Debugging API wrappers in ctypes.
|
|
|
|
|
|
|
|
| SetLastErrorEx(dwErrCode,
dwType) |
|
|
|
|
|
|
|
| DuplicateHandle(hSourceHandle,
hSourceProcessHandle=None,
hTargetProcessHandle=None,
dwDesiredAccess=2031616,
bInheritHandle=0,
dwOptions=2) |
|
|
|
|
| SetDllDirectory(lpPathName) |
|
|
|
|
|
|
|
| LoadLibraryEx(pszLibrary,
dwFlags) |
|
|
|
|
| GetModuleHandleA(lpModuleName) |
|
|
|
|
| GetModuleHandleW(lpModuleName) |
|
|
|
|
| GetModuleHandle(lpModuleName) |
|
|
|
|
| GetProcAddress(hModule,
lpProcName) |
|
|
|
|
|
|
|
| QueryFullProcessImageNameA(hProcess,
dwFlags=0) |
|
|
|
|
| QueryFullProcessImageNameW(hProcess,
dwFlags) |
|
|
|
|
| QueryFullProcessImageName(hProcess,
dwFlags=0) |
|
|
|
|
|
|
|
| QueryDosDeviceA(lpDeviceName) |
|
|
|
|
| QueryDosDeviceW(lpDeviceName) |
|
|
|
|
| QueryDosDevice(lpDeviceName) |
|
|
|
|
| MapViewOfFile(hFileMappingObject,
dwDesiredAccess=983103,
dwFileOffsetHigh=0,
dwFileOffsetLow=0,
dwNumberOfBytesToMap=0) |
|
|
|
|
| UnmapViewOfFile(lpBaseAddress) |
|
|
|
|
| OpenFileMapping(dwDesiredAccess,
bInheritHandle,
lpName) |
|
|
|
|
| CreateFileMappingA(hFile,
lpAttributes=0,
flProtect=64,
dwMaximumSizeHigh=0,
dwMaximumSizeLow=0,
lpName=0) |
|
|
|
|
| CreateFileMappingW(hFile,
lpAttributes=0,
flProtect=64,
dwMaximumSizeHigh=0,
dwMaximumSizeLow=0,
lpName=0) |
|
|
|
|
| CreateFileMapping(hFile,
lpAttributes=0,
flProtect=64,
dwMaximumSizeHigh=0,
dwMaximumSizeLow=0,
lpName=0) |
|
|
|
|
| CreateFileA(lpFileName,
dwDesiredAccess=268435456,
dwShareMode=0,
lpSecurityAttributes=0,
dwCreationDisposition=4,
dwFlagsAndAttributes=128,
hTemplateFile=0) |
|
|
|
|
| CreateFileW(lpFileName,
dwDesiredAccess=268435456,
dwShareMode=0,
lpSecurityAttributes=0,
dwCreationDisposition=4,
dwFlagsAndAttributes=128,
hTemplateFile=0) |
|
|
|
|
| CreateFile(lpFileName,
dwDesiredAccess=268435456,
dwShareMode=0,
lpSecurityAttributes=0,
dwCreationDisposition=4,
dwFlagsAndAttributes=128,
hTemplateFile=0) |
|
|
|
|
|
|
|
| FlushViewOfFile(lpBaseAddress,
dwNumberOfBytesToFlush=0) |
|
|
|
|
| SearchPathA(lpPath,
lpFileName,
lpExtension) |
|
|
|
|
| SearchPathW(lpPath,
lpFileName,
lpExtension) |
|
|
|
|
| SearchPath(lpPath,
lpFileName,
lpExtension) |
|
|
|
|
|
|
|
| DeviceIoControl(hDevice,
dwIoControlCode,
lpInBuffer,
nInBufferSize,
lpOutBuffer,
nOutBufferSize,
lpOverlapped) |
|
|
|
|
| GetFileInformationByHandle(hFile) |
|
|
|
|
| GetFileInformationByHandleEx(hFile,
FileInformationClass,
lpFileInformation,
dwBufferSize) |
|
|
|
|
| GetFullPathNameA(lpFileName,
nBufferLength=260) |
|
|
|
|
| GetFullPathNameW(lpFileName,
nBufferLength=260) |
|
|
|
|
| GetFullPathName(lpFileName,
nBufferLength=260) |
|
|
|
|
|
|
|
|
|
|
|
|
|
GetTempFileNameA(lpPathName=None,
lpPrefixString='TMP',
uUnique=0) |
|
|
|
|
GetTempFileNameW(lpPathName=None,
lpPrefixString=u'TMP',
uUnique=0) |
|
|
|
|
GetTempFileName(lpPathName=None,
lpPrefixString='TMP',
uUnique=0) |
|
|
|
|
|
|
|
| SetConsoleCtrlHandler(HandlerRoutine=None,
Add=True) |
|
|
|
|
| GenerateConsoleCtrlEvent(dwCtrlEvent,
dwProcessGroupId) |
|
|
|
|
| WaitForSingleObject(hHandle,
dwMilliseconds=-1) |
|
|
|
|
| WaitForSingleObjectEx(hHandle,
dwMilliseconds=-1,
bAlertable=True) |
|
|
|
|
| WaitForMultipleObjects(handles,
bWaitAll=False,
dwMilliseconds=-1) |
|
|
|
|
| WaitForMultipleObjectsEx(handles,
bWaitAll=False,
dwMilliseconds=-1) |
|
|
|
|
| WaitForDebugEvent(dwMilliseconds=-1) |
|
|
|
|
| ContinueDebugEvent(dwProcessId,
dwThreadId,
dwContinueStatus=2147549185) |
|
|
|
|
| FlushInstructionCache(hProcess,
lpBaseAddress=0,
dwSize=0) |
|
|
|
|
| DebugActiveProcess(dwProcessId) |
|
|
|
|
| DebugActiveProcessStop(dwProcessId) |
|
|
|
|
| CreateProcessA(lpApplicationName,
lpCommandLine=None,
lpProcessAttributes=None,
lpThreadAttributes=None,
bInheritHandles=False,
dwCreationFlags=0,
lpEnvironment=None,
lpCurrentDirectory=None,
lpStartupInfo=None) |
|
|
|
|
| CreateProcessW(lpApplicationName,
lpCommandLine=None,
lpProcessAttributes=None,
lpThreadAttributes=None,
bInheritHandles=False,
dwCreationFlags=0,
lpEnvironment=None,
lpCurrentDirectory=None,
lpStartupInfo=None) |
|
|
|
|
| CreateProcess(lpApplicationName,
lpCommandLine=None,
lpProcessAttributes=None,
lpThreadAttributes=None,
bInheritHandles=False,
dwCreationFlags=0,
lpEnvironment=None,
lpCurrentDirectory=None,
lpStartupInfo=None) |
|
|
|
|
| CreateProcessAsUser(hToken,
lpApplicationName,
lpCommandLine=None,
lpProcessAttributes=None,
lpThreadAttributes=None,
bInheritHandles=False,
dwCreationFlags=0,
lpEnvironment=None,
lpCurrentDirectory=None,
lpStartupInfo=None) |
|
|
|
|
| OpenProcess(dwDesiredAccess,
bInheritHandle,
dwProcessId) |
|
|
|
|
| OpenThread(dwDesiredAccess,
bInheritHandle,
dwThreadId) |
|
|
|
|
|
|
|
|
|
|
| TerminateThread(hThread,
dwExitCode=0) |
|
|
|
|
| TerminateProcess(hProcess,
dwExitCode=0) |
|
|
|
|
| ReadProcessMemory(hProcess,
lpBaseAddress,
nSize) |
|
|
|
|
| WriteProcessMemory(hProcess,
lpBaseAddress,
lpBuffer) |
|
|
|
|
| VirtualAllocEx(hProcess,
lpAddress=0,
dwSize=4096,
flAllocationType=12288,
flProtect=64) |
|
|
|
|
| VirtualQueryEx(hProcess,
lpAddress) |
|
|
|
|
| VirtualProtectEx(hProcess,
lpAddress,
dwSize,
flNewProtect=64) |
|
|
|
|
| VirtualFreeEx(hProcess,
lpAddress,
dwSize=0,
dwFreeType=32768) |
|
|
|
|
| GetThreadSelectorEntry(hThread,
dwSelector) |
|
|
|
|
| CreateRemoteThread(hProcess,
lpThreadAttributes,
dwStackSize,
lpStartAddress,
lpParameter,
dwCreationFlags) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| GetProcessIdOfThread(hThread) |
|
|
|
|
| GetExitCodeProcess(hProcess) |
|
|
|
|
| GetExitCodeThread(hThread) |
|
|
|
|
| GetProcessVersion(ProcessId) |
|
|
|
|
| GetPriorityClass(hProcess) |
|
|
|
|
| SetPriorityClass(hProcess,
dwPriorityClass) |
|
|
|
|
| GetProcessPriorityBoost(hProcess) |
|
|
|
|
| SetProcessPriorityBoost(hProcess,
DisablePriorityBoost) |
|
|
|
|
| CheckRemoteDebuggerPresent(hProcess) |
|
|
|
|
| DebugSetProcessKillOnExit(KillOnExit) |
|
|
|
|
| DebugBreakProcess(hProcess) |
|
|
|
|
| GetThreadContext(hThread,
ContextFlags=65599) |
|
|
|
|
| SetThreadContext(hThread,
lpContext) |
|
|
|
|
| CreateToolhelp32Snapshot(dwFlags=15,
th32ProcessID=0) |
|
|
|
|
| Process32First(hSnapshot) |
|
|
|
|
| Process32Next(hSnapshot,
pe=None) |
|
|
|
|
|
|
|
| Thread32Next(hSnapshot,
te=None) |
|
|
|
|
|
|
|
| Module32Next(hSnapshot,
me=None) |
|
|
|
|
| Heap32First(th32ProcessID,
th32HeapID) |
|
|
|
|
|
|
|
| Heap32ListFirst(hSnapshot) |
|
|
|
|
| Heap32ListNext(hSnapshot,
hl=None) |
|
|
|
|
| Toolhelp32ReadProcessMemory(th32ProcessID,
lpBaseAddress,
nSize) |
|
|
|
|
| GetCurrentProcessorNumber() |
|
|
|
|
| FlushProcessWriteBuffers() |
|
|
|
|
| GetGuiResources(hProcess,
uiFlags) |
|
|
|
|
| GetProcessHandleCount(hProcess) |
|
|
|
|
|
|
|
|
|
|
|
|
|
| NtSystemDebugControl(Command,
InputBuffer,
InputBufferLength,
OutputBuffer,
OutputBufferLength,
ReturnLength) |
|
|
|
|
| ZwSystemDebugControl(Command,
InputBuffer,
InputBufferLength,
OutputBuffer,
OutputBufferLength,
ReturnLength) |
|
|
|
|
| NtQueryInformationProcess(ProcessHandle,
ProcessInformationClass,
ProcessInformationLength=None) |
|
|
|
|
| ZwQueryInformationProcess(ProcessHandle,
ProcessInformationClass,
ProcessInformationLength=None) |
|
|
|
|
| NtQueryInformationThread(ThreadHandle,
ThreadInformationClass,
ThreadInformationLength=None) |
|
|
|
|
| ZwQueryInformationThread(ThreadHandle,
ThreadInformationClass,
ThreadInformationLength=None) |
|
|
|
|
| NtQueryInformationFile(FileHandle,
FileInformationClass,
FileInformation,
Length) |
|
|
|
|
| ZwQueryInformationFile(FileHandle,
FileInformationClass,
FileInformation,
Length) |
|
|
|
|
| OpenProcessToken(ProcessHandle,
DesiredAccess) |
|
|
|
|
| OpenThreadToken(ThreadHandle,
DesiredAccess,
OpenAsSelf=True) |
|
|
|
|
| LookupPrivilegeValue(lpSystemName,
lpName) |
|
|
|
|
| LookupPrivilegeName(lpSystemName,
lpLuid) |
|
|
|
|
AdjustTokenPrivileges(TokenHandle,
NewState=()) |
|
|
|
|
| CommandLineToArgvW(lpCmdLine) |
|
|
|
|
| CommandLineToArgvA(lpCmdLine) |
|
|
|
|
| CommandLineToArgv(lpCmdLine) |
|
|
|
|
| ShellExecuteA(hwnd=None,
lpOperation=None,
lpFile=None,
lpParameters=None,
lpDirectory=None,
nShowCmd=None) |
|
|
|
|
| ShellExecuteW(hwnd=None,
lpOperation=None,
lpFile=None,
lpParameters=None,
lpDirectory=None,
nShowCmd=None) |
|
|
|
|
| ShellExecute(hwnd=None,
lpOperation=None,
lpFile=None,
lpParameters=None,
lpDirectory=None,
nShowCmd=None) |
|
|
|
|
|
|
|
|
|
|
| EnumProcessModules(hProcess) |
|
|
|
|
| EnumProcessModulesEx(hProcess,
dwFilterFlag=0) |
|
|
|
|
| GetDeviceDriverBaseNameA(ImageBase) |
|
|
|
|
| GetDeviceDriverBaseNameW(ImageBase) |
|
|
|
|
| GetDeviceDriverBaseName(ImageBase) |
|
|
|
|
| GetDeviceDriverFileNameA(ImageBase) |
|
|
|
|
| GetDeviceDriverFileNameW(ImageBase) |
|
|
|
|
| GetDeviceDriverFileName(ImageBase) |
|
|
|
|
| GetMappedFileNameA(hProcess,
lpv) |
|
|
|
|
| GetMappedFileNameW(hProcess,
lpv) |
|
|
|
|
| GetMappedFileName(hProcess,
lpv) |
|
|
|
|
| GetModuleFileNameExA(hProcess,
hModule) |
|
|
|
|
| GetModuleFileNameExW(hProcess,
hModule) |
|
|
|
|
| GetModuleFileNameEx(hProcess,
hModule) |
|
|
|
|
| GetModuleInformation(hProcess,
hModule,
lpmodinfo=None) |
|
|
|
|
| GetProcessImageFileNameA(hProcess) |
|
|
|
|
| GetProcessImageFileNameW(hProcess) |
|
|
|
|
| GetProcessImageFileName(hProcess) |
|
|
|
|
| PathAddBackslashA(lpszPath) |
|
|
|
|
| PathAddBackslashW(lpszPath) |
|
|
|
|
| PathAddBackslash(lpszPath) |
|
|
|
|
| PathAddExtensionA(lpszPath,
pszExtension=None) |
|
|
|
|
| PathAddExtensionW(lpszPath,
pszExtension=None) |
|
|
|
|
| PathAddExtension(lpszPath,
pszExtension=None) |
|
|
|
|
| PathAppendA(lpszPath,
pszMore=None) |
|
|
|
|
| PathAppendW(lpszPath,
pszMore=None) |
|
|
|
|
| PathAppend(lpszPath,
pszMore=None) |
|
|
|
|
| PathCombineA(lpszDir,
lpszFile) |
|
|
|
|
| PathCombineW(lpszDir,
lpszFile) |
|
|
|
|
| PathCombine(lpszDir,
lpszFile) |
|
|
|
|
| PathCanonicalizeA(lpszSrc) |
|
|
|
|
| PathCanonicalizeW(lpszSrc) |
|
|
|
|
| PathCanonicalize(lpszSrc) |
|
|
|
|
|
|
|
|
|
|
|
|
|
| PathFindExtensionA(pszPath) |
|
|
|
|
| PathFindExtensionW(pszPath) |
|
|
|
|
| PathFindExtension(pszPath) |
|
|
|
|
| PathFindFileNameA(pszPath) |
|
|
|
|
| PathFindFileNameW(pszPath) |
|
|
|
|
| PathFindFileName(pszPath) |
|
|
|
|
| PathFindNextComponentA(pszPath) |
|
|
|
|
| PathFindNextComponentW(pszPath) |
|
|
|
|
| PathFindNextComponent(pszPath) |
|
|
|
|
| PathFindOnPathA(pszFile,
ppszOtherDirs=None) |
|
|
|
|
| PathFindOnPathW(pszFile,
ppszOtherDirs=None) |
|
|
|
|
| PathFindOnPath(pszFile,
ppszOtherDirs=None) |
|
|
|
|
|
|
|
|
|
|
|
|
|
| PathIsContentTypeA(pszPath,
pszContentType) |
|
|
|
|
| PathIsContentTypeW(pszPath,
pszContentType) |
|
|
|
|
| PathIsContentType(pszPath,
pszContentType) |
|
|
|
|
| PathIsDirectoryA(pszPath) |
|
|
|
|
| PathIsDirectoryW(pszPath) |
|
|
|
|
|
|
|
| PathIsDirectoryEmptyA(pszPath) |
|
|
|
|
| PathIsDirectoryEmptyW(pszPath) |
|
|
|
|
| PathIsDirectoryEmpty(pszPath) |
|
|
|
|
| PathIsNetworkPathA(pszPath) |
|
|
|
|
| PathIsNetworkPathW(pszPath) |
|
|
|
|
| PathIsNetworkPath(pszPath) |
|
|
|
|
| PathIsRelativeA(lpszPath) |
|
|
|
|
| PathIsRelativeW(lpszPath) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| PathIsSameRootA(pszPath1,
pszPath2) |
|
|
|
|
| PathIsSameRootW(pszPath1,
pszPath2) |
|
|
|
|
| PathIsSameRoot(pszPath1,
pszPath2) |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| PathRemoveBackslashA(pszPath) |
|
|
|
|
| PathRemoveBackslashW(pszPath) |
|
|
|
|
| PathRemoveBackslash(pszPath) |
|
|
|
|
| PathRemoveExtensionA(pszPath) |
|
|
|
|
| PathRemoveExtensionW(pszPath) |
|
|
|
|
| PathRemoveExtension(pszPath) |
|
|
|
|
| PathRemoveFileSpecA(pszPath) |
|
|
|
|
| PathRemoveFileSpecW(pszPath) |
|
|
|
|
| PathRemoveFileSpec(pszPath) |
|
|
|
|
| PathRenameExtensionA(pszPath,
pszExt) |
|
|
|
|
| PathRenameExtensionW(pszPath,
pszExt) |
|
|
|
|
| PathRenameExtension(pszPath,
pszExt) |
|
|
|
|
| PathUnExpandEnvStringsA(pszPath) |
|
|
|
|
| PathUnExpandEnvStringsW(pszPath) |
|
|
|
|
| SymInitializeA(hProcess,
UserSearchPath=None,
fInvadeProcess=False) |
|
|
|
|
| SymInitializeW(hProcess,
UserSearchPath=None,
fInvadeProcess=False) |
|
|
|
|
| SymInitialize(hProcess,
UserSearchPath=None,
fInvadeProcess=False) |
|
|
|
|
|
|
|
| SymRefreshModuleList(hProcess) |
|
|
|
|
|
|
|
| SymSetOptions(SymOptions) |
|
|
|
|
|
|
|
| SymLoadModule(hProcess,
hFile=None,
ImageName=None,
ModuleName=None,
BaseOfDll=None,
SizeOfDll=None) |
|
|
|
|
| SymUnloadModule(hProcess,
BaseOfDll) |
|
|
|
|
| SymGetModuleInfoA(hProcess,
dwAddr) |
|
|
|
|
| SymGetModuleInfoW(hProcess,
dwAddr) |
|
|
|
|
| SymEnumerateModulesA(hProcess,
BaseOfDll,
EnumModulesCallback,
UserContext=None) |
|
|
|
|
| SymEnumerateModulesW(hProcess,
BaseOfDll,
EnumModulesCallback,
UserContext=None) |
|
|
|
|
| SymEnumerateModules(hProcess,
BaseOfDll,
EnumModulesCallback,
UserContext=None) |
|
|
|
|
| SymEnumerateSymbolsA(hProcess,
BaseOfDll,
EnumSymbolsCallback,
UserContext=None) |
|
|
|
|
| SymEnumerateSymbolsW(hProcess,
BaseOfDll,
EnumSymbolsCallback,
UserContext=None) |
|
|
|
|
| SymEnumerateSymbols(hProcess,
BaseOfDll,
EnumSymbolsCallback,
UserContext=None) |
|
|
|
|
| SymGetSearchPathA(hProcess) |
|
|
|
|
| SymGetSearchPathW(hProcess) |
|
|
|
|
| SymGetSearchPath(hProcess) |
|
|
|
|
| SymSetSearchPathA(hProcess,
SearchPath=None) |
|
|
|
|
| SymSetSearchPathW(hProcess,
SearchPath=None) |
|
|
|
|
| SymSetSearchPath(hProcess,
SearchPath=None) |
|
|
|
|
__revision__ = '$Id: win32.py 148 2009-05-15 03:29:23Z qvasimo...
|
|
|
NULL = 0
|
|
|
INFINITE = -1
|
|
|
TRUE = 1
|
|
|
FALSE = 0
|
|
|
ANYSIZE_ARRAY = 1
|
|
|
INVALID_HANDLE_VALUE = -1
|
|
|
STILL_ACTIVE = 259
|
|
|
MAX_MODULE_NAME32 = 255
|
|
|
MAX_PATH = 260
|
|
|
WAIT_FAILED = -1
|
|
|
WAIT_OBJECT_0 = 0
|
|
|
EXCEPTION_NONCONTINUABLE = 1
|
|
|
EXCEPTION_MAXIMUM_PARAMETERS = 15
|
|
|
MAXIMUM_WAIT_OBJECTS = 64
|
|
|
MAXIMUM_SUSPEND_COUNT = 127
|
|
|
HW_ACCESS = 3
|
|
|
HW_EXECUTE = 0
|
|
|
HW_WRITE = 1
|
|
|
FORMAT_MESSAGE_ALLOCATE_BUFFER = 256
|
|
|
FORMAT_MESSAGE_FROM_SYSTEM = 4096
|
|
|
GR_GDIOBJECTS = 0
|
|
|
GR_USEROBJECTS = 1
|
|
|
PROCESS_NAME_NATIVE = 1
|
|
|
ERROR_SUCCESS = 0
|
|
|
ERROR_FILE_NOT_FOUND = 2
|
|
|
ERROR_PATH_NOT_FOUND = 3
|
|
|
ERROR_ACCESS_DENIED = 5
|
|
|
ERROR_INVALID_HANDLE = 6
|
|
|
ERROR_NOT_ENOUGH_MEMORY = 8
|
|
|
ERROR_INVALID_DRIVE = 15
|
|
|
ERROR_NO_MORE_FILES = 18
|
|
|
ERROR_HANDLE_EOF = 38
|
|
|
ERROR_HANDLE_DISK_FULL = 39
|
|
|
ERROR_NOT_SUPPORTED = 50
|
|
|
ERROR_FILE_EXISTS = 80
|
|
|
ERROR_INVALID_PARAMETER = 87
|
|
|
ERROR_BUFFER_OVERFLOW = 111
|
|
|
ERROR_DISK_FULL = 112
|
|
|
ERROR_CALL_NOT_IMPLEMENTED = 120
|
|
|
ERROR_SEM_TIMEOUT = 121
|
|
|
ERROR_INSUFFICIENT_BUFFER = 122
|
|
|
ERROR_INVALID_NAME = 123
|
|
|
ERROR_MOD_NOT_FOUND = 126
|
|
|
ERROR_PROC_NOT_FOUND = 127
|
|
|
ERROR_DIR_NOT_EMPTY = 145
|
|
|
ERROR_BAD_THREADID_ADDR = 159
|
|
|
ERROR_BAD_ARGUMENTS = 160
|
|
|
ERROR_BAD_PATHNAME = 161
|
|
|
ERROR_ALREADY_EXISTS = 183
|
|
|
ERROR_INVALID_FLAG_NUMBER = 186
|
|
|
ERROR_FILENAME_EXCED_RANGE = 206
|
|
|
WAIT_TIMEOUT = 258
|
|
|
ERROR_NO_MORE_ITEMS = 259
|
|
|
ERROR_PARTIAL_COPY = 299
|
|
|
ERROR_INVALID_ADDRESS = 487
|
|
|
ERROR_THREAD_NOT_IN_PROCESS = 566
|
|
|
ERROR_CONTROL_C_EXIT = 572
|
|
|
ERROR_UNHANDLED_EXCEPTION = 574
|
|
|
ERROR_ASSERTION_FAILURE = 668
|
|
|
ERROR_WOW_ASSERTION = 670
|
|
|
ERROR_DBG_EXCEPTION_NOT_HANDLED = 688
|
|
|
ERROR_DBG_REPLY_LATER = 689
|
|
|
ERROR_DBG_UNABLE_TO_PROVIDE_HANDLE = 690
|
|
|
ERROR_DBG_TERMINATE_THREAD = 691
|
|
|
ERROR_DBG_TERMINATE_PROCESS = 692
|
|
|
ERROR_DBG_CONTROL_C = 693
|
|
|
ERROR_DBG_PRINTEXCEPTION_C = 694
|
|
|
ERROR_DBG_RIPEXCEPTION = 695
|
|
|
ERROR_DBG_CONTROL_BREAK = 696
|
|
|
ERROR_DBG_COMMAND_EXCEPTION = 697
|
|
|
ERROR_DBG_EXCEPTION_HANDLED = 766
|
|
|
ERROR_DBG_CONTINUE = 767
|
|
|
DUPLICATE_CLOSE_SOURCE = 1
|
|
|
DUPLICATE_SAME_ACCESS = 2
|
|
|
DELETE = 65536
|
|
|
READ_CONTROL = 131072
|
|
|
WRITE_DAC = 262144
|
|
|
WRITE_OWNER = 524288
|
|
|
SYNCHRONIZE = 1048576
|
|
|
STANDARD_RIGHTS_REQUIRED = 983040
|
|
|
STANDARD_RIGHTS_READ = 131072
|
|
|
STANDARD_RIGHTS_WRITE = 131072
|
|
|
STANDARD_RIGHTS_EXECUTE = 131072
|
|
|
STANDARD_RIGHTS_ALL = 2031616
|
|
|
SPECIFIC_RIGHTS_ALL = 65535
|
|
|
PROCESS_MODE_BACKGROUND_BEGIN = 1048576
|
|
|
PROCESS_MODE_BACKGROUND_END = 2097152
|
|
|
DEBUG_PROCESS = 1
|
|
|
DEBUG_ONLY_THIS_PROCESS = 2
|
|
|
CREATE_SUSPENDED = 4
|
|
|
DETACHED_PROCESS = 8
|
|
|
CREATE_NEW_CONSOLE = 16
|
|
|
NORMAL_PRIORITY_CLASS = 32
|
|
|
IDLE_PRIORITY_CLASS = 64
|
|
|
HIGH_PRIORITY_CLASS = 128
|
|
|
REALTIME_PRIORITY_CLASS = 256
|
|
|
CREATE_NEW_PROCESS_GROUP = 512
|
|
|
CREATE_UNICODE_ENVIRONMENT = 1024
|
|
|
CREATE_SEPARATE_WOW_VDM = 2048
|
|
|
CREATE_SHARED_WOW_VDM = 4096
|
|
|
CREATE_FORCEDOS = 8192
|
|
|
BELOW_NORMAL_PRIORITY_CLASS = 16384
|
|
|
ABOVE_NORMAL_PRIORITY_CLASS = 32768
|
|
|
STACK_SIZE_PARAM_IS_A_RESERVATION = 65536
|
|
|
CREATE_BREAKAWAY_FROM_JOB = 16777216
|
|
|
CREATE_PRESERVE_CODE_AUTHZ_LEVEL = 33554432
|
|
|
CREATE_DEFAULT_ERROR_MODE = 67108864
|
|
|
CREATE_NO_WINDOW = 134217728
|
|
|
PROFILE_USER = 268435456
|
|
|
PROFILE_KERNEL = 536870912
|
|
|
PROFILE_SERVER = 1073741824
|
|
|
CREATE_IGNORE_SYSTEM_DEFAULT = 2147483648
|
|
|
THREAD_BASE_PRIORITY_LOWRT = 15
|
|
|
THREAD_BASE_PRIORITY_MAX = 2
|
|
|
THREAD_BASE_PRIORITY_MIN = -2
|
|
|
THREAD_BASE_PRIORITY_IDLE = -15
|
|
|
THREAD_PRIORITY_LOWEST = -2
|
|
|
THREAD_PRIORITY_BELOW_NORMAL = -1
|
|
|
THREAD_PRIORITY_NORMAL = 0
|
|
|
THREAD_PRIORITY_HIGHEST = 2
|
|
|
THREAD_PRIORITY_ABOVE_NORMAL = 1
|
|
|
THREAD_PRIORITY_ERROR_RETURN = 4294967295
|
|
|
THREAD_PRIORITY_TIME_CRITICAL = 15
|
|
|
THREAD_PRIORITY_IDLE = -15
|
|
|
PAGE_NOACCESS = 1
|
|
|
PAGE_READONLY = 2
|
|
|
PAGE_READWRITE = 4
|
|
|
PAGE_WRITECOPY = 8
|
|
|
PAGE_EXECUTE = 16
|
|
|
PAGE_EXECUTE_READ = 32
|
|
|
PAGE_EXECUTE_READWRITE = 64
|
|
|
PAGE_EXECUTE_WRITECOPY = 128
|
|
|
PAGE_GUARD = 256
|
|
|
PAGE_NOCACHE = 512
|
|
|
PAGE_WRITECOMBINE = 1024
|
|
|
MEM_COMMIT = 4096
|
|
|
MEM_RESERVE = 8192
|
|
|
MEM_DECOMMIT = 16384
|
|
|
MEM_RELEASE = 32768
|
|
|
MEM_FREE = 65536
|
|
|
MEM_PRIVATE = 131072
|
|
|
MEM_MAPPED = 262144
|
|
|
MEM_RESET = 524288
|
|
|
MEM_TOP_DOWN = 1048576
|
|
|
MEM_WRITE_WATCH = 2097152
|
|
|
MEM_PHYSICAL = 4194304
|
|
|
MEM_LARGE_PAGES = 536870912
|
|
|
MEM_4MB_PAGES = 2147483648
|
|
|
SEC_FILE = 8388608
|
|
|
SEC_IMAGE = 16777216
|
|
|
SEC_RESERVE = 67108864
|
|
|
SEC_COMMIT = 134217728
|
|
|
SEC_NOCACHE = 268435456
|
|
|
SEC_LARGE_PAGES = 2147483648
|
|
|
MEM_IMAGE = 16777216
|
|
|
WRITE_WATCH_FLAG_RESET = 1
|
|
|
SECTION_QUERY = 1
|
|
|
SECTION_MAP_WRITE = 2
|
|
|
SECTION_MAP_READ = 4
|
|
|
SECTION_MAP_EXECUTE = 8
|
|
|
SECTION_EXTEND_SIZE = 16
|
|
|
SECTION_MAP_EXECUTE_EXPLICIT = 32
|
|
|
SECTION_ALL_ACCESS = 983071
|
|
|
FILE_MAP_COPY = 1
|
|
|
FILE_MAP_WRITE = 2
|
|
|
FILE_MAP_READ = 4
|
|
|
FILE_MAP_ALL_ACCESS = 983071
|
|
|
FILE_MAP_EXECUTE = 32
|
|
|
GENERIC_READ = 2147483648
|
|
|
GENERIC_WRITE = 1073741824
|
|
|
GENERIC_EXECUTE = 536870912
|
|
|
GENERIC_ALL = 268435456
|
|
|
FILE_SHARE_READ = 1
|
|
|
FILE_SHARE_WRITE = 2
|
|
|
FILE_SHARE_DELETE = 4
|
|
|
CREATE_NEW = 1
|
|
|
CREATE_ALWAYS = 2
|
|
|
OPEN_EXISTING = 3
|
|
|
OPEN_ALWAYS = 4
|
|
|
TRUNCATE_EXISTING = 5
|
|
|
FILE_FLAG_WRITE_THROUGH = 2147483648
|
|
|
FILE_FLAG_NO_BUFFERING = 536870912
|
|
|
FILE_FLAG_RANDOM_ACCESS = 268435456
|
|
|
FILE_FLAG_SEQUENTIAL_SCAN = 134217728
|
|
|
FILE_FLAG_DELETE_ON_CLOSE = 67108864
|
|
|
FILE_FLAG_OVERLAPPED = 1073741824
|
|
|
FILE_ATTRIBUTE_READONLY = 1
|
|
|
FILE_ATTRIBUTE_HIDDEN = 2
|
|
|
FILE_ATTRIBUTE_SYSTEM = 4
|
|
|
FILE_ATTRIBUTE_DIRECTORY = 16
|
|
|
FILE_ATTRIBUTE_ARCHIVE = 32
|
|
|
FILE_ATTRIBUTE_DEVICE = 64
|
|
|
FILE_ATTRIBUTE_NORMAL = 128
|
|
|
FILE_ATTRIBUTE_TEMPORARY = 256
|
|
|
EXCEPTION_DEBUG_EVENT = 1
|
|
|
CREATE_THREAD_DEBUG_EVENT = 2
|
|
|
CREATE_PROCESS_DEBUG_EVENT = 3
|
|
|
EXIT_THREAD_DEBUG_EVENT = 4
|
|
|
EXIT_PROCESS_DEBUG_EVENT = 5
|
|
|
LOAD_DLL_DEBUG_EVENT = 6
|
|
|
UNLOAD_DLL_DEBUG_EVENT = 7
|
|
|
OUTPUT_DEBUG_STRING_EVENT = 8
|
|
|
RIP_EVENT = 9
|
|
|
PROCESS_TERMINATE = 1
|
|
|
PROCESS_CREATE_THREAD = 2
|
|
|
PROCESS_SET_SESSIONID = 4
|
|
|
PROCESS_VM_OPERATION = 8
|
|
|
PROCESS_VM_READ = 16
|
|
|
PROCESS_VM_WRITE = 32
|
|
|
PROCESS_DUP_HANDLE = 64
|
|
|
PROCESS_CREATE_PROCESS = 128
|
|
|
PROCESS_SET_QUOTA = 256
|
|
|
PROCESS_SET_INFORMATION = 512
|
|
|
PROCESS_QUERY_INFORMATION = 1024
|
|
|
PROCESS_SUSPEND_RESUME = 2048
|
|
|
PROCESS_ALL_ACCESS = 2035711
|
|
|
STATUS_WAIT_0 = 0
|
|
|
STATUS_ABANDONED_WAIT_0 = 128
|
|
|
STATUS_USER_APC = 192
|
|
|
STATUS_TIMEOUT = 258
|
|
|
STATUS_PENDING = 259
|
|
|
DBG_EXCEPTION_HANDLED = 65537
|
|
|
DBG_CONTINUE = 65538
|
|
|
DBG_EXCEPTION_NOT_HANDLED = 2147549185
|
|
|
STATUS_SEGMENT_NOTIFICATION = 1073741829
|
|
|
STATUS_GUARD_PAGE_VIOLATION = 2147483649
|
|
|
STATUS_DATATYPE_MISALIGNMENT = 2147483650
|
|
|
STATUS_BREAKPOINT = 2147483651
|
|
|
STATUS_SINGLE_STEP = 2147483652
|
|
|
STATUS_INVALID_INFO_CLASS = 3221225475
|
|
|
STATUS_ACCESS_VIOLATION = 3221225477
|
|
|
STATUS_IN_PAGE_ERROR = 3221225478
|
|
|
STATUS_INVALID_HANDLE = 3221225480
|
|
|
STATUS_NO_MEMORY = 3221225495
|
|
|
STATUS_ILLEGAL_INSTRUCTION = 3221225501
|
|
|
STATUS_NONCONTINUABLE_EXCEPTION = 3221225509
|
|
|
STATUS_INVALID_DISPOSITION = 3221225510
|
|
|
STATUS_ARRAY_BOUNDS_EXCEEDED = 3221225612
|
|
|
STATUS_FLOAT_DENORMAL_OPERAND = 3221225613
|
|
|
STATUS_FLOAT_DIVIDE_BY_ZERO = 3221225614
|
|
|
STATUS_FLOAT_INEXACT_RESULT = 3221225615
|
|
|
STATUS_FLOAT_INVALID_OPERATION = 3221225616
|
|
|
STATUS_FLOAT_OVERFLOW = 3221225617
|
|
|
STATUS_FLOAT_STACK_CHECK = 3221225618
|
|
|
STATUS_FLOAT_UNDERFLOW = 3221225619
|
|
|
STATUS_INTEGER_DIVIDE_BY_ZERO = 3221225620
|
|
|
STATUS_INTEGER_OVERFLOW = 3221225621
|
|
|
STATUS_PRIVILEGED_INSTRUCTION = 3221225622
|
|
|
STATUS_STACK_OVERFLOW = 3221225725
|
|
|
STATUS_CONTROL_C_EXIT = 3221225786
|
|
|
STATUS_FLOAT_MULTIPLE_FAULTS = 3221226164
|
|
|
STATUS_FLOAT_MULTIPLE_TRAPS = 3221226165
|
|
|
STATUS_REG_NAT_CONSUMPTION = 3221226185
|
|
|
STATUS_SXS_EARLY_DEACTIVATION = 3222601743
|
|
|
STATUS_SXS_INVALID_DEACTIVATION = 3222601744
|
|
|
STATUS_POSSIBLE_DEADLOCK = 3221225876
|
|
|
STATUS_UNWIND_CONSOLIDATE = 2147483689
|
|
|
EXCEPTION_ACCESS_VIOLATION = 3221225477
|
|
|
EXCEPTION_ARRAY_BOUNDS_EXCEEDED = 3221225612
|
|
|
EXCEPTION_BREAKPOINT = 2147483651
|
|
|
EXCEPTION_DATATYPE_MISALIGNMENT = 2147483650
|
|
|
EXCEPTION_FLT_DENORMAL_OPERAND = 3221225613
|
|
|
EXCEPTION_FLT_DIVIDE_BY_ZERO = 3221225614
|
|
|
EXCEPTION_FLT_INEXACT_RESULT = 3221225615
|
|
|
EXCEPTION_FLT_INVALID_OPERATION = 3221225616
|
|
|
EXCEPTION_FLT_OVERFLOW = 3221225617
|
|
|
EXCEPTION_FLT_STACK_CHECK = 3221225618
|
|
|
EXCEPTION_FLT_UNDERFLOW = 3221225619
|
|
|
EXCEPTION_ILLEGAL_INSTRUCTION = 3221225501
|
|
|
EXCEPTION_IN_PAGE_ERROR = 3221225478
|
|
|
EXCEPTION_INT_DIVIDE_BY_ZERO = 3221225620
|
|
|
EXCEPTION_INT_OVERFLOW = 3221225621
|
|
|
EXCEPTION_INVALID_DISPOSITION = 3221225510
|
|
|
EXCEPTION_NONCONTINUABLE_EXCEPTION = 3221225509
|
|
|
EXCEPTION_PRIV_INSTRUCTION = 3221225622
|
|
|
EXCEPTION_SINGLE_STEP = 2147483652
|
|
|
EXCEPTION_STACK_OVERFLOW = 3221225725
|
|
|
EXCEPTION_GUARD_PAGE = 2147483649
|
|
|
EXCEPTION_INVALID_HANDLE = 3221225480
|
|
|
EXCEPTION_POSSIBLE_DEADLOCK = 3221225876
|
|
|
CONTROL_C_EXIT = 3221225786
|
|
|
DBG_CONTROL_C = 1073807365
|
|
|
MS_VC_EXCEPTION = 1080890248
|
|
|
SE_CREATE_TOKEN_NAME = 'SeCreateTokenPrivilege'
|
|
|
SE_ASSIGNPRIMARYTOKEN_NAME = 'SeAssignPrimaryTokenPrivilege'
|
|
|
SE_LOCK_MEMORY_NAME = 'SeLockMemoryPrivilege'
|
|
|
SE_INCREASE_QUOTA_NAME = 'SeIncreaseQuotaPrivilege'
|
|
|
SE_UNSOLICITED_INPUT_NAME = 'SeUnsolicitedInputPrivilege'
|
|
|
SE_MACHINE_ACCOUNT_NAME = 'SeMachineAccountPrivilege'
|
|
|
SE_TCB_NAME = 'SeTcbPrivilege'
|
|
|
SE_SECURITY_NAME = 'SeSecurityPrivilege'
|
|
|
SE_TAKE_OWNERSHIP_NAME = 'SeTakeOwnershipPrivilege'
|
|
|
SE_LOAD_DRIVER_NAME = 'SeLoadDriverPrivilege'
|
|
|
SE_SYSTEM_PROFILE_NAME = 'SeSystemProfilePrivilege'
|
|
|
SE_SYSTEMTIME_NAME = 'SeSystemtimePrivilege'
|
|
|
SE_PROF_SINGLE_PROCESS_NAME = 'SeProfileSingleProcessPrivilege'
|
|
|
SE_INC_BASE_PRIORITY_NAME = 'SeIncreaseBasePriorityPrivilege'
|
|
|
SE_CREATE_PAGEFILE_NAME = 'SeCreatePagefilePrivilege'
|
|
|
SE_CREATE_PERMANENT_NAME = 'SeCreatePermanentPrivilege'
|
|
|
SE_BACKUP_NAME = 'SeBackupPrivilege'
|
|
|
SE_RESTORE_NAME = 'SeRestorePrivilege'
|
|
|
SE_SHUTDOWN_NAME = 'SeShutdownPrivilege'
|
|
|
SE_DEBUG_NAME = 'SeDebugPrivilege'
|
|
|
SE_AUDIT_NAME = 'SeAuditPrivilege'
|
|
|
SE_SYSTEM_ENVIRONMENT_NAME = 'SeSystemEnvironmentPrivilege'
|
|
|
SE_CHANGE_NOTIFY_NAME = 'SeChangeNotifyPrivilege'
|
|
|
SE_REMOTE_SHUTDOWN_NAME = 'SeRemoteShutdownPrivilege'
|
|
|
SE_UNDOCK_NAME = 'SeUndockPrivilege'
|
|
|
SE_SYNC_AGENT_NAME = 'SeSyncAgentPrivilege'
|
|
|
SE_ENABLE_DELEGATION_NAME = 'SeEnableDelegationPrivilege'
|
|
|
SE_MANAGE_VOLUME_NAME = 'SeManageVolumePrivilege'
|
|
|
SE_IMPERSONATE_NAME = 'SeImpersonatePrivilege'
|
|
|
SE_CREATE_GLOBAL_NAME = 'SeCreateGlobalPrivilege'
|
|
|
SE_PRIVILEGE_ENABLED_BY_DEFAULT = 1
|
|
|
SE_PRIVILEGE_ENABLED = 2
|
|
|
SE_PRIVILEGE_REMOVED = 4
|
|
|
SE_PRIVILEGE_USED_FOR_ACCESS = 2147483648
|
|
|
TOKEN_ADJUST_PRIVILEGES = 32
|
|
|
DONT_RESOLVE_DLL_REFERENCES = 1
|
|
|
LOAD_LIBRARY_AS_DATAFILE = 2
|
|
|
LOAD_WITH_ALTERED_SEARCH_PATH = 8
|
|
|
LOAD_IGNORE_CODE_AUTHZ_LEVEL = 16
|
|
|
LOAD_LIBRARY_AS_IMAGE_RESOURCE = 32
|
|
|
LOAD_LIBRARY_AS_DATAFILE_EXCLUSIVE = 64
|
|
|
CTRL_C_EVENT = 0
|
|
|
CTRL_BREAK_EVENT = 1
|
|
|
CTRL_CLOSE_EVENT = 2
|
|
|
CTRL_LOGOFF_EVENT = 5
|
|
|
CTRL_SHUTDOWN_EVENT = 6
|
|
|
MEM_EXECUTE_OPTION_ENABLE = 1
|
|
|
MEM_EXECUTE_OPTION_DISABLE = 2
|
|
|
MEM_EXECUTE_OPTION_ATL7_THUNK_EMULATION = 4
|
|
|
MEM_EXECUTE_OPTION_PERMANENT = 8
|
|
|
SystemBasicInformation = 1
|
|
|
SystemProcessorInformation = 2
|
|
|
SystemPerformanceInformation = 3
|
|
|
SystemTimeInformation = 4
|
|
|
SystemPathInformation = 5
|
|
|
SystemProcessInformation = 6
|
|
|
SystemCallInformation = 7
|
|
|
SystemConfigurationInformation = 8
|
|
|
SystemProcessorCounters = 9
|
|
|
SystemGlobalFlag = 10
|
|
|
SystemInfo10 = 11
|
|
|
SystemModuleInformation = 12
|
|
|
SystemLockInformation = 13
|
|
|
SystemInfo13 = 14
|
|
|
SystemPagedPoolInformation = 15
|
|
|
SystemNonPagedPoolInformation = 16
|
|
|
SystemHandleInformation = 17
|
|
|
SystemObjectInformation = 18
|
|
|
SystemPagefileInformation = 19
|
|
|
SystemInstemulInformation = 20
|
|
|
SystemInfo20 = 21
|
|
|
SystemCacheInformation = 22
|
|
|
SystemPoolTagInformation = 23
|
|
|
SystemProcessorStatistics = 24
|
|
|
SystemDpcInformation = 25
|
|
|
SystemMemoryUsageInformation1 = 26
|
|
|
SystemLoadImage = 27
|
|
|
SystemUnloadImage = 28
|
|
|
SystemTimeAdjustmentInformation = 29
|
|
|
SystemMemoryUsageInformation2 = 30
|
|
|
SystemInfo30 = 31
|
|
|
SystemInfo31 = 32
|
|
|
SystemCrashDumpInformation = 33
|
|
|
SystemExceptionInformation = 34
|
|
|
SystemCrashDumpStateInformation = 35
|
|
|
SystemDebuggerInformation = 36
|
|
|
SystemThreadSwitchInformation = 37
|
|
|
SystemRegistryQuotaInformation = 38
|
|
|
SystemLoadDriver = 39
|
|
|
SystemPrioritySeparationInformation = 40
|
|
|
SystemInfo40 = 41
|
|
|
SystemInfo41 = 42
|
|
|
SystemInfo42 = 43
|
|
|
SystemInfo43 = 44
|
|
|
SystemTimeZoneInformation = 45
|
|
|
SystemLookasideInformation = 46
|
|
|
SystemSetTimeSlipEvent = 47
|
|
|
SystemCreateSession = 48
|
|
|
SystemDeleteSession = 49
|
|
|
SystemInfo49 = 50
|
|
|
SystemRangeStartInformation = 51
|
|
|
SystemVerifierInformation = 52
|
|
|
SystemAddVerifier = 53
|
|
|
SystemSessionProcessesInformation = 54
|
|
|
ProcessBasicInformation = 0
|
|
|
ProcessQuotaLimits = 1
|
|
|
ProcessIoCounters = 2
|
|
|
ProcessVmCounters = 3
|
|
|
ProcessTimes = 4
|
|
|
ProcessBasePriority = 5
|
|
|
ProcessRaisePriority = 6
|
|
|
ProcessDebugPort = 7
|
|
|
ProcessExceptionPort = 8
|
|
|
ProcessAccessToken = 9
|
|
|
ProcessLdtInformation = 10
|
|
|
ProcessLdtSize = 11
|
|
|
ProcessDefaultHardErrorMode = 12
|
|
|
ProcessIoPortHandlers = 13
|
|
|
ProcessPooledUsageAndLimits = 14
|
|
|
ProcessWorkingSetWatch = 15
|
|
|
ProcessUserModeIOPL = 16
|
|
|
ProcessEnableAlignmentFaultFixup = 17
|
|
|
ProcessPriorityClass = 18
|
|
|
ProcessWx86Information = 19
|
|
|
ProcessHandleCount = 20
|
|
|
ProcessAffinityMask = 21
|
|
|
ProcessPriorityBoost = 22
|
|
|
ProcessWow64Information = 26
|
|
|
ProcessImageFileName = 27
|
|
|
ProcessExecuteFlags = 34
|
|
|
ThreadBasicInformation = 0
|
|
|
ThreadTimes = 1
|
|
|
ThreadPriority = 2
|
|
|
ThreadBasePriority = 3
|
|
|
ThreadAffinityMask = 4
|
|
|
ThreadImpersonationToken = 5
|
|
|
ThreadDescriptorTableEntry = 6
|
|
|
ThreadEnableAlignmentFaultFixup = 7
|
|
|
ThreadEventPair = 8
|
|
|
ThreadQuerySetWin32StartAddress = 9
|
|
|
ThreadZeroTlsCell = 10
|
|
|
ThreadPerformanceCount = 11
|
|
|
ThreadAmILastThread = 12
|
|
|
ThreadIdealProcessor = 13
|
|
|
ThreadPriorityBoost = 14
|
|
|
ThreadSetTlsArrayAddress = 15
|
|
|
ThreadIsIoPending = 16
|
|
|
ThreadHideFromDebugger = 17
|
|
|
ExceptionContinueExecution = 0
|
|
|
ExceptionContinueSearch = 1
|
|
|
ExceptionNestedException = 2
|
|
|
ExceptionCollidedUnwind = 3
|
|
|
ImageUsesLargePages = 1
|
|
|
IsProtectedProcess = 2
|
|
|
IsLegacyProcess = 4
|
|
|
IsImageDynamicallyRelocated = 8
|
|
|
SysDbgReadMsr = 16
|
|
|
SysDbgWriteMsr = 17
|
|
|
EXCEPTION_READ_FAULT = 0
|
|
|
EXCEPTION_WRITE_FAULT = 1
|
|
|
EXCEPTION_EXECUTE_FAULT = 8
|
|
|
SIZE_OF_80387_REGISTERS = 80
|
|
|
CONTEXT_i386 = 65536
|
|
|
CONTEXT_i486 = 65536
|
|
|
CONTEXT_CONTROL = 65537
|
|
|
CONTEXT_INTEGER = 65538
|
|
|
CONTEXT_SEGMENTS = 65540
|
|
|
CONTEXT_FLOATING_POINT = 65544
|
|
|
CONTEXT_DEBUG_REGISTERS = 65552
|
|
|
CONTEXT_EXTENDED_REGISTERS = 65568
|
|
|
CONTEXT_FULL = 65543
|
|
|
CONTEXT_ALL = 65599
|
|
|
MAXIMUM_SUPPORTED_EXTENSION = 512
|
|
|
TH32CS_SNAPHEAPLIST = 1
|
|
|
TH32CS_SNAPPROCESS = 2
|
|
|
TH32CS_SNAPTHREAD = 4
|
|
|
TH32CS_SNAPMODULE = 8
|
|
|
TH32CS_INHERIT = 2147483648
|
|
|
TH32CS_SNAPALL = 15
|
|
|
LIST_MODULES_DEFAULT = 0
|
|
|
LIST_MODULES_32BIT = 1
|
|
|
LIST_MODULES_64BIT = 2
|
|
|
LIST_MODULES_ALL = 3
|
|
|
SYMOPT_ALLOW_ABSOLUTE_SYMBOLS = 2048
|
|
|
SYMOPT_ALLOW_ZERO_ADDRESS = 16777216
|
|
|
SYMOPT_AUTO_PUBLICS = 65536
|
|
|
SYMOPT_CASE_INSENSITIVE = 1
|
|
|
SYMOPT_DEBUG = 2147483648
|
|
|
SYMOPT_DEFERRED_LOADS = 4
|
|
|
SYMOPT_DISABLE_SYMSRV_AUTODETECT = 33554432
|
|
|
SYMOPT_EXACT_SYMBOLS = 1024
|
|
|
SYMOPT_FAIL_CRITICAL_ERRORS = 512
|
|
|
SYMOPT_FAVOR_COMPRESSED = 8388608
|
|
|
SYMOPT_FLAT_DIRECTORY = 4194304
|
|
|
SYMOPT_IGNORE_CVREC = 128
|
|
|
SYMOPT_IGNORE_IMAGEDIR = 2097152
|
|
|
SYMOPT_IGNORE_NT_SYMPATH = 4096
|
|
|
SYMOPT_INCLUDE_32BIT_MODULES = 8192
|
|
|
SYMOPT_LOAD_ANYTHING = 64
|
|
|
SYMOPT_LOAD_LINES = 16
|
|
|
SYMOPT_NO_CPP = 8
|
|
|
SYMOPT_NO_IMAGE_SEARCH = 131072
|
|
|
SYMOPT_NO_PROMPTS = 524288
|
|
|
SYMOPT_NO_PUBLICS = 32768
|
|
|
SYMOPT_NO_UNQUALIFIED_LOADS = 256
|
|
|
SYMOPT_OVERWRITE = 1048576
|
|
|
SYMOPT_PUBLICS_ONLY = 16384
|
|
|
SYMOPT_SECURE = 262144
|
|
|
SYMOPT_UNDNAME = 2
|
|
|
SymNone = 0
|
|
|
SymCoff = 1
|
|
|
SymCv = 2
|
|
|
SymPdb = 3
|
|
|
SymExport = 4
|
|
|
SymDeferred = 5
|
|
|
SymSym = 6
|
|
|
SymDia = 7
|
|
|
SymVirtual = 8
|
|
|
NumSymTypes = 9
|