angr 9.2.165__cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Potentially problematic release.


This version of angr might be problematic. Click here for more details.

Files changed (1409) hide show
  1. angr/__init__.py +366 -0
  2. angr/__main__.py +152 -0
  3. angr/ailment/__init__.py +81 -0
  4. angr/ailment/block.py +81 -0
  5. angr/ailment/block_walker.py +845 -0
  6. angr/ailment/constant.py +3 -0
  7. angr/ailment/converter_common.py +11 -0
  8. angr/ailment/converter_pcode.py +623 -0
  9. angr/ailment/converter_vex.py +798 -0
  10. angr/ailment/expression.py +1655 -0
  11. angr/ailment/manager.py +33 -0
  12. angr/ailment/statement.py +978 -0
  13. angr/ailment/tagged_object.py +61 -0
  14. angr/ailment/utils.py +114 -0
  15. angr/analyses/__init__.py +113 -0
  16. angr/analyses/analysis.py +429 -0
  17. angr/analyses/backward_slice.py +686 -0
  18. angr/analyses/binary_optimizer.py +670 -0
  19. angr/analyses/bindiff.py +1512 -0
  20. angr/analyses/boyscout.py +76 -0
  21. angr/analyses/callee_cleanup_finder.py +74 -0
  22. angr/analyses/calling_convention/__init__.py +6 -0
  23. angr/analyses/calling_convention/calling_convention.py +1096 -0
  24. angr/analyses/calling_convention/fact_collector.py +636 -0
  25. angr/analyses/calling_convention/utils.py +60 -0
  26. angr/analyses/cdg.py +189 -0
  27. angr/analyses/cfg/__init__.py +23 -0
  28. angr/analyses/cfg/cfb.py +428 -0
  29. angr/analyses/cfg/cfg.py +74 -0
  30. angr/analyses/cfg/cfg_arch_options.py +95 -0
  31. angr/analyses/cfg/cfg_base.py +2909 -0
  32. angr/analyses/cfg/cfg_emulated.py +3451 -0
  33. angr/analyses/cfg/cfg_fast.py +5316 -0
  34. angr/analyses/cfg/cfg_fast_soot.py +662 -0
  35. angr/analyses/cfg/cfg_job_base.py +203 -0
  36. angr/analyses/cfg/indirect_jump_resolvers/__init__.py +28 -0
  37. angr/analyses/cfg/indirect_jump_resolvers/amd64_elf_got.py +62 -0
  38. angr/analyses/cfg/indirect_jump_resolvers/amd64_pe_iat.py +51 -0
  39. angr/analyses/cfg/indirect_jump_resolvers/arm_elf_fast.py +159 -0
  40. angr/analyses/cfg/indirect_jump_resolvers/const_resolver.py +339 -0
  41. angr/analyses/cfg/indirect_jump_resolvers/constant_value_manager.py +107 -0
  42. angr/analyses/cfg/indirect_jump_resolvers/default_resolvers.py +76 -0
  43. angr/analyses/cfg/indirect_jump_resolvers/jumptable.py +2367 -0
  44. angr/analyses/cfg/indirect_jump_resolvers/memload_resolver.py +81 -0
  45. angr/analyses/cfg/indirect_jump_resolvers/mips_elf_fast.py +286 -0
  46. angr/analyses/cfg/indirect_jump_resolvers/mips_elf_got.py +148 -0
  47. angr/analyses/cfg/indirect_jump_resolvers/propagator_utils.py +46 -0
  48. angr/analyses/cfg/indirect_jump_resolvers/resolver.py +74 -0
  49. angr/analyses/cfg/indirect_jump_resolvers/syscall_resolver.py +92 -0
  50. angr/analyses/cfg/indirect_jump_resolvers/x86_elf_pic_plt.py +88 -0
  51. angr/analyses/cfg/indirect_jump_resolvers/x86_pe_iat.py +47 -0
  52. angr/analyses/cfg_slice_to_sink/__init__.py +11 -0
  53. angr/analyses/cfg_slice_to_sink/cfg_slice_to_sink.py +117 -0
  54. angr/analyses/cfg_slice_to_sink/graph.py +87 -0
  55. angr/analyses/cfg_slice_to_sink/transitions.py +27 -0
  56. angr/analyses/class_identifier.py +63 -0
  57. angr/analyses/code_tagging.py +123 -0
  58. angr/analyses/codecave.py +77 -0
  59. angr/analyses/complete_calling_conventions.py +461 -0
  60. angr/analyses/congruency_check.py +377 -0
  61. angr/analyses/data_dep/__init__.py +16 -0
  62. angr/analyses/data_dep/data_dependency_analysis.py +595 -0
  63. angr/analyses/data_dep/dep_nodes.py +171 -0
  64. angr/analyses/data_dep/sim_act_location.py +49 -0
  65. angr/analyses/datagraph_meta.py +105 -0
  66. angr/analyses/ddg.py +1670 -0
  67. angr/analyses/decompiler/__init__.py +41 -0
  68. angr/analyses/decompiler/ail_simplifier.py +2085 -0
  69. angr/analyses/decompiler/ailgraph_walker.py +49 -0
  70. angr/analyses/decompiler/block_io_finder.py +302 -0
  71. angr/analyses/decompiler/block_similarity.py +196 -0
  72. angr/analyses/decompiler/block_simplifier.py +376 -0
  73. angr/analyses/decompiler/callsite_maker.py +571 -0
  74. angr/analyses/decompiler/ccall_rewriters/__init__.py +9 -0
  75. angr/analyses/decompiler/ccall_rewriters/amd64_ccalls.py +580 -0
  76. angr/analyses/decompiler/ccall_rewriters/rewriter_base.py +20 -0
  77. angr/analyses/decompiler/ccall_rewriters/x86_ccalls.py +313 -0
  78. angr/analyses/decompiler/clinic.py +3308 -0
  79. angr/analyses/decompiler/condition_processor.py +1281 -0
  80. angr/analyses/decompiler/counters/__init__.py +16 -0
  81. angr/analyses/decompiler/counters/boolean_counter.py +27 -0
  82. angr/analyses/decompiler/counters/call_counter.py +57 -0
  83. angr/analyses/decompiler/counters/expression_counters.py +77 -0
  84. angr/analyses/decompiler/counters/seq_cf_structure_counter.py +63 -0
  85. angr/analyses/decompiler/decompilation_cache.py +46 -0
  86. angr/analyses/decompiler/decompilation_options.py +275 -0
  87. angr/analyses/decompiler/decompiler.py +710 -0
  88. angr/analyses/decompiler/dephication/__init__.py +6 -0
  89. angr/analyses/decompiler/dephication/dephication_base.py +100 -0
  90. angr/analyses/decompiler/dephication/graph_dephication.py +70 -0
  91. angr/analyses/decompiler/dephication/graph_rewriting.py +112 -0
  92. angr/analyses/decompiler/dephication/graph_vvar_mapping.py +363 -0
  93. angr/analyses/decompiler/dephication/rewriting_engine.py +527 -0
  94. angr/analyses/decompiler/dephication/seqnode_dephication.py +156 -0
  95. angr/analyses/decompiler/empty_node_remover.py +212 -0
  96. angr/analyses/decompiler/expression_narrower.py +287 -0
  97. angr/analyses/decompiler/goto_manager.py +112 -0
  98. angr/analyses/decompiler/graph_region.py +426 -0
  99. angr/analyses/decompiler/jump_target_collector.py +37 -0
  100. angr/analyses/decompiler/jumptable_entry_condition_rewriter.py +67 -0
  101. angr/analyses/decompiler/label_collector.py +32 -0
  102. angr/analyses/decompiler/optimization_passes/__init__.py +151 -0
  103. angr/analyses/decompiler/optimization_passes/base_ptr_save_simplifier.py +157 -0
  104. angr/analyses/decompiler/optimization_passes/call_stmt_rewriter.py +46 -0
  105. angr/analyses/decompiler/optimization_passes/code_motion.py +362 -0
  106. angr/analyses/decompiler/optimization_passes/condition_constprop.py +219 -0
  107. angr/analyses/decompiler/optimization_passes/const_derefs.py +266 -0
  108. angr/analyses/decompiler/optimization_passes/const_prop_reverter.py +365 -0
  109. angr/analyses/decompiler/optimization_passes/cross_jump_reverter.py +106 -0
  110. angr/analyses/decompiler/optimization_passes/deadblock_remover.py +82 -0
  111. angr/analyses/decompiler/optimization_passes/determine_load_sizes.py +64 -0
  112. angr/analyses/decompiler/optimization_passes/div_simplifier.py +425 -0
  113. angr/analyses/decompiler/optimization_passes/duplication_reverter/__init__.py +5 -0
  114. angr/analyses/decompiler/optimization_passes/duplication_reverter/ail_merge_graph.py +503 -0
  115. angr/analyses/decompiler/optimization_passes/duplication_reverter/duplication_reverter.py +1218 -0
  116. angr/analyses/decompiler/optimization_passes/duplication_reverter/errors.py +16 -0
  117. angr/analyses/decompiler/optimization_passes/duplication_reverter/similarity.py +126 -0
  118. angr/analyses/decompiler/optimization_passes/duplication_reverter/utils.py +167 -0
  119. angr/analyses/decompiler/optimization_passes/eager_std_string_concatenation.py +165 -0
  120. angr/analyses/decompiler/optimization_passes/engine_base.py +500 -0
  121. angr/analyses/decompiler/optimization_passes/expr_op_swapper.py +135 -0
  122. angr/analyses/decompiler/optimization_passes/flip_boolean_cmp.py +113 -0
  123. angr/analyses/decompiler/optimization_passes/inlined_string_transformation_simplifier.py +615 -0
  124. angr/analyses/decompiler/optimization_passes/ite_expr_converter.py +224 -0
  125. angr/analyses/decompiler/optimization_passes/ite_region_converter.py +335 -0
  126. angr/analyses/decompiler/optimization_passes/lowered_switch_simplifier.py +923 -0
  127. angr/analyses/decompiler/optimization_passes/mod_simplifier.py +99 -0
  128. angr/analyses/decompiler/optimization_passes/optimization_pass.py +703 -0
  129. angr/analyses/decompiler/optimization_passes/register_save_area_simplifier.py +221 -0
  130. angr/analyses/decompiler/optimization_passes/ret_addr_save_simplifier.py +171 -0
  131. angr/analyses/decompiler/optimization_passes/ret_deduplicator.py +222 -0
  132. angr/analyses/decompiler/optimization_passes/return_duplicator_base.py +640 -0
  133. angr/analyses/decompiler/optimization_passes/return_duplicator_high.py +61 -0
  134. angr/analyses/decompiler/optimization_passes/return_duplicator_low.py +237 -0
  135. angr/analyses/decompiler/optimization_passes/stack_canary_simplifier.py +333 -0
  136. angr/analyses/decompiler/optimization_passes/switch_default_case_duplicator.py +149 -0
  137. angr/analyses/decompiler/optimization_passes/switch_reused_entry_rewriter.py +102 -0
  138. angr/analyses/decompiler/optimization_passes/tag_slicer.py +41 -0
  139. angr/analyses/decompiler/optimization_passes/win_stack_canary_simplifier.py +421 -0
  140. angr/analyses/decompiler/optimization_passes/x86_gcc_getpc_simplifier.py +88 -0
  141. angr/analyses/decompiler/peephole_optimizations/__init__.py +129 -0
  142. angr/analyses/decompiler/peephole_optimizations/a_div_const_add_a_mul_n_div_const.py +42 -0
  143. angr/analyses/decompiler/peephole_optimizations/a_mul_const_div_shr_const.py +38 -0
  144. angr/analyses/decompiler/peephole_optimizations/a_mul_const_sub_a.py +34 -0
  145. angr/analyses/decompiler/peephole_optimizations/a_shl_const_sub_a.py +34 -0
  146. angr/analyses/decompiler/peephole_optimizations/a_sub_a_div.py +25 -0
  147. angr/analyses/decompiler/peephole_optimizations/a_sub_a_shr_const_shr_const.py +37 -0
  148. angr/analyses/decompiler/peephole_optimizations/a_sub_a_sub_n.py +23 -0
  149. angr/analyses/decompiler/peephole_optimizations/arm_cmpf.py +236 -0
  150. angr/analyses/decompiler/peephole_optimizations/base.py +157 -0
  151. angr/analyses/decompiler/peephole_optimizations/basepointeroffset_add_n.py +34 -0
  152. angr/analyses/decompiler/peephole_optimizations/basepointeroffset_and_mask.py +36 -0
  153. angr/analyses/decompiler/peephole_optimizations/bitwise_or_to_logical_or.py +34 -0
  154. angr/analyses/decompiler/peephole_optimizations/bool_expr_xor_1.py +27 -0
  155. angr/analyses/decompiler/peephole_optimizations/bswap.py +142 -0
  156. angr/analyses/decompiler/peephole_optimizations/cas_intrinsics.py +115 -0
  157. angr/analyses/decompiler/peephole_optimizations/cmpord_rewriter.py +71 -0
  158. angr/analyses/decompiler/peephole_optimizations/coalesce_adjacent_shrs.py +39 -0
  159. angr/analyses/decompiler/peephole_optimizations/coalesce_same_cascading_ifs.py +28 -0
  160. angr/analyses/decompiler/peephole_optimizations/constant_derefs.py +44 -0
  161. angr/analyses/decompiler/peephole_optimizations/conv_a_sub0_shr_and.py +69 -0
  162. angr/analyses/decompiler/peephole_optimizations/conv_shl_shr.py +52 -0
  163. angr/analyses/decompiler/peephole_optimizations/eager_eval.py +447 -0
  164. angr/analyses/decompiler/peephole_optimizations/extended_byte_and_mask.py +56 -0
  165. angr/analyses/decompiler/peephole_optimizations/inlined_memcpy.py +78 -0
  166. angr/analyses/decompiler/peephole_optimizations/inlined_strcpy.py +217 -0
  167. angr/analyses/decompiler/peephole_optimizations/inlined_strcpy_consolidation.py +106 -0
  168. angr/analyses/decompiler/peephole_optimizations/inlined_wstrcpy.py +170 -0
  169. angr/analyses/decompiler/peephole_optimizations/invert_negated_logical_conjuction_disjunction.py +50 -0
  170. angr/analyses/decompiler/peephole_optimizations/modulo_simplifier.py +89 -0
  171. angr/analyses/decompiler/peephole_optimizations/one_sub_bool.py +33 -0
  172. angr/analyses/decompiler/peephole_optimizations/optimized_div_simplifier.py +356 -0
  173. angr/analyses/decompiler/peephole_optimizations/remove_cascading_conversions.py +45 -0
  174. angr/analyses/decompiler/peephole_optimizations/remove_cxx_destructor_calls.py +32 -0
  175. angr/analyses/decompiler/peephole_optimizations/remove_empty_if_body.py +46 -0
  176. angr/analyses/decompiler/peephole_optimizations/remove_noop_conversions.py +47 -0
  177. angr/analyses/decompiler/peephole_optimizations/remove_redundant_bitmasks.py +125 -0
  178. angr/analyses/decompiler/peephole_optimizations/remove_redundant_conversions.py +273 -0
  179. angr/analyses/decompiler/peephole_optimizations/remove_redundant_ite_branch.py +30 -0
  180. angr/analyses/decompiler/peephole_optimizations/remove_redundant_ite_comparisons.py +54 -0
  181. angr/analyses/decompiler/peephole_optimizations/remove_redundant_nots.py +36 -0
  182. angr/analyses/decompiler/peephole_optimizations/remove_redundant_reinterprets.py +44 -0
  183. angr/analyses/decompiler/peephole_optimizations/remove_redundant_shifts.py +95 -0
  184. angr/analyses/decompiler/peephole_optimizations/remove_redundant_shifts_around_comparators.py +44 -0
  185. angr/analyses/decompiler/peephole_optimizations/rewrite_bit_extractions.py +85 -0
  186. angr/analyses/decompiler/peephole_optimizations/rewrite_conv_mul.py +40 -0
  187. angr/analyses/decompiler/peephole_optimizations/rewrite_cxx_operator_calls.py +90 -0
  188. angr/analyses/decompiler/peephole_optimizations/rewrite_mips_gp_loads.py +49 -0
  189. angr/analyses/decompiler/peephole_optimizations/rol_ror.py +130 -0
  190. angr/analyses/decompiler/peephole_optimizations/sar_to_signed_div.py +143 -0
  191. angr/analyses/decompiler/peephole_optimizations/shl_to_mul.py +25 -0
  192. angr/analyses/decompiler/peephole_optimizations/simplify_pc_relative_loads.py +51 -0
  193. angr/analyses/decompiler/peephole_optimizations/single_bit_cond_to_boolexpr.py +82 -0
  194. angr/analyses/decompiler/peephole_optimizations/single_bit_xor.py +29 -0
  195. angr/analyses/decompiler/peephole_optimizations/tidy_stack_addr.py +131 -0
  196. angr/analyses/decompiler/peephole_optimizations/utils.py +18 -0
  197. angr/analyses/decompiler/presets/__init__.py +20 -0
  198. angr/analyses/decompiler/presets/basic.py +32 -0
  199. angr/analyses/decompiler/presets/fast.py +58 -0
  200. angr/analyses/decompiler/presets/full.py +68 -0
  201. angr/analyses/decompiler/presets/preset.py +37 -0
  202. angr/analyses/decompiler/redundant_label_remover.py +134 -0
  203. angr/analyses/decompiler/region_identifier.py +1239 -0
  204. angr/analyses/decompiler/region_simplifiers/__init__.py +5 -0
  205. angr/analyses/decompiler/region_simplifiers/cascading_cond_transformer.py +95 -0
  206. angr/analyses/decompiler/region_simplifiers/cascading_ifs.py +82 -0
  207. angr/analyses/decompiler/region_simplifiers/expr_folding.py +818 -0
  208. angr/analyses/decompiler/region_simplifiers/goto.py +178 -0
  209. angr/analyses/decompiler/region_simplifiers/if_.py +135 -0
  210. angr/analyses/decompiler/region_simplifiers/ifelse.py +91 -0
  211. angr/analyses/decompiler/region_simplifiers/loop.py +143 -0
  212. angr/analyses/decompiler/region_simplifiers/node_address_finder.py +24 -0
  213. angr/analyses/decompiler/region_simplifiers/region_simplifier.py +246 -0
  214. angr/analyses/decompiler/region_simplifiers/switch_cluster_simplifier.py +654 -0
  215. angr/analyses/decompiler/region_simplifiers/switch_expr_simplifier.py +87 -0
  216. angr/analyses/decompiler/region_walker.py +24 -0
  217. angr/analyses/decompiler/return_maker.py +72 -0
  218. angr/analyses/decompiler/seq_to_blocks.py +20 -0
  219. angr/analyses/decompiler/sequence_walker.py +257 -0
  220. angr/analyses/decompiler/ssailification/__init__.py +4 -0
  221. angr/analyses/decompiler/ssailification/rewriting.py +379 -0
  222. angr/analyses/decompiler/ssailification/rewriting_engine.py +1053 -0
  223. angr/analyses/decompiler/ssailification/rewriting_state.py +61 -0
  224. angr/analyses/decompiler/ssailification/ssailification.py +276 -0
  225. angr/analyses/decompiler/ssailification/traversal.py +124 -0
  226. angr/analyses/decompiler/ssailification/traversal_engine.py +306 -0
  227. angr/analyses/decompiler/ssailification/traversal_state.py +48 -0
  228. angr/analyses/decompiler/stack_item.py +36 -0
  229. angr/analyses/decompiler/structured_codegen/__init__.py +25 -0
  230. angr/analyses/decompiler/structured_codegen/base.py +132 -0
  231. angr/analyses/decompiler/structured_codegen/c.py +4082 -0
  232. angr/analyses/decompiler/structured_codegen/dummy.py +15 -0
  233. angr/analyses/decompiler/structured_codegen/dwarf_import.py +190 -0
  234. angr/analyses/decompiler/structuring/__init__.py +30 -0
  235. angr/analyses/decompiler/structuring/dream.py +1217 -0
  236. angr/analyses/decompiler/structuring/phoenix.py +3090 -0
  237. angr/analyses/decompiler/structuring/recursive_structurer.py +187 -0
  238. angr/analyses/decompiler/structuring/sailr.py +120 -0
  239. angr/analyses/decompiler/structuring/structurer_base.py +1066 -0
  240. angr/analyses/decompiler/structuring/structurer_nodes.py +440 -0
  241. angr/analyses/decompiler/utils.py +1118 -0
  242. angr/analyses/deobfuscator/__init__.py +18 -0
  243. angr/analyses/deobfuscator/api_obf_finder.py +325 -0
  244. angr/analyses/deobfuscator/api_obf_peephole_optimizer.py +51 -0
  245. angr/analyses/deobfuscator/api_obf_type2_finder.py +166 -0
  246. angr/analyses/deobfuscator/irsb_reg_collector.py +54 -0
  247. angr/analyses/deobfuscator/string_obf_finder.py +959 -0
  248. angr/analyses/deobfuscator/string_obf_opt_passes.py +133 -0
  249. angr/analyses/deobfuscator/string_obf_peephole_optimizer.py +47 -0
  250. angr/analyses/disassembly.py +1295 -0
  251. angr/analyses/disassembly_utils.py +101 -0
  252. angr/analyses/dominance_frontier.py +57 -0
  253. angr/analyses/fcp/__init__.py +4 -0
  254. angr/analyses/fcp/fcp.py +427 -0
  255. angr/analyses/find_objects_static.py +205 -0
  256. angr/analyses/flirt/__init__.py +47 -0
  257. angr/analyses/flirt/consts.py +160 -0
  258. angr/analyses/flirt/flirt.py +244 -0
  259. angr/analyses/flirt/flirt_function.py +20 -0
  260. angr/analyses/flirt/flirt_matcher.py +351 -0
  261. angr/analyses/flirt/flirt_module.py +32 -0
  262. angr/analyses/flirt/flirt_node.py +23 -0
  263. angr/analyses/flirt/flirt_sig.py +359 -0
  264. angr/analyses/flirt/flirt_utils.py +31 -0
  265. angr/analyses/forward_analysis/__init__.py +12 -0
  266. angr/analyses/forward_analysis/forward_analysis.py +530 -0
  267. angr/analyses/forward_analysis/job_info.py +64 -0
  268. angr/analyses/forward_analysis/visitors/__init__.py +14 -0
  269. angr/analyses/forward_analysis/visitors/call_graph.py +29 -0
  270. angr/analyses/forward_analysis/visitors/function_graph.py +86 -0
  271. angr/analyses/forward_analysis/visitors/graph.py +242 -0
  272. angr/analyses/forward_analysis/visitors/loop.py +29 -0
  273. angr/analyses/forward_analysis/visitors/single_node_graph.py +38 -0
  274. angr/analyses/identifier/__init__.py +5 -0
  275. angr/analyses/identifier/custom_callable.py +137 -0
  276. angr/analyses/identifier/errors.py +10 -0
  277. angr/analyses/identifier/func.py +60 -0
  278. angr/analyses/identifier/functions/__init__.py +37 -0
  279. angr/analyses/identifier/functions/atoi.py +73 -0
  280. angr/analyses/identifier/functions/based_atoi.py +125 -0
  281. angr/analyses/identifier/functions/fdprintf.py +123 -0
  282. angr/analyses/identifier/functions/free.py +64 -0
  283. angr/analyses/identifier/functions/int2str.py +287 -0
  284. angr/analyses/identifier/functions/malloc.py +111 -0
  285. angr/analyses/identifier/functions/memcmp.py +67 -0
  286. angr/analyses/identifier/functions/memcpy.py +89 -0
  287. angr/analyses/identifier/functions/memset.py +43 -0
  288. angr/analyses/identifier/functions/printf.py +123 -0
  289. angr/analyses/identifier/functions/recv_until.py +312 -0
  290. angr/analyses/identifier/functions/skip_calloc.py +73 -0
  291. angr/analyses/identifier/functions/skip_realloc.py +97 -0
  292. angr/analyses/identifier/functions/skip_recv_n.py +105 -0
  293. angr/analyses/identifier/functions/snprintf.py +112 -0
  294. angr/analyses/identifier/functions/sprintf.py +116 -0
  295. angr/analyses/identifier/functions/strcasecmp.py +33 -0
  296. angr/analyses/identifier/functions/strcmp.py +113 -0
  297. angr/analyses/identifier/functions/strcpy.py +43 -0
  298. angr/analyses/identifier/functions/strlen.py +27 -0
  299. angr/analyses/identifier/functions/strncmp.py +104 -0
  300. angr/analyses/identifier/functions/strncpy.py +65 -0
  301. angr/analyses/identifier/functions/strtol.py +89 -0
  302. angr/analyses/identifier/identify.py +825 -0
  303. angr/analyses/identifier/runner.py +360 -0
  304. angr/analyses/init_finder.py +289 -0
  305. angr/analyses/loop_analysis.py +349 -0
  306. angr/analyses/loopfinder.py +171 -0
  307. angr/analyses/patchfinder.py +137 -0
  308. angr/analyses/pathfinder.py +282 -0
  309. angr/analyses/propagator/__init__.py +5 -0
  310. angr/analyses/propagator/engine_base.py +62 -0
  311. angr/analyses/propagator/engine_vex.py +297 -0
  312. angr/analyses/propagator/propagator.py +361 -0
  313. angr/analyses/propagator/top_checker_mixin.py +218 -0
  314. angr/analyses/propagator/values.py +117 -0
  315. angr/analyses/propagator/vex_vars.py +68 -0
  316. angr/analyses/proximity_graph.py +444 -0
  317. angr/analyses/reaching_definitions/__init__.py +67 -0
  318. angr/analyses/reaching_definitions/call_trace.py +73 -0
  319. angr/analyses/reaching_definitions/dep_graph.py +433 -0
  320. angr/analyses/reaching_definitions/engine_ail.py +1130 -0
  321. angr/analyses/reaching_definitions/engine_vex.py +1127 -0
  322. angr/analyses/reaching_definitions/external_codeloc.py +0 -0
  323. angr/analyses/reaching_definitions/function_handler.py +638 -0
  324. angr/analyses/reaching_definitions/function_handler_library/__init__.py +12 -0
  325. angr/analyses/reaching_definitions/function_handler_library/stdio.py +269 -0
  326. angr/analyses/reaching_definitions/function_handler_library/stdlib.py +195 -0
  327. angr/analyses/reaching_definitions/function_handler_library/string.py +158 -0
  328. angr/analyses/reaching_definitions/function_handler_library/unistd.py +51 -0
  329. angr/analyses/reaching_definitions/heap_allocator.py +70 -0
  330. angr/analyses/reaching_definitions/rd_initializer.py +237 -0
  331. angr/analyses/reaching_definitions/rd_state.py +579 -0
  332. angr/analyses/reaching_definitions/reaching_definitions.py +581 -0
  333. angr/analyses/reaching_definitions/subject.py +65 -0
  334. angr/analyses/reassembler.py +2900 -0
  335. angr/analyses/s_liveness.py +203 -0
  336. angr/analyses/s_propagator.py +542 -0
  337. angr/analyses/s_reaching_definitions/__init__.py +12 -0
  338. angr/analyses/s_reaching_definitions/s_rda_model.py +136 -0
  339. angr/analyses/s_reaching_definitions/s_rda_view.py +316 -0
  340. angr/analyses/s_reaching_definitions/s_reaching_definitions.py +177 -0
  341. angr/analyses/smc.py +161 -0
  342. angr/analyses/soot_class_hierarchy.py +273 -0
  343. angr/analyses/stack_pointer_tracker.py +953 -0
  344. angr/analyses/static_hooker.py +53 -0
  345. angr/analyses/typehoon/__init__.py +5 -0
  346. angr/analyses/typehoon/dfa.py +118 -0
  347. angr/analyses/typehoon/lifter.py +122 -0
  348. angr/analyses/typehoon/simple_solver.py +1666 -0
  349. angr/analyses/typehoon/translator.py +279 -0
  350. angr/analyses/typehoon/typeconsts.py +338 -0
  351. angr/analyses/typehoon/typehoon.py +319 -0
  352. angr/analyses/typehoon/typevars.py +622 -0
  353. angr/analyses/typehoon/variance.py +11 -0
  354. angr/analyses/unpacker/__init__.py +6 -0
  355. angr/analyses/unpacker/obfuscation_detector.py +103 -0
  356. angr/analyses/unpacker/packing_detector.py +138 -0
  357. angr/analyses/variable_recovery/__init__.py +9 -0
  358. angr/analyses/variable_recovery/annotations.py +58 -0
  359. angr/analyses/variable_recovery/engine_ail.py +885 -0
  360. angr/analyses/variable_recovery/engine_base.py +1197 -0
  361. angr/analyses/variable_recovery/engine_vex.py +593 -0
  362. angr/analyses/variable_recovery/irsb_scanner.py +143 -0
  363. angr/analyses/variable_recovery/variable_recovery.py +574 -0
  364. angr/analyses/variable_recovery/variable_recovery_base.py +489 -0
  365. angr/analyses/variable_recovery/variable_recovery_fast.py +661 -0
  366. angr/analyses/veritesting.py +626 -0
  367. angr/analyses/vfg.py +1898 -0
  368. angr/analyses/vsa_ddg.py +420 -0
  369. angr/analyses/vtable.py +92 -0
  370. angr/analyses/xrefs.py +286 -0
  371. angr/angrdb/__init__.py +14 -0
  372. angr/angrdb/db.py +206 -0
  373. angr/angrdb/models.py +184 -0
  374. angr/angrdb/serializers/__init__.py +10 -0
  375. angr/angrdb/serializers/cfg_model.py +41 -0
  376. angr/angrdb/serializers/comments.py +60 -0
  377. angr/angrdb/serializers/funcs.py +61 -0
  378. angr/angrdb/serializers/kb.py +111 -0
  379. angr/angrdb/serializers/labels.py +59 -0
  380. angr/angrdb/serializers/loader.py +165 -0
  381. angr/angrdb/serializers/structured_code.py +125 -0
  382. angr/angrdb/serializers/variables.py +58 -0
  383. angr/angrdb/serializers/xrefs.py +48 -0
  384. angr/annocfg.py +317 -0
  385. angr/blade.py +431 -0
  386. angr/block.py +509 -0
  387. angr/callable.py +168 -0
  388. angr/calling_conventions.py +2580 -0
  389. angr/code_location.py +163 -0
  390. angr/codenode.py +145 -0
  391. angr/concretization_strategies/__init__.py +32 -0
  392. angr/concretization_strategies/any.py +17 -0
  393. angr/concretization_strategies/any_named.py +35 -0
  394. angr/concretization_strategies/base.py +81 -0
  395. angr/concretization_strategies/controlled_data.py +58 -0
  396. angr/concretization_strategies/eval.py +19 -0
  397. angr/concretization_strategies/logging.py +35 -0
  398. angr/concretization_strategies/max.py +25 -0
  399. angr/concretization_strategies/nonzero.py +16 -0
  400. angr/concretization_strategies/nonzero_range.py +22 -0
  401. angr/concretization_strategies/norepeats.py +37 -0
  402. angr/concretization_strategies/norepeats_range.py +37 -0
  403. angr/concretization_strategies/range.py +19 -0
  404. angr/concretization_strategies/signed_add.py +31 -0
  405. angr/concretization_strategies/single.py +15 -0
  406. angr/concretization_strategies/solutions.py +20 -0
  407. angr/concretization_strategies/unlimited_range.py +17 -0
  408. angr/distributed/__init__.py +9 -0
  409. angr/distributed/server.py +197 -0
  410. angr/distributed/worker.py +185 -0
  411. angr/emulator.py +143 -0
  412. angr/engines/__init__.py +67 -0
  413. angr/engines/concrete.py +66 -0
  414. angr/engines/engine.py +29 -0
  415. angr/engines/failure.py +27 -0
  416. angr/engines/hook.py +68 -0
  417. angr/engines/icicle.py +278 -0
  418. angr/engines/light/__init__.py +23 -0
  419. angr/engines/light/data.py +681 -0
  420. angr/engines/light/engine.py +1285 -0
  421. angr/engines/pcode/__init__.py +9 -0
  422. angr/engines/pcode/behavior.py +994 -0
  423. angr/engines/pcode/cc.py +128 -0
  424. angr/engines/pcode/emulate.py +440 -0
  425. angr/engines/pcode/engine.py +242 -0
  426. angr/engines/pcode/lifter.py +1420 -0
  427. angr/engines/procedure.py +70 -0
  428. angr/engines/soot/__init__.py +5 -0
  429. angr/engines/soot/engine.py +410 -0
  430. angr/engines/soot/exceptions.py +17 -0
  431. angr/engines/soot/expressions/__init__.py +87 -0
  432. angr/engines/soot/expressions/arrayref.py +22 -0
  433. angr/engines/soot/expressions/base.py +21 -0
  434. angr/engines/soot/expressions/binop.py +28 -0
  435. angr/engines/soot/expressions/cast.py +22 -0
  436. angr/engines/soot/expressions/condition.py +35 -0
  437. angr/engines/soot/expressions/constants.py +47 -0
  438. angr/engines/soot/expressions/instanceOf.py +15 -0
  439. angr/engines/soot/expressions/instancefieldref.py +8 -0
  440. angr/engines/soot/expressions/invoke.py +114 -0
  441. angr/engines/soot/expressions/length.py +8 -0
  442. angr/engines/soot/expressions/local.py +8 -0
  443. angr/engines/soot/expressions/new.py +16 -0
  444. angr/engines/soot/expressions/newArray.py +54 -0
  445. angr/engines/soot/expressions/newMultiArray.py +86 -0
  446. angr/engines/soot/expressions/paramref.py +8 -0
  447. angr/engines/soot/expressions/phi.py +30 -0
  448. angr/engines/soot/expressions/staticfieldref.py +8 -0
  449. angr/engines/soot/expressions/thisref.py +7 -0
  450. angr/engines/soot/expressions/unsupported.py +7 -0
  451. angr/engines/soot/field_dispatcher.py +46 -0
  452. angr/engines/soot/method_dispatcher.py +46 -0
  453. angr/engines/soot/statements/__init__.py +44 -0
  454. angr/engines/soot/statements/assign.py +30 -0
  455. angr/engines/soot/statements/base.py +79 -0
  456. angr/engines/soot/statements/goto.py +14 -0
  457. angr/engines/soot/statements/identity.py +15 -0
  458. angr/engines/soot/statements/if_.py +19 -0
  459. angr/engines/soot/statements/invoke.py +12 -0
  460. angr/engines/soot/statements/return_.py +20 -0
  461. angr/engines/soot/statements/switch.py +41 -0
  462. angr/engines/soot/statements/throw.py +15 -0
  463. angr/engines/soot/values/__init__.py +38 -0
  464. angr/engines/soot/values/arrayref.py +122 -0
  465. angr/engines/soot/values/base.py +7 -0
  466. angr/engines/soot/values/constants.py +18 -0
  467. angr/engines/soot/values/instancefieldref.py +44 -0
  468. angr/engines/soot/values/local.py +18 -0
  469. angr/engines/soot/values/paramref.py +18 -0
  470. angr/engines/soot/values/staticfieldref.py +38 -0
  471. angr/engines/soot/values/strref.py +38 -0
  472. angr/engines/soot/values/thisref.py +149 -0
  473. angr/engines/successors.py +654 -0
  474. angr/engines/syscall.py +51 -0
  475. angr/engines/unicorn.py +490 -0
  476. angr/engines/vex/__init__.py +20 -0
  477. angr/engines/vex/claripy/__init__.py +5 -0
  478. angr/engines/vex/claripy/ccall.py +2097 -0
  479. angr/engines/vex/claripy/datalayer.py +141 -0
  480. angr/engines/vex/claripy/irop.py +1276 -0
  481. angr/engines/vex/heavy/__init__.py +16 -0
  482. angr/engines/vex/heavy/actions.py +231 -0
  483. angr/engines/vex/heavy/concretizers.py +403 -0
  484. angr/engines/vex/heavy/dirty.py +466 -0
  485. angr/engines/vex/heavy/heavy.py +370 -0
  486. angr/engines/vex/heavy/inspect.py +52 -0
  487. angr/engines/vex/heavy/resilience.py +85 -0
  488. angr/engines/vex/heavy/super_fastpath.py +34 -0
  489. angr/engines/vex/lifter.py +420 -0
  490. angr/engines/vex/light/__init__.py +11 -0
  491. angr/engines/vex/light/light.py +551 -0
  492. angr/engines/vex/light/resilience.py +74 -0
  493. angr/engines/vex/light/slicing.py +52 -0
  494. angr/errors.py +609 -0
  495. angr/exploration_techniques/__init__.py +53 -0
  496. angr/exploration_techniques/base.py +126 -0
  497. angr/exploration_techniques/bucketizer.py +94 -0
  498. angr/exploration_techniques/common.py +56 -0
  499. angr/exploration_techniques/dfs.py +37 -0
  500. angr/exploration_techniques/director.py +520 -0
  501. angr/exploration_techniques/driller_core.py +100 -0
  502. angr/exploration_techniques/explorer.py +152 -0
  503. angr/exploration_techniques/lengthlimiter.py +22 -0
  504. angr/exploration_techniques/local_loop_seer.py +65 -0
  505. angr/exploration_techniques/loop_seer.py +236 -0
  506. angr/exploration_techniques/manual_mergepoint.py +82 -0
  507. angr/exploration_techniques/memory_watcher.py +43 -0
  508. angr/exploration_techniques/oppologist.py +92 -0
  509. angr/exploration_techniques/slicecutor.py +118 -0
  510. angr/exploration_techniques/spiller.py +280 -0
  511. angr/exploration_techniques/spiller_db.py +27 -0
  512. angr/exploration_techniques/stochastic.py +56 -0
  513. angr/exploration_techniques/stub_stasher.py +19 -0
  514. angr/exploration_techniques/suggestions.py +159 -0
  515. angr/exploration_techniques/tech_builder.py +49 -0
  516. angr/exploration_techniques/threading.py +69 -0
  517. angr/exploration_techniques/timeout.py +34 -0
  518. angr/exploration_techniques/tracer.py +1098 -0
  519. angr/exploration_techniques/unique.py +106 -0
  520. angr/exploration_techniques/veritesting.py +37 -0
  521. angr/factory.py +404 -0
  522. angr/flirt/__init__.py +97 -0
  523. angr/flirt/build_sig.py +305 -0
  524. angr/graph_utils.py +0 -0
  525. angr/keyed_region.py +525 -0
  526. angr/knowledge_base.py +143 -0
  527. angr/knowledge_plugins/__init__.py +43 -0
  528. angr/knowledge_plugins/callsite_prototypes.py +53 -0
  529. angr/knowledge_plugins/cfg/__init__.py +18 -0
  530. angr/knowledge_plugins/cfg/cfg_manager.py +95 -0
  531. angr/knowledge_plugins/cfg/cfg_model.py +1045 -0
  532. angr/knowledge_plugins/cfg/cfg_node.py +536 -0
  533. angr/knowledge_plugins/cfg/indirect_jump.py +65 -0
  534. angr/knowledge_plugins/cfg/memory_data.py +156 -0
  535. angr/knowledge_plugins/comments.py +16 -0
  536. angr/knowledge_plugins/custom_strings.py +38 -0
  537. angr/knowledge_plugins/data.py +22 -0
  538. angr/knowledge_plugins/debug_variables.py +216 -0
  539. angr/knowledge_plugins/functions/__init__.py +9 -0
  540. angr/knowledge_plugins/functions/function.py +1780 -0
  541. angr/knowledge_plugins/functions/function_manager.py +588 -0
  542. angr/knowledge_plugins/functions/function_parser.py +299 -0
  543. angr/knowledge_plugins/functions/soot_function.py +128 -0
  544. angr/knowledge_plugins/indirect_jumps.py +35 -0
  545. angr/knowledge_plugins/key_definitions/__init__.py +17 -0
  546. angr/knowledge_plugins/key_definitions/atoms.py +374 -0
  547. angr/knowledge_plugins/key_definitions/constants.py +29 -0
  548. angr/knowledge_plugins/key_definitions/definition.py +214 -0
  549. angr/knowledge_plugins/key_definitions/environment.py +96 -0
  550. angr/knowledge_plugins/key_definitions/heap_address.py +33 -0
  551. angr/knowledge_plugins/key_definitions/key_definition_manager.py +82 -0
  552. angr/knowledge_plugins/key_definitions/live_definitions.py +1010 -0
  553. angr/knowledge_plugins/key_definitions/liveness.py +165 -0
  554. angr/knowledge_plugins/key_definitions/rd_model.py +171 -0
  555. angr/knowledge_plugins/key_definitions/tag.py +78 -0
  556. angr/knowledge_plugins/key_definitions/undefined.py +70 -0
  557. angr/knowledge_plugins/key_definitions/unknown_size.py +86 -0
  558. angr/knowledge_plugins/key_definitions/uses.py +178 -0
  559. angr/knowledge_plugins/labels.py +110 -0
  560. angr/knowledge_plugins/obfuscations.py +37 -0
  561. angr/knowledge_plugins/patches.py +126 -0
  562. angr/knowledge_plugins/plugin.py +24 -0
  563. angr/knowledge_plugins/propagations/__init__.py +10 -0
  564. angr/knowledge_plugins/propagations/prop_value.py +191 -0
  565. angr/knowledge_plugins/propagations/propagation_manager.py +60 -0
  566. angr/knowledge_plugins/propagations/propagation_model.py +80 -0
  567. angr/knowledge_plugins/propagations/states.py +552 -0
  568. angr/knowledge_plugins/structured_code.py +63 -0
  569. angr/knowledge_plugins/types.py +88 -0
  570. angr/knowledge_plugins/variables/__init__.py +8 -0
  571. angr/knowledge_plugins/variables/variable_access.py +113 -0
  572. angr/knowledge_plugins/variables/variable_manager.py +1380 -0
  573. angr/knowledge_plugins/xrefs/__init__.py +12 -0
  574. angr/knowledge_plugins/xrefs/xref.py +150 -0
  575. angr/knowledge_plugins/xrefs/xref_manager.py +127 -0
  576. angr/knowledge_plugins/xrefs/xref_types.py +16 -0
  577. angr/misc/__init__.py +19 -0
  578. angr/misc/ansi.py +47 -0
  579. angr/misc/autoimport.py +90 -0
  580. angr/misc/bug_report.py +117 -0
  581. angr/misc/hookset.py +106 -0
  582. angr/misc/loggers.py +130 -0
  583. angr/misc/picklable_lock.py +46 -0
  584. angr/misc/plugins.py +289 -0
  585. angr/misc/telemetry.py +54 -0
  586. angr/misc/testing.py +24 -0
  587. angr/misc/ux.py +31 -0
  588. angr/procedures/__init__.py +12 -0
  589. angr/procedures/advapi32/__init__.py +0 -0
  590. angr/procedures/cgc/__init__.py +3 -0
  591. angr/procedures/cgc/_terminate.py +11 -0
  592. angr/procedures/cgc/allocate.py +75 -0
  593. angr/procedures/cgc/deallocate.py +67 -0
  594. angr/procedures/cgc/fdwait.py +65 -0
  595. angr/procedures/cgc/random.py +67 -0
  596. angr/procedures/cgc/receive.py +93 -0
  597. angr/procedures/cgc/transmit.py +65 -0
  598. angr/procedures/definitions/__init__.py +779 -0
  599. angr/procedures/definitions/cgc.py +20 -0
  600. angr/procedures/definitions/glibc.py +8372 -0
  601. angr/procedures/definitions/gnulib.py +32 -0
  602. angr/procedures/definitions/libstdcpp.py +21 -0
  603. angr/procedures/definitions/linux_kernel.py +6171 -0
  604. angr/procedures/definitions/linux_loader.py +7 -0
  605. angr/procedures/definitions/msvcr.py +16 -0
  606. angr/procedures/definitions/parse_syscalls_from_local_system.py +50 -0
  607. angr/procedures/definitions/parse_win32json.py +2553 -0
  608. angr/procedures/definitions/types_stl.py +22 -0
  609. angr/procedures/definitions/types_win32.py +34482 -0
  610. angr/procedures/definitions/wdk_api-ms-win-dx-d3dkmt-l1-1-4.py +30 -0
  611. angr/procedures/definitions/wdk_api-ms-win-dx-d3dkmt-l1-1-6.py +26 -0
  612. angr/procedures/definitions/wdk_clfs.py +140 -0
  613. angr/procedures/definitions/wdk_fltmgr.py +556 -0
  614. angr/procedures/definitions/wdk_fwpkclnt.py +30 -0
  615. angr/procedures/definitions/wdk_fwpuclnt.py +316 -0
  616. angr/procedures/definitions/wdk_gdi32.py +366 -0
  617. angr/procedures/definitions/wdk_hal.py +78 -0
  618. angr/procedures/definitions/wdk_ksecdd.py +62 -0
  619. angr/procedures/definitions/wdk_ndis.py +238 -0
  620. angr/procedures/definitions/wdk_ntoskrnl.py +3451 -0
  621. angr/procedures/definitions/wdk_offreg.py +72 -0
  622. angr/procedures/definitions/wdk_pshed.py +36 -0
  623. angr/procedures/definitions/wdk_secur32.py +40 -0
  624. angr/procedures/definitions/wdk_vhfum.py +34 -0
  625. angr/procedures/definitions/win32_aclui.py +30 -0
  626. angr/procedures/definitions/win32_activeds.py +68 -0
  627. angr/procedures/definitions/win32_advapi32.py +1684 -0
  628. angr/procedures/definitions/win32_advpack.py +124 -0
  629. angr/procedures/definitions/win32_amsi.py +38 -0
  630. angr/procedures/definitions/win32_api-ms-win-appmodel-runtime-l1-1-1.py +44 -0
  631. angr/procedures/definitions/win32_api-ms-win-appmodel-runtime-l1-1-3.py +34 -0
  632. angr/procedures/definitions/win32_api-ms-win-appmodel-runtime-l1-1-6.py +26 -0
  633. angr/procedures/definitions/win32_api-ms-win-core-apiquery-l2-1-0.py +26 -0
  634. angr/procedures/definitions/win32_api-ms-win-core-backgroundtask-l1-1-0.py +26 -0
  635. angr/procedures/definitions/win32_api-ms-win-core-comm-l1-1-1.py +26 -0
  636. angr/procedures/definitions/win32_api-ms-win-core-comm-l1-1-2.py +26 -0
  637. angr/procedures/definitions/win32_api-ms-win-core-enclave-l1-1-1.py +30 -0
  638. angr/procedures/definitions/win32_api-ms-win-core-errorhandling-l1-1-3.py +26 -0
  639. angr/procedures/definitions/win32_api-ms-win-core-featurestaging-l1-1-0.py +34 -0
  640. angr/procedures/definitions/win32_api-ms-win-core-featurestaging-l1-1-1.py +26 -0
  641. angr/procedures/definitions/win32_api-ms-win-core-file-fromapp-l1-1-0.py +46 -0
  642. angr/procedures/definitions/win32_api-ms-win-core-handle-l1-1-0.py +26 -0
  643. angr/procedures/definitions/win32_api-ms-win-core-ioring-l1-1-0.py +48 -0
  644. angr/procedures/definitions/win32_api-ms-win-core-marshal-l1-1-0.py +32 -0
  645. angr/procedures/definitions/win32_api-ms-win-core-memory-l1-1-3.py +32 -0
  646. angr/procedures/definitions/win32_api-ms-win-core-memory-l1-1-4.py +26 -0
  647. angr/procedures/definitions/win32_api-ms-win-core-memory-l1-1-5.py +30 -0
  648. angr/procedures/definitions/win32_api-ms-win-core-memory-l1-1-6.py +32 -0
  649. angr/procedures/definitions/win32_api-ms-win-core-memory-l1-1-7.py +28 -0
  650. angr/procedures/definitions/win32_api-ms-win-core-memory-l1-1-8.py +30 -0
  651. angr/procedures/definitions/win32_api-ms-win-core-path-l1-1-0.py +68 -0
  652. angr/procedures/definitions/win32_api-ms-win-core-psm-appnotify-l1-1-0.py +28 -0
  653. angr/procedures/definitions/win32_api-ms-win-core-psm-appnotify-l1-1-1.py +28 -0
  654. angr/procedures/definitions/win32_api-ms-win-core-realtime-l1-1-1.py +30 -0
  655. angr/procedures/definitions/win32_api-ms-win-core-realtime-l1-1-2.py +30 -0
  656. angr/procedures/definitions/win32_api-ms-win-core-slapi-l1-1-0.py +26 -0
  657. angr/procedures/definitions/win32_api-ms-win-core-state-helpers-l1-1-0.py +26 -0
  658. angr/procedures/definitions/win32_api-ms-win-core-synch-l1-2-0.py +30 -0
  659. angr/procedures/definitions/win32_api-ms-win-core-sysinfo-l1-2-0.py +26 -0
  660. angr/procedures/definitions/win32_api-ms-win-core-sysinfo-l1-2-3.py +28 -0
  661. angr/procedures/definitions/win32_api-ms-win-core-sysinfo-l1-2-4.py +28 -0
  662. angr/procedures/definitions/win32_api-ms-win-core-sysinfo-l1-2-6.py +26 -0
  663. angr/procedures/definitions/win32_api-ms-win-core-util-l1-1-1.py +28 -0
  664. angr/procedures/definitions/win32_api-ms-win-core-winrt-error-l1-1-0.py +44 -0
  665. angr/procedures/definitions/win32_api-ms-win-core-winrt-error-l1-1-1.py +38 -0
  666. angr/procedures/definitions/win32_api-ms-win-core-winrt-l1-1-0.py +40 -0
  667. angr/procedures/definitions/win32_api-ms-win-core-winrt-registration-l1-1-0.py +24 -0
  668. angr/procedures/definitions/win32_api-ms-win-core-winrt-robuffer-l1-1-0.py +24 -0
  669. angr/procedures/definitions/win32_api-ms-win-core-winrt-roparameterizediid-l1-1-0.py +28 -0
  670. angr/procedures/definitions/win32_api-ms-win-core-winrt-string-l1-1-0.py +76 -0
  671. angr/procedures/definitions/win32_api-ms-win-core-winrt-string-l1-1-1.py +24 -0
  672. angr/procedures/definitions/win32_api-ms-win-core-wow64-l1-1-1.py +30 -0
  673. angr/procedures/definitions/win32_api-ms-win-devices-query-l1-1-0.py +42 -0
  674. angr/procedures/definitions/win32_api-ms-win-devices-query-l1-1-1.py +34 -0
  675. angr/procedures/definitions/win32_api-ms-win-dx-d3dkmt-l1-1-0.py +26 -0
  676. angr/procedures/definitions/win32_api-ms-win-gaming-deviceinformation-l1-1-0.py +26 -0
  677. angr/procedures/definitions/win32_api-ms-win-gaming-expandedresources-l1-1-0.py +30 -0
  678. angr/procedures/definitions/win32_api-ms-win-gaming-tcui-l1-1-0.py +38 -0
  679. angr/procedures/definitions/win32_api-ms-win-gaming-tcui-l1-1-1.py +28 -0
  680. angr/procedures/definitions/win32_api-ms-win-gaming-tcui-l1-1-2.py +38 -0
  681. angr/procedures/definitions/win32_api-ms-win-gaming-tcui-l1-1-3.py +28 -0
  682. angr/procedures/definitions/win32_api-ms-win-gaming-tcui-l1-1-4.py +40 -0
  683. angr/procedures/definitions/win32_api-ms-win-mm-misc-l1-1-1.py +26 -0
  684. angr/procedures/definitions/win32_api-ms-win-net-isolation-l1-1-0.py +40 -0
  685. angr/procedures/definitions/win32_api-ms-win-security-base-l1-2-2.py +26 -0
  686. angr/procedures/definitions/win32_api-ms-win-security-isolatedcontainer-l1-1-0.py +26 -0
  687. angr/procedures/definitions/win32_api-ms-win-security-isolatedcontainer-l1-1-1.py +26 -0
  688. angr/procedures/definitions/win32_api-ms-win-service-core-l1-1-3.py +26 -0
  689. angr/procedures/definitions/win32_api-ms-win-service-core-l1-1-4.py +26 -0
  690. angr/procedures/definitions/win32_api-ms-win-service-core-l1-1-5.py +28 -0
  691. angr/procedures/definitions/win32_api-ms-win-shcore-scaling-l1-1-0.py +30 -0
  692. angr/procedures/definitions/win32_api-ms-win-shcore-scaling-l1-1-1.py +36 -0
  693. angr/procedures/definitions/win32_api-ms-win-shcore-scaling-l1-1-2.py +26 -0
  694. angr/procedures/definitions/win32_api-ms-win-shcore-stream-winrt-l1-1-0.py +28 -0
  695. angr/procedures/definitions/win32_api-ms-win-wsl-api-l1-1-0.py +38 -0
  696. angr/procedures/definitions/win32_apphelp.py +26 -0
  697. angr/procedures/definitions/win32_authz.py +90 -0
  698. angr/procedures/definitions/win32_avicap32.py +32 -0
  699. angr/procedures/definitions/win32_avifil32.py +144 -0
  700. angr/procedures/definitions/win32_avrt.py +52 -0
  701. angr/procedures/definitions/win32_bcp47mrm.py +28 -0
  702. angr/procedures/definitions/win32_bcrypt.py +130 -0
  703. angr/procedures/definitions/win32_bcryptprimitives.py +28 -0
  704. angr/procedures/definitions/win32_bluetoothapis.py +106 -0
  705. angr/procedures/definitions/win32_bthprops.py +34 -0
  706. angr/procedures/definitions/win32_bthprops_cpl.py +36 -0
  707. angr/procedures/definitions/win32_cabinet.py +68 -0
  708. angr/procedures/definitions/win32_certadm.py +60 -0
  709. angr/procedures/definitions/win32_certpoleng.py +40 -0
  710. angr/procedures/definitions/win32_cfgmgr32.py +502 -0
  711. angr/procedures/definitions/win32_chakra.py +198 -0
  712. angr/procedures/definitions/win32_cldapi.py +96 -0
  713. angr/procedures/definitions/win32_clfsw32.py +142 -0
  714. angr/procedures/definitions/win32_clusapi.py +584 -0
  715. angr/procedures/definitions/win32_comctl32.py +254 -0
  716. angr/procedures/definitions/win32_comdlg32.py +66 -0
  717. angr/procedures/definitions/win32_compstui.py +32 -0
  718. angr/procedures/definitions/win32_computecore.py +132 -0
  719. angr/procedures/definitions/win32_computenetwork.py +110 -0
  720. angr/procedures/definitions/win32_computestorage.py +48 -0
  721. angr/procedures/definitions/win32_comsvcs.py +38 -0
  722. angr/procedures/definitions/win32_coremessaging.py +24 -0
  723. angr/procedures/definitions/win32_credui.py +62 -0
  724. angr/procedures/definitions/win32_crypt32.py +482 -0
  725. angr/procedures/definitions/win32_cryptnet.py +34 -0
  726. angr/procedures/definitions/win32_cryptui.py +44 -0
  727. angr/procedures/definitions/win32_cryptxml.py +62 -0
  728. angr/procedures/definitions/win32_cscapi.py +32 -0
  729. angr/procedures/definitions/win32_d2d1.py +50 -0
  730. angr/procedures/definitions/win32_d3d10.py +78 -0
  731. angr/procedures/definitions/win32_d3d10_1.py +28 -0
  732. angr/procedures/definitions/win32_d3d11.py +30 -0
  733. angr/procedures/definitions/win32_d3d12.py +40 -0
  734. angr/procedures/definitions/win32_d3d9.py +46 -0
  735. angr/procedures/definitions/win32_d3dcompiler_47.py +76 -0
  736. angr/procedures/definitions/win32_d3dcsx.py +42 -0
  737. angr/procedures/definitions/win32_davclnt.py +60 -0
  738. angr/procedures/definitions/win32_dbgeng.py +32 -0
  739. angr/procedures/definitions/win32_dbghelp.py +462 -0
  740. angr/procedures/definitions/win32_dbgmodel.py +26 -0
  741. angr/procedures/definitions/win32_dciman32.py +64 -0
  742. angr/procedures/definitions/win32_dcomp.py +48 -0
  743. angr/procedures/definitions/win32_ddraw.py +38 -0
  744. angr/procedures/definitions/win32_deviceaccess.py +26 -0
  745. angr/procedures/definitions/win32_dflayout.py +26 -0
  746. angr/procedures/definitions/win32_dhcpcsvc.py +54 -0
  747. angr/procedures/definitions/win32_dhcpcsvc6.py +36 -0
  748. angr/procedures/definitions/win32_dhcpsapi.py +416 -0
  749. angr/procedures/definitions/win32_diagnosticdataquery.py +94 -0
  750. angr/procedures/definitions/win32_dinput8.py +26 -0
  751. angr/procedures/definitions/win32_directml.py +28 -0
  752. angr/procedures/definitions/win32_dmprocessxmlfiltered.py +26 -0
  753. angr/procedures/definitions/win32_dnsapi.py +152 -0
  754. angr/procedures/definitions/win32_drt.py +56 -0
  755. angr/procedures/definitions/win32_drtprov.py +42 -0
  756. angr/procedures/definitions/win32_drttransport.py +28 -0
  757. angr/procedures/definitions/win32_dsound.py +44 -0
  758. angr/procedures/definitions/win32_dsparse.py +62 -0
  759. angr/procedures/definitions/win32_dsprop.py +38 -0
  760. angr/procedures/definitions/win32_dssec.py +32 -0
  761. angr/procedures/definitions/win32_dsuiext.py +32 -0
  762. angr/procedures/definitions/win32_dwmapi.py +86 -0
  763. angr/procedures/definitions/win32_dwrite.py +26 -0
  764. angr/procedures/definitions/win32_dxcompiler.py +28 -0
  765. angr/procedures/definitions/win32_dxcore.py +26 -0
  766. angr/procedures/definitions/win32_dxgi.py +36 -0
  767. angr/procedures/definitions/win32_dxva2.py +100 -0
  768. angr/procedures/definitions/win32_eappcfg.py +52 -0
  769. angr/procedures/definitions/win32_eappprxy.py +60 -0
  770. angr/procedures/definitions/win32_efswrt.py +28 -0
  771. angr/procedures/definitions/win32_elscore.py +34 -0
  772. angr/procedures/definitions/win32_esent.py +482 -0
  773. angr/procedures/definitions/win32_evr.py +38 -0
  774. angr/procedures/definitions/win32_faultrep.py +32 -0
  775. angr/procedures/definitions/win32_fhsvcctl.py +38 -0
  776. angr/procedures/definitions/win32_firewallapi.py +30 -0
  777. angr/procedures/definitions/win32_fltlib.py +80 -0
  778. angr/procedures/definitions/win32_fontsub.py +28 -0
  779. angr/procedures/definitions/win32_forceinline.py +30 -0
  780. angr/procedures/definitions/win32_fwpuclnt.py +408 -0
  781. angr/procedures/definitions/win32_fxsutility.py +28 -0
  782. angr/procedures/definitions/win32_gdi32.py +886 -0
  783. angr/procedures/definitions/win32_gdiplus.py +1282 -0
  784. angr/procedures/definitions/win32_glu32.py +128 -0
  785. angr/procedures/definitions/win32_gpedit.py +36 -0
  786. angr/procedures/definitions/win32_hhctrl_ocx.py +28 -0
  787. angr/procedures/definitions/win32_hid.py +114 -0
  788. angr/procedures/definitions/win32_hlink.py +80 -0
  789. angr/procedures/definitions/win32_hrtfapo.py +26 -0
  790. angr/procedures/definitions/win32_httpapi.py +110 -0
  791. angr/procedures/definitions/win32_icm32.py +66 -0
  792. angr/procedures/definitions/win32_icmui.py +28 -0
  793. angr/procedures/definitions/win32_icu.py +2074 -0
  794. angr/procedures/definitions/win32_ieframe.py +82 -0
  795. angr/procedures/definitions/win32_imagehlp.py +76 -0
  796. angr/procedures/definitions/win32_imgutil.py +42 -0
  797. angr/procedures/definitions/win32_imm32.py +188 -0
  798. angr/procedures/definitions/win32_infocardapi.py +58 -0
  799. angr/procedures/definitions/win32_inkobjcore.py +78 -0
  800. angr/procedures/definitions/win32_iphlpapi.py +426 -0
  801. angr/procedures/definitions/win32_iscsidsc.py +182 -0
  802. angr/procedures/definitions/win32_isolatedwindowsenvironmentutils.py +28 -0
  803. angr/procedures/definitions/win32_kernel32.py +3185 -0
  804. angr/procedures/definitions/win32_kernelbase.py +36 -0
  805. angr/procedures/definitions/win32_keycredmgr.py +32 -0
  806. angr/procedures/definitions/win32_ksproxy_ax.py +36 -0
  807. angr/procedures/definitions/win32_ksuser.py +40 -0
  808. angr/procedures/definitions/win32_ktmw32.py +102 -0
  809. angr/procedures/definitions/win32_licenseprotection.py +28 -0
  810. angr/procedures/definitions/win32_loadperf.py +48 -0
  811. angr/procedures/definitions/win32_magnification.py +62 -0
  812. angr/procedures/definitions/win32_mapi32.py +156 -0
  813. angr/procedures/definitions/win32_mdmlocalmanagement.py +30 -0
  814. angr/procedures/definitions/win32_mdmregistration.py +54 -0
  815. angr/procedures/definitions/win32_mf.py +148 -0
  816. angr/procedures/definitions/win32_mfcore.py +28 -0
  817. angr/procedures/definitions/win32_mfplat.py +314 -0
  818. angr/procedures/definitions/win32_mfplay.py +26 -0
  819. angr/procedures/definitions/win32_mfreadwrite.py +34 -0
  820. angr/procedures/definitions/win32_mfsensorgroup.py +44 -0
  821. angr/procedures/definitions/win32_mfsrcsnk.py +28 -0
  822. angr/procedures/definitions/win32_mgmtapi.py +42 -0
  823. angr/procedures/definitions/win32_mi.py +26 -0
  824. angr/procedures/definitions/win32_mmdevapi.py +26 -0
  825. angr/procedures/definitions/win32_mpr.py +118 -0
  826. angr/procedures/definitions/win32_mprapi.py +248 -0
  827. angr/procedures/definitions/win32_mqrt.py +92 -0
  828. angr/procedures/definitions/win32_mrmsupport.py +78 -0
  829. angr/procedures/definitions/win32_msacm32.py +108 -0
  830. angr/procedures/definitions/win32_msajapi.py +1118 -0
  831. angr/procedures/definitions/win32_mscms.py +182 -0
  832. angr/procedures/definitions/win32_mscoree.py +78 -0
  833. angr/procedures/definitions/win32_msctfmonitor.py +30 -0
  834. angr/procedures/definitions/win32_msdelta.py +56 -0
  835. angr/procedures/definitions/win32_msdmo.py +46 -0
  836. angr/procedures/definitions/win32_msdrm.py +192 -0
  837. angr/procedures/definitions/win32_msi.py +552 -0
  838. angr/procedures/definitions/win32_msimg32.py +30 -0
  839. angr/procedures/definitions/win32_mspatcha.py +56 -0
  840. angr/procedures/definitions/win32_mspatchc.py +42 -0
  841. angr/procedures/definitions/win32_msports.py +38 -0
  842. angr/procedures/definitions/win32_msrating.py +62 -0
  843. angr/procedures/definitions/win32_mssign32.py +44 -0
  844. angr/procedures/definitions/win32_mstask.py +28 -0
  845. angr/procedures/definitions/win32_msvfw32.py +110 -0
  846. angr/procedures/definitions/win32_mswsock.py +56 -0
  847. angr/procedures/definitions/win32_mtxdm.py +26 -0
  848. angr/procedures/definitions/win32_ncrypt.py +102 -0
  849. angr/procedures/definitions/win32_ndfapi.py +56 -0
  850. angr/procedures/definitions/win32_netapi32.py +436 -0
  851. angr/procedures/definitions/win32_netsh.py +40 -0
  852. angr/procedures/definitions/win32_netshell.py +28 -0
  853. angr/procedures/definitions/win32_newdev.py +46 -0
  854. angr/procedures/definitions/win32_ninput.py +84 -0
  855. angr/procedures/definitions/win32_normaliz.py +28 -0
  856. angr/procedures/definitions/win32_ntdll.py +171 -0
  857. angr/procedures/definitions/win32_ntdllk.py +26 -0
  858. angr/procedures/definitions/win32_ntdsapi.py +186 -0
  859. angr/procedures/definitions/win32_ntlanman.py +44 -0
  860. angr/procedures/definitions/win32_odbc32.py +392 -0
  861. angr/procedures/definitions/win32_odbcbcp.py +78 -0
  862. angr/procedures/definitions/win32_ole32.py +658 -0
  863. angr/procedures/definitions/win32_oleacc.py +58 -0
  864. angr/procedures/definitions/win32_oleaut32.py +834 -0
  865. angr/procedures/definitions/win32_oledlg.py +70 -0
  866. angr/procedures/definitions/win32_ondemandconnroutehelper.py +34 -0
  867. angr/procedures/definitions/win32_opengl32.py +734 -0
  868. angr/procedures/definitions/win32_opmxbox.py +30 -0
  869. angr/procedures/definitions/win32_p2p.py +240 -0
  870. angr/procedures/definitions/win32_p2pgraph.py +98 -0
  871. angr/procedures/definitions/win32_pdh.py +220 -0
  872. angr/procedures/definitions/win32_peerdist.py +80 -0
  873. angr/procedures/definitions/win32_powrprof.py +192 -0
  874. angr/procedures/definitions/win32_prntvpt.py +46 -0
  875. angr/procedures/definitions/win32_projectedfslib.py +62 -0
  876. angr/procedures/definitions/win32_propsys.py +460 -0
  877. angr/procedures/definitions/win32_psapi.py +78 -0
  878. angr/procedures/definitions/win32_quartz.py +28 -0
  879. angr/procedures/definitions/win32_query.py +32 -0
  880. angr/procedures/definitions/win32_qwave.py +46 -0
  881. angr/procedures/definitions/win32_rasapi32.py +192 -0
  882. angr/procedures/definitions/win32_rasdlg.py +36 -0
  883. angr/procedures/definitions/win32_resutils.py +264 -0
  884. angr/procedures/definitions/win32_rometadata.py +24 -0
  885. angr/procedures/definitions/win32_rpcns4.py +146 -0
  886. angr/procedures/definitions/win32_rpcproxy.py +32 -0
  887. angr/procedures/definitions/win32_rpcrt4.py +918 -0
  888. angr/procedures/definitions/win32_rstrtmgr.py +46 -0
  889. angr/procedures/definitions/win32_rtm.py +176 -0
  890. angr/procedures/definitions/win32_rtutils.py +106 -0
  891. angr/procedures/definitions/win32_rtworkq.py +90 -0
  892. angr/procedures/definitions/win32_sas.py +26 -0
  893. angr/procedures/definitions/win32_scarddlg.py +34 -0
  894. angr/procedures/definitions/win32_schannel.py +42 -0
  895. angr/procedures/definitions/win32_sechost.py +28 -0
  896. angr/procedures/definitions/win32_secur32.py +202 -0
  897. angr/procedures/definitions/win32_sensapi.py +30 -0
  898. angr/procedures/definitions/win32_sensorsutilsv2.py +104 -0
  899. angr/procedures/definitions/win32_setupapi.py +692 -0
  900. angr/procedures/definitions/win32_sfc.py +36 -0
  901. angr/procedures/definitions/win32_shdocvw.py +30 -0
  902. angr/procedures/definitions/win32_shell32.py +512 -0
  903. angr/procedures/definitions/win32_shlwapi.py +744 -0
  904. angr/procedures/definitions/win32_slc.py +88 -0
  905. angr/procedures/definitions/win32_slcext.py +32 -0
  906. angr/procedures/definitions/win32_slwga.py +26 -0
  907. angr/procedures/definitions/win32_snmpapi.py +76 -0
  908. angr/procedures/definitions/win32_spoolss.py +76 -0
  909. angr/procedures/definitions/win32_srclient.py +26 -0
  910. angr/procedures/definitions/win32_srpapi.py +46 -0
  911. angr/procedures/definitions/win32_sspicli.py +38 -0
  912. angr/procedures/definitions/win32_sti.py +26 -0
  913. angr/procedures/definitions/win32_t2embed.py +52 -0
  914. angr/procedures/definitions/win32_tapi32.py +522 -0
  915. angr/procedures/definitions/win32_tbs.py +52 -0
  916. angr/procedures/definitions/win32_tdh.py +78 -0
  917. angr/procedures/definitions/win32_tokenbinding.py +44 -0
  918. angr/procedures/definitions/win32_traffic.py +64 -0
  919. angr/procedures/definitions/win32_txfw32.py +42 -0
  920. angr/procedures/definitions/win32_ualapi.py +32 -0
  921. angr/procedures/definitions/win32_uiautomationcore.py +220 -0
  922. angr/procedures/definitions/win32_urlmon.py +178 -0
  923. angr/procedures/definitions/win32_user32.py +1551 -0
  924. angr/procedures/definitions/win32_userenv.py +112 -0
  925. angr/procedures/definitions/win32_usp10.py +104 -0
  926. angr/procedures/definitions/win32_uxtheme.py +178 -0
  927. angr/procedures/definitions/win32_verifier.py +26 -0
  928. angr/procedures/definitions/win32_version.py +52 -0
  929. angr/procedures/definitions/win32_vertdll.py +38 -0
  930. angr/procedures/definitions/win32_virtdisk.py +82 -0
  931. angr/procedures/definitions/win32_vmdevicehost.py +50 -0
  932. angr/procedures/definitions/win32_vmsavedstatedumpprovider.py +110 -0
  933. angr/procedures/definitions/win32_vssapi.py +26 -0
  934. angr/procedures/definitions/win32_wcmapi.py +34 -0
  935. angr/procedures/definitions/win32_wdsbp.py +38 -0
  936. angr/procedures/definitions/win32_wdsclientapi.py +98 -0
  937. angr/procedures/definitions/win32_wdsmc.py +36 -0
  938. angr/procedures/definitions/win32_wdspxe.py +86 -0
  939. angr/procedures/definitions/win32_wdstptc.py +50 -0
  940. angr/procedures/definitions/win32_webauthn.py +50 -0
  941. angr/procedures/definitions/win32_webservices.py +410 -0
  942. angr/procedures/definitions/win32_websocket.py +50 -0
  943. angr/procedures/definitions/win32_wecapi.py +54 -0
  944. angr/procedures/definitions/win32_wer.py +66 -0
  945. angr/procedures/definitions/win32_wevtapi.py +94 -0
  946. angr/procedures/definitions/win32_winbio.py +132 -0
  947. angr/procedures/definitions/win32_windows_ai_machinelearning.py +26 -0
  948. angr/procedures/definitions/win32_windows_data_pdf.py +24 -0
  949. angr/procedures/definitions/win32_windows_media_mediacontrol.py +40 -0
  950. angr/procedures/definitions/win32_windows_networking.py +26 -0
  951. angr/procedures/definitions/win32_windows_ui_xaml.py +28 -0
  952. angr/procedures/definitions/win32_windowscodecs.py +42 -0
  953. angr/procedures/definitions/win32_winfax.py +136 -0
  954. angr/procedures/definitions/win32_winhttp.py +136 -0
  955. angr/procedures/definitions/win32_winhvemulation.py +32 -0
  956. angr/procedures/definitions/win32_winhvplatform.py +156 -0
  957. angr/procedures/definitions/win32_wininet.py +616 -0
  958. angr/procedures/definitions/win32_winml.py +26 -0
  959. angr/procedures/definitions/win32_winmm.py +376 -0
  960. angr/procedures/definitions/win32_winscard.py +164 -0
  961. angr/procedures/definitions/win32_winspool.py +364 -0
  962. angr/procedures/definitions/win32_winspool_drv.py +368 -0
  963. angr/procedures/definitions/win32_wintrust.py +144 -0
  964. angr/procedures/definitions/win32_winusb.py +92 -0
  965. angr/procedures/definitions/win32_wlanapi.py +144 -0
  966. angr/procedures/definitions/win32_wlanui.py +26 -0
  967. angr/procedures/definitions/win32_wldap32.py +510 -0
  968. angr/procedures/definitions/win32_wldp.py +42 -0
  969. angr/procedures/definitions/win32_wmvcore.py +46 -0
  970. angr/procedures/definitions/win32_wnvapi.py +28 -0
  971. angr/procedures/definitions/win32_wofutil.py +46 -0
  972. angr/procedures/definitions/win32_ws2_32.py +344 -0
  973. angr/procedures/definitions/win32_wscapi.py +36 -0
  974. angr/procedures/definitions/win32_wsclient.py +30 -0
  975. angr/procedures/definitions/win32_wsdapi.py +88 -0
  976. angr/procedures/definitions/win32_wsmsvc.py +90 -0
  977. angr/procedures/definitions/win32_wsnmp32.py +122 -0
  978. angr/procedures/definitions/win32_wtsapi32.py +150 -0
  979. angr/procedures/definitions/win32_xaudio2_8.py +32 -0
  980. angr/procedures/definitions/win32_xinput1_4.py +38 -0
  981. angr/procedures/definitions/win32_xinputuap.py +36 -0
  982. angr/procedures/definitions/win32_xmllite.py +36 -0
  983. angr/procedures/definitions/win32_xolehlp.py +32 -0
  984. angr/procedures/definitions/win32_xpsprint.py +28 -0
  985. angr/procedures/glibc/__ctype_b_loc.py +21 -0
  986. angr/procedures/glibc/__ctype_tolower_loc.py +21 -0
  987. angr/procedures/glibc/__ctype_toupper_loc.py +21 -0
  988. angr/procedures/glibc/__errno_location.py +7 -0
  989. angr/procedures/glibc/__init__.py +3 -0
  990. angr/procedures/glibc/__libc_init.py +37 -0
  991. angr/procedures/glibc/__libc_start_main.py +301 -0
  992. angr/procedures/glibc/dynamic_loading.py +20 -0
  993. angr/procedures/glibc/scanf.py +11 -0
  994. angr/procedures/glibc/sscanf.py +6 -0
  995. angr/procedures/gnulib/__init__.py +3 -0
  996. angr/procedures/gnulib/xalloc_die.py +14 -0
  997. angr/procedures/gnulib/xstrtol_fatal.py +14 -0
  998. angr/procedures/java/__init__.py +42 -0
  999. angr/procedures/java/unconstrained.py +65 -0
  1000. angr/procedures/java_io/__init__.py +0 -0
  1001. angr/procedures/java_io/read.py +12 -0
  1002. angr/procedures/java_io/write.py +17 -0
  1003. angr/procedures/java_jni/__init__.py +482 -0
  1004. angr/procedures/java_jni/array_operations.py +312 -0
  1005. angr/procedures/java_jni/class_and_interface_operations.py +31 -0
  1006. angr/procedures/java_jni/field_access.py +173 -0
  1007. angr/procedures/java_jni/global_and_local_refs.py +57 -0
  1008. angr/procedures/java_jni/method_calls.py +365 -0
  1009. angr/procedures/java_jni/not_implemented.py +26 -0
  1010. angr/procedures/java_jni/object_operations.py +94 -0
  1011. angr/procedures/java_jni/string_operations.py +87 -0
  1012. angr/procedures/java_jni/version_information.py +12 -0
  1013. angr/procedures/java_lang/__init__.py +0 -0
  1014. angr/procedures/java_lang/character.py +30 -0
  1015. angr/procedures/java_lang/double.py +24 -0
  1016. angr/procedures/java_lang/exit.py +13 -0
  1017. angr/procedures/java_lang/getsimplename.py +18 -0
  1018. angr/procedures/java_lang/integer.py +43 -0
  1019. angr/procedures/java_lang/load_library.py +9 -0
  1020. angr/procedures/java_lang/math.py +15 -0
  1021. angr/procedures/java_lang/string.py +78 -0
  1022. angr/procedures/java_lang/stringbuilder.py +44 -0
  1023. angr/procedures/java_lang/system.py +18 -0
  1024. angr/procedures/java_util/__init__.py +0 -0
  1025. angr/procedures/java_util/collection.py +35 -0
  1026. angr/procedures/java_util/iterator.py +46 -0
  1027. angr/procedures/java_util/list.py +99 -0
  1028. angr/procedures/java_util/map.py +131 -0
  1029. angr/procedures/java_util/random.py +14 -0
  1030. angr/procedures/java_util/scanner_nextline.py +23 -0
  1031. angr/procedures/libc/__init__.py +3 -0
  1032. angr/procedures/libc/abort.py +9 -0
  1033. angr/procedures/libc/access.py +13 -0
  1034. angr/procedures/libc/atoi.py +14 -0
  1035. angr/procedures/libc/atol.py +13 -0
  1036. angr/procedures/libc/calloc.py +8 -0
  1037. angr/procedures/libc/closelog.py +10 -0
  1038. angr/procedures/libc/err.py +14 -0
  1039. angr/procedures/libc/error.py +54 -0
  1040. angr/procedures/libc/exit.py +11 -0
  1041. angr/procedures/libc/fclose.py +19 -0
  1042. angr/procedures/libc/feof.py +21 -0
  1043. angr/procedures/libc/fflush.py +16 -0
  1044. angr/procedures/libc/fgetc.py +27 -0
  1045. angr/procedures/libc/fgets.py +68 -0
  1046. angr/procedures/libc/fopen.py +63 -0
  1047. angr/procedures/libc/fprintf.py +25 -0
  1048. angr/procedures/libc/fputc.py +23 -0
  1049. angr/procedures/libc/fputs.py +24 -0
  1050. angr/procedures/libc/fread.py +24 -0
  1051. angr/procedures/libc/free.py +9 -0
  1052. angr/procedures/libc/fscanf.py +20 -0
  1053. angr/procedures/libc/fseek.py +34 -0
  1054. angr/procedures/libc/ftell.py +22 -0
  1055. angr/procedures/libc/fwrite.py +19 -0
  1056. angr/procedures/libc/getchar.py +13 -0
  1057. angr/procedures/libc/getdelim.py +99 -0
  1058. angr/procedures/libc/getegid.py +8 -0
  1059. angr/procedures/libc/geteuid.py +8 -0
  1060. angr/procedures/libc/getgid.py +8 -0
  1061. angr/procedures/libc/gets.py +68 -0
  1062. angr/procedures/libc/getuid.py +8 -0
  1063. angr/procedures/libc/malloc.py +12 -0
  1064. angr/procedures/libc/memcmp.py +69 -0
  1065. angr/procedures/libc/memcpy.py +38 -0
  1066. angr/procedures/libc/memset.py +72 -0
  1067. angr/procedures/libc/openlog.py +10 -0
  1068. angr/procedures/libc/perror.py +13 -0
  1069. angr/procedures/libc/printf.py +34 -0
  1070. angr/procedures/libc/putchar.py +13 -0
  1071. angr/procedures/libc/puts.py +19 -0
  1072. angr/procedures/libc/rand.py +8 -0
  1073. angr/procedures/libc/realloc.py +8 -0
  1074. angr/procedures/libc/rewind.py +12 -0
  1075. angr/procedures/libc/scanf.py +20 -0
  1076. angr/procedures/libc/setbuf.py +9 -0
  1077. angr/procedures/libc/setvbuf.py +7 -0
  1078. angr/procedures/libc/snprintf.py +36 -0
  1079. angr/procedures/libc/sprintf.py +25 -0
  1080. angr/procedures/libc/srand.py +7 -0
  1081. angr/procedures/libc/sscanf.py +13 -0
  1082. angr/procedures/libc/stpcpy.py +18 -0
  1083. angr/procedures/libc/strcat.py +14 -0
  1084. angr/procedures/libc/strchr.py +48 -0
  1085. angr/procedures/libc/strcmp.py +31 -0
  1086. angr/procedures/libc/strcpy.py +13 -0
  1087. angr/procedures/libc/strlen.py +114 -0
  1088. angr/procedures/libc/strncat.py +19 -0
  1089. angr/procedures/libc/strncmp.py +183 -0
  1090. angr/procedures/libc/strncpy.py +22 -0
  1091. angr/procedures/libc/strnlen.py +13 -0
  1092. angr/procedures/libc/strstr.py +101 -0
  1093. angr/procedures/libc/strtol.py +261 -0
  1094. angr/procedures/libc/strtoul.py +9 -0
  1095. angr/procedures/libc/system.py +13 -0
  1096. angr/procedures/libc/time.py +9 -0
  1097. angr/procedures/libc/tmpnam.py +20 -0
  1098. angr/procedures/libc/tolower.py +10 -0
  1099. angr/procedures/libc/toupper.py +10 -0
  1100. angr/procedures/libc/ungetc.py +20 -0
  1101. angr/procedures/libc/vsnprintf.py +17 -0
  1102. angr/procedures/libc/wchar.py +16 -0
  1103. angr/procedures/libstdcpp/__init__.py +0 -0
  1104. angr/procedures/libstdcpp/_unwind_resume.py +11 -0
  1105. angr/procedures/libstdcpp/std____throw_bad_alloc.py +13 -0
  1106. angr/procedures/libstdcpp/std____throw_bad_cast.py +13 -0
  1107. angr/procedures/libstdcpp/std____throw_length_error.py +13 -0
  1108. angr/procedures/libstdcpp/std____throw_logic_error.py +13 -0
  1109. angr/procedures/libstdcpp/std__terminate.py +13 -0
  1110. angr/procedures/linux_kernel/__init__.py +3 -0
  1111. angr/procedures/linux_kernel/access.py +18 -0
  1112. angr/procedures/linux_kernel/arch_prctl.py +34 -0
  1113. angr/procedures/linux_kernel/arm_user_helpers.py +59 -0
  1114. angr/procedures/linux_kernel/brk.py +18 -0
  1115. angr/procedures/linux_kernel/cwd.py +28 -0
  1116. angr/procedures/linux_kernel/fstat.py +138 -0
  1117. angr/procedures/linux_kernel/fstat64.py +170 -0
  1118. angr/procedures/linux_kernel/futex.py +17 -0
  1119. angr/procedures/linux_kernel/getegid.py +17 -0
  1120. angr/procedures/linux_kernel/geteuid.py +17 -0
  1121. angr/procedures/linux_kernel/getgid.py +17 -0
  1122. angr/procedures/linux_kernel/getpid.py +14 -0
  1123. angr/procedures/linux_kernel/getrlimit.py +24 -0
  1124. angr/procedures/linux_kernel/gettid.py +9 -0
  1125. angr/procedures/linux_kernel/getuid.py +17 -0
  1126. angr/procedures/linux_kernel/iovec.py +47 -0
  1127. angr/procedures/linux_kernel/lseek.py +42 -0
  1128. angr/procedures/linux_kernel/mmap.py +16 -0
  1129. angr/procedures/linux_kernel/mprotect.py +42 -0
  1130. angr/procedures/linux_kernel/munmap.py +8 -0
  1131. angr/procedures/linux_kernel/openat.py +26 -0
  1132. angr/procedures/linux_kernel/set_tid_address.py +8 -0
  1133. angr/procedures/linux_kernel/sigaction.py +19 -0
  1134. angr/procedures/linux_kernel/sigprocmask.py +23 -0
  1135. angr/procedures/linux_kernel/stat.py +23 -0
  1136. angr/procedures/linux_kernel/sysinfo.py +59 -0
  1137. angr/procedures/linux_kernel/tgkill.py +10 -0
  1138. angr/procedures/linux_kernel/time.py +34 -0
  1139. angr/procedures/linux_kernel/uid.py +30 -0
  1140. angr/procedures/linux_kernel/uname.py +29 -0
  1141. angr/procedures/linux_kernel/unlink.py +22 -0
  1142. angr/procedures/linux_kernel/vsyscall.py +16 -0
  1143. angr/procedures/linux_loader/__init__.py +3 -0
  1144. angr/procedures/linux_loader/_dl_initial_error_catch_tsd.py +7 -0
  1145. angr/procedures/linux_loader/_dl_rtld_lock.py +15 -0
  1146. angr/procedures/linux_loader/sim_loader.py +54 -0
  1147. angr/procedures/linux_loader/tls.py +40 -0
  1148. angr/procedures/msvcr/__getmainargs.py +16 -0
  1149. angr/procedures/msvcr/__init__.py +4 -0
  1150. angr/procedures/msvcr/_initterm.py +38 -0
  1151. angr/procedures/msvcr/fmode.py +31 -0
  1152. angr/procedures/ntdll/__init__.py +0 -0
  1153. angr/procedures/ntdll/exceptions.py +60 -0
  1154. angr/procedures/posix/__init__.py +3 -0
  1155. angr/procedures/posix/accept.py +29 -0
  1156. angr/procedures/posix/bind.py +13 -0
  1157. angr/procedures/posix/bzero.py +9 -0
  1158. angr/procedures/posix/chroot.py +27 -0
  1159. angr/procedures/posix/close.py +9 -0
  1160. angr/procedures/posix/closedir.py +7 -0
  1161. angr/procedures/posix/dup.py +56 -0
  1162. angr/procedures/posix/fcntl.py +10 -0
  1163. angr/procedures/posix/fdopen.py +76 -0
  1164. angr/procedures/posix/fileno.py +18 -0
  1165. angr/procedures/posix/fork.py +13 -0
  1166. angr/procedures/posix/getenv.py +35 -0
  1167. angr/procedures/posix/gethostbyname.py +43 -0
  1168. angr/procedures/posix/getpass.py +19 -0
  1169. angr/procedures/posix/getsockopt.py +11 -0
  1170. angr/procedures/posix/htonl.py +11 -0
  1171. angr/procedures/posix/htons.py +11 -0
  1172. angr/procedures/posix/inet_ntoa.py +59 -0
  1173. angr/procedures/posix/listen.py +13 -0
  1174. angr/procedures/posix/mmap.py +144 -0
  1175. angr/procedures/posix/open.py +18 -0
  1176. angr/procedures/posix/opendir.py +10 -0
  1177. angr/procedures/posix/poll.py +55 -0
  1178. angr/procedures/posix/pread64.py +46 -0
  1179. angr/procedures/posix/pthread.py +87 -0
  1180. angr/procedures/posix/pwrite64.py +46 -0
  1181. angr/procedures/posix/read.py +13 -0
  1182. angr/procedures/posix/readdir.py +62 -0
  1183. angr/procedures/posix/recv.py +13 -0
  1184. angr/procedures/posix/recvfrom.py +13 -0
  1185. angr/procedures/posix/select.py +48 -0
  1186. angr/procedures/posix/send.py +23 -0
  1187. angr/procedures/posix/setsockopt.py +9 -0
  1188. angr/procedures/posix/sigaction.py +23 -0
  1189. angr/procedures/posix/sim_time.py +48 -0
  1190. angr/procedures/posix/sleep.py +8 -0
  1191. angr/procedures/posix/socket.py +18 -0
  1192. angr/procedures/posix/strcasecmp.py +26 -0
  1193. angr/procedures/posix/strdup.py +18 -0
  1194. angr/procedures/posix/strtok_r.py +64 -0
  1195. angr/procedures/posix/syslog.py +15 -0
  1196. angr/procedures/posix/tz.py +9 -0
  1197. angr/procedures/posix/unlink.py +11 -0
  1198. angr/procedures/posix/usleep.py +8 -0
  1199. angr/procedures/posix/write.py +13 -0
  1200. angr/procedures/procedure_dict.py +50 -0
  1201. angr/procedures/stubs/CallReturn.py +13 -0
  1202. angr/procedures/stubs/NoReturnUnconstrained.py +13 -0
  1203. angr/procedures/stubs/Nop.py +7 -0
  1204. angr/procedures/stubs/PathTerminator.py +9 -0
  1205. angr/procedures/stubs/Redirect.py +18 -0
  1206. angr/procedures/stubs/ReturnChar.py +11 -0
  1207. angr/procedures/stubs/ReturnUnconstrained.py +24 -0
  1208. angr/procedures/stubs/UnresolvableCallTarget.py +9 -0
  1209. angr/procedures/stubs/UnresolvableJumpTarget.py +9 -0
  1210. angr/procedures/stubs/UserHook.py +18 -0
  1211. angr/procedures/stubs/__init__.py +3 -0
  1212. angr/procedures/stubs/b64_decode.py +15 -0
  1213. angr/procedures/stubs/caller.py +14 -0
  1214. angr/procedures/stubs/crazy_scanf.py +20 -0
  1215. angr/procedures/stubs/format_parser.py +669 -0
  1216. angr/procedures/stubs/syscall_stub.py +24 -0
  1217. angr/procedures/testing/__init__.py +3 -0
  1218. angr/procedures/testing/manyargs.py +9 -0
  1219. angr/procedures/testing/retreg.py +8 -0
  1220. angr/procedures/tracer/__init__.py +4 -0
  1221. angr/procedures/tracer/random.py +9 -0
  1222. angr/procedures/tracer/receive.py +23 -0
  1223. angr/procedures/tracer/transmit.py +26 -0
  1224. angr/procedures/uclibc/__init__.py +3 -0
  1225. angr/procedures/uclibc/__uClibc_main.py +10 -0
  1226. angr/procedures/win32/EncodePointer.py +7 -0
  1227. angr/procedures/win32/ExitProcess.py +9 -0
  1228. angr/procedures/win32/GetCommandLine.py +12 -0
  1229. angr/procedures/win32/GetCurrentProcessId.py +7 -0
  1230. angr/procedures/win32/GetCurrentThreadId.py +7 -0
  1231. angr/procedures/win32/GetLastInputInfo.py +40 -0
  1232. angr/procedures/win32/GetModuleHandle.py +29 -0
  1233. angr/procedures/win32/GetProcessAffinityMask.py +37 -0
  1234. angr/procedures/win32/InterlockedExchange.py +15 -0
  1235. angr/procedures/win32/IsProcessorFeaturePresent.py +7 -0
  1236. angr/procedures/win32/VirtualAlloc.py +114 -0
  1237. angr/procedures/win32/VirtualProtect.py +60 -0
  1238. angr/procedures/win32/__init__.py +3 -0
  1239. angr/procedures/win32/critical_section.py +12 -0
  1240. angr/procedures/win32/dynamic_loading.py +104 -0
  1241. angr/procedures/win32/file_handles.py +47 -0
  1242. angr/procedures/win32/gethostbyname.py +12 -0
  1243. angr/procedures/win32/heap.py +45 -0
  1244. angr/procedures/win32/is_bad_ptr.py +26 -0
  1245. angr/procedures/win32/local_storage.py +88 -0
  1246. angr/procedures/win32/mutex.py +11 -0
  1247. angr/procedures/win32/sim_time.py +135 -0
  1248. angr/procedures/win32/system_paths.py +35 -0
  1249. angr/procedures/win32_kernel/ExAllocatePool.py +13 -0
  1250. angr/procedures/win32_kernel/ExFreePoolWithTag.py +8 -0
  1251. angr/procedures/win32_kernel/__fastfail.py +15 -0
  1252. angr/procedures/win32_kernel/__init__.py +3 -0
  1253. angr/procedures/win_user32/__init__.py +0 -0
  1254. angr/procedures/win_user32/chars.py +15 -0
  1255. angr/procedures/win_user32/keyboard.py +14 -0
  1256. angr/procedures/win_user32/messagebox.py +49 -0
  1257. angr/project.py +847 -0
  1258. angr/protos/__init__.py +19 -0
  1259. angr/protos/cfg_pb2.py +31 -0
  1260. angr/protos/function_pb2.py +27 -0
  1261. angr/protos/primitives_pb2.py +52 -0
  1262. angr/protos/variables_pb2.py +44 -0
  1263. angr/protos/xrefs_pb2.py +25 -0
  1264. angr/py.typed +1 -0
  1265. angr/rustylib.abi3.so +0 -0
  1266. angr/serializable.py +66 -0
  1267. angr/sim_manager.py +971 -0
  1268. angr/sim_options.py +438 -0
  1269. angr/sim_procedure.py +606 -0
  1270. angr/sim_state.py +901 -0
  1271. angr/sim_state_options.py +403 -0
  1272. angr/sim_type.py +3702 -0
  1273. angr/sim_variable.py +465 -0
  1274. angr/simos/__init__.py +47 -0
  1275. angr/simos/cgc.py +153 -0
  1276. angr/simos/javavm.py +458 -0
  1277. angr/simos/linux.py +509 -0
  1278. angr/simos/simos.py +444 -0
  1279. angr/simos/snimmuc_nxp.py +149 -0
  1280. angr/simos/userland.py +163 -0
  1281. angr/simos/windows.py +601 -0
  1282. angr/simos/xbox.py +32 -0
  1283. angr/slicer.py +352 -0
  1284. angr/state_hierarchy.py +262 -0
  1285. angr/state_plugins/__init__.py +84 -0
  1286. angr/state_plugins/callstack.py +398 -0
  1287. angr/state_plugins/cgc.py +155 -0
  1288. angr/state_plugins/debug_variables.py +192 -0
  1289. angr/state_plugins/filesystem.py +463 -0
  1290. angr/state_plugins/gdb.py +148 -0
  1291. angr/state_plugins/globals.py +65 -0
  1292. angr/state_plugins/heap/__init__.py +15 -0
  1293. angr/state_plugins/heap/heap_base.py +128 -0
  1294. angr/state_plugins/heap/heap_brk.py +136 -0
  1295. angr/state_plugins/heap/heap_freelist.py +213 -0
  1296. angr/state_plugins/heap/heap_libc.py +46 -0
  1297. angr/state_plugins/heap/heap_ptmalloc.py +620 -0
  1298. angr/state_plugins/heap/utils.py +22 -0
  1299. angr/state_plugins/history.py +564 -0
  1300. angr/state_plugins/inspect.py +375 -0
  1301. angr/state_plugins/javavm_classloader.py +134 -0
  1302. angr/state_plugins/jni_references.py +95 -0
  1303. angr/state_plugins/libc.py +1263 -0
  1304. angr/state_plugins/light_registers.py +168 -0
  1305. angr/state_plugins/log.py +84 -0
  1306. angr/state_plugins/loop_data.py +92 -0
  1307. angr/state_plugins/plugin.py +170 -0
  1308. angr/state_plugins/posix.py +703 -0
  1309. angr/state_plugins/preconstrainer.py +196 -0
  1310. angr/state_plugins/scratch.py +173 -0
  1311. angr/state_plugins/sim_action.py +326 -0
  1312. angr/state_plugins/sim_action_object.py +271 -0
  1313. angr/state_plugins/sim_event.py +59 -0
  1314. angr/state_plugins/solver.py +1127 -0
  1315. angr/state_plugins/symbolizer.py +291 -0
  1316. angr/state_plugins/trace_additions.py +738 -0
  1317. angr/state_plugins/uc_manager.py +94 -0
  1318. angr/state_plugins/unicorn_engine.py +1886 -0
  1319. angr/state_plugins/view.py +340 -0
  1320. angr/storage/__init__.py +15 -0
  1321. angr/storage/file.py +1210 -0
  1322. angr/storage/memory_mixins/__init__.py +317 -0
  1323. angr/storage/memory_mixins/actions_mixin.py +72 -0
  1324. angr/storage/memory_mixins/address_concretization_mixin.py +384 -0
  1325. angr/storage/memory_mixins/bvv_conversion_mixin.py +73 -0
  1326. angr/storage/memory_mixins/clouseau_mixin.py +137 -0
  1327. angr/storage/memory_mixins/conditional_store_mixin.py +25 -0
  1328. angr/storage/memory_mixins/convenient_mappings_mixin.py +256 -0
  1329. angr/storage/memory_mixins/default_filler_mixin.py +144 -0
  1330. angr/storage/memory_mixins/dirty_addrs_mixin.py +11 -0
  1331. angr/storage/memory_mixins/hex_dumper_mixin.py +82 -0
  1332. angr/storage/memory_mixins/javavm_memory_mixin.py +392 -0
  1333. angr/storage/memory_mixins/keyvalue_memory_mixin.py +42 -0
  1334. angr/storage/memory_mixins/label_merger_mixin.py +31 -0
  1335. angr/storage/memory_mixins/memory_mixin.py +174 -0
  1336. angr/storage/memory_mixins/multi_value_merger_mixin.py +79 -0
  1337. angr/storage/memory_mixins/name_resolution_mixin.py +67 -0
  1338. angr/storage/memory_mixins/paged_memory/__init__.py +0 -0
  1339. angr/storage/memory_mixins/paged_memory/page_backer_mixins.py +266 -0
  1340. angr/storage/memory_mixins/paged_memory/paged_memory_mixin.py +743 -0
  1341. angr/storage/memory_mixins/paged_memory/paged_memory_multivalue_mixin.py +65 -0
  1342. angr/storage/memory_mixins/paged_memory/pages/__init__.py +26 -0
  1343. angr/storage/memory_mixins/paged_memory/pages/base.py +31 -0
  1344. angr/storage/memory_mixins/paged_memory/pages/cooperation.py +341 -0
  1345. angr/storage/memory_mixins/paged_memory/pages/history_tracking_mixin.py +92 -0
  1346. angr/storage/memory_mixins/paged_memory/pages/ispo_mixin.py +55 -0
  1347. angr/storage/memory_mixins/paged_memory/pages/list_page.py +338 -0
  1348. angr/storage/memory_mixins/paged_memory/pages/multi_values.py +324 -0
  1349. angr/storage/memory_mixins/paged_memory/pages/mv_list_page.py +419 -0
  1350. angr/storage/memory_mixins/paged_memory/pages/permissions_mixin.py +36 -0
  1351. angr/storage/memory_mixins/paged_memory/pages/refcount_mixin.py +52 -0
  1352. angr/storage/memory_mixins/paged_memory/pages/ultra_page.py +503 -0
  1353. angr/storage/memory_mixins/paged_memory/privileged_mixin.py +36 -0
  1354. angr/storage/memory_mixins/paged_memory/stack_allocation_mixin.py +74 -0
  1355. angr/storage/memory_mixins/regioned_memory/__init__.py +17 -0
  1356. angr/storage/memory_mixins/regioned_memory/abstract_address_descriptor.py +36 -0
  1357. angr/storage/memory_mixins/regioned_memory/abstract_merger_mixin.py +31 -0
  1358. angr/storage/memory_mixins/regioned_memory/region_category_mixin.py +9 -0
  1359. angr/storage/memory_mixins/regioned_memory/region_data.py +246 -0
  1360. angr/storage/memory_mixins/regioned_memory/region_meta_mixin.py +241 -0
  1361. angr/storage/memory_mixins/regioned_memory/regioned_address_concretization_mixin.py +119 -0
  1362. angr/storage/memory_mixins/regioned_memory/regioned_memory_mixin.py +441 -0
  1363. angr/storage/memory_mixins/regioned_memory/static_find_mixin.py +69 -0
  1364. angr/storage/memory_mixins/simple_interface_mixin.py +71 -0
  1365. angr/storage/memory_mixins/simplification_mixin.py +15 -0
  1366. angr/storage/memory_mixins/size_resolution_mixin.py +143 -0
  1367. angr/storage/memory_mixins/slotted_memory.py +140 -0
  1368. angr/storage/memory_mixins/smart_find_mixin.py +161 -0
  1369. angr/storage/memory_mixins/symbolic_merger_mixin.py +16 -0
  1370. angr/storage/memory_mixins/top_merger_mixin.py +25 -0
  1371. angr/storage/memory_mixins/underconstrained_mixin.py +67 -0
  1372. angr/storage/memory_mixins/unwrapper_mixin.py +26 -0
  1373. angr/storage/memory_object.py +195 -0
  1374. angr/tablespecs.py +91 -0
  1375. angr/unicornlib.so +0 -0
  1376. angr/utils/__init__.py +46 -0
  1377. angr/utils/ail.py +70 -0
  1378. angr/utils/algo.py +34 -0
  1379. angr/utils/bits.py +46 -0
  1380. angr/utils/constants.py +9 -0
  1381. angr/utils/cowdict.py +63 -0
  1382. angr/utils/cpp.py +17 -0
  1383. angr/utils/doms.py +149 -0
  1384. angr/utils/dynamic_dictlist.py +89 -0
  1385. angr/utils/endness.py +18 -0
  1386. angr/utils/enums_conv.py +97 -0
  1387. angr/utils/env.py +12 -0
  1388. angr/utils/formatting.py +128 -0
  1389. angr/utils/funcid.py +159 -0
  1390. angr/utils/graph.py +933 -0
  1391. angr/utils/lazy_import.py +13 -0
  1392. angr/utils/library.py +212 -0
  1393. angr/utils/loader.py +55 -0
  1394. angr/utils/mp.py +66 -0
  1395. angr/utils/orderedset.py +74 -0
  1396. angr/utils/ssa/__init__.py +457 -0
  1397. angr/utils/ssa/tmp_uses_collector.py +23 -0
  1398. angr/utils/ssa/vvar_uses_collector.py +37 -0
  1399. angr/utils/tagged_interval_map.py +112 -0
  1400. angr/utils/timing.py +74 -0
  1401. angr/utils/types.py +151 -0
  1402. angr/utils/vex.py +11 -0
  1403. angr/vaults.py +367 -0
  1404. angr-9.2.165.dist-info/METADATA +110 -0
  1405. angr-9.2.165.dist-info/RECORD +1409 -0
  1406. angr-9.2.165.dist-info/WHEEL +6 -0
  1407. angr-9.2.165.dist-info/entry_points.txt +2 -0
  1408. angr-9.2.165.dist-info/licenses/LICENSE +27 -0
  1409. angr-9.2.165.dist-info/top_level.txt +1 -0
@@ -0,0 +1,2553 @@
1
+ # Based on https://github.com/dfraze/binja_winmd/blob/main/main.py. Thank you, Dustin Fraze!
2
+ from __future__ import annotations
3
+
4
+ import json
5
+ import codecs
6
+ import sys
7
+ import logging
8
+ from collections import OrderedDict, defaultdict
9
+ from argparse import ArgumentParser
10
+ from pathlib import Path
11
+
12
+ import angr
13
+ from angr.sim_type import SimTypeFunction, SimTypeLong
14
+ from angr.utils.library import parsedcprotos2py
15
+ from angr.procedures.definitions import SimTypeCollection
16
+ from angr.errors import AngrMissingTypeError
17
+
18
+
19
+ api_namespaces = {}
20
+ altnames = set()
21
+
22
+
23
+ typelib = SimTypeCollection()
24
+ typelib.names = ["win32"]
25
+ known_struct_names: set[str] = set()
26
+
27
+
28
+ def is_anonymous_struct(s_name: str) -> bool:
29
+ return "anonymous" in s_name.lower()
30
+
31
+
32
+ def get_angr_type_from_name(name):
33
+ if name == "Byte":
34
+ return angr.types.SimTypeChar(signed=False, label="Byte")
35
+ if name == "SByte":
36
+ return angr.types.SimTypeChar(signed=True, label="SByte")
37
+ if name == "Char":
38
+ return angr.types.SimTypeChar(signed=True, label="Char")
39
+ if name == "UInt16":
40
+ return angr.types.SimTypeShort(signed=False, label="UInt16")
41
+ if name == "Int16":
42
+ return angr.types.SimTypeShort(signed=True, label="Int16")
43
+ if name == "Int64":
44
+ return angr.types.SimTypeLongLong(signed=True, label="Int64")
45
+ if name == "UInt32":
46
+ return angr.types.SimTypeInt(signed=False, label="UInt32")
47
+ if name == "UInt64":
48
+ return angr.types.SimTypeLongLong(signed=False, label="UInt64")
49
+ if name == "Int32":
50
+ return angr.types.SimTypeInt(signed=True, label="Int32")
51
+ if name == "Single":
52
+ return angr.types.SimTypeFloat(size=32)
53
+ if name == "Double":
54
+ return angr.types.SimTypeFloat(size=64)
55
+ if name == "UIntPtr":
56
+ return angr.types.SimTypePointer(angr.types.SimTypeInt(signed=False, label="UInt"), label="UIntPtr")
57
+ if name == "IntPtr":
58
+ return angr.types.SimTypePointer(angr.types.SimTypeInt(signed=True, label="Int"), label="IntPtr")
59
+ if name == "Void":
60
+ return angr.types.SimTypeBottom(label="Void")
61
+ if name == "Boolean":
62
+ return angr.types.SimTypeBool(label="Boolean")
63
+ if name == "Guid":
64
+ # FIXME
65
+ return angr.types.SimTypeBottom(label="Guid")
66
+ print(f"Unhandled Native Type: {name}")
67
+ sys.exit(-1)
68
+
69
+
70
+ def get_typeref_from_struct_type(t: angr.types.SimType) -> angr.types.SimType:
71
+ if isinstance(t, angr.types.SimStruct) and t.name and not is_anonymous_struct(t.name):
72
+ # replace it with a SimTypeRef to avoid duplicate definition
73
+ t = angr.types.SimTypeRef(t.name, angr.types.SimStruct)
74
+ return t
75
+
76
+
77
+ def handle_json_type(t, create_missing: bool = False):
78
+ if t["Kind"] == "Native":
79
+ return get_angr_type_from_name(t["Name"])
80
+ if t["Kind"] == "PointerTo":
81
+ pts_to = get_typeref_from_struct_type(handle_json_type(t["Child"], create_missing=create_missing))
82
+ return angr.types.SimTypePointer(pts_to)
83
+ if t["Kind"] == "Array":
84
+ elem = get_typeref_from_struct_type(handle_json_type(t["Child"], create_missing=create_missing))
85
+ if t["Shape"]:
86
+ return angr.types.SimTypeFixedSizeArray(elem, length=int(t["Shape"]["Size"]))
87
+ return angr.types.SimTypePointer(elem)
88
+ if t["Kind"] == "ApiRef":
89
+ try:
90
+ named_type = typelib.get(t["Name"], bottom_on_missing=create_missing)
91
+ except AngrMissingTypeError:
92
+ if t["Name"] in known_struct_names:
93
+ return angr.types.SimTypeRef(t["Name"], angr.types.SimStruct)
94
+ raise
95
+ return get_typeref_from_struct_type(named_type)
96
+ if t["Kind"] == "Struct":
97
+ for nested_type in t["NestedTypes"]:
98
+ typelib.add(nested_type["Name"], handle_json_type(nested_type, create_missing=create_missing))
99
+ fields = OrderedDict()
100
+ for field in t["Fields"]:
101
+ child_type = get_typeref_from_struct_type(handle_json_type(field["Type"], create_missing=create_missing))
102
+ fields[field["Name"]] = child_type
103
+ return angr.types.SimStruct(fields, name=t["Name"])
104
+ if t["Kind"] == "LPArray":
105
+ pts_to = get_typeref_from_struct_type(handle_json_type(t["Child"], create_missing=create_missing))
106
+ return angr.types.SimTypePointer(pts_to, label="LPArray")
107
+ if t["Kind"] == "Union":
108
+ for nested_type in t["NestedTypes"]:
109
+ typelib.add(nested_type["Name"], handle_json_type(nested_type, create_missing=create_missing))
110
+ members = {}
111
+ for field in t["Fields"]:
112
+ child_type = get_typeref_from_struct_type(handle_json_type(field["Type"], create_missing=create_missing))
113
+ members[field["Name"]] = child_type
114
+ return angr.types.SimUnion(members)
115
+ if t["Kind"] == "MissingClrType":
116
+ return angr.types.SimTypeBottom(label="MissingClrType")
117
+ print(f"Unhandled type: {t}")
118
+ sys.exit(0)
119
+
120
+
121
+ def create_angr_type_from_json(t):
122
+ if t["Kind"] == "NativeTypedef":
123
+ new_typedef = handle_json_type(t["Def"])
124
+ typelib.add(t["Name"], new_typedef)
125
+ elif t["Kind"] == "Enum":
126
+ # TODO: Handle Enums
127
+ ty = angr.types.SimTypeInt(signed=False, label=t["Name"])
128
+ typelib.add(t["Name"], ty)
129
+ elif t["Kind"] == "Struct":
130
+ known_struct_names.add(t["Name"])
131
+ real_new_type = handle_json_type(t)
132
+ typelib.add(t["Name"], real_new_type)
133
+ elif t["Kind"] == "FunctionPointer":
134
+ ret_type = handle_json_type(t["ReturnType"])
135
+ args = []
136
+ arg_names = []
137
+ for param in t["Params"]:
138
+ new_param = handle_json_type(param["Type"])
139
+ args.append(new_param)
140
+ arg_names.append(param["Name"])
141
+ typelib.add(
142
+ t["Name"], angr.types.SimTypePointer(angr.types.SimTypeFunction(args, ret_type, arg_names=arg_names))
143
+ )
144
+ elif t["Kind"] == "Com":
145
+ # TODO: Handle Com
146
+ typelib.add(t["Name"], angr.types.SimTypeBottom(label=t["Name"]))
147
+ elif t["Kind"] == "ComClassID":
148
+ return
149
+ elif t["Kind"] == "Union":
150
+ real_new_type = handle_json_type(t)
151
+ typelib.add(t["Name"], real_new_type)
152
+ return
153
+ else:
154
+ print(f"Found unknown type kind: {t['Kind']}")
155
+
156
+
157
+ def do_it(in_dir, out_file):
158
+ p = Path(in_dir)
159
+
160
+ files = p.glob("*.json")
161
+
162
+ for file in files:
163
+ logging.info("Found file %s", file)
164
+ with codecs.open(file, "r", "utf-8-sig") as f:
165
+ api_namespaces[file.stem] = json.load(f)
166
+
167
+ logging.info("Making a bunch of types...")
168
+ missing_types_last_round = set()
169
+ while True:
170
+ nosuchtype = 0
171
+ missing_types = set()
172
+ for namespace in api_namespaces:
173
+ metadata = api_namespaces[namespace]
174
+ types = metadata["Types"]
175
+ for t in types:
176
+ try:
177
+ create_angr_type_from_json(t)
178
+ except AngrMissingTypeError:
179
+ # skip this type for now
180
+ nosuchtype += 1
181
+ missing_types.add(t["Name"])
182
+ logging.info("... missing %d types", nosuchtype)
183
+ if nosuchtype == 0 or missing_types == missing_types_last_round:
184
+ break
185
+ missing_types_last_round = missing_types
186
+
187
+ if missing_types_last_round:
188
+ logging.info("Missing types: %s", missing_types_last_round)
189
+ else:
190
+ logging.info("All referenced types have been created")
191
+ logging.info("Alright, now let's do some functions")
192
+
193
+ i = 1
194
+ func_count = 0
195
+ parsed_cprotos = defaultdict(list)
196
+ for namespace in api_namespaces:
197
+ metadata = api_namespaces[namespace]
198
+ logging.debug(f"+++ Processing namespace {namespace} ({i} of {len(api_namespaces)})")
199
+ i += 1
200
+ funcs = metadata["Functions"]
201
+ if namespace.startswith("Windows.Win32"):
202
+ prefix = "win32"
203
+ elif namespace.startswith("Windows.Wdk"):
204
+ prefix = "wdk"
205
+ else:
206
+ raise NotImplementedError(f"Unsupported namespace {namespace}")
207
+ for f in funcs:
208
+ libname = f["DllImport"].lower()
209
+ suffix = ""
210
+ if libname.endswith((".dll", ".exe", ".sys")):
211
+ suffix = libname[-3:]
212
+ libname = libname[:-4]
213
+ # special case: put all wdk_ntdll.dll APIs under ntoskrnl.exe to avoid conflict with user-space ntdll.dll
214
+ if prefix == "wdk" and libname == "ntdll" and suffix == "dll":
215
+ libname = "ntoskrnl"
216
+ suffix = "exe"
217
+ ret_type = handle_json_type(f["ReturnType"], create_missing=True)
218
+ args = []
219
+ arg_names = []
220
+ for param in f["Params"]:
221
+ new_param = handle_json_type(param["Type"], create_missing=True)
222
+ assert new_param is not None, "This should not happen, please report this."
223
+ args.append(new_param)
224
+ arg_names.append(param["Name"])
225
+ new_func = angr.types.SimTypeFunction(args, ret_type, arg_names=arg_names)
226
+ new_func_name = f["Name"]
227
+ parsed_cprotos[(prefix, libname, suffix)].append((new_func_name, new_func, ""))
228
+ func_count += 1
229
+
230
+ # Some missing function declarations
231
+ missing_declarations = defaultdict(dict)
232
+
233
+ missing_declarations[("win32", "kernel32", "dll")] = {
234
+ "InterlockedCompareExchange": SimTypeFunction((SimTypeLong(),) * 3, SimTypeLong()),
235
+ "InterlockedCompareExchange64": SimTypeFunction((SimTypeLong(),) * 5, SimTypeLong()),
236
+ "InterlockedDecrement": SimTypeFunction((SimTypeLong(),) * 1, SimTypeLong()),
237
+ "InterlockedExchange": SimTypeFunction((SimTypeLong(),) * 2, SimTypeLong()),
238
+ "InterlockedExchangeAdd": SimTypeFunction((SimTypeLong(),) * 2, SimTypeLong()),
239
+ "InterlockedIncrement": SimTypeFunction((SimTypeLong(),) * 1, SimTypeLong()),
240
+ "UTRegister": SimTypeFunction(
241
+ [
242
+ SimTypeLong(signed=True),
243
+ SimTypeLong(signed=True),
244
+ SimTypeLong(signed=True),
245
+ SimTypeLong(signed=True),
246
+ SimTypeLong(signed=True),
247
+ SimTypeLong(signed=True),
248
+ SimTypeLong(signed=True),
249
+ ],
250
+ SimTypeLong(signed=True),
251
+ ),
252
+ "RegisterConsoleVDM": SimTypeFunction(
253
+ [
254
+ SimTypeLong(signed=True),
255
+ SimTypeLong(signed=True),
256
+ SimTypeLong(signed=True),
257
+ SimTypeLong(signed=True),
258
+ SimTypeLong(signed=True),
259
+ SimTypeLong(signed=True),
260
+ SimTypeLong(signed=True),
261
+ SimTypeLong(signed=True),
262
+ SimTypeLong(signed=True),
263
+ ],
264
+ SimTypeLong(signed=True),
265
+ ),
266
+ "RegOpenUserClassesRoot": SimTypeFunction(
267
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
268
+ SimTypeLong(signed=True),
269
+ ),
270
+ "SortCloseHandle": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
271
+ "WriteConsoleInputVDMW": SimTypeFunction(
272
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
273
+ SimTypeLong(signed=True),
274
+ ),
275
+ "RegEnumValueW": SimTypeFunction(
276
+ [
277
+ SimTypeLong(signed=True),
278
+ SimTypeLong(signed=True),
279
+ SimTypeLong(signed=True),
280
+ SimTypeLong(signed=True),
281
+ SimTypeLong(signed=True),
282
+ SimTypeLong(signed=True),
283
+ SimTypeLong(signed=True),
284
+ SimTypeLong(signed=True),
285
+ ],
286
+ SimTypeLong(signed=True),
287
+ ),
288
+ "BaseDllReadWriteIniFile": SimTypeFunction(
289
+ [
290
+ SimTypeLong(signed=True),
291
+ SimTypeLong(signed=True),
292
+ SimTypeLong(signed=True),
293
+ SimTypeLong(signed=True),
294
+ SimTypeLong(signed=True),
295
+ SimTypeLong(signed=True),
296
+ SimTypeLong(signed=True),
297
+ SimTypeLong(signed=True),
298
+ ],
299
+ SimTypeLong(signed=True),
300
+ ),
301
+ "NlsCheckPolicy": SimTypeFunction(
302
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
303
+ ),
304
+ "RegGetKeySecurity": SimTypeFunction(
305
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
306
+ SimTypeLong(signed=True),
307
+ ),
308
+ "lstrlen": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
309
+ "NlsGetCacheUpdateCount": SimTypeFunction([], SimTypeLong(signed=True)),
310
+ "OpenThreadToken": SimTypeFunction(
311
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
312
+ SimTypeLong(signed=True),
313
+ ),
314
+ "SetTermsrvAppInstallMode": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
315
+ "GetConsoleFontInfo": SimTypeFunction(
316
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
317
+ SimTypeLong(signed=True),
318
+ ),
319
+ "GetCalendarMonthsInYear": SimTypeFunction(
320
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
321
+ ),
322
+ "WerpNotifyLoadStringResourceEx": SimTypeFunction(
323
+ [
324
+ SimTypeLong(signed=True),
325
+ SimTypeLong(signed=True),
326
+ SimTypeLong(signed=True),
327
+ SimTypeLong(signed=True),
328
+ SimTypeLong(signed=True),
329
+ ],
330
+ SimTypeLong(signed=True),
331
+ ),
332
+ "RemoveLocalAlternateComputerNameW": SimTypeFunction(
333
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
334
+ ),
335
+ "SetVDMCurrentDirectories": SimTypeFunction(
336
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
337
+ ),
338
+ "SetConsoleInputExeNameA": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
339
+ "RegDisablePredefinedCacheEx": SimTypeFunction([], SimTypeLong(signed=True)),
340
+ "IdnToAscii": SimTypeFunction(
341
+ [
342
+ SimTypeLong(signed=True),
343
+ SimTypeLong(signed=True),
344
+ SimTypeLong(signed=True),
345
+ SimTypeLong(signed=True),
346
+ SimTypeLong(signed=True),
347
+ ],
348
+ SimTypeLong(signed=True),
349
+ ),
350
+ "LoadAppInitDlls": SimTypeFunction([], SimTypeLong(signed=True)),
351
+ "OpenConsoleW": SimTypeFunction(
352
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
353
+ SimTypeLong(signed=True),
354
+ ),
355
+ "ExitVDM": SimTypeFunction([SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)),
356
+ "RegNotifyChangeKeyValue": SimTypeFunction(
357
+ [
358
+ SimTypeLong(signed=True),
359
+ SimTypeLong(signed=True),
360
+ SimTypeLong(signed=True),
361
+ SimTypeLong(signed=True),
362
+ SimTypeLong(signed=True),
363
+ ],
364
+ SimTypeLong(signed=True),
365
+ ),
366
+ "AddLocalAlternateComputerNameW": SimTypeFunction(
367
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
368
+ ),
369
+ "RegOpenKeyExA": SimTypeFunction(
370
+ [
371
+ SimTypeLong(signed=True),
372
+ SimTypeLong(signed=True),
373
+ SimTypeLong(signed=True),
374
+ SimTypeLong(signed=True),
375
+ SimTypeLong(signed=True),
376
+ ],
377
+ SimTypeLong(signed=True),
378
+ ),
379
+ "RtlMoveMemory": SimTypeFunction(
380
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
381
+ ),
382
+ "RegFlushKey": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
383
+ "RegUnLoadKeyA": SimTypeFunction(
384
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
385
+ ),
386
+ "RegisterConsoleIME": SimTypeFunction(
387
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
388
+ ),
389
+ "RegLoadMUIStringA": SimTypeFunction(
390
+ [
391
+ SimTypeLong(signed=True),
392
+ SimTypeLong(signed=True),
393
+ SimTypeLong(signed=True),
394
+ SimTypeLong(signed=True),
395
+ SimTypeLong(signed=True),
396
+ SimTypeLong(signed=True),
397
+ SimTypeLong(signed=True),
398
+ ],
399
+ SimTypeLong(signed=True),
400
+ ),
401
+ "RegCreateKeyExW": SimTypeFunction(
402
+ [
403
+ SimTypeLong(signed=True),
404
+ SimTypeLong(signed=True),
405
+ SimTypeLong(signed=True),
406
+ SimTypeLong(signed=True),
407
+ SimTypeLong(signed=True),
408
+ SimTypeLong(signed=True),
409
+ SimTypeLong(signed=True),
410
+ SimTypeLong(signed=True),
411
+ SimTypeLong(signed=True),
412
+ ],
413
+ SimTypeLong(signed=True),
414
+ ),
415
+ "CheckForReadOnlyResource": SimTypeFunction(
416
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
417
+ ),
418
+ "RegRestoreKeyW": SimTypeFunction(
419
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
420
+ ),
421
+ "lstrcpy": SimTypeFunction([SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)),
422
+ "RegEnumKeyExW": SimTypeFunction(
423
+ [
424
+ SimTypeLong(signed=True),
425
+ SimTypeLong(signed=True),
426
+ SimTypeLong(signed=True),
427
+ SimTypeLong(signed=True),
428
+ SimTypeLong(signed=True),
429
+ SimTypeLong(signed=True),
430
+ SimTypeLong(signed=True),
431
+ SimTypeLong(signed=True),
432
+ ],
433
+ SimTypeLong(signed=True),
434
+ ),
435
+ "CreateProcessAsUserW": SimTypeFunction(
436
+ [
437
+ SimTypeLong(signed=True),
438
+ SimTypeLong(signed=True),
439
+ SimTypeLong(signed=True),
440
+ SimTypeLong(signed=True),
441
+ SimTypeLong(signed=True),
442
+ SimTypeLong(signed=True),
443
+ SimTypeLong(signed=True),
444
+ SimTypeLong(signed=True),
445
+ SimTypeLong(signed=True),
446
+ SimTypeLong(signed=True),
447
+ SimTypeLong(signed=True),
448
+ ],
449
+ SimTypeLong(signed=True),
450
+ ),
451
+ "RtlZeroMemory": SimTypeFunction(
452
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
453
+ ),
454
+ "GetConsoleNlsMode": SimTypeFunction(
455
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
456
+ ),
457
+ "RegGetValueA": SimTypeFunction(
458
+ [
459
+ SimTypeLong(signed=True),
460
+ SimTypeLong(signed=True),
461
+ SimTypeLong(signed=True),
462
+ SimTypeLong(signed=True),
463
+ SimTypeLong(signed=True),
464
+ SimTypeLong(signed=True),
465
+ SimTypeLong(signed=True),
466
+ ],
467
+ SimTypeLong(signed=True),
468
+ ),
469
+ "AdjustCalendarDate": SimTypeFunction(
470
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
471
+ ),
472
+ "BaseSetLastNTError": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
473
+ "ShowConsoleCursor": SimTypeFunction(
474
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
475
+ ),
476
+ "BasepCheckWinSaferRestrictions": SimTypeFunction(
477
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
478
+ ),
479
+ "ReadConsoleInputExA": SimTypeFunction(
480
+ [
481
+ SimTypeLong(signed=True),
482
+ SimTypeLong(signed=True),
483
+ SimTypeLong(signed=True),
484
+ SimTypeLong(signed=True),
485
+ SimTypeLong(signed=True),
486
+ ],
487
+ SimTypeLong(signed=True),
488
+ ),
489
+ "RegSetValueExW": SimTypeFunction(
490
+ [
491
+ SimTypeLong(signed=True),
492
+ SimTypeLong(signed=True),
493
+ SimTypeLong(signed=True),
494
+ SimTypeLong(signed=True),
495
+ SimTypeLong(signed=True),
496
+ SimTypeLong(signed=True),
497
+ ],
498
+ SimTypeLong(signed=True),
499
+ ),
500
+ "RegQueryValueExW": SimTypeFunction(
501
+ [
502
+ SimTypeLong(signed=True),
503
+ SimTypeLong(signed=True),
504
+ SimTypeLong(signed=True),
505
+ SimTypeLong(signed=True),
506
+ SimTypeLong(signed=True),
507
+ SimTypeLong(signed=True),
508
+ ],
509
+ SimTypeLong(signed=True),
510
+ ),
511
+ "RegDeleteValueA": SimTypeFunction(
512
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
513
+ ),
514
+ "RegOpenCurrentUser": SimTypeFunction(
515
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
516
+ ),
517
+ "CtrlRoutine": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
518
+ "RtlFillMemory": SimTypeFunction(
519
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
520
+ ),
521
+ "VerifyConsoleIoHandle": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
522
+ "EnumerateLocalComputerNamesW": SimTypeFunction(
523
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
524
+ SimTypeLong(signed=True),
525
+ ),
526
+ "CloseProfileUserMapping": SimTypeFunction([], SimTypeLong(signed=True)),
527
+ "GetEraNameCountedString": SimTypeFunction(
528
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
529
+ SimTypeLong(signed=True),
530
+ ),
531
+ "RegisterWaitForSingleObjectEx": SimTypeFunction(
532
+ [
533
+ SimTypeLong(signed=True),
534
+ SimTypeLong(signed=True),
535
+ SimTypeLong(signed=True),
536
+ SimTypeLong(signed=True),
537
+ SimTypeLong(signed=True),
538
+ ],
539
+ SimTypeLong(signed=True),
540
+ ),
541
+ "DosPathToSessionPathW": SimTypeFunction(
542
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
543
+ ),
544
+ "RegSaveKeyExA": SimTypeFunction(
545
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
546
+ SimTypeLong(signed=True),
547
+ ),
548
+ "CreateProcessInternalW": SimTypeFunction(
549
+ [
550
+ SimTypeLong(signed=True),
551
+ SimTypeLong(signed=True),
552
+ SimTypeLong(signed=True),
553
+ SimTypeLong(signed=True),
554
+ SimTypeLong(signed=True),
555
+ SimTypeLong(signed=True),
556
+ SimTypeLong(signed=True),
557
+ SimTypeLong(signed=True),
558
+ SimTypeLong(signed=True),
559
+ SimTypeLong(signed=True),
560
+ SimTypeLong(signed=True),
561
+ SimTypeLong(signed=True),
562
+ ],
563
+ SimTypeLong(signed=True),
564
+ ),
565
+ "OpenProfileUserMapping": SimTypeFunction([], SimTypeLong(signed=True)),
566
+ "GetConsoleHardwareState": SimTypeFunction(
567
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
568
+ ),
569
+ "SetConsoleNlsMode": SimTypeFunction(
570
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
571
+ ),
572
+ "AddLocalAlternateComputerNameA": SimTypeFunction(
573
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
574
+ ),
575
+ "BasepCheckBadapp": SimTypeFunction(
576
+ [
577
+ SimTypeLong(signed=True),
578
+ SimTypeLong(signed=True),
579
+ SimTypeLong(signed=True),
580
+ SimTypeLong(signed=True),
581
+ SimTypeLong(signed=True),
582
+ SimTypeLong(signed=True),
583
+ SimTypeLong(signed=True),
584
+ SimTypeLong(signed=True),
585
+ SimTypeLong(signed=True),
586
+ SimTypeLong(signed=True),
587
+ SimTypeLong(signed=True),
588
+ SimTypeLong(signed=True),
589
+ SimTypeLong(signed=True),
590
+ SimTypeLong(signed=True),
591
+ SimTypeLong(signed=True),
592
+ ],
593
+ SimTypeLong(signed=True),
594
+ ),
595
+ "GetConsoleKeyboardLayoutNameA": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
596
+ "lstrcmpi": SimTypeFunction([SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)),
597
+ "BaseFormatObjectAttributes": SimTypeFunction(
598
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
599
+ SimTypeLong(signed=True),
600
+ ),
601
+ "LZCloseFile": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
602
+ "GetNamedPipeAttribute": SimTypeFunction(
603
+ [
604
+ SimTypeLong(signed=True),
605
+ SimTypeLong(signed=True),
606
+ SimTypeLong(signed=True),
607
+ SimTypeLong(signed=True),
608
+ SimTypeLong(signed=True),
609
+ ],
610
+ SimTypeLong(signed=True),
611
+ ),
612
+ "BasepMapModuleHandle": SimTypeFunction(
613
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
614
+ ),
615
+ "SetNamedPipeAttribute": SimTypeFunction(
616
+ [
617
+ SimTypeLong(signed=True),
618
+ SimTypeLong(signed=True),
619
+ SimTypeLong(signed=True),
620
+ SimTypeLong(signed=True),
621
+ SimTypeLong(signed=True),
622
+ ],
623
+ SimTypeLong(signed=True),
624
+ ),
625
+ "RegCreateKeyExA": SimTypeFunction(
626
+ [
627
+ SimTypeLong(signed=True),
628
+ SimTypeLong(signed=True),
629
+ SimTypeLong(signed=True),
630
+ SimTypeLong(signed=True),
631
+ SimTypeLong(signed=True),
632
+ SimTypeLong(signed=True),
633
+ SimTypeLong(signed=True),
634
+ SimTypeLong(signed=True),
635
+ SimTypeLong(signed=True),
636
+ ],
637
+ SimTypeLong(signed=True),
638
+ ),
639
+ "SetConsoleOS2OemFormat": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
640
+ "TermsrvAppInstallMode": SimTypeFunction([], SimTypeLong(signed=True)),
641
+ "RemoveLocalAlternateComputerNameA": SimTypeFunction(
642
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
643
+ ),
644
+ "LZCreateFileW": SimTypeFunction(
645
+ [
646
+ SimTypeLong(signed=True),
647
+ SimTypeLong(signed=True),
648
+ SimTypeLong(signed=True),
649
+ SimTypeLong(signed=True),
650
+ SimTypeLong(signed=True),
651
+ ],
652
+ SimTypeLong(signed=True),
653
+ ),
654
+ "NlsUpdateLocale": SimTypeFunction(
655
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
656
+ ),
657
+ "RegisterWowBaseHandlers": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
658
+ "SetClientTimeZoneInformation": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
659
+ "BaseCheckRunApp": SimTypeFunction(
660
+ [
661
+ SimTypeLong(signed=True),
662
+ SimTypeLong(signed=True),
663
+ SimTypeLong(signed=True),
664
+ SimTypeLong(signed=True),
665
+ SimTypeLong(signed=True),
666
+ SimTypeLong(signed=True),
667
+ SimTypeLong(signed=True),
668
+ SimTypeLong(signed=True),
669
+ SimTypeLong(signed=True),
670
+ SimTypeLong(signed=True),
671
+ SimTypeLong(signed=True),
672
+ SimTypeLong(signed=True),
673
+ SimTypeLong(signed=True),
674
+ ],
675
+ SimTypeLong(signed=True),
676
+ ),
677
+ "BaseThreadInitThunk": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
678
+ "UpdateCalendarDayOfWeek": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
679
+ "SetConsoleMaximumWindowSize": SimTypeFunction(
680
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
681
+ ),
682
+ "ConvertNLSDayOfWeekToWin32DayOfWeek": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
683
+ "ConvertCalDateTimeToSystemTime": SimTypeFunction(
684
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
685
+ ),
686
+ "RegDeleteKeyExW": SimTypeFunction(
687
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
688
+ SimTypeLong(signed=True),
689
+ ),
690
+ "ReplaceFile": SimTypeFunction(
691
+ [
692
+ SimTypeLong(signed=True),
693
+ SimTypeLong(signed=True),
694
+ SimTypeLong(signed=True),
695
+ SimTypeLong(signed=True),
696
+ SimTypeLong(signed=True),
697
+ SimTypeLong(signed=True),
698
+ ],
699
+ SimTypeLong(signed=True),
700
+ ),
701
+ "GetConsoleCharType": SimTypeFunction(
702
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
703
+ ),
704
+ "GetConsoleInputWaitHandle": SimTypeFunction([], SimTypeLong(signed=True)),
705
+ "RestoreLastError": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
706
+ "CompareCalendarDates": SimTypeFunction(
707
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
708
+ ),
709
+ "RegLoadKeyA": SimTypeFunction(
710
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
711
+ ),
712
+ "SetLocalPrimaryComputerNameW": SimTypeFunction(
713
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
714
+ ),
715
+ "UnregisterConsoleIME": SimTypeFunction([], SimTypeLong(signed=True)),
716
+ "lstrcat": SimTypeFunction([SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)),
717
+ "BaseInitAppcompatCacheSupport": SimTypeFunction([], SimTypeLong(signed=True)),
718
+ "InterlockedPushListSList": SimTypeFunction(
719
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
720
+ ),
721
+ "GetEnvironmentStringsA": SimTypeFunction([], SimTypeLong(signed=True)),
722
+ "CreateSocketHandle": SimTypeFunction([], SimTypeLong(signed=True)),
723
+ "RegSetKeySecurity": SimTypeFunction(
724
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
725
+ ),
726
+ "SetThreadToken": SimTypeFunction(
727
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
728
+ ),
729
+ "RegQueryInfoKeyW": SimTypeFunction(
730
+ [
731
+ SimTypeLong(signed=True),
732
+ SimTypeLong(signed=True),
733
+ SimTypeLong(signed=True),
734
+ SimTypeLong(signed=True),
735
+ SimTypeLong(signed=True),
736
+ SimTypeLong(signed=True),
737
+ SimTypeLong(signed=True),
738
+ SimTypeLong(signed=True),
739
+ SimTypeLong(signed=True),
740
+ SimTypeLong(signed=True),
741
+ SimTypeLong(signed=True),
742
+ SimTypeLong(signed=True),
743
+ ],
744
+ SimTypeLong(signed=True),
745
+ ),
746
+ "GetNumberOfConsoleFonts": SimTypeFunction([], SimTypeLong(signed=True)),
747
+ "GetCalendarSupportedDateRange": SimTypeFunction(
748
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
749
+ ),
750
+ "RegOpenKeyExW": SimTypeFunction(
751
+ [
752
+ SimTypeLong(signed=True),
753
+ SimTypeLong(signed=True),
754
+ SimTypeLong(signed=True),
755
+ SimTypeLong(signed=True),
756
+ SimTypeLong(signed=True),
757
+ ],
758
+ SimTypeLong(signed=True),
759
+ ),
760
+ "RegKrnGetGlobalState": SimTypeFunction([], SimTypeLong(signed=True)),
761
+ "WerpNotifyUseStringResource": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
762
+ "SetConsoleFont": SimTypeFunction(
763
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
764
+ ),
765
+ "BaseGetNamedObjectDirectory": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
766
+ "IsCalendarLeapMonth": SimTypeFunction(
767
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
768
+ SimTypeLong(signed=True),
769
+ ),
770
+ "RegDeleteTreeW": SimTypeFunction(
771
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
772
+ ),
773
+ "IsValidCalDateTime": SimTypeFunction(
774
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
775
+ ),
776
+ "RegQueryValueExA": SimTypeFunction(
777
+ [
778
+ SimTypeLong(signed=True),
779
+ SimTypeLong(signed=True),
780
+ SimTypeLong(signed=True),
781
+ SimTypeLong(signed=True),
782
+ SimTypeLong(signed=True),
783
+ SimTypeLong(signed=True),
784
+ ],
785
+ SimTypeLong(signed=True),
786
+ ),
787
+ "SetConsoleCursor": SimTypeFunction(
788
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
789
+ ),
790
+ "RegDeleteTreeA": SimTypeFunction(
791
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
792
+ ),
793
+ "SortGetHandle": SimTypeFunction(
794
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
795
+ ),
796
+ "WerpInitiateRemoteRecovery": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
797
+ "VDMOperationStarted": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
798
+ "OpenProcessToken": SimTypeFunction(
799
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
800
+ ),
801
+ "VDMConsoleOperation": SimTypeFunction(
802
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
803
+ ),
804
+ "BaseVerifyUnicodeString": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
805
+ "RegUnLoadKeyW": SimTypeFunction(
806
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
807
+ ),
808
+ "GetProcessUserModeExceptionPolicy": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
809
+ "GetNextVDMCommand": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
810
+ "LoadStringBaseW": SimTypeFunction(
811
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
812
+ SimTypeLong(signed=True),
813
+ ),
814
+ "DuplicateConsoleHandle": SimTypeFunction(
815
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
816
+ SimTypeLong(signed=True),
817
+ ),
818
+ "BaseCheckAppcompatCache": SimTypeFunction(
819
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
820
+ SimTypeLong(signed=True),
821
+ ),
822
+ "WerpStringLookup": SimTypeFunction(
823
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
824
+ ),
825
+ "BaseDumpAppcompatCache": SimTypeFunction([], SimTypeLong(signed=True)),
826
+ "CreateProcessInternalA": SimTypeFunction(
827
+ [
828
+ SimTypeLong(signed=True),
829
+ SimTypeLong(signed=True),
830
+ SimTypeLong(signed=True),
831
+ SimTypeLong(signed=True),
832
+ SimTypeLong(signed=True),
833
+ SimTypeLong(signed=True),
834
+ SimTypeLong(signed=True),
835
+ SimTypeLong(signed=True),
836
+ SimTypeLong(signed=True),
837
+ SimTypeLong(signed=True),
838
+ SimTypeLong(signed=True),
839
+ SimTypeLong(signed=True),
840
+ ],
841
+ SimTypeLong(signed=True),
842
+ ),
843
+ "NlsEventDataDescCreate": SimTypeFunction(
844
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
845
+ SimTypeLong(signed=True),
846
+ ),
847
+ "RegRestoreKeyA": SimTypeFunction(
848
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
849
+ ),
850
+ "NlsWriteEtwEvent": SimTypeFunction(
851
+ [
852
+ SimTypeLong(signed=True),
853
+ SimTypeLong(signed=True),
854
+ SimTypeLong(signed=True),
855
+ SimTypeLong(signed=True),
856
+ SimTypeLong(signed=True),
857
+ ],
858
+ SimTypeLong(signed=True),
859
+ ),
860
+ "RegCloseKey": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
861
+ "NotifyMountMgr": SimTypeFunction(
862
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
863
+ ),
864
+ "IsCalendarLeapYear": SimTypeFunction(
865
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
866
+ ),
867
+ "DosPathToSessionPathA": SimTypeFunction(
868
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
869
+ ),
870
+ "BasepAnsiStringToDynamicUnicodeString": SimTypeFunction(
871
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
872
+ ),
873
+ "SetLocalPrimaryComputerNameA": SimTypeFunction(
874
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
875
+ ),
876
+ "lstrcpyn": SimTypeFunction(
877
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
878
+ ),
879
+ "SetConsoleLocalEUDC": SimTypeFunction(
880
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
881
+ SimTypeLong(signed=True),
882
+ ),
883
+ "PrivCopyFileExW": SimTypeFunction(
884
+ [
885
+ SimTypeLong(signed=True),
886
+ SimTypeLong(signed=True),
887
+ SimTypeLong(signed=True),
888
+ SimTypeLong(signed=True),
889
+ SimTypeLong(signed=True),
890
+ SimTypeLong(signed=True),
891
+ ],
892
+ SimTypeLong(signed=True),
893
+ ),
894
+ "SetConsoleCursorMode": SimTypeFunction(
895
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
896
+ ),
897
+ "RegisterConsoleOS2": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
898
+ "SetConsoleIcon": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
899
+ "RegDeleteValueW": SimTypeFunction(
900
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
901
+ ),
902
+ "SetConsoleInputExeNameW": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
903
+ "SetConsoleHardwareState": SimTypeFunction(
904
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
905
+ ),
906
+ "GetConsoleCursorMode": SimTypeFunction(
907
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
908
+ ),
909
+ "ReadConsoleInputExW": SimTypeFunction(
910
+ [
911
+ SimTypeLong(signed=True),
912
+ SimTypeLong(signed=True),
913
+ SimTypeLong(signed=True),
914
+ SimTypeLong(signed=True),
915
+ SimTypeLong(signed=True),
916
+ ],
917
+ SimTypeLong(signed=True),
918
+ ),
919
+ "WerpNotifyLoadStringResource": SimTypeFunction(
920
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
921
+ SimTypeLong(signed=True),
922
+ ),
923
+ "BaseCheckAppcompatCacheEx": SimTypeFunction(
924
+ [
925
+ SimTypeLong(signed=True),
926
+ SimTypeLong(signed=True),
927
+ SimTypeLong(signed=True),
928
+ SimTypeLong(signed=True),
929
+ SimTypeLong(signed=True),
930
+ SimTypeLong(signed=True),
931
+ ],
932
+ SimTypeLong(signed=True),
933
+ ),
934
+ "PrivMoveFileIdentityW": SimTypeFunction(
935
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
936
+ ),
937
+ "CmdBatNotification": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
938
+ "BaseFormatTimeOut": SimTypeFunction(
939
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
940
+ ),
941
+ "InvalidateConsoleDIBits": SimTypeFunction(
942
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
943
+ ),
944
+ "RegSaveKeyExW": SimTypeFunction(
945
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
946
+ SimTypeLong(signed=True),
947
+ ),
948
+ "IsCalendarLeapDay": SimTypeFunction(
949
+ [
950
+ SimTypeLong(signed=True),
951
+ SimTypeLong(signed=True),
952
+ SimTypeLong(signed=True),
953
+ SimTypeLong(signed=True),
954
+ SimTypeLong(signed=True),
955
+ ],
956
+ SimTypeLong(signed=True),
957
+ ),
958
+ "BaseCleanupAppcompatCacheSupport": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
959
+ "BasepAllocateActivationContextActivationBlock": SimTypeFunction(
960
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
961
+ SimTypeLong(signed=True),
962
+ ),
963
+ "DelayLoadFailureHook": SimTypeFunction(
964
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
965
+ ),
966
+ "WriteConsoleInputVDMA": SimTypeFunction(
967
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
968
+ SimTypeLong(signed=True),
969
+ ),
970
+ "RegLoadKeyW": SimTypeFunction(
971
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
972
+ ),
973
+ "lstrcmp": SimTypeFunction([SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)),
974
+ "ConsoleMenuControl": SimTypeFunction(
975
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
976
+ ),
977
+ "BaseQueryModuleData": SimTypeFunction(
978
+ [
979
+ SimTypeLong(signed=True),
980
+ SimTypeLong(signed=True),
981
+ SimTypeLong(signed=True),
982
+ SimTypeLong(signed=True),
983
+ SimTypeLong(signed=True),
984
+ SimTypeLong(signed=True),
985
+ SimTypeLong(signed=True),
986
+ ],
987
+ SimTypeLong(signed=True),
988
+ ),
989
+ "RegDeleteKeyExA": SimTypeFunction(
990
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
991
+ SimTypeLong(signed=True),
992
+ ),
993
+ "RegLoadMUIStringW": SimTypeFunction(
994
+ [
995
+ SimTypeLong(signed=True),
996
+ SimTypeLong(signed=True),
997
+ SimTypeLong(signed=True),
998
+ SimTypeLong(signed=True),
999
+ SimTypeLong(signed=True),
1000
+ SimTypeLong(signed=True),
1001
+ SimTypeLong(signed=True),
1002
+ ],
1003
+ SimTypeLong(signed=True),
1004
+ ),
1005
+ "SetHandleContext": SimTypeFunction(
1006
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1007
+ ),
1008
+ "IdnToUnicode": SimTypeFunction(
1009
+ [
1010
+ SimTypeLong(signed=True),
1011
+ SimTypeLong(signed=True),
1012
+ SimTypeLong(signed=True),
1013
+ SimTypeLong(signed=True),
1014
+ SimTypeLong(signed=True),
1015
+ ],
1016
+ SimTypeLong(signed=True),
1017
+ ),
1018
+ "RegKrnInitialize": SimTypeFunction(
1019
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1020
+ ),
1021
+ "BaseFlushAppcompatCache": SimTypeFunction([], SimTypeLong(signed=True)),
1022
+ "GetCalendarWeekNumber": SimTypeFunction(
1023
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1024
+ SimTypeLong(signed=True),
1025
+ ),
1026
+ "NlsUpdateSystemLocale": SimTypeFunction(
1027
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1028
+ ),
1029
+ "GetComPlusPackageInstallStatus": SimTypeFunction([], SimTypeLong(signed=True)),
1030
+ "BaseIsAppcompatInfrastructureDisabled": SimTypeFunction([], SimTypeLong(signed=True)),
1031
+ "WerpCleanupMessageMapping": SimTypeFunction([], SimTypeLong(signed=True)),
1032
+ "RegisterWowExec": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1033
+ "BasepCheckAppCompat": SimTypeFunction(
1034
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1035
+ SimTypeLong(signed=True),
1036
+ ),
1037
+ "SetConsoleMenuClose": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1038
+ "GetCalendarDifferenceInDays": SimTypeFunction(
1039
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1040
+ ),
1041
+ "LoadStringBaseExW": SimTypeFunction(
1042
+ [
1043
+ SimTypeLong(signed=True),
1044
+ SimTypeLong(signed=True),
1045
+ SimTypeLong(signed=True),
1046
+ SimTypeLong(signed=True),
1047
+ SimTypeLong(signed=True),
1048
+ ],
1049
+ SimTypeLong(signed=True),
1050
+ ),
1051
+ "GetConsoleInputExeNameA": SimTypeFunction(
1052
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1053
+ ),
1054
+ "SetConsolePalette": SimTypeFunction(
1055
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1056
+ ),
1057
+ "GetCalendarDaysInMonth": SimTypeFunction(
1058
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1059
+ SimTypeLong(signed=True),
1060
+ ),
1061
+ "BaseGenerateAppCompatData": SimTypeFunction(
1062
+ [
1063
+ SimTypeLong(signed=True),
1064
+ SimTypeLong(signed=True),
1065
+ SimTypeLong(signed=True),
1066
+ SimTypeLong(signed=True),
1067
+ SimTypeLong(signed=True),
1068
+ SimTypeLong(signed=True),
1069
+ ],
1070
+ SimTypeLong(signed=True),
1071
+ ),
1072
+ "SetLastConsoleEventActive": SimTypeFunction([], SimTypeLong(signed=True)),
1073
+ "GetConsoleInputExeNameW": SimTypeFunction(
1074
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1075
+ ),
1076
+ "RegGetValueW": SimTypeFunction(
1077
+ [
1078
+ SimTypeLong(signed=True),
1079
+ SimTypeLong(signed=True),
1080
+ SimTypeLong(signed=True),
1081
+ SimTypeLong(signed=True),
1082
+ SimTypeLong(signed=True),
1083
+ SimTypeLong(signed=True),
1084
+ SimTypeLong(signed=True),
1085
+ ],
1086
+ SimTypeLong(signed=True),
1087
+ ),
1088
+ "GetHandleContext": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1089
+ "SetConsoleKeyShortcuts": SimTypeFunction(
1090
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1091
+ SimTypeLong(signed=True),
1092
+ ),
1093
+ "BaseUpdateAppcompatCache": SimTypeFunction(
1094
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1095
+ ),
1096
+ "BasepFreeActivationContextActivationBlock": SimTypeFunction(
1097
+ [SimTypeLong(signed=True)], SimTypeLong(signed=True)
1098
+ ),
1099
+ "GetBinaryType": SimTypeFunction(
1100
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1101
+ ),
1102
+ "Basep8BitStringToDynamicUnicodeString": SimTypeFunction(
1103
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1104
+ ),
1105
+ "RegQueryInfoKeyA": SimTypeFunction(
1106
+ [
1107
+ SimTypeLong(signed=True),
1108
+ SimTypeLong(signed=True),
1109
+ SimTypeLong(signed=True),
1110
+ SimTypeLong(signed=True),
1111
+ SimTypeLong(signed=True),
1112
+ SimTypeLong(signed=True),
1113
+ SimTypeLong(signed=True),
1114
+ SimTypeLong(signed=True),
1115
+ SimTypeLong(signed=True),
1116
+ SimTypeLong(signed=True),
1117
+ SimTypeLong(signed=True),
1118
+ SimTypeLong(signed=True),
1119
+ ],
1120
+ SimTypeLong(signed=True),
1121
+ ),
1122
+ "BasepFreeAppCompatData": SimTypeFunction(
1123
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1124
+ ),
1125
+ "RegEnumKeyExA": SimTypeFunction(
1126
+ [
1127
+ SimTypeLong(signed=True),
1128
+ SimTypeLong(signed=True),
1129
+ SimTypeLong(signed=True),
1130
+ SimTypeLong(signed=True),
1131
+ SimTypeLong(signed=True),
1132
+ SimTypeLong(signed=True),
1133
+ SimTypeLong(signed=True),
1134
+ SimTypeLong(signed=True),
1135
+ ],
1136
+ SimTypeLong(signed=True),
1137
+ ),
1138
+ "CheckElevationEnabled": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1139
+ "GetCalendarDateFormatEx": SimTypeFunction(
1140
+ [
1141
+ SimTypeLong(signed=True),
1142
+ SimTypeLong(signed=True),
1143
+ SimTypeLong(signed=True),
1144
+ SimTypeLong(signed=True),
1145
+ SimTypeLong(signed=True),
1146
+ SimTypeLong(signed=True),
1147
+ ],
1148
+ SimTypeLong(signed=True),
1149
+ ),
1150
+ "RegSetValueExA": SimTypeFunction(
1151
+ [
1152
+ SimTypeLong(signed=True),
1153
+ SimTypeLong(signed=True),
1154
+ SimTypeLong(signed=True),
1155
+ SimTypeLong(signed=True),
1156
+ SimTypeLong(signed=True),
1157
+ SimTypeLong(signed=True),
1158
+ ],
1159
+ SimTypeLong(signed=True),
1160
+ ),
1161
+ "RegEnumValueA": SimTypeFunction(
1162
+ [
1163
+ SimTypeLong(signed=True),
1164
+ SimTypeLong(signed=True),
1165
+ SimTypeLong(signed=True),
1166
+ SimTypeLong(signed=True),
1167
+ SimTypeLong(signed=True),
1168
+ SimTypeLong(signed=True),
1169
+ SimTypeLong(signed=True),
1170
+ SimTypeLong(signed=True),
1171
+ ],
1172
+ SimTypeLong(signed=True),
1173
+ ),
1174
+ "GetConsoleKeyboardLayoutNameW": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1175
+ "SetComPlusPackageInstallStatus": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1176
+ "GetVDMCurrentDirectories": SimTypeFunction(
1177
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1178
+ ),
1179
+ "CloseConsoleHandle": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1180
+ "EnumerateLocalComputerNamesA": SimTypeFunction(
1181
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1182
+ SimTypeLong(signed=True),
1183
+ ),
1184
+ "UTUnRegister": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1185
+ "GetCalendarDateFormat": SimTypeFunction(
1186
+ [
1187
+ SimTypeLong(signed=True),
1188
+ SimTypeLong(signed=True),
1189
+ SimTypeLong(signed=True),
1190
+ SimTypeLong(signed=True),
1191
+ SimTypeLong(signed=True),
1192
+ SimTypeLong(signed=True),
1193
+ ],
1194
+ SimTypeLong(signed=True),
1195
+ ),
1196
+ "SetProcessUserModeExceptionPolicy": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1197
+ "CheckElevation": SimTypeFunction(
1198
+ [
1199
+ SimTypeLong(signed=True),
1200
+ SimTypeLong(signed=True),
1201
+ SimTypeLong(signed=True),
1202
+ SimTypeLong(signed=True),
1203
+ SimTypeLong(signed=True),
1204
+ ],
1205
+ SimTypeLong(signed=True),
1206
+ ),
1207
+ "RegisterWaitForInputIdle": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1208
+ "ConvertSystemTimeToCalDateTime": SimTypeFunction(
1209
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1210
+ ),
1211
+ "IsTimeZoneRedirectionEnabled": SimTypeFunction([], SimTypeLong(signed=True)),
1212
+ }
1213
+
1214
+ missing_declarations[("win32", "advapi32", "dll")] = {
1215
+ "GetInformationCodeAuthzLevelW": SimTypeFunction(
1216
+ [
1217
+ SimTypeLong(signed=True),
1218
+ SimTypeLong(signed=True),
1219
+ SimTypeLong(signed=True),
1220
+ SimTypeLong(signed=True),
1221
+ SimTypeLong(signed=True),
1222
+ ],
1223
+ SimTypeLong(signed=True),
1224
+ ),
1225
+ "WmiFreeBuffer": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1226
+ "GetNamedSecurityInfoExW": SimTypeFunction(
1227
+ [
1228
+ SimTypeLong(signed=True),
1229
+ SimTypeLong(signed=True),
1230
+ SimTypeLong(signed=True),
1231
+ SimTypeLong(signed=True),
1232
+ SimTypeLong(signed=True),
1233
+ SimTypeLong(signed=True),
1234
+ SimTypeLong(signed=True),
1235
+ SimTypeLong(signed=True),
1236
+ SimTypeLong(signed=True),
1237
+ ],
1238
+ SimTypeLong(signed=True),
1239
+ ),
1240
+ "WmiQuerySingleInstanceMultipleA": SimTypeFunction(
1241
+ [
1242
+ SimTypeLong(signed=True),
1243
+ SimTypeLong(signed=True),
1244
+ SimTypeLong(signed=True),
1245
+ SimTypeLong(signed=True),
1246
+ SimTypeLong(signed=True),
1247
+ ],
1248
+ SimTypeLong(signed=True),
1249
+ ),
1250
+ "ConvertSecurityDescriptorToAccessA": SimTypeFunction(
1251
+ [
1252
+ SimTypeLong(signed=True),
1253
+ SimTypeLong(signed=True),
1254
+ SimTypeLong(signed=True),
1255
+ SimTypeLong(signed=True),
1256
+ SimTypeLong(signed=True),
1257
+ SimTypeLong(signed=True),
1258
+ SimTypeLong(signed=True),
1259
+ ],
1260
+ SimTypeLong(signed=True),
1261
+ ),
1262
+ "CredProfileLoaded": SimTypeFunction([], SimTypeLong(signed=True)),
1263
+ "WmiExecuteMethodW": SimTypeFunction(
1264
+ [
1265
+ SimTypeLong(signed=True),
1266
+ SimTypeLong(signed=True),
1267
+ SimTypeLong(signed=True),
1268
+ SimTypeLong(signed=True),
1269
+ SimTypeLong(signed=True),
1270
+ SimTypeLong(signed=True),
1271
+ SimTypeLong(signed=True),
1272
+ ],
1273
+ SimTypeLong(signed=True),
1274
+ ),
1275
+ "ProcessIdleTasksW": SimTypeFunction(
1276
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1277
+ SimTypeLong(signed=True),
1278
+ ),
1279
+ "MD4Final": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1280
+ "SystemFunction013": SimTypeFunction(
1281
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1282
+ ),
1283
+ "CredpConvertOneCredentialSize": SimTypeFunction(
1284
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1285
+ ),
1286
+ "EncryptedFileKeyInfo": SimTypeFunction(
1287
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1288
+ ),
1289
+ "ElfBackupEventLogFileW": SimTypeFunction(
1290
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1291
+ ),
1292
+ "MD4Update": SimTypeFunction(
1293
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1294
+ ),
1295
+ "CloseCodeAuthzLevel": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1296
+ "EnumServiceGroupW": SimTypeFunction(
1297
+ [
1298
+ SimTypeLong(signed=True),
1299
+ SimTypeLong(signed=True),
1300
+ SimTypeLong(signed=True),
1301
+ SimTypeLong(signed=True),
1302
+ SimTypeLong(signed=True),
1303
+ SimTypeLong(signed=True),
1304
+ SimTypeLong(signed=True),
1305
+ SimTypeLong(signed=True),
1306
+ SimTypeLong(signed=True),
1307
+ ],
1308
+ SimTypeLong(signed=True),
1309
+ ),
1310
+ "GetSecurityInfoExA": SimTypeFunction(
1311
+ [
1312
+ SimTypeLong(signed=True),
1313
+ SimTypeLong(signed=True),
1314
+ SimTypeLong(signed=True),
1315
+ SimTypeLong(signed=True),
1316
+ SimTypeLong(signed=True),
1317
+ SimTypeLong(signed=True),
1318
+ SimTypeLong(signed=True),
1319
+ SimTypeLong(signed=True),
1320
+ SimTypeLong(signed=True),
1321
+ ],
1322
+ SimTypeLong(signed=True),
1323
+ ),
1324
+ "ElfReportEventA": SimTypeFunction(
1325
+ [
1326
+ SimTypeLong(signed=True),
1327
+ SimTypeLong(signed=True),
1328
+ SimTypeLong(signed=True),
1329
+ SimTypeLong(signed=True),
1330
+ SimTypeLong(signed=True),
1331
+ SimTypeLong(signed=True),
1332
+ SimTypeLong(signed=True),
1333
+ SimTypeLong(signed=True),
1334
+ SimTypeLong(signed=True),
1335
+ SimTypeLong(signed=True),
1336
+ SimTypeLong(signed=True),
1337
+ SimTypeLong(signed=True),
1338
+ ],
1339
+ SimTypeLong(signed=True),
1340
+ ),
1341
+ "SystemFunction027": SimTypeFunction(
1342
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1343
+ ),
1344
+ "LsaEnumeratePrivilegesOfAccount": SimTypeFunction(
1345
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1346
+ ),
1347
+ "SystemFunction024": SimTypeFunction(
1348
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1349
+ ),
1350
+ "ConvertAccessToSecurityDescriptorW": SimTypeFunction(
1351
+ [
1352
+ SimTypeLong(signed=True),
1353
+ SimTypeLong(signed=True),
1354
+ SimTypeLong(signed=True),
1355
+ SimTypeLong(signed=True),
1356
+ SimTypeLong(signed=True),
1357
+ ],
1358
+ SimTypeLong(signed=True),
1359
+ ),
1360
+ "WmiDevInstToInstanceNameA": SimTypeFunction(
1361
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1362
+ SimTypeLong(signed=True),
1363
+ ),
1364
+ "WmiEnumerateGuids": SimTypeFunction(
1365
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1366
+ ),
1367
+ "SaferiRegisterExtensionDll": SimTypeFunction(
1368
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1369
+ ),
1370
+ "LsaCreateSecret": SimTypeFunction(
1371
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1372
+ SimTypeLong(signed=True),
1373
+ ),
1374
+ "ElfOpenEventLogW": SimTypeFunction(
1375
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1376
+ ),
1377
+ "ElfOpenEventLogA": SimTypeFunction(
1378
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1379
+ ),
1380
+ "LsaGetUserName": SimTypeFunction(
1381
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1382
+ ),
1383
+ "A_SHAInit": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1384
+ "LsaOpenPolicySce": SimTypeFunction(
1385
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1386
+ SimTypeLong(signed=True),
1387
+ ),
1388
+ "ElfChangeNotify": SimTypeFunction(
1389
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1390
+ ),
1391
+ "I_ScSetServiceBitsA": SimTypeFunction(
1392
+ [
1393
+ SimTypeLong(signed=True),
1394
+ SimTypeLong(signed=True),
1395
+ SimTypeLong(signed=True),
1396
+ SimTypeLong(signed=True),
1397
+ SimTypeLong(signed=True),
1398
+ ],
1399
+ SimTypeLong(signed=True),
1400
+ ),
1401
+ "WmiOpenBlock": SimTypeFunction(
1402
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1403
+ ),
1404
+ "GetAccessPermissionsForObjectA": SimTypeFunction(
1405
+ [
1406
+ SimTypeLong(signed=True),
1407
+ SimTypeLong(signed=True),
1408
+ SimTypeLong(signed=True),
1409
+ SimTypeLong(signed=True),
1410
+ SimTypeLong(signed=True),
1411
+ SimTypeLong(signed=True),
1412
+ SimTypeLong(signed=True),
1413
+ SimTypeLong(signed=True),
1414
+ SimTypeLong(signed=True),
1415
+ ],
1416
+ SimTypeLong(signed=True),
1417
+ ),
1418
+ "LsaICLookupNames": SimTypeFunction(
1419
+ [
1420
+ SimTypeLong(signed=True),
1421
+ SimTypeLong(signed=True),
1422
+ SimTypeLong(signed=True),
1423
+ SimTypeLong(signed=True),
1424
+ SimTypeLong(signed=True),
1425
+ SimTypeLong(signed=True),
1426
+ SimTypeLong(signed=True),
1427
+ SimTypeLong(signed=True),
1428
+ SimTypeLong(signed=True),
1429
+ SimTypeLong(signed=True),
1430
+ ],
1431
+ SimTypeLong(signed=True),
1432
+ ),
1433
+ "UnregisterIdleTask": SimTypeFunction(
1434
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1435
+ ),
1436
+ "SystemFunction025": SimTypeFunction(
1437
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1438
+ ),
1439
+ "ElfRegisterEventSourceA": SimTypeFunction(
1440
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1441
+ ),
1442
+ "SystemFunction010": SimTypeFunction(
1443
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1444
+ ),
1445
+ "WmiMofEnumerateResourcesA": SimTypeFunction(
1446
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1447
+ ),
1448
+ "ConvertSDToStringSDRootDomainW": SimTypeFunction(
1449
+ [
1450
+ SimTypeLong(signed=True),
1451
+ SimTypeLong(signed=True),
1452
+ SimTypeLong(signed=True),
1453
+ SimTypeLong(signed=True),
1454
+ SimTypeLong(signed=True),
1455
+ SimTypeLong(signed=True),
1456
+ ],
1457
+ SimTypeLong(signed=True),
1458
+ ),
1459
+ "A_SHAFinal": SimTypeFunction([SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1460
+ "LsaSetSecurityObject": SimTypeFunction(
1461
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1462
+ ),
1463
+ "LsaSetSystemAccessAccount": SimTypeFunction(
1464
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1465
+ ),
1466
+ "WmiFileHandleToInstanceNameA": SimTypeFunction(
1467
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1468
+ SimTypeLong(signed=True),
1469
+ ),
1470
+ "FreeEncryptedFileKeyInfo": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1471
+ "LsaGetRemoteUserName": SimTypeFunction(
1472
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1473
+ ),
1474
+ "EventWriteStartScenario": SimTypeFunction(
1475
+ [
1476
+ SimTypeLong(signed=True),
1477
+ SimTypeLong(signed=True),
1478
+ SimTypeLong(signed=True),
1479
+ SimTypeLong(signed=True),
1480
+ SimTypeLong(signed=True),
1481
+ ],
1482
+ SimTypeLong(signed=True),
1483
+ ),
1484
+ "SystemFunction014": SimTypeFunction(
1485
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1486
+ ),
1487
+ "AddUsersToEncryptedFileEx": SimTypeFunction(
1488
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1489
+ SimTypeLong(signed=True),
1490
+ ),
1491
+ "ElfRegisterEventSourceW": SimTypeFunction(
1492
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1493
+ ),
1494
+ "CredEncryptAndMarshalBinaryBlob": SimTypeFunction(
1495
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1496
+ ),
1497
+ "SaferiPopulateDefaultsInRegistry": SimTypeFunction(
1498
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1499
+ ),
1500
+ "SaferiSearchMatchingHashRules": SimTypeFunction(
1501
+ [
1502
+ SimTypeLong(signed=True),
1503
+ SimTypeLong(signed=True),
1504
+ SimTypeLong(signed=True),
1505
+ SimTypeLong(signed=True),
1506
+ SimTypeLong(signed=True),
1507
+ SimTypeLong(signed=True),
1508
+ ],
1509
+ SimTypeLong(signed=True),
1510
+ ),
1511
+ "LsaGetSystemAccessAccount": SimTypeFunction(
1512
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1513
+ ),
1514
+ "ElfReadEventLogW": SimTypeFunction(
1515
+ [
1516
+ SimTypeLong(signed=True),
1517
+ SimTypeLong(signed=True),
1518
+ SimTypeLong(signed=True),
1519
+ SimTypeLong(signed=True),
1520
+ SimTypeLong(signed=True),
1521
+ SimTypeLong(signed=True),
1522
+ SimTypeLong(signed=True),
1523
+ ],
1524
+ SimTypeLong(signed=True),
1525
+ ),
1526
+ "WmiExecuteMethodA": SimTypeFunction(
1527
+ [
1528
+ SimTypeLong(signed=True),
1529
+ SimTypeLong(signed=True),
1530
+ SimTypeLong(signed=True),
1531
+ SimTypeLong(signed=True),
1532
+ SimTypeLong(signed=True),
1533
+ SimTypeLong(signed=True),
1534
+ SimTypeLong(signed=True),
1535
+ ],
1536
+ SimTypeLong(signed=True),
1537
+ ),
1538
+ "WmiSetSingleInstanceA": SimTypeFunction(
1539
+ [
1540
+ SimTypeLong(signed=True),
1541
+ SimTypeLong(signed=True),
1542
+ SimTypeLong(signed=True),
1543
+ SimTypeLong(signed=True),
1544
+ SimTypeLong(signed=True),
1545
+ ],
1546
+ SimTypeLong(signed=True),
1547
+ ),
1548
+ "LsaLookupPrivilegeValue": SimTypeFunction(
1549
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1550
+ ),
1551
+ "WmiSetSingleItemW": SimTypeFunction(
1552
+ [
1553
+ SimTypeLong(signed=True),
1554
+ SimTypeLong(signed=True),
1555
+ SimTypeLong(signed=True),
1556
+ SimTypeLong(signed=True),
1557
+ SimTypeLong(signed=True),
1558
+ SimTypeLong(signed=True),
1559
+ ],
1560
+ SimTypeLong(signed=True),
1561
+ ),
1562
+ "WmiQueryAllDataA": SimTypeFunction(
1563
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1564
+ ),
1565
+ "CredBackupCredentials": SimTypeFunction(
1566
+ [
1567
+ SimTypeLong(signed=True),
1568
+ SimTypeLong(signed=True),
1569
+ SimTypeLong(signed=True),
1570
+ SimTypeLong(signed=True),
1571
+ SimTypeLong(signed=True),
1572
+ ],
1573
+ SimTypeLong(signed=True),
1574
+ ),
1575
+ "ConvertStringSDToSDRootDomainW": SimTypeFunction(
1576
+ [
1577
+ SimTypeLong(signed=True),
1578
+ SimTypeLong(signed=True),
1579
+ SimTypeLong(signed=True),
1580
+ SimTypeLong(signed=True),
1581
+ SimTypeLong(signed=True),
1582
+ ],
1583
+ SimTypeLong(signed=True),
1584
+ ),
1585
+ "LsaCreateTrustedDomain": SimTypeFunction(
1586
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1587
+ SimTypeLong(signed=True),
1588
+ ),
1589
+ "GetAccessPermissionsForObjectW": SimTypeFunction(
1590
+ [
1591
+ SimTypeLong(signed=True),
1592
+ SimTypeLong(signed=True),
1593
+ SimTypeLong(signed=True),
1594
+ SimTypeLong(signed=True),
1595
+ SimTypeLong(signed=True),
1596
+ SimTypeLong(signed=True),
1597
+ SimTypeLong(signed=True),
1598
+ SimTypeLong(signed=True),
1599
+ SimTypeLong(signed=True),
1600
+ ],
1601
+ SimTypeLong(signed=True),
1602
+ ),
1603
+ "ElfReportEventW": SimTypeFunction(
1604
+ [
1605
+ SimTypeLong(signed=True),
1606
+ SimTypeLong(signed=True),
1607
+ SimTypeLong(signed=True),
1608
+ SimTypeLong(signed=True),
1609
+ SimTypeLong(signed=True),
1610
+ SimTypeLong(signed=True),
1611
+ SimTypeLong(signed=True),
1612
+ SimTypeLong(signed=True),
1613
+ SimTypeLong(signed=True),
1614
+ SimTypeLong(signed=True),
1615
+ SimTypeLong(signed=True),
1616
+ SimTypeLong(signed=True),
1617
+ ],
1618
+ SimTypeLong(signed=True),
1619
+ ),
1620
+ "SetSecurityInfoExW": SimTypeFunction(
1621
+ [
1622
+ SimTypeLong(signed=True),
1623
+ SimTypeLong(signed=True),
1624
+ SimTypeLong(signed=True),
1625
+ SimTypeLong(signed=True),
1626
+ SimTypeLong(signed=True),
1627
+ SimTypeLong(signed=True),
1628
+ SimTypeLong(signed=True),
1629
+ SimTypeLong(signed=True),
1630
+ SimTypeLong(signed=True),
1631
+ ],
1632
+ SimTypeLong(signed=True),
1633
+ ),
1634
+ "SystemFunction015": SimTypeFunction(
1635
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1636
+ ),
1637
+ "ElfCloseEventLog": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1638
+ "UsePinForEncryptedFilesW": SimTypeFunction(
1639
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1640
+ ),
1641
+ "LsaManageSidNameMapping": SimTypeFunction(
1642
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1643
+ ),
1644
+ "CredProfileUnloaded": SimTypeFunction([], SimTypeLong(signed=True)),
1645
+ "SystemFunction007": SimTypeFunction(
1646
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1647
+ ),
1648
+ "WmiSetSingleItemA": SimTypeFunction(
1649
+ [
1650
+ SimTypeLong(signed=True),
1651
+ SimTypeLong(signed=True),
1652
+ SimTypeLong(signed=True),
1653
+ SimTypeLong(signed=True),
1654
+ SimTypeLong(signed=True),
1655
+ SimTypeLong(signed=True),
1656
+ ],
1657
+ SimTypeLong(signed=True),
1658
+ ),
1659
+ "GetNamedSecurityInfoExA": SimTypeFunction(
1660
+ [
1661
+ SimTypeLong(signed=True),
1662
+ SimTypeLong(signed=True),
1663
+ SimTypeLong(signed=True),
1664
+ SimTypeLong(signed=True),
1665
+ SimTypeLong(signed=True),
1666
+ SimTypeLong(signed=True),
1667
+ SimTypeLong(signed=True),
1668
+ SimTypeLong(signed=True),
1669
+ SimTypeLong(signed=True),
1670
+ ],
1671
+ SimTypeLong(signed=True),
1672
+ ),
1673
+ "WmiFileHandleToInstanceNameW": SimTypeFunction(
1674
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1675
+ SimTypeLong(signed=True),
1676
+ ),
1677
+ "SaferiChangeRegistryScope": SimTypeFunction(
1678
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1679
+ ),
1680
+ "MD5Init": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1681
+ "I_ScPnPGetServiceName": SimTypeFunction(
1682
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1683
+ ),
1684
+ "CredpConvertTargetInfo": SimTypeFunction(
1685
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1686
+ SimTypeLong(signed=True),
1687
+ ),
1688
+ "GetSecurityInfoExW": SimTypeFunction(
1689
+ [
1690
+ SimTypeLong(signed=True),
1691
+ SimTypeLong(signed=True),
1692
+ SimTypeLong(signed=True),
1693
+ SimTypeLong(signed=True),
1694
+ SimTypeLong(signed=True),
1695
+ SimTypeLong(signed=True),
1696
+ SimTypeLong(signed=True),
1697
+ SimTypeLong(signed=True),
1698
+ SimTypeLong(signed=True),
1699
+ ],
1700
+ SimTypeLong(signed=True),
1701
+ ),
1702
+ "IsValidRelativeSecurityDescriptor": SimTypeFunction(
1703
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1704
+ ),
1705
+ "CredpDecodeCredential": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1706
+ "I_ScSetServiceBitsW": SimTypeFunction(
1707
+ [
1708
+ SimTypeLong(signed=True),
1709
+ SimTypeLong(signed=True),
1710
+ SimTypeLong(signed=True),
1711
+ SimTypeLong(signed=True),
1712
+ SimTypeLong(signed=True),
1713
+ ],
1714
+ SimTypeLong(signed=True),
1715
+ ),
1716
+ "RegisterIdleTask": SimTypeFunction(
1717
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1718
+ SimTypeLong(signed=True),
1719
+ ),
1720
+ "SystemFunction017": SimTypeFunction(
1721
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1722
+ ),
1723
+ "SystemFunction033": SimTypeFunction(
1724
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1725
+ ),
1726
+ "CancelOverlappedAccess": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1727
+ "TrusteeAccessToObjectW": SimTypeFunction(
1728
+ [
1729
+ SimTypeLong(signed=True),
1730
+ SimTypeLong(signed=True),
1731
+ SimTypeLong(signed=True),
1732
+ SimTypeLong(signed=True),
1733
+ SimTypeLong(signed=True),
1734
+ SimTypeLong(signed=True),
1735
+ ],
1736
+ SimTypeLong(signed=True),
1737
+ ),
1738
+ "LsaOpenSecret": SimTypeFunction(
1739
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1740
+ SimTypeLong(signed=True),
1741
+ ),
1742
+ "EventWriteEndScenario": SimTypeFunction(
1743
+ [
1744
+ SimTypeLong(signed=True),
1745
+ SimTypeLong(signed=True),
1746
+ SimTypeLong(signed=True),
1747
+ SimTypeLong(signed=True),
1748
+ SimTypeLong(signed=True),
1749
+ ],
1750
+ SimTypeLong(signed=True),
1751
+ ),
1752
+ "ComputeAccessTokenFromCodeAuthzLevel": SimTypeFunction(
1753
+ [
1754
+ SimTypeLong(signed=True),
1755
+ SimTypeLong(signed=True),
1756
+ SimTypeLong(signed=True),
1757
+ SimTypeLong(signed=True),
1758
+ SimTypeLong(signed=True),
1759
+ ],
1760
+ SimTypeLong(signed=True),
1761
+ ),
1762
+ "LsaGetQuotasForAccount": SimTypeFunction(
1763
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1764
+ ),
1765
+ "I_ScIsSecurityProcess": SimTypeFunction([], SimTypeLong(signed=True)),
1766
+ "SetNamedSecurityInfoExA": SimTypeFunction(
1767
+ [
1768
+ SimTypeLong(signed=True),
1769
+ SimTypeLong(signed=True),
1770
+ SimTypeLong(signed=True),
1771
+ SimTypeLong(signed=True),
1772
+ SimTypeLong(signed=True),
1773
+ SimTypeLong(signed=True),
1774
+ SimTypeLong(signed=True),
1775
+ SimTypeLong(signed=True),
1776
+ SimTypeLong(signed=True),
1777
+ ],
1778
+ SimTypeLong(signed=True),
1779
+ ),
1780
+ "SystemFunction019": SimTypeFunction(
1781
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1782
+ ),
1783
+ "WmiQueryAllDataMultipleW": SimTypeFunction(
1784
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1785
+ SimTypeLong(signed=True),
1786
+ ),
1787
+ "ElfDeregisterEventSource": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1788
+ "ElfClearEventLogFileA": SimTypeFunction(
1789
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1790
+ ),
1791
+ "ConvertAccessToSecurityDescriptorA": SimTypeFunction(
1792
+ [
1793
+ SimTypeLong(signed=True),
1794
+ SimTypeLong(signed=True),
1795
+ SimTypeLong(signed=True),
1796
+ SimTypeLong(signed=True),
1797
+ SimTypeLong(signed=True),
1798
+ ],
1799
+ SimTypeLong(signed=True),
1800
+ ),
1801
+ "SystemFunction016": SimTypeFunction(
1802
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1803
+ ),
1804
+ "WmiMofEnumerateResourcesW": SimTypeFunction(
1805
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1806
+ ),
1807
+ "WmiNotificationRegistrationA": SimTypeFunction(
1808
+ [
1809
+ SimTypeLong(signed=True),
1810
+ SimTypeLong(signed=True),
1811
+ SimTypeLong(signed=True),
1812
+ SimTypeLong(signed=True),
1813
+ SimTypeLong(signed=True),
1814
+ ],
1815
+ SimTypeLong(signed=True),
1816
+ ),
1817
+ "LsaAddPrivilegesToAccount": SimTypeFunction(
1818
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1819
+ ),
1820
+ "SystemFunction003": SimTypeFunction(
1821
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1822
+ ),
1823
+ "SystemFunction020": SimTypeFunction(
1824
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1825
+ ),
1826
+ "SystemFunction006": SimTypeFunction(
1827
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1828
+ ),
1829
+ "ConvertStringSDToSDRootDomainA": SimTypeFunction(
1830
+ [
1831
+ SimTypeLong(signed=True),
1832
+ SimTypeLong(signed=True),
1833
+ SimTypeLong(signed=True),
1834
+ SimTypeLong(signed=True),
1835
+ SimTypeLong(signed=True),
1836
+ ],
1837
+ SimTypeLong(signed=True),
1838
+ ),
1839
+ "ConvertStringSDToSDDomainW": SimTypeFunction(
1840
+ [
1841
+ SimTypeLong(signed=True),
1842
+ SimTypeLong(signed=True),
1843
+ SimTypeLong(signed=True),
1844
+ SimTypeLong(signed=True),
1845
+ SimTypeLong(signed=True),
1846
+ SimTypeLong(signed=True),
1847
+ ],
1848
+ SimTypeLong(signed=True),
1849
+ ),
1850
+ "ConvertSecurityDescriptorToAccessNamedA": SimTypeFunction(
1851
+ [
1852
+ SimTypeLong(signed=True),
1853
+ SimTypeLong(signed=True),
1854
+ SimTypeLong(signed=True),
1855
+ SimTypeLong(signed=True),
1856
+ SimTypeLong(signed=True),
1857
+ SimTypeLong(signed=True),
1858
+ SimTypeLong(signed=True),
1859
+ ],
1860
+ SimTypeLong(signed=True),
1861
+ ),
1862
+ "LsaRemovePrivilegesFromAccount": SimTypeFunction(
1863
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1864
+ ),
1865
+ "WmiQuerySingleInstanceW": SimTypeFunction(
1866
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1867
+ SimTypeLong(signed=True),
1868
+ ),
1869
+ "ProcessIdleTasks": SimTypeFunction([], SimTypeLong(signed=True)),
1870
+ "ConvertStringSDToSDDomainA": SimTypeFunction(
1871
+ [
1872
+ SimTypeLong(signed=True),
1873
+ SimTypeLong(signed=True),
1874
+ SimTypeLong(signed=True),
1875
+ SimTypeLong(signed=True),
1876
+ SimTypeLong(signed=True),
1877
+ SimTypeLong(signed=True),
1878
+ ],
1879
+ SimTypeLong(signed=True),
1880
+ ),
1881
+ "SetEntriesInAuditListA": SimTypeFunction(
1882
+ [
1883
+ SimTypeLong(signed=True),
1884
+ SimTypeLong(signed=True),
1885
+ SimTypeLong(signed=True),
1886
+ SimTypeLong(signed=True),
1887
+ SimTypeLong(signed=True),
1888
+ SimTypeLong(signed=True),
1889
+ ],
1890
+ SimTypeLong(signed=True),
1891
+ ),
1892
+ "NotifyServiceStatusChange": SimTypeFunction(
1893
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1894
+ ),
1895
+ "LsaQuerySecurityObject": SimTypeFunction(
1896
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1897
+ ),
1898
+ "ElfBackupEventLogFileA": SimTypeFunction(
1899
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1900
+ ),
1901
+ "SystemFunction018": SimTypeFunction(
1902
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1903
+ ),
1904
+ "SaferiIsDllAllowed": SimTypeFunction(
1905
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1906
+ ),
1907
+ "WmiCloseBlock": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1908
+ "SystemFunction035": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1909
+ "WmiSetSingleInstanceW": SimTypeFunction(
1910
+ [
1911
+ SimTypeLong(signed=True),
1912
+ SimTypeLong(signed=True),
1913
+ SimTypeLong(signed=True),
1914
+ SimTypeLong(signed=True),
1915
+ SimTypeLong(signed=True),
1916
+ ],
1917
+ SimTypeLong(signed=True),
1918
+ ),
1919
+ "CredpEncodeCredential": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1920
+ "WmiQueryAllDataMultipleA": SimTypeFunction(
1921
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1922
+ SimTypeLong(signed=True),
1923
+ ),
1924
+ "SystemFunction030": SimTypeFunction(
1925
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1926
+ ),
1927
+ "LsaOpenTrustedDomain": SimTypeFunction(
1928
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
1929
+ SimTypeLong(signed=True),
1930
+ ),
1931
+ "SystemFunction005": SimTypeFunction(
1932
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1933
+ ),
1934
+ "SystemFunction012": SimTypeFunction(
1935
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1936
+ ),
1937
+ "SystemFunction031": SimTypeFunction(
1938
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1939
+ ),
1940
+ "SetEntriesInAuditListW": SimTypeFunction(
1941
+ [
1942
+ SimTypeLong(signed=True),
1943
+ SimTypeLong(signed=True),
1944
+ SimTypeLong(signed=True),
1945
+ SimTypeLong(signed=True),
1946
+ SimTypeLong(signed=True),
1947
+ SimTypeLong(signed=True),
1948
+ ],
1949
+ SimTypeLong(signed=True),
1950
+ ),
1951
+ "I_ScGetCurrentGroupStateW": SimTypeFunction(
1952
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1953
+ ),
1954
+ "SetNamedSecurityInfoExW": SimTypeFunction(
1955
+ [
1956
+ SimTypeLong(signed=True),
1957
+ SimTypeLong(signed=True),
1958
+ SimTypeLong(signed=True),
1959
+ SimTypeLong(signed=True),
1960
+ SimTypeLong(signed=True),
1961
+ SimTypeLong(signed=True),
1962
+ SimTypeLong(signed=True),
1963
+ SimTypeLong(signed=True),
1964
+ SimTypeLong(signed=True),
1965
+ ],
1966
+ SimTypeLong(signed=True),
1967
+ ),
1968
+ "ElfNumberOfRecords": SimTypeFunction(
1969
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1970
+ ),
1971
+ "LsaClearAuditLog": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1972
+ "CreateCodeAuthzLevel": SimTypeFunction(
1973
+ [
1974
+ SimTypeLong(signed=True),
1975
+ SimTypeLong(signed=True),
1976
+ SimTypeLong(signed=True),
1977
+ SimTypeLong(signed=True),
1978
+ SimTypeLong(signed=True),
1979
+ ],
1980
+ SimTypeLong(signed=True),
1981
+ ),
1982
+ "MD5Update": SimTypeFunction(
1983
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1984
+ ),
1985
+ "ElfFlushEventLog": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
1986
+ "MakeAbsoluteSD2": SimTypeFunction(
1987
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1988
+ ),
1989
+ "SaferiCompareTokenLevels": SimTypeFunction(
1990
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
1991
+ ),
1992
+ "SetEntriesInAccessListA": SimTypeFunction(
1993
+ [
1994
+ SimTypeLong(signed=True),
1995
+ SimTypeLong(signed=True),
1996
+ SimTypeLong(signed=True),
1997
+ SimTypeLong(signed=True),
1998
+ SimTypeLong(signed=True),
1999
+ SimTypeLong(signed=True),
2000
+ ],
2001
+ SimTypeLong(signed=True),
2002
+ ),
2003
+ "SystemFunction008": SimTypeFunction(
2004
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2005
+ ),
2006
+ "FlushEfsCache": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
2007
+ "ConvertSecurityDescriptorToAccessNamedW": SimTypeFunction(
2008
+ [
2009
+ SimTypeLong(signed=True),
2010
+ SimTypeLong(signed=True),
2011
+ SimTypeLong(signed=True),
2012
+ SimTypeLong(signed=True),
2013
+ SimTypeLong(signed=True),
2014
+ SimTypeLong(signed=True),
2015
+ SimTypeLong(signed=True),
2016
+ ],
2017
+ SimTypeLong(signed=True),
2018
+ ),
2019
+ "LsaCreateAccount": SimTypeFunction(
2020
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2021
+ SimTypeLong(signed=True),
2022
+ ),
2023
+ "LsaEnumerateAccounts": SimTypeFunction(
2024
+ [
2025
+ SimTypeLong(signed=True),
2026
+ SimTypeLong(signed=True),
2027
+ SimTypeLong(signed=True),
2028
+ SimTypeLong(signed=True),
2029
+ SimTypeLong(signed=True),
2030
+ ],
2031
+ SimTypeLong(signed=True),
2032
+ ),
2033
+ "WmiQueryGuidInformation": SimTypeFunction(
2034
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2035
+ ),
2036
+ "I_QueryTagInformation": SimTypeFunction(
2037
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2038
+ ),
2039
+ "SetInformationCodeAuthzLevelW": SimTypeFunction(
2040
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2041
+ SimTypeLong(signed=True),
2042
+ ),
2043
+ "LsaQueryInfoTrustedDomain": SimTypeFunction(
2044
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2045
+ ),
2046
+ "SystemFunction028": SimTypeFunction(
2047
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2048
+ ),
2049
+ "WmiQuerySingleInstanceMultipleW": SimTypeFunction(
2050
+ [
2051
+ SimTypeLong(signed=True),
2052
+ SimTypeLong(signed=True),
2053
+ SimTypeLong(signed=True),
2054
+ SimTypeLong(signed=True),
2055
+ SimTypeLong(signed=True),
2056
+ ],
2057
+ SimTypeLong(signed=True),
2058
+ ),
2059
+ "WmiReceiveNotificationsW": SimTypeFunction(
2060
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2061
+ SimTypeLong(signed=True),
2062
+ ),
2063
+ "LsaSetInformationTrustedDomain": SimTypeFunction(
2064
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2065
+ ),
2066
+ "I_ScValidatePnPService": SimTypeFunction(
2067
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2068
+ ),
2069
+ "ElfReportEventAndSourceW": SimTypeFunction(
2070
+ [
2071
+ SimTypeLong(signed=True),
2072
+ SimTypeLong(signed=True),
2073
+ SimTypeLong(signed=True),
2074
+ SimTypeLong(signed=True),
2075
+ SimTypeLong(signed=True),
2076
+ SimTypeLong(signed=True),
2077
+ SimTypeLong(signed=True),
2078
+ SimTypeLong(signed=True),
2079
+ SimTypeLong(signed=True),
2080
+ SimTypeLong(signed=True),
2081
+ SimTypeLong(signed=True),
2082
+ SimTypeLong(signed=True),
2083
+ SimTypeLong(signed=True),
2084
+ SimTypeLong(signed=True),
2085
+ SimTypeLong(signed=True),
2086
+ ],
2087
+ SimTypeLong(signed=True),
2088
+ ),
2089
+ "ConvertSDToStringSDRootDomainA": SimTypeFunction(
2090
+ [
2091
+ SimTypeLong(signed=True),
2092
+ SimTypeLong(signed=True),
2093
+ SimTypeLong(signed=True),
2094
+ SimTypeLong(signed=True),
2095
+ SimTypeLong(signed=True),
2096
+ SimTypeLong(signed=True),
2097
+ ],
2098
+ SimTypeLong(signed=True),
2099
+ ),
2100
+ "TrusteeAccessToObjectA": SimTypeFunction(
2101
+ [
2102
+ SimTypeLong(signed=True),
2103
+ SimTypeLong(signed=True),
2104
+ SimTypeLong(signed=True),
2105
+ SimTypeLong(signed=True),
2106
+ SimTypeLong(signed=True),
2107
+ SimTypeLong(signed=True),
2108
+ ],
2109
+ SimTypeLong(signed=True),
2110
+ ),
2111
+ "MD4Init": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
2112
+ "GetOverlappedAccessResults": SimTypeFunction(
2113
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2114
+ SimTypeLong(signed=True),
2115
+ ),
2116
+ "LogonUserExExW": SimTypeFunction(
2117
+ [
2118
+ SimTypeLong(signed=True),
2119
+ SimTypeLong(signed=True),
2120
+ SimTypeLong(signed=True),
2121
+ SimTypeLong(signed=True),
2122
+ SimTypeLong(signed=True),
2123
+ SimTypeLong(signed=True),
2124
+ SimTypeLong(signed=True),
2125
+ SimTypeLong(signed=True),
2126
+ SimTypeLong(signed=True),
2127
+ SimTypeLong(signed=True),
2128
+ SimTypeLong(signed=True),
2129
+ ],
2130
+ SimTypeLong(signed=True),
2131
+ ),
2132
+ "LsaLookupPrivilegeName": SimTypeFunction(
2133
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2134
+ ),
2135
+ "LsaOpenAccount": SimTypeFunction(
2136
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2137
+ SimTypeLong(signed=True),
2138
+ ),
2139
+ "CredRestoreCredentials": SimTypeFunction(
2140
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2141
+ SimTypeLong(signed=True),
2142
+ ),
2143
+ "I_ScSendTSMessage": SimTypeFunction(
2144
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2145
+ SimTypeLong(signed=True),
2146
+ ),
2147
+ "LsaLookupPrivilegeDisplayName": SimTypeFunction(
2148
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2149
+ SimTypeLong(signed=True),
2150
+ ),
2151
+ "I_ScSendPnPMessage": SimTypeFunction(
2152
+ [
2153
+ SimTypeLong(signed=True),
2154
+ SimTypeLong(signed=True),
2155
+ SimTypeLong(signed=True),
2156
+ SimTypeLong(signed=True),
2157
+ SimTypeLong(signed=True),
2158
+ SimTypeLong(signed=True),
2159
+ ],
2160
+ SimTypeLong(signed=True),
2161
+ ),
2162
+ "LsaICLookupSids": SimTypeFunction(
2163
+ [
2164
+ SimTypeLong(signed=True),
2165
+ SimTypeLong(signed=True),
2166
+ SimTypeLong(signed=True),
2167
+ SimTypeLong(signed=True),
2168
+ SimTypeLong(signed=True),
2169
+ SimTypeLong(signed=True),
2170
+ SimTypeLong(signed=True),
2171
+ SimTypeLong(signed=True),
2172
+ SimTypeLong(signed=True),
2173
+ ],
2174
+ SimTypeLong(signed=True),
2175
+ ),
2176
+ "SystemFunction034": SimTypeFunction(
2177
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2178
+ ),
2179
+ "SaferiRecordEventLogEntry": SimTypeFunction(
2180
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2181
+ ),
2182
+ "SystemFunction026": SimTypeFunction(
2183
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2184
+ ),
2185
+ "ElfOpenBackupEventLogA": SimTypeFunction(
2186
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2187
+ ),
2188
+ "SystemFunction029": SimTypeFunction(
2189
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2190
+ ),
2191
+ "LsaSetSecret": SimTypeFunction(
2192
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2193
+ ),
2194
+ "ElfReadEventLogA": SimTypeFunction(
2195
+ [
2196
+ SimTypeLong(signed=True),
2197
+ SimTypeLong(signed=True),
2198
+ SimTypeLong(signed=True),
2199
+ SimTypeLong(signed=True),
2200
+ SimTypeLong(signed=True),
2201
+ SimTypeLong(signed=True),
2202
+ SimTypeLong(signed=True),
2203
+ ],
2204
+ SimTypeLong(signed=True),
2205
+ ),
2206
+ "CredpConvertCredential": SimTypeFunction(
2207
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2208
+ SimTypeLong(signed=True),
2209
+ ),
2210
+ "ConvertSecurityDescriptorToAccessW": SimTypeFunction(
2211
+ [
2212
+ SimTypeLong(signed=True),
2213
+ SimTypeLong(signed=True),
2214
+ SimTypeLong(signed=True),
2215
+ SimTypeLong(signed=True),
2216
+ SimTypeLong(signed=True),
2217
+ SimTypeLong(signed=True),
2218
+ SimTypeLong(signed=True),
2219
+ ],
2220
+ SimTypeLong(signed=True),
2221
+ ),
2222
+ "LsaICLookupSidsWithCreds": SimTypeFunction(
2223
+ [
2224
+ SimTypeLong(signed=True),
2225
+ SimTypeLong(signed=True),
2226
+ SimTypeLong(signed=True),
2227
+ SimTypeLong(signed=True),
2228
+ SimTypeLong(signed=True),
2229
+ SimTypeLong(signed=True),
2230
+ SimTypeLong(signed=True),
2231
+ SimTypeLong(signed=True),
2232
+ SimTypeLong(signed=True),
2233
+ SimTypeLong(signed=True),
2234
+ SimTypeLong(signed=True),
2235
+ SimTypeLong(signed=True),
2236
+ ],
2237
+ SimTypeLong(signed=True),
2238
+ ),
2239
+ "SetSecurityInfoExA": SimTypeFunction(
2240
+ [
2241
+ SimTypeLong(signed=True),
2242
+ SimTypeLong(signed=True),
2243
+ SimTypeLong(signed=True),
2244
+ SimTypeLong(signed=True),
2245
+ SimTypeLong(signed=True),
2246
+ SimTypeLong(signed=True),
2247
+ SimTypeLong(signed=True),
2248
+ SimTypeLong(signed=True),
2249
+ SimTypeLong(signed=True),
2250
+ ],
2251
+ SimTypeLong(signed=True),
2252
+ ),
2253
+ "SystemFunction001": SimTypeFunction(
2254
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2255
+ ),
2256
+ "UsePinForEncryptedFilesA": SimTypeFunction(
2257
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2258
+ ),
2259
+ "LsaQuerySecret": SimTypeFunction(
2260
+ [
2261
+ SimTypeLong(signed=True),
2262
+ SimTypeLong(signed=True),
2263
+ SimTypeLong(signed=True),
2264
+ SimTypeLong(signed=True),
2265
+ SimTypeLong(signed=True),
2266
+ ],
2267
+ SimTypeLong(signed=True),
2268
+ ),
2269
+ "LsaEnumeratePrivileges": SimTypeFunction(
2270
+ [
2271
+ SimTypeLong(signed=True),
2272
+ SimTypeLong(signed=True),
2273
+ SimTypeLong(signed=True),
2274
+ SimTypeLong(signed=True),
2275
+ SimTypeLong(signed=True),
2276
+ ],
2277
+ SimTypeLong(signed=True),
2278
+ ),
2279
+ "SystemFunction032": SimTypeFunction(
2280
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2281
+ ),
2282
+ "GetInformationCodeAuthzPolicyW": SimTypeFunction(
2283
+ [
2284
+ SimTypeLong(signed=True),
2285
+ SimTypeLong(signed=True),
2286
+ SimTypeLong(signed=True),
2287
+ SimTypeLong(signed=True),
2288
+ SimTypeLong(signed=True),
2289
+ SimTypeLong(signed=True),
2290
+ ],
2291
+ SimTypeLong(signed=True),
2292
+ ),
2293
+ "CredpEncodeSecret": SimTypeFunction(
2294
+ [
2295
+ SimTypeLong(signed=True),
2296
+ SimTypeLong(signed=True),
2297
+ SimTypeLong(signed=True),
2298
+ SimTypeLong(signed=True),
2299
+ SimTypeLong(signed=True),
2300
+ ],
2301
+ SimTypeLong(signed=True),
2302
+ ),
2303
+ "ElfOpenBackupEventLogW": SimTypeFunction(
2304
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2305
+ ),
2306
+ "IdentifyCodeAuthzLevelW": SimTypeFunction(
2307
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2308
+ SimTypeLong(signed=True),
2309
+ ),
2310
+ "SystemFunction009": SimTypeFunction(
2311
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2312
+ ),
2313
+ "A_SHAUpdate": SimTypeFunction(
2314
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2315
+ ),
2316
+ "LsaDelete": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
2317
+ "ElfClearEventLogFileW": SimTypeFunction(
2318
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2319
+ ),
2320
+ "SetInformationCodeAuthzPolicyW": SimTypeFunction(
2321
+ [
2322
+ SimTypeLong(signed=True),
2323
+ SimTypeLong(signed=True),
2324
+ SimTypeLong(signed=True),
2325
+ SimTypeLong(signed=True),
2326
+ SimTypeLong(signed=True),
2327
+ ],
2328
+ SimTypeLong(signed=True),
2329
+ ),
2330
+ "I_ScQueryServiceConfig": SimTypeFunction(
2331
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2332
+ ),
2333
+ "WmiDevInstToInstanceNameW": SimTypeFunction(
2334
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2335
+ SimTypeLong(signed=True),
2336
+ ),
2337
+ "SystemFunction022": SimTypeFunction(
2338
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2339
+ ),
2340
+ "WmiQueryAllDataW": SimTypeFunction(
2341
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2342
+ ),
2343
+ "WmiQuerySingleInstanceA": SimTypeFunction(
2344
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2345
+ SimTypeLong(signed=True),
2346
+ ),
2347
+ "ElfOldestRecord": SimTypeFunction(
2348
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2349
+ ),
2350
+ "SystemFunction002": SimTypeFunction(
2351
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2352
+ ),
2353
+ "SetEntriesInAccessListW": SimTypeFunction(
2354
+ [
2355
+ SimTypeLong(signed=True),
2356
+ SimTypeLong(signed=True),
2357
+ SimTypeLong(signed=True),
2358
+ SimTypeLong(signed=True),
2359
+ SimTypeLong(signed=True),
2360
+ SimTypeLong(signed=True),
2361
+ ],
2362
+ SimTypeLong(signed=True),
2363
+ ),
2364
+ "LsaSetQuotasForAccount": SimTypeFunction(
2365
+ [SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2366
+ ),
2367
+ "CredReadByTokenHandle": SimTypeFunction(
2368
+ [
2369
+ SimTypeLong(signed=True),
2370
+ SimTypeLong(signed=True),
2371
+ SimTypeLong(signed=True),
2372
+ SimTypeLong(signed=True),
2373
+ SimTypeLong(signed=True),
2374
+ ],
2375
+ SimTypeLong(signed=True),
2376
+ ),
2377
+ "SystemFunction004": SimTypeFunction(
2378
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2379
+ ),
2380
+ "LsaICLookupNamesWithCreds": SimTypeFunction(
2381
+ [
2382
+ SimTypeLong(signed=True),
2383
+ SimTypeLong(signed=True),
2384
+ SimTypeLong(signed=True),
2385
+ SimTypeLong(signed=True),
2386
+ SimTypeLong(signed=True),
2387
+ SimTypeLong(signed=True),
2388
+ SimTypeLong(signed=True),
2389
+ SimTypeLong(signed=True),
2390
+ SimTypeLong(signed=True),
2391
+ SimTypeLong(signed=True),
2392
+ SimTypeLong(signed=True),
2393
+ SimTypeLong(signed=True),
2394
+ ],
2395
+ SimTypeLong(signed=True),
2396
+ ),
2397
+ "SystemFunction023": SimTypeFunction(
2398
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2399
+ ),
2400
+ "SystemFunction011": SimTypeFunction(
2401
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2402
+ ),
2403
+ "WmiNotificationRegistrationW": SimTypeFunction(
2404
+ [
2405
+ SimTypeLong(signed=True),
2406
+ SimTypeLong(signed=True),
2407
+ SimTypeLong(signed=True),
2408
+ SimTypeLong(signed=True),
2409
+ SimTypeLong(signed=True),
2410
+ ],
2411
+ SimTypeLong(signed=True),
2412
+ ),
2413
+ "SystemFunction021": SimTypeFunction(
2414
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)], SimTypeLong(signed=True)
2415
+ ),
2416
+ "WmiReceiveNotificationsA": SimTypeFunction(
2417
+ [SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True), SimTypeLong(signed=True)],
2418
+ SimTypeLong(signed=True),
2419
+ ),
2420
+ "MD5Final": SimTypeFunction([SimTypeLong(signed=True)], SimTypeLong(signed=True)),
2421
+ }
2422
+
2423
+ for (prefix, lib, suffix), decls in missing_declarations.items():
2424
+ for func, proto in decls.items():
2425
+ parsed_cprotos[(prefix, lib, suffix)].append((func, proto, ""))
2426
+
2427
+ # Write to files
2428
+
2429
+ header = """# pylint:disable=line-too-long
2430
+ import logging
2431
+ from collections import OrderedDict
2432
+
2433
+ from ...sim_type import (SimTypeFunction,
2434
+ SimTypeShort,
2435
+ SimTypeInt,
2436
+ SimTypeLong,
2437
+ SimTypeLongLong,
2438
+ SimTypeDouble,
2439
+ SimTypeFloat,
2440
+ SimTypePointer,
2441
+ SimTypeChar,
2442
+ SimStruct,
2443
+ SimTypeArray,
2444
+ SimTypeBottom,
2445
+ SimUnion,
2446
+ SimTypeBool,
2447
+ SimTypeRef,
2448
+ )
2449
+ from ...calling_conventions import SimCCStdcall, SimCCMicrosoftAMD64
2450
+ from .. import SIM_PROCEDURES as P
2451
+ from . import SimLibrary
2452
+
2453
+
2454
+ _l = logging.getLogger(name=__name__)
2455
+
2456
+
2457
+ lib = SimLibrary()
2458
+ lib.type_collection_names = ["win32"]
2459
+ lib.set_default_cc("X86", SimCCStdcall)
2460
+ lib.set_default_cc("AMD64", SimCCMicrosoftAMD64)
2461
+ """
2462
+ footer = """ }
2463
+
2464
+ lib.set_prototypes(prototypes)
2465
+ """
2466
+
2467
+ # Dump function prototypes
2468
+
2469
+ for (prefix, libname, suffix), parsed_cprotos_per_lib in parsed_cprotos.items():
2470
+ filename = prefix + "_" + libname.replace(".", "_") + ".py"
2471
+ logging.debug("Writing to file %s...", filename)
2472
+ with open(filename, "w") as f:
2473
+ f.write(header)
2474
+ if (prefix, libname) == ("win32", "kernel32"):
2475
+ f.write(
2476
+ """lib.add_all_from_dict(P['win32'])
2477
+ lib.add_alias('EncodePointer', 'DecodePointer')
2478
+ lib.add_alias('GlobalAlloc', 'LocalAlloc')
2479
+
2480
+ lib.add('lstrcatA', P['libc']['strcat'])
2481
+ lib.add('lstrcmpA', P['libc']['strcmp'])
2482
+ lib.add('lstrcpyA', P['libc']['strcpy'])
2483
+ lib.add('lstrcpynA', P['libc']['strncpy'])
2484
+ lib.add('lstrlenA', P['libc']['strlen'])
2485
+ lib.add('lstrcmpW', P['libc']['wcscmp'])
2486
+ lib.add('lstrcmpiW', P['libc']['wcscasecmp'])
2487
+ """
2488
+ )
2489
+ elif (prefix, libname) == ("win32", "ntdll"):
2490
+ f.write(
2491
+ """lib.add('RtlEncodePointer', P['win32']['EncodePointer'])
2492
+ lib.add('RtlDecodePointer', P['win32']['EncodePointer'])
2493
+ lib.add('RtlAllocateHeap', P['win32']['HeapAlloc'])
2494
+ """
2495
+ )
2496
+ elif (prefix, libname) == ("win32", "user32"):
2497
+ f.write(
2498
+ """import archinfo
2499
+ from ...calling_conventions import SimCCCdecl
2500
+
2501
+ lib.add_all_from_dict(P['win_user32'])
2502
+ lib.add('wsprintfA', P['libc']['sprintf'], cc=SimCCCdecl(archinfo.ArchX86()))
2503
+ """
2504
+ )
2505
+ elif (prefix, libname) == ("wdk", "ntoskrnl"):
2506
+ f.write(
2507
+ """lib.add_all_from_dict(P["win32_kernel"])
2508
+ """
2509
+ )
2510
+
2511
+ if suffix:
2512
+ f.write(f'lib.set_library_names("{libname}.{suffix}")\n')
2513
+ else:
2514
+ f.write(f'lib.set_library_names("{libname}")\n')
2515
+ f.write("prototypes = \\\n {\n")
2516
+ f.write(parsedcprotos2py(parsed_cprotos_per_lib))
2517
+ f.write(footer)
2518
+
2519
+ # Dump the type collection
2520
+ with open("types_win32.py", "w") as f:
2521
+ f.write(
2522
+ """# pylint:disable=line-too-long
2523
+ from collections import OrderedDict
2524
+
2525
+ from angr.procedures.definitions import SimTypeCollection
2526
+ from angr.sim_type import SimTypeFunction, \
2527
+ SimTypeShort, SimTypeInt, SimTypeLong, SimTypeLongLong, SimTypeDouble, SimTypeFloat, \
2528
+ SimTypePointer, \
2529
+ SimTypeChar, \
2530
+ SimStruct, \
2531
+ SimTypeArray, \
2532
+ SimTypeBottom, \
2533
+ SimUnion, \
2534
+ SimTypeBool, \
2535
+ SimTypeRef
2536
+
2537
+ """
2538
+ )
2539
+ f.write(typelib.init_str())
2540
+
2541
+
2542
+ def main():
2543
+ _args = ArgumentParser(description="Build a typelib from win32json project")
2544
+ _args.add_argument("win32json_api_directory")
2545
+ _args.add_argument("-v", action="count", help="Increase logging verbosity. Can specify multiple times.")
2546
+ args = _args.parse_args()
2547
+ if args.v is not None:
2548
+ logging.root.setLevel(level=max(30 - (args.v * 10), 0))
2549
+ do_it(args.win32json_api_directory, None)
2550
+
2551
+
2552
+ if __name__ == "__main__":
2553
+ main()