More arm exploration of api responses

This commit is contained in:
hakril
2025-01-18 18:08:20 +01:00
parent 3a3e6bc931
commit 314cd2b862
10 changed files with 268 additions and 14 deletions
+36 -14
View File
@@ -1214,6 +1214,42 @@ Functions
.. function:: LookupAccountNameW(lpSystemName, lpAccountName, Sid, cbSid, ReferencedDomainName, cchReferencedDomainName, peUse)
.. function:: GetNativeSystemInfo(lpSystemInfo)
.. function:: GetSystemInfo(lpSystemInfo)
.. function:: IsWow64Process(hProcess, Wow64Process)
.. function:: IsWow64Process2(hProcess, pProcessMachine, pNativeMachine)
.. function:: IsWow64GuestMachineSupported(WowGuestMachine, MachineIsSupported)
.. function:: GetSystemWow64DirectoryA(lpBuffer, uSize)
.. function:: GetSystemWow64DirectoryW(lpBuffer, uSize)
.. function:: GetSystemWow64Directory2A(lpBuffer, uSize, ImageFileMachineType)
.. function:: GetSystemWow64Directory2W(lpBuffer, uSize, ImageFileMachineType)
.. function:: Wow64DisableWow64FsRedirection(OldValue)
.. function:: Wow64EnableWow64FsRedirection(Wow64FsEnableRedirection)
.. function:: Wow64RevertWow64FsRedirection(OlValue)
.. function:: Wow64GetThreadContext(hThread, lpContext)
.. function:: Wow64SetThreadContext(hThread, lpContext)
.. function:: Wow64SetThreadDefaultGuestMachine(Machine)
.. function:: Wow64SuspendThread(hThread)
.. function:: NtWow64ReadVirtualMemory64(hProcess, lpBaseAddress, lpBuffer, nSize, lpNumberOfBytesRead)
.. function:: NtWow64WriteVirtualMemory64(hProcess, lpBaseAddress, lpBuffer, nSize, lpNumberOfBytesWritten)
.. function:: FileTimeToSystemTime(lpFileTime, lpSystemTime)
.. function:: SystemTimeToFileTime(lpSystemTime, lpFileTime)
@@ -1370,12 +1406,8 @@ Functions
.. function:: ReadProcessMemory(hProcess, lpBaseAddress, lpBuffer, nSize, lpNumberOfBytesRead)
.. function:: NtWow64ReadVirtualMemory64(hProcess, lpBaseAddress, lpBuffer, nSize, lpNumberOfBytesRead)
.. function:: WriteProcessMemory(hProcess, lpBaseAddress, lpBuffer, nSize, lpNumberOfBytesWritten)
.. function:: NtWow64WriteVirtualMemory64(hProcess, lpBaseAddress, lpBuffer, nSize, lpNumberOfBytesWritten)
.. function:: GetCurrentProcess()
.. function:: CreateFileA(lpFileName, dwDesiredAccess, dwShareMode, lpSecurityAttributes, dwCreationDisposition, dwFlagsAndAttributes, hTemplateFile)
@@ -1468,14 +1500,6 @@ Functions
.. function:: DeviceIoControl(hDevice, dwIoControlCode, lpInBuffer, nInBufferSize, lpOutBuffer, nOutBufferSize, lpBytesReturned, lpOverlapped)
.. function:: Wow64DisableWow64FsRedirection(OldValue)
.. function:: Wow64RevertWow64FsRedirection(OldValue)
.. function:: Wow64EnableWow64FsRedirection(Wow64FsEnableRedirection)
.. function:: Wow64GetThreadContext(hThread, lpContext)
.. function:: SetConsoleCtrlHandler(HandlerRoutine, Add)
.. function:: GlobalAlloc(uFlags, dwBytes)
@@ -1530,8 +1554,6 @@ Functions
.. function:: GetProcessId(Process)
.. function:: Wow64SetThreadContext(hThread, lpContext)
.. function:: GetMappedFileNameW(hProcess, lpv, lpFilename, nSize)
.. function:: GetMappedFileNameA(hProcess, lpv, lpFilename, nSize)
+61
View File
@@ -25769,6 +25769,67 @@ _EXPLICIT_ACCESS_W
:class:`TRUSTEE_W`
_SYSTEM_INFO
''''''''''''
.. class:: LPSYSTEM_INFO
Pointer to :class:`_SYSTEM_INFO`
.. class:: SYSTEM_INFO
Alias for :class:`_SYSTEM_INFO`
.. class:: _SYSTEM_INFO
.. attribute:: DUMMYUNIONNAME
:class:`_ANON__SYSTEM_INFO_SUB_UNION_1`
.. attribute:: dwPageSize
:class:`DWORD`
.. attribute:: lpMinimumApplicationAddress
:class:`LPVOID`
.. attribute:: lpMaximumApplicationAddress
:class:`LPVOID`
.. attribute:: dwActiveProcessorMask
:class:`DWORD_PTR`
.. attribute:: dwNumberOfProcessors
:class:`DWORD`
.. attribute:: dwProcessorType
:class:`DWORD`
.. attribute:: dwAllocationGranularity
:class:`DWORD`
.. attribute:: wProcessorLevel
:class:`WORD`
.. attribute:: wProcessorRevision
:class:`WORD`
_TIME_ZONE_INFORMATION
''''''''''''''''''''''
.. class:: LPTIME_ZONE_INFORMATION