diff --git a/docs/generate_samples.py b/docs/generate_samples.py index 40665a7..5c81cc2 100644 --- a/docs/generate_samples.py +++ b/docs/generate_samples.py @@ -93,6 +93,8 @@ generate_output_result(r"service\service_demo.py", "service_service_demo.txt") generate_output_result(r"device_manager\device_manager.py", "device_manager_device_manager.txt") +generate_output_result(r"etw\etw_enumeration.py", "etw_etw_enumeration.txt") +generate_output_result(r"etw\uac_trace.py", "etw_uac_trace.txt") # Require ADMIN / NotAdmin run # generate_output_result(r"security\query_sacl.py", "security_query_sacl.txt") \ No newline at end of file diff --git a/docs/source/etw.rst b/docs/source/etw.rst new file mode 100644 index 0000000..4736720 --- /dev/null +++ b/docs/source/etw.rst @@ -0,0 +1,48 @@ +ETW -- Event Tracing for Windows +================================ + +.. module:: windows.winobject.event_trace + +The :class:`EtwManager` instance is accessible via :py:attr:`windows.system.etw +` + +.. note:: + + This code is the result of my research on ``ETW`` that lead to this presentation `ETW for the lazy reverser (FR) `_ + + +.. note:: + + See sample :ref:`sample_etw` + + +EtwManager +"""""""""" + + +.. autoclass:: EtwManager + :members: + + +Tracing Events +"""""""""""""" + +EtwTrace +'''''''' + +.. autoclass:: EtwTrace + :members: + + +EventTraceProperties +'''''''''''''''''''' + +.. autoclass:: EventTraceProperties + :members: + +EventRecord +''''''''''' + +.. autoclass:: EventRecord + :members: + diff --git a/docs/source/evtlog.rst b/docs/source/evtlog.rst index 739c730..caaf31d 100644 --- a/docs/source/evtlog.rst +++ b/docs/source/evtlog.rst @@ -10,6 +10,9 @@ I have tried to offer some abstraction without completly hidding the some underl The current API may need some works to provide simpler/highter level API in the future. +The :class:`EvtlogManager` instance is accessible via :py:attr:`windows.system.event_log +` + For now, the best thing to do is look at the sample: .. note:: diff --git a/docs/source/index.rst b/docs/source/index.rst index 7a2170d..f0fc469 100644 --- a/docs/source/index.rst +++ b/docs/source/index.rst @@ -34,15 +34,19 @@ You can install PythonForWindows using the ``setup.py`` at the root of the proje python setup.py install -In its current state the project only support Python2 and -``setup.py`` will raise an :class:`NotImplementedError` if launched from python3. - - .. warning:: PythonForWindows is not available on Pypi for now and thus cannot be directly installed using ``pip``. +Python3 +^^^^^^^ + +python3 support is still in beta. +All the tests pass on master, but I did not test it heavily on real case. +Do not hesitate report bugs and issues. + + Documentation """"""""""""" diff --git a/docs/source/sample.rst b/docs/source/sample.rst index 8c4d863..792f3ee 100644 --- a/docs/source/sample.rst +++ b/docs/source/sample.rst @@ -669,3 +669,27 @@ Query SACL Output .. literalinclude:: samples_output\security_query_sacl.txt + + +.. _sample_etw: + +ETW (Event Tracing for Windows) +""""""""""""""""""""""""""""""" + +Trace processing +'''''''''''''''' + +.. literalinclude:: ..\..\samples\etw\uac_trace.py + +Output + +.. literalinclude:: samples_output\etw_uac_trace.txt + +Enumeration +''''''''''' + +.. literalinclude:: ..\..\samples\etw\etw_enumeration.py + +Output + +.. literalinclude:: samples_output\etw_etw_enumeration.txt diff --git a/docs/source/samples_output/etw_etw_enumeration.txt b/docs/source/samples_output/etw_etw_enumeration.txt new file mode 100644 index 0000000..b12fc1a --- /dev/null +++ b/docs/source/samples_output/etw_etw_enumeration.txt @@ -0,0 +1,28 @@ +(cmd) python etw\etw_enumeration.py +ETW Manager is: + +Listing some ETW sessions: + * + * name: AppModel + * guid: A922A8BE-2450-438E-9520-FBCDFB46B0BD + * id: 4 + * logfile: + * + * name: LwtNetLog + * guid: 603BA31E-EC5A-4CDE-BE87-ED0A16C3B170 + * id: 14 + * logfile: C:\WINDOWS\System32\LogFiles\WMI\LwtNetLog.etl + +Looking for providers for: +Found a provider/session for target: + * Provider: + * Instance: + * Process: +Found a provider/session for target: + * Provider: + * Instance: + * Process: +Found a provider/session for target: + * Provider: + * Instance: + * Process: diff --git a/docs/source/samples_output/etw_uac_trace.txt b/docs/source/samples_output/etw_uac_trace.txt new file mode 100644 index 0000000..d4b514f --- /dev/null +++ b/docs/source/samples_output/etw_uac_trace.txt @@ -0,0 +1,53 @@ +(cmd) python etw\uac_trace.py +Recording UAC event in file using session named +0x1d65bb1febaceea: + guid: 68FDD900-4A3E-11D1-84F4-0000F80464E3 + id: 0 + opcode: 0 + level: 0 + data: '\x01\n\x01\x05\xbbG\x04-D\xd5\xff\xb1[\xd6\x01Zb\x02\t\x01\x04\xf0\x0c\t\x06\xc4\xff\xff\xff@tzres.dll,-302\n\x05\x03@tzres.dll,-301\x03\x05\x02\xc4\xff\xff\xff\xc0\x92\x1c\xd2D[\xd6\x01\x80\x96\x98\xea\xce\xba\xfe\xb1[\xd6\x01\x01MY_UAC_MONITORC:\\Users\\hakril\\Documents\\projets\\PythonForWindows\\samples\\uac.trace' +[...] +0x1d65bb1fec4c011: + guid: DEB74A23-5444-3F3B-924B-0E653973F55A + id: 11 + opcode: 0 + level: 0 + data: '\x9e\x06\x04\x19\x14\x04\x08\x04\xff\xff\xff\xffWinSta0\\DefaultC:\\Windows\\System32\\mmc.exe"C:\\Windows\\System32\\mmc.exe" BAD_MMC_FILENAMEC:\\Users\\hakril\\Documents\\projets\\PythonForWindows\\samples' +0x1d65bb1fec4e48b: + guid: C0B508D3-5459-339F-A213-889C238CA5B1 + id: 10 + opcode: 0 + level: 0 + data: 'C:\\WINDOWS\\SysWOW64\\mmc.exe"C:\\WINDOWS\\SysWOW64\\mmc.exe" BAD_MMC_FILENAME` ' +0x1d65bb1fec7c8eb: + guid: C0B508D3-5459-339F-A213-889C238CA5B1 + id: 13 + opcode: 0 + level: 0 + data: 'C:\\WINDOWS\\SysWOW64\\mmc.exe' +0x1d65bb1fec7c8f0: + guid: C0B508D3-5459-339F-A213-889C238CA5B1 + id: 14 + opcode: 0 + level: 0 + data: '"C:\\WINDOWS\\SysWOW64\\mmc.exe" BAD_MMC_FILENAME' +[...] +0x1d65bb1feca018d: + guid: 172FF31C-2D80-31A6-FCA8-EB000D380666 + id: 11 + opcode: 0 + level: 0 + data: 'C:\\WINDOWS\\SysWOW64\\mmc.exe' +0x1d65bb1feca030d: + guid: 172FF31C-2D80-31A6-FCA8-EB000D380666 + id: 25 + opcode: 0 + level: 0 + data: 'C:\\WINDOWS\\SysWOW64\\mmc.exe\x08\x02TRUEFALSE\x10' +0x1d65bb1fecfcdc0: + guid: 172FF31C-2D80-31A6-FCA8-EB000D380666 + id: 27 + opcode: 0 + level: 0 + data: '\x05TRUETRUE' +[...] diff --git a/docs/source/windef_generated.rst b/docs/source/windef_generated.rst index db1d749..580efe2 100644 --- a/docs/source/windef_generated.rst +++ b/docs/source/windef_generated.rst @@ -8,6 +8,831 @@ WinDef .. autodata:: BG_NOTIFY_DISABLE .. autodata:: BG_NOTIFY_JOB_MODIFICATION .. autodata:: BG_NOTIFY_FILE_TRANSFERRED +.. autodata:: HKEY_CLASSES_ROOT +.. autodata:: HKEY_CURRENT_USER +.. autodata:: HKEY_LOCAL_MACHINE +.. autodata:: HKEY_USERS +.. autodata:: HKEY_PERFORMANCE_DATA +.. autodata:: HKEY_PERFORMANCE_TEXT +.. autodata:: HKEY_PERFORMANCE_NLSTEXT +.. autodata:: HKEY_CURRENT_CONFIG +.. autodata:: HKEY_DYN_DATA +.. autodata:: HKEY_CURRENT_USER_LOCAL_SETTINGS +.. autodata:: RPC_REQUEST_TYPE_CALL +.. autodata:: RPC_REQUEST_TYPE_BIND +.. autodata:: RPC_RESPONSE_TYPE_BIND_OK +.. autodata:: RPC_RESPONSE_TYPE_FAIL +.. autodata:: RPC_RESPONSE_TYPE_SUCCESS +.. autodata:: BIND_IF_SYNTAX_NDR32 +.. autodata:: BIND_IF_SYNTAX_NDR64 +.. autodata:: BIND_IF_SYNTAX_UNKNOWN +.. autodata:: MAX_DEVICE_ID_LEN +.. autodata:: MAX_DEVNODE_ID_LEN +.. autodata:: MAX_GUID_STRING_LEN +.. autodata:: MAX_CLASS_NAME_LEN +.. autodata:: MAX_PROFILE_LEN +.. autodata:: MAX_CONFIG_VALUE +.. autodata:: MAX_INSTANCE_VALUE +.. autodata:: MAX_MEM_REGISTERS +.. autodata:: MAX_IO_PORTS +.. autodata:: MAX_IRQS +.. autodata:: MAX_DMA_CHANNELS +.. autodata:: DWORD_MAX +.. autodata:: DWORDLONG_MAX +.. autodata:: CM_DEVCAP_LOCKSUPPORTED +.. autodata:: CM_DEVCAP_EJECTSUPPORTED +.. autodata:: CM_DEVCAP_REMOVABLE +.. autodata:: CM_DEVCAP_DOCKDEVICE +.. autodata:: CM_DEVCAP_UNIQUEID +.. autodata:: CM_DEVCAP_SILENTINSTALL +.. autodata:: CM_DEVCAP_RAWDEVICEOK +.. autodata:: CM_DEVCAP_SURPRISEREMOVALOK +.. autodata:: CM_DEVCAP_HARDWAREDISABLED +.. autodata:: CM_DEVCAP_NONDYNAMIC +.. autodata:: ResType_All +.. autodata:: ResType_None +.. autodata:: ResType_Mem +.. autodata:: ResType_IO +.. autodata:: ResType_DMA +.. autodata:: ResType_IRQ +.. autodata:: ResType_DoNotUse +.. autodata:: ResType_BusNumber +.. autodata:: ResType_MemLarge +.. autodata:: ResType_MAX +.. autodata:: ResType_Ignored_Bit +.. autodata:: ResType_ClassSpecific +.. autodata:: ResType_Reserved +.. autodata:: ResType_DevicePrivate +.. autodata:: ResType_PcCardConfig +.. autodata:: ResType_MfCardConfig +.. autodata:: ResType_Connection +.. autodata:: BASIC_LOG_CONF +.. autodata:: FILTERED_LOG_CONF +.. autodata:: ALLOC_LOG_CONF +.. autodata:: BOOT_LOG_CONF +.. autodata:: FORCED_LOG_CONF +.. autodata:: OVERRIDE_LOG_CONF +.. autodata:: NUM_LOG_CONF +.. autodata:: LOG_CONF_BITS +.. autodata:: PRIORITY_EQUAL_FIRST +.. autodata:: PRIORITY_EQUAL_LAST +.. autodata:: PRIORITY_BIT +.. autodata:: CR_SUCCESS +.. autodata:: CR_DEFAULT +.. autodata:: CR_OUT_OF_MEMORY +.. autodata:: CR_INVALID_POINTER +.. autodata:: CR_INVALID_FLAG +.. autodata:: CR_INVALID_DEVNODE +.. autodata:: CR_INVALID_DEVINST +.. autodata:: CR_INVALID_RES_DES +.. autodata:: CR_INVALID_LOG_CONF +.. autodata:: CR_INVALID_ARBITRATOR +.. autodata:: CR_INVALID_NODELIST +.. autodata:: CR_DEVNODE_HAS_REQS +.. autodata:: CR_DEVINST_HAS_REQS +.. autodata:: CR_INVALID_RESOURCEID +.. autodata:: CR_DLVXD_NOT_FOUND +.. autodata:: CR_NO_SUCH_DEVNODE +.. autodata:: CR_NO_SUCH_DEVINST +.. autodata:: CR_NO_MORE_LOG_CONF +.. autodata:: CR_NO_MORE_RES_DES +.. autodata:: CR_ALREADY_SUCH_DEVNODE +.. autodata:: CR_ALREADY_SUCH_DEVINST +.. autodata:: CR_INVALID_RANGE_LIST +.. autodata:: CR_INVALID_RANGE +.. autodata:: CR_FAILURE +.. autodata:: CR_NO_SUCH_LOGICAL_DEV +.. autodata:: CR_CREATE_BLOCKED +.. autodata:: CR_NOT_SYSTEM_VM +.. autodata:: CR_REMOVE_VETOED +.. autodata:: CR_APM_VETOED +.. autodata:: CR_INVALID_LOAD_TYPE +.. autodata:: CR_BUFFER_SMALL +.. autodata:: CR_NO_ARBITRATOR +.. autodata:: CR_NO_REGISTRY_HANDLE +.. autodata:: CR_REGISTRY_ERROR +.. autodata:: CR_INVALID_DEVICE_ID +.. autodata:: CR_INVALID_DATA +.. autodata:: CR_INVALID_API +.. autodata:: CR_DEVLOADER_NOT_READY +.. autodata:: CR_NEED_RESTART +.. autodata:: CR_NO_MORE_HW_PROFILES +.. autodata:: CR_DEVICE_NOT_THERE +.. autodata:: CR_NO_SUCH_VALUE +.. autodata:: CR_WRONG_TYPE +.. autodata:: CR_INVALID_PRIORITY +.. autodata:: CR_NOT_DISABLEABLE +.. autodata:: CR_FREE_RESOURCES +.. autodata:: CR_QUERY_VETOED +.. autodata:: CR_CANT_SHARE_IRQ +.. autodata:: CR_NO_DEPENDENT +.. autodata:: CR_SAME_RESOURCES +.. autodata:: CR_NO_SUCH_REGISTRY_KEY +.. autodata:: CR_INVALID_MACHINENAME +.. autodata:: CR_REMOTE_COMM_FAILURE +.. autodata:: CR_MACHINE_UNAVAILABLE +.. autodata:: CR_NO_CM_SERVICES +.. autodata:: CR_ACCESS_DENIED +.. autodata:: CR_CALL_NOT_IMPLEMENTED +.. autodata:: CR_INVALID_PROPERTY +.. autodata:: CR_DEVICE_INTERFACE_ACTIVE +.. autodata:: CR_NO_SUCH_DEVICE_INTERFACE +.. autodata:: CR_INVALID_REFERENCE_STRING +.. autodata:: CR_INVALID_CONFLICT_LIST +.. autodata:: CR_INVALID_INDEX +.. autodata:: CR_INVALID_STRUCTURE_SIZE +.. autodata:: NUM_CR_RESULTS +.. autodata:: PCD_MAX_MEMORY +.. autodata:: PCD_MAX_IO +.. autodata:: ATM_E164 +.. autodata:: ATM_NSAP +.. autodata:: ATM_AESA +.. autodata:: ATM_ADDR_SIZE +.. autodata:: DNS_ATMA_FORMAT_E164 +.. autodata:: DNS_ATMA_FORMAT_AESA +.. autodata:: DNS_ATMA_MAX_ADDR_LENGTH +.. autodata:: DNS_TYPE_ZERO +.. autodata:: DNS_TYPE_A +.. autodata:: DNS_TYPE_NS +.. autodata:: DNS_TYPE_MD +.. autodata:: DNS_TYPE_MF +.. autodata:: DNS_TYPE_CNAME +.. autodata:: DNS_TYPE_SOA +.. autodata:: DNS_TYPE_MB +.. autodata:: DNS_TYPE_MG +.. autodata:: DNS_TYPE_MR +.. autodata:: DNS_TYPE_NULL +.. autodata:: DNS_TYPE_WKS +.. autodata:: DNS_TYPE_PTR +.. autodata:: DNS_TYPE_HINFO +.. autodata:: DNS_TYPE_MINFO +.. autodata:: DNS_TYPE_MX +.. autodata:: DNS_TYPE_TEXT +.. autodata:: DNS_TYPE_RP +.. autodata:: DNS_TYPE_AFSDB +.. autodata:: DNS_TYPE_X25 +.. autodata:: DNS_TYPE_ISDN +.. autodata:: DNS_TYPE_RT +.. autodata:: DNS_TYPE_NSAP +.. autodata:: DNS_TYPE_NSAPPTR +.. autodata:: DNS_TYPE_SIG +.. autodata:: DNS_TYPE_KEY +.. autodata:: DNS_TYPE_PX +.. autodata:: DNS_TYPE_GPOS +.. autodata:: DNS_TYPE_AAAA +.. autodata:: DNS_TYPE_LOC +.. autodata:: DNS_TYPE_NXT +.. autodata:: DNS_TYPE_EID +.. autodata:: DNS_TYPE_NIMLOC +.. autodata:: DNS_TYPE_SRV +.. autodata:: DNS_TYPE_ATMA +.. autodata:: DNS_TYPE_NAPTR +.. autodata:: DNS_TYPE_KX +.. autodata:: DNS_TYPE_CERT +.. autodata:: DNS_TYPE_A6 +.. autodata:: DNS_TYPE_DNAME +.. autodata:: DNS_TYPE_SINK +.. autodata:: DNS_TYPE_OPT +.. autodata:: DNS_TYPE_DS +.. autodata:: DNS_TYPE_RRSIG +.. autodata:: DNS_TYPE_NSEC +.. autodata:: DNS_TYPE_DNSKEY +.. autodata:: DNS_TYPE_DHCID +.. autodata:: DNS_TYPE_NSEC3 +.. autodata:: DNS_TYPE_NSEC3PARAM +.. autodata:: DNS_TYPE_UINFO +.. autodata:: DNS_TYPE_UID +.. autodata:: DNS_TYPE_GID +.. autodata:: DNS_TYPE_UNSPEC +.. autodata:: DNS_TYPE_ADDRS +.. autodata:: DNS_TYPE_TKEY +.. autodata:: DNS_TYPE_TSIG +.. autodata:: DNS_TYPE_IXFR +.. autodata:: DNS_TYPE_AXFR +.. autodata:: DNS_TYPE_MAILB +.. autodata:: DNS_TYPE_MAILA +.. autodata:: DNS_TYPE_ALL +.. autodata:: DNS_TYPE_ANY +.. autodata:: DNS_TYPE_WINS +.. autodata:: DNS_TYPE_WINSR +.. autodata:: DNS_TYPE_NBSTAT +.. autodata:: DNS_QUERY_STANDARD +.. autodata:: DNS_QUERY_ACCEPT_TRUNCATED_RESPONSE +.. autodata:: DNS_QUERY_USE_TCP_ONLY +.. autodata:: DNS_QUERY_NO_RECURSION +.. autodata:: DNS_QUERY_BYPASS_CACHE +.. autodata:: DNS_QUERY_NO_WIRE_QUERY +.. autodata:: DNS_QUERY_NO_LOCAL_NAME +.. autodata:: DNS_QUERY_NO_HOSTS_FILE +.. autodata:: DNS_QUERY_NO_NETBT +.. autodata:: DNS_QUERY_WIRE_ONLY +.. autodata:: DNS_QUERY_RETURN_MESSAGE +.. autodata:: DNS_QUERY_MULTICAST_ONLY +.. autodata:: DNS_QUERY_NO_MULTICAST +.. autodata:: DNS_QUERY_TREAT_AS_FQDN +.. autodata:: DNS_QUERY_ADDRCONFIG +.. autodata:: DNS_QUERY_DUAL_ADDR +.. autodata:: DNS_QUERY_DONT_RESET_TTL_VALUES +.. autodata:: DNS_QUERY_DISABLE_IDN_ENCODING +.. autodata:: DNS_QUERY_APPEND_MULTILABEL +.. autodata:: DNS_QUERY_DNSSEC_OK +.. autodata:: DNS_QUERY_DNSSEC_CHECKING_DISABLED +.. autodata:: DNS_QUERY_RESERVED +.. autodata:: EVENT_TRACE_FLAG_DISPATCHER +.. autodata:: EVENT_TRACE_FLAG_VIRTUAL_ALLOC +.. autodata:: EVENT_TRACE_FLAG_VAMAP +.. autodata:: EVENT_TRACE_FLAG_NO_SYSCONFIG +.. autodata:: EVENT_TRACE_FLAG_EXTENSION +.. autodata:: EVENT_TRACE_FLAG_FORWARD_WMI +.. autodata:: EVENT_TRACE_FLAG_ENABLE_RESERVE +.. autodata:: EVENT_TRACE_FILE_MODE_NONE +.. autodata:: EVENT_TRACE_FILE_MODE_SEQUENTIAL +.. autodata:: EVENT_TRACE_FILE_MODE_CIRCULAR +.. autodata:: EVENT_TRACE_FILE_MODE_APPEND +.. autodata:: EVENT_TRACE_REAL_TIME_MODE +.. autodata:: EVENT_TRACE_DELAY_OPEN_FILE_MODE +.. autodata:: EVENT_TRACE_BUFFERING_MODE +.. autodata:: EVENT_TRACE_PRIVATE_LOGGER_MODE +.. autodata:: EVENT_TRACE_ADD_HEADER_MODE +.. autodata:: EVENT_TRACE_USE_GLOBAL_SEQUENCE +.. autodata:: EVENT_TRACE_USE_LOCAL_SEQUENCE +.. autodata:: EVENT_TRACE_RELOG_MODE +.. autodata:: EVENT_TRACE_USE_PAGED_MEMORY +.. autodata:: EVENT_TRACE_FILE_MODE_NEWFILE +.. autodata:: EVENT_TRACE_FILE_MODE_PREALLOCATE +.. autodata:: EVENT_TRACE_CONTROL_QUERY +.. autodata:: EVENT_TRACE_CONTROL_STOP +.. autodata:: EVENT_TRACE_CONTROL_UPDATE +.. autodata:: EVENT_TRACE_CONTROL_FLUSH +.. autodata:: PROCESS_TRACE_MODE_REAL_TIME +.. autodata:: PROCESS_TRACE_MODE_RAW_TIMESTAMP +.. autodata:: PROCESS_TRACE_MODE_EVENT_RECORD +.. autodata:: EVENT_HEADER_PROPERTY_XML +.. autodata:: EVENT_HEADER_PROPERTY_FORWARDED_XML +.. autodata:: EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG +.. autodata:: EVENT_HEADER_FLAG_EXTENDED_INFO +.. autodata:: EVENT_HEADER_FLAG_PRIVATE_SESSION +.. autodata:: EVENT_HEADER_FLAG_STRING_ONLY +.. autodata:: EVENT_HEADER_FLAG_TRACE_MESSAGE +.. autodata:: EVENT_HEADER_FLAG_NO_CPUTIME +.. autodata:: EVENT_HEADER_FLAG_32_BIT_HEADER +.. autodata:: EVENT_HEADER_FLAG_64_BIT_HEADER +.. autodata:: EVENT_HEADER_FLAG_CLASSIC_HEADER +.. autodata:: EVENT_HEADER_FLAG_PROCESSOR_INDEX +.. autodata:: EVENT_TRACE_TYPE_CONFIG_CPU +.. autodata:: EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK +.. autodata:: EVENT_TRACE_TYPE_CONFIG_LOGICALDISK +.. autodata:: EVENT_TRACE_TYPE_CONFIG_NIC +.. autodata:: EVENT_TRACE_TYPE_CONFIG_VIDEO +.. autodata:: EVENT_TRACE_TYPE_CONFIG_SERVICES +.. autodata:: EVENT_TRACE_TYPE_CONFIG_POWER +.. autodata:: EVENT_TRACE_TYPE_CONFIG_NETINFO +.. autodata:: EVENT_TRACE_FLAG_PROCESS +.. autodata:: EVENT_TRACE_FLAG_THREAD +.. autodata:: EVENT_TRACE_FLAG_IMAGE_LOAD +.. autodata:: EVENT_TRACE_FLAG_DISK_IO +.. autodata:: EVENT_TRACE_FLAG_DISK_FILE_IO +.. autodata:: EVENT_TRACE_FLAG_MEMORY_PAGE_FAULTS +.. autodata:: EVENT_TRACE_FLAG_MEMORY_HARD_FAULTS +.. autodata:: EVENT_TRACE_FLAG_NETWORK_TCPIP +.. autodata:: EVENT_TRACE_FLAG_REGISTRY +.. autodata:: EVENT_TRACE_FLAG_DBGPRINT +.. autodata:: EVENT_TRACE_FLAG_VOLMGR +.. autodata:: FC_ALLOCATE_ALL_NODES +.. autodata:: FC_DONT_FREE +.. autodata:: FC_ALLOCED_ON_STACK +.. autodata:: FC_SIMPLE_POINTER +.. autodata:: FC_POINTER_DEREF +.. autodata:: ACCESS_MIN_MS_ACE_TYPE +.. autodata:: ACCESS_ALLOWED_ACE_TYPE +.. autodata:: ACCESS_DENIED_ACE_TYPE +.. autodata:: SYSTEM_AUDIT_ACE_TYPE +.. autodata:: SYSTEM_ALARM_ACE_TYPE +.. autodata:: ACCESS_MAX_MS_V2_ACE_TYPE +.. autodata:: ACCESS_ALLOWED_COMPOUND_ACE_TYPE +.. autodata:: ACCESS_MAX_MS_V3_ACE_TYPE +.. autodata:: ACCESS_MIN_MS_OBJECT_ACE_TYPE +.. autodata:: ACCESS_ALLOWED_OBJECT_ACE_TYPE +.. autodata:: ACCESS_DENIED_OBJECT_ACE_TYPE +.. autodata:: SYSTEM_AUDIT_OBJECT_ACE_TYPE +.. autodata:: SYSTEM_ALARM_OBJECT_ACE_TYPE +.. autodata:: ACCESS_MAX_MS_OBJECT_ACE_TYPE +.. autodata:: ACCESS_MAX_MS_V4_ACE_TYPE +.. autodata:: ACCESS_MAX_MS_ACE_TYPE +.. autodata:: ACCESS_ALLOWED_CALLBACK_ACE_TYPE +.. autodata:: ACCESS_DENIED_CALLBACK_ACE_TYPE +.. autodata:: ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE +.. autodata:: ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE +.. autodata:: SYSTEM_AUDIT_CALLBACK_ACE_TYPE +.. autodata:: SYSTEM_ALARM_CALLBACK_ACE_TYPE +.. autodata:: SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE +.. autodata:: SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE +.. autodata:: SYSTEM_MANDATORY_LABEL_ACE_TYPE +.. autodata:: ACCESS_MAX_MS_V5_ACE_TYPE +.. autodata:: SYSTEM_RESOURCE_ATTRIBUTE_ACE_TYPE +.. autodata:: SYSTEM_SCOPED_POLICY_ID_ACE_TYPE +.. autodata:: SYSTEM_PROCESS_TRUST_LABEL_ACE_TYPE +.. autodata:: ACCESS_MAX_MS_V5_ACE_TYPE +.. autodata:: SEC_WINNT_AUTH_IDENTITY_ANSI +.. autodata:: SEC_WINNT_AUTH_IDENTITY_UNICODE +.. autodata:: SE_OWNER_DEFAULTED +.. autodata:: SE_GROUP_DEFAULTED +.. autodata:: SE_DACL_PRESENT +.. autodata:: SE_DACL_DEFAULTED +.. autodata:: SE_SACL_PRESENT +.. autodata:: SE_SACL_DEFAULTED +.. autodata:: SE_DACL_UNTRUSTED +.. autodata:: SE_SERVER_SECURITY +.. autodata:: SE_DACL_AUTO_INHERIT_REQ +.. autodata:: SE_SACL_AUTO_INHERIT_REQ +.. autodata:: SE_DACL_AUTO_INHERITED +.. autodata:: SE_SACL_AUTO_INHERITED +.. autodata:: SE_DACL_PROTECTED +.. autodata:: SE_SACL_PROTECTED +.. autodata:: SE_RM_CONTROL_VALID +.. autodata:: SE_SELF_RELATIVE +.. autodata:: SDDL_REVISION_1 +.. autodata:: ACE_OBJECT_TYPE_PRESENT +.. autodata:: ACE_INHERITED_OBJECT_TYPE_PRESENT +.. autodata:: OBJECT_INHERIT_ACE +.. autodata:: CONTAINER_INHERIT_ACE +.. autodata:: NO_PROPAGATE_INHERIT_ACE +.. autodata:: INHERIT_ONLY_ACE +.. autodata:: INHERITED_ACE +.. autodata:: VALID_INHERIT_FLAGS +.. autodata:: SUCCESSFUL_ACCESS_ACE_FLAG +.. autodata:: FAILED_ACCESS_ACE_FLAG +.. autodata:: SYSTEM_MANDATORY_LABEL_NO_WRITE_UP +.. autodata:: SYSTEM_MANDATORY_LABEL_NO_READ_UP +.. autodata:: SYSTEM_MANDATORY_LABEL_NO_EXECUTE_UP +.. autodata:: SYSTEM_PROCESS_TRUST_LABEL_VALID_MASK +.. autodata:: SYSTEM_PROCESS_TRUST_NOCONSTRAINT_MASK +.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_INVALID +.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_INT64 +.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_UINT64 +.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_STRING +.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_FQBN +.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_SID +.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_BOOLEAN +.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_OCTET_STRING +.. autodata:: SE_GROUP_MANDATORY +.. autodata:: SE_GROUP_ENABLED_BY_DEFAULT +.. autodata:: SE_GROUP_ENABLED +.. autodata:: SE_GROUP_OWNER +.. autodata:: SE_GROUP_USE_FOR_DENY_ONLY +.. autodata:: SE_GROUP_INTEGRITY +.. autodata:: SE_GROUP_INTEGRITY_ENABLED +.. autodata:: SE_GROUP_LOGON_ID +.. autodata:: SE_GROUP_RESOURCE +.. autodata:: SE_GROUP_VALID_ATTRIBUTES +.. autodata:: OWNER_SECURITY_INFORMATION +.. autodata:: GROUP_SECURITY_INFORMATION +.. autodata:: DACL_SECURITY_INFORMATION +.. autodata:: SACL_SECURITY_INFORMATION +.. autodata:: LABEL_SECURITY_INFORMATION +.. autodata:: ATTRIBUTE_SECURITY_INFORMATION +.. autodata:: SCOPE_SECURITY_INFORMATION +.. autodata:: PROCESS_TRUST_LABEL_SECURITY_INFORMATION +.. autodata:: BACKUP_SECURITY_INFORMATION +.. autodata:: PROTECTED_DACL_SECURITY_INFORMATION +.. autodata:: PROTECTED_SACL_SECURITY_INFORMATION +.. autodata:: UNPROTECTED_DACL_SECURITY_INFORMATION +.. autodata:: UNPROTECTED_SACL_SECURITY_INFORMATION +.. autodata:: EVENTLOG_SUCCESS +.. autodata:: EVENTLOG_ERROR_TYPE +.. autodata:: EVENTLOG_WARNING_TYPE +.. autodata:: EVENTLOG_INFORMATION_TYPE +.. autodata:: EVENTLOG_AUDIT_SUCCESS +.. autodata:: EVENTLOG_AUDIT_FAILURE +.. autodata:: EVENTLOG_SEQUENTIAL_READ +.. autodata:: EVENTLOG_SEEK_READ +.. autodata:: EVENTLOG_FORWARDS_READ +.. autodata:: EVENTLOG_BACKWARDS_READ +.. autodata:: EVT_VARIANT_TYPE_MASK +.. autodata:: EVT_VARIANT_TYPE_ARRAY +.. autodata:: PRODUCT_UNDEFINED +.. autodata:: PRODUCT_ULTIMATE +.. autodata:: PRODUCT_HOME_BASIC +.. autodata:: PRODUCT_HOME_PREMIUM +.. autodata:: PRODUCT_ENTERPRISE +.. autodata:: PRODUCT_HOME_BASIC_N +.. autodata:: PRODUCT_BUSINESS +.. autodata:: PRODUCT_STANDARD_SERVER +.. autodata:: PRODUCT_DATACENTER_SERVER +.. autodata:: PRODUCT_SMALLBUSINESS_SERVER +.. autodata:: PRODUCT_ENTERPRISE_SERVER +.. autodata:: PRODUCT_STARTER +.. autodata:: PRODUCT_DATACENTER_SERVER_CORE +.. autodata:: PRODUCT_STANDARD_SERVER_CORE +.. autodata:: PRODUCT_ENTERPRISE_SERVER_CORE +.. autodata:: PRODUCT_ENTERPRISE_SERVER_IA64 +.. autodata:: PRODUCT_BUSINESS_N +.. autodata:: PRODUCT_WEB_SERVER +.. autodata:: PRODUCT_CLUSTER_SERVER +.. autodata:: PRODUCT_HOME_SERVER +.. autodata:: PRODUCT_STORAGE_EXPRESS_SERVER +.. autodata:: PRODUCT_STORAGE_STANDARD_SERVER +.. autodata:: PRODUCT_STORAGE_WORKGROUP_SERVER +.. autodata:: PRODUCT_STORAGE_ENTERPRISE_SERVER +.. autodata:: PRODUCT_SERVER_FOR_SMALLBUSINESS +.. autodata:: PRODUCT_SMALLBUSINESS_SERVER_PREMIUM +.. autodata:: PRODUCT_HOME_PREMIUM_N +.. autodata:: PRODUCT_ENTERPRISE_N +.. autodata:: PRODUCT_ULTIMATE_N +.. autodata:: PRODUCT_WEB_SERVER_CORE +.. autodata:: PRODUCT_MEDIUMBUSINESS_SERVER_MANAGEMENT +.. autodata:: PRODUCT_MEDIUMBUSINESS_SERVER_SECURITY +.. autodata:: PRODUCT_MEDIUMBUSINESS_SERVER_MESSAGING +.. autodata:: PRODUCT_SERVER_FOUNDATION +.. autodata:: PRODUCT_HOME_PREMIUM_SERVER +.. autodata:: PRODUCT_SERVER_FOR_SMALLBUSINESS_V +.. autodata:: PRODUCT_STANDARD_SERVER_V +.. autodata:: PRODUCT_DATACENTER_SERVER_V +.. autodata:: PRODUCT_ENTERPRISE_SERVER_V +.. autodata:: PRODUCT_DATACENTER_SERVER_CORE_V +.. autodata:: PRODUCT_STANDARD_SERVER_CORE_V +.. autodata:: PRODUCT_ENTERPRISE_SERVER_CORE_V +.. autodata:: PRODUCT_HYPERV +.. autodata:: PRODUCT_STORAGE_EXPRESS_SERVER_CORE +.. autodata:: PRODUCT_STORAGE_STANDARD_SERVER_CORE +.. autodata:: PRODUCT_STORAGE_WORKGROUP_SERVER_CORE +.. autodata:: PRODUCT_STORAGE_ENTERPRISE_SERVER_CORE +.. autodata:: PRODUCT_STARTER_N +.. autodata:: PRODUCT_PROFESSIONAL +.. autodata:: PRODUCT_PROFESSIONAL_N +.. autodata:: PRODUCT_SB_SOLUTION_SERVER +.. autodata:: PRODUCT_SERVER_FOR_SB_SOLUTIONS +.. autodata:: PRODUCT_STANDARD_SERVER_SOLUTIONS +.. autodata:: PRODUCT_STANDARD_SERVER_SOLUTIONS_CORE +.. autodata:: PRODUCT_SB_SOLUTION_SERVER_EM +.. autodata:: PRODUCT_SERVER_FOR_SB_SOLUTIONS_EM +.. autodata:: PRODUCT_SOLUTION_EMBEDDEDSERVER +.. autodata:: PRODUCT_SOLUTION_EMBEDDEDSERVER_CORE +.. autodata:: PRODUCT_SMALLBUSINESS_SERVER_PREMIUM_CORE +.. autodata:: PRODUCT_ESSENTIALBUSINESS_SERVER_MGMT +.. autodata:: PRODUCT_ESSENTIALBUSINESS_SERVER_ADDL +.. autodata:: PRODUCT_ESSENTIALBUSINESS_SERVER_MGMTSVC +.. autodata:: PRODUCT_ESSENTIALBUSINESS_SERVER_ADDLSVC +.. autodata:: PRODUCT_CLUSTER_SERVER_V +.. autodata:: PRODUCT_EMBEDDED +.. autodata:: PRODUCT_STARTER_E +.. autodata:: PRODUCT_HOME_BASIC_E +.. autodata:: PRODUCT_HOME_PREMIUM_E +.. autodata:: PRODUCT_PROFESSIONAL_E +.. autodata:: PRODUCT_ENTERPRISE_E +.. autodata:: PRODUCT_ULTIMATE_E +.. autodata:: PRODUCT_ENTERPRISE_EVALUATION +.. autodata:: PRODUCT_MULTIPOINT_STANDARD_SERVER +.. autodata:: PRODUCT_MULTIPOINT_PREMIUM_SERVER +.. autodata:: PRODUCT_STANDARD_EVALUATION_SERVER +.. autodata:: PRODUCT_DATACENTER_EVALUATION_SERVER +.. autodata:: PRODUCT_ENTERPRISE_N_EVALUATION +.. autodata:: PRODUCT_STORAGE_WORKGROUP_EVALUATION_SERVER +.. autodata:: PRODUCT_STORAGE_STANDARD_EVALUATION_SERVER +.. autodata:: PRODUCT_CORE_ARM +.. autodata:: PRODUCT_CORE_N +.. autodata:: PRODUCT_CORE_COUNTRYSPECIFIC +.. autodata:: PRODUCT_CORE_LANGUAGESPECIFIC +.. autodata:: PRODUCT_CORE +.. autodata:: PRODUCT_PROFESSIONAL_WMC +.. autodata:: PRODUCT_UNLICENSED +.. autodata:: X86_KGDT_NULL +.. autodata:: X86_KGDT_R0_CODE +.. autodata:: X86_KGDT_R0_DATA +.. autodata:: X86_KGDT_R3_CODE +.. autodata:: X86_KGDT_R3_DATA +.. autodata:: X86_KGDT_TSS +.. autodata:: X86_KGDT_R0_PCR +.. autodata:: X86_KGDT_R3_TEB +.. autodata:: X86_KGDT_VDM_TILE +.. autodata:: X86_KGDT_LDT +.. autodata:: X86_KGDT_DF_TSS +.. autodata:: X86_KGDT_NMI_TSS +.. autodata:: X86_FRAME_EDITED +.. autodata:: X86_MODE_MASK +.. autodata:: X86_EFLAGS_V86_MASK +.. autodata:: AMD64_KGDT64_NULL +.. autodata:: AMD64_KGDT64_R0_CODE +.. autodata:: AMD64_KGDT64_R0_DATA +.. autodata:: AMD64_KGDT64_R3_CMCODE +.. autodata:: AMD64_KGDT64_R3_DATA +.. autodata:: AMD64_KGDT64_R3_CODE +.. autodata:: AMD64_KGDT64_SYS_TSS +.. autodata:: AMD64_KGDT64_R3_CMTEB +.. autodata:: AMD64_KGDT64_LAST +.. autodata:: MODE_BIT +.. autodata:: MODE_MASK +.. autodata:: RPL_MASK +.. autodata:: CS_USER_32B +.. autodata:: CS_USER_64B +.. autodata:: OS_WINDOWS +.. autodata:: OS_NT +.. autodata:: OS_WIN95ORGREATER +.. autodata:: OS_NT4ORGREATER +.. autodata:: OS_WIN98ORGREATER +.. autodata:: OS_WIN98_GOLD +.. autodata:: OS_WIN2000ORGREATER +.. autodata:: OS_WIN2000PRO +.. autodata:: OS_WIN2000SERVER +.. autodata:: OS_WIN2000ADVSERVER +.. autodata:: OS_WIN2000DATACENTER +.. autodata:: OS_WIN2000TERMINAL +.. autodata:: OS_EMBEDDED +.. autodata:: OS_TERMINALCLIENT +.. autodata:: OS_TERMINALREMOTEADMIN +.. autodata:: OS_WIN95_GOLD +.. autodata:: OS_MEORGREATER +.. autodata:: OS_XPORGREATER +.. autodata:: OS_HOME +.. autodata:: OS_PROFESSIONAL +.. autodata:: OS_DATACENTER +.. autodata:: OS_ADVSERVER +.. autodata:: OS_SERVER +.. autodata:: OS_TERMINALSERVER +.. autodata:: OS_PERSONALTERMINALSERVER +.. autodata:: OS_FASTUSERSWITCHING +.. autodata:: OS_WELCOMELOGONUI +.. autodata:: OS_DOMAINMEMBER +.. autodata:: OS_ANYSERVER +.. autodata:: OS_WOW6432 +.. autodata:: OS_WEBSERVER +.. autodata:: OS_SMALLBUSINESSSERVER +.. autodata:: OS_TABLETPC +.. autodata:: OS_SERVERADMINUI +.. autodata:: OS_MEDIACENTER +.. autodata:: OS_APPLIANCE +.. autodata:: APPLICATION_ERROR_MASK +.. autodata:: ERROR_SEVERITY_SUCCESS +.. autodata:: ERROR_SEVERITY_INFORMATIONAL +.. autodata:: ERROR_SEVERITY_WARNING +.. autodata:: ERROR_SEVERITY_ERROR +.. autodata:: SPDRP_DEVICEDESC +.. autodata:: SPDRP_HARDWAREID +.. autodata:: SPDRP_COMPATIBLEIDS +.. autodata:: SPDRP_UNUSED0 +.. autodata:: SPDRP_SERVICE +.. autodata:: SPDRP_UNUSED1 +.. autodata:: SPDRP_UNUSED2 +.. autodata:: SPDRP_CLASS +.. autodata:: SPDRP_CLASSGUID +.. autodata:: SPDRP_DRIVER +.. autodata:: SPDRP_CONFIGFLAGS +.. autodata:: SPDRP_MFG +.. autodata:: SPDRP_FRIENDLYNAME +.. autodata:: SPDRP_LOCATION_INFORMATION +.. autodata:: SPDRP_PHYSICAL_DEVICE_OBJECT_NAME +.. autodata:: SPDRP_CAPABILITIES +.. autodata:: SPDRP_UI_NUMBER +.. autodata:: SPDRP_UPPERFILTERS +.. autodata:: SPDRP_LOWERFILTERS +.. autodata:: SPDRP_BUSTYPEGUID +.. autodata:: SPDRP_LEGACYBUSTYPE +.. autodata:: SPDRP_BUSNUMBER +.. autodata:: SPDRP_ENUMERATOR_NAME +.. autodata:: SPDRP_SECURITY +.. autodata:: SPDRP_SECURITY_SDS +.. autodata:: SPDRP_DEVTYPE +.. autodata:: SPDRP_EXCLUSIVE +.. autodata:: SPDRP_CHARACTERISTICS +.. autodata:: SPDRP_ADDRESS +.. autodata:: SPDRP_UI_NUMBER_DESC_FORMAT +.. autodata:: SPDRP_DEVICE_POWER_DATA +.. autodata:: SPDRP_REMOVAL_POLICY +.. autodata:: SPDRP_REMOVAL_POLICY_HW_DEFAULT +.. autodata:: SPDRP_REMOVAL_POLICY_OVERRIDE +.. autodata:: SPDRP_INSTALL_STATE +.. autodata:: SPDRP_LOCATION_PATHS +.. autodata:: SPDRP_BASE_CONTAINERID +.. autodata:: SPDRP_MAXIMUM_PROPERTY +.. autodata:: ERROR_EXPECTED_SECTION_NAME +.. autodata:: ERROR_BAD_SECTION_NAME_LINE +.. autodata:: ERROR_SECTION_NAME_TOO_LONG +.. autodata:: ERROR_GENERAL_SYNTAX +.. autodata:: ERROR_WRONG_INF_STYLE +.. autodata:: ERROR_SECTION_NOT_FOUND +.. autodata:: ERROR_LINE_NOT_FOUND +.. autodata:: ERROR_NO_BACKUP +.. autodata:: ERROR_NO_ASSOCIATED_CLASS +.. autodata:: ERROR_CLASS_MISMATCH +.. autodata:: ERROR_DUPLICATE_FOUND +.. autodata:: ERROR_NO_DRIVER_SELECTED +.. autodata:: ERROR_KEY_DOES_NOT_EXIST +.. autodata:: ERROR_INVALID_DEVINST_NAME +.. autodata:: ERROR_INVALID_CLASS +.. autodata:: ERROR_DEVINST_ALREADY_EXISTS +.. autodata:: ERROR_DEVINFO_NOT_REGISTERED +.. autodata:: ERROR_INVALID_REG_PROPERTY +.. autodata:: ERROR_NO_INF +.. autodata:: ERROR_NO_SUCH_DEVINST +.. autodata:: ERROR_CANT_LOAD_CLASS_ICON +.. autodata:: ERROR_INVALID_CLASS_INSTALLER +.. autodata:: ERROR_DI_DO_DEFAULT +.. autodata:: ERROR_DI_NOFILECOPY +.. autodata:: ERROR_INVALID_HWPROFILE +.. autodata:: ERROR_NO_DEVICE_SELECTED +.. autodata:: ERROR_DEVINFO_LIST_LOCKED +.. autodata:: ERROR_DEVINFO_DATA_LOCKED +.. autodata:: ERROR_DI_BAD_PATH +.. autodata:: ERROR_NO_CLASSINSTALL_PARAMS +.. autodata:: ERROR_FILEQUEUE_LOCKED +.. autodata:: ERROR_BAD_SERVICE_INSTALLSECT +.. autodata:: ERROR_NO_CLASS_DRIVER_LIST +.. autodata:: ERROR_NO_ASSOCIATED_SERVICE +.. autodata:: ERROR_NO_DEFAULT_DEVICE_INTERFACE +.. autodata:: ERROR_DEVICE_INTERFACE_ACTIVE +.. autodata:: ERROR_DEVICE_INTERFACE_REMOVED +.. autodata:: ERROR_BAD_INTERFACE_INSTALLSECT +.. autodata:: ERROR_NO_SUCH_INTERFACE_CLASS +.. autodata:: ERROR_INVALID_REFERENCE_STRING +.. autodata:: ERROR_INVALID_MACHINENAME +.. autodata:: ERROR_REMOTE_COMM_FAILURE +.. autodata:: ERROR_MACHINE_UNAVAILABLE +.. autodata:: ERROR_NO_CONFIGMGR_SERVICES +.. autodata:: ERROR_INVALID_PROPPAGE_PROVIDER +.. autodata:: ERROR_NO_SUCH_DEVICE_INTERFACE +.. autodata:: ERROR_DI_POSTPROCESSING_REQUIRED +.. autodata:: ERROR_INVALID_COINSTALLER +.. autodata:: ERROR_NO_COMPAT_DRIVERS +.. autodata:: ERROR_NO_DEVICE_ICON +.. autodata:: ERROR_INVALID_INF_LOGCONFIG +.. autodata:: ERROR_DI_DONT_INSTALL +.. autodata:: ERROR_INVALID_FILTER_DRIVER +.. autodata:: ERROR_NON_WINDOWS_NT_DRIVER +.. autodata:: ERROR_NON_WINDOWS_DRIVER +.. autodata:: ERROR_NO_CATALOG_FOR_OEM_INF +.. autodata:: ERROR_DEVINSTALL_QUEUE_NONNATIVE +.. autodata:: ERROR_NOT_DISABLEABLE +.. autodata:: ERROR_CANT_REMOVE_DEVINST +.. autodata:: ERROR_INVALID_TARGET +.. autodata:: ERROR_DRIVER_NONNATIVE +.. autodata:: ERROR_IN_WOW64 +.. autodata:: ERROR_SET_SYSTEM_RESTORE_POINT +.. autodata:: ERROR_SCE_DISABLED +.. autodata:: ERROR_UNKNOWN_EXCEPTION +.. autodata:: ERROR_PNP_REGISTRY_ERROR +.. autodata:: ERROR_REMOTE_REQUEST_UNSUPPORTED +.. autodata:: ERROR_NOT_AN_INSTALLED_OEM_INF +.. autodata:: ERROR_INF_IN_USE_BY_DEVICES +.. autodata:: ERROR_DI_FUNCTION_OBSOLETE +.. autodata:: ERROR_NO_AUTHENTICODE_CATALOG +.. autodata:: ERROR_AUTHENTICODE_DISALLOWED +.. autodata:: ERROR_AUTHENTICODE_TRUSTED_PUBLISHER +.. autodata:: ERROR_AUTHENTICODE_TRUST_NOT_ESTABLISHED +.. autodata:: ERROR_AUTHENTICODE_PUBLISHER_NOT_TRUSTED +.. autodata:: ERROR_SIGNATURE_OSATTRIBUTE_MISMATCH +.. autodata:: ERROR_ONLY_VALIDATE_VIA_AUTHENTICODE +.. autodata:: ERROR_DEVICE_INSTALLER_NOT_READY +.. autodata:: ERROR_DRIVER_STORE_ADD_FAILED +.. autodata:: ERROR_DEVICE_INSTALL_BLOCKED +.. autodata:: ERROR_DRIVER_INSTALL_BLOCKED +.. autodata:: ERROR_WRONG_INF_TYPE +.. autodata:: ERROR_FILE_HASH_NOT_IN_CATALOG +.. autodata:: ERROR_DRIVER_STORE_DELETE_FAILED +.. autodata:: ERROR_UNRECOVERABLE_STACK_OVERFLOW +.. autodata:: EXCEPTION_SPAPI_UNRECOVERABLE_STACK_OVERFLOW +.. autodata:: ERROR_NO_DEFAULT_INTERFACE_DEVICE +.. autodata:: ERROR_INTERFACE_DEVICE_ACTIVE +.. autodata:: ERROR_INTERFACE_DEVICE_REMOVED +.. autodata:: ERROR_NO_SUCH_INTERFACE_DEVICE +.. autodata:: ERROR_NOT_INSTALLED +.. autodata:: PIPE_ACCESS_INBOUND +.. autodata:: PIPE_ACCESS_OUTBOUND +.. autodata:: PIPE_ACCESS_DUPLEX +.. autodata:: PIPE_CLIENT_END +.. autodata:: PIPE_SERVER_END +.. autodata:: PIPE_WAIT +.. autodata:: PIPE_NOWAIT +.. autodata:: PIPE_READMODE_BYTE +.. autodata:: PIPE_READMODE_MESSAGE +.. autodata:: PIPE_TYPE_BYTE +.. autodata:: PIPE_TYPE_MESSAGE +.. autodata:: PIPE_ACCEPT_REMOTE_CLIENTS +.. autodata:: PIPE_REJECT_REMOTE_CLIENTS +.. autodata:: PIPE_UNLIMITED_INSTANCES +.. autodata:: NMPWAIT_WAIT_FOREVER +.. autodata:: NMPWAIT_NOWAIT +.. autodata:: NMPWAIT_USE_DEFAULT_WAIT +.. autodata:: SYMSEARCH_MASKOBJS +.. autodata:: SYMSEARCH_RECURSE +.. autodata:: SYMSEARCH_GLOBALSONLY +.. autodata:: SYMSEARCH_ALLITEMS +.. autodata:: CBA_DEFERRED_SYMBOL_LOAD_START +.. autodata:: CBA_DEFERRED_SYMBOL_LOAD_COMPLETE +.. autodata:: CBA_DEFERRED_SYMBOL_LOAD_FAILURE +.. autodata:: CBA_SYMBOLS_UNLOADED +.. autodata:: CBA_DUPLICATE_SYMBOL +.. autodata:: CBA_READ_MEMORY +.. autodata:: CBA_DEFERRED_SYMBOL_LOAD_CANCEL +.. autodata:: CBA_SET_OPTIONS +.. autodata:: CBA_EVENT +.. autodata:: CBA_DEFERRED_SYMBOL_LOAD_PARTIAL +.. autodata:: CBA_DEBUG_INFO +.. autodata:: CBA_SRCSRV_INFO +.. autodata:: CBA_SRCSRV_EVENT +.. autodata:: CBA_UPDATE_STATUS_BAR +.. autodata:: CBA_ENGINE_PRESENT +.. autodata:: CBA_CHECK_ENGOPT_DISALLOW_NETWORK_PATHS +.. autodata:: EVENT_SRCSPEW_START +.. autodata:: EVENT_SRCSPEW +.. autodata:: EVENT_SRCSPEW_END +.. autodata:: DSLFLAG_MISMATCHED_PDB +.. autodata:: DSLFLAG_MISMATCHED_DBG +.. autodata:: FLAG_ENGINE_PRESENT +.. autodata:: FLAG_ENGOPT_DISALLOW_NETWORK_PATHS +.. autodata:: SYMOPT_CASE_INSENSITIVE +.. autodata:: SYMOPT_UNDNAME +.. autodata:: SYMOPT_DEFERRED_LOADS +.. autodata:: SYMOPT_NO_CPP +.. autodata:: SYMOPT_LOAD_LINES +.. autodata:: SYMOPT_OMAP_FIND_NEAREST +.. autodata:: SYMOPT_LOAD_ANYTHING +.. autodata:: SYMOPT_IGNORE_CVREC +.. autodata:: SYMOPT_NO_UNQUALIFIED_LOADS +.. autodata:: SYMOPT_FAIL_CRITICAL_ERRORS +.. autodata:: SYMOPT_EXACT_SYMBOLS +.. autodata:: SYMOPT_ALLOW_ABSOLUTE_SYMBOLS +.. autodata:: SYMOPT_IGNORE_NT_SYMPATH +.. autodata:: SYMOPT_INCLUDE_32BIT_MODULES +.. autodata:: SYMOPT_PUBLICS_ONLY +.. autodata:: SYMOPT_NO_PUBLICS +.. autodata:: SYMOPT_AUTO_PUBLICS +.. autodata:: SYMOPT_NO_IMAGE_SEARCH +.. autodata:: SYMOPT_SECURE +.. autodata:: SYMOPT_NO_PROMPTS +.. autodata:: SYMOPT_OVERWRITE +.. autodata:: SYMOPT_IGNORE_IMAGEDIR +.. autodata:: SYMOPT_FLAT_DIRECTORY +.. autodata:: SYMOPT_FAVOR_COMPRESSED +.. autodata:: SYMOPT_ALLOW_ZERO_ADDRESS +.. autodata:: SYMOPT_DISABLE_SYMSRV_AUTODETECT +.. autodata:: SYMOPT_READONLY_CACHE +.. autodata:: SYMOPT_SYMPATH_LAST +.. autodata:: SYMOPT_DISABLE_FAST_SYMBOLS +.. autodata:: SYMOPT_DISABLE_SYMSRV_TIMEOUT +.. autodata:: SYMOPT_DISABLE_SRVSTAR_ON_STARTUP +.. autodata:: SYMOPT_DEBUG +.. autodata:: VIRTUAL_STORAGE_TYPE_DEVICE_UNKNOWN +.. autodata:: VIRTUAL_STORAGE_TYPE_DEVICE_ISO +.. autodata:: VIRTUAL_STORAGE_TYPE_DEVICE_VHD +.. autodata:: VIRTUAL_STORAGE_TYPE_DEVICE_VHDX +.. autodata:: FILE_DEVICE_8042_PORT +.. autodata:: FILE_DEVICE_ACPI +.. autodata:: FILE_DEVICE_BATTERY +.. autodata:: FILE_DEVICE_BEEP +.. autodata:: FILE_DEVICE_BUS_EXTENDER +.. autodata:: FILE_DEVICE_CD_ROM +.. autodata:: FILE_DEVICE_CD_ROM_FILE_SYSTEM +.. autodata:: FILE_DEVICE_CHANGER +.. autodata:: FILE_DEVICE_CONTROLLER +.. autodata:: FILE_DEVICE_DATALINK +.. autodata:: FILE_DEVICE_DFS +.. autodata:: FILE_DEVICE_DFS_FILE_SYSTEM +.. autodata:: FILE_DEVICE_DFS_VOLUME +.. autodata:: FILE_DEVICE_DISK +.. autodata:: FILE_DEVICE_DISK_FILE_SYSTEM +.. autodata:: FILE_DEVICE_DVD +.. autodata:: FILE_DEVICE_FILE_SYSTEM +.. autodata:: FILE_DEVICE_FIPS +.. autodata:: FILE_DEVICE_FULLSCREEN_VIDEO +.. autodata:: FILE_DEVICE_INPORT_PORT +.. autodata:: FILE_DEVICE_KEYBOARD +.. autodata:: FILE_DEVICE_KS +.. autodata:: FILE_DEVICE_KSEC +.. autodata:: FILE_DEVICE_MAILSLOT +.. autodata:: FILE_DEVICE_MASS_STORAGE +.. autodata:: FILE_DEVICE_MIDI_IN +.. autodata:: FILE_DEVICE_MIDI_OUT +.. autodata:: FILE_DEVICE_MODEM +.. autodata:: FILE_DEVICE_MOUSE +.. autodata:: FILE_DEVICE_MULTI_UNC_PROVIDER +.. autodata:: FILE_DEVICE_NAMED_PIPE +.. autodata:: FILE_DEVICE_NETWORK +.. autodata:: FILE_DEVICE_NETWORK_BROWSER +.. autodata:: FILE_DEVICE_NETWORK_FILE_SYSTEM +.. autodata:: FILE_DEVICE_NETWORK_REDIRECTOR +.. autodata:: FILE_DEVICE_NULL +.. autodata:: FILE_DEVICE_PARALLEL_PORT +.. autodata:: FILE_DEVICE_PHYSICAL_NETCARD +.. autodata:: FILE_DEVICE_PRINTER +.. autodata:: FILE_DEVICE_SCANNER +.. autodata:: FILE_DEVICE_SCREEN +.. autodata:: FILE_DEVICE_SERENUM +.. autodata:: FILE_DEVICE_SERIAL_MOUSE_PORT +.. autodata:: FILE_DEVICE_SERIAL_PORT +.. autodata:: FILE_DEVICE_SMARTCARD +.. autodata:: FILE_DEVICE_SMB +.. autodata:: FILE_DEVICE_SOUND +.. autodata:: FILE_DEVICE_STREAMS +.. autodata:: FILE_DEVICE_TAPE +.. autodata:: FILE_DEVICE_TAPE_FILE_SYSTEM +.. autodata:: FILE_DEVICE_TERMSRV +.. autodata:: FILE_DEVICE_TRANSPORT +.. autodata:: FILE_DEVICE_UNKNOWN +.. autodata:: FILE_DEVICE_VDM +.. autodata:: FILE_DEVICE_VIDEO +.. autodata:: FILE_DEVICE_VIRTUAL_DISK +.. autodata:: FILE_DEVICE_WAVE_IN +.. autodata:: FILE_DEVICE_WAVE_OUT .. autodata:: CERT_QUERY_OBJECT_FILE .. autodata:: CERT_QUERY_OBJECT_BLOB .. autodata:: CERT_QUERY_CONTENT_CERT @@ -458,181 +1283,6 @@ WinDef .. autodata:: CMSG_CTRL_VERIFY_SIGNATURE_EX .. autodata:: CMSG_CTRL_ADD_CMS_SIGNER_INFO .. autodata:: CMSG_CTRL_ENABLE_STRONG_SIGNATURE -.. autodata:: HKEY_CLASSES_ROOT -.. autodata:: HKEY_CURRENT_USER -.. autodata:: HKEY_LOCAL_MACHINE -.. autodata:: HKEY_USERS -.. autodata:: HKEY_PERFORMANCE_DATA -.. autodata:: HKEY_PERFORMANCE_TEXT -.. autodata:: HKEY_PERFORMANCE_NLSTEXT -.. autodata:: HKEY_CURRENT_CONFIG -.. autodata:: HKEY_DYN_DATA -.. autodata:: HKEY_CURRENT_USER_LOCAL_SETTINGS -.. autodata:: SYMSEARCH_MASKOBJS -.. autodata:: SYMSEARCH_RECURSE -.. autodata:: SYMSEARCH_GLOBALSONLY -.. autodata:: SYMSEARCH_ALLITEMS -.. autodata:: CBA_DEFERRED_SYMBOL_LOAD_START -.. autodata:: CBA_DEFERRED_SYMBOL_LOAD_COMPLETE -.. autodata:: CBA_DEFERRED_SYMBOL_LOAD_FAILURE -.. autodata:: CBA_SYMBOLS_UNLOADED -.. autodata:: CBA_DUPLICATE_SYMBOL -.. autodata:: CBA_READ_MEMORY -.. autodata:: CBA_DEFERRED_SYMBOL_LOAD_CANCEL -.. autodata:: CBA_SET_OPTIONS -.. autodata:: CBA_EVENT -.. autodata:: CBA_DEFERRED_SYMBOL_LOAD_PARTIAL -.. autodata:: CBA_DEBUG_INFO -.. autodata:: CBA_SRCSRV_INFO -.. autodata:: CBA_SRCSRV_EVENT -.. autodata:: CBA_UPDATE_STATUS_BAR -.. autodata:: CBA_ENGINE_PRESENT -.. autodata:: CBA_CHECK_ENGOPT_DISALLOW_NETWORK_PATHS -.. autodata:: EVENT_SRCSPEW_START -.. autodata:: EVENT_SRCSPEW -.. autodata:: EVENT_SRCSPEW_END -.. autodata:: DSLFLAG_MISMATCHED_PDB -.. autodata:: DSLFLAG_MISMATCHED_DBG -.. autodata:: FLAG_ENGINE_PRESENT -.. autodata:: FLAG_ENGOPT_DISALLOW_NETWORK_PATHS -.. autodata:: SYMOPT_CASE_INSENSITIVE -.. autodata:: SYMOPT_UNDNAME -.. autodata:: SYMOPT_DEFERRED_LOADS -.. autodata:: SYMOPT_NO_CPP -.. autodata:: SYMOPT_LOAD_LINES -.. autodata:: SYMOPT_OMAP_FIND_NEAREST -.. autodata:: SYMOPT_LOAD_ANYTHING -.. autodata:: SYMOPT_IGNORE_CVREC -.. autodata:: SYMOPT_NO_UNQUALIFIED_LOADS -.. autodata:: SYMOPT_FAIL_CRITICAL_ERRORS -.. autodata:: SYMOPT_EXACT_SYMBOLS -.. autodata:: SYMOPT_ALLOW_ABSOLUTE_SYMBOLS -.. autodata:: SYMOPT_IGNORE_NT_SYMPATH -.. autodata:: SYMOPT_INCLUDE_32BIT_MODULES -.. autodata:: SYMOPT_PUBLICS_ONLY -.. autodata:: SYMOPT_NO_PUBLICS -.. autodata:: SYMOPT_AUTO_PUBLICS -.. autodata:: SYMOPT_NO_IMAGE_SEARCH -.. autodata:: SYMOPT_SECURE -.. autodata:: SYMOPT_NO_PROMPTS -.. autodata:: SYMOPT_OVERWRITE -.. autodata:: SYMOPT_IGNORE_IMAGEDIR -.. autodata:: SYMOPT_FLAT_DIRECTORY -.. autodata:: SYMOPT_FAVOR_COMPRESSED -.. autodata:: SYMOPT_ALLOW_ZERO_ADDRESS -.. autodata:: SYMOPT_DISABLE_SYMSRV_AUTODETECT -.. autodata:: SYMOPT_READONLY_CACHE -.. autodata:: SYMOPT_SYMPATH_LAST -.. autodata:: SYMOPT_DISABLE_FAST_SYMBOLS -.. autodata:: SYMOPT_DISABLE_SYMSRV_TIMEOUT -.. autodata:: SYMOPT_DISABLE_SRVSTAR_ON_STARTUP -.. autodata:: SYMOPT_DEBUG -.. autodata:: EVENTLOG_SUCCESS -.. autodata:: EVENTLOG_ERROR_TYPE -.. autodata:: EVENTLOG_WARNING_TYPE -.. autodata:: EVENTLOG_INFORMATION_TYPE -.. autodata:: EVENTLOG_AUDIT_SUCCESS -.. autodata:: EVENTLOG_AUDIT_FAILURE -.. autodata:: EVENTLOG_SEQUENTIAL_READ -.. autodata:: EVENTLOG_SEEK_READ -.. autodata:: EVENTLOG_FORWARDS_READ -.. autodata:: EVENTLOG_BACKWARDS_READ -.. autodata:: EVT_VARIANT_TYPE_MASK -.. autodata:: EVT_VARIANT_TYPE_ARRAY -.. autodata:: PIPE_ACCESS_INBOUND -.. autodata:: PIPE_ACCESS_OUTBOUND -.. autodata:: PIPE_ACCESS_DUPLEX -.. autodata:: PIPE_CLIENT_END -.. autodata:: PIPE_SERVER_END -.. autodata:: PIPE_WAIT -.. autodata:: PIPE_NOWAIT -.. autodata:: PIPE_READMODE_BYTE -.. autodata:: PIPE_READMODE_MESSAGE -.. autodata:: PIPE_TYPE_BYTE -.. autodata:: PIPE_TYPE_MESSAGE -.. autodata:: PIPE_ACCEPT_REMOTE_CLIENTS -.. autodata:: PIPE_REJECT_REMOTE_CLIENTS -.. autodata:: PIPE_UNLIMITED_INSTANCES -.. autodata:: NMPWAIT_WAIT_FOREVER -.. autodata:: NMPWAIT_NOWAIT -.. autodata:: NMPWAIT_USE_DEFAULT_WAIT -.. autodata:: VIRTUAL_STORAGE_TYPE_DEVICE_UNKNOWN -.. autodata:: VIRTUAL_STORAGE_TYPE_DEVICE_ISO -.. autodata:: VIRTUAL_STORAGE_TYPE_DEVICE_VHD -.. autodata:: VIRTUAL_STORAGE_TYPE_DEVICE_VHDX -.. autodata:: CWCSTORAGENAME -.. autodata:: STGM_DIRECT -.. autodata:: STGM_TRANSACTED -.. autodata:: STGM_SIMPLE -.. autodata:: STGM_READ -.. autodata:: STGM_WRITE -.. autodata:: STGM_READWRITE -.. autodata:: STGM_SHARE_DENY_NONE -.. autodata:: STGM_SHARE_DENY_READ -.. autodata:: STGM_SHARE_DENY_WRITE -.. autodata:: STGM_SHARE_EXCLUSIVE -.. autodata:: STGM_PRIORITY -.. autodata:: STGM_DELETEONRELEASE -.. autodata:: STGM_NOSCRATCH -.. autodata:: STGM_CREATE -.. autodata:: STGM_CONVERT -.. autodata:: STGM_FAILIFTHERE -.. autodata:: STGM_NOSNAPSHOT -.. autodata:: STGM_DIRECT_SWMR -.. autodata:: ASYNC_MODE_COMPATIBILITY -.. autodata:: ASYNC_MODE_DEFAULT -.. autodata:: STGTY_REPEAT -.. autodata:: STG_TOEND -.. autodata:: STG_LAYOUT_SEQUENTIAL -.. autodata:: STG_LAYOUT_INTERLEAVED -.. autodata:: STGFMT_STORAGE -.. autodata:: STGFMT_NATIVE -.. autodata:: STGFMT_FILE -.. autodata:: STGFMT_ANY -.. autodata:: STGFMT_DOCFILE -.. autodata:: STGFMT_DOCUMENT -.. autodata:: X86_KGDT_NULL -.. autodata:: X86_KGDT_R0_CODE -.. autodata:: X86_KGDT_R0_DATA -.. autodata:: X86_KGDT_R3_CODE -.. autodata:: X86_KGDT_R3_DATA -.. autodata:: X86_KGDT_TSS -.. autodata:: X86_KGDT_R0_PCR -.. autodata:: X86_KGDT_R3_TEB -.. autodata:: X86_KGDT_VDM_TILE -.. autodata:: X86_KGDT_LDT -.. autodata:: X86_KGDT_DF_TSS -.. autodata:: X86_KGDT_NMI_TSS -.. autodata:: X86_FRAME_EDITED -.. autodata:: X86_MODE_MASK -.. autodata:: X86_EFLAGS_V86_MASK -.. autodata:: AMD64_KGDT64_NULL -.. autodata:: AMD64_KGDT64_R0_CODE -.. autodata:: AMD64_KGDT64_R0_DATA -.. autodata:: AMD64_KGDT64_R3_CMCODE -.. autodata:: AMD64_KGDT64_R3_DATA -.. autodata:: AMD64_KGDT64_R3_CODE -.. autodata:: AMD64_KGDT64_SYS_TSS -.. autodata:: AMD64_KGDT64_R3_CMTEB -.. autodata:: AMD64_KGDT64_LAST -.. autodata:: MODE_BIT -.. autodata:: MODE_MASK -.. autodata:: RPL_MASK -.. autodata:: CS_USER_32B -.. autodata:: CS_USER_64B -.. autodata:: FC_ALLOCATE_ALL_NODES -.. autodata:: FC_DONT_FREE -.. autodata:: FC_ALLOCED_ON_STACK -.. autodata:: FC_SIMPLE_POINTER -.. autodata:: FC_POINTER_DEREF -.. autodata:: RPC_REQUEST_TYPE_CALL -.. autodata:: RPC_REQUEST_TYPE_BIND -.. autodata:: RPC_RESPONSE_TYPE_BIND_OK -.. autodata:: RPC_RESPONSE_TYPE_FAIL -.. autodata:: RPC_RESPONSE_TYPE_SUCCESS -.. autodata:: BIND_IF_SYNTAX_NDR32 -.. autodata:: BIND_IF_SYNTAX_NDR64 -.. autodata:: BIND_IF_SYNTAX_UNKNOWN .. autodata:: INVALID_HANDLE_VALUE .. autodata:: NULL .. autodata:: MAX_PATH @@ -1302,6 +1952,78 @@ WinDef .. autodata:: TXFS_MINIVERSION_COMMITTED_VIEW .. autodata:: TXFS_MINIVERSION_DIRTY_VIEW .. autodata:: TXFS_MINIVERSION_DEFAULT_VIEW +.. autodata:: TOKEN_SOURCE_LENGTH +.. autodata:: SID_HASH_SIZE +.. autodata:: TOKEN_MANDATORY_POLICY_OFF +.. autodata:: TOKEN_MANDATORY_POLICY_NO_WRITE_UP +.. autodata:: TOKEN_MANDATORY_POLICY_NEW_PROCESS_MIN +.. autodata:: TOKEN_MANDATORY_POLICY_VALID_MASK +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_INVALID +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_INT64 +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_UINT64 +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_STRING +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_FQBN +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_SID +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_BOOLEAN +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_OCTET_STRING +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_NON_INHERITABLE +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_VALUE_CASE_SENSITIVE +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_USE_FOR_DENY_ONLY +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_DISABLED_BY_DEFAULT +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_DISABLED +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_MANDATORY +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_VALID_FLAGS +.. autodata:: TOKEN_SECURITY_ATTRIBUTE_CUSTOM_FLAGS +.. autodata:: TOKEN_ASSIGN_PRIMARY +.. autodata:: TOKEN_DUPLICATE +.. autodata:: TOKEN_IMPERSONATE +.. autodata:: TOKEN_QUERY +.. autodata:: TOKEN_QUERY_SOURCE +.. autodata:: TOKEN_ADJUST_PRIVILEGES +.. autodata:: TOKEN_ADJUST_GROUPS +.. autodata:: TOKEN_ADJUST_DEFAULT +.. autodata:: TOKEN_ADJUST_SESSIONID +.. autodata:: TOKEN_ALL_ACCESS_P +.. autodata:: TOKEN_ALL_ACCESS +.. autodata:: SE_PRIVILEGE_ENABLED_BY_DEFAULT +.. autodata:: SE_PRIVILEGE_ENABLED +.. autodata:: SE_PRIVILEGE_REMOVED +.. autodata:: SE_PRIVILEGE_USED_FOR_ACCESS +.. autodata:: SE_CREATE_TOKEN_NAME +.. autodata:: SE_ASSIGNPRIMARYTOKEN_NAME +.. autodata:: SE_LOCK_MEMORY_NAME +.. autodata:: SE_INCREASE_QUOTA_NAME +.. autodata:: SE_UNSOLICITED_INPUT_NAME +.. autodata:: SE_MACHINE_ACCOUNT_NAME +.. autodata:: SE_TCB_NAME +.. autodata:: SE_SECURITY_NAME +.. autodata:: SE_TAKE_OWNERSHIP_NAME +.. autodata:: SE_LOAD_DRIVER_NAME +.. autodata:: SE_SYSTEM_PROFILE_NAME +.. autodata:: SE_SYSTEMTIME_NAME +.. autodata:: SE_PROF_SINGLE_PROCESS_NAME +.. autodata:: SE_INC_BASE_PRIORITY_NAME +.. autodata:: SE_CREATE_PAGEFILE_NAME +.. autodata:: SE_CREATE_PERMANENT_NAME +.. autodata:: SE_BACKUP_NAME +.. autodata:: SE_RESTORE_NAME +.. autodata:: SE_SHUTDOWN_NAME +.. autodata:: SE_DEBUG_NAME +.. autodata:: SE_AUDIT_NAME +.. autodata:: SE_SYSTEM_ENVIRONMENT_NAME +.. autodata:: SE_CHANGE_NOTIFY_NAME +.. autodata:: SE_REMOTE_SHUTDOWN_NAME +.. autodata:: SE_UNDOCK_NAME +.. autodata:: SE_SYNC_AGENT_NAME +.. autodata:: SE_ENABLE_DELEGATION_NAME +.. autodata:: SE_MANAGE_VOLUME_NAME +.. autodata:: SE_IMPERSONATE_NAME +.. autodata:: SE_CREATE_GLOBAL_NAME +.. autodata:: SE_TRUSTED_CREDMAN_ACCESS_NAME +.. autodata:: SE_RELABEL_NAME +.. autodata:: SE_INC_WORKING_SET_NAME +.. autodata:: SE_TIME_ZONE_NAME +.. autodata:: SE_CREATE_SYMBOLIC_LINK_NAME .. autodata:: ACCESS_SYSTEM_SECURITY .. autodata:: MAXIMUM_ALLOWED .. autodata:: FILE_READ_DATA @@ -1457,260 +2179,57 @@ WinDef .. autodata:: ADS_RIGHT_DS_DELETE_TREE .. autodata:: ADS_RIGHT_DS_LIST_OBJECT .. autodata:: ADS_RIGHT_DS_CONTROL_ACCESS -.. autodata:: PRODUCT_UNDEFINED -.. autodata:: PRODUCT_ULTIMATE -.. autodata:: PRODUCT_HOME_BASIC -.. autodata:: PRODUCT_HOME_PREMIUM -.. autodata:: PRODUCT_ENTERPRISE -.. autodata:: PRODUCT_HOME_BASIC_N -.. autodata:: PRODUCT_BUSINESS -.. autodata:: PRODUCT_STANDARD_SERVER -.. autodata:: PRODUCT_DATACENTER_SERVER -.. autodata:: PRODUCT_SMALLBUSINESS_SERVER -.. autodata:: PRODUCT_ENTERPRISE_SERVER -.. autodata:: PRODUCT_STARTER -.. autodata:: PRODUCT_DATACENTER_SERVER_CORE -.. autodata:: PRODUCT_STANDARD_SERVER_CORE -.. autodata:: PRODUCT_ENTERPRISE_SERVER_CORE -.. autodata:: PRODUCT_ENTERPRISE_SERVER_IA64 -.. autodata:: PRODUCT_BUSINESS_N -.. autodata:: PRODUCT_WEB_SERVER -.. autodata:: PRODUCT_CLUSTER_SERVER -.. autodata:: PRODUCT_HOME_SERVER -.. autodata:: PRODUCT_STORAGE_EXPRESS_SERVER -.. autodata:: PRODUCT_STORAGE_STANDARD_SERVER -.. autodata:: PRODUCT_STORAGE_WORKGROUP_SERVER -.. autodata:: PRODUCT_STORAGE_ENTERPRISE_SERVER -.. autodata:: PRODUCT_SERVER_FOR_SMALLBUSINESS -.. autodata:: PRODUCT_SMALLBUSINESS_SERVER_PREMIUM -.. autodata:: PRODUCT_HOME_PREMIUM_N -.. autodata:: PRODUCT_ENTERPRISE_N -.. autodata:: PRODUCT_ULTIMATE_N -.. autodata:: PRODUCT_WEB_SERVER_CORE -.. autodata:: PRODUCT_MEDIUMBUSINESS_SERVER_MANAGEMENT -.. autodata:: PRODUCT_MEDIUMBUSINESS_SERVER_SECURITY -.. autodata:: PRODUCT_MEDIUMBUSINESS_SERVER_MESSAGING -.. autodata:: PRODUCT_SERVER_FOUNDATION -.. autodata:: PRODUCT_HOME_PREMIUM_SERVER -.. autodata:: PRODUCT_SERVER_FOR_SMALLBUSINESS_V -.. autodata:: PRODUCT_STANDARD_SERVER_V -.. autodata:: PRODUCT_DATACENTER_SERVER_V -.. autodata:: PRODUCT_ENTERPRISE_SERVER_V -.. autodata:: PRODUCT_DATACENTER_SERVER_CORE_V -.. autodata:: PRODUCT_STANDARD_SERVER_CORE_V -.. autodata:: PRODUCT_ENTERPRISE_SERVER_CORE_V -.. autodata:: PRODUCT_HYPERV -.. autodata:: PRODUCT_STORAGE_EXPRESS_SERVER_CORE -.. autodata:: PRODUCT_STORAGE_STANDARD_SERVER_CORE -.. autodata:: PRODUCT_STORAGE_WORKGROUP_SERVER_CORE -.. autodata:: PRODUCT_STORAGE_ENTERPRISE_SERVER_CORE -.. autodata:: PRODUCT_STARTER_N -.. autodata:: PRODUCT_PROFESSIONAL -.. autodata:: PRODUCT_PROFESSIONAL_N -.. autodata:: PRODUCT_SB_SOLUTION_SERVER -.. autodata:: PRODUCT_SERVER_FOR_SB_SOLUTIONS -.. autodata:: PRODUCT_STANDARD_SERVER_SOLUTIONS -.. autodata:: PRODUCT_STANDARD_SERVER_SOLUTIONS_CORE -.. autodata:: PRODUCT_SB_SOLUTION_SERVER_EM -.. autodata:: PRODUCT_SERVER_FOR_SB_SOLUTIONS_EM -.. autodata:: PRODUCT_SOLUTION_EMBEDDEDSERVER -.. autodata:: PRODUCT_SOLUTION_EMBEDDEDSERVER_CORE -.. autodata:: PRODUCT_SMALLBUSINESS_SERVER_PREMIUM_CORE -.. autodata:: PRODUCT_ESSENTIALBUSINESS_SERVER_MGMT -.. autodata:: PRODUCT_ESSENTIALBUSINESS_SERVER_ADDL -.. autodata:: PRODUCT_ESSENTIALBUSINESS_SERVER_MGMTSVC -.. autodata:: PRODUCT_ESSENTIALBUSINESS_SERVER_ADDLSVC -.. autodata:: PRODUCT_CLUSTER_SERVER_V -.. autodata:: PRODUCT_EMBEDDED -.. autodata:: PRODUCT_STARTER_E -.. autodata:: PRODUCT_HOME_BASIC_E -.. autodata:: PRODUCT_HOME_PREMIUM_E -.. autodata:: PRODUCT_PROFESSIONAL_E -.. autodata:: PRODUCT_ENTERPRISE_E -.. autodata:: PRODUCT_ULTIMATE_E -.. autodata:: PRODUCT_ENTERPRISE_EVALUATION -.. autodata:: PRODUCT_MULTIPOINT_STANDARD_SERVER -.. autodata:: PRODUCT_MULTIPOINT_PREMIUM_SERVER -.. autodata:: PRODUCT_STANDARD_EVALUATION_SERVER -.. autodata:: PRODUCT_DATACENTER_EVALUATION_SERVER -.. autodata:: PRODUCT_ENTERPRISE_N_EVALUATION -.. autodata:: PRODUCT_STORAGE_WORKGROUP_EVALUATION_SERVER -.. autodata:: PRODUCT_STORAGE_STANDARD_EVALUATION_SERVER -.. autodata:: PRODUCT_CORE_ARM -.. autodata:: PRODUCT_CORE_N -.. autodata:: PRODUCT_CORE_COUNTRYSPECIFIC -.. autodata:: PRODUCT_CORE_LANGUAGESPECIFIC -.. autodata:: PRODUCT_CORE -.. autodata:: PRODUCT_PROFESSIONAL_WMC -.. autodata:: PRODUCT_UNLICENSED -.. autodata:: EVENT_TRACE_FLAG_DISPATCHER -.. autodata:: EVENT_TRACE_FLAG_VIRTUAL_ALLOC -.. autodata:: EVENT_TRACE_FLAG_VAMAP -.. autodata:: EVENT_TRACE_FLAG_NO_SYSCONFIG -.. autodata:: EVENT_TRACE_FLAG_EXTENSION -.. autodata:: EVENT_TRACE_FLAG_FORWARD_WMI -.. autodata:: EVENT_TRACE_FLAG_ENABLE_RESERVE -.. autodata:: EVENT_TRACE_FILE_MODE_NONE -.. autodata:: EVENT_TRACE_FILE_MODE_SEQUENTIAL -.. autodata:: EVENT_TRACE_FILE_MODE_CIRCULAR -.. autodata:: EVENT_TRACE_FILE_MODE_APPEND -.. autodata:: EVENT_TRACE_REAL_TIME_MODE -.. autodata:: EVENT_TRACE_DELAY_OPEN_FILE_MODE -.. autodata:: EVENT_TRACE_BUFFERING_MODE -.. autodata:: EVENT_TRACE_PRIVATE_LOGGER_MODE -.. autodata:: EVENT_TRACE_ADD_HEADER_MODE -.. autodata:: EVENT_TRACE_USE_GLOBAL_SEQUENCE -.. autodata:: EVENT_TRACE_USE_LOCAL_SEQUENCE -.. autodata:: EVENT_TRACE_RELOG_MODE -.. autodata:: EVENT_TRACE_USE_PAGED_MEMORY -.. autodata:: EVENT_TRACE_FILE_MODE_NEWFILE -.. autodata:: EVENT_TRACE_FILE_MODE_PREALLOCATE -.. autodata:: EVENT_TRACE_CONTROL_QUERY -.. autodata:: EVENT_TRACE_CONTROL_STOP -.. autodata:: EVENT_TRACE_CONTROL_UPDATE -.. autodata:: EVENT_TRACE_CONTROL_FLUSH -.. autodata:: PROCESS_TRACE_MODE_REAL_TIME -.. autodata:: PROCESS_TRACE_MODE_RAW_TIMESTAMP -.. autodata:: PROCESS_TRACE_MODE_EVENT_RECORD -.. autodata:: EVENT_HEADER_PROPERTY_XML -.. autodata:: EVENT_HEADER_PROPERTY_FORWARDED_XML -.. autodata:: EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG -.. autodata:: EVENT_HEADER_FLAG_EXTENDED_INFO -.. autodata:: EVENT_HEADER_FLAG_PRIVATE_SESSION -.. autodata:: EVENT_HEADER_FLAG_STRING_ONLY -.. autodata:: EVENT_HEADER_FLAG_TRACE_MESSAGE -.. autodata:: EVENT_HEADER_FLAG_NO_CPUTIME -.. autodata:: EVENT_HEADER_FLAG_32_BIT_HEADER -.. autodata:: EVENT_HEADER_FLAG_64_BIT_HEADER -.. autodata:: EVENT_HEADER_FLAG_CLASSIC_HEADER -.. autodata:: EVENT_HEADER_FLAG_PROCESSOR_INDEX -.. autodata:: EVENT_TRACE_TYPE_CONFIG_CPU -.. autodata:: EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK -.. autodata:: EVENT_TRACE_TYPE_CONFIG_LOGICALDISK -.. autodata:: EVENT_TRACE_TYPE_CONFIG_NIC -.. autodata:: EVENT_TRACE_TYPE_CONFIG_VIDEO -.. autodata:: EVENT_TRACE_TYPE_CONFIG_SERVICES -.. autodata:: EVENT_TRACE_TYPE_CONFIG_POWER -.. autodata:: EVENT_TRACE_TYPE_CONFIG_NETINFO -.. autodata:: EVENT_TRACE_FLAG_PROCESS -.. autodata:: EVENT_TRACE_FLAG_THREAD -.. autodata:: EVENT_TRACE_FLAG_IMAGE_LOAD -.. autodata:: EVENT_TRACE_FLAG_DISK_IO -.. autodata:: EVENT_TRACE_FLAG_DISK_FILE_IO -.. autodata:: EVENT_TRACE_FLAG_MEMORY_PAGE_FAULTS -.. autodata:: EVENT_TRACE_FLAG_MEMORY_HARD_FAULTS -.. autodata:: EVENT_TRACE_FLAG_NETWORK_TCPIP -.. autodata:: EVENT_TRACE_FLAG_REGISTRY -.. autodata:: EVENT_TRACE_FLAG_DBGPRINT -.. autodata:: EVENT_TRACE_FLAG_VOLMGR -.. autodata:: OS_WINDOWS -.. autodata:: OS_NT -.. autodata:: OS_WIN95ORGREATER -.. autodata:: OS_NT4ORGREATER -.. autodata:: OS_WIN98ORGREATER -.. autodata:: OS_WIN98_GOLD -.. autodata:: OS_WIN2000ORGREATER -.. autodata:: OS_WIN2000PRO -.. autodata:: OS_WIN2000SERVER -.. autodata:: OS_WIN2000ADVSERVER -.. autodata:: OS_WIN2000DATACENTER -.. autodata:: OS_WIN2000TERMINAL -.. autodata:: OS_EMBEDDED -.. autodata:: OS_TERMINALCLIENT -.. autodata:: OS_TERMINALREMOTEADMIN -.. autodata:: OS_WIN95_GOLD -.. autodata:: OS_MEORGREATER -.. autodata:: OS_XPORGREATER -.. autodata:: OS_HOME -.. autodata:: OS_PROFESSIONAL -.. autodata:: OS_DATACENTER -.. autodata:: OS_ADVSERVER -.. autodata:: OS_SERVER -.. autodata:: OS_TERMINALSERVER -.. autodata:: OS_PERSONALTERMINALSERVER -.. autodata:: OS_FASTUSERSWITCHING -.. autodata:: OS_WELCOMELOGONUI -.. autodata:: OS_DOMAINMEMBER -.. autodata:: OS_ANYSERVER -.. autodata:: OS_WOW6432 -.. autodata:: OS_WEBSERVER -.. autodata:: OS_SMALLBUSINESSSERVER -.. autodata:: OS_TABLETPC -.. autodata:: OS_SERVERADMINUI -.. autodata:: OS_MEDIACENTER -.. autodata:: OS_APPLIANCE -.. autodata:: TOKEN_SOURCE_LENGTH -.. autodata:: SID_HASH_SIZE -.. autodata:: TOKEN_MANDATORY_POLICY_OFF -.. autodata:: TOKEN_MANDATORY_POLICY_NO_WRITE_UP -.. autodata:: TOKEN_MANDATORY_POLICY_NEW_PROCESS_MIN -.. autodata:: TOKEN_MANDATORY_POLICY_VALID_MASK -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_INVALID -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_INT64 -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_UINT64 -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_STRING -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_FQBN -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_SID -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_BOOLEAN -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_TYPE_OCTET_STRING -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_NON_INHERITABLE -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_VALUE_CASE_SENSITIVE -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_USE_FOR_DENY_ONLY -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_DISABLED_BY_DEFAULT -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_DISABLED -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_MANDATORY -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_VALID_FLAGS -.. autodata:: TOKEN_SECURITY_ATTRIBUTE_CUSTOM_FLAGS -.. autodata:: TOKEN_ASSIGN_PRIMARY -.. autodata:: TOKEN_DUPLICATE -.. autodata:: TOKEN_IMPERSONATE -.. autodata:: TOKEN_QUERY -.. autodata:: TOKEN_QUERY_SOURCE -.. autodata:: TOKEN_ADJUST_PRIVILEGES -.. autodata:: TOKEN_ADJUST_GROUPS -.. autodata:: TOKEN_ADJUST_DEFAULT -.. autodata:: TOKEN_ADJUST_SESSIONID -.. autodata:: TOKEN_ALL_ACCESS_P -.. autodata:: TOKEN_ALL_ACCESS -.. autodata:: SE_PRIVILEGE_ENABLED_BY_DEFAULT -.. autodata:: SE_PRIVILEGE_ENABLED -.. autodata:: SE_PRIVILEGE_REMOVED -.. autodata:: SE_PRIVILEGE_USED_FOR_ACCESS -.. autodata:: SE_CREATE_TOKEN_NAME -.. autodata:: SE_ASSIGNPRIMARYTOKEN_NAME -.. autodata:: SE_LOCK_MEMORY_NAME -.. autodata:: SE_INCREASE_QUOTA_NAME -.. autodata:: SE_UNSOLICITED_INPUT_NAME -.. autodata:: SE_MACHINE_ACCOUNT_NAME -.. autodata:: SE_TCB_NAME -.. autodata:: SE_SECURITY_NAME -.. autodata:: SE_TAKE_OWNERSHIP_NAME -.. autodata:: SE_LOAD_DRIVER_NAME -.. autodata:: SE_SYSTEM_PROFILE_NAME -.. autodata:: SE_SYSTEMTIME_NAME -.. autodata:: SE_PROF_SINGLE_PROCESS_NAME -.. autodata:: SE_INC_BASE_PRIORITY_NAME -.. autodata:: SE_CREATE_PAGEFILE_NAME -.. autodata:: SE_CREATE_PERMANENT_NAME -.. autodata:: SE_BACKUP_NAME -.. autodata:: SE_RESTORE_NAME -.. autodata:: SE_SHUTDOWN_NAME -.. autodata:: SE_DEBUG_NAME -.. autodata:: SE_AUDIT_NAME -.. autodata:: SE_SYSTEM_ENVIRONMENT_NAME -.. autodata:: SE_CHANGE_NOTIFY_NAME -.. autodata:: SE_REMOTE_SHUTDOWN_NAME -.. autodata:: SE_UNDOCK_NAME -.. autodata:: SE_SYNC_AGENT_NAME -.. autodata:: SE_ENABLE_DELEGATION_NAME -.. autodata:: SE_MANAGE_VOLUME_NAME -.. autodata:: SE_IMPERSONATE_NAME -.. autodata:: SE_CREATE_GLOBAL_NAME -.. autodata:: SE_TRUSTED_CREDMAN_ACCESS_NAME -.. autodata:: SE_RELABEL_NAME -.. autodata:: SE_INC_WORKING_SET_NAME -.. autodata:: SE_TIME_ZONE_NAME -.. autodata:: SE_CREATE_SYMBOLIC_LINK_NAME +.. autodata:: POLICY_VIEW_LOCAL_INFORMATION +.. autodata:: POLICY_VIEW_AUDIT_INFORMATION +.. autodata:: POLICY_GET_PRIVATE_INFORMATION +.. autodata:: POLICY_TRUST_ADMIN +.. autodata:: POLICY_CREATE_ACCOUNT +.. autodata:: POLICY_CREATE_SECRET +.. autodata:: POLICY_CREATE_PRIVILEGE +.. autodata:: POLICY_SET_DEFAULT_QUOTA_LIMITS +.. autodata:: POLICY_SET_AUDIT_REQUIREMENTS +.. autodata:: POLICY_AUDIT_LOG_ADMIN +.. autodata:: POLICY_SERVER_ADMIN +.. autodata:: POLICY_LOOKUP_NAMES +.. autodata:: POLICY_NOTIFICATION +.. autodata:: POLICY_ALL_ACCESS +.. autodata:: IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA +.. autodata:: IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE +.. autodata:: IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY +.. autodata:: IMAGE_DLLCHARACTERISTICS_NX_COMPAT +.. autodata:: IMAGE_DLLCHARACTERISTICS_NO_ISOLATION +.. autodata:: IMAGE_DLLCHARACTERISTICS_NO_SEH +.. autodata:: IMAGE_DLLCHARACTERISTICS_NO_BIND +.. autodata:: IMAGE_DLLCHARACTERISTICS_APPCONTAINER +.. autodata:: IMAGE_DLLCHARACTERISTICS_WDM_DRIVER +.. autodata:: IMAGE_DLLCHARACTERISTICS_GUARD_CF +.. autodata:: IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE +.. autodata:: IMAGE_DIRECTORY_ENTRY_EXPORT +.. autodata:: IMAGE_DIRECTORY_ENTRY_IMPORT +.. autodata:: IMAGE_DIRECTORY_ENTRY_RESOURCE +.. autodata:: IMAGE_DIRECTORY_ENTRY_EXCEPTION +.. autodata:: IMAGE_DIRECTORY_ENTRY_SECURITY +.. autodata:: IMAGE_DIRECTORY_ENTRY_BASERELOC +.. autodata:: IMAGE_DIRECTORY_ENTRY_DEBUG +.. autodata:: IMAGE_DIRECTORY_ENTRY_ARCHITECTURE +.. autodata:: IMAGE_DIRECTORY_ENTRY_GLOBALPTR +.. autodata:: IMAGE_DIRECTORY_ENTRY_TLS +.. autodata:: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG +.. autodata:: IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT +.. autodata:: IMAGE_DIRECTORY_ENTRY_IAT +.. autodata:: IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT +.. autodata:: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR +.. autodata:: IMAGE_REL_BASED_ABSOLUTE +.. autodata:: IMAGE_REL_BASED_HIGH +.. autodata:: IMAGE_REL_BASED_LOW +.. autodata:: IMAGE_REL_BASED_HIGHLOW +.. autodata:: IMAGE_REL_BASED_HIGHADJ +.. autodata:: IMAGE_REL_BASED_MACHINE_SPECIFIC_5 +.. autodata:: IMAGE_REL_BASED_RESERVED +.. autodata:: IMAGE_REL_BASED_MACHINE_SPECIFIC_7 +.. autodata:: IMAGE_REL_BASED_MACHINE_SPECIFIC_8 +.. autodata:: IMAGE_REL_BASED_MACHINE_SPECIFIC_9 +.. autodata:: IMAGE_REL_BASED_DIR64 .. autodata:: SERVICE_TRIGGER_TYPE_DEVICE_INTERFACE_ARRIVAL .. autodata:: SERVICE_TRIGGER_TYPE_IP_ADDRESS_AVAILABILITY .. autodata:: SERVICE_TRIGGER_TYPE_DOMAIN_JOIN @@ -1784,232 +2303,40 @@ WinDef .. autodata:: SERVICE_ACCEPT_PRESHUTDOWN .. autodata:: SERVICE_ACCEPT_TIMECHANGE .. autodata:: SERVICE_ACCEPT_TRIGGEREVENT -.. autodata:: ATM_E164 -.. autodata:: ATM_NSAP -.. autodata:: ATM_AESA -.. autodata:: ATM_ADDR_SIZE -.. autodata:: DNS_ATMA_FORMAT_E164 -.. autodata:: DNS_ATMA_FORMAT_AESA -.. autodata:: DNS_ATMA_MAX_ADDR_LENGTH -.. autodata:: DNS_TYPE_ZERO -.. autodata:: DNS_TYPE_A -.. autodata:: DNS_TYPE_NS -.. autodata:: DNS_TYPE_MD -.. autodata:: DNS_TYPE_MF -.. autodata:: DNS_TYPE_CNAME -.. autodata:: DNS_TYPE_SOA -.. autodata:: DNS_TYPE_MB -.. autodata:: DNS_TYPE_MG -.. autodata:: DNS_TYPE_MR -.. autodata:: DNS_TYPE_NULL -.. autodata:: DNS_TYPE_WKS -.. autodata:: DNS_TYPE_PTR -.. autodata:: DNS_TYPE_HINFO -.. autodata:: DNS_TYPE_MINFO -.. autodata:: DNS_TYPE_MX -.. autodata:: DNS_TYPE_TEXT -.. autodata:: DNS_TYPE_RP -.. autodata:: DNS_TYPE_AFSDB -.. autodata:: DNS_TYPE_X25 -.. autodata:: DNS_TYPE_ISDN -.. autodata:: DNS_TYPE_RT -.. autodata:: DNS_TYPE_NSAP -.. autodata:: DNS_TYPE_NSAPPTR -.. autodata:: DNS_TYPE_SIG -.. autodata:: DNS_TYPE_KEY -.. autodata:: DNS_TYPE_PX -.. autodata:: DNS_TYPE_GPOS -.. autodata:: DNS_TYPE_AAAA -.. autodata:: DNS_TYPE_LOC -.. autodata:: DNS_TYPE_NXT -.. autodata:: DNS_TYPE_EID -.. autodata:: DNS_TYPE_NIMLOC -.. autodata:: DNS_TYPE_SRV -.. autodata:: DNS_TYPE_ATMA -.. autodata:: DNS_TYPE_NAPTR -.. autodata:: DNS_TYPE_KX -.. autodata:: DNS_TYPE_CERT -.. autodata:: DNS_TYPE_A6 -.. autodata:: DNS_TYPE_DNAME -.. autodata:: DNS_TYPE_SINK -.. autodata:: DNS_TYPE_OPT -.. autodata:: DNS_TYPE_DS -.. autodata:: DNS_TYPE_RRSIG -.. autodata:: DNS_TYPE_NSEC -.. autodata:: DNS_TYPE_DNSKEY -.. autodata:: DNS_TYPE_DHCID -.. autodata:: DNS_TYPE_NSEC3 -.. autodata:: DNS_TYPE_NSEC3PARAM -.. autodata:: DNS_TYPE_UINFO -.. autodata:: DNS_TYPE_UID -.. autodata:: DNS_TYPE_GID -.. autodata:: DNS_TYPE_UNSPEC -.. autodata:: DNS_TYPE_ADDRS -.. autodata:: DNS_TYPE_TKEY -.. autodata:: DNS_TYPE_TSIG -.. autodata:: DNS_TYPE_IXFR -.. autodata:: DNS_TYPE_AXFR -.. autodata:: DNS_TYPE_MAILB -.. autodata:: DNS_TYPE_MAILA -.. autodata:: DNS_TYPE_ALL -.. autodata:: DNS_TYPE_ANY -.. autodata:: DNS_TYPE_WINS -.. autodata:: DNS_TYPE_WINSR -.. autodata:: DNS_TYPE_NBSTAT -.. autodata:: DNS_QUERY_STANDARD -.. autodata:: DNS_QUERY_ACCEPT_TRUNCATED_RESPONSE -.. autodata:: DNS_QUERY_USE_TCP_ONLY -.. autodata:: DNS_QUERY_NO_RECURSION -.. autodata:: DNS_QUERY_BYPASS_CACHE -.. autodata:: DNS_QUERY_NO_WIRE_QUERY -.. autodata:: DNS_QUERY_NO_LOCAL_NAME -.. autodata:: DNS_QUERY_NO_HOSTS_FILE -.. autodata:: DNS_QUERY_NO_NETBT -.. autodata:: DNS_QUERY_WIRE_ONLY -.. autodata:: DNS_QUERY_RETURN_MESSAGE -.. autodata:: DNS_QUERY_MULTICAST_ONLY -.. autodata:: DNS_QUERY_NO_MULTICAST -.. autodata:: DNS_QUERY_TREAT_AS_FQDN -.. autodata:: DNS_QUERY_ADDRCONFIG -.. autodata:: DNS_QUERY_DUAL_ADDR -.. autodata:: DNS_QUERY_DONT_RESET_TTL_VALUES -.. autodata:: DNS_QUERY_DISABLE_IDN_ENCODING -.. autodata:: DNS_QUERY_APPEND_MULTILABEL -.. autodata:: DNS_QUERY_DNSSEC_OK -.. autodata:: DNS_QUERY_DNSSEC_CHECKING_DISABLED -.. autodata:: DNS_QUERY_RESERVED -.. autodata:: ACCESS_MIN_MS_ACE_TYPE -.. autodata:: ACCESS_ALLOWED_ACE_TYPE -.. autodata:: ACCESS_DENIED_ACE_TYPE -.. autodata:: SYSTEM_AUDIT_ACE_TYPE -.. autodata:: SYSTEM_ALARM_ACE_TYPE -.. autodata:: ACCESS_MAX_MS_V2_ACE_TYPE -.. autodata:: ACCESS_ALLOWED_COMPOUND_ACE_TYPE -.. autodata:: ACCESS_MAX_MS_V3_ACE_TYPE -.. autodata:: ACCESS_MIN_MS_OBJECT_ACE_TYPE -.. autodata:: ACCESS_ALLOWED_OBJECT_ACE_TYPE -.. autodata:: ACCESS_DENIED_OBJECT_ACE_TYPE -.. autodata:: SYSTEM_AUDIT_OBJECT_ACE_TYPE -.. autodata:: SYSTEM_ALARM_OBJECT_ACE_TYPE -.. autodata:: ACCESS_MAX_MS_OBJECT_ACE_TYPE -.. autodata:: ACCESS_MAX_MS_V4_ACE_TYPE -.. autodata:: ACCESS_MAX_MS_ACE_TYPE -.. autodata:: ACCESS_ALLOWED_CALLBACK_ACE_TYPE -.. autodata:: ACCESS_DENIED_CALLBACK_ACE_TYPE -.. autodata:: ACCESS_ALLOWED_CALLBACK_OBJECT_ACE_TYPE -.. autodata:: ACCESS_DENIED_CALLBACK_OBJECT_ACE_TYPE -.. autodata:: SYSTEM_AUDIT_CALLBACK_ACE_TYPE -.. autodata:: SYSTEM_ALARM_CALLBACK_ACE_TYPE -.. autodata:: SYSTEM_AUDIT_CALLBACK_OBJECT_ACE_TYPE -.. autodata:: SYSTEM_ALARM_CALLBACK_OBJECT_ACE_TYPE -.. autodata:: SYSTEM_MANDATORY_LABEL_ACE_TYPE -.. autodata:: ACCESS_MAX_MS_V5_ACE_TYPE -.. autodata:: SYSTEM_RESOURCE_ATTRIBUTE_ACE_TYPE -.. autodata:: SYSTEM_SCOPED_POLICY_ID_ACE_TYPE -.. autodata:: SYSTEM_PROCESS_TRUST_LABEL_ACE_TYPE -.. autodata:: ACCESS_MAX_MS_V5_ACE_TYPE -.. autodata:: SEC_WINNT_AUTH_IDENTITY_ANSI -.. autodata:: SEC_WINNT_AUTH_IDENTITY_UNICODE -.. autodata:: SE_OWNER_DEFAULTED -.. autodata:: SE_GROUP_DEFAULTED -.. autodata:: SE_DACL_PRESENT -.. autodata:: SE_DACL_DEFAULTED -.. autodata:: SE_SACL_PRESENT -.. autodata:: SE_SACL_DEFAULTED -.. autodata:: SE_DACL_UNTRUSTED -.. autodata:: SE_SERVER_SECURITY -.. autodata:: SE_DACL_AUTO_INHERIT_REQ -.. autodata:: SE_SACL_AUTO_INHERIT_REQ -.. autodata:: SE_DACL_AUTO_INHERITED -.. autodata:: SE_SACL_AUTO_INHERITED -.. autodata:: SE_DACL_PROTECTED -.. autodata:: SE_SACL_PROTECTED -.. autodata:: SE_RM_CONTROL_VALID -.. autodata:: SE_SELF_RELATIVE -.. autodata:: SDDL_REVISION_1 -.. autodata:: ACE_OBJECT_TYPE_PRESENT -.. autodata:: ACE_INHERITED_OBJECT_TYPE_PRESENT -.. autodata:: OBJECT_INHERIT_ACE -.. autodata:: CONTAINER_INHERIT_ACE -.. autodata:: NO_PROPAGATE_INHERIT_ACE -.. autodata:: INHERIT_ONLY_ACE -.. autodata:: INHERITED_ACE -.. autodata:: VALID_INHERIT_FLAGS -.. autodata:: SUCCESSFUL_ACCESS_ACE_FLAG -.. autodata:: FAILED_ACCESS_ACE_FLAG -.. autodata:: SYSTEM_MANDATORY_LABEL_NO_WRITE_UP -.. autodata:: SYSTEM_MANDATORY_LABEL_NO_READ_UP -.. autodata:: SYSTEM_MANDATORY_LABEL_NO_EXECUTE_UP -.. autodata:: SYSTEM_PROCESS_TRUST_LABEL_VALID_MASK -.. autodata:: SYSTEM_PROCESS_TRUST_NOCONSTRAINT_MASK -.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_INVALID -.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_INT64 -.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_UINT64 -.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_STRING -.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_FQBN -.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_SID -.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_BOOLEAN -.. autodata:: CLAIM_SECURITY_ATTRIBUTE_TYPE_OCTET_STRING -.. autodata:: SE_GROUP_MANDATORY -.. autodata:: SE_GROUP_ENABLED_BY_DEFAULT -.. autodata:: SE_GROUP_ENABLED -.. autodata:: SE_GROUP_OWNER -.. autodata:: SE_GROUP_USE_FOR_DENY_ONLY -.. autodata:: SE_GROUP_INTEGRITY -.. autodata:: SE_GROUP_INTEGRITY_ENABLED -.. autodata:: SE_GROUP_LOGON_ID -.. autodata:: SE_GROUP_RESOURCE -.. autodata:: SE_GROUP_VALID_ATTRIBUTES -.. autodata:: OWNER_SECURITY_INFORMATION -.. autodata:: GROUP_SECURITY_INFORMATION -.. autodata:: DACL_SECURITY_INFORMATION -.. autodata:: SACL_SECURITY_INFORMATION -.. autodata:: LABEL_SECURITY_INFORMATION -.. autodata:: ATTRIBUTE_SECURITY_INFORMATION -.. autodata:: SCOPE_SECURITY_INFORMATION -.. autodata:: PROCESS_TRUST_LABEL_SECURITY_INFORMATION -.. autodata:: BACKUP_SECURITY_INFORMATION -.. autodata:: PROTECTED_DACL_SECURITY_INFORMATION -.. autodata:: PROTECTED_SACL_SECURITY_INFORMATION -.. autodata:: UNPROTECTED_DACL_SECURITY_INFORMATION -.. autodata:: UNPROTECTED_SACL_SECURITY_INFORMATION -.. autodata:: IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA -.. autodata:: IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE -.. autodata:: IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY -.. autodata:: IMAGE_DLLCHARACTERISTICS_NX_COMPAT -.. autodata:: IMAGE_DLLCHARACTERISTICS_NO_ISOLATION -.. autodata:: IMAGE_DLLCHARACTERISTICS_NO_SEH -.. autodata:: IMAGE_DLLCHARACTERISTICS_NO_BIND -.. autodata:: IMAGE_DLLCHARACTERISTICS_APPCONTAINER -.. autodata:: IMAGE_DLLCHARACTERISTICS_WDM_DRIVER -.. autodata:: IMAGE_DLLCHARACTERISTICS_GUARD_CF -.. autodata:: IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE -.. autodata:: IMAGE_DIRECTORY_ENTRY_EXPORT -.. autodata:: IMAGE_DIRECTORY_ENTRY_IMPORT -.. autodata:: IMAGE_DIRECTORY_ENTRY_RESOURCE -.. autodata:: IMAGE_DIRECTORY_ENTRY_EXCEPTION -.. autodata:: IMAGE_DIRECTORY_ENTRY_SECURITY -.. autodata:: IMAGE_DIRECTORY_ENTRY_BASERELOC -.. autodata:: IMAGE_DIRECTORY_ENTRY_DEBUG -.. autodata:: IMAGE_DIRECTORY_ENTRY_ARCHITECTURE -.. autodata:: IMAGE_DIRECTORY_ENTRY_GLOBALPTR -.. autodata:: IMAGE_DIRECTORY_ENTRY_TLS -.. autodata:: IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG -.. autodata:: IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT -.. autodata:: IMAGE_DIRECTORY_ENTRY_IAT -.. autodata:: IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT -.. autodata:: IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR -.. autodata:: IMAGE_REL_BASED_ABSOLUTE -.. autodata:: IMAGE_REL_BASED_HIGH -.. autodata:: IMAGE_REL_BASED_LOW -.. autodata:: IMAGE_REL_BASED_HIGHLOW -.. autodata:: IMAGE_REL_BASED_HIGHADJ -.. autodata:: IMAGE_REL_BASED_MACHINE_SPECIFIC_5 -.. autodata:: IMAGE_REL_BASED_RESERVED -.. autodata:: IMAGE_REL_BASED_MACHINE_SPECIFIC_7 -.. autodata:: IMAGE_REL_BASED_MACHINE_SPECIFIC_8 -.. autodata:: IMAGE_REL_BASED_MACHINE_SPECIFIC_9 -.. autodata:: IMAGE_REL_BASED_DIR64 +.. autodata:: CWCSTORAGENAME +.. autodata:: STGM_DIRECT +.. autodata:: STGM_TRANSACTED +.. autodata:: STGM_SIMPLE +.. autodata:: STGM_READ +.. autodata:: STGM_WRITE +.. autodata:: STGM_READWRITE +.. autodata:: STGM_SHARE_DENY_NONE +.. autodata:: STGM_SHARE_DENY_READ +.. autodata:: STGM_SHARE_DENY_WRITE +.. autodata:: STGM_SHARE_EXCLUSIVE +.. autodata:: STGM_PRIORITY +.. autodata:: STGM_DELETEONRELEASE +.. autodata:: STGM_NOSCRATCH +.. autodata:: STGM_CREATE +.. autodata:: STGM_CONVERT +.. autodata:: STGM_FAILIFTHERE +.. autodata:: STGM_NOSNAPSHOT +.. autodata:: STGM_DIRECT_SWMR +.. autodata:: ASYNC_MODE_COMPATIBILITY +.. autodata:: ASYNC_MODE_DEFAULT +.. autodata:: STGTY_REPEAT +.. autodata:: STG_TOEND +.. autodata:: STG_LAYOUT_SEQUENTIAL +.. autodata:: STG_LAYOUT_INTERLEAVED +.. autodata:: STGFMT_STORAGE +.. autodata:: STGFMT_NATIVE +.. autodata:: STGFMT_FILE +.. autodata:: STGFMT_ANY +.. autodata:: STGFMT_DOCFILE +.. autodata:: STGFMT_DOCUMENT +.. autodata:: FILE_VER_GET_LOCALISED +.. autodata:: FILE_VER_GET_NEUTRAL +.. autodata:: FILE_VER_GET_PREFETCHED .. autodata:: szOID_TRUSTED_CODESIGNING_CA_LIST .. autodata:: szOID_TRUSTED_CLIENT_AUTH_CA_LIST .. autodata:: szOID_TRUSTED_SERVER_AUTH_CA_LIST diff --git a/docs/source/winerror_generated.rst b/docs/source/winerror_generated.rst index a647954..76115af 100644 --- a/docs/source/winerror_generated.rst +++ b/docs/source/winerror_generated.rst @@ -1,7 +1,7 @@ .. currentmodule:: windows.generated_def WinError ------- +-------- .. autodata:: FACILITY_NULL .. autodata:: FACILITY_RPC .. autodata:: FACILITY_DISPATCH diff --git a/docs/source/winobject.rst b/docs/source/winobject.rst index 4b99dc8..7ba437e 100644 --- a/docs/source/winobject.rst +++ b/docs/source/winobject.rst @@ -22,4 +22,5 @@ This sections describes them by group of relation. object_manager.rst device_manager.rst task_scheduler.rst - evtlog.rst \ No newline at end of file + evtlog.rst + etw.rst \ No newline at end of file diff --git a/docs/source/winstructs_generated.rst b/docs/source/winstructs_generated.rst index 8b2f53d..d68f98e 100644 --- a/docs/source/winstructs_generated.rst +++ b/docs/source/winstructs_generated.rst @@ -1119,6 +1119,879 @@ _BG_FILE_RANGE :class:`UINT64` +IO_Des_s +'''''''' +.. class:: PIO_DES + + Pointer to :class:`IO_Des_s` + +.. class:: IO_DES + + Alias for :class:`IO_Des_s` + +.. class:: IO_Des_s + + .. attribute:: IOD_Count + + :class:`DWORD` + + + .. attribute:: IOD_Type + + :class:`DWORD` + + + .. attribute:: IOD_Alloc_Base + + :class:`DWORDLONG` + + + .. attribute:: IOD_Alloc_End + + :class:`DWORDLONG` + + + .. attribute:: IOD_DesFlags + + :class:`DWORD` + +IO_Range_s +'''''''''' +.. class:: IO_RANGE + + Alias for :class:`IO_Range_s` + +.. class:: PIO_RANGE + + Pointer to :class:`IO_Range_s` + +.. class:: IO_Range_s + + .. attribute:: IOR_Align + + :class:`DWORDLONG` + + + .. attribute:: IOR_nPorts + + :class:`DWORD` + + + .. attribute:: IOR_Min + + :class:`DWORDLONG` + + + .. attribute:: IOR_Max + + :class:`DWORDLONG` + + + .. attribute:: IOR_RangeFlags + + :class:`DWORD` + + + .. attribute:: IOR_Alias + + :class:`DWORDLONG` + +Mem_Des_s +''''''''' +.. class:: MEM_DES + + Alias for :class:`Mem_Des_s` + +.. class:: PMEM_DES + + Pointer to :class:`Mem_Des_s` + +.. class:: Mem_Des_s + + .. attribute:: MD_Count + + :class:`DWORD` + + + .. attribute:: MD_Type + + :class:`DWORD` + + + .. attribute:: MD_Alloc_Base + + :class:`DWORDLONG` + + + .. attribute:: MD_Alloc_End + + :class:`DWORDLONG` + + + .. attribute:: MD_Flags + + :class:`DWORD` + + + .. attribute:: MD_Reserved + + :class:`DWORD` + +Mem_Range_s +''''''''''' +.. class:: MEM_RANGE + + Alias for :class:`Mem_Range_s` + +.. class:: PMEM_RANGE + + Pointer to :class:`Mem_Range_s` + +.. class:: Mem_Range_s + + .. attribute:: MR_Align + + :class:`DWORDLONG` + + + .. attribute:: MR_nBytes + + :class:`ULONG` + + + .. attribute:: MR_Min + + :class:`DWORDLONG` + + + .. attribute:: MR_Max + + :class:`DWORDLONG` + + + .. attribute:: MR_Flags + + :class:`DWORD` + + + .. attribute:: MR_Reserved + + :class:`DWORD` + +DMA_Des_s +''''''''' +.. class:: PDMA_DES + + Pointer to :class:`DMA_Des_s` + +.. class:: DMA_DES + + Alias for :class:`DMA_Des_s` + +.. class:: DMA_Des_s + + .. attribute:: DD_Count + + :class:`DWORD` + + + .. attribute:: DD_Type + + :class:`DWORD` + + + .. attribute:: DD_Flags + + :class:`DWORD` + + + .. attribute:: DD_Alloc_Chan + + :class:`ULONG` + +DMA_Range_s +''''''''''' +.. class:: DMA_RANGE + + Alias for :class:`DMA_Range_s` + +.. class:: PDMA_RANGE + + Pointer to :class:`DMA_Range_s` + +.. class:: DMA_Range_s + + .. attribute:: DR_Min + + :class:`ULONG` + + + .. attribute:: DR_Max + + :class:`ULONG` + + + .. attribute:: DR_Flags + + :class:`ULONG` + +IRQ_Des_64_s +'''''''''''' +.. class:: IRQ_DES_64 + + Alias for :class:`IRQ_Des_64_s` + +.. class:: PIRQ_DES_64 + + Pointer to :class:`IRQ_Des_64_s` + +.. class:: IRQ_Des_64_s + + .. attribute:: IRQD_Count + + :class:`DWORD` + + + .. attribute:: IRQD_Type + + :class:`DWORD` + + + .. attribute:: IRQD_Flags + + :class:`DWORD` + + + .. attribute:: IRQD_Alloc_Num + + :class:`ULONG` + + + .. attribute:: IRQD_Affinity + + :class:`ULONG64` + +IRQ_Des_32_s +'''''''''''' +.. class:: PIRQ_DES_32 + + Pointer to :class:`IRQ_Des_32_s` + +.. class:: IRQ_DES_32 + + Alias for :class:`IRQ_Des_32_s` + +.. class:: IRQ_Des_32_s + + .. attribute:: IRQD_Count + + :class:`DWORD` + + + .. attribute:: IRQD_Type + + :class:`DWORD` + + + .. attribute:: IRQD_Flags + + :class:`DWORD` + + + .. attribute:: IRQD_Alloc_Num + + :class:`ULONG` + + + .. attribute:: IRQD_Affinity + + :class:`ULONG32` + +IRQ_Range_s +''''''''''' +.. class:: IRQ_RANGE + + Alias for :class:`IRQ_Range_s` + +.. class:: PIRQ_RANGE + + Pointer to :class:`IRQ_Range_s` + +.. class:: IRQ_Range_s + + .. attribute:: IRQR_Min + + :class:`ULONG` + + + .. attribute:: IRQR_Max + + :class:`ULONG` + + + .. attribute:: IRQR_Flags + + :class:`ULONG` + +BusNumber_Des_s +''''''''''''''' +.. class:: BUSNUMBER_DES + + Alias for :class:`BusNumber_Des_s` + +.. class:: PBUSNUMBER_DES + + Pointer to :class:`BusNumber_Des_s` + +.. class:: BusNumber_Des_s + + .. attribute:: BUSD_Count + + :class:`DWORD` + + + .. attribute:: BUSD_Type + + :class:`DWORD` + + + .. attribute:: BUSD_Flags + + :class:`DWORD` + + + .. attribute:: BUSD_Alloc_Base + + :class:`ULONG` + + + .. attribute:: BUSD_Alloc_End + + :class:`ULONG` + +BusNumber_Range_s +''''''''''''''''' +.. class:: PBUSNUMBER_RANGE + + Pointer to :class:`BusNumber_Range_s` + +.. class:: BUSNUMBER_RANGE + + Alias for :class:`BusNumber_Range_s` + +.. class:: BusNumber_Range_s + + .. attribute:: BUSR_Min + + :class:`ULONG` + + + .. attribute:: BUSR_Max + + :class:`ULONG` + + + .. attribute:: BUSR_nBusNumbers + + :class:`ULONG` + + + .. attribute:: BUSR_Flags + + :class:`ULONG` + +BusNumber_Resource_s +'''''''''''''''''''' +.. class:: BUSNUMBER_RESOURCE + + Alias for :class:`BusNumber_Resource_s` + +.. class:: PBUSNUMBER_RESOURCE + + Pointer to :class:`BusNumber_Resource_s` + +.. class:: BusNumber_Resource_s + + .. attribute:: BusNumber_Header + + :class:`BUSNUMBER_DES` + + + .. attribute:: BusNumber_Data + + :class:`BUSNUMBER_RANGE` ``[]`` + +CS_Des_s +'''''''' +.. class:: PCS_DES + + Pointer to :class:`CS_Des_s` + +.. class:: CS_DES + + Alias for :class:`CS_Des_s` + +.. class:: CS_Des_s + + .. attribute:: CSD_SignatureLength + + :class:`DWORD` + + + .. attribute:: CSD_LegacyDataOffset + + :class:`DWORD` + + + .. attribute:: CSD_LegacyDataSize + + :class:`DWORD` + + + .. attribute:: CSD_Flags + + :class:`DWORD` + + + .. attribute:: CSD_ClassGuid + + :class:`GUID` + + + .. attribute:: CSD_Signature + + :class:`BYTE` ``[]`` + +CS_Resource_s +''''''''''''' +.. class:: PCS_RESOURCE + + Pointer to :class:`CS_Resource_s` + +.. class:: CS_RESOURCE + + Alias for :class:`CS_Resource_s` + +.. class:: CS_Resource_s + + .. attribute:: CS_Header + + :class:`CS_DES` + +DMA_Des_s +''''''''' +.. class:: PDMA_DES + + Pointer to :class:`DMA_Des_s` + +.. class:: DMA_DES + + Alias for :class:`DMA_Des_s` + +.. class:: DMA_Des_s + + .. attribute:: DD_Count + + :class:`DWORD` + + + .. attribute:: DD_Type + + :class:`DWORD` + + + .. attribute:: DD_Flags + + :class:`DWORD` + + + .. attribute:: DD_Alloc_Chan + + :class:`ULONG` + +DMA_Resource_s +'''''''''''''' +.. class:: PDMA_RESOURCE + + Pointer to :class:`DMA_Resource_s` + +.. class:: DMA_RESOURCE + + Alias for :class:`DMA_Resource_s` + +.. class:: DMA_Resource_s + + .. attribute:: DMA_Header + + :class:`DMA_DES` + + + .. attribute:: DMA_Data + + :class:`DMA_RANGE` ``[]`` + +IO_Des_s +'''''''' +.. class:: PIO_DES + + Pointer to :class:`IO_Des_s` + +.. class:: IO_DES + + Alias for :class:`IO_Des_s` + +.. class:: IO_Des_s + + .. attribute:: IOD_Count + + :class:`DWORD` + + + .. attribute:: IOD_Type + + :class:`DWORD` + + + .. attribute:: IOD_Alloc_Base + + :class:`DWORDLONG` + + + .. attribute:: IOD_Alloc_End + + :class:`DWORDLONG` + + + .. attribute:: IOD_DesFlags + + :class:`DWORD` + +IO_Resource_s +''''''''''''' +.. class:: IO_RESOURCE + + Alias for :class:`IO_Resource_s` + +.. class:: PIO_RESOURCE + + Pointer to :class:`IO_Resource_s` + +.. class:: IO_Resource_s + + .. attribute:: IO_Header + + :class:`IO_DES` + + + .. attribute:: IO_Data + + :class:`IO_RANGE` ``[]`` + +IRQ_Resource_32_s +''''''''''''''''' +.. class:: PIRQ_RESOURCE_32 + + Pointer to :class:`IRQ_Resource_32_s` + +.. class:: IRQ_RESOURCE_32 + + Alias for :class:`IRQ_Resource_32_s` + +.. class:: IRQ_Resource_32_s + + .. attribute:: IRQ_Header + + :class:`IRQ_DES_32` + + + .. attribute:: IRQ_Data + + :class:`IRQ_RANGE` ``[]`` + +IRQ_Resource_64_s +''''''''''''''''' +.. class:: IRQ_RESOURCE_64 + + Alias for :class:`IRQ_Resource_64_s` + +.. class:: PIRQ_RESOURCE_64 + + Pointer to :class:`IRQ_Resource_64_s` + +.. class:: IRQ_Resource_64_s + + .. attribute:: IRQ_Header + + :class:`IRQ_DES_64` + + + .. attribute:: IRQ_Data + + :class:`IRQ_RANGE` ``[]`` + +Mem_Resource_s +'''''''''''''' +.. class:: MEM_RESOURCE + + Alias for :class:`Mem_Resource_s` + +.. class:: PMEM_RESOURCE + + Pointer to :class:`Mem_Resource_s` + +.. class:: Mem_Resource_s + + .. attribute:: MEM_Header + + :class:`MEM_DES` + + + .. attribute:: MEM_Data + + :class:`MEM_RANGE` ``[]`` + +MfCard_Des_s +'''''''''''' +.. class:: MFCARD_DES + + Alias for :class:`MfCard_Des_s` + +.. class:: PMFCARD_DES + + Pointer to :class:`MfCard_Des_s` + +.. class:: MfCard_Des_s + + .. attribute:: PMF_Count + + :class:`DWORD` + + + .. attribute:: PMF_Type + + :class:`DWORD` + + + .. attribute:: PMF_Flags + + :class:`DWORD` + + + .. attribute:: PMF_ConfigOptions + + :class:`BYTE` + + + .. attribute:: PMF_IoResourceIndex + + :class:`BYTE` + + + .. attribute:: PMF_Reserved + + :class:`BYTE` ``[]`` + + + .. attribute:: PMF_ConfigRegisterBase + + :class:`DWORD` + +MfCard_Resource_s +''''''''''''''''' +.. class:: PMFCARD_RESOURCE + + Pointer to :class:`MfCard_Resource_s` + +.. class:: MFCARD_RESOURCE + + Alias for :class:`MfCard_Resource_s` + +.. class:: MfCard_Resource_s + + .. attribute:: MfCard_Header + + :class:`MFCARD_DES` + +PcCard_Des_s +'''''''''''' +.. class:: PCCARD_DES + + Alias for :class:`PcCard_Des_s` + +.. class:: PPCCARD_DES + + Pointer to :class:`PcCard_Des_s` + +.. class:: PcCard_Des_s + + .. attribute:: PCD_Count + + :class:`DWORD` + + + .. attribute:: PCD_Type + + :class:`DWORD` + + + .. attribute:: PCD_Flags + + :class:`DWORD` + + + .. attribute:: PCD_ConfigIndex + + :class:`BYTE` + + + .. attribute:: PCD_Reserved + + :class:`BYTE` ``[]`` + + + .. attribute:: PCD_MemoryCardBase1 + + :class:`DWORD` + + + .. attribute:: PCD_MemoryCardBase2 + + :class:`DWORD` + + + .. attribute:: PCD_MemoryCardBase + + :class:`DWORD` ``[]`` + + + .. attribute:: PCD_MemoryFlags + + :class:`WORD` ``[]`` + + + .. attribute:: PCD_IoFlags + + :class:`BYTE` ``[]`` + +PcCard_Resource_s +''''''''''''''''' +.. class:: PPCCARD_RESOURCE + + Pointer to :class:`PcCard_Resource_s` + +.. class:: PCCARD_RESOURCE + + Alias for :class:`PcCard_Resource_s` + +.. class:: PcCard_Resource_s + + .. attribute:: PcCard_Header + + :class:`PCCARD_DES` + +Mem_Large_Range_s +''''''''''''''''' +.. class:: PMEM_LARGE_RANGE + + Pointer to :class:`Mem_Large_Range_s` + +.. class:: MEM_LARGE_RANGE + + Alias for :class:`Mem_Large_Range_s` + +.. class:: Mem_Large_Range_s + + .. attribute:: MLR_Align + + :class:`DWORDLONG` + + + .. attribute:: MLR_nBytes + + :class:`ULONGLONG` + + + .. attribute:: MLR_Min + + :class:`DWORDLONG` + + + .. attribute:: MLR_Max + + :class:`DWORDLONG` + + + .. attribute:: MLR_Flags + + :class:`DWORD` + + + .. attribute:: MLR_Reserved + + :class:`DWORD` + +Mem_Large_Des_s +''''''''''''''' +.. class:: PMEM_LARGE_DES + + Pointer to :class:`Mem_Large_Des_s` + +.. class:: MEM_LARGE_DES + + Alias for :class:`Mem_Large_Des_s` + +.. class:: Mem_Large_Des_s + + .. attribute:: MLD_Count + + :class:`DWORD` + + + .. attribute:: MLD_Type + + :class:`DWORD` + + + .. attribute:: MLD_Alloc_Base + + :class:`DWORDLONG` + + + .. attribute:: MLD_Alloc_End + + :class:`DWORDLONG` + + + .. attribute:: MLD_Flags + + :class:`DWORD` + + + .. attribute:: MLD_Reserved + + :class:`DWORD` + +Mem_Large_Resource_s +'''''''''''''''''''' +.. class:: MEM_LARGE_RESOURCE + + Alias for :class:`Mem_Large_Resource_s` + +.. class:: PMEM_LARGE_RESOURCE + + Pointer to :class:`Mem_Large_Resource_s` + +.. class:: Mem_Large_Resource_s + + .. attribute:: MEM_LARGE_Header + + :class:`MEM_LARGE_DES` + + + .. attribute:: MEM_LARGE_Data + + :class:`MEM_LARGE_RANGE` ``[]`` + tagMULTI_QI ''''''''''' .. class:: MULTI_QI @@ -1434,7 +2307,7 @@ tagSAFEARRAY .. attribute:: rgsabound - :class:`SAFEARRAYBOUND` ``[]`` + :class:`SAFEARRAYBOUND` ``[]`` __tagBRECORD '''''''''''' @@ -1894,7 +2767,7 @@ tagARRAYDESC .. attribute:: rgbounds - :class:`SAFEARRAYBOUND` ``[]`` + :class:`SAFEARRAYBOUND` ``[]`` tagELEMDESC ''''''''''' @@ -6775,7 +7648,7 @@ _FILE_NAME_INFORMATION .. attribute:: FileName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _FILE_NETWORK_OPEN_INFORMATION '''''''''''''''''''''''''''''' @@ -6997,7 +7870,7 @@ _FILE_STREAM_INFORMATION .. attribute:: StreamName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _FILE_DISPOSITION_INFORMATION ''''''''''''''''''''''''''''' @@ -7049,7 +7922,7 @@ _FILE_FULL_EA_INFORMATION .. attribute:: EaName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` _FILE_GET_EA_INFORMATION '''''''''''''''''''''''' @@ -7075,7 +7948,7 @@ _FILE_GET_EA_INFORMATION .. attribute:: EaName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` tagVS_FIXEDFILEINFO ''''''''''''''''''' @@ -7178,7 +8051,7 @@ _FILE_LINK_INFORMATION .. attribute:: FileName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _WIN32_FIND_DATAA ''''''''''''''''' @@ -7238,12 +8111,12 @@ _WIN32_FIND_DATAA .. attribute:: cFileName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: cAlternateFileName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: dwFileType @@ -7318,12 +8191,12 @@ _WIN32_FIND_DATAW .. attribute:: cFileName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: cAlternateFileName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: dwFileType @@ -7397,7 +8270,252 @@ _GUID .. attribute:: Data4 - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` + +_LSA_OBJECT_ATTRIBUTES +'''''''''''''''''''''' +.. class:: PLSA_OBJECT_ATTRIBUTES + + Pointer to :class:`_LSA_OBJECT_ATTRIBUTES` + +.. class:: LSA_OBJECT_ATTRIBUTES + + Alias for :class:`_LSA_OBJECT_ATTRIBUTES` + +.. class:: _LSA_OBJECT_ATTRIBUTES + + .. attribute:: Length + + :class:`ULONG` + + + .. attribute:: RootDirectory + + :class:`HANDLE` + + + .. attribute:: ObjectName + + :class:`PLSA_UNICODE_STRING` + + + .. attribute:: Attributes + + :class:`ULONG` + + + .. attribute:: SecurityDescriptor + + :class:`PVOID` + + + .. attribute:: SecurityQualityOfService + + :class:`PVOID` + +_POLICY_PRIMARY_DOMAIN_INFO +''''''''''''''''''''''''''' +.. class:: PPOLICY_PRIMARY_DOMAIN_INFO + + Pointer to :class:`_POLICY_PRIMARY_DOMAIN_INFO` + +.. class:: POLICY_PRIMARY_DOMAIN_INFO + + Alias for :class:`_POLICY_PRIMARY_DOMAIN_INFO` + +.. class:: _POLICY_PRIMARY_DOMAIN_INFO + + .. attribute:: Name + + :class:`LSA_UNICODE_STRING` + + + .. attribute:: Sid + + :class:`PSID` + +_POLICY_LSA_SERVER_ROLE_INFO +'''''''''''''''''''''''''''' +.. class:: POLICY_LSA_SERVER_ROLE_INFO + + Alias for :class:`_POLICY_LSA_SERVER_ROLE_INFO` + +.. class:: PPOLICY_LSA_SERVER_ROLE_INFO + + Pointer to :class:`_POLICY_LSA_SERVER_ROLE_INFO` + +.. class:: _POLICY_LSA_SERVER_ROLE_INFO + + .. attribute:: LsaServerRole + + :class:`POLICY_LSA_SERVER_ROLE` + +_POLICY_ACCOUNT_DOMAIN_INFO +''''''''''''''''''''''''''' +.. class:: POLICY_ACCOUNT_DOMAIN_INFO + + Alias for :class:`_POLICY_ACCOUNT_DOMAIN_INFO` + +.. class:: PPOLICY_ACCOUNT_DOMAIN_INFO + + Pointer to :class:`_POLICY_ACCOUNT_DOMAIN_INFO` + +.. class:: _POLICY_ACCOUNT_DOMAIN_INFO + + .. attribute:: DomainName + + :class:`LSA_UNICODE_STRING` + + + .. attribute:: DomainSid + + :class:`PSID` + +_POLICY_PRIMARY_DOMAIN_INFO +''''''''''''''''''''''''''' +.. class:: PPOLICY_PRIMARY_DOMAIN_INFO + + Pointer to :class:`_POLICY_PRIMARY_DOMAIN_INFO` + +.. class:: POLICY_PRIMARY_DOMAIN_INFO + + Alias for :class:`_POLICY_PRIMARY_DOMAIN_INFO` + +.. class:: _POLICY_PRIMARY_DOMAIN_INFO + + .. attribute:: Name + + :class:`LSA_UNICODE_STRING` + + + .. attribute:: Sid + + :class:`PSID` + +_LSA_TRANSLATED_SID +''''''''''''''''''' +.. class:: LSA_TRANSLATED_SID + + Alias for :class:`_LSA_TRANSLATED_SID` + +.. class:: PLSA_TRANSLATED_SID + + Pointer to :class:`_LSA_TRANSLATED_SID` + +.. class:: _LSA_TRANSLATED_SID + + .. attribute:: Use + + :class:`SID_NAME_USE` + + + .. attribute:: RelativeId + + :class:`ULONG` + + + .. attribute:: DomainIndex + + :class:`LONG` + +_LSA_TRANSLATED_SID2 +'''''''''''''''''''' +.. class:: PLSA_TRANSLATED_SID2 + + Pointer to :class:`_LSA_TRANSLATED_SID2` + +.. class:: LSA_TRANSLATED_SID2 + + Alias for :class:`_LSA_TRANSLATED_SID2` + +.. class:: _LSA_TRANSLATED_SID2 + + .. attribute:: Use + + :class:`SID_NAME_USE` + + + .. attribute:: Sid + + :class:`PSID` + + + .. attribute:: DomainIndex + + :class:`LONG` + + + .. attribute:: Flags + + :class:`ULONG` + +_LSA_TRANSLATED_NAME +'''''''''''''''''''' +.. class:: LSA_TRANSLATED_NAME + + Alias for :class:`_LSA_TRANSLATED_NAME` + +.. class:: PLSA_TRANSLATED_NAME + + Pointer to :class:`_LSA_TRANSLATED_NAME` + +.. class:: _LSA_TRANSLATED_NAME + + .. attribute:: Use + + :class:`SID_NAME_USE` + + + .. attribute:: Name + + :class:`LSA_UNICODE_STRING` + + + .. attribute:: DomainIndex + + :class:`LONG` + +_LSA_TRUST_INFORMATION +'''''''''''''''''''''' +.. class:: LSA_TRUST_INFORMATION + + Alias for :class:`_LSA_TRUST_INFORMATION` + +.. class:: PLSA_TRUST_INFORMATION + + Pointer to :class:`_LSA_TRUST_INFORMATION` + +.. class:: _LSA_TRUST_INFORMATION + + .. attribute:: Name + + :class:`LSA_UNICODE_STRING` + + + .. attribute:: Sid + + :class:`PSID` + +_LSA_REFERENCED_DOMAIN_LIST +''''''''''''''''''''''''''' +.. class:: LSA_REFERENCED_DOMAIN_LIST + + Alias for :class:`_LSA_REFERENCED_DOMAIN_LIST` + +.. class:: PLSA_REFERENCED_DOMAIN_LIST + + Pointer to :class:`_LSA_REFERENCED_DOMAIN_LIST` + +.. class:: _LSA_REFERENCED_DOMAIN_LIST + + .. attribute:: Entries + + :class:`ULONG` + + + .. attribute:: Domains + + :class:`PLSA_TRUST_INFORMATION` _PROCESS_MITIGATION_DEP_POLICY '''''''''''''''''''''''''''''' @@ -7562,7 +8680,7 @@ IP6_ADDRESS .. attribute:: IP6Qword - :class:`ULONGLONG` ``[]`` + :class:`ULONGLONG` ``[]`` _MIB_IPADDRROW_XP ''''''''''''''''' @@ -7633,7 +8751,7 @@ _MIB_IPADDRTABLE .. attribute:: table - :class:`MIB_IPADDRROW` ``[]`` + :class:`MIB_IPADDRROW` ``[]`` _MIB_IFROW '''''''''' @@ -7649,7 +8767,7 @@ _MIB_IFROW .. attribute:: wszName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: dwIndex @@ -7679,7 +8797,7 @@ _MIB_IFROW .. attribute:: bPhysAddr - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` .. attribute:: dwAdminStatus @@ -7764,7 +8882,7 @@ _MIB_IFROW .. attribute:: bDescr - :class:`UCHAR` ``[]`` + :class:`UCHAR` ``[]`` _MIB_IFTABLE '''''''''''' @@ -7785,7 +8903,7 @@ _MIB_IFTABLE .. attribute:: table - :class:`MIB_IFROW` ``[]`` + :class:`MIB_IFROW` ``[]`` _MIB_TCPROW_OWNER_PID ''''''''''''''''''''' @@ -7847,7 +8965,7 @@ _MIB_TCPTABLE_OWNER_PID .. attribute:: table - :class:`MIB_TCPROW_OWNER_PID` ``[]`` + :class:`MIB_TCPROW_OWNER_PID` ``[]`` _MIB_UDPROW_OWNER_PID ''''''''''''''''''''' @@ -7894,7 +9012,7 @@ _MIB_UDPTABLE_OWNER_PID .. attribute:: table - :class:`MIB_UDPROW_OWNER_PID` ``[]`` + :class:`MIB_UDPROW_OWNER_PID` ``[]`` _MIB_UDP6ROW_OWNER_PID '''''''''''''''''''''' @@ -7910,7 +9028,7 @@ _MIB_UDP6ROW_OWNER_PID .. attribute:: ucLocalAddr - :class:`UCHAR` ``[]`` + :class:`UCHAR` ``[]`` .. attribute:: dwLocalScopeId @@ -7946,7 +9064,7 @@ _MIB_UDP6TABLE_OWNER_PID .. attribute:: table - :class:`MIB_UDP6ROW_OWNER_PID` ``[]`` + :class:`MIB_UDP6ROW_OWNER_PID` ``[]`` _MIB_TCP6ROW_OWNER_PID '''''''''''''''''''''' @@ -7962,7 +9080,7 @@ _MIB_TCP6ROW_OWNER_PID .. attribute:: ucLocalAddr - :class:`UCHAR` ``[]`` + :class:`UCHAR` ``[]`` .. attribute:: dwLocalScopeId @@ -7977,7 +9095,7 @@ _MIB_TCP6ROW_OWNER_PID .. attribute:: ucRemoteAddr - :class:`UCHAR` ``[]`` + :class:`UCHAR` ``[]`` .. attribute:: dwRemoteScopeId @@ -8018,7 +9136,7 @@ _MIB_TCP6TABLE_OWNER_PID .. attribute:: table - :class:`MIB_TCP6ROW_OWNER_PID` ``[]`` + :class:`MIB_TCP6ROW_OWNER_PID` ``[]`` _MIB_TCPROW ''''''''''' @@ -8075,7 +9193,7 @@ _IP_ADAPTER_INDEX_MAP .. attribute:: Name - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _IP_INTERFACE_INFO '''''''''''''''''' @@ -8096,7 +9214,7 @@ _IP_INTERFACE_INFO .. attribute:: Adapter - :class:`IP_ADAPTER_INDEX_MAP` ``[]`` + :class:`IP_ADAPTER_INDEX_MAP` ``[]`` _DNS_CACHE_ENTRY '''''''''''''''' @@ -8387,7 +9505,7 @@ DNS_TXT_DATAW .. attribute:: pStringArray - :class:`PWSTR` ``[]`` + :class:`PWSTR` ``[]`` DNS_TXT_DATAA ''''''''''''' @@ -8408,7 +9526,7 @@ DNS_TXT_DATAA .. attribute:: pStringArray - :class:`PSTR` ``[]`` + :class:`PSTR` ``[]`` DNS_NULL_DATA ''''''''''''' @@ -8429,7 +9547,7 @@ DNS_NULL_DATA .. attribute:: Data - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_WKS_DATA '''''''''''' @@ -8455,7 +9573,7 @@ DNS_WKS_DATA .. attribute:: BitMask - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_AAAA_DATA ''''''''''''' @@ -8540,7 +9658,7 @@ DNS_SIG_DATAW .. attribute:: Signature - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_SIG_DATAA ''''''''''''' @@ -8609,7 +9727,7 @@ DNS_SIG_DATAA .. attribute:: Signature - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_KEY_DATA '''''''''''' @@ -8658,7 +9776,7 @@ DNS_KEY_DATA .. attribute:: Key - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_DHCID_DATA '''''''''''''' @@ -8679,7 +9797,7 @@ DNS_DHCID_DATA .. attribute:: DHCID - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_NSEC_DATAW '''''''''''''' @@ -8710,7 +9828,7 @@ DNS_NSEC_DATAW .. attribute:: TypeBitMaps - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_NSEC_DATAA '''''''''''''' @@ -8741,7 +9859,7 @@ DNS_NSEC_DATAA .. attribute:: TypeBitMaps - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_NSEC3_DATA '''''''''''''' @@ -8787,7 +9905,7 @@ DNS_NSEC3_DATA .. attribute:: chData - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_NSEC3PARAM_DATA ''''''''''''''''''' @@ -8823,12 +9941,12 @@ DNS_NSEC3PARAM_DATA .. attribute:: bPad - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` .. attribute:: pbSalt - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_DS_DATA ''''''''''' @@ -8869,7 +9987,7 @@ DNS_DS_DATA .. attribute:: Digest - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_OPT_DATA '''''''''''' @@ -8895,7 +10013,7 @@ DNS_OPT_DATA .. attribute:: Data - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_LOC_DATA '''''''''''' @@ -8967,7 +10085,7 @@ DNS_NXT_DATAW .. attribute:: wTypes - :class:`WORD` ``[]`` + :class:`WORD` ``[]`` DNS_NXT_DATAA ''''''''''''' @@ -8993,7 +10111,7 @@ DNS_NXT_DATAA .. attribute:: wTypes - :class:`WORD` ``[]`` + :class:`WORD` ``[]`` DNS_SRV_DATAW ''''''''''''' @@ -9168,7 +10286,7 @@ DNS_ATMA_DATA .. attribute:: Address - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_TKEY_DATAW '''''''''''''' @@ -9488,7 +10606,7 @@ DNS_WINS_DATA .. attribute:: WinsServers - :class:`IP4_ADDRESS` ``[]`` + :class:`IP4_ADDRESS` ``[]`` DNS_WINSR_DATAW ''''''''''''''' @@ -9586,12 +10704,12 @@ DNS_TLSA_DATA .. attribute:: bPad - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` .. attribute:: bCertificateAssociationData - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` DNS_UNKNOWN_DATA '''''''''''''''' @@ -9612,7 +10730,7 @@ DNS_UNKNOWN_DATA .. attribute:: bData - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` _DnsRecordFlags ''''''''''''''' @@ -9777,7 +10895,7 @@ _KEY_VALUE_BASIC_INFORMATION .. attribute:: Name - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _KEY_VALUE_FULL_INFORMATION ''''''''''''''''''''''''''' @@ -9818,7 +10936,7 @@ _KEY_VALUE_FULL_INFORMATION .. attribute:: Name - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _KEY_VALUE_PARTIAL_INFORMATION '''''''''''''''''''''''''''''' @@ -9849,7 +10967,7 @@ _KEY_VALUE_PARTIAL_INFORMATION .. attribute:: Data - :class:`UCHAR` ``[]`` + :class:`UCHAR` ``[]`` _ACL '''' @@ -10597,27 +11715,27 @@ _CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1_UNION .. attribute:: pInt64 - :class:`DWORD` ``[]`` + :class:`DWORD` ``[]`` .. attribute:: pUint64 - :class:`DWORD` ``[]`` + :class:`DWORD` ``[]`` .. attribute:: ppString - :class:`DWORD` ``[]`` + :class:`DWORD` ``[]`` .. attribute:: pFqbn - :class:`DWORD` ``[]`` + :class:`DWORD` ``[]`` .. attribute:: pOctetString - :class:`DWORD` ``[]`` + :class:`DWORD` ``[]`` _CLAIM_SECURITY_ATTRIBUTE_RELATIVE_V1 ''''''''''''''''''''''''''''''''''''' @@ -10721,7 +11839,7 @@ _CLAIM_SECURITY_ATTRIBUTE_OCTET_STRING_RELATIVE .. attribute:: OctetString - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` _CLAIM_SECURITY_ATTRIBUTE_V1_UNION '''''''''''''''''''''''''''''''''' @@ -10940,7 +12058,247 @@ _PRIVILEGE_SET .. attribute:: Privilege - :class:`LUID_AND_ATTRIBUTES` ``[]`` + :class:`LUID_AND_ATTRIBUTES` ``[]`` + +_OBJECTS_AND_NAME_A +''''''''''''''''''' +.. class:: OBJECTS_AND_NAME_A + + Alias for :class:`_OBJECTS_AND_NAME_A` + +.. class:: POBJECTS_AND_NAME_A + + Pointer to :class:`_OBJECTS_AND_NAME_A` + +.. class:: _OBJECTS_AND_NAME_A + + .. attribute:: ObjectsPresent + + :class:`DWORD` + + + .. attribute:: ObjectType + + :class:`SE_OBJECT_TYPE` + + + .. attribute:: ObjectTypeName + + :class:`LPSTR` + + + .. attribute:: InheritedObjectTypeName + + :class:`LPSTR` + + + .. attribute:: ptstrName + + :class:`LPSTR` + +_OBJECTS_AND_SID +'''''''''''''''' +.. class:: POBJECTS_AND_SID + + Pointer to :class:`_OBJECTS_AND_SID` + +.. class:: OBJECTS_AND_SID + + Alias for :class:`_OBJECTS_AND_SID` + +.. class:: _OBJECTS_AND_SID + + .. attribute:: ObjectsPresent + + :class:`DWORD` + + + .. attribute:: ObjectTypeGuid + + :class:`GUID` + + + .. attribute:: InheritedObjectTypeGuid + + :class:`GUID` + + + .. attribute:: pSid + + :class:`PSID` + +_TRUSTEE_A +'''''''''' +.. class:: PTRUSTEEA + + Pointer to :class:`_TRUSTEE_A` + +.. class:: TRUSTEEA + + Alias for :class:`_TRUSTEE_A` + +.. class:: TRUSTEE_A + + Alias for :class:`_TRUSTEE_A` + +.. class:: PTRUSTEE_A + + Pointer to :class:`_TRUSTEE_A` + +.. class:: _TRUSTEE_A + + .. attribute:: pMultipleTrustee + + :class:`_TRUSTEE_A` + + + .. attribute:: MultipleTrusteeOperation + + :class:`MULTIPLE_TRUSTEE_OPERATION` + + + .. attribute:: TrusteeForm + + :class:`TRUSTEE_FORM` + + + .. attribute:: TrusteeType + + :class:`TRUSTEE_TYPE` + + + .. attribute:: anon_01 + + :class:`_ANON__TRUSTEE_A_SUB_UNION_1` + + + .. attribute:: ptstrName + + :class:`LPCH` + +_OBJECTS_AND_NAME_W +''''''''''''''''''' +.. class:: OBJECTS_AND_NAME_W + + Alias for :class:`_OBJECTS_AND_NAME_W` + +.. class:: POBJECTS_AND_NAME_W + + Pointer to :class:`_OBJECTS_AND_NAME_W` + +.. class:: _OBJECTS_AND_NAME_W + + .. attribute:: ObjectsPresent + + :class:`DWORD` + + + .. attribute:: ObjectType + + :class:`SE_OBJECT_TYPE` + + + .. attribute:: ObjectTypeName + + :class:`LPWSTR` + + + .. attribute:: InheritedObjectTypeName + + :class:`LPWSTR` + + + .. attribute:: ptstrName + + :class:`LPWSTR` + +_TRUSTEE_W +'''''''''' +.. class:: PTRUSTEE_W + + Pointer to :class:`_TRUSTEE_W` + +.. class:: TRUSTEE_W + + Alias for :class:`_TRUSTEE_W` + +.. class:: PTRUSTEEW + + Pointer to :class:`_TRUSTEE_W` + +.. class:: TRUSTEEW + + Alias for :class:`_TRUSTEE_W` + +.. class:: _TRUSTEE_W + + .. attribute:: pMultipleTrustee + + :class:`_TRUSTEE_W` + + + .. attribute:: MultipleTrusteeOperation + + :class:`MULTIPLE_TRUSTEE_OPERATION` + + + .. attribute:: TrusteeForm + + :class:`TRUSTEE_FORM` + + + .. attribute:: TrusteeType + + :class:`TRUSTEE_TYPE` + + + .. attribute:: anon_01 + + :class:`_ANON__TRUSTEE_W_SUB_UNION_1` + + + .. attribute:: ptstrName + + :class:`LPWCH` + +_EXPLICIT_ACCESS_W +'''''''''''''''''' +.. class:: EXPLICIT_ACCESSW + + Alias for :class:`_EXPLICIT_ACCESS_W` + +.. class:: PEXPLICIT_ACCESSW + + Pointer to :class:`_EXPLICIT_ACCESS_W` + +.. class:: PEXPLICIT_ACCESS_W + + Pointer to :class:`_EXPLICIT_ACCESS_W` + +.. class:: EXPLICIT_ACCESS_W + + Alias for :class:`_EXPLICIT_ACCESS_W` + +.. class:: _EXPLICIT_ACCESS_W + + .. attribute:: grfAccessPermissions + + :class:`DWORD` + + + .. attribute:: grfAccessMode + + :class:`ACCESS_MODE` + + + .. attribute:: grfInheritance + + :class:`DWORD` + + + .. attribute:: Trustee + + :class:`TRUSTEE_W` _SERVICE_STATUS ''''''''''''''' @@ -11260,6 +12618,68 @@ _QUERY_SERVICE_CONFIGW :class:`LPWSTR` +_SP_DEVICE_INTERFACE_DATA +''''''''''''''''''''''''' +.. class:: PSP_DEVICE_INTERFACE_DATA + + Pointer to :class:`_SP_DEVICE_INTERFACE_DATA` + +.. class:: SP_DEVICE_INTERFACE_DATA + + Alias for :class:`_SP_DEVICE_INTERFACE_DATA` + +.. class:: _SP_DEVICE_INTERFACE_DATA + + .. attribute:: cbSize + + :class:`DWORD` + + + .. attribute:: InterfaceClassGuid + + :class:`GUID` + + + .. attribute:: Flags + + :class:`DWORD` + + + .. attribute:: Reserved + + :class:`ULONG_PTR` + +_SP_DEVINFO_DATA +'''''''''''''''' +.. class:: PSP_DEVINFO_DATA + + Pointer to :class:`_SP_DEVINFO_DATA` + +.. class:: SP_DEVINFO_DATA + + Alias for :class:`_SP_DEVINFO_DATA` + +.. class:: _SP_DEVINFO_DATA + + .. attribute:: cbSize + + :class:`DWORD` + + + .. attribute:: ClassGuid + + :class:`GUID` + + + .. attribute:: DevInst + + :class:`DWORD` + + + .. attribute:: Reserved + + :class:`ULONG_PTR` + _SHITEMID ''''''''' .. class:: SHITEMID @@ -11275,7 +12695,7 @@ _SHITEMID .. attribute:: abID - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` _ITEMIDLIST ''''''''''' @@ -11346,22 +12766,22 @@ _IMAGEHLP_MODULE64 .. attribute:: ModuleName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: ImageName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: LoadedImageName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: LoadedPdbName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: CVSig @@ -11371,7 +12791,7 @@ _IMAGEHLP_MODULE64 .. attribute:: CVData - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: PdbSig @@ -11472,22 +12892,22 @@ _IMAGEHLP_MODULEW64 .. attribute:: ModuleName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: ImageName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: LoadedImageName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: LoadedPdbName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: CVSig @@ -11497,7 +12917,7 @@ _IMAGEHLP_MODULEW64 .. attribute:: CVData - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: PdbSig @@ -11583,7 +13003,7 @@ _SYMBOL_INFO .. attribute:: Reserved - :class:`ULONG64` ``[]`` + :class:`ULONG64` ``[]`` .. attribute:: Index @@ -11643,7 +13063,7 @@ _SYMBOL_INFO .. attribute:: Name - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` _SYMBOL_INFOW ''''''''''''' @@ -11669,7 +13089,7 @@ _SYMBOL_INFOW .. attribute:: Reserved - :class:`ULONG64` ``[]`` + :class:`ULONG64` ``[]`` .. attribute:: Index @@ -11729,7 +13149,7 @@ _SYMBOL_INFOW .. attribute:: Name - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` SYMSRV_INDEX_INFOW '''''''''''''''''' @@ -11750,7 +13170,7 @@ SYMSRV_INDEX_INFOW .. attribute:: file - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: stripped @@ -11770,12 +13190,12 @@ SYMSRV_INDEX_INFOW .. attribute:: dbgfile - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: pdbfile - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: guid @@ -11811,7 +13231,7 @@ SYMSRV_INDEX_INFO .. attribute:: file - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: stripped @@ -11831,12 +13251,12 @@ SYMSRV_INDEX_INFO .. attribute:: dbgfile - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: pdbfile - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: guid @@ -11892,7 +13312,7 @@ _IMAGEHLP_SYMBOL .. attribute:: Name - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` _IMAGEHLP_SYMBOL64 '''''''''''''''''' @@ -11933,7 +13353,7 @@ _IMAGEHLP_SYMBOL64 .. attribute:: Name - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` _IMAGEHLP_SYMBOLW64 ''''''''''''''''''' @@ -11974,7 +13394,7 @@ _IMAGEHLP_SYMBOLW64 .. attribute:: Name - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _IMAGEHLP_STACK_FRAME ''''''''''''''''''''' @@ -12020,12 +13440,12 @@ _IMAGEHLP_STACK_FRAME .. attribute:: Params - :class:`ULONG64` ``[]`` + :class:`ULONG64` ``[]`` .. attribute:: Reserved - :class:`ULONG64` ``[]`` + :class:`ULONG64` ``[]`` .. attribute:: Virtual @@ -12164,7 +13584,7 @@ _IMAGEHLP_DEFERRED_SYMBOL_LOAD .. attribute:: FileName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: Reparse @@ -12210,7 +13630,7 @@ _IMAGEHLP_DEFERRED_SYMBOL_LOAD64 .. attribute:: FileName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: Reparse @@ -12261,7 +13681,7 @@ _IMAGEHLP_DEFERRED_SYMBOL_LOADW64 .. attribute:: FileName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: Reparse @@ -12461,7 +13881,7 @@ _KDHELP .. attribute:: Reserved - :class:`DWORD` ``[]`` + :class:`DWORD` ``[]`` _KDHELP64 ''''''''' @@ -12557,7 +13977,7 @@ _KDHELP64 .. attribute:: Reserved0 - :class:`DWORD64` ``[]`` + :class:`DWORD64` ``[]`` _tagSTACKFRAME '''''''''''''' @@ -12598,7 +14018,7 @@ _tagSTACKFRAME .. attribute:: Params - :class:`DWORD` ``[]`` + :class:`DWORD` ``[]`` .. attribute:: Far @@ -12613,7 +14033,7 @@ _tagSTACKFRAME .. attribute:: Reserved - :class:`DWORD` ``[]`` + :class:`DWORD` ``[]`` .. attribute:: KdHelp @@ -12669,7 +14089,7 @@ _tagSTACKFRAME64 .. attribute:: Params - :class:`DWORD64` ``[]`` + :class:`DWORD64` ``[]`` .. attribute:: Far @@ -12684,7 +14104,7 @@ _tagSTACKFRAME64 .. attribute:: Reserved - :class:`DWORD64` ``[]`` + :class:`DWORD64` ``[]`` .. attribute:: KdHelp @@ -12735,7 +14155,7 @@ _tagSTACKFRAME_EX .. attribute:: Params - :class:`DWORD64` ``[]`` + :class:`DWORD64` ``[]`` .. attribute:: Far @@ -12750,7 +14170,7 @@ _tagSTACKFRAME_EX .. attribute:: Reserved - :class:`DWORD64` ``[]`` + :class:`DWORD64` ``[]`` .. attribute:: KdHelp @@ -12790,7 +14210,7 @@ _TIME_ZONE_INFORMATION .. attribute:: StandardName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: StandardDate @@ -12805,7 +14225,7 @@ _TIME_ZONE_INFORMATION .. attribute:: DaylightName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: DaylightDate @@ -12836,7 +14256,7 @@ _TOKEN_PRIVILEGES .. attribute:: Privileges - :class:`LUID_AND_ATTRIBUTES` ``[]`` + :class:`LUID_AND_ATTRIBUTES` ``[]`` _TOKEN_ELEVATION '''''''''''''''' @@ -12942,7 +14362,7 @@ _TOKEN_GROUPS .. attribute:: Groups - :class:`SID_AND_ATTRIBUTES` ``[]`` + :class:`SID_AND_ATTRIBUTES` ``[]`` _TOKEN_OWNER '''''''''''' @@ -12990,7 +14410,7 @@ _TOKEN_SOURCE .. attribute:: SourceName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: SourceIdentifier @@ -13130,7 +14550,7 @@ _SID_AND_ATTRIBUTES_HASH .. attribute:: Hash - :class:`SID_HASH_ENTRY` ``[]`` + :class:`SID_HASH_ENTRY` ``[]`` _TOKEN_APPCONTAINER_INFORMATION ''''''''''''''''''''''''''''''' @@ -13489,7 +14909,7 @@ _PROVIDER_ENUMERATION_INFO .. attribute:: TraceProviderInfoArray - :class:`TRACE_PROVIDER_INFO` ``[]`` + :class:`TRACE_PROVIDER_INFO` ``[]`` tagRGBTRIPLE '''''''''''' @@ -13779,7 +15199,7 @@ tagBITMAPINFO .. attribute:: bmiColors - :class:`RGBQUAD` ``[]`` + :class:`RGBQUAD` ``[]`` tagBITMAPCOREINFO ''''''''''''''''' @@ -13804,7 +15224,7 @@ tagBITMAPCOREINFO .. attribute:: bmciColors - :class:`RGBTRIPLE` ``[]`` + :class:`RGBTRIPLE` ``[]`` tagWNDCLASSEXA '''''''''''''' @@ -13995,12 +15415,12 @@ _PEB_LDR_DATA .. attribute:: Reserved1 - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` .. attribute:: Reserved2 - :class:`PVOID` ``[]`` + :class:`PVOID` ``[]`` .. attribute:: InMemoryOrderModuleList @@ -14242,7 +15662,7 @@ _RTL_USER_PROCESS_PARAMETERS .. attribute:: CurrentDirectores - :class:`RTL_DRIVE_LETTER_CURDIR` ``[]`` + :class:`RTL_DRIVE_LETTER_CURDIR` ``[]`` _ANON_PEB_SYSTEM_DEPENDENT_02 ''''''''''''''''''''''''''''' @@ -14356,7 +15776,7 @@ _PEB .. attribute:: Reserved1 - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` .. attribute:: BeingDebugged @@ -14366,7 +15786,7 @@ _PEB .. attribute:: Reserved2 - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` .. attribute:: Mutant @@ -14451,7 +15871,7 @@ _PEB .. attribute:: TlsBitmapBits - :class:`DWORD` ``[]`` + :class:`DWORD` ``[]`` .. attribute:: ReadOnlySharedMemoryBase @@ -14601,12 +16021,12 @@ _PEB .. attribute:: GdiHandleBuffer - :class:`PVOID` ``[]`` + :class:`PVOID` ``[]`` .. attribute:: GdiHandleBuffer2 - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` .. attribute:: PostProcessInitRoutine @@ -14621,7 +16041,7 @@ _PEB .. attribute:: TlsExpansionBitmapBits - :class:`DWORD` ``[]`` + :class:`DWORD` ``[]`` .. attribute:: SessionId @@ -14909,7 +16329,7 @@ _LDR_DATA_TABLE_ENTRY .. attribute:: Reserved1 - :class:`PVOID` ``[]`` + :class:`PVOID` ``[]`` .. attribute:: InMemoryOrderLinks @@ -14919,7 +16339,7 @@ _LDR_DATA_TABLE_ENTRY .. attribute:: Reserved2 - :class:`PVOID` ``[]`` + :class:`PVOID` ``[]`` .. attribute:: DllBase @@ -14949,7 +16369,7 @@ _LDR_DATA_TABLE_ENTRY .. attribute:: Reserved5 - :class:`PVOID` ``[]`` + :class:`PVOID` ``[]`` .. attribute:: CheckSum @@ -15042,7 +16462,7 @@ _IMAGE_SECTION_HEADER .. attribute:: Name - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` .. attribute:: VirtualSize @@ -15248,7 +16668,7 @@ _IMAGE_OPTIONAL_HEADER64 .. attribute:: DataDirectory - :class:`IMAGE_DATA_DIRECTORY` ``[]`` + :class:`IMAGE_DATA_DIRECTORY` ``[]`` _IMAGE_OPTIONAL_HEADER '''''''''''''''''''''' @@ -15414,7 +16834,7 @@ _IMAGE_OPTIONAL_HEADER .. attribute:: DataDirectory - :class:`IMAGE_DATA_DIRECTORY` ``[]`` + :class:`IMAGE_DATA_DIRECTORY` ``[]`` _IMAGE_NT_HEADERS64 ''''''''''''''''''' @@ -15523,7 +16943,7 @@ _IMAGE_IMPORT_BY_NAME .. attribute:: Name - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` _IMAGE_EXPORT_DIRECTORY ''''''''''''''''''''''' @@ -15868,7 +17288,7 @@ _PSAPI_WORKING_SET_INFORMATION .. attribute:: WorkingSetInfo - :class:`PSAPI_WORKING_SET_BLOCK` ``[]`` + :class:`PSAPI_WORKING_SET_BLOCK` ``[]`` _PSAPI_WORKING_SET_INFORMATION32 '''''''''''''''''''''''''''''''' @@ -15889,7 +17309,7 @@ _PSAPI_WORKING_SET_INFORMATION32 .. attribute:: WorkingSetInfo - :class:`PSAPI_WORKING_SET_BLOCK32` ``[]`` + :class:`PSAPI_WORKING_SET_BLOCK32` ``[]`` _PSAPI_WORKING_SET_INFORMATION64 '''''''''''''''''''''''''''''''' @@ -15910,7 +17330,7 @@ _PSAPI_WORKING_SET_INFORMATION64 .. attribute:: WorkingSetInfo - :class:`PSAPI_WORKING_SET_BLOCK64` ``[]`` + :class:`PSAPI_WORKING_SET_BLOCK64` ``[]`` _PSAPI_WORKING_SET_EX_BLOCK ''''''''''''''''''''''''''' @@ -16347,7 +17767,7 @@ _FLOATING_SAVE_AREA .. attribute:: RegisterArea - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` .. attribute:: Cr0NpxState @@ -16492,7 +17912,7 @@ _CONTEXT32 .. attribute:: ExtendedRegisters - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` _WOW64_FLOATING_SAVE_AREA ''''''''''''''''''''''''' @@ -16539,7 +17959,7 @@ _WOW64_FLOATING_SAVE_AREA .. attribute:: RegisterArea - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` .. attribute:: Cr0NpxState @@ -16680,7 +18100,7 @@ _WOW64_CONTEXT .. attribute:: ExtendedRegisters - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` _M128A '''''' @@ -16782,17 +18202,17 @@ _XSAVE_FORMAT_64 .. attribute:: FloatRegisters - :class:`M128A` ``[]`` + :class:`M128A` ``[]`` .. attribute:: XmmRegisters - :class:`M128A` ``[]`` + :class:`M128A` ``[]`` .. attribute:: Reserved4 - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` _XSAVE_FORMAT_32 '''''''''''''''' @@ -16873,22 +18293,22 @@ _XSAVE_FORMAT_32 .. attribute:: FloatRegisters - :class:`M128A` ``[]`` + :class:`M128A` ``[]`` .. attribute:: XmmRegisters - :class:`M128A` ``[]`` + :class:`M128A` ``[]`` .. attribute:: Reserved4 - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` .. attribute:: StackControl - :class:`DWORD` ``[]`` + :class:`DWORD` ``[]`` .. attribute:: Cr0NpxState @@ -16905,12 +18325,12 @@ _TMP_DUMMYSTRUCTNAME .. attribute:: Header - :class:`M128A` ``[]`` + :class:`M128A` ``[]`` .. attribute:: Legacy - :class:`M128A` ``[]`` + :class:`M128A` ``[]`` .. attribute:: Xmm0 @@ -17222,7 +18642,7 @@ _CONTEXT64 .. attribute:: VectorRegister - :class:`M128A` ``[]`` + :class:`M128A` ``[]`` .. attribute:: VectorControl @@ -17317,7 +18737,7 @@ tagPROCESSENTRY32W .. attribute:: szExeFile - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` tagPROCESSENTRY32 ''''''''''''''''' @@ -17382,7 +18802,7 @@ tagPROCESSENTRY32 .. attribute:: szExeFile - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` tagTHREADENTRY32 '''''''''''''''' @@ -17519,7 +18939,7 @@ _OSVERSIONINFOA .. attribute:: szCSDVersion - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` _OSVERSIONINFOW ''''''''''''''' @@ -17572,7 +18992,7 @@ _OSVERSIONINFOW .. attribute:: szCSDVersion - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _OSVERSIONINFOEXA ''''''''''''''''' @@ -17617,7 +19037,7 @@ _OSVERSIONINFOEXA .. attribute:: szCSDVersion - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` .. attribute:: wServicePackMajor @@ -17695,7 +19115,7 @@ _OSVERSIONINFOEXW .. attribute:: szCSDVersion - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: wServicePackMajor @@ -17792,7 +19212,7 @@ _EXCEPTION_RECORD .. attribute:: ExceptionInformation - :class:`ULONG_PTR` ``[]`` + :class:`ULONG_PTR` ``[]`` _EXCEPTION_RECORD32 ''''''''''''''''''' @@ -17833,7 +19253,7 @@ _EXCEPTION_RECORD32 .. attribute:: ExceptionInformation - :class:`DWORD` ``[]`` + :class:`DWORD` ``[]`` _EXCEPTION_RECORD64 ''''''''''''''''''' @@ -17879,7 +19299,7 @@ _EXCEPTION_RECORD64 .. attribute:: ExceptionInformation - :class:`DWORD64` ``[]`` + :class:`DWORD64` ``[]`` _EXCEPTION_POINTERS64 ''''''''''''''''''''' @@ -17973,7 +19393,7 @@ _DEBUG_PROCESSOR_IDENTIFICATION_AMD64 .. attribute:: VendorString - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` _DEBUG_PROCESSOR_IDENTIFICATION_IA64 '''''''''''''''''''''''''''''''''''' @@ -18009,7 +19429,7 @@ _DEBUG_PROCESSOR_IDENTIFICATION_IA64 .. attribute:: VendorString - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` _DEBUG_PROCESSOR_IDENTIFICATION_X86 ''''''''''''''''''''''''''''''''''' @@ -18040,7 +19460,7 @@ _DEBUG_PROCESSOR_IDENTIFICATION_X86 .. attribute:: VendorString - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` _DEBUG_PROCESSOR_IDENTIFICATION_ARM ''''''''''''''''''''''''''''''''''' @@ -18149,7 +19569,7 @@ _SYSTEM_MODULE32 .. attribute:: Reserved - :class:`ULONG` ``[]`` + :class:`ULONG` ``[]`` .. attribute:: Base @@ -18189,7 +19609,7 @@ _SYSTEM_MODULE32 .. attribute:: ImageName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` _SYSTEM_MODULE64 '''''''''''''''' @@ -18205,7 +19625,7 @@ _SYSTEM_MODULE64 .. attribute:: Reserved - :class:`ULONG` ``[]`` + :class:`ULONG` ``[]`` .. attribute:: Base @@ -18245,7 +19665,7 @@ _SYSTEM_MODULE64 .. attribute:: ImageName - :class:`CHAR` ``[]`` + :class:`CHAR` ``[]`` _SYSTEM_MODULE_INFORMATION32 '''''''''''''''''''''''''''' @@ -18266,7 +19686,7 @@ _SYSTEM_MODULE_INFORMATION32 .. attribute:: Modules - :class:`SYSTEM_MODULE32` ``[]`` + :class:`SYSTEM_MODULE32` ``[]`` _SYSTEM_MODULE_INFORMATION64 '''''''''''''''''''''''''''' @@ -18287,7 +19707,7 @@ _SYSTEM_MODULE_INFORMATION64 .. attribute:: Modules - :class:`SYSTEM_MODULE64` ``[]`` + :class:`SYSTEM_MODULE64` ``[]`` _DEBUG_BREAKPOINT_PARAMETERS '''''''''''''''''''''''''''' @@ -18445,12 +19865,12 @@ _DEBUG_STACK_FRAME .. attribute:: Params - :class:`ULONG64` ``[]`` + :class:`ULONG64` ``[]`` .. attribute:: Reserved - :class:`ULONG64` ``[]`` + :class:`ULONG64` ``[]`` .. attribute:: Virtual @@ -18920,7 +20340,7 @@ _SID_IDENTIFIER_AUTHORITY .. attribute:: Value - :class:`BYTE` ``[]`` + :class:`BYTE` ``[]`` _STRING ''''''' @@ -19081,7 +20501,7 @@ CATALOG_INFO_ .. attribute:: wszCatalogFile - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _SYSTEM_HANDLE '''''''''''''' @@ -19176,7 +20596,7 @@ _SYSTEM_HANDLE_INFORMATION .. attribute:: Handles - :class:`SYSTEM_HANDLE` ``[]`` + :class:`SYSTEM_HANDLE` ``[]`` _SYSTEM_HANDLE_INFORMATION64 '''''''''''''''''''''''''''' @@ -19197,7 +20617,7 @@ _SYSTEM_HANDLE_INFORMATION64 .. attribute:: Handles - :class:`SYSTEM_HANDLE64` ``[]`` + :class:`SYSTEM_HANDLE64` ``[]`` __PUBLIC_OBJECT_TYPE_INFORMATION '''''''''''''''''''''''''''''''' @@ -19218,7 +20638,7 @@ __PUBLIC_OBJECT_TYPE_INFORMATION .. attribute:: Reserved - :class:`ULONG` ``[]`` + :class:`ULONG` ``[]`` _PUBLIC_OBJECT_BASIC_INFORMATION '''''''''''''''''''''''''''''''' @@ -19254,7 +20674,7 @@ _PUBLIC_OBJECT_BASIC_INFORMATION .. attribute:: Reserved - :class:`ULONG` ``[]`` + :class:`ULONG` ``[]`` _OBJECT_TYPES_INFORMATION ''''''''''''''''''''''''' @@ -19415,47 +20835,47 @@ _DEBUG_VALUE_TMP_UNION .. attribute:: F80Bytes - :class:`UCHAR` ``[]`` + :class:`UCHAR` ``[]`` .. attribute:: F82Bytes - :class:`UCHAR` ``[]`` + :class:`UCHAR` ``[]`` .. attribute:: F128Bytes - :class:`UCHAR` ``[]`` + :class:`UCHAR` ``[]`` .. attribute:: VI8 - :class:`UCHAR` ``[]`` + :class:`UCHAR` ``[]`` .. attribute:: VI16 - :class:`USHORT` ``[]`` + :class:`USHORT` ``[]`` .. attribute:: VI32 - :class:`ULONG` ``[]`` + :class:`ULONG` ``[]`` .. attribute:: VI64 - :class:`ULONG64` ``[]`` + :class:`ULONG64` ``[]`` .. attribute:: VF32 - :class:`FLOAT` ``[]`` + :class:`FLOAT` ``[]`` .. attribute:: VF64 - :class:`DOUBLE` ``[]`` + :class:`DOUBLE` ``[]`` .. attribute:: I64Parts32 @@ -19470,7 +20890,7 @@ _DEBUG_VALUE_TMP_UNION .. attribute:: RawBytes - :class:`UCHAR` ``[]`` + :class:`UCHAR` ``[]`` _DEBUG_VALUE '''''''''''' @@ -19679,7 +21099,7 @@ _DEBUG_MODULE_PARAMETERS .. attribute:: Reserved - :class:`ULONG64` ``[]`` + :class:`ULONG64` ``[]`` _DEBUG_MODULE_AND_ID '''''''''''''''''''' @@ -19833,12 +21253,12 @@ _RTL_UNLOAD_EVENT_TRACE .. attribute:: ImageName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: Version - :class:`ULONG` ``[]`` + :class:`ULONG` ``[]`` _RTL_UNLOAD_EVENT_TRACE32 ''''''''''''''''''''''''' @@ -19879,12 +21299,12 @@ _RTL_UNLOAD_EVENT_TRACE32 .. attribute:: ImageName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: Version - :class:`ULONG` ``[]`` + :class:`ULONG` ``[]`` _RTL_UNLOAD_EVENT_TRACE64 ''''''''''''''''''''''''' @@ -19925,12 +21345,12 @@ _RTL_UNLOAD_EVENT_TRACE64 .. attribute:: ImageName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` .. attribute:: Version - :class:`ULONG` ``[]`` + :class:`ULONG` ``[]`` _FILE_FS_ATTRIBUTE_INFORMATION '''''''''''''''''''''''''''''' @@ -19961,7 +21381,7 @@ _FILE_FS_ATTRIBUTE_INFORMATION .. attribute:: FileSystemName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _FILE_FS_LABEL_INFORMATION '''''''''''''''''''''''''' @@ -19982,7 +21402,7 @@ _FILE_FS_LABEL_INFORMATION .. attribute:: VolumeLabel - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _FILE_FS_SIZE_INFORMATION ''''''''''''''''''''''''' @@ -20127,12 +21547,12 @@ _FILE_FS_OBJECTID_INFORMATION .. attribute:: ObjectId - :class:`UCHAR` ``[]`` + :class:`UCHAR` ``[]`` .. attribute:: ExtendedInfo - :class:`UCHAR` ``[]`` + :class:`UCHAR` ``[]`` _FILE_FS_DRIVER_PATH_INFORMATION '''''''''''''''''''''''''''''''' @@ -20158,7 +21578,7 @@ _FILE_FS_DRIVER_PATH_INFORMATION .. attribute:: DriverName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _FILE_FS_DRIVER_PATH_INFORMATION '''''''''''''''''''''''''''''''' @@ -20184,7 +21604,7 @@ _FILE_FS_DRIVER_PATH_INFORMATION .. attribute:: DriverName - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _FILE_FS_VOLUME_INFORMATION ''''''''''''''''''''''''''' @@ -20220,7 +21640,7 @@ _FILE_FS_VOLUME_INFORMATION .. attribute:: VolumeLabel - :class:`WCHAR` ``[]`` + :class:`WCHAR` ``[]`` _FILE_FS_SECTOR_SIZE_INFORMATION '''''''''''''''''''''''''''''''' @@ -20600,7 +22020,7 @@ _API_SET_NAMESPACE_ARRAY .. attribute:: Array - :class:`API_SET_NAMESPACE_ENTRY` ``[]`` + :class:`API_SET_NAMESPACE_ENTRY` ``[]`` _API_SET_VALUE_ENTRY_V2 ''''''''''''''''''''''' @@ -20652,7 +22072,7 @@ _API_SET_VALUE_ARRAY_V2 .. attribute:: Array - :class:`API_SET_VALUE_ENTRY_V2` ``[]`` + :class:`API_SET_VALUE_ENTRY_V2` ``[]`` _API_SET_NAMESPACE_ENTRY_V2 ''''''''''''''''''''''''''' @@ -20704,7 +22124,7 @@ _API_SET_NAMESPACE_ARRAY_V2 .. attribute:: Array - :class:`API_SET_NAMESPACE_ENTRY_V2` ``[]`` + :class:`API_SET_NAMESPACE_ENTRY_V2` ``[]`` _API_SET_VALUE_ARRAY_V4 ''''''''''''''''''''''' @@ -20730,7 +22150,7 @@ _API_SET_VALUE_ARRAY_V4 .. attribute:: Array - :class:`API_SET_VALUE_ENTRY_V2` ``[]`` + :class:`API_SET_VALUE_ENTRY_V2` ``[]`` _API_SET_NAMESPACE_ARRAY_V4 ''''''''''''''''''''''''''' @@ -20766,7 +22186,7 @@ _API_SET_NAMESPACE_ARRAY_V4 .. attribute:: Array - :class:`API_SET_NAMESPACE_ENTRY` ``[]`` + :class:`API_SET_NAMESPACE_ENTRY` ``[]`` _API_SET_NAMESPACE_ENTRY_V4 ''''''''''''''''''''''''''' @@ -21062,6 +22482,10 @@ Simple types .. autoclass:: va_list +.. autoclass:: LPCH + +.. autoclass:: LPWCH + .. autoclass:: BSTR .. autoclass:: OLECHAR @@ -21102,6 +22526,8 @@ Simple types Pointer to :class:`DWORD64` +.. autoclass:: DWORDLONG + .. autoclass:: SCODE .. autoclass:: CIMTYPE @@ -21212,6 +22638,10 @@ Simple types .. autoclass:: UINT64 +.. autoclass:: ULONG32 + +.. autoclass:: LONG32 + .. class:: PHANDLE Pointer to :class:`HANDLE` @@ -21242,6 +22672,16 @@ Simple types .. autoclass:: EVT_OBJECT_ARRAY_PROPERTY_HANDLE +.. autoclass:: LSA_HANDLE + +.. class:: PLSA_HANDLE + + Pointer to :class:`LSA_HANDLE` + +.. autoclass:: HDSKSPC + +.. autoclass:: HDEVINFO + .. autoclass:: IP4_ADDRESS .. autoclass:: PSECURITY_DESCRIPTOR @@ -21274,6 +22714,58 @@ Simple types .. autoclass:: PSID +.. autoclass:: CONFIGRET + +.. autoclass:: DEVNODE + +.. autoclass:: DEVINST + +.. class:: PDEVNODE + + Pointer to :class:`DEVNODE` + +.. class:: PDEVINST + + Pointer to :class:`DEVINST` + +.. autoclass:: PRIORITY + +.. class:: PPRIORITY + + Pointer to :class:`PRIORITY` + +.. autoclass:: RES_DES + +.. class:: PRES_DES + + Pointer to :class:`RES_DES` + +.. autoclass:: HMACHINE + +.. class:: PHMACHINE + + Pointer to :class:`HMACHINE` + +.. autoclass:: LOG_CONF + +.. class:: PLOG_CONF + + Pointer to :class:`LOG_CONF` + +.. autoclass:: RESOURCEID + +.. class:: PRESOURCEID + + Pointer to :class:`RESOURCEID` + +.. autoclass:: DEVNODEID_A + +.. autoclass:: DEVINSTID_A + +.. autoclass:: DEVNODEID_W + +.. autoclass:: DEVINSTID_W + .. autoclass:: RPCOLEDATAREP .. autoclass:: HREFTYPE @@ -22946,6 +24438,88 @@ _IO_PRIORITY_HINT .. attribute:: MaxIoPriorityTypes(5) +_POLICY_INFORMATION_CLASS +''''''''''''''''''''''''' +.. class:: POLICY_INFORMATION_CLASS + + Alias for :class:`_POLICY_INFORMATION_CLASS` + + +.. class:: PPOLICY_INFORMATION_CLASS + + Pointer to :class:`_POLICY_INFORMATION_CLASS` + + +.. class:: _POLICY_INFORMATION_CLASS + + + .. attribute:: PolicyAuditLogInformation(1) + + + .. attribute:: PolicyAuditEventsInformation(2) + + + .. attribute:: PolicyPrimaryDomainInformation(3) + + + .. attribute:: PolicyPdAccountInformation(4) + + + .. attribute:: PolicyAccountDomainInformation(5) + + + .. attribute:: PolicyLsaServerRoleInformation(6) + + + .. attribute:: PolicyReplicaSourceInformation(7) + + + .. attribute:: PolicyDefaultQuotaInformation(8) + + + .. attribute:: PolicyModificationInformation(9) + + + .. attribute:: PolicyAuditFullSetInformation(10) + + + .. attribute:: PolicyAuditFullQueryInformation(11) + + + .. attribute:: PolicyDnsDomainInformation(12) + + + .. attribute:: PolicyDnsDomainInformationInt(13) + + + .. attribute:: PolicyLocalAccountDomainInformation(14) + + + .. attribute:: PolicyMachineAccountInformation(15) + + + .. attribute:: PolicyLastEntry(16) + +_POLICY_LSA_SERVER_ROLE +''''''''''''''''''''''' +.. class:: POLICY_LSA_SERVER_ROLE + + Alias for :class:`_POLICY_LSA_SERVER_ROLE` + + +.. class:: PPOLICY_LSA_SERVER_ROLE + + Pointer to :class:`_POLICY_LSA_SERVER_ROLE` + + +.. class:: _POLICY_LSA_SERVER_ROLE + + + .. attribute:: PolicyServerRoleBackup(0) + + + .. attribute:: PolicyServerRolePrimary(1) + NDR_FORMAT_CHARACTER '''''''''''''''''''' .. class:: NDR_FORMAT_CHARACTER @@ -23557,6 +25131,111 @@ _ACL_INFORMATION_CLASS .. attribute:: AclSizeInformation(2) +_MULTIPLE_TRUSTEE_OPERATION +''''''''''''''''''''''''''' +.. class:: MULTIPLE_TRUSTEE_OPERATION + + Alias for :class:`_MULTIPLE_TRUSTEE_OPERATION` + + +.. class:: _MULTIPLE_TRUSTEE_OPERATION + + + .. attribute:: NO_MULTIPLE_TRUSTEE(0) + + + .. attribute:: TRUSTEE_IS_IMPERSONATE(1) + +_TRUSTEE_FORM +''''''''''''' +.. class:: TRUSTEE_FORM + + Alias for :class:`_TRUSTEE_FORM` + + +.. class:: _TRUSTEE_FORM + + + .. attribute:: TRUSTEE_IS_SID(0) + + + .. attribute:: TRUSTEE_IS_NAME(1) + + + .. attribute:: TRUSTEE_BAD_FORM(2) + + + .. attribute:: TRUSTEE_IS_OBJECTS_AND_SID(3) + + + .. attribute:: TRUSTEE_IS_OBJECTS_AND_NAME(4) + +_TRUSTEE_TYPE +''''''''''''' +.. class:: TRUSTEE_TYPE + + Alias for :class:`_TRUSTEE_TYPE` + + +.. class:: _TRUSTEE_TYPE + + + .. attribute:: TRUSTEE_IS_UNKNOWN(0) + + + .. attribute:: TRUSTEE_IS_USER(1) + + + .. attribute:: TRUSTEE_IS_GROUP(2) + + + .. attribute:: TRUSTEE_IS_DOMAIN(3) + + + .. attribute:: TRUSTEE_IS_ALIAS(4) + + + .. attribute:: TRUSTEE_IS_WELL_KNOWN_GROUP(5) + + + .. attribute:: TRUSTEE_IS_DELETED(6) + + + .. attribute:: TRUSTEE_IS_INVALID(7) + + + .. attribute:: TRUSTEE_IS_COMPUTER(8) + +_ACCESS_MODE +'''''''''''' +.. class:: ACCESS_MODE + + Alias for :class:`_ACCESS_MODE` + + +.. class:: _ACCESS_MODE + + + .. attribute:: NOT_USED_ACCESS(0) + + + .. attribute:: GRANT_ACCESS(1) + + + .. attribute:: SET_ACCESS(2) + + + .. attribute:: DENY_ACCESS(3) + + + .. attribute:: REVOKE_ACCESS(4) + + + .. attribute:: SET_AUDIT_SUCCESS(5) + + + .. attribute:: SET_AUDIT_FAILURE(6) + _SC_STATUS_TYPE ''''''''''''''' .. class:: SC_STATUS_TYPE diff --git a/samples/etw/etw_enumeration.py b/samples/etw/etw_enumeration.py new file mode 100644 index 0000000..b69afc6 --- /dev/null +++ b/samples/etw/etw_enumeration.py @@ -0,0 +1,36 @@ +import windows + +etwmgr = windows.system.etw + +print("ETW Manager is: {0}".format(etwmgr)) + +print("") +print("Listing some ETW sessions:") +for sess in etwmgr.sessions[:2]: + print(" * {0}".format(sess)) + print(" * name: {0}".format(sess.name)) + print(" * guid: {0}".format(sess.guid)) + print(" * id: {0}".format(sess.id)) + print(" * logfile: {0}".format(sess.logfile)) + +target_id = sess.id +NB_MATCH = 0 +print("") +print("Looking for providers for: {0}".format(sess)) +for provider in windows.system.etw.providers: + if NB_MATCH == 3: + break + for instance in provider.instances: + if NB_MATCH == 3: + break + for session in instance.sessions: + if session.LoggerId == target_id and instance.Pid: + proc = [p for p in windows.system.processes if p.pid == instance.Pid][0] + print("Found a provider/session for target:") + print(" * Provider: {0}".format(provider)) + print(" * Instance: {0}".format(instance)) + print(" * Process: {0}".format(proc)) + NB_MATCH += 1 + if NB_MATCH == 3: + break + break diff --git a/samples/etw/uac_trace.py b/samples/etw/uac_trace.py new file mode 100644 index 0000000..62fba79 --- /dev/null +++ b/samples/etw/uac_trace.py @@ -0,0 +1,36 @@ +import ctypes +import struct +import windows +import windows.generated_def as gdef +makeg = gdef.GUID.from_string + +# This sample record the ETW event of provider CBB61B6D-A2CF-471A-9A58-A4CD5C08FFBA +# related to the UAC (service AppInfo) +# The ETW session is called MY_UAC_MONITOR + +# Is then trigger the UAC and display the retrieved event afterward + +def show(event): + print("{0:#x}: {1}".format(event.EventHeader.TimeStamp, event)) + print(" guid: {0}".format(event.guid)) + print(" id: {0}".format(event.id)) + print(" opcode: {0}".format(event.opcode)) + print(" level: {0}".format(event.level)) + print(" data: {0!r}".format(event.user_data.replace("\x00", ""))) + return 0 + +session_name = "MY_UAC_MONITOR" +logfile_name = "uac.trace" + +print("Recording UAC event in file <{0}> using session named <{1}>".format(logfile_name, session_name)) + +my_trace = windows.system.etw.open_trace(session_name, logfile=logfile_name) +my_trace.stop(soft=True) # Stop previous trace with this name if exists +my_trace.start() +my_trace.enable("CBB61B6D-A2CF-471A-9A58-A4CD5C08FFBA", 0xff, 0xff) + +# Trigger UAC +windows.winproxy.ShellExecuteA(None, "runas", "mmc.exe", "BAD_MMC_FILENAME", None , 5) + +my_trace.stop() +my_trace.process(show) #: Process the events registered in the trace (and logfile) \ No newline at end of file