mirror of
https://github.com/ladislav-zezula/FileTest
synced 2026-06-08 15:24:12 +00:00
Ladislav Zezula
43 lines
1.1 KiB
Python
43 lines
1.1 KiB
Python
# Converting ntstatus.h into array used in FileTest
|
|
import re, sys
|
|
|
|
def main(argc, argv):
|
|
|
|
try:
|
|
# Process the lines in the detections file
|
|
ntstatus_source = 'ntstatus.h'
|
|
file_lines = [line.rstrip('\n') for line in open(ntstatus_source)]
|
|
|
|
# Create the deletion script
|
|
f = open('nstatus.cpp', 'wt')
|
|
|
|
# Parse all lines
|
|
for single_line in file_lines:
|
|
|
|
# Check for lines like "#define STATUS_SUCCESS ((NTSTATUS)0x00000000L) // ntsubauth"
|
|
if re.match(r"#define [A-Z_]+ +\(\(NTSTATUS\)0x[0-9a-fA-F]{8}L\)", single_line, re.I):
|
|
|
|
# Split the line to words
|
|
word_list = single_line.split(' ')
|
|
if(len(word_list) >= 2):
|
|
|
|
# Avoid lines like "NTSTATUS_FROM_WIN32(x)"
|
|
ntstatus_name = word_list[1]
|
|
if(ntstatus_name.find('(') != -1):
|
|
continue
|
|
|
|
# Write the second word to the output file
|
|
f.write(' DEFINE_NTSTATUS_ENTRY(%s),\n' % ntstatus_name)
|
|
print(ntstatus_name)
|
|
|
|
# Close the delete file
|
|
f.close()
|
|
|
|
except:
|
|
print("Exception in processing the header file")
|
|
pass
|
|
|
|
if __name__ == "__main__" :
|
|
main(len(sys.argv), sys.argv)
|
|
|