#Generated file from ctypes import * from ctypes.wintypes import * from .windef import * PWSTR = LPWSTR SIZE_T = c_ulong PSIZE_T = POINTER(SIZE_T) PVOID = c_void_p PPS_POST_PROCESS_INIT_ROUTINE = PVOID NTSTATUS = DWORD PULONG = POINTER(ULONG) PDWORD = POINTER(DWORD) LPDWORD = POINTER(DWORD) LPTHREAD_START_ROUTINE = PVOID WNDENUMPROC = PVOID PHANDLER_ROUTINE = PVOID LPBYTE = POINTER(BYTE) ULONG_PTR = PULONG CHAR = c_char INT = c_int UCHAR = c_char CSHORT = c_short VARTYPE = c_ushort BSTR = c_wchar_p OLECHAR = c_wchar POLECHAR = c_wchar_p PUCHAR = POINTER(UCHAR) double = c_double FARPROC = PVOID HGLOBAL = PVOID PSID = PVOID PVECTORED_EXCEPTION_HANDLER = PVOID ULONGLONG = c_ulonglong LONGLONG = c_longlong ULONG64 = c_ulonglong LARGE_INTEGER = LONGLONG PLARGE_INTEGER = POINTER(LARGE_INTEGER) DWORD64 = ULONG64 SCODE = LONG CIMTYPE = LONG NET_IFINDEX = ULONG IF_INDEX = NET_IFINDEX IFTYPE = ULONG PULONG64 = POINTER(ULONG64) PUINT = POINTER(UINT) PHANDLE = POINTER(HANDLE) HKEY = HANDLE HCATADMIN = HANDLE HCATINFO = HANDLE SC_HANDLE = HANDLE LPHANDLE = POINTER(HANDLE) PHKEY = POINTER(HKEY) ACCESS_MASK = DWORD REGSAM = ACCESS_MASK SECURITY_CONTEXT_TRACKING_MODE = BOOLEAN DISPID = LONG MEMBERID = DISPID PSECURITY_DESCRIPTOR = PVOID LPUNKNOWN = POINTER(PVOID) LPCONTEXT = PVOID HCERTSTORE = PVOID HCRYPTMSG = PVOID PALPC_PORT_ATTRIBUTES = PVOID VOID = DWORD ITypeInfo = PVOID structs = ['_LIST_ENTRY', '_PEB_LDR_DATA', '_LSA_UNICODE_STRING', '_RTL_USER_PROCESS_PARAMETERS', '_PEB', '_SECURITY_ATTRIBUTES', '_SYSTEM_VERIFIER_INFORMATION', '_LDR_DATA_TABLE_ENTRY', '_IMAGE_FILE_HEADER', '_IMAGE_DATA_DIRECTORY', '_IMAGE_SECTION_HEADER', '_IMAGE_OPTIONAL_HEADER64', '_IMAGE_OPTIONAL_HEADER', '_IMAGE_NT_HEADERS64', '_IMAGE_NT_HEADERS', '_IMAGE_IMPORT_DESCRIPTOR', '_IMAGE_IMPORT_BY_NAME', '_IMAGE_EXPORT_DIRECTORY', '_MEMORY_BASIC_INFORMATION', '_MEMORY_BASIC_INFORMATION32', '_MEMORY_BASIC_INFORMATION64', '_STARTUPINFOA', '_STARTUPINFOW', '_PROCESS_INFORMATION', '_FLOATING_SAVE_AREA', '_CONTEXT32', '_WOW64_FLOATING_SAVE_AREA', '_WOW64_CONTEXT', '_M128A', '_CONTEXT64', 'tagPROCESSENTRY32W', 'tagPROCESSENTRY32', 'tagTHREADENTRY32', '_LUID', '_LUID_AND_ATTRIBUTES', '_TOKEN_PRIVILEGES', '_TOKEN_ELEVATION', '_SID_AND_ATTRIBUTES', '_TOKEN_MANDATORY_LABEL', '_TOKEN_USER', '_OSVERSIONINFOA', '_OSVERSIONINFOW', '_OSVERSIONINFOEXA', '_OSVERSIONINFOEXW', '_OVERLAPPED', '_MIB_IPADDRROW_XP', '_MIB_IPADDRTABLE', '_MIB_IFROW', '_MIB_IFTABLE', '_MIB_TCPROW_OWNER_PID', '_MIB_TCPTABLE_OWNER_PID', '_MIB_UDPROW_OWNER_PID', '_MIB_UDPTABLE_OWNER_PID', '_MIB_UDP6ROW_OWNER_PID', '_MIB_UDP6TABLE_OWNER_PID', '_MIB_TCP6ROW_OWNER_PID', '_MIB_TCP6TABLE_OWNER_PID', '_MIB_TCPROW', '_IP_ADAPTER_INDEX_MAP', '_IP_INTERFACE_INFO', '_EXCEPTION_RECORD', '_EXCEPTION_RECORD32', '_EXCEPTION_RECORD64', '_EXCEPTION_POINTERS64', '_EXCEPTION_POINTERS32', '_DEBUG_PROCESSOR_IDENTIFICATION_ALPHA', '_DEBUG_PROCESSOR_IDENTIFICATION_AMD64', '_DEBUG_PROCESSOR_IDENTIFICATION_IA64', '_DEBUG_PROCESSOR_IDENTIFICATION_X86', '_DEBUG_PROCESSOR_IDENTIFICATION_ARM', '_DEBUG_PROCESSOR_IDENTIFICATION_ALL', '_SYMBOL_INFO', '_MODLOAD_DATA', '_SYSTEM_MODULE32', '_SYSTEM_MODULE64', '_SYSTEM_MODULE_INFORMATION32', '_SYSTEM_MODULE_INFORMATION64', 'tagSAFEARRAYBOUND', 'tagSAFEARRAY', '_DEBUG_BREAKPOINT_PARAMETERS', '_DEBUG_REGISTER_DESCRIPTION', '_DEBUG_STACK_FRAME', '_DEBUG_LAST_EVENT_INFO_BREAKPOINT', '_DEBUG_LAST_EVENT_INFO_EXCEPTION', '_DEBUG_LAST_EVENT_INFO_EXIT_THREAD', '_DEBUG_LAST_EVENT_INFO_EXIT_PROCESS', '_DEBUG_LAST_EVENT_INFO_LOAD_MODULE', '_DEBUG_LAST_EVENT_INFO_UNLOAD_MODULE', '_DEBUG_LAST_EVENT_INFO_SYSTEM_ERROR', '_DEBUG_SPECIFIC_FILTER_PARAMETERS', '_DEBUG_EXCEPTION_FILTER_PARAMETERS', '_GUID', '_TMP_signscale', '_TMP_lowmid', 'TMP_signscale_union', 'TMP_lowmid_union', 'tagDEC', '__tagBRECORD', 'TMP_variant_sub_union', '__tagVARIANT', 'tagDISPPARAMS', 'tagEXCEPINFO', '_CRYPTOAPI_BLOB', 'WINTRUST_FILE_INFO_', '_CRYPT_ATTRIBUTE', '_CTL_ENTRY', '_CRYPT_ATTRIBUTE', '_CRYPT_ATTRIBUTES', '_CRYPT_ALGORITHM_IDENTIFIER', '_CMSG_SIGNER_INFO', '_CERT_EXTENSION', '_CTL_USAGE', '_CTL_INFO', '_CTL_CONTEXT', 'WINTRUST_CATALOG_INFO_', 'WINTRUST_BLOB_INFO_', '_CRYPT_BIT_BLOB', '_CERT_PUBLIC_KEY_INFO', '_CERT_INFO', '_CERT_CONTEXT', 'WINTRUST_SGNR_INFO_', '_FILETIME', 'WINTRUST_CERT_INFO_', '_TMP_WINTRUST_UNION_TYPE', '_WINTRUST_DATA', '_PROCESS_BASIC_INFORMATION', '_JIT_DEBUG_INFO', '_SID_IDENTIFIER_AUTHORITY', '_EXCEPTION_DEBUG_INFO', '_CREATE_THREAD_DEBUG_INFO', '_CREATE_PROCESS_DEBUG_INFO', '_EXIT_THREAD_DEBUG_INFO', '_EXIT_PROCESS_DEBUG_INFO', '_LOAD_DLL_DEBUG_INFO', '_UNLOAD_DLL_DEBUG_INFO', '_OUTPUT_DEBUG_STRING_INFO', '_RIP_INFO', '_TMP_UNION_DEBUG_INFO', '_DEBUG_EVENT', '_STRING', '_OBJECT_ATTRIBUTES', '_SECURITY_QUALITY_OF_SERVICE', '_ALPC_PORT_ATTRIBUTES32', '_ALPC_PORT_ATTRIBUTES64', '_ALPC_MESSAGE_ATTRIBUTES', '_PORT_MESSAGE_TMP_UNION', '_PORT_MESSAGE_TMP_SUBSTRUCT_S1', '_PORT_MESSAGE_TMP_UNION_U1', '_PORT_MESSAGE_TMP_SUBSTRUCT_S2', '_PORT_MESSAGE_TMP_UNION_U2', '_PORT_MESSAGE', '_SERVICE_STATUS', '_SERVICE_STATUS_PROCESS', '_ENUM_SERVICE_STATUS_PROCESSA', '_ENUM_SERVICE_STATUS_PROCESSW', 'CATALOG_INFO_', '_SYSTEM_HANDLE', '_SYSTEM_HANDLE_INFORMATION', '__PUBLIC_OBJECT_TYPE_INFORMATION', '_PUBLIC_OBJECT_BASIC_INFORMATION', '_EVENTLOGRECORD', 'tagSOLE_AUTHENTICATION_SERVICE'] enums = ['_SYSTEM_INFORMATION_CLASS', '_MEMORY_INFORMATION_CLASS', '_THREAD_INFORMATION_CLASS', '_TCP_TABLE_CLASS', '_VARENUM', '_UDP_TABLE_CLASS', 'NET_FW_RULE_DIRECTION_', 'NET_FW_PROFILE_TYPE2_', '_MIB_TCP_STATE', 'NET_FW_IP_PROTOCOL_', '_TOKEN_INFORMATION_CLASS', '_SECURITY_IMPERSONATION_LEVEL', '_SC_ENUM_TYPE', '_SC_STATUS_TYPE', '_OBJECT_INFORMATION_CLASS', '_SID_NAME_USE', 'NET_FW_PROFILE_TYPE2_', 'NET_FW_ACTION_', 'NET_FW_MODIFY_STATE_', 'NET_FW_RULE_DIRECTION_', 'tag_WBEMSTATUS', 'tagCLSCTX', '_INTERNAL_IF_OPER_STATUS', '_IMAGEHLP_SYMBOL_TYPE_INFO', '_PROCESSINFOCLASS', 'tagCOINIT', 'tagTYPEKIND'] # Enum _SYSTEM_INFORMATION_CLASS definitions _SYSTEM_INFORMATION_CLASS = DWORD SYSTEM_INFORMATION_CLASS = _SYSTEM_INFORMATION_CLASS SystemBasicInformation = 0x0 SystemProcessorInformation = 0x1 SystemPerformanceInformation = 0x2 SystemTimeOfDayInformation = 0x3 SystemPathInformation = 0x4 SystemProcessInformation = 0x5 SystemCallCountInformation = 0x6 SystemDeviceInformation = 0x7 SystemProcessorPerformanceInformation = 0x8 SystemFlagsInformation = 0x9 SystemCallTimeInformation = 0xa SystemModuleInformation = 0xb SystemLocksInformation = 0xc SystemStackTraceInformation = 0xd SystemPagedPoolInformation = 0xe SystemNonPagedPoolInformation = 0xf SystemHandleInformation = 0x10 SystemObjectInformation = 0x11 SystemPageFileInformation = 0x12 SystemVdmInstemulInformation = 0x13 SystemVdmBopInformation = 0x14 SystemFileCacheInformation = 0x15 SystemPoolTagInformation = 0x16 SystemInterruptInformation = 0x17 SystemDpcBehaviorInformation = 0x18 SystemFullMemoryInformation = 0x19 SystemLoadGdiDriverInformation = 0x1a SystemUnloadGdiDriverInformation = 0x1b SystemTimeAdjustmentInformation = 0x1c SystemSummaryMemoryInformation = 0x1d SystemMirrorMemoryInformation = 0x1e SystemPerformanceTraceInformation = 0x1f SystemObsolete0 = 0x20 SystemExceptionInformation = 0x21 SystemCrashDumpStateInformation = 0x22 SystemKernelDebuggerInformation = 0x23 SystemContextSwitchInformation = 0x24 SystemRegistryQuotaInformation = 0x25 SystemExtendServiceTableInformation = 0x26 SystemPrioritySeperation = 0x27 SystemVerifierAddDriverInformation = 0x28 SystemVerifierRemoveDriverInformation = 0x29 SystemProcessorIdleInformation = 0x2a SystemLegacyDriverInformation = 0x2b SystemCurrentTimeZoneInformation = 0x2c SystemLookasideInformation = 0x2d SystemTimeSlipNotification = 0x2e SystemSessionCreate = 0x2f SystemSessionDetach = 0x30 SystemSessionInformation = 0x31 SystemRangeStartInformation = 0x32 SystemVerifierInformation = 0x33 SystemVerifierThunkExtend = 0x34 SystemSessionProcessInformation = 0x35 SystemLoadGdiDriverInSystemSpace = 0x36 SystemNumaProcessorMap = 0x37 SystemPrefetcherInformation = 0x38 SystemExtendedProcessInformation = 0x39 SystemRecommendedSharedDataAlignment = 0x3a SystemComPlusPackage = 0x3b SystemNumaAvailableMemory = 0x3c SystemProcessorPowerInformation = 0x3d SystemEmulationBasicInformation = 0x3e SystemEmulationProcessorInformation = 0x3f SystemExtendedHandleInformation = 0x40 SystemLostDelayedWriteInformation = 0x41 SystemBigPoolInformation = 0x42 SystemSessionPoolTagInformation = 0x43 SystemSessionMappedViewInformation = 0x44 SystemHotpatchInformation = 0x45 SystemObjectSecurityMode = 0x46 SystemWatchdogTimerHandler = 0x47 SystemWatchdogTimerInformation = 0x48 SystemLogicalProcessorInformation = 0x49 SystemWow64SharedInformation = 0x4a SystemRegisterFirmwareTableInformationHandler = 0x4b SystemFirmwareTableInformation = 0x4c SystemModuleInformationEx = 0x4d SystemVerifierTriageInformation = 0x4e SystemSuperfetchInformation = 0x4f SystemMemoryListInformation = 0x50 SystemFileCacheInformationEx = 0x51 MaxSystemInfoClass = 0x52 # Enum _MEMORY_INFORMATION_CLASS definitions _MEMORY_INFORMATION_CLASS = DWORD MEMORY_INFORMATION_CLASS = _MEMORY_INFORMATION_CLASS MemoryBasicInformation = 0x0 # Enum _THREAD_INFORMATION_CLASS definitions _THREAD_INFORMATION_CLASS = DWORD THREAD_INFORMATION_CLASS = _THREAD_INFORMATION_CLASS PTHREAD_INFORMATION_CLASS = POINTER(_THREAD_INFORMATION_CLASS) ThreadBasicInformation = 0x0 ThreadTimes = 0x1 ThreadPriority = 0x2 ThreadBasePriority = 0x3 ThreadAffinityMask = 0x4 ThreadImpersonationToken = 0x5 ThreadDescriptorTableEntry = 0x6 ThreadEnableAlignmentFaultFixup = 0x7 ThreadEventPair = 0x8 ThreadQuerySetWin32StartAddress = 0x9 ThreadZeroTlsCell = 0xa ThreadPerformanceCount = 0xb ThreadAmILastThread = 0xc ThreadIdealProcessor = 0xd ThreadPriorityBoost = 0xe ThreadSetTlsArrayAddress = 0xf ThreadIsIoPending = 0x10 ThreadHideFromDebugger = 0x11 # Enum _TCP_TABLE_CLASS definitions _TCP_TABLE_CLASS = DWORD TCP_TABLE_CLASS = _TCP_TABLE_CLASS TCP_TABLE_BASIC_LISTENER = 0x0 TCP_TABLE_BASIC_CONNECTIONS = 0x1 TCP_TABLE_BASIC_ALL = 0x2 TCP_TABLE_OWNER_PID_LISTENER = 0x3 TCP_TABLE_OWNER_PID_CONNECTIONS = 0x4 TCP_TABLE_OWNER_PID_ALL = 0x5 TCP_TABLE_OWNER_MODULE_LISTENER = 0x6 TCP_TABLE_OWNER_MODULE_CONNECTIONS = 0x7 TCP_TABLE_OWNER_MODULE_ALL = 0x8 # Enum _VARENUM definitions _VARENUM = DWORD VARENUM = _VARENUM VT_EMPTY = 0x0 VT_NULL = 0x1 VT_I2 = 0x2 VT_I4 = 0x3 VT_R4 = 0x4 VT_R8 = 0x5 VT_CY = 0x6 VT_DATE = 0x7 VT_BSTR = 0x8 VT_DISPATCH = 0x9 VT_ERROR = 0xa VT_BOOL = 0xb VT_VARIANT = 0xc VT_UNKNOWN = 0xd VT_DECIMAL = 0xe VT_I1 = 0x10 VT_UI1 = 0x11 VT_UI2 = 0x12 VT_UI4 = 0x13 VT_I8 = 0x14 VT_UI8 = 0x15 VT_INT = 0x16 VT_UINT = 0x17 VT_VOID = 0x18 VT_HRESULT = 0x19 VT_PTR = 0x1a VT_SAFEARRAY = 0x1b VT_CARRAY = 0x1c VT_USERDEFINED = 0x1d VT_LPSTR = 0x1e VT_LPWSTR = 0x1f VT_RECORD = 0x24 VT_INT_PTR = 0x25 VT_UINT_PTR = 0x26 VT_FILETIME = 0x40 VT_BLOB = 0x41 VT_STREAM = 0x42 VT_STORAGE = 0x43 VT_STREAMED_OBJECT = 0x44 VT_STORED_OBJECT = 0x45 VT_BLOB_OBJECT = 0x46 VT_CF = 0x47 VT_CLSID = 0x48 VT_VERSIONED_STREAM = 0x49 VT_BSTR_BLOB = 0xfff VT_VECTOR = 0x1000 VT_ARRAY = 0x2000 VT_BYREF = 0x4000 VT_RESERVED = 0x8000 VT_ILLEGAL = 0xffff VT_ILLEGALMASKED = 0xfff VT_TYPEMASK = 0xfff # Enum _UDP_TABLE_CLASS definitions _UDP_TABLE_CLASS = DWORD UDP_TABLE_CLASS = _UDP_TABLE_CLASS UDP_TABLE_BASIC = 0x0 UDP_TABLE_OWNER_PID = 0x1 UDP_TABLE_OWNER_MODULE = 0x2 # Enum NET_FW_RULE_DIRECTION_ definitions NET_FW_RULE_DIRECTION_ = DWORD NET_FW_RULE_DIRECTION = NET_FW_RULE_DIRECTION_ NET_FW_RULE_DIR_IN = 0x1 NET_FW_RULE_DIR_OUT = 0x2 NET_FW_RULE_DIR_MAX = 0x3 # Enum NET_FW_PROFILE_TYPE2_ definitions NET_FW_PROFILE_TYPE2_ = DWORD NET_FW_PROFILE_TYPE2 = NET_FW_PROFILE_TYPE2_ NET_FW_PROFILE2_DOMAIN = 0x1 NET_FW_PROFILE2_PRIVATE = 0x2 NET_FW_PROFILE2_PUBLIC = 0x4 NET_FW_PROFILE2_ALL = 0x7fffffff # Enum _MIB_TCP_STATE definitions _MIB_TCP_STATE = DWORD MIB_TCP_STATE = _MIB_TCP_STATE MIB_TCP_STATE_CLOSED = 0x1 MIB_TCP_STATE_LISTEN = 0x2 MIB_TCP_STATE_SYN_SENT = 0x3 MIB_TCP_STATE_SYN_RCVD = 0x4 MIB_TCP_STATE_ESTAB = 0x5 MIB_TCP_STATE_FIN_WAIT1 = 0x6 MIB_TCP_STATE_FIN_WAIT2 = 0x7 MIB_TCP_STATE_CLOSE_WAIT = 0x8 MIB_TCP_STATE_CLOSING = 0x9 MIB_TCP_STATE_LAST_ACK = 0xa MIB_TCP_STATE_TIME_WAIT = 0xb MIB_TCP_STATE_DELETE_TCB = 0xc # Enum NET_FW_IP_PROTOCOL_ definitions NET_FW_IP_PROTOCOL_ = DWORD NET_FW_IP_PROTOCOL = NET_FW_IP_PROTOCOL_ NET_FW_IP_PROTOCOL_TCP = 0x6 NET_FW_IP_PROTOCOL_UDP = 0x11 NET_FW_IP_PROTOCOL_ANY = 0x100 # Enum _TOKEN_INFORMATION_CLASS definitions _TOKEN_INFORMATION_CLASS = DWORD TOKEN_INFORMATION_CLASS = _TOKEN_INFORMATION_CLASS PTOKEN_INFORMATION_CLASS = POINTER(_TOKEN_INFORMATION_CLASS) TokenInvalid = 0x0 TokenUser = 0x1 TokenGroups = 0x2 TokenPrivileges = 0x3 TokenOwner = 0x4 TokenPrimaryGroup = 0x5 TokenDefaultDacl = 0x6 TokenSource = 0x7 TokenType = 0x8 TokenImpersonationLevel = 0x9 TokenStatistics = 0xa TokenRestrictedSids = 0xb TokenSessionId = 0xc TokenGroupsAndPrivileges = 0xd TokenSessionReference = 0xe TokenSandBoxInert = 0xf TokenAuditPolicy = 0x10 TokenOrigin = 0x11 TokenElevationType = 0x12 TokenLinkedToken = 0x13 TokenElevation = 0x14 TokenHasRestrictions = 0x15 TokenAccessInformation = 0x16 TokenVirtualizationAllowed = 0x17 TokenVirtualizationEnabled = 0x18 TokenIntegrityLevel = 0x19 TokenUIAccess = 0x1a TokenMandatoryPolicy = 0x1b TokenLogonSid = 0x1c TokenIsAppContainer = 0x1d TokenCapabilities = 0x1e TokenAppContainerSid = 0x1f TokenAppContainerNumber = 0x20 TokenUserClaimAttributes = 0x21 TokenDeviceClaimAttributes = 0x22 TokenRestrictedUserClaimAttributes = 0x23 TokenRestrictedDeviceClaimAttributes = 0x24 TokenDeviceGroups = 0x25 TokenRestrictedDeviceGroups = 0x26 TokenSecurityAttributes = 0x27 TokenIsRestricted = 0x28 MaxTokenInfoClass = 0x29 # Enum _SECURITY_IMPERSONATION_LEVEL definitions _SECURITY_IMPERSONATION_LEVEL = DWORD SECURITY_IMPERSONATION_LEVEL = _SECURITY_IMPERSONATION_LEVEL PSECURITY_IMPERSONATION_LEVEL = POINTER(_SECURITY_IMPERSONATION_LEVEL) SecurityAnonymous = 0x0 SecurityIdentification = 0x1 SecurityImpersonation = 0x2 SecurityDelegation = 0x3 # Enum _SC_ENUM_TYPE definitions _SC_ENUM_TYPE = DWORD SC_ENUM_TYPE = _SC_ENUM_TYPE SC_ENUM_PROCESS_INFO = 0x0 # Enum _SC_STATUS_TYPE definitions _SC_STATUS_TYPE = DWORD SC_STATUS_TYPE = _SC_STATUS_TYPE SC_STATUS_PROCESS_INFO = 0x0 # Enum _OBJECT_INFORMATION_CLASS definitions _OBJECT_INFORMATION_CLASS = DWORD OBJECT_INFORMATION_CLASS = _OBJECT_INFORMATION_CLASS ObjectBasicInformation = 0x0 ObjectNameInformation = 0x1 ObjectTypeInformation = 0x2 # Enum _SID_NAME_USE definitions _SID_NAME_USE = DWORD SID_NAME_USE = _SID_NAME_USE PSID_NAME_USE = POINTER(_SID_NAME_USE) SidTypeUser = 0x1 SidTypeGroup = 0x2 SidTypeDomain = 0x3 SidTypeAlias = 0x4 SidTypeWellKnownGroup = 0x5 SidTypeDeletedAccount = 0x6 SidTypeInvalid = 0x7 SidTypeUnknown = 0x8 SidTypeComputer = 0x9 SidTypeLabel = 0xa # Enum NET_FW_PROFILE_TYPE2_ definitions NET_FW_PROFILE_TYPE2_ = DWORD NET_FW_PROFILE_TYPE2 = NET_FW_PROFILE_TYPE2_ NET_FW_PROFILE2_DOMAIN = 0x1 NET_FW_PROFILE2_PRIVATE = 0x2 NET_FW_PROFILE2_PUBLIC = 0x4 NET_FW_PROFILE2_ALL = 0x7fffffff # Enum NET_FW_ACTION_ definitions NET_FW_ACTION_ = DWORD NET_FW_ACTION = NET_FW_ACTION_ NET_FW_ACTION_BLOCK = 0x0 NET_FW_ACTION_ALLOW = 0x1 NET_FW_ACTION_MAX = 0x2 # Enum NET_FW_MODIFY_STATE_ definitions NET_FW_MODIFY_STATE_ = DWORD NET_FW_MODIFY_STATE = NET_FW_MODIFY_STATE_ NET_FW_MODIFY_STATE_OK = 0x0 NET_FW_MODIFY_STATE_GP_OVERRIDE = 0x1 NET_FW_MODIFY_STATE_INBOUND_BLOCKED = 0x2 # Enum NET_FW_RULE_DIRECTION_ definitions NET_FW_RULE_DIRECTION_ = DWORD NET_FW_RULE_DIRECTION = NET_FW_RULE_DIRECTION_ NET_FW_RULE_DIR_IN = 0x1 NET_FW_RULE_DIR_OUT = 0x2 NET_FW_RULE_DIR_MAX = 0x3 # Enum tag_WBEMSTATUS definitions tag_WBEMSTATUS = DWORD WBEMSTATUS = tag_WBEMSTATUS WBEM_NO_ERROR = 0x0 WBEM_S_NO_ERROR = 0x0 WBEM_S_SAME = 0x0 WBEM_S_FALSE = 0x1 WBEM_S_ALREADY_EXISTS = 0x40001 WBEM_S_RESET_TO_DEFAULT = 0x40002 WBEM_S_DIFFERENT = 0x40003 WBEM_S_TIMEDOUT = 0x40004 WBEM_S_NO_MORE_DATA = 0x40005 WBEM_S_OPERATION_CANCELLED = 0x40006 WBEM_S_PENDING = 0x40007 WBEM_S_DUPLICATE_OBJECTS = 0x40008 WBEM_S_ACCESS_DENIED = 0x40009 WBEM_S_PARTIAL_RESULTS = 0x40010 WBEM_S_SOURCE_NOT_AVAILABLE = 0x40017 WBEM_E_FAILED = 0x80041001L WBEM_E_NOT_FOUND = 0x80041002L WBEM_E_ACCESS_DENIED = 0x80041003L WBEM_E_PROVIDER_FAILURE = 0x80041004L WBEM_E_TYPE_MISMATCH = 0x80041005L WBEM_E_OUT_OF_MEMORY = 0x80041006L WBEM_E_INVALID_CONTEXT = 0x80041007L WBEM_E_INVALID_PARAMETER = 0x80041008L WBEM_E_NOT_AVAILABLE = 0x80041009L WBEM_E_CRITICAL_ERROR = 0x8004100aL WBEM_E_INVALID_STREAM = 0x8004100bL WBEM_E_NOT_SUPPORTED = 0x8004100cL WBEM_E_INVALID_SUPERCLASS = 0x8004100dL WBEM_E_INVALID_NAMESPACE = 0x8004100eL WBEM_E_INVALID_OBJECT = 0x8004100fL WBEM_E_INVALID_CLASS = 0x80041010L WBEM_E_PROVIDER_NOT_FOUND = 0x80041011L WBEM_E_INVALID_PROVIDER_REGISTRATION = 0x80041012L WBEM_E_PROVIDER_LOAD_FAILURE = 0x80041013L WBEM_E_INITIALIZATION_FAILURE = 0x80041014L WBEM_E_TRANSPORT_FAILURE = 0x80041015L WBEM_E_INVALID_OPERATION = 0x80041016L WBEM_E_INVALID_QUERY = 0x80041017L WBEM_E_INVALID_QUERY_TYPE = 0x80041018L WBEM_E_ALREADY_EXISTS = 0x80041019L WBEM_E_OVERRIDE_NOT_ALLOWED = 0x8004101aL WBEM_E_PROPAGATED_QUALIFIER = 0x8004101bL WBEM_E_PROPAGATED_PROPERTY = 0x8004101cL WBEM_E_UNEXPECTED = 0x8004101dL WBEM_E_ILLEGAL_OPERATION = 0x8004101eL WBEM_E_CANNOT_BE_KEY = 0x8004101fL WBEM_E_INCOMPLETE_CLASS = 0x80041020L WBEM_E_INVALID_SYNTAX = 0x80041021L WBEM_E_NONDECORATED_OBJECT = 0x80041022L WBEM_E_READ_ONLY = 0x80041023L WBEM_E_PROVIDER_NOT_CAPABLE = 0x80041024L WBEM_E_CLASS_HAS_CHILDREN = 0x80041025L WBEM_E_CLASS_HAS_INSTANCES = 0x80041026L WBEM_E_QUERY_NOT_IMPLEMENTED = 0x80041027L WBEM_E_ILLEGAL_NULL = 0x80041028L WBEM_E_INVALID_QUALIFIER_TYPE = 0x80041029L WBEM_E_INVALID_PROPERTY_TYPE = 0x8004102aL WBEM_E_VALUE_OUT_OF_RANGE = 0x8004102bL WBEM_E_CANNOT_BE_SINGLETON = 0x8004102cL WBEM_E_INVALID_CIM_TYPE = 0x8004102dL WBEM_E_INVALID_METHOD = 0x8004102eL WBEM_E_INVALID_METHOD_PARAMETERS = 0x8004102fL WBEM_E_SYSTEM_PROPERTY = 0x80041030L WBEM_E_INVALID_PROPERTY = 0x80041031L WBEM_E_CALL_CANCELLED = 0x80041032L WBEM_E_SHUTTING_DOWN = 0x80041033L WBEM_E_PROPAGATED_METHOD = 0x80041034L WBEM_E_UNSUPPORTED_PARAMETER = 0x80041035L WBEM_E_MISSING_PARAMETER_ID = 0x80041036L WBEM_E_INVALID_PARAMETER_ID = 0x80041037L WBEM_E_NONCONSECUTIVE_PARAMETER_IDS = 0x80041038L WBEM_E_PARAMETER_ID_ON_RETVAL = 0x80041039L WBEM_E_INVALID_OBJECT_PATH = 0x8004103aL WBEM_E_OUT_OF_DISK_SPACE = 0x8004103bL WBEM_E_BUFFER_TOO_SMALL = 0x8004103cL WBEM_E_UNSUPPORTED_PUT_EXTENSION = 0x8004103dL WBEM_E_UNKNOWN_OBJECT_TYPE = 0x8004103eL WBEM_E_UNKNOWN_PACKET_TYPE = 0x8004103fL WBEM_E_MARSHAL_VERSION_MISMATCH = 0x80041040L WBEM_E_MARSHAL_INVALID_SIGNATURE = 0x80041041L WBEM_E_INVALID_QUALIFIER = 0x80041042L WBEM_E_INVALID_DUPLICATE_PARAMETER = 0x80041043L WBEM_E_TOO_MUCH_DATA = 0x80041044L WBEM_E_SERVER_TOO_BUSY = 0x80041045L WBEM_E_INVALID_FLAVOR = 0x80041046L WBEM_E_CIRCULAR_REFERENCE = 0x80041047L WBEM_E_UNSUPPORTED_CLASS_UPDATE = 0x80041048L WBEM_E_CANNOT_CHANGE_KEY_INHERITANCE = 0x80041049L WBEM_E_CANNOT_CHANGE_INDEX_INHERITANCE = 0x80041050L WBEM_E_TOO_MANY_PROPERTIES = 0x80041051L WBEM_E_UPDATE_TYPE_MISMATCH = 0x80041052L WBEM_E_UPDATE_OVERRIDE_NOT_ALLOWED = 0x80041053L WBEM_E_UPDATE_PROPAGATED_METHOD = 0x80041054L WBEM_E_METHOD_NOT_IMPLEMENTED = 0x80041055L WBEM_E_METHOD_DISABLED = 0x80041056L WBEM_E_REFRESHER_BUSY = 0x80041057L WBEM_E_UNPARSABLE_QUERY = 0x80041058L WBEM_E_NOT_EVENT_CLASS = 0x80041059L WBEM_E_MISSING_GROUP_WITHIN = 0x8004105aL WBEM_E_MISSING_AGGREGATION_LIST = 0x8004105bL WBEM_E_PROPERTY_NOT_AN_OBJECT = 0x8004105cL WBEM_E_AGGREGATING_BY_OBJECT = 0x8004105dL WBEM_E_UNINTERPRETABLE_PROVIDER_QUERY = 0x8004105fL WBEM_E_BACKUP_RESTORE_WINMGMT_RUNNING = 0x80041060L WBEM_E_QUEUE_OVERFLOW = 0x80041061L WBEM_E_PRIVILEGE_NOT_HELD = 0x80041062L WBEM_E_INVALID_OPERATOR = 0x80041063L WBEM_E_LOCAL_CREDENTIALS = 0x80041064L WBEM_E_CANNOT_BE_ABSTRACT = 0x80041065L WBEM_E_AMENDED_OBJECT = 0x80041066L WBEM_E_CLIENT_TOO_SLOW = 0x80041067L WBEM_E_NULL_SECURITY_DESCRIPTOR = 0x80041068L WBEM_E_TIMED_OUT = 0x80041069L WBEM_E_INVALID_ASSOCIATION = 0x8004106aL WBEM_E_AMBIGUOUS_OPERATION = 0x8004106bL WBEM_E_QUOTA_VIOLATION = 0x8004106cL WBEM_E_RESERVED_001 = 0x8004106dL WBEM_E_RESERVED_002 = 0x8004106eL WBEM_E_UNSUPPORTED_LOCALE = 0x8004106fL WBEM_E_HANDLE_OUT_OF_DATE = 0x80041070L WBEM_E_CONNECTION_FAILED = 0x80041071L WBEM_E_INVALID_HANDLE_REQUEST = 0x80041072L WBEM_E_PROPERTY_NAME_TOO_WIDE = 0x80041073L WBEM_E_CLASS_NAME_TOO_WIDE = 0x80041074L WBEM_E_METHOD_NAME_TOO_WIDE = 0x80041075L WBEM_E_QUALIFIER_NAME_TOO_WIDE = 0x80041076L WBEM_E_RERUN_COMMAND = 0x80041077L WBEM_E_DATABASE_VER_MISMATCH = 0x80041078L WBEM_E_VETO_DELETE = 0x80041079L WBEM_E_VETO_PUT = 0x8004107aL WBEM_E_INVALID_LOCALE = 0x80041080L WBEM_E_PROVIDER_SUSPENDED = 0x80041081L WBEM_E_SYNCHRONIZATION_REQUIRED = 0x80041082L WBEM_E_NO_SCHEMA = 0x80041083L WBEM_E_PROVIDER_ALREADY_REGISTERED = 0x80041084L WBEM_E_PROVIDER_NOT_REGISTERED = 0x80041085L WBEM_E_FATAL_TRANSPORT_ERROR = 0x80041086L WBEM_E_ENCRYPTED_CONNECTION_REQUIRED = 0x80041087L WBEM_E_PROVIDER_TIMED_OUT = 0x80041088L WBEM_E_NO_KEY = 0x80041089L WBEM_E_PROVIDER_DISABLED = 0x8004108aL WBEMESS_E_REGISTRATION_TOO_BROAD = 0x80042001L WBEMESS_E_REGISTRATION_TOO_PRECISE = 0x80042002L WBEMESS_E_AUTHZ_NOT_PRIVILEGED = 0x80042003L WBEMMOF_E_EXPECTED_QUALIFIER_NAME = 0x80044001L WBEMMOF_E_EXPECTED_SEMI = 0x80044002L WBEMMOF_E_EXPECTED_OPEN_BRACE = 0x80044003L WBEMMOF_E_EXPECTED_CLOSE_BRACE = 0x80044004L WBEMMOF_E_EXPECTED_CLOSE_BRACKET = 0x80044005L WBEMMOF_E_EXPECTED_CLOSE_PAREN = 0x80044006L WBEMMOF_E_ILLEGAL_CONSTANT_VALUE = 0x80044007L WBEMMOF_E_EXPECTED_TYPE_IDENTIFIER = 0x80044008L WBEMMOF_E_EXPECTED_OPEN_PAREN = 0x80044009L WBEMMOF_E_UNRECOGNIZED_TOKEN = 0x8004400aL WBEMMOF_E_UNRECOGNIZED_TYPE = 0x8004400bL WBEMMOF_E_EXPECTED_PROPERTY_NAME = 0x8004400cL WBEMMOF_E_TYPEDEF_NOT_SUPPORTED = 0x8004400dL WBEMMOF_E_UNEXPECTED_ALIAS = 0x8004400eL WBEMMOF_E_UNEXPECTED_ARRAY_INIT = 0x8004400fL WBEMMOF_E_INVALID_AMENDMENT_SYNTAX = 0x80044010L WBEMMOF_E_INVALID_DUPLICATE_AMENDMENT = 0x80044011L WBEMMOF_E_INVALID_PRAGMA = 0x80044012L WBEMMOF_E_INVALID_NAMESPACE_SYNTAX = 0x80044013L WBEMMOF_E_EXPECTED_CLASS_NAME = 0x80044014L WBEMMOF_E_TYPE_MISMATCH = 0x80044015L WBEMMOF_E_EXPECTED_ALIAS_NAME = 0x80044016L WBEMMOF_E_INVALID_CLASS_DECLARATION = 0x80044017L WBEMMOF_E_INVALID_INSTANCE_DECLARATION = 0x80044018L WBEMMOF_E_EXPECTED_DOLLAR = 0x80044019L WBEMMOF_E_CIMTYPE_QUALIFIER = 0x8004401aL WBEMMOF_E_DUPLICATE_PROPERTY = 0x8004401bL WBEMMOF_E_INVALID_NAMESPACE_SPECIFICATION = 0x8004401cL WBEMMOF_E_OUT_OF_RANGE = 0x8004401dL WBEMMOF_E_INVALID_FILE = 0x8004401eL WBEMMOF_E_ALIASES_IN_EMBEDDED = 0x8004401fL WBEMMOF_E_NULL_ARRAY_ELEM = 0x80044020L WBEMMOF_E_DUPLICATE_QUALIFIER = 0x80044021L WBEMMOF_E_EXPECTED_FLAVOR_TYPE = 0x80044022L WBEMMOF_E_INCOMPATIBLE_FLAVOR_TYPES = 0x80044023L WBEMMOF_E_MULTIPLE_ALIASES = 0x80044024L WBEMMOF_E_INCOMPATIBLE_FLAVOR_TYPES2 = 0x80044025L WBEMMOF_E_NO_ARRAYS_RETURNED = 0x80044026L WBEMMOF_E_MUST_BE_IN_OR_OUT = 0x80044027L WBEMMOF_E_INVALID_FLAGS_SYNTAX = 0x80044028L WBEMMOF_E_EXPECTED_BRACE_OR_BAD_TYPE = 0x80044029L WBEMMOF_E_UNSUPPORTED_CIMV22_QUAL_VALUE = 0x8004402aL WBEMMOF_E_UNSUPPORTED_CIMV22_DATA_TYPE = 0x8004402bL WBEMMOF_E_INVALID_DELETEINSTANCE_SYNTAX = 0x8004402cL WBEMMOF_E_INVALID_QUALIFIER_SYNTAX = 0x8004402dL WBEMMOF_E_QUALIFIER_USED_OUTSIDE_SCOPE = 0x8004402eL WBEMMOF_E_ERROR_CREATING_TEMP_FILE = 0x8004402fL WBEMMOF_E_ERROR_INVALID_INCLUDE_FILE = 0x80044030L WBEMMOF_E_INVALID_DELETECLASS_SYNTAX = 0x80044031L # Enum tagCLSCTX definitions tagCLSCTX = DWORD CLSCTX = tagCLSCTX CLSCTX_INPROC_SERVER = 0x1 CLSCTX_INPROC_HANDLER = 0x2 CLSCTX_LOCAL_SERVER = 0x4 CLSCTX_INPROC_SERVER16 = 0x8 CLSCTX_REMOTE_SERVER = 0x10 CLSCTX_INPROC_HANDLER16 = 0x20 CLSCTX_RESERVED1 = 0x40 CLSCTX_RESERVED2 = 0x80 CLSCTX_RESERVED3 = 0x100 CLSCTX_RESERVED4 = 0x200 CLSCTX_NO_CODE_DOWNLOAD = 0x400 CLSCTX_RESERVED5 = 0x800 CLSCTX_NO_CUSTOM_MARSHAL = 0x1000 CLSCTX_ENABLE_CODE_DOWNLOAD = 0x2000 CLSCTX_NO_FAILURE_LOG = 0x4000 CLSCTX_DISABLE_AAA = 0x8000 CLSCTX_ENABLE_AAA = 0x10000 CLSCTX_FROM_DEFAULT_CONTEXT = 0x20000 CLSCTX_ACTIVATE_32_BIT_SERVER = 0x40000 CLSCTX_ACTIVATE_64_BIT_SERVER = 0x80000 CLSCTX_ENABLE_CLOAKING = 0x100000 CLSCTX_APPCONTAINER = 0x400000 CLSCTX_ACTIVATE_AAA_AS_IU = 0x800000 CLSCTX_PS_DLL = 0x80000000L # Enum _INTERNAL_IF_OPER_STATUS definitions _INTERNAL_IF_OPER_STATUS = DWORD INTERNAL_IF_OPER_STATUS = _INTERNAL_IF_OPER_STATUS IF_OPER_STATUS_NON_OPERATIONAL = 0x0 IF_OPER_STATUS_UNREACHABLE = 0x1 IF_OPER_STATUS_DISCONNECTED = 0x2 IF_OPER_STATUS_CONNECTING = 0x3 IF_OPER_STATUS_CONNECTED = 0x4 IF_OPER_STATUS_OPERATIONAL = 0x5 # Enum _IMAGEHLP_SYMBOL_TYPE_INFO definitions _IMAGEHLP_SYMBOL_TYPE_INFO = DWORD IMAGEHLP_SYMBOL_TYPE_INFO = _IMAGEHLP_SYMBOL_TYPE_INFO TI_GET_SYMTAG = 0x0 TI_GET_SYMNAME = 0x1 TI_GET_LENGTH = 0x2 TI_GET_TYPE = 0x3 TI_GET_TYPEID = 0x4 TI_GET_BASETYPE = 0x5 TI_GET_ARRAYINDEXTYPEID = 0x6 TI_FINDCHILDREN = 0x7 TI_GET_DATAKIND = 0x8 TI_GET_ADDRESSOFFSET = 0x9 TI_GET_OFFSET = 0xa TI_GET_VALUE = 0xb TI_GET_COUNT = 0xc TI_GET_CHILDRENCOUNT = 0xd TI_GET_BITPOSITION = 0xe TI_GET_VIRTUALBASECLASS = 0xf TI_GET_VIRTUALTABLESHAPEID = 0x10 TI_GET_VIRTUALBASEPOINTEROFFSET = 0x11 TI_GET_CLASSPARENTID = 0x12 TI_GET_NESTED = 0x13 TI_GET_SYMINDEX = 0x14 TI_GET_LEXICALPARENT = 0x15 TI_GET_ADDRESS = 0x16 TI_GET_THISADJUST = 0x17 TI_GET_UDTKIND = 0x18 TI_IS_EQUIV_TO = 0x19 TI_GET_CALLING_CONVENTION = 0x1a TI_IS_CLOSE_EQUIV_TO = 0x1b TI_GTIEX_REQS_VALID = 0x1c TI_GET_VIRTUALBASEOFFSET = 0x1d TI_GET_VIRTUALBASEDISPINDEX = 0x1e TI_GET_IS_REFERENCE = 0x1f TI_GET_INDIRECTVIRTUALBASECLASS = 0x20 IMAGEHLP_SYMBOL_TYPE_INFO_MAX = 0x21 # Enum _PROCESSINFOCLASS definitions _PROCESSINFOCLASS = DWORD PROCESSINFOCLASS = _PROCESSINFOCLASS ProcessBasicInformation = 0x0 ProcessWow64Information = 0x1a # Enum tagCOINIT definitions tagCOINIT = DWORD COINIT = tagCOINIT COINIT_APARTMENTTHREADED = 0x2 COINIT_MULTITHREADED = 0x0 COINIT_DISABLE_OLE1DDE = 0x4 COINIT_SPEED_OVER_MEMORY = 0x8 # Enum tagTYPEKIND definitions tagTYPEKIND = DWORD TYPEKIND = tagTYPEKIND TKIND_ENUM = 0x0 TKIND_RECORD = 0x1 TKIND_MODULE = 0x2 TKIND_INTERFACE = 0x3 TKIND_DISPATCH = 0x4 TKIND_COCLASS = 0x5 TKIND_ALIAS = 0x6 TKIND_UNION = 0x7 TKIND_MAX = 0x8 # Struct _LIST_ENTRY definitions # Self referencing struct tricks class _LIST_ENTRY(Structure): pass _LIST_ENTRY._fields_ = [ ("Flink", POINTER(_LIST_ENTRY)), ("Blink", POINTER(_LIST_ENTRY)), ] PLIST_ENTRY = POINTER(_LIST_ENTRY) LIST_ENTRY = _LIST_ENTRY PRLIST_ENTRY = POINTER(_LIST_ENTRY) # Struct _PEB_LDR_DATA definitions class _PEB_LDR_DATA(Structure): _fields_ = [ ("Reserved1", BYTE * 8), ("Reserved2", PVOID * 3), ("InMemoryOrderModuleList", LIST_ENTRY), ] PPEB_LDR_DATA = POINTER(_PEB_LDR_DATA) PEB_LDR_DATA = _PEB_LDR_DATA # Struct _LSA_UNICODE_STRING definitions class _LSA_UNICODE_STRING(Structure): _fields_ = [ ("Length", USHORT), ("MaximumLength", USHORT), ("Buffer", PWSTR), ] PUNICODE_STRING = POINTER(_LSA_UNICODE_STRING) UNICODE_STRING = _LSA_UNICODE_STRING LSA_UNICODE_STRING = _LSA_UNICODE_STRING PLSA_UNICODE_STRING = POINTER(_LSA_UNICODE_STRING) # Struct _RTL_USER_PROCESS_PARAMETERS definitions class _RTL_USER_PROCESS_PARAMETERS(Structure): _fields_ = [ ("Reserved1", BYTE * 16), ("Reserved2", PVOID * 10), ("ImagePathName", UNICODE_STRING), ("CommandLine", UNICODE_STRING), ] PRTL_USER_PROCESS_PARAMETERS = POINTER(_RTL_USER_PROCESS_PARAMETERS) RTL_USER_PROCESS_PARAMETERS = _RTL_USER_PROCESS_PARAMETERS # Struct _PEB definitions class _PEB(Structure): _fields_ = [ ("Reserved1", BYTE * 2), ("BeingDebugged", BYTE), ("Reserved2", BYTE * 1), ("Reserved3", PVOID * 2), ("Ldr", PPEB_LDR_DATA), ("ProcessParameters", PRTL_USER_PROCESS_PARAMETERS), ("Reserved4", BYTE * 104), ("Reserved5", PVOID * 52), ("PostProcessInitRoutine", PPS_POST_PROCESS_INIT_ROUTINE), ("Reserved6", BYTE * 128), ("Reserved7", PVOID * 1), ("SessionId", ULONG), ] PPEB = POINTER(_PEB) PEB = _PEB # Struct _SECURITY_ATTRIBUTES definitions class _SECURITY_ATTRIBUTES(Structure): _fields_ = [ ("nLength", DWORD), ("lpSecurityDescriptor", LPVOID), ("bInheritHandle", BOOL), ] SECURITY_ATTRIBUTES = _SECURITY_ATTRIBUTES LPSECURITY_ATTRIBUTES = POINTER(_SECURITY_ATTRIBUTES) PSECURITY_ATTRIBUTES = POINTER(_SECURITY_ATTRIBUTES) # Struct _SYSTEM_VERIFIER_INFORMATION definitions class _SYSTEM_VERIFIER_INFORMATION(Structure): _fields_ = [ ("NextEntryOffset", ULONG), ("Level", ULONG), ("DriverName", UNICODE_STRING), ("RaiseIrqls", ULONG), ("AcquireSpinLocks", ULONG), ("SynchronizeExecutions", ULONG), ("AllocationsAttempted", ULONG), ("AllocationsSucceeded", ULONG), ("AllocationsSucceededSpecialPool", ULONG), ("AllocationsWithNoTag", ULONG), ("TrimRequests", ULONG), ("Trims", ULONG), ("AllocationsFailed", ULONG), ("AllocationsFailedDeliberately", ULONG), ("Loads", ULONG), ("Unloads", ULONG), ("UnTrackedPool", ULONG), ("CurrentPagedPoolAllocations", ULONG), ("CurrentNonPagedPoolAllocations", ULONG), ("PeakPagedPoolAllocations", ULONG), ("PeakNonPagedPoolAllocations", ULONG), ("PagedPoolUsageInBytes", SIZE_T), ("NonPagedPoolUsageInBytes", SIZE_T), ("PeakPagedPoolUsageInBytes", SIZE_T), ("PeakNonPagedPoolUsageInBytes", SIZE_T), ] PSYSTEM_VERIFIER_INFORMATION = POINTER(_SYSTEM_VERIFIER_INFORMATION) SYSTEM_VERIFIER_INFORMATION = _SYSTEM_VERIFIER_INFORMATION # Struct _LDR_DATA_TABLE_ENTRY definitions class _LDR_DATA_TABLE_ENTRY(Structure): _fields_ = [ ("Reserved1", PVOID * 2), ("InMemoryOrderLinks", LIST_ENTRY), ("Reserved2", PVOID * 2), ("DllBase", PVOID), ("EntryPoint", PVOID), ("Reserved3", PVOID), ("FullDllName", UNICODE_STRING), ("BaseDllName", UNICODE_STRING), ("Reserved5", PVOID * 3), ("CheckSum", ULONG), ("TimeDateStamp", ULONG), ] PLDR_DATA_TABLE_ENTRY = POINTER(_LDR_DATA_TABLE_ENTRY) LDR_DATA_TABLE_ENTRY = _LDR_DATA_TABLE_ENTRY # Struct _IMAGE_FILE_HEADER definitions class _IMAGE_FILE_HEADER(Structure): _fields_ = [ ("Machine", WORD), ("NumberOfSections", WORD), ("TimeDateStamp", DWORD), ("PointerToSymbolTable", DWORD), ("NumberOfSymbols", DWORD), ("SizeOfOptionalHeader", WORD), ("Characteristics", WORD), ] IMAGE_FILE_HEADER = _IMAGE_FILE_HEADER PIMAGE_FILE_HEADER = POINTER(_IMAGE_FILE_HEADER) # Struct _IMAGE_DATA_DIRECTORY definitions class _IMAGE_DATA_DIRECTORY(Structure): _fields_ = [ ("VirtualAddress", DWORD), ("Size", DWORD), ] IMAGE_DATA_DIRECTORY = _IMAGE_DATA_DIRECTORY PIMAGE_DATA_DIRECTORY = POINTER(_IMAGE_DATA_DIRECTORY) # Struct _IMAGE_SECTION_HEADER definitions class _IMAGE_SECTION_HEADER(Structure): _fields_ = [ ("Name", BYTE * IMAGE_SIZEOF_SHORT_NAME), ("VirtualSize", DWORD), ("VirtualAddress", DWORD), ("SizeOfRawData", DWORD), ("PointerToRawData", DWORD), ("PointerToRelocations", DWORD), ("PointerToLinenumbers", DWORD), ("NumberOfRelocations", WORD), ("NumberOfLinenumbers", WORD), ("Characteristics", DWORD), ] PIMAGE_SECTION_HEADER = POINTER(_IMAGE_SECTION_HEADER) IMAGE_SECTION_HEADER = _IMAGE_SECTION_HEADER # Struct _IMAGE_OPTIONAL_HEADER64 definitions class _IMAGE_OPTIONAL_HEADER64(Structure): _fields_ = [ ("Magic", WORD), ("MajorLinkerVersion", BYTE), ("MinorLinkerVersion", BYTE), ("SizeOfCode", DWORD), ("SizeOfInitializedData", DWORD), ("SizeOfUninitializedData", DWORD), ("AddressOfEntryPoint", DWORD), ("BaseOfCode", DWORD), ("ImageBase", ULONGLONG), ("SectionAlignment", DWORD), ("FileAlignment", DWORD), ("MajorOperatingSystemVersion", WORD), ("MinorOperatingSystemVersion", WORD), ("MajorImageVersion", WORD), ("MinorImageVersion", WORD), ("MajorSubsystemVersion", WORD), ("MinorSubsystemVersion", WORD), ("Win32VersionValue", DWORD), ("SizeOfImage", DWORD), ("SizeOfHeaders", DWORD), ("CheckSum", DWORD), ("Subsystem", WORD), ("DllCharacteristics", WORD), ("SizeOfStackReserve", ULONGLONG), ("SizeOfStackCommit", ULONGLONG), ("SizeOfHeapReserve", ULONGLONG), ("SizeOfHeapCommit", ULONGLONG), ("LoaderFlags", DWORD), ("NumberOfRvaAndSizes", DWORD), ("DataDirectory", IMAGE_DATA_DIRECTORY * IMAGE_NUMBEROF_DIRECTORY_ENTRIES), ] PIMAGE_OPTIONAL_HEADER64 = POINTER(_IMAGE_OPTIONAL_HEADER64) IMAGE_OPTIONAL_HEADER64 = _IMAGE_OPTIONAL_HEADER64 # Struct _IMAGE_OPTIONAL_HEADER definitions class _IMAGE_OPTIONAL_HEADER(Structure): _fields_ = [ ("Magic", WORD), ("MajorLinkerVersion", BYTE), ("MinorLinkerVersion", BYTE), ("SizeOfCode", DWORD), ("SizeOfInitializedData", DWORD), ("SizeOfUninitializedData", DWORD), ("AddressOfEntryPoint", DWORD), ("BaseOfCode", DWORD), ("BaseOfData", DWORD), ("ImageBase", DWORD), ("SectionAlignment", DWORD), ("FileAlignment", DWORD), ("MajorOperatingSystemVersion", WORD), ("MinorOperatingSystemVersion", WORD), ("MajorImageVersion", WORD), ("MinorImageVersion", WORD), ("MajorSubsystemVersion", WORD), ("MinorSubsystemVersion", WORD), ("Win32VersionValue", DWORD), ("SizeOfImage", DWORD), ("SizeOfHeaders", DWORD), ("CheckSum", DWORD), ("Subsystem", WORD), ("DllCharacteristics", WORD), ("SizeOfStackReserve", DWORD), ("SizeOfStackCommit", DWORD), ("SizeOfHeapReserve", DWORD), ("SizeOfHeapCommit", DWORD), ("LoaderFlags", DWORD), ("NumberOfRvaAndSizes", DWORD), ("DataDirectory", IMAGE_DATA_DIRECTORY * IMAGE_NUMBEROF_DIRECTORY_ENTRIES), ] PIMAGE_OPTIONAL_HEADER32 = POINTER(_IMAGE_OPTIONAL_HEADER) IMAGE_OPTIONAL_HEADER32 = _IMAGE_OPTIONAL_HEADER # Struct _IMAGE_NT_HEADERS64 definitions class _IMAGE_NT_HEADERS64(Structure): _fields_ = [ ("Signature", DWORD), ("FileHeader", IMAGE_FILE_HEADER), ("OptionalHeader", IMAGE_OPTIONAL_HEADER64), ] PIMAGE_NT_HEADERS64 = POINTER(_IMAGE_NT_HEADERS64) IMAGE_NT_HEADERS64 = _IMAGE_NT_HEADERS64 # Struct _IMAGE_NT_HEADERS definitions class _IMAGE_NT_HEADERS(Structure): _fields_ = [ ("Signature", DWORD), ("FileHeader", IMAGE_FILE_HEADER), ("OptionalHeader", IMAGE_OPTIONAL_HEADER32), ] IMAGE_NT_HEADERS32 = _IMAGE_NT_HEADERS PIMAGE_NT_HEADERS32 = POINTER(_IMAGE_NT_HEADERS) # Struct _IMAGE_IMPORT_DESCRIPTOR definitions class _IMAGE_IMPORT_DESCRIPTOR(Structure): _fields_ = [ ("OriginalFirstThunk", DWORD), ("TimeDateStamp", DWORD), ("ForwarderChain", DWORD), ("Name", DWORD), ("FirstThunk", DWORD), ] IMAGE_IMPORT_DESCRIPTOR = _IMAGE_IMPORT_DESCRIPTOR PIMAGE_IMPORT_DESCRIPTOR = POINTER(_IMAGE_IMPORT_DESCRIPTOR) # Struct _IMAGE_IMPORT_BY_NAME definitions class _IMAGE_IMPORT_BY_NAME(Structure): _fields_ = [ ("Hint", WORD), ("Name", BYTE * 1), ] PIMAGE_IMPORT_BY_NAME = POINTER(_IMAGE_IMPORT_BY_NAME) IMAGE_IMPORT_BY_NAME = _IMAGE_IMPORT_BY_NAME # Struct _IMAGE_EXPORT_DIRECTORY definitions class _IMAGE_EXPORT_DIRECTORY(Structure): _fields_ = [ ("Characteristics", DWORD), ("TimeDateStamp", DWORD), ("MajorVersion", WORD), ("MinorVersion", WORD), ("Name", DWORD), ("Base", DWORD), ("NumberOfFunctions", DWORD), ("NumberOfNames", DWORD), ("AddressOfFunctions", DWORD), ("AddressOfNames", DWORD), ("AddressOfNameOrdinals", DWORD), ] IMAGE_EXPORT_DIRECTORY = _IMAGE_EXPORT_DIRECTORY PIMAGE_EXPORT_DIRECTORY = POINTER(_IMAGE_EXPORT_DIRECTORY) # Struct _MEMORY_BASIC_INFORMATION definitions class _MEMORY_BASIC_INFORMATION(Structure): _fields_ = [ ("BaseAddress", PVOID), ("AllocationBase", PVOID), ("AllocationProtect", DWORD), ("RegionSize", SIZE_T), ("State", DWORD), ("Protect", DWORD), ("Type", DWORD), ] PMEMORY_BASIC_INFORMATION = POINTER(_MEMORY_BASIC_INFORMATION) MEMORY_BASIC_INFORMATION = _MEMORY_BASIC_INFORMATION # Struct _MEMORY_BASIC_INFORMATION32 definitions class _MEMORY_BASIC_INFORMATION32(Structure): _fields_ = [ ("BaseAddress", DWORD), ("AllocationBase", DWORD), ("AllocationProtect", DWORD), ("RegionSize", DWORD), ("State", DWORD), ("Protect", DWORD), ("Type", DWORD), ] MEMORY_BASIC_INFORMATION32 = _MEMORY_BASIC_INFORMATION32 PMEMORY_BASIC_INFORMATION32 = POINTER(_MEMORY_BASIC_INFORMATION32) # Struct _MEMORY_BASIC_INFORMATION64 definitions class _MEMORY_BASIC_INFORMATION64(Structure): _fields_ = [ ("BaseAddress", ULONGLONG), ("AllocationBase", ULONGLONG), ("AllocationProtect", DWORD), ("__alignment1", DWORD), ("RegionSize", ULONGLONG), ("State", DWORD), ("Protect", DWORD), ("Type", DWORD), ("__alignment2", DWORD), ] PMEMORY_BASIC_INFORMATION64 = POINTER(_MEMORY_BASIC_INFORMATION64) MEMORY_BASIC_INFORMATION64 = _MEMORY_BASIC_INFORMATION64 # Struct _STARTUPINFOA definitions class _STARTUPINFOA(Structure): _fields_ = [ ("cb", DWORD), ("lpReserved", LPSTR), ("lpDesktop", LPSTR), ("lpTitle", LPSTR), ("dwX", DWORD), ("dwY", DWORD), ("dwXSize", DWORD), ("dwYSize", DWORD), ("dwXCountChars", DWORD), ("dwYCountChars", DWORD), ("dwFillAttribute", DWORD), ("dwFlags", DWORD), ("wShowWindow", WORD), ("cbReserved2", WORD), ("lpReserved2", LPBYTE), ("hStdInput", HANDLE), ("hStdOutput", HANDLE), ("hStdError", HANDLE), ] LPSTARTUPINFOA = POINTER(_STARTUPINFOA) STARTUPINFOA = _STARTUPINFOA # Struct _STARTUPINFOW definitions class _STARTUPINFOW(Structure): _fields_ = [ ("cb", DWORD), ("lpReserved", LPWSTR), ("lpDesktop", LPWSTR), ("lpTitle", LPWSTR), ("dwX", DWORD), ("dwY", DWORD), ("dwXSize", DWORD), ("dwYSize", DWORD), ("dwXCountChars", DWORD), ("dwYCountChars", DWORD), ("dwFillAttribute", DWORD), ("dwFlags", DWORD), ("wShowWindow", WORD), ("cbReserved2", WORD), ("lpReserved2", LPBYTE), ("hStdInput", HANDLE), ("hStdOutput", HANDLE), ("hStdError", HANDLE), ] STARTUPINFOW = _STARTUPINFOW LPSTARTUPINFOW = POINTER(_STARTUPINFOW) # Struct _PROCESS_INFORMATION definitions class _PROCESS_INFORMATION(Structure): _fields_ = [ ("hProcess", HANDLE), ("hThread", HANDLE), ("dwProcessId", DWORD), ("dwThreadId", DWORD), ] LPPROCESS_INFORMATION = POINTER(_PROCESS_INFORMATION) PROCESS_INFORMATION = _PROCESS_INFORMATION PPROCESS_INFORMATION = POINTER(_PROCESS_INFORMATION) # Struct _FLOATING_SAVE_AREA definitions class _FLOATING_SAVE_AREA(Structure): _fields_ = [ ("ControlWord", DWORD), ("StatusWord", DWORD), ("TagWord", DWORD), ("ErrorOffset", DWORD), ("ErrorSelector", DWORD), ("DataOffset", DWORD), ("DataSelector", DWORD), ("RegisterArea", BYTE * 80), ("Cr0NpxState", DWORD), ] FLOATING_SAVE_AREA = _FLOATING_SAVE_AREA # Struct _CONTEXT32 definitions class _CONTEXT32(Structure): _fields_ = [ ("ContextFlags", DWORD), ("Dr0", DWORD), ("Dr1", DWORD), ("Dr2", DWORD), ("Dr3", DWORD), ("Dr6", DWORD), ("Dr7", DWORD), ("FloatSave", FLOATING_SAVE_AREA), ("SegGs", DWORD), ("SegFs", DWORD), ("SegEs", DWORD), ("SegDs", DWORD), ("Edi", DWORD), ("Esi", DWORD), ("Ebx", DWORD), ("Edx", DWORD), ("Ecx", DWORD), ("Eax", DWORD), ("Ebp", DWORD), ("Eip", DWORD), ("SegCs", DWORD), ("EFlags", DWORD), ("Esp", DWORD), ("SegSs", DWORD), ("ExtendedRegisters", BYTE * 512), ] PCONTEXT32 = POINTER(_CONTEXT32) CONTEXT32 = _CONTEXT32 LPCONTEXT32 = POINTER(_CONTEXT32) # Struct _WOW64_FLOATING_SAVE_AREA definitions class _WOW64_FLOATING_SAVE_AREA(Structure): _fields_ = [ ("ControlWord", DWORD), ("StatusWord", DWORD), ("TagWord", DWORD), ("ErrorOffset", DWORD), ("ErrorSelector", DWORD), ("DataOffset", DWORD), ("DataSelector", DWORD), ("RegisterArea", BYTE * WOW64_SIZE_OF_80387_REGISTERS), ("Cr0NpxState", DWORD), ] WOW64_FLOATING_SAVE_AREA = _WOW64_FLOATING_SAVE_AREA # Struct _WOW64_CONTEXT definitions class _WOW64_CONTEXT(Structure): _fields_ = [ ("ContextFlags", DWORD), ("Dr0", DWORD), ("Dr1", DWORD), ("Dr2", DWORD), ("Dr3", DWORD), ("Dr6", DWORD), ("Dr7", DWORD), ("FloatSave", WOW64_FLOATING_SAVE_AREA), ("SegGs", DWORD), ("SegFs", DWORD), ("SegEs", DWORD), ("SegDs", DWORD), ("Edi", DWORD), ("Esi", DWORD), ("Ebx", DWORD), ("Edx", DWORD), ("Ecx", DWORD), ("Eax", DWORD), ("Ebp", DWORD), ("Eip", DWORD), ("SegCs", DWORD), ("EFlags", DWORD), ("Esp", DWORD), ("SegSs", DWORD), ("ExtendedRegisters", BYTE * WOW64_MAXIMUM_SUPPORTED_EXTENSION), ] PWOW64_CONTEXT = POINTER(_WOW64_CONTEXT) WOW64_CONTEXT = _WOW64_CONTEXT # Struct _M128A definitions class _M128A(Structure): _fields_ = [ ("Low", ULONGLONG), ("High", LONGLONG), ] M128A = _M128A PM128A = POINTER(_M128A) # Struct _CONTEXT64 definitions class _CONTEXT64(Structure): _fields_ = [ ("P1Home", DWORD64), ("P2Home", DWORD64), ("P3Home", DWORD64), ("P4Home", DWORD64), ("P5Home", DWORD64), ("P6Home", DWORD64), ("ContextFlags", DWORD), ("MxCsr", DWORD), ("SegCs", WORD), ("SegDs", WORD), ("SegEs", WORD), ("SegFs", WORD), ("SegGs", WORD), ("SegSs", WORD), ("EFlags", DWORD), ("Dr0", DWORD64), ("Dr1", DWORD64), ("Dr2", DWORD64), ("Dr3", DWORD64), ("Dr6", DWORD64), ("Dr7", DWORD64), ("Rax", DWORD64), ("Rcx", DWORD64), ("Rdx", DWORD64), ("Rbx", DWORD64), ("Rsp", DWORD64), ("Rbp", DWORD64), ("Rsi", DWORD64), ("Rdi", DWORD64), ("R8", DWORD64), ("R9", DWORD64), ("R10", DWORD64), ("R11", DWORD64), ("R12", DWORD64), ("R13", DWORD64), ("R14", DWORD64), ("R15", DWORD64), ("Rip", DWORD64), ("Header", M128A * 2), ("Legacy", M128A * 8), ("Xmm0", M128A), ("Xmm1", M128A), ("Xmm2", M128A), ("Xmm3", M128A), ("Xmm4", M128A), ("Xmm5", M128A), ("Xmm6", M128A), ("Xmm7", M128A), ("Xmm8", M128A), ("Xmm9", M128A), ("Xmm10", M128A), ("Xmm11", M128A), ("Xmm12", M128A), ("Xmm13", M128A), ("Xmm14", M128A), ("Xmm15", M128A), ("VectorRegister", M128A * 26), ("VectorControl", DWORD64), ("DebugControl", DWORD64), ("LastBranchToRip", DWORD64), ("LastBranchFromRip", DWORD64), ("LastExceptionToRip", DWORD64), ("LastExceptionFromRip", DWORD64), ] PCONTEXT64 = POINTER(_CONTEXT64) CONTEXT64 = _CONTEXT64 LPCONTEXT64 = POINTER(_CONTEXT64) # Struct tagPROCESSENTRY32W definitions class tagPROCESSENTRY32W(Structure): _fields_ = [ ("dwSize", DWORD), ("cntUsage", DWORD), ("th32ProcessID", DWORD), ("th32DefaultHeapID", ULONG_PTR), ("th32ModuleID", DWORD), ("cntThreads", DWORD), ("th32ParentProcessID", DWORD), ("pcPriClassBase", LONG), ("dwFlags", DWORD), ("szExeFile", WCHAR * MAX_PATH), ] PPROCESSENTRY32W = POINTER(tagPROCESSENTRY32W) LPPROCESSENTRY32W = POINTER(tagPROCESSENTRY32W) PROCESSENTRY32W = tagPROCESSENTRY32W # Struct tagPROCESSENTRY32 definitions class tagPROCESSENTRY32(Structure): _fields_ = [ ("dwSize", DWORD), ("cntUsage", DWORD), ("th32ProcessID", DWORD), ("th32DefaultHeapID", ULONG_PTR), ("th32ModuleID", DWORD), ("cntThreads", DWORD), ("th32ParentProcessID", DWORD), ("pcPriClassBase", LONG), ("dwFlags", DWORD), ("szExeFile", CHAR * MAX_PATH), ] PROCESSENTRY32 = tagPROCESSENTRY32 PPROCESSENTRY32 = POINTER(tagPROCESSENTRY32) LPPROCESSENTRY32 = POINTER(tagPROCESSENTRY32) # Struct tagTHREADENTRY32 definitions class tagTHREADENTRY32(Structure): _fields_ = [ ("dwSize", DWORD), ("cntUsage", DWORD), ("th32ThreadID", DWORD), ("th32OwnerProcessID", DWORD), ("tpBasePri", LONG), ("tpDeltaPri", LONG), ("dwFlags", DWORD), ] PTHREADENTRY32 = POINTER(tagTHREADENTRY32) THREADENTRY32 = tagTHREADENTRY32 LPTHREADENTRY32 = POINTER(tagTHREADENTRY32) # Struct _LUID definitions class _LUID(Structure): _fields_ = [ ("LowPart", DWORD), ("HighPart", LONG), ] LUID = _LUID PLUID = POINTER(_LUID) # Struct _LUID_AND_ATTRIBUTES definitions class _LUID_AND_ATTRIBUTES(Structure): _fields_ = [ ("Luid", LUID), ("Attributes", DWORD), ] LUID_AND_ATTRIBUTES = _LUID_AND_ATTRIBUTES PLUID_AND_ATTRIBUTES = POINTER(_LUID_AND_ATTRIBUTES) # Struct _TOKEN_PRIVILEGES definitions class _TOKEN_PRIVILEGES(Structure): _fields_ = [ ("PrivilegeCount", DWORD), ("Privileges", LUID_AND_ATTRIBUTES * ANYSIZE_ARRAY), ] TOKEN_PRIVILEGES = _TOKEN_PRIVILEGES PTOKEN_PRIVILEGES = POINTER(_TOKEN_PRIVILEGES) # Struct _TOKEN_ELEVATION definitions class _TOKEN_ELEVATION(Structure): _fields_ = [ ("TokenIsElevated", DWORD), ] TOKEN_ELEVATION = _TOKEN_ELEVATION PTOKEN_ELEVATION = POINTER(_TOKEN_ELEVATION) # Struct _SID_AND_ATTRIBUTES definitions class _SID_AND_ATTRIBUTES(Structure): _fields_ = [ ("Sid", PSID), ("Attributes", DWORD), ] SID_AND_ATTRIBUTES = _SID_AND_ATTRIBUTES PSID_AND_ATTRIBUTES = POINTER(_SID_AND_ATTRIBUTES) # Struct _TOKEN_MANDATORY_LABEL definitions class _TOKEN_MANDATORY_LABEL(Structure): _fields_ = [ ("Label", SID_AND_ATTRIBUTES), ] TOKEN_MANDATORY_LABEL = _TOKEN_MANDATORY_LABEL PTOKEN_MANDATORY_LABEL = POINTER(_TOKEN_MANDATORY_LABEL) # Struct _TOKEN_USER definitions class _TOKEN_USER(Structure): _fields_ = [ ("User", SID_AND_ATTRIBUTES), ] PTOKEN_USER = POINTER(_TOKEN_USER) TOKEN_USER = _TOKEN_USER # Struct _OSVERSIONINFOA definitions class _OSVERSIONINFOA(Structure): _fields_ = [ ("dwOSVersionInfoSize", DWORD), ("dwMajorVersion", DWORD), ("dwMinorVersion", DWORD), ("dwBuildNumber", DWORD), ("dwPlatformId", DWORD), ("szCSDVersion", CHAR * 128), ] POSVERSIONINFOA = POINTER(_OSVERSIONINFOA) OSVERSIONINFOA = _OSVERSIONINFOA LPOSVERSIONINFOA = POINTER(_OSVERSIONINFOA) # Struct _OSVERSIONINFOW definitions class _OSVERSIONINFOW(Structure): _fields_ = [ ("dwOSVersionInfoSize", DWORD), ("dwMajorVersion", DWORD), ("dwMinorVersion", DWORD), ("dwBuildNumber", DWORD), ("dwPlatformId", DWORD), ("szCSDVersion", WCHAR * 128), ] RTL_OSVERSIONINFOW = _OSVERSIONINFOW PRTL_OSVERSIONINFOW = POINTER(_OSVERSIONINFOW) LPOSVERSIONINFOW = POINTER(_OSVERSIONINFOW) POSVERSIONINFOW = POINTER(_OSVERSIONINFOW) OSVERSIONINFOW = _OSVERSIONINFOW # Struct _OSVERSIONINFOEXA definitions class _OSVERSIONINFOEXA(Structure): _fields_ = [ ("dwOSVersionInfoSize", DWORD), ("dwMajorVersion", DWORD), ("dwMinorVersion", DWORD), ("dwBuildNumber", DWORD), ("dwPlatformId", DWORD), ("szCSDVersion", CHAR * 128), ("wServicePackMajor", WORD), ("wServicePackMinor", WORD), ("wSuiteMask", WORD), ("wProductType", BYTE), ("wReserved", BYTE), ] OSVERSIONINFOEXA = _OSVERSIONINFOEXA POSVERSIONINFOEXA = POINTER(_OSVERSIONINFOEXA) LPOSVERSIONINFOEXA = POINTER(_OSVERSIONINFOEXA) # Struct _OSVERSIONINFOEXW definitions class _OSVERSIONINFOEXW(Structure): _fields_ = [ ("dwOSVersionInfoSize", DWORD), ("dwMajorVersion", DWORD), ("dwMinorVersion", DWORD), ("dwBuildNumber", DWORD), ("dwPlatformId", DWORD), ("szCSDVersion", WCHAR * 128), ("wServicePackMajor", WORD), ("wServicePackMinor", WORD), ("wSuiteMask", WORD), ("wProductType", BYTE), ("wReserved", BYTE), ] PRTL_OSVERSIONINFOEXW = POINTER(_OSVERSIONINFOEXW) LPOSVERSIONINFOEXW = POINTER(_OSVERSIONINFOEXW) OSVERSIONINFOEXW = _OSVERSIONINFOEXW POSVERSIONINFOEXW = POINTER(_OSVERSIONINFOEXW) RTL_OSVERSIONINFOEXW = _OSVERSIONINFOEXW # Struct _OVERLAPPED definitions class _OVERLAPPED(Structure): _fields_ = [ ("Internal", ULONG_PTR), ("InternalHigh", ULONG_PTR), ("Pointer", PVOID), ("hEvent", HANDLE), ] LPOVERLAPPED = POINTER(_OVERLAPPED) OVERLAPPED = _OVERLAPPED # Struct _MIB_IPADDRROW_XP definitions class _MIB_IPADDRROW_XP(Structure): _fields_ = [ ("dwAddr", DWORD), ("dwIndex", IF_INDEX), ("dwMask", DWORD), ("dwBCastAddr", DWORD), ("dwReasmSize", DWORD), ("unused1", USHORT), ("wType", USHORT), ] MIB_IPADDRROW = _MIB_IPADDRROW_XP PMIB_IPADDRROW_XP = POINTER(_MIB_IPADDRROW_XP) MIB_IPADDRROW_XP = _MIB_IPADDRROW_XP # Struct _MIB_IPADDRTABLE definitions class _MIB_IPADDRTABLE(Structure): _fields_ = [ ("dwNumEntries", DWORD), ("table", MIB_IPADDRROW * ANY_SIZE), ] PMIB_IPADDRTABLE = POINTER(_MIB_IPADDRTABLE) MIB_IPADDRTABLE = _MIB_IPADDRTABLE # Struct _MIB_IFROW definitions class _MIB_IFROW(Structure): _fields_ = [ ("wszName", WCHAR * MAX_INTERFACE_NAME_LEN), ("dwIndex", IF_INDEX), ("dwType", IFTYPE), ("dwMtu", DWORD), ("dwSpeed", DWORD), ("dwPhysAddrLen", DWORD), ("bPhysAddr", BYTE * MAXLEN_PHYSADDR), ("dwAdminStatus", DWORD), ("dwOperStatus", INTERNAL_IF_OPER_STATUS), ("dwLastChange", DWORD), ("dwInOctets", DWORD), ("dwInUcastPkts", DWORD), ("dwInNUcastPkts", DWORD), ("dwInDiscards", DWORD), ("dwInErrors", DWORD), ("dwInUnknownProtos", DWORD), ("dwOutOctets", DWORD), ("dwOutUcastPkts", DWORD), ("dwOutNUcastPkts", DWORD), ("dwOutDiscards", DWORD), ("dwOutErrors", DWORD), ("dwOutQLen", DWORD), ("dwDescrLen", DWORD), ("bDescr", UCHAR * MAXLEN_IFDESCR), ] PMIB_IFROW = POINTER(_MIB_IFROW) MIB_IFROW = _MIB_IFROW # Struct _MIB_IFTABLE definitions class _MIB_IFTABLE(Structure): _fields_ = [ ("dwNumEntries", DWORD), ("table", MIB_IFROW * ANY_SIZE), ] PMIB_IFTABLE = POINTER(_MIB_IFTABLE) MIB_IFTABLE = _MIB_IFTABLE # Struct _MIB_TCPROW_OWNER_PID definitions class _MIB_TCPROW_OWNER_PID(Structure): _fields_ = [ ("dwState", DWORD), ("dwLocalAddr", DWORD), ("dwLocalPort", DWORD), ("dwRemoteAddr", DWORD), ("dwRemotePort", DWORD), ("dwOwningPid", DWORD), ] MIB_TCPROW_OWNER_PID = _MIB_TCPROW_OWNER_PID PMIB_TCPROW_OWNER_PID = POINTER(_MIB_TCPROW_OWNER_PID) # Struct _MIB_TCPTABLE_OWNER_PID definitions class _MIB_TCPTABLE_OWNER_PID(Structure): _fields_ = [ ("dwNumEntries", DWORD), ("table", MIB_TCPROW_OWNER_PID * ANY_SIZE), ] MIB_TCPTABLE_OWNER_PID = _MIB_TCPTABLE_OWNER_PID PMIB_TCPTABLE_OWNER_PID = POINTER(_MIB_TCPTABLE_OWNER_PID) # Struct _MIB_UDPROW_OWNER_PID definitions class _MIB_UDPROW_OWNER_PID(Structure): _fields_ = [ ("dwLocalAddr", DWORD), ("dwLocalPort", DWORD), ("dwOwningPid", DWORD), ] MIB_UDPROW_OWNER_PID = _MIB_UDPROW_OWNER_PID PMIB_UDPROW_OWNER_PID = POINTER(_MIB_UDPROW_OWNER_PID) # Struct _MIB_UDPTABLE_OWNER_PID definitions class _MIB_UDPTABLE_OWNER_PID(Structure): _fields_ = [ ("dwNumEntries", DWORD), ("table", MIB_UDPROW_OWNER_PID * ANY_SIZE), ] MIB_UDPTABLE_OWNER_PID = _MIB_UDPTABLE_OWNER_PID PMIB_UDPTABLE_OWNER_PID = POINTER(_MIB_UDPTABLE_OWNER_PID) # Struct _MIB_UDP6ROW_OWNER_PID definitions class _MIB_UDP6ROW_OWNER_PID(Structure): _fields_ = [ ("ucLocalAddr", UCHAR * 16), ("dwLocalScopeId", DWORD), ("dwLocalPort", DWORD), ("dwOwningPid", DWORD), ] MIB_UDP6ROW_OWNER_PID = _MIB_UDP6ROW_OWNER_PID PMIB_UDP6ROW_OWNER_PID = POINTER(_MIB_UDP6ROW_OWNER_PID) # Struct _MIB_UDP6TABLE_OWNER_PID definitions class _MIB_UDP6TABLE_OWNER_PID(Structure): _fields_ = [ ("dwNumEntries", DWORD), ("table", MIB_UDP6ROW_OWNER_PID * ANY_SIZE), ] PMIB_UDP6TABLE_OWNER_PID = POINTER(_MIB_UDP6TABLE_OWNER_PID) MIB_UDP6TABLE_OWNER_PID = _MIB_UDP6TABLE_OWNER_PID # Struct _MIB_TCP6ROW_OWNER_PID definitions class _MIB_TCP6ROW_OWNER_PID(Structure): _fields_ = [ ("ucLocalAddr", UCHAR * 16), ("dwLocalScopeId", DWORD), ("dwLocalPort", DWORD), ("ucRemoteAddr", UCHAR * 16), ("dwRemoteScopeId", DWORD), ("dwRemotePort", DWORD), ("dwState", DWORD), ("dwOwningPid", DWORD), ] MIB_TCP6ROW_OWNER_PID = _MIB_TCP6ROW_OWNER_PID PMIB_TCP6ROW_OWNER_PID = POINTER(_MIB_TCP6ROW_OWNER_PID) # Struct _MIB_TCP6TABLE_OWNER_PID definitions class _MIB_TCP6TABLE_OWNER_PID(Structure): _fields_ = [ ("dwNumEntries", DWORD), ("table", MIB_TCP6ROW_OWNER_PID * ANY_SIZE), ] MIB_TCP6TABLE_OWNER_PID = _MIB_TCP6TABLE_OWNER_PID PMIB_TCP6TABLE_OWNER_PID = POINTER(_MIB_TCP6TABLE_OWNER_PID) # Struct _MIB_TCPROW definitions class _MIB_TCPROW(Structure): _fields_ = [ ("dwState", DWORD), ("dwLocalAddr", DWORD), ("dwLocalPort", DWORD), ("dwRemoteAddr", DWORD), ("dwRemotePort", DWORD), ] MIB_TCPROW = _MIB_TCPROW PMIB_TCPROW = POINTER(_MIB_TCPROW) # Struct _IP_ADAPTER_INDEX_MAP definitions class _IP_ADAPTER_INDEX_MAP(Structure): _fields_ = [ ("Index", ULONG), ("Name", WCHAR * MAX_ADAPTER_NAME), ] PIP_ADAPTER_INDEX_MAP = POINTER(_IP_ADAPTER_INDEX_MAP) IP_ADAPTER_INDEX_MAP = _IP_ADAPTER_INDEX_MAP # Struct _IP_INTERFACE_INFO definitions class _IP_INTERFACE_INFO(Structure): _fields_ = [ ("NumAdapters", LONG), ("Adapter", IP_ADAPTER_INDEX_MAP * 1), ] PIP_INTERFACE_INFO = POINTER(_IP_INTERFACE_INFO) IP_INTERFACE_INFO = _IP_INTERFACE_INFO # Struct _EXCEPTION_RECORD definitions # Self referencing struct tricks class _EXCEPTION_RECORD(Structure): pass _EXCEPTION_RECORD._fields_ = [ ("ExceptionCode", DWORD), ("ExceptionFlags", DWORD), ("ExceptionRecord", POINTER(_EXCEPTION_RECORD)), ("ExceptionAddress", PVOID), ("NumberParameters", DWORD), ("ExceptionInformation", ULONG_PTR * EXCEPTION_MAXIMUM_PARAMETERS), ] PEXCEPTION_RECORD = POINTER(_EXCEPTION_RECORD) EXCEPTION_RECORD = _EXCEPTION_RECORD # Struct _EXCEPTION_RECORD32 definitions class _EXCEPTION_RECORD32(Structure): _fields_ = [ ("ExceptionCode", DWORD), ("ExceptionFlags", DWORD), ("ExceptionRecord", DWORD), ("ExceptionAddress", DWORD), ("NumberParameters", DWORD), ("ExceptionInformation", DWORD * EXCEPTION_MAXIMUM_PARAMETERS), ] EXCEPTION_RECORD32 = _EXCEPTION_RECORD32 PEXCEPTION_RECORD32 = POINTER(_EXCEPTION_RECORD32) # Struct _EXCEPTION_RECORD64 definitions class _EXCEPTION_RECORD64(Structure): _fields_ = [ ("ExceptionCode", DWORD), ("ExceptionFlags", DWORD), ("ExceptionRecord", DWORD64), ("ExceptionAddress", DWORD64), ("NumberParameters", DWORD), ("__unusedAlignment", DWORD), ("ExceptionInformation", DWORD64 * EXCEPTION_MAXIMUM_PARAMETERS), ] PEXCEPTION_RECORD64 = POINTER(_EXCEPTION_RECORD64) EXCEPTION_RECORD64 = _EXCEPTION_RECORD64 # Struct _EXCEPTION_POINTERS64 definitions class _EXCEPTION_POINTERS64(Structure): _fields_ = [ ("ExceptionRecord", PEXCEPTION_RECORD), ("ContextRecord", PCONTEXT64), ] EXCEPTION_POINTERS64 = _EXCEPTION_POINTERS64 PEXCEPTION_POINTERS64 = POINTER(_EXCEPTION_POINTERS64) # Struct _EXCEPTION_POINTERS32 definitions class _EXCEPTION_POINTERS32(Structure): _fields_ = [ ("ExceptionRecord", PEXCEPTION_RECORD), ("ContextRecord", PCONTEXT32), ] PEXCEPTION_POINTERS32 = POINTER(_EXCEPTION_POINTERS32) EXCEPTION_POINTERS32 = _EXCEPTION_POINTERS32 # Struct _DEBUG_PROCESSOR_IDENTIFICATION_ALPHA definitions class _DEBUG_PROCESSOR_IDENTIFICATION_ALPHA(Structure): _fields_ = [ ("Type", ULONG), ("Revision", ULONG), ] DEBUG_PROCESSOR_IDENTIFICATION_ALPHA = _DEBUG_PROCESSOR_IDENTIFICATION_ALPHA PDEBUG_PROCESSOR_IDENTIFICATION_ALPHA = POINTER(_DEBUG_PROCESSOR_IDENTIFICATION_ALPHA) # Struct _DEBUG_PROCESSOR_IDENTIFICATION_AMD64 definitions class _DEBUG_PROCESSOR_IDENTIFICATION_AMD64(Structure): _fields_ = [ ("Family", ULONG), ("Model", ULONG), ("Stepping", ULONG), ("VendorString", CHAR * 16), ] DEBUG_PROCESSOR_IDENTIFICATION_AMD64 = _DEBUG_PROCESSOR_IDENTIFICATION_AMD64 PDEBUG_PROCESSOR_IDENTIFICATION_AMD64 = POINTER(_DEBUG_PROCESSOR_IDENTIFICATION_AMD64) # Struct _DEBUG_PROCESSOR_IDENTIFICATION_IA64 definitions class _DEBUG_PROCESSOR_IDENTIFICATION_IA64(Structure): _fields_ = [ ("Model", ULONG), ("Revision", ULONG), ("Family", ULONG), ("ArchRev", ULONG), ("VendorString", CHAR * 16), ] PDEBUG_PROCESSOR_IDENTIFICATION_IA64 = POINTER(_DEBUG_PROCESSOR_IDENTIFICATION_IA64) DEBUG_PROCESSOR_IDENTIFICATION_IA64 = _DEBUG_PROCESSOR_IDENTIFICATION_IA64 # Struct _DEBUG_PROCESSOR_IDENTIFICATION_X86 definitions class _DEBUG_PROCESSOR_IDENTIFICATION_X86(Structure): _fields_ = [ ("Family", ULONG), ("Model", ULONG), ("Stepping", ULONG), ("VendorString", CHAR * 16), ] DEBUG_PROCESSOR_IDENTIFICATION_X86 = _DEBUG_PROCESSOR_IDENTIFICATION_X86 PDEBUG_PROCESSOR_IDENTIFICATION_X86 = POINTER(_DEBUG_PROCESSOR_IDENTIFICATION_X86) # Struct _DEBUG_PROCESSOR_IDENTIFICATION_ARM definitions class _DEBUG_PROCESSOR_IDENTIFICATION_ARM(Structure): _fields_ = [ ("Type", ULONG), ("Revision", ULONG), ] DEBUG_PROCESSOR_IDENTIFICATION_ARM = _DEBUG_PROCESSOR_IDENTIFICATION_ARM PDEBUG_PROCESSOR_IDENTIFICATION_ARM = POINTER(_DEBUG_PROCESSOR_IDENTIFICATION_ARM) # Struct _DEBUG_PROCESSOR_IDENTIFICATION_ALL definitions class _DEBUG_PROCESSOR_IDENTIFICATION_ALL(Union): _fields_ = [ ("Alpha", DEBUG_PROCESSOR_IDENTIFICATION_ALPHA), ("Amd64", DEBUG_PROCESSOR_IDENTIFICATION_AMD64), ("Ia64", DEBUG_PROCESSOR_IDENTIFICATION_IA64), ("X86", DEBUG_PROCESSOR_IDENTIFICATION_X86), ("Arm", DEBUG_PROCESSOR_IDENTIFICATION_ARM), ] PDEBUG_PROCESSOR_IDENTIFICATION_ALL = POINTER(_DEBUG_PROCESSOR_IDENTIFICATION_ALL) DEBUG_PROCESSOR_IDENTIFICATION_ALL = _DEBUG_PROCESSOR_IDENTIFICATION_ALL # Struct _SYMBOL_INFO definitions class _SYMBOL_INFO(Structure): _fields_ = [ ("SizeOfStruct", ULONG), ("TypeIndex", ULONG), ("Reserved", ULONG64 * 2), ("Index", ULONG), ("Size", ULONG), ("ModBase", ULONG64), ("Flags", ULONG), ("Value", ULONG64), ("Address", ULONG64), ("Register", ULONG), ("Scope", ULONG), ("Tag", ULONG), ("NameLen", ULONG), ("MaxNameLen", ULONG), ("Name", CHAR * 1), ] SYMBOL_INFO = _SYMBOL_INFO PSYMBOL_INFO = POINTER(_SYMBOL_INFO) # Struct _MODLOAD_DATA definitions class _MODLOAD_DATA(Structure): _fields_ = [ ("ssize", DWORD), ("ssig", DWORD), ("data", PVOID), ("size", DWORD), ("flags", DWORD), ] PMODLOAD_DATA = POINTER(_MODLOAD_DATA) MODLOAD_DATA = _MODLOAD_DATA # Struct _SYSTEM_MODULE32 definitions class _SYSTEM_MODULE32(Structure): _fields_ = [ ("Reserved", ULONG * 2), ("Base", ULONG), ("Size", ULONG), ("Flags", ULONG), ("Index", USHORT), ("Unknown", USHORT), ("LoadCount", USHORT), ("ModuleNameOffset", USHORT), ("ImageName", CHAR * 256), ] SYSTEM_MODULE32 = _SYSTEM_MODULE32 PSYSTEM_MODULE32 = POINTER(_SYSTEM_MODULE32) # Struct _SYSTEM_MODULE64 definitions class _SYSTEM_MODULE64(Structure): _fields_ = [ ("Reserved", ULONG * 4), ("Base", ULONG64), ("Size", ULONG), ("Flags", ULONG), ("Index", USHORT), ("Unknown", USHORT), ("LoadCount", USHORT), ("ModuleNameOffset", USHORT), ("ImageName", CHAR * 256), ] SYSTEM_MODULE64 = _SYSTEM_MODULE64 PSYSTEM_MODULE64 = POINTER(_SYSTEM_MODULE64) # Struct _SYSTEM_MODULE_INFORMATION32 definitions class _SYSTEM_MODULE_INFORMATION32(Structure): _fields_ = [ ("ModulesCount", ULONG), ("Modules", SYSTEM_MODULE32 * 0), ] PSYSTEM_MODULE_INFORMATION32 = POINTER(_SYSTEM_MODULE_INFORMATION32) SYSTEM_MODULE_INFORMATION32 = _SYSTEM_MODULE_INFORMATION32 # Struct _SYSTEM_MODULE_INFORMATION64 definitions class _SYSTEM_MODULE_INFORMATION64(Structure): _fields_ = [ ("ModulesCount", ULONG), ("Modules", SYSTEM_MODULE64 * 0), ] PSYSTEM_MODULE_INFORMATION64 = POINTER(_SYSTEM_MODULE_INFORMATION64) SYSTEM_MODULE_INFORMATION64 = _SYSTEM_MODULE_INFORMATION64 # Struct tagSAFEARRAYBOUND definitions class tagSAFEARRAYBOUND(Structure): _fields_ = [ ("cElements", ULONG), ("lLbound", LONG), ] SAFEARRAYBOUND = tagSAFEARRAYBOUND LPSAFEARRAYBOUND = POINTER(tagSAFEARRAYBOUND) # Struct tagSAFEARRAY definitions class tagSAFEARRAY(Structure): _fields_ = [ ("cDims", USHORT), ("fFeatures", USHORT), ("cbElements", ULONG), ("cLocks", ULONG), ("pvData", PVOID), ("rgsabound", SAFEARRAYBOUND * 1), ] SAFEARRAY = tagSAFEARRAY # Struct _DEBUG_BREAKPOINT_PARAMETERS definitions class _DEBUG_BREAKPOINT_PARAMETERS(Structure): _fields_ = [ ("Offset", ULONG64), ("Id", ULONG), ("BreakType", ULONG), ("ProcType", ULONG), ("Flags", ULONG), ("DataSize", ULONG), ("DataAccessType", ULONG), ("PassCount", ULONG), ("CurrentPassCount", ULONG), ("MatchThread", ULONG), ("CommandSize", ULONG), ("OffsetExpressionSize", ULONG), ] PDEBUG_BREAKPOINT_PARAMETERS = POINTER(_DEBUG_BREAKPOINT_PARAMETERS) DEBUG_BREAKPOINT_PARAMETERS = _DEBUG_BREAKPOINT_PARAMETERS # Struct _DEBUG_REGISTER_DESCRIPTION definitions class _DEBUG_REGISTER_DESCRIPTION(Structure): _fields_ = [ ("Type", ULONG), ("Flags", ULONG), ("SubregMaster", ULONG), ("SubregLength", ULONG), ("SubregMask", ULONG64), ("SubregShift", ULONG), ("Reserved0", ULONG), ] DEBUG_REGISTER_DESCRIPTION = _DEBUG_REGISTER_DESCRIPTION PDEBUG_REGISTER_DESCRIPTION = POINTER(_DEBUG_REGISTER_DESCRIPTION) # Struct _DEBUG_STACK_FRAME definitions class _DEBUG_STACK_FRAME(Structure): _fields_ = [ ("InstructionOffset", ULONG64), ("ReturnOffset", ULONG64), ("FrameOffset", ULONG64), ("StackOffset", ULONG64), ("FuncTableEntry", ULONG64), ("Params", ULONG64 * 4), ("Reserved", ULONG64 * 6), ("Virtual", BOOL), ("FrameNumber", ULONG), ] PDEBUG_STACK_FRAME = POINTER(_DEBUG_STACK_FRAME) DEBUG_STACK_FRAME = _DEBUG_STACK_FRAME # Struct _DEBUG_LAST_EVENT_INFO_BREAKPOINT definitions class _DEBUG_LAST_EVENT_INFO_BREAKPOINT(Structure): _fields_ = [ ("Id", ULONG), ] DEBUG_LAST_EVENT_INFO_BREAKPOINT = _DEBUG_LAST_EVENT_INFO_BREAKPOINT PDEBUG_LAST_EVENT_INFO_BREAKPOINT = POINTER(_DEBUG_LAST_EVENT_INFO_BREAKPOINT) # Struct _DEBUG_LAST_EVENT_INFO_EXCEPTION definitions class _DEBUG_LAST_EVENT_INFO_EXCEPTION(Structure): _fields_ = [ ("ExceptionRecord", EXCEPTION_RECORD64), ("FirstChance", ULONG), ] DEBUG_LAST_EVENT_INFO_EXCEPTION = _DEBUG_LAST_EVENT_INFO_EXCEPTION PDEBUG_LAST_EVENT_INFO_EXCEPTION = POINTER(_DEBUG_LAST_EVENT_INFO_EXCEPTION) # Struct _DEBUG_LAST_EVENT_INFO_EXIT_THREAD definitions class _DEBUG_LAST_EVENT_INFO_EXIT_THREAD(Structure): _fields_ = [ ("ExitCode", ULONG), ] PDEBUG_LAST_EVENT_INFO_EXIT_THREAD = POINTER(_DEBUG_LAST_EVENT_INFO_EXIT_THREAD) DEBUG_LAST_EVENT_INFO_EXIT_THREAD = _DEBUG_LAST_EVENT_INFO_EXIT_THREAD # Struct _DEBUG_LAST_EVENT_INFO_EXIT_PROCESS definitions class _DEBUG_LAST_EVENT_INFO_EXIT_PROCESS(Structure): _fields_ = [ ("ExitCode", ULONG), ] PDEBUG_LAST_EVENT_INFO_EXIT_PROCESS = POINTER(_DEBUG_LAST_EVENT_INFO_EXIT_PROCESS) DEBUG_LAST_EVENT_INFO_EXIT_PROCESS = _DEBUG_LAST_EVENT_INFO_EXIT_PROCESS # Struct _DEBUG_LAST_EVENT_INFO_LOAD_MODULE definitions class _DEBUG_LAST_EVENT_INFO_LOAD_MODULE(Structure): _fields_ = [ ("Base", ULONG64), ] PDEBUG_LAST_EVENT_INFO_LOAD_MODULE = POINTER(_DEBUG_LAST_EVENT_INFO_LOAD_MODULE) DEBUG_LAST_EVENT_INFO_LOAD_MODULE = _DEBUG_LAST_EVENT_INFO_LOAD_MODULE # Struct _DEBUG_LAST_EVENT_INFO_UNLOAD_MODULE definitions class _DEBUG_LAST_EVENT_INFO_UNLOAD_MODULE(Structure): _fields_ = [ ("Base", ULONG64), ] PDEBUG_LAST_EVENT_INFO_UNLOAD_MODULE = POINTER(_DEBUG_LAST_EVENT_INFO_UNLOAD_MODULE) DEBUG_LAST_EVENT_INFO_UNLOAD_MODULE = _DEBUG_LAST_EVENT_INFO_UNLOAD_MODULE # Struct _DEBUG_LAST_EVENT_INFO_SYSTEM_ERROR definitions class _DEBUG_LAST_EVENT_INFO_SYSTEM_ERROR(Structure): _fields_ = [ ("Error", ULONG), ("Level", ULONG), ] PDEBUG_LAST_EVENT_INFO_SYSTEM_ERROR = POINTER(_DEBUG_LAST_EVENT_INFO_SYSTEM_ERROR) DEBUG_LAST_EVENT_INFO_SYSTEM_ERROR = _DEBUG_LAST_EVENT_INFO_SYSTEM_ERROR # Struct _DEBUG_SPECIFIC_FILTER_PARAMETERS definitions class _DEBUG_SPECIFIC_FILTER_PARAMETERS(Structure): _fields_ = [ ("ExecutionOption", ULONG), ("ContinueOption", ULONG), ("TextSize", ULONG), ("CommandSize", ULONG), ("ArgumentSize", ULONG), ] DEBUG_SPECIFIC_FILTER_PARAMETERS = _DEBUG_SPECIFIC_FILTER_PARAMETERS PDEBUG_SPECIFIC_FILTER_PARAMETERS = POINTER(_DEBUG_SPECIFIC_FILTER_PARAMETERS) # Struct _DEBUG_EXCEPTION_FILTER_PARAMETERS definitions class _DEBUG_EXCEPTION_FILTER_PARAMETERS(Structure): _fields_ = [ ("ExecutionOption", ULONG), ("ContinueOption", ULONG), ("TextSize", ULONG), ("CommandSize", ULONG), ("SecondCommandSize", ULONG), ("ExceptionCode", ULONG), ] PDEBUG_EXCEPTION_FILTER_PARAMETERS = POINTER(_DEBUG_EXCEPTION_FILTER_PARAMETERS) DEBUG_EXCEPTION_FILTER_PARAMETERS = _DEBUG_EXCEPTION_FILTER_PARAMETERS # Struct _GUID definitions class _GUID(Structure): _fields_ = [ ("Data1", ULONG), ("Data2", USHORT), ("Data3", USHORT), ("Data4", BYTE * 8), ] IID = _GUID REFCLSID = POINTER(_GUID) GUID = _GUID REFIID = POINTER(_GUID) # Struct _TMP_signscale definitions class _TMP_signscale(Structure): _fields_ = [ ("scale", BYTE), ("sign", BYTE), ] # Struct _TMP_lowmid definitions class _TMP_lowmid(Structure): _fields_ = [ ("Lo32", ULONG), ("Mid32", ULONG), ] # Struct TMP_signscale_union definitions class TMP_signscale_union(Union): _fields_ = [ ("s", _TMP_signscale), ("signscale", USHORT), ] # Struct TMP_lowmid_union definitions class TMP_lowmid_union(Union): _fields_ = [ ("s", _TMP_lowmid), ("Lo64", ULONGLONG), ] # Struct tagDEC definitions class tagDEC(Structure): _fields_ = [ ("wReserved", USHORT), ("u1", TMP_signscale_union), ("Hi32", ULONG), ("u2", TMP_signscale_union), ] DECIMAL = tagDEC # Struct __tagBRECORD definitions class __tagBRECORD(Structure): _fields_ = [ ("pvRecord", PVOID), ("pRecInfo", PVOID), ] _tagBRECORD = __tagBRECORD # Struct TMP_variant_sub_union definitions class TMP_variant_sub_union(Union): _fields_ = [ ("llVal", LONGLONG), ("lVal", LONG), ("bVal", BYTE), ("iVal", SHORT), ("fltVal", FLOAT), ("dblVal", DOUBLE), ("boolVal", VARIANT_BOOL), ("scode", SCODE), ("bstrVal", BSTR), ("punkVal", PVOID), ("pdispVal", PVOID), ("parray", POINTER(SAFEARRAY)), ("pbVal", POINTER(BYTE)), ("piVal", POINTER(SHORT)), ("plVal", POINTER(LONG)), ("pllVal", POINTER(LONGLONG)), ("pfltVal", POINTER(FLOAT)), ("pdblVal", POINTER(DOUBLE)), ("pboolVal", POINTER(VARIANT_BOOL)), ("pscode", POINTER(SCODE)), ("pbstrVal", POINTER(BSTR)), ("byref", PVOID), ("cVal", CHAR), ("uiVal", USHORT), ("ulVal", ULONG), ("ullVal", ULONGLONG), ("intVal", INT), ("uintVal", UINT), ("pcVal", POINTER(CHAR)), ("puiVal", POINTER(USHORT)), ("pulVal", POINTER(ULONG)), ("pullVal", POINTER(ULONGLONG)), ("pintVal", POINTER(INT)), ("puintVal", POINTER(UINT)), ("_VARIANT_NAME_4", _tagBRECORD), ] # Struct __tagVARIANT definitions class __tagVARIANT(Structure): _fields_ = [ ("vt", VARTYPE), ("wReserved1", WORD), ("wReserved2", WORD), ("wReserved3", WORD), ("_VARIANT_NAME_3", TMP_variant_sub_union), ] LPVARIANTARG = POINTER(__tagVARIANT) VARIANTARG = __tagVARIANT VARIANT = __tagVARIANT LPVARIANT = POINTER(__tagVARIANT) _tagVARIANT = __tagVARIANT # Struct tagDISPPARAMS definitions class tagDISPPARAMS(Structure): _fields_ = [ ("rgvarg", POINTER(VARIANTARG)), ("rgdispidNamedArgs", POINTER(DISPID)), ("cArgs", UINT), ("cNamedArgs", UINT), ] DISPPARAMS = tagDISPPARAMS # Struct tagEXCEPINFO definitions class tagEXCEPINFO(Structure): _fields_ = [ ("wCode", WORD), ("wReserved", WORD), ("bstrSource", BSTR), ("bstrDescription", BSTR), ("bstrHelpFile", BSTR), ("dwHelpContext", DWORD), ("pvReserved", ULONG_PTR), ("pfnDeferredFillIn", ULONG_PTR), ("scode", SCODE), ] EXCEPINFO = tagEXCEPINFO # Struct _CRYPTOAPI_BLOB definitions class _CRYPTOAPI_BLOB(Structure): _fields_ = [ ("cbData", DWORD), ("pbData", POINTER(BYTE)), ] CRYPT_INTEGER_BLOB = _CRYPTOAPI_BLOB PCRYPT_DATA_BLOB = POINTER(_CRYPTOAPI_BLOB) PCRYPT_OBJID_BLOB = POINTER(_CRYPTOAPI_BLOB) PCRYPT_DER_BLOB = POINTER(_CRYPTOAPI_BLOB) PCRL_BLOB = POINTER(_CRYPTOAPI_BLOB) PCRYPT_UINT_BLOB = POINTER(_CRYPTOAPI_BLOB) CERT_NAME_BLOB = _CRYPTOAPI_BLOB PCRYPT_DIGEST_BLOB = POINTER(_CRYPTOAPI_BLOB) PCRYPT_INTEGER_BLOB = POINTER(_CRYPTOAPI_BLOB) CERT_RDN_VALUE_BLOB = _CRYPTOAPI_BLOB PCERT_NAME_BLOB = POINTER(_CRYPTOAPI_BLOB) PCRYPT_HASH_BLOB = POINTER(_CRYPTOAPI_BLOB) CRYPT_DATA_BLOB = _CRYPTOAPI_BLOB DATA_BLOB = _CRYPTOAPI_BLOB CRYPT_UINT_BLOB = _CRYPTOAPI_BLOB PCERT_RDN_VALUE_BLOB = POINTER(_CRYPTOAPI_BLOB) CRYPT_HASH_BLOB = _CRYPTOAPI_BLOB CRL_BLOB = _CRYPTOAPI_BLOB PCERT_BLOB = POINTER(_CRYPTOAPI_BLOB) CRYPT_DIGEST_BLOB = _CRYPTOAPI_BLOB CRYPT_OBJID_BLOB = _CRYPTOAPI_BLOB CERT_BLOB = _CRYPTOAPI_BLOB CRYPT_DER_BLOB = _CRYPTOAPI_BLOB PDATA_BLOB = POINTER(_CRYPTOAPI_BLOB) PCRYPT_ATTR_BLOB = POINTER(_CRYPTOAPI_BLOB) CRYPT_ATTR_BLOB = _CRYPTOAPI_BLOB # Struct WINTRUST_FILE_INFO_ definitions class WINTRUST_FILE_INFO_(Structure): _fields_ = [ ("cbStruct", DWORD), ("pcwszFilePath", LPCWSTR), ("hFile", HANDLE), ("pgKnownSubject", POINTER(GUID)), ] WINTRUST_FILE_INFO = WINTRUST_FILE_INFO_ PWINTRUST_FILE_INFO = POINTER(WINTRUST_FILE_INFO_) # Struct _CRYPT_ATTRIBUTE definitions class _CRYPT_ATTRIBUTE(Structure): _fields_ = [ ("pszObjId", LPSTR), ("cValue", DWORD), ("rgValue", PCRYPT_ATTR_BLOB), ] PCRYPT_ATTRIBUTE = POINTER(_CRYPT_ATTRIBUTE) CRYPT_ATTRIBUTE = _CRYPT_ATTRIBUTE # Struct _CTL_ENTRY definitions class _CTL_ENTRY(Structure): _fields_ = [ ("SubjectIdentifier", CRYPT_DATA_BLOB), ("cAttribute", DWORD), ("rgAttribute", PCRYPT_ATTRIBUTE), ] PCTL_ENTRY = POINTER(_CTL_ENTRY) CTL_ENTRY = _CTL_ENTRY # Struct _CRYPT_ATTRIBUTE definitions class _CRYPT_ATTRIBUTE(Structure): _fields_ = [ ("pszObjId", LPSTR), ("cValue", DWORD), ("rgValue", PCRYPT_ATTR_BLOB), ] PCRYPT_ATTRIBUTE = POINTER(_CRYPT_ATTRIBUTE) CRYPT_ATTRIBUTE = _CRYPT_ATTRIBUTE # Struct _CRYPT_ATTRIBUTES definitions class _CRYPT_ATTRIBUTES(Structure): _fields_ = [ ("cAttr", DWORD), ("rgAttr", PCRYPT_ATTRIBUTE), ] CRYPT_ATTRIBUTES = _CRYPT_ATTRIBUTES PCRYPT_ATTRIBUTES = POINTER(_CRYPT_ATTRIBUTES) # Struct _CRYPT_ALGORITHM_IDENTIFIER definitions class _CRYPT_ALGORITHM_IDENTIFIER(Structure): _fields_ = [ ("pszObjId", LPSTR), ("Parameters", CRYPT_OBJID_BLOB), ] CRYPT_ALGORITHM_IDENTIFIER = _CRYPT_ALGORITHM_IDENTIFIER PCRYPT_ALGORITHM_IDENTIFIER = POINTER(_CRYPT_ALGORITHM_IDENTIFIER) # Struct _CMSG_SIGNER_INFO definitions class _CMSG_SIGNER_INFO(Structure): _fields_ = [ ("dwVersion", DWORD), ("Issuer", CERT_NAME_BLOB), ("SerialNumber", CRYPT_INTEGER_BLOB), ("HashAlgorithm", CRYPT_ALGORITHM_IDENTIFIER), ("HashEncryptionAlgorithm", CRYPT_ALGORITHM_IDENTIFIER), ("EncryptedHash", CRYPT_DATA_BLOB), ("AuthAttrs", CRYPT_ATTRIBUTES), ("UnauthAttrs", CRYPT_ATTRIBUTES), ] CMSG_SIGNER_INFO = _CMSG_SIGNER_INFO PCMSG_SIGNER_INFO = POINTER(_CMSG_SIGNER_INFO) # Struct _CERT_EXTENSION definitions class _CERT_EXTENSION(Structure): _fields_ = [ ("pszObjId", LPSTR), ("fCritical", BOOL), ("Value", CRYPT_OBJID_BLOB), ] CERT_EXTENSION = _CERT_EXTENSION PCERT_EXTENSION = POINTER(_CERT_EXTENSION) # Struct _CTL_USAGE definitions class _CTL_USAGE(Structure): _fields_ = [ ("cUsageIdentifier", DWORD), ("rgpszUsageIdentifier", POINTER(LPSTR)), ] CERT_ENHKEY_USAGE = _CTL_USAGE PCTL_USAGE = POINTER(_CTL_USAGE) CTL_USAGE = _CTL_USAGE PCERT_ENHKEY_USAGE = POINTER(_CTL_USAGE) # Struct _CTL_INFO definitions class _CTL_INFO(Structure): _fields_ = [ ("dwVersion", DWORD), ("SubjectUsage", CTL_USAGE), ("ListIdentifier", CRYPT_DATA_BLOB), ("SequenceNumber", CRYPT_INTEGER_BLOB), ("ThisUpdate", FILETIME), ("NextUpdate", FILETIME), ("SubjectAlgorithm", CRYPT_ALGORITHM_IDENTIFIER), ("cCTLEntry", DWORD), ("rgCTLEntry", PCTL_ENTRY), ("cExtension", DWORD), ("rgExtension", PCERT_EXTENSION), ] CTL_INFO = _CTL_INFO PCTL_INFO = POINTER(_CTL_INFO) # Struct _CTL_CONTEXT definitions class _CTL_CONTEXT(Structure): _fields_ = [ ("dwMsgAndCertEncodingType", DWORD), ("pbCtlEncoded", POINTER(BYTE)), ("cbCtlEncoded", DWORD), ("pCtlInfo", PCTL_INFO), ("hCertStore", HCERTSTORE), ("hCryptMsg", HCRYPTMSG), ("pbCtlContent", POINTER(BYTE)), ("cbCtlContent", DWORD), ] PCTL_CONTEXT = POINTER(_CTL_CONTEXT) CTL_CONTEXT = _CTL_CONTEXT PCCTL_CONTEXT = POINTER(_CTL_CONTEXT) # Struct WINTRUST_CATALOG_INFO_ definitions class WINTRUST_CATALOG_INFO_(Structure): _fields_ = [ ("cbStruct", DWORD), ("dwCatalogVersion", DWORD), ("pcwszCatalogFilePath", LPCWSTR), ("pcwszMemberTag", LPCWSTR), ("pcwszMemberFilePath", LPCWSTR), ("hMemberFile", HANDLE), ("pbCalculatedFileHash", POINTER(BYTE)), ("cbCalculatedFileHash", DWORD), ("pcCatalogContext", PCCTL_CONTEXT), ] PWINTRUST_CATALOG_INFO = POINTER(WINTRUST_CATALOG_INFO_) WINTRUST_CATALOG_INFO = WINTRUST_CATALOG_INFO_ # Struct WINTRUST_BLOB_INFO_ definitions class WINTRUST_BLOB_INFO_(Structure): _fields_ = [ ("cbStruct", DWORD), ("gSubject", GUID), ("pcwszDisplayName", LPCWSTR), ("cbMemObject", DWORD), ("pbMemObject", POINTER(BYTE)), ("cbMemSignedMsg", DWORD), ("pbMemSignedMsg", POINTER(BYTE)), ] PWINTRUST_BLOB_INFO = POINTER(WINTRUST_BLOB_INFO_) WINTRUST_BLOB_INFO = WINTRUST_BLOB_INFO_ # Struct _CRYPT_BIT_BLOB definitions class _CRYPT_BIT_BLOB(Structure): _fields_ = [ ("cbData", DWORD), ("pbData", POINTER(BYTE)), ("cUnusedBits", DWORD), ] CRYPT_BIT_BLOB = _CRYPT_BIT_BLOB PCRYPT_BIT_BLOB = POINTER(_CRYPT_BIT_BLOB) # Struct _CERT_PUBLIC_KEY_INFO definitions class _CERT_PUBLIC_KEY_INFO(Structure): _fields_ = [ ("Algorithm", CRYPT_ALGORITHM_IDENTIFIER), ("PublicKey", CRYPT_BIT_BLOB), ] PCERT_PUBLIC_KEY_INFO = POINTER(_CERT_PUBLIC_KEY_INFO) CERT_PUBLIC_KEY_INFO = _CERT_PUBLIC_KEY_INFO # Struct _CERT_INFO definitions class _CERT_INFO(Structure): _fields_ = [ ("dwVersion", DWORD), ("SerialNumber", CRYPT_INTEGER_BLOB), ("SignatureAlgorithm", CRYPT_ALGORITHM_IDENTIFIER), ("Issuer", CERT_NAME_BLOB), ("NotBefore", FILETIME), ("NotAfter", FILETIME), ("Subject", CERT_NAME_BLOB), ("SubjectPublicKeyInfo", CERT_PUBLIC_KEY_INFO), ("IssuerUniqueId", CRYPT_BIT_BLOB), ("SubjectUniqueId", CRYPT_BIT_BLOB), ("cExtension", DWORD), ("rgExtension", PCERT_EXTENSION), ] CERT_INFO = _CERT_INFO PCERT_INFO = POINTER(_CERT_INFO) # Struct _CERT_CONTEXT definitions class _CERT_CONTEXT(Structure): _fields_ = [ ("dwCertEncodingType", DWORD), ("pbCertEncoded", POINTER(BYTE)), ("cbCertEncoded", DWORD), ("pCertInfo", PCERT_INFO), ("hCertStore", HCERTSTORE), ] CERT_CONTEXT = _CERT_CONTEXT PCERT_CONTEXT = POINTER(_CERT_CONTEXT) # Struct WINTRUST_SGNR_INFO_ definitions class WINTRUST_SGNR_INFO_(Structure): _fields_ = [ ("cbStruct", DWORD), ("pcwszDisplayName", LPCWSTR), ("psSignerInfo", POINTER(CMSG_SIGNER_INFO)), ("chStores", DWORD), ("pahStores", POINTER(HCERTSTORE)), ] WINTRUST_SGNR_INFO = WINTRUST_SGNR_INFO_ PWINTRUST_SGNR_INFO = POINTER(WINTRUST_SGNR_INFO_) # Struct _FILETIME definitions class _FILETIME(Structure): _fields_ = [ ("dwLowDateTime", DWORD), ("dwHighDateTime", DWORD), ] LPFILETIME = POINTER(_FILETIME) PFILETIME = POINTER(_FILETIME) FILETIME = _FILETIME # Struct WINTRUST_CERT_INFO_ definitions class WINTRUST_CERT_INFO_(Structure): _fields_ = [ ("cbStruct", DWORD), ("pcwszDisplayName", LPCWSTR), ("psCertContext", POINTER(CERT_CONTEXT)), ("chStores", DWORD), ("pahStores", POINTER(HCERTSTORE)), ("dwFlags", DWORD), ("psftVerifyAsOf", POINTER(FILETIME)), ] WINTRUST_CERT_INFO = WINTRUST_CERT_INFO_ PWINTRUST_CERT_INFO = POINTER(WINTRUST_CERT_INFO_) # Struct _TMP_WINTRUST_UNION_TYPE definitions class _TMP_WINTRUST_UNION_TYPE(Union): _fields_ = [ ("pFile", POINTER(WINTRUST_FILE_INFO_)), ("pCatalog", POINTER(WINTRUST_CATALOG_INFO_)), ("pBlob", POINTER(WINTRUST_BLOB_INFO_)), ("pSgnr", POINTER(WINTRUST_SGNR_INFO_)), ("pCert", POINTER(WINTRUST_CERT_INFO_)), ] TMP_WINTRUST_UNION_TYPE = _TMP_WINTRUST_UNION_TYPE # Struct _WINTRUST_DATA definitions class _WINTRUST_DATA(Structure): _fields_ = [ ("cbStruct", DWORD), ("pPolicyCallbackData", LPVOID), ("pSIPClientData", LPVOID), ("dwUIChoice", DWORD), ("fdwRevocationChecks", DWORD), ("dwUnionChoice", DWORD), ("tmp_union", TMP_WINTRUST_UNION_TYPE), ("dwStateAction", DWORD), ("hWVTStateData", HANDLE), ("pwszURLReference", POINTER(WCHAR)), ("dwProvFlags", DWORD), ("dwUIContext", DWORD), ] PWINTRUST_DATA = POINTER(_WINTRUST_DATA) WINTRUST_DATA = _WINTRUST_DATA # Struct _PROCESS_BASIC_INFORMATION definitions class _PROCESS_BASIC_INFORMATION(Structure): _fields_ = [ ("Reserved1", PVOID), ("PebBaseAddress", PPEB), ("Reserved2", PVOID * 2), ("UniqueProcessId", ULONG_PTR), ("Reserved3", PVOID), ] PPROCESS_BASIC_INFORMATION = POINTER(_PROCESS_BASIC_INFORMATION) PROCESS_BASIC_INFORMATION = _PROCESS_BASIC_INFORMATION # Struct _JIT_DEBUG_INFO definitions class _JIT_DEBUG_INFO(Structure): _fields_ = [ ("dwSize", DWORD), ("dwProcessorArchitecture", DWORD), ("dwThreadID", DWORD), ("dwReserved0", DWORD), ("lpExceptionAddress", ULONG64), ("lpExceptionRecord", ULONG64), ("lpContextRecord", ULONG64), ] LPJIT_DEBUG_INFO = POINTER(_JIT_DEBUG_INFO) JIT_DEBUG_INFO = _JIT_DEBUG_INFO # Struct _SID_IDENTIFIER_AUTHORITY definitions class _SID_IDENTIFIER_AUTHORITY(Structure): _fields_ = [ ("Value", BYTE * 6), ] SID_IDENTIFIER_AUTHORITY = _SID_IDENTIFIER_AUTHORITY PSID_IDENTIFIER_AUTHORITY = POINTER(_SID_IDENTIFIER_AUTHORITY) # Struct _EXCEPTION_DEBUG_INFO definitions class _EXCEPTION_DEBUG_INFO(Structure): _fields_ = [ ("ExceptionRecord", EXCEPTION_RECORD), ("dwFirstChance", DWORD), ] LPEXCEPTION_DEBUG_INFO = POINTER(_EXCEPTION_DEBUG_INFO) EXCEPTION_DEBUG_INFO = _EXCEPTION_DEBUG_INFO # Struct _CREATE_THREAD_DEBUG_INFO definitions class _CREATE_THREAD_DEBUG_INFO(Structure): _fields_ = [ ("hThread", HANDLE), ("lpThreadLocalBase", LPVOID), ("lpStartAddress", LPTHREAD_START_ROUTINE), ] LPCREATE_THREAD_DEBUG_INFO = POINTER(_CREATE_THREAD_DEBUG_INFO) CREATE_THREAD_DEBUG_INFO = _CREATE_THREAD_DEBUG_INFO # Struct _CREATE_PROCESS_DEBUG_INFO definitions class _CREATE_PROCESS_DEBUG_INFO(Structure): _fields_ = [ ("hFile", HANDLE), ("hProcess", HANDLE), ("hThread", HANDLE), ("lpBaseOfImage", LPVOID), ("dwDebugInfoFileOffset", DWORD), ("nDebugInfoSize", DWORD), ("lpThreadLocalBase", LPVOID), ("lpStartAddress", LPTHREAD_START_ROUTINE), ("lpImageName", LPVOID), ("fUnicode", WORD), ] CREATE_PROCESS_DEBUG_INFO = _CREATE_PROCESS_DEBUG_INFO LPCREATE_PROCESS_DEBUG_INFO = POINTER(_CREATE_PROCESS_DEBUG_INFO) # Struct _EXIT_THREAD_DEBUG_INFO definitions class _EXIT_THREAD_DEBUG_INFO(Structure): _fields_ = [ ("dwExitCode", DWORD), ] EXIT_THREAD_DEBUG_INFO = _EXIT_THREAD_DEBUG_INFO LPEXIT_THREAD_DEBUG_INFO = POINTER(_EXIT_THREAD_DEBUG_INFO) # Struct _EXIT_PROCESS_DEBUG_INFO definitions class _EXIT_PROCESS_DEBUG_INFO(Structure): _fields_ = [ ("dwExitCode", DWORD), ] LPEXIT_PROCESS_DEBUG_INFO = POINTER(_EXIT_PROCESS_DEBUG_INFO) EXIT_PROCESS_DEBUG_INFO = _EXIT_PROCESS_DEBUG_INFO # Struct _LOAD_DLL_DEBUG_INFO definitions class _LOAD_DLL_DEBUG_INFO(Structure): _fields_ = [ ("hFile", HANDLE), ("lpBaseOfDll", LPVOID), ("dwDebugInfoFileOffset", DWORD), ("nDebugInfoSize", DWORD), ("lpImageName", LPVOID), ("fUnicode", WORD), ] LPLOAD_DLL_DEBUG_INFO = POINTER(_LOAD_DLL_DEBUG_INFO) LOAD_DLL_DEBUG_INFO = _LOAD_DLL_DEBUG_INFO # Struct _UNLOAD_DLL_DEBUG_INFO definitions class _UNLOAD_DLL_DEBUG_INFO(Structure): _fields_ = [ ("lpBaseOfDll", LPVOID), ] UNLOAD_DLL_DEBUG_INFO = _UNLOAD_DLL_DEBUG_INFO LPUNLOAD_DLL_DEBUG_INFO = POINTER(_UNLOAD_DLL_DEBUG_INFO) # Struct _OUTPUT_DEBUG_STRING_INFO definitions class _OUTPUT_DEBUG_STRING_INFO(Structure): _fields_ = [ ("lpDebugStringData", LPSTR), ("fUnicode", WORD), ("nDebugStringLength", WORD), ] OUTPUT_DEBUG_STRING_INFO = _OUTPUT_DEBUG_STRING_INFO LPOUTPUT_DEBUG_STRING_INFO = POINTER(_OUTPUT_DEBUG_STRING_INFO) # Struct _RIP_INFO definitions class _RIP_INFO(Structure): _fields_ = [ ("dwError", DWORD), ("dwType", DWORD), ] LPRIP_INFO = POINTER(_RIP_INFO) RIP_INFO = _RIP_INFO # Struct _TMP_UNION_DEBUG_INFO definitions class _TMP_UNION_DEBUG_INFO(Union): _fields_ = [ ("Exception", EXCEPTION_DEBUG_INFO), ("CreateThread", CREATE_THREAD_DEBUG_INFO), ("CreateProcessInfo", CREATE_PROCESS_DEBUG_INFO), ("ExitThread", EXIT_THREAD_DEBUG_INFO), ("ExitProcess", EXIT_PROCESS_DEBUG_INFO), ("LoadDll", LOAD_DLL_DEBUG_INFO), ("UnloadDll", UNLOAD_DLL_DEBUG_INFO), ("DebugString", OUTPUT_DEBUG_STRING_INFO), ("RipInfo", RIP_INFO), ] TMP_UNION_DEBUG_INFO = _TMP_UNION_DEBUG_INFO # Struct _DEBUG_EVENT definitions class _DEBUG_EVENT(Structure): _fields_ = [ ("dwDebugEventCode", DWORD), ("dwProcessId", DWORD), ("dwThreadId", DWORD), ("u", _TMP_UNION_DEBUG_INFO), ] LPDEBUG_EVENT = POINTER(_DEBUG_EVENT) DEBUG_EVENT = _DEBUG_EVENT # Struct _STRING definitions class _STRING(Structure): _fields_ = [ ("Length", USHORT), ("MaximumLength", USHORT), ("Buffer", LPCSTR), ] PCANSI_STRING = POINTER(_STRING) PSTRING = POINTER(_STRING) STRING = _STRING PANSI_STRING = POINTER(_STRING) # Struct _OBJECT_ATTRIBUTES definitions class _OBJECT_ATTRIBUTES(Structure): _fields_ = [ ("Length", ULONG), ("RootDirectory", HANDLE), ("ObjectName", PUNICODE_STRING), ("Attributes", ULONG), ("SecurityDescriptor", PVOID), ("SecurityQualityOfService", PVOID), ] POBJECT_ATTRIBUTES = POINTER(_OBJECT_ATTRIBUTES) OBJECT_ATTRIBUTES = _OBJECT_ATTRIBUTES # Struct _SECURITY_QUALITY_OF_SERVICE definitions class _SECURITY_QUALITY_OF_SERVICE(Structure): _fields_ = [ ("Length", DWORD), ("ImpersonationLevel", SECURITY_IMPERSONATION_LEVEL), ("ContextTrackingMode", SECURITY_CONTEXT_TRACKING_MODE), ("EffectiveOnly", BOOLEAN), ] PSECURITY_QUALITY_OF_SERVICE = POINTER(_SECURITY_QUALITY_OF_SERVICE) SECURITY_QUALITY_OF_SERVICE = _SECURITY_QUALITY_OF_SERVICE # Struct _ALPC_PORT_ATTRIBUTES32 definitions class _ALPC_PORT_ATTRIBUTES32(Structure): _fields_ = [ ("Flags", ULONG), ("SecurityQos", SECURITY_QUALITY_OF_SERVICE), ("MaxMessageLength", SIZE_T), ("MemoryBandwidth", SIZE_T), ("MaxPoolUsage", SIZE_T), ("MaxSectionSize", SIZE_T), ("MaxViewSize", SIZE_T), ("MaxTotalSectionSize", SIZE_T), ("DupObjectTypes", ULONG), ] PALPC_PORT_ATTRIBUTES32 = POINTER(_ALPC_PORT_ATTRIBUTES32) ALPC_PORT_ATTRIBUTES32 = _ALPC_PORT_ATTRIBUTES32 # Struct _ALPC_PORT_ATTRIBUTES64 definitions class _ALPC_PORT_ATTRIBUTES64(Structure): _fields_ = [ ("Flags", ULONG), ("SecurityQos", SECURITY_QUALITY_OF_SERVICE), ("MaxMessageLength", SIZE_T), ("MemoryBandwidth", SIZE_T), ("MaxPoolUsage", SIZE_T), ("MaxSectionSize", SIZE_T), ("MaxViewSize", SIZE_T), ("MaxTotalSectionSize", SIZE_T), ("DupObjectTypes", ULONG), ("Reserved", ULONG), ] ALPC_PORT_ATTRIBUTES64 = _ALPC_PORT_ATTRIBUTES64 PALPC_PORT_ATTRIBUTES64 = POINTER(_ALPC_PORT_ATTRIBUTES64) # Struct _ALPC_MESSAGE_ATTRIBUTES definitions class _ALPC_MESSAGE_ATTRIBUTES(Structure): _fields_ = [ ("AllocatedAttributes", ULONG), ("ValidAttributes", ULONG), ] ALPC_MESSAGE_ATTRIBUTES = _ALPC_MESSAGE_ATTRIBUTES PALPC_MESSAGE_ATTRIBUTES = POINTER(_ALPC_MESSAGE_ATTRIBUTES) # Struct _PORT_MESSAGE_TMP_UNION definitions class _PORT_MESSAGE_TMP_UNION(Union): _fields_ = [ ("ClientViewSize", SIZE_T), ("CallbackId", ULONG), ] PORT_MESSAGE_TMP_UNION = _PORT_MESSAGE_TMP_UNION # Struct _PORT_MESSAGE_TMP_SUBSTRUCT_S1 definitions class _PORT_MESSAGE_TMP_SUBSTRUCT_S1(Structure): _fields_ = [ ("DataLength", CSHORT), ("TotalLength", CSHORT), ] _PORT_MESSAGE_TMP_SUBSTRUCT_S1 = _PORT_MESSAGE_TMP_SUBSTRUCT_S1 # Struct _PORT_MESSAGE_TMP_UNION_U1 definitions class _PORT_MESSAGE_TMP_UNION_U1(Union): _fields_ = [ ("Length", ULONG), ("s1", _PORT_MESSAGE_TMP_SUBSTRUCT_S1), ] _PORT_MESSAGE_TMP_UNION_U1 = _PORT_MESSAGE_TMP_UNION_U1 # Struct _PORT_MESSAGE_TMP_SUBSTRUCT_S2 definitions class _PORT_MESSAGE_TMP_SUBSTRUCT_S2(Structure): _fields_ = [ ("Type", CSHORT), ("DataInfoOffset", CSHORT), ] _PORT_MESSAGE_TMP_SUBSTRUCT_S2 = _PORT_MESSAGE_TMP_SUBSTRUCT_S2 # Struct _PORT_MESSAGE_TMP_UNION_U2 definitions class _PORT_MESSAGE_TMP_UNION_U2(Union): _fields_ = [ ("ZeroInit", ULONG), ("s2", _PORT_MESSAGE_TMP_SUBSTRUCT_S2), ] _PORT_MESSAGE_TMP_UNION_U2 = _PORT_MESSAGE_TMP_UNION_U2 # Struct _PORT_MESSAGE definitions class _PORT_MESSAGE(Structure): _fields_ = [ ("u1", _PORT_MESSAGE_TMP_UNION_U1), ("u2", _PORT_MESSAGE_TMP_UNION_U2), ("DoNotUseThisField", double), ("MessageId", ULONG), ("tmp_union", _PORT_MESSAGE_TMP_UNION), ] PPORT_MESSAGE = POINTER(_PORT_MESSAGE) PORT_MESSAGE = _PORT_MESSAGE # Struct _SERVICE_STATUS definitions class _SERVICE_STATUS(Structure): _fields_ = [ ("dwServiceType", DWORD), ("dwCurrentState", DWORD), ("dwControlsAccepted", DWORD), ("dwWin32ExitCode", DWORD), ("dwServiceSpecificExitCode", DWORD), ("dwCheckPoint", DWORD), ("dwWaitHint", DWORD), ] SERVICE_STATUS = _SERVICE_STATUS LPSERVICE_STATUS = POINTER(_SERVICE_STATUS) # Struct _SERVICE_STATUS_PROCESS definitions class _SERVICE_STATUS_PROCESS(Structure): _fields_ = [ ("dwServiceType", DWORD), ("dwCurrentState", DWORD), ("dwControlsAccepted", DWORD), ("dwWin32ExitCode", DWORD), ("dwServiceSpecificExitCode", DWORD), ("dwCheckPoint", DWORD), ("dwWaitHint", DWORD), ("dwProcessId", DWORD), ("dwServiceFlags", DWORD), ] LPSERVICE_STATUS_PROCESS = POINTER(_SERVICE_STATUS_PROCESS) SERVICE_STATUS_PROCESS = _SERVICE_STATUS_PROCESS # Struct _ENUM_SERVICE_STATUS_PROCESSA definitions class _ENUM_SERVICE_STATUS_PROCESSA(Structure): _fields_ = [ ("lpServiceName", LPSTR), ("lpDisplayName", LPSTR), ("ServiceStatusProcess", SERVICE_STATUS_PROCESS), ] LPENUM_SERVICE_STATUS_PROCESSA = POINTER(_ENUM_SERVICE_STATUS_PROCESSA) ENUM_SERVICE_STATUS_PROCESSA = _ENUM_SERVICE_STATUS_PROCESSA # Struct _ENUM_SERVICE_STATUS_PROCESSW definitions class _ENUM_SERVICE_STATUS_PROCESSW(Structure): _fields_ = [ ("lpServiceName", LPWSTR), ("lpDisplayName", LPWSTR), ("ServiceStatusProcess", SERVICE_STATUS_PROCESS), ] ENUM_SERVICE_STATUS_PROCESSW = _ENUM_SERVICE_STATUS_PROCESSW LPENUM_SERVICE_STATUS_PROCESSW = POINTER(_ENUM_SERVICE_STATUS_PROCESSW) # Struct CATALOG_INFO_ definitions class CATALOG_INFO_(Structure): _fields_ = [ ("cbStruct", DWORD), ("wszCatalogFile", WCHAR * MAX_PATH), ] CATALOG_INFO = CATALOG_INFO_ # Struct _SYSTEM_HANDLE definitions class _SYSTEM_HANDLE(Structure): _fields_ = [ ("dwProcessId", DWORD), ("bObjectType", BYTE), ("bFlags", BYTE), ("wValue", WORD), ("pAddress", PVOID), ("GrantedAccess", DWORD), ] SYSTEM_HANDLE = _SYSTEM_HANDLE # Struct _SYSTEM_HANDLE_INFORMATION definitions class _SYSTEM_HANDLE_INFORMATION(Structure): _fields_ = [ ("HandleCount", ULONG), ("Handles", SYSTEM_HANDLE * 1), ] PSYSTEM_HANDLE_INFORMATION = POINTER(_SYSTEM_HANDLE_INFORMATION) SYSTEM_HANDLE_INFORMATION = _SYSTEM_HANDLE_INFORMATION # Struct __PUBLIC_OBJECT_TYPE_INFORMATION definitions class __PUBLIC_OBJECT_TYPE_INFORMATION(Structure): _fields_ = [ ("TypeName", UNICODE_STRING), ("Reserved", ULONG * 22), ] PPUBLIC_OBJECT_TYPE_INFORMATION = POINTER(__PUBLIC_OBJECT_TYPE_INFORMATION) PUBLIC_OBJECT_TYPE_INFORMATION = __PUBLIC_OBJECT_TYPE_INFORMATION # Struct _PUBLIC_OBJECT_BASIC_INFORMATION definitions class _PUBLIC_OBJECT_BASIC_INFORMATION(Structure): _fields_ = [ ("Attributes", ULONG), ("GrantedAccess", ACCESS_MASK), ("HandleCount", ULONG), ("PointerCount", ULONG), ("Reserved", ULONG * 10), ] PUBLIC_OBJECT_BASIC_INFORMATION = _PUBLIC_OBJECT_BASIC_INFORMATION PPUBLIC_OBJECT_BASIC_INFORMATION = POINTER(_PUBLIC_OBJECT_BASIC_INFORMATION) # Struct _EVENTLOGRECORD definitions class _EVENTLOGRECORD(Structure): _fields_ = [ ("Length", DWORD), ("Reserved", DWORD), ("RecordNumber", DWORD), ("TimeGenerated", DWORD), ("TimeWritten", DWORD), ("EventID", DWORD), ("EventType", WORD), ("NumStrings", WORD), ("EventCategory", WORD), ("ReservedFlags", WORD), ("ClosingRecordNumber", DWORD), ("StringOffset", DWORD), ("UserSidLength", DWORD), ("UserSidOffset", DWORD), ("DataLength", DWORD), ("DataOffset", DWORD), ] PEVENTLOGRECORD = POINTER(_EVENTLOGRECORD) EVENTLOGRECORD = _EVENTLOGRECORD # Struct tagSOLE_AUTHENTICATION_SERVICE definitions class tagSOLE_AUTHENTICATION_SERVICE(Structure): _fields_ = [ ("dwAuthnSvc", DWORD), ("dwAuthzSvc", DWORD), ("pPrincipalName", POINTER(OLECHAR)), ("hr", HRESULT), ] PSOLE_AUTHENTICATION_SERVICE = POINTER(tagSOLE_AUTHENTICATION_SERVICE) SOLE_AUTHENTICATION_SERVICE = tagSOLE_AUTHENTICATION_SERVICE