librex 0.0.17 → 0.0.18
Sign up to get free protection for your applications and to get access to all the features.
- data/README.markdown +1 -1
- metadata +3 -436
- data/lib/rex/LICENSE +0 -29
- data/lib/rex/arch.rb +0 -103
- data/lib/rex/arch/sparc.rb +0 -75
- data/lib/rex/arch/sparc.rb.ut.rb +0 -18
- data/lib/rex/arch/x86.rb +0 -513
- data/lib/rex/arch/x86.rb.ut.rb +0 -93
- data/lib/rex/assembly/nasm.rb +0 -104
- data/lib/rex/assembly/nasm.rb.ut.rb +0 -22
- data/lib/rex/codepage.map +0 -104
- data/lib/rex/compat.rb +0 -311
- data/lib/rex/constants.rb +0 -113
- data/lib/rex/elfparsey.rb +0 -11
- data/lib/rex/elfparsey/elf.rb +0 -123
- data/lib/rex/elfparsey/elfbase.rb +0 -258
- data/lib/rex/elfparsey/exceptions.rb +0 -27
- data/lib/rex/elfscan.rb +0 -12
- data/lib/rex/elfscan/scanner.rb +0 -207
- data/lib/rex/elfscan/search.rb +0 -46
- data/lib/rex/encoder/alpha2.rb +0 -31
- data/lib/rex/encoder/alpha2/alpha_mixed.rb +0 -68
- data/lib/rex/encoder/alpha2/alpha_upper.rb +0 -79
- data/lib/rex/encoder/alpha2/generic.rb +0 -114
- data/lib/rex/encoder/alpha2/unicode_mixed.rb +0 -117
- data/lib/rex/encoder/alpha2/unicode_upper.rb +0 -129
- data/lib/rex/encoder/ndr.rb +0 -89
- data/lib/rex/encoder/ndr.rb.ut.rb +0 -44
- data/lib/rex/encoder/nonalpha.rb +0 -61
- data/lib/rex/encoder/nonupper.rb +0 -64
- data/lib/rex/encoder/xdr.rb +0 -106
- data/lib/rex/encoder/xdr.rb.ut.rb +0 -29
- data/lib/rex/encoder/xor.rb +0 -69
- data/lib/rex/encoder/xor/dword.rb +0 -13
- data/lib/rex/encoder/xor/dword_additive.rb +0 -13
- data/lib/rex/encoders/xor_dword.rb +0 -35
- data/lib/rex/encoders/xor_dword_additive.rb +0 -53
- data/lib/rex/encoders/xor_dword_additive.rb.ut.rb +0 -12
- data/lib/rex/encoding/xor.rb +0 -20
- data/lib/rex/encoding/xor.rb.ts.rb +0 -14
- data/lib/rex/encoding/xor/byte.rb +0 -15
- data/lib/rex/encoding/xor/byte.rb.ut.rb +0 -21
- data/lib/rex/encoding/xor/dword.rb +0 -21
- data/lib/rex/encoding/xor/dword.rb.ut.rb +0 -15
- data/lib/rex/encoding/xor/dword_additive.rb +0 -92
- data/lib/rex/encoding/xor/dword_additive.rb.ut.rb +0 -15
- data/lib/rex/encoding/xor/exceptions.rb +0 -17
- data/lib/rex/encoding/xor/generic.rb +0 -146
- data/lib/rex/encoding/xor/generic.rb.ut.rb +0 -120
- data/lib/rex/encoding/xor/qword.rb +0 -15
- data/lib/rex/encoding/xor/word.rb +0 -21
- data/lib/rex/encoding/xor/word.rb.ut.rb +0 -13
- data/lib/rex/exceptions.rb +0 -275
- data/lib/rex/exceptions.rb.ut.rb +0 -44
- data/lib/rex/exploitation/cmdstager.rb +0 -9
- data/lib/rex/exploitation/cmdstager/base.rb +0 -175
- data/lib/rex/exploitation/cmdstager/debug_asm.rb +0 -142
- data/lib/rex/exploitation/cmdstager/debug_write.rb +0 -136
- data/lib/rex/exploitation/cmdstager/tftp.rb +0 -63
- data/lib/rex/exploitation/cmdstager/vbs.rb +0 -128
- data/lib/rex/exploitation/egghunter.rb +0 -277
- data/lib/rex/exploitation/egghunter.rb.ut.rb +0 -25
- data/lib/rex/exploitation/encryptjs.rb +0 -77
- data/lib/rex/exploitation/heaplib.js.b64 +0 -331
- data/lib/rex/exploitation/heaplib.rb +0 -94
- data/lib/rex/exploitation/javascriptosdetect.rb +0 -897
- data/lib/rex/exploitation/obfuscatejs.rb +0 -335
- data/lib/rex/exploitation/omelet.rb +0 -320
- data/lib/rex/exploitation/omelet.rb.ut.rb +0 -13
- data/lib/rex/exploitation/opcodedb.rb +0 -818
- data/lib/rex/exploitation/opcodedb.rb.ut.rb +0 -279
- data/lib/rex/exploitation/seh.rb +0 -92
- data/lib/rex/exploitation/seh.rb.ut.rb +0 -19
- data/lib/rex/file.rb +0 -112
- data/lib/rex/file.rb.ut.rb +0 -16
- data/lib/rex/image_source.rb +0 -12
- data/lib/rex/image_source/disk.rb +0 -60
- data/lib/rex/image_source/image_source.rb +0 -46
- data/lib/rex/image_source/memory.rb +0 -37
- data/lib/rex/io/bidirectional_pipe.rb +0 -157
- data/lib/rex/io/datagram_abstraction.rb +0 -35
- data/lib/rex/io/ring_buffer.rb +0 -364
- data/lib/rex/io/stream.rb +0 -319
- data/lib/rex/io/stream_abstraction.rb +0 -197
- data/lib/rex/io/stream_server.rb +0 -211
- data/lib/rex/job_container.rb +0 -187
- data/lib/rex/logging.rb +0 -4
- data/lib/rex/logging/log_dispatcher.rb +0 -179
- data/lib/rex/logging/log_sink.rb +0 -42
- data/lib/rex/logging/sinks/flatfile.rb +0 -55
- data/lib/rex/logging/sinks/stderr.rb +0 -43
- data/lib/rex/machparsey.rb +0 -9
- data/lib/rex/machparsey/exceptions.rb +0 -34
- data/lib/rex/machparsey/mach.rb +0 -209
- data/lib/rex/machparsey/machbase.rb +0 -408
- data/lib/rex/machscan.rb +0 -9
- data/lib/rex/machscan/scanner.rb +0 -217
- data/lib/rex/mime.rb +0 -9
- data/lib/rex/mime/header.rb +0 -77
- data/lib/rex/mime/message.rb +0 -144
- data/lib/rex/mime/part.rb +0 -20
- data/lib/rex/nop/opty2.rb +0 -108
- data/lib/rex/nop/opty2.rb.ut.rb +0 -23
- data/lib/rex/nop/opty2_tables.rb +0 -300
- data/lib/rex/ole.rb +0 -205
- data/lib/rex/ole/clsid.rb +0 -47
- data/lib/rex/ole/difat.rb +0 -141
- data/lib/rex/ole/directory.rb +0 -231
- data/lib/rex/ole/direntry.rb +0 -240
- data/lib/rex/ole/docs/dependencies.txt +0 -8
- data/lib/rex/ole/docs/references.txt +0 -1
- data/lib/rex/ole/fat.rb +0 -99
- data/lib/rex/ole/header.rb +0 -204
- data/lib/rex/ole/minifat.rb +0 -77
- data/lib/rex/ole/propset.rb +0 -144
- data/lib/rex/ole/samples/create_ole.rb +0 -27
- data/lib/rex/ole/samples/dir.rb +0 -35
- data/lib/rex/ole/samples/dump_stream.rb +0 -34
- data/lib/rex/ole/samples/ole_info.rb +0 -23
- data/lib/rex/ole/storage.rb +0 -395
- data/lib/rex/ole/stream.rb +0 -53
- data/lib/rex/ole/substorage.rb +0 -49
- data/lib/rex/ole/util.rb +0 -157
- data/lib/rex/parser/arguments.rb +0 -97
- data/lib/rex/parser/arguments.rb.ut.rb +0 -67
- data/lib/rex/parser/ini.rb +0 -185
- data/lib/rex/parser/ini.rb.ut.rb +0 -29
- data/lib/rex/parser/ip360_aspl_xml.rb +0 -102
- data/lib/rex/parser/ip360_xml.rb +0 -97
- data/lib/rex/parser/nessus_xml.rb +0 -118
- data/lib/rex/parser/netsparker_xml.rb +0 -94
- data/lib/rex/parser/nexpose_xml.rb +0 -136
- data/lib/rex/parser/nmap_xml.rb +0 -137
- data/lib/rex/parser/retina_xml.rb +0 -109
- data/lib/rex/payloads.rb +0 -1
- data/lib/rex/payloads/win32.rb +0 -2
- data/lib/rex/payloads/win32/common.rb +0 -26
- data/lib/rex/payloads/win32/kernel.rb +0 -53
- data/lib/rex/payloads/win32/kernel/common.rb +0 -54
- data/lib/rex/payloads/win32/kernel/migration.rb +0 -12
- data/lib/rex/payloads/win32/kernel/recovery.rb +0 -50
- data/lib/rex/payloads/win32/kernel/stager.rb +0 -194
- data/lib/rex/peparsey.rb +0 -12
- data/lib/rex/peparsey/exceptions.rb +0 -32
- data/lib/rex/peparsey/pe.rb +0 -212
- data/lib/rex/peparsey/pe_memdump.rb +0 -63
- data/lib/rex/peparsey/pebase.rb +0 -1680
- data/lib/rex/peparsey/section.rb +0 -136
- data/lib/rex/pescan.rb +0 -13
- data/lib/rex/pescan/analyze.rb +0 -309
- data/lib/rex/pescan/scanner.rb +0 -206
- data/lib/rex/pescan/search.rb +0 -56
- data/lib/rex/platforms.rb +0 -1
- data/lib/rex/platforms/windows.rb +0 -51
- data/lib/rex/poly.rb +0 -132
- data/lib/rex/poly/block.rb +0 -477
- data/lib/rex/poly/register.rb +0 -100
- data/lib/rex/poly/register/x86.rb +0 -40
- data/lib/rex/post.rb +0 -8
- data/lib/rex/post/dir.rb +0 -51
- data/lib/rex/post/file.rb +0 -172
- data/lib/rex/post/file_stat.rb +0 -220
- data/lib/rex/post/gen.pl +0 -13
- data/lib/rex/post/io.rb +0 -182
- data/lib/rex/post/meterpreter.rb +0 -4
- data/lib/rex/post/meterpreter/channel.rb +0 -445
- data/lib/rex/post/meterpreter/channel_container.rb +0 -54
- data/lib/rex/post/meterpreter/channels/pool.rb +0 -160
- data/lib/rex/post/meterpreter/channels/pools/file.rb +0 -62
- data/lib/rex/post/meterpreter/channels/pools/stream_pool.rb +0 -103
- data/lib/rex/post/meterpreter/channels/stream.rb +0 -87
- data/lib/rex/post/meterpreter/client.rb +0 -364
- data/lib/rex/post/meterpreter/client_core.rb +0 -274
- data/lib/rex/post/meterpreter/dependencies.rb +0 -3
- data/lib/rex/post/meterpreter/extension.rb +0 -32
- data/lib/rex/post/meterpreter/extensions/espia/espia.rb +0 -58
- data/lib/rex/post/meterpreter/extensions/espia/tlv.rb +0 -16
- data/lib/rex/post/meterpreter/extensions/incognito/incognito.rb +0 -94
- data/lib/rex/post/meterpreter/extensions/incognito/tlv.rb +0 -21
- data/lib/rex/post/meterpreter/extensions/networkpug/networkpug.rb +0 -57
- data/lib/rex/post/meterpreter/extensions/networkpug/tlv.rb +0 -15
- data/lib/rex/post/meterpreter/extensions/priv/fs.rb +0 -118
- data/lib/rex/post/meterpreter/extensions/priv/passwd.rb +0 -61
- data/lib/rex/post/meterpreter/extensions/priv/priv.rb +0 -111
- data/lib/rex/post/meterpreter/extensions/priv/tlv.rb +0 -28
- data/lib/rex/post/meterpreter/extensions/sniffer/sniffer.rb +0 -101
- data/lib/rex/post/meterpreter/extensions/sniffer/tlv.rb +0 -26
- data/lib/rex/post/meterpreter/extensions/stdapi/constants.rb +0 -333
- data/lib/rex/post/meterpreter/extensions/stdapi/fs/dir.rb +0 -282
- data/lib/rex/post/meterpreter/extensions/stdapi/fs/file.rb +0 -266
- data/lib/rex/post/meterpreter/extensions/stdapi/fs/file_stat.rb +0 -103
- data/lib/rex/post/meterpreter/extensions/stdapi/fs/io.rb +0 -48
- data/lib/rex/post/meterpreter/extensions/stdapi/net/config.rb +0 -144
- data/lib/rex/post/meterpreter/extensions/stdapi/net/interface.rb +0 -73
- data/lib/rex/post/meterpreter/extensions/stdapi/net/route.rb +0 -56
- data/lib/rex/post/meterpreter/extensions/stdapi/net/socket.rb +0 -137
- data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_client_channel.rb +0 -180
- data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/tcp_server_channel.rb +0 -167
- data/lib/rex/post/meterpreter/extensions/stdapi/net/socket_subsystem/udp_channel.rb +0 -208
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun.rb.ts.rb +0 -6
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb +0 -38106
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/api_constants.rb.ut.rb +0 -31
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb +0 -47
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/buffer_item.rb.ut.rb +0 -36
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_advapi32.rb +0 -1818
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_iphlpapi.rb +0 -96
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_kernel32.rb +0 -3848
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_netapi32.rb +0 -26
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ntdll.rb +0 -153
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_shell32.rb +0 -21
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_user32.rb +0 -3169
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/def/def_ws2_32.rb +0 -599
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll.rb +0 -318
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb +0 -100
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_function.rb.ut.rb +0 -42
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb +0 -148
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/dll_helper.rb.ut.rb +0 -127
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/multicall.rb +0 -309
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/railgun.rb +0 -204
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/tlv.rb +0 -51
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/util.rb +0 -630
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb +0 -75
- data/lib/rex/post/meterpreter/extensions/stdapi/railgun/win_const_manager.rb.ut.rb +0 -103
- data/lib/rex/post/meterpreter/extensions/stdapi/stdapi.rb +0 -149
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/config.rb +0 -97
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log.rb +0 -192
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/event_log_subsystem/event_record.rb +0 -41
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/power.rb +0 -61
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/process.rb +0 -370
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/image.rb +0 -129
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/io.rb +0 -55
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/memory.rb +0 -336
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/process_subsystem/thread.rb +0 -141
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry.rb +0 -279
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_key.rb +0 -193
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/registry_subsystem/registry_value.rb +0 -102
- data/lib/rex/post/meterpreter/extensions/stdapi/sys/thread.rb +0 -180
- data/lib/rex/post/meterpreter/extensions/stdapi/tlv.rb +0 -211
- data/lib/rex/post/meterpreter/extensions/stdapi/ui.rb +0 -227
- data/lib/rex/post/meterpreter/extensions/stdapi/webcam/webcam.rb +0 -63
- data/lib/rex/post/meterpreter/inbound_packet_handler.rb +0 -30
- data/lib/rex/post/meterpreter/object_aliases.rb +0 -83
- data/lib/rex/post/meterpreter/packet.rb +0 -688
- data/lib/rex/post/meterpreter/packet_dispatcher.rb +0 -431
- data/lib/rex/post/meterpreter/packet_parser.rb +0 -94
- data/lib/rex/post/meterpreter/packet_response_waiter.rb +0 -83
- data/lib/rex/post/meterpreter/ui/console.rb +0 -137
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher.rb +0 -62
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/core.rb +0 -730
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/espia.rb +0 -108
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/incognito.rb +0 -241
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/networkpug.rb +0 -231
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv.rb +0 -61
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/elevate.rb +0 -98
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/passwd.rb +0 -51
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/priv/timestomp.rb +0 -132
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/sniffer.rb +0 -187
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi.rb +0 -65
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/fs.rb +0 -442
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/net.rb +0 -298
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/sys.rb +0 -486
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/ui.rb +0 -315
- data/lib/rex/post/meterpreter/ui/console/command_dispatcher/stdapi/webcam.rb +0 -157
- data/lib/rex/post/meterpreter/ui/console/interactive_channel.rb +0 -95
- data/lib/rex/post/permission.rb +0 -26
- data/lib/rex/post/process.rb +0 -57
- data/lib/rex/post/thread.rb +0 -57
- data/lib/rex/post/ui.rb +0 -52
- data/lib/rex/proto.rb +0 -13
- data/lib/rex/proto.rb.ts.rb +0 -8
- data/lib/rex/proto/dcerpc.rb +0 -6
- data/lib/rex/proto/dcerpc.rb.ts.rb +0 -9
- data/lib/rex/proto/dcerpc/client.rb +0 -361
- data/lib/rex/proto/dcerpc/client.rb.ut.rb +0 -491
- data/lib/rex/proto/dcerpc/exceptions.rb +0 -150
- data/lib/rex/proto/dcerpc/handle.rb +0 -47
- data/lib/rex/proto/dcerpc/handle.rb.ut.rb +0 -85
- data/lib/rex/proto/dcerpc/ndr.rb +0 -72
- data/lib/rex/proto/dcerpc/ndr.rb.ut.rb +0 -41
- data/lib/rex/proto/dcerpc/packet.rb +0 -253
- data/lib/rex/proto/dcerpc/packet.rb.ut.rb +0 -56
- data/lib/rex/proto/dcerpc/response.rb +0 -187
- data/lib/rex/proto/dcerpc/response.rb.ut.rb +0 -15
- data/lib/rex/proto/dcerpc/uuid.rb +0 -84
- data/lib/rex/proto/dcerpc/uuid.rb.ut.rb +0 -46
- data/lib/rex/proto/dhcp.rb +0 -7
- data/lib/rex/proto/dhcp/constants.rb +0 -33
- data/lib/rex/proto/dhcp/server.rb +0 -292
- data/lib/rex/proto/drda.rb +0 -5
- data/lib/rex/proto/drda.rb.ts.rb +0 -17
- data/lib/rex/proto/drda/constants.rb +0 -49
- data/lib/rex/proto/drda/constants.rb.ut.rb +0 -23
- data/lib/rex/proto/drda/packet.rb +0 -252
- data/lib/rex/proto/drda/packet.rb.ut.rb +0 -109
- data/lib/rex/proto/drda/utils.rb +0 -123
- data/lib/rex/proto/drda/utils.rb.ut.rb +0 -84
- data/lib/rex/proto/http.rb +0 -5
- data/lib/rex/proto/http.rb.ts.rb +0 -12
- data/lib/rex/proto/http/client.rb +0 -821
- data/lib/rex/proto/http/client.rb.ut.rb +0 -95
- data/lib/rex/proto/http/handler.rb +0 -46
- data/lib/rex/proto/http/handler/erb.rb +0 -128
- data/lib/rex/proto/http/handler/erb.rb.ut.rb +0 -21
- data/lib/rex/proto/http/handler/erb.rb.ut.rb.rhtml +0 -1
- data/lib/rex/proto/http/handler/proc.rb +0 -60
- data/lib/rex/proto/http/handler/proc.rb.ut.rb +0 -24
- data/lib/rex/proto/http/header.rb +0 -161
- data/lib/rex/proto/http/header.rb.ut.rb +0 -46
- data/lib/rex/proto/http/packet.rb +0 -407
- data/lib/rex/proto/http/packet.rb.ut.rb +0 -165
- data/lib/rex/proto/http/request.rb +0 -356
- data/lib/rex/proto/http/request.rb.ut.rb +0 -214
- data/lib/rex/proto/http/response.rb +0 -90
- data/lib/rex/proto/http/response.rb.ut.rb +0 -149
- data/lib/rex/proto/http/server.rb +0 -369
- data/lib/rex/proto/http/server.rb.ut.rb +0 -79
- data/lib/rex/proto/ntlm.rb +0 -7
- data/lib/rex/proto/ntlm.rb.ut.rb +0 -177
- data/lib/rex/proto/ntlm/base.rb +0 -326
- data/lib/rex/proto/ntlm/constants.rb +0 -74
- data/lib/rex/proto/ntlm/crypt.rb +0 -415
- data/lib/rex/proto/ntlm/exceptions.rb +0 -16
- data/lib/rex/proto/ntlm/message.rb +0 -536
- data/lib/rex/proto/ntlm/utils.rb +0 -764
- data/lib/rex/proto/proxy/socks4a.rb +0 -440
- data/lib/rex/proto/rfb.rb +0 -19
- data/lib/rex/proto/rfb.rb.ut.rb +0 -37
- data/lib/rex/proto/rfb/cipher.rb +0 -84
- data/lib/rex/proto/rfb/client.rb +0 -207
- data/lib/rex/proto/rfb/constants.rb +0 -52
- data/lib/rex/proto/smb.rb +0 -7
- data/lib/rex/proto/smb.rb.ts.rb +0 -8
- data/lib/rex/proto/smb/client.rb +0 -1952
- data/lib/rex/proto/smb/client.rb.ut.rb +0 -223
- data/lib/rex/proto/smb/constants.rb +0 -1047
- data/lib/rex/proto/smb/constants.rb.ut.rb +0 -18
- data/lib/rex/proto/smb/crypt.rb +0 -36
- data/lib/rex/proto/smb/evasions.rb +0 -66
- data/lib/rex/proto/smb/exceptions.rb +0 -858
- data/lib/rex/proto/smb/simpleclient.rb +0 -306
- data/lib/rex/proto/smb/simpleclient.rb.ut.rb +0 -128
- data/lib/rex/proto/smb/utils.rb +0 -103
- data/lib/rex/proto/smb/utils.rb.ut.rb +0 -20
- data/lib/rex/proto/sunrpc.rb +0 -1
- data/lib/rex/proto/sunrpc/client.rb +0 -195
- data/lib/rex/proto/tftp.rb +0 -12
- data/lib/rex/proto/tftp/constants.rb +0 -39
- data/lib/rex/proto/tftp/server.rb +0 -497
- data/lib/rex/proto/tftp/server.rb.ut.rb +0 -28
- data/lib/rex/script.rb +0 -42
- data/lib/rex/script/base.rb +0 -59
- data/lib/rex/script/meterpreter.rb +0 -15
- data/lib/rex/script/shell.rb +0 -9
- data/lib/rex/service.rb +0 -48
- data/lib/rex/service_manager.rb +0 -141
- data/lib/rex/service_manager.rb.ut.rb +0 -32
- data/lib/rex/services/local_relay.rb +0 -423
- data/lib/rex/socket.rb +0 -684
- data/lib/rex/socket.rb.ut.rb +0 -107
- data/lib/rex/socket/comm.rb +0 -119
- data/lib/rex/socket/comm/local.rb +0 -412
- data/lib/rex/socket/comm/local.rb.ut.rb +0 -75
- data/lib/rex/socket/ip.rb +0 -130
- data/lib/rex/socket/parameters.rb +0 -345
- data/lib/rex/socket/parameters.rb.ut.rb +0 -51
- data/lib/rex/socket/range_walker.rb +0 -346
- data/lib/rex/socket/range_walker.rb.ut.rb +0 -55
- data/lib/rex/socket/ssl_tcp.rb +0 -184
- data/lib/rex/socket/ssl_tcp.rb.ut.rb +0 -39
- data/lib/rex/socket/ssl_tcp_server.rb +0 -122
- data/lib/rex/socket/ssl_tcp_server.rb.ut.rb +0 -61
- data/lib/rex/socket/subnet_walker.rb +0 -75
- data/lib/rex/socket/subnet_walker.rb.ut.rb +0 -28
- data/lib/rex/socket/switch_board.rb +0 -278
- data/lib/rex/socket/switch_board.rb.ut.rb +0 -52
- data/lib/rex/socket/tcp.rb +0 -76
- data/lib/rex/socket/tcp.rb.ut.rb +0 -64
- data/lib/rex/socket/tcp_server.rb +0 -66
- data/lib/rex/socket/tcp_server.rb.ut.rb +0 -44
- data/lib/rex/socket/udp.rb +0 -164
- data/lib/rex/socket/udp.rb.ut.rb +0 -44
- data/lib/rex/struct2.rb +0 -5
- data/lib/rex/struct2/c_struct.rb +0 -181
- data/lib/rex/struct2/c_struct_template.rb +0 -39
- data/lib/rex/struct2/constant.rb +0 -26
- data/lib/rex/struct2/element.rb +0 -44
- data/lib/rex/struct2/generic.rb +0 -73
- data/lib/rex/struct2/restraint.rb +0 -54
- data/lib/rex/struct2/s_string.rb +0 -72
- data/lib/rex/struct2/s_struct.rb +0 -111
- data/lib/rex/sync.rb +0 -6
- data/lib/rex/sync/event.rb +0 -94
- data/lib/rex/sync/read_write_lock.rb +0 -176
- data/lib/rex/sync/ref.rb +0 -57
- data/lib/rex/sync/thread_safe.rb +0 -82
- data/lib/rex/test.rb +0 -35
- data/lib/rex/text.rb +0 -1163
- data/lib/rex/text.rb.ut.rb +0 -190
- data/lib/rex/thread_factory.rb +0 -42
- data/lib/rex/time.rb +0 -65
- data/lib/rex/transformer.rb +0 -115
- data/lib/rex/transformer.rb.ut.rb +0 -38
- data/lib/rex/ui.rb +0 -21
- data/lib/rex/ui/interactive.rb +0 -298
- data/lib/rex/ui/output.rb +0 -78
- data/lib/rex/ui/output/none.rb +0 -18
- data/lib/rex/ui/progress_tracker.rb +0 -96
- data/lib/rex/ui/subscriber.rb +0 -149
- data/lib/rex/ui/text/color.rb +0 -97
- data/lib/rex/ui/text/color.rb.ut.rb +0 -18
- data/lib/rex/ui/text/dispatcher_shell.rb +0 -467
- data/lib/rex/ui/text/input.rb +0 -117
- data/lib/rex/ui/text/input/buffer.rb +0 -75
- data/lib/rex/ui/text/input/readline.rb +0 -129
- data/lib/rex/ui/text/input/socket.rb +0 -95
- data/lib/rex/ui/text/input/stdio.rb +0 -45
- data/lib/rex/ui/text/irb_shell.rb +0 -57
- data/lib/rex/ui/text/output.rb +0 -80
- data/lib/rex/ui/text/output/buffer.rb +0 -61
- data/lib/rex/ui/text/output/file.rb +0 -43
- data/lib/rex/ui/text/output/socket.rb +0 -43
- data/lib/rex/ui/text/output/stdio.rb +0 -40
- data/lib/rex/ui/text/progress_tracker.rb +0 -56
- data/lib/rex/ui/text/progress_tracker.rb.ut.rb +0 -34
- data/lib/rex/ui/text/shell.rb +0 -328
- data/lib/rex/ui/text/table.rb +0 -279
- data/lib/rex/ui/text/table.rb.ut.rb +0 -55
- data/lib/rex/zip.rb +0 -93
- data/lib/rex/zip/archive.rb +0 -184
- data/lib/rex/zip/blocks.rb +0 -182
- data/lib/rex/zip/entry.rb +0 -104
- data/lib/rex/zip/samples/comment.rb +0 -32
- data/lib/rex/zip/samples/mkwar.rb +0 -138
- data/lib/rex/zip/samples/mkzip.rb +0 -19
- data/lib/rex/zip/samples/recursive.rb +0 -58
@@ -1,96 +0,0 @@
|
|
1
|
-
module Rex
|
2
|
-
module Post
|
3
|
-
module Meterpreter
|
4
|
-
module Extensions
|
5
|
-
module Stdapi
|
6
|
-
module Railgun
|
7
|
-
module Def
|
8
|
-
|
9
|
-
class Def_iphlpapi
|
10
|
-
|
11
|
-
def self.add_imports(railgun)
|
12
|
-
|
13
|
-
railgun.add_dll('iphlpapi')
|
14
|
-
|
15
|
-
railgun.add_function( 'iphlpapi', 'CancelIPChangeNotify', 'BOOL',[
|
16
|
-
["PBLOB","notifyOverlapped","in"],
|
17
|
-
])
|
18
|
-
|
19
|
-
railgun.add_function( 'iphlpapi', 'CreateProxyArpEntry', 'DWORD',[
|
20
|
-
["DWORD","dwAddress","in"],
|
21
|
-
["DWORD","dwMask","in"],
|
22
|
-
["DWORD","dwIfIndex","in"],
|
23
|
-
])
|
24
|
-
|
25
|
-
railgun.add_function( 'iphlpapi', 'DeleteIPAddress', 'DWORD',[
|
26
|
-
["DWORD","NTEContext","in"],
|
27
|
-
])
|
28
|
-
|
29
|
-
railgun.add_function( 'iphlpapi', 'DeleteProxyArpEntry', 'DWORD',[
|
30
|
-
["DWORD","dwAddress","in"],
|
31
|
-
["DWORD","dwMask","in"],
|
32
|
-
["DWORD","dwIfIndex","in"],
|
33
|
-
])
|
34
|
-
|
35
|
-
railgun.add_function( 'iphlpapi', 'FlushIpNetTable', 'DWORD',[
|
36
|
-
["DWORD","dwIfIndex","in"],
|
37
|
-
])
|
38
|
-
|
39
|
-
railgun.add_function( 'iphlpapi', 'GetAdapterIndex', 'DWORD',[
|
40
|
-
["PWCHAR","AdapterName","in"],
|
41
|
-
["PDWORD","IfIndex","inout"],
|
42
|
-
])
|
43
|
-
|
44
|
-
railgun.add_function( 'iphlpapi', 'GetBestInterface', 'DWORD',[
|
45
|
-
["DWORD","dwDestAddr","in"],
|
46
|
-
["PDWORD","pdwBestIfIndex","inout"],
|
47
|
-
])
|
48
|
-
|
49
|
-
railgun.add_function( 'iphlpapi', 'GetBestInterfaceEx', 'DWORD',[
|
50
|
-
["PBLOB","pDestAddr","in"],
|
51
|
-
["PDWORD","pdwBestIfIndex","inout"],
|
52
|
-
])
|
53
|
-
|
54
|
-
railgun.add_function( 'iphlpapi', 'GetFriendlyIfIndex', 'DWORD',[
|
55
|
-
["DWORD","IfIndex","in"],
|
56
|
-
])
|
57
|
-
|
58
|
-
railgun.add_function( 'iphlpapi', 'GetNumberOfInterfaces', 'DWORD',[
|
59
|
-
["PDWORD","pdwNumIf","inout"],
|
60
|
-
])
|
61
|
-
|
62
|
-
railgun.add_function( 'iphlpapi', 'GetRTTAndHopCount', 'BOOL',[
|
63
|
-
["DWORD","DestIpAddress","in"],
|
64
|
-
["PDWORD","HopCount","inout"],
|
65
|
-
["DWORD","MaxHops","in"],
|
66
|
-
["PDWORD","RTT","inout"],
|
67
|
-
])
|
68
|
-
|
69
|
-
railgun.add_function( 'iphlpapi', 'NotifyAddrChange', 'DWORD',[
|
70
|
-
["PDWORD","Handle","inout"],
|
71
|
-
["PBLOB","overlapped","in"],
|
72
|
-
])
|
73
|
-
|
74
|
-
railgun.add_function( 'iphlpapi', 'NotifyRouteChange', 'DWORD',[
|
75
|
-
["PDWORD","Handle","inout"],
|
76
|
-
["PBLOB","overlapped","in"],
|
77
|
-
])
|
78
|
-
|
79
|
-
railgun.add_function( 'iphlpapi', 'SendARP', 'DWORD',[
|
80
|
-
["DWORD","DestIP","in"],
|
81
|
-
["DWORD","SrcIP","in"],
|
82
|
-
["PBLOB","pMacAddr","out"],
|
83
|
-
["PDWORD","PhyAddrLen","inout"],
|
84
|
-
])
|
85
|
-
|
86
|
-
railgun.add_function( 'iphlpapi', 'SetIpTTL', 'DWORD',[
|
87
|
-
["DWORD","nTTL","in"],
|
88
|
-
])
|
89
|
-
|
90
|
-
end
|
91
|
-
|
92
|
-
end
|
93
|
-
|
94
|
-
end; end; end; end; end; end; end
|
95
|
-
|
96
|
-
|
@@ -1,3848 +0,0 @@
|
|
1
|
-
module Rex
|
2
|
-
module Post
|
3
|
-
module Meterpreter
|
4
|
-
module Extensions
|
5
|
-
module Stdapi
|
6
|
-
module Railgun
|
7
|
-
module Def
|
8
|
-
|
9
|
-
class Def_kernel32
|
10
|
-
def self.add_imports(railgun)
|
11
|
-
|
12
|
-
railgun.add_dll('kernel32')
|
13
|
-
|
14
|
-
railgun.add_function('kernel32', 'ActivateActCtx', 'BOOL',[
|
15
|
-
["HANDLE","hActCtx","inout"],
|
16
|
-
["PBLOB","lpCookie","out"],
|
17
|
-
])
|
18
|
-
|
19
|
-
railgun.add_function('kernel32', 'AddAtomA', 'WORD',[
|
20
|
-
["PCHAR","lpString","in"],
|
21
|
-
])
|
22
|
-
|
23
|
-
railgun.add_function('kernel32', 'AddAtomW', 'WORD',[
|
24
|
-
["PWCHAR","lpString","in"],
|
25
|
-
])
|
26
|
-
|
27
|
-
railgun.add_function('kernel32', 'AddRefActCtx', 'VOID',[
|
28
|
-
["HANDLE","hActCtx","inout"],
|
29
|
-
])
|
30
|
-
|
31
|
-
railgun.add_function('kernel32', 'AddVectoredContinueHandler', 'LPVOID',[
|
32
|
-
["DWORD","First","in"],
|
33
|
-
["PBLOB","Handler","in"],
|
34
|
-
])
|
35
|
-
|
36
|
-
railgun.add_function('kernel32', 'AddVectoredExceptionHandler', 'LPVOID',[
|
37
|
-
["DWORD","First","in"],
|
38
|
-
["PBLOB","Handler","in"],
|
39
|
-
])
|
40
|
-
|
41
|
-
railgun.add_function('kernel32', 'AllocateUserPhysicalPages', 'BOOL',[
|
42
|
-
["HANDLE","hProcess","in"],
|
43
|
-
["PBLOB","NumberOfPages","inout"],
|
44
|
-
["PBLOB","PageArray","out"],
|
45
|
-
])
|
46
|
-
|
47
|
-
railgun.add_function('kernel32', 'AreFileApisANSI', 'BOOL',[
|
48
|
-
])
|
49
|
-
|
50
|
-
railgun.add_function('kernel32', 'AssignProcessToJobObject', 'BOOL',[
|
51
|
-
["HANDLE","hJob","in"],
|
52
|
-
["HANDLE","hProcess","in"],
|
53
|
-
])
|
54
|
-
|
55
|
-
railgun.add_function('kernel32', 'BackupRead', 'BOOL',[
|
56
|
-
["HANDLE","hFile","in"],
|
57
|
-
["PBLOB","lpBuffer","out"],
|
58
|
-
["DWORD","nNumberOfBytesToRead","in"],
|
59
|
-
["PDWORD","lpNumberOfBytesRead","out"],
|
60
|
-
["BOOL","bAbort","in"],
|
61
|
-
["BOOL","bProcessSecurity","in"],
|
62
|
-
["PBLOB","lpContext","inout"],
|
63
|
-
])
|
64
|
-
|
65
|
-
railgun.add_function('kernel32', 'BackupSeek', 'BOOL',[
|
66
|
-
["HANDLE","hFile","in"],
|
67
|
-
["DWORD","dwLowBytesToSeek","in"],
|
68
|
-
["DWORD","dwHighBytesToSeek","in"],
|
69
|
-
["PDWORD","lpdwLowByteSeeked","out"],
|
70
|
-
["PDWORD","lpdwHighByteSeeked","out"],
|
71
|
-
["PBLOB","lpContext","inout"],
|
72
|
-
])
|
73
|
-
|
74
|
-
railgun.add_function('kernel32', 'BackupWrite', 'BOOL',[
|
75
|
-
["HANDLE","hFile","in"],
|
76
|
-
["PBLOB","lpBuffer","in"],
|
77
|
-
["DWORD","nNumberOfBytesToWrite","in"],
|
78
|
-
["PDWORD","lpNumberOfBytesWritten","out"],
|
79
|
-
["BOOL","bAbort","in"],
|
80
|
-
["BOOL","bProcessSecurity","in"],
|
81
|
-
["PBLOB","lpContext","inout"],
|
82
|
-
])
|
83
|
-
|
84
|
-
railgun.add_function('kernel32', 'Beep', 'BOOL',[
|
85
|
-
["DWORD","dwFreq","in"],
|
86
|
-
["DWORD","dwDuration","in"],
|
87
|
-
])
|
88
|
-
|
89
|
-
railgun.add_function('kernel32', 'BeginUpdateResourceA', 'DWORD',[
|
90
|
-
["PCHAR","pFileName","in"],
|
91
|
-
["BOOL","bDeleteExistingResources","in"],
|
92
|
-
])
|
93
|
-
|
94
|
-
railgun.add_function('kernel32', 'BeginUpdateResourceW', 'DWORD',[
|
95
|
-
["PWCHAR","pFileName","in"],
|
96
|
-
["BOOL","bDeleteExistingResources","in"],
|
97
|
-
])
|
98
|
-
|
99
|
-
railgun.add_function('kernel32', 'BindIoCompletionCallback', 'BOOL',[
|
100
|
-
["DWORD","FileHandle","in"],
|
101
|
-
["PBLOB","Function","in"],
|
102
|
-
["DWORD","Flags","in"],
|
103
|
-
])
|
104
|
-
|
105
|
-
railgun.add_function('kernel32', 'BuildCommDCBA', 'BOOL',[
|
106
|
-
["PCHAR","lpDef","in"],
|
107
|
-
["PBLOB","lpDCB","out"],
|
108
|
-
])
|
109
|
-
|
110
|
-
railgun.add_function('kernel32', 'BuildCommDCBAndTimeoutsA', 'BOOL',[
|
111
|
-
["PCHAR","lpDef","in"],
|
112
|
-
["PBLOB","lpDCB","out"],
|
113
|
-
["PBLOB","lpCommTimeouts","out"],
|
114
|
-
])
|
115
|
-
|
116
|
-
railgun.add_function('kernel32', 'BuildCommDCBAndTimeoutsW', 'BOOL',[
|
117
|
-
["PWCHAR","lpDef","in"],
|
118
|
-
["PBLOB","lpDCB","out"],
|
119
|
-
["PBLOB","lpCommTimeouts","out"],
|
120
|
-
])
|
121
|
-
|
122
|
-
railgun.add_function('kernel32', 'BuildCommDCBW', 'BOOL',[
|
123
|
-
["PWCHAR","lpDef","in"],
|
124
|
-
["PBLOB","lpDCB","out"],
|
125
|
-
])
|
126
|
-
|
127
|
-
railgun.add_function('kernel32', 'CallNamedPipeA', 'BOOL',[
|
128
|
-
["PCHAR","lpNamedPipeName","in"],
|
129
|
-
["PBLOB","lpInBuffer","in"],
|
130
|
-
["DWORD","nInBufferSize","in"],
|
131
|
-
["PBLOB","lpOutBuffer","out"],
|
132
|
-
["DWORD","nOutBufferSize","in"],
|
133
|
-
["PDWORD","lpBytesRead","out"],
|
134
|
-
["DWORD","nTimeOut","in"],
|
135
|
-
])
|
136
|
-
|
137
|
-
railgun.add_function('kernel32', 'CallNamedPipeW', 'BOOL',[
|
138
|
-
["PWCHAR","lpNamedPipeName","in"],
|
139
|
-
["PBLOB","lpInBuffer","in"],
|
140
|
-
["DWORD","nInBufferSize","in"],
|
141
|
-
["PBLOB","lpOutBuffer","out"],
|
142
|
-
["DWORD","nOutBufferSize","in"],
|
143
|
-
["PDWORD","lpBytesRead","out"],
|
144
|
-
["DWORD","nTimeOut","in"],
|
145
|
-
])
|
146
|
-
|
147
|
-
railgun.add_function('kernel32', 'CancelDeviceWakeupRequest', 'BOOL',[
|
148
|
-
["HANDLE","hDevice","in"],
|
149
|
-
])
|
150
|
-
|
151
|
-
railgun.add_function('kernel32', 'CancelIo', 'BOOL',[
|
152
|
-
["HANDLE","hFile","in"],
|
153
|
-
])
|
154
|
-
|
155
|
-
railgun.add_function('kernel32', 'CancelTimerQueueTimer', 'BOOL',[
|
156
|
-
["DWORD","TimerQueue","in"],
|
157
|
-
["DWORD","Timer","in"],
|
158
|
-
])
|
159
|
-
|
160
|
-
railgun.add_function('kernel32', 'CancelWaitableTimer', 'BOOL',[
|
161
|
-
["HANDLE","hTimer","in"],
|
162
|
-
])
|
163
|
-
|
164
|
-
railgun.add_function('kernel32', 'ChangeTimerQueueTimer', 'BOOL',[
|
165
|
-
["DWORD","TimerQueue","in"],
|
166
|
-
["DWORD","Timer","inout"],
|
167
|
-
["DWORD","DueTime","in"],
|
168
|
-
["DWORD","Period","in"],
|
169
|
-
])
|
170
|
-
|
171
|
-
railgun.add_function('kernel32', 'CheckNameLegalDOS8Dot3A', 'BOOL',[
|
172
|
-
["PCHAR","lpName","in"],
|
173
|
-
["PCHAR","lpOemName","out"],
|
174
|
-
["DWORD","OemNameSize","in"],
|
175
|
-
["PBLOB","pbNameContainsSpaces","out"],
|
176
|
-
["PBLOB","pbNameLegal","out"],
|
177
|
-
])
|
178
|
-
|
179
|
-
railgun.add_function('kernel32', 'CheckNameLegalDOS8Dot3W', 'BOOL',[
|
180
|
-
["PWCHAR","lpName","in"],
|
181
|
-
["PCHAR","lpOemName","out"],
|
182
|
-
["DWORD","OemNameSize","in"],
|
183
|
-
["PBLOB","pbNameContainsSpaces","out"],
|
184
|
-
["PBLOB","pbNameLegal","out"],
|
185
|
-
])
|
186
|
-
|
187
|
-
railgun.add_function('kernel32', 'CheckRemoteDebuggerPresent', 'BOOL',[
|
188
|
-
["HANDLE","hProcess","in"],
|
189
|
-
["PBLOB","pbDebuggerPresent","out"],
|
190
|
-
])
|
191
|
-
|
192
|
-
railgun.add_function('kernel32', 'ClearCommBreak', 'BOOL',[
|
193
|
-
["HANDLE","hFile","in"],
|
194
|
-
])
|
195
|
-
|
196
|
-
railgun.add_function('kernel32', 'ClearCommError', 'BOOL',[
|
197
|
-
["HANDLE","hFile","in"],
|
198
|
-
["PDWORD","lpErrors","out"],
|
199
|
-
["PBLOB","lpStat","out"],
|
200
|
-
])
|
201
|
-
|
202
|
-
railgun.add_function('kernel32', 'CloseHandle', 'BOOL',[
|
203
|
-
["HANDLE","hObject","in"],
|
204
|
-
])
|
205
|
-
|
206
|
-
railgun.add_function('kernel32', 'CommConfigDialogA', 'BOOL',[
|
207
|
-
["PCHAR","lpszName","in"],
|
208
|
-
["HANDLE","hWnd","in"],
|
209
|
-
["PBLOB","lpCC","inout"],
|
210
|
-
])
|
211
|
-
|
212
|
-
railgun.add_function('kernel32', 'CommConfigDialogW', 'BOOL',[
|
213
|
-
["PWCHAR","lpszName","in"],
|
214
|
-
["HANDLE","hWnd","in"],
|
215
|
-
["PBLOB","lpCC","inout"],
|
216
|
-
])
|
217
|
-
|
218
|
-
railgun.add_function('kernel32', 'CompareFileTime', 'DWORD',[
|
219
|
-
["PBLOB","lpFileTime1","in"],
|
220
|
-
["PBLOB","lpFileTime2","in"],
|
221
|
-
])
|
222
|
-
|
223
|
-
railgun.add_function('kernel32', 'ConnectNamedPipe', 'BOOL',[
|
224
|
-
["HANDLE","hNamedPipe","in"],
|
225
|
-
["PBLOB","lpOverlapped","inout"],
|
226
|
-
])
|
227
|
-
|
228
|
-
railgun.add_function('kernel32', 'ContinueDebugEvent', 'BOOL',[
|
229
|
-
["DWORD","dwProcessId","in"],
|
230
|
-
["DWORD","dwThreadId","in"],
|
231
|
-
["DWORD","dwContinueStatus","in"],
|
232
|
-
])
|
233
|
-
|
234
|
-
railgun.add_function('kernel32', 'ConvertFiberToThread', 'BOOL',[
|
235
|
-
])
|
236
|
-
|
237
|
-
railgun.add_function('kernel32', 'ConvertThreadToFiber', 'LPVOID',[
|
238
|
-
["PBLOB","lpParameter","in"],
|
239
|
-
])
|
240
|
-
|
241
|
-
railgun.add_function('kernel32', 'ConvertThreadToFiberEx', 'LPVOID',[
|
242
|
-
["PBLOB","lpParameter","in"],
|
243
|
-
["DWORD","dwFlags","in"],
|
244
|
-
])
|
245
|
-
|
246
|
-
railgun.add_function('kernel32', 'CopyFileA', 'BOOL',[
|
247
|
-
["PCHAR","lpExistingFileName","in"],
|
248
|
-
["PCHAR","lpNewFileName","in"],
|
249
|
-
["BOOL","bFailIfExists","in"],
|
250
|
-
])
|
251
|
-
|
252
|
-
railgun.add_function('kernel32', 'CopyFileExA', 'BOOL',[
|
253
|
-
["PCHAR","lpExistingFileName","in"],
|
254
|
-
["PCHAR","lpNewFileName","in"],
|
255
|
-
["PBLOB","lpProgressRoutine","in"],
|
256
|
-
["PBLOB","lpData","in"],
|
257
|
-
["PBLOB","pbCancel","in"],
|
258
|
-
["DWORD","dwCopyFlags","in"],
|
259
|
-
])
|
260
|
-
|
261
|
-
railgun.add_function('kernel32', 'CopyFileExW', 'BOOL',[
|
262
|
-
["PWCHAR","lpExistingFileName","in"],
|
263
|
-
["PWCHAR","lpNewFileName","in"],
|
264
|
-
["PBLOB","lpProgressRoutine","in"],
|
265
|
-
["PBLOB","lpData","in"],
|
266
|
-
["PBLOB","pbCancel","in"],
|
267
|
-
["DWORD","dwCopyFlags","in"],
|
268
|
-
])
|
269
|
-
|
270
|
-
railgun.add_function('kernel32', 'CopyFileW', 'BOOL',[
|
271
|
-
["PWCHAR","lpExistingFileName","in"],
|
272
|
-
["PWCHAR","lpNewFileName","in"],
|
273
|
-
["BOOL","bFailIfExists","in"],
|
274
|
-
])
|
275
|
-
|
276
|
-
railgun.add_function('kernel32', 'CreateActCtxA', 'DWORD',[
|
277
|
-
["PBLOB","pActCtx","in"],
|
278
|
-
])
|
279
|
-
|
280
|
-
railgun.add_function('kernel32', 'CreateActCtxW', 'DWORD',[
|
281
|
-
["PBLOB","pActCtx","in"],
|
282
|
-
])
|
283
|
-
|
284
|
-
railgun.add_function('kernel32', 'CreateDirectoryA', 'BOOL',[
|
285
|
-
["PCHAR","lpPathName","in"],
|
286
|
-
["PBLOB","lpSecurityAttributes","in"],
|
287
|
-
])
|
288
|
-
|
289
|
-
railgun.add_function('kernel32', 'CreateDirectoryExA', 'BOOL',[
|
290
|
-
["PCHAR","lpTemplateDirectory","in"],
|
291
|
-
["PCHAR","lpNewDirectory","in"],
|
292
|
-
["PBLOB","lpSecurityAttributes","in"],
|
293
|
-
])
|
294
|
-
|
295
|
-
railgun.add_function('kernel32', 'CreateDirectoryExW', 'BOOL',[
|
296
|
-
["PWCHAR","lpTemplateDirectory","in"],
|
297
|
-
["PWCHAR","lpNewDirectory","in"],
|
298
|
-
["PBLOB","lpSecurityAttributes","in"],
|
299
|
-
])
|
300
|
-
|
301
|
-
railgun.add_function('kernel32', 'CreateDirectoryW', 'BOOL',[
|
302
|
-
["PWCHAR","lpPathName","in"],
|
303
|
-
["PBLOB","lpSecurityAttributes","in"],
|
304
|
-
])
|
305
|
-
|
306
|
-
railgun.add_function('kernel32', 'CreateEventA', 'DWORD',[
|
307
|
-
["PBLOB","lpEventAttributes","in"],
|
308
|
-
["BOOL","bManualReset","in"],
|
309
|
-
["BOOL","bInitialState","in"],
|
310
|
-
["PCHAR","lpName","in"],
|
311
|
-
])
|
312
|
-
|
313
|
-
railgun.add_function('kernel32', 'CreateEventW', 'DWORD',[
|
314
|
-
["PBLOB","lpEventAttributes","in"],
|
315
|
-
["BOOL","bManualReset","in"],
|
316
|
-
["BOOL","bInitialState","in"],
|
317
|
-
["PWCHAR","lpName","in"],
|
318
|
-
])
|
319
|
-
|
320
|
-
railgun.add_function('kernel32', 'CreateFiber', 'LPVOID',[
|
321
|
-
["DWORD","dwStackSize","in"],
|
322
|
-
["PBLOB","lpStartAddress","in"],
|
323
|
-
["PBLOB","lpParameter","in"],
|
324
|
-
])
|
325
|
-
|
326
|
-
railgun.add_function('kernel32', 'CreateFiberEx', 'LPVOID',[
|
327
|
-
["DWORD","dwStackCommitSize","in"],
|
328
|
-
["DWORD","dwStackReserveSize","in"],
|
329
|
-
["DWORD","dwFlags","in"],
|
330
|
-
["PBLOB","lpStartAddress","in"],
|
331
|
-
["PBLOB","lpParameter","in"],
|
332
|
-
])
|
333
|
-
|
334
|
-
railgun.add_function('kernel32', 'CreateFileA', 'DWORD',[
|
335
|
-
["PCHAR","lpFileName","in"],
|
336
|
-
["DWORD","dwDesiredAccess","in"],
|
337
|
-
["DWORD","dwShareMode","in"],
|
338
|
-
["PBLOB","lpSecurityAttributes","in"],
|
339
|
-
["DWORD","dwCreationDisposition","in"],
|
340
|
-
["DWORD","dwFlagsAndAttributes","in"],
|
341
|
-
["HANDLE","hTemplateFile","in"],
|
342
|
-
])
|
343
|
-
|
344
|
-
railgun.add_function('kernel32', 'CreateFileMappingA', 'DWORD',[
|
345
|
-
["HANDLE","hFile","in"],
|
346
|
-
["PBLOB","lpFileMappingAttributes","in"],
|
347
|
-
["DWORD","flProtect","in"],
|
348
|
-
["DWORD","dwMaximumSizeHigh","in"],
|
349
|
-
["DWORD","dwMaximumSizeLow","in"],
|
350
|
-
["PCHAR","lpName","in"],
|
351
|
-
])
|
352
|
-
|
353
|
-
railgun.add_function('kernel32', 'CreateFileMappingW', 'DWORD',[
|
354
|
-
["HANDLE","hFile","in"],
|
355
|
-
["PBLOB","lpFileMappingAttributes","in"],
|
356
|
-
["DWORD","flProtect","in"],
|
357
|
-
["DWORD","dwMaximumSizeHigh","in"],
|
358
|
-
["DWORD","dwMaximumSizeLow","in"],
|
359
|
-
["PWCHAR","lpName","in"],
|
360
|
-
])
|
361
|
-
|
362
|
-
railgun.add_function('kernel32', 'CreateFileW', 'DWORD',[
|
363
|
-
["PWCHAR","lpFileName","in"],
|
364
|
-
["DWORD","dwDesiredAccess","in"],
|
365
|
-
["DWORD","dwShareMode","in"],
|
366
|
-
["PBLOB","lpSecurityAttributes","in"],
|
367
|
-
["DWORD","dwCreationDisposition","in"],
|
368
|
-
["DWORD","dwFlagsAndAttributes","in"],
|
369
|
-
["HANDLE","hTemplateFile","in"],
|
370
|
-
])
|
371
|
-
|
372
|
-
railgun.add_function('kernel32', 'CreateHardLinkA', 'BOOL',[
|
373
|
-
["PCHAR","lpFileName","in"],
|
374
|
-
["PCHAR","lpExistingFileName","in"],
|
375
|
-
["PBLOB","lpSecurityAttributes","inout"],
|
376
|
-
])
|
377
|
-
|
378
|
-
railgun.add_function('kernel32', 'CreateHardLinkW', 'BOOL',[
|
379
|
-
["PWCHAR","lpFileName","in"],
|
380
|
-
["PWCHAR","lpExistingFileName","in"],
|
381
|
-
["PBLOB","lpSecurityAttributes","inout"],
|
382
|
-
])
|
383
|
-
|
384
|
-
railgun.add_function('kernel32', 'CreateIoCompletionPort', 'DWORD',[
|
385
|
-
["DWORD","FileHandle","in"],
|
386
|
-
["DWORD","ExistingCompletionPort","in"],
|
387
|
-
["PDWORD","CompletionKey","in"],
|
388
|
-
["DWORD","NumberOfConcurrentThreads","in"],
|
389
|
-
])
|
390
|
-
|
391
|
-
railgun.add_function('kernel32', 'CreateJobObjectA', 'DWORD',[
|
392
|
-
["PBLOB","lpJobAttributes","in"],
|
393
|
-
["PCHAR","lpName","in"],
|
394
|
-
])
|
395
|
-
|
396
|
-
railgun.add_function('kernel32', 'CreateJobObjectW', 'DWORD',[
|
397
|
-
["PBLOB","lpJobAttributes","in"],
|
398
|
-
["PWCHAR","lpName","in"],
|
399
|
-
])
|
400
|
-
|
401
|
-
railgun.add_function('kernel32', 'CreateJobSet', 'BOOL',[
|
402
|
-
["DWORD","NumJob","in"],
|
403
|
-
["PBLOB","UserJobSet","in"],
|
404
|
-
["DWORD","Flags","in"],
|
405
|
-
])
|
406
|
-
|
407
|
-
railgun.add_function('kernel32', 'CreateMailslotA', 'DWORD',[
|
408
|
-
["PCHAR","lpName","in"],
|
409
|
-
["DWORD","nMaxMessageSize","in"],
|
410
|
-
["DWORD","lReadTimeout","in"],
|
411
|
-
["PBLOB","lpSecurityAttributes","in"],
|
412
|
-
])
|
413
|
-
|
414
|
-
railgun.add_function('kernel32', 'CreateMailslotW', 'DWORD',[
|
415
|
-
["PWCHAR","lpName","in"],
|
416
|
-
["DWORD","nMaxMessageSize","in"],
|
417
|
-
["DWORD","lReadTimeout","in"],
|
418
|
-
["PBLOB","lpSecurityAttributes","in"],
|
419
|
-
])
|
420
|
-
|
421
|
-
railgun.add_function('kernel32', 'CreateMemoryResourceNotification', 'DWORD',[
|
422
|
-
["PDWORD","NotificationType","in"],
|
423
|
-
])
|
424
|
-
|
425
|
-
railgun.add_function('kernel32', 'CreateMutexA', 'DWORD',[
|
426
|
-
["PBLOB","lpMutexAttributes","in"],
|
427
|
-
["BOOL","bInitialOwner","in"],
|
428
|
-
["PCHAR","lpName","in"],
|
429
|
-
])
|
430
|
-
|
431
|
-
railgun.add_function('kernel32', 'CreateMutexW', 'DWORD',[
|
432
|
-
["PBLOB","lpMutexAttributes","in"],
|
433
|
-
["BOOL","bInitialOwner","in"],
|
434
|
-
["PWCHAR","lpName","in"],
|
435
|
-
])
|
436
|
-
|
437
|
-
railgun.add_function('kernel32', 'CreateNamedPipeA', 'DWORD',[
|
438
|
-
["PCHAR","lpName","in"],
|
439
|
-
["DWORD","dwOpenMode","in"],
|
440
|
-
["DWORD","dwPipeMode","in"],
|
441
|
-
["DWORD","nMaxInstances","in"],
|
442
|
-
["DWORD","nOutBufferSize","in"],
|
443
|
-
["DWORD","nInBufferSize","in"],
|
444
|
-
["DWORD","nDefaultTimeOut","in"],
|
445
|
-
["PBLOB","lpSecurityAttributes","in"],
|
446
|
-
])
|
447
|
-
|
448
|
-
railgun.add_function('kernel32', 'CreateNamedPipeW', 'DWORD',[
|
449
|
-
["PWCHAR","lpName","in"],
|
450
|
-
["DWORD","dwOpenMode","in"],
|
451
|
-
["DWORD","dwPipeMode","in"],
|
452
|
-
["DWORD","nMaxInstances","in"],
|
453
|
-
["DWORD","nOutBufferSize","in"],
|
454
|
-
["DWORD","nInBufferSize","in"],
|
455
|
-
["DWORD","nDefaultTimeOut","in"],
|
456
|
-
["PBLOB","lpSecurityAttributes","in"],
|
457
|
-
])
|
458
|
-
|
459
|
-
railgun.add_function('kernel32', 'CreatePipe', 'BOOL',[
|
460
|
-
["PDWORD","hReadPipe","out"],
|
461
|
-
["PDWORD","hWritePipe","out"],
|
462
|
-
["PBLOB","lpPipeAttributes","in"],
|
463
|
-
["DWORD","nSize","in"],
|
464
|
-
])
|
465
|
-
|
466
|
-
railgun.add_function('kernel32', 'CreateProcessA', 'BOOL',[
|
467
|
-
["PCHAR","lpApplicationName","in"],
|
468
|
-
["PCHAR","lpCommandLine","inout"],
|
469
|
-
["PBLOB","lpProcessAttributes","in"],
|
470
|
-
["PBLOB","lpThreadAttributes","in"],
|
471
|
-
["BOOL","bInheritHandles","in"],
|
472
|
-
["DWORD","dwCreationFlags","in"],
|
473
|
-
["PBLOB","lpEnvironment","in"],
|
474
|
-
["PCHAR","lpCurrentDirectory","in"],
|
475
|
-
["PBLOB","lpStartupInfo","in"],
|
476
|
-
["PBLOB","lpProcessInformation","out"],
|
477
|
-
])
|
478
|
-
|
479
|
-
railgun.add_function('kernel32', 'CreateProcessW', 'BOOL',[
|
480
|
-
["PWCHAR","lpApplicationName","in"],
|
481
|
-
["PWCHAR","lpCommandLine","inout"],
|
482
|
-
["PBLOB","lpProcessAttributes","in"],
|
483
|
-
["PBLOB","lpThreadAttributes","in"],
|
484
|
-
["BOOL","bInheritHandles","in"],
|
485
|
-
["DWORD","dwCreationFlags","in"],
|
486
|
-
["PBLOB","lpEnvironment","in"],
|
487
|
-
["PWCHAR","lpCurrentDirectory","in"],
|
488
|
-
["PBLOB","lpStartupInfo","in"],
|
489
|
-
["PBLOB","lpProcessInformation","out"],
|
490
|
-
])
|
491
|
-
|
492
|
-
railgun.add_function('kernel32', 'CreateRemoteThread', 'DWORD',[
|
493
|
-
["HANDLE","hProcess","in"],
|
494
|
-
["PBLOB","lpThreadAttributes","in"],
|
495
|
-
["DWORD","dwStackSize","in"],
|
496
|
-
["PBLOB","lpStartAddress","in"],
|
497
|
-
["PBLOB","lpParameter","in"],
|
498
|
-
["DWORD","dwCreationFlags","in"],
|
499
|
-
["PDWORD","lpThreadId","out"],
|
500
|
-
])
|
501
|
-
|
502
|
-
railgun.add_function('kernel32', 'CreateSemaphoreA', 'DWORD',[
|
503
|
-
["PBLOB","lpSemaphoreAttributes","in"],
|
504
|
-
["DWORD","lInitialCount","in"],
|
505
|
-
["DWORD","lMaximumCount","in"],
|
506
|
-
["PCHAR","lpName","in"],
|
507
|
-
])
|
508
|
-
|
509
|
-
railgun.add_function('kernel32', 'CreateSemaphoreW', 'DWORD',[
|
510
|
-
["PBLOB","lpSemaphoreAttributes","in"],
|
511
|
-
["DWORD","lInitialCount","in"],
|
512
|
-
["DWORD","lMaximumCount","in"],
|
513
|
-
["PWCHAR","lpName","in"],
|
514
|
-
])
|
515
|
-
|
516
|
-
railgun.add_function('kernel32', 'CreateTapePartition', 'DWORD',[
|
517
|
-
["HANDLE","hDevice","in"],
|
518
|
-
["DWORD","dwPartitionMethod","in"],
|
519
|
-
["DWORD","dwCount","in"],
|
520
|
-
["DWORD","dwSize","in"],
|
521
|
-
])
|
522
|
-
|
523
|
-
railgun.add_function('kernel32', 'CreateThread', 'HANDLE',[
|
524
|
-
["PBLOB","lpThreadAttributes","in"],
|
525
|
-
["DWORD","dwStackSize","in"],
|
526
|
-
["LPVOID","lpStartAddress","in"],
|
527
|
-
["PBLOB","lpParameter","in"],
|
528
|
-
["DWORD","dwCreationFlags","in"],
|
529
|
-
["PDWORD","lpThreadId","out"],
|
530
|
-
])
|
531
|
-
|
532
|
-
railgun.add_function('kernel32', 'CreateTimerQueue', 'DWORD',[
|
533
|
-
])
|
534
|
-
|
535
|
-
railgun.add_function('kernel32', 'CreateTimerQueueTimer', 'BOOL',[
|
536
|
-
["PDWORD","phNewTimer","out"],
|
537
|
-
["DWORD","TimerQueue","in"],
|
538
|
-
["PBLOB","Callback","in"],
|
539
|
-
["PBLOB","Parameter","in"],
|
540
|
-
["DWORD","DueTime","in"],
|
541
|
-
["DWORD","Period","in"],
|
542
|
-
["DWORD","Flags","in"],
|
543
|
-
])
|
544
|
-
|
545
|
-
railgun.add_function('kernel32', 'CreateWaitableTimerA', 'DWORD',[
|
546
|
-
["PBLOB","lpTimerAttributes","in"],
|
547
|
-
["BOOL","bManualReset","in"],
|
548
|
-
["PCHAR","lpTimerName","in"],
|
549
|
-
])
|
550
|
-
|
551
|
-
railgun.add_function('kernel32', 'CreateWaitableTimerW', 'DWORD',[
|
552
|
-
["PBLOB","lpTimerAttributes","in"],
|
553
|
-
["BOOL","bManualReset","in"],
|
554
|
-
["PWCHAR","lpTimerName","in"],
|
555
|
-
])
|
556
|
-
|
557
|
-
railgun.add_function('kernel32', 'DeactivateActCtx', 'BOOL',[
|
558
|
-
["DWORD","dwFlags","in"],
|
559
|
-
["PDWORD","ulCookie","in"],
|
560
|
-
])
|
561
|
-
|
562
|
-
railgun.add_function('kernel32', 'DebugActiveProcess', 'BOOL',[
|
563
|
-
["DWORD","dwProcessId","in"],
|
564
|
-
])
|
565
|
-
|
566
|
-
railgun.add_function('kernel32', 'DebugActiveProcessStop', 'BOOL',[
|
567
|
-
["DWORD","dwProcessId","in"],
|
568
|
-
])
|
569
|
-
|
570
|
-
railgun.add_function('kernel32', 'DebugBreak', 'VOID',[
|
571
|
-
])
|
572
|
-
|
573
|
-
railgun.add_function('kernel32', 'DebugBreakProcess', 'BOOL',[
|
574
|
-
["DWORD","Process","in"],
|
575
|
-
])
|
576
|
-
|
577
|
-
railgun.add_function('kernel32', 'DebugSetProcessKillOnExit', 'BOOL',[
|
578
|
-
["BOOL","KillOnExit","in"],
|
579
|
-
])
|
580
|
-
|
581
|
-
railgun.add_function('kernel32', 'DecodePointer', 'LPVOID',[
|
582
|
-
["PBLOB","Ptr","in"],
|
583
|
-
])
|
584
|
-
|
585
|
-
railgun.add_function('kernel32', 'DecodeSystemPointer', 'LPVOID',[
|
586
|
-
["PBLOB","Ptr","in"],
|
587
|
-
])
|
588
|
-
|
589
|
-
railgun.add_function('kernel32', 'DefineDosDeviceA', 'BOOL',[
|
590
|
-
["DWORD","dwFlags","in"],
|
591
|
-
["PCHAR","lpDeviceName","in"],
|
592
|
-
["PCHAR","lpTargetPath","in"],
|
593
|
-
])
|
594
|
-
|
595
|
-
railgun.add_function('kernel32', 'DefineDosDeviceW', 'BOOL',[
|
596
|
-
["DWORD","dwFlags","in"],
|
597
|
-
["PWCHAR","lpDeviceName","in"],
|
598
|
-
["PWCHAR","lpTargetPath","in"],
|
599
|
-
])
|
600
|
-
|
601
|
-
railgun.add_function('kernel32', 'DeleteAtom', 'WORD',[
|
602
|
-
["WORD","nAtom","in"],
|
603
|
-
])
|
604
|
-
|
605
|
-
railgun.add_function('kernel32', 'DeleteCriticalSection', 'VOID',[
|
606
|
-
["PBLOB","lpCriticalSection","inout"],
|
607
|
-
])
|
608
|
-
|
609
|
-
railgun.add_function('kernel32', 'DeleteFiber', 'VOID',[
|
610
|
-
["PBLOB","lpFiber","in"],
|
611
|
-
])
|
612
|
-
|
613
|
-
railgun.add_function('kernel32', 'DeleteFileA', 'BOOL',[
|
614
|
-
["PCHAR","lpFileName","in"],
|
615
|
-
])
|
616
|
-
|
617
|
-
railgun.add_function('kernel32', 'DeleteFileW', 'BOOL',[
|
618
|
-
["PWCHAR","lpFileName","in"],
|
619
|
-
])
|
620
|
-
|
621
|
-
railgun.add_function('kernel32', 'DeleteTimerQueue', 'BOOL',[
|
622
|
-
["DWORD","TimerQueue","in"],
|
623
|
-
])
|
624
|
-
|
625
|
-
railgun.add_function('kernel32', 'DeleteTimerQueueEx', 'BOOL',[
|
626
|
-
["DWORD","TimerQueue","in"],
|
627
|
-
["DWORD","CompletionEvent","in"],
|
628
|
-
])
|
629
|
-
|
630
|
-
railgun.add_function('kernel32', 'DeleteTimerQueueTimer', 'BOOL',[
|
631
|
-
["DWORD","TimerQueue","in"],
|
632
|
-
["DWORD","Timer","in"],
|
633
|
-
["DWORD","CompletionEvent","in"],
|
634
|
-
])
|
635
|
-
|
636
|
-
railgun.add_function('kernel32', 'DeleteVolumeMountPointA', 'BOOL',[
|
637
|
-
["PCHAR","lpszVolumeMountPoint","in"],
|
638
|
-
])
|
639
|
-
|
640
|
-
railgun.add_function('kernel32', 'DeleteVolumeMountPointW', 'BOOL',[
|
641
|
-
["PWCHAR","lpszVolumeMountPoint","in"],
|
642
|
-
])
|
643
|
-
|
644
|
-
railgun.add_function('kernel32', 'DeviceIoControl', 'BOOL',[
|
645
|
-
["HANDLE","hDevice","in"],
|
646
|
-
["DWORD","dwIoControlCode","in"],
|
647
|
-
["PBLOB","lpInBuffer","in"],
|
648
|
-
["DWORD","nInBufferSize","in"],
|
649
|
-
["PBLOB","lpOutBuffer","out"],
|
650
|
-
["DWORD","nOutBufferSize","in"],
|
651
|
-
["PDWORD","lpBytesReturned","out"],
|
652
|
-
["PBLOB","lpOverlapped","inout"],
|
653
|
-
])
|
654
|
-
|
655
|
-
railgun.add_function('kernel32', 'DisableThreadLibraryCalls', 'BOOL',[
|
656
|
-
["HANDLE","hLibModule","in"],
|
657
|
-
])
|
658
|
-
|
659
|
-
railgun.add_function('kernel32', 'DisconnectNamedPipe', 'BOOL',[
|
660
|
-
["HANDLE","hNamedPipe","in"],
|
661
|
-
])
|
662
|
-
|
663
|
-
railgun.add_function('kernel32', 'DnsHostnameToComputerNameA', 'BOOL',[
|
664
|
-
["PCHAR","Hostname","in"],
|
665
|
-
["PCHAR","ComputerName","out"],
|
666
|
-
["PDWORD","nSize","inout"],
|
667
|
-
])
|
668
|
-
|
669
|
-
railgun.add_function('kernel32', 'DnsHostnameToComputerNameW', 'BOOL',[
|
670
|
-
["PWCHAR","Hostname","in"],
|
671
|
-
["PWCHAR","ComputerName","out"],
|
672
|
-
["PDWORD","nSize","inout"],
|
673
|
-
])
|
674
|
-
|
675
|
-
railgun.add_function('kernel32', 'DosDateTimeToFileTime', 'BOOL',[
|
676
|
-
["WORD","wFatDate","in"],
|
677
|
-
["WORD","wFatTime","in"],
|
678
|
-
["PBLOB","lpFileTime","out"],
|
679
|
-
])
|
680
|
-
|
681
|
-
railgun.add_function('kernel32', 'DuplicateHandle', 'BOOL',[
|
682
|
-
["HANDLE","hSourceProcessHandle","in"],
|
683
|
-
["HANDLE","hSourceHandle","in"],
|
684
|
-
["HANDLE","hTargetProcessHandle","in"],
|
685
|
-
["PDWORD","lpTargetHandle","out"],
|
686
|
-
["DWORD","dwDesiredAccess","in"],
|
687
|
-
["BOOL","bInheritHandle","in"],
|
688
|
-
["DWORD","dwOptions","in"],
|
689
|
-
])
|
690
|
-
|
691
|
-
railgun.add_function('kernel32', 'EncodePointer', 'LPVOID',[
|
692
|
-
["PBLOB","Ptr","in"],
|
693
|
-
])
|
694
|
-
|
695
|
-
railgun.add_function('kernel32', 'EncodeSystemPointer', 'LPVOID',[
|
696
|
-
["PBLOB","Ptr","in"],
|
697
|
-
])
|
698
|
-
|
699
|
-
railgun.add_function('kernel32', 'EndUpdateResourceA', 'BOOL',[
|
700
|
-
["HANDLE","hUpdate","in"],
|
701
|
-
["BOOL","fDiscard","in"],
|
702
|
-
])
|
703
|
-
|
704
|
-
railgun.add_function('kernel32', 'EndUpdateResourceW', 'BOOL',[
|
705
|
-
["HANDLE","hUpdate","in"],
|
706
|
-
["BOOL","fDiscard","in"],
|
707
|
-
])
|
708
|
-
|
709
|
-
railgun.add_function('kernel32', 'EnterCriticalSection', 'VOID',[
|
710
|
-
["PBLOB","lpCriticalSection","inout"],
|
711
|
-
])
|
712
|
-
|
713
|
-
railgun.add_function('kernel32', 'EnumResourceLanguagesA', 'BOOL',[
|
714
|
-
["HANDLE","hModule","in"],
|
715
|
-
["PCHAR","lpType","in"],
|
716
|
-
["PCHAR","lpName","in"],
|
717
|
-
["PBLOB","lpEnumFunc","in"],
|
718
|
-
["PBLOB","lparam","in"],
|
719
|
-
])
|
720
|
-
|
721
|
-
railgun.add_function('kernel32', 'EnumResourceLanguagesW', 'BOOL',[
|
722
|
-
["HANDLE","hModule","in"],
|
723
|
-
["PWCHAR","lpType","in"],
|
724
|
-
["PWCHAR","lpName","in"],
|
725
|
-
["PBLOB","lpEnumFunc","in"],
|
726
|
-
["PBLOB","lparam","in"],
|
727
|
-
])
|
728
|
-
|
729
|
-
railgun.add_function('kernel32', 'EnumResourceNamesA', 'BOOL',[
|
730
|
-
["HANDLE","hModule","in"],
|
731
|
-
["PCHAR","lpType","in"],
|
732
|
-
["PBLOB","lpEnumFunc","in"],
|
733
|
-
["PBLOB","lparam","in"],
|
734
|
-
])
|
735
|
-
|
736
|
-
railgun.add_function('kernel32', 'EnumResourceNamesW', 'BOOL',[
|
737
|
-
["HANDLE","hModule","in"],
|
738
|
-
["PWCHAR","lpType","in"],
|
739
|
-
["PBLOB","lpEnumFunc","in"],
|
740
|
-
["PBLOB","lparam","in"],
|
741
|
-
])
|
742
|
-
|
743
|
-
railgun.add_function('kernel32', 'EnumResourceTypesA', 'BOOL',[
|
744
|
-
["HANDLE","hModule","in"],
|
745
|
-
["PBLOB","lpEnumFunc","in"],
|
746
|
-
["PBLOB","lparam","in"],
|
747
|
-
])
|
748
|
-
|
749
|
-
railgun.add_function('kernel32', 'EnumResourceTypesW', 'BOOL',[
|
750
|
-
["HANDLE","hModule","in"],
|
751
|
-
["PBLOB","lpEnumFunc","in"],
|
752
|
-
["PBLOB","lparam","in"],
|
753
|
-
])
|
754
|
-
|
755
|
-
railgun.add_function('kernel32', 'EnumSystemFirmwareTables', 'DWORD',[
|
756
|
-
["DWORD","FirmwareTableProviderSignature","in"],
|
757
|
-
["PBLOB","pFirmwareTableEnumBuffer","out"],
|
758
|
-
["DWORD","BufferSize","in"],
|
759
|
-
])
|
760
|
-
|
761
|
-
railgun.add_function('kernel32', 'EraseTape', 'DWORD',[
|
762
|
-
["HANDLE","hDevice","in"],
|
763
|
-
["DWORD","dwEraseType","in"],
|
764
|
-
["BOOL","bImmediate","in"],
|
765
|
-
])
|
766
|
-
|
767
|
-
railgun.add_function('kernel32', 'EscapeCommFunction', 'BOOL',[
|
768
|
-
["HANDLE","hFile","in"],
|
769
|
-
["DWORD","dwFunc","in"],
|
770
|
-
])
|
771
|
-
|
772
|
-
railgun.add_function('kernel32', 'ExitProcess', 'VOID',[
|
773
|
-
["DWORD","uExitCode","in"],
|
774
|
-
])
|
775
|
-
|
776
|
-
railgun.add_function('kernel32', 'ExitThread', 'VOID',[
|
777
|
-
["DWORD","dwExitCode","in"],
|
778
|
-
])
|
779
|
-
|
780
|
-
railgun.add_function('kernel32', 'ExpandEnvironmentStringsA', 'DWORD',[
|
781
|
-
["PCHAR","lpSrc","in"],
|
782
|
-
["PCHAR","lpDst","out"],
|
783
|
-
["DWORD","nSize","in"],
|
784
|
-
])
|
785
|
-
|
786
|
-
railgun.add_function('kernel32', 'ExpandEnvironmentStringsW', 'DWORD',[
|
787
|
-
["PWCHAR","lpSrc","in"],
|
788
|
-
["PWCHAR","lpDst","out"],
|
789
|
-
["DWORD","nSize","in"],
|
790
|
-
])
|
791
|
-
|
792
|
-
railgun.add_function('kernel32', 'FatalAppExitA', 'VOID',[
|
793
|
-
["DWORD","uAction","in"],
|
794
|
-
["PCHAR","lpMessageText","in"],
|
795
|
-
])
|
796
|
-
|
797
|
-
railgun.add_function('kernel32', 'FatalAppExitW', 'VOID',[
|
798
|
-
["DWORD","uAction","in"],
|
799
|
-
["PWCHAR","lpMessageText","in"],
|
800
|
-
])
|
801
|
-
|
802
|
-
railgun.add_function('kernel32', 'FatalExit', 'VOID',[
|
803
|
-
["DWORD","ExitCode","in"],
|
804
|
-
])
|
805
|
-
|
806
|
-
railgun.add_function('kernel32', 'FileTimeToDosDateTime', 'BOOL',[
|
807
|
-
["PBLOB","lpFileTime","in"],
|
808
|
-
["PBLOB","lpFatDate","out"],
|
809
|
-
["PBLOB","lpFatTime","out"],
|
810
|
-
])
|
811
|
-
|
812
|
-
railgun.add_function('kernel32', 'FileTimeToLocalFileTime', 'BOOL',[
|
813
|
-
["PBLOB","lpFileTime","in"],
|
814
|
-
["PBLOB","lpLocalFileTime","out"],
|
815
|
-
])
|
816
|
-
|
817
|
-
railgun.add_function('kernel32', 'FileTimeToSystemTime', 'BOOL',[
|
818
|
-
["PBLOB","lpFileTime","in"],
|
819
|
-
["PBLOB","lpSystemTime","out"],
|
820
|
-
])
|
821
|
-
|
822
|
-
railgun.add_function('kernel32', 'FindActCtxSectionGuid', 'BOOL',[
|
823
|
-
["DWORD","dwFlags","in"],
|
824
|
-
["PBLOB","lpExtensionGuid","inout"],
|
825
|
-
["DWORD","ulSectionId","in"],
|
826
|
-
["PBLOB","lpGuidToFind","in"],
|
827
|
-
["PBLOB","ReturnedData","out"],
|
828
|
-
])
|
829
|
-
|
830
|
-
railgun.add_function('kernel32', 'FindActCtxSectionStringA', 'BOOL',[
|
831
|
-
["DWORD","dwFlags","in"],
|
832
|
-
["PBLOB","lpExtensionGuid","inout"],
|
833
|
-
["DWORD","ulSectionId","in"],
|
834
|
-
["PCHAR","lpStringToFind","in"],
|
835
|
-
["PBLOB","ReturnedData","out"],
|
836
|
-
])
|
837
|
-
|
838
|
-
railgun.add_function('kernel32', 'FindActCtxSectionStringW', 'BOOL',[
|
839
|
-
["DWORD","dwFlags","in"],
|
840
|
-
["PBLOB","lpExtensionGuid","inout"],
|
841
|
-
["DWORD","ulSectionId","in"],
|
842
|
-
["PWCHAR","lpStringToFind","in"],
|
843
|
-
["PBLOB","ReturnedData","out"],
|
844
|
-
])
|
845
|
-
|
846
|
-
railgun.add_function('kernel32', 'FindAtomA', 'WORD',[
|
847
|
-
["PCHAR","lpString","in"],
|
848
|
-
])
|
849
|
-
|
850
|
-
railgun.add_function('kernel32', 'FindAtomW', 'WORD',[
|
851
|
-
["PWCHAR","lpString","in"],
|
852
|
-
])
|
853
|
-
|
854
|
-
railgun.add_function('kernel32', 'FindClose', 'BOOL',[
|
855
|
-
["HANDLE","hFindFile","inout"],
|
856
|
-
])
|
857
|
-
|
858
|
-
railgun.add_function('kernel32', 'FindCloseChangeNotification', 'BOOL',[
|
859
|
-
["HANDLE","hChangeHandle","in"],
|
860
|
-
])
|
861
|
-
|
862
|
-
railgun.add_function('kernel32', 'FindFirstChangeNotificationA', 'DWORD',[
|
863
|
-
["PCHAR","lpPathName","in"],
|
864
|
-
["BOOL","bWatchSubtree","in"],
|
865
|
-
["DWORD","dwNotifyFilter","in"],
|
866
|
-
])
|
867
|
-
|
868
|
-
railgun.add_function('kernel32', 'FindFirstChangeNotificationW', 'DWORD',[
|
869
|
-
["PWCHAR","lpPathName","in"],
|
870
|
-
["BOOL","bWatchSubtree","in"],
|
871
|
-
["DWORD","dwNotifyFilter","in"],
|
872
|
-
])
|
873
|
-
|
874
|
-
railgun.add_function('kernel32', 'FindFirstFileA', 'DWORD',[
|
875
|
-
["PCHAR","lpFileName","in"],
|
876
|
-
["PBLOB","lpFindFileData","out"],
|
877
|
-
])
|
878
|
-
|
879
|
-
railgun.add_function('kernel32', 'FindFirstFileExA', 'DWORD',[
|
880
|
-
["PCHAR","lpFileName","in"],
|
881
|
-
["PBLOB","fInfoLevelId","in"],
|
882
|
-
["PBLOB","lpFindFileData","out"],
|
883
|
-
["PBLOB","fSearchOp","in"],
|
884
|
-
["PBLOB","lpSearchFilter","inout"],
|
885
|
-
["DWORD","dwAdditionalFlags","in"],
|
886
|
-
])
|
887
|
-
|
888
|
-
railgun.add_function('kernel32', 'FindFirstFileExW', 'DWORD',[
|
889
|
-
["PWCHAR","lpFileName","in"],
|
890
|
-
["PBLOB","fInfoLevelId","in"],
|
891
|
-
["PBLOB","lpFindFileData","out"],
|
892
|
-
["PBLOB","fSearchOp","in"],
|
893
|
-
["PBLOB","lpSearchFilter","inout"],
|
894
|
-
["DWORD","dwAdditionalFlags","in"],
|
895
|
-
])
|
896
|
-
|
897
|
-
railgun.add_function('kernel32', 'FindFirstFileW', 'DWORD',[
|
898
|
-
["PWCHAR","lpFileName","in"],
|
899
|
-
["PBLOB","lpFindFileData","out"],
|
900
|
-
])
|
901
|
-
|
902
|
-
railgun.add_function('kernel32', 'FindFirstStreamW', 'DWORD',[
|
903
|
-
["PWCHAR","lpFileName","in"],
|
904
|
-
["PBLOB","InfoLevel","in"],
|
905
|
-
["PBLOB","lpFindStreamData","out"],
|
906
|
-
["DWORD","dwFlags","inout"],
|
907
|
-
])
|
908
|
-
|
909
|
-
railgun.add_function('kernel32', 'FindFirstVolumeA', 'DWORD',[
|
910
|
-
["PCHAR","lpszVolumeName","out"],
|
911
|
-
["DWORD","cchBufferLength","in"],
|
912
|
-
])
|
913
|
-
|
914
|
-
railgun.add_function('kernel32', 'FindFirstVolumeMountPointA', 'DWORD',[
|
915
|
-
["PCHAR","lpszRootPathName","in"],
|
916
|
-
["PCHAR","lpszVolumeMountPoint","out"],
|
917
|
-
["DWORD","cchBufferLength","in"],
|
918
|
-
])
|
919
|
-
|
920
|
-
railgun.add_function('kernel32', 'FindFirstVolumeMountPointW', 'DWORD',[
|
921
|
-
["PWCHAR","lpszRootPathName","in"],
|
922
|
-
["PWCHAR","lpszVolumeMountPoint","out"],
|
923
|
-
["DWORD","cchBufferLength","in"],
|
924
|
-
])
|
925
|
-
|
926
|
-
railgun.add_function('kernel32', 'FindFirstVolumeW', 'DWORD',[
|
927
|
-
["PWCHAR","lpszVolumeName","out"],
|
928
|
-
["DWORD","cchBufferLength","in"],
|
929
|
-
])
|
930
|
-
|
931
|
-
railgun.add_function('kernel32', 'FindNextChangeNotification', 'BOOL',[
|
932
|
-
["HANDLE","hChangeHandle","in"],
|
933
|
-
])
|
934
|
-
|
935
|
-
railgun.add_function('kernel32', 'FindNextFileA', 'BOOL',[
|
936
|
-
["HANDLE","hFindFile","in"],
|
937
|
-
["PBLOB","lpFindFileData","out"],
|
938
|
-
])
|
939
|
-
|
940
|
-
railgun.add_function('kernel32', 'FindNextFileW', 'BOOL',[
|
941
|
-
["HANDLE","hFindFile","in"],
|
942
|
-
["PBLOB","lpFindFileData","out"],
|
943
|
-
])
|
944
|
-
|
945
|
-
railgun.add_function('kernel32', 'FindNextStreamW', 'BOOL',[
|
946
|
-
["HANDLE","hFindStream","in"],
|
947
|
-
["PBLOB","lpFindStreamData","out"],
|
948
|
-
])
|
949
|
-
|
950
|
-
railgun.add_function('kernel32', 'FindNextVolumeA', 'BOOL',[
|
951
|
-
["HANDLE","hFindVolume","inout"],
|
952
|
-
["PCHAR","lpszVolumeName","out"],
|
953
|
-
["DWORD","cchBufferLength","in"],
|
954
|
-
])
|
955
|
-
|
956
|
-
railgun.add_function('kernel32', 'FindNextVolumeMountPointA', 'BOOL',[
|
957
|
-
["HANDLE","hFindVolumeMountPoint","in"],
|
958
|
-
["PCHAR","lpszVolumeMountPoint","out"],
|
959
|
-
["DWORD","cchBufferLength","in"],
|
960
|
-
])
|
961
|
-
|
962
|
-
railgun.add_function('kernel32', 'FindNextVolumeMountPointW', 'BOOL',[
|
963
|
-
["HANDLE","hFindVolumeMountPoint","in"],
|
964
|
-
["PWCHAR","lpszVolumeMountPoint","out"],
|
965
|
-
["DWORD","cchBufferLength","in"],
|
966
|
-
])
|
967
|
-
|
968
|
-
railgun.add_function('kernel32', 'FindNextVolumeW', 'BOOL',[
|
969
|
-
["HANDLE","hFindVolume","inout"],
|
970
|
-
["PWCHAR","lpszVolumeName","out"],
|
971
|
-
["DWORD","cchBufferLength","in"],
|
972
|
-
])
|
973
|
-
|
974
|
-
railgun.add_function('kernel32', 'FindResourceA', 'DWORD',[
|
975
|
-
["HANDLE","hModule","in"],
|
976
|
-
["PCHAR","lpName","in"],
|
977
|
-
["PCHAR","lpType","in"],
|
978
|
-
])
|
979
|
-
|
980
|
-
railgun.add_function('kernel32', 'FindResourceExA', 'DWORD',[
|
981
|
-
["HANDLE","hModule","in"],
|
982
|
-
["PCHAR","lpType","in"],
|
983
|
-
["PCHAR","lpName","in"],
|
984
|
-
["WORD","wLanguage","in"],
|
985
|
-
])
|
986
|
-
|
987
|
-
railgun.add_function('kernel32', 'FindResourceExW', 'DWORD',[
|
988
|
-
["HANDLE","hModule","in"],
|
989
|
-
["PWCHAR","lpType","in"],
|
990
|
-
["PWCHAR","lpName","in"],
|
991
|
-
["WORD","wLanguage","in"],
|
992
|
-
])
|
993
|
-
|
994
|
-
railgun.add_function('kernel32', 'FindResourceW', 'DWORD',[
|
995
|
-
["HANDLE","hModule","in"],
|
996
|
-
["PWCHAR","lpName","in"],
|
997
|
-
["PWCHAR","lpType","in"],
|
998
|
-
])
|
999
|
-
|
1000
|
-
railgun.add_function('kernel32', 'FindVolumeClose', 'BOOL',[
|
1001
|
-
["HANDLE","hFindVolume","in"],
|
1002
|
-
])
|
1003
|
-
|
1004
|
-
railgun.add_function('kernel32', 'FindVolumeMountPointClose', 'BOOL',[
|
1005
|
-
["HANDLE","hFindVolumeMountPoint","in"],
|
1006
|
-
])
|
1007
|
-
|
1008
|
-
railgun.add_function('kernel32', 'FlsAlloc', 'DWORD',[
|
1009
|
-
["PBLOB","lpCallback","in"],
|
1010
|
-
])
|
1011
|
-
|
1012
|
-
railgun.add_function('kernel32', 'FlsFree', 'BOOL',[
|
1013
|
-
["DWORD","dwFlsIndex","in"],
|
1014
|
-
])
|
1015
|
-
|
1016
|
-
railgun.add_function('kernel32', 'FlsGetValue', 'LPVOID',[
|
1017
|
-
["DWORD","dwFlsIndex","in"],
|
1018
|
-
])
|
1019
|
-
|
1020
|
-
railgun.add_function('kernel32', 'FlsSetValue', 'BOOL',[
|
1021
|
-
["DWORD","dwFlsIndex","in"],
|
1022
|
-
["PBLOB","lpFlsData","in"],
|
1023
|
-
])
|
1024
|
-
|
1025
|
-
railgun.add_function('kernel32', 'FlushFileBuffers', 'BOOL',[
|
1026
|
-
["HANDLE","hFile","in"],
|
1027
|
-
])
|
1028
|
-
|
1029
|
-
railgun.add_function('kernel32', 'FlushInstructionCache', 'BOOL',[
|
1030
|
-
["HANDLE","hProcess","in"],
|
1031
|
-
["PBLOB","lpBaseAddress","in"],
|
1032
|
-
["DWORD","dwSize","in"],
|
1033
|
-
])
|
1034
|
-
|
1035
|
-
railgun.add_function('kernel32', 'FlushViewOfFile', 'BOOL',[
|
1036
|
-
["PBLOB","lpBaseAddress","in"],
|
1037
|
-
["DWORD","dwNumberOfBytesToFlush","in"],
|
1038
|
-
])
|
1039
|
-
|
1040
|
-
railgun.add_function('kernel32', 'FreeEnvironmentStringsA', 'BOOL',[
|
1041
|
-
["PBLOB","param0","in"],
|
1042
|
-
])
|
1043
|
-
|
1044
|
-
railgun.add_function('kernel32', 'FreeEnvironmentStringsW', 'BOOL',[
|
1045
|
-
["PBLOB","param0","in"],
|
1046
|
-
])
|
1047
|
-
|
1048
|
-
railgun.add_function('kernel32', 'FreeLibrary', 'BOOL',[
|
1049
|
-
["HANDLE","hLibModule","in"],
|
1050
|
-
])
|
1051
|
-
|
1052
|
-
railgun.add_function('kernel32', 'FreeLibraryAndExitThread', 'VOID',[
|
1053
|
-
["HANDLE","hLibModule","in"],
|
1054
|
-
["DWORD","dwExitCode","in"],
|
1055
|
-
])
|
1056
|
-
|
1057
|
-
railgun.add_function('kernel32', 'FreeResource', 'BOOL',[
|
1058
|
-
["HANDLE","hResData","in"],
|
1059
|
-
])
|
1060
|
-
|
1061
|
-
railgun.add_function('kernel32', 'FreeUserPhysicalPages', 'BOOL',[
|
1062
|
-
["HANDLE","hProcess","in"],
|
1063
|
-
["PBLOB","NumberOfPages","inout"],
|
1064
|
-
["PBLOB","PageArray","in"],
|
1065
|
-
])
|
1066
|
-
|
1067
|
-
railgun.add_function('kernel32', 'GetAtomNameA', 'DWORD',[
|
1068
|
-
["WORD","nAtom","in"],
|
1069
|
-
["PCHAR","lpBuffer","out"],
|
1070
|
-
["DWORD","nSize","in"],
|
1071
|
-
])
|
1072
|
-
|
1073
|
-
railgun.add_function('kernel32', 'GetAtomNameW', 'DWORD',[
|
1074
|
-
["WORD","nAtom","in"],
|
1075
|
-
["PWCHAR","lpBuffer","out"],
|
1076
|
-
["DWORD","nSize","in"],
|
1077
|
-
])
|
1078
|
-
|
1079
|
-
railgun.add_function('kernel32', 'GetBinaryTypeA', 'BOOL',[
|
1080
|
-
["PCHAR","lpApplicationName","in"],
|
1081
|
-
["PDWORD","lpBinaryType","out"],
|
1082
|
-
])
|
1083
|
-
|
1084
|
-
railgun.add_function('kernel32', 'GetBinaryTypeW', 'BOOL',[
|
1085
|
-
["PWCHAR","lpApplicationName","in"],
|
1086
|
-
["PDWORD","lpBinaryType","out"],
|
1087
|
-
])
|
1088
|
-
|
1089
|
-
railgun.add_function('kernel32', 'GetCommConfig', 'BOOL',[
|
1090
|
-
["HANDLE","hCommDev","in"],
|
1091
|
-
["PBLOB","lpCC","out"],
|
1092
|
-
["PDWORD","lpdwSize","inout"],
|
1093
|
-
])
|
1094
|
-
|
1095
|
-
railgun.add_function('kernel32', 'GetCommMask', 'BOOL',[
|
1096
|
-
["HANDLE","hFile","in"],
|
1097
|
-
["PDWORD","lpEvtMask","out"],
|
1098
|
-
])
|
1099
|
-
|
1100
|
-
railgun.add_function('kernel32', 'GetCommModemStatus', 'BOOL',[
|
1101
|
-
["HANDLE","hFile","in"],
|
1102
|
-
["PDWORD","lpModemStat","out"],
|
1103
|
-
])
|
1104
|
-
|
1105
|
-
railgun.add_function('kernel32', 'GetCommProperties', 'BOOL',[
|
1106
|
-
["HANDLE","hFile","in"],
|
1107
|
-
["PBLOB","lpCommProp","out"],
|
1108
|
-
])
|
1109
|
-
|
1110
|
-
railgun.add_function('kernel32', 'GetCommState', 'BOOL',[
|
1111
|
-
["HANDLE","hFile","in"],
|
1112
|
-
["PBLOB","lpDCB","out"],
|
1113
|
-
])
|
1114
|
-
|
1115
|
-
railgun.add_function('kernel32', 'GetCommTimeouts', 'BOOL',[
|
1116
|
-
["HANDLE","hFile","in"],
|
1117
|
-
["PBLOB","lpCommTimeouts","out"],
|
1118
|
-
])
|
1119
|
-
|
1120
|
-
#railgun.add_function('kernel32', 'GetCommandLineA', 'PCHAR',[
|
1121
|
-
# ])
|
1122
|
-
|
1123
|
-
#railgun.add_function('kernel32', 'GetCommandLineW', 'PWCHAR',[
|
1124
|
-
# ])
|
1125
|
-
|
1126
|
-
railgun.add_function('kernel32', 'GetCompressedFileSizeA', 'DWORD',[
|
1127
|
-
["PCHAR","lpFileName","in"],
|
1128
|
-
["PDWORD","lpFileSizeHigh","out"],
|
1129
|
-
])
|
1130
|
-
|
1131
|
-
railgun.add_function('kernel32', 'GetCompressedFileSizeW', 'DWORD',[
|
1132
|
-
["PWCHAR","lpFileName","in"],
|
1133
|
-
["PDWORD","lpFileSizeHigh","out"],
|
1134
|
-
])
|
1135
|
-
|
1136
|
-
railgun.add_function('kernel32', 'GetComputerNameA', 'BOOL',[
|
1137
|
-
["PCHAR","lpBuffer","out"],
|
1138
|
-
["PDWORD","nSize","inout"],
|
1139
|
-
])
|
1140
|
-
|
1141
|
-
railgun.add_function('kernel32', 'GetComputerNameExA', 'BOOL',[
|
1142
|
-
["DWORD","NameType","in"],
|
1143
|
-
["PCHAR","lpBuffer","out"],
|
1144
|
-
["PDWORD","nSize","inout"],
|
1145
|
-
])
|
1146
|
-
|
1147
|
-
railgun.add_function('kernel32', 'GetComputerNameExW', 'BOOL',[
|
1148
|
-
["DWORD","NameType","in"],
|
1149
|
-
["PWCHAR","lpBuffer","out"],
|
1150
|
-
["PDWORD","nSize","inout"],
|
1151
|
-
])
|
1152
|
-
|
1153
|
-
railgun.add_function('kernel32', 'GetComputerNameW', 'BOOL',[
|
1154
|
-
["PWCHAR","lpBuffer","out"],
|
1155
|
-
["PDWORD","nSize","inout"],
|
1156
|
-
])
|
1157
|
-
|
1158
|
-
railgun.add_function('kernel32', 'GetCurrentActCtx', 'BOOL',[
|
1159
|
-
["PDWORD","lphActCtx","out"],
|
1160
|
-
])
|
1161
|
-
|
1162
|
-
railgun.add_function('kernel32', 'GetCurrentDirectoryA', 'DWORD',[
|
1163
|
-
["DWORD","nBufferLength","in"],
|
1164
|
-
["PCHAR","lpBuffer","out"],
|
1165
|
-
])
|
1166
|
-
|
1167
|
-
railgun.add_function('kernel32', 'GetCurrentDirectoryW', 'DWORD',[
|
1168
|
-
["DWORD","nBufferLength","in"],
|
1169
|
-
["PWCHAR","lpBuffer","out"],
|
1170
|
-
])
|
1171
|
-
|
1172
|
-
railgun.add_function('kernel32', 'GetCurrentProcess', 'HANDLE',[
|
1173
|
-
])
|
1174
|
-
|
1175
|
-
railgun.add_function('kernel32', 'GetCurrentProcessId', 'DWORD',[
|
1176
|
-
])
|
1177
|
-
|
1178
|
-
railgun.add_function('kernel32', 'GetCurrentProcessorNumber', 'DWORD',[
|
1179
|
-
])
|
1180
|
-
|
1181
|
-
railgun.add_function('kernel32', 'GetCurrentThread', 'HANDLE',[
|
1182
|
-
])
|
1183
|
-
|
1184
|
-
railgun.add_function('kernel32', 'GetCurrentThreadId', 'DWORD',[
|
1185
|
-
])
|
1186
|
-
|
1187
|
-
railgun.add_function('kernel32', 'GetDefaultCommConfigA', 'BOOL',[
|
1188
|
-
["PCHAR","lpszName","in"],
|
1189
|
-
["PBLOB","lpCC","out"],
|
1190
|
-
["PDWORD","lpdwSize","inout"],
|
1191
|
-
])
|
1192
|
-
|
1193
|
-
railgun.add_function('kernel32', 'GetDefaultCommConfigW', 'BOOL',[
|
1194
|
-
["PWCHAR","lpszName","in"],
|
1195
|
-
["PBLOB","lpCC","out"],
|
1196
|
-
["PDWORD","lpdwSize","inout"],
|
1197
|
-
])
|
1198
|
-
|
1199
|
-
railgun.add_function('kernel32', 'GetDevicePowerState', 'BOOL',[
|
1200
|
-
["HANDLE","hDevice","in"],
|
1201
|
-
["PBLOB","pfOn","out"],
|
1202
|
-
])
|
1203
|
-
|
1204
|
-
railgun.add_function('kernel32', 'GetDiskFreeSpaceA', 'BOOL',[
|
1205
|
-
["PCHAR","lpRootPathName","in"],
|
1206
|
-
["PDWORD","lpSectorsPerCluster","out"],
|
1207
|
-
["PDWORD","lpBytesPerSector","out"],
|
1208
|
-
["PDWORD","lpNumberOfFreeClusters","out"],
|
1209
|
-
["PDWORD","lpTotalNumberOfClusters","out"],
|
1210
|
-
])
|
1211
|
-
|
1212
|
-
railgun.add_function('kernel32', 'GetDiskFreeSpaceExA', 'BOOL',[
|
1213
|
-
["PCHAR","lpDirectoryName","in"],
|
1214
|
-
["PBLOB","lpFreeBytesAvailableToCaller","out"],
|
1215
|
-
["PBLOB","lpTotalNumberOfBytes","out"],
|
1216
|
-
["PBLOB","lpTotalNumberOfFreeBytes","out"],
|
1217
|
-
])
|
1218
|
-
|
1219
|
-
railgun.add_function('kernel32', 'GetDiskFreeSpaceExW', 'BOOL',[
|
1220
|
-
["PWCHAR","lpDirectoryName","in"],
|
1221
|
-
["PBLOB","lpFreeBytesAvailableToCaller","out"],
|
1222
|
-
["PBLOB","lpTotalNumberOfBytes","out"],
|
1223
|
-
["PBLOB","lpTotalNumberOfFreeBytes","out"],
|
1224
|
-
])
|
1225
|
-
|
1226
|
-
railgun.add_function('kernel32', 'GetDiskFreeSpaceW', 'BOOL',[
|
1227
|
-
["PWCHAR","lpRootPathName","in"],
|
1228
|
-
["PDWORD","lpSectorsPerCluster","out"],
|
1229
|
-
["PDWORD","lpBytesPerSector","out"],
|
1230
|
-
["PDWORD","lpNumberOfFreeClusters","out"],
|
1231
|
-
["PDWORD","lpTotalNumberOfClusters","out"],
|
1232
|
-
])
|
1233
|
-
|
1234
|
-
railgun.add_function('kernel32', 'GetDllDirectoryA', 'DWORD',[
|
1235
|
-
["DWORD","nBufferLength","in"],
|
1236
|
-
["PCHAR","lpBuffer","out"],
|
1237
|
-
])
|
1238
|
-
|
1239
|
-
railgun.add_function('kernel32', 'GetDllDirectoryW', 'DWORD',[
|
1240
|
-
["DWORD","nBufferLength","in"],
|
1241
|
-
["PWCHAR","lpBuffer","out"],
|
1242
|
-
])
|
1243
|
-
|
1244
|
-
railgun.add_function('kernel32', 'GetDriveTypeA', 'DWORD',[
|
1245
|
-
["PCHAR","lpRootPathName","in"],
|
1246
|
-
])
|
1247
|
-
|
1248
|
-
railgun.add_function('kernel32', 'GetDriveTypeW', 'DWORD',[
|
1249
|
-
["PWCHAR","lpRootPathName","in"],
|
1250
|
-
])
|
1251
|
-
|
1252
|
-
railgun.add_function('kernel32', 'GetEnvironmentStrings', 'LPVOID',[
|
1253
|
-
])
|
1254
|
-
|
1255
|
-
railgun.add_function('kernel32', 'GetEnvironmentStringsW', 'LPVOID',[
|
1256
|
-
])
|
1257
|
-
|
1258
|
-
railgun.add_function('kernel32', 'GetEnvironmentVariableA', 'DWORD',[
|
1259
|
-
["PCHAR","lpName","in"],
|
1260
|
-
["PCHAR","lpBuffer","out"],
|
1261
|
-
["DWORD","nSize","in"],
|
1262
|
-
])
|
1263
|
-
|
1264
|
-
railgun.add_function('kernel32', 'GetEnvironmentVariableW', 'DWORD',[
|
1265
|
-
["PWCHAR","lpName","in"],
|
1266
|
-
["PWCHAR","lpBuffer","out"],
|
1267
|
-
["DWORD","nSize","in"],
|
1268
|
-
])
|
1269
|
-
|
1270
|
-
railgun.add_function('kernel32', 'GetExitCodeProcess', 'BOOL',[
|
1271
|
-
["HANDLE","hProcess","in"],
|
1272
|
-
["PDWORD","lpExitCode","out"],
|
1273
|
-
])
|
1274
|
-
|
1275
|
-
railgun.add_function('kernel32', 'GetExitCodeThread', 'BOOL',[
|
1276
|
-
["HANDLE","hThread","in"],
|
1277
|
-
["PDWORD","lpExitCode","out"],
|
1278
|
-
])
|
1279
|
-
|
1280
|
-
railgun.add_function('kernel32', 'GetFileAttributesA', 'DWORD',[
|
1281
|
-
["PCHAR","lpFileName","in"],
|
1282
|
-
])
|
1283
|
-
|
1284
|
-
railgun.add_function('kernel32', 'GetFileAttributesExA', 'BOOL',[
|
1285
|
-
["PCHAR","lpFileName","in"],
|
1286
|
-
["PBLOB","fInfoLevelId","in"],
|
1287
|
-
["PBLOB","lpFileInformation","out"],
|
1288
|
-
])
|
1289
|
-
|
1290
|
-
railgun.add_function('kernel32', 'GetFileAttributesExW', 'BOOL',[
|
1291
|
-
["PWCHAR","lpFileName","in"],
|
1292
|
-
["PBLOB","fInfoLevelId","in"],
|
1293
|
-
["PBLOB","lpFileInformation","out"],
|
1294
|
-
])
|
1295
|
-
|
1296
|
-
railgun.add_function('kernel32', 'GetFileAttributesW', 'DWORD',[
|
1297
|
-
["PWCHAR","lpFileName","in"],
|
1298
|
-
])
|
1299
|
-
|
1300
|
-
railgun.add_function('kernel32', 'GetFileInformationByHandle', 'BOOL',[
|
1301
|
-
["HANDLE","hFile","in"],
|
1302
|
-
["PBLOB","lpFileInformation","out"],
|
1303
|
-
])
|
1304
|
-
|
1305
|
-
railgun.add_function('kernel32', 'GetFileSize', 'DWORD',[
|
1306
|
-
["HANDLE","hFile","in"],
|
1307
|
-
["PDWORD","lpFileSizeHigh","out"],
|
1308
|
-
])
|
1309
|
-
|
1310
|
-
railgun.add_function('kernel32', 'GetFileSizeEx', 'BOOL',[
|
1311
|
-
["HANDLE","hFile","in"],
|
1312
|
-
["PBLOB","lpFileSize","out"],
|
1313
|
-
])
|
1314
|
-
|
1315
|
-
railgun.add_function('kernel32', 'GetFileTime', 'BOOL',[
|
1316
|
-
["HANDLE","hFile","in"],
|
1317
|
-
["PBLOB","lpCreationTime","out"],
|
1318
|
-
["PBLOB","lpLastAccessTime","out"],
|
1319
|
-
["PBLOB","lpLastWriteTime","out"],
|
1320
|
-
])
|
1321
|
-
|
1322
|
-
railgun.add_function('kernel32', 'GetFileType', 'DWORD',[
|
1323
|
-
["HANDLE","hFile","in"],
|
1324
|
-
])
|
1325
|
-
|
1326
|
-
railgun.add_function('kernel32', 'GetFirmwareEnvironmentVariableA', 'DWORD',[
|
1327
|
-
["PCHAR","lpName","in"],
|
1328
|
-
["PCHAR","lpGuid","in"],
|
1329
|
-
["PBLOB","pBuffer","out"],
|
1330
|
-
["DWORD","nSize","in"],
|
1331
|
-
])
|
1332
|
-
|
1333
|
-
railgun.add_function('kernel32', 'GetFirmwareEnvironmentVariableW', 'DWORD',[
|
1334
|
-
["PWCHAR","lpName","in"],
|
1335
|
-
["PWCHAR","lpGuid","in"],
|
1336
|
-
["PBLOB","pBuffer","out"],
|
1337
|
-
["DWORD","nSize","in"],
|
1338
|
-
])
|
1339
|
-
|
1340
|
-
railgun.add_function('kernel32', 'GetFullPathNameA', 'DWORD',[
|
1341
|
-
["PCHAR","lpFileName","in"],
|
1342
|
-
["DWORD","nBufferLength","in"],
|
1343
|
-
["PCHAR","lpBuffer","out"],
|
1344
|
-
["PBLOB","lpFilePart","out"],
|
1345
|
-
])
|
1346
|
-
|
1347
|
-
railgun.add_function('kernel32', 'GetFullPathNameW', 'DWORD',[
|
1348
|
-
["PWCHAR","lpFileName","in"],
|
1349
|
-
["DWORD","nBufferLength","in"],
|
1350
|
-
["PWCHAR","lpBuffer","out"],
|
1351
|
-
["PBLOB","lpFilePart","out"],
|
1352
|
-
])
|
1353
|
-
|
1354
|
-
railgun.add_function('kernel32', 'GetHandleInformation', 'BOOL',[
|
1355
|
-
["HANDLE","hObject","in"],
|
1356
|
-
["PDWORD","lpdwFlags","out"],
|
1357
|
-
])
|
1358
|
-
|
1359
|
-
railgun.add_function('kernel32', 'GetLargePageMinimum', 'DWORD',[
|
1360
|
-
])
|
1361
|
-
|
1362
|
-
railgun.add_function('kernel32', 'GetLastError', 'DWORD',[
|
1363
|
-
])
|
1364
|
-
|
1365
|
-
railgun.add_function('kernel32', 'GetLocalTime', 'VOID',[
|
1366
|
-
["PBLOB","lpSystemTime","out"],
|
1367
|
-
])
|
1368
|
-
|
1369
|
-
railgun.add_function('kernel32', 'GetLogicalDriveStringsA', 'DWORD',[
|
1370
|
-
["DWORD","nBufferLength","in"],
|
1371
|
-
["PCHAR","lpBuffer","out"],
|
1372
|
-
])
|
1373
|
-
|
1374
|
-
railgun.add_function('kernel32', 'GetLogicalDriveStringsW', 'DWORD',[
|
1375
|
-
["DWORD","nBufferLength","in"],
|
1376
|
-
["PWCHAR","lpBuffer","out"],
|
1377
|
-
])
|
1378
|
-
|
1379
|
-
railgun.add_function('kernel32', 'GetLogicalDrives', 'DWORD',[
|
1380
|
-
])
|
1381
|
-
|
1382
|
-
railgun.add_function('kernel32', 'GetLogicalProcessorInformation', 'BOOL',[
|
1383
|
-
["PBLOB","Buffer","out"],
|
1384
|
-
["PDWORD","ReturnedLength","inout"],
|
1385
|
-
])
|
1386
|
-
|
1387
|
-
railgun.add_function('kernel32', 'GetLongPathNameA', 'DWORD',[
|
1388
|
-
["PCHAR","lpszShortPath","in"],
|
1389
|
-
["PCHAR","lpszLongPath","out"],
|
1390
|
-
["DWORD","cchBuffer","in"],
|
1391
|
-
])
|
1392
|
-
|
1393
|
-
railgun.add_function('kernel32', 'GetLongPathNameW', 'DWORD',[
|
1394
|
-
["PWCHAR","lpszShortPath","in"],
|
1395
|
-
["PWCHAR","lpszLongPath","out"],
|
1396
|
-
["DWORD","cchBuffer","in"],
|
1397
|
-
])
|
1398
|
-
|
1399
|
-
railgun.add_function('kernel32', 'GetMailslotInfo', 'BOOL',[
|
1400
|
-
["HANDLE","hMailslot","in"],
|
1401
|
-
["PDWORD","lpMaxMessageSize","out"],
|
1402
|
-
["PDWORD","lpNextSize","out"],
|
1403
|
-
["PDWORD","lpMessageCount","out"],
|
1404
|
-
["PDWORD","lpReadTimeout","out"],
|
1405
|
-
])
|
1406
|
-
|
1407
|
-
railgun.add_function('kernel32', 'GetModuleFileNameA', 'DWORD',[
|
1408
|
-
["HANDLE","hModule","in"],
|
1409
|
-
["PBLOB","lpFilename","out"],
|
1410
|
-
["DWORD","nSize","in"],
|
1411
|
-
])
|
1412
|
-
|
1413
|
-
railgun.add_function('kernel32', 'GetModuleFileNameW', 'DWORD',[
|
1414
|
-
["HANDLE","hModule","in"],
|
1415
|
-
["PBLOB","lpFilename","out"],
|
1416
|
-
["DWORD","nSize","in"],
|
1417
|
-
])
|
1418
|
-
|
1419
|
-
railgun.add_function('kernel32', 'GetModuleHandleA', 'DWORD',[
|
1420
|
-
["PCHAR","lpModuleName","in"],
|
1421
|
-
])
|
1422
|
-
|
1423
|
-
railgun.add_function('kernel32', 'GetModuleHandleExA', 'BOOL',[
|
1424
|
-
["DWORD","dwFlags","in"],
|
1425
|
-
["PCHAR","lpModuleName","in"],
|
1426
|
-
["PDWORD","phModule","out"],
|
1427
|
-
])
|
1428
|
-
|
1429
|
-
railgun.add_function('kernel32', 'GetModuleHandleExW', 'BOOL',[
|
1430
|
-
["DWORD","dwFlags","in"],
|
1431
|
-
["PWCHAR","lpModuleName","in"],
|
1432
|
-
["PDWORD","phModule","out"],
|
1433
|
-
])
|
1434
|
-
|
1435
|
-
railgun.add_function('kernel32', 'GetModuleHandleW', 'DWORD',[
|
1436
|
-
["PWCHAR","lpModuleName","in"],
|
1437
|
-
])
|
1438
|
-
|
1439
|
-
railgun.add_function('kernel32', 'GetNamedPipeHandleStateA', 'BOOL',[
|
1440
|
-
["HANDLE","hNamedPipe","in"],
|
1441
|
-
["PDWORD","lpState","out"],
|
1442
|
-
["PDWORD","lpCurInstances","out"],
|
1443
|
-
["PDWORD","lpMaxCollectionCount","out"],
|
1444
|
-
["PDWORD","lpCollectDataTimeout","out"],
|
1445
|
-
["PCHAR","lpUserName","out"],
|
1446
|
-
["DWORD","nMaxUserNameSize","in"],
|
1447
|
-
])
|
1448
|
-
|
1449
|
-
railgun.add_function('kernel32', 'GetNamedPipeHandleStateW', 'BOOL',[
|
1450
|
-
["HANDLE","hNamedPipe","in"],
|
1451
|
-
["PDWORD","lpState","out"],
|
1452
|
-
["PDWORD","lpCurInstances","out"],
|
1453
|
-
["PDWORD","lpMaxCollectionCount","out"],
|
1454
|
-
["PDWORD","lpCollectDataTimeout","out"],
|
1455
|
-
["PWCHAR","lpUserName","out"],
|
1456
|
-
["DWORD","nMaxUserNameSize","in"],
|
1457
|
-
])
|
1458
|
-
|
1459
|
-
railgun.add_function('kernel32', 'GetNamedPipeInfo', 'BOOL',[
|
1460
|
-
["HANDLE","hNamedPipe","in"],
|
1461
|
-
["PDWORD","lpFlags","out"],
|
1462
|
-
["PDWORD","lpOutBufferSize","out"],
|
1463
|
-
["PDWORD","lpInBufferSize","out"],
|
1464
|
-
["PDWORD","lpMaxInstances","out"],
|
1465
|
-
])
|
1466
|
-
|
1467
|
-
railgun.add_function('kernel32', 'GetNativeSystemInfo', 'VOID',[
|
1468
|
-
["PBLOB","lpSystemInfo","out"],
|
1469
|
-
])
|
1470
|
-
|
1471
|
-
railgun.add_function('kernel32', 'GetNumaAvailableMemoryNode', 'BOOL',[
|
1472
|
-
["BYTE","Node","in"],
|
1473
|
-
["PBLOB","AvailableBytes","out"],
|
1474
|
-
])
|
1475
|
-
|
1476
|
-
railgun.add_function('kernel32', 'GetNumaHighestNodeNumber', 'BOOL',[
|
1477
|
-
["PDWORD","HighestNodeNumber","out"],
|
1478
|
-
])
|
1479
|
-
|
1480
|
-
railgun.add_function('kernel32', 'GetNumaNodeProcessorMask', 'BOOL',[
|
1481
|
-
["BYTE","Node","in"],
|
1482
|
-
["PBLOB","ProcessorMask","out"],
|
1483
|
-
])
|
1484
|
-
|
1485
|
-
railgun.add_function('kernel32', 'GetNumaProcessorNode', 'BOOL',[
|
1486
|
-
["BYTE","Processor","in"],
|
1487
|
-
["PBLOB","NodeNumber","out"],
|
1488
|
-
])
|
1489
|
-
|
1490
|
-
railgun.add_function('kernel32', 'GetOverlappedResult', 'BOOL',[
|
1491
|
-
["HANDLE","hFile","in"],
|
1492
|
-
["PBLOB","lpOverlapped","in"],
|
1493
|
-
["PDWORD","lpNumberOfBytesTransferred","out"],
|
1494
|
-
["BOOL","bWait","in"],
|
1495
|
-
])
|
1496
|
-
|
1497
|
-
railgun.add_function('kernel32', 'GetPriorityClass', 'DWORD',[
|
1498
|
-
["HANDLE","hProcess","in"],
|
1499
|
-
])
|
1500
|
-
|
1501
|
-
railgun.add_function('kernel32', 'GetPrivateProfileIntA', 'DWORD',[
|
1502
|
-
["PCHAR","lpAppName","in"],
|
1503
|
-
["PCHAR","lpKeyName","in"],
|
1504
|
-
["DWORD","nDefault","in"],
|
1505
|
-
["PCHAR","lpFileName","in"],
|
1506
|
-
])
|
1507
|
-
|
1508
|
-
railgun.add_function('kernel32', 'GetPrivateProfileIntW', 'DWORD',[
|
1509
|
-
["PWCHAR","lpAppName","in"],
|
1510
|
-
["PWCHAR","lpKeyName","in"],
|
1511
|
-
["DWORD","nDefault","in"],
|
1512
|
-
["PWCHAR","lpFileName","in"],
|
1513
|
-
])
|
1514
|
-
|
1515
|
-
railgun.add_function('kernel32', 'GetPrivateProfileSectionA', 'DWORD',[
|
1516
|
-
["PCHAR","lpAppName","in"],
|
1517
|
-
["PCHAR","lpReturnedString","out"],
|
1518
|
-
["DWORD","nSize","in"],
|
1519
|
-
["PCHAR","lpFileName","in"],
|
1520
|
-
])
|
1521
|
-
|
1522
|
-
railgun.add_function('kernel32', 'GetPrivateProfileSectionNamesA', 'DWORD',[
|
1523
|
-
["PCHAR","lpszReturnBuffer","out"],
|
1524
|
-
["DWORD","nSize","in"],
|
1525
|
-
["PCHAR","lpFileName","in"],
|
1526
|
-
])
|
1527
|
-
|
1528
|
-
railgun.add_function('kernel32', 'GetPrivateProfileSectionNamesW', 'DWORD',[
|
1529
|
-
["PWCHAR","lpszReturnBuffer","out"],
|
1530
|
-
["DWORD","nSize","in"],
|
1531
|
-
["PWCHAR","lpFileName","in"],
|
1532
|
-
])
|
1533
|
-
|
1534
|
-
railgun.add_function('kernel32', 'GetPrivateProfileSectionW', 'DWORD',[
|
1535
|
-
["PWCHAR","lpAppName","in"],
|
1536
|
-
["PWCHAR","lpReturnedString","out"],
|
1537
|
-
["DWORD","nSize","in"],
|
1538
|
-
["PWCHAR","lpFileName","in"],
|
1539
|
-
])
|
1540
|
-
|
1541
|
-
railgun.add_function('kernel32', 'GetPrivateProfileStringA', 'DWORD',[
|
1542
|
-
["PCHAR","lpAppName","in"],
|
1543
|
-
["PCHAR","lpKeyName","in"],
|
1544
|
-
["PCHAR","lpDefault","in"],
|
1545
|
-
["PCHAR","lpReturnedString","out"],
|
1546
|
-
["DWORD","nSize","in"],
|
1547
|
-
["PCHAR","lpFileName","in"],
|
1548
|
-
])
|
1549
|
-
|
1550
|
-
railgun.add_function('kernel32', 'GetPrivateProfileStringW', 'DWORD',[
|
1551
|
-
["PWCHAR","lpAppName","in"],
|
1552
|
-
["PWCHAR","lpKeyName","in"],
|
1553
|
-
["PWCHAR","lpDefault","in"],
|
1554
|
-
["PWCHAR","lpReturnedString","out"],
|
1555
|
-
["DWORD","nSize","in"],
|
1556
|
-
["PWCHAR","lpFileName","in"],
|
1557
|
-
])
|
1558
|
-
|
1559
|
-
railgun.add_function('kernel32', 'GetPrivateProfileStructA', 'BOOL',[
|
1560
|
-
["PCHAR","lpszSection","in"],
|
1561
|
-
["PCHAR","lpszKey","in"],
|
1562
|
-
["PBLOB","lpStruct","out"],
|
1563
|
-
["DWORD","uSizeStruct","in"],
|
1564
|
-
["PCHAR","szFile","in"],
|
1565
|
-
])
|
1566
|
-
|
1567
|
-
railgun.add_function('kernel32', 'GetPrivateProfileStructW', 'BOOL',[
|
1568
|
-
["PWCHAR","lpszSection","in"],
|
1569
|
-
["PWCHAR","lpszKey","in"],
|
1570
|
-
["PBLOB","lpStruct","out"],
|
1571
|
-
["DWORD","uSizeStruct","in"],
|
1572
|
-
["PWCHAR","szFile","in"],
|
1573
|
-
])
|
1574
|
-
|
1575
|
-
railgun.add_function('kernel32', 'GetProcAddress', 'LPVOID',[
|
1576
|
-
["HANDLE","hModule","in"],
|
1577
|
-
["PCHAR","lpProcName","in"],
|
1578
|
-
])
|
1579
|
-
|
1580
|
-
railgun.add_function('kernel32', 'GetProcessAffinityMask', 'BOOL',[
|
1581
|
-
["HANDLE","hProcess","in"],
|
1582
|
-
["PBLOB","lpProcessAffinityMask","out"],
|
1583
|
-
["PBLOB","lpSystemAffinityMask","out"],
|
1584
|
-
])
|
1585
|
-
|
1586
|
-
railgun.add_function('kernel32', 'GetProcessHandleCount', 'BOOL',[
|
1587
|
-
["HANDLE","hProcess","in"],
|
1588
|
-
["PDWORD","pdwHandleCount","out"],
|
1589
|
-
])
|
1590
|
-
|
1591
|
-
railgun.add_function('kernel32', 'GetProcessHeap', 'DWORD',[
|
1592
|
-
])
|
1593
|
-
|
1594
|
-
railgun.add_function('kernel32', 'GetProcessHeaps', 'DWORD',[
|
1595
|
-
["DWORD","NumberOfHeaps","in"],
|
1596
|
-
["PDWORD","ProcessHeaps","out"],
|
1597
|
-
])
|
1598
|
-
|
1599
|
-
railgun.add_function('kernel32', 'GetProcessId', 'DWORD',[
|
1600
|
-
["DWORD","Process","in"],
|
1601
|
-
])
|
1602
|
-
|
1603
|
-
railgun.add_function('kernel32', 'GetProcessIdOfThread', 'DWORD',[
|
1604
|
-
["DWORD","Thread","in"],
|
1605
|
-
])
|
1606
|
-
|
1607
|
-
railgun.add_function('kernel32', 'GetProcessIoCounters', 'BOOL',[
|
1608
|
-
["HANDLE","hProcess","in"],
|
1609
|
-
["PBLOB","lpIoCounters","out"],
|
1610
|
-
])
|
1611
|
-
|
1612
|
-
railgun.add_function('kernel32', 'GetProcessPriorityBoost', 'BOOL',[
|
1613
|
-
["HANDLE","hProcess","in"],
|
1614
|
-
["PBLOB","pDisablePriorityBoost","out"],
|
1615
|
-
])
|
1616
|
-
|
1617
|
-
railgun.add_function('kernel32', 'GetProcessShutdownParameters', 'BOOL',[
|
1618
|
-
["PDWORD","lpdwLevel","out"],
|
1619
|
-
["PDWORD","lpdwFlags","out"],
|
1620
|
-
])
|
1621
|
-
|
1622
|
-
railgun.add_function('kernel32', 'GetProcessTimes', 'BOOL',[
|
1623
|
-
["HANDLE","hProcess","in"],
|
1624
|
-
["PBLOB","lpCreationTime","out"],
|
1625
|
-
["PBLOB","lpExitTime","out"],
|
1626
|
-
["PBLOB","lpKernelTime","out"],
|
1627
|
-
["PBLOB","lpUserTime","out"],
|
1628
|
-
])
|
1629
|
-
|
1630
|
-
railgun.add_function('kernel32', 'GetProcessVersion', 'DWORD',[
|
1631
|
-
["DWORD","ProcessId","in"],
|
1632
|
-
])
|
1633
|
-
|
1634
|
-
railgun.add_function('kernel32', 'GetProcessWorkingSetSize', 'BOOL',[
|
1635
|
-
["HANDLE","hProcess","in"],
|
1636
|
-
["PDWORD","lpMinimumWorkingSetSize","out"],
|
1637
|
-
["PDWORD","lpMaximumWorkingSetSize","out"],
|
1638
|
-
])
|
1639
|
-
|
1640
|
-
railgun.add_function('kernel32', 'GetProcessWorkingSetSizeEx', 'BOOL',[
|
1641
|
-
["HANDLE","hProcess","in"],
|
1642
|
-
["PDWORD","lpMinimumWorkingSetSize","out"],
|
1643
|
-
["PDWORD","lpMaximumWorkingSetSize","out"],
|
1644
|
-
["PDWORD","Flags","out"],
|
1645
|
-
])
|
1646
|
-
|
1647
|
-
railgun.add_function('kernel32', 'GetProfileIntA', 'DWORD',[
|
1648
|
-
["PCHAR","lpAppName","in"],
|
1649
|
-
["PCHAR","lpKeyName","in"],
|
1650
|
-
["DWORD","nDefault","in"],
|
1651
|
-
])
|
1652
|
-
|
1653
|
-
railgun.add_function('kernel32', 'GetProfileIntW', 'DWORD',[
|
1654
|
-
["PWCHAR","lpAppName","in"],
|
1655
|
-
["PWCHAR","lpKeyName","in"],
|
1656
|
-
["DWORD","nDefault","in"],
|
1657
|
-
])
|
1658
|
-
|
1659
|
-
railgun.add_function('kernel32', 'GetProfileSectionA', 'DWORD',[
|
1660
|
-
["PCHAR","lpAppName","in"],
|
1661
|
-
["PCHAR","lpReturnedString","out"],
|
1662
|
-
["DWORD","nSize","in"],
|
1663
|
-
])
|
1664
|
-
|
1665
|
-
railgun.add_function('kernel32', 'GetProfileSectionW', 'DWORD',[
|
1666
|
-
["PWCHAR","lpAppName","in"],
|
1667
|
-
["PWCHAR","lpReturnedString","out"],
|
1668
|
-
["DWORD","nSize","in"],
|
1669
|
-
])
|
1670
|
-
|
1671
|
-
railgun.add_function('kernel32', 'GetProfileStringA', 'DWORD',[
|
1672
|
-
["PCHAR","lpAppName","in"],
|
1673
|
-
["PCHAR","lpKeyName","in"],
|
1674
|
-
["PCHAR","lpDefault","in"],
|
1675
|
-
["PCHAR","lpReturnedString","out"],
|
1676
|
-
["DWORD","nSize","in"],
|
1677
|
-
])
|
1678
|
-
|
1679
|
-
railgun.add_function('kernel32', 'GetProfileStringW', 'DWORD',[
|
1680
|
-
["PWCHAR","lpAppName","in"],
|
1681
|
-
["PWCHAR","lpKeyName","in"],
|
1682
|
-
["PWCHAR","lpDefault","in"],
|
1683
|
-
["PWCHAR","lpReturnedString","out"],
|
1684
|
-
["DWORD","nSize","in"],
|
1685
|
-
])
|
1686
|
-
|
1687
|
-
railgun.add_function('kernel32', 'GetQueuedCompletionStatus', 'BOOL',[
|
1688
|
-
["DWORD","CompletionPort","in"],
|
1689
|
-
["PDWORD","lpNumberOfBytesTransferred","out"],
|
1690
|
-
["PBLOB","lpCompletionKey","out"],
|
1691
|
-
["PBLOB","lpOverlapped","out"],
|
1692
|
-
["DWORD","dwMilliseconds","in"],
|
1693
|
-
])
|
1694
|
-
|
1695
|
-
railgun.add_function('kernel32', 'GetShortPathNameA', 'DWORD',[
|
1696
|
-
["PCHAR","lpszLongPath","in"],
|
1697
|
-
["PCHAR","lpszShortPath","out"],
|
1698
|
-
["DWORD","cchBuffer","in"],
|
1699
|
-
])
|
1700
|
-
|
1701
|
-
railgun.add_function('kernel32', 'GetShortPathNameW', 'DWORD',[
|
1702
|
-
["PWCHAR","lpszLongPath","in"],
|
1703
|
-
["PWCHAR","lpszShortPath","out"],
|
1704
|
-
["DWORD","cchBuffer","in"],
|
1705
|
-
])
|
1706
|
-
|
1707
|
-
railgun.add_function('kernel32', 'GetStartupInfoA', 'VOID',[
|
1708
|
-
["PBLOB","lpStartupInfo","out"],
|
1709
|
-
])
|
1710
|
-
|
1711
|
-
railgun.add_function('kernel32', 'GetStartupInfoW', 'VOID',[
|
1712
|
-
["PBLOB","lpStartupInfo","out"],
|
1713
|
-
])
|
1714
|
-
|
1715
|
-
railgun.add_function('kernel32', 'GetStdHandle', 'DWORD',[
|
1716
|
-
["DWORD","nStdHandle","in"],
|
1717
|
-
])
|
1718
|
-
|
1719
|
-
railgun.add_function('kernel32', 'GetSystemDirectoryA', 'DWORD',[
|
1720
|
-
["PCHAR","lpBuffer","out"],
|
1721
|
-
["DWORD","uSize","in"],
|
1722
|
-
])
|
1723
|
-
|
1724
|
-
railgun.add_function('kernel32', 'GetSystemDirectoryW', 'DWORD',[
|
1725
|
-
["PWCHAR","lpBuffer","out"],
|
1726
|
-
["DWORD","uSize","in"],
|
1727
|
-
])
|
1728
|
-
|
1729
|
-
railgun.add_function('kernel32', 'GetSystemFileCacheSize', 'BOOL',[
|
1730
|
-
["PDWORD","lpMinimumFileCacheSize","out"],
|
1731
|
-
["PDWORD","lpMaximumFileCacheSize","out"],
|
1732
|
-
["PDWORD","lpFlags","out"],
|
1733
|
-
])
|
1734
|
-
|
1735
|
-
railgun.add_function('kernel32', 'GetSystemFirmwareTable', 'DWORD',[
|
1736
|
-
["DWORD","FirmwareTableProviderSignature","in"],
|
1737
|
-
["DWORD","FirmwareTableID","in"],
|
1738
|
-
["PBLOB","pFirmwareTableBuffer","out"],
|
1739
|
-
["DWORD","BufferSize","in"],
|
1740
|
-
])
|
1741
|
-
|
1742
|
-
railgun.add_function('kernel32', 'GetSystemInfo', 'VOID',[
|
1743
|
-
["PBLOB","lpSystemInfo","out"],
|
1744
|
-
])
|
1745
|
-
|
1746
|
-
railgun.add_function('kernel32', 'GetSystemPowerStatus', 'BOOL',[
|
1747
|
-
["PBLOB","lpSystemPowerStatus","out"],
|
1748
|
-
])
|
1749
|
-
|
1750
|
-
railgun.add_function('kernel32', 'GetSystemRegistryQuota', 'BOOL',[
|
1751
|
-
["PDWORD","pdwQuotaAllowed","out"],
|
1752
|
-
["PDWORD","pdwQuotaUsed","out"],
|
1753
|
-
])
|
1754
|
-
|
1755
|
-
railgun.add_function('kernel32', 'GetSystemTime', 'VOID',[
|
1756
|
-
["PBLOB","lpSystemTime","out"],
|
1757
|
-
])
|
1758
|
-
|
1759
|
-
railgun.add_function('kernel32', 'GetSystemTimeAdjustment', 'BOOL',[
|
1760
|
-
["PDWORD","lpTimeAdjustment","out"],
|
1761
|
-
["PDWORD","lpTimeIncrement","out"],
|
1762
|
-
["PBLOB","lpTimeAdjustmentDisabled","out"],
|
1763
|
-
])
|
1764
|
-
|
1765
|
-
railgun.add_function('kernel32', 'GetSystemTimeAsFileTime', 'VOID',[
|
1766
|
-
["PBLOB","lpSystemTimeAsFileTime","out"],
|
1767
|
-
])
|
1768
|
-
|
1769
|
-
railgun.add_function('kernel32', 'GetSystemTimes', 'BOOL',[
|
1770
|
-
["PBLOB","lpIdleTime","out"],
|
1771
|
-
["PBLOB","lpKernelTime","out"],
|
1772
|
-
["PBLOB","lpUserTime","out"],
|
1773
|
-
])
|
1774
|
-
|
1775
|
-
railgun.add_function('kernel32', 'GetSystemWindowsDirectoryA', 'DWORD',[
|
1776
|
-
["PCHAR","lpBuffer","out"],
|
1777
|
-
["DWORD","uSize","in"],
|
1778
|
-
])
|
1779
|
-
|
1780
|
-
railgun.add_function('kernel32', 'GetSystemWindowsDirectoryW', 'DWORD',[
|
1781
|
-
["PWCHAR","lpBuffer","out"],
|
1782
|
-
["DWORD","uSize","in"],
|
1783
|
-
])
|
1784
|
-
|
1785
|
-
railgun.add_function('kernel32', 'GetSystemWow64DirectoryA', 'DWORD',[
|
1786
|
-
["PCHAR","lpBuffer","out"],
|
1787
|
-
["DWORD","uSize","in"],
|
1788
|
-
])
|
1789
|
-
|
1790
|
-
railgun.add_function('kernel32', 'GetSystemWow64DirectoryW', 'DWORD',[
|
1791
|
-
["PWCHAR","lpBuffer","out"],
|
1792
|
-
["DWORD","uSize","in"],
|
1793
|
-
])
|
1794
|
-
|
1795
|
-
railgun.add_function('kernel32', 'GetTapeParameters', 'DWORD',[
|
1796
|
-
["HANDLE","hDevice","in"],
|
1797
|
-
["DWORD","dwOperation","in"],
|
1798
|
-
["PDWORD","lpdwSize","inout"],
|
1799
|
-
["PBLOB","lpTapeInformation","out"],
|
1800
|
-
])
|
1801
|
-
|
1802
|
-
railgun.add_function('kernel32', 'GetTapePosition', 'DWORD',[
|
1803
|
-
["HANDLE","hDevice","in"],
|
1804
|
-
["DWORD","dwPositionType","in"],
|
1805
|
-
["PDWORD","lpdwPartition","out"],
|
1806
|
-
["PDWORD","lpdwOffsetLow","out"],
|
1807
|
-
["PDWORD","lpdwOffsetHigh","out"],
|
1808
|
-
])
|
1809
|
-
|
1810
|
-
railgun.add_function('kernel32', 'GetTapeStatus', 'DWORD',[
|
1811
|
-
["HANDLE","hDevice","in"],
|
1812
|
-
])
|
1813
|
-
|
1814
|
-
railgun.add_function('kernel32', 'GetTempFileNameA', 'DWORD',[
|
1815
|
-
["PCHAR","lpPathName","in"],
|
1816
|
-
["PCHAR","lpPrefixString","in"],
|
1817
|
-
["DWORD","uUnique","in"],
|
1818
|
-
["PCHAR","lpTempFileName","out"],
|
1819
|
-
])
|
1820
|
-
|
1821
|
-
railgun.add_function('kernel32', 'GetTempFileNameW', 'DWORD',[
|
1822
|
-
["PWCHAR","lpPathName","in"],
|
1823
|
-
["PWCHAR","lpPrefixString","in"],
|
1824
|
-
["DWORD","uUnique","in"],
|
1825
|
-
["PWCHAR","lpTempFileName","out"],
|
1826
|
-
])
|
1827
|
-
|
1828
|
-
railgun.add_function('kernel32', 'GetTempPathA', 'DWORD',[
|
1829
|
-
["DWORD","nBufferLength","in"],
|
1830
|
-
["PCHAR","lpBuffer","out"],
|
1831
|
-
])
|
1832
|
-
|
1833
|
-
railgun.add_function('kernel32', 'GetTempPathW', 'DWORD',[
|
1834
|
-
["DWORD","nBufferLength","in"],
|
1835
|
-
["PWCHAR","lpBuffer","out"],
|
1836
|
-
])
|
1837
|
-
|
1838
|
-
railgun.add_function('kernel32', 'GetThreadContext', 'BOOL',[
|
1839
|
-
["HANDLE","hThread","in"],
|
1840
|
-
["PBLOB","lpContext","inout"],
|
1841
|
-
])
|
1842
|
-
|
1843
|
-
railgun.add_function('kernel32', 'GetThreadIOPendingFlag', 'BOOL',[
|
1844
|
-
["HANDLE","hThread","in"],
|
1845
|
-
["PBLOB","lpIOIsPending","out"],
|
1846
|
-
])
|
1847
|
-
|
1848
|
-
railgun.add_function('kernel32', 'GetThreadId', 'DWORD',[
|
1849
|
-
["DWORD","Thread","in"],
|
1850
|
-
])
|
1851
|
-
|
1852
|
-
railgun.add_function('kernel32', 'GetThreadPriority', 'DWORD',[
|
1853
|
-
["HANDLE","hThread","in"],
|
1854
|
-
])
|
1855
|
-
|
1856
|
-
railgun.add_function('kernel32', 'GetThreadPriorityBoost', 'BOOL',[
|
1857
|
-
["HANDLE","hThread","in"],
|
1858
|
-
["PBLOB","pDisablePriorityBoost","out"],
|
1859
|
-
])
|
1860
|
-
|
1861
|
-
railgun.add_function('kernel32', 'GetThreadSelectorEntry', 'BOOL',[
|
1862
|
-
["HANDLE","hThread","in"],
|
1863
|
-
["DWORD","dwSelector","in"],
|
1864
|
-
["PBLOB","lpSelectorEntry","out"],
|
1865
|
-
])
|
1866
|
-
|
1867
|
-
railgun.add_function('kernel32', 'GetThreadTimes', 'BOOL',[
|
1868
|
-
["HANDLE","hThread","in"],
|
1869
|
-
["PBLOB","lpCreationTime","out"],
|
1870
|
-
["PBLOB","lpExitTime","out"],
|
1871
|
-
["PBLOB","lpKernelTime","out"],
|
1872
|
-
["PBLOB","lpUserTime","out"],
|
1873
|
-
])
|
1874
|
-
|
1875
|
-
railgun.add_function('kernel32', 'GetTickCount', 'DWORD',[
|
1876
|
-
])
|
1877
|
-
|
1878
|
-
railgun.add_function('kernel32', 'GetTimeZoneInformation', 'DWORD',[
|
1879
|
-
["PBLOB","lpTimeZoneInformation","out"],
|
1880
|
-
])
|
1881
|
-
|
1882
|
-
railgun.add_function('kernel32', 'GetVersion', 'DWORD',[
|
1883
|
-
])
|
1884
|
-
|
1885
|
-
railgun.add_function('kernel32', 'GetVersionExA', 'BOOL',[
|
1886
|
-
["PBLOB","lpVersionInformation","inout"],
|
1887
|
-
])
|
1888
|
-
|
1889
|
-
railgun.add_function('kernel32', 'GetVersionExW', 'BOOL',[
|
1890
|
-
["PBLOB","lpVersionInformation","inout"],
|
1891
|
-
])
|
1892
|
-
|
1893
|
-
railgun.add_function('kernel32', 'GetVolumeInformationA', 'BOOL',[
|
1894
|
-
["PCHAR","lpRootPathName","in"],
|
1895
|
-
["PCHAR","lpVolumeNameBuffer","out"],
|
1896
|
-
["DWORD","nVolumeNameSize","in"],
|
1897
|
-
["PDWORD","lpVolumeSerialNumber","out"],
|
1898
|
-
["PDWORD","lpMaximumComponentLength","out"],
|
1899
|
-
["PDWORD","lpFileSystemFlags","out"],
|
1900
|
-
["PCHAR","lpFileSystemNameBuffer","out"],
|
1901
|
-
["DWORD","nFileSystemNameSize","in"],
|
1902
|
-
])
|
1903
|
-
|
1904
|
-
railgun.add_function('kernel32', 'GetVolumeInformationW', 'BOOL',[
|
1905
|
-
["PWCHAR","lpRootPathName","in"],
|
1906
|
-
["PWCHAR","lpVolumeNameBuffer","out"],
|
1907
|
-
["DWORD","nVolumeNameSize","in"],
|
1908
|
-
["PDWORD","lpVolumeSerialNumber","out"],
|
1909
|
-
["PDWORD","lpMaximumComponentLength","out"],
|
1910
|
-
["PDWORD","lpFileSystemFlags","out"],
|
1911
|
-
["PWCHAR","lpFileSystemNameBuffer","out"],
|
1912
|
-
["DWORD","nFileSystemNameSize","in"],
|
1913
|
-
])
|
1914
|
-
|
1915
|
-
railgun.add_function('kernel32', 'GetVolumeNameForVolumeMountPointA', 'BOOL',[
|
1916
|
-
["PCHAR","lpszVolumeMountPoint","in"],
|
1917
|
-
["PCHAR","lpszVolumeName","out"],
|
1918
|
-
["DWORD","cchBufferLength","in"],
|
1919
|
-
])
|
1920
|
-
|
1921
|
-
railgun.add_function('kernel32', 'GetVolumeNameForVolumeMountPointW', 'BOOL',[
|
1922
|
-
["PWCHAR","lpszVolumeMountPoint","in"],
|
1923
|
-
["PWCHAR","lpszVolumeName","out"],
|
1924
|
-
["DWORD","cchBufferLength","in"],
|
1925
|
-
])
|
1926
|
-
|
1927
|
-
railgun.add_function('kernel32', 'GetVolumePathNameA', 'BOOL',[
|
1928
|
-
["PCHAR","lpszFileName","in"],
|
1929
|
-
["PCHAR","lpszVolumePathName","out"],
|
1930
|
-
["DWORD","cchBufferLength","in"],
|
1931
|
-
])
|
1932
|
-
|
1933
|
-
railgun.add_function('kernel32', 'GetVolumePathNameW', 'BOOL',[
|
1934
|
-
["PWCHAR","lpszFileName","in"],
|
1935
|
-
["PWCHAR","lpszVolumePathName","out"],
|
1936
|
-
["DWORD","cchBufferLength","in"],
|
1937
|
-
])
|
1938
|
-
|
1939
|
-
railgun.add_function('kernel32', 'GetVolumePathNamesForVolumeNameA', 'BOOL',[
|
1940
|
-
["PCHAR","lpszVolumeName","in"],
|
1941
|
-
["PBLOB","lpszVolumePathNames","out"],
|
1942
|
-
["DWORD","cchBufferLength","in"],
|
1943
|
-
["PDWORD","lpcchReturnLength","out"],
|
1944
|
-
])
|
1945
|
-
|
1946
|
-
railgun.add_function('kernel32', 'GetVolumePathNamesForVolumeNameW', 'BOOL',[
|
1947
|
-
["PWCHAR","lpszVolumeName","in"],
|
1948
|
-
["PBLOB","lpszVolumePathNames","out"],
|
1949
|
-
["DWORD","cchBufferLength","in"],
|
1950
|
-
["PDWORD","lpcchReturnLength","out"],
|
1951
|
-
])
|
1952
|
-
|
1953
|
-
railgun.add_function('kernel32', 'GetWindowsDirectoryA', 'DWORD',[
|
1954
|
-
["PCHAR","lpBuffer","out"],
|
1955
|
-
["DWORD","uSize","in"],
|
1956
|
-
])
|
1957
|
-
|
1958
|
-
railgun.add_function('kernel32', 'GetWindowsDirectoryW', 'DWORD',[
|
1959
|
-
["PWCHAR","lpBuffer","out"],
|
1960
|
-
["DWORD","uSize","in"],
|
1961
|
-
])
|
1962
|
-
|
1963
|
-
railgun.add_function('kernel32', 'GetWriteWatch', 'DWORD',[
|
1964
|
-
["DWORD","dwFlags","in"],
|
1965
|
-
["PBLOB","lpBaseAddress","in"],
|
1966
|
-
["DWORD","dwRegionSize","in"],
|
1967
|
-
["PBLOB","lpAddresses","out"],
|
1968
|
-
["PBLOB","lpdwCount","inout"],
|
1969
|
-
["PDWORD","lpdwGranularity","out"],
|
1970
|
-
])
|
1971
|
-
|
1972
|
-
railgun.add_function('kernel32', 'GlobalAddAtomA', 'WORD',[
|
1973
|
-
["PCHAR","lpString","in"],
|
1974
|
-
])
|
1975
|
-
|
1976
|
-
railgun.add_function('kernel32', 'GlobalAddAtomW', 'WORD',[
|
1977
|
-
["PWCHAR","lpString","in"],
|
1978
|
-
])
|
1979
|
-
|
1980
|
-
railgun.add_function('kernel32', 'GlobalAlloc', 'DWORD',[
|
1981
|
-
["DWORD","uFlags","in"],
|
1982
|
-
["DWORD","dwBytes","in"],
|
1983
|
-
])
|
1984
|
-
|
1985
|
-
railgun.add_function('kernel32', 'GlobalCompact', 'DWORD',[
|
1986
|
-
["DWORD","dwMinFree","in"],
|
1987
|
-
])
|
1988
|
-
|
1989
|
-
railgun.add_function('kernel32', 'GlobalDeleteAtom', 'WORD',[
|
1990
|
-
["WORD","nAtom","in"],
|
1991
|
-
])
|
1992
|
-
|
1993
|
-
railgun.add_function('kernel32', 'GlobalFindAtomA', 'WORD',[
|
1994
|
-
["PCHAR","lpString","in"],
|
1995
|
-
])
|
1996
|
-
|
1997
|
-
railgun.add_function('kernel32', 'GlobalFindAtomW', 'WORD',[
|
1998
|
-
["PWCHAR","lpString","in"],
|
1999
|
-
])
|
2000
|
-
|
2001
|
-
railgun.add_function('kernel32', 'GlobalFix', 'VOID',[
|
2002
|
-
["HANDLE","hMem","in"],
|
2003
|
-
])
|
2004
|
-
|
2005
|
-
railgun.add_function('kernel32', 'GlobalFlags', 'DWORD',[
|
2006
|
-
["HANDLE","hMem","in"],
|
2007
|
-
])
|
2008
|
-
|
2009
|
-
railgun.add_function('kernel32', 'GlobalFree', 'DWORD',[
|
2010
|
-
["HANDLE","hMem","in"],
|
2011
|
-
])
|
2012
|
-
|
2013
|
-
railgun.add_function('kernel32', 'GlobalGetAtomNameA', 'DWORD',[
|
2014
|
-
["WORD","nAtom","in"],
|
2015
|
-
["PCHAR","lpBuffer","out"],
|
2016
|
-
["DWORD","nSize","in"],
|
2017
|
-
])
|
2018
|
-
|
2019
|
-
railgun.add_function('kernel32', 'GlobalGetAtomNameW', 'DWORD',[
|
2020
|
-
["WORD","nAtom","in"],
|
2021
|
-
["PWCHAR","lpBuffer","out"],
|
2022
|
-
["DWORD","nSize","in"],
|
2023
|
-
])
|
2024
|
-
|
2025
|
-
railgun.add_function('kernel32', 'GlobalHandle', 'DWORD',[
|
2026
|
-
["PBLOB","pMem","in"],
|
2027
|
-
])
|
2028
|
-
|
2029
|
-
railgun.add_function('kernel32', 'GlobalLock', 'LPVOID',[
|
2030
|
-
["HANDLE","hMem","in"],
|
2031
|
-
])
|
2032
|
-
|
2033
|
-
railgun.add_function('kernel32', 'GlobalMemoryStatus', 'VOID',[
|
2034
|
-
["PBLOB","lpBuffer","out"],
|
2035
|
-
])
|
2036
|
-
|
2037
|
-
railgun.add_function('kernel32', 'GlobalMemoryStatusEx', 'BOOL',[
|
2038
|
-
["PBLOB","lpBuffer","out"],
|
2039
|
-
])
|
2040
|
-
|
2041
|
-
railgun.add_function('kernel32', 'GlobalReAlloc', 'DWORD',[
|
2042
|
-
["HANDLE","hMem","in"],
|
2043
|
-
["DWORD","dwBytes","in"],
|
2044
|
-
["DWORD","uFlags","in"],
|
2045
|
-
])
|
2046
|
-
|
2047
|
-
railgun.add_function('kernel32', 'GlobalSize', 'DWORD',[
|
2048
|
-
["HANDLE","hMem","in"],
|
2049
|
-
])
|
2050
|
-
|
2051
|
-
railgun.add_function('kernel32', 'GlobalUnWire', 'BOOL',[
|
2052
|
-
["HANDLE","hMem","in"],
|
2053
|
-
])
|
2054
|
-
|
2055
|
-
railgun.add_function('kernel32', 'GlobalUnfix', 'VOID',[
|
2056
|
-
["HANDLE","hMem","in"],
|
2057
|
-
])
|
2058
|
-
|
2059
|
-
railgun.add_function('kernel32', 'GlobalUnlock', 'BOOL',[
|
2060
|
-
["HANDLE","hMem","in"],
|
2061
|
-
])
|
2062
|
-
|
2063
|
-
railgun.add_function('kernel32', 'GlobalWire', 'LPVOID',[
|
2064
|
-
["HANDLE","hMem","in"],
|
2065
|
-
])
|
2066
|
-
|
2067
|
-
railgun.add_function('kernel32', 'HeapAlloc', 'LPVOID',[
|
2068
|
-
["HANDLE","hHeap","in"],
|
2069
|
-
["DWORD","dwFlags","in"],
|
2070
|
-
["DWORD","dwBytes","in"],
|
2071
|
-
])
|
2072
|
-
|
2073
|
-
railgun.add_function('kernel32', 'HeapCompact', 'DWORD',[
|
2074
|
-
["HANDLE","hHeap","in"],
|
2075
|
-
["DWORD","dwFlags","in"],
|
2076
|
-
])
|
2077
|
-
|
2078
|
-
railgun.add_function('kernel32', 'HeapCreate', 'DWORD',[
|
2079
|
-
["DWORD","flOptions","in"],
|
2080
|
-
["DWORD","dwInitialSize","in"],
|
2081
|
-
["DWORD","dwMaximumSize","in"],
|
2082
|
-
])
|
2083
|
-
|
2084
|
-
railgun.add_function('kernel32', 'HeapDestroy', 'BOOL',[
|
2085
|
-
["HANDLE","hHeap","in"],
|
2086
|
-
])
|
2087
|
-
|
2088
|
-
railgun.add_function('kernel32', 'HeapFree', 'BOOL',[
|
2089
|
-
["HANDLE","hHeap","inout"],
|
2090
|
-
["DWORD","dwFlags","in"],
|
2091
|
-
["LPVOID","lpMem","in"],
|
2092
|
-
])
|
2093
|
-
|
2094
|
-
railgun.add_function('kernel32', 'HeapLock', 'BOOL',[
|
2095
|
-
["HANDLE","hHeap","in"],
|
2096
|
-
])
|
2097
|
-
|
2098
|
-
railgun.add_function('kernel32', 'HeapQueryInformation', 'BOOL',[
|
2099
|
-
["HANDLE","heapHandle","in"],
|
2100
|
-
["PDWORD","HeapInformationClass","in"],
|
2101
|
-
["PBLOB","HeapInformation","out"],
|
2102
|
-
["HANDLE","heapInformationLength","in"],
|
2103
|
-
["PDWORD","ReturnLength","out"],
|
2104
|
-
])
|
2105
|
-
|
2106
|
-
railgun.add_function('kernel32', 'HeapReAlloc', 'LPVOID',[
|
2107
|
-
["HANDLE","hHeap","inout"],
|
2108
|
-
["DWORD","dwFlags","in"],
|
2109
|
-
["LPVOID","lpMem","in"],
|
2110
|
-
["DWORD","dwBytes","in"],
|
2111
|
-
])
|
2112
|
-
|
2113
|
-
railgun.add_function('kernel32', 'HeapSetInformation', 'BOOL',[
|
2114
|
-
["HANDLE","heapHandle","in"],
|
2115
|
-
["PDWORD","HeapInformationClass","in"],
|
2116
|
-
["PBLOB","HeapInformation","in"],
|
2117
|
-
["HANDLE","heapInformationLength","in"],
|
2118
|
-
])
|
2119
|
-
|
2120
|
-
railgun.add_function('kernel32', 'HeapSize', 'DWORD',[
|
2121
|
-
["HANDLE","hHeap","in"],
|
2122
|
-
["DWORD","dwFlags","in"],
|
2123
|
-
["LPVOID","lpMem","in"],
|
2124
|
-
])
|
2125
|
-
|
2126
|
-
railgun.add_function('kernel32', 'HeapUnlock', 'BOOL',[
|
2127
|
-
["HANDLE","hHeap","in"],
|
2128
|
-
])
|
2129
|
-
|
2130
|
-
railgun.add_function('kernel32', 'HeapValidate', 'BOOL',[
|
2131
|
-
["HANDLE","hHeap","in"],
|
2132
|
-
["DWORD","dwFlags","in"],
|
2133
|
-
["LPVOID","lpMem","in"],
|
2134
|
-
])
|
2135
|
-
|
2136
|
-
railgun.add_function('kernel32', 'HeapWalk', 'BOOL',[
|
2137
|
-
["HANDLE","hHeap","in"],
|
2138
|
-
["PBLOB","lpEntry","inout"],
|
2139
|
-
])
|
2140
|
-
|
2141
|
-
railgun.add_function('kernel32', 'InitAtomTable', 'BOOL',[
|
2142
|
-
["DWORD","nSize","in"],
|
2143
|
-
])
|
2144
|
-
|
2145
|
-
railgun.add_function('kernel32', 'InitializeCriticalSection', 'VOID',[
|
2146
|
-
["PBLOB","lpCriticalSection","out"],
|
2147
|
-
])
|
2148
|
-
|
2149
|
-
railgun.add_function('kernel32', 'InitializeCriticalSectionAndSpinCount', 'BOOL',[
|
2150
|
-
["PBLOB","lpCriticalSection","out"],
|
2151
|
-
["DWORD","dwSpinCount","in"],
|
2152
|
-
])
|
2153
|
-
|
2154
|
-
railgun.add_function('kernel32', 'InitializeSListHead', 'VOID',[
|
2155
|
-
["PBLOB","ListHead","inout"],
|
2156
|
-
])
|
2157
|
-
|
2158
|
-
railgun.add_function('kernel32', 'InterlockedCompareExchange', 'DWORD',[
|
2159
|
-
["PDWORD","Destination","inout"],
|
2160
|
-
["DWORD","ExChange","in"],
|
2161
|
-
["DWORD","Comperand","in"],
|
2162
|
-
])
|
2163
|
-
|
2164
|
-
railgun.add_function('kernel32', 'InterlockedCompareExchange64', 'LPVOID',[
|
2165
|
-
["PBLOB","Destination","inout"],
|
2166
|
-
["PBLOB","ExChange","in"],
|
2167
|
-
["PBLOB","Comperand","in"],
|
2168
|
-
])
|
2169
|
-
|
2170
|
-
railgun.add_function('kernel32', 'InterlockedDecrement', 'DWORD',[
|
2171
|
-
["PDWORD","lpAddend","inout"],
|
2172
|
-
])
|
2173
|
-
|
2174
|
-
railgun.add_function('kernel32', 'InterlockedExchange', 'DWORD',[
|
2175
|
-
["PDWORD","Target","inout"],
|
2176
|
-
["DWORD","Value","in"],
|
2177
|
-
])
|
2178
|
-
|
2179
|
-
railgun.add_function('kernel32', 'InterlockedExchangeAdd', 'DWORD',[
|
2180
|
-
["PDWORD","Addend","inout"],
|
2181
|
-
["DWORD","Value","in"],
|
2182
|
-
])
|
2183
|
-
|
2184
|
-
railgun.add_function('kernel32', 'InterlockedFlushSList', 'LPVOID',[
|
2185
|
-
["PBLOB","ListHead","inout"],
|
2186
|
-
])
|
2187
|
-
|
2188
|
-
railgun.add_function('kernel32', 'InterlockedIncrement', 'DWORD',[
|
2189
|
-
["PDWORD","lpAddend","inout"],
|
2190
|
-
])
|
2191
|
-
|
2192
|
-
railgun.add_function('kernel32', 'InterlockedPopEntrySList', 'LPVOID',[
|
2193
|
-
["PBLOB","ListHead","inout"],
|
2194
|
-
])
|
2195
|
-
|
2196
|
-
railgun.add_function('kernel32', 'InterlockedPushEntrySList', 'LPVOID',[
|
2197
|
-
["PBLOB","ListHead","inout"],
|
2198
|
-
["PBLOB","ListEntry","inout"],
|
2199
|
-
])
|
2200
|
-
|
2201
|
-
railgun.add_function('kernel32', 'IsBadCodePtr', 'BOOL',[
|
2202
|
-
["PBLOB","lpfn","in"],
|
2203
|
-
])
|
2204
|
-
|
2205
|
-
railgun.add_function('kernel32', 'IsBadHugeReadPtr', 'BOOL',[
|
2206
|
-
["DWORD","ucb","in"],
|
2207
|
-
])
|
2208
|
-
|
2209
|
-
railgun.add_function('kernel32', 'IsBadHugeWritePtr', 'BOOL',[
|
2210
|
-
["PBLOB","lp","in"],
|
2211
|
-
["DWORD","ucb","in"],
|
2212
|
-
])
|
2213
|
-
|
2214
|
-
railgun.add_function('kernel32', 'IsBadReadPtr', 'BOOL',[
|
2215
|
-
["DWORD","ucb","in"],
|
2216
|
-
])
|
2217
|
-
|
2218
|
-
railgun.add_function('kernel32', 'IsBadStringPtrA', 'BOOL',[
|
2219
|
-
["PCHAR","lpsz","in"],
|
2220
|
-
["DWORD","ucchMax","in"],
|
2221
|
-
])
|
2222
|
-
|
2223
|
-
railgun.add_function('kernel32', 'IsBadStringPtrW', 'BOOL',[
|
2224
|
-
["PWCHAR","lpsz","in"],
|
2225
|
-
["DWORD","ucchMax","in"],
|
2226
|
-
])
|
2227
|
-
|
2228
|
-
railgun.add_function('kernel32', 'IsBadWritePtr', 'BOOL',[
|
2229
|
-
["PBLOB","lp","in"],
|
2230
|
-
["DWORD","ucb","in"],
|
2231
|
-
])
|
2232
|
-
|
2233
|
-
railgun.add_function('kernel32', 'IsDebuggerPresent', 'BOOL',[
|
2234
|
-
])
|
2235
|
-
|
2236
|
-
railgun.add_function('kernel32', 'IsProcessInJob', 'BOOL',[
|
2237
|
-
["DWORD","ProcessHandle","in"],
|
2238
|
-
["DWORD","JobHandle","in"],
|
2239
|
-
["PBLOB","Result","out"],
|
2240
|
-
])
|
2241
|
-
|
2242
|
-
railgun.add_function('kernel32', 'IsProcessorFeaturePresent', 'BOOL',[
|
2243
|
-
["DWORD","ProcessorFeature","in"],
|
2244
|
-
])
|
2245
|
-
|
2246
|
-
railgun.add_function('kernel32', 'IsSystemResumeAutomatic', 'BOOL',[
|
2247
|
-
])
|
2248
|
-
|
2249
|
-
railgun.add_function('kernel32', 'IsWow64Process', 'BOOL',[
|
2250
|
-
["HANDLE","hProcess","in"],
|
2251
|
-
["PBLOB","Wow64Process","out"],
|
2252
|
-
])
|
2253
|
-
|
2254
|
-
railgun.add_function('kernel32', 'LeaveCriticalSection', 'VOID',[
|
2255
|
-
["PBLOB","lpCriticalSection","inout"],
|
2256
|
-
])
|
2257
|
-
|
2258
|
-
railgun.add_function('kernel32', 'LoadLibraryA', 'DWORD',[
|
2259
|
-
["PCHAR","lpLibFileName","in"],
|
2260
|
-
])
|
2261
|
-
|
2262
|
-
railgun.add_function('kernel32', 'LoadLibraryExA', 'DWORD',[
|
2263
|
-
["PCHAR","lpLibFileName","in"],
|
2264
|
-
["HANDLE","hFile","inout"],
|
2265
|
-
["DWORD","dwFlags","in"],
|
2266
|
-
])
|
2267
|
-
|
2268
|
-
railgun.add_function('kernel32', 'LoadLibraryExW', 'DWORD',[
|
2269
|
-
["PWCHAR","lpLibFileName","in"],
|
2270
|
-
["HANDLE","hFile","inout"],
|
2271
|
-
["DWORD","dwFlags","in"],
|
2272
|
-
])
|
2273
|
-
|
2274
|
-
railgun.add_function('kernel32', 'LoadLibraryW', 'DWORD',[
|
2275
|
-
["PWCHAR","lpLibFileName","in"],
|
2276
|
-
])
|
2277
|
-
|
2278
|
-
railgun.add_function('kernel32', 'LoadModule', 'DWORD',[
|
2279
|
-
["PCHAR","lpModuleName","in"],
|
2280
|
-
["PBLOB","lpParameterBlock","in"],
|
2281
|
-
])
|
2282
|
-
|
2283
|
-
railgun.add_function('kernel32', 'LoadResource', 'DWORD',[
|
2284
|
-
["HANDLE","hModule","in"],
|
2285
|
-
["HANDLE","hResInfo","in"],
|
2286
|
-
])
|
2287
|
-
|
2288
|
-
railgun.add_function('kernel32', 'LocalAlloc', 'DWORD',[
|
2289
|
-
["DWORD","uFlags","in"],
|
2290
|
-
["DWORD","uBytes","in"],
|
2291
|
-
])
|
2292
|
-
|
2293
|
-
railgun.add_function('kernel32', 'LocalCompact', 'DWORD',[
|
2294
|
-
["DWORD","uMinFree","in"],
|
2295
|
-
])
|
2296
|
-
|
2297
|
-
railgun.add_function('kernel32', 'LocalFileTimeToFileTime', 'BOOL',[
|
2298
|
-
["PBLOB","lpLocalFileTime","in"],
|
2299
|
-
["PBLOB","lpFileTime","out"],
|
2300
|
-
])
|
2301
|
-
|
2302
|
-
railgun.add_function('kernel32', 'LocalFlags', 'DWORD',[
|
2303
|
-
["HANDLE","hMem","in"],
|
2304
|
-
])
|
2305
|
-
|
2306
|
-
railgun.add_function('kernel32', 'LocalFree', 'DWORD',[
|
2307
|
-
["HANDLE","hMem","in"],
|
2308
|
-
])
|
2309
|
-
|
2310
|
-
railgun.add_function('kernel32', 'LocalHandle', 'DWORD',[
|
2311
|
-
["PBLOB","pMem","in"],
|
2312
|
-
])
|
2313
|
-
|
2314
|
-
railgun.add_function('kernel32', 'LocalLock', 'LPVOID',[
|
2315
|
-
["HANDLE","hMem","in"],
|
2316
|
-
])
|
2317
|
-
|
2318
|
-
railgun.add_function('kernel32', 'LocalReAlloc', 'DWORD',[
|
2319
|
-
["HANDLE","hMem","in"],
|
2320
|
-
["DWORD","uBytes","in"],
|
2321
|
-
["DWORD","uFlags","in"],
|
2322
|
-
])
|
2323
|
-
|
2324
|
-
railgun.add_function('kernel32', 'LocalShrink', 'DWORD',[
|
2325
|
-
["HANDLE","hMem","in"],
|
2326
|
-
["DWORD","cbNewSize","in"],
|
2327
|
-
])
|
2328
|
-
|
2329
|
-
railgun.add_function('kernel32', 'LocalSize', 'DWORD',[
|
2330
|
-
["HANDLE","hMem","in"],
|
2331
|
-
])
|
2332
|
-
|
2333
|
-
railgun.add_function('kernel32', 'LocalUnlock', 'BOOL',[
|
2334
|
-
["HANDLE","hMem","in"],
|
2335
|
-
])
|
2336
|
-
|
2337
|
-
railgun.add_function('kernel32', 'LockFile', 'BOOL',[
|
2338
|
-
["HANDLE","hFile","in"],
|
2339
|
-
["DWORD","dwFileOffsetLow","in"],
|
2340
|
-
["DWORD","dwFileOffsetHigh","in"],
|
2341
|
-
["DWORD","nNumberOfBytesToLockLow","in"],
|
2342
|
-
["DWORD","nNumberOfBytesToLockHigh","in"],
|
2343
|
-
])
|
2344
|
-
|
2345
|
-
railgun.add_function('kernel32', 'LockFileEx', 'BOOL',[
|
2346
|
-
["HANDLE","hFile","in"],
|
2347
|
-
["DWORD","dwFlags","in"],
|
2348
|
-
["DWORD","dwReserved","inout"],
|
2349
|
-
["DWORD","nNumberOfBytesToLockLow","in"],
|
2350
|
-
["DWORD","nNumberOfBytesToLockHigh","in"],
|
2351
|
-
["PBLOB","lpOverlapped","inout"],
|
2352
|
-
])
|
2353
|
-
|
2354
|
-
railgun.add_function('kernel32', 'LockResource', 'LPVOID',[
|
2355
|
-
["HANDLE","hResData","in"],
|
2356
|
-
])
|
2357
|
-
|
2358
|
-
railgun.add_function('kernel32', 'MapUserPhysicalPages', 'BOOL',[
|
2359
|
-
["PBLOB","VirtualAddress","in"],
|
2360
|
-
["PDWORD","NumberOfPages","in"],
|
2361
|
-
["PBLOB","PageArray","in"],
|
2362
|
-
])
|
2363
|
-
|
2364
|
-
railgun.add_function('kernel32', 'MapUserPhysicalPagesScatter', 'BOOL',[
|
2365
|
-
["PBLOB","VirtualAddresses","in"],
|
2366
|
-
["PDWORD","NumberOfPages","in"],
|
2367
|
-
["PBLOB","PageArray","in"],
|
2368
|
-
])
|
2369
|
-
|
2370
|
-
railgun.add_function('kernel32', 'MapViewOfFile', 'LPVOID',[
|
2371
|
-
["HANDLE","hFileMappingObject","in"],
|
2372
|
-
["DWORD","dwDesiredAccess","in"],
|
2373
|
-
["DWORD","dwFileOffsetHigh","in"],
|
2374
|
-
["DWORD","dwFileOffsetLow","in"],
|
2375
|
-
["DWORD","dwNumberOfBytesToMap","in"],
|
2376
|
-
])
|
2377
|
-
|
2378
|
-
railgun.add_function('kernel32', 'MapViewOfFileEx', 'LPVOID',[
|
2379
|
-
["HANDLE","hFileMappingObject","in"],
|
2380
|
-
["DWORD","dwDesiredAccess","in"],
|
2381
|
-
["DWORD","dwFileOffsetHigh","in"],
|
2382
|
-
["DWORD","dwFileOffsetLow","in"],
|
2383
|
-
["DWORD","dwNumberOfBytesToMap","in"],
|
2384
|
-
["PBLOB","lpBaseAddress","in"],
|
2385
|
-
])
|
2386
|
-
|
2387
|
-
railgun.add_function('kernel32', 'MoveFileA', 'BOOL',[
|
2388
|
-
["PCHAR","lpExistingFileName","in"],
|
2389
|
-
["PCHAR","lpNewFileName","in"],
|
2390
|
-
])
|
2391
|
-
|
2392
|
-
railgun.add_function('kernel32', 'MoveFileExA', 'BOOL',[
|
2393
|
-
["PCHAR","lpExistingFileName","in"],
|
2394
|
-
["PCHAR","lpNewFileName","in"],
|
2395
|
-
["DWORD","dwFlags","in"],
|
2396
|
-
])
|
2397
|
-
|
2398
|
-
railgun.add_function('kernel32', 'MoveFileExW', 'BOOL',[
|
2399
|
-
["PWCHAR","lpExistingFileName","in"],
|
2400
|
-
["PWCHAR","lpNewFileName","in"],
|
2401
|
-
["DWORD","dwFlags","in"],
|
2402
|
-
])
|
2403
|
-
|
2404
|
-
railgun.add_function('kernel32', 'MoveFileW', 'BOOL',[
|
2405
|
-
["PWCHAR","lpExistingFileName","in"],
|
2406
|
-
["PWCHAR","lpNewFileName","in"],
|
2407
|
-
])
|
2408
|
-
|
2409
|
-
railgun.add_function('kernel32', 'MoveFileWithProgressA', 'BOOL',[
|
2410
|
-
["PCHAR","lpExistingFileName","in"],
|
2411
|
-
["PCHAR","lpNewFileName","in"],
|
2412
|
-
["PBLOB","lpProgressRoutine","in"],
|
2413
|
-
["PBLOB","lpData","in"],
|
2414
|
-
["DWORD","dwFlags","in"],
|
2415
|
-
])
|
2416
|
-
|
2417
|
-
railgun.add_function('kernel32', 'MoveFileWithProgressW', 'BOOL',[
|
2418
|
-
["PWCHAR","lpExistingFileName","in"],
|
2419
|
-
["PWCHAR","lpNewFileName","in"],
|
2420
|
-
["PBLOB","lpProgressRoutine","in"],
|
2421
|
-
["PBLOB","lpData","in"],
|
2422
|
-
["DWORD","dwFlags","in"],
|
2423
|
-
])
|
2424
|
-
|
2425
|
-
railgun.add_function('kernel32', 'MulDiv', 'DWORD',[
|
2426
|
-
["DWORD","nNumber","in"],
|
2427
|
-
["DWORD","nNumerator","in"],
|
2428
|
-
["DWORD","nDenominator","in"],
|
2429
|
-
])
|
2430
|
-
|
2431
|
-
railgun.add_function('kernel32', 'NeedCurrentDirectoryForExePathA', 'BOOL',[
|
2432
|
-
["PCHAR","ExeName","in"],
|
2433
|
-
])
|
2434
|
-
|
2435
|
-
railgun.add_function('kernel32', 'NeedCurrentDirectoryForExePathW', 'BOOL',[
|
2436
|
-
["PWCHAR","ExeName","in"],
|
2437
|
-
])
|
2438
|
-
|
2439
|
-
railgun.add_function('kernel32', 'OpenEventA', 'DWORD',[
|
2440
|
-
["DWORD","dwDesiredAccess","in"],
|
2441
|
-
["BOOL","bInheritHandle","in"],
|
2442
|
-
["PCHAR","lpName","in"],
|
2443
|
-
])
|
2444
|
-
|
2445
|
-
railgun.add_function('kernel32', 'OpenEventW', 'DWORD',[
|
2446
|
-
["DWORD","dwDesiredAccess","in"],
|
2447
|
-
["BOOL","bInheritHandle","in"],
|
2448
|
-
["PWCHAR","lpName","in"],
|
2449
|
-
])
|
2450
|
-
|
2451
|
-
railgun.add_function('kernel32', 'OpenFile', 'DWORD',[
|
2452
|
-
["PCHAR","lpFileName","in"],
|
2453
|
-
["PBLOB","lpReOpenBuff","inout"],
|
2454
|
-
["DWORD","uStyle","in"],
|
2455
|
-
])
|
2456
|
-
|
2457
|
-
railgun.add_function('kernel32', 'OpenFileMappingA', 'DWORD',[
|
2458
|
-
["DWORD","dwDesiredAccess","in"],
|
2459
|
-
["BOOL","bInheritHandle","in"],
|
2460
|
-
["PCHAR","lpName","in"],
|
2461
|
-
])
|
2462
|
-
|
2463
|
-
railgun.add_function('kernel32', 'OpenFileMappingW', 'DWORD',[
|
2464
|
-
["DWORD","dwDesiredAccess","in"],
|
2465
|
-
["BOOL","bInheritHandle","in"],
|
2466
|
-
["PWCHAR","lpName","in"],
|
2467
|
-
])
|
2468
|
-
|
2469
|
-
railgun.add_function('kernel32', 'OpenJobObjectA', 'DWORD',[
|
2470
|
-
["DWORD","dwDesiredAccess","in"],
|
2471
|
-
["BOOL","bInheritHandle","in"],
|
2472
|
-
["PCHAR","lpName","in"],
|
2473
|
-
])
|
2474
|
-
|
2475
|
-
railgun.add_function('kernel32', 'OpenJobObjectW', 'DWORD',[
|
2476
|
-
["DWORD","dwDesiredAccess","in"],
|
2477
|
-
["BOOL","bInheritHandle","in"],
|
2478
|
-
["PWCHAR","lpName","in"],
|
2479
|
-
])
|
2480
|
-
|
2481
|
-
railgun.add_function('kernel32', 'OpenMutexA', 'DWORD',[
|
2482
|
-
["DWORD","dwDesiredAccess","in"],
|
2483
|
-
["BOOL","bInheritHandle","in"],
|
2484
|
-
["PCHAR","lpName","in"],
|
2485
|
-
])
|
2486
|
-
|
2487
|
-
railgun.add_function('kernel32', 'OpenMutexW', 'DWORD',[
|
2488
|
-
["DWORD","dwDesiredAccess","in"],
|
2489
|
-
["BOOL","bInheritHandle","in"],
|
2490
|
-
["PWCHAR","lpName","in"],
|
2491
|
-
])
|
2492
|
-
|
2493
|
-
railgun.add_function('kernel32', 'OpenProcess', 'DWORD',[
|
2494
|
-
["DWORD","dwDesiredAccess","in"],
|
2495
|
-
["BOOL","bInheritHandle","in"],
|
2496
|
-
["DWORD","dwProcessId","in"],
|
2497
|
-
])
|
2498
|
-
|
2499
|
-
railgun.add_function('kernel32', 'OpenSemaphoreA', 'DWORD',[
|
2500
|
-
["DWORD","dwDesiredAccess","in"],
|
2501
|
-
["BOOL","bInheritHandle","in"],
|
2502
|
-
["PCHAR","lpName","in"],
|
2503
|
-
])
|
2504
|
-
|
2505
|
-
railgun.add_function('kernel32', 'OpenSemaphoreW', 'DWORD',[
|
2506
|
-
["DWORD","dwDesiredAccess","in"],
|
2507
|
-
["BOOL","bInheritHandle","in"],
|
2508
|
-
["PWCHAR","lpName","in"],
|
2509
|
-
])
|
2510
|
-
|
2511
|
-
railgun.add_function('kernel32', 'OpenThread', 'DWORD',[
|
2512
|
-
["DWORD","dwDesiredAccess","in"],
|
2513
|
-
["BOOL","bInheritHandle","in"],
|
2514
|
-
["DWORD","dwThreadId","in"],
|
2515
|
-
])
|
2516
|
-
|
2517
|
-
railgun.add_function('kernel32', 'OpenWaitableTimerA', 'DWORD',[
|
2518
|
-
["DWORD","dwDesiredAccess","in"],
|
2519
|
-
["BOOL","bInheritHandle","in"],
|
2520
|
-
["PCHAR","lpTimerName","in"],
|
2521
|
-
])
|
2522
|
-
|
2523
|
-
railgun.add_function('kernel32', 'OpenWaitableTimerW', 'DWORD',[
|
2524
|
-
["DWORD","dwDesiredAccess","in"],
|
2525
|
-
["BOOL","bInheritHandle","in"],
|
2526
|
-
["PWCHAR","lpTimerName","in"],
|
2527
|
-
])
|
2528
|
-
|
2529
|
-
railgun.add_function('kernel32', 'OutputDebugStringA', 'VOID',[
|
2530
|
-
["PCHAR","lpOutputString","in"],
|
2531
|
-
])
|
2532
|
-
|
2533
|
-
railgun.add_function('kernel32', 'OutputDebugStringW', 'VOID',[
|
2534
|
-
["PWCHAR","lpOutputString","in"],
|
2535
|
-
])
|
2536
|
-
|
2537
|
-
railgun.add_function('kernel32', 'PeekNamedPipe', 'BOOL',[
|
2538
|
-
["HANDLE","hNamedPipe","in"],
|
2539
|
-
["PBLOB","lpBuffer","out"],
|
2540
|
-
["DWORD","nBufferSize","in"],
|
2541
|
-
["PDWORD","lpBytesRead","out"],
|
2542
|
-
["PDWORD","lpTotalBytesAvail","out"],
|
2543
|
-
["PDWORD","lpBytesLeftThisMessage","out"],
|
2544
|
-
])
|
2545
|
-
|
2546
|
-
railgun.add_function('kernel32', 'PostQueuedCompletionStatus', 'BOOL',[
|
2547
|
-
["DWORD","CompletionPort","in"],
|
2548
|
-
["DWORD","dwNumberOfBytesTransferred","in"],
|
2549
|
-
["PDWORD","dwCompletionKey","in"],
|
2550
|
-
["PBLOB","lpOverlapped","in"],
|
2551
|
-
])
|
2552
|
-
|
2553
|
-
railgun.add_function('kernel32', 'PrepareTape', 'DWORD',[
|
2554
|
-
["HANDLE","hDevice","in"],
|
2555
|
-
["DWORD","dwOperation","in"],
|
2556
|
-
["BOOL","bImmediate","in"],
|
2557
|
-
])
|
2558
|
-
|
2559
|
-
railgun.add_function('kernel32', 'ProcessIdToSessionId', 'BOOL',[
|
2560
|
-
["DWORD","dwProcessId","in"],
|
2561
|
-
["PDWORD","pSessionId","out"],
|
2562
|
-
])
|
2563
|
-
|
2564
|
-
railgun.add_function('kernel32', 'PulseEvent', 'BOOL',[
|
2565
|
-
["HANDLE","hEvent","in"],
|
2566
|
-
])
|
2567
|
-
|
2568
|
-
railgun.add_function('kernel32', 'PurgeComm', 'BOOL',[
|
2569
|
-
["HANDLE","hFile","in"],
|
2570
|
-
["DWORD","dwFlags","in"],
|
2571
|
-
])
|
2572
|
-
|
2573
|
-
railgun.add_function('kernel32', 'QueryActCtxW', 'BOOL',[
|
2574
|
-
["DWORD","dwFlags","in"],
|
2575
|
-
["HANDLE","hActCtx","in"],
|
2576
|
-
["PBLOB","pvSubInstance","in"],
|
2577
|
-
["DWORD","ulInfoClass","in"],
|
2578
|
-
["PBLOB","pvBuffer","out"],
|
2579
|
-
["DWORD","cbBuffer","in"],
|
2580
|
-
["PDWORD","pcbWrittenOrRequired","out"],
|
2581
|
-
])
|
2582
|
-
|
2583
|
-
railgun.add_function('kernel32', 'QueryDepthSList', 'WORD',[
|
2584
|
-
["PBLOB","ListHead","in"],
|
2585
|
-
])
|
2586
|
-
|
2587
|
-
railgun.add_function('kernel32', 'QueryDosDeviceA', 'DWORD',[
|
2588
|
-
["PCHAR","lpDeviceName","in"],
|
2589
|
-
["PCHAR","lpTargetPath","out"],
|
2590
|
-
["DWORD","ucchMax","in"],
|
2591
|
-
])
|
2592
|
-
|
2593
|
-
railgun.add_function('kernel32', 'QueryDosDeviceW', 'DWORD',[
|
2594
|
-
["PWCHAR","lpDeviceName","in"],
|
2595
|
-
["PWCHAR","lpTargetPath","out"],
|
2596
|
-
["DWORD","ucchMax","in"],
|
2597
|
-
])
|
2598
|
-
|
2599
|
-
railgun.add_function('kernel32', 'QueryInformationJobObject', 'BOOL',[
|
2600
|
-
["HANDLE","hJob","in"],
|
2601
|
-
["PBLOB","JobObjectInformationClass","in"],
|
2602
|
-
["PBLOB","lpJobObjectInformation","out"],
|
2603
|
-
["DWORD","cbJobObjectInformationLength","in"],
|
2604
|
-
["PDWORD","lpReturnLength","out"],
|
2605
|
-
])
|
2606
|
-
|
2607
|
-
railgun.add_function('kernel32', 'QueryMemoryResourceNotification', 'BOOL',[
|
2608
|
-
["DWORD","ResourceNotificationHandle","in"],
|
2609
|
-
["PBLOB","ResourceState","out"],
|
2610
|
-
])
|
2611
|
-
|
2612
|
-
railgun.add_function('kernel32', 'QueryPerformanceCounter', 'BOOL',[
|
2613
|
-
["PBLOB","lpPerformanceCount","out"],
|
2614
|
-
])
|
2615
|
-
|
2616
|
-
railgun.add_function('kernel32', 'QueryPerformanceFrequency', 'BOOL',[
|
2617
|
-
["PBLOB","lpFrequency","out"],
|
2618
|
-
])
|
2619
|
-
|
2620
|
-
railgun.add_function('kernel32', 'QueueUserAPC', 'DWORD',[
|
2621
|
-
["PBLOB","pfnAPC","in"],
|
2622
|
-
["HANDLE","hThread","in"],
|
2623
|
-
["PDWORD","dwData","in"],
|
2624
|
-
])
|
2625
|
-
|
2626
|
-
railgun.add_function('kernel32', 'QueueUserWorkItem', 'BOOL',[
|
2627
|
-
["PBLOB","Function","in"],
|
2628
|
-
["PBLOB","Context","in"],
|
2629
|
-
["DWORD","Flags","in"],
|
2630
|
-
])
|
2631
|
-
|
2632
|
-
railgun.add_function('kernel32', 'RaiseException', 'VOID',[
|
2633
|
-
["DWORD","dwExceptionCode","in"],
|
2634
|
-
["DWORD","dwExceptionFlags","in"],
|
2635
|
-
["DWORD","nNumberOfArguments","in"],
|
2636
|
-
["PBLOB","lpArguments","in"],
|
2637
|
-
])
|
2638
|
-
|
2639
|
-
railgun.add_function('kernel32', 'ReOpenFile', 'DWORD',[
|
2640
|
-
["HANDLE","hOriginalFile","in"],
|
2641
|
-
["DWORD","dwDesiredAccess","in"],
|
2642
|
-
["DWORD","dwShareMode","in"],
|
2643
|
-
["DWORD","dwFlagsAndAttributes","in"],
|
2644
|
-
])
|
2645
|
-
|
2646
|
-
railgun.add_function('kernel32', 'ReadDirectoryChangesW', 'BOOL',[
|
2647
|
-
["HANDLE","hDirectory","in"],
|
2648
|
-
["PBLOB","lpBuffer","out"],
|
2649
|
-
["DWORD","nBufferLength","in"],
|
2650
|
-
["BOOL","bWatchSubtree","in"],
|
2651
|
-
["DWORD","dwNotifyFilter","in"],
|
2652
|
-
["PDWORD","lpBytesReturned","out"],
|
2653
|
-
["PBLOB","lpOverlapped","inout"],
|
2654
|
-
["PBLOB","lpCompletionRoutine","in"],
|
2655
|
-
])
|
2656
|
-
|
2657
|
-
railgun.add_function('kernel32', 'ReadFile', 'BOOL',[
|
2658
|
-
["HANDLE","hFile","in"],
|
2659
|
-
["PBLOB","lpBuffer","out"],
|
2660
|
-
["DWORD","nNumberOfBytesToRead","in"],
|
2661
|
-
["PDWORD","lpNumberOfBytesRead","out"],
|
2662
|
-
["PBLOB","lpOverlapped","inout"],
|
2663
|
-
])
|
2664
|
-
|
2665
|
-
railgun.add_function('kernel32', 'ReadFileEx', 'BOOL',[
|
2666
|
-
["HANDLE","hFile","in"],
|
2667
|
-
["PBLOB","lpBuffer","out"],
|
2668
|
-
["DWORD","nNumberOfBytesToRead","in"],
|
2669
|
-
["PBLOB","lpOverlapped","inout"],
|
2670
|
-
["PBLOB","lpCompletionRoutine","in"],
|
2671
|
-
])
|
2672
|
-
|
2673
|
-
railgun.add_function('kernel32', 'ReadFileScatter', 'BOOL',[
|
2674
|
-
["HANDLE","hFile","in"],
|
2675
|
-
["PBLOB","aSegmentArray[]","in"],
|
2676
|
-
["DWORD","nNumberOfBytesToRead","in"],
|
2677
|
-
["PDWORD","lpReserved","inout"],
|
2678
|
-
["PBLOB","lpOverlapped","inout"],
|
2679
|
-
])
|
2680
|
-
|
2681
|
-
railgun.add_function('kernel32', 'ReadProcessMemory', 'BOOL',[
|
2682
|
-
["HANDLE","hProcess","in"],
|
2683
|
-
["PBLOB","lpBaseAddress","in"],
|
2684
|
-
["PBLOB","lpBuffer","out"],
|
2685
|
-
["DWORD","nSize","in"],
|
2686
|
-
["PDWORD","lpNumberOfBytesRead","out"],
|
2687
|
-
])
|
2688
|
-
|
2689
|
-
railgun.add_function('kernel32', 'RegisterWaitForSingleObject', 'BOOL',[
|
2690
|
-
["PDWORD","phNewWaitObject","out"],
|
2691
|
-
["HANDLE","hObject","in"],
|
2692
|
-
["PBLOB","Callback","in"],
|
2693
|
-
["PBLOB","Context","in"],
|
2694
|
-
["DWORD","dwMilliseconds","in"],
|
2695
|
-
["DWORD","dwFlags","in"],
|
2696
|
-
])
|
2697
|
-
|
2698
|
-
railgun.add_function('kernel32', 'RegisterWaitForSingleObjectEx', 'DWORD',[
|
2699
|
-
["HANDLE","hObject","in"],
|
2700
|
-
["PBLOB","Callback","in"],
|
2701
|
-
["PBLOB","Context","in"],
|
2702
|
-
["DWORD","dwMilliseconds","in"],
|
2703
|
-
["DWORD","dwFlags","in"],
|
2704
|
-
])
|
2705
|
-
|
2706
|
-
railgun.add_function('kernel32', 'ReleaseActCtx', 'VOID',[
|
2707
|
-
["HANDLE","hActCtx","inout"],
|
2708
|
-
])
|
2709
|
-
|
2710
|
-
railgun.add_function('kernel32', 'ReleaseMutex', 'BOOL',[
|
2711
|
-
["HANDLE","hMutex","in"],
|
2712
|
-
])
|
2713
|
-
|
2714
|
-
railgun.add_function('kernel32', 'ReleaseSemaphore', 'BOOL',[
|
2715
|
-
["HANDLE","hSemaphore","in"],
|
2716
|
-
["DWORD","lReleaseCount","in"],
|
2717
|
-
["PBLOB","lpPreviousCount","out"],
|
2718
|
-
])
|
2719
|
-
|
2720
|
-
railgun.add_function('kernel32', 'RemoveDirectoryA', 'BOOL',[
|
2721
|
-
["PCHAR","lpPathName","in"],
|
2722
|
-
])
|
2723
|
-
|
2724
|
-
railgun.add_function('kernel32', 'RemoveDirectoryW', 'BOOL',[
|
2725
|
-
["PWCHAR","lpPathName","in"],
|
2726
|
-
])
|
2727
|
-
|
2728
|
-
railgun.add_function('kernel32', 'RemoveVectoredContinueHandler', 'DWORD',[
|
2729
|
-
["PBLOB","Handle","in"],
|
2730
|
-
])
|
2731
|
-
|
2732
|
-
railgun.add_function('kernel32', 'RemoveVectoredExceptionHandler', 'DWORD',[
|
2733
|
-
["PBLOB","Handle","in"],
|
2734
|
-
])
|
2735
|
-
|
2736
|
-
railgun.add_function('kernel32', 'ReplaceFileA', 'BOOL',[
|
2737
|
-
["PCHAR","lpReplacedFileName","in"],
|
2738
|
-
["PCHAR","lpReplacementFileName","in"],
|
2739
|
-
["PCHAR","lpBackupFileName","in"],
|
2740
|
-
["DWORD","dwReplaceFlags","in"],
|
2741
|
-
["PBLOB","lpExclude","inout"],
|
2742
|
-
["PBLOB","lpReserved","inout"],
|
2743
|
-
])
|
2744
|
-
|
2745
|
-
railgun.add_function('kernel32', 'ReplaceFileW', 'BOOL',[
|
2746
|
-
["PWCHAR","lpReplacedFileName","in"],
|
2747
|
-
["PWCHAR","lpReplacementFileName","in"],
|
2748
|
-
["PWCHAR","lpBackupFileName","in"],
|
2749
|
-
["DWORD","dwReplaceFlags","in"],
|
2750
|
-
["PBLOB","lpExclude","inout"],
|
2751
|
-
["PBLOB","lpReserved","inout"],
|
2752
|
-
])
|
2753
|
-
|
2754
|
-
railgun.add_function('kernel32', 'RequestDeviceWakeup', 'BOOL',[
|
2755
|
-
["HANDLE","hDevice","in"],
|
2756
|
-
])
|
2757
|
-
|
2758
|
-
railgun.add_function('kernel32', 'RequestWakeupLatency', 'BOOL',[
|
2759
|
-
["PBLOB","latency","in"],
|
2760
|
-
])
|
2761
|
-
|
2762
|
-
railgun.add_function('kernel32', 'ResetEvent', 'BOOL',[
|
2763
|
-
["HANDLE","hEvent","in"],
|
2764
|
-
])
|
2765
|
-
|
2766
|
-
railgun.add_function('kernel32', 'ResetWriteWatch', 'DWORD',[
|
2767
|
-
["PBLOB","lpBaseAddress","in"],
|
2768
|
-
["DWORD","dwRegionSize","in"],
|
2769
|
-
])
|
2770
|
-
|
2771
|
-
railgun.add_function('kernel32', 'RestoreLastError', 'VOID',[
|
2772
|
-
["DWORD","dwErrCode","in"],
|
2773
|
-
])
|
2774
|
-
|
2775
|
-
railgun.add_function('kernel32', 'ResumeThread', 'DWORD',[
|
2776
|
-
["HANDLE","hThread","in"],
|
2777
|
-
])
|
2778
|
-
|
2779
|
-
railgun.add_function('kernel32', 'SearchPathA', 'DWORD',[
|
2780
|
-
["PCHAR","lpPath","in"],
|
2781
|
-
["PCHAR","lpFileName","in"],
|
2782
|
-
["PCHAR","lpExtension","in"],
|
2783
|
-
["DWORD","nBufferLength","in"],
|
2784
|
-
["PCHAR","lpBuffer","out"],
|
2785
|
-
["PBLOB","lpFilePart","out"],
|
2786
|
-
])
|
2787
|
-
|
2788
|
-
railgun.add_function('kernel32', 'SearchPathW', 'DWORD',[
|
2789
|
-
["PWCHAR","lpPath","in"],
|
2790
|
-
["PWCHAR","lpFileName","in"],
|
2791
|
-
["PWCHAR","lpExtension","in"],
|
2792
|
-
["DWORD","nBufferLength","in"],
|
2793
|
-
["PWCHAR","lpBuffer","out"],
|
2794
|
-
["PBLOB","lpFilePart","out"],
|
2795
|
-
])
|
2796
|
-
|
2797
|
-
railgun.add_function('kernel32', 'SetCommBreak', 'BOOL',[
|
2798
|
-
["HANDLE","hFile","in"],
|
2799
|
-
])
|
2800
|
-
|
2801
|
-
railgun.add_function('kernel32', 'SetCommConfig', 'BOOL',[
|
2802
|
-
["HANDLE","hCommDev","in"],
|
2803
|
-
["PBLOB","lpCC","in"],
|
2804
|
-
["DWORD","dwSize","in"],
|
2805
|
-
])
|
2806
|
-
|
2807
|
-
railgun.add_function('kernel32', 'SetCommMask', 'BOOL',[
|
2808
|
-
["HANDLE","hFile","in"],
|
2809
|
-
["DWORD","dwEvtMask","in"],
|
2810
|
-
])
|
2811
|
-
|
2812
|
-
railgun.add_function('kernel32', 'SetCommState', 'BOOL',[
|
2813
|
-
["HANDLE","hFile","in"],
|
2814
|
-
["PBLOB","lpDCB","in"],
|
2815
|
-
])
|
2816
|
-
|
2817
|
-
railgun.add_function('kernel32', 'SetCommTimeouts', 'BOOL',[
|
2818
|
-
["HANDLE","hFile","in"],
|
2819
|
-
["PBLOB","lpCommTimeouts","in"],
|
2820
|
-
])
|
2821
|
-
|
2822
|
-
railgun.add_function('kernel32', 'SetComputerNameA', 'BOOL',[
|
2823
|
-
["PCHAR","lpComputerName","in"],
|
2824
|
-
])
|
2825
|
-
|
2826
|
-
railgun.add_function('kernel32', 'SetComputerNameExA', 'BOOL',[
|
2827
|
-
["DWORD","NameType","in"],
|
2828
|
-
["PCHAR","lpBuffer","in"],
|
2829
|
-
])
|
2830
|
-
|
2831
|
-
railgun.add_function('kernel32', 'SetComputerNameExW', 'BOOL',[
|
2832
|
-
["DWORD","NameType","in"],
|
2833
|
-
["PWCHAR","lpBuffer","in"],
|
2834
|
-
])
|
2835
|
-
|
2836
|
-
railgun.add_function('kernel32', 'SetComputerNameW', 'BOOL',[
|
2837
|
-
["PWCHAR","lpComputerName","in"],
|
2838
|
-
])
|
2839
|
-
|
2840
|
-
railgun.add_function('kernel32', 'SetCriticalSectionSpinCount', 'DWORD',[
|
2841
|
-
["PBLOB","lpCriticalSection","inout"],
|
2842
|
-
["DWORD","dwSpinCount","in"],
|
2843
|
-
])
|
2844
|
-
|
2845
|
-
railgun.add_function('kernel32', 'SetCurrentDirectoryA', 'BOOL',[
|
2846
|
-
["PCHAR","lpPathName","in"],
|
2847
|
-
])
|
2848
|
-
|
2849
|
-
railgun.add_function('kernel32', 'SetCurrentDirectoryW', 'BOOL',[
|
2850
|
-
["PWCHAR","lpPathName","in"],
|
2851
|
-
])
|
2852
|
-
|
2853
|
-
railgun.add_function('kernel32', 'SetDefaultCommConfigA', 'BOOL',[
|
2854
|
-
["PCHAR","lpszName","in"],
|
2855
|
-
["PBLOB","lpCC","in"],
|
2856
|
-
["DWORD","dwSize","in"],
|
2857
|
-
])
|
2858
|
-
|
2859
|
-
railgun.add_function('kernel32', 'SetDefaultCommConfigW', 'BOOL',[
|
2860
|
-
["PWCHAR","lpszName","in"],
|
2861
|
-
["PBLOB","lpCC","in"],
|
2862
|
-
["DWORD","dwSize","in"],
|
2863
|
-
])
|
2864
|
-
|
2865
|
-
railgun.add_function('kernel32', 'SetDllDirectoryA', 'BOOL',[
|
2866
|
-
["PCHAR","lpPathName","in"],
|
2867
|
-
])
|
2868
|
-
|
2869
|
-
railgun.add_function('kernel32', 'SetDllDirectoryW', 'BOOL',[
|
2870
|
-
["PWCHAR","lpPathName","in"],
|
2871
|
-
])
|
2872
|
-
|
2873
|
-
railgun.add_function('kernel32', 'SetEndOfFile', 'BOOL',[
|
2874
|
-
["HANDLE","hFile","in"],
|
2875
|
-
])
|
2876
|
-
|
2877
|
-
railgun.add_function('kernel32', 'SetEnvironmentStringsA', 'BOOL',[
|
2878
|
-
["PBLOB","NewEnvironment","in"],
|
2879
|
-
])
|
2880
|
-
|
2881
|
-
railgun.add_function('kernel32', 'SetEnvironmentStringsW', 'BOOL',[
|
2882
|
-
["PBLOB","NewEnvironment","in"],
|
2883
|
-
])
|
2884
|
-
|
2885
|
-
railgun.add_function('kernel32', 'SetEnvironmentVariableA', 'BOOL',[
|
2886
|
-
["PCHAR","lpName","in"],
|
2887
|
-
["PCHAR","lpValue","in"],
|
2888
|
-
])
|
2889
|
-
|
2890
|
-
railgun.add_function('kernel32', 'SetEnvironmentVariableW', 'BOOL',[
|
2891
|
-
["PWCHAR","lpName","in"],
|
2892
|
-
["PWCHAR","lpValue","in"],
|
2893
|
-
])
|
2894
|
-
|
2895
|
-
railgun.add_function('kernel32', 'SetErrorMode', 'DWORD',[
|
2896
|
-
["DWORD","uMode","in"],
|
2897
|
-
])
|
2898
|
-
|
2899
|
-
railgun.add_function('kernel32', 'SetEvent', 'BOOL',[
|
2900
|
-
["HANDLE","hEvent","in"],
|
2901
|
-
])
|
2902
|
-
|
2903
|
-
railgun.add_function('kernel32', 'SetFileApisToANSI', 'VOID',[
|
2904
|
-
])
|
2905
|
-
|
2906
|
-
railgun.add_function('kernel32', 'SetFileApisToOEM', 'VOID',[
|
2907
|
-
])
|
2908
|
-
|
2909
|
-
railgun.add_function('kernel32', 'SetFileAttributesA', 'BOOL',[
|
2910
|
-
["PCHAR","lpFileName","in"],
|
2911
|
-
["DWORD","dwFileAttributes","in"],
|
2912
|
-
])
|
2913
|
-
|
2914
|
-
railgun.add_function('kernel32', 'SetFileAttributesW', 'BOOL',[
|
2915
|
-
["PWCHAR","lpFileName","in"],
|
2916
|
-
["DWORD","dwFileAttributes","in"],
|
2917
|
-
])
|
2918
|
-
|
2919
|
-
railgun.add_function('kernel32', 'SetFilePointer', 'DWORD',[
|
2920
|
-
["HANDLE","hFile","in"],
|
2921
|
-
["DWORD","lDistanceToMove","in"],
|
2922
|
-
["PDWORD","lpDistanceToMoveHigh","in"],
|
2923
|
-
["DWORD","dwMoveMethod","in"],
|
2924
|
-
])
|
2925
|
-
|
2926
|
-
railgun.add_function('kernel32', 'SetFilePointerEx', 'BOOL',[
|
2927
|
-
["HANDLE","hFile","in"],
|
2928
|
-
["PBLOB","liDistanceToMove","in"],
|
2929
|
-
["PBLOB","lpNewFilePointer","out"],
|
2930
|
-
["DWORD","dwMoveMethod","in"],
|
2931
|
-
])
|
2932
|
-
|
2933
|
-
railgun.add_function('kernel32', 'SetFileShortNameA', 'BOOL',[
|
2934
|
-
["HANDLE","hFile","in"],
|
2935
|
-
["PCHAR","lpShortName","in"],
|
2936
|
-
])
|
2937
|
-
|
2938
|
-
railgun.add_function('kernel32', 'SetFileShortNameW', 'BOOL',[
|
2939
|
-
["HANDLE","hFile","in"],
|
2940
|
-
["PWCHAR","lpShortName","in"],
|
2941
|
-
])
|
2942
|
-
|
2943
|
-
railgun.add_function('kernel32', 'SetFileTime', 'BOOL',[
|
2944
|
-
["HANDLE","hFile","in"],
|
2945
|
-
["PBLOB","lpCreationTime","in"],
|
2946
|
-
["PBLOB","lpLastAccessTime","in"],
|
2947
|
-
["PBLOB","lpLastWriteTime","in"],
|
2948
|
-
])
|
2949
|
-
|
2950
|
-
railgun.add_function('kernel32', 'SetFileValidData', 'BOOL',[
|
2951
|
-
["HANDLE","hFile","in"],
|
2952
|
-
["PBLOB","ValidDataLength","in"],
|
2953
|
-
])
|
2954
|
-
|
2955
|
-
railgun.add_function('kernel32', 'SetFirmwareEnvironmentVariableA', 'BOOL',[
|
2956
|
-
["PCHAR","lpName","in"],
|
2957
|
-
["PCHAR","lpGuid","in"],
|
2958
|
-
["PBLOB","pValue","in"],
|
2959
|
-
["DWORD","nSize","in"],
|
2960
|
-
])
|
2961
|
-
|
2962
|
-
railgun.add_function('kernel32', 'SetFirmwareEnvironmentVariableW', 'BOOL',[
|
2963
|
-
["PWCHAR","lpName","in"],
|
2964
|
-
["PWCHAR","lpGuid","in"],
|
2965
|
-
["PBLOB","pValue","in"],
|
2966
|
-
["DWORD","nSize","in"],
|
2967
|
-
])
|
2968
|
-
|
2969
|
-
railgun.add_function('kernel32', 'SetHandleCount', 'DWORD',[
|
2970
|
-
["DWORD","uNumber","in"],
|
2971
|
-
])
|
2972
|
-
|
2973
|
-
railgun.add_function('kernel32', 'SetHandleInformation', 'BOOL',[
|
2974
|
-
["HANDLE","hObject","in"],
|
2975
|
-
["DWORD","dwMask","in"],
|
2976
|
-
["DWORD","dwFlags","in"],
|
2977
|
-
])
|
2978
|
-
|
2979
|
-
railgun.add_function('kernel32', 'SetInformationJobObject', 'BOOL',[
|
2980
|
-
["HANDLE","hJob","in"],
|
2981
|
-
["PBLOB","JobObjectInformationClass","in"],
|
2982
|
-
["PBLOB","lpJobObjectInformation","in"],
|
2983
|
-
["DWORD","cbJobObjectInformationLength","in"],
|
2984
|
-
])
|
2985
|
-
|
2986
|
-
railgun.add_function('kernel32', 'SetLastError', 'VOID',[
|
2987
|
-
["DWORD","dwErrCode","in"],
|
2988
|
-
])
|
2989
|
-
|
2990
|
-
railgun.add_function('kernel32', 'SetLocalTime', 'BOOL',[
|
2991
|
-
["PBLOB","lpSystemTime","in"],
|
2992
|
-
])
|
2993
|
-
|
2994
|
-
railgun.add_function('kernel32', 'SetMailslotInfo', 'BOOL',[
|
2995
|
-
["HANDLE","hMailslot","in"],
|
2996
|
-
["DWORD","lReadTimeout","in"],
|
2997
|
-
])
|
2998
|
-
|
2999
|
-
railgun.add_function('kernel32', 'SetMessageWaitingIndicator', 'BOOL',[
|
3000
|
-
["HANDLE","hMsgIndicator","in"],
|
3001
|
-
["DWORD","ulMsgCount","in"],
|
3002
|
-
])
|
3003
|
-
|
3004
|
-
railgun.add_function('kernel32', 'SetNamedPipeHandleState', 'BOOL',[
|
3005
|
-
["HANDLE","hNamedPipe","in"],
|
3006
|
-
["PDWORD","lpMode","in"],
|
3007
|
-
["PDWORD","lpMaxCollectionCount","in"],
|
3008
|
-
["PDWORD","lpCollectDataTimeout","in"],
|
3009
|
-
])
|
3010
|
-
|
3011
|
-
railgun.add_function('kernel32', 'SetPriorityClass', 'BOOL',[
|
3012
|
-
["HANDLE","hProcess","in"],
|
3013
|
-
["DWORD","dwPriorityClass","in"],
|
3014
|
-
])
|
3015
|
-
|
3016
|
-
railgun.add_function('kernel32', 'SetProcessAffinityMask', 'BOOL',[
|
3017
|
-
["HANDLE","hProcess","in"],
|
3018
|
-
["PDWORD","dwProcessAffinityMask","in"],
|
3019
|
-
])
|
3020
|
-
|
3021
|
-
railgun.add_function('kernel32', 'SetProcessPriorityBoost', 'BOOL',[
|
3022
|
-
["HANDLE","hProcess","in"],
|
3023
|
-
["BOOL","bDisablePriorityBoost","in"],
|
3024
|
-
])
|
3025
|
-
|
3026
|
-
railgun.add_function('kernel32', 'SetProcessShutdownParameters', 'BOOL',[
|
3027
|
-
["DWORD","dwLevel","in"],
|
3028
|
-
["DWORD","dwFlags","in"],
|
3029
|
-
])
|
3030
|
-
|
3031
|
-
railgun.add_function('kernel32', 'SetProcessWorkingSetSize', 'BOOL',[
|
3032
|
-
["HANDLE","hProcess","in"],
|
3033
|
-
["DWORD","dwMinimumWorkingSetSize","in"],
|
3034
|
-
["DWORD","dwMaximumWorkingSetSize","in"],
|
3035
|
-
])
|
3036
|
-
|
3037
|
-
railgun.add_function('kernel32', 'SetProcessWorkingSetSizeEx', 'BOOL',[
|
3038
|
-
["HANDLE","hProcess","in"],
|
3039
|
-
["DWORD","dwMinimumWorkingSetSize","in"],
|
3040
|
-
["DWORD","dwMaximumWorkingSetSize","in"],
|
3041
|
-
["DWORD","Flags","in"],
|
3042
|
-
])
|
3043
|
-
|
3044
|
-
railgun.add_function('kernel32', 'SetStdHandle', 'BOOL',[
|
3045
|
-
["DWORD","nStdHandle","in"],
|
3046
|
-
["HANDLE","hHandle","in"],
|
3047
|
-
])
|
3048
|
-
|
3049
|
-
railgun.add_function('kernel32', 'SetSystemFileCacheSize', 'BOOL',[
|
3050
|
-
["DWORD","MinimumFileCacheSize","in"],
|
3051
|
-
["DWORD","MaximumFileCacheSize","in"],
|
3052
|
-
["DWORD","Flags","in"],
|
3053
|
-
])
|
3054
|
-
|
3055
|
-
railgun.add_function('kernel32', 'SetSystemPowerState', 'BOOL',[
|
3056
|
-
["BOOL","fSuspend","in"],
|
3057
|
-
["BOOL","fForce","in"],
|
3058
|
-
])
|
3059
|
-
|
3060
|
-
railgun.add_function('kernel32', 'SetSystemTime', 'BOOL',[
|
3061
|
-
["PBLOB","lpSystemTime","in"],
|
3062
|
-
])
|
3063
|
-
|
3064
|
-
railgun.add_function('kernel32', 'SetSystemTimeAdjustment', 'BOOL',[
|
3065
|
-
["DWORD","dwTimeAdjustment","in"],
|
3066
|
-
["BOOL","bTimeAdjustmentDisabled","in"],
|
3067
|
-
])
|
3068
|
-
|
3069
|
-
railgun.add_function('kernel32', 'SetTapeParameters', 'DWORD',[
|
3070
|
-
["HANDLE","hDevice","in"],
|
3071
|
-
["DWORD","dwOperation","in"],
|
3072
|
-
["PBLOB","lpTapeInformation","in"],
|
3073
|
-
])
|
3074
|
-
|
3075
|
-
railgun.add_function('kernel32', 'SetTapePosition', 'DWORD',[
|
3076
|
-
["HANDLE","hDevice","in"],
|
3077
|
-
["DWORD","dwPositionMethod","in"],
|
3078
|
-
["DWORD","dwPartition","in"],
|
3079
|
-
["DWORD","dwOffsetLow","in"],
|
3080
|
-
["DWORD","dwOffsetHigh","in"],
|
3081
|
-
["BOOL","bImmediate","in"],
|
3082
|
-
])
|
3083
|
-
|
3084
|
-
#railgun.add_function('kernel32', 'SetThreadAffinityMask', 'PDWORD',[
|
3085
|
-
# ["HANDLE","hThread","in"],
|
3086
|
-
# ["PDWORD","dwThreadAffinityMask","in"],
|
3087
|
-
# ])
|
3088
|
-
|
3089
|
-
railgun.add_function('kernel32', 'SetThreadContext', 'BOOL',[
|
3090
|
-
["HANDLE","hThread","in"],
|
3091
|
-
["PBLOB","lpContext","in"],
|
3092
|
-
])
|
3093
|
-
|
3094
|
-
railgun.add_function('kernel32', 'SetThreadExecutionState', 'DWORD',[
|
3095
|
-
["DWORD","esFlags","in"],
|
3096
|
-
])
|
3097
|
-
|
3098
|
-
railgun.add_function('kernel32', 'SetThreadIdealProcessor', 'DWORD',[
|
3099
|
-
["HANDLE","hThread","in"],
|
3100
|
-
["DWORD","dwIdealProcessor","in"],
|
3101
|
-
])
|
3102
|
-
|
3103
|
-
railgun.add_function('kernel32', 'SetThreadPriority', 'BOOL',[
|
3104
|
-
["HANDLE","hThread","in"],
|
3105
|
-
["DWORD","nPriority","in"],
|
3106
|
-
])
|
3107
|
-
|
3108
|
-
railgun.add_function('kernel32', 'SetThreadPriorityBoost', 'BOOL',[
|
3109
|
-
["HANDLE","hThread","in"],
|
3110
|
-
["BOOL","bDisablePriorityBoost","in"],
|
3111
|
-
])
|
3112
|
-
|
3113
|
-
railgun.add_function('kernel32', 'SetThreadStackGuarantee', 'BOOL',[
|
3114
|
-
["PDWORD","StackSizeInBytes","inout"],
|
3115
|
-
])
|
3116
|
-
|
3117
|
-
railgun.add_function('kernel32', 'SetTimeZoneInformation', 'BOOL',[
|
3118
|
-
["PBLOB","lpTimeZoneInformation","in"],
|
3119
|
-
])
|
3120
|
-
|
3121
|
-
railgun.add_function('kernel32', 'SetTimerQueueTimer', 'DWORD',[
|
3122
|
-
["DWORD","TimerQueue","in"],
|
3123
|
-
["PBLOB","Callback","in"],
|
3124
|
-
["PBLOB","Parameter","in"],
|
3125
|
-
["DWORD","DueTime","in"],
|
3126
|
-
["DWORD","Period","in"],
|
3127
|
-
["BOOL","PreferIo","in"],
|
3128
|
-
])
|
3129
|
-
|
3130
|
-
railgun.add_function('kernel32', 'SetUnhandledExceptionFilter', 'LPVOID',[
|
3131
|
-
["PBLOB","lpTopLevelExceptionFilter","in"],
|
3132
|
-
])
|
3133
|
-
|
3134
|
-
railgun.add_function('kernel32', 'SetVolumeLabelA', 'BOOL',[
|
3135
|
-
["PCHAR","lpRootPathName","in"],
|
3136
|
-
["PCHAR","lpVolumeName","in"],
|
3137
|
-
])
|
3138
|
-
|
3139
|
-
railgun.add_function('kernel32', 'SetVolumeLabelW', 'BOOL',[
|
3140
|
-
["PWCHAR","lpRootPathName","in"],
|
3141
|
-
["PWCHAR","lpVolumeName","in"],
|
3142
|
-
])
|
3143
|
-
|
3144
|
-
railgun.add_function('kernel32', 'SetVolumeMountPointA', 'BOOL',[
|
3145
|
-
["PCHAR","lpszVolumeMountPoint","in"],
|
3146
|
-
["PCHAR","lpszVolumeName","in"],
|
3147
|
-
])
|
3148
|
-
|
3149
|
-
railgun.add_function('kernel32', 'SetVolumeMountPointW', 'BOOL',[
|
3150
|
-
["PWCHAR","lpszVolumeMountPoint","in"],
|
3151
|
-
["PWCHAR","lpszVolumeName","in"],
|
3152
|
-
])
|
3153
|
-
|
3154
|
-
railgun.add_function('kernel32', 'SetWaitableTimer', 'BOOL',[
|
3155
|
-
["HANDLE","hTimer","in"],
|
3156
|
-
["PBLOB","lpDueTime","in"],
|
3157
|
-
["DWORD","lPeriod","in"],
|
3158
|
-
["PBLOB","pfnCompletionRoutine","in"],
|
3159
|
-
["PBLOB","lpArgToCompletionRoutine","in"],
|
3160
|
-
["BOOL","fResume","in"],
|
3161
|
-
])
|
3162
|
-
|
3163
|
-
railgun.add_function('kernel32', 'SetupComm', 'BOOL',[
|
3164
|
-
["HANDLE","hFile","in"],
|
3165
|
-
["DWORD","dwInQueue","in"],
|
3166
|
-
["DWORD","dwOutQueue","in"],
|
3167
|
-
])
|
3168
|
-
|
3169
|
-
railgun.add_function('kernel32', 'SignalObjectAndWait', 'DWORD',[
|
3170
|
-
["HANDLE","hObjectToSignal","in"],
|
3171
|
-
["HANDLE","hObjectToWaitOn","in"],
|
3172
|
-
["DWORD","dwMilliseconds","in"],
|
3173
|
-
["BOOL","bAlertable","in"],
|
3174
|
-
])
|
3175
|
-
|
3176
|
-
railgun.add_function('kernel32', 'SizeofResource', 'DWORD',[
|
3177
|
-
["HANDLE","hModule","in"],
|
3178
|
-
["HANDLE","hResInfo","in"],
|
3179
|
-
])
|
3180
|
-
|
3181
|
-
railgun.add_function('kernel32', 'Sleep', 'VOID',[
|
3182
|
-
["DWORD","dwMilliseconds","in"],
|
3183
|
-
])
|
3184
|
-
|
3185
|
-
railgun.add_function('kernel32', 'SleepEx', 'DWORD',[
|
3186
|
-
["DWORD","dwMilliseconds","in"],
|
3187
|
-
["BOOL","bAlertable","in"],
|
3188
|
-
])
|
3189
|
-
|
3190
|
-
railgun.add_function('kernel32', 'SuspendThread', 'DWORD',[
|
3191
|
-
["HANDLE","hThread","in"],
|
3192
|
-
])
|
3193
|
-
|
3194
|
-
railgun.add_function('kernel32', 'SwitchToFiber', 'VOID',[
|
3195
|
-
["PBLOB","lpFiber","in"],
|
3196
|
-
])
|
3197
|
-
|
3198
|
-
railgun.add_function('kernel32', 'SwitchToThread', 'BOOL',[
|
3199
|
-
])
|
3200
|
-
|
3201
|
-
railgun.add_function('kernel32', 'SystemTimeToFileTime', 'BOOL',[
|
3202
|
-
["PBLOB","lpSystemTime","in"],
|
3203
|
-
["PBLOB","lpFileTime","out"],
|
3204
|
-
])
|
3205
|
-
|
3206
|
-
railgun.add_function('kernel32', 'SystemTimeToTzSpecificLocalTime', 'BOOL',[
|
3207
|
-
["PBLOB","lpTimeZoneInformation","in"],
|
3208
|
-
["PBLOB","lpUniversalTime","in"],
|
3209
|
-
["PBLOB","lpLocalTime","out"],
|
3210
|
-
])
|
3211
|
-
|
3212
|
-
railgun.add_function('kernel32', 'TerminateJobObject', 'BOOL',[
|
3213
|
-
["HANDLE","hJob","in"],
|
3214
|
-
["DWORD","uExitCode","in"],
|
3215
|
-
])
|
3216
|
-
|
3217
|
-
railgun.add_function('kernel32', 'TerminateProcess', 'BOOL',[
|
3218
|
-
["HANDLE","hProcess","in"],
|
3219
|
-
["DWORD","uExitCode","in"],
|
3220
|
-
])
|
3221
|
-
|
3222
|
-
railgun.add_function('kernel32', 'TerminateThread', 'BOOL',[
|
3223
|
-
["HANDLE","hThread","in"],
|
3224
|
-
["DWORD","dwExitCode","in"],
|
3225
|
-
])
|
3226
|
-
|
3227
|
-
railgun.add_function('kernel32', 'TlsAlloc', 'DWORD',[
|
3228
|
-
])
|
3229
|
-
|
3230
|
-
railgun.add_function('kernel32', 'TlsFree', 'BOOL',[
|
3231
|
-
["DWORD","dwTlsIndex","in"],
|
3232
|
-
])
|
3233
|
-
|
3234
|
-
railgun.add_function('kernel32', 'TlsGetValue', 'LPVOID',[
|
3235
|
-
["DWORD","dwTlsIndex","in"],
|
3236
|
-
])
|
3237
|
-
|
3238
|
-
railgun.add_function('kernel32', 'TlsSetValue', 'BOOL',[
|
3239
|
-
["DWORD","dwTlsIndex","in"],
|
3240
|
-
["PBLOB","lpTlsValue","in"],
|
3241
|
-
])
|
3242
|
-
|
3243
|
-
railgun.add_function('kernel32', 'TransactNamedPipe', 'BOOL',[
|
3244
|
-
["HANDLE","hNamedPipe","in"],
|
3245
|
-
["PBLOB","lpInBuffer","in"],
|
3246
|
-
["DWORD","nInBufferSize","in"],
|
3247
|
-
["PBLOB","lpOutBuffer","out"],
|
3248
|
-
["DWORD","nOutBufferSize","in"],
|
3249
|
-
["PDWORD","lpBytesRead","out"],
|
3250
|
-
["PBLOB","lpOverlapped","inout"],
|
3251
|
-
])
|
3252
|
-
|
3253
|
-
railgun.add_function('kernel32', 'TransmitCommChar', 'BOOL',[
|
3254
|
-
["HANDLE","hFile","in"],
|
3255
|
-
["BYTE","cChar","in"],
|
3256
|
-
])
|
3257
|
-
|
3258
|
-
railgun.add_function('kernel32', 'TryEnterCriticalSection', 'BOOL',[
|
3259
|
-
["PBLOB","lpCriticalSection","inout"],
|
3260
|
-
])
|
3261
|
-
|
3262
|
-
railgun.add_function('kernel32', 'TzSpecificLocalTimeToSystemTime', 'BOOL',[
|
3263
|
-
["PBLOB","lpTimeZoneInformation","in"],
|
3264
|
-
["PBLOB","lpLocalTime","in"],
|
3265
|
-
["PBLOB","lpUniversalTime","out"],
|
3266
|
-
])
|
3267
|
-
|
3268
|
-
railgun.add_function('kernel32', 'UnhandledExceptionFilter', 'DWORD',[
|
3269
|
-
["PBLOB","ExceptionInfo","in"],
|
3270
|
-
])
|
3271
|
-
|
3272
|
-
railgun.add_function('kernel32', 'UnlockFile', 'BOOL',[
|
3273
|
-
["HANDLE","hFile","in"],
|
3274
|
-
["DWORD","dwFileOffsetLow","in"],
|
3275
|
-
["DWORD","dwFileOffsetHigh","in"],
|
3276
|
-
["DWORD","nNumberOfBytesToUnlockLow","in"],
|
3277
|
-
["DWORD","nNumberOfBytesToUnlockHigh","in"],
|
3278
|
-
])
|
3279
|
-
|
3280
|
-
railgun.add_function('kernel32', 'UnlockFileEx', 'BOOL',[
|
3281
|
-
["HANDLE","hFile","in"],
|
3282
|
-
["DWORD","dwReserved","inout"],
|
3283
|
-
["DWORD","nNumberOfBytesToUnlockLow","in"],
|
3284
|
-
["DWORD","nNumberOfBytesToUnlockHigh","in"],
|
3285
|
-
["PBLOB","lpOverlapped","inout"],
|
3286
|
-
])
|
3287
|
-
|
3288
|
-
railgun.add_function('kernel32', 'UnmapViewOfFile', 'BOOL',[
|
3289
|
-
["PBLOB","lpBaseAddress","in"],
|
3290
|
-
])
|
3291
|
-
|
3292
|
-
railgun.add_function('kernel32', 'UnregisterWait', 'BOOL',[
|
3293
|
-
["DWORD","WaitHandle","in"],
|
3294
|
-
])
|
3295
|
-
|
3296
|
-
railgun.add_function('kernel32', 'UnregisterWaitEx', 'BOOL',[
|
3297
|
-
["DWORD","WaitHandle","in"],
|
3298
|
-
["DWORD","CompletionEvent","in"],
|
3299
|
-
])
|
3300
|
-
|
3301
|
-
railgun.add_function('kernel32', 'UpdateResourceA', 'BOOL',[
|
3302
|
-
["HANDLE","hUpdate","in"],
|
3303
|
-
["PCHAR","lpType","in"],
|
3304
|
-
["PCHAR","lpName","in"],
|
3305
|
-
["WORD","wLanguage","in"],
|
3306
|
-
["PBLOB","lpData","in"],
|
3307
|
-
["DWORD","cb","in"],
|
3308
|
-
])
|
3309
|
-
|
3310
|
-
railgun.add_function('kernel32', 'UpdateResourceW', 'BOOL',[
|
3311
|
-
["HANDLE","hUpdate","in"],
|
3312
|
-
["PWCHAR","lpType","in"],
|
3313
|
-
["PWCHAR","lpName","in"],
|
3314
|
-
["WORD","wLanguage","in"],
|
3315
|
-
["PBLOB","lpData","in"],
|
3316
|
-
["DWORD","cb","in"],
|
3317
|
-
])
|
3318
|
-
|
3319
|
-
railgun.add_function('kernel32', 'VerifyVersionInfoA', 'BOOL',[
|
3320
|
-
["PBLOB","lpVersionInformation","inout"],
|
3321
|
-
["DWORD","dwTypeMask","in"],
|
3322
|
-
["PBLOB","dwlConditionMask","in"],
|
3323
|
-
])
|
3324
|
-
|
3325
|
-
railgun.add_function('kernel32', 'VerifyVersionInfoW', 'BOOL',[
|
3326
|
-
["PBLOB","lpVersionInformation","inout"],
|
3327
|
-
["DWORD","dwTypeMask","in"],
|
3328
|
-
["PBLOB","dwlConditionMask","in"],
|
3329
|
-
])
|
3330
|
-
|
3331
|
-
railgun.add_function('kernel32', 'VirtualAlloc', 'LPVOID',[
|
3332
|
-
["LPVOID","lpAddress","in"],
|
3333
|
-
["DWORD","dwSize","in"],
|
3334
|
-
["DWORD","flAllocationType","in"],
|
3335
|
-
["DWORD","flProtect","in"],
|
3336
|
-
])
|
3337
|
-
|
3338
|
-
railgun.add_function('kernel32', 'VirtualAllocEx', 'LPVOID',[
|
3339
|
-
["HANDLE","hProcess","in"],
|
3340
|
-
["LPVOID","lpAddress","in"],
|
3341
|
-
["DWORD","dwSize","in"],
|
3342
|
-
["DWORD","flAllocationType","in"],
|
3343
|
-
["DWORD","flProtect","in"],
|
3344
|
-
])
|
3345
|
-
|
3346
|
-
railgun.add_function('kernel32', 'VirtualFree', 'BOOL',[
|
3347
|
-
["LPVOID","lpAddress","in"],
|
3348
|
-
["DWORD","dwSize","in"],
|
3349
|
-
["DWORD","dwFreeType","in"],
|
3350
|
-
])
|
3351
|
-
|
3352
|
-
railgun.add_function('kernel32', 'VirtualFreeEx', 'BOOL',[
|
3353
|
-
["HANDLE","hProcess","in"],
|
3354
|
-
["LPVOID","lpAddress","in"],
|
3355
|
-
["DWORD","dwSize","in"],
|
3356
|
-
["DWORD","dwFreeType","in"],
|
3357
|
-
])
|
3358
|
-
|
3359
|
-
railgun.add_function('kernel32', 'VirtualLock', 'BOOL',[
|
3360
|
-
["LPVOID","lpAddress","in"],
|
3361
|
-
["DWORD","dwSize","in"],
|
3362
|
-
])
|
3363
|
-
|
3364
|
-
railgun.add_function('kernel32', 'VirtualProtect', 'BOOL',[
|
3365
|
-
["LPVOID","lpAddress","in"],
|
3366
|
-
["DWORD","dwSize","in"],
|
3367
|
-
["DWORD","flNewProtect","in"],
|
3368
|
-
["PDWORD","lpflOldProtect","out"],
|
3369
|
-
])
|
3370
|
-
|
3371
|
-
railgun.add_function('kernel32', 'VirtualProtectEx', 'BOOL',[
|
3372
|
-
["HANDLE","hProcess","in"],
|
3373
|
-
["LPVOID","lpAddress","in"],
|
3374
|
-
["DWORD","dwSize","in"],
|
3375
|
-
["DWORD","flNewProtect","in"],
|
3376
|
-
["PDWORD","lpflOldProtect","out"],
|
3377
|
-
])
|
3378
|
-
|
3379
|
-
railgun.add_function('kernel32', 'VirtualQuery', 'DWORD',[
|
3380
|
-
["LPVOID","lpAddress","in"],
|
3381
|
-
["PBLOB","lpBuffer","out"],
|
3382
|
-
["DWORD","dwLength","in"],
|
3383
|
-
])
|
3384
|
-
|
3385
|
-
railgun.add_function('kernel32', 'VirtualQueryEx', 'DWORD',[
|
3386
|
-
["HANDLE","hProcess","in"],
|
3387
|
-
["LPVOID","lpAddress","in"],
|
3388
|
-
["PBLOB","lpBuffer","out"],
|
3389
|
-
["DWORD","dwLength","in"],
|
3390
|
-
])
|
3391
|
-
|
3392
|
-
railgun.add_function('kernel32', 'VirtualUnlock', 'BOOL',[
|
3393
|
-
["LPVOID","lpAddress","in"],
|
3394
|
-
["DWORD","dwSize","in"],
|
3395
|
-
])
|
3396
|
-
|
3397
|
-
railgun.add_function('kernel32', 'WTSGetActiveConsoleSessionId', 'DWORD',[
|
3398
|
-
])
|
3399
|
-
|
3400
|
-
railgun.add_function('kernel32', 'WaitCommEvent', 'BOOL',[
|
3401
|
-
["HANDLE","hFile","in"],
|
3402
|
-
["PDWORD","lpEvtMask","inout"],
|
3403
|
-
["PBLOB","lpOverlapped","inout"],
|
3404
|
-
])
|
3405
|
-
|
3406
|
-
railgun.add_function('kernel32', 'WaitForDebugEvent', 'BOOL',[
|
3407
|
-
["PBLOB","lpDebugEvent","in"],
|
3408
|
-
["DWORD","dwMilliseconds","in"],
|
3409
|
-
])
|
3410
|
-
|
3411
|
-
railgun.add_function('kernel32', 'WaitForMultipleObjects', 'DWORD',[
|
3412
|
-
["DWORD","nCount","in"],
|
3413
|
-
["PDWORD","lpHandles","in"],
|
3414
|
-
["BOOL","bWaitAll","in"],
|
3415
|
-
["DWORD","dwMilliseconds","in"],
|
3416
|
-
])
|
3417
|
-
|
3418
|
-
railgun.add_function('kernel32', 'WaitForMultipleObjectsEx', 'DWORD',[
|
3419
|
-
["DWORD","nCount","in"],
|
3420
|
-
["PDWORD","lpHandles","in"],
|
3421
|
-
["BOOL","bWaitAll","in"],
|
3422
|
-
["DWORD","dwMilliseconds","in"],
|
3423
|
-
["BOOL","bAlertable","in"],
|
3424
|
-
])
|
3425
|
-
|
3426
|
-
railgun.add_function('kernel32', 'WaitForSingleObject', 'DWORD',[
|
3427
|
-
["HANDLE","hHandle","in"],
|
3428
|
-
["DWORD","dwMilliseconds","in"],
|
3429
|
-
])
|
3430
|
-
|
3431
|
-
railgun.add_function('kernel32', 'WaitForSingleObjectEx', 'DWORD',[
|
3432
|
-
["HANDLE","hHandle","in"],
|
3433
|
-
["DWORD","dwMilliseconds","in"],
|
3434
|
-
["BOOL","bAlertable","in"],
|
3435
|
-
])
|
3436
|
-
|
3437
|
-
railgun.add_function('kernel32', 'WaitNamedPipeA', 'BOOL',[
|
3438
|
-
["PCHAR","lpNamedPipeName","in"],
|
3439
|
-
["DWORD","nTimeOut","in"],
|
3440
|
-
])
|
3441
|
-
|
3442
|
-
railgun.add_function('kernel32', 'WaitNamedPipeW', 'BOOL',[
|
3443
|
-
["PWCHAR","lpNamedPipeName","in"],
|
3444
|
-
["DWORD","nTimeOut","in"],
|
3445
|
-
])
|
3446
|
-
|
3447
|
-
railgun.add_function('kernel32', 'WinExec', 'DWORD',[
|
3448
|
-
["PCHAR","lpCmdLine","in"],
|
3449
|
-
["DWORD","uCmdShow","in"],
|
3450
|
-
])
|
3451
|
-
|
3452
|
-
railgun.add_function('kernel32', 'Wow64DisableWow64FsRedirection', 'BOOL',[
|
3453
|
-
["PBLOB","OldValue","out"],
|
3454
|
-
])
|
3455
|
-
|
3456
|
-
railgun.add_function('kernel32', 'Wow64EnableWow64FsRedirection', 'BOOL',[
|
3457
|
-
["BOOL","Wow64FsEnableRedirection","in"],
|
3458
|
-
])
|
3459
|
-
|
3460
|
-
railgun.add_function('kernel32', 'Wow64RevertWow64FsRedirection', 'BOOL',[
|
3461
|
-
["PBLOB","OlValue","in"],
|
3462
|
-
])
|
3463
|
-
|
3464
|
-
railgun.add_function('kernel32', 'WriteFile', 'BOOL',[
|
3465
|
-
["HANDLE","hFile","in"],
|
3466
|
-
["PBLOB","lpBuffer","in"],
|
3467
|
-
["DWORD","nNumberOfBytesToWrite","in"],
|
3468
|
-
["PDWORD","lpNumberOfBytesWritten","out"],
|
3469
|
-
["PBLOB","lpOverlapped","inout"],
|
3470
|
-
])
|
3471
|
-
|
3472
|
-
railgun.add_function('kernel32', 'WriteFileEx', 'BOOL',[
|
3473
|
-
["HANDLE","hFile","in"],
|
3474
|
-
["PBLOB","lpBuffer","in"],
|
3475
|
-
["DWORD","nNumberOfBytesToWrite","in"],
|
3476
|
-
["PBLOB","lpOverlapped","inout"],
|
3477
|
-
["PBLOB","lpCompletionRoutine","in"],
|
3478
|
-
])
|
3479
|
-
|
3480
|
-
railgun.add_function('kernel32', 'WriteFileGather', 'BOOL',[
|
3481
|
-
["HANDLE","hFile","in"],
|
3482
|
-
["PBLOB","aSegmentArray[]","in"],
|
3483
|
-
["DWORD","nNumberOfBytesToWrite","in"],
|
3484
|
-
["PDWORD","lpReserved","inout"],
|
3485
|
-
["PBLOB","lpOverlapped","inout"],
|
3486
|
-
])
|
3487
|
-
|
3488
|
-
railgun.add_function('kernel32', 'WritePrivateProfileSectionA', 'BOOL',[
|
3489
|
-
["PCHAR","lpAppName","in"],
|
3490
|
-
["PCHAR","lpString","in"],
|
3491
|
-
["PCHAR","lpFileName","in"],
|
3492
|
-
])
|
3493
|
-
|
3494
|
-
railgun.add_function('kernel32', 'WritePrivateProfileSectionW', 'BOOL',[
|
3495
|
-
["PWCHAR","lpAppName","in"],
|
3496
|
-
["PWCHAR","lpString","in"],
|
3497
|
-
["PWCHAR","lpFileName","in"],
|
3498
|
-
])
|
3499
|
-
|
3500
|
-
railgun.add_function('kernel32', 'WritePrivateProfileStringA', 'BOOL',[
|
3501
|
-
["PCHAR","lpAppName","in"],
|
3502
|
-
["PCHAR","lpKeyName","in"],
|
3503
|
-
["PCHAR","lpString","in"],
|
3504
|
-
["PCHAR","lpFileName","in"],
|
3505
|
-
])
|
3506
|
-
|
3507
|
-
railgun.add_function('kernel32', 'WritePrivateProfileStringW', 'BOOL',[
|
3508
|
-
["PWCHAR","lpAppName","in"],
|
3509
|
-
["PWCHAR","lpKeyName","in"],
|
3510
|
-
["PWCHAR","lpString","in"],
|
3511
|
-
["PWCHAR","lpFileName","in"],
|
3512
|
-
])
|
3513
|
-
|
3514
|
-
railgun.add_function('kernel32', 'WritePrivateProfileStructA', 'BOOL',[
|
3515
|
-
["PCHAR","lpszSection","in"],
|
3516
|
-
["PCHAR","lpszKey","in"],
|
3517
|
-
["PBLOB","lpStruct","in"],
|
3518
|
-
["DWORD","uSizeStruct","in"],
|
3519
|
-
["PCHAR","szFile","in"],
|
3520
|
-
])
|
3521
|
-
|
3522
|
-
railgun.add_function('kernel32', 'WritePrivateProfileStructW', 'BOOL',[
|
3523
|
-
["PWCHAR","lpszSection","in"],
|
3524
|
-
["PWCHAR","lpszKey","in"],
|
3525
|
-
["PBLOB","lpStruct","in"],
|
3526
|
-
["DWORD","uSizeStruct","in"],
|
3527
|
-
["PWCHAR","szFile","in"],
|
3528
|
-
])
|
3529
|
-
|
3530
|
-
railgun.add_function('kernel32', 'WriteProcessMemory', 'BOOL',[
|
3531
|
-
["HANDLE","hProcess","in"],
|
3532
|
-
["PBLOB","lpBaseAddress","in"],
|
3533
|
-
["PBLOB","lpBuffer","in"],
|
3534
|
-
["DWORD","nSize","in"],
|
3535
|
-
["PDWORD","lpNumberOfBytesWritten","out"],
|
3536
|
-
])
|
3537
|
-
|
3538
|
-
railgun.add_function('kernel32', 'WriteProfileSectionA', 'BOOL',[
|
3539
|
-
["PCHAR","lpAppName","in"],
|
3540
|
-
["PCHAR","lpString","in"],
|
3541
|
-
])
|
3542
|
-
|
3543
|
-
railgun.add_function('kernel32', 'WriteProfileSectionW', 'BOOL',[
|
3544
|
-
["PWCHAR","lpAppName","in"],
|
3545
|
-
["PWCHAR","lpString","in"],
|
3546
|
-
])
|
3547
|
-
|
3548
|
-
railgun.add_function('kernel32', 'WriteProfileStringA', 'BOOL',[
|
3549
|
-
["PCHAR","lpAppName","in"],
|
3550
|
-
["PCHAR","lpKeyName","in"],
|
3551
|
-
["PCHAR","lpString","in"],
|
3552
|
-
])
|
3553
|
-
|
3554
|
-
railgun.add_function('kernel32', 'WriteProfileStringW', 'BOOL',[
|
3555
|
-
["PWCHAR","lpAppName","in"],
|
3556
|
-
["PWCHAR","lpKeyName","in"],
|
3557
|
-
["PWCHAR","lpString","in"],
|
3558
|
-
])
|
3559
|
-
|
3560
|
-
railgun.add_function('kernel32', 'WriteTapemark', 'DWORD',[
|
3561
|
-
["HANDLE","hDevice","in"],
|
3562
|
-
["DWORD","dwTapemarkType","in"],
|
3563
|
-
["DWORD","dwTapemarkCount","in"],
|
3564
|
-
["BOOL","bImmediate","in"],
|
3565
|
-
])
|
3566
|
-
|
3567
|
-
railgun.add_function('kernel32', 'ZombifyActCtx', 'BOOL',[
|
3568
|
-
["HANDLE","hActCtx","inout"],
|
3569
|
-
])
|
3570
|
-
|
3571
|
-
railgun.add_function('kernel32', '_hread', 'DWORD',[
|
3572
|
-
["HANDLE","hFile","in"],
|
3573
|
-
["PBLOB","lpBuffer","out"],
|
3574
|
-
["DWORD","lBytes","in"],
|
3575
|
-
])
|
3576
|
-
|
3577
|
-
railgun.add_function('kernel32', '_hwrite', 'DWORD',[
|
3578
|
-
["HANDLE","hFile","in"],
|
3579
|
-
["PBLOB","lpBuffer","in"],
|
3580
|
-
["DWORD","lBytes","in"],
|
3581
|
-
])
|
3582
|
-
|
3583
|
-
railgun.add_function('kernel32', '_lclose', 'DWORD',[
|
3584
|
-
["HANDLE","hFile","in"],
|
3585
|
-
])
|
3586
|
-
|
3587
|
-
railgun.add_function('kernel32', '_lcreat', 'DWORD',[
|
3588
|
-
["PCHAR","lpPathName","in"],
|
3589
|
-
["DWORD","iAttribute","in"],
|
3590
|
-
])
|
3591
|
-
|
3592
|
-
railgun.add_function('kernel32', '_llseek', 'DWORD',[
|
3593
|
-
["HANDLE","hFile","in"],
|
3594
|
-
["DWORD","lOffset","in"],
|
3595
|
-
["DWORD","iOrigin","in"],
|
3596
|
-
])
|
3597
|
-
|
3598
|
-
railgun.add_function('kernel32', '_lopen', 'DWORD',[
|
3599
|
-
["PCHAR","lpPathName","in"],
|
3600
|
-
["DWORD","iReadWrite","in"],
|
3601
|
-
])
|
3602
|
-
|
3603
|
-
railgun.add_function('kernel32', '_lread', 'DWORD',[
|
3604
|
-
["HANDLE","hFile","in"],
|
3605
|
-
["PBLOB","lpBuffer","out"],
|
3606
|
-
["DWORD","uBytes","in"],
|
3607
|
-
])
|
3608
|
-
|
3609
|
-
railgun.add_function('kernel32', '_lwrite', 'DWORD',[
|
3610
|
-
["HANDLE","hFile","in"],
|
3611
|
-
["PBLOB","lpBuffer","in"],
|
3612
|
-
["DWORD","uBytes","in"],
|
3613
|
-
])
|
3614
|
-
|
3615
|
-
#railgun.add_function('kernel32', 'lstrcatA', 'PCHAR',[
|
3616
|
-
# ["PCHAR","lpString1","inout"],
|
3617
|
-
# ["PCHAR","lpString2","in"],
|
3618
|
-
# ])
|
3619
|
-
|
3620
|
-
#railgun.add_function('kernel32', 'lstrcatW', 'PWCHAR',[
|
3621
|
-
# ["PWCHAR","lpString1","inout"],
|
3622
|
-
# ["PWCHAR","lpString2","in"],
|
3623
|
-
# ])
|
3624
|
-
|
3625
|
-
railgun.add_function('kernel32', 'lstrcmpA', 'DWORD',[
|
3626
|
-
["PCHAR","lpString1","in"],
|
3627
|
-
["PCHAR","lpString2","in"],
|
3628
|
-
])
|
3629
|
-
|
3630
|
-
railgun.add_function('kernel32', 'lstrcmpW', 'DWORD',[
|
3631
|
-
["PWCHAR","lpString1","in"],
|
3632
|
-
["PWCHAR","lpString2","in"],
|
3633
|
-
])
|
3634
|
-
|
3635
|
-
railgun.add_function('kernel32', 'lstrcmpiA', 'DWORD',[
|
3636
|
-
["PCHAR","lpString1","in"],
|
3637
|
-
["PCHAR","lpString2","in"],
|
3638
|
-
])
|
3639
|
-
|
3640
|
-
railgun.add_function('kernel32', 'lstrcmpiW', 'DWORD',[
|
3641
|
-
["PWCHAR","lpString1","in"],
|
3642
|
-
["PWCHAR","lpString2","in"],
|
3643
|
-
])
|
3644
|
-
|
3645
|
-
#railgun.add_function('kernel32', 'lstrcpyA', 'PCHAR',[
|
3646
|
-
# ["PCHAR","lpString1","out"],
|
3647
|
-
# ["PCHAR","lpString2","in"],
|
3648
|
-
# ])
|
3649
|
-
|
3650
|
-
#railgun.add_function('kernel32', 'lstrcpyW', 'PWCHAR',[
|
3651
|
-
# ["PWCHAR","lpString1","out"],
|
3652
|
-
# ["PWCHAR","lpString2","in"],
|
3653
|
-
# ])
|
3654
|
-
|
3655
|
-
#railgun.add_function('kernel32', 'lstrcpynA', 'PCHAR',[
|
3656
|
-
# ["PCHAR","lpString1","out"],
|
3657
|
-
# ["PCHAR","lpString2","in"],
|
3658
|
-
# ["DWORD","iMaxLength","in"],
|
3659
|
-
# ])
|
3660
|
-
|
3661
|
-
#railgun.add_function('kernel32', 'lstrcpynW', 'PWCHAR',[
|
3662
|
-
# ["PWCHAR","lpString1","out"],
|
3663
|
-
# ["PWCHAR","lpString2","in"],
|
3664
|
-
# ["DWORD","iMaxLength","in"],
|
3665
|
-
# ])
|
3666
|
-
|
3667
|
-
railgun.add_function('kernel32', 'lstrlenA', 'DWORD',[
|
3668
|
-
["PCHAR","lpString","in"],
|
3669
|
-
])
|
3670
|
-
|
3671
|
-
railgun.add_function('kernel32', 'lstrlenW', 'DWORD',[
|
3672
|
-
["PWCHAR","lpString","in"],
|
3673
|
-
])
|
3674
|
-
|
3675
|
-
|
3676
|
-
railgun.add_function( 'kernel32', 'CreateToolhelp32Snapshot', 'DWORD',[
|
3677
|
-
["DWORD","dwFlags","in"],
|
3678
|
-
["DWORD","th32ProcessID","in"],
|
3679
|
-
])
|
3680
|
-
|
3681
|
-
railgun.add_function( 'kernel32', 'Heap32First', 'BOOL',[
|
3682
|
-
["PBLOB","lphe","inout"],
|
3683
|
-
["DWORD","th32ProcessID","in"],
|
3684
|
-
["PDWORD","th32HeapID","inout"],
|
3685
|
-
])
|
3686
|
-
|
3687
|
-
railgun.add_function( 'kernel32', 'Heap32ListFirst', 'BOOL',[
|
3688
|
-
["DWORD","hSnapshot","in"],
|
3689
|
-
["PBLOB","lphl","inout"],
|
3690
|
-
])
|
3691
|
-
|
3692
|
-
railgun.add_function( 'kernel32', 'Heap32ListNext', 'BOOL',[
|
3693
|
-
["DWORD","hSnapshot","in"],
|
3694
|
-
["PBLOB","lphl","inout"],
|
3695
|
-
])
|
3696
|
-
|
3697
|
-
railgun.add_function( 'kernel32', 'Heap32Next', 'BOOL',[
|
3698
|
-
["PBLOB","lphe","inout"],
|
3699
|
-
])
|
3700
|
-
|
3701
|
-
railgun.add_function( 'kernel32', 'Module32First', 'BOOL',[
|
3702
|
-
["DWORD","hSnapshot","in"],
|
3703
|
-
["PBLOB","lpme","inout"],
|
3704
|
-
])
|
3705
|
-
|
3706
|
-
railgun.add_function( 'kernel32', 'Module32FirstW', 'BOOL',[
|
3707
|
-
["DWORD","hSnapshot","in"],
|
3708
|
-
["PBLOB","lpme","inout"],
|
3709
|
-
])
|
3710
|
-
|
3711
|
-
railgun.add_function( 'kernel32', 'Module32Next', 'BOOL',[
|
3712
|
-
["DWORD","hSnapshot","in"],
|
3713
|
-
["PBLOB","lpme","inout"],
|
3714
|
-
])
|
3715
|
-
|
3716
|
-
railgun.add_function( 'kernel32', 'Module32NextW', 'BOOL',[
|
3717
|
-
["DWORD","hSnapshot","in"],
|
3718
|
-
["PBLOB","lpme","inout"],
|
3719
|
-
])
|
3720
|
-
|
3721
|
-
railgun.add_function( 'kernel32', 'Process32First', 'BOOL',[
|
3722
|
-
["DWORD","hSnapshot","in"],
|
3723
|
-
["PBLOB","lppe","inout"],
|
3724
|
-
])
|
3725
|
-
|
3726
|
-
railgun.add_function( 'kernel32', 'Process32FirstW', 'BOOL',[
|
3727
|
-
["DWORD","hSnapshot","in"],
|
3728
|
-
["PBLOB","lppe","inout"],
|
3729
|
-
])
|
3730
|
-
|
3731
|
-
railgun.add_function( 'kernel32', 'Process32Next', 'BOOL',[
|
3732
|
-
["DWORD","hSnapshot","in"],
|
3733
|
-
["PBLOB","lppe","inout"],
|
3734
|
-
])
|
3735
|
-
|
3736
|
-
railgun.add_function( 'kernel32', 'Process32NextW', 'BOOL',[
|
3737
|
-
["DWORD","hSnapshot","in"],
|
3738
|
-
["PBLOB","lppe","inout"],
|
3739
|
-
])
|
3740
|
-
|
3741
|
-
railgun.add_function( 'kernel32', 'Thread32First', 'BOOL',[
|
3742
|
-
["DWORD","hSnapshot","in"],
|
3743
|
-
["PBLOB","lpte","inout"],
|
3744
|
-
])
|
3745
|
-
|
3746
|
-
railgun.add_function( 'kernel32', 'Thread32Next', 'BOOL',[
|
3747
|
-
["DWORD","hSnapshot","in"],
|
3748
|
-
["PBLOB","lpte","inout"],
|
3749
|
-
])
|
3750
|
-
|
3751
|
-
railgun.add_function( 'kernel32', 'Toolhelp32ReadProcessMemory', 'BOOL',[
|
3752
|
-
["DWORD","th32ProcessID","in"],
|
3753
|
-
["PBLOB","lpBaseAddress","inout"],
|
3754
|
-
["PBLOB","lpBuffer","inout"],
|
3755
|
-
["DWORD","cbRead","in"],
|
3756
|
-
["PDWORD","lpNumberOfBytesRead","in"],
|
3757
|
-
])
|
3758
|
-
|
3759
|
-
railgun.add_function( 'kernel32', 'CreateToolhelp32Snapshot', 'DWORD',[
|
3760
|
-
["DWORD","dwFlags","in"],
|
3761
|
-
["DWORD","th32ProcessID","in"],
|
3762
|
-
])
|
3763
|
-
|
3764
|
-
railgun.add_function( 'kernel32', 'Heap32First', 'BOOL',[
|
3765
|
-
["PBLOB","lphe","inout"],
|
3766
|
-
["DWORD","th32ProcessID","in"],
|
3767
|
-
["PDWORD","th32HeapID","inout"],
|
3768
|
-
])
|
3769
|
-
|
3770
|
-
railgun.add_function( 'kernel32', 'Heap32ListFirst', 'BOOL',[
|
3771
|
-
["DWORD","hSnapshot","in"],
|
3772
|
-
["PBLOB","lphl","inout"],
|
3773
|
-
])
|
3774
|
-
|
3775
|
-
railgun.add_function( 'kernel32', 'Heap32ListNext', 'BOOL',[
|
3776
|
-
["DWORD","hSnapshot","in"],
|
3777
|
-
["PBLOB","lphl","inout"],
|
3778
|
-
])
|
3779
|
-
|
3780
|
-
railgun.add_function( 'kernel32', 'Heap32Next', 'BOOL',[
|
3781
|
-
["PBLOB","lphe","inout"],
|
3782
|
-
])
|
3783
|
-
|
3784
|
-
railgun.add_function( 'kernel32', 'Module32First', 'BOOL',[
|
3785
|
-
["DWORD","hSnapshot","in"],
|
3786
|
-
["PBLOB","lpme","inout"],
|
3787
|
-
])
|
3788
|
-
|
3789
|
-
railgun.add_function( 'kernel32', 'Module32FirstW', 'BOOL',[
|
3790
|
-
["DWORD","hSnapshot","in"],
|
3791
|
-
["PBLOB","lpme","inout"],
|
3792
|
-
])
|
3793
|
-
|
3794
|
-
railgun.add_function( 'kernel32', 'Module32Next', 'BOOL',[
|
3795
|
-
["DWORD","hSnapshot","in"],
|
3796
|
-
["PBLOB","lpme","inout"],
|
3797
|
-
])
|
3798
|
-
|
3799
|
-
railgun.add_function( 'kernel32', 'Module32NextW', 'BOOL',[
|
3800
|
-
["DWORD","hSnapshot","in"],
|
3801
|
-
["PBLOB","lpme","inout"],
|
3802
|
-
])
|
3803
|
-
|
3804
|
-
railgun.add_function( 'kernel32', 'Process32First', 'BOOL',[
|
3805
|
-
["DWORD","hSnapshot","in"],
|
3806
|
-
["PBLOB","lppe","inout"],
|
3807
|
-
])
|
3808
|
-
|
3809
|
-
railgun.add_function( 'kernel32', 'Process32FirstW', 'BOOL',[
|
3810
|
-
["DWORD","hSnapshot","in"],
|
3811
|
-
["PBLOB","lppe","inout"],
|
3812
|
-
])
|
3813
|
-
|
3814
|
-
railgun.add_function( 'kernel32', 'Process32Next', 'BOOL',[
|
3815
|
-
["DWORD","hSnapshot","in"],
|
3816
|
-
["PBLOB","lppe","inout"],
|
3817
|
-
])
|
3818
|
-
|
3819
|
-
railgun.add_function( 'kernel32', 'Process32NextW', 'BOOL',[
|
3820
|
-
["DWORD","hSnapshot","in"],
|
3821
|
-
["PBLOB","lppe","inout"],
|
3822
|
-
])
|
3823
|
-
|
3824
|
-
railgun.add_function( 'kernel32', 'Thread32First', 'BOOL',[
|
3825
|
-
["DWORD","hSnapshot","in"],
|
3826
|
-
["PBLOB","lpte","inout"],
|
3827
|
-
])
|
3828
|
-
|
3829
|
-
railgun.add_function( 'kernel32', 'Thread32Next', 'BOOL',[
|
3830
|
-
["DWORD","hSnapshot","in"],
|
3831
|
-
["PBLOB","lpte","inout"],
|
3832
|
-
])
|
3833
|
-
|
3834
|
-
railgun.add_function( 'kernel32', 'Toolhelp32ReadProcessMemory', 'BOOL',[
|
3835
|
-
["DWORD","th32ProcessID","in"],
|
3836
|
-
["PBLOB","lpBaseAddress","inout"],
|
3837
|
-
["PBLOB","lpBuffer","inout"],
|
3838
|
-
["DWORD","cbRead","in"],
|
3839
|
-
["PDWORD","lpNumberOfBytesRead","in"],
|
3840
|
-
])
|
3841
|
-
|
3842
|
-
end
|
3843
|
-
|
3844
|
-
end
|
3845
|
-
|
3846
|
-
end; end; end; end; end; end; end
|
3847
|
-
|
3848
|
-
|