angr 9.2.166__cp310-abi3-manylinux_2_28_x86_64.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Potentially problematic release.
This version of angr might be problematic. Click here for more details.
- angr/__init__.py +366 -0
- angr/__main__.py +152 -0
- angr/ailment/__init__.py +81 -0
- angr/ailment/block.py +81 -0
- angr/ailment/block_walker.py +845 -0
- angr/ailment/constant.py +3 -0
- angr/ailment/converter_common.py +11 -0
- angr/ailment/converter_pcode.py +623 -0
- angr/ailment/converter_vex.py +798 -0
- angr/ailment/expression.py +1655 -0
- angr/ailment/manager.py +33 -0
- angr/ailment/statement.py +978 -0
- angr/ailment/tagged_object.py +61 -0
- angr/ailment/utils.py +114 -0
- angr/analyses/__init__.py +113 -0
- angr/analyses/analysis.py +429 -0
- angr/analyses/backward_slice.py +686 -0
- angr/analyses/binary_optimizer.py +670 -0
- angr/analyses/bindiff.py +1512 -0
- angr/analyses/boyscout.py +76 -0
- angr/analyses/callee_cleanup_finder.py +74 -0
- angr/analyses/calling_convention/__init__.py +6 -0
- angr/analyses/calling_convention/calling_convention.py +1096 -0
- angr/analyses/calling_convention/fact_collector.py +636 -0
- angr/analyses/calling_convention/utils.py +60 -0
- angr/analyses/cdg.py +189 -0
- angr/analyses/cfg/__init__.py +23 -0
- angr/analyses/cfg/cfb.py +428 -0
- angr/analyses/cfg/cfg.py +74 -0
- angr/analyses/cfg/cfg_arch_options.py +95 -0
- angr/analyses/cfg/cfg_base.py +2909 -0
- angr/analyses/cfg/cfg_emulated.py +3451 -0
- angr/analyses/cfg/cfg_fast.py +5316 -0
- angr/analyses/cfg/cfg_fast_soot.py +662 -0
- angr/analyses/cfg/cfg_job_base.py +203 -0
- angr/analyses/cfg/indirect_jump_resolvers/__init__.py +28 -0
- angr/analyses/cfg/indirect_jump_resolvers/amd64_elf_got.py +62 -0
- angr/analyses/cfg/indirect_jump_resolvers/amd64_pe_iat.py +51 -0
- angr/analyses/cfg/indirect_jump_resolvers/arm_elf_fast.py +159 -0
- angr/analyses/cfg/indirect_jump_resolvers/const_resolver.py +339 -0
- angr/analyses/cfg/indirect_jump_resolvers/constant_value_manager.py +107 -0
- angr/analyses/cfg/indirect_jump_resolvers/default_resolvers.py +76 -0
- angr/analyses/cfg/indirect_jump_resolvers/jumptable.py +2367 -0
- angr/analyses/cfg/indirect_jump_resolvers/memload_resolver.py +81 -0
- angr/analyses/cfg/indirect_jump_resolvers/mips_elf_fast.py +286 -0
- angr/analyses/cfg/indirect_jump_resolvers/mips_elf_got.py +148 -0
- angr/analyses/cfg/indirect_jump_resolvers/propagator_utils.py +46 -0
- angr/analyses/cfg/indirect_jump_resolvers/resolver.py +74 -0
- angr/analyses/cfg/indirect_jump_resolvers/syscall_resolver.py +92 -0
- angr/analyses/cfg/indirect_jump_resolvers/x86_elf_pic_plt.py +88 -0
- angr/analyses/cfg/indirect_jump_resolvers/x86_pe_iat.py +47 -0
- angr/analyses/cfg_slice_to_sink/__init__.py +11 -0
- angr/analyses/cfg_slice_to_sink/cfg_slice_to_sink.py +117 -0
- angr/analyses/cfg_slice_to_sink/graph.py +87 -0
- angr/analyses/cfg_slice_to_sink/transitions.py +27 -0
- angr/analyses/class_identifier.py +63 -0
- angr/analyses/code_tagging.py +123 -0
- angr/analyses/codecave.py +77 -0
- angr/analyses/complete_calling_conventions.py +461 -0
- angr/analyses/congruency_check.py +377 -0
- angr/analyses/data_dep/__init__.py +16 -0
- angr/analyses/data_dep/data_dependency_analysis.py +595 -0
- angr/analyses/data_dep/dep_nodes.py +171 -0
- angr/analyses/data_dep/sim_act_location.py +49 -0
- angr/analyses/datagraph_meta.py +105 -0
- angr/analyses/ddg.py +1670 -0
- angr/analyses/decompiler/__init__.py +41 -0
- angr/analyses/decompiler/ail_simplifier.py +2085 -0
- angr/analyses/decompiler/ailgraph_walker.py +49 -0
- angr/analyses/decompiler/block_io_finder.py +302 -0
- angr/analyses/decompiler/block_similarity.py +196 -0
- angr/analyses/decompiler/block_simplifier.py +376 -0
- angr/analyses/decompiler/callsite_maker.py +571 -0
- angr/analyses/decompiler/ccall_rewriters/__init__.py +9 -0
- angr/analyses/decompiler/ccall_rewriters/amd64_ccalls.py +580 -0
- angr/analyses/decompiler/ccall_rewriters/rewriter_base.py +20 -0
- angr/analyses/decompiler/ccall_rewriters/x86_ccalls.py +313 -0
- angr/analyses/decompiler/clinic.py +3308 -0
- angr/analyses/decompiler/condition_processor.py +1281 -0
- angr/analyses/decompiler/counters/__init__.py +16 -0
- angr/analyses/decompiler/counters/boolean_counter.py +27 -0
- angr/analyses/decompiler/counters/call_counter.py +57 -0
- angr/analyses/decompiler/counters/expression_counters.py +77 -0
- angr/analyses/decompiler/counters/seq_cf_structure_counter.py +63 -0
- angr/analyses/decompiler/decompilation_cache.py +46 -0
- angr/analyses/decompiler/decompilation_options.py +275 -0
- angr/analyses/decompiler/decompiler.py +710 -0
- angr/analyses/decompiler/dephication/__init__.py +6 -0
- angr/analyses/decompiler/dephication/dephication_base.py +100 -0
- angr/analyses/decompiler/dephication/graph_dephication.py +70 -0
- angr/analyses/decompiler/dephication/graph_rewriting.py +112 -0
- angr/analyses/decompiler/dephication/graph_vvar_mapping.py +363 -0
- angr/analyses/decompiler/dephication/rewriting_engine.py +527 -0
- angr/analyses/decompiler/dephication/seqnode_dephication.py +156 -0
- angr/analyses/decompiler/empty_node_remover.py +212 -0
- angr/analyses/decompiler/expression_narrower.py +287 -0
- angr/analyses/decompiler/goto_manager.py +112 -0
- angr/analyses/decompiler/graph_region.py +426 -0
- angr/analyses/decompiler/jump_target_collector.py +37 -0
- angr/analyses/decompiler/jumptable_entry_condition_rewriter.py +67 -0
- angr/analyses/decompiler/label_collector.py +32 -0
- angr/analyses/decompiler/optimization_passes/__init__.py +151 -0
- angr/analyses/decompiler/optimization_passes/base_ptr_save_simplifier.py +157 -0
- angr/analyses/decompiler/optimization_passes/call_stmt_rewriter.py +46 -0
- angr/analyses/decompiler/optimization_passes/code_motion.py +362 -0
- angr/analyses/decompiler/optimization_passes/condition_constprop.py +219 -0
- angr/analyses/decompiler/optimization_passes/const_derefs.py +266 -0
- angr/analyses/decompiler/optimization_passes/const_prop_reverter.py +365 -0
- angr/analyses/decompiler/optimization_passes/cross_jump_reverter.py +106 -0
- angr/analyses/decompiler/optimization_passes/deadblock_remover.py +82 -0
- angr/analyses/decompiler/optimization_passes/determine_load_sizes.py +64 -0
- angr/analyses/decompiler/optimization_passes/div_simplifier.py +425 -0
- angr/analyses/decompiler/optimization_passes/duplication_reverter/__init__.py +5 -0
- angr/analyses/decompiler/optimization_passes/duplication_reverter/ail_merge_graph.py +503 -0
- angr/analyses/decompiler/optimization_passes/duplication_reverter/duplication_reverter.py +1218 -0
- angr/analyses/decompiler/optimization_passes/duplication_reverter/errors.py +16 -0
- angr/analyses/decompiler/optimization_passes/duplication_reverter/similarity.py +126 -0
- angr/analyses/decompiler/optimization_passes/duplication_reverter/utils.py +167 -0
- angr/analyses/decompiler/optimization_passes/eager_std_string_concatenation.py +165 -0
- angr/analyses/decompiler/optimization_passes/engine_base.py +500 -0
- angr/analyses/decompiler/optimization_passes/expr_op_swapper.py +135 -0
- angr/analyses/decompiler/optimization_passes/flip_boolean_cmp.py +113 -0
- angr/analyses/decompiler/optimization_passes/inlined_string_transformation_simplifier.py +615 -0
- angr/analyses/decompiler/optimization_passes/ite_expr_converter.py +224 -0
- angr/analyses/decompiler/optimization_passes/ite_region_converter.py +335 -0
- angr/analyses/decompiler/optimization_passes/lowered_switch_simplifier.py +923 -0
- angr/analyses/decompiler/optimization_passes/mod_simplifier.py +99 -0
- angr/analyses/decompiler/optimization_passes/optimization_pass.py +703 -0
- angr/analyses/decompiler/optimization_passes/register_save_area_simplifier.py +221 -0
- angr/analyses/decompiler/optimization_passes/ret_addr_save_simplifier.py +171 -0
- angr/analyses/decompiler/optimization_passes/ret_deduplicator.py +222 -0
- angr/analyses/decompiler/optimization_passes/return_duplicator_base.py +640 -0
- angr/analyses/decompiler/optimization_passes/return_duplicator_high.py +61 -0
- angr/analyses/decompiler/optimization_passes/return_duplicator_low.py +237 -0
- angr/analyses/decompiler/optimization_passes/stack_canary_simplifier.py +333 -0
- angr/analyses/decompiler/optimization_passes/switch_default_case_duplicator.py +149 -0
- angr/analyses/decompiler/optimization_passes/switch_reused_entry_rewriter.py +102 -0
- angr/analyses/decompiler/optimization_passes/tag_slicer.py +41 -0
- angr/analyses/decompiler/optimization_passes/win_stack_canary_simplifier.py +421 -0
- angr/analyses/decompiler/optimization_passes/x86_gcc_getpc_simplifier.py +88 -0
- angr/analyses/decompiler/peephole_optimizations/__init__.py +129 -0
- angr/analyses/decompiler/peephole_optimizations/a_div_const_add_a_mul_n_div_const.py +42 -0
- angr/analyses/decompiler/peephole_optimizations/a_mul_const_div_shr_const.py +38 -0
- angr/analyses/decompiler/peephole_optimizations/a_mul_const_sub_a.py +34 -0
- angr/analyses/decompiler/peephole_optimizations/a_shl_const_sub_a.py +34 -0
- angr/analyses/decompiler/peephole_optimizations/a_sub_a_div.py +25 -0
- angr/analyses/decompiler/peephole_optimizations/a_sub_a_shr_const_shr_const.py +37 -0
- angr/analyses/decompiler/peephole_optimizations/a_sub_a_sub_n.py +23 -0
- angr/analyses/decompiler/peephole_optimizations/arm_cmpf.py +236 -0
- angr/analyses/decompiler/peephole_optimizations/base.py +157 -0
- angr/analyses/decompiler/peephole_optimizations/basepointeroffset_add_n.py +34 -0
- angr/analyses/decompiler/peephole_optimizations/basepointeroffset_and_mask.py +36 -0
- angr/analyses/decompiler/peephole_optimizations/bitwise_or_to_logical_or.py +34 -0
- angr/analyses/decompiler/peephole_optimizations/bool_expr_xor_1.py +27 -0
- angr/analyses/decompiler/peephole_optimizations/bswap.py +142 -0
- angr/analyses/decompiler/peephole_optimizations/cas_intrinsics.py +115 -0
- angr/analyses/decompiler/peephole_optimizations/cmpord_rewriter.py +71 -0
- angr/analyses/decompiler/peephole_optimizations/coalesce_adjacent_shrs.py +39 -0
- angr/analyses/decompiler/peephole_optimizations/coalesce_same_cascading_ifs.py +28 -0
- angr/analyses/decompiler/peephole_optimizations/constant_derefs.py +44 -0
- angr/analyses/decompiler/peephole_optimizations/conv_a_sub0_shr_and.py +69 -0
- angr/analyses/decompiler/peephole_optimizations/conv_shl_shr.py +52 -0
- angr/analyses/decompiler/peephole_optimizations/eager_eval.py +447 -0
- angr/analyses/decompiler/peephole_optimizations/extended_byte_and_mask.py +56 -0
- angr/analyses/decompiler/peephole_optimizations/inlined_memcpy.py +78 -0
- angr/analyses/decompiler/peephole_optimizations/inlined_strcpy.py +217 -0
- angr/analyses/decompiler/peephole_optimizations/inlined_strcpy_consolidation.py +106 -0
- angr/analyses/decompiler/peephole_optimizations/inlined_wstrcpy.py +170 -0
- angr/analyses/decompiler/peephole_optimizations/invert_negated_logical_conjuction_disjunction.py +50 -0
- angr/analyses/decompiler/peephole_optimizations/modulo_simplifier.py +89 -0
- angr/analyses/decompiler/peephole_optimizations/one_sub_bool.py +33 -0
- angr/analyses/decompiler/peephole_optimizations/optimized_div_simplifier.py +356 -0
- angr/analyses/decompiler/peephole_optimizations/remove_cascading_conversions.py +45 -0
- angr/analyses/decompiler/peephole_optimizations/remove_cxx_destructor_calls.py +32 -0
- angr/analyses/decompiler/peephole_optimizations/remove_empty_if_body.py +46 -0
- angr/analyses/decompiler/peephole_optimizations/remove_noop_conversions.py +47 -0
- angr/analyses/decompiler/peephole_optimizations/remove_redundant_bitmasks.py +125 -0
- angr/analyses/decompiler/peephole_optimizations/remove_redundant_conversions.py +273 -0
- angr/analyses/decompiler/peephole_optimizations/remove_redundant_ite_branch.py +30 -0
- angr/analyses/decompiler/peephole_optimizations/remove_redundant_ite_comparisons.py +54 -0
- angr/analyses/decompiler/peephole_optimizations/remove_redundant_nots.py +36 -0
- angr/analyses/decompiler/peephole_optimizations/remove_redundant_reinterprets.py +44 -0
- angr/analyses/decompiler/peephole_optimizations/remove_redundant_shifts.py +95 -0
- angr/analyses/decompiler/peephole_optimizations/remove_redundant_shifts_around_comparators.py +44 -0
- angr/analyses/decompiler/peephole_optimizations/rewrite_bit_extractions.py +85 -0
- angr/analyses/decompiler/peephole_optimizations/rewrite_conv_mul.py +40 -0
- angr/analyses/decompiler/peephole_optimizations/rewrite_cxx_operator_calls.py +90 -0
- angr/analyses/decompiler/peephole_optimizations/rewrite_mips_gp_loads.py +49 -0
- angr/analyses/decompiler/peephole_optimizations/rol_ror.py +130 -0
- angr/analyses/decompiler/peephole_optimizations/sar_to_signed_div.py +143 -0
- angr/analyses/decompiler/peephole_optimizations/shl_to_mul.py +25 -0
- angr/analyses/decompiler/peephole_optimizations/simplify_pc_relative_loads.py +51 -0
- angr/analyses/decompiler/peephole_optimizations/single_bit_cond_to_boolexpr.py +82 -0
- angr/analyses/decompiler/peephole_optimizations/single_bit_xor.py +29 -0
- angr/analyses/decompiler/peephole_optimizations/tidy_stack_addr.py +131 -0
- angr/analyses/decompiler/peephole_optimizations/utils.py +18 -0
- angr/analyses/decompiler/presets/__init__.py +20 -0
- angr/analyses/decompiler/presets/basic.py +32 -0
- angr/analyses/decompiler/presets/fast.py +58 -0
- angr/analyses/decompiler/presets/full.py +68 -0
- angr/analyses/decompiler/presets/preset.py +37 -0
- angr/analyses/decompiler/redundant_label_remover.py +134 -0
- angr/analyses/decompiler/region_identifier.py +1239 -0
- angr/analyses/decompiler/region_simplifiers/__init__.py +5 -0
- angr/analyses/decompiler/region_simplifiers/cascading_cond_transformer.py +95 -0
- angr/analyses/decompiler/region_simplifiers/cascading_ifs.py +82 -0
- angr/analyses/decompiler/region_simplifiers/expr_folding.py +818 -0
- angr/analyses/decompiler/region_simplifiers/goto.py +178 -0
- angr/analyses/decompiler/region_simplifiers/if_.py +135 -0
- angr/analyses/decompiler/region_simplifiers/ifelse.py +91 -0
- angr/analyses/decompiler/region_simplifiers/loop.py +143 -0
- angr/analyses/decompiler/region_simplifiers/node_address_finder.py +24 -0
- angr/analyses/decompiler/region_simplifiers/region_simplifier.py +246 -0
- angr/analyses/decompiler/region_simplifiers/switch_cluster_simplifier.py +654 -0
- angr/analyses/decompiler/region_simplifiers/switch_expr_simplifier.py +87 -0
- angr/analyses/decompiler/region_walker.py +24 -0
- angr/analyses/decompiler/return_maker.py +72 -0
- angr/analyses/decompiler/seq_to_blocks.py +20 -0
- angr/analyses/decompiler/sequence_walker.py +257 -0
- angr/analyses/decompiler/ssailification/__init__.py +4 -0
- angr/analyses/decompiler/ssailification/rewriting.py +379 -0
- angr/analyses/decompiler/ssailification/rewriting_engine.py +1053 -0
- angr/analyses/decompiler/ssailification/rewriting_state.py +61 -0
- angr/analyses/decompiler/ssailification/ssailification.py +276 -0
- angr/analyses/decompiler/ssailification/traversal.py +124 -0
- angr/analyses/decompiler/ssailification/traversal_engine.py +306 -0
- angr/analyses/decompiler/ssailification/traversal_state.py +48 -0
- angr/analyses/decompiler/stack_item.py +36 -0
- angr/analyses/decompiler/structured_codegen/__init__.py +25 -0
- angr/analyses/decompiler/structured_codegen/base.py +132 -0
- angr/analyses/decompiler/structured_codegen/c.py +4082 -0
- angr/analyses/decompiler/structured_codegen/dummy.py +15 -0
- angr/analyses/decompiler/structured_codegen/dwarf_import.py +190 -0
- angr/analyses/decompiler/structuring/__init__.py +30 -0
- angr/analyses/decompiler/structuring/dream.py +1217 -0
- angr/analyses/decompiler/structuring/phoenix.py +3090 -0
- angr/analyses/decompiler/structuring/recursive_structurer.py +187 -0
- angr/analyses/decompiler/structuring/sailr.py +120 -0
- angr/analyses/decompiler/structuring/structurer_base.py +1066 -0
- angr/analyses/decompiler/structuring/structurer_nodes.py +440 -0
- angr/analyses/decompiler/utils.py +1118 -0
- angr/analyses/deobfuscator/__init__.py +18 -0
- angr/analyses/deobfuscator/api_obf_finder.py +325 -0
- angr/analyses/deobfuscator/api_obf_peephole_optimizer.py +51 -0
- angr/analyses/deobfuscator/api_obf_type2_finder.py +166 -0
- angr/analyses/deobfuscator/irsb_reg_collector.py +54 -0
- angr/analyses/deobfuscator/string_obf_finder.py +959 -0
- angr/analyses/deobfuscator/string_obf_opt_passes.py +133 -0
- angr/analyses/deobfuscator/string_obf_peephole_optimizer.py +47 -0
- angr/analyses/disassembly.py +1295 -0
- angr/analyses/disassembly_utils.py +101 -0
- angr/analyses/dominance_frontier.py +57 -0
- angr/analyses/fcp/__init__.py +4 -0
- angr/analyses/fcp/fcp.py +427 -0
- angr/analyses/find_objects_static.py +205 -0
- angr/analyses/flirt/__init__.py +47 -0
- angr/analyses/flirt/consts.py +160 -0
- angr/analyses/flirt/flirt.py +244 -0
- angr/analyses/flirt/flirt_function.py +20 -0
- angr/analyses/flirt/flirt_matcher.py +351 -0
- angr/analyses/flirt/flirt_module.py +32 -0
- angr/analyses/flirt/flirt_node.py +23 -0
- angr/analyses/flirt/flirt_sig.py +359 -0
- angr/analyses/flirt/flirt_utils.py +31 -0
- angr/analyses/forward_analysis/__init__.py +12 -0
- angr/analyses/forward_analysis/forward_analysis.py +530 -0
- angr/analyses/forward_analysis/job_info.py +64 -0
- angr/analyses/forward_analysis/visitors/__init__.py +14 -0
- angr/analyses/forward_analysis/visitors/call_graph.py +29 -0
- angr/analyses/forward_analysis/visitors/function_graph.py +86 -0
- angr/analyses/forward_analysis/visitors/graph.py +242 -0
- angr/analyses/forward_analysis/visitors/loop.py +29 -0
- angr/analyses/forward_analysis/visitors/single_node_graph.py +38 -0
- angr/analyses/identifier/__init__.py +5 -0
- angr/analyses/identifier/custom_callable.py +137 -0
- angr/analyses/identifier/errors.py +10 -0
- angr/analyses/identifier/func.py +60 -0
- angr/analyses/identifier/functions/__init__.py +37 -0
- angr/analyses/identifier/functions/atoi.py +73 -0
- angr/analyses/identifier/functions/based_atoi.py +125 -0
- angr/analyses/identifier/functions/fdprintf.py +123 -0
- angr/analyses/identifier/functions/free.py +64 -0
- angr/analyses/identifier/functions/int2str.py +287 -0
- angr/analyses/identifier/functions/malloc.py +111 -0
- angr/analyses/identifier/functions/memcmp.py +67 -0
- angr/analyses/identifier/functions/memcpy.py +89 -0
- angr/analyses/identifier/functions/memset.py +43 -0
- angr/analyses/identifier/functions/printf.py +123 -0
- angr/analyses/identifier/functions/recv_until.py +312 -0
- angr/analyses/identifier/functions/skip_calloc.py +73 -0
- angr/analyses/identifier/functions/skip_realloc.py +97 -0
- angr/analyses/identifier/functions/skip_recv_n.py +105 -0
- angr/analyses/identifier/functions/snprintf.py +112 -0
- angr/analyses/identifier/functions/sprintf.py +116 -0
- angr/analyses/identifier/functions/strcasecmp.py +33 -0
- angr/analyses/identifier/functions/strcmp.py +113 -0
- angr/analyses/identifier/functions/strcpy.py +43 -0
- angr/analyses/identifier/functions/strlen.py +27 -0
- angr/analyses/identifier/functions/strncmp.py +104 -0
- angr/analyses/identifier/functions/strncpy.py +65 -0
- angr/analyses/identifier/functions/strtol.py +89 -0
- angr/analyses/identifier/identify.py +825 -0
- angr/analyses/identifier/runner.py +360 -0
- angr/analyses/init_finder.py +289 -0
- angr/analyses/loop_analysis.py +349 -0
- angr/analyses/loopfinder.py +171 -0
- angr/analyses/patchfinder.py +137 -0
- angr/analyses/pathfinder.py +282 -0
- angr/analyses/propagator/__init__.py +5 -0
- angr/analyses/propagator/engine_base.py +62 -0
- angr/analyses/propagator/engine_vex.py +297 -0
- angr/analyses/propagator/propagator.py +361 -0
- angr/analyses/propagator/top_checker_mixin.py +218 -0
- angr/analyses/propagator/values.py +117 -0
- angr/analyses/propagator/vex_vars.py +68 -0
- angr/analyses/proximity_graph.py +444 -0
- angr/analyses/reaching_definitions/__init__.py +67 -0
- angr/analyses/reaching_definitions/call_trace.py +73 -0
- angr/analyses/reaching_definitions/dep_graph.py +433 -0
- angr/analyses/reaching_definitions/engine_ail.py +1130 -0
- angr/analyses/reaching_definitions/engine_vex.py +1127 -0
- angr/analyses/reaching_definitions/external_codeloc.py +0 -0
- angr/analyses/reaching_definitions/function_handler.py +638 -0
- angr/analyses/reaching_definitions/function_handler_library/__init__.py +12 -0
- angr/analyses/reaching_definitions/function_handler_library/stdio.py +269 -0
- angr/analyses/reaching_definitions/function_handler_library/stdlib.py +195 -0
- angr/analyses/reaching_definitions/function_handler_library/string.py +158 -0
- angr/analyses/reaching_definitions/function_handler_library/unistd.py +51 -0
- angr/analyses/reaching_definitions/heap_allocator.py +70 -0
- angr/analyses/reaching_definitions/rd_initializer.py +237 -0
- angr/analyses/reaching_definitions/rd_state.py +579 -0
- angr/analyses/reaching_definitions/reaching_definitions.py +581 -0
- angr/analyses/reaching_definitions/subject.py +65 -0
- angr/analyses/reassembler.py +2900 -0
- angr/analyses/s_liveness.py +203 -0
- angr/analyses/s_propagator.py +542 -0
- angr/analyses/s_reaching_definitions/__init__.py +12 -0
- angr/analyses/s_reaching_definitions/s_rda_model.py +136 -0
- angr/analyses/s_reaching_definitions/s_rda_view.py +316 -0
- angr/analyses/s_reaching_definitions/s_reaching_definitions.py +177 -0
- angr/analyses/smc.py +161 -0
- angr/analyses/soot_class_hierarchy.py +273 -0
- angr/analyses/stack_pointer_tracker.py +953 -0
- angr/analyses/static_hooker.py +53 -0
- angr/analyses/typehoon/__init__.py +5 -0
- angr/analyses/typehoon/dfa.py +118 -0
- angr/analyses/typehoon/lifter.py +122 -0
- angr/analyses/typehoon/simple_solver.py +1666 -0
- angr/analyses/typehoon/translator.py +279 -0
- angr/analyses/typehoon/typeconsts.py +338 -0
- angr/analyses/typehoon/typehoon.py +319 -0
- angr/analyses/typehoon/typevars.py +622 -0
- angr/analyses/typehoon/variance.py +11 -0
- angr/analyses/unpacker/__init__.py +6 -0
- angr/analyses/unpacker/obfuscation_detector.py +103 -0
- angr/analyses/unpacker/packing_detector.py +138 -0
- angr/analyses/variable_recovery/__init__.py +9 -0
- angr/analyses/variable_recovery/annotations.py +58 -0
- angr/analyses/variable_recovery/engine_ail.py +885 -0
- angr/analyses/variable_recovery/engine_base.py +1197 -0
- angr/analyses/variable_recovery/engine_vex.py +593 -0
- angr/analyses/variable_recovery/irsb_scanner.py +143 -0
- angr/analyses/variable_recovery/variable_recovery.py +574 -0
- angr/analyses/variable_recovery/variable_recovery_base.py +489 -0
- angr/analyses/variable_recovery/variable_recovery_fast.py +661 -0
- angr/analyses/veritesting.py +626 -0
- angr/analyses/vfg.py +1898 -0
- angr/analyses/vsa_ddg.py +420 -0
- angr/analyses/vtable.py +92 -0
- angr/analyses/xrefs.py +286 -0
- angr/angrdb/__init__.py +14 -0
- angr/angrdb/db.py +206 -0
- angr/angrdb/models.py +184 -0
- angr/angrdb/serializers/__init__.py +10 -0
- angr/angrdb/serializers/cfg_model.py +41 -0
- angr/angrdb/serializers/comments.py +60 -0
- angr/angrdb/serializers/funcs.py +61 -0
- angr/angrdb/serializers/kb.py +111 -0
- angr/angrdb/serializers/labels.py +59 -0
- angr/angrdb/serializers/loader.py +165 -0
- angr/angrdb/serializers/structured_code.py +125 -0
- angr/angrdb/serializers/variables.py +58 -0
- angr/angrdb/serializers/xrefs.py +48 -0
- angr/annocfg.py +317 -0
- angr/blade.py +431 -0
- angr/block.py +509 -0
- angr/callable.py +168 -0
- angr/calling_conventions.py +2580 -0
- angr/code_location.py +163 -0
- angr/codenode.py +145 -0
- angr/concretization_strategies/__init__.py +32 -0
- angr/concretization_strategies/any.py +17 -0
- angr/concretization_strategies/any_named.py +35 -0
- angr/concretization_strategies/base.py +81 -0
- angr/concretization_strategies/controlled_data.py +58 -0
- angr/concretization_strategies/eval.py +19 -0
- angr/concretization_strategies/logging.py +35 -0
- angr/concretization_strategies/max.py +25 -0
- angr/concretization_strategies/nonzero.py +16 -0
- angr/concretization_strategies/nonzero_range.py +22 -0
- angr/concretization_strategies/norepeats.py +37 -0
- angr/concretization_strategies/norepeats_range.py +37 -0
- angr/concretization_strategies/range.py +19 -0
- angr/concretization_strategies/signed_add.py +31 -0
- angr/concretization_strategies/single.py +15 -0
- angr/concretization_strategies/solutions.py +20 -0
- angr/concretization_strategies/unlimited_range.py +17 -0
- angr/distributed/__init__.py +9 -0
- angr/distributed/server.py +197 -0
- angr/distributed/worker.py +185 -0
- angr/emulator.py +143 -0
- angr/engines/__init__.py +67 -0
- angr/engines/concrete.py +66 -0
- angr/engines/engine.py +29 -0
- angr/engines/failure.py +27 -0
- angr/engines/hook.py +68 -0
- angr/engines/icicle.py +278 -0
- angr/engines/light/__init__.py +23 -0
- angr/engines/light/data.py +681 -0
- angr/engines/light/engine.py +1285 -0
- angr/engines/pcode/__init__.py +9 -0
- angr/engines/pcode/behavior.py +994 -0
- angr/engines/pcode/cc.py +128 -0
- angr/engines/pcode/emulate.py +440 -0
- angr/engines/pcode/engine.py +242 -0
- angr/engines/pcode/lifter.py +1420 -0
- angr/engines/procedure.py +70 -0
- angr/engines/soot/__init__.py +5 -0
- angr/engines/soot/engine.py +410 -0
- angr/engines/soot/exceptions.py +17 -0
- angr/engines/soot/expressions/__init__.py +87 -0
- angr/engines/soot/expressions/arrayref.py +22 -0
- angr/engines/soot/expressions/base.py +21 -0
- angr/engines/soot/expressions/binop.py +28 -0
- angr/engines/soot/expressions/cast.py +22 -0
- angr/engines/soot/expressions/condition.py +35 -0
- angr/engines/soot/expressions/constants.py +47 -0
- angr/engines/soot/expressions/instanceOf.py +15 -0
- angr/engines/soot/expressions/instancefieldref.py +8 -0
- angr/engines/soot/expressions/invoke.py +114 -0
- angr/engines/soot/expressions/length.py +8 -0
- angr/engines/soot/expressions/local.py +8 -0
- angr/engines/soot/expressions/new.py +16 -0
- angr/engines/soot/expressions/newArray.py +54 -0
- angr/engines/soot/expressions/newMultiArray.py +86 -0
- angr/engines/soot/expressions/paramref.py +8 -0
- angr/engines/soot/expressions/phi.py +30 -0
- angr/engines/soot/expressions/staticfieldref.py +8 -0
- angr/engines/soot/expressions/thisref.py +7 -0
- angr/engines/soot/expressions/unsupported.py +7 -0
- angr/engines/soot/field_dispatcher.py +46 -0
- angr/engines/soot/method_dispatcher.py +46 -0
- angr/engines/soot/statements/__init__.py +44 -0
- angr/engines/soot/statements/assign.py +30 -0
- angr/engines/soot/statements/base.py +79 -0
- angr/engines/soot/statements/goto.py +14 -0
- angr/engines/soot/statements/identity.py +15 -0
- angr/engines/soot/statements/if_.py +19 -0
- angr/engines/soot/statements/invoke.py +12 -0
- angr/engines/soot/statements/return_.py +20 -0
- angr/engines/soot/statements/switch.py +41 -0
- angr/engines/soot/statements/throw.py +15 -0
- angr/engines/soot/values/__init__.py +38 -0
- angr/engines/soot/values/arrayref.py +122 -0
- angr/engines/soot/values/base.py +7 -0
- angr/engines/soot/values/constants.py +18 -0
- angr/engines/soot/values/instancefieldref.py +44 -0
- angr/engines/soot/values/local.py +18 -0
- angr/engines/soot/values/paramref.py +18 -0
- angr/engines/soot/values/staticfieldref.py +38 -0
- angr/engines/soot/values/strref.py +38 -0
- angr/engines/soot/values/thisref.py +149 -0
- angr/engines/successors.py +654 -0
- angr/engines/syscall.py +51 -0
- angr/engines/unicorn.py +490 -0
- angr/engines/vex/__init__.py +20 -0
- angr/engines/vex/claripy/__init__.py +5 -0
- angr/engines/vex/claripy/ccall.py +2097 -0
- angr/engines/vex/claripy/datalayer.py +141 -0
- angr/engines/vex/claripy/irop.py +1276 -0
- angr/engines/vex/heavy/__init__.py +16 -0
- angr/engines/vex/heavy/actions.py +231 -0
- angr/engines/vex/heavy/concretizers.py +403 -0
- angr/engines/vex/heavy/dirty.py +466 -0
- angr/engines/vex/heavy/heavy.py +370 -0
- angr/engines/vex/heavy/inspect.py +52 -0
- angr/engines/vex/heavy/resilience.py +85 -0
- angr/engines/vex/heavy/super_fastpath.py +34 -0
- angr/engines/vex/lifter.py +420 -0
- angr/engines/vex/light/__init__.py +11 -0
- angr/engines/vex/light/light.py +551 -0
- angr/engines/vex/light/resilience.py +74 -0
- angr/engines/vex/light/slicing.py +52 -0
- angr/errors.py +609 -0
- angr/exploration_techniques/__init__.py +53 -0
- angr/exploration_techniques/base.py +126 -0
- angr/exploration_techniques/bucketizer.py +94 -0
- angr/exploration_techniques/common.py +56 -0
- angr/exploration_techniques/dfs.py +37 -0
- angr/exploration_techniques/director.py +520 -0
- angr/exploration_techniques/driller_core.py +100 -0
- angr/exploration_techniques/explorer.py +152 -0
- angr/exploration_techniques/lengthlimiter.py +22 -0
- angr/exploration_techniques/local_loop_seer.py +65 -0
- angr/exploration_techniques/loop_seer.py +236 -0
- angr/exploration_techniques/manual_mergepoint.py +82 -0
- angr/exploration_techniques/memory_watcher.py +43 -0
- angr/exploration_techniques/oppologist.py +92 -0
- angr/exploration_techniques/slicecutor.py +118 -0
- angr/exploration_techniques/spiller.py +280 -0
- angr/exploration_techniques/spiller_db.py +27 -0
- angr/exploration_techniques/stochastic.py +56 -0
- angr/exploration_techniques/stub_stasher.py +19 -0
- angr/exploration_techniques/suggestions.py +159 -0
- angr/exploration_techniques/tech_builder.py +49 -0
- angr/exploration_techniques/threading.py +69 -0
- angr/exploration_techniques/timeout.py +34 -0
- angr/exploration_techniques/tracer.py +1098 -0
- angr/exploration_techniques/unique.py +106 -0
- angr/exploration_techniques/veritesting.py +37 -0
- angr/factory.py +404 -0
- angr/flirt/__init__.py +97 -0
- angr/flirt/build_sig.py +305 -0
- angr/graph_utils.py +0 -0
- angr/keyed_region.py +525 -0
- angr/knowledge_base.py +143 -0
- angr/knowledge_plugins/__init__.py +43 -0
- angr/knowledge_plugins/callsite_prototypes.py +53 -0
- angr/knowledge_plugins/cfg/__init__.py +18 -0
- angr/knowledge_plugins/cfg/cfg_manager.py +95 -0
- angr/knowledge_plugins/cfg/cfg_model.py +1045 -0
- angr/knowledge_plugins/cfg/cfg_node.py +536 -0
- angr/knowledge_plugins/cfg/indirect_jump.py +65 -0
- angr/knowledge_plugins/cfg/memory_data.py +156 -0
- angr/knowledge_plugins/comments.py +16 -0
- angr/knowledge_plugins/custom_strings.py +38 -0
- angr/knowledge_plugins/data.py +22 -0
- angr/knowledge_plugins/debug_variables.py +216 -0
- angr/knowledge_plugins/functions/__init__.py +9 -0
- angr/knowledge_plugins/functions/function.py +1780 -0
- angr/knowledge_plugins/functions/function_manager.py +588 -0
- angr/knowledge_plugins/functions/function_parser.py +299 -0
- angr/knowledge_plugins/functions/soot_function.py +128 -0
- angr/knowledge_plugins/indirect_jumps.py +35 -0
- angr/knowledge_plugins/key_definitions/__init__.py +17 -0
- angr/knowledge_plugins/key_definitions/atoms.py +374 -0
- angr/knowledge_plugins/key_definitions/constants.py +29 -0
- angr/knowledge_plugins/key_definitions/definition.py +214 -0
- angr/knowledge_plugins/key_definitions/environment.py +96 -0
- angr/knowledge_plugins/key_definitions/heap_address.py +33 -0
- angr/knowledge_plugins/key_definitions/key_definition_manager.py +82 -0
- angr/knowledge_plugins/key_definitions/live_definitions.py +1010 -0
- angr/knowledge_plugins/key_definitions/liveness.py +165 -0
- angr/knowledge_plugins/key_definitions/rd_model.py +171 -0
- angr/knowledge_plugins/key_definitions/tag.py +78 -0
- angr/knowledge_plugins/key_definitions/undefined.py +70 -0
- angr/knowledge_plugins/key_definitions/unknown_size.py +86 -0
- angr/knowledge_plugins/key_definitions/uses.py +178 -0
- angr/knowledge_plugins/labels.py +110 -0
- angr/knowledge_plugins/obfuscations.py +37 -0
- angr/knowledge_plugins/patches.py +126 -0
- angr/knowledge_plugins/plugin.py +24 -0
- angr/knowledge_plugins/propagations/__init__.py +10 -0
- angr/knowledge_plugins/propagations/prop_value.py +191 -0
- angr/knowledge_plugins/propagations/propagation_manager.py +60 -0
- angr/knowledge_plugins/propagations/propagation_model.py +80 -0
- angr/knowledge_plugins/propagations/states.py +552 -0
- angr/knowledge_plugins/structured_code.py +63 -0
- angr/knowledge_plugins/types.py +88 -0
- angr/knowledge_plugins/variables/__init__.py +8 -0
- angr/knowledge_plugins/variables/variable_access.py +113 -0
- angr/knowledge_plugins/variables/variable_manager.py +1380 -0
- angr/knowledge_plugins/xrefs/__init__.py +12 -0
- angr/knowledge_plugins/xrefs/xref.py +150 -0
- angr/knowledge_plugins/xrefs/xref_manager.py +127 -0
- angr/knowledge_plugins/xrefs/xref_types.py +16 -0
- angr/misc/__init__.py +19 -0
- angr/misc/ansi.py +47 -0
- angr/misc/autoimport.py +90 -0
- angr/misc/bug_report.py +117 -0
- angr/misc/hookset.py +106 -0
- angr/misc/loggers.py +130 -0
- angr/misc/picklable_lock.py +46 -0
- angr/misc/plugins.py +289 -0
- angr/misc/telemetry.py +54 -0
- angr/misc/testing.py +24 -0
- angr/misc/ux.py +31 -0
- angr/procedures/__init__.py +12 -0
- angr/procedures/advapi32/__init__.py +0 -0
- angr/procedures/cgc/__init__.py +3 -0
- angr/procedures/cgc/_terminate.py +11 -0
- angr/procedures/cgc/allocate.py +75 -0
- angr/procedures/cgc/deallocate.py +67 -0
- angr/procedures/cgc/fdwait.py +65 -0
- angr/procedures/cgc/random.py +67 -0
- angr/procedures/cgc/receive.py +93 -0
- angr/procedures/cgc/transmit.py +65 -0
- angr/procedures/definitions/__init__.py +779 -0
- angr/procedures/definitions/cgc.py +20 -0
- angr/procedures/definitions/glibc.py +8372 -0
- angr/procedures/definitions/gnulib.py +32 -0
- angr/procedures/definitions/libstdcpp.py +21 -0
- angr/procedures/definitions/linux_kernel.py +6171 -0
- angr/procedures/definitions/linux_loader.py +7 -0
- angr/procedures/definitions/msvcr.py +16 -0
- angr/procedures/definitions/parse_syscalls_from_local_system.py +50 -0
- angr/procedures/definitions/parse_win32json.py +2553 -0
- angr/procedures/definitions/types_stl.py +22 -0
- angr/procedures/definitions/types_win32.py +34482 -0
- angr/procedures/definitions/wdk_api-ms-win-dx-d3dkmt-l1-1-4.py +30 -0
- angr/procedures/definitions/wdk_api-ms-win-dx-d3dkmt-l1-1-6.py +26 -0
- angr/procedures/definitions/wdk_clfs.py +140 -0
- angr/procedures/definitions/wdk_fltmgr.py +556 -0
- angr/procedures/definitions/wdk_fwpkclnt.py +30 -0
- angr/procedures/definitions/wdk_fwpuclnt.py +316 -0
- angr/procedures/definitions/wdk_gdi32.py +366 -0
- angr/procedures/definitions/wdk_hal.py +78 -0
- angr/procedures/definitions/wdk_ksecdd.py +62 -0
- angr/procedures/definitions/wdk_ndis.py +238 -0
- angr/procedures/definitions/wdk_ntoskrnl.py +3451 -0
- angr/procedures/definitions/wdk_offreg.py +72 -0
- angr/procedures/definitions/wdk_pshed.py +36 -0
- angr/procedures/definitions/wdk_secur32.py +40 -0
- angr/procedures/definitions/wdk_vhfum.py +34 -0
- angr/procedures/definitions/win32_aclui.py +30 -0
- angr/procedures/definitions/win32_activeds.py +68 -0
- angr/procedures/definitions/win32_advapi32.py +1684 -0
- angr/procedures/definitions/win32_advpack.py +124 -0
- angr/procedures/definitions/win32_amsi.py +38 -0
- angr/procedures/definitions/win32_api-ms-win-appmodel-runtime-l1-1-1.py +44 -0
- angr/procedures/definitions/win32_api-ms-win-appmodel-runtime-l1-1-3.py +34 -0
- angr/procedures/definitions/win32_api-ms-win-appmodel-runtime-l1-1-6.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-apiquery-l2-1-0.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-backgroundtask-l1-1-0.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-comm-l1-1-1.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-comm-l1-1-2.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-enclave-l1-1-1.py +30 -0
- angr/procedures/definitions/win32_api-ms-win-core-errorhandling-l1-1-3.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-featurestaging-l1-1-0.py +34 -0
- angr/procedures/definitions/win32_api-ms-win-core-featurestaging-l1-1-1.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-file-fromapp-l1-1-0.py +46 -0
- angr/procedures/definitions/win32_api-ms-win-core-handle-l1-1-0.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-ioring-l1-1-0.py +48 -0
- angr/procedures/definitions/win32_api-ms-win-core-marshal-l1-1-0.py +32 -0
- angr/procedures/definitions/win32_api-ms-win-core-memory-l1-1-3.py +32 -0
- angr/procedures/definitions/win32_api-ms-win-core-memory-l1-1-4.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-memory-l1-1-5.py +30 -0
- angr/procedures/definitions/win32_api-ms-win-core-memory-l1-1-6.py +32 -0
- angr/procedures/definitions/win32_api-ms-win-core-memory-l1-1-7.py +28 -0
- angr/procedures/definitions/win32_api-ms-win-core-memory-l1-1-8.py +30 -0
- angr/procedures/definitions/win32_api-ms-win-core-path-l1-1-0.py +68 -0
- angr/procedures/definitions/win32_api-ms-win-core-psm-appnotify-l1-1-0.py +28 -0
- angr/procedures/definitions/win32_api-ms-win-core-psm-appnotify-l1-1-1.py +28 -0
- angr/procedures/definitions/win32_api-ms-win-core-realtime-l1-1-1.py +30 -0
- angr/procedures/definitions/win32_api-ms-win-core-realtime-l1-1-2.py +30 -0
- angr/procedures/definitions/win32_api-ms-win-core-slapi-l1-1-0.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-state-helpers-l1-1-0.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-synch-l1-2-0.py +30 -0
- angr/procedures/definitions/win32_api-ms-win-core-sysinfo-l1-2-0.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-sysinfo-l1-2-3.py +28 -0
- angr/procedures/definitions/win32_api-ms-win-core-sysinfo-l1-2-4.py +28 -0
- angr/procedures/definitions/win32_api-ms-win-core-sysinfo-l1-2-6.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-core-util-l1-1-1.py +28 -0
- angr/procedures/definitions/win32_api-ms-win-core-winrt-error-l1-1-0.py +44 -0
- angr/procedures/definitions/win32_api-ms-win-core-winrt-error-l1-1-1.py +38 -0
- angr/procedures/definitions/win32_api-ms-win-core-winrt-l1-1-0.py +40 -0
- angr/procedures/definitions/win32_api-ms-win-core-winrt-registration-l1-1-0.py +24 -0
- angr/procedures/definitions/win32_api-ms-win-core-winrt-robuffer-l1-1-0.py +24 -0
- angr/procedures/definitions/win32_api-ms-win-core-winrt-roparameterizediid-l1-1-0.py +28 -0
- angr/procedures/definitions/win32_api-ms-win-core-winrt-string-l1-1-0.py +76 -0
- angr/procedures/definitions/win32_api-ms-win-core-winrt-string-l1-1-1.py +24 -0
- angr/procedures/definitions/win32_api-ms-win-core-wow64-l1-1-1.py +30 -0
- angr/procedures/definitions/win32_api-ms-win-devices-query-l1-1-0.py +42 -0
- angr/procedures/definitions/win32_api-ms-win-devices-query-l1-1-1.py +34 -0
- angr/procedures/definitions/win32_api-ms-win-dx-d3dkmt-l1-1-0.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-gaming-deviceinformation-l1-1-0.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-gaming-expandedresources-l1-1-0.py +30 -0
- angr/procedures/definitions/win32_api-ms-win-gaming-tcui-l1-1-0.py +38 -0
- angr/procedures/definitions/win32_api-ms-win-gaming-tcui-l1-1-1.py +28 -0
- angr/procedures/definitions/win32_api-ms-win-gaming-tcui-l1-1-2.py +38 -0
- angr/procedures/definitions/win32_api-ms-win-gaming-tcui-l1-1-3.py +28 -0
- angr/procedures/definitions/win32_api-ms-win-gaming-tcui-l1-1-4.py +40 -0
- angr/procedures/definitions/win32_api-ms-win-mm-misc-l1-1-1.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-net-isolation-l1-1-0.py +40 -0
- angr/procedures/definitions/win32_api-ms-win-security-base-l1-2-2.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-security-isolatedcontainer-l1-1-0.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-security-isolatedcontainer-l1-1-1.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-service-core-l1-1-3.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-service-core-l1-1-4.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-service-core-l1-1-5.py +28 -0
- angr/procedures/definitions/win32_api-ms-win-shcore-scaling-l1-1-0.py +30 -0
- angr/procedures/definitions/win32_api-ms-win-shcore-scaling-l1-1-1.py +36 -0
- angr/procedures/definitions/win32_api-ms-win-shcore-scaling-l1-1-2.py +26 -0
- angr/procedures/definitions/win32_api-ms-win-shcore-stream-winrt-l1-1-0.py +28 -0
- angr/procedures/definitions/win32_api-ms-win-wsl-api-l1-1-0.py +38 -0
- angr/procedures/definitions/win32_apphelp.py +26 -0
- angr/procedures/definitions/win32_authz.py +90 -0
- angr/procedures/definitions/win32_avicap32.py +32 -0
- angr/procedures/definitions/win32_avifil32.py +144 -0
- angr/procedures/definitions/win32_avrt.py +52 -0
- angr/procedures/definitions/win32_bcp47mrm.py +28 -0
- angr/procedures/definitions/win32_bcrypt.py +130 -0
- angr/procedures/definitions/win32_bcryptprimitives.py +28 -0
- angr/procedures/definitions/win32_bluetoothapis.py +106 -0
- angr/procedures/definitions/win32_bthprops.py +34 -0
- angr/procedures/definitions/win32_bthprops_cpl.py +36 -0
- angr/procedures/definitions/win32_cabinet.py +68 -0
- angr/procedures/definitions/win32_certadm.py +60 -0
- angr/procedures/definitions/win32_certpoleng.py +40 -0
- angr/procedures/definitions/win32_cfgmgr32.py +502 -0
- angr/procedures/definitions/win32_chakra.py +198 -0
- angr/procedures/definitions/win32_cldapi.py +96 -0
- angr/procedures/definitions/win32_clfsw32.py +142 -0
- angr/procedures/definitions/win32_clusapi.py +584 -0
- angr/procedures/definitions/win32_comctl32.py +254 -0
- angr/procedures/definitions/win32_comdlg32.py +66 -0
- angr/procedures/definitions/win32_compstui.py +32 -0
- angr/procedures/definitions/win32_computecore.py +132 -0
- angr/procedures/definitions/win32_computenetwork.py +110 -0
- angr/procedures/definitions/win32_computestorage.py +48 -0
- angr/procedures/definitions/win32_comsvcs.py +38 -0
- angr/procedures/definitions/win32_coremessaging.py +24 -0
- angr/procedures/definitions/win32_credui.py +62 -0
- angr/procedures/definitions/win32_crypt32.py +482 -0
- angr/procedures/definitions/win32_cryptnet.py +34 -0
- angr/procedures/definitions/win32_cryptui.py +44 -0
- angr/procedures/definitions/win32_cryptxml.py +62 -0
- angr/procedures/definitions/win32_cscapi.py +32 -0
- angr/procedures/definitions/win32_d2d1.py +50 -0
- angr/procedures/definitions/win32_d3d10.py +78 -0
- angr/procedures/definitions/win32_d3d10_1.py +28 -0
- angr/procedures/definitions/win32_d3d11.py +30 -0
- angr/procedures/definitions/win32_d3d12.py +40 -0
- angr/procedures/definitions/win32_d3d9.py +46 -0
- angr/procedures/definitions/win32_d3dcompiler_47.py +76 -0
- angr/procedures/definitions/win32_d3dcsx.py +42 -0
- angr/procedures/definitions/win32_davclnt.py +60 -0
- angr/procedures/definitions/win32_dbgeng.py +32 -0
- angr/procedures/definitions/win32_dbghelp.py +462 -0
- angr/procedures/definitions/win32_dbgmodel.py +26 -0
- angr/procedures/definitions/win32_dciman32.py +64 -0
- angr/procedures/definitions/win32_dcomp.py +48 -0
- angr/procedures/definitions/win32_ddraw.py +38 -0
- angr/procedures/definitions/win32_deviceaccess.py +26 -0
- angr/procedures/definitions/win32_dflayout.py +26 -0
- angr/procedures/definitions/win32_dhcpcsvc.py +54 -0
- angr/procedures/definitions/win32_dhcpcsvc6.py +36 -0
- angr/procedures/definitions/win32_dhcpsapi.py +416 -0
- angr/procedures/definitions/win32_diagnosticdataquery.py +94 -0
- angr/procedures/definitions/win32_dinput8.py +26 -0
- angr/procedures/definitions/win32_directml.py +28 -0
- angr/procedures/definitions/win32_dmprocessxmlfiltered.py +26 -0
- angr/procedures/definitions/win32_dnsapi.py +152 -0
- angr/procedures/definitions/win32_drt.py +56 -0
- angr/procedures/definitions/win32_drtprov.py +42 -0
- angr/procedures/definitions/win32_drttransport.py +28 -0
- angr/procedures/definitions/win32_dsound.py +44 -0
- angr/procedures/definitions/win32_dsparse.py +62 -0
- angr/procedures/definitions/win32_dsprop.py +38 -0
- angr/procedures/definitions/win32_dssec.py +32 -0
- angr/procedures/definitions/win32_dsuiext.py +32 -0
- angr/procedures/definitions/win32_dwmapi.py +86 -0
- angr/procedures/definitions/win32_dwrite.py +26 -0
- angr/procedures/definitions/win32_dxcompiler.py +28 -0
- angr/procedures/definitions/win32_dxcore.py +26 -0
- angr/procedures/definitions/win32_dxgi.py +36 -0
- angr/procedures/definitions/win32_dxva2.py +100 -0
- angr/procedures/definitions/win32_eappcfg.py +52 -0
- angr/procedures/definitions/win32_eappprxy.py +60 -0
- angr/procedures/definitions/win32_efswrt.py +28 -0
- angr/procedures/definitions/win32_elscore.py +34 -0
- angr/procedures/definitions/win32_esent.py +482 -0
- angr/procedures/definitions/win32_evr.py +38 -0
- angr/procedures/definitions/win32_faultrep.py +32 -0
- angr/procedures/definitions/win32_fhsvcctl.py +38 -0
- angr/procedures/definitions/win32_firewallapi.py +30 -0
- angr/procedures/definitions/win32_fltlib.py +80 -0
- angr/procedures/definitions/win32_fontsub.py +28 -0
- angr/procedures/definitions/win32_forceinline.py +30 -0
- angr/procedures/definitions/win32_fwpuclnt.py +408 -0
- angr/procedures/definitions/win32_fxsutility.py +28 -0
- angr/procedures/definitions/win32_gdi32.py +886 -0
- angr/procedures/definitions/win32_gdiplus.py +1282 -0
- angr/procedures/definitions/win32_glu32.py +128 -0
- angr/procedures/definitions/win32_gpedit.py +36 -0
- angr/procedures/definitions/win32_hhctrl_ocx.py +28 -0
- angr/procedures/definitions/win32_hid.py +114 -0
- angr/procedures/definitions/win32_hlink.py +80 -0
- angr/procedures/definitions/win32_hrtfapo.py +26 -0
- angr/procedures/definitions/win32_httpapi.py +110 -0
- angr/procedures/definitions/win32_icm32.py +66 -0
- angr/procedures/definitions/win32_icmui.py +28 -0
- angr/procedures/definitions/win32_icu.py +2074 -0
- angr/procedures/definitions/win32_ieframe.py +82 -0
- angr/procedures/definitions/win32_imagehlp.py +76 -0
- angr/procedures/definitions/win32_imgutil.py +42 -0
- angr/procedures/definitions/win32_imm32.py +188 -0
- angr/procedures/definitions/win32_infocardapi.py +58 -0
- angr/procedures/definitions/win32_inkobjcore.py +78 -0
- angr/procedures/definitions/win32_iphlpapi.py +426 -0
- angr/procedures/definitions/win32_iscsidsc.py +182 -0
- angr/procedures/definitions/win32_isolatedwindowsenvironmentutils.py +28 -0
- angr/procedures/definitions/win32_kernel32.py +3185 -0
- angr/procedures/definitions/win32_kernelbase.py +36 -0
- angr/procedures/definitions/win32_keycredmgr.py +32 -0
- angr/procedures/definitions/win32_ksproxy_ax.py +36 -0
- angr/procedures/definitions/win32_ksuser.py +40 -0
- angr/procedures/definitions/win32_ktmw32.py +102 -0
- angr/procedures/definitions/win32_licenseprotection.py +28 -0
- angr/procedures/definitions/win32_loadperf.py +48 -0
- angr/procedures/definitions/win32_magnification.py +62 -0
- angr/procedures/definitions/win32_mapi32.py +156 -0
- angr/procedures/definitions/win32_mdmlocalmanagement.py +30 -0
- angr/procedures/definitions/win32_mdmregistration.py +54 -0
- angr/procedures/definitions/win32_mf.py +148 -0
- angr/procedures/definitions/win32_mfcore.py +28 -0
- angr/procedures/definitions/win32_mfplat.py +314 -0
- angr/procedures/definitions/win32_mfplay.py +26 -0
- angr/procedures/definitions/win32_mfreadwrite.py +34 -0
- angr/procedures/definitions/win32_mfsensorgroup.py +44 -0
- angr/procedures/definitions/win32_mfsrcsnk.py +28 -0
- angr/procedures/definitions/win32_mgmtapi.py +42 -0
- angr/procedures/definitions/win32_mi.py +26 -0
- angr/procedures/definitions/win32_mmdevapi.py +26 -0
- angr/procedures/definitions/win32_mpr.py +118 -0
- angr/procedures/definitions/win32_mprapi.py +248 -0
- angr/procedures/definitions/win32_mqrt.py +92 -0
- angr/procedures/definitions/win32_mrmsupport.py +78 -0
- angr/procedures/definitions/win32_msacm32.py +108 -0
- angr/procedures/definitions/win32_msajapi.py +1118 -0
- angr/procedures/definitions/win32_mscms.py +182 -0
- angr/procedures/definitions/win32_mscoree.py +78 -0
- angr/procedures/definitions/win32_msctfmonitor.py +30 -0
- angr/procedures/definitions/win32_msdelta.py +56 -0
- angr/procedures/definitions/win32_msdmo.py +46 -0
- angr/procedures/definitions/win32_msdrm.py +192 -0
- angr/procedures/definitions/win32_msi.py +552 -0
- angr/procedures/definitions/win32_msimg32.py +30 -0
- angr/procedures/definitions/win32_mspatcha.py +56 -0
- angr/procedures/definitions/win32_mspatchc.py +42 -0
- angr/procedures/definitions/win32_msports.py +38 -0
- angr/procedures/definitions/win32_msrating.py +62 -0
- angr/procedures/definitions/win32_mssign32.py +44 -0
- angr/procedures/definitions/win32_mstask.py +28 -0
- angr/procedures/definitions/win32_msvfw32.py +110 -0
- angr/procedures/definitions/win32_mswsock.py +56 -0
- angr/procedures/definitions/win32_mtxdm.py +26 -0
- angr/procedures/definitions/win32_ncrypt.py +102 -0
- angr/procedures/definitions/win32_ndfapi.py +56 -0
- angr/procedures/definitions/win32_netapi32.py +436 -0
- angr/procedures/definitions/win32_netsh.py +40 -0
- angr/procedures/definitions/win32_netshell.py +28 -0
- angr/procedures/definitions/win32_newdev.py +46 -0
- angr/procedures/definitions/win32_ninput.py +84 -0
- angr/procedures/definitions/win32_normaliz.py +28 -0
- angr/procedures/definitions/win32_ntdll.py +171 -0
- angr/procedures/definitions/win32_ntdllk.py +26 -0
- angr/procedures/definitions/win32_ntdsapi.py +186 -0
- angr/procedures/definitions/win32_ntlanman.py +44 -0
- angr/procedures/definitions/win32_odbc32.py +392 -0
- angr/procedures/definitions/win32_odbcbcp.py +78 -0
- angr/procedures/definitions/win32_ole32.py +658 -0
- angr/procedures/definitions/win32_oleacc.py +58 -0
- angr/procedures/definitions/win32_oleaut32.py +834 -0
- angr/procedures/definitions/win32_oledlg.py +70 -0
- angr/procedures/definitions/win32_ondemandconnroutehelper.py +34 -0
- angr/procedures/definitions/win32_opengl32.py +734 -0
- angr/procedures/definitions/win32_opmxbox.py +30 -0
- angr/procedures/definitions/win32_p2p.py +240 -0
- angr/procedures/definitions/win32_p2pgraph.py +98 -0
- angr/procedures/definitions/win32_pdh.py +220 -0
- angr/procedures/definitions/win32_peerdist.py +80 -0
- angr/procedures/definitions/win32_powrprof.py +192 -0
- angr/procedures/definitions/win32_prntvpt.py +46 -0
- angr/procedures/definitions/win32_projectedfslib.py +62 -0
- angr/procedures/definitions/win32_propsys.py +460 -0
- angr/procedures/definitions/win32_psapi.py +78 -0
- angr/procedures/definitions/win32_quartz.py +28 -0
- angr/procedures/definitions/win32_query.py +32 -0
- angr/procedures/definitions/win32_qwave.py +46 -0
- angr/procedures/definitions/win32_rasapi32.py +192 -0
- angr/procedures/definitions/win32_rasdlg.py +36 -0
- angr/procedures/definitions/win32_resutils.py +264 -0
- angr/procedures/definitions/win32_rometadata.py +24 -0
- angr/procedures/definitions/win32_rpcns4.py +146 -0
- angr/procedures/definitions/win32_rpcproxy.py +32 -0
- angr/procedures/definitions/win32_rpcrt4.py +918 -0
- angr/procedures/definitions/win32_rstrtmgr.py +46 -0
- angr/procedures/definitions/win32_rtm.py +176 -0
- angr/procedures/definitions/win32_rtutils.py +106 -0
- angr/procedures/definitions/win32_rtworkq.py +90 -0
- angr/procedures/definitions/win32_sas.py +26 -0
- angr/procedures/definitions/win32_scarddlg.py +34 -0
- angr/procedures/definitions/win32_schannel.py +42 -0
- angr/procedures/definitions/win32_sechost.py +28 -0
- angr/procedures/definitions/win32_secur32.py +202 -0
- angr/procedures/definitions/win32_sensapi.py +30 -0
- angr/procedures/definitions/win32_sensorsutilsv2.py +104 -0
- angr/procedures/definitions/win32_setupapi.py +692 -0
- angr/procedures/definitions/win32_sfc.py +36 -0
- angr/procedures/definitions/win32_shdocvw.py +30 -0
- angr/procedures/definitions/win32_shell32.py +512 -0
- angr/procedures/definitions/win32_shlwapi.py +744 -0
- angr/procedures/definitions/win32_slc.py +88 -0
- angr/procedures/definitions/win32_slcext.py +32 -0
- angr/procedures/definitions/win32_slwga.py +26 -0
- angr/procedures/definitions/win32_snmpapi.py +76 -0
- angr/procedures/definitions/win32_spoolss.py +76 -0
- angr/procedures/definitions/win32_srclient.py +26 -0
- angr/procedures/definitions/win32_srpapi.py +46 -0
- angr/procedures/definitions/win32_sspicli.py +38 -0
- angr/procedures/definitions/win32_sti.py +26 -0
- angr/procedures/definitions/win32_t2embed.py +52 -0
- angr/procedures/definitions/win32_tapi32.py +522 -0
- angr/procedures/definitions/win32_tbs.py +52 -0
- angr/procedures/definitions/win32_tdh.py +78 -0
- angr/procedures/definitions/win32_tokenbinding.py +44 -0
- angr/procedures/definitions/win32_traffic.py +64 -0
- angr/procedures/definitions/win32_txfw32.py +42 -0
- angr/procedures/definitions/win32_ualapi.py +32 -0
- angr/procedures/definitions/win32_uiautomationcore.py +220 -0
- angr/procedures/definitions/win32_urlmon.py +178 -0
- angr/procedures/definitions/win32_user32.py +1551 -0
- angr/procedures/definitions/win32_userenv.py +112 -0
- angr/procedures/definitions/win32_usp10.py +104 -0
- angr/procedures/definitions/win32_uxtheme.py +178 -0
- angr/procedures/definitions/win32_verifier.py +26 -0
- angr/procedures/definitions/win32_version.py +52 -0
- angr/procedures/definitions/win32_vertdll.py +38 -0
- angr/procedures/definitions/win32_virtdisk.py +82 -0
- angr/procedures/definitions/win32_vmdevicehost.py +50 -0
- angr/procedures/definitions/win32_vmsavedstatedumpprovider.py +110 -0
- angr/procedures/definitions/win32_vssapi.py +26 -0
- angr/procedures/definitions/win32_wcmapi.py +34 -0
- angr/procedures/definitions/win32_wdsbp.py +38 -0
- angr/procedures/definitions/win32_wdsclientapi.py +98 -0
- angr/procedures/definitions/win32_wdsmc.py +36 -0
- angr/procedures/definitions/win32_wdspxe.py +86 -0
- angr/procedures/definitions/win32_wdstptc.py +50 -0
- angr/procedures/definitions/win32_webauthn.py +50 -0
- angr/procedures/definitions/win32_webservices.py +410 -0
- angr/procedures/definitions/win32_websocket.py +50 -0
- angr/procedures/definitions/win32_wecapi.py +54 -0
- angr/procedures/definitions/win32_wer.py +66 -0
- angr/procedures/definitions/win32_wevtapi.py +94 -0
- angr/procedures/definitions/win32_winbio.py +132 -0
- angr/procedures/definitions/win32_windows_ai_machinelearning.py +26 -0
- angr/procedures/definitions/win32_windows_data_pdf.py +24 -0
- angr/procedures/definitions/win32_windows_media_mediacontrol.py +40 -0
- angr/procedures/definitions/win32_windows_networking.py +26 -0
- angr/procedures/definitions/win32_windows_ui_xaml.py +28 -0
- angr/procedures/definitions/win32_windowscodecs.py +42 -0
- angr/procedures/definitions/win32_winfax.py +136 -0
- angr/procedures/definitions/win32_winhttp.py +136 -0
- angr/procedures/definitions/win32_winhvemulation.py +32 -0
- angr/procedures/definitions/win32_winhvplatform.py +156 -0
- angr/procedures/definitions/win32_wininet.py +616 -0
- angr/procedures/definitions/win32_winml.py +26 -0
- angr/procedures/definitions/win32_winmm.py +376 -0
- angr/procedures/definitions/win32_winscard.py +164 -0
- angr/procedures/definitions/win32_winspool.py +364 -0
- angr/procedures/definitions/win32_winspool_drv.py +368 -0
- angr/procedures/definitions/win32_wintrust.py +144 -0
- angr/procedures/definitions/win32_winusb.py +92 -0
- angr/procedures/definitions/win32_wlanapi.py +144 -0
- angr/procedures/definitions/win32_wlanui.py +26 -0
- angr/procedures/definitions/win32_wldap32.py +510 -0
- angr/procedures/definitions/win32_wldp.py +42 -0
- angr/procedures/definitions/win32_wmvcore.py +46 -0
- angr/procedures/definitions/win32_wnvapi.py +28 -0
- angr/procedures/definitions/win32_wofutil.py +46 -0
- angr/procedures/definitions/win32_ws2_32.py +344 -0
- angr/procedures/definitions/win32_wscapi.py +36 -0
- angr/procedures/definitions/win32_wsclient.py +30 -0
- angr/procedures/definitions/win32_wsdapi.py +88 -0
- angr/procedures/definitions/win32_wsmsvc.py +90 -0
- angr/procedures/definitions/win32_wsnmp32.py +122 -0
- angr/procedures/definitions/win32_wtsapi32.py +150 -0
- angr/procedures/definitions/win32_xaudio2_8.py +32 -0
- angr/procedures/definitions/win32_xinput1_4.py +38 -0
- angr/procedures/definitions/win32_xinputuap.py +36 -0
- angr/procedures/definitions/win32_xmllite.py +36 -0
- angr/procedures/definitions/win32_xolehlp.py +32 -0
- angr/procedures/definitions/win32_xpsprint.py +28 -0
- angr/procedures/glibc/__ctype_b_loc.py +21 -0
- angr/procedures/glibc/__ctype_tolower_loc.py +21 -0
- angr/procedures/glibc/__ctype_toupper_loc.py +21 -0
- angr/procedures/glibc/__errno_location.py +7 -0
- angr/procedures/glibc/__init__.py +3 -0
- angr/procedures/glibc/__libc_init.py +37 -0
- angr/procedures/glibc/__libc_start_main.py +301 -0
- angr/procedures/glibc/dynamic_loading.py +20 -0
- angr/procedures/glibc/scanf.py +11 -0
- angr/procedures/glibc/sscanf.py +6 -0
- angr/procedures/gnulib/__init__.py +3 -0
- angr/procedures/gnulib/xalloc_die.py +14 -0
- angr/procedures/gnulib/xstrtol_fatal.py +14 -0
- angr/procedures/java/__init__.py +42 -0
- angr/procedures/java/unconstrained.py +65 -0
- angr/procedures/java_io/__init__.py +0 -0
- angr/procedures/java_io/read.py +12 -0
- angr/procedures/java_io/write.py +17 -0
- angr/procedures/java_jni/__init__.py +482 -0
- angr/procedures/java_jni/array_operations.py +312 -0
- angr/procedures/java_jni/class_and_interface_operations.py +31 -0
- angr/procedures/java_jni/field_access.py +173 -0
- angr/procedures/java_jni/global_and_local_refs.py +57 -0
- angr/procedures/java_jni/method_calls.py +365 -0
- angr/procedures/java_jni/not_implemented.py +26 -0
- angr/procedures/java_jni/object_operations.py +94 -0
- angr/procedures/java_jni/string_operations.py +87 -0
- angr/procedures/java_jni/version_information.py +12 -0
- angr/procedures/java_lang/__init__.py +0 -0
- angr/procedures/java_lang/character.py +30 -0
- angr/procedures/java_lang/double.py +24 -0
- angr/procedures/java_lang/exit.py +13 -0
- angr/procedures/java_lang/getsimplename.py +18 -0
- angr/procedures/java_lang/integer.py +43 -0
- angr/procedures/java_lang/load_library.py +9 -0
- angr/procedures/java_lang/math.py +15 -0
- angr/procedures/java_lang/string.py +78 -0
- angr/procedures/java_lang/stringbuilder.py +44 -0
- angr/procedures/java_lang/system.py +18 -0
- angr/procedures/java_util/__init__.py +0 -0
- angr/procedures/java_util/collection.py +35 -0
- angr/procedures/java_util/iterator.py +46 -0
- angr/procedures/java_util/list.py +99 -0
- angr/procedures/java_util/map.py +131 -0
- angr/procedures/java_util/random.py +14 -0
- angr/procedures/java_util/scanner_nextline.py +23 -0
- angr/procedures/libc/__init__.py +3 -0
- angr/procedures/libc/abort.py +9 -0
- angr/procedures/libc/access.py +13 -0
- angr/procedures/libc/atoi.py +14 -0
- angr/procedures/libc/atol.py +13 -0
- angr/procedures/libc/calloc.py +8 -0
- angr/procedures/libc/closelog.py +10 -0
- angr/procedures/libc/err.py +14 -0
- angr/procedures/libc/error.py +54 -0
- angr/procedures/libc/exit.py +11 -0
- angr/procedures/libc/fclose.py +19 -0
- angr/procedures/libc/feof.py +21 -0
- angr/procedures/libc/fflush.py +16 -0
- angr/procedures/libc/fgetc.py +27 -0
- angr/procedures/libc/fgets.py +68 -0
- angr/procedures/libc/fopen.py +63 -0
- angr/procedures/libc/fprintf.py +25 -0
- angr/procedures/libc/fputc.py +23 -0
- angr/procedures/libc/fputs.py +24 -0
- angr/procedures/libc/fread.py +24 -0
- angr/procedures/libc/free.py +9 -0
- angr/procedures/libc/fscanf.py +20 -0
- angr/procedures/libc/fseek.py +34 -0
- angr/procedures/libc/ftell.py +22 -0
- angr/procedures/libc/fwrite.py +19 -0
- angr/procedures/libc/getchar.py +13 -0
- angr/procedures/libc/getdelim.py +99 -0
- angr/procedures/libc/getegid.py +8 -0
- angr/procedures/libc/geteuid.py +8 -0
- angr/procedures/libc/getgid.py +8 -0
- angr/procedures/libc/gets.py +68 -0
- angr/procedures/libc/getuid.py +8 -0
- angr/procedures/libc/malloc.py +12 -0
- angr/procedures/libc/memcmp.py +69 -0
- angr/procedures/libc/memcpy.py +38 -0
- angr/procedures/libc/memset.py +72 -0
- angr/procedures/libc/openlog.py +10 -0
- angr/procedures/libc/perror.py +13 -0
- angr/procedures/libc/printf.py +34 -0
- angr/procedures/libc/putchar.py +13 -0
- angr/procedures/libc/puts.py +19 -0
- angr/procedures/libc/rand.py +8 -0
- angr/procedures/libc/realloc.py +8 -0
- angr/procedures/libc/rewind.py +12 -0
- angr/procedures/libc/scanf.py +20 -0
- angr/procedures/libc/setbuf.py +9 -0
- angr/procedures/libc/setvbuf.py +7 -0
- angr/procedures/libc/snprintf.py +36 -0
- angr/procedures/libc/sprintf.py +25 -0
- angr/procedures/libc/srand.py +7 -0
- angr/procedures/libc/sscanf.py +13 -0
- angr/procedures/libc/stpcpy.py +18 -0
- angr/procedures/libc/strcat.py +14 -0
- angr/procedures/libc/strchr.py +48 -0
- angr/procedures/libc/strcmp.py +31 -0
- angr/procedures/libc/strcpy.py +13 -0
- angr/procedures/libc/strlen.py +114 -0
- angr/procedures/libc/strncat.py +19 -0
- angr/procedures/libc/strncmp.py +183 -0
- angr/procedures/libc/strncpy.py +22 -0
- angr/procedures/libc/strnlen.py +13 -0
- angr/procedures/libc/strstr.py +101 -0
- angr/procedures/libc/strtol.py +261 -0
- angr/procedures/libc/strtoul.py +9 -0
- angr/procedures/libc/system.py +13 -0
- angr/procedures/libc/time.py +9 -0
- angr/procedures/libc/tmpnam.py +20 -0
- angr/procedures/libc/tolower.py +10 -0
- angr/procedures/libc/toupper.py +10 -0
- angr/procedures/libc/ungetc.py +20 -0
- angr/procedures/libc/vsnprintf.py +17 -0
- angr/procedures/libc/wchar.py +16 -0
- angr/procedures/libstdcpp/__init__.py +0 -0
- angr/procedures/libstdcpp/_unwind_resume.py +11 -0
- angr/procedures/libstdcpp/std____throw_bad_alloc.py +13 -0
- angr/procedures/libstdcpp/std____throw_bad_cast.py +13 -0
- angr/procedures/libstdcpp/std____throw_length_error.py +13 -0
- angr/procedures/libstdcpp/std____throw_logic_error.py +13 -0
- angr/procedures/libstdcpp/std__terminate.py +13 -0
- angr/procedures/linux_kernel/__init__.py +3 -0
- angr/procedures/linux_kernel/access.py +18 -0
- angr/procedures/linux_kernel/arch_prctl.py +34 -0
- angr/procedures/linux_kernel/arm_user_helpers.py +59 -0
- angr/procedures/linux_kernel/brk.py +18 -0
- angr/procedures/linux_kernel/cwd.py +28 -0
- angr/procedures/linux_kernel/fstat.py +138 -0
- angr/procedures/linux_kernel/fstat64.py +170 -0
- angr/procedures/linux_kernel/futex.py +17 -0
- angr/procedures/linux_kernel/getegid.py +17 -0
- angr/procedures/linux_kernel/geteuid.py +17 -0
- angr/procedures/linux_kernel/getgid.py +17 -0
- angr/procedures/linux_kernel/getpid.py +14 -0
- angr/procedures/linux_kernel/getrlimit.py +24 -0
- angr/procedures/linux_kernel/gettid.py +9 -0
- angr/procedures/linux_kernel/getuid.py +17 -0
- angr/procedures/linux_kernel/iovec.py +47 -0
- angr/procedures/linux_kernel/lseek.py +42 -0
- angr/procedures/linux_kernel/mmap.py +16 -0
- angr/procedures/linux_kernel/mprotect.py +42 -0
- angr/procedures/linux_kernel/munmap.py +8 -0
- angr/procedures/linux_kernel/openat.py +26 -0
- angr/procedures/linux_kernel/set_tid_address.py +8 -0
- angr/procedures/linux_kernel/sigaction.py +19 -0
- angr/procedures/linux_kernel/sigprocmask.py +23 -0
- angr/procedures/linux_kernel/stat.py +23 -0
- angr/procedures/linux_kernel/sysinfo.py +59 -0
- angr/procedures/linux_kernel/tgkill.py +10 -0
- angr/procedures/linux_kernel/time.py +34 -0
- angr/procedures/linux_kernel/uid.py +30 -0
- angr/procedures/linux_kernel/uname.py +29 -0
- angr/procedures/linux_kernel/unlink.py +22 -0
- angr/procedures/linux_kernel/vsyscall.py +16 -0
- angr/procedures/linux_loader/__init__.py +3 -0
- angr/procedures/linux_loader/_dl_initial_error_catch_tsd.py +7 -0
- angr/procedures/linux_loader/_dl_rtld_lock.py +15 -0
- angr/procedures/linux_loader/sim_loader.py +54 -0
- angr/procedures/linux_loader/tls.py +40 -0
- angr/procedures/msvcr/__getmainargs.py +16 -0
- angr/procedures/msvcr/__init__.py +4 -0
- angr/procedures/msvcr/_initterm.py +38 -0
- angr/procedures/msvcr/fmode.py +31 -0
- angr/procedures/ntdll/__init__.py +0 -0
- angr/procedures/ntdll/exceptions.py +60 -0
- angr/procedures/posix/__init__.py +3 -0
- angr/procedures/posix/accept.py +29 -0
- angr/procedures/posix/bind.py +13 -0
- angr/procedures/posix/bzero.py +9 -0
- angr/procedures/posix/chroot.py +27 -0
- angr/procedures/posix/close.py +9 -0
- angr/procedures/posix/closedir.py +7 -0
- angr/procedures/posix/dup.py +56 -0
- angr/procedures/posix/fcntl.py +10 -0
- angr/procedures/posix/fdopen.py +76 -0
- angr/procedures/posix/fileno.py +18 -0
- angr/procedures/posix/fork.py +13 -0
- angr/procedures/posix/getenv.py +35 -0
- angr/procedures/posix/gethostbyname.py +43 -0
- angr/procedures/posix/getpass.py +19 -0
- angr/procedures/posix/getsockopt.py +11 -0
- angr/procedures/posix/htonl.py +11 -0
- angr/procedures/posix/htons.py +11 -0
- angr/procedures/posix/inet_ntoa.py +59 -0
- angr/procedures/posix/listen.py +13 -0
- angr/procedures/posix/mmap.py +144 -0
- angr/procedures/posix/open.py +18 -0
- angr/procedures/posix/opendir.py +10 -0
- angr/procedures/posix/poll.py +55 -0
- angr/procedures/posix/pread64.py +46 -0
- angr/procedures/posix/pthread.py +87 -0
- angr/procedures/posix/pwrite64.py +46 -0
- angr/procedures/posix/read.py +13 -0
- angr/procedures/posix/readdir.py +62 -0
- angr/procedures/posix/recv.py +13 -0
- angr/procedures/posix/recvfrom.py +13 -0
- angr/procedures/posix/select.py +48 -0
- angr/procedures/posix/send.py +23 -0
- angr/procedures/posix/setsockopt.py +9 -0
- angr/procedures/posix/sigaction.py +23 -0
- angr/procedures/posix/sim_time.py +48 -0
- angr/procedures/posix/sleep.py +8 -0
- angr/procedures/posix/socket.py +18 -0
- angr/procedures/posix/strcasecmp.py +26 -0
- angr/procedures/posix/strdup.py +18 -0
- angr/procedures/posix/strtok_r.py +64 -0
- angr/procedures/posix/syslog.py +15 -0
- angr/procedures/posix/tz.py +9 -0
- angr/procedures/posix/unlink.py +11 -0
- angr/procedures/posix/usleep.py +8 -0
- angr/procedures/posix/write.py +13 -0
- angr/procedures/procedure_dict.py +50 -0
- angr/procedures/stubs/CallReturn.py +13 -0
- angr/procedures/stubs/NoReturnUnconstrained.py +13 -0
- angr/procedures/stubs/Nop.py +7 -0
- angr/procedures/stubs/PathTerminator.py +9 -0
- angr/procedures/stubs/Redirect.py +18 -0
- angr/procedures/stubs/ReturnChar.py +11 -0
- angr/procedures/stubs/ReturnUnconstrained.py +24 -0
- angr/procedures/stubs/UnresolvableCallTarget.py +9 -0
- angr/procedures/stubs/UnresolvableJumpTarget.py +9 -0
- angr/procedures/stubs/UserHook.py +18 -0
- angr/procedures/stubs/__init__.py +3 -0
- angr/procedures/stubs/b64_decode.py +15 -0
- angr/procedures/stubs/caller.py +14 -0
- angr/procedures/stubs/crazy_scanf.py +20 -0
- angr/procedures/stubs/format_parser.py +669 -0
- angr/procedures/stubs/syscall_stub.py +24 -0
- angr/procedures/testing/__init__.py +3 -0
- angr/procedures/testing/manyargs.py +9 -0
- angr/procedures/testing/retreg.py +8 -0
- angr/procedures/tracer/__init__.py +4 -0
- angr/procedures/tracer/random.py +9 -0
- angr/procedures/tracer/receive.py +23 -0
- angr/procedures/tracer/transmit.py +26 -0
- angr/procedures/uclibc/__init__.py +3 -0
- angr/procedures/uclibc/__uClibc_main.py +10 -0
- angr/procedures/win32/EncodePointer.py +7 -0
- angr/procedures/win32/ExitProcess.py +9 -0
- angr/procedures/win32/GetCommandLine.py +12 -0
- angr/procedures/win32/GetCurrentProcessId.py +7 -0
- angr/procedures/win32/GetCurrentThreadId.py +7 -0
- angr/procedures/win32/GetLastInputInfo.py +40 -0
- angr/procedures/win32/GetModuleHandle.py +29 -0
- angr/procedures/win32/GetProcessAffinityMask.py +37 -0
- angr/procedures/win32/InterlockedExchange.py +15 -0
- angr/procedures/win32/IsProcessorFeaturePresent.py +7 -0
- angr/procedures/win32/VirtualAlloc.py +114 -0
- angr/procedures/win32/VirtualProtect.py +60 -0
- angr/procedures/win32/__init__.py +3 -0
- angr/procedures/win32/critical_section.py +12 -0
- angr/procedures/win32/dynamic_loading.py +104 -0
- angr/procedures/win32/file_handles.py +47 -0
- angr/procedures/win32/gethostbyname.py +12 -0
- angr/procedures/win32/heap.py +45 -0
- angr/procedures/win32/is_bad_ptr.py +26 -0
- angr/procedures/win32/local_storage.py +88 -0
- angr/procedures/win32/mutex.py +11 -0
- angr/procedures/win32/sim_time.py +135 -0
- angr/procedures/win32/system_paths.py +35 -0
- angr/procedures/win32_kernel/ExAllocatePool.py +13 -0
- angr/procedures/win32_kernel/ExFreePoolWithTag.py +8 -0
- angr/procedures/win32_kernel/__fastfail.py +15 -0
- angr/procedures/win32_kernel/__init__.py +3 -0
- angr/procedures/win_user32/__init__.py +0 -0
- angr/procedures/win_user32/chars.py +15 -0
- angr/procedures/win_user32/keyboard.py +14 -0
- angr/procedures/win_user32/messagebox.py +49 -0
- angr/project.py +847 -0
- angr/protos/__init__.py +19 -0
- angr/protos/cfg_pb2.py +31 -0
- angr/protos/function_pb2.py +27 -0
- angr/protos/primitives_pb2.py +52 -0
- angr/protos/variables_pb2.py +44 -0
- angr/protos/xrefs_pb2.py +25 -0
- angr/py.typed +1 -0
- angr/rustylib.abi3.so +0 -0
- angr/serializable.py +66 -0
- angr/sim_manager.py +971 -0
- angr/sim_options.py +438 -0
- angr/sim_procedure.py +606 -0
- angr/sim_state.py +901 -0
- angr/sim_state_options.py +403 -0
- angr/sim_type.py +3702 -0
- angr/sim_variable.py +465 -0
- angr/simos/__init__.py +47 -0
- angr/simos/cgc.py +153 -0
- angr/simos/javavm.py +458 -0
- angr/simos/linux.py +509 -0
- angr/simos/simos.py +444 -0
- angr/simos/snimmuc_nxp.py +149 -0
- angr/simos/userland.py +163 -0
- angr/simos/windows.py +601 -0
- angr/simos/xbox.py +32 -0
- angr/slicer.py +352 -0
- angr/state_hierarchy.py +262 -0
- angr/state_plugins/__init__.py +84 -0
- angr/state_plugins/callstack.py +398 -0
- angr/state_plugins/cgc.py +155 -0
- angr/state_plugins/debug_variables.py +192 -0
- angr/state_plugins/filesystem.py +463 -0
- angr/state_plugins/gdb.py +148 -0
- angr/state_plugins/globals.py +65 -0
- angr/state_plugins/heap/__init__.py +15 -0
- angr/state_plugins/heap/heap_base.py +128 -0
- angr/state_plugins/heap/heap_brk.py +136 -0
- angr/state_plugins/heap/heap_freelist.py +213 -0
- angr/state_plugins/heap/heap_libc.py +46 -0
- angr/state_plugins/heap/heap_ptmalloc.py +620 -0
- angr/state_plugins/heap/utils.py +22 -0
- angr/state_plugins/history.py +564 -0
- angr/state_plugins/inspect.py +375 -0
- angr/state_plugins/javavm_classloader.py +134 -0
- angr/state_plugins/jni_references.py +95 -0
- angr/state_plugins/libc.py +1263 -0
- angr/state_plugins/light_registers.py +168 -0
- angr/state_plugins/log.py +84 -0
- angr/state_plugins/loop_data.py +92 -0
- angr/state_plugins/plugin.py +170 -0
- angr/state_plugins/posix.py +703 -0
- angr/state_plugins/preconstrainer.py +196 -0
- angr/state_plugins/scratch.py +173 -0
- angr/state_plugins/sim_action.py +326 -0
- angr/state_plugins/sim_action_object.py +271 -0
- angr/state_plugins/sim_event.py +59 -0
- angr/state_plugins/solver.py +1127 -0
- angr/state_plugins/symbolizer.py +291 -0
- angr/state_plugins/trace_additions.py +738 -0
- angr/state_plugins/uc_manager.py +94 -0
- angr/state_plugins/unicorn_engine.py +1886 -0
- angr/state_plugins/view.py +340 -0
- angr/storage/__init__.py +15 -0
- angr/storage/file.py +1210 -0
- angr/storage/memory_mixins/__init__.py +317 -0
- angr/storage/memory_mixins/actions_mixin.py +72 -0
- angr/storage/memory_mixins/address_concretization_mixin.py +384 -0
- angr/storage/memory_mixins/bvv_conversion_mixin.py +73 -0
- angr/storage/memory_mixins/clouseau_mixin.py +137 -0
- angr/storage/memory_mixins/conditional_store_mixin.py +25 -0
- angr/storage/memory_mixins/convenient_mappings_mixin.py +256 -0
- angr/storage/memory_mixins/default_filler_mixin.py +144 -0
- angr/storage/memory_mixins/dirty_addrs_mixin.py +11 -0
- angr/storage/memory_mixins/hex_dumper_mixin.py +82 -0
- angr/storage/memory_mixins/javavm_memory_mixin.py +392 -0
- angr/storage/memory_mixins/keyvalue_memory_mixin.py +42 -0
- angr/storage/memory_mixins/label_merger_mixin.py +31 -0
- angr/storage/memory_mixins/memory_mixin.py +174 -0
- angr/storage/memory_mixins/multi_value_merger_mixin.py +79 -0
- angr/storage/memory_mixins/name_resolution_mixin.py +67 -0
- angr/storage/memory_mixins/paged_memory/__init__.py +0 -0
- angr/storage/memory_mixins/paged_memory/page_backer_mixins.py +266 -0
- angr/storage/memory_mixins/paged_memory/paged_memory_mixin.py +743 -0
- angr/storage/memory_mixins/paged_memory/paged_memory_multivalue_mixin.py +65 -0
- angr/storage/memory_mixins/paged_memory/pages/__init__.py +26 -0
- angr/storage/memory_mixins/paged_memory/pages/base.py +31 -0
- angr/storage/memory_mixins/paged_memory/pages/cooperation.py +341 -0
- angr/storage/memory_mixins/paged_memory/pages/history_tracking_mixin.py +92 -0
- angr/storage/memory_mixins/paged_memory/pages/ispo_mixin.py +55 -0
- angr/storage/memory_mixins/paged_memory/pages/list_page.py +338 -0
- angr/storage/memory_mixins/paged_memory/pages/multi_values.py +324 -0
- angr/storage/memory_mixins/paged_memory/pages/mv_list_page.py +419 -0
- angr/storage/memory_mixins/paged_memory/pages/permissions_mixin.py +36 -0
- angr/storage/memory_mixins/paged_memory/pages/refcount_mixin.py +52 -0
- angr/storage/memory_mixins/paged_memory/pages/ultra_page.py +503 -0
- angr/storage/memory_mixins/paged_memory/privileged_mixin.py +36 -0
- angr/storage/memory_mixins/paged_memory/stack_allocation_mixin.py +74 -0
- angr/storage/memory_mixins/regioned_memory/__init__.py +17 -0
- angr/storage/memory_mixins/regioned_memory/abstract_address_descriptor.py +36 -0
- angr/storage/memory_mixins/regioned_memory/abstract_merger_mixin.py +31 -0
- angr/storage/memory_mixins/regioned_memory/region_category_mixin.py +9 -0
- angr/storage/memory_mixins/regioned_memory/region_data.py +246 -0
- angr/storage/memory_mixins/regioned_memory/region_meta_mixin.py +241 -0
- angr/storage/memory_mixins/regioned_memory/regioned_address_concretization_mixin.py +119 -0
- angr/storage/memory_mixins/regioned_memory/regioned_memory_mixin.py +441 -0
- angr/storage/memory_mixins/regioned_memory/static_find_mixin.py +69 -0
- angr/storage/memory_mixins/simple_interface_mixin.py +71 -0
- angr/storage/memory_mixins/simplification_mixin.py +15 -0
- angr/storage/memory_mixins/size_resolution_mixin.py +143 -0
- angr/storage/memory_mixins/slotted_memory.py +140 -0
- angr/storage/memory_mixins/smart_find_mixin.py +161 -0
- angr/storage/memory_mixins/symbolic_merger_mixin.py +16 -0
- angr/storage/memory_mixins/top_merger_mixin.py +25 -0
- angr/storage/memory_mixins/underconstrained_mixin.py +67 -0
- angr/storage/memory_mixins/unwrapper_mixin.py +26 -0
- angr/storage/memory_object.py +195 -0
- angr/tablespecs.py +91 -0
- angr/unicornlib.so +0 -0
- angr/utils/__init__.py +46 -0
- angr/utils/ail.py +70 -0
- angr/utils/algo.py +34 -0
- angr/utils/bits.py +46 -0
- angr/utils/constants.py +9 -0
- angr/utils/cowdict.py +63 -0
- angr/utils/cpp.py +17 -0
- angr/utils/doms.py +149 -0
- angr/utils/dynamic_dictlist.py +89 -0
- angr/utils/endness.py +18 -0
- angr/utils/enums_conv.py +97 -0
- angr/utils/env.py +12 -0
- angr/utils/formatting.py +128 -0
- angr/utils/funcid.py +159 -0
- angr/utils/graph.py +933 -0
- angr/utils/lazy_import.py +13 -0
- angr/utils/library.py +212 -0
- angr/utils/loader.py +55 -0
- angr/utils/mp.py +66 -0
- angr/utils/orderedset.py +74 -0
- angr/utils/ssa/__init__.py +457 -0
- angr/utils/ssa/tmp_uses_collector.py +23 -0
- angr/utils/ssa/vvar_uses_collector.py +37 -0
- angr/utils/tagged_interval_map.py +112 -0
- angr/utils/timing.py +74 -0
- angr/utils/types.py +151 -0
- angr/utils/vex.py +11 -0
- angr/vaults.py +367 -0
- angr-9.2.166.dist-info/METADATA +110 -0
- angr-9.2.166.dist-info/RECORD +1409 -0
- angr-9.2.166.dist-info/WHEEL +5 -0
- angr-9.2.166.dist-info/entry_points.txt +2 -0
- angr-9.2.166.dist-info/licenses/LICENSE +27 -0
- angr-9.2.166.dist-info/top_level.txt +1 -0
|
@@ -0,0 +1,3451 @@
|
|
|
1
|
+
# pylint:disable=line-too-long
|
|
2
|
+
from __future__ import annotations
|
|
3
|
+
import logging
|
|
4
|
+
from collections import OrderedDict
|
|
5
|
+
|
|
6
|
+
from angr.sim_type import SimTypeFunction, SimTypeShort, SimTypeInt, SimTypeLong, SimTypeLongLong, SimTypeDouble, SimTypeFloat, SimTypePointer, SimTypeChar, SimStruct, SimTypeArray, SimTypeBottom, SimUnion, SimTypeBool, SimTypeRef
|
|
7
|
+
from angr.calling_conventions import SimCCStdcall, SimCCMicrosoftAMD64
|
|
8
|
+
from angr.procedures import SIM_PROCEDURES as P
|
|
9
|
+
from . import SimLibrary
|
|
10
|
+
|
|
11
|
+
|
|
12
|
+
_l = logging.getLogger(name=__name__)
|
|
13
|
+
|
|
14
|
+
|
|
15
|
+
lib = SimLibrary()
|
|
16
|
+
lib.type_collection_names = ["win32"]
|
|
17
|
+
lib.set_default_cc("X86", SimCCStdcall)
|
|
18
|
+
lib.set_default_cc("AMD64", SimCCMicrosoftAMD64)
|
|
19
|
+
lib.add_all_from_dict(P["win32_kernel"])
|
|
20
|
+
lib.set_library_names("ntoskrnl.exe")
|
|
21
|
+
prototypes = \
|
|
22
|
+
{
|
|
23
|
+
# int 29h
|
|
24
|
+
'__fastfail': SimTypeFunction([SimTypeInt(signed=False, label="Int")], SimTypeBottom(label="void"), arg_names=["code"]),
|
|
25
|
+
#
|
|
26
|
+
'NtQueryObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="OBJECT_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "ObjectInformationClass", "ObjectInformation", "ObjectInformationLength", "ReturnLength"]),
|
|
27
|
+
#
|
|
28
|
+
'NtClose': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle"]),
|
|
29
|
+
#
|
|
30
|
+
'NtCancelIoFileEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoRequestToCancel", "IoStatusBlock"]),
|
|
31
|
+
#
|
|
32
|
+
'NtOpenThreadToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ThreadHandle", "DesiredAccess", "OpenAsSelf", "TokenHandle"]),
|
|
33
|
+
#
|
|
34
|
+
'NtOpenThreadTokenEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ThreadHandle", "DesiredAccess", "OpenAsSelf", "HandleAttributes", "TokenHandle"]),
|
|
35
|
+
#
|
|
36
|
+
'NtOpenProcessToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "DesiredAccess", "TokenHandle"]),
|
|
37
|
+
#
|
|
38
|
+
'NtOpenProcessTokenEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "DesiredAccess", "HandleAttributes", "TokenHandle"]),
|
|
39
|
+
#
|
|
40
|
+
'NtDuplicateToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="TOKEN_TYPE"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ExistingTokenHandle", "DesiredAccess", "ObjectAttributes", "EffectiveOnly", "TokenType", "NewTokenHandle"]),
|
|
41
|
+
#
|
|
42
|
+
'NtFilterToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("TOKEN_GROUPS", SimStruct), offset=0), SimTypePointer(SimTypeRef("TOKEN_PRIVILEGES", SimStruct), offset=0), SimTypePointer(SimTypeRef("TOKEN_GROUPS", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ExistingTokenHandle", "Flags", "SidsToDisable", "PrivilegesToDelete", "RestrictedSids", "NewTokenHandle"]),
|
|
43
|
+
#
|
|
44
|
+
'NtImpersonateAnonymousToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ThreadHandle"]),
|
|
45
|
+
#
|
|
46
|
+
'NtQueryInformationToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TOKEN_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TokenHandle", "TokenInformationClass", "TokenInformation", "TokenInformationLength", "ReturnLength"]),
|
|
47
|
+
#
|
|
48
|
+
'NtSetInformationToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TOKEN_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TokenHandle", "TokenInformationClass", "TokenInformation", "TokenInformationLength"]),
|
|
49
|
+
#
|
|
50
|
+
'NtAdjustPrivilegesToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("TOKEN_PRIVILEGES", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("TOKEN_PRIVILEGES", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TokenHandle", "DisableAllPrivileges", "NewState", "BufferLength", "PreviousState", "ReturnLength"]),
|
|
51
|
+
#
|
|
52
|
+
'NtAdjustGroupsToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("TOKEN_GROUPS", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("TOKEN_GROUPS", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TokenHandle", "ResetToDefault", "NewState", "BufferLength", "PreviousState", "ReturnLength"]),
|
|
53
|
+
#
|
|
54
|
+
'NtPrivilegeCheck': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("PRIVILEGE_SET", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ClientToken", "RequiredPrivileges", "Result"]),
|
|
55
|
+
#
|
|
56
|
+
'NtAccessCheckAndAuditAlarm': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SubsystemName", "HandleId", "ObjectTypeName", "ObjectName", "SecurityDescriptor", "DesiredAccess", "GenericMapping", "ObjectCreation", "GrantedAccess", "AccessStatus", "GenerateOnClose"]),
|
|
57
|
+
#
|
|
58
|
+
'NtAccessCheckByTypeAndAuditAlarm': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="AUDIT_EVENT_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_TYPE_LIST", SimStruct), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SubsystemName", "HandleId", "ObjectTypeName", "ObjectName", "SecurityDescriptor", "PrincipalSelfSid", "DesiredAccess", "AuditType", "Flags", "ObjectTypeList", "ObjectTypeListLength", "GenericMapping", "ObjectCreation", "GrantedAccess", "AccessStatus", "GenerateOnClose"]),
|
|
59
|
+
#
|
|
60
|
+
'NtAccessCheckByTypeResultListAndAuditAlarm': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="AUDIT_EVENT_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_TYPE_LIST", SimStruct), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), label="LPArray", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int32"), label="LPArray", offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SubsystemName", "HandleId", "ObjectTypeName", "ObjectName", "SecurityDescriptor", "PrincipalSelfSid", "DesiredAccess", "AuditType", "Flags", "ObjectTypeList", "ObjectTypeListLength", "GenericMapping", "ObjectCreation", "GrantedAccess", "AccessStatus", "GenerateOnClose"]),
|
|
61
|
+
#
|
|
62
|
+
'NtAccessCheckByTypeResultListAndAuditAlarmByHandle': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="AUDIT_EVENT_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_TYPE_LIST", SimStruct), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), label="LPArray", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int32"), label="LPArray", offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SubsystemName", "HandleId", "ClientToken", "ObjectTypeName", "ObjectName", "SecurityDescriptor", "PrincipalSelfSid", "DesiredAccess", "AuditType", "Flags", "ObjectTypeList", "ObjectTypeListLength", "GenericMapping", "ObjectCreation", "GrantedAccess", "AccessStatus", "GenerateOnClose"]),
|
|
63
|
+
#
|
|
64
|
+
'NtOpenObjectAuditAlarm': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("PRIVILEGE_SET", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SubsystemName", "HandleId", "ObjectTypeName", "ObjectName", "SecurityDescriptor", "ClientToken", "DesiredAccess", "GrantedAccess", "Privileges", "ObjectCreation", "AccessGranted", "GenerateOnClose"]),
|
|
65
|
+
#
|
|
66
|
+
'NtPrivilegeObjectAuditAlarm': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("PRIVILEGE_SET", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["SubsystemName", "HandleId", "ClientToken", "DesiredAccess", "Privileges", "AccessGranted"]),
|
|
67
|
+
#
|
|
68
|
+
'NtCloseObjectAuditAlarm': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["SubsystemName", "HandleId", "GenerateOnClose"]),
|
|
69
|
+
#
|
|
70
|
+
'NtDeleteObjectAuditAlarm': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["SubsystemName", "HandleId", "GenerateOnClose"]),
|
|
71
|
+
#
|
|
72
|
+
'NtPrivilegedServiceAuditAlarm': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("PRIVILEGE_SET", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["SubsystemName", "ServiceName", "ClientToken", "Privileges", "AccessGranted"]),
|
|
73
|
+
#
|
|
74
|
+
'RtlCreateHeap': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("RTL_HEAP_PARAMETERS", SimStruct), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Flags", "HeapBase", "ReserveSize", "CommitSize", "Lock", "Parameters"]),
|
|
75
|
+
#
|
|
76
|
+
'RtlDestroyHeap': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["HeapHandle"]),
|
|
77
|
+
#
|
|
78
|
+
'RtlAllocateHeap': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["HeapHandle", "Flags", "Size"]),
|
|
79
|
+
#
|
|
80
|
+
'RtlFreeHeap': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["HeapHandle", "Flags", "BaseAddress"]),
|
|
81
|
+
#
|
|
82
|
+
'RtlRandom': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Seed"]),
|
|
83
|
+
#
|
|
84
|
+
'RtlRandomEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Seed"]),
|
|
85
|
+
#
|
|
86
|
+
'RtlInitUnicodeStringEx': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationString", "SourceString"]),
|
|
87
|
+
#
|
|
88
|
+
'RtlCreateUnicodeString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0)], SimTypeChar(label="Byte"), arg_names=["DestinationString", "SourceString"]),
|
|
89
|
+
#
|
|
90
|
+
'RtlPrefixString': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["String1", "String2", "CaseInSensitive"]),
|
|
91
|
+
#
|
|
92
|
+
'RtlAppendStringToString': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Destination", "Source"]),
|
|
93
|
+
#
|
|
94
|
+
'RtlOemStringToUnicodeString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationString", "SourceString", "AllocateDestinationString"]),
|
|
95
|
+
#
|
|
96
|
+
'RtlUpcaseUnicodeStringToOemString': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationString", "SourceString", "AllocateDestinationString"]),
|
|
97
|
+
#
|
|
98
|
+
'RtlOemStringToCountedUnicodeString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationString", "SourceString", "AllocateDestinationString"]),
|
|
99
|
+
#
|
|
100
|
+
'RtlUnicodeStringToCountedOemString': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationString", "SourceString", "AllocateDestinationString"]),
|
|
101
|
+
#
|
|
102
|
+
'RtlUpcaseUnicodeStringToCountedOemString': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationString", "SourceString", "AllocateDestinationString"]),
|
|
103
|
+
#
|
|
104
|
+
'RtlValidateUnicodeString': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Flags", "String"]),
|
|
105
|
+
#
|
|
106
|
+
'RtlDuplicateUnicodeString': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Flags", "StringIn", "StringOut"]),
|
|
107
|
+
#
|
|
108
|
+
'RtlDowncaseUnicodeString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationString", "SourceString", "AllocateDestinationString"]),
|
|
109
|
+
#
|
|
110
|
+
'RtlxUnicodeStringToOemSize': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["UnicodeString"]),
|
|
111
|
+
#
|
|
112
|
+
'RtlxOemStringToUnicodeSize': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["OemString"]),
|
|
113
|
+
#
|
|
114
|
+
'RtlMultiByteToUnicodeN': SimTypeFunction([SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["UnicodeString", "MaxBytesInUnicodeString", "BytesInUnicodeString", "MultiByteString", "BytesInMultiByteString"]),
|
|
115
|
+
#
|
|
116
|
+
'RtlMultiByteToUnicodeSize': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["BytesInUnicodeString", "MultiByteString", "BytesInMultiByteString"]),
|
|
117
|
+
#
|
|
118
|
+
'RtlUnicodeToMultiByteN': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["MultiByteString", "MaxBytesInMultiByteString", "BytesInMultiByteString", "UnicodeString", "BytesInUnicodeString"]),
|
|
119
|
+
#
|
|
120
|
+
'RtlUpcaseUnicodeToMultiByteN': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["MultiByteString", "MaxBytesInMultiByteString", "BytesInMultiByteString", "UnicodeString", "BytesInUnicodeString"]),
|
|
121
|
+
#
|
|
122
|
+
'RtlOemToUnicodeN': SimTypeFunction([SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["UnicodeString", "MaxBytesInUnicodeString", "BytesInUnicodeString", "OemString", "BytesInOemString"]),
|
|
123
|
+
#
|
|
124
|
+
'RtlUnicodeToOemN': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["OemString", "MaxBytesInOemString", "BytesInOemString", "UnicodeString", "BytesInUnicodeString"]),
|
|
125
|
+
#
|
|
126
|
+
'RtlUpcaseUnicodeToOemN': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["OemString", "MaxBytesInOemString", "BytesInOemString", "UnicodeString", "BytesInUnicodeString"]),
|
|
127
|
+
#
|
|
128
|
+
'RtlNormalizeString': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=True, label="Int32"), SimTypePointer(SimTypeChar(label="Char"), label="LPArray", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NormForm", "SourceString", "SourceStringLength", "DestinationString", "DestinationStringLength"]),
|
|
129
|
+
#
|
|
130
|
+
'RtlIsNormalizedString': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=True, label="Int32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NormForm", "SourceString", "SourceStringLength", "Normalized"]),
|
|
131
|
+
#
|
|
132
|
+
'RtlIdnToAscii': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=True, label="Int32"), SimTypePointer(SimTypeChar(label="Char"), label="LPArray", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Flags", "SourceString", "SourceStringLength", "DestinationString", "DestinationStringLength"]),
|
|
133
|
+
#
|
|
134
|
+
'RtlIdnToUnicode': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=True, label="Int32"), SimTypePointer(SimTypeChar(label="Char"), label="LPArray", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Flags", "SourceString", "SourceStringLength", "DestinationString", "DestinationStringLength"]),
|
|
135
|
+
#
|
|
136
|
+
'RtlIdnToNameprepUnicode': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=True, label="Int32"), SimTypePointer(SimTypeChar(label="Char"), label="LPArray", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Flags", "SourceString", "SourceStringLength", "DestinationString", "DestinationStringLength"]),
|
|
137
|
+
#
|
|
138
|
+
'RtlGenerate8dot3Name': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("GENERATE_NAME_CONTEXT", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Name", "AllowExtendedCharacters", "Context", "Name8dot3"]),
|
|
139
|
+
#
|
|
140
|
+
'RtlIsValidOemCharacter': SimTypeFunction([SimTypePointer(SimTypeChar(label="Char"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Char"]),
|
|
141
|
+
#
|
|
142
|
+
'PfxInitialize': SimTypeFunction([SimTypePointer(SimTypeRef("PREFIX_TABLE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["PrefixTable"]),
|
|
143
|
+
#
|
|
144
|
+
'PfxInsertPrefix': SimTypeFunction([SimTypePointer(SimTypeRef("PREFIX_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("PREFIX_TABLE_ENTRY", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["PrefixTable", "Prefix", "PrefixTableEntry"]),
|
|
145
|
+
#
|
|
146
|
+
'PfxRemovePrefix': SimTypeFunction([SimTypePointer(SimTypeRef("PREFIX_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("PREFIX_TABLE_ENTRY", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["PrefixTable", "PrefixTableEntry"]),
|
|
147
|
+
#
|
|
148
|
+
'PfxFindPrefix': SimTypeFunction([SimTypePointer(SimTypeRef("PREFIX_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0)], SimTypePointer(SimTypeRef("PREFIX_TABLE_ENTRY", SimStruct), offset=0), arg_names=["PrefixTable", "FullName"]),
|
|
149
|
+
#
|
|
150
|
+
'RtlInitializeUnicodePrefix': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_PREFIX_TABLE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["PrefixTable"]),
|
|
151
|
+
#
|
|
152
|
+
'RtlInsertUnicodePrefix': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_PREFIX_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_PREFIX_TABLE_ENTRY", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["PrefixTable", "Prefix", "PrefixTableEntry"]),
|
|
153
|
+
#
|
|
154
|
+
'RtlRemoveUnicodePrefix': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_PREFIX_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_PREFIX_TABLE_ENTRY", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["PrefixTable", "PrefixTableEntry"]),
|
|
155
|
+
#
|
|
156
|
+
'RtlFindUnicodePrefix': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_PREFIX_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeRef("UNICODE_PREFIX_TABLE_ENTRY", SimStruct), offset=0), arg_names=["PrefixTable", "FullName", "CaseInsensitiveIndex"]),
|
|
157
|
+
#
|
|
158
|
+
'RtlNextUnicodePrefix': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_PREFIX_TABLE", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypePointer(SimTypeRef("UNICODE_PREFIX_TABLE_ENTRY", SimStruct), offset=0), arg_names=["PrefixTable", "Restart"]),
|
|
159
|
+
#
|
|
160
|
+
'RtlGetCompressionWorkSpaceSize': SimTypeFunction([SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CompressionFormatAndEngine", "CompressBufferWorkSpaceSize", "CompressFragmentWorkSpaceSize"]),
|
|
161
|
+
#
|
|
162
|
+
'RtlCompressBuffer': SimTypeFunction([SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CompressionFormatAndEngine", "UncompressedBuffer", "UncompressedBufferSize", "CompressedBuffer", "CompressedBufferSize", "UncompressedChunkSize", "FinalCompressedSize", "WorkSpace"]),
|
|
163
|
+
#
|
|
164
|
+
'RtlDecompressBuffer': SimTypeFunction([SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CompressionFormat", "UncompressedBuffer", "UncompressedBufferSize", "CompressedBuffer", "CompressedBufferSize", "FinalUncompressedSize"]),
|
|
165
|
+
#
|
|
166
|
+
'RtlDecompressBufferEx': SimTypeFunction([SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CompressionFormat", "UncompressedBuffer", "UncompressedBufferSize", "CompressedBuffer", "CompressedBufferSize", "FinalUncompressedSize", "WorkSpace"]),
|
|
167
|
+
#
|
|
168
|
+
'RtlDecompressBufferEx2': SimTypeFunction([SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CompressionFormat", "UncompressedBuffer", "UncompressedBufferSize", "CompressedBuffer", "CompressedBufferSize", "UncompressedChunkSize", "FinalUncompressedSize", "WorkSpace"]),
|
|
169
|
+
#
|
|
170
|
+
'RtlDecompressFragment': SimTypeFunction([SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CompressionFormat", "UncompressedFragment", "UncompressedFragmentSize", "CompressedBuffer", "CompressedBufferSize", "FragmentOffset", "FinalUncompressedSize", "WorkSpace"]),
|
|
171
|
+
#
|
|
172
|
+
'RtlDecompressFragmentEx': SimTypeFunction([SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CompressionFormat", "UncompressedFragment", "UncompressedFragmentSize", "CompressedBuffer", "CompressedBufferSize", "FragmentOffset", "UncompressedChunkSize", "FinalUncompressedSize", "WorkSpace"]),
|
|
173
|
+
#
|
|
174
|
+
'RtlDescribeChunk': SimTypeFunction([SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypePointer(SimTypeChar(label="Byte"), offset=0), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypePointer(SimTypePointer(SimTypeChar(label="Byte"), offset=0), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CompressionFormat", "CompressedBuffer", "EndOfCompressedBufferPlus1", "ChunkBuffer", "ChunkSize"]),
|
|
175
|
+
#
|
|
176
|
+
'RtlReserveChunk': SimTypeFunction([SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypePointer(SimTypeChar(label="Byte"), offset=0), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypePointer(SimTypePointer(SimTypeChar(label="Byte"), offset=0), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["CompressionFormat", "CompressedBuffer", "EndOfCompressedBufferPlus1", "ChunkBuffer", "ChunkSize"]),
|
|
177
|
+
#
|
|
178
|
+
'RtlDecompressChunks': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("COMPRESSED_DATA_INFO", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["UncompressedBuffer", "UncompressedBufferSize", "CompressedBuffer", "CompressedBufferSize", "CompressedTail", "CompressedTailSize", "CompressedDataInfo"]),
|
|
179
|
+
#
|
|
180
|
+
'RtlCompressChunks': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("COMPRESSED_DATA_INFO", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["UncompressedBuffer", "UncompressedBufferSize", "CompressedBuffer", "CompressedBufferSize", "CompressedDataInfo", "CompressedDataInfoLength", "WorkSpace"]),
|
|
181
|
+
#
|
|
182
|
+
'RtlCompareMemoryUlong': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), arg_names=["Source", "Length", "Pattern"]),
|
|
183
|
+
#
|
|
184
|
+
'RtlTimeToSecondsSince1980': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Time", "ElapsedSeconds"]),
|
|
185
|
+
#
|
|
186
|
+
'RtlSecondsSince1980ToTime': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ElapsedSeconds", "Time"]),
|
|
187
|
+
#
|
|
188
|
+
'RtlSecondsSince1970ToTime': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ElapsedSeconds", "Time"]),
|
|
189
|
+
#
|
|
190
|
+
'RtlValidSid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Sid"]),
|
|
191
|
+
#
|
|
192
|
+
'RtlEqualSid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Sid1", "Sid2"]),
|
|
193
|
+
#
|
|
194
|
+
'RtlEqualPrefixSid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Sid1", "Sid2"]),
|
|
195
|
+
#
|
|
196
|
+
'RtlLengthRequiredSid': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["SubAuthorityCount"]),
|
|
197
|
+
#
|
|
198
|
+
'RtlFreeSid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Sid"]),
|
|
199
|
+
#
|
|
200
|
+
'RtlAllocateAndInitializeSid': SimTypeFunction([SimTypePointer(SimTypeRef("SID_IDENTIFIER_AUTHORITY", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["IdentifierAuthority", "SubAuthorityCount", "SubAuthority0", "SubAuthority1", "SubAuthority2", "SubAuthority3", "SubAuthority4", "SubAuthority5", "SubAuthority6", "SubAuthority7", "Sid"]),
|
|
201
|
+
#
|
|
202
|
+
'RtlAllocateAndInitializeSidEx': SimTypeFunction([SimTypePointer(SimTypeRef("SID_IDENTIFIER_AUTHORITY", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), label="LPArray", offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["IdentifierAuthority", "SubAuthorityCount", "SubAuthorities", "Sid"]),
|
|
203
|
+
#
|
|
204
|
+
'RtlInitializeSid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SID_IDENTIFIER_AUTHORITY", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["Sid", "IdentifierAuthority", "SubAuthorityCount"]),
|
|
205
|
+
#
|
|
206
|
+
'RtlInitializeSidEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SID_IDENTIFIER_AUTHORITY", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["Sid", "IdentifierAuthority", "SubAuthorityCount"]),
|
|
207
|
+
#
|
|
208
|
+
'RtlIdentifierAuthoritySid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeRef("SID_IDENTIFIER_AUTHORITY", SimStruct), offset=0), arg_names=["Sid"]),
|
|
209
|
+
#
|
|
210
|
+
'RtlSubAuthoritySid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), arg_names=["Sid", "SubAuthority"]),
|
|
211
|
+
#
|
|
212
|
+
'RtlSubAuthorityCountSid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeChar(label="Byte"), offset=0), arg_names=["Sid"]),
|
|
213
|
+
#
|
|
214
|
+
'RtlLengthSid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Sid"]),
|
|
215
|
+
#
|
|
216
|
+
'RtlCopySid': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationSidLength", "DestinationSid", "SourceSid"]),
|
|
217
|
+
#
|
|
218
|
+
'RtlCreateServiceSid': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ServiceName", "ServiceSid", "ServiceSidLength"]),
|
|
219
|
+
#
|
|
220
|
+
'RtlGetSaclSecurityDescriptor': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SecurityDescriptor", "SaclPresent", "Sacl", "SaclDefaulted"]),
|
|
221
|
+
#
|
|
222
|
+
'RtlReplaceSidInSd': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SecurityDescriptor", "OldSid", "NewSid", "NumChanges"]),
|
|
223
|
+
#
|
|
224
|
+
'RtlCreateVirtualAccountSid': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Name", "BaseSubAuthority", "Sid", "SidLength"]),
|
|
225
|
+
#
|
|
226
|
+
'RtlCopyLuid': SimTypeFunction([SimTypePointer(SimTypeRef("LUID", SimStruct), offset=0), SimTypePointer(SimTypeRef("LUID", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DestinationLuid", "SourceLuid"]),
|
|
227
|
+
#
|
|
228
|
+
'RtlCreateAcl': SimTypeFunction([SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Acl", "AclLength", "AclRevision"]),
|
|
229
|
+
#
|
|
230
|
+
'RtlAddAce': SimTypeFunction([SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Acl", "AceRevision", "StartingAceIndex", "AceList", "AceListLength"]),
|
|
231
|
+
#
|
|
232
|
+
'RtlDeleteAce': SimTypeFunction([SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Acl", "AceIndex"]),
|
|
233
|
+
#
|
|
234
|
+
'RtlGetAce': SimTypeFunction([SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Acl", "AceIndex", "Ace"]),
|
|
235
|
+
#
|
|
236
|
+
'RtlAddAccessAllowedAce': SimTypeFunction([SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Acl", "AceRevision", "AccessMask", "Sid"]),
|
|
237
|
+
#
|
|
238
|
+
'RtlAddAccessAllowedAceEx': SimTypeFunction([SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Acl", "AceRevision", "AceFlags", "AccessMask", "Sid"]),
|
|
239
|
+
#
|
|
240
|
+
'RtlGetDaclSecurityDescriptor': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SecurityDescriptor", "DaclPresent", "Dacl", "DaclDefaulted"]),
|
|
241
|
+
#
|
|
242
|
+
'RtlSetOwnerSecurityDescriptor': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["SecurityDescriptor", "Owner", "OwnerDefaulted"]),
|
|
243
|
+
#
|
|
244
|
+
'RtlSetGroupSecurityDescriptor': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["SecurityDescriptor", "Group", "GroupDefaulted"]),
|
|
245
|
+
#
|
|
246
|
+
'RtlGetGroupSecurityDescriptor': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SecurityDescriptor", "Group", "GroupDefaulted"]),
|
|
247
|
+
#
|
|
248
|
+
'RtlAbsoluteToSelfRelativeSD': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["AbsoluteSecurityDescriptor", "SelfRelativeSecurityDescriptor", "BufferLength"]),
|
|
249
|
+
#
|
|
250
|
+
'RtlSelfRelativeToAbsoluteSD': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SelfRelativeSecurityDescriptor", "AbsoluteSecurityDescriptor", "AbsoluteSecurityDescriptorSize", "Dacl", "DaclSize", "Sacl", "SaclSize", "Owner", "OwnerSize", "PrimaryGroup", "PrimaryGroupSize"]),
|
|
251
|
+
#
|
|
252
|
+
'RtlGetOwnerSecurityDescriptor': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SecurityDescriptor", "Owner", "OwnerDefaulted"]),
|
|
253
|
+
#
|
|
254
|
+
'RtlNtStatusToDosErrorNoTeb': SimTypeFunction([SimTypeInt(signed=True, label="Int32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["Status"]),
|
|
255
|
+
#
|
|
256
|
+
'RtlCustomCPToUnicodeN': SimTypeFunction([SimTypePointer(SimTypeRef("CPTABLEINFO", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["CustomCP", "UnicodeString", "MaxBytesInUnicodeString", "BytesInUnicodeString", "CustomCPString", "BytesInCustomCPString"]),
|
|
257
|
+
#
|
|
258
|
+
'RtlUnicodeToCustomCPN': SimTypeFunction([SimTypePointer(SimTypeRef("CPTABLEINFO", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["CustomCP", "CustomCPString", "MaxBytesInCustomCPString", "BytesInCustomCPString", "UnicodeString", "BytesInUnicodeString"]),
|
|
259
|
+
#
|
|
260
|
+
'RtlUpcaseUnicodeToCustomCPN': SimTypeFunction([SimTypePointer(SimTypeRef("CPTABLEINFO", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["CustomCP", "CustomCPString", "MaxBytesInCustomCPString", "BytesInCustomCPString", "UnicodeString", "BytesInUnicodeString"]),
|
|
261
|
+
#
|
|
262
|
+
'RtlInitCodePageTable': SimTypeFunction([SimTypePointer(SimTypeShort(signed=False, label="UInt16"), label="LPArray", offset=0), SimTypePointer(SimTypeRef("CPTABLEINFO", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["TableBase", "CodePageTable"]),
|
|
263
|
+
#
|
|
264
|
+
'RtlCreateSystemVolumeInformationFolder': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["VolumeRootPath"]),
|
|
265
|
+
#
|
|
266
|
+
'RtlCompareAltitudes': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Altitude1", "Altitude2"]),
|
|
267
|
+
#
|
|
268
|
+
'RtlQueryPackageIdentity': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TokenObject", "PackageFullName", "PackageSize", "AppId", "AppIdSize", "Packaged"]),
|
|
269
|
+
#
|
|
270
|
+
'RtlQueryPackageIdentityEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TokenObject", "PackageFullName", "PackageSize", "AppId", "AppIdSize", "DynamicId", "Flags"]),
|
|
271
|
+
#
|
|
272
|
+
'RtlIsNonEmptyDirectoryReparsePointAllowed': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["ReparseTag"]),
|
|
273
|
+
#
|
|
274
|
+
'RtlIsCloudFilesPlaceholder': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["FileAttributes", "ReparseTag"]),
|
|
275
|
+
#
|
|
276
|
+
'RtlIsPartialPlaceholder': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["FileAttributes", "ReparseTag"]),
|
|
277
|
+
#
|
|
278
|
+
'RtlIsPartialPlaceholderFileHandle': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IsPartialPlaceholder"]),
|
|
279
|
+
#
|
|
280
|
+
'RtlIsPartialPlaceholderFileInfo': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["InfoBuffer", "InfoClass", "IsPartialPlaceholder"]),
|
|
281
|
+
#
|
|
282
|
+
'RtlQueryThreadPlaceholderCompatibilityMode': SimTypeFunction([], SimTypeChar(label="SByte")),
|
|
283
|
+
#
|
|
284
|
+
'RtlSetThreadPlaceholderCompatibilityMode': SimTypeFunction([SimTypeChar(label="SByte")], SimTypeChar(label="SByte"), arg_names=["Mode"]),
|
|
285
|
+
#
|
|
286
|
+
'RtlQueryProcessPlaceholderCompatibilityMode': SimTypeFunction([], SimTypeChar(label="SByte")),
|
|
287
|
+
#
|
|
288
|
+
'RtlSetProcessPlaceholderCompatibilityMode': SimTypeFunction([SimTypeChar(label="SByte")], SimTypeChar(label="SByte"), arg_names=["Mode"]),
|
|
289
|
+
#
|
|
290
|
+
'NtCreateFile': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="FILE_ACCESS_RIGHTS"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="FILE_FLAGS_AND_ATTRIBUTES"), SimTypeInt(signed=False, label="FILE_SHARE_MODE"), SimTypeInt(signed=False, label="NTCREATEFILE_CREATE_DISPOSITION"), SimTypeInt(signed=False, label="NTCREATEFILE_CREATE_OPTIONS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "DesiredAccess", "ObjectAttributes", "IoStatusBlock", "AllocationSize", "FileAttributes", "ShareAccess", "CreateDisposition", "CreateOptions", "EaBuffer", "EaLength"]),
|
|
291
|
+
#
|
|
292
|
+
'NtFsControlFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "FsControlCode", "InputBuffer", "InputBufferLength", "OutputBuffer", "OutputBufferLength"]),
|
|
293
|
+
#
|
|
294
|
+
'NtLockFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "ByteOffset", "Length", "Key", "FailImmediately", "ExclusiveLock"]),
|
|
295
|
+
#
|
|
296
|
+
'NtOpenFile': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "DesiredAccess", "ObjectAttributes", "IoStatusBlock", "ShareAccess", "OpenOptions"]),
|
|
297
|
+
#
|
|
298
|
+
'NtQueryDirectoryFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "FileInformation", "Length", "FileInformationClass", "ReturnSingleEntry", "FileName", "RestartScan"]),
|
|
299
|
+
#
|
|
300
|
+
'NtQueryDirectoryFileEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "FileInformation", "Length", "FileInformationClass", "QueryFlags", "FileName"]),
|
|
301
|
+
#
|
|
302
|
+
'NtQueryInformationByName': SimTypeFunction([SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS")], SimTypeInt(signed=True, label="Int32"), arg_names=["ObjectAttributes", "IoStatusBlock", "FileInformation", "Length", "FileInformationClass"]),
|
|
303
|
+
#
|
|
304
|
+
'NtQueryInformationFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "FileInformation", "Length", "FileInformationClass"]),
|
|
305
|
+
#
|
|
306
|
+
'NtQueryQuotaInformationFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "Buffer", "Length", "ReturnSingleEntry", "SidList", "SidListLength", "StartSid", "RestartScan"]),
|
|
307
|
+
#
|
|
308
|
+
'NtQueryVolumeInformationFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FS_INFORMATION_CLASS")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "FsInformation", "Length", "FsInformationClass"]),
|
|
309
|
+
#
|
|
310
|
+
'NtReadFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "Buffer", "Length", "ByteOffset", "Key"]),
|
|
311
|
+
#
|
|
312
|
+
'NtSetInformationFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "FileInformation", "Length", "FileInformationClass"]),
|
|
313
|
+
#
|
|
314
|
+
'NtSetQuotaInformationFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "Buffer", "Length"]),
|
|
315
|
+
#
|
|
316
|
+
'NtSetVolumeInformationFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FS_INFORMATION_CLASS")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "FsInformation", "Length", "FsInformationClass"]),
|
|
317
|
+
#
|
|
318
|
+
'NtWriteFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "Buffer", "Length", "ByteOffset", "Key"]),
|
|
319
|
+
#
|
|
320
|
+
'NtUnlockFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "ByteOffset", "Length", "Key"]),
|
|
321
|
+
#
|
|
322
|
+
'NtFlushBuffersFileEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Flags", "Parameters", "ParametersSize", "IoStatusBlock"]),
|
|
323
|
+
#
|
|
324
|
+
'NtSetSecurityObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "SecurityInformation", "SecurityDescriptor"]),
|
|
325
|
+
#
|
|
326
|
+
'NtQuerySecurityObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "SecurityInformation", "SecurityDescriptor", "Length", "LengthNeeded"]),
|
|
327
|
+
#
|
|
328
|
+
'NtCreateSection': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SectionHandle", "DesiredAccess", "ObjectAttributes", "MaximumSize", "SectionPageProtection", "AllocationAttributes", "FileHandle"]),
|
|
329
|
+
#
|
|
330
|
+
'NtCreateSectionEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("MEM_EXTENDED_PARAMETER", SimStruct), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["SectionHandle", "DesiredAccess", "ObjectAttributes", "MaximumSize", "SectionPageProtection", "AllocationAttributes", "FileHandle", "ExtendedParameters", "ExtendedParameterCount"]),
|
|
331
|
+
#
|
|
332
|
+
'NtAllocateVirtualMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "BaseAddress", "ZeroBits", "RegionSize", "AllocationType", "Protect"]),
|
|
333
|
+
#
|
|
334
|
+
'NtFreeVirtualMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "BaseAddress", "RegionSize", "FreeType"]),
|
|
335
|
+
#
|
|
336
|
+
'NtQueryVirtualMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="MEMORY_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "BaseAddress", "MemoryInformationClass", "MemoryInformation", "MemoryInformationLength", "ReturnLength"]),
|
|
337
|
+
#
|
|
338
|
+
'NtSetInformationVirtualMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="VIRTUAL_MEMORY_INFORMATION_CLASS"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeRef("MEMORY_RANGE_ENTRY", SimStruct), label="LPArray", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "VmInformationClass", "NumberOfEntries", "VirtualAddresses", "VmInformation", "VmInformationLength"]),
|
|
339
|
+
#
|
|
340
|
+
'KeInitializeMutant': SimTypeFunction([SimTypePointer(SimTypeRef("KMUTANT", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["Mutant", "InitialOwner"]),
|
|
341
|
+
#
|
|
342
|
+
'KeReadStateMutant': SimTypeFunction([SimTypePointer(SimTypeRef("KMUTANT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Mutant"]),
|
|
343
|
+
#
|
|
344
|
+
'KeReleaseMutant': SimTypeFunction([SimTypePointer(SimTypeRef("KMUTANT", SimStruct), offset=0), SimTypeInt(signed=True, label="Int32"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["Mutant", "Increment", "Abandoned", "Wait"]),
|
|
345
|
+
#
|
|
346
|
+
'KeInitializeQueue': SimTypeFunction([SimTypePointer(SimTypeRef("KQUEUE", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Queue", "Count"]),
|
|
347
|
+
#
|
|
348
|
+
'KeReadStateQueue': SimTypeFunction([SimTypePointer(SimTypeRef("KQUEUE", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Queue"]),
|
|
349
|
+
#
|
|
350
|
+
'KeInsertQueue': SimTypeFunction([SimTypePointer(SimTypeRef("KQUEUE", SimStruct), offset=0), SimTypePointer(SimTypeRef("LIST_ENTRY", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Queue", "Entry"]),
|
|
351
|
+
#
|
|
352
|
+
'KeInsertHeadQueue': SimTypeFunction([SimTypePointer(SimTypeRef("KQUEUE", SimStruct), offset=0), SimTypePointer(SimTypeRef("LIST_ENTRY", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Queue", "Entry"]),
|
|
353
|
+
#
|
|
354
|
+
'KeRemoveQueue': SimTypeFunction([SimTypePointer(SimTypeRef("KQUEUE", SimStruct), offset=0), SimTypeChar(label="SByte"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypePointer(SimTypeRef("LIST_ENTRY", SimStruct), offset=0), arg_names=["Queue", "WaitMode", "Timeout"]),
|
|
355
|
+
#
|
|
356
|
+
'KeRemoveQueueEx': SimTypeFunction([SimTypePointer(SimTypeRef("KQUEUE", SimStruct), offset=0), SimTypeChar(label="SByte"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("LIST_ENTRY", SimStruct), offset=0), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["Queue", "WaitMode", "Alertable", "Timeout", "EntryArray", "Count"]),
|
|
357
|
+
#
|
|
358
|
+
'KeRundownQueue': SimTypeFunction([SimTypePointer(SimTypeRef("KQUEUE", SimStruct), offset=0)], SimTypePointer(SimTypeRef("LIST_ENTRY", SimStruct), offset=0), arg_names=["Queue"]),
|
|
359
|
+
#
|
|
360
|
+
'KeAttachProcess': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Process"]),
|
|
361
|
+
#
|
|
362
|
+
'KeDetachProcess': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
363
|
+
#
|
|
364
|
+
'KeStackAttachProcess': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("KAPC_STATE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["PROCESS", "ApcState"]),
|
|
365
|
+
#
|
|
366
|
+
'KeUnstackDetachProcess': SimTypeFunction([SimTypePointer(SimTypeRef("KAPC_STATE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["ApcState"]),
|
|
367
|
+
#
|
|
368
|
+
'KeSetIdealProcessorThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["Thread", "Processor"]),
|
|
369
|
+
#
|
|
370
|
+
'KeSetKernelStackSwapEnable': SimTypeFunction([SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["Enable"]),
|
|
371
|
+
#
|
|
372
|
+
'KeAcquireQueuedSpinLock': SimTypeFunction([SimTypeInt(signed=False, label="KSPIN_LOCK_QUEUE_NUMBER")], SimTypeChar(label="Byte"), arg_names=["Number"]),
|
|
373
|
+
#
|
|
374
|
+
'KeReleaseQueuedSpinLock': SimTypeFunction([SimTypeInt(signed=False, label="KSPIN_LOCK_QUEUE_NUMBER"), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["Number", "OldIrql"]),
|
|
375
|
+
#
|
|
376
|
+
'KeTryToAcquireQueuedSpinLock': SimTypeFunction([SimTypeInt(signed=False, label="KSPIN_LOCK_QUEUE_NUMBER"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Number", "OldIrql"]),
|
|
377
|
+
#
|
|
378
|
+
'KeAcquireSpinLockRaiseToSynch': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["SpinLock"]),
|
|
379
|
+
#
|
|
380
|
+
'ExQueryPoolBlockSize': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), arg_names=["PoolBlock", "QuotaCharged"]),
|
|
381
|
+
#
|
|
382
|
+
'ExDisableResourceBoostLite': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Resource"]),
|
|
383
|
+
#
|
|
384
|
+
'SeDeleteClientSecurity': SimTypeFunction([SimTypePointer(SimTypeRef("SECURITY_CLIENT_CONTEXT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["ClientContext"]),
|
|
385
|
+
#
|
|
386
|
+
'SeCaptureSubjectContextEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Thread", "Process", "SubjectContext"]),
|
|
387
|
+
#
|
|
388
|
+
'SeReportSecurityEventWithSubCategory': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SE_ADT_PARAMETER_ARRAY", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Flags", "SourceName", "UserSid", "AuditParameters", "AuditSubcategoryId"]),
|
|
389
|
+
#
|
|
390
|
+
'SeAccessCheckFromState': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("TOKEN_ACCESS_INFORMATION", SimStruct), offset=0), SimTypePointer(SimTypeRef("TOKEN_ACCESS_INFORMATION", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("PRIVILEGE_SET", SimStruct), offset=0), offset=0), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0), SimTypeChar(label="SByte"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["SecurityDescriptor", "PrimaryTokenInformation", "ClientTokenInformation", "DesiredAccess", "PreviouslyGrantedAccess", "Privileges", "GenericMapping", "AccessMode", "GrantedAccess", "AccessStatus"]),
|
|
391
|
+
#
|
|
392
|
+
'SeAccessCheckFromStateEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("PRIVILEGE_SET", SimStruct), offset=0), offset=0), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0), SimTypeChar(label="SByte"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["SecurityDescriptor", "PrimaryToken", "ClientToken", "DesiredAccess", "PreviouslyGrantedAccess", "Privileges", "GenericMapping", "AccessMode", "GrantedAccess", "AccessStatus"]),
|
|
393
|
+
#
|
|
394
|
+
'SeTokenFromAccessInformation': SimTypeFunction([SimTypePointer(SimTypeRef("TOKEN_ACCESS_INFORMATION", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["AccessInformation", "Token", "Length", "RequiredLength"]),
|
|
395
|
+
#
|
|
396
|
+
'SePrivilegeCheck': SimTypeFunction([SimTypePointer(SimTypeRef("PRIVILEGE_SET", SimStruct), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0), SimTypeChar(label="SByte")], SimTypeChar(label="Byte"), arg_names=["RequiredPrivileges", "SubjectSecurityContext", "AccessMode"]),
|
|
397
|
+
#
|
|
398
|
+
'SeFreePrivileges': SimTypeFunction([SimTypePointer(SimTypeRef("PRIVILEGE_SET", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Privileges"]),
|
|
399
|
+
#
|
|
400
|
+
'SeOpenObjectAuditAlarm': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("ACCESS_STATE", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypeChar(label="SByte"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ObjectTypeName", "Object", "AbsoluteObjectName", "SecurityDescriptor", "AccessState", "ObjectCreated", "AccessGranted", "AccessMode", "GenerateOnClose"]),
|
|
401
|
+
#
|
|
402
|
+
'SeOpenObjectAuditAlarmWithTransaction': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("ACCESS_STATE", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypeChar(label="SByte"), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ObjectTypeName", "Object", "AbsoluteObjectName", "SecurityDescriptor", "AccessState", "ObjectCreated", "AccessGranted", "AccessMode", "TransactionId", "GenerateOnClose"]),
|
|
403
|
+
#
|
|
404
|
+
'SeOpenObjectForDeleteAuditAlarm': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("ACCESS_STATE", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypeChar(label="SByte"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ObjectTypeName", "Object", "AbsoluteObjectName", "SecurityDescriptor", "AccessState", "ObjectCreated", "AccessGranted", "AccessMode", "GenerateOnClose"]),
|
|
405
|
+
#
|
|
406
|
+
'SeOpenObjectForDeleteAuditAlarmWithTransaction': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("ACCESS_STATE", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypeChar(label="SByte"), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ObjectTypeName", "Object", "AbsoluteObjectName", "SecurityDescriptor", "AccessState", "ObjectCreated", "AccessGranted", "AccessMode", "TransactionId", "GenerateOnClose"]),
|
|
407
|
+
#
|
|
408
|
+
'SeExamineSacl': SimTypeFunction([SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Sacl", "ResourceSacl", "Token", "DesiredAccess", "AccessGranted", "GenerateAudit", "GenerateAlarm"]),
|
|
409
|
+
#
|
|
410
|
+
'SeDeleteObjectAuditAlarm': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Object", "Handle"]),
|
|
411
|
+
#
|
|
412
|
+
'SeDeleteObjectAuditAlarmWithTransaction': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Object", "Handle", "TransactionId"]),
|
|
413
|
+
#
|
|
414
|
+
'SeTokenType': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=False, label="TOKEN_TYPE"), arg_names=["Token"]),
|
|
415
|
+
#
|
|
416
|
+
'SeTokenIsAdmin': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Token"]),
|
|
417
|
+
#
|
|
418
|
+
'SeTokenIsRestricted': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Token"]),
|
|
419
|
+
#
|
|
420
|
+
'SeTokenIsWriteRestricted': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Token"]),
|
|
421
|
+
#
|
|
422
|
+
'SeFilterToken': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("TOKEN_GROUPS", SimStruct), offset=0), SimTypePointer(SimTypeRef("TOKEN_PRIVILEGES", SimStruct), offset=0), SimTypePointer(SimTypeRef("TOKEN_GROUPS", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ExistingToken", "Flags", "SidsToDisable", "PrivilegesToDelete", "RestrictedSids", "FilteredToken"]),
|
|
423
|
+
#
|
|
424
|
+
'SeQueryAuthenticationIdToken': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("LUID", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Token", "AuthenticationId"]),
|
|
425
|
+
#
|
|
426
|
+
'SeQuerySessionIdToken': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Token", "SessionId"]),
|
|
427
|
+
#
|
|
428
|
+
'SeQuerySessionIdTokenEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Token", "SessionId", "IsServiceSession"]),
|
|
429
|
+
#
|
|
430
|
+
'SeQueryServerSiloToken': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Token", "pServerSilo"]),
|
|
431
|
+
#
|
|
432
|
+
'SeCreateClientSecurity': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("SECURITY_QUALITY_OF_SERVICE", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("SECURITY_CLIENT_CONTEXT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ClientThread", "ClientSecurityQos", "RemoteSession", "ClientContext"]),
|
|
433
|
+
#
|
|
434
|
+
'SeImpersonateClient': SimTypeFunction([SimTypePointer(SimTypeRef("SECURITY_CLIENT_CONTEXT", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["ClientContext", "ServerThread"]),
|
|
435
|
+
#
|
|
436
|
+
'SeImpersonateClientEx': SimTypeFunction([SimTypePointer(SimTypeRef("SECURITY_CLIENT_CONTEXT", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ClientContext", "ServerThread"]),
|
|
437
|
+
#
|
|
438
|
+
'SeCreateClientSecurityFromSubjectContext': SimTypeFunction([SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SECURITY_QUALITY_OF_SERVICE", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("SECURITY_CLIENT_CONTEXT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SubjectContext", "ClientSecurityQos", "ServerIsRemote", "ClientContext"]),
|
|
439
|
+
#
|
|
440
|
+
'SeQuerySecurityDescriptorInfo': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SecurityInformation", "SecurityDescriptor", "Length", "ObjectsSecurityDescriptor"]),
|
|
441
|
+
#
|
|
442
|
+
'SeSetSecurityDescriptorInfo': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypeInt(signed=False, label="POOL_TYPE"), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "SecurityInformation", "ModificationDescriptor", "ObjectsSecurityDescriptor", "PoolType", "GenericMapping"]),
|
|
443
|
+
#
|
|
444
|
+
'SeSetSecurityDescriptorInfoEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="POOL_TYPE"), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "SecurityInformation", "ModificationDescriptor", "ObjectsSecurityDescriptor", "AutoInheritFlags", "PoolType", "GenericMapping"]),
|
|
445
|
+
#
|
|
446
|
+
'SeAppendPrivileges': SimTypeFunction([SimTypePointer(SimTypeRef("ACCESS_STATE", SimStruct), offset=0), SimTypePointer(SimTypeRef("PRIVILEGE_SET", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["AccessState", "Privileges"]),
|
|
447
|
+
#
|
|
448
|
+
'SeAuditHardLinkCreation': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["FileName", "LinkName", "bSuccess"]),
|
|
449
|
+
#
|
|
450
|
+
'SeAuditHardLinkCreationWithTransaction': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileName", "LinkName", "bSuccess", "TransactionId"]),
|
|
451
|
+
#
|
|
452
|
+
'SeAuditFipsCryptoSelftests': SimTypeFunction([SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["bSuccess", "SelftestCode"]),
|
|
453
|
+
#
|
|
454
|
+
'SeAuditTransactionStateChange': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["TransactionId", "ResourceManagerId", "NewTransactionState"]),
|
|
455
|
+
#
|
|
456
|
+
'SeAuditingFileEvents': SimTypeFunction([SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["AccessGranted", "SecurityDescriptor"]),
|
|
457
|
+
#
|
|
458
|
+
'SeAuditingFileEventsWithContext': SimTypeFunction([SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["AccessGranted", "SecurityDescriptor", "SubjectSecurityContext"]),
|
|
459
|
+
#
|
|
460
|
+
'SeAuditingAnyFileEventsWithContext': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["SecurityDescriptor", "SubjectSecurityContext"]),
|
|
461
|
+
#
|
|
462
|
+
'SeAuditingFileEventsWithContextEx': SimTypeFunction([SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeChar(label="Byte"), arg_names=["AccessGranted", "SecurityDescriptor", "SubjectSecurityContext", "StagingEnabled"]),
|
|
463
|
+
#
|
|
464
|
+
'SeAuditingAnyFileEventsWithContextEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeChar(label="Byte"), arg_names=["SecurityDescriptor", "SubjectSecurityContext", "StagingEnabled"]),
|
|
465
|
+
#
|
|
466
|
+
'SeAdjustAccessStateForTrustLabel': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("ACCESS_STATE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["ObjectType", "SecurityDescriptor", "AccessState"]),
|
|
467
|
+
#
|
|
468
|
+
'SeAdjustAccessStateForAccessConstraints': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("ACCESS_STATE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["ObjectType", "SecurityDescriptor", "AccessState"]),
|
|
469
|
+
#
|
|
470
|
+
'SeShouldCheckForAccessRightsFromParent': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("ACCESS_STATE", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["ObjectType", "ChildDescriptor", "AccessState"]),
|
|
471
|
+
#
|
|
472
|
+
'SeAuditingHardLinkEvents': SimTypeFunction([SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["AccessGranted", "SecurityDescriptor"]),
|
|
473
|
+
#
|
|
474
|
+
'SeAuditingHardLinkEventsWithContext': SimTypeFunction([SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["AccessGranted", "SecurityDescriptor", "SubjectSecurityContext"]),
|
|
475
|
+
#
|
|
476
|
+
'SeAuditingFileOrGlobalEvents': SimTypeFunction([SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["AccessGranted", "SecurityDescriptor", "SubjectSecurityContext"]),
|
|
477
|
+
#
|
|
478
|
+
'SeSetAccessStateGenericMapping': SimTypeFunction([SimTypePointer(SimTypeRef("ACCESS_STATE", SimStruct), offset=0), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["AccessState", "GenericMapping"]),
|
|
479
|
+
#
|
|
480
|
+
'SeRegisterLogonSessionTerminatedRoutine': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CallbackRoutine"]),
|
|
481
|
+
#
|
|
482
|
+
'SeUnregisterLogonSessionTerminatedRoutine': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CallbackRoutine"]),
|
|
483
|
+
#
|
|
484
|
+
'SeRegisterLogonSessionTerminatedRoutineEx': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CallbackRoutine", "Context"]),
|
|
485
|
+
#
|
|
486
|
+
'SeUnregisterLogonSessionTerminatedRoutineEx': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CallbackRoutine", "Context"]),
|
|
487
|
+
#
|
|
488
|
+
'SeMarkLogonSessionForTerminationNotification': SimTypeFunction([SimTypePointer(SimTypeRef("LUID", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["LogonId"]),
|
|
489
|
+
#
|
|
490
|
+
'SeMarkLogonSessionForTerminationNotificationEx': SimTypeFunction([SimTypePointer(SimTypeRef("LUID", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["LogonId", "pServerSilo"]),
|
|
491
|
+
#
|
|
492
|
+
'SeQueryInformationToken': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="TOKEN_INFORMATION_CLASS"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Token", "TokenInformationClass", "TokenInformation"]),
|
|
493
|
+
#
|
|
494
|
+
'SeLocateProcessImageName': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Process", "pImageFileName"]),
|
|
495
|
+
#
|
|
496
|
+
'RtlIsSandboxedToken': SimTypeFunction([SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0), SimTypeChar(label="SByte")], SimTypeChar(label="Byte"), arg_names=["Context", "PreviousMode"]),
|
|
497
|
+
#
|
|
498
|
+
'SeCheckForCriticalAceRemoval': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeBottom(label="Void"), arg_names=["CurrentDescriptor", "NewDescriptor", "SubjectSecurityContext", "AceRemoved"]),
|
|
499
|
+
#
|
|
500
|
+
'SeAdjustObjectSecurity': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ObjectName", "OriginalDescriptor", "ProposedDescriptor", "SubjectSecurityContext", "AdjustedDescriptor", "ApplyAdjustedDescriptor"]),
|
|
501
|
+
#
|
|
502
|
+
'PsAssignImpersonationToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Thread", "Token"]),
|
|
503
|
+
#
|
|
504
|
+
'PsReferencePrimaryToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Process"]),
|
|
505
|
+
#
|
|
506
|
+
'PsDereferencePrimaryToken': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["PrimaryToken"]),
|
|
507
|
+
#
|
|
508
|
+
'PsDereferenceImpersonationToken': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ImpersonationToken"]),
|
|
509
|
+
#
|
|
510
|
+
'PsReferenceImpersonationToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="SECURITY_IMPERSONATION_LEVEL"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Thread", "CopyOnOpen", "EffectiveOnly", "ImpersonationLevel"]),
|
|
511
|
+
#
|
|
512
|
+
'PsGetProcessExitTime': SimTypeFunction([], SimTypeLongLong(signed=True, label="Int64")),
|
|
513
|
+
#
|
|
514
|
+
'PsIsThreadTerminating': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeChar(label="Byte"), arg_names=["Thread"]),
|
|
515
|
+
#
|
|
516
|
+
'PsImpersonateClient': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="SECURITY_IMPERSONATION_LEVEL")], SimTypeInt(signed=True, label="Int32"), arg_names=["Thread", "Token", "CopyOnOpen", "EffectiveOnly", "ImpersonationLevel"]),
|
|
517
|
+
#
|
|
518
|
+
'PsDisableImpersonation': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("SE_IMPERSONATION_STATE", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Thread", "ImpersonationState"]),
|
|
519
|
+
#
|
|
520
|
+
'PsRestoreImpersonation': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("SE_IMPERSONATION_STATE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Thread", "ImpersonationState"]),
|
|
521
|
+
#
|
|
522
|
+
'PsRevertToSelf': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
523
|
+
#
|
|
524
|
+
'PsLookupProcessByProcessId': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessId", "Process"]),
|
|
525
|
+
#
|
|
526
|
+
'PsLookupThreadByThreadId': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ThreadId", "Thread"]),
|
|
527
|
+
#
|
|
528
|
+
'PsChargePoolQuota': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="POOL_TYPE"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Process", "PoolType", "Amount"]),
|
|
529
|
+
#
|
|
530
|
+
'PsChargeProcessPoolQuota': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="POOL_TYPE"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Process", "PoolType", "Amount"]),
|
|
531
|
+
#
|
|
532
|
+
'PsReturnPoolQuota': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="POOL_TYPE"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Process", "PoolType", "Amount"]),
|
|
533
|
+
#
|
|
534
|
+
'PsGetThreadProcess': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Thread"]),
|
|
535
|
+
#
|
|
536
|
+
'PsIsSystemThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeChar(label="Byte"), arg_names=["Thread"]),
|
|
537
|
+
#
|
|
538
|
+
'PsUpdateDiskCounters': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeLongLong(signed=False, label="UInt64"), SimTypeLongLong(signed=False, label="UInt64"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Process", "BytesRead", "BytesWritten", "ReadOperationCount", "WriteOperationCount", "FlushOperationCount"]),
|
|
539
|
+
#
|
|
540
|
+
'PsIsDiskCountersEnabled': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
541
|
+
#
|
|
542
|
+
'FsRtlRegisterFileSystemFilterCallbacks': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("FS_FILTER_CALLBACKS", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FilterDriverObject", "Callbacks"]),
|
|
543
|
+
#
|
|
544
|
+
'IoAcquireVpbSpinLock': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Irql"]),
|
|
545
|
+
#
|
|
546
|
+
'IoCheckDesiredAccess': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["DesiredAccess", "GrantedAccess"]),
|
|
547
|
+
#
|
|
548
|
+
'IoCheckEaBufferValidity': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_FULL_EA_INFORMATION", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EaBuffer", "EaLength", "ErrorOffset"]),
|
|
549
|
+
#
|
|
550
|
+
'IoCheckFunctionAccess': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["GrantedAccess", "MajorFunction", "MinorFunction", "IoControlCode", "Arg1", "Arg2"]),
|
|
551
|
+
#
|
|
552
|
+
'IoCheckQuerySetFileInformation': SimTypeFunction([SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS"), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileInformationClass", "Length", "SetOperation"]),
|
|
553
|
+
#
|
|
554
|
+
'IoCheckQuerySetVolumeInformation': SimTypeFunction([SimTypeInt(signed=False, label="FS_INFORMATION_CLASS"), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["FsInformationClass", "Length", "SetOperation"]),
|
|
555
|
+
#
|
|
556
|
+
'IoCheckQuotaBufferValidity': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_QUOTA_INFORMATION", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["QuotaBuffer", "QuotaLength", "ErrorOffset"]),
|
|
557
|
+
#
|
|
558
|
+
'IoCreateStreamFileObject': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), arg_names=["FileObject", "DeviceObject"]),
|
|
559
|
+
#
|
|
560
|
+
'IoCreateStreamFileObjectEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), arg_names=["FileObject", "DeviceObject", "FileHandle"]),
|
|
561
|
+
#
|
|
562
|
+
'IoCreateStreamFileObjectLite': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), arg_names=["FileObject", "DeviceObject"]),
|
|
563
|
+
#
|
|
564
|
+
'IoCreateStreamFileObjectEx2': SimTypeFunction([SimTypePointer(SimTypeRef("IO_CREATE_STREAM_FILE_OPTIONS", SimStruct), offset=0), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CreateOptions", "FileObject", "DeviceObject", "StreamFileObject", "FileHandle"]),
|
|
565
|
+
#
|
|
566
|
+
'IoFastQueryNetworkAttributes': SimTypeFunction([SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("FILE_NETWORK_OPEN_INFORMATION", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["ObjectAttributes", "DesiredAccess", "OpenOptions", "IoStatus", "Buffer"]),
|
|
567
|
+
#
|
|
568
|
+
'IoPageRead': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "MemoryDescriptorList", "StartingOffset", "Event", "IoStatusBlock"]),
|
|
569
|
+
#
|
|
570
|
+
'IoGetAttachedDevice': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), arg_names=["DeviceObject"]),
|
|
571
|
+
#
|
|
572
|
+
'IoGetBaseFileSystemDeviceObject': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), arg_names=["FileObject"]),
|
|
573
|
+
#
|
|
574
|
+
'IoGetDeviceToVerify': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), arg_names=["Thread"]),
|
|
575
|
+
#
|
|
576
|
+
'IoGetRequestorProcessId': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Irp"]),
|
|
577
|
+
#
|
|
578
|
+
'IoGetRequestorProcess': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Irp"]),
|
|
579
|
+
#
|
|
580
|
+
'IoIsOperationSynchronous': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Irp"]),
|
|
581
|
+
#
|
|
582
|
+
'IoIsSystemThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeChar(label="Byte"), arg_names=["Thread"]),
|
|
583
|
+
#
|
|
584
|
+
'IoIsValidNameGraftingBuffer': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeRef("REPARSE_DATA_BUFFER", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Irp", "ReparseBuffer"]),
|
|
585
|
+
#
|
|
586
|
+
'IoQueryFileDosDeviceName': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("OBJECT_NAME_INFORMATION", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "ObjectNameInformation"]),
|
|
587
|
+
#
|
|
588
|
+
'IoQueryFileInformation': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "FileInformationClass", "Length", "FileInformation", "ReturnedLength"]),
|
|
589
|
+
#
|
|
590
|
+
'IoQueryVolumeInformation': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="FS_INFORMATION_CLASS"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "FsInformationClass", "Length", "FsInformation", "ReturnedLength"]),
|
|
591
|
+
#
|
|
592
|
+
'IoQueueThreadIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Irp"]),
|
|
593
|
+
#
|
|
594
|
+
'IoRegisterFileSystem': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DeviceObject"]),
|
|
595
|
+
#
|
|
596
|
+
'IoRegisterFsRegistrationChange': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["DeviceObject", "FsActive"]), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "DriverNotificationRoutine"]),
|
|
597
|
+
#
|
|
598
|
+
'IoRegisterFsRegistrationChangeMountAware': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["DeviceObject", "FsActive"]), offset=0), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "DriverNotificationRoutine", "SynchronizeWithMounts"]),
|
|
599
|
+
#
|
|
600
|
+
'IoEnumerateRegisteredFiltersList': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObjectList", "DriverObjectListSize", "ActualNumberDriverObjects"]),
|
|
601
|
+
#
|
|
602
|
+
'IoReplaceFileObjectName': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeShort(signed=False, label="UInt16")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "NewFileName", "FileNameLength"]),
|
|
603
|
+
#
|
|
604
|
+
'IoReleaseVpbSpinLock': SimTypeFunction([SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["Irql"]),
|
|
605
|
+
#
|
|
606
|
+
'IoSetDeviceToVerify': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Thread", "DeviceObject"]),
|
|
607
|
+
#
|
|
608
|
+
'IoSetInformation': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "FileInformationClass", "Length", "FileInformation"]),
|
|
609
|
+
#
|
|
610
|
+
'IoSynchronousPageWrite': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "MemoryDescriptorList", "StartingOffset", "Event", "IoStatusBlock"]),
|
|
611
|
+
#
|
|
612
|
+
'IoThreadToProcess': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Thread"]),
|
|
613
|
+
#
|
|
614
|
+
'IoUnregisterFileSystem': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DeviceObject"]),
|
|
615
|
+
#
|
|
616
|
+
'IoUnregisterFsRegistrationChange': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["DeviceObject", "FsActive"]), offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["DriverObject", "DriverNotificationRoutine"]),
|
|
617
|
+
#
|
|
618
|
+
'IoVerifyVolume': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "AllowRawMount"]),
|
|
619
|
+
#
|
|
620
|
+
'IoGetRequestorSessionId': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "pSessionId"]),
|
|
621
|
+
#
|
|
622
|
+
'IoEnumerateDeviceObjectList': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "DeviceObjectList", "DeviceObjectListSize", "ActualNumberDeviceObjects"]),
|
|
623
|
+
#
|
|
624
|
+
'IoGetLowerDeviceObject': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), arg_names=["DeviceObject"]),
|
|
625
|
+
#
|
|
626
|
+
'IoGetDeviceAttachmentBaseRef': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), arg_names=["DeviceObject"]),
|
|
627
|
+
#
|
|
628
|
+
'IoGetDiskDeviceObject': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileSystemDeviceObject", "DiskDeviceObject"]),
|
|
629
|
+
#
|
|
630
|
+
'IoRetrievePriorityInfo': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_PRIORITY_INFO", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "FileObject", "Thread", "PriorityInfo"]),
|
|
631
|
+
#
|
|
632
|
+
'IoApplyPriorityInfoThread': SimTypeFunction([SimTypePointer(SimTypeRef("IO_PRIORITY_INFO", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_PRIORITY_INFO", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["InputPriorityInfo", "OutputPriorityInfo", "Thread"]),
|
|
633
|
+
#
|
|
634
|
+
'IoGetFsTrackOffsetState': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("IO_IRP_EXT_TRACK_OFFSET_HEADER", SimStruct), offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "RetFsTrackOffsetBlob", "RetTrackedOffset"]),
|
|
635
|
+
#
|
|
636
|
+
'IoSetFsTrackOffsetState': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_IRP_EXT_TRACK_OFFSET_HEADER", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64")], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "FsTrackOffsetBlob", "TrackedOffset"]),
|
|
637
|
+
#
|
|
638
|
+
'IoClearFsTrackOffsetState': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp"]),
|
|
639
|
+
#
|
|
640
|
+
'IoIrpHasFsTrackOffsetExtensionType': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Irp"]),
|
|
641
|
+
#
|
|
642
|
+
'PoQueueShutdownWorkItem': SimTypeFunction([SimTypePointer(SimTypeRef("WORK_QUEUE_ITEM", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["WorkItem"]),
|
|
643
|
+
#
|
|
644
|
+
'MmIsRecursiveIoFault': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
645
|
+
#
|
|
646
|
+
'MmForceSectionClosed': SimTypeFunction([SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["SectionObjectPointer", "DelayClose"]),
|
|
647
|
+
#
|
|
648
|
+
'MmForceSectionClosedEx': SimTypeFunction([SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["SectionObjectPointer", "ForceCloseFlags"]),
|
|
649
|
+
#
|
|
650
|
+
'MmGetMaximumFileSectionSize': SimTypeFunction([], SimTypeLongLong(signed=False, label="UInt64")),
|
|
651
|
+
#
|
|
652
|
+
'MmFlushImageSection': SimTypeFunction([SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0), SimTypeInt(signed=False, label="MMFLUSH_TYPE")], SimTypeChar(label="Byte"), arg_names=["SectionObjectPointer", "FlushType"]),
|
|
653
|
+
#
|
|
654
|
+
'MmCanFileBeTruncated': SimTypeFunction([SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeChar(label="Byte"), arg_names=["SectionPointer", "NewFileSize"]),
|
|
655
|
+
#
|
|
656
|
+
'MmSetAddressRangeModified': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeChar(label="Byte"), arg_names=["Address", "Length"]),
|
|
657
|
+
#
|
|
658
|
+
'MmIsFileSectionActive': SimTypeFunction([SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FsSectionPointer", "Flags", "SectionIsActive"]),
|
|
659
|
+
#
|
|
660
|
+
'MmPrefetchPages': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("READ_LIST", SimStruct), offset=0), label="LPArray", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NumberOfLists", "ReadLists"]),
|
|
661
|
+
#
|
|
662
|
+
'MmDoesFileHaveUserWritableReferences': SimTypeFunction([SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["SectionPointer"]),
|
|
663
|
+
#
|
|
664
|
+
'MmMdlPagesAreZero': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Mdl"]),
|
|
665
|
+
#
|
|
666
|
+
'ObInsertObject': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("ACCESS_STATE", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "PassedAccessState", "DesiredAccess", "ObjectPointerBias", "NewObject", "Handle"]),
|
|
667
|
+
#
|
|
668
|
+
'ObOpenObjectByPointer': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("ACCESS_STATE", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="SByte"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "HandleAttributes", "PassedAccessState", "DesiredAccess", "ObjectType", "AccessMode", "Handle"]),
|
|
669
|
+
#
|
|
670
|
+
'ObOpenObjectByPointerWithTag': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("ACCESS_STATE", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="SByte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "HandleAttributes", "PassedAccessState", "DesiredAccess", "ObjectType", "AccessMode", "Tag", "Handle"]),
|
|
671
|
+
#
|
|
672
|
+
'ObMakeTemporaryObject': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Object"]),
|
|
673
|
+
#
|
|
674
|
+
'ObQueryNameString': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("OBJECT_NAME_INFORMATION", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "ObjectNameInfo", "Length", "ReturnLength"]),
|
|
675
|
+
#
|
|
676
|
+
'ObIsKernelHandle': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeChar(label="Byte"), arg_names=["Handle"]),
|
|
677
|
+
#
|
|
678
|
+
'ObQueryObjectAuditingByHandle': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "GenerateOnClose"]),
|
|
679
|
+
#
|
|
680
|
+
'IoRequestDeviceRemovalForReset': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["PhysicalDeviceObject", "Flags"]),
|
|
681
|
+
#
|
|
682
|
+
'FsRtlCopyRead': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "Wait", "LockKey", "Buffer", "IoStatus", "DeviceObject"]),
|
|
683
|
+
#
|
|
684
|
+
'FsRtlCopyWrite': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "Wait", "LockKey", "Buffer", "IoStatus", "DeviceObject"]),
|
|
685
|
+
#
|
|
686
|
+
'FsRtlMdlReadEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "FileOffset", "Length", "LockKey", "MdlChain", "IoStatus"]),
|
|
687
|
+
#
|
|
688
|
+
'FsRtlMdlReadDev': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "LockKey", "MdlChain", "IoStatus", "DeviceObject"]),
|
|
689
|
+
#
|
|
690
|
+
'FsRtlMdlReadCompleteDev': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "MdlChain", "DeviceObject"]),
|
|
691
|
+
#
|
|
692
|
+
'FsRtlPrepareMdlWriteEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "FileOffset", "Length", "LockKey", "MdlChain", "IoStatus"]),
|
|
693
|
+
#
|
|
694
|
+
'FsRtlPrepareMdlWriteDev': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "LockKey", "MdlChain", "IoStatus", "DeviceObject"]),
|
|
695
|
+
#
|
|
696
|
+
'FsRtlMdlWriteCompleteDev': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "MdlChain", "DeviceObject"]),
|
|
697
|
+
#
|
|
698
|
+
'FsRtlAcquireFileExclusive': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject"]),
|
|
699
|
+
#
|
|
700
|
+
'FsRtlReleaseFile': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject"]),
|
|
701
|
+
#
|
|
702
|
+
'FsRtlGetFileSize': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "FileSize"]),
|
|
703
|
+
#
|
|
704
|
+
'FsRtlAllocateFileLock': SimTypeFunction([SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Context", "Irp"]), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("FILE_LOCK_INFO", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "FileLockInfo"]), offset=0)], SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), arg_names=["CompleteLockIrpRoutine", "UnlockRoutine"]),
|
|
705
|
+
#
|
|
706
|
+
'FsRtlFreeFileLock': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileLock"]),
|
|
707
|
+
#
|
|
708
|
+
'FsRtlInitializeFileLock': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Context", "Irp"]), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("FILE_LOCK_INFO", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "FileLockInfo"]), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileLock", "CompleteLockIrpRoutine", "UnlockRoutine"]),
|
|
709
|
+
#
|
|
710
|
+
'FsRtlUninitializeFileLock': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileLock"]),
|
|
711
|
+
#
|
|
712
|
+
'FsRtlProcessFileLock': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileLock", "Irp", "Context"]),
|
|
713
|
+
#
|
|
714
|
+
'FsRtlCheckLockForReadAccess': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileLock", "Irp"]),
|
|
715
|
+
#
|
|
716
|
+
'FsRtlCheckLockForWriteAccess': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileLock", "Irp"]),
|
|
717
|
+
#
|
|
718
|
+
'FsRtlCheckLockForOplockRequest': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileLock", "AllocationSize"]),
|
|
719
|
+
#
|
|
720
|
+
'FsRtlFastCheckLockForRead': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileLock", "StartingByte", "Length", "Key", "FileObject", "ProcessId"]),
|
|
721
|
+
#
|
|
722
|
+
'FsRtlFastCheckLockForWrite': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileLock", "StartingByte", "Length", "Key", "FileObject", "ProcessId"]),
|
|
723
|
+
#
|
|
724
|
+
'FsRtlGetNextFileLock': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypePointer(SimTypeRef("FILE_LOCK_INFO", SimStruct), offset=0), arg_names=["FileLock", "Restart"]),
|
|
725
|
+
#
|
|
726
|
+
'FsRtlAreThereCurrentOrInProgressFileLocks': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileLock"]),
|
|
727
|
+
#
|
|
728
|
+
'FsRtlAreThereWaitingFileLocks': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileLock"]),
|
|
729
|
+
#
|
|
730
|
+
'FsRtlFastUnlockSingle': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileLock", "FileObject", "FileOffset", "Length", "ProcessId", "Key", "Context", "AlreadySynchronized"]),
|
|
731
|
+
#
|
|
732
|
+
'FsRtlFastUnlockAll': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileLock", "FileObject", "ProcessId", "Context"]),
|
|
733
|
+
#
|
|
734
|
+
'FsRtlFastUnlockAllByKey': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileLock", "FileObject", "ProcessId", "Key", "Context"]),
|
|
735
|
+
#
|
|
736
|
+
'FsRtlPrivateLock': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["FileLock", "FileObject", "FileOffset", "Length", "ProcessId", "Key", "FailImmediately", "ExclusiveLock", "Iosb", "Irp", "Context", "AlreadySynchronized"]),
|
|
737
|
+
#
|
|
738
|
+
'FsRtlInitializeTunnelCache': SimTypeFunction([SimTypePointer(SimTypeRef("TUNNEL", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Cache"]),
|
|
739
|
+
#
|
|
740
|
+
'FsRtlAddToTunnelCache': SimTypeFunction([SimTypePointer(SimTypeRef("TUNNEL", SimStruct), offset=0), SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Cache", "DirectoryKey", "ShortName", "LongName", "KeyByShortName", "DataLength", "Data"]),
|
|
741
|
+
#
|
|
742
|
+
'FsRtlFindInTunnelCache': SimTypeFunction([SimTypePointer(SimTypeRef("TUNNEL", SimStruct), offset=0), SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Cache", "DirectoryKey", "Name", "ShortName", "LongName", "DataLength", "Data"]),
|
|
743
|
+
#
|
|
744
|
+
'FsRtlAddToTunnelCacheEx': SimTypeFunction([SimTypePointer(SimTypeRef("TUNNEL", SimStruct), offset=0), SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Cache", "DirectoryKey", "ShortName", "LongName", "Flags", "DataLength", "Data"]),
|
|
745
|
+
#
|
|
746
|
+
'FsRtlFindInTunnelCacheEx': SimTypeFunction([SimTypePointer(SimTypeRef("TUNNEL", SimStruct), offset=0), SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Cache", "DirectoryKey", "Name", "ShortName", "LongName", "Flags", "DataLength", "Data"]),
|
|
747
|
+
#
|
|
748
|
+
'FsRtlDeleteKeyFromTunnelCache': SimTypeFunction([SimTypePointer(SimTypeRef("TUNNEL", SimStruct), offset=0), SimTypeLongLong(signed=False, label="UInt64")], SimTypeBottom(label="Void"), arg_names=["Cache", "DirectoryKey"]),
|
|
749
|
+
#
|
|
750
|
+
'FsRtlDeleteTunnelCache': SimTypeFunction([SimTypePointer(SimTypeRef("TUNNEL", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Cache"]),
|
|
751
|
+
#
|
|
752
|
+
'FsRtlDissectDbcs': SimTypeFunction([SimTypeRef("STRING", SimStruct), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Path", "FirstName", "RemainingName"]),
|
|
753
|
+
#
|
|
754
|
+
'FsRtlDoesDbcsContainWildCards': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Name"]),
|
|
755
|
+
#
|
|
756
|
+
'FsRtlIsDbcsInExpression': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Expression", "Name"]),
|
|
757
|
+
#
|
|
758
|
+
'FsRtlIsFatDbcsLegal': SimTypeFunction([SimTypeRef("STRING", SimStruct), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["DbcsName", "WildCardsPermissible", "PathNamePermissible", "LeadingBackslashPermissible"]),
|
|
759
|
+
#
|
|
760
|
+
'FsRtlIsHpfsDbcsLegal': SimTypeFunction([SimTypeRef("STRING", SimStruct), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["DbcsName", "WildCardsPermissible", "PathNamePermissible", "LeadingBackslashPermissible"]),
|
|
761
|
+
#
|
|
762
|
+
'FsRtlNormalizeNtstatus': SimTypeFunction([SimTypeInt(signed=True, label="Int32"), SimTypeInt(signed=True, label="Int32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Exception", "GenericException"]),
|
|
763
|
+
#
|
|
764
|
+
'FsRtlIsNtstatusExpected': SimTypeFunction([SimTypeInt(signed=True, label="Int32")], SimTypeChar(label="Byte"), arg_names=["Exception"]),
|
|
765
|
+
#
|
|
766
|
+
'FsRtlAllocateResource': SimTypeFunction([], SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)),
|
|
767
|
+
#
|
|
768
|
+
'FsRtlInitializeLargeMcb': SimTypeFunction([SimTypePointer(SimTypeRef("LARGE_MCB", SimStruct), offset=0), SimTypeInt(signed=False, label="POOL_TYPE")], SimTypeBottom(label="Void"), arg_names=["Mcb", "PoolType"]),
|
|
769
|
+
#
|
|
770
|
+
'FsRtlUninitializeLargeMcb': SimTypeFunction([SimTypePointer(SimTypeRef("LARGE_MCB", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Mcb"]),
|
|
771
|
+
#
|
|
772
|
+
'FsRtlResetLargeMcb': SimTypeFunction([SimTypePointer(SimTypeRef("LARGE_MCB", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["Mcb", "SelfSynchronized"]),
|
|
773
|
+
#
|
|
774
|
+
'FsRtlTruncateLargeMcb': SimTypeFunction([SimTypePointer(SimTypeRef("LARGE_MCB", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64")], SimTypeBottom(label="Void"), arg_names=["Mcb", "Vbn"]),
|
|
775
|
+
#
|
|
776
|
+
'FsRtlAddLargeMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("LARGE_MCB", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64")], SimTypeChar(label="Byte"), arg_names=["Mcb", "Vbn", "Lbn", "SectorCount"]),
|
|
777
|
+
#
|
|
778
|
+
'FsRtlRemoveLargeMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("LARGE_MCB", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64")], SimTypeBottom(label="Void"), arg_names=["Mcb", "Vbn", "SectorCount"]),
|
|
779
|
+
#
|
|
780
|
+
'FsRtlLookupLargeMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("LARGE_MCB", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Mcb", "Vbn", "Lbn", "SectorCountFromLbn", "StartingLbn", "SectorCountFromStartingLbn", "Index"]),
|
|
781
|
+
#
|
|
782
|
+
'FsRtlLookupLastLargeMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("LARGE_MCB", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Mcb", "Vbn", "Lbn"]),
|
|
783
|
+
#
|
|
784
|
+
'FsRtlLookupLastLargeMcbEntryAndIndex': SimTypeFunction([SimTypePointer(SimTypeRef("LARGE_MCB", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["OpaqueMcb", "LargeVbn", "LargeLbn", "Index"]),
|
|
785
|
+
#
|
|
786
|
+
'FsRtlNumberOfRunsInLargeMcb': SimTypeFunction([SimTypePointer(SimTypeRef("LARGE_MCB", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Mcb"]),
|
|
787
|
+
#
|
|
788
|
+
'FsRtlGetNextLargeMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("LARGE_MCB", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Mcb", "RunIndex", "Vbn", "Lbn", "SectorCount"]),
|
|
789
|
+
#
|
|
790
|
+
'FsRtlSplitLargeMcb': SimTypeFunction([SimTypePointer(SimTypeRef("LARGE_MCB", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64")], SimTypeChar(label="Byte"), arg_names=["Mcb", "Vbn", "Amount"]),
|
|
791
|
+
#
|
|
792
|
+
'FsRtlInitializeBaseMcb': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0), SimTypeInt(signed=False, label="POOL_TYPE")], SimTypeBottom(label="Void"), arg_names=["Mcb", "PoolType"]),
|
|
793
|
+
#
|
|
794
|
+
'FsRtlInitializeBaseMcbEx': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0), SimTypeInt(signed=False, label="POOL_TYPE"), SimTypeShort(signed=False, label="UInt16")], SimTypeChar(label="Byte"), arg_names=["Mcb", "PoolType", "Flags"]),
|
|
795
|
+
#
|
|
796
|
+
'FsRtlUninitializeBaseMcb': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Mcb"]),
|
|
797
|
+
#
|
|
798
|
+
'FsRtlResetBaseMcb': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Mcb"]),
|
|
799
|
+
#
|
|
800
|
+
'FsRtlTruncateBaseMcb': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64")], SimTypeBottom(label="Void"), arg_names=["Mcb", "Vbn"]),
|
|
801
|
+
#
|
|
802
|
+
'FsRtlAddBaseMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64")], SimTypeChar(label="Byte"), arg_names=["Mcb", "Vbn", "Lbn", "SectorCount"]),
|
|
803
|
+
#
|
|
804
|
+
'FsRtlAddBaseMcbEntryEx': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64")], SimTypeInt(signed=True, label="Int32"), arg_names=["Mcb", "Vbn", "Lbn", "SectorCount"]),
|
|
805
|
+
#
|
|
806
|
+
'FsRtlRemoveBaseMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64")], SimTypeChar(label="Byte"), arg_names=["Mcb", "Vbn", "SectorCount"]),
|
|
807
|
+
#
|
|
808
|
+
'FsRtlLookupBaseMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Mcb", "Vbn", "Lbn", "SectorCountFromLbn", "StartingLbn", "SectorCountFromStartingLbn", "Index"]),
|
|
809
|
+
#
|
|
810
|
+
'FsRtlLookupLastBaseMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Mcb", "Vbn", "Lbn"]),
|
|
811
|
+
#
|
|
812
|
+
'FsRtlLookupLastBaseMcbEntryAndIndex': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["OpaqueMcb", "LargeVbn", "LargeLbn", "Index"]),
|
|
813
|
+
#
|
|
814
|
+
'FsRtlNumberOfRunsInBaseMcb': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Mcb"]),
|
|
815
|
+
#
|
|
816
|
+
'FsRtlGetNextBaseMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Mcb", "RunIndex", "Vbn", "Lbn", "SectorCount"]),
|
|
817
|
+
#
|
|
818
|
+
'FsRtlSplitBaseMcb': SimTypeFunction([SimTypePointer(SimTypeRef("BASE_MCB", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64")], SimTypeChar(label="Byte"), arg_names=["Mcb", "Vbn", "Amount"]),
|
|
819
|
+
#
|
|
820
|
+
'FsRtlInitializeMcb': SimTypeFunction([SimTypePointer(SimTypeRef("MCB", SimStruct), offset=0), SimTypeInt(signed=False, label="POOL_TYPE")], SimTypeBottom(label="Void"), arg_names=["Mcb", "PoolType"]),
|
|
821
|
+
#
|
|
822
|
+
'FsRtlUninitializeMcb': SimTypeFunction([SimTypePointer(SimTypeRef("MCB", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Mcb"]),
|
|
823
|
+
#
|
|
824
|
+
'FsRtlTruncateMcb': SimTypeFunction([SimTypePointer(SimTypeRef("MCB", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Mcb", "Vbn"]),
|
|
825
|
+
#
|
|
826
|
+
'FsRtlAddMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("MCB", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["Mcb", "Vbn", "Lbn", "SectorCount"]),
|
|
827
|
+
#
|
|
828
|
+
'FsRtlRemoveMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("MCB", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Mcb", "Vbn", "SectorCount"]),
|
|
829
|
+
#
|
|
830
|
+
'FsRtlLookupMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("MCB", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Mcb", "Vbn", "Lbn", "SectorCount", "Index"]),
|
|
831
|
+
#
|
|
832
|
+
'FsRtlLookupLastMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("MCB", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Mcb", "Vbn", "Lbn"]),
|
|
833
|
+
#
|
|
834
|
+
'FsRtlNumberOfRunsInMcb': SimTypeFunction([SimTypePointer(SimTypeRef("MCB", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Mcb"]),
|
|
835
|
+
#
|
|
836
|
+
'FsRtlGetNextMcbEntry': SimTypeFunction([SimTypePointer(SimTypeRef("MCB", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Mcb", "RunIndex", "Vbn", "Lbn", "SectorCount"]),
|
|
837
|
+
#
|
|
838
|
+
'FsRtlBalanceReads': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TargetDevice"]),
|
|
839
|
+
#
|
|
840
|
+
'FsRtlInitializeOplock': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["Oplock"]),
|
|
841
|
+
#
|
|
842
|
+
'FsRtlUninitializeOplock': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["Oplock"]),
|
|
843
|
+
#
|
|
844
|
+
'FsRtlOplockFsctrl': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Oplock", "Irp", "OpenCount"]),
|
|
845
|
+
#
|
|
846
|
+
'FsRtlCheckOplock': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Oplock", "Irp", "Context", "CompletionRoutine", "PostIrpRoutine"]),
|
|
847
|
+
#
|
|
848
|
+
'FsRtlCheckOplockEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Oplock", "Irp", "Flags", "Context", "CompletionRoutine", "PostIrpRoutine"]),
|
|
849
|
+
#
|
|
850
|
+
'FsRtlCheckUpperOplock': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Oplock", "NewLowerOplockState", "CompletionRoutineContext", "CompletionRoutine", "PrePendRoutine", "Flags"]),
|
|
851
|
+
#
|
|
852
|
+
'FsRtlUpperOplockFsctrl': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Oplock", "Irp", "OpenCount", "LowerOplockState", "Flags"]),
|
|
853
|
+
#
|
|
854
|
+
'FsRtlOplockIsFastIoPossible': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["Oplock"]),
|
|
855
|
+
#
|
|
856
|
+
'FsRtlCurrentBatchOplock': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["Oplock"]),
|
|
857
|
+
#
|
|
858
|
+
'FsRtlCurrentOplock': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["Oplock"]),
|
|
859
|
+
#
|
|
860
|
+
'FsRtlOplockBreakToNone': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("IO_STACK_LOCATION", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Oplock", "IrpSp", "Irp", "Context", "CompletionRoutine", "PostIrpRoutine"]),
|
|
861
|
+
#
|
|
862
|
+
'FsRtlOplockIsSharedRequest': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Irp"]),
|
|
863
|
+
#
|
|
864
|
+
'FsRtlOplockBreakH': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Oplock", "Irp", "Flags", "Context", "CompletionRoutine", "PostIrpRoutine"]),
|
|
865
|
+
#
|
|
866
|
+
'FsRtlOplockBreakH2': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Oplock", "Irp", "Flags", "Context", "CompletionRoutine", "PostIrpRoutine", "GrantedAccess", "ShareAccess"]),
|
|
867
|
+
#
|
|
868
|
+
'FsRtlCurrentOplockH': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["Oplock"]),
|
|
869
|
+
#
|
|
870
|
+
'FsRtlOplockBreakToNoneEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Oplock", "Irp", "Flags", "Context", "CompletionRoutine", "PostIrpRoutine"]),
|
|
871
|
+
#
|
|
872
|
+
'FsRtlOplockFsctrlEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Oplock", "Irp", "OpenCount", "Flags"]),
|
|
873
|
+
#
|
|
874
|
+
'FsRtlOplockKeysEqual': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Fo1", "Fo2"]),
|
|
875
|
+
#
|
|
876
|
+
'FsRtlNotifyVolumeEvent': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "EventCode"]),
|
|
877
|
+
#
|
|
878
|
+
'FsRtlNotifyVolumeEventEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("TARGET_DEVICE_CUSTOM_NOTIFICATION", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "EventCode", "Event"]),
|
|
879
|
+
#
|
|
880
|
+
'FsRtlNotifyInitializeSync': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["NotifySync"]),
|
|
881
|
+
#
|
|
882
|
+
'FsRtlNotifyUninitializeSync': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["NotifySync"]),
|
|
883
|
+
#
|
|
884
|
+
'FsRtlNotifyFullChangeDirectory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("LIST_ENTRY", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["NotifyContext", "TargetContext", "SubjectContext"]), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["NotifySync", "NotifyList", "FsContext", "FullDirectoryName", "WatchTree", "IgnoreBuffer", "CompletionFilter", "NotifyIrp", "TraverseCallback", "SubjectContext"]),
|
|
885
|
+
#
|
|
886
|
+
'FsRtlNotifyFilterChangeDirectory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("LIST_ENTRY", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["NotifyContext", "TargetContext", "SubjectContext"]), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["NotifyContext", "FilterContext"]), offset=0)], SimTypeBottom(label="Void"), arg_names=["NotifySync", "NotifyList", "FsContext", "FullDirectoryName", "WatchTree", "IgnoreBuffer", "CompletionFilter", "NotifyIrp", "TraverseCallback", "SubjectContext", "FilterCallback"]),
|
|
887
|
+
#
|
|
888
|
+
'FsRtlNotifyFilterReportChange': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("LIST_ENTRY", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["NotifySync", "NotifyList", "FullTargetName", "TargetNameOffset", "StreamName", "NormalizedParentName", "FilterMatch", "Action", "TargetContext", "FilterContext"]),
|
|
889
|
+
#
|
|
890
|
+
'FsRtlNotifyFullReportChange': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("LIST_ENTRY", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["NotifySync", "NotifyList", "FullTargetName", "TargetNameOffset", "StreamName", "NormalizedParentName", "FilterMatch", "Action", "TargetContext"]),
|
|
891
|
+
#
|
|
892
|
+
'FsRtlNotifyCleanup': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("LIST_ENTRY", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["NotifySync", "NotifyList", "FsContext"]),
|
|
893
|
+
#
|
|
894
|
+
'FsRtlNotifyCleanupAll': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("LIST_ENTRY", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["NotifySync", "NotifyList"]),
|
|
895
|
+
#
|
|
896
|
+
'FsRtlDissectName': SimTypeFunction([SimTypeRef("UNICODE_STRING", SimStruct), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Path", "FirstName", "RemainingName"]),
|
|
897
|
+
#
|
|
898
|
+
'FsRtlDoesNameContainWildCards': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Name"]),
|
|
899
|
+
#
|
|
900
|
+
'FsRtlAreNamesEqual': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0)], SimTypeChar(label="Byte"), arg_names=["ConstantNameA", "ConstantNameB", "IgnoreCase", "UpcaseTable"]),
|
|
901
|
+
#
|
|
902
|
+
'FsRtlIsNameInExpression': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeChar(label="Char"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Expression", "Name", "IgnoreCase", "UpcaseTable"]),
|
|
903
|
+
#
|
|
904
|
+
'FsRtlIsNameInUnUpcasedExpression': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeChar(label="Char"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Expression", "Name", "IgnoreCase", "UpcaseTable"]),
|
|
905
|
+
#
|
|
906
|
+
'FsRtlPostStackOverflow': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Event"]), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Event", "StackOverflowRoutine"]),
|
|
907
|
+
#
|
|
908
|
+
'FsRtlPostPagingFileStackOverflow': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Event"]), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Event", "StackOverflowRoutine"]),
|
|
909
|
+
#
|
|
910
|
+
'FsRtlRegisterUncProvider': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["MupHandle", "RedirectorDeviceName", "MailslotsSupported"]),
|
|
911
|
+
#
|
|
912
|
+
'FsRtlRegisterUncProviderEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["MupHandle", "RedirDevName", "DeviceObject", "Flags"]),
|
|
913
|
+
#
|
|
914
|
+
'FsRtlRegisterUncProviderEx2': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("FSRTL_UNC_PROVIDER_REGISTRATION", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RedirDevName", "DeviceObject", "Registration", "MupHandle"]),
|
|
915
|
+
#
|
|
916
|
+
'FsRtlDeregisterUncProvider': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Handle"]),
|
|
917
|
+
#
|
|
918
|
+
'FsRtlCancellableWaitForSingleObject': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "Timeout", "Irp"]),
|
|
919
|
+
#
|
|
920
|
+
'FsRtlCancellableWaitForMultipleObjects': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), label="LPArray", offset=0), SimTypeInt(signed=False, label="WAIT_TYPE"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("KWAIT_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Count", "ObjectArray", "WaitType", "Timeout", "WaitBlockArray", "Irp"]),
|
|
921
|
+
#
|
|
922
|
+
'FsRtlMupGetProviderInfoFromFileObject': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["pFileObject", "Level", "pBuffer", "pBufferSize"]),
|
|
923
|
+
#
|
|
924
|
+
'FsRtlMupGetProviderIdFromName': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["pProviderName", "pProviderId"]),
|
|
925
|
+
#
|
|
926
|
+
'FsRtlInsertPerFileContext': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("FSRTL_PER_FILE_CONTEXT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PerFileContextPointer", "Ptr"]),
|
|
927
|
+
#
|
|
928
|
+
'FsRtlLookupPerFileContext': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeRef("FSRTL_PER_FILE_CONTEXT", SimStruct), offset=0), arg_names=["PerFileContextPointer", "OwnerId", "InstanceId"]),
|
|
929
|
+
#
|
|
930
|
+
'FsRtlRemovePerFileContext': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeRef("FSRTL_PER_FILE_CONTEXT", SimStruct), offset=0), arg_names=["PerFileContextPointer", "OwnerId", "InstanceId"]),
|
|
931
|
+
#
|
|
932
|
+
'FsRtlTeardownPerFileContexts': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["PerFileContextPointer"]),
|
|
933
|
+
#
|
|
934
|
+
'FsRtlInsertPerStreamContext': SimTypeFunction([SimTypePointer(SimTypeRef("FSRTL_ADVANCED_FCB_HEADER", SimStruct), offset=0), SimTypePointer(SimTypeRef("FSRTL_PER_STREAM_CONTEXT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PerStreamContext", "Ptr"]),
|
|
935
|
+
#
|
|
936
|
+
'FsRtlLookupPerStreamContextInternal': SimTypeFunction([SimTypePointer(SimTypeRef("FSRTL_ADVANCED_FCB_HEADER", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeRef("FSRTL_PER_STREAM_CONTEXT", SimStruct), offset=0), arg_names=["StreamContext", "OwnerId", "InstanceId"]),
|
|
937
|
+
#
|
|
938
|
+
'FsRtlRemovePerStreamContext': SimTypeFunction([SimTypePointer(SimTypeRef("FSRTL_ADVANCED_FCB_HEADER", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeRef("FSRTL_PER_STREAM_CONTEXT", SimStruct), offset=0), arg_names=["StreamContext", "OwnerId", "InstanceId"]),
|
|
939
|
+
#
|
|
940
|
+
'FsRtlAllocateAePushLock': SimTypeFunction([SimTypeInt(signed=False, label="POOL_TYPE"), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["PoolType", "Tag"]),
|
|
941
|
+
#
|
|
942
|
+
'FsRtlFreeAePushLock': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["AePushLock"]),
|
|
943
|
+
#
|
|
944
|
+
'FsRtlTeardownPerStreamContexts': SimTypeFunction([SimTypePointer(SimTypeRef("FSRTL_ADVANCED_FCB_HEADER", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["AdvancedHeader"]),
|
|
945
|
+
#
|
|
946
|
+
'FsRtlInsertPerFileObjectContext': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("FSRTL_PER_FILEOBJECT_CONTEXT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "Ptr"]),
|
|
947
|
+
#
|
|
948
|
+
'FsRtlLookupPerFileObjectContext': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeRef("FSRTL_PER_FILEOBJECT_CONTEXT", SimStruct), offset=0), arg_names=["FileObject", "OwnerId", "InstanceId"]),
|
|
949
|
+
#
|
|
950
|
+
'FsRtlRemovePerFileObjectContext': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeRef("FSRTL_PER_FILEOBJECT_CONTEXT", SimStruct), offset=0), arg_names=["FileObject", "OwnerId", "InstanceId"]),
|
|
951
|
+
#
|
|
952
|
+
'FsRtlIncrementCcFastReadNotPossible': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
953
|
+
#
|
|
954
|
+
'FsRtlIncrementCcFastReadWait': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
955
|
+
#
|
|
956
|
+
'FsRtlIncrementCcFastReadNoWait': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
957
|
+
#
|
|
958
|
+
'FsRtlIncrementCcFastReadResourceMiss': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
959
|
+
#
|
|
960
|
+
'FsRtlIncrementCcFastMdlReadWait': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
961
|
+
#
|
|
962
|
+
'FsRtlIsPagingFile': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["FileObject"]),
|
|
963
|
+
#
|
|
964
|
+
'FsRtlIsSystemPagingFile': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["FileObject"]),
|
|
965
|
+
#
|
|
966
|
+
'FsRtlCreateSectionForDataScan': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["SectionHandle", "SectionObject", "SectionFileSize", "FileObject", "DesiredAccess", "ObjectAttributes", "MaximumSize", "SectionPageProtection", "AllocationAttributes", "Flags"]),
|
|
967
|
+
#
|
|
968
|
+
'FsRtlValidateReparsePointBuffer': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("REPARSE_DATA_BUFFER", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["BufferLength", "ReparseBuffer"]),
|
|
969
|
+
#
|
|
970
|
+
'FsRtlRemoveDotsFromPath': SimTypeFunction([SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["OriginalString", "PathLength", "NewLength"]),
|
|
971
|
+
#
|
|
972
|
+
'FsRtlIsNonEmptyDirectoryReparsePointAllowed': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["ReparseTag"]),
|
|
973
|
+
#
|
|
974
|
+
'FsRtlAllocateExtraCreateParameterList': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Flags", "EcpList"]),
|
|
975
|
+
#
|
|
976
|
+
'FsRtlFreeExtraCreateParameterList': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["EcpList"]),
|
|
977
|
+
#
|
|
978
|
+
'FsRtlInitializeExtraCreateParameterList': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EcpList"]),
|
|
979
|
+
#
|
|
980
|
+
'FsRtlAllocateExtraCreateParameter': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeBottom(label="Void"), arg_names=["EcpContext", "EcpType"]), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EcpType", "SizeOfContext", "Flags", "CleanupCallback", "PoolTag", "EcpContext"]),
|
|
981
|
+
#
|
|
982
|
+
'FsRtlFreeExtraCreateParameter': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["EcpContext"]),
|
|
983
|
+
#
|
|
984
|
+
'FsRtlInitializeExtraCreateParameter': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeBottom(label="Void"), arg_names=["EcpContext", "EcpType"]), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Ecp", "EcpFlags", "CleanupCallback", "TotalSize", "EcpType", "ListAllocatedFrom"]),
|
|
985
|
+
#
|
|
986
|
+
'FsRtlInitExtraCreateParameterLookasideList': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Lookaside", "Flags", "Size", "Tag"]),
|
|
987
|
+
#
|
|
988
|
+
'FsRtlDeleteExtraCreateParameterLookasideList': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Lookaside", "Flags"]),
|
|
989
|
+
#
|
|
990
|
+
'FsRtlAllocateExtraCreateParameterFromLookasideList': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeBottom(label="Void"), arg_names=["EcpContext", "EcpType"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EcpType", "SizeOfContext", "Flags", "CleanupCallback", "LookasideList", "EcpContext"]),
|
|
991
|
+
#
|
|
992
|
+
'FsRtlInsertExtraCreateParameter': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EcpList", "EcpContext"]),
|
|
993
|
+
#
|
|
994
|
+
'FsRtlFindExtraCreateParameter': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EcpList", "EcpType", "EcpContext", "EcpContextSize"]),
|
|
995
|
+
#
|
|
996
|
+
'FsRtlRemoveExtraCreateParameter': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EcpList", "EcpType", "EcpContext", "EcpContextSize"]),
|
|
997
|
+
#
|
|
998
|
+
'FsRtlGetEcpListFromIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "EcpList"]),
|
|
999
|
+
#
|
|
1000
|
+
'FsRtlSetEcpListIntoIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "EcpList"]),
|
|
1001
|
+
#
|
|
1002
|
+
'FsRtlGetNextExtraCreateParameter': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EcpList", "CurrentEcpContext", "NextEcpType", "NextEcpContext", "NextEcpContextSize"]),
|
|
1003
|
+
#
|
|
1004
|
+
'FsRtlAcknowledgeEcp': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["EcpContext"]),
|
|
1005
|
+
#
|
|
1006
|
+
'FsRtlPrepareToReuseEcp': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["EcpContext"]),
|
|
1007
|
+
#
|
|
1008
|
+
'FsRtlIsEcpAcknowledged': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["EcpContext"]),
|
|
1009
|
+
#
|
|
1010
|
+
'FsRtlIsEcpFromUserMode': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["EcpContext"]),
|
|
1011
|
+
#
|
|
1012
|
+
'FsRtlOplockGetAnyBreakOwnerProcess': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Oplock"]),
|
|
1013
|
+
#
|
|
1014
|
+
'FsRtlCheckOplockEx2': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context", "Irp"]), offset=0), SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("OPLOCK_NOTIFY_PARAMS", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NotifyParams"]), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Oplock", "Irp", "Flags", "FlagsEx2", "CompletionRoutineContext", "CompletionRoutine", "PostIrpRoutine", "Timeout", "NotifyContext", "NotifyRoutine"]),
|
|
1015
|
+
#
|
|
1016
|
+
'FsRtlGetCurrentProcessLoaderList': SimTypeFunction([], SimTypePointer(SimTypeRef("LIST_ENTRY", SimStruct), offset=0)),
|
|
1017
|
+
#
|
|
1018
|
+
'FsRtlIs32BitProcess': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeChar(label="Byte"), arg_names=["Process"]),
|
|
1019
|
+
#
|
|
1020
|
+
'FsRtlChangeBackingFileObject': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="FSRTL_CHANGE_BACKING_TYPE"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["CurrentFileObject", "NewFileObject", "ChangeBackingType", "Flags"]),
|
|
1021
|
+
#
|
|
1022
|
+
'FsRtlLogCcFlushError': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0), SimTypeInt(signed=True, label="Int32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileName", "DeviceObject", "SectionObjectPointer", "FlushError", "Flags"]),
|
|
1023
|
+
#
|
|
1024
|
+
'FsRtlAreVolumeStartupApplicationsComplete': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
1025
|
+
#
|
|
1026
|
+
'FsRtlQueryMaximumVirtualDiskNestingLevel': SimTypeFunction([], SimTypeInt(signed=False, label="UInt32")),
|
|
1027
|
+
#
|
|
1028
|
+
'FsRtlGetVirtualDiskNestingLevel': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "NestingLevel", "NestingFlags"]),
|
|
1029
|
+
#
|
|
1030
|
+
'FsRtlVolumeDeviceToCorrelationId': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["VolumeDeviceObject", "Guid"]),
|
|
1031
|
+
#
|
|
1032
|
+
'FsRtlIssueDeviceIoControl': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "IoCtl", "Flags", "InputBuffer", "InputBufferLength", "OutputBuffer", "OutputBufferLength", "IosbInformation"]),
|
|
1033
|
+
#
|
|
1034
|
+
'FsRtlGetSectorSizeInformation': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("FILE_FS_SECTOR_SIZE_INFORMATION", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "SectorSizeInfo"]),
|
|
1035
|
+
#
|
|
1036
|
+
'FsRtlGetSupportedFeatures': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "SupportedFeatures"]),
|
|
1037
|
+
#
|
|
1038
|
+
'FsRtlKernelFsControlFile': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "FsControlCode", "InputBuffer", "InputBufferLength", "OutputBuffer", "OutputBufferLength", "RetOutputBufferSize"]),
|
|
1039
|
+
#
|
|
1040
|
+
'FsRtlQueryKernelEaFile': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "ReturnedEaData", "Length", "ReturnSingleEntry", "EaList", "EaListLength", "EaIndex", "RestartScan", "LengthReturned"]),
|
|
1041
|
+
#
|
|
1042
|
+
'FsRtlSetKernelEaFile': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "EaBuffer", "Length"]),
|
|
1043
|
+
#
|
|
1044
|
+
'FsRtlQueryInformationFile': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "FileInformation", "Length", "FileInformationClass", "RetFileInformationSize"]),
|
|
1045
|
+
#
|
|
1046
|
+
'FsRtlQueryCachedVdl': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "Vdl"]),
|
|
1047
|
+
#
|
|
1048
|
+
'FsRtlUpdateDiskCounters': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypeLongLong(signed=False, label="UInt64")], SimTypeBottom(label="Void"), arg_names=["BytesRead", "BytesWritten"]),
|
|
1049
|
+
#
|
|
1050
|
+
'FsRtlDismountComplete': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=True, label="Int32")], SimTypeBottom(label="Void"), arg_names=["DeviceObject", "DismountStatus"]),
|
|
1051
|
+
#
|
|
1052
|
+
'FsRtlSetDriverBacking': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObj", "Flags"]),
|
|
1053
|
+
#
|
|
1054
|
+
'FsRtlIsMobileOS': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
1055
|
+
#
|
|
1056
|
+
'FsRtlIsExtentDangling': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["StartPage", "NumberOfPages", "Flags"]),
|
|
1057
|
+
#
|
|
1058
|
+
'FsRtlIsDaxVolume': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject"]),
|
|
1059
|
+
#
|
|
1060
|
+
'CcInitializeCacheMap': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("CC_FILE_SIZES", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("CACHE_MANAGER_CALLBACKS", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "FileSizes", "PinAccess", "Callbacks", "LazyWriteContext"]),
|
|
1061
|
+
#
|
|
1062
|
+
'CcUninitializeCacheMap': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("CACHE_UNINITIALIZE_EVENT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "TruncateSize", "UninitializeEvent"]),
|
|
1063
|
+
#
|
|
1064
|
+
'CcSetFileSizes': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("CC_FILE_SIZES", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "FileSizes"]),
|
|
1065
|
+
#
|
|
1066
|
+
'CcSetFileSizesEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("CC_FILE_SIZES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "FileSizes"]),
|
|
1067
|
+
#
|
|
1068
|
+
'CcPurgeCacheSection': SimTypeFunction([SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["SectionObjectPointer", "FileOffset", "Length", "Flags"]),
|
|
1069
|
+
#
|
|
1070
|
+
'CcCoherencyFlushAndPurgeCache': SimTypeFunction([SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["SectionObjectPointer", "FileOffset", "Length", "IoStatus", "Flags"]),
|
|
1071
|
+
#
|
|
1072
|
+
'CcSetDirtyPageThreshold': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["FileObject", "DirtyPageThreshold"]),
|
|
1073
|
+
#
|
|
1074
|
+
'CcFlushCache': SimTypeFunction([SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["SectionObjectPointer", "FileOffset", "Length", "IoStatus"]),
|
|
1075
|
+
#
|
|
1076
|
+
'CcGetFlushedValidData': SimTypeFunction([SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeLongLong(signed=True, label="Int64"), arg_names=["SectionObjectPointer", "BcbListHeld"]),
|
|
1077
|
+
#
|
|
1078
|
+
'CcZeroData': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["FileObject", "StartOffset", "EndOffset", "Wait"]),
|
|
1079
|
+
#
|
|
1080
|
+
'CcRemapBcb': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Bcb"]),
|
|
1081
|
+
#
|
|
1082
|
+
'CcRepinBcb': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Bcb"]),
|
|
1083
|
+
#
|
|
1084
|
+
'CcUnpinRepinnedBcb': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Bcb", "WriteThrough", "IoStatus"]),
|
|
1085
|
+
#
|
|
1086
|
+
'CcGetFileObjectFromSectionPtrs': SimTypeFunction([SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0)], SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), arg_names=["SectionObjectPointer"]),
|
|
1087
|
+
#
|
|
1088
|
+
'CcGetFileObjectFromSectionPtrsRef': SimTypeFunction([SimTypePointer(SimTypeRef("SECTION_OBJECT_POINTERS", SimStruct), offset=0)], SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), arg_names=["SectionObjectPointer"]),
|
|
1089
|
+
#
|
|
1090
|
+
'CcGetFileObjectFromBcb': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), arg_names=["Bcb"]),
|
|
1091
|
+
#
|
|
1092
|
+
'CcCopyWriteWontFlush': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length"]),
|
|
1093
|
+
#
|
|
1094
|
+
'CcCanIWrite': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["FileObject", "BytesToWrite", "Wait", "Retrying"]),
|
|
1095
|
+
#
|
|
1096
|
+
'CcDeferWrite': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Context1", "Context2"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["FileObject", "PostRoutine", "Context1", "Context2", "BytesToWrite", "Retrying"]),
|
|
1097
|
+
#
|
|
1098
|
+
'CcCopyRead': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "Wait", "Buffer", "IoStatus"]),
|
|
1099
|
+
#
|
|
1100
|
+
'CcFastCopyRead': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "FileOffset", "Length", "PageCount", "Buffer", "IoStatus"]),
|
|
1101
|
+
#
|
|
1102
|
+
'CcCopyWrite': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "Wait", "Buffer"]),
|
|
1103
|
+
#
|
|
1104
|
+
'CcFastCopyWrite': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "FileOffset", "Length", "Buffer"]),
|
|
1105
|
+
#
|
|
1106
|
+
'CcMdlRead': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "FileOffset", "Length", "MdlChain", "IoStatus"]),
|
|
1107
|
+
#
|
|
1108
|
+
'CcMdlReadComplete': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "MdlChain"]),
|
|
1109
|
+
#
|
|
1110
|
+
'CcPrepareMdlWrite': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "FileOffset", "Length", "MdlChain", "IoStatus"]),
|
|
1111
|
+
#
|
|
1112
|
+
'CcMdlWriteComplete': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "FileOffset", "MdlChain"]),
|
|
1113
|
+
#
|
|
1114
|
+
'CcMdlWriteAbort': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "MdlChain"]),
|
|
1115
|
+
#
|
|
1116
|
+
'CcScheduleReadAhead': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["FileObject", "FileOffset", "Length"]),
|
|
1117
|
+
#
|
|
1118
|
+
'CcWaitForCurrentLazyWriterActivity': SimTypeFunction([], SimTypeInt(signed=True, label="Int32")),
|
|
1119
|
+
#
|
|
1120
|
+
'CcSetReadAheadGranularity': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["FileObject", "Granularity"]),
|
|
1121
|
+
#
|
|
1122
|
+
'CcCopyWriteEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "Wait", "Buffer", "IoIssuerThread"]),
|
|
1123
|
+
#
|
|
1124
|
+
'CcCopyReadEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "Wait", "Buffer", "IoStatus", "IoIssuerThread"]),
|
|
1125
|
+
#
|
|
1126
|
+
'CcAsyncCopyRead': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("CC_ASYNC_READ_CONTEXT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "Wait", "Buffer", "IoStatus", "IoIssuerThread", "AsyncReadContext"]),
|
|
1127
|
+
#
|
|
1128
|
+
'CcScheduleReadAheadEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "FileOffset", "Length", "IoIssuerThread"]),
|
|
1129
|
+
#
|
|
1130
|
+
'CcInitializeCacheMapEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("CC_FILE_SIZES", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("CACHE_MANAGER_CALLBACKS", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["FileObject", "FileSizes", "PinAccess", "Callbacks", "LazyWriteContext", "Flags"]),
|
|
1131
|
+
#
|
|
1132
|
+
'CcPinRead': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "Flags", "Bcb", "Buffer"]),
|
|
1133
|
+
#
|
|
1134
|
+
'CcMapData': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "Flags", "Bcb", "Buffer"]),
|
|
1135
|
+
#
|
|
1136
|
+
'CcPinMappedData': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "Flags", "Bcb"]),
|
|
1137
|
+
#
|
|
1138
|
+
'CcPreparePinWrite': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject", "FileOffset", "Length", "Zero", "Flags", "Bcb", "Buffer"]),
|
|
1139
|
+
#
|
|
1140
|
+
'CcSetDirtyPinnedData': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeBottom(label="Void"), arg_names=["BcbVoid", "Lsn"]),
|
|
1141
|
+
#
|
|
1142
|
+
'CcUnpinData': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Bcb"]),
|
|
1143
|
+
#
|
|
1144
|
+
'CcSetBcbOwnerPointer': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Bcb", "OwnerPointer"]),
|
|
1145
|
+
#
|
|
1146
|
+
'CcUnpinDataForThread': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Bcb", "ResourceThreadId"]),
|
|
1147
|
+
#
|
|
1148
|
+
'CcSetAdditionalCacheAttributes': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["FileObject", "DisableReadAhead", "DisableWriteBehind"]),
|
|
1149
|
+
#
|
|
1150
|
+
'CcSetAdditionalCacheAttributesEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["FileObject", "Flags"]),
|
|
1151
|
+
#
|
|
1152
|
+
'CcSetParallelFlushFile': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["FileObject", "EnableParallelFlush"]),
|
|
1153
|
+
#
|
|
1154
|
+
'CcSetLogHandleForFile': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeLongLong(signed=True, label="Int64")], SimTypeBottom(label="Void"), arg_names=["LogHandle", "Lsn"]), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "LogHandle", "FlushToLsnRoutine"]),
|
|
1155
|
+
#
|
|
1156
|
+
'CcGetDirtyPages': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "FileOffset", "Length", "OldestLsn", "NewestLsn", "Context1", "Context2"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeLongLong(signed=True, label="Int64"), arg_names=["LogHandle", "DirtyPageRoutine", "Context1", "Context2"]),
|
|
1157
|
+
#
|
|
1158
|
+
'CcIsThereDirtyData': SimTypeFunction([SimTypePointer(SimTypeRef("VPB", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Vpb"]),
|
|
1159
|
+
#
|
|
1160
|
+
'CcIsThereDirtyDataEx': SimTypeFunction([SimTypePointer(SimTypeRef("VPB", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Vpb", "NumberOfDirtyPages"]),
|
|
1161
|
+
#
|
|
1162
|
+
'CcIsCacheManagerCallbackNeeded': SimTypeFunction([SimTypeInt(signed=True, label="Int32")], SimTypeChar(label="Byte"), arg_names=["Status"]),
|
|
1163
|
+
#
|
|
1164
|
+
'CcErrorCallbackRoutine': SimTypeFunction([SimTypePointer(SimTypeRef("CC_ERROR_CALLBACK_CONTEXT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Context"]),
|
|
1165
|
+
#
|
|
1166
|
+
'ZwQueryObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="OBJECT_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "ObjectInformationClass", "ObjectInformation", "ObjectInformationLength", "ReturnLength"]),
|
|
1167
|
+
#
|
|
1168
|
+
'ZwNotifyChangeKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "CompletionFilter", "WatchTree", "Buffer", "BufferSize", "Asynchronous"]),
|
|
1169
|
+
#
|
|
1170
|
+
'ZwCreateEvent': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeInt(signed=False, label="EVENT_TYPE"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["EventHandle", "DesiredAccess", "ObjectAttributes", "EventType", "InitialState"]),
|
|
1171
|
+
#
|
|
1172
|
+
'ZwDeleteFile': SimTypeFunction([SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ObjectAttributes"]),
|
|
1173
|
+
#
|
|
1174
|
+
'ZwQueryDirectoryFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "FileInformation", "Length", "FileInformationClass", "ReturnSingleEntry", "FileName", "RestartScan"]),
|
|
1175
|
+
#
|
|
1176
|
+
'ZwQueryDirectoryFileEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "FileInformation", "Length", "FileInformationClass", "QueryFlags", "FileName"]),
|
|
1177
|
+
#
|
|
1178
|
+
'ZwQueryVolumeInformationFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FS_INFORMATION_CLASS")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "FsInformation", "Length", "FsInformationClass"]),
|
|
1179
|
+
#
|
|
1180
|
+
'ZwSetVolumeInformationFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FS_INFORMATION_CLASS")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "FsInformation", "Length", "FsInformationClass"]),
|
|
1181
|
+
#
|
|
1182
|
+
'ZwFsControlFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "FsControlCode", "InputBuffer", "InputBufferLength", "OutputBuffer", "OutputBufferLength"]),
|
|
1183
|
+
#
|
|
1184
|
+
'ZwDuplicateObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["SourceProcessHandle", "SourceHandle", "TargetProcessHandle", "TargetHandle", "DesiredAccess", "HandleAttributes", "Options"]),
|
|
1185
|
+
#
|
|
1186
|
+
'ZwOpenDirectoryObject': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DirectoryHandle", "DesiredAccess", "ObjectAttributes"]),
|
|
1187
|
+
#
|
|
1188
|
+
'ZwAllocateVirtualMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "BaseAddress", "ZeroBits", "RegionSize", "AllocationType", "Protect"]),
|
|
1189
|
+
#
|
|
1190
|
+
'ZwAllocateVirtualMemoryEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("MEM_EXTENDED_PARAMETER", SimStruct), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "BaseAddress", "RegionSize", "AllocationType", "PageProtection", "ExtendedParameters", "ExtendedParameterCount"]),
|
|
1191
|
+
#
|
|
1192
|
+
'ZwFreeVirtualMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "BaseAddress", "RegionSize", "FreeType"]),
|
|
1193
|
+
#
|
|
1194
|
+
'ZwQueryVirtualMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="MEMORY_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "BaseAddress", "MemoryInformationClass", "MemoryInformation", "MemoryInformationLength", "ReturnLength"]),
|
|
1195
|
+
#
|
|
1196
|
+
'ZwSetInformationVirtualMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="VIRTUAL_MEMORY_INFORMATION_CLASS"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeRef("MEMORY_RANGE_ENTRY", SimStruct), label="LPArray", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "VmInformationClass", "NumberOfEntries", "VirtualAddresses", "VmInformation", "VmInformationLength"]),
|
|
1197
|
+
#
|
|
1198
|
+
'ZwWaitForSingleObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "Alertable", "Timeout"]),
|
|
1199
|
+
#
|
|
1200
|
+
'ZwSetEvent': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EventHandle", "PreviousState"]),
|
|
1201
|
+
#
|
|
1202
|
+
'ZwFlushVirtualMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "BaseAddress", "RegionSize", "IoStatus"]),
|
|
1203
|
+
#
|
|
1204
|
+
'ZwOpenProcessTokenEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "DesiredAccess", "HandleAttributes", "TokenHandle"]),
|
|
1205
|
+
#
|
|
1206
|
+
'ZwOpenThreadTokenEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ThreadHandle", "DesiredAccess", "OpenAsSelf", "HandleAttributes", "TokenHandle"]),
|
|
1207
|
+
#
|
|
1208
|
+
'ZwQueryInformationToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TOKEN_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TokenHandle", "TokenInformationClass", "TokenInformation", "TokenInformationLength", "ReturnLength"]),
|
|
1209
|
+
#
|
|
1210
|
+
'ZwSetInformationToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TOKEN_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TokenHandle", "TokenInformationClass", "TokenInformation", "TokenInformationLength"]),
|
|
1211
|
+
#
|
|
1212
|
+
'ZwSetSecurityObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "SecurityInformation", "SecurityDescriptor"]),
|
|
1213
|
+
#
|
|
1214
|
+
'ZwQuerySecurityObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "SecurityInformation", "SecurityDescriptor", "Length", "LengthNeeded"]),
|
|
1215
|
+
#
|
|
1216
|
+
'ZwLockFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "ByteOffset", "Length", "Key", "FailImmediately", "ExclusiveLock"]),
|
|
1217
|
+
#
|
|
1218
|
+
'ZwUnlockFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "ByteOffset", "Length", "Key"]),
|
|
1219
|
+
#
|
|
1220
|
+
'ZwQueryQuotaInformationFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "Buffer", "Length", "ReturnSingleEntry", "SidList", "SidListLength", "StartSid", "RestartScan"]),
|
|
1221
|
+
#
|
|
1222
|
+
'ZwSetQuotaInformationFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "Buffer", "Length"]),
|
|
1223
|
+
#
|
|
1224
|
+
'ZwFlushBuffersFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock"]),
|
|
1225
|
+
#
|
|
1226
|
+
'ZwFlushBuffersFileEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "FLags", "Parameters", "ParametersSize", "IoStatusBlock"]),
|
|
1227
|
+
#
|
|
1228
|
+
'ZwQueryEaFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "Buffer", "Length", "ReturnSingleEntry", "EaList", "EaListLength", "EaIndex", "RestartScan"]),
|
|
1229
|
+
#
|
|
1230
|
+
'ZwSetEaFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "Buffer", "Length"]),
|
|
1231
|
+
#
|
|
1232
|
+
'ZwDuplicateToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="TOKEN_TYPE"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ExistingTokenHandle", "DesiredAccess", "ObjectAttributes", "EffectiveOnly", "TokenType", "NewTokenHandle"]),
|
|
1233
|
+
#
|
|
1234
|
+
'ZwQueryFullAttributesFile': SimTypeFunction([SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("FILE_NETWORK_OPEN_INFORMATION", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ObjectAttributes", "FileInformation"]),
|
|
1235
|
+
#
|
|
1236
|
+
'IoGetOplockKeyContext': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("OPLOCK_KEY_ECP_CONTEXT", SimStruct), offset=0), arg_names=["FileObject"]),
|
|
1237
|
+
#
|
|
1238
|
+
'IoGetOplockKeyContextEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("OPLOCK_KEY_CONTEXT", SimStruct), offset=0), arg_names=["FileObject"]),
|
|
1239
|
+
#
|
|
1240
|
+
'NtDeviceIoControlFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "IoControlCode", "InputBuffer", "InputBufferLength", "OutputBuffer", "OutputBufferLength"]),
|
|
1241
|
+
#
|
|
1242
|
+
'NtNotifyChangeMultipleKeys': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), label="LPArray", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["MasterKeyHandle", "Count", "SubordinateObjects", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "CompletionFilter", "WatchTree", "Buffer", "BufferSize", "Asynchronous"]),
|
|
1243
|
+
#
|
|
1244
|
+
'NtQueryMultipleValueKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("KEY_VALUE_ENTRY", SimStruct), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "ValueEntries", "EntryCount", "ValueBuffer", "BufferLength", "RequiredBufferLength"]),
|
|
1245
|
+
#
|
|
1246
|
+
'NtRenameKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "NewName"]),
|
|
1247
|
+
#
|
|
1248
|
+
'NtSetInformationKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="KEY_SET_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "KeySetInformationClass", "KeySetInformation", "KeySetInformationLength"]),
|
|
1249
|
+
#
|
|
1250
|
+
'ZwSetInformationKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="KEY_SET_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "KeySetInformationClass", "KeySetInformation", "KeySetInformationLength"]),
|
|
1251
|
+
#
|
|
1252
|
+
'NtQuerySystemInformation': SimTypeFunction([SimTypeInt(signed=False, label="SYSTEM_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SystemInformationClass", "SystemInformation", "SystemInformationLength", "ReturnLength"]),
|
|
1253
|
+
#
|
|
1254
|
+
'NtQuerySystemTime': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SystemTime"]),
|
|
1255
|
+
#
|
|
1256
|
+
'NtQueryTimerResolution': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["MaximumTime", "MinimumTime", "CurrentTime"]),
|
|
1257
|
+
#
|
|
1258
|
+
'NtManagePartition': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="PARTITION_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TargetHandle", "SourceHandle", "PartitionInformationClass", "PartitionInformation", "PartitionInformationLength"]),
|
|
1259
|
+
#
|
|
1260
|
+
'NtPowerInformation': SimTypeFunction([SimTypeInt(signed=False, label="POWER_INFORMATION_LEVEL"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["InformationLevel", "InputBuffer", "InputBufferLength", "OutputBuffer", "OutputBufferLength"]),
|
|
1261
|
+
#
|
|
1262
|
+
'RtlAssert': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeBottom(label="Void"), arg_names=["VoidFailedAssertion", "VoidFileName", "LineNumber", "MutableMessage"]),
|
|
1263
|
+
#
|
|
1264
|
+
'RtlIntegerToUnicodeString': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Value", "Base", "String"]),
|
|
1265
|
+
#
|
|
1266
|
+
'RtlInt64ToUnicodeString': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Value", "Base", "String"]),
|
|
1267
|
+
#
|
|
1268
|
+
'RtlUnicodeStringToInteger': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["String", "Base", "Value"]),
|
|
1269
|
+
#
|
|
1270
|
+
'RtlUnicodeStringToInt64': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypePointer(SimTypeChar(label="Char"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["String", "Base", "Number", "EndPointer"]),
|
|
1271
|
+
#
|
|
1272
|
+
'RtlInitUTF8String': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="SByte"), offset=0)], SimTypeBottom(label="Void"), arg_names=["DestinationString", "SourceString"]),
|
|
1273
|
+
#
|
|
1274
|
+
'RtlQueryRegistryValues': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypePointer(SimTypeRef("RTL_QUERY_REGISTRY_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RelativeTo", "Path", "QueryTable", "Context", "Environment"]),
|
|
1275
|
+
#
|
|
1276
|
+
'MmGetSystemRoutineAddress': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["SystemRoutineName"]),
|
|
1277
|
+
#
|
|
1278
|
+
'RtlWriteRegistryValue': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["RelativeTo", "Path", "ValueName", "ValueType", "ValueData", "ValueLength"]),
|
|
1279
|
+
#
|
|
1280
|
+
'RtlDeleteRegistryValue': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RelativeTo", "Path", "ValueName"]),
|
|
1281
|
+
#
|
|
1282
|
+
'RtlCreateRegistryKey': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Char"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RelativeTo", "Path"]),
|
|
1283
|
+
#
|
|
1284
|
+
'RtlCheckRegistryKey': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Char"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RelativeTo", "Path"]),
|
|
1285
|
+
#
|
|
1286
|
+
'RtlInitUTF8StringEx': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="SByte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationString", "SourceString"]),
|
|
1287
|
+
#
|
|
1288
|
+
'RtlCompareUnicodeStrings': SimTypeFunction([SimTypePointer(SimTypeShort(signed=False, label="UInt16"), label="LPArray", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), label="LPArray", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["String1", "String1Length", "String2", "String2Length", "CaseInSensitive"]),
|
|
1289
|
+
#
|
|
1290
|
+
'RtlCompareUnicodeString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["String1", "String2", "CaseInSensitive"]),
|
|
1291
|
+
#
|
|
1292
|
+
'RtlEqualUnicodeString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["String1", "String2", "CaseInSensitive"]),
|
|
1293
|
+
#
|
|
1294
|
+
'RtlHashUnicodeString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["String", "CaseInSensitive", "HashAlgorithm", "HashValue"]),
|
|
1295
|
+
#
|
|
1296
|
+
'RtlCopyUnicodeString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DestinationString", "SourceString"]),
|
|
1297
|
+
#
|
|
1298
|
+
'RtlAppendUnicodeStringToString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Destination", "Source"]),
|
|
1299
|
+
#
|
|
1300
|
+
'RtlAppendUnicodeToString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Destination", "Source"]),
|
|
1301
|
+
#
|
|
1302
|
+
'RtlUpcaseUnicodeChar': SimTypeFunction([SimTypeChar(label="Char")], SimTypeChar(label="Char"), arg_names=["SourceCharacter"]),
|
|
1303
|
+
#
|
|
1304
|
+
'RtlDowncaseUnicodeChar': SimTypeFunction([SimTypeChar(label="Char")], SimTypeChar(label="Char"), arg_names=["SourceCharacter"]),
|
|
1305
|
+
#
|
|
1306
|
+
'RtlFreeUTF8String': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["utf8String"]),
|
|
1307
|
+
#
|
|
1308
|
+
'RtlxUnicodeStringToAnsiSize': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["UnicodeString"]),
|
|
1309
|
+
#
|
|
1310
|
+
'RtlxAnsiStringToUnicodeSize': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["AnsiString"]),
|
|
1311
|
+
#
|
|
1312
|
+
'RtlUnicodeToUTF8N': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["UTF8StringDestination", "UTF8StringMaxByteCount", "UTF8StringActualByteCount", "UnicodeStringSource", "UnicodeStringByteCount"]),
|
|
1313
|
+
#
|
|
1314
|
+
'RtlUTF8ToUnicodeN': SimTypeFunction([SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["UnicodeStringDestination", "UnicodeStringMaxByteCount", "UnicodeStringActualByteCount", "UTF8StringSource", "UTF8StringByteCount"]),
|
|
1315
|
+
#
|
|
1316
|
+
'RtlUnicodeStringToUTF8String': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationString", "SourceString", "AllocateDestinationString"]),
|
|
1317
|
+
#
|
|
1318
|
+
'RtlUTF8StringToUnicodeString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationString", "SourceString", "AllocateDestinationString"]),
|
|
1319
|
+
#
|
|
1320
|
+
'RtlStringFromGUID': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Guid", "GuidString"]),
|
|
1321
|
+
#
|
|
1322
|
+
'RtlGUIDFromString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["GuidString", "Guid"]),
|
|
1323
|
+
#
|
|
1324
|
+
'RtlGenerateClass5Guid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NamespaceGuid", "Buffer", "BufferSize", "Guid"]),
|
|
1325
|
+
#
|
|
1326
|
+
'RtlPrefetchMemoryNonTemporal': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Source", "Length"]),
|
|
1327
|
+
#
|
|
1328
|
+
'DbgBreakPointWithStatus': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Status"]),
|
|
1329
|
+
#
|
|
1330
|
+
'DbgPrint': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Format"]),
|
|
1331
|
+
#
|
|
1332
|
+
'DbgPrintEx': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["ComponentId", "Level", "Format"]),
|
|
1333
|
+
#
|
|
1334
|
+
'vDbgPrintEx': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypePointer(SimTypeChar(label="SByte"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["ComponentId", "Level", "Format", "arglist"]),
|
|
1335
|
+
#
|
|
1336
|
+
'vDbgPrintExWithPrefix': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypePointer(SimTypeChar(label="SByte"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Prefix", "ComponentId", "Level", "Format", "arglist"]),
|
|
1337
|
+
#
|
|
1338
|
+
'DbgPrintReturnControlC': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Format"]),
|
|
1339
|
+
#
|
|
1340
|
+
'DbgQueryDebugFilterState': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ComponentId", "Level"]),
|
|
1341
|
+
#
|
|
1342
|
+
'DbgSetDebugFilterState': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["ComponentId", "Level", "State"]),
|
|
1343
|
+
#
|
|
1344
|
+
'DbgSetDebugPrintCallback': SimTypeFunction([SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Output", "ComponentId", "Level"]), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DebugPrintCallback", "Enable"]),
|
|
1345
|
+
#
|
|
1346
|
+
'RtlTimeToTimeFields': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("TIME_FIELDS", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Time", "TimeFields"]),
|
|
1347
|
+
#
|
|
1348
|
+
'RtlTimeFieldsToTime': SimTypeFunction([SimTypePointer(SimTypeRef("TIME_FIELDS", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeChar(label="Byte"), arg_names=["TimeFields", "Time"]),
|
|
1349
|
+
#
|
|
1350
|
+
'RtlInitializeBitMap': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["BitMapHeader", "BitMapBuffer", "SizeOfBitMap"]),
|
|
1351
|
+
#
|
|
1352
|
+
'RtlClearBit': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["BitMapHeader", "BitNumber"]),
|
|
1353
|
+
#
|
|
1354
|
+
'RtlSetBit': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["BitMapHeader", "BitNumber"]),
|
|
1355
|
+
#
|
|
1356
|
+
'RtlTestBit': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["BitMapHeader", "BitNumber"]),
|
|
1357
|
+
#
|
|
1358
|
+
'RtlClearAllBits': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["BitMapHeader"]),
|
|
1359
|
+
#
|
|
1360
|
+
'RtlSetAllBits': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["BitMapHeader"]),
|
|
1361
|
+
#
|
|
1362
|
+
'RtlFindClearBits': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader", "NumberToFind", "HintIndex"]),
|
|
1363
|
+
#
|
|
1364
|
+
'RtlFindSetBits': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader", "NumberToFind", "HintIndex"]),
|
|
1365
|
+
#
|
|
1366
|
+
'RtlFindClearBitsAndSet': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader", "NumberToFind", "HintIndex"]),
|
|
1367
|
+
#
|
|
1368
|
+
'RtlFindSetBitsAndClear': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader", "NumberToFind", "HintIndex"]),
|
|
1369
|
+
#
|
|
1370
|
+
'RtlClearBits': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["BitMapHeader", "StartingIndex", "NumberToClear"]),
|
|
1371
|
+
#
|
|
1372
|
+
'RtlSetBits': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["BitMapHeader", "StartingIndex", "NumberToSet"]),
|
|
1373
|
+
#
|
|
1374
|
+
'RtlFindClearRuns': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_BITMAP_RUN", SimStruct), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte")], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader", "RunArray", "SizeOfRunArray", "LocateLongestRuns"]),
|
|
1375
|
+
#
|
|
1376
|
+
'RtlFindLongestRunClear': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader", "StartingIndex"]),
|
|
1377
|
+
#
|
|
1378
|
+
'RtlFindFirstRunClear': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader", "StartingIndex"]),
|
|
1379
|
+
#
|
|
1380
|
+
'RtlNumberOfClearBitsInRange': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader", "StartingIndex", "Length"]),
|
|
1381
|
+
#
|
|
1382
|
+
'RtlNumberOfSetBitsInRange': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader", "StartingIndex", "Length"]),
|
|
1383
|
+
#
|
|
1384
|
+
'RtlNumberOfClearBits': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader"]),
|
|
1385
|
+
#
|
|
1386
|
+
'RtlNumberOfSetBits': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader"]),
|
|
1387
|
+
#
|
|
1388
|
+
'RtlAreBitsClear': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["BitMapHeader", "StartingIndex", "Length"]),
|
|
1389
|
+
#
|
|
1390
|
+
'RtlAreBitsSet': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["BitMapHeader", "StartingIndex", "Length"]),
|
|
1391
|
+
#
|
|
1392
|
+
'RtlFindNextForwardRunClear': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader", "FromIndex", "StartingRunIndex"]),
|
|
1393
|
+
#
|
|
1394
|
+
'RtlFindLastBackwardRunClear': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["BitMapHeader", "FromIndex", "StartingRunIndex"]),
|
|
1395
|
+
#
|
|
1396
|
+
'RtlFindLeastSignificantBit': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64")], SimTypeChar(label="SByte"), arg_names=["Set"]),
|
|
1397
|
+
#
|
|
1398
|
+
'RtlFindMostSignificantBit': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64")], SimTypeChar(label="SByte"), arg_names=["Set"]),
|
|
1399
|
+
#
|
|
1400
|
+
'RtlNumberOfSetBitsUlongPtr': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Target"]),
|
|
1401
|
+
#
|
|
1402
|
+
'RtlCopyBitMap': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Source", "Destination", "TargetBit"]),
|
|
1403
|
+
#
|
|
1404
|
+
'RtlExtractBitMap': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_BITMAP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Source", "Destination", "TargetBit", "NumberOfBits"]),
|
|
1405
|
+
#
|
|
1406
|
+
'RtlCreateSecurityDescriptor': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["SecurityDescriptor", "Revision"]),
|
|
1407
|
+
#
|
|
1408
|
+
'RtlValidSecurityDescriptor': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["SecurityDescriptor"]),
|
|
1409
|
+
#
|
|
1410
|
+
'RtlLengthSecurityDescriptor': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["SecurityDescriptor"]),
|
|
1411
|
+
#
|
|
1412
|
+
'RtlValidRelativeSecurityDescriptor': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["SecurityDescriptorInput", "SecurityDescriptorLength", "RequiredInformation"]),
|
|
1413
|
+
#
|
|
1414
|
+
'RtlSetDaclSecurityDescriptor': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("ACL", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["SecurityDescriptor", "DaclPresent", "Dacl", "DaclDefaulted"]),
|
|
1415
|
+
#
|
|
1416
|
+
'RtlGetVersion': SimTypeFunction([SimTypePointer(SimTypeRef("OSVERSIONINFOW", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["lpVersionInformation"]),
|
|
1417
|
+
#
|
|
1418
|
+
'RtlVerifyVersionInfo': SimTypeFunction([SimTypePointer(SimTypeRef("OSVERSIONINFOEXW", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeLongLong(signed=False, label="UInt64")], SimTypeInt(signed=True, label="Int32"), arg_names=["VersionInfo", "TypeMask", "ConditionMask"]),
|
|
1419
|
+
#
|
|
1420
|
+
'RtlIsNtDdiVersionAvailable': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["Version"]),
|
|
1421
|
+
#
|
|
1422
|
+
'RtlIsServicePackVersionInstalled': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["Version"]),
|
|
1423
|
+
#
|
|
1424
|
+
'RtlIoEncodeMemIoResource': SimTypeFunction([SimTypePointer(SimTypeRef("IO_RESOURCE_DESCRIPTOR", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeLongLong(signed=False, label="UInt64"), SimTypeLongLong(signed=False, label="UInt64"), SimTypeLongLong(signed=False, label="UInt64"), SimTypeLongLong(signed=False, label="UInt64")], SimTypeInt(signed=True, label="Int32"), arg_names=["Descriptor", "Type", "Length", "Alignment", "MinimumAddress", "MaximumAddress"]),
|
|
1425
|
+
#
|
|
1426
|
+
'RtlCmEncodeMemIoResource': SimTypeFunction([SimTypePointer(SimTypeRef("CM_PARTIAL_RESOURCE_DESCRIPTOR", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeLongLong(signed=False, label="UInt64"), SimTypeLongLong(signed=False, label="UInt64")], SimTypeInt(signed=True, label="Int32"), arg_names=["Descriptor", "Type", "Length", "Start"]),
|
|
1427
|
+
#
|
|
1428
|
+
'RtlIoDecodeMemIoResource': SimTypeFunction([SimTypePointer(SimTypeRef("IO_RESOURCE_DESCRIPTOR", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeLongLong(signed=False, label="UInt64"), arg_names=["Descriptor", "Alignment", "MinimumAddress", "MaximumAddress"]),
|
|
1429
|
+
#
|
|
1430
|
+
'RtlCmDecodeMemIoResource': SimTypeFunction([SimTypePointer(SimTypeRef("CM_PARTIAL_RESOURCE_DESCRIPTOR", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeLongLong(signed=False, label="UInt64"), arg_names=["Descriptor", "Start"]),
|
|
1431
|
+
#
|
|
1432
|
+
'RtlFindClosestEncodableLength': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SourceLength", "TargetLength"]),
|
|
1433
|
+
#
|
|
1434
|
+
'RtlIsUntrustedObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "Object", "UntrustedObject"]),
|
|
1435
|
+
#
|
|
1436
|
+
'RtlQueryValidationRunlevel': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["ComponentName"]),
|
|
1437
|
+
#
|
|
1438
|
+
'NtCreateTransactionManager': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TmHandle", "DesiredAccess", "ObjectAttributes", "LogFileName", "CreateOptions", "CommitStrength"]),
|
|
1439
|
+
#
|
|
1440
|
+
'NtOpenTransactionManager': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TmHandle", "DesiredAccess", "ObjectAttributes", "LogFileName", "TmIdentity", "OpenOptions"]),
|
|
1441
|
+
#
|
|
1442
|
+
'NtRenameTransactionManager': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["LogFileName", "ExistingTransactionManagerGuid"]),
|
|
1443
|
+
#
|
|
1444
|
+
'NtRollforwardTransactionManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionManagerHandle", "TmVirtualClock"]),
|
|
1445
|
+
#
|
|
1446
|
+
'NtRecoverTransactionManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionManagerHandle"]),
|
|
1447
|
+
#
|
|
1448
|
+
'NtQueryInformationTransactionManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TRANSACTIONMANAGER_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionManagerHandle", "TransactionManagerInformationClass", "TransactionManagerInformation", "TransactionManagerInformationLength", "ReturnLength"]),
|
|
1449
|
+
#
|
|
1450
|
+
'NtSetInformationTransactionManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TRANSACTIONMANAGER_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TmHandle", "TransactionManagerInformationClass", "TransactionManagerInformation", "TransactionManagerInformationLength"]),
|
|
1451
|
+
#
|
|
1452
|
+
'NtEnumerateTransactionObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="KTMOBJECT_TYPE"), SimTypePointer(SimTypeRef("KTMOBJECT_CURSOR", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RootObjectHandle", "QueryType", "ObjectCursor", "ObjectCursorLength", "ReturnLength"]),
|
|
1453
|
+
#
|
|
1454
|
+
'NtCreateTransaction': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "DesiredAccess", "ObjectAttributes", "Uow", "TmHandle", "CreateOptions", "IsolationLevel", "IsolationFlags", "Timeout", "Description"]),
|
|
1455
|
+
#
|
|
1456
|
+
'NtOpenTransaction': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "DesiredAccess", "ObjectAttributes", "Uow", "TmHandle"]),
|
|
1457
|
+
#
|
|
1458
|
+
'NtQueryInformationTransaction': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TRANSACTION_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "TransactionInformationClass", "TransactionInformation", "TransactionInformationLength", "ReturnLength"]),
|
|
1459
|
+
#
|
|
1460
|
+
'NtSetInformationTransaction': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TRANSACTION_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "TransactionInformationClass", "TransactionInformation", "TransactionInformationLength"]),
|
|
1461
|
+
#
|
|
1462
|
+
'NtCommitTransaction': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "Wait"]),
|
|
1463
|
+
#
|
|
1464
|
+
'NtRollbackTransaction': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "Wait"]),
|
|
1465
|
+
#
|
|
1466
|
+
'NtCreateEnlistment': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "DesiredAccess", "ResourceManagerHandle", "TransactionHandle", "ObjectAttributes", "CreateOptions", "NotificationMask", "EnlistmentKey"]),
|
|
1467
|
+
#
|
|
1468
|
+
'NtOpenEnlistment': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "DesiredAccess", "ResourceManagerHandle", "EnlistmentGuid", "ObjectAttributes"]),
|
|
1469
|
+
#
|
|
1470
|
+
'NtQueryInformationEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="ENLISTMENT_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "EnlistmentInformationClass", "EnlistmentInformation", "EnlistmentInformationLength", "ReturnLength"]),
|
|
1471
|
+
#
|
|
1472
|
+
'NtSetInformationEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="ENLISTMENT_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "EnlistmentInformationClass", "EnlistmentInformation", "EnlistmentInformationLength"]),
|
|
1473
|
+
#
|
|
1474
|
+
'NtRecoverEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "EnlistmentKey"]),
|
|
1475
|
+
#
|
|
1476
|
+
'NtPrePrepareEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
1477
|
+
#
|
|
1478
|
+
'NtPrepareEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
1479
|
+
#
|
|
1480
|
+
'NtCommitEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
1481
|
+
#
|
|
1482
|
+
'NtRollbackEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
1483
|
+
#
|
|
1484
|
+
'NtPrePrepareComplete': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
1485
|
+
#
|
|
1486
|
+
'NtPrepareComplete': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
1487
|
+
#
|
|
1488
|
+
'NtCommitComplete': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
1489
|
+
#
|
|
1490
|
+
'NtReadOnlyEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
1491
|
+
#
|
|
1492
|
+
'NtRollbackComplete': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
1493
|
+
#
|
|
1494
|
+
'NtSinglePhaseReject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
1495
|
+
#
|
|
1496
|
+
'NtCreateResourceManager': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle", "DesiredAccess", "TmHandle", "RmGuid", "ObjectAttributes", "CreateOptions", "Description"]),
|
|
1497
|
+
#
|
|
1498
|
+
'NtOpenResourceManager': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle", "DesiredAccess", "TmHandle", "ResourceManagerGuid", "ObjectAttributes"]),
|
|
1499
|
+
#
|
|
1500
|
+
'NtRecoverResourceManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle"]),
|
|
1501
|
+
#
|
|
1502
|
+
'NtGetNotificationResourceManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("TRANSACTION_NOTIFICATION", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle", "TransactionNotification", "NotificationLength", "Timeout", "ReturnLength", "Asynchronous", "AsynchronousContext"]),
|
|
1503
|
+
#
|
|
1504
|
+
'NtQueryInformationResourceManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="RESOURCEMANAGER_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle", "ResourceManagerInformationClass", "ResourceManagerInformation", "ResourceManagerInformationLength", "ReturnLength"]),
|
|
1505
|
+
#
|
|
1506
|
+
'NtSetInformationResourceManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="RESOURCEMANAGER_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle", "ResourceManagerInformationClass", "ResourceManagerInformation", "ResourceManagerInformationLength"]),
|
|
1507
|
+
#
|
|
1508
|
+
'NtRegisterProtocolAddressInformation': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManager", "ProtocolId", "ProtocolInformationSize", "ProtocolInformation", "CreateOptions"]),
|
|
1509
|
+
#
|
|
1510
|
+
'NtPropagationComplete': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle", "RequestCookie", "BufferLength", "Buffer"]),
|
|
1511
|
+
#
|
|
1512
|
+
'NtPropagationFailed': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=True, label="Int32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle", "RequestCookie", "PropStatus"]),
|
|
1513
|
+
#
|
|
1514
|
+
'KfRaiseIrql': SimTypeFunction([SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["NewIrql"]),
|
|
1515
|
+
#
|
|
1516
|
+
'KeFlushIoBuffers': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["Mdl", "ReadOperation", "DmaOperation"]),
|
|
1517
|
+
#
|
|
1518
|
+
'KeGetCurrentIrql': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
1519
|
+
#
|
|
1520
|
+
'KeInitializeDpc': SimTypeFunction([SimTypePointer(SimTypeRef("KDPC", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Dpc", "DeferredRoutine", "DeferredContext"]),
|
|
1521
|
+
#
|
|
1522
|
+
'KeInitializeThreadedDpc': SimTypeFunction([SimTypePointer(SimTypeRef("KDPC", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Dpc", "DeferredRoutine", "DeferredContext"]),
|
|
1523
|
+
#
|
|
1524
|
+
'KeInsertQueueDpc': SimTypeFunction([SimTypePointer(SimTypeRef("KDPC", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Dpc", "SystemArgument1", "SystemArgument2"]),
|
|
1525
|
+
#
|
|
1526
|
+
'KeRemoveQueueDpc': SimTypeFunction([SimTypePointer(SimTypeRef("KDPC", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Dpc"]),
|
|
1527
|
+
#
|
|
1528
|
+
'KeRemoveQueueDpcEx': SimTypeFunction([SimTypePointer(SimTypeRef("KDPC", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["Dpc", "WaitIfActive"]),
|
|
1529
|
+
#
|
|
1530
|
+
'KeInitializeCrashDumpHeader': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DumpType", "Flags", "Buffer", "BufferSize", "BufferNeeded"]),
|
|
1531
|
+
#
|
|
1532
|
+
'KeSetImportanceDpc': SimTypeFunction([SimTypePointer(SimTypeRef("KDPC", SimStruct), offset=0), SimTypeInt(signed=False, label="KDPC_IMPORTANCE")], SimTypeBottom(label="Void"), arg_names=["Dpc", "Importance"]),
|
|
1533
|
+
#
|
|
1534
|
+
'KeSetTargetProcessorDpc': SimTypeFunction([SimTypePointer(SimTypeRef("KDPC", SimStruct), offset=0), SimTypeChar(label="SByte")], SimTypeBottom(label="Void"), arg_names=["Dpc", "Number"]),
|
|
1535
|
+
#
|
|
1536
|
+
'KeFlushQueuedDpcs': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
1537
|
+
#
|
|
1538
|
+
'KeInitializeDeviceQueue': SimTypeFunction([SimTypePointer(SimTypeRef("KDEVICE_QUEUE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DeviceQueue"]),
|
|
1539
|
+
#
|
|
1540
|
+
'KeInsertDeviceQueue': SimTypeFunction([SimTypePointer(SimTypeRef("KDEVICE_QUEUE", SimStruct), offset=0), SimTypePointer(SimTypeRef("KDEVICE_QUEUE_ENTRY", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["DeviceQueue", "DeviceQueueEntry"]),
|
|
1541
|
+
#
|
|
1542
|
+
'KeInsertByKeyDeviceQueue': SimTypeFunction([SimTypePointer(SimTypeRef("KDEVICE_QUEUE", SimStruct), offset=0), SimTypePointer(SimTypeRef("KDEVICE_QUEUE_ENTRY", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["DeviceQueue", "DeviceQueueEntry", "SortKey"]),
|
|
1543
|
+
#
|
|
1544
|
+
'KeRemoveDeviceQueue': SimTypeFunction([SimTypePointer(SimTypeRef("KDEVICE_QUEUE", SimStruct), offset=0)], SimTypePointer(SimTypeRef("KDEVICE_QUEUE_ENTRY", SimStruct), offset=0), arg_names=["DeviceQueue"]),
|
|
1545
|
+
#
|
|
1546
|
+
'KeRemoveByKeyDeviceQueue': SimTypeFunction([SimTypePointer(SimTypeRef("KDEVICE_QUEUE", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeRef("KDEVICE_QUEUE_ENTRY", SimStruct), offset=0), arg_names=["DeviceQueue", "SortKey"]),
|
|
1547
|
+
#
|
|
1548
|
+
'KeRemoveByKeyDeviceQueueIfBusy': SimTypeFunction([SimTypePointer(SimTypeRef("KDEVICE_QUEUE", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeRef("KDEVICE_QUEUE_ENTRY", SimStruct), offset=0), arg_names=["DeviceQueue", "SortKey"]),
|
|
1549
|
+
#
|
|
1550
|
+
'KeRemoveEntryDeviceQueue': SimTypeFunction([SimTypePointer(SimTypeRef("KDEVICE_QUEUE", SimStruct), offset=0), SimTypePointer(SimTypeRef("KDEVICE_QUEUE_ENTRY", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["DeviceQueue", "DeviceQueueEntry"]),
|
|
1551
|
+
#
|
|
1552
|
+
'KeSynchronizeExecution': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([], SimTypeChar(label="Byte")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Interrupt", "SynchronizeRoutine", "SynchronizeContext"]),
|
|
1553
|
+
#
|
|
1554
|
+
'KeAcquireInterruptSpinLock': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeChar(label="Byte"), arg_names=["Interrupt"]),
|
|
1555
|
+
#
|
|
1556
|
+
'KeReleaseInterruptSpinLock': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["Interrupt", "OldIrql"]),
|
|
1557
|
+
#
|
|
1558
|
+
'KeInitializeEvent': SimTypeFunction([SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0), SimTypeInt(signed=False, label="EVENT_TYPE"), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["Event", "Type", "State"]),
|
|
1559
|
+
#
|
|
1560
|
+
'KeClearEvent': SimTypeFunction([SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Event"]),
|
|
1561
|
+
#
|
|
1562
|
+
'KeReadStateEvent': SimTypeFunction([SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Event"]),
|
|
1563
|
+
#
|
|
1564
|
+
'KeResetEvent': SimTypeFunction([SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Event"]),
|
|
1565
|
+
#
|
|
1566
|
+
'KeSetEvent': SimTypeFunction([SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0), SimTypeInt(signed=True, label="Int32"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["Event", "Increment", "Wait"]),
|
|
1567
|
+
#
|
|
1568
|
+
'KeInitializeMutex': SimTypeFunction([SimTypePointer(SimTypeRef("KMUTANT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Mutex", "Level"]),
|
|
1569
|
+
#
|
|
1570
|
+
'KeReadStateMutex': SimTypeFunction([SimTypePointer(SimTypeRef("KMUTANT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Mutex"]),
|
|
1571
|
+
#
|
|
1572
|
+
'KeReleaseMutex': SimTypeFunction([SimTypePointer(SimTypeRef("KMUTANT", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["Mutex", "Wait"]),
|
|
1573
|
+
#
|
|
1574
|
+
'KeInitializeSemaphore': SimTypeFunction([SimTypePointer(SimTypeRef("KSEMAPHORE", SimStruct), offset=0), SimTypeInt(signed=True, label="Int32"), SimTypeInt(signed=True, label="Int32")], SimTypeBottom(label="Void"), arg_names=["Semaphore", "Count", "Limit"]),
|
|
1575
|
+
#
|
|
1576
|
+
'KeReadStateSemaphore': SimTypeFunction([SimTypePointer(SimTypeRef("KSEMAPHORE", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Semaphore"]),
|
|
1577
|
+
#
|
|
1578
|
+
'KeReleaseSemaphore': SimTypeFunction([SimTypePointer(SimTypeRef("KSEMAPHORE", SimStruct), offset=0), SimTypeInt(signed=True, label="Int32"), SimTypeInt(signed=True, label="Int32"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["Semaphore", "Increment", "Adjustment", "Wait"]),
|
|
1579
|
+
#
|
|
1580
|
+
'KeDelayExecutionThread': SimTypeFunction([SimTypeChar(label="SByte"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["WaitMode", "Alertable", "Interval"]),
|
|
1581
|
+
#
|
|
1582
|
+
'KeQueryPriorityThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Thread"]),
|
|
1583
|
+
#
|
|
1584
|
+
'KeQueryRuntimeThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Thread", "UserTime"]),
|
|
1585
|
+
#
|
|
1586
|
+
'KeQueryTotalCycleTimeThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeLongLong(signed=False, label="UInt64"), arg_names=["Thread", "CycleTimeStamp"]),
|
|
1587
|
+
#
|
|
1588
|
+
'KeSetTargetProcessorDpcEx': SimTypeFunction([SimTypePointer(SimTypeRef("KDPC", SimStruct), offset=0), SimTypePointer(SimTypeRef("PROCESSOR_NUMBER", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Dpc", "ProcNumber"]),
|
|
1589
|
+
#
|
|
1590
|
+
'KeRevertToUserAffinityThread': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
1591
|
+
#
|
|
1592
|
+
'KeSetSystemAffinityThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Affinity"]),
|
|
1593
|
+
#
|
|
1594
|
+
'KeRevertToUserAffinityThreadEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Affinity"]),
|
|
1595
|
+
#
|
|
1596
|
+
'KeSetSystemGroupAffinityThread': SimTypeFunction([SimTypePointer(SimTypeRef("GROUP_AFFINITY", SimStruct), offset=0), SimTypePointer(SimTypeRef("GROUP_AFFINITY", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Affinity", "PreviousAffinity"]),
|
|
1597
|
+
#
|
|
1598
|
+
'KeRevertToUserGroupAffinityThread': SimTypeFunction([SimTypePointer(SimTypeRef("GROUP_AFFINITY", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["PreviousAffinity"]),
|
|
1599
|
+
#
|
|
1600
|
+
'KeSetSystemAffinityThreadEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), arg_names=["Affinity"]),
|
|
1601
|
+
#
|
|
1602
|
+
'KeSetPriorityThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=True, label="Int32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Thread", "Priority"]),
|
|
1603
|
+
#
|
|
1604
|
+
'KeEnterCriticalRegion': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
1605
|
+
#
|
|
1606
|
+
'KeLeaveCriticalRegion': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
1607
|
+
#
|
|
1608
|
+
'KeEnterGuardedRegion': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
1609
|
+
#
|
|
1610
|
+
'KeLeaveGuardedRegion': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
1611
|
+
#
|
|
1612
|
+
'KeAreApcsDisabled': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
1613
|
+
#
|
|
1614
|
+
'KeInitializeTimer': SimTypeFunction([SimTypePointer(SimTypeRef("KTIMER", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Timer"]),
|
|
1615
|
+
#
|
|
1616
|
+
'KeInitializeTimerEx': SimTypeFunction([SimTypePointer(SimTypeRef("KTIMER", SimStruct), offset=0), SimTypeInt(signed=False, label="TIMER_TYPE")], SimTypeBottom(label="Void"), arg_names=["Timer", "Type"]),
|
|
1617
|
+
#
|
|
1618
|
+
'KeCancelTimer': SimTypeFunction([SimTypePointer(SimTypeRef("KTIMER", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["param0"]),
|
|
1619
|
+
#
|
|
1620
|
+
'KeReadStateTimer': SimTypeFunction([SimTypePointer(SimTypeRef("KTIMER", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Timer"]),
|
|
1621
|
+
#
|
|
1622
|
+
'KeSetTimer': SimTypeFunction([SimTypePointer(SimTypeRef("KTIMER", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeRef("KDPC", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Timer", "DueTime", "Dpc"]),
|
|
1623
|
+
#
|
|
1624
|
+
'KeSetTimerEx': SimTypeFunction([SimTypePointer(SimTypeRef("KTIMER", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeInt(signed=True, label="Int32"), SimTypePointer(SimTypeRef("KDPC", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Timer", "DueTime", "Period", "Dpc"]),
|
|
1625
|
+
#
|
|
1626
|
+
'KeSetCoalescableTimer': SimTypeFunction([SimTypePointer(SimTypeRef("KTIMER", SimStruct), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("KDPC", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Timer", "DueTime", "Period", "TolerableDelay", "Dpc"]),
|
|
1627
|
+
#
|
|
1628
|
+
'KeWaitForMultipleObjects': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), label="LPArray", offset=0), SimTypeInt(signed=False, label="WAIT_TYPE"), SimTypeInt(signed=False, label="KWAIT_REASON"), SimTypeChar(label="SByte"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("KWAIT_BLOCK", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Count", "Object", "WaitType", "WaitReason", "WaitMode", "Alertable", "Timeout", "WaitBlockArray"]),
|
|
1629
|
+
#
|
|
1630
|
+
'KeWaitForSingleObject': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="KWAIT_REASON"), SimTypeChar(label="SByte"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "WaitReason", "WaitMode", "Alertable", "Timeout"]),
|
|
1631
|
+
#
|
|
1632
|
+
'KeIpiGenericCall': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), arg_names=["BroadcastFunction", "Context"]),
|
|
1633
|
+
#
|
|
1634
|
+
'KeInitializeSpinLock': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["SpinLock"]),
|
|
1635
|
+
#
|
|
1636
|
+
'KeTestSpinLock': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["SpinLock"]),
|
|
1637
|
+
#
|
|
1638
|
+
'KeTryToAcquireSpinLockAtDpcLevel': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["SpinLock"]),
|
|
1639
|
+
#
|
|
1640
|
+
'KeAcquireSpinLockForDpc': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["SpinLock"]),
|
|
1641
|
+
#
|
|
1642
|
+
'KeReleaseSpinLockForDpc': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["SpinLock", "OldIrql"]),
|
|
1643
|
+
#
|
|
1644
|
+
'KeAcquireInStackQueuedSpinLock': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypeRef("KLOCK_QUEUE_HANDLE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["SpinLock", "LockHandle"]),
|
|
1645
|
+
#
|
|
1646
|
+
'KeReleaseInStackQueuedSpinLock': SimTypeFunction([SimTypePointer(SimTypeRef("KLOCK_QUEUE_HANDLE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["LockHandle"]),
|
|
1647
|
+
#
|
|
1648
|
+
'KeAcquireInStackQueuedSpinLockAtDpcLevel': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypeRef("KLOCK_QUEUE_HANDLE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["SpinLock", "LockHandle"]),
|
|
1649
|
+
#
|
|
1650
|
+
'KeReleaseInStackQueuedSpinLockFromDpcLevel': SimTypeFunction([SimTypePointer(SimTypeRef("KLOCK_QUEUE_HANDLE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["LockHandle"]),
|
|
1651
|
+
#
|
|
1652
|
+
'KeAcquireInStackQueuedSpinLockForDpc': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypeRef("KLOCK_QUEUE_HANDLE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["SpinLock", "LockHandle"]),
|
|
1653
|
+
#
|
|
1654
|
+
'KeReleaseInStackQueuedSpinLockForDpc': SimTypeFunction([SimTypePointer(SimTypeRef("KLOCK_QUEUE_HANDLE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["LockHandle"]),
|
|
1655
|
+
#
|
|
1656
|
+
'KeQueryDpcWatchdogInformation': SimTypeFunction([SimTypePointer(SimTypeRef("KDPC_WATCHDOG_INFORMATION", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["WatchdogInformation"]),
|
|
1657
|
+
#
|
|
1658
|
+
'KeIsExecutingDpc': SimTypeFunction([], SimTypeInt(signed=False, label="UInt32")),
|
|
1659
|
+
#
|
|
1660
|
+
'KeDeregisterBugCheckCallback': SimTypeFunction([SimTypePointer(SimTypeRef("KBUGCHECK_CALLBACK_RECORD", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["CallbackRecord"]),
|
|
1661
|
+
#
|
|
1662
|
+
'KeRegisterBugCheckCallback': SimTypeFunction([SimTypePointer(SimTypeRef("KBUGCHECK_CALLBACK_RECORD", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeChar(label="Byte"), arg_names=["CallbackRecord", "CallbackRoutine", "Buffer", "Length", "Component"]),
|
|
1663
|
+
#
|
|
1664
|
+
'KeInitializeTriageDumpDataArray': SimTypeFunction([SimTypePointer(SimTypeRef("KTRIAGE_DUMP_DATA_ARRAY", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["KtriageDumpDataArray", "Size"]),
|
|
1665
|
+
#
|
|
1666
|
+
'KeAddTriageDumpDataBlock': SimTypeFunction([SimTypePointer(SimTypeRef("KTRIAGE_DUMP_DATA_ARRAY", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KtriageDumpDataArray", "Address", "Size"]),
|
|
1667
|
+
#
|
|
1668
|
+
'KeDeregisterBugCheckReasonCallback': SimTypeFunction([SimTypePointer(SimTypeRef("KBUGCHECK_REASON_CALLBACK_RECORD", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["CallbackRecord"]),
|
|
1669
|
+
#
|
|
1670
|
+
'KeRegisterBugCheckReasonCallback': SimTypeFunction([SimTypePointer(SimTypeRef("KBUGCHECK_REASON_CALLBACK_RECORD", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypeInt(signed=False, label="KBUGCHECK_CALLBACK_REASON"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeChar(label="Byte"), arg_names=["CallbackRecord", "CallbackRoutine", "Reason", "Component"]),
|
|
1671
|
+
#
|
|
1672
|
+
'KeRegisterNmiCallback': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeChar(label="Byte")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["CallbackRoutine", "Context"]),
|
|
1673
|
+
#
|
|
1674
|
+
'KeDeregisterNmiCallback': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle"]),
|
|
1675
|
+
#
|
|
1676
|
+
'KeRegisterBoundCallback': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeInt(signed=False, label="BOUND_CALLBACK_STATUS")), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["CallbackRoutine"]),
|
|
1677
|
+
#
|
|
1678
|
+
'KeDeregisterBoundCallback': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle"]),
|
|
1679
|
+
#
|
|
1680
|
+
'KeBugCheckEx': SimTypeFunction([SimTypeInt(signed=False, label="BUGCHECK_ERROR"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["BugCheckCode", "BugCheckParameter1", "BugCheckParameter2", "BugCheckParameter3", "BugCheckParameter4"]),
|
|
1681
|
+
#
|
|
1682
|
+
'KeQuerySystemTimePrecise': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeBottom(label="Void"), arg_names=["CurrentTime"]),
|
|
1683
|
+
#
|
|
1684
|
+
'KeQueryInterruptTimePrecise': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeLongLong(signed=False, label="UInt64"), arg_names=["QpcTimeStamp"]),
|
|
1685
|
+
#
|
|
1686
|
+
'KeQueryUnbiasedInterruptTimePrecise': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeLongLong(signed=False, label="UInt64"), arg_names=["QpcTimeStamp"]),
|
|
1687
|
+
#
|
|
1688
|
+
'KeQueryTimeIncrement': SimTypeFunction([], SimTypeInt(signed=False, label="UInt32")),
|
|
1689
|
+
#
|
|
1690
|
+
'KeQueryUnbiasedInterruptTime': SimTypeFunction([], SimTypeLongLong(signed=False, label="UInt64")),
|
|
1691
|
+
#
|
|
1692
|
+
'KeGetRecommendedSharedDataAlignment': SimTypeFunction([], SimTypeInt(signed=False, label="UInt32")),
|
|
1693
|
+
#
|
|
1694
|
+
'KeQueryActiveProcessors': SimTypeFunction([], SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)),
|
|
1695
|
+
#
|
|
1696
|
+
'KeQueryActiveProcessorCount': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["ActiveProcessors"]),
|
|
1697
|
+
#
|
|
1698
|
+
'KeQueryActiveProcessorCountEx': SimTypeFunction([SimTypeShort(signed=False, label="UInt16")], SimTypeInt(signed=False, label="UInt32"), arg_names=["GroupNumber"]),
|
|
1699
|
+
#
|
|
1700
|
+
'KeQueryMaximumProcessorCount': SimTypeFunction([], SimTypeInt(signed=False, label="UInt32")),
|
|
1701
|
+
#
|
|
1702
|
+
'KeQueryMaximumProcessorCountEx': SimTypeFunction([SimTypeShort(signed=False, label="UInt16")], SimTypeInt(signed=False, label="UInt32"), arg_names=["GroupNumber"]),
|
|
1703
|
+
#
|
|
1704
|
+
'KeQueryActiveGroupCount': SimTypeFunction([], SimTypeShort(signed=False, label="UInt16")),
|
|
1705
|
+
#
|
|
1706
|
+
'KeQueryMaximumGroupCount': SimTypeFunction([], SimTypeShort(signed=False, label="UInt16")),
|
|
1707
|
+
#
|
|
1708
|
+
'KeQueryGroupAffinity': SimTypeFunction([SimTypeShort(signed=False, label="UInt16")], SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), arg_names=["GroupNumber"]),
|
|
1709
|
+
#
|
|
1710
|
+
'KeGetCurrentProcessorNumberEx': SimTypeFunction([SimTypePointer(SimTypeRef("PROCESSOR_NUMBER", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["ProcNumber"]),
|
|
1711
|
+
#
|
|
1712
|
+
'KeQueryNodeActiveAffinity': SimTypeFunction([SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeRef("GROUP_AFFINITY", SimStruct), offset=0), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0)], SimTypeBottom(label="Void"), arg_names=["NodeNumber", "Affinity", "Count"]),
|
|
1713
|
+
#
|
|
1714
|
+
'KeQueryNodeMaximumProcessorCount': SimTypeFunction([SimTypeShort(signed=False, label="UInt16")], SimTypeShort(signed=False, label="UInt16"), arg_names=["NodeNumber"]),
|
|
1715
|
+
#
|
|
1716
|
+
'KeQueryHighestNodeNumber': SimTypeFunction([], SimTypeShort(signed=False, label="UInt16")),
|
|
1717
|
+
#
|
|
1718
|
+
'KeGetCurrentNodeNumber': SimTypeFunction([], SimTypeShort(signed=False, label="UInt16")),
|
|
1719
|
+
#
|
|
1720
|
+
'KeQueryLogicalProcessorRelationship': SimTypeFunction([SimTypePointer(SimTypeRef("PROCESSOR_NUMBER", SimStruct), offset=0), SimTypeInt(signed=False, label="LOGICAL_PROCESSOR_RELATIONSHIP"), SimTypePointer(SimTypeRef("SYSTEM_LOGICAL_PROCESSOR_INFORMATION_EX", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessorNumber", "RelationshipType", "Information", "Length"]),
|
|
1721
|
+
#
|
|
1722
|
+
'KeShouldYieldProcessor': SimTypeFunction([], SimTypeInt(signed=False, label="UInt32")),
|
|
1723
|
+
#
|
|
1724
|
+
'KeQueryNodeActiveAffinity2': SimTypeFunction([SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeRef("GROUP_AFFINITY", SimStruct), label="LPArray", offset=0), SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NodeNumber", "GroupAffinities", "GroupAffinitiesCount", "GroupAffinitiesRequired"]),
|
|
1725
|
+
#
|
|
1726
|
+
'KeQueryNodeActiveProcessorCount': SimTypeFunction([SimTypeShort(signed=False, label="UInt16")], SimTypeInt(signed=False, label="UInt32"), arg_names=["NodeNumber"]),
|
|
1727
|
+
#
|
|
1728
|
+
'KeAreAllApcsDisabled': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
1729
|
+
#
|
|
1730
|
+
'KeInitializeGuardedMutex': SimTypeFunction([SimTypePointer(SimTypeRef("FAST_MUTEX", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Mutex"]),
|
|
1731
|
+
#
|
|
1732
|
+
'KeAcquireGuardedMutex': SimTypeFunction([SimTypePointer(SimTypeRef("FAST_MUTEX", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Mutex"]),
|
|
1733
|
+
#
|
|
1734
|
+
'KeReleaseGuardedMutex': SimTypeFunction([SimTypePointer(SimTypeRef("FAST_MUTEX", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Mutex"]),
|
|
1735
|
+
#
|
|
1736
|
+
'KeTryToAcquireGuardedMutex': SimTypeFunction([SimTypePointer(SimTypeRef("FAST_MUTEX", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Mutex"]),
|
|
1737
|
+
#
|
|
1738
|
+
'KeAcquireGuardedMutexUnsafe': SimTypeFunction([SimTypePointer(SimTypeRef("FAST_MUTEX", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FastMutex"]),
|
|
1739
|
+
#
|
|
1740
|
+
'KeReleaseGuardedMutexUnsafe': SimTypeFunction([SimTypePointer(SimTypeRef("FAST_MUTEX", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FastMutex"]),
|
|
1741
|
+
#
|
|
1742
|
+
'KeRegisterProcessorChangeCallback': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["CallbackFunction", "CallbackContext", "Flags"]),
|
|
1743
|
+
#
|
|
1744
|
+
'KeDeregisterProcessorChangeCallback': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["CallbackHandle"]),
|
|
1745
|
+
#
|
|
1746
|
+
'KeGetProcessorNumberFromIndex': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("PROCESSOR_NUMBER", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcIndex", "ProcNumber"]),
|
|
1747
|
+
#
|
|
1748
|
+
'KeGetProcessorIndexFromNumber': SimTypeFunction([SimTypePointer(SimTypeRef("PROCESSOR_NUMBER", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["ProcNumber"]),
|
|
1749
|
+
#
|
|
1750
|
+
'KeSaveExtendedProcessorState': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeRef("XSTATE_SAVE", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Mask", "XStateSave"]),
|
|
1751
|
+
#
|
|
1752
|
+
'KeRestoreExtendedProcessorState': SimTypeFunction([SimTypePointer(SimTypeRef("XSTATE_SAVE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["XStateSave"]),
|
|
1753
|
+
#
|
|
1754
|
+
'KeConvertAuxiliaryCounterToPerformanceCounter': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["AuxiliaryCounterValue", "PerformanceCounterValue", "ConversionError"]),
|
|
1755
|
+
#
|
|
1756
|
+
'KeConvertPerformanceCounterToAuxiliaryCounter': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PerformanceCounterValue", "AuxiliaryCounterValue", "ConversionError"]),
|
|
1757
|
+
#
|
|
1758
|
+
'KeQueryAuxiliaryCounterFrequency': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["AuxiliaryCounterFrequency"]),
|
|
1759
|
+
#
|
|
1760
|
+
'KdDisableDebugger': SimTypeFunction([], SimTypeInt(signed=True, label="Int32")),
|
|
1761
|
+
#
|
|
1762
|
+
'KdEnableDebugger': SimTypeFunction([], SimTypeInt(signed=True, label="Int32")),
|
|
1763
|
+
#
|
|
1764
|
+
'KdRefreshDebuggerNotPresent': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
1765
|
+
#
|
|
1766
|
+
'KdChangeOption': SimTypeFunction([SimTypeInt(signed=False, label="KD_OPTION"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Option", "InBufferBytes", "InBuffer", "OutBufferBytes", "OutBuffer", "OutBufferNeeded"]),
|
|
1767
|
+
#
|
|
1768
|
+
'ExAllocatePool': SimTypeFunction([SimTypeInt(signed=False, label="POOL_TYPE"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["PoolType", "NumberOfBytes"]),
|
|
1769
|
+
#
|
|
1770
|
+
'ExAllocatePoolWithQuota': SimTypeFunction([SimTypeInt(signed=False, label="POOL_TYPE"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["PoolType", "NumberOfBytes"]),
|
|
1771
|
+
#
|
|
1772
|
+
'ExAllocatePoolWithTag': SimTypeFunction([SimTypeInt(signed=False, label="POOL_TYPE"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["PoolType", "NumberOfBytes", "Tag"]),
|
|
1773
|
+
#
|
|
1774
|
+
'ExAllocatePoolWithTagPriority': SimTypeFunction([SimTypeInt(signed=False, label="POOL_TYPE"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="EX_POOL_PRIORITY")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["PoolType", "NumberOfBytes", "Tag", "Priority"]),
|
|
1775
|
+
#
|
|
1776
|
+
'ExAllocatePool2': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Flags", "NumberOfBytes", "Tag"]),
|
|
1777
|
+
#
|
|
1778
|
+
'ExAllocatePool3': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("POOL_EXTENDED_PARAMETER", SimStruct), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Flags", "NumberOfBytes", "Tag", "ExtendedParameters", "ExtendedParametersCount"]),
|
|
1779
|
+
#
|
|
1780
|
+
'ExFreePool2': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("POOL_EXTENDED_PARAMETER", SimStruct), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["P", "Tag", "ExtendedParameters", "ExtendedParametersCount"]),
|
|
1781
|
+
#
|
|
1782
|
+
'ExCreatePool': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeRef("POOL_CREATE_EXTENDED_PARAMS", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Flags", "Tag", "Params", "PoolHandle"]),
|
|
1783
|
+
#
|
|
1784
|
+
'ExDestroyPool': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["PoolHandle"]),
|
|
1785
|
+
#
|
|
1786
|
+
'ExSecurePoolUpdate': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SecurePoolHandle", "Tag", "Allocation", "Cookie", "Offset", "Size", "Buffer"]),
|
|
1787
|
+
#
|
|
1788
|
+
'ExSecurePoolValidate': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["SecurePoolHandle", "Tag", "Allocation", "Cookie"]),
|
|
1789
|
+
#
|
|
1790
|
+
'ExAllocatePoolWithQuotaTag': SimTypeFunction([SimTypeInt(signed=False, label="POOL_TYPE"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["PoolType", "NumberOfBytes", "Tag"]),
|
|
1791
|
+
#
|
|
1792
|
+
'ExFreePool': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["P"]),
|
|
1793
|
+
#
|
|
1794
|
+
'ExFreePoolWithTag': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["P", "Tag"]),
|
|
1795
|
+
#
|
|
1796
|
+
'ExAcquireFastMutexUnsafe': SimTypeFunction([SimTypePointer(SimTypeRef("FAST_MUTEX", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FastMutex"]),
|
|
1797
|
+
#
|
|
1798
|
+
'ExReleaseFastMutexUnsafe': SimTypeFunction([SimTypePointer(SimTypeRef("FAST_MUTEX", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FastMutex"]),
|
|
1799
|
+
#
|
|
1800
|
+
'ExAcquireFastMutex': SimTypeFunction([SimTypePointer(SimTypeRef("FAST_MUTEX", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FastMutex"]),
|
|
1801
|
+
#
|
|
1802
|
+
'ExReleaseFastMutex': SimTypeFunction([SimTypePointer(SimTypeRef("FAST_MUTEX", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FastMutex"]),
|
|
1803
|
+
#
|
|
1804
|
+
'ExTryToAcquireFastMutex': SimTypeFunction([SimTypePointer(SimTypeRef("FAST_MUTEX", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FastMutex"]),
|
|
1805
|
+
#
|
|
1806
|
+
'ExInterlockedAddLargeInteger': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeLongLong(signed=True, label="Int64"), arg_names=["Addend", "Increment", "Lock"]),
|
|
1807
|
+
#
|
|
1808
|
+
'ProbeForRead': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Address", "Length", "Alignment"]),
|
|
1809
|
+
#
|
|
1810
|
+
'ExRaiseStatus': SimTypeFunction([SimTypeInt(signed=True, label="Int32")], SimTypeBottom(label="Void"), arg_names=["Status"]),
|
|
1811
|
+
#
|
|
1812
|
+
'ProbeForWrite': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Address", "Length", "Alignment"]),
|
|
1813
|
+
#
|
|
1814
|
+
'ExQueueWorkItem': SimTypeFunction([SimTypePointer(SimTypeRef("WORK_QUEUE_ITEM", SimStruct), offset=0), SimTypeInt(signed=False, label="WORK_QUEUE_TYPE")], SimTypeBottom(label="Void"), arg_names=["WorkItem", "QueueType"]),
|
|
1815
|
+
#
|
|
1816
|
+
'ExIsProcessorFeaturePresent': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["ProcessorFeature"]),
|
|
1817
|
+
#
|
|
1818
|
+
'ExInitializeResourceLite': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Resource"]),
|
|
1819
|
+
#
|
|
1820
|
+
'ExReinitializeResourceLite': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Resource"]),
|
|
1821
|
+
#
|
|
1822
|
+
'ExAcquireResourceSharedLite': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["Resource", "Wait"]),
|
|
1823
|
+
#
|
|
1824
|
+
'ExEnterCriticalRegionAndAcquireResourceShared': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Resource"]),
|
|
1825
|
+
#
|
|
1826
|
+
'ExAcquireResourceExclusiveLite': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["Resource", "Wait"]),
|
|
1827
|
+
#
|
|
1828
|
+
'ExEnterCriticalRegionAndAcquireResourceExclusive': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Resource"]),
|
|
1829
|
+
#
|
|
1830
|
+
'ExAcquireSharedStarveExclusive': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["Resource", "Wait"]),
|
|
1831
|
+
#
|
|
1832
|
+
'ExAcquireSharedWaitForExclusive': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["Resource", "Wait"]),
|
|
1833
|
+
#
|
|
1834
|
+
'ExEnterCriticalRegionAndAcquireSharedWaitForExclusive': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Resource"]),
|
|
1835
|
+
#
|
|
1836
|
+
'ExReleaseResourceLite': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Resource"]),
|
|
1837
|
+
#
|
|
1838
|
+
'ExReleaseResourceAndLeaveCriticalRegion': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Resource"]),
|
|
1839
|
+
#
|
|
1840
|
+
'ExReleaseResourceForThreadLite': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Resource", "ResourceThreadId"]),
|
|
1841
|
+
#
|
|
1842
|
+
'ExSetResourceOwnerPointer': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Resource", "OwnerPointer"]),
|
|
1843
|
+
#
|
|
1844
|
+
'ExSetResourceOwnerPointerEx': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Resource", "OwnerPointer", "Flags"]),
|
|
1845
|
+
#
|
|
1846
|
+
'ExConvertExclusiveToSharedLite': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Resource"]),
|
|
1847
|
+
#
|
|
1848
|
+
'ExDeleteResourceLite': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Resource"]),
|
|
1849
|
+
#
|
|
1850
|
+
'ExGetExclusiveWaiterCount': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Resource"]),
|
|
1851
|
+
#
|
|
1852
|
+
'ExGetSharedWaiterCount': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Resource"]),
|
|
1853
|
+
#
|
|
1854
|
+
'ExIsResourceAcquiredExclusiveLite': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Resource"]),
|
|
1855
|
+
#
|
|
1856
|
+
'ExIsResourceAcquiredSharedLite': SimTypeFunction([SimTypePointer(SimTypeRef("ERESOURCE", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Resource"]),
|
|
1857
|
+
#
|
|
1858
|
+
'ExGetPreviousMode': SimTypeFunction([], SimTypeChar(label="SByte")),
|
|
1859
|
+
#
|
|
1860
|
+
'ExSetTimerResolution': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte")], SimTypeInt(signed=False, label="UInt32"), arg_names=["DesiredTime", "SetResolution"]),
|
|
1861
|
+
#
|
|
1862
|
+
'ExQueryTimerResolution': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeBottom(label="Void"), arg_names=["MaximumTime", "MinimumTime", "CurrentTime"]),
|
|
1863
|
+
#
|
|
1864
|
+
'ExSystemTimeToLocalTime': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeBottom(label="Void"), arg_names=["SystemTime", "LocalTime"]),
|
|
1865
|
+
#
|
|
1866
|
+
'ExLocalTimeToSystemTime': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeBottom(label="Void"), arg_names=["LocalTime", "SystemTime"]),
|
|
1867
|
+
#
|
|
1868
|
+
'ExAllocateTimer': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Callback", "CallbackContext", "Attributes"]),
|
|
1869
|
+
#
|
|
1870
|
+
'ExSetTimer': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeRef("_EXT_SET_PARAMETERS_V0", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Timer", "DueTime", "Period", "Parameters"]),
|
|
1871
|
+
#
|
|
1872
|
+
'ExCancelTimer': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Timer", "Parameters"]),
|
|
1873
|
+
#
|
|
1874
|
+
'ExDeleteTimer': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("EXT_DELETE_PARAMETERS", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Timer", "Cancel", "Wait", "Parameters"]),
|
|
1875
|
+
#
|
|
1876
|
+
'ExCreateCallback': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["CallbackObject", "ObjectAttributes", "Create", "AllowMultipleCallbacks"]),
|
|
1877
|
+
#
|
|
1878
|
+
'ExRegisterCallback': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["CallbackObject", "CallbackFunction", "CallbackContext"]),
|
|
1879
|
+
#
|
|
1880
|
+
'ExUnregisterCallback': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["CallbackRegistration"]),
|
|
1881
|
+
#
|
|
1882
|
+
'ExNotifyCallback': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["CallbackObject", "Argument1", "Argument2"]),
|
|
1883
|
+
#
|
|
1884
|
+
'ExVerifySuite': SimTypeFunction([SimTypeInt(signed=False, label="SUITE_TYPE")], SimTypeChar(label="Byte"), arg_names=["SuiteType"]),
|
|
1885
|
+
#
|
|
1886
|
+
'ExInitializeRundownProtection': SimTypeFunction([SimTypePointer(SimTypeRef("EX_RUNDOWN_REF", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["RunRef"]),
|
|
1887
|
+
#
|
|
1888
|
+
'ExReInitializeRundownProtection': SimTypeFunction([SimTypePointer(SimTypeRef("EX_RUNDOWN_REF", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["RunRef"]),
|
|
1889
|
+
#
|
|
1890
|
+
'ExAcquireRundownProtection': SimTypeFunction([SimTypePointer(SimTypeRef("EX_RUNDOWN_REF", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["RunRef"]),
|
|
1891
|
+
#
|
|
1892
|
+
'ExAcquireRundownProtectionEx': SimTypeFunction([SimTypePointer(SimTypeRef("EX_RUNDOWN_REF", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["RunRef", "Count"]),
|
|
1893
|
+
#
|
|
1894
|
+
'ExReleaseRundownProtection': SimTypeFunction([SimTypePointer(SimTypeRef("EX_RUNDOWN_REF", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["RunRef"]),
|
|
1895
|
+
#
|
|
1896
|
+
'ExReleaseRundownProtectionEx': SimTypeFunction([SimTypePointer(SimTypeRef("EX_RUNDOWN_REF", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["RunRef", "Count"]),
|
|
1897
|
+
#
|
|
1898
|
+
'ExRundownCompleted': SimTypeFunction([SimTypePointer(SimTypeRef("EX_RUNDOWN_REF", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["RunRef"]),
|
|
1899
|
+
#
|
|
1900
|
+
'ExWaitForRundownProtectionRelease': SimTypeFunction([SimTypePointer(SimTypeRef("EX_RUNDOWN_REF", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["RunRef"]),
|
|
1901
|
+
#
|
|
1902
|
+
'ExAllocateCacheAwareRundownProtection': SimTypeFunction([SimTypeInt(signed=False, label="POOL_TYPE"), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["PoolType", "PoolTag"]),
|
|
1903
|
+
#
|
|
1904
|
+
'ExSizeOfRundownProtectionCacheAware': SimTypeFunction([], SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)),
|
|
1905
|
+
#
|
|
1906
|
+
'ExInitializeRundownProtectionCacheAware': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["RunRefCacheAware", "RunRefSize"]),
|
|
1907
|
+
#
|
|
1908
|
+
'ExFreeCacheAwareRundownProtection': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["RunRefCacheAware"]),
|
|
1909
|
+
#
|
|
1910
|
+
'ExAcquireRundownProtectionCacheAware': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeChar(label="Byte"), arg_names=["RunRefCacheAware"]),
|
|
1911
|
+
#
|
|
1912
|
+
'ExReleaseRundownProtectionCacheAware': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["RunRefCacheAware"]),
|
|
1913
|
+
#
|
|
1914
|
+
'ExAcquireRundownProtectionCacheAwareEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["RunRefCacheAware", "Count"]),
|
|
1915
|
+
#
|
|
1916
|
+
'ExReleaseRundownProtectionCacheAwareEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["RunRef", "Count"]),
|
|
1917
|
+
#
|
|
1918
|
+
'ExWaitForRundownProtectionReleaseCacheAware': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["RunRef"]),
|
|
1919
|
+
#
|
|
1920
|
+
'ExReInitializeRundownProtectionCacheAware': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["RunRefCacheAware"]),
|
|
1921
|
+
#
|
|
1922
|
+
'ExRundownCompletedCacheAware': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["RunRefCacheAware"]),
|
|
1923
|
+
#
|
|
1924
|
+
'ExInitializeRundownProtectionCacheAwareEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["RunRefCacheAware", "Flags"]),
|
|
1925
|
+
#
|
|
1926
|
+
'ExCleanupRundownProtectionCacheAware': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["RunRefCacheAware"]),
|
|
1927
|
+
#
|
|
1928
|
+
'ExInitializePushLock': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["PushLock"]),
|
|
1929
|
+
#
|
|
1930
|
+
'ExAcquirePushLockExclusiveEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["PushLock", "Flags"]),
|
|
1931
|
+
#
|
|
1932
|
+
'ExAcquirePushLockSharedEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["PushLock", "Flags"]),
|
|
1933
|
+
#
|
|
1934
|
+
'ExReleasePushLockExclusiveEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["PushLock", "Flags"]),
|
|
1935
|
+
#
|
|
1936
|
+
'ExReleasePushLockSharedEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["PushLock", "Flags"]),
|
|
1937
|
+
#
|
|
1938
|
+
'ExAcquireSpinLockSharedAtDpcLevel': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeBottom(label="Void"), arg_names=["SpinLock"]),
|
|
1939
|
+
#
|
|
1940
|
+
'ExAcquireSpinLockShared': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["SpinLock"]),
|
|
1941
|
+
#
|
|
1942
|
+
'ExReleaseSpinLockSharedFromDpcLevel': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeBottom(label="Void"), arg_names=["SpinLock"]),
|
|
1943
|
+
#
|
|
1944
|
+
'ExReleaseSpinLockShared': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["SpinLock", "OldIrql"]),
|
|
1945
|
+
#
|
|
1946
|
+
'ExTryConvertSharedSpinLockExclusive': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["SpinLock"]),
|
|
1947
|
+
#
|
|
1948
|
+
'ExAcquireSpinLockExclusiveAtDpcLevel': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeBottom(label="Void"), arg_names=["SpinLock"]),
|
|
1949
|
+
#
|
|
1950
|
+
'ExAcquireSpinLockExclusive': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["SpinLock"]),
|
|
1951
|
+
#
|
|
1952
|
+
'ExReleaseSpinLockExclusiveFromDpcLevel': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeBottom(label="Void"), arg_names=["SpinLock"]),
|
|
1953
|
+
#
|
|
1954
|
+
'ExReleaseSpinLockExclusive': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["SpinLock", "OldIrql"]),
|
|
1955
|
+
#
|
|
1956
|
+
'ExTryAcquireSpinLockSharedAtDpcLevel': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["SpinLock"]),
|
|
1957
|
+
#
|
|
1958
|
+
'ExTryAcquireSpinLockExclusiveAtDpcLevel': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["SpinLock"]),
|
|
1959
|
+
#
|
|
1960
|
+
'ExGetFirmwareEnvironmentVariable': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["VariableName", "VendorGuid", "Value", "ValueLength", "Attributes"]),
|
|
1961
|
+
#
|
|
1962
|
+
'ExSetFirmwareEnvironmentVariable': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["VariableName", "VendorGuid", "Value", "ValueLength", "Attributes"]),
|
|
1963
|
+
#
|
|
1964
|
+
'ExIsManufacturingModeEnabled': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
1965
|
+
#
|
|
1966
|
+
'ExIsSoftBoot': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
1967
|
+
#
|
|
1968
|
+
'ExGetFirmwareType': SimTypeFunction([], SimTypeInt(signed=False, label="FIRMWARE_TYPE")),
|
|
1969
|
+
#
|
|
1970
|
+
'ExEnumerateSystemFirmwareTables': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FirmwareTableProviderSignature", "FirmwareTableBuffer", "BufferLength", "ReturnLength"]),
|
|
1971
|
+
#
|
|
1972
|
+
'ExGetSystemFirmwareTable': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FirmwareTableProviderSignature", "FirmwareTableID", "FirmwareTableBuffer", "BufferLength", "ReturnLength"]),
|
|
1973
|
+
#
|
|
1974
|
+
'CmRegisterCallback': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Function", "Context", "Cookie"]),
|
|
1975
|
+
#
|
|
1976
|
+
'CmUnRegisterCallback': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64")], SimTypeInt(signed=True, label="Int32"), arg_names=["Cookie"]),
|
|
1977
|
+
#
|
|
1978
|
+
'CmRegisterCallbackEx': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Function", "Altitude", "Driver", "Context", "Cookie", "Reserved"]),
|
|
1979
|
+
#
|
|
1980
|
+
'CmGetCallbackVersion': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Major", "Minor"]),
|
|
1981
|
+
#
|
|
1982
|
+
'CmSetCallbackObjectContext': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "Cookie", "NewContext", "OldContext"]),
|
|
1983
|
+
#
|
|
1984
|
+
'CmCallbackGetKeyObjectID': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Cookie", "Object", "ObjectID", "ObjectName"]),
|
|
1985
|
+
#
|
|
1986
|
+
'CmGetBoundTransaction': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Cookie", "Object"]),
|
|
1987
|
+
#
|
|
1988
|
+
'CmCallbackGetKeyObjectIDEx': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Cookie", "Object", "ObjectID", "ObjectName", "Flags"]),
|
|
1989
|
+
#
|
|
1990
|
+
'CmCallbackReleaseKeyObjectIDEx': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["ObjectName"]),
|
|
1991
|
+
#
|
|
1992
|
+
'MmQuerySystemSize': SimTypeFunction([], SimTypeInt(signed=False, label="MM_SYSTEMSIZE")),
|
|
1993
|
+
#
|
|
1994
|
+
'MmIsVerifierEnabled': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["VerifierFlags"]),
|
|
1995
|
+
#
|
|
1996
|
+
'MmAddVerifierThunks': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ThunkBuffer", "ThunkBufferSize"]),
|
|
1997
|
+
#
|
|
1998
|
+
'MmAddVerifierSpecialThunks': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["EntryRoutine", "ThunkBuffer", "ThunkBufferSize"]),
|
|
1999
|
+
#
|
|
2000
|
+
'MmProbeAndLockSelectedPages': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypePointer(SimUnion({"Buffer": SimTypePointer(SimTypeBottom(label="Void"), offset=0), "Alignment": SimTypeLongLong(signed=False, label="UInt64")}, name="<anon>", label="None"), offset=0), SimTypeChar(label="SByte"), SimTypeInt(signed=False, label="LOCK_OPERATION")], SimTypeBottom(label="Void"), arg_names=["MemoryDescriptorList", "SegmentArray", "AccessMode", "Operation"]),
|
|
2001
|
+
#
|
|
2002
|
+
'MmProbeAndLockProcessPages': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="SByte"), SimTypeInt(signed=False, label="LOCK_OPERATION")], SimTypeBottom(label="Void"), arg_names=["MemoryDescriptorList", "Process", "AccessMode", "Operation"]),
|
|
2003
|
+
#
|
|
2004
|
+
'MmProbeAndLockPages': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeChar(label="SByte"), SimTypeInt(signed=False, label="LOCK_OPERATION")], SimTypeBottom(label="Void"), arg_names=["MemoryDescriptorList", "AccessMode", "Operation"]),
|
|
2005
|
+
#
|
|
2006
|
+
'MmUnlockPages': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["MemoryDescriptorList"]),
|
|
2007
|
+
#
|
|
2008
|
+
'MmBuildMdlForNonPagedPool': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["MemoryDescriptorList"]),
|
|
2009
|
+
#
|
|
2010
|
+
'MmAllocateMdlForIoSpace': SimTypeFunction([SimTypePointer(SimTypeRef("MM_PHYSICAL_ADDRESS_LIST", SimStruct), label="LPArray", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PhysicalAddressList", "NumberOfEntries", "NewMdl"]),
|
|
2011
|
+
#
|
|
2012
|
+
'MmAreMdlPagesCached': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["MemoryDescriptorList"]),
|
|
2013
|
+
#
|
|
2014
|
+
'MmSetPermanentCacheAttribute': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["StartAddress", "NumberOfBytes", "CacheType", "Flags"]),
|
|
2015
|
+
#
|
|
2016
|
+
'MmMapLockedPages': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeChar(label="SByte")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["MemoryDescriptorList", "AccessMode"]),
|
|
2017
|
+
#
|
|
2018
|
+
'MmMapMdl': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["MemoryDescriptorList", "Protection", "DriverRoutine", "DriverContext"]),
|
|
2019
|
+
#
|
|
2020
|
+
'MmMapMemoryDumpMdlEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Va", "PageTotal", "MemoryDumpMdl", "Flags"]),
|
|
2021
|
+
#
|
|
2022
|
+
'MmIsIoSpaceActive': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["StartAddress", "NumberOfBytes"]),
|
|
2023
|
+
#
|
|
2024
|
+
'MmAdvanceMdl': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Mdl", "NumberOfBytes"]),
|
|
2025
|
+
#
|
|
2026
|
+
'MmProtectMdlSystemAddress': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["MemoryDescriptorList", "NewProtect"]),
|
|
2027
|
+
#
|
|
2028
|
+
'MmMapLockedPagesSpecifyCache': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeChar(label="SByte"), SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["MemoryDescriptorList", "AccessMode", "CacheType", "RequestedAddress", "BugCheckOnFailure", "Priority"]),
|
|
2029
|
+
#
|
|
2030
|
+
'MmUnmapLockedPages': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["BaseAddress", "MemoryDescriptorList"]),
|
|
2031
|
+
#
|
|
2032
|
+
'MmAllocateMappingAddressEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["NumberOfBytes", "PoolTag", "Flags"]),
|
|
2033
|
+
#
|
|
2034
|
+
'MmAllocateMappingAddress': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["NumberOfBytes", "PoolTag"]),
|
|
2035
|
+
#
|
|
2036
|
+
'MmFreeMappingAddress': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["BaseAddress", "PoolTag"]),
|
|
2037
|
+
#
|
|
2038
|
+
'MmMapLockedPagesWithReservedMapping': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["MappingAddress", "PoolTag", "MemoryDescriptorList", "CacheType"]),
|
|
2039
|
+
#
|
|
2040
|
+
'MmUnmapReservedMapping': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["BaseAddress", "PoolTag", "MemoryDescriptorList"]),
|
|
2041
|
+
#
|
|
2042
|
+
'MmAllocateNodePagesForMdlEx': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), arg_names=["LowAddress", "HighAddress", "SkipBytes", "TotalBytes", "CacheType", "IdealNode", "Flags"]),
|
|
2043
|
+
#
|
|
2044
|
+
'MmAllocatePartitionNodePagesForMdlEx': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), arg_names=["LowAddress", "HighAddress", "SkipBytes", "TotalBytes", "CacheType", "IdealNode", "Flags", "PartitionObject"]),
|
|
2045
|
+
#
|
|
2046
|
+
'MmAllocatePagesForMdlEx': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE"), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), arg_names=["LowAddress", "HighAddress", "SkipBytes", "TotalBytes", "CacheType", "Flags"]),
|
|
2047
|
+
#
|
|
2048
|
+
'MmAllocatePagesForMdl': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), arg_names=["LowAddress", "HighAddress", "SkipBytes", "TotalBytes"]),
|
|
2049
|
+
#
|
|
2050
|
+
'MmFreePagesFromMdlEx': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["MemoryDescriptorList", "Flags"]),
|
|
2051
|
+
#
|
|
2052
|
+
'MmFreePagesFromMdl': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["MemoryDescriptorList"]),
|
|
2053
|
+
#
|
|
2054
|
+
'MmMapIoSpace': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["PhysicalAddress", "NumberOfBytes", "CacheType"]),
|
|
2055
|
+
#
|
|
2056
|
+
'MmUnmapIoSpace': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["BaseAddress", "NumberOfBytes"]),
|
|
2057
|
+
#
|
|
2058
|
+
'MmMapIoSpaceEx': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["PhysicalAddress", "NumberOfBytes", "Protect"]),
|
|
2059
|
+
#
|
|
2060
|
+
'MmAllocateContiguousMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeLongLong(signed=True, label="Int64")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["NumberOfBytes", "HighestAcceptableAddress"]),
|
|
2061
|
+
#
|
|
2062
|
+
'MmAllocateContiguousMemorySpecifyCache': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["NumberOfBytes", "LowestAcceptableAddress", "HighestAcceptableAddress", "BoundaryAddressMultiple", "CacheType"]),
|
|
2063
|
+
#
|
|
2064
|
+
'MmAllocateContiguousMemorySpecifyCacheNode': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE"), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["NumberOfBytes", "LowestAcceptableAddress", "HighestAcceptableAddress", "BoundaryAddressMultiple", "CacheType", "PreferredNode"]),
|
|
2065
|
+
#
|
|
2066
|
+
'MmAllocateContiguousNodeMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["NumberOfBytes", "LowestAcceptableAddress", "HighestAcceptableAddress", "BoundaryAddressMultiple", "Protect", "PreferredNode"]),
|
|
2067
|
+
#
|
|
2068
|
+
'MmAllocateContiguousMemoryEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeLongLong(signed=True, label="Int64"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NumberOfBytes", "LowestAcceptableAddress", "HighestAcceptableAddress", "BoundaryAddressMultiple", "PreferredNode", "Protect", "PartitionObject", "Tag", "Flags", "BaseAddress"]),
|
|
2069
|
+
#
|
|
2070
|
+
'MmFreeContiguousMemory': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["BaseAddress"]),
|
|
2071
|
+
#
|
|
2072
|
+
'MmFreeContiguousMemorySpecifyCache': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE")], SimTypeBottom(label="Void"), arg_names=["BaseAddress", "NumberOfBytes", "CacheType"]),
|
|
2073
|
+
#
|
|
2074
|
+
'MmSizeOfMdl': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), arg_names=["Base", "Length"]),
|
|
2075
|
+
#
|
|
2076
|
+
'MmCreateMdl': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), arg_names=["MemoryDescriptorList", "Base", "Length"]),
|
|
2077
|
+
#
|
|
2078
|
+
'MmMdlPageContentsState': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeInt(signed=False, label="MM_MDL_PAGE_CONTENTS_STATE")], SimTypeInt(signed=False, label="MM_MDL_PAGE_CONTENTS_STATE"), arg_names=["MemoryDescriptorList", "State"]),
|
|
2079
|
+
#
|
|
2080
|
+
'MmLockPagableDataSection': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["AddressWithinSection"]),
|
|
2081
|
+
#
|
|
2082
|
+
'MmResetDriverPaging': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["AddressWithinSection"]),
|
|
2083
|
+
#
|
|
2084
|
+
'MmPageEntireDriver': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["AddressWithinSection"]),
|
|
2085
|
+
#
|
|
2086
|
+
'MmUnlockPagableImageSection': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ImageSectionHandle"]),
|
|
2087
|
+
#
|
|
2088
|
+
'MmIsDriverSuspectForVerifier': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["DriverObject"]),
|
|
2089
|
+
#
|
|
2090
|
+
'MmIsDriverVerifying': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["DriverObject"]),
|
|
2091
|
+
#
|
|
2092
|
+
'MmIsDriverVerifyingByAddress': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["AddressWithinSection"]),
|
|
2093
|
+
#
|
|
2094
|
+
'MmProtectDriverSection': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["AddressWithinSection", "Size", "Flags"]),
|
|
2095
|
+
#
|
|
2096
|
+
'SeCaptureSubjectContext': SimTypeFunction([SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["SubjectContext"]),
|
|
2097
|
+
#
|
|
2098
|
+
'SeLockSubjectContext': SimTypeFunction([SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["SubjectContext"]),
|
|
2099
|
+
#
|
|
2100
|
+
'SeUnlockSubjectContext': SimTypeFunction([SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["SubjectContext"]),
|
|
2101
|
+
#
|
|
2102
|
+
'SeReleaseSubjectContext': SimTypeFunction([SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["SubjectContext"]),
|
|
2103
|
+
#
|
|
2104
|
+
'SeAssignSecurity': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0), SimTypeInt(signed=False, label="POOL_TYPE")], SimTypeInt(signed=True, label="Int32"), arg_names=["ParentDescriptor", "ExplicitDescriptor", "NewDescriptor", "IsDirectoryObject", "SubjectContext", "GenericMapping", "PoolType"]),
|
|
2105
|
+
#
|
|
2106
|
+
'SeComputeAutoInheritByObjectType': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["ObjectType", "SecurityDescriptor", "ParentSecurityDescriptor"]),
|
|
2107
|
+
#
|
|
2108
|
+
'SeAssignSecurityEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0), SimTypeInt(signed=False, label="POOL_TYPE")], SimTypeInt(signed=True, label="Int32"), arg_names=["ParentDescriptor", "ExplicitDescriptor", "NewDescriptor", "ObjectType", "IsDirectoryObject", "AutoInheritFlags", "SubjectContext", "GenericMapping", "PoolType"]),
|
|
2109
|
+
#
|
|
2110
|
+
'SeDeassignSecurity': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SecurityDescriptor"]),
|
|
2111
|
+
#
|
|
2112
|
+
'SeAccessCheck': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SECURITY_SUBJECT_CONTEXT", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("PRIVILEGE_SET", SimStruct), offset=0), offset=0), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0), SimTypeChar(label="SByte"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["SecurityDescriptor", "SubjectSecurityContext", "SubjectContextLocked", "DesiredAccess", "PreviouslyGrantedAccess", "Privileges", "GenericMapping", "AccessMode", "GrantedAccess", "AccessStatus"]),
|
|
2113
|
+
#
|
|
2114
|
+
'SeSetAuditParameter': SimTypeFunction([SimTypePointer(SimTypeRef("SE_ADT_PARAMETER_ARRAY", SimStruct), offset=0), SimTypeInt(signed=False, label="SE_ADT_PARAMETER_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["AuditParameters", "Type", "Index", "Data"]),
|
|
2115
|
+
#
|
|
2116
|
+
'SeReportSecurityEvent': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("SE_ADT_PARAMETER_ARRAY", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Flags", "SourceName", "UserSid", "AuditParameters"]),
|
|
2117
|
+
#
|
|
2118
|
+
'SeValidSecurityDescriptor': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Length", "SecurityDescriptor"]),
|
|
2119
|
+
#
|
|
2120
|
+
'SeRegisterImageVerificationCallback': SimTypeFunction([SimTypeInt(signed=False, label="SE_IMAGE_TYPE"), SimTypeInt(signed=False, label="SE_IMAGE_VERIFICATION_CALLBACK_TYPE"), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ImageType", "CallbackType", "CallbackFunction", "CallbackContext", "Token", "CallbackHandle"]),
|
|
2121
|
+
#
|
|
2122
|
+
'SeUnregisterImageVerificationCallback': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["CallbackHandle"]),
|
|
2123
|
+
#
|
|
2124
|
+
'PsCreateSystemThread': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("CLIENT_ID", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ThreadHandle", "DesiredAccess", "ObjectAttributes", "ProcessHandle", "ClientId", "StartRoutine", "StartContext"]),
|
|
2125
|
+
#
|
|
2126
|
+
'PsTerminateSystemThread': SimTypeFunction([SimTypeInt(signed=True, label="Int32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ExitStatus"]),
|
|
2127
|
+
#
|
|
2128
|
+
'PsWrapApcWow64Thread': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ApcContext", "ApcRoutine"]),
|
|
2129
|
+
#
|
|
2130
|
+
'PsGetVersion': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["MajorVersion", "MinorVersion", "BuildNumber", "CSDVersion"]),
|
|
2131
|
+
#
|
|
2132
|
+
'PsQueryTotalCycleTimeProcess': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeLongLong(signed=False, label="UInt64"), arg_names=["Process", "CycleTimeStamp"]),
|
|
2133
|
+
#
|
|
2134
|
+
'PsAllocateAffinityToken': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["AffinityToken"]),
|
|
2135
|
+
#
|
|
2136
|
+
'PsFreeAffinityToken': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["AffinityToken"]),
|
|
2137
|
+
#
|
|
2138
|
+
'PsSetSystemMultipleGroupAffinityThread': SimTypeFunction([SimTypePointer(SimTypeRef("GROUP_AFFINITY", SimStruct), label="LPArray", offset=0), SimTypeShort(signed=False, label="UInt16"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["GroupAffinities", "GroupCount", "AffinityToken"]),
|
|
2139
|
+
#
|
|
2140
|
+
'PsRevertToUserMultipleGroupAffinityThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["AffinityToken"]),
|
|
2141
|
+
#
|
|
2142
|
+
'IoAcquireCancelSpinLock': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Irql"]),
|
|
2143
|
+
#
|
|
2144
|
+
'IoAllocateDriverObjectExtension': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "ClientIdentificationAddress", "DriverObjectExtensionSize", "DriverObjectExtension"]),
|
|
2145
|
+
#
|
|
2146
|
+
'IoAllocateErrorLogEntry': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["IoObject", "EntrySize"]),
|
|
2147
|
+
#
|
|
2148
|
+
'IoAllocateIrp': SimTypeFunction([SimTypeChar(label="SByte"), SimTypeChar(label="Byte")], SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), arg_names=["StackSize", "ChargeQuota"]),
|
|
2149
|
+
#
|
|
2150
|
+
'IoAllocateIrpEx': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeChar(label="SByte"), SimTypeChar(label="Byte")], SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), arg_names=["DeviceObject", "StackSize", "ChargeQuota"]),
|
|
2151
|
+
#
|
|
2152
|
+
'IoAllocateMdl': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), arg_names=["VirtualAddress", "Length", "SecondaryBuffer", "ChargeQuota", "Irp"]),
|
|
2153
|
+
#
|
|
2154
|
+
'IoAttachDevice': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SourceDevice", "TargetDevice", "AttachedDevice"]),
|
|
2155
|
+
#
|
|
2156
|
+
'IoAttachDeviceToDeviceStack': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), arg_names=["SourceDevice", "TargetDevice"]),
|
|
2157
|
+
#
|
|
2158
|
+
'IoBuildAsynchronousFsdRequest': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), arg_names=["MajorFunction", "DeviceObject", "Buffer", "Length", "StartingOffset", "IoStatusBlock"]),
|
|
2159
|
+
#
|
|
2160
|
+
'IoBuildDeviceIoControlRequest': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), arg_names=["IoControlCode", "DeviceObject", "InputBuffer", "InputBufferLength", "OutputBuffer", "OutputBufferLength", "InternalDeviceIoControl", "Event", "IoStatusBlock"]),
|
|
2161
|
+
#
|
|
2162
|
+
'IoBuildPartialMdl': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["SourceMdl", "TargetMdl", "VirtualAddress", "Length"]),
|
|
2163
|
+
#
|
|
2164
|
+
'IoGetBootDiskInformation': SimTypeFunction([SimTypePointer(SimTypeRef("BOOTDISK_INFORMATION", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["BootDiskInformation", "Size"]),
|
|
2165
|
+
#
|
|
2166
|
+
'IoGetBootDiskInformationLite': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeRef("BOOTDISK_INFORMATION_LITE", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["BootDiskInformation"]),
|
|
2167
|
+
#
|
|
2168
|
+
'IoBuildSynchronousFsdRequest': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0)], SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), arg_names=["MajorFunction", "DeviceObject", "Buffer", "Length", "StartingOffset", "Event", "IoStatusBlock"]),
|
|
2169
|
+
#
|
|
2170
|
+
'IofCallDriver': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "Irp"]),
|
|
2171
|
+
#
|
|
2172
|
+
'IoCancelIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Irp"]),
|
|
2173
|
+
#
|
|
2174
|
+
'IoCheckShareAccess': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SHARE_ACCESS", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DesiredAccess", "DesiredShareAccess", "FileObject", "ShareAccess", "Update"]),
|
|
2175
|
+
#
|
|
2176
|
+
'IoCheckShareAccessEx': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SHARE_ACCESS", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DesiredAccess", "DesiredShareAccess", "FileObject", "ShareAccess", "Update", "WritePermission"]),
|
|
2177
|
+
#
|
|
2178
|
+
'IoCheckLinkShareAccess': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SHARE_ACCESS", SimStruct), offset=0), SimTypePointer(SimTypeRef("LINK_SHARE_ACCESS", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["DesiredAccess", "DesiredShareAccess", "FileObject", "ShareAccess", "LinkShareAccess", "IoShareAccessFlags"]),
|
|
2179
|
+
#
|
|
2180
|
+
'IofCompleteRequest': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeChar(label="SByte")], SimTypeBottom(label="Void"), arg_names=["Irp", "PriorityBoost"]),
|
|
2181
|
+
#
|
|
2182
|
+
'IoConnectInterrupt': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeFunction([], SimTypeChar(label="Byte")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="KINTERRUPT_MODE"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["InterruptObject", "ServiceRoutine", "ServiceContext", "SpinLock", "Vector", "Irql", "SynchronizeIrql", "InterruptMode", "ShareVector", "ProcessorEnableMask", "FloatingSave"]),
|
|
2183
|
+
#
|
|
2184
|
+
'IoConnectInterruptEx': SimTypeFunction([SimTypePointer(SimTypeRef("IO_CONNECT_INTERRUPT_PARAMETERS", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Parameters"]),
|
|
2185
|
+
#
|
|
2186
|
+
'IoCreateDevice': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "DeviceExtensionSize", "DeviceName", "DeviceType", "DeviceCharacteristics", "Exclusive", "DeviceObject"]),
|
|
2187
|
+
#
|
|
2188
|
+
'IoIsWdmVersionAvailable': SimTypeFunction([SimTypeChar(label="Byte"), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["MajorVersion", "MinorVersion"]),
|
|
2189
|
+
#
|
|
2190
|
+
'IoCreateFile': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="CREATE_FILE_TYPE"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "DesiredAccess", "ObjectAttributes", "IoStatusBlock", "AllocationSize", "FileAttributes", "ShareAccess", "Disposition", "CreateOptions", "EaBuffer", "EaLength", "CreateFileType", "InternalParameters", "Options"]),
|
|
2191
|
+
#
|
|
2192
|
+
'IoCreateNotificationEvent': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0), arg_names=["EventName", "EventHandle"]),
|
|
2193
|
+
#
|
|
2194
|
+
'IoCreateSymbolicLink': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SymbolicLinkName", "DeviceName"]),
|
|
2195
|
+
#
|
|
2196
|
+
'IoCreateSynchronizationEvent': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0), arg_names=["EventName", "EventHandle"]),
|
|
2197
|
+
#
|
|
2198
|
+
'IoCreateUnprotectedSymbolicLink': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SymbolicLinkName", "DeviceName"]),
|
|
2199
|
+
#
|
|
2200
|
+
'IoDeleteDevice': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DeviceObject"]),
|
|
2201
|
+
#
|
|
2202
|
+
'IoDeleteSymbolicLink': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SymbolicLinkName"]),
|
|
2203
|
+
#
|
|
2204
|
+
'IoDetachDevice': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["TargetDevice"]),
|
|
2205
|
+
#
|
|
2206
|
+
'IoDisconnectInterrupt': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["InterruptObject"]),
|
|
2207
|
+
#
|
|
2208
|
+
'IoDisconnectInterruptEx': SimTypeFunction([SimTypePointer(SimTypeRef("IO_DISCONNECT_INTERRUPT_PARAMETERS", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Parameters"]),
|
|
2209
|
+
#
|
|
2210
|
+
'IoReportInterruptActive': SimTypeFunction([SimTypePointer(SimTypeRef("IO_REPORT_INTERRUPT_ACTIVE_STATE_PARAMETERS", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Parameters"]),
|
|
2211
|
+
#
|
|
2212
|
+
'IoReportInterruptInactive': SimTypeFunction([SimTypePointer(SimTypeRef("IO_REPORT_INTERRUPT_ACTIVE_STATE_PARAMETERS", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Parameters"]),
|
|
2213
|
+
#
|
|
2214
|
+
'IoGetAffinityInterrupt': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("GROUP_AFFINITY", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["InterruptObject", "GroupAffinity"]),
|
|
2215
|
+
#
|
|
2216
|
+
'IoFreeIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Irp"]),
|
|
2217
|
+
#
|
|
2218
|
+
'IoFreeMdl': SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Mdl"]),
|
|
2219
|
+
#
|
|
2220
|
+
'IoGetAttachedDeviceReference': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), arg_names=["DeviceObject"]),
|
|
2221
|
+
#
|
|
2222
|
+
'IoGetDriverObjectExtension': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["DriverObject", "ClientIdentificationAddress"]),
|
|
2223
|
+
#
|
|
2224
|
+
'IoGetCurrentProcess': SimTypeFunction([], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)),
|
|
2225
|
+
#
|
|
2226
|
+
'IoGetDeviceObjectPointer': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ObjectName", "DesiredAccess", "FileObject", "DeviceObject"]),
|
|
2227
|
+
#
|
|
2228
|
+
'IoGetDmaAdapter': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_DESCRIPTION", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypePointer(SimTypeRef("DMA_ADAPTER", SimStruct), offset=0), arg_names=["PhysicalDeviceObject", "DeviceDescription", "NumberOfMapRegisters"]),
|
|
2229
|
+
#
|
|
2230
|
+
'IoGetIommuInterface': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("DMA_IOMMU_INTERFACE", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Version", "InterfaceOut"]),
|
|
2231
|
+
#
|
|
2232
|
+
'IoGetIommuInterfaceEx': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeRef("DMA_IOMMU_INTERFACE_EX", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Version", "Flags", "InterfaceOut"]),
|
|
2233
|
+
#
|
|
2234
|
+
'IoForwardIrpSynchronously': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["DeviceObject", "Irp"]),
|
|
2235
|
+
#
|
|
2236
|
+
'IoSynchronousCallDriver': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "Irp"]),
|
|
2237
|
+
#
|
|
2238
|
+
'IoGetInitialStack': SimTypeFunction([], SimTypePointer(SimTypeBottom(label="Void"), offset=0)),
|
|
2239
|
+
#
|
|
2240
|
+
'IoGetStackLimits': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["LowLimit", "HighLimit"]),
|
|
2241
|
+
#
|
|
2242
|
+
'IoWithinStackLimits': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["RegionStart", "RegionSize"]),
|
|
2243
|
+
#
|
|
2244
|
+
'IoGetRelatedDeviceObject': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), arg_names=["FileObject"]),
|
|
2245
|
+
#
|
|
2246
|
+
'IoGetTopLevelIrp': SimTypeFunction([], SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)),
|
|
2247
|
+
#
|
|
2248
|
+
'IoInitializeIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeShort(signed=False, label="UInt16"), SimTypeChar(label="SByte")], SimTypeBottom(label="Void"), arg_names=["Irp", "PacketSize", "StackSize"]),
|
|
2249
|
+
#
|
|
2250
|
+
'IoCleanupIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Irp"]),
|
|
2251
|
+
#
|
|
2252
|
+
'IoInitializeIrpEx': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeShort(signed=False, label="UInt16"), SimTypeChar(label="SByte")], SimTypeBottom(label="Void"), arg_names=["Irp", "DeviceObject", "PacketSize", "StackSize"]),
|
|
2253
|
+
#
|
|
2254
|
+
'IoInitializeTimer': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "TimerRoutine", "Context"]),
|
|
2255
|
+
#
|
|
2256
|
+
'IoReuseIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=True, label="Int32")], SimTypeBottom(label="Void"), arg_names=["Irp", "Iostatus"]),
|
|
2257
|
+
#
|
|
2258
|
+
'IoRegisterShutdownNotification': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject"]),
|
|
2259
|
+
#
|
|
2260
|
+
'IoRegisterLastChanceShutdownNotification': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject"]),
|
|
2261
|
+
#
|
|
2262
|
+
'IoReleaseCancelSpinLock': SimTypeFunction([SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["Irql"]),
|
|
2263
|
+
#
|
|
2264
|
+
'IoRemoveShareAccess': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SHARE_ACCESS", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "ShareAccess"]),
|
|
2265
|
+
#
|
|
2266
|
+
'IoRemoveLinkShareAccess': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SHARE_ACCESS", SimStruct), offset=0), SimTypePointer(SimTypeRef("LINK_SHARE_ACCESS", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "ShareAccess", "LinkShareAccess"]),
|
|
2267
|
+
#
|
|
2268
|
+
'IoRemoveLinkShareAccessEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SHARE_ACCESS", SimStruct), offset=0), SimTypePointer(SimTypeRef("LINK_SHARE_ACCESS", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["FileObject", "ShareAccess", "LinkShareAccess", "IoShareAccessFlags"]),
|
|
2269
|
+
#
|
|
2270
|
+
'IoSetCompletionRoutineEx': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "Irp", "CompletionRoutine", "Context", "InvokeOnSuccess", "InvokeOnError", "InvokeOnCancel"]),
|
|
2271
|
+
#
|
|
2272
|
+
'IoSetShareAccess': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SHARE_ACCESS", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DesiredAccess", "DesiredShareAccess", "FileObject", "ShareAccess"]),
|
|
2273
|
+
#
|
|
2274
|
+
'IoSetShareAccessEx': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SHARE_ACCESS", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeBottom(label="Void"), arg_names=["DesiredAccess", "DesiredShareAccess", "FileObject", "ShareAccess", "WritePermission"]),
|
|
2275
|
+
#
|
|
2276
|
+
'IoSetLinkShareAccess': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SHARE_ACCESS", SimStruct), offset=0), SimTypePointer(SimTypeRef("LINK_SHARE_ACCESS", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["DesiredAccess", "DesiredShareAccess", "FileObject", "ShareAccess", "LinkShareAccess", "IoShareAccessFlags"]),
|
|
2277
|
+
#
|
|
2278
|
+
'IoSetTopLevelIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Irp"]),
|
|
2279
|
+
#
|
|
2280
|
+
'IoInitializeRemoveLockEx': SimTypeFunction([SimTypePointer(SimTypeRef("IO_REMOVE_LOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Lock", "AllocateTag", "MaxLockedMinutes", "HighWatermark", "RemlockSize"]),
|
|
2281
|
+
#
|
|
2282
|
+
'IoAcquireRemoveLockEx': SimTypeFunction([SimTypePointer(SimTypeRef("IO_REMOVE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["RemoveLock", "Tag", "File", "Line", "RemlockSize"]),
|
|
2283
|
+
#
|
|
2284
|
+
'IoReleaseRemoveLockEx': SimTypeFunction([SimTypePointer(SimTypeRef("IO_REMOVE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["RemoveLock", "Tag", "RemlockSize"]),
|
|
2285
|
+
#
|
|
2286
|
+
'IoReleaseRemoveLockAndWaitEx': SimTypeFunction([SimTypePointer(SimTypeRef("IO_REMOVE_LOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["RemoveLock", "Tag", "RemlockSize"]),
|
|
2287
|
+
#
|
|
2288
|
+
'IoSizeOfIrpEx': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeChar(label="SByte")], SimTypeShort(signed=False, label="UInt16"), arg_names=["DeviceObject", "StackSize"]),
|
|
2289
|
+
#
|
|
2290
|
+
'IoStartNextPacket': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["DeviceObject", "Cancelable"]),
|
|
2291
|
+
#
|
|
2292
|
+
'IoStartNextPacketByKey': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["DeviceObject", "Cancelable", "Key"]),
|
|
2293
|
+
#
|
|
2294
|
+
'IoStartPacket': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DeviceObject", "Irp"]), offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["DeviceObject", "Irp", "Key", "CancelFunction"]),
|
|
2295
|
+
#
|
|
2296
|
+
'IoSetStartIoAttributes': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["DeviceObject", "DeferredStartIo", "NonCancelable"]),
|
|
2297
|
+
#
|
|
2298
|
+
'IoStartTimer': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DeviceObject"]),
|
|
2299
|
+
#
|
|
2300
|
+
'IoStopTimer': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DeviceObject"]),
|
|
2301
|
+
#
|
|
2302
|
+
'IoUnregisterShutdownNotification': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DeviceObject"]),
|
|
2303
|
+
#
|
|
2304
|
+
'IoUpdateShareAccess': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SHARE_ACCESS", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "ShareAccess"]),
|
|
2305
|
+
#
|
|
2306
|
+
'IoUpdateLinkShareAccess': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SHARE_ACCESS", SimStruct), offset=0), SimTypePointer(SimTypeRef("LINK_SHARE_ACCESS", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FileObject", "ShareAccess", "LinkShareAccess"]),
|
|
2307
|
+
#
|
|
2308
|
+
'IoUpdateLinkShareAccessEx': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("SHARE_ACCESS", SimStruct), offset=0), SimTypePointer(SimTypeRef("LINK_SHARE_ACCESS", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["FileObject", "ShareAccess", "LinkShareAccess", "IoShareAccessFlags"]),
|
|
2309
|
+
#
|
|
2310
|
+
'IoWriteErrorLogEntry': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ElEntry"]),
|
|
2311
|
+
#
|
|
2312
|
+
'IoCreateSystemThread': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("CLIENT_ID", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["IoObject", "ThreadHandle", "DesiredAccess", "ObjectAttributes", "ProcessHandle", "ClientId", "StartRoutine", "StartContext"]),
|
|
2313
|
+
#
|
|
2314
|
+
'IoAllocateWorkItem': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["DeviceObject"]),
|
|
2315
|
+
#
|
|
2316
|
+
'IoFreeWorkItem': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["IoWorkItem"]),
|
|
2317
|
+
#
|
|
2318
|
+
'IoQueueWorkItem': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypeInt(signed=False, label="WORK_QUEUE_TYPE"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["IoWorkItem", "WorkerRoutine", "QueueType", "Context"]),
|
|
2319
|
+
#
|
|
2320
|
+
'IoQueueWorkItemEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypeInt(signed=False, label="WORK_QUEUE_TYPE"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["IoWorkItem", "WorkerRoutine", "QueueType", "Context"]),
|
|
2321
|
+
#
|
|
2322
|
+
'IoSizeofWorkItem': SimTypeFunction([], SimTypeInt(signed=False, label="UInt32")),
|
|
2323
|
+
#
|
|
2324
|
+
'IoInitializeWorkItem': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["IoObject", "IoWorkItem"]),
|
|
2325
|
+
#
|
|
2326
|
+
'IoUninitializeWorkItem': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["IoWorkItem"]),
|
|
2327
|
+
#
|
|
2328
|
+
'IoTryQueueWorkItem': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypeInt(signed=False, label="WORK_QUEUE_TYPE"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["IoWorkItem", "WorkerRoutine", "QueueType", "Context"]),
|
|
2329
|
+
#
|
|
2330
|
+
'IoWMIRegistrationControl': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "Action"]),
|
|
2331
|
+
#
|
|
2332
|
+
'IoWMIAllocateInstanceIds': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Guid", "InstanceCount", "FirstInstanceId"]),
|
|
2333
|
+
#
|
|
2334
|
+
'IoWMISuggestInstanceName': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PhysicalDeviceObject", "SymbolicLinkName", "CombineNames", "SuggestedInstanceName"]),
|
|
2335
|
+
#
|
|
2336
|
+
'IoWMIWriteEvent': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["WnodeEventItem"]),
|
|
2337
|
+
#
|
|
2338
|
+
'IoWMIOpenBlock': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Guid", "DesiredAccess", "DataBlockObject"]),
|
|
2339
|
+
#
|
|
2340
|
+
'IoWMIQueryAllData': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DataBlockObject", "InOutBufferSize", "OutBuffer"]),
|
|
2341
|
+
#
|
|
2342
|
+
'IoWMIQueryAllDataMultiple': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DataBlockObjectList", "ObjectCount", "InOutBufferSize", "OutBuffer"]),
|
|
2343
|
+
#
|
|
2344
|
+
'IoWMIQuerySingleInstance': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DataBlockObject", "InstanceName", "InOutBufferSize", "OutBuffer"]),
|
|
2345
|
+
#
|
|
2346
|
+
'IoWMIQuerySingleInstanceMultiple': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), label="LPArray", offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DataBlockObjectList", "InstanceNames", "ObjectCount", "InOutBufferSize", "OutBuffer"]),
|
|
2347
|
+
#
|
|
2348
|
+
'IoWMISetSingleInstance': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DataBlockObject", "InstanceName", "Version", "ValueBufferSize", "ValueBuffer"]),
|
|
2349
|
+
#
|
|
2350
|
+
'IoWMISetSingleItem': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DataBlockObject", "InstanceName", "DataItemId", "Version", "ValueBufferSize", "ValueBuffer"]),
|
|
2351
|
+
#
|
|
2352
|
+
'IoWMIExecuteMethod': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DataBlockObject", "InstanceName", "MethodId", "InBufferSize", "OutBufferSize", "InOutBuffer"]),
|
|
2353
|
+
#
|
|
2354
|
+
'IoWMISetNotificationCallback': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "Callback", "Context"]),
|
|
2355
|
+
#
|
|
2356
|
+
'IoWMIHandleToInstanceName': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DataBlockObject", "FileHandle", "InstanceName"]),
|
|
2357
|
+
#
|
|
2358
|
+
'IoWMIDeviceObjectToInstanceName': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DataBlockObject", "DeviceObject", "InstanceName"]),
|
|
2359
|
+
#
|
|
2360
|
+
'IoIs32bitProcess': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Irp"]),
|
|
2361
|
+
#
|
|
2362
|
+
'IoIsInitiator32bitProcess': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Irp"]),
|
|
2363
|
+
#
|
|
2364
|
+
'IoFreeErrorLogEntry': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ElEntry"]),
|
|
2365
|
+
#
|
|
2366
|
+
'IoCsqInitialize': SimTypeFunction([SimTypePointer(SimTypeRef("IO_CSQ", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeFunction([], SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Csq", "CsqInsertIrp", "CsqRemoveIrp", "CsqPeekNextIrp", "CsqAcquireLock", "CsqReleaseLock", "CsqCompleteCanceledIrp"]),
|
|
2367
|
+
#
|
|
2368
|
+
'IoCsqInitializeEx': SimTypeFunction([SimTypePointer(SimTypeRef("IO_CSQ", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeFunction([], SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Csq", "CsqInsertIrp", "CsqRemoveIrp", "CsqPeekNextIrp", "CsqAcquireLock", "CsqReleaseLock", "CsqCompleteCanceledIrp"]),
|
|
2369
|
+
#
|
|
2370
|
+
'IoCsqInsertIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IO_CSQ", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_CSQ_IRP_CONTEXT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Csq", "Irp", "Context"]),
|
|
2371
|
+
#
|
|
2372
|
+
'IoCsqInsertIrpEx': SimTypeFunction([SimTypePointer(SimTypeRef("IO_CSQ", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_CSQ_IRP_CONTEXT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Csq", "Irp", "Context", "InsertContext"]),
|
|
2373
|
+
#
|
|
2374
|
+
'IoCsqRemoveNextIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IO_CSQ", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), arg_names=["Csq", "PeekContext"]),
|
|
2375
|
+
#
|
|
2376
|
+
'IoCsqRemoveIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IO_CSQ", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_CSQ_IRP_CONTEXT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), arg_names=["Csq", "Context"]),
|
|
2377
|
+
#
|
|
2378
|
+
'IoValidateDeviceIoControlAccess': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "RequiredAccess"]),
|
|
2379
|
+
#
|
|
2380
|
+
'IoGetIoPriorityHint': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeInt(signed=False, label="IO_PRIORITY_HINT"), arg_names=["Irp"]),
|
|
2381
|
+
#
|
|
2382
|
+
'IoSetIoPriorityHint': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=False, label="IO_PRIORITY_HINT")], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "PriorityHint"]),
|
|
2383
|
+
#
|
|
2384
|
+
'IoAllocateSfioStreamIdentifier': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "Length", "Signature", "StreamIdentifier"]),
|
|
2385
|
+
#
|
|
2386
|
+
'IoGetSfioStreamIdentifier': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["FileObject", "Signature"]),
|
|
2387
|
+
#
|
|
2388
|
+
'IoFreeSfioStreamIdentifier': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "Signature"]),
|
|
2389
|
+
#
|
|
2390
|
+
'IoGetIoAttributionHandle': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "IoAttributionHandle"]),
|
|
2391
|
+
#
|
|
2392
|
+
'IoRecordIoAttribution': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_ATTRIBUTION_INFORMATION", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["OpaqueHandle", "AttributionInformation"]),
|
|
2393
|
+
#
|
|
2394
|
+
'IoSetIoAttributionIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "AttributionSource", "Flags"]),
|
|
2395
|
+
#
|
|
2396
|
+
'IoGetContainerInformation': SimTypeFunction([SimTypeInt(signed=False, label="IO_CONTAINER_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["InformationClass", "ContainerObject", "Buffer", "BufferLength"]),
|
|
2397
|
+
#
|
|
2398
|
+
'IoRegisterContainerNotification': SimTypeFunction([SimTypeInt(signed=False, label="IO_CONTAINER_NOTIFICATION_CLASS"), SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NotificationClass", "CallbackFunction", "NotificationInformation", "NotificationInformationLength", "CallbackRegistration"]),
|
|
2399
|
+
#
|
|
2400
|
+
'IoUnregisterContainerNotification': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["CallbackRegistration"]),
|
|
2401
|
+
#
|
|
2402
|
+
'IoReserveKsrPersistentMemory': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "PhysicalDeviceObject", "Size", "Flags", "DataHandle"]),
|
|
2403
|
+
#
|
|
2404
|
+
'IoFreeKsrPersistentMemory': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DataHandle"]),
|
|
2405
|
+
#
|
|
2406
|
+
'IoQueryKsrPersistentMemorySize': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "PhysicalDeviceObject", "BufferSize"]),
|
|
2407
|
+
#
|
|
2408
|
+
'IoAcquireKsrPersistentMemory': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "PhysicalDeviceObject", "Buffer", "Size"]),
|
|
2409
|
+
#
|
|
2410
|
+
'IoWriteKsrPersistentMemory': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DataHandle", "Buffer", "Size"]),
|
|
2411
|
+
#
|
|
2412
|
+
'IoEnumerateKsrPersistentMemoryEx': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "PhysicalDeviceObject", "PhysicalDeviceId", "Callback", "CallbackContext"]),
|
|
2413
|
+
#
|
|
2414
|
+
'IoReserveKsrPersistentMemoryEx': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "PhysicalDeviceObject", "PhysicalDeviceId", "DataTag", "DataVersion", "Size", "Flags", "DataHandle"]),
|
|
2415
|
+
#
|
|
2416
|
+
'IoQueryKsrPersistentMemorySizeEx': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "PhysicalDeviceObject", "PhysicalDeviceId", "DataTag", "DataVersion", "BufferSize"]),
|
|
2417
|
+
#
|
|
2418
|
+
'IoAcquireKsrPersistentMemoryEx': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "PhysicalDeviceObject", "PhysicalDeviceId", "DataTag", "DataVersion", "Buffer", "Size"]),
|
|
2419
|
+
#
|
|
2420
|
+
'WmiQueryTraceInformation': SimTypeFunction([SimTypeInt(signed=False, label="TRACE_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TraceInformationClass", "TraceInformation", "TraceInformationLength", "RequiredLength", "Buffer"]),
|
|
2421
|
+
#
|
|
2422
|
+
'EtwRegister': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProviderId", "EnableCallback", "CallbackContext", "RegHandle"]),
|
|
2423
|
+
#
|
|
2424
|
+
'EtwUnregister': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64")], SimTypeInt(signed=True, label="Int32"), arg_names=["RegHandle"]),
|
|
2425
|
+
#
|
|
2426
|
+
'EtwSetInformation': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypeInt(signed=False, label="EVENT_INFO_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["RegHandle", "InformationClass", "EventInformation", "InformationLength"]),
|
|
2427
|
+
#
|
|
2428
|
+
'EtwEventEnabled': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeRef("EVENT_DESCRIPTOR", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["RegHandle", "EventDescriptor"]),
|
|
2429
|
+
#
|
|
2430
|
+
'EtwProviderEnabled': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypeChar(label="Byte"), SimTypeLongLong(signed=False, label="UInt64")], SimTypeChar(label="Byte"), arg_names=["RegHandle", "Level", "Keyword"]),
|
|
2431
|
+
#
|
|
2432
|
+
'EtwActivityIdControl': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ControlCode", "ActivityId"]),
|
|
2433
|
+
#
|
|
2434
|
+
'EtwWrite': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeRef("EVENT_DESCRIPTOR", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("EVENT_DATA_DESCRIPTOR", SimStruct), label="LPArray", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RegHandle", "EventDescriptor", "ActivityId", "UserDataCount", "UserData"]),
|
|
2435
|
+
#
|
|
2436
|
+
'EtwWriteTransfer': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeRef("EVENT_DESCRIPTOR", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("EVENT_DATA_DESCRIPTOR", SimStruct), label="LPArray", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RegHandle", "EventDescriptor", "ActivityId", "RelatedActivityId", "UserDataCount", "UserData"]),
|
|
2437
|
+
#
|
|
2438
|
+
'EtwWriteString': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypeChar(label="Byte"), SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RegHandle", "Level", "Keyword", "ActivityId", "String"]),
|
|
2439
|
+
#
|
|
2440
|
+
'EtwWriteEx': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeRef("EVENT_DESCRIPTOR", SimStruct), offset=0), SimTypeLongLong(signed=False, label="UInt64"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("EVENT_DATA_DESCRIPTOR", SimStruct), label="LPArray", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RegHandle", "EventDescriptor", "Filter", "Flags", "ActivityId", "RelatedActivityId", "UserDataCount", "UserData"]),
|
|
2441
|
+
#
|
|
2442
|
+
'SeEtwWriteKMCveEvent': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CveId", "AdditionalDetails"]),
|
|
2443
|
+
#
|
|
2444
|
+
'IoInvalidateDeviceRelations': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="DEVICE_RELATION_TYPE")], SimTypeBottom(label="Void"), arg_names=["DeviceObject", "Type"]),
|
|
2445
|
+
#
|
|
2446
|
+
'IoRequestDeviceEject': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["PhysicalDeviceObject"]),
|
|
2447
|
+
#
|
|
2448
|
+
'IoRequestDeviceEjectEx': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeFunction([SimTypeInt(signed=True, label="Int32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Status", "Context"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PhysicalDeviceObject", "Callback", "Context", "DriverObject"]),
|
|
2449
|
+
#
|
|
2450
|
+
'IoGetDeviceProperty': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="DEVICE_REGISTRY_PROPERTY"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "DeviceProperty", "BufferLength", "PropertyBuffer", "ResultLength"]),
|
|
2451
|
+
#
|
|
2452
|
+
'IoOpenDeviceRegistryKey': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "DevInstKeyType", "DesiredAccess", "DeviceRegKey"]),
|
|
2453
|
+
#
|
|
2454
|
+
'IoRegisterDeviceInterface': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PhysicalDeviceObject", "InterfaceClassGuid", "ReferenceString", "SymbolicLinkName"]),
|
|
2455
|
+
#
|
|
2456
|
+
'IoOpenDeviceInterfaceRegistryKey': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SymbolicLinkName", "DesiredAccess", "DeviceInterfaceRegKey"]),
|
|
2457
|
+
#
|
|
2458
|
+
'IoSetDeviceInterfaceState': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["SymbolicLinkName", "Enable"]),
|
|
2459
|
+
#
|
|
2460
|
+
'IoGetDeviceInterfaces': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeChar(label="Char"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["InterfaceClassGuid", "PhysicalDeviceObject", "Flags", "SymbolicLinkList"]),
|
|
2461
|
+
#
|
|
2462
|
+
'IoGetDeviceInterfaceAlias': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SymbolicLinkName", "AliasInterfaceClassGuid", "AliasSymbolicLinkName"]),
|
|
2463
|
+
#
|
|
2464
|
+
'IoRegisterPlugPlayNotification': SimTypeFunction([SimTypeInt(signed=False, label="IO_NOTIFICATION_EVENT_CATEGORY"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NotificationStructure", "Context"]), offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EventCategory", "EventCategoryFlags", "EventCategoryData", "DriverObject", "CallbackRoutine", "Context", "NotificationEntry"]),
|
|
2465
|
+
#
|
|
2466
|
+
'IoUnregisterPlugPlayNotification': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NotificationEntry"]),
|
|
2467
|
+
#
|
|
2468
|
+
'IoUnregisterPlugPlayNotificationEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NotificationEntry"]),
|
|
2469
|
+
#
|
|
2470
|
+
'IoReportTargetDeviceChange': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PhysicalDeviceObject", "NotificationStructure"]),
|
|
2471
|
+
#
|
|
2472
|
+
'IoInvalidateDeviceState': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["PhysicalDeviceObject"]),
|
|
2473
|
+
#
|
|
2474
|
+
'IoReportTargetDeviceChangeAsynchronous': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PhysicalDeviceObject", "NotificationStructure", "Callback", "Context"]),
|
|
2475
|
+
#
|
|
2476
|
+
'IoGetDriverDirectory': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="DRIVER_DIRECTORY_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "DirectoryType", "Flags", "DriverDirectoryHandle"]),
|
|
2477
|
+
#
|
|
2478
|
+
'IoGetDeviceDirectory': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="DEVICE_DIRECTORY_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PhysicalDeviceObject", "DirectoryType", "Flags", "Reserved", "DeviceDirectoryHandle"]),
|
|
2479
|
+
#
|
|
2480
|
+
'IoOpenDriverRegistryKey': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="DRIVER_REGKEY_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "RegKeyType", "DesiredAccess", "Flags", "DriverRegKey"]),
|
|
2481
|
+
#
|
|
2482
|
+
'IoSetDevicePropertyData': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVPROPKEY", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Pdo", "PropertyKey", "Lcid", "Flags", "Type", "Size", "Data"]),
|
|
2483
|
+
#
|
|
2484
|
+
'IoGetDevicePropertyData': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVPROPKEY", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="DEVPROPTYPE"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Pdo", "PropertyKey", "Lcid", "Flags", "Size", "Data", "RequiredSize", "Type"]),
|
|
2485
|
+
#
|
|
2486
|
+
'IoSetDeviceInterfacePropertyData': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVPROPKEY", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SymbolicLinkName", "PropertyKey", "Lcid", "Flags", "Type", "Size", "Data"]),
|
|
2487
|
+
#
|
|
2488
|
+
'IoGetDeviceInterfacePropertyData': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVPROPKEY", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="DEVPROPTYPE"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SymbolicLinkName", "PropertyKey", "Lcid", "Flags", "Size", "Data", "RequiredSize", "Type"]),
|
|
2489
|
+
#
|
|
2490
|
+
'IoGetDeviceNumaNode': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeShort(signed=False, label="UInt16"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Pdo", "NodeNumber"]),
|
|
2491
|
+
#
|
|
2492
|
+
'IoReplacePartitionUnit': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TargetPdo", "SparePdo", "Flags"]),
|
|
2493
|
+
#
|
|
2494
|
+
'PoSetHiberRange': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["MemoryMap", "Flags", "Address", "Length", "Tag"]),
|
|
2495
|
+
#
|
|
2496
|
+
'PoSetSystemState': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Flags"]),
|
|
2497
|
+
#
|
|
2498
|
+
'PoRegisterSystemState': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["StateHandle", "Flags"]),
|
|
2499
|
+
#
|
|
2500
|
+
'PoCreatePowerRequest': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("COUNTED_REASON_CONTEXT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PowerRequest", "DeviceObject", "Context"]),
|
|
2501
|
+
#
|
|
2502
|
+
'PoSetPowerRequest': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="POWER_REQUEST_TYPE")], SimTypeInt(signed=True, label="Int32"), arg_names=["PowerRequest", "Type"]),
|
|
2503
|
+
#
|
|
2504
|
+
'PoClearPowerRequest': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="POWER_REQUEST_TYPE")], SimTypeInt(signed=True, label="Int32"), arg_names=["PowerRequest", "Type"]),
|
|
2505
|
+
#
|
|
2506
|
+
'PoDeletePowerRequest': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["PowerRequest"]),
|
|
2507
|
+
#
|
|
2508
|
+
'PoRequestPowerIrp': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeChar(label="Byte"), SimUnion({"SystemState": SimTypeInt(signed=False, label="SYSTEM_POWER_STATE"), "DeviceState": SimTypeInt(signed=False, label="DEVICE_POWER_STATE")}, name="<anon>", label="None"), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "MinorFunction", "PowerState", "CompletionFunction", "Context", "Irp"]),
|
|
2509
|
+
#
|
|
2510
|
+
'PoSetSystemWake': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Irp"]),
|
|
2511
|
+
#
|
|
2512
|
+
'PoSetSystemWakeDevice': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DeviceObject"]),
|
|
2513
|
+
#
|
|
2514
|
+
'PoGetSystemWake': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Irp"]),
|
|
2515
|
+
#
|
|
2516
|
+
'PoUnregisterSystemState': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["StateHandle"]),
|
|
2517
|
+
#
|
|
2518
|
+
'PoSetPowerState': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="POWER_STATE_TYPE"), SimUnion({"SystemState": SimTypeInt(signed=False, label="SYSTEM_POWER_STATE"), "DeviceState": SimTypeInt(signed=False, label="DEVICE_POWER_STATE")}, name="<anon>", label="None")], SimUnion({"SystemState": SimTypeInt(signed=False, label="SYSTEM_POWER_STATE"), "DeviceState": SimTypeInt(signed=False, label="DEVICE_POWER_STATE")}, name="<anon>", label="None"), arg_names=["DeviceObject", "Type", "State"]),
|
|
2519
|
+
#
|
|
2520
|
+
'PoCallDriver': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "Irp"]),
|
|
2521
|
+
#
|
|
2522
|
+
'PoStartNextPowerIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Irp"]),
|
|
2523
|
+
#
|
|
2524
|
+
'PoRegisterDeviceForIdleDetection': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="DEVICE_POWER_STATE")], SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), arg_names=["DeviceObject", "ConservationIdleTime", "PerformanceIdleTime", "State"]),
|
|
2525
|
+
#
|
|
2526
|
+
'PoSetDeviceBusyEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeBottom(label="Void"), arg_names=["IdlePointer"]),
|
|
2527
|
+
#
|
|
2528
|
+
'PoStartDeviceBusy': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeBottom(label="Void"), arg_names=["IdlePointer"]),
|
|
2529
|
+
#
|
|
2530
|
+
'PoEndDeviceBusy': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeBottom(label="Void"), arg_names=["IdlePointer"]),
|
|
2531
|
+
#
|
|
2532
|
+
'PoQueryWatchdogTime': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Pdo", "SecondsRemaining"]),
|
|
2533
|
+
#
|
|
2534
|
+
'PoRegisterPowerSettingCallback': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "SettingGuid", "Callback", "Context", "Handle"]),
|
|
2535
|
+
#
|
|
2536
|
+
'PoUnregisterPowerSettingCallback': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle"]),
|
|
2537
|
+
#
|
|
2538
|
+
'PoFxRegisterDevice': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("PO_FX_DEVICE_V1", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Pdo", "Device", "Handle"]),
|
|
2539
|
+
#
|
|
2540
|
+
'PoFxStartDevicePowerManagement': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Handle"]),
|
|
2541
|
+
#
|
|
2542
|
+
'PoFxUnregisterDevice': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Handle"]),
|
|
2543
|
+
#
|
|
2544
|
+
'PoFxRegisterCrashdumpDevice': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle"]),
|
|
2545
|
+
#
|
|
2546
|
+
'PoFxPowerOnCrashdumpDevice': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "Context"]),
|
|
2547
|
+
#
|
|
2548
|
+
'PoFxActivateComponent': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Handle", "Component", "Flags"]),
|
|
2549
|
+
#
|
|
2550
|
+
'PoFxCompleteDevicePowerNotRequired': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Handle"]),
|
|
2551
|
+
#
|
|
2552
|
+
'PoFxCompleteIdleCondition': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Handle", "Component"]),
|
|
2553
|
+
#
|
|
2554
|
+
'PoFxCompleteIdleState': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Handle", "Component"]),
|
|
2555
|
+
#
|
|
2556
|
+
'PoFxIdleComponent': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Handle", "Component", "Flags"]),
|
|
2557
|
+
#
|
|
2558
|
+
'PoFxSetComponentLatency': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeLongLong(signed=False, label="UInt64")], SimTypeBottom(label="Void"), arg_names=["Handle", "Component", "Latency"]),
|
|
2559
|
+
#
|
|
2560
|
+
'PoFxSetComponentResidency': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeLongLong(signed=False, label="UInt64")], SimTypeBottom(label="Void"), arg_names=["Handle", "Component", "Residency"]),
|
|
2561
|
+
#
|
|
2562
|
+
'PoFxSetComponentWake': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["Handle", "Component", "WakeHint"]),
|
|
2563
|
+
#
|
|
2564
|
+
'PoFxSetDeviceIdleTimeout': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeLongLong(signed=False, label="UInt64")], SimTypeBottom(label="Void"), arg_names=["Handle", "IdleTimeout"]),
|
|
2565
|
+
#
|
|
2566
|
+
'PoFxReportDevicePoweredOn': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Handle"]),
|
|
2567
|
+
#
|
|
2568
|
+
'PoFxPowerControl': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "PowerControlCode", "InBuffer", "InBufferSize", "OutBuffer", "OutBufferSize", "BytesReturned"]),
|
|
2569
|
+
#
|
|
2570
|
+
'PoFxNotifySurprisePowerOn': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Pdo"]),
|
|
2571
|
+
#
|
|
2572
|
+
'PoFxRegisterComponentPerfStates': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeLongLong(signed=False, label="UInt64"), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeRef("PO_FX_COMPONENT_PERF_INFO", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("PO_FX_COMPONENT_PERF_INFO", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "Component", "Flags", "ComponentPerfStateCallback", "InputStateInfo", "OutputStateInfo"]),
|
|
2573
|
+
#
|
|
2574
|
+
'PoFxIssueComponentPerfStateChange': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("PO_FX_PERF_STATE_CHANGE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Handle", "Flags", "Component", "PerfChange", "Context"]),
|
|
2575
|
+
#
|
|
2576
|
+
'PoFxIssueComponentPerfStateChangeMultiple': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("PO_FX_PERF_STATE_CHANGE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Handle", "Flags", "Component", "PerfChangesCount", "PerfChanges", "Context"]),
|
|
2577
|
+
#
|
|
2578
|
+
'PoFxQueryCurrentComponentPerfState': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=False, label="UInt64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "Flags", "Component", "SetIndex", "CurrentPerf"]),
|
|
2579
|
+
#
|
|
2580
|
+
'PoFxSetTargetDripsDevicePowerState': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="DEVICE_POWER_STATE")], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "TargetState"]),
|
|
2581
|
+
#
|
|
2582
|
+
'PoFxCompleteDirectedPowerDown': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Handle"]),
|
|
2583
|
+
#
|
|
2584
|
+
'PoCreateThermalRequest': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("COUNTED_REASON_CONTEXT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ThermalRequest", "TargetDeviceObject", "PolicyDeviceObject", "Context", "Flags"]),
|
|
2585
|
+
#
|
|
2586
|
+
'PoGetThermalRequestSupport': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="PO_THERMAL_REQUEST_TYPE")], SimTypeChar(label="Byte"), arg_names=["ThermalRequest", "Type"]),
|
|
2587
|
+
#
|
|
2588
|
+
'PoSetThermalPassiveCooling': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["ThermalRequest", "Throttle"]),
|
|
2589
|
+
#
|
|
2590
|
+
'PoSetThermalActiveCooling': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["ThermalRequest", "Engaged"]),
|
|
2591
|
+
#
|
|
2592
|
+
'PoDeleteThermalRequest': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ThermalRequest"]),
|
|
2593
|
+
#
|
|
2594
|
+
'PoFxRegisterDripsWatchdogCallback': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Handle", "Callback", "IncludeChildDevices", "MatchingDriverObject"]),
|
|
2595
|
+
#
|
|
2596
|
+
'ObReferenceObjectByHandle': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="SByte"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("OBJECT_HANDLE_INFORMATION", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "DesiredAccess", "ObjectType", "AccessMode", "Object", "HandleInformation"]),
|
|
2597
|
+
#
|
|
2598
|
+
'ObReferenceObjectByHandleWithTag': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="SByte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeRef("OBJECT_HANDLE_INFORMATION", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "DesiredAccess", "ObjectType", "AccessMode", "Tag", "Object", "HandleInformation"]),
|
|
2599
|
+
#
|
|
2600
|
+
'ObReferenceObjectSafe': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Object"]),
|
|
2601
|
+
#
|
|
2602
|
+
'ObReferenceObjectSafeWithTag': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["Object", "Tag"]),
|
|
2603
|
+
#
|
|
2604
|
+
'ObCloseHandle': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="SByte")], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "PreviousMode"]),
|
|
2605
|
+
#
|
|
2606
|
+
'ObfReferenceObject': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Object"]),
|
|
2607
|
+
#
|
|
2608
|
+
'ObfReferenceObjectWithTag': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Object", "Tag"]),
|
|
2609
|
+
#
|
|
2610
|
+
'ObReferenceObjectByPointer': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="SByte")], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "DesiredAccess", "ObjectType", "AccessMode"]),
|
|
2611
|
+
#
|
|
2612
|
+
'ObReferenceObjectByPointerWithTag': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="SByte"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "DesiredAccess", "ObjectType", "AccessMode", "Tag"]),
|
|
2613
|
+
#
|
|
2614
|
+
'ObfDereferenceObject': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Object"]),
|
|
2615
|
+
#
|
|
2616
|
+
'ObfDereferenceObjectWithTag': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Object", "Tag"]),
|
|
2617
|
+
#
|
|
2618
|
+
'ObDereferenceObjectDeferDelete': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Object"]),
|
|
2619
|
+
#
|
|
2620
|
+
'ObDereferenceObjectDeferDeleteWithTag': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["Object", "Tag"]),
|
|
2621
|
+
#
|
|
2622
|
+
'ObGetObjectSecurity': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Object", "SecurityDescriptor", "MemoryAllocated"]),
|
|
2623
|
+
#
|
|
2624
|
+
'ObReleaseObjectSecurity': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["SecurityDescriptor", "MemoryAllocated"]),
|
|
2625
|
+
#
|
|
2626
|
+
'ObRegisterCallbacks': SimTypeFunction([SimTypePointer(SimTypeRef("OB_CALLBACK_REGISTRATION", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CallbackRegistration", "RegistrationHandle"]),
|
|
2627
|
+
#
|
|
2628
|
+
'ObUnRegisterCallbacks': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["RegistrationHandle"]),
|
|
2629
|
+
#
|
|
2630
|
+
'ObGetFilterVersion': SimTypeFunction([], SimTypeShort(signed=False, label="UInt16")),
|
|
2631
|
+
#
|
|
2632
|
+
'ZwCreateFile': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "DesiredAccess", "ObjectAttributes", "IoStatusBlock", "AllocationSize", "FileAttributes", "ShareAccess", "CreateDisposition", "CreateOptions", "EaBuffer", "EaLength"]),
|
|
2633
|
+
#
|
|
2634
|
+
'ZwOpenFile': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "DesiredAccess", "ObjectAttributes", "IoStatusBlock", "ShareAccess", "OpenOptions"]),
|
|
2635
|
+
#
|
|
2636
|
+
'ZwLoadDriver': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverServiceName"]),
|
|
2637
|
+
#
|
|
2638
|
+
'ZwUnloadDriver': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverServiceName"]),
|
|
2639
|
+
#
|
|
2640
|
+
'ZwQueryInformationFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "FileInformation", "Length", "FileInformationClass"]),
|
|
2641
|
+
#
|
|
2642
|
+
'ZwSetInformationFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "IoStatusBlock", "FileInformation", "Length", "FileInformationClass"]),
|
|
2643
|
+
#
|
|
2644
|
+
'ZwReadFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "Buffer", "Length", "ByteOffset", "Key"]),
|
|
2645
|
+
#
|
|
2646
|
+
'ZwWriteFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "Buffer", "Length", "ByteOffset", "Key"]),
|
|
2647
|
+
#
|
|
2648
|
+
'ZwClose': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle"]),
|
|
2649
|
+
#
|
|
2650
|
+
'ZwCreateDirectoryObject': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DirectoryHandle", "DesiredAccess", "ObjectAttributes"]),
|
|
2651
|
+
#
|
|
2652
|
+
'ZwMakeTemporaryObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle"]),
|
|
2653
|
+
#
|
|
2654
|
+
'ZwCreateSection': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SectionHandle", "DesiredAccess", "ObjectAttributes", "MaximumSize", "SectionPageProtection", "AllocationAttributes", "FileHandle"]),
|
|
2655
|
+
#
|
|
2656
|
+
'ZwOpenSection': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SectionHandle", "DesiredAccess", "ObjectAttributes"]),
|
|
2657
|
+
#
|
|
2658
|
+
'ZwMapViewOfSection': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="SECTION_INHERIT"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["SectionHandle", "ProcessHandle", "BaseAddress", "ZeroBits", "CommitSize", "SectionOffset", "ViewSize", "InheritDisposition", "AllocationType", "Win32Protect"]),
|
|
2659
|
+
#
|
|
2660
|
+
'ZwUnmapViewOfSection': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "BaseAddress"]),
|
|
2661
|
+
#
|
|
2662
|
+
'ZwCreateKey': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "DesiredAccess", "ObjectAttributes", "TitleIndex", "Class", "CreateOptions", "Disposition"]),
|
|
2663
|
+
#
|
|
2664
|
+
'ZwCreateKeyTransacted': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "DesiredAccess", "ObjectAttributes", "TitleIndex", "Class", "CreateOptions", "TransactionHandle", "Disposition"]),
|
|
2665
|
+
#
|
|
2666
|
+
'ZwCreateRegistryTransaction': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "DesiredAccess", "ObjectAttributes", "CreateOptions"]),
|
|
2667
|
+
#
|
|
2668
|
+
'NtOpenRegistryTransaction': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "DesiredAccess", "ObjectAttributes"]),
|
|
2669
|
+
#
|
|
2670
|
+
'ZwCommitRegistryTransaction': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "Flags"]),
|
|
2671
|
+
#
|
|
2672
|
+
'NtRollbackRegistryTransaction': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "Flags"]),
|
|
2673
|
+
#
|
|
2674
|
+
'ZwOpenKey': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "DesiredAccess", "ObjectAttributes"]),
|
|
2675
|
+
#
|
|
2676
|
+
'ZwOpenKeyEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "DesiredAccess", "ObjectAttributes", "OpenOptions"]),
|
|
2677
|
+
#
|
|
2678
|
+
'ZwOpenKeyTransacted': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "DesiredAccess", "ObjectAttributes", "TransactionHandle"]),
|
|
2679
|
+
#
|
|
2680
|
+
'ZwOpenKeyTransactedEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "DesiredAccess", "ObjectAttributes", "OpenOptions", "TransactionHandle"]),
|
|
2681
|
+
#
|
|
2682
|
+
'ZwDeleteKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle"]),
|
|
2683
|
+
#
|
|
2684
|
+
'ZwDeleteValueKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "ValueName"]),
|
|
2685
|
+
#
|
|
2686
|
+
'ZwEnumerateKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="KEY_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "Index", "KeyInformationClass", "KeyInformation", "Length", "ResultLength"]),
|
|
2687
|
+
#
|
|
2688
|
+
'ZwEnumerateValueKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="KEY_VALUE_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "Index", "KeyValueInformationClass", "KeyValueInformation", "Length", "ResultLength"]),
|
|
2689
|
+
#
|
|
2690
|
+
'ZwFlushKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle"]),
|
|
2691
|
+
#
|
|
2692
|
+
'ZwQueryKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="KEY_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "KeyInformationClass", "KeyInformation", "Length", "ResultLength"]),
|
|
2693
|
+
#
|
|
2694
|
+
'ZwQueryValueKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="KEY_VALUE_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "ValueName", "KeyValueInformationClass", "KeyValueInformation", "Length", "ResultLength"]),
|
|
2695
|
+
#
|
|
2696
|
+
'ZwRenameKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "NewName"]),
|
|
2697
|
+
#
|
|
2698
|
+
'ZwSaveKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "FileHandle"]),
|
|
2699
|
+
#
|
|
2700
|
+
'ZwSaveKeyEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "FileHandle", "Format"]),
|
|
2701
|
+
#
|
|
2702
|
+
'ZwRestoreKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "FileHandle", "Flags"]),
|
|
2703
|
+
#
|
|
2704
|
+
'ZwSetValueKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["KeyHandle", "ValueName", "TitleIndex", "Type", "Data", "DataSize"]),
|
|
2705
|
+
#
|
|
2706
|
+
'ZwOpenSymbolicLinkObject': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["LinkHandle", "DesiredAccess", "ObjectAttributes"]),
|
|
2707
|
+
#
|
|
2708
|
+
'ZwQuerySymbolicLinkObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["LinkHandle", "LinkTarget", "ReturnedLength"]),
|
|
2709
|
+
#
|
|
2710
|
+
'ZwCreateTransactionManager': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TmHandle", "DesiredAccess", "ObjectAttributes", "LogFileName", "CreateOptions", "CommitStrength"]),
|
|
2711
|
+
#
|
|
2712
|
+
'ZwOpenTransactionManager': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TmHandle", "DesiredAccess", "ObjectAttributes", "LogFileName", "TmIdentity", "OpenOptions"]),
|
|
2713
|
+
#
|
|
2714
|
+
'ZwRollforwardTransactionManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionManagerHandle", "TmVirtualClock"]),
|
|
2715
|
+
#
|
|
2716
|
+
'ZwRecoverTransactionManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionManagerHandle"]),
|
|
2717
|
+
#
|
|
2718
|
+
'ZwQueryInformationTransactionManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TRANSACTIONMANAGER_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionManagerHandle", "TransactionManagerInformationClass", "TransactionManagerInformation", "TransactionManagerInformationLength", "ReturnLength"]),
|
|
2719
|
+
#
|
|
2720
|
+
'ZwSetInformationTransactionManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TRANSACTIONMANAGER_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TmHandle", "TransactionManagerInformationClass", "TransactionManagerInformation", "TransactionManagerInformationLength"]),
|
|
2721
|
+
#
|
|
2722
|
+
'ZwEnumerateTransactionObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="KTMOBJECT_TYPE"), SimTypePointer(SimTypeRef("KTMOBJECT_CURSOR", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RootObjectHandle", "QueryType", "ObjectCursor", "ObjectCursorLength", "ReturnLength"]),
|
|
2723
|
+
#
|
|
2724
|
+
'ZwCreateTransaction': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "DesiredAccess", "ObjectAttributes", "Uow", "TmHandle", "CreateOptions", "IsolationLevel", "IsolationFlags", "Timeout", "Description"]),
|
|
2725
|
+
#
|
|
2726
|
+
'ZwOpenTransaction': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "DesiredAccess", "ObjectAttributes", "Uow", "TmHandle"]),
|
|
2727
|
+
#
|
|
2728
|
+
'ZwQueryInformationTransaction': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TRANSACTION_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "TransactionInformationClass", "TransactionInformation", "TransactionInformationLength", "ReturnLength"]),
|
|
2729
|
+
#
|
|
2730
|
+
'ZwSetInformationTransaction': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TRANSACTION_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "TransactionInformationClass", "TransactionInformation", "TransactionInformationLength"]),
|
|
2731
|
+
#
|
|
2732
|
+
'ZwCommitTransaction': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "Wait"]),
|
|
2733
|
+
#
|
|
2734
|
+
'ZwRollbackTransaction': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionHandle", "Wait"]),
|
|
2735
|
+
#
|
|
2736
|
+
'ZwCreateResourceManager': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle", "DesiredAccess", "TmHandle", "ResourceManagerGuid", "ObjectAttributes", "CreateOptions", "Description"]),
|
|
2737
|
+
#
|
|
2738
|
+
'ZwOpenResourceManager': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle", "DesiredAccess", "TmHandle", "ResourceManagerGuid", "ObjectAttributes"]),
|
|
2739
|
+
#
|
|
2740
|
+
'ZwRecoverResourceManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle"]),
|
|
2741
|
+
#
|
|
2742
|
+
'ZwGetNotificationResourceManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("TRANSACTION_NOTIFICATION", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle", "TransactionNotification", "NotificationLength", "Timeout", "ReturnLength", "Asynchronous", "AsynchronousContext"]),
|
|
2743
|
+
#
|
|
2744
|
+
'ZwQueryInformationResourceManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="RESOURCEMANAGER_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle", "ResourceManagerInformationClass", "ResourceManagerInformation", "ResourceManagerInformationLength", "ReturnLength"]),
|
|
2745
|
+
#
|
|
2746
|
+
'ZwSetInformationResourceManager': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="RESOURCEMANAGER_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManagerHandle", "ResourceManagerInformationClass", "ResourceManagerInformation", "ResourceManagerInformationLength"]),
|
|
2747
|
+
#
|
|
2748
|
+
'ZwCreateEnlistment': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "DesiredAccess", "ResourceManagerHandle", "TransactionHandle", "ObjectAttributes", "CreateOptions", "NotificationMask", "EnlistmentKey"]),
|
|
2749
|
+
#
|
|
2750
|
+
'ZwOpenEnlistment': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "DesiredAccess", "RmHandle", "EnlistmentGuid", "ObjectAttributes"]),
|
|
2751
|
+
#
|
|
2752
|
+
'ZwQueryInformationEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="ENLISTMENT_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "EnlistmentInformationClass", "EnlistmentInformation", "EnlistmentInformationLength", "ReturnLength"]),
|
|
2753
|
+
#
|
|
2754
|
+
'ZwSetInformationEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="ENLISTMENT_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "EnlistmentInformationClass", "EnlistmentInformation", "EnlistmentInformationLength"]),
|
|
2755
|
+
#
|
|
2756
|
+
'ZwRecoverEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "EnlistmentKey"]),
|
|
2757
|
+
#
|
|
2758
|
+
'ZwPrePrepareEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
2759
|
+
#
|
|
2760
|
+
'ZwPrepareEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
2761
|
+
#
|
|
2762
|
+
'ZwCommitEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
2763
|
+
#
|
|
2764
|
+
'ZwRollbackEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
2765
|
+
#
|
|
2766
|
+
'ZwPrePrepareComplete': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
2767
|
+
#
|
|
2768
|
+
'ZwPrepareComplete': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
2769
|
+
#
|
|
2770
|
+
'ZwCommitComplete': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
2771
|
+
#
|
|
2772
|
+
'ZwReadOnlyEnlistment': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
2773
|
+
#
|
|
2774
|
+
'ZwRollbackComplete': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
2775
|
+
#
|
|
2776
|
+
'ZwSinglePhaseReject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "TmVirtualClock"]),
|
|
2777
|
+
#
|
|
2778
|
+
'ZwOpenEvent': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EventHandle", "DesiredAccess", "ObjectAttributes"]),
|
|
2779
|
+
#
|
|
2780
|
+
'ZwQueryInformationByName': SimTypeFunction([SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS")], SimTypeInt(signed=True, label="Int32"), arg_names=["ObjectAttributes", "IoStatusBlock", "FileInformation", "Length", "FileInformationClass"]),
|
|
2781
|
+
#
|
|
2782
|
+
'TmInitializeTransactionManager': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TransactionManager", "LogFileName", "TmId", "CreateOptions"]),
|
|
2783
|
+
#
|
|
2784
|
+
'TmRenameTransactionManager': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["LogFileName", "ExistingTransactionManagerGuid"]),
|
|
2785
|
+
#
|
|
2786
|
+
'TmRecoverTransactionManager': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Tm", "TargetVirtualClock"]),
|
|
2787
|
+
#
|
|
2788
|
+
'TmCommitTransaction': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["Transaction", "Wait"]),
|
|
2789
|
+
#
|
|
2790
|
+
'TmRollbackTransaction': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["Transaction", "Wait"]),
|
|
2791
|
+
#
|
|
2792
|
+
'TmCreateEnlistment': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeChar(label="SByte"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentHandle", "PreviousMode", "DesiredAccess", "ObjectAttributes", "ResourceManager", "Transaction", "CreateOptions", "NotificationMask", "EnlistmentKey"]),
|
|
2793
|
+
#
|
|
2794
|
+
'TmRecoverEnlistment': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "EnlistmentKey"]),
|
|
2795
|
+
#
|
|
2796
|
+
'TmPrePrepareEnlistment': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "TmVirtualClock"]),
|
|
2797
|
+
#
|
|
2798
|
+
'TmPrepareEnlistment': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "TmVirtualClock"]),
|
|
2799
|
+
#
|
|
2800
|
+
'TmCommitEnlistment': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "TmVirtualClock"]),
|
|
2801
|
+
#
|
|
2802
|
+
'TmRollbackEnlistment': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "TmVirtualClock"]),
|
|
2803
|
+
#
|
|
2804
|
+
'TmPrePrepareComplete': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "TmVirtualClock"]),
|
|
2805
|
+
#
|
|
2806
|
+
'TmPrepareComplete': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "TmVirtualClock"]),
|
|
2807
|
+
#
|
|
2808
|
+
'TmReadOnlyEnlistment': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "TmVirtualClock"]),
|
|
2809
|
+
#
|
|
2810
|
+
'TmCommitComplete': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "TmVirtualClock"]),
|
|
2811
|
+
#
|
|
2812
|
+
'TmRollbackComplete': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "TmVirtualClock"]),
|
|
2813
|
+
#
|
|
2814
|
+
'TmReferenceEnlistmentKey': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "Key"]),
|
|
2815
|
+
#
|
|
2816
|
+
'TmDereferenceEnlistmentKey': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "LastReference"]),
|
|
2817
|
+
#
|
|
2818
|
+
'TmSinglePhaseReject': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "TmVirtualClock"]),
|
|
2819
|
+
#
|
|
2820
|
+
'TmRequestOutcomeEnlistment': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Enlistment", "TmVirtualClock"]),
|
|
2821
|
+
#
|
|
2822
|
+
'TmEnableCallbacks': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["EnlistmentObject", "RMContext", "TransactionContext", "TransactionNotification", "TmVirtualClock", "ArgumentLength", "Argument"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManager", "CallbackRoutine", "RMKey"]),
|
|
2823
|
+
#
|
|
2824
|
+
'TmRecoverResourceManager': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManager"]),
|
|
2825
|
+
#
|
|
2826
|
+
'TmPropagationComplete': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManager", "RequestCookie", "BufferLength", "Buffer"]),
|
|
2827
|
+
#
|
|
2828
|
+
'TmPropagationFailed': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=True, label="Int32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ResourceManager", "RequestCookie", "Status"]),
|
|
2829
|
+
#
|
|
2830
|
+
'TmGetTransactionId': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Transaction", "TransactionId"]),
|
|
2831
|
+
#
|
|
2832
|
+
'TmIsTransactionActive': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeChar(label="Byte"), arg_names=["Transaction"]),
|
|
2833
|
+
#
|
|
2834
|
+
'PcwRegister': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeRef("PCW_REGISTRATION_INFORMATION", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Registration", "Info"]),
|
|
2835
|
+
#
|
|
2836
|
+
'PcwUnregister': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Registration"]),
|
|
2837
|
+
#
|
|
2838
|
+
'PcwCreateInstance': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("PCW_DATA", SimStruct), label="LPArray", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Instance", "Registration", "Name", "Count", "Data"]),
|
|
2839
|
+
#
|
|
2840
|
+
'PcwCloseInstance': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Instance"]),
|
|
2841
|
+
#
|
|
2842
|
+
'PcwAddInstance': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("PCW_DATA", SimStruct), label="LPArray", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Buffer", "Name", "Id", "Count", "Data"]),
|
|
2843
|
+
#
|
|
2844
|
+
'VslCreateSecureSection': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "TargetProcess", "Mdl", "DevicePageProtection", "Attributes"]),
|
|
2845
|
+
#
|
|
2846
|
+
'VslDeleteSecureSection': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["GlobalHandle"]),
|
|
2847
|
+
#
|
|
2848
|
+
'RtlRunOnceInitialize': SimTypeFunction([SimTypePointer(SimUnion({"Ptr": SimTypePointer(SimTypeBottom(label="Void"), offset=0)}, name="<anon>", label="None"), offset=0)], SimTypeBottom(label="Void"), arg_names=["RunOnce"]),
|
|
2849
|
+
#
|
|
2850
|
+
'RtlRunOnceExecuteOnce': SimTypeFunction([SimTypePointer(SimUnion({"Ptr": SimTypePointer(SimTypeBottom(label="Void"), offset=0)}, name="<anon>", label="None"), offset=0), SimTypePointer(SimTypeFunction([], SimTypeInt(signed=False, label="UInt32")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RunOnce", "InitFn", "Parameter", "Context"]),
|
|
2851
|
+
#
|
|
2852
|
+
'RtlRunOnceBeginInitialize': SimTypeFunction([SimTypePointer(SimUnion({"Ptr": SimTypePointer(SimTypeBottom(label="Void"), offset=0)}, name="<anon>", label="None"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RunOnce", "Flags", "Context"]),
|
|
2853
|
+
#
|
|
2854
|
+
'RtlRunOnceComplete': SimTypeFunction([SimTypePointer(SimUnion({"Ptr": SimTypePointer(SimTypeBottom(label="Void"), offset=0)}, name="<anon>", label="None"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RunOnce", "Flags", "Context"]),
|
|
2855
|
+
#
|
|
2856
|
+
'RtlInitializeGenericTableAvl': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeInt(signed=False, label="RTL_GENERIC_COMPARE_RESULTS")), offset=0), SimTypePointer(SimTypeFunction([], SimTypePointer(SimTypeBottom(label="Void"), offset=0)), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Table", "CompareRoutine", "AllocateRoutine", "FreeRoutine", "TableContext"]),
|
|
2857
|
+
#
|
|
2858
|
+
'RtlInsertElementGenericTableAvl': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "Buffer", "BufferSize", "NewElement"]),
|
|
2859
|
+
#
|
|
2860
|
+
'RtlInsertElementGenericTableFullAvl': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="TABLE_SEARCH_RESULT")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "Buffer", "BufferSize", "NewElement", "NodeOrParent", "SearchResult"]),
|
|
2861
|
+
#
|
|
2862
|
+
'RtlDeleteElementGenericTableAvl': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Table", "Buffer"]),
|
|
2863
|
+
#
|
|
2864
|
+
'RtlDeleteElementGenericTableAvlEx': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Table", "NodeOrParent"]),
|
|
2865
|
+
#
|
|
2866
|
+
'RtlLookupElementGenericTableAvl': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "Buffer"]),
|
|
2867
|
+
#
|
|
2868
|
+
'RtlLookupElementGenericTableFullAvl': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeInt(signed=False, label="TABLE_SEARCH_RESULT"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "Buffer", "NodeOrParent", "SearchResult"]),
|
|
2869
|
+
#
|
|
2870
|
+
'RtlEnumerateGenericTableAvl': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "Restart"]),
|
|
2871
|
+
#
|
|
2872
|
+
'RtlEnumerateGenericTableWithoutSplayingAvl': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "RestartKey"]),
|
|
2873
|
+
#
|
|
2874
|
+
'RtlLookupFirstMatchingElementGenericTableAvl': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "Buffer", "RestartKey"]),
|
|
2875
|
+
#
|
|
2876
|
+
'RtlEnumerateGenericTableLikeADirectory': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "MatchFunction", "MatchData", "NextFlag", "RestartKey", "DeleteCount", "Buffer"]),
|
|
2877
|
+
#
|
|
2878
|
+
'RtlGetElementGenericTableAvl': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "I"]),
|
|
2879
|
+
#
|
|
2880
|
+
'RtlNumberGenericTableElementsAvl': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Table"]),
|
|
2881
|
+
#
|
|
2882
|
+
'RtlIsGenericTableEmptyAvl': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_AVL_TABLE", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Table"]),
|
|
2883
|
+
#
|
|
2884
|
+
'RtlSplay': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0)], SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0), arg_names=["Links"]),
|
|
2885
|
+
#
|
|
2886
|
+
'RtlDelete': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0)], SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0), arg_names=["Links"]),
|
|
2887
|
+
#
|
|
2888
|
+
'RtlDeleteNoSplay': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["Links", "Root"]),
|
|
2889
|
+
#
|
|
2890
|
+
'RtlSubtreeSuccessor': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0)], SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0), arg_names=["Links"]),
|
|
2891
|
+
#
|
|
2892
|
+
'RtlSubtreePredecessor': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0)], SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0), arg_names=["Links"]),
|
|
2893
|
+
#
|
|
2894
|
+
'RtlRealSuccessor': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0)], SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0), arg_names=["Links"]),
|
|
2895
|
+
#
|
|
2896
|
+
'RtlRealPredecessor': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0)], SimTypePointer(SimTypeRef("RTL_SPLAY_LINKS", SimStruct), offset=0), arg_names=["Links"]),
|
|
2897
|
+
#
|
|
2898
|
+
'RtlInitializeGenericTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_GENERIC_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeFunction([], SimTypeInt(signed=False, label="RTL_GENERIC_COMPARE_RESULTS")), offset=0), SimTypePointer(SimTypeFunction([], SimTypePointer(SimTypeBottom(label="Void"), offset=0)), offset=0), SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["Table", "CompareRoutine", "AllocateRoutine", "FreeRoutine", "TableContext"]),
|
|
2899
|
+
#
|
|
2900
|
+
'RtlInsertElementGenericTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_GENERIC_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "Buffer", "BufferSize", "NewElement"]),
|
|
2901
|
+
#
|
|
2902
|
+
'RtlInsertElementGenericTableFull': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_GENERIC_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="TABLE_SEARCH_RESULT")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "Buffer", "BufferSize", "NewElement", "NodeOrParent", "SearchResult"]),
|
|
2903
|
+
#
|
|
2904
|
+
'RtlDeleteElementGenericTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_GENERIC_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Table", "Buffer"]),
|
|
2905
|
+
#
|
|
2906
|
+
'RtlLookupElementGenericTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_GENERIC_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "Buffer"]),
|
|
2907
|
+
#
|
|
2908
|
+
'RtlLookupElementGenericTableFull': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_GENERIC_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeInt(signed=False, label="TABLE_SEARCH_RESULT"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "Buffer", "NodeOrParent", "SearchResult"]),
|
|
2909
|
+
#
|
|
2910
|
+
'RtlEnumerateGenericTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_GENERIC_TABLE", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "Restart"]),
|
|
2911
|
+
#
|
|
2912
|
+
'RtlEnumerateGenericTableWithoutSplaying': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_GENERIC_TABLE", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "RestartKey"]),
|
|
2913
|
+
#
|
|
2914
|
+
'RtlGetElementGenericTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_GENERIC_TABLE", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Table", "I"]),
|
|
2915
|
+
#
|
|
2916
|
+
'RtlNumberGenericTableElements': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_GENERIC_TABLE", SimStruct), offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Table"]),
|
|
2917
|
+
#
|
|
2918
|
+
'RtlIsGenericTableEmpty': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_GENERIC_TABLE", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["Table"]),
|
|
2919
|
+
#
|
|
2920
|
+
'RtlCreateHashTable': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["HashTable", "Shift", "Flags"]),
|
|
2921
|
+
#
|
|
2922
|
+
'RtlCreateHashTableEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeChar(label="Byte"), arg_names=["HashTable", "InitialSize", "Shift", "Flags"]),
|
|
2923
|
+
#
|
|
2924
|
+
'RtlDeleteHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["HashTable"]),
|
|
2925
|
+
#
|
|
2926
|
+
'RtlInsertEntryHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENTRY", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_CONTEXT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["HashTable", "Entry", "Signature", "Context"]),
|
|
2927
|
+
#
|
|
2928
|
+
'RtlRemoveEntryHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENTRY", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_CONTEXT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["HashTable", "Entry", "Context"]),
|
|
2929
|
+
#
|
|
2930
|
+
'RtlLookupEntryHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_CONTEXT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENTRY", SimStruct), offset=0), arg_names=["HashTable", "Signature", "Context"]),
|
|
2931
|
+
#
|
|
2932
|
+
'RtlGetNextEntryHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_CONTEXT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENTRY", SimStruct), offset=0), arg_names=["HashTable", "Context"]),
|
|
2933
|
+
#
|
|
2934
|
+
'RtlInitEnumerationHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENUMERATOR", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["HashTable", "Enumerator"]),
|
|
2935
|
+
#
|
|
2936
|
+
'RtlEnumerateEntryHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENUMERATOR", SimStruct), offset=0)], SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENTRY", SimStruct), offset=0), arg_names=["HashTable", "Enumerator"]),
|
|
2937
|
+
#
|
|
2938
|
+
'RtlEndEnumerationHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENUMERATOR", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["HashTable", "Enumerator"]),
|
|
2939
|
+
#
|
|
2940
|
+
'RtlInitWeakEnumerationHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENUMERATOR", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["HashTable", "Enumerator"]),
|
|
2941
|
+
#
|
|
2942
|
+
'RtlWeaklyEnumerateEntryHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENUMERATOR", SimStruct), offset=0)], SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENTRY", SimStruct), offset=0), arg_names=["HashTable", "Enumerator"]),
|
|
2943
|
+
#
|
|
2944
|
+
'RtlEndWeakEnumerationHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENUMERATOR", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["HashTable", "Enumerator"]),
|
|
2945
|
+
#
|
|
2946
|
+
'RtlInitStrongEnumerationHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENUMERATOR", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["HashTable", "Enumerator"]),
|
|
2947
|
+
#
|
|
2948
|
+
'RtlStronglyEnumerateEntryHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENUMERATOR", SimStruct), offset=0)], SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENTRY", SimStruct), offset=0), arg_names=["HashTable", "Enumerator"]),
|
|
2949
|
+
#
|
|
2950
|
+
'RtlEndStrongEnumerationHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0), SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE_ENUMERATOR", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["HashTable", "Enumerator"]),
|
|
2951
|
+
#
|
|
2952
|
+
'RtlExpandHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["HashTable"]),
|
|
2953
|
+
#
|
|
2954
|
+
'RtlContractHashTable': SimTypeFunction([SimTypePointer(SimTypeRef("RTL_DYNAMIC_HASH_TABLE", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["HashTable"]),
|
|
2955
|
+
#
|
|
2956
|
+
'RtlGetCallersAddress': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["CallersAddress", "CallersCaller"]),
|
|
2957
|
+
#
|
|
2958
|
+
'RtlWalkFrameChain': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["Callers", "Count", "Flags"]),
|
|
2959
|
+
#
|
|
2960
|
+
'RtlGetEnabledExtendedFeatures': SimTypeFunction([SimTypeLongLong(signed=False, label="UInt64")], SimTypeLongLong(signed=False, label="UInt64"), arg_names=["FeatureMask"]),
|
|
2961
|
+
#
|
|
2962
|
+
'RtlCopyString': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DestinationString", "SourceString"]),
|
|
2963
|
+
#
|
|
2964
|
+
'RtlUpperChar': SimTypeFunction([SimTypeChar(label="SByte")], SimTypeChar(label="SByte"), arg_names=["Character"]),
|
|
2965
|
+
#
|
|
2966
|
+
'RtlCompareString': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["String1", "String2", "CaseInSensitive"]),
|
|
2967
|
+
#
|
|
2968
|
+
'RtlEqualString': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["String1", "String2", "CaseInSensitive"]),
|
|
2969
|
+
#
|
|
2970
|
+
'RtlUpperString': SimTypeFunction([SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("STRING", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DestinationString", "SourceString"]),
|
|
2971
|
+
#
|
|
2972
|
+
'RtlPrefixUnicodeString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["String1", "String2", "CaseInSensitive"]),
|
|
2973
|
+
#
|
|
2974
|
+
'RtlSuffixUnicodeString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["String1", "String2", "CaseInSensitive"]),
|
|
2975
|
+
#
|
|
2976
|
+
'RtlUpcaseUnicodeString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationString", "SourceString", "AllocateDestinationString"]),
|
|
2977
|
+
#
|
|
2978
|
+
'RtlQueryRegistryValueWithFallback': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PrimaryHandle", "FallbackHandle", "ValueName", "ValueLength", "ValueType", "ValueData", "ResultLength"]),
|
|
2979
|
+
#
|
|
2980
|
+
'RtlMapGenericMask': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["AccessMask", "GenericMapping"]),
|
|
2981
|
+
#
|
|
2982
|
+
'RtlVolumeDeviceToDosName': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["VolumeDeviceObject", "DosName"]),
|
|
2983
|
+
#
|
|
2984
|
+
'DbgPrompt': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["Prompt", "Response", "Length"]),
|
|
2985
|
+
#
|
|
2986
|
+
'RtlGetActiveConsoleId': SimTypeFunction([], SimTypeInt(signed=False, label="UInt32")),
|
|
2987
|
+
#
|
|
2988
|
+
'RtlGetConsoleSessionForegroundProcessId': SimTypeFunction([], SimTypeLongLong(signed=False, label="UInt64")),
|
|
2989
|
+
#
|
|
2990
|
+
'RtlGetSuiteMask': SimTypeFunction([], SimTypeInt(signed=False, label="UInt32")),
|
|
2991
|
+
#
|
|
2992
|
+
'RtlIsMultiSessionSku': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
2993
|
+
#
|
|
2994
|
+
'RtlIsStateSeparationEnabled': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
2995
|
+
#
|
|
2996
|
+
'RtlGetPersistedStateLocation': SimTypeFunction([SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=False, label="STATE_LOCATION_TYPE"), SimTypePointer(SimTypeChar(label="Char"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SourceID", "CustomValue", "DefaultPath", "StateLocationType", "TargetPath", "BufferLengthIn", "BufferLengthOut"]),
|
|
2997
|
+
#
|
|
2998
|
+
'RtlIsApiSetImplemented': SimTypeFunction([SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["apiSetName"]),
|
|
2999
|
+
#
|
|
3000
|
+
'RtlIsMultiUsersInSessionSku': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
3001
|
+
#
|
|
3002
|
+
'RtlGetNtProductType': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="NT_PRODUCT_TYPE"), offset=0)], SimTypeChar(label="Byte"), arg_names=["NtProductType"]),
|
|
3003
|
+
#
|
|
3004
|
+
'RtlGetNtSystemRoot': SimTypeFunction([], SimTypePointer(SimTypeChar(label="Char"), offset=0)),
|
|
3005
|
+
#
|
|
3006
|
+
'RtlNormalizeSecurityDescriptor': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["SecurityDescriptor", "SecurityDescriptorLength", "NewSecurityDescriptor", "NewSecurityDescriptorLength", "CheckOnly"]),
|
|
3007
|
+
#
|
|
3008
|
+
'RtlSetSystemGlobalData': SimTypeFunction([SimTypeInt(signed=False, label="RTL_SYSTEM_GLOBAL_DATA_ID"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["DataId", "Buffer", "Size"]),
|
|
3009
|
+
#
|
|
3010
|
+
'NtOpenProcess': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("CLIENT_ID", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "DesiredAccess", "ObjectAttributes", "ClientId"]),
|
|
3011
|
+
#
|
|
3012
|
+
'KePulseEvent': SimTypeFunction([SimTypePointer(SimTypeRef("KEVENT", SimStruct), offset=0), SimTypeInt(signed=True, label="Int32"), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["Event", "Increment", "Wait"]),
|
|
3013
|
+
#
|
|
3014
|
+
'KeExpandKernelStackAndCallout': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Callout", "Parameter", "Size"]),
|
|
3015
|
+
#
|
|
3016
|
+
'KeExpandKernelStackAndCalloutEx': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Callout", "Parameter", "Size", "Wait", "Context"]),
|
|
3017
|
+
#
|
|
3018
|
+
'KeSetBasePriorityThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=True, label="Int32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Thread", "Increment"]),
|
|
3019
|
+
#
|
|
3020
|
+
'KeBugCheck': SimTypeFunction([SimTypeInt(signed=False, label="BUGCHECK_ERROR")], SimTypeBottom(label="Void"), arg_names=["BugCheckCode"]),
|
|
3021
|
+
#
|
|
3022
|
+
'KeInvalidateAllCaches': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
3023
|
+
#
|
|
3024
|
+
'KeInvalidateRangeAllCaches': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["BaseAddress", "Length"]),
|
|
3025
|
+
#
|
|
3026
|
+
'KeSetHardwareCounterConfiguration': SimTypeFunction([SimTypePointer(SimTypeRef("HARDWARE_COUNTER", SimStruct), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["CounterArray", "Count"]),
|
|
3027
|
+
#
|
|
3028
|
+
'KeQueryHardwareCounterConfiguration': SimTypeFunction([SimTypePointer(SimTypeRef("HARDWARE_COUNTER", SimStruct), label="LPArray", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["CounterArray", "MaximumCount", "Count"]),
|
|
3029
|
+
#
|
|
3030
|
+
'ExRaiseDatatypeMisalignment': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
3031
|
+
#
|
|
3032
|
+
'ExRaiseAccessViolation': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
3033
|
+
#
|
|
3034
|
+
'ExInitializeZone': SimTypeFunction([SimTypePointer(SimTypeRef("ZONE_HEADER", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Zone", "BlockSize", "InitialSegment", "InitialSegmentSize"]),
|
|
3035
|
+
#
|
|
3036
|
+
'ExExtendZone': SimTypeFunction([SimTypePointer(SimTypeRef("ZONE_HEADER", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Zone", "Segment", "SegmentSize"]),
|
|
3037
|
+
#
|
|
3038
|
+
'ExInterlockedExtendZone': SimTypeFunction([SimTypePointer(SimTypeRef("ZONE_HEADER", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Zone", "Segment", "SegmentSize", "Lock"]),
|
|
3039
|
+
#
|
|
3040
|
+
'ExUuidCreate': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Uuid"]),
|
|
3041
|
+
#
|
|
3042
|
+
'MmIsThisAnNtAsSystem': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
3043
|
+
#
|
|
3044
|
+
'MmMapUserAddressesToPage': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["BaseAddress", "NumberOfBytes", "PageAddress"]),
|
|
3045
|
+
#
|
|
3046
|
+
'MmAddPhysicalMemory': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["StartAddress", "NumberOfBytes"]),
|
|
3047
|
+
#
|
|
3048
|
+
'MmRotatePhysicalView': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypeInt(signed=False, label="MM_ROTATE_DIRECTION"), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypePointer(SimTypeRef("MDL", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DestinationMdl", "SourceMdl", "Context"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["VirtualAddress", "NumberOfBytes", "NewMdl", "Direction", "CopyFunction", "Context"]),
|
|
3049
|
+
#
|
|
3050
|
+
'MmRemovePhysicalMemory': SimTypeFunction([SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["StartAddress", "NumberOfBytes"]),
|
|
3051
|
+
#
|
|
3052
|
+
'MmGetPhysicalMemoryRanges': SimTypeFunction([], SimTypePointer(SimTypeRef("PHYSICAL_MEMORY_RANGE", SimStruct), offset=0)),
|
|
3053
|
+
#
|
|
3054
|
+
'MmGetPhysicalMemoryRangesEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeRef("PHYSICAL_MEMORY_RANGE", SimStruct), offset=0), arg_names=["PartitionObject"]),
|
|
3055
|
+
#
|
|
3056
|
+
'MmGetPhysicalMemoryRangesEx2': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeRef("PHYSICAL_MEMORY_RANGE", SimStruct), offset=0), arg_names=["PartitionObject", "Flags"]),
|
|
3057
|
+
#
|
|
3058
|
+
'MmMapVideoDisplay': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["PhysicalAddress", "NumberOfBytes", "CacheType"]),
|
|
3059
|
+
#
|
|
3060
|
+
'MmUnmapVideoDisplay': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["BaseAddress", "NumberOfBytes"]),
|
|
3061
|
+
#
|
|
3062
|
+
'MmGetPhysicalAddress': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeLongLong(signed=True, label="Int64"), arg_names=["BaseAddress"]),
|
|
3063
|
+
#
|
|
3064
|
+
'MmGetCacheAttribute': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PhysicalAddress", "CacheType"]),
|
|
3065
|
+
#
|
|
3066
|
+
'MmCopyMemory': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeRef("MM_COPY_ADDRESS", SimStruct), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TargetAddress", "SourceAddress", "NumberOfBytes", "Flags", "NumberOfBytesTransferred"]),
|
|
3067
|
+
#
|
|
3068
|
+
'MmGetCacheAttributeEx': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="MEMORY_CACHING_TYPE"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["PhysicalAddress", "Flags", "CacheType"]),
|
|
3069
|
+
#
|
|
3070
|
+
'MmGetVirtualForPhysical': SimTypeFunction([SimTypeLongLong(signed=True, label="Int64")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["PhysicalAddress"]),
|
|
3071
|
+
#
|
|
3072
|
+
'MmAllocateNonCachedMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["NumberOfBytes"]),
|
|
3073
|
+
#
|
|
3074
|
+
'MmFreeNonCachedMemory': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["BaseAddress", "NumberOfBytes"]),
|
|
3075
|
+
#
|
|
3076
|
+
'MmIsAddressValid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["VirtualAddress"]),
|
|
3077
|
+
#
|
|
3078
|
+
'MmIsNonPagedSystemAddressValid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["VirtualAddress"]),
|
|
3079
|
+
#
|
|
3080
|
+
'MmLockPagableSectionByHandle': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ImageSectionHandle"]),
|
|
3081
|
+
#
|
|
3082
|
+
'MmSecureVirtualMemory': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Address", "Size", "ProbeMode"]),
|
|
3083
|
+
#
|
|
3084
|
+
'MmSecureVirtualMemoryEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Address", "Size", "ProbeMode", "Flags"]),
|
|
3085
|
+
#
|
|
3086
|
+
'MmUnsecureVirtualMemory': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["SecureHandle"]),
|
|
3087
|
+
#
|
|
3088
|
+
'MmMapViewInSystemSpaceEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Section", "MappedBase", "ViewSize", "SectionOffset", "Flags"]),
|
|
3089
|
+
#
|
|
3090
|
+
'MmMapViewInSystemSpace': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Section", "MappedBase", "ViewSize"]),
|
|
3091
|
+
#
|
|
3092
|
+
'MmUnmapViewInSystemSpace': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["MappedBase"]),
|
|
3093
|
+
#
|
|
3094
|
+
'MmMapViewInSessionSpaceEx': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Section", "MappedBase", "ViewSize", "SectionOffset", "Flags"]),
|
|
3095
|
+
#
|
|
3096
|
+
'MmMapViewInSessionSpace': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Section", "MappedBase", "ViewSize"]),
|
|
3097
|
+
#
|
|
3098
|
+
'MmUnmapViewInSessionSpace': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["MappedBase"]),
|
|
3099
|
+
#
|
|
3100
|
+
'MmCreateMirror': SimTypeFunction([], SimTypeInt(signed=True, label="Int32")),
|
|
3101
|
+
#
|
|
3102
|
+
'SeSinglePrivilegeCheck': SimTypeFunction([SimTypeRef("LUID", SimStruct), SimTypeChar(label="SByte")], SimTypeChar(label="Byte"), arg_names=["PrivilegeValue", "PreviousMode"]),
|
|
3103
|
+
#
|
|
3104
|
+
'PsSetCreateProcessNotifyRoutine': SimTypeFunction([SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["ParentId", "ProcessId", "Create"]), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["NotifyRoutine", "Remove"]),
|
|
3105
|
+
#
|
|
3106
|
+
'PsSetCreateProcessNotifyRoutineEx': SimTypeFunction([SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("PS_CREATE_NOTIFY_INFO", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Process", "ProcessId", "CreateInfo"]), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["NotifyRoutine", "Remove"]),
|
|
3107
|
+
#
|
|
3108
|
+
'PsSetCreateProcessNotifyRoutineEx2': SimTypeFunction([SimTypeInt(signed=False, label="PSCREATEPROCESSNOTIFYTYPE"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["NotifyType", "NotifyInformation", "Remove"]),
|
|
3109
|
+
#
|
|
3110
|
+
'PsSetCreateThreadNotifyRoutine': SimTypeFunction([SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["ProcessId", "ThreadId", "Create"]), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NotifyRoutine"]),
|
|
3111
|
+
#
|
|
3112
|
+
'PsSetCreateThreadNotifyRoutineEx': SimTypeFunction([SimTypeInt(signed=False, label="PSCREATETHREADNOTIFYTYPE"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NotifyType", "NotifyInformation"]),
|
|
3113
|
+
#
|
|
3114
|
+
'PsRemoveCreateThreadNotifyRoutine': SimTypeFunction([SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte")], SimTypeBottom(label="Void"), arg_names=["ProcessId", "ThreadId", "Create"]), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NotifyRoutine"]),
|
|
3115
|
+
#
|
|
3116
|
+
'PsSetLoadImageNotifyRoutine': SimTypeFunction([SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IMAGE_INFO", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FullImageName", "ProcessId", "ImageInfo"]), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NotifyRoutine"]),
|
|
3117
|
+
#
|
|
3118
|
+
'PsSetLoadImageNotifyRoutineEx': SimTypeFunction([SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IMAGE_INFO", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FullImageName", "ProcessId", "ImageInfo"]), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NotifyRoutine", "Flags"]),
|
|
3119
|
+
#
|
|
3120
|
+
'PsRemoveLoadImageNotifyRoutine': SimTypeFunction([SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeRef("IMAGE_INFO", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["FullImageName", "ProcessId", "ImageInfo"]), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["NotifyRoutine"]),
|
|
3121
|
+
#
|
|
3122
|
+
'PsGetCurrentProcessId': SimTypeFunction([], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)),
|
|
3123
|
+
#
|
|
3124
|
+
'PsGetCurrentThreadId': SimTypeFunction([], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)),
|
|
3125
|
+
#
|
|
3126
|
+
'PsSetCurrentThreadPrefetching': SimTypeFunction([SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["Prefetching"]),
|
|
3127
|
+
#
|
|
3128
|
+
'PsIsCurrentThreadPrefetching': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
3129
|
+
#
|
|
3130
|
+
'PsGetProcessCreateTimeQuadPart': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeLongLong(signed=True, label="Int64"), arg_names=["Process"]),
|
|
3131
|
+
#
|
|
3132
|
+
'PsGetProcessStartKey': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeLongLong(signed=False, label="UInt64"), arg_names=["Process"]),
|
|
3133
|
+
#
|
|
3134
|
+
'PsGetProcessExitStatus': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Process"]),
|
|
3135
|
+
#
|
|
3136
|
+
'PsGetThreadExitStatus': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Thread"]),
|
|
3137
|
+
#
|
|
3138
|
+
'PsGetProcessId': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Process"]),
|
|
3139
|
+
#
|
|
3140
|
+
'PsGetThreadId': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Thread"]),
|
|
3141
|
+
#
|
|
3142
|
+
'PsGetThreadProperty': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["Thread", "Key", "Flags"]),
|
|
3143
|
+
#
|
|
3144
|
+
'PsGetThreadProcessId': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Thread"]),
|
|
3145
|
+
#
|
|
3146
|
+
'PsGetThreadCreateTime': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeLongLong(signed=True, label="Int64"), arg_names=["Thread"]),
|
|
3147
|
+
#
|
|
3148
|
+
'PsGetCurrentThreadTeb': SimTypeFunction([], SimTypePointer(SimTypeBottom(label="Void"), offset=0)),
|
|
3149
|
+
#
|
|
3150
|
+
'PsGetJobSilo': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Job", "Silo"]),
|
|
3151
|
+
#
|
|
3152
|
+
'PsGetJobServerSilo': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Job", "ServerSilo"]),
|
|
3153
|
+
#
|
|
3154
|
+
'PsGetEffectiveServerSilo': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Silo"]),
|
|
3155
|
+
#
|
|
3156
|
+
'PsAttachSiloToCurrentThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Silo"]),
|
|
3157
|
+
#
|
|
3158
|
+
'PsDetachSiloFromCurrentThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["PreviousSilo"]),
|
|
3159
|
+
#
|
|
3160
|
+
'PsIsHostSilo': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeChar(label="Byte"), arg_names=["Silo"]),
|
|
3161
|
+
#
|
|
3162
|
+
'PsGetHostSilo': SimTypeFunction([], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)),
|
|
3163
|
+
#
|
|
3164
|
+
'PsGetCurrentSilo': SimTypeFunction([], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)),
|
|
3165
|
+
#
|
|
3166
|
+
'PsGetCurrentServerSilo': SimTypeFunction([], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)),
|
|
3167
|
+
#
|
|
3168
|
+
'PsGetCurrentServerSiloName': SimTypeFunction([], SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)),
|
|
3169
|
+
#
|
|
3170
|
+
'PsIsCurrentThreadInServerSilo': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
3171
|
+
#
|
|
3172
|
+
'PsAcquireSiloHardReference': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Silo"]),
|
|
3173
|
+
#
|
|
3174
|
+
'PsReleaseSiloHardReference': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Silo"]),
|
|
3175
|
+
#
|
|
3176
|
+
'PsAllocSiloContextSlot': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="UInt"), label="UIntPtr", offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Reserved", "ReturnedContextSlot"]),
|
|
3177
|
+
#
|
|
3178
|
+
'PsFreeSiloContextSlot': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ContextSlot"]),
|
|
3179
|
+
#
|
|
3180
|
+
'PsCreateSiloContext': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="POOL_TYPE"), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["SiloContext"]), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Silo", "Size", "PoolType", "ContextCleanupCallback", "ReturnedSiloContext"]),
|
|
3181
|
+
#
|
|
3182
|
+
'PsInsertSiloContext': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Silo", "ContextSlot", "SiloContext"]),
|
|
3183
|
+
#
|
|
3184
|
+
'PsReplaceSiloContext': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Silo", "ContextSlot", "NewSiloContext", "OldSiloContext"]),
|
|
3185
|
+
#
|
|
3186
|
+
'PsGetSiloContext': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Silo", "ContextSlot", "ReturnedSiloContext"]),
|
|
3187
|
+
#
|
|
3188
|
+
'PsRemoveSiloContext': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Silo", "ContextSlot", "RemovedSiloContext"]),
|
|
3189
|
+
#
|
|
3190
|
+
'PsReferenceSiloContext': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["SiloContext"]),
|
|
3191
|
+
#
|
|
3192
|
+
'PsDereferenceSiloContext': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["SiloContext"]),
|
|
3193
|
+
#
|
|
3194
|
+
'PsInsertPermanentSiloContext': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Silo", "ContextSlot", "SiloContext"]),
|
|
3195
|
+
#
|
|
3196
|
+
'PsMakeSiloContextPermanent': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Silo", "ContextSlot"]),
|
|
3197
|
+
#
|
|
3198
|
+
'PsGetPermanentSiloContext': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Silo", "ContextSlot", "ReturnedSiloContext"]),
|
|
3199
|
+
#
|
|
3200
|
+
'PsRegisterSiloMonitor': SimTypeFunction([SimTypePointer(SimTypeRef("SILO_MONITOR_REGISTRATION", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Registration", "ReturnedMonitor"]),
|
|
3201
|
+
#
|
|
3202
|
+
'PsStartSiloMonitor': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Monitor"]),
|
|
3203
|
+
#
|
|
3204
|
+
'PsGetSiloMonitorContextSlot': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Monitor"]),
|
|
3205
|
+
#
|
|
3206
|
+
'PsUnregisterSiloMonitor': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeBottom(label="Void"), arg_names=["Monitor"]),
|
|
3207
|
+
#
|
|
3208
|
+
'PsGetServerSiloServiceSessionId': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=False, label="UInt32"), arg_names=["Silo"]),
|
|
3209
|
+
#
|
|
3210
|
+
'PsTerminateServerSilo': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=True, label="Int32")], SimTypeBottom(label="Void"), arg_names=["ServerSilo", "ExitStatus"]),
|
|
3211
|
+
#
|
|
3212
|
+
'PsGetParentSilo': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Job"]),
|
|
3213
|
+
#
|
|
3214
|
+
'PsGetThreadServerSilo': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["Thread"]),
|
|
3215
|
+
#
|
|
3216
|
+
'PsGetSiloContainerId': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypePointer(SimTypeBottom(label="Guid"), offset=0), arg_names=["Silo"]),
|
|
3217
|
+
#
|
|
3218
|
+
'IoAllocateAdapterChannel': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=False, label="IO_ALLOCATION_ACTION"), arg_names=["DeviceObject", "Irp", "MapRegisterBase", "Context"]), offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["AdapterObject", "DeviceObject", "NumberOfMapRegisters", "ExecutionRoutine", "Context"]),
|
|
3219
|
+
#
|
|
3220
|
+
'IoAllocateController': SimTypeFunction([SimTypePointer(SimTypeRef("CONTROLLER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=False, label="IO_ALLOCATION_ACTION"), arg_names=["DeviceObject", "Irp", "MapRegisterBase", "Context"]), offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ControllerObject", "DeviceObject", "ExecutionRoutine", "Context"]),
|
|
3221
|
+
#
|
|
3222
|
+
'IoAssignResources': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_RESOURCE_REQUIREMENTS_LIST", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("CM_RESOURCE_LIST", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["RegistryPath", "DriverClassName", "DriverObject", "DeviceObject", "RequestedResources", "AllocatedResources"]),
|
|
3223
|
+
#
|
|
3224
|
+
'IoAttachDeviceByPointer': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SourceDevice", "TargetDevice"]),
|
|
3225
|
+
#
|
|
3226
|
+
'IoCreateController': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypePointer(SimTypeRef("CONTROLLER_OBJECT", SimStruct), offset=0), arg_names=["Size"]),
|
|
3227
|
+
#
|
|
3228
|
+
'IoDeleteController': SimTypeFunction([SimTypePointer(SimTypeRef("CONTROLLER_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["ControllerObject"]),
|
|
3229
|
+
#
|
|
3230
|
+
'IoFreeController': SimTypeFunction([SimTypePointer(SimTypeRef("CONTROLLER_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["ControllerObject"]),
|
|
3231
|
+
#
|
|
3232
|
+
'IoGetConfigurationInformation': SimTypeFunction([], SimTypePointer(SimTypeRef("CONFIGURATION_INFORMATION", SimStruct), offset=0)),
|
|
3233
|
+
#
|
|
3234
|
+
'IoGetFileObjectGenericMapping': SimTypeFunction([], SimTypePointer(SimTypeRef("GENERIC_MAPPING", SimStruct), offset=0)),
|
|
3235
|
+
#
|
|
3236
|
+
'IoCancelFileOpen': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["DeviceObject", "FileObject"]),
|
|
3237
|
+
#
|
|
3238
|
+
'IoMakeAssociatedIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeChar(label="SByte")], SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), arg_names=["Irp", "StackSize"]),
|
|
3239
|
+
#
|
|
3240
|
+
'IoMakeAssociatedIrpEx': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeChar(label="SByte")], SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), arg_names=["Irp", "DeviceObject", "StackSize"]),
|
|
3241
|
+
#
|
|
3242
|
+
'IoQueryDeviceDescription': SimTypeFunction([SimTypePointer(SimTypeInt(signed=False, label="INTERFACE_TYPE"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="CONFIGURATION_TYPE"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="CONFIGURATION_TYPE"), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypeInt(signed=False, label="INTERFACE_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("KEY_VALUE_FULL_INFORMATION", SimStruct), offset=0), offset=0), SimTypeInt(signed=False, label="CONFIGURATION_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("KEY_VALUE_FULL_INFORMATION", SimStruct), offset=0), offset=0), SimTypeInt(signed=False, label="CONFIGURATION_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeRef("KEY_VALUE_FULL_INFORMATION", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Context", "PathName", "BusType", "BusNumber", "BusInformation", "ControllerType", "ControllerNumber", "ControllerInformation", "PeripheralType", "PeripheralNumber", "PeripheralInformation"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["BusType", "BusNumber", "ControllerType", "ControllerNumber", "PeripheralType", "PeripheralNumber", "CalloutRoutine", "Context"]),
|
|
3243
|
+
#
|
|
3244
|
+
'IoRaiseHardError': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeRef("VPB", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Irp", "Vpb", "RealDeviceObject"]),
|
|
3245
|
+
#
|
|
3246
|
+
'IoRaiseInformationalHardError': SimTypeFunction([SimTypeInt(signed=True, label="Int32"), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeChar(label="Byte"), arg_names=["ErrorStatus", "String", "Thread"]),
|
|
3247
|
+
#
|
|
3248
|
+
'IoSetThreadHardErrorMode': SimTypeFunction([SimTypeChar(label="Byte")], SimTypeChar(label="Byte"), arg_names=["EnableHardErrors"]),
|
|
3249
|
+
#
|
|
3250
|
+
'IoRegisterBootDriverReinitialization': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["DriverObject", "Context", "Count"]), offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["DriverObject", "DriverReinitializationRoutine", "Context"]),
|
|
3251
|
+
#
|
|
3252
|
+
'IoRegisterDriverReinitialization': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["DriverObject", "Context", "Count"]), offset=0), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["DriverObject", "DriverReinitializationRoutine", "Context"]),
|
|
3253
|
+
#
|
|
3254
|
+
'IoReportResourceUsage': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("CM_RESOURCE_LIST", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("CM_RESOURCE_LIST", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverClassName", "DriverObject", "DriverList", "DriverListSize", "DeviceObject", "DeviceList", "DeviceListSize", "OverrideConflict", "ConflictDetected"]),
|
|
3255
|
+
#
|
|
3256
|
+
'IoTranslateBusAddress': SimTypeFunction([SimTypeInt(signed=False, label="INTERFACE_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypeLongLong(signed=True, label="Int64"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeChar(label="Byte"), arg_names=["InterfaceType", "BusNumber", "BusAddress", "AddressSpace", "TranslatedAddress"]),
|
|
3257
|
+
#
|
|
3258
|
+
'IoSetHardErrorOrVerifyDevice': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Irp", "DeviceObject"]),
|
|
3259
|
+
#
|
|
3260
|
+
'HalExamineMBR': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypePointer(SimTypeBottom(label="Void"), offset=0), offset=0)], SimTypeBottom(label="Void"), arg_names=["DeviceObject", "SectorSize", "MBRTypeIdentifier", "Buffer"]),
|
|
3261
|
+
#
|
|
3262
|
+
'IoReadPartitionTable': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypePointer(SimTypePointer(SimTypeRef("DRIVE_LAYOUT_INFORMATION", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "SectorSize", "ReturnRecognizedPartitions", "PartitionBuffer"]),
|
|
3263
|
+
#
|
|
3264
|
+
'IoSetPartitionInformation': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "SectorSize", "PartitionNumber", "PartitionType"]),
|
|
3265
|
+
#
|
|
3266
|
+
'IoWritePartitionTable': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("DRIVE_LAYOUT_INFORMATION", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "SectorSize", "SectorsPerTrack", "NumberOfHeads", "PartitionBuffer"]),
|
|
3267
|
+
#
|
|
3268
|
+
'IoCreateDisk': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("CREATE_DISK", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "Disk"]),
|
|
3269
|
+
#
|
|
3270
|
+
'IoReadPartitionTableEx': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("DRIVE_LAYOUT_INFORMATION_EX", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "DriveLayout"]),
|
|
3271
|
+
#
|
|
3272
|
+
'IoWritePartitionTableEx': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DRIVE_LAYOUT_INFORMATION_EX", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "DriveLayout"]),
|
|
3273
|
+
#
|
|
3274
|
+
'IoSetPartitionInformationEx': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("SET_PARTITION_INFORMATION_EX", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "PartitionNumber", "PartitionInfo"]),
|
|
3275
|
+
#
|
|
3276
|
+
'IoVerifyPartitionTable': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "FixErrors"]),
|
|
3277
|
+
#
|
|
3278
|
+
'IoReadDiskSignature': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("DISK_SIGNATURE", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DeviceObject", "BytesPerSector", "Signature"]),
|
|
3279
|
+
#
|
|
3280
|
+
'IoVolumeDeviceToDosName': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["VolumeDeviceObject", "DosName"]),
|
|
3281
|
+
#
|
|
3282
|
+
'IoVolumeDeviceToGuidPath': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["VolumeDeviceObject", "GuidPath"]),
|
|
3283
|
+
#
|
|
3284
|
+
'IoVolumeDeviceToGuid': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["VolumeDeviceObject", "Guid"]),
|
|
3285
|
+
#
|
|
3286
|
+
'IoVolumeDeviceNameToGuid': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["VolumeDeviceName", "Guid"]),
|
|
3287
|
+
#
|
|
3288
|
+
'IoVolumeDeviceNameToGuidPath': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["VolumeDeviceName", "GuidPath"]),
|
|
3289
|
+
#
|
|
3290
|
+
'IoSetSystemPartition': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["VolumeNameString"]),
|
|
3291
|
+
#
|
|
3292
|
+
'IoCreateFileSpecifyDeviceObjectHint': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="CREATE_FILE_TYPE"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "DesiredAccess", "ObjectAttributes", "IoStatusBlock", "AllocationSize", "FileAttributes", "ShareAccess", "Disposition", "CreateOptions", "EaBuffer", "EaLength", "CreateFileType", "InternalParameters", "Options", "DeviceObject"]),
|
|
3293
|
+
#
|
|
3294
|
+
'IoGetSiloParameters': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("IO_FOEXT_SILO_PARAMETERS", SimStruct), offset=0), arg_names=["FileObject"]),
|
|
3295
|
+
#
|
|
3296
|
+
'IoGetSilo': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["FileObject"]),
|
|
3297
|
+
#
|
|
3298
|
+
'IoGetTransactionParameterBlock': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeRef("TXN_PARAMETER_BLOCK", SimStruct), offset=0), arg_names=["FileObject"]),
|
|
3299
|
+
#
|
|
3300
|
+
'IoCreateFileEx': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="CREATE_FILE_TYPE"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("IO_DRIVER_CREATE_CONTEXT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "DesiredAccess", "ObjectAttributes", "IoStatusBlock", "AllocationSize", "FileAttributes", "ShareAccess", "Disposition", "CreateOptions", "EaBuffer", "EaLength", "CreateFileType", "InternalParameters", "Options", "DriverContext"]),
|
|
3301
|
+
#
|
|
3302
|
+
'IoSetIrpExtraCreateParameter': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "ExtraCreateParameter"]),
|
|
3303
|
+
#
|
|
3304
|
+
'IoClearIrpExtraCreateParameter': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Irp"]),
|
|
3305
|
+
#
|
|
3306
|
+
'IoGetIrpExtraCreateParameter': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "ExtraCreateParameter"]),
|
|
3307
|
+
#
|
|
3308
|
+
'IoQueryInformationByName': SimTypeFunction([SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="FILE_INFORMATION_CLASS"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("IO_DRIVER_CREATE_CONTEXT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ObjectAttributes", "IoStatusBlock", "FileInformation", "Length", "FileInformationClass", "Options", "DriverContext"]),
|
|
3309
|
+
#
|
|
3310
|
+
'IoAttachDeviceToDeviceStackSafe': SimTypeFunction([SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SourceDevice", "TargetDevice", "AttachedToDeviceObject"]),
|
|
3311
|
+
#
|
|
3312
|
+
'IoIsFileOriginRemote': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject"]),
|
|
3313
|
+
#
|
|
3314
|
+
'IoSetFileOrigin': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypeChar(label="Byte")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "Remote"]),
|
|
3315
|
+
#
|
|
3316
|
+
'IoIsFileObjectIgnoringSharing': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypeChar(label="Byte"), arg_names=["FileObject"]),
|
|
3317
|
+
#
|
|
3318
|
+
'IoSetFileObjectIgnoreSharing': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject"]),
|
|
3319
|
+
#
|
|
3320
|
+
'IoGetPagingIoPriority': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeInt(signed=False, label="IO_PAGING_PRIORITY"), arg_names=["Irp"]),
|
|
3321
|
+
#
|
|
3322
|
+
'IoRegisterBootDriverCallback': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeBottom(label="Void")), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["CallbackFunction", "CallbackContext"]),
|
|
3323
|
+
#
|
|
3324
|
+
'IoUnregisterBootDriverCallback': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeBottom(label="Void"), arg_names=["CallbackHandle"]),
|
|
3325
|
+
#
|
|
3326
|
+
'IoGetActivityIdIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "Guid"]),
|
|
3327
|
+
#
|
|
3328
|
+
'IoSetActivityIdIrp': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "Guid"]),
|
|
3329
|
+
#
|
|
3330
|
+
'IoPropagateActivityIdToThread': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypePointer(SimTypeBottom(label="Guid"), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "PropagatedId", "OriginalId"]),
|
|
3331
|
+
#
|
|
3332
|
+
'IoSetActivityIdThread': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypePointer(SimTypeBottom(label="Guid"), offset=0), arg_names=["ActivityId"]),
|
|
3333
|
+
#
|
|
3334
|
+
'IoClearActivityIdThread': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeBottom(label="Void"), arg_names=["OriginalId"]),
|
|
3335
|
+
#
|
|
3336
|
+
'IoGetActivityIdThread': SimTypeFunction([], SimTypePointer(SimTypeBottom(label="Guid"), offset=0)),
|
|
3337
|
+
#
|
|
3338
|
+
'IoTransferActivityId': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypePointer(SimTypeBottom(label="Guid"), offset=0)], SimTypeBottom(label="Void"), arg_names=["ActivityId", "RelatedActivityId"]),
|
|
3339
|
+
#
|
|
3340
|
+
'IoGetFsZeroingOffset': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "ZeroingOffset"]),
|
|
3341
|
+
#
|
|
3342
|
+
'IoSetFsZeroingOffsetRequired': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp"]),
|
|
3343
|
+
#
|
|
3344
|
+
'IoSetFsZeroingOffset': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Irp", "ZeroingOffset"]),
|
|
3345
|
+
#
|
|
3346
|
+
'IoIsValidIrpStatus': SimTypeFunction([SimTypeInt(signed=True, label="Int32")], SimTypeInt(signed=False, label="UInt32"), arg_names=["Status"]),
|
|
3347
|
+
#
|
|
3348
|
+
'IoIncrementKeepAliveCount': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "Process"]),
|
|
3349
|
+
#
|
|
3350
|
+
'IoDecrementKeepAliveCount': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["FileObject", "Process"]),
|
|
3351
|
+
#
|
|
3352
|
+
'IoGetInitiatorProcess': SimTypeFunction([SimTypePointer(SimTypeRef("FILE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), arg_names=["FileObject"]),
|
|
3353
|
+
#
|
|
3354
|
+
'IoSetMasterIrpStatus': SimTypeFunction([SimTypePointer(SimTypeRef("IRP", SimStruct), offset=0), SimTypeInt(signed=True, label="Int32")], SimTypeBottom(label="Void"), arg_names=["MasterIrp", "Status"]),
|
|
3355
|
+
#
|
|
3356
|
+
'IoQueryFullDriverPath': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "FullPath"]),
|
|
3357
|
+
#
|
|
3358
|
+
'IoReportDetectedDevice': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypeInt(signed=False, label="INTERFACE_TYPE"), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("CM_RESOURCE_LIST", SimStruct), offset=0), SimTypePointer(SimTypeRef("IO_RESOURCE_REQUIREMENTS_LIST", SimStruct), offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "LegacyBusType", "BusNumber", "SlotNumber", "ResourceList", "ResourceRequirements", "ResourceAssigned", "DeviceObject"]),
|
|
3359
|
+
#
|
|
3360
|
+
'IoReportRootDevice': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject"]),
|
|
3361
|
+
#
|
|
3362
|
+
'IoReportResourceForDetection': SimTypeFunction([SimTypePointer(SimTypeRef("DRIVER_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("CM_RESOURCE_LIST", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeRef("CM_RESOURCE_LIST", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["DriverObject", "DriverList", "DriverListSize", "DeviceObject", "DeviceList", "DeviceListSize", "ConflictDetected"]),
|
|
3363
|
+
#
|
|
3364
|
+
'FsRtlIsTotalDeviceFailure': SimTypeFunction([SimTypeInt(signed=True, label="Int32")], SimTypeChar(label="Byte"), arg_names=["Status"]),
|
|
3365
|
+
#
|
|
3366
|
+
'ZwCreateTimer': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypeInt(signed=False, label="TIMER_TYPE")], SimTypeInt(signed=True, label="Int32"), arg_names=["TimerHandle", "DesiredAccess", "ObjectAttributes", "TimerType"]),
|
|
3367
|
+
#
|
|
3368
|
+
'ZwOpenTimer': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TimerHandle", "DesiredAccess", "ObjectAttributes"]),
|
|
3369
|
+
#
|
|
3370
|
+
'ZwCancelTimer': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TimerHandle", "CurrentState"]),
|
|
3371
|
+
#
|
|
3372
|
+
'ZwSetTimer': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=True, label="Int32")], SimTypeBottom(label="Void"), arg_names=["TimerContext", "TimerLowValue", "TimerHighValue"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeChar(label="Byte"), SimTypeInt(signed=True, label="Int32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["TimerHandle", "DueTime", "TimerApcRoutine", "TimerContext", "ResumeTimer", "Period", "PreviousState"]),
|
|
3373
|
+
#
|
|
3374
|
+
'ZwSetTimerEx': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="TIMER_SET_INFORMATION_CLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["TimerHandle", "TimerSetInformationClass", "TimerSetInformation", "TimerSetInformationLength"]),
|
|
3375
|
+
#
|
|
3376
|
+
'ZwDeviceIoControlFile': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ApcContext", "IoStatusBlock", "Reserved"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IO_STATUS_BLOCK", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["FileHandle", "Event", "ApcRoutine", "ApcContext", "IoStatusBlock", "IoControlCode", "InputBuffer", "InputBufferLength", "OutputBuffer", "OutputBufferLength"]),
|
|
3377
|
+
#
|
|
3378
|
+
'ZwDisplayString': SimTypeFunction([SimTypePointer(SimTypeRef("UNICODE_STRING", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["String"]),
|
|
3379
|
+
#
|
|
3380
|
+
'ZwPowerInformation': SimTypeFunction([SimTypeInt(signed=False, label="POWER_INFORMATION_LEVEL"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["InformationLevel", "InputBuffer", "InputBufferLength", "OutputBuffer", "OutputBufferLength"]),
|
|
3381
|
+
#
|
|
3382
|
+
'ZwAllocateLocallyUniqueId': SimTypeFunction([SimTypePointer(SimTypeRef("LUID", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Luid"]),
|
|
3383
|
+
#
|
|
3384
|
+
'ZwTerminateProcess': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=True, label="Int32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "ExitStatus"]),
|
|
3385
|
+
#
|
|
3386
|
+
'ZwOpenProcess': SimTypeFunction([SimTypePointer(SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("OBJECT_ATTRIBUTES", SimStruct), offset=0), SimTypePointer(SimTypeRef("CLIENT_ID", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "DesiredAccess", "ObjectAttributes", "ClientId"]),
|
|
3387
|
+
#
|
|
3388
|
+
'WheaAddErrorSourceDeviceDriver': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("WHEA_ERROR_SOURCE_CONFIGURATION_DEVICE_DRIVER", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Context", "Configuration", "NumberPreallocatedErrorReports"]),
|
|
3389
|
+
#
|
|
3390
|
+
'WheaAddErrorSourceDeviceDriverV1': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("WHEA_ERROR_SOURCE_CONFIGURATION_DEVICE_DRIVER", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["Context", "Configuration", "NumBuffersToPreallocate", "MaxDataLength"]),
|
|
3391
|
+
#
|
|
3392
|
+
'WheaRemoveErrorSourceDeviceDriver': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ErrorSourceId"]),
|
|
3393
|
+
#
|
|
3394
|
+
'WheaReportHwErrorDeviceDriver': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0), SimTypePointer(SimTypeChar(label="Byte"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeBottom(label="Guid"), offset=0), SimTypeInt(signed=False, label="WHEA_ERROR_SEVERITY"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ErrorSourceId", "DeviceObject", "ErrorData", "ErrorDataLength", "SectionTypeGuid", "ErrorSeverity", "DeviceFriendlyName"]),
|
|
3395
|
+
#
|
|
3396
|
+
'WheaCreateHwErrorReportDeviceDriver': SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("DEVICE_OBJECT", SimStruct), offset=0)], SimTypePointer(SimTypeBottom(label="Void"), offset=0), arg_names=["ErrorSourceId", "DeviceObject"]),
|
|
3397
|
+
#
|
|
3398
|
+
'WheaAddHwErrorReportSectionDeviceDriver': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeRef("WHEA_DRIVER_BUFFER_SET", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ErrorHandle", "SectionDataLength", "BufferSet"]),
|
|
3399
|
+
#
|
|
3400
|
+
'WheaHwErrorReportAbandonDeviceDriver': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ErrorHandle"]),
|
|
3401
|
+
#
|
|
3402
|
+
'WheaHwErrorReportSubmitDeviceDriver': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ErrorHandle"]),
|
|
3403
|
+
#
|
|
3404
|
+
'WheaHwErrorReportSetSeverityDeviceDriver': SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="WHEA_ERROR_SEVERITY")], SimTypeInt(signed=True, label="Int32"), arg_names=["ErrorHandle", "ErrorSeverity"]),
|
|
3405
|
+
#
|
|
3406
|
+
'WheaHwErrorReportSetSectionNameDeviceDriver': SimTypeFunction([SimTypePointer(SimTypeRef("WHEA_DRIVER_BUFFER_SET", SimStruct), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeChar(label="Byte"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["BufferSet", "NameLength", "Name"]),
|
|
3407
|
+
#
|
|
3408
|
+
'WheaReportHwError': SimTypeFunction([SimTypePointer(SimTypeRef("WHEA_ERROR_PACKET_V2", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ErrorPacket"]),
|
|
3409
|
+
#
|
|
3410
|
+
'WheaAddErrorSource': SimTypeFunction([SimTypePointer(SimTypeRef("WHEA_ERROR_SOURCE_DESCRIPTOR", SimStruct), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ErrorSource", "Context"]),
|
|
3411
|
+
#
|
|
3412
|
+
'WheaInitializeRecordHeader': SimTypeFunction([SimTypePointer(SimTypeRef("WHEA_ERROR_RECORD_HEADER", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Header"]),
|
|
3413
|
+
#
|
|
3414
|
+
'WheaConfigureErrorSource': SimTypeFunction([SimTypeInt(signed=False, label="WHEA_ERROR_SOURCE_TYPE"), SimTypePointer(SimTypeRef("WHEA_ERROR_SOURCE_CONFIGURATION", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["SourceType", "Configuration"]),
|
|
3415
|
+
#
|
|
3416
|
+
'WheaUnconfigureErrorSource': SimTypeFunction([SimTypeInt(signed=False, label="WHEA_ERROR_SOURCE_TYPE")], SimTypeInt(signed=True, label="Int32"), arg_names=["SourceType"]),
|
|
3417
|
+
#
|
|
3418
|
+
'WheaRemoveErrorSource': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypeBottom(label="Void"), arg_names=["ErrorSourceId"]),
|
|
3419
|
+
#
|
|
3420
|
+
'WheaLogInternalEvent': SimTypeFunction([SimTypePointer(SimTypeRef("WHEA_EVENT_LOG_ENTRY", SimStruct), offset=0)], SimTypeBottom(label="Void"), arg_names=["Entry"]),
|
|
3421
|
+
#
|
|
3422
|
+
'WheaErrorSourceGetState': SimTypeFunction([SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=False, label="WHEA_ERROR_SOURCE_STATE"), arg_names=["ErrorSourceId"]),
|
|
3423
|
+
#
|
|
3424
|
+
'WheaIsCriticalState': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
3425
|
+
#
|
|
3426
|
+
'WheaHighIrqlLogSelEventHandlerRegister': SimTypeFunction([SimTypePointer(SimTypeFunction([SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypePointer(SimTypeRef("IPMI_OS_SEL_RECORD", SimStruct), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Context", "OsSelRecord"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Handler", "Context"]),
|
|
3427
|
+
#
|
|
3428
|
+
'WheaHighIrqlLogSelEventHandlerUnregister': SimTypeFunction([], SimTypeBottom(label="Void")),
|
|
3429
|
+
#
|
|
3430
|
+
'WheaRegisterInUsePageOfflineNotification': SimTypeFunction([SimTypePointer(SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Page", "Flags", "Poisoned", "Context"]), offset=0), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Callback", "Context"]),
|
|
3431
|
+
#
|
|
3432
|
+
'WheaUnregisterInUsePageOfflineNotification': SimTypeFunction([SimTypePointer(SimTypeFunction([SimTypeInt(signed=False, label="UInt32"), SimTypeChar(label="Byte"), SimTypeChar(label="Byte"), SimTypePointer(SimTypeBottom(label="Void"), offset=0)], SimTypeChar(label="Byte"), arg_names=["Page", "Flags", "Poisoned", "Context"]), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Callback"]),
|
|
3433
|
+
#
|
|
3434
|
+
'WheaGetNotifyAllOfflinesPolicy': SimTypeFunction([], SimTypeChar(label="Byte")),
|
|
3435
|
+
#
|
|
3436
|
+
'HvlRegisterWheaErrorNotification': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Callback"]),
|
|
3437
|
+
#
|
|
3438
|
+
'HvlUnregisterWheaErrorNotification': SimTypeFunction([SimTypePointer(SimTypeFunction([], SimTypeInt(signed=True, label="Int32")), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Callback"]),
|
|
3439
|
+
#
|
|
3440
|
+
'NtQueryInformationProcess': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="PROCESSINFOCLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ProcessHandle", "ProcessInformationClass", "ProcessInformation", "ProcessInformationLength", "ReturnLength"]),
|
|
3441
|
+
#
|
|
3442
|
+
'NtQueryInformationThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="THREADINFOCLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32"), SimTypePointer(SimTypeInt(signed=False, label="UInt32"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["ThreadHandle", "ThreadInformationClass", "ThreadInformation", "ThreadInformationLength", "ReturnLength"]),
|
|
3443
|
+
#
|
|
3444
|
+
'NtSetInformationThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="THREADINFOCLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ThreadHandle", "ThreadInformationClass", "ThreadInformation", "ThreadInformationLength"]),
|
|
3445
|
+
#
|
|
3446
|
+
'NtWaitForSingleObject': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeChar(label="Byte"), SimTypePointer(SimTypeLongLong(signed=True, label="Int64"), offset=0)], SimTypeInt(signed=True, label="Int32"), arg_names=["Handle", "Alertable", "Timeout"]),
|
|
3447
|
+
#
|
|
3448
|
+
'ZwSetInformationThread': SimTypeFunction([SimTypePointer(SimTypeInt(signed=True, label="Int"), label="IntPtr", offset=0), SimTypeInt(signed=False, label="THREADINFOCLASS"), SimTypePointer(SimTypeBottom(label="Void"), offset=0), SimTypeInt(signed=False, label="UInt32")], SimTypeInt(signed=True, label="Int32"), arg_names=["ThreadHandle", "ThreadInformationClass", "ThreadInformation", "ThreadInformationLength"]),
|
|
3449
|
+
}
|
|
3450
|
+
|
|
3451
|
+
lib.set_prototypes(prototypes)
|