angr 9.2.192__cp311-cp311-macosx_10_12_x86_64.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (1442) hide show
  1. angr/__init__.py +366 -0
  2. angr/__main__.py +182 -0
  3. angr/ail_callable.py +79 -0
  4. angr/ailment/__init__.py +83 -0
  5. angr/ailment/block.py +88 -0
  6. angr/ailment/block_walker.py +856 -0
  7. angr/ailment/constant.py +3 -0
  8. angr/ailment/converter_common.py +11 -0
  9. angr/ailment/converter_pcode.py +648 -0
  10. angr/ailment/converter_vex.py +829 -0
  11. angr/ailment/expression.py +1655 -0
  12. angr/ailment/manager.py +34 -0
  13. angr/ailment/statement.py +973 -0
  14. angr/ailment/tagged_object.py +58 -0
  15. angr/ailment/utils.py +114 -0
  16. angr/analyses/__init__.py +117 -0
  17. angr/analyses/analysis.py +429 -0
  18. angr/analyses/backward_slice.py +686 -0
  19. angr/analyses/binary_optimizer.py +670 -0
  20. angr/analyses/bindiff.py +1512 -0
  21. angr/analyses/boyscout.py +76 -0
  22. angr/analyses/callee_cleanup_finder.py +74 -0
  23. angr/analyses/calling_convention/__init__.py +6 -0
  24. angr/analyses/calling_convention/calling_convention.py +1113 -0
  25. angr/analyses/calling_convention/fact_collector.py +647 -0
  26. angr/analyses/calling_convention/utils.py +60 -0
  27. angr/analyses/cdg.py +189 -0
  28. angr/analyses/cfg/__init__.py +23 -0
  29. angr/analyses/cfg/cfb.py +451 -0
  30. angr/analyses/cfg/cfg.py +74 -0
  31. angr/analyses/cfg/cfg_arch_options.py +95 -0
  32. angr/analyses/cfg/cfg_base.py +2954 -0
  33. angr/analyses/cfg/cfg_emulated.py +3451 -0
  34. angr/analyses/cfg/cfg_fast.py +5431 -0
  35. angr/analyses/cfg/cfg_fast_soot.py +662 -0
  36. angr/analyses/cfg/cfg_job_base.py +203 -0
  37. angr/analyses/cfg/indirect_jump_resolvers/__init__.py +30 -0
  38. angr/analyses/cfg/indirect_jump_resolvers/aarch64_macho_got.py +77 -0
  39. angr/analyses/cfg/indirect_jump_resolvers/amd64_elf_got.py +62 -0
  40. angr/analyses/cfg/indirect_jump_resolvers/amd64_pe_iat.py +51 -0
  41. angr/analyses/cfg/indirect_jump_resolvers/arm_elf_fast.py +159 -0
  42. angr/analyses/cfg/indirect_jump_resolvers/const_resolver.py +339 -0
  43. angr/analyses/cfg/indirect_jump_resolvers/constant_value_manager.py +107 -0
  44. angr/analyses/cfg/indirect_jump_resolvers/default_resolvers.py +82 -0
  45. angr/analyses/cfg/indirect_jump_resolvers/jumptable.py +2490 -0
  46. angr/analyses/cfg/indirect_jump_resolvers/memload_resolver.py +81 -0
  47. angr/analyses/cfg/indirect_jump_resolvers/mips_elf_fast.py +286 -0
  48. angr/analyses/cfg/indirect_jump_resolvers/mips_elf_got.py +148 -0
  49. angr/analyses/cfg/indirect_jump_resolvers/propagator_utils.py +46 -0
  50. angr/analyses/cfg/indirect_jump_resolvers/resolver.py +74 -0
  51. angr/analyses/cfg/indirect_jump_resolvers/syscall_resolver.py +92 -0
  52. angr/analyses/cfg/indirect_jump_resolvers/x86_elf_pic_plt.py +88 -0
  53. angr/analyses/cfg/indirect_jump_resolvers/x86_pe_iat.py +47 -0
  54. angr/analyses/cfg_slice_to_sink/__init__.py +11 -0
  55. angr/analyses/cfg_slice_to_sink/cfg_slice_to_sink.py +117 -0
  56. angr/analyses/cfg_slice_to_sink/graph.py +87 -0
  57. angr/analyses/cfg_slice_to_sink/transitions.py +27 -0
  58. angr/analyses/class_identifier.py +63 -0
  59. angr/analyses/code_tagging.py +123 -0
  60. angr/analyses/codecave.py +77 -0
  61. angr/analyses/complete_calling_conventions.py +475 -0
  62. angr/analyses/congruency_check.py +377 -0
  63. angr/analyses/data_dep/__init__.py +16 -0
  64. angr/analyses/data_dep/data_dependency_analysis.py +595 -0
  65. angr/analyses/data_dep/dep_nodes.py +171 -0
  66. angr/analyses/data_dep/sim_act_location.py +49 -0
  67. angr/analyses/datagraph_meta.py +105 -0
  68. angr/analyses/ddg.py +1670 -0
  69. angr/analyses/decompiler/__init__.py +41 -0
  70. angr/analyses/decompiler/ail_simplifier.py +2246 -0
  71. angr/analyses/decompiler/ailgraph_walker.py +49 -0
  72. angr/analyses/decompiler/block_io_finder.py +302 -0
  73. angr/analyses/decompiler/block_similarity.py +199 -0
  74. angr/analyses/decompiler/block_simplifier.py +397 -0
  75. angr/analyses/decompiler/callsite_maker.py +579 -0
  76. angr/analyses/decompiler/ccall_rewriters/__init__.py +9 -0
  77. angr/analyses/decompiler/ccall_rewriters/amd64_ccalls.py +618 -0
  78. angr/analyses/decompiler/ccall_rewriters/rewriter_base.py +24 -0
  79. angr/analyses/decompiler/ccall_rewriters/x86_ccalls.py +354 -0
  80. angr/analyses/decompiler/clinic.py +3662 -0
  81. angr/analyses/decompiler/condition_processor.py +1323 -0
  82. angr/analyses/decompiler/counters/__init__.py +16 -0
  83. angr/analyses/decompiler/counters/boolean_counter.py +27 -0
  84. angr/analyses/decompiler/counters/call_counter.py +77 -0
  85. angr/analyses/decompiler/counters/expression_counters.py +77 -0
  86. angr/analyses/decompiler/counters/seq_cf_structure_counter.py +63 -0
  87. angr/analyses/decompiler/decompilation_cache.py +54 -0
  88. angr/analyses/decompiler/decompilation_options.py +317 -0
  89. angr/analyses/decompiler/decompiler.py +796 -0
  90. angr/analyses/decompiler/dephication/__init__.py +6 -0
  91. angr/analyses/decompiler/dephication/dephication_base.py +100 -0
  92. angr/analyses/decompiler/dephication/graph_dephication.py +70 -0
  93. angr/analyses/decompiler/dephication/graph_rewriting.py +112 -0
  94. angr/analyses/decompiler/dephication/graph_vvar_mapping.py +357 -0
  95. angr/analyses/decompiler/dephication/rewriting_engine.py +528 -0
  96. angr/analyses/decompiler/dephication/seqnode_dephication.py +156 -0
  97. angr/analyses/decompiler/dirty_rewriters/__init__.py +7 -0
  98. angr/analyses/decompiler/dirty_rewriters/amd64_dirty.py +74 -0
  99. angr/analyses/decompiler/dirty_rewriters/rewriter_base.py +27 -0
  100. angr/analyses/decompiler/empty_node_remover.py +212 -0
  101. angr/analyses/decompiler/expression_narrower.py +290 -0
  102. angr/analyses/decompiler/goto_manager.py +112 -0
  103. angr/analyses/decompiler/graph_region.py +441 -0
  104. angr/analyses/decompiler/jump_target_collector.py +37 -0
  105. angr/analyses/decompiler/jumptable_entry_condition_rewriter.py +67 -0
  106. angr/analyses/decompiler/label_collector.py +32 -0
  107. angr/analyses/decompiler/node_replacer.py +42 -0
  108. angr/analyses/decompiler/notes/__init__.py +9 -0
  109. angr/analyses/decompiler/notes/decompilation_note.py +48 -0
  110. angr/analyses/decompiler/notes/deobfuscated_strings.py +56 -0
  111. angr/analyses/decompiler/optimization_passes/__init__.py +164 -0
  112. angr/analyses/decompiler/optimization_passes/base_ptr_save_simplifier.py +157 -0
  113. angr/analyses/decompiler/optimization_passes/call_stmt_rewriter.py +46 -0
  114. angr/analyses/decompiler/optimization_passes/code_motion.py +362 -0
  115. angr/analyses/decompiler/optimization_passes/condition_constprop.py +211 -0
  116. angr/analyses/decompiler/optimization_passes/const_derefs.py +127 -0
  117. angr/analyses/decompiler/optimization_passes/const_prop_reverter.py +365 -0
  118. angr/analyses/decompiler/optimization_passes/cross_jump_reverter.py +106 -0
  119. angr/analyses/decompiler/optimization_passes/deadblock_remover.py +82 -0
  120. angr/analyses/decompiler/optimization_passes/determine_load_sizes.py +64 -0
  121. angr/analyses/decompiler/optimization_passes/div_simplifier.py +425 -0
  122. angr/analyses/decompiler/optimization_passes/duplication_reverter/__init__.py +5 -0
  123. angr/analyses/decompiler/optimization_passes/duplication_reverter/ail_merge_graph.py +503 -0
  124. angr/analyses/decompiler/optimization_passes/duplication_reverter/duplication_reverter.py +1221 -0
  125. angr/analyses/decompiler/optimization_passes/duplication_reverter/errors.py +16 -0
  126. angr/analyses/decompiler/optimization_passes/duplication_reverter/similarity.py +126 -0
  127. angr/analyses/decompiler/optimization_passes/duplication_reverter/utils.py +167 -0
  128. angr/analyses/decompiler/optimization_passes/eager_std_string_concatenation.py +236 -0
  129. angr/analyses/decompiler/optimization_passes/eager_std_string_eval.py +186 -0
  130. angr/analyses/decompiler/optimization_passes/engine_base.py +502 -0
  131. angr/analyses/decompiler/optimization_passes/expr_op_swapper.py +138 -0
  132. angr/analyses/decompiler/optimization_passes/flip_boolean_cmp.py +113 -0
  133. angr/analyses/decompiler/optimization_passes/inlined_string_transformation_simplifier.py +618 -0
  134. angr/analyses/decompiler/optimization_passes/inlined_strlen_simplifier.py +274 -0
  135. angr/analyses/decompiler/optimization_passes/ite_expr_converter.py +224 -0
  136. angr/analyses/decompiler/optimization_passes/ite_region_converter.py +337 -0
  137. angr/analyses/decompiler/optimization_passes/lowered_switch_simplifier.py +939 -0
  138. angr/analyses/decompiler/optimization_passes/mod_simplifier.py +99 -0
  139. angr/analyses/decompiler/optimization_passes/optimization_pass.py +710 -0
  140. angr/analyses/decompiler/optimization_passes/peephole_simplifier.py +75 -0
  141. angr/analyses/decompiler/optimization_passes/register_save_area_simplifier.py +263 -0
  142. angr/analyses/decompiler/optimization_passes/register_save_area_simplifier_adv.py +198 -0
  143. angr/analyses/decompiler/optimization_passes/ret_addr_save_simplifier.py +171 -0
  144. angr/analyses/decompiler/optimization_passes/ret_deduplicator.py +222 -0
  145. angr/analyses/decompiler/optimization_passes/return_duplicator_base.py +632 -0
  146. angr/analyses/decompiler/optimization_passes/return_duplicator_high.py +61 -0
  147. angr/analyses/decompiler/optimization_passes/return_duplicator_low.py +166 -0
  148. angr/analyses/decompiler/optimization_passes/stack_canary_simplifier.py +333 -0
  149. angr/analyses/decompiler/optimization_passes/static_vvar_rewriter.py +336 -0
  150. angr/analyses/decompiler/optimization_passes/switch_default_case_duplicator.py +166 -0
  151. angr/analyses/decompiler/optimization_passes/switch_reused_entry_rewriter.py +102 -0
  152. angr/analyses/decompiler/optimization_passes/tag_slicer.py +41 -0
  153. angr/analyses/decompiler/optimization_passes/win_stack_canary_simplifier.py +477 -0
  154. angr/analyses/decompiler/optimization_passes/x86_gcc_getpc_simplifier.py +88 -0
  155. angr/analyses/decompiler/peephole_optimizations/__init__.py +136 -0
  156. angr/analyses/decompiler/peephole_optimizations/a_div_const_add_a_mul_n_div_const.py +42 -0
  157. angr/analyses/decompiler/peephole_optimizations/a_mul_const_div_shr_const.py +38 -0
  158. angr/analyses/decompiler/peephole_optimizations/a_mul_const_sub_a.py +34 -0
  159. angr/analyses/decompiler/peephole_optimizations/a_shl_const_sub_a.py +34 -0
  160. angr/analyses/decompiler/peephole_optimizations/a_sub_a_div.py +25 -0
  161. angr/analyses/decompiler/peephole_optimizations/a_sub_a_shr_const_shr_const.py +37 -0
  162. angr/analyses/decompiler/peephole_optimizations/a_sub_a_sub_n.py +23 -0
  163. angr/analyses/decompiler/peephole_optimizations/arm_cmpf.py +236 -0
  164. angr/analyses/decompiler/peephole_optimizations/base.py +157 -0
  165. angr/analyses/decompiler/peephole_optimizations/basepointeroffset_add_n.py +34 -0
  166. angr/analyses/decompiler/peephole_optimizations/basepointeroffset_and_mask.py +36 -0
  167. angr/analyses/decompiler/peephole_optimizations/bitwise_or_to_logical_or.py +34 -0
  168. angr/analyses/decompiler/peephole_optimizations/bool_expr_xor_1.py +27 -0
  169. angr/analyses/decompiler/peephole_optimizations/bswap.py +142 -0
  170. angr/analyses/decompiler/peephole_optimizations/cas_intrinsics.py +182 -0
  171. angr/analyses/decompiler/peephole_optimizations/cmpord_rewriter.py +71 -0
  172. angr/analyses/decompiler/peephole_optimizations/coalesce_adjacent_shrs.py +39 -0
  173. angr/analyses/decompiler/peephole_optimizations/coalesce_same_cascading_ifs.py +28 -0
  174. angr/analyses/decompiler/peephole_optimizations/constant_derefs.py +44 -0
  175. angr/analyses/decompiler/peephole_optimizations/conv_a_sub0_shr_and.py +69 -0
  176. angr/analyses/decompiler/peephole_optimizations/conv_shl_shr.py +52 -0
  177. angr/analyses/decompiler/peephole_optimizations/eager_eval.py +436 -0
  178. angr/analyses/decompiler/peephole_optimizations/extended_byte_and_mask.py +56 -0
  179. angr/analyses/decompiler/peephole_optimizations/inlined_memcpy.py +78 -0
  180. angr/analyses/decompiler/peephole_optimizations/inlined_memset.py +262 -0
  181. angr/analyses/decompiler/peephole_optimizations/inlined_strcpy.py +217 -0
  182. angr/analyses/decompiler/peephole_optimizations/inlined_strcpy_consolidation.py +106 -0
  183. angr/analyses/decompiler/peephole_optimizations/inlined_wcscpy.py +256 -0
  184. angr/analyses/decompiler/peephole_optimizations/inlined_wcscpy_consolidation.py +296 -0
  185. angr/analyses/decompiler/peephole_optimizations/invert_negated_logical_conjuction_disjunction.py +50 -0
  186. angr/analyses/decompiler/peephole_optimizations/modulo_simplifier.py +89 -0
  187. angr/analyses/decompiler/peephole_optimizations/one_sub_bool.py +33 -0
  188. angr/analyses/decompiler/peephole_optimizations/optimized_div_simplifier.py +356 -0
  189. angr/analyses/decompiler/peephole_optimizations/remove_cascading_conversions.py +45 -0
  190. angr/analyses/decompiler/peephole_optimizations/remove_cxx_destructor_calls.py +32 -0
  191. angr/analyses/decompiler/peephole_optimizations/remove_empty_if_body.py +46 -0
  192. angr/analyses/decompiler/peephole_optimizations/remove_noop_conversions.py +47 -0
  193. angr/analyses/decompiler/peephole_optimizations/remove_redundant_bitmasks.py +125 -0
  194. angr/analyses/decompiler/peephole_optimizations/remove_redundant_conversions.py +273 -0
  195. angr/analyses/decompiler/peephole_optimizations/remove_redundant_derefs.py +21 -0
  196. angr/analyses/decompiler/peephole_optimizations/remove_redundant_ite_branch.py +30 -0
  197. angr/analyses/decompiler/peephole_optimizations/remove_redundant_ite_comparisons.py +54 -0
  198. angr/analyses/decompiler/peephole_optimizations/remove_redundant_nots.py +36 -0
  199. angr/analyses/decompiler/peephole_optimizations/remove_redundant_reinterprets.py +44 -0
  200. angr/analyses/decompiler/peephole_optimizations/remove_redundant_shifts.py +95 -0
  201. angr/analyses/decompiler/peephole_optimizations/remove_redundant_shifts_around_comparators.py +115 -0
  202. angr/analyses/decompiler/peephole_optimizations/rewrite_bit_extractions.py +85 -0
  203. angr/analyses/decompiler/peephole_optimizations/rewrite_conv_mul.py +40 -0
  204. angr/analyses/decompiler/peephole_optimizations/rewrite_cxx_operator_calls.py +90 -0
  205. angr/analyses/decompiler/peephole_optimizations/rewrite_mips_gp_loads.py +49 -0
  206. angr/analyses/decompiler/peephole_optimizations/rol_ror.py +130 -0
  207. angr/analyses/decompiler/peephole_optimizations/sar_to_signed_div.py +143 -0
  208. angr/analyses/decompiler/peephole_optimizations/shl_to_mul.py +25 -0
  209. angr/analyses/decompiler/peephole_optimizations/simplify_pc_relative_loads.py +51 -0
  210. angr/analyses/decompiler/peephole_optimizations/single_bit_cond_to_boolexpr.py +28 -0
  211. angr/analyses/decompiler/peephole_optimizations/single_bit_xor.py +29 -0
  212. angr/analyses/decompiler/peephole_optimizations/tidy_stack_addr.py +131 -0
  213. angr/analyses/decompiler/peephole_optimizations/utils.py +18 -0
  214. angr/analyses/decompiler/presets/__init__.py +22 -0
  215. angr/analyses/decompiler/presets/basic.py +36 -0
  216. angr/analyses/decompiler/presets/fast.py +66 -0
  217. angr/analyses/decompiler/presets/full.py +76 -0
  218. angr/analyses/decompiler/presets/malware.py +70 -0
  219. angr/analyses/decompiler/presets/preset.py +37 -0
  220. angr/analyses/decompiler/redundant_label_remover.py +141 -0
  221. angr/analyses/decompiler/region_identifier.py +1319 -0
  222. angr/analyses/decompiler/region_simplifiers/__init__.py +5 -0
  223. angr/analyses/decompiler/region_simplifiers/cascading_cond_transformer.py +95 -0
  224. angr/analyses/decompiler/region_simplifiers/cascading_ifs.py +82 -0
  225. angr/analyses/decompiler/region_simplifiers/expr_folding.py +838 -0
  226. angr/analyses/decompiler/region_simplifiers/goto.py +178 -0
  227. angr/analyses/decompiler/region_simplifiers/if_.py +135 -0
  228. angr/analyses/decompiler/region_simplifiers/ifelse.py +91 -0
  229. angr/analyses/decompiler/region_simplifiers/loop.py +143 -0
  230. angr/analyses/decompiler/region_simplifiers/node_address_finder.py +24 -0
  231. angr/analyses/decompiler/region_simplifiers/region_simplifier.py +270 -0
  232. angr/analyses/decompiler/region_simplifiers/switch_cluster_simplifier.py +654 -0
  233. angr/analyses/decompiler/region_simplifiers/switch_expr_simplifier.py +87 -0
  234. angr/analyses/decompiler/region_walker.py +24 -0
  235. angr/analyses/decompiler/return_maker.py +72 -0
  236. angr/analyses/decompiler/semantic_naming/__init__.py +37 -0
  237. angr/analyses/decompiler/semantic_naming/array_index_naming.py +196 -0
  238. angr/analyses/decompiler/semantic_naming/boolean_naming.py +264 -0
  239. angr/analyses/decompiler/semantic_naming/call_result_naming.py +220 -0
  240. angr/analyses/decompiler/semantic_naming/naming_base.py +166 -0
  241. angr/analyses/decompiler/semantic_naming/orchestrator.py +107 -0
  242. angr/analyses/decompiler/semantic_naming/pointer_naming.py +334 -0
  243. angr/analyses/decompiler/semantic_naming/region_loop_counter_naming.py +246 -0
  244. angr/analyses/decompiler/semantic_naming/size_naming.py +137 -0
  245. angr/analyses/decompiler/seq_to_blocks.py +20 -0
  246. angr/analyses/decompiler/sequence_walker.py +261 -0
  247. angr/analyses/decompiler/ssailification/__init__.py +4 -0
  248. angr/analyses/decompiler/ssailification/rewriting.py +451 -0
  249. angr/analyses/decompiler/ssailification/rewriting_engine.py +1091 -0
  250. angr/analyses/decompiler/ssailification/rewriting_state.py +61 -0
  251. angr/analyses/decompiler/ssailification/ssailification.py +283 -0
  252. angr/analyses/decompiler/ssailification/traversal.py +127 -0
  253. angr/analyses/decompiler/ssailification/traversal_engine.py +323 -0
  254. angr/analyses/decompiler/ssailification/traversal_state.py +48 -0
  255. angr/analyses/decompiler/stack_item.py +36 -0
  256. angr/analyses/decompiler/structured_codegen/__init__.py +25 -0
  257. angr/analyses/decompiler/structured_codegen/base.py +193 -0
  258. angr/analyses/decompiler/structured_codegen/c.py +4257 -0
  259. angr/analyses/decompiler/structured_codegen/dummy.py +15 -0
  260. angr/analyses/decompiler/structured_codegen/dwarf_import.py +190 -0
  261. angr/analyses/decompiler/structuring/__init__.py +30 -0
  262. angr/analyses/decompiler/structuring/dream.py +1217 -0
  263. angr/analyses/decompiler/structuring/phoenix.py +3636 -0
  264. angr/analyses/decompiler/structuring/recursive_structurer.py +187 -0
  265. angr/analyses/decompiler/structuring/sailr.py +120 -0
  266. angr/analyses/decompiler/structuring/structurer_base.py +1140 -0
  267. angr/analyses/decompiler/structuring/structurer_nodes.py +442 -0
  268. angr/analyses/decompiler/utils.py +1224 -0
  269. angr/analyses/deobfuscator/__init__.py +23 -0
  270. angr/analyses/deobfuscator/api_obf_finder.py +333 -0
  271. angr/analyses/deobfuscator/api_obf_peephole_optimizer.py +80 -0
  272. angr/analyses/deobfuscator/api_obf_type2_finder.py +166 -0
  273. angr/analyses/deobfuscator/data_transformation_embedder.py +633 -0
  274. angr/analyses/deobfuscator/hash_lookup_api_deobfuscator.py +156 -0
  275. angr/analyses/deobfuscator/irsb_reg_collector.py +54 -0
  276. angr/analyses/deobfuscator/scope_ops_analyzer.py +68 -0
  277. angr/analyses/deobfuscator/string_obf_finder.py +983 -0
  278. angr/analyses/deobfuscator/string_obf_opt_passes.py +136 -0
  279. angr/analyses/deobfuscator/string_obf_peephole_optimizer.py +47 -0
  280. angr/analyses/disassembly.py +1351 -0
  281. angr/analyses/disassembly_utils.py +101 -0
  282. angr/analyses/dominance_frontier.py +57 -0
  283. angr/analyses/fcp/__init__.py +4 -0
  284. angr/analyses/fcp/fcp.py +427 -0
  285. angr/analyses/find_objects_static.py +205 -0
  286. angr/analyses/flirt/__init__.py +47 -0
  287. angr/analyses/flirt/consts.py +160 -0
  288. angr/analyses/flirt/flirt.py +249 -0
  289. angr/analyses/flirt/flirt_function.py +20 -0
  290. angr/analyses/flirt/flirt_matcher.py +352 -0
  291. angr/analyses/flirt/flirt_module.py +32 -0
  292. angr/analyses/flirt/flirt_node.py +23 -0
  293. angr/analyses/flirt/flirt_sig.py +359 -0
  294. angr/analyses/flirt/flirt_utils.py +31 -0
  295. angr/analyses/forward_analysis/__init__.py +12 -0
  296. angr/analyses/forward_analysis/forward_analysis.py +619 -0
  297. angr/analyses/forward_analysis/job_info.py +64 -0
  298. angr/analyses/forward_analysis/visitors/__init__.py +14 -0
  299. angr/analyses/forward_analysis/visitors/call_graph.py +29 -0
  300. angr/analyses/forward_analysis/visitors/function_graph.py +86 -0
  301. angr/analyses/forward_analysis/visitors/graph.py +242 -0
  302. angr/analyses/forward_analysis/visitors/loop.py +29 -0
  303. angr/analyses/forward_analysis/visitors/single_node_graph.py +38 -0
  304. angr/analyses/identifier/__init__.py +5 -0
  305. angr/analyses/identifier/custom_callable.py +137 -0
  306. angr/analyses/identifier/errors.py +10 -0
  307. angr/analyses/identifier/func.py +60 -0
  308. angr/analyses/identifier/functions/__init__.py +37 -0
  309. angr/analyses/identifier/functions/atoi.py +73 -0
  310. angr/analyses/identifier/functions/based_atoi.py +125 -0
  311. angr/analyses/identifier/functions/fdprintf.py +123 -0
  312. angr/analyses/identifier/functions/free.py +64 -0
  313. angr/analyses/identifier/functions/int2str.py +287 -0
  314. angr/analyses/identifier/functions/malloc.py +111 -0
  315. angr/analyses/identifier/functions/memcmp.py +67 -0
  316. angr/analyses/identifier/functions/memcpy.py +89 -0
  317. angr/analyses/identifier/functions/memset.py +43 -0
  318. angr/analyses/identifier/functions/printf.py +123 -0
  319. angr/analyses/identifier/functions/recv_until.py +312 -0
  320. angr/analyses/identifier/functions/skip_calloc.py +73 -0
  321. angr/analyses/identifier/functions/skip_realloc.py +97 -0
  322. angr/analyses/identifier/functions/skip_recv_n.py +105 -0
  323. angr/analyses/identifier/functions/snprintf.py +112 -0
  324. angr/analyses/identifier/functions/sprintf.py +116 -0
  325. angr/analyses/identifier/functions/strcasecmp.py +33 -0
  326. angr/analyses/identifier/functions/strcmp.py +113 -0
  327. angr/analyses/identifier/functions/strcpy.py +43 -0
  328. angr/analyses/identifier/functions/strlen.py +27 -0
  329. angr/analyses/identifier/functions/strncmp.py +104 -0
  330. angr/analyses/identifier/functions/strncpy.py +65 -0
  331. angr/analyses/identifier/functions/strtol.py +89 -0
  332. angr/analyses/identifier/identify.py +825 -0
  333. angr/analyses/identifier/runner.py +360 -0
  334. angr/analyses/init_finder.py +289 -0
  335. angr/analyses/loop_analysis/__init__.py +4 -0
  336. angr/analyses/loop_analysis/loop_analysis.py +464 -0
  337. angr/analyses/loop_analysis.py +349 -0
  338. angr/analyses/loop_unroller/__init__.py +4 -0
  339. angr/analyses/loop_unroller/loop_unroller.py +222 -0
  340. angr/analyses/loopfinder.py +171 -0
  341. angr/analyses/outliner/__init__.py +7 -0
  342. angr/analyses/outliner/outliner.py +402 -0
  343. angr/analyses/patchfinder.py +137 -0
  344. angr/analyses/pathfinder.py +282 -0
  345. angr/analyses/propagator/__init__.py +5 -0
  346. angr/analyses/propagator/engine_base.py +62 -0
  347. angr/analyses/propagator/engine_vex.py +297 -0
  348. angr/analyses/propagator/propagator.py +361 -0
  349. angr/analyses/propagator/top_checker_mixin.py +218 -0
  350. angr/analyses/propagator/values.py +117 -0
  351. angr/analyses/propagator/vex_vars.py +68 -0
  352. angr/analyses/proximity_graph.py +444 -0
  353. angr/analyses/purity/__init__.py +15 -0
  354. angr/analyses/purity/analysis.py +78 -0
  355. angr/analyses/purity/engine.py +593 -0
  356. angr/analyses/reaching_definitions/__init__.py +67 -0
  357. angr/analyses/reaching_definitions/call_trace.py +73 -0
  358. angr/analyses/reaching_definitions/dep_graph.py +433 -0
  359. angr/analyses/reaching_definitions/engine_ail.py +1128 -0
  360. angr/analyses/reaching_definitions/engine_vex.py +1128 -0
  361. angr/analyses/reaching_definitions/external_codeloc.py +0 -0
  362. angr/analyses/reaching_definitions/function_handler.py +639 -0
  363. angr/analyses/reaching_definitions/function_handler_library/__init__.py +12 -0
  364. angr/analyses/reaching_definitions/function_handler_library/stdio.py +269 -0
  365. angr/analyses/reaching_definitions/function_handler_library/stdlib.py +195 -0
  366. angr/analyses/reaching_definitions/function_handler_library/string.py +158 -0
  367. angr/analyses/reaching_definitions/function_handler_library/unistd.py +51 -0
  368. angr/analyses/reaching_definitions/heap_allocator.py +70 -0
  369. angr/analyses/reaching_definitions/rd_initializer.py +237 -0
  370. angr/analyses/reaching_definitions/rd_state.py +579 -0
  371. angr/analyses/reaching_definitions/reaching_definitions.py +581 -0
  372. angr/analyses/reaching_definitions/subject.py +65 -0
  373. angr/analyses/reassembler.py +2900 -0
  374. angr/analyses/s_liveness.py +254 -0
  375. angr/analyses/s_propagator.py +575 -0
  376. angr/analyses/s_reaching_definitions/__init__.py +12 -0
  377. angr/analyses/s_reaching_definitions/s_rda_model.py +145 -0
  378. angr/analyses/s_reaching_definitions/s_rda_view.py +344 -0
  379. angr/analyses/s_reaching_definitions/s_reaching_definitions.py +230 -0
  380. angr/analyses/smc.py +160 -0
  381. angr/analyses/soot_class_hierarchy.py +273 -0
  382. angr/analyses/stack_pointer_tracker.py +954 -0
  383. angr/analyses/static_hooker.py +53 -0
  384. angr/analyses/typehoon/__init__.py +5 -0
  385. angr/analyses/typehoon/dfa.py +118 -0
  386. angr/analyses/typehoon/lifter.py +133 -0
  387. angr/analyses/typehoon/simple_solver.py +2009 -0
  388. angr/analyses/typehoon/translator.py +283 -0
  389. angr/analyses/typehoon/typeconsts.py +439 -0
  390. angr/analyses/typehoon/typehoon.py +338 -0
  391. angr/analyses/typehoon/typevars.py +633 -0
  392. angr/analyses/typehoon/variance.py +11 -0
  393. angr/analyses/unpacker/__init__.py +6 -0
  394. angr/analyses/unpacker/obfuscation_detector.py +103 -0
  395. angr/analyses/unpacker/packing_detector.py +138 -0
  396. angr/analyses/variable_recovery/__init__.py +9 -0
  397. angr/analyses/variable_recovery/annotations.py +58 -0
  398. angr/analyses/variable_recovery/engine_ail.py +978 -0
  399. angr/analyses/variable_recovery/engine_base.py +1256 -0
  400. angr/analyses/variable_recovery/engine_vex.py +594 -0
  401. angr/analyses/variable_recovery/irsb_scanner.py +143 -0
  402. angr/analyses/variable_recovery/variable_recovery.py +574 -0
  403. angr/analyses/variable_recovery/variable_recovery_base.py +489 -0
  404. angr/analyses/variable_recovery/variable_recovery_fast.py +669 -0
  405. angr/analyses/veritesting.py +626 -0
  406. angr/analyses/vfg.py +1898 -0
  407. angr/analyses/vsa_ddg.py +420 -0
  408. angr/analyses/vtable.py +92 -0
  409. angr/analyses/xrefs.py +286 -0
  410. angr/angrdb/__init__.py +14 -0
  411. angr/angrdb/db.py +215 -0
  412. angr/angrdb/models.py +184 -0
  413. angr/angrdb/serializers/__init__.py +10 -0
  414. angr/angrdb/serializers/cfg_model.py +41 -0
  415. angr/angrdb/serializers/comments.py +60 -0
  416. angr/angrdb/serializers/funcs.py +61 -0
  417. angr/angrdb/serializers/kb.py +111 -0
  418. angr/angrdb/serializers/labels.py +59 -0
  419. angr/angrdb/serializers/loader.py +165 -0
  420. angr/angrdb/serializers/structured_code.py +167 -0
  421. angr/angrdb/serializers/variables.py +58 -0
  422. angr/angrdb/serializers/xrefs.py +48 -0
  423. angr/annocfg.py +317 -0
  424. angr/blade.py +431 -0
  425. angr/block.py +509 -0
  426. angr/callable.py +176 -0
  427. angr/calling_conventions.py +2613 -0
  428. angr/code_location.py +249 -0
  429. angr/codenode.py +145 -0
  430. angr/concretization_strategies/__init__.py +32 -0
  431. angr/concretization_strategies/any.py +17 -0
  432. angr/concretization_strategies/any_named.py +35 -0
  433. angr/concretization_strategies/base.py +81 -0
  434. angr/concretization_strategies/controlled_data.py +58 -0
  435. angr/concretization_strategies/eval.py +19 -0
  436. angr/concretization_strategies/logging.py +35 -0
  437. angr/concretization_strategies/max.py +25 -0
  438. angr/concretization_strategies/nonzero.py +16 -0
  439. angr/concretization_strategies/nonzero_range.py +22 -0
  440. angr/concretization_strategies/norepeats.py +37 -0
  441. angr/concretization_strategies/norepeats_range.py +37 -0
  442. angr/concretization_strategies/range.py +19 -0
  443. angr/concretization_strategies/signed_add.py +31 -0
  444. angr/concretization_strategies/single.py +15 -0
  445. angr/concretization_strategies/solutions.py +20 -0
  446. angr/concretization_strategies/unlimited_range.py +17 -0
  447. angr/distributed/__init__.py +9 -0
  448. angr/distributed/server.py +197 -0
  449. angr/distributed/worker.py +185 -0
  450. angr/emulator.py +144 -0
  451. angr/engines/__init__.py +69 -0
  452. angr/engines/ail/__init__.py +16 -0
  453. angr/engines/ail/callstack.py +58 -0
  454. angr/engines/ail/engine_light.py +903 -0
  455. angr/engines/ail/engine_successors.py +24 -0
  456. angr/engines/ail/setup.py +57 -0
  457. angr/engines/concrete.py +66 -0
  458. angr/engines/engine.py +29 -0
  459. angr/engines/failure.py +27 -0
  460. angr/engines/hook.py +93 -0
  461. angr/engines/icicle.py +294 -0
  462. angr/engines/light/__init__.py +23 -0
  463. angr/engines/light/data.py +681 -0
  464. angr/engines/light/engine.py +1297 -0
  465. angr/engines/pcode/__init__.py +9 -0
  466. angr/engines/pcode/behavior.py +998 -0
  467. angr/engines/pcode/cc.py +148 -0
  468. angr/engines/pcode/emulate.py +440 -0
  469. angr/engines/pcode/engine.py +242 -0
  470. angr/engines/pcode/lifter.py +1428 -0
  471. angr/engines/procedure.py +70 -0
  472. angr/engines/soot/__init__.py +5 -0
  473. angr/engines/soot/engine.py +410 -0
  474. angr/engines/soot/exceptions.py +17 -0
  475. angr/engines/soot/expressions/__init__.py +87 -0
  476. angr/engines/soot/expressions/arrayref.py +22 -0
  477. angr/engines/soot/expressions/base.py +21 -0
  478. angr/engines/soot/expressions/binop.py +28 -0
  479. angr/engines/soot/expressions/cast.py +22 -0
  480. angr/engines/soot/expressions/condition.py +35 -0
  481. angr/engines/soot/expressions/constants.py +47 -0
  482. angr/engines/soot/expressions/instanceOf.py +15 -0
  483. angr/engines/soot/expressions/instancefieldref.py +8 -0
  484. angr/engines/soot/expressions/invoke.py +114 -0
  485. angr/engines/soot/expressions/length.py +8 -0
  486. angr/engines/soot/expressions/local.py +8 -0
  487. angr/engines/soot/expressions/new.py +16 -0
  488. angr/engines/soot/expressions/newArray.py +54 -0
  489. angr/engines/soot/expressions/newMultiArray.py +86 -0
  490. angr/engines/soot/expressions/paramref.py +8 -0
  491. angr/engines/soot/expressions/phi.py +30 -0
  492. angr/engines/soot/expressions/staticfieldref.py +8 -0
  493. angr/engines/soot/expressions/thisref.py +7 -0
  494. angr/engines/soot/expressions/unsupported.py +7 -0
  495. angr/engines/soot/field_dispatcher.py +46 -0
  496. angr/engines/soot/method_dispatcher.py +46 -0
  497. angr/engines/soot/statements/__init__.py +44 -0
  498. angr/engines/soot/statements/assign.py +30 -0
  499. angr/engines/soot/statements/base.py +79 -0
  500. angr/engines/soot/statements/goto.py +14 -0
  501. angr/engines/soot/statements/identity.py +15 -0
  502. angr/engines/soot/statements/if_.py +19 -0
  503. angr/engines/soot/statements/invoke.py +12 -0
  504. angr/engines/soot/statements/return_.py +20 -0
  505. angr/engines/soot/statements/switch.py +41 -0
  506. angr/engines/soot/statements/throw.py +15 -0
  507. angr/engines/soot/values/__init__.py +38 -0
  508. angr/engines/soot/values/arrayref.py +122 -0
  509. angr/engines/soot/values/base.py +7 -0
  510. angr/engines/soot/values/constants.py +18 -0
  511. angr/engines/soot/values/instancefieldref.py +44 -0
  512. angr/engines/soot/values/local.py +18 -0
  513. angr/engines/soot/values/paramref.py +18 -0
  514. angr/engines/soot/values/staticfieldref.py +38 -0
  515. angr/engines/soot/values/strref.py +38 -0
  516. angr/engines/soot/values/thisref.py +149 -0
  517. angr/engines/successors.py +608 -0
  518. angr/engines/syscall.py +51 -0
  519. angr/engines/unicorn.py +490 -0
  520. angr/engines/vex/__init__.py +20 -0
  521. angr/engines/vex/claripy/__init__.py +5 -0
  522. angr/engines/vex/claripy/ccall.py +2097 -0
  523. angr/engines/vex/claripy/datalayer.py +141 -0
  524. angr/engines/vex/claripy/irop.py +1276 -0
  525. angr/engines/vex/heavy/__init__.py +16 -0
  526. angr/engines/vex/heavy/actions.py +231 -0
  527. angr/engines/vex/heavy/concretizers.py +403 -0
  528. angr/engines/vex/heavy/dirty.py +466 -0
  529. angr/engines/vex/heavy/heavy.py +370 -0
  530. angr/engines/vex/heavy/inspect.py +52 -0
  531. angr/engines/vex/heavy/resilience.py +85 -0
  532. angr/engines/vex/heavy/super_fastpath.py +34 -0
  533. angr/engines/vex/lifter.py +420 -0
  534. angr/engines/vex/light/__init__.py +11 -0
  535. angr/engines/vex/light/light.py +551 -0
  536. angr/engines/vex/light/resilience.py +74 -0
  537. angr/engines/vex/light/slicing.py +52 -0
  538. angr/errors.py +611 -0
  539. angr/exploration_techniques/__init__.py +53 -0
  540. angr/exploration_techniques/base.py +126 -0
  541. angr/exploration_techniques/bucketizer.py +94 -0
  542. angr/exploration_techniques/common.py +56 -0
  543. angr/exploration_techniques/dfs.py +37 -0
  544. angr/exploration_techniques/director.py +520 -0
  545. angr/exploration_techniques/driller_core.py +100 -0
  546. angr/exploration_techniques/explorer.py +152 -0
  547. angr/exploration_techniques/lengthlimiter.py +22 -0
  548. angr/exploration_techniques/local_loop_seer.py +65 -0
  549. angr/exploration_techniques/loop_seer.py +236 -0
  550. angr/exploration_techniques/manual_mergepoint.py +82 -0
  551. angr/exploration_techniques/memory_watcher.py +43 -0
  552. angr/exploration_techniques/oppologist.py +92 -0
  553. angr/exploration_techniques/slicecutor.py +118 -0
  554. angr/exploration_techniques/spiller.py +280 -0
  555. angr/exploration_techniques/spiller_db.py +27 -0
  556. angr/exploration_techniques/stochastic.py +56 -0
  557. angr/exploration_techniques/stub_stasher.py +19 -0
  558. angr/exploration_techniques/suggestions.py +159 -0
  559. angr/exploration_techniques/tech_builder.py +49 -0
  560. angr/exploration_techniques/threading.py +69 -0
  561. angr/exploration_techniques/timeout.py +34 -0
  562. angr/exploration_techniques/tracer.py +1098 -0
  563. angr/exploration_techniques/unique.py +106 -0
  564. angr/exploration_techniques/veritesting.py +37 -0
  565. angr/factory.py +413 -0
  566. angr/flirt/__init__.py +124 -0
  567. angr/flirt/build_sig.py +305 -0
  568. angr/graph_utils.py +0 -0
  569. angr/keyed_region.py +525 -0
  570. angr/knowledge_base.py +146 -0
  571. angr/knowledge_plugins/__init__.py +43 -0
  572. angr/knowledge_plugins/callsite_prototypes.py +95 -0
  573. angr/knowledge_plugins/cfg/__init__.py +18 -0
  574. angr/knowledge_plugins/cfg/cfg_manager.py +95 -0
  575. angr/knowledge_plugins/cfg/cfg_model.py +1043 -0
  576. angr/knowledge_plugins/cfg/cfg_node.py +536 -0
  577. angr/knowledge_plugins/cfg/indirect_jump.py +131 -0
  578. angr/knowledge_plugins/cfg/memory_data.py +156 -0
  579. angr/knowledge_plugins/comments.py +16 -0
  580. angr/knowledge_plugins/custom_strings.py +38 -0
  581. angr/knowledge_plugins/data.py +22 -0
  582. angr/knowledge_plugins/debug_variables.py +216 -0
  583. angr/knowledge_plugins/functions/__init__.py +9 -0
  584. angr/knowledge_plugins/functions/function.py +1830 -0
  585. angr/knowledge_plugins/functions/function_manager.py +621 -0
  586. angr/knowledge_plugins/functions/function_parser.py +360 -0
  587. angr/knowledge_plugins/functions/soot_function.py +128 -0
  588. angr/knowledge_plugins/indirect_jumps.py +35 -0
  589. angr/knowledge_plugins/key_definitions/__init__.py +17 -0
  590. angr/knowledge_plugins/key_definitions/atoms.py +374 -0
  591. angr/knowledge_plugins/key_definitions/constants.py +29 -0
  592. angr/knowledge_plugins/key_definitions/definition.py +216 -0
  593. angr/knowledge_plugins/key_definitions/environment.py +96 -0
  594. angr/knowledge_plugins/key_definitions/heap_address.py +33 -0
  595. angr/knowledge_plugins/key_definitions/key_definition_manager.py +82 -0
  596. angr/knowledge_plugins/key_definitions/live_definitions.py +1020 -0
  597. angr/knowledge_plugins/key_definitions/liveness.py +165 -0
  598. angr/knowledge_plugins/key_definitions/rd_model.py +171 -0
  599. angr/knowledge_plugins/key_definitions/tag.py +78 -0
  600. angr/knowledge_plugins/key_definitions/undefined.py +70 -0
  601. angr/knowledge_plugins/key_definitions/unknown_size.py +86 -0
  602. angr/knowledge_plugins/key_definitions/uses.py +178 -0
  603. angr/knowledge_plugins/labels.py +110 -0
  604. angr/knowledge_plugins/obfuscations.py +40 -0
  605. angr/knowledge_plugins/patches.py +126 -0
  606. angr/knowledge_plugins/plugin.py +24 -0
  607. angr/knowledge_plugins/propagations/__init__.py +10 -0
  608. angr/knowledge_plugins/propagations/prop_value.py +191 -0
  609. angr/knowledge_plugins/propagations/propagation_manager.py +60 -0
  610. angr/knowledge_plugins/propagations/propagation_model.py +80 -0
  611. angr/knowledge_plugins/propagations/states.py +552 -0
  612. angr/knowledge_plugins/structured_code.py +63 -0
  613. angr/knowledge_plugins/types.py +95 -0
  614. angr/knowledge_plugins/variables/__init__.py +8 -0
  615. angr/knowledge_plugins/variables/variable_access.py +113 -0
  616. angr/knowledge_plugins/variables/variable_manager.py +1375 -0
  617. angr/knowledge_plugins/xrefs/__init__.py +12 -0
  618. angr/knowledge_plugins/xrefs/xref.py +150 -0
  619. angr/knowledge_plugins/xrefs/xref_manager.py +127 -0
  620. angr/knowledge_plugins/xrefs/xref_types.py +16 -0
  621. angr/misc/__init__.py +19 -0
  622. angr/misc/ansi.py +47 -0
  623. angr/misc/autoimport.py +90 -0
  624. angr/misc/bug_report.py +126 -0
  625. angr/misc/hookset.py +106 -0
  626. angr/misc/loggers.py +130 -0
  627. angr/misc/picklable_lock.py +46 -0
  628. angr/misc/plugins.py +289 -0
  629. angr/misc/telemetry.py +54 -0
  630. angr/misc/testing.py +24 -0
  631. angr/misc/ux.py +31 -0
  632. angr/procedures/__init__.py +12 -0
  633. angr/procedures/advapi32/__init__.py +0 -0
  634. angr/procedures/cgc/__init__.py +3 -0
  635. angr/procedures/cgc/_terminate.py +11 -0
  636. angr/procedures/cgc/allocate.py +75 -0
  637. angr/procedures/cgc/deallocate.py +67 -0
  638. angr/procedures/cgc/fdwait.py +65 -0
  639. angr/procedures/cgc/random.py +67 -0
  640. angr/procedures/cgc/receive.py +93 -0
  641. angr/procedures/cgc/transmit.py +65 -0
  642. angr/procedures/definitions/__init__.py +1043 -0
  643. angr/procedures/definitions/cgc.py +23 -0
  644. angr/procedures/definitions/common/glibc.json +3516 -0
  645. angr/procedures/definitions/gnulib.py +41 -0
  646. angr/procedures/definitions/libstdcpp.py +25 -0
  647. angr/procedures/definitions/linux_kernel.py +8382 -0
  648. angr/procedures/definitions/linux_loader.py +7 -0
  649. angr/procedures/definitions/macho_libsystem.py +18 -0
  650. angr/procedures/definitions/msvcr.py +25 -0
  651. angr/procedures/definitions/parse_glibc.py +77 -0
  652. angr/procedures/definitions/parse_syscalls_from_local_system.py +54 -0
  653. angr/procedures/definitions/parse_win32json.py +2540 -0
  654. angr/procedures/definitions/types_stl.py +22 -0
  655. angr/procedures/definitions/wdk/api-ms-win-dx-d3dkmt-l1-1-4.json +24 -0
  656. angr/procedures/definitions/wdk/api-ms-win-dx-d3dkmt-l1-1-6.json +18 -0
  657. angr/procedures/definitions/wdk/clfs.json +189 -0
  658. angr/procedures/definitions/wdk/fltmgr.json +813 -0
  659. angr/procedures/definitions/wdk/fwpkclnt.json +24 -0
  660. angr/procedures/definitions/wdk/fwpuclnt.json +453 -0
  661. angr/procedures/definitions/wdk/gdi32.json +528 -0
  662. angr/procedures/definitions/wdk/hal.json +96 -0
  663. angr/procedures/definitions/wdk/ksecdd.json +72 -0
  664. angr/procedures/definitions/wdk/ndis.json +336 -0
  665. angr/procedures/definitions/wdk/ntoskrnl.json +5158 -0
  666. angr/procedures/definitions/wdk/offreg.json +87 -0
  667. angr/procedures/definitions/wdk/pshed.json +33 -0
  668. angr/procedures/definitions/wdk/secur32.json +39 -0
  669. angr/procedures/definitions/wdk/vhfum.json +30 -0
  670. angr/procedures/definitions/win32/_types_win32.json +34480 -0
  671. angr/procedures/definitions/win32/aclui.json +24 -0
  672. angr/procedures/definitions/win32/activeds.json +81 -0
  673. angr/procedures/definitions/win32/advapi32.json +2505 -0
  674. angr/procedures/definitions/win32/advpack.json +165 -0
  675. angr/procedures/definitions/win32/amsi.json +36 -0
  676. angr/procedures/definitions/win32/api-ms-win-appmodel-runtime-l1-1-1.json +45 -0
  677. angr/procedures/definitions/win32/api-ms-win-appmodel-runtime-l1-1-3.json +30 -0
  678. angr/procedures/definitions/win32/api-ms-win-appmodel-runtime-l1-1-6.json +18 -0
  679. angr/procedures/definitions/win32/api-ms-win-core-apiquery-l2-1-0.json +18 -0
  680. angr/procedures/definitions/win32/api-ms-win-core-backgroundtask-l1-1-0.json +18 -0
  681. angr/procedures/definitions/win32/api-ms-win-core-comm-l1-1-1.json +18 -0
  682. angr/procedures/definitions/win32/api-ms-win-core-comm-l1-1-2.json +18 -0
  683. angr/procedures/definitions/win32/api-ms-win-core-enclave-l1-1-1.json +24 -0
  684. angr/procedures/definitions/win32/api-ms-win-core-errorhandling-l1-1-3.json +18 -0
  685. angr/procedures/definitions/win32/api-ms-win-core-featurestaging-l1-1-0.json +30 -0
  686. angr/procedures/definitions/win32/api-ms-win-core-featurestaging-l1-1-1.json +18 -0
  687. angr/procedures/definitions/win32/api-ms-win-core-file-fromapp-l1-1-0.json +48 -0
  688. angr/procedures/definitions/win32/api-ms-win-core-handle-l1-1-0.json +18 -0
  689. angr/procedures/definitions/win32/api-ms-win-core-ioring-l1-1-0.json +51 -0
  690. angr/procedures/definitions/win32/api-ms-win-core-marshal-l1-1-0.json +27 -0
  691. angr/procedures/definitions/win32/api-ms-win-core-memory-l1-1-3.json +27 -0
  692. angr/procedures/definitions/win32/api-ms-win-core-memory-l1-1-4.json +18 -0
  693. angr/procedures/definitions/win32/api-ms-win-core-memory-l1-1-5.json +24 -0
  694. angr/procedures/definitions/win32/api-ms-win-core-memory-l1-1-6.json +27 -0
  695. angr/procedures/definitions/win32/api-ms-win-core-memory-l1-1-7.json +21 -0
  696. angr/procedures/definitions/win32/api-ms-win-core-memory-l1-1-8.json +24 -0
  697. angr/procedures/definitions/win32/api-ms-win-core-path-l1-1-0.json +81 -0
  698. angr/procedures/definitions/win32/api-ms-win-core-psm-appnotify-l1-1-0.json +21 -0
  699. angr/procedures/definitions/win32/api-ms-win-core-psm-appnotify-l1-1-1.json +21 -0
  700. angr/procedures/definitions/win32/api-ms-win-core-realtime-l1-1-1.json +24 -0
  701. angr/procedures/definitions/win32/api-ms-win-core-realtime-l1-1-2.json +24 -0
  702. angr/procedures/definitions/win32/api-ms-win-core-slapi-l1-1-0.json +18 -0
  703. angr/procedures/definitions/win32/api-ms-win-core-state-helpers-l1-1-0.json +18 -0
  704. angr/procedures/definitions/win32/api-ms-win-core-synch-l1-2-0.json +24 -0
  705. angr/procedures/definitions/win32/api-ms-win-core-sysinfo-l1-2-0.json +18 -0
  706. angr/procedures/definitions/win32/api-ms-win-core-sysinfo-l1-2-3.json +21 -0
  707. angr/procedures/definitions/win32/api-ms-win-core-sysinfo-l1-2-4.json +21 -0
  708. angr/procedures/definitions/win32/api-ms-win-core-sysinfo-l1-2-6.json +18 -0
  709. angr/procedures/definitions/win32/api-ms-win-core-util-l1-1-1.json +21 -0
  710. angr/procedures/definitions/win32/api-ms-win-core-wow64-l1-1-1.json +24 -0
  711. angr/procedures/definitions/win32/api-ms-win-devices-query-l1-1-0.json +42 -0
  712. angr/procedures/definitions/win32/api-ms-win-devices-query-l1-1-1.json +30 -0
  713. angr/procedures/definitions/win32/api-ms-win-dx-d3dkmt-l1-1-0.json +18 -0
  714. angr/procedures/definitions/win32/api-ms-win-gaming-deviceinformation-l1-1-0.json +18 -0
  715. angr/procedures/definitions/win32/api-ms-win-gaming-expandedresources-l1-1-0.json +24 -0
  716. angr/procedures/definitions/win32/api-ms-win-gaming-tcui-l1-1-0.json +36 -0
  717. angr/procedures/definitions/win32/api-ms-win-gaming-tcui-l1-1-1.json +21 -0
  718. angr/procedures/definitions/win32/api-ms-win-gaming-tcui-l1-1-2.json +36 -0
  719. angr/procedures/definitions/win32/api-ms-win-gaming-tcui-l1-1-3.json +21 -0
  720. angr/procedures/definitions/win32/api-ms-win-gaming-tcui-l1-1-4.json +39 -0
  721. angr/procedures/definitions/win32/api-ms-win-mm-misc-l1-1-1.json +18 -0
  722. angr/procedures/definitions/win32/api-ms-win-net-isolation-l1-1-0.json +39 -0
  723. angr/procedures/definitions/win32/api-ms-win-security-base-l1-2-2.json +18 -0
  724. angr/procedures/definitions/win32/api-ms-win-security-isolatedcontainer-l1-1-0.json +18 -0
  725. angr/procedures/definitions/win32/api-ms-win-security-isolatedcontainer-l1-1-1.json +18 -0
  726. angr/procedures/definitions/win32/api-ms-win-service-core-l1-1-3.json +18 -0
  727. angr/procedures/definitions/win32/api-ms-win-service-core-l1-1-4.json +18 -0
  728. angr/procedures/definitions/win32/api-ms-win-service-core-l1-1-5.json +21 -0
  729. angr/procedures/definitions/win32/api-ms-win-shcore-scaling-l1-1-0.json +24 -0
  730. angr/procedures/definitions/win32/api-ms-win-shcore-scaling-l1-1-1.json +33 -0
  731. angr/procedures/definitions/win32/api-ms-win-shcore-scaling-l1-1-2.json +18 -0
  732. angr/procedures/definitions/win32/api-ms-win-wsl-api-l1-1-0.json +36 -0
  733. angr/procedures/definitions/win32/apphelp.json +18 -0
  734. angr/procedures/definitions/win32/authz.json +114 -0
  735. angr/procedures/definitions/win32/avicap32.json +27 -0
  736. angr/procedures/definitions/win32/avifil32.json +195 -0
  737. angr/procedures/definitions/win32/avrt.json +57 -0
  738. angr/procedures/definitions/win32/bcp47mrm.json +21 -0
  739. angr/procedures/definitions/win32/bcrypt.json +174 -0
  740. angr/procedures/definitions/win32/bcryptprimitives.json +21 -0
  741. angr/procedures/definitions/win32/bluetoothapis.json +138 -0
  742. angr/procedures/definitions/win32/bthprops_cpl.json +33 -0
  743. angr/procedures/definitions/win32/cabinet.json +81 -0
  744. angr/procedures/definitions/win32/certadm.json +69 -0
  745. angr/procedures/definitions/win32/certpoleng.json +39 -0
  746. angr/procedures/definitions/win32/cfgmgr32.json +732 -0
  747. angr/procedures/definitions/win32/chakra.json +270 -0
  748. angr/procedures/definitions/win32/cldapi.json +123 -0
  749. angr/procedures/definitions/win32/clfsw32.json +192 -0
  750. angr/procedures/definitions/win32/clusapi.json +855 -0
  751. angr/procedures/definitions/win32/comctl32.json +360 -0
  752. angr/procedures/definitions/win32/comdlg32.json +78 -0
  753. angr/procedures/definitions/win32/compstui.json +27 -0
  754. angr/procedures/definitions/win32/computecore.json +177 -0
  755. angr/procedures/definitions/win32/computenetwork.json +144 -0
  756. angr/procedures/definitions/win32/computestorage.json +51 -0
  757. angr/procedures/definitions/win32/comsvcs.json +36 -0
  758. angr/procedures/definitions/win32/credui.json +72 -0
  759. angr/procedures/definitions/win32/crypt32.json +702 -0
  760. angr/procedures/definitions/win32/cryptnet.json +30 -0
  761. angr/procedures/definitions/win32/cryptui.json +45 -0
  762. angr/procedures/definitions/win32/cryptxml.json +72 -0
  763. angr/procedures/definitions/win32/cscapi.json +27 -0
  764. angr/procedures/definitions/win32/d2d1.json +54 -0
  765. angr/procedures/definitions/win32/d3d10.json +96 -0
  766. angr/procedures/definitions/win32/d3d10_1.json +21 -0
  767. angr/procedures/definitions/win32/d3d11.json +24 -0
  768. angr/procedures/definitions/win32/d3d12.json +39 -0
  769. angr/procedures/definitions/win32/d3d9.json +48 -0
  770. angr/procedures/definitions/win32/d3dcompiler_47.json +93 -0
  771. angr/procedures/definitions/win32/d3dcsx.json +42 -0
  772. angr/procedures/definitions/win32/davclnt.json +69 -0
  773. angr/procedures/definitions/win32/dbgeng.json +27 -0
  774. angr/procedures/definitions/win32/dbghelp.json +663 -0
  775. angr/procedures/definitions/win32/dbgmodel.json +18 -0
  776. angr/procedures/definitions/win32/dciman32.json +75 -0
  777. angr/procedures/definitions/win32/dcomp.json +51 -0
  778. angr/procedures/definitions/win32/ddraw.json +36 -0
  779. angr/procedures/definitions/win32/deviceaccess.json +18 -0
  780. angr/procedures/definitions/win32/dflayout.json +18 -0
  781. angr/procedures/definitions/win32/dhcpcsvc.json +60 -0
  782. angr/procedures/definitions/win32/dhcpcsvc6.json +33 -0
  783. angr/procedures/definitions/win32/dhcpsapi.json +603 -0
  784. angr/procedures/definitions/win32/diagnosticdataquery.json +120 -0
  785. angr/procedures/definitions/win32/dinput8.json +18 -0
  786. angr/procedures/definitions/win32/directml.json +21 -0
  787. angr/procedures/definitions/win32/dmprocessxmlfiltered.json +18 -0
  788. angr/procedures/definitions/win32/dnsapi.json +207 -0
  789. angr/procedures/definitions/win32/drt.json +63 -0
  790. angr/procedures/definitions/win32/drtprov.json +42 -0
  791. angr/procedures/definitions/win32/drttransport.json +21 -0
  792. angr/procedures/definitions/win32/dsound.json +45 -0
  793. angr/procedures/definitions/win32/dsparse.json +72 -0
  794. angr/procedures/definitions/win32/dsprop.json +36 -0
  795. angr/procedures/definitions/win32/dssec.json +27 -0
  796. angr/procedures/definitions/win32/dsuiext.json +27 -0
  797. angr/procedures/definitions/win32/dwmapi.json +108 -0
  798. angr/procedures/definitions/win32/dwrite.json +18 -0
  799. angr/procedures/definitions/win32/dxcompiler.json +21 -0
  800. angr/procedures/definitions/win32/dxcore.json +18 -0
  801. angr/procedures/definitions/win32/dxgi.json +33 -0
  802. angr/procedures/definitions/win32/dxva2.json +129 -0
  803. angr/procedures/definitions/win32/eappcfg.json +57 -0
  804. angr/procedures/definitions/win32/eappprxy.json +69 -0
  805. angr/procedures/definitions/win32/efswrt.json +21 -0
  806. angr/procedures/definitions/win32/elscore.json +30 -0
  807. angr/procedures/definitions/win32/esent.json +702 -0
  808. angr/procedures/definitions/win32/evr.json +36 -0
  809. angr/procedures/definitions/win32/faultrep.json +27 -0
  810. angr/procedures/definitions/win32/fhsvcctl.json +36 -0
  811. angr/procedures/definitions/win32/firewallapi.json +24 -0
  812. angr/procedures/definitions/win32/fltlib.json +99 -0
  813. angr/procedures/definitions/win32/fontsub.json +21 -0
  814. angr/procedures/definitions/win32/forceinline.json +24 -0
  815. angr/procedures/definitions/win32/fwpuclnt.json +591 -0
  816. angr/procedures/definitions/win32/fxsutility.json +21 -0
  817. angr/procedures/definitions/win32/gdi32.json +1308 -0
  818. angr/procedures/definitions/win32/gdiplus.json +1902 -0
  819. angr/procedures/definitions/win32/glu32.json +171 -0
  820. angr/procedures/definitions/win32/gpedit.json +33 -0
  821. angr/procedures/definitions/win32/hhctrl_ocx.json +21 -0
  822. angr/procedures/definitions/win32/hid.json +150 -0
  823. angr/procedures/definitions/win32/hlink.json +99 -0
  824. angr/procedures/definitions/win32/hrtfapo.json +18 -0
  825. angr/procedures/definitions/win32/httpapi.json +144 -0
  826. angr/procedures/definitions/win32/icm32.json +78 -0
  827. angr/procedures/definitions/win32/icmui.json +21 -0
  828. angr/procedures/definitions/win32/icu.json +3090 -0
  829. angr/procedures/definitions/win32/ieframe.json +102 -0
  830. angr/procedures/definitions/win32/imagehlp.json +84 -0
  831. angr/procedures/definitions/win32/imgutil.json +42 -0
  832. angr/procedures/definitions/win32/imm32.json +261 -0
  833. angr/procedures/definitions/win32/infocardapi.json +66 -0
  834. angr/procedures/definitions/win32/inkobjcore.json +96 -0
  835. angr/procedures/definitions/win32/iphlpapi.json +618 -0
  836. angr/procedures/definitions/win32/iscsidsc.json +252 -0
  837. angr/procedures/definitions/win32/isolatedwindowsenvironmentutils.json +21 -0
  838. angr/procedures/definitions/win32/kernel32.json +4566 -0
  839. angr/procedures/definitions/win32/kernelbase.json +33 -0
  840. angr/procedures/definitions/win32/keycredmgr.json +27 -0
  841. angr/procedures/definitions/win32/ksproxy_ax.json +33 -0
  842. angr/procedures/definitions/win32/ksuser.json +39 -0
  843. angr/procedures/definitions/win32/ktmw32.json +132 -0
  844. angr/procedures/definitions/win32/licenseprotection.json +21 -0
  845. angr/procedures/definitions/win32/loadperf.json +51 -0
  846. angr/procedures/definitions/win32/magnification.json +72 -0
  847. angr/procedures/definitions/win32/mapi32.json +213 -0
  848. angr/procedures/definitions/win32/mdmlocalmanagement.json +24 -0
  849. angr/procedures/definitions/win32/mdmregistration.json +60 -0
  850. angr/procedures/definitions/win32/mf.json +201 -0
  851. angr/procedures/definitions/win32/mfcore.json +21 -0
  852. angr/procedures/definitions/win32/mfplat.json +450 -0
  853. angr/procedures/definitions/win32/mfplay.json +18 -0
  854. angr/procedures/definitions/win32/mfreadwrite.json +30 -0
  855. angr/procedures/definitions/win32/mfsensorgroup.json +45 -0
  856. angr/procedures/definitions/win32/mfsrcsnk.json +21 -0
  857. angr/procedures/definitions/win32/mgmtapi.json +42 -0
  858. angr/procedures/definitions/win32/mi.json +18 -0
  859. angr/procedures/definitions/win32/mmdevapi.json +18 -0
  860. angr/procedures/definitions/win32/mpr.json +156 -0
  861. angr/procedures/definitions/win32/mprapi.json +351 -0
  862. angr/procedures/definitions/win32/mqrt.json +117 -0
  863. angr/procedures/definitions/win32/mrmsupport.json +96 -0
  864. angr/procedures/definitions/win32/msacm32.json +141 -0
  865. angr/procedures/definitions/win32/msajapi.json +1656 -0
  866. angr/procedures/definitions/win32/mscms.json +252 -0
  867. angr/procedures/definitions/win32/mscoree.json +96 -0
  868. angr/procedures/definitions/win32/msctfmonitor.json +24 -0
  869. angr/procedures/definitions/win32/msdelta.json +63 -0
  870. angr/procedures/definitions/win32/msdmo.json +48 -0
  871. angr/procedures/definitions/win32/msdrm.json +267 -0
  872. angr/procedures/definitions/win32/msi.json +807 -0
  873. angr/procedures/definitions/win32/msimg32.json +24 -0
  874. angr/procedures/definitions/win32/mspatcha.json +63 -0
  875. angr/procedures/definitions/win32/mspatchc.json +42 -0
  876. angr/procedures/definitions/win32/msports.json +36 -0
  877. angr/procedures/definitions/win32/msrating.json +72 -0
  878. angr/procedures/definitions/win32/mssign32.json +45 -0
  879. angr/procedures/definitions/win32/mstask.json +21 -0
  880. angr/procedures/definitions/win32/msvfw32.json +144 -0
  881. angr/procedures/definitions/win32/mswsock.json +63 -0
  882. angr/procedures/definitions/win32/mtxdm.json +18 -0
  883. angr/procedures/definitions/win32/ncrypt.json +132 -0
  884. angr/procedures/definitions/win32/ndfapi.json +63 -0
  885. angr/procedures/definitions/win32/netapi32.json +633 -0
  886. angr/procedures/definitions/win32/netsh.json +39 -0
  887. angr/procedures/definitions/win32/netshell.json +21 -0
  888. angr/procedures/definitions/win32/newdev.json +48 -0
  889. angr/procedures/definitions/win32/ninput.json +105 -0
  890. angr/procedures/definitions/win32/normaliz.json +21 -0
  891. angr/procedures/definitions/win32/ntdll.json +234 -0
  892. angr/procedures/definitions/win32/ntdllk.json +18 -0
  893. angr/procedures/definitions/win32/ntdsapi.json +258 -0
  894. angr/procedures/definitions/win32/ntlanman.json +45 -0
  895. angr/procedures/definitions/win32/odbc32.json +477 -0
  896. angr/procedures/definitions/win32/odbcbcp.json +96 -0
  897. angr/procedures/definitions/win32/ole32.json +966 -0
  898. angr/procedures/definitions/win32/oleacc.json +66 -0
  899. angr/procedures/definitions/win32/oleaut32.json +1230 -0
  900. angr/procedures/definitions/win32/oledlg.json +84 -0
  901. angr/procedures/definitions/win32/ondemandconnroutehelper.json +30 -0
  902. angr/procedures/definitions/win32/opengl32.json +1080 -0
  903. angr/procedures/definitions/win32/opmxbox.json +24 -0
  904. angr/procedures/definitions/win32/p2p.json +339 -0
  905. angr/procedures/definitions/win32/p2pgraph.json +126 -0
  906. angr/procedures/definitions/win32/pdh.json +309 -0
  907. angr/procedures/definitions/win32/peerdist.json +99 -0
  908. angr/procedures/definitions/win32/powrprof.json +267 -0
  909. angr/procedures/definitions/win32/prntvpt.json +48 -0
  910. angr/procedures/definitions/win32/projectedfslib.json +72 -0
  911. angr/procedures/definitions/win32/propsys.json +669 -0
  912. angr/procedures/definitions/win32/psapi.json +96 -0
  913. angr/procedures/definitions/win32/quartz.json +21 -0
  914. angr/procedures/definitions/win32/query.json +27 -0
  915. angr/procedures/definitions/win32/qwave.json +48 -0
  916. angr/procedures/definitions/win32/rasapi32.json +267 -0
  917. angr/procedures/definitions/win32/rasdlg.json +33 -0
  918. angr/procedures/definitions/win32/resutils.json +375 -0
  919. angr/procedures/definitions/win32/rpcns4.json +198 -0
  920. angr/procedures/definitions/win32/rpcproxy.json +27 -0
  921. angr/procedures/definitions/win32/rpcrt4.json +1356 -0
  922. angr/procedures/definitions/win32/rstrtmgr.json +48 -0
  923. angr/procedures/definitions/win32/rtm.json +243 -0
  924. angr/procedures/definitions/win32/rtutils.json +138 -0
  925. angr/procedures/definitions/win32/rtworkq.json +114 -0
  926. angr/procedures/definitions/win32/sas.json +18 -0
  927. angr/procedures/definitions/win32/scarddlg.json +30 -0
  928. angr/procedures/definitions/win32/schannel.json +42 -0
  929. angr/procedures/definitions/win32/sechost.json +21 -0
  930. angr/procedures/definitions/win32/secur32.json +282 -0
  931. angr/procedures/definitions/win32/sensapi.json +24 -0
  932. angr/procedures/definitions/win32/sensorsutilsv2.json +135 -0
  933. angr/procedures/definitions/win32/setupapi.json +1017 -0
  934. angr/procedures/definitions/win32/sfc.json +33 -0
  935. angr/procedures/definitions/win32/shdocvw.json +24 -0
  936. angr/procedures/definitions/win32/shell32.json +747 -0
  937. angr/procedures/definitions/win32/shlwapi.json +1095 -0
  938. angr/procedures/definitions/win32/slc.json +111 -0
  939. angr/procedures/definitions/win32/slcext.json +27 -0
  940. angr/procedures/definitions/win32/slwga.json +18 -0
  941. angr/procedures/definitions/win32/snmpapi.json +93 -0
  942. angr/procedures/definitions/win32/spoolss.json +93 -0
  943. angr/procedures/definitions/win32/srclient.json +18 -0
  944. angr/procedures/definitions/win32/srpapi.json +48 -0
  945. angr/procedures/definitions/win32/sspicli.json +36 -0
  946. angr/procedures/definitions/win32/sti.json +18 -0
  947. angr/procedures/definitions/win32/t2embed.json +57 -0
  948. angr/procedures/definitions/win32/tapi32.json +762 -0
  949. angr/procedures/definitions/win32/tbs.json +57 -0
  950. angr/procedures/definitions/win32/tdh.json +96 -0
  951. angr/procedures/definitions/win32/tokenbinding.json +45 -0
  952. angr/procedures/definitions/win32/traffic.json +75 -0
  953. angr/procedures/definitions/win32/txfw32.json +42 -0
  954. angr/procedures/definitions/win32/ualapi.json +27 -0
  955. angr/procedures/definitions/win32/uiautomationcore.json +309 -0
  956. angr/procedures/definitions/win32/urlmon.json +246 -0
  957. angr/procedures/definitions/win32/user32.json +2298 -0
  958. angr/procedures/definitions/win32/userenv.json +147 -0
  959. angr/procedures/definitions/win32/usp10.json +135 -0
  960. angr/procedures/definitions/win32/uxtheme.json +246 -0
  961. angr/procedures/definitions/win32/verifier.json +18 -0
  962. angr/procedures/definitions/win32/version.json +57 -0
  963. angr/procedures/definitions/win32/vertdll.json +36 -0
  964. angr/procedures/definitions/win32/virtdisk.json +102 -0
  965. angr/procedures/definitions/win32/vmdevicehost.json +54 -0
  966. angr/procedures/definitions/win32/vmsavedstatedumpprovider.json +144 -0
  967. angr/procedures/definitions/win32/vssapi.json +18 -0
  968. angr/procedures/definitions/win32/wcmapi.json +30 -0
  969. angr/procedures/definitions/win32/wdsbp.json +36 -0
  970. angr/procedures/definitions/win32/wdsclientapi.json +126 -0
  971. angr/procedures/definitions/win32/wdsmc.json +33 -0
  972. angr/procedures/definitions/win32/wdspxe.json +108 -0
  973. angr/procedures/definitions/win32/wdstptc.json +54 -0
  974. angr/procedures/definitions/win32/webauthn.json +54 -0
  975. angr/procedures/definitions/win32/webservices.json +594 -0
  976. angr/procedures/definitions/win32/websocket.json +54 -0
  977. angr/procedures/definitions/win32/wecapi.json +60 -0
  978. angr/procedures/definitions/win32/wer.json +78 -0
  979. angr/procedures/definitions/win32/wevtapi.json +120 -0
  980. angr/procedures/definitions/win32/winbio.json +177 -0
  981. angr/procedures/definitions/win32/windows_ai_machinelearning.json +18 -0
  982. angr/procedures/definitions/win32/windows_media_mediacontrol.json +39 -0
  983. angr/procedures/definitions/win32/windows_networking.json +18 -0
  984. angr/procedures/definitions/win32/windows_ui_xaml.json +21 -0
  985. angr/procedures/definitions/win32/windowscodecs.json +42 -0
  986. angr/procedures/definitions/win32/winfax.json +183 -0
  987. angr/procedures/definitions/win32/winhttp.json +183 -0
  988. angr/procedures/definitions/win32/winhvemulation.json +27 -0
  989. angr/procedures/definitions/win32/winhvplatform.json +213 -0
  990. angr/procedures/definitions/win32/wininet.json +903 -0
  991. angr/procedures/definitions/win32/winml.json +18 -0
  992. angr/procedures/definitions/win32/winmm.json +543 -0
  993. angr/procedures/definitions/win32/winscard.json +225 -0
  994. angr/procedures/definitions/win32/winspool_drv.json +531 -0
  995. angr/procedures/definitions/win32/wintrust.json +195 -0
  996. angr/procedures/definitions/win32/winusb.json +117 -0
  997. angr/procedures/definitions/win32/wlanapi.json +195 -0
  998. angr/procedures/definitions/win32/wlanui.json +18 -0
  999. angr/procedures/definitions/win32/wldap32.json +744 -0
  1000. angr/procedures/definitions/win32/wldp.json +42 -0
  1001. angr/procedures/definitions/win32/wmvcore.json +48 -0
  1002. angr/procedures/definitions/win32/wnvapi.json +21 -0
  1003. angr/procedures/definitions/win32/wofutil.json +48 -0
  1004. angr/procedures/definitions/win32/ws2_32.json +495 -0
  1005. angr/procedures/definitions/win32/wscapi.json +33 -0
  1006. angr/procedures/definitions/win32/wsclient.json +24 -0
  1007. angr/procedures/definitions/win32/wsdapi.json +111 -0
  1008. angr/procedures/definitions/win32/wsmsvc.json +114 -0
  1009. angr/procedures/definitions/win32/wsnmp32.json +162 -0
  1010. angr/procedures/definitions/win32/wtsapi32.json +204 -0
  1011. angr/procedures/definitions/win32/xaudio2_8.json +27 -0
  1012. angr/procedures/definitions/win32/xinput1_4.json +36 -0
  1013. angr/procedures/definitions/win32/xmllite.json +33 -0
  1014. angr/procedures/definitions/win32/xolehlp.json +27 -0
  1015. angr/procedures/definitions/win32/xpsprint.json +21 -0
  1016. angr/procedures/glibc/__ctype_b_loc.py +21 -0
  1017. angr/procedures/glibc/__ctype_tolower_loc.py +21 -0
  1018. angr/procedures/glibc/__ctype_toupper_loc.py +21 -0
  1019. angr/procedures/glibc/__errno_location.py +7 -0
  1020. angr/procedures/glibc/__init__.py +3 -0
  1021. angr/procedures/glibc/__libc_init.py +37 -0
  1022. angr/procedures/glibc/__libc_start_main.py +301 -0
  1023. angr/procedures/glibc/dynamic_loading.py +20 -0
  1024. angr/procedures/glibc/scanf.py +19 -0
  1025. angr/procedures/glibc/sscanf.py +10 -0
  1026. angr/procedures/gnulib/__init__.py +3 -0
  1027. angr/procedures/gnulib/xalloc_die.py +14 -0
  1028. angr/procedures/gnulib/xstrtol_fatal.py +14 -0
  1029. angr/procedures/java/__init__.py +42 -0
  1030. angr/procedures/java/unconstrained.py +65 -0
  1031. angr/procedures/java_io/__init__.py +0 -0
  1032. angr/procedures/java_io/read.py +12 -0
  1033. angr/procedures/java_io/write.py +17 -0
  1034. angr/procedures/java_jni/__init__.py +482 -0
  1035. angr/procedures/java_jni/array_operations.py +312 -0
  1036. angr/procedures/java_jni/class_and_interface_operations.py +31 -0
  1037. angr/procedures/java_jni/field_access.py +173 -0
  1038. angr/procedures/java_jni/global_and_local_refs.py +57 -0
  1039. angr/procedures/java_jni/method_calls.py +365 -0
  1040. angr/procedures/java_jni/not_implemented.py +26 -0
  1041. angr/procedures/java_jni/object_operations.py +94 -0
  1042. angr/procedures/java_jni/string_operations.py +87 -0
  1043. angr/procedures/java_jni/version_information.py +12 -0
  1044. angr/procedures/java_lang/__init__.py +0 -0
  1045. angr/procedures/java_lang/character.py +30 -0
  1046. angr/procedures/java_lang/double.py +24 -0
  1047. angr/procedures/java_lang/exit.py +13 -0
  1048. angr/procedures/java_lang/getsimplename.py +18 -0
  1049. angr/procedures/java_lang/integer.py +43 -0
  1050. angr/procedures/java_lang/load_library.py +9 -0
  1051. angr/procedures/java_lang/math.py +15 -0
  1052. angr/procedures/java_lang/string.py +78 -0
  1053. angr/procedures/java_lang/stringbuilder.py +44 -0
  1054. angr/procedures/java_lang/system.py +18 -0
  1055. angr/procedures/java_util/__init__.py +0 -0
  1056. angr/procedures/java_util/collection.py +35 -0
  1057. angr/procedures/java_util/iterator.py +46 -0
  1058. angr/procedures/java_util/list.py +99 -0
  1059. angr/procedures/java_util/map.py +131 -0
  1060. angr/procedures/java_util/random.py +14 -0
  1061. angr/procedures/java_util/scanner_nextline.py +23 -0
  1062. angr/procedures/libc/__init__.py +3 -0
  1063. angr/procedures/libc/abort.py +9 -0
  1064. angr/procedures/libc/access.py +13 -0
  1065. angr/procedures/libc/atoi.py +14 -0
  1066. angr/procedures/libc/atol.py +13 -0
  1067. angr/procedures/libc/calloc.py +8 -0
  1068. angr/procedures/libc/closelog.py +10 -0
  1069. angr/procedures/libc/err.py +14 -0
  1070. angr/procedures/libc/error.py +54 -0
  1071. angr/procedures/libc/exit.py +11 -0
  1072. angr/procedures/libc/fclose.py +19 -0
  1073. angr/procedures/libc/feof.py +21 -0
  1074. angr/procedures/libc/fflush.py +16 -0
  1075. angr/procedures/libc/fgetc.py +27 -0
  1076. angr/procedures/libc/fgets.py +69 -0
  1077. angr/procedures/libc/fopen.py +63 -0
  1078. angr/procedures/libc/fprintf.py +25 -0
  1079. angr/procedures/libc/fputc.py +23 -0
  1080. angr/procedures/libc/fputs.py +24 -0
  1081. angr/procedures/libc/fread.py +24 -0
  1082. angr/procedures/libc/free.py +9 -0
  1083. angr/procedures/libc/fscanf.py +20 -0
  1084. angr/procedures/libc/fseek.py +34 -0
  1085. angr/procedures/libc/ftell.py +22 -0
  1086. angr/procedures/libc/fwrite.py +19 -0
  1087. angr/procedures/libc/getchar.py +13 -0
  1088. angr/procedures/libc/getdelim.py +99 -0
  1089. angr/procedures/libc/getegid.py +8 -0
  1090. angr/procedures/libc/geteuid.py +8 -0
  1091. angr/procedures/libc/getgid.py +8 -0
  1092. angr/procedures/libc/gets.py +68 -0
  1093. angr/procedures/libc/getuid.py +8 -0
  1094. angr/procedures/libc/malloc.py +12 -0
  1095. angr/procedures/libc/memcmp.py +69 -0
  1096. angr/procedures/libc/memcpy.py +45 -0
  1097. angr/procedures/libc/memset.py +72 -0
  1098. angr/procedures/libc/openlog.py +10 -0
  1099. angr/procedures/libc/perror.py +13 -0
  1100. angr/procedures/libc/printf.py +34 -0
  1101. angr/procedures/libc/putchar.py +13 -0
  1102. angr/procedures/libc/puts.py +19 -0
  1103. angr/procedures/libc/rand.py +8 -0
  1104. angr/procedures/libc/realloc.py +8 -0
  1105. angr/procedures/libc/rewind.py +12 -0
  1106. angr/procedures/libc/scanf.py +20 -0
  1107. angr/procedures/libc/setbuf.py +9 -0
  1108. angr/procedures/libc/setvbuf.py +7 -0
  1109. angr/procedures/libc/snprintf.py +36 -0
  1110. angr/procedures/libc/sprintf.py +25 -0
  1111. angr/procedures/libc/srand.py +7 -0
  1112. angr/procedures/libc/sscanf.py +13 -0
  1113. angr/procedures/libc/stpcpy.py +18 -0
  1114. angr/procedures/libc/strcat.py +14 -0
  1115. angr/procedures/libc/strchr.py +48 -0
  1116. angr/procedures/libc/strcmp.py +31 -0
  1117. angr/procedures/libc/strcpy.py +13 -0
  1118. angr/procedures/libc/strlen.py +114 -0
  1119. angr/procedures/libc/strncat.py +19 -0
  1120. angr/procedures/libc/strncmp.py +183 -0
  1121. angr/procedures/libc/strncpy.py +22 -0
  1122. angr/procedures/libc/strnlen.py +13 -0
  1123. angr/procedures/libc/strstr.py +101 -0
  1124. angr/procedures/libc/strtol.py +261 -0
  1125. angr/procedures/libc/strtoul.py +9 -0
  1126. angr/procedures/libc/system.py +13 -0
  1127. angr/procedures/libc/time.py +9 -0
  1128. angr/procedures/libc/tmpnam.py +20 -0
  1129. angr/procedures/libc/tolower.py +10 -0
  1130. angr/procedures/libc/toupper.py +10 -0
  1131. angr/procedures/libc/ungetc.py +20 -0
  1132. angr/procedures/libc/vsnprintf.py +17 -0
  1133. angr/procedures/libc/wchar.py +16 -0
  1134. angr/procedures/libstdcpp/__init__.py +0 -0
  1135. angr/procedures/libstdcpp/_unwind_resume.py +11 -0
  1136. angr/procedures/libstdcpp/std____throw_bad_alloc.py +13 -0
  1137. angr/procedures/libstdcpp/std____throw_bad_cast.py +13 -0
  1138. angr/procedures/libstdcpp/std____throw_length_error.py +13 -0
  1139. angr/procedures/libstdcpp/std____throw_logic_error.py +13 -0
  1140. angr/procedures/libstdcpp/std__terminate.py +13 -0
  1141. angr/procedures/linux_kernel/__init__.py +3 -0
  1142. angr/procedures/linux_kernel/access.py +18 -0
  1143. angr/procedures/linux_kernel/arch_prctl.py +34 -0
  1144. angr/procedures/linux_kernel/arm_user_helpers.py +59 -0
  1145. angr/procedures/linux_kernel/brk.py +18 -0
  1146. angr/procedures/linux_kernel/cwd.py +28 -0
  1147. angr/procedures/linux_kernel/fstat.py +138 -0
  1148. angr/procedures/linux_kernel/fstat64.py +170 -0
  1149. angr/procedures/linux_kernel/futex.py +17 -0
  1150. angr/procedures/linux_kernel/getegid.py +17 -0
  1151. angr/procedures/linux_kernel/geteuid.py +17 -0
  1152. angr/procedures/linux_kernel/getgid.py +17 -0
  1153. angr/procedures/linux_kernel/getpid.py +14 -0
  1154. angr/procedures/linux_kernel/getrlimit.py +24 -0
  1155. angr/procedures/linux_kernel/gettid.py +9 -0
  1156. angr/procedures/linux_kernel/getuid.py +17 -0
  1157. angr/procedures/linux_kernel/iovec.py +47 -0
  1158. angr/procedures/linux_kernel/lseek.py +42 -0
  1159. angr/procedures/linux_kernel/mmap.py +16 -0
  1160. angr/procedures/linux_kernel/mprotect.py +42 -0
  1161. angr/procedures/linux_kernel/munmap.py +8 -0
  1162. angr/procedures/linux_kernel/openat.py +26 -0
  1163. angr/procedures/linux_kernel/set_tid_address.py +8 -0
  1164. angr/procedures/linux_kernel/sigaction.py +19 -0
  1165. angr/procedures/linux_kernel/sigprocmask.py +23 -0
  1166. angr/procedures/linux_kernel/stat.py +23 -0
  1167. angr/procedures/linux_kernel/sysinfo.py +59 -0
  1168. angr/procedures/linux_kernel/tgkill.py +10 -0
  1169. angr/procedures/linux_kernel/time.py +34 -0
  1170. angr/procedures/linux_kernel/uid.py +30 -0
  1171. angr/procedures/linux_kernel/uname.py +29 -0
  1172. angr/procedures/linux_kernel/unlink.py +22 -0
  1173. angr/procedures/linux_kernel/vsyscall.py +16 -0
  1174. angr/procedures/linux_loader/__init__.py +3 -0
  1175. angr/procedures/linux_loader/_dl_initial_error_catch_tsd.py +7 -0
  1176. angr/procedures/linux_loader/_dl_rtld_lock.py +15 -0
  1177. angr/procedures/linux_loader/sim_loader.py +54 -0
  1178. angr/procedures/linux_loader/tls.py +40 -0
  1179. angr/procedures/msvcr/__getmainargs.py +16 -0
  1180. angr/procedures/msvcr/__init__.py +4 -0
  1181. angr/procedures/msvcr/_initterm.py +38 -0
  1182. angr/procedures/msvcr/fmode.py +31 -0
  1183. angr/procedures/ntdll/__init__.py +0 -0
  1184. angr/procedures/ntdll/exceptions.py +60 -0
  1185. angr/procedures/posix/__init__.py +3 -0
  1186. angr/procedures/posix/accept.py +29 -0
  1187. angr/procedures/posix/bind.py +13 -0
  1188. angr/procedures/posix/bzero.py +9 -0
  1189. angr/procedures/posix/chroot.py +27 -0
  1190. angr/procedures/posix/close.py +9 -0
  1191. angr/procedures/posix/closedir.py +7 -0
  1192. angr/procedures/posix/dup.py +56 -0
  1193. angr/procedures/posix/fcntl.py +10 -0
  1194. angr/procedures/posix/fdopen.py +76 -0
  1195. angr/procedures/posix/fileno.py +18 -0
  1196. angr/procedures/posix/fork.py +13 -0
  1197. angr/procedures/posix/getenv.py +35 -0
  1198. angr/procedures/posix/gethostbyname.py +43 -0
  1199. angr/procedures/posix/getpass.py +19 -0
  1200. angr/procedures/posix/getsockopt.py +11 -0
  1201. angr/procedures/posix/htonl.py +11 -0
  1202. angr/procedures/posix/htons.py +11 -0
  1203. angr/procedures/posix/inet_ntoa.py +59 -0
  1204. angr/procedures/posix/listen.py +13 -0
  1205. angr/procedures/posix/mmap.py +144 -0
  1206. angr/procedures/posix/open.py +18 -0
  1207. angr/procedures/posix/opendir.py +10 -0
  1208. angr/procedures/posix/poll.py +55 -0
  1209. angr/procedures/posix/pread64.py +46 -0
  1210. angr/procedures/posix/pthread.py +87 -0
  1211. angr/procedures/posix/pwrite64.py +46 -0
  1212. angr/procedures/posix/read.py +13 -0
  1213. angr/procedures/posix/readdir.py +62 -0
  1214. angr/procedures/posix/recv.py +13 -0
  1215. angr/procedures/posix/recvfrom.py +13 -0
  1216. angr/procedures/posix/select.py +48 -0
  1217. angr/procedures/posix/send.py +23 -0
  1218. angr/procedures/posix/setsockopt.py +9 -0
  1219. angr/procedures/posix/sigaction.py +23 -0
  1220. angr/procedures/posix/sim_time.py +48 -0
  1221. angr/procedures/posix/sleep.py +8 -0
  1222. angr/procedures/posix/socket.py +18 -0
  1223. angr/procedures/posix/strcasecmp.py +26 -0
  1224. angr/procedures/posix/strdup.py +18 -0
  1225. angr/procedures/posix/strtok_r.py +64 -0
  1226. angr/procedures/posix/syslog.py +15 -0
  1227. angr/procedures/posix/tz.py +9 -0
  1228. angr/procedures/posix/unlink.py +11 -0
  1229. angr/procedures/posix/usleep.py +8 -0
  1230. angr/procedures/posix/write.py +13 -0
  1231. angr/procedures/procedure_dict.py +50 -0
  1232. angr/procedures/stubs/CallReturn.py +13 -0
  1233. angr/procedures/stubs/NoReturnUnconstrained.py +13 -0
  1234. angr/procedures/stubs/Nop.py +7 -0
  1235. angr/procedures/stubs/PathTerminator.py +9 -0
  1236. angr/procedures/stubs/Redirect.py +18 -0
  1237. angr/procedures/stubs/ReturnChar.py +11 -0
  1238. angr/procedures/stubs/ReturnUnconstrained.py +24 -0
  1239. angr/procedures/stubs/UnresolvableCallTarget.py +9 -0
  1240. angr/procedures/stubs/UnresolvableJumpTarget.py +9 -0
  1241. angr/procedures/stubs/UserHook.py +18 -0
  1242. angr/procedures/stubs/__init__.py +3 -0
  1243. angr/procedures/stubs/b64_decode.py +15 -0
  1244. angr/procedures/stubs/caller.py +14 -0
  1245. angr/procedures/stubs/crazy_scanf.py +20 -0
  1246. angr/procedures/stubs/format_parser.py +669 -0
  1247. angr/procedures/stubs/syscall_stub.py +24 -0
  1248. angr/procedures/testing/__init__.py +3 -0
  1249. angr/procedures/testing/manyargs.py +9 -0
  1250. angr/procedures/testing/retreg.py +8 -0
  1251. angr/procedures/tracer/__init__.py +4 -0
  1252. angr/procedures/tracer/random.py +9 -0
  1253. angr/procedures/tracer/receive.py +23 -0
  1254. angr/procedures/tracer/transmit.py +26 -0
  1255. angr/procedures/uclibc/__init__.py +3 -0
  1256. angr/procedures/uclibc/__uClibc_main.py +10 -0
  1257. angr/procedures/win32/EncodePointer.py +7 -0
  1258. angr/procedures/win32/ExitProcess.py +9 -0
  1259. angr/procedures/win32/GetCommandLine.py +12 -0
  1260. angr/procedures/win32/GetCurrentProcessId.py +7 -0
  1261. angr/procedures/win32/GetCurrentThreadId.py +7 -0
  1262. angr/procedures/win32/GetLastInputInfo.py +40 -0
  1263. angr/procedures/win32/GetModuleHandle.py +29 -0
  1264. angr/procedures/win32/GetProcessAffinityMask.py +37 -0
  1265. angr/procedures/win32/InterlockedExchange.py +15 -0
  1266. angr/procedures/win32/IsProcessorFeaturePresent.py +7 -0
  1267. angr/procedures/win32/VirtualAlloc.py +114 -0
  1268. angr/procedures/win32/VirtualProtect.py +60 -0
  1269. angr/procedures/win32/__init__.py +3 -0
  1270. angr/procedures/win32/critical_section.py +12 -0
  1271. angr/procedures/win32/dynamic_loading.py +104 -0
  1272. angr/procedures/win32/file_handles.py +47 -0
  1273. angr/procedures/win32/gethostbyname.py +12 -0
  1274. angr/procedures/win32/heap.py +45 -0
  1275. angr/procedures/win32/is_bad_ptr.py +26 -0
  1276. angr/procedures/win32/local_storage.py +88 -0
  1277. angr/procedures/win32/mutex.py +11 -0
  1278. angr/procedures/win32/sim_time.py +135 -0
  1279. angr/procedures/win32/system_paths.py +35 -0
  1280. angr/procedures/win32_kernel/ExAllocatePool.py +13 -0
  1281. angr/procedures/win32_kernel/ExFreePoolWithTag.py +8 -0
  1282. angr/procedures/win32_kernel/__fastfail.py +15 -0
  1283. angr/procedures/win32_kernel/__init__.py +3 -0
  1284. angr/procedures/win_user32/__init__.py +0 -0
  1285. angr/procedures/win_user32/chars.py +15 -0
  1286. angr/procedures/win_user32/keyboard.py +14 -0
  1287. angr/procedures/win_user32/messagebox.py +49 -0
  1288. angr/project.py +860 -0
  1289. angr/protos/__init__.py +19 -0
  1290. angr/protos/cfg_pb2.py +42 -0
  1291. angr/protos/function_pb2.py +38 -0
  1292. angr/protos/primitives_pb2.py +59 -0
  1293. angr/protos/variables_pb2.py +55 -0
  1294. angr/protos/xrefs_pb2.py +36 -0
  1295. angr/py.typed +1 -0
  1296. angr/rustylib.cpython-311-darwin.so +0 -0
  1297. angr/serializable.py +66 -0
  1298. angr/sim_manager.py +971 -0
  1299. angr/sim_options.py +436 -0
  1300. angr/sim_procedure.py +626 -0
  1301. angr/sim_state.py +926 -0
  1302. angr/sim_state_options.py +403 -0
  1303. angr/sim_type.py +4026 -0
  1304. angr/sim_variable.py +470 -0
  1305. angr/simos/__init__.py +47 -0
  1306. angr/simos/cgc.py +153 -0
  1307. angr/simos/javavm.py +458 -0
  1308. angr/simos/linux.py +509 -0
  1309. angr/simos/simos.py +444 -0
  1310. angr/simos/snimmuc_nxp.py +149 -0
  1311. angr/simos/userland.py +163 -0
  1312. angr/simos/windows.py +615 -0
  1313. angr/simos/xbox.py +32 -0
  1314. angr/slicer.py +352 -0
  1315. angr/state_hierarchy.py +262 -0
  1316. angr/state_plugins/__init__.py +84 -0
  1317. angr/state_plugins/callstack.py +478 -0
  1318. angr/state_plugins/cgc.py +155 -0
  1319. angr/state_plugins/debug_variables.py +192 -0
  1320. angr/state_plugins/filesystem.py +463 -0
  1321. angr/state_plugins/gdb.py +148 -0
  1322. angr/state_plugins/globals.py +65 -0
  1323. angr/state_plugins/heap/__init__.py +15 -0
  1324. angr/state_plugins/heap/heap_base.py +128 -0
  1325. angr/state_plugins/heap/heap_brk.py +136 -0
  1326. angr/state_plugins/heap/heap_freelist.py +213 -0
  1327. angr/state_plugins/heap/heap_libc.py +46 -0
  1328. angr/state_plugins/heap/heap_ptmalloc.py +620 -0
  1329. angr/state_plugins/heap/utils.py +22 -0
  1330. angr/state_plugins/history.py +564 -0
  1331. angr/state_plugins/inspect.py +375 -0
  1332. angr/state_plugins/javavm_classloader.py +134 -0
  1333. angr/state_plugins/jni_references.py +95 -0
  1334. angr/state_plugins/libc.py +1263 -0
  1335. angr/state_plugins/light_registers.py +168 -0
  1336. angr/state_plugins/log.py +84 -0
  1337. angr/state_plugins/loop_data.py +92 -0
  1338. angr/state_plugins/plugin.py +176 -0
  1339. angr/state_plugins/posix.py +703 -0
  1340. angr/state_plugins/preconstrainer.py +196 -0
  1341. angr/state_plugins/scratch.py +173 -0
  1342. angr/state_plugins/sim_action.py +326 -0
  1343. angr/state_plugins/sim_action_object.py +271 -0
  1344. angr/state_plugins/sim_event.py +59 -0
  1345. angr/state_plugins/solver.py +1128 -0
  1346. angr/state_plugins/symbolizer.py +291 -0
  1347. angr/state_plugins/trace_additions.py +738 -0
  1348. angr/state_plugins/uc_manager.py +94 -0
  1349. angr/state_plugins/unicorn_engine.py +1920 -0
  1350. angr/state_plugins/view.py +340 -0
  1351. angr/storage/__init__.py +15 -0
  1352. angr/storage/file.py +1210 -0
  1353. angr/storage/memory_mixins/__init__.py +317 -0
  1354. angr/storage/memory_mixins/actions_mixin.py +72 -0
  1355. angr/storage/memory_mixins/address_concretization_mixin.py +384 -0
  1356. angr/storage/memory_mixins/bvv_conversion_mixin.py +73 -0
  1357. angr/storage/memory_mixins/clouseau_mixin.py +137 -0
  1358. angr/storage/memory_mixins/conditional_store_mixin.py +25 -0
  1359. angr/storage/memory_mixins/convenient_mappings_mixin.py +256 -0
  1360. angr/storage/memory_mixins/default_filler_mixin.py +144 -0
  1361. angr/storage/memory_mixins/dirty_addrs_mixin.py +11 -0
  1362. angr/storage/memory_mixins/hex_dumper_mixin.py +82 -0
  1363. angr/storage/memory_mixins/javavm_memory_mixin.py +392 -0
  1364. angr/storage/memory_mixins/keyvalue_memory_mixin.py +43 -0
  1365. angr/storage/memory_mixins/label_merger_mixin.py +31 -0
  1366. angr/storage/memory_mixins/memory_mixin.py +175 -0
  1367. angr/storage/memory_mixins/multi_value_merger_mixin.py +79 -0
  1368. angr/storage/memory_mixins/name_resolution_mixin.py +67 -0
  1369. angr/storage/memory_mixins/paged_memory/__init__.py +0 -0
  1370. angr/storage/memory_mixins/paged_memory/page_backer_mixins.py +266 -0
  1371. angr/storage/memory_mixins/paged_memory/paged_memory_mixin.py +743 -0
  1372. angr/storage/memory_mixins/paged_memory/paged_memory_multivalue_mixin.py +65 -0
  1373. angr/storage/memory_mixins/paged_memory/pages/__init__.py +26 -0
  1374. angr/storage/memory_mixins/paged_memory/pages/base.py +31 -0
  1375. angr/storage/memory_mixins/paged_memory/pages/cooperation.py +341 -0
  1376. angr/storage/memory_mixins/paged_memory/pages/history_tracking_mixin.py +92 -0
  1377. angr/storage/memory_mixins/paged_memory/pages/ispo_mixin.py +55 -0
  1378. angr/storage/memory_mixins/paged_memory/pages/list_page.py +338 -0
  1379. angr/storage/memory_mixins/paged_memory/pages/multi_values.py +324 -0
  1380. angr/storage/memory_mixins/paged_memory/pages/mv_list_page.py +419 -0
  1381. angr/storage/memory_mixins/paged_memory/pages/permissions_mixin.py +36 -0
  1382. angr/storage/memory_mixins/paged_memory/pages/refcount_mixin.py +52 -0
  1383. angr/storage/memory_mixins/paged_memory/pages/ultra_page.py +529 -0
  1384. angr/storage/memory_mixins/paged_memory/privileged_mixin.py +36 -0
  1385. angr/storage/memory_mixins/paged_memory/stack_allocation_mixin.py +74 -0
  1386. angr/storage/memory_mixins/regioned_memory/__init__.py +17 -0
  1387. angr/storage/memory_mixins/regioned_memory/abstract_address_descriptor.py +36 -0
  1388. angr/storage/memory_mixins/regioned_memory/abstract_merger_mixin.py +31 -0
  1389. angr/storage/memory_mixins/regioned_memory/region_category_mixin.py +9 -0
  1390. angr/storage/memory_mixins/regioned_memory/region_data.py +246 -0
  1391. angr/storage/memory_mixins/regioned_memory/region_meta_mixin.py +241 -0
  1392. angr/storage/memory_mixins/regioned_memory/regioned_address_concretization_mixin.py +119 -0
  1393. angr/storage/memory_mixins/regioned_memory/regioned_memory_mixin.py +442 -0
  1394. angr/storage/memory_mixins/regioned_memory/static_find_mixin.py +69 -0
  1395. angr/storage/memory_mixins/simple_interface_mixin.py +71 -0
  1396. angr/storage/memory_mixins/simplification_mixin.py +15 -0
  1397. angr/storage/memory_mixins/size_resolution_mixin.py +143 -0
  1398. angr/storage/memory_mixins/slotted_memory.py +140 -0
  1399. angr/storage/memory_mixins/smart_find_mixin.py +161 -0
  1400. angr/storage/memory_mixins/symbolic_merger_mixin.py +16 -0
  1401. angr/storage/memory_mixins/top_merger_mixin.py +25 -0
  1402. angr/storage/memory_mixins/underconstrained_mixin.py +67 -0
  1403. angr/storage/memory_mixins/unwrapper_mixin.py +26 -0
  1404. angr/storage/memory_object.py +195 -0
  1405. angr/tablespecs.py +91 -0
  1406. angr/unicornlib.dylib +0 -0
  1407. angr/utils/__init__.py +46 -0
  1408. angr/utils/ail.py +176 -0
  1409. angr/utils/algo.py +34 -0
  1410. angr/utils/balancer.py +776 -0
  1411. angr/utils/bits.py +46 -0
  1412. angr/utils/constants.py +9 -0
  1413. angr/utils/cowdict.py +63 -0
  1414. angr/utils/cpp.py +17 -0
  1415. angr/utils/doms.py +150 -0
  1416. angr/utils/dynamic_dictlist.py +89 -0
  1417. angr/utils/endness.py +18 -0
  1418. angr/utils/enums_conv.py +97 -0
  1419. angr/utils/env.py +12 -0
  1420. angr/utils/formatting.py +128 -0
  1421. angr/utils/funcid.py +244 -0
  1422. angr/utils/graph.py +981 -0
  1423. angr/utils/lazy_import.py +13 -0
  1424. angr/utils/library.py +236 -0
  1425. angr/utils/loader.py +55 -0
  1426. angr/utils/mp.py +66 -0
  1427. angr/utils/orderedset.py +74 -0
  1428. angr/utils/ssa/__init__.py +455 -0
  1429. angr/utils/ssa/tmp_uses_collector.py +23 -0
  1430. angr/utils/ssa/vvar_uses_collector.py +36 -0
  1431. angr/utils/strings.py +20 -0
  1432. angr/utils/tagged_interval_map.py +112 -0
  1433. angr/utils/timing.py +74 -0
  1434. angr/utils/types.py +193 -0
  1435. angr/utils/vex.py +11 -0
  1436. angr/vaults.py +367 -0
  1437. angr-9.2.192.dist-info/METADATA +112 -0
  1438. angr-9.2.192.dist-info/RECORD +1442 -0
  1439. angr-9.2.192.dist-info/WHEEL +6 -0
  1440. angr-9.2.192.dist-info/entry_points.txt +2 -0
  1441. angr-9.2.192.dist-info/licenses/LICENSE +27 -0
  1442. angr-9.2.192.dist-info/top_level.txt +1 -0
@@ -0,0 +1,2505 @@
1
+ {
2
+ "_t": "lib",
3
+ "type_collection_names": [
4
+ "win32"
5
+ ],
6
+ "library_names": [
7
+ "advapi32.dll"
8
+ ],
9
+ "default_cc": {
10
+ "X86": "SimCCStdcall",
11
+ "AMD64": "SimCCMicrosoftAMD64"
12
+ },
13
+ "functions": {
14
+ "A_SHAFinal": {
15
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
16
+ },
17
+ "A_SHAInit": {
18
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
19
+ },
20
+ "A_SHAUpdate": {
21
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
22
+ },
23
+ "AbortSystemShutdownA": {
24
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpMachineName']}"
25
+ },
26
+ "AbortSystemShutdownW": {
27
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpMachineName']}"
28
+ },
29
+ "AccessCheck": {
30
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PRIVILEGE_SET', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'ClientToken', 'DesiredAccess', 'GenericMapping', 'PrivilegeSet', 'PrivilegeSetLength', 'GrantedAccess', 'AccessStatus']}"
31
+ },
32
+ "AccessCheckAndAuditAlarmA": {
33
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'ObjectTypeName', 'ObjectName', 'SecurityDescriptor', 'DesiredAccess', 'GenericMapping', 'ObjectCreation', 'GrantedAccess', 'AccessStatus', 'pfGenerateOnClose']}"
34
+ },
35
+ "AccessCheckAndAuditAlarmW": {
36
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'ObjectTypeName', 'ObjectName', 'SecurityDescriptor', 'DesiredAccess', 'GenericMapping', 'ObjectCreation', 'GrantedAccess', 'AccessStatus', 'pfGenerateOnClose']}"
37
+ },
38
+ "AccessCheckByType": {
39
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OBJECT_TYPE_LIST', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PRIVILEGE_SET', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'PrincipalSelfSid', 'ClientToken', 'DesiredAccess', 'ObjectTypeList', 'ObjectTypeListLength', 'GenericMapping', 'PrivilegeSet', 'PrivilegeSetLength', 'GrantedAccess', 'AccessStatus']}"
40
+ },
41
+ "AccessCheckByTypeAndAuditAlarmA": {
42
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'AUDIT_EVENT_TYPE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OBJECT_TYPE_LIST', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'ObjectTypeName', 'ObjectName', 'SecurityDescriptor', 'PrincipalSelfSid', 'DesiredAccess', 'AuditType', 'Flags', 'ObjectTypeList', 'ObjectTypeListLength', 'GenericMapping', 'ObjectCreation', 'GrantedAccess', 'AccessStatus', 'pfGenerateOnClose']}"
43
+ },
44
+ "AccessCheckByTypeAndAuditAlarmW": {
45
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'AUDIT_EVENT_TYPE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OBJECT_TYPE_LIST', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'ObjectTypeName', 'ObjectName', 'SecurityDescriptor', 'PrincipalSelfSid', 'DesiredAccess', 'AuditType', 'Flags', 'ObjectTypeList', 'ObjectTypeListLength', 'GenericMapping', 'ObjectCreation', 'GrantedAccess', 'AccessStatus', 'pfGenerateOnClose']}"
46
+ },
47
+ "AccessCheckByTypeResultList": {
48
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OBJECT_TYPE_LIST', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PRIVILEGE_SET', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'label': 'LPArray'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'PrincipalSelfSid', 'ClientToken', 'DesiredAccess', 'ObjectTypeList', 'ObjectTypeListLength', 'GenericMapping', 'PrivilegeSet', 'PrivilegeSetLength', 'GrantedAccessList', 'AccessStatusList']}"
49
+ },
50
+ "AccessCheckByTypeResultListAndAuditAlarmA": {
51
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'AUDIT_EVENT_TYPE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OBJECT_TYPE_LIST', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'ObjectTypeName', 'ObjectName', 'SecurityDescriptor', 'PrincipalSelfSid', 'DesiredAccess', 'AuditType', 'Flags', 'ObjectTypeList', 'ObjectTypeListLength', 'GenericMapping', 'ObjectCreation', 'GrantedAccess', 'AccessStatusList', 'pfGenerateOnClose']}"
52
+ },
53
+ "AccessCheckByTypeResultListAndAuditAlarmByHandleA": {
54
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'AUDIT_EVENT_TYPE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OBJECT_TYPE_LIST', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'ClientToken', 'ObjectTypeName', 'ObjectName', 'SecurityDescriptor', 'PrincipalSelfSid', 'DesiredAccess', 'AuditType', 'Flags', 'ObjectTypeList', 'ObjectTypeListLength', 'GenericMapping', 'ObjectCreation', 'GrantedAccess', 'AccessStatusList', 'pfGenerateOnClose']}"
55
+ },
56
+ "AccessCheckByTypeResultListAndAuditAlarmByHandleW": {
57
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'AUDIT_EVENT_TYPE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OBJECT_TYPE_LIST', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'ClientToken', 'ObjectTypeName', 'ObjectName', 'SecurityDescriptor', 'PrincipalSelfSid', 'DesiredAccess', 'AuditType', 'Flags', 'ObjectTypeList', 'ObjectTypeListLength', 'GenericMapping', 'ObjectCreation', 'GrantedAccessList', 'AccessStatusList', 'pfGenerateOnClose']}"
58
+ },
59
+ "AccessCheckByTypeResultListAndAuditAlarmW": {
60
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'AUDIT_EVENT_TYPE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OBJECT_TYPE_LIST', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'ObjectTypeName', 'ObjectName', 'SecurityDescriptor', 'PrincipalSelfSid', 'DesiredAccess', 'AuditType', 'Flags', 'ObjectTypeList', 'ObjectTypeListLength', 'GenericMapping', 'ObjectCreation', 'GrantedAccessList', 'AccessStatusList', 'pfGenerateOnClose']}"
61
+ },
62
+ "AddAccessAllowedAce": {
63
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceRevision', 'AccessMask', 'pSid']}"
64
+ },
65
+ "AddAccessAllowedAceEx": {
66
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}, {'_t': '_ref', 'name': 'ACE_FLAGS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceRevision', 'AceFlags', 'AccessMask', 'pSid']}"
67
+ },
68
+ "AddAccessAllowedObjectAce": {
69
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}, {'_t': '_ref', 'name': 'ACE_FLAGS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceRevision', 'AceFlags', 'AccessMask', 'ObjectTypeGuid', 'InheritedObjectTypeGuid', 'pSid']}"
70
+ },
71
+ "AddAccessDeniedAce": {
72
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceRevision', 'AccessMask', 'pSid']}"
73
+ },
74
+ "AddAccessDeniedAceEx": {
75
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}, {'_t': '_ref', 'name': 'ACE_FLAGS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceRevision', 'AceFlags', 'AccessMask', 'pSid']}"
76
+ },
77
+ "AddAccessDeniedObjectAce": {
78
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}, {'_t': '_ref', 'name': 'ACE_FLAGS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceRevision', 'AceFlags', 'AccessMask', 'ObjectTypeGuid', 'InheritedObjectTypeGuid', 'pSid']}"
79
+ },
80
+ "AddAce": {
81
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceRevision', 'dwStartingAceIndex', 'pAceList', 'nAceListLength']}"
82
+ },
83
+ "AddAuditAccessAce": {
84
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceRevision', 'dwAccessMask', 'pSid', 'bAuditSuccess', 'bAuditFailure']}"
85
+ },
86
+ "AddAuditAccessAceEx": {
87
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}, {'_t': '_ref', 'name': 'ACE_FLAGS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceRevision', 'AceFlags', 'dwAccessMask', 'pSid', 'bAuditSuccess', 'bAuditFailure']}"
88
+ },
89
+ "AddAuditAccessObjectAce": {
90
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}, {'_t': '_ref', 'name': 'ACE_FLAGS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceRevision', 'AceFlags', 'AccessMask', 'ObjectTypeGuid', 'InheritedObjectTypeGuid', 'pSid', 'bAuditSuccess', 'bAuditFailure']}"
91
+ },
92
+ "AddConditionalAce": {
93
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}, {'_t': '_ref', 'name': 'ACE_FLAGS', 'ot': 'int'}, {'_t': 'char', 'signed': false, 'label': 'Byte'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceRevision', 'AceFlags', 'AceType', 'AccessMask', 'pSid', 'ConditionStr', 'ReturnLength']}"
94
+ },
95
+ "AddMandatoryAce": {
96
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}, {'_t': '_ref', 'name': 'ACE_FLAGS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceRevision', 'AceFlags', 'MandatoryPolicy', 'pLabelSid']}"
97
+ },
98
+ "AddUsersToEncryptedFile": {
99
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENCRYPTION_CERTIFICATE_LIST', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['lpFileName', 'pEncryptionCertificates']}"
100
+ },
101
+ "AddUsersToEncryptedFileEx": {
102
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
103
+ },
104
+ "AdjustTokenGroups": {
105
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TOKEN_GROUPS', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TOKEN_GROUPS', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TokenHandle', 'ResetToDefault', 'NewState', 'BufferLength', 'PreviousState', 'ReturnLength']}"
106
+ },
107
+ "AdjustTokenPrivileges": {
108
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TOKEN_PRIVILEGES', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TOKEN_PRIVILEGES', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TokenHandle', 'DisableAllPrivileges', 'NewState', 'BufferLength', 'PreviousState', 'ReturnLength']}"
109
+ },
110
+ "AllocateAndInitializeSid": {
111
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SID_IDENTIFIER_AUTHORITY', 'ot': '_ref'}}, {'_t': 'char', 'signed': false, 'label': 'Byte'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pIdentifierAuthority', 'nSubAuthorityCount', 'nSubAuthority0', 'nSubAuthority1', 'nSubAuthority2', 'nSubAuthority3', 'nSubAuthority4', 'nSubAuthority5', 'nSubAuthority6', 'nSubAuthority7', 'pSid']}"
112
+ },
113
+ "AllocateLocallyUniqueId": {
114
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LUID', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['Luid']}"
115
+ },
116
+ "AreAllAccessesGranted": {
117
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['GrantedAccess', 'DesiredAccess']}"
118
+ },
119
+ "AreAnyAccessesGranted": {
120
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['GrantedAccess', 'DesiredAccess']}"
121
+ },
122
+ "AuditComputeEffectivePolicyBySid": {
123
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'AUDIT_POLICY_INFORMATION', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['pSid', 'pSubCategoryGuids', 'dwPolicyCount', 'ppAuditPolicy']}"
124
+ },
125
+ "AuditComputeEffectivePolicyByToken": {
126
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'AUDIT_POLICY_INFORMATION', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['hTokenHandle', 'pSubCategoryGuids', 'dwPolicyCount', 'ppAuditPolicy']}"
127
+ },
128
+ "AuditEnumerateCategories": {
129
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['ppAuditCategoriesArray', 'pdwCountReturned']}"
130
+ },
131
+ "AuditEnumeratePerUserPolicy": {
132
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'POLICY_AUDIT_SID_ARRAY', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['ppAuditSidArray']}"
133
+ },
134
+ "AuditEnumerateSubCategories": {
135
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['pAuditCategoryGuid', 'bRetrieveAllSubCategories', 'ppAuditSubCategoriesArray', 'pdwCountReturned']}"
136
+ },
137
+ "AuditFree": {
138
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['Buffer']}"
139
+ },
140
+ "AuditLookupCategoryGuidFromCategoryId": {
141
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'POLICY_AUDIT_EVENT_TYPE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['AuditCategoryId', 'pAuditCategoryGuid']}"
142
+ },
143
+ "AuditLookupCategoryIdFromCategoryGuid": {
144
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'POLICY_AUDIT_EVENT_TYPE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['pAuditCategoryGuid', 'pAuditCategoryId']}"
145
+ },
146
+ "AuditLookupCategoryNameA": {
147
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSTR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['pAuditCategoryGuid', 'ppszCategoryName']}"
148
+ },
149
+ "AuditLookupCategoryNameW": {
150
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PWSTR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['pAuditCategoryGuid', 'ppszCategoryName']}"
151
+ },
152
+ "AuditLookupSubCategoryNameA": {
153
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSTR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['pAuditSubCategoryGuid', 'ppszSubCategoryName']}"
154
+ },
155
+ "AuditLookupSubCategoryNameW": {
156
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PWSTR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['pAuditSubCategoryGuid', 'ppszSubCategoryName']}"
157
+ },
158
+ "AuditQueryGlobalSaclA": {
159
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['ObjectTypeName', 'Acl']}"
160
+ },
161
+ "AuditQueryGlobalSaclW": {
162
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['ObjectTypeName', 'Acl']}"
163
+ },
164
+ "AuditQueryPerUserPolicy": {
165
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'AUDIT_POLICY_INFORMATION', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['pSid', 'pSubCategoryGuids', 'dwPolicyCount', 'ppAuditPolicy']}"
166
+ },
167
+ "AuditQuerySecurity": {
168
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['SecurityInformation', 'ppSecurityDescriptor']}"
169
+ },
170
+ "AuditQuerySystemPolicy": {
171
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'AUDIT_POLICY_INFORMATION', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['pSubCategoryGuids', 'dwPolicyCount', 'ppAuditPolicy']}"
172
+ },
173
+ "AuditSetGlobalSaclA": {
174
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['ObjectTypeName', 'Acl']}"
175
+ },
176
+ "AuditSetGlobalSaclW": {
177
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['ObjectTypeName', 'Acl']}"
178
+ },
179
+ "AuditSetPerUserPolicy": {
180
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'AUDIT_POLICY_INFORMATION', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['pSid', 'pAuditPolicy', 'dwPolicyCount']}"
181
+ },
182
+ "AuditSetSecurity": {
183
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['SecurityInformation', 'pSecurityDescriptor']}"
184
+ },
185
+ "AuditSetSystemPolicy": {
186
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'AUDIT_POLICY_INFORMATION', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['pAuditPolicy', 'dwPolicyCount']}"
187
+ },
188
+ "BackupEventLogA": {
189
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog', 'lpBackupFileName']}"
190
+ },
191
+ "BackupEventLogW": {
192
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog', 'lpBackupFileName']}"
193
+ },
194
+ "BuildExplicitAccessWithNameA": {
195
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_A', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'ACCESS_MODE', 'ot': 'int'}, {'_t': '_ref', 'name': 'ACE_FLAGS', 'ot': 'int'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pExplicitAccess', 'pTrusteeName', 'AccessPermissions', 'AccessMode', 'Inheritance']}"
196
+ },
197
+ "BuildExplicitAccessWithNameW": {
198
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_W', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'ACCESS_MODE', 'ot': 'int'}, {'_t': '_ref', 'name': 'ACE_FLAGS', 'ot': 'int'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pExplicitAccess', 'pTrusteeName', 'AccessPermissions', 'AccessMode', 'Inheritance']}"
199
+ },
200
+ "BuildImpersonateExplicitAccessWithNameA": {
201
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_A', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'ACCESS_MODE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pExplicitAccess', 'pTrusteeName', 'pTrustee', 'AccessPermissions', 'AccessMode', 'Inheritance']}"
202
+ },
203
+ "BuildImpersonateExplicitAccessWithNameW": {
204
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_W', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'ACCESS_MODE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pExplicitAccess', 'pTrusteeName', 'pTrustee', 'AccessPermissions', 'AccessMode', 'Inheritance']}"
205
+ },
206
+ "BuildImpersonateTrusteeA": {
207
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pTrustee', 'pImpersonateTrustee']}"
208
+ },
209
+ "BuildImpersonateTrusteeW": {
210
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pTrustee', 'pImpersonateTrustee']}"
211
+ },
212
+ "BuildSecurityDescriptorA": {
213
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_A', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_A', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pOwner', 'pGroup', 'cCountOfAccessEntries', 'pListOfAccessEntries', 'cCountOfAuditEntries', 'pListOfAuditEntries', 'pOldSD', 'pSizeNewSD', 'pNewSD']}"
214
+ },
215
+ "BuildSecurityDescriptorW": {
216
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_W', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_W', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pOwner', 'pGroup', 'cCountOfAccessEntries', 'pListOfAccessEntries', 'cCountOfAuditEntries', 'pListOfAuditEntries', 'pOldSD', 'pSizeNewSD', 'pNewSD']}"
217
+ },
218
+ "BuildTrusteeWithNameA": {
219
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pTrustee', 'pName']}"
220
+ },
221
+ "BuildTrusteeWithNameW": {
222
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pTrustee', 'pName']}"
223
+ },
224
+ "BuildTrusteeWithObjectsAndNameA": {
225
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OBJECTS_AND_NAME_A', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pTrustee', 'pObjName', 'ObjectType', 'ObjectTypeName', 'InheritedObjectTypeName', 'Name']}"
226
+ },
227
+ "BuildTrusteeWithObjectsAndNameW": {
228
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OBJECTS_AND_NAME_W', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pTrustee', 'pObjName', 'ObjectType', 'ObjectTypeName', 'InheritedObjectTypeName', 'Name']}"
229
+ },
230
+ "BuildTrusteeWithObjectsAndSidA": {
231
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OBJECTS_AND_SID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pTrustee', 'pObjSid', 'pObjectGuid', 'pInheritedObjectGuid', 'pSid']}"
232
+ },
233
+ "BuildTrusteeWithObjectsAndSidW": {
234
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OBJECTS_AND_SID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pTrustee', 'pObjSid', 'pObjectGuid', 'pInheritedObjectGuid', 'pSid']}"
235
+ },
236
+ "BuildTrusteeWithSidA": {
237
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pTrustee', 'pSid']}"
238
+ },
239
+ "BuildTrusteeWithSidW": {
240
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pTrustee', 'pSid']}"
241
+ },
242
+ "CancelOverlappedAccess": {
243
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
244
+ },
245
+ "ChangeServiceConfig2A": {
246
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SERVICE_CONFIG', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwInfoLevel', 'lpInfo']}"
247
+ },
248
+ "ChangeServiceConfig2W": {
249
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SERVICE_CONFIG', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwInfoLevel', 'lpInfo']}"
250
+ },
251
+ "ChangeServiceConfigA": {
252
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'SERVICE_START_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'SERVICE_ERROR', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwServiceType', 'dwStartType', 'dwErrorControl', 'lpBinaryPathName', 'lpLoadOrderGroup', 'lpdwTagId', 'lpDependencies', 'lpServiceStartName', 'lpPassword', 'lpDisplayName']}"
253
+ },
254
+ "ChangeServiceConfigW": {
255
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'SERVICE_START_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'SERVICE_ERROR', 'ot': 'int'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwServiceType', 'dwStartType', 'dwErrorControl', 'lpBinaryPathName', 'lpLoadOrderGroup', 'lpdwTagId', 'lpDependencies', 'lpServiceStartName', 'lpPassword', 'lpDisplayName']}"
256
+ },
257
+ "CheckForHiberboot": {
258
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['pHiberboot', 'bClearFlag']}"
259
+ },
260
+ "CheckTokenMembership": {
261
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TokenHandle', 'SidToCheck', 'IsMember']}"
262
+ },
263
+ "ClearEventLogA": {
264
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog', 'lpBackupFileName']}"
265
+ },
266
+ "ClearEventLogW": {
267
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog', 'lpBackupFileName']}"
268
+ },
269
+ "CloseCodeAuthzLevel": {
270
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
271
+ },
272
+ "CloseEncryptedFileRaw": {
273
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pvContext']}"
274
+ },
275
+ "CloseEventLog": {
276
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog']}"
277
+ },
278
+ "CloseServiceHandle": {
279
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hSCObject']}"
280
+ },
281
+ "CloseThreadWaitChainSession": {
282
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['WctHandle']}"
283
+ },
284
+ "CloseTrace": {
285
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PROCESSTRACE_HANDLE', 'ot': '_ref'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle']}"
286
+ },
287
+ "CommandLineFromMsiDescriptor": {
288
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Descriptor', 'CommandLine', 'CommandLineLength']}"
289
+ },
290
+ "ComputeAccessTokenFromCodeAuthzLevel": {
291
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
292
+ },
293
+ "ControlService": {
294
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SERVICE_STATUS', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwControl', 'lpServiceStatus']}"
295
+ },
296
+ "ControlServiceExA": {
297
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwControl', 'dwInfoLevel', 'pControlParams']}"
298
+ },
299
+ "ControlServiceExW": {
300
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwControl', 'dwInfoLevel', 'pControlParams']}"
301
+ },
302
+ "ControlTraceA": {
303
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'EVENT_TRACE_CONTROL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'InstanceName', 'Properties', 'ControlCode']}"
304
+ },
305
+ "ControlTraceW": {
306
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'EVENT_TRACE_CONTROL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'InstanceName', 'Properties', 'ControlCode']}"
307
+ },
308
+ "ConvertAccessToSecurityDescriptorA": {
309
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
310
+ },
311
+ "ConvertAccessToSecurityDescriptorW": {
312
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
313
+ },
314
+ "ConvertSDToStringSDRootDomainA": {
315
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
316
+ },
317
+ "ConvertSDToStringSDRootDomainW": {
318
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
319
+ },
320
+ "ConvertSecurityDescriptorToAccessA": {
321
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
322
+ },
323
+ "ConvertSecurityDescriptorToAccessNamedA": {
324
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
325
+ },
326
+ "ConvertSecurityDescriptorToAccessNamedW": {
327
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
328
+ },
329
+ "ConvertSecurityDescriptorToAccessW": {
330
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
331
+ },
332
+ "ConvertSecurityDescriptorToStringSecurityDescriptorA": {
333
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSTR', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SecurityDescriptor', 'RequestedStringSDRevision', 'SecurityInformation', 'StringSecurityDescriptor', 'StringSecurityDescriptorLen']}"
334
+ },
335
+ "ConvertSecurityDescriptorToStringSecurityDescriptorW": {
336
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PWSTR', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SecurityDescriptor', 'RequestedStringSDRevision', 'SecurityInformation', 'StringSecurityDescriptor', 'StringSecurityDescriptorLen']}"
337
+ },
338
+ "ConvertSidToStringSidA": {
339
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSTR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['Sid', 'StringSid']}"
340
+ },
341
+ "ConvertSidToStringSidW": {
342
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PWSTR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['Sid', 'StringSid']}"
343
+ },
344
+ "ConvertStringSDToSDDomainA": {
345
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
346
+ },
347
+ "ConvertStringSDToSDDomainW": {
348
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
349
+ },
350
+ "ConvertStringSDToSDRootDomainA": {
351
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
352
+ },
353
+ "ConvertStringSDToSDRootDomainW": {
354
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
355
+ },
356
+ "ConvertStringSecurityDescriptorToSecurityDescriptorA": {
357
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['StringSecurityDescriptor', 'StringSDRevision', 'SecurityDescriptor', 'SecurityDescriptorSize']}"
358
+ },
359
+ "ConvertStringSecurityDescriptorToSecurityDescriptorW": {
360
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['StringSecurityDescriptor', 'StringSDRevision', 'SecurityDescriptor', 'SecurityDescriptorSize']}"
361
+ },
362
+ "ConvertStringSidToSidA": {
363
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['StringSid', 'Sid']}"
364
+ },
365
+ "ConvertStringSidToSidW": {
366
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['StringSid', 'Sid']}"
367
+ },
368
+ "ConvertToAutoInheritPrivateObjectSecurity": {
369
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ParentDescriptor', 'CurrentSecurityDescriptor', 'NewSecurityDescriptor', 'ObjectType', 'IsDirectoryObject', 'GenericMapping']}"
370
+ },
371
+ "CopySid": {
372
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['nDestinationSidLength', 'pDestinationSid', 'pSourceSid']}"
373
+ },
374
+ "CreateCodeAuthzLevel": {
375
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
376
+ },
377
+ "CreatePrivateObjectSecurity": {
378
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ParentDescriptor', 'CreatorDescriptor', 'NewDescriptor', 'IsDirectoryObject', 'Token', 'GenericMapping']}"
379
+ },
380
+ "CreatePrivateObjectSecurityEx": {
381
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'SECURITY_AUTO_INHERIT_FLAGS', 'ot': 'int'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ParentDescriptor', 'CreatorDescriptor', 'NewDescriptor', 'ObjectType', 'IsContainerObject', 'AutoInheritFlags', 'Token', 'GenericMapping']}"
382
+ },
383
+ "CreatePrivateObjectSecurityWithMultipleInheritance": {
384
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'SECURITY_AUTO_INHERIT_FLAGS', 'ot': 'int'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ParentDescriptor', 'CreatorDescriptor', 'NewDescriptor', 'ObjectTypes', 'GuidCount', 'IsContainerObject', 'AutoInheritFlags', 'Token', 'GenericMapping']}"
385
+ },
386
+ "CreateProcessAsUserA": {
387
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'PROCESS_CREATION_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'STARTUPINFOA', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PROCESS_INFORMATION', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hToken', 'lpApplicationName', 'lpCommandLine', 'lpProcessAttributes', 'lpThreadAttributes', 'bInheritHandles', 'dwCreationFlags', 'lpEnvironment', 'lpCurrentDirectory', 'lpStartupInfo', 'lpProcessInformation']}"
388
+ },
389
+ "CreateProcessAsUserW": {
390
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'PROCESS_CREATION_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'STARTUPINFOW', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PROCESS_INFORMATION', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hToken', 'lpApplicationName', 'lpCommandLine', 'lpProcessAttributes', 'lpThreadAttributes', 'bInheritHandles', 'dwCreationFlags', 'lpEnvironment', 'lpCurrentDirectory', 'lpStartupInfo', 'lpProcessInformation']}"
391
+ },
392
+ "CreateProcessWithLogonW": {
393
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'CREATE_PROCESS_LOGON_FLAGS', 'ot': 'int'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PROCESS_CREATION_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'STARTUPINFOW', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PROCESS_INFORMATION', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpUsername', 'lpDomain', 'lpPassword', 'dwLogonFlags', 'lpApplicationName', 'lpCommandLine', 'dwCreationFlags', 'lpEnvironment', 'lpCurrentDirectory', 'lpStartupInfo', 'lpProcessInformation']}"
394
+ },
395
+ "CreateProcessWithTokenW": {
396
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'CREATE_PROCESS_LOGON_FLAGS', 'ot': 'int'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PROCESS_CREATION_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'STARTUPINFOW', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PROCESS_INFORMATION', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hToken', 'dwLogonFlags', 'lpApplicationName', 'lpCommandLine', 'dwCreationFlags', 'lpEnvironment', 'lpCurrentDirectory', 'lpStartupInfo', 'lpProcessInformation']}"
397
+ },
398
+ "CreateRestrictedToken": {
399
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'CREATE_RESTRICTED_TOKEN_FLAGS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SID_AND_ATTRIBUTES', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LUID_AND_ATTRIBUTES', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SID_AND_ATTRIBUTES', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ExistingTokenHandle', 'Flags', 'DisableSidCount', 'SidsToDisable', 'DeletePrivilegeCount', 'PrivilegesToDelete', 'RestrictedSidCount', 'SidsToRestrict', 'NewTokenHandle']}"
400
+ },
401
+ "CreateServiceA": {
402
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'SERVICE_START_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'SERVICE_ERROR', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, 'arg_names': ['hSCManager', 'lpServiceName', 'lpDisplayName', 'dwDesiredAccess', 'dwServiceType', 'dwStartType', 'dwErrorControl', 'lpBinaryPathName', 'lpLoadOrderGroup', 'lpdwTagId', 'lpDependencies', 'lpServiceStartName', 'lpPassword']}"
403
+ },
404
+ "CreateServiceW": {
405
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'SERVICE_START_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'SERVICE_ERROR', 'ot': 'int'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, 'arg_names': ['hSCManager', 'lpServiceName', 'lpDisplayName', 'dwDesiredAccess', 'dwServiceType', 'dwStartType', 'dwErrorControl', 'lpBinaryPathName', 'lpLoadOrderGroup', 'lpdwTagId', 'lpDependencies', 'lpServiceStartName', 'lpPassword']}"
406
+ },
407
+ "CreateTraceInstanceId": {
408
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_INSTANCE_INFO', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['RegHandle', 'InstInfo']}"
409
+ },
410
+ "CreateWellKnownSid": {
411
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'WELL_KNOWN_SID_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['WellKnownSidType', 'DomainSid', 'pSid', 'cbSid']}"
412
+ },
413
+ "CredBackupCredentials": {
414
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
415
+ },
416
+ "CredDeleteA": {
417
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'CRED_TYPE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TargetName', 'Type', 'Flags']}"
418
+ },
419
+ "CredDeleteW": {
420
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'CRED_TYPE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TargetName', 'Type', 'Flags']}"
421
+ },
422
+ "CredEncryptAndMarshalBinaryBlob": {
423
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
424
+ },
425
+ "CredEnumerateA": {
426
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'CRED_ENUMERATE_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIALA', 'ot': '_ref'}}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['Filter', 'Flags', 'Count', 'Credential']}"
427
+ },
428
+ "CredEnumerateW": {
429
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'CRED_ENUMERATE_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIALW', 'ot': '_ref'}}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['Filter', 'Flags', 'Count', 'Credential']}"
430
+ },
431
+ "CredFindBestCredentialA": {
432
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIALA', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TargetName', 'Type', 'Flags', 'Credential']}"
433
+ },
434
+ "CredFindBestCredentialW": {
435
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIALW', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TargetName', 'Type', 'Flags', 'Credential']}"
436
+ },
437
+ "CredFree": {
438
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['Buffer']}"
439
+ },
440
+ "CredGetSessionTypes": {
441
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'label': 'LPArray'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['MaximumPersistCount', 'MaximumPersist']}"
442
+ },
443
+ "CredGetTargetInfoA": {
444
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIAL_TARGET_INFORMATIONA', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TargetName', 'Flags', 'TargetInfo']}"
445
+ },
446
+ "CredGetTargetInfoW": {
447
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIAL_TARGET_INFORMATIONW', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TargetName', 'Flags', 'TargetInfo']}"
448
+ },
449
+ "CredIsMarshaledCredentialA": {
450
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['MarshaledCredential']}"
451
+ },
452
+ "CredIsMarshaledCredentialW": {
453
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['MarshaledCredential']}"
454
+ },
455
+ "CredIsProtectedA": {
456
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CRED_PROTECTION_TYPE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pszProtectedCredentials', 'pProtectionType']}"
457
+ },
458
+ "CredIsProtectedW": {
459
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CRED_PROTECTION_TYPE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pszProtectedCredentials', 'pProtectionType']}"
460
+ },
461
+ "CredMarshalCredentialA": {
462
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CRED_MARSHAL_TYPE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSTR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['CredType', 'Credential', 'MarshaledCredential']}"
463
+ },
464
+ "CredMarshalCredentialW": {
465
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CRED_MARSHAL_TYPE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PWSTR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['CredType', 'Credential', 'MarshaledCredential']}"
466
+ },
467
+ "CredProfileLoaded": {
468
+ "proto": "{'_t': 'func', 'args': [], 'returnty': {'_t': 'long'}, 'arg_names': []}"
469
+ },
470
+ "CredProfileUnloaded": {
471
+ "proto": "{'_t': 'func', 'args': [], 'returnty': {'_t': 'long'}, 'arg_names': []}"
472
+ },
473
+ "CredProtectA": {
474
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CRED_PROTECTION_TYPE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['fAsSelf', 'pszCredentials', 'cchCredentials', 'pszProtectedCredentials', 'pcchMaxChars', 'ProtectionType']}"
475
+ },
476
+ "CredProtectW": {
477
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CRED_PROTECTION_TYPE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['fAsSelf', 'pszCredentials', 'cchCredentials', 'pszProtectedCredentials', 'pcchMaxChars', 'ProtectionType']}"
478
+ },
479
+ "CredReadA": {
480
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'CRED_TYPE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIALA', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TargetName', 'Type', 'Flags', 'Credential']}"
481
+ },
482
+ "CredReadByTokenHandle": {
483
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
484
+ },
485
+ "CredReadDomainCredentialsA": {
486
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIAL_TARGET_INFORMATIONA', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIALA', 'ot': '_ref'}}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TargetInfo', 'Flags', 'Count', 'Credential']}"
487
+ },
488
+ "CredReadDomainCredentialsW": {
489
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIAL_TARGET_INFORMATIONW', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIALW', 'ot': '_ref'}}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TargetInfo', 'Flags', 'Count', 'Credential']}"
490
+ },
491
+ "CredReadW": {
492
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'CRED_TYPE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIALW', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TargetName', 'Type', 'Flags', 'Credential']}"
493
+ },
494
+ "CredRenameA": {
495
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'CRED_TYPE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['OldTargetName', 'NewTargetName', 'Type', 'Flags']}"
496
+ },
497
+ "CredRenameW": {
498
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'CRED_TYPE', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['OldTargetName', 'NewTargetName', 'Type', 'Flags']}"
499
+ },
500
+ "CredRestoreCredentials": {
501
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
502
+ },
503
+ "CredUnmarshalCredentialA": {
504
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CRED_MARSHAL_TYPE', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['MarshaledCredential', 'CredType', 'Credential']}"
505
+ },
506
+ "CredUnmarshalCredentialW": {
507
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CRED_MARSHAL_TYPE', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['MarshaledCredential', 'CredType', 'Credential']}"
508
+ },
509
+ "CredUnprotectA": {
510
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['fAsSelf', 'pszProtectedCredentials', 'cchProtectedCredentials', 'pszCredentials', 'pcchMaxChars']}"
511
+ },
512
+ "CredUnprotectW": {
513
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['fAsSelf', 'pszProtectedCredentials', 'cchProtectedCredentials', 'pszCredentials', 'pcchMaxChars']}"
514
+ },
515
+ "CredWriteA": {
516
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIALA', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['Credential', 'Flags']}"
517
+ },
518
+ "CredWriteDomainCredentialsA": {
519
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIAL_TARGET_INFORMATIONA', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIALA', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TargetInfo', 'Credential', 'Flags']}"
520
+ },
521
+ "CredWriteDomainCredentialsW": {
522
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIAL_TARGET_INFORMATIONW', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIALW', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TargetInfo', 'Credential', 'Flags']}"
523
+ },
524
+ "CredWriteW": {
525
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CREDENTIALW', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['Credential', 'Flags']}"
526
+ },
527
+ "CredpConvertCredential": {
528
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
529
+ },
530
+ "CredpConvertOneCredentialSize": {
531
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
532
+ },
533
+ "CredpConvertTargetInfo": {
534
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
535
+ },
536
+ "CredpDecodeCredential": {
537
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
538
+ },
539
+ "CredpEncodeCredential": {
540
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
541
+ },
542
+ "CredpEncodeSecret": {
543
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
544
+ },
545
+ "CryptAcquireContextA": {
546
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['phProv', 'szContainer', 'szProvider', 'dwProvType', 'dwFlags']}"
547
+ },
548
+ "CryptAcquireContextW": {
549
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['phProv', 'szContainer', 'szProvider', 'dwProvType', 'dwFlags']}"
550
+ },
551
+ "CryptContextAddRef": {
552
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hProv', 'pdwReserved', 'dwFlags']}"
553
+ },
554
+ "CryptCreateHash": {
555
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'ALG_ID', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hProv', 'Algid', 'hKey', 'dwFlags', 'phHash']}"
556
+ },
557
+ "CryptDecrypt": {
558
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hKey', 'hHash', 'Final', 'dwFlags', 'pbData', 'pdwDataLen']}"
559
+ },
560
+ "CryptDeriveKey": {
561
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'ALG_ID', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hProv', 'Algid', 'hBaseData', 'dwFlags', 'phKey']}"
562
+ },
563
+ "CryptDestroyHash": {
564
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hHash']}"
565
+ },
566
+ "CryptDestroyKey": {
567
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hKey']}"
568
+ },
569
+ "CryptDuplicateHash": {
570
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hHash', 'pdwReserved', 'dwFlags', 'phHash']}"
571
+ },
572
+ "CryptDuplicateKey": {
573
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hKey', 'pdwReserved', 'dwFlags', 'phKey']}"
574
+ },
575
+ "CryptEncrypt": {
576
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hKey', 'hHash', 'Final', 'dwFlags', 'pbData', 'pdwDataLen', 'dwBufLen']}"
577
+ },
578
+ "CryptEnumProviderTypesA": {
579
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['dwIndex', 'pdwReserved', 'dwFlags', 'pdwProvType', 'szTypeName', 'pcbTypeName']}"
580
+ },
581
+ "CryptEnumProviderTypesW": {
582
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['dwIndex', 'pdwReserved', 'dwFlags', 'pdwProvType', 'szTypeName', 'pcbTypeName']}"
583
+ },
584
+ "CryptEnumProvidersA": {
585
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['dwIndex', 'pdwReserved', 'dwFlags', 'pdwProvType', 'szProvName', 'pcbProvName']}"
586
+ },
587
+ "CryptEnumProvidersW": {
588
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['dwIndex', 'pdwReserved', 'dwFlags', 'pdwProvType', 'szProvName', 'pcbProvName']}"
589
+ },
590
+ "CryptExportKey": {
591
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'CRYPT_KEY_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hKey', 'hExpKey', 'dwBlobType', 'dwFlags', 'pbData', 'pdwDataLen']}"
592
+ },
593
+ "CryptGenKey": {
594
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'ALG_ID', 'ot': 'int'}, {'_t': '_ref', 'name': 'CRYPT_KEY_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hProv', 'Algid', 'dwFlags', 'phKey']}"
595
+ },
596
+ "CryptGenRandom": {
597
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hProv', 'dwLen', 'pbBuffer']}"
598
+ },
599
+ "CryptGetDefaultProviderA": {
600
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['dwProvType', 'pdwReserved', 'dwFlags', 'pszProvName', 'pcbProvName']}"
601
+ },
602
+ "CryptGetDefaultProviderW": {
603
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['dwProvType', 'pdwReserved', 'dwFlags', 'pszProvName', 'pcbProvName']}"
604
+ },
605
+ "CryptGetHashParam": {
606
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hHash', 'dwParam', 'pbData', 'pdwDataLen', 'dwFlags']}"
607
+ },
608
+ "CryptGetKeyParam": {
609
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'CRYPT_KEY_PARAM_ID', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hKey', 'dwParam', 'pbData', 'pdwDataLen', 'dwFlags']}"
610
+ },
611
+ "CryptGetProvParam": {
612
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hProv', 'dwParam', 'pbData', 'pdwDataLen', 'dwFlags']}"
613
+ },
614
+ "CryptGetUserKey": {
615
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hProv', 'dwKeySpec', 'phUserKey']}"
616
+ },
617
+ "CryptHashData": {
618
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hHash', 'pbData', 'dwDataLen', 'dwFlags']}"
619
+ },
620
+ "CryptHashSessionKey": {
621
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hHash', 'hKey', 'dwFlags']}"
622
+ },
623
+ "CryptImportKey": {
624
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'CRYPT_KEY_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hProv', 'pbData', 'dwDataLen', 'hPubKey', 'dwFlags', 'phKey']}"
625
+ },
626
+ "CryptReleaseContext": {
627
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hProv', 'dwFlags']}"
628
+ },
629
+ "CryptSetHashParam": {
630
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'CRYPT_SET_HASH_PARAM', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hHash', 'dwParam', 'pbData', 'dwFlags']}"
631
+ },
632
+ "CryptSetKeyParam": {
633
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'CRYPT_KEY_PARAM_ID', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hKey', 'dwParam', 'pbData', 'dwFlags']}"
634
+ },
635
+ "CryptSetProvParam": {
636
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'CRYPT_SET_PROV_PARAM_ID', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hProv', 'dwParam', 'pbData', 'dwFlags']}"
637
+ },
638
+ "CryptSetProviderA": {
639
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pszProvName', 'dwProvType']}"
640
+ },
641
+ "CryptSetProviderExA": {
642
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pszProvName', 'dwProvType', 'pdwReserved', 'dwFlags']}"
643
+ },
644
+ "CryptSetProviderExW": {
645
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pszProvName', 'dwProvType', 'pdwReserved', 'dwFlags']}"
646
+ },
647
+ "CryptSetProviderW": {
648
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pszProvName', 'dwProvType']}"
649
+ },
650
+ "CryptSignHashA": {
651
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hHash', 'dwKeySpec', 'szDescription', 'dwFlags', 'pbSignature', 'pdwSigLen']}"
652
+ },
653
+ "CryptSignHashW": {
654
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hHash', 'dwKeySpec', 'szDescription', 'dwFlags', 'pbSignature', 'pdwSigLen']}"
655
+ },
656
+ "CryptVerifySignatureA": {
657
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hHash', 'pbSignature', 'dwSigLen', 'hPubKey', 'szDescription', 'dwFlags']}"
658
+ },
659
+ "CryptVerifySignatureW": {
660
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hHash', 'pbSignature', 'dwSigLen', 'hPubKey', 'szDescription', 'dwFlags']}"
661
+ },
662
+ "CveEventWrite": {
663
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': 'int', 'label': 'Int32'}, 'arg_names': ['CveId', 'AdditionalDetails']}"
664
+ },
665
+ "DecryptFileA": {
666
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpFileName', 'dwReserved']}"
667
+ },
668
+ "DecryptFileW": {
669
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpFileName', 'dwReserved']}"
670
+ },
671
+ "DeleteAce": {
672
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceIndex']}"
673
+ },
674
+ "DeleteService": {
675
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService']}"
676
+ },
677
+ "DeregisterEventSource": {
678
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog']}"
679
+ },
680
+ "DestroyPrivateObjectSecurity": {
681
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ObjectDescriptor']}"
682
+ },
683
+ "DuplicateEncryptionInfoFile": {
684
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['SrcFileName', 'DstFileName', 'dwCreationDistribution', 'dwAttributes', 'lpSecurityAttributes']}"
685
+ },
686
+ "DuplicateToken": {
687
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SECURITY_IMPERSONATION_LEVEL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ExistingTokenHandle', 'ImpersonationLevel', 'DuplicateTokenHandle']}"
688
+ },
689
+ "DuplicateTokenEx": {
690
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'TOKEN_ACCESS_MASK', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'SECURITY_IMPERSONATION_LEVEL', 'ot': 'int'}, {'_t': '_ref', 'name': 'TOKEN_TYPE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hExistingToken', 'dwDesiredAccess', 'lpTokenAttributes', 'ImpersonationLevel', 'TokenType', 'phNewToken']}"
691
+ },
692
+ "ElfBackupEventLogFileA": {
693
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
694
+ },
695
+ "ElfBackupEventLogFileW": {
696
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
697
+ },
698
+ "ElfChangeNotify": {
699
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
700
+ },
701
+ "ElfClearEventLogFileA": {
702
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
703
+ },
704
+ "ElfClearEventLogFileW": {
705
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
706
+ },
707
+ "ElfCloseEventLog": {
708
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
709
+ },
710
+ "ElfDeregisterEventSource": {
711
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
712
+ },
713
+ "ElfFlushEventLog": {
714
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
715
+ },
716
+ "ElfNumberOfRecords": {
717
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
718
+ },
719
+ "ElfOldestRecord": {
720
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
721
+ },
722
+ "ElfOpenBackupEventLogA": {
723
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
724
+ },
725
+ "ElfOpenBackupEventLogW": {
726
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
727
+ },
728
+ "ElfOpenEventLogA": {
729
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
730
+ },
731
+ "ElfOpenEventLogW": {
732
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
733
+ },
734
+ "ElfReadEventLogA": {
735
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
736
+ },
737
+ "ElfReadEventLogW": {
738
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
739
+ },
740
+ "ElfRegisterEventSourceA": {
741
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
742
+ },
743
+ "ElfRegisterEventSourceW": {
744
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
745
+ },
746
+ "ElfReportEventA": {
747
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
748
+ },
749
+ "ElfReportEventAndSourceW": {
750
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
751
+ },
752
+ "ElfReportEventW": {
753
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
754
+ },
755
+ "EnableTrace": {
756
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['Enable', 'EnableFlag', 'EnableLevel', 'ControlGuid', 'TraceHandle']}"
757
+ },
758
+ "EnableTraceEx": {
759
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'char', 'signed': false, 'label': 'Byte'}, {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_FILTER_DESCRIPTOR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['ProviderId', 'SourceId', 'TraceHandle', 'IsEnabled', 'Level', 'MatchAnyKeyword', 'MatchAllKeyword', 'EnableProperty', 'EnableFilterDesc']}"
760
+ },
761
+ "EnableTraceEx2": {
762
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'char', 'signed': false, 'label': 'Byte'}, {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENABLE_TRACE_PARAMETERS', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'ProviderId', 'ControlCode', 'Level', 'MatchAnyKeyword', 'MatchAllKeyword', 'Timeout', 'EnableParameters']}"
763
+ },
764
+ "EncryptFileA": {
765
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpFileName']}"
766
+ },
767
+ "EncryptFileW": {
768
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpFileName']}"
769
+ },
770
+ "EncryptedFileKeyInfo": {
771
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
772
+ },
773
+ "EncryptionDisable": {
774
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['DirPath', 'Disable']}"
775
+ },
776
+ "EnumDependentServicesA": {
777
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_STATE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENUM_SERVICE_STATUSA', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwServiceState', 'lpServices', 'cbBufSize', 'pcbBytesNeeded', 'lpServicesReturned']}"
778
+ },
779
+ "EnumDependentServicesW": {
780
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_STATE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENUM_SERVICE_STATUSW', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwServiceState', 'lpServices', 'cbBufSize', 'pcbBytesNeeded', 'lpServicesReturned']}"
781
+ },
782
+ "EnumDynamicTimeZoneInformation": {
783
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'DYNAMIC_TIME_ZONE_INFORMATION', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['dwIndex', 'lpTimeZoneInformation']}"
784
+ },
785
+ "EnumServiceGroupW": {
786
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
787
+ },
788
+ "EnumServicesStatusA": {
789
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_STATE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENUM_SERVICE_STATUSA', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hSCManager', 'dwServiceType', 'dwServiceState', 'lpServices', 'cbBufSize', 'pcbBytesNeeded', 'lpServicesReturned', 'lpResumeHandle']}"
790
+ },
791
+ "EnumServicesStatusExA": {
792
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SC_ENUM_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_STATE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hSCManager', 'InfoLevel', 'dwServiceType', 'dwServiceState', 'lpServices', 'cbBufSize', 'pcbBytesNeeded', 'lpServicesReturned', 'lpResumeHandle', 'pszGroupName']}"
793
+ },
794
+ "EnumServicesStatusExW": {
795
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SC_ENUM_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_STATE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hSCManager', 'InfoLevel', 'dwServiceType', 'dwServiceState', 'lpServices', 'cbBufSize', 'pcbBytesNeeded', 'lpServicesReturned', 'lpResumeHandle', 'pszGroupName']}"
796
+ },
797
+ "EnumServicesStatusW": {
798
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'ENUM_SERVICE_STATE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENUM_SERVICE_STATUSW', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hSCManager', 'dwServiceType', 'dwServiceState', 'lpServices', 'cbBufSize', 'pcbBytesNeeded', 'lpServicesReturned', 'lpResumeHandle']}"
799
+ },
800
+ "EnumerateTraceGuids": {
801
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRACE_GUID_PROPERTIES', 'ot': '_ref'}}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['GuidPropertiesArray', 'PropertyArrayCount', 'GuidCount']}"
802
+ },
803
+ "EnumerateTraceGuidsEx": {
804
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'TRACE_QUERY_INFO_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceQueryInfoClass', 'InBuffer', 'InBufferSize', 'OutBuffer', 'OutBufferSize', 'ReturnLength']}"
805
+ },
806
+ "EqualDomainSid": {
807
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSid1', 'pSid2', 'pfEqual']}"
808
+ },
809
+ "EqualPrefixSid": {
810
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSid1', 'pSid2']}"
811
+ },
812
+ "EqualSid": {
813
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSid1', 'pSid2']}"
814
+ },
815
+ "EventAccessControl": {
816
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Guid', 'Operation', 'Sid', 'Rights', 'AllowOrDeny']}"
817
+ },
818
+ "EventAccessQuery": {
819
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Guid', 'Buffer', 'BufferSize']}"
820
+ },
821
+ "EventAccessRemove": {
822
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Guid']}"
823
+ },
824
+ "EventActivityIdControl": {
825
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['ControlCode', 'ActivityId']}"
826
+ },
827
+ "EventEnabled": {
828
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_DESCRIPTOR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['RegHandle', 'EventDescriptor']}"
829
+ },
830
+ "EventProviderEnabled": {
831
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'char', 'signed': false, 'label': 'Byte'}, {'_t': 'llong', 'signed': false, 'label': 'UInt64'}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['RegHandle', 'Level', 'Keyword']}"
832
+ },
833
+ "EventRegister": {
834
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'ENABLECALLBACK_ENABLED_STATE', 'ot': 'int'}, {'_t': 'char', 'signed': false, 'label': 'Byte'}, {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_FILTER_DESCRIPTOR', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['SourceId', 'IsEnabled', 'Level', 'MatchAnyKeyword', 'MatchAllKeyword', 'FilterData', 'CallbackContext']}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'llong', 'signed': false, 'label': 'UInt64'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['ProviderId', 'EnableCallback', 'CallbackContext', 'RegHandle']}"
835
+ },
836
+ "EventSetInformation": {
837
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': '_ref', 'name': 'EVENT_INFO_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['RegHandle', 'InformationClass', 'EventInformation', 'InformationLength']}"
838
+ },
839
+ "EventUnregister": {
840
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['RegHandle']}"
841
+ },
842
+ "EventWrite": {
843
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_DESCRIPTOR', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_DATA_DESCRIPTOR', 'ot': '_ref'}, 'label': 'LPArray'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['RegHandle', 'EventDescriptor', 'UserDataCount', 'UserData']}"
844
+ },
845
+ "EventWriteEndScenario": {
846
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
847
+ },
848
+ "EventWriteEx": {
849
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_DESCRIPTOR', 'ot': '_ref'}}, {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_DATA_DESCRIPTOR', 'ot': '_ref'}, 'label': 'LPArray'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['RegHandle', 'EventDescriptor', 'Filter', 'Flags', 'ActivityId', 'RelatedActivityId', 'UserDataCount', 'UserData']}"
850
+ },
851
+ "EventWriteStartScenario": {
852
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
853
+ },
854
+ "EventWriteString": {
855
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'char', 'signed': false, 'label': 'Byte'}, {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['RegHandle', 'Level', 'Keyword', 'String']}"
856
+ },
857
+ "EventWriteTransfer": {
858
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_DESCRIPTOR', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_DATA_DESCRIPTOR', 'ot': '_ref'}, 'label': 'LPArray'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['RegHandle', 'EventDescriptor', 'ActivityId', 'RelatedActivityId', 'UserDataCount', 'UserData']}"
859
+ },
860
+ "FileEncryptionStatusA": {
861
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpFileName', 'lpStatus']}"
862
+ },
863
+ "FileEncryptionStatusW": {
864
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpFileName', 'lpStatus']}"
865
+ },
866
+ "FindFirstFreeAce": {
867
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'pAce']}"
868
+ },
869
+ "FlushEfsCache": {
870
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
871
+ },
872
+ "FlushTraceA": {
873
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'InstanceName', 'Properties']}"
874
+ },
875
+ "FlushTraceW": {
876
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'InstanceName', 'Properties']}"
877
+ },
878
+ "FreeEncryptedFileKeyInfo": {
879
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
880
+ },
881
+ "FreeEncryptedFileMetadata": {
882
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pbMetadata']}"
883
+ },
884
+ "FreeEncryptionCertificateHashList": {
885
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENCRYPTION_CERTIFICATE_HASH_LIST', 'ot': '_ref'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pUsers']}"
886
+ },
887
+ "FreeInheritedFromArray": {
888
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'INHERITED_FROMW', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'short', 'signed': false, 'label': 'UInt16'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'FN_OBJECT_MGR_FUNCTS', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pInheritArray', 'AceCnt', 'pfnArray']}"
889
+ },
890
+ "FreeSid": {
891
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, 'arg_names': ['pSid']}"
892
+ },
893
+ "GetAccessPermissionsForObjectA": {
894
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
895
+ },
896
+ "GetAccessPermissionsForObjectW": {
897
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
898
+ },
899
+ "GetAce": {
900
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'dwAceIndex', 'pAce']}"
901
+ },
902
+ "GetAclInformation": {
903
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'ACL_INFORMATION_CLASS', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'pAclInformation', 'nAclInformationLength', 'dwAclInformationClass']}"
904
+ },
905
+ "GetAuditedPermissionsFromAclA": {
906
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pacl', 'pTrustee', 'pSuccessfulAuditedRights', 'pFailedAuditRights']}"
907
+ },
908
+ "GetAuditedPermissionsFromAclW": {
909
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pacl', 'pTrustee', 'pSuccessfulAuditedRights', 'pFailedAuditRights']}"
910
+ },
911
+ "GetCurrentHwProfileA": {
912
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HW_PROFILE_INFOA', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpHwProfileInfo']}"
913
+ },
914
+ "GetCurrentHwProfileW": {
915
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HW_PROFILE_INFOW', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpHwProfileInfo']}"
916
+ },
917
+ "GetDynamicTimeZoneInformationEffectiveYears": {
918
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'DYNAMIC_TIME_ZONE_INFORMATION', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['lpTimeZoneInformation', 'FirstYear', 'LastYear']}"
919
+ },
920
+ "GetEffectiveRightsFromAclA": {
921
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pacl', 'pTrustee', 'pAccessRights']}"
922
+ },
923
+ "GetEffectiveRightsFromAclW": {
924
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pacl', 'pTrustee', 'pAccessRights']}"
925
+ },
926
+ "GetEncryptedFileMetadata": {
927
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['lpFileName', 'pcbMetadata', 'ppbMetadata']}"
928
+ },
929
+ "GetEventLogInformation": {
930
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog', 'dwInfoLevel', 'lpBuffer', 'cbBufSize', 'pcbBytesNeeded']}"
931
+ },
932
+ "GetExplicitEntriesFromAclA": {
933
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_A', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pacl', 'pcCountOfExplicitEntries', 'pListOfExplicitEntries']}"
934
+ },
935
+ "GetExplicitEntriesFromAclW": {
936
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_W', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pacl', 'pcCountOfExplicitEntries', 'pListOfExplicitEntries']}"
937
+ },
938
+ "GetFileSecurityA": {
939
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpFileName', 'RequestedInformation', 'pSecurityDescriptor', 'nLength', 'lpnLengthNeeded']}"
940
+ },
941
+ "GetFileSecurityW": {
942
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpFileName', 'RequestedInformation', 'pSecurityDescriptor', 'nLength', 'lpnLengthNeeded']}"
943
+ },
944
+ "GetInformationCodeAuthzLevelW": {
945
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
946
+ },
947
+ "GetInformationCodeAuthzPolicyW": {
948
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
949
+ },
950
+ "GetInheritanceSourceA": {
951
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'FN_OBJECT_MGR_FUNCTS', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'INHERITED_FROMA', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pObjectName', 'ObjectType', 'SecurityInfo', 'Container', 'pObjectClassGuids', 'GuidCount', 'pAcl', 'pfnArray', 'pGenericMapping', 'pInheritArray']}"
952
+ },
953
+ "GetInheritanceSourceW": {
954
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'FN_OBJECT_MGR_FUNCTS', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'INHERITED_FROMW', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pObjectName', 'ObjectType', 'SecurityInfo', 'Container', 'pObjectClassGuids', 'GuidCount', 'pAcl', 'pfnArray', 'pGenericMapping', 'pInheritArray']}"
955
+ },
956
+ "GetKernelObjectSecurity": {
957
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['Handle', 'RequestedInformation', 'pSecurityDescriptor', 'nLength', 'lpnLengthNeeded']}"
958
+ },
959
+ "GetLengthSid": {
960
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['pSid']}"
961
+ },
962
+ "GetLocalManagedApplicationData": {
963
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PWSTR', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PWSTR', 'ot': '_ref'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['ProductCode', 'DisplayName', 'SupportUrl']}"
964
+ },
965
+ "GetLocalManagedApplications": {
966
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LOCALMANAGEDAPPLICATION', 'ot': '_ref'}}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['bUserApps', 'pdwApps', 'prgLocalApps']}"
967
+ },
968
+ "GetManagedApplicationCategories": {
969
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'APPCATEGORYINFOLIST', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['dwReserved', 'pAppCategory']}"
970
+ },
971
+ "GetManagedApplications": {
972
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'MANAGEDAPPLICATION', 'ot': '_ref'}}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['pCategory', 'dwQueryFlags', 'dwInfoLevel', 'pdwApps', 'prgManagedApps']}"
973
+ },
974
+ "GetMultipleTrusteeA": {
975
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}], 'returnty': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}, 'arg_names': ['pTrustee']}"
976
+ },
977
+ "GetMultipleTrusteeOperationA": {
978
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'MULTIPLE_TRUSTEE_OPERATION', 'ot': 'int'}, 'arg_names': ['pTrustee']}"
979
+ },
980
+ "GetMultipleTrusteeOperationW": {
981
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'MULTIPLE_TRUSTEE_OPERATION', 'ot': 'int'}, 'arg_names': ['pTrustee']}"
982
+ },
983
+ "GetMultipleTrusteeW": {
984
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}], 'returnty': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}, 'arg_names': ['pTrustee']}"
985
+ },
986
+ "GetNamedSecurityInfoA": {
987
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pObjectName', 'ObjectType', 'SecurityInfo', 'ppsidOwner', 'ppsidGroup', 'ppDacl', 'ppSacl', 'ppSecurityDescriptor']}"
988
+ },
989
+ "GetNamedSecurityInfoExA": {
990
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
991
+ },
992
+ "GetNamedSecurityInfoExW": {
993
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
994
+ },
995
+ "GetNamedSecurityInfoW": {
996
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pObjectName', 'ObjectType', 'SecurityInfo', 'ppsidOwner', 'ppsidGroup', 'ppDacl', 'ppSacl', 'ppSecurityDescriptor']}"
997
+ },
998
+ "GetNumberOfEventLogRecords": {
999
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog', 'NumberOfRecords']}"
1000
+ },
1001
+ "GetOldestEventLogRecord": {
1002
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog', 'OldestRecord']}"
1003
+ },
1004
+ "GetOverlappedAccessResults": {
1005
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1006
+ },
1007
+ "GetPrivateObjectSecurity": {
1008
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ObjectDescriptor', 'SecurityInformation', 'ResultantDescriptor', 'DescriptorLength', 'ReturnLength']}"
1009
+ },
1010
+ "GetSecurityDescriptorControl": {
1011
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'short', 'signed': false, 'label': 'UInt16'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'pControl', 'lpdwRevision']}"
1012
+ },
1013
+ "GetSecurityDescriptorDacl": {
1014
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'lpbDaclPresent', 'pDacl', 'lpbDaclDefaulted']}"
1015
+ },
1016
+ "GetSecurityDescriptorGroup": {
1017
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'pGroup', 'lpbGroupDefaulted']}"
1018
+ },
1019
+ "GetSecurityDescriptorLength": {
1020
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['pSecurityDescriptor']}"
1021
+ },
1022
+ "GetSecurityDescriptorOwner": {
1023
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'pOwner', 'lpbOwnerDefaulted']}"
1024
+ },
1025
+ "GetSecurityDescriptorRMControl": {
1026
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['SecurityDescriptor', 'RMControl']}"
1027
+ },
1028
+ "GetSecurityDescriptorSacl": {
1029
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'lpbSaclPresent', 'pSacl', 'lpbSaclDefaulted']}"
1030
+ },
1031
+ "GetSecurityInfo": {
1032
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['handle', 'ObjectType', 'SecurityInfo', 'ppsidOwner', 'ppsidGroup', 'ppDacl', 'ppSacl', 'ppSecurityDescriptor']}"
1033
+ },
1034
+ "GetSecurityInfoExA": {
1035
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1036
+ },
1037
+ "GetSecurityInfoExW": {
1038
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1039
+ },
1040
+ "GetServiceDisplayNameA": {
1041
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hSCManager', 'lpServiceName', 'lpDisplayName', 'lpcchBuffer']}"
1042
+ },
1043
+ "GetServiceDisplayNameW": {
1044
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hSCManager', 'lpServiceName', 'lpDisplayName', 'lpcchBuffer']}"
1045
+ },
1046
+ "GetServiceKeyNameA": {
1047
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hSCManager', 'lpDisplayName', 'lpServiceName', 'lpcchBuffer']}"
1048
+ },
1049
+ "GetServiceKeyNameW": {
1050
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hSCManager', 'lpDisplayName', 'lpServiceName', 'lpcchBuffer']}"
1051
+ },
1052
+ "GetSidIdentifierAuthority": {
1053
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SID_IDENTIFIER_AUTHORITY', 'ot': '_ref'}}, 'arg_names': ['pSid']}"
1054
+ },
1055
+ "GetSidLengthRequired": {
1056
+ "proto": "{'_t': 'func', 'args': [{'_t': 'char', 'signed': false, 'label': 'Byte'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['nSubAuthorityCount']}"
1057
+ },
1058
+ "GetSidSubAuthority": {
1059
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, 'arg_names': ['pSid', 'nSubAuthority']}"
1060
+ },
1061
+ "GetSidSubAuthorityCount": {
1062
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, 'arg_names': ['pSid']}"
1063
+ },
1064
+ "GetThreadWaitChain": {
1065
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'WAIT_CHAIN_THREAD_OPTIONS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'WAITCHAIN_NODE_INFO', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['WctHandle', 'Context', 'Flags', 'ThreadId', 'NodeCount', 'NodeInfoArray', 'IsCycle']}"
1066
+ },
1067
+ "GetTokenInformation": {
1068
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'TOKEN_INFORMATION_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TokenHandle', 'TokenInformationClass', 'TokenInformation', 'TokenInformationLength', 'ReturnLength']}"
1069
+ },
1070
+ "GetTraceEnableFlags": {
1071
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['TraceHandle']}"
1072
+ },
1073
+ "GetTraceEnableLevel": {
1074
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}], 'returnty': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'arg_names': ['TraceHandle']}"
1075
+ },
1076
+ "GetTraceLoggerHandle": {
1077
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, 'arg_names': ['Buffer']}"
1078
+ },
1079
+ "GetTrusteeFormA": {
1080
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'TRUSTEE_FORM', 'ot': 'int'}, 'arg_names': ['pTrustee']}"
1081
+ },
1082
+ "GetTrusteeFormW": {
1083
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'TRUSTEE_FORM', 'ot': 'int'}, 'arg_names': ['pTrustee']}"
1084
+ },
1085
+ "GetTrusteeNameA": {
1086
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, 'arg_names': ['pTrustee']}"
1087
+ },
1088
+ "GetTrusteeNameW": {
1089
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, 'arg_names': ['pTrustee']}"
1090
+ },
1091
+ "GetTrusteeTypeA": {
1092
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'TRUSTEE_TYPE', 'ot': 'int'}, 'arg_names': ['pTrustee']}"
1093
+ },
1094
+ "GetTrusteeTypeW": {
1095
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'TRUSTEE_TYPE', 'ot': 'int'}, 'arg_names': ['pTrustee']}"
1096
+ },
1097
+ "GetUserNameA": {
1098
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpBuffer', 'pcbBuffer']}"
1099
+ },
1100
+ "GetUserNameW": {
1101
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpBuffer', 'pcbBuffer']}"
1102
+ },
1103
+ "GetWindowsAccountDomainSid": {
1104
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSid', 'pDomainSid', 'cbDomainSid']}"
1105
+ },
1106
+ "I_QueryTagInformation": {
1107
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1108
+ },
1109
+ "I_ScGetCurrentGroupStateW": {
1110
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1111
+ },
1112
+ "I_ScIsSecurityProcess": {
1113
+ "proto": "{'_t': 'func', 'args': [], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1114
+ },
1115
+ "I_ScPnPGetServiceName": {
1116
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1117
+ },
1118
+ "I_ScQueryServiceConfig": {
1119
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1120
+ },
1121
+ "I_ScSendPnPMessage": {
1122
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1123
+ },
1124
+ "I_ScSendTSMessage": {
1125
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1126
+ },
1127
+ "I_ScSetServiceBitsA": {
1128
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1129
+ },
1130
+ "I_ScSetServiceBitsW": {
1131
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1132
+ },
1133
+ "I_ScValidatePnPService": {
1134
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1135
+ },
1136
+ "IdentifyCodeAuthzLevelW": {
1137
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1138
+ },
1139
+ "ImpersonateAnonymousToken": {
1140
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ThreadHandle']}"
1141
+ },
1142
+ "ImpersonateLoggedOnUser": {
1143
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hToken']}"
1144
+ },
1145
+ "ImpersonateNamedPipeClient": {
1146
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hNamedPipe']}"
1147
+ },
1148
+ "ImpersonateSelf": {
1149
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SECURITY_IMPERSONATION_LEVEL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ImpersonationLevel']}"
1150
+ },
1151
+ "InitializeAcl": {
1152
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'ACE_REVISION', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'nAclLength', 'dwAclRevision']}"
1153
+ },
1154
+ "InitializeSecurityDescriptor": {
1155
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'dwRevision']}"
1156
+ },
1157
+ "InitializeSid": {
1158
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SID_IDENTIFIER_AUTHORITY', 'ot': '_ref'}}, {'_t': 'char', 'signed': false, 'label': 'Byte'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['Sid', 'pIdentifierAuthority', 'nSubAuthorityCount']}"
1159
+ },
1160
+ "InitiateShutdownA": {
1161
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'SHUTDOWN_FLAGS', 'ot': 'int'}, {'_t': '_ref', 'name': 'SHUTDOWN_REASON', 'ot': 'int'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['lpMachineName', 'lpMessage', 'dwGracePeriod', 'dwShutdownFlags', 'dwReason']}"
1162
+ },
1163
+ "InitiateShutdownW": {
1164
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'SHUTDOWN_FLAGS', 'ot': 'int'}, {'_t': '_ref', 'name': 'SHUTDOWN_REASON', 'ot': 'int'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['lpMachineName', 'lpMessage', 'dwGracePeriod', 'dwShutdownFlags', 'dwReason']}"
1165
+ },
1166
+ "InitiateSystemShutdownA": {
1167
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpMachineName', 'lpMessage', 'dwTimeout', 'bForceAppsClosed', 'bRebootAfterShutdown']}"
1168
+ },
1169
+ "InitiateSystemShutdownExA": {
1170
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'SHUTDOWN_REASON', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpMachineName', 'lpMessage', 'dwTimeout', 'bForceAppsClosed', 'bRebootAfterShutdown', 'dwReason']}"
1171
+ },
1172
+ "InitiateSystemShutdownExW": {
1173
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'SHUTDOWN_REASON', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpMachineName', 'lpMessage', 'dwTimeout', 'bForceAppsClosed', 'bRebootAfterShutdown', 'dwReason']}"
1174
+ },
1175
+ "InitiateSystemShutdownW": {
1176
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpMachineName', 'lpMessage', 'dwTimeout', 'bForceAppsClosed', 'bRebootAfterShutdown']}"
1177
+ },
1178
+ "InstallApplication": {
1179
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'INSTALLDATA', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['pInstallInfo']}"
1180
+ },
1181
+ "IsTextUnicode": {
1182
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'label': 'Int32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'IS_TEXT_UNICODE_RESULT', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpv', 'iSize', 'lpiResult']}"
1183
+ },
1184
+ "IsTokenRestricted": {
1185
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TokenHandle']}"
1186
+ },
1187
+ "IsTokenUntrusted": {
1188
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TokenHandle']}"
1189
+ },
1190
+ "IsValidAcl": {
1191
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl']}"
1192
+ },
1193
+ "IsValidRelativeSecurityDescriptor": {
1194
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1195
+ },
1196
+ "IsValidSecurityDescriptor": {
1197
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor']}"
1198
+ },
1199
+ "IsValidSid": {
1200
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSid']}"
1201
+ },
1202
+ "IsWellKnownSid": {
1203
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'WELL_KNOWN_SID_TYPE', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSid', 'WellKnownSidType']}"
1204
+ },
1205
+ "LockServiceDatabase": {
1206
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, 'arg_names': ['hSCManager']}"
1207
+ },
1208
+ "LogonUserA": {
1209
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'LOGON32_LOGON', 'ot': 'int'}, {'_t': '_ref', 'name': 'LOGON32_PROVIDER', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpszUsername', 'lpszDomain', 'lpszPassword', 'dwLogonType', 'dwLogonProvider', 'phToken']}"
1210
+ },
1211
+ "LogonUserExA": {
1212
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'LOGON32_LOGON', 'ot': 'int'}, {'_t': '_ref', 'name': 'LOGON32_PROVIDER', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'QUOTA_LIMITS', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpszUsername', 'lpszDomain', 'lpszPassword', 'dwLogonType', 'dwLogonProvider', 'phToken', 'ppLogonSid', 'ppProfileBuffer', 'pdwProfileLength', 'pQuotaLimits']}"
1213
+ },
1214
+ "LogonUserExExW": {
1215
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1216
+ },
1217
+ "LogonUserExW": {
1218
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'LOGON32_LOGON', 'ot': 'int'}, {'_t': '_ref', 'name': 'LOGON32_PROVIDER', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'QUOTA_LIMITS', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpszUsername', 'lpszDomain', 'lpszPassword', 'dwLogonType', 'dwLogonProvider', 'phToken', 'ppLogonSid', 'ppProfileBuffer', 'pdwProfileLength', 'pQuotaLimits']}"
1219
+ },
1220
+ "LogonUserW": {
1221
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'LOGON32_LOGON', 'ot': 'int'}, {'_t': '_ref', 'name': 'LOGON32_PROVIDER', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpszUsername', 'lpszDomain', 'lpszPassword', 'dwLogonType', 'dwLogonProvider', 'phToken']}"
1222
+ },
1223
+ "LookupAccountNameA": {
1224
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SID_NAME_USE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpSystemName', 'lpAccountName', 'Sid', 'cbSid', 'ReferencedDomainName', 'cchReferencedDomainName', 'peUse']}"
1225
+ },
1226
+ "LookupAccountNameW": {
1227
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SID_NAME_USE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpSystemName', 'lpAccountName', 'Sid', 'cbSid', 'ReferencedDomainName', 'cchReferencedDomainName', 'peUse']}"
1228
+ },
1229
+ "LookupAccountSidA": {
1230
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SID_NAME_USE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpSystemName', 'Sid', 'Name', 'cchName', 'ReferencedDomainName', 'cchReferencedDomainName', 'peUse']}"
1231
+ },
1232
+ "LookupAccountSidW": {
1233
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SID_NAME_USE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpSystemName', 'Sid', 'Name', 'cchName', 'ReferencedDomainName', 'cchReferencedDomainName', 'peUse']}"
1234
+ },
1235
+ "LookupPrivilegeDisplayNameA": {
1236
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpSystemName', 'lpName', 'lpDisplayName', 'cchDisplayName', 'lpLanguageId']}"
1237
+ },
1238
+ "LookupPrivilegeDisplayNameW": {
1239
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpSystemName', 'lpName', 'lpDisplayName', 'cchDisplayName', 'lpLanguageId']}"
1240
+ },
1241
+ "LookupPrivilegeNameA": {
1242
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LUID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpSystemName', 'lpLuid', 'lpName', 'cchName']}"
1243
+ },
1244
+ "LookupPrivilegeNameW": {
1245
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LUID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpSystemName', 'lpLuid', 'lpName', 'cchName']}"
1246
+ },
1247
+ "LookupPrivilegeValueA": {
1248
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LUID', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpSystemName', 'lpName', 'lpLuid']}"
1249
+ },
1250
+ "LookupPrivilegeValueW": {
1251
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LUID', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpSystemName', 'lpName', 'lpLuid']}"
1252
+ },
1253
+ "LookupSecurityDescriptorPartsA": {
1254
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_A', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_A', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_A', 'ot': '_ref'}}}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['ppOwner', 'ppGroup', 'pcCountOfAccessEntries', 'ppListOfAccessEntries', 'pcCountOfAuditEntries', 'ppListOfAuditEntries', 'pSD']}"
1255
+ },
1256
+ "LookupSecurityDescriptorPartsW": {
1257
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTEE_W', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_W', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_W', 'ot': '_ref'}}}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['ppOwner', 'ppGroup', 'pcCountOfAccessEntries', 'ppListOfAccessEntries', 'pcCountOfAuditEntries', 'ppListOfAuditEntries', 'pSD']}"
1258
+ },
1259
+ "LsaAddAccountRights": {
1260
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'AccountSid', 'UserRights', 'CountOfRights']}"
1261
+ },
1262
+ "LsaAddPrivilegesToAccount": {
1263
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1264
+ },
1265
+ "LsaClearAuditLog": {
1266
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1267
+ },
1268
+ "LsaClose": {
1269
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['ObjectHandle']}"
1270
+ },
1271
+ "LsaCreateAccount": {
1272
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1273
+ },
1274
+ "LsaCreateSecret": {
1275
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1276
+ },
1277
+ "LsaCreateTrustedDomain": {
1278
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1279
+ },
1280
+ "LsaCreateTrustedDomainEx": {
1281
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTED_DOMAIN_INFORMATION_EX', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRUSTED_DOMAIN_AUTH_INFORMATION', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'TrustedDomainInformation', 'AuthenticationInformation', 'DesiredAccess', 'TrustedDomainHandle']}"
1282
+ },
1283
+ "LsaDelete": {
1284
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1285
+ },
1286
+ "LsaDeleteTrustedDomain": {
1287
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'TrustedDomainSid']}"
1288
+ },
1289
+ "LsaEnumerateAccountRights": {
1290
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'AccountSid', 'UserRights', 'CountOfRights']}"
1291
+ },
1292
+ "LsaEnumerateAccounts": {
1293
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1294
+ },
1295
+ "LsaEnumerateAccountsWithUserRight": {
1296
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'UserRight', 'Buffer', 'CountReturned']}"
1297
+ },
1298
+ "LsaEnumeratePrivileges": {
1299
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1300
+ },
1301
+ "LsaEnumeratePrivilegesOfAccount": {
1302
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1303
+ },
1304
+ "LsaEnumerateTrustedDomains": {
1305
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'EnumerationContext', 'Buffer', 'PreferedMaximumLength', 'CountReturned']}"
1306
+ },
1307
+ "LsaEnumerateTrustedDomainsEx": {
1308
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'EnumerationContext', 'Buffer', 'PreferedMaximumLength', 'CountReturned']}"
1309
+ },
1310
+ "LsaFreeMemory": {
1311
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['Buffer']}"
1312
+ },
1313
+ "LsaGetAppliedCAPIDs": {
1314
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['SystemName', 'CAPIDs', 'CAPIDCount']}"
1315
+ },
1316
+ "LsaGetQuotasForAccount": {
1317
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1318
+ },
1319
+ "LsaGetRemoteUserName": {
1320
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1321
+ },
1322
+ "LsaGetSystemAccessAccount": {
1323
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1324
+ },
1325
+ "LsaGetUserName": {
1326
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1327
+ },
1328
+ "LsaICLookupNames": {
1329
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1330
+ },
1331
+ "LsaICLookupNamesWithCreds": {
1332
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1333
+ },
1334
+ "LsaICLookupSids": {
1335
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1336
+ },
1337
+ "LsaICLookupSidsWithCreds": {
1338
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1339
+ },
1340
+ "LsaLookupNames": {
1341
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_REFERENCED_DOMAIN_LIST', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_TRANSLATED_SID', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'Count', 'Names', 'ReferencedDomains', 'Sids']}"
1342
+ },
1343
+ "LsaLookupNames2": {
1344
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_REFERENCED_DOMAIN_LIST', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_TRANSLATED_SID2', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'Flags', 'Count', 'Names', 'ReferencedDomains', 'Sids']}"
1345
+ },
1346
+ "LsaLookupPrivilegeDisplayName": {
1347
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1348
+ },
1349
+ "LsaLookupPrivilegeName": {
1350
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1351
+ },
1352
+ "LsaLookupPrivilegeValue": {
1353
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1354
+ },
1355
+ "LsaLookupSids": {
1356
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_REFERENCED_DOMAIN_LIST', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_TRANSLATED_NAME', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'Count', 'Sids', 'ReferencedDomains', 'Names']}"
1357
+ },
1358
+ "LsaLookupSids2": {
1359
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_REFERENCED_DOMAIN_LIST', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_TRANSLATED_NAME', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'LookupOptions', 'Count', 'Sids', 'ReferencedDomains', 'Names']}"
1360
+ },
1361
+ "LsaManageSidNameMapping": {
1362
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1363
+ },
1364
+ "LsaNtStatusToWinError": {
1365
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Status']}"
1366
+ },
1367
+ "LsaOpenAccount": {
1368
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1369
+ },
1370
+ "LsaOpenPolicy": {
1371
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_OBJECT_ATTRIBUTES', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['SystemName', 'ObjectAttributes', 'DesiredAccess', 'PolicyHandle']}"
1372
+ },
1373
+ "LsaOpenPolicySce": {
1374
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1375
+ },
1376
+ "LsaOpenSecret": {
1377
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1378
+ },
1379
+ "LsaOpenTrustedDomain": {
1380
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1381
+ },
1382
+ "LsaOpenTrustedDomainByName": {
1383
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'TrustedDomainName', 'DesiredAccess', 'TrustedDomainHandle']}"
1384
+ },
1385
+ "LsaQueryCAPs": {
1386
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSID', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CENTRAL_ACCESS_POLICY', 'ot': '_ref'}}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['CAPIDs', 'CAPIDCount', 'CAPs', 'CAPCount']}"
1387
+ },
1388
+ "LsaQueryDomainInformationPolicy": {
1389
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'POLICY_DOMAIN_INFORMATION_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'InformationClass', 'Buffer']}"
1390
+ },
1391
+ "LsaQueryForestTrustInformation": {
1392
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_FOREST_TRUST_INFORMATION', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'TrustedDomainName', 'ForestTrustInfo']}"
1393
+ },
1394
+ "LsaQueryForestTrustInformation2": {
1395
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'LSA_FOREST_TRUST_RECORD_TYPE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_FOREST_TRUST_INFORMATION2', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'TrustedDomainName', 'HighestRecordType', 'ForestTrustInfo']}"
1396
+ },
1397
+ "LsaQueryInfoTrustedDomain": {
1398
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1399
+ },
1400
+ "LsaQueryInformationPolicy": {
1401
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'POLICY_INFORMATION_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'InformationClass', 'Buffer']}"
1402
+ },
1403
+ "LsaQuerySecret": {
1404
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1405
+ },
1406
+ "LsaQuerySecurityObject": {
1407
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1408
+ },
1409
+ "LsaQueryTrustedDomainInfo": {
1410
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'TRUSTED_INFORMATION_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'TrustedDomainSid', 'InformationClass', 'Buffer']}"
1411
+ },
1412
+ "LsaQueryTrustedDomainInfoByName": {
1413
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'TRUSTED_INFORMATION_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'TrustedDomainName', 'InformationClass', 'Buffer']}"
1414
+ },
1415
+ "LsaRemoveAccountRights": {
1416
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'AccountSid', 'AllRights', 'UserRights', 'CountOfRights']}"
1417
+ },
1418
+ "LsaRemovePrivilegesFromAccount": {
1419
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1420
+ },
1421
+ "LsaRetrievePrivateData": {
1422
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'KeyName', 'PrivateData']}"
1423
+ },
1424
+ "LsaSetCAPs": {
1425
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['CAPDNs', 'CAPDNCount', 'Flags']}"
1426
+ },
1427
+ "LsaSetDomainInformationPolicy": {
1428
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'POLICY_DOMAIN_INFORMATION_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'InformationClass', 'Buffer']}"
1429
+ },
1430
+ "LsaSetForestTrustInformation": {
1431
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_FOREST_TRUST_INFORMATION', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_FOREST_TRUST_COLLISION_INFORMATION', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'TrustedDomainName', 'ForestTrustInfo', 'CheckOnly', 'CollisionInfo']}"
1432
+ },
1433
+ "LsaSetForestTrustInformation2": {
1434
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'LSA_FOREST_TRUST_RECORD_TYPE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_FOREST_TRUST_INFORMATION2', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_FOREST_TRUST_COLLISION_INFORMATION', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'TrustedDomainName', 'HighestRecordType', 'ForestTrustInfo', 'CheckOnly', 'CollisionInfo']}"
1435
+ },
1436
+ "LsaSetInformationPolicy": {
1437
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'POLICY_INFORMATION_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'InformationClass', 'Buffer']}"
1438
+ },
1439
+ "LsaSetInformationTrustedDomain": {
1440
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1441
+ },
1442
+ "LsaSetQuotasForAccount": {
1443
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1444
+ },
1445
+ "LsaSetSecret": {
1446
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1447
+ },
1448
+ "LsaSetSecurityObject": {
1449
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1450
+ },
1451
+ "LsaSetSystemAccessAccount": {
1452
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1453
+ },
1454
+ "LsaSetTrustedDomainInfoByName": {
1455
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'TRUSTED_INFORMATION_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'TrustedDomainName', 'InformationClass', 'Buffer']}"
1456
+ },
1457
+ "LsaSetTrustedDomainInformation": {
1458
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'TRUSTED_INFORMATION_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'TrustedDomainSid', 'InformationClass', 'Buffer']}"
1459
+ },
1460
+ "LsaStorePrivateData": {
1461
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'LSA_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LSA_UNICODE_STRING', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['PolicyHandle', 'KeyName', 'PrivateData']}"
1462
+ },
1463
+ "MD4Final": {
1464
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1465
+ },
1466
+ "MD4Init": {
1467
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1468
+ },
1469
+ "MD4Update": {
1470
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1471
+ },
1472
+ "MD5Final": {
1473
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1474
+ },
1475
+ "MD5Init": {
1476
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1477
+ },
1478
+ "MD5Update": {
1479
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1480
+ },
1481
+ "MSChapSrvChangePassword": {
1482
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LM_OWF_PASSWORD', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LM_OWF_PASSWORD', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LM_OWF_PASSWORD', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'LM_OWF_PASSWORD', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['ServerName', 'UserName', 'LmOldPresent', 'LmOldOwfPassword', 'LmNewOwfPassword', 'NtOldOwfPassword', 'NtNewOwfPassword']}"
1483
+ },
1484
+ "MSChapSrvChangePassword2": {
1485
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SAMPR_ENCRYPTED_USER_PASSWORD', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENCRYPTED_LM_OWF_PASSWORD', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SAMPR_ENCRYPTED_USER_PASSWORD', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENCRYPTED_LM_OWF_PASSWORD', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['ServerName', 'UserName', 'NewPasswordEncryptedWithOldNt', 'OldNtOwfPasswordEncryptedWithNewNt', 'LmPresent', 'NewPasswordEncryptedWithOldLm', 'OldLmOwfPasswordEncryptedWithNewLmOrNt']}"
1486
+ },
1487
+ "MakeAbsoluteSD": {
1488
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSelfRelativeSecurityDescriptor', 'pAbsoluteSecurityDescriptor', 'lpdwAbsoluteSecurityDescriptorSize', 'pDacl', 'lpdwDaclSize', 'pSacl', 'lpdwSaclSize', 'pOwner', 'lpdwOwnerSize', 'pPrimaryGroup', 'lpdwPrimaryGroupSize']}"
1489
+ },
1490
+ "MakeAbsoluteSD2": {
1491
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1492
+ },
1493
+ "MakeSelfRelativeSD": {
1494
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAbsoluteSecurityDescriptor', 'pSelfRelativeSecurityDescriptor', 'lpdwBufferLength']}"
1495
+ },
1496
+ "MapGenericMask": {
1497
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['AccessMask', 'GenericMapping']}"
1498
+ },
1499
+ "NotifyBootConfigStatus": {
1500
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['BootAcceptable']}"
1501
+ },
1502
+ "NotifyChangeEventLog": {
1503
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog', 'hEvent']}"
1504
+ },
1505
+ "NotifyServiceStatusChange": {
1506
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1507
+ },
1508
+ "NotifyServiceStatusChangeA": {
1509
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SERVICE_NOTIFY', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SERVICE_NOTIFY_2A', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['hService', 'dwNotifyMask', 'pNotifyBuffer']}"
1510
+ },
1511
+ "NotifyServiceStatusChangeW": {
1512
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SERVICE_NOTIFY', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SERVICE_NOTIFY_2W', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['hService', 'dwNotifyMask', 'pNotifyBuffer']}"
1513
+ },
1514
+ "ObjectCloseAuditAlarmA": {
1515
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'GenerateOnClose']}"
1516
+ },
1517
+ "ObjectCloseAuditAlarmW": {
1518
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'GenerateOnClose']}"
1519
+ },
1520
+ "ObjectDeleteAuditAlarmA": {
1521
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'GenerateOnClose']}"
1522
+ },
1523
+ "ObjectDeleteAuditAlarmW": {
1524
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'GenerateOnClose']}"
1525
+ },
1526
+ "ObjectOpenAuditAlarmA": {
1527
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PRIVILEGE_SET', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'ObjectTypeName', 'ObjectName', 'pSecurityDescriptor', 'ClientToken', 'DesiredAccess', 'GrantedAccess', 'Privileges', 'ObjectCreation', 'AccessGranted', 'GenerateOnClose']}"
1528
+ },
1529
+ "ObjectOpenAuditAlarmW": {
1530
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PRIVILEGE_SET', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'ObjectTypeName', 'ObjectName', 'pSecurityDescriptor', 'ClientToken', 'DesiredAccess', 'GrantedAccess', 'Privileges', 'ObjectCreation', 'AccessGranted', 'GenerateOnClose']}"
1531
+ },
1532
+ "ObjectPrivilegeAuditAlarmA": {
1533
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PRIVILEGE_SET', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'ClientToken', 'DesiredAccess', 'Privileges', 'AccessGranted']}"
1534
+ },
1535
+ "ObjectPrivilegeAuditAlarmW": {
1536
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PRIVILEGE_SET', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'HandleId', 'ClientToken', 'DesiredAccess', 'Privileges', 'AccessGranted']}"
1537
+ },
1538
+ "OpenBackupEventLogA": {
1539
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, 'arg_names': ['lpUNCServerName', 'lpFileName']}"
1540
+ },
1541
+ "OpenBackupEventLogW": {
1542
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, 'arg_names': ['lpUNCServerName', 'lpFileName']}"
1543
+ },
1544
+ "OpenEncryptedFileRawA": {
1545
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['lpFileName', 'ulFlags', 'pvContext']}"
1546
+ },
1547
+ "OpenEncryptedFileRawW": {
1548
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['lpFileName', 'ulFlags', 'pvContext']}"
1549
+ },
1550
+ "OpenEventLogA": {
1551
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, 'arg_names': ['lpUNCServerName', 'lpSourceName']}"
1552
+ },
1553
+ "OpenEventLogW": {
1554
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, 'arg_names': ['lpUNCServerName', 'lpSourceName']}"
1555
+ },
1556
+ "OpenProcessToken": {
1557
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'TOKEN_ACCESS_MASK', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ProcessHandle', 'DesiredAccess', 'TokenHandle']}"
1558
+ },
1559
+ "OpenSCManagerA": {
1560
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, 'arg_names': ['lpMachineName', 'lpDatabaseName', 'dwDesiredAccess']}"
1561
+ },
1562
+ "OpenSCManagerW": {
1563
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, 'arg_names': ['lpMachineName', 'lpDatabaseName', 'dwDesiredAccess']}"
1564
+ },
1565
+ "OpenServiceA": {
1566
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, 'arg_names': ['hSCManager', 'lpServiceName', 'dwDesiredAccess']}"
1567
+ },
1568
+ "OpenServiceW": {
1569
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, 'arg_names': ['hSCManager', 'lpServiceName', 'dwDesiredAccess']}"
1570
+ },
1571
+ "OpenThreadToken": {
1572
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'TOKEN_ACCESS_MASK', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ThreadHandle', 'DesiredAccess', 'OpenAsSelf', 'TokenHandle']}"
1573
+ },
1574
+ "OpenThreadWaitChainSession": {
1575
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'OPEN_THREAD_WAIT_CHAIN_SESSION_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'WAITCHAIN_NODE_INFO', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['WctHandle', 'Context', 'CallbackStatus', 'NodeCount', 'NodeInfoArray', 'IsCycle']}}], 'returnty': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, 'arg_names': ['Flags', 'callback']}"
1576
+ },
1577
+ "OpenTraceA": {
1578
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_LOGFILEA', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'PROCESSTRACE_HANDLE', 'ot': '_ref'}, 'arg_names': ['Logfile']}"
1579
+ },
1580
+ "OpenTraceFromBufferStream": {
1581
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ETW_OPEN_TRACE_OPTIONS', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ETW_BUFFER_HEADER', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['Buffer', 'CallbackContext']}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, 'arg_names': ['Options', 'BufferCompletionCallback', 'BufferCompletionContext']}"
1582
+ },
1583
+ "OpenTraceFromFile": {
1584
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ETW_OPEN_TRACE_OPTIONS', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRACE_LOGFILE_HEADER', 'ot': '_ref'}}], 'returnty': {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, 'arg_names': ['LogFileName', 'Options', 'LogFileHeader']}"
1585
+ },
1586
+ "OpenTraceFromRealTimeLogger": {
1587
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ETW_OPEN_TRACE_OPTIONS', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRACE_LOGFILE_HEADER', 'ot': '_ref'}}], 'returnty': {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, 'arg_names': ['LoggerName', 'Options', 'LogFileHeader']}"
1588
+ },
1589
+ "OpenTraceFromRealTimeLoggerWithAllocationOptions": {
1590
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ETW_OPEN_TRACE_OPTIONS', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt'}, 'label': 'UIntPtr'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRACE_LOGFILE_HEADER', 'ot': '_ref'}}], 'returnty': {'_t': 'llong', 'signed': false, 'label': 'UInt64'}, 'arg_names': ['LoggerName', 'Options', 'AllocationSize', 'MemoryPartitionHandle', 'LogFileHeader']}"
1591
+ },
1592
+ "OpenTraceW": {
1593
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_LOGFILEW', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'PROCESSTRACE_HANDLE', 'ot': '_ref'}, 'arg_names': ['Logfile']}"
1594
+ },
1595
+ "OperationEnd": {
1596
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OPERATION_END_PARAMETERS', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['OperationEndParams']}"
1597
+ },
1598
+ "OperationStart": {
1599
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'OPERATION_START_PARAMETERS', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['OperationStartParams']}"
1600
+ },
1601
+ "PerfAddCounters": {
1602
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTER_IDENTIFIER', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['hQuery', 'pCounters', 'cbCounters']}"
1603
+ },
1604
+ "PerfCloseQueryHandle": {
1605
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['hQuery']}"
1606
+ },
1607
+ "PerfCreateInstance": {
1608
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTERSET_INSTANCE', 'ot': '_ref'}}, 'arg_names': ['ProviderHandle', 'CounterSetGuid', 'Name', 'Id']}"
1609
+ },
1610
+ "PerfDecrementULongCounterValue": {
1611
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTERSET_INSTANCE', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Provider', 'Instance', 'CounterId', 'Value']}"
1612
+ },
1613
+ "PerfDecrementULongLongCounterValue": {
1614
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTERSET_INSTANCE', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'llong', 'signed': false, 'label': 'UInt64'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Provider', 'Instance', 'CounterId', 'Value']}"
1615
+ },
1616
+ "PerfDeleteCounters": {
1617
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTER_IDENTIFIER', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['hQuery', 'pCounters', 'cbCounters']}"
1618
+ },
1619
+ "PerfDeleteInstance": {
1620
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTERSET_INSTANCE', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Provider', 'InstanceBlock']}"
1621
+ },
1622
+ "PerfEnumerateCounterSet": {
1623
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['szMachine', 'pCounterSetIds', 'cCounterSetIds', 'pcCounterSetIdsActual']}"
1624
+ },
1625
+ "PerfEnumerateCounterSetInstances": {
1626
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_INSTANCE_HEADER', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['szMachine', 'pCounterSetId', 'pInstances', 'cbInstances', 'pcbInstancesActual']}"
1627
+ },
1628
+ "PerfIncrementULongCounterValue": {
1629
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTERSET_INSTANCE', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Provider', 'Instance', 'CounterId', 'Value']}"
1630
+ },
1631
+ "PerfIncrementULongLongCounterValue": {
1632
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTERSET_INSTANCE', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'llong', 'signed': false, 'label': 'UInt64'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Provider', 'Instance', 'CounterId', 'Value']}"
1633
+ },
1634
+ "PerfOpenQueryHandle": {
1635
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['szMachine', 'phQuery']}"
1636
+ },
1637
+ "PerfQueryCounterData": {
1638
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_DATA_HEADER', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['hQuery', 'pCounterBlock', 'cbCounterBlock', 'pcbCounterBlockActual']}"
1639
+ },
1640
+ "PerfQueryCounterInfo": {
1641
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTER_IDENTIFIER', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['hQuery', 'pCounters', 'cbCounters', 'pcbCountersActual']}"
1642
+ },
1643
+ "PerfQueryCounterSetRegistrationInfo": {
1644
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PerfRegInfoType', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['szMachine', 'pCounterSetId', 'requestCode', 'requestLangId', 'pbRegInfo', 'cbRegInfo', 'pcbRegInfoActual']}"
1645
+ },
1646
+ "PerfQueryInstance": {
1647
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTERSET_INSTANCE', 'ot': '_ref'}}, 'arg_names': ['ProviderHandle', 'CounterSetGuid', 'Name', 'Id']}"
1648
+ },
1649
+ "PerfSetCounterRefValue": {
1650
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTERSET_INSTANCE', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Provider', 'Instance', 'CounterId', 'Address']}"
1651
+ },
1652
+ "PerfSetCounterSetInfo": {
1653
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTERSET_INFO', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['ProviderHandle', 'Template', 'TemplateSize']}"
1654
+ },
1655
+ "PerfSetULongCounterValue": {
1656
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTERSET_INSTANCE', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Provider', 'Instance', 'CounterId', 'Value']}"
1657
+ },
1658
+ "PerfSetULongLongCounterValue": {
1659
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_COUNTERSET_INSTANCE', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'llong', 'signed': false, 'label': 'UInt64'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Provider', 'Instance', 'CounterId', 'Value']}"
1660
+ },
1661
+ "PerfStartProvider": {
1662
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['RequestCode', 'Buffer', 'BufferSize']}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['ProviderGuid', 'ControlCallback', 'phProvider']}"
1663
+ },
1664
+ "PerfStartProviderEx": {
1665
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PERF_PROVIDER_CONTEXT', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['ProviderGuid', 'ProviderContext', 'Provider']}"
1666
+ },
1667
+ "PerfStopProvider": {
1668
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['ProviderHandle']}"
1669
+ },
1670
+ "PrivilegeCheck": {
1671
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PRIVILEGE_SET', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ClientToken', 'RequiredPrivileges', 'pfResult']}"
1672
+ },
1673
+ "PrivilegedServiceAuditAlarmA": {
1674
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PRIVILEGE_SET', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'ServiceName', 'ClientToken', 'Privileges', 'AccessGranted']}"
1675
+ },
1676
+ "PrivilegedServiceAuditAlarmW": {
1677
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PRIVILEGE_SET', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SubsystemName', 'ServiceName', 'ClientToken', 'Privileges', 'AccessGranted']}"
1678
+ },
1679
+ "ProcessIdleTasks": {
1680
+ "proto": "{'_t': 'func', 'args': [], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1681
+ },
1682
+ "ProcessIdleTasksW": {
1683
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
1684
+ },
1685
+ "ProcessTrace": {
1686
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PROCESSTRACE_HANDLE', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'FILETIME', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'FILETIME', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['HandleArray', 'HandleCount', 'StartTime', 'EndTime']}"
1687
+ },
1688
+ "ProcessTraceAddBufferToBufferStream": {
1689
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ETW_BUFFER_HEADER', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['TraceHandle', 'Buffer', 'BufferSize']}"
1690
+ },
1691
+ "ProcessTraceBufferDecrementReference": {
1692
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ETW_BUFFER_HEADER', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['Buffer']}"
1693
+ },
1694
+ "ProcessTraceBufferIncrementReference": {
1695
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ETW_BUFFER_HEADER', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['TraceHandle', 'Buffer']}"
1696
+ },
1697
+ "QueryAllTracesA": {
1698
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['PropertyArray', 'PropertyArrayCount', 'LoggerCount']}"
1699
+ },
1700
+ "QueryAllTracesW": {
1701
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['PropertyArray', 'PropertyArrayCount', 'LoggerCount']}"
1702
+ },
1703
+ "QueryRecoveryAgentsOnEncryptedFile": {
1704
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENCRYPTION_CERTIFICATE_HASH_LIST', 'ot': '_ref'}}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['lpFileName', 'pRecoveryAgents']}"
1705
+ },
1706
+ "QuerySecurityAccessMask": {
1707
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['SecurityInformation', 'DesiredAccess']}"
1708
+ },
1709
+ "QueryServiceConfig2A": {
1710
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SERVICE_CONFIG', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwInfoLevel', 'lpBuffer', 'cbBufSize', 'pcbBytesNeeded']}"
1711
+ },
1712
+ "QueryServiceConfig2W": {
1713
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SERVICE_CONFIG', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwInfoLevel', 'lpBuffer', 'cbBufSize', 'pcbBytesNeeded']}"
1714
+ },
1715
+ "QueryServiceConfigA": {
1716
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'QUERY_SERVICE_CONFIGA', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'lpServiceConfig', 'cbBufSize', 'pcbBytesNeeded']}"
1717
+ },
1718
+ "QueryServiceConfigW": {
1719
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'QUERY_SERVICE_CONFIGW', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'lpServiceConfig', 'cbBufSize', 'pcbBytesNeeded']}"
1720
+ },
1721
+ "QueryServiceDynamicInformation": {
1722
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SERVICE_STATUS_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hServiceStatus', 'dwInfoLevel', 'ppDynamicInfo']}"
1723
+ },
1724
+ "QueryServiceLockStatusA": {
1725
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'QUERY_SERVICE_LOCK_STATUSA', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hSCManager', 'lpLockStatus', 'cbBufSize', 'pcbBytesNeeded']}"
1726
+ },
1727
+ "QueryServiceLockStatusW": {
1728
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'QUERY_SERVICE_LOCK_STATUSW', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hSCManager', 'lpLockStatus', 'cbBufSize', 'pcbBytesNeeded']}"
1729
+ },
1730
+ "QueryServiceObjectSecurity": {
1731
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwSecurityInformation', 'lpSecurityDescriptor', 'cbBufSize', 'pcbBytesNeeded']}"
1732
+ },
1733
+ "QueryServiceStatus": {
1734
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SERVICE_STATUS', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'lpServiceStatus']}"
1735
+ },
1736
+ "QueryServiceStatusEx": {
1737
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SC_STATUS_TYPE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'InfoLevel', 'lpBuffer', 'cbBufSize', 'pcbBytesNeeded']}"
1738
+ },
1739
+ "QueryTraceA": {
1740
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'InstanceName', 'Properties']}"
1741
+ },
1742
+ "QueryTraceProcessingHandle": {
1743
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PROCESSTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'ETW_PROCESS_HANDLE_INFO_TYPE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['ProcessingHandle', 'InformationClass', 'InBuffer', 'InBufferSize', 'OutBuffer', 'OutBufferSize', 'ReturnLength']}"
1744
+ },
1745
+ "QueryTraceW": {
1746
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'InstanceName', 'Properties']}"
1747
+ },
1748
+ "QueryUsersOnEncryptedFile": {
1749
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENCRYPTION_CERTIFICATE_HASH_LIST', 'ot': '_ref'}}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['lpFileName', 'pUsers']}"
1750
+ },
1751
+ "ReadEncryptedFileRaw": {
1752
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['pbData', 'pvCallbackContext', 'ulLength']}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['pfExportCallback', 'pvCallbackContext', 'pvContext']}"
1753
+ },
1754
+ "ReadEventLogA": {
1755
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'READ_EVENT_LOG_READ_FLAGS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog', 'dwReadFlags', 'dwRecordOffset', 'lpBuffer', 'nNumberOfBytesToRead', 'pnBytesRead', 'pnMinNumberOfBytesNeeded']}"
1756
+ },
1757
+ "ReadEventLogW": {
1758
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'READ_EVENT_LOG_READ_FLAGS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog', 'dwReadFlags', 'dwRecordOffset', 'lpBuffer', 'nNumberOfBytesToRead', 'pnBytesRead', 'pnMinNumberOfBytesNeeded']}"
1759
+ },
1760
+ "RegCloseKey": {
1761
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey']}"
1762
+ },
1763
+ "RegConnectRegistryA": {
1764
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['lpMachineName', 'hKey', 'phkResult']}"
1765
+ },
1766
+ "RegConnectRegistryExA": {
1767
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'label': 'Int32'}, 'arg_names': ['lpMachineName', 'hKey', 'Flags', 'phkResult']}"
1768
+ },
1769
+ "RegConnectRegistryExW": {
1770
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'label': 'Int32'}, 'arg_names': ['lpMachineName', 'hKey', 'Flags', 'phkResult']}"
1771
+ },
1772
+ "RegConnectRegistryW": {
1773
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['lpMachineName', 'hKey', 'phkResult']}"
1774
+ },
1775
+ "RegCopyTreeA": {
1776
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKeySrc', 'lpSubKey', 'hKeyDest']}"
1777
+ },
1778
+ "RegCopyTreeW": {
1779
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKeySrc', 'lpSubKey', 'hKeyDest']}"
1780
+ },
1781
+ "RegCreateKeyA": {
1782
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'phkResult']}"
1783
+ },
1784
+ "RegCreateKeyExA": {
1785
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'REG_OPEN_CREATE_OPTIONS', 'ot': 'int'}, {'_t': '_ref', 'name': 'REG_SAM_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'REG_CREATE_KEY_DISPOSITION', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'Reserved', 'lpClass', 'dwOptions', 'samDesired', 'lpSecurityAttributes', 'phkResult', 'lpdwDisposition']}"
1786
+ },
1787
+ "RegCreateKeyExW": {
1788
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'REG_OPEN_CREATE_OPTIONS', 'ot': 'int'}, {'_t': '_ref', 'name': 'REG_SAM_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'REG_CREATE_KEY_DISPOSITION', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'Reserved', 'lpClass', 'dwOptions', 'samDesired', 'lpSecurityAttributes', 'phkResult', 'lpdwDisposition']}"
1789
+ },
1790
+ "RegCreateKeyTransactedA": {
1791
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'REG_OPEN_CREATE_OPTIONS', 'ot': 'int'}, {'_t': '_ref', 'name': 'REG_SAM_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'REG_CREATE_KEY_DISPOSITION', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'Reserved', 'lpClass', 'dwOptions', 'samDesired', 'lpSecurityAttributes', 'phkResult', 'lpdwDisposition', 'hTransaction', 'pExtendedParemeter']}"
1792
+ },
1793
+ "RegCreateKeyTransactedW": {
1794
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'REG_OPEN_CREATE_OPTIONS', 'ot': 'int'}, {'_t': '_ref', 'name': 'REG_SAM_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'REG_CREATE_KEY_DISPOSITION', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'Reserved', 'lpClass', 'dwOptions', 'samDesired', 'lpSecurityAttributes', 'phkResult', 'lpdwDisposition', 'hTransaction', 'pExtendedParemeter']}"
1795
+ },
1796
+ "RegCreateKeyW": {
1797
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'phkResult']}"
1798
+ },
1799
+ "RegDeleteKeyA": {
1800
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey']}"
1801
+ },
1802
+ "RegDeleteKeyExA": {
1803
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'samDesired', 'Reserved']}"
1804
+ },
1805
+ "RegDeleteKeyExW": {
1806
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'samDesired', 'Reserved']}"
1807
+ },
1808
+ "RegDeleteKeyTransactedA": {
1809
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'samDesired', 'Reserved', 'hTransaction', 'pExtendedParameter']}"
1810
+ },
1811
+ "RegDeleteKeyTransactedW": {
1812
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'samDesired', 'Reserved', 'hTransaction', 'pExtendedParameter']}"
1813
+ },
1814
+ "RegDeleteKeyValueA": {
1815
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'lpValueName']}"
1816
+ },
1817
+ "RegDeleteKeyValueW": {
1818
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'lpValueName']}"
1819
+ },
1820
+ "RegDeleteKeyW": {
1821
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey']}"
1822
+ },
1823
+ "RegDeleteTreeA": {
1824
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey']}"
1825
+ },
1826
+ "RegDeleteTreeW": {
1827
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey']}"
1828
+ },
1829
+ "RegDeleteValueA": {
1830
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpValueName']}"
1831
+ },
1832
+ "RegDeleteValueW": {
1833
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpValueName']}"
1834
+ },
1835
+ "RegDisablePredefinedCache": {
1836
+ "proto": "{'_t': 'func', 'args': [], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': []}"
1837
+ },
1838
+ "RegDisablePredefinedCacheEx": {
1839
+ "proto": "{'_t': 'func', 'args': [], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': []}"
1840
+ },
1841
+ "RegDisableReflectionKey": {
1842
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hBase']}"
1843
+ },
1844
+ "RegEnableReflectionKey": {
1845
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hBase']}"
1846
+ },
1847
+ "RegEnumKeyA": {
1848
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'dwIndex', 'lpName', 'cchName']}"
1849
+ },
1850
+ "RegEnumKeyExA": {
1851
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'FILETIME', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'dwIndex', 'lpName', 'lpcchName', 'lpReserved', 'lpClass', 'lpcchClass', 'lpftLastWriteTime']}"
1852
+ },
1853
+ "RegEnumKeyExW": {
1854
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'FILETIME', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'dwIndex', 'lpName', 'lpcchName', 'lpReserved', 'lpClass', 'lpcchClass', 'lpftLastWriteTime']}"
1855
+ },
1856
+ "RegEnumKeyW": {
1857
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'dwIndex', 'lpName', 'cchName']}"
1858
+ },
1859
+ "RegEnumValueA": {
1860
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'dwIndex', 'lpValueName', 'lpcchValueName', 'lpReserved', 'lpType', 'lpData', 'lpcbData']}"
1861
+ },
1862
+ "RegEnumValueW": {
1863
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'dwIndex', 'lpValueName', 'lpcchValueName', 'lpReserved', 'lpType', 'lpData', 'lpcbData']}"
1864
+ },
1865
+ "RegFlushKey": {
1866
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey']}"
1867
+ },
1868
+ "RegGetKeySecurity": {
1869
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'SecurityInformation', 'pSecurityDescriptor', 'lpcbSecurityDescriptor']}"
1870
+ },
1871
+ "RegGetValueA": {
1872
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'REG_ROUTINE_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'REG_VALUE_TYPE', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hkey', 'lpSubKey', 'lpValue', 'dwFlags', 'pdwType', 'pvData', 'pcbData']}"
1873
+ },
1874
+ "RegGetValueW": {
1875
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'REG_ROUTINE_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'REG_VALUE_TYPE', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hkey', 'lpSubKey', 'lpValue', 'dwFlags', 'pdwType', 'pvData', 'pcbData']}"
1876
+ },
1877
+ "RegLoadAppKeyA": {
1878
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['lpFile', 'phkResult', 'samDesired', 'dwOptions', 'Reserved']}"
1879
+ },
1880
+ "RegLoadAppKeyW": {
1881
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['lpFile', 'phkResult', 'samDesired', 'dwOptions', 'Reserved']}"
1882
+ },
1883
+ "RegLoadKeyA": {
1884
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'lpFile']}"
1885
+ },
1886
+ "RegLoadKeyW": {
1887
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'lpFile']}"
1888
+ },
1889
+ "RegLoadMUIStringA": {
1890
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'pszValue', 'pszOutBuf', 'cbOutBuf', 'pcbData', 'Flags', 'pszDirectory']}"
1891
+ },
1892
+ "RegLoadMUIStringW": {
1893
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'pszValue', 'pszOutBuf', 'cbOutBuf', 'pcbData', 'Flags', 'pszDirectory']}"
1894
+ },
1895
+ "RegNotifyChangeKeyValue": {
1896
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'REG_NOTIFY_FILTER', 'ot': 'int'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'bWatchSubtree', 'dwNotifyFilter', 'hEvent', 'fAsynchronous']}"
1897
+ },
1898
+ "RegOpenCurrentUser": {
1899
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['samDesired', 'phkResult']}"
1900
+ },
1901
+ "RegOpenKeyA": {
1902
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'phkResult']}"
1903
+ },
1904
+ "RegOpenKeyExA": {
1905
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'REG_SAM_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'ulOptions', 'samDesired', 'phkResult']}"
1906
+ },
1907
+ "RegOpenKeyExW": {
1908
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'REG_SAM_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'ulOptions', 'samDesired', 'phkResult']}"
1909
+ },
1910
+ "RegOpenKeyTransactedA": {
1911
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'REG_SAM_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'ulOptions', 'samDesired', 'phkResult', 'hTransaction', 'pExtendedParemeter']}"
1912
+ },
1913
+ "RegOpenKeyTransactedW": {
1914
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'REG_SAM_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'ulOptions', 'samDesired', 'phkResult', 'hTransaction', 'pExtendedParemeter']}"
1915
+ },
1916
+ "RegOpenKeyW": {
1917
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'phkResult']}"
1918
+ },
1919
+ "RegOpenUserClassesRoot": {
1920
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HKEY', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hToken', 'dwOptions', 'samDesired', 'phkResult']}"
1921
+ },
1922
+ "RegOverridePredefKey": {
1923
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'hNewHKey']}"
1924
+ },
1925
+ "RegQueryInfoKeyA": {
1926
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'FILETIME', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpClass', 'lpcchClass', 'lpReserved', 'lpcSubKeys', 'lpcbMaxSubKeyLen', 'lpcbMaxClassLen', 'lpcValues', 'lpcbMaxValueNameLen', 'lpcbMaxValueLen', 'lpcbSecurityDescriptor', 'lpftLastWriteTime']}"
1927
+ },
1928
+ "RegQueryInfoKeyW": {
1929
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'Char'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'FILETIME', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpClass', 'lpcchClass', 'lpReserved', 'lpcSubKeys', 'lpcbMaxSubKeyLen', 'lpcbMaxClassLen', 'lpcValues', 'lpcbMaxValueNameLen', 'lpcbMaxValueLen', 'lpcbSecurityDescriptor', 'lpftLastWriteTime']}"
1930
+ },
1931
+ "RegQueryMultipleValuesA": {
1932
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'VALENTA', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'val_list', 'num_vals', 'lpValueBuf', 'ldwTotsize']}"
1933
+ },
1934
+ "RegQueryMultipleValuesW": {
1935
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'VALENTW', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'val_list', 'num_vals', 'lpValueBuf', 'ldwTotsize']}"
1936
+ },
1937
+ "RegQueryReflectionKey": {
1938
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'BOOL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hBase', 'bIsReflectionDisabled']}"
1939
+ },
1940
+ "RegQueryValueA": {
1941
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'label': 'Int32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'lpData', 'lpcbData']}"
1942
+ },
1943
+ "RegQueryValueExA": {
1944
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'REG_VALUE_TYPE', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpValueName', 'lpReserved', 'lpType', 'lpData', 'lpcbData']}"
1945
+ },
1946
+ "RegQueryValueExW": {
1947
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'REG_VALUE_TYPE', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpValueName', 'lpReserved', 'lpType', 'lpData', 'lpcbData']}"
1948
+ },
1949
+ "RegQueryValueW": {
1950
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'label': 'Int32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'lpData', 'lpcbData']}"
1951
+ },
1952
+ "RegRenameKey": {
1953
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKeyName', 'lpNewKeyName']}"
1954
+ },
1955
+ "RegReplaceKeyA": {
1956
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'lpNewFile', 'lpOldFile']}"
1957
+ },
1958
+ "RegReplaceKeyW": {
1959
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'lpNewFile', 'lpOldFile']}"
1960
+ },
1961
+ "RegRestoreKeyA": {
1962
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpFile', 'dwFlags']}"
1963
+ },
1964
+ "RegRestoreKeyW": {
1965
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpFile', 'dwFlags']}"
1966
+ },
1967
+ "RegSaveKeyA": {
1968
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpFile', 'lpSecurityAttributes']}"
1969
+ },
1970
+ "RegSaveKeyExA": {
1971
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'REG_SAVE_FORMAT', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpFile', 'lpSecurityAttributes', 'Flags']}"
1972
+ },
1973
+ "RegSaveKeyExW": {
1974
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'REG_SAVE_FORMAT', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpFile', 'lpSecurityAttributes', 'Flags']}"
1975
+ },
1976
+ "RegSaveKeyW": {
1977
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SECURITY_ATTRIBUTES', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpFile', 'lpSecurityAttributes']}"
1978
+ },
1979
+ "RegSetKeySecurity": {
1980
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'SecurityInformation', 'pSecurityDescriptor']}"
1981
+ },
1982
+ "RegSetKeyValueA": {
1983
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'lpValueName', 'dwType', 'lpData', 'cbData']}"
1984
+ },
1985
+ "RegSetKeyValueW": {
1986
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'lpValueName', 'dwType', 'lpData', 'cbData']}"
1987
+ },
1988
+ "RegSetValueA": {
1989
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'REG_VALUE_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'dwType', 'lpData', 'cbData']}"
1990
+ },
1991
+ "RegSetValueExA": {
1992
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'REG_VALUE_TYPE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpValueName', 'Reserved', 'dwType', 'lpData', 'cbData']}"
1993
+ },
1994
+ "RegSetValueExW": {
1995
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'REG_VALUE_TYPE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpValueName', 'Reserved', 'dwType', 'lpData', 'cbData']}"
1996
+ },
1997
+ "RegSetValueW": {
1998
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'REG_VALUE_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey', 'dwType', 'lpData', 'cbData']}"
1999
+ },
2000
+ "RegUnLoadKeyA": {
2001
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey']}"
2002
+ },
2003
+ "RegUnLoadKeyW": {
2004
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HKEY', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['hKey', 'lpSubKey']}"
2005
+ },
2006
+ "RegisterEventSourceA": {
2007
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, 'arg_names': ['lpUNCServerName', 'lpSourceName']}"
2008
+ },
2009
+ "RegisterEventSourceW": {
2010
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, 'arg_names': ['lpUNCServerName', 'lpSourceName']}"
2011
+ },
2012
+ "RegisterIdleTask": {
2013
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2014
+ },
2015
+ "RegisterServiceCtrlHandlerA": {
2016
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['dwControl']}}], 'returnty': {'_t': '_ref', 'name': 'SERVICE_STATUS_HANDLE', 'ot': 'ptr'}, 'arg_names': ['lpServiceName', 'lpHandlerProc']}"
2017
+ },
2018
+ "RegisterServiceCtrlHandlerExA": {
2019
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['dwControl', 'dwEventType', 'lpEventData', 'lpContext']}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'SERVICE_STATUS_HANDLE', 'ot': 'ptr'}, 'arg_names': ['lpServiceName', 'lpHandlerProc', 'lpContext']}"
2020
+ },
2021
+ "RegisterServiceCtrlHandlerExW": {
2022
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['dwControl', 'dwEventType', 'lpEventData', 'lpContext']}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'SERVICE_STATUS_HANDLE', 'ot': 'ptr'}, 'arg_names': ['lpServiceName', 'lpHandlerProc', 'lpContext']}"
2023
+ },
2024
+ "RegisterServiceCtrlHandlerW": {
2025
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['dwControl']}}], 'returnty': {'_t': '_ref', 'name': 'SERVICE_STATUS_HANDLE', 'ot': 'ptr'}, 'arg_names': ['lpServiceName', 'lpHandlerProc']}"
2026
+ },
2027
+ "RegisterTraceGuidsA": {
2028
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': '_ref', 'name': 'WMIDPREQUESTCODE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['RequestCode', 'RequestContext', 'BufferSize', 'Buffer']}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRACE_GUID_REGISTRATION', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'llong', 'signed': false, 'label': 'UInt64'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['RequestAddress', 'RequestContext', 'ControlGuid', 'GuidCount', 'TraceGuidReg', 'MofImagePath', 'MofResourceName', 'RegistrationHandle']}"
2029
+ },
2030
+ "RegisterTraceGuidsW": {
2031
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': '_ref', 'name': 'WMIDPREQUESTCODE', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['RequestCode', 'RequestContext', 'BufferSize', 'Buffer']}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'TRACE_GUID_REGISTRATION', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'llong', 'signed': false, 'label': 'UInt64'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['RequestAddress', 'RequestContext', 'ControlGuid', 'GuidCount', 'TraceGuidReg', 'MofImagePath', 'MofResourceName', 'RegistrationHandle']}"
2032
+ },
2033
+ "RegisterWaitChainCOMCallback": {
2034
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': 'int', 'label': 'Int32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'HRESULT', 'ot': 'int'}, 'arg_names': ['param0', 'param1']}}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': '_ref', 'name': 'Guid', 'ot': 'struct'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'HRESULT', 'ot': 'int'}, 'arg_names': ['param0', 'param1', 'param2']}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['CallStateCallback', 'ActivationStateCallback']}"
2035
+ },
2036
+ "RemoveTraceCallback": {
2037
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pGuid']}"
2038
+ },
2039
+ "RemoveUsersFromEncryptedFile": {
2040
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENCRYPTION_CERTIFICATE_HASH_LIST', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['lpFileName', 'pHashes']}"
2041
+ },
2042
+ "ReportEventA": {
2043
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'REPORT_EVENT_TYPE', 'ot': 'short'}, {'_t': 'short', 'signed': false, 'label': 'UInt16'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'short', 'signed': false, 'label': 'UInt16'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSTR', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog', 'wType', 'wCategory', 'dwEventID', 'lpUserSid', 'wNumStrings', 'dwDataSize', 'lpStrings', 'lpRawData']}"
2044
+ },
2045
+ "ReportEventW": {
2046
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'REPORT_EVENT_TYPE', 'ot': 'short'}, {'_t': 'short', 'signed': false, 'label': 'UInt16'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'short', 'signed': false, 'label': 'UInt16'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PWSTR', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hEventLog', 'wType', 'wCategory', 'dwEventID', 'lpUserSid', 'wNumStrings', 'dwDataSize', 'lpStrings', 'lpRawData']}"
2047
+ },
2048
+ "RevertToSelf": {
2049
+ "proto": "{'_t': 'func', 'args': [], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': []}"
2050
+ },
2051
+ "RtlDecryptMemory": {
2052
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['Memory', 'MemorySize', 'OptionFlags']}"
2053
+ },
2054
+ "RtlEncryptMemory": {
2055
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'NTSTATUS', 'ot': 'int'}, 'arg_names': ['Memory', 'MemorySize', 'OptionFlags']}"
2056
+ },
2057
+ "RtlGenRandom": {
2058
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}, 'arg_names': ['RandomBuffer', 'RandomBufferLength']}"
2059
+ },
2060
+ "SaferCloseLevel": {
2061
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SAFER_LEVEL_HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hLevelHandle']}"
2062
+ },
2063
+ "SaferComputeTokenFromLevel": {
2064
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SAFER_LEVEL_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'SAFER_COMPUTE_TOKEN_FROM_LEVEL_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['LevelHandle', 'InAccessToken', 'OutAccessToken', 'dwFlags', 'lpReserved']}"
2065
+ },
2066
+ "SaferCreateLevel": {
2067
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SAFER_LEVEL_HANDLE', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['dwScopeId', 'dwLevelId', 'OpenFlags', 'pLevelHandle', 'lpReserved']}"
2068
+ },
2069
+ "SaferGetLevelInformation": {
2070
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SAFER_LEVEL_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SAFER_OBJECT_INFO_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['LevelHandle', 'dwInfoType', 'lpQueryBuffer', 'dwInBufferSize', 'lpdwOutBufferSize']}"
2071
+ },
2072
+ "SaferGetPolicyInformation": {
2073
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'SAFER_POLICY_INFO_CLASS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['dwScopeId', 'SaferPolicyInfoClass', 'InfoBufferSize', 'InfoBuffer', 'InfoBufferRetSize', 'lpReserved']}"
2074
+ },
2075
+ "SaferIdentifyLevel": {
2076
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SAFER_CODE_PROPERTIES_V2', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SAFER_LEVEL_HANDLE', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['dwNumProperties', 'pCodeProperties', 'pLevelHandle', 'lpReserved']}"
2077
+ },
2078
+ "SaferRecordEventLogEntry": {
2079
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SAFER_LEVEL_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hLevel', 'szTargetPath', 'lpReserved']}"
2080
+ },
2081
+ "SaferSetLevelInformation": {
2082
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SAFER_LEVEL_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SAFER_OBJECT_INFO_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['LevelHandle', 'dwInfoType', 'lpQueryBuffer', 'dwInBufferSize']}"
2083
+ },
2084
+ "SaferSetPolicyInformation": {
2085
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'SAFER_POLICY_INFO_CLASS', 'ot': 'int'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['dwScopeId', 'SaferPolicyInfoClass', 'InfoBufferSize', 'InfoBuffer', 'lpReserved']}"
2086
+ },
2087
+ "SaferiChangeRegistryScope": {
2088
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2089
+ },
2090
+ "SaferiCompareTokenLevels": {
2091
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2092
+ },
2093
+ "SaferiIsDllAllowed": {
2094
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2095
+ },
2096
+ "SaferiIsExecutableFileType": {
2097
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOLEAN', 'ot': 'char'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['szFullPathname', 'bFromShellExecute']}"
2098
+ },
2099
+ "SaferiPopulateDefaultsInRegistry": {
2100
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2101
+ },
2102
+ "SaferiRecordEventLogEntry": {
2103
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2104
+ },
2105
+ "SaferiRegisterExtensionDll": {
2106
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2107
+ },
2108
+ "SaferiSearchMatchingHashRules": {
2109
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2110
+ },
2111
+ "SetAclInformation": {
2112
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'ACL_INFORMATION_CLASS', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pAcl', 'pAclInformation', 'nAclInformationLength', 'dwAclInformationClass']}"
2113
+ },
2114
+ "SetEncryptedFileMetadata": {
2115
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENCRYPTION_CERTIFICATE_HASH', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENCRYPTION_CERTIFICATE_HASH_LIST', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['lpFileName', 'pbOldMetadata', 'pbNewMetadata', 'pOwnerHash', 'dwOperation', 'pCertificatesAdded']}"
2116
+ },
2117
+ "SetEntriesInAccessListA": {
2118
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2119
+ },
2120
+ "SetEntriesInAccessListW": {
2121
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2122
+ },
2123
+ "SetEntriesInAclA": {
2124
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_A', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['cCountOfExplicitEntries', 'pListOfExplicitEntries', 'OldAcl', 'NewAcl']}"
2125
+ },
2126
+ "SetEntriesInAclW": {
2127
+ "proto": "{'_t': 'func', 'args': [{'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EXPLICIT_ACCESS_W', 'ot': '_ref'}, 'label': 'LPArray'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['cCountOfExplicitEntries', 'pListOfExplicitEntries', 'OldAcl', 'NewAcl']}"
2128
+ },
2129
+ "SetEntriesInAuditListA": {
2130
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2131
+ },
2132
+ "SetEntriesInAuditListW": {
2133
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2134
+ },
2135
+ "SetFileSecurityA": {
2136
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpFileName', 'SecurityInformation', 'pSecurityDescriptor']}"
2137
+ },
2138
+ "SetFileSecurityW": {
2139
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpFileName', 'SecurityInformation', 'pSecurityDescriptor']}"
2140
+ },
2141
+ "SetInformationCodeAuthzLevelW": {
2142
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2143
+ },
2144
+ "SetInformationCodeAuthzPolicyW": {
2145
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2146
+ },
2147
+ "SetKernelObjectSecurity": {
2148
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['Handle', 'SecurityInformation', 'SecurityDescriptor']}"
2149
+ },
2150
+ "SetNamedSecurityInfoA": {
2151
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pObjectName', 'ObjectType', 'SecurityInfo', 'psidOwner', 'psidGroup', 'pDacl', 'pSacl']}"
2152
+ },
2153
+ "SetNamedSecurityInfoExA": {
2154
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2155
+ },
2156
+ "SetNamedSecurityInfoExW": {
2157
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2158
+ },
2159
+ "SetNamedSecurityInfoW": {
2160
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pObjectName', 'ObjectType', 'SecurityInfo', 'psidOwner', 'psidGroup', 'pDacl', 'pSacl']}"
2161
+ },
2162
+ "SetPrivateObjectSecurity": {
2163
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SecurityInformation', 'ModificationDescriptor', 'ObjectsSecurityDescriptor', 'GenericMapping', 'Token']}"
2164
+ },
2165
+ "SetPrivateObjectSecurityEx": {
2166
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'SECURITY_AUTO_INHERIT_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'GENERIC_MAPPING', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['SecurityInformation', 'ModificationDescriptor', 'ObjectsSecurityDescriptor', 'AutoInheritFlags', 'GenericMapping', 'Token']}"
2167
+ },
2168
+ "SetSecurityAccessMask": {
2169
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['SecurityInformation', 'DesiredAccess']}"
2170
+ },
2171
+ "SetSecurityDescriptorControl": {
2172
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SECURITY_DESCRIPTOR_CONTROL', 'ot': 'short'}, {'_t': '_ref', 'name': 'SECURITY_DESCRIPTOR_CONTROL', 'ot': 'short'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'ControlBitsOfInterest', 'ControlBitsToSet']}"
2173
+ },
2174
+ "SetSecurityDescriptorDacl": {
2175
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'bDaclPresent', 'pDacl', 'bDaclDefaulted']}"
2176
+ },
2177
+ "SetSecurityDescriptorGroup": {
2178
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'pGroup', 'bGroupDefaulted']}"
2179
+ },
2180
+ "SetSecurityDescriptorOwner": {
2181
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'pOwner', 'bOwnerDefaulted']}"
2182
+ },
2183
+ "SetSecurityDescriptorRMControl": {
2184
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['SecurityDescriptor', 'RMControl']}"
2185
+ },
2186
+ "SetSecurityDescriptorSacl": {
2187
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['pSecurityDescriptor', 'bSaclPresent', 'pSacl', 'bSaclDefaulted']}"
2188
+ },
2189
+ "SetSecurityInfo": {
2190
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['handle', 'ObjectType', 'SecurityInfo', 'psidOwner', 'psidGroup', 'pDacl', 'pSacl']}"
2191
+ },
2192
+ "SetSecurityInfoExA": {
2193
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2194
+ },
2195
+ "SetSecurityInfoExW": {
2196
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2197
+ },
2198
+ "SetServiceBits": {
2199
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SERVICE_STATUS_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hServiceStatus', 'dwServiceBits', 'bSetBitsOn', 'bUpdateImmediately']}"
2200
+ },
2201
+ "SetServiceObjectSecurity": {
2202
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSECURITY_DESCRIPTOR', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwSecurityInformation', 'lpSecurityDescriptor']}"
2203
+ },
2204
+ "SetServiceStatus": {
2205
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SERVICE_STATUS_HANDLE', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SERVICE_STATUS', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hServiceStatus', 'lpServiceStatus']}"
2206
+ },
2207
+ "SetThreadToken": {
2208
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'HANDLE', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['Thread', 'Token']}"
2209
+ },
2210
+ "SetTokenInformation": {
2211
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'TOKEN_INFORMATION_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['TokenHandle', 'TokenInformationClass', 'TokenInformation', 'TokenInformationLength']}"
2212
+ },
2213
+ "SetTraceCallback": {
2214
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE', 'ot': '_ref'}}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pEvent']}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pGuid', 'EventCallback']}"
2215
+ },
2216
+ "SetUserFileEncryptionKey": {
2217
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENCRYPTION_CERTIFICATE', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['pEncryptionCertificate']}"
2218
+ },
2219
+ "SetUserFileEncryptionKeyEx": {
2220
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ENCRYPTION_CERTIFICATE', 'ot': '_ref'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['pEncryptionCertificate', 'dwCapabilities', 'dwFlags', 'pvReserved']}"
2221
+ },
2222
+ "StartServiceA": {
2223
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PSTR', 'ot': '_ref'}, 'label': 'LPArray'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwNumServiceArgs', 'lpServiceArgVectors']}"
2224
+ },
2225
+ "StartServiceCtrlDispatcherA": {
2226
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SERVICE_TABLE_ENTRYA', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpServiceStartTable']}"
2227
+ },
2228
+ "StartServiceCtrlDispatcherW": {
2229
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'SERVICE_TABLE_ENTRYW', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['lpServiceStartTable']}"
2230
+ },
2231
+ "StartServiceW": {
2232
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PWSTR', 'ot': '_ref'}, 'label': 'LPArray'}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['hService', 'dwNumServiceArgs', 'lpServiceArgVectors']}"
2233
+ },
2234
+ "StartTraceA": {
2235
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'InstanceName', 'Properties']}"
2236
+ },
2237
+ "StartTraceW": {
2238
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'InstanceName', 'Properties']}"
2239
+ },
2240
+ "StopTraceA": {
2241
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'InstanceName', 'Properties']}"
2242
+ },
2243
+ "StopTraceW": {
2244
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'InstanceName', 'Properties']}"
2245
+ },
2246
+ "SystemFunction001": {
2247
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2248
+ },
2249
+ "SystemFunction002": {
2250
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2251
+ },
2252
+ "SystemFunction003": {
2253
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2254
+ },
2255
+ "SystemFunction004": {
2256
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2257
+ },
2258
+ "SystemFunction005": {
2259
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2260
+ },
2261
+ "SystemFunction006": {
2262
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2263
+ },
2264
+ "SystemFunction007": {
2265
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2266
+ },
2267
+ "SystemFunction008": {
2268
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2269
+ },
2270
+ "SystemFunction009": {
2271
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2272
+ },
2273
+ "SystemFunction010": {
2274
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2275
+ },
2276
+ "SystemFunction011": {
2277
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2278
+ },
2279
+ "SystemFunction012": {
2280
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2281
+ },
2282
+ "SystemFunction013": {
2283
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2284
+ },
2285
+ "SystemFunction014": {
2286
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2287
+ },
2288
+ "SystemFunction015": {
2289
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2290
+ },
2291
+ "SystemFunction016": {
2292
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2293
+ },
2294
+ "SystemFunction017": {
2295
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2296
+ },
2297
+ "SystemFunction018": {
2298
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2299
+ },
2300
+ "SystemFunction019": {
2301
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2302
+ },
2303
+ "SystemFunction020": {
2304
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2305
+ },
2306
+ "SystemFunction021": {
2307
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2308
+ },
2309
+ "SystemFunction022": {
2310
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2311
+ },
2312
+ "SystemFunction023": {
2313
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2314
+ },
2315
+ "SystemFunction024": {
2316
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2317
+ },
2318
+ "SystemFunction025": {
2319
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2320
+ },
2321
+ "SystemFunction026": {
2322
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2323
+ },
2324
+ "SystemFunction027": {
2325
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2326
+ },
2327
+ "SystemFunction028": {
2328
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2329
+ },
2330
+ "SystemFunction029": {
2331
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2332
+ },
2333
+ "SystemFunction030": {
2334
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2335
+ },
2336
+ "SystemFunction031": {
2337
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2338
+ },
2339
+ "SystemFunction032": {
2340
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2341
+ },
2342
+ "SystemFunction033": {
2343
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2344
+ },
2345
+ "SystemFunction034": {
2346
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2347
+ },
2348
+ "SystemFunction035": {
2349
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2350
+ },
2351
+ "TraceEvent": {
2352
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_HEADER', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'EventTrace']}"
2353
+ },
2354
+ "TraceEventInstance": {
2355
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_INSTANCE_HEADER', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_INSTANCE_INFO', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_INSTANCE_INFO', 'ot': '_ref'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['TraceHandle', 'EventTrace', 'InstInfo', 'ParentInstInfo']}"
2356
+ },
2357
+ "TraceMessage": {
2358
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': '_ref', 'name': 'TRACE_MESSAGE_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'short', 'signed': false, 'label': 'UInt16'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['LoggerHandle', 'MessageFlags', 'MessageGuid', 'MessageNumber']}"
2359
+ },
2360
+ "TraceMessageVa": {
2361
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}, {'_t': '_ref', 'name': 'TRACE_MESSAGE_FLAGS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'Guid', 'ot': '_ref'}}, {'_t': 'short', 'signed': false, 'label': 'UInt16'}, {'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': true, 'label': 'SByte'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['LoggerHandle', 'MessageFlags', 'MessageGuid', 'MessageNumber', 'MessageArgList']}"
2362
+ },
2363
+ "TraceQueryInformation": {
2364
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'TRACE_QUERY_INFO_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['SessionHandle', 'InformationClass', 'TraceInformation', 'InformationLength', 'ReturnLength']}"
2365
+ },
2366
+ "TraceSetInformation": {
2367
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'TRACE_QUERY_INFO_CLASS', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['SessionHandle', 'InformationClass', 'TraceInformation', 'InformationLength']}"
2368
+ },
2369
+ "TreeResetNamedSecurityInfoA": {
2370
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PROG_INVOKE_SETTING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pObjectName', 'Status', 'pInvokeSetting', 'Args', 'SecuritySet']}}, {'_t': '_ref', 'name': 'PROG_INVOKE_SETTING', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pObjectName', 'ObjectType', 'SecurityInfo', 'pOwner', 'pGroup', 'pDacl', 'pSacl', 'KeepExplicit', 'fnProgress', 'ProgressInvokeSetting', 'Args']}"
2371
+ },
2372
+ "TreeResetNamedSecurityInfoW": {
2373
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PROG_INVOKE_SETTING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pObjectName', 'Status', 'pInvokeSetting', 'Args', 'SecuritySet']}}, {'_t': '_ref', 'name': 'PROG_INVOKE_SETTING', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pObjectName', 'ObjectType', 'SecurityInfo', 'pOwner', 'pGroup', 'pDacl', 'pSacl', 'KeepExplicit', 'fnProgress', 'ProgressInvokeSetting', 'Args']}"
2374
+ },
2375
+ "TreeSetNamedSecurityInfoA": {
2376
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'TREE_SEC_INFO', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PROG_INVOKE_SETTING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pObjectName', 'Status', 'pInvokeSetting', 'Args', 'SecuritySet']}}, {'_t': '_ref', 'name': 'PROG_INVOKE_SETTING', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pObjectName', 'ObjectType', 'SecurityInfo', 'pOwner', 'pGroup', 'pDacl', 'pSacl', 'dwAction', 'fnProgress', 'ProgressInvokeSetting', 'Args']}"
2377
+ },
2378
+ "TreeSetNamedSecurityInfoW": {
2379
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'SE_OBJECT_TYPE', 'ot': 'int'}, {'_t': '_ref', 'name': 'OBJECT_SECURITY_INFORMATION', 'ot': 'int'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': '_ref', 'name': 'PSID', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'ACL', 'ot': '_ref'}}, {'_t': '_ref', 'name': 'TREE_SEC_INFO', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'PROG_INVOKE_SETTING', 'ot': '_ref'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}], 'returnty': {'_t': 'bot', 'label': 'Void'}, 'arg_names': ['pObjectName', 'Status', 'pInvokeSetting', 'Args', 'SecuritySet']}}, {'_t': '_ref', 'name': 'PROG_INVOKE_SETTING', 'ot': 'int'}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['pObjectName', 'ObjectType', 'SecurityInfo', 'pOwner', 'pGroup', 'pDacl', 'pSacl', 'dwAction', 'fnProgress', 'ProgressInvokeSetting', 'Args']}"
2380
+ },
2381
+ "TrusteeAccessToObjectA": {
2382
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2383
+ },
2384
+ "TrusteeAccessToObjectW": {
2385
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2386
+ },
2387
+ "UninstallApplication": {
2388
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['ProductCode', 'dwStatus']}"
2389
+ },
2390
+ "UnlockServiceDatabase": {
2391
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': '_ref', 'name': 'BOOL', 'ot': 'int'}, 'arg_names': ['ScLock']}"
2392
+ },
2393
+ "UnregisterIdleTask": {
2394
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2395
+ },
2396
+ "UnregisterTraceGuids": {
2397
+ "proto": "{'_t': 'func', 'args': [{'_t': 'llong', 'signed': false, 'label': 'UInt64'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['RegistrationHandle']}"
2398
+ },
2399
+ "UpdateTraceA": {
2400
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'PSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'InstanceName', 'Properties']}"
2401
+ },
2402
+ "UpdateTraceW": {
2403
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'CONTROLTRACE_HANDLE', 'ot': '_ref'}, {'_t': '_ref', 'name': 'PWSTR', 'ot': 'ptr'}, {'_t': 'ptr', 'pts_to': {'_t': '_ref', 'name': 'EVENT_TRACE_PROPERTIES', 'ot': '_ref'}}], 'returnty': {'_t': '_ref', 'name': 'WIN32_ERROR', 'ot': 'int'}, 'arg_names': ['TraceHandle', 'InstanceName', 'Properties']}"
2404
+ },
2405
+ "UsePinForEncryptedFilesA": {
2406
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2407
+ },
2408
+ "UsePinForEncryptedFilesW": {
2409
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2410
+ },
2411
+ "WaitServiceState": {
2412
+ "proto": "{'_t': 'func', 'args': [{'_t': '_ref', 'name': 'SC_HANDLE', 'ot': 'ptr'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': 'int', 'signed': false, 'label': 'UInt32'}, {'_t': '_ref', 'name': 'HANDLE', 'ot': 'ptr'}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['hService', 'dwNotify', 'dwTimeout', 'hCancelEvent']}"
2413
+ },
2414
+ "WmiCloseBlock": {
2415
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2416
+ },
2417
+ "WmiDevInstToInstanceNameA": {
2418
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2419
+ },
2420
+ "WmiDevInstToInstanceNameW": {
2421
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2422
+ },
2423
+ "WmiEnumerateGuids": {
2424
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2425
+ },
2426
+ "WmiExecuteMethodA": {
2427
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2428
+ },
2429
+ "WmiExecuteMethodW": {
2430
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2431
+ },
2432
+ "WmiFileHandleToInstanceNameA": {
2433
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2434
+ },
2435
+ "WmiFileHandleToInstanceNameW": {
2436
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2437
+ },
2438
+ "WmiFreeBuffer": {
2439
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2440
+ },
2441
+ "WmiMofEnumerateResourcesA": {
2442
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2443
+ },
2444
+ "WmiMofEnumerateResourcesW": {
2445
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2446
+ },
2447
+ "WmiNotificationRegistrationA": {
2448
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2449
+ },
2450
+ "WmiNotificationRegistrationW": {
2451
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2452
+ },
2453
+ "WmiOpenBlock": {
2454
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2455
+ },
2456
+ "WmiQueryAllDataA": {
2457
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2458
+ },
2459
+ "WmiQueryAllDataMultipleA": {
2460
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2461
+ },
2462
+ "WmiQueryAllDataMultipleW": {
2463
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2464
+ },
2465
+ "WmiQueryAllDataW": {
2466
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2467
+ },
2468
+ "WmiQueryGuidInformation": {
2469
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2470
+ },
2471
+ "WmiQuerySingleInstanceA": {
2472
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2473
+ },
2474
+ "WmiQuerySingleInstanceMultipleA": {
2475
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2476
+ },
2477
+ "WmiQuerySingleInstanceMultipleW": {
2478
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2479
+ },
2480
+ "WmiQuerySingleInstanceW": {
2481
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2482
+ },
2483
+ "WmiReceiveNotificationsA": {
2484
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2485
+ },
2486
+ "WmiReceiveNotificationsW": {
2487
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2488
+ },
2489
+ "WmiSetSingleInstanceA": {
2490
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2491
+ },
2492
+ "WmiSetSingleInstanceW": {
2493
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2494
+ },
2495
+ "WmiSetSingleItemA": {
2496
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2497
+ },
2498
+ "WmiSetSingleItemW": {
2499
+ "proto": "{'_t': 'func', 'args': [{'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}, {'_t': 'long'}], 'returnty': {'_t': 'long'}, 'arg_names': []}"
2500
+ },
2501
+ "WriteEncryptedFileRaw": {
2502
+ "proto": "{'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'func', 'args': [{'_t': 'ptr', 'pts_to': {'_t': 'char', 'signed': false, 'label': 'Byte'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'int', 'signed': false, 'label': 'UInt32'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['pbData', 'pvCallbackContext', 'ulLength']}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}, {'_t': 'ptr', 'pts_to': {'_t': 'bot', 'label': 'Void'}}], 'returnty': {'_t': 'int', 'signed': false, 'label': 'UInt32'}, 'arg_names': ['pfImportCallback', 'pvCallbackContext', 'pvContext']}"
2503
+ }
2504
+ }
2505
+ }