "type": "DWORD" + }, + { + "name": "lpReturnLength", + "type": "LPDWORD" + } + ], + "QueryIoRateControlInformationJobObject": [ + { + "name": "hJob", + "type": "HANDLE" + }, + { + "name": "VolumeName", + "type": "PCWSTR" + }, + { + "name": "InfoBlocks", + "type": "JOBOBJECT_IO_RATE_CONTROL_INFORMATION" + }, + { + "name": "InfoBlockCount", + "type": "ULONG" + } + ], + "CompareStringEx": [ + { + "name": "lpLocaleName", + "type": "LPCWSTR" + }, + { + "name": "dwCmpFlags", + "type": "DWORD" + }, + { + "name": "lpString1", + "type": "LPCWCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "LPCWCH" + }, + { + "name": "cchCount2", + "type": "int" + }, + { + "name": "lpVersionInformation", + "type": "LPNLSVERSIONINFO" + }, + { + "name": "lpReserved", + "type": "LPVOID" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "CompareStringOrdinal": [ + { + "name": "lpString1", + "type": "LPCWCH" + }, + { + "name": "cchCount1", + "type": "int" + }, + { + "name": "lpString2", + "type": "LPCWCH" + }, + { + "name": "cchCount2", + "type": "int" + }, + { + "name": "bIgnoreCase", + "type": "BOOL" + } + ], + "GetStringTypeExW": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWCH" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpCharType", + "type": "LPWORD" + } + ], + "GetStringTypeW": [ + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCWCH" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpCharType", + "type": "LPWORD" + } + ], + "MultiByteToWideChar": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpMultiByteStr", + "type": "LPCCH" + }, + { + "name": "cbMultiByte", + "type": "int" + }, + { + "name": "lpWideCharStr", + "type": "LPWSTR" + }, + { + "name": "cchWideChar", + "type": "int" + } + ], + "WideCharToMultiByte": [ + { + "name": "CodePage", + "type": "UINT" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpWideCharStr", + "type": "LPCWCH" + }, + { + "name": "cchWideChar", + "type": "int" + }, + { + "name": "lpMultiByteStr", + "type": "LPSTR" + }, + { + "name": "cbMultiByte", + "type": "int" + }, + { + "name": "lpDefaultChar", + "type": "LPCCH" + }, + { + "name": "lpUsedDefaultChar", + "type": "LPBOOL" + } + ], + "GetStringTypeExA": [ + { + "name": "Locale", + "type": "LCID" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "lpSrcStr", + "type": "LPCSTR" + }, + { + "name": "cchSrc", + "type": "int" + }, + { + "name": "lpCharType", + "type": "LPWORD" + } + ], + "ClosePrivateNamespace": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "AddSIDToBoundaryDescriptor": [ + { + "name": "BoundaryDescriptor", + "type": "HANDLE" + }, + { + "name": "RequiredSid", + "type": "PSID" + } + ], + "DeleteBoundaryDescriptor": [ + { + "name": "BoundaryDescriptor", + "type": "HANDLE" + } + ], + "PssCaptureSnapshot": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "CaptureFlags", + "type": "PSS_CAPTURE_FLAGS" + }, + { + "name": "ThreadContextFlags", + "type": "DWORD" + }, + { + "name": "SnapshotHandle", + "type": "HPSS" + } + ], + "PssFreeSnapshot": [ + { + "name": "ProcessHandle", + "type": "HANDLE" + }, + { + "name": "SnapshotHandle", + "type": "HPSS" + } + ], + "PssQuerySnapshot": [ + { + "name": "SnapshotHandle", + "type": "HPSS" + }, + { + "name": "InformationClass", + "type": "PSS_QUERY_INFORMATION_CLASS" + }, + { + "name": "Buffer", + "type": "void" + }, + { + "name": "BufferLength", + "type": "DWORD" + } + ], + "PssWalkSnapshot": [ + { + "name": "SnapshotHandle", + "type": "HPSS" + }, + { + "name": "InformationClass", + "type": "PSS_WALK_INFORMATION_CLASS" + }, + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + }, + { + "name": "Buffer", + "type": "void" + }, + { + "name": "BufferLength", + "type": "DWORD" + } + ], + "PssDuplicateSnapshot": [ + { + "name": "SourceProcessHandle", + "type": "HANDLE" + }, + { + "name": "SnapshotHandle", + "type": "HPSS" + }, + { + "name": "TargetProcessHandle", + "type": "HANDLE" + }, + { + "name": "TargetSnapshotHandle", + "type": "HPSS" + }, + { + "name": "Flags", + "type": "PSS_DUPLICATE_FLAGS" + } + ], + "PssWalkMarkerCreate": [ + { + "name": "Allocator", + "type": "PSS_ALLOCATOR" + }, + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + } + ], + "PssWalkMarkerFree": [ + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + } + ], + "PssWalkMarkerGetPosition": [ + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + }, + { + "name": "Position", + "type": "ULONG_PTR" + } + ], + "PssWalkMarkerSetPosition": [ + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + }, + { + "name": "Position", + "type": "ULONG_PTR" + } + ], + "PssWalkMarkerSeekToBeginning": [ + { + "name": "WalkMarkerHandle", + "type": "HPSSWALK" + } + ], + "CreatePipe": [ + { + "name": "hReadPipe", + "type": "PHANDLE" + }, + { + "name": "hWritePipe", + "type": "PHANDLE" + }, + { + "name": "lpPipeAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "ConnectNamedPipe": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "DisconnectNamedPipe": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + } + ], + "SetNamedPipeHandleState": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpMode", + "type": "LPDWORD" + }, + { + "name": "lpMaxCollectionCount", + "type": "LPDWORD" + }, + { + "name": "lpCollectDataTimeout", + "type": "LPDWORD" + } + ], + "PeekNamedPipe": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesRead", + "type": "LPDWORD" + }, + { + "name": "lpTotalBytesAvail", + "type": "LPDWORD" + }, + { + "name": "lpBytesLeftThisMessage", + "type": "LPDWORD" + } + ], + "TransactNamedPipe": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesRead", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetNamedPipeInfo": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpFlags", + "type": "LPDWORD" + }, + { + "name": "lpOutBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpInBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpMaxInstances", + "type": "LPDWORD" + } + ], + "RaiseException": [ + { + "name": "dwExceptionCode", + "type": "DWORD" + }, + { + "name": "dwExceptionFlags", + "type": "DWORD" + }, + { + "name": "nNumberOfArguments", + "type": "DWORD" + }, + { + "name": "lpArguments", + "type": "ULONG_PTR" + } + ], + "UnhandledExceptionFilter": [ + { + "name": "ExceptionInfo", + "type": { + "name": "_EXCEPTION_POINTERS", + "data_type": "Struct", + "elements": [] + } + } + ], + "SetUnhandledExceptionFilter": [ + { + "name": "lpTopLevelExceptionFilter", + "type": "LPTOP_LEVEL_EXCEPTION_FILTER" + } + ], + "GetLastError": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetLastError": [ + { + "name": "dwErrCode", + "type": "DWORD" + } + ], + "GetErrorMode": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetErrorMode": [ + { + "name": "uMode", + "type": "UINT" + } + ], + "AddVectoredExceptionHandler": [ + { + "name": "First", + "type": "ULONG" + }, + { + "name": "Handler", + "type": "PVECTORED_EXCEPTION_HANDLER" + } + ], + "RemoveVectoredExceptionHandler": [ + { + "name": "Handle", + "type": "PVOID" + } + ], + "AddVectoredContinueHandler": [ + { + "name": "First", + "type": "ULONG" + }, + { + "name": "Handler", + "type": "PVECTORED_EXCEPTION_HANDLER" + } + ], + "RemoveVectoredContinueHandler": [ + { + "name": "Handle", + "type": "PVOID" + } + ], + "RaiseFailFastException": [ + { + "name": "pExceptionRecord", + "type": "PEXCEPTION_RECORD" + }, + { + "name": "pContextRecord", + "type": "PCONTEXT" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "FatalAppExitA": [ + { + "name": "uAction", + "type": "UINT" + }, + { + "name": "lpMessageText", + "type": "LPCSTR" + } + ], + "FatalAppExitW": [ + { + "name": "uAction", + "type": "UINT" + }, + { + "name": "lpMessageText", + "type": "LPCWSTR" + } + ], + "GetThreadErrorMode": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetThreadErrorMode": [ + { + "name": "dwNewMode", + "type": "DWORD" + }, + { + "name": "lpOldMode", + "type": "LPDWORD" + } + ], + "QueueUserWorkItem": [ + { + "name": "Function", + "type": "LPTHREAD_START_ROUTINE" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "UnregisterWaitEx": [ + { + "name": "WaitHandle", + "type": "HANDLE" + }, + { + "name": "CompletionEvent", + "type": "HANDLE" + } + ], + "CreateTimerQueue": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateTimerQueueTimer": [ + { + "name": "phNewTimer", + "type": "PHANDLE" + }, + { + "name": "TimerQueue", + "type": "HANDLE" + }, + { + "name": "Callback", + "type": "WAITORTIMERCALLBACK" + }, + { + "name": "Parameter", + "type": "PVOID" + }, + { + "name": "DueTime", + "type": "DWORD" + }, + { + "name": "Period", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "ChangeTimerQueueTimer": [ + { + "name": "TimerQueue", + "type": "HANDLE" + }, + { + "name": "Timer", + "type": "HANDLE" + }, + { + "name": "DueTime", + "type": "ULONG" + }, + { + "name": "Period", + "type": "ULONG" + } + ], + "DeleteTimerQueueTimer": [ + { + "name": "TimerQueue", + "type": "HANDLE" + }, + { + "name": "Timer", + "type": "HANDLE" + }, + { + "name": "CompletionEvent", + "type": "HANDLE" + } + ], + "DeleteTimerQueueEx": [ + { + "name": "TimerQueue", + "type": "HANDLE" + }, + { + "name": "CompletionEvent", + "type": "HANDLE" + } + ], + "uaw_wcslen": [ + { + "name": "String", + "type": "PCUWSTR" + } + ], + "GetEnvironmentVariableA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetEnvironmentVariableW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "SetEnvironmentVariableA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpValue", + "type": "LPCSTR" + } + ], + "SetEnvironmentVariableW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpValue", + "type": "LPCWSTR" + } + ], + "SetCurrentDirectoryA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + } + ], + "SetCurrentDirectoryW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + } + ], + "GetCurrentDirectoryA": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + } + ], + "GetCurrentDirectoryW": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + } + ], + "CreateDirectoryA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDirectoryW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "DefineDosDeviceW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDeviceName", + "type": "LPCWSTR" + }, + { + "name": "lpTargetPath", + "type": "LPCWSTR" + } + ], + "DeleteFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "DeleteFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "DeleteVolumeMountPointW": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCWSTR" + } + ], + "FindFirstVolumeW": [ + { + "name": "lpszVolumeName", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindNextVolumeW": [ + { + "name": "hFindVolume", + "type": "HANDLE" + }, + { + "name": "lpszVolumeName", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "GetLogicalDriveStringsW": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + } + ], + "GetShortPathNameW": [ + { + "name": "lpszLongPath", + "type": "LPCWSTR" + }, + { + "name": "lpszShortPath", + "type": "LPWSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + } + ], + "GetTempFileNameW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + }, + { + "name": "lpPrefixString", + "type": "LPCWSTR" + }, + { + "name": "uUnique", + "type": "UINT" + }, + { + "name": "lpTempFileName", + "type": "LPWSTR" + } + ], + "GetVolumePathNameW": [ + { + "name": "lpszFileName", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumePathName", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "QueryDosDeviceW": [ + { + "name": "lpDeviceName", + "type": "LPCWSTR" + }, + { + "name": "lpTargetPath", + "type": "LPWSTR" + }, + { + "name": "ucchMax", + "type": "DWORD" + } + ], + "GetVolumeNameForVolumeMountPointW": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumeName", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "GetVolumePathNamesForVolumeNameW": [ + { + "name": "lpszVolumeName", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumePathNames", + "type": "LPWCH" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + }, + { + "name": "lpcchReturnLength", + "type": "PDWORD" + } + ], + "GetTempFileNameA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "lpPrefixString", + "type": "LPCSTR" + }, + { + "name": "uUnique", + "type": "UINT" + }, + { + "name": "lpTempFileName", + "type": "LPSTR" + } + ], + "CreateNamedPipeW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwOpenMode", + "type": "DWORD" + }, + { + "name": "dwPipeMode", + "type": "DWORD" + }, + { + "name": "nMaxInstances", + "type": "DWORD" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "nDefaultTimeOut", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "WaitNamedPipeW": [ + { + "name": "lpNamedPipeName", + "type": "LPCWSTR" + }, + { + "name": "nTimeOut", + "type": "DWORD" + } + ], + "GetNamedPipeClientComputerNameW": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ClientComputerName", + "type": "LPWSTR" + }, + { + "name": "ClientComputerNameLength", + "type": "ULONG" + } + ], + "GetNamedPipeHandleStateW": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpState", + "type": "LPDWORD" + }, + { + "name": "lpCurInstances", + "type": "LPDWORD" + }, + { + "name": "lpMaxCollectionCount", + "type": "LPDWORD" + }, + { + "name": "lpCollectDataTimeout", + "type": "LPDWORD" + }, + { + "name": "lpUserName", + "type": "LPWSTR" + }, + { + "name": "nMaxUserNameSize", + "type": "DWORD" + } + ], + "CallNamedPipeW": [ + { + "name": "lpNamedPipeName", + "type": "LPCWSTR" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesRead", + "type": "LPDWORD" + }, + { + "name": "nTimeOut", + "type": "DWORD" + } + ], + "CreateSemaphoreExW": [ + { + "name": "lpSemaphoreAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lInitialCount", + "type": "LONG" + }, + { + "name": "lMaximumCount", + "type": "LONG" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateSemaphoreW": [ + { + "name": "lpSemaphoreAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lInitialCount", + "type": "LONG" + }, + { + "name": "lMaximumCount", + "type": "LONG" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "CreateFileMappingW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileMappingAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeHigh", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeLow", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenFileMappingW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "CreateFileMappingNumaW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileMappingAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeHigh", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeLow", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "CreateJobObjectW": [ + { + "name": "lpJobAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenJobObjectW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "Wow64GetThreadContext": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpContext", + "type": "PWOW64_CONTEXT" + } + ], + "Wow64SetThreadContext": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "lpContext", + "type": "WOW64_CONTEXT" + } + ], + "Wow64SuspendThread": [ + { + "name": "hThread", + "type": "HANDLE" + } + ], + "FindResourceExW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "wLanguage", + "type": "WORD" + } + ], + "FindResourceW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpType", + "type": "LPCWSTR" + } + ], + "EnumResourceNamesW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESNAMEPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "CreatePrivateNamespaceW": [ + { + "name": "lpPrivateNamespaceAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpBoundaryDescriptor", + "type": "LPVOID" + }, + { + "name": "lpAliasPrefix", + "type": "LPCWSTR" + } + ], + "OpenPrivateNamespaceW": [ + { + "name": "lpBoundaryDescriptor", + "type": "LPVOID" + }, + { + "name": "lpAliasPrefix", + "type": "LPCWSTR" + } + ], + "CreateBoundaryDescriptorW": [ + { + "name": "Name", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "GlobalAlloc": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "dwBytes", + "type": "SIZE_T" + } + ], + "GlobalReAlloc": [ + { + "name": "hMem", + "type": "HGLOBAL" + }, + { + "name": "dwBytes", + "type": "SIZE_T" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "GlobalSize": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalUnlock": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalLock": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalFlags": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalHandle": [ + { + "name": "pMem", + "type": "LPCVOID" + } + ], + "GlobalFree": [ + { + "name": "hMem", + "type": "HGLOBAL" + } + ], + "GlobalMemoryStatus": [ + { + "name": "lpBuffer", + "type": "LPMEMORYSTATUS" + } + ], + "LocalAlloc": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "uBytes", + "type": "SIZE_T" + } + ], + "LocalReAlloc": [ + { + "name": "hMem", + "type": "HLOCAL" + }, + { + "name": "uBytes", + "type": "SIZE_T" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "LocalLock": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "LocalHandle": [ + { + "name": "pMem", + "type": "LPCVOID" + } + ], + "LocalUnlock": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "LocalSize": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "LocalFlags": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "LocalFree": [ + { + "name": "hMem", + "type": "HLOCAL" + } + ], + "GetBinaryTypeA": [ + { + "name": "lpApplicationName", + "type": "LPCSTR" + }, + { + "name": "lpBinaryType", + "type": "LPDWORD" + } + ], + "GetBinaryTypeW": [ + { + "name": "lpApplicationName", + "type": "LPCWSTR" + }, + { + "name": "lpBinaryType", + "type": "LPDWORD" + } + ], + "GetShortPathNameA": [ + { + "name": "lpszLongPath", + "type": "LPCSTR" + }, + { + "name": "lpszShortPath", + "type": "LPSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + } + ], + "GetLongPathNameTransactedA": [ + { + "name": "lpszShortPath", + "type": "LPCSTR" + }, + { + "name": "lpszLongPath", + "type": "LPSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetLongPathNameTransactedW": [ + { + "name": "lpszShortPath", + "type": "LPCWSTR" + }, + { + "name": "lpszLongPath", + "type": "LPWSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetProcessAffinityMask": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpProcessAffinityMask", + "type": "PDWORD_PTR" + }, + { + "name": "lpSystemAffinityMask", + "type": "PDWORD_PTR" + } + ], + "SetProcessAffinityMask": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwProcessAffinityMask", + "type": "DWORD_PTR" + } + ], + "GetProcessIoCounters": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpIoCounters", + "type": "PIO_COUNTERS" + } + ], + "GetProcessWorkingSetSize": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpMinimumWorkingSetSize", + "type": "PSIZE_T" + }, + { + "name": "lpMaximumWorkingSetSize", + "type": "PSIZE_T" + } + ], + "SetProcessWorkingSetSize": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwMinimumWorkingSetSize", + "type": "SIZE_T" + }, + { + "name": "dwMaximumWorkingSetSize", + "type": "SIZE_T" + } + ], + "FatalExit": [ + { + "name": "ExitCode", + "type": "int" + } + ], + "SwitchToFiber": [ + { + "name": "lpFiber", + "type": "LPVOID" + } + ], + "DeleteFiber": [ + { + "name": "lpFiber", + "type": "LPVOID" + } + ], + "ConvertFiberToThread": [ + { + "name": "VOID", + "type": "void" + } + ], + "CreateFiberEx": [ + { + "name": "dwStackCommitSize", + "type": "SIZE_T" + }, + { + "name": "dwStackReserveSize", + "type": "SIZE_T" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpStartAddress", + "type": "LPFIBER_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + } + ], + "ConvertThreadToFiberEx": [ + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CreateFiber": [ + { + "name": "dwStackSize", + "type": "SIZE_T" + }, + { + "name": "lpStartAddress", + "type": "LPFIBER_START_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + } + ], + "ConvertThreadToFiber": [ + { + "name": "lpParameter", + "type": "LPVOID" + } + ], + "CreateUmsCompletionList": [ + { + "name": "UmsCompletionList", + "type": "PUMS_COMPLETION_LIST" + } + ], + "DequeueUmsCompletionListItems": [ + { + "name": "UmsCompletionList", + "type": "PUMS_COMPLETION_LIST" + }, + { + "name": "WaitTimeOut", + "type": "DWORD" + }, + { + "name": "UmsThreadList", + "type": "PUMS_CONTEXT" + } + ], + "GetUmsCompletionListEvent": [ + { + "name": "UmsCompletionList", + "type": "PUMS_COMPLETION_LIST" + }, + { + "name": "UmsCompletionEvent", + "type": "PHANDLE" + } + ], + "ExecuteUmsThread": [ + { + "name": "UmsThread", + "type": "PUMS_CONTEXT" + } + ], + "UmsThreadYield": [ + { + "name": "SchedulerParam", + "type": "PVOID" + } + ], + "DeleteUmsCompletionList": [ + { + "name": "UmsCompletionList", + "type": "PUMS_COMPLETION_LIST" + } + ], + "GetCurrentUmsThread": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetNextUmsListItem": [ + { + "name": "UmsContext", + "type": "PUMS_CONTEXT" + } + ], + "QueryUmsThreadInformation": [ + { + "name": "UmsThread", + "type": "PUMS_CONTEXT" + }, + { + "name": "UmsThreadInfoClass", + "type": "UMS_THREAD_INFO_CLASS" + }, + { + "name": "UmsThreadInformation", + "type": "PVOID" + }, + { + "name": "UmsThreadInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "SetUmsThreadInformation": [ + { + "name": "UmsThread", + "type": "PUMS_CONTEXT" + }, + { + "name": "UmsThreadInfoClass", + "type": "UMS_THREAD_INFO_CLASS" + }, + { + "name": "UmsThreadInformation", + "type": "PVOID" + }, + { + "name": "UmsThreadInformationLength", + "type": "ULONG" + } + ], + "DeleteUmsThreadContext": [ + { + "name": "UmsThread", + "type": "PUMS_CONTEXT" + } + ], + "CreateUmsThreadContext": [ + { + "name": "lpUmsThread", + "type": "PUMS_CONTEXT" + } + ], + "EnterUmsSchedulingMode": [ + { + "name": "SchedulerStartupInfo", + "type": "PUMS_SCHEDULER_STARTUP_INFO" + } + ], + "GetUmsSystemThreadInformation": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "SystemThreadInfo", + "type": "PUMS_SYSTEM_THREAD_INFORMATION" + } + ], + "SetThreadAffinityMask": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwThreadAffinityMask", + "type": "DWORD_PTR" + } + ], + "SetProcessDEPPolicy": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetProcessDEPPolicy": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "lpFlags", + "type": "LPDWORD" + }, + { + "name": "lpPermanent", + "type": "PBOOL" + } + ], + "RequestWakeupLatency": [ + { + "name": "latency", + "type": "LATENCY_TIME" + } + ], + "IsSystemResumeAutomatic": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetThreadSelectorEntry": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwSelector", + "type": "DWORD" + }, + { + "name": "lpSelectorEntry", + "type": "LPLDT_ENTRY" + } + ], + "SetThreadExecutionState": [ + { + "name": "esFlags", + "type": "EXECUTION_STATE" + } + ], + "PowerCreateRequest": [ + { + "name": "Context", + "type": "PREASON_CONTEXT" + } + ], + "PowerSetRequest": [ + { + "name": "PowerRequest", + "type": "HANDLE" + }, + { + "name": "RequestType", + "type": "POWER_REQUEST_TYPE" + } + ], + "PowerClearRequest": [ + { + "name": "PowerRequest", + "type": "HANDLE" + }, + { + "name": "RequestType", + "type": "POWER_REQUEST_TYPE" + } + ], + "SetFileCompletionNotificationModes": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "UCHAR" + } + ], + "Wow64GetThreadSelectorEntry": [ + { + "name": "hThread", + "type": "HANDLE" + }, + { + "name": "dwSelector", + "type": "DWORD" + }, + { + "name": "lpSelectorEntry", + "type": "PWOW64_LDT_ENTRY" + } + ], + "DebugSetProcessKillOnExit": [ + { + "name": "KillOnExit", + "type": "BOOL" + } + ], + "DebugBreakProcess": [ + { + "name": "Process", + "type": "HANDLE" + } + ], + "PulseEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "GlobalDeleteAtom": [ + { + "name": "nAtom", + "type": "ATOM" + } + ], + "InitAtomTable": [ + { + "name": "nSize", + "type": "DWORD" + } + ], + "DeleteAtom": [ + { + "name": "nAtom", + "type": "ATOM" + } + ], + "SetHandleCount": [ + { + "name": "uNumber", + "type": "UINT" + } + ], + "GetDevicePowerState": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "pfOn", + "type": "BOOL" + } + ], + "SetFileShortNameA": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpShortName", + "type": "LPCSTR" + } + ], + "SetFileShortNameW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpShortName", + "type": "LPCWSTR" + } + ], + "LoadModule": [ + { + "name": "lpModuleName", + "type": "LPCSTR" + }, + { + "name": "lpParameterBlock", + "type": "LPVOID" + } + ], + "WinExec": [ + { + "name": "lpCmdLine", + "type": "LPCSTR" + }, + { + "name": "uCmdShow", + "type": "UINT" + } + ], + "ClearCommBreak": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "ClearCommError": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpErrors", + "type": "LPDWORD" + }, + { + "name": "lpStat", + "type": "LPCOMSTAT" + } + ], + "SetupComm": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwInQueue", + "type": "DWORD" + }, + { + "name": "dwOutQueue", + "type": "DWORD" + } + ], + "EscapeCommFunction": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFunc", + "type": "DWORD" + } + ], + "GetCommConfig": [ + { + "name": "hCommDev", + "type": "HANDLE" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "GetCommMask": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpEvtMask", + "type": "LPDWORD" + } + ], + "GetCommProperties": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCommProp", + "type": "LPCOMMPROP" + } + ], + "GetCommModemStatus": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpModemStat", + "type": "LPDWORD" + } + ], + "GetCommState": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpDCB", + "type": "LPDCB" + } + ], + "GetCommTimeouts": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCommTimeouts", + "type": "LPCOMMTIMEOUTS" + } + ], + "PurgeComm": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SetCommBreak": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SetCommConfig": [ + { + "name": "hCommDev", + "type": "HANDLE" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "SetCommMask": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwEvtMask", + "type": "DWORD" + } + ], + "SetCommState": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpDCB", + "type": "LPDCB" + } + ], + "SetCommTimeouts": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCommTimeouts", + "type": "LPCOMMTIMEOUTS" + } + ], + "TransmitCommChar": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "cChar", + "type": "char" + } + ], + "WaitCommEvent": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpEvtMask", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "SetTapePosition": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwPositionMethod", + "type": "DWORD" + }, + { + "name": "dwPartition", + "type": "DWORD" + }, + { + "name": "dwOffsetLow", + "type": "DWORD" + }, + { + "name": "dwOffsetHigh", + "type": "DWORD" + }, + { + "name": "bImmediate", + "type": "BOOL" + } + ], + "GetTapePosition": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwPositionType", + "type": "DWORD" + }, + { + "name": "lpdwPartition", + "type": "LPDWORD" + }, + { + "name": "lpdwOffsetLow", + "type": "LPDWORD" + }, + { + "name": "lpdwOffsetHigh", + "type": "LPDWORD" + } + ], + "PrepareTape": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "bImmediate", + "type": "BOOL" + } + ], + "EraseTape": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwEraseType", + "type": "DWORD" + }, + { + "name": "bImmediate", + "type": "BOOL" + } + ], + "CreateTapePartition": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwPartitionMethod", + "type": "DWORD" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "WriteTapemark": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwTapemarkType", + "type": "DWORD" + }, + { + "name": "dwTapemarkCount", + "type": "DWORD" + }, + { + "name": "bImmediate", + "type": "BOOL" + } + ], + "GetTapeStatus": [ + { + "name": "hDevice", + "type": "HANDLE" + } + ], + "GetTapeParameters": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + }, + { + "name": "lpTapeInformation", + "type": "LPVOID" + } + ], + "SetTapeParameters": [ + { + "name": "hDevice", + "type": "HANDLE" + }, + { + "name": "dwOperation", + "type": "DWORD" + }, + { + "name": "lpTapeInformation", + "type": "LPVOID" + } + ], + "MulDiv": [ + { + "name": "nNumber", + "type": "int" + }, + { + "name": "nNumerator", + "type": "int" + }, + { + "name": "nDenominator", + "type": "int" + } + ], + "GetSystemDEPPolicy": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemRegistryQuota": [ + { + "name": "pdwQuotaAllowed", + "type": "PDWORD" + }, + { + "name": "pdwQuotaUsed", + "type": "PDWORD" + } + ], + "FileTimeToDosDateTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpFatDate", + "type": "LPWORD" + }, + { + "name": "lpFatTime", + "type": "LPWORD" + } + ], + "DosDateTimeToFileTime": [ + { + "name": "wFatDate", + "type": "WORD" + }, + { + "name": "wFatTime", + "type": "WORD" + }, + { + "name": "lpFileTime", + "type": "LPFILETIME" + } + ], + "FormatMessageA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpSource", + "type": "LPCVOID" + }, + { + "name": "dwMessageId", + "type": "DWORD" + }, + { + "name": "dwLanguageId", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "Arguments", + "type": "va_list" + } + ], + "FormatMessageW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpSource", + "type": "LPCVOID" + }, + { + "name": "dwMessageId", + "type": "DWORD" + }, + { + "name": "dwLanguageId", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "Arguments", + "type": "va_list" + } + ], + "CreateMailslotA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "nMaxMessageSize", + "type": "DWORD" + }, + { + "name": "lReadTimeout", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateMailslotW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "nMaxMessageSize", + "type": "DWORD" + }, + { + "name": "lReadTimeout", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "GetMailslotInfo": [ + { + "name": "hMailslot", + "type": "HANDLE" + }, + { + "name": "lpMaxMessageSize", + "type": "LPDWORD" + }, + { + "name": "lpNextSize", + "type": "LPDWORD" + }, + { + "name": "lpMessageCount", + "type": "LPDWORD" + }, + { + "name": "lpReadTimeout", + "type": "LPDWORD" + } + ], + "SetMailslotInfo": [ + { + "name": "hMailslot", + "type": "HANDLE" + }, + { + "name": "lReadTimeout", + "type": "DWORD" + } + ], + "lstrcmpA": [ + { + "name": "lpString1", + "type": "LPCSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + } + ], + "lstrcmpW": [ + { + "name": "lpString1", + "type": "LPCWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + } + ], + "lstrcmpiA": [ + { + "name": "lpString1", + "type": "LPCSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + } + ], + "lstrcmpiW": [ + { + "name": "lpString1", + "type": "LPCWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + } + ], + "lstrcpynA": [ + { + "name": "lpString1", + "type": "LPSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + }, + { + "name": "iMaxLength", + "type": "int" + } + ], + "lstrcpynW": [ + { + "name": "lpString1", + "type": "LPWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + }, + { + "name": "iMaxLength", + "type": "int" + } + ], + "lstrcpyA": [ + { + "name": "lpString1", + "type": "LPSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + } + ], + "lstrcpyW": [ + { + "name": "lpString1", + "type": "LPWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + } + ], + "lstrcatA": [ + { + "name": "lpString1", + "type": "LPSTR" + }, + { + "name": "lpString2", + "type": "LPCSTR" + } + ], + "lstrcatW": [ + { + "name": "lpString1", + "type": "LPWSTR" + }, + { + "name": "lpString2", + "type": "LPCWSTR" + } + ], + "lstrlenA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "lstrlenW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "OpenFile": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpReOpenBuff", + "type": "LPOFSTRUCT" + }, + { + "name": "uStyle", + "type": "UINT" + } + ], + "_lopen": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "iReadWrite", + "type": "int" + } + ], + "_lcreat": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "iAttribute", + "type": "int" + } + ], + "_lread": [ + { + "name": "hFile", + "type": "HFILE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "uBytes", + "type": "UINT" + } + ], + "_lwrite": [ + { + "name": "hFile", + "type": "HFILE" + }, + { + "name": "lpBuffer", + "type": "LPCCH" + }, + { + "name": "uBytes", + "type": "UINT" + } + ], + "_lclose": [ + { + "name": "hFile", + "type": "HFILE" + } + ], + "_llseek": [ + { + "name": "hFile", + "type": "HFILE" + }, + { + "name": "lOffset", + "type": "LONG" + }, + { + "name": "iOrigin", + "type": "int" + } + ], + "BackupRead": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesRead", + "type": "LPDWORD" + }, + { + "name": "bAbort", + "type": "BOOL" + }, + { + "name": "bProcessSecurity", + "type": "BOOL" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "BackupSeek": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwLowBytesToSeek", + "type": "DWORD" + }, + { + "name": "dwHighBytesToSeek", + "type": "DWORD" + }, + { + "name": "lpdwLowByteSeeked", + "type": "LPDWORD" + }, + { + "name": "lpdwHighByteSeeked", + "type": "LPDWORD" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "BackupWrite": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPBYTE" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "LPDWORD" + }, + { + "name": "bAbort", + "type": "BOOL" + }, + { + "name": "bProcessSecurity", + "type": "BOOL" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "CreateSemaphoreA": [ + { + "name": "lpSemaphoreAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lInitialCount", + "type": "LONG" + }, + { + "name": "lMaximumCount", + "type": "LONG" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateSemaphoreExA": [ + { + "name": "lpSemaphoreAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lInitialCount", + "type": "LONG" + }, + { + "name": "lMaximumCount", + "type": "LONG" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateFileMappingA": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileMappingAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeHigh", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeLow", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateFileMappingNumaA": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileMappingAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "flProtect", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeHigh", + "type": "DWORD" + }, + { + "name": "dwMaximumSizeLow", + "type": "DWORD" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "OpenFileMappingA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "GetLogicalDriveStringsA": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + } + ], + "LoadPackagedLibrary": [ + { + "name": "lpwLibFileName", + "type": "LPCWSTR" + }, + { + "name": "Reserved", + "type": "DWORD" + } + ], + "QueryFullProcessImageNameA": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExeName", + "type": "LPSTR" + }, + { + "name": "lpdwSize", + "type": "PDWORD" + } + ], + "QueryFullProcessImageNameW": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExeName", + "type": "LPWSTR" + }, + { + "name": "lpdwSize", + "type": "PDWORD" + } + ], + "GetFirmwareEnvironmentVariableA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpGuid", + "type": "LPCSTR" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetFirmwareEnvironmentVariableW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpGuid", + "type": "LPCWSTR" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetFirmwareEnvironmentVariableExA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpGuid", + "type": "LPCSTR" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "pdwAttribubutes", + "type": "PDWORD" + } + ], + "GetFirmwareEnvironmentVariableExW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpGuid", + "type": "LPCWSTR" + }, + { + "name": "pBuffer", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "pdwAttribubutes", + "type": "PDWORD" + } + ], + "SetFirmwareEnvironmentVariableA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpGuid", + "type": "LPCSTR" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "SetFirmwareEnvironmentVariableW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpGuid", + "type": "LPCWSTR" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "SetFirmwareEnvironmentVariableExA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpGuid", + "type": "LPCSTR" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "SetFirmwareEnvironmentVariableExW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpGuid", + "type": "LPCWSTR" + }, + { + "name": "pValue", + "type": "PVOID" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "GetFirmwareType": [ + { + "name": "FirmwareType", + "type": "PFIRMWARE_TYPE" + } + ], + "IsNativeVhdBoot": [ + { + "name": "NativeVhdBoot", + "type": "PBOOL" + } + ], + "FindResourceA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpType", + "type": "LPCSTR" + } + ], + "FindResourceExA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "wLanguage", + "type": "WORD" + } + ], + "EnumResourceTypesA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESTYPEPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumResourceTypesW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESTYPEPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumResourceNamesA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESNAMEPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumResourceLanguagesA": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESLANGPROCA" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "EnumResourceLanguagesW": [ + { + "name": "hModule", + "type": "HMODULE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpEnumFunc", + "type": "ENUMRESLANGPROCW" + }, + { + "name": "lParam", + "type": "LONG_PTR" + } + ], + "BeginUpdateResourceA": [ + { + "name": "pFileName", + "type": "LPCSTR" + }, + { + "name": "bDeleteExistingResources", + "type": "BOOL" + } + ], + "BeginUpdateResourceW": [ + { + "name": "pFileName", + "type": "LPCWSTR" + }, + { + "name": "bDeleteExistingResources", + "type": "BOOL" + } + ], + "UpdateResourceA": [ + { + "name": "hUpdate", + "type": "HANDLE" + }, + { + "name": "lpType", + "type": "LPCSTR" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "wLanguage", + "type": "WORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "UpdateResourceW": [ + { + "name": "hUpdate", + "type": "HANDLE" + }, + { + "name": "lpType", + "type": "LPCWSTR" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "wLanguage", + "type": "WORD" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "EndUpdateResourceA": [ + { + "name": "hUpdate", + "type": "HANDLE" + }, + { + "name": "fDiscard", + "type": "BOOL" + } + ], + "EndUpdateResourceW": [ + { + "name": "hUpdate", + "type": "HANDLE" + }, + { + "name": "fDiscard", + "type": "BOOL" + } + ], + "GlobalAddAtomA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "GlobalAddAtomW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GlobalAddAtomExA": [ + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "GlobalAddAtomExW": [ + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "GlobalFindAtomA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "GlobalFindAtomW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GlobalGetAtomNameA": [ + { + "name": "nAtom", + "type": "ATOM" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "int" + } + ], + "GlobalGetAtomNameW": [ + { + "name": "nAtom", + "type": "ATOM" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "int" + } + ], + "AddAtomA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "AddAtomW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "FindAtomA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "FindAtomW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetAtomNameA": [ + { + "name": "nAtom", + "type": "ATOM" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "int" + } + ], + "GetAtomNameW": [ + { + "name": "nAtom", + "type": "ATOM" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "int" + } + ], + "GetProfileIntA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "nDefault", + "type": "INT" + } + ], + "GetProfileIntW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "nDefault", + "type": "INT" + } + ], + "GetProfileStringA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "lpDefault", + "type": "LPCSTR" + }, + { + "name": "lpReturnedString", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetProfileStringW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "lpDefault", + "type": "LPCWSTR" + }, + { + "name": "lpReturnedString", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "WriteProfileStringA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "WriteProfileStringW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetProfileSectionA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpReturnedString", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "GetProfileSectionW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpReturnedString", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "WriteProfileSectionA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "WriteProfileSectionW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileIntA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "nDefault", + "type": "INT" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetPrivateProfileIntW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "nDefault", + "type": "INT" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileStringA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "lpDefault", + "type": "LPCSTR" + }, + { + "name": "lpReturnedString", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetPrivateProfileStringW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "lpDefault", + "type": "LPCWSTR" + }, + { + "name": "lpReturnedString", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "WritePrivateProfileStringA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpKeyName", + "type": "LPCSTR" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "WritePrivateProfileStringW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpKeyName", + "type": "LPCWSTR" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileSectionA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpReturnedString", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetPrivateProfileSectionW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpReturnedString", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "WritePrivateProfileSectionA": [ + { + "name": "lpAppName", + "type": "LPCSTR" + }, + { + "name": "lpString", + "type": "LPCSTR" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "WritePrivateProfileSectionW": [ + { + "name": "lpAppName", + "type": "LPCWSTR" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileSectionNamesA": [ + { + "name": "lpszReturnBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetPrivateProfileSectionNamesW": [ + { + "name": "lpszReturnBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetPrivateProfileStructA": [ + { + "name": "lpszSection", + "type": "LPCSTR" + }, + { + "name": "lpszKey", + "type": "LPCSTR" + }, + { + "name": "lpStruct", + "type": "LPVOID" + }, + { + "name": "uSizeStruct", + "type": "UINT" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "GetPrivateProfileStructW": [ + { + "name": "lpszSection", + "type": "LPCWSTR" + }, + { + "name": "lpszKey", + "type": "LPCWSTR" + }, + { + "name": "lpStruct", + "type": "LPVOID" + }, + { + "name": "uSizeStruct", + "type": "UINT" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "WritePrivateProfileStructA": [ + { + "name": "lpszSection", + "type": "LPCSTR" + }, + { + "name": "lpszKey", + "type": "LPCSTR" + }, + { + "name": "lpStruct", + "type": "LPVOID" + }, + { + "name": "uSizeStruct", + "type": "UINT" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "WritePrivateProfileStructW": [ + { + "name": "lpszSection", + "type": "LPCWSTR" + }, + { + "name": "lpszKey", + "type": "LPCWSTR" + }, + { + "name": "lpStruct", + "type": "LPVOID" + }, + { + "name": "uSizeStruct", + "type": "UINT" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "Wow64EnableWow64FsRedirection": [ + { + "name": "Wow64FsEnableRedirection", + "type": "BOOLEAN" + } + ], + "SetDllDirectoryA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + } + ], + "SetDllDirectoryW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + } + ], + "GetDllDirectoryA": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + } + ], + "GetDllDirectoryW": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + } + ], + "SetSearchPathMode": [ + { + "name": "Flags", + "type": "DWORD" + } + ], + "CreateDirectoryExA": [ + { + "name": "lpTemplateDirectory", + "type": "LPCSTR" + }, + { + "name": "lpNewDirectory", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDirectoryExW": [ + { + "name": "lpTemplateDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpNewDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateDirectoryTransactedA": [ + { + "name": "lpTemplateDirectory", + "type": "LPCSTR" + }, + { + "name": "lpNewDirectory", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CreateDirectoryTransactedW": [ + { + "name": "lpTemplateDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpNewDirectory", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "RemoveDirectoryTransactedA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "RemoveDirectoryTransactedW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetFullPathNameTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "lpFilePart", + "type": "LPSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetFullPathNameTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "lpFilePart", + "type": "LPWSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "DefineDosDeviceA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpDeviceName", + "type": "LPCSTR" + }, + { + "name": "lpTargetPath", + "type": "LPCSTR" + } + ], + "QueryDosDeviceA": [ + { + "name": "lpDeviceName", + "type": "LPCSTR" + }, + { + "name": "lpTargetPath", + "type": "LPSTR" + }, + { + "name": "ucchMax", + "type": "DWORD" + } + ], + "CreateFileTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "hTemplateFile", + "type": "HANDLE" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pusMiniVersion", + "type": "PUSHORT" + }, + { + "name": "lpExtendedParameter", + "type": "PVOID" + } + ], + "CreateFileTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "hTemplateFile", + "type": "HANDLE" + }, + { + "name": "hTransaction", + "type": "HANDLE" + }, + { + "name": "pusMiniVersion", + "type": "PUSHORT" + }, + { + "name": "lpExtendedParameter", + "type": "PVOID" + } + ], + "ReOpenFile": [ + { + "name": "hOriginalFile", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + } + ], + "SetFileAttributesTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "SetFileAttributesTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetFileAttributesTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "fInfoLevelId", + "type": "GET_FILEEX_INFO_LEVELS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetFileAttributesTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "fInfoLevelId", + "type": "GET_FILEEX_INFO_LEVELS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetCompressedFileSizeTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "GetCompressedFileSizeTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "DeleteFileTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "DeleteFileTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CheckNameLegalDOS8Dot3A": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpOemName", + "type": "LPSTR" + }, + { + "name": "OemNameSize", + "type": "DWORD" + }, + { + "name": "pbNameContainsSpaces", + "type": "PBOOL" + }, + { + "name": "pbNameLegal", + "type": "PBOOL" + } + ], + "CheckNameLegalDOS8Dot3W": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpOemName", + "type": "LPSTR" + }, + { + "name": "OemNameSize", + "type": "DWORD" + }, + { + "name": "pbNameContainsSpaces", + "type": "PBOOL" + }, + { + "name": "pbNameLegal", + "type": "PBOOL" + } + ], + "FindFirstFileTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "fInfoLevelId", + "type": "FINDEX_INFO_LEVELS" + }, + { + "name": "lpFindFileData", + "type": "LPVOID" + }, + { + "name": "fSearchOp", + "type": "FINDEX_SEARCH_OPS" + }, + { + "name": "lpSearchFilter", + "type": "LPVOID" + }, + { + "name": "dwAdditionalFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "FindFirstFileTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "fInfoLevelId", + "type": "FINDEX_INFO_LEVELS" + }, + { + "name": "lpFindFileData", + "type": "LPVOID" + }, + { + "name": "fSearchOp", + "type": "FINDEX_SEARCH_OPS" + }, + { + "name": "lpSearchFilter", + "type": "LPVOID" + }, + { + "name": "dwAdditionalFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CopyFileA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "bFailIfExists", + "type": "BOOL" + } + ], + "CopyFileW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "bFailIfExists", + "type": "BOOL" + } + ], + "CopyFileExA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pbCancel", + "type": "LPBOOL" + }, + { + "name": "dwCopyFlags", + "type": "DWORD" + } + ], + "CopyFileExW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pbCancel", + "type": "LPBOOL" + }, + { + "name": "dwCopyFlags", + "type": "DWORD" + } + ], + "CopyFileTransactedA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pbCancel", + "type": "LPBOOL" + }, + { + "name": "dwCopyFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CopyFileTransactedW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pbCancel", + "type": "LPBOOL" + }, + { + "name": "dwCopyFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CopyFile2": [ + { + "name": "pwszExistingFileName", + "type": "PCWSTR" + }, + { + "name": "pwszNewFileName", + "type": "PCWSTR" + }, + { + "name": "pExtendedParameters", + "type": "COPYFILE2_EXTENDED_PARAMETERS" + } + ], + "MoveFileA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + } + ], + "MoveFileW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + } + ], + "MoveFileExA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MoveFileExW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MoveFileWithProgressA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MoveFileWithProgressW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "MoveFileTransactedA": [ + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "MoveFileTransactedW": [ + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpNewFileName", + "type": "LPCWSTR" + }, + { + "name": "lpProgressRoutine", + "type": "LPPROGRESS_ROUTINE" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "ReplaceFileA": [ + { + "name": "lpReplacedFileName", + "type": "LPCSTR" + }, + { + "name": "lpReplacementFileName", + "type": "LPCSTR" + }, + { + "name": "lpBackupFileName", + "type": "LPCSTR" + }, + { + "name": "dwReplaceFlags", + "type": "DWORD" + }, + { + "name": "lpExclude", + "type": "LPVOID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "ReplaceFileW": [ + { + "name": "lpReplacedFileName", + "type": "LPCWSTR" + }, + { + "name": "lpReplacementFileName", + "type": "LPCWSTR" + }, + { + "name": "lpBackupFileName", + "type": "LPCWSTR" + }, + { + "name": "dwReplaceFlags", + "type": "DWORD" + }, + { + "name": "lpExclude", + "type": "LPVOID" + }, + { + "name": "lpReserved", + "type": "LPVOID" + } + ], + "CreateHardLinkA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateHardLinkW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "CreateHardLinkTransactedA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpExistingFileName", + "type": "LPCSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CreateHardLinkTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpExistingFileName", + "type": "LPCWSTR" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "FindFirstStreamTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "InfoLevel", + "type": "STREAM_INFO_LEVELS" + }, + { + "name": "lpFindStreamData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "FindFirstFileNameTransactedW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "StringLength", + "type": "LPDWORD" + }, + { + "name": "LinkName", + "type": "PWSTR" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CreateNamedPipeA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwOpenMode", + "type": "DWORD" + }, + { + "name": "dwPipeMode", + "type": "DWORD" + }, + { + "name": "nMaxInstances", + "type": "DWORD" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "nDefaultTimeOut", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + } + ], + "GetNamedPipeHandleStateA": [ + { + "name": "hNamedPipe", + "type": "HANDLE" + }, + { + "name": "lpState", + "type": "LPDWORD" + }, + { + "name": "lpCurInstances", + "type": "LPDWORD" + }, + { + "name": "lpMaxCollectionCount", + "type": "LPDWORD" + }, + { + "name": "lpCollectDataTimeout", + "type": "LPDWORD" + }, + { + "name": "lpUserName", + "type": "LPSTR" + }, + { + "name": "nMaxUserNameSize", + "type": "DWORD" + } + ], + "CallNamedPipeA": [ + { + "name": "lpNamedPipeName", + "type": "LPCSTR" + }, + { + "name": "lpInBuffer", + "type": "LPVOID" + }, + { + "name": "nInBufferSize", + "type": "DWORD" + }, + { + "name": "lpOutBuffer", + "type": "LPVOID" + }, + { + "name": "nOutBufferSize", + "type": "DWORD" + }, + { + "name": "lpBytesRead", + "type": "LPDWORD" + }, + { + "name": "nTimeOut", + "type": "DWORD" + } + ], + "WaitNamedPipeA": [ + { + "name": "lpNamedPipeName", + "type": "LPCSTR" + }, + { + "name": "nTimeOut", + "type": "DWORD" + } + ], + "GetNamedPipeClientComputerNameA": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ClientComputerName", + "type": "LPSTR" + }, + { + "name": "ClientComputerNameLength", + "type": "ULONG" + } + ], + "GetNamedPipeClientProcessId": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ClientProcessId", + "type": "PULONG" + } + ], + "GetNamedPipeClientSessionId": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ClientSessionId", + "type": "PULONG" + } + ], + "GetNamedPipeServerProcessId": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ServerProcessId", + "type": "PULONG" + } + ], + "GetNamedPipeServerSessionId": [ + { + "name": "Pipe", + "type": "HANDLE" + }, + { + "name": "ServerSessionId", + "type": "PULONG" + } + ], + "SetVolumeLabelA": [ + { + "name": "lpRootPathName", + "type": "LPCSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCSTR" + } + ], + "SetVolumeLabelW": [ + { + "name": "lpRootPathName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeName", + "type": "LPCWSTR" + } + ], + "SetFileBandwidthReservation": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "nPeriodMilliseconds", + "type": "DWORD" + }, + { + "name": "nBytesPerPeriod", + "type": "DWORD" + }, + { + "name": "bDiscardable", + "type": "BOOL" + }, + { + "name": "lpTransferSize", + "type": "LPDWORD" + }, + { + "name": "lpNumOutstandingRequests", + "type": "LPDWORD" + } + ], + "GetFileBandwidthReservation": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpPeriodMilliseconds", + "type": "LPDWORD" + }, + { + "name": "lpBytesPerPeriod", + "type": "LPDWORD" + }, + { + "name": "pDiscardable", + "type": "LPBOOL" + }, + { + "name": "lpTransferSize", + "type": "LPDWORD" + }, + { + "name": "lpNumOutstandingRequests", + "type": "LPDWORD" + } + ], + "ReadDirectoryChangesW": [ + { + "name": "hDirectory", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "ReadDirectoryChangesExW": [ + { + "name": "hDirectory", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + }, + { + "name": "lpBytesReturned", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + }, + { + "name": "ReadDirectoryNotifyInformationClass", + "type": "READ_DIRECTORY_NOTIFY_INFORMATION_CLASS" + } + ], + "MapViewOfFileExNuma": [ + { + "name": "hFileMappingObject", + "type": "HANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwNumberOfBytesToMap", + "type": "SIZE_T" + }, + { + "name": "lpBaseAddress", + "type": "LPVOID" + }, + { + "name": "nndPreferred", + "type": "DWORD" + } + ], + "IsBadReadPtr": [ + { + "name": "lp", + "type": "void" + }, + { + "name": "ucb", + "type": "UINT_PTR" + } + ], + "IsBadWritePtr": [ + { + "name": "lp", + "type": "LPVOID" + }, + { + "name": "ucb", + "type": "UINT_PTR" + } + ], + "IsBadCodePtr": [ + { + "name": "lpfn", + "type": "FARPROC" + } + ], + "IsBadStringPtrA": [ + { + "name": "lpsz", + "type": "LPCSTR" + }, + { + "name": "ucchMax", + "type": "UINT_PTR" + } + ], + "IsBadStringPtrW": [ + { + "name": "lpsz", + "type": "LPCWSTR" + }, + { + "name": "ucchMax", + "type": "UINT_PTR" + } + ], + "BuildCommDCBA": [ + { + "name": "lpDef", + "type": "LPCSTR" + }, + { + "name": "lpDCB", + "type": "LPDCB" + } + ], + "BuildCommDCBW": [ + { + "name": "lpDef", + "type": "LPCWSTR" + }, + { + "name": "lpDCB", + "type": "LPDCB" + } + ], + "BuildCommDCBAndTimeoutsA": [ + { + "name": "lpDef", + "type": "LPCSTR" + }, + { + "name": "lpDCB", + "type": "LPDCB" + }, + { + "name": "lpCommTimeouts", + "type": "LPCOMMTIMEOUTS" + } + ], + "BuildCommDCBAndTimeoutsW": [ + { + "name": "lpDef", + "type": "LPCWSTR" + }, + { + "name": "lpDCB", + "type": "LPDCB" + }, + { + "name": "lpCommTimeouts", + "type": "LPCOMMTIMEOUTS" + } + ], + "CommConfigDialogA": [ + { + "name": "lpszName", + "type": "LPCSTR" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + } + ], + "CommConfigDialogW": [ + { + "name": "lpszName", + "type": "LPCWSTR" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + } + ], + "GetDefaultCommConfigA": [ + { + "name": "lpszName", + "type": "LPCSTR" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "GetDefaultCommConfigW": [ + { + "name": "lpszName", + "type": "LPCWSTR" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "lpdwSize", + "type": "LPDWORD" + } + ], + "SetDefaultCommConfigA": [ + { + "name": "lpszName", + "type": "LPCSTR" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "SetDefaultCommConfigW": [ + { + "name": "lpszName", + "type": "LPCWSTR" + }, + { + "name": "lpCC", + "type": "LPCOMMCONFIG" + }, + { + "name": "dwSize", + "type": "DWORD" + } + ], + "GetComputerNameA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "GetComputerNameW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "DnsHostnameToComputerNameA": [ + { + "name": "Hostname", + "type": "LPCSTR" + }, + { + "name": "ComputerName", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "DnsHostnameToComputerNameW": [ + { + "name": "Hostname", + "type": "LPCWSTR" + }, + { + "name": "ComputerName", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "RegisterWaitForSingleObject": [ + { + "name": "phNewWaitObject", + "type": "PHANDLE" + }, + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "Callback", + "type": "WAITORTIMERCALLBACK" + }, + { + "name": "Context", + "type": "PVOID" + }, + { + "name": "dwMilliseconds", + "type": "ULONG" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "UnregisterWait": [ + { + "name": "WaitHandle", + "type": "HANDLE" + } + ], + "BindIoCompletionCallback": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "Function", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "DeleteTimerQueue": [ + { + "name": "TimerQueue", + "type": "HANDLE" + } + ], + "CreatePrivateNamespaceA": [ + { + "name": "lpPrivateNamespaceAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpBoundaryDescriptor", + "type": "LPVOID" + }, + { + "name": "lpAliasPrefix", + "type": "LPCSTR" + } + ], + "OpenPrivateNamespaceA": [ + { + "name": "lpBoundaryDescriptor", + "type": "LPVOID" + }, + { + "name": "lpAliasPrefix", + "type": "LPCSTR" + } + ], + "CreateBoundaryDescriptorA": [ + { + "name": "Name", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "AddIntegrityLabelToBoundaryDescriptor": [ + { + "name": "BoundaryDescriptor", + "type": "HANDLE" + }, + { + "name": "IntegrityLabel", + "type": "PSID" + } + ], + "VerifyVersionInfoA": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOEXA" + }, + { + "name": "dwTypeMask", + "type": "DWORD" + }, + { + "name": "dwlConditionMask", + "type": "DWORDLONG" + } + ], + "VerifyVersionInfoW": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOEXW" + }, + { + "name": "dwTypeMask", + "type": "DWORD" + }, + { + "name": "dwlConditionMask", + "type": "DWORDLONG" + } + ], + "SetSystemPowerState": [ + { + "name": "fSuspend", + "type": "BOOL" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "GetSystemPowerStatus": [ + { + "name": "lpSystemPowerStatus", + "type": "LPSYSTEM_POWER_STATUS" + } + ], + "MapUserPhysicalPagesScatter": [ + { + "name": "VirtualAddresses", + "type": "PVOID" + }, + { + "name": "NumberOfPages", + "type": "ULONG_PTR" + }, + { + "name": "PageArray", + "type": "PULONG_PTR" + } + ], + "CreateJobObjectA": [ + { + "name": "lpJobAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "OpenJobObjectA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "FindFirstVolumeA": [ + { + "name": "lpszVolumeName", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindNextVolumeA": [ + { + "name": "hFindVolume", + "type": "HANDLE" + }, + { + "name": "lpszVolumeName", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindFirstVolumeMountPointA": [ + { + "name": "lpszRootPathName", + "type": "LPCSTR" + }, + { + "name": "lpszVolumeMountPoint", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindFirstVolumeMountPointW": [ + { + "name": "lpszRootPathName", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumeMountPoint", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindNextVolumeMountPointA": [ + { + "name": "hFindVolumeMountPoint", + "type": "HANDLE" + }, + { + "name": "lpszVolumeMountPoint", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindNextVolumeMountPointW": [ + { + "name": "hFindVolumeMountPoint", + "type": "HANDLE" + }, + { + "name": "lpszVolumeMountPoint", + "type": "LPWSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "FindVolumeMountPointClose": [ + { + "name": "hFindVolumeMountPoint", + "type": "HANDLE" + } + ], + "SetVolumeMountPointA": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCSTR" + }, + { + "name": "lpszVolumeName", + "type": "LPCSTR" + } + ], + "SetVolumeMountPointW": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCWSTR" + }, + { + "name": "lpszVolumeName", + "type": "LPCWSTR" + } + ], + "DeleteVolumeMountPointA": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCSTR" + } + ], + "GetVolumeNameForVolumeMountPointA": [ + { + "name": "lpszVolumeMountPoint", + "type": "LPCSTR" + }, + { + "name": "lpszVolumeName", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "GetVolumePathNameA": [ + { + "name": "lpszFileName", + "type": "LPCSTR" + }, + { + "name": "lpszVolumePathName", + "type": "LPSTR" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + } + ], + "GetVolumePathNamesForVolumeNameA": [ + { + "name": "lpszVolumeName", + "type": "LPCSTR" + }, + { + "name": "lpszVolumePathNames", + "type": "LPCH" + }, + { + "name": "cchBufferLength", + "type": "DWORD" + }, + { + "name": "lpcchReturnLength", + "type": "PDWORD" + } + ], + "CreateActCtxA": [ + { + "name": "pActCtx", + "type": "PCACTCTXA" + } + ], + "CreateActCtxW": [ + { + "name": "pActCtx", + "type": "PCACTCTXW" + } + ], + "AddRefActCtx": [ + { + "name": "hActCtx", + "type": "HANDLE" + } + ], + "ReleaseActCtx": [ + { + "name": "hActCtx", + "type": "HANDLE" + } + ], + "ZombifyActCtx": [ + { + "name": "hActCtx", + "type": "HANDLE" + } + ], + "ActivateActCtx": [ + { + "name": "hActCtx", + "type": "HANDLE" + }, + { + "name": "lpCookie", + "type": "ULONG_PTR" + } + ], + "DeactivateActCtx": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ulCookie", + "type": "ULONG_PTR" + } + ], + "GetCurrentActCtx": [ + { + "name": "lphActCtx", + "type": "HANDLE" + } + ], + "FindActCtxSectionStringA": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExtensionGuid", + "type": "GUID" + }, + { + "name": "ulSectionId", + "type": "ULONG" + }, + { + "name": "lpStringToFind", + "type": "LPCSTR" + }, + { + "name": "ReturnedData", + "type": "PACTCTX_SECTION_KEYED_DATA" + } + ], + "FindActCtxSectionStringW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExtensionGuid", + "type": "GUID" + }, + { + "name": "ulSectionId", + "type": "ULONG" + }, + { + "name": "lpStringToFind", + "type": "LPCWSTR" + }, + { + "name": "ReturnedData", + "type": "PACTCTX_SECTION_KEYED_DATA" + } + ], + "FindActCtxSectionGuid": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpExtensionGuid", + "type": "GUID" + }, + { + "name": "ulSectionId", + "type": "ULONG" + }, + { + "name": "lpGuidToFind", + "type": "GUID" + }, + { + "name": "ReturnedData", + "type": "PACTCTX_SECTION_KEYED_DATA" + } + ], + "QueryActCtxW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hActCtx", + "type": "HANDLE" + }, + { + "name": "pvSubInstance", + "type": "PVOID" + }, + { + "name": "ulInfoClass", + "type": "ULONG" + }, + { + "name": "pvBuffer", + "type": "PVOID" + }, + { + "name": "cbBuffer", + "type": "SIZE_T" + }, + { + "name": "pcbWrittenOrRequired", + "type": "SIZE_T" + } + ], + "WTSGetActiveConsoleSessionId": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetActiveProcessorGroupCount": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetMaximumProcessorGroupCount": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetActiveProcessorCount": [ + { + "name": "GroupNumber", + "type": "WORD" + } + ], + "GetMaximumProcessorCount": [ + { + "name": "GroupNumber", + "type": "WORD" + } + ], + "GetNumaProcessorNode": [ + { + "name": "Processor", + "type": "UCHAR" + }, + { + "name": "NodeNumber", + "type": "PUCHAR" + } + ], + "GetNumaNodeNumberFromHandle": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "NodeNumber", + "type": "PUSHORT" + } + ], + "GetNumaProcessorNodeEx": [ + { + "name": "Processor", + "type": "PPROCESSOR_NUMBER" + }, + { + "name": "NodeNumber", + "type": "PUSHORT" + } + ], + "GetNumaNodeProcessorMask": [ + { + "name": "Node", + "type": "UCHAR" + }, + { + "name": "ProcessorMask", + "type": "PULONGLONG" + } + ], + "GetNumaAvailableMemoryNode": [ + { + "name": "Node", + "type": "UCHAR" + }, + { + "name": "AvailableBytes", + "type": "PULONGLONG" + } + ], + "GetNumaAvailableMemoryNodeEx": [ + { + "name": "Node", + "type": "USHORT" + }, + { + "name": "AvailableBytes", + "type": "PULONGLONG" + } + ], + "GetNumaProximityNode": [ + { + "name": "ProximityId", + "type": "ULONG" + }, + { + "name": "NodeNumber", + "type": "PUCHAR" + } + ], + "RegisterApplicationRecoveryCallback": [ + { + "name": "pRecoveyCallback", + "type": "APPLICATION_RECOVERY_CALLBACK" + }, + { + "name": "pvParameter", + "type": "PVOID" + }, + { + "name": "dwPingInterval", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UnregisterApplicationRecoveryCallback": [ + { + "name": "VOID", + "type": "void" + } + ], + "RegisterApplicationRestart": [ + { + "name": "pwzCommandline", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "UnregisterApplicationRestart": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetApplicationRecoveryCallback": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pRecoveryCallback", + "type": "APPLICATION_RECOVERY_CALLBACK" + }, + { + "name": "ppvParameter", + "type": "PVOID" + }, + { + "name": "pdwPingInterval", + "type": "PDWORD" + }, + { + "name": "pdwFlags", + "type": "PDWORD" + } + ], + "GetApplicationRestartSettings": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "pwzCommandline", + "type": "PWSTR" + }, + { + "name": "pcchSize", + "type": "PDWORD" + }, + { + "name": "pdwFlags", + "type": "PDWORD" + } + ], + "ApplicationRecoveryInProgress": [ + { + "name": "pbCancelled", + "type": "PBOOL" + } + ], + "ApplicationRecoveryFinished": [ + { + "name": "bSuccess", + "type": "BOOL" + } + ], + "GetFileInformationByHandleEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "FileInformationClass", + "type": "FILE_INFO_BY_HANDLE_CLASS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + } + ], + "OpenFileById": [ + { + "name": "hVolumeHint", + "type": "HANDLE" + }, + { + "name": "lpFileId", + "type": "LPFILE_ID_DESCRIPTOR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + } + ], + "CreateSymbolicLinkA": [ + { + "name": "lpSymlinkFileName", + "type": "LPCSTR" + }, + { + "name": "lpTargetFileName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CreateSymbolicLinkW": [ + { + "name": "lpSymlinkFileName", + "type": "LPCWSTR" + }, + { + "name": "lpTargetFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "QueryActCtxSettingsW": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hActCtx", + "type": "HANDLE" + }, + { + "name": "settingsNameSpace", + "type": "PCWSTR" + }, + { + "name": "settingName", + "type": "PCWSTR" + }, + { + "name": "pvBuffer", + "type": "PWSTR" + }, + { + "name": "dwBuffer", + "type": "SIZE_T" + }, + { + "name": "pdwWrittenOrRequired", + "type": "SIZE_T" + } + ], + "CreateSymbolicLinkTransactedA": [ + { + "name": "lpSymlinkFileName", + "type": "LPCSTR" + }, + { + "name": "lpTargetFileName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "CreateSymbolicLinkTransactedW": [ + { + "name": "lpSymlinkFileName", + "type": "LPCWSTR" + }, + { + "name": "lpTargetFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hTransaction", + "type": "HANDLE" + } + ], + "AddSecureMemoryCacheCallback": [ + { + "name": "pfnCallBack", + "type": "PSECURE_MEMORY_CACHE_CALLBACK" + } + ], + "RemoveSecureMemoryCacheCallback": [ + { + "name": "pfnCallBack", + "type": "PSECURE_MEMORY_CACHE_CALLBACK" + } + ], + "CopyContext": [ + { + "name": "Destination", + "type": "PCONTEXT" + }, + { + "name": "ContextFlags", + "type": "DWORD" + }, + { + "name": "Source", + "type": "PCONTEXT" + } + ], + "InitializeContext": [ + { + "name": "Buffer", + "type": "PVOID" + }, + { + "name": "ContextFlags", + "type": "DWORD" + }, + { + "name": "Context", + "type": "PCONTEXT" + }, + { + "name": "ContextLength", + "type": "PDWORD" + } + ], + "GetEnabledXStateFeatures": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetXStateFeaturesMask": [ + { + "name": "Context", + "type": "PCONTEXT" + }, + { + "name": "FeatureMask", + "type": "PDWORD64" + } + ], + "LocateXStateFeature": [ + { + "name": "Context", + "type": "PCONTEXT" + }, + { + "name": "FeatureId", + "type": "DWORD" + }, + { + "name": "Length", + "type": "PDWORD" + } + ], + "SetXStateFeaturesMask": [ + { + "name": "Context", + "type": "PCONTEXT" + }, + { + "name": "FeatureMask", + "type": "DWORD64" + } + ], + "EnableThreadProfiling": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "HardwareCounters", + "type": "DWORD64" + }, + { + "name": "PerformanceDataHandle", + "type": "HANDLE" + } + ], + "DisableThreadProfiling": [ + { + "name": "PerformanceDataHandle", + "type": "HANDLE" + } + ], + "QueryThreadProfiling": [ + { + "name": "ThreadHandle", + "type": "HANDLE" + }, + { + "name": "Enabled", + "type": "PBOOLEAN" + } + ], + "ReadThreadProfilingData": [ + { + "name": "PerformanceDataHandle", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "PerformanceData", + "type": "PPERFORMANCE_DATA" + } + ], + "Beep": [ + { + "name": "dwFreq", + "type": "DWORD" + }, + { + "name": "dwDuration", + "type": "DWORD" + } + ], + "InitializeSListHead": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "InterlockedPopEntrySList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "InterlockedPushEntrySList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + }, + { + "name": "ListEntry", + "type": "PSLIST_ENTRY" + } + ], + "InterlockedPushListSListEx": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + }, + { + "name": "List", + "type": "PSLIST_ENTRY" + }, + { + "name": "ListEnd", + "type": "PSLIST_ENTRY" + }, + { + "name": "Count", + "type": "ULONG" + } + ], + "InterlockedFlushSList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "QueryDepthSList": [ + { + "name": "ListHead", + "type": "PSLIST_HEADER" + } + ], + "GetCommandLineA": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetCommandLineW": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetEnvironmentStrings": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetEnvironmentStringsW": [ + { + "name": "VOID", + "type": "void" + } + ], + "FreeEnvironmentStringsA": [ + { + "name": "penv", + "type": "LPCH" + } + ], + "FreeEnvironmentStringsW": [ + { + "name": "penv", + "type": "LPWCH" + } + ], + "ExpandEnvironmentStringsA": [ + { + "name": "lpSrc", + "type": "LPCSTR" + }, + { + "name": "lpDst", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "ExpandEnvironmentStringsW": [ + { + "name": "lpSrc", + "type": "LPCWSTR" + }, + { + "name": "lpDst", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "DWORD" + } + ], + "SearchPathW": [ + { + "name": "lpPath", + "type": "LPCWSTR" + }, + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpExtension", + "type": "LPCWSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "lpFilePart", + "type": "LPWSTR" + } + ], + "SearchPathA": [ + { + "name": "lpPath", + "type": "LPCSTR" + }, + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpExtension", + "type": "LPCSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "lpFilePart", + "type": "LPSTR" + } + ], + "NeedCurrentDirectoryForExePathA": [ + { + "name": "ExeName", + "type": "LPCSTR" + } + ], + "NeedCurrentDirectoryForExePathW": [ + { + "name": "ExeName", + "type": "LPCWSTR" + } + ], + "CreateToolhelp32Snapshot": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "th32ProcessID", + "type": "DWORD" + } + ], + "Heap32ListFirst": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lphl", + "type": "LPHEAPLIST32" + } + ], + "Heap32ListNext": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lphl", + "type": "LPHEAPLIST32" + } + ], + "Heap32First": [ + { + "name": "lphe", + "type": "LPHEAPENTRY32" + }, + { + "name": "th32ProcessID", + "type": "DWORD" + }, + { + "name": "th32HeapID", + "type": "ULONG_PTR" + } + ], + "Heap32Next": [ + { + "name": "lphe", + "type": "LPHEAPENTRY32" + } + ], + "Toolhelp32ReadProcessMemory": [ + { + "name": "th32ProcessID", + "type": "DWORD" + }, + { + "name": "lpBaseAddress", + "type": "LPCVOID" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "cbRead", + "type": "SIZE_T" + }, + { + "name": "lpNumberOfBytesRead", + "type": "SIZE_T" + } + ], + "Process32FirstW": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lppe", + "type": "LPPROCESSENTRY32W" + } + ], + "Process32NextW": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lppe", + "type": "LPPROCESSENTRY32W" + } + ], + "Process32First": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lppe", + "type": "LPPROCESSENTRY32" + } + ], + "Process32Next": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lppe", + "type": "LPPROCESSENTRY32" + } + ], + "Thread32First": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpte", + "type": "LPTHREADENTRY32" + } + ], + "Thread32Next": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpte", + "type": "LPTHREADENTRY32" + } + ], + "Module32FirstW": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpme", + "type": "LPMODULEENTRY32W" + } + ], + "Module32NextW": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpme", + "type": "LPMODULEENTRY32W" + } + ], + "Module32First": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpme", + "type": "LPMODULEENTRY32" + } + ], + "Module32Next": [ + { + "name": "hSnapshot", + "type": "HANDLE" + }, + { + "name": "lpme", + "type": "LPMODULEENTRY32" + } + ], + "CloseHandle": [ + { + "name": "hObject", + "type": "HANDLE" + } + ], + "DuplicateHandle": [ + { + "name": "hSourceProcessHandle", + "type": "HANDLE" + }, + { + "name": "hSourceHandle", + "type": "HANDLE" + }, + { + "name": "hTargetProcessHandle", + "type": "HANDLE" + }, + { + "name": "lpTargetHandle", + "type": "LPHANDLE" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "GetHandleInformation": [ + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + } + ], + "SetHandleInformation": [ + { + "name": "hObject", + "type": "HANDLE" + }, + { + "name": "dwMask", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "CompareFileTime": [ + { + "name": "lpFileTime1", + "type": "FILETIME" + }, + { + "name": "lpFileTime2", + "type": "FILETIME" + } + ], + "CreateFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "hTemplateFile", + "type": "HANDLE" + } + ], + "CreateFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "lpSecurityAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + }, + { + "name": "hTemplateFile", + "type": "HANDLE" + } + ], + "FileTimeToLocalFileTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpLocalFileTime", + "type": "LPFILETIME" + } + ], + "FindClose": [ + { + "name": "hFindFile", + "type": "HANDLE" + } + ], + "FindCloseChangeNotification": [ + { + "name": "hChangeHandle", + "type": "HANDLE" + } + ], + "FindFirstChangeNotificationA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + } + ], + "FindFirstChangeNotificationW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + }, + { + "name": "bWatchSubtree", + "type": "BOOL" + }, + { + "name": "dwNotifyFilter", + "type": "DWORD" + } + ], + "FindFirstFileA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAA" + } + ], + "FindFirstFileW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAW" + } + ], + "FindFirstFileExA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "fInfoLevelId", + "type": "FINDEX_INFO_LEVELS" + }, + { + "name": "lpFindFileData", + "type": "LPVOID" + }, + { + "name": "fSearchOp", + "type": "FINDEX_SEARCH_OPS" + }, + { + "name": "lpSearchFilter", + "type": "LPVOID" + }, + { + "name": "dwAdditionalFlags", + "type": "DWORD" + } + ], + "FindFirstFileExW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "fInfoLevelId", + "type": "FINDEX_INFO_LEVELS" + }, + { + "name": "lpFindFileData", + "type": "LPVOID" + }, + { + "name": "fSearchOp", + "type": "FINDEX_SEARCH_OPS" + }, + { + "name": "lpSearchFilter", + "type": "LPVOID" + }, + { + "name": "dwAdditionalFlags", + "type": "DWORD" + } + ], + "FindNextChangeNotification": [ + { + "name": "hChangeHandle", + "type": "HANDLE" + } + ], + "FindNextFileA": [ + { + "name": "hFindFile", + "type": "HANDLE" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAA" + } + ], + "FindNextFileW": [ + { + "name": "hFindFile", + "type": "HANDLE" + }, + { + "name": "lpFindFileData", + "type": "LPWIN32_FIND_DATAW" + } + ], + "FindVolumeClose": [ + { + "name": "hFindVolume", + "type": "HANDLE" + } + ], + "FlushFileBuffers": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "GetDiskFreeSpaceA": [ + { + "name": "lpRootPathName", + "type": "LPCSTR" + }, + { + "name": "lpSectorsPerCluster", + "type": "LPDWORD" + }, + { + "name": "lpBytesPerSector", + "type": "LPDWORD" + }, + { + "name": "lpNumberOfFreeClusters", + "type": "LPDWORD" + }, + { + "name": "lpTotalNumberOfClusters", + "type": "LPDWORD" + } + ], + "GetDiskFreeSpaceW": [ + { + "name": "lpRootPathName", + "type": "LPCWSTR" + }, + { + "name": "lpSectorsPerCluster", + "type": "LPDWORD" + }, + { + "name": "lpBytesPerSector", + "type": "LPDWORD" + }, + { + "name": "lpNumberOfFreeClusters", + "type": "LPDWORD" + }, + { + "name": "lpTotalNumberOfClusters", + "type": "LPDWORD" + } + ], + "GetDiskFreeSpaceExA": [ + { + "name": "lpDirectoryName", + "type": "LPCSTR" + }, + { + "name": "lpFreeBytesAvailableToCaller", + "type": "PULARGE_INTEGER" + }, + { + "name": "lpTotalNumberOfBytes", + "type": "PULARGE_INTEGER" + }, + { + "name": "lpTotalNumberOfFreeBytes", + "type": "PULARGE_INTEGER" + } + ], + "GetDiskFreeSpaceExW": [ + { + "name": "lpDirectoryName", + "type": "LPCWSTR" + }, + { + "name": "lpFreeBytesAvailableToCaller", + "type": "PULARGE_INTEGER" + }, + { + "name": "lpTotalNumberOfBytes", + "type": "PULARGE_INTEGER" + }, + { + "name": "lpTotalNumberOfFreeBytes", + "type": "PULARGE_INTEGER" + } + ], + "GetDriveTypeA": [ + { + "name": "lpRootPathName", + "type": "LPCSTR" + } + ], + "GetDriveTypeW": [ + { + "name": "lpRootPathName", + "type": "LPCWSTR" + } + ], + "GetFileAttributesA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + } + ], + "GetFileAttributesW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + } + ], + "GetFileAttributesExA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "fInfoLevelId", + "type": "GET_FILEEX_INFO_LEVELS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + } + ], + "GetFileAttributesExW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "fInfoLevelId", + "type": "GET_FILEEX_INFO_LEVELS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + } + ], + "GetFileInformationByHandle": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileInformation", + "type": "LPBY_HANDLE_FILE_INFORMATION" + } + ], + "GetFileSize": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + } + ], + "GetFileSizeEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpFileSize", + "type": "PLARGE_INTEGER" + } + ], + "GetFileType": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "GetFinalPathNameByHandleA": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpszFilePath", + "type": "LPSTR" + }, + { + "name": "cchFilePath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFinalPathNameByHandleW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpszFilePath", + "type": "LPWSTR" + }, + { + "name": "cchFilePath", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "GetFileTime": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCreationTime", + "type": "LPFILETIME" + }, + { + "name": "lpLastAccessTime", + "type": "LPFILETIME" + }, + { + "name": "lpLastWriteTime", + "type": "LPFILETIME" + } + ], + "GetFullPathNameW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "lpFilePart", + "type": "LPWSTR" + } + ], + "GetFullPathNameA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "lpFilePart", + "type": "LPSTR" + } + ], + "GetLogicalDrives": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetLongPathNameA": [ + { + "name": "lpszShortPath", + "type": "LPCSTR" + }, + { + "name": "lpszLongPath", + "type": "LPSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + } + ], + "GetLongPathNameW": [ + { + "name": "lpszShortPath", + "type": "LPCWSTR" + }, + { + "name": "lpszLongPath", + "type": "LPWSTR" + }, + { + "name": "cchBuffer", + "type": "DWORD" + } + ], + "GetVolumeInformationByHandleW": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpVolumeNameBuffer", + "type": "LPWSTR" + }, + { + "name": "nVolumeNameSize", + "type": "DWORD" + }, + { + "name": "lpVolumeSerialNumber", + "type": "LPDWORD" + }, + { + "name": "lpMaximumComponentLength", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemFlags", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemNameBuffer", + "type": "LPWSTR" + }, + { + "name": "nFileSystemNameSize", + "type": "DWORD" + } + ], + "GetVolumeInformationW": [ + { + "name": "lpRootPathName", + "type": "LPCWSTR" + }, + { + "name": "lpVolumeNameBuffer", + "type": "LPWSTR" + }, + { + "name": "nVolumeNameSize", + "type": "DWORD" + }, + { + "name": "lpVolumeSerialNumber", + "type": "LPDWORD" + }, + { + "name": "lpMaximumComponentLength", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemFlags", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemNameBuffer", + "type": "LPWSTR" + }, + { + "name": "nFileSystemNameSize", + "type": "DWORD" + } + ], + "LocalFileTimeToFileTime": [ + { + "name": "lpLocalFileTime", + "type": "FILETIME" + }, + { + "name": "lpFileTime", + "type": "LPFILETIME" + } + ], + "LockFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToLockLow", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToLockHigh", + "type": "DWORD" + } + ], + "LockFileEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToLockLow", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToLockHigh", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReadFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesRead", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "ReadFileEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "ReadFileScatter": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "aSegmentArray", + "type": "FILE_SEGMENT_ELEMENT" + }, + { + "name": "nNumberOfBytesToRead", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "RemoveDirectoryA": [ + { + "name": "lpPathName", + "type": "LPCSTR" + } + ], + "RemoveDirectoryW": [ + { + "name": "lpPathName", + "type": "LPCWSTR" + } + ], + "SetEndOfFile": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "SetFileAttributesA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + } + ], + "SetFileAttributesW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + } + ], + "SetFileInformationByHandle": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "FileInformationClass", + "type": "FILE_INFO_BY_HANDLE_CLASS" + }, + { + "name": "lpFileInformation", + "type": "LPVOID" + }, + { + "name": "dwBufferSize", + "type": "DWORD" + } + ], + "SetFilePointer": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lDistanceToMove", + "type": "LONG" + }, + { + "name": "lpDistanceToMoveHigh", + "type": "PLONG" + }, + { + "name": "dwMoveMethod", + "type": "DWORD" + } + ], + "SetFilePointerEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "liDistanceToMove", + "type": "LARGE_INTEGER" + }, + { + "name": "lpNewFilePointer", + "type": "PLARGE_INTEGER" + }, + { + "name": "dwMoveMethod", + "type": "DWORD" + } + ], + "SetFileTime": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpCreationTime", + "type": "FILETIME" + }, + { + "name": "lpLastAccessTime", + "type": "FILETIME" + }, + { + "name": "lpLastWriteTime", + "type": "FILETIME" + } + ], + "SetFileValidData": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ValidDataLength", + "type": "LONGLONG" + } + ], + "UnlockFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwFileOffsetLow", + "type": "DWORD" + }, + { + "name": "dwFileOffsetHigh", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToUnlockLow", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToUnlockHigh", + "type": "DWORD" + } + ], + "UnlockFileEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToUnlockLow", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesToUnlockHigh", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "WriteFile": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpNumberOfBytesWritten", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "WriteFileEx": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "lpBuffer", + "type": "LPCVOID" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPOVERLAPPED_COMPLETION_ROUTINE" + } + ], + "WriteFileGather": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "aSegmentArray", + "type": "FILE_SEGMENT_ELEMENT" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "lpReserved", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetTempPathW": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + } + ], + "CreateFile2": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwShareMode", + "type": "DWORD" + }, + { + "name": "dwCreationDisposition", + "type": "DWORD" + }, + { + "name": "pCreateExParams", + "type": "LPCREATEFILE2_EXTENDED_PARAMETERS" + } + ], + "SetFileIoOverlappedRange": [ + { + "name": "FileHandle", + "type": "HANDLE" + }, + { + "name": "OverlappedRangeStart", + "type": "PUCHAR" + }, + { + "name": "Length", + "type": "ULONG" + } + ], + "GetCompressedFileSizeA": [ + { + "name": "lpFileName", + "type": "LPCSTR" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + } + ], + "GetCompressedFileSizeW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "lpFileSizeHigh", + "type": "LPDWORD" + } + ], + "FindFirstStreamW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "InfoLevel", + "type": "STREAM_INFO_LEVELS" + }, + { + "name": "lpFindStreamData", + "type": "LPVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "FindNextStreamW": [ + { + "name": "hFindStream", + "type": "HANDLE" + }, + { + "name": "lpFindStreamData", + "type": "LPVOID" + } + ], + "AreFileApisANSI": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetTempPathA": [ + { + "name": "nBufferLength", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + } + ], + "FindFirstFileNameW": [ + { + "name": "lpFileName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "StringLength", + "type": "LPDWORD" + }, + { + "name": "LinkName", + "type": "PWSTR" + } + ], + "FindNextFileNameW": [ + { + "name": "hFindStream", + "type": "HANDLE" + }, + { + "name": "StringLength", + "type": "LPDWORD" + }, + { + "name": "LinkName", + "type": "PWSTR" + } + ], + "GetVolumeInformationA": [ + { + "name": "lpRootPathName", + "type": "LPCSTR" + }, + { + "name": "lpVolumeNameBuffer", + "type": "LPSTR" + }, + { + "name": "nVolumeNameSize", + "type": "DWORD" + }, + { + "name": "lpVolumeSerialNumber", + "type": "LPDWORD" + }, + { + "name": "lpMaximumComponentLength", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemFlags", + "type": "LPDWORD" + }, + { + "name": "lpFileSystemNameBuffer", + "type": "LPSTR" + }, + { + "name": "nFileSystemNameSize", + "type": "DWORD" + } + ], + "SetFileApisToOEM": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetFileApisToANSI": [ + { + "name": "VOID", + "type": "void" + } + ], + "InitializeSRWLock": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "ReleaseSRWLockExclusive": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "ReleaseSRWLockShared": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "AcquireSRWLockExclusive": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "AcquireSRWLockShared": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "TryAcquireSRWLockExclusive": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "TryAcquireSRWLockShared": [ + { + "name": "SRWLock", + "type": "PSRWLOCK" + } + ], + "InitializeCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "EnterCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "LeaveCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "InitializeCriticalSectionAndSpinCount": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + }, + { + "name": "dwSpinCount", + "type": "DWORD" + } + ], + "InitializeCriticalSectionEx": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + }, + { + "name": "dwSpinCount", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "SetCriticalSectionSpinCount": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + }, + { + "name": "dwSpinCount", + "type": "DWORD" + } + ], + "TryEnterCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "DeleteCriticalSection": [ + { + "name": "lpCriticalSection", + "type": "LPCRITICAL_SECTION" + } + ], + "InitOnceInitialize": [ + { + "name": "InitOnce", + "type": "PINIT_ONCE" + } + ], + "InitOnceExecuteOnce": [ + { + "name": "InitOnce", + "type": "PINIT_ONCE" + }, + { + "name": "InitFn", + "type": "PINIT_ONCE_FN" + }, + { + "name": "Parameter", + "type": "PVOID" + }, + { + "name": "Context", + "type": "LPVOID" + } + ], + "InitOnceBeginInitialize": [ + { + "name": "lpInitOnce", + "type": "LPINIT_ONCE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fPending", + "type": "PBOOL" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "InitOnceComplete": [ + { + "name": "lpInitOnce", + "type": "LPINIT_ONCE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpContext", + "type": "LPVOID" + } + ], + "InitializeConditionVariable": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + } + ], + "WakeConditionVariable": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + } + ], + "WakeAllConditionVariable": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + } + ], + "SleepConditionVariableCS": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + }, + { + "name": "CriticalSection", + "type": "PCRITICAL_SECTION" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "SleepConditionVariableSRW": [ + { + "name": "ConditionVariable", + "type": "PCONDITION_VARIABLE" + }, + { + "name": "SRWLock", + "type": "PSRWLOCK" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "ULONG" + } + ], + "SetEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "ResetEvent": [ + { + "name": "hEvent", + "type": "HANDLE" + } + ], + "ReleaseSemaphore": [ + { + "name": "hSemaphore", + "type": "HANDLE" + }, + { + "name": "lReleaseCount", + "type": "LONG" + }, + { + "name": "lpPreviousCount", + "type": "LPLONG" + } + ], + "ReleaseMutex": [ + { + "name": "hMutex", + "type": "HANDLE" + } + ], + "WaitForSingleObject": [ + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "WaitForSingleObjectEx": [ + { + "name": "hHandle", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "WaitForMultipleObjectsEx": [ + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpHandles", + "type": "HANDLE" + }, + { + "name": "bWaitAll", + "type": "BOOL" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "CreateMutexA": [ + { + "name": "lpMutexAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInitialOwner", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateMutexW": [ + { + "name": "lpMutexAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bInitialOwner", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenMutexW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "CreateEventA": [ + { + "name": "lpEventAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bManualReset", + "type": "BOOL" + }, + { + "name": "bInitialState", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateEventW": [ + { + "name": "lpEventAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bManualReset", + "type": "BOOL" + }, + { + "name": "bInitialState", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenEventA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "OpenEventW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenSemaphoreW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCWSTR" + } + ], + "OpenWaitableTimerW": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpTimerName", + "type": "LPCWSTR" + } + ], + "SetWaitableTimerEx": [ + { + "name": "hTimer", + "type": "HANDLE" + }, + { + "name": "lpDueTime", + "type": "LARGE_INTEGER" + }, + { + "name": "lPeriod", + "type": "LONG" + }, + { + "name": "pfnCompletionRoutine", + "type": "PTIMERAPCROUTINE" + }, + { + "name": "lpArgToCompletionRoutine", + "type": "LPVOID" + }, + { + "name": "WakeContext", + "type": "PREASON_CONTEXT" + }, + { + "name": "TolerableDelay", + "type": "ULONG" + } + ], + "SetWaitableTimer": [ + { + "name": "hTimer", + "type": "HANDLE" + }, + { + "name": "lpDueTime", + "type": "LARGE_INTEGER" + }, + { + "name": "lPeriod", + "type": "LONG" + }, + { + "name": "pfnCompletionRoutine", + "type": "PTIMERAPCROUTINE" + }, + { + "name": "lpArgToCompletionRoutine", + "type": "LPVOID" + }, + { + "name": "fResume", + "type": "BOOL" + } + ], + "CancelWaitableTimer": [ + { + "name": "hTimer", + "type": "HANDLE" + } + ], + "CreateMutexExA": [ + { + "name": "lpMutexAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateMutexExW": [ + { + "name": "lpMutexAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateEventExA": [ + { + "name": "lpEventAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateEventExW": [ + { + "name": "lpEventAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "CreateWaitableTimerExW": [ + { + "name": "lpTimerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpTimerName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "EnterSynchronizationBarrier": [ + { + "name": "lpBarrier", + "type": "LPSYNCHRONIZATION_BARRIER" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "InitializeSynchronizationBarrier": [ + { + "name": "lpBarrier", + "type": "LPSYNCHRONIZATION_BARRIER" + }, + { + "name": "lTotalThreads", + "type": "LONG" + }, + { + "name": "lSpinCount", + "type": "LONG" + } + ], + "DeleteSynchronizationBarrier": [ + { + "name": "lpBarrier", + "type": "LPSYNCHRONIZATION_BARRIER" + } + ], + "Sleep": [ + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "WaitOnAddress": [ + { + "name": "Address", + "type": "void" + }, + { + "name": "CompareAddress", + "type": "PVOID" + }, + { + "name": "AddressSize", + "type": "SIZE_T" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "WakeByAddressSingle": [ + { + "name": "Address", + "type": "PVOID" + } + ], + "WakeByAddressAll": [ + { + "name": "Address", + "type": "PVOID" + } + ], + "SignalObjectAndWait": [ + { + "name": "hObjectToSignal", + "type": "HANDLE" + }, + { + "name": "hObjectToWaitOn", + "type": "HANDLE" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ], + "WaitForMultipleObjects": [ + { + "name": "nCount", + "type": "DWORD" + }, + { + "name": "lpHandles", + "type": "HANDLE" + }, + { + "name": "bWaitAll", + "type": "BOOL" + }, + { + "name": "dwMilliseconds", + "type": "DWORD" + } + ], + "CreateWaitableTimerW": [ + { + "name": "lpTimerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bManualReset", + "type": "BOOL" + }, + { + "name": "lpTimerName", + "type": "LPCWSTR" + } + ], + "OpenMutexA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "OpenSemaphoreA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpName", + "type": "LPCSTR" + } + ], + "CreateWaitableTimerA": [ + { + "name": "lpTimerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "bManualReset", + "type": "BOOL" + }, + { + "name": "lpTimerName", + "type": "LPCSTR" + } + ], + "OpenWaitableTimerA": [ + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "bInheritHandle", + "type": "BOOL" + }, + { + "name": "lpTimerName", + "type": "LPCSTR" + } + ], + "CreateWaitableTimerExA": [ + { + "name": "lpTimerAttributes", + "type": "LPSECURITY_ATTRIBUTES" + }, + { + "name": "lpTimerName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + } + ], + "GetAppContainerNamedObjectPath": [ + { + "name": "Token", + "type": "HANDLE" + }, + { + "name": "AppContainerSid", + "type": "PSID" + }, + { + "name": "ObjectPathLength", + "type": "ULONG" + }, + { + "name": "ObjectPath", + "type": "LPWSTR" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "GlobalMemoryStatusEx": [ + { + "name": "lpBuffer", + "type": "LPMEMORYSTATUSEX" + } + ], + "GetSystemInfo": [ + { + "name": "lpSystemInfo", + "type": "LPSYSTEM_INFO" + } + ], + "GetSystemTime": [ + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "GetSystemTimeAsFileTime": [ + { + "name": "lpSystemTimeAsFileTime", + "type": "LPFILETIME" + } + ], + "GetLocalTime": [ + { + "name": "lpSystemTime", + "type": "LPSYSTEMTIME" + } + ], + "GetVersion": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetLocalTime": [ + { + "name": "lpSystemTime", + "type": "SYSTEMTIME" + } + ], + "GetTickCount": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetTickCount64": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetSystemTimeAdjustment": [ + { + "name": "lpTimeAdjustment", + "type": "PDWORD" + }, + { + "name": "lpTimeIncrement", + "type": "PDWORD" + }, + { + "name": "lpTimeAdjustmentDisabled", + "type": "PBOOL" + } + ], + "GetSystemDirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemDirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetWindowsDirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetWindowsDirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemWindowsDirectoryA": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetSystemWindowsDirectoryW": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + } + ], + "GetComputerNameExA": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "GetComputerNameExW": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "nSize", + "type": "LPDWORD" + } + ], + "SetComputerNameExW": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPCWSTR" + } + ], + "SetSystemTime": [ + { + "name": "lpSystemTime", + "type": "SYSTEMTIME" + } + ], + "GetVersionExA": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOA" + } + ], + "GetVersionExW": [ + { + "name": "lpVersionInformation", + "type": "LPOSVERSIONINFOW" + } + ], + "GetLogicalProcessorInformation": [ + { + "name": "Buffer", + "type": "PSYSTEM_LOGICAL_PROCESSOR_INFORMATION" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "GetLogicalProcessorInformationEx": [ + { + "name": "RelationshipType", + "type": "LOGICAL_PROCESSOR_RELATIONSHIP" + }, + { + "name": "Buffer", + "type": "PSYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "GetNativeSystemInfo": [ + { + "name": "lpSystemInfo", + "type": "LPSYSTEM_INFO" + } + ], + "GetSystemTimePreciseAsFileTime": [ + { + "name": "lpSystemTimeAsFileTime", + "type": "LPFILETIME" + } + ], + "GetProductInfo": [ + { + "name": "dwOSMajorVersion", + "type": "DWORD" + }, + { + "name": "dwOSMinorVersion", + "type": "DWORD" + }, + { + "name": "dwSpMajorVersion", + "type": "DWORD" + }, + { + "name": "dwSpMinorVersion", + "type": "DWORD" + }, + { + "name": "pdwReturnedProductType", + "type": "PDWORD" + } + ], + "EnumSystemFirmwareTables": [ + { + "name": "FirmwareTableProviderSignature", + "type": "DWORD" + }, + { + "name": "pFirmwareTableEnumBuffer", + "type": "PVOID" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "GetSystemFirmwareTable": [ + { + "name": "FirmwareTableProviderSignature", + "type": "DWORD" + }, + { + "name": "FirmwareTableID", + "type": "DWORD" + }, + { + "name": "pFirmwareTableBuffer", + "type": "PVOID" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "GetPhysicallyInstalledSystemMemory": [ + { + "name": "TotalMemoryInKilobytes", + "type": "PULONGLONG" + } + ], + "SetSystemTimeAdjustment": [ + { + "name": "dwTimeAdjustment", + "type": "DWORD" + }, + { + "name": "bTimeAdjustmentDisabled", + "type": "BOOL" + } + ], + "InstallELAMCertificateInfo": [ + { + "name": "ELAMFile", + "type": "HANDLE" + } + ], + "GetProcessorSystemCycleTime": [ + { + "name": "Group", + "type": "USHORT" + }, + { + "name": "Buffer", + "type": "PSYSTEM_PROCESSOR_CYCLE_TIME_INFORMATION" + }, + { + "name": "ReturnedLength", + "type": "PDWORD" + } + ], + "SetComputerNameA": [ + { + "name": "lpComputerName", + "type": "LPCSTR" + } + ], + "SetComputerNameW": [ + { + "name": "lpComputerName", + "type": "LPCWSTR" + } + ], + "SetComputerNameExA": [ + { + "name": "NameType", + "type": "COMPUTER_NAME_FORMAT" + }, + { + "name": "lpBuffer", + "type": "LPCSTR" + } + ], + "GetNumaHighestNodeNumber": [ + { + "name": "HighestNodeNumber", + "type": "PULONG" + } + ], + "GetNumaNodeProcessorMaskEx": [ + { + "name": "Node", + "type": "USHORT" + }, + { + "name": "ProcessorMask", + "type": "PGROUP_AFFINITY" + } + ], + "GetNumaProximityNodeEx": [ + { + "name": "ProximityId", + "type": "ULONG" + }, + { + "name": "NodeNumber", + "type": "PUSHORT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/kernel32_lib.json b/qiling/extensions/windows_sdk/kernel32_lib.json new file mode 100644 index 000000000..38ea744cf --- /dev/null +++ b/qiling/extensions/windows_sdk/kernel32_lib.json @@ -0,0 +1,40 @@ +{ + "GetSystemWow64Directory2A": [ + { + "name": "lpBuffer", + "type": "LPSTR" + }, + { + "name": "uSize", + "type": "UINT" + }, + { + "name": "ImageFileMachineType", + "type": "WORD" + } + ], + "GetSystemWow64Directory2W": [ + { + "name": "lpBuffer", + "type": "LPWSTR" + }, + { + "name": "uSize", + "type": "UINT" + }, + { + "name": "ImageFileMachineType", + "type": "WORD" + } + ], + "IsWow64GuestMachineSupported": [ + { + "name": "WowGuestMachine", + "type": "USHORT" + }, + { + "name": "MachineIsSupported", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/kernel_dll.json b/qiling/extensions/windows_sdk/kernel_dll.json new file mode 100644 index 000000000..954a762fd --- /dev/null +++ b/qiling/extensions/windows_sdk/kernel_dll.json @@ -0,0 +1,34 @@ +{ + "GetAutoRotationState": [ + { + "name": "pState", + "type": "PAR_STATE" + } + ], + "GetDisplayAutoRotationPreferences": [ + { + "name": "pOrientation", + "type": "ORIENTATION_PREFERENCE" + } + ], + "GetDisplayAutoRotationPreferencesByProcessId": [ + { + "name": "dwProcessId", + "type": "DWORD" + }, + { + "name": "pOrientation", + "type": "ORIENTATION_PREFERENCE" + }, + { + "name": "fRotateScreen", + "type": "BOOL" + } + ], + "SetDisplayAutoRotationPreferences": [ + { + "name": "orientation", + "type": "ORIENTATION_PREFERENCE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/kernelbase_dll.json b/qiling/extensions/windows_sdk/kernelbase_dll.json new file mode 100644 index 000000000..6251dc354 --- /dev/null +++ b/qiling/extensions/windows_sdk/kernelbase_dll.json @@ -0,0 +1,106 @@ +{ + "WerRegisterAppLocalDump": [ + { + "name": "localAppDataRelativePath", + "type": "PCWSTR" + } + ], + "TlsAlloc": [ + { + "name": "VOID", + "type": "void" + } + ], + "TlsGetValue": [ + { + "name": "dwTlsIndex", + "type": "DWORD" + } + ], + "TlsSetValue": [ + { + "name": "dwTlsIndex", + "type": "DWORD" + }, + { + "name": "lpTlsValue", + "type": "LPVOID" + } + ], + "TlsFree": [ + { + "name": "dwTlsIndex", + "type": "DWORD" + } + ], + "SetProcessValidCallTargets": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "VirtualAddress", + "type": "PVOID" + }, + { + "name": "RegionSize", + "type": "SIZE_T" + }, + { + "name": "NumberOfOffsets", + "type": "ULONG" + }, + { + "name": "OffsetInformation", + "type": "PCFG_CALL_TARGET_INFO" + } + ], + "OpenCommPort": [ + { + "name": "uPortNumber", + "type": "ULONG" + }, + { + "name": "dwDesiredAccess", + "type": "DWORD" + }, + { + "name": "dwFlagsAndAttributes", + "type": "DWORD" + } + ], + "GetCommPorts": [ + { + "name": "lpPortNumbers", + "type": "PULONG" + }, + { + "name": "uPortNumbersCount", + "type": "ULONG" + }, + { + "name": "puPortNumbersFound", + "type": "PULONG" + } + ], + "CompareObjectHandles": [ + { + "name": "hFirstObjectHandle", + "type": "HANDLE" + }, + { + "name": "hSecondObjectHandle", + "type": "HANDLE" + } + ], + "SleepEx": [ + { + "name": "dwMilliseconds", + "type": "DWORD" + }, + { + "name": "bAlertable", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ktmw32.json b/qiling/extensions/windows_sdk/ktmw32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ktmw32.json rename to qiling/extensions/windows_sdk/ktmw32_dll.json diff --git a/qiling/extensions/windows_sdk/loadperf.json b/qiling/extensions/windows_sdk/loadperf_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/loadperf.json rename to qiling/extensions/windows_sdk/loadperf_dll.json diff --git a/qiling/extensions/windows_sdk/Lz32.json b/qiling/extensions/windows_sdk/lz32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Lz32.json rename to qiling/extensions/windows_sdk/lz32_dll.json diff --git a/qiling/extensions/windows_sdk/mdmregistration.json b/qiling/extensions/windows_sdk/mdmregistration_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mdmregistration.json rename to qiling/extensions/windows_sdk/mdmregistration_dll.json diff --git a/qiling/extensions/windows_sdk/mf.json b/qiling/extensions/windows_sdk/mf_dll.json similarity index 76% rename from qiling/extensions/windows_sdk/mf.json rename to qiling/extensions/windows_sdk/mf_dll.json index ba2fa52cf..51fdf25e1 100644 --- a/qiling/extensions/windows_sdk/mf.json +++ b/qiling/extensions/windows_sdk/mf_dll.json @@ -1,4 +1,154 @@ { + "MFCreateASFContentInfo": [ + { + "name": "ppIContentInfo", + "type": "IMFASFContentInfo" + } + ], + "MFCreateASFIndexer": [ + { + "name": "ppIIndexer", + "type": "IMFASFIndexer" + } + ], + "MFCreateASFIndexerByteStream": [ + { + "name": "pIContentByteStream", + "type": "IMFByteStream" + }, + { + "name": "cbIndexStartOffset", + "type": "QWORD" + }, + { + "name": "pIIndexByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateASFSplitter": [ + { + "name": "ppISplitter", + "type": "IMFASFSplitter" + } + ], + "MFCreateASFProfile": [ + { + "name": "ppIProfile", + "type": "IMFASFProfile" + } + ], + "MFCreateASFProfileFromPresentationDescriptor": [ + { + "name": "pIPD", + "type": "IMFPresentationDescriptor" + }, + { + "name": "ppIProfile", + "type": "IMFASFProfile" + } + ], + "MFCreatePresentationDescriptorFromASFProfile": [ + { + "name": "pIProfile", + "type": "IMFASFProfile" + }, + { + "name": "ppIPD", + "type": "IMFPresentationDescriptor" + } + ], + "MFCreateASFMultiplexer": [ + { + "name": "ppIMultiplexer", + "type": "IMFASFMultiplexer" + } + ], + "MFCreateASFStreamSelector": [ + { + "name": "pIASFProfile", + "type": "IMFASFProfile" + }, + { + "name": "ppSelector", + "type": "IMFASFStreamSelector" + } + ], + "MFCreateASFMediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateASFMediaSinkActivate": [ + { + "name": "pwszFileName", + "type": "LPCWSTR" + }, + { + "name": "pContentInfo", + "type": "IMFASFContentInfo" + }, + { + "name": "ppIActivate", + "type": "IMFActivate" + } + ], + "MFCreateWMVEncoderActivate": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "pEncodingConfigurationProperties", + "type": "IPropertyStore" + }, + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateWMAEncoderActivate": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "pEncodingConfigurationProperties", + "type": "IPropertyStore" + }, + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFCreateASFStreamingMediaSink": [ + { + "name": "pIByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppIMediaSink", + "type": "IMFMediaSink" + } + ], + "MFCreateASFStreamingMediaSinkActivate": [ + { + "name": "pByteStreamActivate", + "type": "IMFActivate" + }, + { + "name": "pContentInfo", + "type": "IMFASFContentInfo" + }, + { + "name": "ppIActivate", + "type": "IMFActivate" + } + ], "MFCreateMediaSession": [ { "name": "pConfiguration", @@ -27,18 +177,6 @@ "type": "IMFActivate" } ], - "MFCreateSourceResolver": [ - { - "name": "ppISourceResolver", - "type": "IMFSourceResolver" - } - ], - "CreatePropertyStore": [ - { - "name": "ppStore", - "type": "IPropertyStore" - } - ], "MFGetSupportedSchemes": [ { "name": "pPropVarSchemeArray", @@ -109,78 +247,12 @@ "type": "IMFPresentationClock" } ], - "MFCreateSystemTimeSource": [ - { - "name": "ppSystemTimeSource", - "type": "IMFPresentationTimeSource" - } - ], - "MFCreatePresentationDescriptor": [ - { - "name": "cStreamDescriptors", - "type": "DWORD" - }, - { - "name": "apStreamDescriptors", - "type": "IMFStreamDescriptor" - }, - { - "name": "ppPresentationDescriptor", - "type": "IMFPresentationDescriptor" - } - ], "MFRequireProtectedEnvironment": [ { "name": "pPresentationDescriptor", "type": "IMFPresentationDescriptor" } ], - "MFSerializePresentationDescriptor": [ - { - "name": "pPD", - "type": "IMFPresentationDescriptor" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "ppbData", - "type": "BYTE" - } - ], - "MFDeserializePresentationDescriptor": [ - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "ppPD", - "type": "IMFPresentationDescriptor" - } - ], - "MFCreateStreamDescriptor": [ - { - "name": "dwStreamIdentifier", - "type": "DWORD" - }, - { - "name": "cMediaTypes", - "type": "DWORD" - }, - { - "name": "apMediaTypes", - "type": "IMFMediaType" - }, - { - "name": "ppDescriptor", - "type": "IMFStreamDescriptor" - } - ], "MFCreateSimpleTypeHandler": [ { "name": "ppHandler", @@ -545,80 +617,6 @@ "type": "IMFActivate" } ], - "MFCreateTrackedSample": [ - { - "name": "ppMFSample", - "type": "IMFTrackedSample" - } - ], - "MFCreateMFByteStreamOnStream": [ - { - "name": "pStream", - "type": "IStream" - }, - { - "name": "ppByteStream", - "type": "IMFByteStream" - } - ], - "MFCreateStreamOnMFByteStream": [ - { - "name": "pByteStream", - "type": "IMFByteStream" - }, - { - "name": "ppStream", - "type": "IStream" - } - ], - "MFCreateMFByteStreamOnStreamEx": [ - { - "name": "punkStream", - "type": "IUnknown" - }, - { - "name": "ppByteStream", - "type": "IMFByteStream" - } - ], - "MFCreateStreamOnMFByteStreamEx": [ - { - "name": "pByteStream", - "type": "IMFByteStream" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "MFCreateMediaTypeFromProperties": [ - { - "name": "punkStream", - "type": "IUnknown" - }, - { - "name": "ppMediaType", - "type": "IMFMediaType" - } - ], - "MFCreatePropertiesFromMediaType": [ - { - "name": "pMediaType", - "type": "IMFMediaType" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], "MFEnumDeviceSources": [ { "name": "pAttributes", @@ -688,77 +686,5 @@ "name": "id", "type": "LPWSTR" } - ], - "MFCreateContentProtectionDevice": [ - { - "name": "ProtectionSystemId", - "type": "GUID" - }, - { - "name": "ContentProtectionDevice", - "type": "IMFContentProtectionDevice" - } - ], - "MFIsContentProtectionDeviceSupported": [ - { - "name": "ProtectionSystemId", - "type": "GUID" - }, - { - "name": "isSupported", - "type": "BOOL" - } - ], - "MFCreateContentDecryptorContext": [ - { - "name": "guidMediaProtectionSystemId", - "type": "GUID" - }, - { - "name": "pD3DManager", - "type": "IMFDXGIDeviceManager" - }, - { - "name": "pContentProtectionDevice", - "type": "IMFContentProtectionDevice" - }, - { - "name": "ppContentDecryptorContext", - "type": "IMFContentDecryptorContext" - } - ], - "MFCreateSensorProfile": [ - { - "name": "ProfileType", - "type": "GUID" - }, - { - "name": "ProfileIndex", - "type": "UINT32" - }, - { - "name": "Constraints", - "type": "LPCWSTR" - }, - { - "name": "ppProfile", - "type": "IMFSensorProfile" - } - ], - "MFCreateSensorProfileCollection": [ - { - "name": "ppSensorProfile", - "type": "IMFSensorProfileCollection" - } - ], - "MFCreateSensorActivityMonitor": [ - { - "name": "pCallback", - "type": "IMFSensorActivitiesReportCallback" - }, - { - "name": "ppActivityMonitor", - "type": "IMFSensorActivityMonitor" - } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mfplat.json b/qiling/extensions/windows_sdk/mfplat.json deleted file mode 100644 index 7f7bc7db9..000000000 --- a/qiling/extensions/windows_sdk/mfplat.json +++ /dev/null @@ -1,1702 +0,0 @@ -{ - "MFStartup": [ - { - "name": "Version", - "type": "ULONG" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "MFPutWorkItem": [ - { - "name": "dwQueue", - "type": "DWORD" - }, - { - "name": "pCallback", - "type": "IMFAsyncCallback" - }, - { - "name": "pState", - "type": "IUnknown" - } - ], - "MFPutWorkItem2": [ - { - "name": "dwQueue", - "type": "DWORD" - }, - { - "name": "Priority", - "type": "LONG" - }, - { - "name": "pCallback", - "type": "IMFAsyncCallback" - }, - { - "name": "pState", - "type": "IUnknown" - } - ], - "MFPutWorkItemEx": [ - { - "name": "dwQueue", - "type": "DWORD" - }, - { - "name": "pResult", - "type": "IMFAsyncResult" - } - ], - "MFPutWorkItemEx2": [ - { - "name": "dwQueue", - "type": "DWORD" - }, - { - "name": "Priority", - "type": "LONG" - }, - { - "name": "pResult", - "type": "IMFAsyncResult" - } - ], - "MFPutWaitingWorkItem": [ - { - "name": "hEvent", - "type": "HANDLE" - }, - { - "name": "Priority", - "type": "LONG" - }, - { - "name": "pResult", - "type": "IMFAsyncResult" - }, - { - "name": "pKey", - "type": "MFWORKITEM_KEY" - } - ], - "MFAllocateSerialWorkQueue": [ - { - "name": "dwWorkQueue", - "type": "DWORD" - }, - { - "name": "pdwWorkQueue", - "type": "DWORD" - } - ], - "MFScheduleWorkItemEx": [ - { - "name": "pResult", - "type": "IMFAsyncResult" - }, - { - "name": "Timeout", - "type": "INT64" - }, - { - "name": "pKey", - "type": "MFWORKITEM_KEY" - } - ], - "MFScheduleWorkItem": [ - { - "name": "pCallback", - "type": "IMFAsyncCallback" - }, - { - "name": "pState", - "type": "IUnknown" - }, - { - "name": "Timeout", - "type": "INT64" - }, - { - "name": "pKey", - "type": "MFWORKITEM_KEY" - } - ], - "MFCancelWorkItem": [ - { - "name": "Key", - "type": "MFWORKITEM_KEY" - } - ], - "MFGetTimerPeriodicity": [ - { - "name": "Periodicity", - "type": "DWORD" - } - ], - "MFAddPeriodicCallback": [ - { - "name": "Callback", - "type": "MFPERIODICCALLBACK" - }, - { - "name": "pContext", - "type": "IUnknown" - }, - { - "name": "pdwKey", - "type": "DWORD" - } - ], - "MFRemovePeriodicCallback": [ - { - "name": "dwKey", - "type": "DWORD" - } - ], - "MFAllocateWorkQueueEx": [ - { - "name": "WorkQueueType", - "type": "MFASYNC_WORKQUEUE_TYPE" - }, - { - "name": "pdwWorkQueue", - "type": "DWORD" - } - ], - "MFAllocateWorkQueue": [ - { - "name": "pdwWorkQueue", - "type": "DWORD" - } - ], - "MFLockWorkQueue": [ - { - "name": "dwWorkQueue", - "type": "DWORD" - } - ], - "MFUnlockWorkQueue": [ - { - "name": "dwWorkQueue", - "type": "DWORD" - } - ], - "MFBeginRegisterWorkQueueWithMMCSS": [ - { - "name": "dwWorkQueueId", - "type": "DWORD" - }, - { - "name": "wszClass", - "type": "LPCWSTR" - }, - { - "name": "dwTaskId", - "type": "DWORD" - }, - { - "name": "pDoneCallback", - "type": "IMFAsyncCallback" - }, - { - "name": "pDoneState", - "type": "IUnknown" - } - ], - "MFBeginRegisterWorkQueueWithMMCSSEx": [ - { - "name": "dwWorkQueueId", - "type": "DWORD" - }, - { - "name": "wszClass", - "type": "LPCWSTR" - }, - { - "name": "dwTaskId", - "type": "DWORD" - }, - { - "name": "lPriority", - "type": "LONG" - }, - { - "name": "pDoneCallback", - "type": "IMFAsyncCallback" - }, - { - "name": "pDoneState", - "type": "IUnknown" - } - ], - "MFEndRegisterWorkQueueWithMMCSS": [ - { - "name": "pResult", - "type": "IMFAsyncResult" - }, - { - "name": "pdwTaskId", - "type": "DWORD" - } - ], - "MFBeginUnregisterWorkQueueWithMMCSS": [ - { - "name": "dwWorkQueueId", - "type": "DWORD" - }, - { - "name": "pDoneCallback", - "type": "IMFAsyncCallback" - }, - { - "name": "pDoneState", - "type": "IUnknown" - } - ], - "MFEndUnregisterWorkQueueWithMMCSS": [ - { - "name": "pResult", - "type": "IMFAsyncResult" - } - ], - "MFGetWorkQueueMMCSSClass": [ - { - "name": "dwWorkQueueId", - "type": "DWORD" - }, - { - "name": "pwszClass", - "type": "LPWSTR" - }, - { - "name": "pcchClass", - "type": "DWORD" - } - ], - "MFGetWorkQueueMMCSSTaskId": [ - { - "name": "dwWorkQueueId", - "type": "DWORD" - }, - { - "name": "pdwTaskId", - "type": "LPDWORD" - } - ], - "MFRegisterPlatformWithMMCSS": [ - { - "name": "wszClass", - "type": "PCWSTR" - }, - { - "name": "pdwTaskId", - "type": "DWORD" - }, - { - "name": "lPriority", - "type": "LONG" - } - ], - "MFLockSharedWorkQueue": [ - { - "name": "wszClass", - "type": "PCWSTR" - }, - { - "name": "BasePriority", - "type": "LONG" - }, - { - "name": "pdwTaskId", - "type": "DWORD" - }, - { - "name": "pID", - "type": "DWORD" - } - ], - "MFGetWorkQueueMMCSSPriority": [ - { - "name": "dwWorkQueueId", - "type": "DWORD" - }, - { - "name": "lPriority", - "type": "LONG" - } - ], - "MFCreateAsyncResult": [ - { - "name": "punkObject", - "type": "IUnknown" - }, - { - "name": "pCallback", - "type": "IMFAsyncCallback" - }, - { - "name": "punkState", - "type": "IUnknown" - }, - { - "name": "ppAsyncResult", - "type": "IMFAsyncResult" - } - ], - "MFInvokeCallback": [ - { - "name": "pAsyncResult", - "type": "IMFAsyncResult" - } - ], - "MFCreateFile": [ - { - "name": "AccessMode", - "type": "MF_FILE_ACCESSMODE" - }, - { - "name": "OpenMode", - "type": "MF_FILE_OPENMODE" - }, - { - "name": "fFlags", - "type": "MF_FILE_FLAGS" - }, - { - "name": "pwszFileURL", - "type": "LPCWSTR" - }, - { - "name": "ppIByteStream", - "type": "IMFByteStream" - } - ], - "MFCreateTempFile": [ - { - "name": "AccessMode", - "type": "MF_FILE_ACCESSMODE" - }, - { - "name": "OpenMode", - "type": "MF_FILE_OPENMODE" - }, - { - "name": "fFlags", - "type": "MF_FILE_FLAGS" - }, - { - "name": "ppIByteStream", - "type": "IMFByteStream" - } - ], - "MFBeginCreateFile": [ - { - "name": "AccessMode", - "type": "MF_FILE_ACCESSMODE" - }, - { - "name": "OpenMode", - "type": "MF_FILE_OPENMODE" - }, - { - "name": "fFlags", - "type": "MF_FILE_FLAGS" - }, - { - "name": "pwszFilePath", - "type": "LPCWSTR" - }, - { - "name": "pCallback", - "type": "IMFAsyncCallback" - }, - { - "name": "pState", - "type": "IUnknown" - }, - { - "name": "ppCancelCookie", - "type": "IUnknown" - } - ], - "MFEndCreateFile": [ - { - "name": "pResult", - "type": "IMFAsyncResult" - }, - { - "name": "ppFile", - "type": "IMFByteStream" - } - ], - "MFCancelCreateFile": [ - { - "name": "pCancelCookie", - "type": "IUnknown" - } - ], - "MFCreateMemoryBuffer": [ - { - "name": "cbMaxLength", - "type": "DWORD" - }, - { - "name": "ppBuffer", - "type": "IMFMediaBuffer" - } - ], - "MFCreateMediaBufferWrapper": [ - { - "name": "pBuffer", - "type": "IMFMediaBuffer" - }, - { - "name": "cbOffset", - "type": "DWORD" - }, - { - "name": "dwLength", - "type": "DWORD" - }, - { - "name": "ppBuffer", - "type": "IMFMediaBuffer" - } - ], - "MFCreateLegacyMediaBufferOnMFMediaBuffer": [ - { - "name": "pSample", - "type": "IMFSample" - }, - { - "name": "pMFMediaBuffer", - "type": "IMFMediaBuffer" - }, - { - "name": "cbOffset", - "type": "DWORD" - }, - { - "name": "ppMediaBuffer", - "type": "IMediaBuffer" - } - ], - "MFMapDX9FormatToDXGIFormat": [ - { - "name": "dx9", - "type": "DWORD" - } - ], - "MFMapDXGIFormatToDX9Format": [ - { - "name": "dx11", - "type": "DXGI_FORMAT" - } - ], - "MFLockDXGIDeviceManager": [ - { - "name": "pResetToken", - "type": "UINT" - }, - { - "name": "ppManager", - "type": "IMFDXGIDeviceManager" - } - ], - "MFCreateDXSurfaceBuffer": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "punkSurface", - "type": "IUnknown" - }, - { - "name": "fBottomUpWhenLinear", - "type": "BOOL" - }, - { - "name": "ppBuffer", - "type": "IMFMediaBuffer" - } - ], - "MFCreateWICBitmapBuffer": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "punkSurface", - "type": "IUnknown" - }, - { - "name": "ppBuffer", - "type": "IMFMediaBuffer" - } - ], - "MFCreateDXGISurfaceBuffer": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "punkSurface", - "type": "IUnknown" - }, - { - "name": "uSubresourceIndex", - "type": "UINT" - }, - { - "name": "fBottomUpWhenLinear", - "type": "BOOL" - }, - { - "name": "ppBuffer", - "type": "IMFMediaBuffer" - } - ], - "MFCreateVideoSampleAllocatorEx": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppSampleAllocator", - "type": "void" - } - ], - "MFCreateDXGIDeviceManager": [ - { - "name": "resetToken", - "type": "UINT" - }, - { - "name": "ppDeviceManager", - "type": "IMFDXGIDeviceManager" - } - ], - "MFCreateAlignedMemoryBuffer": [ - { - "name": "cbMaxLength", - "type": "DWORD" - }, - { - "name": "cbAligment", - "type": "DWORD" - }, - { - "name": "ppBuffer", - "type": "IMFMediaBuffer" - } - ], - "MFCreateMediaEvent": [ - { - "name": "met", - "type": "MediaEventType" - }, - { - "name": "guidExtendedType", - "type": "GUID" - }, - { - "name": "hrStatus", - "type": "HRESULT" - }, - { - "name": "pvValue", - "type": "PROPVARIANT" - }, - { - "name": "ppEvent", - "type": "IMFMediaEvent" - } - ], - "MFCreateEventQueue": [ - { - "name": "ppMediaEventQueue", - "type": "IMFMediaEventQueue" - } - ], - "MFCreateSample": [ - { - "name": "ppIMFSample", - "type": "IMFSample" - } - ], - "MFCreateAttributes": [ - { - "name": "ppMFAttributes", - "type": "IMFAttributes" - }, - { - "name": "cInitialSize", - "type": "UINT32" - } - ], - "MFInitAttributesFromBlob": [ - { - "name": "pAttributes", - "type": "IMFAttributes" - }, - { - "name": "pBuf", - "type": "UINT8" - }, - { - "name": "cbBufSize", - "type": "UINT" - } - ], - "MFGetAttributesAsBlobSize": [ - { - "name": "pAttributes", - "type": "IMFAttributes" - }, - { - "name": "pcbBufSize", - "type": "UINT32" - } - ], - "MFGetAttributesAsBlob": [ - { - "name": "pAttributes", - "type": "IMFAttributes" - }, - { - "name": "pBuf", - "type": "UINT8" - }, - { - "name": "cbBufSize", - "type": "UINT" - } - ], - "MFTRegister": [ - { - "name": "clsidMFT", - "type": "CLSID" - }, - { - "name": "guidCategory", - "type": "GUID" - }, - { - "name": "pszName", - "type": "LPWSTR" - }, - { - "name": "Flags", - "type": "UINT32" - }, - { - "name": "cInputTypes", - "type": "UINT32" - }, - { - "name": "pInputTypes", - "type": "MFT_REGISTER_TYPE_INFO" - }, - { - "name": "cOutputTypes", - "type": "UINT32" - }, - { - "name": "pOutputTypes", - "type": "MFT_REGISTER_TYPE_INFO" - }, - { - "name": "pAttributes", - "type": "IMFAttributes" - } - ], - "MFTUnregister": [ - { - "name": "clsidMFT", - "type": "CLSID" - } - ], - "MFTRegisterLocal": [ - { - "name": "pClassFactory", - "type": "IClassFactory" - }, - { - "name": "guidCategory", - "type": "GUID" - }, - { - "name": "pszName", - "type": "LPCWSTR" - }, - { - "name": "Flags", - "type": "UINT32" - }, - { - "name": "cInputTypes", - "type": "UINT32" - }, - { - "name": "pInputTypes", - "type": "MFT_REGISTER_TYPE_INFO" - }, - { - "name": "cOutputTypes", - "type": "UINT32" - }, - { - "name": "pOutputTypes", - "type": "MFT_REGISTER_TYPE_INFO" - } - ], - "MFTUnregisterLocal": [ - { - "name": "pClassFactory", - "type": "IClassFactory" - } - ], - "MFTRegisterLocalByCLSID": [ - { - "name": "clisdMFT", - "type": "IID" - }, - { - "name": "guidCategory", - "type": "GUID" - }, - { - "name": "pszName", - "type": "LPCWSTR" - }, - { - "name": "Flags", - "type": "UINT32" - }, - { - "name": "cInputTypes", - "type": "UINT32" - }, - { - "name": "pInputTypes", - "type": "MFT_REGISTER_TYPE_INFO" - }, - { - "name": "cOutputTypes", - "type": "UINT32" - }, - { - "name": "pOutputTypes", - "type": "MFT_REGISTER_TYPE_INFO" - } - ], - "MFTUnregisterLocalByCLSID": [ - { - "name": "clsidMFT", - "type": "CLSID" - } - ], - "MFTEnum": [ - { - "name": "guidCategory", - "type": "GUID" - }, - { - "name": "Flags", - "type": "UINT32" - }, - { - "name": "pInputType", - "type": "MFT_REGISTER_TYPE_INFO" - }, - { - "name": "pOutputType", - "type": "MFT_REGISTER_TYPE_INFO" - }, - { - "name": "pAttributes", - "type": "IMFAttributes" - }, - { - "name": "ppclsidMFT", - "type": "CLSID" - }, - { - "name": "pcMFTs", - "type": "UINT32" - } - ], - "MFTEnumEx": [ - { - "name": "guidCategory", - "type": "GUID" - }, - { - "name": "Flags", - "type": "UINT32" - }, - { - "name": "pInputType", - "type": "MFT_REGISTER_TYPE_INFO" - }, - { - "name": "pOutputType", - "type": "MFT_REGISTER_TYPE_INFO" - }, - { - "name": "pppMFTActivate", - "type": "IMFActivate" - }, - { - "name": "pnumMFTActivate", - "type": "UINT32" - } - ], - "MFTEnum2": [ - { - "name": "guidCategory", - "type": "GUID" - }, - { - "name": "Flags", - "type": "UINT32" - }, - { - "name": "pInputType", - "type": "MFT_REGISTER_TYPE_INFO" - }, - { - "name": "pOutputType", - "type": "MFT_REGISTER_TYPE_INFO" - }, - { - "name": "pAttributes", - "type": "IMFAttributes" - }, - { - "name": "pppMFTActivate", - "type": "IMFActivate" - }, - { - "name": "pnumMFTActivate", - "type": "UINT32" - } - ], - "MFTGetInfo": [ - { - "name": "clsidMFT", - "type": "CLSID" - }, - { - "name": "pszName", - "type": "LPWSTR" - }, - { - "name": "ppInputTypes", - "type": "MFT_REGISTER_TYPE_INFO" - }, - { - "name": "pcInputTypes", - "type": "UINT32" - }, - { - "name": "ppOutputTypes", - "type": "MFT_REGISTER_TYPE_INFO" - }, - { - "name": "pcOutputTypes", - "type": "UINT32" - }, - { - "name": "ppAttributes", - "type": "IMFAttributes" - } - ], - "MFGetPluginControl": [ - { - "name": "ppPluginControl", - "type": "IMFPluginControl" - } - ], - "MFGetMFTMerit": [ - { - "name": "pMFT", - "type": "IUnknown" - }, - { - "name": "cbVerifier", - "type": "UINT32" - }, - { - "name": "verifier", - "type": "BYTE" - }, - { - "name": "merit", - "type": "DWORD" - } - ], - "MFRegisterLocalSchemeHandler": [ - { - "name": "szScheme", - "type": "PCWSTR" - }, - { - "name": "pActivate", - "type": "IMFActivate" - } - ], - "MFRegisterLocalByteStreamHandler": [ - { - "name": "szFileExtension", - "type": "PCWSTR" - }, - { - "name": "szMimeType", - "type": "PCWSTR" - }, - { - "name": "pActivate", - "type": "IMFActivate" - } - ], - "MFCreateMFByteStreamWrapper": [ - { - "name": "pStream", - "type": "IMFByteStream" - }, - { - "name": "ppStreamWrapper", - "type": "IMFByteStream" - } - ], - "MFCreateMediaExtensionActivate": [ - { - "name": "szActivatableClassId", - "type": "PCWSTR" - }, - { - "name": "pConfiguration", - "type": "IUnknown" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppvObject", - "type": "LPVOID" - } - ], - "MFCreateMuxStreamAttributes": [ - { - "name": "pAttributesToMux", - "type": "IMFCollection" - }, - { - "name": "ppMuxAttribs", - "type": "IMFAttributes" - } - ], - "MFCreateMuxStreamMediaType": [ - { - "name": "pMediaTypesToMux", - "type": "IMFCollection" - }, - { - "name": "ppMuxMediaType", - "type": "IMFMediaType" - } - ], - "MFCreateMuxStreamSample": [ - { - "name": "pSamplesToMux", - "type": "IMFCollection" - }, - { - "name": "ppMuxSample", - "type": "IMFSample" - } - ], - "MFValidateMediaTypeSize": [ - { - "name": "FormatType", - "type": "GUID" - }, - { - "name": "pBlock", - "type": "UINT8" - }, - { - "name": "cbSize", - "type": "UINT32" - } - ], - "MFCreateMediaType": [ - { - "name": "ppMFType", - "type": "IMFMediaType" - } - ], - "MFCreateMFVideoFormatFromMFMediaType": [ - { - "name": "pMFType", - "type": "IMFMediaType" - }, - { - "name": "ppMFVF", - "type": "MFVIDEOFORMAT" - }, - { - "name": "pcbSize", - "type": "UINT32" - } - ], - "MFCreateWaveFormatExFromMFMediaType": [ - { - "name": "pMFType", - "type": "IMFMediaType" - }, - { - "name": "ppWF", - "type": "WAVEFORMATEX" - }, - { - "name": "pcbSize", - "type": "UINT32" - }, - { - "name": "Flags", - "type": "UINT32" - } - ], - "MFInitMediaTypeFromVideoInfoHeader": [ - { - "name": "pMFType", - "type": "IMFMediaType" - }, - { - "name": "pVIH", - "type": "VIDEOINFOHEADER" - }, - { - "name": "cbBufSize", - "type": "UINT32" - }, - { - "name": "pSubtype", - "type": "GUID" - } - ], - "MFInitMediaTypeFromVideoInfoHeader2": [ - { - "name": "pMFType", - "type": "IMFMediaType" - }, - { - "name": "pVIH2", - "type": "VIDEOINFOHEADER2" - }, - { - "name": "cbBufSize", - "type": "UINT32" - }, - { - "name": "pSubtype", - "type": "GUID" - } - ], - "MFInitMediaTypeFromMPEG1VideoInfo": [ - { - "name": "pMFType", - "type": "IMFMediaType" - }, - { - "name": "pMP1VI", - "type": "MPEG1VIDEOINFO" - }, - { - "name": "cbBufSize", - "type": "UINT32" - }, - { - "name": "pSubtype", - "type": "GUID" - } - ], - "MFInitMediaTypeFromMPEG2VideoInfo": [ - { - "name": "pMFType", - "type": "IMFMediaType" - }, - { - "name": "pMP2VI", - "type": "MPEG2VIDEOINFO" - }, - { - "name": "cbBufSize", - "type": "UINT32" - }, - { - "name": "pSubtype", - "type": "GUID" - } - ], - "MFCalculateBitmapImageSize": [ - { - "name": "pBMIH", - "type": "BITMAPINFOHEADER" - }, - { - "name": "cbBufSize", - "type": "UINT32" - }, - { - "name": "pcbImageSize", - "type": "UINT32" - }, - { - "name": "pbKnown", - "type": "BOOL" - } - ], - "MFCalculateImageSize": [ - { - "name": "guidSubtype", - "type": "GUID" - }, - { - "name": "unWidth", - "type": "UINT32" - }, - { - "name": "unHeight", - "type": "UINT32" - }, - { - "name": "pcbImageSize", - "type": "UINT32" - } - ], - "MFFrameRateToAverageTimePerFrame": [ - { - "name": "unNumerator", - "type": "UINT32" - }, - { - "name": "unDenominator", - "type": "UINT32" - }, - { - "name": "punAverageTimePerFrame", - "type": "UINT64" - } - ], - "MFAverageTimePerFrameToFrameRate": [ - { - "name": "unAverageTimePerFrame", - "type": "UINT64" - }, - { - "name": "punNumerator", - "type": "UINT32" - }, - { - "name": "punDenominator", - "type": "UINT32" - } - ], - "MFInitMediaTypeFromMFVideoFormat": [ - { - "name": "pMFType", - "type": "IMFMediaType" - }, - { - "name": "pMFVF", - "type": "MFVIDEOFORMAT" - }, - { - "name": "cbBufSize", - "type": "UINT32" - } - ], - "MFInitMediaTypeFromWaveFormatEx": [ - { - "name": "pMFType", - "type": "IMFMediaType" - }, - { - "name": "pWaveFormat", - "type": "WAVEFORMATEX" - }, - { - "name": "cbBufSize", - "type": "UINT32" - } - ], - "MFInitMediaTypeFromAMMediaType": [ - { - "name": "pMFType", - "type": "IMFMediaType" - }, - { - "name": "pAMType", - "type": "AM_MEDIA_TYPE" - } - ], - "MFInitAMMediaTypeFromMFMediaType": [ - { - "name": "pMFType", - "type": "IMFMediaType" - }, - { - "name": "guidFormatBlockType", - "type": "GUID" - }, - { - "name": "pAMType", - "type": "AM_MEDIA_TYPE" - } - ], - "MFCreateAMMediaTypeFromMFMediaType": [ - { - "name": "pMFType", - "type": "IMFMediaType" - }, - { - "name": "guidFormatBlockType", - "type": "GUID" - }, - { - "name": "ppAMType", - "type": "AM_MEDIA_TYPE" - } - ], - "MFCompareFullToPartialMediaType": [ - { - "name": "pMFTypeFull", - "type": "IMFMediaType" - }, - { - "name": "pMFTypePartial", - "type": "IMFMediaType" - } - ], - "MFWrapMediaType": [ - { - "name": "pOrig", - "type": "IMFMediaType" - }, - { - "name": "MajorType", - "type": "GUID" - }, - { - "name": "SubType", - "type": "GUID" - }, - { - "name": "ppWrap", - "type": "IMFMediaType" - } - ], - "MFUnwrapMediaType": [ - { - "name": "pWrap", - "type": "IMFMediaType" - }, - { - "name": "ppOrig", - "type": "IMFMediaType" - } - ], - "MFCreateVideoMediaType": [ - { - "name": "pVideoFormat", - "type": "MFVIDEOFORMAT" - }, - { - "name": "ppIVideoMediaType", - "type": "IMFVideoMediaType" - } - ], - "MFCreateVideoMediaTypeFromSubtype": [ - { - "name": "pAMSubtype", - "type": "GUID" - }, - { - "name": "ppIVideoMediaType", - "type": "IMFVideoMediaType" - } - ], - "MFIsFormatYUV": [ - { - "name": "Format", - "type": "DWORD" - } - ], - "MFCreateVideoMediaTypeFromBitMapInfoHeader": [ - { - "name": "pbmihBitMapInfoHeader", - "type": "BITMAPINFOHEADER" - }, - { - "name": "dwPixelAspectRatioX", - "type": "DWORD" - }, - { - "name": "dwPixelAspectRatioY", - "type": "DWORD" - }, - { - "name": "InterlaceMode", - "type": "MFVideoInterlaceMode" - }, - { - "name": "VideoFlags", - "type": "QWORD" - }, - { - "name": "qwFramesPerSecondNumerator", - "type": "QWORD" - }, - { - "name": "qwFramesPerSecondDenominator", - "type": "QWORD" - }, - { - "name": "dwMaxBitRate", - "type": "DWORD" - }, - { - "name": "ppIVideoMediaType", - "type": "IMFVideoMediaType" - } - ], - "MFGetStrideForBitmapInfoHeader": [ - { - "name": "format", - "type": "DWORD" - }, - { - "name": "dwWidth", - "type": "DWORD" - }, - { - "name": "pStride", - "type": "LONG" - } - ], - "MFGetPlaneSize": [ - { - "name": "format", - "type": "DWORD" - }, - { - "name": "dwWidth", - "type": "DWORD" - }, - { - "name": "dwHeight", - "type": "DWORD" - }, - { - "name": "pdwPlaneSize", - "type": "DWORD" - } - ], - "MFCreateVideoMediaTypeFromBitMapInfoHeaderEx": [ - { - "name": "pbmihBitMapInfoHeader", - "type": "BITMAPINFOHEADER" - }, - { - "name": "cbBitMapInfoHeader", - "type": "UINT32" - }, - { - "name": "dwPixelAspectRatioX", - "type": "DWORD" - }, - { - "name": "dwPixelAspectRatioY", - "type": "DWORD" - }, - { - "name": "InterlaceMode", - "type": "MFVideoInterlaceMode" - }, - { - "name": "VideoFlags", - "type": "QWORD" - }, - { - "name": "dwFramesPerSecondNumerator", - "type": "DWORD" - }, - { - "name": "dwFramesPerSecondDenominator", - "type": "DWORD" - }, - { - "name": "dwMaxBitRate", - "type": "DWORD" - }, - { - "name": "ppIVideoMediaType", - "type": "IMFVideoMediaType" - } - ], - "MFCreateMediaTypeFromRepresentation": [ - { - "name": "guidRepresentation", - "type": "GUID" - }, - { - "name": "pvRepresentation", - "type": "LPVOID" - }, - { - "name": "ppIMediaType", - "type": "IMFMediaType" - } - ], - "MFCreateAudioMediaType": [ - { - "name": "pAudioFormat", - "type": "WAVEFORMATEX" - }, - { - "name": "ppIAudioMediaType", - "type": "IMFAudioMediaType" - } - ], - "MFGetUncompressedVideoFormat": [ - { - "name": "pVideoFormat", - "type": "MFVIDEOFORMAT" - } - ], - "MFInitVideoFormat": [ - { - "name": "pVideoFormat", - "type": "MFVIDEOFORMAT" - }, - { - "name": "type", - "type": "MFStandardVideoFormat" - } - ], - "MFInitVideoFormat_RGB": [ - { - "name": "pVideoFormat", - "type": "MFVIDEOFORMAT" - }, - { - "name": "dwWidth", - "type": "DWORD" - }, - { - "name": "dwHeight", - "type": "DWORD" - }, - { - "name": "D3Dfmt", - "type": "DWORD" - } - ], - "MFConvertColorInfoToDXVA": [ - { - "name": "pdwToDXVA", - "type": "DWORD" - }, - { - "name": "pFromFormat", - "type": "MFVIDEOFORMAT" - } - ], - "MFConvertColorInfoFromDXVA": [ - { - "name": "pToFormat", - "type": "MFVIDEOFORMAT" - }, - { - "name": "dwFromDXVA", - "type": "DWORD" - } - ], - "MFCopyImage": [ - { - "name": "pDest", - "type": "BYTE" - }, - { - "name": "lDestStride", - "type": "LONG" - }, - { - "name": "pSrc", - "type": "BYTE" - }, - { - "name": "lSrcStride", - "type": "LONG" - }, - { - "name": "dwWidthInBytes", - "type": "DWORD" - }, - { - "name": "dwLines", - "type": "DWORD" - } - ], - "MFConvertFromFP16Array": [ - { - "name": "pDest", - "type": "float" - }, - { - "name": "pSrc", - "type": "WORD" - }, - { - "name": "dwCount", - "type": "DWORD" - } - ], - "MFConvertToFP16Array": [ - { - "name": "pDest", - "type": "WORD" - }, - { - "name": "pSrc", - "type": "float" - }, - { - "name": "dwCount", - "type": "DWORD" - } - ], - "MFCreate2DMediaBuffer": [ - { - "name": "dwWidth", - "type": "DWORD" - }, - { - "name": "dwHeight", - "type": "DWORD" - }, - { - "name": "dwFourCC", - "type": "DWORD" - }, - { - "name": "fBottomUp", - "type": "BOOL" - }, - { - "name": "ppBuffer", - "type": "IMFMediaBuffer" - } - ], - "MFCreateMediaBufferFromMediaType": [ - { - "name": "pMediaType", - "type": "IMFMediaType" - }, - { - "name": "llDuration", - "type": "LONGLONG" - }, - { - "name": "dwMinLength", - "type": "DWORD" - }, - { - "name": "dwMinAlignment", - "type": "DWORD" - }, - { - "name": "ppBuffer", - "type": "IMFMediaBuffer" - } - ], - "MFHeapFree": [ - { - "name": "pv", - "type": "void" - } - ], - "MFllMulDiv": [ - { - "name": "a", - "type": "LONGLONG" - }, - { - "name": "b", - "type": "LONGLONG" - }, - { - "name": "c", - "type": "LONGLONG" - }, - { - "name": "d", - "type": "LONGLONG" - } - ], - "MFGetContentProtectionSystemCLSID": [ - { - "name": "guidProtectionSystemID", - "type": "GUID" - }, - { - "name": "pclsid", - "type": "CLSID" - } - ], - "MFCombineSamples": [ - { - "name": "pSample", - "type": "IMFSample" - }, - { - "name": "pSampleToAdd", - "type": "IMFSample" - }, - { - "name": "dwMaxMergedDurationInMS", - "type": "DWORD" - }, - { - "name": "pMerged", - "type": "BOOL" - } - ], - "MFSplitSample": [ - { - "name": "pSample", - "type": "IMFSample" - }, - { - "name": "pOutputSamples", - "type": "IMFSample" - }, - { - "name": "dwOutputSampleMaxCount", - "type": "DWORD" - }, - { - "name": "pdwOutputSampleCount", - "type": "DWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/evr.json b/qiling/extensions/windows_sdk/mfplat_dll.json similarity index 88% rename from qiling/extensions/windows_sdk/evr.json rename to qiling/extensions/windows_sdk/mfplat_dll.json index 7f7bc7db9..7515a77cb 100644 --- a/qiling/extensions/windows_sdk/evr.json +++ b/qiling/extensions/windows_sdk/mfplat_dll.json @@ -507,24 +507,6 @@ "type": "IMFDXGIDeviceManager" } ], - "MFCreateDXSurfaceBuffer": [ - { - "name": "riid", - "type": "IID" - }, - { - "name": "punkSurface", - "type": "IUnknown" - }, - { - "name": "fBottomUpWhenLinear", - "type": "BOOL" - }, - { - "name": "ppBuffer", - "type": "IMFMediaBuffer" - } - ], "MFCreateWICBitmapBuffer": [ { "name": "riid", @@ -1335,12 +1317,6 @@ "type": "IMFVideoMediaType" } ], - "MFIsFormatYUV": [ - { - "name": "Format", - "type": "DWORD" - } - ], "MFCreateVideoMediaTypeFromBitMapInfoHeader": [ { "name": "pbmihBitMapInfoHeader", @@ -1698,5 +1674,229 @@ "name": "pdwOutputSampleCount", "type": "DWORD" } + ], + "MFCreateTransformActivate": [ + { + "name": "ppActivate", + "type": "IMFActivate" + } + ], + "MFSerializeAttributesToStream": [ + { + "name": "pAttr", + "type": "IMFAttributes" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pStm", + "type": "IStream" + } + ], + "MFDeserializeAttributesFromStream": [ + { + "name": "pAttr", + "type": "IMFAttributes" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pStm", + "type": "IStream" + } + ], + "MFCreateSourceResolver": [ + { + "name": "ppISourceResolver", + "type": "IMFSourceResolver" + } + ], + "CreatePropertyStore": [ + { + "name": "ppStore", + "type": "IPropertyStore" + } + ], + "MFCreateSystemTimeSource": [ + { + "name": "ppSystemTimeSource", + "type": "IMFPresentationTimeSource" + } + ], + "MFCreatePresentationDescriptor": [ + { + "name": "cStreamDescriptors", + "type": "DWORD" + }, + { + "name": "apStreamDescriptors", + "type": "IMFStreamDescriptor" + }, + { + "name": "ppPresentationDescriptor", + "type": "IMFPresentationDescriptor" + } + ], + "MFSerializePresentationDescriptor": [ + { + "name": "pPD", + "type": "IMFPresentationDescriptor" + }, + { + "name": "pcbData", + "type": "DWORD" + }, + { + "name": "ppbData", + "type": "BYTE" + } + ], + "MFDeserializePresentationDescriptor": [ + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "ppPD", + "type": "IMFPresentationDescriptor" + } + ], + "MFCreateStreamDescriptor": [ + { + "name": "dwStreamIdentifier", + "type": "DWORD" + }, + { + "name": "cMediaTypes", + "type": "DWORD" + }, + { + "name": "apMediaTypes", + "type": "IMFMediaType" + }, + { + "name": "ppDescriptor", + "type": "IMFStreamDescriptor" + } + ], + "MFCreateTrackedSample": [ + { + "name": "ppMFSample", + "type": "IMFTrackedSample" + } + ], + "MFCreateMFByteStreamOnStream": [ + { + "name": "pStream", + "type": "IStream" + }, + { + "name": "ppByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateStreamOnMFByteStream": [ + { + "name": "pByteStream", + "type": "IMFByteStream" + }, + { + "name": "ppStream", + "type": "IStream" + } + ], + "MFCreateMFByteStreamOnStreamEx": [ + { + "name": "punkStream", + "type": "IUnknown" + }, + { + "name": "ppByteStream", + "type": "IMFByteStream" + } + ], + "MFCreateStreamOnMFByteStreamEx": [ + { + "name": "pByteStream", + "type": "IMFByteStream" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "MFCreateMediaTypeFromProperties": [ + { + "name": "punkStream", + "type": "IUnknown" + }, + { + "name": "ppMediaType", + "type": "IMFMediaType" + } + ], + "MFCreatePropertiesFromMediaType": [ + { + "name": "pMediaType", + "type": "IMFMediaType" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "MFCreateContentProtectionDevice": [ + { + "name": "ProtectionSystemId", + "type": "GUID" + }, + { + "name": "ContentProtectionDevice", + "type": "IMFContentProtectionDevice" + } + ], + "MFIsContentProtectionDeviceSupported": [ + { + "name": "ProtectionSystemId", + "type": "GUID" + }, + { + "name": "isSupported", + "type": "BOOL" + } + ], + "MFCreateContentDecryptorContext": [ + { + "name": "guidMediaProtectionSystemId", + "type": "GUID" + }, + { + "name": "pD3DManager", + "type": "IMFDXGIDeviceManager" + }, + { + "name": "pContentProtectionDevice", + "type": "IMFContentProtectionDevice" + }, + { + "name": "ppContentDecryptorContext", + "type": "IMFContentDecryptorContext" + } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mfplay.json b/qiling/extensions/windows_sdk/mfplay_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mfplay.json rename to qiling/extensions/windows_sdk/mfplay_dll.json diff --git a/qiling/extensions/windows_sdk/mfsensorgroup_dll.json b/qiling/extensions/windows_sdk/mfsensorgroup_dll.json new file mode 100644 index 000000000..c11c8edfc --- /dev/null +++ b/qiling/extensions/windows_sdk/mfsensorgroup_dll.json @@ -0,0 +1,26 @@ +{ + "MFCreateSensorProfile": [ + { + "name": "ProfileType", + "type": "GUID" + }, + { + "name": "ProfileIndex", + "type": "UINT32" + }, + { + "name": "Constraints", + "type": "LPCWSTR" + }, + { + "name": "ppProfile", + "type": "IMFSensorProfile" + } + ], + "MFCreateSensorProfileCollection": [ + { + "name": "ppSensorProfile", + "type": "IMFSensorProfileCollection" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mfsensorgroup_lib.json b/qiling/extensions/windows_sdk/mfsensorgroup_lib.json new file mode 100644 index 000000000..40aded6a1 --- /dev/null +++ b/qiling/extensions/windows_sdk/mfsensorgroup_lib.json @@ -0,0 +1,12 @@ +{ + "MFCreateSensorActivityMonitor": [ + { + "name": "pCallback", + "type": "IMFSensorActivitiesReportCallback" + }, + { + "name": "ppActivityMonitor", + "type": "IMFSensorActivityMonitor" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mgmtapi.json b/qiling/extensions/windows_sdk/mgmtapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mgmtapi.json rename to qiling/extensions/windows_sdk/mgmtapi_dll.json diff --git a/qiling/extensions/windows_sdk/mi.json b/qiling/extensions/windows_sdk/mi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mi.json rename to qiling/extensions/windows_sdk/mi_dll.json diff --git a/qiling/extensions/windows_sdk/Mmdevapi.json b/qiling/extensions/windows_sdk/mmdevapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Mmdevapi.json rename to qiling/extensions/windows_sdk/mmdevapi_dll.json diff --git a/qiling/extensions/windows_sdk/mmtasksignal.json b/qiling/extensions/windows_sdk/mmtasksignal.json deleted file mode 100644 index 588d16bc5..000000000 --- a/qiling/extensions/windows_sdk/mmtasksignal.json +++ /dev/null @@ -1,40 +0,0 @@ -{ - "mmTaskCreate": [ - { - "name": "lpfn", - "type": "LPTASKCALLBACK" - }, - { - "name": "lph", - "type": "HANDLE" - }, - { - "name": "dwInst", - "type": "DWORD_PTR" - } - ], - "mmTaskBlock": [ - { - "name": "h", - "type": "DWORD" - } - ], - "mmTaskSignal": [ - { - "name": "h", - "type": "DWORD" - } - ], - "mmTaskYield": [ - { - "name": "VOID", - "type": "void" - } - ], - "mmGetCurrentTask": [ - { - "name": "VOID", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mmtasksignal_dll.json b/qiling/extensions/windows_sdk/mmtasksignal_dll.json new file mode 100644 index 000000000..c88ffcc0e --- /dev/null +++ b/qiling/extensions/windows_sdk/mmtasksignal_dll.json @@ -0,0 +1,8 @@ +{ + "mmTaskSignal": [ + { + "name": "h", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/MpClient.json b/qiling/extensions/windows_sdk/mpclient_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/MpClient.json rename to qiling/extensions/windows_sdk/mpclient_dll.json diff --git a/qiling/extensions/windows_sdk/mpr_dll.json b/qiling/extensions/windows_sdk/mpr_dll.json new file mode 100644 index 000000000..ea382fc6b --- /dev/null +++ b/qiling/extensions/windows_sdk/mpr_dll.json @@ -0,0 +1,638 @@ +{ + "WNetAddConnectionA": [ + { + "name": "lpRemoteName", + "type": "LPCSTR" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpLocalName", + "type": "LPCSTR" + } + ], + "WNetAddConnectionW": [ + { + "name": "lpRemoteName", + "type": "LPCWSTR" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpLocalName", + "type": "LPCWSTR" + } + ], + "WNetAddConnection2A": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpUserName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WNetAddConnection2W": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpUserName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WNetAddConnection3A": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpUserName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WNetAddConnection3W": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpUserName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "WNetCancelConnectionA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "WNetCancelConnectionW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "WNetCancelConnection2A": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "WNetCancelConnection2W": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "fForce", + "type": "BOOL" + } + ], + "WNetGetConnectionA": [ + { + "name": "lpLocalName", + "type": "LPCSTR" + }, + { + "name": "lpRemoteName", + "type": "LPSTR" + }, + { + "name": "lpnLength", + "type": "LPDWORD" + } + ], + "WNetGetConnectionW": [ + { + "name": "lpLocalName", + "type": "LPCWSTR" + }, + { + "name": "lpRemoteName", + "type": "LPWSTR" + }, + { + "name": "lpnLength", + "type": "LPDWORD" + } + ], + "WNetUseConnectionA": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpPassword", + "type": "LPCSTR" + }, + { + "name": "lpUserId", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpAccessName", + "type": "LPSTR" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpResult", + "type": "LPDWORD" + } + ], + "WNetUseConnectionW": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpPassword", + "type": "LPCWSTR" + }, + { + "name": "lpUserId", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpAccessName", + "type": "LPWSTR" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + }, + { + "name": "lpResult", + "type": "LPDWORD" + } + ], + "WNetConnectionDialog": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "WNetDisconnectDialog": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "dwType", + "type": "DWORD" + } + ], + "WNetConnectionDialog1A": [ + { + "name": "lpConnDlgStruct", + "type": "LPCONNECTDLGSTRUCTA" + } + ], + "WNetConnectionDialog1W": [ + { + "name": "lpConnDlgStruct", + "type": "LPCONNECTDLGSTRUCTW" + } + ], + "WNetDisconnectDialog1A": [ + { + "name": "lpConnDlgStruct", + "type": "LPDISCDLGSTRUCTA" + } + ], + "WNetDisconnectDialog1W": [ + { + "name": "lpConnDlgStruct", + "type": "LPDISCDLGSTRUCTW" + } + ], + "WNetOpenEnumA": [ + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwUsage", + "type": "DWORD" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lphEnum", + "type": "LPHANDLE" + } + ], + "WNetOpenEnumW": [ + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "dwType", + "type": "DWORD" + }, + { + "name": "dwUsage", + "type": "DWORD" + }, + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lphEnum", + "type": "LPHANDLE" + } + ], + "WNetEnumResourceA": [ + { + "name": "hEnum", + "type": "HANDLE" + }, + { + "name": "lpcCount", + "type": "LPDWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetEnumResourceW": [ + { + "name": "hEnum", + "type": "HANDLE" + }, + { + "name": "lpcCount", + "type": "LPDWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetCloseEnum": [ + { + "name": "hEnum", + "type": "HANDLE" + } + ], + "WNetGetResourceParentA": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpcbBuffer", + "type": "LPDWORD" + } + ], + "WNetGetResourceParentW": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpcbBuffer", + "type": "LPDWORD" + } + ], + "WNetGetResourceInformationA": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpcbBuffer", + "type": "LPDWORD" + }, + { + "name": "lplpSystem", + "type": "LPSTR" + } + ], + "WNetGetResourceInformationW": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpcbBuffer", + "type": "LPDWORD" + }, + { + "name": "lplpSystem", + "type": "LPWSTR" + } + ], + "WNetGetUniversalNameA": [ + { + "name": "lpLocalPath", + "type": "LPCSTR" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetGetUniversalNameW": [ + { + "name": "lpLocalPath", + "type": "LPCWSTR" + }, + { + "name": "dwInfoLevel", + "type": "DWORD" + }, + { + "name": "lpBuffer", + "type": "LPVOID" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetGetUserA": [ + { + "name": "lpName", + "type": "LPCSTR" + }, + { + "name": "lpUserName", + "type": "LPSTR" + }, + { + "name": "lpnLength", + "type": "LPDWORD" + } + ], + "WNetGetUserW": [ + { + "name": "lpName", + "type": "LPCWSTR" + }, + { + "name": "lpUserName", + "type": "LPWSTR" + }, + { + "name": "lpnLength", + "type": "LPDWORD" + } + ], + "WNetGetProviderNameA": [ + { + "name": "dwNetType", + "type": "DWORD" + }, + { + "name": "lpProviderName", + "type": "LPSTR" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetGetProviderNameW": [ + { + "name": "dwNetType", + "type": "DWORD" + }, + { + "name": "lpProviderName", + "type": "LPWSTR" + }, + { + "name": "lpBufferSize", + "type": "LPDWORD" + } + ], + "WNetGetNetworkInformationA": [ + { + "name": "lpProvider", + "type": "LPCSTR" + }, + { + "name": "lpNetInfoStruct", + "type": "LPNETINFOSTRUCT" + } + ], + "WNetGetNetworkInformationW": [ + { + "name": "lpProvider", + "type": "LPCWSTR" + }, + { + "name": "lpNetInfoStruct", + "type": "LPNETINFOSTRUCT" + } + ], + "WNetGetLastErrorA": [ + { + "name": "lpError", + "type": "LPDWORD" + }, + { + "name": "lpErrorBuf", + "type": "LPSTR" + }, + { + "name": "nErrorBufSize", + "type": "DWORD" + }, + { + "name": "lpNameBuf", + "type": "LPSTR" + }, + { + "name": "nNameBufSize", + "type": "DWORD" + } + ], + "WNetGetLastErrorW": [ + { + "name": "lpError", + "type": "LPDWORD" + }, + { + "name": "lpErrorBuf", + "type": "LPWSTR" + }, + { + "name": "nErrorBufSize", + "type": "DWORD" + }, + { + "name": "lpNameBuf", + "type": "LPWSTR" + }, + { + "name": "nNameBufSize", + "type": "DWORD" + } + ], + "MultinetGetConnectionPerformanceA": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEA" + }, + { + "name": "lpNetConnectInfoStruct", + "type": "LPNETCONNECTINFOSTRUCT" + } + ], + "MultinetGetConnectionPerformanceW": [ + { + "name": "lpNetResource", + "type": "LPNETRESOURCEW" + }, + { + "name": "lpNetConnectInfoStruct", + "type": "LPNETCONNECTINFOSTRUCT" + } + ], + "WNetSetLastErrorA": [ + { + "name": "err", + "type": "DWORD" + }, + { + "name": "lpError", + "type": "LPSTR" + }, + { + "name": "lpProviders", + "type": "LPSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/mprapi.json b/qiling/extensions/windows_sdk/mprapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mprapi.json rename to qiling/extensions/windows_sdk/mprapi_dll.json diff --git a/qiling/extensions/windows_sdk/mrmsupport.json b/qiling/extensions/windows_sdk/mrmsupport_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mrmsupport.json rename to qiling/extensions/windows_sdk/mrmsupport_dll.json diff --git a/qiling/extensions/windows_sdk/MSAJApi.json b/qiling/extensions/windows_sdk/msajapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/MSAJApi.json rename to qiling/extensions/windows_sdk/msajapi_dll.json diff --git a/qiling/extensions/windows_sdk/msctf.json b/qiling/extensions/windows_sdk/msctf_dll.json similarity index 63% rename from qiling/extensions/windows_sdk/msctf.json rename to qiling/extensions/windows_sdk/msctf_dll.json index 906940df8..c9c8baeaa 100644 --- a/qiling/extensions/windows_sdk/msctf.json +++ b/qiling/extensions/windows_sdk/msctf_dll.json @@ -1,4 +1,46 @@ { + "TF_CreateThreadMgr": [ + { + "name": "pptim", + "type": "ITfThreadMgr" + } + ], + "TF_GetThreadMgr": [ + { + "name": "pptim", + "type": "ITfThreadMgr" + } + ], + "TF_CreateInputProcessorProfiles": [ + { + "name": "ppipr", + "type": "ITfInputProcessorProfiles" + } + ], + "TF_CreateDisplayAttributeMgr": [ + { + "name": "ppdam", + "type": "ITfDisplayAttributeMgr" + } + ], + "TF_CreateLangBarMgr": [ + { + "name": "pppbm", + "type": "ITfLangBarMgr" + } + ], + "TF_CreateLangBarItemMgr": [ + { + "name": "pplbim", + "type": "ITfLangBarItemMgr" + } + ], + "TF_CreateCategoryMgr": [ + { + "name": "ppcat", + "type": "ITfCategoryMgr" + } + ], "SetInputScope": [ { "name": "hwnd", diff --git a/qiling/extensions/windows_sdk/Msdmo.json b/qiling/extensions/windows_sdk/msdmo_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Msdmo.json rename to qiling/extensions/windows_sdk/msdmo_dll.json diff --git a/qiling/extensions/windows_sdk/msdrm.json b/qiling/extensions/windows_sdk/msdrm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/msdrm.json rename to qiling/extensions/windows_sdk/msdrm_dll.json diff --git a/qiling/extensions/windows_sdk/msgina.json b/qiling/extensions/windows_sdk/msgina_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/msgina.json rename to qiling/extensions/windows_sdk/msgina_dll.json diff --git a/qiling/extensions/windows_sdk/msi.json b/qiling/extensions/windows_sdk/msi.json deleted file mode 100644 index a2e26985d..000000000 --- a/qiling/extensions/windows_sdk/msi.json +++ /dev/null @@ -1,1432 +0,0 @@ -{ - "MsiDatabaseOpenViewA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szQuery", - "type": "LPCSTR" - }, - { - "name": "phView", - "type": "MSIHANDLE" - } - ], - "MsiDatabaseOpenViewW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szQuery", - "type": "LPCWSTR" - }, - { - "name": "phView", - "type": "MSIHANDLE" - } - ], - "MsiViewGetErrorA": [ - { - "name": "hView", - "type": "MSIHANDLE" - }, - { - "name": "szColumnNameBuffer", - "type": "LPSTR" - }, - { - "name": "pcchBuf", - "type": "LPDWORD" - } - ], - "MsiViewGetErrorW": [ - { - "name": "hView", - "type": "MSIHANDLE" - }, - { - "name": "szColumnNameBuffer", - "type": "LPWSTR" - }, - { - "name": "pcchBuf", - "type": "LPDWORD" - } - ], - "MsiViewExecute": [ - { - "name": "hView", - "type": "MSIHANDLE" - }, - { - "name": "hRecord", - "type": "MSIHANDLE" - } - ], - "MsiViewFetch": [ - { - "name": "hView", - "type": "MSIHANDLE" - }, - { - "name": "phRecord", - "type": "MSIHANDLE" - } - ], - "MsiViewModify": [ - { - "name": "hView", - "type": "MSIHANDLE" - }, - { - "name": "eModifyMode", - "type": "MSIMODIFY" - }, - { - "name": "hRecord", - "type": "MSIHANDLE" - } - ], - "MsiViewGetColumnInfo": [ - { - "name": "hView", - "type": "MSIHANDLE" - }, - { - "name": "eColumnInfo", - "type": "MSICOLINFO" - }, - { - "name": "phRecord", - "type": "MSIHANDLE" - } - ], - "MsiViewClose": [ - { - "name": "hView", - "type": "MSIHANDLE" - } - ], - "MsiDatabaseGetPrimaryKeysA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCSTR" - }, - { - "name": "phRecord", - "type": "MSIHANDLE" - } - ], - "MsiDatabaseGetPrimaryKeysW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCWSTR" - }, - { - "name": "phRecord", - "type": "MSIHANDLE" - } - ], - "MsiDatabaseIsTablePersistentA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCSTR" - } - ], - "MsiDatabaseIsTablePersistentW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCWSTR" - } - ], - "MsiGetSummaryInformationA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szDatabasePath", - "type": "LPCSTR" - }, - { - "name": "uiUpdateCount", - "type": "UINT" - }, - { - "name": "phSummaryInfo", - "type": "MSIHANDLE" - } - ], - "MsiGetSummaryInformationW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szDatabasePath", - "type": "LPCWSTR" - }, - { - "name": "uiUpdateCount", - "type": "UINT" - }, - { - "name": "phSummaryInfo", - "type": "MSIHANDLE" - } - ], - "MsiSummaryInfoGetPropertyCount": [ - { - "name": "hSummaryInfo", - "type": "MSIHANDLE" - }, - { - "name": "puiPropertyCount", - "type": "PUINT" - } - ], - "MsiSummaryInfoSetPropertyA": [ - { - "name": "hSummaryInfo", - "type": "MSIHANDLE" - }, - { - "name": "uiProperty", - "type": "UINT" - }, - { - "name": "uiDataType", - "type": "UINT" - }, - { - "name": "iValue", - "type": "INT" - }, - { - "name": "pftValue", - "type": "FILETIME" - }, - { - "name": "szValue", - "type": "LPCSTR" - } - ], - "MsiSummaryInfoSetPropertyW": [ - { - "name": "hSummaryInfo", - "type": "MSIHANDLE" - }, - { - "name": "uiProperty", - "type": "UINT" - }, - { - "name": "uiDataType", - "type": "UINT" - }, - { - "name": "iValue", - "type": "INT" - }, - { - "name": "pftValue", - "type": "FILETIME" - }, - { - "name": "szValue", - "type": "LPCWSTR" - } - ], - "MsiSummaryInfoGetPropertyA": [ - { - "name": "hSummaryInfo", - "type": "MSIHANDLE" - }, - { - "name": "uiProperty", - "type": "UINT" - }, - { - "name": "puiDataType", - "type": "PUINT" - }, - { - "name": "piValue", - "type": "LPINT" - }, - { - "name": "pftValue", - "type": "FILETIME" - }, - { - "name": "szValueBuf", - "type": "LPSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiSummaryInfoGetPropertyW": [ - { - "name": "hSummaryInfo", - "type": "MSIHANDLE" - }, - { - "name": "uiProperty", - "type": "UINT" - }, - { - "name": "puiDataType", - "type": "PUINT" - }, - { - "name": "piValue", - "type": "LPINT" - }, - { - "name": "pftValue", - "type": "FILETIME" - }, - { - "name": "szValueBuf", - "type": "LPWSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiSummaryInfoPersist": [ - { - "name": "hSummaryInfo", - "type": "MSIHANDLE" - } - ], - "MsiOpenDatabaseA": [ - { - "name": "szDatabasePath", - "type": "LPCSTR" - }, - { - "name": "szPersist", - "type": "LPCSTR" - }, - { - "name": "phDatabase", - "type": "MSIHANDLE" - } - ], - "MsiOpenDatabaseW": [ - { - "name": "szDatabasePath", - "type": "LPCWSTR" - }, - { - "name": "szPersist", - "type": "LPCWSTR" - }, - { - "name": "phDatabase", - "type": "MSIHANDLE" - } - ], - "MsiDatabaseImportA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szFolderPath", - "type": "LPCSTR" - }, - { - "name": "szFileName", - "type": "LPCSTR" - } - ], - "MsiDatabaseImportW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szFolderPath", - "type": "LPCWSTR" - }, - { - "name": "szFileName", - "type": "LPCWSTR" - } - ], - "MsiDatabaseExportA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCSTR" - }, - { - "name": "szFolderPath", - "type": "LPCSTR" - }, - { - "name": "szFileName", - "type": "LPCSTR" - } - ], - "MsiDatabaseExportW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCWSTR" - }, - { - "name": "szFolderPath", - "type": "LPCWSTR" - }, - { - "name": "szFileName", - "type": "LPCWSTR" - } - ], - "MsiDatabaseMergeA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "hDatabaseMerge", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCSTR" - } - ], - "MsiDatabaseMergeW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "hDatabaseMerge", - "type": "MSIHANDLE" - }, - { - "name": "szTableName", - "type": "LPCWSTR" - } - ], - "MsiDatabaseGenerateTransformA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "hDatabaseReference", - "type": "MSIHANDLE" - }, - { - "name": "szTransformFile", - "type": "LPCSTR" - }, - { - "name": "iReserved1", - "type": "int" - }, - { - "name": "iReserved2", - "type": "int" - } - ], - "MsiDatabaseGenerateTransformW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "hDatabaseReference", - "type": "MSIHANDLE" - }, - { - "name": "szTransformFile", - "type": "LPCWSTR" - }, - { - "name": "iReserved1", - "type": "int" - }, - { - "name": "iReserved2", - "type": "int" - } - ], - "MsiDatabaseApplyTransformA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTransformFile", - "type": "LPCSTR" - }, - { - "name": "iErrorConditions", - "type": "int" - } - ], - "MsiDatabaseApplyTransformW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "szTransformFile", - "type": "LPCWSTR" - }, - { - "name": "iErrorConditions", - "type": "int" - } - ], - "MsiCreateTransformSummaryInfoA": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "hDatabaseReference", - "type": "MSIHANDLE" - }, - { - "name": "szTransformFile", - "type": "LPCSTR" - }, - { - "name": "iErrorConditions", - "type": "int" - }, - { - "name": "iValidation", - "type": "int" - } - ], - "MsiCreateTransformSummaryInfoW": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "hDatabaseReference", - "type": "MSIHANDLE" - }, - { - "name": "szTransformFile", - "type": "LPCWSTR" - }, - { - "name": "iErrorConditions", - "type": "int" - }, - { - "name": "iValidation", - "type": "int" - } - ], - "MsiDatabaseCommit": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - } - ], - "MsiGetDatabaseState": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - } - ], - "MsiCreateRecord": [ - { - "name": "cParams", - "type": "UINT" - } - ], - "MsiRecordIsNull": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - } - ], - "MsiRecordDataSize": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - } - ], - "MsiRecordSetInteger": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "iValue", - "type": "int" - } - ], - "MsiRecordSetStringA": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szValue", - "type": "LPCSTR" - } - ], - "MsiRecordSetStringW": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szValue", - "type": "LPCWSTR" - } - ], - "MsiRecordGetInteger": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - } - ], - "MsiRecordGetStringA": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szValueBuf", - "type": "LPSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiRecordGetStringW": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szValueBuf", - "type": "LPWSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiRecordGetFieldCount": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - } - ], - "MsiRecordSetStreamA": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szFilePath", - "type": "LPCSTR" - } - ], - "MsiRecordSetStreamW": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szFilePath", - "type": "LPCWSTR" - } - ], - "MsiRecordReadStream": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "iField", - "type": "UINT" - }, - { - "name": "szDataBuf", - "type": "char" - }, - { - "name": "pcbDataBuf", - "type": "LPDWORD" - } - ], - "MsiRecordClearData": [ - { - "name": "hRecord", - "type": "MSIHANDLE" - } - ], - "MsiGetActiveDatabase": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - } - ], - "MsiSetPropertyA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szName", - "type": "LPCSTR" - }, - { - "name": "szValue", - "type": "LPCSTR" - } - ], - "MsiSetPropertyW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szName", - "type": "LPCWSTR" - }, - { - "name": "szValue", - "type": "LPCWSTR" - } - ], - "MsiGetPropertyA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szName", - "type": "LPCSTR" - }, - { - "name": "szValueBuf", - "type": "LPSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiGetPropertyW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szName", - "type": "LPCWSTR" - }, - { - "name": "szValueBuf", - "type": "LPWSTR" - }, - { - "name": "pcchValueBuf", - "type": "LPDWORD" - } - ], - "MsiGetLanguage": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - } - ], - "MsiGetMode": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "eRunMode", - "type": "MSIRUNMODE" - } - ], - "MsiSetMode": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "eRunMode", - "type": "MSIRUNMODE" - }, - { - "name": "fState", - "type": "BOOL" - } - ], - "MsiFormatRecordA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "szResultBuf", - "type": "LPSTR" - }, - { - "name": "pcchResultBuf", - "type": "LPDWORD" - } - ], - "MsiFormatRecordW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "hRecord", - "type": "MSIHANDLE" - }, - { - "name": "szResultBuf", - "type": "LPWSTR" - }, - { - "name": "pcchResultBuf", - "type": "LPDWORD" - } - ], - "MsiDoActionA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szAction", - "type": "LPCSTR" - } - ], - "MsiDoActionW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szAction", - "type": "LPCWSTR" - } - ], - "MsiSequenceA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szTable", - "type": "LPCSTR" - }, - { - "name": "iSequenceMode", - "type": "INT" - } - ], - "MsiSequenceW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szTable", - "type": "LPCWSTR" - }, - { - "name": "iSequenceMode", - "type": "INT" - } - ], - "MsiProcessMessage": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "eMessageType", - "type": "INSTALLMESSAGE" - }, - { - "name": "hRecord", - "type": "MSIHANDLE" - } - ], - "MsiEvaluateConditionA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szCondition", - "type": "LPCSTR" - } - ], - "MsiEvaluateConditionW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szCondition", - "type": "LPCWSTR" - } - ], - "MsiGetFeatureStateA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "piInstalled", - "type": "INSTALLSTATE" - }, - { - "name": "piAction", - "type": "INSTALLSTATE" - } - ], - "MsiGetFeatureStateW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "piInstalled", - "type": "INSTALLSTATE" - }, - { - "name": "piAction", - "type": "INSTALLSTATE" - } - ], - "MsiSetFeatureStateA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - } - ], - "MsiSetFeatureStateW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - } - ], - "MsiSetFeatureAttributesA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "dwAttributes", - "type": "DWORD" - } - ], - "MsiSetFeatureAttributesW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "dwAttributes", - "type": "DWORD" - } - ], - "MsiGetComponentStateA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "piInstalled", - "type": "INSTALLSTATE" - }, - { - "name": "piAction", - "type": "INSTALLSTATE" - } - ], - "MsiGetComponentStateW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "piInstalled", - "type": "INSTALLSTATE" - }, - { - "name": "piAction", - "type": "INSTALLSTATE" - } - ], - "MsiSetComponentStateA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - } - ], - "MsiSetComponentStateW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - } - ], - "MsiGetFeatureCostA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "iCostTree", - "type": "MSICOSTTREE" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - }, - { - "name": "piCost", - "type": "LPINT" - } - ], - "MsiGetFeatureCostW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "iCostTree", - "type": "MSICOSTTREE" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - }, - { - "name": "piCost", - "type": "LPINT" - } - ], - "MsiEnumComponentCostsA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szComponent", - "type": "LPCSTR" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - }, - { - "name": "szDriveBuf", - "type": "LPSTR" - }, - { - "name": "pcchDriveBuf", - "type": "LPDWORD" - }, - { - "name": "piCost", - "type": "LPINT" - }, - { - "name": "piTempCost", - "type": "LPINT" - } - ], - "MsiEnumComponentCostsW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szComponent", - "type": "LPCWSTR" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "iState", - "type": "INSTALLSTATE" - }, - { - "name": "szDriveBuf", - "type": "LPWSTR" - }, - { - "name": "pcchDriveBuf", - "type": "LPDWORD" - }, - { - "name": "piCost", - "type": "LPINT" - }, - { - "name": "piTempCost", - "type": "LPINT" - } - ], - "MsiSetInstallLevel": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "iInstallLevel", - "type": "int" - } - ], - "MsiGetFeatureValidStatesA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCSTR" - }, - { - "name": "lpInstallStates", - "type": "LPDWORD" - } - ], - "MsiGetFeatureValidStatesW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFeature", - "type": "LPCWSTR" - }, - { - "name": "lpInstallStates", - "type": "LPDWORD" - } - ], - "MsiGetSourcePathA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFolder", - "type": "LPCSTR" - }, - { - "name": "szPathBuf", - "type": "LPSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiGetSourcePathW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFolder", - "type": "LPCWSTR" - }, - { - "name": "szPathBuf", - "type": "LPWSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiGetTargetPathA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFolder", - "type": "LPCSTR" - }, - { - "name": "szPathBuf", - "type": "LPSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiGetTargetPathW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFolder", - "type": "LPCWSTR" - }, - { - "name": "szPathBuf", - "type": "LPWSTR" - }, - { - "name": "pcchPathBuf", - "type": "LPDWORD" - } - ], - "MsiSetTargetPathA": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFolder", - "type": "LPCSTR" - }, - { - "name": "szFolderPath", - "type": "LPCSTR" - } - ], - "MsiSetTargetPathW": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - }, - { - "name": "szFolder", - "type": "LPCWSTR" - }, - { - "name": "szFolderPath", - "type": "LPCWSTR" - } - ], - "MsiVerifyDiskSpace": [ - { - "name": "hInstall", - "type": "MSIHANDLE" - } - ], - "MsiEnableUIPreview": [ - { - "name": "hDatabase", - "type": "MSIHANDLE" - }, - { - "name": "phPreview", - "type": "MSIHANDLE" - } - ], - "MsiPreviewDialogA": [ - { - "name": "hPreview", - "type": "MSIHANDLE" - }, - { - "name": "szDialogName", - "type": "LPCSTR" - } - ], - "MsiPreviewDialogW": [ - { - "name": "hPreview", - "type": "MSIHANDLE" - }, - { - "name": "szDialogName", - "type": "LPCWSTR" - } - ], - "MsiPreviewBillboardA": [ - { - "name": "hPreview", - "type": "MSIHANDLE" - }, - { - "name": "szControlName", - "type": "LPCSTR" - }, - { - "name": "szBillboard", - "type": "LPCSTR" - } - ], - "MsiPreviewBillboardW": [ - { - "name": "hPreview", - "type": "MSIHANDLE" - }, - { - "name": "szControlName", - "type": "LPCWSTR" - }, - { - "name": "szBillboard", - "type": "LPCWSTR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/msi_dll.json b/qiling/extensions/windows_sdk/msi_dll.json new file mode 100644 index 000000000..5c4f299d5 --- /dev/null +++ b/qiling/extensions/windows_sdk/msi_dll.json @@ -0,0 +1,4590 @@ +{ + "MsiCloseHandle": [ + { + "name": "hAny", + "type": "MSIHANDLE" + } + ], + "MsiSetInternalUI": [ + { + "name": "dwUILevel", + "type": "INSTALLUILEVEL" + }, + { + "name": "phWnd", + "type": "HWND" + } + ], + "MsiSetExternalUIA": [ + { + "name": "puiHandler", + "type": "INSTALLUI_HANDLERA" + }, + { + "name": "dwMessageFilter", + "type": "DWORD" + }, + { + "name": "pvContext", + "type": "LPVOID" + } + ], + "MsiSetExternalUIW": [ + { + "name": "puiHandler", + "type": "INSTALLUI_HANDLERW" + }, + { + "name": "dwMessageFilter", + "type": "DWORD" + }, + { + "name": "pvContext", + "type": "LPVOID" + } + ], + "MsiSetExternalUIRecord": [ + { + "name": "puiHandler", + "type": "INSTALLUI_HANDLER_RECORD" + }, + { + "name": "dwMessageFilter", + "type": "DWORD" + }, + { + "name": "pvContext", + "type": "LPVOID" + }, + { + "name": "ppuiPrevHandler", + "type": "PINSTALLUI_HANDLER_RECORD" + } + ], + "MsiEnableLogA": [ + { + "name": "dwLogMode", + "type": "DWORD" + }, + { + "name": "szLogFile", + "type": "LPCSTR" + }, + { + "name": "dwLogAttributes", + "type": "DWORD" + } + ], + "MsiEnableLogW": [ + { + "name": "dwLogMode", + "type": "DWORD" + }, + { + "name": "szLogFile", + "type": "LPCWSTR" + }, + { + "name": "dwLogAttributes", + "type": "DWORD" + } + ], + "MsiQueryProductStateA": [ + { + "name": "szProduct", + "type": "LPCSTR" + } + ], + "MsiQueryProductStateW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + } + ], + "MsiGetProductInfoA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szAttribute", + "type": "LPCSTR" + }, + { + "name": "lpValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductInfoW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szAttribute", + "type": "LPCWSTR" + }, + { + "name": "lpValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductInfoExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "szValue", + "type": "LPSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiGetProductInfoExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "szValue", + "type": "LPWSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiInstallProductA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "szCommandLine", + "type": "LPCSTR" + } + ], + "MsiInstallProductW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "szCommandLine", + "type": "LPCWSTR" + } + ], + "MsiConfigureProductA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "iInstallLevel", + "type": "int" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiConfigureProductW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "iInstallLevel", + "type": "int" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiConfigureProductExA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "iInstallLevel", + "type": "int" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + }, + { + "name": "szCommandLine", + "type": "LPCSTR" + } + ], + "MsiConfigureProductExW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "iInstallLevel", + "type": "int" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + }, + { + "name": "szCommandLine", + "type": "LPCWSTR" + } + ], + "MsiReinstallProductA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szReinstallMode", + "type": "DWORD" + } + ], + "MsiReinstallProductW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szReinstallMode", + "type": "DWORD" + } + ], + "MsiAdvertiseProductExA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "szScriptfilePath", + "type": "LPCSTR" + }, + { + "name": "szTransforms", + "type": "LPCSTR" + }, + { + "name": "lgidLanguage", + "type": "LANGID" + }, + { + "name": "dwPlatform", + "type": "DWORD" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiAdvertiseProductExW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "szScriptfilePath", + "type": "LPCWSTR" + }, + { + "name": "szTransforms", + "type": "LPCWSTR" + }, + { + "name": "lgidLanguage", + "type": "LANGID" + }, + { + "name": "dwPlatform", + "type": "DWORD" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiAdvertiseProductA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "szScriptfilePath", + "type": "LPCSTR" + }, + { + "name": "szTransforms", + "type": "LPCSTR" + }, + { + "name": "lgidLanguage", + "type": "LANGID" + } + ], + "MsiAdvertiseProductW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "szScriptfilePath", + "type": "LPCWSTR" + }, + { + "name": "szTransforms", + "type": "LPCWSTR" + }, + { + "name": "lgidLanguage", + "type": "LANGID" + } + ], + "MsiProcessAdvertiseScriptA": [ + { + "name": "szScriptFile", + "type": "LPCSTR" + }, + { + "name": "szIconFolder", + "type": "LPCSTR" + }, + { + "name": "hRegData", + "type": "HKEY" + }, + { + "name": "fShortcuts", + "type": "BOOL" + }, + { + "name": "fRemoveItems", + "type": "BOOL" + } + ], + "MsiProcessAdvertiseScriptW": [ + { + "name": "szScriptFile", + "type": "LPCWSTR" + }, + { + "name": "szIconFolder", + "type": "LPCWSTR" + }, + { + "name": "hRegData", + "type": "HKEY" + }, + { + "name": "fShortcuts", + "type": "BOOL" + }, + { + "name": "fRemoveItems", + "type": "BOOL" + } + ], + "MsiAdvertiseScriptA": [ + { + "name": "szScriptFile", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phRegData", + "type": "PHKEY" + }, + { + "name": "fRemoveItems", + "type": "BOOL" + } + ], + "MsiAdvertiseScriptW": [ + { + "name": "szScriptFile", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phRegData", + "type": "PHKEY" + }, + { + "name": "fRemoveItems", + "type": "BOOL" + } + ], + "MsiGetProductInfoFromScriptA": [ + { + "name": "szScriptFile", + "type": "LPCSTR" + }, + { + "name": "lpProductBuf39", + "type": "LPSTR" + }, + { + "name": "plgidLanguage", + "type": "LANGID" + }, + { + "name": "pdwVersion", + "type": "LPDWORD" + }, + { + "name": "lpNameBuf", + "type": "LPSTR" + }, + { + "name": "pcchNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpPackageBuf", + "type": "LPSTR" + }, + { + "name": "pcchPackageBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductInfoFromScriptW": [ + { + "name": "szScriptFile", + "type": "LPCWSTR" + }, + { + "name": "lpProductBuf39", + "type": "LPWSTR" + }, + { + "name": "plgidLanguage", + "type": "LANGID" + }, + { + "name": "pdwVersion", + "type": "LPDWORD" + }, + { + "name": "lpNameBuf", + "type": "LPWSTR" + }, + { + "name": "pcchNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpPackageBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPackageBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductCodeA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "lpBuf39", + "type": "LPSTR" + } + ], + "MsiGetProductCodeW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "lpBuf39", + "type": "LPWSTR" + } + ], + "MsiGetUserInfoA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "lpUserNameBuf", + "type": "LPSTR" + }, + { + "name": "pcchUserNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpOrgNameBuf", + "type": "LPSTR" + }, + { + "name": "pcchOrgNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpSerialBuf", + "type": "LPSTR" + }, + { + "name": "pcchSerialBuf", + "type": "LPDWORD" + } + ], + "MsiGetUserInfoW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "lpUserNameBuf", + "type": "LPWSTR" + }, + { + "name": "pcchUserNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpOrgNameBuf", + "type": "LPWSTR" + }, + { + "name": "pcchOrgNameBuf", + "type": "LPDWORD" + }, + { + "name": "lpSerialBuf", + "type": "LPWSTR" + }, + { + "name": "pcchSerialBuf", + "type": "LPDWORD" + } + ], + "MsiCollectUserInfoA": [ + { + "name": "szProduct", + "type": "LPCSTR" + } + ], + "MsiCollectUserInfoW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + } + ], + "MsiApplyPatchA": [ + { + "name": "szPatchPackage", + "type": "LPCSTR" + }, + { + "name": "szInstallPackage", + "type": "LPCSTR" + }, + { + "name": "eInstallType", + "type": "INSTALLTYPE" + }, + { + "name": "szCommandLine", + "type": "LPCSTR" + } + ], + "MsiApplyPatchW": [ + { + "name": "szPatchPackage", + "type": "LPCWSTR" + }, + { + "name": "szInstallPackage", + "type": "LPCWSTR" + }, + { + "name": "eInstallType", + "type": "INSTALLTYPE" + }, + { + "name": "szCommandLine", + "type": "LPCWSTR" + } + ], + "MsiGetPatchInfoA": [ + { + "name": "szPatch", + "type": "LPCSTR" + }, + { + "name": "szAttribute", + "type": "LPCSTR" + }, + { + "name": "lpValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetPatchInfoW": [ + { + "name": "szPatch", + "type": "LPCWSTR" + }, + { + "name": "szAttribute", + "type": "LPCWSTR" + }, + { + "name": "lpValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiEnumPatchesA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "iPatchIndex", + "type": "DWORD" + }, + { + "name": "lpPatchBuf", + "type": "LPSTR" + }, + { + "name": "lpTransformsBuf", + "type": "LPSTR" + }, + { + "name": "pcchTransformsBuf", + "type": "LPDWORD" + } + ], + "MsiEnumPatchesW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "iPatchIndex", + "type": "DWORD" + }, + { + "name": "lpPatchBuf", + "type": "LPWSTR" + }, + { + "name": "lpTransformsBuf", + "type": "LPWSTR" + }, + { + "name": "pcchTransformsBuf", + "type": "LPDWORD" + } + ], + "MsiRemovePatchesA": [ + { + "name": "szPatchList", + "type": "LPCSTR" + }, + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "eUninstallType", + "type": "INSTALLTYPE" + }, + { + "name": "szPropertyList", + "type": "LPCSTR" + } + ], + "MsiRemovePatchesW": [ + { + "name": "szPatchList", + "type": "LPCWSTR" + }, + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "eUninstallType", + "type": "INSTALLTYPE" + }, + { + "name": "szPropertyList", + "type": "LPCWSTR" + } + ], + "MsiExtractPatchXMLDataA": [ + { + "name": "szPatchPath", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "szXMLData", + "type": "LPSTR" + }, + { + "name": "pcchXMLData", + "type": "LPDWORD" + } + ], + "MsiExtractPatchXMLDataW": [ + { + "name": "szPatchPath", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "szXMLData", + "type": "LPWSTR" + }, + { + "name": "pcchXMLData", + "type": "LPDWORD" + } + ], + "MsiGetPatchInfoExA": [ + { + "name": "szPatchCode", + "type": "LPCSTR" + }, + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "lpValue", + "type": "LPSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiGetPatchInfoExW": [ + { + "name": "szPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "lpValue", + "type": "LPWSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiApplyMultiplePatchesA": [ + { + "name": "szPatchPackages", + "type": "LPCSTR" + }, + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szPropertiesList", + "type": "LPCSTR" + } + ], + "MsiApplyMultiplePatchesW": [ + { + "name": "szPatchPackages", + "type": "LPCWSTR" + }, + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szPropertiesList", + "type": "LPCWSTR" + } + ], + "MsiDeterminePatchSequenceA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "cPatchInfo", + "type": "DWORD" + }, + { + "name": "pPatchInfo", + "type": "PMSIPATCHSEQUENCEINFOA" + } + ], + "MsiDeterminePatchSequenceW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "cPatchInfo", + "type": "DWORD" + }, + { + "name": "pPatchInfo", + "type": "PMSIPATCHSEQUENCEINFOW" + } + ], + "MsiDetermineApplicablePatchesA": [ + { + "name": "szProductPackagePath", + "type": "LPCSTR" + }, + { + "name": "cPatchInfo", + "type": "DWORD" + }, + { + "name": "pPatchInfo", + "type": "PMSIPATCHSEQUENCEINFOA" + } + ], + "MsiDetermineApplicablePatchesW": [ + { + "name": "szProductPackagePath", + "type": "LPCWSTR" + }, + { + "name": "cPatchInfo", + "type": "DWORD" + }, + { + "name": "pPatchInfo", + "type": "PMSIPATCHSEQUENCEINFOW" + } + ], + "MsiEnumPatchesExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szPatchCode", + "type": "CHAR" + }, + { + "name": "szTargetProductCode", + "type": "CHAR" + }, + { + "name": "pdwTargetProductContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szTargetUserSid", + "type": "LPSTR" + }, + { + "name": "pcchTargetUserSid", + "type": "LPDWORD" + } + ], + "MsiEnumPatchesExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwFilter", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szPatchCode", + "type": "WCHAR" + }, + { + "name": "szTargetProductCode", + "type": "WCHAR" + }, + { + "name": "pdwTargetProductContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szTargetUserSid", + "type": "LPWSTR" + }, + { + "name": "pcchTargetUserSid", + "type": "LPDWORD" + } + ], + "MsiQueryFeatureStateA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + } + ], + "MsiQueryFeatureStateW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + } + ], + "MsiQueryFeatureStateExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "pdwState", + "type": "INSTALLSTATE" + } + ], + "MsiQueryFeatureStateExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "pdwState", + "type": "INSTALLSTATE" + } + ], + "MsiUseFeatureA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + } + ], + "MsiUseFeatureW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + } + ], + "MsiUseFeatureExA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiUseFeatureExW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiGetFeatureUsageA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "pdwUseCount", + "type": "LPDWORD" + }, + { + "name": "pwDateUsed", + "type": "LPWORD" + } + ], + "MsiGetFeatureUsageW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "pdwUseCount", + "type": "LPDWORD" + }, + { + "name": "pwDateUsed", + "type": "LPWORD" + } + ], + "MsiConfigureFeatureA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiConfigureFeatureW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiReinstallFeatureA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "dwReinstallMode", + "type": "DWORD" + } + ], + "MsiReinstallFeatureW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "dwReinstallMode", + "type": "DWORD" + } + ], + "MsiProvideComponentA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideComponentW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideQualifiedComponentA": [ + { + "name": "szCategory", + "type": "LPCSTR" + }, + { + "name": "szQualifier", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideQualifiedComponentW": [ + { + "name": "szCategory", + "type": "LPCWSTR" + }, + { + "name": "szQualifier", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideQualifiedComponentExA": [ + { + "name": "szCategory", + "type": "LPCSTR" + }, + { + "name": "szQualifier", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "dwUnused1", + "type": "DWORD" + }, + { + "name": "dwUnused2", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideQualifiedComponentExW": [ + { + "name": "szCategory", + "type": "LPCWSTR" + }, + { + "name": "szQualifier", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "dwUnused1", + "type": "DWORD" + }, + { + "name": "dwUnused2", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiGetComponentPathA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiGetComponentPathW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiGetComponentPathExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szComponentCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "lpOutPathBuffer", + "type": "LPSTR" + }, + { + "name": "pcchOutPathBuffer", + "type": "LPDWORD" + } + ], + "MsiGetComponentPathExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szComponentCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "lpOutPathBuffer", + "type": "LPWSTR" + }, + { + "name": "pcchOutPathBuffer", + "type": "LPDWORD" + } + ], + "MsiProvideAssemblyA": [ + { + "name": "szAssemblyName", + "type": "LPCSTR" + }, + { + "name": "szAppContext", + "type": "LPCSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "dwAssemblyInfo", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiProvideAssemblyW": [ + { + "name": "szAssemblyName", + "type": "LPCWSTR" + }, + { + "name": "szAppContext", + "type": "LPCWSTR" + }, + { + "name": "dwInstallMode", + "type": "DWORD" + }, + { + "name": "dwAssemblyInfo", + "type": "DWORD" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiQueryComponentStateA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szComponentCode", + "type": "LPCSTR" + }, + { + "name": "pdwState", + "type": "INSTALLSTATE" + } + ], + "MsiQueryComponentStateW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szComponentCode", + "type": "LPCWSTR" + }, + { + "name": "pdwState", + "type": "INSTALLSTATE" + } + ], + "MsiEnumProductsA": [ + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPSTR" + } + ], + "MsiEnumProductsW": [ + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPWSTR" + } + ], + "MsiEnumProductsExA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szInstalledProductCode", + "type": "CHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumProductsExW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szInstalledProductCode", + "type": "WCHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPWSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumRelatedProductsA": [ + { + "name": "lpUpgradeCode", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPSTR" + } + ], + "MsiEnumRelatedProductsW": [ + { + "name": "lpUpgradeCode", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPWSTR" + } + ], + "MsiEnumFeaturesA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "iFeatureIndex", + "type": "DWORD" + }, + { + "name": "lpFeatureBuf", + "type": "LPSTR" + }, + { + "name": "lpParentBuf", + "type": "LPSTR" + } + ], + "MsiEnumFeaturesW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "iFeatureIndex", + "type": "DWORD" + }, + { + "name": "lpFeatureBuf", + "type": "LPWSTR" + }, + { + "name": "lpParentBuf", + "type": "LPWSTR" + } + ], + "MsiEnumComponentsA": [ + { + "name": "iComponentIndex", + "type": "DWORD" + }, + { + "name": "lpComponentBuf", + "type": "LPSTR" + } + ], + "MsiEnumComponentsW": [ + { + "name": "iComponentIndex", + "type": "DWORD" + }, + { + "name": "lpComponentBuf", + "type": "LPWSTR" + } + ], + "MsiEnumComponentsExA": [ + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szInstalledComponentCode", + "type": "CHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumComponentsExW": [ + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szInstalledComponentCode", + "type": "WCHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPWSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumClientsA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPSTR" + } + ], + "MsiEnumClientsW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "iProductIndex", + "type": "DWORD" + }, + { + "name": "lpProductBuf", + "type": "LPWSTR" + } + ], + "MsiEnumClientsExA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwProductIndex", + "type": "DWORD" + }, + { + "name": "szProductBuf", + "type": "CHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumClientsExW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "DWORD" + }, + { + "name": "dwProductIndex", + "type": "DWORD" + }, + { + "name": "szProductBuf", + "type": "WCHAR" + }, + { + "name": "pdwInstalledContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "szSid", + "type": "LPWSTR" + }, + { + "name": "pcchSid", + "type": "LPDWORD" + } + ], + "MsiEnumComponentQualifiersA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "iIndex", + "type": "DWORD" + }, + { + "name": "lpQualifierBuf", + "type": "LPSTR" + }, + { + "name": "pcchQualifierBuf", + "type": "LPDWORD" + }, + { + "name": "lpApplicationDataBuf", + "type": "LPSTR" + }, + { + "name": "pcchApplicationDataBuf", + "type": "LPDWORD" + } + ], + "MsiEnumComponentQualifiersW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "iIndex", + "type": "DWORD" + }, + { + "name": "lpQualifierBuf", + "type": "LPWSTR" + }, + { + "name": "pcchQualifierBuf", + "type": "LPDWORD" + }, + { + "name": "lpApplicationDataBuf", + "type": "LPWSTR" + }, + { + "name": "pcchApplicationDataBuf", + "type": "LPDWORD" + } + ], + "MsiOpenProductA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenProductW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenPackageA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenPackageW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenPackageExA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiOpenPackageExW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "hProduct", + "type": "MSIHANDLE" + } + ], + "MsiGetPatchFileListA": [ + { + "name": "szProductCode", + "type": "LPCSTR" + }, + { + "name": "szPatchPackages", + "type": "LPCSTR" + }, + { + "name": "pcFiles", + "type": "LPDWORD" + }, + { + "name": "pphFileRecords", + "type": "MSIHANDLE" + } + ], + "MsiGetPatchFileListW": [ + { + "name": "szProductCode", + "type": "LPCWSTR" + }, + { + "name": "szPatchPackages", + "type": "LPCWSTR" + }, + { + "name": "pcFiles", + "type": "LPDWORD" + }, + { + "name": "pphFileRecords", + "type": "MSIHANDLE" + } + ], + "MsiGetProductPropertyA": [ + { + "name": "hProduct", + "type": "MSIHANDLE" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "lpValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetProductPropertyW": [ + { + "name": "hProduct", + "type": "MSIHANDLE" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "lpValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiVerifyPackageA": [ + { + "name": "szPackagePath", + "type": "LPCSTR" + } + ], + "MsiVerifyPackageW": [ + { + "name": "szPackagePath", + "type": "LPCWSTR" + } + ], + "MsiGetFeatureInfoA": [ + { + "name": "hProduct", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "lpAttributes", + "type": "LPDWORD" + }, + { + "name": "lpTitleBuf", + "type": "LPSTR" + }, + { + "name": "pcchTitleBuf", + "type": "LPDWORD" + }, + { + "name": "lpHelpBuf", + "type": "LPSTR" + }, + { + "name": "pcchHelpBuf", + "type": "LPDWORD" + } + ], + "MsiGetFeatureInfoW": [ + { + "name": "hProduct", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "lpAttributes", + "type": "LPDWORD" + }, + { + "name": "lpTitleBuf", + "type": "LPWSTR" + }, + { + "name": "pcchTitleBuf", + "type": "LPDWORD" + }, + { + "name": "lpHelpBuf", + "type": "LPWSTR" + }, + { + "name": "pcchHelpBuf", + "type": "LPDWORD" + } + ], + "MsiInstallMissingComponentA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiInstallMissingComponentW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "eInstallState", + "type": "INSTALLSTATE" + } + ], + "MsiInstallMissingFileA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "MsiInstallMissingFileW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "MsiLocateComponentA": [ + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "lpPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiLocateComponentW": [ + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "lpPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiSourceListClearAllA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szUserName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiSourceListClearAllW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szUserName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiSourceListAddSourceA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szUserName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCSTR" + } + ], + "MsiSourceListAddSourceW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szUserName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCWSTR" + } + ], + "MsiSourceListForceResolutionA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "szUserName", + "type": "LPCSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiSourceListForceResolutionW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "szUserName", + "type": "LPCWSTR" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "MsiSourceListAddSourceExA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + } + ], + "MsiSourceListAddSourceExW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCWSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + } + ], + "MsiSourceListAddMediaDiskA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwDiskId", + "type": "DWORD" + }, + { + "name": "szVolumeLabel", + "type": "LPCSTR" + }, + { + "name": "szDiskPrompt", + "type": "LPCSTR" + } + ], + "MsiSourceListAddMediaDiskW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwDiskId", + "type": "DWORD" + }, + { + "name": "szVolumeLabel", + "type": "LPCWSTR" + }, + { + "name": "szDiskPrompt", + "type": "LPCWSTR" + } + ], + "MsiSourceListClearSourceA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCSTR" + } + ], + "MsiSourceListClearSourceW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPCWSTR" + } + ], + "MsiSourceListClearMediaDiskA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwDiskId", + "type": "DWORD" + } + ], + "MsiSourceListClearMediaDiskW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwDiskId", + "type": "DWORD" + } + ], + "MsiSourceListClearAllExA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiSourceListClearAllExW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiSourceListForceResolutionExA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiSourceListForceResolutionExW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + } + ], + "MsiSourceListSetInfoA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "szValue", + "type": "LPCSTR" + } + ], + "MsiSourceListSetInfoW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "szValue", + "type": "LPCWSTR" + } + ], + "MsiSourceListGetInfoA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szProperty", + "type": "LPCSTR" + }, + { + "name": "szValue", + "type": "LPSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiSourceListGetInfoW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "szProperty", + "type": "LPCWSTR" + }, + { + "name": "szValue", + "type": "LPWSTR" + }, + { + "name": "pcchValue", + "type": "LPDWORD" + } + ], + "MsiSourceListEnumSourcesA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPSTR" + }, + { + "name": "pcchSource", + "type": "LPDWORD" + } + ], + "MsiSourceListEnumSourcesW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "szSource", + "type": "LPWSTR" + }, + { + "name": "pcchSource", + "type": "LPDWORD" + } + ], + "MsiSourceListEnumMediaDisksA": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCSTR" + }, + { + "name": "szUserSid", + "type": "LPCSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwDiskId", + "type": "LPDWORD" + }, + { + "name": "szVolumeLabel", + "type": "LPSTR" + }, + { + "name": "pcchVolumeLabel", + "type": "LPDWORD" + }, + { + "name": "szDiskPrompt", + "type": "LPSTR" + }, + { + "name": "pcchDiskPrompt", + "type": "LPDWORD" + } + ], + "MsiSourceListEnumMediaDisksW": [ + { + "name": "szProductCodeOrPatchCode", + "type": "LPCWSTR" + }, + { + "name": "szUserSid", + "type": "LPCWSTR" + }, + { + "name": "dwContext", + "type": "MSIINSTALLCONTEXT" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "pdwDiskId", + "type": "LPDWORD" + }, + { + "name": "szVolumeLabel", + "type": "LPWSTR" + }, + { + "name": "pcchVolumeLabel", + "type": "LPDWORD" + }, + { + "name": "szDiskPrompt", + "type": "LPWSTR" + }, + { + "name": "pcchDiskPrompt", + "type": "LPDWORD" + } + ], + "MsiGetFileVersionA": [ + { + "name": "szFilePath", + "type": "LPCSTR" + }, + { + "name": "lpVersionBuf", + "type": "LPSTR" + }, + { + "name": "pcchVersionBuf", + "type": "LPDWORD" + }, + { + "name": "lpLangBuf", + "type": "LPSTR" + }, + { + "name": "pcchLangBuf", + "type": "LPDWORD" + } + ], + "MsiGetFileVersionW": [ + { + "name": "szFilePath", + "type": "LPCWSTR" + }, + { + "name": "lpVersionBuf", + "type": "LPWSTR" + }, + { + "name": "pcchVersionBuf", + "type": "LPDWORD" + }, + { + "name": "lpLangBuf", + "type": "LPWSTR" + }, + { + "name": "pcchLangBuf", + "type": "LPDWORD" + } + ], + "MsiGetFileHashA": [ + { + "name": "szFilePath", + "type": "LPCSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pHash", + "type": "PMSIFILEHASHINFO" + } + ], + "MsiGetFileHashW": [ + { + "name": "szFilePath", + "type": "LPCWSTR" + }, + { + "name": "dwOptions", + "type": "DWORD" + }, + { + "name": "pHash", + "type": "PMSIFILEHASHINFO" + } + ], + "MsiGetFileSignatureInformationA": [ + { + "name": "szSignedObjectPath", + "type": "LPCSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppcCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbHashData", + "type": "LPBYTE" + }, + { + "name": "pcbHashData", + "type": "LPDWORD" + } + ], + "MsiGetFileSignatureInformationW": [ + { + "name": "szSignedObjectPath", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppcCertContext", + "type": "PCCERT_CONTEXT" + }, + { + "name": "pbHashData", + "type": "LPBYTE" + }, + { + "name": "pcbHashData", + "type": "LPDWORD" + } + ], + "MsiGetShortcutTargetA": [ + { + "name": "szShortcutPath", + "type": "LPCSTR" + }, + { + "name": "szProductCode", + "type": "LPSTR" + }, + { + "name": "szFeatureId", + "type": "LPSTR" + }, + { + "name": "szComponentCode", + "type": "LPSTR" + } + ], + "MsiGetShortcutTargetW": [ + { + "name": "szShortcutPath", + "type": "LPCWSTR" + }, + { + "name": "szProductCode", + "type": "LPWSTR" + }, + { + "name": "szFeatureId", + "type": "LPWSTR" + }, + { + "name": "szComponentCode", + "type": "LPWSTR" + } + ], + "MsiIsProductElevatedA": [ + { + "name": "szProduct", + "type": "LPCSTR" + }, + { + "name": "pfElevated", + "type": "BOOL" + } + ], + "MsiIsProductElevatedW": [ + { + "name": "szProduct", + "type": "LPCWSTR" + }, + { + "name": "pfElevated", + "type": "BOOL" + } + ], + "MsiNotifySidChangeA": [ + { + "name": "pOldSid", + "type": "LPCSTR" + }, + { + "name": "pNewSid", + "type": "LPCSTR" + } + ], + "MsiNotifySidChangeW": [ + { + "name": "pOldSid", + "type": "LPCWSTR" + }, + { + "name": "pNewSid", + "type": "LPCWSTR" + } + ], + "MsiBeginTransactionA": [ + { + "name": "szName", + "type": "LPCSTR" + }, + { + "name": "dwTransactionAttributes", + "type": "DWORD" + }, + { + "name": "phTransactionHandle", + "type": "MSIHANDLE" + }, + { + "name": "phChangeOfOwnerEvent", + "type": "HANDLE" + } + ], + "MsiBeginTransactionW": [ + { + "name": "szName", + "type": "LPCWSTR" + }, + { + "name": "dwTransactionAttributes", + "type": "DWORD" + }, + { + "name": "phTransactionHandle", + "type": "MSIHANDLE" + }, + { + "name": "phChangeOfOwnerEvent", + "type": "HANDLE" + } + ], + "MsiEndTransaction": [ + { + "name": "dwTransactionState", + "type": "DWORD" + } + ], + "MsiJoinTransaction": [ + { + "name": "hTransactionHandle", + "type": "MSIHANDLE" + }, + { + "name": "dwTransactionAttributes", + "type": "DWORD" + }, + { + "name": "phChangeOfOwnerEvent", + "type": "HANDLE" + } + ], + "MsiDatabaseOpenViewA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szQuery", + "type": "LPCSTR" + }, + { + "name": "phView", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseOpenViewW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szQuery", + "type": "LPCWSTR" + }, + { + "name": "phView", + "type": "MSIHANDLE" + } + ], + "MsiViewGetErrorA": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "szColumnNameBuffer", + "type": "LPSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiViewGetErrorW": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "szColumnNameBuffer", + "type": "LPWSTR" + }, + { + "name": "pcchBuf", + "type": "LPDWORD" + } + ], + "MsiViewExecute": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewFetch": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewModify": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "eModifyMode", + "type": "MSIMODIFY" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewGetColumnInfo": [ + { + "name": "hView", + "type": "MSIHANDLE" + }, + { + "name": "eColumnInfo", + "type": "MSICOLINFO" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" + } + ], + "MsiViewClose": [ + { + "name": "hView", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseGetPrimaryKeysA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCSTR" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseGetPrimaryKeysW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCWSTR" + }, + { + "name": "phRecord", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseIsTablePersistentA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCSTR" + } + ], + "MsiDatabaseIsTablePersistentW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCWSTR" + } + ], + "MsiGetSummaryInformationA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szDatabasePath", + "type": "LPCSTR" + }, + { + "name": "uiUpdateCount", + "type": "UINT" + }, + { + "name": "phSummaryInfo", + "type": "MSIHANDLE" + } + ], + "MsiGetSummaryInformationW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szDatabasePath", + "type": "LPCWSTR" + }, + { + "name": "uiUpdateCount", + "type": "UINT" + }, + { + "name": "phSummaryInfo", + "type": "MSIHANDLE" + } + ], + "MsiSummaryInfoGetPropertyCount": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "puiPropertyCount", + "type": "PUINT" + } + ], + "MsiSummaryInfoSetPropertyA": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "uiProperty", + "type": "UINT" + }, + { + "name": "uiDataType", + "type": "UINT" + }, + { + "name": "iValue", + "type": "INT" + }, + { + "name": "pftValue", + "type": "FILETIME" + }, + { + "name": "szValue", + "type": "LPCSTR" + } + ], + "MsiSummaryInfoSetPropertyW": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "uiProperty", + "type": "UINT" + }, + { + "name": "uiDataType", + "type": "UINT" + }, + { + "name": "iValue", + "type": "INT" + }, + { + "name": "pftValue", + "type": "FILETIME" + }, + { + "name": "szValue", + "type": "LPCWSTR" + } + ], + "MsiSummaryInfoGetPropertyA": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "uiProperty", + "type": "UINT" + }, + { + "name": "puiDataType", + "type": "PUINT" + }, + { + "name": "piValue", + "type": "LPINT" + }, + { + "name": "pftValue", + "type": "FILETIME" + }, + { + "name": "szValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiSummaryInfoGetPropertyW": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + }, + { + "name": "uiProperty", + "type": "UINT" + }, + { + "name": "puiDataType", + "type": "PUINT" + }, + { + "name": "piValue", + "type": "LPINT" + }, + { + "name": "pftValue", + "type": "FILETIME" + }, + { + "name": "szValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiSummaryInfoPersist": [ + { + "name": "hSummaryInfo", + "type": "MSIHANDLE" + } + ], + "MsiOpenDatabaseA": [ + { + "name": "szDatabasePath", + "type": "LPCSTR" + }, + { + "name": "szPersist", + "type": "LPCSTR" + }, + { + "name": "phDatabase", + "type": "MSIHANDLE" + } + ], + "MsiOpenDatabaseW": [ + { + "name": "szDatabasePath", + "type": "LPCWSTR" + }, + { + "name": "szPersist", + "type": "LPCWSTR" + }, + { + "name": "phDatabase", + "type": "MSIHANDLE" + } + ], + "MsiDatabaseImportA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szFolderPath", + "type": "LPCSTR" + }, + { + "name": "szFileName", + "type": "LPCSTR" + } + ], + "MsiDatabaseImportW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szFolderPath", + "type": "LPCWSTR" + }, + { + "name": "szFileName", + "type": "LPCWSTR" + } + ], + "MsiDatabaseExportA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCSTR" + }, + { + "name": "szFolderPath", + "type": "LPCSTR" + }, + { + "name": "szFileName", + "type": "LPCSTR" + } + ], + "MsiDatabaseExportW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCWSTR" + }, + { + "name": "szFolderPath", + "type": "LPCWSTR" + }, + { + "name": "szFileName", + "type": "LPCWSTR" + } + ], + "MsiDatabaseMergeA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseMerge", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCSTR" + } + ], + "MsiDatabaseMergeW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseMerge", + "type": "MSIHANDLE" + }, + { + "name": "szTableName", + "type": "LPCWSTR" + } + ], + "MsiDatabaseGenerateTransformA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseReference", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCSTR" + }, + { + "name": "iReserved1", + "type": "int" + }, + { + "name": "iReserved2", + "type": "int" + } + ], + "MsiDatabaseGenerateTransformW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseReference", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCWSTR" + }, + { + "name": "iReserved1", + "type": "int" + }, + { + "name": "iReserved2", + "type": "int" + } + ], + "MsiDatabaseApplyTransformA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCSTR" + }, + { + "name": "iErrorConditions", + "type": "int" + } + ], + "MsiDatabaseApplyTransformW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCWSTR" + }, + { + "name": "iErrorConditions", + "type": "int" + } + ], + "MsiCreateTransformSummaryInfoA": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseReference", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCSTR" + }, + { + "name": "iErrorConditions", + "type": "int" + }, + { + "name": "iValidation", + "type": "int" + } + ], + "MsiCreateTransformSummaryInfoW": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "hDatabaseReference", + "type": "MSIHANDLE" + }, + { + "name": "szTransformFile", + "type": "LPCWSTR" + }, + { + "name": "iErrorConditions", + "type": "int" + }, + { + "name": "iValidation", + "type": "int" + } + ], + "MsiDatabaseCommit": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + } + ], + "MsiGetDatabaseState": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + } + ], + "MsiCreateRecord": [ + { + "name": "cParams", + "type": "UINT" + } + ], + "MsiRecordIsNull": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + } + ], + "MsiRecordDataSize": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + } + ], + "MsiRecordSetInteger": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "iValue", + "type": "int" + } + ], + "MsiRecordSetStringA": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szValue", + "type": "LPCSTR" + } + ], + "MsiRecordSetStringW": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szValue", + "type": "LPCWSTR" + } + ], + "MsiRecordGetInteger": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + } + ], + "MsiRecordGetStringA": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiRecordGetStringW": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiRecordGetFieldCount": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiRecordSetStreamA": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szFilePath", + "type": "LPCSTR" + } + ], + "MsiRecordSetStreamW": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szFilePath", + "type": "LPCWSTR" + } + ], + "MsiRecordReadStream": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "iField", + "type": "UINT" + }, + { + "name": "szDataBuf", + "type": "char" + }, + { + "name": "pcbDataBuf", + "type": "LPDWORD" + } + ], + "MsiRecordClearData": [ + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiGetActiveDatabase": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + } + ], + "MsiSetPropertyA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szName", + "type": "LPCSTR" + }, + { + "name": "szValue", + "type": "LPCSTR" + } + ], + "MsiSetPropertyW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szName", + "type": "LPCWSTR" + }, + { + "name": "szValue", + "type": "LPCWSTR" + } + ], + "MsiGetPropertyA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szName", + "type": "LPCSTR" + }, + { + "name": "szValueBuf", + "type": "LPSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetPropertyW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szName", + "type": "LPCWSTR" + }, + { + "name": "szValueBuf", + "type": "LPWSTR" + }, + { + "name": "pcchValueBuf", + "type": "LPDWORD" + } + ], + "MsiGetLanguage": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + } + ], + "MsiGetMode": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "eRunMode", + "type": "MSIRUNMODE" + } + ], + "MsiSetMode": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "eRunMode", + "type": "MSIRUNMODE" + }, + { + "name": "fState", + "type": "BOOL" + } + ], + "MsiFormatRecordA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "szResultBuf", + "type": "LPSTR" + }, + { + "name": "pcchResultBuf", + "type": "LPDWORD" + } + ], + "MsiFormatRecordW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + }, + { + "name": "szResultBuf", + "type": "LPWSTR" + }, + { + "name": "pcchResultBuf", + "type": "LPDWORD" + } + ], + "MsiDoActionA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szAction", + "type": "LPCSTR" + } + ], + "MsiDoActionW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szAction", + "type": "LPCWSTR" + } + ], + "MsiSequenceA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szTable", + "type": "LPCSTR" + }, + { + "name": "iSequenceMode", + "type": "INT" + } + ], + "MsiSequenceW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szTable", + "type": "LPCWSTR" + }, + { + "name": "iSequenceMode", + "type": "INT" + } + ], + "MsiProcessMessage": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "eMessageType", + "type": "INSTALLMESSAGE" + }, + { + "name": "hRecord", + "type": "MSIHANDLE" + } + ], + "MsiEvaluateConditionA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szCondition", + "type": "LPCSTR" + } + ], + "MsiEvaluateConditionW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szCondition", + "type": "LPCWSTR" + } + ], + "MsiGetFeatureStateA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "piInstalled", + "type": "INSTALLSTATE" + }, + { + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiGetFeatureStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "piInstalled", + "type": "INSTALLSTATE" + }, + { + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiSetFeatureStateA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiSetFeatureStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiSetFeatureAttributesA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "MsiSetFeatureAttributesW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "dwAttributes", + "type": "DWORD" + } + ], + "MsiGetComponentStateA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "piInstalled", + "type": "INSTALLSTATE" + }, + { + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiGetComponentStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "piInstalled", + "type": "INSTALLSTATE" + }, + { + "name": "piAction", + "type": "INSTALLSTATE" + } + ], + "MsiSetComponentStateA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiSetComponentStateW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + } + ], + "MsiGetFeatureCostA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "iCostTree", + "type": "MSICOSTTREE" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + }, + { + "name": "piCost", + "type": "LPINT" + } + ], + "MsiGetFeatureCostW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "iCostTree", + "type": "MSICOSTTREE" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + }, + { + "name": "piCost", + "type": "LPINT" + } + ], + "MsiEnumComponentCostsA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + }, + { + "name": "szDriveBuf", + "type": "LPSTR" + }, + { + "name": "pcchDriveBuf", + "type": "LPDWORD" + }, + { + "name": "piCost", + "type": "LPINT" + }, + { + "name": "piTempCost", + "type": "LPINT" + } + ], + "MsiEnumComponentCostsW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szComponent", + "type": "LPCWSTR" + }, + { + "name": "dwIndex", + "type": "DWORD" + }, + { + "name": "iState", + "type": "INSTALLSTATE" + }, + { + "name": "szDriveBuf", + "type": "LPWSTR" + }, + { + "name": "pcchDriveBuf", + "type": "LPDWORD" + }, + { + "name": "piCost", + "type": "LPINT" + }, + { + "name": "piTempCost", + "type": "LPINT" + } + ], + "MsiSetInstallLevel": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "iInstallLevel", + "type": "int" + } + ], + "MsiGetFeatureValidStatesA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCSTR" + }, + { + "name": "lpInstallStates", + "type": "LPDWORD" + } + ], + "MsiGetFeatureValidStatesW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFeature", + "type": "LPCWSTR" + }, + { + "name": "lpInstallStates", + "type": "LPDWORD" + } + ], + "MsiGetSourcePathA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCSTR" + }, + { + "name": "szPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiGetSourcePathW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCWSTR" + }, + { + "name": "szPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiGetTargetPathA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCSTR" + }, + { + "name": "szPathBuf", + "type": "LPSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiGetTargetPathW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCWSTR" + }, + { + "name": "szPathBuf", + "type": "LPWSTR" + }, + { + "name": "pcchPathBuf", + "type": "LPDWORD" + } + ], + "MsiSetTargetPathA": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCSTR" + }, + { + "name": "szFolderPath", + "type": "LPCSTR" + } + ], + "MsiSetTargetPathW": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + }, + { + "name": "szFolder", + "type": "LPCWSTR" + }, + { + "name": "szFolderPath", + "type": "LPCWSTR" + } + ], + "MsiVerifyDiskSpace": [ + { + "name": "hInstall", + "type": "MSIHANDLE" + } + ], + "MsiEnableUIPreview": [ + { + "name": "hDatabase", + "type": "MSIHANDLE" + }, + { + "name": "phPreview", + "type": "MSIHANDLE" + } + ], + "MsiPreviewDialogA": [ + { + "name": "hPreview", + "type": "MSIHANDLE" + }, + { + "name": "szDialogName", + "type": "LPCSTR" + } + ], + "MsiPreviewDialogW": [ + { + "name": "hPreview", + "type": "MSIHANDLE" + }, + { + "name": "szDialogName", + "type": "LPCWSTR" + } + ], + "MsiPreviewBillboardA": [ + { + "name": "hPreview", + "type": "MSIHANDLE" + }, + { + "name": "szControlName", + "type": "LPCSTR" + }, + { + "name": "szBillboard", + "type": "LPCSTR" + } + ], + "MsiPreviewBillboardW": [ + { + "name": "hPreview", + "type": "MSIHANDLE" + }, + { + "name": "szControlName", + "type": "LPCWSTR" + }, + { + "name": "szBillboard", + "type": "LPCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/msimg32_dll.json b/qiling/extensions/windows_sdk/msimg32_dll.json new file mode 100644 index 000000000..751fcdd3d --- /dev/null +++ b/qiling/extensions/windows_sdk/msimg32_dll.json @@ -0,0 +1,120 @@ +{ + "AlphaBlend": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "ftn", + "type": "BLENDFUNCTION" + } + ], + "TransparentBlt": [ + { + "name": "hdcDest", + "type": "HDC" + }, + { + "name": "xoriginDest", + "type": "int" + }, + { + "name": "yoriginDest", + "type": "int" + }, + { + "name": "wDest", + "type": "int" + }, + { + "name": "hDest", + "type": "int" + }, + { + "name": "hdcSrc", + "type": "HDC" + }, + { + "name": "xoriginSrc", + "type": "int" + }, + { + "name": "yoriginSrc", + "type": "int" + }, + { + "name": "wSrc", + "type": "int" + }, + { + "name": "hSrc", + "type": "int" + }, + { + "name": "crTransparent", + "type": "UINT" + } + ], + "GradientFill": [ + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "pVertex", + "type": "PTRIVERTEX" + }, + { + "name": "nVertex", + "type": "ULONG" + }, + { + "name": "pMesh", + "type": "PVOID" + }, + { + "name": "nMesh", + "type": "ULONG" + }, + { + "name": "ulMode", + "type": "ULONG" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/msports.json b/qiling/extensions/windows_sdk/msports_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/msports.json rename to qiling/extensions/windows_sdk/msports_dll.json diff --git a/qiling/extensions/windows_sdk/Mstask.json b/qiling/extensions/windows_sdk/mstask_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Mstask.json rename to qiling/extensions/windows_sdk/mstask_dll.json diff --git a/qiling/extensions/windows_sdk/msvfw32_dll.json b/qiling/extensions/windows_sdk/msvfw32_dll.json new file mode 100644 index 000000000..25d256dcf --- /dev/null +++ b/qiling/extensions/windows_sdk/msvfw32_dll.json @@ -0,0 +1,734 @@ +{ + "ICInfo": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lpicinfo", + "type": "ICINFO" + } + ], + "ICInstall": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "szDesc", + "type": "LPSTR" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "ICRemove": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "ICGetInfo": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "picinfo", + "type": "ICINFO" + }, + { + "name": "cb", + "type": "DWORD" + } + ], + "ICOpen": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wMode", + "type": "UINT" + } + ], + "ICOpenFunction": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "wMode", + "type": "UINT" + }, + { + "name": "lpfnHandler", + "type": "FARPROC" + } + ], + "ICClose": [ + { + "name": "hic", + "type": "HIC" + } + ], + "ICSendMessage": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "msg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "ICCompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpbiOutput", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpbiInput", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpckid", + "type": "LPDWORD" + }, + { + "name": "lpdwFlags", + "type": "LPDWORD" + }, + { + "name": "lFrameNum", + "type": "LONG" + }, + { + "name": "dwFrameSize", + "type": "DWORD" + }, + { + "name": "dwQuality", + "type": "DWORD" + }, + { + "name": "lpbiPrev", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpPrev", + "type": "LPVOID" + } + ], + "ICDecompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpbiFormat", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + } + ], + "ICDrawBegin": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDst", + "type": "int" + }, + { + "name": "yDst", + "type": "int" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "dwRate", + "type": "DWORD" + }, + { + "name": "dwScale", + "type": "DWORD" + } + ], + "ICDraw": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpFormat", + "type": "LPVOID" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "lTime", + "type": "LONG" + } + ], + "ICLocate": [ + { + "name": "fccType", + "type": "DWORD" + }, + { + "name": "fccHandler", + "type": "DWORD" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "wFlags", + "type": "WORD" + } + ], + "ICGetDisplayFormat": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "BitDepth", + "type": "int" + }, + { + "name": "dx", + "type": "int" + }, + { + "name": "dy", + "type": "int" + } + ], + "ICImageCompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFO" + }, + { + "name": "lQuality", + "type": "LONG" + }, + { + "name": "plSize", + "type": "LONG" + } + ], + "ICImageDecompress": [ + { + "name": "hic", + "type": "HIC" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "lpbiOut", + "type": "LPBITMAPINFO" + } + ], + "ICCompressorChoose": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "pvIn", + "type": "LPVOID" + }, + { + "name": "lpData", + "type": "LPVOID" + }, + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "lpszTitle", + "type": "LPSTR" + } + ], + "ICSeqCompressFrameStart": [ + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "lpbiIn", + "type": "LPBITMAPINFO" + } + ], + "ICSeqCompressFrameEnd": [ + { + "name": "pc", + "type": "PCOMPVARS" + } + ], + "ICSeqCompressFrame": [ + { + "name": "pc", + "type": "PCOMPVARS" + }, + { + "name": "uiFlags", + "type": "UINT" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "pfKey", + "type": "BOOL" + }, + { + "name": "plSize", + "type": "LONG" + } + ], + "ICCompressorFree": [ + { + "name": "pc", + "type": "PCOMPVARS" + } + ], + "DrawDibOpen": [ + { + "name": "VOID", + "type": "void" + } + ], + "DrawDibClose": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibGetBuffer": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "dwSize", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DrawDibGetPalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibSetPalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hpal", + "type": "HPALETTE" + } + ], + "DrawDibChangePalette": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "iStart", + "type": "int" + }, + { + "name": "iLen", + "type": "int" + }, + { + "name": "lppe", + "type": "LPPALETTEENTRY" + } + ], + "DrawDibRealize": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "fBackground", + "type": "BOOL" + } + ], + "DrawDibStart": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "rate", + "type": "DWORD" + } + ], + "DrawDibStop": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibBegin": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "DrawDibDraw": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "hdc", + "type": "HDC" + }, + { + "name": "xDst", + "type": "int" + }, + { + "name": "yDst", + "type": "int" + }, + { + "name": "dxDst", + "type": "int" + }, + { + "name": "dyDst", + "type": "int" + }, + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + }, + { + "name": "lpBits", + "type": "LPVOID" + }, + { + "name": "xSrc", + "type": "int" + }, + { + "name": "ySrc", + "type": "int" + }, + { + "name": "dxSrc", + "type": "int" + }, + { + "name": "dySrc", + "type": "int" + }, + { + "name": "wFlags", + "type": "UINT" + } + ], + "DrawDibEnd": [ + { + "name": "hdd", + "type": "HDRAWDIB" + } + ], + "DrawDibTime": [ + { + "name": "hdd", + "type": "HDRAWDIB" + }, + { + "name": "lpddtime", + "type": "LPDRAWDIBTIME" + } + ], + "DrawDibProfileDisplay": [ + { + "name": "lpbi", + "type": "LPBITMAPINFOHEADER" + } + ], + "MCIWndCreateA": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "szFile", + "type": "LPCSTR" + } + ], + "MCIWndCreateW": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "hInstance", + "type": "HINSTANCE" + }, + { + "name": "dwStyle", + "type": "DWORD" + }, + { + "name": "szFile", + "type": "LPCWSTR" + } + ], + "MCIWndRegisterClass": [ + { + "name": "VOID", + "type": "void" + } + ], + "GetOpenFileNamePreviewA": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEA" + } + ], + "GetSaveFileNamePreviewA": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEA" + } + ], + "GetOpenFileNamePreviewW": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEW" + } + ], + "GetSaveFileNamePreviewW": [ + { + "name": "lpofn", + "type": "LPOPENFILENAMEW" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Mswsock.json b/qiling/extensions/windows_sdk/mswsock_dll.json similarity index 68% rename from qiling/extensions/windows_sdk/Mswsock.json rename to qiling/extensions/windows_sdk/mswsock_dll.json index 3d0d8b0af..dc39bb284 100644 --- a/qiling/extensions/windows_sdk/Mswsock.json +++ b/qiling/extensions/windows_sdk/mswsock_dll.json @@ -1,4 +1,128 @@ { + "WSARecvEx": [ + { + "name": "s", + "type": "SOCKET" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "len", + "type": "int" + }, + { + "name": "flags", + "type": "int" + } + ], + "TransmitFile": [ + { + "name": "hSocket", + "type": "SOCKET" + }, + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "nNumberOfBytesToWrite", + "type": "DWORD" + }, + { + "name": "nNumberOfBytesPerSend", + "type": "DWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpTransmitBuffers", + "type": "LPTRANSMIT_FILE_BUFFERS" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "AcceptEx": [ + { + "name": "sListenSocket", + "type": "SOCKET" + }, + { + "name": "sAcceptSocket", + "type": "SOCKET" + }, + { + "name": "lpOutputBuffer", + "type": "PVOID" + }, + { + "name": "dwReceiveDataLength", + "type": "DWORD" + }, + { + "name": "dwLocalAddressLength", + "type": "DWORD" + }, + { + "name": "dwRemoteAddressLength", + "type": "DWORD" + }, + { + "name": "lpdwBytesReceived", + "type": "LPDWORD" + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "GetAcceptExSockaddrs": [ + { + "name": "lpOutputBuffer", + "type": "PVOID" + }, + { + "name": "dwReceiveDataLength", + "type": "DWORD" + }, + { + "name": "dwLocalAddressLength", + "type": "DWORD" + }, + { + "name": "dwRemoteAddressLength", + "type": "DWORD" + }, + { + "name": "LocalSockaddr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "LocalSockaddrLength", + "type": "LPINT" + }, + { + "name": "RemoteSockaddr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "RemoteSockaddrLength", + "type": "LPINT" + } + ], "EnumProtocolsA": [ { "name": "lpiProtocols", diff --git a/qiling/extensions/windows_sdk/mtxdm.json b/qiling/extensions/windows_sdk/mtxdm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mtxdm.json rename to qiling/extensions/windows_sdk/mtxdm_dll.json diff --git a/qiling/extensions/windows_sdk/mydocs_dll.json b/qiling/extensions/windows_sdk/mydocs_dll.json new file mode 100644 index 000000000..f07d952d3 --- /dev/null +++ b/qiling/extensions/windows_sdk/mydocs_dll.json @@ -0,0 +1,8 @@ +{ + "PerUserInit": [ + { + "name": "VOID", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ncrypt.json b/qiling/extensions/windows_sdk/ncrypt.json deleted file mode 100644 index 46e3b019d..000000000 --- a/qiling/extensions/windows_sdk/ncrypt.json +++ /dev/null @@ -1,222 +0,0 @@ -{ - "NCryptRegisterProtectionDescriptorName": [ - { - "name": "pwszName", - "type": "LPCWSTR" - }, - { - "name": "pwszDescriptorString", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "NCryptQueryProtectionDescriptorName": [ - { - "name": "pwszName", - "type": "LPCWSTR" - }, - { - "name": "pwszDescriptorString", - "type": "LPWSTR" - }, - { - "name": "pcDescriptorString", - "type": "SIZE_T" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "NCryptCreateProtectionDescriptor": [ - { - "name": "pwszDescriptorString", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phDescriptor", - "type": "NCRYPT_DESCRIPTOR_HANDLE" - } - ], - "NCryptCloseProtectionDescriptor": [ - { - "name": "hDescriptor", - "type": "NCRYPT_DESCRIPTOR_HANDLE" - } - ], - "NCryptGetProtectionDescriptorInfo": [ - { - "name": "hDescriptor", - "type": "NCRYPT_DESCRIPTOR_HANDLE" - }, - { - "name": "pMemPara", - "type": "NCRYPT_ALLOC_PARA" - }, - { - "name": "dwInfoType", - "type": "DWORD" - }, - { - "name": "ppvInfo", - "type": "void" - } - ], - "NCryptProtectSecret": [ - { - "name": "hDescriptor", - "type": "NCRYPT_DESCRIPTOR_HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "ULONG" - }, - { - "name": "pMemPara", - "type": "NCRYPT_ALLOC_PARA" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "ppbProtectedBlob", - "type": "BYTE" - }, - { - "name": "pcbProtectedBlob", - "type": "ULONG" - } - ], - "NCryptUnprotectSecret": [ - { - "name": "phDescriptor", - "type": "NCRYPT_DESCRIPTOR_HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbProtectedBlob", - "type": "BYTE" - }, - { - "name": "cbProtectedBlob", - "type": "ULONG" - }, - { - "name": "pMemPara", - "type": "NCRYPT_ALLOC_PARA" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "ppbData", - "type": "BYTE" - }, - { - "name": "pcbData", - "type": "ULONG" - } - ], - "NCryptStreamOpenToProtect": [ - { - "name": "hDescriptor", - "type": "NCRYPT_DESCRIPTOR_HANDLE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "pStreamInfo", - "type": "NCRYPT_PROTECT_STREAM_INFO" - }, - { - "name": "phStream", - "type": "NCRYPT_STREAM_HANDLE" - } - ], - "NCryptStreamOpenToUnprotect": [ - { - "name": "pStreamInfo", - "type": "NCRYPT_PROTECT_STREAM_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "phStream", - "type": "NCRYPT_STREAM_HANDLE" - } - ], - "NCryptStreamOpenToUnprotectEx": [ - { - "name": "pStreamInfo", - "type": "NCRYPT_PROTECT_STREAM_INFO_EX" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "phStream", - "type": "NCRYPT_STREAM_HANDLE" - } - ], - "NCryptStreamUpdate": [ - { - "name": "hStream", - "type": "NCRYPT_STREAM_HANDLE" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "SIZE_T" - }, - { - "name": "fFinal", - "type": "BOOL" - } - ], - "NCryptStreamClose": [ - { - "name": "hStream", - "type": "NCRYPT_STREAM_HANDLE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ncrypt_dll.json b/qiling/extensions/windows_sdk/ncrypt_dll.json new file mode 100644 index 000000000..6a33cd3a0 --- /dev/null +++ b/qiling/extensions/windows_sdk/ncrypt_dll.json @@ -0,0 +1,824 @@ +{ + "NCryptOpenStorageProvider": [ + { + "name": "phProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "pszProviderName", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptEnumAlgorithms": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "dwAlgOperations", + "type": "DWORD" + }, + { + "name": "pdwAlgCount", + "type": "DWORD" + }, + { + "name": "ppAlgList", + "type": "NCryptAlgorithmName" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptIsAlgSupported": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "pszAlgId", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptEnumKeys": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "pszScope", + "type": "LPCWSTR" + }, + { + "name": "ppKeyName", + "type": "NCryptKeyName" + }, + { + "name": "ppEnumState", + "type": "PVOID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptEnumStorageProviders": [ + { + "name": "pdwProviderCount", + "type": "DWORD" + }, + { + "name": "ppProviderList", + "type": "NCryptProviderName" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptFreeBuffer": [ + { + "name": "pvInput", + "type": "PVOID" + } + ], + "NCryptOpenKey": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "phKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pszKeyName", + "type": "LPCWSTR" + }, + { + "name": "dwLegacyKeySpec", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptCreatePersistedKey": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "phKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pszAlgId", + "type": "LPCWSTR" + }, + { + "name": "pszKeyName", + "type": "LPCWSTR" + }, + { + "name": "dwLegacyKeySpec", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptGetProperty": [ + { + "name": "hObject", + "type": "NCRYPT_HANDLE" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "cbOutput", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptSetProperty": [ + { + "name": "hObject", + "type": "NCRYPT_HANDLE" + }, + { + "name": "pszProperty", + "type": "LPCWSTR" + }, + { + "name": "pbInput", + "type": "PBYTE" + }, + { + "name": "cbInput", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptFinalizeKey": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptEncrypt": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pbInput", + "type": "PBYTE" + }, + { + "name": "cbInput", + "type": "DWORD" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "cbOutput", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptDecrypt": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pbInput", + "type": "PBYTE" + }, + { + "name": "cbInput", + "type": "DWORD" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "cbOutput", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptImportKey": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "hImportKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pszBlobType", + "type": "LPCWSTR" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "phKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pbData", + "type": "PBYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptExportKey": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hExportKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pszBlobType", + "type": "LPCWSTR" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbOutput", + "type": "PBYTE" + }, + { + "name": "cbOutput", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptSignHash": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbHashValue", + "type": "PBYTE" + }, + { + "name": "cbHashValue", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "PBYTE" + }, + { + "name": "cbSignature", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptVerifySignature": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pPaddingInfo", + "type": "void" + }, + { + "name": "pbHashValue", + "type": "PBYTE" + }, + { + "name": "cbHashValue", + "type": "DWORD" + }, + { + "name": "pbSignature", + "type": "PBYTE" + }, + { + "name": "cbSignature", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptDeleteKey": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptFreeObject": [ + { + "name": "hObject", + "type": "NCRYPT_HANDLE" + } + ], + "NCryptIsKeyHandle": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + } + ], + "NCryptTranslateHandle": [ + { + "name": "phProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "phKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hLegacyProv", + "type": "HCRYPTPROV" + }, + { + "name": "hLegacyKey", + "type": "HCRYPTKEY" + }, + { + "name": "dwLegacyKeySpec", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptNotifyChangeKey": [ + { + "name": "hProvider", + "type": "NCRYPT_PROV_HANDLE" + }, + { + "name": "phEvent", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptSecretAgreement": [ + { + "name": "hPrivKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hPubKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "phAgreedSecret", + "type": "NCRYPT_SECRET_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptDeriveKey": [ + { + "name": "hSharedSecret", + "type": "NCRYPT_SECRET_HANDLE" + }, + { + "name": "pwszKDF", + "type": "LPCWSTR" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbDerivedKey", + "type": "PBYTE" + }, + { + "name": "cbDerivedKey", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "NCryptKeyDerivation": [ + { + "name": "hKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbDerivedKey", + "type": "PUCHAR" + }, + { + "name": "cbDerivedKey", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "ULONG" + } + ], + "NCryptCreateClaim": [ + { + "name": "hSubjectKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hAuthorityKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "dwClaimType", + "type": "DWORD" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbClaimBlob", + "type": "PBYTE" + }, + { + "name": "cbClaimBlob", + "type": "DWORD" + }, + { + "name": "pcbResult", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptVerifyClaim": [ + { + "name": "hSubjectKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "hAuthorityKey", + "type": "NCRYPT_KEY_HANDLE" + }, + { + "name": "dwClaimType", + "type": "DWORD" + }, + { + "name": "pParameterList", + "type": "NCryptBufferDesc" + }, + { + "name": "pbClaimBlob", + "type": "PBYTE" + }, + { + "name": "cbClaimBlob", + "type": "DWORD" + }, + { + "name": "pOutput", + "type": "NCryptBufferDesc" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptRegisterProtectionDescriptorName": [ + { + "name": "pwszName", + "type": "LPCWSTR" + }, + { + "name": "pwszDescriptorString", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptQueryProtectionDescriptorName": [ + { + "name": "pwszName", + "type": "LPCWSTR" + }, + { + "name": "pwszDescriptorString", + "type": "LPWSTR" + }, + { + "name": "pcDescriptorString", + "type": "SIZE_T" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "NCryptCreateProtectionDescriptor": [ + { + "name": "pwszDescriptorString", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + } + ], + "NCryptCloseProtectionDescriptor": [ + { + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + } + ], + "NCryptGetProtectionDescriptorInfo": [ + { + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + }, + { + "name": "pMemPara", + "type": "NCRYPT_ALLOC_PARA" + }, + { + "name": "dwInfoType", + "type": "DWORD" + }, + { + "name": "ppvInfo", + "type": "void" + } + ], + "NCryptProtectSecret": [ + { + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "ULONG" + }, + { + "name": "pMemPara", + "type": "NCRYPT_ALLOC_PARA" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "ppbProtectedBlob", + "type": "BYTE" + }, + { + "name": "pcbProtectedBlob", + "type": "ULONG" + } + ], + "NCryptUnprotectSecret": [ + { + "name": "phDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pbProtectedBlob", + "type": "BYTE" + }, + { + "name": "cbProtectedBlob", + "type": "ULONG" + }, + { + "name": "pMemPara", + "type": "NCRYPT_ALLOC_PARA" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "ppbData", + "type": "BYTE" + }, + { + "name": "pcbData", + "type": "ULONG" + } + ], + "NCryptStreamOpenToProtect": [ + { + "name": "hDescriptor", + "type": "NCRYPT_DESCRIPTOR_HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pStreamInfo", + "type": "NCRYPT_PROTECT_STREAM_INFO" + }, + { + "name": "phStream", + "type": "NCRYPT_STREAM_HANDLE" + } + ], + "NCryptStreamOpenToUnprotect": [ + { + "name": "pStreamInfo", + "type": "NCRYPT_PROTECT_STREAM_INFO" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "phStream", + "type": "NCRYPT_STREAM_HANDLE" + } + ], + "NCryptStreamOpenToUnprotectEx": [ + { + "name": "pStreamInfo", + "type": "NCRYPT_PROTECT_STREAM_INFO_EX" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "phStream", + "type": "NCRYPT_STREAM_HANDLE" + } + ], + "NCryptStreamUpdate": [ + { + "name": "hStream", + "type": "NCRYPT_STREAM_HANDLE" + }, + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "cbData", + "type": "SIZE_T" + }, + { + "name": "fFinal", + "type": "BOOL" + } + ], + "NCryptStreamClose": [ + { + "name": "hStream", + "type": "NCRYPT_STREAM_HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/netapi32_dll.json b/qiling/extensions/windows_sdk/netapi32_dll.json new file mode 100644 index 000000000..576363d14 --- /dev/null +++ b/qiling/extensions/windows_sdk/netapi32_dll.json @@ -0,0 +1,2012 @@ +{ + "NetStatisticsGet": [ + { + "name": "ServerName", + "type": "LPTSTR" + }, + { + "name": "Service", + "type": "LPTSTR" + }, + { + "name": "Level", + "type": "DWORD" + }, + { + "name": "Options", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "LPBYTE" + } + ], + "NetServerEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "servertype", + "type": "DWORD" + }, + { + "name": "domain", + "type": "LPCWSTR" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetServerGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetServerSetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "ParmError", + "type": "LPDWORD" + } + ], + "NetServerDiskEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetServerComputerNameAdd": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "EmulatedDomainName", + "type": "LPWSTR" + }, + { + "name": "EmulatedServerName", + "type": "LPWSTR" + } + ], + "NetServerComputerNameDel": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "EmulatedServerName", + "type": "LPWSTR" + } + ], + "NetServerTransportAdd": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetServerTransportAddEx": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetServerTransportDel": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetServerTransportEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "DsGetDcNameA": [ + { + "name": "ComputerName", + "type": "LPCSTR" + }, + { + "name": "DomainName", + "type": "LPCSTR" + }, + { + "name": "DomainGuid", + "type": "GUID" + }, + { + "name": "SiteName", + "type": "LPCSTR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "DomainControllerInfo", + "type": "PDOMAIN_CONTROLLER_INFOA" + } + ], + "DsGetDcNameW": [ + { + "name": "ComputerName", + "type": "LPCWSTR" + }, + { + "name": "DomainName", + "type": "LPCWSTR" + }, + { + "name": "DomainGuid", + "type": "GUID" + }, + { + "name": "SiteName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "DomainControllerInfo", + "type": "PDOMAIN_CONTROLLER_INFOW" + } + ], + "DsGetSiteNameA": [ + { + "name": "ComputerName", + "type": "LPCSTR" + }, + { + "name": "SiteName", + "type": "LPSTR" + } + ], + "DsGetSiteNameW": [ + { + "name": "ComputerName", + "type": "LPCWSTR" + }, + { + "name": "SiteName", + "type": "LPWSTR" + } + ], + "DsValidateSubnetNameW": [ + { + "name": "SubnetName", + "type": "LPCWSTR" + } + ], + "DsValidateSubnetNameA": [ + { + "name": "SubnetName", + "type": "LPCSTR" + } + ], + "DsEnumerateDomainTrustsW": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "Domains", + "type": "PDS_DOMAIN_TRUSTSW" + }, + { + "name": "DomainCount", + "type": "PULONG" + } + ], + "DsEnumerateDomainTrustsA": [ + { + "name": "ServerName", + "type": "LPSTR" + }, + { + "name": "Flags", + "type": "ULONG" + }, + { + "name": "Domains", + "type": "PDS_DOMAIN_TRUSTSA" + }, + { + "name": "DomainCount", + "type": "PULONG" + } + ], + "DsGetDcSiteCoverageW": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "EntryCount", + "type": "PULONG" + }, + { + "name": "SiteNames", + "type": "LPWSTR" + } + ], + "DsGetDcSiteCoverageA": [ + { + "name": "ServerName", + "type": "LPCSTR" + }, + { + "name": "EntryCount", + "type": "PULONG" + }, + { + "name": "SiteNames", + "type": "LPSTR" + } + ], + "DsDeregisterDnsHostRecordsW": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPWSTR" + }, + { + "name": "DomainGuid", + "type": "GUID" + }, + { + "name": "DsaGuid", + "type": "GUID" + }, + { + "name": "DnsHostName", + "type": "LPWSTR" + } + ], + "DsDeregisterDnsHostRecordsA": [ + { + "name": "ServerName", + "type": "LPSTR" + }, + { + "name": "DnsDomainName", + "type": "LPSTR" + }, + { + "name": "DomainGuid", + "type": "GUID" + }, + { + "name": "DsaGuid", + "type": "GUID" + }, + { + "name": "DnsHostName", + "type": "LPSTR" + } + ], + "Netbios": [ + { + "name": "pncb", + "type": "PNCB" + } + ], + "DavAddConnection": [ + { + "name": "ConnectionHandle", + "type": "HANDLE" + }, + { + "name": "RemoteName", + "type": "LPCWSTR" + }, + { + "name": "UserName", + "type": "LPCWSTR" + }, + { + "name": "Password", + "type": "LPCWSTR" + }, + { + "name": "ClientCert", + "type": "PBYTE" + }, + { + "name": "CertSize", + "type": "DWORD" + } + ], + "DavDeleteConnection": [ + { + "name": "ConnectionHandle", + "type": "HANDLE" + } + ], + "DavGetUNCFromHTTPPath": [ + { + "name": "Url", + "type": "LPCWSTR" + }, + { + "name": "UncPath", + "type": "LPWSTR" + }, + { + "name": "lpSize", + "type": "LPDWORD" + } + ], + "DavGetHTTPFromUNCPath": [ + { + "name": "UncPath", + "type": "LPCWSTR" + }, + { + "name": "Url", + "type": "LPWSTR" + }, + { + "name": "lpSize", + "type": "LPDWORD" + } + ], + "DavGetExtendedError": [ + { + "name": "hFile", + "type": "HANDLE" + }, + { + "name": "ExtError", + "type": "DWORD" + }, + { + "name": "ExtErrorString", + "type": "LPWSTR" + }, + { + "name": "cChSize", + "type": "DWORD" + } + ], + "DavFlushFile": [ + { + "name": "hFile", + "type": "HANDLE" + } + ], + "NetUseAdd": [ + { + "name": "servername", + "type": "LPTSTR" + }, + { + "name": "LevelFlags", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetUseDel": [ + { + "name": "UncServerName", + "type": "LPWSTR" + }, + { + "name": "UseName", + "type": "LPWSTR" + }, + { + "name": "ForceLevelFlags", + "type": "DWORD" + } + ], + "NetUseEnum": [ + { + "name": "UncServerName", + "type": "LPWSTR" + }, + { + "name": "LevelFlags", + "type": "DWORD" + }, + { + "name": "BufPtr", + "type": "LPBYTE" + }, + { + "name": "PreferedMaximumSize", + "type": "DWORD" + }, + { + "name": "EntriesRead", + "type": "LPDWORD" + }, + { + "name": "TotalEntries", + "type": "LPDWORD" + }, + { + "name": "ResumeHandle", + "type": "LPDWORD" + } + ], + "NetUseGetInfo": [ + { + "name": "UncServerName", + "type": "LPWSTR" + }, + { + "name": "UseName", + "type": "LPWSTR" + }, + { + "name": "LevelFlags", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetUserAdd": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetUserEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "filter", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "PDWORD" + } + ], + "NetUserGetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetUserSetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetUserDel": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + } + ], + "NetUserGetGroups": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + } + ], + "NetUserSetGroups": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "num_entries", + "type": "DWORD" + } + ], + "NetUserGetLocalGroups": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + } + ], + "NetUserModalsGet": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetUserModalsSet": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetUserChangePassword": [ + { + "name": "domainname", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + }, + { + "name": "oldpassword", + "type": "LPCWSTR" + }, + { + "name": "newpassword", + "type": "LPCWSTR" + } + ], + "NetGroupAdd": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetGroupAddUser": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "GroupName", + "type": "LPCWSTR" + }, + { + "name": "username", + "type": "LPCWSTR" + } + ], + "NetGroupEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "PDWORD_PTR" + } + ], + "NetGroupGetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetGroupSetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetGroupDel": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + } + ], + "NetGroupDelUser": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "GroupName", + "type": "LPCWSTR" + }, + { + "name": "Username", + "type": "LPCWSTR" + } + ], + "NetGroupGetUsers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "ResumeHandle", + "type": "PDWORD_PTR" + } + ], + "NetGroupSetUsers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "totalentries", + "type": "DWORD" + } + ], + "NetLocalGroupAdd": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetLocalGroupEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resumehandle", + "type": "PDWORD_PTR" + } + ], + "NetLocalGroupGetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetLocalGroupSetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetLocalGroupDel": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + } + ], + "NetLocalGroupGetMembers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "localgroupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resumehandle", + "type": "PDWORD_PTR" + } + ], + "NetLocalGroupSetMembers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "totalentries", + "type": "DWORD" + } + ], + "NetLocalGroupAddMembers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "totalentries", + "type": "DWORD" + } + ], + "NetLocalGroupDelMembers": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "groupname", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "totalentries", + "type": "DWORD" + } + ], + "NetQueryDisplayInformation": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "Level", + "type": "DWORD" + }, + { + "name": "Index", + "type": "DWORD" + }, + { + "name": "EntriesRequested", + "type": "DWORD" + }, + { + "name": "PreferredMaximumLength", + "type": "DWORD" + }, + { + "name": "ReturnedEntryCount", + "type": "LPDWORD" + }, + { + "name": "SortedBuffer", + "type": "PVOID" + } + ], + "NetGetDisplayInformationIndex": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "Level", + "type": "DWORD" + }, + { + "name": "Prefix", + "type": "LPCWSTR" + }, + { + "name": "Index", + "type": "LPDWORD" + } + ], + "NetAccessAdd": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetAccessEnum": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "BasePath", + "type": "LPCWSTR" + }, + { + "name": "Recursive", + "type": "DWORD" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetAccessGetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "resource", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetAccessSetInfo": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "resource", + "type": "LPCWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetAccessDel": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "resource", + "type": "LPCWSTR" + } + ], + "NetAccessGetUserPerms": [ + { + "name": "servername", + "type": "LPCWSTR" + }, + { + "name": "UGname", + "type": "LPCWSTR" + }, + { + "name": "resource", + "type": "LPCWSTR" + }, + { + "name": "Perms", + "type": "LPDWORD" + } + ], + "NetValidatePasswordPolicy": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "Qualifier", + "type": "LPVOID" + }, + { + "name": "ValidationType", + "type": "NET_VALIDATE_PASSWORD_TYPE" + }, + { + "name": "InputArg", + "type": "LPVOID" + }, + { + "name": "OutputArg", + "type": "LPVOID" + } + ], + "NetValidatePasswordPolicyFree": [ + { + "name": "OutputArg", + "type": "LPVOID" + } + ], + "NetGetDCName": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "DomainName", + "type": "LPCWSTR" + }, + { + "name": "Buffer", + "type": "LPBYTE" + } + ], + "NetGetAnyDCName": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "DomainName", + "type": "LPCWSTR" + }, + { + "name": "Buffer", + "type": "LPBYTE" + } + ], + "I_NetLogonControl2": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "FunctionCode", + "type": "DWORD" + }, + { + "name": "QueryLevel", + "type": "DWORD" + }, + { + "name": "Data", + "type": "LPBYTE" + }, + { + "name": "Buffer", + "type": "LPBYTE" + } + ], + "NetAddServiceAccount": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "AccountName", + "type": "LPWSTR" + }, + { + "name": "Password", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "NetRemoveServiceAccount": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "AccountName", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + } + ], + "NetEnumerateServiceAccounts": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "AccountsCount", + "type": "DWORD" + }, + { + "name": "Accounts", + "type": "PZPWSTR" + } + ], + "NetIsServiceAccount": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "AccountName", + "type": "LPWSTR" + }, + { + "name": "IsService", + "type": "BOOL" + } + ], + "NetQueryServiceAccount": [ + { + "name": "ServerName", + "type": "LPWSTR" + }, + { + "name": "AccountName", + "type": "LPWSTR" + }, + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "Buffer", + "type": "PBYTE" + } + ], + "NetWkstaGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetWkstaSetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buffer", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetWkstaUserGetInfo": [ + { + "name": "reserved", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetWkstaUserSetInfo": [ + { + "name": "reserved", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetWkstaUserEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resumehandle", + "type": "LPDWORD" + } + ], + "NetWkstaTransportAdd": [ + { + "name": "servername", + "type": "LPTSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetWkstaTransportDel": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "transportname", + "type": "LPWSTR" + }, + { + "name": "ucond", + "type": "DWORD" + } + ], + "NetWkstaTransportEnum": [ + { + "name": "servername", + "type": "LPTSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetShareAdd": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetShareEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetShareGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "netname", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetShareSetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "netname", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + }, + { + "name": "parm_err", + "type": "LPDWORD" + } + ], + "NetShareDel": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "netname", + "type": "LPWSTR" + }, + { + "name": "reserved", + "type": "DWORD" + } + ], + "NetShareCheck": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "device", + "type": "LPWSTR" + }, + { + "name": "type", + "type": "LPDWORD" + } + ], + "NetShareDelEx": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "buf", + "type": "LPBYTE" + } + ], + "NetSessionEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "UncClientName", + "type": "LPWSTR" + }, + { + "name": "username", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetSessionDel": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "UncClientName", + "type": "LPWSTR" + }, + { + "name": "username", + "type": "LPWSTR" + } + ], + "NetSessionGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "UncClientName", + "type": "LPWSTR" + }, + { + "name": "username", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "NetConnectionEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "qualifier", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "LPDWORD" + } + ], + "NetFileClose": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "fileid", + "type": "DWORD" + } + ], + "NetFileEnum": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "basepath", + "type": "LPWSTR" + }, + { + "name": "username", + "type": "LPWSTR" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + }, + { + "name": "prefmaxlen", + "type": "DWORD" + }, + { + "name": "entriesread", + "type": "LPDWORD" + }, + { + "name": "totalentries", + "type": "LPDWORD" + }, + { + "name": "resume_handle", + "type": "PDWORD_PTR" + } + ], + "NetFileGetInfo": [ + { + "name": "servername", + "type": "LPWSTR" + }, + { + "name": "fileid", + "type": "DWORD" + }, + { + "name": "level", + "type": "DWORD" + }, + { + "name": "bufptr", + "type": "LPBYTE" + } + ], + "DsRoleGetPrimaryDomainInformation": [ + { + "name": "lpServer", + "type": "LPCWSTR" + }, + { + "name": "InfoLevel", + "type": "DSROLE_PRIMARY_DOMAIN_INFO_LEVEL" + }, + { + "name": "Buffer", + "type": "PBYTE" + } + ], + "DsRoleFreeMemory": [ + { + "name": "Buffer", + "type": "PVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/netsh.json b/qiling/extensions/windows_sdk/netsh_exe.json similarity index 100% rename from qiling/extensions/windows_sdk/netsh.json rename to qiling/extensions/windows_sdk/netsh_exe.json diff --git a/qiling/extensions/windows_sdk/Netshell.json b/qiling/extensions/windows_sdk/netshell_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Netshell.json rename to qiling/extensions/windows_sdk/netshell_dll.json diff --git a/qiling/extensions/windows_sdk/newdev.json b/qiling/extensions/windows_sdk/newdev_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/newdev.json rename to qiling/extensions/windows_sdk/newdev_dll.json diff --git a/qiling/extensions/windows_sdk/ninput.json b/qiling/extensions/windows_sdk/ninput_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ninput.json rename to qiling/extensions/windows_sdk/ninput_dll.json diff --git a/qiling/extensions/windows_sdk/normaliz_dll.json b/qiling/extensions/windows_sdk/normaliz_dll.json new file mode 100644 index 000000000..efe433f85 --- /dev/null +++ b/qiling/extensions/windows_sdk/normaliz_dll.json @@ -0,0 +1,104 @@ +{ + "IdnToAscii": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUnicodeCharStr", + "type": "LPCWSTR" + }, + { + "name": "cchUnicodeChar", + "type": "int" + }, + { + "name": "lpASCIICharStr", + "type": "LPWSTR" + }, + { + "name": "cchASCIIChar", + "type": "int" + } + ], + "IdnToUnicode": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpASCIICharStr", + "type": "LPCWSTR" + }, + { + "name": "cchASCIIChar", + "type": "int" + }, + { + "name": "lpUnicodeCharStr", + "type": "LPWSTR" + }, + { + "name": "cchUnicodeChar", + "type": "int" + } + ], + "IdnToNameprepUnicode": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lpUnicodeCharStr", + "type": "LPCWSTR" + }, + { + "name": "cchUnicodeChar", + "type": "int" + }, + { + "name": "lpNameprepCharStr", + "type": "LPWSTR" + }, + { + "name": "cchNameprepChar", + "type": "int" + } + ], + "NormalizeString": [ + { + "name": "NormForm", + "type": "NORM_FORM" + }, + { + "name": "lpSrcString", + "type": "LPCWSTR" + }, + { + "name": "cwSrcLength", + "type": "int" + }, + { + "name": "lpDstString", + "type": "LPWSTR" + }, + { + "name": "cwDstLength", + "type": "int" + } + ], + "IsNormalizedString": [ + { + "name": "NormForm", + "type": "NORM_FORM" + }, + { + "name": "lpString", + "type": "LPCWSTR" + }, + { + "name": "cwLength", + "type": "int" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Ntdll.json b/qiling/extensions/windows_sdk/ntdll_dll.json similarity index 63% rename from qiling/extensions/windows_sdk/Ntdll.json rename to qiling/extensions/windows_sdk/ntdll_dll.json index 6c10dfe8a..9425ccf23 100644 --- a/qiling/extensions/windows_sdk/Ntdll.json +++ b/qiling/extensions/windows_sdk/ntdll_dll.json @@ -1,4 +1,290 @@ { + "RtlIpv4AddressToStringA": [ + { + "name": "Addr", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "S", + "type": "PSTR" + } + ], + "RtlIpv6AddressToStringA": [ + { + "name": "Addr", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "S", + "type": "PSTR" + } + ], + "RtlEthernetAddressToStringA": [ + { + "name": "Addr", + "type": "DL_EUI48" + }, + { + "name": "S", + "type": "PSTR" + } + ], + "RtlIpv4AddressToStringW": [ + { + "name": "Addr", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "S", + "type": "PWSTR" + } + ], + "RtlIpv6AddressToStringW": [ + { + "name": "Addr", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "S", + "type": "PWSTR" + } + ], + "RtlEthernetAddressToStringW": [ + { + "name": "Addr", + "type": "DL_EUI48" + }, + { + "name": "S", + "type": "PWSTR" + } + ], + "RtlIpv4AddressToStringExW": [ + { + "name": "Address", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Port", + "type": "USHORT" + }, + { + "name": "AddressString", + "type": "PWSTR" + }, + { + "name": "AddressStringLength", + "type": "PULONG" + } + ], + "RtlIpv6AddressToStringExW": [ + { + "name": "Address", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "ScopeId", + "type": "ULONG" + }, + { + "name": "Port", + "type": "USHORT" + }, + { + "name": "AddressString", + "type": "PWSTR" + }, + { + "name": "AddressStringLength", + "type": "PULONG" + } + ], + "RtlIpv4StringToAddressA": [ + { + "name": "S", + "type": "PCSTR" + }, + { + "name": "Strict", + "type": "BOOLEAN" + }, + { + "name": "Terminator", + "type": "PCSTR" + }, + { + "name": "Addr", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlIpv6StringToAddressA": [ + { + "name": "S", + "type": "PCSTR" + }, + { + "name": "Terminator", + "type": "PCSTR" + }, + { + "name": "Addr", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlEthernetStringToAddressA": [ + { + "name": "S", + "type": "PCSTR" + }, + { + "name": "Terminator", + "type": "PCSTR" + }, + { + "name": "Addr", + "type": "DL_EUI48" + } + ], + "RtlIpv4StringToAddressW": [ + { + "name": "S", + "type": "PCWSTR" + }, + { + "name": "Strict", + "type": "BOOLEAN" + }, + { + "name": "Terminator", + "type": "LPCWSTR" + }, + { + "name": "Addr", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlIpv6StringToAddressW": [ + { + "name": "S", + "type": "PCWSTR" + }, + { + "name": "Terminator", + "type": "PCWSTR" + }, + { + "name": "Addr", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + } + ], + "RtlEthernetStringToAddressW": [ + { + "name": "S", + "type": "PCWSTR" + }, + { + "name": "Terminator", + "type": "LPCWSTR" + }, + { + "name": "Addr", + "type": "DL_EUI48" + } + ], + "RtlIpv4StringToAddressExW": [ + { + "name": "AddressString", + "type": "PCWSTR" + }, + { + "name": "Strict", + "type": "BOOLEAN" + }, + { + "name": "Address", + "type": { + "name": "in_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "Port", + "type": "PUSHORT" + } + ], + "RtlIpv6StringToAddressExW": [ + { + "name": "AddressString", + "type": "PCWSTR" + }, + { + "name": "Address", + "type": { + "name": "in6_addr", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "ScopeId", + "type": "PULONG" + }, + { + "name": "Port", + "type": "PUSHORT" + } + ], + "IsProcessCritical": [ + { + "name": "hProcess", + "type": "HANDLE" + }, + { + "name": "Critical", + "type": "PBOOL" + } + ], "NtClose": [ { "name": "Handle", diff --git a/qiling/extensions/windows_sdk/ntdsapi.json b/qiling/extensions/windows_sdk/ntdsapi.json deleted file mode 100644 index 6d1400022..000000000 --- a/qiling/extensions/windows_sdk/ntdsapi.json +++ /dev/null @@ -1,312 +0,0 @@ -{ - "DsMakeSpnW": [ - { - "name": "ServiceClass", - "type": "LPCWSTR" - }, - { - "name": "ServiceName", - "type": "LPCWSTR" - }, - { - "name": "InstanceName", - "type": "LPCWSTR" - }, - { - "name": "InstancePort", - "type": "USHORT" - }, - { - "name": "Referrer", - "type": "LPCWSTR" - }, - { - "name": "pcSpnLength", - "type": "DWORD" - }, - { - "name": "pszSpn", - "type": "LPWSTR" - } - ], - "DsMakeSpnA": [ - { - "name": "ServiceClass", - "type": "LPCSTR" - }, - { - "name": "ServiceName", - "type": "LPCSTR" - }, - { - "name": "InstanceName", - "type": "LPCSTR" - }, - { - "name": "InstancePort", - "type": "USHORT" - }, - { - "name": "Referrer", - "type": "LPCSTR" - }, - { - "name": "pcSpnLength", - "type": "DWORD" - }, - { - "name": "pszSpn", - "type": "LPSTR" - } - ], - "DsCrackSpnA": [ - { - "name": "pszSpn", - "type": "LPCSTR" - }, - { - "name": "pcServiceClass", - "type": "LPDWORD" - }, - { - "name": "ServiceClass", - "type": "LPSTR" - }, - { - "name": "pcServiceName", - "type": "LPDWORD" - }, - { - "name": "ServiceName", - "type": "LPSTR" - }, - { - "name": "pcInstanceName", - "type": "LPDWORD" - }, - { - "name": "InstanceName", - "type": "LPSTR" - }, - { - "name": "pInstancePort", - "type": "USHORT" - } - ], - "DsCrackSpnW": [ - { - "name": "pszSpn", - "type": "LPCWSTR" - }, - { - "name": "pcServiceClass", - "type": "DWORD" - }, - { - "name": "ServiceClass", - "type": "LPWSTR" - }, - { - "name": "pcServiceName", - "type": "DWORD" - }, - { - "name": "ServiceName", - "type": "LPWSTR" - }, - { - "name": "pcInstanceName", - "type": "DWORD" - }, - { - "name": "InstanceName", - "type": "LPWSTR" - }, - { - "name": "pInstancePort", - "type": "USHORT" - } - ], - "DsQuoteRdnValueW": [ - { - "name": "cUnquotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psUnquotedRdnValue", - "type": "LPCWCH" - }, - { - "name": "pcQuotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psQuotedRdnValue", - "type": "LPWCH" - } - ], - "DsQuoteRdnValueA": [ - { - "name": "cUnquotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psUnquotedRdnValue", - "type": "LPCCH" - }, - { - "name": "pcQuotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psQuotedRdnValue", - "type": "LPCH" - } - ], - "DsUnquoteRdnValueW": [ - { - "name": "cQuotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psQuotedRdnValue", - "type": "LPCWCH" - }, - { - "name": "pcUnquotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psUnquotedRdnValue", - "type": "LPWCH" - } - ], - "DsUnquoteRdnValueA": [ - { - "name": "cQuotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psQuotedRdnValue", - "type": "LPCCH" - }, - { - "name": "pcUnquotedRdnValueLength", - "type": "DWORD" - }, - { - "name": "psUnquotedRdnValue", - "type": "LPCH" - } - ], - "DsGetRdnW": [ - { - "name": "ppDN", - "type": "LPCWCH" - }, - { - "name": "pcDN", - "type": "DWORD" - }, - { - "name": "ppKey", - "type": "LPCWCH" - }, - { - "name": "pcKey", - "type": "DWORD" - }, - { - "name": "ppVal", - "type": "LPCWCH" - }, - { - "name": "pcVal", - "type": "DWORD" - } - ], - "DsCrackUnquotedMangledRdnW": [ - { - "name": "pszRDN", - "type": "LPCWSTR" - }, - { - "name": "cchRDN", - "type": "DWORD" - }, - { - "name": "pGuid", - "type": "GUID" - }, - { - "name": "peDsMangleFor", - "type": "DS_MANGLE_FOR" - } - ], - "DsCrackUnquotedMangledRdnA": [ - { - "name": "pszRDN", - "type": "LPCSTR" - }, - { - "name": "cchRDN", - "type": "DWORD" - }, - { - "name": "pGuid", - "type": "GUID" - }, - { - "name": "peDsMangleFor", - "type": "DS_MANGLE_FOR" - } - ], - "DsIsMangledRdnValueW": [ - { - "name": "pszRdn", - "type": "LPCWSTR" - }, - { - "name": "cRdn", - "type": "DWORD" - }, - { - "name": "eDsMangleForDesired", - "type": "DS_MANGLE_FOR" - } - ], - "DsIsMangledRdnValueA": [ - { - "name": "pszRdn", - "type": "LPCSTR" - }, - { - "name": "cRdn", - "type": "DWORD" - }, - { - "name": "eDsMangleForDesired", - "type": "DS_MANGLE_FOR" - } - ], - "DsIsMangledDnA": [ - { - "name": "pszDn", - "type": "LPCSTR" - }, - { - "name": "eDsMangleFor", - "type": "DS_MANGLE_FOR" - } - ], - "DsIsMangledDnW": [ - { - "name": "pszDn", - "type": "LPCWSTR" - }, - { - "name": "eDsMangleFor", - "type": "DS_MANGLE_FOR" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/ntdsapi_dll.json b/qiling/extensions/windows_sdk/ntdsapi_dll.json new file mode 100644 index 000000000..ac75d287f --- /dev/null +++ b/qiling/extensions/windows_sdk/ntdsapi_dll.json @@ -0,0 +1,1830 @@ +{ + "DsBindW": [ + { + "name": "DomainControllerName", + "type": "LPCWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindA": [ + { + "name": "DomainControllerName", + "type": "LPCSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithCredW": [ + { + "name": "DomainControllerName", + "type": "LPCWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithCredA": [ + { + "name": "DomainControllerName", + "type": "LPCSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithSpnW": [ + { + "name": "DomainControllerName", + "type": "LPCWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCWSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithSpnA": [ + { + "name": "DomainControllerName", + "type": "LPCSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithSpnExW": [ + { + "name": "DomainControllerName", + "type": "LPCWSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCWSTR" + }, + { + "name": "BindFlags", + "type": "DWORD" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindWithSpnExA": [ + { + "name": "DomainControllerName", + "type": "LPCSTR" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCSTR" + }, + { + "name": "BindFlags", + "type": "DWORD" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindByInstanceW": [ + { + "name": "ServerName", + "type": "LPCWSTR" + }, + { + "name": "Annotation", + "type": "LPCWSTR" + }, + { + "name": "InstanceGuid", + "type": "GUID" + }, + { + "name": "DnsDomainName", + "type": "LPCWSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCWSTR" + }, + { + "name": "BindFlags", + "type": "DWORD" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindByInstanceA": [ + { + "name": "ServerName", + "type": "LPCSTR" + }, + { + "name": "Annotation", + "type": "LPCSTR" + }, + { + "name": "InstanceGuid", + "type": "GUID" + }, + { + "name": "DnsDomainName", + "type": "LPCSTR" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "ServicePrincipalName", + "type": "LPCSTR" + }, + { + "name": "BindFlags", + "type": "DWORD" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindToISTGW": [ + { + "name": "SiteName", + "type": "LPCWSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindToISTGA": [ + { + "name": "SiteName", + "type": "LPCSTR" + }, + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsBindingSetTimeout": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "cTimeoutSecs", + "type": "ULONG" + } + ], + "DsUnBindW": [ + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsUnBindA": [ + { + "name": "phDS", + "type": "HANDLE" + } + ], + "DsMakePasswordCredentialsW": [ + { + "name": "User", + "type": "LPCWSTR" + }, + { + "name": "Domain", + "type": "LPCWSTR" + }, + { + "name": "Password", + "type": "LPCWSTR" + }, + { + "name": "pAuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + } + ], + "DsMakePasswordCredentialsA": [ + { + "name": "User", + "type": "LPCSTR" + }, + { + "name": "Domain", + "type": "LPCSTR" + }, + { + "name": "Password", + "type": "LPCSTR" + }, + { + "name": "pAuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + } + ], + "DsFreePasswordCredentials": [ + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + } + ], + "DsCrackNamesW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "flags", + "type": "DS_NAME_FLAGS" + }, + { + "name": "formatOffered", + "type": "DS_NAME_FORMAT" + }, + { + "name": "formatDesired", + "type": "DS_NAME_FORMAT" + }, + { + "name": "cNames", + "type": "DWORD" + }, + { + "name": "rpNames", + "type": "LPCWSTR" + }, + { + "name": "ppResult", + "type": "PDS_NAME_RESULTW" + } + ], + "DsCrackNamesA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "flags", + "type": "DS_NAME_FLAGS" + }, + { + "name": "formatOffered", + "type": "DS_NAME_FORMAT" + }, + { + "name": "formatDesired", + "type": "DS_NAME_FORMAT" + }, + { + "name": "cNames", + "type": "DWORD" + }, + { + "name": "rpNames", + "type": "LPCSTR" + }, + { + "name": "ppResult", + "type": "PDS_NAME_RESULTA" + } + ], + "DsFreeNameResultW": [ + { + "name": "pResult", + "type": "DS_NAME_RESULTW" + } + ], + "DsFreeNameResultA": [ + { + "name": "pResult", + "type": "DS_NAME_RESULTA" + } + ], + "DsGetSpnA": [ + { + "name": "ServiceType", + "type": "DS_SPN_NAME_TYPE" + }, + { + "name": "ServiceClass", + "type": "LPCSTR" + }, + { + "name": "ServiceName", + "type": "LPCSTR" + }, + { + "name": "InstancePort", + "type": "USHORT" + }, + { + "name": "cInstanceNames", + "type": "USHORT" + }, + { + "name": "pInstanceNames", + "type": "LPCSTR" + }, + { + "name": "pInstancePorts", + "type": "USHORT" + }, + { + "name": "pcSpn", + "type": "DWORD" + }, + { + "name": "prpszSpn", + "type": "LPSTR" + } + ], + "DsGetSpnW": [ + { + "name": "ServiceType", + "type": "DS_SPN_NAME_TYPE" + }, + { + "name": "ServiceClass", + "type": "LPCWSTR" + }, + { + "name": "ServiceName", + "type": "LPCWSTR" + }, + { + "name": "InstancePort", + "type": "USHORT" + }, + { + "name": "cInstanceNames", + "type": "USHORT" + }, + { + "name": "pInstanceNames", + "type": "LPCWSTR" + }, + { + "name": "pInstancePorts", + "type": "USHORT" + }, + { + "name": "pcSpn", + "type": "DWORD" + }, + { + "name": "prpszSpn", + "type": "LPWSTR" + } + ], + "DsFreeSpnArrayA": [ + { + "name": "cSpn", + "type": "DWORD" + }, + { + "name": "rpszSpn", + "type": "LPSTR" + } + ], + "DsFreeSpnArrayW": [ + { + "name": "cSpn", + "type": "DWORD" + }, + { + "name": "rpszSpn", + "type": "LPWSTR" + } + ], + "DsWriteAccountSpnA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Operation", + "type": "DS_SPN_WRITE_OP" + }, + { + "name": "pszAccount", + "type": "LPCSTR" + }, + { + "name": "cSpn", + "type": "DWORD" + }, + { + "name": "rpszSpn", + "type": "LPCSTR" + } + ], + "DsWriteAccountSpnW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Operation", + "type": "DS_SPN_WRITE_OP" + }, + { + "name": "pszAccount", + "type": "LPCWSTR" + }, + { + "name": "cSpn", + "type": "DWORD" + }, + { + "name": "rpszSpn", + "type": "LPCWSTR" + } + ], + "DsClientMakeSpnForTargetServerW": [ + { + "name": "ServiceClass", + "type": "LPCWSTR" + }, + { + "name": "ServiceName", + "type": "LPCWSTR" + }, + { + "name": "pcSpnLength", + "type": "DWORD" + }, + { + "name": "pszSpn", + "type": "LPWSTR" + } + ], + "DsClientMakeSpnForTargetServerA": [ + { + "name": "ServiceClass", + "type": "LPCSTR" + }, + { + "name": "ServiceName", + "type": "LPCSTR" + }, + { + "name": "pcSpnLength", + "type": "DWORD" + }, + { + "name": "pszSpn", + "type": "LPSTR" + } + ], + "DsServerRegisterSpnA": [ + { + "name": "Operation", + "type": "DS_SPN_WRITE_OP" + }, + { + "name": "ServiceClass", + "type": "LPCSTR" + }, + { + "name": "UserObjectDN", + "type": "LPCSTR" + } + ], + "DsServerRegisterSpnW": [ + { + "name": "Operation", + "type": "DS_SPN_WRITE_OP" + }, + { + "name": "ServiceClass", + "type": "LPCWSTR" + }, + { + "name": "UserObjectDN", + "type": "LPCWSTR" + } + ], + "DsReplicaSyncA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "pUuidDsaSrc", + "type": "UUID" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaSyncW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "pUuidDsaSrc", + "type": "UUID" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaAddA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "SourceDsaDn", + "type": "LPCSTR" + }, + { + "name": "TransportDn", + "type": "LPCSTR" + }, + { + "name": "SourceDsaAddress", + "type": "LPCSTR" + }, + { + "name": "pSchedule", + "type": "PSCHEDULE" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "DsReplicaAddW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "SourceDsaDn", + "type": "LPCWSTR" + }, + { + "name": "TransportDn", + "type": "LPCWSTR" + }, + { + "name": "SourceDsaAddress", + "type": "LPCWSTR" + }, + { + "name": "pSchedule", + "type": "PSCHEDULE" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "DsReplicaDelA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "DsaSrc", + "type": "LPCSTR" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaDelW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "DsaSrc", + "type": "LPCWSTR" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaModifyA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "pUuidSourceDsa", + "type": "UUID" + }, + { + "name": "TransportDn", + "type": "LPCSTR" + }, + { + "name": "SourceDsaAddress", + "type": "LPCSTR" + }, + { + "name": "pSchedule", + "type": "PSCHEDULE" + }, + { + "name": "ReplicaFlags", + "type": "DWORD" + }, + { + "name": "ModifyFields", + "type": "DWORD" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "DsReplicaModifyW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "pUuidSourceDsa", + "type": "UUID" + }, + { + "name": "TransportDn", + "type": "LPCWSTR" + }, + { + "name": "SourceDsaAddress", + "type": "LPCWSTR" + }, + { + "name": "pSchedule", + "type": "PSCHEDULE" + }, + { + "name": "ReplicaFlags", + "type": "DWORD" + }, + { + "name": "ModifyFields", + "type": "DWORD" + }, + { + "name": "Options", + "type": "DWORD" + } + ], + "DsReplicaUpdateRefsA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "DsaDest", + "type": "LPCSTR" + }, + { + "name": "pUuidDsaDest", + "type": "UUID" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaUpdateRefsW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "DsaDest", + "type": "LPCWSTR" + }, + { + "name": "pUuidDsaDest", + "type": "UUID" + }, + { + "name": "Options", + "type": "ULONG" + } + ], + "DsReplicaSyncAllA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "pszNameContext", + "type": "LPCSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pFnCallBack", + "type": "BOOL" + }, + { + "name": "pCallbackData", + "type": "LPVOID" + }, + { + "name": "pErrors", + "type": "PDS_REPSYNCALL_ERRINFOA" + } + ], + "DsReplicaSyncAllW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "pszNameContext", + "type": "LPCWSTR" + }, + { + "name": "ulFlags", + "type": "ULONG" + }, + { + "name": "pFnCallBack", + "type": "BOOL" + }, + { + "name": "pCallbackData", + "type": "LPVOID" + }, + { + "name": "pErrors", + "type": "PDS_REPSYNCALL_ERRINFOW" + } + ], + "DsRemoveDsServerW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ServerDN", + "type": "LPWSTR" + }, + { + "name": "DomainDN", + "type": "LPWSTR" + }, + { + "name": "fLastDcInDomain", + "type": "BOOL" + }, + { + "name": "fCommit", + "type": "BOOL" + } + ], + "DsRemoveDsServerA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ServerDN", + "type": "LPSTR" + }, + { + "name": "DomainDN", + "type": "LPSTR" + }, + { + "name": "fLastDcInDomain", + "type": "BOOL" + }, + { + "name": "fCommit", + "type": "BOOL" + } + ], + "DsRemoveDsDomainW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "DomainDN", + "type": "LPWSTR" + } + ], + "DsRemoveDsDomainA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "DomainDN", + "type": "LPSTR" + } + ], + "DsListSitesA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ppSites", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListSitesW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ppSites", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListServersInSiteA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "site", + "type": "LPCSTR" + }, + { + "name": "ppServers", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListServersInSiteW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "site", + "type": "LPCWSTR" + }, + { + "name": "ppServers", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListDomainsInSiteA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "site", + "type": "LPCSTR" + }, + { + "name": "ppDomains", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListDomainsInSiteW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "site", + "type": "LPCWSTR" + }, + { + "name": "ppDomains", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListServersForDomainInSiteA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "domain", + "type": "LPCSTR" + }, + { + "name": "site", + "type": "LPCSTR" + }, + { + "name": "ppServers", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListServersForDomainInSiteW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "domain", + "type": "LPCWSTR" + }, + { + "name": "site", + "type": "LPCWSTR" + }, + { + "name": "ppServers", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListInfoForServerA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "server", + "type": "LPCSTR" + }, + { + "name": "ppInfo", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListInfoForServerW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "server", + "type": "LPCWSTR" + }, + { + "name": "ppInfo", + "type": "PDS_NAME_RESULTW" + } + ], + "DsListRolesA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ppRoles", + "type": "PDS_NAME_RESULTA" + } + ], + "DsListRolesW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "ppRoles", + "type": "PDS_NAME_RESULTW" + } + ], + "DsQuerySitesByCostW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "pwszFromSite", + "type": "LPWSTR" + }, + { + "name": "rgwszToSites", + "type": "LPWSTR" + }, + { + "name": "cToSites", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "prgSiteInfo", + "type": "PDS_SITE_COST_INFO" + } + ], + "DsQuerySitesByCostA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "pszFromSite", + "type": "LPSTR" + }, + { + "name": "rgszToSites", + "type": "LPSTR" + }, + { + "name": "cToSites", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "prgSiteInfo", + "type": "PDS_SITE_COST_INFO" + } + ], + "DsQuerySitesFree": [ + { + "name": "rgSiteInfo", + "type": "PDS_SITE_COST_INFO" + } + ], + "DsMapSchemaGuidsA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "cGuids", + "type": "DWORD" + }, + { + "name": "rGuids", + "type": "GUID" + }, + { + "name": "ppGuidMap", + "type": "DS_SCHEMA_GUID_MAPA" + } + ], + "DsFreeSchemaGuidMapA": [ + { + "name": "pGuidMap", + "type": "PDS_SCHEMA_GUID_MAPA" + } + ], + "DsMapSchemaGuidsW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "cGuids", + "type": "DWORD" + }, + { + "name": "rGuids", + "type": "GUID" + }, + { + "name": "ppGuidMap", + "type": "DS_SCHEMA_GUID_MAPW" + } + ], + "DsFreeSchemaGuidMapW": [ + { + "name": "pGuidMap", + "type": "PDS_SCHEMA_GUID_MAPW" + } + ], + "DsGetDomainControllerInfoA": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "DomainName", + "type": "LPCSTR" + }, + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "pcOut", + "type": "DWORD" + }, + { + "name": "ppInfo", + "type": "void" + } + ], + "DsGetDomainControllerInfoW": [ + { + "name": "hDs", + "type": "HANDLE" + }, + { + "name": "DomainName", + "type": "LPCWSTR" + }, + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "pcOut", + "type": "DWORD" + }, + { + "name": "ppInfo", + "type": "void" + } + ], + "DsFreeDomainControllerInfoA": [ + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "cInfo", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "void" + } + ], + "DsFreeDomainControllerInfoW": [ + { + "name": "InfoLevel", + "type": "DWORD" + }, + { + "name": "cInfo", + "type": "DWORD" + }, + { + "name": "pInfo", + "type": "void" + } + ], + "DsReplicaConsistencyCheck": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "TaskID", + "type": "DS_KCC_TASKID" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "DsReplicaVerifyObjectsW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCWSTR" + }, + { + "name": "pUuidDsaSrc", + "type": "UUID" + }, + { + "name": "ulOptions", + "type": "ULONG" + } + ], + "DsReplicaVerifyObjectsA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "NameContext", + "type": "LPCSTR" + }, + { + "name": "pUuidDsaSrc", + "type": "UUID" + }, + { + "name": "ulOptions", + "type": "ULONG" + } + ], + "DsReplicaGetInfoW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "InfoType", + "type": "DS_REPL_INFO_TYPE" + }, + { + "name": "pszObject", + "type": "LPCWSTR" + }, + { + "name": "puuidForSourceDsaObjGuid", + "type": "UUID" + }, + { + "name": "ppInfo", + "type": "void" + } + ], + "DsReplicaGetInfo2W": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "InfoType", + "type": "DS_REPL_INFO_TYPE" + }, + { + "name": "pszObject", + "type": "LPCWSTR" + }, + { + "name": "puuidForSourceDsaObjGuid", + "type": "UUID" + }, + { + "name": "pszAttributeName", + "type": "LPCWSTR" + }, + { + "name": "pszValue", + "type": "LPCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwEnumerationContext", + "type": "DWORD" + }, + { + "name": "ppInfo", + "type": "void" + } + ], + "DsReplicaFreeInfo": [ + { + "name": "InfoType", + "type": "DS_REPL_INFO_TYPE" + }, + { + "name": "pInfo", + "type": "void" + } + ], + "DsAddSidHistoryW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SrcDomain", + "type": "LPCWSTR" + }, + { + "name": "SrcPrincipal", + "type": "LPCWSTR" + }, + { + "name": "SrcDomainController", + "type": "LPCWSTR" + }, + { + "name": "SrcDomainCreds", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "DstDomain", + "type": "LPCWSTR" + }, + { + "name": "DstPrincipal", + "type": "LPCWSTR" + } + ], + "DsAddSidHistoryA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SrcDomain", + "type": "LPCSTR" + }, + { + "name": "SrcPrincipal", + "type": "LPCSTR" + }, + { + "name": "SrcDomainController", + "type": "LPCSTR" + }, + { + "name": "SrcDomainCreds", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "DstDomain", + "type": "LPCSTR" + }, + { + "name": "DstPrincipal", + "type": "LPCSTR" + } + ], + "DsInheritSecurityIdentityW": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SrcPrincipal", + "type": "LPCWSTR" + }, + { + "name": "DstPrincipal", + "type": "LPCWSTR" + } + ], + "DsInheritSecurityIdentityA": [ + { + "name": "hDS", + "type": "HANDLE" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "SrcPrincipal", + "type": "LPCSTR" + }, + { + "name": "DstPrincipal", + "type": "LPCSTR" + } + ], + "DsMakeSpnW": [ + { + "name": "ServiceClass", + "type": "LPCWSTR" + }, + { + "name": "ServiceName", + "type": "LPCWSTR" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "InstancePort", + "type": "USHORT" + }, + { + "name": "Referrer", + "type": "LPCWSTR" + }, + { + "name": "pcSpnLength", + "type": "DWORD" + }, + { + "name": "pszSpn", + "type": "LPWSTR" + } + ], + "DsMakeSpnA": [ + { + "name": "ServiceClass", + "type": "LPCSTR" + }, + { + "name": "ServiceName", + "type": "LPCSTR" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "InstancePort", + "type": "USHORT" + }, + { + "name": "Referrer", + "type": "LPCSTR" + }, + { + "name": "pcSpnLength", + "type": "DWORD" + }, + { + "name": "pszSpn", + "type": "LPSTR" + } + ], + "DsCrackSpnA": [ + { + "name": "pszSpn", + "type": "LPCSTR" + }, + { + "name": "pcServiceClass", + "type": "LPDWORD" + }, + { + "name": "ServiceClass", + "type": "LPSTR" + }, + { + "name": "pcServiceName", + "type": "LPDWORD" + }, + { + "name": "ServiceName", + "type": "LPSTR" + }, + { + "name": "pcInstanceName", + "type": "LPDWORD" + }, + { + "name": "InstanceName", + "type": "LPSTR" + }, + { + "name": "pInstancePort", + "type": "USHORT" + } + ], + "DsCrackSpnW": [ + { + "name": "pszSpn", + "type": "LPCWSTR" + }, + { + "name": "pcServiceClass", + "type": "DWORD" + }, + { + "name": "ServiceClass", + "type": "LPWSTR" + }, + { + "name": "pcServiceName", + "type": "DWORD" + }, + { + "name": "ServiceName", + "type": "LPWSTR" + }, + { + "name": "pcInstanceName", + "type": "DWORD" + }, + { + "name": "InstanceName", + "type": "LPWSTR" + }, + { + "name": "pInstancePort", + "type": "USHORT" + } + ], + "DsQuoteRdnValueW": [ + { + "name": "cUnquotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psUnquotedRdnValue", + "type": "LPCWCH" + }, + { + "name": "pcQuotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psQuotedRdnValue", + "type": "LPWCH" + } + ], + "DsQuoteRdnValueA": [ + { + "name": "cUnquotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psUnquotedRdnValue", + "type": "LPCCH" + }, + { + "name": "pcQuotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psQuotedRdnValue", + "type": "LPCH" + } + ], + "DsUnquoteRdnValueW": [ + { + "name": "cQuotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psQuotedRdnValue", + "type": "LPCWCH" + }, + { + "name": "pcUnquotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psUnquotedRdnValue", + "type": "LPWCH" + } + ], + "DsUnquoteRdnValueA": [ + { + "name": "cQuotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psQuotedRdnValue", + "type": "LPCCH" + }, + { + "name": "pcUnquotedRdnValueLength", + "type": "DWORD" + }, + { + "name": "psUnquotedRdnValue", + "type": "LPCH" + } + ], + "DsGetRdnW": [ + { + "name": "ppDN", + "type": "LPCWCH" + }, + { + "name": "pcDN", + "type": "DWORD" + }, + { + "name": "ppKey", + "type": "LPCWCH" + }, + { + "name": "pcKey", + "type": "DWORD" + }, + { + "name": "ppVal", + "type": "LPCWCH" + }, + { + "name": "pcVal", + "type": "DWORD" + } + ], + "DsCrackUnquotedMangledRdnW": [ + { + "name": "pszRDN", + "type": "LPCWSTR" + }, + { + "name": "cchRDN", + "type": "DWORD" + }, + { + "name": "pGuid", + "type": "GUID" + }, + { + "name": "peDsMangleFor", + "type": "DS_MANGLE_FOR" + } + ], + "DsCrackUnquotedMangledRdnA": [ + { + "name": "pszRDN", + "type": "LPCSTR" + }, + { + "name": "cchRDN", + "type": "DWORD" + }, + { + "name": "pGuid", + "type": "GUID" + }, + { + "name": "peDsMangleFor", + "type": "DS_MANGLE_FOR" + } + ], + "DsIsMangledRdnValueW": [ + { + "name": "pszRdn", + "type": "LPCWSTR" + }, + { + "name": "cRdn", + "type": "DWORD" + }, + { + "name": "eDsMangleForDesired", + "type": "DS_MANGLE_FOR" + } + ], + "DsIsMangledRdnValueA": [ + { + "name": "pszRdn", + "type": "LPCSTR" + }, + { + "name": "cRdn", + "type": "DWORD" + }, + { + "name": "eDsMangleForDesired", + "type": "DS_MANGLE_FOR" + } + ], + "DsIsMangledDnA": [ + { + "name": "pszDn", + "type": "LPCSTR" + }, + { + "name": "eDsMangleFor", + "type": "DS_MANGLE_FOR" + } + ], + "DsIsMangledDnW": [ + { + "name": "pszDn", + "type": "LPCWSTR" + }, + { + "name": "eDsMangleFor", + "type": "DS_MANGLE_FOR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/NTLanMan.json b/qiling/extensions/windows_sdk/ntlanman_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/NTLanMan.json rename to qiling/extensions/windows_sdk/ntlanman_dll.json diff --git a/qiling/extensions/windows_sdk/ntmsapi.json b/qiling/extensions/windows_sdk/ntmsapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ntmsapi.json rename to qiling/extensions/windows_sdk/ntmsapi_dll.json diff --git a/qiling/extensions/windows_sdk/ntquery.json b/qiling/extensions/windows_sdk/ntquery_dll.json similarity index 77% rename from qiling/extensions/windows_sdk/ntquery.json rename to qiling/extensions/windows_sdk/ntquery_dll.json index 65cdba3f8..9d118186c 100644 --- a/qiling/extensions/windows_sdk/ntquery.json +++ b/qiling/extensions/windows_sdk/ntquery_dll.json @@ -1,18 +1,4 @@ { - "LoadIFilter": [ - { - "name": "pwcsPath", - "type": "PCWSTR" - }, - { - "name": "pUnkOuter", - "type": "IUnknown" - }, - { - "name": "ppIUnk", - "type": "void" - } - ], "BindIFilterFromStorage": [ { "name": "pStg", diff --git a/qiling/extensions/windows_sdk/ole32_dll.json b/qiling/extensions/windows_sdk/ole32_dll.json new file mode 100644 index 000000000..7d66f284f --- /dev/null +++ b/qiling/extensions/windows_sdk/ole32_dll.json @@ -0,0 +1,3020 @@ +{ + "CoGetMalloc": [ + { + "name": "dwMemContext", + "type": "DWORD" + }, + { + "name": "ppMalloc", + "type": "LPMALLOC" + } + ], + "CreateStreamOnHGlobal": [ + { + "name": "hGlobal", + "type": "HGLOBAL" + }, + { + "name": "fDeleteOnRelease", + "type": "BOOL" + }, + { + "name": "ppstm", + "type": "LPSTREAM" + } + ], + "GetHGlobalFromStream": [ + { + "name": "pstm", + "type": "LPSTREAM" + }, + { + "name": "phglobal", + "type": "HGLOBAL" + } + ], + "CoUninitialize": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoGetCurrentProcess": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoInitializeEx": [ + { + "name": "pvReserved", + "type": "LPVOID" + }, + { + "name": "dwCoInit", + "type": "DWORD" + } + ], + "CoGetCallerTID": [ + { + "name": "lpdwTID", + "type": "LPDWORD" + } + ], + "CoGetCurrentLogicalThreadId": [ + { + "name": "pguid", + "type": "GUID" + } + ], + "CoGetContextToken": [ + { + "name": "pToken", + "type": "ULONG_PTR" + } + ], + "CoGetDefaultContext": [ + { + "name": "aptType", + "type": "APTTYPE" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CoGetApartmentType": [ + { + "name": "pAptType", + "type": "APTTYPE" + }, + { + "name": "pAptQualifier", + "type": "APTTYPEQUALIFIER" + } + ], + "CoIncrementMTAUsage": [ + { + "name": "pCookie", + "type": "CO_MTA_USAGE_COOKIE" + } + ], + "CoDecrementMTAUsage": [ + { + "name": "Cookie", + "type": "CO_MTA_USAGE_COOKIE" + } + ], + "CoAllowUnmarshalerCLSID": [ + { + "name": "clsid", + "type": "IID" + } + ], + "CoGetObjectContext": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoGetClassObject": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "dwClsContext", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoRegisterClassObject": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwClsContext", + "type": "DWORD" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "lpdwRegister", + "type": "LPDWORD" + } + ], + "CoRevokeClassObject": [ + { + "name": "dwRegister", + "type": "DWORD" + } + ], + "CoResumeClassObjects": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoSuspendClassObjects": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoAddRefServerProcess": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoReleaseServerProcess": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoGetPSClsid": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "pClsid", + "type": "CLSID" + } + ], + "CoRegisterPSClsid": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "rclsid", + "type": "IID" + } + ], + "CoRegisterSurrogate": [ + { + "name": "pSurrogate", + "type": "LPSURROGATE" + } + ], + "CoGetMarshalSizeMax": [ + { + "name": "pulSize", + "type": "ULONG" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwDestContext", + "type": "DWORD" + }, + { + "name": "pvDestContext", + "type": "LPVOID" + }, + { + "name": "mshlflags", + "type": "DWORD" + } + ], + "CoMarshalInterface": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwDestContext", + "type": "DWORD" + }, + { + "name": "pvDestContext", + "type": "LPVOID" + }, + { + "name": "mshlflags", + "type": "DWORD" + } + ], + "CoUnmarshalInterface": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoMarshalHresult": [ + { + "name": "pstm", + "type": "LPSTREAM" + }, + { + "name": "hresult", + "type": "HRESULT" + } + ], + "CoUnmarshalHresult": [ + { + "name": "pstm", + "type": "LPSTREAM" + }, + { + "name": "phresult", + "type": "HRESULT" + } + ], + "CoReleaseMarshalData": [ + { + "name": "pStm", + "type": "LPSTREAM" + } + ], + "CoDisconnectObject": [ + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwReserved", + "type": "DWORD" + } + ], + "CoLockObjectExternal": [ + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "fLock", + "type": "BOOL" + }, + { + "name": "fLastUnlockReleases", + "type": "BOOL" + } + ], + "CoGetStandardMarshal": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "dwDestContext", + "type": "DWORD" + }, + { + "name": "pvDestContext", + "type": "LPVOID" + }, + { + "name": "mshlflags", + "type": "DWORD" + }, + { + "name": "ppMarshal", + "type": "LPMARSHAL" + } + ], + "CoGetStdMarshalEx": [ + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "smexflags", + "type": "DWORD" + }, + { + "name": "ppUnkInner", + "type": "LPUNKNOWN" + } + ], + "CoIsHandlerConnected": [ + { + "name": "pUnk", + "type": "LPUNKNOWN" + } + ], + "CoMarshalInterThreadInterfaceInStream": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "LPUNKNOWN" + }, + { + "name": "ppStm", + "type": "LPSTREAM" + } + ], + "CoGetInterfaceAndReleaseStream": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoCreateFreeThreadedMarshaler": [ + { + "name": "punkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "ppunkMarshal", + "type": "LPUNKNOWN" + } + ], + "CoFreeUnusedLibraries": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoDisconnectContext": [ + { + "name": "dwTimeout", + "type": "DWORD" + } + ], + "CoInitializeSecurity": [ + { + "name": "pSecDesc", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "cAuthSvc", + "type": "LONG" + }, + { + "name": "asAuthSvc", + "type": "SOLE_AUTHENTICATION_SERVICE" + }, + { + "name": "pReserved1", + "type": "void" + }, + { + "name": "dwAuthnLevel", + "type": "DWORD" + }, + { + "name": "dwImpLevel", + "type": "DWORD" + }, + { + "name": "pAuthList", + "type": "void" + }, + { + "name": "dwCapabilities", + "type": "DWORD" + }, + { + "name": "pReserved3", + "type": "void" + } + ], + "CoGetCallContext": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppInterface", + "type": "void" + } + ], + "CoQueryProxyBlanket": [ + { + "name": "pProxy", + "type": "IUnknown" + }, + { + "name": "pwAuthnSvc", + "type": "DWORD" + }, + { + "name": "pAuthzSvc", + "type": "DWORD" + }, + { + "name": "pServerPrincName", + "type": "LPOLESTR" + }, + { + "name": "pAuthnLevel", + "type": "DWORD" + }, + { + "name": "pImpLevel", + "type": "DWORD" + }, + { + "name": "pAuthInfo", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "pCapabilites", + "type": "DWORD" + } + ], + "CoSetProxyBlanket": [ + { + "name": "pProxy", + "type": "IUnknown" + }, + { + "name": "dwAuthnSvc", + "type": "DWORD" + }, + { + "name": "dwAuthzSvc", + "type": "DWORD" + }, + { + "name": "pServerPrincName", + "type": "OLECHAR" + }, + { + "name": "dwAuthnLevel", + "type": "DWORD" + }, + { + "name": "dwImpLevel", + "type": "DWORD" + }, + { + "name": "pAuthInfo", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "dwCapabilities", + "type": "DWORD" + } + ], + "CoCopyProxy": [ + { + "name": "pProxy", + "type": "IUnknown" + }, + { + "name": "ppCopy", + "type": "IUnknown" + } + ], + "CoQueryClientBlanket": [ + { + "name": "pAuthnSvc", + "type": "DWORD" + }, + { + "name": "pAuthzSvc", + "type": "DWORD" + }, + { + "name": "pServerPrincName", + "type": "LPOLESTR" + }, + { + "name": "pAuthnLevel", + "type": "DWORD" + }, + { + "name": "pImpLevel", + "type": "DWORD" + }, + { + "name": "pPrivs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "pCapabilities", + "type": "DWORD" + } + ], + "CoImpersonateClient": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoRevertToSelf": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoQueryAuthenticationServices": [ + { + "name": "pcAuthSvc", + "type": "DWORD" + }, + { + "name": "asAuthSvc", + "type": "SOLE_AUTHENTICATION_SERVICE" + } + ], + "CoSwitchCallContext": [ + { + "name": "pNewObject", + "type": "IUnknown" + }, + { + "name": "ppOldObject", + "type": "IUnknown" + } + ], + "CoCreateInstance": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "dwClsContext", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "CoCreateInstanceEx": [ + { + "name": "Clsid", + "type": "IID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "pServerInfo", + "type": "COSERVERINFO" + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoRegisterActivationFilter": [ + { + "name": "pActivationFilter", + "type": "IActivationFilter" + } + ], + "CoGetCancelObject": [ + { + "name": "dwThreadId", + "type": "DWORD" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppUnk", + "type": "void" + } + ], + "CoSetCancelObject": [ + { + "name": "pUnk", + "type": "IUnknown" + } + ], + "CoCancelCall": [ + { + "name": "dwThreadId", + "type": "DWORD" + }, + { + "name": "ulTimeout", + "type": "ULONG" + } + ], + "CoTestCancel": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoEnableCallCancellation": [ + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "CoDisableCallCancellation": [ + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "StringFromCLSID": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lplpsz", + "type": "LPOLESTR" + } + ], + "CLSIDFromString": [ + { + "name": "lpsz", + "type": "LPCOLESTR" + }, + { + "name": "pclsid", + "type": "LPCLSID" + } + ], + "StringFromIID": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lplpsz", + "type": "LPOLESTR" + } + ], + "IIDFromString": [ + { + "name": "lpsz", + "type": "LPCOLESTR" + }, + { + "name": "lpiid", + "type": "LPIID" + } + ], + "ProgIDFromCLSID": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "lplpszProgID", + "type": "LPOLESTR" + } + ], + "CLSIDFromProgID": [ + { + "name": "lpszProgID", + "type": "LPCOLESTR" + }, + { + "name": "lpclsid", + "type": "LPCLSID" + } + ], + "StringFromGUID2": [ + { + "name": "rguid", + "type": "GUID" + }, + { + "name": "lpsz", + "type": "LPOLESTR" + }, + { + "name": "cchMax", + "type": "int" + } + ], + "CoCreateGuid": [ + { + "name": "pguid", + "type": "GUID" + } + ], + "PropVariantCopy": [ + { + "name": "pvarDest", + "type": "PROPVARIANT" + }, + { + "name": "pvarSrc", + "type": "PROPVARIANT" + } + ], + "PropVariantClear": [ + { + "name": "pvar", + "type": "PROPVARIANT" + } + ], + "FreePropVariantArray": [ + { + "name": "cVariants", + "type": "ULONG" + }, + { + "name": "rgvars", + "type": "PROPVARIANT" + } + ], + "CoWaitForMultipleHandles": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "cHandles", + "type": "ULONG" + }, + { + "name": "pHandles", + "type": "LPHANDLE" + }, + { + "name": "lpdwindex", + "type": "LPDWORD" + } + ], + "CoGetTreatAsClass": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "pClsidNew", + "type": "LPCLSID" + } + ], + "CoInvalidateRemoteMachineBindings": [ + { + "name": "pszMachineName", + "type": "LPOLESTR" + } + ], + "RoGetAgileReference": [ + { + "name": "options", + "type": { + "name": "AgileReferenceOptions", + "data_type": "Enum", + "enumerators": [] + } + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "ppAgileReference", + "type": "IAgileReference" + } + ], + "CoTaskMemAlloc": [ + { + "name": "cb", + "type": "SIZE_T" + } + ], + "CoTaskMemRealloc": [ + { + "name": "pv", + "type": "LPVOID" + }, + { + "name": "cb", + "type": "SIZE_T" + } + ], + "CoTaskMemFree": [ + { + "name": "pv", + "type": "LPVOID" + } + ], + "CoFileTimeNow": [ + { + "name": "lpFileTime", + "type": "FILETIME" + } + ], + "CLSIDFromProgIDEx": [ + { + "name": "lpszProgID", + "type": "LPCOLESTR" + }, + { + "name": "lpclsid", + "type": "LPCLSID" + } + ], + "CreateDataAdviseHolder": [ + { + "name": "ppDAHolder", + "type": "LPDATAADVISEHOLDER" + } + ], + "OleBuildVersion": [ + { + "name": "VOID", + "type": "void" + } + ], + "WriteFmtUserTypeStg": [ + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "cf", + "type": "CLIPFORMAT" + }, + { + "name": "lpszUserType", + "type": "LPOLESTR" + } + ], + "ReadFmtUserTypeStg": [ + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "pcf", + "type": "CLIPFORMAT" + }, + { + "name": "lplpszUserType", + "type": "LPOLESTR" + } + ], + "OleInitialize": [ + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "OleUninitialize": [ + { + "name": "VOID", + "type": "void" + } + ], + "OleQueryLinkFromData": [ + { + "name": "pSrcDataObject", + "type": "LPDATAOBJECT" + } + ], + "OleQueryCreateFromData": [ + { + "name": "pSrcDataObject", + "type": "LPDATAOBJECT" + } + ], + "OleCreate": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLECLIENT" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LHCLIENTDOC" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLEOBJECT" + }, + { + "name": "VOID", + "type": "OLEOPT_RENDER" + }, + { + "name": "VOID", + "type": "OLECLIPFORMAT" + } + ], + "OleCreateEx": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateFromData": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "pFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateFromDataEx": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkFromData": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "pFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkFromDataEx": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateStaticFromData": [ + { + "name": "pSrcDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "pFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLink": [ + { + "name": "pmkLinkSrc", + "type": "LPMONIKER" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "lpFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkEx": [ + { + "name": "pmkLinkSrc", + "type": "LPMONIKER" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkToFile": [ + { + "name": "lpszFileName", + "type": "LPCOLESTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "lpFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateLinkToFileEx": [ + { + "name": "lpszFileName", + "type": "LPCOLESTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleCreateFromFile": [ + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLECLIENT" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LHCLIENTDOC" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLEOBJECT" + }, + { + "name": "VOID", + "type": "OLEOPT_RENDER" + }, + { + "name": "VOID", + "type": "OLECLIPFORMAT" + } + ], + "OleCreateFromFileEx": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lpszFileName", + "type": "LPCOLESTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "renderopt", + "type": "DWORD" + }, + { + "name": "cFormats", + "type": "ULONG" + }, + { + "name": "rgAdvf", + "type": "DWORD" + }, + { + "name": "rgFormatEtc", + "type": "LPFORMATETC" + }, + { + "name": "lpAdviseSink", + "type": "IAdviseSink" + }, + { + "name": "rgdwConnection", + "type": "DWORD" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleLoad": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "pClientSite", + "type": "LPOLECLIENTSITE" + }, + { + "name": "ppvObj", + "type": "LPVOID" + } + ], + "OleSave": [ + { + "name": "pPS", + "type": "LPPERSISTSTORAGE" + }, + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "fSameAsLoad", + "type": "BOOL" + } + ], + "OleLoadFromStream": [ + { + "name": "VOID", + "type": "LPOLESTREAM" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLECLIENT" + }, + { + "name": "VOID", + "type": "LHCLIENTDOC" + }, + { + "name": "VOID", + "type": "LPCSTR" + }, + { + "name": "VOID", + "type": "LPOLEOBJECT" + } + ], + "OleSaveToStream": [ + { + "name": "VOID", + "type": "LPOLEOBJECT" + }, + { + "name": "VOID", + "type": "LPOLESTREAM" + } + ], + "OleSetContainedObject": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + }, + { + "name": "fContained", + "type": "BOOL" + } + ], + "OleNoteObjectVisible": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + }, + { + "name": "fVisible", + "type": "BOOL" + } + ], + "RegisterDragDrop": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pDropTarget", + "type": "LPDROPTARGET" + } + ], + "RevokeDragDrop": [ + { + "name": "hwnd", + "type": "HWND" + } + ], + "DoDragDrop": [ + { + "name": "pDataObj", + "type": "LPDATAOBJECT" + }, + { + "name": "pDropSource", + "type": "LPDROPSOURCE" + }, + { + "name": "dwOKEffects", + "type": "DWORD" + }, + { + "name": "pdwEffect", + "type": "LPDWORD" + } + ], + "OleSetClipboard": [ + { + "name": "pDataObj", + "type": "LPDATAOBJECT" + } + ], + "OleGetClipboard": [ + { + "name": "ppDataObj", + "type": "LPDATAOBJECT" + } + ], + "OleGetClipboardWithEnterpriseInfo": [ + { + "name": "dataObject", + "type": "IDataObject" + }, + { + "name": "dataEnterpriseId", + "type": "PWSTR" + }, + { + "name": "sourceDescription", + "type": "PWSTR" + }, + { + "name": "targetDescription", + "type": "PWSTR" + }, + { + "name": "dataDescription", + "type": "PWSTR" + } + ], + "OleFlushClipboard": [ + { + "name": "VOID", + "type": "void" + } + ], + "OleIsCurrentClipboard": [ + { + "name": "pDataObj", + "type": "LPDATAOBJECT" + } + ], + "OleCreateMenuDescriptor": [ + { + "name": "hmenuCombined", + "type": "HMENU" + }, + { + "name": "lpMenuWidths", + "type": "LPOLEMENUGROUPWIDTHS" + } + ], + "OleSetMenuDescriptor": [ + { + "name": "holemenu", + "type": "HOLEMENU" + }, + { + "name": "hwndFrame", + "type": "HWND" + }, + { + "name": "hwndActiveObject", + "type": "HWND" + }, + { + "name": "lpFrame", + "type": "LPOLEINPLACEFRAME" + }, + { + "name": "lpActiveObj", + "type": "LPOLEINPLACEACTIVEOBJECT" + } + ], + "OleDestroyMenuDescriptor": [ + { + "name": "holemenu", + "type": "HOLEMENU" + } + ], + "OleTranslateAccelerator": [ + { + "name": "lpFrame", + "type": "LPOLEINPLACEFRAME" + }, + { + "name": "lpFrameInfo", + "type": "LPOLEINPLACEFRAMEINFO" + }, + { + "name": "lpmsg", + "type": "LPMSG" + } + ], + "OleDuplicateData": [ + { + "name": "hSrc", + "type": "HANDLE" + }, + { + "name": "cfFormat", + "type": "CLIPFORMAT" + }, + { + "name": "uiFlags", + "type": "UINT" + } + ], + "OleDraw": [ + { + "name": "VOID", + "type": "LPOLEOBJECT" + }, + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "RECT" + }, + { + "name": "VOID", + "type": "RECT" + }, + { + "name": "VOID", + "type": "HDC" + } + ], + "OleRun": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + } + ], + "OleIsRunning": [ + { + "name": "pObject", + "type": "LPOLEOBJECT" + } + ], + "OleLockRunning": [ + { + "name": "pUnknown", + "type": "LPUNKNOWN" + }, + { + "name": "fLock", + "type": "BOOL" + }, + { + "name": "fLastUnlockCloses", + "type": "BOOL" + } + ], + "ReleaseStgMedium": [ + { + "name": "VOID", + "type": "LPSTGMEDIUM" + } + ], + "CreateOleAdviseHolder": [ + { + "name": "ppOAHolder", + "type": "LPOLEADVISEHOLDER" + } + ], + "OleCreateDefaultHandler": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "lplpObj", + "type": "LPVOID" + } + ], + "OleCreateEmbeddingHelper": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "flags", + "type": "DWORD" + }, + { + "name": "pCF", + "type": "LPCLASSFACTORY" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "lplpObj", + "type": "LPVOID" + } + ], + "IsAccelerator": [ + { + "name": "hAccel", + "type": "HACCEL" + }, + { + "name": "cAccelEntries", + "type": "int" + }, + { + "name": "lpMsg", + "type": "LPMSG" + }, + { + "name": "lpwCmd", + "type": "WORD" + } + ], + "OleGetIconOfFile": [ + { + "name": "lpszPath", + "type": "LPOLESTR" + }, + { + "name": "fUseFileAsLabel", + "type": "BOOL" + } + ], + "OleGetIconOfClass": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "lpszLabel", + "type": "LPOLESTR" + }, + { + "name": "fUseTypeAsLabel", + "type": "BOOL" + } + ], + "OleMetafilePictFromIconAndLabel": [ + { + "name": "hIcon", + "type": "HICON" + }, + { + "name": "lpszLabel", + "type": "LPOLESTR" + }, + { + "name": "lpszSourceFile", + "type": "LPOLESTR" + }, + { + "name": "iIconIndex", + "type": "UINT" + } + ], + "OleRegGetUserType": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "dwFormOfType", + "type": "DWORD" + }, + { + "name": "pszUserType", + "type": "LPOLESTR" + } + ], + "OleRegGetMiscStatus": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "dwAspect", + "type": "DWORD" + }, + { + "name": "pdwStatus", + "type": "DWORD" + } + ], + "OleRegEnumFormatEtc": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "dwDirection", + "type": "DWORD" + }, + { + "name": "ppenum", + "type": "LPENUMFORMATETC" + } + ], + "OleRegEnumVerbs": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "ppenum", + "type": "LPENUMOLEVERB" + } + ], + "OleConvertOLESTREAMToIStorage": [ + { + "name": "lpolestream", + "type": "LPOLESTREAM" + }, + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "ptd", + "type": "DVTARGETDEVICE" + } + ], + "OleConvertIStorageToOLESTREAM": [ + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "lpolestream", + "type": "LPOLESTREAM" + } + ], + "OleDoAutoConvert": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "pClsidNew", + "type": "LPCLSID" + } + ], + "OleGetAutoConvert": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "pClsidNew", + "type": "LPCLSID" + } + ], + "OleSetAutoConvert": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "clsidNew", + "type": "IID" + } + ], + "SetConvertStg": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "fConvert", + "type": "BOOL" + } + ], + "OleConvertIStorageToOLESTREAMEx": [ + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "cfFormat", + "type": "CLIPFORMAT" + }, + { + "name": "lWidth", + "type": "LONG" + }, + { + "name": "lHeight", + "type": "LONG" + }, + { + "name": "dwSize", + "type": "DWORD" + }, + { + "name": "pmedium", + "type": "LPSTGMEDIUM" + }, + { + "name": "polestm", + "type": "LPOLESTREAM" + } + ], + "OleConvertOLESTREAMToIStorageEx": [ + { + "name": "polestm", + "type": "LPOLESTREAM" + }, + { + "name": "pstg", + "type": "LPSTORAGE" + }, + { + "name": "pcfFormat", + "type": "CLIPFORMAT" + }, + { + "name": "plwWidth", + "type": "LONG" + }, + { + "name": "plHeight", + "type": "LONG" + }, + { + "name": "pdwSize", + "type": "DWORD" + }, + { + "name": "pmedium", + "type": "LPSTGMEDIUM" + } + ], + "CoGetInterceptor": [ + { + "name": "iidIntercepted", + "type": "IID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CStdStubBuffer2_QueryInterface": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CStdStubBuffer2_Connect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "pUnkServer", + "type": "IUnknown" + } + ], + "CStdStubBuffer2_Disconnect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdStubBuffer2_CountRefs": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer_QueryInterface": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CStdAsyncStubBuffer_AddRef": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer_Release": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer_Connect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "pUnkServer", + "type": "IUnknown" + } + ], + "CStdAsyncStubBuffer_Disconnect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer_Invoke": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "_prpcmsg", + "type": "RPCOLEMESSAGE" + }, + { + "name": "_pRpcChannelBuffer", + "type": "IRpcChannelBuffer" + } + ], + "CStdAsyncStubBuffer2_Release": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "CStdAsyncStubBuffer2_Connect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + }, + { + "name": "pUnkServer", + "type": "IUnknown" + } + ], + "CStdAsyncStubBuffer2_Disconnect": [ + { + "name": "pthis", + "type": "IRpcStubBuffer" + } + ], + "DllRegisterServer": [ + { + "name": "VOID", + "type": "void" + } + ], + "DllUnregisterServer": [ + { + "name": "VOID", + "type": "void" + } + ], + "StgPropertyLengthAsVariant": [ + { + "name": "pProp", + "type": "SERIALIZEDPROPERTYVALUE" + }, + { + "name": "cbProp", + "type": "ULONG" + }, + { + "name": "CodePage", + "type": "USHORT" + }, + { + "name": "bReserved", + "type": "BYTE" + } + ], + "StgCreateDocfile": [ + { + "name": "pwcsName", + "type": "WCHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgCreateDocfileOnILockBytes": [ + { + "name": "plkbyt", + "type": "ILockBytes" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgOpenStorage": [ + { + "name": "pwcsName", + "type": "WCHAR" + }, + { + "name": "pstgPriority", + "type": "IStorage" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "snbExclude", + "type": "SNB" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgOpenStorageOnILockBytes": [ + { + "name": "plkbyt", + "type": "ILockBytes" + }, + { + "name": "pstgPriority", + "type": "IStorage" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "snbExclude", + "type": "SNB" + }, + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgIsStorageFile": [ + { + "name": "pwcsName", + "type": "WCHAR" + } + ], + "StgIsStorageILockBytes": [ + { + "name": "plkbyt", + "type": "ILockBytes" + } + ], + "StgSetTimes": [ + { + "name": "lpszName", + "type": "WCHAR" + }, + { + "name": "pctime", + "type": "FILETIME" + }, + { + "name": "patime", + "type": "FILETIME" + }, + { + "name": "pmtime", + "type": "FILETIME" + } + ], + "StgCreateStorageEx": [ + { + "name": "pwcsName", + "type": "WCHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "stgfmt", + "type": "DWORD" + }, + { + "name": "grfAttrs", + "type": "DWORD" + }, + { + "name": "pStgOptions", + "type": "STGOPTIONS" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppObjectOpen", + "type": "void" + } + ], + "StgOpenStorageEx": [ + { + "name": "pwcsName", + "type": "WCHAR" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "stgfmt", + "type": "DWORD" + }, + { + "name": "grfAttrs", + "type": "DWORD" + }, + { + "name": "pStgOptions", + "type": "STGOPTIONS" + }, + { + "name": "pSecurityDescriptor", + "type": "PSECURITY_DESCRIPTOR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppObjectOpen", + "type": "void" + } + ], + "StgCreatePropStg": [ + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "fmtid", + "type": "IID" + }, + { + "name": "pclsid", + "type": "CLSID" + }, + { + "name": "grfFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "ppPropStg", + "type": "IPropertyStorage" + } + ], + "StgOpenPropStg": [ + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "fmtid", + "type": "IID" + }, + { + "name": "grfFlags", + "type": "DWORD" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "ppPropStg", + "type": "IPropertyStorage" + } + ], + "StgCreatePropSetStg": [ + { + "name": "pStorage", + "type": "IStorage" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "ppPropSetStg", + "type": "IPropertySetStorage" + } + ], + "FmtIdToPropStgName": [ + { + "name": "pfmtid", + "type": "FMTID" + }, + { + "name": "oszName", + "type": "LPOLESTR" + } + ], + "PropStgNameToFmtId": [ + { + "name": "oszName", + "type": "LPOLESTR" + }, + { + "name": "pfmtid", + "type": "FMTID" + } + ], + "ReadClassStg": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "WriteClassStg": [ + { + "name": "pStg", + "type": "LPSTORAGE" + }, + { + "name": "rclsid", + "type": "IID" + } + ], + "ReadClassStm": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "WriteClassStm": [ + { + "name": "pStm", + "type": "LPSTREAM" + }, + { + "name": "rclsid", + "type": "IID" + } + ], + "GetHGlobalFromILockBytes": [ + { + "name": "plkbyt", + "type": "LPLOCKBYTES" + }, + { + "name": "phglobal", + "type": "HGLOBAL" + } + ], + "CreateILockBytesOnHGlobal": [ + { + "name": "hGlobal", + "type": "HGLOBAL" + }, + { + "name": "fDeleteOnRelease", + "type": "BOOL" + }, + { + "name": "pplkbyt", + "type": "LPLOCKBYTES" + } + ], + "GetConvertStg": [ + { + "name": "pStg", + "type": "LPSTORAGE" + } + ], + "CoInitialize": [ + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "CoRegisterMallocSpy": [ + { + "name": "pMallocSpy", + "type": "LPMALLOCSPY" + } + ], + "CoRevokeMallocSpy": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoRegisterInitializeSpy": [ + { + "name": "pSpy", + "type": "IInitializeSpy" + }, + { + "name": "puliCookie", + "type": "ULARGE_INTEGER" + } + ], + "CoRevokeInitializeSpy": [ + { + "name": "uliCookie", + "type": "ULARGE_INTEGER" + } + ], + "CoLoadLibrary": [ + { + "name": "lpszLibName", + "type": "LPOLESTR" + }, + { + "name": "bAutoFree", + "type": "BOOL" + } + ], + "CoFreeLibrary": [ + { + "name": "hInst", + "type": "HINSTANCE" + } + ], + "CoFreeAllLibraries": [ + { + "name": "VOID", + "type": "void" + } + ], + "CoGetInstanceFromIStorage": [ + { + "name": "pServerInfo", + "type": "COSERVERINFO" + }, + { + "name": "pClsid", + "type": "CLSID" + }, + { + "name": "punkOuter", + "type": "IUnknown" + }, + { + "name": "dwClsCtx", + "type": "DWORD" + }, + { + "name": "pstg", + "type": { + "name": "IStorage", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "dwCount", + "type": "DWORD" + }, + { + "name": "pResults", + "type": "MULTI_QI" + } + ], + "CoAllowSetForegroundWindow": [ + { + "name": "pUnk", + "type": "IUnknown" + }, + { + "name": "lpvReserved", + "type": "LPVOID" + } + ], + "CoIsOle1Class": [ + { + "name": "rclsid", + "type": "IID" + } + ], + "CoFileTimeToDosDateTime": [ + { + "name": "lpFileTime", + "type": "FILETIME" + }, + { + "name": "lpDosDate", + "type": "LPWORD" + }, + { + "name": "lpDosTime", + "type": "LPWORD" + } + ], + "CoDosDateTimeToFileTime": [ + { + "name": "nDosDate", + "type": "WORD" + }, + { + "name": "nDosTime", + "type": "WORD" + }, + { + "name": "lpFileTime", + "type": "FILETIME" + } + ], + "CoRegisterMessageFilter": [ + { + "name": "lpMessageFilter", + "type": "LPMESSAGEFILTER" + }, + { + "name": "lplpMessageFilter", + "type": "LPMESSAGEFILTER" + } + ], + "CoTreatAsClass": [ + { + "name": "clsidOld", + "type": "IID" + }, + { + "name": "clsidNew", + "type": "IID" + } + ], + "CreateDataCache": [ + { + "name": "pUnkOuter", + "type": "LPUNKNOWN" + }, + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "iid", + "type": "IID" + }, + { + "name": "ppv", + "type": "LPVOID" + } + ], + "StgOpenAsyncDocfileOnIFillLockBytes": [ + { + "name": "pflb", + "type": "IFillLockBytes" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "asyncFlags", + "type": "DWORD" + }, + { + "name": "ppstgOpen", + "type": "IStorage" + } + ], + "StgGetIFillLockBytesOnILockBytes": [ + { + "name": "pilb", + "type": "ILockBytes" + }, + { + "name": "ppflb", + "type": "IFillLockBytes" + } + ], + "StgGetIFillLockBytesOnFile": [ + { + "name": "pwcsName", + "type": "OLECHAR" + }, + { + "name": "ppflb", + "type": "IFillLockBytes" + } + ], + "CoInstall": [ + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pClassSpec", + "type": "uCLSSPEC" + }, + { + "name": "pQuery", + "type": "QUERYCONTEXT" + }, + { + "name": "pszCodeBase", + "type": "LPWSTR" + } + ], + "BindMoniker": [ + { + "name": "pmk", + "type": "LPMONIKER" + }, + { + "name": "grfOpt", + "type": "DWORD" + }, + { + "name": "iidResult", + "type": "IID" + }, + { + "name": "ppvResult", + "type": "LPVOID" + } + ], + "CoGetObject": [ + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "pBindOptions", + "type": "BIND_OPTS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "MkParseDisplayName": [ + { + "name": "pbc", + "type": "LPBC" + }, + { + "name": "szUserName", + "type": "LPCOLESTR" + }, + { + "name": "pchEaten", + "type": "ULONG" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "MonikerRelativePathTo": [ + { + "name": "pmkSrc", + "type": "LPMONIKER" + }, + { + "name": "pmkDest", + "type": "LPMONIKER" + }, + { + "name": "ppmkRelPath", + "type": "LPMONIKER" + }, + { + "name": "dwReserved", + "type": "BOOL" + } + ], + "MonikerCommonPrefixWith": [ + { + "name": "pmkThis", + "type": "LPMONIKER" + }, + { + "name": "pmkOther", + "type": "LPMONIKER" + }, + { + "name": "ppmkCommon", + "type": "LPMONIKER" + } + ], + "CreateBindCtx": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "ppbc", + "type": "LPBC" + } + ], + "CreateGenericComposite": [ + { + "name": "pmkFirst", + "type": "LPMONIKER" + }, + { + "name": "pmkRest", + "type": "LPMONIKER" + }, + { + "name": "ppmkComposite", + "type": "LPMONIKER" + } + ], + "GetClassFile": [ + { + "name": "szFilename", + "type": "LPCOLESTR" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "CreateClassMoniker": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateFileMoniker": [ + { + "name": "lpszPathName", + "type": "LPCOLESTR" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateItemMoniker": [ + { + "name": "lpszDelim", + "type": "LPCOLESTR" + }, + { + "name": "lpszItem", + "type": "LPCOLESTR" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateAntiMoniker": [ + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreatePointerMoniker": [ + { + "name": "punk", + "type": "LPUNKNOWN" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "CreateObjrefMoniker": [ + { + "name": "punk", + "type": "LPUNKNOWN" + }, + { + "name": "ppmk", + "type": "LPMONIKER" + } + ], + "GetRunningObjectTable": [ + { + "name": "reserved", + "type": "DWORD" + }, + { + "name": "pprot", + "type": "LPRUNNINGOBJECTTABLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/oleacc.json b/qiling/extensions/windows_sdk/oleacc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/oleacc.json rename to qiling/extensions/windows_sdk/oleacc_dll.json diff --git a/qiling/extensions/windows_sdk/OleAut32.json b/qiling/extensions/windows_sdk/oleaut32_dll.json similarity index 91% rename from qiling/extensions/windows_sdk/OleAut32.json rename to qiling/extensions/windows_sdk/oleaut32_dll.json index 741c75135..0f2489954 100644 --- a/qiling/extensions/windows_sdk/OleAut32.json +++ b/qiling/extensions/windows_sdk/oleaut32_dll.json @@ -1,4 +1,284 @@ { + "LPSAFEARRAY_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "LPSAFEARRAY" + } + ], + "LPSAFEARRAY_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "LPSAFEARRAY" + } + ], + "LPSAFEARRAY_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "LPSAFEARRAY" + } + ], + "LPSAFEARRAY_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "LPSAFEARRAY" + } + ], + "OleCreatePropertyFrame": [ + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "x", + "type": "UINT" + }, + { + "name": "y", + "type": "UINT" + }, + { + "name": "lpszCaption", + "type": "LPCOLESTR" + }, + { + "name": "cObjects", + "type": "ULONG" + }, + { + "name": "ppUnk", + "type": "LPUNKNOWN" + }, + { + "name": "cPages", + "type": "ULONG" + }, + { + "name": "pPageClsID", + "type": "LPCLSID" + }, + { + "name": "lcid", + "type": "LCID" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "LPVOID" + } + ], + "OleCreatePropertyFrameIndirect": [ + { + "name": "lpParams", + "type": "LPOCPFIPARAMS" + } + ], + "OleTranslateColor": [ + { + "name": "clr", + "type": "OLE_COLOR" + }, + { + "name": "hpal", + "type": "HPALETTE" + }, + { + "name": "lpcolorref", + "type": "COLORREF" + } + ], + "OleCreateFontIndirect": [ + { + "name": "lpFontDesc", + "type": "LPFONTDESC" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "lplpvObj", + "type": "LPVOID" + } + ], + "OleCreatePictureIndirect": [ + { + "name": "lpPictDesc", + "type": "LPPICTDESC" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "fOwn", + "type": "BOOL" + }, + { + "name": "lplpvObj", + "type": "LPVOID" + } + ], + "OleLoadPicture": [ + { + "name": "lpstream", + "type": "LPSTREAM" + }, + { + "name": "lSize", + "type": "LONG" + }, + { + "name": "fRunmode", + "type": "BOOL" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "lplpvObj", + "type": "LPVOID" + } + ], + "OleLoadPictureEx": [ + { + "name": "lpstream", + "type": "LPSTREAM" + }, + { + "name": "lSize", + "type": "LONG" + }, + { + "name": "fRunmode", + "type": "BOOL" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "xSizeDesired", + "type": "DWORD" + }, + { + "name": "ySizeDesired", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lplpvObj", + "type": "LPVOID" + } + ], + "OleLoadPicturePath": [ + { + "name": "szURLorPath", + "type": "LPOLESTR" + }, + { + "name": "punkCaller", + "type": "LPUNKNOWN" + }, + { + "name": "dwReserved", + "type": "DWORD" + }, + { + "name": "clrReserved", + "type": "OLE_COLOR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvRet", + "type": "LPVOID" + } + ], + "OleLoadPictureFile": [ + { + "name": "varFileName", + "type": "VARIANT" + }, + { + "name": "lplpdispPicture", + "type": "LPDISPATCH" + } + ], + "OleLoadPictureFileEx": [ + { + "name": "varFileName", + "type": "VARIANT" + }, + { + "name": "xSizeDesired", + "type": "DWORD" + }, + { + "name": "ySizeDesired", + "type": "DWORD" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "lplpdispPicture", + "type": "LPDISPATCH" + } + ], + "OleSavePictureFile": [ + { + "name": "lpdispPicture", + "type": "LPDISPATCH" + }, + { + "name": "bstrFileName", + "type": "BSTR" + } + ], + "OleIconToCursor": [ + { + "name": "hinstExe", + "type": "HINSTANCE" + }, + { + "name": "hIcon", + "type": "HICON" + } + ], "SysAllocString": [ { "name": "psz", @@ -4388,5 +4668,101 @@ "name": "VOID", "type": "void" } + ], + "BSTR_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "BSTR" + } + ], + "BSTR_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "BSTR" + } + ], + "VARIANT_UserSize": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "VARIANT" + } + ], + "VARIANT_UserFree": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "VARIANT" + } + ], + "BSTR_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "BSTR" + } + ], + "BSTR_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "BSTR" + } + ], + "VARIANT_UserSize64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "VARIANT" + } + ], + "VARIANT_UserFree64": [ + { + "name": "VOID", + "type": "unsigned long" + }, + { + "name": "VOID", + "type": "VARIANT" + } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/oledlg.json b/qiling/extensions/windows_sdk/oledlg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/oledlg.json rename to qiling/extensions/windows_sdk/oledlg_dll.json diff --git a/qiling/extensions/windows_sdk/ondemandconnroutehelper.json b/qiling/extensions/windows_sdk/ondemandconnroutehelper_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ondemandconnroutehelper.json rename to qiling/extensions/windows_sdk/ondemandconnroutehelper_dll.json diff --git a/qiling/extensions/windows_sdk/opengl32.json b/qiling/extensions/windows_sdk/opengl32.json deleted file mode 100644 index f57fee6e4..000000000 --- a/qiling/extensions/windows_sdk/opengl32.json +++ /dev/null @@ -1,5434 +0,0 @@ -{ - "AddFontResourceA": [ - { - "name": "VOID", - "type": "LPCSTR" - } - ], - "AddFontResourceW": [ - { - "name": "VOID", - "type": "LPCWSTR" - } - ], - "AnimatePalette": [ - { - "name": "hPal", - "type": "HPALETTE" - }, - { - "name": "iStartIndex", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "ppe", - "type": "PALETTEENTRY" - } - ], - "Arc": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - }, - { - "name": "x3", - "type": "int" - }, - { - "name": "y3", - "type": "int" - }, - { - "name": "x4", - "type": "int" - }, - { - "name": "y4", - "type": "int" - } - ], - "BitBlt": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "CancelDC": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "Chord": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - }, - { - "name": "x3", - "type": "int" - }, - { - "name": "y3", - "type": "int" - }, - { - "name": "x4", - "type": "int" - }, - { - "name": "y4", - "type": "int" - } - ], - "ChoosePixelFormat": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "ppfd", - "type": "PIXELFORMATDESCRIPTOR" - } - ], - "CloseMetaFile": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "CombineRgn": [ - { - "name": "hrgnDst", - "type": "HRGN" - }, - { - "name": "hrgnSrc1", - "type": "HRGN" - }, - { - "name": "hrgnSrc2", - "type": "HRGN" - }, - { - "name": "iMode", - "type": "int" - } - ], - "CopyMetaFileA": [ - { - "name": "VOID", - "type": "HMETAFILE" - }, - { - "name": "VOID", - "type": "LPCSTR" - } - ], - "CopyMetaFileW": [ - { - "name": "VOID", - "type": "HMETAFILE" - }, - { - "name": "VOID", - "type": "LPCWSTR" - } - ], - "CreateBitmap": [ - { - "name": "nWidth", - "type": "int" - }, - { - "name": "nHeight", - "type": "int" - }, - { - "name": "nPlanes", - "type": "UINT" - }, - { - "name": "nBitCount", - "type": "UINT" - }, - { - "name": "lpBits", - "type": "void" - } - ], - "CreateBitmapIndirect": [ - { - "name": "pbm", - "type": "BITMAP" - } - ], - "CreateBrushIndirect": [ - { - "name": "plbrush", - "type": "LOGBRUSH" - } - ], - "CreateCompatibleBitmap": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - } - ], - "CreateDiscardableBitmap": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "cx", - "type": "int" - }, - { - "name": "cy", - "type": "int" - } - ], - "CreateCompatibleDC": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "CreateDCA": [ - { - "name": "pwszDriver", - "type": "LPCSTR" - }, - { - "name": "pwszDevice", - "type": "LPCSTR" - }, - { - "name": "pszPort", - "type": "LPCSTR" - }, - { - "name": "pdm", - "type": "DEVMODEA" - } - ], - "CreateDCW": [ - { - "name": "pwszDriver", - "type": "LPCWSTR" - }, - { - "name": "pwszDevice", - "type": "LPCWSTR" - }, - { - "name": "pszPort", - "type": "LPCWSTR" - }, - { - "name": "pdm", - "type": "DEVMODEW" - } - ], - "CreateDIBitmap": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pbmih", - "type": "BITMAPINFOHEADER" - }, - { - "name": "flInit", - "type": "DWORD" - }, - { - "name": "pjBits", - "type": "void" - }, - { - "name": "pbmi", - "type": "BITMAPINFO" - }, - { - "name": "iUsage", - "type": "UINT" - } - ], - "CreateDIBPatternBrush": [ - { - "name": "h", - "type": "HGLOBAL" - }, - { - "name": "iUsage", - "type": "UINT" - } - ], - "CreateDIBPatternBrushPt": [ - { - "name": "lpPackedDIB", - "type": "void" - }, - { - "name": "iUsage", - "type": "UINT" - } - ], - "CreateEllipticRgn": [ - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - } - ], - "CreateEllipticRgnIndirect": [ - { - "name": "lprect", - "type": "RECT" - } - ], - "CreateFontIndirectA": [ - { - "name": "lplf", - "type": "LOGFONTA" - } - ], - "CreateFontIndirectW": [ - { - "name": "lplf", - "type": "LOGFONTW" - } - ], - "CreateFontA": [ - { - "name": "cHeight", - "type": "int" - }, - { - "name": "cWidth", - "type": "int" - }, - { - "name": "cEscapement", - "type": "int" - }, - { - "name": "cOrientation", - "type": "int" - }, - { - "name": "cWeight", - "type": "int" - }, - { - "name": "bItalic", - "type": "DWORD" - }, - { - "name": "bUnderline", - "type": "DWORD" - }, - { - "name": "bStrikeOut", - "type": "DWORD" - }, - { - "name": "iCharSet", - "type": "DWORD" - }, - { - "name": "iOutPrecision", - "type": "DWORD" - }, - { - "name": "iClipPrecision", - "type": "DWORD" - }, - { - "name": "iQuality", - "type": "DWORD" - }, - { - "name": "iPitchAndFamily", - "type": "DWORD" - }, - { - "name": "pszFaceName", - "type": "LPCSTR" - } - ], - "CreateFontW": [ - { - "name": "cHeight", - "type": "int" - }, - { - "name": "cWidth", - "type": "int" - }, - { - "name": "cEscapement", - "type": "int" - }, - { - "name": "cOrientation", - "type": "int" - }, - { - "name": "cWeight", - "type": "int" - }, - { - "name": "bItalic", - "type": "DWORD" - }, - { - "name": "bUnderline", - "type": "DWORD" - }, - { - "name": "bStrikeOut", - "type": "DWORD" - }, - { - "name": "iCharSet", - "type": "DWORD" - }, - { - "name": "iOutPrecision", - "type": "DWORD" - }, - { - "name": "iClipPrecision", - "type": "DWORD" - }, - { - "name": "iQuality", - "type": "DWORD" - }, - { - "name": "iPitchAndFamily", - "type": "DWORD" - }, - { - "name": "pszFaceName", - "type": "LPCWSTR" - } - ], - "CreateHatchBrush": [ - { - "name": "iHatch", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "CreateICA": [ - { - "name": "pszDriver", - "type": "LPCSTR" - }, - { - "name": "pszDevice", - "type": "LPCSTR" - }, - { - "name": "pszPort", - "type": "LPCSTR" - }, - { - "name": "pdm", - "type": "DEVMODEA" - } - ], - "CreateICW": [ - { - "name": "pszDriver", - "type": "LPCWSTR" - }, - { - "name": "pszDevice", - "type": "LPCWSTR" - }, - { - "name": "pszPort", - "type": "LPCWSTR" - }, - { - "name": "pdm", - "type": "DEVMODEW" - } - ], - "CreateMetaFileA": [ - { - "name": "pszFile", - "type": "LPCSTR" - } - ], - "CreateMetaFileW": [ - { - "name": "pszFile", - "type": "LPCWSTR" - } - ], - "CreatePalette": [ - { - "name": "plpal", - "type": "LOGPALETTE" - } - ], - "CreatePen": [ - { - "name": "iStyle", - "type": "int" - }, - { - "name": "cWidth", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "CreatePenIndirect": [ - { - "name": "plpen", - "type": "LOGPEN" - } - ], - "CreatePolyPolygonRgn": [ - { - "name": "pptl", - "type": "POINT" - }, - { - "name": "pc", - "type": "INT" - }, - { - "name": "cPoly", - "type": "int" - }, - { - "name": "iMode", - "type": "int" - } - ], - "CreatePatternBrush": [ - { - "name": "hbm", - "type": "HBITMAP" - } - ], - "CreateRectRgn": [ - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - } - ], - "CreateRectRgnIndirect": [ - { - "name": "lprect", - "type": "RECT" - } - ], - "CreateRoundRectRgn": [ - { - "name": "x1", - "type": "int" - }, - { - "name": "y1", - "type": "int" - }, - { - "name": "x2", - "type": "int" - }, - { - "name": "y2", - "type": "int" - }, - { - "name": "w", - "type": "int" - }, - { - "name": "h", - "type": "int" - } - ], - "CreateScalableFontResourceA": [ - { - "name": "fdwHidden", - "type": "DWORD" - }, - { - "name": "lpszFont", - "type": "LPCSTR" - }, - { - "name": "lpszFile", - "type": "LPCSTR" - }, - { - "name": "lpszPath", - "type": "LPCSTR" - } - ], - "CreateScalableFontResourceW": [ - { - "name": "fdwHidden", - "type": "DWORD" - }, - { - "name": "lpszFont", - "type": "LPCWSTR" - }, - { - "name": "lpszFile", - "type": "LPCWSTR" - }, - { - "name": "lpszPath", - "type": "LPCWSTR" - } - ], - "CreateSolidBrush": [ - { - "name": "color", - "type": "COLORREF" - } - ], - "DeleteDC": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "DeleteMetaFile": [ - { - "name": "hmf", - "type": "HMETAFILE" - } - ], - "DeleteObject": [ - { - "name": "ho", - "type": "HGDIOBJ" - } - ], - "DescribePixelFormat": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iPixelFormat", - "type": "int" - }, - { - "name": "nBytes", - "type": "UINT" - }, - { - "name": "ppfd", - "type": "LPPIXELFORMATDESCRIPTOR" - } - ], - "DeviceCapabilitiesA": [ - { - "name": "pDevice", - "type": "LPCSTR" - }, - { - "name": "pPort", - "type": "LPCSTR" - }, - { - "name": "fwCapability", - "type": "WORD" - }, - { - "name": "pOutput", - "type": "LPSTR" - }, - { - "name": "pDevMode", - "type": "DEVMODEA" - } - ], - "DeviceCapabilitiesW": [ - { - "name": "pDevice", - "type": "LPCWSTR" - }, - { - "name": "pPort", - "type": "LPCWSTR" - }, - { - "name": "fwCapability", - "type": "WORD" - }, - { - "name": "pOutput", - "type": "LPWSTR" - }, - { - "name": "pDevMode", - "type": "DEVMODEW" - } - ], - "DrawEscape": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iEscape", - "type": "int" - }, - { - "name": "cjIn", - "type": "int" - }, - { - "name": "lpIn", - "type": "LPCSTR" - } - ], - "Ellipse": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "EnumFontFamiliesExA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPLOGFONTA" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCA" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumFontFamiliesExW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPLOGFONTW" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCW" - }, - { - "name": "lParam", - "type": "LPARAM" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "EnumFontFamiliesA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPCSTR" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCA" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumFontFamiliesW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPCWSTR" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCW" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumFontsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPCSTR" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCA" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumFontsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpLogfont", - "type": "LPCWSTR" - }, - { - "name": "lpProc", - "type": "FONTENUMPROCW" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EnumObjects": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nType", - "type": "int" - }, - { - "name": "lpFunc", - "type": "GOBJENUMPROC" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "EqualRgn": [ - { - "name": "hrgn1", - "type": "HRGN" - }, - { - "name": "hrgn2", - "type": "HRGN" - } - ], - "Escape": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iEscape", - "type": "int" - }, - { - "name": "cjIn", - "type": "int" - }, - { - "name": "pvIn", - "type": "LPCSTR" - }, - { - "name": "pvOut", - "type": "LPVOID" - } - ], - "ExtEscape": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iEscape", - "type": "int" - }, - { - "name": "cjInput", - "type": "int" - }, - { - "name": "lpInData", - "type": "LPCSTR" - }, - { - "name": "cjOutput", - "type": "int" - }, - { - "name": "lpOutData", - "type": "LPSTR" - } - ], - "ExcludeClipRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "ExtCreateRegion": [ - { - "name": "lpx", - "type": "XFORM" - }, - { - "name": "nCount", - "type": "DWORD" - }, - { - "name": "lpData", - "type": "RGNDATA" - } - ], - "ExtFloodFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - }, - { - "name": "type", - "type": "UINT" - } - ], - "FillRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "hbr", - "type": "HBRUSH" - } - ], - "FloodFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "FrameRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "hbr", - "type": "HBRUSH" - }, - { - "name": "w", - "type": "int" - }, - { - "name": "h", - "type": "int" - } - ], - "GetROP2": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetAspectRatioFilterEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpsize", - "type": "LPSIZE" - } - ], - "GetBkColor": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetDCBrushColor": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetDCPenColor": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetBkMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetBitmapBits": [ - { - "name": "hbit", - "type": "HBITMAP" - }, - { - "name": "cb", - "type": "LONG" - }, - { - "name": "lpvBits", - "type": "LPVOID" - } - ], - "GetBitmapDimensionEx": [ - { - "name": "hbit", - "type": "HBITMAP" - }, - { - "name": "lpsize", - "type": "LPSIZE" - } - ], - "GetBoundsRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "LPRECT" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "GetBrushOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "GetCharWidthA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPINT" - } - ], - "GetCharWidthW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPINT" - } - ], - "GetCharWidth32A": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPINT" - } - ], - "GetCharWidth32W": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "LPINT" - } - ], - "GetCharWidthFloatA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "PFLOAT" - } - ], - "GetCharWidthFloatW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpBuffer", - "type": "PFLOAT" - } - ], - "GetCharABCWidthsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "wFirst", - "type": "UINT" - }, - { - "name": "wLast", - "type": "UINT" - }, - { - "name": "lpABC", - "type": "LPABC" - } - ], - "GetCharABCWidthsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "wFirst", - "type": "UINT" - }, - { - "name": "wLast", - "type": "UINT" - }, - { - "name": "lpABC", - "type": "LPABC" - } - ], - "GetCharABCWidthsFloatA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpABC", - "type": "LPABCFLOAT" - } - ], - "GetCharABCWidthsFloatW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iFirst", - "type": "UINT" - }, - { - "name": "iLast", - "type": "UINT" - }, - { - "name": "lpABC", - "type": "LPABCFLOAT" - } - ], - "GetClipBox": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "LPRECT" - } - ], - "GetClipRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "GetMetaRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "GetCurrentObject": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "type", - "type": "UINT" - } - ], - "GetCurrentPositionEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "GetDeviceCaps": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "index", - "type": "int" - } - ], - "GetDIBits": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hbm", - "type": "HBITMAP" - }, - { - "name": "start", - "type": "UINT" - }, - { - "name": "cLines", - "type": "UINT" - }, - { - "name": "lpvBits", - "type": "LPVOID" - }, - { - "name": "lpbmi", - "type": "LPBITMAPINFO" - }, - { - "name": "usage", - "type": "UINT" - } - ], - "GetFontData": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "dwTable", - "type": "DWORD" - }, - { - "name": "dwOffset", - "type": "DWORD" - }, - { - "name": "pvBuffer", - "type": "PVOID" - }, - { - "name": "cjBuffer", - "type": "DWORD" - } - ], - "GetGlyphOutlineA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "uChar", - "type": "UINT" - }, - { - "name": "fuFormat", - "type": "UINT" - }, - { - "name": "lpgm", - "type": "LPGLYPHMETRICS" - }, - { - "name": "cjBuffer", - "type": "DWORD" - }, - { - "name": "pvBuffer", - "type": "LPVOID" - }, - { - "name": "lpmat2", - "type": "MAT2" - } - ], - "GetGlyphOutlineW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "uChar", - "type": "UINT" - }, - { - "name": "fuFormat", - "type": "UINT" - }, - { - "name": "lpgm", - "type": "LPGLYPHMETRICS" - }, - { - "name": "cjBuffer", - "type": "DWORD" - }, - { - "name": "pvBuffer", - "type": "LPVOID" - }, - { - "name": "lpmat2", - "type": "MAT2" - } - ], - "GetGraphicsMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetMapMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetMetaFileBitsEx": [ - { - "name": "hMF", - "type": "HMETAFILE" - }, - { - "name": "cbBuffer", - "type": "UINT" - }, - { - "name": "lpData", - "type": "LPVOID" - } - ], - "GetMetaFileA": [ - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "GetMetaFileW": [ - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "GetNearestColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "GetNearestPaletteIndex": [ - { - "name": "h", - "type": "HPALETTE" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "GetObjectType": [ - { - "name": "h", - "type": "HGDIOBJ" - } - ], - "GetOutlineTextMetricsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "cjCopy", - "type": "UINT" - }, - { - "name": "potm", - "type": "LPOUTLINETEXTMETRICA" - } - ], - "GetOutlineTextMetricsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "cjCopy", - "type": "UINT" - }, - { - "name": "potm", - "type": "LPOUTLINETEXTMETRICW" - } - ], - "GetPaletteEntries": [ - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "pPalEntries", - "type": "LPPALETTEENTRY" - } - ], - "GetPixel": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "GetPixelFormat": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetPolyFillMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetRasterizerCaps": [ - { - "name": "lpraststat", - "type": "LPRASTERIZER_STATUS" - }, - { - "name": "cjBytes", - "type": "UINT" - } - ], - "GetRandomRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "i", - "type": "INT" - } - ], - "GetRegionData": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "nCount", - "type": "DWORD" - }, - { - "name": "lpRgnData", - "type": "LPRGNDATA" - } - ], - "GetRgnBox": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "lprc", - "type": "LPRECT" - } - ], - "GetStockObject": [ - { - "name": "i", - "type": "int" - } - ], - "GetStretchBltMode": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetSystemPaletteEntries": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "pPalEntries", - "type": "LPPALETTEENTRY" - } - ], - "GetSystemPaletteUse": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextCharacterExtra": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextAlign": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextColor": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextExtentPointA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "GetTextExtentPointW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "GetTextExtentPoint32A": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "psizl", - "type": "LPSIZE" - } - ], - "GetTextExtentPoint32W": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "psizl", - "type": "LPSIZE" - } - ], - "GetTextExtentExPointA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpszString", - "type": "LPCSTR" - }, - { - "name": "cchString", - "type": "int" - }, - { - "name": "nMaxExtent", - "type": "int" - }, - { - "name": "lpnFit", - "type": "LPINT" - }, - { - "name": "lpnDx", - "type": "LPINT" - }, - { - "name": "lpSize", - "type": "LPSIZE" - } - ], - "GetTextExtentExPointW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpszString", - "type": "LPCWSTR" - }, - { - "name": "cchString", - "type": "int" - }, - { - "name": "nMaxExtent", - "type": "int" - }, - { - "name": "lpnFit", - "type": "LPINT" - }, - { - "name": "lpnDx", - "type": "LPINT" - }, - { - "name": "lpSize", - "type": "LPSIZE" - } - ], - "GetTextCharset": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetTextCharsetInfo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpSig", - "type": "LPFONTSIGNATURE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "TranslateCharsetInfo": [ - { - "name": "lpSrc", - "type": "DWORD" - }, - { - "name": "lpCs", - "type": "LPCHARSETINFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetFontLanguageInfo": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetCharacterPlacementA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "nCount", - "type": "int" - }, - { - "name": "nMexExtent", - "type": "int" - }, - { - "name": "lpResults", - "type": "LPGCP_RESULTSA" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetCharacterPlacementW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "nCount", - "type": "int" - }, - { - "name": "nMexExtent", - "type": "int" - }, - { - "name": "lpResults", - "type": "LPGCP_RESULTSW" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetFontUnicodeRanges": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpgs", - "type": "LPGLYPHSET" - } - ], - "GetGlyphIndicesA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpstr", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "pgi", - "type": "LPWORD" - }, - { - "name": "fl", - "type": "DWORD" - } - ], - "GetGlyphIndicesW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpstr", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "pgi", - "type": "LPWORD" - }, - { - "name": "fl", - "type": "DWORD" - } - ], - "GetTextExtentPointI": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pgiIn", - "type": "LPWORD" - }, - { - "name": "cgi", - "type": "int" - }, - { - "name": "psize", - "type": "LPSIZE" - } - ], - "GetTextExtentExPointI": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpwszString", - "type": "LPWORD" - }, - { - "name": "cwchString", - "type": "int" - }, - { - "name": "nMaxExtent", - "type": "int" - }, - { - "name": "lpnFit", - "type": "LPINT" - }, - { - "name": "lpnDx", - "type": "LPINT" - }, - { - "name": "lpSize", - "type": "LPSIZE" - } - ], - "GetCharWidthI": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "giFirst", - "type": "UINT" - }, - { - "name": "cgi", - "type": "UINT" - }, - { - "name": "pgi", - "type": "LPWORD" - }, - { - "name": "piWidths", - "type": "LPINT" - } - ], - "GetCharABCWidthsI": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "giFirst", - "type": "UINT" - }, - { - "name": "cgi", - "type": "UINT" - }, - { - "name": "pgi", - "type": "LPWORD" - }, - { - "name": "pabc", - "type": "LPABC" - } - ], - "AddFontResourceExA": [ - { - "name": "name", - "type": "LPCSTR" - }, - { - "name": "fl", - "type": "DWORD" - }, - { - "name": "res", - "type": "PVOID" - } - ], - "AddFontResourceExW": [ - { - "name": "name", - "type": "LPCWSTR" - }, - { - "name": "fl", - "type": "DWORD" - }, - { - "name": "res", - "type": "PVOID" - } - ], - "RemoveFontResourceExA": [ - { - "name": "name", - "type": "LPCSTR" - }, - { - "name": "fl", - "type": "DWORD" - }, - { - "name": "pdv", - "type": "PVOID" - } - ], - "RemoveFontResourceExW": [ - { - "name": "name", - "type": "LPCWSTR" - }, - { - "name": "fl", - "type": "DWORD" - }, - { - "name": "pdv", - "type": "PVOID" - } - ], - "AddFontMemResourceEx": [ - { - "name": "pFileView", - "type": "PVOID" - }, - { - "name": "cjSize", - "type": "DWORD" - }, - { - "name": "pvResrved", - "type": "PVOID" - }, - { - "name": "pNumFonts", - "type": "DWORD" - } - ], - "RemoveFontMemResourceEx": [ - { - "name": "h", - "type": "HANDLE" - } - ], - "CreateFontIndirectExA": [ - { - "name": "VOID", - "type": "ENUMLOGFONTEXDVA" - } - ], - "CreateFontIndirectExW": [ - { - "name": "VOID", - "type": "ENUMLOGFONTEXDVW" - } - ], - "GetViewportExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpsize", - "type": "LPSIZE" - } - ], - "GetViewportOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppoint", - "type": "LPPOINT" - } - ], - "GetWindowExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpsize", - "type": "LPSIZE" - } - ], - "GetWindowOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppoint", - "type": "LPPOINT" - } - ], - "IntersectClipRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "InvertRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "LineDDA": [ - { - "name": "xStart", - "type": "int" - }, - { - "name": "yStart", - "type": "int" - }, - { - "name": "xEnd", - "type": "int" - }, - { - "name": "yEnd", - "type": "int" - }, - { - "name": "lpProc", - "type": "LINEDDAPROC" - }, - { - "name": "data", - "type": "LPARAM" - } - ], - "LineTo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "MaskBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xDest", - "type": "int" - }, - { - "name": "yDest", - "type": "int" - }, - { - "name": "width", - "type": "int" - }, - { - "name": "height", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "hbmMask", - "type": "HBITMAP" - }, - { - "name": "xMask", - "type": "int" - }, - { - "name": "yMask", - "type": "int" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "PlgBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "lpPoint", - "type": "POINT" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "width", - "type": "int" - }, - { - "name": "height", - "type": "int" - }, - { - "name": "hbmMask", - "type": "HBITMAP" - }, - { - "name": "xMask", - "type": "int" - }, - { - "name": "yMask", - "type": "int" - } - ], - "OffsetClipRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "OffsetRgn": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "PatBlt": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "w", - "type": "int" - }, - { - "name": "h", - "type": "int" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "Pie": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - }, - { - "name": "xr1", - "type": "int" - }, - { - "name": "yr1", - "type": "int" - }, - { - "name": "xr2", - "type": "int" - }, - { - "name": "yr2", - "type": "int" - } - ], - "PlayMetaFile": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hmf", - "type": "HMETAFILE" - } - ], - "PaintRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "PolyPolygon": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "asz", - "type": "INT" - }, - { - "name": "csz", - "type": "int" - } - ], - "PtInRegion": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "PtVisible": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - } - ], - "RectInRegion": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "lprect", - "type": "RECT" - } - ], - "RectVisible": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "RECT" - } - ], - "Rectangle": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "RestoreDC": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nSavedDC", - "type": "int" - } - ], - "ResetDCA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpdm", - "type": "DEVMODEA" - } - ], - "ResetDCW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpdm", - "type": "DEVMODEW" - } - ], - "RealizePalette": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "RemoveFontResourceA": [ - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "RemoveFontResourceW": [ - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "RoundRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - }, - { - "name": "width", - "type": "int" - }, - { - "name": "height", - "type": "int" - } - ], - "ResizePalette": [ - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "n", - "type": "UINT" - } - ], - "SaveDC": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SelectClipRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - } - ], - "ExtSelectClipRgn": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "mode", - "type": "int" - } - ], - "SetMetaRgn": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SelectObject": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "h", - "type": "HGDIOBJ" - } - ], - "SelectPalette": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hPal", - "type": "HPALETTE" - }, - { - "name": "bForceBkgd", - "type": "BOOL" - } - ], - "SetBkColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetDCBrushColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetDCPenColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetBkMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "SetBitmapBits": [ - { - "name": "hbm", - "type": "HBITMAP" - }, - { - "name": "cb", - "type": "DWORD" - }, - { - "name": "pvBits", - "type": "void" - } - ], - "SetBoundsRect": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lprect", - "type": "RECT" - }, - { - "name": "flags", - "type": "UINT" - } - ], - "SetDIBits": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hbm", - "type": "HBITMAP" - }, - { - "name": "start", - "type": "UINT" - }, - { - "name": "cLines", - "type": "UINT" - }, - { - "name": "lpBits", - "type": "void" - }, - { - "name": "lpbmi", - "type": "BITMAPINFO" - }, - { - "name": "ColorUse", - "type": "UINT" - } - ], - "SetDIBitsToDevice": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xDest", - "type": "int" - }, - { - "name": "yDest", - "type": "int" - }, - { - "name": "w", - "type": "DWORD" - }, - { - "name": "h", - "type": "DWORD" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "StartScan", - "type": "UINT" - }, - { - "name": "cLines", - "type": "UINT" - }, - { - "name": "lpvBits", - "type": "void" - }, - { - "name": "lpbmi", - "type": "BITMAPINFO" - }, - { - "name": "ColorUse", - "type": "UINT" - } - ], - "SetMapperFlags": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "flags", - "type": "DWORD" - } - ], - "SetGraphicsMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iMode", - "type": "int" - } - ], - "SetMapMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iMode", - "type": "int" - } - ], - "SetLayout": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "l", - "type": "DWORD" - } - ], - "GetLayout": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SetMetaFileBitsEx": [ - { - "name": "cbBuffer", - "type": "UINT" - }, - { - "name": "lpData", - "type": "BYTE" - } - ], - "SetPaletteEntries": [ - { - "name": "hpal", - "type": "HPALETTE" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "pPalEntries", - "type": "PALETTEENTRY" - } - ], - "SetPixel": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetPixelV": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetPixelFormat": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "format", - "type": "int" - }, - { - "name": "ppfd", - "type": "PIXELFORMATDESCRIPTOR" - } - ], - "SetPolyFillMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "StretchBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xDest", - "type": "int" - }, - { - "name": "yDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "SetRectRgn": [ - { - "name": "hrgn", - "type": "HRGN" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - } - ], - "StretchDIBits": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xDest", - "type": "int" - }, - { - "name": "yDest", - "type": "int" - }, - { - "name": "DestWidth", - "type": "int" - }, - { - "name": "DestHeight", - "type": "int" - }, - { - "name": "xSrc", - "type": "int" - }, - { - "name": "ySrc", - "type": "int" - }, - { - "name": "SrcWidth", - "type": "int" - }, - { - "name": "SrcHeight", - "type": "int" - }, - { - "name": "lpBits", - "type": "void" - }, - { - "name": "lpbmi", - "type": "BITMAPINFO" - }, - { - "name": "iUsage", - "type": "UINT" - }, - { - "name": "rop", - "type": "DWORD" - } - ], - "SetROP2": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "rop2", - "type": "int" - } - ], - "SetStretchBltMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "SetSystemPaletteUse": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "use", - "type": "UINT" - } - ], - "SetTextCharacterExtra": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "extra", - "type": "int" - } - ], - "SetTextColor": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "color", - "type": "COLORREF" - } - ], - "SetTextAlign": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "align", - "type": "UINT" - } - ], - "SetTextJustification": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "extra", - "type": "int" - }, - { - "name": "count", - "type": "int" - } - ], - "UpdateColors": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "AlphaBlend": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "ftn", - "type": "BLENDFUNCTION" - } - ], - "TransparentBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "crTransparent", - "type": "UINT" - } - ], - "GradientFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pVertex", - "type": "PTRIVERTEX" - }, - { - "name": "nVertex", - "type": "ULONG" - }, - { - "name": "pMesh", - "type": "PVOID" - }, - { - "name": "nMesh", - "type": "ULONG" - }, - { - "name": "ulMode", - "type": "ULONG" - } - ], - "GdiAlphaBlend": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "ftn", - "type": "BLENDFUNCTION" - } - ], - "GdiTransparentBlt": [ - { - "name": "hdcDest", - "type": "HDC" - }, - { - "name": "xoriginDest", - "type": "int" - }, - { - "name": "yoriginDest", - "type": "int" - }, - { - "name": "wDest", - "type": "int" - }, - { - "name": "hDest", - "type": "int" - }, - { - "name": "hdcSrc", - "type": "HDC" - }, - { - "name": "xoriginSrc", - "type": "int" - }, - { - "name": "yoriginSrc", - "type": "int" - }, - { - "name": "wSrc", - "type": "int" - }, - { - "name": "hSrc", - "type": "int" - }, - { - "name": "crTransparent", - "type": "UINT" - } - ], - "GdiGradientFill": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pVertex", - "type": "PTRIVERTEX" - }, - { - "name": "nVertex", - "type": "ULONG" - }, - { - "name": "pMesh", - "type": "PVOID" - }, - { - "name": "nCount", - "type": "ULONG" - }, - { - "name": "ulMode", - "type": "ULONG" - } - ], - "PlayMetaFileRecord": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpHandleTable", - "type": "LPHANDLETABLE" - }, - { - "name": "lpMR", - "type": "LPMETARECORD" - }, - { - "name": "noObjs", - "type": "UINT" - } - ], - "EnumMetaFile": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hmf", - "type": "HMETAFILE" - }, - { - "name": "proc", - "type": "MFENUMPROC" - }, - { - "name": "param", - "type": "LPARAM" - } - ], - "CloseEnhMetaFile": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "CopyEnhMetaFileA": [ - { - "name": "hEnh", - "type": "HENHMETAFILE" - }, - { - "name": "lpFileName", - "type": "LPCSTR" - } - ], - "CopyEnhMetaFileW": [ - { - "name": "hEnh", - "type": "HENHMETAFILE" - }, - { - "name": "lpFileName", - "type": "LPCWSTR" - } - ], - "CreateEnhMetaFileA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpFilename", - "type": "LPCSTR" - }, - { - "name": "lprc", - "type": "RECT" - }, - { - "name": "lpDesc", - "type": "LPCSTR" - } - ], - "CreateEnhMetaFileW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpFilename", - "type": "LPCWSTR" - }, - { - "name": "lprc", - "type": "RECT" - }, - { - "name": "lpDesc", - "type": "LPCWSTR" - } - ], - "DeleteEnhMetaFile": [ - { - "name": "hmf", - "type": "HENHMETAFILE" - } - ], - "EnumEnhMetaFile": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hmf", - "type": "HENHMETAFILE" - }, - { - "name": "proc", - "type": "ENHMFENUMPROC" - }, - { - "name": "param", - "type": "LPVOID" - }, - { - "name": "lpRect", - "type": "RECT" - } - ], - "GetEnhMetaFileA": [ - { - "name": "lpName", - "type": "LPCSTR" - } - ], - "GetEnhMetaFileW": [ - { - "name": "lpName", - "type": "LPCWSTR" - } - ], - "GetEnhMetaFileBits": [ - { - "name": "hEMF", - "type": "HENHMETAFILE" - }, - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "lpData", - "type": "LPBYTE" - } - ], - "GetEnhMetaFileDescriptionA": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "cchBuffer", - "type": "UINT" - }, - { - "name": "lpDescription", - "type": "LPSTR" - } - ], - "GetEnhMetaFileDescriptionW": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "cchBuffer", - "type": "UINT" - }, - { - "name": "lpDescription", - "type": "LPWSTR" - } - ], - "GetEnhMetaFileHeader": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "lpEnhMetaHeader", - "type": "LPENHMETAHEADER" - } - ], - "GetEnhMetaFilePaletteEntries": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "nNumEntries", - "type": "UINT" - }, - { - "name": "lpPaletteEntries", - "type": "LPPALETTEENTRY" - } - ], - "GetEnhMetaFilePixelFormat": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "cbBuffer", - "type": "UINT" - }, - { - "name": "ppfd", - "type": "PIXELFORMATDESCRIPTOR" - } - ], - "GetWinMetaFileBits": [ - { - "name": "hemf", - "type": "HENHMETAFILE" - }, - { - "name": "cbData16", - "type": "UINT" - }, - { - "name": "pData16", - "type": "LPBYTE" - }, - { - "name": "iMapMode", - "type": "INT" - }, - { - "name": "hdcRef", - "type": "HDC" - } - ], - "PlayEnhMetaFile": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hmf", - "type": "HENHMETAFILE" - }, - { - "name": "lprect", - "type": "RECT" - } - ], - "PlayEnhMetaFileRecord": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pht", - "type": "LPHANDLETABLE" - }, - { - "name": "pmr", - "type": "ENHMETARECORD" - }, - { - "name": "cht", - "type": "UINT" - } - ], - "SetEnhMetaFileBits": [ - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "pb", - "type": "BYTE" - } - ], - "SetWinMetaFileBits": [ - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "lpMeta16Data", - "type": "BYTE" - }, - { - "name": "hdcRef", - "type": "HDC" - }, - { - "name": "lpMFP", - "type": "METAFILEPICT" - } - ], - "GdiComment": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nSize", - "type": "UINT" - }, - { - "name": "lpData", - "type": "BYTE" - } - ], - "GetTextMetricsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lptm", - "type": "LPTEXTMETRICA" - } - ], - "GetTextMetricsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lptm", - "type": "LPTEXTMETRICW" - } - ], - "AngleArc": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "r", - "type": "DWORD" - }, - { - "name": "StartAngle", - "type": "FLOAT" - }, - { - "name": "SweepAngle", - "type": "FLOAT" - } - ], - "PolyPolyline": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "asz", - "type": "DWORD" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "GetWorldTransform": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpxf", - "type": "LPXFORM" - } - ], - "SetWorldTransform": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpxf", - "type": "XFORM" - } - ], - "ModifyWorldTransform": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpxf", - "type": "XFORM" - }, - { - "name": "mode", - "type": "DWORD" - } - ], - "CombineTransform": [ - { - "name": "lpxfOut", - "type": "LPXFORM" - }, - { - "name": "lpxf1", - "type": "XFORM" - }, - { - "name": "lpxf2", - "type": "XFORM" - } - ], - "CreateDIBSection": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pbmi", - "type": "BITMAPINFO" - }, - { - "name": "usage", - "type": "UINT" - }, - { - "name": "ppvBits", - "type": "void" - }, - { - "name": "hSection", - "type": "HANDLE" - }, - { - "name": "offset", - "type": "DWORD" - } - ], - "GetDIBColorTable": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "prgbq", - "type": "RGBQUAD" - } - ], - "SetDIBColorTable": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "iStart", - "type": "UINT" - }, - { - "name": "cEntries", - "type": "UINT" - }, - { - "name": "prgbq", - "type": "RGBQUAD" - } - ], - "SetColorAdjustment": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpca", - "type": "COLORADJUSTMENT" - } - ], - "GetColorAdjustment": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpca", - "type": "LPCOLORADJUSTMENT" - } - ], - "CreateHalftonePalette": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "StartDocA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpdi", - "type": "DOCINFOA" - } - ], - "StartDocW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpdi", - "type": "DOCINFOW" - } - ], - "EndDoc": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "StartPage": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "EndPage": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "AbortDoc": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "SetAbortProc": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "proc", - "type": "ABORTPROC" - } - ], - "AbortPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "ArcTo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "left", - "type": "int" - }, - { - "name": "top", - "type": "int" - }, - { - "name": "right", - "type": "int" - }, - { - "name": "bottom", - "type": "int" - }, - { - "name": "xr1", - "type": "int" - }, - { - "name": "yr1", - "type": "int" - }, - { - "name": "xr2", - "type": "int" - }, - { - "name": "yr2", - "type": "int" - } - ], - "BeginPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "CloseFigure": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "EndPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "FillPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "FlattenPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetPath": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "LPPOINT" - }, - { - "name": "aj", - "type": "LPBYTE" - }, - { - "name": "cpt", - "type": "int" - } - ], - "PathToRegion": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "PolyDraw": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "aj", - "type": "BYTE" - }, - { - "name": "cpt", - "type": "int" - } - ], - "SelectClipPath": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "SetArcDirection": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "dir", - "type": "int" - } - ], - "SetMiterLimit": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "limit", - "type": "FLOAT" - }, - { - "name": "old", - "type": "PFLOAT" - } - ], - "StrokeAndFillPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "StrokePath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "WidenPath": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "ExtCreatePen": [ - { - "name": "iPenStyle", - "type": "DWORD" - }, - { - "name": "cWidth", - "type": "DWORD" - }, - { - "name": "plbrush", - "type": "LOGBRUSH" - }, - { - "name": "cStyle", - "type": "DWORD" - }, - { - "name": "pstyle", - "type": "DWORD" - } - ], - "GetMiterLimit": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "plimit", - "type": "PFLOAT" - } - ], - "GetArcDirection": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetObjectA": [ - { - "name": "h", - "type": "HANDLE" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "pv", - "type": "LPVOID" - } - ], - "GetObjectW": [ - { - "name": "h", - "type": "HANDLE" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "pv", - "type": "LPVOID" - } - ], - "MoveToEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "TextOutA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "int" - } - ], - "TextOutW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "int" - } - ], - "ExtTextOutA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "options", - "type": "UINT" - }, - { - "name": "lprect", - "type": "RECT" - }, - { - "name": "lpString", - "type": "LPCSTR" - }, - { - "name": "c", - "type": "UINT" - }, - { - "name": "lpDx", - "type": "INT" - } - ], - "ExtTextOutW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "options", - "type": "UINT" - }, - { - "name": "lprect", - "type": "RECT" - }, - { - "name": "lpString", - "type": "LPCWSTR" - }, - { - "name": "c", - "type": "UINT" - }, - { - "name": "lpDx", - "type": "INT" - } - ], - "PolyTextOutA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "ppt", - "type": "POLYTEXTA" - }, - { - "name": "nstrings", - "type": "int" - } - ], - "PolyTextOutW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "ppt", - "type": "POLYTEXTW" - }, - { - "name": "nstrings", - "type": "int" - } - ], - "CreatePolygonRgn": [ - { - "name": "pptl", - "type": "POINT" - }, - { - "name": "cPoint", - "type": "int" - }, - { - "name": "iMode", - "type": "int" - } - ], - "DPtoLP": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - }, - { - "name": "c", - "type": "int" - } - ], - "LPtoDP": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - }, - { - "name": "c", - "type": "int" - } - ], - "Polygon": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "int" - } - ], - "Polyline": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "int" - } - ], - "PolyBezier": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "DWORD" - } - ], - "PolyBezierTo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "DWORD" - } - ], - "PolylineTo": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "apt", - "type": "POINT" - }, - { - "name": "cpt", - "type": "DWORD" - } - ], - "SetViewportExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "SetViewportOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "SetWindowExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "SetWindowOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "OffsetViewportOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "OffsetWindowOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "ScaleViewportExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xn", - "type": "int" - }, - { - "name": "dx", - "type": "int" - }, - { - "name": "yn", - "type": "int" - }, - { - "name": "yd", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "ScaleWindowExtEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "xn", - "type": "int" - }, - { - "name": "xd", - "type": "int" - }, - { - "name": "yn", - "type": "int" - }, - { - "name": "yd", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "SetBitmapDimensionEx": [ - { - "name": "hbm", - "type": "HBITMAP" - }, - { - "name": "w", - "type": "int" - }, - { - "name": "h", - "type": "int" - }, - { - "name": "lpsz", - "type": "LPSIZE" - } - ], - "SetBrushOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "x", - "type": "int" - }, - { - "name": "y", - "type": "int" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "GetTextFaceA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "lpName", - "type": "LPSTR" - } - ], - "GetTextFaceW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "c", - "type": "int" - }, - { - "name": "lpName", - "type": "LPWSTR" - } - ], - "GetKerningPairsA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nPairs", - "type": "DWORD" - }, - { - "name": "lpKernPair", - "type": "LPKERNINGPAIR" - } - ], - "GetKerningPairsW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "nPairs", - "type": "DWORD" - }, - { - "name": "lpKernPair", - "type": "LPKERNINGPAIR" - } - ], - "GetDCOrgEx": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lppt", - "type": "LPPOINT" - } - ], - "UnrealizeObject": [ - { - "name": "h", - "type": "HGDIOBJ" - } - ], - "GdiFlush": [ - { - "name": "VOID", - "type": "void" - } - ], - "GdiSetBatchLimit": [ - { - "name": "dw", - "type": "DWORD" - } - ], - "GdiGetBatchLimit": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetICMMode": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "mode", - "type": "int" - } - ], - "CheckColorsInGamut": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpRGBTriple", - "type": "LPRGBTRIPLE" - }, - { - "name": "dlpBuffer", - "type": "LPVOID" - }, - { - "name": "nCount", - "type": "DWORD" - } - ], - "GetColorSpace": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "GetLogColorSpaceA": [ - { - "name": "hColorSpace", - "type": "HCOLORSPACE" - }, - { - "name": "lpBuffer", - "type": "LPLOGCOLORSPACEA" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "GetLogColorSpaceW": [ - { - "name": "hColorSpace", - "type": "HCOLORSPACE" - }, - { - "name": "lpBuffer", - "type": "LPLOGCOLORSPACEW" - }, - { - "name": "nSize", - "type": "DWORD" - } - ], - "CreateColorSpaceA": [ - { - "name": "lplcs", - "type": "LPLOGCOLORSPACEA" - } - ], - "CreateColorSpaceW": [ - { - "name": "lplcs", - "type": "LPLOGCOLORSPACEW" - } - ], - "SetColorSpace": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hcs", - "type": "HCOLORSPACE" - } - ], - "DeleteColorSpace": [ - { - "name": "hcs", - "type": "HCOLORSPACE" - } - ], - "GetICMProfileA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pBufSize", - "type": "LPDWORD" - }, - { - "name": "pszFilename", - "type": "LPSTR" - } - ], - "GetICMProfileW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "pBufSize", - "type": "LPDWORD" - }, - { - "name": "pszFilename", - "type": "LPWSTR" - } - ], - "SetICMProfileA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpFileName", - "type": "LPSTR" - } - ], - "SetICMProfileW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpFileName", - "type": "LPWSTR" - } - ], - "GetDeviceGammaRamp": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpRamp", - "type": "LPVOID" - } - ], - "SetDeviceGammaRamp": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "lpRamp", - "type": "LPVOID" - } - ], - "ColorMatchToTarget": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hdcTarget", - "type": "HDC" - }, - { - "name": "action", - "type": "DWORD" - } - ], - "EnumICMProfilesA": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "proc", - "type": "ICMENUMPROCA" - }, - { - "name": "param", - "type": "LPARAM" - } - ], - "EnumICMProfilesW": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "proc", - "type": "ICMENUMPROCW" - }, - { - "name": "param", - "type": "LPARAM" - } - ], - "UpdateICMRegKeyA": [ - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "lpszCMID", - "type": "LPSTR" - }, - { - "name": "lpszFileName", - "type": "LPSTR" - }, - { - "name": "command", - "type": "UINT" - } - ], - "UpdateICMRegKeyW": [ - { - "name": "reserved", - "type": "DWORD" - }, - { - "name": "lpszCMID", - "type": "LPWSTR" - }, - { - "name": "lpszFileName", - "type": "LPWSTR" - }, - { - "name": "command", - "type": "UINT" - } - ], - "ColorCorrectPalette": [ - { - "name": "hdc", - "type": "HDC" - }, - { - "name": "hPal", - "type": "HPALETTE" - }, - { - "name": "deFirst", - "type": "DWORD" - }, - { - "name": "num", - "type": "DWORD" - } - ], - "wglCopyContext": [ - { - "name": "VOID", - "type": "HGLRC" - }, - { - "name": "VOID", - "type": "HGLRC" - }, - { - "name": "VOID", - "type": "UINT" - } - ], - "wglCreateContext": [ - { - "name": "VOID", - "type": "HDC" - } - ], - "wglCreateLayerContext": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - } - ], - "wglDeleteContext": [ - { - "name": "VOID", - "type": "HGLRC" - } - ], - "wglGetCurrentContext": [ - { - "name": "VOID", - "type": "void" - } - ], - "wglGetCurrentDC": [ - { - "name": "VOID", - "type": "void" - } - ], - "wglGetProcAddress": [ - { - "name": "VOID", - "type": "LPCSTR" - } - ], - "wglMakeCurrent": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "HGLRC" - } - ], - "wglShareLists": [ - { - "name": "VOID", - "type": "HGLRC" - }, - { - "name": "VOID", - "type": "HGLRC" - } - ], - "wglUseFontBitmapsA": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "wglUseFontBitmapsW": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - } - ], - "SwapBuffers": [ - { - "name": "VOID", - "type": "HDC" - } - ], - "wglUseFontOutlinesA": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "LPGLYPHMETRICSFLOAT" - } - ], - "wglUseFontOutlinesW": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "DWORD" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "FLOAT" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "LPGLYPHMETRICSFLOAT" - } - ], - "wglDescribeLayerPlane": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "UINT" - }, - { - "name": "VOID", - "type": "LPLAYERPLANEDESCRIPTOR" - } - ], - "wglSetLayerPaletteEntries": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "COLORREF" - } - ], - "wglGetLayerPaletteEntries": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "COLORREF" - } - ], - "wglRealizeLayerPalette": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "int" - }, - { - "name": "VOID", - "type": "BOOL" - } - ], - "wglSwapLayerBuffers": [ - { - "name": "VOID", - "type": "HDC" - }, - { - "name": "VOID", - "type": "UINT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/opengl32_dll.json b/qiling/extensions/windows_sdk/opengl32_dll.json new file mode 100644 index 000000000..6f6e68e6e --- /dev/null +++ b/qiling/extensions/windows_sdk/opengl32_dll.json @@ -0,0 +1,270 @@ +{ + "wglCopyContext": [ + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "UINT" + } + ], + "wglCreateContext": [ + { + "name": "VOID", + "type": "HDC" + } + ], + "wglCreateLayerContext": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + } + ], + "wglDeleteContext": [ + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglGetCurrentContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "wglGetCurrentDC": [ + { + "name": "VOID", + "type": "void" + } + ], + "wglGetProcAddress": [ + { + "name": "VOID", + "type": "LPCSTR" + } + ], + "wglMakeCurrent": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglShareLists": [ + { + "name": "VOID", + "type": "HGLRC" + }, + { + "name": "VOID", + "type": "HGLRC" + } + ], + "wglUseFontBitmapsA": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "wglUseFontBitmapsW": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + } + ], + "wglUseFontOutlinesA": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "LPGLYPHMETRICSFLOAT" + } + ], + "wglUseFontOutlinesW": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "DWORD" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "FLOAT" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "LPGLYPHMETRICSFLOAT" + } + ], + "wglDescribeLayerPlane": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "UINT" + }, + { + "name": "VOID", + "type": "LPLAYERPLANEDESCRIPTOR" + } + ], + "wglSetLayerPaletteEntries": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "COLORREF" + } + ], + "wglGetLayerPaletteEntries": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "COLORREF" + } + ], + "wglRealizeLayerPalette": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "int" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "wglSwapLayerBuffers": [ + { + "name": "VOID", + "type": "HDC" + }, + { + "name": "VOID", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/p2p.json b/qiling/extensions/windows_sdk/p2p.json deleted file mode 100644 index 819ad8f5d..000000000 --- a/qiling/extensions/windows_sdk/p2p.json +++ /dev/null @@ -1,1638 +0,0 @@ -{ - "PeerGraphStartup": [ - { - "name": "wVersionRequested", - "type": "WORD" - }, - { - "name": "pVersionData", - "type": "PPEER_VERSION_DATA" - } - ], - "PeerGraphFreeData": [ - { - "name": "pvData", - "type": "PVOID" - } - ], - "PeerGraphGetItemCount": [ - { - "name": "hPeerEnum", - "type": "HPEERENUM" - }, - { - "name": "pCount", - "type": "ULONG" - } - ], - "PeerGraphGetNextItem": [ - { - "name": "hPeerEnum", - "type": "HPEERENUM" - }, - { - "name": "pCount", - "type": "ULONG" - }, - { - "name": "pppvItems", - "type": "PVOID" - } - ], - "PeerGraphEndEnumeration": [ - { - "name": "hPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGraphCreate": [ - { - "name": "pGraphProperties", - "type": "PPEER_GRAPH_PROPERTIES" - }, - { - "name": "pwzDatabaseName", - "type": "PCWSTR" - }, - { - "name": "pSecurityInterface", - "type": "PPEER_SECURITY_INTERFACE" - }, - { - "name": "phGraph", - "type": "HGRAPH" - } - ], - "PeerGraphOpen": [ - { - "name": "pwzGraphId", - "type": "PCWSTR" - }, - { - "name": "pwzPeerId", - "type": "PCWSTR" - }, - { - "name": "pwzDatabaseName", - "type": "PCWSTR" - }, - { - "name": "pSecurityInterface", - "type": "PPEER_SECURITY_INTERFACE" - }, - { - "name": "cRecordTypeSyncPrecedence", - "type": "ULONG" - }, - { - "name": "pRecordTypeSyncPrecedence", - "type": "GUID" - }, - { - "name": "phGraph", - "type": "HGRAPH" - } - ], - "PeerGraphListen": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "dwScope", - "type": "DWORD" - }, - { - "name": "dwScopeId", - "type": "DWORD" - }, - { - "name": "wPort", - "type": "WORD" - } - ], - "PeerGraphConnect": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzPeerId", - "type": "PCWSTR" - }, - { - "name": "pAddress", - "type": "PPEER_ADDRESS" - }, - { - "name": "pullConnectionId", - "type": "ULONGLONG" - } - ], - "PeerGraphClose": [ - { - "name": "hGraph", - "type": "HGRAPH" - } - ], - "PeerGraphDelete": [ - { - "name": "pwzGraphId", - "type": "PCWSTR" - }, - { - "name": "pwzPeerId", - "type": "PCWSTR" - }, - { - "name": "pwzDatabaseName", - "type": "PCWSTR" - } - ], - "PeerGraphGetStatus": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pdwStatus", - "type": "DWORD" - } - ], - "PeerGraphGetProperties": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "ppGraphProperties", - "type": "PPEER_GRAPH_PROPERTIES" - } - ], - "PeerGraphSetProperties": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pGraphProperties", - "type": "PPEER_GRAPH_PROPERTIES" - } - ], - "PeerGraphRegisterEvent": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "hEvent", - "type": "HANDLE" - }, - { - "name": "cEventRegistrations", - "type": "ULONG" - }, - { - "name": "pEventRegistrations", - "type": "PEER_GRAPH_EVENT_REGISTRATION" - }, - { - "name": "phPeerEvent", - "type": "HPEEREVENT" - } - ], - "PeerGraphUnregisterEvent": [ - { - "name": "hPeerEvent", - "type": "HPEEREVENT" - } - ], - "PeerGraphGetEventData": [ - { - "name": "hPeerEvent", - "type": "HPEEREVENT" - }, - { - "name": "ppEventData", - "type": "PPEER_GRAPH_EVENT_DATA" - } - ], - "PeerGraphGetRecord": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pRecordId", - "type": "GUID" - }, - { - "name": "ppRecord", - "type": "PPEER_RECORD" - } - ], - "PeerGraphAddRecord": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pRecord", - "type": "PPEER_RECORD" - }, - { - "name": "pRecordId", - "type": "GUID" - } - ], - "PeerGraphUpdateRecord": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pRecord", - "type": "PPEER_RECORD" - } - ], - "PeerGraphDeleteRecord": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pRecordId", - "type": "GUID" - }, - { - "name": "fLocal", - "type": "BOOL" - } - ], - "PeerGraphEnumRecords": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pRecordType", - "type": "GUID" - }, - { - "name": "pwzPeerId", - "type": "PCWSTR" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGraphSearchRecords": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzCriteria", - "type": "PCWSTR" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGraphExportDatabase": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzFilePath", - "type": "PCWSTR" - } - ], - "PeerGraphImportDatabase": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzFilePath", - "type": "PCWSTR" - } - ], - "PeerGraphValidateDeferredRecords": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "cRecordIds", - "type": "ULONG" - }, - { - "name": "pRecordIds", - "type": "GUID" - } - ], - "PeerGraphOpenDirectConnection": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzPeerId", - "type": "PCWSTR" - }, - { - "name": "pAddress", - "type": "PPEER_ADDRESS" - }, - { - "name": "pullConnectionId", - "type": "ULONGLONG" - } - ], - "PeerGraphSendData": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "ullConnectionId", - "type": "ULONGLONG" - }, - { - "name": "pType", - "type": "GUID" - }, - { - "name": "cbData", - "type": "ULONG" - }, - { - "name": "pvData", - "type": "PVOID" - } - ], - "PeerGraphCloseDirectConnection": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "ullConnectionId", - "type": "ULONGLONG" - } - ], - "PeerGraphEnumConnections": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGraphEnumNodes": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzPeerId", - "type": "PCWSTR" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGraphSetPresence": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "fPresent", - "type": "BOOL" - } - ], - "PeerGraphGetNodeInfo": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "ullNodeId", - "type": "ULONGLONG" - }, - { - "name": "ppNodeInfo", - "type": "PPEER_NODE_INFO" - } - ], - "PeerGraphSetNodeAttributes": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzAttributes", - "type": "PCWSTR" - } - ], - "PeerGraphPeerTimeToUniversalTime": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pftPeerTime", - "type": "FILETIME" - }, - { - "name": "pftUniversalTime", - "type": "FILETIME" - } - ], - "PeerGraphUniversalTimeToPeerTime": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pftUniversalTime", - "type": "FILETIME" - }, - { - "name": "pftPeerTime", - "type": "FILETIME" - } - ], - "PeerFreeData": [ - { - "name": "pvData", - "type": "LPCVOID" - } - ], - "PeerGetItemCount": [ - { - "name": "hPeerEnum", - "type": "HPEERENUM" - }, - { - "name": "pCount", - "type": "ULONG" - } - ], - "PeerGetNextItem": [ - { - "name": "hPeerEnum", - "type": "HPEERENUM" - }, - { - "name": "pCount", - "type": "ULONG" - }, - { - "name": "pppvItems", - "type": "PVOID" - } - ], - "PeerEndEnumeration": [ - { - "name": "hPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGroupStartup": [ - { - "name": "wVersionRequested", - "type": "WORD" - }, - { - "name": "pVersionData", - "type": "PPEER_VERSION_DATA" - } - ], - "PeerGroupCreate": [ - { - "name": "pProperties", - "type": "PPEER_GROUP_PROPERTIES" - }, - { - "name": "phGroup", - "type": "HGROUP" - } - ], - "PeerGroupOpen": [ - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "pwzGroupPeerName", - "type": "PCWSTR" - }, - { - "name": "pwzCloud", - "type": "PCWSTR" - }, - { - "name": "phGroup", - "type": "HGROUP" - } - ], - "PeerGroupJoin": [ - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "pwzInvitation", - "type": "PCWSTR" - }, - { - "name": "pwzCloud", - "type": "PCWSTR" - }, - { - "name": "phGroup", - "type": "HGROUP" - } - ], - "PeerGroupPasswordJoin": [ - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "pwzInvitation", - "type": "PCWSTR" - }, - { - "name": "pwzPassword", - "type": "PCWSTR" - }, - { - "name": "pwzCloud", - "type": "PCWSTR" - }, - { - "name": "phGroup", - "type": "HGROUP" - } - ], - "PeerGroupConnect": [ - { - "name": "hGroup", - "type": "HGROUP" - } - ], - "PeerGroupConnectByAddress": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "cAddresses", - "type": "ULONG" - }, - { - "name": "pAddresses", - "type": "PPEER_ADDRESS" - } - ], - "PeerGroupClose": [ - { - "name": "hGroup", - "type": "HGROUP" - } - ], - "PeerGroupDelete": [ - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "pwzGroupPeerName", - "type": "PCWSTR" - } - ], - "PeerGroupCreateInvitation": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pwzIdentityInfo", - "type": "PCWSTR" - }, - { - "name": "pftExpiration", - "type": "FILETIME" - }, - { - "name": "cRoles", - "type": "ULONG" - }, - { - "name": "pRoles", - "type": "GUID" - }, - { - "name": "ppwzInvitation", - "type": "PWSTR" - } - ], - "PeerGroupCreatePasswordInvitation": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "ppwzInvitation", - "type": "PWSTR" - } - ], - "PeerGroupParseInvitation": [ - { - "name": "pwzInvitation", - "type": "PCWSTR" - }, - { - "name": "ppInvitationInfo", - "type": "PPEER_INVITATION_INFO" - } - ], - "PeerGroupGetStatus": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pdwStatus", - "type": "DWORD" - } - ], - "PeerGroupGetProperties": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "ppProperties", - "type": "PPEER_GROUP_PROPERTIES" - } - ], - "PeerGroupSetProperties": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pProperties", - "type": "PPEER_GROUP_PROPERTIES" - } - ], - "PeerGroupEnumMembers": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGroupOpenDirectConnection": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "pAddress", - "type": "PPEER_ADDRESS" - }, - { - "name": "pullConnectionId", - "type": "ULONGLONG" - } - ], - "PeerGroupCloseDirectConnection": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "ullConnectionId", - "type": "ULONGLONG" - } - ], - "PeerGroupEnumConnections": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGroupSendData": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "ullConnectionId", - "type": "ULONGLONG" - }, - { - "name": "pType", - "type": "GUID" - }, - { - "name": "cbData", - "type": "ULONG" - }, - { - "name": "pvData", - "type": "PVOID" - } - ], - "PeerGroupRegisterEvent": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "hEvent", - "type": "HANDLE" - }, - { - "name": "cEventRegistration", - "type": "DWORD" - }, - { - "name": "pEventRegistrations", - "type": "PEER_GROUP_EVENT_REGISTRATION" - }, - { - "name": "phPeerEvent", - "type": "HPEEREVENT" - } - ], - "PeerGroupUnregisterEvent": [ - { - "name": "hPeerEvent", - "type": "HPEEREVENT" - } - ], - "PeerGroupGetEventData": [ - { - "name": "hPeerEvent", - "type": "HPEEREVENT" - }, - { - "name": "ppEventData", - "type": "PPEER_GROUP_EVENT_DATA" - } - ], - "PeerGroupGetRecord": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pRecordId", - "type": "GUID" - }, - { - "name": "ppRecord", - "type": "PPEER_RECORD" - } - ], - "PeerGroupAddRecord": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pRecord", - "type": "PPEER_RECORD" - }, - { - "name": "pRecordId", - "type": "GUID" - } - ], - "PeerGroupUpdateRecord": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pRecord", - "type": "PPEER_RECORD" - } - ], - "PeerGroupDeleteRecord": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pRecordId", - "type": "GUID" - } - ], - "PeerGroupEnumRecords": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pRecordType", - "type": "GUID" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGroupSearchRecords": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pwzCriteria", - "type": "PCWSTR" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGroupExportDatabase": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pwzFilePath", - "type": "PCWSTR" - } - ], - "PeerGroupImportDatabase": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pwzFilePath", - "type": "PCWSTR" - } - ], - "PeerGroupIssueCredentials": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pwzSubjectIdentity", - "type": "PCWSTR" - }, - { - "name": "pCredentialInfo", - "type": "PEER_CREDENTIAL_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "ppwzInvitation", - "type": "PWSTR" - } - ], - "PeerGroupExportConfig": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pwzPassword", - "type": "PCWSTR" - }, - { - "name": "ppwzXML", - "type": "PWSTR" - } - ], - "PeerGroupImportConfig": [ - { - "name": "pwzXML", - "type": "PCWSTR" - }, - { - "name": "pwzPassword", - "type": "PCWSTR" - }, - { - "name": "fOverwrite", - "type": "BOOL" - }, - { - "name": "ppwzIdentity", - "type": "PWSTR" - }, - { - "name": "ppwzGroup", - "type": "PWSTR" - } - ], - "PeerGroupPeerTimeToUniversalTime": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pftPeerTime", - "type": "FILETIME" - }, - { - "name": "pftUniversalTime", - "type": "FILETIME" - } - ], - "PeerGroupUniversalTimeToPeerTime": [ - { - "name": "hGroup", - "type": "HGROUP" - }, - { - "name": "pftUniversalTime", - "type": "FILETIME" - }, - { - "name": "pftPeerTime", - "type": "FILETIME" - } - ], - "PeerIdentityCreate": [ - { - "name": "pwzClassifier", - "type": "PCWSTR" - }, - { - "name": "pwzFriendlyName", - "type": "PCWSTR" - }, - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "ppwzIdentity", - "type": "PWSTR" - } - ], - "PeerIdentityGetFriendlyName": [ - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "ppwzFriendlyName", - "type": "PWSTR" - } - ], - "PeerIdentitySetFriendlyName": [ - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "pwzFriendlyName", - "type": "PCWSTR" - } - ], - "PeerIdentityGetCryptKey": [ - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "phCryptProv", - "type": "HCRYPTPROV" - } - ], - "PeerIdentityDelete": [ - { - "name": "pwzIdentity", - "type": "PCWSTR" - } - ], - "PeerEnumIdentities": [ - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerEnumGroups": [ - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerCreatePeerName": [ - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "pwzClassifier", - "type": "PCWSTR" - }, - { - "name": "ppwzPeerName", - "type": "PWSTR" - } - ], - "PeerIdentityGetXML": [ - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "ppwzIdentityXML", - "type": "PWSTR" - } - ], - "PeerIdentityExport": [ - { - "name": "pwzIdentity", - "type": "PCWSTR" - }, - { - "name": "pwzPassword", - "type": "PCWSTR" - }, - { - "name": "ppwzExportXML", - "type": "PWSTR" - } - ], - "PeerIdentityImport": [ - { - "name": "pwzImportXML", - "type": "PCWSTR" - }, - { - "name": "pwzPassword", - "type": "PCWSTR" - }, - { - "name": "ppwzIdentity", - "type": "PWSTR" - } - ], - "PeerIdentityGetDefault": [ - { - "name": "ppwzPeerName", - "type": "PWSTR" - } - ], - "PeerCollabStartup": [ - { - "name": "wVersionRequested", - "type": "WORD" - } - ], - "PeerCollabSignin": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "dwSigninOptions", - "type": "DWORD" - } - ], - "PeerCollabSignout": [ - { - "name": "dwSigninOptions", - "type": "DWORD" - } - ], - "PeerCollabGetSigninOptions": [ - { - "name": "pdwSigninOptions", - "type": "DWORD" - } - ], - "PeerCollabAsyncInviteContact": [ - { - "name": "pcContact", - "type": "PCPEER_CONTACT" - }, - { - "name": "pcEndpoint", - "type": "PCPEER_ENDPOINT" - }, - { - "name": "pcInvitation", - "type": "PCPEER_INVITATION" - }, - { - "name": "hEvent", - "type": "HANDLE" - }, - { - "name": "phInvitation", - "type": "HANDLE" - } - ], - "PeerCollabGetInvitationResponse": [ - { - "name": "hInvitation", - "type": "HANDLE" - }, - { - "name": "ppInvitationResponse", - "type": "PPEER_INVITATION_RESPONSE" - } - ], - "PeerCollabCancelInvitation": [ - { - "name": "hInvitation", - "type": "HANDLE" - } - ], - "PeerCollabCloseHandle": [ - { - "name": "hInvitation", - "type": "HANDLE" - } - ], - "PeerCollabInviteContact": [ - { - "name": "pcContact", - "type": "PCPEER_CONTACT" - }, - { - "name": "pcEndpoint", - "type": "PCPEER_ENDPOINT" - }, - { - "name": "pcInvitation", - "type": "PCPEER_INVITATION" - }, - { - "name": "ppResponse", - "type": "PPEER_INVITATION_RESPONSE" - } - ], - "PeerCollabAsyncInviteEndpoint": [ - { - "name": "pcEndpoint", - "type": "PCPEER_ENDPOINT" - }, - { - "name": "pcInvitation", - "type": "PCPEER_INVITATION" - }, - { - "name": "hEvent", - "type": "HANDLE" - }, - { - "name": "phInvitation", - "type": "HANDLE" - } - ], - "PeerCollabInviteEndpoint": [ - { - "name": "pcEndpoint", - "type": "PCPEER_ENDPOINT" - }, - { - "name": "pcInvitation", - "type": "PCPEER_INVITATION" - }, - { - "name": "ppResponse", - "type": "PPEER_INVITATION_RESPONSE" - } - ], - "PeerCollabGetAppLaunchInfo": [ - { - "name": "ppLaunchInfo", - "type": "PPEER_APP_LAUNCH_INFO" - } - ], - "PeerCollabRegisterApplication": [ - { - "name": "pcApplication", - "type": "PCPEER_APPLICATION_REGISTRATION_INFO" - }, - { - "name": "registrationType", - "type": "PEER_APPLICATION_REGISTRATION_TYPE" - } - ], - "PeerCollabUnregisterApplication": [ - { - "name": "pApplicationId", - "type": "GUID" - }, - { - "name": "registrationType", - "type": "PEER_APPLICATION_REGISTRATION_TYPE" - } - ], - "PeerCollabGetApplicationRegistrationInfo": [ - { - "name": "pApplicationId", - "type": "GUID" - }, - { - "name": "registrationType", - "type": "PEER_APPLICATION_REGISTRATION_TYPE" - }, - { - "name": "ppApplication", - "type": "PPEER_APPLICATION_REGISTRATION_INFO" - } - ], - "PeerCollabEnumApplicationRegistrationInfo": [ - { - "name": "registrationType", - "type": "PEER_APPLICATION_REGISTRATION_TYPE" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerCollabGetPresenceInfo": [ - { - "name": "pcEndpoint", - "type": "PCPEER_ENDPOINT" - }, - { - "name": "ppPresenceInfo", - "type": "PPEER_PRESENCE_INFO" - } - ], - "PeerCollabEnumApplications": [ - { - "name": "pcEndpoint", - "type": "PCPEER_ENDPOINT" - }, - { - "name": "pApplicationId", - "type": "GUID" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerCollabEnumObjects": [ - { - "name": "pcEndpoint", - "type": "PCPEER_ENDPOINT" - }, - { - "name": "pObjectId", - "type": "GUID" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerCollabEnumEndpoints": [ - { - "name": "pcContact", - "type": "PCPEER_CONTACT" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerCollabRefreshEndpointData": [ - { - "name": "pcEndpoint", - "type": "PCPEER_ENDPOINT" - } - ], - "PeerCollabDeleteEndpointData": [ - { - "name": "pcEndpoint", - "type": "PCPEER_ENDPOINT" - } - ], - "PeerCollabQueryContactData": [ - { - "name": "pcEndpoint", - "type": "PCPEER_ENDPOINT" - }, - { - "name": "ppwzContactData", - "type": "PWSTR" - } - ], - "PeerCollabSubscribeEndpointData": [ - { - "name": "pcEndpoint", - "type": "PCPEER_ENDPOINT" - } - ], - "PeerCollabUnsubscribeEndpointData": [ - { - "name": "pcEndpoint", - "type": "PCPEER_ENDPOINT" - } - ], - "PeerCollabSetPresenceInfo": [ - { - "name": "pcPresenceInfo", - "type": "PCPEER_PRESENCE_INFO" - } - ], - "PeerCollabGetEndpointName": [ - { - "name": "ppwzEndpointName", - "type": "PWSTR" - } - ], - "PeerCollabSetEndpointName": [ - { - "name": "pwzEndpointName", - "type": "PCWSTR" - } - ], - "PeerCollabSetObject": [ - { - "name": "pcObject", - "type": "PCPEER_OBJECT" - } - ], - "PeerCollabDeleteObject": [ - { - "name": "pObjectId", - "type": "GUID" - } - ], - "PeerCollabRegisterEvent": [ - { - "name": "hEvent", - "type": "HANDLE" - }, - { - "name": "cEventRegistration", - "type": "DWORD" - }, - { - "name": "pEventRegistrations", - "type": "PEER_COLLAB_EVENT_REGISTRATION" - }, - { - "name": "phPeerEvent", - "type": "HPEEREVENT" - } - ], - "PeerCollabGetEventData": [ - { - "name": "hPeerEvent", - "type": "HPEEREVENT" - }, - { - "name": "ppEventData", - "type": "PPEER_COLLAB_EVENT_DATA" - } - ], - "PeerCollabUnregisterEvent": [ - { - "name": "hPeerEvent", - "type": "HPEEREVENT" - } - ], - "PeerCollabEnumPeopleNearMe": [ - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerCollabAddContact": [ - { - "name": "pwzContactData", - "type": "PCWSTR" - }, - { - "name": "ppContact", - "type": "PPEER_CONTACT" - } - ], - "PeerCollabDeleteContact": [ - { - "name": "pwzPeerName", - "type": "PCWSTR" - } - ], - "PeerCollabGetContact": [ - { - "name": "pwzPeerName", - "type": "PCWSTR" - }, - { - "name": "ppContact", - "type": "PPEER_CONTACT" - } - ], - "PeerCollabUpdateContact": [ - { - "name": "pContact", - "type": "PCPEER_CONTACT" - } - ], - "PeerCollabEnumContacts": [ - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerCollabExportContact": [ - { - "name": "pwzPeerName", - "type": "PCWSTR" - }, - { - "name": "ppwzContactData", - "type": "PWSTR" - } - ], - "PeerCollabParseContact": [ - { - "name": "pwzContactData", - "type": "PCWSTR" - }, - { - "name": "ppContact", - "type": "PPEER_CONTACT" - } - ], - "PeerNameToPeerHostName": [ - { - "name": "pwzPeerName", - "type": "PCWSTR" - }, - { - "name": "ppwzHostName", - "type": "PWSTR" - } - ], - "PeerHostNameToPeerName": [ - { - "name": "pwzHostName", - "type": "PCWSTR" - }, - { - "name": "ppwzPeerName", - "type": "PWSTR" - } - ], - "PeerPnrpStartup": [ - { - "name": "wVersionRequested", - "type": "WORD" - } - ], - "PeerPnrpRegister": [ - { - "name": "pcwzPeerName", - "type": "PCWSTR" - }, - { - "name": "pRegistrationInfo", - "type": "PPEER_PNRP_REGISTRATION_INFO" - }, - { - "name": "phRegistration", - "type": "HREGISTRATION" - } - ], - "PeerPnrpUpdateRegistration": [ - { - "name": "hRegistration", - "type": "HREGISTRATION" - }, - { - "name": "pRegistrationInfo", - "type": "PPEER_PNRP_REGISTRATION_INFO" - } - ], - "PeerPnrpUnregister": [ - { - "name": "hRegistration", - "type": "HREGISTRATION" - } - ], - "PeerPnrpResolve": [ - { - "name": "pcwzPeerName", - "type": "PCWSTR" - }, - { - "name": "pcwzCloudName", - "type": "PCWSTR" - }, - { - "name": "pcEndpoints", - "type": "ULONG" - }, - { - "name": "ppEndpoints", - "type": "PPEER_PNRP_ENDPOINT_INFO" - } - ], - "PeerPnrpStartResolve": [ - { - "name": "pcwzPeerName", - "type": "PCWSTR" - }, - { - "name": "pcwzCloudName", - "type": "PCWSTR" - }, - { - "name": "cMaxEndpoints", - "type": "ULONG" - }, - { - "name": "hEvent", - "type": "HANDLE" - }, - { - "name": "phResolve", - "type": "HRESOLUTION" - } - ], - "PeerPnrpGetCloudInfo": [ - { - "name": "pcNumClouds", - "type": "ULONG" - }, - { - "name": "ppCloudInfo", - "type": "PPEER_PNRP_CLOUD_INFO" - } - ], - "PeerPnrpGetEndpoint": [ - { - "name": "hResolve", - "type": "HRESOLUTION" - }, - { - "name": "ppEndpoint", - "type": "PPEER_PNRP_ENDPOINT_INFO" - } - ], - "PeerPnrpEndResolve": [ - { - "name": "hResolve", - "type": "HRESOLUTION" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/P2PGraph.json b/qiling/extensions/windows_sdk/p2p_dll.json similarity index 71% rename from qiling/extensions/windows_sdk/P2PGraph.json rename to qiling/extensions/windows_sdk/p2p_dll.json index 819ad8f5d..e4cc4d441 100644 --- a/qiling/extensions/windows_sdk/P2PGraph.json +++ b/qiling/extensions/windows_sdk/p2p_dll.json @@ -1,480 +1,4 @@ { - "PeerGraphStartup": [ - { - "name": "wVersionRequested", - "type": "WORD" - }, - { - "name": "pVersionData", - "type": "PPEER_VERSION_DATA" - } - ], - "PeerGraphFreeData": [ - { - "name": "pvData", - "type": "PVOID" - } - ], - "PeerGraphGetItemCount": [ - { - "name": "hPeerEnum", - "type": "HPEERENUM" - }, - { - "name": "pCount", - "type": "ULONG" - } - ], - "PeerGraphGetNextItem": [ - { - "name": "hPeerEnum", - "type": "HPEERENUM" - }, - { - "name": "pCount", - "type": "ULONG" - }, - { - "name": "pppvItems", - "type": "PVOID" - } - ], - "PeerGraphEndEnumeration": [ - { - "name": "hPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGraphCreate": [ - { - "name": "pGraphProperties", - "type": "PPEER_GRAPH_PROPERTIES" - }, - { - "name": "pwzDatabaseName", - "type": "PCWSTR" - }, - { - "name": "pSecurityInterface", - "type": "PPEER_SECURITY_INTERFACE" - }, - { - "name": "phGraph", - "type": "HGRAPH" - } - ], - "PeerGraphOpen": [ - { - "name": "pwzGraphId", - "type": "PCWSTR" - }, - { - "name": "pwzPeerId", - "type": "PCWSTR" - }, - { - "name": "pwzDatabaseName", - "type": "PCWSTR" - }, - { - "name": "pSecurityInterface", - "type": "PPEER_SECURITY_INTERFACE" - }, - { - "name": "cRecordTypeSyncPrecedence", - "type": "ULONG" - }, - { - "name": "pRecordTypeSyncPrecedence", - "type": "GUID" - }, - { - "name": "phGraph", - "type": "HGRAPH" - } - ], - "PeerGraphListen": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "dwScope", - "type": "DWORD" - }, - { - "name": "dwScopeId", - "type": "DWORD" - }, - { - "name": "wPort", - "type": "WORD" - } - ], - "PeerGraphConnect": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzPeerId", - "type": "PCWSTR" - }, - { - "name": "pAddress", - "type": "PPEER_ADDRESS" - }, - { - "name": "pullConnectionId", - "type": "ULONGLONG" - } - ], - "PeerGraphClose": [ - { - "name": "hGraph", - "type": "HGRAPH" - } - ], - "PeerGraphDelete": [ - { - "name": "pwzGraphId", - "type": "PCWSTR" - }, - { - "name": "pwzPeerId", - "type": "PCWSTR" - }, - { - "name": "pwzDatabaseName", - "type": "PCWSTR" - } - ], - "PeerGraphGetStatus": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pdwStatus", - "type": "DWORD" - } - ], - "PeerGraphGetProperties": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "ppGraphProperties", - "type": "PPEER_GRAPH_PROPERTIES" - } - ], - "PeerGraphSetProperties": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pGraphProperties", - "type": "PPEER_GRAPH_PROPERTIES" - } - ], - "PeerGraphRegisterEvent": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "hEvent", - "type": "HANDLE" - }, - { - "name": "cEventRegistrations", - "type": "ULONG" - }, - { - "name": "pEventRegistrations", - "type": "PEER_GRAPH_EVENT_REGISTRATION" - }, - { - "name": "phPeerEvent", - "type": "HPEEREVENT" - } - ], - "PeerGraphUnregisterEvent": [ - { - "name": "hPeerEvent", - "type": "HPEEREVENT" - } - ], - "PeerGraphGetEventData": [ - { - "name": "hPeerEvent", - "type": "HPEEREVENT" - }, - { - "name": "ppEventData", - "type": "PPEER_GRAPH_EVENT_DATA" - } - ], - "PeerGraphGetRecord": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pRecordId", - "type": "GUID" - }, - { - "name": "ppRecord", - "type": "PPEER_RECORD" - } - ], - "PeerGraphAddRecord": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pRecord", - "type": "PPEER_RECORD" - }, - { - "name": "pRecordId", - "type": "GUID" - } - ], - "PeerGraphUpdateRecord": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pRecord", - "type": "PPEER_RECORD" - } - ], - "PeerGraphDeleteRecord": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pRecordId", - "type": "GUID" - }, - { - "name": "fLocal", - "type": "BOOL" - } - ], - "PeerGraphEnumRecords": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pRecordType", - "type": "GUID" - }, - { - "name": "pwzPeerId", - "type": "PCWSTR" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGraphSearchRecords": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzCriteria", - "type": "PCWSTR" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGraphExportDatabase": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzFilePath", - "type": "PCWSTR" - } - ], - "PeerGraphImportDatabase": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzFilePath", - "type": "PCWSTR" - } - ], - "PeerGraphValidateDeferredRecords": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "cRecordIds", - "type": "ULONG" - }, - { - "name": "pRecordIds", - "type": "GUID" - } - ], - "PeerGraphOpenDirectConnection": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzPeerId", - "type": "PCWSTR" - }, - { - "name": "pAddress", - "type": "PPEER_ADDRESS" - }, - { - "name": "pullConnectionId", - "type": "ULONGLONG" - } - ], - "PeerGraphSendData": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "ullConnectionId", - "type": "ULONGLONG" - }, - { - "name": "pType", - "type": "GUID" - }, - { - "name": "cbData", - "type": "ULONG" - }, - { - "name": "pvData", - "type": "PVOID" - } - ], - "PeerGraphCloseDirectConnection": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "ullConnectionId", - "type": "ULONGLONG" - } - ], - "PeerGraphEnumConnections": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGraphEnumNodes": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzPeerId", - "type": "PCWSTR" - }, - { - "name": "phPeerEnum", - "type": "HPEERENUM" - } - ], - "PeerGraphSetPresence": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "fPresent", - "type": "BOOL" - } - ], - "PeerGraphGetNodeInfo": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "ullNodeId", - "type": "ULONGLONG" - }, - { - "name": "ppNodeInfo", - "type": "PPEER_NODE_INFO" - } - ], - "PeerGraphSetNodeAttributes": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pwzAttributes", - "type": "PCWSTR" - } - ], - "PeerGraphPeerTimeToUniversalTime": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pftPeerTime", - "type": "FILETIME" - }, - { - "name": "pftUniversalTime", - "type": "FILETIME" - } - ], - "PeerGraphUniversalTimeToPeerTime": [ - { - "name": "hGraph", - "type": "HGRAPH" - }, - { - "name": "pftUniversalTime", - "type": "FILETIME" - }, - { - "name": "pftPeerTime", - "type": "FILETIME" - } - ], "PeerFreeData": [ { "name": "pvData", diff --git a/qiling/extensions/windows_sdk/p2pgraph_dll.json b/qiling/extensions/windows_sdk/p2pgraph_dll.json new file mode 100644 index 000000000..f2bc2e441 --- /dev/null +++ b/qiling/extensions/windows_sdk/p2pgraph_dll.json @@ -0,0 +1,478 @@ +{ + "PeerGraphStartup": [ + { + "name": "wVersionRequested", + "type": "WORD" + }, + { + "name": "pVersionData", + "type": "PPEER_VERSION_DATA" + } + ], + "PeerGraphFreeData": [ + { + "name": "pvData", + "type": "PVOID" + } + ], + "PeerGraphGetItemCount": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + } + ], + "PeerGraphGetNextItem": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + }, + { + "name": "pCount", + "type": "ULONG" + }, + { + "name": "pppvItems", + "type": "PVOID" + } + ], + "PeerGraphEndEnumeration": [ + { + "name": "hPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphCreate": [ + { + "name": "pGraphProperties", + "type": "PPEER_GRAPH_PROPERTIES" + }, + { + "name": "pwzDatabaseName", + "type": "PCWSTR" + }, + { + "name": "pSecurityInterface", + "type": "PPEER_SECURITY_INTERFACE" + }, + { + "name": "phGraph", + "type": "HGRAPH" + } + ], + "PeerGraphOpen": [ + { + "name": "pwzGraphId", + "type": "PCWSTR" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pwzDatabaseName", + "type": "PCWSTR" + }, + { + "name": "pSecurityInterface", + "type": "PPEER_SECURITY_INTERFACE" + }, + { + "name": "cRecordTypeSyncPrecedence", + "type": "ULONG" + }, + { + "name": "pRecordTypeSyncPrecedence", + "type": "GUID" + }, + { + "name": "phGraph", + "type": "HGRAPH" + } + ], + "PeerGraphListen": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "dwScope", + "type": "DWORD" + }, + { + "name": "dwScopeId", + "type": "DWORD" + }, + { + "name": "wPort", + "type": "WORD" + } + ], + "PeerGraphConnect": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pAddress", + "type": "PPEER_ADDRESS" + }, + { + "name": "pullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGraphClose": [ + { + "name": "hGraph", + "type": "HGRAPH" + } + ], + "PeerGraphDelete": [ + { + "name": "pwzGraphId", + "type": "PCWSTR" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pwzDatabaseName", + "type": "PCWSTR" + } + ], + "PeerGraphGetStatus": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pdwStatus", + "type": "DWORD" + } + ], + "PeerGraphGetProperties": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ppGraphProperties", + "type": "PPEER_GRAPH_PROPERTIES" + } + ], + "PeerGraphSetProperties": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pGraphProperties", + "type": "PPEER_GRAPH_PROPERTIES" + } + ], + "PeerGraphRegisterEvent": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "hEvent", + "type": "HANDLE" + }, + { + "name": "cEventRegistrations", + "type": "ULONG" + }, + { + "name": "pEventRegistrations", + "type": "PEER_GRAPH_EVENT_REGISTRATION" + }, + { + "name": "phPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGraphUnregisterEvent": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + } + ], + "PeerGraphGetEventData": [ + { + "name": "hPeerEvent", + "type": "HPEEREVENT" + }, + { + "name": "ppEventData", + "type": "PPEER_GRAPH_EVENT_DATA" + } + ], + "PeerGraphGetRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecordId", + "type": "GUID" + }, + { + "name": "ppRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGraphAddRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + }, + { + "name": "pRecordId", + "type": "GUID" + } + ], + "PeerGraphUpdateRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecord", + "type": "PPEER_RECORD" + } + ], + "PeerGraphDeleteRecord": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecordId", + "type": "GUID" + }, + { + "name": "fLocal", + "type": "BOOL" + } + ], + "PeerGraphEnumRecords": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pRecordType", + "type": "GUID" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphSearchRecords": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzCriteria", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphExportDatabase": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGraphImportDatabase": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzFilePath", + "type": "PCWSTR" + } + ], + "PeerGraphValidateDeferredRecords": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "cRecordIds", + "type": "ULONG" + }, + { + "name": "pRecordIds", + "type": "GUID" + } + ], + "PeerGraphOpenDirectConnection": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "pAddress", + "type": "PPEER_ADDRESS" + }, + { + "name": "pullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGraphSendData": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + }, + { + "name": "pType", + "type": "GUID" + }, + { + "name": "cbData", + "type": "ULONG" + }, + { + "name": "pvData", + "type": "PVOID" + } + ], + "PeerGraphCloseDirectConnection": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ullConnectionId", + "type": "ULONGLONG" + } + ], + "PeerGraphEnumConnections": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphEnumNodes": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzPeerId", + "type": "PCWSTR" + }, + { + "name": "phPeerEnum", + "type": "HPEERENUM" + } + ], + "PeerGraphSetPresence": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "fPresent", + "type": "BOOL" + } + ], + "PeerGraphGetNodeInfo": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "ullNodeId", + "type": "ULONGLONG" + }, + { + "name": "ppNodeInfo", + "type": "PPEER_NODE_INFO" + } + ], + "PeerGraphSetNodeAttributes": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pwzAttributes", + "type": "PCWSTR" + } + ], + "PeerGraphPeerTimeToUniversalTime": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + } + ], + "PeerGraphUniversalTimeToPeerTime": [ + { + "name": "hGraph", + "type": "HGRAPH" + }, + { + "name": "pftUniversalTime", + "type": "FILETIME" + }, + { + "name": "pftPeerTime", + "type": "FILETIME" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/pathcch.json b/qiling/extensions/windows_sdk/pathcch_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/pathcch.json rename to qiling/extensions/windows_sdk/pathcch_lib.json diff --git a/qiling/extensions/windows_sdk/pdh.json b/qiling/extensions/windows_sdk/pdh_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/pdh.json rename to qiling/extensions/windows_sdk/pdh_dll.json diff --git a/qiling/extensions/windows_sdk/peerdist.json b/qiling/extensions/windows_sdk/peerdist_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/peerdist.json rename to qiling/extensions/windows_sdk/peerdist_dll.json diff --git a/qiling/extensions/windows_sdk/powrprof.json b/qiling/extensions/windows_sdk/powrprof.json deleted file mode 100644 index 0bed5d151..000000000 --- a/qiling/extensions/windows_sdk/powrprof.json +++ /dev/null @@ -1,174 +0,0 @@ -{ - "PowerReadACValue": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Type", - "type": "PULONG" - }, - { - "name": "Buffer", - "type": "LPBYTE" - }, - { - "name": "BufferSize", - "type": "LPDWORD" - } - ], - "PowerReadDCValue": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "Type", - "type": "PULONG" - }, - { - "name": "Buffer", - "type": "PUCHAR" - }, - { - "name": "BufferSize", - "type": "LPDWORD" - } - ], - "PowerWriteACValueIndex": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "AcValueIndex", - "type": "DWORD" - } - ], - "PowerWriteDCValueIndex": [ - { - "name": "RootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - }, - { - "name": "SubGroupOfPowerSettingsGuid", - "type": "GUID" - }, - { - "name": "PowerSettingGuid", - "type": "GUID" - }, - { - "name": "DcValueIndex", - "type": "DWORD" - } - ], - "PowerGetActiveScheme": [ - { - "name": "UserRootPowerKey", - "type": "HKEY" - }, - { - "name": "ActivePolicyGuid", - "type": "GUID" - } - ], - "PowerSetActiveScheme": [ - { - "name": "UserRootPowerKey", - "type": "HKEY" - }, - { - "name": "SchemeGuid", - "type": "GUID" - } - ], - "PowerSettingRegisterNotification": [ - { - "name": "SettingGuid", - "type": "LPCGUID" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "Recipient", - "type": "HANDLE" - }, - { - "name": "RegistrationHandle", - "type": "PHPOWERNOTIFY" - } - ], - "PowerSettingUnregisterNotification": [ - { - "name": "RegistrationHandle", - "type": "HPOWERNOTIFY" - } - ], - "PowerRegisterForEffectivePowerModeNotifications": [ - { - "name": "Version", - "type": "ULONG" - }, - { - "name": "Callback", - "type": "EFFECTIVE_POWER_MODE_CALLBACK" - }, - { - "name": "Context", - "type": "void" - }, - { - "name": "RegistrationHandle", - "type": "void" - } - ], - "PowerUnregisterFromEffectivePowerModeNotifications": [ - { - "name": "RegistrationHandle", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/powrprof_dll.json b/qiling/extensions/windows_sdk/powrprof_dll.json new file mode 100644 index 000000000..40b3e9dac --- /dev/null +++ b/qiling/extensions/windows_sdk/powrprof_dll.json @@ -0,0 +1,1238 @@ +{ + "GetPwrDiskSpindownRange": [ + { + "name": "puiMax", + "type": "PUINT" + }, + { + "name": "puiMin", + "type": "PUINT" + } + ], + "EnumPwrSchemes": [ + { + "name": "lpfn", + "type": "PWRSCHEMESENUMPROC" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "ReadGlobalPwrPolicy": [ + { + "name": "pGlobalPowerPolicy", + "type": "PGLOBAL_POWER_POLICY" + } + ], + "ReadPwrScheme": [ + { + "name": "uiID", + "type": "UINT" + }, + { + "name": "pPowerPolicy", + "type": "PPOWER_POLICY" + } + ], + "WritePwrScheme": [ + { + "name": "puiID", + "type": "PUINT" + }, + { + "name": "lpszSchemeName", + "type": "LPCWSTR" + }, + { + "name": "lpszDescription", + "type": "LPCWSTR" + }, + { + "name": "lpScheme", + "type": "PPOWER_POLICY" + } + ], + "WriteGlobalPwrPolicy": [ + { + "name": "pGlobalPowerPolicy", + "type": "PGLOBAL_POWER_POLICY" + } + ], + "DeletePwrScheme": [ + { + "name": "uiID", + "type": "UINT" + } + ], + "GetActivePwrScheme": [ + { + "name": "puiID", + "type": "PUINT" + } + ], + "SetActivePwrScheme": [ + { + "name": "uiID", + "type": "UINT" + }, + { + "name": "pGlobalPowerPolicy", + "type": "PGLOBAL_POWER_POLICY" + }, + { + "name": "pPowerPolicy", + "type": "PPOWER_POLICY" + } + ], + "IsPwrSuspendAllowed": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsPwrHibernateAllowed": [ + { + "name": "VOID", + "type": "void" + } + ], + "IsPwrShutdownAllowed": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetSuspendState": [ + { + "name": "bHibernate", + "type": "BOOLEAN" + }, + { + "name": "bForce", + "type": "BOOLEAN" + }, + { + "name": "bWakeupEventsDisabled", + "type": "BOOLEAN" + } + ], + "GetCurrentPowerPolicies": [ + { + "name": "pGlobalPowerPolicy", + "type": "PGLOBAL_POWER_POLICY" + }, + { + "name": "pPowerPolicy", + "type": "PPOWER_POLICY" + } + ], + "CanUserWritePwrScheme": [ + { + "name": "VOID", + "type": "void" + } + ], + "ReadProcessorPwrScheme": [ + { + "name": "uiID", + "type": "UINT" + }, + { + "name": "pMachineProcessorPowerPolicy", + "type": "PMACHINE_PROCESSOR_POWER_POLICY" + } + ], + "WriteProcessorPwrScheme": [ + { + "name": "uiID", + "type": "UINT" + }, + { + "name": "pMachineProcessorPowerPolicy", + "type": "PMACHINE_PROCESSOR_POWER_POLICY" + } + ], + "PowerIsSettingRangeDefined": [ + { + "name": "SubKeyGuid", + "type": "GUID" + }, + { + "name": "SettingGuid", + "type": "GUID" + } + ], + "PowerSettingAccessCheckEx": [ + { + "name": "AccessFlags", + "type": "POWER_DATA_ACCESSOR" + }, + { + "name": "PowerGuid", + "type": "GUID" + }, + { + "name": "AccessType", + "type": "REGSAM" + } + ], + "PowerSettingAccessCheck": [ + { + "name": "AccessFlags", + "type": "POWER_DATA_ACCESSOR" + }, + { + "name": "PowerGuid", + "type": "GUID" + } + ], + "PowerReadACValueIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "AcValueIndex", + "type": "LPDWORD" + } + ], + "PowerReadDCValueIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DcValueIndex", + "type": "LPDWORD" + } + ], + "PowerReadFriendlyName": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadDescription": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadPossibleValue": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "PULONG" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadPossibleFriendlyName": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadPossibleDescription": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadValueMin": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueMinimum", + "type": "LPDWORD" + } + ], + "PowerReadValueMax": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueMaximum", + "type": "LPDWORD" + } + ], + "PowerReadValueIncrement": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueIncrement", + "type": "LPDWORD" + } + ], + "PowerReadValueUnitsSpecifier": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadACDefaultIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemePersonalityGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "AcDefaultIndex", + "type": "LPDWORD" + } + ], + "PowerReadDCDefaultIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemePersonalityGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DcDefaultIndex", + "type": "LPDWORD" + } + ], + "PowerReadIconResourceSpecifier": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadSettingAttributes": [ + { + "name": "SubGroupGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + } + ], + "PowerWriteFriendlyName": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWriteDescription": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWritePossibleValue": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "ULONG" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWritePossibleFriendlyName": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWritePossibleDescription": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWriteValueMin": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueMinimum", + "type": "DWORD" + } + ], + "PowerWriteValueMax": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueMaximum", + "type": "DWORD" + } + ], + "PowerWriteValueIncrement": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "ValueIncrement", + "type": "DWORD" + } + ], + "PowerWriteValueUnitsSpecifier": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWriteACDefaultIndex": [ + { + "name": "RootSystemPowerKey", + "type": "HKEY" + }, + { + "name": "SchemePersonalityGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DefaultAcIndex", + "type": "DWORD" + } + ], + "PowerWriteDCDefaultIndex": [ + { + "name": "RootSystemPowerKey", + "type": "HKEY" + }, + { + "name": "SchemePersonalityGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DefaultDcIndex", + "type": "DWORD" + } + ], + "PowerWriteIconResourceSpecifier": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerWriteSettingAttributes": [ + { + "name": "SubGroupGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Attributes", + "type": "DWORD" + } + ], + "PowerDuplicateScheme": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SourceSchemeGuid", + "type": "GUID" + }, + { + "name": "DestinationSchemeGuid", + "type": "GUID" + } + ], + "PowerImportPowerScheme": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "ImportFileNamePath", + "type": "LPCWSTR" + }, + { + "name": "DestinationSchemeGuid", + "type": "GUID" + } + ], + "PowerDeleteScheme": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + } + ], + "PowerRemovePowerSetting": [ + { + "name": "PowerSettingSubKeyGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + } + ], + "PowerCreateSetting": [ + { + "name": "RootSystemPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + } + ], + "PowerCreatePossibleSetting": [ + { + "name": "RootSystemPowerKey", + "type": "HKEY" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "PossibleSettingIndex", + "type": "ULONG" + } + ], + "PowerEnumerate": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "AccessFlags", + "type": "POWER_DATA_ACCESSOR" + }, + { + "name": "Index", + "type": "ULONG" + }, + { + "name": "Buffer", + "type": "UCHAR" + }, + { + "name": "BufferSize", + "type": "DWORD" + } + ], + "PowerCanRestoreIndividualDefaultPowerScheme": [ + { + "name": "SchemeGuid", + "type": "GUID" + } + ], + "PowerRestoreIndividualDefaultPowerScheme": [ + { + "name": "SchemeGuid", + "type": "GUID" + } + ], + "PowerRestoreDefaultPowerSchemes": [ + { + "name": "VOID", + "type": "void" + } + ], + "PowerReplaceDefaultPowerSchemes": [ + { + "name": "VOID", + "type": "void" + } + ], + "PowerDeterminePlatformRole": [ + { + "name": "VOID", + "type": "void" + } + ], + "DevicePowerEnumDevices": [ + { + "name": "QueryIndex", + "type": "ULONG" + }, + { + "name": "QueryInterpretationFlags", + "type": "ULONG" + }, + { + "name": "QueryFlags", + "type": "ULONG" + }, + { + "name": "pReturnBuffer", + "type": "PBYTE" + }, + { + "name": "pBufferSize", + "type": "PULONG" + } + ], + "DevicePowerSetDeviceState": [ + { + "name": "DeviceDescription", + "type": "LPCWSTR" + }, + { + "name": "SetFlags", + "type": "ULONG" + }, + { + "name": "SetData", + "type": "PVOID" + } + ], + "DevicePowerOpen": [ + { + "name": "DebugMask", + "type": "ULONG" + } + ], + "DevicePowerClose": [ + { + "name": "VOID", + "type": "void" + } + ], + "PowerReportThermalEvent": [ + { + "name": "Event", + "type": "PTHERMAL_EVENT" + } + ], + "CallNtPowerInformation": [ + { + "name": "InformationLevel", + "type": "POWER_INFORMATION_LEVEL" + }, + { + "name": "InputBuffer", + "type": "PVOID" + }, + { + "name": "InputBufferLength", + "type": "ULONG" + }, + { + "name": "OutputBuffer", + "type": "PVOID" + }, + { + "name": "OutputBufferLength", + "type": "ULONG" + } + ], + "GetPwrCapabilities": [ + { + "name": "lpspc", + "type": "PSYSTEM_POWER_CAPABILITIES" + } + ], + "PowerDeterminePlatformRoleEx": [ + { + "name": "Version", + "type": "ULONG" + } + ], + "PowerRegisterSuspendResumeNotification": [ + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Recipient", + "type": "HANDLE" + }, + { + "name": "RegistrationHandle", + "type": "PHPOWERNOTIFY" + } + ], + "PowerUnregisterSuspendResumeNotification": [ + { + "name": "RegistrationHandle", + "type": "HPOWERNOTIFY" + } + ], + "PowerReadACValue": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "LPBYTE" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerReadDCValue": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "Type", + "type": "PULONG" + }, + { + "name": "Buffer", + "type": "PUCHAR" + }, + { + "name": "BufferSize", + "type": "LPDWORD" + } + ], + "PowerWriteACValueIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "AcValueIndex", + "type": "DWORD" + } + ], + "PowerWriteDCValueIndex": [ + { + "name": "RootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + }, + { + "name": "SubGroupOfPowerSettingsGuid", + "type": "GUID" + }, + { + "name": "PowerSettingGuid", + "type": "GUID" + }, + { + "name": "DcValueIndex", + "type": "DWORD" + } + ], + "PowerGetActiveScheme": [ + { + "name": "UserRootPowerKey", + "type": "HKEY" + }, + { + "name": "ActivePolicyGuid", + "type": "GUID" + } + ], + "PowerSetActiveScheme": [ + { + "name": "UserRootPowerKey", + "type": "HKEY" + }, + { + "name": "SchemeGuid", + "type": "GUID" + } + ], + "PowerSettingRegisterNotification": [ + { + "name": "SettingGuid", + "type": "LPCGUID" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "Recipient", + "type": "HANDLE" + }, + { + "name": "RegistrationHandle", + "type": "PHPOWERNOTIFY" + } + ], + "PowerSettingUnregisterNotification": [ + { + "name": "RegistrationHandle", + "type": "HPOWERNOTIFY" + } + ], + "PowerRegisterForEffectivePowerModeNotifications": [ + { + "name": "Version", + "type": "ULONG" + }, + { + "name": "Callback", + "type": "EFFECTIVE_POWER_MODE_CALLBACK" + }, + { + "name": "Context", + "type": "void" + }, + { + "name": "RegistrationHandle", + "type": "void" + } + ], + "PowerUnregisterFromEffectivePowerModeNotifications": [ + { + "name": "RegistrationHandle", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/prntvpt.json b/qiling/extensions/windows_sdk/prntvpt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/prntvpt.json rename to qiling/extensions/windows_sdk/prntvpt_dll.json diff --git a/qiling/extensions/windows_sdk/propsys.json b/qiling/extensions/windows_sdk/propsys_dll.json similarity index 66% rename from qiling/extensions/windows_sdk/propsys.json rename to qiling/extensions/windows_sdk/propsys_dll.json index 64107abeb..d6b2d087b 100644 --- a/qiling/extensions/windows_sdk/propsys.json +++ b/qiling/extensions/windows_sdk/propsys_dll.json @@ -1,4 +1,974 @@ { + "PropVariantToWinRTPropertyValue": [ + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "WinRTPropertyValueToPropVariant": [ + { + "name": "punkPropertyValue", + "type": "IUnknown" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSFormatForDisplay": [ + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pdfFlags", + "type": "PROPDESC_FORMAT_FLAGS" + }, + { + "name": "pwszText", + "type": "LPWSTR" + }, + { + "name": "cchText", + "type": "DWORD" + } + ], + "PSFormatForDisplayAlloc": [ + { + "name": "key", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "pdff", + "type": "PROPDESC_FORMAT_FLAGS" + }, + { + "name": "ppszDisplay", + "type": "PWSTR" + } + ], + "PSFormatPropertyValue": [ + { + "name": "pps", + "type": "IPropertyStore" + }, + { + "name": "ppd", + "type": "IPropertyDescription" + }, + { + "name": "pdff", + "type": "PROPDESC_FORMAT_FLAGS" + }, + { + "name": "ppszDisplay", + "type": "LPWSTR" + } + ], + "PSGetImageReferenceForValue": [ + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "ppszImageRes", + "type": "PWSTR" + } + ], + "PSStringFromPropertyKey": [ + { + "name": "pkey", + "type": "PROPERTYKEY" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "cch", + "type": "UINT" + } + ], + "PSPropertyKeyFromString": [ + { + "name": "pszString", + "type": "LPCWSTR" + }, + { + "name": "pkey", + "type": "PROPERTYKEY" + } + ], + "PSCreateMemoryPropertyStore": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreateDelayedMultiplexPropertyStore": [ + { + "name": "flags", + "type": "GETPROPERTYSTOREFLAGS" + }, + { + "name": "pdpsf", + "type": "IDelayedPropertyStoreFactory" + }, + { + "name": "rgStoreIds", + "type": "DWORD" + }, + { + "name": "cStores", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreateMultiplexPropertyStore": [ + { + "name": "prgpunkStores", + "type": "IUnknown" + }, + { + "name": "cStores", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreatePropertyChangeArray": [ + { + "name": "rgpropkey", + "type": "PROPERTYKEY" + }, + { + "name": "rgflags", + "type": "PKA_FLAGS" + }, + { + "name": "rgpropvar", + "type": "PROPVARIANT" + }, + { + "name": "cChanges", + "type": "UINT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreateSimplePropertyChange": [ + { + "name": "flags", + "type": "PKA_FLAGS" + }, + { + "name": "key", + "type": "PROPERTYKEY" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyDescription": [ + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyDescriptionByName": [ + { + "name": "pszCanonicalName", + "type": "LPCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSLookupPropertyHandlerCLSID": [ + { + "name": "pszFilePath", + "type": "PCWSTR" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "PSGetItemPropertyHandler": [ + { + "name": "punkItem", + "type": "IUnknown" + }, + { + "name": "fReadWrite", + "type": "BOOL" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetItemPropertyHandlerWithCreateObject": [ + { + "name": "punkItem", + "type": "IUnknown" + }, + { + "name": "fReadWrite", + "type": "BOOL" + }, + { + "name": "punkCreateObject", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyValue": [ + { + "name": "pps", + "type": "IPropertyStore" + }, + { + "name": "ppd", + "type": "IPropertyDescription" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSSetPropertyValue": [ + { + "name": "pps", + "type": "IPropertyStore" + }, + { + "name": "ppd", + "type": "IPropertyDescription" + }, + { + "name": "propvar", + "type": "PROPVARIANT" + } + ], + "PSRegisterPropertySchema": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "PSUnregisterPropertySchema": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "PSRefreshPropertySchema": [ + { + "name": "VOID", + "type": "void" + } + ], + "PSEnumeratePropertyDescriptions": [ + { + "name": "filterOn", + "type": "PROPDESC_ENUMFILTER" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyKeyFromName": [ + { + "name": "pszName", + "type": "PCWSTR" + }, + { + "name": "ppropkey", + "type": "PROPERTYKEY" + } + ], + "PSGetNameFromPropertyKey": [ + { + "name": "propkey", + "type": "PROPERTYKEY" + }, + { + "name": "ppszCanonicalName", + "type": "PWSTR" + } + ], + "PSCoerceToCanonicalValue": [ + { + "name": "key", + "type": "PROPERTYKEY" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSGetPropertyDescriptionListFromString": [ + { + "name": "pszPropList", + "type": "LPCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreatePropertyStoreFromPropertySetStorage": [ + { + "name": "ppss", + "type": "IPropertySetStorage" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreatePropertyStoreFromObject": [ + { + "name": "punk", + "type": "IUnknown" + }, + { + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSCreateAdapterFromPropertyStore": [ + { + "name": "pps", + "type": "IPropertyStore" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertySystem": [ + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSGetPropertyFromPropertyStorage": [ + { + "name": "psps", + "type": "PCUSERIALIZEDPROPSTORAGE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "rpkey", + "type": "PROPERTYKEY" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSGetNamedPropertyFromPropertyStorage": [ + { + "name": "psps", + "type": "PCUSERIALIZEDPROPSTORAGE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "pszName", + "type": "LPCWSTR" + }, + { + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "PSPropertyBag_ReadType": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "var", + "type": "VARIANT" + }, + { + "name": "type", + "type": "VARTYPE" + } + ], + "PSPropertyBag_ReadStr": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "LPWSTR" + }, + { + "name": "characterCount", + "type": "int" + } + ], + "PSPropertyBag_ReadStrAlloc": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "PWSTR" + } + ], + "PSPropertyBag_ReadBSTR": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "BSTR" + } + ], + "PSPropertyBag_WriteStr": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "LPCWSTR" + } + ], + "PSPropertyBag_WriteBSTR": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "BSTR" + } + ], + "PSPropertyBag_ReadInt": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "INT" + } + ], + "PSPropertyBag_WriteInt": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "INT" + } + ], + "PSPropertyBag_ReadSHORT": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "SHORT" + } + ], + "PSPropertyBag_WriteSHORT": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "SHORT" + } + ], + "PSPropertyBag_ReadLONG": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "LONG" + } + ], + "PSPropertyBag_WriteLONG": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "LONG" + } + ], + "PSPropertyBag_ReadDWORD": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "DWORD" + } + ], + "PSPropertyBag_WriteDWORD": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "DWORD" + } + ], + "PSPropertyBag_ReadBOOL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "BOOL" + } + ], + "PSPropertyBag_WriteBOOL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "BOOL" + } + ], + "PSPropertyBag_ReadPOINTL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "POINTL" + } + ], + "PSPropertyBag_WritePOINTL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "POINTL" + } + ], + "PSPropertyBag_ReadPOINTS": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "POINTS" + } + ], + "PSPropertyBag_WritePOINTS": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "POINTS" + } + ], + "PSPropertyBag_ReadRECTL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "RECTL" + } + ], + "PSPropertyBag_WriteRECTL": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "RECTL" + } + ], + "PSPropertyBag_ReadStream": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "IStream" + } + ], + "PSPropertyBag_WriteStream": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "IStream" + } + ], + "PSPropertyBag_Delete": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + } + ], + "PSPropertyBag_ReadULONGLONG": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "ULONGLONG" + } + ], + "PSPropertyBag_WriteULONGLONG": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "ULONGLONG" + } + ], + "PSPropertyBag_ReadUnknown": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "PSPropertyBag_WriteUnknown": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "punk", + "type": "IUnknown" + } + ], + "PSPropertyBag_ReadGUID": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "GUID" + } + ], + "PSPropertyBag_WriteGUID": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "GUID" + } + ], + "PSPropertyBag_ReadPropertyKey": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "PROPERTYKEY" + } + ], + "PSPropertyBag_WritePropertyKey": [ + { + "name": "propBag", + "type": "IPropertyBag" + }, + { + "name": "propName", + "type": "LPCWSTR" + }, + { + "name": "value", + "type": "PROPERTYKEY" + } + ], "InitPropVariantFromResource": [ { "name": "hinst", diff --git a/qiling/extensions/windows_sdk/query_dll.json b/qiling/extensions/windows_sdk/query_dll.json new file mode 100644 index 000000000..0e3cc4aa1 --- /dev/null +++ b/qiling/extensions/windows_sdk/query_dll.json @@ -0,0 +1,16 @@ +{ + "LoadIFilter": [ + { + "name": "pwcsPath", + "type": "PCWSTR" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "ppIUnk", + "type": "void" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Rasapi32.json b/qiling/extensions/windows_sdk/rasapi32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Rasapi32.json rename to qiling/extensions/windows_sdk/rasapi32_dll.json diff --git a/qiling/extensions/windows_sdk/rasdlg.json b/qiling/extensions/windows_sdk/rasdlg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/rasdlg.json rename to qiling/extensions/windows_sdk/rasdlg_dll.json diff --git a/qiling/extensions/windows_sdk/Rasman.json b/qiling/extensions/windows_sdk/rasman_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Rasman.json rename to qiling/extensions/windows_sdk/rasman_dll.json diff --git a/qiling/extensions/windows_sdk/roerrorapi.json b/qiling/extensions/windows_sdk/roerrorapi.json deleted file mode 100644 index fa976cd6d..000000000 --- a/qiling/extensions/windows_sdk/roerrorapi.json +++ /dev/null @@ -1,194 +0,0 @@ -{ - "RoGetErrorReportingFlags": [ - { - "name": "pflags", - "type": "UINT32" - } - ], - "RoSetErrorReportingFlags": [ - { - "name": "flags", - "type": "UINT32" - } - ], - "RoResolveRestrictedErrorInfoReference": [ - { - "name": "reference", - "type": "PCWSTR" - }, - { - "name": "ppRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "SetRestrictedErrorInfo": [ - { - "name": "pRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "GetRestrictedErrorInfo": [ - { - "name": "ppRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "RoOriginateErrorW": [ - { - "name": "error", - "type": "HRESULT" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "message", - "type": "PCWSTR" - } - ], - "RoOriginateError": [ - { - "name": "error", - "type": "HRESULT" - }, - { - "name": "message", - "type": "HSTRING" - } - ], - "RoTransformErrorW": [ - { - "name": "oldError", - "type": "HRESULT" - }, - { - "name": "newError", - "type": "HRESULT" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "message", - "type": "PCWSTR" - } - ], - "RoTransformError": [ - { - "name": "oldError", - "type": "HRESULT" - }, - { - "name": "newError", - "type": "HRESULT" - }, - { - "name": "message", - "type": "HSTRING" - } - ], - "RoCaptureErrorContext": [ - { - "name": "hr", - "type": "HRESULT" - } - ], - "RoFailFastWithErrorContext": [ - { - "name": "hrError", - "type": "HRESULT" - } - ], - "RoOriginateLanguageException": [ - { - "name": "error", - "type": "HRESULT" - }, - { - "name": "message", - "type": "HSTRING" - }, - { - "name": "languageException", - "type": "IUnknown" - } - ], - "RoClearError": [ - { - "name": "VOID", - "type": "void" - } - ], - "RoReportUnhandledError": [ - { - "name": "pRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "RoInspectThreadErrorInfo": [ - { - "name": "targetTebAddress", - "type": "UINT_PTR" - }, - { - "name": "machine", - "type": "USHORT" - }, - { - "name": "readMemoryCallback", - "type": "PINSPECT_MEMORY_CALLBACK" - }, - { - "name": "context", - "type": "PVOID" - }, - { - "name": "targetErrorInfoAddress", - "type": "UINT_PTR" - } - ], - "RoInspectCapturedStackBackTrace": [ - { - "name": "targetErrorInfoAddress", - "type": "UINT_PTR" - }, - { - "name": "machine", - "type": "USHORT" - }, - { - "name": "readMemoryCallback", - "type": "PINSPECT_MEMORY_CALLBACK" - }, - { - "name": "context", - "type": "PVOID" - }, - { - "name": "frameCount", - "type": "UINT32" - }, - { - "name": "targetBackTraceAddress", - "type": "UINT_PTR" - } - ], - "RoReportFailedDelegate": [ - { - "name": "punkDelegate", - "type": "IUnknown" - }, - { - "name": "pRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "IsErrorPropagationEnabled": [ - { - "name": "VOID", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/roerrorapi_h.json b/qiling/extensions/windows_sdk/roerrorapi_h.json new file mode 100644 index 000000000..5eb6bea3c --- /dev/null +++ b/qiling/extensions/windows_sdk/roerrorapi_h.json @@ -0,0 +1,46 @@ +{ + "RoGetErrorReportingFlags": [ + { + "name": "pflags", + "type": "UINT32" + } + ], + "RoSetErrorReportingFlags": [ + { + "name": "flags", + "type": "UINT32" + } + ], + "RoTransformErrorW": [ + { + "name": "oldError", + "type": "HRESULT" + }, + { + "name": "newError", + "type": "HRESULT" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "message", + "type": "PCWSTR" + } + ], + "RoTransformError": [ + { + "name": "oldError", + "type": "HRESULT" + }, + { + "name": "newError", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/rometadata.json b/qiling/extensions/windows_sdk/rometadata_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/rometadata.json rename to qiling/extensions/windows_sdk/rometadata_dll.json diff --git a/qiling/extensions/windows_sdk/Rpcns4.json b/qiling/extensions/windows_sdk/rpcns4_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Rpcns4.json rename to qiling/extensions/windows_sdk/rpcns4_dll.json diff --git a/qiling/extensions/windows_sdk/rpcrt4_dll.json b/qiling/extensions/windows_sdk/rpcrt4_dll.json new file mode 100644 index 000000000..75b3eeb05 --- /dev/null +++ b/qiling/extensions/windows_sdk/rpcrt4_dll.json @@ -0,0 +1,3162 @@ +{ + "RpcBindingCopy": [ + { + "name": "SourceBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "DestinationBinding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingFree": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingSetOption": [ + { + "name": "hBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "option", + "type": "unsigned long" + }, + { + "name": "optionValue", + "type": "ULONG_PTR" + } + ], + "RpcBindingInqOption": [ + { + "name": "hBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "option", + "type": "unsigned long" + }, + { + "name": "pOptionValue", + "type": "ULONG_PTR" + } + ], + "RpcBindingFromStringBindingA": [ + { + "name": "StringBinding", + "type": "RPC_CSTR" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingFromStringBindingW": [ + { + "name": "StringBinding", + "type": "RPC_WSTR" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingInqObject": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + } + ], + "RpcBindingReset": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingSetObject": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + } + ], + "RpcMgmtInqDefaultProtectLevel": [ + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + } + ], + "RpcBindingToStringBindingA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "StringBinding", + "type": "RPC_CSTR" + } + ], + "RpcBindingToStringBindingW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "StringBinding", + "type": "RPC_WSTR" + } + ], + "RpcBindingVectorFree": [ + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + } + ], + "RpcStringBindingComposeA": [ + { + "name": "ObjUuid", + "type": "RPC_CSTR" + }, + { + "name": "ProtSeq", + "type": "RPC_CSTR" + }, + { + "name": "NetworkAddr", + "type": "RPC_CSTR" + }, + { + "name": "Endpoint", + "type": "RPC_CSTR" + }, + { + "name": "Options", + "type": "RPC_CSTR" + }, + { + "name": "StringBinding", + "type": "RPC_CSTR" + } + ], + "RpcStringBindingComposeW": [ + { + "name": "ObjUuid", + "type": "RPC_WSTR" + }, + { + "name": "ProtSeq", + "type": "RPC_WSTR" + }, + { + "name": "NetworkAddr", + "type": "RPC_WSTR" + }, + { + "name": "Endpoint", + "type": "RPC_WSTR" + }, + { + "name": "Options", + "type": "RPC_WSTR" + }, + { + "name": "StringBinding", + "type": "RPC_WSTR" + } + ], + "RpcStringBindingParseA": [ + { + "name": "StringBinding", + "type": "RPC_CSTR" + }, + { + "name": "ObjUuid", + "type": "RPC_CSTR" + }, + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "NetworkAddr", + "type": "RPC_CSTR" + }, + { + "name": "Endpoint", + "type": "RPC_CSTR" + }, + { + "name": "NetworkOptions", + "type": "RPC_CSTR" + } + ], + "RpcStringBindingParseW": [ + { + "name": "StringBinding", + "type": "RPC_WSTR" + }, + { + "name": "ObjUuid", + "type": "RPC_WSTR" + }, + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "NetworkAddr", + "type": "RPC_WSTR" + }, + { + "name": "Endpoint", + "type": "RPC_WSTR" + }, + { + "name": "NetworkOptions", + "type": "RPC_WSTR" + } + ], + "RpcStringFreeA": [ + { + "name": "String", + "type": "RPC_CSTR" + } + ], + "RpcStringFreeW": [ + { + "name": "String", + "type": "RPC_WSTR" + } + ], + "RpcIfInqId": [ + { + "name": "RpcIfHandle", + "type": "RPC_IF_HANDLE" + }, + { + "name": "RpcIfId", + "type": "RPC_IF_ID" + } + ], + "RpcNetworkIsProtseqValidA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + } + ], + "RpcNetworkIsProtseqValidW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + } + ], + "RpcMgmtInqComTimeout": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Timeout", + "type": "unsigned int" + } + ], + "RpcMgmtSetComTimeout": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Timeout", + "type": "unsigned int" + } + ], + "RpcMgmtSetCancelTimeout": [ + { + "name": "Timeout", + "type": "long" + } + ], + "RpcNetworkInqProtseqsA": [ + { + "name": "ProtseqVector", + "type": "RPC_PROTSEQ_VECTORA" + } + ], + "RpcNetworkInqProtseqsW": [ + { + "name": "ProtseqVector", + "type": "RPC_PROTSEQ_VECTORW" + } + ], + "RpcObjectInqType": [ + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "TypeUuid", + "type": "UUID" + } + ], + "RpcObjectSetInqFn": [ + { + "name": "InquiryFn", + "type": "RPC_OBJECT_INQ_FN" + } + ], + "RpcObjectSetType": [ + { + "name": "ObjUuid", + "type": "UUID" + }, + { + "name": "TypeUuid", + "type": "UUID" + } + ], + "RpcProtseqVectorFreeA": [ + { + "name": "ProtseqVector", + "type": "RPC_PROTSEQ_VECTORA" + } + ], + "RpcProtseqVectorFreeW": [ + { + "name": "ProtseqVector", + "type": "RPC_PROTSEQ_VECTORW" + } + ], + "RpcServerInqBindings": [ + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + } + ], + "RpcServerInqIf": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + } + ], + "RpcServerListen": [ + { + "name": "MinimumCallThreads", + "type": "unsigned int" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "DontWait", + "type": "unsigned int" + } + ], + "RpcServerRegisterIf": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + } + ], + "RpcServerRegisterIfEx": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + }, + { + "name": "Flags", + "type": "unsigned int" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfCallback", + "type": "RPC_IF_CALLBACK_FN" + } + ], + "RpcServerRegisterIf2": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + }, + { + "name": "Flags", + "type": "unsigned int" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "MaxRpcSize", + "type": "unsigned int" + }, + { + "name": "IfCallbackFn", + "type": "RPC_IF_CALLBACK_FN" + } + ], + "RpcServerRegisterIf3": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "MgrEpv", + "type": "void" + }, + { + "name": "Flags", + "type": "unsigned int" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "MaxRpcSize", + "type": "unsigned int" + }, + { + "name": "IfCallback", + "type": "RPC_IF_CALLBACK_FN" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUnregisterIf": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "WaitForCallsToComplete", + "type": "unsigned int" + } + ], + "RpcServerUnregisterIfEx": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "MgrTypeUuid", + "type": "UUID" + }, + { + "name": "RundownContextHandles", + "type": "int" + } + ], + "RpcServerUseAllProtseqs": [ + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseAllProtseqsEx": [ + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseAllProtseqsIf": [ + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseAllProtseqsIfEx": [ + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqExA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqExW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqEpA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "Endpoint", + "type": "RPC_CSTR" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqEpExA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "Endpoint", + "type": "RPC_CSTR" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqEpW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "Endpoint", + "type": "RPC_WSTR" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqEpExW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "Endpoint", + "type": "RPC_WSTR" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqIfA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqIfExA": [ + { + "name": "Protseq", + "type": "RPC_CSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcServerUseProtseqIfW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + } + ], + "RpcServerUseProtseqIfExW": [ + { + "name": "Protseq", + "type": "RPC_WSTR" + }, + { + "name": "MaxCalls", + "type": "unsigned int" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "SecurityDescriptor", + "type": "void" + }, + { + "name": "Policy", + "type": "PRPC_POLICY" + } + ], + "RpcMgmtStatsVectorFree": [ + { + "name": "StatsVector", + "type": "RPC_STATS_VECTOR" + } + ], + "RpcMgmtInqStats": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Statistics", + "type": "RPC_STATS_VECTOR" + } + ], + "RpcMgmtIsServerListening": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcMgmtStopServerListening": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcMgmtWaitServerListen": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcMgmtSetServerStackSize": [ + { + "name": "ThreadStackSize", + "type": "unsigned long" + } + ], + "RpcSsDontSerializeContext": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcMgmtEnableIdleCleanup": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcMgmtInqIfIds": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "IfIdVector", + "type": "RPC_IF_ID_VECTOR" + } + ], + "RpcIfIdVectorFree": [ + { + "name": "IfIdVector", + "type": "RPC_IF_ID_VECTOR" + } + ], + "RpcMgmtInqServerPrincNameA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + } + ], + "RpcMgmtInqServerPrincNameW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + } + ], + "RpcServerInqDefaultPrincNameA": [ + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "PrincName", + "type": "RPC_CSTR" + } + ], + "RpcServerInqDefaultPrincNameW": [ + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "PrincName", + "type": "RPC_WSTR" + } + ], + "RpcEpResolveBinding": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + } + ], + "RpcNsBindingInqEntryNameA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_CSTR" + } + ], + "RpcNsBindingInqEntryNameW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "EntryNameSyntax", + "type": "unsigned long" + }, + { + "name": "EntryName", + "type": "RPC_WSTR" + } + ], + "RpcBindingCreateA": [ + { + "name": "Template", + "type": "RPC_BINDING_HANDLE_TEMPLATE_V1_A" + }, + { + "name": "Security", + "type": "RPC_BINDING_HANDLE_SECURITY_V1_A" + }, + { + "name": "Options", + "type": "RPC_BINDING_HANDLE_OPTIONS_V1" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcBindingCreateW": [ + { + "name": "Template", + "type": "RPC_BINDING_HANDLE_TEMPLATE_V1_W" + }, + { + "name": "Security", + "type": "RPC_BINDING_HANDLE_SECURITY_V1_W" + }, + { + "name": "Options", + "type": "RPC_BINDING_HANDLE_OPTIONS_V1" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcServerInqBindingHandle": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcImpersonateClient": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcRevertToSelfEx": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcRevertToSelf": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcImpersonateClientContainer": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcRevertContainerImpersonation": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcBindingInqAuthClientA": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Privs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthClientW": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Privs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthClientExA": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Privs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "Flags", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthClientExW": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Privs", + "type": "RPC_AUTHZ_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "Flags", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthInfoA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingInqAuthInfoW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingSetAuthInfoA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingSetAuthInfoExA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "SecurityQos", + "type": "RPC_SECURITY_QOS" + } + ], + "RpcBindingSetAuthInfoW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + } + ], + "RpcBindingSetAuthInfoExW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "SecurityQOS", + "type": "RPC_SECURITY_QOS" + } + ], + "RpcBindingInqAuthInfoExA": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "RpcQosVersion", + "type": "unsigned long" + }, + { + "name": "SecurityQOS", + "type": "RPC_SECURITY_QOS" + } + ], + "RpcBindingInqAuthInfoExW": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnLevel", + "type": "unsigned long" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "AuthIdentity", + "type": "RPC_AUTH_IDENTITY_HANDLE" + }, + { + "name": "AuthzSvc", + "type": "unsigned long" + }, + { + "name": "RpcQosVersion", + "type": "unsigned long" + }, + { + "name": "SecurityQOS", + "type": "RPC_SECURITY_QOS" + } + ], + "RpcServerCompleteSecurityCallback": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "RpcServerRegisterAuthInfoA": [ + { + "name": "ServerPrincName", + "type": "RPC_CSTR" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "GetKeyFn", + "type": "RPC_AUTH_KEY_RETRIEVAL_FN" + }, + { + "name": "Arg", + "type": "void" + } + ], + "RpcServerRegisterAuthInfoW": [ + { + "name": "ServerPrincName", + "type": "RPC_WSTR" + }, + { + "name": "AuthnSvc", + "type": "unsigned long" + }, + { + "name": "GetKeyFn", + "type": "RPC_AUTH_KEY_RETRIEVAL_FN" + }, + { + "name": "Arg", + "type": "void" + } + ], + "RpcBindingServerFromClient": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ServerBinding", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcRaiseException": [ + { + "name": "exception", + "type": "RPC_STATUS" + } + ], + "RpcTestCancel": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcServerTestCancel": [ + { + "name": "BindingHandle", + "type": "RPC_BINDING_HANDLE" + } + ], + "RpcCancelThread": [ + { + "name": "Thread", + "type": "void" + } + ], + "RpcCancelThreadEx": [ + { + "name": "Thread", + "type": "void" + }, + { + "name": "Timeout", + "type": "long" + } + ], + "UuidCreate": [ + { + "name": "Uuid", + "type": "UUID" + } + ], + "UuidCreateSequential": [ + { + "name": "Uuid", + "type": "UUID" + } + ], + "UuidToStringA": [ + { + "name": "Uuid", + "type": "UUID" + }, + { + "name": "StringUuid", + "type": "RPC_CSTR" + } + ], + "UuidFromStringA": [ + { + "name": "StringUuid", + "type": "RPC_CSTR" + }, + { + "name": "Uuid", + "type": "UUID" + } + ], + "UuidToStringW": [ + { + "name": "Uuid", + "type": "UUID" + }, + { + "name": "StringUuid", + "type": "RPC_WSTR" + } + ], + "UuidFromStringW": [ + { + "name": "StringUuid", + "type": "RPC_WSTR" + }, + { + "name": "Uuid", + "type": "UUID" + } + ], + "UuidCompare": [ + { + "name": "Uuid1", + "type": "UUID" + }, + { + "name": "Uuid2", + "type": "UUID" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "UuidCreateNil": [ + { + "name": "NilUuid", + "type": "UUID" + } + ], + "UuidEqual": [ + { + "name": "Uuid1", + "type": "UUID" + }, + { + "name": "Uuid2", + "type": "UUID" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "UuidHash": [ + { + "name": "Uuid", + "type": "UUID" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "UuidIsNil": [ + { + "name": "Uuid", + "type": "UUID" + }, + { + "name": "Status", + "type": "RPC_STATUS" + } + ], + "RpcEpRegisterNoReplaceA": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcEpRegisterNoReplaceW": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcEpRegisterA": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcEpRegisterW": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcEpUnregister": [ + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + }, + { + "name": "UuidVector", + "type": "UUID_VECTOR" + } + ], + "DceErrorInqTextA": [ + { + "name": "RpcStatus", + "type": "RPC_STATUS" + }, + { + "name": "ErrorText", + "type": "RPC_CSTR" + } + ], + "DceErrorInqTextW": [ + { + "name": "RpcStatus", + "type": "RPC_STATUS" + }, + { + "name": "ErrorText", + "type": "RPC_WSTR" + } + ], + "RpcMgmtEpEltInqBegin": [ + { + "name": "EpBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "InquiryType", + "type": "unsigned long" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "VersOption", + "type": "unsigned long" + }, + { + "name": "ObjectUuid", + "type": "UUID" + }, + { + "name": "InquiryContext", + "type": "RPC_EP_INQ_HANDLE" + } + ], + "RpcMgmtEpEltInqDone": [ + { + "name": "InquiryContext", + "type": "RPC_EP_INQ_HANDLE" + } + ], + "RpcMgmtEpEltInqNextA": [ + { + "name": "InquiryContext", + "type": "RPC_EP_INQ_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + }, + { + "name": "Annotation", + "type": "RPC_CSTR" + } + ], + "RpcMgmtEpEltInqNextW": [ + { + "name": "InquiryContext", + "type": "RPC_EP_INQ_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + }, + { + "name": "Annotation", + "type": "RPC_WSTR" + } + ], + "RpcMgmtEpUnregister": [ + { + "name": "EpBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "IfId", + "type": "RPC_IF_ID" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ObjectUuid", + "type": "UUID" + } + ], + "RpcMgmtSetAuthorizationFn": [ + { + "name": "AuthorizationFn", + "type": "RPC_MGMT_AUTHORIZATION_FN" + } + ], + "RpcExceptionFilter": [ + { + "name": "ExceptionCode", + "type": "unsigned long" + } + ], + "RpcServerInterfaceGroupCreateW": [ + { + "name": "Interfaces", + "type": "RPC_INTERFACE_TEMPLATEW" + }, + { + "name": "NumIfs", + "type": "unsigned long" + }, + { + "name": "Endpoints", + "type": "RPC_ENDPOINT_TEMPLATEW" + }, + { + "name": "NumEndpoints", + "type": "unsigned long" + }, + { + "name": "IdlePeriod", + "type": "unsigned long" + }, + { + "name": "IdleCallbackFn", + "type": "RPC_INTERFACE_GROUP_IDLE_CALLBACK_FN" + }, + { + "name": "IdleCallbackContext", + "type": "void" + }, + { + "name": "IfGroup", + "type": "PRPC_INTERFACE_GROUP" + } + ], + "RpcServerInterfaceGroupCreateA": [ + { + "name": "Interfaces", + "type": "RPC_INTERFACE_TEMPLATEA" + }, + { + "name": "NumIfs", + "type": "unsigned long" + }, + { + "name": "Endpoints", + "type": "RPC_ENDPOINT_TEMPLATEA" + }, + { + "name": "NumEndpoints", + "type": "unsigned long" + }, + { + "name": "IdlePeriod", + "type": "unsigned long" + }, + { + "name": "IdleCallbackFn", + "type": "RPC_INTERFACE_GROUP_IDLE_CALLBACK_FN" + }, + { + "name": "IdleCallbackContext", + "type": "void" + }, + { + "name": "IfGroup", + "type": "PRPC_INTERFACE_GROUP" + } + ], + "RpcServerInterfaceGroupClose": [ + { + "name": "IfGroup", + "type": "RPC_INTERFACE_GROUP" + } + ], + "RpcServerInterfaceGroupActivate": [ + { + "name": "IfGroup", + "type": "RPC_INTERFACE_GROUP" + } + ], + "RpcServerInterfaceGroupDeactivate": [ + { + "name": "IfGroup", + "type": "RPC_INTERFACE_GROUP" + }, + { + "name": "ForceDeactivation", + "type": "unsigned long" + } + ], + "RpcServerInterfaceGroupInqBindings": [ + { + "name": "IfGroup", + "type": "RPC_INTERFACE_GROUP" + }, + { + "name": "BindingVector", + "type": "RPC_BINDING_VECTOR" + } + ], + "MesEncodeIncrementalHandleCreate": [ + { + "name": "UserState", + "type": "void" + }, + { + "name": "AllocFn", + "type": "MIDL_ES_ALLOC" + }, + { + "name": "WriteFn", + "type": "MIDL_ES_WRITE" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesDecodeIncrementalHandleCreate": [ + { + "name": "UserState", + "type": "void" + }, + { + "name": "ReadFn", + "type": "MIDL_ES_READ" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesIncrementalHandleReset": [ + { + "name": "Handle", + "type": "handle_t" + }, + { + "name": "UserState", + "type": "void" + }, + { + "name": "AllocFn", + "type": "MIDL_ES_ALLOC" + }, + { + "name": "WriteFn", + "type": "MIDL_ES_WRITE" + }, + { + "name": "ReadFn", + "type": "MIDL_ES_READ" + }, + { + "name": "Operation", + "type": "MIDL_ES_CODE" + } + ], + "MesEncodeFixedBufferHandleCreate": [ + { + "name": "pBuffer", + "type": "char" + }, + { + "name": "BufferSize", + "type": "unsigned long" + }, + { + "name": "pEncodedSize", + "type": "unsigned long" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesEncodeDynBufferHandleCreate": [ + { + "name": "pBuffer", + "type": "char" + }, + { + "name": "pEncodedSize", + "type": "unsigned long" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesDecodeBufferHandleCreate": [ + { + "name": "Buffer", + "type": "char" + }, + { + "name": "BufferSize", + "type": "unsigned long" + }, + { + "name": "pHandle", + "type": "handle_t" + } + ], + "MesBufferHandleReset": [ + { + "name": "Handle", + "type": "handle_t" + }, + { + "name": "HandleStyle", + "type": "unsigned long" + }, + { + "name": "Operation", + "type": "MIDL_ES_CODE" + }, + { + "name": "pBuffer", + "type": "char" + }, + { + "name": "BufferSize", + "type": "unsigned long" + }, + { + "name": "pEncodedSize", + "type": "unsigned long" + } + ], + "MesHandleFree": [ + { + "name": "Handle", + "type": "handle_t" + } + ], + "MesInqProcEncodingId": [ + { + "name": "Handle", + "type": "handle_t" + }, + { + "name": "pInterfaceId", + "type": "PRPC_SYNTAX_IDENTIFIER" + }, + { + "name": "pProcNum", + "type": "unsigned long" + } + ], + "NdrMesProcEncodeDecode2": [ + { + "name": "Handle", + "type": "handle_t" + }, + { + "name": "pStubDesc", + "type": "MIDL_STUB_DESC" + }, + { + "name": "pFormatString", + "type": "PFORMAT_STRING" + } + ], + "IUnknown_QueryInterface_Proxy": [ + { + "name": "This", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "IUnknown_AddRef_Proxy": [ + { + "name": "This", + "type": "IUnknown" + } + ], + "IUnknown_Release_Proxy": [ + { + "name": "This", + "type": "IUnknown" + } + ], + "NdrProxyInitialize": [ + { + "name": "This", + "type": "void" + }, + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "ProcNum", + "type": "unsigned int" + } + ], + "NdrProxyGetBuffer": [ + { + "name": "This", + "type": "void" + }, + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + } + ], + "NdrProxySendReceive": [ + { + "name": "This", + "type": "void" + }, + { + "name": "pStubMsg", + "type": "MIDL_STUB_MESSAGE" + } + ], + "NdrProxyFreeBuffer": [ + { + "name": "This", + "type": "void" + }, + { + "name": "pStubMsg", + "type": "MIDL_STUB_MESSAGE" + } + ], + "NdrProxyErrorHandler": [ + { + "name": "dwExceptionCode", + "type": "DWORD" + } + ], + "NdrStubInitialize": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pRpcChannelBuffer", + "type": "IRpcChannelBuffer" + } + ], + "NdrStubForwardingFunction": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pChannel", + "type": "IRpcChannelBuffer" + }, + { + "name": "pmsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pdwStubPhase", + "type": "DWORD" + } + ], + "NdrStubGetBuffer": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pRpcChannelBuffer", + "type": "IRpcChannelBuffer" + }, + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + } + ], + "CStdStubBuffer_QueryInterface": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppvObject", + "type": "void" + } + ], + "CStdStubBuffer_AddRef": [ + { + "name": "This", + "type": "IRpcStubBuffer" + } + ], + "NdrCStdStubBuffer_Release": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pPSF", + "type": "IPSFactoryBuffer" + } + ], + "CStdStubBuffer_Connect": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pUnkServer", + "type": "IUnknown" + } + ], + "CStdStubBuffer_Disconnect": [ + { + "name": "This", + "type": "IRpcStubBuffer" + } + ], + "CStdStubBuffer_Invoke": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pRpcMsg", + "type": "RPCOLEMESSAGE" + }, + { + "name": "pRpcChannelBuffer", + "type": "IRpcChannelBuffer" + } + ], + "CStdStubBuffer_CountRefs": [ + { + "name": "This", + "type": "IRpcStubBuffer" + } + ], + "CStdStubBuffer_DebugServerQueryInterface": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CStdStubBuffer_DebugServerRelease": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pv", + "type": "void" + } + ], + "NdrCStdStubBuffer2_Release": [ + { + "name": "This", + "type": "IRpcStubBuffer" + }, + { + "name": "pPSF", + "type": "IPSFactoryBuffer" + } + ], + "NdrDllGetClassObject": [ + { + "name": "rclsid", + "type": "IID" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + }, + { + "name": "pProxyFileList", + "type": "ProxyFileInfo" + }, + { + "name": "pclsid", + "type": "CLSID" + }, + { + "name": "pPSFactoryBuffer", + "type": "CStdPSFactoryBuffer" + } + ], + "NdrDllCanUnloadNow": [ + { + "name": "pPSFactoryBuffer", + "type": "CStdPSFactoryBuffer" + } + ], + "NdrDllRegisterProxy": [ + { + "name": "hDll", + "type": "HMODULE" + }, + { + "name": "pProxyFileList", + "type": "ProxyFileInfo" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "NdrDllUnregisterProxy": [ + { + "name": "hDll", + "type": "HMODULE" + }, + { + "name": "pProxyFileList", + "type": "ProxyFileInfo" + }, + { + "name": "pclsid", + "type": "CLSID" + } + ], + "RpcCertGeneratePrincipalNameW": [ + { + "name": "Context", + "type": "PCCERT_CONTEXT" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "RPC_WSTR" + } + ], + "RpcCertGeneratePrincipalNameA": [ + { + "name": "Context", + "type": "PCCERT_CONTEXT" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "pBuffer", + "type": "RPC_CSTR" + } + ], + "RpcSsDestroyClientContext": [ + { + "name": "ContextHandle", + "type": "void" + } + ], + "NdrSimpleTypeMarshall": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "FormatChar", + "type": "unsigned char" + } + ], + "NdrSimpleTypeUnmarshall": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "FormatChar", + "type": "unsigned char" + } + ], + "NdrContextHandleInitialize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrPointerBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrSimpleStructBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrComplexStructBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrConformantArrayBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrComplexArrayBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrConformantStringBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrUserMarshalBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrInterfacePointerBufferSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrContextHandleSize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrContextHandleMemorySize": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrPointerFree": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrUserMarshalFree": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrInterfacePointerFree": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pMemory", + "type": "unsigned char" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrConvert": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrClientCall2": [ + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrClientCall": [ + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrAsyncClientCall": [ + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrDcomAsyncClientCall": [ + { + "name": "pStubDescriptor", + "type": "PMIDL_STUB_DESC" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + } + ], + "NdrAsyncServerCall": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + } + ], + "NdrStubCall2": [ + { + "name": "pThis", + "type": "void" + }, + { + "name": "pChannel", + "type": "void" + }, + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pdwStubPhase", + "type": "unsigned long" + } + ], + "NdrServerCall2": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + } + ], + "RpcSsDisableAllocate": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSsEnableAllocate": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSsFree": [ + { + "name": "NodeToFree", + "type": "void" + } + ], + "RpcSsGetThreadHandle": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSsSetClientAllocFree": [ + { + "name": "ClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "ClientFree", + "type": "RPC_CLIENT_FREE" + } + ], + "RpcSsSetThreadHandle": [ + { + "name": "Id", + "type": "RPC_SS_THREAD_HANDLE" + } + ], + "RpcSsSwapClientAllocFree": [ + { + "name": "ClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "ClientFree", + "type": "RPC_CLIENT_FREE" + }, + { + "name": "OldClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "OldClientFree", + "type": "RPC_CLIENT_FREE" + } + ], + "RpcSmClientFree": [ + { + "name": "pNodeToFree", + "type": "void" + } + ], + "RpcSmDestroyClientContext": [ + { + "name": "ContextHandle", + "type": "void" + } + ], + "RpcSmDisableAllocate": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSmEnableAllocate": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcSmFree": [ + { + "name": "NodeToFree", + "type": "void" + } + ], + "RpcSmGetThreadHandle": [ + { + "name": "pStatus", + "type": "RPC_STATUS" + } + ], + "RpcSmSetClientAllocFree": [ + { + "name": "ClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "ClientFree", + "type": "RPC_CLIENT_FREE" + } + ], + "RpcSmSetThreadHandle": [ + { + "name": "Id", + "type": "RPC_SS_THREAD_HANDLE" + } + ], + "RpcSmSwapClientAllocFree": [ + { + "name": "ClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "ClientFree", + "type": "RPC_CLIENT_FREE" + }, + { + "name": "OldClientAlloc", + "type": "RPC_CLIENT_ALLOC" + }, + { + "name": "OldClientFree", + "type": "RPC_CLIENT_FREE" + } + ], + "NdrClearOutParameters": [ + { + "name": "pStubMsg", + "type": "PMIDL_STUB_MESSAGE" + }, + { + "name": "pFormat", + "type": "PFORMAT_STRING" + }, + { + "name": "ArgAddr", + "type": "void" + } + ], + "NdrOleFree": [ + { + "name": "NodeToFree", + "type": "void" + } + ], + "NdrGetUserMarshalInfo": [ + { + "name": "pFlags", + "type": "unsigned long" + }, + { + "name": "InformationLevel", + "type": "unsigned long" + }, + { + "name": "pMarshalInfo", + "type": "NDR_USER_MARSHAL_INFO" + } + ], + "NdrClientCall3": [ + { + "name": "pProxyInfo", + "type": "MIDL_STUBLESS_PROXY_INFO" + }, + { + "name": "nProcNum", + "type": "unsigned long" + }, + { + "name": "pReturnValue", + "type": "void" + } + ], + "Ndr64AsyncClientCall": [ + { + "name": "pProxyInfo", + "type": "MIDL_STUBLESS_PROXY_INFO" + }, + { + "name": "nProcNum", + "type": "unsigned long" + }, + { + "name": "pReturnValue", + "type": "void" + } + ], + "Ndr64AsyncServerCallAll": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + } + ], + "NdrStubCall3": [ + { + "name": "pThis", + "type": "void" + }, + { + "name": "pChannel", + "type": "void" + }, + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + }, + { + "name": "pdwStubPhase", + "type": "unsigned long" + } + ], + "NdrServerCallAll": [ + { + "name": "pRpcMsg", + "type": "PRPC_MESSAGE" + } + ], + "RpcUserFree": [ + { + "name": "AsyncHandle", + "type": "handle_t" + }, + { + "name": "pBuffer", + "type": "void" + } + ], + "RpcAsyncRegisterInfo": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + } + ], + "RpcAsyncInitializeHandle": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "Size", + "type": "unsigned int" + } + ], + "RpcAsyncGetCallStatus": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + } + ], + "RpcAsyncCompleteCall": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "Reply", + "type": "void" + } + ], + "RpcAsyncAbortCall": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "ExceptionCode", + "type": "unsigned long" + } + ], + "RpcAsyncCancelCall": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "fAbort", + "type": "BOOL" + } + ], + "RpcErrorStartEnumeration": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + } + ], + "RpcErrorGetNextRecord": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + }, + { + "name": "CopyStrings", + "type": "BOOL" + }, + { + "name": "ErrorInfo", + "type": "RPC_EXTENDED_ERROR_INFO" + } + ], + "RpcErrorEndEnumeration": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + } + ], + "RpcErrorResetEnumeration": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + } + ], + "RpcErrorGetNumberOfRecords": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + }, + { + "name": "Records", + "type": "int" + } + ], + "RpcErrorSaveErrorInfo": [ + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + }, + { + "name": "ErrorBlob", + "type": "PVOID" + }, + { + "name": "BlobSize", + "type": "size_t" + } + ], + "RpcErrorLoadErrorInfo": [ + { + "name": "ErrorBlob", + "type": "PVOID" + }, + { + "name": "BlobSize", + "type": "size_t" + }, + { + "name": "EnumHandle", + "type": "RPC_ERROR_ENUM_HANDLE" + } + ], + "RpcErrorAddRecord": [ + { + "name": "ErrorInfo", + "type": "RPC_EXTENDED_ERROR_INFO" + } + ], + "RpcErrorClearInformation": [ + { + "name": "VOID", + "type": "void" + } + ], + "RpcGetAuthorizationContextForClient": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "ImpersonateOnReturn", + "type": "BOOL" + }, + { + "name": "Reserved1", + "type": "PVOID" + }, + { + "name": "pExpirationTime", + "type": "PLARGE_INTEGER" + }, + { + "name": "Reserved2", + "type": "LUID" + }, + { + "name": "Reserved3", + "type": "DWORD" + }, + { + "name": "Reserved4", + "type": "PVOID" + }, + { + "name": "pAuthzClientContext", + "type": "PVOID" + } + ], + "RpcFreeAuthorizationContext": [ + { + "name": "pAuthzClientContext", + "type": "PVOID" + } + ], + "RpcSsContextLockExclusive": [ + { + "name": "ServerBindingHandle", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "RpcSsContextLockShared": [ + { + "name": "ServerBindingHandle", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "UserContext", + "type": "PVOID" + } + ], + "RpcServerInqCallAttributesW": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "RpcCallAttributes", + "type": "void" + } + ], + "RpcServerInqCallAttributesA": [ + { + "name": "ClientBinding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "RpcCallAttributes", + "type": "void" + } + ], + "RpcServerSubscribeForNotification": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Notification", + "type": "RPC_NOTIFICATIONS" + }, + { + "name": "NotificationType", + "type": "RPC_NOTIFICATION_TYPES" + }, + { + "name": "NotificationInfo", + "type": "RPC_ASYNC_NOTIFICATION_INFO" + } + ], + "RpcServerUnsubscribeForNotification": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Notification", + "type": "RPC_NOTIFICATIONS" + }, + { + "name": "NotificationsQueued", + "type": "unsigned long" + } + ], + "RpcBindingBind": [ + { + "name": "pAsync", + "type": "PRPC_ASYNC_STATE" + }, + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "IfSpec", + "type": "RPC_IF_HANDLE" + } + ], + "RpcBindingUnbind": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + } + ], + "I_RpcExceptionFilter": [ + { + "name": "ExceptionCode", + "type": "unsigned long" + } + ], + "I_RpcBindingInqLocalClientPID": [ + { + "name": "Binding", + "type": "RPC_BINDING_HANDLE" + }, + { + "name": "Pid", + "type": "unsigned long" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Rstrtmgr.json b/qiling/extensions/windows_sdk/rstrtmgr_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Rstrtmgr.json rename to qiling/extensions/windows_sdk/rstrtmgr_dll.json diff --git a/qiling/extensions/windows_sdk/Rtm.json b/qiling/extensions/windows_sdk/rtm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Rtm.json rename to qiling/extensions/windows_sdk/rtm_dll.json diff --git a/qiling/extensions/windows_sdk/runtimeobject.json b/qiling/extensions/windows_sdk/runtimeobject.json deleted file mode 100644 index fa976cd6d..000000000 --- a/qiling/extensions/windows_sdk/runtimeobject.json +++ /dev/null @@ -1,194 +0,0 @@ -{ - "RoGetErrorReportingFlags": [ - { - "name": "pflags", - "type": "UINT32" - } - ], - "RoSetErrorReportingFlags": [ - { - "name": "flags", - "type": "UINT32" - } - ], - "RoResolveRestrictedErrorInfoReference": [ - { - "name": "reference", - "type": "PCWSTR" - }, - { - "name": "ppRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "SetRestrictedErrorInfo": [ - { - "name": "pRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "GetRestrictedErrorInfo": [ - { - "name": "ppRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "RoOriginateErrorW": [ - { - "name": "error", - "type": "HRESULT" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "message", - "type": "PCWSTR" - } - ], - "RoOriginateError": [ - { - "name": "error", - "type": "HRESULT" - }, - { - "name": "message", - "type": "HSTRING" - } - ], - "RoTransformErrorW": [ - { - "name": "oldError", - "type": "HRESULT" - }, - { - "name": "newError", - "type": "HRESULT" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "message", - "type": "PCWSTR" - } - ], - "RoTransformError": [ - { - "name": "oldError", - "type": "HRESULT" - }, - { - "name": "newError", - "type": "HRESULT" - }, - { - "name": "message", - "type": "HSTRING" - } - ], - "RoCaptureErrorContext": [ - { - "name": "hr", - "type": "HRESULT" - } - ], - "RoFailFastWithErrorContext": [ - { - "name": "hrError", - "type": "HRESULT" - } - ], - "RoOriginateLanguageException": [ - { - "name": "error", - "type": "HRESULT" - }, - { - "name": "message", - "type": "HSTRING" - }, - { - "name": "languageException", - "type": "IUnknown" - } - ], - "RoClearError": [ - { - "name": "VOID", - "type": "void" - } - ], - "RoReportUnhandledError": [ - { - "name": "pRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "RoInspectThreadErrorInfo": [ - { - "name": "targetTebAddress", - "type": "UINT_PTR" - }, - { - "name": "machine", - "type": "USHORT" - }, - { - "name": "readMemoryCallback", - "type": "PINSPECT_MEMORY_CALLBACK" - }, - { - "name": "context", - "type": "PVOID" - }, - { - "name": "targetErrorInfoAddress", - "type": "UINT_PTR" - } - ], - "RoInspectCapturedStackBackTrace": [ - { - "name": "targetErrorInfoAddress", - "type": "UINT_PTR" - }, - { - "name": "machine", - "type": "USHORT" - }, - { - "name": "readMemoryCallback", - "type": "PINSPECT_MEMORY_CALLBACK" - }, - { - "name": "context", - "type": "PVOID" - }, - { - "name": "frameCount", - "type": "UINT32" - }, - { - "name": "targetBackTraceAddress", - "type": "UINT_PTR" - } - ], - "RoReportFailedDelegate": [ - { - "name": "punkDelegate", - "type": "IUnknown" - }, - { - "name": "pRestrictedErrorInfo", - "type": "IRestrictedErrorInfo" - } - ], - "IsErrorPropagationEnabled": [ - { - "name": "VOID", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/runtimeobject_lib.json b/qiling/extensions/windows_sdk/runtimeobject_lib.json new file mode 100644 index 000000000..053d05f11 --- /dev/null +++ b/qiling/extensions/windows_sdk/runtimeobject_lib.json @@ -0,0 +1,76 @@ +{ + "RoResolveRestrictedErrorInfoReference": [ + { + "name": "reference", + "type": "PCWSTR" + }, + { + "name": "ppRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "RoOriginateErrorW": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "message", + "type": "PCWSTR" + } + ], + "RoOriginateError": [ + { + "name": "error", + "type": "HRESULT" + }, + { + "name": "message", + "type": "HSTRING" + } + ], + "RoReportFailedDelegate": [ + { + "name": "punkDelegate", + "type": "IUnknown" + }, + { + "name": "pRestrictedErrorInfo", + "type": "IRestrictedErrorInfo" + } + ], + "IsErrorPropagationEnabled": [ + { + "name": "VOID", + "type": "void" + } + ], + "RoGetActivatableClassRegistration": [ + { + "name": "activatableClassId", + "type": "HSTRING" + }, + { + "name": "activatableClassRegistration", + "type": "PActivatableClassRegistration" + } + ], + "RoGetServerActivatableClasses": [ + { + "name": "serverName", + "type": "HSTRING" + }, + { + "name": "activatableClassIds", + "type": "HSTRING" + }, + { + "name": "count", + "type": "DWORD" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sas.json b/qiling/extensions/windows_sdk/sas_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/sas.json rename to qiling/extensions/windows_sdk/sas_dll.json diff --git a/qiling/extensions/windows_sdk/scarddlg_dll.json b/qiling/extensions/windows_sdk/scarddlg_dll.json new file mode 100644 index 000000000..bc4fbb459 --- /dev/null +++ b/qiling/extensions/windows_sdk/scarddlg_dll.json @@ -0,0 +1,26 @@ +{ + "SCardUIDlgSelectCardA": [ + { + "name": "VOID", + "type": "LPOPENCARDNAME_EXA" + } + ], + "SCardUIDlgSelectCardW": [ + { + "name": "VOID", + "type": "LPOPENCARDNAME_EXW" + } + ], + "GetOpenCardNameA": [ + { + "name": "VOID", + "type": "LPOPENCARDNAMEA" + } + ], + "GetOpenCardNameW": [ + { + "name": "VOID", + "type": "LPOPENCARDNAMEW" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/schannel.json b/qiling/extensions/windows_sdk/schannel_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/schannel.json rename to qiling/extensions/windows_sdk/schannel_dll.json diff --git a/qiling/extensions/windows_sdk/secforwarder.json b/qiling/extensions/windows_sdk/secforwarder.json deleted file mode 100644 index ec5bda91f..000000000 --- a/qiling/extensions/windows_sdk/secforwarder.json +++ /dev/null @@ -1,5200 +0,0 @@ -{ - "CryptAcquireContextA": [ - { - "name": "phProv", - "type": "HCRYPTPROV" - }, - { - "name": "szContainer", - "type": "LPCSTR" - }, - { - "name": "szProvider", - "type": "LPCSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptAcquireContextW": [ - { - "name": "phProv", - "type": "HCRYPTPROV" - }, - { - "name": "szContainer", - "type": "LPCWSTR" - }, - { - "name": "szProvider", - "type": "LPCWSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptReleaseContext": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGenKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptDeriveKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "hBaseData", - "type": "HCRYPTHASH" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptDestroyKey": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - } - ], - "CryptSetKeyParam": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetKeyParam": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetHashParam": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetHashParam": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetProvParam": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetProvParam": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwParam", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGenRandom": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwLen", - "type": "DWORD" - }, - { - "name": "pbBuffer", - "type": "BYTE" - } - ], - "CryptGetUserKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "phUserKey", - "type": "HCRYPTKEY" - } - ], - "CryptExportKey": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "hExpKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwBlobType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - } - ], - "CryptImportKey": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwDataLen", - "type": "DWORD" - }, - { - "name": "hPubKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptEncrypt": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "Final", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - }, - { - "name": "dwBufLen", - "type": "DWORD" - } - ], - "CryptDecrypt": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "Final", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "pdwDataLen", - "type": "DWORD" - } - ], - "CryptCreateHash": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phHash", - "type": "HCRYPTHASH" - } - ], - "CryptHashData": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "dwDataLen", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptHashSessionKey": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptDestroyHash": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - } - ], - "CryptSignHashA": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "szDescription", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "pdwSigLen", - "type": "DWORD" - } - ], - "CryptSignHashW": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "szDescription", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "pdwSigLen", - "type": "DWORD" - } - ], - "CryptVerifySignatureA": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "dwSigLen", - "type": "DWORD" - }, - { - "name": "hPubKey", - "type": "HCRYPTKEY" - }, - { - "name": "szDescription", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptVerifySignatureW": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "dwSigLen", - "type": "DWORD" - }, - { - "name": "hPubKey", - "type": "HCRYPTKEY" - }, - { - "name": "szDescription", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetProviderA": [ - { - "name": "pszProvName", - "type": "LPCSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - } - ], - "CryptSetProviderW": [ - { - "name": "pszProvName", - "type": "LPCWSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - } - ], - "CryptSetProviderExA": [ - { - "name": "pszProvName", - "type": "LPCSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptSetProviderExW": [ - { - "name": "pszProvName", - "type": "LPCWSTR" - }, - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetDefaultProviderA": [ - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszProvName", - "type": "LPSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptGetDefaultProviderW": [ - { - "name": "dwProvType", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszProvName", - "type": "LPWSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptEnumProviderTypesA": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szTypeName", - "type": "LPSTR" - }, - { - "name": "pcbTypeName", - "type": "DWORD" - } - ], - "CryptEnumProviderTypesW": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szTypeName", - "type": "LPWSTR" - }, - { - "name": "pcbTypeName", - "type": "DWORD" - } - ], - "CryptEnumProvidersA": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szProvName", - "type": "LPSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptEnumProvidersW": [ - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwProvType", - "type": "DWORD" - }, - { - "name": "szProvName", - "type": "LPWSTR" - }, - { - "name": "pcbProvName", - "type": "DWORD" - } - ], - "CryptContextAddRef": [ - { - "name": "hProv", - "type": "HCRYPTPROV" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptDuplicateKey": [ - { - "name": "hKey", - "type": "HCRYPTKEY" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptDuplicateHash": [ - { - "name": "hHash", - "type": "HCRYPTHASH" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phHash", - "type": "HCRYPTHASH" - } - ], - "GetEncSChannel": [ - { - "name": "pData", - "type": "BYTE" - }, - { - "name": "dwDecSize", - "type": "DWORD" - } - ], - "CryptFormatObject": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFormatType", - "type": "DWORD" - }, - { - "name": "dwFormatStrType", - "type": "DWORD" - }, - { - "name": "pFormatStruct", - "type": "void" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pbFormat", - "type": "void" - }, - { - "name": "pcbFormat", - "type": "DWORD" - } - ], - "CryptEncodeObjectEx": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pEncodePara", - "type": "PCRYPT_ENCODE_PARA" - }, - { - "name": "pvEncoded", - "type": "void" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CryptEncodeObject": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CryptDecodeObjectEx": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pDecodePara", - "type": "PCRYPT_DECODE_PARA" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "pcbStructInfo", - "type": "DWORD" - } - ], - "CryptDecodeObject": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "pcbStructInfo", - "type": "DWORD" - } - ], - "CryptInstallOIDFunctionAddress": [ - { - "name": "hModule", - "type": "HMODULE" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "cFuncEntry", - "type": "DWORD" - }, - { - "name": "rgFuncEntry", - "type": "CRYPT_OID_FUNC_ENTRY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptInitOIDFunctionSet": [ - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptGetOIDFunctionAddress": [ - { - "name": "hFuncSet", - "type": "HCRYPTOIDFUNCSET" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "ppvFuncAddr", - "type": "void" - }, - { - "name": "phFuncAddr", - "type": "HCRYPTOIDFUNCADDR" - } - ], - "CryptGetDefaultOIDDllList": [ - { - "name": "hFuncSet", - "type": "HCRYPTOIDFUNCSET" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pwszDllList", - "type": "WCHAR" - }, - { - "name": "pcchDllList", - "type": "DWORD" - } - ], - "CryptGetDefaultOIDFunctionAddress": [ - { - "name": "hFuncSet", - "type": "HCRYPTOIDFUNCSET" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pwszDll", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "ppvFuncAddr", - "type": "void" - }, - { - "name": "phFuncAddr", - "type": "HCRYPTOIDFUNCADDR" - } - ], - "CryptFreeOIDFunctionAddress": [ - { - "name": "hFuncAddr", - "type": "HCRYPTOIDFUNCADDR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptRegisterOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "pwszDll", - "type": "LPCWSTR" - }, - { - "name": "pszOverrideFuncName", - "type": "LPCSTR" - } - ], - "CryptUnregisterOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - } - ], - "CryptRegisterDefaultOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pwszDll", - "type": "LPCWSTR" - } - ], - "CryptUnregisterDefaultOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pwszDll", - "type": "LPCWSTR" - } - ], - "CryptSetOIDFunctionValue": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "pwszValueName", - "type": "LPCWSTR" - }, - { - "name": "dwValueType", - "type": "DWORD" - }, - { - "name": "pbValueData", - "type": "BYTE" - }, - { - "name": "cbValueData", - "type": "DWORD" - } - ], - "CryptGetOIDFunctionValue": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "pwszValueName", - "type": "LPCWSTR" - }, - { - "name": "pdwValueType", - "type": "DWORD" - }, - { - "name": "pbValueData", - "type": "BYTE" - }, - { - "name": "pcbValueData", - "type": "DWORD" - } - ], - "CryptEnumOIDFunction": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pszFuncName", - "type": "LPCSTR" - }, - { - "name": "pszOID", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnumOIDFunc", - "type": "PFN_CRYPT_ENUM_OID_FUNC" - } - ], - "CryptFindOIDInfo": [ - { - "name": "dwKeyType", - "type": "DWORD" - }, - { - "name": "pvKey", - "type": "void" - }, - { - "name": "dwGroupId", - "type": "DWORD" - } - ], - "CryptRegisterOIDInfo": [ - { - "name": "pInfo", - "type": "PCCRYPT_OID_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CryptUnregisterOIDInfo": [ - { - "name": "pInfo", - "type": "PCCRYPT_OID_INFO" - } - ], - "CryptEnumOIDInfo": [ - { - "name": "dwGroupId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnumOIDInfo", - "type": "PFN_CRYPT_ENUM_OID_INFO" - } - ], - "CryptFindLocalizedName": [ - { - "name": "pwszCryptName", - "type": "LPCWSTR" - } - ], - "CryptMsgOpenToEncode": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwMsgType", - "type": "DWORD" - }, - { - "name": "pvMsgEncodeInfo", - "type": "void" - }, - { - "name": "pszInnerContentObjID", - "type": "LPSTR" - }, - { - "name": "pStreamInfo", - "type": "PCMSG_STREAM_INFO" - } - ], - "CryptMsgCalculateEncodedLength": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwMsgType", - "type": "DWORD" - }, - { - "name": "pvMsgEncodeInfo", - "type": "void" - }, - { - "name": "pszInnerContentObjID", - "type": "LPSTR" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "CryptMsgOpenToDecode": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwMsgType", - "type": "DWORD" - }, - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "pRecipientInfo", - "type": "PCERT_INFO" - }, - { - "name": "pStreamInfo", - "type": "PCMSG_STREAM_INFO" - } - ], - "CryptMsgDuplicate": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - } - ], - "CryptMsgClose": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - } - ], - "CryptMsgUpdate": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "fFinal", - "type": "BOOL" - } - ], - "CryptMsgGetParam": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "dwParamType", - "type": "DWORD" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CryptMsgControl": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwCtrlType", - "type": "DWORD" - }, - { - "name": "pvCtrlPara", - "type": "void" - } - ], - "CryptMsgVerifyCountersignatureEncoded": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pbSignerInfo", - "type": "PBYTE" - }, - { - "name": "cbSignerInfo", - "type": "DWORD" - }, - { - "name": "pbSignerInfoCountersignature", - "type": "PBYTE" - }, - { - "name": "cbSignerInfoCountersignature", - "type": "DWORD" - }, - { - "name": "pciCountersigner", - "type": "PCERT_INFO" - } - ], - "CryptMsgVerifyCountersignatureEncodedEx": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pbSignerInfo", - "type": "PBYTE" - }, - { - "name": "cbSignerInfo", - "type": "DWORD" - }, - { - "name": "pbSignerInfoCountersignature", - "type": "PBYTE" - }, - { - "name": "cbSignerInfoCountersignature", - "type": "DWORD" - }, - { - "name": "dwSignerType", - "type": "DWORD" - }, - { - "name": "pvSigner", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvExtra", - "type": "void" - } - ], - "CryptMsgCountersign": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "cCountersigners", - "type": "DWORD" - }, - { - "name": "rgCountersigners", - "type": "PCMSG_SIGNER_ENCODE_INFO" - } - ], - "CryptMsgCountersignEncoded": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "pbSignerInfo", - "type": "PBYTE" - }, - { - "name": "cbSignerInfo", - "type": "DWORD" - }, - { - "name": "cCountersigners", - "type": "DWORD" - }, - { - "name": "rgCountersigners", - "type": "PCMSG_SIGNER_ENCODE_INFO" - }, - { - "name": "pbCountersignature", - "type": "PBYTE" - }, - { - "name": "pcbCountersignature", - "type": "PDWORD" - } - ], - "CertOpenStore": [ - { - "name": "lpszStoreProvider", - "type": "LPCSTR" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvPara", - "type": "void" - } - ], - "CertDuplicateStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - } - ], - "CertSaveStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "dwSaveAs", - "type": "DWORD" - }, - { - "name": "dwSaveTo", - "type": "DWORD" - }, - { - "name": "pvSaveToPara", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertCloseStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertGetSubjectCertificateFromStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertId", - "type": "PCERT_INFO" - } - ], - "CertEnumCertificatesInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pPrevCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertFindCertificateInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFindFlags", - "type": "DWORD" - }, - { - "name": "dwFindType", - "type": "DWORD" - }, - { - "name": "pvFindPara", - "type": "void" - }, - { - "name": "pPrevCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertGetIssuerCertificateFromStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pSubjectContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pPrevIssuerContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CertVerifySubjectCertificateContext": [ - { - "name": "pSubject", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pIssuer", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CertDuplicateCertificateContext": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertCreateCertificateContext": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCertEncoded", - "type": "BYTE" - }, - { - "name": "cbCertEncoded", - "type": "DWORD" - } - ], - "CertFreeCertificateContext": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertSetCertificateContextProperty": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CertGetCertificateContextProperty": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CertEnumCertificateContextProperties": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - } - ], - "CertCreateCTLEntryFromCertificateContextProperties": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "cOptAttr", - "type": "DWORD" - }, - { - "name": "rgOptAttr", - "type": "PCRYPT_ATTRIBUTE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pCtlEntry", - "type": "PCTL_ENTRY" - }, - { - "name": "pcbCtlEntry", - "type": "DWORD" - } - ], - "CertSetCertificateContextPropertiesFromCTLEntry": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pCtlEntry", - "type": "PCTL_ENTRY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertGetCRLFromStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pIssuerContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pPrevCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CertEnumCRLsInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pPrevCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertFindCRLInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFindFlags", - "type": "DWORD" - }, - { - "name": "dwFindType", - "type": "DWORD" - }, - { - "name": "pvFindPara", - "type": "void" - }, - { - "name": "pPrevCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertDuplicateCRLContext": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertCreateCRLContext": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCrlEncoded", - "type": "BYTE" - }, - { - "name": "cbCrlEncoded", - "type": "DWORD" - } - ], - "CertFreeCRLContext": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertSetCRLContextProperty": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CertGetCRLContextProperty": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CertEnumCRLContextProperties": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - } - ], - "CertFindCertificateInCRL": [ - { - "name": "pCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "ppCrlEntry", - "type": "PCRL_ENTRY" - } - ], - "CertIsValidCRLForCertificate": [ - { - "name": "pCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pCrl", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CertAddEncodedCertificateToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCertEncoded", - "type": "BYTE" - }, - { - "name": "cbCertEncoded", - "type": "DWORD" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertAddCertificateContextToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertAddSerializedElementToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pbElement", - "type": "BYTE" - }, - { - "name": "cbElement", - "type": "DWORD" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContextTypeFlags", - "type": "DWORD" - }, - { - "name": "pdwContextType", - "type": "DWORD" - }, - { - "name": "ppvContext", - "type": "void" - } - ], - "CertDeleteCertificateFromStore": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertAddEncodedCRLToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCrlEncoded", - "type": "BYTE" - }, - { - "name": "cbCrlEncoded", - "type": "DWORD" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertAddCRLContextToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertDeleteCRLFromStore": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertSerializeCertificateStoreElement": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbElement", - "type": "BYTE" - }, - { - "name": "pcbElement", - "type": "DWORD" - } - ], - "CertSerializeCRLStoreElement": [ - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbElement", - "type": "BYTE" - }, - { - "name": "pcbElement", - "type": "DWORD" - } - ], - "CertDuplicateCTLContext": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertCreateCTLContext": [ - { - "name": "dwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCtlEncoded", - "type": "BYTE" - }, - { - "name": "cbCtlEncoded", - "type": "DWORD" - } - ], - "CertFreeCTLContext": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertSetCTLContextProperty": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CertGetCTLContextProperty": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CertEnumCTLContextProperties": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwPropId", - "type": "DWORD" - } - ], - "CertEnumCTLsInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pPrevCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertFindSubjectInCTL": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "dwSubjectType", - "type": "DWORD" - }, - { - "name": "pvSubject", - "type": "void" - }, - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertFindCTLInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFindFlags", - "type": "DWORD" - }, - { - "name": "dwFindType", - "type": "DWORD" - }, - { - "name": "pvFindPara", - "type": "void" - }, - { - "name": "pPrevCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertAddEncodedCTLToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbCtlEncoded", - "type": "BYTE" - }, - { - "name": "cbCtlEncoded", - "type": "DWORD" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertAddCTLContextToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertSerializeCTLStoreElement": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbElement", - "type": "BYTE" - }, - { - "name": "pcbElement", - "type": "DWORD" - } - ], - "CertDeleteCTLFromStore": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertAddCertificateLinkToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCERT_CONTEXT" - } - ], - "CertAddCRLLinkToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCrlContext", - "type": "PCCRL_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCRL_CONTEXT" - } - ], - "CertAddCTLLinkToStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwAddDisposition", - "type": "DWORD" - }, - { - "name": "ppStoreContext", - "type": "PCCTL_CONTEXT" - } - ], - "CertAddStoreToCollection": [ - { - "name": "hCollectionStore", - "type": "HCERTSTORE" - }, - { - "name": "hSiblingStore", - "type": "HCERTSTORE" - }, - { - "name": "dwUpdateFlags", - "type": "DWORD" - }, - { - "name": "dwPriority", - "type": "DWORD" - } - ], - "CertRemoveStoreFromCollection": [ - { - "name": "hCollectionStore", - "type": "HCERTSTORE" - }, - { - "name": "hSiblingStore", - "type": "HCERTSTORE" - } - ], - "CertControlStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwCtrlType", - "type": "DWORD" - }, - { - "name": "pvCtrlPara", - "type": "void" - } - ], - "CertSetStoreProperty": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CertGetStoreProperty": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CertRegisterSystemStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pStoreInfo", - "type": "PCERT_SYSTEM_STORE_INFO" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CertRegisterPhysicalStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszStoreName", - "type": "LPCWSTR" - }, - { - "name": "pStoreInfo", - "type": "PCERT_PHYSICAL_STORE_INFO" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CertUnregisterSystemStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertUnregisterPhysicalStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszStoreName", - "type": "LPCWSTR" - } - ], - "CertEnumSystemStoreLocation": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnum", - "type": "PFN_CERT_ENUM_SYSTEM_STORE_LOCATION" - } - ], - "CertEnumSystemStore": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvSystemStoreLocationPara", - "type": "void" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnum", - "type": "PFN_CERT_ENUM_SYSTEM_STORE" - } - ], - "CertEnumPhysicalStore": [ - { - "name": "pvSystemStore", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnum", - "type": "PFN_CERT_ENUM_PHYSICAL_STORE" - } - ], - "CertGetEnhancedKeyUsage": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pUsage", - "type": "PCERT_ENHKEY_USAGE" - }, - { - "name": "pcbUsage", - "type": "DWORD" - } - ], - "CertSetEnhancedKeyUsage": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pUsage", - "type": "PCERT_ENHKEY_USAGE" - } - ], - "CertAddEnhancedKeyUsageIdentifier": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pszUsageIdentifier", - "type": "LPCSTR" - } - ], - "CertRemoveEnhancedKeyUsageIdentifier": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pszUsageIdentifier", - "type": "LPCSTR" - } - ], - "CertGetValidUsages": [ - { - "name": "cCerts", - "type": "DWORD" - }, - { - "name": "rghCerts", - "type": "PCCERT_CONTEXT" - }, - { - "name": "cNumOIDs", - "type": "int" - }, - { - "name": "rghOIDs", - "type": "LPSTR" - }, - { - "name": "pcbOIDs", - "type": "DWORD" - } - ], - "CryptMsgGetAndVerifySigner": [ - { - "name": "hCryptMsg", - "type": "HCRYPTMSG" - }, - { - "name": "cSignerStore", - "type": "DWORD" - }, - { - "name": "rghSignerStore", - "type": "HCERTSTORE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "ppSigner", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pdwSignerIndex", - "type": "DWORD" - } - ], - "CryptMsgSignCTL": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "pbCtlContent", - "type": "BYTE" - }, - { - "name": "cbCtlContent", - "type": "DWORD" - }, - { - "name": "pSignInfo", - "type": "PCMSG_SIGNED_ENCODE_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CryptMsgEncodeAndSignCTL": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "pCtlInfo", - "type": "PCTL_INFO" - }, - { - "name": "pSignInfo", - "type": "PCMSG_SIGNED_ENCODE_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CertFindSubjectInSortedCTL": [ - { - "name": "pSubjectIdentifier", - "type": "PCRYPT_DATA_BLOB" - }, - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pEncodedAttributes", - "type": "PCRYPT_DER_BLOB" - } - ], - "CertEnumSubjectInSortedCTL": [ - { - "name": "pCtlContext", - "type": "PCCTL_CONTEXT" - }, - { - "name": "ppvNextSubject", - "type": "void" - }, - { - "name": "pSubjectIdentifier", - "type": "PCRYPT_DER_BLOB" - }, - { - "name": "pEncodedAttributes", - "type": "PCRYPT_DER_BLOB" - } - ], - "CertVerifyCTLUsage": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "dwSubjectType", - "type": "DWORD" - }, - { - "name": "pvSubject", - "type": "void" - }, - { - "name": "pSubjectUsage", - "type": "PCTL_USAGE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pVerifyUsagePara", - "type": "PCTL_VERIFY_USAGE_PARA" - }, - { - "name": "pVerifyUsageStatus", - "type": "PCTL_VERIFY_USAGE_STATUS" - } - ], - "CertVerifyRevocation": [ - { - "name": "dwEncodingType", - "type": "DWORD" - }, - { - "name": "dwRevType", - "type": "DWORD" - }, - { - "name": "cContext", - "type": "DWORD" - }, - { - "name": "rgpvContext", - "type": "PVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pRevPara", - "type": "PCERT_REVOCATION_PARA" - }, - { - "name": "pRevStatus", - "type": "PCERT_REVOCATION_STATUS" - } - ], - "CertCompareIntegerBlob": [ - { - "name": "pInt1", - "type": "PCRYPT_INTEGER_BLOB" - }, - { - "name": "pInt2", - "type": "PCRYPT_INTEGER_BLOB" - } - ], - "CertCompareCertificate": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertId1", - "type": "PCERT_INFO" - }, - { - "name": "pCertId2", - "type": "PCERT_INFO" - } - ], - "CertCompareCertificateName": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertName1", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "pCertName2", - "type": "PCERT_NAME_BLOB" - } - ], - "CertIsRDNAttrsInCertificateName": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pCertName", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "pRDN", - "type": "PCERT_RDN" - } - ], - "CertComparePublicKeyInfo": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pPublicKey1", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pPublicKey2", - "type": "PCERT_PUBLIC_KEY_INFO" - } - ], - "CertGetPublicKeyLength": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pPublicKey", - "type": "PCERT_PUBLIC_KEY_INFO" - } - ], - "CryptVerifyCertificateSignature": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pPublicKey", - "type": "PCERT_PUBLIC_KEY_INFO" - } - ], - "CryptVerifyCertificateSignatureEx": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwSubjectType", - "type": "DWORD" - }, - { - "name": "pvSubject", - "type": "void" - }, - { - "name": "dwIssuerType", - "type": "DWORD" - }, - { - "name": "pvIssuer", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvExtra", - "type": "void" - } - ], - "CertIsStrongHashToSign": [ - { - "name": "pStrongSignPara", - "type": "PCCERT_STRONG_SIGN_PARA" - }, - { - "name": "pwszCNGHashAlgid", - "type": "LPCWSTR" - }, - { - "name": "pSigningCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptHashToBeSigned": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptHashCertificate": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptHashCertificate2": [ - { - "name": "pwszCNGHashAlgid", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "cbEncoded", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptSignCertificate": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pbEncodedToBeSigned", - "type": "BYTE" - }, - { - "name": "cbEncodedToBeSigned", - "type": "DWORD" - }, - { - "name": "pSignatureAlgorithm", - "type": "PCRYPT_ALGORITHM_IDENTIFIER" - }, - { - "name": "pvHashAuxInfo", - "type": "void" - }, - { - "name": "pbSignature", - "type": "BYTE" - }, - { - "name": "pcbSignature", - "type": "DWORD" - } - ], - "CryptSignAndEncodeCertificate": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "lpszStructType", - "type": "LPCSTR" - }, - { - "name": "pvStructInfo", - "type": "void" - }, - { - "name": "pSignatureAlgorithm", - "type": "PCRYPT_ALGORITHM_IDENTIFIER" - }, - { - "name": "pvHashAuxInfo", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - } - ], - "CertVerifyTimeValidity": [ - { - "name": "pTimeToVerify", - "type": "LPFILETIME" - }, - { - "name": "pCertInfo", - "type": "PCERT_INFO" - } - ], - "CertVerifyCRLTimeValidity": [ - { - "name": "pTimeToVerify", - "type": "LPFILETIME" - }, - { - "name": "pCrlInfo", - "type": "PCRL_INFO" - } - ], - "CertVerifyValidityNesting": [ - { - "name": "pSubjectInfo", - "type": "PCERT_INFO" - }, - { - "name": "pIssuerInfo", - "type": "PCERT_INFO" - } - ], - "CertVerifyCRLRevocation": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertId", - "type": "PCERT_INFO" - }, - { - "name": "cCrlInfo", - "type": "DWORD" - }, - { - "name": "rgpCrlInfo", - "type": "PCRL_INFO" - } - ], - "CertAlgIdToOID": [ - { - "name": "dwAlgId", - "type": "DWORD" - } - ], - "CertOIDToAlgId": [ - { - "name": "pszObjId", - "type": "LPCSTR" - } - ], - "CertFindExtension": [ - { - "name": "pszObjId", - "type": "LPCSTR" - }, - { - "name": "cExtensions", - "type": "DWORD" - }, - { - "name": "rgExtensions", - "type": "CERT_EXTENSION" - } - ], - "CertFindAttribute": [ - { - "name": "pszObjId", - "type": "LPCSTR" - }, - { - "name": "cAttr", - "type": "DWORD" - }, - { - "name": "rgAttr", - "type": "CRYPT_ATTRIBUTE" - } - ], - "CertFindRDNAttr": [ - { - "name": "pszObjId", - "type": "LPCSTR" - }, - { - "name": "pName", - "type": "PCERT_NAME_INFO" - } - ], - "CertGetIntendedKeyUsage": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pCertInfo", - "type": "PCERT_INFO" - }, - { - "name": "pbKeyUsage", - "type": "BYTE" - }, - { - "name": "cbKeyUsage", - "type": "DWORD" - } - ], - "CryptInstallDefaultContext": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwDefaultType", - "type": "DWORD" - }, - { - "name": "pvDefaultPara", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "phDefaultContext", - "type": "HCRYPTDEFAULTCONTEXT" - } - ], - "CryptUninstallDefaultContext": [ - { - "name": "hDefaultContext", - "type": "HCRYPTDEFAULTCONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CryptExportPublicKeyInfo": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pcbInfo", - "type": "DWORD" - } - ], - "CryptExportPublicKeyInfoEx": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszPublicKeyObjId", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pcbInfo", - "type": "DWORD" - } - ], - "CryptExportPublicKeyInfoFromBCryptKeyHandle": [ - { - "name": "hBCryptKey", - "type": "BCRYPT_KEY_HANDLE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszPublicKeyObjId", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pcbInfo", - "type": "DWORD" - } - ], - "CryptImportPublicKeyInfo": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptImportPublicKeyInfoEx": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "aiKeyAlg", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "phKey", - "type": "HCRYPTKEY" - } - ], - "CryptImportPublicKeyInfoEx2": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "phKey", - "type": "BCRYPT_KEY_HANDLE" - } - ], - "CryptAcquireCertificatePrivateKey": [ - { - "name": "pCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvParameters", - "type": "void" - }, - { - "name": "phCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "pdwKeySpec", - "type": "DWORD" - }, - { - "name": "pfCallerFreeProvOrNCryptKey", - "type": "BOOL" - } - ], - "CryptFindCertificateKeyProvInfo": [ - { - "name": "pCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - } - ], - "CryptImportPKCS8": [ - { - "name": "sPrivateKeyAndParams", - "type": "CRYPT_PKCS8_IMPORT_PARAMS" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "pvAuxInfo", - "type": "void" - } - ], - "CryptExportPKCS8": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV" - }, - { - "name": "dwKeySpec", - "type": "DWORD" - }, - { - "name": "pszPrivateKeyObjId", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "pbPrivateKeyBlob", - "type": "BYTE" - }, - { - "name": "pcbPrivateKeyBlob", - "type": "DWORD" - } - ], - "CryptExportPKCS8Ex": [ - { - "name": "psExportParams", - "type": "CRYPT_PKCS8_EXPORT_PARAMS" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvAuxInfo", - "type": "void" - }, - { - "name": "pbPrivateKeyBlob", - "type": "BYTE" - }, - { - "name": "pcbPrivateKeyBlob", - "type": "DWORD" - } - ], - "CryptHashPublicKeyInfo": [ - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "Algid", - "type": "ALG_ID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CertRDNValueToStrA": [ - { - "name": "dwValueType", - "type": "DWORD" - }, - { - "name": "pValue", - "type": "PCERT_RDN_VALUE_BLOB" - }, - { - "name": "psz", - "type": "LPSTR" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "CertRDNValueToStrW": [ - { - "name": "dwValueType", - "type": "DWORD" - }, - { - "name": "pValue", - "type": "PCERT_RDN_VALUE_BLOB" - }, - { - "name": "psz", - "type": "LPWSTR" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "CertNameToStrA": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pName", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "dwStrType", - "type": "DWORD" - }, - { - "name": "psz", - "type": "LPSTR" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "CertNameToStrW": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pName", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "dwStrType", - "type": "DWORD" - }, - { - "name": "psz", - "type": "LPWSTR" - }, - { - "name": "csz", - "type": "DWORD" - } - ], - "CertStrToNameA": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszX500", - "type": "LPCSTR" - }, - { - "name": "dwStrType", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - }, - { - "name": "ppszError", - "type": "LPCSTR" - } - ], - "CertStrToNameW": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszX500", - "type": "LPCWSTR" - }, - { - "name": "dwStrType", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pbEncoded", - "type": "BYTE" - }, - { - "name": "pcbEncoded", - "type": "DWORD" - }, - { - "name": "ppszError", - "type": "LPCWSTR" - } - ], - "CertGetNameStringA": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvTypePara", - "type": "void" - }, - { - "name": "pszNameString", - "type": "LPSTR" - }, - { - "name": "cchNameString", - "type": "DWORD" - } - ], - "CertGetNameStringW": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvTypePara", - "type": "void" - }, - { - "name": "pszNameString", - "type": "LPWSTR" - }, - { - "name": "cchNameString", - "type": "DWORD" - } - ], - "CryptSignMessage": [ - { - "name": "pSignPara", - "type": "PCRYPT_SIGN_MESSAGE_PARA" - }, - { - "name": "fDetachedSignature", - "type": "BOOL" - }, - { - "name": "cToBeSigned", - "type": "DWORD" - }, - { - "name": "rgpbToBeSigned", - "type": "BYTE" - }, - { - "name": "rgcbToBeSigned", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "pcbSignedBlob", - "type": "DWORD" - } - ], - "CryptVerifyMessageSignature": [ - { - "name": "pVerifyPara", - "type": "PCRYPT_VERIFY_MESSAGE_PARA" - }, - { - "name": "dwSignerIndex", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "cbSignedBlob", - "type": "DWORD" - }, - { - "name": "pbDecoded", - "type": "BYTE" - }, - { - "name": "pcbDecoded", - "type": "DWORD" - }, - { - "name": "ppSignerCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptGetMessageSignerCount": [ - { - "name": "dwMsgEncodingType", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "cbSignedBlob", - "type": "DWORD" - } - ], - "CryptGetMessageCertificates": [ - { - "name": "dwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "hCryptProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "cbSignedBlob", - "type": "DWORD" - } - ], - "CryptVerifyDetachedMessageSignature": [ - { - "name": "pVerifyPara", - "type": "PCRYPT_VERIFY_MESSAGE_PARA" - }, - { - "name": "dwSignerIndex", - "type": "DWORD" - }, - { - "name": "pbDetachedSignBlob", - "type": "BYTE" - }, - { - "name": "cbDetachedSignBlob", - "type": "DWORD" - }, - { - "name": "cToBeSigned", - "type": "DWORD" - }, - { - "name": "rgpbToBeSigned", - "type": "BYTE" - }, - { - "name": "rgcbToBeSigned", - "type": "DWORD" - }, - { - "name": "ppSignerCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptEncryptMessage": [ - { - "name": "pEncryptPara", - "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" - }, - { - "name": "cRecipientCert", - "type": "DWORD" - }, - { - "name": "rgpRecipientCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pbToBeEncrypted", - "type": "BYTE" - }, - { - "name": "cbToBeEncrypted", - "type": "DWORD" - }, - { - "name": "pbEncryptedBlob", - "type": "BYTE" - }, - { - "name": "pcbEncryptedBlob", - "type": "DWORD" - } - ], - "CryptDecryptMessage": [ - { - "name": "pDecryptPara", - "type": "PCRYPT_DECRYPT_MESSAGE_PARA" - }, - { - "name": "pbEncryptedBlob", - "type": "BYTE" - }, - { - "name": "cbEncryptedBlob", - "type": "DWORD" - }, - { - "name": "pbDecrypted", - "type": "BYTE" - }, - { - "name": "pcbDecrypted", - "type": "DWORD" - }, - { - "name": "ppXchgCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptSignAndEncryptMessage": [ - { - "name": "pSignPara", - "type": "PCRYPT_SIGN_MESSAGE_PARA" - }, - { - "name": "pEncryptPara", - "type": "PCRYPT_ENCRYPT_MESSAGE_PARA" - }, - { - "name": "cRecipientCert", - "type": "DWORD" - }, - { - "name": "rgpRecipientCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pbToBeSignedAndEncrypted", - "type": "BYTE" - }, - { - "name": "cbToBeSignedAndEncrypted", - "type": "DWORD" - }, - { - "name": "pbSignedAndEncryptedBlob", - "type": "BYTE" - }, - { - "name": "pcbSignedAndEncryptedBlob", - "type": "DWORD" - } - ], - "CryptDecryptAndVerifyMessageSignature": [ - { - "name": "pDecryptPara", - "type": "PCRYPT_DECRYPT_MESSAGE_PARA" - }, - { - "name": "pVerifyPara", - "type": "PCRYPT_VERIFY_MESSAGE_PARA" - }, - { - "name": "dwSignerIndex", - "type": "DWORD" - }, - { - "name": "pbEncryptedBlob", - "type": "BYTE" - }, - { - "name": "cbEncryptedBlob", - "type": "DWORD" - }, - { - "name": "pbDecrypted", - "type": "BYTE" - }, - { - "name": "pcbDecrypted", - "type": "DWORD" - }, - { - "name": "ppXchgCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "ppSignerCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptDecodeMessage": [ - { - "name": "dwMsgTypeFlags", - "type": "DWORD" - }, - { - "name": "pDecryptPara", - "type": "PCRYPT_DECRYPT_MESSAGE_PARA" - }, - { - "name": "pVerifyPara", - "type": "PCRYPT_VERIFY_MESSAGE_PARA" - }, - { - "name": "dwSignerIndex", - "type": "DWORD" - }, - { - "name": "pbEncodedBlob", - "type": "BYTE" - }, - { - "name": "cbEncodedBlob", - "type": "DWORD" - }, - { - "name": "dwPrevInnerContentType", - "type": "DWORD" - }, - { - "name": "pdwMsgType", - "type": "DWORD" - }, - { - "name": "pdwInnerContentType", - "type": "DWORD" - }, - { - "name": "pbDecoded", - "type": "BYTE" - }, - { - "name": "pcbDecoded", - "type": "DWORD" - }, - { - "name": "ppXchgCert", - "type": "PCCERT_CONTEXT" - }, - { - "name": "ppSignerCert", - "type": "PCCERT_CONTEXT" - } - ], - "CryptHashMessage": [ - { - "name": "pHashPara", - "type": "PCRYPT_HASH_MESSAGE_PARA" - }, - { - "name": "fDetachedHash", - "type": "BOOL" - }, - { - "name": "cToBeHashed", - "type": "DWORD" - }, - { - "name": "rgpbToBeHashed", - "type": "BYTE" - }, - { - "name": "rgcbToBeHashed", - "type": "DWORD" - }, - { - "name": "pbHashedBlob", - "type": "BYTE" - }, - { - "name": "pcbHashedBlob", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptVerifyMessageHash": [ - { - "name": "pHashPara", - "type": "PCRYPT_HASH_MESSAGE_PARA" - }, - { - "name": "pbHashedBlob", - "type": "BYTE" - }, - { - "name": "cbHashedBlob", - "type": "DWORD" - }, - { - "name": "pbToBeHashed", - "type": "BYTE" - }, - { - "name": "pcbToBeHashed", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptVerifyDetachedMessageHash": [ - { - "name": "pHashPara", - "type": "PCRYPT_HASH_MESSAGE_PARA" - }, - { - "name": "pbDetachedHashBlob", - "type": "BYTE" - }, - { - "name": "cbDetachedHashBlob", - "type": "DWORD" - }, - { - "name": "cToBeHashed", - "type": "DWORD" - }, - { - "name": "rgpbToBeHashed", - "type": "BYTE" - }, - { - "name": "rgcbToBeHashed", - "type": "DWORD" - }, - { - "name": "pbComputedHash", - "type": "BYTE" - }, - { - "name": "pcbComputedHash", - "type": "DWORD" - } - ], - "CryptSignMessageWithKey": [ - { - "name": "pSignPara", - "type": "PCRYPT_KEY_SIGN_MESSAGE_PARA" - }, - { - "name": "pbToBeSigned", - "type": "BYTE" - }, - { - "name": "cbToBeSigned", - "type": "DWORD" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "pcbSignedBlob", - "type": "DWORD" - } - ], - "CryptVerifyMessageSignatureWithKey": [ - { - "name": "pVerifyPara", - "type": "PCRYPT_KEY_VERIFY_MESSAGE_PARA" - }, - { - "name": "pPublicKeyInfo", - "type": "PCERT_PUBLIC_KEY_INFO" - }, - { - "name": "pbSignedBlob", - "type": "BYTE" - }, - { - "name": "cbSignedBlob", - "type": "DWORD" - }, - { - "name": "pbDecoded", - "type": "BYTE" - }, - { - "name": "pcbDecoded", - "type": "DWORD" - } - ], - "CertOpenSystemStoreA": [ - { - "name": "hProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "szSubsystemProtocol", - "type": "LPCSTR" - } - ], - "CertOpenSystemStoreW": [ - { - "name": "hProv", - "type": "HCRYPTPROV_LEGACY" - }, - { - "name": "szSubsystemProtocol", - "type": "LPCWSTR" - } - ], - "CertAddEncodedCertificateToSystemStoreA": [ - { - "name": "szCertStoreName", - "type": "LPCSTR" - }, - { - "name": "pbCertEncoded", - "type": "BYTE" - }, - { - "name": "cbCertEncoded", - "type": "DWORD" - } - ], - "CertAddEncodedCertificateToSystemStoreW": [ - { - "name": "szCertStoreName", - "type": "LPCWSTR" - }, - { - "name": "pbCertEncoded", - "type": "BYTE" - }, - { - "name": "cbCertEncoded", - "type": "DWORD" - } - ], - "CryptQueryObject": [ - { - "name": "dwObjectType", - "type": "DWORD" - }, - { - "name": "pvObject", - "type": "void" - }, - { - "name": "dwExpectedContentTypeFlags", - "type": "DWORD" - }, - { - "name": "dwExpectedFormatTypeFlags", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pdwMsgAndCertEncodingType", - "type": "DWORD" - }, - { - "name": "pdwContentType", - "type": "DWORD" - }, - { - "name": "pdwFormatType", - "type": "DWORD" - }, - { - "name": "phCertStore", - "type": "HCERTSTORE" - }, - { - "name": "phMsg", - "type": "HCRYPTMSG" - }, - { - "name": "ppvContext", - "type": "void" - } - ], - "CryptMemAlloc": [ - { - "name": "cbSize", - "type": "ULONG" - } - ], - "CryptMemRealloc": [ - { - "name": "pv", - "type": "LPVOID" - }, - { - "name": "cbSize", - "type": "ULONG" - } - ], - "CryptMemFree": [ - { - "name": "pv", - "type": "LPVOID" - } - ], - "CryptCreateAsyncHandle": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "phAsync", - "type": "PHCRYPTASYNC" - } - ], - "CryptGetAsyncParam": [ - { - "name": "hAsync", - "type": "HCRYPTASYNC" - }, - { - "name": "pszParamOid", - "type": "LPSTR" - }, - { - "name": "ppvParam", - "type": "LPVOID" - }, - { - "name": "ppfnFree", - "type": "PFN_CRYPT_ASYNC_PARAM_FREE_FUNC" - } - ], - "CryptCloseAsyncHandle": [ - { - "name": "hAsync", - "type": "HCRYPTASYNC" - } - ], - "CryptRetrieveObjectByUrlA": [ - { - "name": "pszUrl", - "type": "LPCSTR" - }, - { - "name": "pszObjectOid", - "type": "LPCSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "ppvObject", - "type": "LPVOID" - }, - { - "name": "hAsyncRetrieve", - "type": "HCRYPTASYNC" - }, - { - "name": "pCredentials", - "type": "PCRYPT_CREDENTIALS" - }, - { - "name": "pvVerify", - "type": "LPVOID" - }, - { - "name": "pAuxInfo", - "type": "PCRYPT_RETRIEVE_AUX_INFO" - } - ], - "CryptRetrieveObjectByUrlW": [ - { - "name": "pszUrl", - "type": "LPCWSTR" - }, - { - "name": "pszObjectOid", - "type": "LPCSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "ppvObject", - "type": "LPVOID" - }, - { - "name": "hAsyncRetrieve", - "type": "HCRYPTASYNC" - }, - { - "name": "pCredentials", - "type": "PCRYPT_CREDENTIALS" - }, - { - "name": "pvVerify", - "type": "LPVOID" - }, - { - "name": "pAuxInfo", - "type": "PCRYPT_RETRIEVE_AUX_INFO" - } - ], - "CryptGetObjectUrl": [ - { - "name": "pszUrlOid", - "type": "LPCSTR" - }, - { - "name": "pvPara", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pUrlArray", - "type": "PCRYPT_URL_ARRAY" - }, - { - "name": "pcbUrlArray", - "type": "DWORD" - }, - { - "name": "pUrlInfo", - "type": "PCRYPT_URL_INFO" - }, - { - "name": "pcbUrlInfo", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "LPVOID" - } - ], - "CryptGetTimeValidObject": [ - { - "name": "pszTimeValidOid", - "type": "LPCSTR" - }, - { - "name": "pvPara", - "type": "LPVOID" - }, - { - "name": "pIssuer", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pftValidFor", - "type": "LPFILETIME" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "ppvObject", - "type": "LPVOID" - }, - { - "name": "pCredentials", - "type": "PCRYPT_CREDENTIALS" - }, - { - "name": "pExtraInfo", - "type": "PCRYPT_GET_TIME_VALID_OBJECT_EXTRA_INFO" - } - ], - "CertCreateSelfSignCertificate": [ - { - "name": "hCryptProvOrNCryptKey", - "type": "HCRYPTPROV_OR_NCRYPT_KEY_HANDLE" - }, - { - "name": "pSubjectIssuerBlob", - "type": "PCERT_NAME_BLOB" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pKeyProvInfo", - "type": "PCRYPT_KEY_PROV_INFO" - }, - { - "name": "pSignatureAlgorithm", - "type": "PCRYPT_ALGORITHM_IDENTIFIER" - }, - { - "name": "pStartTime", - "type": "PSYSTEMTIME" - }, - { - "name": "pEndTime", - "type": "PSYSTEMTIME" - }, - { - "name": "pExtensions", - "type": "PCERT_EXTENSIONS" - } - ], - "CryptGetKeyIdentifierProperty": [ - { - "name": "pKeyIdentifier", - "type": "CRYPT_HASH_BLOB" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszComputerName", - "type": "LPCWSTR" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "CryptSetKeyIdentifierProperty": [ - { - "name": "pKeyIdentifier", - "type": "CRYPT_HASH_BLOB" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszComputerName", - "type": "LPCWSTR" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pvData", - "type": "void" - } - ], - "CryptEnumKeyIdentifierProperties": [ - { - "name": "pKeyIdentifier", - "type": "CRYPT_HASH_BLOB" - }, - { - "name": "dwPropId", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pwszComputerName", - "type": "LPCWSTR" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pvArg", - "type": "void" - }, - { - "name": "pfnEnum", - "type": "PFN_CRYPT_ENUM_KEYID_PROP" - } - ], - "CryptCreateKeyIdentifierFromCSP": [ - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "pszPubKeyOID", - "type": "LPCSTR" - }, - { - "name": "pPubKeyStruc", - "type": "PUBLICKEYSTRUC" - }, - { - "name": "cbPubKeyStruc", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "pbHash", - "type": "BYTE" - }, - { - "name": "pcbHash", - "type": "DWORD" - } - ], - "CertCreateCertificateChainEngine": [ - { - "name": "pConfig", - "type": "PCERT_CHAIN_ENGINE_CONFIG" - }, - { - "name": "phChainEngine", - "type": "HCERTCHAINENGINE" - } - ], - "CertFreeCertificateChainEngine": [ - { - "name": "hChainEngine", - "type": "HCERTCHAINENGINE" - } - ], - "CertResyncCertificateChainEngine": [ - { - "name": "hChainEngine", - "type": "HCERTCHAINENGINE" - } - ], - "CertGetCertificateChain": [ - { - "name": "hChainEngine", - "type": "HCERTCHAINENGINE" - }, - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "pTime", - "type": "LPFILETIME" - }, - { - "name": "hAdditionalStore", - "type": "HCERTSTORE" - }, - { - "name": "pChainPara", - "type": "PCERT_CHAIN_PARA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "LPVOID" - }, - { - "name": "ppChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertFreeCertificateChain": [ - { - "name": "pChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertDuplicateCertificateChain": [ - { - "name": "pChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertFindChainInStore": [ - { - "name": "hCertStore", - "type": "HCERTSTORE" - }, - { - "name": "dwCertEncodingType", - "type": "DWORD" - }, - { - "name": "dwFindFlags", - "type": "DWORD" - }, - { - "name": "dwFindType", - "type": "DWORD" - }, - { - "name": "pvFindPara", - "type": "void" - }, - { - "name": "pPrevChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertVerifyCertificateChainPolicy": [ - { - "name": "pszPolicyOID", - "type": "LPCSTR" - }, - { - "name": "pChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - }, - { - "name": "pPolicyPara", - "type": "PCERT_CHAIN_POLICY_PARA" - }, - { - "name": "pPolicyStatus", - "type": "PCERT_CHAIN_POLICY_STATUS" - } - ], - "CryptStringToBinaryA": [ - { - "name": "pszString", - "type": "LPCSTR" - }, - { - "name": "cchString", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbBinary", - "type": "BYTE" - }, - { - "name": "pcbBinary", - "type": "DWORD" - }, - { - "name": "pdwSkip", - "type": "DWORD" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CryptStringToBinaryW": [ - { - "name": "pszString", - "type": "LPCWSTR" - }, - { - "name": "cchString", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pbBinary", - "type": "BYTE" - }, - { - "name": "pcbBinary", - "type": "DWORD" - }, - { - "name": "pdwSkip", - "type": "DWORD" - }, - { - "name": "pdwFlags", - "type": "DWORD" - } - ], - "CryptBinaryToStringA": [ - { - "name": "pbBinary", - "type": "BYTE" - }, - { - "name": "cbBinary", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszString", - "type": "LPSTR" - }, - { - "name": "pcchString", - "type": "DWORD" - } - ], - "CryptBinaryToStringW": [ - { - "name": "pbBinary", - "type": "BYTE" - }, - { - "name": "cbBinary", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pszString", - "type": "LPWSTR" - }, - { - "name": "pcchString", - "type": "DWORD" - } - ], - "PFXImportCertStore": [ - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - }, - { - "name": "szPassword", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PFXIsPFXBlob": [ - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - } - ], - "PFXVerifyPassword": [ - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - }, - { - "name": "szPassword", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PFXExportCertStoreEx": [ - { - "name": "hStore", - "type": "HCERTSTORE" - }, - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - }, - { - "name": "szPassword", - "type": "LPCWSTR" - }, - { - "name": "pvPara", - "type": "void" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PFXExportCertStore": [ - { - "name": "hStore", - "type": "HCERTSTORE" - }, - { - "name": "pPFX", - "type": "CRYPT_DATA_BLOB" - }, - { - "name": "szPassword", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertOpenServerOcspResponse": [ - { - "name": "pChainContext", - "type": "PCCERT_CHAIN_CONTEXT" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pOpenPara", - "type": "PCERT_SERVER_OCSP_RESPONSE_OPEN_PARA" - } - ], - "CertAddRefServerOcspResponse": [ - { - "name": "hServerOcspResponse", - "type": "HCERT_SERVER_OCSP_RESPONSE" - } - ], - "CertCloseServerOcspResponse": [ - { - "name": "hServerOcspResponse", - "type": "HCERT_SERVER_OCSP_RESPONSE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "CertGetServerOcspResponseContext": [ - { - "name": "hServerOcspResponse", - "type": "HCERT_SERVER_OCSP_RESPONSE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "LPVOID" - } - ], - "CertAddRefServerOcspResponseContext": [ - { - "name": "pServerOcspResponseContext", - "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" - } - ], - "CertFreeServerOcspResponseContext": [ - { - "name": "pServerOcspResponseContext", - "type": "PCCERT_SERVER_OCSP_RESPONSE_CONTEXT" - } - ], - "CertRetrieveLogoOrBiometricInfo": [ - { - "name": "pCertContext", - "type": "PCCERT_CONTEXT" - }, - { - "name": "lpszLogoOrBiometricType", - "type": "LPCSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pvReserved", - "type": "void" - }, - { - "name": "ppbData", - "type": "BYTE" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "ppwszMimeType", - "type": "LPWSTR" - } - ], - "CertSelectCertificateChains": [ - { - "name": "pSelectionContext", - "type": "LPCGUID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pChainParameters", - "type": "PCCERT_SELECT_CHAIN_PARA" - }, - { - "name": "cCriteria", - "type": "DWORD" - }, - { - "name": "rgpCriteria", - "type": "PCCERT_SELECT_CRITERIA" - }, - { - "name": "hStore", - "type": "HCERTSTORE" - }, - { - "name": "pcSelection", - "type": "PDWORD" - }, - { - "name": "pprgpSelection", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CertFreeCertificateChainList": [ - { - "name": "prgpSelection", - "type": "PCCERT_CHAIN_CONTEXT" - } - ], - "CryptRetrieveTimeStamp": [ - { - "name": "wszUrl", - "type": "LPCWSTR" - }, - { - "name": "dwRetrievalFlags", - "type": "DWORD" - }, - { - "name": "dwTimeout", - "type": "DWORD" - }, - { - "name": "pszHashId", - "type": "LPCSTR" - }, - { - "name": "pPara", - "type": "CRYPT_TIMESTAMP_PARA" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "ppTsContext", - "type": "PCRYPT_TIMESTAMP_CONTEXT" - }, - { - "name": "ppTsSigner", - "type": "PCCERT_CONTEXT" - }, - { - "name": "phStore", - "type": "HCERTSTORE" - } - ], - "CryptVerifyTimeStampSignature": [ - { - "name": "pbTSContentInfo", - "type": "BYTE" - }, - { - "name": "cbTSContentInfo", - "type": "DWORD" - }, - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "hAdditionalStore", - "type": "HCERTSTORE" - }, - { - "name": "ppTsContext", - "type": "PCRYPT_TIMESTAMP_CONTEXT" - }, - { - "name": "ppTsSigner", - "type": "PCCERT_CONTEXT" - }, - { - "name": "phStore", - "type": "HCERTSTORE" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/secforwarder_dll.json b/qiling/extensions/windows_sdk/secforwarder_dll.json new file mode 100644 index 000000000..05f713906 --- /dev/null +++ b/qiling/extensions/windows_sdk/secforwarder_dll.json @@ -0,0 +1,36 @@ +{ + "CryptCreateAsyncHandle": [ + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "phAsync", + "type": "PHCRYPTASYNC" + } + ], + "CryptGetAsyncParam": [ + { + "name": "hAsync", + "type": "HCRYPTASYNC" + }, + { + "name": "pszParamOid", + "type": "LPSTR" + }, + { + "name": "ppvParam", + "type": "LPVOID" + }, + { + "name": "ppfnFree", + "type": "PFN_CRYPT_ASYNC_PARAM_FREE_FUNC" + } + ], + "CryptCloseAsyncHandle": [ + { + "name": "hAsync", + "type": "HCRYPTASYNC" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sechost.json b/qiling/extensions/windows_sdk/sechost.json deleted file mode 100644 index 357d16306..000000000 --- a/qiling/extensions/windows_sdk/sechost.json +++ /dev/null @@ -1,44 +0,0 @@ -{ - "EventAccessControl": [ - { - "name": "Guid", - "type": "LPGUID" - }, - { - "name": "Operation", - "type": "ULONG" - }, - { - "name": "Sid", - "type": "PSID" - }, - { - "name": "Rights", - "type": "ULONG" - }, - { - "name": "AllowOrDeny", - "type": "BOOLEAN" - } - ], - "EventAccessQuery": [ - { - "name": "Guid", - "type": "LPGUID" - }, - { - "name": "Buffer", - "type": "PSECURITY_DESCRIPTOR" - }, - { - "name": "BufferSize", - "type": "PULONG" - } - ], - "EventAccessRemove": [ - { - "name": "Guid", - "type": "LPGUID" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sechost_dll.json b/qiling/extensions/windows_sdk/sechost_dll.json new file mode 100644 index 000000000..c17af9504 --- /dev/null +++ b/qiling/extensions/windows_sdk/sechost_dll.json @@ -0,0 +1,384 @@ +{ + "GetServiceRegistryStateKey": [ + { + "name": "ServiceStatusHandle", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "StateType", + "type": "SERVICE_REGISTRY_STATE_TYPE" + }, + { + "name": "AccessMask", + "type": "DWORD" + }, + { + "name": "ServiceStateKey", + "type": "HKEY" + } + ], + "GetServiceDirectory": [ + { + "name": "hServiceStatus", + "type": "SERVICE_STATUS_HANDLE" + }, + { + "name": "eDirectoryType", + "type": "SERVICE_DIRECTORY_TYPE" + }, + { + "name": "lpPathBuffer", + "type": "PWCHAR" + }, + { + "name": "cchPathBufferLength", + "type": "DWORD" + }, + { + "name": "lpcchRequiredBufferLength", + "type": "DWORD" + } + ], + "StartTraceW": [ + { + "name": "TraceHandle", + "type": "PTRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "StartTraceA": [ + { + "name": "TraceHandle", + "type": "PTRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "StopTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "StopTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + } + ], + "ControlTraceW": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCWSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + }, + { + "name": "ControlCode", + "type": "ULONG" + } + ], + "ControlTraceA": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InstanceName", + "type": "LPCSTR" + }, + { + "name": "Properties", + "type": "PEVENT_TRACE_PROPERTIES" + }, + { + "name": "ControlCode", + "type": "ULONG" + } + ], + "QueryAllTracesW": [ + { + "name": "PropertyArray", + "type": "PEVENT_TRACE_PROPERTIES" + }, + { + "name": "PropertyArrayCount", + "type": "ULONG" + }, + { + "name": "LoggerCount", + "type": "PULONG" + } + ], + "QueryAllTracesA": [ + { + "name": "PropertyArray", + "type": "PEVENT_TRACE_PROPERTIES" + }, + { + "name": "PropertyArrayCount", + "type": "ULONG" + }, + { + "name": "LoggerCount", + "type": "PULONG" + } + ], + "EnableTraceEx2": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + }, + { + "name": "ProviderId", + "type": "LPCGUID" + }, + { + "name": "ControlCode", + "type": "ULONG" + }, + { + "name": "Level", + "type": "UCHAR" + }, + { + "name": "MatchAnyKeyword", + "type": "ULONGLONG" + }, + { + "name": "MatchAllKeyword", + "type": "ULONGLONG" + }, + { + "name": "Timeout", + "type": "ULONG" + }, + { + "name": "EnableParameters", + "type": "PENABLE_TRACE_PARAMETERS" + } + ], + "TraceSetInformation": [ + { + "name": "SessionHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InformationClass", + "type": "TRACE_INFO_CLASS" + }, + { + "name": "TraceInformation", + "type": "PVOID" + }, + { + "name": "InformationLength", + "type": "ULONG" + } + ], + "TraceQueryInformation": [ + { + "name": "SessionHandle", + "type": "TRACEHANDLE" + }, + { + "name": "InformationClass", + "type": "TRACE_INFO_CLASS" + }, + { + "name": "TraceInformation", + "type": "PVOID" + }, + { + "name": "InformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], + "RegisterTraceGuidsW": [ + { + "name": "RequestAddress", + "type": "WMIDPREQUEST" + }, + { + "name": "RequestContext", + "type": "PVOID" + }, + { + "name": "ControlGuid", + "type": "LPCGUID" + }, + { + "name": "GuidCount", + "type": "ULONG" + }, + { + "name": "TraceGuidReg", + "type": "PTRACE_GUID_REGISTRATION" + }, + { + "name": "MofImagePath", + "type": "LPCWSTR" + }, + { + "name": "MofResourceName", + "type": "LPCWSTR" + }, + { + "name": "RegistrationHandle", + "type": "PTRACEHANDLE" + } + ], + "RegisterTraceGuidsA": [ + { + "name": "RequestAddress", + "type": "WMIDPREQUEST" + }, + { + "name": "RequestContext", + "type": "PVOID" + }, + { + "name": "ControlGuid", + "type": "LPCGUID" + }, + { + "name": "GuidCount", + "type": "ULONG" + }, + { + "name": "TraceGuidReg", + "type": "PTRACE_GUID_REGISTRATION" + }, + { + "name": "MofImagePath", + "type": "LPCSTR" + }, + { + "name": "MofResourceName", + "type": "LPCSTR" + }, + { + "name": "RegistrationHandle", + "type": "PTRACEHANDLE" + } + ], + "OpenTraceW": [ + { + "name": "Logfile", + "type": "PEVENT_TRACE_LOGFILEW" + } + ], + "ProcessTrace": [ + { + "name": "HandleArray", + "type": "PTRACEHANDLE" + }, + { + "name": "HandleCount", + "type": "ULONG" + }, + { + "name": "StartTime", + "type": "LPFILETIME" + }, + { + "name": "EndTime", + "type": "LPFILETIME" + } + ], + "CloseTrace": [ + { + "name": "TraceHandle", + "type": "TRACEHANDLE" + } + ], + "OpenTraceA": [ + { + "name": "Logfile", + "type": "PEVENT_TRACE_LOGFILEA" + } + ], + "SetTraceCallback": [ + { + "name": "pGuid", + "type": "LPCGUID" + }, + { + "name": "EventCallback", + "type": "PEVENT_CALLBACK" + } + ], + "RemoveTraceCallback": [ + { + "name": "pGuid", + "type": "LPCGUID" + } + ], + "EventAccessControl": [ + { + "name": "Guid", + "type": "LPGUID" + }, + { + "name": "Operation", + "type": "ULONG" + }, + { + "name": "Sid", + "type": "PSID" + }, + { + "name": "Rights", + "type": "ULONG" + }, + { + "name": "AllowOrDeny", + "type": "BOOLEAN" + } + ], + "EventAccessRemove": [ + { + "name": "Guid", + "type": "LPGUID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/secur32_dll.json b/qiling/extensions/windows_sdk/secur32_dll.json new file mode 100644 index 000000000..a5e192b5a --- /dev/null +++ b/qiling/extensions/windows_sdk/secur32_dll.json @@ -0,0 +1,176 @@ +{ + "LsaRegisterLogonProcess": [ + { + "name": "LogonProcessName", + "type": "PLSA_STRING" + }, + { + "name": "LsaHandle", + "type": "PHANDLE" + }, + { + "name": "SecurityMode", + "type": "PLSA_OPERATIONAL_MODE" + } + ], + "LsaLogonUser": [ + { + "name": "LsaHandle", + "type": "HANDLE" + }, + { + "name": "OriginName", + "type": "PLSA_STRING" + }, + { + "name": "LogonType", + "type": "SECURITY_LOGON_TYPE" + }, + { + "name": "AuthenticationPackage", + "type": "ULONG" + }, + { + "name": "AuthenticationInformation", + "type": "PVOID" + }, + { + "name": "AuthenticationInformationLength", + "type": "ULONG" + }, + { + "name": "LocalGroups", + "type": "PTOKEN_GROUPS" + }, + { + "name": "SourceContext", + "type": "PTOKEN_SOURCE" + }, + { + "name": "ProfileBuffer", + "type": "PVOID" + }, + { + "name": "ProfileBufferLength", + "type": "PULONG" + }, + { + "name": "LogonId", + "type": "PLUID" + }, + { + "name": "Token", + "type": "PHANDLE" + }, + { + "name": "Quotas", + "type": "PQUOTA_LIMITS" + }, + { + "name": "SubStatus", + "type": "PNTSTATUS" + } + ], + "LsaLookupAuthenticationPackage": [ + { + "name": "LsaHandle", + "type": "HANDLE" + }, + { + "name": "PackageName", + "type": "PLSA_STRING" + }, + { + "name": "AuthenticationPackage", + "type": "PULONG" + } + ], + "LsaFreeReturnBuffer": [ + { + "name": "Buffer", + "type": "PVOID" + } + ], + "LsaCallAuthenticationPackage": [ + { + "name": "LsaHandle", + "type": "HANDLE" + }, + { + "name": "AuthenticationPackage", + "type": "ULONG" + }, + { + "name": "ProtocolSubmitBuffer", + "type": "PVOID" + }, + { + "name": "SubmitBufferLength", + "type": "ULONG" + }, + { + "name": "ProtocolReturnBuffer", + "type": "PVOID" + }, + { + "name": "ReturnBufferLength", + "type": "PULONG" + }, + { + "name": "ProtocolStatus", + "type": "PNTSTATUS" + } + ], + "LsaDeregisterLogonProcess": [ + { + "name": "LsaHandle", + "type": "HANDLE" + } + ], + "LsaConnectUntrusted": [ + { + "name": "LsaHandle", + "type": "PHANDLE" + } + ], + "LsaEnumerateLogonSessions": [ + { + "name": "LogonSessionCount", + "type": "PULONG" + }, + { + "name": "LogonSessionList", + "type": "PLUID" + } + ], + "LsaGetLogonSessionData": [ + { + "name": "LogonId", + "type": "PLUID" + }, + { + "name": "ppLogonSessionData", + "type": "PSECURITY_LOGON_SESSION_DATA" + } + ], + "LsaRegisterPolicyChangeNotification": [ + { + "name": "InformationClass", + "type": "POLICY_NOTIFICATION_INFORMATION_CLASS" + }, + { + "name": "NotificationEventHandle", + "type": "HANDLE" + } + ], + "LsaUnregisterPolicyChangeNotification": [ + { + "name": "InformationClass", + "type": "POLICY_NOTIFICATION_INFORMATION_CLASS" + }, + { + "name": "NotificationEventHandle", + "type": "HANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sensapi.json b/qiling/extensions/windows_sdk/sensapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/sensapi.json rename to qiling/extensions/windows_sdk/sensapi_dll.json diff --git a/qiling/extensions/windows_sdk/setupapi.json b/qiling/extensions/windows_sdk/setupapi_dll.json similarity index 99% rename from qiling/extensions/windows_sdk/setupapi.json rename to qiling/extensions/windows_sdk/setupapi_dll.json index 6f843a22e..2ebb3d3af 100644 --- a/qiling/extensions/windows_sdk/setupapi.json +++ b/qiling/extensions/windows_sdk/setupapi_dll.json @@ -3381,30 +3381,6 @@ "type": "void" } ], - "SetupGetThreadLogToken": [ - { - "name": "VOID", - "type": "void" - } - ], - "SetupWriteTextLog": [ - { - "name": "LogToken", - "type": "SP_LOG_TOKEN" - }, - { - "name": "Category", - "type": "DWORD" - }, - { - "name": "Flags", - "type": "DWORD" - }, - { - "name": "MessageStr", - "type": "PCSTR" - } - ], "SetupWriteTextLogInfLine": [ { "name": "LogToken", diff --git a/qiling/extensions/windows_sdk/setupapi_lib.json b/qiling/extensions/windows_sdk/setupapi_lib.json new file mode 100644 index 000000000..389ab8827 --- /dev/null +++ b/qiling/extensions/windows_sdk/setupapi_lib.json @@ -0,0 +1,26 @@ +{ + "SetupGetThreadLogToken": [ + { + "name": "VOID", + "type": "void" + } + ], + "SetupWriteTextLog": [ + { + "name": "LogToken", + "type": "SP_LOG_TOKEN" + }, + { + "name": "Category", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "MessageStr", + "type": "PCSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/sfc.json b/qiling/extensions/windows_sdk/sfc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/sfc.json rename to qiling/extensions/windows_sdk/sfc_dll.json diff --git a/qiling/extensions/windows_sdk/shcore.json b/qiling/extensions/windows_sdk/shcore_dll.json similarity index 66% rename from qiling/extensions/windows_sdk/shcore.json rename to qiling/extensions/windows_sdk/shcore_dll.json index f59724c18..b7c75e55d 100644 --- a/qiling/extensions/windows_sdk/shcore.json +++ b/qiling/extensions/windows_sdk/shcore_dll.json @@ -1,4 +1,54 @@ { + "CreateRandomAccessStreamOnFile": [ + { + "name": "filePath", + "type": "PCWSTR" + }, + { + "name": "accessMode", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CreateRandomAccessStreamOverStream": [ + { + "name": "stream", + "type": "IStream" + }, + { + "name": "options", + "type": "BSOS_OPTIONS" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CreateStreamOverRandomAccessStream": [ + { + "name": "randomAccessStream", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], "GetScaleFactorForDevice": [ { "name": "deviceType", diff --git a/qiling/extensions/windows_sdk/shdocvw_dll.json b/qiling/extensions/windows_sdk/shdocvw_dll.json new file mode 100644 index 000000000..a068cc86c --- /dev/null +++ b/qiling/extensions/windows_sdk/shdocvw_dll.json @@ -0,0 +1,20 @@ +{ + "SoftwareUpdateMessageBox": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "pszDistUnit", + "type": "PCWSTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "psdi", + "type": "LPSOFTDISTINFO" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shlobj_core.json b/qiling/extensions/windows_sdk/shell32_dll.json similarity index 57% rename from qiling/extensions/windows_sdk/shlobj_core.json rename to qiling/extensions/windows_sdk/shell32_dll.json index 4776b13cd..4fd57ba1d 100644 --- a/qiling/extensions/windows_sdk/shlobj_core.json +++ b/qiling/extensions/windows_sdk/shell32_dll.json @@ -1,1632 +1,3038 @@ { - "SHGetMalloc": [ - { - "name": "ppMalloc", - "type": "IMalloc" - } - ], - "SHFree": [ - { - "name": "pv", - "type": "void" - } - ], - "SHGetIconOverlayIndexA": [ + "DragQueryFileA": [ { - "name": "pszIconPath", - "type": "LPCSTR" + "name": "hDrop", + "type": "HDROP" }, { - "name": "iIconIndex", - "type": "int" - } - ], - "SHGetIconOverlayIndexW": [ + "name": "iFile", + "type": "UINT" + }, { - "name": "pszIconPath", - "type": "LPCWSTR" + "name": "lpszFile", + "type": "LPSTR" }, { - "name": "iIconIndex", - "type": "int" + "name": "cch", + "type": "UINT" } ], - "ILClone": [ + "DragQueryFileW": [ { - "name": "pidl", - "type": "LPCITEMIDLIST" - } - ], - "ILCloneFirst": [ + "name": "hDrop", + "type": "HDROP" + }, { - "name": "pidl", - "type": "LPCITEMIDLIST" - } - ], - "ILCombine": [ + "name": "iFile", + "type": "UINT" + }, { - "name": "pidl1", - "type": "LPCITEMIDLIST" + "name": "lpszFile", + "type": "LPWSTR" }, { - "name": "pidl2", - "type": "LPCITEMIDLIST" + "name": "cch", + "type": "UINT" } ], - "ILFree": [ + "DragQueryPoint": [ { - "name": "pidl", - "type": "LPITEMIDLIST" - } - ], - "ILGetNext": [ + "name": "hDrop", + "type": "HDROP" + }, { - "name": "pidl", - "type": "LPCITEMIDLIST" + "name": "ppt", + "type": "POINT" } ], - "ILGetSize": [ + "DragFinish": [ { - "name": "pidl", - "type": "LPCITEMIDLIST" + "name": "hDrop", + "type": "HDROP" } ], - "ILFindChild": [ + "DragAcceptFiles": [ { - "name": "pidlParent", - "type": "LPITEMIDLIST" + "name": "hWnd", + "type": "HWND" }, { - "name": "pidlChild", - "type": "LPCITEMIDLIST" - } - ], - "ILFindLastID": [ - { - "name": "pidl", - "type": "LPCITEMIDLIST" - } - ], - "ILRemoveLastID": [ - { - "name": "pidl", - "type": "LPITEMIDLIST" + "name": "fAccept", + "type": "BOOL" } ], - "ILIsEqual": [ + "ShellExecuteA": [ { - "name": "pidl1", - "type": "LPCITEMIDLIST" + "name": "hwnd", + "type": "HWND" }, { - "name": "pidl2", - "type": "LPCITEMIDLIST" - } - ], - "ILIsParent": [ - { - "name": "pidl1", - "type": "LPCITEMIDLIST" + "name": "lpOperation", + "type": "LPCSTR" }, { - "name": "pidl2", - "type": "LPCITEMIDLIST" + "name": "lpFile", + "type": "LPCSTR" }, { - "name": "fImmediate", - "type": "BOOL" - } - ], - "ILSaveToStream": [ + "name": "lpParameters", + "type": "LPCSTR" + }, { - "name": "pstm", - "type": "IStream" + "name": "lpDirectory", + "type": "LPCSTR" }, { - "name": "pidl", - "type": "LPCITEMIDLIST" + "name": "nShowCmd", + "type": "INT" } ], - "ILLoadFromStream": [ + "ShellExecuteW": [ { - "name": "pstm", - "type": "IStream" + "name": "hwnd", + "type": "HWND" }, { - "name": "pidl", - "type": "LPITEMIDLIST" - } - ], - "ILLoadFromStreamEx": [ + "name": "lpOperation", + "type": "LPCWSTR" + }, { - "name": "pstm", - "type": "IStream" + "name": "lpFile", + "type": "LPCWSTR" }, { - "name": "pidl", - "type": "LPITEMIDLIST" - } - ], - "ILCreateFromPathA": [ + "name": "lpParameters", + "type": "LPCWSTR" + }, { - "name": "pszPath", - "type": "PCSTR" - } - ], - "ILCreateFromPathW": [ + "name": "lpDirectory", + "type": "LPCWSTR" + }, { - "name": "pszPath", - "type": "PCWSTR" + "name": "nShowCmd", + "type": "INT" } ], - "SHILCreateFromPath": [ + "FindExecutableA": [ { - "name": "pszPath", - "type": "PCWSTR" + "name": "lpFile", + "type": "LPCSTR" }, { - "name": "ppidl", - "type": "LPITEMIDLIST" + "name": "lpDirectory", + "type": "LPCSTR" }, { - "name": "rgfInOut", - "type": "DWORD" + "name": "lpResult", + "type": "LPSTR" } ], - "ILAppendID": [ + "FindExecutableW": [ { - "name": "pidl", - "type": "LPITEMIDLIST" + "name": "lpFile", + "type": "LPCWSTR" }, { - "name": "pmkid", - "type": "LPCSHITEMID" + "name": "lpDirectory", + "type": "LPCWSTR" }, { - "name": "fAppend", - "type": "BOOL" + "name": "lpResult", + "type": "LPWSTR" } ], - "SHGetPathFromIDListEx": [ + "ShellAboutA": [ { - "name": "pidl", - "type": "LPCITEMIDLIST" + "name": "hWnd", + "type": "HWND" }, { - "name": "pszPath", - "type": "PWSTR" + "name": "szApp", + "type": "LPCSTR" }, { - "name": "cchPath", - "type": "DWORD" + "name": "szOtherStuff", + "type": "LPCSTR" }, { - "name": "uOpts", - "type": "GPFIDL_FLAGS" + "name": "hIcon", + "type": "HICON" } ], - "SHGetPathFromIDListA": [ + "ShellAboutW": [ { - "name": "pidl", - "type": "LPCITEMIDLIST" + "name": "hWnd", + "type": "HWND" }, { - "name": "pszPath", - "type": "LPSTR" - } - ], - "SHGetPathFromIDListW": [ + "name": "szApp", + "type": "LPCWSTR" + }, { - "name": "pidl", - "type": "LPCITEMIDLIST" + "name": "szOtherStuff", + "type": "LPCWSTR" }, { - "name": "pszPath", - "type": "LPWSTR" + "name": "hIcon", + "type": "HICON" } ], - "SHCreateDirectory": [ + "DuplicateIcon": [ { - "name": "hwnd", - "type": "HWND" + "name": "hInst", + "type": "HINSTANCE" }, { - "name": "pszPath", - "type": "PCWSTR" + "name": "hIcon", + "type": "HICON" } ], - "SHCreateDirectoryExA": [ + "ExtractAssociatedIconA": [ { - "name": "hwnd", - "type": "HWND" + "name": "hInst", + "type": "HINSTANCE" }, { - "name": "pszPath", - "type": "LPCSTR" + "name": "pszIconPath", + "type": "LPSTR" }, { - "name": "psa", - "type": "SECURITY_ATTRIBUTES" + "name": "piIcon", + "type": "WORD" } ], - "SHCreateDirectoryExW": [ + "ExtractAssociatedIconW": [ { - "name": "hwnd", - "type": "HWND" + "name": "hInst", + "type": "HINSTANCE" }, { - "name": "pszPath", - "type": "LPCWSTR" + "name": "pszIconPath", + "type": "LPWSTR" }, { - "name": "psa", - "type": "SECURITY_ATTRIBUTES" + "name": "piIcon", + "type": "WORD" } ], - "SHOpenFolderAndSelectItems": [ + "ExtractAssociatedIconExA": [ { - "name": "pidlFolder", - "type": "LPCITEMIDLIST" + "name": "hInst", + "type": "HINSTANCE" }, { - "name": "cidl", - "type": "UINT" + "name": "pszIconPath", + "type": "LPSTR" }, { - "name": "apidl", - "type": "LPCITEMIDLIST" + "name": "piIconIndex", + "type": "WORD" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "piIconId", + "type": "WORD" } ], - "SHCreateShellItem": [ + "ExtractAssociatedIconExW": [ { - "name": "pidlParent", - "type": "LPCITEMIDLIST" + "name": "hInst", + "type": "HINSTANCE" }, { - "name": "psfParent", - "type": "IShellFolder" + "name": "pszIconPath", + "type": "LPWSTR" }, { - "name": "pidl", - "type": "LPCITEMIDLIST" + "name": "piIconIndex", + "type": "WORD" }, { - "name": "ppsi", - "type": "IShellItem" + "name": "piIconId", + "type": "WORD" } ], - "SHGetSpecialFolderLocation": [ + "ExtractIconA": [ { - "name": "hwnd", - "type": "HWND" + "name": "hInst", + "type": "HINSTANCE" }, { - "name": "csidl", - "type": "int" + "name": "pszExeFileName", + "type": "LPCSTR" }, { - "name": "ppidl", - "type": "LPITEMIDLIST" + "name": "nIconIndex", + "type": "UINT" } ], - "SHCloneSpecialIDList": [ + "ExtractIconW": [ { - "name": "hwnd", - "type": "HWND" + "name": "hInst", + "type": "HINSTANCE" }, { - "name": "csidl", - "type": "int" + "name": "pszExeFileName", + "type": "LPCWSTR" }, { - "name": "fCreate", - "type": "BOOL" + "name": "nIconIndex", + "type": "UINT" } ], - "SHGetSpecialFolderPathA": [ + "SHAppBarMessage": [ { - "name": "hwnd", - "type": "HWND" + "name": "dwMessage", + "type": "DWORD" }, { - "name": "pszPath", + "name": "pData", + "type": "PAPPBARDATA" + } + ], + "DoEnvironmentSubstA": [ + { + "name": "pszSrc", "type": "LPSTR" }, { - "name": "csidl", - "type": "int" + "name": "cchSrc", + "type": "UINT" + } + ], + "DoEnvironmentSubstW": [ + { + "name": "pszSrc", + "type": "LPWSTR" }, { - "name": "fCreate", - "type": "BOOL" + "name": "cchSrc", + "type": "UINT" } ], - "SHGetSpecialFolderPathW": [ + "ExtractIconExA": [ { - "name": "hwnd", - "type": "HWND" + "name": "lpszFile", + "type": "LPCSTR" }, { - "name": "pszPath", - "type": "LPWSTR" + "name": "nIconIndex", + "type": "int" }, { - "name": "csidl", - "type": "int" + "name": "phiconLarge", + "type": "HICON" }, { - "name": "fCreate", - "type": "BOOL" - } - ], - "SHFlushSFCache": [ + "name": "phiconSmall", + "type": "HICON" + }, { - "name": "VOID", - "type": "void" + "name": "nIcons", + "type": "UINT" } ], - "SHGetFolderPathA": [ + "ExtractIconExW": [ { - "name": "hwnd", - "type": "HWND" + "name": "lpszFile", + "type": "LPCWSTR" }, { - "name": "csidl", + "name": "nIconIndex", "type": "int" }, { - "name": "hToken", - "type": "HANDLE" + "name": "phiconLarge", + "type": "HICON" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "phiconSmall", + "type": "HICON" }, { - "name": "pszPath", - "type": "LPSTR" + "name": "nIcons", + "type": "UINT" } ], - "SHGetFolderPathW": [ + "SHFileOperationA": [ { - "name": "hwnd", - "type": "HWND" - }, + "name": "lpFileOp", + "type": "LPSHFILEOPSTRUCTA" + } + ], + "SHFileOperationW": [ { - "name": "csidl", - "type": "int" - }, + "name": "lpFileOp", + "type": "LPSHFILEOPSTRUCTW" + } + ], + "SHFreeNameMappings": [ { - "name": "hToken", + "name": "hNameMappings", "type": "HANDLE" - }, + } + ], + "ShellExecuteExA": [ { - "name": "dwFlags", - "type": "DWORD" - }, + "name": "pExecInfo", + "type": "SHELLEXECUTEINFOA" + } + ], + "ShellExecuteExW": [ { - "name": "pszPath", - "type": "LPWSTR" + "name": "pExecInfo", + "type": "SHELLEXECUTEINFOW" } ], - "SHGetFolderLocation": [ + "SHCreateProcessAsUserW": [ { - "name": "hwnd", - "type": "HWND" - }, + "name": "pscpi", + "type": "PSHCREATEPROCESSINFOW" + } + ], + "SHEvaluateSystemCommandTemplate": [ { - "name": "csidl", - "type": "int" + "name": "pszCmdTemplate", + "type": "PCWSTR" }, { - "name": "hToken", - "type": "HANDLE" + "name": "ppszApplication", + "type": "PWSTR" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "ppszCommandLine", + "type": "PWSTR" }, { - "name": "ppidl", - "type": "LPITEMIDLIST" + "name": "ppszParameters", + "type": "PWSTR" } ], - "SHSetFolderPathA": [ + "AssocCreateForClasses": [ { - "name": "csidl", - "type": "int" + "name": "rgClasses", + "type": "ASSOCIATIONELEMENT" }, { - "name": "hToken", - "type": "HANDLE" + "name": "cClasses", + "type": "ULONG" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "riid", + "type": "IID" }, { - "name": "pszPath", - "type": "LPCSTR" + "name": "ppv", + "type": "void" } ], - "SHSetFolderPathW": [ + "SHQueryRecycleBinA": [ { - "name": "csidl", - "type": "int" + "name": "pszRootPath", + "type": "LPCSTR" }, { - "name": "hToken", - "type": "HANDLE" - }, + "name": "pSHQueryRBInfo", + "type": "LPSHQUERYRBINFO" + } + ], + "SHQueryRecycleBinW": [ { - "name": "dwFlags", - "type": "DWORD" + "name": "pszRootPath", + "type": "LPCWSTR" }, { - "name": "pszPath", - "type": "LPCWSTR" + "name": "pSHQueryRBInfo", + "type": "LPSHQUERYRBINFO" } ], - "SHGetFolderPathAndSubDirA": [ + "SHEmptyRecycleBinA": [ { "name": "hwnd", "type": "HWND" }, { - "name": "csidl", - "type": "int" - }, - { - "name": "hToken", - "type": "HANDLE" + "name": "pszRootPath", + "type": "LPCSTR" }, { "name": "dwFlags", "type": "DWORD" - }, - { - "name": "pszSubDir", - "type": "LPCSTR" - }, - { - "name": "pszPath", - "type": "LPSTR" } ], - "SHGetFolderPathAndSubDirW": [ + "SHEmptyRecycleBinW": [ { "name": "hwnd", "type": "HWND" }, { - "name": "csidl", - "type": "int" - }, - { - "name": "hToken", - "type": "HANDLE" + "name": "pszRootPath", + "type": "LPCWSTR" }, { "name": "dwFlags", "type": "DWORD" + } + ], + "SHQueryUserNotificationState": [ + { + "name": "pquns", + "type": "QUERY_USER_NOTIFICATION_STATE" + } + ], + "SHGetPropertyStoreForWindow": [ + { + "name": "hwnd", + "type": "HWND" }, { - "name": "pszSubDir", - "type": "LPCWSTR" + "name": "riid", + "type": "IID" }, { - "name": "pszPath", - "type": "LPWSTR" + "name": "ppv", + "type": "void" } ], - "SHGetKnownFolderIDList": [ + "Shell_NotifyIconA": [ { - "name": "rfid", - "type": "KNOWNFOLDERID" + "name": "dwMessage", + "type": "DWORD" }, { - "name": "dwFlags", + "name": "lpData", + "type": "PNOTIFYICONDATAA" + } + ], + "Shell_NotifyIconW": [ + { + "name": "dwMessage", "type": "DWORD" }, { - "name": "hToken", - "type": "HANDLE" + "name": "lpData", + "type": "PNOTIFYICONDATAW" + } + ], + "Shell_NotifyIconGetRect": [ + { + "name": "identifier", + "type": "NOTIFYICONIDENTIFIER" }, { - "name": "ppidl", - "type": "LPITEMIDLIST" + "name": "iconLocation", + "type": "RECT" } ], - "SHSetKnownFolderPath": [ + "SHGetFileInfoA": [ { - "name": "rfid", - "type": "KNOWNFOLDERID" + "name": "pszPath", + "type": "LPCSTR" }, { - "name": "dwFlags", + "name": "dwFileAttributes", "type": "DWORD" }, { - "name": "hToken", - "type": "HANDLE" + "name": "psfi", + "type": "SHFILEINFOA" }, { - "name": "pszPath", - "type": "PCWSTR" + "name": "cbFileInfo", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" } ], - "SHGetKnownFolderPath": [ + "SHGetFileInfoW": [ { - "name": "rfid", - "type": "KNOWNFOLDERID" + "name": "pszPath", + "type": "LPCWSTR" }, { - "name": "dwFlags", + "name": "dwFileAttributes", "type": "DWORD" }, { - "name": "hToken", - "type": "HANDLE" + "name": "psfi", + "type": "SHFILEINFOW" }, { - "name": "ppszPath", - "type": "PWSTR" + "name": "cbFileInfo", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "UINT" } ], - "SHGetKnownFolderItem": [ + "SHGetStockIconInfo": [ { - "name": "rfid", - "type": "KNOWNFOLDERID" + "name": "siid", + "type": "SHSTOCKICONID" }, { - "name": "flags", - "type": "KNOWN_FOLDER_FLAG" + "name": "uFlags", + "type": "UINT" }, { - "name": "hToken", - "type": "HANDLE" + "name": "psii", + "type": "SHSTOCKICONINFO" + } + ], + "SHGetDiskFreeSpaceExA": [ + { + "name": "pszDirectoryName", + "type": "LPCSTR" }, { - "name": "riid", - "type": "IID" + "name": "pulFreeBytesAvailableToCaller", + "type": "ULARGE_INTEGER" }, { - "name": "ppv", - "type": "void" + "name": "pulTotalNumberOfBytes", + "type": "ULARGE_INTEGER" + }, + { + "name": "pulTotalNumberOfFreeBytes", + "type": "ULARGE_INTEGER" } ], - "SHGetSetFolderCustomSettings": [ + "SHGetDiskFreeSpaceExW": [ { - "name": "pfcs", - "type": "LPSHFOLDERCUSTOMSETTINGS" + "name": "pszDirectoryName", + "type": "LPCWSTR" }, { - "name": "pszPath", - "type": "PCWSTR" + "name": "pulFreeBytesAvailableToCaller", + "type": "ULARGE_INTEGER" }, { - "name": "dwReadWrite", - "type": "DWORD" - } - ], - "SHBrowseForFolderA": [ + "name": "pulTotalNumberOfBytes", + "type": "ULARGE_INTEGER" + }, { - "name": "lpbi", - "type": "LPBROWSEINFOA" + "name": "pulTotalNumberOfFreeBytes", + "type": "ULARGE_INTEGER" } ], - "SHBrowseForFolderW": [ + "SHGetNewLinkInfoA": [ { - "name": "lpbi", - "type": "LPBROWSEINFOW" - } - ], - "SHLoadInProc": [ + "name": "pszLinkTo", + "type": "LPCSTR" + }, { - "name": "rclsid", - "type": "IID" - } - ], - "SHGetDesktopFolder": [ - { - "name": "ppshf", - "type": "IShellFolder" - } - ], - "SHChangeNotify": [ - { - "name": "wEventId", - "type": "LONG" + "name": "pszDir", + "type": "LPCSTR" }, { - "name": "uFlags", - "type": "UINT" + "name": "pszName", + "type": "LPSTR" }, { - "name": "dwItem1", - "type": "LPCVOID" + "name": "pfMustCopy", + "type": "BOOL" }, - { - "name": "dwItem2", - "type": "LPCVOID" - } - ], - "SHAddToRecentDocs": [ { "name": "uFlags", "type": "UINT" - }, - { - "name": "pv", - "type": "LPCVOID" } ], - "SHHandleUpdateImage": [ + "SHGetNewLinkInfoW": [ { - "name": "pidlExtra", - "type": "LPCITEMIDLIST" - } - ], - "SHUpdateImageA": [ + "name": "pszLinkTo", + "type": "LPCWSTR" + }, { - "name": "pszHashItem", - "type": "LPCSTR" + "name": "pszDir", + "type": "LPCWSTR" }, { - "name": "iIndex", - "type": "int" + "name": "pszName", + "type": "LPWSTR" }, { - "name": "uFlags", - "type": "UINT" + "name": "pfMustCopy", + "type": "BOOL" }, { - "name": "iImageIndex", - "type": "int" + "name": "uFlags", + "type": "UINT" } ], - "SHUpdateImageW": [ + "SHInvokePrinterCommandA": [ { - "name": "pszHashItem", - "type": "LPCWSTR" + "name": "hwnd", + "type": "HWND" }, { - "name": "iIndex", - "type": "int" + "name": "uAction", + "type": "UINT" }, { - "name": "uFlags", - "type": "UINT" + "name": "lpBuf1", + "type": "LPCSTR" }, { - "name": "iImageIndex", - "type": "int" + "name": "lpBuf2", + "type": "LPCSTR" + }, + { + "name": "fModal", + "type": "BOOL" } ], - "SHChangeNotifyRegister": [ + "SHInvokePrinterCommandW": [ { "name": "hwnd", "type": "HWND" }, { - "name": "fSources", - "type": "int" - }, - { - "name": "fEvents", - "type": "LONG" + "name": "uAction", + "type": "UINT" }, { - "name": "wMsg", - "type": "UINT" + "name": "lpBuf1", + "type": "LPCWSTR" }, { - "name": "cEntries", - "type": "int" + "name": "lpBuf2", + "type": "LPCWSTR" }, { - "name": "pshcne", - "type": "SHChangeNotifyEntry" + "name": "fModal", + "type": "BOOL" } ], - "SHChangeNotifyDeregister": [ + "SHLoadNonloadedIconOverlayIdentifiers": [ { - "name": "ulID", - "type": "ULONG" + "name": "VOID", + "type": "void" } ], - "SHChangeNotification_Lock": [ + "SHIsFileAvailableOffline": [ { - "name": "hChange", - "type": "HANDLE" + "name": "pwszPath", + "type": "PCWSTR" }, { - "name": "dwProcId", + "name": "pdwStatus", "type": "DWORD" + } + ], + "SHSetLocalizedName": [ + { + "name": "pszPath", + "type": "PCWSTR" }, { - "name": "pppidl", - "type": "LPITEMIDLIST" + "name": "pszResModule", + "type": "PCWSTR" }, { - "name": "plEvent", - "type": "LONG" + "name": "idsRes", + "type": "int" } ], - "SHChangeNotification_Unlock": [ + "SHRemoveLocalizedName": [ { - "name": "hLock", - "type": "HANDLE" + "name": "pszPath", + "type": "PCWSTR" } ], - "SHGetRealIDL": [ + "SHGetLocalizedName": [ { - "name": "psf", - "type": "IShellFolder" + "name": "pszPath", + "type": "PCWSTR" }, { - "name": "pidlSimple", - "type": "LPCITEMIDLIST" + "name": "pszResModule", + "type": "PWSTR" }, { - "name": "ppidlReal", - "type": "LPITEMIDLIST" - } - ], - "SHGetInstanceExplorer": [ + "name": "cch", + "type": "UINT" + }, { - "name": "ppunk", - "type": "IUnknown" + "name": "pidsRes", + "type": "int" } ], - "SHGetDataFromIDListA": [ - { - "name": "psf", - "type": "IShellFolder" - }, + "SHEnumerateUnreadMailAccountsA": [ { - "name": "pidl", - "type": "LPCITEMIDLIST" + "name": "hKeyUser", + "type": "HKEY" }, { - "name": "nFormat", - "type": "int" + "name": "dwIndex", + "type": "DWORD" }, { - "name": "pv", - "type": "void" + "name": "pszMailAddress", + "type": "LPSTR" }, { - "name": "cb", + "name": "cchMailAddress", "type": "int" } ], - "SHGetDataFromIDListW": [ - { - "name": "psf", - "type": "IShellFolder" - }, + "SHEnumerateUnreadMailAccountsW": [ { - "name": "pidl", - "type": "LPCITEMIDLIST" + "name": "hKeyUser", + "type": "HKEY" }, { - "name": "nFormat", - "type": "int" + "name": "dwIndex", + "type": "DWORD" }, { - "name": "pv", - "type": "void" + "name": "pszMailAddress", + "type": "LPWSTR" }, { - "name": "cb", + "name": "cchMailAddress", "type": "int" } ], - "RestartDialog": [ + "SHGetUnreadMailCountW": [ { - "name": "hwnd", - "type": "HWND" + "name": "hKeyUser", + "type": "HKEY" }, { - "name": "pszPrompt", - "type": "PCWSTR" + "name": "pszMailAddress", + "type": "LPCWSTR" }, { - "name": "dwReturn", + "name": "pdwCount", "type": "DWORD" - } - ], - "RestartDialogEx": [ + }, { - "name": "hwnd", - "type": "HWND" + "name": "pFileTime", + "type": "FILETIME" }, { - "name": "pszPrompt", - "type": "PCWSTR" + "name": "pszShellExecuteCommand", + "type": "LPWSTR" }, { - "name": "dwReturn", - "type": "DWORD" + "name": "cchShellExecuteCommand", + "type": "int" + } + ], + "SHSetUnreadMailCountW": [ + { + "name": "pszMailAddress", + "type": "LPCWSTR" }, { - "name": "dwReasonCode", + "name": "dwCount", "type": "DWORD" + }, + { + "name": "pszShellExecuteCommand", + "type": "LPCWSTR" } ], - "SHCoCreateInstance": [ + "SHTestTokenMembership": [ { - "name": "pszCLSID", - "type": "PCWSTR" + "name": "hToken", + "type": "HANDLE" }, { - "name": "pclsid", - "type": "CLSID" - }, + "name": "ulRID", + "type": "ULONG" + } + ], + "SHGetImageList": [ { - "name": "pUnkOuter", - "type": "IUnknown" + "name": "iImageList", + "type": "int" }, { "name": "riid", "type": "IID" }, { - "name": "ppv", + "name": "ppvObj", "type": "void" } ], - "SHCreateDataObject": [ - { - "name": "pidlFolder", - "type": "LPCITEMIDLIST" - }, + "InitNetworkAddressControl": [ { - "name": "cidl", - "type": "UINT" - }, + "name": "VOID", + "type": "void" + } + ], + "SHGetDriveMedia": [ { - "name": "apidl", - "type": "LPCITEMIDLIST" + "name": "pszDrive", + "type": "PCWSTR" }, { - "name": "pdtInner", - "type": "IDataObject" - }, + "name": "pdwMediaContent", + "type": "DWORD" + } + ], + "SHGetMalloc": [ { - "name": "riid", - "type": "IID" - }, + "name": "ppMalloc", + "type": "IMalloc" + } + ], + "SHFree": [ { - "name": "ppv", + "name": "pv", "type": "void" } ], - "CIDLData_CreateFromIDArray": [ + "SHGetIconOverlayIndexA": [ { - "name": "pidlFolder", - "type": "LPCITEMIDLIST" + "name": "pszIconPath", + "type": "LPCSTR" }, { - "name": "cidl", - "type": "UINT" - }, + "name": "iIconIndex", + "type": "int" + } + ], + "SHGetIconOverlayIndexW": [ { - "name": "apidl", - "type": "LPCITEMIDLIST" + "name": "pszIconPath", + "type": "LPCWSTR" }, { - "name": "ppdtobj", - "type": "IDataObject" + "name": "iIconIndex", + "type": "int" + } + ], + "ILClone": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILCloneFirst": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILCombine": [ + { + "name": "pidl1", + "type": "LPCITEMIDLIST" + }, + { + "name": "pidl2", + "type": "LPCITEMIDLIST" + } + ], + "ILFree": [ + { + "name": "pidl", + "type": "LPITEMIDLIST" + } + ], + "ILGetNext": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILGetSize": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILFindChild": [ + { + "name": "pidlParent", + "type": "LPITEMIDLIST" + }, + { + "name": "pidlChild", + "type": "LPCITEMIDLIST" + } + ], + "ILFindLastID": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILRemoveLastID": [ + { + "name": "pidl", + "type": "LPITEMIDLIST" + } + ], + "ILIsEqual": [ + { + "name": "pidl1", + "type": "LPCITEMIDLIST" + }, + { + "name": "pidl2", + "type": "LPCITEMIDLIST" + } + ], + "ILIsParent": [ + { + "name": "pidl1", + "type": "LPCITEMIDLIST" + }, + { + "name": "pidl2", + "type": "LPCITEMIDLIST" + }, + { + "name": "fImmediate", + "type": "BOOL" + } + ], + "ILSaveToStream": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "ILLoadFromStream": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidl", + "type": "LPITEMIDLIST" + } + ], + "ILCreateFromPathA": [ + { + "name": "pszPath", + "type": "PCSTR" + } + ], + "ILCreateFromPathW": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHILCreateFromPath": [ + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + }, + { + "name": "rgfInOut", + "type": "DWORD" + } + ], + "ILAppendID": [ + { + "name": "pidl", + "type": "LPITEMIDLIST" + }, + { + "name": "pmkid", + "type": "LPCSHITEMID" + }, + { + "name": "fAppend", + "type": "BOOL" + } + ], + "SHGetPathFromIDListEx": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "cchPath", + "type": "DWORD" + }, + { + "name": "uOpts", + "type": "GPFIDL_FLAGS" + } + ], + "SHGetPathFromIDListA": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "SHGetPathFromIDListW": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "SHCreateDirectory": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHCreateDirectoryExA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "LPCSTR" + }, + { + "name": "psa", + "type": "SECURITY_ATTRIBUTES" + } + ], + "SHCreateDirectoryExW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + }, + { + "name": "psa", + "type": "SECURITY_ATTRIBUTES" + } + ], + "SHOpenFolderAndSelectItems": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "apidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHCreateShellItem": [ + { + "name": "pidlParent", + "type": "LPCITEMIDLIST" + }, + { + "name": "psfParent", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppsi", + "type": "IShellItem" + } + ], + "SHGetSpecialFolderLocation": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + } + ], + "SHCloneSpecialIDList": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "fCreate", + "type": "BOOL" + } + ], + "SHGetSpecialFolderPathA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "LPSTR" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "fCreate", + "type": "BOOL" + } + ], + "SHGetSpecialFolderPathW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPath", + "type": "LPWSTR" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "fCreate", + "type": "BOOL" + } + ], + "SHFlushSFCache": [ + { + "name": "VOID", + "type": "void" + } + ], + "SHGetFolderPathA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "SHGetFolderPathW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "SHGetFolderLocation": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + } + ], + "SHSetFolderPathA": [ + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszPath", + "type": "LPCSTR" + } + ], + "SHSetFolderPathW": [ + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszPath", + "type": "LPCWSTR" + } + ], + "SHGetFolderPathAndSubDirA": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszSubDir", + "type": "LPCSTR" + }, + { + "name": "pszPath", + "type": "LPSTR" + } + ], + "SHGetFolderPathAndSubDirW": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "csidl", + "type": "int" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pszSubDir", + "type": "LPCWSTR" + }, + { + "name": "pszPath", + "type": "LPWSTR" + } + ], + "SHGetKnownFolderIDList": [ + { + "name": "rfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "ppidl", + "type": "LPITEMIDLIST" + } + ], + "SHSetKnownFolderPath": [ + { + "name": "rfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHGetKnownFolderPath": [ + { + "name": "rfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "ppszPath", + "type": "PWSTR" + } + ], + "SHGetKnownFolderItem": [ + { + "name": "rfid", + "type": "KNOWNFOLDERID" + }, + { + "name": "flags", + "type": "KNOWN_FOLDER_FLAG" + }, + { + "name": "hToken", + "type": "HANDLE" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHGetSetFolderCustomSettings": [ + { + "name": "pfcs", + "type": "LPSHFOLDERCUSTOMSETTINGS" + }, + { + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "dwReadWrite", + "type": "DWORD" + } + ], + "SHBrowseForFolderA": [ + { + "name": "lpbi", + "type": "LPBROWSEINFOA" + } + ], + "SHBrowseForFolderW": [ + { + "name": "lpbi", + "type": "LPBROWSEINFOW" + } + ], + "SHLoadInProc": [ + { + "name": "rclsid", + "type": "IID" + } + ], + "SHGetDesktopFolder": [ + { + "name": "ppshf", + "type": "IShellFolder" + } + ], + "SHChangeNotify": [ + { + "name": "wEventId", + "type": "LONG" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "dwItem1", + "type": "LPCVOID" + }, + { + "name": "dwItem2", + "type": "LPCVOID" + } + ], + "SHAddToRecentDocs": [ + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "pv", + "type": "LPCVOID" + } + ], + "SHHandleUpdateImage": [ + { + "name": "pidlExtra", + "type": "LPCITEMIDLIST" + } + ], + "SHUpdateImageA": [ + { + "name": "pszHashItem", + "type": "LPCSTR" + }, + { + "name": "iIndex", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "iImageIndex", + "type": "int" + } + ], + "SHUpdateImageW": [ + { + "name": "pszHashItem", + "type": "LPCWSTR" + }, + { + "name": "iIndex", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "iImageIndex", + "type": "int" + } + ], + "SHChangeNotifyRegister": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "fSources", + "type": "int" + }, + { + "name": "fEvents", + "type": "LONG" + }, + { + "name": "wMsg", + "type": "UINT" + }, + { + "name": "cEntries", + "type": "int" + }, + { + "name": "pshcne", + "type": "SHChangeNotifyEntry" + } + ], + "SHChangeNotifyDeregister": [ + { + "name": "ulID", + "type": "ULONG" + } + ], + "SHChangeNotification_Lock": [ + { + "name": "hChange", + "type": "HANDLE" + }, + { + "name": "dwProcId", + "type": "DWORD" + }, + { + "name": "pppidl", + "type": "LPITEMIDLIST" + }, + { + "name": "plEvent", + "type": "LONG" + } + ], + "SHChangeNotification_Unlock": [ + { + "name": "hLock", + "type": "HANDLE" + } + ], + "SHGetRealIDL": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidlSimple", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppidlReal", + "type": "LPITEMIDLIST" + } + ], + "SHGetInstanceExplorer": [ + { + "name": "ppunk", + "type": "IUnknown" + } + ], + "SHGetDataFromIDListA": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "nFormat", + "type": "int" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "int" + } + ], + "SHGetDataFromIDListW": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "nFormat", + "type": "int" + }, + { + "name": "pv", + "type": "void" + }, + { + "name": "cb", + "type": "int" + } + ], + "RestartDialog": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPrompt", + "type": "PCWSTR" + }, + { + "name": "dwReturn", + "type": "DWORD" + } + ], + "RestartDialogEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszPrompt", + "type": "PCWSTR" + }, + { + "name": "dwReturn", + "type": "DWORD" + }, + { + "name": "dwReasonCode", + "type": "DWORD" + } + ], + "SHCoCreateInstance": [ + { + "name": "pszCLSID", + "type": "PCWSTR" + }, + { + "name": "pclsid", + "type": "CLSID" + }, + { + "name": "pUnkOuter", + "type": "IUnknown" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHCreateDataObject": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "apidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pdtInner", + "type": "IDataObject" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "CIDLData_CreateFromIDArray": [ + { + "name": "pidlFolder", + "type": "LPCITEMIDLIST" + }, + { + "name": "cidl", + "type": "UINT" + }, + { + "name": "apidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "ppdtobj", + "type": "IDataObject" } ], "SHCreateStdEnumFmtEtc": [ { - "name": "cfmt", + "name": "cfmt", + "type": "UINT" + }, + { + "name": "afmt", + "type": "FORMATETC" + }, + { + "name": "ppenumFormatEtc", + "type": "IEnumFORMATETC" + } + ], + "SHDoDragDrop": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pdata", + "type": "IDataObject" + }, + { + "name": "pdsrc", + "type": "IDropSource" + }, + { + "name": "dwEffect", + "type": "DWORD" + }, + { + "name": "pdwEffect", + "type": "DWORD" + } + ], + "DAD_SetDragImage": [ + { + "name": "him", + "type": "HIMAGELIST" + }, + { + "name": "pptOffset", + "type": "POINT" + } + ], + "DAD_DragEnterEx": [ + { + "name": "hwndTarget", + "type": "HWND" + }, + { + "name": "ptStart", + "type": "POINT" + } + ], + "DAD_DragEnterEx2": [ + { + "name": "hwndTarget", + "type": "HWND" + }, + { + "name": "ptStart", + "type": "POINT" + }, + { + "name": "pdtObject", + "type": "IDataObject" + } + ], + "DAD_ShowDragImage": [ + { + "name": "fShow", + "type": "BOOL" + } + ], + "DAD_DragMove": [ + { + "name": "pt", + "type": "POINT" + } + ], + "DAD_DragLeave": [ + { + "name": "VOID", + "type": "void" + } + ], + "DAD_AutoScroll": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pad", + "type": "AUTO_SCROLL_DATA" + }, + { + "name": "pptNow", + "type": "POINT" + } + ], + "ReadCabinetState": [ + { + "name": "pcs", + "type": "CABINETSTATE" + }, + { + "name": "cLength", + "type": "int" + } + ], + "WriteCabinetState": [ + { + "name": "pcs", + "type": "CABINETSTATE" + } + ], + "PathMakeUniqueName": [ + { + "name": "pszUniqueName", + "type": "PWSTR" + }, + { + "name": "cchMax", + "type": "UINT" + }, + { + "name": "pszTemplate", + "type": "PCWSTR" + }, + { + "name": "pszLongPlate", + "type": "PCWSTR" + }, + { + "name": "pszDir", + "type": "PCWSTR" + } + ], + "PathIsExe": [ + { + "name": "pszPath", + "type": "PCWSTR" + } + ], + "PathCleanupSpec": [ + { + "name": "pszDir", + "type": "PCWSTR" + }, + { + "name": "pszSpec", + "type": "PWSTR" + } + ], + "PathResolve": [ + { + "name": "pszPath", + "type": "PWSTR" + }, + { + "name": "dirs", + "type": "PZPCWSTR" + }, + { + "name": "fFlags", + "type": "UINT" + } + ], + "GetFileNameFromBrowse": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszFilePath", + "type": "PWSTR" + }, + { + "name": "cchFilePath", + "type": "UINT" + }, + { + "name": "pszWorkingDir", + "type": "PCWSTR" + }, + { + "name": "pszDefExt", + "type": "PCWSTR" + }, + { + "name": "pszFilters", + "type": "PCWSTR" + }, + { + "name": "pszTitle", + "type": "PCWSTR" + } + ], + "DriveType": [ + { + "name": "iDrive", + "type": "int" + } + ], + "RealDriveType": [ + { + "name": "iDrive", + "type": "int" + }, + { + "name": "fOKToHitNet", + "type": "BOOL" + } + ], + "IsNetDrive": [ + { + "name": "iDrive", + "type": "int" + } + ], + "Shell_MergeMenus": [ + { + "name": "hmDst", + "type": "HMENU" + }, + { + "name": "hmSrc", + "type": "HMENU" + }, + { + "name": "uInsert", + "type": "UINT" + }, + { + "name": "uIDAdjust", + "type": "UINT" + }, + { + "name": "uIDAdjustMax", + "type": "UINT" + }, + { + "name": "uFlags", + "type": "ULONG" + } + ], + "SHObjectProperties": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "shopObjectType", + "type": "DWORD" + }, + { + "name": "pszObjectName", + "type": "PCWSTR" + }, + { + "name": "pszPropertyPage", + "type": "PCWSTR" + } + ], + "SHFormatDrive": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "drive", "type": "UINT" }, { - "name": "afmt", - "type": "FORMATETC" + "name": "fmtID", + "type": "UINT" }, { - "name": "ppenumFormatEtc", - "type": "IEnumFORMATETC" + "name": "options", + "type": "UINT" } ], - "SHDoDragDrop": [ + "SHDestroyPropSheetExtArray": [ { - "name": "hwnd", - "type": "HWND" + "name": "hpsxa", + "type": "HPSXA" + } + ], + "SHAddFromPropSheetExtArray": [ + { + "name": "hpsxa", + "type": "HPSXA" }, { - "name": "pdata", - "type": "IDataObject" + "name": "lpfnAddPage", + "type": "LPFNADDPROPSHEETPAGE" }, { - "name": "pdsrc", - "type": "IDropSource" + "name": "lParam", + "type": "LPARAM" + } + ], + "SHReplaceFromPropSheetExtArray": [ + { + "name": "hpsxa", + "type": "HPSXA" }, { - "name": "dwEffect", - "type": "DWORD" + "name": "uPageID", + "type": "UINT" }, { - "name": "pdwEffect", - "type": "DWORD" + "name": "lpfnReplaceWith", + "type": "LPFNADDPROPSHEETPAGE" + }, + { + "name": "lParam", + "type": "LPARAM" } ], - "DAD_SetDragImage": [ + "SHFindFiles": [ { - "name": "him", - "type": "HIMAGELIST" + "name": "pidlFolder", + "type": "LPCITEMIDLIST" }, { - "name": "pptOffset", - "type": "POINT" + "name": "pidlSaveFile", + "type": "LPCITEMIDLIST" } ], - "DAD_DragEnterEx": [ + "PathGetShortPath": [ { - "name": "hwndTarget", - "type": "HWND" + "name": "pszLongPath", + "type": "PWSTR" + } + ], + "PathYetAnotherMakeUniqueName": [ + { + "name": "pszUniqueName", + "type": "PWSTR" }, { - "name": "ptStart", - "type": "POINT" + "name": "pszPath", + "type": "PCWSTR" + }, + { + "name": "pszShort", + "type": "PCWSTR" + }, + { + "name": "pszFileSpec", + "type": "PCWSTR" } ], - "DAD_DragEnterEx2": [ + "Win32DeleteFile": [ { - "name": "hwndTarget", + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHRestricted": [ + { + "name": "rest", + "type": "RESTRICTIONS" + } + ], + "SignalFileOpen": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" + } + ], + "AssocGetDetailsOfPropKey": [ + { + "name": "psf", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "pkey", + "type": "PROPERTYKEY" + }, + { + "name": "pv", + "type": "VARIANT" + }, + { + "name": "pfFoundPropKey", + "type": "BOOL" + } + ], + "SHStartNetConnectionDialogA": [ + { + "name": "hwnd", "type": "HWND" }, { - "name": "ptStart", - "type": "POINT" + "name": "pszRemoteName", + "type": "LPCSTR" }, { - "name": "pdtObject", - "type": "IDataObject" + "name": "dwType", + "type": "DWORD" } ], - "DAD_ShowDragImage": [ + "SHStartNetConnectionDialogW": [ { - "name": "fShow", - "type": "BOOL" + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszRemoteName", + "type": "LPCWSTR" + }, + { + "name": "dwType", + "type": "DWORD" } ], - "DAD_DragMove": [ + "SHDefExtractIconA": [ { - "name": "pt", - "type": "POINT" + "name": "pszIconFile", + "type": "LPCSTR" + }, + { + "name": "iIndex", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "phiconLarge", + "type": "HICON" + }, + { + "name": "phiconSmall", + "type": "HICON" + }, + { + "name": "nIconSize", + "type": "UINT" } ], - "DAD_DragLeave": [ + "SHDefExtractIconW": [ { - "name": "VOID", - "type": "void" + "name": "pszIconFile", + "type": "LPCWSTR" + }, + { + "name": "iIndex", + "type": "int" + }, + { + "name": "uFlags", + "type": "UINT" + }, + { + "name": "phiconLarge", + "type": "HICON" + }, + { + "name": "phiconSmall", + "type": "HICON" + }, + { + "name": "nIconSize", + "type": "UINT" } ], - "DAD_AutoScroll": [ + "SHOpenWithDialog": [ { - "name": "hwnd", + "name": "hwndParent", "type": "HWND" }, { - "name": "pad", - "type": "AUTO_SCROLL_DATA" + "name": "poainfo", + "type": "OPENASINFO" + } + ], + "Shell_GetImageLists": [ + { + "name": "phiml", + "type": "HIMAGELIST" }, { - "name": "pptNow", - "type": "POINT" + "name": "phimlSmall", + "type": "HIMAGELIST" } ], - "ReadCabinetState": [ + "Shell_GetCachedImageIndex": [ { - "name": "pcs", - "type": "CABINETSTATE" + "name": "pwszIconPath", + "type": "PCWSTR" + }, + { + "name": "iIconIndex", + "type": "int" + }, + { + "name": "uIconFlags", + "type": "UINT" + } + ], + "Shell_GetCachedImageIndexA": [ + { + "name": "pszIconPath", + "type": "LPCSTR" + }, + { + "name": "iIconIndex", + "type": "int" + }, + { + "name": "uIconFlags", + "type": "UINT" + } + ], + "Shell_GetCachedImageIndexW": [ + { + "name": "pszIconPath", + "type": "LPCWSTR" + }, + { + "name": "iIconIndex", + "type": "int" }, { - "name": "cLength", - "type": "int" + "name": "uIconFlags", + "type": "UINT" } ], - "WriteCabinetState": [ + "SHValidateUNC": [ { - "name": "pcs", - "type": "CABINETSTATE" - } - ], - "PathMakeUniqueName": [ + "name": "hwndOwner", + "type": "HWND" + }, { - "name": "pszUniqueName", + "name": "pszFile", "type": "PWSTR" }, { - "name": "cchMax", + "name": "fConnect", "type": "UINT" - }, + } + ], + "PifMgr_OpenProperties": [ { - "name": "pszTemplate", + "name": "pszApp", "type": "PCWSTR" }, { - "name": "pszLongPlate", + "name": "pszPIF", "type": "PCWSTR" }, { - "name": "pszDir", - "type": "PCWSTR" - } - ], - "PathIsExe": [ + "name": "hInf", + "type": "UINT" + }, { - "name": "pszPath", - "type": "PCWSTR" + "name": "flOpt", + "type": "UINT" } ], - "PathCleanupSpec": [ + "PifMgr_GetProperties": [ { - "name": "pszDir", - "type": "PCWSTR" + "name": "hProps", + "type": "HANDLE" }, { - "name": "pszSpec", - "type": "PWSTR" - } - ], - "PathResolve": [ + "name": "pszGroup", + "type": "PCSTR" + }, { - "name": "pszPath", - "type": "PWSTR" + "name": "lpProps", + "type": "void" }, { - "name": "dirs", - "type": "PZPCWSTR" + "name": "cbProps", + "type": "int" }, { - "name": "fFlags", + "name": "flOpt", "type": "UINT" } ], - "GetFileNameFromBrowse": [ + "PifMgr_SetProperties": [ { - "name": "hwnd", - "type": "HWND" + "name": "hProps", + "type": "HANDLE" }, { - "name": "pszFilePath", - "type": "PWSTR" + "name": "pszGroup", + "type": "PCSTR" }, { - "name": "cchFilePath", - "type": "UINT" + "name": "lpProps", + "type": "void" }, { - "name": "pszWorkingDir", - "type": "PCWSTR" + "name": "cbProps", + "type": "int" }, { - "name": "pszDefExt", - "type": "PCWSTR" - }, + "name": "flOpt", + "type": "UINT" + } + ], + "PifMgr_CloseProperties": [ { - "name": "pszFilters", - "type": "PCWSTR" + "name": "hProps", + "type": "HANDLE" }, { - "name": "pszTitle", - "type": "PCWSTR" + "name": "flOpt", + "type": "UINT" } ], - "DriveType": [ + "SHSetInstanceExplorer": [ { - "name": "iDrive", - "type": "int" + "name": "punk", + "type": "IUnknown" } ], - "RealDriveType": [ + "IsUserAnAdmin": [ { - "name": "iDrive", - "type": "int" + "name": "VOID", + "type": "void" + } + ], + "SHShellFolderView_Message": [ + { + "name": "hwndMain", + "type": "HWND" }, { - "name": "fOKToHitNet", - "type": "BOOL" + "name": "uMsg", + "type": "UINT" + }, + { + "name": "lParam", + "type": "LPARAM" } ], - "IsNetDrive": [ + "SHCreateShellFolderView": [ { - "name": "iDrive", - "type": "int" + "name": "pcsfv", + "type": "SFV_CREATE" + }, + { + "name": "ppsv", + "type": "IShellView" } ], - "Shell_MergeMenus": [ + "CDefFolderMenu_Create2": [ { - "name": "hmDst", - "type": "HMENU" + "name": "pidlFolder", + "type": "LPCITEMIDLIST" }, { - "name": "hmSrc", - "type": "HMENU" + "name": "hwnd", + "type": "HWND" }, { - "name": "uInsert", + "name": "cidl", "type": "UINT" }, { - "name": "uIDAdjust", - "type": "UINT" + "name": "apidl", + "type": "LPCITEMIDLIST" }, { - "name": "uIDAdjustMax", - "type": "UINT" + "name": "psf", + "type": "IShellFolder" }, { - "name": "uFlags", - "type": "ULONG" - } - ], - "SHObjectProperties": [ - { - "name": "hwnd", - "type": "HWND" + "name": "pfn", + "type": "LPFNDFMCALLBACK" }, { - "name": "shopObjectType", - "type": "DWORD" + "name": "nKeys", + "type": "UINT" }, { - "name": "pszObjectName", - "type": "PCWSTR" + "name": "ahkeys", + "type": "HKEY" }, { - "name": "pszPropertyPage", - "type": "PCWSTR" + "name": "ppcm", + "type": "IContextMenu" } ], - "SHFormatDrive": [ - { - "name": "hwnd", - "type": "HWND" - }, + "SHCreateDefaultContextMenu": [ { - "name": "drive", - "type": "UINT" + "name": "pdcm", + "type": "DEFCONTEXTMENU" }, { - "name": "fmtID", - "type": "UINT" + "name": "riid", + "type": "IID" }, { - "name": "options", - "type": "UINT" + "name": "ppv", + "type": "void" } ], - "SHDestroyPropSheetExtArray": [ + "SHCreateShellFolderViewEx": [ { - "name": "hpsxa", - "type": "HPSXA" + "name": "pcsfv", + "type": "CSFV" + }, + { + "name": "ppsv", + "type": "IShellView" } ], - "SHAddFromPropSheetExtArray": [ + "SHGetSetSettings": [ { - "name": "hpsxa", - "type": "HPSXA" + "name": "lpss", + "type": "LPSHELLSTATEA" }, { - "name": "lpfnAddPage", - "type": "LPFNADDPROPSHEETPAGE" + "name": "dwMask", + "type": "DWORD" }, { - "name": "lParam", - "type": "LPARAM" + "name": "bSet", + "type": "BOOL" } ], - "SHReplaceFromPropSheetExtArray": [ + "SHGetSettings": [ { - "name": "hpsxa", - "type": "HPSXA" + "name": "psfs", + "type": "SHELLFLAGSTATE" }, { - "name": "uPageID", - "type": "UINT" + "name": "dwMask", + "type": "DWORD" + } + ], + "SHBindToParent": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" }, { - "name": "lpfnReplaceWith", - "type": "LPFNADDPROPSHEETPAGE" + "name": "riid", + "type": "IID" }, { - "name": "lParam", - "type": "LPARAM" + "name": "ppv", + "type": "void" + }, + { + "name": "ppidlLast", + "type": "LPCITEMIDLIST" } ], - "SHFindFiles": [ + "SHBindToFolderIDListParent": [ + { + "name": "psfRoot", + "type": "IShellFolder" + }, + { + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "riid", + "type": "IID" + }, { - "name": "pidlFolder", - "type": "LPCITEMIDLIST" + "name": "ppv", + "type": "void" }, { - "name": "pidlSaveFile", + "name": "ppidlLast", "type": "LPCITEMIDLIST" } ], - "PathGetShortPath": [ + "SHBindToFolderIDListParentEx": [ { - "name": "pszLongPath", - "type": "PWSTR" - } - ], - "PathYetAnotherMakeUniqueName": [ + "name": "psfRoot", + "type": "IShellFolder" + }, { - "name": "pszUniqueName", - "type": "PWSTR" + "name": "pidl", + "type": "LPCITEMIDLIST" }, { - "name": "pszPath", - "type": "PCWSTR" + "name": "ppbc", + "type": "IBindCtx" }, { - "name": "pszShort", - "type": "PCWSTR" + "name": "riid", + "type": "IID" }, { - "name": "pszFileSpec", - "type": "PCWSTR" - } - ], - "Win32DeleteFile": [ + "name": "ppv", + "type": "void" + }, { - "name": "pszPath", - "type": "PCWSTR" + "name": "ppidlLast", + "type": "LPCITEMIDLIST" } ], - "SHRestricted": [ + "SHBindToObject": [ { - "name": "rest", - "type": "RESTRICTIONS" - } - ], - "SignalFileOpen": [ + "name": "psf", + "type": "IShellFolder" + }, { "name": "pidl", "type": "LPCITEMIDLIST" + }, + { + "name": "pbc", + "type": "IBindCtx" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" } ], - "AssocGetDetailsOfPropKey": [ + "SHParseDisplayName": [ { - "name": "psf", - "type": "IShellFolder" + "name": "pszName", + "type": "PCWSTR" }, { - "name": "pidl", - "type": "LPCITEMIDLIST" + "name": "pbc", + "type": "IBindCtx" }, { - "name": "pkey", - "type": "PROPERTYKEY" + "name": "ppidl", + "type": "LPITEMIDLIST" }, { - "name": "pv", - "type": "VARIANT" + "name": "sfgaoIn", + "type": "SFGAOF" }, { - "name": "pfFoundPropKey", - "type": "BOOL" + "name": "psfgaoOut", + "type": "SFGAOF" } ], - "SHStartNetConnectionDialogA": [ + "SHPathPrepareForWriteA": [ { "name": "hwnd", "type": "HWND" }, { - "name": "pszRemoteName", + "name": "punkEnableModless", + "type": "IUnknown" + }, + { + "name": "pszPath", "type": "LPCSTR" }, { - "name": "dwType", + "name": "dwFlags", "type": "DWORD" } ], - "SHStartNetConnectionDialogW": [ + "SHPathPrepareForWriteW": [ { "name": "hwnd", "type": "HWND" }, { - "name": "pszRemoteName", + "name": "punkEnableModless", + "type": "IUnknown" + }, + { + "name": "pszPath", "type": "LPCWSTR" }, { - "name": "dwType", + "name": "dwFlags", "type": "DWORD" } ], - "SHDefExtractIconA": [ + "SHPropStgCreate": [ { - "name": "pszIconFile", - "type": "LPCSTR" + "name": "psstg", + "type": "IPropertySetStorage" }, { - "name": "iIndex", - "type": "int" + "name": "fmtid", + "type": "IID" }, { - "name": "uFlags", - "type": "UINT" + "name": "pclsid", + "type": "CLSID" }, { - "name": "phiconLarge", - "type": "HICON" + "name": "grfFlags", + "type": "DWORD" }, { - "name": "phiconSmall", - "type": "HICON" + "name": "grfMode", + "type": "DWORD" }, { - "name": "nIconSize", + "name": "dwDisposition", + "type": "DWORD" + }, + { + "name": "ppstg", + "type": "IPropertyStorage" + }, + { + "name": "puCodePage", "type": "UINT" } ], - "SHDefExtractIconW": [ + "SHPropStgReadMultiple": [ { - "name": "pszIconFile", - "type": "LPCWSTR" + "name": "pps", + "type": "IPropertyStorage" }, { - "name": "iIndex", - "type": "int" + "name": "uCodePage", + "type": "UINT" }, { - "name": "uFlags", - "type": "UINT" + "name": "cpspec", + "type": "ULONG" }, { - "name": "phiconLarge", - "type": "HICON" + "name": "rgpspec", + "type": "PROPSPEC" }, { - "name": "phiconSmall", - "type": "HICON" + "name": "rgvar", + "type": "PROPVARIANT" + } + ], + "SHPropStgWriteMultiple": [ + { + "name": "pps", + "type": "IPropertyStorage" }, { - "name": "nIconSize", + "name": "puCodePage", "type": "UINT" + }, + { + "name": "cpspec", + "type": "ULONG" + }, + { + "name": "rgpspec", + "type": "PROPSPEC" + }, + { + "name": "rgvar", + "type": "PROPVARIANT" + }, + { + "name": "propidNameFirst", + "type": "PROPID" } ], - "SHOpenWithDialog": [ + "SHCreateFileExtractIconW": [ { - "name": "hwndParent", + "name": "pszFile", + "type": "LPCWSTR" + }, + { + "name": "dwFileAttributes", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" + } + ], + "SHLimitInputEdit": [ + { + "name": "hwndEdit", "type": "HWND" }, { - "name": "poainfo", - "type": "OPENASINFO" + "name": "psf", + "type": "IShellFolder" } ], - "Shell_GetImageLists": [ + "SHGetAttributesFromDataObject": [ { - "name": "phiml", - "type": "HIMAGELIST" + "name": "pdo", + "type": "IDataObject" }, { - "name": "phimlSmall", - "type": "HIMAGELIST" + "name": "dwAttributeMask", + "type": "DWORD" + }, + { + "name": "pdwAttributes", + "type": "DWORD" + }, + { + "name": "pcItems", + "type": "UINT" } ], - "Shell_GetCachedImageIndex": [ + "SHMapPIDLToSystemImageListIndex": [ { - "name": "pwszIconPath", - "type": "PCWSTR" + "name": "pshf", + "type": "IShellFolder" }, { - "name": "iIconIndex", + "name": "pidl", + "type": "LPCITEMIDLIST" + }, + { + "name": "piIndexSel", "type": "int" + } + ], + "SHCLSIDFromString": [ + { + "name": "psz", + "type": "PCWSTR" }, { - "name": "uIconFlags", - "type": "UINT" + "name": "pclsid", + "type": "CLSID" } ], - "Shell_GetCachedImageIndexA": [ + "PickIconDlg": [ + { + "name": "hwnd", + "type": "HWND" + }, { "name": "pszIconPath", - "type": "LPCSTR" + "type": "PWSTR" }, { - "name": "iIconIndex", - "type": "int" + "name": "cchIconPath", + "type": "UINT" }, { - "name": "uIconFlags", - "type": "UINT" + "name": "piIconIndex", + "type": "int" } ], - "Shell_GetCachedImageIndexW": [ + "StgMakeUniqueName": [ { - "name": "pszIconPath", - "type": "LPCWSTR" + "name": "pstgParent", + "type": "IStorage" }, { - "name": "iIconIndex", - "type": "int" + "name": "pszFileSpec", + "type": "PCWSTR" }, { - "name": "uIconFlags", - "type": "UINT" + "name": "grfMode", + "type": "DWORD" + }, + { + "name": "riid", + "type": "IID" + }, + { + "name": "ppv", + "type": "void" } ], - "SHValidateUNC": [ + "SHSimpleIDListFromPath": [ { - "name": "hwndOwner", - "type": "HWND" + "name": "pszPath", + "type": "PCWSTR" + } + ], + "SHCreateItemFromIDList": [ + { + "name": "pidl", + "type": "LPCITEMIDLIST" }, { - "name": "pszFile", - "type": "PWSTR" + "name": "riid", + "type": "IID" }, { - "name": "fConnect", - "type": "UINT" + "name": "ppv", + "type": "void" } ], - "PifMgr_OpenProperties": [ + "SHCreateItemFromParsingName": [ { - "name": "pszApp", + "name": "pszPath", "type": "PCWSTR" }, { - "name": "pszPIF", - "type": "PCWSTR" + "name": "pbc", + "type": "IBindCtx" }, { - "name": "hInf", - "type": "UINT" + "name": "riid", + "type": "IID" }, { - "name": "flOpt", - "type": "UINT" + "name": "ppv", + "type": "void" } ], - "PifMgr_GetProperties": [ + "SHCreateItemWithParent": [ { - "name": "hProps", - "type": "HANDLE" + "name": "pidlParent", + "type": "LPCITEMIDLIST" }, { - "name": "pszGroup", - "type": "PCSTR" + "name": "psfParent", + "type": "IShellFolder" }, { - "name": "lpProps", - "type": "void" + "name": "pidl", + "type": "LPCITEMIDLIST" }, { - "name": "cbProps", - "type": "int" + "name": "riid", + "type": "IID" }, { - "name": "flOpt", - "type": "UINT" + "name": "ppvItem", + "type": "void" } ], - "PifMgr_SetProperties": [ + "SHCreateItemFromRelativeName": [ { - "name": "hProps", - "type": "HANDLE" + "name": "psiParent", + "type": "IShellItem" }, { - "name": "pszGroup", - "type": "PCSTR" + "name": "pszName", + "type": "PCWSTR" }, { - "name": "lpProps", - "type": "void" + "name": "pbc", + "type": "IBindCtx" }, { - "name": "cbProps", - "type": "int" + "name": "riid", + "type": "IID" }, { - "name": "flOpt", - "type": "UINT" + "name": "ppv", + "type": "void" } ], - "PifMgr_CloseProperties": [ + "SHCreateItemInKnownFolder": [ { - "name": "hProps", - "type": "HANDLE" + "name": "kfid", + "type": "KNOWNFOLDERID" }, { - "name": "flOpt", - "type": "UINT" - } - ], - "SHSetInstanceExplorer": [ - { - "name": "punk", - "type": "IUnknown" - } - ], - "IsUserAnAdmin": [ - { - "name": "VOID", - "type": "void" - } - ], - "SHShellFolderView_Message": [ + "name": "dwKFFlags", + "type": "DWORD" + }, { - "name": "hwndMain", - "type": "HWND" + "name": "pszItem", + "type": "PCWSTR" }, { - "name": "uMsg", - "type": "UINT" + "name": "riid", + "type": "IID" }, { - "name": "lParam", - "type": "LPARAM" + "name": "ppv", + "type": "void" } ], - "SHCreateShellFolderView": [ + "SHGetIDListFromObject": [ { - "name": "pcsfv", - "type": "SFV_CREATE" + "name": "punk", + "type": "IUnknown" }, { - "name": "ppsv", - "type": "IShellView" + "name": "ppidl", + "type": "LPITEMIDLIST" } ], - "CDefFolderMenu_Create2": [ + "SHGetItemFromObject": [ { - "name": "pidlFolder", - "type": "LPCITEMIDLIST" + "name": "punk", + "type": "IUnknown" }, { - "name": "hwnd", - "type": "HWND" + "name": "riid", + "type": "IID" }, { - "name": "cidl", - "type": "UINT" - }, + "name": "ppv", + "type": "void" + } + ], + "SHGetPropertyStoreFromIDList": [ { - "name": "apidl", + "name": "pidl", "type": "LPCITEMIDLIST" }, { - "name": "psf", - "type": "IShellFolder" + "name": "flags", + "type": "GETPROPERTYSTOREFLAGS" }, { - "name": "pfn", - "type": "LPFNDFMCALLBACK" + "name": "riid", + "type": "IID" }, { - "name": "nKeys", - "type": "UINT" - }, + "name": "ppv", + "type": "void" + } + ], + "SHGetPropertyStoreFromParsingName": [ { - "name": "ahkeys", - "type": "HKEY" + "name": "pszPath", + "type": "PCWSTR" }, { - "name": "ppcm", - "type": "IContextMenu" - } - ], - "SHCreateDefaultContextMenu": [ + "name": "pbc", + "type": "IBindCtx" + }, { - "name": "pdcm", - "type": "DEFCONTEXTMENU" + "name": "flags", + "type": "GETPROPERTYSTOREFLAGS" }, { "name": "riid", @@ -1637,92 +3043,92 @@ "type": "void" } ], - "SHCreateShellFolderViewEx": [ + "SHGetNameFromIDList": [ { - "name": "pcsfv", - "type": "CSFV" + "name": "pidl", + "type": "LPCITEMIDLIST" }, { - "name": "ppsv", - "type": "IShellView" + "name": "sigdnName", + "type": "SIGDN" + }, + { + "name": "ppszName", + "type": "PWSTR" } ], - "SHGetSetSettings": [ + "SHGetItemFromDataObject": [ { - "name": "lpss", - "type": "LPSHELLSTATEA" + "name": "pdtobj", + "type": "IDataObject" }, { - "name": "dwMask", - "type": "DWORD" + "name": "dwFlags", + "type": "DATAOBJ_GET_ITEM_FLAGS" }, { - "name": "bSet", - "type": "BOOL" - } - ], - "SHGetSettings": [ - { - "name": "psfs", - "type": "SHELLFLAGSTATE" + "name": "riid", + "type": "IID" }, { - "name": "dwMask", - "type": "DWORD" + "name": "ppv", + "type": "void" } ], - "SHBindToParent": [ + "SHCreateShellItemArray": [ { - "name": "pidl", + "name": "pidlParent", "type": "LPCITEMIDLIST" }, { - "name": "riid", - "type": "IID" + "name": "psf", + "type": "IShellFolder" }, { - "name": "ppv", - "type": "void" + "name": "cidl", + "type": "UINT" }, { - "name": "ppidlLast", + "name": "ppidl", "type": "LPCITEMIDLIST" + }, + { + "name": "ppsiItemArray", + "type": "IShellItemArray" } ], - "SHBindToFolderIDListParent": [ - { - "name": "psfRoot", - "type": "IShellFolder" - }, + "SHCreateShellItemArrayFromDataObject": [ { - "name": "pidl", - "type": "LPCITEMIDLIST" + "name": "pdo", + "type": "IDataObject" }, { "name": "riid", "type": "IID" }, { - "name": "ppv", - "type": "void" - }, - { - "name": "ppidlLast", - "type": "LPCITEMIDLIST" + "name": "ppv", + "type": "void" } ], - "SHBindToFolderIDListParentEx": [ + "SHCreateShellItemArrayFromIDLists": [ { - "name": "psfRoot", - "type": "IShellFolder" + "name": "cidl", + "type": "UINT" }, { - "name": "pidl", + "name": "rgpidl", "type": "LPCITEMIDLIST" }, { - "name": "ppbc", - "type": "IBindCtx" + "name": "ppsiItemArray", + "type": "IShellItemArray" + } + ], + "SHCreateShellItemArrayFromShellItem": [ + { + "name": "psi", + "type": "IShellItem" }, { "name": "riid", @@ -1731,25 +3137,19 @@ { "name": "ppv", "type": "void" - }, - { - "name": "ppidlLast", - "type": "LPCITEMIDLIST" } ], - "SHBindToObject": [ - { - "name": "psf", - "type": "IShellFolder" - }, + "SHCreateAssociationRegistration": [ { - "name": "pidl", - "type": "LPCITEMIDLIST" + "name": "riid", + "type": "IID" }, { - "name": "pbc", - "type": "IBindCtx" - }, + "name": "ppv", + "type": "void" + } + ], + "SHCreateDefaultExtractIcon": [ { "name": "riid", "type": "IID" @@ -1759,254 +3159,306 @@ "type": "void" } ], - "SHParseDisplayName": [ + "SetCurrentProcessExplicitAppUserModelID": [ { - "name": "pszName", + "name": "AppID", "type": "PCWSTR" + } + ], + "GetCurrentProcessExplicitAppUserModelID": [ + { + "name": "AppID", + "type": "PWSTR" + } + ], + "SHGetTemporaryPropertyForItem": [ + { + "name": "psi", + "type": "IShellItem" }, { - "name": "pbc", - "type": "IBindCtx" + "name": "propkey", + "type": "PROPERTYKEY" }, { - "name": "ppidl", - "type": "LPITEMIDLIST" + "name": "ppropvar", + "type": "PROPVARIANT" + } + ], + "SHSetTemporaryPropertyForItem": [ + { + "name": "psi", + "type": "IShellItem" }, { - "name": "sfgaoIn", - "type": "SFGAOF" + "name": "propkey", + "type": "PROPERTYKEY" }, { - "name": "psfgaoOut", - "type": "SFGAOF" + "name": "propvar", + "type": "PROPVARIANT" } ], - "SHPathPrepareForWriteA": [ + "SHShowManageLibraryUI": [ { - "name": "hwnd", + "name": "psiLibrary", + "type": "IShellItem" + }, + { + "name": "hwndOwner", "type": "HWND" }, { - "name": "punkEnableModless", - "type": "IUnknown" + "name": "pszTitle", + "type": "LPCWSTR" }, { - "name": "pszPath", - "type": "LPCSTR" + "name": "pszInstruction", + "type": "LPCWSTR" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "lmdOptions", + "type": "LIBRARYMANAGEDIALOGOPTIONS" } ], - "SHPathPrepareForWriteW": [ + "SHResolveLibrary": [ { - "name": "hwnd", - "type": "HWND" - }, + "name": "psiLibrary", + "type": "IShellItem" + } + ], + "SHAssocEnumHandlers": [ { - "name": "punkEnableModless", - "type": "IUnknown" + "name": "pszExtra", + "type": "PCWSTR" }, { - "name": "pszPath", - "type": "LPCWSTR" + "name": "afFilter", + "type": "ASSOC_FILTER" }, { - "name": "dwFlags", - "type": "DWORD" + "name": "ppEnumHandler", + "type": "IEnumAssocHandlers" } ], - "SHPropStgCreate": [ + "SHAssocEnumHandlersForProtocolByApplication": [ { - "name": "psstg", - "type": "IPropertySetStorage" + "name": "protocol", + "type": "PCWSTR" }, { - "name": "fmtid", + "name": "riid", "type": "IID" }, { - "name": "pclsid", - "type": "CLSID" + "name": "enumHandlers", + "type": "void" + } + ], + "SHAddDefaultPropertiesByExt": [ + { + "name": "pszExt", + "type": "PCWSTR" }, { - "name": "grfFlags", - "type": "DWORD" + "name": "pPropStore", + "type": "IPropertyStore" + } + ], + "SHCreateDefaultPropertiesOp": [ + { + "name": "psi", + "type": "IShellItem" }, { - "name": "grfMode", - "type": "DWORD" + "name": "ppFileOp", + "type": "IFileOperation" + } + ], + "SHSetDefaultProperties": [ + { + "name": "hwnd", + "type": "HWND" }, { - "name": "dwDisposition", - "type": "DWORD" + "name": "psi", + "type": "IShellItem" }, { - "name": "ppstg", - "type": "IPropertyStorage" + "name": "dwFileOpFlags", + "type": "DWORD" }, { - "name": "puCodePage", - "type": "UINT" + "name": "pfops", + "type": "IFileOperationProgressSink" } ], - "SHPropStgReadMultiple": [ + "SHChangeNotifyRegisterThread": [ { - "name": "pps", - "type": "IPropertyStorage" + "name": "status", + "type": "SCNRT_STATUS" + } + ], + "PathIsSlowA": [ + { + "name": "pszFile", + "type": "LPCSTR" }, { - "name": "uCodePage", - "type": "UINT" + "name": "dwAttr", + "type": "DWORD" + } + ], + "PathIsSlowW": [ + { + "name": "pszFile", + "type": "LPCWSTR" }, { - "name": "cpspec", - "type": "ULONG" + "name": "dwAttr", + "type": "DWORD" + } + ], + "SHCreatePropSheetExtArray": [ + { + "name": "hKey", + "type": "HKEY" }, { - "name": "rgpspec", - "type": "PROPSPEC" + "name": "pszSubKey", + "type": "PCWSTR" }, { - "name": "rgvar", - "type": "PROPVARIANT" + "name": "max_iface", + "type": "UINT" } ], - "SHPropStgWriteMultiple": [ + "SHOpenPropSheetA": [ { - "name": "pps", - "type": "IPropertyStorage" + "name": "pszCaption", + "type": "LPCSTR" }, { - "name": "puCodePage", + "name": "ahkeys", + "type": "HKEY" + }, + { + "name": "ckeys", "type": "UINT" }, { - "name": "cpspec", - "type": "ULONG" + "name": "pclsidDefault", + "type": "CLSID" }, { - "name": "rgpspec", - "type": "PROPSPEC" + "name": "pdtobj", + "type": "IDataObject" }, { - "name": "rgvar", - "type": "PROPVARIANT" + "name": "psb", + "type": "IShellBrowser" }, { - "name": "propidNameFirst", - "type": "PROPID" + "name": "pStartPage", + "type": "LPCSTR" } ], - "SHCreateFileExtractIconW": [ + "SHOpenPropSheetW": [ { - "name": "pszFile", + "name": "pszCaption", "type": "LPCWSTR" }, { - "name": "dwFileAttributes", - "type": "DWORD" + "name": "ahkeys", + "type": "HKEY" }, { - "name": "riid", - "type": "IID" + "name": "ckeys", + "type": "UINT" }, { - "name": "ppv", - "type": "void" - } - ], - "SHLimitInputEdit": [ - { - "name": "hwndEdit", - "type": "HWND" + "name": "pclsidDefault", + "type": "CLSID" }, { - "name": "psf", - "type": "IShellFolder" - } - ], - "SHGetAttributesFromDataObject": [ - { - "name": "pdo", + "name": "pdtobj", "type": "IDataObject" }, { - "name": "dwAttributeMask", - "type": "DWORD" - }, - { - "name": "pdwAttributes", - "type": "DWORD" + "name": "psb", + "type": "IShellBrowser" }, { - "name": "pcItems", - "type": "UINT" + "name": "pStartPage", + "type": "LPCWSTR" } ], - "SHMapPIDLToSystemImageListIndex": [ + "SHMultiFileProperties": [ { - "name": "pshf", - "type": "IShellFolder" + "name": "pdtobj", + "type": "IDataObject" }, { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, + "name": "dwFlags", + "type": "DWORD" + } + ], + "SHCreateQueryCancelAutoPlayMoniker": [ { - "name": "piIndexSel", - "type": "int" + "name": "ppmoniker", + "type": "IMoniker" } ], - "SHCLSIDFromString": [ + "SHRunControlPanel": [ { - "name": "psz", + "name": "lpcszCmdLine", "type": "PCWSTR" }, { - "name": "pclsid", - "type": "CLSID" + "name": "hwndMsgParent", + "type": "HWND" } ], - "PickIconDlg": [ + "StrStrNW": [ { - "name": "hwnd", - "type": "HWND" + "name": "pszFirst", + "type": "PCWSTR" }, { - "name": "pszIconPath", - "type": "PWSTR" + "name": "pszSrch", + "type": "PCWSTR" }, { - "name": "cchIconPath", + "name": "cchMax", "type": "UINT" - }, - { - "name": "piIconIndex", - "type": "int" } ], - "StgMakeUniqueName": [ + "StrStrNIW": [ { - "name": "pstgParent", - "type": "IStorage" + "name": "pszFirst", + "type": "PCWSTR" }, { - "name": "pszFileSpec", + "name": "pszSrch", "type": "PCWSTR" }, { - "name": "grfMode", - "type": "DWORD" + "name": "cchMax", + "type": "UINT" + } + ], + "SHRegGetBoolValueFromHKCUHKLM": [ + { + "name": "pszKey", + "type": "PCWSTR" }, { - "name": "riid", - "type": "IID" + "name": "pszValue", + "type": "PCWSTR" }, { - "name": "ppv", - "type": "void" + "name": "fDefault", + "type": "BOOL" } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shlobj_core_h.json b/qiling/extensions/windows_sdk/shlobj_core_h.json new file mode 100644 index 000000000..c140cb56d --- /dev/null +++ b/qiling/extensions/windows_sdk/shlobj_core_h.json @@ -0,0 +1,12 @@ +{ + "ILLoadFromStreamEx": [ + { + "name": "pstm", + "type": "IStream" + }, + { + "name": "pidl", + "type": "LPITEMIDLIST" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/shlwapi.json b/qiling/extensions/windows_sdk/shlwapi.json deleted file mode 100644 index 94251ac13..000000000 --- a/qiling/extensions/windows_sdk/shlwapi.json +++ /dev/null @@ -1,4606 +0,0 @@ -{ - "StrChrA": [ - { - "name": "pszStart", - "type": "PCSTR" - }, - { - "name": "wMatch", - "type": "WORD" - } - ], - "StrChrW": [ - { - "name": "pszStart", - "type": "PCWSTR" - }, - { - "name": "wMatch", - "type": "WCHAR" - } - ], - "StrChrIA": [ - { - "name": "pszStart", - "type": "PCSTR" - }, - { - "name": "wMatch", - "type": "WORD" - } - ], - "StrChrIW": [ - { - "name": "pszStart", - "type": "PCWSTR" - }, - { - "name": "wMatch", - "type": "WCHAR" - } - ], - "StrChrNW": [ - { - "name": "pszStart", - "type": "PCWSTR" - }, - { - "name": "wMatch", - "type": "WCHAR" - }, - { - "name": "cchMax", - "type": "UINT" - } - ], - "StrChrNIW": [ - { - "name": "pszStart", - "type": "PCWSTR" - }, - { - "name": "wMatch", - "type": "WCHAR" - }, - { - "name": "cchMax", - "type": "UINT" - } - ], - "StrCmpNA": [ - { - "name": "psz1", - "type": "PCSTR" - }, - { - "name": "psz2", - "type": "PCSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCmpNW": [ - { - "name": "psz1", - "type": "PCWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCmpNIA": [ - { - "name": "psz1", - "type": "PCSTR" - }, - { - "name": "psz2", - "type": "PCSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCmpNIW": [ - { - "name": "psz1", - "type": "PCWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCSpnA": [ - { - "name": "pszStr", - "type": "PCSTR" - }, - { - "name": "pszSet", - "type": "PCSTR" - } - ], - "StrCSpnW": [ - { - "name": "pszStr", - "type": "PCWSTR" - }, - { - "name": "pszSet", - "type": "PCWSTR" - } - ], - "StrCSpnIA": [ - { - "name": "pszStr", - "type": "PCSTR" - }, - { - "name": "pszSet", - "type": "PCSTR" - } - ], - "StrCSpnIW": [ - { - "name": "pszStr", - "type": "PCWSTR" - }, - { - "name": "pszSet", - "type": "PCWSTR" - } - ], - "StrDupA": [ - { - "name": "pszSrch", - "type": "PCSTR" - } - ], - "StrDupW": [ - { - "name": "pszSrch", - "type": "PCWSTR" - } - ], - "StrFormatByteSizeEx": [ - { - "name": "ull", - "type": "ULONGLONG" - }, - { - "name": "flags", - "type": "SFBS_FLAGS" - }, - { - "name": "pszBuf", - "type": "PWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrFormatByteSizeA": [ - { - "name": "dw", - "type": "DWORD" - }, - { - "name": "pszBuf", - "type": "PSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrFormatByteSize64A": [ - { - "name": "qdw", - "type": "LONGLONG" - }, - { - "name": "pszBuf", - "type": "PSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrFormatByteSizeW": [ - { - "name": "qdw", - "type": "LONGLONG" - }, - { - "name": "pszBuf", - "type": "PWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrFormatKBSizeW": [ - { - "name": "qdw", - "type": "LONGLONG" - }, - { - "name": "pszBuf", - "type": "PWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrFormatKBSizeA": [ - { - "name": "qdw", - "type": "LONGLONG" - }, - { - "name": "pszBuf", - "type": "PSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrFromTimeIntervalA": [ - { - "name": "pszOut", - "type": "PSTR" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "dwTimeMS", - "type": "DWORD" - }, - { - "name": "digits", - "type": "int" - } - ], - "StrFromTimeIntervalW": [ - { - "name": "pszOut", - "type": "PWSTR" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "dwTimeMS", - "type": "DWORD" - }, - { - "name": "digits", - "type": "int" - } - ], - "StrIsIntlEqualA": [ - { - "name": "fCaseSens", - "type": "BOOL" - }, - { - "name": "pszString1", - "type": "PCSTR" - }, - { - "name": "pszString2", - "type": "PCSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrIsIntlEqualW": [ - { - "name": "fCaseSens", - "type": "BOOL" - }, - { - "name": "pszString1", - "type": "PCWSTR" - }, - { - "name": "pszString2", - "type": "PCWSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrNCatA": [ - { - "name": "psz1", - "type": "PSTR" - }, - { - "name": "psz2", - "type": "PCSTR" - }, - { - "name": "cchMax", - "type": "int" - } - ], - "StrNCatW": [ - { - "name": "psz1", - "type": "PWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - }, - { - "name": "cchMax", - "type": "int" - } - ], - "StrPBrkA": [ - { - "name": "psz", - "type": "PCSTR" - }, - { - "name": "pszSet", - "type": "PCSTR" - } - ], - "StrPBrkW": [ - { - "name": "psz", - "type": "PCWSTR" - }, - { - "name": "pszSet", - "type": "PCWSTR" - } - ], - "StrRChrA": [ - { - "name": "pszStart", - "type": "PCSTR" - }, - { - "name": "pszEnd", - "type": "PCSTR" - }, - { - "name": "wMatch", - "type": "WORD" - } - ], - "StrRChrW": [ - { - "name": "pszStart", - "type": "PCWSTR" - }, - { - "name": "pszEnd", - "type": "PCWSTR" - }, - { - "name": "wMatch", - "type": "WCHAR" - } - ], - "StrRChrIA": [ - { - "name": "pszStart", - "type": "PCSTR" - }, - { - "name": "pszEnd", - "type": "PCSTR" - }, - { - "name": "wMatch", - "type": "WORD" - } - ], - "StrRChrIW": [ - { - "name": "pszStart", - "type": "PCWSTR" - }, - { - "name": "pszEnd", - "type": "PCWSTR" - }, - { - "name": "wMatch", - "type": "WCHAR" - } - ], - "StrRStrIA": [ - { - "name": "pszSource", - "type": "PCSTR" - }, - { - "name": "pszLast", - "type": "PCSTR" - }, - { - "name": "pszSrch", - "type": "PCSTR" - } - ], - "StrRStrIW": [ - { - "name": "pszSource", - "type": "PCWSTR" - }, - { - "name": "pszLast", - "type": "PCWSTR" - }, - { - "name": "pszSrch", - "type": "PCWSTR" - } - ], - "StrSpnA": [ - { - "name": "psz", - "type": "PCSTR" - }, - { - "name": "pszSet", - "type": "PCSTR" - } - ], - "StrSpnW": [ - { - "name": "psz", - "type": "PCWSTR" - }, - { - "name": "pszSet", - "type": "PCWSTR" - } - ], - "StrStrA": [ - { - "name": "pszFirst", - "type": "PCSTR" - }, - { - "name": "pszSrch", - "type": "PCSTR" - } - ], - "StrStrW": [ - { - "name": "pszFirst", - "type": "PCWSTR" - }, - { - "name": "pszSrch", - "type": "PCWSTR" - } - ], - "StrStrIA": [ - { - "name": "pszFirst", - "type": "PCSTR" - }, - { - "name": "pszSrch", - "type": "PCSTR" - } - ], - "StrStrIW": [ - { - "name": "pszFirst", - "type": "PCWSTR" - }, - { - "name": "pszSrch", - "type": "PCWSTR" - } - ], - "StrStrNW": [ - { - "name": "pszFirst", - "type": "PCWSTR" - }, - { - "name": "pszSrch", - "type": "PCWSTR" - }, - { - "name": "cchMax", - "type": "UINT" - } - ], - "StrStrNIW": [ - { - "name": "pszFirst", - "type": "PCWSTR" - }, - { - "name": "pszSrch", - "type": "PCWSTR" - }, - { - "name": "cchMax", - "type": "UINT" - } - ], - "StrToIntA": [ - { - "name": "pszSrc", - "type": "PCSTR" - } - ], - "StrToIntW": [ - { - "name": "pszSrc", - "type": "PCWSTR" - } - ], - "StrToIntExA": [ - { - "name": "pszString", - "type": "PCSTR" - }, - { - "name": "dwFlags", - "type": "STIF_FLAGS" - }, - { - "name": "piRet", - "type": "int" - } - ], - "StrToIntExW": [ - { - "name": "pszString", - "type": "PCWSTR" - }, - { - "name": "dwFlags", - "type": "STIF_FLAGS" - }, - { - "name": "piRet", - "type": "int" - } - ], - "StrToInt64ExA": [ - { - "name": "pszString", - "type": "PCSTR" - }, - { - "name": "dwFlags", - "type": "STIF_FLAGS" - }, - { - "name": "pllRet", - "type": "LONGLONG" - } - ], - "StrToInt64ExW": [ - { - "name": "pszString", - "type": "PCWSTR" - }, - { - "name": "dwFlags", - "type": "STIF_FLAGS" - }, - { - "name": "pllRet", - "type": "LONGLONG" - } - ], - "StrTrimA": [ - { - "name": "psz", - "type": "PSTR" - }, - { - "name": "pszTrimChars", - "type": "PCSTR" - } - ], - "StrTrimW": [ - { - "name": "psz", - "type": "PWSTR" - }, - { - "name": "pszTrimChars", - "type": "PCWSTR" - } - ], - "StrCatW": [ - { - "name": "psz1", - "type": "PWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - } - ], - "StrCmpW": [ - { - "name": "psz1", - "type": "PCWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - } - ], - "StrCmpIW": [ - { - "name": "psz1", - "type": "PCWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - } - ], - "StrCpyW": [ - { - "name": "psz1", - "type": "PWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - } - ], - "StrCpyNW": [ - { - "name": "pszDst", - "type": "PWSTR" - }, - { - "name": "pszSrc", - "type": "PCWSTR" - }, - { - "name": "cchMax", - "type": "int" - } - ], - "StrCatBuffW": [ - { - "name": "pszDest", - "type": "PWSTR" - }, - { - "name": "pszSrc", - "type": "PCWSTR" - }, - { - "name": "cchDestBuffSize", - "type": "int" - } - ], - "StrCatBuffA": [ - { - "name": "pszDest", - "type": "PSTR" - }, - { - "name": "pszSrc", - "type": "PCSTR" - }, - { - "name": "cchDestBuffSize", - "type": "int" - } - ], - "ChrCmpIA": [ - { - "name": "w1", - "type": "WORD" - }, - { - "name": "w2", - "type": "WORD" - } - ], - "ChrCmpIW": [ - { - "name": "w1", - "type": "WCHAR" - }, - { - "name": "w2", - "type": "WCHAR" - } - ], - "wvnsprintfA": [ - { - "name": "pszDest", - "type": "PSTR" - }, - { - "name": "cchDest", - "type": "int" - }, - { - "name": "pszFmt", - "type": "PCSTR" - }, - { - "name": "arglist", - "type": "va_list" - } - ], - "wvnsprintfW": [ - { - "name": "pszDest", - "type": "PWSTR" - }, - { - "name": "cchDest", - "type": "int" - }, - { - "name": "pszFmt", - "type": "PCWSTR" - }, - { - "name": "arglist", - "type": "va_list" - } - ], - "wnsprintfA": [ - { - "name": "pszDest", - "type": "PSTR" - }, - { - "name": "cchDest", - "type": "int" - }, - { - "name": "pszFmt", - "type": "PCSTR" - } - ], - "wnsprintfW": [ - { - "name": "pszDest", - "type": "PWSTR" - }, - { - "name": "cchDest", - "type": "int" - }, - { - "name": "pszFmt", - "type": "PCWSTR" - } - ], - "StrRetToStrA": [ - { - "name": "pstr", - "type": "STRRET" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "ppsz", - "type": "LPSTR" - } - ], - "StrRetToStrW": [ - { - "name": "pstr", - "type": "STRRET" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "ppsz", - "type": "LPWSTR" - } - ], - "StrRetToBufA": [ - { - "name": "pstr", - "type": "STRRET" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "pszBuf", - "type": "LPSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "StrRetToBufW": [ - { - "name": "pstr", - "type": "STRRET" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "pszBuf", - "type": "LPWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "SHStrDupA": [ - { - "name": "psz", - "type": "LPCSTR" - }, - { - "name": "ppwsz", - "type": "LPWSTR" - } - ], - "SHStrDupW": [ - { - "name": "psz", - "type": "LPCWSTR" - }, - { - "name": "ppwsz", - "type": "LPWSTR" - } - ], - "StrCmpLogicalW": [ - { - "name": "psz1", - "type": "PCWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - } - ], - "StrCatChainW": [ - { - "name": "pszDst", - "type": "PWSTR" - }, - { - "name": "cchDst", - "type": "DWORD" - }, - { - "name": "ichAt", - "type": "DWORD" - }, - { - "name": "pszSrc", - "type": "PCWSTR" - } - ], - "StrRetToBSTR": [ - { - "name": "pstr", - "type": "STRRET" - }, - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "pbstr", - "type": "BSTR" - } - ], - "SHLoadIndirectString": [ - { - "name": "pszSource", - "type": "PCWSTR" - }, - { - "name": "pszOutBuf", - "type": "PWSTR" - }, - { - "name": "cchOutBuf", - "type": "UINT" - }, - { - "name": "ppvReserved", - "type": "void" - } - ], - "IsCharSpaceA": [ - { - "name": "wch", - "type": "CHAR" - } - ], - "IsCharSpaceW": [ - { - "name": "wch", - "type": "WCHAR" - } - ], - "StrCmpCA": [ - { - "name": "pszStr1", - "type": "LPCSTR" - }, - { - "name": "pszStr2", - "type": "LPCSTR" - } - ], - "StrCmpCW": [ - { - "name": "pszStr1", - "type": "LPCWSTR" - }, - { - "name": "pszStr2", - "type": "LPCWSTR" - } - ], - "StrCmpICA": [ - { - "name": "pszStr1", - "type": "LPCSTR" - }, - { - "name": "pszStr2", - "type": "LPCSTR" - } - ], - "StrCmpICW": [ - { - "name": "pszStr1", - "type": "LPCWSTR" - }, - { - "name": "pszStr2", - "type": "LPCWSTR" - } - ], - "StrCmpNCA": [ - { - "name": "pszStr1", - "type": "LPCSTR" - }, - { - "name": "pszStr2", - "type": "LPCSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCmpNCW": [ - { - "name": "pszStr1", - "type": "LPCWSTR" - }, - { - "name": "pszStr2", - "type": "LPCWSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCmpNICA": [ - { - "name": "pszStr1", - "type": "LPCSTR" - }, - { - "name": "pszStr2", - "type": "LPCSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "StrCmpNICW": [ - { - "name": "pszStr1", - "type": "LPCWSTR" - }, - { - "name": "pszStr2", - "type": "LPCWSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "IntlStrEqWorkerA": [ - { - "name": "fCaseSens", - "type": "BOOL" - }, - { - "name": "lpString1", - "type": "LPCSTR" - }, - { - "name": "lpString2", - "type": "LPCSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "IntlStrEqWorkerW": [ - { - "name": "fCaseSens", - "type": "BOOL" - }, - { - "name": "lpString1", - "type": "LPCWSTR" - }, - { - "name": "lpString2", - "type": "LPCWSTR" - }, - { - "name": "nChar", - "type": "int" - } - ], - "PathAddBackslashA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathAddBackslashW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathBuildRootA": [ - { - "name": "pszRoot", - "type": "LPSTR" - }, - { - "name": "iDrive", - "type": "int" - } - ], - "PathBuildRootW": [ - { - "name": "pszRoot", - "type": "LPWSTR" - }, - { - "name": "iDrive", - "type": "int" - } - ], - "PathCombineA": [ - { - "name": "pszDest", - "type": "LPSTR" - }, - { - "name": "pszDir", - "type": "LPCSTR" - }, - { - "name": "pszFile", - "type": "LPCSTR" - } - ], - "PathCombineW": [ - { - "name": "pszDest", - "type": "LPWSTR" - }, - { - "name": "pszDir", - "type": "LPCWSTR" - }, - { - "name": "pszFile", - "type": "LPCWSTR" - } - ], - "PathCompactPathA": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "pszPath", - "type": "LPSTR" - }, - { - "name": "dx", - "type": "UINT" - } - ], - "PathCompactPathW": [ - { - "name": "hDC", - "type": "HDC" - }, - { - "name": "pszPath", - "type": "LPWSTR" - }, - { - "name": "dx", - "type": "UINT" - } - ], - "PathCompactPathExA": [ - { - "name": "pszOut", - "type": "LPSTR" - }, - { - "name": "pszSrc", - "type": "LPCSTR" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathCompactPathExW": [ - { - "name": "pszOut", - "type": "LPWSTR" - }, - { - "name": "pszSrc", - "type": "LPCWSTR" - }, - { - "name": "cchMax", - "type": "UINT" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathCommonPrefixA": [ - { - "name": "pszFile1", - "type": "LPCSTR" - }, - { - "name": "pszFile2", - "type": "LPCSTR" - }, - { - "name": "achPath", - "type": "LPSTR" - } - ], - "PathCommonPrefixW": [ - { - "name": "pszFile1", - "type": "LPCWSTR" - }, - { - "name": "pszFile2", - "type": "LPCWSTR" - }, - { - "name": "achPath", - "type": "LPWSTR" - } - ], - "PathFileExistsA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathFileExistsW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathFindExtensionA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathFindExtensionW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathFindFileNameA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathFindFileNameW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathFindNextComponentA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathFindNextComponentW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathFindOnPathA": [ - { - "name": "pszPath", - "type": "LPSTR" - }, - { - "name": "ppszOtherDirs", - "type": "PZPCSTR" - } - ], - "PathFindOnPathW": [ - { - "name": "pszPath", - "type": "LPWSTR" - }, - { - "name": "ppszOtherDirs", - "type": "PZPCWSTR" - } - ], - "PathFindSuffixArrayA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "apszSuffix", - "type": "LPCSTR" - }, - { - "name": "iArraySize", - "type": "int" - } - ], - "PathFindSuffixArrayW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - }, - { - "name": "apszSuffix", - "type": "LPCWSTR" - }, - { - "name": "iArraySize", - "type": "int" - } - ], - "PathGetArgsA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathGetArgsW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsLFNFileSpecA": [ - { - "name": "pszName", - "type": "LPCSTR" - } - ], - "PathIsLFNFileSpecW": [ - { - "name": "pszName", - "type": "LPCWSTR" - } - ], - "PathGetCharTypeA": [ - { - "name": "ch", - "type": "UCHAR" - } - ], - "PathGetCharTypeW": [ - { - "name": "ch", - "type": "WCHAR" - } - ], - "PathGetDriveNumberA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathGetDriveNumberW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsDirectoryA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsDirectoryW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsDirectoryEmptyA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsDirectoryEmptyW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsFileSpecA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsFileSpecW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsPrefixA": [ - { - "name": "pszPrefix", - "type": "LPCSTR" - }, - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsPrefixW": [ - { - "name": "pszPrefix", - "type": "LPCWSTR" - }, - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsRelativeA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsRelativeW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsRootA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsRootW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsSameRootA": [ - { - "name": "pszPath1", - "type": "LPCSTR" - }, - { - "name": "pszPath2", - "type": "LPCSTR" - } - ], - "PathIsSameRootW": [ - { - "name": "pszPath1", - "type": "LPCWSTR" - }, - { - "name": "pszPath2", - "type": "LPCWSTR" - } - ], - "PathIsUNCA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsUNCW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsNetworkPathA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsNetworkPathW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsUNCServerA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsUNCServerW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsUNCServerShareA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsUNCServerShareW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsContentTypeA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "pszContentType", - "type": "LPCSTR" - } - ], - "PathIsContentTypeW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - }, - { - "name": "pszContentType", - "type": "LPCWSTR" - } - ], - "PathIsURLA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathIsURLW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathMakePrettyA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathMakePrettyW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathMatchSpecA": [ - { - "name": "pszFile", - "type": "LPCSTR" - }, - { - "name": "pszSpec", - "type": "LPCSTR" - } - ], - "PathMatchSpecW": [ - { - "name": "pszFile", - "type": "LPCWSTR" - }, - { - "name": "pszSpec", - "type": "LPCWSTR" - } - ], - "PathMatchSpecExA": [ - { - "name": "pszFile", - "type": "LPCSTR" - }, - { - "name": "pszSpec", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathMatchSpecExW": [ - { - "name": "pszFile", - "type": "LPCWSTR" - }, - { - "name": "pszSpec", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathParseIconLocationA": [ - { - "name": "pszIconFile", - "type": "LPSTR" - } - ], - "PathParseIconLocationW": [ - { - "name": "pszIconFile", - "type": "LPWSTR" - } - ], - "PathQuoteSpacesA": [ - { - "name": "lpsz", - "type": "LPSTR" - } - ], - "PathQuoteSpacesW": [ - { - "name": "lpsz", - "type": "LPWSTR" - } - ], - "PathRelativePathToA": [ - { - "name": "pszPath", - "type": "LPSTR" - }, - { - "name": "pszFrom", - "type": "LPCSTR" - }, - { - "name": "dwAttrFrom", - "type": "DWORD" - }, - { - "name": "pszTo", - "type": "LPCSTR" - }, - { - "name": "dwAttrTo", - "type": "DWORD" - } - ], - "PathRelativePathToW": [ - { - "name": "pszPath", - "type": "LPWSTR" - }, - { - "name": "pszFrom", - "type": "LPCWSTR" - }, - { - "name": "dwAttrFrom", - "type": "DWORD" - }, - { - "name": "pszTo", - "type": "LPCWSTR" - }, - { - "name": "dwAttrTo", - "type": "DWORD" - } - ], - "PathRemoveArgsA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathRemoveArgsW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathRemoveBackslashA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathRemoveBackslashW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathRemoveBlanksA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathRemoveBlanksW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathRemoveExtensionA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathRemoveExtensionW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathRemoveFileSpecA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathRemoveFileSpecW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathRenameExtensionA": [ - { - "name": "pszPath", - "type": "LPSTR" - }, - { - "name": "pszExt", - "type": "LPCSTR" - } - ], - "PathRenameExtensionW": [ - { - "name": "pszPath", - "type": "LPWSTR" - }, - { - "name": "pszExt", - "type": "LPCWSTR" - } - ], - "PathSearchAndQualifyA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "pszBuf", - "type": "LPSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "PathSearchAndQualifyW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - }, - { - "name": "pszBuf", - "type": "LPWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "PathSetDlgItemPathA": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "id", - "type": "int" - }, - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathSetDlgItemPathW": [ - { - "name": "hDlg", - "type": "HWND" - }, - { - "name": "id", - "type": "int" - }, - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathSkipRootA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathSkipRootW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathStripPathA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathStripPathW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathStripToRootA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathStripToRootW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathUnquoteSpacesA": [ - { - "name": "lpsz", - "type": "LPSTR" - } - ], - "PathUnquoteSpacesW": [ - { - "name": "lpsz", - "type": "LPWSTR" - } - ], - "PathMakeSystemFolderA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathMakeSystemFolderW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathUnmakeSystemFolderA": [ - { - "name": "pszPath", - "type": "LPCSTR" - } - ], - "PathUnmakeSystemFolderW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - } - ], - "PathIsSystemFolderA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "dwAttrb", - "type": "DWORD" - } - ], - "PathIsSystemFolderW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - }, - { - "name": "dwAttrb", - "type": "DWORD" - } - ], - "PathUndecorateA": [ - { - "name": "pszPath", - "type": "LPSTR" - } - ], - "PathUndecorateW": [ - { - "name": "pszPath", - "type": "LPWSTR" - } - ], - "PathUnExpandEnvStringsA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "pszBuf", - "type": "LPSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "PathUnExpandEnvStringsW": [ - { - "name": "pszPath", - "type": "LPCWSTR" - }, - { - "name": "pszBuf", - "type": "LPWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "UrlCompareA": [ - { - "name": "psz1", - "type": "PCSTR" - }, - { - "name": "psz2", - "type": "PCSTR" - }, - { - "name": "fIgnoreSlash", - "type": "BOOL" - } - ], - "UrlCompareW": [ - { - "name": "psz1", - "type": "PCWSTR" - }, - { - "name": "psz2", - "type": "PCWSTR" - }, - { - "name": "fIgnoreSlash", - "type": "BOOL" - } - ], - "UrlCombineA": [ - { - "name": "pszBase", - "type": "PCSTR" - }, - { - "name": "pszRelative", - "type": "PCSTR" - }, - { - "name": "pszCombined", - "type": "PSTR" - }, - { - "name": "pcchCombined", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlCombineW": [ - { - "name": "pszBase", - "type": "PCWSTR" - }, - { - "name": "pszRelative", - "type": "PCWSTR" - }, - { - "name": "pszCombined", - "type": "PWSTR" - }, - { - "name": "pcchCombined", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlCanonicalizeA": [ - { - "name": "pszUrl", - "type": "PCSTR" - }, - { - "name": "pszCanonicalized", - "type": "PSTR" - }, - { - "name": "pcchCanonicalized", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlCanonicalizeW": [ - { - "name": "pszUrl", - "type": "PCWSTR" - }, - { - "name": "pszCanonicalized", - "type": "PWSTR" - }, - { - "name": "pcchCanonicalized", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlIsOpaqueA": [ - { - "name": "pszURL", - "type": "PCSTR" - } - ], - "UrlIsOpaqueW": [ - { - "name": "pszURL", - "type": "PCWSTR" - } - ], - "UrlIsNoHistoryA": [ - { - "name": "pszURL", - "type": "PCSTR" - } - ], - "UrlIsNoHistoryW": [ - { - "name": "pszURL", - "type": "PCWSTR" - } - ], - "UrlIsA": [ - { - "name": "pszUrl", - "type": "PCSTR" - }, - { - "name": "UrlIs", - "type": "URLIS" - } - ], - "UrlIsW": [ - { - "name": "pszUrl", - "type": "PCWSTR" - }, - { - "name": "UrlIs", - "type": "URLIS" - } - ], - "UrlGetLocationA": [ - { - "name": "pszURL", - "type": "PCSTR" - } - ], - "UrlGetLocationW": [ - { - "name": "pszURL", - "type": "PCWSTR" - } - ], - "UrlUnescapeA": [ - { - "name": "pszUrl", - "type": "PSTR" - }, - { - "name": "pszUnescaped", - "type": "PSTR" - }, - { - "name": "pcchUnescaped", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlUnescapeW": [ - { - "name": "pszUrl", - "type": "PWSTR" - }, - { - "name": "pszUnescaped", - "type": "PWSTR" - }, - { - "name": "pcchUnescaped", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlEscapeA": [ - { - "name": "pszUrl", - "type": "PCSTR" - }, - { - "name": "pszEscaped", - "type": "PSTR" - }, - { - "name": "pcchEscaped", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlEscapeW": [ - { - "name": "pszUrl", - "type": "PCWSTR" - }, - { - "name": "pszEscaped", - "type": "PWSTR" - }, - { - "name": "pcchEscaped", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlCreateFromPathA": [ - { - "name": "pszPath", - "type": "PCSTR" - }, - { - "name": "pszUrl", - "type": "PSTR" - }, - { - "name": "pcchUrl", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlCreateFromPathW": [ - { - "name": "pszPath", - "type": "PCWSTR" - }, - { - "name": "pszUrl", - "type": "PWSTR" - }, - { - "name": "pcchUrl", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathCreateFromUrlA": [ - { - "name": "pszUrl", - "type": "PCSTR" - }, - { - "name": "pszPath", - "type": "PSTR" - }, - { - "name": "pcchPath", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathCreateFromUrlW": [ - { - "name": "pszUrl", - "type": "PCWSTR" - }, - { - "name": "pszPath", - "type": "PWSTR" - }, - { - "name": "pcchPath", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "PathCreateFromUrlAlloc": [ - { - "name": "pszIn", - "type": "PCWSTR" - }, - { - "name": "ppszOut", - "type": "PWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlHashA": [ - { - "name": "pszUrl", - "type": "PCSTR" - }, - { - "name": "pbHash", - "type": "BYTE" - }, - { - "name": "cbHash", - "type": "DWORD" - } - ], - "UrlHashW": [ - { - "name": "pszUrl", - "type": "PCWSTR" - }, - { - "name": "pbHash", - "type": "BYTE" - }, - { - "name": "cbHash", - "type": "DWORD" - } - ], - "UrlGetPartW": [ - { - "name": "pszIn", - "type": "PCWSTR" - }, - { - "name": "pszOut", - "type": "PWSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - }, - { - "name": "dwPart", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlGetPartA": [ - { - "name": "pszIn", - "type": "PCSTR" - }, - { - "name": "pszOut", - "type": "PSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - }, - { - "name": "dwPart", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlApplySchemeA": [ - { - "name": "pszIn", - "type": "PCSTR" - }, - { - "name": "pszOut", - "type": "PSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "UrlApplySchemeW": [ - { - "name": "pszIn", - "type": "PCWSTR" - }, - { - "name": "pszOut", - "type": "PWSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "HashData": [ - { - "name": "pbData", - "type": "BYTE" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "pbHash", - "type": "BYTE" - }, - { - "name": "cbHash", - "type": "DWORD" - } - ], - "UrlFixupW": [ - { - "name": "pcszUrl", - "type": "PCWSTR" - }, - { - "name": "pszTranslatedUrl", - "type": "PWSTR" - }, - { - "name": "cchMax", - "type": "DWORD" - } - ], - "SHDeleteEmptyKeyA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - } - ], - "SHDeleteEmptyKeyW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - } - ], - "SHDeleteKeyA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - } - ], - "SHDeleteKeyW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - } - ], - "SHRegDuplicateHKey": [ - { - "name": "hkey", - "type": "HKEY" - } - ], - "SHDeleteValueA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - } - ], - "SHDeleteValueW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - } - ], - "SHGetValueA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHGetValueW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHSetValueA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "LPCVOID" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "SHSetValueW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "LPCVOID" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "SHRegGetValueA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "srrfFlags", - "type": "SRRF" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHRegGetValueW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "srrfFlags", - "type": "SRRF" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHRegSetValue": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "srrfFlags", - "type": "SRRF" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "LPCVOID" - }, - { - "name": "cbData", - "type": "DWORD" - } - ], - "SHRegGetValueFromHKCUHKLM": [ - { - "name": "pwszKey", - "type": "PCWSTR" - }, - { - "name": "pwszValue", - "type": "PCWSTR" - }, - { - "name": "srrfFlags", - "type": "SRRF" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHRegGetBoolValueFromHKCUHKLM": [ - { - "name": "pszKey", - "type": "PCWSTR" - }, - { - "name": "pszValue", - "type": "PCWSTR" - }, - { - "name": "fDefault", - "type": "BOOL" - } - ], - "SHQueryValueExA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHQueryValueExW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "pdwReserved", - "type": "DWORD" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - } - ], - "SHEnumKeyExA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszName", - "type": "LPSTR" - }, - { - "name": "pcchName", - "type": "LPDWORD" - } - ], - "SHEnumKeyExW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszName", - "type": "LPWSTR" - }, - { - "name": "pcchName", - "type": "LPDWORD" - } - ], - "SHEnumValueA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszValueName", - "type": "PSTR" - }, - { - "name": "pcchValueName", - "type": "LPDWORD" - }, - { - "name": "pdwType", - "type": "LPDWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "LPDWORD" - } - ], - "SHEnumValueW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszValueName", - "type": "PWSTR" - }, - { - "name": "pcchValueName", - "type": "LPDWORD" - }, - { - "name": "pdwType", - "type": "LPDWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "LPDWORD" - } - ], - "SHQueryInfoKeyA": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pcSubKeys", - "type": "LPDWORD" - }, - { - "name": "pcchMaxSubKeyLen", - "type": "LPDWORD" - }, - { - "name": "pcValues", - "type": "LPDWORD" - }, - { - "name": "pcchMaxValueNameLen", - "type": "LPDWORD" - } - ], - "SHQueryInfoKeyW": [ - { - "name": "hkey", - "type": "HKEY" - }, - { - "name": "pcSubKeys", - "type": "LPDWORD" - }, - { - "name": "pcchMaxSubKeyLen", - "type": "LPDWORD" - }, - { - "name": "pcValues", - "type": "LPDWORD" - }, - { - "name": "pcchMaxValueNameLen", - "type": "LPDWORD" - } - ], - "SHCopyKeyA": [ - { - "name": "hkeySrc", - "type": "HKEY" - }, - { - "name": "pszSrcSubKey", - "type": "LPCSTR" - }, - { - "name": "hkeyDest", - "type": "HKEY" - }, - { - "name": "fReserved", - "type": "DWORD" - } - ], - "SHCopyKeyW": [ - { - "name": "hkeySrc", - "type": "HKEY" - }, - { - "name": "pszSrcSubKey", - "type": "LPCWSTR" - }, - { - "name": "hkeyDest", - "type": "HKEY" - }, - { - "name": "fReserved", - "type": "DWORD" - } - ], - "SHRegGetPathA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "pcszSubKey", - "type": "LPCSTR" - }, - { - "name": "pcszValue", - "type": "LPCSTR" - }, - { - "name": "pszPath", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegGetPathW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "pcszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pcszValue", - "type": "LPCWSTR" - }, - { - "name": "pszPath", - "type": "LPWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegSetPathA": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "pcszSubKey", - "type": "LPCSTR" - }, - { - "name": "pcszValue", - "type": "LPCSTR" - }, - { - "name": "pcszPath", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegSetPathW": [ - { - "name": "hKey", - "type": "HKEY" - }, - { - "name": "pcszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pcszValue", - "type": "LPCWSTR" - }, - { - "name": "pcszPath", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegCreateUSKeyA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "hRelativeUSKey", - "type": "HUSKEY" - }, - { - "name": "phNewUSKey", - "type": "PHUSKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegCreateUSKeyW": [ - { - "name": "pwzPath", - "type": "LPCWSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "hRelativeUSKey", - "type": "HUSKEY" - }, - { - "name": "phNewUSKey", - "type": "PHUSKEY" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegOpenUSKeyA": [ - { - "name": "pszPath", - "type": "LPCSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "hRelativeUSKey", - "type": "HUSKEY" - }, - { - "name": "phNewUSKey", - "type": "PHUSKEY" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - } - ], - "SHRegOpenUSKeyW": [ - { - "name": "pwzPath", - "type": "LPCWSTR" - }, - { - "name": "samDesired", - "type": "REGSAM" - }, - { - "name": "hRelativeUSKey", - "type": "HUSKEY" - }, - { - "name": "phNewUSKey", - "type": "PHUSKEY" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - } - ], - "SHRegQueryUSValueA": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - }, - { - "name": "pvDefaultData", - "type": "void" - }, - { - "name": "dwDefaultDataSize", - "type": "DWORD" - } - ], - "SHRegQueryUSValueW": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - }, - { - "name": "pvDefaultData", - "type": "void" - }, - { - "name": "dwDefaultDataSize", - "type": "DWORD" - } - ], - "SHRegWriteUSValueA": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegWriteUSValueW": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pwzValue", - "type": "LPCWSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegDeleteUSValueA": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "delRegFlags", - "type": "SHREGDEL_FLAGS" - } - ], - "SHRegDeleteUSValueW": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pwzValue", - "type": "LPCWSTR" - }, - { - "name": "delRegFlags", - "type": "SHREGDEL_FLAGS" - } - ], - "SHRegDeleteEmptyUSKeyW": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pwzSubKey", - "type": "LPCWSTR" - }, - { - "name": "delRegFlags", - "type": "SHREGDEL_FLAGS" - } - ], - "SHRegDeleteEmptyUSKeyA": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "delRegFlags", - "type": "SHREGDEL_FLAGS" - } - ], - "SHRegEnumUSKeyA": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszName", - "type": "LPSTR" - }, - { - "name": "pcchName", - "type": "LPDWORD" - }, - { - "name": "enumRegFlags", - "type": "SHREGENUM_FLAGS" - } - ], - "SHRegEnumUSKeyW": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pwzName", - "type": "LPWSTR" - }, - { - "name": "pcchName", - "type": "LPDWORD" - }, - { - "name": "enumRegFlags", - "type": "SHREGENUM_FLAGS" - } - ], - "SHRegEnumUSValueA": [ - { - "name": "hUSkey", - "type": "HUSKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszValueName", - "type": "LPSTR" - }, - { - "name": "pcchValueName", - "type": "LPDWORD" - }, - { - "name": "pdwType", - "type": "LPDWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "LPDWORD" - }, - { - "name": "enumRegFlags", - "type": "SHREGENUM_FLAGS" - } - ], - "SHRegEnumUSValueW": [ - { - "name": "hUSkey", - "type": "HUSKEY" - }, - { - "name": "dwIndex", - "type": "DWORD" - }, - { - "name": "pszValueName", - "type": "LPWSTR" - }, - { - "name": "pcchValueName", - "type": "LPDWORD" - }, - { - "name": "pdwType", - "type": "LPDWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "LPDWORD" - }, - { - "name": "enumRegFlags", - "type": "SHREGENUM_FLAGS" - } - ], - "SHRegQueryInfoUSKeyA": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pcSubKeys", - "type": "LPDWORD" - }, - { - "name": "pcchMaxSubKeyLen", - "type": "LPDWORD" - }, - { - "name": "pcValues", - "type": "LPDWORD" - }, - { - "name": "pcchMaxValueNameLen", - "type": "LPDWORD" - }, - { - "name": "enumRegFlags", - "type": "SHREGENUM_FLAGS" - } - ], - "SHRegQueryInfoUSKeyW": [ - { - "name": "hUSKey", - "type": "HUSKEY" - }, - { - "name": "pcSubKeys", - "type": "LPDWORD" - }, - { - "name": "pcchMaxSubKeyLen", - "type": "LPDWORD" - }, - { - "name": "pcValues", - "type": "LPDWORD" - }, - { - "name": "pcchMaxValueNameLen", - "type": "LPDWORD" - }, - { - "name": "enumRegFlags", - "type": "SHREGENUM_FLAGS" - } - ], - "SHRegCloseUSKey": [ - { - "name": "hUSKey", - "type": "HUSKEY" - } - ], - "SHRegGetUSValueA": [ - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - }, - { - "name": "pvDefaultData", - "type": "void" - }, - { - "name": "dwDefaultDataSize", - "type": "DWORD" - } - ], - "SHRegGetUSValueW": [ - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "pdwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "pcbData", - "type": "DWORD" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - }, - { - "name": "pvDefaultData", - "type": "void" - }, - { - "name": "dwDefaultDataSize", - "type": "DWORD" - } - ], - "SHRegSetUSValueA": [ - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegSetUSValueW": [ - { - "name": "pwzSubKey", - "type": "LPCWSTR" - }, - { - "name": "pwzValue", - "type": "LPCWSTR" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "void" - }, - { - "name": "cbData", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHRegGetIntW": [ - { - "name": "hk", - "type": "HKEY" - }, - { - "name": "pwzKey", - "type": "PCWSTR" - }, - { - "name": "iDefault", - "type": "int" - } - ], - "SHRegGetBoolUSValueA": [ - { - "name": "pszSubKey", - "type": "LPCSTR" - }, - { - "name": "pszValue", - "type": "LPCSTR" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - }, - { - "name": "fDefault", - "type": "BOOL" - } - ], - "SHRegGetBoolUSValueW": [ - { - "name": "pszSubKey", - "type": "LPCWSTR" - }, - { - "name": "pszValue", - "type": "LPCWSTR" - }, - { - "name": "fIgnoreHKCU", - "type": "BOOL" - }, - { - "name": "fDefault", - "type": "BOOL" - } - ], - "AssocCreate": [ - { - "name": "clsid", - "type": "CLSID" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHGetAssocKeys": [ - { - "name": "pqa", - "type": "IQueryAssociations" - }, - { - "name": "rgKeys", - "type": "HKEY" - }, - { - "name": "cKeys", - "type": "DWORD" - } - ], - "AssocQueryStringA": [ - { - "name": "flags", - "type": "ASSOCF" - }, - { - "name": "str", - "type": "ASSOCSTR" - }, - { - "name": "pszAssoc", - "type": "LPCSTR" - }, - { - "name": "pszExtra", - "type": "LPCSTR" - }, - { - "name": "pszOut", - "type": "LPSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - } - ], - "AssocQueryStringW": [ - { - "name": "flags", - "type": "ASSOCF" - }, - { - "name": "str", - "type": "ASSOCSTR" - }, - { - "name": "pszAssoc", - "type": "LPCWSTR" - }, - { - "name": "pszExtra", - "type": "LPCWSTR" - }, - { - "name": "pszOut", - "type": "LPWSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - } - ], - "AssocQueryStringByKeyA": [ - { - "name": "flags", - "type": "ASSOCF" - }, - { - "name": "str", - "type": "ASSOCSTR" - }, - { - "name": "hkAssoc", - "type": "HKEY" - }, - { - "name": "pszExtra", - "type": "LPCSTR" - }, - { - "name": "pszOut", - "type": "LPSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - } - ], - "AssocQueryStringByKeyW": [ - { - "name": "flags", - "type": "ASSOCF" - }, - { - "name": "str", - "type": "ASSOCSTR" - }, - { - "name": "hkAssoc", - "type": "HKEY" - }, - { - "name": "pszExtra", - "type": "LPCWSTR" - }, - { - "name": "pszOut", - "type": "LPWSTR" - }, - { - "name": "pcchOut", - "type": "DWORD" - } - ], - "AssocQueryKeyA": [ - { - "name": "flags", - "type": "ASSOCF" - }, - { - "name": "key", - "type": "ASSOCKEY" - }, - { - "name": "pszAssoc", - "type": "LPCSTR" - }, - { - "name": "pszExtra", - "type": "LPCSTR" - }, - { - "name": "phkeyOut", - "type": "HKEY" - } - ], - "AssocQueryKeyW": [ - { - "name": "flags", - "type": "ASSOCF" - }, - { - "name": "key", - "type": "ASSOCKEY" - }, - { - "name": "pszAssoc", - "type": "LPCWSTR" - }, - { - "name": "pszExtra", - "type": "LPCWSTR" - }, - { - "name": "phkeyOut", - "type": "HKEY" - } - ], - "AssocIsDangerous": [ - { - "name": "pszAssoc", - "type": "PCWSTR" - } - ], - "AssocGetPerceivedType": [ - { - "name": "pszExt", - "type": "PCWSTR" - }, - { - "name": "ptype", - "type": "PERCEIVED" - }, - { - "name": "pflag", - "type": "PERCEIVEDFLAG" - }, - { - "name": "ppszType", - "type": "PWSTR" - } - ], - "SHCreateStreamOnFileA": [ - { - "name": "pszFile", - "type": "LPCSTR" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "ppstm", - "type": "IStream" - } - ], - "SHCreateStreamOnFileW": [ - { - "name": "pszFile", - "type": "LPCWSTR" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "ppstm", - "type": "IStream" - } - ], - "SHCreateStreamOnFileEx": [ - { - "name": "pszFile", - "type": "LPCWSTR" - }, - { - "name": "grfMode", - "type": "DWORD" - }, - { - "name": "dwAttributes", - "type": "DWORD" - }, - { - "name": "fCreate", - "type": "BOOL" - }, - { - "name": "pstmTemplate", - "type": "IStream" - }, - { - "name": "ppstm", - "type": "IStream" - } - ], - "GetAcceptLanguagesA": [ - { - "name": "pszLanguages", - "type": "LPSTR" - }, - { - "name": "pcchLanguages", - "type": "DWORD" - } - ], - "GetAcceptLanguagesW": [ - { - "name": "pszLanguages", - "type": "LPWSTR" - }, - { - "name": "pcchLanguages", - "type": "DWORD" - } - ], - "IUnknown_Set": [ - { - "name": "ppunk", - "type": "IUnknown" - }, - { - "name": "punk", - "type": "IUnknown" - } - ], - "IUnknown_AtomicRelease": [ - { - "name": "ppunk", - "type": "void" - } - ], - "IUnknown_GetWindow": [ - { - "name": "punk", - "type": "IUnknown" - }, - { - "name": "phwnd", - "type": "HWND" - } - ], - "IUnknown_SetSite": [ - { - "name": "punk", - "type": "IUnknown" - }, - { - "name": "punkSite", - "type": "IUnknown" - } - ], - "IUnknown_GetSite": [ - { - "name": "punk", - "type": "IUnknown" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "IUnknown_QueryService": [ - { - "name": "punk", - "type": "IUnknown" - }, - { - "name": "guidService", - "type": "GUID" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppvOut", - "type": "void" - } - ], - "IStream_Read": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "pv", - "type": "void" - }, - { - "name": "cb", - "type": "ULONG" - } - ], - "IStream_Write": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "pv", - "type": "void" - }, - { - "name": "cb", - "type": "ULONG" - } - ], - "IStream_Reset": [ - { - "name": "pstm", - "type": "IStream" - } - ], - "IStream_Size": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "pui", - "type": "ULARGE_INTEGER" - } - ], - "ConnectToConnectionPoint": [ - { - "name": "punk", - "type": "IUnknown" - }, - { - "name": "riidEvent", - "type": "IID" - }, - { - "name": "fConnect", - "type": "BOOL" - }, - { - "name": "punkTarget", - "type": "IUnknown" - }, - { - "name": "pdwCookie", - "type": "DWORD" - }, - { - "name": "ppcpOut", - "type": "IConnectionPoint" - } - ], - "IStream_ReadPidl": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "ppidlOut", - "type": "LPITEMIDLIST" - } - ], - "IStream_WritePidl": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "pidlWrite", - "type": "LPCITEMIDLIST" - } - ], - "IStream_ReadStr": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "ppsz", - "type": "PWSTR" - } - ], - "IStream_WriteStr": [ - { - "name": "pstm", - "type": "IStream" - }, - { - "name": "psz", - "type": "PCWSTR" - } - ], - "IStream_Copy": [ - { - "name": "pstmFrom", - "type": "IStream" - }, - { - "name": "pstmTo", - "type": "IStream" - }, - { - "name": "cb", - "type": "DWORD" - } - ], - "SHGetViewStatePropertyBag": [ - { - "name": "pidl", - "type": "LPCITEMIDLIST" - }, - { - "name": "pszBagName", - "type": "PCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHFormatDateTimeA": [ - { - "name": "pft", - "type": "FILETIME" - }, - { - "name": "pdwFlags", - "type": "DWORD" - }, - { - "name": "pszBuf", - "type": "LPSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "SHFormatDateTimeW": [ - { - "name": "pft", - "type": "FILETIME" - }, - { - "name": "pdwFlags", - "type": "DWORD" - }, - { - "name": "pszBuf", - "type": "LPWSTR" - }, - { - "name": "cchBuf", - "type": "UINT" - } - ], - "SHAnsiToUnicode": [ - { - "name": "pszSrc", - "type": "PCSTR" - }, - { - "name": "pwszDst", - "type": "PWSTR" - }, - { - "name": "cwchBuf", - "type": "int" - } - ], - "SHAnsiToAnsi": [ - { - "name": "pszSrc", - "type": "PCSTR" - }, - { - "name": "pszDst", - "type": "PSTR" - }, - { - "name": "cchBuf", - "type": "int" - } - ], - "SHUnicodeToAnsi": [ - { - "name": "pwszSrc", - "type": "PCWSTR" - }, - { - "name": "pszDst", - "type": "PSTR" - }, - { - "name": "cchBuf", - "type": "int" - } - ], - "SHUnicodeToUnicode": [ - { - "name": "pwzSrc", - "type": "PCWSTR" - }, - { - "name": "pwzDst", - "type": "PWSTR" - }, - { - "name": "cwchBuf", - "type": "int" - } - ], - "SHMessageBoxCheckA": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pszText", - "type": "LPCSTR" - }, - { - "name": "pszCaption", - "type": "LPCSTR" - }, - { - "name": "uType", - "type": "UINT" - }, - { - "name": "iDefault", - "type": "int" - }, - { - "name": "pszRegVal", - "type": "LPCSTR" - } - ], - "SHMessageBoxCheckW": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pszText", - "type": "LPCWSTR" - }, - { - "name": "pszCaption", - "type": "LPCWSTR" - }, - { - "name": "uType", - "type": "UINT" - }, - { - "name": "iDefault", - "type": "int" - }, - { - "name": "pszRegVal", - "type": "LPCWSTR" - } - ], - "SHSendMessageBroadcastA": [ - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "SHSendMessageBroadcastW": [ - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "wParam", - "type": "WPARAM" - }, - { - "name": "lParam", - "type": "LPARAM" - } - ], - "SHStripMneumonicA": [ - { - "name": "pszMenu", - "type": "LPSTR" - } - ], - "SHStripMneumonicW": [ - { - "name": "pszMenu", - "type": "LPWSTR" - } - ], - "IsOS": [ - { - "name": "dwOS", - "type": "DWORD" - } - ], - "SHGlobalCounterGetValue": [ - { - "name": "id", - "type": "SHGLOBALCOUNTER" - } - ], - "SHGlobalCounterIncrement": [ - { - "name": "id", - "type": "SHGLOBALCOUNTER" - } - ], - "SHGlobalCounterDecrement": [ - { - "name": "id", - "type": "SHGLOBALCOUNTER" - } - ], - "SHAllocShared": [ - { - "name": "pvData", - "type": "void" - }, - { - "name": "dwSize", - "type": "DWORD" - }, - { - "name": "dwProcessId", - "type": "DWORD" - } - ], - "SHFreeShared": [ - { - "name": "hData", - "type": "HANDLE" - }, - { - "name": "dwProcessId", - "type": "DWORD" - } - ], - "SHUnlockShared": [ - { - "name": "pvData", - "type": "void" - } - ], - "WhichPlatform": [ - { - "name": "VOID", - "type": "void" - } - ], - "QISearch": [ - { - "name": "that", - "type": "void" - }, - { - "name": "pqit", - "type": "LPCQITAB" - }, - { - "name": "riid", - "type": "IID" - }, - { - "name": "ppv", - "type": "void" - } - ], - "SHIsLowMemoryMachine": [ - { - "name": "dwType", - "type": "DWORD" - } - ], - "GetMenuPosFromID": [ - { - "name": "hmenu", - "type": "HMENU" - }, - { - "name": "id", - "type": "UINT" - } - ], - "SHGetInverseCMAP": [ - { - "name": "pbMap", - "type": "BYTE" - }, - { - "name": "cbMap", - "type": "ULONG" - } - ], - "SHAutoComplete": [ - { - "name": "hwndEdit", - "type": "HWND" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SHCreateThreadRef": [ - { - "name": "pcRef", - "type": "LONG" - }, - { - "name": "ppunk", - "type": "IUnknown" - } - ], - "SHSetThreadRef": [ - { - "name": "punk", - "type": "IUnknown" - } - ], - "SHGetThreadRef": [ - { - "name": "ppunk", - "type": "IUnknown" - } - ], - "SHSkipJunction": [ - { - "name": "pbc", - "type": "IBindCtx" - }, - { - "name": "pclsid", - "type": "CLSID" - } - ], - "SHCreateThread": [ - { - "name": "pfnThreadProc", - "type": "LPTHREAD_START_ROUTINE" - }, - { - "name": "pData", - "type": "void" - }, - { - "name": "flags", - "type": "SHCT_FLAGS" - }, - { - "name": "pfnCallback", - "type": "LPTHREAD_START_ROUTINE" - } - ], - "SHCreateThreadWithHandle": [ - { - "name": "pfnThreadProc", - "type": "LPTHREAD_START_ROUTINE" - }, - { - "name": "pData", - "type": "void" - }, - { - "name": "flags", - "type": "SHCT_FLAGS" - }, - { - "name": "pfnCallback", - "type": "LPTHREAD_START_ROUTINE" - }, - { - "name": "pHandle", - "type": "HANDLE" - } - ], - "SetProcessReference": [ - { - "name": "punk", - "type": "IUnknown" - } - ], - "GetProcessReference": [ - { - "name": "punk", - "type": "IUnknown" - } - ], - "SHReleaseThreadRef": [ - { - "name": "VOID", - "type": "void" - } - ], - "SHCreateShellPalette": [ - { - "name": "hdc", - "type": "HDC" - } - ], - "ColorRGBToHLS": [ - { - "name": "clrRGB", - "type": "COLORREF" - }, - { - "name": "pwHue", - "type": "WORD" - }, - { - "name": "pwLuminance", - "type": "WORD" - }, - { - "name": "pwSaturation", - "type": "WORD" - } - ], - "ColorHLSToRGB": [ - { - "name": "wHue", - "type": "WORD" - }, - { - "name": "wLuminance", - "type": "WORD" - }, - { - "name": "wSaturation", - "type": "WORD" - } - ], - "ColorAdjustLuma": [ - { - "name": "clrRGB", - "type": "COLORREF" - }, - { - "name": "n", - "type": "int" - }, - { - "name": "fScale", - "type": "BOOL" - } - ], - "DllInstall": [ - { - "name": "bInstall", - "type": "BOOL" - }, - { - "name": "pszCmdLine", - "type": "PCWSTR" - } - ], - "IsInternetESCEnabled": [ - { - "name": "VOID", - "type": "void" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/api-ms-win-shcore-thread-L1-1-0.json b/qiling/extensions/windows_sdk/shlwapi_dll.json similarity index 99% rename from qiling/extensions/windows_sdk/api-ms-win-shcore-thread-L1-1-0.json rename to qiling/extensions/windows_sdk/shlwapi_dll.json index 94251ac13..6c78b5e98 100644 --- a/qiling/extensions/windows_sdk/api-ms-win-shcore-thread-L1-1-0.json +++ b/qiling/extensions/windows_sdk/shlwapi_dll.json @@ -1,4 +1,48 @@ { + "ShellMessageBoxA": [ + { + "name": "hAppInst", + "type": "HINSTANCE" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpcText", + "type": "LPCSTR" + }, + { + "name": "lpcTitle", + "type": "LPCSTR" + }, + { + "name": "fuStyle", + "type": "UINT" + } + ], + "ShellMessageBoxW": [ + { + "name": "hAppInst", + "type": "HINSTANCE" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "lpcText", + "type": "LPCWSTR" + }, + { + "name": "lpcTitle", + "type": "LPCWSTR" + }, + { + "name": "fuStyle", + "type": "UINT" + } + ], "StrChrA": [ { "name": "pszStart", @@ -527,34 +571,6 @@ "type": "PCWSTR" } ], - "StrStrNW": [ - { - "name": "pszFirst", - "type": "PCWSTR" - }, - { - "name": "pszSrch", - "type": "PCWSTR" - }, - { - "name": "cchMax", - "type": "UINT" - } - ], - "StrStrNIW": [ - { - "name": "pszFirst", - "type": "PCWSTR" - }, - { - "name": "pszSrch", - "type": "PCWSTR" - }, - { - "name": "cchMax", - "type": "UINT" - } - ], "StrToIntA": [ { "name": "pszSrc", @@ -2725,20 +2741,6 @@ "type": "DWORD" } ], - "SHRegGetBoolValueFromHKCUHKLM": [ - { - "name": "pszKey", - "type": "PCWSTR" - }, - { - "name": "pszValue", - "type": "PCWSTR" - }, - { - "name": "fDefault", - "type": "BOOL" - } - ], "SHQueryValueExA": [ { "name": "hkey", @@ -4517,18 +4519,6 @@ "type": "HANDLE" } ], - "SetProcessReference": [ - { - "name": "punk", - "type": "IUnknown" - } - ], - "GetProcessReference": [ - { - "name": "punk", - "type": "IUnknown" - } - ], "SHReleaseThreadRef": [ { "name": "VOID", diff --git a/qiling/extensions/windows_sdk/Slwga.json b/qiling/extensions/windows_sdk/slc_dll.json similarity index 92% rename from qiling/extensions/windows_sdk/Slwga.json rename to qiling/extensions/windows_sdk/slc_dll.json index 48dd28d3f..96e185c42 100644 --- a/qiling/extensions/windows_sdk/Slwga.json +++ b/qiling/extensions/windows_sdk/slc_dll.json @@ -659,56 +659,6 @@ "type": "DWORD" } ], - "SLIsGenuineLocal": [ - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pGenuineState", - "type": "SL_GENUINE_STATE" - }, - { - "name": "pUIOptions", - "type": "SL_NONGENUINE_UI_OPTIONS" - } - ], - "SLIsGenuineLocalEx": [ - { - "name": "pAppId", - "type": "SLID" - }, - { - "name": "pSkuId", - "type": "SLID" - }, - { - "name": "pGenuineState", - "type": "SL_GENUINE_STATE" - } - ], - "SLAcquireGenuineTicket": [ - { - "name": "ppTicketBlob", - "type": "void" - }, - { - "name": "pcbTicketBlob", - "type": "UINT" - }, - { - "name": "pwszTemplateId", - "type": "PCWSTR" - }, - { - "name": "pwszServerUrl", - "type": "PCWSTR" - }, - { - "name": "pwszClientToken", - "type": "PCWSTR" - } - ], "SLSetGenuineInformation": [ { "name": "pQueryId", @@ -930,27 +880,5 @@ "name": "hFile", "type": "HANDLE" } - ], - "SLQueryLicenseValueFromApp": [ - { - "name": "valueName", - "type": "PCWSTR" - }, - { - "name": "valueType", - "type": "ULONG" - }, - { - "name": "dataBuffer", - "type": "PVOID" - }, - { - "name": "dataSize", - "type": "ULONG" - }, - { - "name": "resultDataSize", - "type": "ULONG" - } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/slcext_dll.json b/qiling/extensions/windows_sdk/slcext_dll.json new file mode 100644 index 000000000..218830f68 --- /dev/null +++ b/qiling/extensions/windows_sdk/slcext_dll.json @@ -0,0 +1,24 @@ +{ + "SLAcquireGenuineTicket": [ + { + "name": "ppTicketBlob", + "type": "void" + }, + { + "name": "pcbTicketBlob", + "type": "UINT" + }, + { + "name": "pwszTemplateId", + "type": "PCWSTR" + }, + { + "name": "pwszServerUrl", + "type": "PCWSTR" + }, + { + "name": "pwszClientToken", + "type": "PCWSTR" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/slwga_dll.json b/qiling/extensions/windows_sdk/slwga_dll.json new file mode 100644 index 000000000..2aa203cba --- /dev/null +++ b/qiling/extensions/windows_sdk/slwga_dll.json @@ -0,0 +1,30 @@ +{ + "SLIsGenuineLocal": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pGenuineState", + "type": "SL_GENUINE_STATE" + }, + { + "name": "pUIOptions", + "type": "SL_NONGENUINE_UI_OPTIONS" + } + ], + "SLIsGenuineLocalEx": [ + { + "name": "pAppId", + "type": "SLID" + }, + { + "name": "pSkuId", + "type": "SLID" + }, + { + "name": "pGenuineState", + "type": "SL_GENUINE_STATE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Snmpapi.json b/qiling/extensions/windows_sdk/snmpapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Snmpapi.json rename to qiling/extensions/windows_sdk/snmpapi_dll.json diff --git a/qiling/extensions/windows_sdk/Spoolss.json b/qiling/extensions/windows_sdk/spoolss_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Spoolss.json rename to qiling/extensions/windows_sdk/spoolss_dll.json diff --git a/qiling/extensions/windows_sdk/SrClient.json b/qiling/extensions/windows_sdk/srclient_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/SrClient.json rename to qiling/extensions/windows_sdk/srclient_dll.json diff --git a/qiling/extensions/windows_sdk/srpapi.json b/qiling/extensions/windows_sdk/srpapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/srpapi.json rename to qiling/extensions/windows_sdk/srpapi_dll.json diff --git a/qiling/extensions/windows_sdk/storprop.json b/qiling/extensions/windows_sdk/storprop_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/storprop.json rename to qiling/extensions/windows_sdk/storprop_dll.json diff --git a/qiling/extensions/windows_sdk/sxs.json b/qiling/extensions/windows_sdk/sxs_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/sxs.json rename to qiling/extensions/windows_sdk/sxs_dll.json diff --git a/qiling/extensions/windows_sdk/T2embed.json b/qiling/extensions/windows_sdk/t2embed_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/T2embed.json rename to qiling/extensions/windows_sdk/t2embed_dll.json diff --git a/qiling/extensions/windows_sdk/tbs.json b/qiling/extensions/windows_sdk/tbs_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/tbs.json rename to qiling/extensions/windows_sdk/tbs_dll.json diff --git a/qiling/extensions/windows_sdk/tdh.json b/qiling/extensions/windows_sdk/tdh_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/tdh.json rename to qiling/extensions/windows_sdk/tdh_dll.json diff --git a/qiling/extensions/windows_sdk/tokenbinding.json b/qiling/extensions/windows_sdk/tokenbinding_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/tokenbinding.json rename to qiling/extensions/windows_sdk/tokenbinding_dll.json diff --git a/qiling/extensions/windows_sdk/twinapi.json b/qiling/extensions/windows_sdk/twinapi_core_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/twinapi.json rename to qiling/extensions/windows_sdk/twinapi_core_dll.json diff --git a/qiling/extensions/windows_sdk/txfw32.json b/qiling/extensions/windows_sdk/txfw32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/txfw32.json rename to qiling/extensions/windows_sdk/txfw32_dll.json diff --git a/qiling/extensions/windows_sdk/Ualapi.json b/qiling/extensions/windows_sdk/ualapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Ualapi.json rename to qiling/extensions/windows_sdk/ualapi_dll.json diff --git a/qiling/extensions/windows_sdk/Url.json b/qiling/extensions/windows_sdk/url_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Url.json rename to qiling/extensions/windows_sdk/url_dll.json diff --git a/qiling/extensions/windows_sdk/urlmon.json b/qiling/extensions/windows_sdk/urlmon_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/urlmon.json rename to qiling/extensions/windows_sdk/urlmon_dll.json diff --git a/qiling/extensions/windows_sdk/User32.json b/qiling/extensions/windows_sdk/user32_dll.json similarity index 94% rename from qiling/extensions/windows_sdk/User32.json rename to qiling/extensions/windows_sdk/user32_dll.json index 365e9667a..2e4e26707 100644 --- a/qiling/extensions/windows_sdk/User32.json +++ b/qiling/extensions/windows_sdk/user32_dll.json @@ -1,4 +1,570 @@ { + "WINNLSEnableIME": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "BOOL" + } + ], + "SendIMEMessageExA": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "SendIMEMessageExW": [ + { + "name": "VOID", + "type": "HWND" + }, + { + "name": "VOID", + "type": "LPARAM" + } + ], + "DdeSetQualityOfService": [ + { + "name": "hwndClient", + "type": "HWND" + }, + { + "name": "pqosNew", + "type": "SECURITY_QUALITY_OF_SERVICE" + }, + { + "name": "pqosPrev", + "type": "PSECURITY_QUALITY_OF_SERVICE" + } + ], + "ImpersonateDdeClientWindow": [ + { + "name": "hWndClient", + "type": "HWND" + }, + { + "name": "hWndServer", + "type": "HWND" + } + ], + "PackDDElParam": [ + { + "name": "msg", + "type": "UINT" + }, + { + "name": "uiLo", + "type": "UINT_PTR" + }, + { + "name": "uiHi", + "type": "UINT_PTR" + } + ], + "UnpackDDElParam": [ + { + "name": "msg", + "type": "UINT" + }, + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "puiLo", + "type": "PUINT_PTR" + }, + { + "name": "puiHi", + "type": "PUINT_PTR" + } + ], + "FreeDDElParam": [ + { + "name": "msg", + "type": "UINT" + }, + { + "name": "lParam", + "type": "LPARAM" + } + ], + "ReuseDDElParam": [ + { + "name": "lParam", + "type": "LPARAM" + }, + { + "name": "msgIn", + "type": "UINT" + }, + { + "name": "msgOut", + "type": "UINT" + }, + { + "name": "uiLo", + "type": "UINT_PTR" + }, + { + "name": "uiHi", + "type": "UINT_PTR" + } + ], + "DdeInitializeA": [ + { + "name": "pidInst", + "type": "LPDWORD" + }, + { + "name": "pfnCallback", + "type": "PFNCALLBACK" + }, + { + "name": "afCmd", + "type": "DWORD" + }, + { + "name": "ulRes", + "type": "DWORD" + } + ], + "DdeInitializeW": [ + { + "name": "pidInst", + "type": "LPDWORD" + }, + { + "name": "pfnCallback", + "type": "PFNCALLBACK" + }, + { + "name": "afCmd", + "type": "DWORD" + }, + { + "name": "ulRes", + "type": "DWORD" + } + ], + "DdeUninitialize": [ + { + "name": "idInst", + "type": "DWORD" + } + ], + "DdeConnectList": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hszService", + "type": "HSZ" + }, + { + "name": "hszTopic", + "type": "HSZ" + }, + { + "name": "hConvList", + "type": "HCONVLIST" + }, + { + "name": "pCC", + "type": "PCONVCONTEXT" + } + ], + "DdeQueryNextServer": [ + { + "name": "hConvList", + "type": "HCONVLIST" + }, + { + "name": "hConvPrev", + "type": "HCONV" + } + ], + "DdeDisconnectList": [ + { + "name": "hConvList", + "type": "HCONVLIST" + } + ], + "DdeConnect": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hszService", + "type": "HSZ" + }, + { + "name": "hszTopic", + "type": "HSZ" + }, + { + "name": "pCC", + "type": "PCONVCONTEXT" + } + ], + "DdeDisconnect": [ + { + "name": "hConv", + "type": "HCONV" + } + ], + "DdeReconnect": [ + { + "name": "hConv", + "type": "HCONV" + } + ], + "DdeQueryConvInfo": [ + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "idTransaction", + "type": "DWORD" + }, + { + "name": "pConvInfo", + "type": "PCONVINFO" + } + ], + "DdeSetUserHandle": [ + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "id", + "type": "DWORD" + }, + { + "name": "hUser", + "type": "DWORD_PTR" + } + ], + "DdeAbandonTransaction": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "idTransaction", + "type": "DWORD" + } + ], + "DdePostAdvise": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hszTopic", + "type": "HSZ" + }, + { + "name": "hszItem", + "type": "HSZ" + } + ], + "DdeEnableCallback": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "wCmd", + "type": "UINT" + } + ], + "DdeImpersonateClient": [ + { + "name": "hConv", + "type": "HCONV" + } + ], + "DdeNameService": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz1", + "type": "HSZ" + }, + { + "name": "hsz2", + "type": "HSZ" + }, + { + "name": "afCmd", + "type": "UINT" + } + ], + "DdeClientTransaction": [ + { + "name": "pData", + "type": "LPBYTE" + }, + { + "name": "cbData", + "type": "DWORD" + }, + { + "name": "hConv", + "type": "HCONV" + }, + { + "name": "hszItem", + "type": "HSZ" + }, + { + "name": "wFmt", + "type": "UINT" + }, + { + "name": "wType", + "type": "UINT" + }, + { + "name": "dwTimeout", + "type": "DWORD" + }, + { + "name": "pdwResult", + "type": "LPDWORD" + } + ], + "DdeCreateDataHandle": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "pSrc", + "type": "LPBYTE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "cbOff", + "type": "DWORD" + }, + { + "name": "hszItem", + "type": "HSZ" + }, + { + "name": "wFmt", + "type": "UINT" + }, + { + "name": "afCmd", + "type": "UINT" + } + ], + "DdeAddData": [ + { + "name": "hData", + "type": "HDDEDATA" + }, + { + "name": "pSrc", + "type": "LPBYTE" + }, + { + "name": "cb", + "type": "DWORD" + }, + { + "name": "cbOff", + "type": "DWORD" + } + ], + "DdeGetData": [ + { + "name": "hData", + "type": "HDDEDATA" + }, + { + "name": "pDst", + "type": "LPBYTE" + }, + { + "name": "cbMax", + "type": "DWORD" + }, + { + "name": "cbOff", + "type": "DWORD" + } + ], + "DdeAccessData": [ + { + "name": "hData", + "type": "HDDEDATA" + }, + { + "name": "pcbDataSize", + "type": "LPDWORD" + } + ], + "DdeUnaccessData": [ + { + "name": "hData", + "type": "HDDEDATA" + } + ], + "DdeFreeDataHandle": [ + { + "name": "hData", + "type": "HDDEDATA" + } + ], + "DdeGetLastError": [ + { + "name": "idInst", + "type": "DWORD" + } + ], + "DdeCreateStringHandleA": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPCSTR" + }, + { + "name": "iCodePage", + "type": "int" + } + ], + "DdeCreateStringHandleW": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "psz", + "type": "LPCWSTR" + }, + { + "name": "iCodePage", + "type": "int" + } + ], + "DdeQueryStringA": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz", + "type": "HSZ" + }, + { + "name": "psz", + "type": "LPSTR" + }, + { + "name": "cchMax", + "type": "DWORD" + }, + { + "name": "iCodePage", + "type": "int" + } + ], + "DdeQueryStringW": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz", + "type": "HSZ" + }, + { + "name": "psz", + "type": "LPWSTR" + }, + { + "name": "cchMax", + "type": "DWORD" + }, + { + "name": "iCodePage", + "type": "int" + } + ], + "DdeFreeStringHandle": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz", + "type": "HSZ" + } + ], + "DdeKeepStringHandle": [ + { + "name": "idInst", + "type": "DWORD" + }, + { + "name": "hsz", + "type": "HSZ" + } + ], + "DdeCmpStringHandles": [ + { + "name": "hsz1", + "type": "HSZ" + }, + { + "name": "hsz2", + "type": "HSZ" + } + ], + "OpenThemeDataForDpi": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pszClassList", + "type": "LPCWSTR" + }, + { + "name": "dpi", + "type": "UINT" + } + ], "LoadStringA": [ { "name": "hInstance", @@ -8927,38 +9493,6 @@ "type": "INPUT_MESSAGE_SOURCE" } ], - "GetAutoRotationState": [ - { - "name": "pState", - "type": "PAR_STATE" - } - ], - "GetDisplayAutoRotationPreferences": [ - { - "name": "pOrientation", - "type": "ORIENTATION_PREFERENCE" - } - ], - "GetDisplayAutoRotationPreferencesByProcessId": [ - { - "name": "dwProcessId", - "type": "DWORD" - }, - { - "name": "pOrientation", - "type": "ORIENTATION_PREFERENCE" - }, - { - "name": "fRotateScreen", - "type": "BOOL" - } - ], - "SetDisplayAutoRotationPreferences": [ - { - "name": "orientation", - "type": "ORIENTATION_PREFERENCE" - } - ], "IsImmersiveProcess": [ { "name": "hProcess", diff --git a/qiling/extensions/windows_sdk/userenv.json b/qiling/extensions/windows_sdk/userenv_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/userenv.json rename to qiling/extensions/windows_sdk/userenv_dll.json diff --git a/qiling/extensions/windows_sdk/usp10.json b/qiling/extensions/windows_sdk/usp10_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/usp10.json rename to qiling/extensions/windows_sdk/usp10_dll.json diff --git a/qiling/extensions/windows_sdk/uxtheme.json b/qiling/extensions/windows_sdk/uxtheme_dll.json similarity index 99% rename from qiling/extensions/windows_sdk/uxtheme.json rename to qiling/extensions/windows_sdk/uxtheme_dll.json index 664142dac..45817e47e 100644 --- a/qiling/extensions/windows_sdk/uxtheme.json +++ b/qiling/extensions/windows_sdk/uxtheme_dll.json @@ -125,20 +125,6 @@ "type": "LPCWSTR" } ], - "OpenThemeDataForDpi": [ - { - "name": "hwnd", - "type": "HWND" - }, - { - "name": "pszClassList", - "type": "LPCWSTR" - }, - { - "name": "dpi", - "type": "UINT" - } - ], "OpenThemeDataEx": [ { "name": "hwnd", diff --git a/qiling/extensions/windows_sdk/vdmdbg.json b/qiling/extensions/windows_sdk/vdmdbg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/vdmdbg.json rename to qiling/extensions/windows_sdk/vdmdbg_dll.json diff --git a/qiling/extensions/windows_sdk/Verifier.json b/qiling/extensions/windows_sdk/verifier_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Verifier.json rename to qiling/extensions/windows_sdk/verifier_dll.json diff --git a/qiling/extensions/windows_sdk/vertdll_dll.json b/qiling/extensions/windows_sdk/vertdll_dll.json new file mode 100644 index 000000000..dcb5e5329 --- /dev/null +++ b/qiling/extensions/windows_sdk/vertdll_dll.json @@ -0,0 +1,20 @@ +{ + "CallEnclave": [ + { + "name": "lpRoutine", + "type": "LPENCLAVE_ROUTINE" + }, + { + "name": "lpParameter", + "type": "LPVOID" + }, + { + "name": "fWaitForThread", + "type": "BOOL" + }, + { + "name": "lpReturnValue", + "type": "LPVOID" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/virtdisk.json b/qiling/extensions/windows_sdk/virtdisk_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/virtdisk.json rename to qiling/extensions/windows_sdk/virtdisk_dll.json diff --git a/qiling/extensions/windows_sdk/wcmapi.json b/qiling/extensions/windows_sdk/wcmapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wcmapi.json rename to qiling/extensions/windows_sdk/wcmapi_dll.json diff --git a/qiling/extensions/windows_sdk/wdsbp.json b/qiling/extensions/windows_sdk/wdsbp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wdsbp.json rename to qiling/extensions/windows_sdk/wdsbp_dll.json diff --git a/qiling/extensions/windows_sdk/wdsclientapi.json b/qiling/extensions/windows_sdk/wdsclientapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wdsclientapi.json rename to qiling/extensions/windows_sdk/wdsclientapi_dll.json diff --git a/qiling/extensions/windows_sdk/Wdsmc.json b/qiling/extensions/windows_sdk/wdsmc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Wdsmc.json rename to qiling/extensions/windows_sdk/wdsmc_dll.json diff --git a/qiling/extensions/windows_sdk/wdspxe.json b/qiling/extensions/windows_sdk/wdspxe_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wdspxe.json rename to qiling/extensions/windows_sdk/wdspxe_dll.json diff --git a/qiling/extensions/windows_sdk/Wdstptc.json b/qiling/extensions/windows_sdk/wdstptc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Wdstptc.json rename to qiling/extensions/windows_sdk/wdstptc_dll.json diff --git a/qiling/extensions/windows_sdk/websocket.json b/qiling/extensions/windows_sdk/websocket_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/websocket.json rename to qiling/extensions/windows_sdk/websocket_dll.json diff --git a/qiling/extensions/windows_sdk/Wecapi.json b/qiling/extensions/windows_sdk/wecapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Wecapi.json rename to qiling/extensions/windows_sdk/wecapi_dll.json diff --git a/qiling/extensions/windows_sdk/Wer.json b/qiling/extensions/windows_sdk/wer_dll.json similarity index 62% rename from qiling/extensions/windows_sdk/Wer.json rename to qiling/extensions/windows_sdk/wer_dll.json index c60b76b05..62101ac70 100644 --- a/qiling/extensions/windows_sdk/Wer.json +++ b/qiling/extensions/windows_sdk/wer_dll.json @@ -121,106 +121,6 @@ "type": "HREPORT" } ], - "WerRegisterFile": [ - { - "name": "pwzFile", - "type": "PCWSTR" - }, - { - "name": "regFileType", - "type": "WER_REGISTER_FILE_TYPE" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "WerUnregisterFile": [ - { - "name": "pwzFilePath", - "type": "PCWSTR" - } - ], - "WerRegisterMemoryBlock": [ - { - "name": "pvAddress", - "type": "PVOID" - }, - { - "name": "dwSize", - "type": "DWORD" - } - ], - "WerUnregisterMemoryBlock": [ - { - "name": "pvAddress", - "type": "PVOID" - } - ], - "WerRegisterExcludedMemoryBlock": [ - { - "name": "address", - "type": "void" - }, - { - "name": "size", - "type": "DWORD" - } - ], - "WerUnregisterExcludedMemoryBlock": [ - { - "name": "address", - "type": "void" - } - ], - "WerRegisterCustomMetadata": [ - { - "name": "key", - "type": "PCWSTR" - }, - { - "name": "value", - "type": "PCWSTR" - } - ], - "WerRegisterAdditionalProcess": [ - { - "name": "processId", - "type": "DWORD" - }, - { - "name": "captureExtraInfoForThreadId", - "type": "DWORD" - } - ], - "WerUnregisterAdditionalProcess": [ - { - "name": "processId", - "type": "DWORD" - } - ], - "WerRegisterAppLocalDump": [ - { - "name": "localAppDataRelativePath", - "type": "PCWSTR" - } - ], - "WerSetFlags": [ - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "WerGetFlags": [ - { - "name": "hProcess", - "type": "HANDLE" - }, - { - "name": "pdwFlags", - "type": "PDWORD" - } - ], "WerAddExcludedApplication": [ { "name": "pwzExeName", @@ -241,26 +141,6 @@ "type": "BOOL" } ], - "WerRegisterRuntimeExceptionModule": [ - { - "name": "pwszOutOfProcessCallbackDll", - "type": "PCWSTR" - }, - { - "name": "pContext", - "type": "PVOID" - } - ], - "WerUnregisterRuntimeExceptionModule": [ - { - "name": "pwszOutOfProcessCallbackDll", - "type": "PCWSTR" - }, - { - "name": "pContext", - "type": "PVOID" - } - ], "WerStoreOpen": [ { "name": "repStoreType", diff --git a/qiling/extensions/windows_sdk/Wevtapi.json b/qiling/extensions/windows_sdk/wevtapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Wevtapi.json rename to qiling/extensions/windows_sdk/wevtapi_dll.json diff --git a/qiling/extensions/windows_sdk/winbio.json b/qiling/extensions/windows_sdk/winbio_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/winbio.json rename to qiling/extensions/windows_sdk/winbio_dll.json diff --git a/qiling/extensions/windows_sdk/windows_media_audio_dll.json b/qiling/extensions/windows_sdk/windows_media_audio_dll.json new file mode 100644 index 000000000..365a71e51 --- /dev/null +++ b/qiling/extensions/windows_sdk/windows_media_audio_dll.json @@ -0,0 +1,44 @@ +{ + "CreateFX": [ + { + "name": "clsid", + "type": "IID" + }, + { + "name": "pEffect", + "type": "IUnknown" + }, + { + "name": "pInitDat", + "type": "void" + }, + { + "name": "InitDataByteSize", + "type": "UINT32" + } + ], + "XAudio2Create": [ + { + "name": "ppXAudio2", + "type": "IXAudio2" + }, + { + "name": "Flags", + "type": "UINT32" + }, + { + "name": "XAudio2Processor", + "type": "XAUDIO2_PROCESSOR" + } + ], + "XAudio2CreateReverb": [ + { + "name": "ppApo", + "type": "IUnknown" + }, + { + "name": "Flags", + "type": "UINT32" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/windows_networking_dll.json b/qiling/extensions/windows_sdk/windows_networking_dll.json new file mode 100644 index 000000000..ff7c0827e --- /dev/null +++ b/qiling/extensions/windows_sdk/windows_networking_dll.json @@ -0,0 +1,8 @@ +{ + "SetSocketMediaStreamingMode": [ + { + "name": "value", + "type": "BOOL" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/windows.json b/qiling/extensions/windows_sdk/windows_ui_xaml_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/windows.json rename to qiling/extensions/windows_sdk/windows_ui_xaml_dll.json diff --git a/qiling/extensions/windows_sdk/winhttp.json b/qiling/extensions/windows_sdk/winhttp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/winhttp.json rename to qiling/extensions/windows_sdk/winhttp_dll.json diff --git a/qiling/extensions/windows_sdk/wininet.json b/qiling/extensions/windows_sdk/wininet.json deleted file mode 100644 index 4dfb75562..000000000 --- a/qiling/extensions/windows_sdk/wininet.json +++ /dev/null @@ -1,3146 +0,0 @@ -{ - "InternetTimeFromSystemTimeA": [ - { - "name": "pst", - "type": "SYSTEMTIME" - }, - { - "name": "dwRFC", - "type": "DWORD" - }, - { - "name": "lpszTime", - "type": "LPSTR" - }, - { - "name": "cbTime", - "type": "DWORD" - } - ], - "InternetTimeFromSystemTimeW": [ - { - "name": "pst", - "type": "SYSTEMTIME" - }, - { - "name": "dwRFC", - "type": "DWORD" - }, - { - "name": "lpszTime", - "type": "LPWSTR" - }, - { - "name": "cbTime", - "type": "DWORD" - } - ], - "InternetTimeFromSystemTime": [ - { - "name": "pst", - "type": "SYSTEMTIME" - }, - { - "name": "dwRFC", - "type": "DWORD" - }, - { - "name": "lpszTime", - "type": "LPSTR" - }, - { - "name": "cbTime", - "type": "DWORD" - } - ], - "InternetTimeToSystemTimeA": [ - { - "name": "lpszTime", - "type": "LPCSTR" - }, - { - "name": "pst", - "type": "SYSTEMTIME" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetTimeToSystemTimeW": [ - { - "name": "lpszTime", - "type": "LPCWSTR" - }, - { - "name": "pst", - "type": "SYSTEMTIME" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetTimeToSystemTime": [ - { - "name": "lpszTime", - "type": "LPCSTR" - }, - { - "name": "pst", - "type": "SYSTEMTIME" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetCrackUrlA": [ - { - "name": "lpszUrl", - "type": "LPCSTR" - }, - { - "name": "dwUrlLength", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpUrlComponents", - "type": "LPURL_COMPONENTSA" - } - ], - "InternetCrackUrlW": [ - { - "name": "lpszUrl", - "type": "LPCWSTR" - }, - { - "name": "dwUrlLength", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpUrlComponents", - "type": "LPURL_COMPONENTSW" - } - ], - "InternetCreateUrlA": [ - { - "name": "lpUrlComponents", - "type": "LPURL_COMPONENTSA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpszUrl", - "type": "LPSTR" - }, - { - "name": "lpdwUrlLength", - "type": "LPDWORD" - } - ], - "InternetCreateUrlW": [ - { - "name": "lpUrlComponents", - "type": "LPURL_COMPONENTSW" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpszUrl", - "type": "LPWSTR" - }, - { - "name": "lpdwUrlLength", - "type": "LPDWORD" - } - ], - "InternetCanonicalizeUrlA": [ - { - "name": "lpszUrl", - "type": "LPCSTR" - }, - { - "name": "lpszBuffer", - "type": "LPSTR" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "InternetCanonicalizeUrlW": [ - { - "name": "lpszUrl", - "type": "LPCWSTR" - }, - { - "name": "lpszBuffer", - "type": "LPWSTR" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "InternetCombineUrlA": [ - { - "name": "lpszBaseUrl", - "type": "LPCSTR" - }, - { - "name": "lpszRelativeUrl", - "type": "LPCSTR" - }, - { - "name": "lpszBuffer", - "type": "LPSTR" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "InternetCombineUrlW": [ - { - "name": "lpszBaseUrl", - "type": "LPCWSTR" - }, - { - "name": "lpszRelativeUrl", - "type": "LPCWSTR" - }, - { - "name": "lpszBuffer", - "type": "LPWSTR" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "InternetOpenA": [ - { - "name": "lpszAgent", - "type": "LPCSTR" - }, - { - "name": "dwAccessType", - "type": "DWORD" - }, - { - "name": "lpszProxy", - "type": "LPCSTR" - }, - { - "name": "lpszProxyBypass", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "InternetOpenW": [ - { - "name": "lpszAgent", - "type": "LPCWSTR" - }, - { - "name": "dwAccessType", - "type": "DWORD" - }, - { - "name": "lpszProxy", - "type": "LPCWSTR" - }, - { - "name": "lpszProxyBypass", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "InternetCloseHandle": [ - { - "name": "hInternet", - "type": "HINTERNET" - } - ], - "InternetConnectA": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "lpszServerName", - "type": "LPCSTR" - }, - { - "name": "nServerPort", - "type": "INTERNET_PORT" - }, - { - "name": "lpszUserName", - "type": "LPCSTR" - }, - { - "name": "lpszPassword", - "type": "LPCSTR" - }, - { - "name": "dwService", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "InternetConnectW": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "lpszServerName", - "type": "LPCWSTR" - }, - { - "name": "nServerPort", - "type": "INTERNET_PORT" - }, - { - "name": "lpszUserName", - "type": "LPCWSTR" - }, - { - "name": "lpszPassword", - "type": "LPCWSTR" - }, - { - "name": "dwService", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "InternetOpenUrlA": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "lpszUrl", - "type": "LPCSTR" - }, - { - "name": "lpszHeaders", - "type": "LPCSTR" - }, - { - "name": "dwHeadersLength", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "InternetOpenUrlW": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "lpszUrl", - "type": "LPCWSTR" - }, - { - "name": "lpszHeaders", - "type": "LPCWSTR" - }, - { - "name": "dwHeadersLength", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "InternetReadFile": [ - { - "name": "hFile", - "type": "HINTERNET" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "dwNumberOfBytesToRead", - "type": "DWORD" - }, - { - "name": "lpdwNumberOfBytesRead", - "type": "LPDWORD" - } - ], - "InternetReadFileExA": [ - { - "name": "hFile", - "type": "HINTERNET" - }, - { - "name": "lpBuffersOut", - "type": "LPINTERNET_BUFFERSA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "InternetReadFileExW": [ - { - "name": "hFile", - "type": "HINTERNET" - }, - { - "name": "lpBuffersOut", - "type": "LPINTERNET_BUFFERSW" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "InternetSetFilePointer": [ - { - "name": "hFile", - "type": "HINTERNET" - }, - { - "name": "lDistanceToMove", - "type": "LONG" - }, - { - "name": "lpDistanceToMoveHigh", - "type": "PLONG" - }, - { - "name": "dwMoveMethod", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "InternetWriteFile": [ - { - "name": "hFile", - "type": "HINTERNET" - }, - { - "name": "lpBuffer", - "type": "LPCVOID" - }, - { - "name": "dwNumberOfBytesToWrite", - "type": "DWORD" - }, - { - "name": "lpdwNumberOfBytesWritten", - "type": "LPDWORD" - } - ], - "InternetQueryDataAvailable": [ - { - "name": "hFile", - "type": "HINTERNET" - }, - { - "name": "lpdwNumberOfBytesAvailable", - "type": "LPDWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "InternetFindNextFileA": [ - { - "name": "hFind", - "type": "HINTERNET" - }, - { - "name": "lpvFindData", - "type": "LPVOID" - } - ], - "InternetFindNextFileW": [ - { - "name": "hFind", - "type": "HINTERNET" - }, - { - "name": "lpvFindData", - "type": "LPVOID" - } - ], - "InternetQueryOptionA": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "dwOption", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - } - ], - "InternetQueryOptionW": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "dwOption", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - } - ], - "InternetSetOptionA": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "dwOption", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "dwBufferLength", - "type": "DWORD" - } - ], - "InternetSetOptionW": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "dwOption", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "dwBufferLength", - "type": "DWORD" - } - ], - "InternetSetOptionExA": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "dwOption", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "dwBufferLength", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "InternetSetOptionExW": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "dwOption", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "dwBufferLength", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "InternetLockRequestFile": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "lphLockRequestInfo", - "type": "HANDLE" - } - ], - "InternetUnlockRequestFile": [ - { - "name": "hLockRequestInfo", - "type": "HANDLE" - } - ], - "InternetGetLastResponseInfoA": [ - { - "name": "lpdwError", - "type": "LPDWORD" - }, - { - "name": "lpszBuffer", - "type": "LPSTR" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - } - ], - "InternetGetLastResponseInfoW": [ - { - "name": "lpdwError", - "type": "LPDWORD" - }, - { - "name": "lpszBuffer", - "type": "LPWSTR" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - } - ], - "InternetSetStatusCallbackA": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "lpfnInternetCallback", - "type": "INTERNET_STATUS_CALLBACK" - } - ], - "InternetSetStatusCallbackW": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "lpfnInternetCallback", - "type": "INTERNET_STATUS_CALLBACK" - } - ], - "InternetSetStatusCallback": [ - { - "name": "hInternet", - "type": "HINTERNET" - }, - { - "name": "lpfnInternetCallback", - "type": "INTERNET_STATUS_CALLBACK" - } - ], - "FtpFindFirstFileA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszSearchFile", - "type": "LPCSTR" - }, - { - "name": "lpFindFileData", - "type": "LPWIN32_FIND_DATAA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "FtpFindFirstFileW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszSearchFile", - "type": "LPCWSTR" - }, - { - "name": "lpFindFileData", - "type": "LPWIN32_FIND_DATAW" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "FtpGetFileA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszRemoteFile", - "type": "LPCSTR" - }, - { - "name": "lpszNewFile", - "type": "LPCSTR" - }, - { - "name": "fFailIfExists", - "type": "BOOL" - }, - { - "name": "dwFlagsAndAttributes", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "FtpGetFileW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszRemoteFile", - "type": "LPCWSTR" - }, - { - "name": "lpszNewFile", - "type": "LPCWSTR" - }, - { - "name": "fFailIfExists", - "type": "BOOL" - }, - { - "name": "dwFlagsAndAttributes", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "FtpPutFileA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszLocalFile", - "type": "LPCSTR" - }, - { - "name": "lpszNewRemoteFile", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "FtpPutFileW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszLocalFile", - "type": "LPCWSTR" - }, - { - "name": "lpszNewRemoteFile", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "FtpDeleteFileA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszFileName", - "type": "LPCSTR" - } - ], - "FtpDeleteFileW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszFileName", - "type": "LPCWSTR" - } - ], - "FtpRenameFileA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszExisting", - "type": "LPCSTR" - }, - { - "name": "lpszNew", - "type": "LPCSTR" - } - ], - "FtpRenameFileW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszExisting", - "type": "LPCWSTR" - }, - { - "name": "lpszNew", - "type": "LPCWSTR" - } - ], - "FtpOpenFileA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszFileName", - "type": "LPCSTR" - }, - { - "name": "dwAccess", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "FtpOpenFileW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszFileName", - "type": "LPCWSTR" - }, - { - "name": "dwAccess", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "FtpCreateDirectoryA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszDirectory", - "type": "LPCSTR" - } - ], - "FtpCreateDirectoryW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszDirectory", - "type": "LPCWSTR" - } - ], - "FtpRemoveDirectoryA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszDirectory", - "type": "LPCSTR" - } - ], - "FtpRemoveDirectoryW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszDirectory", - "type": "LPCWSTR" - } - ], - "FtpSetCurrentDirectoryA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszDirectory", - "type": "LPCSTR" - } - ], - "FtpSetCurrentDirectoryW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszDirectory", - "type": "LPCWSTR" - } - ], - "FtpGetCurrentDirectoryA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszCurrentDirectory", - "type": "LPSTR" - }, - { - "name": "lpdwCurrentDirectory", - "type": "LPDWORD" - } - ], - "FtpGetCurrentDirectoryW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszCurrentDirectory", - "type": "LPWSTR" - }, - { - "name": "lpdwCurrentDirectory", - "type": "LPDWORD" - } - ], - "FtpCommandA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "fExpectResponse", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpszCommand", - "type": "LPCSTR" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - }, - { - "name": "phFtpCommand", - "type": "HINTERNET" - } - ], - "FtpCommandW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "fExpectResponse", - "type": "BOOL" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpszCommand", - "type": "LPCWSTR" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - }, - { - "name": "phFtpCommand", - "type": "HINTERNET" - } - ], - "FtpGetFileSize": [ - { - "name": "hFile", - "type": "HINTERNET" - }, - { - "name": "lpdwFileSizeHigh", - "type": "LPDWORD" - } - ], - "GopherCreateLocatorA": [ - { - "name": "lpszHost", - "type": "LPCSTR" - }, - { - "name": "nServerPort", - "type": "INTERNET_PORT" - }, - { - "name": "lpszDisplayString", - "type": "LPCSTR" - }, - { - "name": "lpszSelectorString", - "type": "LPCSTR" - }, - { - "name": "dwGopherType", - "type": "DWORD" - }, - { - "name": "lpszLocator", - "type": "LPSTR" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - } - ], - "GopherCreateLocatorW": [ - { - "name": "lpszHost", - "type": "LPCWSTR" - }, - { - "name": "nServerPort", - "type": "INTERNET_PORT" - }, - { - "name": "lpszDisplayString", - "type": "LPCWSTR" - }, - { - "name": "lpszSelectorString", - "type": "LPCWSTR" - }, - { - "name": "dwGopherType", - "type": "DWORD" - }, - { - "name": "lpszLocator", - "type": "LPWSTR" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - } - ], - "GopherGetLocatorTypeA": [ - { - "name": "lpszLocator", - "type": "LPCSTR" - }, - { - "name": "lpdwGopherType", - "type": "LPDWORD" - } - ], - "GopherGetLocatorTypeW": [ - { - "name": "lpszLocator", - "type": "LPCWSTR" - }, - { - "name": "lpdwGopherType", - "type": "LPDWORD" - } - ], - "GopherFindFirstFileA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszLocator", - "type": "LPCSTR" - }, - { - "name": "lpszSearchString", - "type": "LPCSTR" - }, - { - "name": "lpFindData", - "type": "LPGOPHER_FIND_DATAA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "GopherFindFirstFileW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszLocator", - "type": "LPCWSTR" - }, - { - "name": "lpszSearchString", - "type": "LPCWSTR" - }, - { - "name": "lpFindData", - "type": "LPGOPHER_FIND_DATAW" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "GopherOpenFileA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszLocator", - "type": "LPCSTR" - }, - { - "name": "lpszView", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "GopherOpenFileW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszLocator", - "type": "LPCWSTR" - }, - { - "name": "lpszView", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "GopherGetAttributeA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszLocator", - "type": "LPCSTR" - }, - { - "name": "lpszAttributeName", - "type": "LPCSTR" - }, - { - "name": "lpBuffer", - "type": "LPBYTE" - }, - { - "name": "dwBufferLength", - "type": "DWORD" - }, - { - "name": "lpdwCharactersReturned", - "type": "LPDWORD" - }, - { - "name": "lpfnEnumerator", - "type": "GOPHER_ATTRIBUTE_ENUMERATOR" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "GopherGetAttributeW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszLocator", - "type": "LPCWSTR" - }, - { - "name": "lpszAttributeName", - "type": "LPCWSTR" - }, - { - "name": "lpBuffer", - "type": "LPBYTE" - }, - { - "name": "dwBufferLength", - "type": "DWORD" - }, - { - "name": "lpdwCharactersReturned", - "type": "LPDWORD" - }, - { - "name": "lpfnEnumerator", - "type": "GOPHER_ATTRIBUTE_ENUMERATOR" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "HttpOpenRequestA": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszVerb", - "type": "LPCSTR" - }, - { - "name": "lpszObjectName", - "type": "LPCSTR" - }, - { - "name": "lpszVersion", - "type": "LPCSTR" - }, - { - "name": "lpszReferrer", - "type": "LPCSTR" - }, - { - "name": "lplpszAcceptTypes", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "HttpOpenRequestW": [ - { - "name": "hConnect", - "type": "HINTERNET" - }, - { - "name": "lpszVerb", - "type": "LPCWSTR" - }, - { - "name": "lpszObjectName", - "type": "LPCWSTR" - }, - { - "name": "lpszVersion", - "type": "LPCWSTR" - }, - { - "name": "lpszReferrer", - "type": "LPCWSTR" - }, - { - "name": "lplpszAcceptTypes", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "HttpAddRequestHeadersA": [ - { - "name": "hRequest", - "type": "HINTERNET" - }, - { - "name": "lpszHeaders", - "type": "LPCSTR" - }, - { - "name": "dwHeadersLength", - "type": "DWORD" - }, - { - "name": "dwModifiers", - "type": "DWORD" - } - ], - "HttpAddRequestHeadersW": [ - { - "name": "hRequest", - "type": "HINTERNET" - }, - { - "name": "lpszHeaders", - "type": "LPCWSTR" - }, - { - "name": "dwHeadersLength", - "type": "DWORD" - }, - { - "name": "dwModifiers", - "type": "DWORD" - } - ], - "HttpSendRequestA": [ - { - "name": "hRequest", - "type": "HINTERNET" - }, - { - "name": "lpszHeaders", - "type": "LPCSTR" - }, - { - "name": "dwHeadersLength", - "type": "DWORD" - }, - { - "name": "lpOptional", - "type": "LPVOID" - }, - { - "name": "dwOptionalLength", - "type": "DWORD" - } - ], - "HttpSendRequestW": [ - { - "name": "hRequest", - "type": "HINTERNET" - }, - { - "name": "lpszHeaders", - "type": "LPCWSTR" - }, - { - "name": "dwHeadersLength", - "type": "DWORD" - }, - { - "name": "lpOptional", - "type": "LPVOID" - }, - { - "name": "dwOptionalLength", - "type": "DWORD" - } - ], - "HttpSendRequestExA": [ - { - "name": "hRequest", - "type": "HINTERNET" - }, - { - "name": "lpBuffersIn", - "type": "LPINTERNET_BUFFERSA" - }, - { - "name": "lpBuffersOut", - "type": "LPINTERNET_BUFFERSA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "HttpSendRequestExW": [ - { - "name": "hRequest", - "type": "HINTERNET" - }, - { - "name": "lpBuffersIn", - "type": "LPINTERNET_BUFFERSW" - }, - { - "name": "lpBuffersOut", - "type": "LPINTERNET_BUFFERSW" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "HttpEndRequestA": [ - { - "name": "hRequest", - "type": "HINTERNET" - }, - { - "name": "lpBuffersOut", - "type": "LPINTERNET_BUFFERSA" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "HttpEndRequestW": [ - { - "name": "hRequest", - "type": "HINTERNET" - }, - { - "name": "lpBuffersOut", - "type": "LPINTERNET_BUFFERSW" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwContext", - "type": "DWORD_PTR" - } - ], - "HttpQueryInfoA": [ - { - "name": "hRequest", - "type": "HINTERNET" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - }, - { - "name": "lpdwIndex", - "type": "LPDWORD" - } - ], - "HttpQueryInfoW": [ - { - "name": "hRequest", - "type": "HINTERNET" - }, - { - "name": "dwInfoLevel", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpdwBufferLength", - "type": "LPDWORD" - }, - { - "name": "lpdwIndex", - "type": "LPDWORD" - } - ], - "InternetSetCookieA": [ - { - "name": "lpszUrl", - "type": "LPCSTR" - }, - { - "name": "lpszCookieName", - "type": "LPCSTR" - }, - { - "name": "lpszCookieData", - "type": "LPCSTR" - } - ], - "InternetSetCookieW": [ - { - "name": "lpszUrl", - "type": "LPCWSTR" - }, - { - "name": "lpszCookieName", - "type": "LPCWSTR" - }, - { - "name": "lpszCookieData", - "type": "LPCWSTR" - } - ], - "InternetGetCookieA": [ - { - "name": "lpszUrl", - "type": "LPCSTR" - }, - { - "name": "lpszCookieName", - "type": "LPCSTR" - }, - { - "name": "lpszCookieData", - "type": "LPSTR" - }, - { - "name": "lpdwSize", - "type": "LPDWORD" - } - ], - "InternetGetCookieW": [ - { - "name": "lpszUrl", - "type": "LPCWSTR" - }, - { - "name": "lpszCookieName", - "type": "LPCWSTR" - }, - { - "name": "lpszCookieData", - "type": "LPWSTR" - }, - { - "name": "lpdwSize", - "type": "LPDWORD" - } - ], - "InternetSetCookieExA": [ - { - "name": "lpszUrl", - "type": "LPCSTR" - }, - { - "name": "lpszCookieName", - "type": "LPCSTR" - }, - { - "name": "lpszCookieData", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD_PTR" - } - ], - "InternetSetCookieExW": [ - { - "name": "lpszUrl", - "type": "LPCWSTR" - }, - { - "name": "lpszCookieName", - "type": "LPCWSTR" - }, - { - "name": "lpszCookieData", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD_PTR" - } - ], - "InternetGetCookieExA": [ - { - "name": "lpszUrl", - "type": "LPCSTR" - }, - { - "name": "lpszCookieName", - "type": "LPCSTR" - }, - { - "name": "lpszCookieData", - "type": "LPSTR" - }, - { - "name": "lpdwSize", - "type": "LPDWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "InternetGetCookieExW": [ - { - "name": "lpszUrl", - "type": "LPCWSTR" - }, - { - "name": "lpszCookieName", - "type": "LPCWSTR" - }, - { - "name": "lpszCookieData", - "type": "LPWSTR" - }, - { - "name": "lpdwSize", - "type": "LPDWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "InternetAttemptConnect": [ - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetCheckConnectionA": [ - { - "name": "lpszUrl", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetCheckConnectionW": [ - { - "name": "lpszUrl", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "ResumeSuspendedDownload": [ - { - "name": "hRequest", - "type": "HINTERNET" - }, - { - "name": "dwResultCode", - "type": "DWORD" - } - ], - "InternetErrorDlg": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "hRequest", - "type": "HINTERNET" - }, - { - "name": "dwError", - "type": "DWORD" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lppvData", - "type": "LPVOID" - } - ], - "InternetConfirmZoneCrossingA": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "szUrlPrev", - "type": "LPSTR" - }, - { - "name": "szUrlNew", - "type": "LPSTR" - }, - { - "name": "bPost", - "type": "BOOL" - } - ], - "InternetConfirmZoneCrossingW": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "szUrlPrev", - "type": "LPWSTR" - }, - { - "name": "szUrlNew", - "type": "LPWSTR" - }, - { - "name": "bPost", - "type": "BOOL" - } - ], - "InternetConfirmZoneCrossing": [ - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "szUrlPrev", - "type": "LPSTR" - }, - { - "name": "szUrlNew", - "type": "LPSTR" - }, - { - "name": "bPost", - "type": "BOOL" - } - ], - "CreateUrlCacheEntryA": [ - { - "name": "lpszUrlName", - "type": "LPCSTR" - }, - { - "name": "dwExpectedFileSize", - "type": "DWORD" - }, - { - "name": "lpszFileExtension", - "type": "LPCSTR" - }, - { - "name": "lpszFileName", - "type": "LPSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "CreateUrlCacheEntryW": [ - { - "name": "lpszUrlName", - "type": "LPCWSTR" - }, - { - "name": "dwExpectedFileSize", - "type": "DWORD" - }, - { - "name": "lpszFileExtension", - "type": "LPCWSTR" - }, - { - "name": "lpszFileName", - "type": "LPWSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "CommitUrlCacheEntryA": [ - { - "name": "lpszUrlName", - "type": "LPCSTR" - }, - { - "name": "lpszLocalFileName", - "type": "LPCSTR" - }, - { - "name": "ExpireTime", - "type": "FILETIME" - }, - { - "name": "LastModifiedTime", - "type": "FILETIME" - }, - { - "name": "CacheEntryType", - "type": "DWORD" - }, - { - "name": "lpHeaderInfo", - "type": "LPBYTE" - }, - { - "name": "cchHeaderInfo", - "type": "DWORD" - }, - { - "name": "lpszFileExtension", - "type": "LPCSTR" - }, - { - "name": "lpszOriginalUrl", - "type": "LPCSTR" - } - ], - "CommitUrlCacheEntryW": [ - { - "name": "lpszUrlName", - "type": "LPCWSTR" - }, - { - "name": "lpszLocalFileName", - "type": "LPCWSTR" - }, - { - "name": "ExpireTime", - "type": "FILETIME" - }, - { - "name": "LastModifiedTime", - "type": "FILETIME" - }, - { - "name": "CacheEntryType", - "type": "DWORD" - }, - { - "name": "lpszHeaderInfo", - "type": "LPWSTR" - }, - { - "name": "cchHeaderInfo", - "type": "DWORD" - }, - { - "name": "lpszFileExtension", - "type": "LPCWSTR" - }, - { - "name": "lpszOriginalUrl", - "type": "LPCWSTR" - } - ], - "RetrieveUrlCacheEntryFileA": [ - { - "name": "lpszUrlName", - "type": "LPCSTR" - }, - { - "name": "lpCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOA" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "RetrieveUrlCacheEntryFileW": [ - { - "name": "lpszUrlName", - "type": "LPCWSTR" - }, - { - "name": "lpCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOW" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "UnlockUrlCacheEntryFileA": [ - { - "name": "lpszUrlName", - "type": "LPCSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "UnlockUrlCacheEntryFileW": [ - { - "name": "lpszUrlName", - "type": "LPCWSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "UnlockUrlCacheEntryFile": [ - { - "name": "lpszUrlName", - "type": "LPCSTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "RetrieveUrlCacheEntryStreamA": [ - { - "name": "lpszUrlName", - "type": "LPCSTR" - }, - { - "name": "lpCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOA" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - }, - { - "name": "fRandomRead", - "type": "BOOL" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "RetrieveUrlCacheEntryStreamW": [ - { - "name": "lpszUrlName", - "type": "LPCWSTR" - }, - { - "name": "lpCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOW" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - }, - { - "name": "fRandomRead", - "type": "BOOL" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "ReadUrlCacheEntryStream": [ - { - "name": "hUrlCacheStream", - "type": "HANDLE" - }, - { - "name": "dwLocation", - "type": "DWORD" - }, - { - "name": "lpBuffer", - "type": "LPVOID" - }, - { - "name": "lpdwLen", - "type": "LPDWORD" - }, - { - "name": "Reserved", - "type": "DWORD" - } - ], - "UnlockUrlCacheEntryStream": [ - { - "name": "hUrlCacheStream", - "type": "HANDLE" - }, - { - "name": "Reserved", - "type": "DWORD" - } - ], - "GetUrlCacheEntryInfoA": [ - { - "name": "lpszUrlName", - "type": "LPCSTR" - }, - { - "name": "lpCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOA" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - } - ], - "GetUrlCacheEntryInfoW": [ - { - "name": "lpszUrlName", - "type": "LPCWSTR" - }, - { - "name": "lpCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOW" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - } - ], - "FindFirstUrlCacheGroup": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwFilter", - "type": "DWORD" - }, - { - "name": "lpSearchCondition", - "type": "LPVOID" - }, - { - "name": "dwSearchCondition", - "type": "DWORD" - }, - { - "name": "lpGroupId", - "type": "GROUPID" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "FindNextUrlCacheGroup": [ - { - "name": "hFind", - "type": "HANDLE" - }, - { - "name": "lpGroupId", - "type": "GROUPID" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "GetUrlCacheGroupAttributeA": [ - { - "name": "gid", - "type": "GROUPID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwAttributes", - "type": "DWORD" - }, - { - "name": "lpGroupInfo", - "type": "LPINTERNET_CACHE_GROUP_INFOA" - }, - { - "name": "lpcbGroupInfo", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "GetUrlCacheGroupAttributeW": [ - { - "name": "gid", - "type": "GROUPID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwAttributes", - "type": "DWORD" - }, - { - "name": "lpGroupInfo", - "type": "LPINTERNET_CACHE_GROUP_INFOW" - }, - { - "name": "lpcbGroupInfo", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "SetUrlCacheGroupAttributeA": [ - { - "name": "gid", - "type": "GROUPID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwAttributes", - "type": "DWORD" - }, - { - "name": "lpGroupInfo", - "type": "LPINTERNET_CACHE_GROUP_INFOA" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "SetUrlCacheGroupAttributeW": [ - { - "name": "gid", - "type": "GROUPID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwAttributes", - "type": "DWORD" - }, - { - "name": "lpGroupInfo", - "type": "LPINTERNET_CACHE_GROUP_INFOW" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "GetUrlCacheEntryInfoExA": [ - { - "name": "lpszUrl", - "type": "LPCSTR" - }, - { - "name": "lpCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOA" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - }, - { - "name": "lpszRedirectUrl", - "type": "LPSTR" - }, - { - "name": "lpcbRedirectUrl", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "GetUrlCacheEntryInfoExW": [ - { - "name": "lpszUrl", - "type": "LPCWSTR" - }, - { - "name": "lpCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOW" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - }, - { - "name": "lpszRedirectUrl", - "type": "LPWSTR" - }, - { - "name": "lpcbRedirectUrl", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "SetUrlCacheEntryInfoA": [ - { - "name": "lpszUrlName", - "type": "LPCSTR" - }, - { - "name": "lpCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOA" - }, - { - "name": "dwFieldControl", - "type": "DWORD" - } - ], - "SetUrlCacheEntryInfoW": [ - { - "name": "lpszUrlName", - "type": "LPCWSTR" - }, - { - "name": "lpCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOW" - }, - { - "name": "dwFieldControl", - "type": "DWORD" - } - ], - "CreateUrlCacheGroup": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "DeleteUrlCacheGroup": [ - { - "name": "GroupId", - "type": "GROUPID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "SetUrlCacheEntryGroupA": [ - { - "name": "lpszUrlName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "GroupId", - "type": "GROUPID" - }, - { - "name": "pbGroupAttributes", - "type": "LPBYTE" - }, - { - "name": "cbGroupAttributes", - "type": "DWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "SetUrlCacheEntryGroupW": [ - { - "name": "lpszUrlName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "GroupId", - "type": "GROUPID" - }, - { - "name": "pbGroupAttributes", - "type": "LPBYTE" - }, - { - "name": "cbGroupAttributes", - "type": "DWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "SetUrlCacheEntryGroup": [ - { - "name": "lpszUrlName", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "GroupId", - "type": "GROUPID" - }, - { - "name": "pbGroupAttributes", - "type": "LPBYTE" - }, - { - "name": "cbGroupAttributes", - "type": "DWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "FindFirstUrlCacheEntryExA": [ - { - "name": "lpszUrlSearchPattern", - "type": "LPCSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwFilter", - "type": "DWORD" - }, - { - "name": "GroupId", - "type": "GROUPID" - }, - { - "name": "lpFirstCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOA" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - }, - { - "name": "lpGroupAttributes", - "type": "LPVOID" - }, - { - "name": "lpcbGroupAttributes", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "FindFirstUrlCacheEntryExW": [ - { - "name": "lpszUrlSearchPattern", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwFilter", - "type": "DWORD" - }, - { - "name": "GroupId", - "type": "GROUPID" - }, - { - "name": "lpFirstCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOW" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - }, - { - "name": "lpGroupAttributes", - "type": "LPVOID" - }, - { - "name": "lpcbGroupAttributes", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "FindNextUrlCacheEntryExA": [ - { - "name": "hEnumHandle", - "type": "HANDLE" - }, - { - "name": "lpNextCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOA" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - }, - { - "name": "lpGroupAttributes", - "type": "LPVOID" - }, - { - "name": "lpcbGroupAttributes", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "FindNextUrlCacheEntryExW": [ - { - "name": "hEnumHandle", - "type": "HANDLE" - }, - { - "name": "lpNextCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOW" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - }, - { - "name": "lpGroupAttributes", - "type": "LPVOID" - }, - { - "name": "lpcbGroupAttributes", - "type": "LPDWORD" - }, - { - "name": "lpReserved", - "type": "LPVOID" - } - ], - "FindFirstUrlCacheEntryA": [ - { - "name": "lpszUrlSearchPattern", - "type": "LPCSTR" - }, - { - "name": "lpFirstCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOA" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - } - ], - "FindFirstUrlCacheEntryW": [ - { - "name": "lpszUrlSearchPattern", - "type": "LPCWSTR" - }, - { - "name": "lpFirstCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOW" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - } - ], - "FindNextUrlCacheEntryA": [ - { - "name": "hEnumHandle", - "type": "HANDLE" - }, - { - "name": "lpNextCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOA" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - } - ], - "FindNextUrlCacheEntryW": [ - { - "name": "hEnumHandle", - "type": "HANDLE" - }, - { - "name": "lpNextCacheEntryInfo", - "type": "LPINTERNET_CACHE_ENTRY_INFOW" - }, - { - "name": "lpcbCacheEntryInfo", - "type": "LPDWORD" - } - ], - "FindCloseUrlCache": [ - { - "name": "hEnumHandle", - "type": "HANDLE" - } - ], - "DeleteUrlCacheEntryA": [ - { - "name": "lpszUrlName", - "type": "LPCSTR" - } - ], - "DeleteUrlCacheEntryW": [ - { - "name": "lpszUrlName", - "type": "LPCWSTR" - } - ], - "DeleteUrlCacheEntry": [ - { - "name": "lpszUrlName", - "type": "LPCSTR" - } - ], - "InternetDialA": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "lpszConnectoid", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpdwConnection", - "type": "DWORD_PTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetDialW": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "lpszConnectoid", - "type": "LPWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpdwConnection", - "type": "DWORD_PTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetDial": [ - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "lpszConnectoid", - "type": "LPSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "lpdwConnection", - "type": "LPDWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetHangUp": [ - { - "name": "dwConnection", - "type": "DWORD_PTR" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetGoOnlineA": [ - { - "name": "lpszURL", - "type": "LPCSTR" - }, - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "InternetGoOnlineW": [ - { - "name": "lpszURL", - "type": "LPCWSTR" - }, - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "InternetGoOnline": [ - { - "name": "lpszURL", - "type": "LPSTR" - }, - { - "name": "hwndParent", - "type": "HWND" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "InternetAutodial": [ - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hwndParent", - "type": "HWND" - } - ], - "InternetAutodialHangup": [ - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetGetConnectedState": [ - { - "name": "lpdwFlags", - "type": "LPDWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetGetConnectedStateExA": [ - { - "name": "lpdwFlags", - "type": "LPDWORD" - }, - { - "name": "lpszConnectionName", - "type": "LPSTR" - }, - { - "name": "cchNameLen", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetGetConnectedStateExW": [ - { - "name": "lpdwFlags", - "type": "LPDWORD" - }, - { - "name": "lpszConnectionName", - "type": "LPWSTR" - }, - { - "name": "cchNameLen", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetInitializeAutoProxyDll": [ - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "DetectAutoProxyUrl": [ - { - "name": "pszAutoProxyUrl", - "type": "PSTR" - }, - { - "name": "cchAutoProxyUrl", - "type": "DWORD" - }, - { - "name": "dwDetectFlags", - "type": "DWORD" - } - ], - "CreateMD5SSOHash": [ - { - "name": "pszChallengeInfo", - "type": "PWSTR" - }, - { - "name": "pwszRealm", - "type": "PWSTR" - }, - { - "name": "pwszTarget", - "type": "PWSTR" - }, - { - "name": "pbHexHash", - "type": "PBYTE" - } - ], - "InternetGetConnectedStateEx": [ - { - "name": "lpdwFlags", - "type": "LPDWORD" - }, - { - "name": "lpszConnectionName", - "type": "LPSTR" - }, - { - "name": "dwNameLen", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetSetDialStateA": [ - { - "name": "lpszConnectoid", - "type": "LPCSTR" - }, - { - "name": "dwState", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetSetDialStateW": [ - { - "name": "lpszConnectoid", - "type": "LPCWSTR" - }, - { - "name": "dwState", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetSetDialState": [ - { - "name": "lpszConnectoid", - "type": "LPCSTR" - }, - { - "name": "dwState", - "type": "DWORD" - }, - { - "name": "dwReserved", - "type": "DWORD" - } - ], - "InternetSetPerSiteCookieDecisionA": [ - { - "name": "pchHostName", - "type": "LPCSTR" - }, - { - "name": "dwDecision", - "type": "DWORD" - } - ], - "InternetSetPerSiteCookieDecisionW": [ - { - "name": "pchHostName", - "type": "LPCWSTR" - }, - { - "name": "dwDecision", - "type": "DWORD" - } - ], - "InternetGetPerSiteCookieDecisionA": [ - { - "name": "pchHostName", - "type": "LPCSTR" - }, - { - "name": "pResult", - "type": "unsigned long" - } - ], - "InternetGetPerSiteCookieDecisionW": [ - { - "name": "pchHostName", - "type": "LPCWSTR" - }, - { - "name": "pResult", - "type": "unsigned long" - } - ], - "InternetEnumPerSiteCookieDecisionA": [ - { - "name": "pszSiteName", - "type": "LPSTR" - }, - { - "name": "pcSiteNameSize", - "type": "unsigned long" - }, - { - "name": "pdwDecision", - "type": "unsigned long" - }, - { - "name": "dwIndex", - "type": "unsigned long" - } - ], - "InternetEnumPerSiteCookieDecisionW": [ - { - "name": "pszSiteName", - "type": "LPWSTR" - }, - { - "name": "pcSiteNameSize", - "type": "unsigned long" - }, - { - "name": "pdwDecision", - "type": "unsigned long" - }, - { - "name": "dwIndex", - "type": "unsigned long" - } - ], - "PrivacySetZonePreferenceW": [ - { - "name": "dwZone", - "type": "DWORD" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "dwTemplate", - "type": "DWORD" - }, - { - "name": "pszPreference", - "type": "LPCWSTR" - } - ], - "PrivacyGetZonePreferenceW": [ - { - "name": "dwZone", - "type": "DWORD" - }, - { - "name": "dwType", - "type": "DWORD" - }, - { - "name": "pdwTemplate", - "type": "LPDWORD" - }, - { - "name": "pszBuffer", - "type": "LPWSTR" - }, - { - "name": "pdwBufferLength", - "type": "LPDWORD" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/JSProxy.json b/qiling/extensions/windows_sdk/wininet_dll.json similarity index 99% rename from qiling/extensions/windows_sdk/JSProxy.json rename to qiling/extensions/windows_sdk/wininet_dll.json index 4dfb75562..65d3b834f 100644 --- a/qiling/extensions/windows_sdk/JSProxy.json +++ b/qiling/extensions/windows_sdk/wininet_dll.json @@ -2929,12 +2929,6 @@ "type": "DWORD" } ], - "InternetInitializeAutoProxyDll": [ - { - "name": "dwReserved", - "type": "DWORD" - } - ], "DetectAutoProxyUrl": [ { "name": "pszAutoProxyUrl", diff --git a/qiling/extensions/windows_sdk/winmm_dll.json b/qiling/extensions/windows_sdk/winmm_dll.json new file mode 100644 index 000000000..c0ef196f3 --- /dev/null +++ b/qiling/extensions/windows_sdk/winmm_dll.json @@ -0,0 +1,1710 @@ +{ + "joyGetPosEx": [ + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "pji", + "type": "LPJOYINFOEX" + } + ], + "joyGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "joyGetDevCapsW": [ + { + "name": "uJoyID", + "type": "UINT_PTR" + }, + { + "name": "pjc", + "type": "LPJOYCAPSW" + }, + { + "name": "cbjc", + "type": "UINT" + } + ], + "joyGetPos": [ + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "pji", + "type": "LPJOYINFO" + } + ], + "joyGetThreshold": [ + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "puThreshold", + "type": "LPUINT" + } + ], + "joyReleaseCapture": [ + { + "name": "uJoyID", + "type": "UINT" + } + ], + "joySetCapture": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "uPeriod", + "type": "UINT" + }, + { + "name": "fChanged", + "type": "BOOL" + } + ], + "joySetThreshold": [ + { + "name": "uJoyID", + "type": "UINT" + }, + { + "name": "uThreshold", + "type": "UINT" + } + ], + "joyConfigChanged": [ + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "mmTaskCreate": [ + { + "name": "lpfn", + "type": "LPTASKCALLBACK" + }, + { + "name": "lph", + "type": "HANDLE" + }, + { + "name": "dwInst", + "type": "DWORD_PTR" + } + ], + "mmTaskBlock": [ + { + "name": "h", + "type": "DWORD" + } + ], + "mmTaskYield": [ + { + "name": "VOID", + "type": "void" + } + ], + "mmGetCurrentTask": [ + { + "name": "VOID", + "type": "void" + } + ], + "waveOutGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "waveOutGetVolume": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pdwVolume", + "type": "LPDWORD" + } + ], + "waveOutSetVolume": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "dwVolume", + "type": "DWORD" + } + ], + "waveOutOpen": [ + { + "name": "phwo", + "type": "LPHWAVEOUT" + }, + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "pwfx", + "type": "LPCWAVEFORMATEX" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "waveOutClose": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutPrepareHeader": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveOutUnprepareHeader": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveOutWrite": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveOutPause": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutRestart": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutReset": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutBreakLoop": [ + { + "name": "hwo", + "type": "HWAVEOUT" + } + ], + "waveOutGetPosition": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pmmt", + "type": "LPMMTIME" + }, + { + "name": "cbmmt", + "type": "UINT" + } + ], + "waveOutGetPitch": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pdwPitch", + "type": "LPDWORD" + } + ], + "waveOutSetPitch": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "dwPitch", + "type": "DWORD" + } + ], + "waveOutGetPlaybackRate": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "pdwRate", + "type": "LPDWORD" + } + ], + "waveOutSetPlaybackRate": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "dwRate", + "type": "DWORD" + } + ], + "waveOutGetID": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + } + ], + "waveOutMessage": [ + { + "name": "hwo", + "type": "HWAVEOUT" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "waveInGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "waveInOpen": [ + { + "name": "phwi", + "type": "LPHWAVEIN" + }, + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "pwfx", + "type": "LPCWAVEFORMATEX" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "waveInClose": [ + { + "name": "hwi", + "type": "HWAVEIN" + } + ], + "waveInPrepareHeader": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveInUnprepareHeader": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveInAddBuffer": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "pwh", + "type": "LPWAVEHDR" + }, + { + "name": "cbwh", + "type": "UINT" + } + ], + "waveInStart": [ + { + "name": "hwi", + "type": "HWAVEIN" + } + ], + "waveInStop": [ + { + "name": "hwi", + "type": "HWAVEIN" + } + ], + "waveInReset": [ + { + "name": "hwi", + "type": "HWAVEIN" + } + ], + "waveInGetPosition": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "pmmt", + "type": "LPMMTIME" + }, + { + "name": "cbmmt", + "type": "UINT" + } + ], + "waveInGetID": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + } + ], + "waveInMessage": [ + { + "name": "hwi", + "type": "HWAVEIN" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "midiOutGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "midiStreamOpen": [ + { + "name": "phms", + "type": "LPHMIDISTRM" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + }, + { + "name": "cMidi", + "type": "DWORD" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "midiStreamClose": [ + { + "name": "hms", + "type": "HMIDISTRM" + } + ], + "midiStreamProperty": [ + { + "name": "hms", + "type": "HMIDISTRM" + }, + { + "name": "lppropdata", + "type": "LPBYTE" + }, + { + "name": "dwProperty", + "type": "DWORD" + } + ], + "midiStreamPosition": [ + { + "name": "hms", + "type": "HMIDISTRM" + }, + { + "name": "lpmmt", + "type": "LPMMTIME" + }, + { + "name": "cbmmt", + "type": "UINT" + } + ], + "midiStreamOut": [ + { + "name": "hms", + "type": "HMIDISTRM" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiStreamPause": [ + { + "name": "hms", + "type": "HMIDISTRM" + } + ], + "midiStreamRestart": [ + { + "name": "hms", + "type": "HMIDISTRM" + } + ], + "midiStreamStop": [ + { + "name": "hms", + "type": "HMIDISTRM" + } + ], + "midiConnect": [ + { + "name": "hmi", + "type": "HMIDI" + }, + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "midiDisconnect": [ + { + "name": "hmi", + "type": "HMIDI" + }, + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pReserved", + "type": "LPVOID" + } + ], + "midiOutGetDevCapsA": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pmoc", + "type": "LPMIDIOUTCAPSA" + }, + { + "name": "cbmoc", + "type": "UINT" + } + ], + "midiOutGetDevCapsW": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pmoc", + "type": "LPMIDIOUTCAPSW" + }, + { + "name": "cbmoc", + "type": "UINT" + } + ], + "midiOutGetVolume": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pdwVolume", + "type": "LPDWORD" + } + ], + "midiOutSetVolume": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "dwVolume", + "type": "DWORD" + } + ], + "midiOutGetErrorTextA": [ + { + "name": "mmrError", + "type": "MMRESULT" + }, + { + "name": "pszText", + "type": "LPSTR" + }, + { + "name": "cchText", + "type": "UINT" + } + ], + "midiOutGetErrorTextW": [ + { + "name": "mmrError", + "type": "MMRESULT" + }, + { + "name": "pszText", + "type": "LPWSTR" + }, + { + "name": "cchText", + "type": "UINT" + } + ], + "midiOutOpen": [ + { + "name": "phmo", + "type": "LPHMIDIOUT" + }, + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "midiOutClose": [ + { + "name": "hmo", + "type": "HMIDIOUT" + } + ], + "midiOutPrepareHeader": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiOutUnprepareHeader": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiOutShortMsg": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "dwMsg", + "type": "DWORD" + } + ], + "midiOutLongMsg": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiOutReset": [ + { + "name": "hmo", + "type": "HMIDIOUT" + } + ], + "midiOutCachePatches": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "uBank", + "type": "UINT" + }, + { + "name": "pwpa", + "type": "LPWORD" + }, + { + "name": "fuCache", + "type": "UINT" + } + ], + "midiOutCacheDrumPatches": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "uPatch", + "type": "UINT" + }, + { + "name": "pwkya", + "type": "LPWORD" + }, + { + "name": "fuCache", + "type": "UINT" + } + ], + "midiOutGetID": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + } + ], + "midiOutMessage": [ + { + "name": "hmo", + "type": "HMIDIOUT" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "midiInGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "midiInGetDevCapsA": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pmic", + "type": "LPMIDIINCAPSA" + }, + { + "name": "cbmic", + "type": "UINT" + } + ], + "midiInGetDevCapsW": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pmic", + "type": "LPMIDIINCAPSW" + }, + { + "name": "cbmic", + "type": "UINT" + } + ], + "midiInGetErrorTextA": [ + { + "name": "mmrError", + "type": "MMRESULT" + }, + { + "name": "pszText", + "type": "LPSTR" + }, + { + "name": "cchText", + "type": "UINT" + } + ], + "midiInGetErrorTextW": [ + { + "name": "mmrError", + "type": "MMRESULT" + }, + { + "name": "pszText", + "type": "LPWSTR" + }, + { + "name": "cchText", + "type": "UINT" + } + ], + "midiInOpen": [ + { + "name": "phmi", + "type": "LPHMIDIIN" + }, + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "midiInClose": [ + { + "name": "hmi", + "type": "HMIDIIN" + } + ], + "midiInPrepareHeader": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiInUnprepareHeader": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiInAddBuffer": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "pmh", + "type": "LPMIDIHDR" + }, + { + "name": "cbmh", + "type": "UINT" + } + ], + "midiInStart": [ + { + "name": "hmi", + "type": "HMIDIIN" + } + ], + "midiInStop": [ + { + "name": "hmi", + "type": "HMIDIIN" + } + ], + "midiInReset": [ + { + "name": "hmi", + "type": "HMIDIIN" + } + ], + "midiInGetID": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "puDeviceID", + "type": "LPUINT" + } + ], + "midiInMessage": [ + { + "name": "hmi", + "type": "HMIDIIN" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "auxGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "auxGetDevCapsA": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pac", + "type": "LPAUXCAPSA" + }, + { + "name": "cbac", + "type": "UINT" + } + ], + "auxGetDevCapsW": [ + { + "name": "uDeviceID", + "type": "UINT_PTR" + }, + { + "name": "pac", + "type": "LPAUXCAPSW" + }, + { + "name": "cbac", + "type": "UINT" + } + ], + "auxSetVolume": [ + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "dwVolume", + "type": "DWORD" + } + ], + "auxGetVolume": [ + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "pdwVolume", + "type": "LPDWORD" + } + ], + "auxOutMessage": [ + { + "name": "uDeviceID", + "type": "UINT" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dw1", + "type": "DWORD_PTR" + }, + { + "name": "dw2", + "type": "DWORD_PTR" + } + ], + "mixerGetNumDevs": [ + { + "name": "VOID", + "type": "void" + } + ], + "mixerGetDevCapsA": [ + { + "name": "uMxId", + "type": "UINT_PTR" + }, + { + "name": "pmxcaps", + "type": "LPMIXERCAPSA" + }, + { + "name": "cbmxcaps", + "type": "UINT" + } + ], + "mixerGetDevCapsW": [ + { + "name": "uMxId", + "type": "UINT_PTR" + }, + { + "name": "pmxcaps", + "type": "LPMIXERCAPSW" + }, + { + "name": "cbmxcaps", + "type": "UINT" + } + ], + "mixerOpen": [ + { + "name": "phmx", + "type": "LPHMIXER" + }, + { + "name": "uMxId", + "type": "UINT" + }, + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwInstance", + "type": "DWORD_PTR" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "mixerClose": [ + { + "name": "hmx", + "type": "HMIXER" + } + ], + "mixerMessage": [ + { + "name": "hmx", + "type": "HMIXER" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "dwParam1", + "type": "DWORD_PTR" + }, + { + "name": "dwParam2", + "type": "DWORD_PTR" + } + ], + "mixerGetLineInfoA": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxl", + "type": "LPMIXERLINEA" + }, + { + "name": "fdwInfo", + "type": "DWORD" + } + ], + "mixerGetLineInfoW": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxl", + "type": "LPMIXERLINEW" + }, + { + "name": "fdwInfo", + "type": "DWORD" + } + ], + "mixerGetID": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "puMxId", + "type": "UINT" + }, + { + "name": "fdwId", + "type": "DWORD" + } + ], + "mixerGetLineControlsA": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxlc", + "type": "LPMIXERLINECONTROLSA" + }, + { + "name": "fdwControls", + "type": "DWORD" + } + ], + "mixerGetLineControlsW": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxlc", + "type": "LPMIXERLINECONTROLSW" + }, + { + "name": "fdwControls", + "type": "DWORD" + } + ], + "mixerGetControlDetailsA": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxcd", + "type": "LPMIXERCONTROLDETAILS" + }, + { + "name": "fdwDetails", + "type": "DWORD" + } + ], + "mixerGetControlDetailsW": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxcd", + "type": "LPMIXERCONTROLDETAILS" + }, + { + "name": "fdwDetails", + "type": "DWORD" + } + ], + "mixerSetControlDetails": [ + { + "name": "hmxobj", + "type": "HMIXEROBJ" + }, + { + "name": "pmxcd", + "type": "LPMIXERCONTROLDETAILS" + }, + { + "name": "fdwDetails", + "type": "DWORD" + } + ], + "timeGetSystemTime": [ + { + "name": "pmmt", + "type": "LPMMTIME" + }, + { + "name": "cbmmt", + "type": "UINT" + } + ], + "timeGetTime": [ + { + "name": "VOID", + "type": "void" + } + ], + "timeGetDevCaps": [ + { + "name": "ptc", + "type": "LPTIMECAPS" + }, + { + "name": "cbtc", + "type": "UINT" + } + ], + "timeBeginPeriod": [ + { + "name": "uPeriod", + "type": "UINT" + } + ], + "timeEndPeriod": [ + { + "name": "uPeriod", + "type": "UINT" + } + ], + "CloseDriver": [ + { + "name": "hDriver", + "type": "HDRVR" + }, + { + "name": "lParam1", + "type": "LPARAM" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "OpenDriver": [ + { + "name": "szDriverName", + "type": "LPCWSTR" + }, + { + "name": "szSectionName", + "type": "LPCWSTR" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "SendDriverMessage": [ + { + "name": "hDriver", + "type": "HDRVR" + }, + { + "name": "message", + "type": "UINT" + }, + { + "name": "lParam1", + "type": "LPARAM" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "DrvGetModuleHandle": [ + { + "name": "hDriver", + "type": "HDRVR" + } + ], + "GetDriverModuleHandle": [ + { + "name": "hDriver", + "type": "HDRVR" + } + ], + "DefDriverProc": [ + { + "name": "dwDriverIdentifier", + "type": "DWORD_PTR" + }, + { + "name": "hdrvr", + "type": "HDRVR" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "lParam1", + "type": "LPARAM" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "DriverCallback": [ + { + "name": "dwCallback", + "type": "DWORD_PTR" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "hDevice", + "type": "HDRVR" + }, + { + "name": "dwMsg", + "type": "DWORD" + }, + { + "name": "dwUser", + "type": "DWORD_PTR" + }, + { + "name": "dwParam1", + "type": "DWORD_PTR" + }, + { + "name": "dwParam2", + "type": "DWORD_PTR" + } + ], + "mmioStringToFOURCCA": [ + { + "name": "sz", + "type": "LPCSTR" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "mmioStringToFOURCCW": [ + { + "name": "sz", + "type": "LPCWSTR" + }, + { + "name": "uFlags", + "type": "UINT" + } + ], + "mmioInstallIOProcA": [ + { + "name": "fccIOProc", + "type": "FOURCC" + }, + { + "name": "pIOProc", + "type": "LPMMIOPROC" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "mmioInstallIOProcW": [ + { + "name": "fccIOProc", + "type": "FOURCC" + }, + { + "name": "pIOProc", + "type": "LPMMIOPROC" + }, + { + "name": "dwFlags", + "type": "DWORD" + } + ], + "mmioOpenA": [ + { + "name": "pszFileName", + "type": "LPSTR" + }, + { + "name": "pmmioinfo", + "type": "LPMMIOINFO" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "mmioOpenW": [ + { + "name": "pszFileName", + "type": "LPWSTR" + }, + { + "name": "pmmioinfo", + "type": "LPMMIOINFO" + }, + { + "name": "fdwOpen", + "type": "DWORD" + } + ], + "mmioRenameA": [ + { + "name": "pszFileName", + "type": "LPCSTR" + }, + { + "name": "pszNewFileName", + "type": "LPCSTR" + }, + { + "name": "pmmioinfo", + "type": "LPCMMIOINFO" + }, + { + "name": "fdwRename", + "type": "DWORD" + } + ], + "mmioRenameW": [ + { + "name": "pszFileName", + "type": "LPCWSTR" + }, + { + "name": "pszNewFileName", + "type": "LPCWSTR" + }, + { + "name": "pmmioinfo", + "type": "LPCMMIOINFO" + }, + { + "name": "fdwRename", + "type": "DWORD" + } + ], + "mmioClose": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "fuClose", + "type": "UINT" + } + ], + "mmioRead": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pch", + "type": "HPSTR" + }, + { + "name": "cch", + "type": "LONG" + } + ], + "mmioWrite": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pch", + "type": "char" + }, + { + "name": "cch", + "type": "LONG" + } + ], + "mmioSeek": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "lOffset", + "type": "LONG" + }, + { + "name": "iOrigin", + "type": "int" + } + ], + "mmioGetInfo": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmioinfo", + "type": "LPMMIOINFO" + }, + { + "name": "fuInfo", + "type": "UINT" + } + ], + "mmioSetInfo": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmioinfo", + "type": "LPCMMIOINFO" + }, + { + "name": "fuInfo", + "type": "UINT" + } + ], + "mmioSetBuffer": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pchBuffer", + "type": "LPSTR" + }, + { + "name": "cchBuffer", + "type": "LONG" + }, + { + "name": "fuBuffer", + "type": "UINT" + } + ], + "mmioFlush": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "fuFlush", + "type": "UINT" + } + ], + "mmioAdvance": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmioinfo", + "type": "LPMMIOINFO" + }, + { + "name": "fuAdvance", + "type": "UINT" + } + ], + "mmioSendMessage": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "uMsg", + "type": "UINT" + }, + { + "name": "lParam1", + "type": "LPARAM" + }, + { + "name": "lParam2", + "type": "LPARAM" + } + ], + "mmioDescend": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmcki", + "type": "LPMMCKINFO" + }, + { + "name": "pmmckiParent", + "type": "MMCKINFO" + }, + { + "name": "fuDescend", + "type": "UINT" + } + ], + "mmioAscend": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmcki", + "type": "LPMMCKINFO" + }, + { + "name": "fuAscend", + "type": "UINT" + } + ], + "mmioCreateChunk": [ + { + "name": "hmmio", + "type": "HMMIO" + }, + { + "name": "pmmcki", + "type": "LPMMCKINFO" + }, + { + "name": "fuCreate", + "type": "UINT" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winmmbse.json b/qiling/extensions/windows_sdk/winmmbse.json deleted file mode 100644 index 8aa50f743..000000000 --- a/qiling/extensions/windows_sdk/winmmbse.json +++ /dev/null @@ -1,428 +0,0 @@ -{ - "CloseDriver": [ - { - "name": "hDriver", - "type": "HDRVR" - }, - { - "name": "lParam1", - "type": "LPARAM" - }, - { - "name": "lParam2", - "type": "LPARAM" - } - ], - "OpenDriver": [ - { - "name": "szDriverName", - "type": "LPCWSTR" - }, - { - "name": "szSectionName", - "type": "LPCWSTR" - }, - { - "name": "lParam2", - "type": "LPARAM" - } - ], - "SendDriverMessage": [ - { - "name": "hDriver", - "type": "HDRVR" - }, - { - "name": "message", - "type": "UINT" - }, - { - "name": "lParam1", - "type": "LPARAM" - }, - { - "name": "lParam2", - "type": "LPARAM" - } - ], - "DrvGetModuleHandle": [ - { - "name": "hDriver", - "type": "HDRVR" - } - ], - "GetDriverModuleHandle": [ - { - "name": "hDriver", - "type": "HDRVR" - } - ], - "DefDriverProc": [ - { - "name": "dwDriverIdentifier", - "type": "DWORD_PTR" - }, - { - "name": "hdrvr", - "type": "HDRVR" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "lParam1", - "type": "LPARAM" - }, - { - "name": "lParam2", - "type": "LPARAM" - } - ], - "DriverCallback": [ - { - "name": "dwCallback", - "type": "DWORD_PTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "hDevice", - "type": "HDRVR" - }, - { - "name": "dwMsg", - "type": "DWORD" - }, - { - "name": "dwUser", - "type": "DWORD_PTR" - }, - { - "name": "dwParam1", - "type": "DWORD_PTR" - }, - { - "name": "dwParam2", - "type": "DWORD_PTR" - } - ], - "sndOpenSound": [ - { - "name": "EventName", - "type": "LPCWSTR" - }, - { - "name": "AppName", - "type": "LPCWSTR" - }, - { - "name": "Flags", - "type": "INT32" - }, - { - "name": "FileHandle", - "type": "PHANDLE" - } - ], - "mmioStringToFOURCCA": [ - { - "name": "sz", - "type": "LPCSTR" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "mmioStringToFOURCCW": [ - { - "name": "sz", - "type": "LPCWSTR" - }, - { - "name": "uFlags", - "type": "UINT" - } - ], - "mmioInstallIOProcA": [ - { - "name": "fccIOProc", - "type": "FOURCC" - }, - { - "name": "pIOProc", - "type": "LPMMIOPROC" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "mmioInstallIOProcW": [ - { - "name": "fccIOProc", - "type": "FOURCC" - }, - { - "name": "pIOProc", - "type": "LPMMIOPROC" - }, - { - "name": "dwFlags", - "type": "DWORD" - } - ], - "mmioOpenA": [ - { - "name": "pszFileName", - "type": "LPSTR" - }, - { - "name": "pmmioinfo", - "type": "LPMMIOINFO" - }, - { - "name": "fdwOpen", - "type": "DWORD" - } - ], - "mmioOpenW": [ - { - "name": "pszFileName", - "type": "LPWSTR" - }, - { - "name": "pmmioinfo", - "type": "LPMMIOINFO" - }, - { - "name": "fdwOpen", - "type": "DWORD" - } - ], - "mmioRenameA": [ - { - "name": "pszFileName", - "type": "LPCSTR" - }, - { - "name": "pszNewFileName", - "type": "LPCSTR" - }, - { - "name": "pmmioinfo", - "type": "LPCMMIOINFO" - }, - { - "name": "fdwRename", - "type": "DWORD" - } - ], - "mmioRenameW": [ - { - "name": "pszFileName", - "type": "LPCWSTR" - }, - { - "name": "pszNewFileName", - "type": "LPCWSTR" - }, - { - "name": "pmmioinfo", - "type": "LPCMMIOINFO" - }, - { - "name": "fdwRename", - "type": "DWORD" - } - ], - "mmioClose": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "fuClose", - "type": "UINT" - } - ], - "mmioRead": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "pch", - "type": "HPSTR" - }, - { - "name": "cch", - "type": "LONG" - } - ], - "mmioWrite": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "pch", - "type": "char" - }, - { - "name": "cch", - "type": "LONG" - } - ], - "mmioSeek": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "lOffset", - "type": "LONG" - }, - { - "name": "iOrigin", - "type": "int" - } - ], - "mmioGetInfo": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "pmmioinfo", - "type": "LPMMIOINFO" - }, - { - "name": "fuInfo", - "type": "UINT" - } - ], - "mmioSetInfo": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "pmmioinfo", - "type": "LPCMMIOINFO" - }, - { - "name": "fuInfo", - "type": "UINT" - } - ], - "mmioSetBuffer": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "pchBuffer", - "type": "LPSTR" - }, - { - "name": "cchBuffer", - "type": "LONG" - }, - { - "name": "fuBuffer", - "type": "UINT" - } - ], - "mmioFlush": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "fuFlush", - "type": "UINT" - } - ], - "mmioAdvance": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "pmmioinfo", - "type": "LPMMIOINFO" - }, - { - "name": "fuAdvance", - "type": "UINT" - } - ], - "mmioSendMessage": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "uMsg", - "type": "UINT" - }, - { - "name": "lParam1", - "type": "LPARAM" - }, - { - "name": "lParam2", - "type": "LPARAM" - } - ], - "mmioDescend": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "pmmcki", - "type": "LPMMCKINFO" - }, - { - "name": "pmmckiParent", - "type": "MMCKINFO" - }, - { - "name": "fuDescend", - "type": "UINT" - } - ], - "mmioAscend": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "pmmcki", - "type": "LPMMCKINFO" - }, - { - "name": "fuAscend", - "type": "UINT" - } - ], - "mmioCreateChunk": [ - { - "name": "hmmio", - "type": "HMMIO" - }, - { - "name": "pmmcki", - "type": "LPMMCKINFO" - }, - { - "name": "fuCreate", - "type": "UINT" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winmmbse_dll.json b/qiling/extensions/windows_sdk/winmmbse_dll.json new file mode 100644 index 000000000..af1790dcf --- /dev/null +++ b/qiling/extensions/windows_sdk/winmmbse_dll.json @@ -0,0 +1,20 @@ +{ + "sndOpenSound": [ + { + "name": "EventName", + "type": "LPCWSTR" + }, + { + "name": "AppName", + "type": "LPCWSTR" + }, + { + "name": "Flags", + "type": "INT32" + }, + { + "name": "FileHandle", + "type": "PHANDLE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winrttype_lib.json b/qiling/extensions/windows_sdk/winrttype_lib.json new file mode 100644 index 000000000..c4281da7b --- /dev/null +++ b/qiling/extensions/windows_sdk/winrttype_lib.json @@ -0,0 +1,16 @@ +{ + "WindowsCompareStringOrdinal": [ + { + "name": "string1", + "type": "HSTRING" + }, + { + "name": "string2", + "type": "HSTRING" + }, + { + "name": "result", + "type": "INT32" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winscard.json b/qiling/extensions/windows_sdk/winscard_dll.json similarity index 97% rename from qiling/extensions/windows_sdk/winscard.json rename to qiling/extensions/windows_sdk/winscard_dll.json index 4cfc92ef9..6e7f4252d 100644 --- a/qiling/extensions/windows_sdk/winscard.json +++ b/qiling/extensions/windows_sdk/winscard_dll.json @@ -931,30 +931,6 @@ "type": "DWORD" } ], - "SCardUIDlgSelectCardA": [ - { - "name": "VOID", - "type": "LPOPENCARDNAME_EXA" - } - ], - "SCardUIDlgSelectCardW": [ - { - "name": "VOID", - "type": "LPOPENCARDNAME_EXW" - } - ], - "GetOpenCardNameA": [ - { - "name": "VOID", - "type": "LPOPENCARDNAMEA" - } - ], - "GetOpenCardNameW": [ - { - "name": "VOID", - "type": "LPOPENCARDNAMEW" - } - ], "SCardReadCacheA": [ { "name": "hContext", diff --git a/qiling/extensions/windows_sdk/winspool_drv.json b/qiling/extensions/windows_sdk/winspool_drv.json new file mode 100644 index 000000000..523139471 --- /dev/null +++ b/qiling/extensions/windows_sdk/winspool_drv.json @@ -0,0 +1,46 @@ +{ + "DeviceCapabilitiesA": [ + { + "name": "pDevice", + "type": "LPCSTR" + }, + { + "name": "pPort", + "type": "LPCSTR" + }, + { + "name": "fwCapability", + "type": "WORD" + }, + { + "name": "pOutput", + "type": "LPSTR" + }, + { + "name": "pDevMode", + "type": "DEVMODEA" + } + ], + "DeviceCapabilitiesW": [ + { + "name": "pDevice", + "type": "LPCWSTR" + }, + { + "name": "pPort", + "type": "LPCWSTR" + }, + { + "name": "fwCapability", + "type": "WORD" + }, + { + "name": "pOutput", + "type": "LPWSTR" + }, + { + "name": "pDevMode", + "type": "DEVMODEW" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/winstring.json b/qiling/extensions/windows_sdk/winstring.json deleted file mode 100644 index e3c575976..000000000 --- a/qiling/extensions/windows_sdk/winstring.json +++ /dev/null @@ -1,294 +0,0 @@ -{ - "WindowsCreateString": [ - { - "name": "sourceString", - "type": "PCNZWCH" - }, - { - "name": "length", - "type": "UINT32" - }, - { - "name": "string", - "type": "HSTRING" - } - ], - "WindowsCreateStringReference": [ - { - "name": "sourceString", - "type": "PCWSTR" - }, - { - "name": "length", - "type": "UINT32" - }, - { - "name": "hstringHeader", - "type": "HSTRING_HEADER" - }, - { - "name": "string", - "type": "HSTRING" - } - ], - "WindowsDeleteString": [ - { - "name": "string", - "type": "HSTRING" - } - ], - "WindowsDuplicateString": [ - { - "name": "string", - "type": "HSTRING" - }, - { - "name": "newString", - "type": "HSTRING" - } - ], - "WindowsGetStringLen": [ - { - "name": "string", - "type": "HSTRING" - } - ], - "WindowsGetStringRawBuffer": [ - { - "name": "string", - "type": "HSTRING" - }, - { - "name": "length", - "type": "UINT32" - } - ], - "WindowsIsStringEmpty": [ - { - "name": "string", - "type": "HSTRING" - } - ], - "WindowsStringHasEmbeddedNull": [ - { - "name": "string", - "type": "HSTRING" - }, - { - "name": "hasEmbedNull", - "type": "BOOL" - } - ], - "WindowsCompareStringOrdinal": [ - { - "name": "string1", - "type": "HSTRING" - }, - { - "name": "string2", - "type": "HSTRING" - }, - { - "name": "result", - "type": "INT32" - } - ], - "WindowsSubstring": [ - { - "name": "string", - "type": "HSTRING" - }, - { - "name": "startIndex", - "type": "UINT32" - }, - { - "name": "newString", - "type": "HSTRING" - } - ], - "WindowsSubstringWithSpecifiedLength": [ - { - "name": "string", - "type": "HSTRING" - }, - { - "name": "startIndex", - "type": "UINT32" - }, - { - "name": "length", - "type": "UINT32" - }, - { - "name": "newString", - "type": "HSTRING" - } - ], - "WindowsConcatString": [ - { - "name": "string1", - "type": "HSTRING" - }, - { - "name": "string2", - "type": "HSTRING" - }, - { - "name": "newString", - "type": "HSTRING" - } - ], - "WindowsReplaceString": [ - { - "name": "string", - "type": "HSTRING" - }, - { - "name": "stringReplaced", - "type": "HSTRING" - }, - { - "name": "stringReplaceWith", - "type": "HSTRING" - }, - { - "name": "newString", - "type": "HSTRING" - } - ], - "WindowsTrimStringStart": [ - { - "name": "string", - "type": "HSTRING" - }, - { - "name": "trimString", - "type": "HSTRING" - }, - { - "name": "newString", - "type": "HSTRING" - } - ], - "WindowsTrimStringEnd": [ - { - "name": "string", - "type": "HSTRING" - }, - { - "name": "trimString", - "type": "HSTRING" - }, - { - "name": "newString", - "type": "HSTRING" - } - ], - "WindowsPreallocateStringBuffer": [ - { - "name": "length", - "type": "UINT32" - }, - { - "name": "charBuffer", - "type": "WCHAR" - }, - { - "name": "bufferHandle", - "type": "HSTRING_BUFFER" - } - ], - "WindowsPromoteStringBuffer": [ - { - "name": "bufferHandle", - "type": "HSTRING_BUFFER" - }, - { - "name": "string", - "type": "HSTRING" - } - ], - "WindowsDeleteStringBuffer": [ - { - "name": "bufferHandle", - "type": "HSTRING_BUFFER" - } - ], - "HSTRING_UserSize": [ - { - "name": "pFlags", - "type": "ULONG" - }, - { - "name": "StartingSize", - "type": "ULONG" - }, - { - "name": "ppidl", - "type": "HSTRING" - } - ], - "HSTRING_UserFree": [ - { - "name": "pFlags", - "type": "ULONG" - }, - { - "name": "ppidl", - "type": "HSTRING" - } - ], - "WindowsInspectString": [ - { - "name": "targetHString", - "type": "UINT_PTR" - }, - { - "name": "machine", - "type": "USHORT" - }, - { - "name": "callback", - "type": "PINSPECT_HSTRING_CALLBACK" - }, - { - "name": "context", - "type": "void" - }, - { - "name": "length", - "type": "UINT32" - }, - { - "name": "targetStringAddress", - "type": "UINT_PTR" - } - ], - "WindowsInspectString2": [ - { - "name": "targetHString", - "type": "UINT64" - }, - { - "name": "machine", - "type": "USHORT" - }, - { - "name": "callback", - "type": "PINSPECT_HSTRING_CALLBACK2" - }, - { - "name": "context", - "type": "void" - }, - { - "name": "length", - "type": "UINT32" - }, - { - "name": "targetStringAddress", - "type": "UINT64" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/WinRTType.json b/qiling/extensions/windows_sdk/winstring_h.json similarity index 58% rename from qiling/extensions/windows_sdk/WinRTType.json rename to qiling/extensions/windows_sdk/winstring_h.json index e3c575976..52ab08f04 100644 --- a/qiling/extensions/windows_sdk/WinRTType.json +++ b/qiling/extensions/windows_sdk/winstring_h.json @@ -79,20 +79,6 @@ "type": "BOOL" } ], - "WindowsCompareStringOrdinal": [ - { - "name": "string1", - "type": "HSTRING" - }, - { - "name": "string2", - "type": "HSTRING" - }, - { - "name": "result", - "type": "INT32" - } - ], "WindowsSubstring": [ { "name": "string", @@ -184,111 +170,5 @@ "name": "newString", "type": "HSTRING" } - ], - "WindowsPreallocateStringBuffer": [ - { - "name": "length", - "type": "UINT32" - }, - { - "name": "charBuffer", - "type": "WCHAR" - }, - { - "name": "bufferHandle", - "type": "HSTRING_BUFFER" - } - ], - "WindowsPromoteStringBuffer": [ - { - "name": "bufferHandle", - "type": "HSTRING_BUFFER" - }, - { - "name": "string", - "type": "HSTRING" - } - ], - "WindowsDeleteStringBuffer": [ - { - "name": "bufferHandle", - "type": "HSTRING_BUFFER" - } - ], - "HSTRING_UserSize": [ - { - "name": "pFlags", - "type": "ULONG" - }, - { - "name": "StartingSize", - "type": "ULONG" - }, - { - "name": "ppidl", - "type": "HSTRING" - } - ], - "HSTRING_UserFree": [ - { - "name": "pFlags", - "type": "ULONG" - }, - { - "name": "ppidl", - "type": "HSTRING" - } - ], - "WindowsInspectString": [ - { - "name": "targetHString", - "type": "UINT_PTR" - }, - { - "name": "machine", - "type": "USHORT" - }, - { - "name": "callback", - "type": "PINSPECT_HSTRING_CALLBACK" - }, - { - "name": "context", - "type": "void" - }, - { - "name": "length", - "type": "UINT32" - }, - { - "name": "targetStringAddress", - "type": "UINT_PTR" - } - ], - "WindowsInspectString2": [ - { - "name": "targetHString", - "type": "UINT64" - }, - { - "name": "machine", - "type": "USHORT" - }, - { - "name": "callback", - "type": "PINSPECT_HSTRING_CALLBACK2" - }, - { - "name": "context", - "type": "void" - }, - { - "name": "length", - "type": "UINT32" - }, - { - "name": "targetStringAddress", - "type": "UINT64" - } ] } \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wintrust.json b/qiling/extensions/windows_sdk/wintrust_dll.json similarity index 63% rename from qiling/extensions/windows_sdk/wintrust.json rename to qiling/extensions/windows_sdk/wintrust_dll.json index 46f394d79..9a255f318 100644 --- a/qiling/extensions/windows_sdk/wintrust.json +++ b/qiling/extensions/windows_sdk/wintrust_dll.json @@ -1,4 +1,140 @@ { + "WinVerifyTrust": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pgActionID", + "type": "GUID" + }, + { + "name": "pWVTData", + "type": "LPVOID" + } + ], + "WinVerifyTrustEx": [ + { + "name": "hwnd", + "type": "HWND" + }, + { + "name": "pgActionID", + "type": "GUID" + }, + { + "name": "pWinTrustData", + "type": "WINTRUST_DATA" + } + ], + "WintrustGetRegPolicyFlags": [ + { + "name": "pdwPolicyFlags", + "type": "DWORD" + } + ], + "WintrustSetRegPolicyFlags": [ + { + "name": "dwPolicyFlags", + "type": "DWORD" + } + ], + "WintrustAddActionID": [ + { + "name": "pgActionID", + "type": "GUID" + }, + { + "name": "fdwFlags", + "type": "DWORD" + }, + { + "name": "psProvInfo", + "type": "CRYPT_REGISTER_ACTIONID" + } + ], + "WintrustRemoveActionID": [ + { + "name": "pgActionID", + "type": "GUID" + } + ], + "WintrustLoadFunctionPointers": [ + { + "name": "pgActionID", + "type": "GUID" + }, + { + "name": "pPfns", + "type": "CRYPT_PROVIDER_FUNCTIONS" + } + ], + "WintrustAddDefaultForUsage": [ + { + "name": "pszUsageOID", + "type": "char" + }, + { + "name": "psDefUsage", + "type": "CRYPT_PROVIDER_REGDEFUSAGE" + } + ], + "WintrustGetDefaultForUsage": [ + { + "name": "dwAction", + "type": "DWORD" + }, + { + "name": "pszUsageOID", + "type": "char" + }, + { + "name": "psUsage", + "type": "CRYPT_PROVIDER_DEFUSAGE" + } + ], + "WTHelperCertIsSelfSigned": [ + { + "name": "dwEncoding", + "type": "DWORD" + }, + { + "name": "pCert", + "type": "CERT_INFO" + } + ], + "WTHelperCertCheckValidSignature": [ + { + "name": "pProvData", + "type": "CRYPT_PROVIDER_DATA" + } + ], + "OpenPersonalTrustDBDialogEx": [ + { + "name": "hwndParent", + "type": "HWND" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "pvReserved", + "type": "PVOID" + } + ], + "OpenPersonalTrustDBDialog": [ + { + "name": "hwndParent", + "type": "HWND" + } + ], + "WintrustSetDefaultIncludePEPageHashes": [ + { + "name": "fIncludePEPageHashes", + "type": "BOOL" + } + ], "CryptCATOpen": [ { "name": "pwszFileName", diff --git a/qiling/extensions/windows_sdk/wintypes.json b/qiling/extensions/windows_sdk/wintypes_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wintypes.json rename to qiling/extensions/windows_sdk/wintypes_dll.json diff --git a/qiling/extensions/windows_sdk/winusb.json b/qiling/extensions/windows_sdk/winusb_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/winusb.json rename to qiling/extensions/windows_sdk/winusb_dll.json diff --git a/qiling/extensions/windows_sdk/wlanapi.json b/qiling/extensions/windows_sdk/wlanapi_dll.json similarity index 97% rename from qiling/extensions/windows_sdk/wlanapi.json rename to qiling/extensions/windows_sdk/wlanapi_dll.json index c8cb7840d..7eda5a705 100644 --- a/qiling/extensions/windows_sdk/wlanapi.json +++ b/qiling/extensions/windows_sdk/wlanapi_dll.json @@ -849,36 +849,6 @@ "type": "PDWORD" } ], - "WlanUIEditProfile": [ - { - "name": "dwClientVersion", - "type": "DWORD" - }, - { - "name": "wstrProfileName", - "type": "LPCWSTR" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wlStartPage", - "type": "WL_DISPLAY_PAGES" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "pWlanReasonCode", - "type": "PWLAN_REASON_CODE" - } - ], "WlanHostedNetworkStartUsing": [ { "name": "hClientHandle", diff --git a/qiling/extensions/windows_sdk/wlanui.json b/qiling/extensions/windows_sdk/wlanui.json deleted file mode 100644 index c8cb7840d..000000000 --- a/qiling/extensions/windows_sdk/wlanui.json +++ /dev/null @@ -1,1184 +0,0 @@ -{ - "WlanOpenHandle": [ - { - "name": "dwClientVersion", - "type": "DWORD" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "pdwNegotiatedVersion", - "type": "PDWORD" - }, - { - "name": "phClientHandle", - "type": "PHANDLE" - } - ], - "WlanCloseHandle": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanEnumInterfaces": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "ppInterfaceList", - "type": "PWLAN_INTERFACE_INFO_LIST" - } - ], - "WlanSetAutoConfigParameter": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "OpCode", - "type": "WLAN_AUTOCONF_OPCODE" - }, - { - "name": "dwDataSize", - "type": "DWORD" - }, - { - "name": "pData", - "type": "PVOID" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanQueryAutoConfigParameter": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "OpCode", - "type": "WLAN_AUTOCONF_OPCODE" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "pdwDataSize", - "type": "PDWORD" - }, - { - "name": "ppData", - "type": "PVOID" - }, - { - "name": "pWlanOpcodeValueType", - "type": "PWLAN_OPCODE_VALUE_TYPE" - } - ], - "WlanGetInterfaceCapability": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "ppCapability", - "type": "PWLAN_INTERFACE_CAPABILITY" - } - ], - "WlanSetInterface": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "OpCode", - "type": "WLAN_INTF_OPCODE" - }, - { - "name": "dwDataSize", - "type": "DWORD" - }, - { - "name": "pData", - "type": "PVOID" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanQueryInterface": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "OpCode", - "type": "WLAN_INTF_OPCODE" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "pdwDataSize", - "type": "PDWORD" - }, - { - "name": "ppData", - "type": "PVOID" - }, - { - "name": "pWlanOpcodeValueType", - "type": "PWLAN_OPCODE_VALUE_TYPE" - } - ], - "WlanIhvControl": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "Type", - "type": "WLAN_IHV_CONTROL_TYPE" - }, - { - "name": "dwInBufferSize", - "type": "DWORD" - }, - { - "name": "pInBuffer", - "type": "PVOID" - }, - { - "name": "dwOutBufferSize", - "type": "DWORD" - }, - { - "name": "pOutBuffer", - "type": "PVOID" - }, - { - "name": "pdwBytesReturned", - "type": "PDWORD" - } - ], - "WlanScan": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "pDot11Ssid", - "type": "PDOT11_SSID" - }, - { - "name": "pIeData", - "type": "PWLAN_RAW_DATA" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanGetAvailableNetworkList": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "ppAvailableNetworkList", - "type": "PWLAN_AVAILABLE_NETWORK_LIST" - } - ], - "WlanGetNetworkBssList": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "pDot11Ssid", - "type": "PDOT11_SSID" - }, - { - "name": "dot11BssType", - "type": "DOT11_BSS_TYPE" - }, - { - "name": "bSecurityEnabled", - "type": "BOOL" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "ppWlanBssList", - "type": "PWLAN_BSS_LIST" - } - ], - "WlanConnect": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "pConnectionParameters", - "type": "PWLAN_CONNECTION_PARAMETERS" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanDisconnect": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanRegisterNotification": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "dwNotifSource", - "type": "DWORD" - }, - { - "name": "bIgnoreDuplicate", - "type": "BOOL" - }, - { - "name": "funcCallback", - "type": "WLAN_NOTIFICATION_CALLBACK" - }, - { - "name": "pCallbackContext", - "type": "PVOID" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "pdwPrevNotifSource", - "type": "PDWORD" - } - ], - "WlanGetProfile": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "strProfileName", - "type": "LPCWSTR" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "pstrProfileXml", - "type": "LPWSTR" - }, - { - "name": "pdwFlags", - "type": "DWORD" - }, - { - "name": "pdwGrantedAccess", - "type": "DWORD" - } - ], - "WlanSetProfileEapUserData": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "strProfileName", - "type": "LPCWSTR" - }, - { - "name": "eapType", - "type": "EAP_METHOD_TYPE" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "dwEapUserDataSize", - "type": "DWORD" - }, - { - "name": "pbEapUserData", - "type": "LPBYTE" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanSetProfileEapXmlUserData": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "strProfileName", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "strEapXmlUserData", - "type": "LPCWSTR" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanSetProfile": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "strProfileXml", - "type": "LPCWSTR" - }, - { - "name": "strAllUserProfileSecurity", - "type": "LPCWSTR" - }, - { - "name": "bOverwrite", - "type": "BOOL" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "pdwReasonCode", - "type": "DWORD" - } - ], - "WlanDeleteProfile": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "strProfileName", - "type": "LPCWSTR" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanRenameProfile": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "strOldProfileName", - "type": "LPCWSTR" - }, - { - "name": "strNewProfileName", - "type": "LPCWSTR" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanGetProfileList": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "ppProfileList", - "type": "PWLAN_PROFILE_INFO_LIST" - } - ], - "WlanSetProfileList": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "dwItems", - "type": "DWORD" - }, - { - "name": "strProfileNames", - "type": "LPCWSTR" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanSetProfilePosition": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "strProfileName", - "type": "LPCWSTR" - }, - { - "name": "dwPosition", - "type": "DWORD" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanSetProfileCustomUserData": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "strProfileName", - "type": "LPCWSTR" - }, - { - "name": "dwDataSize", - "type": "DWORD" - }, - { - "name": "pData", - "type": "PBYTE" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanGetProfileCustomUserData": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "strProfileName", - "type": "LPCWSTR" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "pdwDataSize", - "type": "DWORD" - }, - { - "name": "ppData", - "type": "PBYTE" - } - ], - "WlanSetFilterList": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "wlanFilterListType", - "type": "WLAN_FILTER_LIST_TYPE" - }, - { - "name": "pNetworkList", - "type": "PDOT11_NETWORK_LIST" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanGetFilterList": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "wlanFilterListType", - "type": "WLAN_FILTER_LIST_TYPE" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "ppNetworkList", - "type": "PDOT11_NETWORK_LIST" - } - ], - "WlanSetPsdIEDataList": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "strFormat", - "type": "LPCWSTR" - }, - { - "name": "pPsdIEDataList", - "type": "PWLAN_RAW_DATA_LIST" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanSaveTemporaryProfile": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "strProfileName", - "type": "LPCWSTR" - }, - { - "name": "strAllUserProfileSecurity", - "type": "LPCWSTR" - }, - { - "name": "dwFlags", - "type": "DWORD" - }, - { - "name": "bOverWrite", - "type": "BOOL" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanDeviceServiceCommand": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "pDeviceServiceGuid", - "type": "LPGUID" - }, - { - "name": "dwOpCode", - "type": "DWORD" - }, - { - "name": "dwInBufferSize", - "type": "DWORD" - }, - { - "name": "pInBuffer", - "type": "PVOID" - }, - { - "name": "dwOutBufferSize", - "type": "DWORD" - }, - { - "name": "pOutBuffer", - "type": "PVOID" - }, - { - "name": "pdwBytesReturned", - "type": "PDWORD" - } - ], - "WlanGetSupportedDeviceServices": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "ppDevSvcGuidList", - "type": "PWLAN_DEVICE_SERVICE_GUID_LIST" - } - ], - "WlanRegisterDeviceServiceNotification": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pDevSvcGuidList", - "type": "PWLAN_DEVICE_SERVICE_GUID_LIST" - } - ], - "WlanExtractPsdIEDataList": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "dwIeDataSize", - "type": "DWORD" - }, - { - "name": "pRawIeData", - "type": "PBYTE" - }, - { - "name": "strFormat", - "type": "LPCWSTR" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "ppPsdIEDataList", - "type": "PWLAN_RAW_DATA_LIST" - } - ], - "WlanReasonCodeToString": [ - { - "name": "dwReasonCode", - "type": "DWORD" - }, - { - "name": "dwBufferSize", - "type": "DWORD" - }, - { - "name": "pStringBuffer", - "type": "PWCHAR" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WlanAllocateMemory": [ - { - "name": "dwMemorySize", - "type": "DWORD" - } - ], - "WlanFreeMemory": [ - { - "name": "pMemory", - "type": "PVOID" - } - ], - "WlanSetSecuritySettings": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "SecurableObject", - "type": "WLAN_SECURABLE_OBJECT" - }, - { - "name": "strModifiedSDDL", - "type": "LPCWSTR" - } - ], - "WlanGetSecuritySettings": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "SecurableObject", - "type": "WLAN_SECURABLE_OBJECT" - }, - { - "name": "pValueType", - "type": "PWLAN_OPCODE_VALUE_TYPE" - }, - { - "name": "pstrCurrentSDDL", - "type": "LPWSTR" - }, - { - "name": "pdwGrantedAccess", - "type": "PDWORD" - } - ], - "WlanUIEditProfile": [ - { - "name": "dwClientVersion", - "type": "DWORD" - }, - { - "name": "wstrProfileName", - "type": "LPCWSTR" - }, - { - "name": "pInterfaceGuid", - "type": "GUID" - }, - { - "name": "hWnd", - "type": "HWND" - }, - { - "name": "wlStartPage", - "type": "WL_DISPLAY_PAGES" - }, - { - "name": "pReserved", - "type": "PVOID" - }, - { - "name": "pWlanReasonCode", - "type": "PWLAN_REASON_CODE" - } - ], - "WlanHostedNetworkStartUsing": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pFailReason", - "type": "PWLAN_HOSTED_NETWORK_REASON" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "WlanHostedNetworkStopUsing": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pFailReason", - "type": "PWLAN_HOSTED_NETWORK_REASON" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "WlanHostedNetworkForceStart": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pFailReason", - "type": "PWLAN_HOSTED_NETWORK_REASON" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "WlanHostedNetworkForceStop": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pFailReason", - "type": "PWLAN_HOSTED_NETWORK_REASON" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "WlanHostedNetworkQueryProperty": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "OpCode", - "type": "WLAN_HOSTED_NETWORK_OPCODE" - }, - { - "name": "pdwDataSize", - "type": "PDWORD" - }, - { - "name": "ppvData", - "type": "PVOID" - }, - { - "name": "pWlanOpcodeValueType", - "type": "PWLAN_OPCODE_VALUE_TYPE" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "WlanHostedNetworkSetProperty": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "OpCode", - "type": "WLAN_HOSTED_NETWORK_OPCODE" - }, - { - "name": "dwDataSize", - "type": "DWORD" - }, - { - "name": "pvData", - "type": "PVOID" - }, - { - "name": "pFailReason", - "type": "PWLAN_HOSTED_NETWORK_REASON" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "WlanHostedNetworkInitSettings": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pFailReason", - "type": "PWLAN_HOSTED_NETWORK_REASON" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "WlanHostedNetworkRefreshSecuritySettings": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pFailReason", - "type": "PWLAN_HOSTED_NETWORK_REASON" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "WlanHostedNetworkQueryStatus": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "ppWlanHostedNetworkStatus", - "type": "PWLAN_HOSTED_NETWORK_STATUS" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "WlanHostedNetworkSetSecondaryKey": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "dwKeyLength", - "type": "DWORD" - }, - { - "name": "pucKeyData", - "type": "PUCHAR" - }, - { - "name": "bIsPassPhrase", - "type": "BOOL" - }, - { - "name": "bPersistent", - "type": "BOOL" - }, - { - "name": "pFailReason", - "type": "PWLAN_HOSTED_NETWORK_REASON" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "WlanHostedNetworkQuerySecondaryKey": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pdwKeyLength", - "type": "PDWORD" - }, - { - "name": "ppucKeyData", - "type": "PUCHAR" - }, - { - "name": "pbIsPassPhrase", - "type": "PBOOL" - }, - { - "name": "pbPersistent", - "type": "PBOOL" - }, - { - "name": "pFailReason", - "type": "PWLAN_HOSTED_NETWORK_REASON" - }, - { - "name": "pvReserved", - "type": "PVOID" - } - ], - "WlanRegisterVirtualStationNotification": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "bRegister", - "type": "BOOL" - }, - { - "name": "pReserved", - "type": "PVOID" - } - ], - "WFDOpenHandle": [ - { - "name": "dwClientVersion", - "type": "DWORD" - }, - { - "name": "pdwNegotiatedVersion", - "type": "PDWORD" - }, - { - "name": "phClientHandle", - "type": "PHANDLE" - } - ], - "WFDCloseHandle": [ - { - "name": "hClientHandle", - "type": "HANDLE" - } - ], - "WFDStartOpenSession": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pDeviceAddress", - "type": "PDOT11_MAC_ADDRESS" - }, - { - "name": "pvContext", - "type": "PVOID" - }, - { - "name": "pfnCallback", - "type": "WFD_OPEN_SESSION_COMPLETE_CALLBACK" - }, - { - "name": "phSessionHandle", - "type": "PHANDLE" - } - ], - "WFDCancelOpenSession": [ - { - "name": "hSessionHandle", - "type": "HANDLE" - } - ], - "WFDOpenLegacySession": [ - { - "name": "hClientHandle", - "type": "HANDLE" - }, - { - "name": "pLegacyMacAddress", - "type": "PDOT11_MAC_ADDRESS" - }, - { - "name": "phSessionHandle", - "type": "HANDLE" - }, - { - "name": "pGuidSessionInterface", - "type": "GUID" - } - ], - "WFDCloseSession": [ - { - "name": "hSessionHandle", - "type": "HANDLE" - } - ], - "WFDUpdateDeviceVisibility": [ - { - "name": "pDeviceAddress", - "type": "PDOT11_MAC_ADDRESS" - } - ] -} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/wlanui_dll.json b/qiling/extensions/windows_sdk/wlanui_dll.json new file mode 100644 index 000000000..8a2b800ec --- /dev/null +++ b/qiling/extensions/windows_sdk/wlanui_dll.json @@ -0,0 +1,32 @@ +{ + "WlanUIEditProfile": [ + { + "name": "dwClientVersion", + "type": "DWORD" + }, + { + "name": "wstrProfileName", + "type": "LPCWSTR" + }, + { + "name": "pInterfaceGuid", + "type": "GUID" + }, + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wlStartPage", + "type": "WL_DISPLAY_PAGES" + }, + { + "name": "pReserved", + "type": "PVOID" + }, + { + "name": "pWlanReasonCode", + "type": "PWLAN_REASON_CODE" + } + ] +} \ No newline at end of file diff --git a/qiling/extensions/windows_sdk/Wmvcore.json b/qiling/extensions/windows_sdk/wmvcore_dll.json similarity index 77% rename from qiling/extensions/windows_sdk/Wmvcore.json rename to qiling/extensions/windows_sdk/wmvcore_dll.json index 1b331945e..5631467fe 100644 --- a/qiling/extensions/windows_sdk/Wmvcore.json +++ b/qiling/extensions/windows_sdk/wmvcore_dll.json @@ -1,4 +1,40 @@ { + "WMCheckURLExtension": [ + { + "name": "pwszURL", + "type": "LPCWSTR" + } + ], + "WMCheckURLScheme": [ + { + "name": "pwszURLScheme", + "type": "LPCWSTR" + } + ], + "WMValidateData": [ + { + "name": "pbData", + "type": "BYTE" + }, + { + "name": "pdwDataSize", + "type": "DWORD" + } + ], + "WMIsAvailableOffline": [ + { + "name": "pwszURL", + "type": "LPCWSTR" + }, + { + "name": "pwszLanguage", + "type": "LPCWSTR" + }, + { + "name": "pfIsAvailableOffline", + "type": "BOOL" + } + ], "WMIsContentProtected": [ { "name": "pwszFileName", diff --git a/qiling/extensions/windows_sdk/wofutil.json b/qiling/extensions/windows_sdk/wofutil_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wofutil.json rename to qiling/extensions/windows_sdk/wofutil_dll.json diff --git a/qiling/extensions/windows_sdk/Ws2_32.json b/qiling/extensions/windows_sdk/ws2_32_dll.json similarity index 59% rename from qiling/extensions/windows_sdk/Ws2_32.json rename to qiling/extensions/windows_sdk/ws2_32_dll.json index 459f65776..3c7be12be 100644 --- a/qiling/extensions/windows_sdk/Ws2_32.json +++ b/qiling/extensions/windows_sdk/ws2_32_dll.json @@ -1,57 +1,1163 @@ { - "__WSAFDIsSet": [ + "getaddrinfo": [ { - "name": "fd", + "name": "pNodeName", + "type": "PCSTR" + }, + { + "name": "pServiceName", + "type": "PCSTR" + }, + { + "name": "pHints", + "type": "ADDRINFOA" + }, + { + "name": "ppResult", + "type": "PADDRINFOA" + } + ], + "GetAddrInfoW": [ + { + "name": "pNodeName", + "type": "PCWSTR" + }, + { + "name": "pServiceName", + "type": "PCWSTR" + }, + { + "name": "pHints", + "type": "ADDRINFOW" + }, + { + "name": "ppResult", + "type": "PADDRINFOW" + } + ], + "GetAddrInfoExA": [ + { + "name": "pName", + "type": "PCSTR" + }, + { + "name": "pServiceName", + "type": "PCSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpNspId", + "type": "LPGUID" + }, + { + "name": "hints", + "type": "ADDRINFOEXA" + }, + { + "name": "ppResult", + "type": "PADDRINFOEXA" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" + }, + { + "name": "lpNameHandle", + "type": "LPHANDLE" + } + ], + "GetAddrInfoExW": [ + { + "name": "pName", + "type": "PCWSTR" + }, + { + "name": "pServiceName", + "type": "PCWSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpNspId", + "type": "LPGUID" + }, + { + "name": "hints", + "type": "ADDRINFOEXW" + }, + { + "name": "ppResult", + "type": "PADDRINFOEXW" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" + }, + { + "name": "lpHandle", + "type": "LPHANDLE" + } + ], + "GetAddrInfoExCancel": [ + { + "name": "lpHandle", + "type": "LPHANDLE" + } + ], + "GetAddrInfoExOverlappedResult": [ + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + } + ], + "SetAddrInfoExA": [ + { + "name": "pName", + "type": "PCSTR" + }, + { + "name": "pServiceName", + "type": "PCSTR" + }, + { + "name": "pAddresses", + "type": "SOCKET_ADDRESS" + }, + { + "name": "dwAddressCount", + "type": "DWORD" + }, + { + "name": "lpBlob", + "type": "LPBLOB" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpNspId", + "type": "LPGUID" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" + }, + { + "name": "lpNameHandle", + "type": "LPHANDLE" + } + ], + "SetAddrInfoExW": [ + { + "name": "pName", + "type": "PCWSTR" + }, + { + "name": "pServiceName", + "type": "PCWSTR" + }, + { + "name": "pAddresses", + "type": "SOCKET_ADDRESS" + }, + { + "name": "dwAddressCount", + "type": "DWORD" + }, + { + "name": "lpBlob", + "type": "LPBLOB" + }, + { + "name": "dwFlags", + "type": "DWORD" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "lpNspId", + "type": "LPGUID" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + }, + { + "name": "lpOverlapped", + "type": "LPOVERLAPPED" + }, + { + "name": "lpCompletionRoutine", + "type": "LPLOOKUPSERVICE_COMPLETION_ROUTINE" + }, + { + "name": "lpNameHandle", + "type": "LPHANDLE" + } + ], + "freeaddrinfo": [ + { + "name": "pAddrInfo", + "type": "PADDRINFOA" + } + ], + "FreeAddrInfoW": [ + { + "name": "pAddrInfo", + "type": "PADDRINFOW" + } + ], + "FreeAddrInfoEx": [ + { + "name": "pAddrInfoEx", + "type": "PADDRINFOEXA" + } + ], + "FreeAddrInfoExW": [ + { + "name": "pAddrInfoEx", + "type": "PADDRINFOEXW" + } + ], + "getnameinfo": [ + { + "name": "pSockaddr", + "type": "SOCKADDR" + }, + { + "name": "SockaddrLength", + "type": "socklen_t" + }, + { + "name": "pNodeBuffer", + "type": "PCHAR" + }, + { + "name": "NodeBufferSize", + "type": "DWORD" + }, + { + "name": "pServiceBuffer", + "type": "PCHAR" + }, + { + "name": "ServiceBufferSize", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "INT" + } + ], + "GetNameInfoW": [ + { + "name": "pSockaddr", + "type": "SOCKADDR" + }, + { + "name": "SockaddrLength", + "type": "socklen_t" + }, + { + "name": "pNodeBuffer", + "type": "PWCHAR" + }, + { + "name": "NodeBufferSize", + "type": "DWORD" + }, + { + "name": "pServiceBuffer", + "type": "PWCHAR" + }, + { + "name": "ServiceBufferSize", + "type": "DWORD" + }, + { + "name": "Flags", + "type": "INT" + } + ], + "InetPtonW": [ + { + "name": "Family", + "type": "INT" + }, + { + "name": "pszAddrString", + "type": "PCWSTR" + }, + { + "name": "pAddrBuf", + "type": "PVOID" + } + ], + "InetNtopW": [ + { + "name": "Family", + "type": "INT" + }, + { + "name": "pAddr", + "type": "void" + }, + { + "name": "pStringBuf", + "type": "PWSTR" + }, + { + "name": "StringBufSize", + "type": "size_t" + } + ], + "setipv4sourcefilter": [ + { + "name": "Socket", "type": "SOCKET" }, { - "name": "VOID", - "type": "fd_set" + "name": "Interface", + "type": "IN_ADDR" + }, + { + "name": "Group", + "type": "IN_ADDR" + }, + { + "name": "FilterMode", + "type": "MULTICAST_MODE_TYPE" + }, + { + "name": "SourceCount", + "type": "ULONG" + }, + { + "name": "SourceList", + "type": "IN_ADDR" } ], - "accept": [ + "getipv4sourcefilter": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Interface", + "type": "IN_ADDR" + }, + { + "name": "Group", + "type": "IN_ADDR" + }, + { + "name": "FilterMode", + "type": "MULTICAST_MODE_TYPE" + }, + { + "name": "SourceCount", + "type": "ULONG" + }, + { + "name": "SourceList", + "type": "IN_ADDR" + } + ], + "setsourcefilter": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Interface", + "type": "ULONG" + }, + { + "name": "Group", + "type": "SOCKADDR" + }, + { + "name": "GroupLength", + "type": "int" + }, + { + "name": "FilterMode", + "type": "MULTICAST_MODE_TYPE" + }, + { + "name": "SourceCount", + "type": "ULONG" + }, + { + "name": "SourceList", + "type": "SOCKADDR_STORAGE" + } + ], + "getsourcefilter": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Interface", + "type": "ULONG" + }, + { + "name": "Group", + "type": "SOCKADDR" + }, + { + "name": "GroupLength", + "type": "int" + }, + { + "name": "FilterMode", + "type": "MULTICAST_MODE_TYPE" + }, + { + "name": "SourceCount", + "type": "ULONG" + }, + { + "name": "SourceList", + "type": "SOCKADDR_STORAGE" + } + ], + "WSAGetIPUserMtu": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Mtu", + "type": "DWORD" + } + ], + "WSASetIPUserMtu": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Mtu", + "type": "DWORD" + } + ], + "WSAGetFailConnectOnIcmpError": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Enabled", + "type": "DWORD" + } + ], + "WSASetFailConnectOnIcmpError": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Enabled", + "type": "DWORD" + } + ], + "WSAGetIcmpErrorInfo": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "Info", + "type": "ICMP_ERROR_INFO" + } + ], + "WSAGetUdpSendMessageSize": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "MsgSize", + "type": "DWORD" + } + ], + "WSASetUdpSendMessageSize": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "MsgSize", + "type": "DWORD" + } + ], + "WSAGetUdpRecvMaxCoalescedSize": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "MaxCoalescedMsgSize", + "type": "DWORD" + } + ], + "WSASetUdpRecvMaxCoalescedSize": [ + { + "name": "Socket", + "type": "SOCKET" + }, + { + "name": "MaxCoalescedMsgSize", + "type": "DWORD" + } + ], + "WSCEnumProtocols": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCEnumProtocols32": [ + { + "name": "lpiProtocols", + "type": "LPINT" + }, + { + "name": "lpProtocolBuffer", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCDeinstallProvider": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCDeinstallProvider32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCInstallProvider": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCInstallProvider64_32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetProviderPath": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProviderDllPathLen", + "type": "LPINT" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetProviderPath32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProviderDllPathLen", + "type": "LPINT" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCUpdateProvider": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCUpdateProvider32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "WCHAR" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCSetProviderInfo": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "InfoType", + "type": "WSC_PROVIDER_INFO_TYPE" + }, + { + "name": "Info", + "type": "PBYTE" + }, + { + "name": "InfoSize", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetProviderInfo": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "InfoType", + "type": "WSC_PROVIDER_INFO_TYPE" + }, + { + "name": "Info", + "type": "PBYTE" + }, + { + "name": "InfoSize", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCSetProviderInfo32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "InfoType", + "type": "WSC_PROVIDER_INFO_TYPE" + }, + { + "name": "Info", + "type": "PBYTE" + }, + { + "name": "InfoSize", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetProviderInfo32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "InfoType", + "type": "WSC_PROVIDER_INFO_TYPE" + }, + { + "name": "Info", + "type": "PBYTE" + }, + { + "name": "InfoSize", + "type": "size_t" + }, + { + "name": "Flags", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCSetApplicationCategory": [ + { + "name": "Path", + "type": "LPCWSTR" + }, + { + "name": "PathLength", + "type": "DWORD" + }, + { + "name": "Extra", + "type": "LPCWSTR" + }, + { + "name": "ExtraLength", + "type": "DWORD" + }, + { + "name": "PermittedLspCategories", + "type": "DWORD" + }, + { + "name": "pPrevPermLspCat", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCGetApplicationCategory": [ + { + "name": "Path", + "type": "LPCWSTR" + }, + { + "name": "PathLength", + "type": "DWORD" + }, + { + "name": "Extra", + "type": "LPCWSTR" + }, + { + "name": "ExtraLength", + "type": "DWORD" + }, + { + "name": "pPermittedLspCategories", + "type": "DWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSCEnumNameSpaceProviders32": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOW" + } + ], + "WSCEnumNameSpaceProvidersEx32": [ + { + "name": "lpdwBufferLength", + "type": "LPDWORD" + }, + { + "name": "lpnspBuffer", + "type": "LPWSANAMESPACE_INFOEXW" + } + ], + "WSCInstallNameSpace": [ + { + "name": "lpszIdentifier", + "type": "LPWSTR" + }, + { + "name": "lpszPathName", + "type": "LPWSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "lpProviderId", + "type": "LPGUID" + } + ], + "WSCUnInstallNameSpace": [ + { + "name": "lpProviderId", + "type": "LPGUID" + } + ], + "WSCInstallNameSpaceEx": [ + { + "name": "lpszIdentifier", + "type": "LPWSTR" + }, + { + "name": "lpszPathName", + "type": "LPWSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpProviderSpecific", + "type": "LPBLOB" + } + ], + "WSCInstallNameSpaceEx32": [ + { + "name": "lpszIdentifier", + "type": "LPWSTR" + }, + { + "name": "lpszPathName", + "type": "LPWSTR" + }, + { + "name": "dwNameSpace", + "type": "DWORD" + }, + { + "name": "dwVersion", + "type": "DWORD" + }, + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpProviderSpecific", + "type": "LPBLOB" + } + ], + "WSCEnableNSProvider": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "fEnable", + "type": "BOOL" + } + ], + "WSCEnableNSProvider32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "fEnable", + "type": "BOOL" + } + ], + "WSCInstallProviderAndChains64_32": [ + { + "name": "lpProviderId", + "type": "LPGUID" + }, + { + "name": "lpszProviderDllPath", + "type": "LPWSTR" + }, + { + "name": "lpszProviderDllPath32", + "type": "LPWSTR" + }, + { + "name": "lpszLspName", + "type": "LPWSTR" + }, + { + "name": "dwServiceFlags", + "type": "DWORD" + }, + { + "name": "lpProtocolInfoList", + "type": "LPWSAPROTOCOL_INFOW" + }, + { + "name": "dwNumberOfEntries", + "type": "DWORD" + }, + { + "name": "lpdwCatalogEntryId", + "type": "LPDWORD" + }, + { + "name": "lpErrno", + "type": "LPINT" + } + ], + "WSAAdvertiseProvider": [ + { + "name": "puuidProviderId", + "type": "GUID" + }, + { + "name": "pNSPv2Routine", + "type": "LPCNSPV2_ROUTINE" + } + ], + "WSAUnadvertiseProvider": [ + { + "name": "puuidProviderId", + "type": "GUID" + } + ], + "WSAProviderCompleteAsyncCall": [ + { + "name": "hAsyncCall", + "type": "HANDLE" + }, + { + "name": "iRetCode", + "type": "INT" + } + ], + "inet_addr": [ + { + "name": "cp", + "type": "char" + } + ], + "WSAAsyncGetHostByName": [ + { + "name": "hWnd", + "type": "HWND" + }, + { + "name": "wMsg", + "type": "u_int" + }, + { + "name": "name", + "type": "char" + }, + { + "name": "buf", + "type": "char" + }, + { + "name": "buflen", + "type": "int" + } + ], + "WSAAsyncGetHostByAddr": [ + { + "name": "hWnd", + "type": "HWND" + }, { - "name": "s", - "type": "SOCKET" + "name": "wMsg", + "type": "u_int" }, { "name": "addr", - "type": { - "name": "sockaddr", - "data_type": "Struct", - "elements": [] - } + "type": "char" }, { - "name": "addrlen", + "name": "len", "type": "int" - } - ], - "bind": [ + }, { - "name": "s", - "type": "SOCKET" + "name": "type", + "type": "int" }, { - "name": "name", - "type": { - "name": "sockaddr", - "data_type": "Struct", - "elements": [] - } + "name": "buf", + "type": "char" }, { - "name": "namelen", + "name": "buflen", "type": "int" } ], - "closesocket": [ + "__WSAFDIsSet": [ { - "name": "s", + "name": "fd", "type": "SOCKET" + }, + { + "name": "VOID", + "type": "fd_set" } ], - "connect": [ + "bind": [ { "name": "s", "type": "SOCKET" @@ -69,6 +1175,12 @@ "type": "int" } ], + "closesocket": [ + { + "name": "s", + "type": "SOCKET" + } + ], "ioctlsocket": [ { "name": "s", @@ -153,22 +1265,6 @@ "type": "u_short" } ], - "inet_addr": [ - { - "name": "cp", - "type": "char" - } - ], - "listen": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "backlog", - "type": "int" - } - ], "ntohl": [ { "name": "netlong", @@ -229,50 +1325,6 @@ "type": "int" } ], - "select": [ - { - "name": "nfds", - "type": "int" - }, - { - "name": "readfds", - "type": "fd_set" - }, - { - "name": "writefds", - "type": "fd_set" - }, - { - "name": "exceptfds", - "type": "fd_set" - }, - { - "name": "timeout", - "type": { - "name": "timeval", - "data_type": "Struct", - "elements": [] - } - } - ], - "send": [ - { - "name": "s", - "type": "SOCKET" - }, - { - "name": "buf", - "type": "char" - }, - { - "name": "len", - "type": "int" - }, - { - "name": "flags", - "type": "int" - } - ], "sendto": [ { "name": "s", @@ -335,20 +1387,6 @@ "type": "int" } ], - "socket": [ - { - "name": "af", - "type": "int" - }, - { - "name": "type", - "type": "int" - }, - { - "name": "protocol", - "type": "int" - } - ], "gethostname": [ { "name": "name", @@ -359,16 +1397,6 @@ "type": "int" } ], - "GetHostNameW": [ - { - "name": "name", - "type": "PWSTR" - }, - { - "name": "namelen", - "type": "int" - } - ], "WSAStartup": [ { "name": "wVersionRequested", @@ -493,7 +1521,17 @@ "type": "int" } ], - "WSAAsyncGetHostByName": [ + "WSACancelAsyncRequest": [ + { + "name": "hAsyncTaskHandle", + "type": "HANDLE" + } + ], + "WSAAsyncSelect": [ + { + "name": "s", + "type": "SOCKET" + }, { "name": "hWnd", "type": "HWND" @@ -503,70 +1541,122 @@ "type": "u_int" }, { - "name": "name", - "type": "char" + "name": "lEvent", + "type": "long" + } + ], + "accept": [ + { + "name": "s", + "type": "SOCKET" }, { - "name": "buf", - "type": "char" + "name": "addr", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } }, { - "name": "buflen", + "name": "addrlen", "type": "int" } ], - "WSAAsyncGetHostByAddr": [ + "connect": [ { - "name": "hWnd", - "type": "HWND" + "name": "s", + "type": "SOCKET" }, { - "name": "wMsg", - "type": "u_int" + "name": "name", + "type": { + "name": "sockaddr", + "data_type": "Struct", + "elements": [] + } }, { - "name": "addr", - "type": "char" + "name": "namelen", + "type": "int" + } + ], + "listen": [ + { + "name": "s", + "type": "SOCKET" }, { - "name": "len", + "name": "backlog", "type": "int" - }, + } + ], + "select": [ { - "name": "type", + "name": "nfds", "type": "int" }, + { + "name": "readfds", + "type": "fd_set" + }, + { + "name": "writefds", + "type": "fd_set" + }, + { + "name": "exceptfds", + "type": "fd_set" + }, + { + "name": "timeout", + "type": { + "name": "timeval", + "data_type": "Struct", + "elements": [] + } + } + ], + "send": [ + { + "name": "s", + "type": "SOCKET" + }, { "name": "buf", "type": "char" }, { - "name": "buflen", + "name": "len", "type": "int" - } - ], - "WSACancelAsyncRequest": [ + }, { - "name": "hAsyncTaskHandle", - "type": "HANDLE" + "name": "flags", + "type": "int" } ], - "WSAAsyncSelect": [ + "socket": [ { - "name": "s", - "type": "SOCKET" + "name": "af", + "type": "int" }, { - "name": "hWnd", - "type": "HWND" + "name": "type", + "type": "int" }, { - "name": "wMsg", - "type": "u_int" + "name": "protocol", + "type": "int" + } + ], + "GetHostNameW": [ + { + "name": "name", + "type": "PWSTR" }, { - "name": "lEvent", - "type": "long" + "name": "namelen", + "type": "int" } ], "WSAAccept": [ diff --git a/qiling/extensions/windows_sdk/wsbonline.json b/qiling/extensions/windows_sdk/wsbonline_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wsbonline.json rename to qiling/extensions/windows_sdk/wsbonline_dll.json diff --git a/qiling/extensions/windows_sdk/wscapi.json b/qiling/extensions/windows_sdk/wscapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wscapi.json rename to qiling/extensions/windows_sdk/wscapi_dll.json diff --git a/qiling/extensions/windows_sdk/WSClient.json b/qiling/extensions/windows_sdk/wsclient_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/WSClient.json rename to qiling/extensions/windows_sdk/wsclient_dll.json diff --git a/qiling/extensions/windows_sdk/Wsdapi.json b/qiling/extensions/windows_sdk/wsdapi_dll.json similarity index 74% rename from qiling/extensions/windows_sdk/Wsdapi.json rename to qiling/extensions/windows_sdk/wsdapi_dll.json index 79ab5ba33..fe208dd73 100644 --- a/qiling/extensions/windows_sdk/Wsdapi.json +++ b/qiling/extensions/windows_sdk/wsdapi_dll.json @@ -1,4 +1,10 @@ { + "WSDCreateOutboundAttachment": [ + { + "name": "ppAttachment", + "type": "IWSDOutboundAttachment" + } + ], "WSDXMLGetNameFromBuiltinNamespace": [ { "name": "pszNamespace", diff --git a/qiling/extensions/windows_sdk/Wsnmp32.json b/qiling/extensions/windows_sdk/wsnmp32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/Wsnmp32.json rename to qiling/extensions/windows_sdk/wsnmp32_dll.json diff --git a/qiling/extensions/windows_sdk/wtsapi32.json b/qiling/extensions/windows_sdk/wtsapi32_dll.json similarity index 97% rename from qiling/extensions/windows_sdk/wtsapi32.json rename to qiling/extensions/windows_sdk/wtsapi32_dll.json index ba07c4cdd..157b63fd7 100644 --- a/qiling/extensions/windows_sdk/wtsapi32.json +++ b/qiling/extensions/windows_sdk/wtsapi32_dll.json @@ -1,4 +1,26 @@ { + "WTSSetRenderHint": [ + { + "name": "pRenderHintID", + "type": "UINT64" + }, + { + "name": "hwndOwner", + "type": "HWND" + }, + { + "name": "renderHintType", + "type": "DWORD" + }, + { + "name": "cbHintDataLength", + "type": "DWORD" + }, + { + "name": "pHintData", + "type": "BYTE" + } + ], "WTSStopRemoteControlSession": [ { "name": "LogonId", diff --git a/qiling/extensions/windows_sdk/xinput1_4.json b/qiling/extensions/windows_sdk/xinput1_4_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/xinput1_4.json rename to qiling/extensions/windows_sdk/xinput1_4_dll.json diff --git a/qiling/extensions/windows_sdk/xpsprint.json b/qiling/extensions/windows_sdk/xpsprint_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/xpsprint.json rename to qiling/extensions/windows_sdk/xpsprint_dll.json From 71cb0701869f4aa12343cada227e290e17476202 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Thu, 18 Jun 2020 20:18:12 +0800 Subject: [PATCH 05/86] update windows_sdk json file dir and add convert script --- .../windows_sdk/{ => def}/aclui_dll.json | 0 .../windows_sdk/{ => def}/advapi32_dll.json | 0 .../windows_sdk/{ => def}/advpack_dll.json | 0 .../windows_sdk/{ => def}/amsi_dll.json | 0 ...pi-ms-win-appmodel-runtime-l1-1-2_dll.json | 0 .../api-ms-win-core-enclave-l1-1-0_dll.json | 0 ...ms-win-core-featurestaging-l1-1-0_dll.json | 0 .../api-ms-win-core-heap-l1-1-0_dll.json | 0 ...-ms-win-core-libraryloader-l1-1-1_dll.json | 0 ...i-ms-win-core-localization-l1-2-1_dll.json | 0 .../api-ms-win-core-memory-l1-1-4_dll.json | 0 .../api-ms-win-core-memory-l1-1-5_dll.json | 0 ...in-core-processenvironment-l1-1-0_dll.json | 0 .../api-ms-win-core-slapi-l1-1-0_dll.json | 0 .../api-ms-win-core-sysinfo-l1-2-3_dll.json | 0 .../api-ms-win-core-version-l1-1-0_dll.json | 0 .../api-ms-win-core-version-l1-2-3_dll.json | 0 ...pi-ms-win-core-winrt-error-l1-1-1_dll.json | 0 .../api-ms-win-shcore-thread-l1-1-0_dll.json | 0 .../api-ms-win-wsl-api-l1-1-0_dll.json | 0 .../windows_sdk/{ => def}/apphelp_dll.json | 0 .../windows_sdk/{ => def}/atlthunk_dll.json | 0 .../windows_sdk/{ => def}/authz_dll.json | 0 .../windows_sdk/{ => def}/avicap32_dll.json | 0 .../windows_sdk/{ => def}/avifil32_dll.json | 0 .../windows_sdk/{ => def}/avrt_dll.json | 0 .../windows_sdk/{ => def}/bcrypt_dll.json | 0 .../windows_sdk/{ => def}/bcrypt_h.json | 0 .../{ => def}/bluetoothapis_dll.json | 0 .../windows_sdk/{ => def}/bthprops_cpl.json | 0 .../windows_sdk/{ => def}/bthprops_dll.json | 0 .../windows_sdk/{ => def}/c_g18030_dll.json | 0 .../windows_sdk/{ => def}/cabinet_dll.json | 0 .../windows_sdk/{ => def}/certadm_dll.json | 0 .../windows_sdk/{ => def}/cfgmgr32_dll.json | 0 .../windows_sdk/{ => def}/cfgmgr32_lib.json | 0 .../windows_sdk/{ => def}/cldapi_dll.json | 0 .../windows_sdk/{ => def}/clfsw32_dll.json | 0 .../windows_sdk/{ => def}/clusapi_dll.json | 0 .../windows_sdk/{ => def}/combase_dll.json | 0 .../windows_sdk/{ => def}/comctl32_dll.json | 0 .../windows_sdk/{ => def}/comdlg32_dll.json | 0 .../windows_sdk/{ => def}/comsvcs_dll.json | 0 .../windows_sdk/{ => def}/credui_dll.json | 0 .../windows_sdk/{ => def}/crypt32_dll.json | 0 .../windows_sdk/{ => def}/cryptdlg_dll.json | 0 .../windows_sdk/{ => def}/cryptnet_dll.json | 0 .../windows_sdk/{ => def}/cryptui_dll.json | 0 .../windows_sdk/{ => def}/cryptxml_dll.json | 0 .../windows_sdk/{ => def}/cscapi_dll.json | 0 .../windows_sdk/{ => def}/d2d1_dll.json | 0 .../windows_sdk/{ => def}/d3d10_1_dll.json | 0 .../windows_sdk/{ => def}/d3d10_dll.json | 0 .../windows_sdk/{ => def}/d3d11_dll.json | 0 .../{ => def}/d3d11sdklayers_dll.json | 0 .../windows_sdk/{ => def}/d3d12_dll.json | 0 .../windows_sdk/{ => def}/d3d9_dll.json | 0 .../{ => def}/d3dcompiler_47_dll.json | 0 .../{ => def}/d3dcompiler_dll.json | 0 .../windows_sdk/{ => def}/davclnt_dll.json | 0 .../windows_sdk/{ => def}/dbghelp_dll.json | 0 .../windows_sdk/{ => def}/dciman32_dll.json | 0 .../windows_sdk/{ => def}/ddraw_dll.json | 0 .../{ => def}/deviceaccess_dll.json | 0 .../windows_sdk/{ => def}/dflayout_dll.json | 0 .../windows_sdk/{ => def}/dhcpcsvc6_dll.json | 0 .../windows_sdk/{ => def}/dhcpcsvc_dll.json | 0 .../windows_sdk/{ => def}/dhcpsapi_dll.json | 0 .../windows_sdk/{ => def}/dnsapi_dll.json | 0 .../windows_sdk/{ => def}/drt_dll.json | 0 .../windows_sdk/{ => def}/dssec_dll.json | 0 .../windows_sdk/{ => def}/dwmapi_dll.json | 0 .../windows_sdk/{ => def}/dxgi_dll.json | 0 .../windows_sdk/{ => def}/dxgidebug_dll.json | 0 .../windows_sdk/{ => def}/dxva2_dll.json | 0 .../windows_sdk/{ => def}/eappcfg_dll.json | 0 .../windows_sdk/{ => def}/elscore_dll.json | 0 .../windows_sdk/{ => def}/evr_dll.json | 0 .../windows_sdk/{ => def}/faultrep_dll.json | 0 .../{ => def}/firewallapi_dll.json | 0 .../windows_sdk/{ => def}/fltlib_dll.json | 0 .../windows_sdk/{ => def}/fontsub_dll.json | 0 .../windows_sdk/{ => def}/fwpuclnt_dll.json | 0 .../windows_sdk/{ => def}/fxsutility_dll.json | 0 .../windows_sdk/{ => def}/gamemode_dll.json | 0 .../windows_sdk/{ => def}/gdi32_dll.json | 0 .../windows_sdk/{ => def}/gpedit_dll.json | 0 .../windows_sdk/{ => def}/htmlhelp_dll.json | 0 .../windows_sdk/{ => def}/imagehlp_dll.json | 0 .../windows_sdk/{ => def}/imm32_dll.json | 0 .../windows_sdk/{ => def}/inetcfg_dll.json | 0 .../windows_sdk/{ => def}/instrsa5_dll.json | 0 .../windows_sdk/{ => def}/iphlpapi_dll.json | 0 .../windows_sdk/{ => def}/jsproxy_dll.json | 0 .../windows_sdk/{ => def}/kernel32_dll.json | 0 .../windows_sdk/{ => def}/kernel32_lib.json | 0 .../windows_sdk/{ => def}/kernel_dll.json | 0 .../windows_sdk/{ => def}/kernelbase_dll.json | 0 .../windows_sdk/{ => def}/ktmw32_dll.json | 0 .../windows_sdk/{ => def}/loadperf_dll.json | 0 .../windows_sdk/{ => def}/lz32_dll.json | 0 .../{ => def}/mdmregistration_dll.json | 0 .../windows_sdk/{ => def}/mf_dll.json | 0 .../windows_sdk/{ => def}/mfplat_dll.json | 0 .../windows_sdk/{ => def}/mfplay_dll.json | 0 .../{ => def}/mfsensorgroup_dll.json | 0 .../{ => def}/mfsensorgroup_lib.json | 0 .../windows_sdk/{ => def}/mgmtapi_dll.json | 0 .../windows_sdk/{ => def}/mi_dll.json | 0 .../windows_sdk/{ => def}/mmdevapi_dll.json | 0 .../{ => def}/mmtasksignal_dll.json | 0 .../windows_sdk/{ => def}/mpclient_dll.json | 0 .../windows_sdk/{ => def}/mpr_dll.json | 0 .../windows_sdk/{ => def}/mprapi_dll.json | 0 .../windows_sdk/{ => def}/mrmsupport_dll.json | 0 .../windows_sdk/{ => def}/msajapi_dll.json | 0 .../windows_sdk/{ => def}/msctf_dll.json | 0 .../windows_sdk/{ => def}/msdmo_dll.json | 0 .../windows_sdk/{ => def}/msdrm_dll.json | 0 .../windows_sdk/{ => def}/msgina_dll.json | 0 .../windows_sdk/{ => def}/msi_dll.json | 0 .../windows_sdk/{ => def}/msimg32_dll.json | 0 .../windows_sdk/{ => def}/msports_dll.json | 0 .../windows_sdk/{ => def}/mstask_dll.json | 0 .../windows_sdk/{ => def}/msvfw32_dll.json | 0 .../windows_sdk/{ => def}/mswsock_dll.json | 0 .../windows_sdk/{ => def}/mtxdm_dll.json | 0 .../windows_sdk/{ => def}/mydocs_dll.json | 0 .../windows_sdk/{ => def}/ncrypt_dll.json | 0 .../windows_sdk/{ => def}/netapi32_dll.json | 0 .../windows_sdk/{ => def}/netsh_exe.json | 0 .../windows_sdk/{ => def}/netshell_dll.json | 0 .../windows_sdk/{ => def}/newdev_dll.json | 0 .../windows_sdk/{ => def}/ninput_dll.json | 0 .../windows_sdk/{None.json => def/none.json} | 0 .../windows_sdk/{ => def}/normaliz_dll.json | 0 .../windows_sdk/{ => def}/ntdll_dll.json | 0 .../windows_sdk/{ => def}/ntdsapi_dll.json | 0 .../windows_sdk/{ => def}/ntlanman_dll.json | 0 .../windows_sdk/{ => def}/ntmsapi_dll.json | 0 .../windows_sdk/{ => def}/ntquery_dll.json | 0 .../windows_sdk/{ => def}/ole32_dll.json | 0 .../windows_sdk/{ => def}/oleacc_dll.json | 0 .../windows_sdk/{ => def}/oleaut32_dll.json | 0 .../windows_sdk/{ => def}/oledlg_dll.json | 0 .../ondemandconnroutehelper_dll.json | 0 .../windows_sdk/{ => def}/opengl32_dll.json | 0 .../windows_sdk/{ => def}/p2p_dll.json | 0 .../windows_sdk/{ => def}/p2pgraph_dll.json | 0 .../windows_sdk/{ => def}/pathcch_lib.json | 0 .../windows_sdk/{ => def}/pdh_dll.json | 0 .../windows_sdk/{ => def}/peerdist_dll.json | 0 .../windows_sdk/{ => def}/powrprof_dll.json | 0 .../windows_sdk/{ => def}/prntvpt_dll.json | 0 .../windows_sdk/{ => def}/propsys_dll.json | 0 .../windows_sdk/{ => def}/query_dll.json | 0 .../windows_sdk/{ => def}/rasapi32_dll.json | 0 .../windows_sdk/{ => def}/rasdlg_dll.json | 0 .../windows_sdk/{ => def}/rasman_dll.json | 0 .../windows_sdk/{ => def}/roerrorapi_h.json | 0 .../windows_sdk/{ => def}/rometadata_dll.json | 0 .../windows_sdk/{ => def}/rpcns4_dll.json | 0 .../windows_sdk/{ => def}/rpcrt4_dll.json | 0 .../windows_sdk/{ => def}/rstrtmgr_dll.json | 0 .../windows_sdk/{ => def}/rtm_dll.json | 0 .../{ => def}/runtimeobject_lib.json | 0 .../windows_sdk/{ => def}/sas_dll.json | 0 .../windows_sdk/{ => def}/scarddlg_dll.json | 0 .../windows_sdk/{ => def}/schannel_dll.json | 0 .../{ => def}/secforwarder_dll.json | 0 .../windows_sdk/{ => def}/sechost_dll.json | 0 .../windows_sdk/{ => def}/secur32_dll.json | 0 .../windows_sdk/{ => def}/sensapi_dll.json | 0 .../windows_sdk/{ => def}/setupapi_dll.json | 0 .../windows_sdk/{ => def}/setupapi_lib.json | 0 .../windows_sdk/{ => def}/sfc_dll.json | 0 .../windows_sdk/{ => def}/shcore_dll.json | 0 .../windows_sdk/{ => def}/shdocvw_dll.json | 0 .../windows_sdk/{ => def}/shell32_dll.json | 0 .../windows_sdk/{ => def}/shlobj_core_h.json | 0 .../windows_sdk/{ => def}/shlwapi_dll.json | 0 .../windows_sdk/{ => def}/slc_dll.json | 0 .../windows_sdk/{ => def}/slcext_dll.json | 0 .../windows_sdk/{ => def}/slwga_dll.json | 0 .../windows_sdk/{ => def}/snmpapi_dll.json | 0 .../windows_sdk/{ => def}/spoolss_dll.json | 0 .../windows_sdk/{ => def}/srclient_dll.json | 0 .../windows_sdk/{ => def}/srpapi_dll.json | 0 .../windows_sdk/{ => def}/storprop_dll.json | 0 .../windows_sdk/{ => def}/sxs_dll.json | 0 .../windows_sdk/{ => def}/t2embed_dll.json | 0 .../windows_sdk/{ => def}/tbs_dll.json | 0 .../windows_sdk/{ => def}/tdh_dll.json | 0 .../{ => def}/tokenbinding_dll.json | 0 .../{ => def}/twinapi_core_dll.json | 0 .../windows_sdk/{ => def}/txfw32_dll.json | 0 .../windows_sdk/{ => def}/ualapi_dll.json | 0 .../windows_sdk/{ => def}/url_dll.json | 0 .../windows_sdk/{ => def}/urlmon_dll.json | 0 .../windows_sdk/{ => def}/user32_dll.json | 0 .../windows_sdk/{ => def}/userenv_dll.json | 0 .../windows_sdk/{ => def}/usp10_dll.json | 0 .../windows_sdk/{ => def}/uxtheme_dll.json | 0 .../windows_sdk/{ => def}/vdmdbg_dll.json | 0 .../windows_sdk/{ => def}/verifier_dll.json | 0 .../windows_sdk/{ => def}/vertdll_dll.json | 0 .../windows_sdk/{ => def}/virtdisk_dll.json | 0 .../windows_sdk/{ => def}/wcmapi_dll.json | 0 .../windows_sdk/{ => def}/wdsbp_dll.json | 0 .../{ => def}/wdsclientapi_dll.json | 0 .../windows_sdk/{ => def}/wdsmc_dll.json | 0 .../windows_sdk/{ => def}/wdspxe_dll.json | 0 .../windows_sdk/{ => def}/wdstptc_dll.json | 0 .../windows_sdk/{ => def}/websocket_dll.json | 0 .../windows_sdk/{ => def}/wecapi_dll.json | 0 .../windows_sdk/{ => def}/wer_dll.json | 0 .../windows_sdk/{ => def}/wevtapi_dll.json | 0 .../windows_sdk/{ => def}/winbio_dll.json | 0 .../{ => def}/windows_media_audio_dll.json | 0 .../{ => def}/windows_networking_dll.json | 0 .../{ => def}/windows_ui_xaml_dll.json | 0 .../windows_sdk/{ => def}/winhttp_dll.json | 0 .../windows_sdk/{ => def}/wininet_dll.json | 0 .../windows_sdk/{ => def}/winmm_dll.json | 0 .../windows_sdk/{ => def}/winmmbse_dll.json | 0 .../windows_sdk/{ => def}/winrttype_lib.json | 0 .../windows_sdk/{ => def}/winscard_dll.json | 0 .../windows_sdk/{ => def}/winspool_drv.json | 0 .../windows_sdk/{ => def}/winstring_h.json | 0 .../windows_sdk/{ => def}/wintrust_dll.json | 0 .../windows_sdk/{ => def}/wintypes_dll.json | 0 .../windows_sdk/{ => def}/winusb_dll.json | 0 .../windows_sdk/{ => def}/wlanapi_dll.json | 0 .../windows_sdk/{ => def}/wlanui_dll.json | 0 .../windows_sdk/{ => def}/wmvcore_dll.json | 0 .../windows_sdk/{ => def}/wofutil_dll.json | 0 .../windows_sdk/{ => def}/ws2_32_dll.json | 0 .../windows_sdk/{ => def}/wsbonline_dll.json | 0 .../windows_sdk/{ => def}/wscapi_dll.json | 0 .../windows_sdk/{ => def}/wsclient_dll.json | 0 .../windows_sdk/{ => def}/wsdapi_dll.json | 0 .../windows_sdk/{ => def}/wsnmp32_dll.json | 0 .../windows_sdk/{ => def}/wtsapi32_dll.json | 0 .../windows_sdk/{ => def}/xinput1_4_dll.json | 0 .../windows_sdk/{ => def}/xpsprint_dll.json | 0 qiling/extensions/windows_sdk/winsdk_dump.py | 90 +++++++++++++++++++ 246 files changed, 90 insertions(+) rename qiling/extensions/windows_sdk/{ => def}/aclui_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/advapi32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/advpack_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/amsi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-appmodel-runtime-l1-1-2_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-enclave-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-featurestaging-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-heap-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-libraryloader-l1-1-1_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-localization-l1-2-1_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-memory-l1-1-4_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-memory-l1-1-5_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-processenvironment-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-slapi-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-sysinfo-l1-2-3_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-version-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-version-l1-2-3_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-core-winrt-error-l1-1-1_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-shcore-thread-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/api-ms-win-wsl-api-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/apphelp_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/atlthunk_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/authz_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/avicap32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/avifil32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/avrt_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/bcrypt_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/bcrypt_h.json (100%) rename qiling/extensions/windows_sdk/{ => def}/bluetoothapis_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/bthprops_cpl.json (100%) rename qiling/extensions/windows_sdk/{ => def}/bthprops_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/c_g18030_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/cabinet_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/certadm_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/cfgmgr32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/cfgmgr32_lib.json (100%) rename qiling/extensions/windows_sdk/{ => def}/cldapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/clfsw32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/clusapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/combase_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/comctl32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/comdlg32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/comsvcs_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/credui_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/crypt32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/cryptdlg_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/cryptnet_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/cryptui_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/cryptxml_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/cscapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/d2d1_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/d3d10_1_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/d3d10_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/d3d11_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/d3d11sdklayers_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/d3d12_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/d3d9_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/d3dcompiler_47_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/d3dcompiler_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/davclnt_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/dbghelp_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/dciman32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ddraw_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/deviceaccess_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/dflayout_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/dhcpcsvc6_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/dhcpcsvc_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/dhcpsapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/dnsapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/drt_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/dssec_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/dwmapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/dxgi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/dxgidebug_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/dxva2_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/eappcfg_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/elscore_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/evr_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/faultrep_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/firewallapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/fltlib_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/fontsub_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/fwpuclnt_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/fxsutility_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/gamemode_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/gdi32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/gpedit_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/htmlhelp_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/imagehlp_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/imm32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/inetcfg_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/instrsa5_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/iphlpapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/jsproxy_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/kernel32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/kernel32_lib.json (100%) rename qiling/extensions/windows_sdk/{ => def}/kernel_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/kernelbase_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ktmw32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/loadperf_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/lz32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mdmregistration_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mf_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mfplat_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mfplay_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mfsensorgroup_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mfsensorgroup_lib.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mgmtapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mmdevapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mmtasksignal_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mpclient_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mpr_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mprapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mrmsupport_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/msajapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/msctf_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/msdmo_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/msdrm_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/msgina_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/msi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/msimg32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/msports_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mstask_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/msvfw32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mswsock_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mtxdm_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/mydocs_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ncrypt_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/netapi32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/netsh_exe.json (100%) rename qiling/extensions/windows_sdk/{ => def}/netshell_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/newdev_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ninput_dll.json (100%) rename qiling/extensions/windows_sdk/{None.json => def/none.json} (100%) rename qiling/extensions/windows_sdk/{ => def}/normaliz_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ntdll_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ntdsapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ntlanman_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ntmsapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ntquery_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ole32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/oleacc_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/oleaut32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/oledlg_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ondemandconnroutehelper_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/opengl32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/p2p_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/p2pgraph_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/pathcch_lib.json (100%) rename qiling/extensions/windows_sdk/{ => def}/pdh_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/peerdist_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/powrprof_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/prntvpt_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/propsys_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/query_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/rasapi32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/rasdlg_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/rasman_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/roerrorapi_h.json (100%) rename qiling/extensions/windows_sdk/{ => def}/rometadata_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/rpcns4_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/rpcrt4_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/rstrtmgr_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/rtm_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/runtimeobject_lib.json (100%) rename qiling/extensions/windows_sdk/{ => def}/sas_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/scarddlg_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/schannel_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/secforwarder_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/sechost_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/secur32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/sensapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/setupapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/setupapi_lib.json (100%) rename qiling/extensions/windows_sdk/{ => def}/sfc_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/shcore_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/shdocvw_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/shell32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/shlobj_core_h.json (100%) rename qiling/extensions/windows_sdk/{ => def}/shlwapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/slc_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/slcext_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/slwga_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/snmpapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/spoolss_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/srclient_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/srpapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/storprop_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/sxs_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/t2embed_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/tbs_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/tdh_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/tokenbinding_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/twinapi_core_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/txfw32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ualapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/url_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/urlmon_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/user32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/userenv_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/usp10_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/uxtheme_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/vdmdbg_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/verifier_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/vertdll_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/virtdisk_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wcmapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wdsbp_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wdsclientapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wdsmc_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wdspxe_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wdstptc_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/websocket_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wecapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wer_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wevtapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/winbio_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/windows_media_audio_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/windows_networking_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/windows_ui_xaml_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/winhttp_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wininet_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/winmm_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/winmmbse_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/winrttype_lib.json (100%) rename qiling/extensions/windows_sdk/{ => def}/winscard_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/winspool_drv.json (100%) rename qiling/extensions/windows_sdk/{ => def}/winstring_h.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wintrust_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wintypes_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/winusb_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wlanapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wlanui_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wmvcore_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wofutil_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/ws2_32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wsbonline_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wscapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wsclient_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wsdapi_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wsnmp32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/wtsapi32_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/xinput1_4_dll.json (100%) rename qiling/extensions/windows_sdk/{ => def}/xpsprint_dll.json (100%) create mode 100644 qiling/extensions/windows_sdk/winsdk_dump.py diff --git a/qiling/extensions/windows_sdk/aclui_dll.json b/qiling/extensions/windows_sdk/def/aclui_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/aclui_dll.json rename to qiling/extensions/windows_sdk/def/aclui_dll.json diff --git a/qiling/extensions/windows_sdk/advapi32_dll.json b/qiling/extensions/windows_sdk/def/advapi32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/advapi32_dll.json rename to qiling/extensions/windows_sdk/def/advapi32_dll.json diff --git a/qiling/extensions/windows_sdk/advpack_dll.json b/qiling/extensions/windows_sdk/def/advpack_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/advpack_dll.json rename to qiling/extensions/windows_sdk/def/advpack_dll.json diff --git a/qiling/extensions/windows_sdk/amsi_dll.json b/qiling/extensions/windows_sdk/def/amsi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/amsi_dll.json rename to qiling/extensions/windows_sdk/def/amsi_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-appmodel-runtime-l1-1-2_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-appmodel-runtime-l1-1-2_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-appmodel-runtime-l1-1-2_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-appmodel-runtime-l1-1-2_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-enclave-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-enclave-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-enclave-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-featurestaging-l1-1-0_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-featurestaging-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-featurestaging-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-featurestaging-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-heap-l1-1-0_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-heap-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-heap-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-heap-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-libraryloader-l1-1-1_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-libraryloader-l1-1-1_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-libraryloader-l1-1-1_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-libraryloader-l1-1-1_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-localization-l1-2-1_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-localization-l1-2-1_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-localization-l1-2-1_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-localization-l1-2-1_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-4_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-memory-l1-1-4_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-4_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-memory-l1-1-4_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-memory-l1-1-5_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-memory-l1-1-5_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-memory-l1-1-5_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-processenvironment-l1-1-0_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-processenvironment-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-processenvironment-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-processenvironment-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-slapi-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-slapi-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-slapi-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-sysinfo-l1-2-3_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-sysinfo-l1-2-3_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-sysinfo-l1-2-3_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-sysinfo-l1-2-3_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-version-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-version-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-version-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-version-l1-2-3_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-version-l1-2-3_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-version-l1-2-3_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-version-l1-2-3_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-core-winrt-error-l1-1-1_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-core-winrt-error-l1-1-1_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-core-winrt-error-l1-1-1_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-shcore-thread-l1-1-0_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-shcore-thread-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-shcore-thread-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-shcore-thread-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/api-ms-win-wsl-api-l1-1-0_dll.json b/qiling/extensions/windows_sdk/def/api-ms-win-wsl-api-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/api-ms-win-wsl-api-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/def/api-ms-win-wsl-api-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/apphelp_dll.json b/qiling/extensions/windows_sdk/def/apphelp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/apphelp_dll.json rename to qiling/extensions/windows_sdk/def/apphelp_dll.json diff --git a/qiling/extensions/windows_sdk/atlthunk_dll.json b/qiling/extensions/windows_sdk/def/atlthunk_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/atlthunk_dll.json rename to qiling/extensions/windows_sdk/def/atlthunk_dll.json diff --git a/qiling/extensions/windows_sdk/authz_dll.json b/qiling/extensions/windows_sdk/def/authz_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/authz_dll.json rename to qiling/extensions/windows_sdk/def/authz_dll.json diff --git a/qiling/extensions/windows_sdk/avicap32_dll.json b/qiling/extensions/windows_sdk/def/avicap32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/avicap32_dll.json rename to qiling/extensions/windows_sdk/def/avicap32_dll.json diff --git a/qiling/extensions/windows_sdk/avifil32_dll.json b/qiling/extensions/windows_sdk/def/avifil32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/avifil32_dll.json rename to qiling/extensions/windows_sdk/def/avifil32_dll.json diff --git a/qiling/extensions/windows_sdk/avrt_dll.json b/qiling/extensions/windows_sdk/def/avrt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/avrt_dll.json rename to qiling/extensions/windows_sdk/def/avrt_dll.json diff --git a/qiling/extensions/windows_sdk/bcrypt_dll.json b/qiling/extensions/windows_sdk/def/bcrypt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/bcrypt_dll.json rename to qiling/extensions/windows_sdk/def/bcrypt_dll.json diff --git a/qiling/extensions/windows_sdk/bcrypt_h.json b/qiling/extensions/windows_sdk/def/bcrypt_h.json similarity index 100% rename from qiling/extensions/windows_sdk/bcrypt_h.json rename to qiling/extensions/windows_sdk/def/bcrypt_h.json diff --git a/qiling/extensions/windows_sdk/bluetoothapis_dll.json b/qiling/extensions/windows_sdk/def/bluetoothapis_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/bluetoothapis_dll.json rename to qiling/extensions/windows_sdk/def/bluetoothapis_dll.json diff --git a/qiling/extensions/windows_sdk/bthprops_cpl.json b/qiling/extensions/windows_sdk/def/bthprops_cpl.json similarity index 100% rename from qiling/extensions/windows_sdk/bthprops_cpl.json rename to qiling/extensions/windows_sdk/def/bthprops_cpl.json diff --git a/qiling/extensions/windows_sdk/bthprops_dll.json b/qiling/extensions/windows_sdk/def/bthprops_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/bthprops_dll.json rename to qiling/extensions/windows_sdk/def/bthprops_dll.json diff --git a/qiling/extensions/windows_sdk/c_g18030_dll.json b/qiling/extensions/windows_sdk/def/c_g18030_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/c_g18030_dll.json rename to qiling/extensions/windows_sdk/def/c_g18030_dll.json diff --git a/qiling/extensions/windows_sdk/cabinet_dll.json b/qiling/extensions/windows_sdk/def/cabinet_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/cabinet_dll.json rename to qiling/extensions/windows_sdk/def/cabinet_dll.json diff --git a/qiling/extensions/windows_sdk/certadm_dll.json b/qiling/extensions/windows_sdk/def/certadm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/certadm_dll.json rename to qiling/extensions/windows_sdk/def/certadm_dll.json diff --git a/qiling/extensions/windows_sdk/cfgmgr32_dll.json b/qiling/extensions/windows_sdk/def/cfgmgr32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/cfgmgr32_dll.json rename to qiling/extensions/windows_sdk/def/cfgmgr32_dll.json diff --git a/qiling/extensions/windows_sdk/cfgmgr32_lib.json b/qiling/extensions/windows_sdk/def/cfgmgr32_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/cfgmgr32_lib.json rename to qiling/extensions/windows_sdk/def/cfgmgr32_lib.json diff --git a/qiling/extensions/windows_sdk/cldapi_dll.json b/qiling/extensions/windows_sdk/def/cldapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/cldapi_dll.json rename to qiling/extensions/windows_sdk/def/cldapi_dll.json diff --git a/qiling/extensions/windows_sdk/clfsw32_dll.json b/qiling/extensions/windows_sdk/def/clfsw32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/clfsw32_dll.json rename to qiling/extensions/windows_sdk/def/clfsw32_dll.json diff --git a/qiling/extensions/windows_sdk/clusapi_dll.json b/qiling/extensions/windows_sdk/def/clusapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/clusapi_dll.json rename to qiling/extensions/windows_sdk/def/clusapi_dll.json diff --git a/qiling/extensions/windows_sdk/combase_dll.json b/qiling/extensions/windows_sdk/def/combase_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/combase_dll.json rename to qiling/extensions/windows_sdk/def/combase_dll.json diff --git a/qiling/extensions/windows_sdk/comctl32_dll.json b/qiling/extensions/windows_sdk/def/comctl32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/comctl32_dll.json rename to qiling/extensions/windows_sdk/def/comctl32_dll.json diff --git a/qiling/extensions/windows_sdk/comdlg32_dll.json b/qiling/extensions/windows_sdk/def/comdlg32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/comdlg32_dll.json rename to qiling/extensions/windows_sdk/def/comdlg32_dll.json diff --git a/qiling/extensions/windows_sdk/comsvcs_dll.json b/qiling/extensions/windows_sdk/def/comsvcs_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/comsvcs_dll.json rename to qiling/extensions/windows_sdk/def/comsvcs_dll.json diff --git a/qiling/extensions/windows_sdk/credui_dll.json b/qiling/extensions/windows_sdk/def/credui_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/credui_dll.json rename to qiling/extensions/windows_sdk/def/credui_dll.json diff --git a/qiling/extensions/windows_sdk/crypt32_dll.json b/qiling/extensions/windows_sdk/def/crypt32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/crypt32_dll.json rename to qiling/extensions/windows_sdk/def/crypt32_dll.json diff --git a/qiling/extensions/windows_sdk/cryptdlg_dll.json b/qiling/extensions/windows_sdk/def/cryptdlg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/cryptdlg_dll.json rename to qiling/extensions/windows_sdk/def/cryptdlg_dll.json diff --git a/qiling/extensions/windows_sdk/cryptnet_dll.json b/qiling/extensions/windows_sdk/def/cryptnet_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/cryptnet_dll.json rename to qiling/extensions/windows_sdk/def/cryptnet_dll.json diff --git a/qiling/extensions/windows_sdk/cryptui_dll.json b/qiling/extensions/windows_sdk/def/cryptui_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/cryptui_dll.json rename to qiling/extensions/windows_sdk/def/cryptui_dll.json diff --git a/qiling/extensions/windows_sdk/cryptxml_dll.json b/qiling/extensions/windows_sdk/def/cryptxml_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/cryptxml_dll.json rename to qiling/extensions/windows_sdk/def/cryptxml_dll.json diff --git a/qiling/extensions/windows_sdk/cscapi_dll.json b/qiling/extensions/windows_sdk/def/cscapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/cscapi_dll.json rename to qiling/extensions/windows_sdk/def/cscapi_dll.json diff --git a/qiling/extensions/windows_sdk/d2d1_dll.json b/qiling/extensions/windows_sdk/def/d2d1_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/d2d1_dll.json rename to qiling/extensions/windows_sdk/def/d2d1_dll.json diff --git a/qiling/extensions/windows_sdk/d3d10_1_dll.json b/qiling/extensions/windows_sdk/def/d3d10_1_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/d3d10_1_dll.json rename to qiling/extensions/windows_sdk/def/d3d10_1_dll.json diff --git a/qiling/extensions/windows_sdk/d3d10_dll.json b/qiling/extensions/windows_sdk/def/d3d10_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/d3d10_dll.json rename to qiling/extensions/windows_sdk/def/d3d10_dll.json diff --git a/qiling/extensions/windows_sdk/d3d11_dll.json b/qiling/extensions/windows_sdk/def/d3d11_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/d3d11_dll.json rename to qiling/extensions/windows_sdk/def/d3d11_dll.json diff --git a/qiling/extensions/windows_sdk/d3d11sdklayers_dll.json b/qiling/extensions/windows_sdk/def/d3d11sdklayers_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/d3d11sdklayers_dll.json rename to qiling/extensions/windows_sdk/def/d3d11sdklayers_dll.json diff --git a/qiling/extensions/windows_sdk/d3d12_dll.json b/qiling/extensions/windows_sdk/def/d3d12_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/d3d12_dll.json rename to qiling/extensions/windows_sdk/def/d3d12_dll.json diff --git a/qiling/extensions/windows_sdk/d3d9_dll.json b/qiling/extensions/windows_sdk/def/d3d9_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/d3d9_dll.json rename to qiling/extensions/windows_sdk/def/d3d9_dll.json diff --git a/qiling/extensions/windows_sdk/d3dcompiler_47_dll.json b/qiling/extensions/windows_sdk/def/d3dcompiler_47_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/d3dcompiler_47_dll.json rename to qiling/extensions/windows_sdk/def/d3dcompiler_47_dll.json diff --git a/qiling/extensions/windows_sdk/d3dcompiler_dll.json b/qiling/extensions/windows_sdk/def/d3dcompiler_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/d3dcompiler_dll.json rename to qiling/extensions/windows_sdk/def/d3dcompiler_dll.json diff --git a/qiling/extensions/windows_sdk/davclnt_dll.json b/qiling/extensions/windows_sdk/def/davclnt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/davclnt_dll.json rename to qiling/extensions/windows_sdk/def/davclnt_dll.json diff --git a/qiling/extensions/windows_sdk/dbghelp_dll.json b/qiling/extensions/windows_sdk/def/dbghelp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dbghelp_dll.json rename to qiling/extensions/windows_sdk/def/dbghelp_dll.json diff --git a/qiling/extensions/windows_sdk/dciman32_dll.json b/qiling/extensions/windows_sdk/def/dciman32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dciman32_dll.json rename to qiling/extensions/windows_sdk/def/dciman32_dll.json diff --git a/qiling/extensions/windows_sdk/ddraw_dll.json b/qiling/extensions/windows_sdk/def/ddraw_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ddraw_dll.json rename to qiling/extensions/windows_sdk/def/ddraw_dll.json diff --git a/qiling/extensions/windows_sdk/deviceaccess_dll.json b/qiling/extensions/windows_sdk/def/deviceaccess_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/deviceaccess_dll.json rename to qiling/extensions/windows_sdk/def/deviceaccess_dll.json diff --git a/qiling/extensions/windows_sdk/dflayout_dll.json b/qiling/extensions/windows_sdk/def/dflayout_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dflayout_dll.json rename to qiling/extensions/windows_sdk/def/dflayout_dll.json diff --git a/qiling/extensions/windows_sdk/dhcpcsvc6_dll.json b/qiling/extensions/windows_sdk/def/dhcpcsvc6_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dhcpcsvc6_dll.json rename to qiling/extensions/windows_sdk/def/dhcpcsvc6_dll.json diff --git a/qiling/extensions/windows_sdk/dhcpcsvc_dll.json b/qiling/extensions/windows_sdk/def/dhcpcsvc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dhcpcsvc_dll.json rename to qiling/extensions/windows_sdk/def/dhcpcsvc_dll.json diff --git a/qiling/extensions/windows_sdk/dhcpsapi_dll.json b/qiling/extensions/windows_sdk/def/dhcpsapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dhcpsapi_dll.json rename to qiling/extensions/windows_sdk/def/dhcpsapi_dll.json diff --git a/qiling/extensions/windows_sdk/dnsapi_dll.json b/qiling/extensions/windows_sdk/def/dnsapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dnsapi_dll.json rename to qiling/extensions/windows_sdk/def/dnsapi_dll.json diff --git a/qiling/extensions/windows_sdk/drt_dll.json b/qiling/extensions/windows_sdk/def/drt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/drt_dll.json rename to qiling/extensions/windows_sdk/def/drt_dll.json diff --git a/qiling/extensions/windows_sdk/dssec_dll.json b/qiling/extensions/windows_sdk/def/dssec_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dssec_dll.json rename to qiling/extensions/windows_sdk/def/dssec_dll.json diff --git a/qiling/extensions/windows_sdk/dwmapi_dll.json b/qiling/extensions/windows_sdk/def/dwmapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dwmapi_dll.json rename to qiling/extensions/windows_sdk/def/dwmapi_dll.json diff --git a/qiling/extensions/windows_sdk/dxgi_dll.json b/qiling/extensions/windows_sdk/def/dxgi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dxgi_dll.json rename to qiling/extensions/windows_sdk/def/dxgi_dll.json diff --git a/qiling/extensions/windows_sdk/dxgidebug_dll.json b/qiling/extensions/windows_sdk/def/dxgidebug_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dxgidebug_dll.json rename to qiling/extensions/windows_sdk/def/dxgidebug_dll.json diff --git a/qiling/extensions/windows_sdk/dxva2_dll.json b/qiling/extensions/windows_sdk/def/dxva2_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/dxva2_dll.json rename to qiling/extensions/windows_sdk/def/dxva2_dll.json diff --git a/qiling/extensions/windows_sdk/eappcfg_dll.json b/qiling/extensions/windows_sdk/def/eappcfg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/eappcfg_dll.json rename to qiling/extensions/windows_sdk/def/eappcfg_dll.json diff --git a/qiling/extensions/windows_sdk/elscore_dll.json b/qiling/extensions/windows_sdk/def/elscore_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/elscore_dll.json rename to qiling/extensions/windows_sdk/def/elscore_dll.json diff --git a/qiling/extensions/windows_sdk/evr_dll.json b/qiling/extensions/windows_sdk/def/evr_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/evr_dll.json rename to qiling/extensions/windows_sdk/def/evr_dll.json diff --git a/qiling/extensions/windows_sdk/faultrep_dll.json b/qiling/extensions/windows_sdk/def/faultrep_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/faultrep_dll.json rename to qiling/extensions/windows_sdk/def/faultrep_dll.json diff --git a/qiling/extensions/windows_sdk/firewallapi_dll.json b/qiling/extensions/windows_sdk/def/firewallapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/firewallapi_dll.json rename to qiling/extensions/windows_sdk/def/firewallapi_dll.json diff --git a/qiling/extensions/windows_sdk/fltlib_dll.json b/qiling/extensions/windows_sdk/def/fltlib_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/fltlib_dll.json rename to qiling/extensions/windows_sdk/def/fltlib_dll.json diff --git a/qiling/extensions/windows_sdk/fontsub_dll.json b/qiling/extensions/windows_sdk/def/fontsub_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/fontsub_dll.json rename to qiling/extensions/windows_sdk/def/fontsub_dll.json diff --git a/qiling/extensions/windows_sdk/fwpuclnt_dll.json b/qiling/extensions/windows_sdk/def/fwpuclnt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/fwpuclnt_dll.json rename to qiling/extensions/windows_sdk/def/fwpuclnt_dll.json diff --git a/qiling/extensions/windows_sdk/fxsutility_dll.json b/qiling/extensions/windows_sdk/def/fxsutility_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/fxsutility_dll.json rename to qiling/extensions/windows_sdk/def/fxsutility_dll.json diff --git a/qiling/extensions/windows_sdk/gamemode_dll.json b/qiling/extensions/windows_sdk/def/gamemode_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/gamemode_dll.json rename to qiling/extensions/windows_sdk/def/gamemode_dll.json diff --git a/qiling/extensions/windows_sdk/gdi32_dll.json b/qiling/extensions/windows_sdk/def/gdi32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/gdi32_dll.json rename to qiling/extensions/windows_sdk/def/gdi32_dll.json diff --git a/qiling/extensions/windows_sdk/gpedit_dll.json b/qiling/extensions/windows_sdk/def/gpedit_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/gpedit_dll.json rename to qiling/extensions/windows_sdk/def/gpedit_dll.json diff --git a/qiling/extensions/windows_sdk/htmlhelp_dll.json b/qiling/extensions/windows_sdk/def/htmlhelp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/htmlhelp_dll.json rename to qiling/extensions/windows_sdk/def/htmlhelp_dll.json diff --git a/qiling/extensions/windows_sdk/imagehlp_dll.json b/qiling/extensions/windows_sdk/def/imagehlp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/imagehlp_dll.json rename to qiling/extensions/windows_sdk/def/imagehlp_dll.json diff --git a/qiling/extensions/windows_sdk/imm32_dll.json b/qiling/extensions/windows_sdk/def/imm32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/imm32_dll.json rename to qiling/extensions/windows_sdk/def/imm32_dll.json diff --git a/qiling/extensions/windows_sdk/inetcfg_dll.json b/qiling/extensions/windows_sdk/def/inetcfg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/inetcfg_dll.json rename to qiling/extensions/windows_sdk/def/inetcfg_dll.json diff --git a/qiling/extensions/windows_sdk/instrsa5_dll.json b/qiling/extensions/windows_sdk/def/instrsa5_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/instrsa5_dll.json rename to qiling/extensions/windows_sdk/def/instrsa5_dll.json diff --git a/qiling/extensions/windows_sdk/iphlpapi_dll.json b/qiling/extensions/windows_sdk/def/iphlpapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/iphlpapi_dll.json rename to qiling/extensions/windows_sdk/def/iphlpapi_dll.json diff --git a/qiling/extensions/windows_sdk/jsproxy_dll.json b/qiling/extensions/windows_sdk/def/jsproxy_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/jsproxy_dll.json rename to qiling/extensions/windows_sdk/def/jsproxy_dll.json diff --git a/qiling/extensions/windows_sdk/kernel32_dll.json b/qiling/extensions/windows_sdk/def/kernel32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/kernel32_dll.json rename to qiling/extensions/windows_sdk/def/kernel32_dll.json diff --git a/qiling/extensions/windows_sdk/kernel32_lib.json b/qiling/extensions/windows_sdk/def/kernel32_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/kernel32_lib.json rename to qiling/extensions/windows_sdk/def/kernel32_lib.json diff --git a/qiling/extensions/windows_sdk/kernel_dll.json b/qiling/extensions/windows_sdk/def/kernel_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/kernel_dll.json rename to qiling/extensions/windows_sdk/def/kernel_dll.json diff --git a/qiling/extensions/windows_sdk/kernelbase_dll.json b/qiling/extensions/windows_sdk/def/kernelbase_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/kernelbase_dll.json rename to qiling/extensions/windows_sdk/def/kernelbase_dll.json diff --git a/qiling/extensions/windows_sdk/ktmw32_dll.json b/qiling/extensions/windows_sdk/def/ktmw32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ktmw32_dll.json rename to qiling/extensions/windows_sdk/def/ktmw32_dll.json diff --git a/qiling/extensions/windows_sdk/loadperf_dll.json b/qiling/extensions/windows_sdk/def/loadperf_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/loadperf_dll.json rename to qiling/extensions/windows_sdk/def/loadperf_dll.json diff --git a/qiling/extensions/windows_sdk/lz32_dll.json b/qiling/extensions/windows_sdk/def/lz32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/lz32_dll.json rename to qiling/extensions/windows_sdk/def/lz32_dll.json diff --git a/qiling/extensions/windows_sdk/mdmregistration_dll.json b/qiling/extensions/windows_sdk/def/mdmregistration_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mdmregistration_dll.json rename to qiling/extensions/windows_sdk/def/mdmregistration_dll.json diff --git a/qiling/extensions/windows_sdk/mf_dll.json b/qiling/extensions/windows_sdk/def/mf_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mf_dll.json rename to qiling/extensions/windows_sdk/def/mf_dll.json diff --git a/qiling/extensions/windows_sdk/mfplat_dll.json b/qiling/extensions/windows_sdk/def/mfplat_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mfplat_dll.json rename to qiling/extensions/windows_sdk/def/mfplat_dll.json diff --git a/qiling/extensions/windows_sdk/mfplay_dll.json b/qiling/extensions/windows_sdk/def/mfplay_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mfplay_dll.json rename to qiling/extensions/windows_sdk/def/mfplay_dll.json diff --git a/qiling/extensions/windows_sdk/mfsensorgroup_dll.json b/qiling/extensions/windows_sdk/def/mfsensorgroup_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mfsensorgroup_dll.json rename to qiling/extensions/windows_sdk/def/mfsensorgroup_dll.json diff --git a/qiling/extensions/windows_sdk/mfsensorgroup_lib.json b/qiling/extensions/windows_sdk/def/mfsensorgroup_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/mfsensorgroup_lib.json rename to qiling/extensions/windows_sdk/def/mfsensorgroup_lib.json diff --git a/qiling/extensions/windows_sdk/mgmtapi_dll.json b/qiling/extensions/windows_sdk/def/mgmtapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mgmtapi_dll.json rename to qiling/extensions/windows_sdk/def/mgmtapi_dll.json diff --git a/qiling/extensions/windows_sdk/mi_dll.json b/qiling/extensions/windows_sdk/def/mi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mi_dll.json rename to qiling/extensions/windows_sdk/def/mi_dll.json diff --git a/qiling/extensions/windows_sdk/mmdevapi_dll.json b/qiling/extensions/windows_sdk/def/mmdevapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mmdevapi_dll.json rename to qiling/extensions/windows_sdk/def/mmdevapi_dll.json diff --git a/qiling/extensions/windows_sdk/mmtasksignal_dll.json b/qiling/extensions/windows_sdk/def/mmtasksignal_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mmtasksignal_dll.json rename to qiling/extensions/windows_sdk/def/mmtasksignal_dll.json diff --git a/qiling/extensions/windows_sdk/mpclient_dll.json b/qiling/extensions/windows_sdk/def/mpclient_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mpclient_dll.json rename to qiling/extensions/windows_sdk/def/mpclient_dll.json diff --git a/qiling/extensions/windows_sdk/mpr_dll.json b/qiling/extensions/windows_sdk/def/mpr_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mpr_dll.json rename to qiling/extensions/windows_sdk/def/mpr_dll.json diff --git a/qiling/extensions/windows_sdk/mprapi_dll.json b/qiling/extensions/windows_sdk/def/mprapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mprapi_dll.json rename to qiling/extensions/windows_sdk/def/mprapi_dll.json diff --git a/qiling/extensions/windows_sdk/mrmsupport_dll.json b/qiling/extensions/windows_sdk/def/mrmsupport_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mrmsupport_dll.json rename to qiling/extensions/windows_sdk/def/mrmsupport_dll.json diff --git a/qiling/extensions/windows_sdk/msajapi_dll.json b/qiling/extensions/windows_sdk/def/msajapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/msajapi_dll.json rename to qiling/extensions/windows_sdk/def/msajapi_dll.json diff --git a/qiling/extensions/windows_sdk/msctf_dll.json b/qiling/extensions/windows_sdk/def/msctf_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/msctf_dll.json rename to qiling/extensions/windows_sdk/def/msctf_dll.json diff --git a/qiling/extensions/windows_sdk/msdmo_dll.json b/qiling/extensions/windows_sdk/def/msdmo_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/msdmo_dll.json rename to qiling/extensions/windows_sdk/def/msdmo_dll.json diff --git a/qiling/extensions/windows_sdk/msdrm_dll.json b/qiling/extensions/windows_sdk/def/msdrm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/msdrm_dll.json rename to qiling/extensions/windows_sdk/def/msdrm_dll.json diff --git a/qiling/extensions/windows_sdk/msgina_dll.json b/qiling/extensions/windows_sdk/def/msgina_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/msgina_dll.json rename to qiling/extensions/windows_sdk/def/msgina_dll.json diff --git a/qiling/extensions/windows_sdk/msi_dll.json b/qiling/extensions/windows_sdk/def/msi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/msi_dll.json rename to qiling/extensions/windows_sdk/def/msi_dll.json diff --git a/qiling/extensions/windows_sdk/msimg32_dll.json b/qiling/extensions/windows_sdk/def/msimg32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/msimg32_dll.json rename to qiling/extensions/windows_sdk/def/msimg32_dll.json diff --git a/qiling/extensions/windows_sdk/msports_dll.json b/qiling/extensions/windows_sdk/def/msports_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/msports_dll.json rename to qiling/extensions/windows_sdk/def/msports_dll.json diff --git a/qiling/extensions/windows_sdk/mstask_dll.json b/qiling/extensions/windows_sdk/def/mstask_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mstask_dll.json rename to qiling/extensions/windows_sdk/def/mstask_dll.json diff --git a/qiling/extensions/windows_sdk/msvfw32_dll.json b/qiling/extensions/windows_sdk/def/msvfw32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/msvfw32_dll.json rename to qiling/extensions/windows_sdk/def/msvfw32_dll.json diff --git a/qiling/extensions/windows_sdk/mswsock_dll.json b/qiling/extensions/windows_sdk/def/mswsock_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mswsock_dll.json rename to qiling/extensions/windows_sdk/def/mswsock_dll.json diff --git a/qiling/extensions/windows_sdk/mtxdm_dll.json b/qiling/extensions/windows_sdk/def/mtxdm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mtxdm_dll.json rename to qiling/extensions/windows_sdk/def/mtxdm_dll.json diff --git a/qiling/extensions/windows_sdk/mydocs_dll.json b/qiling/extensions/windows_sdk/def/mydocs_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/mydocs_dll.json rename to qiling/extensions/windows_sdk/def/mydocs_dll.json diff --git a/qiling/extensions/windows_sdk/ncrypt_dll.json b/qiling/extensions/windows_sdk/def/ncrypt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ncrypt_dll.json rename to qiling/extensions/windows_sdk/def/ncrypt_dll.json diff --git a/qiling/extensions/windows_sdk/netapi32_dll.json b/qiling/extensions/windows_sdk/def/netapi32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/netapi32_dll.json rename to qiling/extensions/windows_sdk/def/netapi32_dll.json diff --git a/qiling/extensions/windows_sdk/netsh_exe.json b/qiling/extensions/windows_sdk/def/netsh_exe.json similarity index 100% rename from qiling/extensions/windows_sdk/netsh_exe.json rename to qiling/extensions/windows_sdk/def/netsh_exe.json diff --git a/qiling/extensions/windows_sdk/netshell_dll.json b/qiling/extensions/windows_sdk/def/netshell_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/netshell_dll.json rename to qiling/extensions/windows_sdk/def/netshell_dll.json diff --git a/qiling/extensions/windows_sdk/newdev_dll.json b/qiling/extensions/windows_sdk/def/newdev_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/newdev_dll.json rename to qiling/extensions/windows_sdk/def/newdev_dll.json diff --git a/qiling/extensions/windows_sdk/ninput_dll.json b/qiling/extensions/windows_sdk/def/ninput_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ninput_dll.json rename to qiling/extensions/windows_sdk/def/ninput_dll.json diff --git a/qiling/extensions/windows_sdk/None.json b/qiling/extensions/windows_sdk/def/none.json similarity index 100% rename from qiling/extensions/windows_sdk/None.json rename to qiling/extensions/windows_sdk/def/none.json diff --git a/qiling/extensions/windows_sdk/normaliz_dll.json b/qiling/extensions/windows_sdk/def/normaliz_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/normaliz_dll.json rename to qiling/extensions/windows_sdk/def/normaliz_dll.json diff --git a/qiling/extensions/windows_sdk/ntdll_dll.json b/qiling/extensions/windows_sdk/def/ntdll_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ntdll_dll.json rename to qiling/extensions/windows_sdk/def/ntdll_dll.json diff --git a/qiling/extensions/windows_sdk/ntdsapi_dll.json b/qiling/extensions/windows_sdk/def/ntdsapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ntdsapi_dll.json rename to qiling/extensions/windows_sdk/def/ntdsapi_dll.json diff --git a/qiling/extensions/windows_sdk/ntlanman_dll.json b/qiling/extensions/windows_sdk/def/ntlanman_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ntlanman_dll.json rename to qiling/extensions/windows_sdk/def/ntlanman_dll.json diff --git a/qiling/extensions/windows_sdk/ntmsapi_dll.json b/qiling/extensions/windows_sdk/def/ntmsapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ntmsapi_dll.json rename to qiling/extensions/windows_sdk/def/ntmsapi_dll.json diff --git a/qiling/extensions/windows_sdk/ntquery_dll.json b/qiling/extensions/windows_sdk/def/ntquery_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ntquery_dll.json rename to qiling/extensions/windows_sdk/def/ntquery_dll.json diff --git a/qiling/extensions/windows_sdk/ole32_dll.json b/qiling/extensions/windows_sdk/def/ole32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ole32_dll.json rename to qiling/extensions/windows_sdk/def/ole32_dll.json diff --git a/qiling/extensions/windows_sdk/oleacc_dll.json b/qiling/extensions/windows_sdk/def/oleacc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/oleacc_dll.json rename to qiling/extensions/windows_sdk/def/oleacc_dll.json diff --git a/qiling/extensions/windows_sdk/oleaut32_dll.json b/qiling/extensions/windows_sdk/def/oleaut32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/oleaut32_dll.json rename to qiling/extensions/windows_sdk/def/oleaut32_dll.json diff --git a/qiling/extensions/windows_sdk/oledlg_dll.json b/qiling/extensions/windows_sdk/def/oledlg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/oledlg_dll.json rename to qiling/extensions/windows_sdk/def/oledlg_dll.json diff --git a/qiling/extensions/windows_sdk/ondemandconnroutehelper_dll.json b/qiling/extensions/windows_sdk/def/ondemandconnroutehelper_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ondemandconnroutehelper_dll.json rename to qiling/extensions/windows_sdk/def/ondemandconnroutehelper_dll.json diff --git a/qiling/extensions/windows_sdk/opengl32_dll.json b/qiling/extensions/windows_sdk/def/opengl32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/opengl32_dll.json rename to qiling/extensions/windows_sdk/def/opengl32_dll.json diff --git a/qiling/extensions/windows_sdk/p2p_dll.json b/qiling/extensions/windows_sdk/def/p2p_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/p2p_dll.json rename to qiling/extensions/windows_sdk/def/p2p_dll.json diff --git a/qiling/extensions/windows_sdk/p2pgraph_dll.json b/qiling/extensions/windows_sdk/def/p2pgraph_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/p2pgraph_dll.json rename to qiling/extensions/windows_sdk/def/p2pgraph_dll.json diff --git a/qiling/extensions/windows_sdk/pathcch_lib.json b/qiling/extensions/windows_sdk/def/pathcch_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/pathcch_lib.json rename to qiling/extensions/windows_sdk/def/pathcch_lib.json diff --git a/qiling/extensions/windows_sdk/pdh_dll.json b/qiling/extensions/windows_sdk/def/pdh_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/pdh_dll.json rename to qiling/extensions/windows_sdk/def/pdh_dll.json diff --git a/qiling/extensions/windows_sdk/peerdist_dll.json b/qiling/extensions/windows_sdk/def/peerdist_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/peerdist_dll.json rename to qiling/extensions/windows_sdk/def/peerdist_dll.json diff --git a/qiling/extensions/windows_sdk/powrprof_dll.json b/qiling/extensions/windows_sdk/def/powrprof_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/powrprof_dll.json rename to qiling/extensions/windows_sdk/def/powrprof_dll.json diff --git a/qiling/extensions/windows_sdk/prntvpt_dll.json b/qiling/extensions/windows_sdk/def/prntvpt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/prntvpt_dll.json rename to qiling/extensions/windows_sdk/def/prntvpt_dll.json diff --git a/qiling/extensions/windows_sdk/propsys_dll.json b/qiling/extensions/windows_sdk/def/propsys_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/propsys_dll.json rename to qiling/extensions/windows_sdk/def/propsys_dll.json diff --git a/qiling/extensions/windows_sdk/query_dll.json b/qiling/extensions/windows_sdk/def/query_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/query_dll.json rename to qiling/extensions/windows_sdk/def/query_dll.json diff --git a/qiling/extensions/windows_sdk/rasapi32_dll.json b/qiling/extensions/windows_sdk/def/rasapi32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/rasapi32_dll.json rename to qiling/extensions/windows_sdk/def/rasapi32_dll.json diff --git a/qiling/extensions/windows_sdk/rasdlg_dll.json b/qiling/extensions/windows_sdk/def/rasdlg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/rasdlg_dll.json rename to qiling/extensions/windows_sdk/def/rasdlg_dll.json diff --git a/qiling/extensions/windows_sdk/rasman_dll.json b/qiling/extensions/windows_sdk/def/rasman_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/rasman_dll.json rename to qiling/extensions/windows_sdk/def/rasman_dll.json diff --git a/qiling/extensions/windows_sdk/roerrorapi_h.json b/qiling/extensions/windows_sdk/def/roerrorapi_h.json similarity index 100% rename from qiling/extensions/windows_sdk/roerrorapi_h.json rename to qiling/extensions/windows_sdk/def/roerrorapi_h.json diff --git a/qiling/extensions/windows_sdk/rometadata_dll.json b/qiling/extensions/windows_sdk/def/rometadata_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/rometadata_dll.json rename to qiling/extensions/windows_sdk/def/rometadata_dll.json diff --git a/qiling/extensions/windows_sdk/rpcns4_dll.json b/qiling/extensions/windows_sdk/def/rpcns4_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/rpcns4_dll.json rename to qiling/extensions/windows_sdk/def/rpcns4_dll.json diff --git a/qiling/extensions/windows_sdk/rpcrt4_dll.json b/qiling/extensions/windows_sdk/def/rpcrt4_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/rpcrt4_dll.json rename to qiling/extensions/windows_sdk/def/rpcrt4_dll.json diff --git a/qiling/extensions/windows_sdk/rstrtmgr_dll.json b/qiling/extensions/windows_sdk/def/rstrtmgr_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/rstrtmgr_dll.json rename to qiling/extensions/windows_sdk/def/rstrtmgr_dll.json diff --git a/qiling/extensions/windows_sdk/rtm_dll.json b/qiling/extensions/windows_sdk/def/rtm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/rtm_dll.json rename to qiling/extensions/windows_sdk/def/rtm_dll.json diff --git a/qiling/extensions/windows_sdk/runtimeobject_lib.json b/qiling/extensions/windows_sdk/def/runtimeobject_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/runtimeobject_lib.json rename to qiling/extensions/windows_sdk/def/runtimeobject_lib.json diff --git a/qiling/extensions/windows_sdk/sas_dll.json b/qiling/extensions/windows_sdk/def/sas_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/sas_dll.json rename to qiling/extensions/windows_sdk/def/sas_dll.json diff --git a/qiling/extensions/windows_sdk/scarddlg_dll.json b/qiling/extensions/windows_sdk/def/scarddlg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/scarddlg_dll.json rename to qiling/extensions/windows_sdk/def/scarddlg_dll.json diff --git a/qiling/extensions/windows_sdk/schannel_dll.json b/qiling/extensions/windows_sdk/def/schannel_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/schannel_dll.json rename to qiling/extensions/windows_sdk/def/schannel_dll.json diff --git a/qiling/extensions/windows_sdk/secforwarder_dll.json b/qiling/extensions/windows_sdk/def/secforwarder_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/secforwarder_dll.json rename to qiling/extensions/windows_sdk/def/secforwarder_dll.json diff --git a/qiling/extensions/windows_sdk/sechost_dll.json b/qiling/extensions/windows_sdk/def/sechost_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/sechost_dll.json rename to qiling/extensions/windows_sdk/def/sechost_dll.json diff --git a/qiling/extensions/windows_sdk/secur32_dll.json b/qiling/extensions/windows_sdk/def/secur32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/secur32_dll.json rename to qiling/extensions/windows_sdk/def/secur32_dll.json diff --git a/qiling/extensions/windows_sdk/sensapi_dll.json b/qiling/extensions/windows_sdk/def/sensapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/sensapi_dll.json rename to qiling/extensions/windows_sdk/def/sensapi_dll.json diff --git a/qiling/extensions/windows_sdk/setupapi_dll.json b/qiling/extensions/windows_sdk/def/setupapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/setupapi_dll.json rename to qiling/extensions/windows_sdk/def/setupapi_dll.json diff --git a/qiling/extensions/windows_sdk/setupapi_lib.json b/qiling/extensions/windows_sdk/def/setupapi_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/setupapi_lib.json rename to qiling/extensions/windows_sdk/def/setupapi_lib.json diff --git a/qiling/extensions/windows_sdk/sfc_dll.json b/qiling/extensions/windows_sdk/def/sfc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/sfc_dll.json rename to qiling/extensions/windows_sdk/def/sfc_dll.json diff --git a/qiling/extensions/windows_sdk/shcore_dll.json b/qiling/extensions/windows_sdk/def/shcore_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/shcore_dll.json rename to qiling/extensions/windows_sdk/def/shcore_dll.json diff --git a/qiling/extensions/windows_sdk/shdocvw_dll.json b/qiling/extensions/windows_sdk/def/shdocvw_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/shdocvw_dll.json rename to qiling/extensions/windows_sdk/def/shdocvw_dll.json diff --git a/qiling/extensions/windows_sdk/shell32_dll.json b/qiling/extensions/windows_sdk/def/shell32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/shell32_dll.json rename to qiling/extensions/windows_sdk/def/shell32_dll.json diff --git a/qiling/extensions/windows_sdk/shlobj_core_h.json b/qiling/extensions/windows_sdk/def/shlobj_core_h.json similarity index 100% rename from qiling/extensions/windows_sdk/shlobj_core_h.json rename to qiling/extensions/windows_sdk/def/shlobj_core_h.json diff --git a/qiling/extensions/windows_sdk/shlwapi_dll.json b/qiling/extensions/windows_sdk/def/shlwapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/shlwapi_dll.json rename to qiling/extensions/windows_sdk/def/shlwapi_dll.json diff --git a/qiling/extensions/windows_sdk/slc_dll.json b/qiling/extensions/windows_sdk/def/slc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/slc_dll.json rename to qiling/extensions/windows_sdk/def/slc_dll.json diff --git a/qiling/extensions/windows_sdk/slcext_dll.json b/qiling/extensions/windows_sdk/def/slcext_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/slcext_dll.json rename to qiling/extensions/windows_sdk/def/slcext_dll.json diff --git a/qiling/extensions/windows_sdk/slwga_dll.json b/qiling/extensions/windows_sdk/def/slwga_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/slwga_dll.json rename to qiling/extensions/windows_sdk/def/slwga_dll.json diff --git a/qiling/extensions/windows_sdk/snmpapi_dll.json b/qiling/extensions/windows_sdk/def/snmpapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/snmpapi_dll.json rename to qiling/extensions/windows_sdk/def/snmpapi_dll.json diff --git a/qiling/extensions/windows_sdk/spoolss_dll.json b/qiling/extensions/windows_sdk/def/spoolss_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/spoolss_dll.json rename to qiling/extensions/windows_sdk/def/spoolss_dll.json diff --git a/qiling/extensions/windows_sdk/srclient_dll.json b/qiling/extensions/windows_sdk/def/srclient_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/srclient_dll.json rename to qiling/extensions/windows_sdk/def/srclient_dll.json diff --git a/qiling/extensions/windows_sdk/srpapi_dll.json b/qiling/extensions/windows_sdk/def/srpapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/srpapi_dll.json rename to qiling/extensions/windows_sdk/def/srpapi_dll.json diff --git a/qiling/extensions/windows_sdk/storprop_dll.json b/qiling/extensions/windows_sdk/def/storprop_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/storprop_dll.json rename to qiling/extensions/windows_sdk/def/storprop_dll.json diff --git a/qiling/extensions/windows_sdk/sxs_dll.json b/qiling/extensions/windows_sdk/def/sxs_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/sxs_dll.json rename to qiling/extensions/windows_sdk/def/sxs_dll.json diff --git a/qiling/extensions/windows_sdk/t2embed_dll.json b/qiling/extensions/windows_sdk/def/t2embed_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/t2embed_dll.json rename to qiling/extensions/windows_sdk/def/t2embed_dll.json diff --git a/qiling/extensions/windows_sdk/tbs_dll.json b/qiling/extensions/windows_sdk/def/tbs_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/tbs_dll.json rename to qiling/extensions/windows_sdk/def/tbs_dll.json diff --git a/qiling/extensions/windows_sdk/tdh_dll.json b/qiling/extensions/windows_sdk/def/tdh_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/tdh_dll.json rename to qiling/extensions/windows_sdk/def/tdh_dll.json diff --git a/qiling/extensions/windows_sdk/tokenbinding_dll.json b/qiling/extensions/windows_sdk/def/tokenbinding_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/tokenbinding_dll.json rename to qiling/extensions/windows_sdk/def/tokenbinding_dll.json diff --git a/qiling/extensions/windows_sdk/twinapi_core_dll.json b/qiling/extensions/windows_sdk/def/twinapi_core_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/twinapi_core_dll.json rename to qiling/extensions/windows_sdk/def/twinapi_core_dll.json diff --git a/qiling/extensions/windows_sdk/txfw32_dll.json b/qiling/extensions/windows_sdk/def/txfw32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/txfw32_dll.json rename to qiling/extensions/windows_sdk/def/txfw32_dll.json diff --git a/qiling/extensions/windows_sdk/ualapi_dll.json b/qiling/extensions/windows_sdk/def/ualapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ualapi_dll.json rename to qiling/extensions/windows_sdk/def/ualapi_dll.json diff --git a/qiling/extensions/windows_sdk/url_dll.json b/qiling/extensions/windows_sdk/def/url_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/url_dll.json rename to qiling/extensions/windows_sdk/def/url_dll.json diff --git a/qiling/extensions/windows_sdk/urlmon_dll.json b/qiling/extensions/windows_sdk/def/urlmon_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/urlmon_dll.json rename to qiling/extensions/windows_sdk/def/urlmon_dll.json diff --git a/qiling/extensions/windows_sdk/user32_dll.json b/qiling/extensions/windows_sdk/def/user32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/user32_dll.json rename to qiling/extensions/windows_sdk/def/user32_dll.json diff --git a/qiling/extensions/windows_sdk/userenv_dll.json b/qiling/extensions/windows_sdk/def/userenv_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/userenv_dll.json rename to qiling/extensions/windows_sdk/def/userenv_dll.json diff --git a/qiling/extensions/windows_sdk/usp10_dll.json b/qiling/extensions/windows_sdk/def/usp10_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/usp10_dll.json rename to qiling/extensions/windows_sdk/def/usp10_dll.json diff --git a/qiling/extensions/windows_sdk/uxtheme_dll.json b/qiling/extensions/windows_sdk/def/uxtheme_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/uxtheme_dll.json rename to qiling/extensions/windows_sdk/def/uxtheme_dll.json diff --git a/qiling/extensions/windows_sdk/vdmdbg_dll.json b/qiling/extensions/windows_sdk/def/vdmdbg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/vdmdbg_dll.json rename to qiling/extensions/windows_sdk/def/vdmdbg_dll.json diff --git a/qiling/extensions/windows_sdk/verifier_dll.json b/qiling/extensions/windows_sdk/def/verifier_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/verifier_dll.json rename to qiling/extensions/windows_sdk/def/verifier_dll.json diff --git a/qiling/extensions/windows_sdk/vertdll_dll.json b/qiling/extensions/windows_sdk/def/vertdll_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/vertdll_dll.json rename to qiling/extensions/windows_sdk/def/vertdll_dll.json diff --git a/qiling/extensions/windows_sdk/virtdisk_dll.json b/qiling/extensions/windows_sdk/def/virtdisk_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/virtdisk_dll.json rename to qiling/extensions/windows_sdk/def/virtdisk_dll.json diff --git a/qiling/extensions/windows_sdk/wcmapi_dll.json b/qiling/extensions/windows_sdk/def/wcmapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wcmapi_dll.json rename to qiling/extensions/windows_sdk/def/wcmapi_dll.json diff --git a/qiling/extensions/windows_sdk/wdsbp_dll.json b/qiling/extensions/windows_sdk/def/wdsbp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wdsbp_dll.json rename to qiling/extensions/windows_sdk/def/wdsbp_dll.json diff --git a/qiling/extensions/windows_sdk/wdsclientapi_dll.json b/qiling/extensions/windows_sdk/def/wdsclientapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wdsclientapi_dll.json rename to qiling/extensions/windows_sdk/def/wdsclientapi_dll.json diff --git a/qiling/extensions/windows_sdk/wdsmc_dll.json b/qiling/extensions/windows_sdk/def/wdsmc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wdsmc_dll.json rename to qiling/extensions/windows_sdk/def/wdsmc_dll.json diff --git a/qiling/extensions/windows_sdk/wdspxe_dll.json b/qiling/extensions/windows_sdk/def/wdspxe_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wdspxe_dll.json rename to qiling/extensions/windows_sdk/def/wdspxe_dll.json diff --git a/qiling/extensions/windows_sdk/wdstptc_dll.json b/qiling/extensions/windows_sdk/def/wdstptc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wdstptc_dll.json rename to qiling/extensions/windows_sdk/def/wdstptc_dll.json diff --git a/qiling/extensions/windows_sdk/websocket_dll.json b/qiling/extensions/windows_sdk/def/websocket_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/websocket_dll.json rename to qiling/extensions/windows_sdk/def/websocket_dll.json diff --git a/qiling/extensions/windows_sdk/wecapi_dll.json b/qiling/extensions/windows_sdk/def/wecapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wecapi_dll.json rename to qiling/extensions/windows_sdk/def/wecapi_dll.json diff --git a/qiling/extensions/windows_sdk/wer_dll.json b/qiling/extensions/windows_sdk/def/wer_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wer_dll.json rename to qiling/extensions/windows_sdk/def/wer_dll.json diff --git a/qiling/extensions/windows_sdk/wevtapi_dll.json b/qiling/extensions/windows_sdk/def/wevtapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wevtapi_dll.json rename to qiling/extensions/windows_sdk/def/wevtapi_dll.json diff --git a/qiling/extensions/windows_sdk/winbio_dll.json b/qiling/extensions/windows_sdk/def/winbio_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/winbio_dll.json rename to qiling/extensions/windows_sdk/def/winbio_dll.json diff --git a/qiling/extensions/windows_sdk/windows_media_audio_dll.json b/qiling/extensions/windows_sdk/def/windows_media_audio_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/windows_media_audio_dll.json rename to qiling/extensions/windows_sdk/def/windows_media_audio_dll.json diff --git a/qiling/extensions/windows_sdk/windows_networking_dll.json b/qiling/extensions/windows_sdk/def/windows_networking_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/windows_networking_dll.json rename to qiling/extensions/windows_sdk/def/windows_networking_dll.json diff --git a/qiling/extensions/windows_sdk/windows_ui_xaml_dll.json b/qiling/extensions/windows_sdk/def/windows_ui_xaml_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/windows_ui_xaml_dll.json rename to qiling/extensions/windows_sdk/def/windows_ui_xaml_dll.json diff --git a/qiling/extensions/windows_sdk/winhttp_dll.json b/qiling/extensions/windows_sdk/def/winhttp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/winhttp_dll.json rename to qiling/extensions/windows_sdk/def/winhttp_dll.json diff --git a/qiling/extensions/windows_sdk/wininet_dll.json b/qiling/extensions/windows_sdk/def/wininet_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wininet_dll.json rename to qiling/extensions/windows_sdk/def/wininet_dll.json diff --git a/qiling/extensions/windows_sdk/winmm_dll.json b/qiling/extensions/windows_sdk/def/winmm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/winmm_dll.json rename to qiling/extensions/windows_sdk/def/winmm_dll.json diff --git a/qiling/extensions/windows_sdk/winmmbse_dll.json b/qiling/extensions/windows_sdk/def/winmmbse_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/winmmbse_dll.json rename to qiling/extensions/windows_sdk/def/winmmbse_dll.json diff --git a/qiling/extensions/windows_sdk/winrttype_lib.json b/qiling/extensions/windows_sdk/def/winrttype_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/winrttype_lib.json rename to qiling/extensions/windows_sdk/def/winrttype_lib.json diff --git a/qiling/extensions/windows_sdk/winscard_dll.json b/qiling/extensions/windows_sdk/def/winscard_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/winscard_dll.json rename to qiling/extensions/windows_sdk/def/winscard_dll.json diff --git a/qiling/extensions/windows_sdk/winspool_drv.json b/qiling/extensions/windows_sdk/def/winspool_drv.json similarity index 100% rename from qiling/extensions/windows_sdk/winspool_drv.json rename to qiling/extensions/windows_sdk/def/winspool_drv.json diff --git a/qiling/extensions/windows_sdk/winstring_h.json b/qiling/extensions/windows_sdk/def/winstring_h.json similarity index 100% rename from qiling/extensions/windows_sdk/winstring_h.json rename to qiling/extensions/windows_sdk/def/winstring_h.json diff --git a/qiling/extensions/windows_sdk/wintrust_dll.json b/qiling/extensions/windows_sdk/def/wintrust_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wintrust_dll.json rename to qiling/extensions/windows_sdk/def/wintrust_dll.json diff --git a/qiling/extensions/windows_sdk/wintypes_dll.json b/qiling/extensions/windows_sdk/def/wintypes_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wintypes_dll.json rename to qiling/extensions/windows_sdk/def/wintypes_dll.json diff --git a/qiling/extensions/windows_sdk/winusb_dll.json b/qiling/extensions/windows_sdk/def/winusb_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/winusb_dll.json rename to qiling/extensions/windows_sdk/def/winusb_dll.json diff --git a/qiling/extensions/windows_sdk/wlanapi_dll.json b/qiling/extensions/windows_sdk/def/wlanapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wlanapi_dll.json rename to qiling/extensions/windows_sdk/def/wlanapi_dll.json diff --git a/qiling/extensions/windows_sdk/wlanui_dll.json b/qiling/extensions/windows_sdk/def/wlanui_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wlanui_dll.json rename to qiling/extensions/windows_sdk/def/wlanui_dll.json diff --git a/qiling/extensions/windows_sdk/wmvcore_dll.json b/qiling/extensions/windows_sdk/def/wmvcore_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wmvcore_dll.json rename to qiling/extensions/windows_sdk/def/wmvcore_dll.json diff --git a/qiling/extensions/windows_sdk/wofutil_dll.json b/qiling/extensions/windows_sdk/def/wofutil_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wofutil_dll.json rename to qiling/extensions/windows_sdk/def/wofutil_dll.json diff --git a/qiling/extensions/windows_sdk/ws2_32_dll.json b/qiling/extensions/windows_sdk/def/ws2_32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/ws2_32_dll.json rename to qiling/extensions/windows_sdk/def/ws2_32_dll.json diff --git a/qiling/extensions/windows_sdk/wsbonline_dll.json b/qiling/extensions/windows_sdk/def/wsbonline_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wsbonline_dll.json rename to qiling/extensions/windows_sdk/def/wsbonline_dll.json diff --git a/qiling/extensions/windows_sdk/wscapi_dll.json b/qiling/extensions/windows_sdk/def/wscapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wscapi_dll.json rename to qiling/extensions/windows_sdk/def/wscapi_dll.json diff --git a/qiling/extensions/windows_sdk/wsclient_dll.json b/qiling/extensions/windows_sdk/def/wsclient_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wsclient_dll.json rename to qiling/extensions/windows_sdk/def/wsclient_dll.json diff --git a/qiling/extensions/windows_sdk/wsdapi_dll.json b/qiling/extensions/windows_sdk/def/wsdapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wsdapi_dll.json rename to qiling/extensions/windows_sdk/def/wsdapi_dll.json diff --git a/qiling/extensions/windows_sdk/wsnmp32_dll.json b/qiling/extensions/windows_sdk/def/wsnmp32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wsnmp32_dll.json rename to qiling/extensions/windows_sdk/def/wsnmp32_dll.json diff --git a/qiling/extensions/windows_sdk/wtsapi32_dll.json b/qiling/extensions/windows_sdk/def/wtsapi32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/wtsapi32_dll.json rename to qiling/extensions/windows_sdk/def/wtsapi32_dll.json diff --git a/qiling/extensions/windows_sdk/xinput1_4_dll.json b/qiling/extensions/windows_sdk/def/xinput1_4_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/xinput1_4_dll.json rename to qiling/extensions/windows_sdk/def/xinput1_4_dll.json diff --git a/qiling/extensions/windows_sdk/xpsprint_dll.json b/qiling/extensions/windows_sdk/def/xpsprint_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/xpsprint_dll.json rename to qiling/extensions/windows_sdk/def/xpsprint_dll.json diff --git a/qiling/extensions/windows_sdk/winsdk_dump.py b/qiling/extensions/windows_sdk/winsdk_dump.py new file mode 100644 index 000000000..2b795fdb4 --- /dev/null +++ b/qiling/extensions/windows_sdk/winsdk_dump.py @@ -0,0 +1,90 @@ +#!/usr/bin/env python3 +# +# Cross Platform and Multi Architecture Advanced Binary Emulation Framework +# Built on top of Unicorn emulator (www.unicorn-engine.org) + +# windows sdk data file can download here: 'https://github.com/ohjeongwook/windows_sdk_data.git' + +import json +import os + +result_dict = {} + + +def parse_winsdk(dir): + def PtrDecl_detect(dic): + param_dict = {} + if dic['data_type'] in ['PtrDecl', 'ArrayDecl']: + return PtrDecl_detect(dic['type']) + elif dic['data_type'] == 'TypeDecl': + if 'name' in dic.keys(): + param_dict['name'] = dic['name'] + else: + param_dict['name'] = 'VOID' + param_dict['type'] = dic['type'] + elif dic['data_type'] == 'FuncDecl': + param_dict['name'] = dic['func']['name'] + param_dict['type'] = dic['func']['type']['type'] + else: + print(dic['data_type']) + exit(0) + return param_dict + + if dir != '.DS_Store': + with open("../data/" + dir, 'r') as f: + winsdk = json.loads(f.read()) + f.close() + else: + return + + entry = 'funcdefs' + + for func in winsdk[entry]: # read function dict + if 'name' in func.keys(): + func_name = func['name'] + elif func['type']['data_type'] == 'TypeDecl': + func_name = func['type']['name'] + else: + func_name = func['type']['type']['name'] + + if 'api_locations' in func.keys(): + func_dll = func['api_locations'][0].lower() + else: + continue + + func_dict = {} + param_list = [] + argument = func['arguments'] + + for argu in argument: + param = PtrDecl_detect(argu) + param_list.append(param) + func_dict[func_name] = param_list + + if func_dll in result_dict.keys(): + old_func_dict = result_dict[func_dll].copy() + result_dict[func_dll] = {} + result_dict[func_dll] = dict(old_func_dict, **func_dict) + else: + result_dict[func_dll] = func_dict + + +def save2json(): + print("begin to save ...") + for dllname in result_dict: + result_json = json.dumps(result_dict[dllname], sort_keys=False, indent=4, separators=(',', ': ')) + print(dllname) + if dllname[0].isupper(): + dllname = '_'+dllname + fo = open('./windows_sdk/'+dllname.replace('.', '_')+'.json', 'w+') + fo.write(result_json) + fo.close() + + +if __name__ == '__main__': + dir = '../data' + result_dict = {} + for parent, dirnames, filenames in os.walk(dir, followlinks=True): + for filename in filenames: + parse_winsdk(filename) + save2json() From fb3b7f28bd6ac8b35951fd82414dcff7e6de7509 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Thu, 18 Jun 2020 23:59:24 +0800 Subject: [PATCH 06/86] update windows_sdk folder name --- qiling/extensions/windows_sdk/{def => defs}/aclui_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/advapi32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/advpack_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/amsi_dll.json | 0 .../{def => defs}/api-ms-win-appmodel-runtime-l1-1-2_dll.json | 0 .../{def => defs}/api-ms-win-core-enclave-l1-1-0_dll.json | 0 .../{def => defs}/api-ms-win-core-featurestaging-l1-1-0_dll.json | 0 .../{def => defs}/api-ms-win-core-heap-l1-1-0_dll.json | 0 .../{def => defs}/api-ms-win-core-libraryloader-l1-1-1_dll.json | 0 .../{def => defs}/api-ms-win-core-localization-l1-2-1_dll.json | 0 .../{def => defs}/api-ms-win-core-memory-l1-1-4_dll.json | 0 .../{def => defs}/api-ms-win-core-memory-l1-1-5_dll.json | 0 .../api-ms-win-core-processenvironment-l1-1-0_dll.json | 0 .../{def => defs}/api-ms-win-core-slapi-l1-1-0_dll.json | 0 .../{def => defs}/api-ms-win-core-sysinfo-l1-2-3_dll.json | 0 .../{def => defs}/api-ms-win-core-version-l1-1-0_dll.json | 0 .../{def => defs}/api-ms-win-core-version-l1-2-3_dll.json | 0 .../{def => defs}/api-ms-win-core-winrt-error-l1-1-1_dll.json | 0 .../{def => defs}/api-ms-win-shcore-thread-l1-1-0_dll.json | 0 .../windows_sdk/{def => defs}/api-ms-win-wsl-api-l1-1-0_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/apphelp_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/atlthunk_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/authz_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/avicap32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/avifil32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/avrt_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/bcrypt_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/bcrypt_h.json | 0 .../extensions/windows_sdk/{def => defs}/bluetoothapis_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/bthprops_cpl.json | 0 qiling/extensions/windows_sdk/{def => defs}/bthprops_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/c_g18030_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/cabinet_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/certadm_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/cfgmgr32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/cfgmgr32_lib.json | 0 qiling/extensions/windows_sdk/{def => defs}/cldapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/clfsw32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/clusapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/combase_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/comctl32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/comdlg32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/comsvcs_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/credui_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/crypt32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/cryptdlg_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/cryptnet_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/cryptui_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/cryptxml_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/cscapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/d2d1_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/d3d10_1_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/d3d10_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/d3d11_dll.json | 0 .../extensions/windows_sdk/{def => defs}/d3d11sdklayers_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/d3d12_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/d3d9_dll.json | 0 .../extensions/windows_sdk/{def => defs}/d3dcompiler_47_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/d3dcompiler_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/davclnt_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/dbghelp_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/dciman32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/ddraw_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/deviceaccess_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/dflayout_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/dhcpcsvc6_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/dhcpcsvc_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/dhcpsapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/dnsapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/drt_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/dssec_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/dwmapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/dxgi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/dxgidebug_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/dxva2_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/eappcfg_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/elscore_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/evr_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/faultrep_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/firewallapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/fltlib_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/fontsub_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/fwpuclnt_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/fxsutility_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/gamemode_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/gdi32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/gpedit_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/htmlhelp_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/imagehlp_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/imm32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/inetcfg_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/instrsa5_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/iphlpapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/jsproxy_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/kernel32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/kernel32_lib.json | 0 qiling/extensions/windows_sdk/{def => defs}/kernel_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/kernelbase_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/ktmw32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/loadperf_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/lz32_dll.json | 0 .../extensions/windows_sdk/{def => defs}/mdmregistration_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mf_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mfplat_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mfplay_dll.json | 0 .../extensions/windows_sdk/{def => defs}/mfsensorgroup_dll.json | 0 .../extensions/windows_sdk/{def => defs}/mfsensorgroup_lib.json | 0 qiling/extensions/windows_sdk/{def => defs}/mgmtapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mmdevapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mmtasksignal_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mpclient_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mpr_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mprapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mrmsupport_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/msajapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/msctf_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/msdmo_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/msdrm_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/msgina_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/msi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/msimg32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/msports_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mstask_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/msvfw32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mswsock_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mtxdm_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/mydocs_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/ncrypt_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/netapi32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/netsh_exe.json | 0 qiling/extensions/windows_sdk/{def => defs}/netshell_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/newdev_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/ninput_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/none.json | 0 qiling/extensions/windows_sdk/{def => defs}/normaliz_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/ntdll_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/ntdsapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/ntlanman_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/ntmsapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/ntquery_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/ole32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/oleacc_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/oleaut32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/oledlg_dll.json | 0 .../windows_sdk/{def => defs}/ondemandconnroutehelper_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/opengl32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/p2p_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/p2pgraph_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/pathcch_lib.json | 0 qiling/extensions/windows_sdk/{def => defs}/pdh_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/peerdist_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/powrprof_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/prntvpt_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/propsys_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/query_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/rasapi32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/rasdlg_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/rasman_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/roerrorapi_h.json | 0 qiling/extensions/windows_sdk/{def => defs}/rometadata_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/rpcns4_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/rpcrt4_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/rstrtmgr_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/rtm_dll.json | 0 .../extensions/windows_sdk/{def => defs}/runtimeobject_lib.json | 0 qiling/extensions/windows_sdk/{def => defs}/sas_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/scarddlg_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/schannel_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/secforwarder_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/sechost_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/secur32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/sensapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/setupapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/setupapi_lib.json | 0 qiling/extensions/windows_sdk/{def => defs}/sfc_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/shcore_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/shdocvw_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/shell32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/shlobj_core_h.json | 0 qiling/extensions/windows_sdk/{def => defs}/shlwapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/slc_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/slcext_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/slwga_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/snmpapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/spoolss_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/srclient_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/srpapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/storprop_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/sxs_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/t2embed_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/tbs_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/tdh_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/tokenbinding_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/twinapi_core_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/txfw32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/ualapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/url_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/urlmon_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/user32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/userenv_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/usp10_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/uxtheme_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/vdmdbg_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/verifier_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/vertdll_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/virtdisk_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wcmapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wdsbp_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wdsclientapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wdsmc_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wdspxe_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wdstptc_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/websocket_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wecapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wer_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wevtapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/winbio_dll.json | 0 .../windows_sdk/{def => defs}/windows_media_audio_dll.json | 0 .../windows_sdk/{def => defs}/windows_networking_dll.json | 0 .../extensions/windows_sdk/{def => defs}/windows_ui_xaml_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/winhttp_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wininet_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/winmm_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/winmmbse_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/winrttype_lib.json | 0 qiling/extensions/windows_sdk/{def => defs}/winscard_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/winspool_drv.json | 0 qiling/extensions/windows_sdk/{def => defs}/winstring_h.json | 0 qiling/extensions/windows_sdk/{def => defs}/wintrust_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wintypes_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/winusb_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wlanapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wlanui_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wmvcore_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wofutil_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/ws2_32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wsbonline_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wscapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wsclient_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wsdapi_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wsnmp32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/wtsapi32_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/xinput1_4_dll.json | 0 qiling/extensions/windows_sdk/{def => defs}/xpsprint_dll.json | 0 245 files changed, 0 insertions(+), 0 deletions(-) rename qiling/extensions/windows_sdk/{def => defs}/aclui_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/advapi32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/advpack_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/amsi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-appmodel-runtime-l1-1-2_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-enclave-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-featurestaging-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-heap-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-libraryloader-l1-1-1_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-localization-l1-2-1_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-memory-l1-1-4_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-memory-l1-1-5_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-processenvironment-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-slapi-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-sysinfo-l1-2-3_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-version-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-version-l1-2-3_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-core-winrt-error-l1-1-1_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-shcore-thread-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/api-ms-win-wsl-api-l1-1-0_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/apphelp_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/atlthunk_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/authz_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/avicap32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/avifil32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/avrt_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/bcrypt_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/bcrypt_h.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/bluetoothapis_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/bthprops_cpl.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/bthprops_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/c_g18030_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/cabinet_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/certadm_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/cfgmgr32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/cfgmgr32_lib.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/cldapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/clfsw32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/clusapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/combase_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/comctl32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/comdlg32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/comsvcs_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/credui_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/crypt32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/cryptdlg_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/cryptnet_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/cryptui_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/cryptxml_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/cscapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/d2d1_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/d3d10_1_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/d3d10_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/d3d11_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/d3d11sdklayers_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/d3d12_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/d3d9_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/d3dcompiler_47_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/d3dcompiler_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/davclnt_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/dbghelp_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/dciman32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ddraw_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/deviceaccess_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/dflayout_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/dhcpcsvc6_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/dhcpcsvc_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/dhcpsapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/dnsapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/drt_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/dssec_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/dwmapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/dxgi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/dxgidebug_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/dxva2_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/eappcfg_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/elscore_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/evr_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/faultrep_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/firewallapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/fltlib_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/fontsub_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/fwpuclnt_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/fxsutility_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/gamemode_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/gdi32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/gpedit_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/htmlhelp_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/imagehlp_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/imm32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/inetcfg_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/instrsa5_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/iphlpapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/jsproxy_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/kernel32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/kernel32_lib.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/kernel_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/kernelbase_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ktmw32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/loadperf_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/lz32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mdmregistration_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mf_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mfplat_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mfplay_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mfsensorgroup_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mfsensorgroup_lib.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mgmtapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mmdevapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mmtasksignal_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mpclient_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mpr_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mprapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mrmsupport_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/msajapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/msctf_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/msdmo_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/msdrm_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/msgina_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/msi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/msimg32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/msports_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mstask_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/msvfw32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mswsock_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mtxdm_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/mydocs_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ncrypt_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/netapi32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/netsh_exe.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/netshell_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/newdev_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ninput_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/none.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/normaliz_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ntdll_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ntdsapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ntlanman_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ntmsapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ntquery_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ole32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/oleacc_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/oleaut32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/oledlg_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ondemandconnroutehelper_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/opengl32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/p2p_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/p2pgraph_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/pathcch_lib.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/pdh_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/peerdist_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/powrprof_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/prntvpt_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/propsys_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/query_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/rasapi32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/rasdlg_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/rasman_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/roerrorapi_h.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/rometadata_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/rpcns4_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/rpcrt4_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/rstrtmgr_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/rtm_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/runtimeobject_lib.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/sas_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/scarddlg_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/schannel_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/secforwarder_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/sechost_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/secur32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/sensapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/setupapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/setupapi_lib.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/sfc_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/shcore_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/shdocvw_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/shell32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/shlobj_core_h.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/shlwapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/slc_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/slcext_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/slwga_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/snmpapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/spoolss_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/srclient_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/srpapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/storprop_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/sxs_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/t2embed_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/tbs_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/tdh_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/tokenbinding_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/twinapi_core_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/txfw32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ualapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/url_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/urlmon_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/user32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/userenv_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/usp10_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/uxtheme_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/vdmdbg_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/verifier_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/vertdll_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/virtdisk_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wcmapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wdsbp_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wdsclientapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wdsmc_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wdspxe_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wdstptc_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/websocket_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wecapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wer_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wevtapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/winbio_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/windows_media_audio_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/windows_networking_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/windows_ui_xaml_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/winhttp_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wininet_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/winmm_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/winmmbse_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/winrttype_lib.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/winscard_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/winspool_drv.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/winstring_h.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wintrust_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wintypes_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/winusb_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wlanapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wlanui_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wmvcore_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wofutil_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/ws2_32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wsbonline_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wscapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wsclient_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wsdapi_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wsnmp32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/wtsapi32_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/xinput1_4_dll.json (100%) rename qiling/extensions/windows_sdk/{def => defs}/xpsprint_dll.json (100%) diff --git a/qiling/extensions/windows_sdk/def/aclui_dll.json b/qiling/extensions/windows_sdk/defs/aclui_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/aclui_dll.json rename to qiling/extensions/windows_sdk/defs/aclui_dll.json diff --git a/qiling/extensions/windows_sdk/def/advapi32_dll.json b/qiling/extensions/windows_sdk/defs/advapi32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/advapi32_dll.json rename to qiling/extensions/windows_sdk/defs/advapi32_dll.json diff --git a/qiling/extensions/windows_sdk/def/advpack_dll.json b/qiling/extensions/windows_sdk/defs/advpack_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/advpack_dll.json rename to qiling/extensions/windows_sdk/defs/advpack_dll.json diff --git a/qiling/extensions/windows_sdk/def/amsi_dll.json b/qiling/extensions/windows_sdk/defs/amsi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/amsi_dll.json rename to qiling/extensions/windows_sdk/defs/amsi_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-appmodel-runtime-l1-1-2_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-appmodel-runtime-l1-1-2_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-appmodel-runtime-l1-1-2_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-appmodel-runtime-l1-1-2_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-enclave-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-enclave-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-enclave-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-enclave-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-featurestaging-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-featurestaging-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-featurestaging-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-featurestaging-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-heap-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-heap-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-heap-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-heap-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-libraryloader-l1-1-1_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-libraryloader-l1-1-1_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-libraryloader-l1-1-1_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-libraryloader-l1-1-1_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-localization-l1-2-1_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-localization-l1-2-1_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-localization-l1-2-1_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-localization-l1-2-1_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-memory-l1-1-4_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-memory-l1-1-4_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-memory-l1-1-4_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-memory-l1-1-4_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-memory-l1-1-5_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-memory-l1-1-5_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-memory-l1-1-5_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-memory-l1-1-5_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-processenvironment-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-processenvironment-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-processenvironment-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-processenvironment-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-slapi-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-slapi-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-slapi-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-slapi-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-sysinfo-l1-2-3_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-sysinfo-l1-2-3_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-sysinfo-l1-2-3_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-sysinfo-l1-2-3_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-version-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-version-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-version-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-version-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-version-l1-2-3_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-version-l1-2-3_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-version-l1-2-3_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-version-l1-2-3_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-core-winrt-error-l1-1-1_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-core-winrt-error-l1-1-1_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-core-winrt-error-l1-1-1_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-core-winrt-error-l1-1-1_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-shcore-thread-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-shcore-thread-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-shcore-thread-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-shcore-thread-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/def/api-ms-win-wsl-api-l1-1-0_dll.json b/qiling/extensions/windows_sdk/defs/api-ms-win-wsl-api-l1-1-0_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/api-ms-win-wsl-api-l1-1-0_dll.json rename to qiling/extensions/windows_sdk/defs/api-ms-win-wsl-api-l1-1-0_dll.json diff --git a/qiling/extensions/windows_sdk/def/apphelp_dll.json b/qiling/extensions/windows_sdk/defs/apphelp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/apphelp_dll.json rename to qiling/extensions/windows_sdk/defs/apphelp_dll.json diff --git a/qiling/extensions/windows_sdk/def/atlthunk_dll.json b/qiling/extensions/windows_sdk/defs/atlthunk_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/atlthunk_dll.json rename to qiling/extensions/windows_sdk/defs/atlthunk_dll.json diff --git a/qiling/extensions/windows_sdk/def/authz_dll.json b/qiling/extensions/windows_sdk/defs/authz_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/authz_dll.json rename to qiling/extensions/windows_sdk/defs/authz_dll.json diff --git a/qiling/extensions/windows_sdk/def/avicap32_dll.json b/qiling/extensions/windows_sdk/defs/avicap32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/avicap32_dll.json rename to qiling/extensions/windows_sdk/defs/avicap32_dll.json diff --git a/qiling/extensions/windows_sdk/def/avifil32_dll.json b/qiling/extensions/windows_sdk/defs/avifil32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/avifil32_dll.json rename to qiling/extensions/windows_sdk/defs/avifil32_dll.json diff --git a/qiling/extensions/windows_sdk/def/avrt_dll.json b/qiling/extensions/windows_sdk/defs/avrt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/avrt_dll.json rename to qiling/extensions/windows_sdk/defs/avrt_dll.json diff --git a/qiling/extensions/windows_sdk/def/bcrypt_dll.json b/qiling/extensions/windows_sdk/defs/bcrypt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/bcrypt_dll.json rename to qiling/extensions/windows_sdk/defs/bcrypt_dll.json diff --git a/qiling/extensions/windows_sdk/def/bcrypt_h.json b/qiling/extensions/windows_sdk/defs/bcrypt_h.json similarity index 100% rename from qiling/extensions/windows_sdk/def/bcrypt_h.json rename to qiling/extensions/windows_sdk/defs/bcrypt_h.json diff --git a/qiling/extensions/windows_sdk/def/bluetoothapis_dll.json b/qiling/extensions/windows_sdk/defs/bluetoothapis_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/bluetoothapis_dll.json rename to qiling/extensions/windows_sdk/defs/bluetoothapis_dll.json diff --git a/qiling/extensions/windows_sdk/def/bthprops_cpl.json b/qiling/extensions/windows_sdk/defs/bthprops_cpl.json similarity index 100% rename from qiling/extensions/windows_sdk/def/bthprops_cpl.json rename to qiling/extensions/windows_sdk/defs/bthprops_cpl.json diff --git a/qiling/extensions/windows_sdk/def/bthprops_dll.json b/qiling/extensions/windows_sdk/defs/bthprops_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/bthprops_dll.json rename to qiling/extensions/windows_sdk/defs/bthprops_dll.json diff --git a/qiling/extensions/windows_sdk/def/c_g18030_dll.json b/qiling/extensions/windows_sdk/defs/c_g18030_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/c_g18030_dll.json rename to qiling/extensions/windows_sdk/defs/c_g18030_dll.json diff --git a/qiling/extensions/windows_sdk/def/cabinet_dll.json b/qiling/extensions/windows_sdk/defs/cabinet_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/cabinet_dll.json rename to qiling/extensions/windows_sdk/defs/cabinet_dll.json diff --git a/qiling/extensions/windows_sdk/def/certadm_dll.json b/qiling/extensions/windows_sdk/defs/certadm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/certadm_dll.json rename to qiling/extensions/windows_sdk/defs/certadm_dll.json diff --git a/qiling/extensions/windows_sdk/def/cfgmgr32_dll.json b/qiling/extensions/windows_sdk/defs/cfgmgr32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/cfgmgr32_dll.json rename to qiling/extensions/windows_sdk/defs/cfgmgr32_dll.json diff --git a/qiling/extensions/windows_sdk/def/cfgmgr32_lib.json b/qiling/extensions/windows_sdk/defs/cfgmgr32_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/def/cfgmgr32_lib.json rename to qiling/extensions/windows_sdk/defs/cfgmgr32_lib.json diff --git a/qiling/extensions/windows_sdk/def/cldapi_dll.json b/qiling/extensions/windows_sdk/defs/cldapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/cldapi_dll.json rename to qiling/extensions/windows_sdk/defs/cldapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/clfsw32_dll.json b/qiling/extensions/windows_sdk/defs/clfsw32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/clfsw32_dll.json rename to qiling/extensions/windows_sdk/defs/clfsw32_dll.json diff --git a/qiling/extensions/windows_sdk/def/clusapi_dll.json b/qiling/extensions/windows_sdk/defs/clusapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/clusapi_dll.json rename to qiling/extensions/windows_sdk/defs/clusapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/combase_dll.json b/qiling/extensions/windows_sdk/defs/combase_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/combase_dll.json rename to qiling/extensions/windows_sdk/defs/combase_dll.json diff --git a/qiling/extensions/windows_sdk/def/comctl32_dll.json b/qiling/extensions/windows_sdk/defs/comctl32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/comctl32_dll.json rename to qiling/extensions/windows_sdk/defs/comctl32_dll.json diff --git a/qiling/extensions/windows_sdk/def/comdlg32_dll.json b/qiling/extensions/windows_sdk/defs/comdlg32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/comdlg32_dll.json rename to qiling/extensions/windows_sdk/defs/comdlg32_dll.json diff --git a/qiling/extensions/windows_sdk/def/comsvcs_dll.json b/qiling/extensions/windows_sdk/defs/comsvcs_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/comsvcs_dll.json rename to qiling/extensions/windows_sdk/defs/comsvcs_dll.json diff --git a/qiling/extensions/windows_sdk/def/credui_dll.json b/qiling/extensions/windows_sdk/defs/credui_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/credui_dll.json rename to qiling/extensions/windows_sdk/defs/credui_dll.json diff --git a/qiling/extensions/windows_sdk/def/crypt32_dll.json b/qiling/extensions/windows_sdk/defs/crypt32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/crypt32_dll.json rename to qiling/extensions/windows_sdk/defs/crypt32_dll.json diff --git a/qiling/extensions/windows_sdk/def/cryptdlg_dll.json b/qiling/extensions/windows_sdk/defs/cryptdlg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/cryptdlg_dll.json rename to qiling/extensions/windows_sdk/defs/cryptdlg_dll.json diff --git a/qiling/extensions/windows_sdk/def/cryptnet_dll.json b/qiling/extensions/windows_sdk/defs/cryptnet_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/cryptnet_dll.json rename to qiling/extensions/windows_sdk/defs/cryptnet_dll.json diff --git a/qiling/extensions/windows_sdk/def/cryptui_dll.json b/qiling/extensions/windows_sdk/defs/cryptui_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/cryptui_dll.json rename to qiling/extensions/windows_sdk/defs/cryptui_dll.json diff --git a/qiling/extensions/windows_sdk/def/cryptxml_dll.json b/qiling/extensions/windows_sdk/defs/cryptxml_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/cryptxml_dll.json rename to qiling/extensions/windows_sdk/defs/cryptxml_dll.json diff --git a/qiling/extensions/windows_sdk/def/cscapi_dll.json b/qiling/extensions/windows_sdk/defs/cscapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/cscapi_dll.json rename to qiling/extensions/windows_sdk/defs/cscapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/d2d1_dll.json b/qiling/extensions/windows_sdk/defs/d2d1_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/d2d1_dll.json rename to qiling/extensions/windows_sdk/defs/d2d1_dll.json diff --git a/qiling/extensions/windows_sdk/def/d3d10_1_dll.json b/qiling/extensions/windows_sdk/defs/d3d10_1_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/d3d10_1_dll.json rename to qiling/extensions/windows_sdk/defs/d3d10_1_dll.json diff --git a/qiling/extensions/windows_sdk/def/d3d10_dll.json b/qiling/extensions/windows_sdk/defs/d3d10_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/d3d10_dll.json rename to qiling/extensions/windows_sdk/defs/d3d10_dll.json diff --git a/qiling/extensions/windows_sdk/def/d3d11_dll.json b/qiling/extensions/windows_sdk/defs/d3d11_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/d3d11_dll.json rename to qiling/extensions/windows_sdk/defs/d3d11_dll.json diff --git a/qiling/extensions/windows_sdk/def/d3d11sdklayers_dll.json b/qiling/extensions/windows_sdk/defs/d3d11sdklayers_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/d3d11sdklayers_dll.json rename to qiling/extensions/windows_sdk/defs/d3d11sdklayers_dll.json diff --git a/qiling/extensions/windows_sdk/def/d3d12_dll.json b/qiling/extensions/windows_sdk/defs/d3d12_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/d3d12_dll.json rename to qiling/extensions/windows_sdk/defs/d3d12_dll.json diff --git a/qiling/extensions/windows_sdk/def/d3d9_dll.json b/qiling/extensions/windows_sdk/defs/d3d9_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/d3d9_dll.json rename to qiling/extensions/windows_sdk/defs/d3d9_dll.json diff --git a/qiling/extensions/windows_sdk/def/d3dcompiler_47_dll.json b/qiling/extensions/windows_sdk/defs/d3dcompiler_47_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/d3dcompiler_47_dll.json rename to qiling/extensions/windows_sdk/defs/d3dcompiler_47_dll.json diff --git a/qiling/extensions/windows_sdk/def/d3dcompiler_dll.json b/qiling/extensions/windows_sdk/defs/d3dcompiler_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/d3dcompiler_dll.json rename to qiling/extensions/windows_sdk/defs/d3dcompiler_dll.json diff --git a/qiling/extensions/windows_sdk/def/davclnt_dll.json b/qiling/extensions/windows_sdk/defs/davclnt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/davclnt_dll.json rename to qiling/extensions/windows_sdk/defs/davclnt_dll.json diff --git a/qiling/extensions/windows_sdk/def/dbghelp_dll.json b/qiling/extensions/windows_sdk/defs/dbghelp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/dbghelp_dll.json rename to qiling/extensions/windows_sdk/defs/dbghelp_dll.json diff --git a/qiling/extensions/windows_sdk/def/dciman32_dll.json b/qiling/extensions/windows_sdk/defs/dciman32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/dciman32_dll.json rename to qiling/extensions/windows_sdk/defs/dciman32_dll.json diff --git a/qiling/extensions/windows_sdk/def/ddraw_dll.json b/qiling/extensions/windows_sdk/defs/ddraw_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ddraw_dll.json rename to qiling/extensions/windows_sdk/defs/ddraw_dll.json diff --git a/qiling/extensions/windows_sdk/def/deviceaccess_dll.json b/qiling/extensions/windows_sdk/defs/deviceaccess_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/deviceaccess_dll.json rename to qiling/extensions/windows_sdk/defs/deviceaccess_dll.json diff --git a/qiling/extensions/windows_sdk/def/dflayout_dll.json b/qiling/extensions/windows_sdk/defs/dflayout_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/dflayout_dll.json rename to qiling/extensions/windows_sdk/defs/dflayout_dll.json diff --git a/qiling/extensions/windows_sdk/def/dhcpcsvc6_dll.json b/qiling/extensions/windows_sdk/defs/dhcpcsvc6_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/dhcpcsvc6_dll.json rename to qiling/extensions/windows_sdk/defs/dhcpcsvc6_dll.json diff --git a/qiling/extensions/windows_sdk/def/dhcpcsvc_dll.json b/qiling/extensions/windows_sdk/defs/dhcpcsvc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/dhcpcsvc_dll.json rename to qiling/extensions/windows_sdk/defs/dhcpcsvc_dll.json diff --git a/qiling/extensions/windows_sdk/def/dhcpsapi_dll.json b/qiling/extensions/windows_sdk/defs/dhcpsapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/dhcpsapi_dll.json rename to qiling/extensions/windows_sdk/defs/dhcpsapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/dnsapi_dll.json b/qiling/extensions/windows_sdk/defs/dnsapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/dnsapi_dll.json rename to qiling/extensions/windows_sdk/defs/dnsapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/drt_dll.json b/qiling/extensions/windows_sdk/defs/drt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/drt_dll.json rename to qiling/extensions/windows_sdk/defs/drt_dll.json diff --git a/qiling/extensions/windows_sdk/def/dssec_dll.json b/qiling/extensions/windows_sdk/defs/dssec_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/dssec_dll.json rename to qiling/extensions/windows_sdk/defs/dssec_dll.json diff --git a/qiling/extensions/windows_sdk/def/dwmapi_dll.json b/qiling/extensions/windows_sdk/defs/dwmapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/dwmapi_dll.json rename to qiling/extensions/windows_sdk/defs/dwmapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/dxgi_dll.json b/qiling/extensions/windows_sdk/defs/dxgi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/dxgi_dll.json rename to qiling/extensions/windows_sdk/defs/dxgi_dll.json diff --git a/qiling/extensions/windows_sdk/def/dxgidebug_dll.json b/qiling/extensions/windows_sdk/defs/dxgidebug_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/dxgidebug_dll.json rename to qiling/extensions/windows_sdk/defs/dxgidebug_dll.json diff --git a/qiling/extensions/windows_sdk/def/dxva2_dll.json b/qiling/extensions/windows_sdk/defs/dxva2_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/dxva2_dll.json rename to qiling/extensions/windows_sdk/defs/dxva2_dll.json diff --git a/qiling/extensions/windows_sdk/def/eappcfg_dll.json b/qiling/extensions/windows_sdk/defs/eappcfg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/eappcfg_dll.json rename to qiling/extensions/windows_sdk/defs/eappcfg_dll.json diff --git a/qiling/extensions/windows_sdk/def/elscore_dll.json b/qiling/extensions/windows_sdk/defs/elscore_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/elscore_dll.json rename to qiling/extensions/windows_sdk/defs/elscore_dll.json diff --git a/qiling/extensions/windows_sdk/def/evr_dll.json b/qiling/extensions/windows_sdk/defs/evr_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/evr_dll.json rename to qiling/extensions/windows_sdk/defs/evr_dll.json diff --git a/qiling/extensions/windows_sdk/def/faultrep_dll.json b/qiling/extensions/windows_sdk/defs/faultrep_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/faultrep_dll.json rename to qiling/extensions/windows_sdk/defs/faultrep_dll.json diff --git a/qiling/extensions/windows_sdk/def/firewallapi_dll.json b/qiling/extensions/windows_sdk/defs/firewallapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/firewallapi_dll.json rename to qiling/extensions/windows_sdk/defs/firewallapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/fltlib_dll.json b/qiling/extensions/windows_sdk/defs/fltlib_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/fltlib_dll.json rename to qiling/extensions/windows_sdk/defs/fltlib_dll.json diff --git a/qiling/extensions/windows_sdk/def/fontsub_dll.json b/qiling/extensions/windows_sdk/defs/fontsub_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/fontsub_dll.json rename to qiling/extensions/windows_sdk/defs/fontsub_dll.json diff --git a/qiling/extensions/windows_sdk/def/fwpuclnt_dll.json b/qiling/extensions/windows_sdk/defs/fwpuclnt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/fwpuclnt_dll.json rename to qiling/extensions/windows_sdk/defs/fwpuclnt_dll.json diff --git a/qiling/extensions/windows_sdk/def/fxsutility_dll.json b/qiling/extensions/windows_sdk/defs/fxsutility_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/fxsutility_dll.json rename to qiling/extensions/windows_sdk/defs/fxsutility_dll.json diff --git a/qiling/extensions/windows_sdk/def/gamemode_dll.json b/qiling/extensions/windows_sdk/defs/gamemode_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/gamemode_dll.json rename to qiling/extensions/windows_sdk/defs/gamemode_dll.json diff --git a/qiling/extensions/windows_sdk/def/gdi32_dll.json b/qiling/extensions/windows_sdk/defs/gdi32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/gdi32_dll.json rename to qiling/extensions/windows_sdk/defs/gdi32_dll.json diff --git a/qiling/extensions/windows_sdk/def/gpedit_dll.json b/qiling/extensions/windows_sdk/defs/gpedit_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/gpedit_dll.json rename to qiling/extensions/windows_sdk/defs/gpedit_dll.json diff --git a/qiling/extensions/windows_sdk/def/htmlhelp_dll.json b/qiling/extensions/windows_sdk/defs/htmlhelp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/htmlhelp_dll.json rename to qiling/extensions/windows_sdk/defs/htmlhelp_dll.json diff --git a/qiling/extensions/windows_sdk/def/imagehlp_dll.json b/qiling/extensions/windows_sdk/defs/imagehlp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/imagehlp_dll.json rename to qiling/extensions/windows_sdk/defs/imagehlp_dll.json diff --git a/qiling/extensions/windows_sdk/def/imm32_dll.json b/qiling/extensions/windows_sdk/defs/imm32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/imm32_dll.json rename to qiling/extensions/windows_sdk/defs/imm32_dll.json diff --git a/qiling/extensions/windows_sdk/def/inetcfg_dll.json b/qiling/extensions/windows_sdk/defs/inetcfg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/inetcfg_dll.json rename to qiling/extensions/windows_sdk/defs/inetcfg_dll.json diff --git a/qiling/extensions/windows_sdk/def/instrsa5_dll.json b/qiling/extensions/windows_sdk/defs/instrsa5_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/instrsa5_dll.json rename to qiling/extensions/windows_sdk/defs/instrsa5_dll.json diff --git a/qiling/extensions/windows_sdk/def/iphlpapi_dll.json b/qiling/extensions/windows_sdk/defs/iphlpapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/iphlpapi_dll.json rename to qiling/extensions/windows_sdk/defs/iphlpapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/jsproxy_dll.json b/qiling/extensions/windows_sdk/defs/jsproxy_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/jsproxy_dll.json rename to qiling/extensions/windows_sdk/defs/jsproxy_dll.json diff --git a/qiling/extensions/windows_sdk/def/kernel32_dll.json b/qiling/extensions/windows_sdk/defs/kernel32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/kernel32_dll.json rename to qiling/extensions/windows_sdk/defs/kernel32_dll.json diff --git a/qiling/extensions/windows_sdk/def/kernel32_lib.json b/qiling/extensions/windows_sdk/defs/kernel32_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/def/kernel32_lib.json rename to qiling/extensions/windows_sdk/defs/kernel32_lib.json diff --git a/qiling/extensions/windows_sdk/def/kernel_dll.json b/qiling/extensions/windows_sdk/defs/kernel_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/kernel_dll.json rename to qiling/extensions/windows_sdk/defs/kernel_dll.json diff --git a/qiling/extensions/windows_sdk/def/kernelbase_dll.json b/qiling/extensions/windows_sdk/defs/kernelbase_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/kernelbase_dll.json rename to qiling/extensions/windows_sdk/defs/kernelbase_dll.json diff --git a/qiling/extensions/windows_sdk/def/ktmw32_dll.json b/qiling/extensions/windows_sdk/defs/ktmw32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ktmw32_dll.json rename to qiling/extensions/windows_sdk/defs/ktmw32_dll.json diff --git a/qiling/extensions/windows_sdk/def/loadperf_dll.json b/qiling/extensions/windows_sdk/defs/loadperf_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/loadperf_dll.json rename to qiling/extensions/windows_sdk/defs/loadperf_dll.json diff --git a/qiling/extensions/windows_sdk/def/lz32_dll.json b/qiling/extensions/windows_sdk/defs/lz32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/lz32_dll.json rename to qiling/extensions/windows_sdk/defs/lz32_dll.json diff --git a/qiling/extensions/windows_sdk/def/mdmregistration_dll.json b/qiling/extensions/windows_sdk/defs/mdmregistration_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mdmregistration_dll.json rename to qiling/extensions/windows_sdk/defs/mdmregistration_dll.json diff --git a/qiling/extensions/windows_sdk/def/mf_dll.json b/qiling/extensions/windows_sdk/defs/mf_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mf_dll.json rename to qiling/extensions/windows_sdk/defs/mf_dll.json diff --git a/qiling/extensions/windows_sdk/def/mfplat_dll.json b/qiling/extensions/windows_sdk/defs/mfplat_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mfplat_dll.json rename to qiling/extensions/windows_sdk/defs/mfplat_dll.json diff --git a/qiling/extensions/windows_sdk/def/mfplay_dll.json b/qiling/extensions/windows_sdk/defs/mfplay_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mfplay_dll.json rename to qiling/extensions/windows_sdk/defs/mfplay_dll.json diff --git a/qiling/extensions/windows_sdk/def/mfsensorgroup_dll.json b/qiling/extensions/windows_sdk/defs/mfsensorgroup_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mfsensorgroup_dll.json rename to qiling/extensions/windows_sdk/defs/mfsensorgroup_dll.json diff --git a/qiling/extensions/windows_sdk/def/mfsensorgroup_lib.json b/qiling/extensions/windows_sdk/defs/mfsensorgroup_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mfsensorgroup_lib.json rename to qiling/extensions/windows_sdk/defs/mfsensorgroup_lib.json diff --git a/qiling/extensions/windows_sdk/def/mgmtapi_dll.json b/qiling/extensions/windows_sdk/defs/mgmtapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mgmtapi_dll.json rename to qiling/extensions/windows_sdk/defs/mgmtapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/mi_dll.json b/qiling/extensions/windows_sdk/defs/mi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mi_dll.json rename to qiling/extensions/windows_sdk/defs/mi_dll.json diff --git a/qiling/extensions/windows_sdk/def/mmdevapi_dll.json b/qiling/extensions/windows_sdk/defs/mmdevapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mmdevapi_dll.json rename to qiling/extensions/windows_sdk/defs/mmdevapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/mmtasksignal_dll.json b/qiling/extensions/windows_sdk/defs/mmtasksignal_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mmtasksignal_dll.json rename to qiling/extensions/windows_sdk/defs/mmtasksignal_dll.json diff --git a/qiling/extensions/windows_sdk/def/mpclient_dll.json b/qiling/extensions/windows_sdk/defs/mpclient_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mpclient_dll.json rename to qiling/extensions/windows_sdk/defs/mpclient_dll.json diff --git a/qiling/extensions/windows_sdk/def/mpr_dll.json b/qiling/extensions/windows_sdk/defs/mpr_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mpr_dll.json rename to qiling/extensions/windows_sdk/defs/mpr_dll.json diff --git a/qiling/extensions/windows_sdk/def/mprapi_dll.json b/qiling/extensions/windows_sdk/defs/mprapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mprapi_dll.json rename to qiling/extensions/windows_sdk/defs/mprapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/mrmsupport_dll.json b/qiling/extensions/windows_sdk/defs/mrmsupport_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mrmsupport_dll.json rename to qiling/extensions/windows_sdk/defs/mrmsupport_dll.json diff --git a/qiling/extensions/windows_sdk/def/msajapi_dll.json b/qiling/extensions/windows_sdk/defs/msajapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/msajapi_dll.json rename to qiling/extensions/windows_sdk/defs/msajapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/msctf_dll.json b/qiling/extensions/windows_sdk/defs/msctf_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/msctf_dll.json rename to qiling/extensions/windows_sdk/defs/msctf_dll.json diff --git a/qiling/extensions/windows_sdk/def/msdmo_dll.json b/qiling/extensions/windows_sdk/defs/msdmo_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/msdmo_dll.json rename to qiling/extensions/windows_sdk/defs/msdmo_dll.json diff --git a/qiling/extensions/windows_sdk/def/msdrm_dll.json b/qiling/extensions/windows_sdk/defs/msdrm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/msdrm_dll.json rename to qiling/extensions/windows_sdk/defs/msdrm_dll.json diff --git a/qiling/extensions/windows_sdk/def/msgina_dll.json b/qiling/extensions/windows_sdk/defs/msgina_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/msgina_dll.json rename to qiling/extensions/windows_sdk/defs/msgina_dll.json diff --git a/qiling/extensions/windows_sdk/def/msi_dll.json b/qiling/extensions/windows_sdk/defs/msi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/msi_dll.json rename to qiling/extensions/windows_sdk/defs/msi_dll.json diff --git a/qiling/extensions/windows_sdk/def/msimg32_dll.json b/qiling/extensions/windows_sdk/defs/msimg32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/msimg32_dll.json rename to qiling/extensions/windows_sdk/defs/msimg32_dll.json diff --git a/qiling/extensions/windows_sdk/def/msports_dll.json b/qiling/extensions/windows_sdk/defs/msports_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/msports_dll.json rename to qiling/extensions/windows_sdk/defs/msports_dll.json diff --git a/qiling/extensions/windows_sdk/def/mstask_dll.json b/qiling/extensions/windows_sdk/defs/mstask_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mstask_dll.json rename to qiling/extensions/windows_sdk/defs/mstask_dll.json diff --git a/qiling/extensions/windows_sdk/def/msvfw32_dll.json b/qiling/extensions/windows_sdk/defs/msvfw32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/msvfw32_dll.json rename to qiling/extensions/windows_sdk/defs/msvfw32_dll.json diff --git a/qiling/extensions/windows_sdk/def/mswsock_dll.json b/qiling/extensions/windows_sdk/defs/mswsock_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mswsock_dll.json rename to qiling/extensions/windows_sdk/defs/mswsock_dll.json diff --git a/qiling/extensions/windows_sdk/def/mtxdm_dll.json b/qiling/extensions/windows_sdk/defs/mtxdm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mtxdm_dll.json rename to qiling/extensions/windows_sdk/defs/mtxdm_dll.json diff --git a/qiling/extensions/windows_sdk/def/mydocs_dll.json b/qiling/extensions/windows_sdk/defs/mydocs_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/mydocs_dll.json rename to qiling/extensions/windows_sdk/defs/mydocs_dll.json diff --git a/qiling/extensions/windows_sdk/def/ncrypt_dll.json b/qiling/extensions/windows_sdk/defs/ncrypt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ncrypt_dll.json rename to qiling/extensions/windows_sdk/defs/ncrypt_dll.json diff --git a/qiling/extensions/windows_sdk/def/netapi32_dll.json b/qiling/extensions/windows_sdk/defs/netapi32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/netapi32_dll.json rename to qiling/extensions/windows_sdk/defs/netapi32_dll.json diff --git a/qiling/extensions/windows_sdk/def/netsh_exe.json b/qiling/extensions/windows_sdk/defs/netsh_exe.json similarity index 100% rename from qiling/extensions/windows_sdk/def/netsh_exe.json rename to qiling/extensions/windows_sdk/defs/netsh_exe.json diff --git a/qiling/extensions/windows_sdk/def/netshell_dll.json b/qiling/extensions/windows_sdk/defs/netshell_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/netshell_dll.json rename to qiling/extensions/windows_sdk/defs/netshell_dll.json diff --git a/qiling/extensions/windows_sdk/def/newdev_dll.json b/qiling/extensions/windows_sdk/defs/newdev_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/newdev_dll.json rename to qiling/extensions/windows_sdk/defs/newdev_dll.json diff --git a/qiling/extensions/windows_sdk/def/ninput_dll.json b/qiling/extensions/windows_sdk/defs/ninput_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ninput_dll.json rename to qiling/extensions/windows_sdk/defs/ninput_dll.json diff --git a/qiling/extensions/windows_sdk/def/none.json b/qiling/extensions/windows_sdk/defs/none.json similarity index 100% rename from qiling/extensions/windows_sdk/def/none.json rename to qiling/extensions/windows_sdk/defs/none.json diff --git a/qiling/extensions/windows_sdk/def/normaliz_dll.json b/qiling/extensions/windows_sdk/defs/normaliz_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/normaliz_dll.json rename to qiling/extensions/windows_sdk/defs/normaliz_dll.json diff --git a/qiling/extensions/windows_sdk/def/ntdll_dll.json b/qiling/extensions/windows_sdk/defs/ntdll_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ntdll_dll.json rename to qiling/extensions/windows_sdk/defs/ntdll_dll.json diff --git a/qiling/extensions/windows_sdk/def/ntdsapi_dll.json b/qiling/extensions/windows_sdk/defs/ntdsapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ntdsapi_dll.json rename to qiling/extensions/windows_sdk/defs/ntdsapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/ntlanman_dll.json b/qiling/extensions/windows_sdk/defs/ntlanman_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ntlanman_dll.json rename to qiling/extensions/windows_sdk/defs/ntlanman_dll.json diff --git a/qiling/extensions/windows_sdk/def/ntmsapi_dll.json b/qiling/extensions/windows_sdk/defs/ntmsapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ntmsapi_dll.json rename to qiling/extensions/windows_sdk/defs/ntmsapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/ntquery_dll.json b/qiling/extensions/windows_sdk/defs/ntquery_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ntquery_dll.json rename to qiling/extensions/windows_sdk/defs/ntquery_dll.json diff --git a/qiling/extensions/windows_sdk/def/ole32_dll.json b/qiling/extensions/windows_sdk/defs/ole32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ole32_dll.json rename to qiling/extensions/windows_sdk/defs/ole32_dll.json diff --git a/qiling/extensions/windows_sdk/def/oleacc_dll.json b/qiling/extensions/windows_sdk/defs/oleacc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/oleacc_dll.json rename to qiling/extensions/windows_sdk/defs/oleacc_dll.json diff --git a/qiling/extensions/windows_sdk/def/oleaut32_dll.json b/qiling/extensions/windows_sdk/defs/oleaut32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/oleaut32_dll.json rename to qiling/extensions/windows_sdk/defs/oleaut32_dll.json diff --git a/qiling/extensions/windows_sdk/def/oledlg_dll.json b/qiling/extensions/windows_sdk/defs/oledlg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/oledlg_dll.json rename to qiling/extensions/windows_sdk/defs/oledlg_dll.json diff --git a/qiling/extensions/windows_sdk/def/ondemandconnroutehelper_dll.json b/qiling/extensions/windows_sdk/defs/ondemandconnroutehelper_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ondemandconnroutehelper_dll.json rename to qiling/extensions/windows_sdk/defs/ondemandconnroutehelper_dll.json diff --git a/qiling/extensions/windows_sdk/def/opengl32_dll.json b/qiling/extensions/windows_sdk/defs/opengl32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/opengl32_dll.json rename to qiling/extensions/windows_sdk/defs/opengl32_dll.json diff --git a/qiling/extensions/windows_sdk/def/p2p_dll.json b/qiling/extensions/windows_sdk/defs/p2p_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/p2p_dll.json rename to qiling/extensions/windows_sdk/defs/p2p_dll.json diff --git a/qiling/extensions/windows_sdk/def/p2pgraph_dll.json b/qiling/extensions/windows_sdk/defs/p2pgraph_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/p2pgraph_dll.json rename to qiling/extensions/windows_sdk/defs/p2pgraph_dll.json diff --git a/qiling/extensions/windows_sdk/def/pathcch_lib.json b/qiling/extensions/windows_sdk/defs/pathcch_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/def/pathcch_lib.json rename to qiling/extensions/windows_sdk/defs/pathcch_lib.json diff --git a/qiling/extensions/windows_sdk/def/pdh_dll.json b/qiling/extensions/windows_sdk/defs/pdh_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/pdh_dll.json rename to qiling/extensions/windows_sdk/defs/pdh_dll.json diff --git a/qiling/extensions/windows_sdk/def/peerdist_dll.json b/qiling/extensions/windows_sdk/defs/peerdist_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/peerdist_dll.json rename to qiling/extensions/windows_sdk/defs/peerdist_dll.json diff --git a/qiling/extensions/windows_sdk/def/powrprof_dll.json b/qiling/extensions/windows_sdk/defs/powrprof_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/powrprof_dll.json rename to qiling/extensions/windows_sdk/defs/powrprof_dll.json diff --git a/qiling/extensions/windows_sdk/def/prntvpt_dll.json b/qiling/extensions/windows_sdk/defs/prntvpt_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/prntvpt_dll.json rename to qiling/extensions/windows_sdk/defs/prntvpt_dll.json diff --git a/qiling/extensions/windows_sdk/def/propsys_dll.json b/qiling/extensions/windows_sdk/defs/propsys_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/propsys_dll.json rename to qiling/extensions/windows_sdk/defs/propsys_dll.json diff --git a/qiling/extensions/windows_sdk/def/query_dll.json b/qiling/extensions/windows_sdk/defs/query_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/query_dll.json rename to qiling/extensions/windows_sdk/defs/query_dll.json diff --git a/qiling/extensions/windows_sdk/def/rasapi32_dll.json b/qiling/extensions/windows_sdk/defs/rasapi32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/rasapi32_dll.json rename to qiling/extensions/windows_sdk/defs/rasapi32_dll.json diff --git a/qiling/extensions/windows_sdk/def/rasdlg_dll.json b/qiling/extensions/windows_sdk/defs/rasdlg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/rasdlg_dll.json rename to qiling/extensions/windows_sdk/defs/rasdlg_dll.json diff --git a/qiling/extensions/windows_sdk/def/rasman_dll.json b/qiling/extensions/windows_sdk/defs/rasman_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/rasman_dll.json rename to qiling/extensions/windows_sdk/defs/rasman_dll.json diff --git a/qiling/extensions/windows_sdk/def/roerrorapi_h.json b/qiling/extensions/windows_sdk/defs/roerrorapi_h.json similarity index 100% rename from qiling/extensions/windows_sdk/def/roerrorapi_h.json rename to qiling/extensions/windows_sdk/defs/roerrorapi_h.json diff --git a/qiling/extensions/windows_sdk/def/rometadata_dll.json b/qiling/extensions/windows_sdk/defs/rometadata_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/rometadata_dll.json rename to qiling/extensions/windows_sdk/defs/rometadata_dll.json diff --git a/qiling/extensions/windows_sdk/def/rpcns4_dll.json b/qiling/extensions/windows_sdk/defs/rpcns4_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/rpcns4_dll.json rename to qiling/extensions/windows_sdk/defs/rpcns4_dll.json diff --git a/qiling/extensions/windows_sdk/def/rpcrt4_dll.json b/qiling/extensions/windows_sdk/defs/rpcrt4_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/rpcrt4_dll.json rename to qiling/extensions/windows_sdk/defs/rpcrt4_dll.json diff --git a/qiling/extensions/windows_sdk/def/rstrtmgr_dll.json b/qiling/extensions/windows_sdk/defs/rstrtmgr_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/rstrtmgr_dll.json rename to qiling/extensions/windows_sdk/defs/rstrtmgr_dll.json diff --git a/qiling/extensions/windows_sdk/def/rtm_dll.json b/qiling/extensions/windows_sdk/defs/rtm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/rtm_dll.json rename to qiling/extensions/windows_sdk/defs/rtm_dll.json diff --git a/qiling/extensions/windows_sdk/def/runtimeobject_lib.json b/qiling/extensions/windows_sdk/defs/runtimeobject_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/def/runtimeobject_lib.json rename to qiling/extensions/windows_sdk/defs/runtimeobject_lib.json diff --git a/qiling/extensions/windows_sdk/def/sas_dll.json b/qiling/extensions/windows_sdk/defs/sas_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/sas_dll.json rename to qiling/extensions/windows_sdk/defs/sas_dll.json diff --git a/qiling/extensions/windows_sdk/def/scarddlg_dll.json b/qiling/extensions/windows_sdk/defs/scarddlg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/scarddlg_dll.json rename to qiling/extensions/windows_sdk/defs/scarddlg_dll.json diff --git a/qiling/extensions/windows_sdk/def/schannel_dll.json b/qiling/extensions/windows_sdk/defs/schannel_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/schannel_dll.json rename to qiling/extensions/windows_sdk/defs/schannel_dll.json diff --git a/qiling/extensions/windows_sdk/def/secforwarder_dll.json b/qiling/extensions/windows_sdk/defs/secforwarder_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/secforwarder_dll.json rename to qiling/extensions/windows_sdk/defs/secforwarder_dll.json diff --git a/qiling/extensions/windows_sdk/def/sechost_dll.json b/qiling/extensions/windows_sdk/defs/sechost_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/sechost_dll.json rename to qiling/extensions/windows_sdk/defs/sechost_dll.json diff --git a/qiling/extensions/windows_sdk/def/secur32_dll.json b/qiling/extensions/windows_sdk/defs/secur32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/secur32_dll.json rename to qiling/extensions/windows_sdk/defs/secur32_dll.json diff --git a/qiling/extensions/windows_sdk/def/sensapi_dll.json b/qiling/extensions/windows_sdk/defs/sensapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/sensapi_dll.json rename to qiling/extensions/windows_sdk/defs/sensapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/setupapi_dll.json b/qiling/extensions/windows_sdk/defs/setupapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/setupapi_dll.json rename to qiling/extensions/windows_sdk/defs/setupapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/setupapi_lib.json b/qiling/extensions/windows_sdk/defs/setupapi_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/def/setupapi_lib.json rename to qiling/extensions/windows_sdk/defs/setupapi_lib.json diff --git a/qiling/extensions/windows_sdk/def/sfc_dll.json b/qiling/extensions/windows_sdk/defs/sfc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/sfc_dll.json rename to qiling/extensions/windows_sdk/defs/sfc_dll.json diff --git a/qiling/extensions/windows_sdk/def/shcore_dll.json b/qiling/extensions/windows_sdk/defs/shcore_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/shcore_dll.json rename to qiling/extensions/windows_sdk/defs/shcore_dll.json diff --git a/qiling/extensions/windows_sdk/def/shdocvw_dll.json b/qiling/extensions/windows_sdk/defs/shdocvw_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/shdocvw_dll.json rename to qiling/extensions/windows_sdk/defs/shdocvw_dll.json diff --git a/qiling/extensions/windows_sdk/def/shell32_dll.json b/qiling/extensions/windows_sdk/defs/shell32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/shell32_dll.json rename to qiling/extensions/windows_sdk/defs/shell32_dll.json diff --git a/qiling/extensions/windows_sdk/def/shlobj_core_h.json b/qiling/extensions/windows_sdk/defs/shlobj_core_h.json similarity index 100% rename from qiling/extensions/windows_sdk/def/shlobj_core_h.json rename to qiling/extensions/windows_sdk/defs/shlobj_core_h.json diff --git a/qiling/extensions/windows_sdk/def/shlwapi_dll.json b/qiling/extensions/windows_sdk/defs/shlwapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/shlwapi_dll.json rename to qiling/extensions/windows_sdk/defs/shlwapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/slc_dll.json b/qiling/extensions/windows_sdk/defs/slc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/slc_dll.json rename to qiling/extensions/windows_sdk/defs/slc_dll.json diff --git a/qiling/extensions/windows_sdk/def/slcext_dll.json b/qiling/extensions/windows_sdk/defs/slcext_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/slcext_dll.json rename to qiling/extensions/windows_sdk/defs/slcext_dll.json diff --git a/qiling/extensions/windows_sdk/def/slwga_dll.json b/qiling/extensions/windows_sdk/defs/slwga_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/slwga_dll.json rename to qiling/extensions/windows_sdk/defs/slwga_dll.json diff --git a/qiling/extensions/windows_sdk/def/snmpapi_dll.json b/qiling/extensions/windows_sdk/defs/snmpapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/snmpapi_dll.json rename to qiling/extensions/windows_sdk/defs/snmpapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/spoolss_dll.json b/qiling/extensions/windows_sdk/defs/spoolss_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/spoolss_dll.json rename to qiling/extensions/windows_sdk/defs/spoolss_dll.json diff --git a/qiling/extensions/windows_sdk/def/srclient_dll.json b/qiling/extensions/windows_sdk/defs/srclient_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/srclient_dll.json rename to qiling/extensions/windows_sdk/defs/srclient_dll.json diff --git a/qiling/extensions/windows_sdk/def/srpapi_dll.json b/qiling/extensions/windows_sdk/defs/srpapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/srpapi_dll.json rename to qiling/extensions/windows_sdk/defs/srpapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/storprop_dll.json b/qiling/extensions/windows_sdk/defs/storprop_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/storprop_dll.json rename to qiling/extensions/windows_sdk/defs/storprop_dll.json diff --git a/qiling/extensions/windows_sdk/def/sxs_dll.json b/qiling/extensions/windows_sdk/defs/sxs_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/sxs_dll.json rename to qiling/extensions/windows_sdk/defs/sxs_dll.json diff --git a/qiling/extensions/windows_sdk/def/t2embed_dll.json b/qiling/extensions/windows_sdk/defs/t2embed_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/t2embed_dll.json rename to qiling/extensions/windows_sdk/defs/t2embed_dll.json diff --git a/qiling/extensions/windows_sdk/def/tbs_dll.json b/qiling/extensions/windows_sdk/defs/tbs_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/tbs_dll.json rename to qiling/extensions/windows_sdk/defs/tbs_dll.json diff --git a/qiling/extensions/windows_sdk/def/tdh_dll.json b/qiling/extensions/windows_sdk/defs/tdh_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/tdh_dll.json rename to qiling/extensions/windows_sdk/defs/tdh_dll.json diff --git a/qiling/extensions/windows_sdk/def/tokenbinding_dll.json b/qiling/extensions/windows_sdk/defs/tokenbinding_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/tokenbinding_dll.json rename to qiling/extensions/windows_sdk/defs/tokenbinding_dll.json diff --git a/qiling/extensions/windows_sdk/def/twinapi_core_dll.json b/qiling/extensions/windows_sdk/defs/twinapi_core_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/twinapi_core_dll.json rename to qiling/extensions/windows_sdk/defs/twinapi_core_dll.json diff --git a/qiling/extensions/windows_sdk/def/txfw32_dll.json b/qiling/extensions/windows_sdk/defs/txfw32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/txfw32_dll.json rename to qiling/extensions/windows_sdk/defs/txfw32_dll.json diff --git a/qiling/extensions/windows_sdk/def/ualapi_dll.json b/qiling/extensions/windows_sdk/defs/ualapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ualapi_dll.json rename to qiling/extensions/windows_sdk/defs/ualapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/url_dll.json b/qiling/extensions/windows_sdk/defs/url_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/url_dll.json rename to qiling/extensions/windows_sdk/defs/url_dll.json diff --git a/qiling/extensions/windows_sdk/def/urlmon_dll.json b/qiling/extensions/windows_sdk/defs/urlmon_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/urlmon_dll.json rename to qiling/extensions/windows_sdk/defs/urlmon_dll.json diff --git a/qiling/extensions/windows_sdk/def/user32_dll.json b/qiling/extensions/windows_sdk/defs/user32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/user32_dll.json rename to qiling/extensions/windows_sdk/defs/user32_dll.json diff --git a/qiling/extensions/windows_sdk/def/userenv_dll.json b/qiling/extensions/windows_sdk/defs/userenv_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/userenv_dll.json rename to qiling/extensions/windows_sdk/defs/userenv_dll.json diff --git a/qiling/extensions/windows_sdk/def/usp10_dll.json b/qiling/extensions/windows_sdk/defs/usp10_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/usp10_dll.json rename to qiling/extensions/windows_sdk/defs/usp10_dll.json diff --git a/qiling/extensions/windows_sdk/def/uxtheme_dll.json b/qiling/extensions/windows_sdk/defs/uxtheme_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/uxtheme_dll.json rename to qiling/extensions/windows_sdk/defs/uxtheme_dll.json diff --git a/qiling/extensions/windows_sdk/def/vdmdbg_dll.json b/qiling/extensions/windows_sdk/defs/vdmdbg_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/vdmdbg_dll.json rename to qiling/extensions/windows_sdk/defs/vdmdbg_dll.json diff --git a/qiling/extensions/windows_sdk/def/verifier_dll.json b/qiling/extensions/windows_sdk/defs/verifier_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/verifier_dll.json rename to qiling/extensions/windows_sdk/defs/verifier_dll.json diff --git a/qiling/extensions/windows_sdk/def/vertdll_dll.json b/qiling/extensions/windows_sdk/defs/vertdll_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/vertdll_dll.json rename to qiling/extensions/windows_sdk/defs/vertdll_dll.json diff --git a/qiling/extensions/windows_sdk/def/virtdisk_dll.json b/qiling/extensions/windows_sdk/defs/virtdisk_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/virtdisk_dll.json rename to qiling/extensions/windows_sdk/defs/virtdisk_dll.json diff --git a/qiling/extensions/windows_sdk/def/wcmapi_dll.json b/qiling/extensions/windows_sdk/defs/wcmapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wcmapi_dll.json rename to qiling/extensions/windows_sdk/defs/wcmapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/wdsbp_dll.json b/qiling/extensions/windows_sdk/defs/wdsbp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wdsbp_dll.json rename to qiling/extensions/windows_sdk/defs/wdsbp_dll.json diff --git a/qiling/extensions/windows_sdk/def/wdsclientapi_dll.json b/qiling/extensions/windows_sdk/defs/wdsclientapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wdsclientapi_dll.json rename to qiling/extensions/windows_sdk/defs/wdsclientapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/wdsmc_dll.json b/qiling/extensions/windows_sdk/defs/wdsmc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wdsmc_dll.json rename to qiling/extensions/windows_sdk/defs/wdsmc_dll.json diff --git a/qiling/extensions/windows_sdk/def/wdspxe_dll.json b/qiling/extensions/windows_sdk/defs/wdspxe_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wdspxe_dll.json rename to qiling/extensions/windows_sdk/defs/wdspxe_dll.json diff --git a/qiling/extensions/windows_sdk/def/wdstptc_dll.json b/qiling/extensions/windows_sdk/defs/wdstptc_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wdstptc_dll.json rename to qiling/extensions/windows_sdk/defs/wdstptc_dll.json diff --git a/qiling/extensions/windows_sdk/def/websocket_dll.json b/qiling/extensions/windows_sdk/defs/websocket_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/websocket_dll.json rename to qiling/extensions/windows_sdk/defs/websocket_dll.json diff --git a/qiling/extensions/windows_sdk/def/wecapi_dll.json b/qiling/extensions/windows_sdk/defs/wecapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wecapi_dll.json rename to qiling/extensions/windows_sdk/defs/wecapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/wer_dll.json b/qiling/extensions/windows_sdk/defs/wer_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wer_dll.json rename to qiling/extensions/windows_sdk/defs/wer_dll.json diff --git a/qiling/extensions/windows_sdk/def/wevtapi_dll.json b/qiling/extensions/windows_sdk/defs/wevtapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wevtapi_dll.json rename to qiling/extensions/windows_sdk/defs/wevtapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/winbio_dll.json b/qiling/extensions/windows_sdk/defs/winbio_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/winbio_dll.json rename to qiling/extensions/windows_sdk/defs/winbio_dll.json diff --git a/qiling/extensions/windows_sdk/def/windows_media_audio_dll.json b/qiling/extensions/windows_sdk/defs/windows_media_audio_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/windows_media_audio_dll.json rename to qiling/extensions/windows_sdk/defs/windows_media_audio_dll.json diff --git a/qiling/extensions/windows_sdk/def/windows_networking_dll.json b/qiling/extensions/windows_sdk/defs/windows_networking_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/windows_networking_dll.json rename to qiling/extensions/windows_sdk/defs/windows_networking_dll.json diff --git a/qiling/extensions/windows_sdk/def/windows_ui_xaml_dll.json b/qiling/extensions/windows_sdk/defs/windows_ui_xaml_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/windows_ui_xaml_dll.json rename to qiling/extensions/windows_sdk/defs/windows_ui_xaml_dll.json diff --git a/qiling/extensions/windows_sdk/def/winhttp_dll.json b/qiling/extensions/windows_sdk/defs/winhttp_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/winhttp_dll.json rename to qiling/extensions/windows_sdk/defs/winhttp_dll.json diff --git a/qiling/extensions/windows_sdk/def/wininet_dll.json b/qiling/extensions/windows_sdk/defs/wininet_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wininet_dll.json rename to qiling/extensions/windows_sdk/defs/wininet_dll.json diff --git a/qiling/extensions/windows_sdk/def/winmm_dll.json b/qiling/extensions/windows_sdk/defs/winmm_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/winmm_dll.json rename to qiling/extensions/windows_sdk/defs/winmm_dll.json diff --git a/qiling/extensions/windows_sdk/def/winmmbse_dll.json b/qiling/extensions/windows_sdk/defs/winmmbse_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/winmmbse_dll.json rename to qiling/extensions/windows_sdk/defs/winmmbse_dll.json diff --git a/qiling/extensions/windows_sdk/def/winrttype_lib.json b/qiling/extensions/windows_sdk/defs/winrttype_lib.json similarity index 100% rename from qiling/extensions/windows_sdk/def/winrttype_lib.json rename to qiling/extensions/windows_sdk/defs/winrttype_lib.json diff --git a/qiling/extensions/windows_sdk/def/winscard_dll.json b/qiling/extensions/windows_sdk/defs/winscard_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/winscard_dll.json rename to qiling/extensions/windows_sdk/defs/winscard_dll.json diff --git a/qiling/extensions/windows_sdk/def/winspool_drv.json b/qiling/extensions/windows_sdk/defs/winspool_drv.json similarity index 100% rename from qiling/extensions/windows_sdk/def/winspool_drv.json rename to qiling/extensions/windows_sdk/defs/winspool_drv.json diff --git a/qiling/extensions/windows_sdk/def/winstring_h.json b/qiling/extensions/windows_sdk/defs/winstring_h.json similarity index 100% rename from qiling/extensions/windows_sdk/def/winstring_h.json rename to qiling/extensions/windows_sdk/defs/winstring_h.json diff --git a/qiling/extensions/windows_sdk/def/wintrust_dll.json b/qiling/extensions/windows_sdk/defs/wintrust_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wintrust_dll.json rename to qiling/extensions/windows_sdk/defs/wintrust_dll.json diff --git a/qiling/extensions/windows_sdk/def/wintypes_dll.json b/qiling/extensions/windows_sdk/defs/wintypes_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wintypes_dll.json rename to qiling/extensions/windows_sdk/defs/wintypes_dll.json diff --git a/qiling/extensions/windows_sdk/def/winusb_dll.json b/qiling/extensions/windows_sdk/defs/winusb_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/winusb_dll.json rename to qiling/extensions/windows_sdk/defs/winusb_dll.json diff --git a/qiling/extensions/windows_sdk/def/wlanapi_dll.json b/qiling/extensions/windows_sdk/defs/wlanapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wlanapi_dll.json rename to qiling/extensions/windows_sdk/defs/wlanapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/wlanui_dll.json b/qiling/extensions/windows_sdk/defs/wlanui_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wlanui_dll.json rename to qiling/extensions/windows_sdk/defs/wlanui_dll.json diff --git a/qiling/extensions/windows_sdk/def/wmvcore_dll.json b/qiling/extensions/windows_sdk/defs/wmvcore_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wmvcore_dll.json rename to qiling/extensions/windows_sdk/defs/wmvcore_dll.json diff --git a/qiling/extensions/windows_sdk/def/wofutil_dll.json b/qiling/extensions/windows_sdk/defs/wofutil_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wofutil_dll.json rename to qiling/extensions/windows_sdk/defs/wofutil_dll.json diff --git a/qiling/extensions/windows_sdk/def/ws2_32_dll.json b/qiling/extensions/windows_sdk/defs/ws2_32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/ws2_32_dll.json rename to qiling/extensions/windows_sdk/defs/ws2_32_dll.json diff --git a/qiling/extensions/windows_sdk/def/wsbonline_dll.json b/qiling/extensions/windows_sdk/defs/wsbonline_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wsbonline_dll.json rename to qiling/extensions/windows_sdk/defs/wsbonline_dll.json diff --git a/qiling/extensions/windows_sdk/def/wscapi_dll.json b/qiling/extensions/windows_sdk/defs/wscapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wscapi_dll.json rename to qiling/extensions/windows_sdk/defs/wscapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/wsclient_dll.json b/qiling/extensions/windows_sdk/defs/wsclient_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wsclient_dll.json rename to qiling/extensions/windows_sdk/defs/wsclient_dll.json diff --git a/qiling/extensions/windows_sdk/def/wsdapi_dll.json b/qiling/extensions/windows_sdk/defs/wsdapi_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wsdapi_dll.json rename to qiling/extensions/windows_sdk/defs/wsdapi_dll.json diff --git a/qiling/extensions/windows_sdk/def/wsnmp32_dll.json b/qiling/extensions/windows_sdk/defs/wsnmp32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wsnmp32_dll.json rename to qiling/extensions/windows_sdk/defs/wsnmp32_dll.json diff --git a/qiling/extensions/windows_sdk/def/wtsapi32_dll.json b/qiling/extensions/windows_sdk/defs/wtsapi32_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/wtsapi32_dll.json rename to qiling/extensions/windows_sdk/defs/wtsapi32_dll.json diff --git a/qiling/extensions/windows_sdk/def/xinput1_4_dll.json b/qiling/extensions/windows_sdk/defs/xinput1_4_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/xinput1_4_dll.json rename to qiling/extensions/windows_sdk/defs/xinput1_4_dll.json diff --git a/qiling/extensions/windows_sdk/def/xpsprint_dll.json b/qiling/extensions/windows_sdk/defs/xpsprint_dll.json similarity index 100% rename from qiling/extensions/windows_sdk/def/xpsprint_dll.json rename to qiling/extensions/windows_sdk/defs/xpsprint_dll.json From d0455dee56a521495546c04581b575ee4d668501 Mon Sep 17 00:00:00 2001 From: Itai Liba Date: Mon, 22 Jun 2020 21:50:32 -0700 Subject: [PATCH 07/86] Bug fix and speed optimization in map_and_load. --- qiling/loader/pe_uefi.py | 4 +++- qiling/os/uefi/bootup.py | 5 ++--- 2 files changed, 5 insertions(+), 4 deletions(-) diff --git a/qiling/loader/pe_uefi.py b/qiling/loader/pe_uefi.py index 94b3319b2..03f200828 100644 --- a/qiling/loader/pe_uefi.py +++ b/qiling/loader/pe_uefi.py @@ -32,6 +32,7 @@ def __init__(self, ql): self.events = {} self.handle_dict = {} self.notify_list = [] + self.last_image_base = 0x10000 @contextmanager def map_memory(self, addr, size): @@ -68,11 +69,12 @@ def map_and_load(self, path, execute_now=False, callback_ctx=None): pe = pefile.PE(path, fast_load=True) # Make sure no module will occupy the NULL page - IMAGE_BASE = max(pe.OPTIONAL_HEADER.ImageBase, 0x10000) + IMAGE_BASE = max(pe.OPTIONAL_HEADER.ImageBase, self.last_image_base) IMAGE_SIZE = ql.mem.align(pe.OPTIONAL_HEADER.SizeOfImage, 0x1000) while IMAGE_BASE + IMAGE_SIZE < self.heap_base_address: if not ql.mem.is_mapped(IMAGE_BASE, 1): + self.last_image_base = IMAGE_BASE ql.mem.map(IMAGE_BASE, IMAGE_SIZE) pe.parse_data_directories() data = bytearray(pe.get_memory_mapped_image()) diff --git a/qiling/os/uefi/bootup.py b/qiling/os/uefi/bootup.py index 7c6c623d6..6d2e8dad4 100644 --- a/qiling/os/uefi/bootup.py +++ b/qiling/os/uefi/bootup.py @@ -474,10 +474,9 @@ def hook_UninstallMultipleProtocolInterfaces(ql, address, params): GUID = str(ql.os.read_guid(GUID_ptr)) ql.nprint(f'\t {GUID}, {protocol_ptr:x}') dic = ql.loader.handle_dict[handle] - protocol = params["Protocol"] - if protocol not in dic: + if GUID not in dic: return EFI_INVALID_PARAMETER - del dic[protocol] + del dic[GUID] index +=2 return EFI_SUCCESS From 64a1a44677482f7322ba16acc9848cd48e36f42d Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Tue, 23 Jun 2020 20:24:33 +0800 Subject: [PATCH 08/86] make @winapi be better --- qiling/os/windows/dlls/advapi32.py | 156 ++--------- qiling/os/windows/dlls/crypt32.py | 11 +- .../os/windows/dlls/kernel32/consoleapi2.py | 14 +- .../os/windows/dlls/kernel32/consoleapi3.py | 3 +- qiling/os/windows/dlls/kernel32/debugapi.py | 17 +- .../windows/dlls/kernel32/errhandlingapi.py | 37 +-- qiling/os/windows/dlls/kernel32/fibersapi.py | 20 +- qiling/os/windows/dlls/kernel32/fileapi.py | 105 ++------ qiling/os/windows/dlls/kernel32/handleapi.py | 21 +- qiling/os/windows/dlls/kernel32/heapapi.py | 34 +-- .../windows/dlls/kernel32/interlockedapi.py | 4 +- qiling/os/windows/dlls/kernel32/ioapiset.py | 11 +- .../os/windows/dlls/kernel32/libloaderapi.py | 78 ++---- qiling/os/windows/dlls/kernel32/memoryapi.py | 27 +- qiling/os/windows/dlls/kernel32/processenv.py | 34 +-- .../dlls/kernel32/processthreadsapi.py | 96 ++----- qiling/os/windows/dlls/kernel32/profileapi.py | 8 +- qiling/os/windows/dlls/kernel32/psapi.py | 7 +- .../os/windows/dlls/kernel32/stringapiset.py | 36 +-- qiling/os/windows/dlls/kernel32/synchapi.py | 110 ++------ qiling/os/windows/dlls/kernel32/sysinfoapi.py | 40 +-- qiling/os/windows/dlls/kernel32/tlhelp32.py | 19 +- qiling/os/windows/dlls/kernel32/winbase.py | 144 +++------- qiling/os/windows/dlls/kernel32/winnls.py | 72 +---- qiling/os/windows/dlls/kernel32/winnt.py | 23 +- .../os/windows/dlls/kernel32/wow64apiset.py | 5 +- qiling/os/windows/dlls/mscoree.py | 7 +- qiling/os/windows/dlls/msi.py | 7 +- qiling/os/windows/dlls/msvcrt.py | 129 +++------ qiling/os/windows/dlls/ntdll.py | 67 ++--- qiling/os/windows/dlls/ntoskrnl.py | 19 +- qiling/os/windows/dlls/ole32.py | 35 +-- qiling/os/windows/dlls/oleaut32.py | 24 +- qiling/os/windows/dlls/shell32.py | 41 +-- qiling/os/windows/dlls/shlwapi.py | 23 +- qiling/os/windows/dlls/user32.py | 255 ++++-------------- qiling/os/windows/dlls/wininet.py | 156 ++--------- qiling/os/windows/dlls/wsock32.py | 21 +- qiling/os/windows/dlls/wudplatform.py | 9 +- qiling/os/windows/fncc.py | 83 +++++- 40 files changed, 490 insertions(+), 1518 deletions(-) diff --git a/qiling/os/windows/dlls/advapi32.py b/qiling/os/windows/dlls/advapi32.py index b61efb236..618ad574c 100644 --- a/qiling/os/windows/dlls/advapi32.py +++ b/qiling/os/windows/dlls/advapi32.py @@ -95,13 +95,7 @@ def RegQueryValue(ql, address, params): # REGSAM samDesired, # PHKEY phkResult # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": STRING, - "ulOptions": DWORD, - "samDesired": POINTER, - "phkResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegOpenKeyExA") def hook_RegOpenKeyExA(ql, address, params): return _RegOpenKey(ql, address, params) @@ -113,13 +107,7 @@ def hook_RegOpenKeyExA(ql, address, params): # REGSAM samDesired, # PHKEY phkResult # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": WSTRING, - "ulOptions": DWORD, - "samDesired": POINTER, - "phkResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegOpenKeyExW") def hook_RegOpenKeyExW(ql, address, params): return _RegOpenKey(ql, address, params) @@ -129,25 +117,17 @@ def hook_RegOpenKeyExW(ql, address, params): # LPCWSTR lpSubKey, # PHKEY phkResult # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": WSTRING, - "phkResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname='RegOpenKeyW') def hook_RegOpenKeyW(ql, address, params): return _RegOpenKey(ql, address, params) # LSTATUS RegOpenKeyA( # HKEY hKey, -# LPCWSTR lpSubKey, +# LPCSTR lpSubKey, # PHKEY phkResult # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": STRING, - "phkResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegOpenKeyA") def hook_RegOpenKeyA(ql, address, params): return _RegOpenKey(ql, address, params) @@ -160,14 +140,7 @@ def hook_RegOpenKeyA(ql, address, params): # LPBYTE lpData, # LPDWORD lpcbData # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpValueName": STRING, - "lpReserved": POINTER, - "lpType": POINTER, - "lpData": POINTER, - "lpcbData": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegQueryValueExA") def hook_RegQueryValueExA(ql, address, params): return RegQueryValue(ql, address, params) @@ -180,14 +153,7 @@ def hook_RegQueryValueExA(ql, address, params): # LPBYTE lpData, # LPDWORD lpcbData # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpValueName": WSTRING, - "lpReserved": POINTER, - "lpType": POINTER, - "lpData": POINTER, - "lpcbData": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegQueryValueExW") def hook_RegQueryValueExW(ql, address, params): return RegQueryValue(ql, address, params) @@ -195,9 +161,7 @@ def hook_RegQueryValueExW(ql, address, params): # LSTATUS RegCloseKey( # HKEY hKey # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegCloseKey") def hook_RegCloseKey(ql, address, params): ret = ERROR_SUCCESS hKey = params["hKey"] @@ -210,11 +174,7 @@ def hook_RegCloseKey(ql, address, params): # LPCSTR lpSubKey, # PHKEY phkResult # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": STRING, - "phkResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegCreateKeyA") def hook_RegCreateKeyA(ql, address, params): return hook_RegCreateKeyW.__wrapped__(ql, address, params) @@ -224,11 +184,7 @@ def hook_RegCreateKeyA(ql, address, params): # LPCWSTR lpSubKey, # PHKEY phkResult # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": WSTRING, - "phkResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegCreateKeyW") def hook_RegCreateKeyW(ql, address, params): ret = ERROR_SUCCESS @@ -268,17 +224,7 @@ def hook_RegCreateKeyW(ql, address, params): # PHKEY phkResult, # LPDWORD lpdwDisposition # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": WSTRING, - "Reserved": POINTER, - "lpClass": POINTER, - "dwOptions": POINTER, - "samDesired": POINTER, - "lpSecurityAttributes": POINTER, - "phkResult": POINTER, - "lpdwDisposition": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegCreateKeyExW", specialtype={'DWORD': 'POINTER'}) def hook_RegCreateKeyExW(ql, address, params): ret = ERROR_SUCCESS @@ -314,13 +260,7 @@ def hook_RegCreateKeyExW(ql, address, params): # LPCSTR lpData, # DWORD cbData # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": STRING, - "dwType": DWORD, - "lpData": STRING, - "cbData": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegSetValueA") def hook_RegSetValueA(ql, address, params): ret = ERROR_SUCCESS @@ -347,14 +287,7 @@ def hook_RegSetValueA(ql, address, params): # const BYTE *lpData, # DWORD cbData # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpValueName": WSTRING, - "Reserved": DWORD, - "dwType": DWORD, - "lpData": WSTRING, - "cbData": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegSetValueExW") def hook_RegSetValueExW(ql, address, params): ret = ERROR_SUCCESS @@ -377,10 +310,7 @@ def hook_RegSetValueExW(ql, address, params): # HKEY hKey, # LPCSTR lpSubKey # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": STRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegDeleteKeyA") def hook_RegDeleteKeyA(ql, address, params): return hook_RegDeleteKeyW.__wrapped__(ql, address, params) @@ -389,10 +319,7 @@ def hook_RegDeleteKeyA(ql, address, params): # HKEY hKey, # LPCWSTR lpSubKey # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpSubKey": WSTRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegDeleteKeyW") def hook_RegDeleteKeyW(ql, address, params): ret = ERROR_SUCCESS @@ -411,10 +338,7 @@ def hook_RegDeleteKeyW(ql, address, params): # HKEY hKey, # LPCSTR lpValueName # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpValueName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegDeleteValueA") def hook_RegDeleteValueA(ql, address, params): return hook_RegDeleteValueW.__wrapped__(ql, address, params) @@ -423,10 +347,7 @@ def hook_RegDeleteValueA(ql, address, params): # HKEY hKey, # LPCWSTR lpValueName # ); -@winapi(cc=STDCALL, params={ - "hKey": HANDLE, - "lpValueName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegDeleteValueW") def hook_RegDeleteValueW(ql, address, params): ret = ERROR_SUCCESS @@ -448,13 +369,7 @@ def hook_RegDeleteValueW(ql, address, params): # DWORD TokenInformationLength, # PDWORD ReturnLength # ); -@winapi(cc=STDCALL, params={ - "TokenHandle": HANDLE, - "TokenInformationClass": DWORD, - "TokenInformation": POINTER, - "TokenInformationLength": DWORD, - "ReturnLength": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetTokenInformation") def hook_GetTokenInformation(ql, address, params): id_token = params["TokenHandle"] information = params["TokenInformationClass"] @@ -479,9 +394,7 @@ def hook_GetTokenInformation(ql, address, params): # PUCHAR GetSidSubAuthorityCount( # PSID pSid # ); -@winapi(cc=STDCALL, params={ - "pSid": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSidSubAuthorityCount") def hook_GetSidSubAuthorityCount(ql, address, params): sid = ql.os.handle_manager.get(params["pSid"]).obj addr_authority_count = sid.addr + 1 # +1 because the first byte is revision @@ -492,10 +405,7 @@ def hook_GetSidSubAuthorityCount(ql, address, params): # PSID pSid, # DWORD nSubAuthority # ); -@winapi(cc=STDCALL, params={ - "pSid": HANDLE, - "nSubAuthority": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSidSubAuthority", specialtype={'DWORD': 'INT'}) def hook_GetSidSubAuthority(ql, address, params): num = params["nSubAuthority"] sid = ql.os.handle_manager.get(params["pSid"]).obj @@ -516,20 +426,7 @@ def hook_GetSidSubAuthority(ql, address, params): # DWORD nSubAuthority7, # PSID *pSid # ); -@winapi(cc=STDCALL, params={ - "pIdentifierAuthority": POINTER, - "nSubAuthorityCount": BYTE, - "nSubAuthority0": DWORD, - "nSubAuthority1": DWORD, - "nSubAuthority2": DWORD, - "nSubAuthority3": DWORD, - "nSubAuthority4": DWORD, - "nSubAuthority5": DWORD, - "nSubAuthority6": DWORD, - "nSubAuthority7": DWORD, - "pSid": POINTER - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="AllocateAndInitializeSid") def hook_AllocateAndInitializeSid(ql, address, params): count = params["nSubAuthorityCount"] subs = b"" @@ -549,10 +446,7 @@ def hook_AllocateAndInitializeSid(ql, address, params): # PVOID FreeSid( # PSID pSid # ); -@winapi(cc=STDCALL, params={ - "pSid": HANDLE - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FreeSid") def hook_FreeSid(ql, address, params): ql.os.heap.free(params["pSid"]) return 0 @@ -562,11 +456,7 @@ def hook_FreeSid(ql, address, params): # PSID pSid1, # PSID pSid2 # ); -@winapi(cc=STDCALL, params={ - "pSid1": HANDLE, - "pSid2": HANDLE, - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="EqualSid") def hook_EqualSid(ql, address, params): # TODO once i have understood better how SID are wrote in memory. Fucking documentation # technically this one should be my SID that i created at the start. I said should, because when testing, it has a diff --git a/qiling/os/windows/dlls/crypt32.py b/qiling/os/windows/dlls/crypt32.py index d744889b2..0653f5ccd 100644 --- a/qiling/os/windows/dlls/crypt32.py +++ b/qiling/os/windows/dlls/crypt32.py @@ -20,15 +20,8 @@ # DWORD *pdwSkip, # DWORD *pdwFlags # ); -@winapi(cc=STDCALL, params={ - "pszString": STRING, - "cchString": DWORD, - "dwFlags": DWORD, - "pbBinary": POINTER, - "pcbBinary": POINTER, - "pdwSkip": POINTER, - "pdwFlags": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CryptStringToBinaryA", specialtype={'BYTE': 'POINTER'}, + specialtypeEx={"pcbBinary": POINTER, "pdwSkip": POINTER, "pdwFlags": POINTER}) def hook_CryptStringToBinaryA(ql, address, params): flag_src = params["dwFlags"] string_src = params["pszString"] diff --git a/qiling/os/windows/dlls/kernel32/consoleapi2.py b/qiling/os/windows/dlls/kernel32/consoleapi2.py index ae77fe420..0c0d31690 100644 --- a/qiling/os/windows/dlls/kernel32/consoleapi2.py +++ b/qiling/os/windows/dlls/kernel32/consoleapi2.py @@ -17,9 +17,7 @@ # BOOL WINAPI SetConsoleTitle( # _In_ LPCTSTR lpConsoleTitle # ); -@winapi(cc=STDCALL, params={ - "lpConsoleTitle": WSTRING -}) +@winsdkapi(cc=STDCALL, defparams={"lpConsoleTitle": WSTRING}) def hook_SetConsoleTitleW(ql, address, params): return 1 @@ -28,10 +26,7 @@ def hook_SetConsoleTitleW(ql, address, params): # _In_ HANDLE hConsoleOutput, # _Out_ PCONSOLE_SCREEN_BUFFER_INFO lpConsoleScreenBufferInfo # ); -@winapi(cc=STDCALL, params={ - "hConsoleOutput": HANDLE, - "lpConsoleScreenBufferInfo": POINTER -}) +@winsdkapi(cc=STDCALL, defparams={"hConsoleOutput": HANDLE, "lpConsoleScreenBufferInfo": POINTER}) def hook_GetConsoleScreenBufferInfo(ql, address, params): # Todo should we really? return 1 @@ -41,9 +36,6 @@ def hook_GetConsoleScreenBufferInfo(ql, address, params): # _In_ HANDLE hConsoleOutput, # _In_ WORD wAttributes # ); -@winapi(cc=STDCALL, params={ - "hConsoleOutput": HANDLE, - "wAttributes": INT -}) +@winsdkapi(cc=STDCALL, defparams={"hConsoleOutput": HANDLE, "wAttributes": INT}) def hook_SetConsoleTextAttribute(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/kernel32/consoleapi3.py b/qiling/os/windows/dlls/kernel32/consoleapi3.py index 75d6cce33..7c91e11ad 100644 --- a/qiling/os/windows/dlls/kernel32/consoleapi3.py +++ b/qiling/os/windows/dlls/kernel32/consoleapi3.py @@ -15,8 +15,7 @@ # HWND WINAPI GetConsoleWindow(void); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL) def hook_GetConsoleWindow(ql, address, params): handle = Handle(name="console_window") ql.os.handle_manager.append(handle) diff --git a/qiling/os/windows/dlls/kernel32/debugapi.py b/qiling/os/windows/dlls/kernel32/debugapi.py index f26e81c16..c9b80af45 100644 --- a/qiling/os/windows/dlls/kernel32/debugapi.py +++ b/qiling/os/windows/dlls/kernel32/debugapi.py @@ -13,10 +13,10 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL IsDebuggerPresent(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsDebuggerPresent") def hook_IsDebuggerPresent(ql, address, params): return 0 @@ -25,10 +25,7 @@ def hook_IsDebuggerPresent(ql, address, params): # HANDLE hProcess, # PBOOL pbDebuggerPresent # ); -@winapi(cc=STDCALL, params={ - "hProcess": HANDLE, - "pbDebuggerPresent": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CheckRemoteDebuggerPresent") def hook_CheckRemoteDebuggerPresent(ql, address, params): pointer = params["pbDebuggerPresent"] ql.mem.write(pointer, 0x0.to_bytes(1, byteorder="little")) @@ -38,9 +35,7 @@ def hook_CheckRemoteDebuggerPresent(ql, address, params): # void OutputDebugStringW( # LPCWSTR lpOutputString # ); -@winapi(cc=STDCALL, params={ - "lpOutputString": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OutputDebugStringW") def hook_OutputDebugStringW(ql, address, params): string = params["lpOutputString"] ql.nprint('OutputDebugStringW: "%s"' % (string.encode())) @@ -50,9 +45,7 @@ def hook_OutputDebugStringW(ql, address, params): # void OutputDebugStringA( # LPCSTR lpOutputString # ); -@winapi(cc=STDCALL, params={ - "lpOutputString": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OutputDebugStringA") def hook_OutputDebugStringA(ql, address, params): ql.nprint('OutputDebugStringA: "%s"' % (params['lpOutputString'])) return 0 diff --git a/qiling/os/windows/dlls/kernel32/errhandlingapi.py b/qiling/os/windows/dlls/kernel32/errhandlingapi.py index 19b8fb4ce..61d3415a7 100644 --- a/qiling/os/windows/dlls/kernel32/errhandlingapi.py +++ b/qiling/os/windows/dlls/kernel32/errhandlingapi.py @@ -13,13 +13,12 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # LPTOP_LEVEL_EXCEPTION_FILTER SetUnhandledExceptionFilter( # LPTOP_LEVEL_EXCEPTION_FILTER lpTopLevelExceptionFilter # ); -@winapi(cc=STDCALL, params={ - "lpTopLevelExceptionFilter": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetUnhandledExceptionFilter") def hook_SetUnhandledExceptionFilter(ql, address, params): addr = params["lpTopLevelExceptionFilter"] handle = ql.os.handle_manager.search("TopLevelExceptionHandler") @@ -32,7 +31,7 @@ def hook_SetUnhandledExceptionFilter(ql, address, params): # _Post_equals_last_error_ DWORD GetLastError(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetLastError") def hook_GetLastError(ql, address, params): return ql.os.last_error @@ -40,9 +39,7 @@ def hook_GetLastError(ql, address, params): # void SetLastError( # DWORD dwErrCode # ); -@winapi(cc=STDCALL, params={ - "dwErrCode": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetLastError", specialtype={'DWORD': 'UINT'}) def hook_SetLastError(ql, address, params): ql.os.last_error = params['dwErrCode'] return 0 @@ -51,9 +48,7 @@ def hook_SetLastError(ql, address, params): # LONG UnhandledExceptionFilter( # _EXCEPTION_POINTERS *ExceptionInfo # ); -@winapi(cc=STDCALL, params={ - "ExceptionInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="UnhandledExceptionFilter") def hook_UnhandledExceptionFilter(ql, address, params): ret = 1 return ret @@ -62,9 +57,7 @@ def hook_UnhandledExceptionFilter(ql, address, params): # UINT SetErrorMode( # UINT uMode # ); -@winapi(cc=STDCALL, params={ - "uMode": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetErrorMode") def hook_SetErrorMode(ql, address, params): # TODO maybe this need a better implementation return 0 @@ -76,12 +69,7 @@ def hook_SetErrorMode(ql, address, params): # DWORD nNumberOfArguments, # const ULONG_PTR *lpArguments # ); -@winapi(cc=STDCALL, params={ - "dwExceptionCode": DWORD, - "dwExceptionFlags": DWORD, - "nNumberOfArguments": DWORD, - "lpArguments": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RaiseException") def hook_RaiseException(ql, address, params): func_addr = ql.os.handle_manager.search("TopLevelExceptionHandler").obj @@ -96,10 +84,7 @@ def hook_RaiseException(ql, address, params): # ULONG First, # PVECTORED_EXCEPTION_HANDLER Handler # ); -@winapi(cc=STDCALL, params={ - "First": UINT, - "Handler": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="AddVectoredExceptionHandler", specialtype={'ULONG': 'UINT'}) def hook_AddVectoredExceptionHandler(ql, address, params): # this case is an anomaly from other interrupts (from what i learned, can be wrong) @@ -145,10 +130,8 @@ def exec_standard_into(ql, into, user_data): # ULONG RemoveVectoredExceptionHandler( # PVOID Handle # ); -@winapi(cc=STDCALL, params={ - "Handler": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RemoveVectoredExceptionHandler", specialtype={'PVOID': 'HANDLE'}) def hook_RemoveVectoredExceptionHandler(ql, address, params): - hook = ql.os.handle_manager.get(params["Handler"]).obj + hook = ql.os.handle_manager.get(params["Handle"]).obj hook.remove() return 0 diff --git a/qiling/os/windows/dlls/kernel32/fibersapi.py b/qiling/os/windows/dlls/kernel32/fibersapi.py index 236ac7b34..4ce5ffcc0 100644 --- a/qiling/os/windows/dlls/kernel32/fibersapi.py +++ b/qiling/os/windows/dlls/kernel32/fibersapi.py @@ -13,13 +13,12 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # DWORD FlsFree( # DWORD dwFlsIndex # ); -@winapi(cc=STDCALL, params={ - "dwFlsIndex": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FlsFree", specialtype={'DWORD': 'UINT'}) def hook_FlsFree(ql, address, params): return ql.os.fiber_manager.free(params['dwFlsIndex']) @@ -27,29 +26,24 @@ def hook_FlsFree(ql, address, params): # LPVOID FlsGetValue( # DWORD dwFlsIndex # ); -@winapi(cc=STDCALL, params={ - "dwFlsIndex": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FlsGetValue", specialtype={'DWORD': 'UINT'}) def hook_FlsGetValue(ql, address, params): return ql.os.fiber_manager.get(params['dwFlsIndex']) # LPVOID FlsSetValue( # DWORD dwFlsIndex +# PVOID lpFlsData # ); -@winapi(cc=STDCALL, params={ - "dwFlsIndex": UINT, - "lpFlsValue": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FlsSetValue", specialtype={'DWORD': 'UINT'}) def hook_FlsSetValue(ql, address, params): - return ql.os.fiber_manager.set(params['dwFlsIndex'], params['lpFlsValue']) + return ql.os.fiber_manager.set(params['dwFlsIndex'], params['lpFlsData']) # DWORD FlsAlloc( # PFLS_CALLBACK_FUNCTION lpCallback # ); -@winapi(cc=STDCALL, params={ - "lpCallback": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FlsAlloc") def hook_FlsAlloc(ql, address, params): # global cb = params['lpCallback'] cb = params['lpCallback'] diff --git a/qiling/os/windows/dlls/kernel32/fileapi.py b/qiling/os/windows/dlls/kernel32/fileapi.py index 5f21b1fe1..272b346f0 100644 --- a/qiling/os/windows/dlls/kernel32/fileapi.py +++ b/qiling/os/windows/dlls/kernel32/fileapi.py @@ -14,13 +14,12 @@ from qiling.os.windows.thread import * from qiling.os.windows.handle import * +dllname = 'kernel32_dll' # DWORD GetFileType( # HANDLE hFile # ); -@winapi(cc=STDCALL, params={ - "hFile": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetFileType") def hook_GetFileType(ql, address, params): hFile = params["hFile"] if hFile == STD_INPUT_HANDLE or hFile == STD_OUTPUT_HANDLE or hFile == STD_ERROR_HANDLE: @@ -39,10 +38,7 @@ def hook_GetFileType(ql, address, params): # LPCSTR lpFileName, # LPWIN32_FIND_DATAA lpFindFileData # ); -@winapi(cc=STDCALL, params={ - "lpFilename": POINTER, - "lpFindFileData": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FindFirstFileA", specialtype={'LPCSTR': 'POINTER'}) def hook_FindFirstFileA(ql, address, params): pass @@ -51,10 +47,7 @@ def hook_FindFirstFileA(ql, address, params): # LPCSTR lpFileName, # LPWIN32_FIND_DATAA lpFindFileData # ); -@winapi(cc=STDCALL, params={ - "lpFilename": POINTER, - "lpFindFileData": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FindNextFileA", specialtype={'LPCSTR': 'POINTER'}) def hook_FindNextFileA(ql, address, params): pass @@ -62,9 +55,7 @@ def hook_FindNextFileA(ql, address, params): # BOOL FindClose( # HANDLE hFindFile # ); -@winapi(cc=STDCALL, params={ - "hFindFile": HANDLE, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FindClose") def hook_FindClose(ql, address, params): pass @@ -76,13 +67,7 @@ def hook_FindClose(ql, address, params): # LPDWORD lpNumberOfBytesRead, # LPOVERLAPPED lpOverlapped # ); -@winapi(cc=STDCALL, params={ - "hFile": HANDLE, - "lpBuffer": POINTER, - "nNumberOfBytesToRead": DWORD, - "lpNumberOfBytesRead": POINTER, - "lpOverlapped": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ReadFile") def hook_ReadFile(ql, address, params): ret = 1 hFile = params["hFile"] @@ -119,13 +104,7 @@ def hook_ReadFile(ql, address, params): # LPDWORD lpNumberOfBytesWritten, # LPOVERLAPPED lpOverlapped # ); -@winapi(cc=STDCALL, params={ - "hFile": HANDLE, - "lpBuffer": POINTER, - "nNumberOfBytesToWrite": DWORD, - "lpNumberOfBytesWritten": POINTER, - "lpOverlapped": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WriteFile") def hook_WriteFile(ql, address, params): ret = 1 hFile = params["hFile"] @@ -193,15 +172,7 @@ def _CreateFile(ql, address, params, name): # DWORD dwFlagsAndAttributes, # HANDLE hTemplateFile # ); -@winapi(cc=STDCALL, params={ - "lpFileName": STRING, - "dwDesiredAccess": DWORD, - "dwShareMode": DWORD, - "lpSecurityAttributes": POINTER, - "dwCreationDisposition": DWORD, - "dwFlagsAndAttributes": DWORD, - "hTemplateFile": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateFileA") def hook_CreateFileA(ql, address, params): ret = _CreateFile(ql, address, params, "CreateFileA") return ret @@ -216,15 +187,7 @@ def hook_CreateFileA(ql, address, params): # DWORD dwFlagsAndAttributes, # HANDLE hTemplateFile # ); -@winapi(cc=STDCALL, params={ - "lpFileName": WSTRING, - "dwDesiredAccess": DWORD, - "dwShareMode": DWORD, - "lpSecurityAttributes": POINTER, - "dwCreationDisposition": DWORD, - "dwFlagsAndAttributes": DWORD, - "hTemplateFile": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateFileW") def hook_CreateFileW(ql, address, params): ret = _CreateFile(ql, address, params, "CreateFileW") return ret @@ -234,10 +197,7 @@ def hook_CreateFileW(ql, address, params): # DWORD nBufferLength, # LPWSTR lpBuffer # ); -@winapi(cc=STDCALL, params={ - "nBufferLength": DWORD, - "lpBuffer": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetTempPathW") def hook_GetTempPathW(ql, address, params): temp = (ql.os.windir + "Temp" + "\\\x00").encode('utf-16le') dest = params["lpBuffer"] @@ -253,11 +213,7 @@ def hook_GetTempPathW(ql, address, params): # LPWSTR lpszShortPath, # DWORD cchBuffer # ); -@winapi(cc=STDCALL, params={ - "lpszLongPath": WSTRING, - "lpszShortPath": POINTER, - "cchBuffer": DWORD, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetShortPathNameW") def hook_GetShortPathNameW(ql, address, params): paths = params["lpszLongPath"].split("\\") dst = params["lpszShortPath"] @@ -289,16 +245,7 @@ def hook_GetShortPathNameW(ql, address, params): # LPWSTR lpFileSystemNameBuffer, # DWORD nFileSystemNameSize # ); -@winapi(cc=STDCALL, params={ - "lpRootPathName": WSTRING, - "lpVolumeNameBuffer": POINTER, - "nVolumeNameSize": DWORD, - "lpVolumeSerialNumber": POINTER, - "lpMaximumComponentLength": POINTER, - "lpFileSystemFlags": POINTER, - "lpFileSystemNameBuffer": POINTER, - "nFileSystemNameSize": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetVolumeInformationW") def hook_GetVolumeInformationW(ql, address, params): root = params["lpRootPathName"] if root != 0: @@ -334,9 +281,7 @@ def hook_GetVolumeInformationW(ql, address, params): # UINT GetDriveTypeW( # LPCWSTR lpRootPathName # ); -@winapi(cc=STDCALL, params={ - "lpRootPathName": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDriveTypeW", specialtype={'LPCWSTR': 'POINTER'}) def hook_GetDriveTypeW(ql, address, params): path = params["lpRootPathName"] if path != 0: @@ -355,13 +300,7 @@ def hook_GetDriveTypeW(ql, address, params): # LPDWORD lpNumberOfFreeClusters, # LPDWORD lpTotalNumberOfClusters # ); -@winapi(cc=STDCALL, params={ - "lpRootPathName": WSTRING, - "lpSectorsPerCluster": POINTER, - "lpBytesPerSector": POINTER, - "lpNumberOfFreeClusters": POINTER, - "lpTotalNumberOfClusters": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDiskFreeSpaceW", specialtype={'LPCWSTR': 'POINTER'}) def hook_GetDiskFreeSpaceW(ql, address, params): path = params["lpRootPathName"] if path == ql.os.profile["PATH"]["systemdrive"]: @@ -386,10 +325,7 @@ def hook_GetDiskFreeSpaceW(ql, address, params): # LPCSTR lpPathName, # LPSECURITY_ATTRIBUTES lpSecurityAttributes # ); -@winapi(cc=STDCALL, params={ - "lpPathName": STRING, - "lpSecurityAttributes": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateDirectoryA") def hook_CreateDirectoryA(ql, address, params): path_name = params["lpPathName"] target_dir = os.path.join(ql.rootfs, path_name.replace("\\", os.sep)) @@ -408,10 +344,7 @@ def hook_CreateDirectoryA(ql, address, params): # HANDLE hFile, # LPDWORD lpFileSizeHigh # ); -@winapi(cc=STDCALL, params={ - "hFile": HANDLE, - "lpFileSizeHigh": DWORD, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetFileSize", specialtype={'LPDWORD': 'DWORD'}) def hook_GetFileSize(ql, address, params): try: handle = ql.handle_manager.get(params['hFile'].file) @@ -422,19 +355,19 @@ def hook_GetFileSize(ql, address, params): # BOOL AreFileApisANSI(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="AreFileApisANSI") def hook_AreFileApisANSI(ql, address, params): # TODO make this coherent with SetFileApisToANSI/OEM calls return 1 # void SetFileApisToANSI(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetFileApisToANSI") def hook_SetFileApisToANSI(ql, address, params): return # void SetFileApisToOEM(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetFileApisToOEM") def hook_SetFileApisToOEM(ql, address, params): return diff --git a/qiling/os/windows/dlls/kernel32/handleapi.py b/qiling/os/windows/dlls/kernel32/handleapi.py index 59c14b82a..760856453 100644 --- a/qiling/os/windows/dlls/kernel32/handleapi.py +++ b/qiling/os/windows/dlls/kernel32/handleapi.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL DuplicateHandle( # HANDLE hSourceProcessHandle, @@ -23,15 +24,7 @@ # BOOL bInheritHandle, # DWORD dwOptions # ); -@winapi(cc=STDCALL, params={ - "hSourceProcessHandle": POINTER, - "hSourceHandle": POINTER, - "hTargetProcessHandle": POINTER, - "lpTargetHandle": POINTER, - "dwDesiredAccess": DWORD, - "bInheritHandle": BOOL, - "dwOptions": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DuplicateHandle", specialtype={'HANDLE': 'POINTER'}) def hook_DuplicateHandle(ql, address, params): # TODO for how we manage handle, i think this doesn't work content = params["hSourceHandle"] @@ -43,9 +36,7 @@ def hook_DuplicateHandle(ql, address, params): # BOOL CloseHandle( # HANDLE hObject # ); -@winapi(cc=STDCALL, params={ - "hObject": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CloseHandle") def hook_CloseHandle(ql, address, params): value = params["hObject"] handle = ql.os.handle_manager.get(value) @@ -67,11 +58,7 @@ def hook_CloseHandle(ql, address, params): # DWORD dwMask, # DWORD dwFlags # ); -@winapi(cc=STDCALL, params={ - "hObject": HANDLE, - "dwMask": DWORD, - "dwFlags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetHandleInformation", specialtype={'HANDLE': 'POINTER'}) def hook_SetHandleInformation(ql, address, params): val = params["hObject"] handle = ql.os.handle_manager.get(val) diff --git a/qiling/os/windows/dlls/kernel32/heapapi.py b/qiling/os/windows/dlls/kernel32/heapapi.py index 5b02b7504..e7b65e01c 100644 --- a/qiling/os/windows/dlls/kernel32/heapapi.py +++ b/qiling/os/windows/dlls/kernel32/heapapi.py @@ -13,17 +13,14 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # HANDLE HeapCreate( # DWORD flOptions, # SIZE_T dwInitialSize, # SIZE_T dwMaximumSize # ); -@winapi(cc=STDCALL, params={ - "flOptions": DWORD, - "dwInitialSize": SIZE_T, - "dwMaximumSize": SIZE_T -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HeapCreate") def hook_HeapCreate(ql, address, params): dwInitialSize = params["dwInitialSize"] addr = ql.os.heap.alloc(dwInitialSize) @@ -35,11 +32,7 @@ def hook_HeapCreate(ql, address, params): # DWORD dwFlags, # SIZE_T dwBytes # ); -@winapi(cc=STDCALL, params={ - "hHeap": HANDLE, - "dwFlags": DWORD, - "dwBytes": SIZE_T -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HeapAlloc") def hook_HeapAlloc(ql, address, params): ret = ql.os.heap.alloc(params["dwBytes"]) return ret @@ -50,11 +43,7 @@ def hook_HeapAlloc(ql, address, params): # DWORD dwFlags, # LPCVOID lpMem # ); -@winapi(cc=STDCALL, params={ - "hHeap": HANDLE, - "dwFlags": DWORD, - "lpMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HeapSize") def hook_HeapSize(ql, address, params): pointer = params["lpMem"] return ql.os.heap.size(pointer) @@ -65,11 +54,7 @@ def hook_HeapSize(ql, address, params): # DWORD dwFlags, # _Frees_ptr_opt_ LPVOID lpMem # ); -@winapi(cc=STDCALL, params={ - "hHeap": HANDLE, - "dwFlags": DWORD, - "lpMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HeapFree") def hook_HeapFree(ql, address, params): return ql.os.heap.free(params['lpMem']) @@ -80,19 +65,14 @@ def hook_HeapFree(ql, address, params): # PVOID HeapInformation, # SIZE_T HeapInformationLength # ); -@winapi(cc=STDCALL, params={ - "HeapHandle": HANDLE, - "HeapInformationClass": UINT, - "HeapInformation": POINTER, - "HeapInformationLength": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HeapSetInformation", specialtype={'SIZE_T': 'UINT'}) def hook_HeapSetInformation(ql, address, params): return 1 # HANDLE GetProcessHeap( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetProcessHeap") def hook_GetProcessHeap(ql, address, params): ret = ql.os.heap.start_address return ret diff --git a/qiling/os/windows/dlls/kernel32/interlockedapi.py b/qiling/os/windows/dlls/kernel32/interlockedapi.py index c4a24b59c..8f2850ec6 100644 --- a/qiling/os/windows/dlls/kernel32/interlockedapi.py +++ b/qiling/os/windows/dlls/kernel32/interlockedapi.py @@ -17,9 +17,7 @@ # void InitializeSListHead( # PSLIST_HEADER ListHead # ); -@winapi(cc=STDCALL, params={ - "ListHead": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InitializeSListHead") def hook_InitializeSListHead(ql, address, params): addr = params["ListHead"] handle = Handle(obj=[], id=addr) diff --git a/qiling/os/windows/dlls/kernel32/ioapiset.py b/qiling/os/windows/dlls/kernel32/ioapiset.py index f64e80d02..62321049a 100644 --- a/qiling/os/windows/dlls/kernel32/ioapiset.py +++ b/qiling/os/windows/dlls/kernel32/ioapiset.py @@ -24,16 +24,7 @@ # LPDWORD lpBytesReturned, # LPOVERLAPPED lpOverlapped # ); -@winapi(cc=STDCALL, params={ - "hDevice": HANDLE, - "dwIoControlCode": DWORD, - "lpInBuffer": POINTER, - "nInBufferSize": DWORD, - "lpOutBuffer": POINTER, - "nOutBufferSize": DWORD, - "lpBytesReturned": POINTER, - "lpOverlapped": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DeviceIoControl") def hook_DeviceIoControl(ql, address, params): operation = params["dwIoControlCode"] data = params["lpInBuffer"] diff --git a/qiling/os/windows/dlls/kernel32/libloaderapi.py b/qiling/os/windows/dlls/kernel32/libloaderapi.py index 61dd9ce04..55bbc56e9 100644 --- a/qiling/os/windows/dlls/kernel32/libloaderapi.py +++ b/qiling/os/windows/dlls/kernel32/libloaderapi.py @@ -13,6 +13,7 @@ from qiling.os.windows.utils import * from qiling.os.windows.thread import * +dllname = 'kernel32_dll' def _GetModuleHandle(ql, address, params): lpModuleName = params["lpModuleName"] @@ -33,9 +34,7 @@ def _GetModuleHandle(ql, address, params): # HMODULE GetModuleHandleA( # LPCSTR lpModuleName # ); -@winapi(cc=STDCALL, params={ - "lpModuleName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetModuleHandleA") def hook_GetModuleHandleA(ql, address, params): return _GetModuleHandle(ql, address, params) @@ -43,9 +42,7 @@ def hook_GetModuleHandleA(ql, address, params): # HMODULE GetModuleHandleW( # LPCWSTR lpModuleName # ); -@winapi(cc=STDCALL, params={ - "lpModuleName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetModuleHandleW") def hook_GetModuleHandleW(ql, address, params): return _GetModuleHandle(ql, address, params) @@ -55,11 +52,7 @@ def hook_GetModuleHandleW(ql, address, params): # LPCWSTR lpModuleName, # HMODULE *phModule # ); -@winapi(cc=STDCALL, params={ - "dwFlags": DWORD, - "lpModuleName": WSTRING, - "phModule": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetModuleHandleExW") def hook_GetModuleHandleExW(ql, address, params): res = _GetModuleHandle(ql, address, params) dst = params["phModule"] @@ -72,11 +65,7 @@ def hook_GetModuleHandleExW(ql, address, params): # LPSTR lpFilename, # DWORD nSize # ); -@winapi(cc=STDCALL, params={ - "hModule": HANDLE, - "lpFilename": POINTER, - "nSize": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetModuleFileNameA") def hook_GetModuleFileNameA(ql, address, params): ret = 0 hModule = params["hModule"] @@ -105,11 +94,7 @@ def hook_GetModuleFileNameA(ql, address, params): # LPSTR lpFilename, # DWORD nSize # ); -@winapi(cc=STDCALL, params={ - "hModule": HANDLE, - "lpFilename": POINTER, - "nSize": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetModuleFileNameW") def hook_GetModuleFileNameW(ql, address, params): ret = 0 hModule = params["hModule"] @@ -135,10 +120,7 @@ def hook_GetModuleFileNameW(ql, address, params): # HMODULE hModule, # LPCSTR lpProcName # ); -@winapi(cc=STDCALL, params={ - "hModule": POINTER, - "lpProcName": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetProcAddress", specialtype={'LPCSTR': 'POINTER'}) def hook_GetProcAddress(ql, address, params): if params["lpProcName"] > MAXUSHORT: # Look up by name @@ -173,9 +155,7 @@ def hook_GetProcAddress(ql, address, params): # HMODULE LoadLibraryA( # LPCSTR lpLibFileName # ); -@winapi(cc=STDCALL, params={ - "lpLibFileName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadLibraryA") def hook_LoadLibraryA(ql, address, params): lpLibFileName = params["lpLibFileName"] if lpLibFileName == ql.loader.filepath.decode(): @@ -190,11 +170,7 @@ def hook_LoadLibraryA(ql, address, params): # HANDLE hFile, # DWORD dwFlags # ); -@winapi(cc=STDCALL, params={ - "lpLibFileName": STRING, - "hFile": POINTER, - "dwFlags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadLibraryExA", specialtype={'HANDLE': 'POINTER'}) def hook_LoadLibraryExA(ql, address, params): lpLibFileName = params["lpLibFileName"] dll_base = ql.loader.load_dll(lpLibFileName.encode()) @@ -204,9 +180,7 @@ def hook_LoadLibraryExA(ql, address, params): # HMODULE LoadLibraryW( # LPCWSTR lpLibFileName # ); -@winapi(cc=STDCALL, params={ - "lpLibFileName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadLibraryW") def hook_LoadLibraryW(ql, address, params): lpLibFileName = params["lpLibFileName"].encode() dll_base = ql.loader.load_dll(lpLibFileName) @@ -218,11 +192,7 @@ def hook_LoadLibraryW(ql, address, params): # HANDLE hFile, # DWORD dwFlags # ); -@winapi(cc=STDCALL, params={ - "lpLibFileName": WSTRING, - "hFile": POINTER, - "dwFlags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadLibraryExW", specialtype={'HANDLE': 'POINTER'}) def hook_LoadLibraryExW(ql, address, params): lpLibFileName = params["lpLibFileName"].encode() dll_base = ql.loader.load_dll(lpLibFileName) @@ -233,10 +203,7 @@ def hook_LoadLibraryExW(ql, address, params): # HMODULE hModule, # HRSRC hResInfo # ); -@winapi(cc=STDCALL, params={ - "hModule": POINTER, - "hResInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SizeofResource", specialtype={'HMODULE': 'POINTER'}) def hook_SizeofResource(ql, address, params): # Return size of resource # TODO set a valid value. More tests have to be made to find it. @@ -247,10 +214,7 @@ def hook_SizeofResource(ql, address, params): # HMODULE hModule, # HRSRC hResInfo # ); -@winapi(cc=STDCALL, params={ - "hModule": POINTER, - "hResInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadResource", specialtype={'HMODULE': 'POINTER'}) def hook_LoadResource(ql, address, params): pointer = params["hResInfo"] return pointer @@ -259,9 +223,7 @@ def hook_LoadResource(ql, address, params): # LPVOID LockResource( # HGLOBAL hResData # ); -@winapi(cc=STDCALL, params={ - "hResData": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LockResource", specialtype={'HMODULE': 'POINTER'}) def hook_LockResource(ql, address, params): pointer = params["hResData"] return pointer @@ -270,9 +232,7 @@ def hook_LockResource(ql, address, params): # BOOL DisableThreadLibraryCalls( # HMODULE hLibModule # ); -@winapi(cc=STDCALL, params={ - "hLibModule": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DisableThreadLibraryCalls", specialtype={'HMODULE': 'POINTER'}) def hook_DisableThreadLibraryCalls(ql, address, params): return 1 @@ -280,9 +240,7 @@ def hook_DisableThreadLibraryCalls(ql, address, params): # BOOL FreeLibrary( # HMODULE hLibModule # ); -@winapi(cc=STDCALL, params={ - "hLibModule": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FreeLibrary", specialtype={'HMODULE': 'POINTER'}) def hook_FreeLibrary(ql, address, params): return 1 @@ -290,9 +248,7 @@ def hook_FreeLibrary(ql, address, params): # BOOL SetDefaultDllDirectories( # DWORD DirectoryFlags # ); -@winapi(cc=STDCALL, params={ - "DirectoryFlags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetDefaultDllDirectories") def hook_SetDefaultDllDirectories(ql, address, params): value = params["DirectoryFlags"] if value == LOAD_LIBRARY_SEARCH_USER_DIRS: diff --git a/qiling/os/windows/dlls/kernel32/memoryapi.py b/qiling/os/windows/dlls/kernel32/memoryapi.py index 063c2d7b0..92045093d 100644 --- a/qiling/os/windows/dlls/kernel32/memoryapi.py +++ b/qiling/os/windows/dlls/kernel32/memoryapi.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # LPVOID VirtualAlloc( # LPVOID lpAddress, @@ -20,12 +21,7 @@ # DWORD flAllocationType, # DWORD flProtect # ); -@winapi(cc=STDCALL, params={ - "lpAddress": POINTER, - "dwSize": SIZE_T, - "flAllocationType": DWORD, - "flProtect": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="VirtualAlloc") def hook_VirtualAlloc(ql, address, params): dwSize = params["dwSize"] addr = ql.os.heap.alloc(dwSize) @@ -37,11 +33,7 @@ def hook_VirtualAlloc(ql, address, params): # SIZE_T dwSize, # DWORD dwFreeType # ); -@winapi(cc=STDCALL, params={ - "lpAddress": POINTER, - "dwSize": SIZE_T, - "dwFreeType": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="VirtualFree") def hook_VirtualFree(ql, address, params): lpAddress = params["lpAddress"] ql.os.heap.free(lpAddress) @@ -54,12 +46,7 @@ def hook_VirtualFree(ql, address, params): # DWORD flNewProtect, # PDWORD lpflOldProtect # ); -@winapi(cc=STDCALL, params={ - "lpAddress": POINTER, - "dwSize": UINT, - "flNewProtect": UINT, - "lpflOldProtect": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="VirtualProtect", specialtype={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) def hook_VirtualProtect(ql, address, params): return 1 @@ -69,11 +56,7 @@ def hook_VirtualProtect(ql, address, params): # PMEMORY_BASIC_INFORMATION lpBuffer, # SIZE_T dwLength # ); -@winapi(cc=STDCALL, params={ - "lpAddress": POINTER, - "lpBuffer": POINTER, - "dwLength": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="VirtualQuery", specialtype={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) def hook_VirtualQuery(ql, address, params): """ typedef struct _MEMORY_BASIC_INFORMATION { diff --git a/qiling/os/windows/dlls/kernel32/processenv.py b/qiling/os/windows/dlls/kernel32/processenv.py index a450f936b..b1358a702 100644 --- a/qiling/os/windows/dlls/kernel32/processenv.py +++ b/qiling/os/windows/dlls/kernel32/processenv.py @@ -6,14 +6,12 @@ from qiling.os.windows.fncc import * from qiling.exception import * +dllname = 'kernel32_dll' + # HANDLE WINAPI GetStdHandle( # _In_ DWORD nStdHandle # ); - - -@winapi(cc=STDCALL, params={ - "nStdHandle": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetStdHandle", defparams={"nStdHandle": DWORD}) def hook_GetStdHandle(ql, address, params): nStdHandle = params["nStdHandle"] return nStdHandle @@ -21,7 +19,7 @@ def hook_GetStdHandle(ql, address, params): # LPSTR GetCommandLineA( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCommandLineA") def hook_GetCommandLineA(ql, address, params): cmdline = ql.loader.cmdline + b"\x00" addr = ql.os.heap.alloc(len(cmdline)) @@ -31,7 +29,7 @@ def hook_GetCommandLineA(ql, address, params): # LPSTR GetCommandLineW( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCommandLineW") def hook_GetCommandLineW(ql, address, params): cmdline = ql.loader.cmdline.decode('ascii').encode('utf-16le') addr = ql.os.heap.alloc(len(cmdline)) @@ -40,8 +38,8 @@ def hook_GetCommandLineW(ql, address, params): # LPWCH GetEnvironmentStrings( -# );s -@winapi(cc=STDCALL, params={}) +# ); +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetEnvironmentStrings") def hook_GetEnvironmentStrings(ql, address, params): cmdline = b"\x00" addr = ql.os.heap.alloc(len(cmdline)) @@ -51,7 +49,7 @@ def hook_GetEnvironmentStrings(ql, address, params): # LPWCH GetEnvironmentStringsW( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetEnvironmentStringsW") def hook_GetEnvironmentStringsW(ql, address, params): cmdline = b"\x00\x00" addr = ql.os.heap.alloc(len(cmdline)) @@ -62,9 +60,7 @@ def hook_GetEnvironmentStringsW(ql, address, params): # BOOL FreeEnvironmentStringsW( # LPWCH penv # ); -@winapi(cc=STDCALL, params={ - "penv": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FreeEnvironmentStringsW") def hook_FreeEnvironmentStringsW(ql, address, params): ret = 1 return ret @@ -75,11 +71,7 @@ def hook_FreeEnvironmentStringsW(ql, address, params): # LPWSTR lpDst, # DWORD nSize # ); -@winapi(cc=STDCALL, params={ - "lpSrc": WSTRING, - "lpDst": POINTER, - "nSize": DWORD, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ExpandEnvironmentStringsW") def hook_ExpandEnvironmentStringsW(ql, address, params): string: str = params["lpSrc"] start = string.find("%") @@ -102,11 +94,7 @@ def hook_ExpandEnvironmentStringsW(ql, address, params): # LPSTR lpBuffer, # DWORD nSize # ); -@winapi(cc=STDCALL, params={ - "lpName": STRING, - "lpBuffer": POINTER, - "nSize": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetEnvironmentVariableA") def hook_GetEnvironmentVariableA(ql, address, params): ret = 0 return ret diff --git a/qiling/os/windows/dlls/kernel32/processthreadsapi.py b/qiling/os/windows/dlls/kernel32/processthreadsapi.py index 12c56b590..031d02540 100644 --- a/qiling/os/windows/dlls/kernel32/processthreadsapi.py +++ b/qiling/os/windows/dlls/kernel32/processthreadsapi.py @@ -14,13 +14,13 @@ from qiling.exception import * from qiling.os.windows.structs import * +dllname = 'kernel32_dll' + # void ExitProcess( # UINT uExitCode # ); -@winapi(cc=STDCALL, params={ - "uExitCode": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ExitProcess", specialtype={'UINT': 'DWORD'}) def hook_ExitProcess(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False @@ -38,9 +38,7 @@ def _GetStartupInfo(ql, address, params): # VOID WINAPI GetStartupInfoA( # _Out_ LPSTARTUPINFO lpStartupInfo # ); -@winapi(cc=STDCALL, params={ - "lpStartupInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetStartupInfoA") def hook_GetStartupInfoA(ql, address, params): return _GetStartupInfo(ql, address, params) @@ -48,16 +46,14 @@ def hook_GetStartupInfoA(ql, address, params): # VOID WINAPI GetStartupInfoW( # _Out_ LPSTARTUPINFO lpStartupInfo # ); -@winapi(cc=STDCALL, params={ - "lpStartupInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetStartupInfoW") def hook_GetStartupInfoW(ql, address, params): # The struct for the W version uses LPWSTRING, but i think is the same in this context return _GetStartupInfo(ql, address, params) # DWORD TlsAlloc(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL) def hook_TlsAlloc(ql, address, params): idx = ql.os.thread_manager.cur_thread.tls_index ql.os.thread_manager.cur_thread.tls_index += 1 @@ -68,9 +64,7 @@ def hook_TlsAlloc(ql, address, params): # DWORD TlsFree( # DWORD dwTlsIndex # ); -@winapi(cc=STDCALL, params={ - "dwTlsIndex": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="TlsFree", defparams={"dwTlsIndex": UINT}) def hook_TlsFree(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -84,8 +78,7 @@ def hook_TlsFree(ql, address, params): # LPVOID TlsGetValue( # DWORD dwTlsIndex # ); -@winapi(cc=STDCALL, params={ - "dwTlsIndex": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="TlsGetValue", defparams={"dwTlsIndex": UINT}) def hook_TlsGetValue(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -101,10 +94,7 @@ def hook_TlsGetValue(ql, address, params): # LPVOID TlsSetValue( # DWORD dwTlsIndex # ); -@winapi(cc=STDCALL, params={ - "dwTlsIndex": UINT, - "lpTlsValue": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="TlsSetValue", defparams={"dwTlsIndex": UINT, "lpTlsValue": POINTER}) def hook_TlsSetValue(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -117,7 +107,7 @@ def hook_TlsSetValue(ql, address, params): # DWORD GetCurrentThreadId( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCurrentThreadId") def hook_GetCurrentThreadId(ql, address, params): ret = ql.os.thread_manager.cur_thread.id return ret @@ -125,7 +115,7 @@ def hook_GetCurrentThreadId(ql, address, params): # DWORD GetCurrentProcessId( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCurrentProcessId") def hook_GetCurrentProcessId(ql, address, params): # Let's return a valid value return ql.os.profile.getint("KERNEL", "pid") @@ -134,9 +124,7 @@ def hook_GetCurrentProcessId(ql, address, params): # BOOL IsProcessorFeaturePresent( # DWORD ProcessorFeature # ); -@winapi(cc=STDCALL, params={ - "ProcessorFeature": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsProcessorFeaturePresent") def hook_IsProcessorFeaturePresent(ql, address, params): feature = params["ProcessorFeature"] if feature == PF_XSAVE_ENABLED: @@ -154,14 +142,7 @@ def hook_IsProcessorFeaturePresent(ql, address, params): # DWORD dwCreationFlags, # LPDWORD lpThreadId # ); -@winapi(cc=STDCALL, params={ - "lpThreadAttributes": POINTER, - "dwStackSize": SIZE_T, - "lpStartAddress": POINTER, - "lpParameter": POINTER, - "dwCreationFlags": DWORD, - "lpThreadId": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateThread") def hook_CreateThread(ql, address, params): CREATE_RUN = 0 CREATE_SUSPENDED = 0x00000004 @@ -181,8 +162,7 @@ def hook_CreateThread(ql, address, params): thread_status = QlWindowsThread.READY else: thread_status = QlWindowsThread.RUNNING - - + # create new thread thread_id = new_thread.create( lpStartAddress, @@ -200,8 +180,8 @@ def hook_CreateThread(ql, address, params): # set lpThreadId # FIXME: Temporary fix for the crash - #if lpThreadId != 0: - #ql.mem.write(lpThreadId, ql.pack(thread_id)) + # if lpThreadId != 0: + # ql.mem.write(lpThreadId, ql.pack(thread_id)) # set thread handle return ret @@ -209,7 +189,7 @@ def hook_CreateThread(ql, address, params): # HANDLE GetCurrentProcess( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCurrentProcess") def hook_GetCurrentProcess(ql, address, params): return ql.os.profile.getint("KERNEL", "pid") @@ -218,10 +198,7 @@ def hook_GetCurrentProcess(ql, address, params): # HANDLE hProcess, # UINT uExitCode # ); -@winapi(cc=STDCALL, params={ - "hProcess": HANDLE, - "uExitCode": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="TerminateProcess") def hook_TerminateProcess(ql, address, params): # Samples will try to kill other process! We don't want to always stop! process = params["hProcess"] @@ -233,8 +210,7 @@ def hook_TerminateProcess(ql, address, params): # HANDLE GetCurrentThread(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCurrentThread") def hook_GetCurrentThread(ql, address, params): ret = ql.os.thread_manager.cur_thread.id return ret @@ -245,11 +221,7 @@ def hook_GetCurrentThread(ql, address, params): # BOOL bInheritHandle, # DWORD dwProcessId # ); -@winapi(cc=STDCALL, params={ - "dwDesiredAccess": DWORD, - "bInheritHandle": HANDLE, - "dwProcessId": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OpenProcess", specialtype={'BOOL': 'HANDLE'}) def hook_OpenProcess(ql, address, params): proc = params["dwProcessId"] # If the specified process is the System Process (0x00000000), @@ -271,11 +243,8 @@ def hook_OpenProcess(ql, address, params): # DWORD DesiredAccess, # PHANDLE TokenHandle # ); -@winapi(cc=STDCALL, params={ - "ProcessHandle": HANDLE, - "DesiredAccess": DWORD, - "TokenHandle": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OpenProcessToken", + defparams={"ProcessHandle": HANDLE, "DesiredAccess": DWORD, "TokenHandle": POINTER}) def hook_OpenProcessToken(ql, address, params): token_pointer = params["TokenHandle"] token = Token(ql) @@ -289,10 +258,7 @@ def hook_OpenProcessToken(ql, address, params): # HANDLE hThread, # LPCONTEXT lpContext # ); -@winapi(cc=STDCALL, params={ - "hThread": HANDLE, - "lpContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetThreadContext") def hook_GetThreadContext(ql, address, params): return 1 @@ -303,12 +269,8 @@ def hook_GetThreadContext(ql, address, params): # BOOL OpenAsSelf, # PHANDLE TokenHandle # ); -@winapi(cc=STDCALL, params={ - "ThreadHandle": HANDLE, - "DesiredAccess": DWORD, - "OpenAsSelf": BOOL, - "TokenHandle": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OpenThreadToken", + defparams={"ThreadHandle": HANDLE, "DesiredAccess": DWORD, "OpenAsSelf": BOOL, "TokenHandle": POINTER}) def hook_OpenThreadToken(ql, address, params): token_pointer = params["TokenHandle"] token = Token(ql) @@ -325,12 +287,6 @@ def hook_OpenThreadToken(ql, address, params): # LPFILETIME lpKernelTime, # LPFILETIME lpUserTime # ); -@winapi(cc=STDCALL, params={ - "hThread": HANDLE, - "lpCreationTime": POINTER, - "lpExitTime": POINTER, - "lpKernelTime": POINTER, - "lpUserTime": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetThreadTimes") def hook_GetThreadTimes(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/kernel32/profileapi.py b/qiling/os/windows/dlls/kernel32/profileapi.py index 63c08dc63..c3429838e 100644 --- a/qiling/os/windows/dlls/kernel32/profileapi.py +++ b/qiling/os/windows/dlls/kernel32/profileapi.py @@ -17,9 +17,7 @@ # BOOL QueryPerformanceCounter( # LARGE_INTEGER *lpPerformanceCount # ); -@winapi(cc=STDCALL, params={ - "lpPerformanceCount": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="QueryPerformanceCounter") def hook_QueryPerformanceCounter(ql, address, params): ret = 0 return ret @@ -28,9 +26,7 @@ def hook_QueryPerformanceCounter(ql, address, params): # BOOL QueryPerformanceFrequency( # LARGE_INTEGER *lpFrequency # ); -@winapi(cc=STDCALL, params={ - "lpFrequency": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="QueryPerformanceFrequency") def hook_QueryPerformanceFrequency(ql, address, params): ql.mem.write(params['lpFrequency'], (10000000).to_bytes(length=8, byteorder='little')) return 1 diff --git a/qiling/os/windows/dlls/kernel32/psapi.py b/qiling/os/windows/dlls/kernel32/psapi.py index 4f51066d6..f75480949 100644 --- a/qiling/os/windows/dlls/kernel32/psapi.py +++ b/qiling/os/windows/dlls/kernel32/psapi.py @@ -20,12 +20,7 @@ # LPMODULEINFO lpmodinfo, # DWORD cb # ); -@winapi(cc=STDCALL, params={ - "hProcess": HANDLE, - "hModule": HANDLE, - "lpmodinfo": POINTER, - "cb": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="K32GetModuleInformation") def hook_K32GetModuleInformation(self, address, params): # TODO return 0 diff --git a/qiling/os/windows/dlls/kernel32/stringapiset.py b/qiling/os/windows/dlls/kernel32/stringapiset.py index 55e13cd76..73a999a36 100644 --- a/qiling/os/windows/dlls/kernel32/stringapiset.py +++ b/qiling/os/windows/dlls/kernel32/stringapiset.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL GetStringTypeW( # DWORD dwInfoType, @@ -20,12 +21,7 @@ # int cchSrc, # LPWORD lpCharType # ); -@winapi(cc=STDCALL, params={ - "dwInfoType": DWORD, - "lpSrcStr": POINTER, - "cchSrc": INT, - "lpCharType": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetStringTypeW") def hook_GetStringTypeW(ql, address, params): # TODO implement ret = 1 @@ -40,13 +36,7 @@ def hook_GetStringTypeW(ql, address, params): # INT count, # LPWORD chartype # ) -@winapi(cc=STDCALL, params={ - "locale": POINTER, - "type": DWORD, - "src": STRING, - "count": INT, - "chartype": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetStringTypeExA") def hook_GetStringTypeExA(ql, address, params): # TODO implement ret = 1 @@ -63,16 +53,7 @@ def hook_GetStringTypeExA(ql, address, params): # LPCCH lpDefaultChar, # LPBOOL lpUsedDefaultChar # ); -@winapi(cc=STDCALL, params={ - "CodePage": UINT, - "dwFlags": DWORD, - "lpWideCharStr": WSTRING, - "cchWideChar": INT, - "lpMultiByteStr": POINTER, - "cbMultiByte": INT, - "lpDefaultChar": POINTER, - "lpUsedDefaultChar": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WideCharToMultiByte", specialtype={'LPCWCH': 'WSTRING'}) def hook_WideCharToMultiByte(ql, address, params): ret = 0 @@ -95,14 +76,7 @@ def hook_WideCharToMultiByte(ql, address, params): # LPWSTR lpWideCharStr, # int cchWideChar # ); -@winapi(cc=STDCALL, params={ - "CodePage": UINT, - "dwFlags": UINT, - "lpMultiByteStr": WSTRING, - "cbMultiByte": INT, - "lpWideCharStr": POINTER, - "cchWideChar": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MultiByteToWideChar", specialtype={'DWORD': 'UINT', 'LPCCH': 'WSTRING'}) def hook_MultiByteToWideChar(ql, address, params): wide_str = (params['lpMultiByteStr']+"\x00").encode('utf-16le') if params['cchWideChar'] != 0: diff --git a/qiling/os/windows/dlls/kernel32/synchapi.py b/qiling/os/windows/dlls/kernel32/synchapi.py index 0cb319543..2176a2d03 100644 --- a/qiling/os/windows/dlls/kernel32/synchapi.py +++ b/qiling/os/windows/dlls/kernel32/synchapi.py @@ -15,13 +15,12 @@ from qiling.os.windows.structs import * from qiling.const import * +dllname = 'kernel32_dll' # void Sleep( # DWORD dwMilliseconds # ); -@winapi(cc=STDCALL, params={ - "dwMilliseconds": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="Sleep") def hook_Sleep(ql, address, params): # time.sleep(params["dwMilliseconds"] * 10**(-3)) pass @@ -30,9 +29,7 @@ def hook_Sleep(ql, address, params): # void EnterCriticalSection( # LPCRITICAL_SECTION lpCriticalSection # ); -@winapi(cc=STDCALL, params={ - "lpCriticalSection": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="EnterCriticalSection") def hook_EnterCriticalSection(ql, address, params): return 0 @@ -40,9 +37,7 @@ def hook_EnterCriticalSection(ql, address, params): # void LeaveCriticalSection( # LPCRITICAL_SECTION lpCriticalSection # ); -@winapi(cc=STDCALL, params={ - "lpCriticalSection": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LeaveCriticalSection") def hook_LeaveCriticalSection(ql, address, params): return 0 @@ -50,9 +45,7 @@ def hook_LeaveCriticalSection(ql, address, params): # void DeleteCriticalSection( # LPCRITICAL_SECTION lpCriticalSection # ); -@winapi(cc=STDCALL, params={ - "lpCriticalSection": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DeleteCriticalSection") def hook_DeleteCriticalSection(ql, address, params): return 0 @@ -60,9 +53,7 @@ def hook_DeleteCriticalSection(ql, address, params): # void InitializeCriticalSection( # LPCRITICAL_SECTION lpCriticalSection # ); -@winapi(cc=STDCALL, params={ - "lpCriticalSection": POINTER, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InitializeCriticalSection") def hook_InitializeCriticalSection(ql, address, params): return 1 @@ -72,11 +63,7 @@ def hook_InitializeCriticalSection(ql, address, params): # DWORD dwSpinCount, # DWORD Flags # ); -@winapi(cc=STDCALL, params={ - "lpCriticalSection": POINTER, - "dwSpinCount": DWORD, - "Flags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InitializeCriticalSectionEx") def hook_InitializeCriticalSectionEx(ql, address, params): return 1 @@ -85,10 +72,7 @@ def hook_InitializeCriticalSectionEx(ql, address, params): # LPCRITICAL_SECTION lpCriticalSection, # DWORD dwSpinCount # ); -@winapi(cc=STDCALL, params={ - "lpCriticalSection": POINTER, - "dwSpinCount": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InitializeCriticalSectionAndSpinCount", specialtype={'DWORD': 'UINT'}) def hook_InitializeCriticalSectionAndSpinCount(ql, address, params): return 1 @@ -97,10 +81,7 @@ def hook_InitializeCriticalSectionAndSpinCount(ql, address, params): # HANDLE hHandle, # DWORD dwMilliseconds # ); -@winapi(cc=STDCALL, params={ - "hHandle": HANDLE, - "dwMilliseconds": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WaitForSingleObject") def hook_WaitForSingleObject(ql, address, params): ret = 0 hHandle = params["hHandle"] @@ -119,11 +100,7 @@ def hook_WaitForSingleObject(ql, address, params): # DWORD dwMilliseconds # BOOL bAlertable # ); -@winapi(cc=STDCALL, params={ - "hHandle": HANDLE, - "dwMilliseconds": DWORD, - "bAlertable": BOOL -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WaitForSingleObjectEx") def hook_WaitForSingleObjectEx(ql, address, params): ret = 0 hHandle = params["hHandle"] @@ -142,12 +119,7 @@ def hook_WaitForSingleObjectEx(ql, address, params): # BOOL bWaitAll, # DWORD dwMilliseconds # ); -@winapi(cc=STDCALL, params={ - "nCount": DWORD, - "lpHandles": POINTER, - "bWaitAll": BOOL, - "dwMilliseconds": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WaitForMultipleObjects", specialtype={'HANDLE': 'POINTER'}) def hook_WaitForMultipleObjects(ql, address, params): ret = 0 nCount = params["nCount"] @@ -169,11 +141,7 @@ def hook_WaitForMultipleObjects(ql, address, params): # BOOL bInheritHandle, # LPCWSTR lpName # ); -@winapi(cc=STDCALL, params={ - "dwDesiredAccess": DWORD, - "bInheritHandle": BOOL, - "lpName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OpenMutexW") def hook_OpenMutexW(ql, address, params): # The name can have a "Global" or "Local" prefix to explicitly open an object in the global or session namespace. # It can also have no prefix @@ -209,11 +177,7 @@ def hook_OpenMutexW(ql, address, params): # BOOL bInheritHandle, # LPCSTR lpName # ); -@winapi(cc=STDCALL, params={ - "dwDesiredAccess": DWORD, - "bInheritHandle": BOOL, - "lpName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OpenMutexA") def hook_OpenMutexA(ql, address, params): return hook_OpenMutexW.__wrapped__(ql, address, params) @@ -223,11 +187,7 @@ def hook_OpenMutexA(ql, address, params): # BOOL bInitialOwner, # LPCWSTR lpName # ); -@winapi(cc=STDCALL, params={ - "lpMutexAttributes": POINTER, - "bInitialOwner": BOOL, - "lpName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateMutexW") def hook_CreateMutexW(ql, address, params): try: _type, name = params["lpName"].split("\\") @@ -255,11 +215,7 @@ def hook_CreateMutexW(ql, address, params): # BOOL bInitialOwner, # LPCSTR lpName # ); -@winapi(cc=STDCALL, params={ - "lpMutexAttributes": POINTER, - "bInitialOwner": BOOL, - "lpName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateMutexA") def hook_CreateMutexA(ql, address, params): return hook_CreateMutexW.__wrapped__(ql, address, params) @@ -270,14 +226,9 @@ def hook_CreateMutexA(ql, address, params): # BOOL bInitialState, # LPCSTR lpName # ); -@winapi(cc=STDCALL, params={ - "lpEventAttributes": POINTER, - "bManualReset": BOOL, - "bInitialState": BOOL, - "lpName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateEventA") def hook_CreateEventA(ql, address, params): - """ + """ Implementation seems similar enough to Mutex to just use it """ try: @@ -303,12 +254,7 @@ def hook_CreateEventA(ql, address, params): # BOOL bInitialState, # LPCWSTR lpName # ); -@winapi(cc=STDCALL, params={ - "lpEventAttributes": POINTER, - "bManualReset": BOOL, - "bInitialState": BOOL, - "lpName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateEventW") def hook_CreateEventW(ql, address, params): return hook_CreateEventA.__wrapped__(ql, address, params) @@ -316,9 +262,7 @@ def hook_CreateEventW(ql, address, params): # void InitializeSRWLock( # PSRWLOCK SRWLock # ); -@winapi(cc=STDCALL, params={ - "SRWLock": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InitializeSRWLock") def hook_InitializeSRWLock(ql, address, params): return @@ -326,9 +270,7 @@ def hook_InitializeSRWLock(ql, address, params): # void AcquireSRWLockExclusive( # PSRWLOCK SRWLock # ); -@winapi(cc=STDCALL, params={ - "SRWLock": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="AcquireSRWLockExclusive") def hook_AcquireSRWLockExclusive(ql, address, params): return @@ -336,9 +278,7 @@ def hook_AcquireSRWLockExclusive(ql, address, params): # void AcquireSRWLockShared( # PSRWLOCK SRWLock # ); -@winapi(cc=STDCALL, params={ - "SRWLock": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="AcquireSRWLockShared") def hook_AcquireSRWLockShared(ql, address, params): return @@ -346,9 +286,7 @@ def hook_AcquireSRWLockShared(ql, address, params): # void ReleaseSRWLockExclusive( # PSRWLOCK SRWLock # ); -@winapi(cc=STDCALL, params={ - "SRWLock": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ReleaseSRWLockExclusive") def hook_ReleaseSRWLockExclusive(ql, address, params): return @@ -356,8 +294,6 @@ def hook_ReleaseSRWLockExclusive(ql, address, params): # void ReleaseSRWLockShared( # PSRWLOCK SRWLock # ); -@winapi(cc=STDCALL, params={ - "SRWLock": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ReleaseSRWLockShared") def hook_ReleaseSRWLockShared(ql, address, params): return diff --git a/qiling/os/windows/dlls/kernel32/sysinfoapi.py b/qiling/os/windows/dlls/kernel32/sysinfoapi.py index e8a629547..61bea882e 100644 --- a/qiling/os/windows/dlls/kernel32/sysinfoapi.py +++ b/qiling/os/windows/dlls/kernel32/sysinfoapi.py @@ -15,10 +15,11 @@ from qiling.exception import * from qiling.os.windows.structs import * +dllname = 'kernel32_dll' # NOT_BUILD_WINDOWS_DEPRECATE DWORD GetVersion( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetVersion") def hook_GetVersion(ql, address, params): ret = 0x0004 ret = ret << 16 @@ -29,10 +30,7 @@ def hook_GetVersion(ql, address, params): # NOT_BUILD_WINDOWS_DEPRECATE BOOL GetVersionExA( # LPOSVERSIONINFOA lpVersionInformation # ); -@winapi(cc=STDCALL, params={ - "lpVersionInformation": STRING - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetVersionExA") def hook_GetVersionExA(ql, address, params): return hook_GetVersionExW.__wrapped__(ql, address, params) @@ -40,10 +38,7 @@ def hook_GetVersionExA(ql, address, params): # NOT_BUILD_WINDOWS_DEPRECATE BOOL GetVersionExW( # LPOSVERSIONINFOW lpVersionInformation # ); -@winapi(cc=STDCALL, params={ - "lpVersionInformation": WSTRING - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetVersionExW") def hook_GetVersionExW(ql, address, params): return 1 @@ -51,9 +46,7 @@ def hook_GetVersionExW(ql, address, params): # void GetSystemInfo( # LPSYSTEM_INFO lpSystemInfo # ); -@winapi(cc=STDCALL, params={ - "lpSystemInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSystemInfo") def hook_GetSystemInfo(ql, address, params): pointer = params["lpSystemInfo"] system_info = SystemInfo(ql, 0, ql.os.heap.page_size, ql.loader.pe_image_address, @@ -66,9 +59,7 @@ def hook_GetSystemInfo(ql, address, params): # void GetLocalTime( # LPSYSTEMTIME lpSystemTime # ); -@winapi(cc=STDCALL, params={ - "lpSystemTime": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetLocalTime") def hook_GetLocalTime(ql, address, params): import datetime ptr = params['lpSystemTime'] @@ -82,9 +73,7 @@ def hook_GetLocalTime(ql, address, params): # void GetSystemTimeAsFileTime( # LPFILETIME lpSystemTimeAsFileTime # ); -@winapi(cc=STDCALL, params={ - "lpSystemTimeAsFileTime": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname='GetSystemTimeAsFileTime') def hook_GetSystemTimeAsFileTime(ql, address, params): # TODO pass @@ -92,7 +81,7 @@ def hook_GetSystemTimeAsFileTime(ql, address, params): # DWORD GetTickCount( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname='GetTickCount') def hook_GetTickCount(ql, address, params): ret = 200000 return ret @@ -102,10 +91,7 @@ def hook_GetTickCount(ql, address, params): # LPWSTR lpBuffer, # UINT uSize # ); -@winapi(cc=STDCALL, params={ - "lpBuffer": POINTER, - "uSize": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname='GetWindowsDirectoryW') def hook_GetWindowsDirectoryW(ql, address, params): dst = params["lpBuffer"] value = (ql.os.windir + "\x00").encode("utf-16le") @@ -116,9 +102,7 @@ def hook_GetWindowsDirectoryW(ql, address, params): # void GetNativeSystemInfo( # LPSYSTEM_INFO lpSystemInfo # ); -@winapi(cc=STDCALL, params={ - "lpSystemInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname='GetNativeSystemInfo') def hook_GetNativeSystemInfo(ql, address, params): pointer = params["lpSystemInfo"] system_info = SystemInfo(ql, 0, ql.os.heap.page_size, ql.loader.pe_image_address, @@ -136,9 +120,7 @@ def hook_GetNativeSystemInfo(ql, address, params): # void GetSystemTimePreciseAsFileTime( # LPFILETIME lpSystemTimeAsFileTime # ); -@winapi(cc=STDCALL, params={ - "lpSystemTimeAsFileTime": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname='GetSystemTimePreciseAsFileTime') def hook_GetSystemTimePreciseAsFileTime(ql, address, params): # todo check if the value is correct dt = datetime.now().microsecond.to_bytes(8, byteorder="little") diff --git a/qiling/os/windows/dlls/kernel32/tlhelp32.py b/qiling/os/windows/dlls/kernel32/tlhelp32.py index 2fce9ca69..1871ecf82 100644 --- a/qiling/os/windows/dlls/kernel32/tlhelp32.py +++ b/qiling/os/windows/dlls/kernel32/tlhelp32.py @@ -14,16 +14,13 @@ from qiling.exception import * from qiling.const import * +dllname = 'kernel32_dll' # HANDLE CreateToolhelp32Snapshot( # DWORD dwFlags, # DWORD th32ProcessID # ); -@winapi(cc=STDCALL, params={ - "dwFlags": DWORD, - "th32ProcessID": DWORD - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateToolhelp32Snapshot") def hook_CreateToolhelp32Snapshot(ql, address, params): # TODO thinking about implementing an handler, gonna see if is really necessary flag = params["dwFlags"] @@ -38,11 +35,7 @@ def hook_CreateToolhelp32Snapshot(ql, address, params): # HANDLE hSnapshot, # LPPROCESSENTRY32W lppe # ); -@winapi(cc=STDCALL, params={ - "hSnapshot": HANDLE, - "lppe": POINTER - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="Process32FirstW") def hook_Process32FirstW(ql, address, params): return 0x1 @@ -51,11 +44,7 @@ def hook_Process32FirstW(ql, address, params): # HANDLE hSnapshot, # LPPROCESSENTRY32W lppe # ); -@winapi(cc=STDCALL, params={ - "hSnapshot": HANDLE, - "lppe": POINTER - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="Process32NextW") def hook_Process32NextW(ql, address, params): # Return True if more process, 0 else if ql.os.syscall_count["Process32NextW"] >= 3: # I don' know how many process the sample want's to cycle diff --git a/qiling/os/windows/dlls/kernel32/winbase.py b/qiling/os/windows/dlls/kernel32/winbase.py index cfb73f6ac..a18b29795 100644 --- a/qiling/os/windows/dlls/kernel32/winbase.py +++ b/qiling/os/windows/dlls/kernel32/winbase.py @@ -9,15 +9,12 @@ from qiling.exception import * from qiling.os.windows.structs import * +dllname = 'kernel32_dll' # __analysis_noreturn VOID FatalExit( # int ExitCode # ); - - -@winapi(cc=STDCALL, params={ - "ExitCode": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FatalExit") def hook_FatalExit(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False @@ -26,9 +23,7 @@ def hook_FatalExit(ql, address, params): # PVOID EncodePointer( # _In_ PVOID Ptr # ); -@winapi(cc=STDCALL, params={ - "Ptr": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="EncodePointer", defparams={"Ptr": POINTER}) def hook_EncodePointer(ql, address, params): return params['Ptr'] @@ -36,9 +31,7 @@ def hook_EncodePointer(ql, address, params): # PVOID DecodePointer( # _In_ PVOID Ptr # ); -@winapi(cc=STDCALL, params={ - "Ptr": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DecodePointer", defparams={"Ptr": POINTER}) def hook_DecodePointer(ql, address, params): return params['Ptr'] @@ -47,10 +40,7 @@ def hook_DecodePointer(ql, address, params): # LPCSTR lpCmdLine, # UINT uCmdShow # ); -@winapi(cc=STDCALL, params={ - "lpCmdLine": STRING, - "uCmdShow": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WinExec") def hook_WinExec(ql, address, params): return 33 @@ -59,10 +49,7 @@ def hook_WinExec(ql, address, params): # UINT uFlags, # SIZE_T uBytes # ); -@winapi(cc=STDCALL, params={ - "uFlags": UINT, - "uBytes": SIZE_T -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LocalAlloc") def hook_LocalAlloc(ql, address, params): ret = ql.os.heap.alloc(params["uBytes"]) return ret @@ -73,11 +60,7 @@ def hook_LocalAlloc(ql, address, params): # SIZE_T uBytes, # UINT uFlags # ); -@winapi(cc=STDCALL, params={ - "hMem": POINTER, - "uBytes": SIZE_T, - "uFlags": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LocalReAlloc") def hook_LocalReAlloc(ql, address, params): old_mem = params["hMem"] ql.os.heap.free(old_mem) @@ -88,9 +71,7 @@ def hook_LocalReAlloc(ql, address, params): # HLOCAL LocalFree( # _Frees_ptr_opt_ HLOCAL hMem # ); -@winapi(cc=STDCALL, params={ - "hMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LocalFree") def hook_LocalFree(ql, address, params): old_mem = params["hMem"] ql.os.heap.free(old_mem) @@ -100,9 +81,7 @@ def hook_LocalFree(ql, address, params): # UINT SetHandleCount( # UINT uNumber # ); -@winapi(cc=STDCALL, params={ - "uNumber": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetHandleCount") def hook_SetHandleCount(ql, address, params): uNumber = params["uNumber"] return uNumber @@ -111,9 +90,7 @@ def hook_SetHandleCount(ql, address, params): # LPVOID GlobalLock( # HGLOBAL hMem # ); -@winapi(cc=STDCALL, params={ - "hMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GlobalLock") def hook_GlobalLock(ql, address, params): return params['hMem'] @@ -121,9 +98,7 @@ def hook_GlobalLock(ql, address, params): # LPVOID GlobalUnlock( # HGLOBAL hMem # ); -@winapi(cc=STDCALL, params={ - "hMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GlobalUnlock") def hook_GlobalUnlock(ql, address, params): return 1 @@ -132,10 +107,7 @@ def hook_GlobalUnlock(ql, address, params): # UINT uFlags, # SIZE_T dwBytes # ); -@winapi(cc=STDCALL, params={ - "uFlags": UINT, - "dwBytes": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GlobalAlloc", specialtype={'SIZE_T': 'UINT'}) def hook_GlobalAlloc(ql, address, params): return ql.os.heap.alloc(params["dwBytes"]) @@ -143,9 +115,7 @@ def hook_GlobalAlloc(ql, address, params): # HGLOBAL GlobalFree( # _Frees_ptr_opt_ HGLOBAL hMem # ); -@winapi(cc=STDCALL, params={ - "hMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GlobalFree") def hook_GlobalFree(ql, address, params): old_mem = params["hMem"] ql.os.heap.free(old_mem) @@ -155,9 +125,7 @@ def hook_GlobalFree(ql, address, params): # HGLOBAL GlobalHandle( # LPCVOID pMem # ); -@winapi(cc=STDCALL, params={ - "pMem": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GlobalHandle") def hook_GlobalHandle(ql, address, params): return params["pMem"] @@ -167,11 +135,7 @@ def hook_GlobalHandle(ql, address, params): # LPCSTR lpString2, # int iMaxLength # ); -@winapi(cc=STDCALL, params={ - "lpString1": POINTER, - "lpString2": STRING, - "iMaxLength": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcpynA") def hook_lstrcpynA(ql, address, params): # Copy String2 into String for max iMaxLength chars src = params["lpString2"] @@ -188,11 +152,7 @@ def hook_lstrcpynA(ql, address, params): # LPCWSTR lpString2, # int iMaxLength # ); -@winapi(cc=STDCALL, params={ - "lpString1": POINTER, - "lpString2": WSTRING, - "iMaxLength": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcpynW") def hook_lstrcpynW(ql, address, params): # Copy String2 into String for max iMaxLength chars src = params["lpString2"] @@ -208,10 +168,7 @@ def hook_lstrcpynW(ql, address, params): # LPSTR lpString1, # LPCSTR lpString2, # ); -@winapi(cc=STDCALL, params={ - "lpString1": POINTER, - "lpString2": STRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcpyA") def hook_lstrcpyA(ql, address, params): # Copy String2 into String src = params["lpString2"] @@ -224,10 +181,7 @@ def hook_lstrcpyA(ql, address, params): # LPSTR lpString1, # LPCSTR lpString2, # ); -@winapi(cc=STDCALL, params={ - "lpString1": POINTER, - "lpString2": WSTRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcpyW") def hook_lstrcpyW(ql, address, params): # Copy String2 into String src = params["lpString2"] @@ -240,10 +194,7 @@ def hook_lstrcpyW(ql, address, params): # LPSTR lpString1, # LPCSTR lpString2 # ); -@winapi(cc=STDCALL, params={ - "lpString1": POINTER, - "lpString2": STRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcatA") def hook_lstrcatA(ql, address, params): # Copy String2 into String src = params["lpString2"] @@ -259,10 +210,7 @@ def hook_lstrcatA(ql, address, params): # LPWSTR lpString1, # LPCWSTR lpString2 # ); -@winapi(cc=STDCALL, params={ - "lpString1": POINTER, - "lpString2": WSTRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcatW") def hook_lstrcatW(ql, address, params): # Copy String2 into String src = params["lpString2"] @@ -278,10 +226,7 @@ def hook_lstrcatW(ql, address, params): # LPCWSTR lpString1, # LPCWSTR lpString2 # ); -@winapi(cc=STDCALL, params={ - "lpString1": WSTRING, - "lpString2": WSTRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcmpiW") def hook_lstrcmpiW(ql, address, params): # Copy String2 into String str1 = params["lpString1"] @@ -298,10 +243,7 @@ def hook_lstrcmpiW(ql, address, params): # LPCSTR lpString1, # LPCSTR lpString2 # ); -@winapi(cc=STDCALL, params={ - "lpString1": STRING, - "lpString2": STRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcmpiA") def hook_lstrcmpiA(ql, address, params): return hook_lstrcmpiW.__wrapped__(ql, address, params) @@ -311,11 +253,7 @@ def hook_lstrcmpiA(ql, address, params): # LPCSTR lpName, # LPCSTR lpType # ); -@winapi(cc=STDCALL, params={ - "hModule": POINTER, - "lpName": POINTER, - "lpType": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FindResourceA") def hook_FindResourceA(ql, address, params): # Retrieve a resource # Name e Type can be int or strings, this can be a problem @@ -329,10 +267,7 @@ def hook_FindResourceA(ql, address, params): # const VOID *lp, # UINT_PTR ucb # ); -@winapi(cc=STDCALL, params={ - "lp": POINTER, - "ucb": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsBadReadPtr") def hook_IsBadReadPtr(ql, address, params): # Check read permission for size of memory ACCESS_TRUE = 0 @@ -344,10 +279,7 @@ def hook_IsBadReadPtr(ql, address, params): # const VOID *lp, # UINT_PTR ucb # ); -@winapi(cc=STDCALL, params={ - "lp": POINTER, - "ucb": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsBadWritePtr") def hook_IsBadWritePtr(ql, address, params): # Check read permission for size of memory ACCESS_TRUE = 0 @@ -390,11 +322,7 @@ def compare(p1, operator, p2): # DWORD dwTypeMask, # DWORDLONG dwlConditionMask # ); -@winapi(cc=STDCALL, params={ - "lpVersionInformation": POINTER, - "dwTypeMask": DWORD, - "dwlConditionMask": ULONGLONG -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="VerifyVersionInfoW") def hook_VerifyVersionInfoW(ql, address, params): # https://docs.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-verifyversioninfow2 pointer = params["lpVersionInformation"] @@ -452,10 +380,7 @@ def hook_VerifyVersionInfoW(ql, address, params): # LPWSTR lpBuffer, # LPDWORD pcbBuffer # ); -@winapi(cc=STDCALL, params={ - "lpBuffer": POINTER, - "pcbBuffer": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetUserNameW", defparams={"lpBuffer": POINTER, "pcbBuffer": POINTER}) def hook_GetUserNameW(ql, address, params): username = (ql.os.profile["USER"]["username"] + "\x00").encode("utf-16le") dst = params["lpBuffer"] @@ -473,10 +398,7 @@ def hook_GetUserNameW(ql, address, params): # LPCSTR lpBuffer, # LPDWORD pcbBuffer # ); -@winapi(cc=STDCALL, params={ - "lpBuffer": POINTER, - "pcbBuffer": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetUserNameA") def hook_GetUserNameA(ql, address, params): username = (ql.os.profile["USER"]["username"] + "\x00").encode() dst = params["lpBuffer"] @@ -494,10 +416,7 @@ def hook_GetUserNameA(ql, address, params): # LPWSTR lpBuffer, # LPDWORD nSize # ); -@winapi(cc=STDCALL, params={ - "lpBuffer": POINTER, - "nSize": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetComputerNameW") def hook_GetComputerNameW(ql, address, params): computer = (ql.os.profile["SYSTEM"]["computername"] + "\x00").encode("utf-16le") dst = params["lpBuffer"] @@ -515,10 +434,7 @@ def hook_GetComputerNameW(ql, address, params): # LPCSTR lpBuffer, # LPDWORD nSize # ); -@winapi(cc=STDCALL, params={ - "lpBuffer": POINTER, - "nSize": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetComputerNameA") def hook_GetComputerNameA(ql, address, params): computer = (ql.os.profile["SYSTEM"]["computername"] + "\x00").encode() dst = params["lpBuffer"] diff --git a/qiling/os/windows/dlls/kernel32/winnls.py b/qiling/os/windows/dlls/kernel32/winnls.py index d15913d1e..ba49d769f 100644 --- a/qiling/os/windows/dlls/kernel32/winnls.py +++ b/qiling/os/windows/dlls/kernel32/winnls.py @@ -14,26 +14,25 @@ from qiling.exception import * from qiling.const import * +dllname = 'kernel32_dll' # BOOL SetThreadLocale( # LCID Locale # ); -@winapi(cc=STDCALL, params={ - "Locale": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetThreadLocale", specialtype={'LCID': 'UINT'}) def hook_SetThreadLocale(ql, address, params): return 0xC000 # LOCALE_CUSTOM_DEFAULT # LCID GetThreadLocale(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetThreadLocale") def hook_GetThreadLocale(ql, address, params): return 0xC000 # LOCALE_CUSTOM_DEFAULT # UINT GetACP( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetACP") def hook_GetACP(ql, address, params): return OEM_US @@ -42,10 +41,7 @@ def hook_GetACP(ql, address, params): # UINT CodePage, # LPCPINFO lpCPInfo # ); -@winapi(cc=STDCALL, params={ - "CodePage": UINT, - "lpCPInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCPInfo") def hook_GetCPInfo(ql, address, params): ret = 1 return ret @@ -57,12 +53,8 @@ def hook_GetCPInfo(ql, address, params): # LPSTR lpLCData, # int cchData # ); -@winapi(cc=STDCALL, params={ - "Locale": DWORD, - "LCType": DWORD, - "lpLCData": POINTER, - "cchData": INT, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetLocaleInfoA", + specialtype={'LCID': 'DWORD', 'LCTYPE': 'DWORD'}) def hook_GetLocaleInfoA(ql, address, params): locale_value = params["Locale"] lctype_value = params["LCType"] @@ -85,9 +77,7 @@ def hook_GetLocaleInfoA(ql, address, params): # BOOL IsValidCodePage( # UINT CodePage # ); -@winapi(cc=STDCALL, params={ - "CodePage": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsValidCodePage") def hook_IsValidCodePage(ql, address, params): return 1 @@ -110,14 +100,7 @@ def _LCMapString(ql, address, params): # LPWSTR lpDestStr, # int cchDest # ); -@winapi(cc=STDCALL, params={ - "Locale": POINTER, - "dwMapFlags": DWORD, - "lpSrcStr": WSTRING, - "cchSrc": INT, - "lpDestStr": POINTER, - "cchDest": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LCMapStringW") def hook_LCMapStringW(ql, address, params): return _LCMapString(ql, address, params) @@ -130,14 +113,7 @@ def hook_LCMapStringW(ql, address, params): # LPSTR lpDestStr, # int cchDest # ); -@winapi(cc=STDCALL, params={ - "Locale": POINTER, - "dwMapFlags": DWORD, - "lpSrcStr": STRING, - "cchSrc": INT, - "lpDestStr": POINTER, - "cchDest": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LCMapStringA") def hook_LCMapStringA(ql, address, params): return _LCMapString(ql, address, params) @@ -153,25 +129,13 @@ def hook_LCMapStringA(ql, address, params): # LPVOID lpReserved, # LPARAM sortHandle # ); -@winapi(cc=STDCALL, params={ - "lpLocaleName": POINTER, - "dwMapFlags": DWORD, - "lpSrcStr": WSTRING, - "cchSrc": INT, - "lpDestStr": POINTER, - "cchDest": INT, - "lpVersionInformation": POINTER, - "lpReserved": UINT, - "sortHandle": UINT - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LCMapStringEx") def hook_LCMapStringEx(ql, address, params): return _LCMapString(ql, address, params) # LANGID GetUserDefaultUILanguage(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetUserDefaultUILanguage") def hook_GetUserDefaultUILanguage(ql, address, params): # TODO find better documentation # https://docs.microsoft.com/it-it/windows/win32/intl/language-identifiers @@ -179,8 +143,7 @@ def hook_GetUserDefaultUILanguage(ql, address, params): # LANGID GetSystemDefaultUILanguage(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSystemDefaultUILanguage") def hook_GetSystemDefaultUILanguage(ql, address, params): # TODO find better documentation # https://docs.microsoft.com/it-it/windows/win32/intl/language-identifiers @@ -195,14 +158,7 @@ def hook_GetSystemDefaultUILanguage(ql, address, params): # PCNZCH lpString2, # int cchCount2 # ); -@winapi(cc=STDCALL, params={ - "Locale": POINTER, - "dwCmpFlags": DWORD, - "lpString1": STRING, - "cchCount1": INT, - "lpString2": STRING, - "cchCount2": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CompareStringA") def hook_CompareStringA(ql, address, params): st1 = params["lpString1"] st2 = params["lpString2"] diff --git a/qiling/os/windows/dlls/kernel32/winnt.py b/qiling/os/windows/dlls/kernel32/winnt.py index d5539d4c0..db2ce082c 100644 --- a/qiling/os/windows/dlls/kernel32/winnt.py +++ b/qiling/os/windows/dlls/kernel32/winnt.py @@ -6,17 +6,13 @@ from qiling.os.windows.const import * from qiling.os.windows.fncc import * +dllname = 'kernel32_dll' # LONG InterlockedExchange( # LONG volatile *Target, # LONG Value # ); - - -@winapi(cc=STDCALL, params={ - "Target": POINTER, - "Value": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InterlockedExchange", defparams={"Target": POINTER, "Value": UINT}) def hook_InterlockedExchange(ql, address, params): old = int.from_bytes(ql.mem.read(params['Target'], ql.pointersize), byteorder='little') ql.mem.write(params['Target'], params['Value'].to_bytes(length=ql.pointersize, byteorder='little')) @@ -26,9 +22,7 @@ def hook_InterlockedExchange(ql, address, params): # LONG InterlockedIncrement( # LONG volatile *Target, # ); -@winapi(cc=STDCALL, params={ - "Target": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InterlockedIncrement", defparams={"Target": POINTER}) def hook_InterlockedIncrement(ql, address, params): val = int.from_bytes(ql.mem.read(params['Target'], 4), byteorder='little') val += 1 & (2 ** 32) # increment and overflow back to 0 if applicable @@ -39,9 +33,7 @@ def hook_InterlockedIncrement(ql, address, params): # LONG InterlockedDecrement( # LONG volatile *Target, # ); -@winapi(cc=STDCALL, params={ - "Target": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InterlockedDecrement", defparams={"Target": POINTER}) def hook_InterlockedDecrement(ql, address, params): val = int.from_bytes(ql.mem.read(params['Target'], 4), byteorder='little') val -= 1 @@ -56,11 +48,8 @@ def hook_InterlockedDecrement(ql, address, params): # DWORD TypeMask, # BYTE Condition # ); -@winapi(cc=STDCALL, params={ - "ConditionMask": ULONGLONG, - "TypeMask": DWORD, - "Condition": BYTE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="VerSetConditionMask", + defparams={"ConditionMask": ULONGLONG, "TypeMask": DWORD, "Condition": BYTE}) def hook_VerSetConditionMask(ql, address, params): # ConditionMask = params["ConditionMask"] TypeMask = params["TypeMask"] diff --git a/qiling/os/windows/dlls/kernel32/wow64apiset.py b/qiling/os/windows/dlls/kernel32/wow64apiset.py index 6afda7872..e9301eb24 100644 --- a/qiling/os/windows/dlls/kernel32/wow64apiset.py +++ b/qiling/os/windows/dlls/kernel32/wow64apiset.py @@ -19,10 +19,7 @@ # HANDLE hProcess, # PBOOL Wow64Process # ); -@winapi(cc=STDCALL, params={ - "hProcess": HANDLE, - "Wow64Process": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsWow64Process") def hook_IsWow64Process(ql, address, params): pointer = params["Wow64Process"] false = 0x0.to_bytes(length=1, byteorder='little') diff --git a/qiling/os/windows/dlls/mscoree.py b/qiling/os/windows/dlls/mscoree.py index 45e14d238..1ac8d3362 100644 --- a/qiling/os/windows/dlls/mscoree.py +++ b/qiling/os/windows/dlls/mscoree.py @@ -14,17 +14,14 @@ # void STDMETHODCALLTYPE CorExitProcess ( # int exitCode # ); -@winapi(cc=STDCALL, params={ - "exitCode": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CorExitProcess", specialtype={'int': 'DWORD'}) def hook_CorExitProcess(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False # __int32 STDMETHODCALLTYPE _CorExeMain (); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname='crypt32_dll', funcname="_CorExeMain") def hook__CorExeMain(ql, address, params): # TODO implement + check call type pass diff --git a/qiling/os/windows/dlls/msi.py b/qiling/os/windows/dlls/msi.py index 7994a596c..ec1d81b7b 100644 --- a/qiling/os/windows/dlls/msi.py +++ b/qiling/os/windows/dlls/msi.py @@ -19,11 +19,6 @@ # INSTALLSTATE *piInstalled, # INSTALLSTATE *piAction # ); -@winapi(cc=STDCALL, params={ - "package": POINTER, - "szComponent": STRING, - "piInstalled": POINTER, - "piAction": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MsiGetComponentStateA") def hook_MsiGetComponentStateA(ql, address, params): return 6 # INVALID_HANDLE diff --git a/qiling/os/windows/dlls/msvcrt.py b/qiling/os/windows/dlls/msvcrt.py index 0adc1a17b..eb0dd966c 100644 --- a/qiling/os/windows/dlls/msvcrt.py +++ b/qiling/os/windows/dlls/msvcrt.py @@ -11,14 +11,12 @@ from qiling.os.const import * from qiling.os.windows.const import * - +dllname = 'kernel32_dll' # void __set_app_type ( # int at # ) -@winapi(cc=CDECL, params={ - "at": INT -}) +@winsdkapi(cc=CDECL) def hook___set_app_type(ql, address, params): pass @@ -29,13 +27,8 @@ def hook___set_app_type(ql, address, params): # char *** _Env, # int _DoWildCard, # _startupinfo * _StartInfo); -@winapi(cc=CDECL, params={ - "_Argc": POINTER, - "_Argv": POINTER, - "_Env": POINTER, - "_DoWildCard": INT, - "_StartInfo": POINTER -}) +@winsdkapi(cc=CDECL, + defparams={"_Argc": POINTER, "_Argv": POINTER, "_Env": POINTER, "_DoWildCard": INT, "_StartInfo": POINTER}) def hook___getmainargs(ql, address, params): ret = 0 return ret @@ -43,7 +36,7 @@ def hook___getmainargs(ql, address, params): # int* __p__fmode( # ); -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL, defparams={}) def hook___p__fmode(ql, address, params): addr = ql.os.heap.alloc(ql.pointersize) return addr @@ -51,7 +44,7 @@ def hook___p__fmode(ql, address, params): # int * __p__commode( # ); -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL, defparams={}) def hook___p__commode(ql, address, params): addr = ql.os.heap.alloc(ql.pointersize) return addr @@ -59,7 +52,7 @@ def hook___p__commode(ql, address, params): # int * __p__commode( # ); -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL, defparams={}) def hook___p__acmdln(self, address, params): addr = self.ql.loader.import_address_table['msvcrt.dll'][b'_acmdln'] return addr @@ -69,10 +62,7 @@ def hook___p__acmdln(self, address, params): # unsigned int new, # unsigned int mask # ); -@winapi(cc=CDECL, params={ - "new": UINT, - "mask": UINT -}) +@winsdkapi(cc=CDECL, defparams={"new": UINT, "mask": UINT}) def hook__controlfp(ql, address, params): ret = 0x8001f return ret @@ -81,16 +71,14 @@ def hook__controlfp(ql, address, params): # int atexit( # void (__cdecl *func)(void) # ); -@winapi(cc=CDECL, params={ - "func": POINTER -}) +@winsdkapi(cc=CDECL, defparams={"func": POINTER}) def hook_atexit(ql, address, params): ret = 0 return ret # char*** __p__environ(void) -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL, defparams={}) def hook___p__environ(ql, address, params): ret = ql.os.heap.alloc(ql.pointersize * len(ql.os.env)) count = 0 @@ -108,9 +96,7 @@ def hook___p__environ(ql, address, params): # int puts( # const char *str # ); -@winapi(cc=CDECL, params={ - "str": STRING -}) +@winsdkapi(cc=CDECL, defparams={"str": STRING}) def hook_puts(ql, address, params): ret = 0 string = params["str"] @@ -120,7 +106,7 @@ def hook_puts(ql, address, params): # void _cexit( void ); -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL, defparams={}) def hook__cexit(ql, address, params): pass @@ -129,10 +115,7 @@ def hook__cexit(ql, address, params): # PVFV *, # PVFV * # ); -@winapi(cc=CDECL, params={ - "pfbegin": POINTER, - "pfend": POINTER -}) +@winsdkapi(cc=CDECL, defparams={"pfbegin": POINTER, "pfend": POINTER}) def hook__initterm(ql, address, params): pass @@ -140,9 +123,7 @@ def hook__initterm(ql, address, params): # void exit( # int const status # ); -@winapi(cc=CDECL, params={ - "status": INT -}) +@winsdkapi(cc=CDECL, defparams={"status": INT}) def hook_exit(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False @@ -152,16 +133,13 @@ def hook_exit(ql, address, params): # PVFV *, # PVFV * # ); -@winapi(cc=CDECL, params={ - "pfbegin": POINTER, - "pfend": POINTER -}) +@winsdkapi(cc=CDECL, defparams={"pfbegin": POINTER, "pfend": POINTER}) def hook__initterm_e(ql, address, params): return 0 # char*** __cdecl __p___argv (void); -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL, defparams={}) def hook___p___argv(ql, address, params): ret = ql.os.heap.alloc(ql.pointersize * len(ql.argv)) count = 0 @@ -176,14 +154,14 @@ def hook___p___argv(ql, address, params): # int* __p___argc(void) -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL, defparams={}) def hook___p___argc(ql, address, params): ret = ql.os.heap.alloc(ql.pointersize) ql.mem.write(ret, ql.pack(len(ql.argv))) return ret -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL, defparams={}) def hook__get_initial_narrow_environment(ql, address, params): ret = 0 count = 0 @@ -198,7 +176,7 @@ def hook__get_initial_narrow_environment(ql, address, params): # int printf(const char *format, ...) -@winapi(cc=CDECL, param_num=1) +@winsdkapi(cc=CDECL, param_num=1) def hook_printf(ql, address, _): ret = 0 format_string = ql.os.get_function_param(1) @@ -226,15 +204,13 @@ def hook_printf(ql, address, _): # MSVCRT_FILE * CDECL MSVCRT___acrt_iob_func(unsigned idx) -@winapi(cc=CDECL, params={ - "idx": UINT -}) +@winsdkapi(cc=CDECL, defparams={"idx": UINT}) def hook___acrt_iob_func(ql, address, params): ret = 0 return ret -@winapi(cc=CDECL, param_num=2) +@winsdkapi(cc=CDECL, param_num=2) def hook___stdio_common_vfprintf(ql, address, _): ret = 0 if ql.pointersize == 8: @@ -246,7 +222,7 @@ def hook___stdio_common_vfprintf(ql, address, _): return ret -@winapi(cc=CDECL, param_num=4) +@winsdkapi(cc=CDECL, param_num=4) def hook___stdio_common_vfwprintf(ql, address, _): ret = 0 _, _, _, p_format, _, p_args = ql.os.get_function_param(6) @@ -256,7 +232,7 @@ def hook___stdio_common_vfwprintf(ql, address, _): return ret -@winapi(cc=CDECL, param_num=4) +@winsdkapi(cc=CDECL, param_num=4) def hook___stdio_common_vswprintf_s(ql, address, _): ret = 0 _, size, p_format, p_args = ql.os.get_function_param(4) @@ -270,9 +246,7 @@ def hook___stdio_common_vswprintf_s(ql, address, _): # int lstrlenA( # LPCSTR lpString # ); -@winapi(cc=CDECL, params={ - 'lpString': POINTER -}) +@winsdkapi(cc=CDECL, defparams={'lpString': POINTER}) def hook_lstrlenA(ql, address, params): addr = params["lpString"] string = b"" @@ -288,9 +262,7 @@ def hook_lstrlenA(ql, address, params): # int lstrlenW( # LPCWSTR lpString # ); -@winapi(cc=CDECL, params={ - 'lpString': POINTER -}) +@winsdkapi(cc=CDECL, defparams={'lpString': POINTER}) def hook_lstrlenW(ql, address, params): addr = params["lpString"] string = b"" @@ -303,7 +275,7 @@ def hook_lstrlenW(ql, address, params): return len(string) -@winapi(cc=CDECL, params={}) +@winsdkapi(cc=CDECL, defparams={}) def hook___lconv_init(ql, address, params): ret = 0 return ret @@ -312,9 +284,7 @@ def hook___lconv_init(ql, address, params): # size_t strlen( # const char *str # ); -@winapi(cc=CDECL, params={ - "str": STRING -}) +@winsdkapi(cc=CDECL, defparams={"str": STRING}) def hook_strlen(ql, address, params): _str = params["str"] strlen = len(_str) @@ -326,11 +296,7 @@ def hook_strlen(ql, address, params): # const char *string2, # size_t count # ); -@winapi(cc=CDECL, params={ - "string1": STRING, - "string2": STRING, - "count": SIZE_T -}) +@winsdkapi(cc=CDECL, defparams={"string1": STRING, "string2": STRING, "count": SIZE_T}) def hook_strncmp(ql, address, params): s1 = params["string1"] s2 = params["string2"] @@ -348,9 +314,7 @@ def hook_strncmp(ql, address, params): # void* malloc（unsigned int size) -@winapi(cc=CDECL, params={ - "size": UINT -}) +@winsdkapi(cc=CDECL, defparams={"size": UINT}) def hook_malloc(ql, address, params): size = params['size'] addr = ql.os.heap.alloc(size) @@ -360,9 +324,7 @@ def hook_malloc(ql, address, params): # _onexit_t _onexit( # _onexit_t function # ); -@winapi(cc=CDECL, params={ - "function": POINTER -}) +@winsdkapi(cc=CDECL, defparams={"function": POINTER}) def hook__onexit(ql, address, params): function = params['function'] addr = ql.os.heap.alloc(ql.pointersize) @@ -375,11 +337,7 @@ def hook__onexit(ql, address, params): # int c, # size_t count # ); -@winapi(cc=CDECL, params={ - "dest": POINTER, - "c": INT, - "count": SIZE_T -}) +@winsdkapi(cc=CDECL, defparams={"dest": POINTER, "c": INT, "count": SIZE_T}) def hook_memset(ql, address, params): dest = params["dest"] c = params["c"] @@ -392,10 +350,7 @@ def hook_memset(ql, address, params): # size_t num, # size_t size # ); -@winapi(cc=CDECL, params={ - "num": SIZE_T, - "size": SIZE_T -}) +@winsdkapi(cc=CDECL, defparams={"num": SIZE_T, "size": SIZE_T}) def hook_calloc(ql, address, params): num = params['num'] size = params['size'] @@ -408,11 +363,7 @@ def hook_calloc(ql, address, params): # const void *src, # size_t num # ); -@winapi(cc=CDECL, params={ - "dest": POINTER, - "src": POINTER, - "num": SIZE_T -}) +@winsdkapi(cc=CDECL, defparams={"dest": POINTER, "src": POINTER, "num": SIZE_T}) def hook_memmove(ql, address, params): data = ql.mem.read(params['src'], params['num']) ql.mem.write(params['dest'], bytes(data)) @@ -422,9 +373,7 @@ def hook_memmove(ql, address, params): # int _ismbblead( # unsigned int c # ); -@winapi(cc=CDECL, params={ - "c": UINT -}) +@winsdkapi(cc=CDECL, defparams={"c": UINT}) def hook__ismbblead(ql, address, params): # TODO check if is CDECL or not # If locale is utf-8 always return 0 @@ -440,11 +389,7 @@ def hook__ismbblead(ql, address, params): # const wchar_t *filename, # const wchar_t *mode # ); -@winapi(cc=CDECL, params={ - "pFile": POINTER, - "filename": WSTRING, - "mode": WSTRING -}) +@winsdkapi(cc=CDECL, defparams={"pFile": POINTER, "filename": WSTRING, "mode": WSTRING}) def hook__wfopen_s(ql, address, params): dst = params["pFile"] filename = params["filename"] @@ -458,9 +403,7 @@ def hook__wfopen_s(ql, address, params): # time_t time( time_t *destTime ); -@winapi(cc=CDECL, params={ - "destTime": POINTER -}) +@winsdkapi(cc=CDECL, defparams={"destTime": POINTER}) def hook__time64(ql, address, params): dst = params["destTime"] time_wasted = int(time.time()) diff --git a/qiling/os/windows/dlls/ntdll.py b/qiling/os/windows/dlls/ntdll.py index af196e4e0..51480b0f6 100644 --- a/qiling/os/windows/dlls/ntdll.py +++ b/qiling/os/windows/dlls/ntdll.py @@ -13,17 +13,14 @@ from qiling.exception import * import qiling.os.windows.structs +dllname = 'ntdll_dll' # void *memcpy( # void *dest, # const void *src, # size_t count # ); -@winapi(cc=CDECL, params={ - "dest": POINTER, - "src": POINTER, - "count": UINT -}) +@winsdkapi(cc=CDECL, dllname=dllname, funcname="memcpy", defparams={"dest": POINTER, "src": POINTER, "count": UINT}) def hook_memcpy(ql, address, params): try: data = bytes(ql.mem.read(params['src'], params['count'])) @@ -72,13 +69,9 @@ def _QueryInformationProcess(ql, address, params): # _In_ ULONG ProcessInformationLength, # _Out_opt_ PULONG ReturnLength # ); -@winapi(cc=STDCALL, params={ - "ProcessHandle": HANDLE, - "ProcessInformationClass": INT, - "ProcessInformation": POINTER, - "ProcessInformationLength": UINT, - "ReturnLength": POINTER -}) +@winsdkapi(cc=CDECL, dllname=dllname, funcname="ZwQueryInformationProcess", + defparams={"ProcessHandle": HANDLE, "ProcessInformationClass": INT, "ProcessInformation": POINTER, + "ProcessInformationLength": UINT, "ReturnLength": POINTER}) def hook_ZwQueryInformationProcess(ql, address, params): # TODO have no idea if is cdecl or stdcall @@ -92,13 +85,7 @@ def hook_ZwQueryInformationProcess(ql, address, params): # IN ULONG ProcessInformationLength, # OUT PULONG ReturnLength # ); -@winapi(cc=STDCALL, params={ - "ProcessHandle": HANDLE, - "ProcessInformationClass": INT, - "ProcessInformation": POINTER, - "ProcessInformationLength": UINT, - "ReturnLength": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="NtQueryInformationProcess") def hook_NtQueryInformationProcess(ql, address, params): # TODO have no idea if is cdecl or stdcall @@ -111,12 +98,8 @@ def hook_NtQueryInformationProcess(ql, address, params): # ObjectAttributes: POBJECT_ATTRIBUTES, # Flags: ULONG # ) -> NTSTATUS -@winapi(cc=STDCALL, params={ - "DebugObjectHandle": HANDLE, - "DesiredAccess": INT, - "ObjectAttributes": POINTER, - "Flags": ULONGLONG -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ZwCreateDebugObject", + defparams={"DebugObjectHandle": HANDLE, "DesiredAccess": INT, "ObjectAttributes": POINTER, "Flags": ULONGLONG}) def hook_ZwCreateDebugObject(ql, address, params): # FIXME: find documentation, almost none was found online, and create the correct object handle = Handle(id=params["DebugObjectHandle"]) @@ -131,13 +114,7 @@ def hook_ZwCreateDebugObject(ql, address, params): # ULONG ObjectInformationLength, # PULONG ReturnLength # ); -@winapi(cc=STDCALL, params={ - "Handle": HANDLE, - "ObjectInformationClass": INT, - "ObjectInformation": POINTER, - "ObjectInformationLength": UINT, - "ReturnLength": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="NtQueryObject") def hook_ZwQueryObject(ql, address, params): infoClass = params["ObjectInformationClass"] dest = params["ObjectInformation"] @@ -173,8 +150,7 @@ def hook_ZwQueryObject(ql, address, params): # NTAPI # NtYieldExecution( # ); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="NtYieldExecution", defparams={}) def hook_ZwYieldExecution(ql, address, params): # FIXME: offer timeslice of this thread return STATUS_NO_YIELD_PERFORMED @@ -185,12 +161,8 @@ def hook_ZwYieldExecution(ql, address, params): # IN PANSI_STRING FunctionName OPTIONAL, # IN WORD Oridinal OPTIONAL, # OUT PVOID *FunctionAddress ); -@winapi(cc=STDCALL, params={ - "ModuleHandle": POINTER, - "FunctionName": STRING, - "Ordinal": UINT, - "FunctionAddress": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LdrGetProcedureAddress", defparams={"ModuleHandle": POINTER, + "FunctionName": STRING, "Ordinal": UINT, "FunctionAddress": POINTER}) def hook_LdrGetProcedureAddress(ql, address, params): if params['FunctionName']: identifier = bytes(params["lpProcName"], 'ascii') @@ -216,21 +188,15 @@ def hook_LdrGetProcedureAddress(ql, address, params): # ULONG Flags, # SIZE_T Size # ); -@winapi(cc=STDCALL, params={ - "HeapHandle": POINTER, - "Flags": UINT, - "Size": SIZE_T -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RtlAllocateHeap", defparams={"HeapHandle": POINTER, + "Flags": UINT,"Size": SIZE_T}) def hook_RtlAllocateHeap(ql, address, params): ret = ql.heap.alloc(params["Size"]) return ret # wchar_t* wcsstr( const wchar_t* dest, const wchar_t* src ); -@winapi(cc=STDCALL, params={ - "dest": POINTER, - "src": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="wcsstr", defparams={"dest": POINTER, "src": WSTRING}) def hook_wcsstr(ql, address, params): dest = params["dest"] value = ql.os.read_wstring(dest) @@ -243,8 +209,7 @@ def hook_wcsstr(ql, address, params): # HANDLE CsrGetProcessId(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CsrGetProcessId", defparams={}) def hook_CsrGetProcessId(ql, address, params): pid = ql.os.profile["PROCESSES"].getint("csrss.exe", fallback=12345) return pid diff --git a/qiling/os/windows/dlls/ntoskrnl.py b/qiling/os/windows/dlls/ntoskrnl.py index 613b58d5c..67faddf8e 100644 --- a/qiling/os/windows/dlls/ntoskrnl.py +++ b/qiling/os/windows/dlls/ntoskrnl.py @@ -13,13 +13,12 @@ from qiling.exception import * from qiling.os.windows.structs import * +dllname = 'ntoskrnl_dll' # NTSYSAPI NTSTATUS RtlGetVersion( # PRTL_OSVERSIONINFOW lpVersionInformation # ); -@winapi(cc=CDECL, params={ - "lpVersionInformation": POINTER -}) +@winsdkapi(cc=CDECL, dllname=dllname, funcname="RtlGetVersion", defparams={"lpVersionInformation": POINTER}) def hook_RtlGetVersion(ql, address, params): pointer = params["lpVersionInformation"] os = OsVersionInfoW(ql) @@ -37,13 +36,8 @@ def hook_RtlGetVersion(ql, address, params): # PVOID ThreadInformation, # ULONG ThreadInformationLength # ); -@winapi(cc=STDCALL, params={ - "ThreadHandle": HANDLE, - "ThreadInformationClass": INT, - "ThreadInformation": POINTER, - "ThreadInformationLength": UINT, - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ZwSetInformationThread", defparams={"ThreadHandle": HANDLE, + "ThreadInformationClass": INT, "ThreadInformation": POINTER, "ThreadInformationLength": UINT}) def hook_ZwSetInformationThread(ql, address, params): thread = params["ThreadHandle"] information = params["ThreadInformationClass"] @@ -68,10 +62,7 @@ def hook_ZwSetInformationThread(ql, address, params): # NTSYSAPI NTSTATUS ZwClose( # HANDLE Handle # ); -@winapi(cc=STDCALL, params={ - "Handle": HANDLE - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ZwClose", defparams={"Handle": HANDLE}) def hook_ZwClose(ql, address, params): value = params["Handle"] handle = ql.os.handle_manager.get(value) diff --git a/qiling/os/windows/dlls/ole32.py b/qiling/os/windows/dlls/ole32.py index f954bf484..e4a38996c 100644 --- a/qiling/os/windows/dlls/ole32.py +++ b/qiling/os/windows/dlls/ole32.py @@ -13,13 +13,12 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'ole32_dll' # HRESULT OleInitialize( # IN LPVOID pvReserved # ); -@winapi(cc=STDCALL, params={ - "pvReserved": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OleInitialize") def hook_OleInitialize(ql, address, params): # I don't think we need to do anything, we hook every call for the COM library and manage them locally return S_OK @@ -29,10 +28,7 @@ def hook_OleInitialize(ql, address, params): # LPMESSAGEFILTER lpMessageFilter, # LPMESSAGEFILTER *lplpMessageFilter # ); -@winapi(cc=STDCALL, params={ - "lpMessageFilter": POINTER, - "lplpMessageFilter": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CoRegisterMessageFilter") def hook_CoRegisterMessageFilter(ql, address, params): return S_OK @@ -41,10 +37,7 @@ def hook_CoRegisterMessageFilter(ql, address, params): # LPVOID pvReserved, # DWORD dwCoInit # ); -@winapi(cc=STDCALL, params={ - "pvReserved": POINTER, - "dwCoInit": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CoInitializeEx") def hook_CoInitializeEx(ql, address, params): return S_OK @@ -59,17 +52,7 @@ def hook_CoInitializeEx(ql, address, params): # DWORD dwCapabilities, # void *pReserved3 # ); -@winapi(cc=STDCALL, params={ - "pSecDesc": POINTER, - "cAuthSvc": ULONGLONG, - "asAuthSvc": POINTER, - "pReserved1": POINTER, - "dwAuthnLevel": DWORD, - "dwImpLevel": DWORD, - "pAuthList": POINTER, - "dwCapabilities": DWORD, - "pReserved3": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CoInitializeSecurity") def hook_CoInitializeSecurity(ql, address, params): return S_OK @@ -81,13 +64,7 @@ def hook_CoInitializeSecurity(ql, address, params): # REFIID riid, # LPVOID *ppv # ); -@winapi(cc=STDCALL, params={ - "rclsid": POINTER, - "pUnkOuter": POINTER, - "dwClsContext": DWORD, - "riid": POINTER, - "ppv": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CoCreateInstance") def hook_CoCreateInstance(ql, address, params): # FIXME: probably this needs implementation return S_OK \ No newline at end of file diff --git a/qiling/os/windows/dlls/oleaut32.py b/qiling/os/windows/dlls/oleaut32.py index 992602f2e..220218031 100644 --- a/qiling/os/windows/dlls/oleaut32.py +++ b/qiling/os/windows/dlls/oleaut32.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'oleaut32_dll' # TODO this file is VERY experimental. @@ -20,10 +21,7 @@ # const OLECHAR *strIn, # UINT ui # ); -@winapi(cc=STDCALL, params={ - "strIn": WSTRING, - "ui": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SysAllocStringLen") def hook_SysAllocStringLen(ql, address, params): addr = ql.os.heap.alloc(params["ui"] + 1) if params["strIn"] != 0: @@ -34,9 +32,7 @@ def hook_SysAllocStringLen(ql, address, params): # void SysFreeString( # BSTR bstrString # ); -@winapi(cc=STDCALL, params={ - "strIn": POINTER, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SysFreeString") def hook_SysFreeString(ql, address, params): addr = params["strIn"] if addr != 0: @@ -50,9 +46,7 @@ def hook_SysFreeString(ql, address, params): # UINT SysStringLen( # BSTR pbstr # ); -@winapi(cc=STDCALL, params={ - "pbstr": WSTRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SysStringLen") def hook_SysStringLen(ql, address, params): string = params["pbstr"] if string != 0: @@ -65,11 +59,7 @@ def hook_SysStringLen(ql, address, params): # const OLECHAR *psz, # unsigned int len # ); -@winapi(cc=STDCALL, params={ - "pbstr": POINTER, - "psz": WSTRING, - "len": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SysReAllocStringLen") def hook_SysReAllocStringLen(ql, address, params): content = params["psz"] size = params["len"] @@ -82,9 +72,7 @@ def hook_SysReAllocStringLen(ql, address, params): # BSTR SysAllocString( # const OLECHAR *psz # ); -@winapi(cc=STDCALL, params={ - "psz": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SysAllocString") def hook_SysAllocString(ql, address, params): string = params["psz"] if string == 0: diff --git a/qiling/os/windows/dlls/shell32.py b/qiling/os/windows/dlls/shell32.py index 843caa4ab..9c97df0bb 100644 --- a/qiling/os/windows/dlls/shell32.py +++ b/qiling/os/windows/dlls/shell32.py @@ -15,6 +15,7 @@ from qiling.os.windows.structs import * from qiling.const import * +dllname = 'shell32_dll' # DWORD_PTR SHGetFileInfoA( # LPCSTR pszPath, @@ -23,13 +24,7 @@ # UINT cbFileInfo, # UINT uFlags # ); -@winapi(cc=STDCALL, params={ - "pszPath": STRING, - "dwFileAttributes": DWORD, - "psfi": POINTER, - "cbFileInfo": UINT, - "uFlags": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SHGetFileInfoA") def hook_SHGetFileInfoA(ql, address, params): return hook_SHGetFileInfoW.__wrapped__(ql, address, params) @@ -41,13 +36,7 @@ def hook_SHGetFileInfoA(ql, address, params): # UINT cbFileInfo, # UINT uFlags # ); -@winapi(cc=STDCALL, params={ - "pszPath": WSTRING, - "dwFileAttributes": DWORD, - "psfi": POINTER, - "cbFileInfo": UINT, - "uFlags": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SHGetFileInfoW") def hook_SHGetFileInfoW(ql, address, params): flags = params["uFlags"] if flags == SHGFI_LARGEICON: @@ -80,9 +69,7 @@ def _ShellExecute(ql, obj: ShellExecuteInfoA): # BOOL ShellExecuteExW( # SHELLEXECUTEINFOA *pExecInfo # ); -@winapi(cc=STDCALL, params={ - "pExecInfo": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ShellExecuteExW") def hook_ShellExecuteExW(ql, address, params): pointer = params["pExecInfo"] @@ -106,17 +93,10 @@ def hook_ShellExecuteExW(ql, address, params): # LPCWSTR lpDirectory, # INT nShowCmd # ); -@winapi(cc=STDCALL, params={ - "hwnd": HANDLE, - "lpVerb": POINTER, - "lpFile": POINTER, - "lpParameters": POINTER, - "lpDirectory": POINTER, - "nShow": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ShellExecuteW", specialtype={'LPCWSTR': 'POINTER'}) def hook_ShellExecuteW(ql, address, params): - shellInfo = ShellExecuteInfoA(ql, hwnd=params["hwnd"], lpVerb=params["lpVerb"], lpFile=params["lpFile"], - lpParams=params["lpParameters"], lpDir=params["lpDirectory"], show=params["nShow"]) + shellInfo = ShellExecuteInfoA(ql, hwnd=params["hwnd"], lpVerb=params["lpOperation"], lpFile=params["lpFile"], + lpParams=params["lpParameters"], lpDir=params["lpDirectory"], show=params["nShowCmd"]) _ = _ShellExecute(ql, shellInfo) return 33 @@ -127,12 +107,7 @@ def hook_ShellExecuteW(ql, address, params): # int csidl, # BOOL fCreate # ); -@winapi(cc=STDCALL, params={ - "hwnd": HANDLE, - "pszPath": POINTER, - "csidl": INT, - "fCreate": BOOL -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SHGetSpecialFolderPathW") def hook_SHGetSpecialFolderPathW(ql, address, params): directory_id = params["csidl"] dst = params["pszPath"] diff --git a/qiling/os/windows/dlls/shlwapi.py b/qiling/os/windows/dlls/shlwapi.py index 6ec9a6685..7d2e43c6d 100644 --- a/qiling/os/windows/dlls/shlwapi.py +++ b/qiling/os/windows/dlls/shlwapi.py @@ -9,13 +9,13 @@ from qiling.os.windows.utils import * from qiling.os.windows.const import * +dllname = 'shlwapi_dll' + # LPCSTR PathFindExtensionA( # LPWSTR pszPath # ); -@winapi(cc=STDCALL, params={ - "pszPath": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="PathFindExtensionA") def hook_PathFindExtensionA(ql, address, params): # Must return the address of the dot pointer = params["pszPath"] @@ -29,9 +29,7 @@ def hook_PathFindExtensionA(ql, address, params): # LPCSTR PathFindExtensionW( # LPCSTR pszPath # ); -@winapi(cc=STDCALL, params={ - "pszPath": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="PathFindExtensionW") def hook_PathFindExtensionW(ql, address, params): # Must return the address of the dot pointer = params["pszPath"] @@ -45,9 +43,7 @@ def hook_PathFindExtensionW(ql, address, params): # LPCSTR PathFindFileNameA( # LPCSTR pszPath # ); -@winapi(cc=STDCALL, params={ - "pszPath": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="PathFindFileNameA") def hook_PathFindFileNameA(ql, address, params): # Must return the address of the start of the filename pointer = params["pszPath"] @@ -61,9 +57,7 @@ def hook_PathFindFileNameA(ql, address, params): # LPCSTR PathFindFileNameW( # LPWSTR pszPath # ); -@winapi(cc=STDCALL, params={ - "pszPath": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="PathFindFileNameW") def hook_PathFindFileNameW(ql, address, params): # Must return the address of the start of the filename pointer = params["pszPath"] @@ -78,10 +72,7 @@ def hook_PathFindFileNameW(ql, address, params): # PCWSTR psz1, # PCWSTR psz2 # ); -@winapi(cc=STDCALL, params={ - "psz1": WSTRING, - "psz2": WSTRING, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="StrCmpW") def hook_StrCmpW(ql, address, params): # Copy String2 into String str1 = params["psz1"] diff --git a/qiling/os/windows/dlls/user32.py b/qiling/os/windows/dlls/user32.py index 085529dcf..d0127747f 100644 --- a/qiling/os/windows/dlls/user32.py +++ b/qiling/os/windows/dlls/user32.py @@ -11,6 +11,7 @@ from qiling.const import * from qiling.os.windows.structs import * +dllname = 'user32_dll' # INT_PTR DialogBoxParamA( # HINSTANCE hInstance, @@ -19,13 +20,7 @@ # DLGPROC lpDialogFunc, # LPARAM dwInitParam # ); -@winapi(cc=STDCALL, params={ - "hInstance": HANDLE, - "lpTemplateName": POINTER, - "hWndParent": HANDLE, - "lpDialogFunc": POINTER, - "dwInitParam": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DialogBoxParamA", specialtype={'LPCSTR': 'POINTER'}) def hook_DialogBoxParamA(ql, address, params): ret = 0 return ret @@ -37,12 +32,7 @@ def hook_DialogBoxParamA(ql, address, params): # LPSTR lpString, # int cchMax # ); -@winapi(cc=STDCALL, params={ - "hDlg": HANDLE, - "nIDDlgItem": INT, - "lpString": POINTER, - "cchMax": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDlgItemTextA") def hook_GetDlgItemTextA(ql, address, params): ret = 0 hDlg = params["hDlg"] @@ -62,10 +52,7 @@ def hook_GetDlgItemTextA(ql, address, params): # HWND hDlg, # INT_PTR nResult # ); -@winapi(cc=STDCALL, params={ - "hDlg": HANDLE, - "nResult": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="EndDialog") def hook_EndDialog(ql, address, params): ret = 1 return ret @@ -73,7 +60,7 @@ def hook_EndDialog(ql, address, params): # HWND GetDesktopWindow(( # ); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDesktopWindow") def hook_GetDesktopWindow(ql, address, params): pass @@ -81,15 +68,13 @@ def hook_GetDesktopWindow(ql, address, params): # BOOL OpenClipboard( # HWND hWndNewOwner # ); -@winapi(cc=STDCALL, params={ - "hWndNewOwner": HANDLE -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OpenClipboard") def hook_OpenClipboard(ql, address, params): return ql.os.clipboard.open(params['hWndNewOwner']) # BOOL CloseClipboard(); -@winapi(cc=STDCALL, params={}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CloseClipboard") def hook_CloseClipboard(ql, address, params): return ql.os.clipboard.close() @@ -98,10 +83,7 @@ def hook_CloseClipboard(ql, address, params): # UINT uFormat, # HANDLE hMem # ); -@winapi(cc=STDCALL, params={ - "uFormat": UINT, - "hMem": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetClipboardData") def hook_SetClipboardData(ql, address, params): try: data = bytes(params['hMem'], 'ascii', 'ignore') @@ -113,9 +95,7 @@ def hook_SetClipboardData(ql, address, params): # HANDLE GetClipboardData( # UINT uFormat # ); -@winapi(cc=STDCALL, params={ - "uFormat": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetClipboardData") def hook_GetClipboardData(ql, address, params): data = ql.os.clipboard.get_data(params['uFormat']) if data: @@ -130,9 +110,7 @@ def hook_GetClipboardData(ql, address, params): # BOOL IsClipboardFormatAvailable( # UINT format # ); -@winapi(cc=STDCALL, params={ - "uFormat": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsClipboardFormatAvailable") def hook_IsClipboardFormatAvailable(ql, address, params): rtn = ql.os.clipboard.format_available(params['uFormat']) return rtn @@ -142,10 +120,7 @@ def hook_IsClipboardFormatAvailable(ql, address, params): # UINT uCode, # UINT uMapType # ); -@winapi(cc=STDCALL, params={ - "uCode": UINT, - "uMapType": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MapVirtualKeyW") def hook_MapVirtualKeyW(ql, address, params): map_value = params["uMapType"] code_value = params["uCode"] @@ -165,9 +140,7 @@ def hook_MapVirtualKeyW(ql, address, params): # SHORT GetKeyState( # int nVirtKey # ); -@winapi(cc=STDCALL, params={ - "nVirtKey": UINT, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetKeyState", specialtype={'int': 'UINT'}) def hook_GetKeyState(ql, address, params): let = chr(params["nVirtKey"]) ql.dprint(0, let) @@ -179,9 +152,7 @@ def hook_GetKeyState(ql, address, params): # UINT RegisterWindowMessageA( # LPCSTR lpString # ); -@winapi(cc=STDCALL, params={ - "lpString": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegisterWindowMessageA") def hook_RegisterWindowMessageA(ql, address, params): return hook_RegisterWindowMessageW.__wrapped__(ql, address, params) @@ -189,17 +160,14 @@ def hook_RegisterWindowMessageA(ql, address, params): # UINT RegisterWindowMessageW( # LPCWSTR lpString # ); -@winapi(cc=STDCALL, params={ - "lpString": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegisterWindowMessageW") def hook_RegisterWindowMessageW(ql, address, params): # maybe some samples really use this and we need to have a real implementation return 0xD10C # HWND GetActiveWindow(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetActiveWindow") def hook_GetActiveWindow(ql, address, params): # maybe some samples really use this and we need to have a real implementation return 0xD10C @@ -208,9 +176,7 @@ def hook_GetActiveWindow(ql, address, params): # HWND GetLastActivePopup( # HWND hWnd # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetLastActivePopup") def hook_GetLastActivePopup(ql, address, params): hwnd = params["hWnd"] return hwnd @@ -219,9 +185,7 @@ def hook_GetLastActivePopup(ql, address, params): # BOOL GetPhysicalCursorPos( # LPPOINT lpPoint # ); -@winapi(cc=STDCALL, params={ - "lpPoint": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetPhysicalCursorPos") def hook_GetPhysicalCursorPos(ql, address, params): return 1 @@ -229,9 +193,7 @@ def hook_GetPhysicalCursorPos(ql, address, params): # int GetSystemMetrics( # int nIndex # ); -@winapi(cc=STDCALL, params={ - "nIndex": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSystemMetrics") def hook_GetSystemMetrics(ql, address, params): info = params["nIndex"] if info == SM_CXICON or info == SM_CYICON: @@ -249,9 +211,7 @@ def hook_GetSystemMetrics(ql, address, params): # HDC GetDC( # HWND hWnd # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDC") def hook_GetDC(ql, address, params): handler = params["hWnd"] # Maybe we should really emulate the handling of screens and windows. Is going to be a pain @@ -262,10 +222,7 @@ def hook_GetDC(ql, address, params): # HDC hdc, # int index # ); -@winapi(cc=STDCALL, params={ - "hdc": POINTER, - "index": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDeviceCaps") def hook_GetDeviceCaps(ql, address, params): # Maybe we should really emulate the handling of screens and windows. Is going to be a pain return 1 @@ -275,10 +232,7 @@ def hook_GetDeviceCaps(ql, address, params): # HWND hWnd, # HDC hDC # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER, - "hdc": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDeviceCaps", specialtype={'HWND': 'POINTER'}) def hook_ReleaseDC(ql, address, params): return 1 @@ -286,9 +240,7 @@ def hook_ReleaseDC(ql, address, params): # DWORD GetSysColor( # int nIndex # ); -@winapi(cc=STDCALL, params={ - "nIndex": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSysColor") def hook_GetSysColor(ql, address, params): info = params["nIndex"] return 0 @@ -297,9 +249,7 @@ def hook_GetSysColor(ql, address, params): # HBRUSH GetSysColorBrush( # int nIndex # ); -@winapi(cc=STDCALL, params={ - "nIndex": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSysColorBrush") def hook_GetSysColorBrush(ql, address, params): info = params["nIndex"] return 0xd10c @@ -309,10 +259,7 @@ def hook_GetSysColorBrush(ql, address, params): # HINSTANCE hInstance, # LPCSTR lpCursorName # ); -@winapi(cc=STDCALL, params={ - "hInstance": POINTER, - "lpCursorName": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSysColorBrush", specialtype={'HINSTANCE': 'POINTER', 'LPCSTR': 'INT'}) def hook_LoadCursorA(ql, address, params): return 0xd10c @@ -320,19 +267,15 @@ def hook_LoadCursorA(ql, address, params): # HCURSOR LoadCursorFromFileA( # LPCSTR lpFileName # ); -@winapi(cc=STDCALL, params={ - "lpFileName": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadCursorFromFileA") def hook_LoadCursorFromFileA(ql, address, params): return hook_LoadCursorFromFileW.__wrapped__(ql, address, params) -# HCURSOR LoadCursorFromFileA( +# HCURSOR LoadCursorFromFileW( # LPCSTR lpFileName # ); -@winapi(cc=STDCALL, params={ - "lpFileName": WSTRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadCursorFromFileW") def hook_LoadCursorFromFileW(ql, address, params): handle = Handle() ql.os.handle_manager.append(handle) @@ -340,8 +283,7 @@ def hook_LoadCursorFromFileW(ql, address, params): # UINT GetOEMCP(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetOEMCP") def hook_GetOEMCP(ql, address, params): return OEM_US @@ -352,12 +294,7 @@ def hook_GetOEMCP(ql, address, params): # LPSTR lpBuffer, # int cchBufferMax # ); -@winapi(cc=STDCALL, params={ - "hInstance": POINTER, - "uID": UINT, - "lpBuffer": POINTER, - "cchBufferMax": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetOEMCP", specialtype={'HINSTANCE': 'POINTER'}) def hook_LoadStringW(ql, address, params): dst = params["lpBuffer"] max_len = params["cchBufferMax"] @@ -378,12 +315,7 @@ def hook_LoadStringW(ql, address, params): # LPSTR lpBuffer, # int cchBufferMax # ); -@winapi(cc=STDCALL, params={ - "hInstance": POINTER, - "uID": UINT, - "lpBuffer": POINTER, - "cchBufferMax": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadStringA", specialtype={'HINSTANCE': 'POINTER'}) def hook_LoadStringA(ql, address, params): dst = params["lpBuffer"] max_len = params["cchBufferMax"] @@ -401,9 +333,7 @@ def hook_LoadStringA(ql, address, params): # BOOL MessageBeep( # UINT uType # ); -@winapi(cc=STDCALL, params={ - "uType": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MessageBeep") def hook_MessageBeep(ql, address, params): return 1 @@ -414,12 +344,7 @@ def hook_MessageBeep(ql, address, params): # HINSTANCE hmod, # DWORD dwThreadId # ); -@winapi(cc=STDCALL, params={ - "idHook": INT, - "lpfn": POINTER, - "hmod": POINTER, - "dwThreadId": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetWindowsHookExA", specialtype={'HINSTANCE': 'POINTER'}) def hook_SetWindowsHookExA(ql, address, params): # Should hook a procedure to a dll hook = params["lpfn"] @@ -429,9 +354,7 @@ def hook_SetWindowsHookExA(ql, address, params): # BOOL UnhookWindowsHookEx( # HHOOK hhk # ); -@winapi(cc=STDCALL, params={ - "hhk": POINTER, -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="UnhookWindowsHookEx") def hook_UnhookWindowsHookEx(ql, address, params): return 1 @@ -440,10 +363,7 @@ def hook_UnhookWindowsHookEx(ql, address, params): # HWND hWnd, # int nCmdShow # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER, - "nCmdShow": INT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ShowWindow", specialtype={'HWND': 'POINTER'}) def hook_ShowWindow(ql, address, params): # return value depends on sample goal (evasion on just display error) return 0x1 @@ -453,10 +373,7 @@ def hook_ShowWindow(ql, address, params): # HINSTANCE hInstance, # LPCSTR lpIconName # ); -@winapi(cc=STDCALL, params={ - "hInstance": POINTER, - "lpIconName": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadIconA", specialtype={'HINSTANCE': 'POINTER', 'LPCSTR': 'UINT'}) def hook_LoadIconA(ql, address, params): return hook_LoadIconW(ql, address, params) @@ -465,10 +382,7 @@ def hook_LoadIconA(ql, address, params): # HINSTANCE hInstance, # LPCWSTR lpIconName # ); -@winapi(cc=STDCALL, params={ - "hInstance": POINTER, - "lpIconName": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadIconW", specialtype={'HINSTANCE': 'POINTER', 'LPCWSTR': 'UINT'}) def hook_LoadIconW(ql, address, params): handle = Handle() ql.os.handle_manager.append(handle) @@ -478,9 +392,7 @@ def hook_LoadIconW(ql, address, params): # BOOL IsWindow( # HWND hWnd # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadIconW", specialtype={'HWND': 'POINTER'}) def hook_IsWindow(ql, address, params): # return value depends on sample goal (evasion on just display error) return 0x1 @@ -492,12 +404,7 @@ def hook_IsWindow(ql, address, params): # WPARAM wParam, # LPARAM lParam # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER, - "Msg": UINT, - "wParam": UINT, - "lParam": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadIconW", specialtype={'HWND': 'POINTER', 'LPARAM': 'UINT'}) def hook_SendMessageA(ql, address, params): # TODO don't know how to get right return value return 0xD10C @@ -509,12 +416,7 @@ def hook_SendMessageA(ql, address, params): # WPARAM wParam, # LPARAM lParam # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER, - "Msg": UINT, - "wParam": UINT, - "lParam": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DefWindowProcA", specialtype={'HWND': 'POINTER', 'LPARAM': 'UINT'}) def hook_DefWindowProcA(ql, address, params): # TODO don't know how to get right return value return 0xD10C @@ -523,9 +425,7 @@ def hook_DefWindowProcA(ql, address, params): # LPWSTR CharNextW( # LPCWSTR lpsz # ); -@winapi(cc=STDCALL, params={ - "lpsz": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CharNextW", specialtype={'LPCWSTR': 'POINTER'}) def hook_CharNextW(ql, address, params): # Return next char if is different from \x00 point = params["lpsz"][0] @@ -538,11 +438,9 @@ def hook_CharNextW(ql, address, params): # LPWSTR CharNextA( -# LPCWSTR lpsz +# LPCSTR lpsz # ); -@winapi(cc=STDCALL, params={ - "lpsz": STRING -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CharNextA") def hook_CharNextA(ql, address, params): # Return next char if is different from \x00 point = params["lpsz"][0] @@ -558,10 +456,7 @@ def hook_CharNextA(ql, address, params): # LPCWSTR lpszStart, # LPCWSTR lpszCurrent # ); -@winapi(cc=STDCALL, params={ - "lpszStart": POINTER, - "lpszCurrent": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CharPrevW", specialtype={'LPCWSTR': 'POINTER'}) def hook_CharPrevW(ql, address, params): # Return next char if is different from \x00 current = params["lpszCurrent"] @@ -577,13 +472,10 @@ def hook_CharPrevW(ql, address, params): # LPWSTR CharPrevA( -# LPCWSTR lpszStart, -# LPCWSTR lpszCurrent +# LPCSTR lpszStart, +# LPCSTR lpszCurrent # ); -@winapi(cc=STDCALL, params={ - "lpszStart": POINTER, - "lpszCurrent": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CharPrevA", specialtype={'LPCSTR': 'POINTER'}) def hook_CharPrevA(ql, address, params): # Return next char if is different from \x00 current = params["lpszCurrent"] @@ -603,7 +495,7 @@ def hook_CharPrevA(ql, address, params): # LPCWSTR , # ... # ); -@winapi(cc=CDECL, param_num=3) +@winsdkapi(cc=CDECL, dllname=dllname, funcname="wsprintfW", param_num=3) def hook_wsprintfW(ql, address, params): dst, p_format = ql.os.get_function_param(2) @@ -626,7 +518,7 @@ def hook_wsprintfW(ql, address, params): # LPCWSTR , # ... # ); -@winapi(cc=CDECL, param_num=3) +@winsdkapi(cc=CDECL, dllname=dllname, param_num=3) def hook_sprintf(ql, address, params): dst, p_format, p_args = ql.os.get_function_param(3) format_string = ql.os.read_wstring(p_format) @@ -642,8 +534,7 @@ def hook_sprintf(ql, address, params): # HWND GetForegroundWindow(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetForegroundWindow") def hook_GetForegroundWindow(ql, address, params): return 0xF02E620D # Value so we can recognize inside dumps @@ -656,15 +547,7 @@ def hook_GetForegroundWindow(ql, address, params): # int nHeight, # BOOL bRepaint # ) -@winapi(cc=STDCALL, params={ - "hWnd": HANDLE, - "X": INT, - "Y": INT, - "nWidth": INT, - "nHeight": INT, - "bRepaint": BOOL - -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MoveWindow") def hook_MoveWindow(ql, address, params): return 1 @@ -672,12 +555,10 @@ def hook_MoveWindow(ql, address, params): # int GetKeyboardType( # int nTypeFlag # ); -@winapi(cc=STDCALL, params={ - "nTypeFlag": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetKeyboardType", specialtype={'int': 'UINT'}) def hook_GetKeyboardType(ql, address, params): - """ - See https://salsa.debian.org/wine-team/wine/-/blob/master/dlls/user32/input.c + """ + See https://salsa.debian.org/wine-team/wine/-/blob/master/dlls/user32/input.c """ _type = params['nTypeFlag'] if _type == 0: # 0: Keyboard Type, 1: Keyboard subtype, 2: num func keys @@ -695,12 +576,7 @@ def hook_GetKeyboardType(ql, address, params): # LPCWSTR lpCaption, # UINT uType # ); -@winapi(cc=STDCALL, params={ - "hWnd": HANDLE, - "lpText": WSTRING, - "lpCaption": WSTRING, - "uType": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MessageBoxW") def hook_MessageBoxW(ql, address, params): # We always return a positive result type_box = params["uType"] @@ -719,12 +595,7 @@ def hook_MessageBoxW(ql, address, params): # LPCWSTR lpCaption, # UINT uType # ); -@winapi(cc=STDCALL, params={ - "hWnd": HANDLE, - "lpText": STRING, - "lpCaption": STRING, - "uType": UINT -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MessageBoxA") def hook_MessageBoxA(ql, address, params): return hook_MessageBoxW.__wrapped__(ql, address, params) @@ -732,9 +603,7 @@ def hook_MessageBoxA(ql, address, params): # BOOL GetCursorPos( # LPPOINT lpPoint # ); -@winapi(cc=STDCALL, params={ - "lpPoint": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCursorPos") def hook_GetCursorPos(ql, address, params): # TODO maybe we can add it to the profile too p = Point(ql, 50, 50) @@ -746,9 +615,7 @@ def hook_GetCursorPos(ql, address, params): # HANDLE CreateActCtxW( # PCACTCTXW pActCtx # ); -@winapi(cc=STDCALL, params={ - "pActCtx": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateActCtxW") def hook_CreateActCtxW(ql, address, params): # TODo maybe is necessary to really create this addr = params["pActCtx"] @@ -761,10 +628,7 @@ def hook_CreateActCtxW(ql, address, params): # HWND hWnd, # LPDWORD lpdwProcessId # ); -@winapi(cc=STDCALL, params={ - "hWnd": HANDLE, - "lpdwProcessId": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetWindowThreadProcessId") def hook_GetWindowThreadProcessId(ql, address, params): target = params["hWnd"] if target == ql.os.profile.getint("KERNEL", "pid") or target == ql.os.profile.getint("KERNEL", "shell_pid"): @@ -778,7 +642,6 @@ def hook_GetWindowThreadProcessId(ql, address, params): # HWND GetShellWindow(); -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetShellWindow") def hook_GetShellWindow(ql, address, params): return ql.os.profile.getint("KERNEL", "shell_pid") diff --git a/qiling/os/windows/dlls/wininet.py b/qiling/os/windows/dlls/wininet.py index 2ef7a3ffc..629cddb1b 100644 --- a/qiling/os/windows/dlls/wininet.py +++ b/qiling/os/windows/dlls/wininet.py @@ -8,6 +8,7 @@ from qiling.os.const import * from qiling.os.windows.utils import * +dllname = 'wininet_dll' # void InternetOpenA( # LPCSTR lpszAgent, @@ -16,13 +17,7 @@ # LPCSTR lpszProxyBypass, # DWORD dwFlags # ); -@winapi(cc=STDCALL, params={ - "lpszAgent": STRING, - "dwAccessType": DWORD, - "lpszProxy": STRING, - "lpszProxyBypass": STRING, - "dwFlags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetOpenA") def hook_InternetOpenA(ql, address, params): pass @@ -34,13 +29,7 @@ def hook_InternetOpenA(ql, address, params): # LPCWSTR lpszProxyBypass, # DWORD dwFlags # ); -@winapi(cc=STDCALL, params={ - "lpszAgent": WSTRING, - "dwAccessType": DWORD, - "lpszProxy": WSTRING, - "lpszProxyBypass": WSTRING, - "dwFlags": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetOpenW") def hook_InternetOpenW(ql, address, params): pass @@ -53,14 +42,7 @@ def hook_InternetOpenW(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER, - "lpszUrl": STRING, - "lpszHeaders": STRING, - "dwHeadersLength": DWORD, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetOpenUrlA") def hook_InternetOpenUrlA(ql, address, params): pass @@ -73,14 +55,7 @@ def hook_InternetOpenUrlA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER, - "lpszUrl": WSTRING, - "lpszHeaders": WSTRING, - "dwHeadersLength": DWORD, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetOpenUrlW") def hook_InternetOpenUrlW(ql, address, params): pass @@ -88,9 +63,7 @@ def hook_InternetOpenUrlW(ql, address, params): # BOOLAPI InternetCloseHandle( # HINTERNET hInternet # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetCloseHandle") def hook_InternetCloseHandle(ql, address, params): ret = 1 return ret @@ -106,16 +79,7 @@ def hook_InternetCloseHandle(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER, - "lpszServerName": STRING, - "nServerPort": DWORD, - "lpszUserName": STRING, - "lpszPassword": STRING, - "dwService": DWORD, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetConnectA") def hook_InternetConnectA(ql, address, params): pass @@ -130,16 +94,7 @@ def hook_InternetConnectA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER, - "lpszServerName": WSTRING, - "nServerPort": DWORD, - "lpszUserName": WSTRING, - "lpszPassword": WSTRING, - "dwService": DWORD, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetConnectW") def hook_InternetConnectW(ql, address, params): pass @@ -149,11 +104,7 @@ def hook_InternetConnectW(ql, address, params): # DWORD dwFlags, # DWORD dwReserved # ); -@winapi(cc=STDCALL, params={ - "lpszUrl": WSTRING, - "dwFlags": DWORD, - "dwContext": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetCheckConnectionA") def hook_InternetCheckConnectionA(ql, address, params): pass @@ -168,16 +119,7 @@ def hook_InternetCheckConnectionA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hConnect": POINTER, - "lpszVerb": STRING, - "lpszObjectName": STRING, - "lpszVersion": STRING, - "lpszReferrer": STRING, - "lplpszAcceptTypes": POINTER, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HttpOpenRequestA") def hook_HttpOpenRequestA(ql, address, params): pass @@ -189,13 +131,7 @@ def hook_HttpOpenRequestA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hRequest": POINTER, - "lpBuffersIn": POINTER, - "lpBuffersOut": STRING, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HttpSendRequestExA", specialtypeEx={'lpBuffersIn': 'POINTER', 'lpBuffersOut': 'STRING'}) def hook_HttpSendRequestExA(ql, address, params): pass @@ -210,16 +146,7 @@ def hook_HttpSendRequestExA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hConnect": POINTER, - "lpszVerb": WSTRING, - "lpszObjectName": WSTRING, - "lpszVersion": WSTRING, - "lpszReferrer": WSTRING, - "lplpszAcceptTypes": POINTER, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HttpOpenRequestW") def hook_HttpOpenRequestW(ql, address, params): pass @@ -230,12 +157,7 @@ def hook_HttpOpenRequestW(ql, address, params): # LPVOID lpBuffer, # DWORD dwBufferLength # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER, - "dwOption": DWORD, - "lpBuffer": POINTER, - "dwBufferLength": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetSetOptionA") def hook_InternetSetOptionA(ql, address, params): return 1 @@ -246,12 +168,7 @@ def hook_InternetSetOptionA(ql, address, params): # LPVOID lpBuffer, # DWORD dwBufferLength # ); -@winapi(cc=STDCALL, params={ - "hInternet": POINTER, - "dwOption": DWORD, - "lpBuffer": POINTER, - "dwBufferLength": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetSetOptionW") def hook_InternetSetOptionW(ql, address, params): return 1 @@ -263,13 +180,7 @@ def hook_InternetSetOptionW(ql, address, params): # LPVOID lpOptional, # DWORD dwOptionalLength # ); -@winapi(cc=STDCALL, params={ - "hRequest": POINTER, - "lpszHeaders": STRING, - "dwHeadersLength": DWORD, - "lpOptional": POINTER, - "dwOptionalLength": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HttpSendRequestA") def hook_HttpSendRequestA(ql, address, params): return 1 @@ -281,13 +192,7 @@ def hook_HttpSendRequestA(ql, address, params): # LPVOID lpOptional, # DWORD dwOptionalLength # ); -@winapi(cc=STDCALL, params={ - "hRequest": POINTER, - "lpszHeaders": WSTRING, - "dwHeadersLength": DWORD, - "lpOptional": POINTER, - "dwOptionalLength": DWORD -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HttpSendRequestW") def hook_HttpSendRequestW(ql, address, params): return 1 @@ -299,13 +204,7 @@ def hook_HttpSendRequestW(ql, address, params): # DWORD dwFlags, # LPVOID *lppvData # ); -@winapi(cc=STDCALL, params={ - "hWnd": POINTER, - "hRequest": POINTER, - "dwError": DWORD, - "dwFlags": DWORD, - "lppvData": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetErrorDlg", specialtype={'HWND': 'POINTER'}) def hook_InternetErrorDlg(ql, address, params): pass @@ -316,12 +215,7 @@ def hook_InternetErrorDlg(ql, address, params): # DWORD dwNumberOfBytesToRead, # LPDWORD lpdwNumberOfBytesRead # ); -@winapi(cc=STDCALL, params={ - "hFile": POINTER, - "lpBuffer": POINTER, - "dwNumberOfBytesToRead": DWORD, - "lpdwNumberOfBytesRead": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetReadFile") def hook_InternetReadFile(ql, address, params): return 1 @@ -332,12 +226,7 @@ def hook_InternetReadFile(ql, address, params): # DWORD dwNumberOfBytesToWrite, # LPDWORD lpdwNumberOfBytesWritten # ); -@winapi(cc=STDCALL, params={ - "hFile": POINTER, - "lpBuffer": POINTER, - "dwNumberOfBytesToWrite": DWORD, - "lpdwNumberOfBytesWritten": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetWriteFile") def hook_InternetWriteFile(ql, address, params): return 1 @@ -348,11 +237,6 @@ def hook_InternetWriteFile(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winapi(cc=STDCALL, params={ - "hFile": POINTER, - "lpBuffersOut": POINTER, - "dwFlags": DWORD, - "dwContext": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HttpEndRequestA", specialtype={'LPINTERNET_BUFFERSA': 'POINTER'}) def hook_HttpEndRequestA(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/wsock32.py b/qiling/os/windows/dlls/wsock32.py index 06c84d77e..191ad5baa 100644 --- a/qiling/os/windows/dlls/wsock32.py +++ b/qiling/os/windows/dlls/wsock32.py @@ -13,12 +13,13 @@ from qiling.exception import * from qiling.os.windows.structs import * +dllname = 'ws2_32_dll' # int WSAStartup( # WORD wVersionRequired, # LPWSADATA lpWSAData # ); -@winapi(cc=STDCALL, params={"wVersionRequired": DWORD, "LPWSADATA": STRING}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WSAStartup") def hook_WSAStartup(ql, address, params): return 0 @@ -31,17 +32,7 @@ def hook_WSAStartup(ql, address, params): # GROUP g, # DWORD dwFlags # ); -@winapi( - STDCALL, - params={ - "af": INT, - "type": INT, - "protocol": INT, - "lpProtocolInfo": POINTER, - "g": INT, - "dwFlags": INT, - }, -) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WSASocketA", specialtype={'DWORD': 'INT'}) def hook_WSASocketA(ql, address, params): return 0 @@ -51,7 +42,7 @@ def hook_WSASocketA(ql, address, params): # const sockaddr *name, # int namelen # ); -@winapi(cc=STDCALL, params={"s": INT, "name": POINTER, "namelen": INT}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="connect") def hook_connect(ql, address, params): sin_family = ql.mem.read(params["name"], 1)[0] sin_port = int.from_bytes(ql.mem.read(params["name"] + 2, 2), byteorder="big") @@ -78,9 +69,7 @@ def hook_connect(ql, address, params): # hostent * gethostbyname( # const char *name # ); -@winapi(cc=STDCALL, params={ - "name": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, funcname="gethostbyname", specialtype={'char': 'POINTER'}) def hook_gethostbyname(ql, address, params): ip_str = ql.os.profile.getint("NETWORK", "dns_response_ip") ip = bytes([int(octet) for octet in ip_str.split('.')[::-1]]) diff --git a/qiling/os/windows/dlls/wudplatform.py b/qiling/os/windows/dlls/wudplatform.py index 09d273d8a..3a82a2d6e 100644 --- a/qiling/os/windows/dlls/wudplatform.py +++ b/qiling/os/windows/dlls/wudplatform.py @@ -13,19 +13,16 @@ from qiling.exception import * -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL) def hook_WudfIsUserDebuggerPresent(ql, address, params): return 0 -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL) def hook_WudfIsAnyDebuggerPresent(ql, address, params): return 0 -@winapi(cc=STDCALL, params={ -}) +@winsdkapi(cc=STDCALL) def hook_WudfIsKernelDebuggerPresent(ql, address, params): return 0 diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 8c6ed8eb6..956705117 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -12,19 +12,91 @@ from qiling.exception import * +def replacetype(type, specialtype=None): + if specialtype is None: + specialtype = {} + reptypedict = {'HKEY': 'HANDLE', 'LPCSTR': 'STRING', 'REGSAM': 'POINTER', 'PHKEY': 'POINTER', 'LPCWSTR': 'WSTRING', + 'LPFILETIME': 'POINTER', 'LPDWORD': 'POINTER', 'LPBYTE': 'POINTER', 'LPSECURITY_ATTRIBUTES': 'POINTER', + 'TOKEN_INFORMATION_CLASS': 'DWORD', 'LPVOID': 'POINTER', 'PDWORD': 'POINTER', + 'PSID': 'HANDLE', 'PSID_IDENTIFIER_AUTHORITY': 'POINTER', 'int': 'INT', + 'MSIHANDLE': 'POINTER', 'INSTALLSTATE': 'POINTER', 'size_t': 'UINT', 'PROCESSINFOCLASS': 'INT', + 'PVOID': 'POINTER', 'ULONG': 'UINT', 'PULONG': 'POINTER', 'OBJECT_INFORMATION_CLASS': 'INT', + 'LPMESSAGEFILTER': 'POINTER', 'PSECURITY_DESCRIPTOR': 'POINTER', 'LONG': 'ULONGLONG', + 'SOLE_AUTHENTICATION_SERVICE': 'POINTER', 'void': 'POINTER', 'REFCLSID': 'POINTER', + 'LPUNKNOWN': 'POINTER', 'REFIID': 'POINTER', 'OLECHAR': 'WSTRING', 'BSTR': 'POINTER', + 'unsigned int': 'UINT', 'SHFILEINFOW': 'POINTER', 'SHELLEXECUTEINFOA': 'POINTER', + 'SHELLEXECUTEINFOW': 'POINTER', 'HWND': 'HANDLE', 'LPWSTR': 'POINTER', 'DLGPROC': 'POINTER', + 'LPARAM': 'POINTER', 'HINSTANCE': 'HANDLE', 'INT_PTR': 'POINTER', + 'LPPOINT': 'POINTER', 'HDC': 'POINTER', 'LPSTR': 'POINTER', 'HOOKPROC': 'POINTER', 'HHOOK': 'POINTER', + 'WPARAM': 'UINT', 'PCACTCTXW': 'POINTER', 'HINTERNET': 'POINTER', 'DWORD_PTR': 'POINTER', + 'INTERNET_PORT': 'DWORD', 'LPINTERNET_BUFFERSA': 'POINT', 'WORD': 'DWORD', 'LPWSADATA': 'STRING', + 'LPWSAPROTOCOL_INFOA': 'POINTER', 'GROUP': 'INT', 'SOCKET': 'INT', 'sockaddr': 'POINTER', + 'PBOOL': 'POINTER', 'LPTOP_LEVEL_EXCEPTION_FILTER': 'DWORD', '_EXCEPTION_POINTERS': 'POINTER', + 'ULONG_PTR': 'POINTER', 'PVECTORED_EXCEPTION_HANDLER': 'HANDLE', 'PFLS_CALLBACK_FUNCTION': 'POINTER', + 'LPWIN32_FIND_DATAA': 'POINTER', 'LPOVERLAPPED': 'POINTER', 'LPCVOID': 'POINTER', + 'HEAP_INFORMATION_CLASS': 'UINT', 'PSLIST_HEADER': 'POINTER', 'HMODULE': 'HANDLE', 'HRSRC': 'POINTER', + 'HGLOBAL': 'POINTER', 'PMEMORY_BASIC_INFORMATION': 'POINTER', 'LPWCH': 'POINTER', + 'LPSTARTUPINFOA': 'POINTER', 'LPSTARTUPINFOW': 'POINTER', 'LPTHREAD_START_ROUTINE': 'POINTER', + 'LPCONTEXT': 'POINTER', 'LARGE_INTEGER': 'POINTER', 'LPMODULEINFO': 'POINTER', 'LPCWCH': 'POINTER', + 'LPWORD': 'POINTER', 'LCID': 'POINTER', 'LPCCH': 'POINTER', 'LPBOOL': 'POINTER', + 'LPCRITICAL_SECTION': 'POINTER', 'PSRWLOCK': 'POINTER', 'LPOSVERSIONINFOA': 'STRING', + 'LPOSVERSIONINFOW': 'WSTRING', 'LPSYSTEM_INFO': 'POINTER', 'LPSYSTEMTIME': 'POINTER', + 'LPPROCESSENTRY32W': 'POINTER', 'HLOCAL': 'POINTER', 'UINT_PTR': 'POINTER', + 'LPOSVERSIONINFOEXW': 'POINTER', 'DWORDLONG': 'ULONGLONG', 'LPCPINFO': 'POINTER', + 'LPNLSVERSIONINFO': 'POINTER', 'PCNZCH': 'STRING'} + + if type in reptypedict.keys(): + if type not in specialtype.keys(): + return reptypedict[type] + else: + return specialtype[type] + else: + return type + # x86/x8664 PE should share Windows APIs -def winapi(cc, param_num=None, params=None): +def winsdkapi(cc, param_num=None, dllname=None, funcname=None, specialtype=None, specialtypeEx=None, defparams=None): """ @cc: windows api calling convention, only x86 needs this, x64 is always fastcall - @params: params dict @param_num: the number of function params, used by variadic functions, e.g printf + @dllname: the name of function + @funcname: function's name + @specialtype: customize replace type, e.g specialtype={'int':'UINT'} means repalce 'int' to 'UINT' + @specialtypeEx: customize replace param_name's type, e.g specialtypeEx={'time':'int'} means + replace the original type of time to int + @defparams: customize all params and their type """ - def decorator(func): @wraps(func) def wrapper(*args, **kwargs): + params = {} + paramlist = None ql = args[0] - + if defparams is not None: + params = defparams + else: + if dllname is not None: + root_path = os.path.abspath(os.path.join(os.getcwd(), "../..")) + with open(root_path+'/qiling/extensions/windows_sdk/'+dllname+'.json', 'r') as f: + funclist = json.load(f) + f.close() + paramlist = funclist[funcname] + if funcname is not None: + for para in paramlist: + name = list(para.values())[0] + if name == 'VOID': + params = {} + break + elif specialtypeEx is not None and name in specialtypeEx.keys(): + type = specialtypeEx[name] + else: + type = list(para.values())[1] + if isinstance(type, dict): + type = replacetype(type['name'], specialtype) + else: + type = replacetype(list(para.values())[1], specialtype) + params[name] = eval(type) + print(params) + if ql.archtype == QL_ARCH.X86: if cc == STDCALL: return ql.os.x86_stdcall(param_num, params, func, args, kwargs) @@ -34,7 +106,6 @@ def wrapper(*args, **kwargs): return ql.os.x8664_fastcall(param_num, params, func, args, kwargs) else: raise QlErrorArch("[!] Unknown self.ql.arch") - return wrapper - return decorator + return decorator \ No newline at end of file From 6f5803eff15a2f6f2787159e9d3c1336c57ff1fd Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Tue, 23 Jun 2020 21:54:45 +0800 Subject: [PATCH 09/86] remove argument funcname --- qiling/os/windows/dlls/advapi32.py | 44 ++++---- qiling/os/windows/dlls/crypt32.py | 2 +- qiling/os/windows/dlls/kernel32/debugapi.py | 8 +- .../windows/dlls/kernel32/errhandlingapi.py | 16 +-- qiling/os/windows/dlls/kernel32/fibersapi.py | 8 +- qiling/os/windows/dlls/kernel32/fileapi.py | 36 +++---- qiling/os/windows/dlls/kernel32/handleapi.py | 6 +- qiling/os/windows/dlls/kernel32/heapapi.py | 12 +-- .../windows/dlls/kernel32/interlockedapi.py | 2 +- qiling/os/windows/dlls/kernel32/ioapiset.py | 2 +- .../os/windows/dlls/kernel32/libloaderapi.py | 32 +++--- qiling/os/windows/dlls/kernel32/memoryapi.py | 8 +- qiling/os/windows/dlls/kernel32/processenv.py | 16 +-- .../dlls/kernel32/processthreadsapi.py | 36 +++---- qiling/os/windows/dlls/kernel32/profileapi.py | 4 +- qiling/os/windows/dlls/kernel32/psapi.py | 2 +- .../os/windows/dlls/kernel32/stringapiset.py | 8 +- qiling/os/windows/dlls/kernel32/synchapi.py | 42 ++++---- qiling/os/windows/dlls/kernel32/sysinfoapi.py | 20 ++-- qiling/os/windows/dlls/kernel32/tlhelp32.py | 6 +- qiling/os/windows/dlls/kernel32/winbase.py | 58 +++++----- qiling/os/windows/dlls/kernel32/winnls.py | 25 +++-- qiling/os/windows/dlls/kernel32/winnt.py | 9 +- .../os/windows/dlls/kernel32/wow64apiset.py | 2 +- qiling/os/windows/dlls/mscoree.py | 4 +- qiling/os/windows/dlls/msi.py | 2 +- qiling/os/windows/dlls/ntdll.py | 22 ++-- qiling/os/windows/dlls/ntoskrnl.py | 6 +- qiling/os/windows/dlls/ole32.py | 10 +- qiling/os/windows/dlls/oleaut32.py | 10 +- qiling/os/windows/dlls/shell32.py | 10 +- qiling/os/windows/dlls/shlwapi.py | 10 +- qiling/os/windows/dlls/user32.py | 102 +++++++++--------- qiling/os/windows/dlls/wininet.py | 38 +++---- qiling/os/windows/dlls/wsock32.py | 8 +- qiling/os/windows/fncc.py | 3 +- 36 files changed, 314 insertions(+), 315 deletions(-) diff --git a/qiling/os/windows/dlls/advapi32.py b/qiling/os/windows/dlls/advapi32.py index 618ad574c..c56e8c18f 100644 --- a/qiling/os/windows/dlls/advapi32.py +++ b/qiling/os/windows/dlls/advapi32.py @@ -95,7 +95,7 @@ def RegQueryValue(ql, address, params): # REGSAM samDesired, # PHKEY phkResult # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegOpenKeyExA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegOpenKeyExA(ql, address, params): return _RegOpenKey(ql, address, params) @@ -107,7 +107,7 @@ def hook_RegOpenKeyExA(ql, address, params): # REGSAM samDesired, # PHKEY phkResult # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegOpenKeyExW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegOpenKeyExW(ql, address, params): return _RegOpenKey(ql, address, params) @@ -117,7 +117,7 @@ def hook_RegOpenKeyExW(ql, address, params): # LPCWSTR lpSubKey, # PHKEY phkResult # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname='RegOpenKeyW') +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegOpenKeyW(ql, address, params): return _RegOpenKey(ql, address, params) @@ -127,7 +127,7 @@ def hook_RegOpenKeyW(ql, address, params): # LPCSTR lpSubKey, # PHKEY phkResult # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegOpenKeyA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegOpenKeyA(ql, address, params): return _RegOpenKey(ql, address, params) @@ -140,7 +140,7 @@ def hook_RegOpenKeyA(ql, address, params): # LPBYTE lpData, # LPDWORD lpcbData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegQueryValueExA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegQueryValueExA(ql, address, params): return RegQueryValue(ql, address, params) @@ -153,7 +153,7 @@ def hook_RegQueryValueExA(ql, address, params): # LPBYTE lpData, # LPDWORD lpcbData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegQueryValueExW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegQueryValueExW(ql, address, params): return RegQueryValue(ql, address, params) @@ -161,7 +161,7 @@ def hook_RegQueryValueExW(ql, address, params): # LSTATUS RegCloseKey( # HKEY hKey # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegCloseKey") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegCloseKey(ql, address, params): ret = ERROR_SUCCESS hKey = params["hKey"] @@ -174,7 +174,7 @@ def hook_RegCloseKey(ql, address, params): # LPCSTR lpSubKey, # PHKEY phkResult # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegCreateKeyA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegCreateKeyA(ql, address, params): return hook_RegCreateKeyW.__wrapped__(ql, address, params) @@ -184,7 +184,7 @@ def hook_RegCreateKeyA(ql, address, params): # LPCWSTR lpSubKey, # PHKEY phkResult # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegCreateKeyW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegCreateKeyW(ql, address, params): ret = ERROR_SUCCESS @@ -224,7 +224,7 @@ def hook_RegCreateKeyW(ql, address, params): # PHKEY phkResult, # LPDWORD lpdwDisposition # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegCreateKeyExW", specialtype={'DWORD': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'POINTER'}) def hook_RegCreateKeyExW(ql, address, params): ret = ERROR_SUCCESS @@ -260,7 +260,7 @@ def hook_RegCreateKeyExW(ql, address, params): # LPCSTR lpData, # DWORD cbData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegSetValueA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegSetValueA(ql, address, params): ret = ERROR_SUCCESS @@ -287,7 +287,7 @@ def hook_RegSetValueA(ql, address, params): # const BYTE *lpData, # DWORD cbData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegSetValueExW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegSetValueExW(ql, address, params): ret = ERROR_SUCCESS @@ -310,7 +310,7 @@ def hook_RegSetValueExW(ql, address, params): # HKEY hKey, # LPCSTR lpSubKey # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegDeleteKeyA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegDeleteKeyA(ql, address, params): return hook_RegDeleteKeyW.__wrapped__(ql, address, params) @@ -319,7 +319,7 @@ def hook_RegDeleteKeyA(ql, address, params): # HKEY hKey, # LPCWSTR lpSubKey # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegDeleteKeyW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegDeleteKeyW(ql, address, params): ret = ERROR_SUCCESS @@ -338,7 +338,7 @@ def hook_RegDeleteKeyW(ql, address, params): # HKEY hKey, # LPCSTR lpValueName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegDeleteValueA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegDeleteValueA(ql, address, params): return hook_RegDeleteValueW.__wrapped__(ql, address, params) @@ -347,7 +347,7 @@ def hook_RegDeleteValueA(ql, address, params): # HKEY hKey, # LPCWSTR lpValueName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegDeleteValueW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegDeleteValueW(ql, address, params): ret = ERROR_SUCCESS @@ -369,7 +369,7 @@ def hook_RegDeleteValueW(ql, address, params): # DWORD TokenInformationLength, # PDWORD ReturnLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetTokenInformation") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetTokenInformation(ql, address, params): id_token = params["TokenHandle"] information = params["TokenInformationClass"] @@ -394,7 +394,7 @@ def hook_GetTokenInformation(ql, address, params): # PUCHAR GetSidSubAuthorityCount( # PSID pSid # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSidSubAuthorityCount") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSidSubAuthorityCount(ql, address, params): sid = ql.os.handle_manager.get(params["pSid"]).obj addr_authority_count = sid.addr + 1 # +1 because the first byte is revision @@ -405,7 +405,7 @@ def hook_GetSidSubAuthorityCount(ql, address, params): # PSID pSid, # DWORD nSubAuthority # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSidSubAuthority", specialtype={'DWORD': 'INT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'INT'}) def hook_GetSidSubAuthority(ql, address, params): num = params["nSubAuthority"] sid = ql.os.handle_manager.get(params["pSid"]).obj @@ -426,7 +426,7 @@ def hook_GetSidSubAuthority(ql, address, params): # DWORD nSubAuthority7, # PSID *pSid # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="AllocateAndInitializeSid") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_AllocateAndInitializeSid(ql, address, params): count = params["nSubAuthorityCount"] subs = b"" @@ -446,7 +446,7 @@ def hook_AllocateAndInitializeSid(ql, address, params): # PVOID FreeSid( # PSID pSid # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FreeSid") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_FreeSid(ql, address, params): ql.os.heap.free(params["pSid"]) return 0 @@ -456,7 +456,7 @@ def hook_FreeSid(ql, address, params): # PSID pSid1, # PSID pSid2 # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="EqualSid") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_EqualSid(ql, address, params): # TODO once i have understood better how SID are wrote in memory. Fucking documentation # technically this one should be my SID that i created at the start. I said should, because when testing, it has a diff --git a/qiling/os/windows/dlls/crypt32.py b/qiling/os/windows/dlls/crypt32.py index 0653f5ccd..e9318eaae 100644 --- a/qiling/os/windows/dlls/crypt32.py +++ b/qiling/os/windows/dlls/crypt32.py @@ -20,7 +20,7 @@ # DWORD *pdwSkip, # DWORD *pdwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CryptStringToBinaryA", specialtype={'BYTE': 'POINTER'}, +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'BYTE': 'POINTER'}, specialtypeEx={"pcbBinary": POINTER, "pdwSkip": POINTER, "pdwFlags": POINTER}) def hook_CryptStringToBinaryA(ql, address, params): flag_src = params["dwFlags"] diff --git a/qiling/os/windows/dlls/kernel32/debugapi.py b/qiling/os/windows/dlls/kernel32/debugapi.py index c9b80af45..cd78dc2cf 100644 --- a/qiling/os/windows/dlls/kernel32/debugapi.py +++ b/qiling/os/windows/dlls/kernel32/debugapi.py @@ -16,7 +16,7 @@ dllname = 'kernel32_dll' # BOOL IsDebuggerPresent(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsDebuggerPresent") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsDebuggerPresent(ql, address, params): return 0 @@ -25,7 +25,7 @@ def hook_IsDebuggerPresent(ql, address, params): # HANDLE hProcess, # PBOOL pbDebuggerPresent # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CheckRemoteDebuggerPresent") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CheckRemoteDebuggerPresent(ql, address, params): pointer = params["pbDebuggerPresent"] ql.mem.write(pointer, 0x0.to_bytes(1, byteorder="little")) @@ -35,7 +35,7 @@ def hook_CheckRemoteDebuggerPresent(ql, address, params): # void OutputDebugStringW( # LPCWSTR lpOutputString # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OutputDebugStringW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_OutputDebugStringW(ql, address, params): string = params["lpOutputString"] ql.nprint('OutputDebugStringW: "%s"' % (string.encode())) @@ -45,7 +45,7 @@ def hook_OutputDebugStringW(ql, address, params): # void OutputDebugStringA( # LPCSTR lpOutputString # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OutputDebugStringA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_OutputDebugStringA(ql, address, params): ql.nprint('OutputDebugStringA: "%s"' % (params['lpOutputString'])) return 0 diff --git a/qiling/os/windows/dlls/kernel32/errhandlingapi.py b/qiling/os/windows/dlls/kernel32/errhandlingapi.py index 61d3415a7..6b4ad5877 100644 --- a/qiling/os/windows/dlls/kernel32/errhandlingapi.py +++ b/qiling/os/windows/dlls/kernel32/errhandlingapi.py @@ -18,7 +18,7 @@ # LPTOP_LEVEL_EXCEPTION_FILTER SetUnhandledExceptionFilter( # LPTOP_LEVEL_EXCEPTION_FILTER lpTopLevelExceptionFilter # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetUnhandledExceptionFilter") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetUnhandledExceptionFilter(ql, address, params): addr = params["lpTopLevelExceptionFilter"] handle = ql.os.handle_manager.search("TopLevelExceptionHandler") @@ -31,7 +31,7 @@ def hook_SetUnhandledExceptionFilter(ql, address, params): # _Post_equals_last_error_ DWORD GetLastError(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetLastError") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetLastError(ql, address, params): return ql.os.last_error @@ -39,7 +39,7 @@ def hook_GetLastError(ql, address, params): # void SetLastError( # DWORD dwErrCode # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetLastError", specialtype={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'UINT'}) def hook_SetLastError(ql, address, params): ql.os.last_error = params['dwErrCode'] return 0 @@ -48,7 +48,7 @@ def hook_SetLastError(ql, address, params): # LONG UnhandledExceptionFilter( # _EXCEPTION_POINTERS *ExceptionInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="UnhandledExceptionFilter") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_UnhandledExceptionFilter(ql, address, params): ret = 1 return ret @@ -57,7 +57,7 @@ def hook_UnhandledExceptionFilter(ql, address, params): # UINT SetErrorMode( # UINT uMode # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetErrorMode") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetErrorMode(ql, address, params): # TODO maybe this need a better implementation return 0 @@ -69,7 +69,7 @@ def hook_SetErrorMode(ql, address, params): # DWORD nNumberOfArguments, # const ULONG_PTR *lpArguments # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RaiseException") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RaiseException(ql, address, params): func_addr = ql.os.handle_manager.search("TopLevelExceptionHandler").obj @@ -84,7 +84,7 @@ def hook_RaiseException(ql, address, params): # ULONG First, # PVECTORED_EXCEPTION_HANDLER Handler # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="AddVectoredExceptionHandler", specialtype={'ULONG': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'ULONG': 'UINT'}) def hook_AddVectoredExceptionHandler(ql, address, params): # this case is an anomaly from other interrupts (from what i learned, can be wrong) @@ -130,7 +130,7 @@ def exec_standard_into(ql, into, user_data): # ULONG RemoveVectoredExceptionHandler( # PVOID Handle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RemoveVectoredExceptionHandler", specialtype={'PVOID': 'HANDLE'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'PVOID': 'HANDLE'}) def hook_RemoveVectoredExceptionHandler(ql, address, params): hook = ql.os.handle_manager.get(params["Handle"]).obj hook.remove() diff --git a/qiling/os/windows/dlls/kernel32/fibersapi.py b/qiling/os/windows/dlls/kernel32/fibersapi.py index 4ce5ffcc0..4470b00b8 100644 --- a/qiling/os/windows/dlls/kernel32/fibersapi.py +++ b/qiling/os/windows/dlls/kernel32/fibersapi.py @@ -18,7 +18,7 @@ # DWORD FlsFree( # DWORD dwFlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FlsFree", specialtype={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'UINT'}) def hook_FlsFree(ql, address, params): return ql.os.fiber_manager.free(params['dwFlsIndex']) @@ -26,7 +26,7 @@ def hook_FlsFree(ql, address, params): # LPVOID FlsGetValue( # DWORD dwFlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FlsGetValue", specialtype={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'UINT'}) def hook_FlsGetValue(ql, address, params): return ql.os.fiber_manager.get(params['dwFlsIndex']) @@ -35,7 +35,7 @@ def hook_FlsGetValue(ql, address, params): # DWORD dwFlsIndex # PVOID lpFlsData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FlsSetValue", specialtype={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'UINT'}) def hook_FlsSetValue(ql, address, params): return ql.os.fiber_manager.set(params['dwFlsIndex'], params['lpFlsData']) @@ -43,7 +43,7 @@ def hook_FlsSetValue(ql, address, params): # DWORD FlsAlloc( # PFLS_CALLBACK_FUNCTION lpCallback # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FlsAlloc") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_FlsAlloc(ql, address, params): # global cb = params['lpCallback'] cb = params['lpCallback'] diff --git a/qiling/os/windows/dlls/kernel32/fileapi.py b/qiling/os/windows/dlls/kernel32/fileapi.py index 272b346f0..0c84ad5d8 100644 --- a/qiling/os/windows/dlls/kernel32/fileapi.py +++ b/qiling/os/windows/dlls/kernel32/fileapi.py @@ -19,7 +19,7 @@ # DWORD GetFileType( # HANDLE hFile # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetFileType") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetFileType(ql, address, params): hFile = params["hFile"] if hFile == STD_INPUT_HANDLE or hFile == STD_OUTPUT_HANDLE or hFile == STD_ERROR_HANDLE: @@ -38,7 +38,7 @@ def hook_GetFileType(ql, address, params): # LPCSTR lpFileName, # LPWIN32_FIND_DATAA lpFindFileData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FindFirstFileA", specialtype={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCSTR': 'POINTER'}) def hook_FindFirstFileA(ql, address, params): pass @@ -47,7 +47,7 @@ def hook_FindFirstFileA(ql, address, params): # LPCSTR lpFileName, # LPWIN32_FIND_DATAA lpFindFileData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FindNextFileA", specialtype={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCSTR': 'POINTER'}) def hook_FindNextFileA(ql, address, params): pass @@ -55,7 +55,7 @@ def hook_FindNextFileA(ql, address, params): # BOOL FindClose( # HANDLE hFindFile # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FindClose") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_FindClose(ql, address, params): pass @@ -67,7 +67,7 @@ def hook_FindClose(ql, address, params): # LPDWORD lpNumberOfBytesRead, # LPOVERLAPPED lpOverlapped # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ReadFile") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ReadFile(ql, address, params): ret = 1 hFile = params["hFile"] @@ -104,7 +104,7 @@ def hook_ReadFile(ql, address, params): # LPDWORD lpNumberOfBytesWritten, # LPOVERLAPPED lpOverlapped # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WriteFile") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_WriteFile(ql, address, params): ret = 1 hFile = params["hFile"] @@ -172,7 +172,7 @@ def _CreateFile(ql, address, params, name): # DWORD dwFlagsAndAttributes, # HANDLE hTemplateFile # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateFileA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateFileA(ql, address, params): ret = _CreateFile(ql, address, params, "CreateFileA") return ret @@ -187,7 +187,7 @@ def hook_CreateFileA(ql, address, params): # DWORD dwFlagsAndAttributes, # HANDLE hTemplateFile # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateFileW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateFileW(ql, address, params): ret = _CreateFile(ql, address, params, "CreateFileW") return ret @@ -197,7 +197,7 @@ def hook_CreateFileW(ql, address, params): # DWORD nBufferLength, # LPWSTR lpBuffer # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetTempPathW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetTempPathW(ql, address, params): temp = (ql.os.windir + "Temp" + "\\\x00").encode('utf-16le') dest = params["lpBuffer"] @@ -213,7 +213,7 @@ def hook_GetTempPathW(ql, address, params): # LPWSTR lpszShortPath, # DWORD cchBuffer # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetShortPathNameW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetShortPathNameW(ql, address, params): paths = params["lpszLongPath"].split("\\") dst = params["lpszShortPath"] @@ -245,7 +245,7 @@ def hook_GetShortPathNameW(ql, address, params): # LPWSTR lpFileSystemNameBuffer, # DWORD nFileSystemNameSize # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetVolumeInformationW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetVolumeInformationW(ql, address, params): root = params["lpRootPathName"] if root != 0: @@ -281,7 +281,7 @@ def hook_GetVolumeInformationW(ql, address, params): # UINT GetDriveTypeW( # LPCWSTR lpRootPathName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDriveTypeW", specialtype={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCWSTR': 'POINTER'}) def hook_GetDriveTypeW(ql, address, params): path = params["lpRootPathName"] if path != 0: @@ -300,7 +300,7 @@ def hook_GetDriveTypeW(ql, address, params): # LPDWORD lpNumberOfFreeClusters, # LPDWORD lpTotalNumberOfClusters # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDiskFreeSpaceW", specialtype={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCWSTR': 'POINTER'}) def hook_GetDiskFreeSpaceW(ql, address, params): path = params["lpRootPathName"] if path == ql.os.profile["PATH"]["systemdrive"]: @@ -325,7 +325,7 @@ def hook_GetDiskFreeSpaceW(ql, address, params): # LPCSTR lpPathName, # LPSECURITY_ATTRIBUTES lpSecurityAttributes # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateDirectoryA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateDirectoryA(ql, address, params): path_name = params["lpPathName"] target_dir = os.path.join(ql.rootfs, path_name.replace("\\", os.sep)) @@ -344,7 +344,7 @@ def hook_CreateDirectoryA(ql, address, params): # HANDLE hFile, # LPDWORD lpFileSizeHigh # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetFileSize", specialtype={'LPDWORD': 'DWORD'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPDWORD': 'DWORD'}) def hook_GetFileSize(ql, address, params): try: handle = ql.handle_manager.get(params['hFile'].file) @@ -355,19 +355,19 @@ def hook_GetFileSize(ql, address, params): # BOOL AreFileApisANSI(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="AreFileApisANSI") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_AreFileApisANSI(ql, address, params): # TODO make this coherent with SetFileApisToANSI/OEM calls return 1 # void SetFileApisToANSI(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetFileApisToANSI") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetFileApisToANSI(ql, address, params): return # void SetFileApisToOEM(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetFileApisToOEM") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetFileApisToOEM(ql, address, params): return diff --git a/qiling/os/windows/dlls/kernel32/handleapi.py b/qiling/os/windows/dlls/kernel32/handleapi.py index 760856453..4cf324caf 100644 --- a/qiling/os/windows/dlls/kernel32/handleapi.py +++ b/qiling/os/windows/dlls/kernel32/handleapi.py @@ -24,7 +24,7 @@ # BOOL bInheritHandle, # DWORD dwOptions # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DuplicateHandle", specialtype={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HANDLE': 'POINTER'}) def hook_DuplicateHandle(ql, address, params): # TODO for how we manage handle, i think this doesn't work content = params["hSourceHandle"] @@ -36,7 +36,7 @@ def hook_DuplicateHandle(ql, address, params): # BOOL CloseHandle( # HANDLE hObject # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CloseHandle") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CloseHandle(ql, address, params): value = params["hObject"] handle = ql.os.handle_manager.get(value) @@ -58,7 +58,7 @@ def hook_CloseHandle(ql, address, params): # DWORD dwMask, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetHandleInformation", specialtype={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HANDLE': 'POINTER'}) def hook_SetHandleInformation(ql, address, params): val = params["hObject"] handle = ql.os.handle_manager.get(val) diff --git a/qiling/os/windows/dlls/kernel32/heapapi.py b/qiling/os/windows/dlls/kernel32/heapapi.py index e7b65e01c..fd17570f5 100644 --- a/qiling/os/windows/dlls/kernel32/heapapi.py +++ b/qiling/os/windows/dlls/kernel32/heapapi.py @@ -20,7 +20,7 @@ # SIZE_T dwInitialSize, # SIZE_T dwMaximumSize # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HeapCreate") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HeapCreate(ql, address, params): dwInitialSize = params["dwInitialSize"] addr = ql.os.heap.alloc(dwInitialSize) @@ -32,7 +32,7 @@ def hook_HeapCreate(ql, address, params): # DWORD dwFlags, # SIZE_T dwBytes # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HeapAlloc") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HeapAlloc(ql, address, params): ret = ql.os.heap.alloc(params["dwBytes"]) return ret @@ -43,7 +43,7 @@ def hook_HeapAlloc(ql, address, params): # DWORD dwFlags, # LPCVOID lpMem # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HeapSize") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HeapSize(ql, address, params): pointer = params["lpMem"] return ql.os.heap.size(pointer) @@ -54,7 +54,7 @@ def hook_HeapSize(ql, address, params): # DWORD dwFlags, # _Frees_ptr_opt_ LPVOID lpMem # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HeapFree") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HeapFree(ql, address, params): return ql.os.heap.free(params['lpMem']) @@ -65,14 +65,14 @@ def hook_HeapFree(ql, address, params): # PVOID HeapInformation, # SIZE_T HeapInformationLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HeapSetInformation", specialtype={'SIZE_T': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'SIZE_T': 'UINT'}) def hook_HeapSetInformation(ql, address, params): return 1 # HANDLE GetProcessHeap( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetProcessHeap") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetProcessHeap(ql, address, params): ret = ql.os.heap.start_address return ret diff --git a/qiling/os/windows/dlls/kernel32/interlockedapi.py b/qiling/os/windows/dlls/kernel32/interlockedapi.py index 8f2850ec6..c96ab9049 100644 --- a/qiling/os/windows/dlls/kernel32/interlockedapi.py +++ b/qiling/os/windows/dlls/kernel32/interlockedapi.py @@ -17,7 +17,7 @@ # void InitializeSListHead( # PSLIST_HEADER ListHead # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InitializeSListHead") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InitializeSListHead(ql, address, params): addr = params["ListHead"] handle = Handle(obj=[], id=addr) diff --git a/qiling/os/windows/dlls/kernel32/ioapiset.py b/qiling/os/windows/dlls/kernel32/ioapiset.py index 62321049a..ba66a46f6 100644 --- a/qiling/os/windows/dlls/kernel32/ioapiset.py +++ b/qiling/os/windows/dlls/kernel32/ioapiset.py @@ -24,7 +24,7 @@ # LPDWORD lpBytesReturned, # LPOVERLAPPED lpOverlapped # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DeviceIoControl") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_DeviceIoControl(ql, address, params): operation = params["dwIoControlCode"] data = params["lpInBuffer"] diff --git a/qiling/os/windows/dlls/kernel32/libloaderapi.py b/qiling/os/windows/dlls/kernel32/libloaderapi.py index 55bbc56e9..487da1aa4 100644 --- a/qiling/os/windows/dlls/kernel32/libloaderapi.py +++ b/qiling/os/windows/dlls/kernel32/libloaderapi.py @@ -34,7 +34,7 @@ def _GetModuleHandle(ql, address, params): # HMODULE GetModuleHandleA( # LPCSTR lpModuleName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetModuleHandleA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetModuleHandleA(ql, address, params): return _GetModuleHandle(ql, address, params) @@ -42,7 +42,7 @@ def hook_GetModuleHandleA(ql, address, params): # HMODULE GetModuleHandleW( # LPCWSTR lpModuleName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetModuleHandleW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetModuleHandleW(ql, address, params): return _GetModuleHandle(ql, address, params) @@ -52,7 +52,7 @@ def hook_GetModuleHandleW(ql, address, params): # LPCWSTR lpModuleName, # HMODULE *phModule # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetModuleHandleExW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetModuleHandleExW(ql, address, params): res = _GetModuleHandle(ql, address, params) dst = params["phModule"] @@ -65,7 +65,7 @@ def hook_GetModuleHandleExW(ql, address, params): # LPSTR lpFilename, # DWORD nSize # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetModuleFileNameA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetModuleFileNameA(ql, address, params): ret = 0 hModule = params["hModule"] @@ -94,7 +94,7 @@ def hook_GetModuleFileNameA(ql, address, params): # LPSTR lpFilename, # DWORD nSize # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetModuleFileNameW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetModuleFileNameW(ql, address, params): ret = 0 hModule = params["hModule"] @@ -120,7 +120,7 @@ def hook_GetModuleFileNameW(ql, address, params): # HMODULE hModule, # LPCSTR lpProcName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetProcAddress", specialtype={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCSTR': 'POINTER'}) def hook_GetProcAddress(ql, address, params): if params["lpProcName"] > MAXUSHORT: # Look up by name @@ -155,7 +155,7 @@ def hook_GetProcAddress(ql, address, params): # HMODULE LoadLibraryA( # LPCSTR lpLibFileName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadLibraryA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LoadLibraryA(ql, address, params): lpLibFileName = params["lpLibFileName"] if lpLibFileName == ql.loader.filepath.decode(): @@ -170,7 +170,7 @@ def hook_LoadLibraryA(ql, address, params): # HANDLE hFile, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadLibraryExA", specialtype={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HANDLE': 'POINTER'}) def hook_LoadLibraryExA(ql, address, params): lpLibFileName = params["lpLibFileName"] dll_base = ql.loader.load_dll(lpLibFileName.encode()) @@ -180,7 +180,7 @@ def hook_LoadLibraryExA(ql, address, params): # HMODULE LoadLibraryW( # LPCWSTR lpLibFileName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadLibraryW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LoadLibraryW(ql, address, params): lpLibFileName = params["lpLibFileName"].encode() dll_base = ql.loader.load_dll(lpLibFileName) @@ -192,7 +192,7 @@ def hook_LoadLibraryW(ql, address, params): # HANDLE hFile, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadLibraryExW", specialtype={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HANDLE': 'POINTER'}) def hook_LoadLibraryExW(ql, address, params): lpLibFileName = params["lpLibFileName"].encode() dll_base = ql.loader.load_dll(lpLibFileName) @@ -203,7 +203,7 @@ def hook_LoadLibraryExW(ql, address, params): # HMODULE hModule, # HRSRC hResInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SizeofResource", specialtype={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllnam, specialtype={'HMODULE': 'POINTER'}) def hook_SizeofResource(ql, address, params): # Return size of resource # TODO set a valid value. More tests have to be made to find it. @@ -214,7 +214,7 @@ def hook_SizeofResource(ql, address, params): # HMODULE hModule, # HRSRC hResInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadResource", specialtype={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HMODULE': 'POINTER'}) def hook_LoadResource(ql, address, params): pointer = params["hResInfo"] return pointer @@ -223,7 +223,7 @@ def hook_LoadResource(ql, address, params): # LPVOID LockResource( # HGLOBAL hResData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LockResource", specialtype={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HMODULE': 'POINTER'}) def hook_LockResource(ql, address, params): pointer = params["hResData"] return pointer @@ -232,7 +232,7 @@ def hook_LockResource(ql, address, params): # BOOL DisableThreadLibraryCalls( # HMODULE hLibModule # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DisableThreadLibraryCalls", specialtype={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HMODULE': 'POINTER'}) def hook_DisableThreadLibraryCalls(ql, address, params): return 1 @@ -240,7 +240,7 @@ def hook_DisableThreadLibraryCalls(ql, address, params): # BOOL FreeLibrary( # HMODULE hLibModule # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FreeLibrary", specialtype={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HMODULE': 'POINTER'}) def hook_FreeLibrary(ql, address, params): return 1 @@ -248,7 +248,7 @@ def hook_FreeLibrary(ql, address, params): # BOOL SetDefaultDllDirectories( # DWORD DirectoryFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetDefaultDllDirectories") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetDefaultDllDirectories(ql, address, params): value = params["DirectoryFlags"] if value == LOAD_LIBRARY_SEARCH_USER_DIRS: diff --git a/qiling/os/windows/dlls/kernel32/memoryapi.py b/qiling/os/windows/dlls/kernel32/memoryapi.py index 92045093d..63911f5ce 100644 --- a/qiling/os/windows/dlls/kernel32/memoryapi.py +++ b/qiling/os/windows/dlls/kernel32/memoryapi.py @@ -21,7 +21,7 @@ # DWORD flAllocationType, # DWORD flProtect # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="VirtualAlloc") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_VirtualAlloc(ql, address, params): dwSize = params["dwSize"] addr = ql.os.heap.alloc(dwSize) @@ -33,7 +33,7 @@ def hook_VirtualAlloc(ql, address, params): # SIZE_T dwSize, # DWORD dwFreeType # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="VirtualFree") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_VirtualFree(ql, address, params): lpAddress = params["lpAddress"] ql.os.heap.free(lpAddress) @@ -46,7 +46,7 @@ def hook_VirtualFree(ql, address, params): # DWORD flNewProtect, # PDWORD lpflOldProtect # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="VirtualProtect", specialtype={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) def hook_VirtualProtect(ql, address, params): return 1 @@ -56,7 +56,7 @@ def hook_VirtualProtect(ql, address, params): # PMEMORY_BASIC_INFORMATION lpBuffer, # SIZE_T dwLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="VirtualQuery", specialtype={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) def hook_VirtualQuery(ql, address, params): """ typedef struct _MEMORY_BASIC_INFORMATION { diff --git a/qiling/os/windows/dlls/kernel32/processenv.py b/qiling/os/windows/dlls/kernel32/processenv.py index b1358a702..a905c6171 100644 --- a/qiling/os/windows/dlls/kernel32/processenv.py +++ b/qiling/os/windows/dlls/kernel32/processenv.py @@ -11,7 +11,7 @@ # HANDLE WINAPI GetStdHandle( # _In_ DWORD nStdHandle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetStdHandle", defparams={"nStdHandle": DWORD}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"nStdHandle": DWORD}) def hook_GetStdHandle(ql, address, params): nStdHandle = params["nStdHandle"] return nStdHandle @@ -19,7 +19,7 @@ def hook_GetStdHandle(ql, address, params): # LPSTR GetCommandLineA( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCommandLineA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCommandLineA(ql, address, params): cmdline = ql.loader.cmdline + b"\x00" addr = ql.os.heap.alloc(len(cmdline)) @@ -29,7 +29,7 @@ def hook_GetCommandLineA(ql, address, params): # LPSTR GetCommandLineW( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCommandLineW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCommandLineW(ql, address, params): cmdline = ql.loader.cmdline.decode('ascii').encode('utf-16le') addr = ql.os.heap.alloc(len(cmdline)) @@ -39,7 +39,7 @@ def hook_GetCommandLineW(ql, address, params): # LPWCH GetEnvironmentStrings( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetEnvironmentStrings") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetEnvironmentStrings(ql, address, params): cmdline = b"\x00" addr = ql.os.heap.alloc(len(cmdline)) @@ -49,7 +49,7 @@ def hook_GetEnvironmentStrings(ql, address, params): # LPWCH GetEnvironmentStringsW( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetEnvironmentStringsW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetEnvironmentStringsW(ql, address, params): cmdline = b"\x00\x00" addr = ql.os.heap.alloc(len(cmdline)) @@ -60,7 +60,7 @@ def hook_GetEnvironmentStringsW(ql, address, params): # BOOL FreeEnvironmentStringsW( # LPWCH penv # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FreeEnvironmentStringsW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_FreeEnvironmentStringsW(ql, address, params): ret = 1 return ret @@ -71,7 +71,7 @@ def hook_FreeEnvironmentStringsW(ql, address, params): # LPWSTR lpDst, # DWORD nSize # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ExpandEnvironmentStringsW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ExpandEnvironmentStringsW(ql, address, params): string: str = params["lpSrc"] start = string.find("%") @@ -94,7 +94,7 @@ def hook_ExpandEnvironmentStringsW(ql, address, params): # LPSTR lpBuffer, # DWORD nSize # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetEnvironmentVariableA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetEnvironmentVariableA(ql, address, params): ret = 0 return ret diff --git a/qiling/os/windows/dlls/kernel32/processthreadsapi.py b/qiling/os/windows/dlls/kernel32/processthreadsapi.py index 031d02540..f00cf3517 100644 --- a/qiling/os/windows/dlls/kernel32/processthreadsapi.py +++ b/qiling/os/windows/dlls/kernel32/processthreadsapi.py @@ -20,7 +20,7 @@ # void ExitProcess( # UINT uExitCode # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ExitProcess", specialtype={'UINT': 'DWORD'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'UINT': 'DWORD'}) def hook_ExitProcess(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False @@ -38,7 +38,7 @@ def _GetStartupInfo(ql, address, params): # VOID WINAPI GetStartupInfoA( # _Out_ LPSTARTUPINFO lpStartupInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetStartupInfoA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetStartupInfoA(ql, address, params): return _GetStartupInfo(ql, address, params) @@ -46,7 +46,7 @@ def hook_GetStartupInfoA(ql, address, params): # VOID WINAPI GetStartupInfoW( # _Out_ LPSTARTUPINFO lpStartupInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetStartupInfoW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetStartupInfoW(ql, address, params): # The struct for the W version uses LPWSTRING, but i think is the same in this context return _GetStartupInfo(ql, address, params) @@ -64,7 +64,7 @@ def hook_TlsAlloc(ql, address, params): # DWORD TlsFree( # DWORD dwTlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="TlsFree", defparams={"dwTlsIndex": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"dwTlsIndex": UINT}) def hook_TlsFree(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -78,7 +78,7 @@ def hook_TlsFree(ql, address, params): # LPVOID TlsGetValue( # DWORD dwTlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="TlsGetValue", defparams={"dwTlsIndex": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"dwTlsIndex": UINT}) def hook_TlsGetValue(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -94,7 +94,7 @@ def hook_TlsGetValue(ql, address, params): # LPVOID TlsSetValue( # DWORD dwTlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="TlsSetValue", defparams={"dwTlsIndex": UINT, "lpTlsValue": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"dwTlsIndex": UINT, "lpTlsValue": POINTER}) def hook_TlsSetValue(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -107,7 +107,7 @@ def hook_TlsSetValue(ql, address, params): # DWORD GetCurrentThreadId( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCurrentThreadId") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCurrentThreadId(ql, address, params): ret = ql.os.thread_manager.cur_thread.id return ret @@ -115,7 +115,7 @@ def hook_GetCurrentThreadId(ql, address, params): # DWORD GetCurrentProcessId( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCurrentProcessId") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCurrentProcessId(ql, address, params): # Let's return a valid value return ql.os.profile.getint("KERNEL", "pid") @@ -124,7 +124,7 @@ def hook_GetCurrentProcessId(ql, address, params): # BOOL IsProcessorFeaturePresent( # DWORD ProcessorFeature # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsProcessorFeaturePresent") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsProcessorFeaturePresent(ql, address, params): feature = params["ProcessorFeature"] if feature == PF_XSAVE_ENABLED: @@ -142,7 +142,7 @@ def hook_IsProcessorFeaturePresent(ql, address, params): # DWORD dwCreationFlags, # LPDWORD lpThreadId # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateThread") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateThread(ql, address, params): CREATE_RUN = 0 CREATE_SUSPENDED = 0x00000004 @@ -189,7 +189,7 @@ def hook_CreateThread(ql, address, params): # HANDLE GetCurrentProcess( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCurrentProcess") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCurrentProcess(ql, address, params): return ql.os.profile.getint("KERNEL", "pid") @@ -198,7 +198,7 @@ def hook_GetCurrentProcess(ql, address, params): # HANDLE hProcess, # UINT uExitCode # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="TerminateProcess") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_TerminateProcess(ql, address, params): # Samples will try to kill other process! We don't want to always stop! process = params["hProcess"] @@ -210,7 +210,7 @@ def hook_TerminateProcess(ql, address, params): # HANDLE GetCurrentThread(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCurrentThread") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCurrentThread(ql, address, params): ret = ql.os.thread_manager.cur_thread.id return ret @@ -221,7 +221,7 @@ def hook_GetCurrentThread(ql, address, params): # BOOL bInheritHandle, # DWORD dwProcessId # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OpenProcess", specialtype={'BOOL': 'HANDLE'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'BOOL': 'HANDLE'}) def hook_OpenProcess(ql, address, params): proc = params["dwProcessId"] # If the specified process is the System Process (0x00000000), @@ -243,7 +243,7 @@ def hook_OpenProcess(ql, address, params): # DWORD DesiredAccess, # PHANDLE TokenHandle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OpenProcessToken", +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"ProcessHandle": HANDLE, "DesiredAccess": DWORD, "TokenHandle": POINTER}) def hook_OpenProcessToken(ql, address, params): token_pointer = params["TokenHandle"] @@ -258,7 +258,7 @@ def hook_OpenProcessToken(ql, address, params): # HANDLE hThread, # LPCONTEXT lpContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetThreadContext") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetThreadContext(ql, address, params): return 1 @@ -269,7 +269,7 @@ def hook_GetThreadContext(ql, address, params): # BOOL OpenAsSelf, # PHANDLE TokenHandle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OpenThreadToken", +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"ThreadHandle": HANDLE, "DesiredAccess": DWORD, "OpenAsSelf": BOOL, "TokenHandle": POINTER}) def hook_OpenThreadToken(ql, address, params): token_pointer = params["TokenHandle"] @@ -287,6 +287,6 @@ def hook_OpenThreadToken(ql, address, params): # LPFILETIME lpKernelTime, # LPFILETIME lpUserTime # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetThreadTimes") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetThreadTimes(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/kernel32/profileapi.py b/qiling/os/windows/dlls/kernel32/profileapi.py index c3429838e..48510c211 100644 --- a/qiling/os/windows/dlls/kernel32/profileapi.py +++ b/qiling/os/windows/dlls/kernel32/profileapi.py @@ -17,7 +17,7 @@ # BOOL QueryPerformanceCounter( # LARGE_INTEGER *lpPerformanceCount # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="QueryPerformanceCounter") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_QueryPerformanceCounter(ql, address, params): ret = 0 return ret @@ -26,7 +26,7 @@ def hook_QueryPerformanceCounter(ql, address, params): # BOOL QueryPerformanceFrequency( # LARGE_INTEGER *lpFrequency # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="QueryPerformanceFrequency") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_QueryPerformanceFrequency(ql, address, params): ql.mem.write(params['lpFrequency'], (10000000).to_bytes(length=8, byteorder='little')) return 1 diff --git a/qiling/os/windows/dlls/kernel32/psapi.py b/qiling/os/windows/dlls/kernel32/psapi.py index f75480949..e916596a2 100644 --- a/qiling/os/windows/dlls/kernel32/psapi.py +++ b/qiling/os/windows/dlls/kernel32/psapi.py @@ -20,7 +20,7 @@ # LPMODULEINFO lpmodinfo, # DWORD cb # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="K32GetModuleInformation") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_K32GetModuleInformation(self, address, params): # TODO return 0 diff --git a/qiling/os/windows/dlls/kernel32/stringapiset.py b/qiling/os/windows/dlls/kernel32/stringapiset.py index 73a999a36..8f2398e0d 100644 --- a/qiling/os/windows/dlls/kernel32/stringapiset.py +++ b/qiling/os/windows/dlls/kernel32/stringapiset.py @@ -21,7 +21,7 @@ # int cchSrc, # LPWORD lpCharType # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetStringTypeW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetStringTypeW(ql, address, params): # TODO implement ret = 1 @@ -36,7 +36,7 @@ def hook_GetStringTypeW(ql, address, params): # INT count, # LPWORD chartype # ) -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetStringTypeExA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetStringTypeExA(ql, address, params): # TODO implement ret = 1 @@ -53,7 +53,7 @@ def hook_GetStringTypeExA(ql, address, params): # LPCCH lpDefaultChar, # LPBOOL lpUsedDefaultChar # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WideCharToMultiByte", specialtype={'LPCWCH': 'WSTRING'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCWCH': 'WSTRING'}) def hook_WideCharToMultiByte(ql, address, params): ret = 0 @@ -76,7 +76,7 @@ def hook_WideCharToMultiByte(ql, address, params): # LPWSTR lpWideCharStr, # int cchWideChar # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MultiByteToWideChar", specialtype={'DWORD': 'UINT', 'LPCCH': 'WSTRING'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'UINT', 'LPCCH': 'WSTRING'}) def hook_MultiByteToWideChar(ql, address, params): wide_str = (params['lpMultiByteStr']+"\x00").encode('utf-16le') if params['cchWideChar'] != 0: diff --git a/qiling/os/windows/dlls/kernel32/synchapi.py b/qiling/os/windows/dlls/kernel32/synchapi.py index 2176a2d03..f1b78fbf0 100644 --- a/qiling/os/windows/dlls/kernel32/synchapi.py +++ b/qiling/os/windows/dlls/kernel32/synchapi.py @@ -20,7 +20,7 @@ # void Sleep( # DWORD dwMilliseconds # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="Sleep") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_Sleep(ql, address, params): # time.sleep(params["dwMilliseconds"] * 10**(-3)) pass @@ -29,7 +29,7 @@ def hook_Sleep(ql, address, params): # void EnterCriticalSection( # LPCRITICAL_SECTION lpCriticalSection # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="EnterCriticalSection") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_EnterCriticalSection(ql, address, params): return 0 @@ -37,7 +37,7 @@ def hook_EnterCriticalSection(ql, address, params): # void LeaveCriticalSection( # LPCRITICAL_SECTION lpCriticalSection # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LeaveCriticalSection") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LeaveCriticalSection(ql, address, params): return 0 @@ -45,7 +45,7 @@ def hook_LeaveCriticalSection(ql, address, params): # void DeleteCriticalSection( # LPCRITICAL_SECTION lpCriticalSection # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DeleteCriticalSection") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_DeleteCriticalSection(ql, address, params): return 0 @@ -53,7 +53,7 @@ def hook_DeleteCriticalSection(ql, address, params): # void InitializeCriticalSection( # LPCRITICAL_SECTION lpCriticalSection # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InitializeCriticalSection") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InitializeCriticalSection(ql, address, params): return 1 @@ -63,7 +63,7 @@ def hook_InitializeCriticalSection(ql, address, params): # DWORD dwSpinCount, # DWORD Flags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InitializeCriticalSectionEx") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InitializeCriticalSectionEx(ql, address, params): return 1 @@ -72,7 +72,7 @@ def hook_InitializeCriticalSectionEx(ql, address, params): # LPCRITICAL_SECTION lpCriticalSection, # DWORD dwSpinCount # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InitializeCriticalSectionAndSpinCount", specialtype={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'UINT'}) def hook_InitializeCriticalSectionAndSpinCount(ql, address, params): return 1 @@ -81,7 +81,7 @@ def hook_InitializeCriticalSectionAndSpinCount(ql, address, params): # HANDLE hHandle, # DWORD dwMilliseconds # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WaitForSingleObject") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_WaitForSingleObject(ql, address, params): ret = 0 hHandle = params["hHandle"] @@ -100,7 +100,7 @@ def hook_WaitForSingleObject(ql, address, params): # DWORD dwMilliseconds # BOOL bAlertable # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WaitForSingleObjectEx") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_WaitForSingleObjectEx(ql, address, params): ret = 0 hHandle = params["hHandle"] @@ -119,7 +119,7 @@ def hook_WaitForSingleObjectEx(ql, address, params): # BOOL bWaitAll, # DWORD dwMilliseconds # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WaitForMultipleObjects", specialtype={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HANDLE': 'POINTER'}) def hook_WaitForMultipleObjects(ql, address, params): ret = 0 nCount = params["nCount"] @@ -141,7 +141,7 @@ def hook_WaitForMultipleObjects(ql, address, params): # BOOL bInheritHandle, # LPCWSTR lpName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OpenMutexW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_OpenMutexW(ql, address, params): # The name can have a "Global" or "Local" prefix to explicitly open an object in the global or session namespace. # It can also have no prefix @@ -177,7 +177,7 @@ def hook_OpenMutexW(ql, address, params): # BOOL bInheritHandle, # LPCSTR lpName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OpenMutexA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_OpenMutexA(ql, address, params): return hook_OpenMutexW.__wrapped__(ql, address, params) @@ -187,7 +187,7 @@ def hook_OpenMutexA(ql, address, params): # BOOL bInitialOwner, # LPCWSTR lpName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateMutexW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateMutexW(ql, address, params): try: _type, name = params["lpName"].split("\\") @@ -215,7 +215,7 @@ def hook_CreateMutexW(ql, address, params): # BOOL bInitialOwner, # LPCSTR lpName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateMutexA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateMutexA(ql, address, params): return hook_CreateMutexW.__wrapped__(ql, address, params) @@ -226,7 +226,7 @@ def hook_CreateMutexA(ql, address, params): # BOOL bInitialState, # LPCSTR lpName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateEventA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateEventA(ql, address, params): """ Implementation seems similar enough to Mutex to just use it @@ -254,7 +254,7 @@ def hook_CreateEventA(ql, address, params): # BOOL bInitialState, # LPCWSTR lpName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateEventW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateEventW(ql, address, params): return hook_CreateEventA.__wrapped__(ql, address, params) @@ -262,7 +262,7 @@ def hook_CreateEventW(ql, address, params): # void InitializeSRWLock( # PSRWLOCK SRWLock # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InitializeSRWLock") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InitializeSRWLock(ql, address, params): return @@ -270,7 +270,7 @@ def hook_InitializeSRWLock(ql, address, params): # void AcquireSRWLockExclusive( # PSRWLOCK SRWLock # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="AcquireSRWLockExclusive") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_AcquireSRWLockExclusive(ql, address, params): return @@ -278,7 +278,7 @@ def hook_AcquireSRWLockExclusive(ql, address, params): # void AcquireSRWLockShared( # PSRWLOCK SRWLock # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="AcquireSRWLockShared") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_AcquireSRWLockShared(ql, address, params): return @@ -286,7 +286,7 @@ def hook_AcquireSRWLockShared(ql, address, params): # void ReleaseSRWLockExclusive( # PSRWLOCK SRWLock # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ReleaseSRWLockExclusive") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ReleaseSRWLockExclusive(ql, address, params): return @@ -294,6 +294,6 @@ def hook_ReleaseSRWLockExclusive(ql, address, params): # void ReleaseSRWLockShared( # PSRWLOCK SRWLock # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ReleaseSRWLockShared") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ReleaseSRWLockShared(ql, address, params): return diff --git a/qiling/os/windows/dlls/kernel32/sysinfoapi.py b/qiling/os/windows/dlls/kernel32/sysinfoapi.py index 61bea882e..cd4621f90 100644 --- a/qiling/os/windows/dlls/kernel32/sysinfoapi.py +++ b/qiling/os/windows/dlls/kernel32/sysinfoapi.py @@ -19,7 +19,7 @@ # NOT_BUILD_WINDOWS_DEPRECATE DWORD GetVersion( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetVersion") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetVersion(ql, address, params): ret = 0x0004 ret = ret << 16 @@ -30,7 +30,7 @@ def hook_GetVersion(ql, address, params): # NOT_BUILD_WINDOWS_DEPRECATE BOOL GetVersionExA( # LPOSVERSIONINFOA lpVersionInformation # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetVersionExA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetVersionExA(ql, address, params): return hook_GetVersionExW.__wrapped__(ql, address, params) @@ -38,7 +38,7 @@ def hook_GetVersionExA(ql, address, params): # NOT_BUILD_WINDOWS_DEPRECATE BOOL GetVersionExW( # LPOSVERSIONINFOW lpVersionInformation # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetVersionExW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetVersionExW(ql, address, params): return 1 @@ -46,7 +46,7 @@ def hook_GetVersionExW(ql, address, params): # void GetSystemInfo( # LPSYSTEM_INFO lpSystemInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSystemInfo") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSystemInfo(ql, address, params): pointer = params["lpSystemInfo"] system_info = SystemInfo(ql, 0, ql.os.heap.page_size, ql.loader.pe_image_address, @@ -59,7 +59,7 @@ def hook_GetSystemInfo(ql, address, params): # void GetLocalTime( # LPSYSTEMTIME lpSystemTime # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetLocalTime") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetLocalTime(ql, address, params): import datetime ptr = params['lpSystemTime'] @@ -73,7 +73,7 @@ def hook_GetLocalTime(ql, address, params): # void GetSystemTimeAsFileTime( # LPFILETIME lpSystemTimeAsFileTime # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname='GetSystemTimeAsFileTime') +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSystemTimeAsFileTime(ql, address, params): # TODO pass @@ -81,7 +81,7 @@ def hook_GetSystemTimeAsFileTime(ql, address, params): # DWORD GetTickCount( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname='GetTickCount') +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetTickCount(ql, address, params): ret = 200000 return ret @@ -91,7 +91,7 @@ def hook_GetTickCount(ql, address, params): # LPWSTR lpBuffer, # UINT uSize # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname='GetWindowsDirectoryW') +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetWindowsDirectoryW(ql, address, params): dst = params["lpBuffer"] value = (ql.os.windir + "\x00").encode("utf-16le") @@ -102,7 +102,7 @@ def hook_GetWindowsDirectoryW(ql, address, params): # void GetNativeSystemInfo( # LPSYSTEM_INFO lpSystemInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname='GetNativeSystemInfo') +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetNativeSystemInfo(ql, address, params): pointer = params["lpSystemInfo"] system_info = SystemInfo(ql, 0, ql.os.heap.page_size, ql.loader.pe_image_address, @@ -120,7 +120,7 @@ def hook_GetNativeSystemInfo(ql, address, params): # void GetSystemTimePreciseAsFileTime( # LPFILETIME lpSystemTimeAsFileTime # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname='GetSystemTimePreciseAsFileTime') +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSystemTimePreciseAsFileTime(ql, address, params): # todo check if the value is correct dt = datetime.now().microsecond.to_bytes(8, byteorder="little") diff --git a/qiling/os/windows/dlls/kernel32/tlhelp32.py b/qiling/os/windows/dlls/kernel32/tlhelp32.py index 1871ecf82..f0c1469fe 100644 --- a/qiling/os/windows/dlls/kernel32/tlhelp32.py +++ b/qiling/os/windows/dlls/kernel32/tlhelp32.py @@ -20,7 +20,7 @@ # DWORD dwFlags, # DWORD th32ProcessID # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateToolhelp32Snapshot") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateToolhelp32Snapshot(ql, address, params): # TODO thinking about implementing an handler, gonna see if is really necessary flag = params["dwFlags"] @@ -35,7 +35,7 @@ def hook_CreateToolhelp32Snapshot(ql, address, params): # HANDLE hSnapshot, # LPPROCESSENTRY32W lppe # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="Process32FirstW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_Process32FirstW(ql, address, params): return 0x1 @@ -44,7 +44,7 @@ def hook_Process32FirstW(ql, address, params): # HANDLE hSnapshot, # LPPROCESSENTRY32W lppe # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="Process32NextW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_Process32NextW(ql, address, params): # Return True if more process, 0 else if ql.os.syscall_count["Process32NextW"] >= 3: # I don' know how many process the sample want's to cycle diff --git a/qiling/os/windows/dlls/kernel32/winbase.py b/qiling/os/windows/dlls/kernel32/winbase.py index a18b29795..168e2dfc3 100644 --- a/qiling/os/windows/dlls/kernel32/winbase.py +++ b/qiling/os/windows/dlls/kernel32/winbase.py @@ -14,7 +14,7 @@ # __analysis_noreturn VOID FatalExit( # int ExitCode # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FatalExit") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_FatalExit(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False @@ -23,7 +23,7 @@ def hook_FatalExit(ql, address, params): # PVOID EncodePointer( # _In_ PVOID Ptr # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="EncodePointer", defparams={"Ptr": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"Ptr": POINTER}) def hook_EncodePointer(ql, address, params): return params['Ptr'] @@ -31,7 +31,7 @@ def hook_EncodePointer(ql, address, params): # PVOID DecodePointer( # _In_ PVOID Ptr # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DecodePointer", defparams={"Ptr": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"Ptr": POINTER}) def hook_DecodePointer(ql, address, params): return params['Ptr'] @@ -40,7 +40,7 @@ def hook_DecodePointer(ql, address, params): # LPCSTR lpCmdLine, # UINT uCmdShow # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WinExec") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_WinExec(ql, address, params): return 33 @@ -49,7 +49,7 @@ def hook_WinExec(ql, address, params): # UINT uFlags, # SIZE_T uBytes # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LocalAlloc") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LocalAlloc(ql, address, params): ret = ql.os.heap.alloc(params["uBytes"]) return ret @@ -60,7 +60,7 @@ def hook_LocalAlloc(ql, address, params): # SIZE_T uBytes, # UINT uFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LocalReAlloc") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LocalReAlloc(ql, address, params): old_mem = params["hMem"] ql.os.heap.free(old_mem) @@ -71,7 +71,7 @@ def hook_LocalReAlloc(ql, address, params): # HLOCAL LocalFree( # _Frees_ptr_opt_ HLOCAL hMem # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LocalFree") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LocalFree(ql, address, params): old_mem = params["hMem"] ql.os.heap.free(old_mem) @@ -81,7 +81,7 @@ def hook_LocalFree(ql, address, params): # UINT SetHandleCount( # UINT uNumber # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetHandleCount") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetHandleCount(ql, address, params): uNumber = params["uNumber"] return uNumber @@ -90,7 +90,7 @@ def hook_SetHandleCount(ql, address, params): # LPVOID GlobalLock( # HGLOBAL hMem # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GlobalLock") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GlobalLock(ql, address, params): return params['hMem'] @@ -98,7 +98,7 @@ def hook_GlobalLock(ql, address, params): # LPVOID GlobalUnlock( # HGLOBAL hMem # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GlobalUnlock") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GlobalUnlock(ql, address, params): return 1 @@ -107,7 +107,7 @@ def hook_GlobalUnlock(ql, address, params): # UINT uFlags, # SIZE_T dwBytes # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GlobalAlloc", specialtype={'SIZE_T': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'SIZE_T': 'UINT'}) def hook_GlobalAlloc(ql, address, params): return ql.os.heap.alloc(params["dwBytes"]) @@ -115,7 +115,7 @@ def hook_GlobalAlloc(ql, address, params): # HGLOBAL GlobalFree( # _Frees_ptr_opt_ HGLOBAL hMem # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GlobalFree") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GlobalFree(ql, address, params): old_mem = params["hMem"] ql.os.heap.free(old_mem) @@ -125,7 +125,7 @@ def hook_GlobalFree(ql, address, params): # HGLOBAL GlobalHandle( # LPCVOID pMem # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GlobalHandle") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GlobalHandle(ql, address, params): return params["pMem"] @@ -135,7 +135,7 @@ def hook_GlobalHandle(ql, address, params): # LPCSTR lpString2, # int iMaxLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcpynA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcpynA(ql, address, params): # Copy String2 into String for max iMaxLength chars src = params["lpString2"] @@ -152,7 +152,7 @@ def hook_lstrcpynA(ql, address, params): # LPCWSTR lpString2, # int iMaxLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcpynW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcpynW(ql, address, params): # Copy String2 into String for max iMaxLength chars src = params["lpString2"] @@ -168,7 +168,7 @@ def hook_lstrcpynW(ql, address, params): # LPSTR lpString1, # LPCSTR lpString2, # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcpyA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcpyA(ql, address, params): # Copy String2 into String src = params["lpString2"] @@ -181,7 +181,7 @@ def hook_lstrcpyA(ql, address, params): # LPSTR lpString1, # LPCSTR lpString2, # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcpyW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcpyW(ql, address, params): # Copy String2 into String src = params["lpString2"] @@ -194,7 +194,7 @@ def hook_lstrcpyW(ql, address, params): # LPSTR lpString1, # LPCSTR lpString2 # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcatA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcatA(ql, address, params): # Copy String2 into String src = params["lpString2"] @@ -210,7 +210,7 @@ def hook_lstrcatA(ql, address, params): # LPWSTR lpString1, # LPCWSTR lpString2 # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcatW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcatW(ql, address, params): # Copy String2 into String src = params["lpString2"] @@ -226,7 +226,7 @@ def hook_lstrcatW(ql, address, params): # LPCWSTR lpString1, # LPCWSTR lpString2 # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcmpiW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcmpiW(ql, address, params): # Copy String2 into String str1 = params["lpString1"] @@ -243,7 +243,7 @@ def hook_lstrcmpiW(ql, address, params): # LPCSTR lpString1, # LPCSTR lpString2 # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="lstrcmpiA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_lstrcmpiA(ql, address, params): return hook_lstrcmpiW.__wrapped__(ql, address, params) @@ -253,7 +253,7 @@ def hook_lstrcmpiA(ql, address, params): # LPCSTR lpName, # LPCSTR lpType # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="FindResourceA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_FindResourceA(ql, address, params): # Retrieve a resource # Name e Type can be int or strings, this can be a problem @@ -267,7 +267,7 @@ def hook_FindResourceA(ql, address, params): # const VOID *lp, # UINT_PTR ucb # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsBadReadPtr") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsBadReadPtr(ql, address, params): # Check read permission for size of memory ACCESS_TRUE = 0 @@ -279,7 +279,7 @@ def hook_IsBadReadPtr(ql, address, params): # const VOID *lp, # UINT_PTR ucb # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsBadWritePtr") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsBadWritePtr(ql, address, params): # Check read permission for size of memory ACCESS_TRUE = 0 @@ -322,7 +322,7 @@ def compare(p1, operator, p2): # DWORD dwTypeMask, # DWORDLONG dwlConditionMask # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="VerifyVersionInfoW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_VerifyVersionInfoW(ql, address, params): # https://docs.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-verifyversioninfow2 pointer = params["lpVersionInformation"] @@ -380,7 +380,7 @@ def hook_VerifyVersionInfoW(ql, address, params): # LPWSTR lpBuffer, # LPDWORD pcbBuffer # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetUserNameW", defparams={"lpBuffer": POINTER, "pcbBuffer": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"lpBuffer": POINTER, "pcbBuffer": POINTER}) def hook_GetUserNameW(ql, address, params): username = (ql.os.profile["USER"]["username"] + "\x00").encode("utf-16le") dst = params["lpBuffer"] @@ -398,7 +398,7 @@ def hook_GetUserNameW(ql, address, params): # LPCSTR lpBuffer, # LPDWORD pcbBuffer # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetUserNameA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetUserNameA(ql, address, params): username = (ql.os.profile["USER"]["username"] + "\x00").encode() dst = params["lpBuffer"] @@ -416,7 +416,7 @@ def hook_GetUserNameA(ql, address, params): # LPWSTR lpBuffer, # LPDWORD nSize # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetComputerNameW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetComputerNameW(ql, address, params): computer = (ql.os.profile["SYSTEM"]["computername"] + "\x00").encode("utf-16le") dst = params["lpBuffer"] @@ -434,7 +434,7 @@ def hook_GetComputerNameW(ql, address, params): # LPCSTR lpBuffer, # LPDWORD nSize # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetComputerNameA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetComputerNameA(ql, address, params): computer = (ql.os.profile["SYSTEM"]["computername"] + "\x00").encode() dst = params["lpBuffer"] diff --git a/qiling/os/windows/dlls/kernel32/winnls.py b/qiling/os/windows/dlls/kernel32/winnls.py index ba49d769f..891a348aa 100644 --- a/qiling/os/windows/dlls/kernel32/winnls.py +++ b/qiling/os/windows/dlls/kernel32/winnls.py @@ -19,20 +19,20 @@ # BOOL SetThreadLocale( # LCID Locale # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetThreadLocale", specialtype={'LCID': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LCID': 'UINT'}) def hook_SetThreadLocale(ql, address, params): return 0xC000 # LOCALE_CUSTOM_DEFAULT # LCID GetThreadLocale(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetThreadLocale") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetThreadLocale(ql, address, params): return 0xC000 # LOCALE_CUSTOM_DEFAULT # UINT GetACP( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetACP") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetACP(ql, address, params): return OEM_US @@ -41,7 +41,7 @@ def hook_GetACP(ql, address, params): # UINT CodePage, # LPCPINFO lpCPInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCPInfo") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCPInfo(ql, address, params): ret = 1 return ret @@ -53,8 +53,7 @@ def hook_GetCPInfo(ql, address, params): # LPSTR lpLCData, # int cchData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetLocaleInfoA", - specialtype={'LCID': 'DWORD', 'LCTYPE': 'DWORD'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LCID': 'DWORD', 'LCTYPE': 'DWORD'}) def hook_GetLocaleInfoA(ql, address, params): locale_value = params["Locale"] lctype_value = params["LCType"] @@ -77,7 +76,7 @@ def hook_GetLocaleInfoA(ql, address, params): # BOOL IsValidCodePage( # UINT CodePage # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsValidCodePage") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsValidCodePage(ql, address, params): return 1 @@ -100,7 +99,7 @@ def _LCMapString(ql, address, params): # LPWSTR lpDestStr, # int cchDest # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LCMapStringW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LCMapStringW(ql, address, params): return _LCMapString(ql, address, params) @@ -113,7 +112,7 @@ def hook_LCMapStringW(ql, address, params): # LPSTR lpDestStr, # int cchDest # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LCMapStringA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LCMapStringA(ql, address, params): return _LCMapString(ql, address, params) @@ -129,13 +128,13 @@ def hook_LCMapStringA(ql, address, params): # LPVOID lpReserved, # LPARAM sortHandle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LCMapStringEx") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LCMapStringEx(ql, address, params): return _LCMapString(ql, address, params) # LANGID GetUserDefaultUILanguage(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetUserDefaultUILanguage") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetUserDefaultUILanguage(ql, address, params): # TODO find better documentation # https://docs.microsoft.com/it-it/windows/win32/intl/language-identifiers @@ -143,7 +142,7 @@ def hook_GetUserDefaultUILanguage(ql, address, params): # LANGID GetSystemDefaultUILanguage(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSystemDefaultUILanguage") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSystemDefaultUILanguage(ql, address, params): # TODO find better documentation # https://docs.microsoft.com/it-it/windows/win32/intl/language-identifiers @@ -158,7 +157,7 @@ def hook_GetSystemDefaultUILanguage(ql, address, params): # PCNZCH lpString2, # int cchCount2 # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CompareStringA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CompareStringA(ql, address, params): st1 = params["lpString1"] st2 = params["lpString2"] diff --git a/qiling/os/windows/dlls/kernel32/winnt.py b/qiling/os/windows/dlls/kernel32/winnt.py index db2ce082c..0f4fc227b 100644 --- a/qiling/os/windows/dlls/kernel32/winnt.py +++ b/qiling/os/windows/dlls/kernel32/winnt.py @@ -12,7 +12,7 @@ # LONG volatile *Target, # LONG Value # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InterlockedExchange", defparams={"Target": POINTER, "Value": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"Target": POINTER, "Value": UINT}) def hook_InterlockedExchange(ql, address, params): old = int.from_bytes(ql.mem.read(params['Target'], ql.pointersize), byteorder='little') ql.mem.write(params['Target'], params['Value'].to_bytes(length=ql.pointersize, byteorder='little')) @@ -22,7 +22,7 @@ def hook_InterlockedExchange(ql, address, params): # LONG InterlockedIncrement( # LONG volatile *Target, # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InterlockedIncrement", defparams={"Target": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"Target": POINTER}) def hook_InterlockedIncrement(ql, address, params): val = int.from_bytes(ql.mem.read(params['Target'], 4), byteorder='little') val += 1 & (2 ** 32) # increment and overflow back to 0 if applicable @@ -33,7 +33,7 @@ def hook_InterlockedIncrement(ql, address, params): # LONG InterlockedDecrement( # LONG volatile *Target, # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InterlockedDecrement", defparams={"Target": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"Target": POINTER}) def hook_InterlockedDecrement(ql, address, params): val = int.from_bytes(ql.mem.read(params['Target'], 4), byteorder='little') val -= 1 @@ -48,8 +48,7 @@ def hook_InterlockedDecrement(ql, address, params): # DWORD TypeMask, # BYTE Condition # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="VerSetConditionMask", - defparams={"ConditionMask": ULONGLONG, "TypeMask": DWORD, "Condition": BYTE}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"ConditionMask": ULONGLONG, "TypeMask": DWORD, "Condition": BYTE}) def hook_VerSetConditionMask(ql, address, params): # ConditionMask = params["ConditionMask"] TypeMask = params["TypeMask"] diff --git a/qiling/os/windows/dlls/kernel32/wow64apiset.py b/qiling/os/windows/dlls/kernel32/wow64apiset.py index e9301eb24..a0368d192 100644 --- a/qiling/os/windows/dlls/kernel32/wow64apiset.py +++ b/qiling/os/windows/dlls/kernel32/wow64apiset.py @@ -19,7 +19,7 @@ # HANDLE hProcess, # PBOOL Wow64Process # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsWow64Process") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsWow64Process(ql, address, params): pointer = params["Wow64Process"] false = 0x0.to_bytes(length=1, byteorder='little') diff --git a/qiling/os/windows/dlls/mscoree.py b/qiling/os/windows/dlls/mscoree.py index 1ac8d3362..3b0b29037 100644 --- a/qiling/os/windows/dlls/mscoree.py +++ b/qiling/os/windows/dlls/mscoree.py @@ -14,14 +14,14 @@ # void STDMETHODCALLTYPE CorExitProcess ( # int exitCode # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CorExitProcess", specialtype={'int': 'DWORD'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'int': 'DWORD'}) def hook_CorExitProcess(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False # __int32 STDMETHODCALLTYPE _CorExeMain (); -@winsdkapi(cc=STDCALL, dllname='crypt32_dll', funcname="_CorExeMain") +@winsdkapi(cc=STDCALL, dllname='crypt32_dll') def hook__CorExeMain(ql, address, params): # TODO implement + check call type pass diff --git a/qiling/os/windows/dlls/msi.py b/qiling/os/windows/dlls/msi.py index ec1d81b7b..b270a6258 100644 --- a/qiling/os/windows/dlls/msi.py +++ b/qiling/os/windows/dlls/msi.py @@ -19,6 +19,6 @@ # INSTALLSTATE *piInstalled, # INSTALLSTATE *piAction # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MsiGetComponentStateA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_MsiGetComponentStateA(ql, address, params): return 6 # INVALID_HANDLE diff --git a/qiling/os/windows/dlls/ntdll.py b/qiling/os/windows/dlls/ntdll.py index 51480b0f6..6514cba6a 100644 --- a/qiling/os/windows/dlls/ntdll.py +++ b/qiling/os/windows/dlls/ntdll.py @@ -20,7 +20,7 @@ # const void *src, # size_t count # ); -@winsdkapi(cc=CDECL, dllname=dllname, funcname="memcpy", defparams={"dest": POINTER, "src": POINTER, "count": UINT}) +@winsdkapi(cc=CDECL, dllname=dllname, defparams={"dest": POINTER, "src": POINTER, "count": UINT}) def hook_memcpy(ql, address, params): try: data = bytes(ql.mem.read(params['src'], params['count'])) @@ -69,7 +69,7 @@ def _QueryInformationProcess(ql, address, params): # _In_ ULONG ProcessInformationLength, # _Out_opt_ PULONG ReturnLength # ); -@winsdkapi(cc=CDECL, dllname=dllname, funcname="ZwQueryInformationProcess", +@winsdkapi(cc=CDECL, dllname=dllname, defparams={"ProcessHandle": HANDLE, "ProcessInformationClass": INT, "ProcessInformation": POINTER, "ProcessInformationLength": UINT, "ReturnLength": POINTER}) def hook_ZwQueryInformationProcess(ql, address, params): @@ -85,7 +85,7 @@ def hook_ZwQueryInformationProcess(ql, address, params): # IN ULONG ProcessInformationLength, # OUT PULONG ReturnLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="NtQueryInformationProcess") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_NtQueryInformationProcess(ql, address, params): # TODO have no idea if is cdecl or stdcall @@ -98,8 +98,8 @@ def hook_NtQueryInformationProcess(ql, address, params): # ObjectAttributes: POBJECT_ATTRIBUTES, # Flags: ULONG # ) -> NTSTATUS -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ZwCreateDebugObject", - defparams={"DebugObjectHandle": HANDLE, "DesiredAccess": INT, "ObjectAttributes": POINTER, "Flags": ULONGLONG}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"DebugObjectHandle": HANDLE, "DesiredAccess": INT, + "ObjectAttributes": POINTER, "Flags": ULONGLONG}) def hook_ZwCreateDebugObject(ql, address, params): # FIXME: find documentation, almost none was found online, and create the correct object handle = Handle(id=params["DebugObjectHandle"]) @@ -114,7 +114,7 @@ def hook_ZwCreateDebugObject(ql, address, params): # ULONG ObjectInformationLength, # PULONG ReturnLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="NtQueryObject") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ZwQueryObject(ql, address, params): infoClass = params["ObjectInformationClass"] dest = params["ObjectInformation"] @@ -150,7 +150,7 @@ def hook_ZwQueryObject(ql, address, params): # NTAPI # NtYieldExecution( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="NtYieldExecution", defparams={}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={}) def hook_ZwYieldExecution(ql, address, params): # FIXME: offer timeslice of this thread return STATUS_NO_YIELD_PERFORMED @@ -161,7 +161,7 @@ def hook_ZwYieldExecution(ql, address, params): # IN PANSI_STRING FunctionName OPTIONAL, # IN WORD Oridinal OPTIONAL, # OUT PVOID *FunctionAddress ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LdrGetProcedureAddress", defparams={"ModuleHandle": POINTER, +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"ModuleHandle": POINTER, "FunctionName": STRING, "Ordinal": UINT, "FunctionAddress": POINTER}) def hook_LdrGetProcedureAddress(ql, address, params): if params['FunctionName']: @@ -188,7 +188,7 @@ def hook_LdrGetProcedureAddress(ql, address, params): # ULONG Flags, # SIZE_T Size # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RtlAllocateHeap", defparams={"HeapHandle": POINTER, +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"HeapHandle": POINTER, "Flags": UINT,"Size": SIZE_T}) def hook_RtlAllocateHeap(ql, address, params): ret = ql.heap.alloc(params["Size"]) @@ -196,7 +196,7 @@ def hook_RtlAllocateHeap(ql, address, params): # wchar_t* wcsstr( const wchar_t* dest, const wchar_t* src ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="wcsstr", defparams={"dest": POINTER, "src": WSTRING}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"dest": POINTER, "src": WSTRING}) def hook_wcsstr(ql, address, params): dest = params["dest"] value = ql.os.read_wstring(dest) @@ -209,7 +209,7 @@ def hook_wcsstr(ql, address, params): # HANDLE CsrGetProcessId(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CsrGetProcessId", defparams={}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={}) def hook_CsrGetProcessId(ql, address, params): pid = ql.os.profile["PROCESSES"].getint("csrss.exe", fallback=12345) return pid diff --git a/qiling/os/windows/dlls/ntoskrnl.py b/qiling/os/windows/dlls/ntoskrnl.py index 67faddf8e..a106841a0 100644 --- a/qiling/os/windows/dlls/ntoskrnl.py +++ b/qiling/os/windows/dlls/ntoskrnl.py @@ -18,7 +18,7 @@ # NTSYSAPI NTSTATUS RtlGetVersion( # PRTL_OSVERSIONINFOW lpVersionInformation # ); -@winsdkapi(cc=CDECL, dllname=dllname, funcname="RtlGetVersion", defparams={"lpVersionInformation": POINTER}) +@winsdkapi(cc=CDECL, dllname=dllname, defparams={"lpVersionInformation": POINTER}) def hook_RtlGetVersion(ql, address, params): pointer = params["lpVersionInformation"] os = OsVersionInfoW(ql) @@ -36,7 +36,7 @@ def hook_RtlGetVersion(ql, address, params): # PVOID ThreadInformation, # ULONG ThreadInformationLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ZwSetInformationThread", defparams={"ThreadHandle": HANDLE, +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"ThreadHandle": HANDLE, "ThreadInformationClass": INT, "ThreadInformation": POINTER, "ThreadInformationLength": UINT}) def hook_ZwSetInformationThread(ql, address, params): thread = params["ThreadHandle"] @@ -62,7 +62,7 @@ def hook_ZwSetInformationThread(ql, address, params): # NTSYSAPI NTSTATUS ZwClose( # HANDLE Handle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ZwClose", defparams={"Handle": HANDLE}) +@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"Handle": HANDLE}) def hook_ZwClose(ql, address, params): value = params["Handle"] handle = ql.os.handle_manager.get(value) diff --git a/qiling/os/windows/dlls/ole32.py b/qiling/os/windows/dlls/ole32.py index e4a38996c..b2dc822e1 100644 --- a/qiling/os/windows/dlls/ole32.py +++ b/qiling/os/windows/dlls/ole32.py @@ -18,7 +18,7 @@ # HRESULT OleInitialize( # IN LPVOID pvReserved # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OleInitialize") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_OleInitialize(ql, address, params): # I don't think we need to do anything, we hook every call for the COM library and manage them locally return S_OK @@ -28,7 +28,7 @@ def hook_OleInitialize(ql, address, params): # LPMESSAGEFILTER lpMessageFilter, # LPMESSAGEFILTER *lplpMessageFilter # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CoRegisterMessageFilter") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CoRegisterMessageFilter(ql, address, params): return S_OK @@ -37,7 +37,7 @@ def hook_CoRegisterMessageFilter(ql, address, params): # LPVOID pvReserved, # DWORD dwCoInit # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CoInitializeEx") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CoInitializeEx(ql, address, params): return S_OK @@ -52,7 +52,7 @@ def hook_CoInitializeEx(ql, address, params): # DWORD dwCapabilities, # void *pReserved3 # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CoInitializeSecurity") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CoInitializeSecurity(ql, address, params): return S_OK @@ -64,7 +64,7 @@ def hook_CoInitializeSecurity(ql, address, params): # REFIID riid, # LPVOID *ppv # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CoCreateInstance") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CoCreateInstance(ql, address, params): # FIXME: probably this needs implementation return S_OK \ No newline at end of file diff --git a/qiling/os/windows/dlls/oleaut32.py b/qiling/os/windows/dlls/oleaut32.py index 220218031..ad19df644 100644 --- a/qiling/os/windows/dlls/oleaut32.py +++ b/qiling/os/windows/dlls/oleaut32.py @@ -21,7 +21,7 @@ # const OLECHAR *strIn, # UINT ui # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SysAllocStringLen") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SysAllocStringLen(ql, address, params): addr = ql.os.heap.alloc(params["ui"] + 1) if params["strIn"] != 0: @@ -32,7 +32,7 @@ def hook_SysAllocStringLen(ql, address, params): # void SysFreeString( # BSTR bstrString # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SysFreeString") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SysFreeString(ql, address, params): addr = params["strIn"] if addr != 0: @@ -46,7 +46,7 @@ def hook_SysFreeString(ql, address, params): # UINT SysStringLen( # BSTR pbstr # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SysStringLen") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SysStringLen(ql, address, params): string = params["pbstr"] if string != 0: @@ -59,7 +59,7 @@ def hook_SysStringLen(ql, address, params): # const OLECHAR *psz, # unsigned int len # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SysReAllocStringLen") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SysReAllocStringLen(ql, address, params): content = params["psz"] size = params["len"] @@ -72,7 +72,7 @@ def hook_SysReAllocStringLen(ql, address, params): # BSTR SysAllocString( # const OLECHAR *psz # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SysAllocString") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SysAllocString(ql, address, params): string = params["psz"] if string == 0: diff --git a/qiling/os/windows/dlls/shell32.py b/qiling/os/windows/dlls/shell32.py index 9c97df0bb..f32064cb4 100644 --- a/qiling/os/windows/dlls/shell32.py +++ b/qiling/os/windows/dlls/shell32.py @@ -24,7 +24,7 @@ # UINT cbFileInfo, # UINT uFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SHGetFileInfoA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SHGetFileInfoA(ql, address, params): return hook_SHGetFileInfoW.__wrapped__(ql, address, params) @@ -36,7 +36,7 @@ def hook_SHGetFileInfoA(ql, address, params): # UINT cbFileInfo, # UINT uFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SHGetFileInfoW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SHGetFileInfoW(ql, address, params): flags = params["uFlags"] if flags == SHGFI_LARGEICON: @@ -69,7 +69,7 @@ def _ShellExecute(ql, obj: ShellExecuteInfoA): # BOOL ShellExecuteExW( # SHELLEXECUTEINFOA *pExecInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ShellExecuteExW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ShellExecuteExW(ql, address, params): pointer = params["pExecInfo"] @@ -93,7 +93,7 @@ def hook_ShellExecuteExW(ql, address, params): # LPCWSTR lpDirectory, # INT nShowCmd # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ShellExecuteW", specialtype={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCWSTR': 'POINTER'}) def hook_ShellExecuteW(ql, address, params): shellInfo = ShellExecuteInfoA(ql, hwnd=params["hwnd"], lpVerb=params["lpOperation"], lpFile=params["lpFile"], lpParams=params["lpParameters"], lpDir=params["lpDirectory"], show=params["nShowCmd"]) @@ -107,7 +107,7 @@ def hook_ShellExecuteW(ql, address, params): # int csidl, # BOOL fCreate # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SHGetSpecialFolderPathW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SHGetSpecialFolderPathW(ql, address, params): directory_id = params["csidl"] dst = params["pszPath"] diff --git a/qiling/os/windows/dlls/shlwapi.py b/qiling/os/windows/dlls/shlwapi.py index 7d2e43c6d..552645b31 100644 --- a/qiling/os/windows/dlls/shlwapi.py +++ b/qiling/os/windows/dlls/shlwapi.py @@ -15,7 +15,7 @@ # LPCSTR PathFindExtensionA( # LPWSTR pszPath # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="PathFindExtensionA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_PathFindExtensionA(ql, address, params): # Must return the address of the dot pointer = params["pszPath"] @@ -29,7 +29,7 @@ def hook_PathFindExtensionA(ql, address, params): # LPCSTR PathFindExtensionW( # LPCSTR pszPath # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="PathFindExtensionW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_PathFindExtensionW(ql, address, params): # Must return the address of the dot pointer = params["pszPath"] @@ -43,7 +43,7 @@ def hook_PathFindExtensionW(ql, address, params): # LPCSTR PathFindFileNameA( # LPCSTR pszPath # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="PathFindFileNameA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_PathFindFileNameA(ql, address, params): # Must return the address of the start of the filename pointer = params["pszPath"] @@ -57,7 +57,7 @@ def hook_PathFindFileNameA(ql, address, params): # LPCSTR PathFindFileNameW( # LPWSTR pszPath # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="PathFindFileNameW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_PathFindFileNameW(ql, address, params): # Must return the address of the start of the filename pointer = params["pszPath"] @@ -72,7 +72,7 @@ def hook_PathFindFileNameW(ql, address, params): # PCWSTR psz1, # PCWSTR psz2 # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="StrCmpW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_StrCmpW(ql, address, params): # Copy String2 into String str1 = params["psz1"] diff --git a/qiling/os/windows/dlls/user32.py b/qiling/os/windows/dlls/user32.py index d0127747f..d3669163a 100644 --- a/qiling/os/windows/dlls/user32.py +++ b/qiling/os/windows/dlls/user32.py @@ -20,7 +20,7 @@ # DLGPROC lpDialogFunc, # LPARAM dwInitParam # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DialogBoxParamA", specialtype={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCSTR': 'POINTER'}) def hook_DialogBoxParamA(ql, address, params): ret = 0 return ret @@ -32,7 +32,7 @@ def hook_DialogBoxParamA(ql, address, params): # LPSTR lpString, # int cchMax # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDlgItemTextA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetDlgItemTextA(ql, address, params): ret = 0 hDlg = params["hDlg"] @@ -52,7 +52,7 @@ def hook_GetDlgItemTextA(ql, address, params): # HWND hDlg, # INT_PTR nResult # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="EndDialog") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_EndDialog(ql, address, params): ret = 1 return ret @@ -60,7 +60,7 @@ def hook_EndDialog(ql, address, params): # HWND GetDesktopWindow(( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDesktopWindow") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetDesktopWindow(ql, address, params): pass @@ -68,13 +68,13 @@ def hook_GetDesktopWindow(ql, address, params): # BOOL OpenClipboard( # HWND hWndNewOwner # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="OpenClipboard") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_OpenClipboard(ql, address, params): return ql.os.clipboard.open(params['hWndNewOwner']) # BOOL CloseClipboard(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CloseClipboard") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CloseClipboard(ql, address, params): return ql.os.clipboard.close() @@ -83,7 +83,7 @@ def hook_CloseClipboard(ql, address, params): # UINT uFormat, # HANDLE hMem # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetClipboardData") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_SetClipboardData(ql, address, params): try: data = bytes(params['hMem'], 'ascii', 'ignore') @@ -95,7 +95,7 @@ def hook_SetClipboardData(ql, address, params): # HANDLE GetClipboardData( # UINT uFormat # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetClipboardData") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetClipboardData(ql, address, params): data = ql.os.clipboard.get_data(params['uFormat']) if data: @@ -110,7 +110,7 @@ def hook_GetClipboardData(ql, address, params): # BOOL IsClipboardFormatAvailable( # UINT format # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="IsClipboardFormatAvailable") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_IsClipboardFormatAvailable(ql, address, params): rtn = ql.os.clipboard.format_available(params['uFormat']) return rtn @@ -120,7 +120,7 @@ def hook_IsClipboardFormatAvailable(ql, address, params): # UINT uCode, # UINT uMapType # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MapVirtualKeyW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_MapVirtualKeyW(ql, address, params): map_value = params["uMapType"] code_value = params["uCode"] @@ -140,7 +140,7 @@ def hook_MapVirtualKeyW(ql, address, params): # SHORT GetKeyState( # int nVirtKey # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetKeyState", specialtype={'int': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'int': 'UINT'}) def hook_GetKeyState(ql, address, params): let = chr(params["nVirtKey"]) ql.dprint(0, let) @@ -152,7 +152,7 @@ def hook_GetKeyState(ql, address, params): # UINT RegisterWindowMessageA( # LPCSTR lpString # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegisterWindowMessageA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegisterWindowMessageA(ql, address, params): return hook_RegisterWindowMessageW.__wrapped__(ql, address, params) @@ -160,14 +160,14 @@ def hook_RegisterWindowMessageA(ql, address, params): # UINT RegisterWindowMessageW( # LPCWSTR lpString # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="RegisterWindowMessageW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_RegisterWindowMessageW(ql, address, params): # maybe some samples really use this and we need to have a real implementation return 0xD10C # HWND GetActiveWindow(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetActiveWindow") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetActiveWindow(ql, address, params): # maybe some samples really use this and we need to have a real implementation return 0xD10C @@ -176,7 +176,7 @@ def hook_GetActiveWindow(ql, address, params): # HWND GetLastActivePopup( # HWND hWnd # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetLastActivePopup") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetLastActivePopup(ql, address, params): hwnd = params["hWnd"] return hwnd @@ -185,7 +185,7 @@ def hook_GetLastActivePopup(ql, address, params): # BOOL GetPhysicalCursorPos( # LPPOINT lpPoint # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetPhysicalCursorPos") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetPhysicalCursorPos(ql, address, params): return 1 @@ -193,7 +193,7 @@ def hook_GetPhysicalCursorPos(ql, address, params): # int GetSystemMetrics( # int nIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSystemMetrics") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSystemMetrics(ql, address, params): info = params["nIndex"] if info == SM_CXICON or info == SM_CYICON: @@ -211,7 +211,7 @@ def hook_GetSystemMetrics(ql, address, params): # HDC GetDC( # HWND hWnd # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDC") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetDC(ql, address, params): handler = params["hWnd"] # Maybe we should really emulate the handling of screens and windows. Is going to be a pain @@ -222,7 +222,7 @@ def hook_GetDC(ql, address, params): # HDC hdc, # int index # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDeviceCaps") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetDeviceCaps(ql, address, params): # Maybe we should really emulate the handling of screens and windows. Is going to be a pain return 1 @@ -232,7 +232,7 @@ def hook_GetDeviceCaps(ql, address, params): # HWND hWnd, # HDC hDC # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetDeviceCaps", specialtype={'HWND': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HWND': 'POINTER'}) def hook_ReleaseDC(ql, address, params): return 1 @@ -240,7 +240,7 @@ def hook_ReleaseDC(ql, address, params): # DWORD GetSysColor( # int nIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSysColor") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSysColor(ql, address, params): info = params["nIndex"] return 0 @@ -249,7 +249,7 @@ def hook_GetSysColor(ql, address, params): # HBRUSH GetSysColorBrush( # int nIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSysColorBrush") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetSysColorBrush(ql, address, params): info = params["nIndex"] return 0xd10c @@ -259,7 +259,7 @@ def hook_GetSysColorBrush(ql, address, params): # HINSTANCE hInstance, # LPCSTR lpCursorName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetSysColorBrush", specialtype={'HINSTANCE': 'POINTER', 'LPCSTR': 'INT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HINSTANCE': 'POINTER', 'LPCSTR': 'INT'}) def hook_LoadCursorA(ql, address, params): return 0xd10c @@ -267,7 +267,7 @@ def hook_LoadCursorA(ql, address, params): # HCURSOR LoadCursorFromFileA( # LPCSTR lpFileName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadCursorFromFileA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LoadCursorFromFileA(ql, address, params): return hook_LoadCursorFromFileW.__wrapped__(ql, address, params) @@ -275,7 +275,7 @@ def hook_LoadCursorFromFileA(ql, address, params): # HCURSOR LoadCursorFromFileW( # LPCSTR lpFileName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadCursorFromFileW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_LoadCursorFromFileW(ql, address, params): handle = Handle() ql.os.handle_manager.append(handle) @@ -283,7 +283,7 @@ def hook_LoadCursorFromFileW(ql, address, params): # UINT GetOEMCP(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetOEMCP") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetOEMCP(ql, address, params): return OEM_US @@ -294,7 +294,7 @@ def hook_GetOEMCP(ql, address, params): # LPSTR lpBuffer, # int cchBufferMax # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetOEMCP", specialtype={'HINSTANCE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HINSTANCE': 'POINTER'}) def hook_LoadStringW(ql, address, params): dst = params["lpBuffer"] max_len = params["cchBufferMax"] @@ -315,7 +315,7 @@ def hook_LoadStringW(ql, address, params): # LPSTR lpBuffer, # int cchBufferMax # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadStringA", specialtype={'HINSTANCE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HINSTANCE': 'POINTER'}) def hook_LoadStringA(ql, address, params): dst = params["lpBuffer"] max_len = params["cchBufferMax"] @@ -333,7 +333,7 @@ def hook_LoadStringA(ql, address, params): # BOOL MessageBeep( # UINT uType # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MessageBeep") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_MessageBeep(ql, address, params): return 1 @@ -344,7 +344,7 @@ def hook_MessageBeep(ql, address, params): # HINSTANCE hmod, # DWORD dwThreadId # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="SetWindowsHookExA", specialtype={'HINSTANCE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HINSTANCE': 'POINTER'}) def hook_SetWindowsHookExA(ql, address, params): # Should hook a procedure to a dll hook = params["lpfn"] @@ -354,7 +354,7 @@ def hook_SetWindowsHookExA(ql, address, params): # BOOL UnhookWindowsHookEx( # HHOOK hhk # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="UnhookWindowsHookEx") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_UnhookWindowsHookEx(ql, address, params): return 1 @@ -363,7 +363,7 @@ def hook_UnhookWindowsHookEx(ql, address, params): # HWND hWnd, # int nCmdShow # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="ShowWindow", specialtype={'HWND': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HWND': 'POINTER'}) def hook_ShowWindow(ql, address, params): # return value depends on sample goal (evasion on just display error) return 0x1 @@ -373,7 +373,7 @@ def hook_ShowWindow(ql, address, params): # HINSTANCE hInstance, # LPCSTR lpIconName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadIconA", specialtype={'HINSTANCE': 'POINTER', 'LPCSTR': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HINSTANCE': 'POINTER', 'LPCSTR': 'UINT'}) def hook_LoadIconA(ql, address, params): return hook_LoadIconW(ql, address, params) @@ -382,7 +382,7 @@ def hook_LoadIconA(ql, address, params): # HINSTANCE hInstance, # LPCWSTR lpIconName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadIconW", specialtype={'HINSTANCE': 'POINTER', 'LPCWSTR': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HINSTANCE': 'POINTER', 'LPCWSTR': 'UINT'}) def hook_LoadIconW(ql, address, params): handle = Handle() ql.os.handle_manager.append(handle) @@ -392,7 +392,7 @@ def hook_LoadIconW(ql, address, params): # BOOL IsWindow( # HWND hWnd # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadIconW", specialtype={'HWND': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HWND': 'POINTER'}) def hook_IsWindow(ql, address, params): # return value depends on sample goal (evasion on just display error) return 0x1 @@ -404,7 +404,7 @@ def hook_IsWindow(ql, address, params): # WPARAM wParam, # LPARAM lParam # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="LoadIconW", specialtype={'HWND': 'POINTER', 'LPARAM': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HWND': 'POINTER', 'LPARAM': 'UINT'}) def hook_SendMessageA(ql, address, params): # TODO don't know how to get right return value return 0xD10C @@ -416,7 +416,7 @@ def hook_SendMessageA(ql, address, params): # WPARAM wParam, # LPARAM lParam # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="DefWindowProcA", specialtype={'HWND': 'POINTER', 'LPARAM': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HWND': 'POINTER', 'LPARAM': 'UINT'}) def hook_DefWindowProcA(ql, address, params): # TODO don't know how to get right return value return 0xD10C @@ -425,7 +425,7 @@ def hook_DefWindowProcA(ql, address, params): # LPWSTR CharNextW( # LPCWSTR lpsz # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CharNextW", specialtype={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCWSTR': 'POINTER'}) def hook_CharNextW(ql, address, params): # Return next char if is different from \x00 point = params["lpsz"][0] @@ -440,7 +440,7 @@ def hook_CharNextW(ql, address, params): # LPWSTR CharNextA( # LPCSTR lpsz # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CharNextA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CharNextA(ql, address, params): # Return next char if is different from \x00 point = params["lpsz"][0] @@ -456,7 +456,7 @@ def hook_CharNextA(ql, address, params): # LPCWSTR lpszStart, # LPCWSTR lpszCurrent # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CharPrevW", specialtype={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCWSTR': 'POINTER'}) def hook_CharPrevW(ql, address, params): # Return next char if is different from \x00 current = params["lpszCurrent"] @@ -475,7 +475,7 @@ def hook_CharPrevW(ql, address, params): # LPCSTR lpszStart, # LPCSTR lpszCurrent # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CharPrevA", specialtype={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCSTR': 'POINTER'}) def hook_CharPrevA(ql, address, params): # Return next char if is different from \x00 current = params["lpszCurrent"] @@ -495,7 +495,7 @@ def hook_CharPrevA(ql, address, params): # LPCWSTR , # ... # ); -@winsdkapi(cc=CDECL, dllname=dllname, funcname="wsprintfW", param_num=3) +@winsdkapi(cc=CDECL, dllname=dllname, param_num=3) def hook_wsprintfW(ql, address, params): dst, p_format = ql.os.get_function_param(2) @@ -534,7 +534,7 @@ def hook_sprintf(ql, address, params): # HWND GetForegroundWindow(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetForegroundWindow") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetForegroundWindow(ql, address, params): return 0xF02E620D # Value so we can recognize inside dumps @@ -547,7 +547,7 @@ def hook_GetForegroundWindow(ql, address, params): # int nHeight, # BOOL bRepaint # ) -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MoveWindow") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_MoveWindow(ql, address, params): return 1 @@ -555,7 +555,7 @@ def hook_MoveWindow(ql, address, params): # int GetKeyboardType( # int nTypeFlag # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetKeyboardType", specialtype={'int': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'int': 'UINT'}) def hook_GetKeyboardType(ql, address, params): """ See https://salsa.debian.org/wine-team/wine/-/blob/master/dlls/user32/input.c @@ -576,7 +576,7 @@ def hook_GetKeyboardType(ql, address, params): # LPCWSTR lpCaption, # UINT uType # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MessageBoxW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_MessageBoxW(ql, address, params): # We always return a positive result type_box = params["uType"] @@ -595,7 +595,7 @@ def hook_MessageBoxW(ql, address, params): # LPCWSTR lpCaption, # UINT uType # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="MessageBoxA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_MessageBoxA(ql, address, params): return hook_MessageBoxW.__wrapped__(ql, address, params) @@ -603,7 +603,7 @@ def hook_MessageBoxA(ql, address, params): # BOOL GetCursorPos( # LPPOINT lpPoint # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetCursorPos") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetCursorPos(ql, address, params): # TODO maybe we can add it to the profile too p = Point(ql, 50, 50) @@ -615,7 +615,7 @@ def hook_GetCursorPos(ql, address, params): # HANDLE CreateActCtxW( # PCACTCTXW pActCtx # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="CreateActCtxW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CreateActCtxW(ql, address, params): # TODo maybe is necessary to really create this addr = params["pActCtx"] @@ -628,7 +628,7 @@ def hook_CreateActCtxW(ql, address, params): # HWND hWnd, # LPDWORD lpdwProcessId # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetWindowThreadProcessId") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetWindowThreadProcessId(ql, address, params): target = params["hWnd"] if target == ql.os.profile.getint("KERNEL", "pid") or target == ql.os.profile.getint("KERNEL", "shell_pid"): @@ -642,6 +642,6 @@ def hook_GetWindowThreadProcessId(ql, address, params): # HWND GetShellWindow(); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="GetShellWindow") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetShellWindow(ql, address, params): return ql.os.profile.getint("KERNEL", "shell_pid") diff --git a/qiling/os/windows/dlls/wininet.py b/qiling/os/windows/dlls/wininet.py index 629cddb1b..08eb8196d 100644 --- a/qiling/os/windows/dlls/wininet.py +++ b/qiling/os/windows/dlls/wininet.py @@ -17,7 +17,7 @@ # LPCSTR lpszProxyBypass, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetOpenA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetOpenA(ql, address, params): pass @@ -29,7 +29,7 @@ def hook_InternetOpenA(ql, address, params): # LPCWSTR lpszProxyBypass, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetOpenW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetOpenW(ql, address, params): pass @@ -42,7 +42,7 @@ def hook_InternetOpenW(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetOpenUrlA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetOpenUrlA(ql, address, params): pass @@ -55,7 +55,7 @@ def hook_InternetOpenUrlA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetOpenUrlW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetOpenUrlW(ql, address, params): pass @@ -63,7 +63,7 @@ def hook_InternetOpenUrlW(ql, address, params): # BOOLAPI InternetCloseHandle( # HINTERNET hInternet # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetCloseHandle") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetCloseHandle(ql, address, params): ret = 1 return ret @@ -79,7 +79,7 @@ def hook_InternetCloseHandle(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetConnectA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetConnectA(ql, address, params): pass @@ -94,7 +94,7 @@ def hook_InternetConnectA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetConnectW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetConnectW(ql, address, params): pass @@ -104,7 +104,7 @@ def hook_InternetConnectW(ql, address, params): # DWORD dwFlags, # DWORD dwReserved # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetCheckConnectionA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetCheckConnectionA(ql, address, params): pass @@ -119,7 +119,7 @@ def hook_InternetCheckConnectionA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HttpOpenRequestA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HttpOpenRequestA(ql, address, params): pass @@ -131,7 +131,7 @@ def hook_HttpOpenRequestA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HttpSendRequestExA", specialtypeEx={'lpBuffersIn': 'POINTER', 'lpBuffersOut': 'STRING'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtypeEx={'lpBuffersIn': 'POINTER', 'lpBuffersOut': 'STRING'}) def hook_HttpSendRequestExA(ql, address, params): pass @@ -146,7 +146,7 @@ def hook_HttpSendRequestExA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HttpOpenRequestW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HttpOpenRequestW(ql, address, params): pass @@ -157,7 +157,7 @@ def hook_HttpOpenRequestW(ql, address, params): # LPVOID lpBuffer, # DWORD dwBufferLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetSetOptionA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetSetOptionA(ql, address, params): return 1 @@ -168,7 +168,7 @@ def hook_InternetSetOptionA(ql, address, params): # LPVOID lpBuffer, # DWORD dwBufferLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetSetOptionW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetSetOptionW(ql, address, params): return 1 @@ -180,7 +180,7 @@ def hook_InternetSetOptionW(ql, address, params): # LPVOID lpOptional, # DWORD dwOptionalLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HttpSendRequestA") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HttpSendRequestA(ql, address, params): return 1 @@ -192,7 +192,7 @@ def hook_HttpSendRequestA(ql, address, params): # LPVOID lpOptional, # DWORD dwOptionalLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HttpSendRequestW") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_HttpSendRequestW(ql, address, params): return 1 @@ -204,7 +204,7 @@ def hook_HttpSendRequestW(ql, address, params): # DWORD dwFlags, # LPVOID *lppvData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetErrorDlg", specialtype={'HWND': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HWND': 'POINTER'}) def hook_InternetErrorDlg(ql, address, params): pass @@ -215,7 +215,7 @@ def hook_InternetErrorDlg(ql, address, params): # DWORD dwNumberOfBytesToRead, # LPDWORD lpdwNumberOfBytesRead # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetReadFile") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetReadFile(ql, address, params): return 1 @@ -226,7 +226,7 @@ def hook_InternetReadFile(ql, address, params): # DWORD dwNumberOfBytesToWrite, # LPDWORD lpdwNumberOfBytesWritten # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="InternetWriteFile") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_InternetWriteFile(ql, address, params): return 1 @@ -237,6 +237,6 @@ def hook_InternetWriteFile(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="HttpEndRequestA", specialtype={'LPINTERNET_BUFFERSA': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPINTERNET_BUFFERSA': 'POINTER'}) def hook_HttpEndRequestA(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/wsock32.py b/qiling/os/windows/dlls/wsock32.py index 191ad5baa..88a0ed023 100644 --- a/qiling/os/windows/dlls/wsock32.py +++ b/qiling/os/windows/dlls/wsock32.py @@ -19,7 +19,7 @@ # WORD wVersionRequired, # LPWSADATA lpWSAData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WSAStartup") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_WSAStartup(ql, address, params): return 0 @@ -32,7 +32,7 @@ def hook_WSAStartup(ql, address, params): # GROUP g, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="WSASocketA", specialtype={'DWORD': 'INT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'INT'}) def hook_WSASocketA(ql, address, params): return 0 @@ -42,7 +42,7 @@ def hook_WSASocketA(ql, address, params): # const sockaddr *name, # int namelen # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="connect") +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_connect(ql, address, params): sin_family = ql.mem.read(params["name"], 1)[0] sin_port = int.from_bytes(ql.mem.read(params["name"] + 2, 2), byteorder="big") @@ -69,7 +69,7 @@ def hook_connect(ql, address, params): # hostent * gethostbyname( # const char *name # ); -@winsdkapi(cc=STDCALL, dllname=dllname, funcname="gethostbyname", specialtype={'char': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'char': 'POINTER'}) def hook_gethostbyname(ql, address, params): ip_str = ql.os.profile.getint("NETWORK", "dns_response_ip") ip = bytes([int(octet) for octet in ip_str.split('.')[::-1]]) diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 956705117..3cdcff020 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -54,7 +54,7 @@ def replacetype(type, specialtype=None): return type # x86/x8664 PE should share Windows APIs -def winsdkapi(cc, param_num=None, dllname=None, funcname=None, specialtype=None, specialtypeEx=None, defparams=None): +def winsdkapi(cc, param_num=None, dllname=None, specialtype=None, specialtypeEx=None, defparams=None): """ @cc: windows api calling convention, only x86 needs this, x64 is always fastcall @param_num: the number of function params, used by variadic functions, e.g printf @@ -68,6 +68,7 @@ def winsdkapi(cc, param_num=None, dllname=None, funcname=None, specialtype=None, def decorator(func): @wraps(func) def wrapper(*args, **kwargs): + funcname = func.__name__[5:] params = {} paramlist = None ql = args[0] From a555f4019b5a863e46d4f2431d7a8e78d0907190 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Tue, 23 Jun 2020 23:20:24 +0800 Subject: [PATCH 10/86] add some dllname --- qiling/os/windows/dlls/advapi32.py | 1 + qiling/os/windows/dlls/crypt32.py | 1 + qiling/os/windows/dlls/mscoree.py | 1 + qiling/os/windows/dlls/msi.py | 1 + 4 files changed, 4 insertions(+) diff --git a/qiling/os/windows/dlls/advapi32.py b/qiling/os/windows/dlls/advapi32.py index c56e8c18f..0ae671966 100644 --- a/qiling/os/windows/dlls/advapi32.py +++ b/qiling/os/windows/dlls/advapi32.py @@ -10,6 +10,7 @@ from qiling.os.windows.const import * from qiling.os.windows.structs import * +dllname = 'advapi32_dll' def _RegOpenKey(ql, address, params): hKey = params["hKey"] diff --git a/qiling/os/windows/dlls/crypt32.py b/qiling/os/windows/dlls/crypt32.py index e9318eaae..ccc82442a 100644 --- a/qiling/os/windows/dlls/crypt32.py +++ b/qiling/os/windows/dlls/crypt32.py @@ -10,6 +10,7 @@ from qiling.os.windows.handle import * from qiling.os.windows.const import * +dllname = 'crypt32_dll' # BOOL CryptStringToBinaryA( # LPCSTR pszString, diff --git a/qiling/os/windows/dlls/mscoree.py b/qiling/os/windows/dlls/mscoree.py index 3b0b29037..64a03eb3a 100644 --- a/qiling/os/windows/dlls/mscoree.py +++ b/qiling/os/windows/dlls/mscoree.py @@ -10,6 +10,7 @@ from qiling.os.windows.handle import * from qiling.os.windows.const import * +dllname = 'mscoree_dll' # void STDMETHODCALLTYPE CorExitProcess ( # int exitCode diff --git a/qiling/os/windows/dlls/msi.py b/qiling/os/windows/dlls/msi.py index b270a6258..20b90c040 100644 --- a/qiling/os/windows/dlls/msi.py +++ b/qiling/os/windows/dlls/msi.py @@ -12,6 +12,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'msi_dll' # UINT MsiGetComponentStateA( # MSIHANDLE hInstall, From c776b6df94b893bf9af6ecee3b7f4ca443f220d7 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Tue, 23 Jun 2020 23:29:20 +0800 Subject: [PATCH 11/86] add some dllname --- qiling/os/windows/dlls/kernel32/ioapiset.py | 1 + 1 file changed, 1 insertion(+) diff --git a/qiling/os/windows/dlls/kernel32/ioapiset.py b/qiling/os/windows/dlls/kernel32/ioapiset.py index ba66a46f6..f88029123 100644 --- a/qiling/os/windows/dlls/kernel32/ioapiset.py +++ b/qiling/os/windows/dlls/kernel32/ioapiset.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL DeviceIoControl( # HANDLE hDevice, From 81af871bc2db6e6c78063e720e112f5f71e0c115 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Tue, 23 Jun 2020 23:34:58 +0800 Subject: [PATCH 12/86] add some dllname --- qiling/os/windows/dlls/kernel32/libloaderapi.py | 2 +- tests/test_pe.py | 4 +--- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/qiling/os/windows/dlls/kernel32/libloaderapi.py b/qiling/os/windows/dlls/kernel32/libloaderapi.py index 487da1aa4..603db6a2b 100644 --- a/qiling/os/windows/dlls/kernel32/libloaderapi.py +++ b/qiling/os/windows/dlls/kernel32/libloaderapi.py @@ -203,7 +203,7 @@ def hook_LoadLibraryExW(ql, address, params): # HMODULE hModule, # HRSRC hResInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllnam, specialtype={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HMODULE': 'POINTER'}) def hook_SizeofResource(ql, address, params): # Return size of resource # TODO set a valid value. More tests have to be made to find it. diff --git a/tests/test_pe.py b/tests/test_pe.py index 10a1e5918..b7a4b0fd9 100644 --- a/tests/test_pe.py +++ b/tests/test_pe.py @@ -200,9 +200,7 @@ def end(ql): def test_pe_win_x8664_customapi(self): - @winapi(cc=CDECL, params={ - "str": STRING - }) + @winsdkapi(cc=CDECL, defparams={"str": STRING}) def my_puts64(ql, address, params): ret = 0 print("\n+++++++++ My Windows 64bit Windows API +++++++++\n") From ab07483e348ac7f5cb6810f8dca436592a070028 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 00:48:20 +0800 Subject: [PATCH 13/86] fixed some winsdk issue --- .../windows_sdk/defs/ntdll_dll.json | 24 +++++++++- .../windows/dlls/kernel32/interlockedapi.py | 1 + qiling/os/windows/dlls/kernel32/profileapi.py | 1 + qiling/os/windows/dlls/kernel32/psapi.py | 1 + .../os/windows/dlls/kernel32/wow64apiset.py | 1 + qiling/os/windows/fncc.py | 47 ++++--------------- 6 files changed, 37 insertions(+), 38 deletions(-) diff --git a/qiling/extensions/windows_sdk/defs/ntdll_dll.json b/qiling/extensions/windows_sdk/defs/ntdll_dll.json index 9425ccf23..d4b7ec457 100644 --- a/qiling/extensions/windows_sdk/defs/ntdll_dll.json +++ b/qiling/extensions/windows_sdk/defs/ntdll_dll.json @@ -572,7 +572,7 @@ "name": "ReturnLength", "type": "PULONG" } - ], + ], "NtQueryObject": [ { "name": "Handle", @@ -595,6 +595,28 @@ "type": "PULONG" } ], + "ZwQueryObject": [ + { + "name": "Handle", + "type": "HANDLE" + }, + { + "name": "ObjectInformationClass", + "type": "OBJECT_INFORMATION_CLASS" + }, + { + "name": "ObjectInformation", + "type": "PVOID" + }, + { + "name": "ObjectInformationLength", + "type": "ULONG" + }, + { + "name": "ReturnLength", + "type": "PULONG" + } + ], "NtQuerySystemInformation": [ { "name": "SystemInformationClass", diff --git a/qiling/os/windows/dlls/kernel32/interlockedapi.py b/qiling/os/windows/dlls/kernel32/interlockedapi.py index c96ab9049..081deda37 100644 --- a/qiling/os/windows/dlls/kernel32/interlockedapi.py +++ b/qiling/os/windows/dlls/kernel32/interlockedapi.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # void InitializeSListHead( # PSLIST_HEADER ListHead diff --git a/qiling/os/windows/dlls/kernel32/profileapi.py b/qiling/os/windows/dlls/kernel32/profileapi.py index 48510c211..ecfb1e6d4 100644 --- a/qiling/os/windows/dlls/kernel32/profileapi.py +++ b/qiling/os/windows/dlls/kernel32/profileapi.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL QueryPerformanceCounter( # LARGE_INTEGER *lpPerformanceCount diff --git a/qiling/os/windows/dlls/kernel32/psapi.py b/qiling/os/windows/dlls/kernel32/psapi.py index e916596a2..8ec718909 100644 --- a/qiling/os/windows/dlls/kernel32/psapi.py +++ b/qiling/os/windows/dlls/kernel32/psapi.py @@ -13,6 +13,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL GetModuleInformation( # HANDLE hProcess, diff --git a/qiling/os/windows/dlls/kernel32/wow64apiset.py b/qiling/os/windows/dlls/kernel32/wow64apiset.py index a0368d192..347675ba6 100644 --- a/qiling/os/windows/dlls/kernel32/wow64apiset.py +++ b/qiling/os/windows/dlls/kernel32/wow64apiset.py @@ -14,6 +14,7 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL IsWow64Process( # HANDLE hProcess, diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 3cdcff020..3a5f257db 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -3,6 +3,8 @@ # Cross Platform and Multi Architecture Advanced Binary Emulation Framework # Built on top of Unicorn emulator (www.unicorn-engine.org) +import os +import json import struct from functools import wraps @@ -15,35 +17,6 @@ def replacetype(type, specialtype=None): if specialtype is None: specialtype = {} - reptypedict = {'HKEY': 'HANDLE', 'LPCSTR': 'STRING', 'REGSAM': 'POINTER', 'PHKEY': 'POINTER', 'LPCWSTR': 'WSTRING', - 'LPFILETIME': 'POINTER', 'LPDWORD': 'POINTER', 'LPBYTE': 'POINTER', 'LPSECURITY_ATTRIBUTES': 'POINTER', - 'TOKEN_INFORMATION_CLASS': 'DWORD', 'LPVOID': 'POINTER', 'PDWORD': 'POINTER', - 'PSID': 'HANDLE', 'PSID_IDENTIFIER_AUTHORITY': 'POINTER', 'int': 'INT', - 'MSIHANDLE': 'POINTER', 'INSTALLSTATE': 'POINTER', 'size_t': 'UINT', 'PROCESSINFOCLASS': 'INT', - 'PVOID': 'POINTER', 'ULONG': 'UINT', 'PULONG': 'POINTER', 'OBJECT_INFORMATION_CLASS': 'INT', - 'LPMESSAGEFILTER': 'POINTER', 'PSECURITY_DESCRIPTOR': 'POINTER', 'LONG': 'ULONGLONG', - 'SOLE_AUTHENTICATION_SERVICE': 'POINTER', 'void': 'POINTER', 'REFCLSID': 'POINTER', - 'LPUNKNOWN': 'POINTER', 'REFIID': 'POINTER', 'OLECHAR': 'WSTRING', 'BSTR': 'POINTER', - 'unsigned int': 'UINT', 'SHFILEINFOW': 'POINTER', 'SHELLEXECUTEINFOA': 'POINTER', - 'SHELLEXECUTEINFOW': 'POINTER', 'HWND': 'HANDLE', 'LPWSTR': 'POINTER', 'DLGPROC': 'POINTER', - 'LPARAM': 'POINTER', 'HINSTANCE': 'HANDLE', 'INT_PTR': 'POINTER', - 'LPPOINT': 'POINTER', 'HDC': 'POINTER', 'LPSTR': 'POINTER', 'HOOKPROC': 'POINTER', 'HHOOK': 'POINTER', - 'WPARAM': 'UINT', 'PCACTCTXW': 'POINTER', 'HINTERNET': 'POINTER', 'DWORD_PTR': 'POINTER', - 'INTERNET_PORT': 'DWORD', 'LPINTERNET_BUFFERSA': 'POINT', 'WORD': 'DWORD', 'LPWSADATA': 'STRING', - 'LPWSAPROTOCOL_INFOA': 'POINTER', 'GROUP': 'INT', 'SOCKET': 'INT', 'sockaddr': 'POINTER', - 'PBOOL': 'POINTER', 'LPTOP_LEVEL_EXCEPTION_FILTER': 'DWORD', '_EXCEPTION_POINTERS': 'POINTER', - 'ULONG_PTR': 'POINTER', 'PVECTORED_EXCEPTION_HANDLER': 'HANDLE', 'PFLS_CALLBACK_FUNCTION': 'POINTER', - 'LPWIN32_FIND_DATAA': 'POINTER', 'LPOVERLAPPED': 'POINTER', 'LPCVOID': 'POINTER', - 'HEAP_INFORMATION_CLASS': 'UINT', 'PSLIST_HEADER': 'POINTER', 'HMODULE': 'HANDLE', 'HRSRC': 'POINTER', - 'HGLOBAL': 'POINTER', 'PMEMORY_BASIC_INFORMATION': 'POINTER', 'LPWCH': 'POINTER', - 'LPSTARTUPINFOA': 'POINTER', 'LPSTARTUPINFOW': 'POINTER', 'LPTHREAD_START_ROUTINE': 'POINTER', - 'LPCONTEXT': 'POINTER', 'LARGE_INTEGER': 'POINTER', 'LPMODULEINFO': 'POINTER', 'LPCWCH': 'POINTER', - 'LPWORD': 'POINTER', 'LCID': 'POINTER', 'LPCCH': 'POINTER', 'LPBOOL': 'POINTER', - 'LPCRITICAL_SECTION': 'POINTER', 'PSRWLOCK': 'POINTER', 'LPOSVERSIONINFOA': 'STRING', - 'LPOSVERSIONINFOW': 'WSTRING', 'LPSYSTEM_INFO': 'POINTER', 'LPSYSTEMTIME': 'POINTER', - 'LPPROCESSENTRY32W': 'POINTER', 'HLOCAL': 'POINTER', 'UINT_PTR': 'POINTER', - 'LPOSVERSIONINFOEXW': 'POINTER', 'DWORDLONG': 'ULONGLONG', 'LPCPINFO': 'POINTER', - 'LPNLSVERSIONINFO': 'POINTER', 'PCNZCH': 'STRING'} if type in reptypedict.keys(): if type not in specialtype.keys(): @@ -70,18 +43,19 @@ def decorator(func): def wrapper(*args, **kwargs): funcname = func.__name__[5:] params = {} - paramlist = None + paramlist = [] ql = args[0] if defparams is not None: params = defparams else: if dllname is not None: - root_path = os.path.abspath(os.path.join(os.getcwd(), "../..")) - with open(root_path+'/qiling/extensions/windows_sdk/'+dllname+'.json', 'r') as f: + windows_abspath = os.path.dirname(os.path.abspath(__file__)) + winsdk_path = windows_abspath[:-11]+'/extensions/windows_sdk/' + dllname + '.json' + if os.path.exists(winsdk_path): + f = open(winsdk_path, 'r') funclist = json.load(f) - f.close() - paramlist = funclist[funcname] - if funcname is not None: + paramlist = funclist[funcname] + for para in paramlist: name = list(para.values())[0] if name == 'VOID': @@ -96,7 +70,6 @@ def wrapper(*args, **kwargs): else: type = replacetype(list(para.values())[1], specialtype) params[name] = eval(type) - print(params) if ql.archtype == QL_ARCH.X86: if cc == STDCALL: @@ -109,4 +82,4 @@ def wrapper(*args, **kwargs): raise QlErrorArch("[!] Unknown self.ql.arch") return wrapper - return decorator \ No newline at end of file + return decorator From 1d9ff05c7a63fe9f603d002ab6a38c634dc15123 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 01:02:26 +0800 Subject: [PATCH 14/86] fixed some winsdk issue --- qiling/os/windows/fncc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 3a5f257db..ad586cf6d 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -55,7 +55,7 @@ def wrapper(*args, **kwargs): f = open(winsdk_path, 'r') funclist = json.load(f) paramlist = funclist[funcname] - + print('winsdk_path: '+winsdk_path) for para in paramlist: name = list(para.values())[0] if name == 'VOID': From 39f3f0ed267dd828b478927f49e7cf40e25347f7 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 01:07:15 +0800 Subject: [PATCH 15/86] test --- qiling/os/windows/fncc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index ad586cf6d..61df89de3 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -55,7 +55,7 @@ def wrapper(*args, **kwargs): f = open(winsdk_path, 'r') funclist = json.load(f) paramlist = funclist[funcname] - print('winsdk_path: '+winsdk_path) + print('winsdk_path: '+winsdk_path) for para in paramlist: name = list(para.values())[0] if name == 'VOID': From b6a25dbd08a5b0c5f17e2e43af4bf26d70cab8a6 Mon Sep 17 00:00:00 2001 From: Wu ChenXu <34511237+kabeor@users.noreply.github.com> Date: Wed, 24 Jun 2020 01:14:58 +0800 Subject: [PATCH 16/86] Update fncc.py --- qiling/os/windows/fncc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 61df89de3..443e454ff 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -55,7 +55,7 @@ def wrapper(*args, **kwargs): f = open(winsdk_path, 'r') funclist = json.load(f) paramlist = funclist[funcname] - print('winsdk_path: '+winsdk_path) + print('winsdk_path:'+winsdk_path) for para in paramlist: name = list(para.values())[0] if name == 'VOID': From 6bb206895fe67eebcad4d9d28edeaf24d395bcb8 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 09:07:02 +0800 Subject: [PATCH 17/86] clean --- qiling/os/windows/fncc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 443e454ff..3a5f257db 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -55,7 +55,7 @@ def wrapper(*args, **kwargs): f = open(winsdk_path, 'r') funclist = json.load(f) paramlist = funclist[funcname] - print('winsdk_path:'+winsdk_path) + for para in paramlist: name = list(para.values())[0] if name == 'VOID': From af89703a6738cefa43278fc8c9bc599f05ca009e Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 09:19:41 +0800 Subject: [PATCH 18/86] check path --- qiling/os/windows/fncc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 3a5f257db..2e92232d6 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -55,7 +55,7 @@ def wrapper(*args, **kwargs): f = open(winsdk_path, 'r') funclist = json.load(f) paramlist = funclist[funcname] - + print('path====', winsdk_path) for para in paramlist: name = list(para.values())[0] if name == 'VOID': From 3568be3ebf135497da6edee23e5af459152d6964 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 09:29:56 +0800 Subject: [PATCH 19/86] add type replace table --- qiling/const.py | 32 +++++++++++++++++++++++++++++++- qiling/os/windows/fncc.py | 1 - 2 files changed, 31 insertions(+), 2 deletions(-) diff --git a/qiling/const.py b/qiling/const.py index 788db19a3..dbce8cfbc 100644 --- a/qiling/const.py +++ b/qiling/const.py @@ -80,4 +80,34 @@ class QL_INTERCEPT(IntEnum): "freebsd": QL_OS.FREEBSD, "windows": QL_OS.WINDOWS, "uefi": QL_OS.UEFI, -} \ No newline at end of file +} + +reptypedict = {'HKEY': 'HANDLE', 'LPCSTR': 'STRING', 'REGSAM': 'POINTER', 'PHKEY': 'POINTER', 'LPCWSTR': 'WSTRING', + 'LPFILETIME': 'POINTER', 'LPDWORD': 'POINTER', 'LPBYTE': 'POINTER', 'LPSECURITY_ATTRIBUTES': 'POINTER', + 'TOKEN_INFORMATION_CLASS': 'DWORD', 'LPVOID': 'POINTER', 'PDWORD': 'POINTER', + 'PSID': 'HANDLE', 'PSID_IDENTIFIER_AUTHORITY': 'POINTER', 'int': 'INT', + 'MSIHANDLE': 'POINTER', 'INSTALLSTATE': 'POINTER', 'size_t': 'UINT', 'PROCESSINFOCLASS': 'INT', + 'PVOID': 'POINTER', 'ULONG': 'UINT', 'PULONG': 'POINTER', 'OBJECT_INFORMATION_CLASS': 'INT', + 'LPMESSAGEFILTER': 'POINTER', 'PSECURITY_DESCRIPTOR': 'POINTER', 'LONG': 'ULONGLONG', + 'SOLE_AUTHENTICATION_SERVICE': 'POINTER', 'void': 'POINTER', 'REFCLSID': 'POINTER', + 'LPUNKNOWN': 'POINTER', 'REFIID': 'POINTER', 'OLECHAR': 'WSTRING', 'BSTR': 'POINTER', + 'unsigned int': 'UINT', 'SHFILEINFOW': 'POINTER', 'SHELLEXECUTEINFOA': 'POINTER', + 'SHELLEXECUTEINFOW': 'POINTER', 'HWND': 'HANDLE', 'LPWSTR': 'POINTER', 'DLGPROC': 'POINTER', + 'LPARAM': 'POINTER', 'HINSTANCE': 'HANDLE', 'INT_PTR': 'POINTER', + 'LPPOINT': 'POINTER', 'HDC': 'POINTER', 'LPSTR': 'POINTER', 'HOOKPROC': 'POINTER', 'HHOOK': 'POINTER', + 'WPARAM': 'UINT', 'PCACTCTXW': 'POINTER', 'HINTERNET': 'POINTER', 'DWORD_PTR': 'POINTER', + 'INTERNET_PORT': 'DWORD', 'LPINTERNET_BUFFERSA': 'POINT', 'WORD': 'DWORD', 'LPWSADATA': 'STRING', + 'LPWSAPROTOCOL_INFOA': 'POINTER', 'GROUP': 'INT', 'SOCKET': 'INT', 'sockaddr': 'POINTER', + 'PBOOL': 'POINTER', 'LPTOP_LEVEL_EXCEPTION_FILTER': 'DWORD', '_EXCEPTION_POINTERS': 'POINTER', + 'ULONG_PTR': 'POINTER', 'PVECTORED_EXCEPTION_HANDLER': 'HANDLE', 'PFLS_CALLBACK_FUNCTION': 'POINTER', + 'LPWIN32_FIND_DATAA': 'POINTER', 'LPOVERLAPPED': 'POINTER', 'LPCVOID': 'POINTER', + 'HEAP_INFORMATION_CLASS': 'UINT', 'PSLIST_HEADER': 'POINTER', 'HMODULE': 'HANDLE', 'HRSRC': 'POINTER', + 'HGLOBAL': 'POINTER', 'PMEMORY_BASIC_INFORMATION': 'POINTER', 'LPWCH': 'POINTER', + 'LPSTARTUPINFOA': 'POINTER', 'LPSTARTUPINFOW': 'POINTER', 'LPTHREAD_START_ROUTINE': 'POINTER', + 'LPCONTEXT': 'POINTER', 'LARGE_INTEGER': 'POINTER', 'LPMODULEINFO': 'POINTER', 'LPCWCH': 'POINTER', + 'LPWORD': 'POINTER', 'LCID': 'POINTER', 'LPCCH': 'POINTER', 'LPBOOL': 'POINTER', + 'LPCRITICAL_SECTION': 'POINTER', 'PSRWLOCK': 'POINTER', 'LPOSVERSIONINFOA': 'STRING', + 'LPOSVERSIONINFOW': 'WSTRING', 'LPSYSTEM_INFO': 'POINTER', 'LPSYSTEMTIME': 'POINTER', + 'LPPROCESSENTRY32W': 'POINTER', 'HLOCAL': 'POINTER', 'UINT_PTR': 'POINTER', + 'LPOSVERSIONINFOEXW': 'POINTER', 'DWORDLONG': 'ULONGLONG', 'LPCPINFO': 'POINTER', + 'LPNLSVERSIONINFO': 'POINTER', 'PCNZCH': 'STRING'} \ No newline at end of file diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 2e92232d6..58d6c0490 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -55,7 +55,6 @@ def wrapper(*args, **kwargs): f = open(winsdk_path, 'r') funclist = json.load(f) paramlist = funclist[funcname] - print('path====', winsdk_path) for para in paramlist: name = list(para.values())[0] if name == 'VOID': From 19429e6ad8a06a74f9ff66e8d05aa934a92e7fbd Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 09:37:17 +0800 Subject: [PATCH 20/86] check path --- qiling/os/windows/fncc.py | 1 + 1 file changed, 1 insertion(+) diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 58d6c0490..3123b2729 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -51,6 +51,7 @@ def wrapper(*args, **kwargs): if dllname is not None: windows_abspath = os.path.dirname(os.path.abspath(__file__)) winsdk_path = windows_abspath[:-11]+'/extensions/windows_sdk/' + dllname + '.json' + ql.nprint("path==%s" % winsdk_path) if os.path.exists(winsdk_path): f = open(winsdk_path, 'r') funclist = json.load(f) From b18991fae0e7927ab63ba1bf09f5f940a7700e75 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 09:48:05 +0800 Subject: [PATCH 21/86] fix path --- qiling/os/windows/fncc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 3123b2729..af3881fd6 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -50,7 +50,7 @@ def wrapper(*args, **kwargs): else: if dllname is not None: windows_abspath = os.path.dirname(os.path.abspath(__file__)) - winsdk_path = windows_abspath[:-11]+'/extensions/windows_sdk/' + dllname + '.json' + winsdk_path = os.path.join(windows_abspath[:-11]+'/extensions/windows_sdk/' + dllname + '.json') ql.nprint("path==%s" % winsdk_path) if os.path.exists(winsdk_path): f = open(winsdk_path, 'r') From ea0f4c734306888ff328fc44c1ad267ce5dbc1a5 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 09:52:00 +0800 Subject: [PATCH 22/86] fix path --- qiling/os/windows/fncc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index af3881fd6..6f038f2f8 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -50,7 +50,7 @@ def wrapper(*args, **kwargs): else: if dllname is not None: windows_abspath = os.path.dirname(os.path.abspath(__file__)) - winsdk_path = os.path.join(windows_abspath[:-11]+'/extensions/windows_sdk/' + dllname + '.json') + winsdk_path = os.path.join(windows_abspath[:-11], 'extensions', 'windows_sdk', dllname + '.json') ql.nprint("path==%s" % winsdk_path) if os.path.exists(winsdk_path): f = open(winsdk_path, 'r') From 967d2d3c9885b2a637f47a995af6c8e8734c5454 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 09:59:11 +0800 Subject: [PATCH 23/86] fix path --- qiling/os/windows/fncc.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 6f038f2f8..df0573494 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -50,7 +50,7 @@ def wrapper(*args, **kwargs): else: if dllname is not None: windows_abspath = os.path.dirname(os.path.abspath(__file__)) - winsdk_path = os.path.join(windows_abspath[:-11], 'extensions', 'windows_sdk', dllname + '.json') + winsdk_path = os.path.join(windows_abspath[:-11], 'extensions', 'windows_sdk', 'defs', dllname + '.json') ql.nprint("path==%s" % winsdk_path) if os.path.exists(winsdk_path): f = open(winsdk_path, 'r') From 7e0865059756feb471c08be72174c2de63cb0ea5 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 11:01:09 +0800 Subject: [PATCH 24/86] fix json path --- MANIFEST.in | 1 + qiling/extensions/windows_sdk/__init__.py | 0 qiling/os/windows/fncc.py | 1 - 3 files changed, 1 insertion(+), 1 deletion(-) create mode 100644 qiling/extensions/windows_sdk/__init__.py diff --git a/MANIFEST.in b/MANIFEST.in index 0a5c71565..b0454715a 100644 --- a/MANIFEST.in +++ b/MANIFEST.in @@ -1,2 +1,3 @@ recursive-include qiling/extensions/debugger/gdbserver/xml * +recursive-include qiling/extensions/windows_sdk/defs * recursive-include qiling/profiles * diff --git a/qiling/extensions/windows_sdk/__init__.py b/qiling/extensions/windows_sdk/__init__.py new file mode 100644 index 000000000..e69de29bb diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index df0573494..4cf14f94a 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -51,7 +51,6 @@ def wrapper(*args, **kwargs): if dllname is not None: windows_abspath = os.path.dirname(os.path.abspath(__file__)) winsdk_path = os.path.join(windows_abspath[:-11], 'extensions', 'windows_sdk', 'defs', dllname + '.json') - ql.nprint("path==%s" % winsdk_path) if os.path.exists(winsdk_path): f = open(winsdk_path, 'r') funclist = json.load(f) From 0b23c82be90c83d5ecaab3bfce145ef728385d87 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 11:13:37 +0800 Subject: [PATCH 25/86] fix requirements.txt --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 8f30045e9..47cd38855 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,4 +2,4 @@ capstone>=4.0.1 unicorn>=1.0.2rc4 pefile>=2019.4.18 python-registry>=1.3.1 -keystone-engine>=0.9.2rc1 +keystone-engine>=0.9.2 From 0ef17a915b2dd2dc7ebf7f447dfd300e40d5e318 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 24 Jun 2020 11:40:01 +0800 Subject: [PATCH 26/86] cleanup replace table --- qiling/const.py | 132 +++++++++++++++++++++++++++++++++++++----------- 1 file changed, 103 insertions(+), 29 deletions(-) diff --git a/qiling/const.py b/qiling/const.py index dbce8cfbc..d311cbc16 100644 --- a/qiling/const.py +++ b/qiling/const.py @@ -82,32 +82,106 @@ class QL_INTERCEPT(IntEnum): "uefi": QL_OS.UEFI, } -reptypedict = {'HKEY': 'HANDLE', 'LPCSTR': 'STRING', 'REGSAM': 'POINTER', 'PHKEY': 'POINTER', 'LPCWSTR': 'WSTRING', - 'LPFILETIME': 'POINTER', 'LPDWORD': 'POINTER', 'LPBYTE': 'POINTER', 'LPSECURITY_ATTRIBUTES': 'POINTER', - 'TOKEN_INFORMATION_CLASS': 'DWORD', 'LPVOID': 'POINTER', 'PDWORD': 'POINTER', - 'PSID': 'HANDLE', 'PSID_IDENTIFIER_AUTHORITY': 'POINTER', 'int': 'INT', - 'MSIHANDLE': 'POINTER', 'INSTALLSTATE': 'POINTER', 'size_t': 'UINT', 'PROCESSINFOCLASS': 'INT', - 'PVOID': 'POINTER', 'ULONG': 'UINT', 'PULONG': 'POINTER', 'OBJECT_INFORMATION_CLASS': 'INT', - 'LPMESSAGEFILTER': 'POINTER', 'PSECURITY_DESCRIPTOR': 'POINTER', 'LONG': 'ULONGLONG', - 'SOLE_AUTHENTICATION_SERVICE': 'POINTER', 'void': 'POINTER', 'REFCLSID': 'POINTER', - 'LPUNKNOWN': 'POINTER', 'REFIID': 'POINTER', 'OLECHAR': 'WSTRING', 'BSTR': 'POINTER', - 'unsigned int': 'UINT', 'SHFILEINFOW': 'POINTER', 'SHELLEXECUTEINFOA': 'POINTER', - 'SHELLEXECUTEINFOW': 'POINTER', 'HWND': 'HANDLE', 'LPWSTR': 'POINTER', 'DLGPROC': 'POINTER', - 'LPARAM': 'POINTER', 'HINSTANCE': 'HANDLE', 'INT_PTR': 'POINTER', - 'LPPOINT': 'POINTER', 'HDC': 'POINTER', 'LPSTR': 'POINTER', 'HOOKPROC': 'POINTER', 'HHOOK': 'POINTER', - 'WPARAM': 'UINT', 'PCACTCTXW': 'POINTER', 'HINTERNET': 'POINTER', 'DWORD_PTR': 'POINTER', - 'INTERNET_PORT': 'DWORD', 'LPINTERNET_BUFFERSA': 'POINT', 'WORD': 'DWORD', 'LPWSADATA': 'STRING', - 'LPWSAPROTOCOL_INFOA': 'POINTER', 'GROUP': 'INT', 'SOCKET': 'INT', 'sockaddr': 'POINTER', - 'PBOOL': 'POINTER', 'LPTOP_LEVEL_EXCEPTION_FILTER': 'DWORD', '_EXCEPTION_POINTERS': 'POINTER', - 'ULONG_PTR': 'POINTER', 'PVECTORED_EXCEPTION_HANDLER': 'HANDLE', 'PFLS_CALLBACK_FUNCTION': 'POINTER', - 'LPWIN32_FIND_DATAA': 'POINTER', 'LPOVERLAPPED': 'POINTER', 'LPCVOID': 'POINTER', - 'HEAP_INFORMATION_CLASS': 'UINT', 'PSLIST_HEADER': 'POINTER', 'HMODULE': 'HANDLE', 'HRSRC': 'POINTER', - 'HGLOBAL': 'POINTER', 'PMEMORY_BASIC_INFORMATION': 'POINTER', 'LPWCH': 'POINTER', - 'LPSTARTUPINFOA': 'POINTER', 'LPSTARTUPINFOW': 'POINTER', 'LPTHREAD_START_ROUTINE': 'POINTER', - 'LPCONTEXT': 'POINTER', 'LARGE_INTEGER': 'POINTER', 'LPMODULEINFO': 'POINTER', 'LPCWCH': 'POINTER', - 'LPWORD': 'POINTER', 'LCID': 'POINTER', 'LPCCH': 'POINTER', 'LPBOOL': 'POINTER', - 'LPCRITICAL_SECTION': 'POINTER', 'PSRWLOCK': 'POINTER', 'LPOSVERSIONINFOA': 'STRING', - 'LPOSVERSIONINFOW': 'WSTRING', 'LPSYSTEM_INFO': 'POINTER', 'LPSYSTEMTIME': 'POINTER', - 'LPPROCESSENTRY32W': 'POINTER', 'HLOCAL': 'POINTER', 'UINT_PTR': 'POINTER', - 'LPOSVERSIONINFOEXW': 'POINTER', 'DWORDLONG': 'ULONGLONG', 'LPCPINFO': 'POINTER', - 'LPNLSVERSIONINFO': 'POINTER', 'PCNZCH': 'STRING'} \ No newline at end of file +reptypedict = { + "BSTR": "POINTER", + "DLGPROC": "POINTER", + "DWORDLONG": "ULONGLONG", + "DWORD_PTR": "POINTER", + "GROUP": "INT", + "HDC": "POINTER", + "HEAP_INFORMATION_CLASS": "UINT", + "HGLOBAL": "POINTER", + "HHOOK": "POINTER", + "HINSTANCE": "HANDLE", + "HINTERNET": "POINTER", + "HKEY": "HANDLE", + "HLOCAL": "POINTER", + "HMODULE": "HANDLE", + "HOOKPROC": "POINTER", + "HRSRC": "POINTER", + "HWND": "HANDLE", + "INSTALLSTATE": "POINTER", + "INTERNET_PORT": "DWORD", + "INT_PTR": "POINTER", + "LARGE_INTEGER": "POINTER", + "LCID": "POINTER", + "LONG": "ULONGLONG", + "LPARAM": "POINTER", + "LPBOOL": "POINTER", + "LPBYTE": "POINTER", + "LPCCH": "POINTER", + "LPCONTEXT": "POINTER", + "LPCPINFO": "POINTER", + "LPCRITICAL_SECTION": "POINTER", + "LPCSTR": "STRING", + "LPCVOID": "POINTER", + "LPCWCH": "POINTER", + "LPCWSTR": "WSTRING", + "LPDWORD": "POINTER", + "LPFILETIME": "POINTER", + "LPINTERNET_BUFFERSA": "POINT", + "LPMESSAGEFILTER": "POINTER", + "LPMODULEINFO": "POINTER", + "LPNLSVERSIONINFO": "POINTER", + "LPOSVERSIONINFOA": "STRING", + "LPOSVERSIONINFOEXW": "POINTER", + "LPOSVERSIONINFOW": "WSTRING", + "LPOVERLAPPED": "POINTER", + "LPPOINT": "POINTER", + "LPPROCESSENTRY32W": "POINTER", + "LPSECURITY_ATTRIBUTES": "POINTER", + "LPSTARTUPINFOA": "POINTER", + "LPSTARTUPINFOW": "POINTER", + "LPSTR": "POINTER", + "LPSYSTEMTIME": "POINTER", + "LPSYSTEM_INFO": "POINTER", + "LPTHREAD_START_ROUTINE": "POINTER", + "LPTOP_LEVEL_EXCEPTION_FILTER": "DWORD", + "LPUNKNOWN": "POINTER", + "LPVOID": "POINTER", + "LPWCH": "POINTER", + "LPWIN32_FIND_DATAA": "POINTER", + "LPWORD": "POINTER", + "LPWSADATA": "STRING", + "LPWSAPROTOCOL_INFOA": "POINTER", + "LPWSTR": "POINTER", + "MSIHANDLE": "POINTER", + "OBJECT_INFORMATION_CLASS": "INT", + "OLECHAR": "WSTRING", + "PBOOL": "POINTER", + "PCACTCTXW": "POINTER", + "PCNZCH": "STRING", + "PDWORD": "POINTER", + "PFLS_CALLBACK_FUNCTION": "POINTER", + "PHKEY": "POINTER", + "PMEMORY_BASIC_INFORMATION": "POINTER", + "PROCESSINFOCLASS": "INT", + "PSECURITY_DESCRIPTOR": "POINTER", + "PSID": "HANDLE", + "PSID_IDENTIFIER_AUTHORITY": "POINTER", + "PSLIST_HEADER": "POINTER", + "PSRWLOCK": "POINTER", + "PULONG": "POINTER", + "PVECTORED_EXCEPTION_HANDLER": "HANDLE", + "PVOID": "POINTER", + "REFCLSID": "POINTER", + "REFIID": "POINTER", + "REGSAM": "POINTER", + "SHELLEXECUTEINFOA": "POINTER", + "SHELLEXECUTEINFOW": "POINTER", + "SHFILEINFOW": "POINTER", + "SOCKET": "INT", + "SOLE_AUTHENTICATION_SERVICE": "POINTER", + "TOKEN_INFORMATION_CLASS": "DWORD", + "UINT_PTR": "POINTER", + "ULONG": "UINT", + "ULONG_PTR": "POINTER", + "WORD": "DWORD", + "WPARAM": "UINT", + "_EXCEPTION_POINTERS": "POINTER", + "int": "INT", + "size_t": "UINT", + "sockaddr": "POINTER", + "unsigned int": "UINT", + "void": "POINTER" +} \ No newline at end of file From 67484af9563ab76e0c86eccac9369b8064a33aeb Mon Sep 17 00:00:00 2001 From: Itai Liba Date: Wed, 24 Jun 2020 19:46:46 -0700 Subject: [PATCH 27/86] Add support for (PEI) pcd_protocol a prerequisite to loading PcdDxe which implements protocols that are a prerequisite for many DXE modules. * This rev disables loads the first module at address 0, witch breaks a few features, PcdDxe is expected to be loaded at address 0. --- qiling/loader/pe_uefi.py | 21 +- qiling/os/uefi/pcd_protocol.py | 279 ++++++++++++++++++++++++++ qiling/os/uefi/pcd_protocol_type64.py | 164 +++++++++++++++ qiling/profiles/uefi.ql | 3 + 4 files changed, 460 insertions(+), 7 deletions(-) create mode 100644 qiling/os/uefi/pcd_protocol.py create mode 100644 qiling/os/uefi/pcd_protocol_type64.py diff --git a/qiling/loader/pe_uefi.py b/qiling/loader/pe_uefi.py index 03f200828..b08f6f391 100644 --- a/qiling/loader/pe_uefi.py +++ b/qiling/loader/pe_uefi.py @@ -18,6 +18,7 @@ from qiling.os.uefi.fncc import * from qiling.os.uefi.bootup import * from qiling.os.uefi.runtime import * +from qiling.os.uefi.pcd_protocol import * from qiling.os.windows.fncc import * @@ -32,7 +33,7 @@ def __init__(self, ql): self.events = {} self.handle_dict = {} self.notify_list = [] - self.last_image_base = 0x10000 + self.last_image_base = 0#x10000 @contextmanager def map_memory(self, addr, size): @@ -217,18 +218,24 @@ def run(self): system_table_heap_ptr += pointer_size efi_configuration_table.VendorTable = VendorTable_ptr self.efi_configuration_table = [self.ql.os.profile["GUID"]["configuration_table"]] + + self.pcd_protocol_ptr = system_table_heap_ptr + system_table_heap_ptr += ctypes.sizeof(EFI_PCD_PROTOCOL) + system_table_heap_ptr, pcd_protocol = install_EFI_PCD_PROTOCOL(self.ql, system_table_heap_ptr) + self.handle_dict[0] = {self.ql.os.profile.get("EFI_PCD_PROTOCOL", "guid"): self.pcd_protocol_ptr} + # self.handle_dict[0] = {self.ql.os.profile.get("EFI_PCD_PROTOCOL", "guid1"): self.pcd_protocol_ptr} + + self.ql.mem.write(runtime_services_ptr, convert_struct_to_bytes(runtime_services)) self.ql.mem.write(boot_services_ptr, convert_struct_to_bytes(boot_services)) self.ql.mem.write(self.efi_configuration_table_ptr, convert_struct_to_bytes(efi_configuration_table)) self.ql.mem.write(self.system_table_ptr, convert_struct_to_bytes(system_table)) + self.ql.mem.write(self.pcd_protocol_ptr, convert_struct_to_bytes(pcd_protocol)) - if len(self.ql.argv) > 1: - for dependency in self.ql.argv[1:]: - if not self.map_and_load(dependency): - raise QlErrorFileType("Can't map dependency") + for dependency in self.ql.argv: + if not self.map_and_load(dependency): + raise QlErrorFileType("Can't map dependency") - # Load main module - self.map_and_load(self.ql.path) self.ql.nprint("[+] Done with loading %s" % self.ql.path) #return address diff --git a/qiling/os/uefi/pcd_protocol.py b/qiling/os/uefi/pcd_protocol.py new file mode 100644 index 000000000..bfcd0f718 --- /dev/null +++ b/qiling/os/uefi/pcd_protocol.py @@ -0,0 +1,279 @@ +#!/usr/bin/env python3 +# +# Cross Platform and Multi Architecture Advanced Binary Emulation Framework +# Built on top of Unicorn emulator (www.unicorn-engine.org) + +from qiling.const import * +from qiling.os.const import * +from .const import * +from .utils import * +from .pcd_protocol_type64 import * +from .fncc import * + + +@dxeapi(params={ + "SkuId": ULONGLONG, +}) +def hook_SetSku(ql, address, params): + ql.os.SkuId = params["SkuId"] + +def check_args(ql, address, params): + guid = params["Guid"] + token = params["TokenNumber"] + if guid in ql.os.efi_pcd_protocol_storage: + namespace = ql.os.efi_pcd_protocol_storage[guid] + return (token in namespace, guid, token) + return (False, guid, token) + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, +}) +def hook_Get8(ql, address, params): + arg_ok, guid, token = check_args(ql, address, params) + if arg_ok: + return ql.os.efi_pcd_protocol_storage[guid][token] & 0xff + return 0 + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, +}) +def hook_Get16(ql, address, params): + arg_ok, guid, token = check_args(ql, address, params) + if arg_ok: + return ql.os.efi_pcd_protocol_storage[guid][token] & 0xffff + return 0 + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, +}) +def hook_Get32(ql, address, params): + arg_ok, guid, token = check_args(ql, address, params) + if arg_ok: + return ql.os.efi_pcd_protocol_storage[guid][token] & 0xffffffff + return 0 + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, +}) +def hook_Get64(ql, address, params): + arg_ok, guid, token = check_args(ql, address, params) + if arg_ok: + return ql.os.efi_pcd_protocol_storage[guid][token] & 0xffffffffffffffff + return 0 + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, +}) +def hook_GetPtr(ql, address, params): + arg_ok, guid, token = check_args(ql, address, params) + if arg_ok: + return ql.os.efi_pcd_protocol_storage[guid][token] & 0xffffffffffffffff + return 0 + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, +}) +def hook_GetBool(ql, address, params): + arg_ok, guid, token = check_args(ql, address, params) + if arg_ok: + return ql.os.efi_pcd_protocol_storage[guid][token] & 1 + return 0 + + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, +}) +def hook_GetSize(ql, address, params): + arg_ok, guid, token = check_args(ql, address, params) + if arg_ok: + return len(ql.os.efi_pcd_protocol_storage[guid][token]) + return 0 + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, + "Value": ULONGLONG, +}) +def hook_Set8(ql, address, params): + guid = params["Guid"] + token = params["TokenNumber"] + ql.os.efi_pcd_protocol_storage[guid]= {token: params["Value"] & 0xff} + return EFI_SUCCESS + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, + "Value": ULONGLONG, +}) +def hook_Set16(ql, address, params): + guid = params["Guid"] + token = params["TokenNumber"] + ql.os.efi_pcd_protocol_storage[guid]= {token: params["Value"] & 0xffff} + return EFI_SUCCESS + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, + "Value": UINT, +}) +def hook_Set32(ql, address, params): + guid = params["Guid"] + token = params["TokenNumber"] + ql.os.efi_pcd_protocol_storage[guid]= {token: params["Value"] & 0xffffffff} + return EFI_SUCCESS + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, + "Value": ULONGLONG, +}) +def hook_Set64(ql, address, params): + guid = params["Guid"] + token = params["TokenNumber"] + ql.os.efi_pcd_protocol_storage[guid]= {token: params["Value"] & 0xffffffffffffffff} + return EFI_SUCCESS + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, + "SizeOfValue": POINTER, #POINTER_T(ctypes.c_uint64) + "Buffer": POINTER, #POINTER_T(None) +}) +def hook_SetPtr(ql, address, params): + guid = params["Guid"] + token = params["TokenNumber"] + size = params["SizeOfValue"] + buffer = params["Buffer"] + buf = ql.loader.heap.alloc(size) + ql.mem.write(buf, ql.mem.read(buffer, size)) + ql.os.efi_pcd_protocol_storage[guid]= {token: buf} + return EFI_SUCCESS + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": ULONGLONG, + "Value": ULONGLONG, +}) +def hook_SetBool(ql, address, params): + guid = params["Guid"] + token = params["TokenNumber"] + ql.os.efi_pcd_protocol_storage[guid]= {token: params["Value"] & 1} + return EFI_SUCCESS + +@dxeapi(params={ + "Guid": GUID, + "CallBackToken": ULONGLONG, + "CallBackFunction": POINTER, +}) +def hook_CallbackOnSet(ql, address, params): + guid = params["Guid"] + return EFI_NOT_FOUND # let's see if we need to implement this. + +@dxeapi(params={ + "Guid": GUID, + "CallBackToken": ULONGLONG, + "CallBackFunction": POINTER, +}) +def hook_CancelCallback(ql, address, params): + guid = params["Guid"] + return EFI_NOT_FOUND # let's see if we need to implement this. + +@dxeapi(params={ + "Guid": GUID, + "TokenNumber": POINTER, #POINTER_T(ctypes.c_uint64) +}) +def hook_GetNextToken(ql, address, params): + guid = params["Guid"] + token = params["TokenNumber"] + lst = list(ql.os.efi_pcd_protocol_storage[guid]) + try: + index = lst.index(token) + if index + 1 < len(lst): + return lst[index + 1] + except: + pass + return EFI_NOT_FOUND + +@dxeapi(params={ + "Guid": POINTER, +}) +def hook_GetNextTokenSpace(ql, address, params): + guid = params["Guid"] + lst = list(ql.os.efi_pcd_protocol_storage) + try: + index = lst.index(guid) + if index + 1 < len(lst): + return lst[index + 1] + except: + pass + return EFI_NOT_FOUND + + + +def install_EFI_PCD_PROTOCOL(ql, start_ptr): + efi_pcd_protocol = EFI_PCD_PROTOCOL() + ptr = start_ptr + pointer_size = 8 + efi_pcd_protocol.SetSku = ptr + ql.hook_address(hook_SetSku, ptr) + ptr += pointer_size + efi_pcd_protocol.Get8 = ptr + ql.hook_address(hook_Get8, ptr) + ptr += pointer_size + efi_pcd_protocol.Get16 = ptr + ql.hook_address(hook_Get16, ptr) + ptr += pointer_size + efi_pcd_protocol.Get32 = ptr + ql.hook_address(hook_Get32, ptr) + ptr += pointer_size + efi_pcd_protocol.Get64 = ptr + ql.hook_address(hook_Get64, ptr) + ptr += pointer_size + efi_pcd_protocol.GetPtr = ptr + ql.hook_address(hook_GetPtr, ptr) + ptr += pointer_size + efi_pcd_protocol.GetBool = ptr + ql.hook_address(hook_GetBool, ptr) + ptr += pointer_size + efi_pcd_protocol.GetSize = ptr + ql.hook_address(hook_GetSize, ptr) + ptr += pointer_size + efi_pcd_protocol.Set8 = ptr + ql.hook_address(hook_Set8, ptr) + ptr += pointer_size + efi_pcd_protocol.Set16 = ptr + ql.hook_address(hook_Set16, ptr) + ptr += pointer_size + efi_pcd_protocol.Set32 = ptr + ql.hook_address(hook_Set32, ptr) + ptr += pointer_size + efi_pcd_protocol.Set64 = ptr + ql.hook_address(hook_Set64, ptr) + ptr += pointer_size + efi_pcd_protocol.SetPtr = ptr + ql.hook_address(hook_SetPtr, ptr) + ptr += pointer_size + efi_pcd_protocol.SetBool = ptr + ql.hook_address(hook_SetBool, ptr) + ptr += pointer_size + efi_pcd_protocol.CallbackOnSet = ptr + ql.hook_address(hook_CallbackOnSet, ptr) + ptr += pointer_size + efi_pcd_protocol.CancelCallback = ptr + ql.hook_address(hook_CancelCallback, ptr) + ptr += pointer_size + efi_pcd_protocol.GetNextToken = ptr + ql.hook_address(hook_GetNextToken, ptr) + ptr += pointer_size + efi_pcd_protocol.GetNextTokenSpace = ptr + ql.hook_address(hook_GetNextTokenSpace, ptr) + ptr += pointer_size + return (ptr, efi_pcd_protocol) + diff --git a/qiling/os/uefi/pcd_protocol_type64.py b/qiling/os/uefi/pcd_protocol_type64.py new file mode 100644 index 000000000..6bd2ef8b5 --- /dev/null +++ b/qiling/os/uefi/pcd_protocol_type64.py @@ -0,0 +1,164 @@ +# -*- coding: utf-8 -*- +# +# TARGET arch is: [] +# WORD_SIZE is: 8 +# POINTER_SIZE is: 8 +# LONGDOUBLE_SIZE is: 16 +# +import ctypes + + +c_int128 = ctypes.c_ubyte*16 +c_uint128 = c_int128 +void = None +if ctypes.sizeof(ctypes.c_longdouble) == 16: + c_long_double_t = ctypes.c_longdouble +else: + c_long_double_t = ctypes.c_ubyte*16 + +# if local wordsize is same as target, keep ctypes pointer function. +# required to access _ctypes +import _ctypes +# Emulate a pointer class using the approriate c_int32/c_int64 type +# The new class should have : +# ['__module__', 'from_param', '_type_', '__dict__', '__weakref__', '__doc__'] +# but the class should be submitted to a unique instance for each base type +# to that if A == B, POINTER_T(A) == POINTER_T(B) +ctypes._pointer_t_type_cache = {} +def POINTER_T(pointee): + # a pointer should have the same length as LONG + fake_ptr_base_type = ctypes.c_uint64 + # specific case for c_void_p + if pointee is None: # VOID pointer type. c_void_p. + pointee = type(None) # ctypes.c_void_p # ctypes.c_ulong + clsname = 'c_void' + else: + clsname = pointee.__name__ + if clsname in ctypes._pointer_t_type_cache: + return ctypes._pointer_t_type_cache[clsname] + # make template + _class = type('LP_%d_%s'%(8, clsname), (fake_ptr_base_type,),{}) + ctypes._pointer_t_type_cache[clsname] = _class + return _class + + + +undefined = ctypes.c_ubyte +byte = ctypes.c_ubyte +dword = ctypes.c_uint32 +qword = ctypes.c_uint64 +uchar = ctypes.c_ubyte +uint = ctypes.c_uint32 +ulong = ctypes.c_uint64 +ulonglong = ctypes.c_uint64 +undefined1 = ctypes.c_ubyte +undefined2 = ctypes.c_uint16 +undefined4 = ctypes.c_uint32 +ushort = ctypes.c_uint16 +word = ctypes.c_uint16 +class struct__EFI_PCD_PROTOCOL(ctypes.Structure): + pass + +class struct_EFI_GUID(ctypes.Structure): + pass + +struct__EFI_PCD_PROTOCOL._pack_ = True # source:False +struct__EFI_PCD_PROTOCOL._functions_ = [] +struct__EFI_PCD_PROTOCOL._fields_ = [ + ('SetSku', POINTER_T(ctypes.CFUNCTYPE(None, ctypes.c_uint64))), + ('Get8', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_ubyte, POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), + ('Get16', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint16, POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), + ('Get32', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint32, POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), + ('Get64', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), + ('GetPtr', POINTER_T(ctypes.CFUNCTYPE(POINTER_T(None), POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), + ('GetBool', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_ubyte, POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), + ('GetSize', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), + ('Set8', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_ubyte))), + ('Set16', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_uint16))), + ('Set32', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_uint32))), + ('Set64', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_uint64))), + ('SetPtr', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(None)))), + ('SetBool', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_ubyte))), + ('CallbackOnSet', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64))))), + ('CancelCallback', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64))))), + ('GetNextToken', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), POINTER_T(ctypes.c_uint64)))), + ('GetNextTokenSpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(POINTER_T(struct_EFI_GUID))))), +] + +struct__EFI_PCD_PROTOCOL._functions_.append(("SetSku",['None', 'ctypes.c_uint64'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("Get8",['ctypes.c_ubyte', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("Get16",['ctypes.c_uint16', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("Get32",['ctypes.c_uint32', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("Get64",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("GetPtr",['POINTER_T(None)', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("GetBool",['ctypes.c_ubyte', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("GetSize",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("Set8",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'ctypes.c_ubyte'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("Set16",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'ctypes.c_uint16'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("Set32",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'ctypes.c_uint32'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("Set64",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("SetPtr",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'POINTER_T(ctypes.c_uint64)', 'POINTER_T(None)'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("SetBool",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'ctypes.c_ubyte'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("CallbackOnSet",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64))'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("CancelCallback",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64))'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("GetNextToken",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'POINTER_T(ctypes.c_uint64)'])) +struct__EFI_PCD_PROTOCOL._functions_.append(("GetNextTokenSpace",['ctypes.c_uint64', 'POINTER_T(POINTER_T(struct_EFI_GUID))'])) +_EFI_PCD_PROTOCOL = struct__EFI_PCD_PROTOCOL +P_EFI_PCD_PROTOCOL = POINTER_T(struct__EFI_PCD_PROTOCOL) +UINT64 = ctypes.c_uint64 +UINTN = ctypes.c_uint64 +EFI_PCD_PROTOCOL_SET_SKU = POINTER_T(ctypes.CFUNCTYPE(None, ctypes.c_uint64)) +UINT8 = ctypes.c_ubyte +struct_EFI_GUID._pack_ = True # source:False +struct_EFI_GUID._functions_ = [] +struct_EFI_GUID._fields_ = [ + ('Data1', ctypes.c_uint32), + ('Data2', ctypes.c_uint16), + ('Data3', ctypes.c_uint16), + ('Data4', ctypes.c_ubyte * 8), +] + +EFI_GUID = struct_EFI_GUID +PEFI_GUID = POINTER_T(struct_EFI_GUID) +EFI_PCD_PROTOCOL_GET_8 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_ubyte, POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) +UINT16 = ctypes.c_uint16 +EFI_PCD_PROTOCOL_GET_16 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint16, POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) +UINT32 = ctypes.c_uint32 +EFI_PCD_PROTOCOL_GET_32 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint32, POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) +EFI_PCD_PROTOCOL_GET_64 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) +EFI_PCD_PROTOCOL_GET_POINTER = POINTER_T(ctypes.CFUNCTYPE(POINTER_T(None), POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) +BOOLEAN = ctypes.c_ubyte +EFI_PCD_PROTOCOL_GET_BOOLEAN = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_ubyte, POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) +EFI_PCD_PROTOCOL_GET_SIZE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) +RETURN_STATUS = ctypes.c_uint64 +EFI_STATUS = ctypes.c_uint64 +EFI_PCD_PROTOCOL_SET_8 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_ubyte)) +EFI_PCD_PROTOCOL_SET_16 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_uint16)) +EFI_PCD_PROTOCOL_SET_32 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_uint32)) +EFI_PCD_PROTOCOL_SET_64 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_uint64)) +EFI_PCD_PROTOCOL_SET_POINTER = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(None))) +EFI_PCD_PROTOCOL_SET_BOOLEAN = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_ubyte)) +EFI_PCD_PROTOCOL_CALLBACK = POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64)) +EFI_PCD_PROTOCOL_CALLBACK_ON_SET = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64)))) +EFI_PCD_PROTOCOL_CANCEL_CALLBACK = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64)))) +EFI_PCD_PROTOCOL_GET_NEXT_TOKEN = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), POINTER_T(ctypes.c_uint64))) +EFI_PCD_PROTOCOL_GET_NEXT_TOKEN_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(POINTER_T(struct_EFI_GUID)))) +EFI_PCD_PROTOCOL = struct__EFI_PCD_PROTOCOL +__all__ = \ + ['BOOLEAN', 'EFI_GUID', 'EFI_PCD_PROTOCOL', + 'EFI_PCD_PROTOCOL_CALLBACK', 'EFI_PCD_PROTOCOL_CALLBACK_ON_SET', + 'EFI_PCD_PROTOCOL_CANCEL_CALLBACK', 'EFI_PCD_PROTOCOL_GET_16', + 'EFI_PCD_PROTOCOL_GET_32', 'EFI_PCD_PROTOCOL_GET_64', + 'EFI_PCD_PROTOCOL_GET_8', 'EFI_PCD_PROTOCOL_GET_BOOLEAN', + 'EFI_PCD_PROTOCOL_GET_NEXT_TOKEN', + 'EFI_PCD_PROTOCOL_GET_NEXT_TOKEN_SPACE', + 'EFI_PCD_PROTOCOL_GET_POINTER', 'EFI_PCD_PROTOCOL_GET_SIZE', + 'EFI_PCD_PROTOCOL_SET_16', 'EFI_PCD_PROTOCOL_SET_32', + 'EFI_PCD_PROTOCOL_SET_64', 'EFI_PCD_PROTOCOL_SET_8', + 'EFI_PCD_PROTOCOL_SET_BOOLEAN', 'EFI_PCD_PROTOCOL_SET_POINTER', + 'EFI_PCD_PROTOCOL_SET_SKU', 'EFI_STATUS', 'PEFI_GUID', + 'P_EFI_PCD_PROTOCOL', 'RETURN_STATUS', 'UINT16', 'UINT32', + 'UINT64', 'UINT8', 'UINTN', '_EFI_PCD_PROTOCOL', 'byte', 'dword', + 'qword', 'struct_EFI_GUID', 'struct__EFI_PCD_PROTOCOL', 'uchar', + 'uint', 'ulong', 'ulonglong', 'undefined', 'undefined1', + 'undefined2', 'undefined4', 'ushort', 'word'] diff --git a/qiling/profiles/uefi.ql b/qiling/profiles/uefi.ql index 480062db3..8d2e8137b 100644 --- a/qiling/profiles/uefi.ql +++ b/qiling/profiles/uefi.ql @@ -31,6 +31,9 @@ vendortable = 0xffffffffffffffff guid = 5b1b31a1-9562-11d2-8e3f-00a0c969723b revision = 0x1000 +[EFI_PCD_PROTOCOL] +guid = 13a3f0f6-264a-3ef0-f2e0-dec512342f34 + [KERNEL] pid = 1996 From 57d7318a384f78ec32d56ca766c7e57fb4ee871c Mon Sep 17 00:00:00 2001 From: Itai Liba Date: Thu, 25 Jun 2020 20:00:35 -0700 Subject: [PATCH 28/86] Adding EfiDxeServicesTable support. --- qiling/loader/pe_uefi.py | 40 +++- qiling/os/uefi/dxe_service.py | 209 +++++++++++++++++++ qiling/os/uefi/dxe_service_type64.py | 292 +++++++++++++++++++++++++++ qiling/profiles/uefi.ql | 11 +- 4 files changed, 540 insertions(+), 12 deletions(-) create mode 100644 qiling/os/uefi/dxe_service.py create mode 100644 qiling/os/uefi/dxe_service_type64.py diff --git a/qiling/loader/pe_uefi.py b/qiling/loader/pe_uefi.py index b08f6f391..10611c5b8 100644 --- a/qiling/loader/pe_uefi.py +++ b/qiling/loader/pe_uefi.py @@ -19,6 +19,7 @@ from qiling.os.uefi.bootup import * from qiling.os.uefi.runtime import * from qiling.os.uefi.pcd_protocol import * +from qiling.os.uefi.dxe_service import * from qiling.os.windows.fncc import * @@ -198,39 +199,58 @@ def run(self): self.efi_configuration_table_ptr = system_table_heap_ptr system_table.ConfigurationTable = self.efi_configuration_table_ptr - system_table.NumberOfTableEntries = 1 + system_table.NumberOfTableEntries = 2 system_table_heap_ptr += ctypes.sizeof(EFI_CONFIGURATION_TABLE) * 100 # We don't expect more then a few entries. efi_configuration_table = EFI_CONFIGURATION_TABLE() # 0x7739f24c, 0x93d7, 0x11d4, {0x9a, 0x3a, 0x0, 0x90, 0x27, 0x3f, 0xc1, 0x4d } \ - efi_configuration_table.VendorGuid.Data1 = int(self.ql.os.profile.get("GUID", "data1"), 16) - efi_configuration_table.VendorGuid.Data2 = int(self.ql.os.profile.get("GUID", "data2"), 16) - efi_configuration_table.VendorGuid.Data3 = int(self.ql.os.profile.get("GUID", "data3"), 16) + efi_configuration_table.VendorGuid.Data1 = int(self.ql.os.profile.get("HOB_LIST", "data1"), 16) + efi_configuration_table.VendorGuid.Data2 = int(self.ql.os.profile.get("HOB_LIST", "data2"), 16) + efi_configuration_table.VendorGuid.Data3 = int(self.ql.os.profile.get("HOB_LIST", "data3"), 16) - data4 = ast.literal_eval(self.ql.os.profile.get("GUID", "data4")) + data4 = ast.literal_eval(self.ql.os.profile.get("HOB_LIST", "data4")) datalist = 0 for data4_list in data4: efi_configuration_table.VendorGuid.Data4[datalist] = data4_list datalist += 1 VendorTable_ptr = system_table_heap_ptr - write_int64(self.ql, VendorTable_ptr, int(self.ql.os.profile.get("GUID", "vendortable"),16)) + write_int64(self.ql, VendorTable_ptr, int(self.ql.os.profile.get("HOB_LIST", "vendortable"),16)) system_table_heap_ptr += pointer_size efi_configuration_table.VendorTable = VendorTable_ptr - self.efi_configuration_table = [self.ql.os.profile["GUID"]["configuration_table"]] + self.efi_configuration_table = [self.ql.os.profile["HOB_LIST"]["guid"]] + self.ql.mem.write(self.efi_configuration_table_ptr, convert_struct_to_bytes(efi_configuration_table)) + self.pcd_protocol_ptr = system_table_heap_ptr system_table_heap_ptr += ctypes.sizeof(EFI_PCD_PROTOCOL) system_table_heap_ptr, pcd_protocol = install_EFI_PCD_PROTOCOL(self.ql, system_table_heap_ptr) - self.handle_dict[0] = {self.ql.os.profile.get("EFI_PCD_PROTOCOL", "guid"): self.pcd_protocol_ptr} - # self.handle_dict[0] = {self.ql.os.profile.get("EFI_PCD_PROTOCOL", "guid1"): self.pcd_protocol_ptr} + self.handle_dict[0] = {self.ql.os.profile.get("EFI_PCD_PROTOCOL", "guid"): self.pcd_protocol_ptr} + self.dxe_services_ptr = system_table_heap_ptr + system_table_heap_ptr += ctypes.sizeof(EFI_DXE_SERVICES) + system_table_heap_ptr, dxe_services = install_EFI_DXE_SERVICES(self.ql, system_table_heap_ptr) + efi_configuration_table = EFI_CONFIGURATION_TABLE() + efi_configuration_table.VendorGuid.Data1 = int(self.ql.os.profile.get("DXE_SERVICE_TABLE", "data1"), 16) + efi_configuration_table.VendorGuid.Data2 = int(self.ql.os.profile.get("DXE_SERVICE_TABLE", "data2"), 16) + efi_configuration_table.VendorGuid.Data3 = int(self.ql.os.profile.get("DXE_SERVICE_TABLE", "data3"), 16) + + data4 = ast.literal_eval(self.ql.os.profile.get("DXE_SERVICE_TABLE", "data4")) + datalist = 0 + for data4_list in data4: + efi_configuration_table.VendorGuid.Data4[datalist] = data4_list + datalist += 1 + + efi_configuration_table.VendorTable = self.dxe_services_ptr + self.ql.mem.write(self.efi_configuration_table_ptr + ctypes.sizeof(EFI_CONFIGURATION_TABLE), convert_struct_to_bytes(efi_configuration_table)) + self.efi_configuration_table.append(self.ql.os.profile.get("DXE_SERVICE_TABLE", "guid")) + self.ql.mem.write(runtime_services_ptr, convert_struct_to_bytes(runtime_services)) self.ql.mem.write(boot_services_ptr, convert_struct_to_bytes(boot_services)) - self.ql.mem.write(self.efi_configuration_table_ptr, convert_struct_to_bytes(efi_configuration_table)) self.ql.mem.write(self.system_table_ptr, convert_struct_to_bytes(system_table)) self.ql.mem.write(self.pcd_protocol_ptr, convert_struct_to_bytes(pcd_protocol)) + self.ql.mem.write(self.dxe_services_ptr, convert_struct_to_bytes(dxe_services)) for dependency in self.ql.argv: if not self.map_and_load(dependency): diff --git a/qiling/os/uefi/dxe_service.py b/qiling/os/uefi/dxe_service.py new file mode 100644 index 000000000..1bace88fe --- /dev/null +++ b/qiling/os/uefi/dxe_service.py @@ -0,0 +1,209 @@ +from qiling.const import * +from qiling.os.const import * +from .const import * +from .utils import * +from .dxe_service_type64 import * +from .fncc import * + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, + "a3": ULONGLONG, +}) +def hook_AddMemorySpace(ctx, address, params): + return EFI_OUT_OF_RESOURCES + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, + "a3": ULONGLONG, + "a4": POINTER, #POINTER_T(ctypes.c_uint64) + "a5": POINTER, #POINTER_T(None) + "a6": POINTER, #POINTER_T(None) +}) +def hook_AllocateMemorySpace(ctx, address, params): + return EFI_OUT_OF_RESOURCES + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, +}) +def hook_FreeMemorySpace(ctx, address, params): + return EFI_SUCCESS + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, +}) +def hook_RemoveMemorySpace(ctx, address, params): + return EFI_SUCCESS + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": POINTER, #POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR) +}) +def hook_GetMemorySpaceDescriptor(ctx, address, params): + return EFI_UNSUPPORTED + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, +}) +def hook_SetMemorySpaceAttributes(ctx, address, params): + return EFI_UNSUPPORTED + +@dxeapi(params={ + "a0": POINTER, #POINTER_T(ctypes.c_uint64) + "a1": POINTER, #POINTER_T(POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR)) +}) +def hook_GetMemorySpaceMap(ctx, address, params): + return EFI_UNSUPPORTED + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, +}) +def hook_AddIoSpace(ctx, address, params): + return EFI_OUT_OF_RESOURCES + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, + "a3": ULONGLONG, + "a4": POINTER, #POINTER_T(ctypes.c_uint64) + "a5": POINTER, #POINTER_T(None) + "a6": POINTER, #POINTER_T(None) +}) +def hook_AllocateIoSpace(ctx, address, params): + return EFI_OUT_OF_RESOURCES + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, +}) +def hook_FreeIoSpace(ctx, address, params): + return EFI_SUCCESS + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, +}) +def hook_RemoveIoSpace(ctx, address, params): + return EFI_SUCCESS + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": POINTER, #POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR) +}) +def hook_GetIoSpaceDescriptor(ctx, address, params): + return EFI_NOT_FOUND + +@dxeapi(params={ + "a0": POINTER, #POINTER_T(ctypes.c_uint64) + "a1": POINTER, #POINTER_T(POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR)) +}) +def hook_GetIoSpaceMap(ctx, address, params): + return EFI_OUT_OF_RESOURCES + +@dxeapi(params={ +}) +def hook_Dispatch(ctx, address, params): + return EFI_SUCCESS + +@dxeapi(params={ + "a0": POINTER, #POINTER_T(None) + "a1": GUID, +}) +def hook_Schedule(ctx, address, params): + return EFI_SUCCESS + +@dxeapi(params={ + "a0": POINTER, #POINTER_T(None) + "a1": GUID, +}) +def hook_Trust(ctx, address, params): + return EFI_NOT_FOUND + +@dxeapi(params={ + "a0": POINTER, #POINTER_T(None) + "a1": ULONGLONG, + "a2": POINTER, #POINTER_T(POINTER_T(None)) +}) +def hook_ProcessFirmwareVolume(ctx, address, params): + return EFI_OUT_OF_RESOURCES + +@dxeapi(params={ + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, +}) +def hook_SetMemorySpaceCapabilities(ctx, address, params): + return EFI_UNSUPPORTED + + + +def install_EFI_DXE_SERVICES(ql, start_ptr): + efi_dxe_services = EFI_DXE_SERVICES() + ptr = start_ptr + pointer_size = 8 + efi_dxe_services.AddMemorySpace = ptr + ql.hook_address(hook_AddMemorySpace, ptr) + ptr += pointer_size + efi_dxe_services.AllocateMemorySpace = ptr + ql.hook_address(hook_AllocateMemorySpace, ptr) + ptr += pointer_size + efi_dxe_services.FreeMemorySpace = ptr + ql.hook_address(hook_FreeMemorySpace, ptr) + ptr += pointer_size + efi_dxe_services.RemoveMemorySpace = ptr + ql.hook_address(hook_RemoveMemorySpace, ptr) + ptr += pointer_size + efi_dxe_services.GetMemorySpaceDescriptor = ptr + ql.hook_address(hook_GetMemorySpaceDescriptor, ptr) + ptr += pointer_size + efi_dxe_services.SetMemorySpaceAttributes = ptr + ql.hook_address(hook_SetMemorySpaceAttributes, ptr) + ptr += pointer_size + efi_dxe_services.GetMemorySpaceMap = ptr + ql.hook_address(hook_GetMemorySpaceMap, ptr) + ptr += pointer_size + efi_dxe_services.AddIoSpace = ptr + ql.hook_address(hook_AddIoSpace, ptr) + ptr += pointer_size + efi_dxe_services.AllocateIoSpace = ptr + ql.hook_address(hook_AllocateIoSpace, ptr) + ptr += pointer_size + efi_dxe_services.FreeIoSpace = ptr + ql.hook_address(hook_FreeIoSpace, ptr) + ptr += pointer_size + efi_dxe_services.RemoveIoSpace = ptr + ql.hook_address(hook_RemoveIoSpace, ptr) + ptr += pointer_size + efi_dxe_services.GetIoSpaceDescriptor = ptr + ql.hook_address(hook_GetIoSpaceDescriptor, ptr) + ptr += pointer_size + efi_dxe_services.GetIoSpaceMap = ptr + ql.hook_address(hook_GetIoSpaceMap, ptr) + ptr += pointer_size + efi_dxe_services.Dispatch = ptr + ql.hook_address(hook_Dispatch, ptr) + ptr += pointer_size + efi_dxe_services.Schedule = ptr + ql.hook_address(hook_Schedule, ptr) + ptr += pointer_size + efi_dxe_services.Trust = ptr + ql.hook_address(hook_Trust, ptr) + ptr += pointer_size + efi_dxe_services.ProcessFirmwareVolume = ptr + ql.hook_address(hook_ProcessFirmwareVolume, ptr) + ptr += pointer_size + efi_dxe_services.SetMemorySpaceCapabilities = ptr + ql.hook_address(hook_SetMemorySpaceCapabilities, ptr) + ptr += pointer_size + return (ptr, efi_dxe_services) + diff --git a/qiling/os/uefi/dxe_service_type64.py b/qiling/os/uefi/dxe_service_type64.py new file mode 100644 index 000000000..a76483667 --- /dev/null +++ b/qiling/os/uefi/dxe_service_type64.py @@ -0,0 +1,292 @@ +# -*- coding: utf-8 -*- +# +# TARGET arch is: [] +# WORD_SIZE is: 8 +# POINTER_SIZE is: 8 +# LONGDOUBLE_SIZE is: 16 +# +import ctypes + + +c_int128 = ctypes.c_ubyte*16 +c_uint128 = c_int128 +void = None +if ctypes.sizeof(ctypes.c_longdouble) == 16: + c_long_double_t = ctypes.c_longdouble +else: + c_long_double_t = ctypes.c_ubyte*16 + +# if local wordsize is same as target, keep ctypes pointer function. +# required to access _ctypes +import _ctypes +# Emulate a pointer class using the approriate c_int32/c_int64 type +# The new class should have : +# ['__module__', 'from_param', '_type_', '__dict__', '__weakref__', '__doc__'] +# but the class should be submitted to a unique instance for each base type +# to that if A == B, POINTER_T(A) == POINTER_T(B) +ctypes._pointer_t_type_cache = {} +def POINTER_T(pointee): + # a pointer should have the same length as LONG + fake_ptr_base_type = ctypes.c_uint64 + # specific case for c_void_p + if pointee is None: # VOID pointer type. c_void_p. + pointee = type(None) # ctypes.c_void_p # ctypes.c_ulong + clsname = 'c_void' + else: + clsname = pointee.__name__ + if clsname in ctypes._pointer_t_type_cache: + return ctypes._pointer_t_type_cache[clsname] + # make template + _class = type('LP_%d_%s'%(8, clsname), (fake_ptr_base_type,),{}) + ctypes._pointer_t_type_cache[clsname] = _class + return _class + + + +undefined = ctypes.c_ubyte +ImageBaseOffset32 = ctypes.c_uint32 +byte = ctypes.c_ubyte +dword = ctypes.c_uint32 +longlong = ctypes.c_int64 +qword = ctypes.c_uint64 +uchar = ctypes.c_ubyte +uint = ctypes.c_uint32 +ulong = ctypes.c_uint64 +ulonglong = ctypes.c_uint64 +undefined1 = ctypes.c_ubyte +undefined4 = ctypes.c_uint32 +undefined8 = ctypes.c_uint64 +ushort = ctypes.c_uint16 +word = ctypes.c_uint16 +class struct_DXE_SERVICES(ctypes.Structure): + pass + +class struct_EFI_TABLE_HEADER(ctypes.Structure): + _pack_ = True # source:False + _functions_ = [] + _fields_ = [ + ('Signature', ctypes.c_uint64), + ('Revision', ctypes.c_uint32), + ('HeaderSize', ctypes.c_uint32), + ('CRC32', ctypes.c_uint32), + ('Reserved', ctypes.c_uint32), + ] + + +# values for enumeration 'enum_852' +enum_852__enumvalues = { + 7: 'EfiGcdMemoryTypeMaximum', + 3: 'EfiGcdMemoryTypeMemoryMappedIo', + 6: 'EfiGcdMemoryTypeMoreReliable', + 0: 'EfiGcdMemoryTypeNonExistent', + 4: 'EfiGcdMemoryTypePersistent', + 5: 'EfiGcdMemoryTypePersistentMemory', + 1: 'EfiGcdMemoryTypeReserved', + 2: 'EfiGcdMemoryTypeSystemMemory', +} +EfiGcdMemoryTypeMaximum = 7 +EfiGcdMemoryTypeMemoryMappedIo = 3 +EfiGcdMemoryTypeMoreReliable = 6 +EfiGcdMemoryTypeNonExistent = 0 +EfiGcdMemoryTypePersistent = 4 +EfiGcdMemoryTypePersistentMemory = 5 +EfiGcdMemoryTypeReserved = 1 +EfiGcdMemoryTypeSystemMemory = 2 +enum_852 = ctypes.c_int # enum +class struct_EFI_GCD_IO_SPACE_DESCRIPTOR(ctypes.Structure): + pass + +class struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR(ctypes.Structure): + pass + +class struct_GUID(ctypes.Structure): + pass + + +# values for enumeration 'enum_853' +enum_853__enumvalues = { + 2: 'EfiGcdIoTypeIo', + 3: 'EfiGcdIoTypeMaximum', + 0: 'EfiGcdIoTypeNonExistent', + 1: 'EfiGcdIoTypeReserved', +} +EfiGcdIoTypeIo = 2 +EfiGcdIoTypeMaximum = 3 +EfiGcdIoTypeNonExistent = 0 +EfiGcdIoTypeReserved = 1 +enum_853 = ctypes.c_int # enum + +# values for enumeration 'enum_854' +enum_854__enumvalues = { + 2: 'EfiGcdAllocateAddress', + 0: 'EfiGcdAllocateAnySearchBottomUp', + 3: 'EfiGcdAllocateAnySearchTopDown', + 1: 'EfiGcdAllocateMaxAddressSearchBottomUp', + 4: 'EfiGcdAllocateMaxAddressSearchTopDown', + 5: 'EfiGcdMaxAllocateType', +} +EfiGcdAllocateAddress = 2 +EfiGcdAllocateAnySearchBottomUp = 0 +EfiGcdAllocateAnySearchTopDown = 3 +EfiGcdAllocateMaxAddressSearchBottomUp = 1 +EfiGcdAllocateMaxAddressSearchTopDown = 4 +EfiGcdMaxAllocateType = 5 +enum_854 = ctypes.c_int # enum +struct_DXE_SERVICES._pack_ = True # source:False +struct_DXE_SERVICES._functions_ = [] +struct_DXE_SERVICES._fields_ = [ + ('Hdr', struct_EFI_TABLE_HEADER), + ('AddMemorySpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_852, ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('AllocateMemorySpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_854, enum_852, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(None), POINTER_T(None)))), + ('FreeMemorySpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('RemoveMemorySpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('GetMemorySpaceDescriptor', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR)))), + ('SetMemorySpaceAttributes', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('GetMemorySpaceMap', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR))))), + ('AddIoSpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_853, ctypes.c_uint64, ctypes.c_uint64))), + ('AllocateIoSpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_854, enum_853, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(None), POINTER_T(None)))), + ('FreeIoSpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('RemoveIoSpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('GetIoSpaceDescriptor', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR)))), + ('GetIoSpaceMap', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR))))), + ('Dispatch', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64))), + ('Schedule', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID)))), + ('Trust', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID)))), + ('ProcessFirmwareVolume', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64, POINTER_T(POINTER_T(None))))), + ('SetMemorySpaceCapabilities', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), +] + +struct_DXE_SERVICES._functions_.append(("AddMemorySpace",['ctypes.c_uint64', 'enum_852', 'ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("AllocateMemorySpace",['ctypes.c_uint64', 'enum_854', 'enum_852', 'ctypes.c_uint64', 'ctypes.c_uint64', 'POINTER_T(ctypes.c_uint64)', 'POINTER_T(None)', 'POINTER_T(None)'])) +struct_DXE_SERVICES._functions_.append(("FreeMemorySpace",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("RemoveMemorySpace",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("GetMemorySpaceDescriptor",['ctypes.c_uint64', 'ctypes.c_uint64', 'POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR)'])) +struct_DXE_SERVICES._functions_.append(("SetMemorySpaceAttributes",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("GetMemorySpaceMap",['ctypes.c_uint64', 'POINTER_T(ctypes.c_uint64)', 'POINTER_T(POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR))'])) +struct_DXE_SERVICES._functions_.append(("AddIoSpace",['ctypes.c_uint64', 'enum_853', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("AllocateIoSpace",['ctypes.c_uint64', 'enum_854', 'enum_853', 'ctypes.c_uint64', 'ctypes.c_uint64', 'POINTER_T(ctypes.c_uint64)', 'POINTER_T(None)', 'POINTER_T(None)'])) +struct_DXE_SERVICES._functions_.append(("FreeIoSpace",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("RemoveIoSpace",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("GetIoSpaceDescriptor",['ctypes.c_uint64', 'ctypes.c_uint64', 'POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR)'])) +struct_DXE_SERVICES._functions_.append(("GetIoSpaceMap",['ctypes.c_uint64', 'POINTER_T(ctypes.c_uint64)', 'POINTER_T(POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR))'])) +struct_DXE_SERVICES._functions_.append(("Dispatch",['ctypes.c_uint64'])) +struct_DXE_SERVICES._functions_.append(("Schedule",['ctypes.c_uint64', 'POINTER_T(None)', 'POINTER_T(struct_GUID)'])) +struct_DXE_SERVICES._functions_.append(("Trust",['ctypes.c_uint64', 'POINTER_T(None)', 'POINTER_T(struct_GUID)'])) +struct_DXE_SERVICES._functions_.append(("ProcessFirmwareVolume",['ctypes.c_uint64', 'POINTER_T(None)', 'ctypes.c_uint64', 'POINTER_T(POINTER_T(None))'])) +struct_DXE_SERVICES._functions_.append(("SetMemorySpaceCapabilities",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +DXE_SERVICES = struct_DXE_SERVICES +PDXE_SERVICES = POINTER_T(struct_DXE_SERVICES) +EFI_DXE_SERVICES = struct_DXE_SERVICES +EFI_TABLE_HEADER = struct_EFI_TABLE_HEADER +PEFI_TABLE_HEADER = POINTER_T(struct_EFI_TABLE_HEADER) +UINT64 = ctypes.c_uint64 +UINTN = ctypes.c_uint64 +RETURN_STATUS = ctypes.c_uint64 +EFI_STATUS = ctypes.c_uint64 +EFI_GCD_MEMORY_TYPE = enum_852 +EFI_GCD_MEMORY_TYPE__enumvalues = enum_852__enumvalues +EFI_PHYSICAL_ADDRESS = ctypes.c_uint64 +EFI_ADD_MEMORY_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_852, ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +EFI_GCD_ALLOCATE_TYPE = enum_854 +EFI_GCD_ALLOCATE_TYPE__enumvalues = enum_854__enumvalues +EFI_HANDLE = POINTER_T(None) +EFI_ALLOCATE_MEMORY_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_854, enum_852, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(None), POINTER_T(None))) +EFI_FREE_MEMORY_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +EFI_REMOVE_MEMORY_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR._pack_ = True # source:False +struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR._functions_ = [] +struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR._fields_ = [ + ('BaseAddress', ctypes.c_uint64), + ('Length', ctypes.c_uint64), + ('Capabilities', ctypes.c_uint64), + ('Attributes', ctypes.c_uint64), + ('GcdMemoryType', EFI_GCD_MEMORY_TYPE), + ('PADDING_0', ctypes.c_ubyte * 4), + ('ImageHandle', POINTER_T(None)), + ('DeviceHandle', POINTER_T(None)), +] + +EFI_GCD_MEMORY_SPACE_DESCRIPTOR = struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR +PEFI_GCD_MEMORY_SPACE_DESCRIPTOR = POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR) +EFI_GET_MEMORY_SPACE_DESCRIPTOR = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR))) +EFI_SET_MEMORY_SPACE_ATTRIBUTES = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +EFI_GET_MEMORY_SPACE_MAP = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR)))) +EFI_GCD_IO_TYPE = enum_853 +EFI_GCD_IO_TYPE__enumvalues = enum_853__enumvalues +EFI_ADD_IO_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_853, ctypes.c_uint64, ctypes.c_uint64)) +EFI_ALLOCATE_IO_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_854, enum_853, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(None), POINTER_T(None))) +EFI_FREE_IO_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +EFI_REMOVE_IO_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +PEFI_GCD_IO_SPACE_DESCRIPTOR = POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR) +struct_EFI_GCD_IO_SPACE_DESCRIPTOR._pack_ = True # source:False +struct_EFI_GCD_IO_SPACE_DESCRIPTOR._functions_ = [] +struct_EFI_GCD_IO_SPACE_DESCRIPTOR._fields_ = [ + ('BaseAddress', ctypes.c_uint64), + ('Length', ctypes.c_uint64), + ('GcdIoType', EFI_GCD_IO_TYPE), + ('PADDING_0', ctypes.c_ubyte * 4), + ('ImageHandle', POINTER_T(None)), + ('DeviceHandle', POINTER_T(None)), +] + +EFI_GCD_IO_SPACE_DESCRIPTOR = struct_EFI_GCD_IO_SPACE_DESCRIPTOR +EFI_GET_IO_SPACE_DESCRIPTOR = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR))) +EFI_GET_IO_SPACE_MAP = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR)))) +EFI_DISPATCH = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64)) +struct_GUID._pack_ = True # source:False +struct_GUID._functions_ = [] +struct_GUID._fields_ = [ + ('Data1', ctypes.c_uint32), + ('Data2', ctypes.c_uint16), + ('Data3', ctypes.c_uint16), + ('Data4', ctypes.c_ubyte * 8), +] + +GUID = struct_GUID +PGUID = POINTER_T(struct_GUID) +EFI_GUID = struct_GUID +EFI_SCHEDULE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID))) +EFI_TRUST = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID))) +EFI_PROCESS_FIRMWARE_VOLUME = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64, POINTER_T(POINTER_T(None)))) +EFI_SET_MEMORY_SPACE_CAPABILITIES = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +UINT32 = ctypes.c_uint32 +UINT16 = ctypes.c_uint16 +UINT8 = ctypes.c_ubyte +__all__ = \ + ['DXE_SERVICES', 'EFI_ADD_IO_SPACE', 'EFI_ADD_MEMORY_SPACE', + 'EFI_ALLOCATE_IO_SPACE', 'EFI_ALLOCATE_MEMORY_SPACE', + 'EFI_DISPATCH', 'EFI_DXE_SERVICES', 'EFI_FREE_IO_SPACE', + 'EFI_FREE_MEMORY_SPACE', 'EFI_GCD_ALLOCATE_TYPE', + 'EFI_GCD_ALLOCATE_TYPE__enumvalues', + 'EFI_GCD_IO_SPACE_DESCRIPTOR', 'EFI_GCD_IO_TYPE', + 'EFI_GCD_IO_TYPE__enumvalues', 'EFI_GCD_MEMORY_SPACE_DESCRIPTOR', + 'EFI_GCD_MEMORY_TYPE', 'EFI_GCD_MEMORY_TYPE__enumvalues', + 'EFI_GET_IO_SPACE_DESCRIPTOR', 'EFI_GET_IO_SPACE_MAP', + 'EFI_GET_MEMORY_SPACE_DESCRIPTOR', 'EFI_GET_MEMORY_SPACE_MAP', + 'EFI_GUID', 'EFI_HANDLE', 'EFI_PHYSICAL_ADDRESS', + 'EFI_PROCESS_FIRMWARE_VOLUME', 'EFI_REMOVE_IO_SPACE', + 'EFI_REMOVE_MEMORY_SPACE', 'EFI_SCHEDULE', + 'EFI_SET_MEMORY_SPACE_ATTRIBUTES', + 'EFI_SET_MEMORY_SPACE_CAPABILITIES', 'EFI_STATUS', + 'EFI_TABLE_HEADER', 'EFI_TRUST', 'EfiGcdAllocateAddress', + 'EfiGcdAllocateAnySearchBottomUp', + 'EfiGcdAllocateAnySearchTopDown', + 'EfiGcdAllocateMaxAddressSearchBottomUp', + 'EfiGcdAllocateMaxAddressSearchTopDown', 'EfiGcdIoTypeIo', + 'EfiGcdIoTypeMaximum', 'EfiGcdIoTypeNonExistent', + 'EfiGcdIoTypeReserved', 'EfiGcdMaxAllocateType', + 'EfiGcdMemoryTypeMaximum', 'EfiGcdMemoryTypeMemoryMappedIo', + 'EfiGcdMemoryTypeMoreReliable', 'EfiGcdMemoryTypeNonExistent', + 'EfiGcdMemoryTypePersistent', 'EfiGcdMemoryTypePersistentMemory', + 'EfiGcdMemoryTypeReserved', 'EfiGcdMemoryTypeSystemMemory', + 'GUID', 'ImageBaseOffset32', 'PDXE_SERVICES', + 'PEFI_GCD_IO_SPACE_DESCRIPTOR', + 'PEFI_GCD_MEMORY_SPACE_DESCRIPTOR', 'PEFI_TABLE_HEADER', 'PGUID', + 'RETURN_STATUS', 'UINT16', 'UINT32', 'UINT64', 'UINT8', 'UINTN', + 'byte', 'dword', 'enum_852', 'enum_853', 'enum_854', 'longlong', + 'qword', 'struct_DXE_SERVICES', + 'struct_EFI_GCD_IO_SPACE_DESCRIPTOR', + 'struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR', + 'struct_EFI_TABLE_HEADER', 'struct_GUID', 'uchar', 'uint', + 'ulong', 'ulonglong', 'undefined', 'undefined1', 'undefined4', + 'undefined8', 'ushort', 'word'] diff --git a/qiling/profiles/uefi.ql b/qiling/profiles/uefi.ql index 8d2e8137b..b8725c62b 100644 --- a/qiling/profiles/uefi.ql +++ b/qiling/profiles/uefi.ql @@ -18,15 +18,22 @@ dll_address = 0x10000000 entry_point = 0x40000 -[GUID] +[HOB_LIST] # EFI_GLOBAL_VARIABLE -configuration_table = 7739f24c-93d7-11d4-9a3a-0090273fc14d +guid = 7739f24c-93d7-11d4-9a3a-0090273fc14d data1 = 0x7739f24c data2 = 0x93d7 data3 = 0x11d4 data4 = [0x9a, 0x3a, 0x0, 0x90, 0x27, 0x3f, 0xc1, 0x4d] vendortable = 0xffffffffffffffff +[DXE_SERVICE_TABLE] +guid = 05ad34ba-6f02-4214-952e-4da0398e2bb9 +data1 = 0x05AD34BA +data2 = 0x6F02 +data3 = 0x4214 +data4 = [0x95, 0x2E, 0x4D, 0xA0, 0x39, 0x8E, 0x2B, 0xB9] + [LOADED_IMAGE_PROTOCOL] guid = 5b1b31a1-9562-11d2-8e3f-00a0c969723b revision = 0x1000 From f3d49c4dc638d9cb9b2d0b0b75fa10c52455dc18 Mon Sep 17 00:00:00 2001 From: xwings Date: Fri, 26 Jun 2020 18:14:10 +0800 Subject: [PATCH 29/86] bump to dev --- qiling/core.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qiling/core.py b/qiling/core.py index d054c5be2..c6292dc3d 100644 --- a/qiling/core.py +++ b/qiling/core.py @@ -18,7 +18,7 @@ from .core_utils import QLCoreUtils from .extensions.debugger import ql_debugger_init -__version__ = "1.1" + "-alpha2" +__version__ = "1.1" + "-dev" class Qiling(QLCoreStructs, QLCoreHooks, QLCoreUtils): def __init__( From 85301de4fa629fba9317d669f4535b8c66b22002 Mon Sep 17 00:00:00 2001 From: chfl4gs Date: Fri, 26 Jun 2020 18:34:04 +0800 Subject: [PATCH 30/86] fixing pypi packaging --- .github/workflows/pythonpublish.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/pythonpublish.yml b/.github/workflows/pythonpublish.yml index 38260d22b..053e474c8 100644 --- a/.github/workflows/pythonpublish.yml +++ b/.github/workflows/pythonpublish.yml @@ -28,5 +28,6 @@ jobs: TWINE_USERNAME: __token__ TWINE_PASSWORD: ${{ secrets.pypi_pass }} run: | + pip install -r requirements.txt python setup.py sdist bdist_wheel twine upload dist/* From cddaf6a04f8dd38f199377462b697c939f6268a5 Mon Sep 17 00:00:00 2001 From: xwings Date: Fri, 26 Jun 2020 20:52:00 +0800 Subject: [PATCH 31/86] making sure travis works --- .github/workflows/pythonpublish.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/pythonpublish.yml b/.github/workflows/pythonpublish.yml index 38260d22b..71e84b010 100644 --- a/.github/workflows/pythonpublish.yml +++ b/.github/workflows/pythonpublish.yml @@ -28,5 +28,6 @@ jobs: TWINE_USERNAME: __token__ TWINE_PASSWORD: ${{ secrets.pypi_pass }} run: | + pip install -r requirements.txt python setup.py sdist bdist_wheel twine upload dist/* From 24b6145ae878ab5b9274ef3dae783e5ca408bca5 Mon Sep 17 00:00:00 2001 From: chfl4gs <55137784+chfl4gs@users.noreply.github.com> Date: Fri, 26 Jun 2020 22:17:06 +0800 Subject: [PATCH 32/86] Updating pypi workflow (#356) --- .github/workflows/pythonpublish.yml | 50 ++++++++++++++++++----------- 1 file changed, 32 insertions(+), 18 deletions(-) diff --git a/.github/workflows/pythonpublish.yml b/.github/workflows/pythonpublish.yml index 053e474c8..fbdc3cd02 100644 --- a/.github/workflows/pythonpublish.yml +++ b/.github/workflows/pythonpublish.yml @@ -1,18 +1,10 @@ -# This workflows will upload a Python Package using Twine when a release is created -# For more information see: https://help.github.com/en/actions/language-and-framework-guides/using-python-with-github-actions#publishing-to-package-registries +name: PyPI 📦 Distribution -name: Upload Python Package - -on: - push: - tags: - - '*' +on: [push] jobs: - deploy: - + build: runs-on: ubuntu-latest - steps: - uses: actions/checkout@v2 - name: Set up Python @@ -21,13 +13,35 @@ jobs: python-version: '3.x' - name: Install dependencies run: | - python -m pip install --upgrade pip - pip install setuptools wheel twine - - name: Build and publish - env: - TWINE_USERNAME: __token__ - TWINE_PASSWORD: ${{ secrets.pypi_pass }} + pip install setuptools wheel + - name: Build distribution 📦 run: | pip install -r requirements.txt python setup.py sdist bdist_wheel - twine upload dist/* + - uses: actions/upload-artifact@v2 + with: + path: ${{ github.workspace }}/dist/* + + publish: + needs: [build] + runs-on: ubuntu-latest + if: startsWith(github.ref, 'refs/tags') + steps: + - uses: actions/download-artifact@v2 + with: + name: artifact + path: dist + + - name: Publish distribution 📦 to test PyPI + uses: pypa/gh-action-pypi-publish@master + with: + user: __token__ + password: ${{ secrets.testpypi_pass }} + repository_url: https://test.pypi.org/legacy/ + + - name: Publish distribution 📦 to PyPI + if: ${{ success() }} + uses: pypa/gh-action-pypi-publish@master + with: + user: __token__ + password: ${{ secrets.pypi_pass }} From c426bbff4348f4f183c6b713b91418ac643180c0 Mon Sep 17 00:00:00 2001 From: chfl4gs Date: Fri, 26 Jun 2020 22:49:11 +0800 Subject: [PATCH 33/86] Fixing README.md links --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 7af8f1d90..c00c7c354 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ ---

- +

Qiling is an advanced binary emulation framework, with the following features: @@ -27,7 +27,7 @@ Visit our website https://www.qiling.io for more information. #### License -This project is released and distributed under [free software license GPLv2](COPYING). +This project is released and distributed under [free software license GPLv2](https://github.com/qilingframework/qiling/blob/master/COPYING). --- From 6a68a24a11fd7ad4f4ce3ceec1cb245aef2f5381 Mon Sep 17 00:00:00 2001 From: xwings Date: Sat, 27 Jun 2020 07:56:29 +0800 Subject: [PATCH 34/86] CREDITS.TXT: move chflags to new place --- CREDITS.TXT | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/CREDITS.TXT b/CREDITS.TXT index a807d0794..c86d3111f 100644 --- a/CREDITS.TXT +++ b/CREDITS.TXT @@ -8,6 +8,10 @@ Advisor ======= NGUYEN Anh Quynh +Travis, Website and Documentations +================================== +FOO Kevin (chfl4gs) + Core Developers =============== DING tianze (D1iv3) @@ -18,7 +22,6 @@ Earl MARCUS (klks84) klks84@gmail.com Key Contributors (in no particular order) ========================================= -FOO Kevin (chfl4gs) kabeor 0ssigeno liba2k From 4f822a46ece96b631f33735710d243608ab470ae Mon Sep 17 00:00:00 2001 From: chfl4gs Date: Sat, 27 Jun 2020 15:11:38 +0800 Subject: [PATCH 35/86] Updating README.md --- README.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/README.md b/README.md index c00c7c354..c8c6733d3 100644 --- a/README.md +++ b/README.md @@ -200,4 +200,14 @@ Contact us at email info@qiling.io, or via Twitter [@qiling_io](https://twitter. - Earl Marcus (klks84) klks84@gmail.com #### Travis-CI, Docker and Website + - FOO Kevin (chfl4gs) + +#### Key Contributors (in no particular order) + +- kabeor +- 0ssigeno +- liba2k +- assaf_carlsba +- ucgJhe +- jhumble From 0771b9fe588def415bee18d62d9c7c6e695f3e2f Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Sun, 28 Jun 2020 11:23:40 +0800 Subject: [PATCH 36/86] optimization winsdkapi --- .../windows_sdk/defs/msvcrt_dll.json | 6030 +++++++++++++++++ qiling/os/windows/dlls/advapi32.py | 4 +- qiling/os/windows/dlls/crypt32.py | 4 +- .../os/windows/dlls/kernel32/consoleapi2.py | 7 +- .../os/windows/dlls/kernel32/consoleapi3.py | 3 +- .../windows/dlls/kernel32/errhandlingapi.py | 6 +- qiling/os/windows/dlls/kernel32/fibersapi.py | 6 +- qiling/os/windows/dlls/kernel32/fileapi.py | 10 +- qiling/os/windows/dlls/kernel32/handleapi.py | 4 +- qiling/os/windows/dlls/kernel32/heapapi.py | 2 +- .../os/windows/dlls/kernel32/libloaderapi.py | 16 +- qiling/os/windows/dlls/kernel32/memoryapi.py | 4 +- qiling/os/windows/dlls/kernel32/processenv.py | 2 +- .../dlls/kernel32/processthreadsapi.py | 14 +- .../os/windows/dlls/kernel32/stringapiset.py | 4 +- qiling/os/windows/dlls/kernel32/synchapi.py | 4 +- qiling/os/windows/dlls/kernel32/winbase.py | 8 +- qiling/os/windows/dlls/kernel32/winnls.py | 4 +- qiling/os/windows/dlls/kernel32/winnt.py | 8 +- qiling/os/windows/dlls/mscoree.py | 2 +- qiling/os/windows/dlls/msvcrt.py | 62 +- qiling/os/windows/dlls/ntdll.py | 16 +- qiling/os/windows/dlls/ntoskrnl.py | 6 +- qiling/os/windows/dlls/shell32.py | 2 +- qiling/os/windows/dlls/user32.py | 34 +- qiling/os/windows/dlls/wininet.py | 6 +- qiling/os/windows/dlls/wsock32.py | 4 +- qiling/os/windows/dlls/wudplatform.py | 1 - qiling/os/windows/fncc.py | 75 +- tests/test_pe.py | 2 +- 30 files changed, 6199 insertions(+), 151 deletions(-) create mode 100644 qiling/extensions/windows_sdk/defs/msvcrt_dll.json diff --git a/qiling/extensions/windows_sdk/defs/msvcrt_dll.json b/qiling/extensions/windows_sdk/defs/msvcrt_dll.json new file mode 100644 index 000000000..43d7a0242 --- /dev/null +++ b/qiling/extensions/windows_sdk/defs/msvcrt_dll.json @@ -0,0 +1,6030 @@ +{ + "_CrtCheckMemory": [ + { + "name": "param1", + "type": "" + } + ], + "_CrtDbgReport": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_CrtDumpMemoryLeaks": [ + { + "name": "param1", + "type": "" + } + ], + "_CrtSetBreakAlloc": [ + { + "name": "param1", + "type": "INT" + } + ], + "_CrtSetDbgFlag": [ + { + "name": "param1", + "type": "INT" + } + ], + "_CrtSetDumpClient": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_CrtSetReportHook": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_CrtSetReportMode": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_CxxThrowException": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_EH_prolog": [ + { + "name": "param1", + "type": "" + } + ], + "_Getdays": [ + { + "name": "param1", + "type": "" + } + ], + "_Getmonths": [ + { + "name": "param1", + "type": "" + } + ], + "_Gettnames": [ + { + "name": "param1", + "type": "" + } + ], + "_Strftime": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_XcptFilter": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "__CxxFrameHandler": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "__CxxLongjmpUnwind": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "__RTCastToVoid": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "__RTDynamicCast": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "INT" + } + ], + "__RTtypeid": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "__STRINGTOLD": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "INT" + } + ], + "___mb_cur_max_func": [ + { + "name": "param1", + "type": "" + } + ], + "__crtCompareStringA": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "INT" + }, + { + "name": "param5", + "type": "STRING" + }, + { + "name": "param6", + "type": "INT" + } + ], + "__crtGetLocaleInfoW": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "INT" + } + ], + "__crtLCMapStringA": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "INT" + }, + { + "name": "param5", + "type": "POINTER" + }, + { + "name": "param6", + "type": "INT" + }, + { + "name": "param7", + "type": "INT" + }, + { + "name": "param8", + "type": "INT" + } + ], + "__dllonexit": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "__doserrno": [ + { + "name": "param1", + "type": "" + } + ], + "__fpecode": [ + { + "name": "param1", + "type": "" + } + ], + "__getmainargs": [ + { + "name": "_Argc", + "type": "int" + }, + { + "name": "_Argv", + "type": "char" + }, + { + "name": "_Env", + "type": "char" + }, + { + "name": "_DoWildCard", + "type": "int" + }, + { + "name": "_StartInfo", + "type": "POINTER" + } + ], + "__isascii": [ + { + "name": "param1", + "type": "INT" + } + ], + "__iscsym": [ + { + "name": "param1", + "type": "INT" + } + ], + "__iscsymf": [ + { + "name": "param1", + "type": "INT" + } + ], + "__lconv_init": [ + { + "name": "param1", + "type": "" + } + ], + "__p___argc": [ + { + "name": "param1", + "type": "" + } + ], + "__p___argv": [ + { + "name": "param1", + "type": "" + } + ], + "__p___initenv": [ + { + "name": "param1", + "type": "" + } + ], + "__p___mb_cur_max": [ + { + "name": "param1", + "type": "" + } + ], + "__p___wargv": [ + { + "name": "param1", + "type": "" + } + ], + "__p___winitenv": [ + { + "name": "param1", + "type": "" + } + ], + "__p__acmdln": [ + { + "name": "param1", + "type": "" + } + ], + "__p__amblksiz": [ + { + "name": "param1", + "type": "" + } + ], + "__p__commode": [ + { + "name": "VOID", + "type": "" + } + ], + "__p__crtAssertBusy": [ + { + "name": "param1", + "type": "" + } + ], + "__p__crtBreakAlloc": [ + { + "name": "param1", + "type": "" + } + ], + "__p__crtDbgFlag": [ + { + "name": "param1", + "type": "" + } + ], + "__p__daylight": [ + { + "name": "param1", + "type": "" + } + ], + "__p__dstbias": [ + { + "name": "param1", + "type": "" + } + ], + "__p__environ": [ + { + "name": "param1", + "type": "" + } + ], + "__p__fmode": [ + { + "name": "VOID", + "type": "" + } + ], + "__p__iob": [ + { + "name": "param1", + "type": "" + } + ], + "__p__mbctype": [ + { + "name": "param1", + "type": "" + } + ], + "__p__osver": [ + { + "name": "param1", + "type": "" + } + ], + "__p__pctype": [ + { + "name": "param1", + "type": "" + } + ], + "__p__pgmptr": [ + { + "name": "param1", + "type": "" + } + ], + "__p__timezone": [ + { + "name": "param1", + "type": "" + } + ], + "__p__tzname": [ + { + "name": "param1", + "type": "" + } + ], + "__p__wcmdln": [ + { + "name": "param1", + "type": "" + } + ], + "__p__wenviron": [ + { + "name": "param1", + "type": "" + } + ], + "__p__winmajor": [ + { + "name": "param1", + "type": "" + } + ], + "__p__winminor": [ + { + "name": "param1", + "type": "" + } + ], + "__p__winver": [ + { + "name": "param1", + "type": "" + } + ], + "__p__wpgmptr": [ + { + "name": "param1", + "type": "" + } + ], + "__pctype_func": [ + { + "name": "param1", + "type": "" + } + ], + "__pxcptinfoptrs": [ + { + "name": "param1", + "type": "" + } + ], + "__set_app_type": [ + { + "name": "at", + "type": "int" + } + ], + "__setusermatherr": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "__threadhandle": [ + { + "name": "param1", + "type": "" + } + ], + "__threadid": [ + { + "name": "param1", + "type": "" + } + ], + "__toascii": [ + { + "name": "param1", + "type": "INT" + } + ], + "__unDName": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "POINTER" + }, + { + "name": "param6", + "type": "INT" + } + ], + "__unDNameEx": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "POINTER" + }, + { + "name": "param6", + "type": "POINTER" + }, + { + "name": "param7", + "type": "INT" + } + ], + "__wgetmainargs": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "INT" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_abnormal_termination": [ + { + "name": "param1", + "type": "" + } + ], + "_access": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_adj_fdiv_m16i": [ + { + "name": "param1", + "type": "INT" + } + ], + "_adj_fdiv_m32": [ + { + "name": "param1", + "type": "INT" + } + ], + "_adj_fdiv_m32i": [ + { + "name": "param1", + "type": "INT" + } + ], + "_adj_fdiv_m64": [ + { + "name": "param1", + "type": "INT64" + } + ], + "_adj_fdiv_r": [ + { + "name": "param1", + "type": "" + } + ], + "_adj_fdivr_m16i": [ + { + "name": "param1", + "type": "INT" + } + ], + "_adj_fdivr_m32": [ + { + "name": "param1", + "type": "INT" + } + ], + "_adj_fdivr_m32i": [ + { + "name": "param1", + "type": "INT" + } + ], + "_adj_fdivr_m64": [ + { + "name": "param1", + "type": "INT64" + } + ], + "_adj_fpatan": [ + { + "name": "param1", + "type": "" + } + ], + "_adj_fprem": [ + { + "name": "param1", + "type": "" + } + ], + "_adj_fprem1": [ + { + "name": "param1", + "type": "" + } + ], + "_adj_fptan": [ + { + "name": "param1", + "type": "" + } + ], + "_amsg_exit": [ + { + "name": "param1", + "type": "INT" + } + ], + "_assert": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_atodbl": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_atoi64": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_atoldbl": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_beep": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_beginthread": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_beginthreadex": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "INT" + }, + { + "name": "param6", + "type": "POINTER" + } + ], + "_c_exit": [ + { + "name": "param1", + "type": "" + } + ], + "_cabs": [ + { + "name": "param1", + "type": "INT" + } + ], + "_callnewh": [ + { + "name": "param1", + "type": "INT" + } + ], + "_calloc_dbg": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_cexit": [ + { + "name": "param1", + "type": "" + } + ], + "_cgets": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_chdir": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_chdrive": [ + { + "name": "param1", + "type": "INT" + } + ], + "_chgsign": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_chkesp": [ + { + "name": "param1", + "type": "" + } + ], + "_chmod": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_chsize": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_clearfp": [ + { + "name": "param1", + "type": "" + } + ], + "_close": [ + { + "name": "param1", + "type": "INT" + } + ], + "_commit": [ + { + "name": "param1", + "type": "INT" + } + ], + "_control87": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_controlfp": [ + { + "name": "new", + "type": "unsigned int" + }, + { + "name": "mask", + "type": "unsigned int" + } + ], + "_copysign": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "_cprintf": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_cputs": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_creat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_cscanf": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_cwait": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_dup": [ + { + "name": "param1", + "type": "INT" + } + ], + "_dup2": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_ecvt": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_endthread": [ + { + "name": "param1", + "type": "" + } + ], + "_endthreadex": [ + { + "name": "param1", + "type": "INT" + } + ], + "_eof": [ + { + "name": "param1", + "type": "INT" + } + ], + "_errno": [ + { + "name": "param1", + "type": "" + } + ], + "_except_handler2": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_except_handler3": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_execl": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_execle": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_execlp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_execlpe": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_execv": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_execve": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_execvp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_execvpe": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_exit": [ + { + "name": "param1", + "type": "INT" + } + ], + "_expand": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_expand_dbg": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_fcloseall": [ + { + "name": "param1", + "type": "" + } + ], + "_fcvt": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_fdopen": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_fgetchar": [ + { + "name": "param1", + "type": "" + } + ], + "_fgetwchar": [ + { + "name": "param1", + "type": "" + } + ], + "_filbuf": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_filelength": [ + { + "name": "param1", + "type": "INT" + } + ], + "_filelengthi64": [ + { + "name": "param1", + "type": "INT" + } + ], + "_fileno": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_findclose": [ + { + "name": "param1", + "type": "INT" + } + ], + "_findfirst": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_findfirsti64": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_findnext": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_findnexti64": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_finite": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_flsbuf": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_flushall": [ + { + "name": "param1", + "type": "" + } + ], + "_fpclass": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_fpieee_flt": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_fpreset": [ + { + "name": "param1", + "type": "" + } + ], + "_fputchar": [ + { + "name": "param1", + "type": "INT" + } + ], + "_fputwchar": [ + { + "name": "param1", + "type": "INT" + } + ], + "_free_dbg": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_fsopen": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_fstat": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_fstati64": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_ftime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_ftol": [ + { + "name": "param1", + "type": "" + } + ], + "_fullpath": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_futime": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_gcvt": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + } + ], + "_get_osfhandle": [ + { + "name": "param1", + "type": "INT" + } + ], + "_get_sbh_threshold": [ + { + "name": "param1", + "type": "" + } + ], + "_getch": [ + { + "name": "param1", + "type": "" + } + ], + "_getche": [ + { + "name": "param1", + "type": "" + } + ], + "_getcwd": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_getdcwd": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_getdiskfree": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_getdllprocaddr": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_getdrive": [ + { + "name": "param1", + "type": "" + } + ], + "_getdrives": [ + { + "name": "param1", + "type": "" + } + ], + "_getmaxstdio": [ + { + "name": "param1", + "type": "" + } + ], + "_getmbcp": [ + { + "name": "param1", + "type": "" + } + ], + "_getpid": [ + { + "name": "param1", + "type": "" + } + ], + "_getw": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_getws": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_global_unwind2": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_heapadd": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_heapchk": [ + { + "name": "param1", + "type": "" + } + ], + "_heapmin": [ + { + "name": "param1", + "type": "" + } + ], + "_heapset": [ + { + "name": "param1", + "type": "INT" + } + ], + "_heapwalk": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_hypot": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "_i64toa": [ + { + "name": "param1", + "type": "INT64" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_i64tow": [ + { + "name": "param1", + "type": "INT64" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_initterm": [ + { + "name": "pfbegin", + "type": "POINTER" + }, + { + "name": "pfend", + "type": "POINTER" + } + ], + "_initterm_e": [ + { + "name": "pfbegin", + "type": "POINTER" + }, + { + "name": "pfend", + "type": "POINTER" + } + ], + "_isatty": [ + { + "name": "param1", + "type": "INT" + } + ], + "_isctype": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_ismbbkana": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbblead": [ + { + "name": "c", + "type": "unsigned int" + } + ], + "_ismbbtrail": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcalnum": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcalpha": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcdigit": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcgraph": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbchira": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbckata": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcl0": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcl1": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcl2": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbclegal": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbclower": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcprint": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcpunct": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcspace": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcsymbol": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbcupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ismbslead": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_ismbstrail": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_isnan": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_itoa": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_itow": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_j0": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_j1": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_jn": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "_kbhit": [ + { + "name": "param1", + "type": "" + } + ], + "_lfind": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "INT" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_loaddll": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_local_unwind": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_local_unwind2": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_lock": [ + { + "name": "param1", + "type": "INT" + } + ], + "_locking": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_logb": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_longjmpex": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_lrotl": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_lrotr": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_lsearch": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "INT" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_lseek": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_lseeki64": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT64" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_ltoa": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_ltow": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_makepath": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "STRING" + }, + { + "name": "param5", + "type": "STRING" + } + ], + "_malloc_dbg": [ + { + "name": "size", + "type": "UINT" + } + ], + "_mbbtombc": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbbtype": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbccpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_mbcjistojms": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbcjmstojis": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbclen": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_mbctohira": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbctokata": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbctolower": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbctombb": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbctoupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "_mbsbtype": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbscat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbschr": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbscmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbscoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbscpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbscspn": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbsdec": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_mbsdup": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbsicmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbsicoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbsinc": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbslen": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbslwr": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbsnbcat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnbcmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnbcnt": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbsnbcoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnbcpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnbicmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnbicoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnbset": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsncat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnccnt": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbsncmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsncpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsnextc": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbsnicmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbsninc": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbsnset": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mbspbrk": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbsrchr": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbsrev": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbsset": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_mbsspn": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbsspnp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbsstr": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbstok": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_mbstrlen": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mbsupr": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_memccpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "INT" + } + ], + "_memicmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_mkdir": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_mktemp": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_msize": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_msize_dbg": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_nextafter": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "_onexit": [ + { + "name": "function", + "type": "POINTER" + } + ], + "_open": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_open_osfhandle": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_pclose": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_pipe": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_popen": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_purecall": [ + { + "name": "param1", + "type": "" + } + ], + "_putch": [ + { + "name": "param1", + "type": "INT" + } + ], + "_putenv": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_putw": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_putws": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_read": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_realloc_dbg": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_rmdir": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_rmtmp": [ + { + "name": "param1", + "type": "" + } + ], + "_rotl": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_rotr": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_safe_fdiv": [ + { + "name": "param1", + "type": "" + } + ], + "_safe_fdivr": [ + { + "name": "param1", + "type": "" + } + ], + "_safe_fprem": [ + { + "name": "param1", + "type": "" + } + ], + "_safe_fprem1": [ + { + "name": "param1", + "type": "" + } + ], + "_scalb": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_searchenv": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_seh_longjmp_unwind4": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_seh_longjmp_unwind": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_set_error_mode": [ + { + "name": "param1", + "type": "INT" + } + ], + "_set_sbh_threshold": [ + { + "name": "param1", + "type": "INT" + } + ], + "_seterrormode": [ + { + "name": "param1", + "type": "INT" + } + ], + "_setjmp": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_setjmp3": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_setmaxstdio": [ + { + "name": "param1", + "type": "INT" + } + ], + "_setmbcp": [ + { + "name": "param1", + "type": "INT" + } + ], + "_setmode": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_sleep": [ + { + "name": "param1", + "type": "INT" + } + ], + "_snprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + } + ], + "_snwprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "WSTRING" + } + ], + "_sopen": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_spawnl": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "STRING" + } + ], + "_spawnle": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "STRING" + } + ], + "_spawnlp": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "STRING" + } + ], + "_spawnlpe": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "STRING" + } + ], + "_spawnv": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_spawnve": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_spawnvp": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_spawnvpe": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_splitpath": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_stat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_stati64": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_statusfp": [ + { + "name": "param1", + "type": "" + } + ], + "_strcmpi": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_strdate": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_strdup": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_strerror": [ + { + "name": "param1", + "type": "INT" + } + ], + "_stricmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_stricoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_strlwr": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_strncoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_strnicmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_strnicoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_strnset": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_strrev": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_strset": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_strtime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_strupr": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_swab": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_tell": [ + { + "name": "param1", + "type": "INT" + } + ], + "_telli64": [ + { + "name": "param1", + "type": "INT" + } + ], + "_tempnam": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "_tolower": [ + { + "name": "param1", + "type": "INT" + } + ], + "_toupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "_tzset": [ + { + "name": "param1", + "type": "" + } + ], + "_ui64toa": [ + { + "name": "param1", + "type": "INT64" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_ui64tow": [ + { + "name": "param1", + "type": "INT64" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_ultoa": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_ultow": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_umask": [ + { + "name": "param1", + "type": "INT" + } + ], + "_ungetch": [ + { + "name": "param1", + "type": "INT" + } + ], + "_unlink": [ + { + "name": "param1", + "type": "STRING" + } + ], + "_unloaddll": [ + { + "name": "param1", + "type": "INT" + } + ], + "_unlock": [ + { + "name": "param1", + "type": "INT" + } + ], + "_utime": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_vsnprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_vsnwprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "WSTRING" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_waccess": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_wasctime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_wchdir": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wchmod": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_wcreat": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_wcsdup": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wcsicmp": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wcsicoll": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wcslwr": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wcsncoll": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wcsnicmp": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wcsnicoll": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wcsnset": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wcsrev": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wcsset": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_wcsupr": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wctime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_wexecl": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wexecle": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wexeclp": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wexeclpe": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wexecv": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wexecve": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_wexecvp": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wexecvpe": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_wfdopen": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wfindfirst": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wfindfirsti64": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wfindnext": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wfindnexti64": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wfopen": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wfopen_s": [ + { + "name": "pFile", + "type": "POINTER" + }, + { + "name": "filename", + "type": "WSTRING" + }, + { + "name": "mode", + "type": "WSTRING" + } + ], + "_wfreopen": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_wfsopen": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wfullpath": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wgetcwd": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_wgetdcwd": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wgetenv": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wmakepath": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "WSTRING" + }, + { + "name": "param4", + "type": "WSTRING" + }, + { + "name": "param5", + "type": "WSTRING" + } + ], + "_wmkdir": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wmktemp": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wopen": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "_wperror": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wpopen": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wputenv": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wremove": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wrename": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_write": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wrmdir": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wsearchenv": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_wsetlocale": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wsopen": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "_wspawnl": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "WSTRING" + } + ], + "_wspawnle": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "WSTRING" + } + ], + "_wspawnlp": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "WSTRING" + } + ], + "_wspawnlpe": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "WSTRING" + } + ], + "_wspawnv": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_wspawnve": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_wspawnvp": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "_wspawnvpe": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "_wsplitpath": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "POINTER" + }, + { + "name": "param4", + "type": "POINTER" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "_wstat": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wstati64": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_wstrdate": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_wstrtime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_wsystem": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wtempnam": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "_wtmpnam": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "_wtoi": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wtoi64": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wtol": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wunlink": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "_wutime": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "_y0": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_y1": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "_yn": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "abort": [ + { + "name": "param1", + "type": "" + } + ], + "abs": [ + { + "name": "param1", + "type": "INT" + } + ], + "acos": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "asctime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "asin": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "atan": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "atan2": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "atexit": [ + { + "name": "func", + "type": "void" + } + ], + "atof": [ + { + "name": "param1", + "type": "STRING" + } + ], + "atoi": [ + { + "name": "param1", + "type": "STRING" + } + ], + "atol": [ + { + "name": "param1", + "type": "STRING" + } + ], + "bsearch": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "INT" + }, + { + "name": "param5", + "type": "POINTER" + } + ], + "calloc": [ + { + "name": "num", + "type": "SIZE_T" + }, + { + "name": "size", + "type": "SIZE_T" + } + ], + "ceil": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "clearerr": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "clock": [ + { + "name": "param1", + "type": "" + } + ], + "cos": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "cosh": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "ctime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "difftime": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "div": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "exit": [ + { + "name": "status", + "type": "INT" + } + ], + "exp": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "fabs": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "fclose": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "feof": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "ferror": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "fflush": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "fgetc": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "fgetpos": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "fgets": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "fgetwc": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "fgetws": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "floor": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "fmod": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "fopen": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "fprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "fputc": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "fputs": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "fputwc": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "fputws": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "fread": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "free": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "freopen": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "frexp": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "fscanf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "fseek": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "fsetpos": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "ftell": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "fwprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "fwrite": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "fwscanf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "getc": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "getchar": [ + { + "name": "param1", + "type": "" + } + ], + "getenv": [ + { + "name": "param1", + "type": "STRING" + } + ], + "gets": [ + { + "name": "param1", + "type": "STRING" + } + ], + "getwc": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "getwchar": [ + { + "name": "param1", + "type": "" + } + ], + "gmtime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "is_wctype": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "isalnum": [ + { + "name": "param1", + "type": "INT" + } + ], + "isalpha": [ + { + "name": "param1", + "type": "INT" + } + ], + "iscntrl": [ + { + "name": "param1", + "type": "INT" + } + ], + "isdigit": [ + { + "name": "param1", + "type": "INT" + } + ], + "isgraph": [ + { + "name": "param1", + "type": "INT" + } + ], + "isleadbyte": [ + { + "name": "param1", + "type": "INT" + } + ], + "islower": [ + { + "name": "param1", + "type": "INT" + } + ], + "isprint": [ + { + "name": "param1", + "type": "INT" + } + ], + "ispunct": [ + { + "name": "param1", + "type": "INT" + } + ], + "isspace": [ + { + "name": "param1", + "type": "INT" + } + ], + "isupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswalnum": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswalpha": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswascii": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswcntrl": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswctype": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "iswdigit": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswgraph": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswlower": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswprint": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswpunct": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswspace": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "iswxdigit": [ + { + "name": "param1", + "type": "INT" + } + ], + "isxdigit": [ + { + "name": "param1", + "type": "INT" + } + ], + "labs": [ + { + "name": "param1", + "type": "INT" + } + ], + "ldexp": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "INT" + } + ], + "ldiv": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "localeconv": [ + { + "name": "param1", + "type": "" + } + ], + "localtime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "log": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "log10": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "longjmp": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "lstrlenA": [ + { + "name": "lpString", + "type": "LPCSTR" + } + ], + "lstrlenW": [ + { + "name": "lpString", + "type": "LPCWSTR" + } + ], + "malloc": [ + { + "name": "param1", + "type": "INT" + } + ], + "mblen": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "mbstowcs": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "mbtowc": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "memchr": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + } + ], + "memcmp": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "memcpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "memmove": [ + { + "name": "dest", + "type": "POINTER" + }, + { + "name": "src", + "type": "POINTER" + }, + { + "name": "num", + "type": "INT" + } + ], + "memset": [ + { + "name": "dest", + "type": "POINTER" + }, + { + "name": "c", + "type": "INT" + }, + { + "name": "count", + "type": "INT" + } + ], + "mktime": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "modf": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "perror": [ + { + "name": "param1", + "type": "STRING" + } + ], + "pow": [ + { + "name": "param1", + "type": "DOUBLE" + }, + { + "name": "param2", + "type": "DOUBLE" + } + ], + "printf": [ + { + "name": "param1", + "type": "STRING" + } + ], + "putc": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "putchar": [ + { + "name": "param1", + "type": "INT" + } + ], + "puts": [ + { + "name": "str", + "type": "STRING" + } + ], + "putwc": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "putwchar": [ + { + "name": "param1", + "type": "INT" + } + ], + "qsort": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "raise": [ + { + "name": "param1", + "type": "INT" + } + ], + "rand": [ + { + "name": "param1", + "type": "" + } + ], + "realloc": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "remove": [ + { + "name": "param1", + "type": "STRING" + } + ], + "rename": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "rewind": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "scanf": [ + { + "name": "param1", + "type": "STRING" + } + ], + "setbuf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "setlocale": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "setvbuf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + }, + { + "name": "param4", + "type": "INT" + } + ], + "signal": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "INT" + } + ], + "sin": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "sinh": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "sprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "sqrt": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "srand": [ + { + "name": "param1", + "type": "INT" + } + ], + "sscanf": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strcat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strchr": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "strcmp": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strcoll": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strcpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strcspn": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strerror": [ + { + "name": "param1", + "type": "INT" + } + ], + "strftime": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "STRING" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "strlen": [ + { + "name": "str", + "type": "STRING" + } + ], + "strncat": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "strncmp": [ + { + "name": "string1", + "type": "STRING" + }, + { + "name": "string2", + "type": "STRING" + }, + { + "name": "count", + "type": "INT" + } + ], + "strncpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "strpbrk": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strrchr": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "strspn": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strstr": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strtod": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "strtok": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "STRING" + } + ], + "strtol": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "strtoul": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "strxfrm": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "swprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "swscanf": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "system": [ + { + "name": "param1", + "type": "STRING" + } + ], + "tan": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "tanh": [ + { + "name": "param1", + "type": "DOUBLE" + } + ], + "time": [ + { + "name": "destTime", + "type": "POINTER" + } + ], + "tmpfile": [ + { + "name": "param1", + "type": "" + } + ], + "tmpnam": [ + { + "name": "param1", + "type": "POINTER" + } + ], + "tolower": [ + { + "name": "param1", + "type": "INT" + } + ], + "toupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "towlower": [ + { + "name": "param1", + "type": "INT" + } + ], + "towupper": [ + { + "name": "param1", + "type": "INT" + } + ], + "ungetc": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "ungetwc": [ + { + "name": "param1", + "type": "INT" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "vfprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "vfwprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "vprintf": [ + { + "name": "param1", + "type": "STRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "vsprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "STRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "vswprintf": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "POINTER" + } + ], + "vwprintf": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "wcscat": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcschr": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "wcscmp": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcscoll": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcscpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcscspn": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcsftime": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + }, + { + "name": "param3", + "type": "WSTRING" + }, + { + "name": "param4", + "type": "POINTER" + } + ], + "wcslen": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "wcsncat": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wcsncmp": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wcsncpy": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wcspbrk": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcsrchr": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "INT" + } + ], + "wcsspn": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcsstr": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcstod": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + } + ], + "wcstok": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "WSTRING" + } + ], + "wcstol": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wcstombs": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wcstoul": [ + { + "name": "param1", + "type": "WSTRING" + }, + { + "name": "param2", + "type": "POINTER" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wcsxfrm": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "WSTRING" + }, + { + "name": "param3", + "type": "INT" + } + ], + "wctomb": [ + { + "name": "param1", + "type": "POINTER" + }, + { + "name": "param2", + "type": "INT" + } + ], + "wprintf": [ + { + "name": "param1", + "type": "WSTRING" + } + ], + "wscanf": [ + { + "name": "param1", + "type": "WSTRING" + } + ] +} \ No newline at end of file diff --git a/qiling/os/windows/dlls/advapi32.py b/qiling/os/windows/dlls/advapi32.py index 0ae671966..99869fdf6 100644 --- a/qiling/os/windows/dlls/advapi32.py +++ b/qiling/os/windows/dlls/advapi32.py @@ -225,7 +225,7 @@ def hook_RegCreateKeyW(ql, address, params): # PHKEY phkResult, # LPDWORD lpdwDisposition # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'POINTER'}) def hook_RegCreateKeyExW(ql, address, params): ret = ERROR_SUCCESS @@ -406,7 +406,7 @@ def hook_GetSidSubAuthorityCount(ql, address, params): # PSID pSid, # DWORD nSubAuthority # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'INT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'INT'}) def hook_GetSidSubAuthority(ql, address, params): num = params["nSubAuthority"] sid = ql.os.handle_manager.get(params["pSid"]).obj diff --git a/qiling/os/windows/dlls/crypt32.py b/qiling/os/windows/dlls/crypt32.py index ccc82442a..12ece042e 100644 --- a/qiling/os/windows/dlls/crypt32.py +++ b/qiling/os/windows/dlls/crypt32.py @@ -21,8 +21,8 @@ # DWORD *pdwSkip, # DWORD *pdwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'BYTE': 'POINTER'}, - specialtypeEx={"pcbBinary": POINTER, "pdwSkip": POINTER, "pdwFlags": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'BYTE': 'POINTER'}, + replace_typeEx={"pcbBinary": POINTER, "pdwSkip": POINTER, "pdwFlags": POINTER}) def hook_CryptStringToBinaryA(ql, address, params): flag_src = params["dwFlags"] string_src = params["pszString"] diff --git a/qiling/os/windows/dlls/kernel32/consoleapi2.py b/qiling/os/windows/dlls/kernel32/consoleapi2.py index 0c0d31690..743bae434 100644 --- a/qiling/os/windows/dlls/kernel32/consoleapi2.py +++ b/qiling/os/windows/dlls/kernel32/consoleapi2.py @@ -13,11 +13,12 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # BOOL WINAPI SetConsoleTitle( # _In_ LPCTSTR lpConsoleTitle # ); -@winsdkapi(cc=STDCALL, defparams={"lpConsoleTitle": WSTRING}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"lpConsoleTitle": WSTRING}) def hook_SetConsoleTitleW(ql, address, params): return 1 @@ -26,7 +27,7 @@ def hook_SetConsoleTitleW(ql, address, params): # _In_ HANDLE hConsoleOutput, # _Out_ PCONSOLE_SCREEN_BUFFER_INFO lpConsoleScreenBufferInfo # ); -@winsdkapi(cc=STDCALL, defparams={"hConsoleOutput": HANDLE, "lpConsoleScreenBufferInfo": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"hConsoleOutput": HANDLE, "lpConsoleScreenBufferInfo": POINTER}) def hook_GetConsoleScreenBufferInfo(ql, address, params): # Todo should we really? return 1 @@ -36,6 +37,6 @@ def hook_GetConsoleScreenBufferInfo(ql, address, params): # _In_ HANDLE hConsoleOutput, # _In_ WORD wAttributes # ); -@winsdkapi(cc=STDCALL, defparams={"hConsoleOutput": HANDLE, "wAttributes": INT}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"hConsoleOutput": HANDLE, "wAttributes": INT}) def hook_SetConsoleTextAttribute(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/kernel32/consoleapi3.py b/qiling/os/windows/dlls/kernel32/consoleapi3.py index 7c91e11ad..81103770e 100644 --- a/qiling/os/windows/dlls/kernel32/consoleapi3.py +++ b/qiling/os/windows/dlls/kernel32/consoleapi3.py @@ -13,9 +13,10 @@ from qiling.os.windows.handle import * from qiling.exception import * +dllname = 'kernel32_dll' # HWND WINAPI GetConsoleWindow(void); -@winsdkapi(cc=STDCALL) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_GetConsoleWindow(ql, address, params): handle = Handle(name="console_window") ql.os.handle_manager.append(handle) diff --git a/qiling/os/windows/dlls/kernel32/errhandlingapi.py b/qiling/os/windows/dlls/kernel32/errhandlingapi.py index 6b4ad5877..08ee0b1b6 100644 --- a/qiling/os/windows/dlls/kernel32/errhandlingapi.py +++ b/qiling/os/windows/dlls/kernel32/errhandlingapi.py @@ -39,7 +39,7 @@ def hook_GetLastError(ql, address, params): # void SetLastError( # DWORD dwErrCode # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'UINT'}) def hook_SetLastError(ql, address, params): ql.os.last_error = params['dwErrCode'] return 0 @@ -84,7 +84,7 @@ def hook_RaiseException(ql, address, params): # ULONG First, # PVECTORED_EXCEPTION_HANDLER Handler # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'ULONG': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'ULONG': 'UINT'}) def hook_AddVectoredExceptionHandler(ql, address, params): # this case is an anomaly from other interrupts (from what i learned, can be wrong) @@ -130,7 +130,7 @@ def exec_standard_into(ql, into, user_data): # ULONG RemoveVectoredExceptionHandler( # PVOID Handle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'PVOID': 'HANDLE'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'PVOID': 'HANDLE'}) def hook_RemoveVectoredExceptionHandler(ql, address, params): hook = ql.os.handle_manager.get(params["Handle"]).obj hook.remove() diff --git a/qiling/os/windows/dlls/kernel32/fibersapi.py b/qiling/os/windows/dlls/kernel32/fibersapi.py index 4470b00b8..d77948943 100644 --- a/qiling/os/windows/dlls/kernel32/fibersapi.py +++ b/qiling/os/windows/dlls/kernel32/fibersapi.py @@ -18,7 +18,7 @@ # DWORD FlsFree( # DWORD dwFlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'UINT'}) def hook_FlsFree(ql, address, params): return ql.os.fiber_manager.free(params['dwFlsIndex']) @@ -26,7 +26,7 @@ def hook_FlsFree(ql, address, params): # LPVOID FlsGetValue( # DWORD dwFlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'UINT'}) def hook_FlsGetValue(ql, address, params): return ql.os.fiber_manager.get(params['dwFlsIndex']) @@ -35,7 +35,7 @@ def hook_FlsGetValue(ql, address, params): # DWORD dwFlsIndex # PVOID lpFlsData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'UINT'}) def hook_FlsSetValue(ql, address, params): return ql.os.fiber_manager.set(params['dwFlsIndex'], params['lpFlsData']) diff --git a/qiling/os/windows/dlls/kernel32/fileapi.py b/qiling/os/windows/dlls/kernel32/fileapi.py index 0c84ad5d8..980d1aef7 100644 --- a/qiling/os/windows/dlls/kernel32/fileapi.py +++ b/qiling/os/windows/dlls/kernel32/fileapi.py @@ -38,7 +38,7 @@ def hook_GetFileType(ql, address, params): # LPCSTR lpFileName, # LPWIN32_FIND_DATAA lpFindFileData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCSTR': 'POINTER'}) def hook_FindFirstFileA(ql, address, params): pass @@ -47,7 +47,7 @@ def hook_FindFirstFileA(ql, address, params): # LPCSTR lpFileName, # LPWIN32_FIND_DATAA lpFindFileData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCSTR': 'POINTER'}) def hook_FindNextFileA(ql, address, params): pass @@ -281,7 +281,7 @@ def hook_GetVolumeInformationW(ql, address, params): # UINT GetDriveTypeW( # LPCWSTR lpRootPathName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCWSTR': 'POINTER'}) def hook_GetDriveTypeW(ql, address, params): path = params["lpRootPathName"] if path != 0: @@ -300,7 +300,7 @@ def hook_GetDriveTypeW(ql, address, params): # LPDWORD lpNumberOfFreeClusters, # LPDWORD lpTotalNumberOfClusters # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCWSTR': 'POINTER'}) def hook_GetDiskFreeSpaceW(ql, address, params): path = params["lpRootPathName"] if path == ql.os.profile["PATH"]["systemdrive"]: @@ -344,7 +344,7 @@ def hook_CreateDirectoryA(ql, address, params): # HANDLE hFile, # LPDWORD lpFileSizeHigh # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPDWORD': 'DWORD'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPDWORD': 'DWORD'}) def hook_GetFileSize(ql, address, params): try: handle = ql.handle_manager.get(params['hFile'].file) diff --git a/qiling/os/windows/dlls/kernel32/handleapi.py b/qiling/os/windows/dlls/kernel32/handleapi.py index 4cf324caf..8f6a2be5c 100644 --- a/qiling/os/windows/dlls/kernel32/handleapi.py +++ b/qiling/os/windows/dlls/kernel32/handleapi.py @@ -24,7 +24,7 @@ # BOOL bInheritHandle, # DWORD dwOptions # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HANDLE': 'POINTER'}) def hook_DuplicateHandle(ql, address, params): # TODO for how we manage handle, i think this doesn't work content = params["hSourceHandle"] @@ -58,7 +58,7 @@ def hook_CloseHandle(ql, address, params): # DWORD dwMask, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HANDLE': 'POINTER'}) def hook_SetHandleInformation(ql, address, params): val = params["hObject"] handle = ql.os.handle_manager.get(val) diff --git a/qiling/os/windows/dlls/kernel32/heapapi.py b/qiling/os/windows/dlls/kernel32/heapapi.py index fd17570f5..5a48bf1e1 100644 --- a/qiling/os/windows/dlls/kernel32/heapapi.py +++ b/qiling/os/windows/dlls/kernel32/heapapi.py @@ -65,7 +65,7 @@ def hook_HeapFree(ql, address, params): # PVOID HeapInformation, # SIZE_T HeapInformationLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'SIZE_T': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'SIZE_T': 'UINT'}) def hook_HeapSetInformation(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/kernel32/libloaderapi.py b/qiling/os/windows/dlls/kernel32/libloaderapi.py index 603db6a2b..02ef033c5 100644 --- a/qiling/os/windows/dlls/kernel32/libloaderapi.py +++ b/qiling/os/windows/dlls/kernel32/libloaderapi.py @@ -120,7 +120,7 @@ def hook_GetModuleFileNameW(ql, address, params): # HMODULE hModule, # LPCSTR lpProcName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCSTR': 'POINTER'}) def hook_GetProcAddress(ql, address, params): if params["lpProcName"] > MAXUSHORT: # Look up by name @@ -170,7 +170,7 @@ def hook_LoadLibraryA(ql, address, params): # HANDLE hFile, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HANDLE': 'POINTER'}) def hook_LoadLibraryExA(ql, address, params): lpLibFileName = params["lpLibFileName"] dll_base = ql.loader.load_dll(lpLibFileName.encode()) @@ -192,7 +192,7 @@ def hook_LoadLibraryW(ql, address, params): # HANDLE hFile, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HANDLE': 'POINTER'}) def hook_LoadLibraryExW(ql, address, params): lpLibFileName = params["lpLibFileName"].encode() dll_base = ql.loader.load_dll(lpLibFileName) @@ -203,7 +203,7 @@ def hook_LoadLibraryExW(ql, address, params): # HMODULE hModule, # HRSRC hResInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HMODULE': 'POINTER'}) def hook_SizeofResource(ql, address, params): # Return size of resource # TODO set a valid value. More tests have to be made to find it. @@ -214,7 +214,7 @@ def hook_SizeofResource(ql, address, params): # HMODULE hModule, # HRSRC hResInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HMODULE': 'POINTER'}) def hook_LoadResource(ql, address, params): pointer = params["hResInfo"] return pointer @@ -223,7 +223,7 @@ def hook_LoadResource(ql, address, params): # LPVOID LockResource( # HGLOBAL hResData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HMODULE': 'POINTER'}) def hook_LockResource(ql, address, params): pointer = params["hResData"] return pointer @@ -232,7 +232,7 @@ def hook_LockResource(ql, address, params): # BOOL DisableThreadLibraryCalls( # HMODULE hLibModule # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HMODULE': 'POINTER'}) def hook_DisableThreadLibraryCalls(ql, address, params): return 1 @@ -240,7 +240,7 @@ def hook_DisableThreadLibraryCalls(ql, address, params): # BOOL FreeLibrary( # HMODULE hLibModule # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HMODULE': 'POINTER'}) def hook_FreeLibrary(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/kernel32/memoryapi.py b/qiling/os/windows/dlls/kernel32/memoryapi.py index 63911f5ce..e8faab2eb 100644 --- a/qiling/os/windows/dlls/kernel32/memoryapi.py +++ b/qiling/os/windows/dlls/kernel32/memoryapi.py @@ -46,7 +46,7 @@ def hook_VirtualFree(ql, address, params): # DWORD flNewProtect, # PDWORD lpflOldProtect # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) def hook_VirtualProtect(ql, address, params): return 1 @@ -56,7 +56,7 @@ def hook_VirtualProtect(ql, address, params): # PMEMORY_BASIC_INFORMATION lpBuffer, # SIZE_T dwLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) def hook_VirtualQuery(ql, address, params): """ typedef struct _MEMORY_BASIC_INFORMATION { diff --git a/qiling/os/windows/dlls/kernel32/processenv.py b/qiling/os/windows/dlls/kernel32/processenv.py index a905c6171..7e5a03214 100644 --- a/qiling/os/windows/dlls/kernel32/processenv.py +++ b/qiling/os/windows/dlls/kernel32/processenv.py @@ -11,7 +11,7 @@ # HANDLE WINAPI GetStdHandle( # _In_ DWORD nStdHandle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"nStdHandle": DWORD}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"nStdHandle": DWORD}) def hook_GetStdHandle(ql, address, params): nStdHandle = params["nStdHandle"] return nStdHandle diff --git a/qiling/os/windows/dlls/kernel32/processthreadsapi.py b/qiling/os/windows/dlls/kernel32/processthreadsapi.py index f00cf3517..df081ffbb 100644 --- a/qiling/os/windows/dlls/kernel32/processthreadsapi.py +++ b/qiling/os/windows/dlls/kernel32/processthreadsapi.py @@ -20,7 +20,7 @@ # void ExitProcess( # UINT uExitCode # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'UINT': 'DWORD'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'UINT': 'DWORD'}) def hook_ExitProcess(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False @@ -64,7 +64,7 @@ def hook_TlsAlloc(ql, address, params): # DWORD TlsFree( # DWORD dwTlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"dwTlsIndex": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"dwTlsIndex": UINT}) def hook_TlsFree(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -78,7 +78,7 @@ def hook_TlsFree(ql, address, params): # LPVOID TlsGetValue( # DWORD dwTlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"dwTlsIndex": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"dwTlsIndex": UINT}) def hook_TlsGetValue(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -94,7 +94,7 @@ def hook_TlsGetValue(ql, address, params): # LPVOID TlsSetValue( # DWORD dwTlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"dwTlsIndex": UINT, "lpTlsValue": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"dwTlsIndex": UINT, "lpTlsValue": POINTER}) def hook_TlsSetValue(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -221,7 +221,7 @@ def hook_GetCurrentThread(ql, address, params): # BOOL bInheritHandle, # DWORD dwProcessId # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'BOOL': 'HANDLE'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'BOOL': 'HANDLE'}) def hook_OpenProcess(ql, address, params): proc = params["dwProcessId"] # If the specified process is the System Process (0x00000000), @@ -244,7 +244,7 @@ def hook_OpenProcess(ql, address, params): # PHANDLE TokenHandle # ); @winsdkapi(cc=STDCALL, dllname=dllname, - defparams={"ProcessHandle": HANDLE, "DesiredAccess": DWORD, "TokenHandle": POINTER}) + replace_typeEx={"ProcessHandle": HANDLE, "DesiredAccess": DWORD, "TokenHandle": POINTER}) def hook_OpenProcessToken(ql, address, params): token_pointer = params["TokenHandle"] token = Token(ql) @@ -270,7 +270,7 @@ def hook_GetThreadContext(ql, address, params): # PHANDLE TokenHandle # ); @winsdkapi(cc=STDCALL, dllname=dllname, - defparams={"ThreadHandle": HANDLE, "DesiredAccess": DWORD, "OpenAsSelf": BOOL, "TokenHandle": POINTER}) + replace_typeEx={"ThreadHandle": HANDLE, "DesiredAccess": DWORD, "OpenAsSelf": BOOL, "TokenHandle": POINTER}) def hook_OpenThreadToken(ql, address, params): token_pointer = params["TokenHandle"] token = Token(ql) diff --git a/qiling/os/windows/dlls/kernel32/stringapiset.py b/qiling/os/windows/dlls/kernel32/stringapiset.py index 8f2398e0d..5d82db1f8 100644 --- a/qiling/os/windows/dlls/kernel32/stringapiset.py +++ b/qiling/os/windows/dlls/kernel32/stringapiset.py @@ -53,7 +53,7 @@ def hook_GetStringTypeExA(ql, address, params): # LPCCH lpDefaultChar, # LPBOOL lpUsedDefaultChar # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCWCH': 'WSTRING'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCWCH': 'WSTRING'}) def hook_WideCharToMultiByte(ql, address, params): ret = 0 @@ -76,7 +76,7 @@ def hook_WideCharToMultiByte(ql, address, params): # LPWSTR lpWideCharStr, # int cchWideChar # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'UINT', 'LPCCH': 'WSTRING'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'UINT', 'LPCCH': 'WSTRING'}) def hook_MultiByteToWideChar(ql, address, params): wide_str = (params['lpMultiByteStr']+"\x00").encode('utf-16le') if params['cchWideChar'] != 0: diff --git a/qiling/os/windows/dlls/kernel32/synchapi.py b/qiling/os/windows/dlls/kernel32/synchapi.py index f1b78fbf0..18d4b764e 100644 --- a/qiling/os/windows/dlls/kernel32/synchapi.py +++ b/qiling/os/windows/dlls/kernel32/synchapi.py @@ -72,7 +72,7 @@ def hook_InitializeCriticalSectionEx(ql, address, params): # LPCRITICAL_SECTION lpCriticalSection, # DWORD dwSpinCount # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'UINT'}) def hook_InitializeCriticalSectionAndSpinCount(ql, address, params): return 1 @@ -119,7 +119,7 @@ def hook_WaitForSingleObjectEx(ql, address, params): # BOOL bWaitAll, # DWORD dwMilliseconds # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HANDLE': 'POINTER'}) def hook_WaitForMultipleObjects(ql, address, params): ret = 0 nCount = params["nCount"] diff --git a/qiling/os/windows/dlls/kernel32/winbase.py b/qiling/os/windows/dlls/kernel32/winbase.py index 168e2dfc3..62b29efd4 100644 --- a/qiling/os/windows/dlls/kernel32/winbase.py +++ b/qiling/os/windows/dlls/kernel32/winbase.py @@ -23,7 +23,7 @@ def hook_FatalExit(ql, address, params): # PVOID EncodePointer( # _In_ PVOID Ptr # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"Ptr": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"Ptr": POINTER}) def hook_EncodePointer(ql, address, params): return params['Ptr'] @@ -31,7 +31,7 @@ def hook_EncodePointer(ql, address, params): # PVOID DecodePointer( # _In_ PVOID Ptr # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"Ptr": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"Ptr": POINTER}) def hook_DecodePointer(ql, address, params): return params['Ptr'] @@ -107,7 +107,7 @@ def hook_GlobalUnlock(ql, address, params): # UINT uFlags, # SIZE_T dwBytes # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'SIZE_T': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'SIZE_T': 'UINT'}) def hook_GlobalAlloc(ql, address, params): return ql.os.heap.alloc(params["dwBytes"]) @@ -380,7 +380,7 @@ def hook_VerifyVersionInfoW(ql, address, params): # LPWSTR lpBuffer, # LPDWORD pcbBuffer # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"lpBuffer": POINTER, "pcbBuffer": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"lpBuffer": POINTER, "pcbBuffer": POINTER}) def hook_GetUserNameW(ql, address, params): username = (ql.os.profile["USER"]["username"] + "\x00").encode("utf-16le") dst = params["lpBuffer"] diff --git a/qiling/os/windows/dlls/kernel32/winnls.py b/qiling/os/windows/dlls/kernel32/winnls.py index 891a348aa..fb9f090e1 100644 --- a/qiling/os/windows/dlls/kernel32/winnls.py +++ b/qiling/os/windows/dlls/kernel32/winnls.py @@ -19,7 +19,7 @@ # BOOL SetThreadLocale( # LCID Locale # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LCID': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LCID': 'UINT'}) def hook_SetThreadLocale(ql, address, params): return 0xC000 # LOCALE_CUSTOM_DEFAULT @@ -53,7 +53,7 @@ def hook_GetCPInfo(ql, address, params): # LPSTR lpLCData, # int cchData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LCID': 'DWORD', 'LCTYPE': 'DWORD'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LCID': 'DWORD', 'LCTYPE': 'DWORD'}) def hook_GetLocaleInfoA(ql, address, params): locale_value = params["Locale"] lctype_value = params["LCType"] diff --git a/qiling/os/windows/dlls/kernel32/winnt.py b/qiling/os/windows/dlls/kernel32/winnt.py index 0f4fc227b..2ee4f7eea 100644 --- a/qiling/os/windows/dlls/kernel32/winnt.py +++ b/qiling/os/windows/dlls/kernel32/winnt.py @@ -12,7 +12,7 @@ # LONG volatile *Target, # LONG Value # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"Target": POINTER, "Value": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"Target": POINTER, "Value": UINT}) def hook_InterlockedExchange(ql, address, params): old = int.from_bytes(ql.mem.read(params['Target'], ql.pointersize), byteorder='little') ql.mem.write(params['Target'], params['Value'].to_bytes(length=ql.pointersize, byteorder='little')) @@ -22,7 +22,7 @@ def hook_InterlockedExchange(ql, address, params): # LONG InterlockedIncrement( # LONG volatile *Target, # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"Target": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"Target": POINTER}) def hook_InterlockedIncrement(ql, address, params): val = int.from_bytes(ql.mem.read(params['Target'], 4), byteorder='little') val += 1 & (2 ** 32) # increment and overflow back to 0 if applicable @@ -33,7 +33,7 @@ def hook_InterlockedIncrement(ql, address, params): # LONG InterlockedDecrement( # LONG volatile *Target, # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"Target": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"Target": POINTER}) def hook_InterlockedDecrement(ql, address, params): val = int.from_bytes(ql.mem.read(params['Target'], 4), byteorder='little') val -= 1 @@ -48,7 +48,7 @@ def hook_InterlockedDecrement(ql, address, params): # DWORD TypeMask, # BYTE Condition # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"ConditionMask": ULONGLONG, "TypeMask": DWORD, "Condition": BYTE}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"ConditionMask": ULONGLONG, "TypeMask": DWORD, "Condition": BYTE}) def hook_VerSetConditionMask(ql, address, params): # ConditionMask = params["ConditionMask"] TypeMask = params["TypeMask"] diff --git a/qiling/os/windows/dlls/mscoree.py b/qiling/os/windows/dlls/mscoree.py index 64a03eb3a..5734c4dbb 100644 --- a/qiling/os/windows/dlls/mscoree.py +++ b/qiling/os/windows/dlls/mscoree.py @@ -15,7 +15,7 @@ # void STDMETHODCALLTYPE CorExitProcess ( # int exitCode # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'int': 'DWORD'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'int': 'DWORD'}) def hook_CorExitProcess(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False diff --git a/qiling/os/windows/dlls/msvcrt.py b/qiling/os/windows/dlls/msvcrt.py index eb0dd966c..570693686 100644 --- a/qiling/os/windows/dlls/msvcrt.py +++ b/qiling/os/windows/dlls/msvcrt.py @@ -11,7 +11,7 @@ from qiling.os.const import * from qiling.os.windows.const import * -dllname = 'kernel32_dll' +dllname = 'msvcrt_dll' # void __set_app_type ( # int at @@ -28,7 +28,7 @@ def hook___set_app_type(ql, address, params): # int _DoWildCard, # _startupinfo * _StartInfo); @winsdkapi(cc=CDECL, - defparams={"_Argc": POINTER, "_Argv": POINTER, "_Env": POINTER, "_DoWildCard": INT, "_StartInfo": POINTER}) + replace_typeEx={"_Argc": POINTER, "_Argv": POINTER, "_Env": POINTER, "_DoWildCard": INT, "_StartInfo": POINTER}) def hook___getmainargs(ql, address, params): ret = 0 return ret @@ -36,7 +36,7 @@ def hook___getmainargs(ql, address, params): # int* __p__fmode( # ); -@winsdkapi(cc=CDECL, defparams={}) +@winsdkapi(cc=CDECL) def hook___p__fmode(ql, address, params): addr = ql.os.heap.alloc(ql.pointersize) return addr @@ -44,15 +44,15 @@ def hook___p__fmode(ql, address, params): # int * __p__commode( # ); -@winsdkapi(cc=CDECL, defparams={}) +@winsdkapi(cc=CDECL) def hook___p__commode(ql, address, params): addr = ql.os.heap.alloc(ql.pointersize) return addr -# int * __p__commode( +# int * __p__acmdln( # ); -@winsdkapi(cc=CDECL, defparams={}) +@winsdkapi(cc=CDECL) def hook___p__acmdln(self, address, params): addr = self.ql.loader.import_address_table['msvcrt.dll'][b'_acmdln'] return addr @@ -62,7 +62,7 @@ def hook___p__acmdln(self, address, params): # unsigned int new, # unsigned int mask # ); -@winsdkapi(cc=CDECL, defparams={"new": UINT, "mask": UINT}) +@winsdkapi(cc=CDECL, replace_typeEx={"new": UINT, "mask": UINT}) def hook__controlfp(ql, address, params): ret = 0x8001f return ret @@ -71,14 +71,14 @@ def hook__controlfp(ql, address, params): # int atexit( # void (__cdecl *func)(void) # ); -@winsdkapi(cc=CDECL, defparams={"func": POINTER}) +@winsdkapi(cc=CDECL, replace_typeEx={"func": POINTER}) def hook_atexit(ql, address, params): ret = 0 return ret # char*** __p__environ(void) -@winsdkapi(cc=CDECL, defparams={}) +@winsdkapi(cc=CDECL) def hook___p__environ(ql, address, params): ret = ql.os.heap.alloc(ql.pointersize * len(ql.os.env)) count = 0 @@ -96,7 +96,7 @@ def hook___p__environ(ql, address, params): # int puts( # const char *str # ); -@winsdkapi(cc=CDECL, defparams={"str": STRING}) +@winsdkapi(cc=CDECL, replace_typeEx={"str": STRING}) def hook_puts(ql, address, params): ret = 0 string = params["str"] @@ -106,7 +106,7 @@ def hook_puts(ql, address, params): # void _cexit( void ); -@winsdkapi(cc=CDECL, defparams={}) +@winsdkapi(cc=CDECL) def hook__cexit(ql, address, params): pass @@ -115,7 +115,7 @@ def hook__cexit(ql, address, params): # PVFV *, # PVFV * # ); -@winsdkapi(cc=CDECL, defparams={"pfbegin": POINTER, "pfend": POINTER}) +@winsdkapi(cc=CDECL, replace_typeEx={"pfbegin": POINTER, "pfend": POINTER}) def hook__initterm(ql, address, params): pass @@ -123,7 +123,7 @@ def hook__initterm(ql, address, params): # void exit( # int const status # ); -@winsdkapi(cc=CDECL, defparams={"status": INT}) +@winsdkapi(cc=CDECL, replace_typeEx={"status": INT}) def hook_exit(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False @@ -133,13 +133,13 @@ def hook_exit(ql, address, params): # PVFV *, # PVFV * # ); -@winsdkapi(cc=CDECL, defparams={"pfbegin": POINTER, "pfend": POINTER}) +@winsdkapi(cc=CDECL, replace_typeEx={"pfbegin": POINTER, "pfend": POINTER}) def hook__initterm_e(ql, address, params): return 0 # char*** __cdecl __p___argv (void); -@winsdkapi(cc=CDECL, defparams={}) +@winsdkapi(cc=CDECL) def hook___p___argv(ql, address, params): ret = ql.os.heap.alloc(ql.pointersize * len(ql.argv)) count = 0 @@ -154,14 +154,14 @@ def hook___p___argv(ql, address, params): # int* __p___argc(void) -@winsdkapi(cc=CDECL, defparams={}) +@winsdkapi(cc=CDECL) def hook___p___argc(ql, address, params): ret = ql.os.heap.alloc(ql.pointersize) ql.mem.write(ret, ql.pack(len(ql.argv))) return ret -@winsdkapi(cc=CDECL, defparams={}) +@winsdkapi(cc=CDECL) def hook__get_initial_narrow_environment(ql, address, params): ret = 0 count = 0 @@ -204,7 +204,7 @@ def hook_printf(ql, address, _): # MSVCRT_FILE * CDECL MSVCRT___acrt_iob_func(unsigned idx) -@winsdkapi(cc=CDECL, defparams={"idx": UINT}) +@winsdkapi(cc=CDECL, replace_typeEx={"idx": UINT}) def hook___acrt_iob_func(ql, address, params): ret = 0 return ret @@ -246,7 +246,7 @@ def hook___stdio_common_vswprintf_s(ql, address, _): # int lstrlenA( # LPCSTR lpString # ); -@winsdkapi(cc=CDECL, defparams={'lpString': POINTER}) +@winsdkapi(cc=CDECL, replace_typeEx={'lpString': POINTER}) def hook_lstrlenA(ql, address, params): addr = params["lpString"] string = b"" @@ -262,7 +262,7 @@ def hook_lstrlenA(ql, address, params): # int lstrlenW( # LPCWSTR lpString # ); -@winsdkapi(cc=CDECL, defparams={'lpString': POINTER}) +@winsdkapi(cc=CDECL, replace_typeEx={'lpString': POINTER}) def hook_lstrlenW(ql, address, params): addr = params["lpString"] string = b"" @@ -275,7 +275,7 @@ def hook_lstrlenW(ql, address, params): return len(string) -@winsdkapi(cc=CDECL, defparams={}) +@winsdkapi(cc=CDECL) def hook___lconv_init(ql, address, params): ret = 0 return ret @@ -284,7 +284,7 @@ def hook___lconv_init(ql, address, params): # size_t strlen( # const char *str # ); -@winsdkapi(cc=CDECL, defparams={"str": STRING}) +@winsdkapi(cc=CDECL, replace_typeEx={"str": STRING}) def hook_strlen(ql, address, params): _str = params["str"] strlen = len(_str) @@ -296,7 +296,7 @@ def hook_strlen(ql, address, params): # const char *string2, # size_t count # ); -@winsdkapi(cc=CDECL, defparams={"string1": STRING, "string2": STRING, "count": SIZE_T}) +@winsdkapi(cc=CDECL, replace_typeEx={"string1": STRING, "string2": STRING, "count": SIZE_T}) def hook_strncmp(ql, address, params): s1 = params["string1"] s2 = params["string2"] @@ -314,7 +314,7 @@ def hook_strncmp(ql, address, params): # void* malloc（unsigned int size) -@winsdkapi(cc=CDECL, defparams={"size": UINT}) +@winsdkapi(cc=CDECL, replace_typeEx={"size": UINT}) def hook_malloc(ql, address, params): size = params['size'] addr = ql.os.heap.alloc(size) @@ -324,7 +324,7 @@ def hook_malloc(ql, address, params): # _onexit_t _onexit( # _onexit_t function # ); -@winsdkapi(cc=CDECL, defparams={"function": POINTER}) +@winsdkapi(cc=CDECL, replace_typeEx={"function": POINTER}) def hook__onexit(ql, address, params): function = params['function'] addr = ql.os.heap.alloc(ql.pointersize) @@ -337,7 +337,7 @@ def hook__onexit(ql, address, params): # int c, # size_t count # ); -@winsdkapi(cc=CDECL, defparams={"dest": POINTER, "c": INT, "count": SIZE_T}) +@winsdkapi(cc=CDECL, replace_typeEx={"dest": POINTER, "c": INT, "count": SIZE_T}) def hook_memset(ql, address, params): dest = params["dest"] c = params["c"] @@ -350,7 +350,7 @@ def hook_memset(ql, address, params): # size_t num, # size_t size # ); -@winsdkapi(cc=CDECL, defparams={"num": SIZE_T, "size": SIZE_T}) +@winsdkapi(cc=CDECL, replace_typeEx={"num": SIZE_T, "size": SIZE_T}) def hook_calloc(ql, address, params): num = params['num'] size = params['size'] @@ -363,7 +363,7 @@ def hook_calloc(ql, address, params): # const void *src, # size_t num # ); -@winsdkapi(cc=CDECL, defparams={"dest": POINTER, "src": POINTER, "num": SIZE_T}) +@winsdkapi(cc=CDECL, replace_typeEx={"dest": POINTER, "src": POINTER, "num": SIZE_T}) def hook_memmove(ql, address, params): data = ql.mem.read(params['src'], params['num']) ql.mem.write(params['dest'], bytes(data)) @@ -373,7 +373,7 @@ def hook_memmove(ql, address, params): # int _ismbblead( # unsigned int c # ); -@winsdkapi(cc=CDECL, defparams={"c": UINT}) +@winsdkapi(cc=CDECL, replace_typeEx={"c": UINT}) def hook__ismbblead(ql, address, params): # TODO check if is CDECL or not # If locale is utf-8 always return 0 @@ -389,7 +389,7 @@ def hook__ismbblead(ql, address, params): # const wchar_t *filename, # const wchar_t *mode # ); -@winsdkapi(cc=CDECL, defparams={"pFile": POINTER, "filename": WSTRING, "mode": WSTRING}) +@winsdkapi(cc=CDECL, replace_typeEx={"pFile": POINTER, "filename": WSTRING, "mode": WSTRING}) def hook__wfopen_s(ql, address, params): dst = params["pFile"] filename = params["filename"] @@ -403,7 +403,7 @@ def hook__wfopen_s(ql, address, params): # time_t time( time_t *destTime ); -@winsdkapi(cc=CDECL, defparams={"destTime": POINTER}) +@winsdkapi(cc=CDECL, replace_typeEx={"destTime": POINTER}) def hook__time64(ql, address, params): dst = params["destTime"] time_wasted = int(time.time()) diff --git a/qiling/os/windows/dlls/ntdll.py b/qiling/os/windows/dlls/ntdll.py index 6514cba6a..069466b00 100644 --- a/qiling/os/windows/dlls/ntdll.py +++ b/qiling/os/windows/dlls/ntdll.py @@ -20,7 +20,7 @@ # const void *src, # size_t count # ); -@winsdkapi(cc=CDECL, dllname=dllname, defparams={"dest": POINTER, "src": POINTER, "count": UINT}) +@winsdkapi(cc=CDECL, dllname=dllname, replace_typeEx={"dest": POINTER, "src": POINTER, "count": UINT}) def hook_memcpy(ql, address, params): try: data = bytes(ql.mem.read(params['src'], params['count'])) @@ -70,7 +70,7 @@ def _QueryInformationProcess(ql, address, params): # _Out_opt_ PULONG ReturnLength # ); @winsdkapi(cc=CDECL, dllname=dllname, - defparams={"ProcessHandle": HANDLE, "ProcessInformationClass": INT, "ProcessInformation": POINTER, + replace_typeEx={"ProcessHandle": HANDLE, "ProcessInformationClass": INT, "ProcessInformation": POINTER, "ProcessInformationLength": UINT, "ReturnLength": POINTER}) def hook_ZwQueryInformationProcess(ql, address, params): # TODO have no idea if is cdecl or stdcall @@ -98,7 +98,7 @@ def hook_NtQueryInformationProcess(ql, address, params): # ObjectAttributes: POBJECT_ATTRIBUTES, # Flags: ULONG # ) -> NTSTATUS -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"DebugObjectHandle": HANDLE, "DesiredAccess": INT, +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"DebugObjectHandle": HANDLE, "DesiredAccess": INT, "ObjectAttributes": POINTER, "Flags": ULONGLONG}) def hook_ZwCreateDebugObject(ql, address, params): # FIXME: find documentation, almost none was found online, and create the correct object @@ -150,7 +150,7 @@ def hook_ZwQueryObject(ql, address, params): # NTAPI # NtYieldExecution( # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_ZwYieldExecution(ql, address, params): # FIXME: offer timeslice of this thread return STATUS_NO_YIELD_PERFORMED @@ -161,7 +161,7 @@ def hook_ZwYieldExecution(ql, address, params): # IN PANSI_STRING FunctionName OPTIONAL, # IN WORD Oridinal OPTIONAL, # OUT PVOID *FunctionAddress ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"ModuleHandle": POINTER, +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"ModuleHandle": POINTER, "FunctionName": STRING, "Ordinal": UINT, "FunctionAddress": POINTER}) def hook_LdrGetProcedureAddress(ql, address, params): if params['FunctionName']: @@ -188,7 +188,7 @@ def hook_LdrGetProcedureAddress(ql, address, params): # ULONG Flags, # SIZE_T Size # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"HeapHandle": POINTER, +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"HeapHandle": POINTER, "Flags": UINT,"Size": SIZE_T}) def hook_RtlAllocateHeap(ql, address, params): ret = ql.heap.alloc(params["Size"]) @@ -196,7 +196,7 @@ def hook_RtlAllocateHeap(ql, address, params): # wchar_t* wcsstr( const wchar_t* dest, const wchar_t* src ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"dest": POINTER, "src": WSTRING}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"dest": POINTER, "src": WSTRING}) def hook_wcsstr(ql, address, params): dest = params["dest"] value = ql.os.read_wstring(dest) @@ -209,7 +209,7 @@ def hook_wcsstr(ql, address, params): # HANDLE CsrGetProcessId(); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={}) +@winsdkapi(cc=STDCALL, dllname=dllname) def hook_CsrGetProcessId(ql, address, params): pid = ql.os.profile["PROCESSES"].getint("csrss.exe", fallback=12345) return pid diff --git a/qiling/os/windows/dlls/ntoskrnl.py b/qiling/os/windows/dlls/ntoskrnl.py index a106841a0..a32e4ee87 100644 --- a/qiling/os/windows/dlls/ntoskrnl.py +++ b/qiling/os/windows/dlls/ntoskrnl.py @@ -18,7 +18,7 @@ # NTSYSAPI NTSTATUS RtlGetVersion( # PRTL_OSVERSIONINFOW lpVersionInformation # ); -@winsdkapi(cc=CDECL, dllname=dllname, defparams={"lpVersionInformation": POINTER}) +@winsdkapi(cc=CDECL, dllname=dllname, replace_typeEx={"lpVersionInformation": POINTER}) def hook_RtlGetVersion(ql, address, params): pointer = params["lpVersionInformation"] os = OsVersionInfoW(ql) @@ -36,7 +36,7 @@ def hook_RtlGetVersion(ql, address, params): # PVOID ThreadInformation, # ULONG ThreadInformationLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"ThreadHandle": HANDLE, +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"ThreadHandle": HANDLE, "ThreadInformationClass": INT, "ThreadInformation": POINTER, "ThreadInformationLength": UINT}) def hook_ZwSetInformationThread(ql, address, params): thread = params["ThreadHandle"] @@ -62,7 +62,7 @@ def hook_ZwSetInformationThread(ql, address, params): # NTSYSAPI NTSTATUS ZwClose( # HANDLE Handle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, defparams={"Handle": HANDLE}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"Handle": HANDLE}) def hook_ZwClose(ql, address, params): value = params["Handle"] handle = ql.os.handle_manager.get(value) diff --git a/qiling/os/windows/dlls/shell32.py b/qiling/os/windows/dlls/shell32.py index f32064cb4..a55f8111e 100644 --- a/qiling/os/windows/dlls/shell32.py +++ b/qiling/os/windows/dlls/shell32.py @@ -93,7 +93,7 @@ def hook_ShellExecuteExW(ql, address, params): # LPCWSTR lpDirectory, # INT nShowCmd # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCWSTR': 'POINTER'}) def hook_ShellExecuteW(ql, address, params): shellInfo = ShellExecuteInfoA(ql, hwnd=params["hwnd"], lpVerb=params["lpOperation"], lpFile=params["lpFile"], lpParams=params["lpParameters"], lpDir=params["lpDirectory"], show=params["nShowCmd"]) diff --git a/qiling/os/windows/dlls/user32.py b/qiling/os/windows/dlls/user32.py index d3669163a..3e5a32dcc 100644 --- a/qiling/os/windows/dlls/user32.py +++ b/qiling/os/windows/dlls/user32.py @@ -20,7 +20,7 @@ # DLGPROC lpDialogFunc, # LPARAM dwInitParam # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCSTR': 'POINTER'}) def hook_DialogBoxParamA(ql, address, params): ret = 0 return ret @@ -140,7 +140,7 @@ def hook_MapVirtualKeyW(ql, address, params): # SHORT GetKeyState( # int nVirtKey # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'int': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'int': 'UINT'}) def hook_GetKeyState(ql, address, params): let = chr(params["nVirtKey"]) ql.dprint(0, let) @@ -232,7 +232,7 @@ def hook_GetDeviceCaps(ql, address, params): # HWND hWnd, # HDC hDC # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HWND': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HWND': 'POINTER'}) def hook_ReleaseDC(ql, address, params): return 1 @@ -259,7 +259,7 @@ def hook_GetSysColorBrush(ql, address, params): # HINSTANCE hInstance, # LPCSTR lpCursorName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HINSTANCE': 'POINTER', 'LPCSTR': 'INT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HINSTANCE': 'POINTER', 'LPCSTR': 'INT'}) def hook_LoadCursorA(ql, address, params): return 0xd10c @@ -294,7 +294,7 @@ def hook_GetOEMCP(ql, address, params): # LPSTR lpBuffer, # int cchBufferMax # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HINSTANCE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HINSTANCE': 'POINTER'}) def hook_LoadStringW(ql, address, params): dst = params["lpBuffer"] max_len = params["cchBufferMax"] @@ -315,7 +315,7 @@ def hook_LoadStringW(ql, address, params): # LPSTR lpBuffer, # int cchBufferMax # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HINSTANCE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HINSTANCE': 'POINTER'}) def hook_LoadStringA(ql, address, params): dst = params["lpBuffer"] max_len = params["cchBufferMax"] @@ -344,7 +344,7 @@ def hook_MessageBeep(ql, address, params): # HINSTANCE hmod, # DWORD dwThreadId # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HINSTANCE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HINSTANCE': 'POINTER'}) def hook_SetWindowsHookExA(ql, address, params): # Should hook a procedure to a dll hook = params["lpfn"] @@ -363,7 +363,7 @@ def hook_UnhookWindowsHookEx(ql, address, params): # HWND hWnd, # int nCmdShow # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HWND': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HWND': 'POINTER'}) def hook_ShowWindow(ql, address, params): # return value depends on sample goal (evasion on just display error) return 0x1 @@ -373,7 +373,7 @@ def hook_ShowWindow(ql, address, params): # HINSTANCE hInstance, # LPCSTR lpIconName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HINSTANCE': 'POINTER', 'LPCSTR': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HINSTANCE': 'POINTER', 'LPCSTR': 'UINT'}) def hook_LoadIconA(ql, address, params): return hook_LoadIconW(ql, address, params) @@ -382,7 +382,7 @@ def hook_LoadIconA(ql, address, params): # HINSTANCE hInstance, # LPCWSTR lpIconName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HINSTANCE': 'POINTER', 'LPCWSTR': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HINSTANCE': 'POINTER', 'LPCWSTR': 'UINT'}) def hook_LoadIconW(ql, address, params): handle = Handle() ql.os.handle_manager.append(handle) @@ -392,7 +392,7 @@ def hook_LoadIconW(ql, address, params): # BOOL IsWindow( # HWND hWnd # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HWND': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HWND': 'POINTER'}) def hook_IsWindow(ql, address, params): # return value depends on sample goal (evasion on just display error) return 0x1 @@ -404,7 +404,7 @@ def hook_IsWindow(ql, address, params): # WPARAM wParam, # LPARAM lParam # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HWND': 'POINTER', 'LPARAM': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HWND': 'POINTER', 'LPARAM': 'UINT'}) def hook_SendMessageA(ql, address, params): # TODO don't know how to get right return value return 0xD10C @@ -416,7 +416,7 @@ def hook_SendMessageA(ql, address, params): # WPARAM wParam, # LPARAM lParam # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HWND': 'POINTER', 'LPARAM': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HWND': 'POINTER', 'LPARAM': 'UINT'}) def hook_DefWindowProcA(ql, address, params): # TODO don't know how to get right return value return 0xD10C @@ -425,7 +425,7 @@ def hook_DefWindowProcA(ql, address, params): # LPWSTR CharNextW( # LPCWSTR lpsz # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCWSTR': 'POINTER'}) def hook_CharNextW(ql, address, params): # Return next char if is different from \x00 point = params["lpsz"][0] @@ -456,7 +456,7 @@ def hook_CharNextA(ql, address, params): # LPCWSTR lpszStart, # LPCWSTR lpszCurrent # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCWSTR': 'POINTER'}) def hook_CharPrevW(ql, address, params): # Return next char if is different from \x00 current = params["lpszCurrent"] @@ -475,7 +475,7 @@ def hook_CharPrevW(ql, address, params): # LPCSTR lpszStart, # LPCSTR lpszCurrent # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCSTR': 'POINTER'}) def hook_CharPrevA(ql, address, params): # Return next char if is different from \x00 current = params["lpszCurrent"] @@ -555,7 +555,7 @@ def hook_MoveWindow(ql, address, params): # int GetKeyboardType( # int nTypeFlag # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'int': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'int': 'UINT'}) def hook_GetKeyboardType(ql, address, params): """ See https://salsa.debian.org/wine-team/wine/-/blob/master/dlls/user32/input.c diff --git a/qiling/os/windows/dlls/wininet.py b/qiling/os/windows/dlls/wininet.py index 08eb8196d..ae9ceb064 100644 --- a/qiling/os/windows/dlls/wininet.py +++ b/qiling/os/windows/dlls/wininet.py @@ -131,7 +131,7 @@ def hook_HttpOpenRequestA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtypeEx={'lpBuffersIn': 'POINTER', 'lpBuffersOut': 'STRING'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={'lpBuffersIn': 'POINTER', 'lpBuffersOut': 'STRING'}) def hook_HttpSendRequestExA(ql, address, params): pass @@ -204,7 +204,7 @@ def hook_HttpSendRequestW(ql, address, params): # DWORD dwFlags, # LPVOID *lppvData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'HWND': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HWND': 'POINTER'}) def hook_InternetErrorDlg(ql, address, params): pass @@ -237,6 +237,6 @@ def hook_InternetWriteFile(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'LPINTERNET_BUFFERSA': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPINTERNET_BUFFERSA': 'POINTER'}) def hook_HttpEndRequestA(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/wsock32.py b/qiling/os/windows/dlls/wsock32.py index 88a0ed023..c396642a1 100644 --- a/qiling/os/windows/dlls/wsock32.py +++ b/qiling/os/windows/dlls/wsock32.py @@ -32,7 +32,7 @@ def hook_WSAStartup(ql, address, params): # GROUP g, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'DWORD': 'INT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'INT'}) def hook_WSASocketA(ql, address, params): return 0 @@ -69,7 +69,7 @@ def hook_connect(ql, address, params): # hostent * gethostbyname( # const char *name # ); -@winsdkapi(cc=STDCALL, dllname=dllname, specialtype={'char': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'char': 'POINTER'}) def hook_gethostbyname(ql, address, params): ip_str = ql.os.profile.getint("NETWORK", "dns_response_ip") ip = bytes([int(octet) for octet in ip_str.split('.')[::-1]]) diff --git a/qiling/os/windows/dlls/wudplatform.py b/qiling/os/windows/dlls/wudplatform.py index 3a82a2d6e..41be8f072 100644 --- a/qiling/os/windows/dlls/wudplatform.py +++ b/qiling/os/windows/dlls/wudplatform.py @@ -12,7 +12,6 @@ from qiling.os.windows.handle import * from qiling.exception import * - @winsdkapi(cc=STDCALL) def hook_WudfIsUserDebuggerPresent(ql, address, params): return 0 diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index 4cf14f94a..fbc1ddd90 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -27,48 +27,65 @@ def replacetype(type, specialtype=None): return type # x86/x8664 PE should share Windows APIs -def winsdkapi(cc, param_num=None, dllname=None, specialtype=None, specialtypeEx=None, defparams=None): +def winsdkapi(cc, param_num=None, dllname=None, replace_type=None, replace_typeEx=None): """ @cc: windows api calling convention, only x86 needs this, x64 is always fastcall @param_num: the number of function params, used by variadic functions, e.g printf @dllname: the name of function - @funcname: function's name - @specialtype: customize replace type, e.g specialtype={'int':'UINT'} means repalce 'int' to 'UINT' - @specialtypeEx: customize replace param_name's type, e.g specialtypeEx={'time':'int'} means + @replace_type: customize replace type, e.g specialtype={'int':'UINT'} means repalce 'int' to 'UINT' + @replace_typeEx: customize replace param_name's type, e.g specialtypeEx={'time':'int'} means replace the original type of time to int - @defparams: customize all params and their type """ + if replace_typeEx is None: + replace_typeEx = {} + def decorator(func): @wraps(func) def wrapper(*args, **kwargs): funcname = func.__name__[5:] params = {} - paramlist = [] + funclist = [] ql = args[0] - if defparams is not None: - params = defparams - else: - if dllname is not None: - windows_abspath = os.path.dirname(os.path.abspath(__file__)) - winsdk_path = os.path.join(windows_abspath[:-11], 'extensions', 'windows_sdk', 'defs', dllname + '.json') - if os.path.exists(winsdk_path): - f = open(winsdk_path, 'r') - funclist = json.load(f) - paramlist = funclist[funcname] - for para in paramlist: - name = list(para.values())[0] - if name == 'VOID': - params = {} - break - elif specialtypeEx is not None and name in specialtypeEx.keys(): - type = specialtypeEx[name] - else: - type = list(para.values())[1] - if isinstance(type, dict): - type = replacetype(type['name'], specialtype) + + if dllname is not None: + windows_abspath = os.path.dirname(os.path.abspath(__file__)) + winsdk_path = os.path.join(windows_abspath[:-11], 'extensions', 'windows_sdk', 'defs', dllname + '.json') + + if os.path.exists(winsdk_path): + f = open(winsdk_path, 'r') + funclist = json.load(f) + else: + ql.nprint('[!]', winsdk_path, 'not found') + if funcname not in funclist: + params = replace_typeEx + else: + paramlist = funclist[funcname] + + if len(replace_typeEx.keys()) == len(paramlist): + params = replace_typeEx + for key in params: + if isinstance(params[key], str): + type = replacetype(params[key], replace_type) + params[key] = eval(type) + else: + for para in paramlist: + name = list(para.values())[0] + if name == 'VOID' or (name in replace_typeEx.keys() and replace_typeEx[name] == ''): + params = {} + break + elif replace_typeEx is not None and name in replace_typeEx.keys(): + type = replace_typeEx[name] + params[name] = type else: - type = replacetype(list(para.values())[1], specialtype) - params[name] = eval(type) + type = list(para.values())[1] + if isinstance(type, dict): + type = replacetype(type['name'], replace_type) + else: + type = replacetype(list(para.values())[1], replace_type) + if isinstance(type, str): + params[name] = eval(type) + else: + params = replace_typeEx if ql.archtype == QL_ARCH.X86: if cc == STDCALL: diff --git a/tests/test_pe.py b/tests/test_pe.py index b7a4b0fd9..e295addd5 100644 --- a/tests/test_pe.py +++ b/tests/test_pe.py @@ -200,7 +200,7 @@ def end(ql): def test_pe_win_x8664_customapi(self): - @winsdkapi(cc=CDECL, defparams={"str": STRING}) + @winsdkapi(cc=CDECL, replace_typeEx={"str": STRING}) def my_puts64(ql, address, params): ret = 0 print("\n+++++++++ My Windows 64bit Windows API +++++++++\n") From 10002e055e20c5146474eb1828558a3acae080ee Mon Sep 17 00:00:00 2001 From: xwings Date: Sun, 28 Jun 2020 13:19:50 +0800 Subject: [PATCH 37/86] rename function name --- qiling/os/windows/dlls/advapi32.py | 4 +- qiling/os/windows/dlls/crypt32.py | 4 +- .../os/windows/dlls/kernel32/consoleapi2.py | 6 +-- .../windows/dlls/kernel32/errhandlingapi.py | 6 +-- qiling/os/windows/dlls/kernel32/fibersapi.py | 6 +-- qiling/os/windows/dlls/kernel32/fileapi.py | 10 ++--- qiling/os/windows/dlls/kernel32/handleapi.py | 4 +- qiling/os/windows/dlls/kernel32/heapapi.py | 2 +- .../os/windows/dlls/kernel32/libloaderapi.py | 16 ++++---- qiling/os/windows/dlls/kernel32/memoryapi.py | 4 +- qiling/os/windows/dlls/kernel32/processenv.py | 2 +- .../dlls/kernel32/processthreadsapi.py | 14 +++---- .../os/windows/dlls/kernel32/stringapiset.py | 4 +- qiling/os/windows/dlls/kernel32/synchapi.py | 4 +- qiling/os/windows/dlls/kernel32/winbase.py | 8 ++-- qiling/os/windows/dlls/kernel32/winnls.py | 4 +- qiling/os/windows/dlls/kernel32/winnt.py | 8 ++-- qiling/os/windows/dlls/mscoree.py | 2 +- qiling/os/windows/dlls/msvcrt.py | 40 +++++++++---------- qiling/os/windows/dlls/ntdll.py | 12 +++--- qiling/os/windows/dlls/ntoskrnl.py | 6 +-- qiling/os/windows/dlls/shell32.py | 2 +- qiling/os/windows/dlls/user32.py | 34 ++++++++-------- qiling/os/windows/dlls/wininet.py | 6 +-- qiling/os/windows/dlls/wsock32.py | 4 +- qiling/os/windows/fncc.py | 29 ++++++-------- tests/test_pe.py | 2 +- 27 files changed, 120 insertions(+), 123 deletions(-) diff --git a/qiling/os/windows/dlls/advapi32.py b/qiling/os/windows/dlls/advapi32.py index 99869fdf6..ece6fec6c 100644 --- a/qiling/os/windows/dlls/advapi32.py +++ b/qiling/os/windows/dlls/advapi32.py @@ -225,7 +225,7 @@ def hook_RegCreateKeyW(ql, address, params): # PHKEY phkResult, # LPDWORD lpdwDisposition # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'POINTER'}) def hook_RegCreateKeyExW(ql, address, params): ret = ERROR_SUCCESS @@ -406,7 +406,7 @@ def hook_GetSidSubAuthorityCount(ql, address, params): # PSID pSid, # DWORD nSubAuthority # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'INT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'INT'}) def hook_GetSidSubAuthority(ql, address, params): num = params["nSubAuthority"] sid = ql.os.handle_manager.get(params["pSid"]).obj diff --git a/qiling/os/windows/dlls/crypt32.py b/qiling/os/windows/dlls/crypt32.py index 12ece042e..2544c0596 100644 --- a/qiling/os/windows/dlls/crypt32.py +++ b/qiling/os/windows/dlls/crypt32.py @@ -21,8 +21,8 @@ # DWORD *pdwSkip, # DWORD *pdwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'BYTE': 'POINTER'}, - replace_typeEx={"pcbBinary": POINTER, "pdwSkip": POINTER, "pdwFlags": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'BYTE': 'POINTER'}, + replace_params={"pcbBinary": POINTER, "pdwSkip": POINTER, "pdwFlags": POINTER}) def hook_CryptStringToBinaryA(ql, address, params): flag_src = params["dwFlags"] string_src = params["pszString"] diff --git a/qiling/os/windows/dlls/kernel32/consoleapi2.py b/qiling/os/windows/dlls/kernel32/consoleapi2.py index 743bae434..90ec108b9 100644 --- a/qiling/os/windows/dlls/kernel32/consoleapi2.py +++ b/qiling/os/windows/dlls/kernel32/consoleapi2.py @@ -18,7 +18,7 @@ # BOOL WINAPI SetConsoleTitle( # _In_ LPCTSTR lpConsoleTitle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"lpConsoleTitle": WSTRING}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"lpConsoleTitle": WSTRING}) def hook_SetConsoleTitleW(ql, address, params): return 1 @@ -27,7 +27,7 @@ def hook_SetConsoleTitleW(ql, address, params): # _In_ HANDLE hConsoleOutput, # _Out_ PCONSOLE_SCREEN_BUFFER_INFO lpConsoleScreenBufferInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"hConsoleOutput": HANDLE, "lpConsoleScreenBufferInfo": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"hConsoleOutput": HANDLE, "lpConsoleScreenBufferInfo": POINTER}) def hook_GetConsoleScreenBufferInfo(ql, address, params): # Todo should we really? return 1 @@ -37,6 +37,6 @@ def hook_GetConsoleScreenBufferInfo(ql, address, params): # _In_ HANDLE hConsoleOutput, # _In_ WORD wAttributes # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"hConsoleOutput": HANDLE, "wAttributes": INT}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"hConsoleOutput": HANDLE, "wAttributes": INT}) def hook_SetConsoleTextAttribute(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/kernel32/errhandlingapi.py b/qiling/os/windows/dlls/kernel32/errhandlingapi.py index 08ee0b1b6..131cb74da 100644 --- a/qiling/os/windows/dlls/kernel32/errhandlingapi.py +++ b/qiling/os/windows/dlls/kernel32/errhandlingapi.py @@ -39,7 +39,7 @@ def hook_GetLastError(ql, address, params): # void SetLastError( # DWORD dwErrCode # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'UINT'}) def hook_SetLastError(ql, address, params): ql.os.last_error = params['dwErrCode'] return 0 @@ -84,7 +84,7 @@ def hook_RaiseException(ql, address, params): # ULONG First, # PVECTORED_EXCEPTION_HANDLER Handler # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'ULONG': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'ULONG': 'UINT'}) def hook_AddVectoredExceptionHandler(ql, address, params): # this case is an anomaly from other interrupts (from what i learned, can be wrong) @@ -130,7 +130,7 @@ def exec_standard_into(ql, into, user_data): # ULONG RemoveVectoredExceptionHandler( # PVOID Handle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'PVOID': 'HANDLE'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'PVOID': 'HANDLE'}) def hook_RemoveVectoredExceptionHandler(ql, address, params): hook = ql.os.handle_manager.get(params["Handle"]).obj hook.remove() diff --git a/qiling/os/windows/dlls/kernel32/fibersapi.py b/qiling/os/windows/dlls/kernel32/fibersapi.py index d77948943..4d62189b3 100644 --- a/qiling/os/windows/dlls/kernel32/fibersapi.py +++ b/qiling/os/windows/dlls/kernel32/fibersapi.py @@ -18,7 +18,7 @@ # DWORD FlsFree( # DWORD dwFlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'UINT'}) def hook_FlsFree(ql, address, params): return ql.os.fiber_manager.free(params['dwFlsIndex']) @@ -26,7 +26,7 @@ def hook_FlsFree(ql, address, params): # LPVOID FlsGetValue( # DWORD dwFlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'UINT'}) def hook_FlsGetValue(ql, address, params): return ql.os.fiber_manager.get(params['dwFlsIndex']) @@ -35,7 +35,7 @@ def hook_FlsGetValue(ql, address, params): # DWORD dwFlsIndex # PVOID lpFlsData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'UINT'}) def hook_FlsSetValue(ql, address, params): return ql.os.fiber_manager.set(params['dwFlsIndex'], params['lpFlsData']) diff --git a/qiling/os/windows/dlls/kernel32/fileapi.py b/qiling/os/windows/dlls/kernel32/fileapi.py index 980d1aef7..129ee17d2 100644 --- a/qiling/os/windows/dlls/kernel32/fileapi.py +++ b/qiling/os/windows/dlls/kernel32/fileapi.py @@ -38,7 +38,7 @@ def hook_GetFileType(ql, address, params): # LPCSTR lpFileName, # LPWIN32_FIND_DATAA lpFindFileData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCSTR': 'POINTER'}) def hook_FindFirstFileA(ql, address, params): pass @@ -47,7 +47,7 @@ def hook_FindFirstFileA(ql, address, params): # LPCSTR lpFileName, # LPWIN32_FIND_DATAA lpFindFileData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCSTR': 'POINTER'}) def hook_FindNextFileA(ql, address, params): pass @@ -281,7 +281,7 @@ def hook_GetVolumeInformationW(ql, address, params): # UINT GetDriveTypeW( # LPCWSTR lpRootPathName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCWSTR': 'POINTER'}) def hook_GetDriveTypeW(ql, address, params): path = params["lpRootPathName"] if path != 0: @@ -300,7 +300,7 @@ def hook_GetDriveTypeW(ql, address, params): # LPDWORD lpNumberOfFreeClusters, # LPDWORD lpTotalNumberOfClusters # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCWSTR': 'POINTER'}) def hook_GetDiskFreeSpaceW(ql, address, params): path = params["lpRootPathName"] if path == ql.os.profile["PATH"]["systemdrive"]: @@ -344,7 +344,7 @@ def hook_CreateDirectoryA(ql, address, params): # HANDLE hFile, # LPDWORD lpFileSizeHigh # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPDWORD': 'DWORD'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPDWORD': 'DWORD'}) def hook_GetFileSize(ql, address, params): try: handle = ql.handle_manager.get(params['hFile'].file) diff --git a/qiling/os/windows/dlls/kernel32/handleapi.py b/qiling/os/windows/dlls/kernel32/handleapi.py index 8f6a2be5c..5688823e9 100644 --- a/qiling/os/windows/dlls/kernel32/handleapi.py +++ b/qiling/os/windows/dlls/kernel32/handleapi.py @@ -24,7 +24,7 @@ # BOOL bInheritHandle, # DWORD dwOptions # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HANDLE': 'POINTER'}) def hook_DuplicateHandle(ql, address, params): # TODO for how we manage handle, i think this doesn't work content = params["hSourceHandle"] @@ -58,7 +58,7 @@ def hook_CloseHandle(ql, address, params): # DWORD dwMask, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HANDLE': 'POINTER'}) def hook_SetHandleInformation(ql, address, params): val = params["hObject"] handle = ql.os.handle_manager.get(val) diff --git a/qiling/os/windows/dlls/kernel32/heapapi.py b/qiling/os/windows/dlls/kernel32/heapapi.py index 5a48bf1e1..2015541a5 100644 --- a/qiling/os/windows/dlls/kernel32/heapapi.py +++ b/qiling/os/windows/dlls/kernel32/heapapi.py @@ -65,7 +65,7 @@ def hook_HeapFree(ql, address, params): # PVOID HeapInformation, # SIZE_T HeapInformationLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'SIZE_T': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'SIZE_T': 'UINT'}) def hook_HeapSetInformation(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/kernel32/libloaderapi.py b/qiling/os/windows/dlls/kernel32/libloaderapi.py index 02ef033c5..9a19c0f7d 100644 --- a/qiling/os/windows/dlls/kernel32/libloaderapi.py +++ b/qiling/os/windows/dlls/kernel32/libloaderapi.py @@ -120,7 +120,7 @@ def hook_GetModuleFileNameW(ql, address, params): # HMODULE hModule, # LPCSTR lpProcName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCSTR': 'POINTER'}) def hook_GetProcAddress(ql, address, params): if params["lpProcName"] > MAXUSHORT: # Look up by name @@ -170,7 +170,7 @@ def hook_LoadLibraryA(ql, address, params): # HANDLE hFile, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HANDLE': 'POINTER'}) def hook_LoadLibraryExA(ql, address, params): lpLibFileName = params["lpLibFileName"] dll_base = ql.loader.load_dll(lpLibFileName.encode()) @@ -192,7 +192,7 @@ def hook_LoadLibraryW(ql, address, params): # HANDLE hFile, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HANDLE': 'POINTER'}) def hook_LoadLibraryExW(ql, address, params): lpLibFileName = params["lpLibFileName"].encode() dll_base = ql.loader.load_dll(lpLibFileName) @@ -203,7 +203,7 @@ def hook_LoadLibraryExW(ql, address, params): # HMODULE hModule, # HRSRC hResInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HMODULE': 'POINTER'}) def hook_SizeofResource(ql, address, params): # Return size of resource # TODO set a valid value. More tests have to be made to find it. @@ -214,7 +214,7 @@ def hook_SizeofResource(ql, address, params): # HMODULE hModule, # HRSRC hResInfo # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HMODULE': 'POINTER'}) def hook_LoadResource(ql, address, params): pointer = params["hResInfo"] return pointer @@ -223,7 +223,7 @@ def hook_LoadResource(ql, address, params): # LPVOID LockResource( # HGLOBAL hResData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HMODULE': 'POINTER'}) def hook_LockResource(ql, address, params): pointer = params["hResData"] return pointer @@ -232,7 +232,7 @@ def hook_LockResource(ql, address, params): # BOOL DisableThreadLibraryCalls( # HMODULE hLibModule # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HMODULE': 'POINTER'}) def hook_DisableThreadLibraryCalls(ql, address, params): return 1 @@ -240,7 +240,7 @@ def hook_DisableThreadLibraryCalls(ql, address, params): # BOOL FreeLibrary( # HMODULE hLibModule # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HMODULE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HMODULE': 'POINTER'}) def hook_FreeLibrary(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/kernel32/memoryapi.py b/qiling/os/windows/dlls/kernel32/memoryapi.py index e8faab2eb..355d7463c 100644 --- a/qiling/os/windows/dlls/kernel32/memoryapi.py +++ b/qiling/os/windows/dlls/kernel32/memoryapi.py @@ -46,7 +46,7 @@ def hook_VirtualFree(ql, address, params): # DWORD flNewProtect, # PDWORD lpflOldProtect # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) def hook_VirtualProtect(ql, address, params): return 1 @@ -56,7 +56,7 @@ def hook_VirtualProtect(ql, address, params): # PMEMORY_BASIC_INFORMATION lpBuffer, # SIZE_T dwLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'SIZE_T': 'UINT', 'DWORD': 'UINT'}) def hook_VirtualQuery(ql, address, params): """ typedef struct _MEMORY_BASIC_INFORMATION { diff --git a/qiling/os/windows/dlls/kernel32/processenv.py b/qiling/os/windows/dlls/kernel32/processenv.py index 7e5a03214..cb5bf6b09 100644 --- a/qiling/os/windows/dlls/kernel32/processenv.py +++ b/qiling/os/windows/dlls/kernel32/processenv.py @@ -11,7 +11,7 @@ # HANDLE WINAPI GetStdHandle( # _In_ DWORD nStdHandle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"nStdHandle": DWORD}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"nStdHandle": DWORD}) def hook_GetStdHandle(ql, address, params): nStdHandle = params["nStdHandle"] return nStdHandle diff --git a/qiling/os/windows/dlls/kernel32/processthreadsapi.py b/qiling/os/windows/dlls/kernel32/processthreadsapi.py index df081ffbb..6a8d0ebcc 100644 --- a/qiling/os/windows/dlls/kernel32/processthreadsapi.py +++ b/qiling/os/windows/dlls/kernel32/processthreadsapi.py @@ -20,7 +20,7 @@ # void ExitProcess( # UINT uExitCode # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'UINT': 'DWORD'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'UINT': 'DWORD'}) def hook_ExitProcess(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False @@ -64,7 +64,7 @@ def hook_TlsAlloc(ql, address, params): # DWORD TlsFree( # DWORD dwTlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"dwTlsIndex": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"dwTlsIndex": UINT}) def hook_TlsFree(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -78,7 +78,7 @@ def hook_TlsFree(ql, address, params): # LPVOID TlsGetValue( # DWORD dwTlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"dwTlsIndex": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"dwTlsIndex": UINT}) def hook_TlsGetValue(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -94,7 +94,7 @@ def hook_TlsGetValue(ql, address, params): # LPVOID TlsSetValue( # DWORD dwTlsIndex # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"dwTlsIndex": UINT, "lpTlsValue": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"dwTlsIndex": UINT, "lpTlsValue": POINTER}) def hook_TlsSetValue(ql, address, params): idx = params['dwTlsIndex'] if idx not in ql.os.thread_manager.cur_thread.tls: @@ -221,7 +221,7 @@ def hook_GetCurrentThread(ql, address, params): # BOOL bInheritHandle, # DWORD dwProcessId # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'BOOL': 'HANDLE'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'BOOL': 'HANDLE'}) def hook_OpenProcess(ql, address, params): proc = params["dwProcessId"] # If the specified process is the System Process (0x00000000), @@ -244,7 +244,7 @@ def hook_OpenProcess(ql, address, params): # PHANDLE TokenHandle # ); @winsdkapi(cc=STDCALL, dllname=dllname, - replace_typeEx={"ProcessHandle": HANDLE, "DesiredAccess": DWORD, "TokenHandle": POINTER}) + replace_params={"ProcessHandle": HANDLE, "DesiredAccess": DWORD, "TokenHandle": POINTER}) def hook_OpenProcessToken(ql, address, params): token_pointer = params["TokenHandle"] token = Token(ql) @@ -270,7 +270,7 @@ def hook_GetThreadContext(ql, address, params): # PHANDLE TokenHandle # ); @winsdkapi(cc=STDCALL, dllname=dllname, - replace_typeEx={"ThreadHandle": HANDLE, "DesiredAccess": DWORD, "OpenAsSelf": BOOL, "TokenHandle": POINTER}) + replace_params={"ThreadHandle": HANDLE, "DesiredAccess": DWORD, "OpenAsSelf": BOOL, "TokenHandle": POINTER}) def hook_OpenThreadToken(ql, address, params): token_pointer = params["TokenHandle"] token = Token(ql) diff --git a/qiling/os/windows/dlls/kernel32/stringapiset.py b/qiling/os/windows/dlls/kernel32/stringapiset.py index 5d82db1f8..acab06530 100644 --- a/qiling/os/windows/dlls/kernel32/stringapiset.py +++ b/qiling/os/windows/dlls/kernel32/stringapiset.py @@ -53,7 +53,7 @@ def hook_GetStringTypeExA(ql, address, params): # LPCCH lpDefaultChar, # LPBOOL lpUsedDefaultChar # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCWCH': 'WSTRING'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCWCH': 'WSTRING'}) def hook_WideCharToMultiByte(ql, address, params): ret = 0 @@ -76,7 +76,7 @@ def hook_WideCharToMultiByte(ql, address, params): # LPWSTR lpWideCharStr, # int cchWideChar # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'UINT', 'LPCCH': 'WSTRING'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'UINT', 'LPCCH': 'WSTRING'}) def hook_MultiByteToWideChar(ql, address, params): wide_str = (params['lpMultiByteStr']+"\x00").encode('utf-16le') if params['cchWideChar'] != 0: diff --git a/qiling/os/windows/dlls/kernel32/synchapi.py b/qiling/os/windows/dlls/kernel32/synchapi.py index 18d4b764e..9b4dc140a 100644 --- a/qiling/os/windows/dlls/kernel32/synchapi.py +++ b/qiling/os/windows/dlls/kernel32/synchapi.py @@ -72,7 +72,7 @@ def hook_InitializeCriticalSectionEx(ql, address, params): # LPCRITICAL_SECTION lpCriticalSection, # DWORD dwSpinCount # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'UINT'}) def hook_InitializeCriticalSectionAndSpinCount(ql, address, params): return 1 @@ -119,7 +119,7 @@ def hook_WaitForSingleObjectEx(ql, address, params): # BOOL bWaitAll, # DWORD dwMilliseconds # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HANDLE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HANDLE': 'POINTER'}) def hook_WaitForMultipleObjects(ql, address, params): ret = 0 nCount = params["nCount"] diff --git a/qiling/os/windows/dlls/kernel32/winbase.py b/qiling/os/windows/dlls/kernel32/winbase.py index 62b29efd4..186af0164 100644 --- a/qiling/os/windows/dlls/kernel32/winbase.py +++ b/qiling/os/windows/dlls/kernel32/winbase.py @@ -23,7 +23,7 @@ def hook_FatalExit(ql, address, params): # PVOID EncodePointer( # _In_ PVOID Ptr # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"Ptr": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"Ptr": POINTER}) def hook_EncodePointer(ql, address, params): return params['Ptr'] @@ -31,7 +31,7 @@ def hook_EncodePointer(ql, address, params): # PVOID DecodePointer( # _In_ PVOID Ptr # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"Ptr": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"Ptr": POINTER}) def hook_DecodePointer(ql, address, params): return params['Ptr'] @@ -107,7 +107,7 @@ def hook_GlobalUnlock(ql, address, params): # UINT uFlags, # SIZE_T dwBytes # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'SIZE_T': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'SIZE_T': 'UINT'}) def hook_GlobalAlloc(ql, address, params): return ql.os.heap.alloc(params["dwBytes"]) @@ -380,7 +380,7 @@ def hook_VerifyVersionInfoW(ql, address, params): # LPWSTR lpBuffer, # LPDWORD pcbBuffer # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"lpBuffer": POINTER, "pcbBuffer": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"lpBuffer": POINTER, "pcbBuffer": POINTER}) def hook_GetUserNameW(ql, address, params): username = (ql.os.profile["USER"]["username"] + "\x00").encode("utf-16le") dst = params["lpBuffer"] diff --git a/qiling/os/windows/dlls/kernel32/winnls.py b/qiling/os/windows/dlls/kernel32/winnls.py index fb9f090e1..f29a079dc 100644 --- a/qiling/os/windows/dlls/kernel32/winnls.py +++ b/qiling/os/windows/dlls/kernel32/winnls.py @@ -19,7 +19,7 @@ # BOOL SetThreadLocale( # LCID Locale # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LCID': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LCID': 'UINT'}) def hook_SetThreadLocale(ql, address, params): return 0xC000 # LOCALE_CUSTOM_DEFAULT @@ -53,7 +53,7 @@ def hook_GetCPInfo(ql, address, params): # LPSTR lpLCData, # int cchData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LCID': 'DWORD', 'LCTYPE': 'DWORD'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LCID': 'DWORD', 'LCTYPE': 'DWORD'}) def hook_GetLocaleInfoA(ql, address, params): locale_value = params["Locale"] lctype_value = params["LCType"] diff --git a/qiling/os/windows/dlls/kernel32/winnt.py b/qiling/os/windows/dlls/kernel32/winnt.py index 2ee4f7eea..442bc36e0 100644 --- a/qiling/os/windows/dlls/kernel32/winnt.py +++ b/qiling/os/windows/dlls/kernel32/winnt.py @@ -12,7 +12,7 @@ # LONG volatile *Target, # LONG Value # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"Target": POINTER, "Value": UINT}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"Target": POINTER, "Value": UINT}) def hook_InterlockedExchange(ql, address, params): old = int.from_bytes(ql.mem.read(params['Target'], ql.pointersize), byteorder='little') ql.mem.write(params['Target'], params['Value'].to_bytes(length=ql.pointersize, byteorder='little')) @@ -22,7 +22,7 @@ def hook_InterlockedExchange(ql, address, params): # LONG InterlockedIncrement( # LONG volatile *Target, # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"Target": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"Target": POINTER}) def hook_InterlockedIncrement(ql, address, params): val = int.from_bytes(ql.mem.read(params['Target'], 4), byteorder='little') val += 1 & (2 ** 32) # increment and overflow back to 0 if applicable @@ -33,7 +33,7 @@ def hook_InterlockedIncrement(ql, address, params): # LONG InterlockedDecrement( # LONG volatile *Target, # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"Target": POINTER}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"Target": POINTER}) def hook_InterlockedDecrement(ql, address, params): val = int.from_bytes(ql.mem.read(params['Target'], 4), byteorder='little') val -= 1 @@ -48,7 +48,7 @@ def hook_InterlockedDecrement(ql, address, params): # DWORD TypeMask, # BYTE Condition # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"ConditionMask": ULONGLONG, "TypeMask": DWORD, "Condition": BYTE}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"ConditionMask": ULONGLONG, "TypeMask": DWORD, "Condition": BYTE}) def hook_VerSetConditionMask(ql, address, params): # ConditionMask = params["ConditionMask"] TypeMask = params["TypeMask"] diff --git a/qiling/os/windows/dlls/mscoree.py b/qiling/os/windows/dlls/mscoree.py index 5734c4dbb..5af2f1e19 100644 --- a/qiling/os/windows/dlls/mscoree.py +++ b/qiling/os/windows/dlls/mscoree.py @@ -15,7 +15,7 @@ # void STDMETHODCALLTYPE CorExitProcess ( # int exitCode # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'int': 'DWORD'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'int': 'DWORD'}) def hook_CorExitProcess(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False diff --git a/qiling/os/windows/dlls/msvcrt.py b/qiling/os/windows/dlls/msvcrt.py index 570693686..0334f3af6 100644 --- a/qiling/os/windows/dlls/msvcrt.py +++ b/qiling/os/windows/dlls/msvcrt.py @@ -28,7 +28,7 @@ def hook___set_app_type(ql, address, params): # int _DoWildCard, # _startupinfo * _StartInfo); @winsdkapi(cc=CDECL, - replace_typeEx={"_Argc": POINTER, "_Argv": POINTER, "_Env": POINTER, "_DoWildCard": INT, "_StartInfo": POINTER}) + replace_params={"_Argc": POINTER, "_Argv": POINTER, "_Env": POINTER, "_DoWildCard": INT, "_StartInfo": POINTER}) def hook___getmainargs(ql, address, params): ret = 0 return ret @@ -62,7 +62,7 @@ def hook___p__acmdln(self, address, params): # unsigned int new, # unsigned int mask # ); -@winsdkapi(cc=CDECL, replace_typeEx={"new": UINT, "mask": UINT}) +@winsdkapi(cc=CDECL, replace_params={"new": UINT, "mask": UINT}) def hook__controlfp(ql, address, params): ret = 0x8001f return ret @@ -71,7 +71,7 @@ def hook__controlfp(ql, address, params): # int atexit( # void (__cdecl *func)(void) # ); -@winsdkapi(cc=CDECL, replace_typeEx={"func": POINTER}) +@winsdkapi(cc=CDECL, replace_params={"func": POINTER}) def hook_atexit(ql, address, params): ret = 0 return ret @@ -96,7 +96,7 @@ def hook___p__environ(ql, address, params): # int puts( # const char *str # ); -@winsdkapi(cc=CDECL, replace_typeEx={"str": STRING}) +@winsdkapi(cc=CDECL, replace_params={"str": STRING}) def hook_puts(ql, address, params): ret = 0 string = params["str"] @@ -115,7 +115,7 @@ def hook__cexit(ql, address, params): # PVFV *, # PVFV * # ); -@winsdkapi(cc=CDECL, replace_typeEx={"pfbegin": POINTER, "pfend": POINTER}) +@winsdkapi(cc=CDECL, replace_params={"pfbegin": POINTER, "pfend": POINTER}) def hook__initterm(ql, address, params): pass @@ -123,7 +123,7 @@ def hook__initterm(ql, address, params): # void exit( # int const status # ); -@winsdkapi(cc=CDECL, replace_typeEx={"status": INT}) +@winsdkapi(cc=CDECL, replace_params={"status": INT}) def hook_exit(ql, address, params): ql.emu_stop() ql.os.PE_RUN = False @@ -133,7 +133,7 @@ def hook_exit(ql, address, params): # PVFV *, # PVFV * # ); -@winsdkapi(cc=CDECL, replace_typeEx={"pfbegin": POINTER, "pfend": POINTER}) +@winsdkapi(cc=CDECL, replace_params={"pfbegin": POINTER, "pfend": POINTER}) def hook__initterm_e(ql, address, params): return 0 @@ -204,7 +204,7 @@ def hook_printf(ql, address, _): # MSVCRT_FILE * CDECL MSVCRT___acrt_iob_func(unsigned idx) -@winsdkapi(cc=CDECL, replace_typeEx={"idx": UINT}) +@winsdkapi(cc=CDECL, replace_params={"idx": UINT}) def hook___acrt_iob_func(ql, address, params): ret = 0 return ret @@ -246,7 +246,7 @@ def hook___stdio_common_vswprintf_s(ql, address, _): # int lstrlenA( # LPCSTR lpString # ); -@winsdkapi(cc=CDECL, replace_typeEx={'lpString': POINTER}) +@winsdkapi(cc=CDECL, replace_params={'lpString': POINTER}) def hook_lstrlenA(ql, address, params): addr = params["lpString"] string = b"" @@ -262,7 +262,7 @@ def hook_lstrlenA(ql, address, params): # int lstrlenW( # LPCWSTR lpString # ); -@winsdkapi(cc=CDECL, replace_typeEx={'lpString': POINTER}) +@winsdkapi(cc=CDECL, replace_params={'lpString': POINTER}) def hook_lstrlenW(ql, address, params): addr = params["lpString"] string = b"" @@ -284,7 +284,7 @@ def hook___lconv_init(ql, address, params): # size_t strlen( # const char *str # ); -@winsdkapi(cc=CDECL, replace_typeEx={"str": STRING}) +@winsdkapi(cc=CDECL, replace_params={"str": STRING}) def hook_strlen(ql, address, params): _str = params["str"] strlen = len(_str) @@ -296,7 +296,7 @@ def hook_strlen(ql, address, params): # const char *string2, # size_t count # ); -@winsdkapi(cc=CDECL, replace_typeEx={"string1": STRING, "string2": STRING, "count": SIZE_T}) +@winsdkapi(cc=CDECL, replace_params={"string1": STRING, "string2": STRING, "count": SIZE_T}) def hook_strncmp(ql, address, params): s1 = params["string1"] s2 = params["string2"] @@ -314,7 +314,7 @@ def hook_strncmp(ql, address, params): # void* malloc（unsigned int size) -@winsdkapi(cc=CDECL, replace_typeEx={"size": UINT}) +@winsdkapi(cc=CDECL, replace_params={"size": UINT}) def hook_malloc(ql, address, params): size = params['size'] addr = ql.os.heap.alloc(size) @@ -324,7 +324,7 @@ def hook_malloc(ql, address, params): # _onexit_t _onexit( # _onexit_t function # ); -@winsdkapi(cc=CDECL, replace_typeEx={"function": POINTER}) +@winsdkapi(cc=CDECL, replace_params={"function": POINTER}) def hook__onexit(ql, address, params): function = params['function'] addr = ql.os.heap.alloc(ql.pointersize) @@ -337,7 +337,7 @@ def hook__onexit(ql, address, params): # int c, # size_t count # ); -@winsdkapi(cc=CDECL, replace_typeEx={"dest": POINTER, "c": INT, "count": SIZE_T}) +@winsdkapi(cc=CDECL, replace_params={"dest": POINTER, "c": INT, "count": SIZE_T}) def hook_memset(ql, address, params): dest = params["dest"] c = params["c"] @@ -350,7 +350,7 @@ def hook_memset(ql, address, params): # size_t num, # size_t size # ); -@winsdkapi(cc=CDECL, replace_typeEx={"num": SIZE_T, "size": SIZE_T}) +@winsdkapi(cc=CDECL, replace_params={"num": SIZE_T, "size": SIZE_T}) def hook_calloc(ql, address, params): num = params['num'] size = params['size'] @@ -363,7 +363,7 @@ def hook_calloc(ql, address, params): # const void *src, # size_t num # ); -@winsdkapi(cc=CDECL, replace_typeEx={"dest": POINTER, "src": POINTER, "num": SIZE_T}) +@winsdkapi(cc=CDECL, replace_params={"dest": POINTER, "src": POINTER, "num": SIZE_T}) def hook_memmove(ql, address, params): data = ql.mem.read(params['src'], params['num']) ql.mem.write(params['dest'], bytes(data)) @@ -373,7 +373,7 @@ def hook_memmove(ql, address, params): # int _ismbblead( # unsigned int c # ); -@winsdkapi(cc=CDECL, replace_typeEx={"c": UINT}) +@winsdkapi(cc=CDECL, replace_params={"c": UINT}) def hook__ismbblead(ql, address, params): # TODO check if is CDECL or not # If locale is utf-8 always return 0 @@ -389,7 +389,7 @@ def hook__ismbblead(ql, address, params): # const wchar_t *filename, # const wchar_t *mode # ); -@winsdkapi(cc=CDECL, replace_typeEx={"pFile": POINTER, "filename": WSTRING, "mode": WSTRING}) +@winsdkapi(cc=CDECL, replace_params={"pFile": POINTER, "filename": WSTRING, "mode": WSTRING}) def hook__wfopen_s(ql, address, params): dst = params["pFile"] filename = params["filename"] @@ -403,7 +403,7 @@ def hook__wfopen_s(ql, address, params): # time_t time( time_t *destTime ); -@winsdkapi(cc=CDECL, replace_typeEx={"destTime": POINTER}) +@winsdkapi(cc=CDECL, replace_params={"destTime": POINTER}) def hook__time64(ql, address, params): dst = params["destTime"] time_wasted = int(time.time()) diff --git a/qiling/os/windows/dlls/ntdll.py b/qiling/os/windows/dlls/ntdll.py index e3aaee3d6..9a6856d3c 100644 --- a/qiling/os/windows/dlls/ntdll.py +++ b/qiling/os/windows/dlls/ntdll.py @@ -20,7 +20,7 @@ # const void *src, # size_t count # ); -@winsdkapi(cc=CDECL, dllname=dllname, replace_typeEx={"dest": POINTER, "src": POINTER, "count": UINT}) +@winsdkapi(cc=CDECL, dllname=dllname, replace_params={"dest": POINTER, "src": POINTER, "count": UINT}) def hook_memcpy(ql, address, params): try: data = bytes(ql.mem.read(params['src'], params['count'])) @@ -70,7 +70,7 @@ def _QueryInformationProcess(ql, address, params): # _Out_opt_ PULONG ReturnLength # ); @winsdkapi(cc=CDECL, dllname=dllname, - replace_typeEx={"ProcessHandle": HANDLE, "ProcessInformationClass": INT, "ProcessInformation": POINTER, + replace_params={"ProcessHandle": HANDLE, "ProcessInformationClass": INT, "ProcessInformation": POINTER, "ProcessInformationLength": UINT, "ReturnLength": POINTER}) def hook_ZwQueryInformationProcess(ql, address, params): # TODO have no idea if is cdecl or stdcall @@ -98,7 +98,7 @@ def hook_NtQueryInformationProcess(ql, address, params): # ObjectAttributes: POBJECT_ATTRIBUTES, # Flags: ULONG # ) -> NTSTATUS -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"DebugObjectHandle": HANDLE, "DesiredAccess": INT, +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"DebugObjectHandle": HANDLE, "DesiredAccess": INT, "ObjectAttributes": POINTER, "Flags": ULONGLONG}) def hook_ZwCreateDebugObject(ql, address, params): # FIXME: find documentation, almost none was found online, and create the correct object @@ -161,7 +161,7 @@ def hook_ZwYieldExecution(ql, address, params): # IN PANSI_STRING FunctionName OPTIONAL, # IN WORD Oridinal OPTIONAL, # OUT PVOID *FunctionAddress ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"ModuleHandle": POINTER, +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"ModuleHandle": POINTER, "FunctionName": STRING, "Ordinal": UINT, "FunctionAddress": POINTER}) def hook_LdrGetProcedureAddress(ql, address, params): if params['FunctionName']: @@ -188,7 +188,7 @@ def hook_LdrGetProcedureAddress(ql, address, params): # ULONG Flags, # SIZE_T Size # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"HeapHandle": POINTER, +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"HeapHandle": POINTER, "Flags": UINT,"Size": SIZE_T}) def hook_RtlAllocateHeap(ql, address, params): ret = ql.os.heap.alloc(params["Size"]) @@ -196,7 +196,7 @@ def hook_RtlAllocateHeap(ql, address, params): # wchar_t* wcsstr( const wchar_t* dest, const wchar_t* src ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"dest": POINTER, "src": WSTRING}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"dest": POINTER, "src": WSTRING}) def hook_wcsstr(ql, address, params): dest = params["dest"] value = ql.os.read_wstring(dest) diff --git a/qiling/os/windows/dlls/ntoskrnl.py b/qiling/os/windows/dlls/ntoskrnl.py index a32e4ee87..7e1d3c9d4 100644 --- a/qiling/os/windows/dlls/ntoskrnl.py +++ b/qiling/os/windows/dlls/ntoskrnl.py @@ -18,7 +18,7 @@ # NTSYSAPI NTSTATUS RtlGetVersion( # PRTL_OSVERSIONINFOW lpVersionInformation # ); -@winsdkapi(cc=CDECL, dllname=dllname, replace_typeEx={"lpVersionInformation": POINTER}) +@winsdkapi(cc=CDECL, dllname=dllname, replace_params={"lpVersionInformation": POINTER}) def hook_RtlGetVersion(ql, address, params): pointer = params["lpVersionInformation"] os = OsVersionInfoW(ql) @@ -36,7 +36,7 @@ def hook_RtlGetVersion(ql, address, params): # PVOID ThreadInformation, # ULONG ThreadInformationLength # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"ThreadHandle": HANDLE, +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"ThreadHandle": HANDLE, "ThreadInformationClass": INT, "ThreadInformation": POINTER, "ThreadInformationLength": UINT}) def hook_ZwSetInformationThread(ql, address, params): thread = params["ThreadHandle"] @@ -62,7 +62,7 @@ def hook_ZwSetInformationThread(ql, address, params): # NTSYSAPI NTSTATUS ZwClose( # HANDLE Handle # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={"Handle": HANDLE}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={"Handle": HANDLE}) def hook_ZwClose(ql, address, params): value = params["Handle"] handle = ql.os.handle_manager.get(value) diff --git a/qiling/os/windows/dlls/shell32.py b/qiling/os/windows/dlls/shell32.py index a55f8111e..a1e736fe9 100644 --- a/qiling/os/windows/dlls/shell32.py +++ b/qiling/os/windows/dlls/shell32.py @@ -93,7 +93,7 @@ def hook_ShellExecuteExW(ql, address, params): # LPCWSTR lpDirectory, # INT nShowCmd # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCWSTR': 'POINTER'}) def hook_ShellExecuteW(ql, address, params): shellInfo = ShellExecuteInfoA(ql, hwnd=params["hwnd"], lpVerb=params["lpOperation"], lpFile=params["lpFile"], lpParams=params["lpParameters"], lpDir=params["lpDirectory"], show=params["nShowCmd"]) diff --git a/qiling/os/windows/dlls/user32.py b/qiling/os/windows/dlls/user32.py index 3e5a32dcc..3f386ca23 100644 --- a/qiling/os/windows/dlls/user32.py +++ b/qiling/os/windows/dlls/user32.py @@ -20,7 +20,7 @@ # DLGPROC lpDialogFunc, # LPARAM dwInitParam # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCSTR': 'POINTER'}) def hook_DialogBoxParamA(ql, address, params): ret = 0 return ret @@ -140,7 +140,7 @@ def hook_MapVirtualKeyW(ql, address, params): # SHORT GetKeyState( # int nVirtKey # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'int': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'int': 'UINT'}) def hook_GetKeyState(ql, address, params): let = chr(params["nVirtKey"]) ql.dprint(0, let) @@ -232,7 +232,7 @@ def hook_GetDeviceCaps(ql, address, params): # HWND hWnd, # HDC hDC # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HWND': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HWND': 'POINTER'}) def hook_ReleaseDC(ql, address, params): return 1 @@ -259,7 +259,7 @@ def hook_GetSysColorBrush(ql, address, params): # HINSTANCE hInstance, # LPCSTR lpCursorName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HINSTANCE': 'POINTER', 'LPCSTR': 'INT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HINSTANCE': 'POINTER', 'LPCSTR': 'INT'}) def hook_LoadCursorA(ql, address, params): return 0xd10c @@ -294,7 +294,7 @@ def hook_GetOEMCP(ql, address, params): # LPSTR lpBuffer, # int cchBufferMax # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HINSTANCE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HINSTANCE': 'POINTER'}) def hook_LoadStringW(ql, address, params): dst = params["lpBuffer"] max_len = params["cchBufferMax"] @@ -315,7 +315,7 @@ def hook_LoadStringW(ql, address, params): # LPSTR lpBuffer, # int cchBufferMax # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HINSTANCE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HINSTANCE': 'POINTER'}) def hook_LoadStringA(ql, address, params): dst = params["lpBuffer"] max_len = params["cchBufferMax"] @@ -344,7 +344,7 @@ def hook_MessageBeep(ql, address, params): # HINSTANCE hmod, # DWORD dwThreadId # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HINSTANCE': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HINSTANCE': 'POINTER'}) def hook_SetWindowsHookExA(ql, address, params): # Should hook a procedure to a dll hook = params["lpfn"] @@ -363,7 +363,7 @@ def hook_UnhookWindowsHookEx(ql, address, params): # HWND hWnd, # int nCmdShow # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HWND': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HWND': 'POINTER'}) def hook_ShowWindow(ql, address, params): # return value depends on sample goal (evasion on just display error) return 0x1 @@ -373,7 +373,7 @@ def hook_ShowWindow(ql, address, params): # HINSTANCE hInstance, # LPCSTR lpIconName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HINSTANCE': 'POINTER', 'LPCSTR': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HINSTANCE': 'POINTER', 'LPCSTR': 'UINT'}) def hook_LoadIconA(ql, address, params): return hook_LoadIconW(ql, address, params) @@ -382,7 +382,7 @@ def hook_LoadIconA(ql, address, params): # HINSTANCE hInstance, # LPCWSTR lpIconName # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HINSTANCE': 'POINTER', 'LPCWSTR': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HINSTANCE': 'POINTER', 'LPCWSTR': 'UINT'}) def hook_LoadIconW(ql, address, params): handle = Handle() ql.os.handle_manager.append(handle) @@ -392,7 +392,7 @@ def hook_LoadIconW(ql, address, params): # BOOL IsWindow( # HWND hWnd # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HWND': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HWND': 'POINTER'}) def hook_IsWindow(ql, address, params): # return value depends on sample goal (evasion on just display error) return 0x1 @@ -404,7 +404,7 @@ def hook_IsWindow(ql, address, params): # WPARAM wParam, # LPARAM lParam # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HWND': 'POINTER', 'LPARAM': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HWND': 'POINTER', 'LPARAM': 'UINT'}) def hook_SendMessageA(ql, address, params): # TODO don't know how to get right return value return 0xD10C @@ -416,7 +416,7 @@ def hook_SendMessageA(ql, address, params): # WPARAM wParam, # LPARAM lParam # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HWND': 'POINTER', 'LPARAM': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HWND': 'POINTER', 'LPARAM': 'UINT'}) def hook_DefWindowProcA(ql, address, params): # TODO don't know how to get right return value return 0xD10C @@ -425,7 +425,7 @@ def hook_DefWindowProcA(ql, address, params): # LPWSTR CharNextW( # LPCWSTR lpsz # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCWSTR': 'POINTER'}) def hook_CharNextW(ql, address, params): # Return next char if is different from \x00 point = params["lpsz"][0] @@ -456,7 +456,7 @@ def hook_CharNextA(ql, address, params): # LPCWSTR lpszStart, # LPCWSTR lpszCurrent # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCWSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCWSTR': 'POINTER'}) def hook_CharPrevW(ql, address, params): # Return next char if is different from \x00 current = params["lpszCurrent"] @@ -475,7 +475,7 @@ def hook_CharPrevW(ql, address, params): # LPCSTR lpszStart, # LPCSTR lpszCurrent # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPCSTR': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPCSTR': 'POINTER'}) def hook_CharPrevA(ql, address, params): # Return next char if is different from \x00 current = params["lpszCurrent"] @@ -555,7 +555,7 @@ def hook_MoveWindow(ql, address, params): # int GetKeyboardType( # int nTypeFlag # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'int': 'UINT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'int': 'UINT'}) def hook_GetKeyboardType(ql, address, params): """ See https://salsa.debian.org/wine-team/wine/-/blob/master/dlls/user32/input.c diff --git a/qiling/os/windows/dlls/wininet.py b/qiling/os/windows/dlls/wininet.py index ae9ceb064..486d6b23c 100644 --- a/qiling/os/windows/dlls/wininet.py +++ b/qiling/os/windows/dlls/wininet.py @@ -131,7 +131,7 @@ def hook_HttpOpenRequestA(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_typeEx={'lpBuffersIn': 'POINTER', 'lpBuffersOut': 'STRING'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params={'lpBuffersIn': 'POINTER', 'lpBuffersOut': 'STRING'}) def hook_HttpSendRequestExA(ql, address, params): pass @@ -204,7 +204,7 @@ def hook_HttpSendRequestW(ql, address, params): # DWORD dwFlags, # LPVOID *lppvData # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'HWND': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'HWND': 'POINTER'}) def hook_InternetErrorDlg(ql, address, params): pass @@ -237,6 +237,6 @@ def hook_InternetWriteFile(ql, address, params): # DWORD dwFlags, # DWORD_PTR dwContext # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'LPINTERNET_BUFFERSA': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'LPINTERNET_BUFFERSA': 'POINTER'}) def hook_HttpEndRequestA(ql, address, params): return 1 diff --git a/qiling/os/windows/dlls/wsock32.py b/qiling/os/windows/dlls/wsock32.py index 694bb4b33..891d3935f 100644 --- a/qiling/os/windows/dlls/wsock32.py +++ b/qiling/os/windows/dlls/wsock32.py @@ -32,7 +32,7 @@ def hook_WSAStartup(ql, address, params): # GROUP g, # DWORD dwFlags # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'DWORD': 'INT'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'DWORD': 'INT'}) def hook_WSASocketA(ql, address, params): return 0 @@ -69,7 +69,7 @@ def hook_connect(ql, address, params): # hostent * gethostbyname( # const char *name # ); -@winsdkapi(cc=STDCALL, dllname=dllname, replace_type={'char': 'POINTER'}) +@winsdkapi(cc=STDCALL, dllname=dllname, replace_params_type={'char': 'POINTER'}) def hook_gethostbyname(ql, address, params): ip_str = ql.os.profile.getint("NETWORK", "dns_response_ip") ip = bytes([int(octet) for octet in ip_str.split('.')[::-1]]) diff --git a/qiling/os/windows/fncc.py b/qiling/os/windows/fncc.py index fbc1ddd90..d9d9ac5a0 100644 --- a/qiling/os/windows/fncc.py +++ b/qiling/os/windows/fncc.py @@ -27,18 +27,15 @@ def replacetype(type, specialtype=None): return type # x86/x8664 PE should share Windows APIs -def winsdkapi(cc, param_num=None, dllname=None, replace_type=None, replace_typeEx=None): +def winsdkapi(cc, param_num=None, dllname=None, replace_params_type=None, replace_params={}): """ @cc: windows api calling convention, only x86 needs this, x64 is always fastcall @param_num: the number of function params, used by variadic functions, e.g printf @dllname: the name of function - @replace_type: customize replace type, e.g specialtype={'int':'UINT'} means repalce 'int' to 'UINT' - @replace_typeEx: customize replace param_name's type, e.g specialtypeEx={'time':'int'} means + @replace_params_type: customize replace type, e.g specialtype={'int':'UINT'} means repalce 'int' to 'UINT' + @replace_params: customize replace param_name's type, e.g specialtypeEx={'time':'int'} means replace the original type of time to int """ - if replace_typeEx is None: - replace_typeEx = {} - def decorator(func): @wraps(func) def wrapper(*args, **kwargs): @@ -57,35 +54,35 @@ def wrapper(*args, **kwargs): else: ql.nprint('[!]', winsdk_path, 'not found') if funcname not in funclist: - params = replace_typeEx + params = replace_params else: paramlist = funclist[funcname] - if len(replace_typeEx.keys()) == len(paramlist): - params = replace_typeEx + if len(replace_params.keys()) == len(paramlist): + params = replace_params for key in params: if isinstance(params[key], str): - type = replacetype(params[key], replace_type) + type = replacetype(params[key], replace_params_type) params[key] = eval(type) else: for para in paramlist: name = list(para.values())[0] - if name == 'VOID' or (name in replace_typeEx.keys() and replace_typeEx[name] == ''): + if name == 'VOID' or (name in replace_params.keys() and replace_params[name] == ''): params = {} break - elif replace_typeEx is not None and name in replace_typeEx.keys(): - type = replace_typeEx[name] + elif replace_params is not None and name in replace_params.keys(): + type = replace_params[name] params[name] = type else: type = list(para.values())[1] if isinstance(type, dict): - type = replacetype(type['name'], replace_type) + type = replacetype(type['name'], replace_params_type) else: - type = replacetype(list(para.values())[1], replace_type) + type = replacetype(list(para.values())[1], replace_params_type) if isinstance(type, str): params[name] = eval(type) else: - params = replace_typeEx + params = replace_params if ql.archtype == QL_ARCH.X86: if cc == STDCALL: diff --git a/tests/test_pe.py b/tests/test_pe.py index e295addd5..2a56bcada 100644 --- a/tests/test_pe.py +++ b/tests/test_pe.py @@ -200,7 +200,7 @@ def end(ql): def test_pe_win_x8664_customapi(self): - @winsdkapi(cc=CDECL, replace_typeEx={"str": STRING}) + @winsdkapi(cc=CDECL, replace_params={"str": STRING}) def my_puts64(ql, address, params): ret = 0 print("\n+++++++++ My Windows 64bit Windows API +++++++++\n") From ad6dd61fc35316bfedb9bb626495b4fbd89c4ab7 Mon Sep 17 00:00:00 2001 From: Dao Trong Nghia Date: Sat, 27 Jun 2020 22:48:43 -0700 Subject: [PATCH 38/86] Support NtQuerySystemInformation API --- qiling/os/windows/const.py | 14 ++++++- qiling/os/windows/dlls/ntdll.py | 69 +++++++++++++++++++++++++++++++++ qiling/os/windows/structs.py | 44 +++++++++++++++++++++ 3 files changed, 126 insertions(+), 1 deletion(-) diff --git a/qiling/os/windows/const.py b/qiling/os/windows/const.py index 4745a4e00..595f008f0 100644 --- a/qiling/os/windows/const.py +++ b/qiling/os/windows/const.py @@ -379,6 +379,18 @@ 0x409: LOCALE_EN_US, "default": LOCALE_EN_US } +# SYSTEM_INFORMATION_CLASS +# Defined in Winternl.h +# Used by NTQuerySystemInformation and ZwQuerySystemInformation +SystemBasicInformation = 0 +SystemPerformanceInformation = 2 +SystemTimeOfDayInformation = 3 +SystemProcessInformation = 5 +SystemProcessorPerformanceInformation = 8 +SystemInterruptInformation = 23 +SystemExceptionInformation = 33 +SystemRegistryQuotaInformation = 37 +SystemLookasideInformation = 45 # Code Page Identifiers # https://docs.microsoft.com/en-us/windows/win32/intl/code-page-identifiers OEM_US = 437 @@ -649,4 +661,4 @@ # https://docs.microsoft.com/en-us/windows/win32/api/handleapi/nf-handleapi-sethandleinformation HANDLE_FLAG_INHERIT = 0x1 -HANDLE_FLAG_PROTECT_FROM_CLOSE = 0x2 \ No newline at end of file +HANDLE_FLAG_PROTECT_FROM_CLOSE = 0x2 diff --git a/qiling/os/windows/dlls/ntdll.py b/qiling/os/windows/dlls/ntdll.py index f91c1de47..621acdd43 100644 --- a/qiling/os/windows/dlls/ntdll.py +++ b/qiling/os/windows/dlls/ntdll.py @@ -103,7 +103,76 @@ def hook_NtQueryInformationProcess(ql, address, params): # TODO have no idea if is cdecl or stdcall _QueryInformationProcess(ql, address, params) +def _QuerySystemInformation(ql, address, params): + siClass = params["SystemInformationClass"] + pt_res = params["ReturnLength"] + dst = params["SystemInformation"] + if (siClass == SystemBasicInformation): + bufferLength = params["SystemInformationLength"] + + sbi = qiling.os.windows.structs.SystemBasicInforation(ql, + Reserved=0, + TimerResolution = 156250 , + PageSize=ql.os.heap.page_size, + NumberOfPhysicalPages = 0x003FC38A, + LowestPhysicalPageNumber=1, + HighestPhysicalPageNumber=0x0046DFFF, + AllocationGranularity=1, + MinimumUserModeAddress=0x10000, + MaximumUserModeAddress=0x7FFFFFFEFFFF, + ActiveProcessorsAffinityMask = 0x3F, + NumberOfProcessors = 0x6) + if (bufferLength==sbi.size): + sbi.write(dst) + if pt_res != 0: + ql.mem.write(pt_res, sbi.size.to_bytes(1, byteorder="little")) + data = ql.mem.read(dst,0x40) + else: + if pt_res != 0: + ql.mem.write(pt_res, sbi.size.to_bytes(1, byteorder="little")) + return STATUS_INFO_LENGTH_MISMATCH + else: + ql.dprint(D_INFO, str(siClass)) + raise QlErrorNotImplemented("[!] API not implemented") + + + return STATUS_SUCCESS + +# __kernel_entry NTSTATUS NtQuerySystemInformation( +# IN SYSTEM_INFORMATION_CLASS SystemInformationClass, +# OUT PVOID SystemInformation, +# IN ULONG SystemInformationLength, +# OUT PULONG ReturnLength +# ); +@winapi(cc=STDCALL, params={ + "SystemInformationClass": UINT, + "SystemInformation": POINTER, + "SystemInformationLength": UINT, + "ReturnLength": POINTER +}) +def hook_NtQuerySystemInformation(ql, address, params): + # In minwindef.h + # #define WINAPI __stdcall + + _QuerySystemInformation(ql, address, params) + +# pub unsafe extern "system" fn ZwQuerySystemInformation( +# IN SYSTEM_INFORMATION_CLASS SystemInformationClass, +# OUT PVOID SystemInformation, +# IN ULONG SystemInformationLength, +# OUT PULONG ReturnLength +# ); +@winapi(cc=STDCALL, params={ + "SystemInformationClass": UINT, + "SystemInformation": POINTER, + "SystemInformationLength": UINT, + "ReturnLength": POINTER +}) +def hook_ZwQuerySystemInformation(ql, address, params): + # In minwindef.h + # #define WINAPI __stdcall + return _QuerySystemInformation(ql, address, params) # pub unsafe extern "system" fn ZwCreateDebugObject( # DebugObjectHandle: PHANDLE, diff --git a/qiling/os/windows/structs.py b/qiling/os/windows/structs.py index 20d2cfa49..b41f541a9 100644 --- a/qiling/os/windows/structs.py +++ b/qiling/os/windows/structs.py @@ -493,6 +493,50 @@ def write(self, addr): def read(self, addr): super().generic_read(addr, [self.x, self.y]) +# typedef struct _SYSTEM_BASIC_INFORMATION +# { +# ULONG Reserved; +# ULONG TimerResolution; +# ULONG PageSize; +# ULONG NumberOfPhysicalPages; +# ULONG LowestPhysicalPageNumber; +# ULONG HighestPhysicalPageNumber; +# ULONG AllocationGranularity; +# ULONG_PTR c; +# ULONG_PTR MaximumUserModeAddress; +# ULONG_PTR ActiveProcessorsAffinityMask; +# CCHAR NumberOfProcessors; +# } SYSTEM_BASIC_INFORMATION, * PSYSTEM_BASIC_INFORMATION; + +class SystemBasicInforation(WindowsStruct): + def __init__(self,ql, Reserved,TimerResolution,PageSize=None, NumberOfPhysicalPages=None, LowestPhysicalPageNumber=None, + HighestPhysicalPageNumber=None, AllocationGranularity=None,MinimumUserModeAddress=None, + MaximumUserModeAddress=None,ActiveProcessorsAffinityMask=None,NumberOfProcessors=None): + super().__init__(ql) + self.size=self.BYTE_SIZE * 24 + 5*self.POINTER_SIZE + self.Reserved =[Reserved, self.DWORD_SIZE, "little", int] + self.TimerResolution=[TimerResolution, self.DWORD_SIZE, "little", int] + self.PageSize=[PageSize, self.DWORD_SIZE, "little", int] + self.NumberOfPhysicalPages = [NumberOfPhysicalPages, self.DWORD_SIZE, "little", int] + self.LowestPhysicalPageNumber = [LowestPhysicalPageNumber, self.DWORD_SIZE, "little", int] + self.HighestPhysicalPageNumber = [HighestPhysicalPageNumber, self.DWORD_SIZE, "little", int] + self.AllocationGranularity = [AllocationGranularity, self.DWORD_SIZE, "little", int] + self.MinimumUserModeAddress = [MinimumUserModeAddress, self.POINTER_SIZE, "little", int] + self.MaximumUserModeAddress = [MaximumUserModeAddress, self.POINTER_SIZE, "little", int] + self.ActiveProcessorsAffinityMask = [ActiveProcessorsAffinityMask, self.POINTER_SIZE, "little", int] + self.NumberOfProcessors = [NumberOfProcessors, self.POINTER_SIZE, "little", int] + def write(self, addr): + + super().generic_write(addr, [self.Reserved, self.TimerResolution, self.PageSize, self.NumberOfPhysicalPages, + self.LowestPhysicalPageNumber, self.HighestPhysicalPageNumber ,self.AllocationGranularity, + self.MinimumUserModeAddress,self.MaximumUserModeAddress,self.ActiveProcessorsAffinityMask, + self.NumberOfProcessors]) + + def read(self, addr): + super().generic_read(addr, [self.Reserved, self.TimerResolution, self.PageSize, self.NumberOfPhysicalPages, + self.LowestPhysicalPageNumber, self.HighestPhysicalPageNumber ,self.AllocationGranularity, + self.MinimumUserModeAddress,self.MaximumUserModeAddress,self.ActiveProcessorsAffinityMask, + self.NumberOfProcessors]) # typedef struct hostent { # char *h_name; From 62ebe55ac69fa79647f265c4cbd87728bc74aa75 Mon Sep 17 00:00:00 2001 From: Dao Trong Nghia Date: Sat, 27 Jun 2020 23:11:56 -0700 Subject: [PATCH 39/86] Support NtQuerySystemInformation API for 32bit Windows --- qiling/os/windows/dlls/ntdll.py | 18 +++++++++++++++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/qiling/os/windows/dlls/ntdll.py b/qiling/os/windows/dlls/ntdll.py index 621acdd43..268f4d1eb 100644 --- a/qiling/os/windows/dlls/ntdll.py +++ b/qiling/os/windows/dlls/ntdll.py @@ -109,8 +109,8 @@ def _QuerySystemInformation(ql, address, params): dst = params["SystemInformation"] if (siClass == SystemBasicInformation): bufferLength = params["SystemInformationLength"] - - sbi = qiling.os.windows.structs.SystemBasicInforation(ql, + if (ql.archtype == QL_ARCH.X8664): + sbi = qiling.os.windows.structs.SystemBasicInforation(ql, Reserved=0, TimerResolution = 156250 , PageSize=ql.os.heap.page_size, @@ -122,11 +122,23 @@ def _QuerySystemInformation(ql, address, params): MaximumUserModeAddress=0x7FFFFFFEFFFF, ActiveProcessorsAffinityMask = 0x3F, NumberOfProcessors = 0x6) + elif(ql.archtype == QL_ARCH.X86): + sbi = qiling.os.windows.structs.SystemBasicInforation(ql, + Reserved=0, + TimerResolution=156250, + PageSize=ql.os.heap.page_size, + NumberOfPhysicalPages=0x003FC38A, + LowestPhysicalPageNumber=1, + HighestPhysicalPageNumber=0x0046DFFF, + AllocationGranularity=1, + MinimumUserModeAddress=0x10000, + MaximumUserModeAddress=0x7FFEFFFF, + ActiveProcessorsAffinityMask=0x3F, + NumberOfProcessors=0x6) if (bufferLength==sbi.size): sbi.write(dst) if pt_res != 0: ql.mem.write(pt_res, sbi.size.to_bytes(1, byteorder="little")) - data = ql.mem.read(dst,0x40) else: if pt_res != 0: ql.mem.write(pt_res, sbi.size.to_bytes(1, byteorder="little")) From d521c083e6b703ae1bda40e5f4dc0bde51f747a1 Mon Sep 17 00:00:00 2001 From: chfl4gs Date: Sun, 28 Jun 2020 21:23:05 +0800 Subject: [PATCH 40/86] Updating README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index c8c6733d3..5cb94c5d5 100644 --- a/README.md +++ b/README.md @@ -199,7 +199,7 @@ Contact us at email info@qiling.io, or via Twitter [@qiling_io](https://twitter. - YU tong (sp1ke) - Earl Marcus (klks84) klks84@gmail.com -#### Travis-CI, Docker and Website +#### Travis-CI, Docker, Website and Documentation - FOO Kevin (chfl4gs) From 0d2b74536113d56be19a48d4e065c21329ace203 Mon Sep 17 00:00:00 2001 From: Dao Trong Nghia Date: Sun, 28 Jun 2020 09:19:25 -0700 Subject: [PATCH 41/86] Add 32bit example and source of NtQuerySystemInformation --- .../bin/NtQuerySystemInformation.exe | Bin 0 -> 9728 bytes examples/src/windows/NtQuerySystemInfo.c | 43 ++++++++++++++++++ examples/x86_NtQuerySystemInfo.py | 16 +++++++ 3 files changed, 59 insertions(+) create mode 100644 examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe create mode 100644 examples/src/windows/NtQuerySystemInfo.c create mode 100644 examples/x86_NtQuerySystemInfo.py diff --git a/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe b/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe new file mode 100644 index 0000000000000000000000000000000000000000..93abc10de7e74844834b91450aa78a8e8ea6d27e GIT binary patch literal 9728 zcmeHN4RBM}mA;ZC5a7QgIB^n^2r!uZ*vOV_{38(&tOOdH2y6_dfDrbxC7~bp={+#n zkeUj&Rv*sKlx%*QWRsB2kV%`;UAk+MHW7$o+;Ix+uvt1`vTlbBkHAhnlnqYnM*E%n zB#=qcOm}8ycXoT3d(J&S_ug~QJ@?$JXPVYM!EzX52GmrFu|Z%eP7c2W=orhtY!hlasS4ZisFUMv6$-G-DURW!&&#Tz#y zp&z?od)Z)dGV9Ocu89HH_>gOyjBy9<8E}ob11wc^1nTaTJnl2ib~5!@8b==Ul@PI; z6K8ylM0}kSqrM;!A}3D!o*+Wt#0B30BGz(3^_?W*!EDK55V0c-DLE}H=fYFIOQbm) zM8VsxOK#uHIUuj+vXedw5k^j&@HG%I{%I<7O{jD#lz-chtk0uWUX=A0 zlNZlz*E7}{(5byM7*ki{^t;v9skszQWlTMec0d=msGsC8I5BtQu7nhQ|F^2&grj7- z1(Sq~&@Sd3mqEF$tuG<3RIdX=-2~8=kY@Ovz6pvYBvluXU@n0_QODB&Zgm3}okJVL z8`UWw)x#uqPo)uLT{19Ly$hX2)Zc+^O(fMvAyHrCz2{NyWMHOm(|jjWt*{L1DTKXk zyAlPv+&FlZ@Aq#w8xtm&I)vr+yH3AsL$p|jm((9B*tHM}m}7Z7kC;9cd+a+6pguWW zTaI+ykZS_2Oby~*Vds7a;5$WHCrC@+T0=(atcU2l@!P+~Y$^G)I!ZREoiI`vv!-en zOSiVFHJV*gp;EmjpkJf>B2_ekVN&m@4O|aeH?*qPr?pI}YPF6gP{*fXlyUV|5Q;_3 z2U^pbvZ$^Cr9;SiX()KGy&sQl;7Zjbs;;zw^ZnY0; zZEZNSo=-b}C zb8m5llg0C95-chtcv~*PDicA60kCs-k%gnY5{_FxxE&@YPd#e1LszFh ziA`5U7{4na8!8hUlB%E)(*sOhhi2RPbNh9CpL!h*bYYT#Xv(a8A4|sAr#gAFdaGu} z{JxLnIX)+})V~9V@<4&Fk;o@BQo6e`ao!RePQ~*`E1uWD;W7?MF`nn=CE z><8;Py z%@p+GR@WumXQ`q>kQLOJsWk>%7ob$kmBt2|CakUtR@a2}&~Q?V;np?ptoYFR*4r>P zRexME^!-AfukOLD%CY+6^3;P5L3lnN-06AOJ;2zZ(ZU(W;yn5<|I&kOfw140M5?wX zoXJ53A0&NiX^BN9Oo@0*`sif|phK!sABDS-$TG>^0pE-y2RETZQZVv%mu`gO`X+~}-!{C%#lqS==cLs9Qz1V>vL&=Dq zu>pSi1Gt2O6jeuZ<9)l4Q{w~u1fSYP@P%H2KYoPZPkR76cR%$iM+47r^n%1uUpGhJ z3v%=WAJFrU_dO4!xD4^WJ!lM2<0UkP_`H;F6z4?19q)UBOZSl_zePqw4;VA#+E;|2 z9ddmi79(jNNEI=7FTe)YrY^rf;Mx~=jcY5o<$Y}Or%5g8;_-s5rK}5o=Hf;$VbO0; zxFLC;^C9>tJsY@OvK`cpkx9Ob=cApq{P^59s2!gr#q#yB?Na{M+}J@CLog`^dsmrA z`X0TRc9W7kdAoIuvcse-+PSzr8XA@7#U3rpk?&CMpXo3gzjL#6n`1Vi8y#~96*!pl zS)F9^P%=AgVCoq?R%cPR8PrkUQf0VcBsR~7tz^mO*0)=5?%yI%|NH38Ym~)(DQUWL zJbicmOYEqj{`cZJ+)bpro^%O(neLUxA{xH$;xW^as-hJt4JC!~U`gQs>fNKwt!wzR z5NF5wGk082@c>j@6X}dV8{iu2*h~E`CbP2xtifw*u`KcuHrha>^Kv5UD|m$ED1ryrB?aF!g3g^xJIiU5W+H| z1qV~>IkORDmNgMaQJMj!jeaOq%8BCRF5b zPsw3YKA1pL!OUUub&8`KhR2TU;=FNwipEfy&IG2ejWQ}XQ?=gm>@G1%P0^@rs=ZM&TDDzXy+U`-733^fzh7Ce9CtuTJm!!L1GZ{GZNsU>Ew>ea>U!-Ej&viL}@NrHJKEV-g>ER?i`WKhV zdl^;De^@ZrnJqo@dd$s|SCXR|F&&Ca+9m&1 z!7WDGg=jP)MwfJU`on%{dy_Z1CEbVA*peVVS$HLXB>aHr4a-5V2&F8AW&SRo5S84% z?NNWbH|X|u2`l8#WHt`p>=|bt9t0l@2oa0Fa=kmX!eD@Z{Ry8*? z|3gTB-8b%=;riA)D}H+N;s=Lmx}|mNX^*4pS9JOO-iDU-(TFUz3+qLpI}%-wcnk>b zQsw$pLQwEVh4m|>m9ijiZ{8l2gwXPEXG9F~U@Y(M*vw5g15%~2??8QEX-gx0`=f7w z{Ci+YC=51N8UZTz(?`9MDq@Y8waFW0QGY@6se*3)dS5&&04+zK#~I$7UnP zA>K0IK6?>&$j52AB-)ey)=6^L#zZf; z!O85XR5J2YS@PvKI@x;End!VvdNpVtF(YqaJ(=&kf!)S-jhE=Pd(|{Fo{0a8ELGhMJ83FWsl(x-Uv8jD@9+V6YsO z&0-!;yDW-ASn>!x?Ls%*0qnNV<9ga7cvj=@4$D|b2t@^nu_~7CI`M}A zPgL-EI{iUO5HW?o8i*r#yxrX%X?wT8%Bin_i(a5S=@Ueev6~s0*y-<*MZpvHiehA& z$18Si<#y7Y@An4rP{@dc@K(PV35T$B#_nRCE{vbn`aG2y#-%VQ#A>g$JpxCqSwT@kAt6SBo!uVfnE)f__`?u0Z@0fJ6fN8450{}w z8Qy zF%~j53(^;gZ_+;?NK3V2lYUvU-Nu&8>N70%&79@YD=*Lc1w2eeyhMd4gw}rdO%|Iq_F{szQ5uy^w6>3b`GB7TOCzw+QV*WQ9VJ|}SO_x6N>=B@Y@ zgI9s0w4&TnY8Jxnkq&>j%Tc!SG293gMCEaYz&Bhg5wRE7(w&KnJtZ>=abhrD5bCw@J*X3vJ9%x1eJ z%2A1a6QxI+^ChEM=kR{$85Quj!SDDq4UQ;$O~x!jhgNjrT~aFlj>gHfT>yzt66_Jv9;&(dByTW%TFxBmS0;wwETxfUr~Uo zSE_iS!ce)evY~Q$<%-HkrBu1I@~z4}))%b%tUt6KxBj#Bed}+mXRZHky=48PRd1VS zE41BYyWKY5R&J}d-Di8y=C-xkHrWEUhi%`sJ!ji%%c)vewYjRl>glRCst#1WS(T_d zS~XJjtE#hA6ID6Y)2eT+o>x6k{ap3o>XX$sESj_E?nO0=RxIjY^yH%NEqZ;?dy6I( z8Ea<4*UJ~hwK~do%VkFr zAG3dKpRns4CP%(wrsEce*)iX7kE7C2<5=uyaD2t#cC4enyqFm)0UEKKw2WHLSXhOj bBG+1IEw)P4J=J@vpV5A4ef~cD4{`q!Z92+@ literal 0 HcmV?d00001 diff --git a/examples/src/windows/NtQuerySystemInfo.c b/examples/src/windows/NtQuerySystemInfo.c new file mode 100644 index 000000000..05c4b7992 --- /dev/null +++ b/examples/src/windows/NtQuerySystemInfo.c @@ -0,0 +1,43 @@ +#include +#include +#include +#include +#pragma comment(lib ,"ntdll.lib") +typedef struct _SYSTEM_BASIC_INFORMATION2 +{ + ULONG Reserved; + ULONG TimerResolution; + ULONG PageSize; + ULONG NumberOfPhysicalPages; + ULONG LowestPhysicalPageNumber; + ULONG HighestPhysicalPageNumber; + ULONG AllocationGranularity; + ULONG_PTR MinimumUserModeAddress; + ULONG_PTR MaximumUserModeAddress; + ULONG_PTR ActiveProcessorsAffinityMask; + CCHAR NumberOfProcessors; +} SYSTEM_BASIC_INFORMATION2, * PSYSTEM_BASIC_INFORMATION2; +int main() +{ + ULONG whyme=0; + SYSTEM_BASIC_INFORMATION2 sbi; + + NTSTATUS status = NtQuerySystemInformation(SystemBasicInformation, &sbi, sizeof(SYSTEM_BASIC_INFORMATION2), &whyme); + printf("Size : 0x%x Status: 0x%x\n", whyme,status); + + printf("ActiveProcessorsAffinityMask : 0x%x\n", sbi.ActiveProcessorsAffinityMask); + printf("AllocationGranularity : 0x%x\n", sbi.AllocationGranularity); + printf("HighestPhysicalPageNumber : 0x%x\n", sbi.HighestPhysicalPageNumber); + printf("LowestPhysicalPageNumber : 0x%x\n", sbi.LowestPhysicalPageNumber); + + printf("MaximumUserModeAddress : 0x%x\n", sbi.MaximumUserModeAddress); + printf("MinimumUserModeAddress : 0x%x\n", sbi.MinimumUserModeAddress); + + printf("MaximumUserModeAddress : 0x%x\n", sbi.MaximumUserModeAddress); + printf("MinimumUserModeAddress : 0x%x\n", sbi.MinimumUserModeAddress); + printf("NumberOfPhysicalPages : 0x%x\n", sbi.NumberOfPhysicalPages); + printf("NumberOfProcessors : 0x%x\n", sbi.NumberOfProcessors); + printf("PageSize : 0x%x\n", sbi.PageSize); + printf("TimerResolution : 0x%x\n", sbi.TimerResolution); + +} diff --git a/examples/x86_NtQuerySystemInfo.py b/examples/x86_NtQuerySystemInfo.py new file mode 100644 index 000000000..5016ba7fe --- /dev/null +++ b/examples/x86_NtQuerySystemInfo.py @@ -0,0 +1,16 @@ +#!/usr/bin/env python3 +# +# Cross Platform and Multi Architecture Advanced Binary Emulation Framework +# Built on top of Unicorn emulator (www.unicorn-engine.org) +import sys +sys.path.append("..") +from qiling import * + +if __name__ == "__main__": + ql = Qiling( + ["rootfs/x86_windows/bin/NtQuerySystemInformation.exe"], + "rootfs/x86_windows", + output="default", + libcache = True + ) + ql.run() From 59fbdc54f0e7aafcba3967abcd80bc6a7e7c79fe Mon Sep 17 00:00:00 2001 From: Dao Trong Nghia Date: Sun, 28 Jun 2020 16:56:43 -0700 Subject: [PATCH 42/86] Fix code style & remove duplicate line in example --- .../bin/NtQuerySystemInformation.exe | Bin 9728 -> 9728 bytes examples/src/windows/NtQuerySystemInfo.c | 4 --- qiling/os/windows/dlls/ntdll.py | 32 ++++++++++-------- 3 files changed, 18 insertions(+), 18 deletions(-) diff --git a/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe b/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe index 93abc10de7e74844834b91450aa78a8e8ea6d27e..6b6877521a07e3ec011e42198c511ae7fe36978c 100644 GIT binary patch delta 1036 zcmYLHe@t6d6u!5kEu{rgXlJpk3*A;HadP{9^7`&u8eljUj8&Yo`(yME(C3CQBh4HH zX;MgrO=ig5%!V@?CL<=2%uvn7MhJ5(b4waY{1L;LVI=BB6r5p1jHKRIVtmOt_dDNr z&bjBloJ3=y@w0rmrD@MPvBPcf4e~VXwzWY3VtxRQ4_0`|SFjq65@@;z+tS0PfJys7 zU#$oOx;LB67EkV5O-|QEbeEqo&oCw%|5isvuss*d=ygU=!h+QE|0Jh9#Ao(9^$K>u3Y zuZMXy-g(9tFE7>`jqpA4k?jR|fc$QIAG%0SL8P#ijj?3kOl~5x1wX@g$W6N!hR6eZ z7(PXOj-Bu|QtKFib0p&!fi0x7@Ic9rCIALd>O>x$%^})BW(tp*^lnm9)CryGt3?f4 z$h`A6?{)Tvjqf|>=4oI*!x?9Iu%c|Nv<0ecagG=?YXn-D_3dEhHW&c@(;N)Dm{F$D z|21;aRhC=48?M`)?k53wsj051aDM!VvwXPz(;@GLhnK4qa?afbN7Lr59VT;8X&Cs) zNsrfDwKWWC(&s(L?7jQhu0rHR5_%4`qIT4cPNB2tV{`>gpu6ZkqUbRy4IU0AgTDsd zTqRe<3EV;MF!wq)%ysce{xpA<|AN24-{kM`8U7o7mVd}oeuZD-H~2ikA-IHcVYd(z zBmoQcLPUrO$AyG2AS?=QalhE!EB1(I#3AvLI3kXUW8yV2BQA)G;))0*yY#k{kUo*F zOY2g;?38`7Ah*jWix_YI0y}C?^D$UA-a$C8lJWw7fYl(APCY%8N%2Vos+Mv!s)e%sgkmO5KuI7gKT84=PbGcN;V(KZB0 zU|JSC7lZR^CJ129jZX$ zpmF8~vkALCx{4*PGgR7Y2+fB3+bH~wxftDDlI}8mJe%OCnPj-Osum-d>vQRGAFCF~ z0@n#gh-z+uy(DgquTd+EeoHp?pe5>IWEfE=yLRp|wZ(lsneJ{bapk2>wVijt}5bva51y&728grW(N7bvGXXbb zMxC8yZ`R~J1@>Q!^IP?U+rXIN`RedUQ~gJ^dtrzz(jFtsx`DmSjyE$~X+!|{PjfKr zVn&%p|JTTvtG={|lddn^ryBrxa(iTZ=76dCl@5FK)hpef6@H(cBJZr+5AzwW?x2Zl ztqlWA4!b>EXI&UPojK{=XFt}(b{8TKlF??=i=IbEP#V3B&Y_FwQ}h+OiSD3#$mFl` zZ}cbpXZ+>-CO*P<^45qG3gm8EsaVSqzUP=l$EYZdFh%oFD*-D zvQ75LE%NK~DS1jR$hC@B*`NfJZY8aZDDNxhmFvo~!UgPsy8&CUHYfyN3?2?%4}Kq< z3;q$bt1HxI^9QTFs|Dr14rnYu6&$RxPIOBGHzQ F{{_HZXTtyh diff --git a/examples/src/windows/NtQuerySystemInfo.c b/examples/src/windows/NtQuerySystemInfo.c index 05c4b7992..f843e5a50 100644 --- a/examples/src/windows/NtQuerySystemInfo.c +++ b/examples/src/windows/NtQuerySystemInfo.c @@ -29,10 +29,6 @@ int main() printf("AllocationGranularity : 0x%x\n", sbi.AllocationGranularity); printf("HighestPhysicalPageNumber : 0x%x\n", sbi.HighestPhysicalPageNumber); printf("LowestPhysicalPageNumber : 0x%x\n", sbi.LowestPhysicalPageNumber); - - printf("MaximumUserModeAddress : 0x%x\n", sbi.MaximumUserModeAddress); - printf("MinimumUserModeAddress : 0x%x\n", sbi.MinimumUserModeAddress); - printf("MaximumUserModeAddress : 0x%x\n", sbi.MaximumUserModeAddress); printf("MinimumUserModeAddress : 0x%x\n", sbi.MinimumUserModeAddress); printf("NumberOfPhysicalPages : 0x%x\n", sbi.NumberOfPhysicalPages); diff --git a/qiling/os/windows/dlls/ntdll.py b/qiling/os/windows/dlls/ntdll.py index 268f4d1eb..3c5803b78 100644 --- a/qiling/os/windows/dlls/ntdll.py +++ b/qiling/os/windows/dlls/ntdll.py @@ -103,6 +103,8 @@ def hook_NtQueryInformationProcess(ql, address, params): # TODO have no idea if is cdecl or stdcall _QueryInformationProcess(ql, address, params) + + def _QuerySystemInformation(ql, address, params): siClass = params["SystemInformationClass"] pt_res = params["ReturnLength"] @@ -111,18 +113,18 @@ def _QuerySystemInformation(ql, address, params): bufferLength = params["SystemInformationLength"] if (ql.archtype == QL_ARCH.X8664): sbi = qiling.os.windows.structs.SystemBasicInforation(ql, - Reserved=0, - TimerResolution = 156250 , - PageSize=ql.os.heap.page_size, - NumberOfPhysicalPages = 0x003FC38A, - LowestPhysicalPageNumber=1, - HighestPhysicalPageNumber=0x0046DFFF, - AllocationGranularity=1, - MinimumUserModeAddress=0x10000, - MaximumUserModeAddress=0x7FFFFFFEFFFF, - ActiveProcessorsAffinityMask = 0x3F, - NumberOfProcessors = 0x6) - elif(ql.archtype == QL_ARCH.X86): + Reserved=0, + TimerResolution=156250, + PageSize=ql.os.heap.page_size, + NumberOfPhysicalPages=0x003FC38A, + LowestPhysicalPageNumber=1, + HighestPhysicalPageNumber=0x0046DFFF, + AllocationGranularity=1, + MinimumUserModeAddress=0x10000, + MaximumUserModeAddress=0x7FFFFFFEFFFF, + ActiveProcessorsAffinityMask=0x3F, + NumberOfProcessors=0x6) + elif ql.archtype == QL_ARCH.X86: sbi = qiling.os.windows.structs.SystemBasicInforation(ql, Reserved=0, TimerResolution=156250, @@ -135,7 +137,7 @@ def _QuerySystemInformation(ql, address, params): MaximumUserModeAddress=0x7FFEFFFF, ActiveProcessorsAffinityMask=0x3F, NumberOfProcessors=0x6) - if (bufferLength==sbi.size): + if (bufferLength == sbi.size): sbi.write(dst) if pt_res != 0: ql.mem.write(pt_res, sbi.size.to_bytes(1, byteorder="little")) @@ -147,9 +149,9 @@ def _QuerySystemInformation(ql, address, params): ql.dprint(D_INFO, str(siClass)) raise QlErrorNotImplemented("[!] API not implemented") - return STATUS_SUCCESS + # __kernel_entry NTSTATUS NtQuerySystemInformation( # IN SYSTEM_INFORMATION_CLASS SystemInformationClass, # OUT PVOID SystemInformation, @@ -168,6 +170,7 @@ def hook_NtQuerySystemInformation(ql, address, params): _QuerySystemInformation(ql, address, params) + # pub unsafe extern "system" fn ZwQuerySystemInformation( # IN SYSTEM_INFORMATION_CLASS SystemInformationClass, # OUT PVOID SystemInformation, @@ -186,6 +189,7 @@ def hook_ZwQuerySystemInformation(ql, address, params): return _QuerySystemInformation(ql, address, params) + # pub unsafe extern "system" fn ZwCreateDebugObject( # DebugObjectHandle: PHANDLE, # DesiredAccess: ACCESS_MASK, From 68b11ab6ec7eb41d8f641b449c80fded6c6b686d Mon Sep 17 00:00:00 2001 From: Dao Trong Nghia Date: Sun, 28 Jun 2020 17:06:32 -0700 Subject: [PATCH 43/86] Fix CI build failed --- qiling/os/windows/dlls/ntdll.py | 30 +++++++++++++----------------- 1 file changed, 13 insertions(+), 17 deletions(-) diff --git a/qiling/os/windows/dlls/ntdll.py b/qiling/os/windows/dlls/ntdll.py index 3c5803b78..c65e865c6 100644 --- a/qiling/os/windows/dlls/ntdll.py +++ b/qiling/os/windows/dlls/ntdll.py @@ -103,8 +103,6 @@ def hook_NtQueryInformationProcess(ql, address, params): # TODO have no idea if is cdecl or stdcall _QueryInformationProcess(ql, address, params) - - def _QuerySystemInformation(ql, address, params): siClass = params["SystemInformationClass"] pt_res = params["ReturnLength"] @@ -113,17 +111,17 @@ def _QuerySystemInformation(ql, address, params): bufferLength = params["SystemInformationLength"] if (ql.archtype == QL_ARCH.X8664): sbi = qiling.os.windows.structs.SystemBasicInforation(ql, - Reserved=0, - TimerResolution=156250, - PageSize=ql.os.heap.page_size, - NumberOfPhysicalPages=0x003FC38A, - LowestPhysicalPageNumber=1, - HighestPhysicalPageNumber=0x0046DFFF, - AllocationGranularity=1, - MinimumUserModeAddress=0x10000, - MaximumUserModeAddress=0x7FFFFFFEFFFF, - ActiveProcessorsAffinityMask=0x3F, - NumberOfProcessors=0x6) + Reserved=0, + TimerResolution = 156250 , + PageSize=ql.os.heap.page_size, + NumberOfPhysicalPages = 0x003FC38A, + LowestPhysicalPageNumber=1, + HighestPhysicalPageNumber=0x0046DFFF, + AllocationGranularity=1, + MinimumUserModeAddress=0x10000, + MaximumUserModeAddress=0x7FFFFFFEFFFF, + ActiveProcessorsAffinityMask = 0x3F, + NumberOfProcessors = 0x6) elif ql.archtype == QL_ARCH.X86: sbi = qiling.os.windows.structs.SystemBasicInforation(ql, Reserved=0, @@ -137,7 +135,7 @@ def _QuerySystemInformation(ql, address, params): MaximumUserModeAddress=0x7FFEFFFF, ActiveProcessorsAffinityMask=0x3F, NumberOfProcessors=0x6) - if (bufferLength == sbi.size): + if (bufferLength==sbi.size): sbi.write(dst) if pt_res != 0: ql.mem.write(pt_res, sbi.size.to_bytes(1, byteorder="little")) @@ -149,8 +147,8 @@ def _QuerySystemInformation(ql, address, params): ql.dprint(D_INFO, str(siClass)) raise QlErrorNotImplemented("[!] API not implemented") - return STATUS_SUCCESS + return STATUS_SUCCESS # __kernel_entry NTSTATUS NtQuerySystemInformation( # IN SYSTEM_INFORMATION_CLASS SystemInformationClass, @@ -170,7 +168,6 @@ def hook_NtQuerySystemInformation(ql, address, params): _QuerySystemInformation(ql, address, params) - # pub unsafe extern "system" fn ZwQuerySystemInformation( # IN SYSTEM_INFORMATION_CLASS SystemInformationClass, # OUT PVOID SystemInformation, @@ -189,7 +186,6 @@ def hook_ZwQuerySystemInformation(ql, address, params): return _QuerySystemInformation(ql, address, params) - # pub unsafe extern "system" fn ZwCreateDebugObject( # DebugObjectHandle: PHANDLE, # DesiredAccess: ACCESS_MASK, From 666db1d5552c2a0f642d9cc95738e16fd65eb347 Mon Sep 17 00:00:00 2001 From: Dao Trong Nghia Date: Sun, 28 Jun 2020 17:28:58 -0700 Subject: [PATCH 44/86] Resolve conflict --- .../bin/NtQuerySystemInformation.exe | Bin 9728 -> 9728 bytes examples/src/windows/NtQuerySystemInfo.c | 4 ++++ qiling/os/windows/dlls/ntdll.py | 2 +- 3 files changed, 5 insertions(+), 1 deletion(-) diff --git a/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe b/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe index 6b6877521a07e3ec011e42198c511ae7fe36978c..93abc10de7e74844834b91450aa78a8e8ea6d27e 100644 GIT binary patch delta 1053 zcmYLH4Qx|Y6u!6H>(APCY%8N%2Vos+Mv!s)e%sgkmO5KuI7gKT84=PbGcN;V(KZB0 zU|JSC7lZR^CJ129jZX$ zpmF8~vkALCx{4*PGgR7Y2+fB3+bH~wxftDDlI}8mJe%OCnPj-Osum-d>vQRGAFCF~ z0@n#gh-z+uy(DgquTd+EeoHp?pe5>IWEfE=yLRp|wZ(lsneJ{bapk2>wVijt}5bva51y&728grW(N7bvGXXbb zMxC8yZ`R~J1@>Q!^IP?U+rXIN`RedUQ~gJ^dtrzz(jFtsx`DmSjyE$~X+!|{PjfKr zVn&%p|JTTvtG={|lddn^ryBrxa(iTZ=76dCl@5FK)hpef6@H(cBJZr+5AzwW?x2Zl ztqlWA4!b>EXI&UPojK{=XFt}(b{8TKlF??=i=IbEP#V3B&Y_FwQ}h+OiSD3#$mFl` zZ}cbpXZ+>-CO*P<^45qG3gm8EsaVSqzUP=l$EYZdFh%oFD*-D zvQ75LE%NK~DS1jR$hC@B*`NfJZY8aZDDNxhmFvo~!UgPsy8&CUHYfyN3?2?%4}Kq< z3;q$bt1HxI^9QTFs|Dr14rnYu6&$RxPIOBGHzQ F{{_HZXTtyh delta 1036 zcmYLHe@t6d6u!5kEu{rgXlJpk3*A;HadP{9^7`&u8eljUj8&Yo`(yME(C3CQBh4HH zX;MgrO=ig5%!V@?CL<=2%uvn7MhJ5(b4waY{1L;LVI=BB6r5p1jHKRIVtmOt_dDNr z&bjBloJ3=y@w0rmrD@MPvBPcf4e~VXwzWY3VtxRQ4_0`|SFjq65@@;z+tS0PfJys7 zU#$oOx;LB67EkV5O-|QEbeEqo&oCw%|5isvuss*d=ygU=!h+QE|0Jh9#Ao(9^$K>u3Y zuZMXy-g(9tFE7>`jqpA4k?jR|fc$QIAG%0SL8P#ijj?3kOl~5x1wX@g$W6N!hR6eZ z7(PXOj-Bu|QtKFib0p&!fi0x7@Ic9rCIALd>O>x$%^})BW(tp*^lnm9)CryGt3?f4 z$h`A6?{)Tvjqf|>=4oI*!x?9Iu%c|Nv<0ecagG=?YXn-D_3dEhHW&c@(;N)Dm{F$D z|21;aRhC=48?M`)?k53wsj051aDM!VvwXPz(;@GLhnK4qa?afbN7Lr59VT;8X&Cs) zNsrfDwKWWC(&s(L?7jQhu0rHR5_%4`qIT4cPNB2tV{`>gpu6ZkqUbRy4IU0AgTDsd zTqRe<3EV;MF!wq)%ysce{xpA<|AN24-{kM`8U7o7mVd}oeuZD-H~2ikA-IHcVYd(z zBmoQcLPUrO$AyG2AS?=QalhE!EB1(I#3AvLI3kXUW8yV2BQA)G;))0*yY#k{kUo*F zOY2g;?38`7Ah*jWix_YI0y}C?^D$UA-a$C8lJWw7fYl Date: Sun, 28 Jun 2020 17:33:29 -0700 Subject: [PATCH 45/86] Revert "Add 32bit example and source of NtQuerySystemInformation" This reverts commit 0d2b74536113d56be19a48d4e065c21329ace203. --- .../bin/NtQuerySystemInformation.exe | Bin 9728 -> 0 bytes examples/src/windows/NtQuerySystemInfo.c | 43 ------------------ examples/x86_NtQuerySystemInfo.py | 16 ------- 3 files changed, 59 deletions(-) delete mode 100644 examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe delete mode 100644 examples/src/windows/NtQuerySystemInfo.c delete mode 100644 examples/x86_NtQuerySystemInfo.py diff --git a/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe b/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe deleted file mode 100644 index 93abc10de7e74844834b91450aa78a8e8ea6d27e..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 9728 zcmeHN4RBM}mA;ZC5a7QgIB^n^2r!uZ*vOV_{38(&tOOdH2y6_dfDrbxC7~bp={+#n zkeUj&Rv*sKlx%*QWRsB2kV%`;UAk+MHW7$o+;Ix+uvt1`vTlbBkHAhnlnqYnM*E%n zB#=qcOm}8ycXoT3d(J&S_ug~QJ@?$JXPVYM!EzX52GmrFu|Z%eP7c2W=orhtY!hlasS4ZisFUMv6$-G-DURW!&&#Tz#y zp&z?od)Z)dGV9Ocu89HH_>gOyjBy9<8E}ob11wc^1nTaTJnl2ib~5!@8b==Ul@PI; z6K8ylM0}kSqrM;!A}3D!o*+Wt#0B30BGz(3^_?W*!EDK55V0c-DLE}H=fYFIOQbm) zM8VsxOK#uHIUuj+vXedw5k^j&@HG%I{%I<7O{jD#lz-chtk0uWUX=A0 zlNZlz*E7}{(5byM7*ki{^t;v9skszQWlTMec0d=msGsC8I5BtQu7nhQ|F^2&grj7- z1(Sq~&@Sd3mqEF$tuG<3RIdX=-2~8=kY@Ovz6pvYBvluXU@n0_QODB&Zgm3}okJVL z8`UWw)x#uqPo)uLT{19Ly$hX2)Zc+^O(fMvAyHrCz2{NyWMHOm(|jjWt*{L1DTKXk zyAlPv+&FlZ@Aq#w8xtm&I)vr+yH3AsL$p|jm((9B*tHM}m}7Z7kC;9cd+a+6pguWW zTaI+ykZS_2Oby~*Vds7a;5$WHCrC@+T0=(atcU2l@!P+~Y$^G)I!ZREoiI`vv!-en zOSiVFHJV*gp;EmjpkJf>B2_ekVN&m@4O|aeH?*qPr?pI}YPF6gP{*fXlyUV|5Q;_3 z2U^pbvZ$^Cr9;SiX()KGy&sQl;7Zjbs;;zw^ZnY0; zZEZNSo=-b}C zb8m5llg0C95-chtcv~*PDicA60kCs-k%gnY5{_FxxE&@YPd#e1LszFh ziA`5U7{4na8!8hUlB%E)(*sOhhi2RPbNh9CpL!h*bYYT#Xv(a8A4|sAr#gAFdaGu} z{JxLnIX)+})V~9V@<4&Fk;o@BQo6e`ao!RePQ~*`E1uWD;W7?MF`nn=CE z><8;Py z%@p+GR@WumXQ`q>kQLOJsWk>%7ob$kmBt2|CakUtR@a2}&~Q?V;np?ptoYFR*4r>P zRexME^!-AfukOLD%CY+6^3;P5L3lnN-06AOJ;2zZ(ZU(W;yn5<|I&kOfw140M5?wX zoXJ53A0&NiX^BN9Oo@0*`sif|phK!sABDS-$TG>^0pE-y2RETZQZVv%mu`gO`X+~}-!{C%#lqS==cLs9Qz1V>vL&=Dq zu>pSi1Gt2O6jeuZ<9)l4Q{w~u1fSYP@P%H2KYoPZPkR76cR%$iM+47r^n%1uUpGhJ z3v%=WAJFrU_dO4!xD4^WJ!lM2<0UkP_`H;F6z4?19q)UBOZSl_zePqw4;VA#+E;|2 z9ddmi79(jNNEI=7FTe)YrY^rf;Mx~=jcY5o<$Y}Or%5g8;_-s5rK}5o=Hf;$VbO0; zxFLC;^C9>tJsY@OvK`cpkx9Ob=cApq{P^59s2!gr#q#yB?Na{M+}J@CLog`^dsmrA z`X0TRc9W7kdAoIuvcse-+PSzr8XA@7#U3rpk?&CMpXo3gzjL#6n`1Vi8y#~96*!pl zS)F9^P%=AgVCoq?R%cPR8PrkUQf0VcBsR~7tz^mO*0)=5?%yI%|NH38Ym~)(DQUWL zJbicmOYEqj{`cZJ+)bpro^%O(neLUxA{xH$;xW^as-hJt4JC!~U`gQs>fNKwt!wzR z5NF5wGk082@c>j@6X}dV8{iu2*h~E`CbP2xtifw*u`KcuHrha>^Kv5UD|m$ED1ryrB?aF!g3g^xJIiU5W+H| z1qV~>IkORDmNgMaQJMj!jeaOq%8BCRF5b zPsw3YKA1pL!OUUub&8`KhR2TU;=FNwipEfy&IG2ejWQ}XQ?=gm>@G1%P0^@rs=ZM&TDDzXy+U`-733^fzh7Ce9CtuTJm!!L1GZ{GZNsU>Ew>ea>U!-Ej&viL}@NrHJKEV-g>ER?i`WKhV zdl^;De^@ZrnJqo@dd$s|SCXR|F&&Ca+9m&1 z!7WDGg=jP)MwfJU`on%{dy_Z1CEbVA*peVVS$HLXB>aHr4a-5V2&F8AW&SRo5S84% z?NNWbH|X|u2`l8#WHt`p>=|bt9t0l@2oa0Fa=kmX!eD@Z{Ry8*? z|3gTB-8b%=;riA)D}H+N;s=Lmx}|mNX^*4pS9JOO-iDU-(TFUz3+qLpI}%-wcnk>b zQsw$pLQwEVh4m|>m9ijiZ{8l2gwXPEXG9F~U@Y(M*vw5g15%~2??8QEX-gx0`=f7w z{Ci+YC=51N8UZTz(?`9MDq@Y8waFW0QGY@6se*3)dS5&&04+zK#~I$7UnP zA>K0IK6?>&$j52AB-)ey)=6^L#zZf; z!O85XR5J2YS@PvKI@x;End!VvdNpVtF(YqaJ(=&kf!)S-jhE=Pd(|{Fo{0a8ELGhMJ83FWsl(x-Uv8jD@9+V6YsO z&0-!;yDW-ASn>!x?Ls%*0qnNV<9ga7cvj=@4$D|b2t@^nu_~7CI`M}A zPgL-EI{iUO5HW?o8i*r#yxrX%X?wT8%Bin_i(a5S=@Ueev6~s0*y-<*MZpvHiehA& z$18Si<#y7Y@An4rP{@dc@K(PV35T$B#_nRCE{vbn`aG2y#-%VQ#A>g$JpxCqSwT@kAt6SBo!uVfnE)f__`?u0Z@0fJ6fN8450{}w z8Qy zF%~j53(^;gZ_+;?NK3V2lYUvU-Nu&8>N70%&79@YD=*Lc1w2eeyhMd4gw}rdO%|Iq_F{szQ5uy^w6>3b`GB7TOCzw+QV*WQ9VJ|}SO_x6N>=B@Y@ zgI9s0w4&TnY8Jxnkq&>j%Tc!SG293gMCEaYz&Bhg5wRE7(w&KnJtZ>=abhrD5bCw@J*X3vJ9%x1eJ z%2A1a6QxI+^ChEM=kR{$85Quj!SDDq4UQ;$O~x!jhgNjrT~aFlj>gHfT>yzt66_Jv9;&(dByTW%TFxBmS0;wwETxfUr~Uo zSE_iS!ce)evY~Q$<%-HkrBu1I@~z4}))%b%tUt6KxBj#Bed}+mXRZHky=48PRd1VS zE41BYyWKY5R&J}d-Di8y=C-xkHrWEUhi%`sJ!ji%%c)vewYjRl>glRCst#1WS(T_d zS~XJjtE#hA6ID6Y)2eT+o>x6k{ap3o>XX$sESj_E?nO0=RxIjY^yH%NEqZ;?dy6I( z8Ea<4*UJ~hwK~do%VkFr zAG3dKpRns4CP%(wrsEce*)iX7kE7C2<5=uyaD2t#cC4enyqFm)0UEKKw2WHLSXhOj bBG+1IEw)P4J=J@vpV5A4ef~cD4{`q!Z92+@ diff --git a/examples/src/windows/NtQuerySystemInfo.c b/examples/src/windows/NtQuerySystemInfo.c deleted file mode 100644 index 05c4b7992..000000000 --- a/examples/src/windows/NtQuerySystemInfo.c +++ /dev/null @@ -1,43 +0,0 @@ -#include -#include -#include -#include -#pragma comment(lib ,"ntdll.lib") -typedef struct _SYSTEM_BASIC_INFORMATION2 -{ - ULONG Reserved; - ULONG TimerResolution; - ULONG PageSize; - ULONG NumberOfPhysicalPages; - ULONG LowestPhysicalPageNumber; - ULONG HighestPhysicalPageNumber; - ULONG AllocationGranularity; - ULONG_PTR MinimumUserModeAddress; - ULONG_PTR MaximumUserModeAddress; - ULONG_PTR ActiveProcessorsAffinityMask; - CCHAR NumberOfProcessors; -} SYSTEM_BASIC_INFORMATION2, * PSYSTEM_BASIC_INFORMATION2; -int main() -{ - ULONG whyme=0; - SYSTEM_BASIC_INFORMATION2 sbi; - - NTSTATUS status = NtQuerySystemInformation(SystemBasicInformation, &sbi, sizeof(SYSTEM_BASIC_INFORMATION2), &whyme); - printf("Size : 0x%x Status: 0x%x\n", whyme,status); - - printf("ActiveProcessorsAffinityMask : 0x%x\n", sbi.ActiveProcessorsAffinityMask); - printf("AllocationGranularity : 0x%x\n", sbi.AllocationGranularity); - printf("HighestPhysicalPageNumber : 0x%x\n", sbi.HighestPhysicalPageNumber); - printf("LowestPhysicalPageNumber : 0x%x\n", sbi.LowestPhysicalPageNumber); - - printf("MaximumUserModeAddress : 0x%x\n", sbi.MaximumUserModeAddress); - printf("MinimumUserModeAddress : 0x%x\n", sbi.MinimumUserModeAddress); - - printf("MaximumUserModeAddress : 0x%x\n", sbi.MaximumUserModeAddress); - printf("MinimumUserModeAddress : 0x%x\n", sbi.MinimumUserModeAddress); - printf("NumberOfPhysicalPages : 0x%x\n", sbi.NumberOfPhysicalPages); - printf("NumberOfProcessors : 0x%x\n", sbi.NumberOfProcessors); - printf("PageSize : 0x%x\n", sbi.PageSize); - printf("TimerResolution : 0x%x\n", sbi.TimerResolution); - -} diff --git a/examples/x86_NtQuerySystemInfo.py b/examples/x86_NtQuerySystemInfo.py deleted file mode 100644 index 5016ba7fe..000000000 --- a/examples/x86_NtQuerySystemInfo.py +++ /dev/null @@ -1,16 +0,0 @@ -#!/usr/bin/env python3 -# -# Cross Platform and Multi Architecture Advanced Binary Emulation Framework -# Built on top of Unicorn emulator (www.unicorn-engine.org) -import sys -sys.path.append("..") -from qiling import * - -if __name__ == "__main__": - ql = Qiling( - ["rootfs/x86_windows/bin/NtQuerySystemInformation.exe"], - "rootfs/x86_windows", - output="default", - libcache = True - ) - ql.run() From dff3d431b358872821f63dc88662973762f6358c Mon Sep 17 00:00:00 2001 From: Dao Trong Nghia Date: Sun, 28 Jun 2020 19:12:37 -0700 Subject: [PATCH 46/86] Fix code style, add 32-bit sample binary ,source and test script --- examples/ntQuerySystemInfo_x86.py | 16 +++++++ .../bin/NtQuerySystemInformation.exe | Bin 0 -> 9728 bytes examples/src/windows/NtQuerySystemInfo.c | 43 ++++++++++++++++++ 3 files changed, 59 insertions(+) create mode 100644 examples/ntQuerySystemInfo_x86.py create mode 100755 examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe create mode 100644 examples/src/windows/NtQuerySystemInfo.c diff --git a/examples/ntQuerySystemInfo_x86.py b/examples/ntQuerySystemInfo_x86.py new file mode 100644 index 000000000..5016ba7fe --- /dev/null +++ b/examples/ntQuerySystemInfo_x86.py @@ -0,0 +1,16 @@ +#!/usr/bin/env python3 +# +# Cross Platform and Multi Architecture Advanced Binary Emulation Framework +# Built on top of Unicorn emulator (www.unicorn-engine.org) +import sys +sys.path.append("..") +from qiling import * + +if __name__ == "__main__": + ql = Qiling( + ["rootfs/x86_windows/bin/NtQuerySystemInformation.exe"], + "rootfs/x86_windows", + output="default", + libcache = True + ) + ql.run() diff --git a/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe b/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe new file mode 100755 index 0000000000000000000000000000000000000000..93abc10de7e74844834b91450aa78a8e8ea6d27e GIT binary patch literal 9728 zcmeHN4RBM}mA;ZC5a7QgIB^n^2r!uZ*vOV_{38(&tOOdH2y6_dfDrbxC7~bp={+#n zkeUj&Rv*sKlx%*QWRsB2kV%`;UAk+MHW7$o+;Ix+uvt1`vTlbBkHAhnlnqYnM*E%n zB#=qcOm}8ycXoT3d(J&S_ug~QJ@?$JXPVYM!EzX52GmrFu|Z%eP7c2W=orhtY!hlasS4ZisFUMv6$-G-DURW!&&#Tz#y zp&z?od)Z)dGV9Ocu89HH_>gOyjBy9<8E}ob11wc^1nTaTJnl2ib~5!@8b==Ul@PI; z6K8ylM0}kSqrM;!A}3D!o*+Wt#0B30BGz(3^_?W*!EDK55V0c-DLE}H=fYFIOQbm) zM8VsxOK#uHIUuj+vXedw5k^j&@HG%I{%I<7O{jD#lz-chtk0uWUX=A0 zlNZlz*E7}{(5byM7*ki{^t;v9skszQWlTMec0d=msGsC8I5BtQu7nhQ|F^2&grj7- z1(Sq~&@Sd3mqEF$tuG<3RIdX=-2~8=kY@Ovz6pvYBvluXU@n0_QODB&Zgm3}okJVL z8`UWw)x#uqPo)uLT{19Ly$hX2)Zc+^O(fMvAyHrCz2{NyWMHOm(|jjWt*{L1DTKXk zyAlPv+&FlZ@Aq#w8xtm&I)vr+yH3AsL$p|jm((9B*tHM}m}7Z7kC;9cd+a+6pguWW zTaI+ykZS_2Oby~*Vds7a;5$WHCrC@+T0=(atcU2l@!P+~Y$^G)I!ZREoiI`vv!-en zOSiVFHJV*gp;EmjpkJf>B2_ekVN&m@4O|aeH?*qPr?pI}YPF6gP{*fXlyUV|5Q;_3 z2U^pbvZ$^Cr9;SiX()KGy&sQl;7Zjbs;;zw^ZnY0; zZEZNSo=-b}C zb8m5llg0C95-chtcv~*PDicA60kCs-k%gnY5{_FxxE&@YPd#e1LszFh ziA`5U7{4na8!8hUlB%E)(*sOhhi2RPbNh9CpL!h*bYYT#Xv(a8A4|sAr#gAFdaGu} z{JxLnIX)+})V~9V@<4&Fk;o@BQo6e`ao!RePQ~*`E1uWD;W7?MF`nn=CE z><8;Py z%@p+GR@WumXQ`q>kQLOJsWk>%7ob$kmBt2|CakUtR@a2}&~Q?V;np?ptoYFR*4r>P zRexME^!-AfukOLD%CY+6^3;P5L3lnN-06AOJ;2zZ(ZU(W;yn5<|I&kOfw140M5?wX zoXJ53A0&NiX^BN9Oo@0*`sif|phK!sABDS-$TG>^0pE-y2RETZQZVv%mu`gO`X+~}-!{C%#lqS==cLs9Qz1V>vL&=Dq zu>pSi1Gt2O6jeuZ<9)l4Q{w~u1fSYP@P%H2KYoPZPkR76cR%$iM+47r^n%1uUpGhJ z3v%=WAJFrU_dO4!xD4^WJ!lM2<0UkP_`H;F6z4?19q)UBOZSl_zePqw4;VA#+E;|2 z9ddmi79(jNNEI=7FTe)YrY^rf;Mx~=jcY5o<$Y}Or%5g8;_-s5rK}5o=Hf;$VbO0; zxFLC;^C9>tJsY@OvK`cpkx9Ob=cApq{P^59s2!gr#q#yB?Na{M+}J@CLog`^dsmrA z`X0TRc9W7kdAoIuvcse-+PSzr8XA@7#U3rpk?&CMpXo3gzjL#6n`1Vi8y#~96*!pl zS)F9^P%=AgVCoq?R%cPR8PrkUQf0VcBsR~7tz^mO*0)=5?%yI%|NH38Ym~)(DQUWL zJbicmOYEqj{`cZJ+)bpro^%O(neLUxA{xH$;xW^as-hJt4JC!~U`gQs>fNKwt!wzR z5NF5wGk082@c>j@6X}dV8{iu2*h~E`CbP2xtifw*u`KcuHrha>^Kv5UD|m$ED1ryrB?aF!g3g^xJIiU5W+H| z1qV~>IkORDmNgMaQJMj!jeaOq%8BCRF5b zPsw3YKA1pL!OUUub&8`KhR2TU;=FNwipEfy&IG2ejWQ}XQ?=gm>@G1%P0^@rs=ZM&TDDzXy+U`-733^fzh7Ce9CtuTJm!!L1GZ{GZNsU>Ew>ea>U!-Ej&viL}@NrHJKEV-g>ER?i`WKhV zdl^;De^@ZrnJqo@dd$s|SCXR|F&&Ca+9m&1 z!7WDGg=jP)MwfJU`on%{dy_Z1CEbVA*peVVS$HLXB>aHr4a-5V2&F8AW&SRo5S84% z?NNWbH|X|u2`l8#WHt`p>=|bt9t0l@2oa0Fa=kmX!eD@Z{Ry8*? z|3gTB-8b%=;riA)D}H+N;s=Lmx}|mNX^*4pS9JOO-iDU-(TFUz3+qLpI}%-wcnk>b zQsw$pLQwEVh4m|>m9ijiZ{8l2gwXPEXG9F~U@Y(M*vw5g15%~2??8QEX-gx0`=f7w z{Ci+YC=51N8UZTz(?`9MDq@Y8waFW0QGY@6se*3)dS5&&04+zK#~I$7UnP zA>K0IK6?>&$j52AB-)ey)=6^L#zZf; z!O85XR5J2YS@PvKI@x;End!VvdNpVtF(YqaJ(=&kf!)S-jhE=Pd(|{Fo{0a8ELGhMJ83FWsl(x-Uv8jD@9+V6YsO z&0-!;yDW-ASn>!x?Ls%*0qnNV<9ga7cvj=@4$D|b2t@^nu_~7CI`M}A zPgL-EI{iUO5HW?o8i*r#yxrX%X?wT8%Bin_i(a5S=@Ueev6~s0*y-<*MZpvHiehA& z$18Si<#y7Y@An4rP{@dc@K(PV35T$B#_nRCE{vbn`aG2y#-%VQ#A>g$JpxCqSwT@kAt6SBo!uVfnE)f__`?u0Z@0fJ6fN8450{}w z8Qy zF%~j53(^;gZ_+;?NK3V2lYUvU-Nu&8>N70%&79@YD=*Lc1w2eeyhMd4gw}rdO%|Iq_F{szQ5uy^w6>3b`GB7TOCzw+QV*WQ9VJ|}SO_x6N>=B@Y@ zgI9s0w4&TnY8Jxnkq&>j%Tc!SG293gMCEaYz&Bhg5wRE7(w&KnJtZ>=abhrD5bCw@J*X3vJ9%x1eJ z%2A1a6QxI+^ChEM=kR{$85Quj!SDDq4UQ;$O~x!jhgNjrT~aFlj>gHfT>yzt66_Jv9;&(dByTW%TFxBmS0;wwETxfUr~Uo zSE_iS!ce)evY~Q$<%-HkrBu1I@~z4}))%b%tUt6KxBj#Bed}+mXRZHky=48PRd1VS zE41BYyWKY5R&J}d-Di8y=C-xkHrWEUhi%`sJ!ji%%c)vewYjRl>glRCst#1WS(T_d zS~XJjtE#hA6ID6Y)2eT+o>x6k{ap3o>XX$sESj_E?nO0=RxIjY^yH%NEqZ;?dy6I( z8Ea<4*UJ~hwK~do%VkFr zAG3dKpRns4CP%(wrsEce*)iX7kE7C2<5=uyaD2t#cC4enyqFm)0UEKKw2WHLSXhOj bBG+1IEw)P4J=J@vpV5A4ef~cD4{`q!Z92+@ literal 0 HcmV?d00001 diff --git a/examples/src/windows/NtQuerySystemInfo.c b/examples/src/windows/NtQuerySystemInfo.c new file mode 100644 index 000000000..05c4b7992 --- /dev/null +++ b/examples/src/windows/NtQuerySystemInfo.c @@ -0,0 +1,43 @@ +#include +#include +#include +#include +#pragma comment(lib ,"ntdll.lib") +typedef struct _SYSTEM_BASIC_INFORMATION2 +{ + ULONG Reserved; + ULONG TimerResolution; + ULONG PageSize; + ULONG NumberOfPhysicalPages; + ULONG LowestPhysicalPageNumber; + ULONG HighestPhysicalPageNumber; + ULONG AllocationGranularity; + ULONG_PTR MinimumUserModeAddress; + ULONG_PTR MaximumUserModeAddress; + ULONG_PTR ActiveProcessorsAffinityMask; + CCHAR NumberOfProcessors; +} SYSTEM_BASIC_INFORMATION2, * PSYSTEM_BASIC_INFORMATION2; +int main() +{ + ULONG whyme=0; + SYSTEM_BASIC_INFORMATION2 sbi; + + NTSTATUS status = NtQuerySystemInformation(SystemBasicInformation, &sbi, sizeof(SYSTEM_BASIC_INFORMATION2), &whyme); + printf("Size : 0x%x Status: 0x%x\n", whyme,status); + + printf("ActiveProcessorsAffinityMask : 0x%x\n", sbi.ActiveProcessorsAffinityMask); + printf("AllocationGranularity : 0x%x\n", sbi.AllocationGranularity); + printf("HighestPhysicalPageNumber : 0x%x\n", sbi.HighestPhysicalPageNumber); + printf("LowestPhysicalPageNumber : 0x%x\n", sbi.LowestPhysicalPageNumber); + + printf("MaximumUserModeAddress : 0x%x\n", sbi.MaximumUserModeAddress); + printf("MinimumUserModeAddress : 0x%x\n", sbi.MinimumUserModeAddress); + + printf("MaximumUserModeAddress : 0x%x\n", sbi.MaximumUserModeAddress); + printf("MinimumUserModeAddress : 0x%x\n", sbi.MinimumUserModeAddress); + printf("NumberOfPhysicalPages : 0x%x\n", sbi.NumberOfPhysicalPages); + printf("NumberOfProcessors : 0x%x\n", sbi.NumberOfProcessors); + printf("PageSize : 0x%x\n", sbi.PageSize); + printf("TimerResolution : 0x%x\n", sbi.TimerResolution); + +} From 405fe84e70c3aa804e40cbfaf254779aa935c1ca Mon Sep 17 00:00:00 2001 From: Dao Trong Nghia Date: Sun, 28 Jun 2020 19:19:57 -0700 Subject: [PATCH 47/86] Remove duplicated line in sample --- .../bin/NtQuerySystemInformation.exe | Bin 9728 -> 9728 bytes examples/src/windows/NtQuerySystemInfo.c | 4 ---- 2 files changed, 4 deletions(-) diff --git a/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe b/examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe index 93abc10de7e74844834b91450aa78a8e8ea6d27e..6b6877521a07e3ec011e42198c511ae7fe36978c 100755 GIT binary patch delta 1036 zcmYLHe@t6d6u!5kEu{rgXlJpk3*A;HadP{9^7`&u8eljUj8&Yo`(yME(C3CQBh4HH zX;MgrO=ig5%!V@?CL<=2%uvn7MhJ5(b4waY{1L;LVI=BB6r5p1jHKRIVtmOt_dDNr z&bjBloJ3=y@w0rmrD@MPvBPcf4e~VXwzWY3VtxRQ4_0`|SFjq65@@;z+tS0PfJys7 zU#$oOx;LB67EkV5O-|QEbeEqo&oCw%|5isvuss*d=ygU=!h+QE|0Jh9#Ao(9^$K>u3Y zuZMXy-g(9tFE7>`jqpA4k?jR|fc$QIAG%0SL8P#ijj?3kOl~5x1wX@g$W6N!hR6eZ z7(PXOj-Bu|QtKFib0p&!fi0x7@Ic9rCIALd>O>x$%^})BW(tp*^lnm9)CryGt3?f4 z$h`A6?{)Tvjqf|>=4oI*!x?9Iu%c|Nv<0ecagG=?YXn-D_3dEhHW&c@(;N)Dm{F$D z|21;aRhC=48?M`)?k53wsj051aDM!VvwXPz(;@GLhnK4qa?afbN7Lr59VT;8X&Cs) zNsrfDwKWWC(&s(L?7jQhu0rHR5_%4`qIT4cPNB2tV{`>gpu6ZkqUbRy4IU0AgTDsd zTqRe<3EV;MF!wq)%ysce{xpA<|AN24-{kM`8U7o7mVd}oeuZD-H~2ikA-IHcVYd(z zBmoQcLPUrO$AyG2AS?=QalhE!EB1(I#3AvLI3kXUW8yV2BQA)G;))0*yY#k{kUo*F zOY2g;?38`7Ah*jWix_YI0y}C?^D$UA-a$C8lJWw7fYl(APCY%8N%2Vos+Mv!s)e%sgkmO5KuI7gKT84=PbGcN;V(KZB0 zU|JSC7lZR^CJ129jZX$ zpmF8~vkALCx{4*PGgR7Y2+fB3+bH~wxftDDlI}8mJe%OCnPj-Osum-d>vQRGAFCF~ z0@n#gh-z+uy(DgquTd+EeoHp?pe5>IWEfE=yLRp|wZ(lsneJ{bapk2>wVijt}5bva51y&728grW(N7bvGXXbb zMxC8yZ`R~J1@>Q!^IP?U+rXIN`RedUQ~gJ^dtrzz(jFtsx`DmSjyE$~X+!|{PjfKr zVn&%p|JTTvtG={|lddn^ryBrxa(iTZ=76dCl@5FK)hpef6@H(cBJZr+5AzwW?x2Zl ztqlWA4!b>EXI&UPojK{=XFt}(b{8TKlF??=i=IbEP#V3B&Y_FwQ}h+OiSD3#$mFl` zZ}cbpXZ+>-CO*P<^45qG3gm8EsaVSqzUP=l$EYZdFh%oFD*-D zvQ75LE%NK~DS1jR$hC@B*`NfJZY8aZDDNxhmFvo~!UgPsy8&CUHYfyN3?2?%4}Kq< z3;q$bt1HxI^9QTFs|Dr14rnYu6&$RxPIOBGHzQ F{{_HZXTtyh diff --git a/examples/src/windows/NtQuerySystemInfo.c b/examples/src/windows/NtQuerySystemInfo.c index 05c4b7992..f843e5a50 100644 --- a/examples/src/windows/NtQuerySystemInfo.c +++ b/examples/src/windows/NtQuerySystemInfo.c @@ -29,10 +29,6 @@ int main() printf("AllocationGranularity : 0x%x\n", sbi.AllocationGranularity); printf("HighestPhysicalPageNumber : 0x%x\n", sbi.HighestPhysicalPageNumber); printf("LowestPhysicalPageNumber : 0x%x\n", sbi.LowestPhysicalPageNumber); - - printf("MaximumUserModeAddress : 0x%x\n", sbi.MaximumUserModeAddress); - printf("MinimumUserModeAddress : 0x%x\n", sbi.MinimumUserModeAddress); - printf("MaximumUserModeAddress : 0x%x\n", sbi.MaximumUserModeAddress); printf("MinimumUserModeAddress : 0x%x\n", sbi.MinimumUserModeAddress); printf("NumberOfPhysicalPages : 0x%x\n", sbi.NumberOfPhysicalPages); From c8db93dc55504bb5d2fd2c630b0490d83f94108b Mon Sep 17 00:00:00 2001 From: Assaf Carlsbad Date: Sat, 13 Jun 2020 16:16:36 +0300 Subject: [PATCH 48/86] Introduce sanitized heap. --- qiling/os/memory.py | 77 ++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 76 insertions(+), 1 deletion(-) diff --git a/qiling/os/memory.py b/qiling/os/memory.py index 66b720925..29e0253e7 100644 --- a/qiling/os/memory.py +++ b/qiling/os/memory.py @@ -3,7 +3,7 @@ # Cross Platform and Multi Architecture Advanced Binary Emulation Framework # Built on top of Unicorn emulator (www.unicorn-engine.org) -import os, re +import os, re, random from qiling.const import * from qiling.exception import * @@ -453,3 +453,78 @@ def free(self, addr): chunk.inuse = False return True return False + + def _find(self, addr): + for chunk in self.chunks: + if addr == chunk.address: + return chunk + return None + +class QlSanitizedMemoryHeap(): + def __init__(self, ql, heap, fault_rate=0): + self.ql = ql + self.heap = heap + self.fault_rate = fault_rate + + @staticmethod + def bo_handler(ql, access, addr, size, value): + """ + Called when a buffer overflow/underflow is detected. + """ + pass + + @staticmethod + def oob_handler(ql, access, addr, size, value): + """ + Called when an out-of-bounds element is accessed. + """ + pass + + @staticmethod + def uaf_handler(ql, access, addr, size, value): + """ + Called when a use-after-free is detected. + """ + pass + + @staticmethod + def bad_free_handler(ql, addr): + """ + Called when a bad/double free is detected. + """ + pass + + def alloc(self, size): + chance = random.randint(1, 100) + if chance <= self.fault_rate: + # Fail the allocation + return 0 + + # Add 8 bytes to the requested size so as to accomodate the canaries. + addr = self.heap.alloc(size + 8) + + # Install canary hooks for overflow/underflow detection. + (underflow_begin, underflow_end) = (addr, addr + 3) + self.ql.hook_mem_write(self.bo_handler, begin=underflow_begin, end=underflow_end) + self.ql.hook_mem_read(self.oob_handler, begin=underflow_begin, end=underflow_end) + + (overflow_begin, overflow_end) = (addr + 4 + size, addr + 4 + size + 3) + self.ql.hook_mem_write(self.bo_handler, begin=overflow_begin, end=overflow_end) + self.ql.hook_mem_read(self.oob_handler, begin=overflow_begin, end=overflow_end) + + return (addr + 4) + + def size(self, addr): + return self.heap.size(addr - 4) + + def free(self, addr): + chunk = self.heap._find(addr - 4) + if chunk: + # Install the UAF hook. + self.ql.hook_mem_valid(self.uaf_handler, begin=addr, end=addr+chunk.size-8) + # Make sure the chunk won't be re-used by the underlying heap. + self.heap.chunks.remove(chunk) + return True + else: + self.bad_free_handler(self.ql, addr) + return False From 2988c0f61238bb3c383909387d291c8ad0ce0082 Mon Sep 17 00:00:00 2001 From: Assaf Carlsbad Date: Sat, 13 Jun 2020 20:29:30 +0300 Subject: [PATCH 49/86] Expose the ability to explicitly validate the integrity of the sanitized pool canaries. --- qiling/os/memory.py | 49 +++++++++++++++++++++++++++++++-------------- 1 file changed, 34 insertions(+), 15 deletions(-) diff --git a/qiling/os/memory.py b/qiling/os/memory.py index 29e0253e7..634c8108c 100644 --- a/qiling/os/memory.py +++ b/qiling/os/memory.py @@ -461,10 +461,12 @@ def _find(self, addr): return None class QlSanitizedMemoryHeap(): - def __init__(self, ql, heap, fault_rate=0): + def __init__(self, ql, heap, fault_rate=0, canary_byte=b'\xCD'): self.ql = ql self.heap = heap self.fault_rate = fault_rate + self.canary_byte = canary_byte + self.canaries = [] @staticmethod def bo_handler(ql, access, addr, size, value): @@ -497,20 +499,23 @@ def bad_free_handler(ql, addr): def alloc(self, size): chance = random.randint(1, 100) if chance <= self.fault_rate: - # Fail the allocation + # Fail the allocation. return 0 # Add 8 bytes to the requested size so as to accomodate the canaries. addr = self.heap.alloc(size + 8) + self.ql.mem.write(addr, self.canary_byte * (size + 8)) # Install canary hooks for overflow/underflow detection. - (underflow_begin, underflow_end) = (addr, addr + 3) - self.ql.hook_mem_write(self.bo_handler, begin=underflow_begin, end=underflow_end) - self.ql.hook_mem_read(self.oob_handler, begin=underflow_begin, end=underflow_end) + underflow_canary = (addr, addr + 3) + self.ql.hook_mem_write(self.bo_handler, begin=underflow_canary[0], end=underflow_canary[1]) + self.ql.hook_mem_read(self.oob_handler, begin=underflow_canary[0], end=underflow_canary[1]) + self.canaries.append(underflow_canary) - (overflow_begin, overflow_end) = (addr + 4 + size, addr + 4 + size + 3) - self.ql.hook_mem_write(self.bo_handler, begin=overflow_begin, end=overflow_end) - self.ql.hook_mem_read(self.oob_handler, begin=overflow_begin, end=overflow_end) + overflow_canary = (addr + 4 + size, addr + 4 + size + 3) + self.ql.hook_mem_write(self.bo_handler, begin=overflow_canary[0], end=overflow_canary[1]) + self.ql.hook_mem_read(self.oob_handler, begin=overflow_canary[0], end=overflow_canary[1]) + self.canaries.append(overflow_canary) return (addr + 4) @@ -519,12 +524,26 @@ def size(self, addr): def free(self, addr): chunk = self.heap._find(addr - 4) - if chunk: - # Install the UAF hook. - self.ql.hook_mem_valid(self.uaf_handler, begin=addr, end=addr+chunk.size-8) - # Make sure the chunk won't be re-used by the underlying heap. - self.heap.chunks.remove(chunk) - return True - else: + + if not chunk: self.bad_free_handler(self.ql, addr) return False + + # Install the UAF canary hook. + self.ql.mem.write(addr, self.canary_byte * (chunk.size - 8)) + uaf_canary = (addr, addr + chunk.size - 8) + self.ql.hook_mem_valid(self.uaf_handler, begin=addr, end=addr+chunk.size-8) + self.canaries.append(uaf_canary) + + # Make sure the chunk won't be re-used by the underlying heap. + self.heap.chunks.remove(chunk) + return True + + def validate(self): + for (canary_begin, canary_end) in self.canaries: + size = canary_end - canary_begin + 1 + canary = self.ql.mem.read(canary_begin, size) + if canary.count(self.canary_byte) != len(canary): + return False + return True + \ No newline at end of file From 6cbd7e899da626d691e9922a0f4b5d205b455b09 Mon Sep 17 00:00:00 2001 From: chfl4gs Date: Mon, 29 Jun 2020 21:59:41 +0800 Subject: [PATCH 50/86] Fixing typo error --- CREDITS.TXT | 4 ++-- README.md | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/CREDITS.TXT b/CREDITS.TXT index c86d3111f..925530a3e 100644 --- a/CREDITS.TXT +++ b/CREDITS.TXT @@ -25,7 +25,7 @@ Key Contributors (in no particular order) kabeor 0ssigeno liba2k -assaf_carlsba +assafcarlsbad ucgJhe jhumble @@ -56,4 +56,4 @@ phdphuc sashs knownsec hwiosec -iamyeh \ No newline at end of file +iamyeh diff --git a/README.md b/README.md index 5cb94c5d5..8b8822f67 100644 --- a/README.md +++ b/README.md @@ -208,6 +208,6 @@ Contact us at email info@qiling.io, or via Twitter [@qiling_io](https://twitter. - kabeor - 0ssigeno - liba2k -- assaf_carlsba +- assafcarlsbad - ucgJhe - jhumble From 9bfc343d9a888dee14f183cef8eaaf1b2abd4ef0 Mon Sep 17 00:00:00 2001 From: Assaf Carlsbad Date: Mon, 29 Jun 2020 19:55:29 +0300 Subject: [PATCH 51/86] Move sanitized heap to 'extensions'. --- qiling/extensions/sanitizers/__init__.py | 0 qiling/extensions/sanitizers/heap.py | 103 +++++++++++++++++++++++ qiling/os/memory.py | 90 +------------------- 3 files changed, 104 insertions(+), 89 deletions(-) create mode 100644 qiling/extensions/sanitizers/__init__.py create mode 100644 qiling/extensions/sanitizers/heap.py diff --git a/qiling/extensions/sanitizers/__init__.py b/qiling/extensions/sanitizers/__init__.py new file mode 100644 index 000000000..e69de29bb diff --git a/qiling/extensions/sanitizers/heap.py b/qiling/extensions/sanitizers/heap.py new file mode 100644 index 000000000..6f20321f5 --- /dev/null +++ b/qiling/extensions/sanitizers/heap.py @@ -0,0 +1,103 @@ +#!/usr/bin/env python3 +# +# Cross Platform and Multi Architecture Advanced Binary Emulation Framework +# Built on top of Unicorn emulator (www.unicorn-engine.org) + +import random + +class QlSanitizedMemoryHeap(): + """ + Clients can enable the santized heap using the following snippet: + + ql.loader.heap = qiling.os.memory.QlSanitizedMemoryHeap(ql, ql.loader.heap) + ql.loader.heap.oob_handler = my_oob_handler + ql.loader.heap.bo_handler = my_bo_handler + ql.loader.heap.bad_free_handler = my_bad_free_handler + ql.loader.heap.uaf_handler = my_uaf_handler + """ + + def __init__(self, ql, heap, fault_rate=0, canary_byte=b'\xCD'): + self.ql = ql + self.heap = heap + self.fault_rate = fault_rate + self.canary_byte = canary_byte + self.canaries = [] + + @staticmethod + def bo_handler(ql, access, addr, size, value): + """ + Called when a buffer overflow/underflow is detected. + """ + pass + + @staticmethod + def oob_handler(ql, access, addr, size, value): + """ + Called when an out-of-bounds element is accessed. + """ + pass + + @staticmethod + def uaf_handler(ql, access, addr, size, value): + """ + Called when a use-after-free is detected. + """ + pass + + @staticmethod + def bad_free_handler(ql, addr): + """ + Called when a bad/double free is detected. + """ + pass + + def alloc(self, size): + chance = random.randint(1, 100) + if chance <= self.fault_rate: + # Fail the allocation. + return 0 + + # Add 8 bytes to the requested size so as to accomodate the canaries. + addr = self.heap.alloc(size + 8) + self.ql.mem.write(addr, self.canary_byte * (size + 8)) + + # Install canary hooks for overflow/underflow detection. + underflow_canary = (addr, addr + 3) + self.ql.hook_mem_write(self.bo_handler, begin=underflow_canary[0], end=underflow_canary[1]) + self.ql.hook_mem_read(self.oob_handler, begin=underflow_canary[0], end=underflow_canary[1]) + self.canaries.append(underflow_canary) + + overflow_canary = (addr + 4 + size, addr + 4 + size + 3) + self.ql.hook_mem_write(self.bo_handler, begin=overflow_canary[0], end=overflow_canary[1]) + self.ql.hook_mem_read(self.oob_handler, begin=overflow_canary[0], end=overflow_canary[1]) + self.canaries.append(overflow_canary) + + return (addr + 4) + + def size(self, addr): + return self.heap.size(addr - 4) + + def free(self, addr): + chunk = self.heap._find(addr - 4) + + if not chunk: + self.bad_free_handler(self.ql, addr) + return False + + # Install the UAF canary hook. + self.ql.mem.write(addr, self.canary_byte * (chunk.size - 8)) + uaf_canary = (addr, addr + chunk.size - 8) + self.ql.hook_mem_valid(self.uaf_handler, begin=uaf_canary[0], end=uaf_canary[1]) + self.canaries.append(uaf_canary) + + # Make sure the chunk won't be re-used by the underlying heap. + self.heap.chunks.remove(chunk) + return True + + def validate(self): + for (canary_begin, canary_end) in self.canaries: + size = canary_end - canary_begin + 1 + canary = self.ql.mem.read(canary_begin, size) + if canary.count(self.canary_byte) != len(canary): + return False + return True \ No newline at end of file diff --git a/qiling/os/memory.py b/qiling/os/memory.py index 634c8108c..dc72eeeb5 100644 --- a/qiling/os/memory.py +++ b/qiling/os/memory.py @@ -3,7 +3,7 @@ # Cross Platform and Multi Architecture Advanced Binary Emulation Framework # Built on top of Unicorn emulator (www.unicorn-engine.org) -import os, re, random +import os, re from qiling.const import * from qiling.exception import * @@ -459,91 +459,3 @@ def _find(self, addr): if addr == chunk.address: return chunk return None - -class QlSanitizedMemoryHeap(): - def __init__(self, ql, heap, fault_rate=0, canary_byte=b'\xCD'): - self.ql = ql - self.heap = heap - self.fault_rate = fault_rate - self.canary_byte = canary_byte - self.canaries = [] - - @staticmethod - def bo_handler(ql, access, addr, size, value): - """ - Called when a buffer overflow/underflow is detected. - """ - pass - - @staticmethod - def oob_handler(ql, access, addr, size, value): - """ - Called when an out-of-bounds element is accessed. - """ - pass - - @staticmethod - def uaf_handler(ql, access, addr, size, value): - """ - Called when a use-after-free is detected. - """ - pass - - @staticmethod - def bad_free_handler(ql, addr): - """ - Called when a bad/double free is detected. - """ - pass - - def alloc(self, size): - chance = random.randint(1, 100) - if chance <= self.fault_rate: - # Fail the allocation. - return 0 - - # Add 8 bytes to the requested size so as to accomodate the canaries. - addr = self.heap.alloc(size + 8) - self.ql.mem.write(addr, self.canary_byte * (size + 8)) - - # Install canary hooks for overflow/underflow detection. - underflow_canary = (addr, addr + 3) - self.ql.hook_mem_write(self.bo_handler, begin=underflow_canary[0], end=underflow_canary[1]) - self.ql.hook_mem_read(self.oob_handler, begin=underflow_canary[0], end=underflow_canary[1]) - self.canaries.append(underflow_canary) - - overflow_canary = (addr + 4 + size, addr + 4 + size + 3) - self.ql.hook_mem_write(self.bo_handler, begin=overflow_canary[0], end=overflow_canary[1]) - self.ql.hook_mem_read(self.oob_handler, begin=overflow_canary[0], end=overflow_canary[1]) - self.canaries.append(overflow_canary) - - return (addr + 4) - - def size(self, addr): - return self.heap.size(addr - 4) - - def free(self, addr): - chunk = self.heap._find(addr - 4) - - if not chunk: - self.bad_free_handler(self.ql, addr) - return False - - # Install the UAF canary hook. - self.ql.mem.write(addr, self.canary_byte * (chunk.size - 8)) - uaf_canary = (addr, addr + chunk.size - 8) - self.ql.hook_mem_valid(self.uaf_handler, begin=addr, end=addr+chunk.size-8) - self.canaries.append(uaf_canary) - - # Make sure the chunk won't be re-used by the underlying heap. - self.heap.chunks.remove(chunk) - return True - - def validate(self): - for (canary_begin, canary_end) in self.canaries: - size = canary_end - canary_begin + 1 - canary = self.ql.mem.read(canary_begin, size) - if canary.count(self.canary_byte) != len(canary): - return False - return True - \ No newline at end of file From 524e533fa1ba0c27c7b6c35bb50447db0fff1092 Mon Sep 17 00:00:00 2001 From: Assaf Carlsbad Date: Mon, 29 Jun 2020 20:50:19 +0300 Subject: [PATCH 52/86] Add example script to demonstrate the fault detecting capabilities of the sanitized heap. --- .../rootfs/x8664_efi/bin/EfiPoolFault.efi | Bin 0 -> 1632 bytes examples/uefi_sanitized_heap.py | 48 ++++++++++++++++++ qiling/extensions/sanitizers/heap.py | 3 +- 3 files changed, 50 insertions(+), 1 deletion(-) create mode 100644 examples/rootfs/x8664_efi/bin/EfiPoolFault.efi create mode 100644 examples/uefi_sanitized_heap.py diff --git a/examples/rootfs/x8664_efi/bin/EfiPoolFault.efi b/examples/rootfs/x8664_efi/bin/EfiPoolFault.efi new file mode 100644 index 0000000000000000000000000000000000000000..8d7bdad343289a21cc8e08d53a8a04333d3c6b77 GIT binary patch literal 1632 zcmcIjO=uHQ5S}J&E!4X8;KhrJypxBJmSC%=HEi`2(i%+EAd6<3U5OY;NH&t9hmMs^U_x?v0xT&WDkF_sQ6{~hx3|L*Z)an?9AbXzC5AAH5t;Myv7bog z<*_XGv%~x$_Fs`%pm?7Jz?dgDVB90;5zKWgN}*RUH{Ecs9S#X*)kTK|^Q{{m63kr; z>t3wSEtyH&u5#;&5OxbHK^2=TeWJEU1=1WqqHf)7Vr{YY2&)nP}q{}=6=583gb>qyrn;3 z4d#wo?Hx7aj+k+j*n}^=p|^ewa2{01LkbN1I~E}WI>Mbs&uHTMhTkr&e(h33j-2=~ zwf<#dYWDH+W;waH_WTqUOPp2mIX# +Valid fault types: +0 - POOL_OVERFLOW_MEMCPY +1 - POOL_UNDERFLOW_MEMCPY +2 - POOL_OVERFLOW_USER, +3 - POOL_UNDERFLOW_USER +4 - POOL_OOB_READ_AHEAD +5 - POOL_OOB_READ_BEHIND +6 - POOL_DOUBLE_FREE +7 - POOL_INVALID_FREE +""") + sys.exit(0) + +if __name__ == "__main__": + if len(sys.argv) < 2: + usage() + + fault_type = bytes([int(sys.argv[1])]) + rootfs = os.path.join(os.getcwd(), 'rootfs', 'x8664_efi') + path = os.path.join(rootfs, 'bin', 'EfiPoolFault.efi') + sanitized_emulate(path, rootfs, fault_type, output='debug', enable_trace=True) diff --git a/qiling/extensions/sanitizers/heap.py b/qiling/extensions/sanitizers/heap.py index 6f20321f5..d434fd711 100644 --- a/qiling/extensions/sanitizers/heap.py +++ b/qiling/extensions/sanitizers/heap.py @@ -100,4 +100,5 @@ def validate(self): canary = self.ql.mem.read(canary_begin, size) if canary.count(self.canary_byte) != len(canary): return False - return True \ No newline at end of file + return True + \ No newline at end of file From 79d5747127cbc8d1ffd02e1f8728b8a8d47a6e84 Mon Sep 17 00:00:00 2001 From: Itai Liba Date: Mon, 29 Jun 2020 21:48:35 -0700 Subject: [PATCH 53/86] Adding smm_base2_protocol. --- qiling/loader/pe_uefi.py | 11 +- qiling/os/uefi/smm_base2_protocol.py | 37 +++ qiling/os/uefi/smm_base2_type.py | 368 +++++++++++++++++++++++++++ qiling/profiles/uefi.ql | 3 + 4 files changed, 417 insertions(+), 2 deletions(-) create mode 100644 qiling/os/uefi/smm_base2_protocol.py create mode 100644 qiling/os/uefi/smm_base2_type.py diff --git a/qiling/loader/pe_uefi.py b/qiling/loader/pe_uefi.py index 10611c5b8..d618e00fa 100644 --- a/qiling/loader/pe_uefi.py +++ b/qiling/loader/pe_uefi.py @@ -20,6 +20,7 @@ from qiling.os.uefi.runtime import * from qiling.os.uefi.pcd_protocol import * from qiling.os.uefi.dxe_service import * +from qiling.os.uefi.smm_base2_protocol import * from qiling.os.windows.fncc import * @@ -225,7 +226,12 @@ def run(self): self.pcd_protocol_ptr = system_table_heap_ptr system_table_heap_ptr += ctypes.sizeof(EFI_PCD_PROTOCOL) system_table_heap_ptr, pcd_protocol = install_EFI_PCD_PROTOCOL(self.ql, system_table_heap_ptr) - self.handle_dict[0] = {self.ql.os.profile.get("EFI_PCD_PROTOCOL", "guid"): self.pcd_protocol_ptr} + self.handle_dict[1] = {self.ql.os.profile.get("EFI_PCD_PROTOCOL", "guid"): self.pcd_protocol_ptr} + # self.handle_dict[1] = {} + self.smm_base2_protocol_ptr = system_table_heap_ptr + system_table_heap_ptr += ctypes.sizeof(EFI_SMM_BASE2_PROTOCOL) + system_table_heap_ptr, smm_base2_protocol = install_EFI_SMM_BASE2_PROTOCOL(self.ql, system_table_heap_ptr) + self.handle_dict[1][self.ql.os.profile.get("EFI_SMM_BASE2_PROTOCOL", "guid")] = self.smm_base2_protocol_ptr self.dxe_services_ptr = system_table_heap_ptr system_table_heap_ptr += ctypes.sizeof(EFI_DXE_SERVICES) @@ -249,7 +255,8 @@ def run(self): self.ql.mem.write(runtime_services_ptr, convert_struct_to_bytes(runtime_services)) self.ql.mem.write(boot_services_ptr, convert_struct_to_bytes(boot_services)) self.ql.mem.write(self.system_table_ptr, convert_struct_to_bytes(system_table)) - self.ql.mem.write(self.pcd_protocol_ptr, convert_struct_to_bytes(pcd_protocol)) + # self.ql.mem.write(self.pcd_protocol_ptr, convert_struct_to_bytes(pcd_protocol)) + self.ql.mem.write(self.smm_base2_protocol_ptr, convert_struct_to_bytes(smm_base2_protocol)) self.ql.mem.write(self.dxe_services_ptr, convert_struct_to_bytes(dxe_services)) for dependency in self.ql.argv: diff --git a/qiling/os/uefi/smm_base2_protocol.py b/qiling/os/uefi/smm_base2_protocol.py new file mode 100644 index 000000000..ddd3649f4 --- /dev/null +++ b/qiling/os/uefi/smm_base2_protocol.py @@ -0,0 +1,37 @@ +from qiling.const import * +from qiling.os.const import * +from .const import * +from .utils import * +from .smm_base2_type import * +from .fncc import * + + +@dxeapi(params={ + "This": POINTER, #POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL) + "InSmram": POINTER, #POINTER_T(ctypes.c_ubyte) +}) +def hook_InSmm(ql, address, params): + write_int64(ql, params["InSmram"], 0) + return EFI_SUCCESS + +@dxeapi(params={ + "This": POINTER, #POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL) + "Smst": POINTER, #POINTER_T(POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2)) +}) +def hook_GetSmstLocation(ql, address, params): + return EFI_UNSUPPORTED # since InSmm always returns False, we should return EFI_UNSUPPORTED here, since we are not in SMM mode. + + + +def install_EFI_SMM_BASE2_PROTOCOL(ql, start_ptr): + efi_smm_base2_protocol = EFI_SMM_BASE2_PROTOCOL() + ptr = start_ptr + pointer_size = 8 + efi_smm_base2_protocol.InSmm = ptr + ql.hook_address(hook_InSmm, ptr) + ptr += pointer_size + efi_smm_base2_protocol.GetSmstLocation = ptr + ql.hook_address(hook_GetSmstLocation, ptr) + ptr += pointer_size + return (ptr, efi_smm_base2_protocol) + diff --git a/qiling/os/uefi/smm_base2_type.py b/qiling/os/uefi/smm_base2_type.py new file mode 100644 index 000000000..675af0b89 --- /dev/null +++ b/qiling/os/uefi/smm_base2_type.py @@ -0,0 +1,368 @@ +# -*- coding: utf-8 -*- +# +# TARGET arch is: [] +# WORD_SIZE is: 8 +# POINTER_SIZE is: 8 +# LONGDOUBLE_SIZE is: 16 +# +import ctypes + + +# if local wordsize is same as target, keep ctypes pointer function. +# required to access _ctypes +import _ctypes +# Emulate a pointer class using the approriate c_int32/c_int64 type +# The new class should have : +# ['__module__', 'from_param', '_type_', '__dict__', '__weakref__', '__doc__'] +# but the class should be submitted to a unique instance for each base type +# to that if A == B, POINTER_T(A) == POINTER_T(B) +ctypes._pointer_t_type_cache = {} +def POINTER_T(pointee): + # a pointer should have the same length as LONG + fake_ptr_base_type = ctypes.c_uint64 + # specific case for c_void_p + if pointee is None: # VOID pointer type. c_void_p. + pointee = type(None) # ctypes.c_void_p # ctypes.c_ulong + clsname = 'c_void' + else: + clsname = pointee.__name__ + if clsname in ctypes._pointer_t_type_cache: + return ctypes._pointer_t_type_cache[clsname] + # make template + _class = type('LP_%d_%s'%(8, clsname), (fake_ptr_base_type,),{}) + ctypes._pointer_t_type_cache[clsname] = _class + return _class + +c_int128 = ctypes.c_ubyte*16 +c_uint128 = c_int128 +void = None +if ctypes.sizeof(ctypes.c_longdouble) == 16: + c_long_double_t = ctypes.c_longdouble +else: + c_long_double_t = ctypes.c_ubyte*16 + + + +undefined = ctypes.c_ubyte +ImageBaseOffset32 = ctypes.c_uint32 +byte = ctypes.c_ubyte +dword = ctypes.c_uint32 +longlong = ctypes.c_int64 +qword = ctypes.c_uint64 +uchar = ctypes.c_ubyte +uint = ctypes.c_uint32 +ulong = ctypes.c_uint64 +ulonglong = ctypes.c_uint64 +undefined1 = ctypes.c_ubyte +undefined4 = ctypes.c_uint32 +undefined8 = ctypes.c_uint64 +ushort = ctypes.c_uint16 +word = ctypes.c_uint16 +class struct__EFI_SMM_BASE2_PROTOCOL(ctypes.Structure): + pass + +class struct__EFI_SMM_SYSTEM_TABLE2(ctypes.Structure): + pass + +struct__EFI_SMM_BASE2_PROTOCOL._pack_ = True # source:False +struct__EFI_SMM_BASE2_PROTOCOL._functions_ = [] +struct__EFI_SMM_BASE2_PROTOCOL._fields_ = [ + ('InSmm', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL), POINTER_T(ctypes.c_ubyte)))), + ('GetSmstLocation', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL), POINTER_T(POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2))))), +] + +struct__EFI_SMM_BASE2_PROTOCOL._functions_.append(("InSmm",['ctypes.c_uint64', 'POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL)', 'POINTER_T(ctypes.c_ubyte)'])) +struct__EFI_SMM_BASE2_PROTOCOL._functions_.append(("GetSmstLocation",['ctypes.c_uint64', 'POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL)', 'POINTER_T(POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2))'])) +_EFI_SMM_BASE2_PROTOCOL = struct__EFI_SMM_BASE2_PROTOCOL +P_EFI_SMM_BASE2_PROTOCOL = POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL) +EFI_SMM_BASE2_PROTOCOL = struct__EFI_SMM_BASE2_PROTOCOL +UINT64 = ctypes.c_uint64 +UINTN = ctypes.c_uint64 +RETURN_STATUS = ctypes.c_uint64 +EFI_STATUS = ctypes.c_uint64 +BOOLEAN = ctypes.c_ubyte +EFI_SMM_INSIDE_OUT2 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL), POINTER_T(ctypes.c_ubyte))) +class struct_EFI_TABLE_HEADER(ctypes.Structure): + _pack_ = True # source:False + _functions_ = [] + _fields_ = [ + ('Signature', ctypes.c_uint64), + ('Revision', ctypes.c_uint32), + ('HeaderSize', ctypes.c_uint32), + ('CRC32', ctypes.c_uint32), + ('Reserved', ctypes.c_uint32), + ] + +class struct_EFI_CONFIGURATION_TABLE(ctypes.Structure): + pass + +class struct_GUID(ctypes.Structure): + _pack_ = True # source:False + _functions_ = [] + _fields_ = [ + ('Data1', ctypes.c_uint32), + ('Data2', ctypes.c_uint16), + ('Data3', ctypes.c_uint16), + ('Data4', ctypes.c_ubyte * 8), + ] + +EFI_GUID = struct_GUID +struct_EFI_CONFIGURATION_TABLE._pack_ = True # source:False +struct_EFI_CONFIGURATION_TABLE._functions_ = [] +struct_EFI_CONFIGURATION_TABLE._fields_ = [ + ('VendorGuid', EFI_GUID), + ('VendorTable', POINTER_T(None)), +] + + +# values for enumeration 'enum_494' +enum_494__enumvalues = { + 2: 'AllocateAddress', + 0: 'AllocateAnyPages', + 1: 'AllocateMaxAddress', + 3: 'MaxAllocateType', +} +AllocateAddress = 2 +AllocateAnyPages = 0 +AllocateMaxAddress = 1 +MaxAllocateType = 3 +enum_494 = ctypes.c_int # enum + +# values for enumeration 'enum_16' +enum_16__enumvalues = { + 10: 'EfiACPIMemoryNVS', + 9: 'EfiACPIReclaimMemory', + 3: 'EfiBootServicesCode', + 4: 'EfiBootServicesData', + 7: 'EfiConventionalMemory', + 1: 'EfiLoaderCode', + 2: 'EfiLoaderData', + 15: 'EfiMaxMemoryType', + 11: 'EfiMemoryMappedIO', + 12: 'EfiMemoryMappedIOPortSpace', + 13: 'EfiPalCode', + 14: 'EfiPersistentMemory', + 0: 'EfiReservedMemoryType', + 5: 'EfiRuntimeServicesCode', + 6: 'EfiRuntimeServicesData', + 8: 'EfiUnusableMemory', +} +EfiACPIMemoryNVS = 10 +EfiACPIReclaimMemory = 9 +EfiBootServicesCode = 3 +EfiBootServicesData = 4 +EfiConventionalMemory = 7 +EfiLoaderCode = 1 +EfiLoaderData = 2 +EfiMaxMemoryType = 15 +EfiMemoryMappedIO = 11 +EfiMemoryMappedIOPortSpace = 12 +EfiPalCode = 13 +EfiPersistentMemory = 14 +EfiReservedMemoryType = 0 +EfiRuntimeServicesCode = 5 +EfiRuntimeServicesData = 6 +EfiUnusableMemory = 8 +enum_16 = ctypes.c_int # enum + +# values for enumeration 'enum_498' +enum_498__enumvalues = { + 0: 'EFI_NATIVE_INTERFACE', +} +EFI_NATIVE_INTERFACE = 0 +enum_498 = ctypes.c_int # enum + +# values for enumeration 'enum_500' +enum_500__enumvalues = { + 0: 'AllHandles', + 2: 'ByProtocol', + 1: 'ByRegisterNotify', +} +AllHandles = 0 +ByProtocol = 2 +ByRegisterNotify = 1 +enum_500 = ctypes.c_int # enum +class struct__EFI_MM_CPU_IO_PROTOCOL(ctypes.Structure): + pass + +class struct_EFI_MM_IO_ACCESS(ctypes.Structure): + pass + + +# values for enumeration 'enum_859' +enum_859__enumvalues = { + 1: 'MM_IO_UINT16', + 2: 'MM_IO_UINT32', + 3: 'MM_IO_UINT64', + 0: 'MM_IO_UINT8', +} +MM_IO_UINT16 = 1 +MM_IO_UINT32 = 2 +MM_IO_UINT64 = 3 +MM_IO_UINT8 = 0 +enum_859 = ctypes.c_int # enum +struct_EFI_MM_IO_ACCESS._pack_ = True # source:False +struct_EFI_MM_IO_ACCESS._functions_ = [] +struct_EFI_MM_IO_ACCESS._fields_ = [ + ('Read', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_MM_CPU_IO_PROTOCOL), enum_859, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(None)))), + ('Write', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_MM_CPU_IO_PROTOCOL), enum_859, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(None)))), +] + +struct_EFI_MM_IO_ACCESS._functions_.append(("Read",['ctypes.c_uint64', 'POINTER_T(struct__EFI_MM_CPU_IO_PROTOCOL)', 'enum_859', 'ctypes.c_uint64', 'ctypes.c_uint64', 'POINTER_T(None)'])) +struct_EFI_MM_IO_ACCESS._functions_.append(("Write",['ctypes.c_uint64', 'POINTER_T(struct__EFI_MM_CPU_IO_PROTOCOL)', 'enum_859', 'ctypes.c_uint64', 'ctypes.c_uint64', 'POINTER_T(None)'])) +struct__EFI_MM_CPU_IO_PROTOCOL._pack_ = True # source:False +struct__EFI_MM_CPU_IO_PROTOCOL._functions_ = [] +struct__EFI_MM_CPU_IO_PROTOCOL._fields_ = [ + ('Mem', struct_EFI_MM_IO_ACCESS), + ('Io', struct_EFI_MM_IO_ACCESS), +] + +EFI_SMM_CPU_IO2_PROTOCOL = struct__EFI_MM_CPU_IO_PROTOCOL +struct__EFI_SMM_SYSTEM_TABLE2._pack_ = True # source:False +struct__EFI_SMM_SYSTEM_TABLE2._functions_ = [] +struct__EFI_SMM_SYSTEM_TABLE2._fields_ = [ + ('Hdr', struct_EFI_TABLE_HEADER), + ('SmmFirmwareVendor', POINTER_T(ctypes.c_uint16)), + ('SmmFirmwareRevision', ctypes.c_uint32), + ('PADDING_0', ctypes.c_ubyte * 4), + ('SmmInstallConfigurationTable', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2), POINTER_T(struct_GUID), POINTER_T(None), ctypes.c_uint64))), + ('SmmIo', EFI_SMM_CPU_IO2_PROTOCOL), + ('SmmAllocatePool', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_16, ctypes.c_uint64, POINTER_T(POINTER_T(None))))), + ('SmmFreePool', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None)))), + ('SmmAllocatePages', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_494, enum_16, ctypes.c_uint64, POINTER_T(ctypes.c_uint64)))), + ('SmmFreePages', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64))), + ('SmmStartupThisAp', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(None))), ctypes.c_uint64, POINTER_T(None)))), + ('CurrentlyExecutingCpu', ctypes.c_uint64), + ('NumberOfCpus', ctypes.c_uint64), + ('CpuSaveStateSize', POINTER_T(ctypes.c_uint64)), + ('CpuSaveState', POINTER_T(POINTER_T(None))), + ('NumberOfTableEntries', ctypes.c_uint64), + ('SmmConfigurationTable', POINTER_T(struct_EFI_CONFIGURATION_TABLE)), + ('SmmInstallProtocolInterface', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(POINTER_T(None)), POINTER_T(struct_GUID), enum_498, POINTER_T(None)))), + ('SmmUninstallProtocolInterface', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID), POINTER_T(None)))), + ('SmmHandleProtocol', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID), POINTER_T(POINTER_T(None))))), + ('SmmRegisterProtocolNotify', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None))), POINTER_T(POINTER_T(None))))), + ('SmmLocateHandle', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_500, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(ctypes.c_uint64), POINTER_T(POINTER_T(None))))), + ('SmmLocateProtocol', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(POINTER_T(None))))), + ('SmiManage', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64)))), + ('SmiHandlerRegister', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64))), POINTER_T(struct_GUID), POINTER_T(POINTER_T(None))))), + ('SmiHandlerUnRegister', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None)))), +] + +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmInstallConfigurationTable",['ctypes.c_uint64', 'POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2)', 'POINTER_T(struct_GUID)', 'POINTER_T(None)', 'ctypes.c_uint64'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmAllocatePool",['ctypes.c_uint64', 'enum_16', 'ctypes.c_uint64', 'POINTER_T(POINTER_T(None))'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmFreePool",['ctypes.c_uint64', 'POINTER_T(None)'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmAllocatePages",['ctypes.c_uint64', 'enum_494', 'enum_16', 'ctypes.c_uint64', 'POINTER_T(ctypes.c_uint64)'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmFreePages",['ctypes.c_uint64', 'ctypes.c_uint64', 'ctypes.c_uint64'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmStartupThisAp",['ctypes.c_uint64', 'POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(None)))', 'ctypes.c_uint64', 'POINTER_T(None)'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmInstallProtocolInterface",['ctypes.c_uint64', 'POINTER_T(POINTER_T(None))', 'POINTER_T(struct_GUID)', 'enum_498', 'POINTER_T(None)'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmUninstallProtocolInterface",['ctypes.c_uint64', 'POINTER_T(None)', 'POINTER_T(struct_GUID)', 'POINTER_T(None)'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmHandleProtocol",['ctypes.c_uint64', 'POINTER_T(None)', 'POINTER_T(struct_GUID)', 'POINTER_T(POINTER_T(None))'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmRegisterProtocolNotify",['ctypes.c_uint64', 'POINTER_T(struct_GUID)', 'POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None)))', 'POINTER_T(POINTER_T(None))'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmLocateHandle",['ctypes.c_uint64', 'enum_500', 'POINTER_T(struct_GUID)', 'POINTER_T(None)', 'POINTER_T(ctypes.c_uint64)', 'POINTER_T(POINTER_T(None))'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmmLocateProtocol",['ctypes.c_uint64', 'POINTER_T(struct_GUID)', 'POINTER_T(None)', 'POINTER_T(POINTER_T(None))'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmiManage",['ctypes.c_uint64', 'POINTER_T(struct_GUID)', 'POINTER_T(None)', 'POINTER_T(None)', 'POINTER_T(ctypes.c_uint64)'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmiHandlerRegister",['ctypes.c_uint64', 'POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64)))', 'POINTER_T(struct_GUID)', 'POINTER_T(POINTER_T(None))'])) +struct__EFI_SMM_SYSTEM_TABLE2._functions_.append(("SmiHandlerUnRegister",['ctypes.c_uint64', 'POINTER_T(None)'])) +_EFI_SMM_SYSTEM_TABLE2 = struct__EFI_SMM_SYSTEM_TABLE2 +P_EFI_SMM_SYSTEM_TABLE2 = POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2) +EFI_SMM_SYSTEM_TABLE2 = struct__EFI_SMM_SYSTEM_TABLE2 +EFI_SMM_GET_SMST_LOCATION2 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL), POINTER_T(POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2)))) +EFI_TABLE_HEADER = struct_EFI_TABLE_HEADER +PEFI_TABLE_HEADER = POINTER_T(struct_EFI_TABLE_HEADER) +CHAR16 = ctypes.c_uint16 +UINT32 = ctypes.c_uint32 +GUID = struct_GUID +PGUID = POINTER_T(struct_GUID) +EFI_SMM_INSTALL_CONFIGURATION_TABLE2 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2), POINTER_T(struct_GUID), POINTER_T(None), ctypes.c_uint64)) +_EFI_MM_CPU_IO_PROTOCOL = struct__EFI_MM_CPU_IO_PROTOCOL +P_EFI_MM_CPU_IO_PROTOCOL = POINTER_T(struct__EFI_MM_CPU_IO_PROTOCOL) +EFI_MM_CPU_IO_PROTOCOL = struct__EFI_MM_CPU_IO_PROTOCOL +EFI_MEMORY_TYPE = enum_16 +EFI_MEMORY_TYPE__enumvalues = enum_16__enumvalues +EFI_ALLOCATE_POOL = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_16, ctypes.c_uint64, POINTER_T(POINTER_T(None)))) +EFI_FREE_POOL = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None))) +EFI_ALLOCATE_TYPE = enum_494 +EFI_ALLOCATE_TYPE__enumvalues = enum_494__enumvalues +EFI_PHYSICAL_ADDRESS = ctypes.c_uint64 +EFI_ALLOCATE_PAGES = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_494, enum_16, ctypes.c_uint64, POINTER_T(ctypes.c_uint64))) +EFI_FREE_PAGES = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, ctypes.c_uint64, ctypes.c_uint64)) +EFI_AP_PROCEDURE = POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(None))) +EFI_MM_STARTUP_THIS_AP = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(None))), ctypes.c_uint64, POINTER_T(None))) +EFI_SMM_STARTUP_THIS_AP = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(None))), ctypes.c_uint64, POINTER_T(None))) +PEFI_CONFIGURATION_TABLE = POINTER_T(struct_EFI_CONFIGURATION_TABLE) +EFI_CONFIGURATION_TABLE = struct_EFI_CONFIGURATION_TABLE +EFI_HANDLE = POINTER_T(None) +EFI_INTERFACE_TYPE = enum_498 +EFI_INTERFACE_TYPE__enumvalues = enum_498__enumvalues +EFI_INSTALL_PROTOCOL_INTERFACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(POINTER_T(None)), POINTER_T(struct_GUID), enum_498, POINTER_T(None))) +EFI_UNINSTALL_PROTOCOL_INTERFACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID), POINTER_T(None))) +EFI_HANDLE_PROTOCOL = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(struct_GUID), POINTER_T(POINTER_T(None)))) +EFI_MM_NOTIFY_FN = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None))) +EFI_MM_REGISTER_PROTOCOL_NOTIFY = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None))), POINTER_T(POINTER_T(None)))) +EFI_SMM_REGISTER_PROTOCOL_NOTIFY = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None))), POINTER_T(POINTER_T(None)))) +EFI_LOCATE_SEARCH_TYPE = enum_500 +EFI_LOCATE_SEARCH_TYPE__enumvalues = enum_500__enumvalues +EFI_LOCATE_HANDLE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, enum_500, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(ctypes.c_uint64), POINTER_T(POINTER_T(None)))) +EFI_LOCATE_PROTOCOL = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(POINTER_T(None)))) +EFI_MM_INTERRUPT_MANAGE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64))) +EFI_SMM_INTERRUPT_MANAGE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_GUID), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64))) +EFI_MM_HANDLER_ENTRY_POINT = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64))) +EFI_MM_INTERRUPT_REGISTER = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64))), POINTER_T(struct_GUID), POINTER_T(POINTER_T(None)))) +EFI_SMM_INTERRUPT_REGISTER = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None), POINTER_T(None), POINTER_T(None), POINTER_T(ctypes.c_uint64))), POINTER_T(struct_GUID), POINTER_T(POINTER_T(None)))) +EFI_MM_INTERRUPT_UNREGISTER = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None))) +EFI_SMM_INTERRUPT_UNREGISTER = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(None))) +UINT16 = ctypes.c_uint16 +UINT8 = ctypes.c_ubyte +EFI_MM_IO_ACCESS = struct_EFI_MM_IO_ACCESS +PEFI_MM_IO_ACCESS = POINTER_T(struct_EFI_MM_IO_ACCESS) +EFI_MM_IO_WIDTH = enum_859 +EFI_MM_IO_WIDTH__enumvalues = enum_859__enumvalues +EFI_MM_CPU_IO = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct__EFI_MM_CPU_IO_PROTOCOL), enum_859, ctypes.c_uint64, ctypes.c_uint64, POINTER_T(None))) +__all__ = \ + ['AllHandles', 'AllocateAddress', 'AllocateAnyPages', + 'AllocateMaxAddress', 'BOOLEAN', 'ByProtocol', 'ByRegisterNotify', + 'CHAR16', 'EFI_ALLOCATE_PAGES', 'EFI_ALLOCATE_POOL', + 'EFI_ALLOCATE_TYPE', 'EFI_ALLOCATE_TYPE__enumvalues', + 'EFI_AP_PROCEDURE', 'EFI_CONFIGURATION_TABLE', 'EFI_FREE_PAGES', + 'EFI_FREE_POOL', 'EFI_GUID', 'EFI_HANDLE', 'EFI_HANDLE_PROTOCOL', + 'EFI_INSTALL_PROTOCOL_INTERFACE', 'EFI_INTERFACE_TYPE', + 'EFI_INTERFACE_TYPE__enumvalues', 'EFI_LOCATE_HANDLE', + 'EFI_LOCATE_PROTOCOL', 'EFI_LOCATE_SEARCH_TYPE', + 'EFI_LOCATE_SEARCH_TYPE__enumvalues', 'EFI_MEMORY_TYPE', + 'EFI_MEMORY_TYPE__enumvalues', 'EFI_MM_CPU_IO', + 'EFI_MM_CPU_IO_PROTOCOL', 'EFI_MM_HANDLER_ENTRY_POINT', + 'EFI_MM_INTERRUPT_MANAGE', 'EFI_MM_INTERRUPT_REGISTER', + 'EFI_MM_INTERRUPT_UNREGISTER', 'EFI_MM_IO_ACCESS', + 'EFI_MM_IO_WIDTH', 'EFI_MM_IO_WIDTH__enumvalues', + 'EFI_MM_NOTIFY_FN', 'EFI_MM_REGISTER_PROTOCOL_NOTIFY', + 'EFI_MM_STARTUP_THIS_AP', 'EFI_NATIVE_INTERFACE', + 'EFI_PHYSICAL_ADDRESS', 'EFI_SMM_BASE2_PROTOCOL', + 'EFI_SMM_CPU_IO2_PROTOCOL', 'EFI_SMM_GET_SMST_LOCATION2', + 'EFI_SMM_INSIDE_OUT2', 'EFI_SMM_INSTALL_CONFIGURATION_TABLE2', + 'EFI_SMM_INTERRUPT_MANAGE', 'EFI_SMM_INTERRUPT_REGISTER', + 'EFI_SMM_INTERRUPT_UNREGISTER', + 'EFI_SMM_REGISTER_PROTOCOL_NOTIFY', 'EFI_SMM_STARTUP_THIS_AP', + 'EFI_SMM_SYSTEM_TABLE2', 'EFI_STATUS', 'EFI_TABLE_HEADER', + 'EFI_UNINSTALL_PROTOCOL_INTERFACE', 'EfiACPIMemoryNVS', + 'EfiACPIReclaimMemory', 'EfiBootServicesCode', + 'EfiBootServicesData', 'EfiConventionalMemory', 'EfiLoaderCode', + 'EfiLoaderData', 'EfiMaxMemoryType', 'EfiMemoryMappedIO', + 'EfiMemoryMappedIOPortSpace', 'EfiPalCode', 'EfiPersistentMemory', + 'EfiReservedMemoryType', 'EfiRuntimeServicesCode', + 'EfiRuntimeServicesData', 'EfiUnusableMemory', 'GUID', + 'ImageBaseOffset32', 'MM_IO_UINT16', 'MM_IO_UINT32', + 'MM_IO_UINT64', 'MM_IO_UINT8', 'MaxAllocateType', + 'PEFI_CONFIGURATION_TABLE', 'PEFI_MM_IO_ACCESS', + 'PEFI_TABLE_HEADER', 'PGUID', 'P_EFI_MM_CPU_IO_PROTOCOL', + 'P_EFI_SMM_BASE2_PROTOCOL', 'P_EFI_SMM_SYSTEM_TABLE2', + 'RETURN_STATUS', 'UINT16', 'UINT32', 'UINT64', 'UINT8', 'UINTN', + '_EFI_MM_CPU_IO_PROTOCOL', '_EFI_SMM_BASE2_PROTOCOL', + '_EFI_SMM_SYSTEM_TABLE2', 'byte', 'dword', 'enum_16', 'enum_494', + 'enum_498', 'enum_500', 'enum_859', 'longlong', 'qword', + 'struct_EFI_CONFIGURATION_TABLE', 'struct_EFI_MM_IO_ACCESS', + 'struct_EFI_TABLE_HEADER', 'struct_GUID', + 'struct__EFI_MM_CPU_IO_PROTOCOL', + 'struct__EFI_SMM_BASE2_PROTOCOL', 'struct__EFI_SMM_SYSTEM_TABLE2', + 'uchar', 'uint', 'ulong', 'ulonglong', 'undefined', 'undefined1', + 'undefined4', 'undefined8', 'ushort', 'word'] diff --git a/qiling/profiles/uefi.ql b/qiling/profiles/uefi.ql index b8725c62b..c2d64daaa 100644 --- a/qiling/profiles/uefi.ql +++ b/qiling/profiles/uefi.ql @@ -41,6 +41,9 @@ revision = 0x1000 [EFI_PCD_PROTOCOL] guid = 13a3f0f6-264a-3ef0-f2e0-dec512342f34 +[EFI_SMM_BASE2_PROTOCOL] +guid = f4ccbfb7-f6e0-47fd-9dd4-10a8f150c191 + [KERNEL] pid = 1996 From b90507d0c807cc81461c36ddb617b17d18141e41 Mon Sep 17 00:00:00 2001 From: Jhe Date: Tue, 30 Jun 2020 18:34:02 +0800 Subject: [PATCH 54/86] fix nprint error about msg type --- qiling/core_utils.py | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/qiling/core_utils.py b/qiling/core_utils.py index 3df0e326d..38094cbb7 100644 --- a/qiling/core_utils.py +++ b/qiling/core_utils.py @@ -61,10 +61,8 @@ def nprint(self, *args, **kw): if '_FalseFilter' in each_filter.__class__.__name__: each_console_handler.removeFilter(each_filter) - if isinstance(args, tuple) or isinstance(args, list): - msg = kw.get("sep", " ").join(args) - else: - msg = kw.get("sep", " ").join(str(args)) + args = map(str, args) + msg = kw.get("sep", " ").join(args) if kw.get("end", None) != None: msg += kw["end"] From fdab9eb5f286372041c67f634fef746cd54c447d Mon Sep 17 00:00:00 2001 From: Jhe Date: Tue, 30 Jun 2020 18:35:10 +0800 Subject: [PATCH 55/86] fix ql.mem.search --- qiling/os/memory.py | 25 +++++++++++++------------ 1 file changed, 13 insertions(+), 12 deletions(-) diff --git a/qiling/os/memory.py b/qiling/os/memory.py index 66b720925..5971f7297 100644 --- a/qiling/os/memory.py +++ b/qiling/os/memory.py @@ -183,19 +183,20 @@ def search(self, needle: bytes, begin= None, end= None): Search for a sequence of bytes in memory. Returns all sequences that match """ - addrs = [] - for region in list(self.ql.uc.mem_regions()): - if (begin and end) and end > begin: - haystack = self.read(begin, end) - else: - haystack = self.read(region[0], region[1] - region[0]) - - addrs += [ - x.start(0) + region[0] - for x in re.finditer(needle, haystack) - ] - return addrs + if (begin and end) and end > begin: + haystack = self.read(begin, end - begin) + + elif begin and not end: # search from begin till last mapped region + haystack = self.read(begin, self.map_info[-1][1]) + + elif end and not begin: # search from first mapped region till end + haystack = self.read(self.map_info[0][0], end) + + else: # search entire mapped memory + haystack = self.read(self.map_info[0][0], self.map_info[-1][1]) + + return [x.start(0) + begin for x in re.finditer(needle, haystack)] def unmap(self, addr, size) -> None: ''' From 1ded1e33b7a8d6c21341b05d1f38546cda1375fc Mon Sep 17 00:00:00 2001 From: Jhe Date: Tue, 30 Jun 2020 20:47:46 +0800 Subject: [PATCH 56/86] fix ql.mem.search --- qiling/os/memory.py | 21 +++++++++++++-------- 1 file changed, 13 insertions(+), 8 deletions(-) diff --git a/qiling/os/memory.py b/qiling/os/memory.py index 402f5755f..9586ee035 100644 --- a/qiling/os/memory.py +++ b/qiling/os/memory.py @@ -184,19 +184,24 @@ def search(self, needle: bytes, begin= None, end= None): that match """ + addrs = [] if (begin and end) and end > begin: haystack = self.read(begin, end - begin) + addrs = [x.start(0) + begin for x in re.finditer(needle, haystack)] - elif begin and not end: # search from begin till last mapped region - haystack = self.read(begin, self.map_info[-1][1]) + if not begin: + begin = self.map_info[0][0] # search from first mapped region till end + if not end: + end = self.map_info[-1][1] # search from begin till last mapped region - elif end and not begin: # search from first mapped region till end - haystack = self.read(self.map_info[0][0], end) - - else: # search entire mapped memory - haystack = self.read(self.map_info[0][0], self.map_info[-1][1]) + mapped_range = [(_begin, _end) for _begin, _end, _ in self.ql.uc.mem_regions() + if begin in range(_begin, _end) or end in range(_begin, _end)] + + for _begin, _end in mapped_range: + haystack = self.read(_begin, _end - _begin) + addrs += [x.start(0) + _begin for x in re.finditer(needle, haystack)] - return [x.start(0) + begin for x in re.finditer(needle, haystack)] + return addrs def unmap(self, addr, size) -> None: ''' From 1f49e1345d93ca93a7f241cd5146d9323318e453 Mon Sep 17 00:00:00 2001 From: Jhe Date: Tue, 30 Jun 2020 21:05:03 +0800 Subject: [PATCH 57/86] raise a bit nprint in ql_syscall_write --- qiling/os/posix/syscall/unistd.py | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/qiling/os/posix/syscall/unistd.py b/qiling/os/posix/syscall/unistd.py index d83c48fa4..a67586b10 100644 --- a/qiling/os/posix/syscall/unistd.py +++ b/qiling/os/posix/syscall/unistd.py @@ -262,9 +262,10 @@ def ql_syscall_write(ql, write_fd, write_buf, write_count, *args, **kw): if buf: ql.dprint(D_CTNT, "[+] write() CONTENT:") ql.dprint(D_CTNT, "%s" % buf) + + ql.nprint("write(%d,%x,%i) = %d" % (write_fd, write_buf, write_count, regreturn)) ql.os.file_des[write_fd].write(buf) regreturn = write_count - ql.nprint("write(%d,%x,%i) = %d" % (write_fd, write_buf, write_count, regreturn)) except: regreturn = -1 From 2eb2a4d94ab51e7aaf65de6c9d1ae932364c2659 Mon Sep 17 00:00:00 2001 From: Itai Liba Date: Tue, 30 Jun 2020 14:22:32 -0700 Subject: [PATCH 58/86] Bug fix, relocating first loaded PE. First PE is loaded at address 0x10000 again. Remove PCD Protocol, since we can load PcdDxe now. --- qiling/loader/pe_uefi.py | 19 +- qiling/os/uefi/pcd_protocol.py | 279 -------------------------- qiling/os/uefi/pcd_protocol_type64.py | 164 --------------- qiling/profiles/uefi.ql | 3 - 4 files changed, 8 insertions(+), 457 deletions(-) delete mode 100644 qiling/os/uefi/pcd_protocol.py delete mode 100644 qiling/os/uefi/pcd_protocol_type64.py diff --git a/qiling/loader/pe_uefi.py b/qiling/loader/pe_uefi.py index d618e00fa..5adefafb4 100644 --- a/qiling/loader/pe_uefi.py +++ b/qiling/loader/pe_uefi.py @@ -18,7 +18,6 @@ from qiling.os.uefi.fncc import * from qiling.os.uefi.bootup import * from qiling.os.uefi.runtime import * -from qiling.os.uefi.pcd_protocol import * from qiling.os.uefi.dxe_service import * from qiling.os.uefi.smm_base2_protocol import * @@ -35,7 +34,7 @@ def __init__(self, ql): self.events = {} self.handle_dict = {} self.notify_list = [] - self.last_image_base = 0#x10000 + self.next_image_base = 0x10000 @contextmanager def map_memory(self, addr, size): @@ -72,12 +71,16 @@ def map_and_load(self, path, execute_now=False, callback_ctx=None): pe = pefile.PE(path, fast_load=True) # Make sure no module will occupy the NULL page - IMAGE_BASE = max(pe.OPTIONAL_HEADER.ImageBase, self.last_image_base) + if self.next_image_base > pe.OPTIONAL_HEADER.ImageBase: + IMAGE_BASE = self.next_image_base + pe.relocate_image(IMAGE_BASE) + else: + IMAGE_BASE = pe.OPTIONAL_HEADER.ImageBase IMAGE_SIZE = ql.mem.align(pe.OPTIONAL_HEADER.SizeOfImage, 0x1000) while IMAGE_BASE + IMAGE_SIZE < self.heap_base_address: if not ql.mem.is_mapped(IMAGE_BASE, 1): - self.last_image_base = IMAGE_BASE + self.next_image_base = IMAGE_BASE + 0x10000 ql.mem.map(IMAGE_BASE, IMAGE_SIZE) pe.parse_data_directories() data = bytearray(pe.get_memory_mapped_image()) @@ -222,16 +225,10 @@ def run(self): self.efi_configuration_table = [self.ql.os.profile["HOB_LIST"]["guid"]] self.ql.mem.write(self.efi_configuration_table_ptr, convert_struct_to_bytes(efi_configuration_table)) - - self.pcd_protocol_ptr = system_table_heap_ptr - system_table_heap_ptr += ctypes.sizeof(EFI_PCD_PROTOCOL) - system_table_heap_ptr, pcd_protocol = install_EFI_PCD_PROTOCOL(self.ql, system_table_heap_ptr) - self.handle_dict[1] = {self.ql.os.profile.get("EFI_PCD_PROTOCOL", "guid"): self.pcd_protocol_ptr} - # self.handle_dict[1] = {} self.smm_base2_protocol_ptr = system_table_heap_ptr system_table_heap_ptr += ctypes.sizeof(EFI_SMM_BASE2_PROTOCOL) system_table_heap_ptr, smm_base2_protocol = install_EFI_SMM_BASE2_PROTOCOL(self.ql, system_table_heap_ptr) - self.handle_dict[1][self.ql.os.profile.get("EFI_SMM_BASE2_PROTOCOL", "guid")] = self.smm_base2_protocol_ptr + self.handle_dict[1] = {self.ql.os.profile.get("EFI_SMM_BASE2_PROTOCOL", "guid"): self.smm_base2_protocol_ptr} self.dxe_services_ptr = system_table_heap_ptr system_table_heap_ptr += ctypes.sizeof(EFI_DXE_SERVICES) diff --git a/qiling/os/uefi/pcd_protocol.py b/qiling/os/uefi/pcd_protocol.py deleted file mode 100644 index bfcd0f718..000000000 --- a/qiling/os/uefi/pcd_protocol.py +++ /dev/null @@ -1,279 +0,0 @@ -#!/usr/bin/env python3 -# -# Cross Platform and Multi Architecture Advanced Binary Emulation Framework -# Built on top of Unicorn emulator (www.unicorn-engine.org) - -from qiling.const import * -from qiling.os.const import * -from .const import * -from .utils import * -from .pcd_protocol_type64 import * -from .fncc import * - - -@dxeapi(params={ - "SkuId": ULONGLONG, -}) -def hook_SetSku(ql, address, params): - ql.os.SkuId = params["SkuId"] - -def check_args(ql, address, params): - guid = params["Guid"] - token = params["TokenNumber"] - if guid in ql.os.efi_pcd_protocol_storage: - namespace = ql.os.efi_pcd_protocol_storage[guid] - return (token in namespace, guid, token) - return (False, guid, token) - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, -}) -def hook_Get8(ql, address, params): - arg_ok, guid, token = check_args(ql, address, params) - if arg_ok: - return ql.os.efi_pcd_protocol_storage[guid][token] & 0xff - return 0 - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, -}) -def hook_Get16(ql, address, params): - arg_ok, guid, token = check_args(ql, address, params) - if arg_ok: - return ql.os.efi_pcd_protocol_storage[guid][token] & 0xffff - return 0 - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, -}) -def hook_Get32(ql, address, params): - arg_ok, guid, token = check_args(ql, address, params) - if arg_ok: - return ql.os.efi_pcd_protocol_storage[guid][token] & 0xffffffff - return 0 - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, -}) -def hook_Get64(ql, address, params): - arg_ok, guid, token = check_args(ql, address, params) - if arg_ok: - return ql.os.efi_pcd_protocol_storage[guid][token] & 0xffffffffffffffff - return 0 - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, -}) -def hook_GetPtr(ql, address, params): - arg_ok, guid, token = check_args(ql, address, params) - if arg_ok: - return ql.os.efi_pcd_protocol_storage[guid][token] & 0xffffffffffffffff - return 0 - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, -}) -def hook_GetBool(ql, address, params): - arg_ok, guid, token = check_args(ql, address, params) - if arg_ok: - return ql.os.efi_pcd_protocol_storage[guid][token] & 1 - return 0 - - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, -}) -def hook_GetSize(ql, address, params): - arg_ok, guid, token = check_args(ql, address, params) - if arg_ok: - return len(ql.os.efi_pcd_protocol_storage[guid][token]) - return 0 - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, - "Value": ULONGLONG, -}) -def hook_Set8(ql, address, params): - guid = params["Guid"] - token = params["TokenNumber"] - ql.os.efi_pcd_protocol_storage[guid]= {token: params["Value"] & 0xff} - return EFI_SUCCESS - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, - "Value": ULONGLONG, -}) -def hook_Set16(ql, address, params): - guid = params["Guid"] - token = params["TokenNumber"] - ql.os.efi_pcd_protocol_storage[guid]= {token: params["Value"] & 0xffff} - return EFI_SUCCESS - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, - "Value": UINT, -}) -def hook_Set32(ql, address, params): - guid = params["Guid"] - token = params["TokenNumber"] - ql.os.efi_pcd_protocol_storage[guid]= {token: params["Value"] & 0xffffffff} - return EFI_SUCCESS - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, - "Value": ULONGLONG, -}) -def hook_Set64(ql, address, params): - guid = params["Guid"] - token = params["TokenNumber"] - ql.os.efi_pcd_protocol_storage[guid]= {token: params["Value"] & 0xffffffffffffffff} - return EFI_SUCCESS - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, - "SizeOfValue": POINTER, #POINTER_T(ctypes.c_uint64) - "Buffer": POINTER, #POINTER_T(None) -}) -def hook_SetPtr(ql, address, params): - guid = params["Guid"] - token = params["TokenNumber"] - size = params["SizeOfValue"] - buffer = params["Buffer"] - buf = ql.loader.heap.alloc(size) - ql.mem.write(buf, ql.mem.read(buffer, size)) - ql.os.efi_pcd_protocol_storage[guid]= {token: buf} - return EFI_SUCCESS - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": ULONGLONG, - "Value": ULONGLONG, -}) -def hook_SetBool(ql, address, params): - guid = params["Guid"] - token = params["TokenNumber"] - ql.os.efi_pcd_protocol_storage[guid]= {token: params["Value"] & 1} - return EFI_SUCCESS - -@dxeapi(params={ - "Guid": GUID, - "CallBackToken": ULONGLONG, - "CallBackFunction": POINTER, -}) -def hook_CallbackOnSet(ql, address, params): - guid = params["Guid"] - return EFI_NOT_FOUND # let's see if we need to implement this. - -@dxeapi(params={ - "Guid": GUID, - "CallBackToken": ULONGLONG, - "CallBackFunction": POINTER, -}) -def hook_CancelCallback(ql, address, params): - guid = params["Guid"] - return EFI_NOT_FOUND # let's see if we need to implement this. - -@dxeapi(params={ - "Guid": GUID, - "TokenNumber": POINTER, #POINTER_T(ctypes.c_uint64) -}) -def hook_GetNextToken(ql, address, params): - guid = params["Guid"] - token = params["TokenNumber"] - lst = list(ql.os.efi_pcd_protocol_storage[guid]) - try: - index = lst.index(token) - if index + 1 < len(lst): - return lst[index + 1] - except: - pass - return EFI_NOT_FOUND - -@dxeapi(params={ - "Guid": POINTER, -}) -def hook_GetNextTokenSpace(ql, address, params): - guid = params["Guid"] - lst = list(ql.os.efi_pcd_protocol_storage) - try: - index = lst.index(guid) - if index + 1 < len(lst): - return lst[index + 1] - except: - pass - return EFI_NOT_FOUND - - - -def install_EFI_PCD_PROTOCOL(ql, start_ptr): - efi_pcd_protocol = EFI_PCD_PROTOCOL() - ptr = start_ptr - pointer_size = 8 - efi_pcd_protocol.SetSku = ptr - ql.hook_address(hook_SetSku, ptr) - ptr += pointer_size - efi_pcd_protocol.Get8 = ptr - ql.hook_address(hook_Get8, ptr) - ptr += pointer_size - efi_pcd_protocol.Get16 = ptr - ql.hook_address(hook_Get16, ptr) - ptr += pointer_size - efi_pcd_protocol.Get32 = ptr - ql.hook_address(hook_Get32, ptr) - ptr += pointer_size - efi_pcd_protocol.Get64 = ptr - ql.hook_address(hook_Get64, ptr) - ptr += pointer_size - efi_pcd_protocol.GetPtr = ptr - ql.hook_address(hook_GetPtr, ptr) - ptr += pointer_size - efi_pcd_protocol.GetBool = ptr - ql.hook_address(hook_GetBool, ptr) - ptr += pointer_size - efi_pcd_protocol.GetSize = ptr - ql.hook_address(hook_GetSize, ptr) - ptr += pointer_size - efi_pcd_protocol.Set8 = ptr - ql.hook_address(hook_Set8, ptr) - ptr += pointer_size - efi_pcd_protocol.Set16 = ptr - ql.hook_address(hook_Set16, ptr) - ptr += pointer_size - efi_pcd_protocol.Set32 = ptr - ql.hook_address(hook_Set32, ptr) - ptr += pointer_size - efi_pcd_protocol.Set64 = ptr - ql.hook_address(hook_Set64, ptr) - ptr += pointer_size - efi_pcd_protocol.SetPtr = ptr - ql.hook_address(hook_SetPtr, ptr) - ptr += pointer_size - efi_pcd_protocol.SetBool = ptr - ql.hook_address(hook_SetBool, ptr) - ptr += pointer_size - efi_pcd_protocol.CallbackOnSet = ptr - ql.hook_address(hook_CallbackOnSet, ptr) - ptr += pointer_size - efi_pcd_protocol.CancelCallback = ptr - ql.hook_address(hook_CancelCallback, ptr) - ptr += pointer_size - efi_pcd_protocol.GetNextToken = ptr - ql.hook_address(hook_GetNextToken, ptr) - ptr += pointer_size - efi_pcd_protocol.GetNextTokenSpace = ptr - ql.hook_address(hook_GetNextTokenSpace, ptr) - ptr += pointer_size - return (ptr, efi_pcd_protocol) - diff --git a/qiling/os/uefi/pcd_protocol_type64.py b/qiling/os/uefi/pcd_protocol_type64.py deleted file mode 100644 index 6bd2ef8b5..000000000 --- a/qiling/os/uefi/pcd_protocol_type64.py +++ /dev/null @@ -1,164 +0,0 @@ -# -*- coding: utf-8 -*- -# -# TARGET arch is: [] -# WORD_SIZE is: 8 -# POINTER_SIZE is: 8 -# LONGDOUBLE_SIZE is: 16 -# -import ctypes - - -c_int128 = ctypes.c_ubyte*16 -c_uint128 = c_int128 -void = None -if ctypes.sizeof(ctypes.c_longdouble) == 16: - c_long_double_t = ctypes.c_longdouble -else: - c_long_double_t = ctypes.c_ubyte*16 - -# if local wordsize is same as target, keep ctypes pointer function. -# required to access _ctypes -import _ctypes -# Emulate a pointer class using the approriate c_int32/c_int64 type -# The new class should have : -# ['__module__', 'from_param', '_type_', '__dict__', '__weakref__', '__doc__'] -# but the class should be submitted to a unique instance for each base type -# to that if A == B, POINTER_T(A) == POINTER_T(B) -ctypes._pointer_t_type_cache = {} -def POINTER_T(pointee): - # a pointer should have the same length as LONG - fake_ptr_base_type = ctypes.c_uint64 - # specific case for c_void_p - if pointee is None: # VOID pointer type. c_void_p. - pointee = type(None) # ctypes.c_void_p # ctypes.c_ulong - clsname = 'c_void' - else: - clsname = pointee.__name__ - if clsname in ctypes._pointer_t_type_cache: - return ctypes._pointer_t_type_cache[clsname] - # make template - _class = type('LP_%d_%s'%(8, clsname), (fake_ptr_base_type,),{}) - ctypes._pointer_t_type_cache[clsname] = _class - return _class - - - -undefined = ctypes.c_ubyte -byte = ctypes.c_ubyte -dword = ctypes.c_uint32 -qword = ctypes.c_uint64 -uchar = ctypes.c_ubyte -uint = ctypes.c_uint32 -ulong = ctypes.c_uint64 -ulonglong = ctypes.c_uint64 -undefined1 = ctypes.c_ubyte -undefined2 = ctypes.c_uint16 -undefined4 = ctypes.c_uint32 -ushort = ctypes.c_uint16 -word = ctypes.c_uint16 -class struct__EFI_PCD_PROTOCOL(ctypes.Structure): - pass - -class struct_EFI_GUID(ctypes.Structure): - pass - -struct__EFI_PCD_PROTOCOL._pack_ = True # source:False -struct__EFI_PCD_PROTOCOL._functions_ = [] -struct__EFI_PCD_PROTOCOL._fields_ = [ - ('SetSku', POINTER_T(ctypes.CFUNCTYPE(None, ctypes.c_uint64))), - ('Get8', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_ubyte, POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), - ('Get16', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint16, POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), - ('Get32', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint32, POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), - ('Get64', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), - ('GetPtr', POINTER_T(ctypes.CFUNCTYPE(POINTER_T(None), POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), - ('GetBool', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_ubyte, POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), - ('GetSize', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64))), - ('Set8', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_ubyte))), - ('Set16', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_uint16))), - ('Set32', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_uint32))), - ('Set64', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_uint64))), - ('SetPtr', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(None)))), - ('SetBool', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_ubyte))), - ('CallbackOnSet', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64))))), - ('CancelCallback', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64))))), - ('GetNextToken', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), POINTER_T(ctypes.c_uint64)))), - ('GetNextTokenSpace', POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(POINTER_T(struct_EFI_GUID))))), -] - -struct__EFI_PCD_PROTOCOL._functions_.append(("SetSku",['None', 'ctypes.c_uint64'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("Get8",['ctypes.c_ubyte', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("Get16",['ctypes.c_uint16', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("Get32",['ctypes.c_uint32', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("Get64",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("GetPtr",['POINTER_T(None)', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("GetBool",['ctypes.c_ubyte', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("GetSize",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("Set8",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'ctypes.c_ubyte'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("Set16",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'ctypes.c_uint16'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("Set32",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'ctypes.c_uint32'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("Set64",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'ctypes.c_uint64'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("SetPtr",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'POINTER_T(ctypes.c_uint64)', 'POINTER_T(None)'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("SetBool",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'ctypes.c_ubyte'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("CallbackOnSet",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64))'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("CancelCallback",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'ctypes.c_uint64', 'POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64))'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("GetNextToken",['ctypes.c_uint64', 'POINTER_T(struct_EFI_GUID)', 'POINTER_T(ctypes.c_uint64)'])) -struct__EFI_PCD_PROTOCOL._functions_.append(("GetNextTokenSpace",['ctypes.c_uint64', 'POINTER_T(POINTER_T(struct_EFI_GUID))'])) -_EFI_PCD_PROTOCOL = struct__EFI_PCD_PROTOCOL -P_EFI_PCD_PROTOCOL = POINTER_T(struct__EFI_PCD_PROTOCOL) -UINT64 = ctypes.c_uint64 -UINTN = ctypes.c_uint64 -EFI_PCD_PROTOCOL_SET_SKU = POINTER_T(ctypes.CFUNCTYPE(None, ctypes.c_uint64)) -UINT8 = ctypes.c_ubyte -struct_EFI_GUID._pack_ = True # source:False -struct_EFI_GUID._functions_ = [] -struct_EFI_GUID._fields_ = [ - ('Data1', ctypes.c_uint32), - ('Data2', ctypes.c_uint16), - ('Data3', ctypes.c_uint16), - ('Data4', ctypes.c_ubyte * 8), -] - -EFI_GUID = struct_EFI_GUID -PEFI_GUID = POINTER_T(struct_EFI_GUID) -EFI_PCD_PROTOCOL_GET_8 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_ubyte, POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) -UINT16 = ctypes.c_uint16 -EFI_PCD_PROTOCOL_GET_16 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint16, POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) -UINT32 = ctypes.c_uint32 -EFI_PCD_PROTOCOL_GET_32 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint32, POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) -EFI_PCD_PROTOCOL_GET_64 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) -EFI_PCD_PROTOCOL_GET_POINTER = POINTER_T(ctypes.CFUNCTYPE(POINTER_T(None), POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) -BOOLEAN = ctypes.c_ubyte -EFI_PCD_PROTOCOL_GET_BOOLEAN = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_ubyte, POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) -EFI_PCD_PROTOCOL_GET_SIZE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64)) -RETURN_STATUS = ctypes.c_uint64 -EFI_STATUS = ctypes.c_uint64 -EFI_PCD_PROTOCOL_SET_8 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_ubyte)) -EFI_PCD_PROTOCOL_SET_16 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_uint16)) -EFI_PCD_PROTOCOL_SET_32 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_uint32)) -EFI_PCD_PROTOCOL_SET_64 = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_uint64)) -EFI_PCD_PROTOCOL_SET_POINTER = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(ctypes.c_uint64), POINTER_T(None))) -EFI_PCD_PROTOCOL_SET_BOOLEAN = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, ctypes.c_ubyte)) -EFI_PCD_PROTOCOL_CALLBACK = POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64)) -EFI_PCD_PROTOCOL_CALLBACK_ON_SET = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64)))) -EFI_PCD_PROTOCOL_CANCEL_CALLBACK = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(ctypes.CFUNCTYPE(None, POINTER_T(struct_EFI_GUID), ctypes.c_uint64, POINTER_T(None), ctypes.c_uint64)))) -EFI_PCD_PROTOCOL_GET_NEXT_TOKEN = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(struct_EFI_GUID), POINTER_T(ctypes.c_uint64))) -EFI_PCD_PROTOCOL_GET_NEXT_TOKEN_SPACE = POINTER_T(ctypes.CFUNCTYPE(ctypes.c_uint64, POINTER_T(POINTER_T(struct_EFI_GUID)))) -EFI_PCD_PROTOCOL = struct__EFI_PCD_PROTOCOL -__all__ = \ - ['BOOLEAN', 'EFI_GUID', 'EFI_PCD_PROTOCOL', - 'EFI_PCD_PROTOCOL_CALLBACK', 'EFI_PCD_PROTOCOL_CALLBACK_ON_SET', - 'EFI_PCD_PROTOCOL_CANCEL_CALLBACK', 'EFI_PCD_PROTOCOL_GET_16', - 'EFI_PCD_PROTOCOL_GET_32', 'EFI_PCD_PROTOCOL_GET_64', - 'EFI_PCD_PROTOCOL_GET_8', 'EFI_PCD_PROTOCOL_GET_BOOLEAN', - 'EFI_PCD_PROTOCOL_GET_NEXT_TOKEN', - 'EFI_PCD_PROTOCOL_GET_NEXT_TOKEN_SPACE', - 'EFI_PCD_PROTOCOL_GET_POINTER', 'EFI_PCD_PROTOCOL_GET_SIZE', - 'EFI_PCD_PROTOCOL_SET_16', 'EFI_PCD_PROTOCOL_SET_32', - 'EFI_PCD_PROTOCOL_SET_64', 'EFI_PCD_PROTOCOL_SET_8', - 'EFI_PCD_PROTOCOL_SET_BOOLEAN', 'EFI_PCD_PROTOCOL_SET_POINTER', - 'EFI_PCD_PROTOCOL_SET_SKU', 'EFI_STATUS', 'PEFI_GUID', - 'P_EFI_PCD_PROTOCOL', 'RETURN_STATUS', 'UINT16', 'UINT32', - 'UINT64', 'UINT8', 'UINTN', '_EFI_PCD_PROTOCOL', 'byte', 'dword', - 'qword', 'struct_EFI_GUID', 'struct__EFI_PCD_PROTOCOL', 'uchar', - 'uint', 'ulong', 'ulonglong', 'undefined', 'undefined1', - 'undefined2', 'undefined4', 'ushort', 'word'] diff --git a/qiling/profiles/uefi.ql b/qiling/profiles/uefi.ql index c2d64daaa..c23dfcd74 100644 --- a/qiling/profiles/uefi.ql +++ b/qiling/profiles/uefi.ql @@ -38,9 +38,6 @@ data4 = [0x95, 0x2E, 0x4D, 0xA0, 0x39, 0x8E, 0x2B, 0xB9] guid = 5b1b31a1-9562-11d2-8e3f-00a0c969723b revision = 0x1000 -[EFI_PCD_PROTOCOL] -guid = 13a3f0f6-264a-3ef0-f2e0-dec512342f34 - [EFI_SMM_BASE2_PROTOCOL] guid = f4ccbfb7-f6e0-47fd-9dd4-10a8f150c191 From a7937d71fe4c3cd31e86119cb53de9c6e91bc8b3 Mon Sep 17 00:00:00 2001 From: Dao Trong Nghia Date: Tue, 30 Jun 2020 19:50:58 -0700 Subject: [PATCH 59/86] Change NtQuerySystemInformation to @winsdkapi --- qiling/os/windows/dlls/ntdll.py | 19 +++++++------------ 1 file changed, 7 insertions(+), 12 deletions(-) diff --git a/qiling/os/windows/dlls/ntdll.py b/qiling/os/windows/dlls/ntdll.py index 85ef001e7..a310e77f5 100644 --- a/qiling/os/windows/dlls/ntdll.py +++ b/qiling/os/windows/dlls/ntdll.py @@ -90,6 +90,7 @@ def hook_NtQueryInformationProcess(ql, address, params): # TODO have no idea if is cdecl or stdcall _QueryInformationProcess(ql, address, params) + def _QuerySystemInformation(ql, address, params): siClass = params["SystemInformationClass"] pt_res = params["ReturnLength"] @@ -143,12 +144,9 @@ def _QuerySystemInformation(ql, address, params): # IN ULONG SystemInformationLength, # OUT PULONG ReturnLength # ); -@winapi(cc=STDCALL, params={ - "SystemInformationClass": UINT, - "SystemInformation": POINTER, - "SystemInformationLength": UINT, - "ReturnLength": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, + replace_params={"SystemInformationClass": UINT, "SystemInformation": POINTER, "SystemInformationLength": SIZE_T, + "ReturnLength": POINTER}) def hook_NtQuerySystemInformation(ql, address, params): # In minwindef.h # #define WINAPI __stdcall @@ -161,12 +159,9 @@ def hook_NtQuerySystemInformation(ql, address, params): # IN ULONG SystemInformationLength, # OUT PULONG ReturnLength # ); -@winapi(cc=STDCALL, params={ - "SystemInformationClass": UINT, - "SystemInformation": POINTER, - "SystemInformationLength": UINT, - "ReturnLength": POINTER -}) +@winsdkapi(cc=STDCALL, dllname=dllname, + replace_params={"SystemInformationClass": UINT, "SystemInformation": POINTER, "SystemInformationLength": SIZE_T, + "ReturnLength": POINTER}) def hook_ZwQuerySystemInformation(ql, address, params): # In minwindef.h # #define WINAPI __stdcall From 06d5eded442393509f4d4b04d1882684b081b106 Mon Sep 17 00:00:00 2001 From: chfl4gs Date: Wed, 1 Jul 2020 11:31:12 +0800 Subject: [PATCH 60/86] Updating travis --- .travis.yml | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.travis.yml b/.travis.yml index bd635b3d6..1c1ddd01c 100644 --- a/.travis.yml +++ b/.travis.yml @@ -77,7 +77,10 @@ matrix: if [[ ! -f /c/Python36/python ]]; then choco install python --version=3.6.8 fi - #- choco install python + # Prevent worker settings failure + - powershell Start-Process -PassThru -Wait PowerShell -ArgumentList "'-Command Set-MpPreference -DisableArchiveScanning \$true'" + - powershell Start-Process -PassThru -Wait PowerShell -ArgumentList "'-Command Set-MpPreference -DisableBehaviorMonitoring \$true'" + - powershell Start-Process -PassThru -Wait PowerShell -ArgumentList "'-Command Set-MpPreference -DisableRealtimeMonitoring \$true'" #- choco install kb2999226 #- python -m pip install --upgrade pip install: From a84d0f119f417e1ff75d2fa1c4f8a452907a7fae Mon Sep 17 00:00:00 2001 From: Dao Trong Nghia Date: Tue, 30 Jun 2020 20:56:00 -0700 Subject: [PATCH 61/86] Fix: Unzip malware file to pass CI tests --- examples/uselessdisk_x86_windows.py | 12 ++++++++++ examples/wannacry_x86_windows_hookaddress.py | 14 +++++++++++ tests/test_pe.py | 25 +++++++++++++++++++- 3 files changed, 50 insertions(+), 1 deletion(-) diff --git a/examples/uselessdisk_x86_windows.py b/examples/uselessdisk_x86_windows.py index 2d5dffe56..0ab962af0 100644 --- a/examples/uselessdisk_x86_windows.py +++ b/examples/uselessdisk_x86_windows.py @@ -7,8 +7,20 @@ import sys sys.path.append("..") from qiling import * +from zipfile import ZipFile + +def unzip(zip_path, name, password): + with ZipFile(zip_path) as zip_reader: + with zip_reader.open(name, 'r', password) as f: + return f.read() + return None if __name__ == "__main__": + data = unzip("rootfs/x86_windows/bin/UselessDisk.bin.zip", "UselessDisk.bin", b'infected') + assert data is not None, "Invalid zip file" + with open("rootfs/x86_windows/bin/UselessDisk.bin", 'wb') as f: + f.write(data) + ql = Qiling(["rootfs/x86_windows/bin/UselessDisk.bin"], "rootfs/x86_windows", output = "debug") ql.run() diff --git a/examples/wannacry_x86_windows_hookaddress.py b/examples/wannacry_x86_windows_hookaddress.py index 3d35157b6..45595bce6 100644 --- a/examples/wannacry_x86_windows_hookaddress.py +++ b/examples/wannacry_x86_windows_hookaddress.py @@ -5,12 +5,26 @@ import sys sys.path.append("..") from qiling import * +from zipfile import ZipFile def stopatkillerswtich(ql): print("killerswtch found") ql.emu_stop() + +def unzip(zip_path, name, password): + with ZipFile(zip_path) as zip_reader: + with zip_reader.open(name, 'r', password) as f: + return f.read() + return None + + if __name__ == "__main__": + data = unzip("rootfs/x86_windows/bin/wannacry.bin.zip", "wannacry.bin", b'infected') + assert data is not None, "Invalid zip file" + with open("rootfs/x86_windows/bin/wannacry.bin", 'wb') as f: + f.write(data) + ql = Qiling(["rootfs/x86_windows/bin/wannacry.bin"], "rootfs/x86_windows", output="debug") ql.hook_address(stopatkillerswtich, 0x40819a) ql.run() diff --git a/tests/test_pe.py b/tests/test_pe.py index 2a56bcada..000743cc4 100644 --- a/tests/test_pe.py +++ b/tests/test_pe.py @@ -15,6 +15,13 @@ from qiling.os.windows.fncc import * from qiling.os.windows.utils import * from unicorn.x86_const import * +from zipfile import ZipFile + +def unzip(zip_path, name, password): + with ZipFile(zip_path) as zip_reader: + with zip_reader.open(name, 'r', password) as f: + return f.read() + return None class PETest(unittest.TestCase): def test_pe_win_x8664_hello(self): @@ -33,6 +40,10 @@ def test_pe_win_x86_hello(self): def test_pe_win_x86_uselessdisk(self): + data = unzip("../examples/rootfs/x86_windows/bin/UselessDisk.bin.zip", "UselessDisk.bin", b'infected') + assert data is not None, "Invalid zip file" + with open("../examples/rootfs/x86_windows/bin/UselessDisk.bin", 'wb') as f: + f.write(data) ql = Qiling(["../examples/rootfs/x86_windows/bin/UselessDisk.bin"], "../examples/rootfs/x86_windows", output="debug") ql.run() @@ -40,6 +51,7 @@ def test_pe_win_x86_uselessdisk(self): def test_pe_win_x86_gandcrab(self): + def stop(ql, default_values): print("Ok for now") ql.emu_stop() @@ -82,6 +94,10 @@ def randomize_config_value(ql, key, subkey): else: raise QlErrorNotImplemented("[!] API not implemented") + data = unzip("../examples/rootfs/x86_windows/bin/GandCrab502.bin.zip", "GandCrab502.bin", b'infected') + assert data is not None, "Invalid zip file" + with open("../examples/rootfs/x86_windows/bin/GandCrab502.bin", 'wb') as f: + f.write(data) ql = Qiling(["../examples/rootfs/x86_windows/bin/GandCrab502.bin"], "../examples/rootfs/x86_windows", output="debug", profile="profiles/windows_gandcrab_admin.ql") default_user = ql.os.profile["USER"]["username"] @@ -165,7 +181,10 @@ def stop(ql): ql.console = False ql.nprint("No Print") ql.emu_stop() - + data = unzip("../examples/rootfs/x86_windows/bin/wannacry.bin.zip", "wannacry.bin", b'infected') + assert data is not None, "Invalid zip file" + with open("../examples/rootfs/x86_windows/bin/wannacry.bin", 'wb') as f: + f.write(data) ql = Qiling(["../examples/rootfs/x86_windows/bin/wannacry.bin"], "../examples/rootfs/x86_windows") ql.hook_address(stop, 0x40819a) ql.run() @@ -173,6 +192,10 @@ def stop(ql): def test_pe_win_al_khaser(self): + data = unzip("../examples/rootfs/x86_windows/bin/al-khaser.bin.zip", "al-khaser.bin", b'infected') + assert data is not None, "Invalid zip file" + with open("../examples/rootfs/x86_windows/bin/al-khaser.bin", 'wb') as f: + f.write(data) ql = Qiling(["../examples/rootfs/x86_windows/bin/al-khaser.bin"], "../examples/rootfs/x86_windows") # The hooks are to remove the prints to file. It crashes. will debug why in the future From 33fa90c58defeef89e4141d2c3faf04ac0beecee Mon Sep 17 00:00:00 2001 From: Dao Trong Nghia Date: Wed, 1 Jul 2020 00:32:54 -0700 Subject: [PATCH 62/86] Revert "Fix: Unzip malware file to pass CI tests" This reverts commit a84d0f119f417e1ff75d2fa1c4f8a452907a7fae. --- examples/uselessdisk_x86_windows.py | 12 ---------- examples/wannacry_x86_windows_hookaddress.py | 14 ----------- tests/test_pe.py | 25 +------------------- 3 files changed, 1 insertion(+), 50 deletions(-) diff --git a/examples/uselessdisk_x86_windows.py b/examples/uselessdisk_x86_windows.py index 0ab962af0..2d5dffe56 100644 --- a/examples/uselessdisk_x86_windows.py +++ b/examples/uselessdisk_x86_windows.py @@ -7,20 +7,8 @@ import sys sys.path.append("..") from qiling import * -from zipfile import ZipFile - -def unzip(zip_path, name, password): - with ZipFile(zip_path) as zip_reader: - with zip_reader.open(name, 'r', password) as f: - return f.read() - return None if __name__ == "__main__": - data = unzip("rootfs/x86_windows/bin/UselessDisk.bin.zip", "UselessDisk.bin", b'infected') - assert data is not None, "Invalid zip file" - with open("rootfs/x86_windows/bin/UselessDisk.bin", 'wb') as f: - f.write(data) - ql = Qiling(["rootfs/x86_windows/bin/UselessDisk.bin"], "rootfs/x86_windows", output = "debug") ql.run() diff --git a/examples/wannacry_x86_windows_hookaddress.py b/examples/wannacry_x86_windows_hookaddress.py index 45595bce6..3d35157b6 100644 --- a/examples/wannacry_x86_windows_hookaddress.py +++ b/examples/wannacry_x86_windows_hookaddress.py @@ -5,26 +5,12 @@ import sys sys.path.append("..") from qiling import * -from zipfile import ZipFile def stopatkillerswtich(ql): print("killerswtch found") ql.emu_stop() - -def unzip(zip_path, name, password): - with ZipFile(zip_path) as zip_reader: - with zip_reader.open(name, 'r', password) as f: - return f.read() - return None - - if __name__ == "__main__": - data = unzip("rootfs/x86_windows/bin/wannacry.bin.zip", "wannacry.bin", b'infected') - assert data is not None, "Invalid zip file" - with open("rootfs/x86_windows/bin/wannacry.bin", 'wb') as f: - f.write(data) - ql = Qiling(["rootfs/x86_windows/bin/wannacry.bin"], "rootfs/x86_windows", output="debug") ql.hook_address(stopatkillerswtich, 0x40819a) ql.run() diff --git a/tests/test_pe.py b/tests/test_pe.py index 000743cc4..2a56bcada 100644 --- a/tests/test_pe.py +++ b/tests/test_pe.py @@ -15,13 +15,6 @@ from qiling.os.windows.fncc import * from qiling.os.windows.utils import * from unicorn.x86_const import * -from zipfile import ZipFile - -def unzip(zip_path, name, password): - with ZipFile(zip_path) as zip_reader: - with zip_reader.open(name, 'r', password) as f: - return f.read() - return None class PETest(unittest.TestCase): def test_pe_win_x8664_hello(self): @@ -40,10 +33,6 @@ def test_pe_win_x86_hello(self): def test_pe_win_x86_uselessdisk(self): - data = unzip("../examples/rootfs/x86_windows/bin/UselessDisk.bin.zip", "UselessDisk.bin", b'infected') - assert data is not None, "Invalid zip file" - with open("../examples/rootfs/x86_windows/bin/UselessDisk.bin", 'wb') as f: - f.write(data) ql = Qiling(["../examples/rootfs/x86_windows/bin/UselessDisk.bin"], "../examples/rootfs/x86_windows", output="debug") ql.run() @@ -51,7 +40,6 @@ def test_pe_win_x86_uselessdisk(self): def test_pe_win_x86_gandcrab(self): - def stop(ql, default_values): print("Ok for now") ql.emu_stop() @@ -94,10 +82,6 @@ def randomize_config_value(ql, key, subkey): else: raise QlErrorNotImplemented("[!] API not implemented") - data = unzip("../examples/rootfs/x86_windows/bin/GandCrab502.bin.zip", "GandCrab502.bin", b'infected') - assert data is not None, "Invalid zip file" - with open("../examples/rootfs/x86_windows/bin/GandCrab502.bin", 'wb') as f: - f.write(data) ql = Qiling(["../examples/rootfs/x86_windows/bin/GandCrab502.bin"], "../examples/rootfs/x86_windows", output="debug", profile="profiles/windows_gandcrab_admin.ql") default_user = ql.os.profile["USER"]["username"] @@ -181,10 +165,7 @@ def stop(ql): ql.console = False ql.nprint("No Print") ql.emu_stop() - data = unzip("../examples/rootfs/x86_windows/bin/wannacry.bin.zip", "wannacry.bin", b'infected') - assert data is not None, "Invalid zip file" - with open("../examples/rootfs/x86_windows/bin/wannacry.bin", 'wb') as f: - f.write(data) + ql = Qiling(["../examples/rootfs/x86_windows/bin/wannacry.bin"], "../examples/rootfs/x86_windows") ql.hook_address(stop, 0x40819a) ql.run() @@ -192,10 +173,6 @@ def stop(ql): def test_pe_win_al_khaser(self): - data = unzip("../examples/rootfs/x86_windows/bin/al-khaser.bin.zip", "al-khaser.bin", b'infected') - assert data is not None, "Invalid zip file" - with open("../examples/rootfs/x86_windows/bin/al-khaser.bin", 'wb') as f: - f.write(data) ql = Qiling(["../examples/rootfs/x86_windows/bin/al-khaser.bin"], "../examples/rootfs/x86_windows") # The hooks are to remove the prints to file. It crashes. will debug why in the future From f5bdd171f1eefc9a7c8174160666516104b7e3a6 Mon Sep 17 00:00:00 2001 From: Dao Trong Nghia Date: Wed, 1 Jul 2020 01:01:13 -0700 Subject: [PATCH 63/86] Add test for NtQuerySystemInformation --- tests/test_pe.py | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/tests/test_pe.py b/tests/test_pe.py index 2a56bcada..46ac14240 100644 --- a/tests/test_pe.py +++ b/tests/test_pe.py @@ -171,6 +171,12 @@ def stop(ql): ql.run() del ql + def test_pe_win_x86_NtQueryInformationSystem(self): + ql = Qiling( + ["../examples/rootfs/x86_windows/bin/NtQuerySystemInformation.exe"], + "../examples/rootfs/x86_windows") + ql.run() + del ql def test_pe_win_al_khaser(self): ql = Qiling(["../examples/rootfs/x86_windows/bin/al-khaser.bin"], "../examples/rootfs/x86_windows") From 1cdce084fe55cb8149a615af225788a6efb6321a Mon Sep 17 00:00:00 2001 From: Jhe Date: Wed, 1 Jul 2020 18:41:14 +0800 Subject: [PATCH 64/86] fix ql.mem.search logic --- qiling/os/memory.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/qiling/os/memory.py b/qiling/os/memory.py index 9586ee035..e5a4155a5 100644 --- a/qiling/os/memory.py +++ b/qiling/os/memory.py @@ -190,12 +190,12 @@ def search(self, needle: bytes, begin= None, end= None): addrs = [x.start(0) + begin for x in re.finditer(needle, haystack)] if not begin: - begin = self.map_info[0][0] # search from first mapped region till end + begin = self.map_info[0][0] # search from the first mapped region if not end: - end = self.map_info[-1][1] # search from begin till last mapped region + end = self.map_info[-1][1] # search till the last mapped region mapped_range = [(_begin, _end) for _begin, _end, _ in self.ql.uc.mem_regions() - if begin in range(_begin, _end) or end in range(_begin, _end)] + if _begin in range(begin, end) or _end in range(begin, end)] for _begin, _end in mapped_range: haystack = self.read(_begin, _end - _begin) From a24f1f462b3e3af27fe0772c3646f8bb1a397692 Mon Sep 17 00:00:00 2001 From: xwings Date: Wed, 1 Jul 2020 19:42:48 +0800 Subject: [PATCH 65/86] add more ql.mem.search test --- tests/test_elf.py | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/tests/test_elf.py b/tests/test_elf.py index 0f55080f3..bee7b2e19 100644 --- a/tests/test_elf.py +++ b/tests/test_elf.py @@ -159,9 +159,11 @@ def write_onexit(ql, arg1, arg2, arg3, *args): ql.set_syscall(1, write_onexit, QL_INTERCEPT.EXIT) ql.mem.map(0x1000, 0x1000) ql.mem.write(0x1000, b"\xFF\xFE\xFD\xFC\xFB\xFA\xFB\xFC\xFC\xFE\xFD") + ql.mem.map(0x2000, 0x1000) + ql.mem.write(0x2000, b"\xFF\xFE\xFD\xFC\xFB\xFA\xFB\xFC\xFC\xFE\xFD") ql.run() - self.assertEqual([0x1000], ql.mem.search(b"\xFF\xFE\xFD\xFC\xFB\xFA\xFB\xFC\xFC\xFE\xFD")) + self.assertEqual([0x1000,0x2000], ql.mem.search(b"\xFF\xFE\xFD\xFC\xFB\xFA\xFB\xFC\xFC\xFE\xFD")) self.assertEqual(93824992233162, self.set_api) self.assertEqual(True, self.set_api_onexit) self.assertEqual(True, self.set_api_onenter) From 552a3ab96630ef9bb1369cd71eb2f6bcd02731b4 Mon Sep 17 00:00:00 2001 From: Assaf Carlsbad Date: Wed, 1 Jul 2020 16:00:40 +0300 Subject: [PATCH 66/86] Small bug fix for UEFI's UninstallMultipleProtocolInterfaces. --- qiling/os/uefi/bootup.py | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/qiling/os/uefi/bootup.py b/qiling/os/uefi/bootup.py index 7c6c623d6..6d2e8dad4 100644 --- a/qiling/os/uefi/bootup.py +++ b/qiling/os/uefi/bootup.py @@ -474,10 +474,9 @@ def hook_UninstallMultipleProtocolInterfaces(ql, address, params): GUID = str(ql.os.read_guid(GUID_ptr)) ql.nprint(f'\t {GUID}, {protocol_ptr:x}') dic = ql.loader.handle_dict[handle] - protocol = params["Protocol"] - if protocol not in dic: + if GUID not in dic: return EFI_INVALID_PARAMETER - del dic[protocol] + del dic[GUID] index +=2 return EFI_SUCCESS From 61642299d87bc4da7051a52ee46d4a01e698a865 Mon Sep 17 00:00:00 2001 From: Itai Liba Date: Wed, 1 Jul 2020 06:34:49 -0700 Subject: [PATCH 67/86] Remove PCD Protocol cleanup. --- qiling/loader/pe_uefi.py | 1 - 1 file changed, 1 deletion(-) diff --git a/qiling/loader/pe_uefi.py b/qiling/loader/pe_uefi.py index 5adefafb4..c940ca3bd 100644 --- a/qiling/loader/pe_uefi.py +++ b/qiling/loader/pe_uefi.py @@ -252,7 +252,6 @@ def run(self): self.ql.mem.write(runtime_services_ptr, convert_struct_to_bytes(runtime_services)) self.ql.mem.write(boot_services_ptr, convert_struct_to_bytes(boot_services)) self.ql.mem.write(self.system_table_ptr, convert_struct_to_bytes(system_table)) - # self.ql.mem.write(self.pcd_protocol_ptr, convert_struct_to_bytes(pcd_protocol)) self.ql.mem.write(self.smm_base2_protocol_ptr, convert_struct_to_bytes(smm_base2_protocol)) self.ql.mem.write(self.dxe_services_ptr, convert_struct_to_bytes(dxe_services)) From 79ef471c7c690924645722702861e0509f02b406 Mon Sep 17 00:00:00 2001 From: Assaf Carlsbad Date: Wed, 1 Jul 2020 16:52:54 +0300 Subject: [PATCH 68/86] Fix false positive for UAF detection. --- qiling/extensions/sanitizers/heap.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qiling/extensions/sanitizers/heap.py b/qiling/extensions/sanitizers/heap.py index d434fd711..cc12bae42 100644 --- a/qiling/extensions/sanitizers/heap.py +++ b/qiling/extensions/sanitizers/heap.py @@ -86,7 +86,7 @@ def free(self, addr): # Install the UAF canary hook. self.ql.mem.write(addr, self.canary_byte * (chunk.size - 8)) - uaf_canary = (addr, addr + chunk.size - 8) + uaf_canary = (addr, addr + chunk.size - 8 - 1) self.ql.hook_mem_valid(self.uaf_handler, begin=uaf_canary[0], end=uaf_canary[1]) self.canaries.append(uaf_canary) From 4fca375e6f1e3ad4e3b521cf6c69dacd6eb58987 Mon Sep 17 00:00:00 2001 From: Itai Liba Date: Wed, 1 Jul 2020 06:58:19 -0700 Subject: [PATCH 69/86] Replacing Tabs with Spaces. --- qiling/os/uefi/dxe_service.py | 252 +++++++++++++-------------- qiling/os/uefi/smm_base2_protocol.py | 34 ++-- 2 files changed, 143 insertions(+), 143 deletions(-) diff --git a/qiling/os/uefi/dxe_service.py b/qiling/os/uefi/dxe_service.py index 1bace88fe..2466be6c4 100644 --- a/qiling/os/uefi/dxe_service.py +++ b/qiling/os/uefi/dxe_service.py @@ -6,204 +6,204 @@ from .fncc import * @dxeapi(params={ - "a0": ULONGLONG, - "a1": ULONGLONG, - "a2": ULONGLONG, - "a3": ULONGLONG, + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, + "a3": ULONGLONG, }) def hook_AddMemorySpace(ctx, address, params): - return EFI_OUT_OF_RESOURCES + return EFI_OUT_OF_RESOURCES @dxeapi(params={ - "a0": ULONGLONG, - "a1": ULONGLONG, - "a2": ULONGLONG, - "a3": ULONGLONG, - "a4": POINTER, #POINTER_T(ctypes.c_uint64) - "a5": POINTER, #POINTER_T(None) - "a6": POINTER, #POINTER_T(None) + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, + "a3": ULONGLONG, + "a4": POINTER, #POINTER_T(ctypes.c_uint64) + "a5": POINTER, #POINTER_T(None) + "a6": POINTER, #POINTER_T(None) }) def hook_AllocateMemorySpace(ctx, address, params): - return EFI_OUT_OF_RESOURCES + return EFI_OUT_OF_RESOURCES @dxeapi(params={ - "a0": ULONGLONG, - "a1": ULONGLONG, + "a0": ULONGLONG, + "a1": ULONGLONG, }) def hook_FreeMemorySpace(ctx, address, params): - return EFI_SUCCESS + return EFI_SUCCESS @dxeapi(params={ - "a0": ULONGLONG, - "a1": ULONGLONG, + "a0": ULONGLONG, + "a1": ULONGLONG, }) def hook_RemoveMemorySpace(ctx, address, params): - return EFI_SUCCESS + return EFI_SUCCESS @dxeapi(params={ - "a0": ULONGLONG, - "a1": POINTER, #POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR) + "a0": ULONGLONG, + "a1": POINTER, #POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR) }) def hook_GetMemorySpaceDescriptor(ctx, address, params): - return EFI_UNSUPPORTED + return EFI_UNSUPPORTED @dxeapi(params={ - "a0": ULONGLONG, - "a1": ULONGLONG, - "a2": ULONGLONG, + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, }) def hook_SetMemorySpaceAttributes(ctx, address, params): - return EFI_UNSUPPORTED + return EFI_UNSUPPORTED @dxeapi(params={ - "a0": POINTER, #POINTER_T(ctypes.c_uint64) - "a1": POINTER, #POINTER_T(POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR)) + "a0": POINTER, #POINTER_T(ctypes.c_uint64) + "a1": POINTER, #POINTER_T(POINTER_T(struct_EFI_GCD_MEMORY_SPACE_DESCRIPTOR)) }) def hook_GetMemorySpaceMap(ctx, address, params): - return EFI_UNSUPPORTED + return EFI_UNSUPPORTED @dxeapi(params={ - "a0": ULONGLONG, - "a1": ULONGLONG, - "a2": ULONGLONG, + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, }) def hook_AddIoSpace(ctx, address, params): - return EFI_OUT_OF_RESOURCES + return EFI_OUT_OF_RESOURCES @dxeapi(params={ - "a0": ULONGLONG, - "a1": ULONGLONG, - "a2": ULONGLONG, - "a3": ULONGLONG, - "a4": POINTER, #POINTER_T(ctypes.c_uint64) - "a5": POINTER, #POINTER_T(None) - "a6": POINTER, #POINTER_T(None) + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, + "a3": ULONGLONG, + "a4": POINTER, #POINTER_T(ctypes.c_uint64) + "a5": POINTER, #POINTER_T(None) + "a6": POINTER, #POINTER_T(None) }) def hook_AllocateIoSpace(ctx, address, params): - return EFI_OUT_OF_RESOURCES + return EFI_OUT_OF_RESOURCES @dxeapi(params={ - "a0": ULONGLONG, - "a1": ULONGLONG, + "a0": ULONGLONG, + "a1": ULONGLONG, }) def hook_FreeIoSpace(ctx, address, params): - return EFI_SUCCESS + return EFI_SUCCESS @dxeapi(params={ - "a0": ULONGLONG, - "a1": ULONGLONG, + "a0": ULONGLONG, + "a1": ULONGLONG, }) def hook_RemoveIoSpace(ctx, address, params): - return EFI_SUCCESS + return EFI_SUCCESS @dxeapi(params={ - "a0": ULONGLONG, - "a1": POINTER, #POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR) + "a0": ULONGLONG, + "a1": POINTER, #POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR) }) def hook_GetIoSpaceDescriptor(ctx, address, params): - return EFI_NOT_FOUND + return EFI_NOT_FOUND @dxeapi(params={ - "a0": POINTER, #POINTER_T(ctypes.c_uint64) - "a1": POINTER, #POINTER_T(POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR)) + "a0": POINTER, #POINTER_T(ctypes.c_uint64) + "a1": POINTER, #POINTER_T(POINTER_T(struct_EFI_GCD_IO_SPACE_DESCRIPTOR)) }) def hook_GetIoSpaceMap(ctx, address, params): - return EFI_OUT_OF_RESOURCES + return EFI_OUT_OF_RESOURCES @dxeapi(params={ }) def hook_Dispatch(ctx, address, params): - return EFI_SUCCESS + return EFI_SUCCESS @dxeapi(params={ - "a0": POINTER, #POINTER_T(None) - "a1": GUID, + "a0": POINTER, #POINTER_T(None) + "a1": GUID, }) def hook_Schedule(ctx, address, params): - return EFI_SUCCESS + return EFI_SUCCESS @dxeapi(params={ - "a0": POINTER, #POINTER_T(None) - "a1": GUID, + "a0": POINTER, #POINTER_T(None) + "a1": GUID, }) def hook_Trust(ctx, address, params): - return EFI_NOT_FOUND + return EFI_NOT_FOUND @dxeapi(params={ - "a0": POINTER, #POINTER_T(None) - "a1": ULONGLONG, - "a2": POINTER, #POINTER_T(POINTER_T(None)) + "a0": POINTER, #POINTER_T(None) + "a1": ULONGLONG, + "a2": POINTER, #POINTER_T(POINTER_T(None)) }) def hook_ProcessFirmwareVolume(ctx, address, params): - return EFI_OUT_OF_RESOURCES + return EFI_OUT_OF_RESOURCES @dxeapi(params={ - "a0": ULONGLONG, - "a1": ULONGLONG, - "a2": ULONGLONG, + "a0": ULONGLONG, + "a1": ULONGLONG, + "a2": ULONGLONG, }) def hook_SetMemorySpaceCapabilities(ctx, address, params): - return EFI_UNSUPPORTED + return EFI_UNSUPPORTED def install_EFI_DXE_SERVICES(ql, start_ptr): - efi_dxe_services = EFI_DXE_SERVICES() - ptr = start_ptr - pointer_size = 8 - efi_dxe_services.AddMemorySpace = ptr - ql.hook_address(hook_AddMemorySpace, ptr) - ptr += pointer_size - efi_dxe_services.AllocateMemorySpace = ptr - ql.hook_address(hook_AllocateMemorySpace, ptr) - ptr += pointer_size - efi_dxe_services.FreeMemorySpace = ptr - ql.hook_address(hook_FreeMemorySpace, ptr) - ptr += pointer_size - efi_dxe_services.RemoveMemorySpace = ptr - ql.hook_address(hook_RemoveMemorySpace, ptr) - ptr += pointer_size - efi_dxe_services.GetMemorySpaceDescriptor = ptr - ql.hook_address(hook_GetMemorySpaceDescriptor, ptr) - ptr += pointer_size - efi_dxe_services.SetMemorySpaceAttributes = ptr - ql.hook_address(hook_SetMemorySpaceAttributes, ptr) - ptr += pointer_size - efi_dxe_services.GetMemorySpaceMap = ptr - ql.hook_address(hook_GetMemorySpaceMap, ptr) - ptr += pointer_size - efi_dxe_services.AddIoSpace = ptr - ql.hook_address(hook_AddIoSpace, ptr) - ptr += pointer_size - efi_dxe_services.AllocateIoSpace = ptr - ql.hook_address(hook_AllocateIoSpace, ptr) - ptr += pointer_size - efi_dxe_services.FreeIoSpace = ptr - ql.hook_address(hook_FreeIoSpace, ptr) - ptr += pointer_size - efi_dxe_services.RemoveIoSpace = ptr - ql.hook_address(hook_RemoveIoSpace, ptr) - ptr += pointer_size - efi_dxe_services.GetIoSpaceDescriptor = ptr - ql.hook_address(hook_GetIoSpaceDescriptor, ptr) - ptr += pointer_size - efi_dxe_services.GetIoSpaceMap = ptr - ql.hook_address(hook_GetIoSpaceMap, ptr) - ptr += pointer_size - efi_dxe_services.Dispatch = ptr - ql.hook_address(hook_Dispatch, ptr) - ptr += pointer_size - efi_dxe_services.Schedule = ptr - ql.hook_address(hook_Schedule, ptr) - ptr += pointer_size - efi_dxe_services.Trust = ptr - ql.hook_address(hook_Trust, ptr) - ptr += pointer_size - efi_dxe_services.ProcessFirmwareVolume = ptr - ql.hook_address(hook_ProcessFirmwareVolume, ptr) - ptr += pointer_size - efi_dxe_services.SetMemorySpaceCapabilities = ptr - ql.hook_address(hook_SetMemorySpaceCapabilities, ptr) - ptr += pointer_size - return (ptr, efi_dxe_services) + efi_dxe_services = EFI_DXE_SERVICES() + ptr = start_ptr + pointer_size = 8 + efi_dxe_services.AddMemorySpace = ptr + ql.hook_address(hook_AddMemorySpace, ptr) + ptr += pointer_size + efi_dxe_services.AllocateMemorySpace = ptr + ql.hook_address(hook_AllocateMemorySpace, ptr) + ptr += pointer_size + efi_dxe_services.FreeMemorySpace = ptr + ql.hook_address(hook_FreeMemorySpace, ptr) + ptr += pointer_size + efi_dxe_services.RemoveMemorySpace = ptr + ql.hook_address(hook_RemoveMemorySpace, ptr) + ptr += pointer_size + efi_dxe_services.GetMemorySpaceDescriptor = ptr + ql.hook_address(hook_GetMemorySpaceDescriptor, ptr) + ptr += pointer_size + efi_dxe_services.SetMemorySpaceAttributes = ptr + ql.hook_address(hook_SetMemorySpaceAttributes, ptr) + ptr += pointer_size + efi_dxe_services.GetMemorySpaceMap = ptr + ql.hook_address(hook_GetMemorySpaceMap, ptr) + ptr += pointer_size + efi_dxe_services.AddIoSpace = ptr + ql.hook_address(hook_AddIoSpace, ptr) + ptr += pointer_size + efi_dxe_services.AllocateIoSpace = ptr + ql.hook_address(hook_AllocateIoSpace, ptr) + ptr += pointer_size + efi_dxe_services.FreeIoSpace = ptr + ql.hook_address(hook_FreeIoSpace, ptr) + ptr += pointer_size + efi_dxe_services.RemoveIoSpace = ptr + ql.hook_address(hook_RemoveIoSpace, ptr) + ptr += pointer_size + efi_dxe_services.GetIoSpaceDescriptor = ptr + ql.hook_address(hook_GetIoSpaceDescriptor, ptr) + ptr += pointer_size + efi_dxe_services.GetIoSpaceMap = ptr + ql.hook_address(hook_GetIoSpaceMap, ptr) + ptr += pointer_size + efi_dxe_services.Dispatch = ptr + ql.hook_address(hook_Dispatch, ptr) + ptr += pointer_size + efi_dxe_services.Schedule = ptr + ql.hook_address(hook_Schedule, ptr) + ptr += pointer_size + efi_dxe_services.Trust = ptr + ql.hook_address(hook_Trust, ptr) + ptr += pointer_size + efi_dxe_services.ProcessFirmwareVolume = ptr + ql.hook_address(hook_ProcessFirmwareVolume, ptr) + ptr += pointer_size + efi_dxe_services.SetMemorySpaceCapabilities = ptr + ql.hook_address(hook_SetMemorySpaceCapabilities, ptr) + ptr += pointer_size + return (ptr, efi_dxe_services) diff --git a/qiling/os/uefi/smm_base2_protocol.py b/qiling/os/uefi/smm_base2_protocol.py index ddd3649f4..f4be93730 100644 --- a/qiling/os/uefi/smm_base2_protocol.py +++ b/qiling/os/uefi/smm_base2_protocol.py @@ -7,31 +7,31 @@ @dxeapi(params={ - "This": POINTER, #POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL) - "InSmram": POINTER, #POINTER_T(ctypes.c_ubyte) + "This": POINTER, #POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL) + "InSmram": POINTER, #POINTER_T(ctypes.c_ubyte) }) def hook_InSmm(ql, address, params): - write_int64(ql, params["InSmram"], 0) - return EFI_SUCCESS + write_int64(ql, params["InSmram"], 0) + return EFI_SUCCESS @dxeapi(params={ - "This": POINTER, #POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL) - "Smst": POINTER, #POINTER_T(POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2)) + "This": POINTER, #POINTER_T(struct__EFI_SMM_BASE2_PROTOCOL) + "Smst": POINTER, #POINTER_T(POINTER_T(struct__EFI_SMM_SYSTEM_TABLE2)) }) def hook_GetSmstLocation(ql, address, params): - return EFI_UNSUPPORTED # since InSmm always returns False, we should return EFI_UNSUPPORTED here, since we are not in SMM mode. + return EFI_UNSUPPORTED # since InSmm always returns False, we should return EFI_UNSUPPORTED here, since we are not in SMM mode. def install_EFI_SMM_BASE2_PROTOCOL(ql, start_ptr): - efi_smm_base2_protocol = EFI_SMM_BASE2_PROTOCOL() - ptr = start_ptr - pointer_size = 8 - efi_smm_base2_protocol.InSmm = ptr - ql.hook_address(hook_InSmm, ptr) - ptr += pointer_size - efi_smm_base2_protocol.GetSmstLocation = ptr - ql.hook_address(hook_GetSmstLocation, ptr) - ptr += pointer_size - return (ptr, efi_smm_base2_protocol) + efi_smm_base2_protocol = EFI_SMM_BASE2_PROTOCOL() + ptr = start_ptr + pointer_size = 8 + efi_smm_base2_protocol.InSmm = ptr + ql.hook_address(hook_InSmm, ptr) + ptr += pointer_size + efi_smm_base2_protocol.GetSmstLocation = ptr + ql.hook_address(hook_GetSmstLocation, ptr) + ptr += pointer_size + return (ptr, efi_smm_base2_protocol) From 4b7db48abe742d6ddce222b46d1cb3c96b27f9d2 Mon Sep 17 00:00:00 2001 From: xwings Date: Fri, 3 Jul 2020 17:18:15 +0800 Subject: [PATCH 70/86] added address print at debug mode --- qiling/const.py | 1 + qiling/core_utils.py | 5 ++++- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/qiling/const.py b/qiling/const.py index d311cbc16..5b251e8a6 100644 --- a/qiling/const.py +++ b/qiling/const.py @@ -51,6 +51,7 @@ class QL_INTERCEPT(IntEnum): D_PROT = 2 # Protocol level debug, print out open file flag D_CTNT = 3 # Print out content. File content or content of a tcp stream D_RPRT = 4 # Reporting output, main summarizing purposes +D_DRPT = 5 # Detailed Report, with address QL_DEBUGGER_ALL = [QL_DEBUGGER.IDAPRO, QL_DEBUGGER.GDB] QL_ARCH_ALL = [QL_ARCH.X86, QL_ARCH.X8664, QL_ARCH.ARM, QL_ARCH.ARM64, QL_ARCH.MIPS] diff --git a/qiling/core_utils.py b/qiling/core_utils.py index 38094cbb7..0ff5512d3 100644 --- a/qiling/core_utils.py +++ b/qiling/core_utils.py @@ -13,7 +13,7 @@ from .utils import loadertype_convert_str, ostype_convert_str, arch_convert_str from .utils import ql_setup_filter from .const import QL_OS, QL_OS_ALL, QL_ARCH, QL_ENDIAN, QL_OUTPUT -from .const import D_INFO +from .const import D_INFO, D_DRPT from .exception import QlErrorArch, QlErrorOsType, QlErrorOutput from .loader.utils import ql_checkostype @@ -87,6 +87,9 @@ def dprint(self, level, *args, **kw): self.verbose = 99 if int(self.verbose) >= level and self.output in (QL_OUTPUT.DEBUG, QL_OUTPUT.DUMP): + if int(self.verbose) >= D_DRPT: + args = (("0x%x:" % self.reg.arch_pc), args) + self.nprint(*args, **kw) From fe5cfd71fbb3ddf48de72f3b82a61867e4896b18 Mon Sep 17 00:00:00 2001 From: Assaf Carlsbad Date: Fri, 3 Jul 2020 20:10:55 +0300 Subject: [PATCH 71/86] Search handles by SearchType, not SearchKey. --- qiling/os/uefi/utils.py | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/qiling/os/uefi/utils.py b/qiling/os/uefi/utils.py index c729eac00..3345aab15 100644 --- a/qiling/os/uefi/utils.py +++ b/qiling/os/uefi/utils.py @@ -43,9 +43,9 @@ def read_int64(ql, address): def LocateHandles(ql, address, params): handles = [] - if params["SearchKey"] == SEARCHTYPE_AllHandles: + if params["SearchType"] == SEARCHTYPE_AllHandles: handles = ql.loader.handle_dict.keys() - elif params["SearchKey"] == SEARCHTYPE_ByProtoco: + elif params["SearchType"] == SEARCHTYPE_ByProtoco: for handle, guid_dic in ql.loader.handle_dict.items(): if params["Protocol"] in guid_dic: handles.append(handle) From 9b31cb2039df4e7f4fedf9a5fcab6ec2c65edcb7 Mon Sep 17 00:00:00 2001 From: Assaf Carlsbad Date: Fri, 3 Jul 2020 20:12:09 +0300 Subject: [PATCH 72/86] Fix typo: protoco -> protocol. --- qiling/os/uefi/const.py | 2 +- qiling/os/uefi/utils.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/qiling/os/uefi/const.py b/qiling/os/uefi/const.py index e3597a7df..821281639 100644 --- a/qiling/os/uefi/const.py +++ b/qiling/os/uefi/const.py @@ -45,5 +45,5 @@ SEARCHTYPE_AllHandles = 0 SEARCHTYPE_ByRegisterNotify = 1 -SEARCHTYPE_ByProtoco = 2 +SEARCHTYPE_ByProtocol = 2 diff --git a/qiling/os/uefi/utils.py b/qiling/os/uefi/utils.py index 3345aab15..775bd73ce 100644 --- a/qiling/os/uefi/utils.py +++ b/qiling/os/uefi/utils.py @@ -45,7 +45,7 @@ def LocateHandles(ql, address, params): handles = [] if params["SearchType"] == SEARCHTYPE_AllHandles: handles = ql.loader.handle_dict.keys() - elif params["SearchType"] == SEARCHTYPE_ByProtoco: + elif params["SearchType"] == SEARCHTYPE_ByProtocol: for handle, guid_dic in ql.loader.handle_dict.items(): if params["Protocol"] in guid_dic: handles.append(handle) From 469e9b1cc8ca1cbaea4fb5d5d1406e87ddf245d5 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Tue, 7 Jul 2020 10:32:42 +0800 Subject: [PATCH 73/86] support run MIPS on MacOS fixed issue "UnboundLocalError: local variable 'f' referenced before assignment" --- qiling/os/posix/const_mapping.py | 20 +++++++++++++------- 1 file changed, 13 insertions(+), 7 deletions(-) diff --git a/qiling/os/posix/const_mapping.py b/qiling/os/posix/const_mapping.py index 1ff31de9c..ecee9780f 100644 --- a/qiling/os/posix/const_mapping.py +++ b/qiling/os/posix/const_mapping.py @@ -105,7 +105,10 @@ def flag_mapping(flags, mapping_name, mapping_from, mapping_to): 'O_DIRECTORY': 0x100000, } - if ql.archtype!= QL_ARCH.MIPS: + f = {} + t = {} + + if ql.archtype != QL_ARCH.MIPS: if ql.platform == None or ql.platform == ql.ostype: return flags @@ -117,10 +120,13 @@ def flag_mapping(flags, mapping_name, mapping_from, mapping_to): f = mac_open_flags t = linux_open_flags - elif ql.archtype== QL_ARCH.MIPS and ql.platform == QL_OS.LINUX: - f = mips_open_flags - t = linux_open_flags - + else: + if ql.platform == QL_OS.LINUX: + f = mips_open_flags + t = linux_open_flags + elif ql.platform == QL_OS.MACOS: + f = mips_open_flags + t = mac_open_flags return flag_mapping(flags, open_flags_name, f, t) @@ -157,7 +163,7 @@ def mmap_flag_mapping(flags): def mmap_prot_mapping(prots): - + if prots == 0x0: return 'PROT_NONE' @@ -196,5 +202,5 @@ def socket_domain_mapping(p, arch): #FIXME: QL_OS.MACOS is QL_OS #QL_OS.MACOS: "macos_socket_domain", }.get(arch) - + return _constant_mapping(p, socket_domain_map, single_mapping=True) From 7cbac1d3e8ba4ac49ff045bdeea4d8991ffe4fd5 Mon Sep 17 00:00:00 2001 From: kabeor <1597915586@qq.com> Date: Wed, 8 Jul 2020 17:53:23 +0800 Subject: [PATCH 74/86] little change --- qiling/os/posix/const_mapping.py | 16 ++++++---------- 1 file changed, 6 insertions(+), 10 deletions(-) diff --git a/qiling/os/posix/const_mapping.py b/qiling/os/posix/const_mapping.py index ecee9780f..db7ef2b92 100644 --- a/qiling/os/posix/const_mapping.py +++ b/qiling/os/posix/const_mapping.py @@ -111,22 +111,18 @@ def flag_mapping(flags, mapping_name, mapping_from, mapping_to): if ql.archtype != QL_ARCH.MIPS: if ql.platform == None or ql.platform == ql.ostype: return flags - if ql.platform == QL_OS.MACOS and ql.ostype == QL_OS.LINUX: f = linux_open_flags t = mac_open_flags - elif ql.platform == QL_OS.LINUX and ql.ostype == QL_OS.MACOS: f = mac_open_flags t = linux_open_flags - - else: - if ql.platform == QL_OS.LINUX: - f = mips_open_flags - t = linux_open_flags - elif ql.platform == QL_OS.MACOS: - f = mips_open_flags - t = mac_open_flags + elif ql.archtype == QL_ARCH.MIPS and ql.platform == QL_OS.LINUX: + f = mips_open_flags + t = linux_open_flags + elif ql.archtype == QL_ARCH.MIPS and ql.platform == QL_OS.MACOS: + f = mips_open_flags + t = mac_open_flags return flag_mapping(flags, open_flags_name, f, t) From 98842275dbe7151934f1db249bf7db43b553bb5b Mon Sep 17 00:00:00 2001 From: Mark Jansen Date: Thu, 9 Jul 2020 19:35:40 +0200 Subject: [PATCH 75/86] Include the registry path in failure message --- qiling/os/windows/registry.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/qiling/os/windows/registry.py b/qiling/os/windows/registry.py index a4e0264c6..14bd421cd 100644 --- a/qiling/os/windows/registry.py +++ b/qiling/os/windows/registry.py @@ -41,7 +41,7 @@ def __init__(self, ql, hive=None): self.hive = os.path.join(ql.rootfs, "Windows", "registry") ql.dprint(D_INFO, "[+] Windows Registry PATH: %s" % self.hive) if not os.path.exists(self.hive) and not self.ql.shellcoder: - raise QlErrorFileNotFound("Error: Registry files not found!") + raise QlErrorFileNotFound(f"Error: Registry files not found in '{self.hive}'!") if not os.path.exists(self.regdiff): self.registry_config = {} From f2dfc9ed0eff369ef30f8e3e1037ae35f54885b7 Mon Sep 17 00:00:00 2001 From: Mark Jansen Date: Thu, 9 Jul 2020 19:47:21 +0200 Subject: [PATCH 76/86] Add hooks for GetEnvironmentVariableW, ReleaseMutex, GetSystemWindowsDirectoryW --- qiling/os/windows/const.py | 1 + qiling/os/windows/dlls/kernel32/processenv.py | 10 ++++++++ qiling/os/windows/dlls/kernel32/synchapi.py | 23 +++++++++++++++++++ qiling/os/windows/dlls/kernel32/sysinfoapi.py | 7 ++++++ 4 files changed, 41 insertions(+) diff --git a/qiling/os/windows/const.py b/qiling/os/windows/const.py index 595f008f0..bf80f9ff2 100644 --- a/qiling/os/windows/const.py +++ b/qiling/os/windows/const.py @@ -16,6 +16,7 @@ ERROR_INSUFFICIENT_BUFFER = 0x7A ERROR_ALREADY_EXISTS = 0xB7 ERROR_MORE_DATA = 0xEA +ERROR_NOT_OWNER = 0x120 ERROR_OLD_WIN_VERSION = 0X47E # ... diff --git a/qiling/os/windows/dlls/kernel32/processenv.py b/qiling/os/windows/dlls/kernel32/processenv.py index cb5bf6b09..2a795f13d 100644 --- a/qiling/os/windows/dlls/kernel32/processenv.py +++ b/qiling/os/windows/dlls/kernel32/processenv.py @@ -98,3 +98,13 @@ def hook_ExpandEnvironmentStringsW(ql, address, params): def hook_GetEnvironmentVariableA(ql, address, params): ret = 0 return ret + +# DWORD GetEnvironmentVariableW( +# LPCWSTR lpName, +# LPWSTR lpBuffer, +# DWORD nSize +# ); +@winsdkapi(cc=STDCALL, dllname=dllname) +def hook_GetEnvironmentVariableW(ql, address, params): + ret = 0 + return ret diff --git a/qiling/os/windows/dlls/kernel32/synchapi.py b/qiling/os/windows/dlls/kernel32/synchapi.py index 9b4dc140a..3cd30841b 100644 --- a/qiling/os/windows/dlls/kernel32/synchapi.py +++ b/qiling/os/windows/dlls/kernel32/synchapi.py @@ -219,6 +219,29 @@ def hook_CreateMutexW(ql, address, params): def hook_CreateMutexA(ql, address, params): return hook_CreateMutexW.__wrapped__(ql, address, params) +# BOOL ReleaseMutex( +# HANDLE hMutex +# ); +@winsdkapi(cc=STDCALL, dllname=dllname) +def hook_ReleaseMutex(ql, address, params): + hMutex = params["hMutex"] + handle = ql.os.handle_manager.get(hMutex) + if not handle: + ql.os.last_error = ERROR_INVALID_HANDLE + return 0 + + mutex = handle.obj + + if not mutex or not isinstance(mutex, Mutex): + return 0 + + if mutex.isFree(): + ql.os.last_error = ERROR_NOT_OWNER + return 0 + + # FIXME: Only the owner is allowed to do this! + mutex.unlock() + return 1 # HANDLE CreateEventA( # LPSECURITY_ATTRIBUTES lpEventAttributes, diff --git a/qiling/os/windows/dlls/kernel32/sysinfoapi.py b/qiling/os/windows/dlls/kernel32/sysinfoapi.py index cd4621f90..3a32a405a 100644 --- a/qiling/os/windows/dlls/kernel32/sysinfoapi.py +++ b/qiling/os/windows/dlls/kernel32/sysinfoapi.py @@ -98,6 +98,13 @@ def hook_GetWindowsDirectoryW(ql, address, params): ql.mem.write(dst, value) return len(value) - 2 +# UINT GetSystemWindowsDirectoryW( +# LPWSTR lpBuffer, +# UINT uSize +# ); +@winsdkapi(cc=STDCALL, dllname=dllname) +def hook_GetSystemWindowsDirectoryW(ql, address, params): + return hook_GetWindowsDirectoryW.__wrapped__(ql, address, params) # void GetNativeSystemInfo( # LPSYSTEM_INFO lpSystemInfo From 2e68455c5e7710a6689a965e73c227e470192177 Mon Sep 17 00:00:00 2001 From: Mark Jansen Date: Thu, 9 Jul 2020 20:03:27 +0200 Subject: [PATCH 77/86] Move the creation of a disassembler to a new function --- qiling/os/utils.py | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/qiling/os/utils.py b/qiling/os/utils.py index 3309d9e32..a4516df2c 100644 --- a/qiling/os/utils.py +++ b/qiling/os/utils.py @@ -199,9 +199,8 @@ def restore(ql): # we want to rewrite the return address to the function self.ql.stack_write(0, start) - def disassembler(self, ql, address, size): - tmp = self.ql.mem.read(address, size) + def create_disassembler(self): if self.ql.archtype == QL_ARCH.ARM: # QL_ARM reg_cpsr = self.ql.reg.cpsr mode = CS_MODE_ARM @@ -238,6 +237,13 @@ def disassembler(self, ql, address, size): else: raise QlErrorArch("[!] Unknown arch defined in utils.py (debug output mode)") + return md + + def disassembler(self, ql, address, size): + tmp = self.ql.mem.read(address, size) + + md = self.create_disassembler() + insn = md.disasm(tmp, address) opsize = int(size) From e4985882f06676abd1c422e9796b40b6916af9cb Mon Sep 17 00:00:00 2001 From: Mark Jansen Date: Thu, 9 Jul 2020 19:44:48 +0200 Subject: [PATCH 78/86] Add test option to skip malware --- tests/test_pe.py | 10 +++++++++- 1 file changed, 9 insertions(+), 1 deletion(-) diff --git a/tests/test_pe.py b/tests/test_pe.py index 46ac14240..720094b9a 100644 --- a/tests/test_pe.py +++ b/tests/test_pe.py @@ -3,7 +3,7 @@ # Cross Platform and Multi Architecture Advanced Binary Emulation Framework # Built on top of Unicorn emulator (www.unicorn-engine.org) -import sys, random, unittest +import os, random, sys, unittest import string as st from binascii import unhexlify @@ -33,6 +33,8 @@ def test_pe_win_x86_hello(self): def test_pe_win_x86_uselessdisk(self): + if 'QL_FAST_TEST' in os.environ: + return ql = Qiling(["../examples/rootfs/x86_windows/bin/UselessDisk.bin"], "../examples/rootfs/x86_windows", output="debug") ql.run() @@ -40,6 +42,8 @@ def test_pe_win_x86_uselessdisk(self): def test_pe_win_x86_gandcrab(self): + if 'QL_FAST_TEST' in os.environ: + return def stop(ql, default_values): print("Ok for now") ql.emu_stop() @@ -160,6 +164,8 @@ def test_pe_win_x8664_fls(self): def test_pe_win_x86_wannacry(self): + if 'QL_FAST_TEST' in os.environ: + return def stop(ql): ql.nprint("killerswtichfound") ql.console = False @@ -179,6 +185,8 @@ def test_pe_win_x86_NtQueryInformationSystem(self): del ql def test_pe_win_al_khaser(self): + if 'QL_FAST_TEST' in os.environ: + return ql = Qiling(["../examples/rootfs/x86_windows/bin/al-khaser.bin"], "../examples/rootfs/x86_windows") # The hooks are to remove the prints to file. It crashes. will debug why in the future From c0b9ea854bd677a407bd7c59b90d977c27bed650 Mon Sep 17 00:00:00 2001 From: Assaf Carlsbad Date: Sun, 12 Jul 2020 18:49:34 +0300 Subject: [PATCH 79/86] Print offending module name + offset in emu_error(). --- qiling/os/os.py | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/qiling/os/os.py b/qiling/os/os.py index 17f73db3c..5b64b9ce1 100644 --- a/qiling/os/os.py +++ b/qiling/os/os.py @@ -55,6 +55,11 @@ def __init__(self, ql): self.appeared_strings = {} self.setup_output() + def find_containing_image(self, pc): + for image in self.ql.loader.images: + if image.base <= pc <= image.end: + return image + def emu_error(self): self.ql.nprint("[!] Emulation Error") @@ -66,7 +71,13 @@ def emu_error(self): self.ql.nprint("[-] %s\t:\t 0x%x" % (REG_NAME, REG_VAL)) self.ql.nprint("\n") - self.ql.nprint("[+] PC = 0x%x" %(self.ql.reg.arch_pc)) + self.ql.nprint("[+] PC = 0x%x" % (self.ql.reg.arch_pc), end="") + containing_image = self.find_containing_image(self.ql.reg.arch_pc) + if containing_image: + offset = self.ql.reg.arch_pc - containing_image.base + self.ql.nprint(" (%s+0x%x)" % (containing_image.path, offset)) + else: + self.ql.nprint("\n") self.ql.mem.show_mapinfo() buf = self.ql.mem.read(self.ql.reg.arch_pc, 8) From 4bb8faa480941ad86b23b979007aeae0cd780c45 Mon Sep 17 00:00:00 2001 From: Jhe Date: Wed, 15 Jul 2020 17:12:03 +0800 Subject: [PATCH 80/86] fix MIPS big endian crash when ulibc initialize --- qiling/loader/elf.py | 2 -- 1 file changed, 2 deletions(-) diff --git a/qiling/loader/elf.py b/qiling/loader/elf.py index e79cbda21..76409186e 100644 --- a/qiling/loader/elf.py +++ b/qiling/loader/elf.py @@ -568,8 +568,6 @@ def load_with_ld(self, stack_addr, load_address = -1, argv = [], env = {}): self.elf_phent = (elfhead['e_phentsize']) self.elf_phnum = (elfhead['e_phnum']) self.elf_pagesz = 0x1000 - if self.ql.archendian == QL_ENDIAN.EB: - self.elf_pagesz = 0x0010 self.elf_guid = self.ql.os.uid self.elf_flags = 0 self.elf_entry = (load_address + elfhead['e_entry']) From 606fac2520a83c51efacad0d051fa3a788f0491f Mon Sep 17 00:00:00 2001 From: Jhe Date: Wed, 15 Jul 2020 17:12:41 +0800 Subject: [PATCH 81/86] make ql.pack64 with correct byte order depends on ql.archendian --- qiling/core_struct.py | 21 +++++++++++++++++---- 1 file changed, 17 insertions(+), 4 deletions(-) diff --git a/qiling/core_struct.py b/qiling/core_struct.py index 0d6ac7d12..296d96637 100644 --- a/qiling/core_struct.py +++ b/qiling/core_struct.py @@ -21,19 +21,32 @@ def __init__(self): def unpack64(self, x): - return struct.unpack('Q', x)[0] + if self.archendian == QL_ENDIAN.EB: + return struct.unpack('>Q', x)[0] + else: + return struct.unpack('Q', x)[0] + def pack64(self, x): - return struct.pack('Q', x) + if self.archendian == QL_ENDIAN.EB: + return struct.pack('>Q', x) + else: + return struct.pack('Q', x) def pack64s(self, x): - return struct.pack('q', x) + if self.archendian == QL_ENDIAN.EB: + return struct.pack('>q', x) + else: + return struct.pack('q', x) def unpack64s(self, x): - return struct.unpack('q', x)[0] + if self.archendian == QL_ENDIAN.EB: + return struct.unpack('>q', x)[0] + else: + return struct.unpack('q', x)[0] def unpack32(self, x): From a67f1f0ee77fb58b33a0305ca5cecb2aeba1989b Mon Sep 17 00:00:00 2001 From: Assaf Carlsbad Date: Wed, 15 Jul 2020 18:44:03 +0300 Subject: [PATCH 82/86] When available, print the module name as part of show_mapinfo(). --- qiling/os/memory.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/qiling/os/memory.py b/qiling/os/memory.py index e5a4155a5..d50902485 100644 --- a/qiling/os/memory.py +++ b/qiling/os/memory.py @@ -130,6 +130,9 @@ def _perms_mapping(ps): self.ql.nprint("[+] Start End Perm. Path") for start, end, perm, info in self.map_info: _perm = _perms_mapping(perm) + image = self.ql.os.find_containing_image(start) + if image: + info += f" ({image.path})" self.ql.nprint("[+] %08x - %08x - %s %s" % (start, end, _perm, info)) From ff359062194efc229541d9fcd38f63d2473e1b2d Mon Sep 17 00:00:00 2001 From: Jhe Date: Thu, 16 Jul 2020 09:31:08 +0800 Subject: [PATCH 83/86] add x86_fetch_urandom binary --- examples/rootfs/x86_linux/bin/x86_fetch_urandom | Bin 0 -> 5464 bytes 1 file changed, 0 insertions(+), 0 deletions(-) create mode 100755 examples/rootfs/x86_linux/bin/x86_fetch_urandom diff --git a/examples/rootfs/x86_linux/bin/x86_fetch_urandom b/examples/rootfs/x86_linux/bin/x86_fetch_urandom new file mode 100755 index 0000000000000000000000000000000000000000..26ba9b3a8fb01ea14f25ede90d807b25b65baccb GIT binary patch literal 5464 zcmeHLZEPE79e?b&o!c7MW#MJbptq6H6xwUjq_A}p%uV`6(~>mF3aV1eiO=yB#}4On zmQEEcJ-QLhF>fpIfuezm5FeN{RB3$JKBRM&Wl|-=G*E>mC~6BAHAoe7C4$i7_q+4c znG~dbCx7dA|Ci_Y{Ga!G@z-~C?hXV3LQ0*e6ZGsALbO3E>->^7p@>zYNi>M{VkJT> zlTc8B2q8w)0ln}g?uJjW3}FvYw`D3U1c4@ni23DHQN%v(qXU)p0&JJ%L8uETzkqUL z0Y1TU*@q1H5*>&WvaIW>nL2Zq5E616vb-DRpx+_PkLJZ8l-Ks}5wu0HK9ty+)d#j_ zQ(Llnt~jO^^6ECfjCEPQ=U^YM{ycFk6xOW=ICm^xwd=W_cYl2F=G&dl56^tM;pph% zGaJc`0L<9`tL-WvaY*zp>l<-e%$71)Ps ze3oxq;%`~vuV3O%*7yqSH9#lUg>$ivGmUv1SFKDUnEw7<$f3 zCk8WL5$XJhmJ{hA%^Vcz!EC;u2~ah|5b4Ja-PFJy97`tBdM=sOpP+_!$`TNw1VD>2C%jvZ+*E}DCRx-Dz3H;o3X+M`XN!Q`s;N41Kc&^RX^tW zK~aKF;Tgiw5;Il3u)+63imx5`E3u*GsnMD1)L4KU)Y$Ng)L58V=)15v-=@aqyGV_- zdWRYfT%tzLu28QQqQ{yKJ9#7?uM9Q_QL>uRiBps23g;vYYbt!C0xg7lj;rmSWgjW- zS?=%*&ACf1Ve#Co=kt_g7@V8*{EyP-W$q=}+khGA^C z<|7l+U5@QVB4GT0jAH?(gvdl&qtohhTPAJo#+Q#A?YEPQm6FANxXrfpGq8_sJ{IV5 z8hoBL<6iqs%U_O8{1LtB>OJJ}0FGBSq9eAIWp3MwP<21%p5qP6`Rgs$y-~Wiv63#o z_bV?AI9HhGwLjd0Jm2boZJ*@zp&9dIrIU@YFqpeBbPTiGoyFkZtdwo@lj3g``(>00 z=O?&~zxD#^_thrYG&6Cv=lnu&qGHX5&R^RQxcKV@v%d7)gG~9Bxf;vg)$P88gr)w) zH!Bl2?N`0q1Dfh_4r9#YmHo(x%1^$+4vFH%lEtM#f7W4g-E)t^aSmXR$l+{9jcJR- zz#aMe=a{cl&zUIq9mXR59ks?Q*RUy&sg!MOvd@J;afbfoy0#@?Zkj%SD|qUr`9O>7 zj}sl~bIr!h9!|ePj`cK^7U z<-PvOqU&}-_hJYm&?)F|K)0czQ_!cOV>oU+9hATmheY5+IM5IYg}#Znf*4Om8F^S= zM8mtIkuR)WV}{1W=hr{{scnt-#}IxLcn2KXlt+MG;38r+109io*b`e3EQ*fU%3$$C ztS(p_>s(t`G*<@quRf2`cqKj^f4vv@}Sz>w#knQp%yX)(=d|*Ld7ST zW{e0G?=qSi-??v#nH;KmL%E_lP}K1itfz!ZFOw`}gqk{@D;yv8wQ2Yzqnc6B^SS?U z5-2mYEcw1Mk~P_&jw?)cC=bKb#&E@loeoYul{Aw=)iQ~+ksQ_%nG{k;&##(D8bQTxA#tjjVA_X4)0$CLk0DDb7o zrMeFR$>aMQ(I`pKlGg_NCiV;4mN#1Vk|oHqA5(FMDHfX_#-4$ls;7rxBLG4Ko( z0P=PMJZl8cAbB4KB<}=l_Lc4MUO;>TwiNOxj{}nTB!a|ZK49K1+ZM+e+)DKgZC?xb1lg8{ Date: Thu, 16 Jul 2020 16:31:46 +0800 Subject: [PATCH 84/86] quick elf update based on @aaaddress1 PR --- qiling/loader/utils.py | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/qiling/loader/utils.py b/qiling/loader/utils.py index 4af0d244f..16e62f3ef 100644 --- a/qiling/loader/utils.py +++ b/qiling/loader/utils.py @@ -45,8 +45,7 @@ def getident(): if osabi == 0x09: ostype = QL_OS.FREEBSD - else: - #if osabi == 0x11 or osabi == 0x03 or osabi == 0x0: + elif osabi in (0x0, 0x03) or osabi >= 0x11: ostype = QL_OS.LINUX if e_machine == b"\x03\x00": From 78731cb8972fc3ab2c9269b7d840aaa71e4d3f7c Mon Sep 17 00:00:00 2001 From: Jhe Date: Thu, 16 Jul 2020 17:22:37 +0800 Subject: [PATCH 85/86] add test for fetch_urandom --- tests/test_elf.py | 21 ++++++++++++++++++++- 1 file changed, 20 insertions(+), 1 deletion(-) diff --git a/tests/test_elf.py b/tests/test_elf.py index 0f55080f3..aa72222b4 100644 --- a/tests/test_elf.py +++ b/tests/test_elf.py @@ -901,5 +901,24 @@ def test_elf_linux_execve_x8664(self): del ql + def test_elf_linux_x86(self): + class Fake_urandom: + + def read(self, size): + return b"\x01" + + def fstat(self): + return -1 + + def close(self): + return 0 + + ql = Qiling(["../examples/rootfs/x86_linux/bin/x86_fetch_urandom"], "../examples/rootfs/x86_linux", output="debug") + ql.add_fs_mapper("/dev/urandom", Fake_urandom()) + ql.run() + del ql + + + if __name__ == "__main__": - unittest.main() \ No newline at end of file + unittest.main() From 8f4db9a63640424ef91efe4bcc9ebd94a0fa833c Mon Sep 17 00:00:00 2001 From: xwings Date: Fri, 17 Jul 2020 11:43:01 +0800 Subject: [PATCH 86/86] geeting ready for rc1 --- ChangeLog | 9 +++++++++ qiling/core.py | 2 +- 2 files changed, 10 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 58ca7d87d..3a8651c94 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,5 +1,14 @@ This file details the changelog of Qiling Framework. +------------------------------------ +[Version 1.1-rc1]: July 17th, 2020 + +- More refactors and bug fixes +- More detailed debug output +- Fix MIPS_EB overflow issue +- Introduce heap sanitizer + + ------------------------------------ [Version 1.1-alpha2]: June 26th, 2020 diff --git a/qiling/core.py b/qiling/core.py index c6292dc3d..6273075ad 100644 --- a/qiling/core.py +++ b/qiling/core.py @@ -18,7 +18,7 @@ from .core_utils import QLCoreUtils from .extensions.debugger import ql_debugger_init -__version__ = "1.1" + "-dev" +__version__ = "1.1" + "-rc1" class Qiling(QLCoreStructs, QLCoreHooks, QLCoreUtils): def __init__(