diff --git a/apis_def/combase.api b/apis_def/combase.api index 9294bfa..36cbddf 100644 --- a/apis_def/combase.api +++ b/apis_def/combase.api @@ -347,263 +347,263 @@ ParamCount=1 Header=windows.h.api; @=CoAllowUnmarshalerCLSID [CLSIDFromProgID] -ParamCount=0 +SourceModule=ole32.api @=CLSIDFromProgID [CLSIDFromString] -ParamCount=0 +SourceModule=ole32.api @=CLSIDFromString [CoAddRefServerProcess] -ParamCount=0 +SourceModule=ole32.api @=CoAddRefServerProcess [CoCancelCall] -ParamCount=0 +SourceModule=ole32.api @=CoCancelCall [CoCopyProxy] -ParamCount=0 +SourceModule=ole32.api @=CoCopyProxy [CoCreateFreeThreadedMarshaler] -ParamCount=0 +SourceModule=ole32.api @=CoCreateFreeThreadedMarshaler [CoCreateGuid] -ParamCount=0 +SourceModule=ole32.api @=CoCreateGuid [CoCreateInstance] -ParamCount=0 +SourceModule=ole32.api @=CoCreateInstance [CoCreateInstanceEx] -ParamCount=0 +SourceModule=ole32.api @=CoCreateInstanceEx [CoCreateInstanceFromApp] -ParamCount=0 +SourceModule=ole32.api @=CoCreateInstanceFromApp [CoDecrementMTAUsage] -ParamCount=0 +SourceModule=ole32.api @=CoDecrementMTAUsage [CoDisableCallCancellation] -ParamCount=0 +SourceModule=ole32.api @=CoDisableCallCancellation [CoDisconnectContext] -ParamCount=0 +SourceModule=ole32.api @=CoDisconnectContext [CoDisconnectObject] -ParamCount=0 +SourceModule=ole32.api @=CoDisconnectObject [CoEnableCallCancellation] -ParamCount=0 +SourceModule=ole32.api @=CoEnableCallCancellation [CoFreeUnusedLibraries] -ParamCount=0 +SourceModule=ole32.api @=CoFreeUnusedLibraries [CoFreeUnusedLibrariesEx] -ParamCount=0 +SourceModule=ole32.api @=CoFreeUnusedLibrariesEx [CoGetApartmentType] -ParamCount=0 +SourceModule=ole32.api @=CoGetApartmentType [CoGetCallContext] -ParamCount=0 +SourceModule=ole32.api @=CoGetCallContext [CoGetCallerTID] -ParamCount=0 +SourceModule=ole32.api @=CoGetCallerTID [CoGetCancelObject] -ParamCount=0 +SourceModule=ole32.api @=CoGetCancelObject [CoGetClassObject] -ParamCount=0 +SourceModule=ole32.api @=CoGetClassObject [CoGetContextToken] -ParamCount=0 +SourceModule=ole32.api @=CoGetContextToken [CoGetCurrentLogicalThreadId] -ParamCount=0 +SourceModule=ole32.api @=CoGetCurrentLogicalThreadId [CoGetCurrentProcess] -ParamCount=0 +SourceModule=ole32.api @=CoGetCurrentProcess [CoGetInstanceFromFile] -ParamCount=0 +SourceModule=ole32.api @=CoGetInstanceFromFile [CoGetInstanceFromIStorage] -ParamCount=0 +SourceModule=ole32.api @=CoGetInstanceFromIStorage [CoGetInterfaceAndReleaseStream] -ParamCount=0 +SourceModule=ole32.api @=CoGetInterfaceAndReleaseStream [CoGetMalloc] -ParamCount=0 +SourceModule=ole32.api @=CoGetMalloc [CoGetMarshalSizeMax] -ParamCount=0 +SourceModule=ole32.api @=CoGetMarshalSizeMax [CoGetModuleType] -ParamCount=0 +SourceModule=ole32.api @=CoGetModuleType [CoGetObjectContext] -ParamCount=0 +SourceModule=ole32.api @=CoGetObjectContext [CoGetPSClsid] -ParamCount=0 +SourceModule=ole32.api @=CoGetPSClsid [CoGetStandardMarshal] -ParamCount=0 +SourceModule=ole32.api @=CoGetStandardMarshal [CoGetStdMarshalEx] -ParamCount=0 +SourceModule=ole32.api @=CoGetStdMarshalEx [CoGetTreatAsClass] -ParamCount=0 +SourceModule=ole32.api @=CoGetTreatAsClass [CoImpersonateClient] -ParamCount=0 +SourceModule=ole32.api @=CoImpersonateClient [CoIncrementMTAUsage] -ParamCount=0 +SourceModule=ole32.api @=CoIncrementMTAUsage [CoInitializeEx] -ParamCount=0 +SourceModule=ole32.api @=CoInitializeEx [CoInitializeSecurity] -ParamCount=0 +SourceModule=ole32.api @=CoInitializeSecurity [CoInvalidateRemoteMachineBindings] -ParamCount=0 +SourceModule=ole32.api @=CoInvalidateRemoteMachineBindings [CoIsHandlerConnected] -ParamCount=0 +SourceModule=ole32.api @=CoIsHandlerConnected [CoLockObjectExternal] -ParamCount=0 +SourceModule=ole32.api @=CoLockObjectExternal [CoMarshalHresult] -ParamCount=0 +SourceModule=ole32.api @=CoMarshalHresult [CoMarshalInterface] -ParamCount=0 +SourceModule=ole32.api @=CoMarshalInterface [CoMarshalInterThreadInterfaceInStream] -ParamCount=0 +SourceModule=ole32.api @=CoMarshalInterThreadInterfaceInStream [CoQueryAuthenticationServices] -ParamCount=0 +SourceModule=ole32.api @=CoQueryAuthenticationServices [CoQueryClientBlanket] -ParamCount=0 +SourceModule=ole32.api @=CoQueryClientBlanket [CoQueryProxyBlanket] -ParamCount=0 +SourceModule=ole32.api @=CoQueryProxyBlanket [CoRegisterClassObject] -ParamCount=0 +SourceModule=ole32.api @=CoRegisterClassObject [CoRegisterInitializeSpy] -ParamCount=0 +SourceModule=ole32.api @=CoRegisterInitializeSpy [CoRegisterMallocSpy] -ParamCount=0 +SourceModule=ole32.api @=CoRegisterMallocSpy [CoRegisterMessageFilter] -ParamCount=0 +SourceModule=ole32.api @=CoRegisterMessageFilter [CoRegisterPSClsid] -ParamCount=0 +SourceModule=ole32.api @=CoRegisterPSClsid [CoRegisterSurrogate] -ParamCount=0 +SourceModule=ole32.api @=CoRegisterSurrogate [CoReleaseMarshalData] -ParamCount=0 +SourceModule=ole32.api @=CoReleaseMarshalData [CoReleaseServerProcess] -ParamCount=0 +SourceModule=ole32.api @=CoReleaseServerProcess [CoResumeClassObjects] -ParamCount=0 +SourceModule=ole32.api @=CoResumeClassObjects [CoRevertToSelf] -ParamCount=0 +SourceModule=ole32.api @=CoRevertToSelf [CoRevokeClassObject] -ParamCount=0 +SourceModule=ole32.api @=CoRevokeClassObject [CoRevokeInitializeSpy] -ParamCount=0 +SourceModule=ole32.api @=CoRevokeInitializeSpy [CoRevokeMallocSpy] -ParamCount=0 +SourceModule=ole32.api @=CoRevokeMallocSpy [CoSetCancelObject] -ParamCount=0 +SourceModule=ole32.api @=CoSetCancelObject [CoSetProxyBlanket] -ParamCount=0 +SourceModule=ole32.api @=CoSetProxyBlanket [CoSuspendClassObjects] -ParamCount=0 +SourceModule=ole32.api @=CoSuspendClassObjects [CoSwitchCallContext] -ParamCount=0 +SourceModule=ole32.api @=CoSwitchCallContext [CoTaskMemAlloc] -ParamCount=0 +SourceModule=ole32.api @=CoTaskMemAlloc [CoTaskMemFree] -ParamCount=0 +SourceModule=ole32.api @=CoTaskMemFree [CoTaskMemRealloc] -ParamCount=0 +SourceModule=ole32.api @=CoTaskMemRealloc [CoTestCancel] -ParamCount=0 +SourceModule=ole32.api @=CoTestCancel [CoUninitialize] -ParamCount=0 +SourceModule=ole32.api @=CoUninitialize [CoUnmarshalHresult] -ParamCount=0 +SourceModule=ole32.api @=CoUnmarshalHresult [CoUnmarshalInterface] -ParamCount=0 +SourceModule=ole32.api @=CoUnmarshalInterface [CoWaitForMultipleHandles] -ParamCount=0 +SourceModule=ole32.api @=CoWaitForMultipleHandles [CreateStreamOnHGlobal] -ParamCount=0 +SourceModule=ole32.api @=CreateStreamOnHGlobal [FreePropVariantArray] -ParamCount=0 +SourceModule=ole32.api @=FreePropVariantArray [GetHGlobalFromStream] -ParamCount=0 +SourceModule=ole32.api @=GetHGlobalFromStream [IIDFromString] -ParamCount=0 +SourceModule=ole32.api @=IIDFromString [ProgIDFromCLSID] -ParamCount=0 +SourceModule=ole32.api @=ProgIDFromCLSID [PropVariantClear] -ParamCount=0 +SourceModule=ole32.api @=PropVariantClear [PropVariantCopy] -ParamCount=0 +SourceModule=ole32.api @=PropVariantCopy [StringFromCLSID] -ParamCount=0 +SourceModule=ole32.api @=StringFromCLSID [StringFromGUID2] -ParamCount=0 +SourceModule=ole32.api @=StringFromGUID2 [StringFromIID] -ParamCount=0 +SourceModule=ole32.api @=StringFromIID [CreateErrorInfo] -ParamCount=0 +SourceModule=oleaut32.api @=CreateErrorInfo [GetErrorInfo] -ParamCount=0 +SourceModule=oleaut32.api @=GetErrorInfo [SetErrorInfo] -ParamCount=0 +SourceModule=oleaut32.api @=SetErrorInfo diff --git a/apis_def/cryptbase.api b/apis_def/cryptbase.api index baa0c74..0ad7bdf 100644 --- a/apis_def/cryptbase.api +++ b/apis_def/cryptbase.api @@ -1,9 +1,9 @@ [SystemFunction036] -ParamCount=0 +SourceModule=advapi32.api @=SystemFunction036 [SystemFunction040] -ParamCount=0 +SourceModule=advapi32.api @=SystemFunction040 [SystemFunction041] -ParamCount=0 +SourceModule=advapi32.api @=SystemFunction041 diff --git a/apis_def/cryptsp.api b/apis_def/cryptsp.api index 2d0a8d5..74a7a71 100644 --- a/apis_def/cryptsp.api +++ b/apis_def/cryptsp.api @@ -1,117 +1,117 @@ [CryptAcquireContextA] -ParamCount=0 +SourceModule=advapi32.api @=CryptAcquireContextA [CryptAcquireContextW] -ParamCount=0 +SourceModule=advapi32.api @=CryptAcquireContextW [CryptContextAddRef] -ParamCount=0 +SourceModule=advapi32.api @=CryptContextAddRef [CryptCreateHash] -ParamCount=0 +SourceModule=advapi32.api @=CryptCreateHash [CryptDecrypt] -ParamCount=0 +SourceModule=advapi32.api @=CryptDecrypt [CryptDeriveKey] -ParamCount=0 +SourceModule=advapi32.api @=CryptDeriveKey [CryptDestroyHash] -ParamCount=0 +SourceModule=advapi32.api @=CryptDestroyHash [CryptDestroyKey] -ParamCount=0 +SourceModule=advapi32.api @=CryptDestroyKey [CryptDuplicateHash] -ParamCount=0 +SourceModule=advapi32.api @=CryptDuplicateHash [CryptDuplicateKey] -ParamCount=0 +SourceModule=advapi32.api @=CryptDuplicateKey [CryptEncrypt] -ParamCount=0 +SourceModule=advapi32.api @=CryptEncrypt [CryptEnumProvidersA] -ParamCount=0 +SourceModule=advapi32.api @=CryptEnumProvidersA [CryptEnumProvidersW] -ParamCount=0 +SourceModule=advapi32.api @=CryptEnumProvidersW [CryptEnumProviderTypesA] -ParamCount=0 +SourceModule=advapi32.api @=CryptEnumProviderTypesA [CryptEnumProviderTypesW] -ParamCount=0 +SourceModule=advapi32.api @=CryptEnumProviderTypesW [CryptExportKey] -ParamCount=0 +SourceModule=advapi32.api @=CryptExportKey [CryptGenKey] -ParamCount=0 +SourceModule=advapi32.api @=CryptGenKey [CryptGenRandom] -ParamCount=0 +SourceModule=advapi32.api @=CryptGenRandom [CryptGetDefaultProviderA] -ParamCount=0 +SourceModule=advapi32.api @=CryptGetDefaultProviderA [CryptGetDefaultProviderW] -ParamCount=0 +SourceModule=advapi32.api @=CryptGetDefaultProviderW [CryptGetHashParam] -ParamCount=0 +SourceModule=advapi32.api @=CryptGetHashParam [CryptGetKeyParam] -ParamCount=0 +SourceModule=advapi32.api @=CryptGetKeyParam [CryptGetProvParam] -ParamCount=0 +SourceModule=advapi32.api @=CryptGetProvParam [CryptGetUserKey] -ParamCount=0 +SourceModule=advapi32.api @=CryptGetUserKey [CryptHashData] -ParamCount=0 +SourceModule=advapi32.api @=CryptHashData [CryptHashSessionKey] -ParamCount=0 +SourceModule=advapi32.api @=CryptHashSessionKey [CryptImportKey] -ParamCount=0 +SourceModule=advapi32.api @=CryptImportKey [CryptReleaseContext] -ParamCount=0 +SourceModule=advapi32.api @=CryptReleaseContext [CryptSetHashParam] -ParamCount=0 +SourceModule=advapi32.api @=CryptSetHashParam [CryptSetKeyParam] -ParamCount=0 +SourceModule=advapi32.api @=CryptSetKeyParam [CryptSetProviderA] -ParamCount=0 +SourceModule=advapi32.api @=CryptSetProviderA [CryptSetProviderExA] -ParamCount=0 +SourceModule=advapi32.api @=CryptSetProviderExA [CryptSetProviderExW] -ParamCount=0 +SourceModule=advapi32.api @=CryptSetProviderExW [CryptSetProviderW] -ParamCount=0 +SourceModule=advapi32.api @=CryptSetProviderW [CryptSetProvParam] -ParamCount=0 +SourceModule=advapi32.api @=CryptSetProvParam [CryptSignHashA] -ParamCount=0 +SourceModule=advapi32.api @=CryptSignHashA [CryptSignHashW] -ParamCount=0 +SourceModule=advapi32.api @=CryptSignHashW [CryptVerifySignatureA] -ParamCount=0 +SourceModule=advapi32.api @=CryptVerifySignatureA [CryptVerifySignatureW] -ParamCount=0 +SourceModule=advapi32.api @=CryptVerifySignatureW diff --git a/apis_def/firewallapi.api b/apis_def/firewallapi.api index 30ad26d..c10615e 100644 --- a/apis_def/firewallapi.api +++ b/apis_def/firewallapi.api @@ -1,27 +1,27 @@ [NetworkIsolationDiagnoseConnectFailureAndGetInfo] -ParamCount=0 +SourceModule=api-ms-win-net-isolation-l1.api @=NetworkIsolationDiagnoseConnectFailureAndGetInfo [NetworkIsolationEnumAppContainers] -ParamCount=0 +SourceModule=api-ms-win-net-isolation-l1.api @=NetworkIsolationEnumAppContainers [NetworkIsolationEnumerateAppContainerRules] -ParamCount=0 +SourceModule=api-ms-win-net-isolation-l1.api @=NetworkIsolationEnumerateAppContainerRules [NetworkIsolationFreeAppContainers] -ParamCount=0 +SourceModule=api-ms-win-net-isolation-l1.api @=NetworkIsolationFreeAppContainers [NetworkIsolationGetAppContainerConfig] -ParamCount=0 +SourceModule=api-ms-win-net-isolation-l1.api @=NetworkIsolationGetAppContainerConfig [NetworkIsolationRegisterForAppContainerChanges] -ParamCount=0 +SourceModule=api-ms-win-net-isolation-l1.api @=NetworkIsolationRegisterForAppContainerChanges [NetworkIsolationSetAppContainerConfig] -ParamCount=0 +SourceModule=api-ms-win-net-isolation-l1.api @=NetworkIsolationSetAppContainerConfig [NetworkIsolationSetupAppContainerBinaries] -ParamCount=0 +SourceModule=api-ms-win-net-isolation-l1.api @=NetworkIsolationSetupAppContainerBinaries [NetworkIsolationUnregisterForAppContainerChanges] -ParamCount=0 +SourceModule=api-ms-win-net-isolation-l1.api @=NetworkIsolationUnregisterForAppContainerChanges diff --git a/apis_def/kernel32.api b/apis_def/kernel32.api index dce1bc4..caaef31 100644 --- a/apis_def/kernel32.api +++ b/apis_def/kernel32.api @@ -6278,170 +6278,170 @@ ParamCount=5 Header=windows.h.api; @=CheckElevation [RegCloseKey] -ParamCount=0 +SourceModule=advapi32.api @=RegCloseKey [RegCreateKeyExA] -ParamCount=0 +SourceModule=advapi32.api @=RegCreateKeyExA [RegCreateKeyExW] -ParamCount=0 +SourceModule=advapi32.api @=RegCreateKeyExW [RegDeleteKeyExA] -ParamCount=0 +SourceModule=advapi32.api @=RegDeleteKeyExA [RegDeleteKeyExW] -ParamCount=0 +SourceModule=advapi32.api @=RegDeleteKeyExW [RegDeleteTreeA] -ParamCount=0 +SourceModule=advapi32.api @=RegDeleteTreeA [RegDeleteTreeW] -ParamCount=0 +SourceModule=advapi32.api @=RegDeleteTreeW [RegDeleteValueA] -ParamCount=0 +SourceModule=advapi32.api @=RegDeleteValueA [RegDeleteValueW] -ParamCount=0 +SourceModule=advapi32.api @=RegDeleteValueW [RegDisablePredefinedCacheEx] -ParamCount=0 +SourceModule=advapi32.api @=RegDisablePredefinedCacheEx [RegEnumKeyExA] -ParamCount=0 +SourceModule=advapi32.api @=RegEnumKeyExA [RegEnumKeyExW] -ParamCount=0 +SourceModule=advapi32.api @=RegEnumKeyExW [RegEnumValueA] -ParamCount=0 +SourceModule=advapi32.api @=RegEnumValueA [RegEnumValueW] -ParamCount=0 +SourceModule=advapi32.api @=RegEnumValueW [RegFlushKey] -ParamCount=0 +SourceModule=advapi32.api @=RegFlushKey [RegGetValueA] -ParamCount=0 +SourceModule=advapi32.api @=RegGetValueA [RegGetValueW] -ParamCount=0 +SourceModule=advapi32.api @=RegGetValueW [RegLoadKeyA] -ParamCount=0 +SourceModule=advapi32.api @=RegLoadKeyA [RegLoadKeyW] -ParamCount=0 +SourceModule=advapi32.api @=RegLoadKeyW [RegLoadMUIStringA] -ParamCount=0 +SourceModule=advapi32.api @=RegLoadMUIStringA [RegLoadMUIStringW] -ParamCount=0 +SourceModule=advapi32.api @=RegLoadMUIStringW [RegNotifyChangeKeyValue] -ParamCount=0 +SourceModule=advapi32.api @=RegNotifyChangeKeyValue [RegOpenCurrentUser] -ParamCount=0 +SourceModule=advapi32.api @=RegOpenCurrentUser [RegOpenKeyExA] -ParamCount=0 +SourceModule=advapi32.api @=RegOpenKeyExA [RegOpenKeyExW] -ParamCount=0 +SourceModule=advapi32.api @=RegOpenKeyExW [RegOpenUserClassesRoot] -ParamCount=0 +SourceModule=advapi32.api @=RegOpenUserClassesRoot [RegQueryInfoKeyA] -ParamCount=0 +SourceModule=advapi32.api @=RegQueryInfoKeyA [RegQueryInfoKeyW] -ParamCount=0 +SourceModule=advapi32.api @=RegQueryInfoKeyW [RegQueryValueExA] -ParamCount=0 +SourceModule=advapi32.api @=RegQueryValueExA [RegQueryValueExW] -ParamCount=0 +SourceModule=advapi32.api @=RegQueryValueExW [RegRestoreKeyA] -ParamCount=0 +SourceModule=advapi32.api @=RegRestoreKeyA [RegRestoreKeyW] -ParamCount=0 +SourceModule=advapi32.api @=RegRestoreKeyW [RegSaveKeyExA] -ParamCount=0 +SourceModule=advapi32.api @=RegSaveKeyExA [RegSaveKeyExW] -ParamCount=0 +SourceModule=advapi32.api @=RegSaveKeyExW [RegSetValueExA] -ParamCount=0 +SourceModule=advapi32.api @=RegSetValueExA [RegSetValueExW] -ParamCount=0 +SourceModule=advapi32.api @=RegSetValueExW [RegUnLoadKeyA] -ParamCount=0 +SourceModule=advapi32.api @=RegUnLoadKeyA [RegUnLoadKeyW] -ParamCount=0 +SourceModule=advapi32.api @=RegUnLoadKeyW [RegGetKeySecurity] -ParamCount=0 +SourceModule=advapi32.api @=RegGetKeySecurity [RegSetKeySecurity] -ParamCount=0 +SourceModule=advapi32.api @=RegSetKeySecurity [CreateProcessAsUserA] -ParamCount=0 +SourceModule=advapi32.api @=CreateProcessAsUserA [CreateProcessAsUserW] -ParamCount=0 +SourceModule=advapi32.api @=CreateProcessAsUserW [CopyLZFile] -ParamCount=0 +SourceModule=lz32.api @=CopyLZFile [GetExpandedNameA] -ParamCount=0 +SourceModule=lz32.api @=GetExpandedNameA [GetExpandedNameW] -ParamCount=0 +SourceModule=lz32.api @=GetExpandedNameW [LZClose] -ParamCount=0 +SourceModule=lz32.api @=LZClose [LZCloseFile] -ParamCount=0 +SourceModule=lz32.api @=LZCloseFile [LZCopy] -ParamCount=0 +SourceModule=lz32.api @=LZCopy [LZCreateFileW] -ParamCount=0 +SourceModule=lz32.api @=LZCreateFileW [LZDone] -ParamCount=0 +SourceModule=lz32.api @=LZDone [LZInit] -ParamCount=0 +SourceModule=lz32.api @=LZInit [LZOpenFileA] -ParamCount=0 +SourceModule=lz32.api @=LZOpenFileA [LZOpenFileW] -ParamCount=0 +SourceModule=lz32.api @=LZOpenFileW [LZRead] -ParamCount=0 +SourceModule=lz32.api @=LZRead [LZSeek] -ParamCount=0 +SourceModule=lz32.api @=LZSeek [LZStart] -ParamCount=0 +SourceModule=lz32.api @=LZStart diff --git a/apis_def/kernelbase.api b/apis_def/kernelbase.api index af2a856..15664e5 100644 --- a/apis_def/kernelbase.api +++ b/apis_def/kernelbase.api @@ -1,3630 +1,3630 @@ [AccessCheck] -ParamCount=0 +SourceModule=advapi32.api @=AccessCheck [AccessCheckAndAuditAlarmW] -ParamCount=0 +SourceModule=advapi32.api @=AccessCheckAndAuditAlarmW [AccessCheckByType] -ParamCount=0 +SourceModule=advapi32.api @=AccessCheckByType [AccessCheckByTypeAndAuditAlarmW] -ParamCount=0 +SourceModule=advapi32.api @=AccessCheckByTypeAndAuditAlarmW [AccessCheckByTypeResultList] -ParamCount=0 +SourceModule=advapi32.api @=AccessCheckByTypeResultList [AccessCheckByTypeResultListAndAuditAlarmByHandleW] -ParamCount=0 +SourceModule=advapi32.api @=AccessCheckByTypeResultListAndAuditAlarmByHandleW [AccessCheckByTypeResultListAndAuditAlarmW] -ParamCount=0 +SourceModule=advapi32.api @=AccessCheckByTypeResultListAndAuditAlarmW [AddAccessAllowedAce] -ParamCount=0 +SourceModule=advapi32.api @=AddAccessAllowedAce [AddAccessAllowedAceEx] -ParamCount=0 +SourceModule=advapi32.api @=AddAccessAllowedAceEx [AddAccessAllowedObjectAce] -ParamCount=0 +SourceModule=advapi32.api @=AddAccessAllowedObjectAce [AddAccessDeniedAce] -ParamCount=0 +SourceModule=advapi32.api @=AddAccessDeniedAce [AddAccessDeniedAceEx] -ParamCount=0 +SourceModule=advapi32.api @=AddAccessDeniedAceEx [AddAccessDeniedObjectAce] -ParamCount=0 +SourceModule=advapi32.api @=AddAccessDeniedObjectAce [AddAce] -ParamCount=0 +SourceModule=advapi32.api @=AddAce [AddAuditAccessAce] -ParamCount=0 +SourceModule=advapi32.api @=AddAuditAccessAce [AddAuditAccessAceEx] -ParamCount=0 +SourceModule=advapi32.api @=AddAuditAccessAceEx [AddAuditAccessObjectAce] -ParamCount=0 +SourceModule=advapi32.api @=AddAuditAccessObjectAce [AddMandatoryAce] -ParamCount=0 +SourceModule=advapi32.api @=AddMandatoryAce [AdjustTokenGroups] -ParamCount=0 +SourceModule=advapi32.api @=AdjustTokenGroups [AdjustTokenPrivileges] -ParamCount=0 +SourceModule=advapi32.api @=AdjustTokenPrivileges [AllocateAndInitializeSid] -ParamCount=0 +SourceModule=advapi32.api @=AllocateAndInitializeSid [AllocateLocallyUniqueId] -ParamCount=0 +SourceModule=advapi32.api @=AllocateLocallyUniqueId [AreAllAccessesGranted] -ParamCount=0 +SourceModule=advapi32.api @=AreAllAccessesGranted [AreAnyAccessesGranted] -ParamCount=0 +SourceModule=advapi32.api @=AreAnyAccessesGranted [CheckTokenMembership] -ParamCount=0 +SourceModule=advapi32.api @=CheckTokenMembership [CloseTrace] -ParamCount=0 +SourceModule=advapi32.api @=CloseTrace [ControlTraceA] -ParamCount=0 +SourceModule=advapi32.api @=ControlTraceA [ControlTraceW] -ParamCount=0 +SourceModule=advapi32.api @=ControlTraceW [ConvertToAutoInheritPrivateObjectSecurity] -ParamCount=0 +SourceModule=advapi32.api @=ConvertToAutoInheritPrivateObjectSecurity [CopySid] -ParamCount=0 +SourceModule=advapi32.api @=CopySid [CreatePrivateObjectSecurity] -ParamCount=0 +SourceModule=advapi32.api @=CreatePrivateObjectSecurity [CreatePrivateObjectSecurityEx] -ParamCount=0 +SourceModule=advapi32.api @=CreatePrivateObjectSecurityEx [CreatePrivateObjectSecurityWithMultipleInheritance] -ParamCount=0 +SourceModule=advapi32.api @=CreatePrivateObjectSecurityWithMultipleInheritance [CreateProcessAsUserW] -ParamCount=0 +SourceModule=advapi32.api @=CreateProcessAsUserW [CreateRestrictedToken] -ParamCount=0 +SourceModule=advapi32.api @=CreateRestrictedToken [CreateWellKnownSid] -ParamCount=0 +SourceModule=advapi32.api @=CreateWellKnownSid [DeleteAce] -ParamCount=0 +SourceModule=advapi32.api @=DeleteAce [DestroyPrivateObjectSecurity] -ParamCount=0 +SourceModule=advapi32.api @=DestroyPrivateObjectSecurity [DuplicateToken] -ParamCount=0 +SourceModule=advapi32.api @=DuplicateToken [DuplicateTokenEx] -ParamCount=0 +SourceModule=advapi32.api @=DuplicateTokenEx [EnableTraceEx2] -ParamCount=0 +SourceModule=advapi32.api @=EnableTraceEx2 [EnumerateTraceGuidsEx] -ParamCount=0 +SourceModule=advapi32.api @=EnumerateTraceGuidsEx [EqualDomainSid] -ParamCount=0 +SourceModule=advapi32.api @=EqualDomainSid [EqualPrefixSid] -ParamCount=0 +SourceModule=advapi32.api @=EqualPrefixSid [EqualSid] -ParamCount=0 +SourceModule=advapi32.api @=EqualSid [EventAccessControl] -ParamCount=0 +SourceModule=advapi32.api @=EventAccessControl [EventAccessQuery] -ParamCount=0 +SourceModule=advapi32.api @=EventAccessQuery [EventAccessRemove] -ParamCount=0 +SourceModule=advapi32.api @=EventAccessRemove [EventActivityIdControl] -ParamCount=0 +SourceModule=advapi32.api @=EventActivityIdControl [EventEnabled] -ParamCount=0 +SourceModule=advapi32.api @=EventEnabled [EventProviderEnabled] -ParamCount=0 +SourceModule=advapi32.api @=EventProviderEnabled [EventRegister] -ParamCount=0 +SourceModule=advapi32.api @=EventRegister [EventSetInformation] -ParamCount=0 +SourceModule=advapi32.api @=EventSetInformation [EventUnregister] -ParamCount=0 +SourceModule=advapi32.api @=EventUnregister [EventWrite] -ParamCount=0 +SourceModule=advapi32.api @=EventWrite [EventWriteEx] -ParamCount=0 +SourceModule=advapi32.api @=EventWriteEx [EventWriteString] -ParamCount=0 +SourceModule=advapi32.api @=EventWriteString [EventWriteTransfer] -ParamCount=0 +SourceModule=advapi32.api @=EventWriteTransfer [FindFirstFreeAce] -ParamCount=0 +SourceModule=advapi32.api @=FindFirstFreeAce [FreeSid] -ParamCount=0 +SourceModule=advapi32.api @=FreeSid [GetAce] -ParamCount=0 +SourceModule=advapi32.api @=GetAce [GetAclInformation] -ParamCount=0 +SourceModule=advapi32.api @=GetAclInformation [GetAppContainerNamedObjectPath] -ParamCount=0 +SourceModule=advapi32.api @=GetAppContainerNamedObjectPath [GetFileSecurityW] -ParamCount=0 +SourceModule=advapi32.api @=GetFileSecurityW [GetKernelObjectSecurity] -ParamCount=0 +SourceModule=advapi32.api @=GetKernelObjectSecurity [GetLengthSid] -ParamCount=0 +SourceModule=advapi32.api @=GetLengthSid [GetPrivateObjectSecurity] -ParamCount=0 +SourceModule=advapi32.api @=GetPrivateObjectSecurity [GetSecurityDescriptorControl] -ParamCount=0 +SourceModule=advapi32.api @=GetSecurityDescriptorControl [GetSecurityDescriptorDacl] -ParamCount=0 +SourceModule=advapi32.api @=GetSecurityDescriptorDacl [GetSecurityDescriptorGroup] -ParamCount=0 +SourceModule=advapi32.api @=GetSecurityDescriptorGroup [GetSecurityDescriptorLength] -ParamCount=0 +SourceModule=advapi32.api @=GetSecurityDescriptorLength [GetSecurityDescriptorOwner] -ParamCount=0 +SourceModule=advapi32.api @=GetSecurityDescriptorOwner [GetSecurityDescriptorRMControl] -ParamCount=0 +SourceModule=advapi32.api @=GetSecurityDescriptorRMControl [GetSecurityDescriptorSacl] -ParamCount=0 +SourceModule=advapi32.api @=GetSecurityDescriptorSacl [GetSidIdentifierAuthority] -ParamCount=0 +SourceModule=advapi32.api @=GetSidIdentifierAuthority [GetSidLengthRequired] -ParamCount=0 +SourceModule=advapi32.api @=GetSidLengthRequired [GetSidSubAuthority] -ParamCount=0 +SourceModule=advapi32.api @=GetSidSubAuthority [GetSidSubAuthorityCount] -ParamCount=0 +SourceModule=advapi32.api @=GetSidSubAuthorityCount [GetTokenInformation] -ParamCount=0 +SourceModule=advapi32.api @=GetTokenInformation [GetTraceEnableFlags] -ParamCount=0 +SourceModule=advapi32.api @=GetTraceEnableFlags [GetTraceEnableLevel] -ParamCount=0 +SourceModule=advapi32.api @=GetTraceEnableLevel [GetTraceLoggerHandle] -ParamCount=0 +SourceModule=advapi32.api @=GetTraceLoggerHandle [GetWindowsAccountDomainSid] -ParamCount=0 +SourceModule=advapi32.api @=GetWindowsAccountDomainSid [ImpersonateAnonymousToken] -ParamCount=0 +SourceModule=advapi32.api @=ImpersonateAnonymousToken [ImpersonateLoggedOnUser] -ParamCount=0 +SourceModule=advapi32.api @=ImpersonateLoggedOnUser [ImpersonateNamedPipeClient] -ParamCount=0 +SourceModule=advapi32.api @=ImpersonateNamedPipeClient [ImpersonateSelf] -ParamCount=0 +SourceModule=advapi32.api @=ImpersonateSelf [InitializeAcl] -ParamCount=0 +SourceModule=advapi32.api @=InitializeAcl [InitializeSecurityDescriptor] -ParamCount=0 +SourceModule=advapi32.api @=InitializeSecurityDescriptor [InitializeSid] -ParamCount=0 +SourceModule=advapi32.api @=InitializeSid [IsTokenRestricted] -ParamCount=0 +SourceModule=advapi32.api @=IsTokenRestricted [IsValidAcl] -ParamCount=0 +SourceModule=advapi32.api @=IsValidAcl [IsValidSecurityDescriptor] -ParamCount=0 +SourceModule=advapi32.api @=IsValidSecurityDescriptor [IsValidSid] -ParamCount=0 +SourceModule=advapi32.api @=IsValidSid [IsWellKnownSid] -ParamCount=0 +SourceModule=advapi32.api @=IsWellKnownSid [MakeAbsoluteSD] -ParamCount=0 +SourceModule=advapi32.api @=MakeAbsoluteSD [MakeSelfRelativeSD] -ParamCount=0 +SourceModule=advapi32.api @=MakeSelfRelativeSD [MapGenericMask] -ParamCount=0 +SourceModule=advapi32.api @=MapGenericMask [ObjectCloseAuditAlarmW] -ParamCount=0 +SourceModule=advapi32.api @=ObjectCloseAuditAlarmW [ObjectDeleteAuditAlarmW] -ParamCount=0 +SourceModule=advapi32.api @=ObjectDeleteAuditAlarmW [ObjectOpenAuditAlarmW] -ParamCount=0 +SourceModule=advapi32.api @=ObjectOpenAuditAlarmW [ObjectPrivilegeAuditAlarmW] -ParamCount=0 +SourceModule=advapi32.api @=ObjectPrivilegeAuditAlarmW [OpenProcessToken] -ParamCount=0 +SourceModule=advapi32.api @=OpenProcessToken [OpenThreadToken] -ParamCount=0 +SourceModule=advapi32.api @=OpenThreadToken [OpenTraceW] -ParamCount=0 +SourceModule=advapi32.api @=OpenTraceW [PrivilegeCheck] -ParamCount=0 +SourceModule=advapi32.api @=PrivilegeCheck [PrivilegedServiceAuditAlarmW] -ParamCount=0 +SourceModule=advapi32.api @=PrivilegedServiceAuditAlarmW [ProcessTrace] -ParamCount=0 +SourceModule=advapi32.api @=ProcessTrace [QueryAllTracesA] -ParamCount=0 +SourceModule=advapi32.api @=QueryAllTracesA [QueryAllTracesW] -ParamCount=0 +SourceModule=advapi32.api @=QueryAllTracesW [QuerySecurityAccessMask] -ParamCount=0 +SourceModule=advapi32.api @=QuerySecurityAccessMask [RegCloseKey] -ParamCount=0 +SourceModule=advapi32.api @=RegCloseKey [RegCopyTreeW] -ParamCount=0 +SourceModule=advapi32.api @=RegCopyTreeW [RegCreateKeyExA] -ParamCount=0 +SourceModule=advapi32.api @=RegCreateKeyExA [RegCreateKeyExW] -ParamCount=0 +SourceModule=advapi32.api @=RegCreateKeyExW [RegDeleteKeyExA] -ParamCount=0 +SourceModule=advapi32.api @=RegDeleteKeyExA [RegDeleteKeyExW] -ParamCount=0 +SourceModule=advapi32.api @=RegDeleteKeyExW [RegDeleteTreeA] -ParamCount=0 +SourceModule=advapi32.api @=RegDeleteTreeA [RegDeleteTreeW] -ParamCount=0 +SourceModule=advapi32.api @=RegDeleteTreeW [RegDeleteValueA] -ParamCount=0 +SourceModule=advapi32.api @=RegDeleteValueA [RegDeleteValueW] -ParamCount=0 +SourceModule=advapi32.api @=RegDeleteValueW [RegDisablePredefinedCacheEx] -ParamCount=0 +SourceModule=advapi32.api @=RegDisablePredefinedCacheEx [RegEnumKeyExA] -ParamCount=0 +SourceModule=advapi32.api @=RegEnumKeyExA [RegEnumKeyExW] -ParamCount=0 +SourceModule=advapi32.api @=RegEnumKeyExW [RegEnumValueA] -ParamCount=0 +SourceModule=advapi32.api @=RegEnumValueA [RegEnumValueW] -ParamCount=0 +SourceModule=advapi32.api @=RegEnumValueW [RegFlushKey] -ParamCount=0 +SourceModule=advapi32.api @=RegFlushKey [RegGetKeySecurity] -ParamCount=0 +SourceModule=advapi32.api @=RegGetKeySecurity [RegGetValueA] -ParamCount=0 +SourceModule=advapi32.api @=RegGetValueA [RegGetValueW] -ParamCount=0 +SourceModule=advapi32.api @=RegGetValueW [RegisterTraceGuidsA] -ParamCount=0 +SourceModule=advapi32.api @=RegisterTraceGuidsA [RegisterTraceGuidsW] -ParamCount=0 +SourceModule=advapi32.api @=RegisterTraceGuidsW [RegLoadAppKeyA] -ParamCount=0 +SourceModule=advapi32.api @=RegLoadAppKeyA [RegLoadAppKeyW] -ParamCount=0 +SourceModule=advapi32.api @=RegLoadAppKeyW [RegLoadKeyA] -ParamCount=0 +SourceModule=advapi32.api @=RegLoadKeyA [RegLoadKeyW] -ParamCount=0 +SourceModule=advapi32.api @=RegLoadKeyW [RegLoadMUIStringA] -ParamCount=0 +SourceModule=advapi32.api @=RegLoadMUIStringA [RegLoadMUIStringW] -ParamCount=0 +SourceModule=advapi32.api @=RegLoadMUIStringW [RegNotifyChangeKeyValue] -ParamCount=0 +SourceModule=advapi32.api @=RegNotifyChangeKeyValue [RegOpenCurrentUser] -ParamCount=0 +SourceModule=advapi32.api @=RegOpenCurrentUser [RegOpenKeyExA] -ParamCount=0 +SourceModule=advapi32.api @=RegOpenKeyExA [RegOpenKeyExW] -ParamCount=0 +SourceModule=advapi32.api @=RegOpenKeyExW [RegOpenUserClassesRoot] -ParamCount=0 +SourceModule=advapi32.api @=RegOpenUserClassesRoot [RegQueryInfoKeyA] -ParamCount=0 +SourceModule=advapi32.api @=RegQueryInfoKeyA [RegQueryInfoKeyW] -ParamCount=0 +SourceModule=advapi32.api @=RegQueryInfoKeyW [RegQueryValueExA] -ParamCount=0 +SourceModule=advapi32.api @=RegQueryValueExA [RegQueryValueExW] -ParamCount=0 +SourceModule=advapi32.api @=RegQueryValueExW [RegRestoreKeyA] -ParamCount=0 +SourceModule=advapi32.api @=RegRestoreKeyA [RegRestoreKeyW] -ParamCount=0 +SourceModule=advapi32.api @=RegRestoreKeyW [RegSaveKeyExA] -ParamCount=0 +SourceModule=advapi32.api @=RegSaveKeyExA [RegSaveKeyExW] -ParamCount=0 +SourceModule=advapi32.api @=RegSaveKeyExW [RegSetKeySecurity] -ParamCount=0 +SourceModule=advapi32.api @=RegSetKeySecurity [RegSetValueExA] -ParamCount=0 +SourceModule=advapi32.api @=RegSetValueExA [RegSetValueExW] -ParamCount=0 +SourceModule=advapi32.api @=RegSetValueExW [RegUnLoadKeyA] -ParamCount=0 +SourceModule=advapi32.api @=RegUnLoadKeyA [RegUnLoadKeyW] -ParamCount=0 +SourceModule=advapi32.api @=RegUnLoadKeyW [RemoveTraceCallback] -ParamCount=0 +SourceModule=advapi32.api @=RemoveTraceCallback [RevertToSelf] -ParamCount=0 +SourceModule=advapi32.api @=RevertToSelf [SetAclInformation] -ParamCount=0 +SourceModule=advapi32.api @=SetAclInformation [SetFileSecurityW] -ParamCount=0 +SourceModule=advapi32.api @=SetFileSecurityW [SetKernelObjectSecurity] -ParamCount=0 +SourceModule=advapi32.api @=SetKernelObjectSecurity [SetPrivateObjectSecurity] -ParamCount=0 +SourceModule=advapi32.api @=SetPrivateObjectSecurity [SetPrivateObjectSecurityEx] -ParamCount=0 +SourceModule=advapi32.api @=SetPrivateObjectSecurityEx [SetSecurityAccessMask] -ParamCount=0 +SourceModule=advapi32.api @=SetSecurityAccessMask [SetSecurityDescriptorControl] -ParamCount=0 +SourceModule=advapi32.api @=SetSecurityDescriptorControl [SetSecurityDescriptorDacl] -ParamCount=0 +SourceModule=advapi32.api @=SetSecurityDescriptorDacl [SetSecurityDescriptorGroup] -ParamCount=0 +SourceModule=advapi32.api @=SetSecurityDescriptorGroup [SetSecurityDescriptorOwner] -ParamCount=0 +SourceModule=advapi32.api @=SetSecurityDescriptorOwner [SetSecurityDescriptorRMControl] -ParamCount=0 +SourceModule=advapi32.api @=SetSecurityDescriptorRMControl [SetSecurityDescriptorSacl] -ParamCount=0 +SourceModule=advapi32.api @=SetSecurityDescriptorSacl [SetThreadToken] -ParamCount=0 +SourceModule=advapi32.api @=SetThreadToken [SetTokenInformation] -ParamCount=0 +SourceModule=advapi32.api @=SetTokenInformation [SetTraceCallback] -ParamCount=0 +SourceModule=advapi32.api @=SetTraceCallback [StartTraceA] -ParamCount=0 +SourceModule=advapi32.api @=StartTraceA [StartTraceW] -ParamCount=0 +SourceModule=advapi32.api @=StartTraceW [StopTraceW] -ParamCount=0 +SourceModule=advapi32.api @=StopTraceW [TraceEvent] -ParamCount=0 +SourceModule=advapi32.api @=TraceEvent [TraceMessage] -ParamCount=0 +SourceModule=advapi32.api @=TraceMessage [TraceMessageVa] -ParamCount=0 +SourceModule=advapi32.api @=TraceMessageVa [TraceQueryInformation] -ParamCount=0 +SourceModule=advapi32.api @=TraceQueryInformation [TraceSetInformation] -ParamCount=0 +SourceModule=advapi32.api @=TraceSetInformation [UnregisterTraceGuids] -ParamCount=0 +SourceModule=advapi32.api @=UnregisterTraceGuids [AcquireSRWLockExclusive] -ParamCount=0 +SourceModule=kernel32.api @=AcquireSRWLockExclusive [AcquireSRWLockShared] -ParamCount=0 +SourceModule=kernel32.api @=AcquireSRWLockShared [ActivateActCtx] -ParamCount=0 +SourceModule=kernel32.api @=ActivateActCtx [AddDllDirectory] -ParamCount=0 +SourceModule=kernel32.api @=AddDllDirectory [AddRefActCtx] -ParamCount=0 +SourceModule=kernel32.api @=AddRefActCtx [AddResourceAttributeAce] -ParamCount=0 +SourceModule=kernel32.api @=AddResourceAttributeAce [AddScopedPolicyIDAce] -ParamCount=0 +SourceModule=kernel32.api @=AddScopedPolicyIDAce [AddSIDToBoundaryDescriptor] -ParamCount=0 +SourceModule=kernel32.api @=AddSIDToBoundaryDescriptor [AddVectoredContinueHandler] -ParamCount=0 +SourceModule=kernel32.api @=AddVectoredContinueHandler [AddVectoredExceptionHandler] -ParamCount=0 +SourceModule=kernel32.api @=AddVectoredExceptionHandler [AllocConsole] -ParamCount=0 +SourceModule=kernel32.api @=AllocConsole [AreFileApisANSI] -ParamCount=0 +SourceModule=kernel32.api @=AreFileApisANSI [AttachConsole] -ParamCount=0 +SourceModule=kernel32.api @=AttachConsole [Beep] -ParamCount=0 +SourceModule=kernel32.api @=Beep [CallbackMayRunLong] -ParamCount=0 +SourceModule=kernel32.api @=CallbackMayRunLong [CancelIo] -ParamCount=0 +SourceModule=kernel32.api @=CancelIo [CancelIoEx] -ParamCount=0 +SourceModule=kernel32.api @=CancelIoEx [CancelSynchronousIo] -ParamCount=0 +SourceModule=kernel32.api @=CancelSynchronousIo [CancelThreadpoolIo] -ParamCount=0 +SourceModule=kernel32.api @=CancelThreadpoolIo [CancelWaitableTimer] -ParamCount=0 +SourceModule=kernel32.api @=CancelWaitableTimer [ChangeTimerQueueTimer] -ParamCount=0 +SourceModule=kernel32.api @=ChangeTimerQueueTimer [CheckRemoteDebuggerPresent] -ParamCount=0 +SourceModule=kernel32.api @=CheckRemoteDebuggerPresent [CheckTokenCapability] -ParamCount=0 +SourceModule=kernel32.api @=CheckTokenCapability [CheckTokenMembershipEx] -ParamCount=0 +SourceModule=kernel32.api @=CheckTokenMembershipEx [ClearCommBreak] -ParamCount=0 +SourceModule=kernel32.api @=ClearCommBreak [ClearCommError] -ParamCount=0 +SourceModule=kernel32.api @=ClearCommError [CloseHandle] -ParamCount=0 +SourceModule=kernel32.api @=CloseHandle [ClosePrivateNamespace] -ParamCount=0 +SourceModule=kernel32.api @=ClosePrivateNamespace [CloseThreadpool] -ParamCount=0 +SourceModule=kernel32.api @=CloseThreadpool [CloseThreadpoolCleanupGroup] -ParamCount=0 +SourceModule=kernel32.api @=CloseThreadpoolCleanupGroup [CloseThreadpoolCleanupGroupMembers] -ParamCount=0 +SourceModule=kernel32.api @=CloseThreadpoolCleanupGroupMembers [CloseThreadpoolIo] -ParamCount=0 +SourceModule=kernel32.api @=CloseThreadpoolIo [CloseThreadpoolTimer] -ParamCount=0 +SourceModule=kernel32.api @=CloseThreadpoolTimer [CloseThreadpoolWait] -ParamCount=0 +SourceModule=kernel32.api @=CloseThreadpoolWait [CloseThreadpoolWork] -ParamCount=0 +SourceModule=kernel32.api @=CloseThreadpoolWork [CompareFileTime] -ParamCount=0 +SourceModule=kernel32.api @=CompareFileTime [CompareStringA] -ParamCount=0 +SourceModule=kernel32.api @=CompareStringA [CompareStringEx] -ParamCount=0 +SourceModule=kernel32.api @=CompareStringEx [CompareStringOrdinal] -ParamCount=0 +SourceModule=kernel32.api @=CompareStringOrdinal [CompareStringW] -ParamCount=0 +SourceModule=kernel32.api @=CompareStringW [ConnectNamedPipe] -ParamCount=0 +SourceModule=kernel32.api @=ConnectNamedPipe [ContinueDebugEvent] -ParamCount=0 +SourceModule=kernel32.api @=ContinueDebugEvent [ConvertDefaultLocale] -ParamCount=0 +SourceModule=kernel32.api @=ConvertDefaultLocale [CopyFile2] -ParamCount=0 +SourceModule=kernel32.api @=CopyFile2 [CopyFileExW] -ParamCount=0 +SourceModule=kernel32.api @=CopyFileExW [CreateActCtxW] -ParamCount=0 +SourceModule=kernel32.api @=CreateActCtxW [CreateBoundaryDescriptorW] -ParamCount=0 +SourceModule=kernel32.api @=CreateBoundaryDescriptorW [CreateConsoleScreenBuffer] -ParamCount=0 +SourceModule=kernel32.api @=CreateConsoleScreenBuffer [CreateDirectoryA] -ParamCount=0 +SourceModule=kernel32.api @=CreateDirectoryA [CreateDirectoryExW] -ParamCount=0 +SourceModule=kernel32.api @=CreateDirectoryExW [CreateDirectoryW] -ParamCount=0 +SourceModule=kernel32.api @=CreateDirectoryW [CreateEventA] -ParamCount=0 +SourceModule=kernel32.api @=CreateEventA [CreateEventExA] -ParamCount=0 +SourceModule=kernel32.api @=CreateEventExA [CreateEventExW] -ParamCount=0 +SourceModule=kernel32.api @=CreateEventExW [CreateEventW] -ParamCount=0 +SourceModule=kernel32.api @=CreateEventW [CreateFile2] -ParamCount=0 +SourceModule=kernel32.api @=CreateFile2 [CreateFileA] -ParamCount=0 +SourceModule=kernel32.api @=CreateFileA [CreateFileMappingFromApp] -ParamCount=0 +SourceModule=kernel32.api @=CreateFileMappingFromApp [CreateFileMappingNumaW] -ParamCount=0 +SourceModule=kernel32.api @=CreateFileMappingNumaW [CreateFileMappingW] -ParamCount=0 +SourceModule=kernel32.api @=CreateFileMappingW [CreateFileW] -ParamCount=0 +SourceModule=kernel32.api @=CreateFileW [CreateHardLinkW] -ParamCount=0 +SourceModule=kernel32.api @=CreateHardLinkW [CreateIoCompletionPort] -ParamCount=0 +SourceModule=kernel32.api @=CreateIoCompletionPort [CreateMemoryResourceNotification] -ParamCount=0 +SourceModule=kernel32.api @=CreateMemoryResourceNotification [CreateMutexA] -ParamCount=0 +SourceModule=kernel32.api @=CreateMutexA [CreateMutexExA] -ParamCount=0 +SourceModule=kernel32.api @=CreateMutexExA [CreateMutexExW] -ParamCount=0 +SourceModule=kernel32.api @=CreateMutexExW [CreateMutexW] -ParamCount=0 +SourceModule=kernel32.api @=CreateMutexW [CreateNamedPipeW] -ParamCount=0 +SourceModule=kernel32.api @=CreateNamedPipeW [CreatePipe] -ParamCount=0 +SourceModule=kernel32.api @=CreatePipe [CreatePrivateNamespaceW] -ParamCount=0 +SourceModule=kernel32.api @=CreatePrivateNamespaceW [CreateProcessA] -ParamCount=0 +SourceModule=kernel32.api @=CreateProcessA [CreateProcessW] -ParamCount=0 +SourceModule=kernel32.api @=CreateProcessW [CreateRemoteThread] -ParamCount=0 +SourceModule=kernel32.api @=CreateRemoteThread [CreateRemoteThreadEx] -ParamCount=0 +SourceModule=kernel32.api @=CreateRemoteThreadEx [CreateSemaphoreExW] -ParamCount=0 +SourceModule=kernel32.api @=CreateSemaphoreExW [CreateSymbolicLinkW] -ParamCount=0 +SourceModule=kernel32.api @=CreateSymbolicLinkW [CreateThread] -ParamCount=0 +SourceModule=kernel32.api @=CreateThread [CreateThreadpool] -ParamCount=0 +SourceModule=kernel32.api @=CreateThreadpool [CreateThreadpoolCleanupGroup] -ParamCount=0 +SourceModule=kernel32.api @=CreateThreadpoolCleanupGroup [CreateThreadpoolIo] -ParamCount=0 +SourceModule=kernel32.api @=CreateThreadpoolIo [CreateThreadpoolTimer] -ParamCount=0 +SourceModule=kernel32.api @=CreateThreadpoolTimer [CreateThreadpoolWait] -ParamCount=0 +SourceModule=kernel32.api @=CreateThreadpoolWait [CreateThreadpoolWork] -ParamCount=0 +SourceModule=kernel32.api @=CreateThreadpoolWork [CreateTimerQueue] -ParamCount=0 +SourceModule=kernel32.api @=CreateTimerQueue [CreateTimerQueueTimer] -ParamCount=0 +SourceModule=kernel32.api @=CreateTimerQueueTimer [CreateWaitableTimerExW] -ParamCount=0 +SourceModule=kernel32.api @=CreateWaitableTimerExW [DeactivateActCtx] -ParamCount=0 +SourceModule=kernel32.api @=DeactivateActCtx [DebugActiveProcess] -ParamCount=0 +SourceModule=kernel32.api @=DebugActiveProcess [DebugActiveProcessStop] -ParamCount=0 +SourceModule=kernel32.api @=DebugActiveProcessStop [DebugBreak] -ParamCount=0 +SourceModule=kernel32.api @=DebugBreak [DecodePointer] -ParamCount=0 +SourceModule=kernel32.api @=DecodePointer [DecodeSystemPointer] -ParamCount=0 +SourceModule=kernel32.api @=DecodeSystemPointer [DefineDosDeviceW] -ParamCount=0 +SourceModule=kernel32.api @=DefineDosDeviceW [DelayLoadFailureHook] -ParamCount=0 +SourceModule=kernel32.api @=DelayLoadFailureHook [DeleteBoundaryDescriptor] -ParamCount=0 +SourceModule=kernel32.api @=DeleteBoundaryDescriptor [DeleteCriticalSection] -ParamCount=0 +SourceModule=kernel32.api @=DeleteCriticalSection [DeleteFileA] -ParamCount=0 +SourceModule=kernel32.api @=DeleteFileA [DeleteFileW] -ParamCount=0 +SourceModule=kernel32.api @=DeleteFileW [DeleteProcThreadAttributeList] -ParamCount=0 +SourceModule=kernel32.api @=DeleteProcThreadAttributeList [DeleteSynchronizationBarrier] -ParamCount=0 +SourceModule=kernel32.api @=DeleteSynchronizationBarrier [DeleteTimerQueueEx] -ParamCount=0 +SourceModule=kernel32.api @=DeleteTimerQueueEx [DeleteTimerQueueTimer] -ParamCount=0 +SourceModule=kernel32.api @=DeleteTimerQueueTimer [DeleteVolumeMountPointW] -ParamCount=0 +SourceModule=kernel32.api @=DeleteVolumeMountPointW [DeviceIoControl] -ParamCount=0 +SourceModule=kernel32.api @=DeviceIoControl [DisableThreadLibraryCalls] -ParamCount=0 +SourceModule=kernel32.api @=DisableThreadLibraryCalls [DisassociateCurrentThreadFromCallback] -ParamCount=0 +SourceModule=kernel32.api @=DisassociateCurrentThreadFromCallback [DisconnectNamedPipe] -ParamCount=0 +SourceModule=kernel32.api @=DisconnectNamedPipe [DuplicateHandle] -ParamCount=0 +SourceModule=kernel32.api @=DuplicateHandle [EncodePointer] -ParamCount=0 +SourceModule=kernel32.api @=EncodePointer [EncodeSystemPointer] -ParamCount=0 +SourceModule=kernel32.api @=EncodeSystemPointer [EnterCriticalSection] -ParamCount=0 +SourceModule=kernel32.api @=EnterCriticalSection [EnterSynchronizationBarrier] -ParamCount=0 +SourceModule=kernel32.api @=EnterSynchronizationBarrier [EnumCalendarInfoExEx] -ParamCount=0 +SourceModule=kernel32.api @=EnumCalendarInfoExEx [EnumCalendarInfoExW] -ParamCount=0 +SourceModule=kernel32.api @=EnumCalendarInfoExW [EnumCalendarInfoW] -ParamCount=0 +SourceModule=kernel32.api @=EnumCalendarInfoW [EnumDateFormatsExEx] -ParamCount=0 +SourceModule=kernel32.api @=EnumDateFormatsExEx [EnumDateFormatsExW] -ParamCount=0 +SourceModule=kernel32.api @=EnumDateFormatsExW [EnumDateFormatsW] -ParamCount=0 +SourceModule=kernel32.api @=EnumDateFormatsW [EnumLanguageGroupLocalesW] -ParamCount=0 +SourceModule=kernel32.api @=EnumLanguageGroupLocalesW [EnumResourceLanguagesExA] -ParamCount=0 +SourceModule=kernel32.api @=EnumResourceLanguagesExA [EnumResourceLanguagesExW] -ParamCount=0 +SourceModule=kernel32.api @=EnumResourceLanguagesExW [EnumResourceNamesExA] -ParamCount=0 +SourceModule=kernel32.api @=EnumResourceNamesExA [EnumResourceNamesExW] -ParamCount=0 +SourceModule=kernel32.api @=EnumResourceNamesExW [EnumResourceTypesExA] -ParamCount=0 +SourceModule=kernel32.api @=EnumResourceTypesExA [EnumResourceTypesExW] -ParamCount=0 +SourceModule=kernel32.api @=EnumResourceTypesExW [EnumSystemCodePagesW] -ParamCount=0 +SourceModule=kernel32.api @=EnumSystemCodePagesW [EnumSystemFirmwareTables] -ParamCount=0 +SourceModule=kernel32.api @=EnumSystemFirmwareTables [EnumSystemGeoID] -ParamCount=0 +SourceModule=kernel32.api @=EnumSystemGeoID [EnumSystemLanguageGroupsW] -ParamCount=0 +SourceModule=kernel32.api @=EnumSystemLanguageGroupsW [EnumSystemLocalesA] -ParamCount=0 +SourceModule=kernel32.api @=EnumSystemLocalesA [EnumSystemLocalesEx] -ParamCount=0 +SourceModule=kernel32.api @=EnumSystemLocalesEx [EnumSystemLocalesW] -ParamCount=0 +SourceModule=kernel32.api @=EnumSystemLocalesW [EnumTimeFormatsEx] -ParamCount=0 +SourceModule=kernel32.api @=EnumTimeFormatsEx [EnumTimeFormatsW] -ParamCount=0 +SourceModule=kernel32.api @=EnumTimeFormatsW [EnumUILanguagesW] -ParamCount=0 +SourceModule=kernel32.api @=EnumUILanguagesW [EscapeCommFunction] -ParamCount=0 +SourceModule=kernel32.api @=EscapeCommFunction [ExitProcess] -ParamCount=0 +SourceModule=kernel32.api @=ExitProcess [ExitThread] -ParamCount=0 +SourceModule=kernel32.api @=ExitThread [ExpandEnvironmentStringsA] -ParamCount=0 +SourceModule=kernel32.api @=ExpandEnvironmentStringsA [ExpandEnvironmentStringsW] -ParamCount=0 +SourceModule=kernel32.api @=ExpandEnvironmentStringsW [FatalAppExitA] -ParamCount=0 +SourceModule=kernel32.api @=FatalAppExitA [FatalAppExitW] -ParamCount=0 +SourceModule=kernel32.api @=FatalAppExitW [FileTimeToLocalFileTime] -ParamCount=0 +SourceModule=kernel32.api @=FileTimeToLocalFileTime [FileTimeToSystemTime] -ParamCount=0 +SourceModule=kernel32.api @=FileTimeToSystemTime [FillConsoleOutputAttribute] -ParamCount=0 +SourceModule=kernel32.api @=FillConsoleOutputAttribute [FillConsoleOutputCharacterA] -ParamCount=0 +SourceModule=kernel32.api @=FillConsoleOutputCharacterA [FillConsoleOutputCharacterW] -ParamCount=0 +SourceModule=kernel32.api @=FillConsoleOutputCharacterW [FindActCtxSectionGuid] -ParamCount=0 +SourceModule=kernel32.api @=FindActCtxSectionGuid [FindActCtxSectionStringW] -ParamCount=0 +SourceModule=kernel32.api @=FindActCtxSectionStringW [FindClose] -ParamCount=0 +SourceModule=kernel32.api @=FindClose [FindCloseChangeNotification] -ParamCount=0 +SourceModule=kernel32.api @=FindCloseChangeNotification [FindFirstChangeNotificationA] -ParamCount=0 +SourceModule=kernel32.api @=FindFirstChangeNotificationA [FindFirstChangeNotificationW] -ParamCount=0 +SourceModule=kernel32.api @=FindFirstChangeNotificationW [FindFirstFileA] -ParamCount=0 +SourceModule=kernel32.api @=FindFirstFileA [FindFirstFileExA] -ParamCount=0 +SourceModule=kernel32.api @=FindFirstFileExA [FindFirstFileExW] -ParamCount=0 +SourceModule=kernel32.api @=FindFirstFileExW [FindFirstFileW] -ParamCount=0 +SourceModule=kernel32.api @=FindFirstFileW [FindFirstVolumeW] -ParamCount=0 +SourceModule=kernel32.api @=FindFirstVolumeW [FindNextChangeNotification] -ParamCount=0 +SourceModule=kernel32.api @=FindNextChangeNotification [FindNextFileA] -ParamCount=0 +SourceModule=kernel32.api @=FindNextFileA [FindNextFileW] -ParamCount=0 +SourceModule=kernel32.api @=FindNextFileW [FindNextVolumeW] -ParamCount=0 +SourceModule=kernel32.api @=FindNextVolumeW [FindNLSString] -ParamCount=0 +SourceModule=kernel32.api @=FindNLSString [FindNLSStringEx] -ParamCount=0 +SourceModule=kernel32.api @=FindNLSStringEx [FindResourceExW] -ParamCount=0 +SourceModule=kernel32.api @=FindResourceExW [FindStringOrdinal] -ParamCount=0 +SourceModule=kernel32.api @=FindStringOrdinal [FindVolumeClose] -ParamCount=0 +SourceModule=kernel32.api @=FindVolumeClose [FlsAlloc] -ParamCount=0 +SourceModule=kernel32.api @=FlsAlloc [FlsFree] -ParamCount=0 +SourceModule=kernel32.api @=FlsFree [FlsGetValue] -ParamCount=0 +SourceModule=kernel32.api @=FlsGetValue [FlsSetValue] -ParamCount=0 +SourceModule=kernel32.api @=FlsSetValue [FlushConsoleInputBuffer] -ParamCount=0 +SourceModule=kernel32.api @=FlushConsoleInputBuffer [FlushFileBuffers] -ParamCount=0 +SourceModule=kernel32.api @=FlushFileBuffers [FlushInstructionCache] -ParamCount=0 +SourceModule=kernel32.api @=FlushInstructionCache [FlushProcessWriteBuffers] -ParamCount=0 +SourceModule=kernel32.api @=FlushProcessWriteBuffers [FlushViewOfFile] -ParamCount=0 +SourceModule=kernel32.api @=FlushViewOfFile [FoldStringW] -ParamCount=0 +SourceModule=kernel32.api @=FoldStringW [FormatMessageA] -ParamCount=0 +SourceModule=kernel32.api @=FormatMessageA [FormatMessageW] -ParamCount=0 +SourceModule=kernel32.api @=FormatMessageW [FreeConsole] -ParamCount=0 +SourceModule=kernel32.api @=FreeConsole [FreeEnvironmentStringsA] -ParamCount=0 +SourceModule=kernel32.api @=FreeEnvironmentStringsA [FreeEnvironmentStringsW] -ParamCount=0 +SourceModule=kernel32.api @=FreeEnvironmentStringsW [FreeLibrary] -ParamCount=0 +SourceModule=kernel32.api @=FreeLibrary [FreeLibraryAndExitThread] -ParamCount=0 +SourceModule=kernel32.api @=FreeLibraryAndExitThread [FreeLibraryWhenCallbackReturns] -ParamCount=0 +SourceModule=kernel32.api @=FreeLibraryWhenCallbackReturns [FreeResource] -ParamCount=0 +SourceModule=kernel32.api @=FreeResource [GenerateConsoleCtrlEvent] -ParamCount=0 +SourceModule=kernel32.api @=GenerateConsoleCtrlEvent [GetACP] -ParamCount=0 +SourceModule=kernel32.api @=GetACP [GetApplicationRecoveryCallback] -ParamCount=0 +SourceModule=kernel32.api @=GetApplicationRecoveryCallback [GetApplicationRestartSettings] -ParamCount=0 +SourceModule=kernel32.api @=GetApplicationRestartSettings [GetCalendarInfoEx] -ParamCount=0 +SourceModule=kernel32.api @=GetCalendarInfoEx [GetCalendarInfoW] -ParamCount=0 +SourceModule=kernel32.api @=GetCalendarInfoW [GetCommandLineA] -ParamCount=0 +SourceModule=kernel32.api @=GetCommandLineA [GetCommandLineW] -ParamCount=0 +SourceModule=kernel32.api @=GetCommandLineW [GetCommConfig] -ParamCount=0 +SourceModule=kernel32.api @=GetCommConfig [GetCommMask] -ParamCount=0 +SourceModule=kernel32.api @=GetCommMask [GetCommModemStatus] -ParamCount=0 +SourceModule=kernel32.api @=GetCommModemStatus [GetCommProperties] -ParamCount=0 +SourceModule=kernel32.api @=GetCommProperties [GetCommState] -ParamCount=0 +SourceModule=kernel32.api @=GetCommState [GetCommTimeouts] -ParamCount=0 +SourceModule=kernel32.api @=GetCommTimeouts [GetComputerNameExA] -ParamCount=0 +SourceModule=kernel32.api @=GetComputerNameExA [GetComputerNameExW] -ParamCount=0 +SourceModule=kernel32.api @=GetComputerNameExW [GetConsoleCP] -ParamCount=0 +SourceModule=kernel32.api @=GetConsoleCP [GetConsoleCursorInfo] -ParamCount=0 +SourceModule=kernel32.api @=GetConsoleCursorInfo [GetConsoleMode] -ParamCount=0 +SourceModule=kernel32.api @=GetConsoleMode [GetConsoleOutputCP] -ParamCount=0 +SourceModule=kernel32.api @=GetConsoleOutputCP [GetConsoleScreenBufferInfo] -ParamCount=0 +SourceModule=kernel32.api @=GetConsoleScreenBufferInfo [GetConsoleScreenBufferInfoEx] -ParamCount=0 +SourceModule=kernel32.api @=GetConsoleScreenBufferInfoEx [GetConsoleTitleW] -ParamCount=0 +SourceModule=kernel32.api @=GetConsoleTitleW [GetCPInfo] -ParamCount=0 +SourceModule=kernel32.api @=GetCPInfo [GetCPInfoExW] -ParamCount=0 +SourceModule=kernel32.api @=GetCPInfoExW [GetCurrencyFormatEx] -ParamCount=0 +SourceModule=kernel32.api @=GetCurrencyFormatEx [GetCurrencyFormatW] -ParamCount=0 +SourceModule=kernel32.api @=GetCurrencyFormatW [GetCurrentActCtx] -ParamCount=0 +SourceModule=kernel32.api @=GetCurrentActCtx [GetCurrentDirectoryA] -ParamCount=0 +SourceModule=kernel32.api @=GetCurrentDirectoryA [GetCurrentDirectoryW] -ParamCount=0 +SourceModule=kernel32.api @=GetCurrentDirectoryW [GetCurrentProcess] -ParamCount=0 +SourceModule=kernel32.api @=GetCurrentProcess [GetCurrentProcessId] -ParamCount=0 +SourceModule=kernel32.api @=GetCurrentProcessId [GetCurrentProcessorNumber] -ParamCount=0 +SourceModule=kernel32.api @=GetCurrentProcessorNumber [GetCurrentProcessorNumberEx] -ParamCount=0 +SourceModule=kernel32.api @=GetCurrentProcessorNumberEx [GetCurrentThread] -ParamCount=0 +SourceModule=kernel32.api @=GetCurrentThread [GetCurrentThreadId] -ParamCount=0 +SourceModule=kernel32.api @=GetCurrentThreadId [GetDateFormatA] -ParamCount=0 +SourceModule=kernel32.api @=GetDateFormatA [GetDateFormatEx] -ParamCount=0 +SourceModule=kernel32.api @=GetDateFormatEx [GetDateFormatW] -ParamCount=0 +SourceModule=kernel32.api @=GetDateFormatW [GetDiskFreeSpaceA] -ParamCount=0 +SourceModule=kernel32.api @=GetDiskFreeSpaceA [GetDiskFreeSpaceExA] -ParamCount=0 +SourceModule=kernel32.api @=GetDiskFreeSpaceExA [GetDiskFreeSpaceExW] -ParamCount=0 +SourceModule=kernel32.api @=GetDiskFreeSpaceExW [GetDiskFreeSpaceW] -ParamCount=0 +SourceModule=kernel32.api @=GetDiskFreeSpaceW [GetDriveTypeA] -ParamCount=0 +SourceModule=kernel32.api @=GetDriveTypeA [GetDriveTypeW] -ParamCount=0 +SourceModule=kernel32.api @=GetDriveTypeW [GetDynamicTimeZoneInformation] -ParamCount=0 +SourceModule=kernel32.api @=GetDynamicTimeZoneInformation [GetEnvironmentStrings] -ParamCount=0 +SourceModule=kernel32.api @=GetEnvironmentStrings [GetEnvironmentStringsA] -ParamCount=0 +SourceModule=kernel32.api @=GetEnvironmentStringsA [GetEnvironmentStringsW] -ParamCount=0 +SourceModule=kernel32.api @=GetEnvironmentStringsW [GetEnvironmentVariableA] -ParamCount=0 +SourceModule=kernel32.api @=GetEnvironmentVariableA [GetEnvironmentVariableW] -ParamCount=0 +SourceModule=kernel32.api @=GetEnvironmentVariableW [GetErrorMode] -ParamCount=0 +SourceModule=kernel32.api @=GetErrorMode [GetExitCodeProcess] -ParamCount=0 +SourceModule=kernel32.api @=GetExitCodeProcess [GetExitCodeThread] -ParamCount=0 +SourceModule=kernel32.api @=GetExitCodeThread [GetFileAttributesA] -ParamCount=0 +SourceModule=kernel32.api @=GetFileAttributesA [GetFileAttributesExA] -ParamCount=0 +SourceModule=kernel32.api @=GetFileAttributesExA [GetFileAttributesExW] -ParamCount=0 +SourceModule=kernel32.api @=GetFileAttributesExW [GetFileAttributesW] -ParamCount=0 +SourceModule=kernel32.api @=GetFileAttributesW [GetFileInformationByHandle] -ParamCount=0 +SourceModule=kernel32.api @=GetFileInformationByHandle [GetFileInformationByHandleEx] -ParamCount=0 +SourceModule=kernel32.api @=GetFileInformationByHandleEx [GetFileMUIInfo] -ParamCount=0 +SourceModule=kernel32.api @=GetFileMUIInfo [GetFileMUIPath] -ParamCount=0 +SourceModule=kernel32.api @=GetFileMUIPath [GetFileSize] -ParamCount=0 +SourceModule=kernel32.api @=GetFileSize [GetFileSizeEx] -ParamCount=0 +SourceModule=kernel32.api @=GetFileSizeEx [GetFileTime] -ParamCount=0 +SourceModule=kernel32.api @=GetFileTime [GetFileType] -ParamCount=0 +SourceModule=kernel32.api @=GetFileType [GetFinalPathNameByHandleA] -ParamCount=0 +SourceModule=kernel32.api @=GetFinalPathNameByHandleA [GetFinalPathNameByHandleW] -ParamCount=0 +SourceModule=kernel32.api @=GetFinalPathNameByHandleW [GetFullPathNameA] -ParamCount=0 +SourceModule=kernel32.api @=GetFullPathNameA [GetFullPathNameW] -ParamCount=0 +SourceModule=kernel32.api @=GetFullPathNameW [GetGeoInfoW] -ParamCount=0 +SourceModule=kernel32.api @=GetGeoInfoW [GetHandleInformation] -ParamCount=0 +SourceModule=kernel32.api @=GetHandleInformation [GetLargePageMinimum] -ParamCount=0 +SourceModule=kernel32.api @=GetLargePageMinimum [GetLargestConsoleWindowSize] -ParamCount=0 +SourceModule=kernel32.api @=GetLargestConsoleWindowSize [GetLastError] -ParamCount=0 +SourceModule=kernel32.api @=GetLastError [GetLocaleInfoA] -ParamCount=0 +SourceModule=kernel32.api @=GetLocaleInfoA [GetLocaleInfoEx] -ParamCount=0 +SourceModule=kernel32.api @=GetLocaleInfoEx [GetLocaleInfoW] -ParamCount=0 +SourceModule=kernel32.api @=GetLocaleInfoW [GetLocalTime] -ParamCount=0 +SourceModule=kernel32.api @=GetLocalTime [GetLogicalDrives] -ParamCount=0 +SourceModule=kernel32.api @=GetLogicalDrives [GetLogicalDriveStringsW] -ParamCount=0 +SourceModule=kernel32.api @=GetLogicalDriveStringsW [GetLogicalProcessorInformation] -ParamCount=0 +SourceModule=kernel32.api @=GetLogicalProcessorInformation [GetLogicalProcessorInformationEx] -ParamCount=0 +SourceModule=kernel32.api @=GetLogicalProcessorInformationEx [GetLongPathNameA] -ParamCount=0 +SourceModule=kernel32.api @=GetLongPathNameA [GetLongPathNameW] -ParamCount=0 +SourceModule=kernel32.api @=GetLongPathNameW [GetModuleFileNameA] -ParamCount=0 +SourceModule=kernel32.api @=GetModuleFileNameA [GetModuleFileNameW] -ParamCount=0 +SourceModule=kernel32.api @=GetModuleFileNameW [GetModuleHandleA] -ParamCount=0 +SourceModule=kernel32.api @=GetModuleHandleA [GetModuleHandleExA] -ParamCount=0 +SourceModule=kernel32.api @=GetModuleHandleExA [GetModuleHandleExW] -ParamCount=0 +SourceModule=kernel32.api @=GetModuleHandleExW [GetModuleHandleW] -ParamCount=0 +SourceModule=kernel32.api @=GetModuleHandleW [GetNamedPipeClientComputerNameW] -ParamCount=0 +SourceModule=kernel32.api @=GetNamedPipeClientComputerNameW [GetNativeSystemInfo] -ParamCount=0 +SourceModule=kernel32.api @=GetNativeSystemInfo [GetNLSVersion] -ParamCount=0 +SourceModule=kernel32.api @=GetNLSVersion [GetNLSVersionEx] -ParamCount=0 +SourceModule=kernel32.api @=GetNLSVersionEx [GetNumaHighestNodeNumber] -ParamCount=0 +SourceModule=kernel32.api @=GetNumaHighestNodeNumber [GetNumaNodeProcessorMaskEx] -ParamCount=0 +SourceModule=kernel32.api @=GetNumaNodeProcessorMaskEx [GetNumberFormatEx] -ParamCount=0 +SourceModule=kernel32.api @=GetNumberFormatEx [GetNumberFormatW] -ParamCount=0 +SourceModule=kernel32.api @=GetNumberFormatW [GetNumberOfConsoleInputEvents] -ParamCount=0 +SourceModule=kernel32.api @=GetNumberOfConsoleInputEvents [GetOEMCP] -ParamCount=0 +SourceModule=kernel32.api @=GetOEMCP [GetOverlappedResult] -ParamCount=0 +SourceModule=kernel32.api @=GetOverlappedResult [GetOverlappedResultEx] -ParamCount=0 +SourceModule=kernel32.api @=GetOverlappedResultEx [GetPriorityClass] -ParamCount=0 +SourceModule=kernel32.api @=GetPriorityClass [GetProcAddress] -ParamCount=0 +SourceModule=kernel32.api @=GetProcAddress [GetProcessGroupAffinity] -ParamCount=0 +SourceModule=kernel32.api @=GetProcessGroupAffinity [GetProcessHandleCount] -ParamCount=0 +SourceModule=kernel32.api @=GetProcessHandleCount [GetProcessHeap] -ParamCount=0 +SourceModule=kernel32.api @=GetProcessHeap [GetProcessHeaps] -ParamCount=0 +SourceModule=kernel32.api @=GetProcessHeaps [GetProcessId] -ParamCount=0 +SourceModule=kernel32.api @=GetProcessId [GetProcessIdOfThread] -ParamCount=0 +SourceModule=kernel32.api @=GetProcessIdOfThread [GetProcessMitigationPolicy] -ParamCount=0 +SourceModule=kernel32.api @=GetProcessMitigationPolicy [GetProcessPreferredUILanguages] -ParamCount=0 +SourceModule=kernel32.api @=GetProcessPreferredUILanguages [GetProcessTimes] -ParamCount=0 +SourceModule=kernel32.api @=GetProcessTimes [GetProcessVersion] -ParamCount=0 +SourceModule=kernel32.api @=GetProcessVersion [GetProcessWorkingSetSizeEx] -ParamCount=0 +SourceModule=kernel32.api @=GetProcessWorkingSetSizeEx [GetProductInfo] -ParamCount=0 +SourceModule=kernel32.api @=GetProductInfo [GetQueuedCompletionStatus] -ParamCount=0 +SourceModule=kernel32.api @=GetQueuedCompletionStatus [GetQueuedCompletionStatusEx] -ParamCount=0 +SourceModule=kernel32.api @=GetQueuedCompletionStatusEx [GetShortPathNameW] -ParamCount=0 +SourceModule=kernel32.api @=GetShortPathNameW [GetStartupInfoW] -ParamCount=0 +SourceModule=kernel32.api @=GetStartupInfoW [GetStdHandle] -ParamCount=0 +SourceModule=kernel32.api @=GetStdHandle [GetStringScripts] -ParamCount=0 +SourceModule=kernel32.api @=GetStringScripts [GetStringTypeA] -ParamCount=0 +SourceModule=kernel32.api @=GetStringTypeA [GetStringTypeExW] -ParamCount=0 +SourceModule=kernel32.api @=GetStringTypeExW [GetStringTypeW] -ParamCount=0 +SourceModule=kernel32.api @=GetStringTypeW [GetSystemDefaultLangID] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemDefaultLangID [GetSystemDefaultLCID] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemDefaultLCID [GetSystemDefaultLocaleName] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemDefaultLocaleName [GetSystemDefaultUILanguage] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemDefaultUILanguage [GetSystemDirectoryA] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemDirectoryA [GetSystemDirectoryW] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemDirectoryW [GetSystemFileCacheSize] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemFileCacheSize [GetSystemFirmwareTable] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemFirmwareTable [GetSystemInfo] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemInfo [GetSystemPreferredUILanguages] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemPreferredUILanguages [GetSystemTime] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemTime [GetSystemTimeAdjustment] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemTimeAdjustment [GetSystemTimeAsFileTime] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemTimeAsFileTime [GetSystemTimePreciseAsFileTime] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemTimePreciseAsFileTime [GetSystemWindowsDirectoryA] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemWindowsDirectoryA [GetSystemWindowsDirectoryW] -ParamCount=0 +SourceModule=kernel32.api @=GetSystemWindowsDirectoryW [GetTempFileNameW] -ParamCount=0 +SourceModule=kernel32.api @=GetTempFileNameW [GetTempPathW] -ParamCount=0 +SourceModule=kernel32.api @=GetTempPathW [GetThreadContext] -ParamCount=0 +SourceModule=kernel32.api @=GetThreadContext [GetThreadGroupAffinity] -ParamCount=0 +SourceModule=kernel32.api @=GetThreadGroupAffinity [GetThreadId] -ParamCount=0 +SourceModule=kernel32.api @=GetThreadId [GetThreadIdealProcessorEx] -ParamCount=0 +SourceModule=kernel32.api @=GetThreadIdealProcessorEx [GetThreadLocale] -ParamCount=0 +SourceModule=kernel32.api @=GetThreadLocale [GetThreadPreferredUILanguages] -ParamCount=0 +SourceModule=kernel32.api @=GetThreadPreferredUILanguages [GetThreadPriority] -ParamCount=0 +SourceModule=kernel32.api @=GetThreadPriority [GetThreadPriorityBoost] -ParamCount=0 +SourceModule=kernel32.api @=GetThreadPriorityBoost [GetThreadTimes] -ParamCount=0 +SourceModule=kernel32.api @=GetThreadTimes [GetThreadUILanguage] -ParamCount=0 +SourceModule=kernel32.api @=GetThreadUILanguage [GetTickCount] -ParamCount=0 +SourceModule=kernel32.api @=GetTickCount [GetTickCount64] -ParamCount=0 +SourceModule=kernel32.api @=GetTickCount64 [GetTimeFormatA] -ParamCount=0 +SourceModule=kernel32.api @=GetTimeFormatA [GetTimeFormatEx] -ParamCount=0 +SourceModule=kernel32.api @=GetTimeFormatEx [GetTimeFormatW] -ParamCount=0 +SourceModule=kernel32.api @=GetTimeFormatW [GetTimeZoneInformation] -ParamCount=0 +SourceModule=kernel32.api @=GetTimeZoneInformation [GetTimeZoneInformationForYear] -ParamCount=0 +SourceModule=kernel32.api @=GetTimeZoneInformationForYear [GetUILanguageInfo] -ParamCount=0 +SourceModule=kernel32.api @=GetUILanguageInfo [GetUserDefaultLangID] -ParamCount=0 +SourceModule=kernel32.api @=GetUserDefaultLangID [GetUserDefaultLCID] -ParamCount=0 +SourceModule=kernel32.api @=GetUserDefaultLCID [GetUserDefaultLocaleName] -ParamCount=0 +SourceModule=kernel32.api @=GetUserDefaultLocaleName [GetUserDefaultUILanguage] -ParamCount=0 +SourceModule=kernel32.api @=GetUserDefaultUILanguage [GetUserGeoID] -ParamCount=0 +SourceModule=kernel32.api @=GetUserGeoID [GetUserPreferredUILanguages] -ParamCount=0 +SourceModule=kernel32.api @=GetUserPreferredUILanguages [GetVersion] -ParamCount=0 +SourceModule=kernel32.api @=GetVersion [GetVersionExA] -ParamCount=0 +SourceModule=kernel32.api @=GetVersionExA [GetVersionExW] -ParamCount=0 +SourceModule=kernel32.api @=GetVersionExW [GetVolumeInformationByHandleW] -ParamCount=0 +SourceModule=kernel32.api @=GetVolumeInformationByHandleW [GetVolumeInformationW] -ParamCount=0 +SourceModule=kernel32.api @=GetVolumeInformationW [GetVolumeNameForVolumeMountPointW] -ParamCount=0 +SourceModule=kernel32.api @=GetVolumeNameForVolumeMountPointW [GetVolumePathNamesForVolumeNameW] -ParamCount=0 +SourceModule=kernel32.api @=GetVolumePathNamesForVolumeNameW [GetVolumePathNameW] -ParamCount=0 +SourceModule=kernel32.api @=GetVolumePathNameW [GetWindowsDirectoryA] -ParamCount=0 +SourceModule=kernel32.api @=GetWindowsDirectoryA [GetWindowsDirectoryW] -ParamCount=0 +SourceModule=kernel32.api @=GetWindowsDirectoryW [GetWriteWatch] -ParamCount=0 +SourceModule=kernel32.api @=GetWriteWatch [GlobalAlloc] -ParamCount=0 +SourceModule=kernel32.api @=GlobalAlloc [GlobalFree] -ParamCount=0 +SourceModule=kernel32.api @=GlobalFree [GlobalMemoryStatusEx] -ParamCount=0 +SourceModule=kernel32.api @=GlobalMemoryStatusEx [HeapAlloc] -ParamCount=0 +SourceModule=kernel32.api @=HeapAlloc [HeapCompact] -ParamCount=0 +SourceModule=kernel32.api @=HeapCompact [HeapCreate] -ParamCount=0 +SourceModule=kernel32.api @=HeapCreate [HeapDestroy] -ParamCount=0 +SourceModule=kernel32.api @=HeapDestroy [HeapFree] -ParamCount=0 +SourceModule=kernel32.api @=HeapFree [HeapLock] -ParamCount=0 +SourceModule=kernel32.api @=HeapLock [HeapQueryInformation] -ParamCount=0 +SourceModule=kernel32.api @=HeapQueryInformation [HeapReAlloc] -ParamCount=0 +SourceModule=kernel32.api @=HeapReAlloc [HeapSetInformation] -ParamCount=0 +SourceModule=kernel32.api @=HeapSetInformation [HeapSize] -ParamCount=0 +SourceModule=kernel32.api @=HeapSize [HeapSummary] -ParamCount=0 +SourceModule=kernel32.api @=HeapSummary [HeapUnlock] -ParamCount=0 +SourceModule=kernel32.api @=HeapUnlock [HeapValidate] -ParamCount=0 +SourceModule=kernel32.api @=HeapValidate [HeapWalk] -ParamCount=0 +SourceModule=kernel32.api @=HeapWalk [InitializeConditionVariable] -ParamCount=0 +SourceModule=kernel32.api @=InitializeConditionVariable [InitializeCriticalSection] -ParamCount=0 +SourceModule=kernel32.api @=InitializeCriticalSection [InitializeCriticalSectionAndSpinCount] -ParamCount=0 +SourceModule=kernel32.api @=InitializeCriticalSectionAndSpinCount [InitializeCriticalSectionEx] -ParamCount=0 +SourceModule=kernel32.api @=InitializeCriticalSectionEx [InitializeProcThreadAttributeList] -ParamCount=0 +SourceModule=kernel32.api @=InitializeProcThreadAttributeList [InitializeSListHead] -ParamCount=0 +SourceModule=kernel32.api @=InitializeSListHead [InitializeSRWLock] -ParamCount=0 +SourceModule=kernel32.api @=InitializeSRWLock [InitializeSynchronizationBarrier] -ParamCount=0 +SourceModule=kernel32.api @=InitializeSynchronizationBarrier [InitOnceBeginInitialize] -ParamCount=0 +SourceModule=kernel32.api @=InitOnceBeginInitialize [InitOnceComplete] -ParamCount=0 +SourceModule=kernel32.api @=InitOnceComplete [InitOnceExecuteOnce] -ParamCount=0 +SourceModule=kernel32.api @=InitOnceExecuteOnce [InitOnceInitialize] -ParamCount=0 +SourceModule=kernel32.api @=InitOnceInitialize [InterlockedCompareExchange] -ParamCount=0 +SourceModule=kernel32.api @=InterlockedCompareExchange [InterlockedCompareExchange64] -ParamCount=0 +SourceModule=kernel32.api @=InterlockedCompareExchange64 [InterlockedDecrement] -ParamCount=0 +SourceModule=kernel32.api @=InterlockedDecrement [InterlockedExchange] -ParamCount=0 +SourceModule=kernel32.api @=InterlockedExchange [InterlockedExchangeAdd] -ParamCount=0 +SourceModule=kernel32.api @=InterlockedExchangeAdd [InterlockedFlushSList] -ParamCount=0 +SourceModule=kernel32.api @=InterlockedFlushSList [InterlockedIncrement] -ParamCount=0 +SourceModule=kernel32.api @=InterlockedIncrement [InterlockedPopEntrySList] -ParamCount=0 +SourceModule=kernel32.api @=InterlockedPopEntrySList [InterlockedPushEntrySList] -ParamCount=0 +SourceModule=kernel32.api @=InterlockedPushEntrySList [InterlockedPushListSList] -ParamCount=0 +SourceModule=kernel32.api @=InterlockedPushListSList [InterlockedPushListSListEx] -ParamCount=0 +SourceModule=kernel32.api @=InterlockedPushListSListEx [IsDBCSLeadByte] -ParamCount=0 +SourceModule=kernel32.api @=IsDBCSLeadByte [IsDBCSLeadByteEx] -ParamCount=0 +SourceModule=kernel32.api @=IsDBCSLeadByteEx [IsDebuggerPresent] -ParamCount=0 +SourceModule=kernel32.api @=IsDebuggerPresent [IsNLSDefinedString] -ParamCount=0 +SourceModule=kernel32.api @=IsNLSDefinedString [IsProcessInJob] -ParamCount=0 +SourceModule=kernel32.api @=IsProcessInJob [IsProcessorFeaturePresent] -ParamCount=0 +SourceModule=kernel32.api @=IsProcessorFeaturePresent [IsThreadAFiber] -ParamCount=0 +SourceModule=kernel32.api @=IsThreadAFiber [IsThreadpoolTimerSet] -ParamCount=0 +SourceModule=kernel32.api @=IsThreadpoolTimerSet [IsValidCodePage] -ParamCount=0 +SourceModule=kernel32.api @=IsValidCodePage [IsValidLanguageGroup] -ParamCount=0 +SourceModule=kernel32.api @=IsValidLanguageGroup [IsValidLocale] -ParamCount=0 +SourceModule=kernel32.api @=IsValidLocale [IsValidLocaleName] -ParamCount=0 +SourceModule=kernel32.api @=IsValidLocaleName [IsValidNLSVersion] -ParamCount=0 +SourceModule=kernel32.api @=IsValidNLSVersion [IsWow64Process] -ParamCount=0 +SourceModule=kernel32.api @=IsWow64Process [K32EmptyWorkingSet] -ParamCount=0 +SourceModule=kernel32.api @=K32EmptyWorkingSet [K32EnumDeviceDrivers] -ParamCount=0 +SourceModule=kernel32.api @=K32EnumDeviceDrivers [K32EnumPageFilesA] -ParamCount=0 +SourceModule=kernel32.api @=K32EnumPageFilesA [K32EnumPageFilesW] -ParamCount=0 +SourceModule=kernel32.api @=K32EnumPageFilesW [K32EnumProcesses] -ParamCount=0 +SourceModule=kernel32.api @=K32EnumProcesses [K32EnumProcessModules] -ParamCount=0 +SourceModule=kernel32.api @=K32EnumProcessModules [K32EnumProcessModulesEx] -ParamCount=0 +SourceModule=kernel32.api @=K32EnumProcessModulesEx [K32GetDeviceDriverBaseNameA] -ParamCount=0 +SourceModule=kernel32.api @=K32GetDeviceDriverBaseNameA [K32GetDeviceDriverBaseNameW] -ParamCount=0 +SourceModule=kernel32.api @=K32GetDeviceDriverBaseNameW [K32GetDeviceDriverFileNameA] -ParamCount=0 +SourceModule=kernel32.api @=K32GetDeviceDriverFileNameA [K32GetDeviceDriverFileNameW] -ParamCount=0 +SourceModule=kernel32.api @=K32GetDeviceDriverFileNameW [K32GetMappedFileNameA] -ParamCount=0 +SourceModule=kernel32.api @=K32GetMappedFileNameA [K32GetMappedFileNameW] -ParamCount=0 +SourceModule=kernel32.api @=K32GetMappedFileNameW [K32GetModuleBaseNameA] -ParamCount=0 +SourceModule=kernel32.api @=K32GetModuleBaseNameA [K32GetModuleBaseNameW] -ParamCount=0 +SourceModule=kernel32.api @=K32GetModuleBaseNameW [K32GetModuleFileNameExA] -ParamCount=0 +SourceModule=kernel32.api @=K32GetModuleFileNameExA [K32GetModuleFileNameExW] -ParamCount=0 +SourceModule=kernel32.api @=K32GetModuleFileNameExW [K32GetModuleInformation] -ParamCount=0 +SourceModule=kernel32.api @=K32GetModuleInformation [K32GetPerformanceInfo] -ParamCount=0 +SourceModule=kernel32.api @=K32GetPerformanceInfo [K32GetProcessImageFileNameA] -ParamCount=0 +SourceModule=kernel32.api @=K32GetProcessImageFileNameA [K32GetProcessImageFileNameW] -ParamCount=0 +SourceModule=kernel32.api @=K32GetProcessImageFileNameW [K32GetProcessMemoryInfo] -ParamCount=0 +SourceModule=kernel32.api @=K32GetProcessMemoryInfo [K32GetWsChanges] -ParamCount=0 +SourceModule=kernel32.api @=K32GetWsChanges [K32GetWsChangesEx] -ParamCount=0 +SourceModule=kernel32.api @=K32GetWsChangesEx [K32InitializeProcessForWsWatch] -ParamCount=0 +SourceModule=kernel32.api @=K32InitializeProcessForWsWatch [K32QueryWorkingSet] -ParamCount=0 +SourceModule=kernel32.api @=K32QueryWorkingSet [K32QueryWorkingSetEx] -ParamCount=0 +SourceModule=kernel32.api @=K32QueryWorkingSetEx [LCIDToLocaleName] -ParamCount=0 +SourceModule=kernel32.api @=LCIDToLocaleName [LCMapStringA] -ParamCount=0 +SourceModule=kernel32.api @=LCMapStringA [LCMapStringEx] -ParamCount=0 +SourceModule=kernel32.api @=LCMapStringEx [LCMapStringW] -ParamCount=0 +SourceModule=kernel32.api @=LCMapStringW [LeaveCriticalSection] -ParamCount=0 +SourceModule=kernel32.api @=LeaveCriticalSection [LeaveCriticalSectionWhenCallbackReturns] -ParamCount=0 +SourceModule=kernel32.api @=LeaveCriticalSectionWhenCallbackReturns [LoadLibraryExA] -ParamCount=0 +SourceModule=kernel32.api @=LoadLibraryExA [LoadLibraryExW] -ParamCount=0 +SourceModule=kernel32.api @=LoadLibraryExW [LoadResource] -ParamCount=0 +SourceModule=kernel32.api @=LoadResource [LoadStringByReference] -ParamCount=0 +SourceModule=kernel32.api @=LoadStringByReference [LocalAlloc] -ParamCount=0 +SourceModule=kernel32.api @=LocalAlloc [LocaleNameToLCID] -ParamCount=0 +SourceModule=kernel32.api @=LocaleNameToLCID [LocalFileTimeToFileTime] -ParamCount=0 +SourceModule=kernel32.api @=LocalFileTimeToFileTime [LocalFree] -ParamCount=0 +SourceModule=kernel32.api @=LocalFree [LocalLock] -ParamCount=0 +SourceModule=kernel32.api @=LocalLock [LocalReAlloc] -ParamCount=0 +SourceModule=kernel32.api @=LocalReAlloc [LocalUnlock] -ParamCount=0 +SourceModule=kernel32.api @=LocalUnlock [LockFile] -ParamCount=0 +SourceModule=kernel32.api @=LockFile [LockFileEx] -ParamCount=0 +SourceModule=kernel32.api @=LockFileEx [LockResource] -ParamCount=0 +SourceModule=kernel32.api @=LockResource [lstrcmp] -ParamCount=0 +SourceModule=kernel32.api @=lstrcmp [lstrcmpA] -ParamCount=0 +SourceModule=kernel32.api @=lstrcmpA [lstrcmpi] -ParamCount=0 +SourceModule=kernel32.api @=lstrcmpi [lstrcmpiA] -ParamCount=0 +SourceModule=kernel32.api @=lstrcmpiA [lstrcmpiW] -ParamCount=0 +SourceModule=kernel32.api @=lstrcmpiW [lstrcmpW] -ParamCount=0 +SourceModule=kernel32.api @=lstrcmpW [lstrcpyn] -ParamCount=0 +SourceModule=kernel32.api @=lstrcpyn [lstrcpynA] -ParamCount=0 +SourceModule=kernel32.api @=lstrcpynA [lstrcpynW] -ParamCount=0 +SourceModule=kernel32.api @=lstrcpynW [lstrlen] -ParamCount=0 +SourceModule=kernel32.api @=lstrlen [lstrlenA] -ParamCount=0 +SourceModule=kernel32.api @=lstrlenA [lstrlenW] -ParamCount=0 +SourceModule=kernel32.api @=lstrlenW [MapViewOfFile] -ParamCount=0 +SourceModule=kernel32.api @=MapViewOfFile [MapViewOfFileEx] -ParamCount=0 +SourceModule=kernel32.api @=MapViewOfFileEx [MapViewOfFileExNuma] -ParamCount=0 +SourceModule=kernel32.api @=MapViewOfFileExNuma [MapViewOfFileFromApp] -ParamCount=0 +SourceModule=kernel32.api @=MapViewOfFileFromApp [MoveFileExW] -ParamCount=0 +SourceModule=kernel32.api @=MoveFileExW [MoveFileWithProgressW] -ParamCount=0 +SourceModule=kernel32.api @=MoveFileWithProgressW [MultiByteToWideChar] -ParamCount=0 +SourceModule=kernel32.api @=MultiByteToWideChar [NeedCurrentDirectoryForExePathA] -ParamCount=0 +SourceModule=kernel32.api @=NeedCurrentDirectoryForExePathA [NeedCurrentDirectoryForExePathW] -ParamCount=0 +SourceModule=kernel32.api @=NeedCurrentDirectoryForExePathW [OpenEventA] -ParamCount=0 +SourceModule=kernel32.api @=OpenEventA [OpenEventW] -ParamCount=0 +SourceModule=kernel32.api @=OpenEventW [OpenFileMappingW] -ParamCount=0 +SourceModule=kernel32.api @=OpenFileMappingW [OpenMutexW] -ParamCount=0 +SourceModule=kernel32.api @=OpenMutexW [OpenPrivateNamespaceW] -ParamCount=0 +SourceModule=kernel32.api @=OpenPrivateNamespaceW [OpenProcess] -ParamCount=0 +SourceModule=kernel32.api @=OpenProcess [OpenSemaphoreW] -ParamCount=0 +SourceModule=kernel32.api @=OpenSemaphoreW [OpenThread] -ParamCount=0 +SourceModule=kernel32.api @=OpenThread [OpenWaitableTimerW] -ParamCount=0 +SourceModule=kernel32.api @=OpenWaitableTimerW [OutputDebugStringA] -ParamCount=0 +SourceModule=kernel32.api @=OutputDebugStringA [OutputDebugStringW] -ParamCount=0 +SourceModule=kernel32.api @=OutputDebugStringW [PeekConsoleInputA] -ParamCount=0 +SourceModule=kernel32.api @=PeekConsoleInputA [PeekConsoleInputW] -ParamCount=0 +SourceModule=kernel32.api @=PeekConsoleInputW [PeekNamedPipe] -ParamCount=0 +SourceModule=kernel32.api @=PeekNamedPipe [PostQueuedCompletionStatus] -ParamCount=0 +SourceModule=kernel32.api @=PostQueuedCompletionStatus [PrefetchVirtualMemory] -ParamCount=0 +SourceModule=kernel32.api @=PrefetchVirtualMemory [ProcessIdToSessionId] -ParamCount=0 +SourceModule=kernel32.api @=ProcessIdToSessionId [PulseEvent] -ParamCount=0 +SourceModule=kernel32.api @=PulseEvent [PurgeComm] -ParamCount=0 +SourceModule=kernel32.api @=PurgeComm [QueryActCtxSettingsW] -ParamCount=0 +SourceModule=kernel32.api @=QueryActCtxSettingsW [QueryActCtxW] -ParamCount=0 +SourceModule=kernel32.api @=QueryActCtxW [QueryDepthSList] -ParamCount=0 +SourceModule=kernel32.api @=QueryDepthSList [QueryDosDeviceW] -ParamCount=0 +SourceModule=kernel32.api @=QueryDosDeviceW [QueryFullProcessImageNameA] -ParamCount=0 +SourceModule=kernel32.api @=QueryFullProcessImageNameA [QueryFullProcessImageNameW] -ParamCount=0 +SourceModule=kernel32.api @=QueryFullProcessImageNameW [QueryIdleProcessorCycleTime] -ParamCount=0 +SourceModule=kernel32.api @=QueryIdleProcessorCycleTime [QueryIdleProcessorCycleTimeEx] -ParamCount=0 +SourceModule=kernel32.api @=QueryIdleProcessorCycleTimeEx [QueryMemoryResourceNotification] -ParamCount=0 +SourceModule=kernel32.api @=QueryMemoryResourceNotification [QueryPerformanceCounter] -ParamCount=0 +SourceModule=kernel32.api @=QueryPerformanceCounter [QueryPerformanceFrequency] -ParamCount=0 +SourceModule=kernel32.api @=QueryPerformanceFrequency [QueryProcessAffinityUpdateMode] -ParamCount=0 +SourceModule=kernel32.api @=QueryProcessAffinityUpdateMode [QueryProcessCycleTime] -ParamCount=0 +SourceModule=kernel32.api @=QueryProcessCycleTime [QueryThreadCycleTime] -ParamCount=0 +SourceModule=kernel32.api @=QueryThreadCycleTime [QueryThreadpoolStackInformation] -ParamCount=0 +SourceModule=kernel32.api @=QueryThreadpoolStackInformation [QueryUnbiasedInterruptTime] -ParamCount=0 +SourceModule=kernel32.api @=QueryUnbiasedInterruptTime [QueueUserAPC] -ParamCount=0 +SourceModule=kernel32.api @=QueueUserAPC [QueueUserWorkItem] -ParamCount=0 +SourceModule=kernel32.api @=QueueUserWorkItem [ReadConsoleA] -ParamCount=0 +SourceModule=kernel32.api @=ReadConsoleA [ReadConsoleInputA] -ParamCount=0 +SourceModule=kernel32.api @=ReadConsoleInputA [ReadConsoleInputW] -ParamCount=0 +SourceModule=kernel32.api @=ReadConsoleInputW [ReadConsoleOutputA] -ParamCount=0 +SourceModule=kernel32.api @=ReadConsoleOutputA [ReadConsoleOutputAttribute] -ParamCount=0 +SourceModule=kernel32.api @=ReadConsoleOutputAttribute [ReadConsoleOutputCharacterA] -ParamCount=0 +SourceModule=kernel32.api @=ReadConsoleOutputCharacterA [ReadConsoleOutputCharacterW] -ParamCount=0 +SourceModule=kernel32.api @=ReadConsoleOutputCharacterW [ReadConsoleOutputW] -ParamCount=0 +SourceModule=kernel32.api @=ReadConsoleOutputW [ReadConsoleW] -ParamCount=0 +SourceModule=kernel32.api @=ReadConsoleW [ReadDirectoryChangesW] -ParamCount=0 +SourceModule=kernel32.api @=ReadDirectoryChangesW [ReadFile] -ParamCount=0 +SourceModule=kernel32.api @=ReadFile [ReadFileEx] -ParamCount=0 +SourceModule=kernel32.api @=ReadFileEx [ReadFileScatter] -ParamCount=0 +SourceModule=kernel32.api @=ReadFileScatter [ReadProcessMemory] -ParamCount=0 +SourceModule=kernel32.api @=ReadProcessMemory [ReleaseActCtx] -ParamCount=0 +SourceModule=kernel32.api @=ReleaseActCtx [ReleaseMutex] -ParamCount=0 +SourceModule=kernel32.api @=ReleaseMutex [ReleaseMutexWhenCallbackReturns] -ParamCount=0 +SourceModule=kernel32.api @=ReleaseMutexWhenCallbackReturns [ReleaseSemaphore] -ParamCount=0 +SourceModule=kernel32.api @=ReleaseSemaphore [ReleaseSemaphoreWhenCallbackReturns] -ParamCount=0 +SourceModule=kernel32.api @=ReleaseSemaphoreWhenCallbackReturns [ReleaseSRWLockExclusive] -ParamCount=0 +SourceModule=kernel32.api @=ReleaseSRWLockExclusive [ReleaseSRWLockShared] -ParamCount=0 +SourceModule=kernel32.api @=ReleaseSRWLockShared [RemoveDirectoryA] -ParamCount=0 +SourceModule=kernel32.api @=RemoveDirectoryA [RemoveDirectoryW] -ParamCount=0 +SourceModule=kernel32.api @=RemoveDirectoryW [RemoveDllDirectory] -ParamCount=0 +SourceModule=kernel32.api @=RemoveDllDirectory [RemoveVectoredContinueHandler] -ParamCount=0 +SourceModule=kernel32.api @=RemoveVectoredContinueHandler [RemoveVectoredExceptionHandler] -ParamCount=0 +SourceModule=kernel32.api @=RemoveVectoredExceptionHandler [ReOpenFile] -ParamCount=0 +SourceModule=kernel32.api @=ReOpenFile [ReplaceFileW] -ParamCount=0 +SourceModule=kernel32.api @=ReplaceFileW [ResetEvent] -ParamCount=0 +SourceModule=kernel32.api @=ResetEvent [ResetWriteWatch] -ParamCount=0 +SourceModule=kernel32.api @=ResetWriteWatch [ResolveDelayLoadedAPI] -ParamCount=0 +SourceModule=kernel32.api @=ResolveDelayLoadedAPI [ResolveDelayLoadsFromDll] -ParamCount=0 +SourceModule=kernel32.api @=ResolveDelayLoadsFromDll [ResolveLocaleName] -ParamCount=0 +SourceModule=kernel32.api @=ResolveLocaleName [ResumeThread] -ParamCount=0 +SourceModule=kernel32.api @=ResumeThread [ScrollConsoleScreenBufferA] -ParamCount=0 +SourceModule=kernel32.api @=ScrollConsoleScreenBufferA [ScrollConsoleScreenBufferW] -ParamCount=0 +SourceModule=kernel32.api @=ScrollConsoleScreenBufferW [SearchPathA] -ParamCount=0 +SourceModule=kernel32.api @=SearchPathA [SearchPathW] -ParamCount=0 +SourceModule=kernel32.api @=SearchPathW [SetCalendarInfoW] -ParamCount=0 +SourceModule=kernel32.api @=SetCalendarInfoW [SetCommBreak] -ParamCount=0 +SourceModule=kernel32.api @=SetCommBreak [SetCommConfig] -ParamCount=0 +SourceModule=kernel32.api @=SetCommConfig [SetCommMask] -ParamCount=0 +SourceModule=kernel32.api @=SetCommMask [SetCommState] -ParamCount=0 +SourceModule=kernel32.api @=SetCommState [SetCommTimeouts] -ParamCount=0 +SourceModule=kernel32.api @=SetCommTimeouts [SetComputerNameExW] -ParamCount=0 +SourceModule=kernel32.api @=SetComputerNameExW [SetConsoleActiveScreenBuffer] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleActiveScreenBuffer [SetConsoleCP] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleCP [SetConsoleCtrlHandler] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleCtrlHandler [SetConsoleCursorInfo] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleCursorInfo [SetConsoleCursorPosition] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleCursorPosition [SetConsoleInputExeNameA] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleInputExeNameA [SetConsoleInputExeNameW] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleInputExeNameW [SetConsoleMode] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleMode [SetConsoleOutputCP] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleOutputCP [SetConsoleScreenBufferInfoEx] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleScreenBufferInfoEx [SetConsoleScreenBufferSize] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleScreenBufferSize [SetConsoleTextAttribute] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleTextAttribute [SetConsoleTitleW] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleTitleW [SetConsoleWindowInfo] -ParamCount=0 +SourceModule=kernel32.api @=SetConsoleWindowInfo [SetCriticalSectionSpinCount] -ParamCount=0 +SourceModule=kernel32.api @=SetCriticalSectionSpinCount [SetCurrentDirectoryA] -ParamCount=0 +SourceModule=kernel32.api @=SetCurrentDirectoryA [SetCurrentDirectoryW] -ParamCount=0 +SourceModule=kernel32.api @=SetCurrentDirectoryW [SetDefaultDllDirectories] -ParamCount=0 +SourceModule=kernel32.api @=SetDefaultDllDirectories [SetDynamicTimeZoneInformation] -ParamCount=0 +SourceModule=kernel32.api @=SetDynamicTimeZoneInformation [SetEndOfFile] -ParamCount=0 +SourceModule=kernel32.api @=SetEndOfFile [SetEnvironmentVariableA] -ParamCount=0 +SourceModule=kernel32.api @=SetEnvironmentVariableA [SetEnvironmentVariableW] -ParamCount=0 +SourceModule=kernel32.api @=SetEnvironmentVariableW [SetErrorMode] -ParamCount=0 +SourceModule=kernel32.api @=SetErrorMode [SetEvent] -ParamCount=0 +SourceModule=kernel32.api @=SetEvent [SetEventWhenCallbackReturns] -ParamCount=0 +SourceModule=kernel32.api @=SetEventWhenCallbackReturns [SetFileApisToANSI] -ParamCount=0 +SourceModule=kernel32.api @=SetFileApisToANSI [SetFileApisToOEM] -ParamCount=0 +SourceModule=kernel32.api @=SetFileApisToOEM [SetFileAttributesA] -ParamCount=0 +SourceModule=kernel32.api @=SetFileAttributesA [SetFileAttributesW] -ParamCount=0 +SourceModule=kernel32.api @=SetFileAttributesW [SetFileInformationByHandle] -ParamCount=0 +SourceModule=kernel32.api @=SetFileInformationByHandle [SetFilePointer] -ParamCount=0 +SourceModule=kernel32.api @=SetFilePointer [SetFilePointerEx] -ParamCount=0 +SourceModule=kernel32.api @=SetFilePointerEx [SetFileTime] -ParamCount=0 +SourceModule=kernel32.api @=SetFileTime [SetFileValidData] -ParamCount=0 +SourceModule=kernel32.api @=SetFileValidData [SetHandleCount] -ParamCount=0 +SourceModule=kernel32.api @=SetHandleCount [SetHandleInformation] -ParamCount=0 +SourceModule=kernel32.api @=SetHandleInformation [SetLastError] -ParamCount=0 +SourceModule=kernel32.api @=SetLastError [SetLocaleInfoW] -ParamCount=0 +SourceModule=kernel32.api @=SetLocaleInfoW [SetLocalTime] -ParamCount=0 +SourceModule=kernel32.api @=SetLocalTime [SetNamedPipeHandleState] -ParamCount=0 +SourceModule=kernel32.api @=SetNamedPipeHandleState [SetPriorityClass] -ParamCount=0 +SourceModule=kernel32.api @=SetPriorityClass [SetProcessAffinityUpdateMode] -ParamCount=0 +SourceModule=kernel32.api @=SetProcessAffinityUpdateMode [SetProcessMitigationPolicy] -ParamCount=0 +SourceModule=kernel32.api @=SetProcessMitigationPolicy [SetProcessPreferredUILanguages] -ParamCount=0 +SourceModule=kernel32.api @=SetProcessPreferredUILanguages [SetProcessShutdownParameters] -ParamCount=0 +SourceModule=kernel32.api @=SetProcessShutdownParameters [SetProcessWorkingSetSizeEx] -ParamCount=0 +SourceModule=kernel32.api @=SetProcessWorkingSetSizeEx [SetStdHandle] -ParamCount=0 +SourceModule=kernel32.api @=SetStdHandle [SetStdHandleEx] -ParamCount=0 +SourceModule=kernel32.api @=SetStdHandleEx [SetSystemFileCacheSize] -ParamCount=0 +SourceModule=kernel32.api @=SetSystemFileCacheSize [SetSystemTime] -ParamCount=0 +SourceModule=kernel32.api @=SetSystemTime [SetThreadContext] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadContext [SetThreadGroupAffinity] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadGroupAffinity [SetThreadIdealProcessorEx] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadIdealProcessorEx [SetThreadLocale] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadLocale [SetThreadpoolStackInformation] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadpoolStackInformation [SetThreadpoolThreadMaximum] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadpoolThreadMaximum [SetThreadpoolThreadMinimum] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadpoolThreadMinimum [SetThreadpoolTimer] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadpoolTimer [SetThreadpoolWait] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadpoolWait [SetThreadPreferredUILanguages] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadPreferredUILanguages [SetThreadPriority] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadPriority [SetThreadPriorityBoost] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadPriorityBoost [SetThreadStackGuarantee] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadStackGuarantee [SetThreadUILanguage] -ParamCount=0 +SourceModule=kernel32.api @=SetThreadUILanguage [SetTimeZoneInformation] -ParamCount=0 +SourceModule=kernel32.api @=SetTimeZoneInformation [SetUnhandledExceptionFilter] -ParamCount=0 +SourceModule=kernel32.api @=SetUnhandledExceptionFilter [SetupComm] -ParamCount=0 +SourceModule=kernel32.api @=SetupComm [SetUserGeoID] -ParamCount=0 +SourceModule=kernel32.api @=SetUserGeoID [SetWaitableTimer] -ParamCount=0 +SourceModule=kernel32.api @=SetWaitableTimer [SetWaitableTimerEx] -ParamCount=0 +SourceModule=kernel32.api @=SetWaitableTimerEx [SignalObjectAndWait] -ParamCount=0 +SourceModule=kernel32.api @=SignalObjectAndWait [SizeofResource] -ParamCount=0 +SourceModule=kernel32.api @=SizeofResource [Sleep] -ParamCount=0 +SourceModule=kernel32.api @=Sleep [SleepConditionVariableCS] -ParamCount=0 +SourceModule=kernel32.api @=SleepConditionVariableCS [SleepConditionVariableSRW] -ParamCount=0 +SourceModule=kernel32.api @=SleepConditionVariableSRW [SleepEx] -ParamCount=0 +SourceModule=kernel32.api @=SleepEx [StartThreadpoolIo] -ParamCount=0 +SourceModule=kernel32.api @=StartThreadpoolIo [SubmitThreadpoolWork] -ParamCount=0 +SourceModule=kernel32.api @=SubmitThreadpoolWork [SuspendThread] -ParamCount=0 +SourceModule=kernel32.api @=SuspendThread [SwitchToThread] -ParamCount=0 +SourceModule=kernel32.api @=SwitchToThread [SystemTimeToFileTime] -ParamCount=0 +SourceModule=kernel32.api @=SystemTimeToFileTime [SystemTimeToTzSpecificLocalTime] -ParamCount=0 +SourceModule=kernel32.api @=SystemTimeToTzSpecificLocalTime [TerminateProcess] -ParamCount=0 +SourceModule=kernel32.api @=TerminateProcess [TerminateThread] -ParamCount=0 +SourceModule=kernel32.api @=TerminateThread [TlsAlloc] -ParamCount=0 +SourceModule=kernel32.api @=TlsAlloc [TlsFree] -ParamCount=0 +SourceModule=kernel32.api @=TlsFree [TlsGetValue] -ParamCount=0 +SourceModule=kernel32.api @=TlsGetValue [TlsSetValue] -ParamCount=0 +SourceModule=kernel32.api @=TlsSetValue [TransactNamedPipe] -ParamCount=0 +SourceModule=kernel32.api @=TransactNamedPipe [TransmitCommChar] -ParamCount=0 +SourceModule=kernel32.api @=TransmitCommChar [TryAcquireSRWLockExclusive] -ParamCount=0 +SourceModule=kernel32.api @=TryAcquireSRWLockExclusive [TryAcquireSRWLockShared] -ParamCount=0 +SourceModule=kernel32.api @=TryAcquireSRWLockShared [TryEnterCriticalSection] -ParamCount=0 +SourceModule=kernel32.api @=TryEnterCriticalSection [TrySubmitThreadpoolCallback] -ParamCount=0 +SourceModule=kernel32.api @=TrySubmitThreadpoolCallback [TzSpecificLocalTimeToSystemTime] -ParamCount=0 +SourceModule=kernel32.api @=TzSpecificLocalTimeToSystemTime [UnhandledExceptionFilter] -ParamCount=0 +SourceModule=kernel32.api @=UnhandledExceptionFilter [UnlockFile] -ParamCount=0 +SourceModule=kernel32.api @=UnlockFile [UnlockFileEx] -ParamCount=0 +SourceModule=kernel32.api @=UnlockFileEx [UnmapViewOfFile] -ParamCount=0 +SourceModule=kernel32.api @=UnmapViewOfFile [UnregisterWaitEx] -ParamCount=0 +SourceModule=kernel32.api @=UnregisterWaitEx [UpdateProcThreadAttribute] -ParamCount=0 +SourceModule=kernel32.api @=UpdateProcThreadAttribute [VerifyScripts] -ParamCount=0 +SourceModule=kernel32.api @=VerifyScripts [VerLanguageNameA] -ParamCount=0 +SourceModule=kernel32.api @=VerLanguageNameA [VerLanguageNameW] -ParamCount=0 +SourceModule=kernel32.api @=VerLanguageNameW [VerSetConditionMask] -ParamCount=0 +SourceModule=kernel32.api @=VerSetConditionMask [VirtualAlloc] -ParamCount=0 +SourceModule=kernel32.api @=VirtualAlloc [VirtualAllocEx] -ParamCount=0 +SourceModule=kernel32.api @=VirtualAllocEx [VirtualAllocExNuma] -ParamCount=0 +SourceModule=kernel32.api @=VirtualAllocExNuma [VirtualFree] -ParamCount=0 +SourceModule=kernel32.api @=VirtualFree [VirtualFreeEx] -ParamCount=0 +SourceModule=kernel32.api @=VirtualFreeEx [VirtualLock] -ParamCount=0 +SourceModule=kernel32.api @=VirtualLock [VirtualProtect] -ParamCount=0 +SourceModule=kernel32.api @=VirtualProtect [VirtualProtectEx] -ParamCount=0 +SourceModule=kernel32.api @=VirtualProtectEx [VirtualQuery] -ParamCount=0 +SourceModule=kernel32.api @=VirtualQuery [VirtualQueryEx] -ParamCount=0 +SourceModule=kernel32.api @=VirtualQueryEx [VirtualUnlock] -ParamCount=0 +SourceModule=kernel32.api @=VirtualUnlock [WaitCommEvent] -ParamCount=0 +SourceModule=kernel32.api @=WaitCommEvent [WaitForDebugEvent] -ParamCount=0 +SourceModule=kernel32.api @=WaitForDebugEvent [WaitForMultipleObjectsEx] -ParamCount=0 +SourceModule=kernel32.api @=WaitForMultipleObjectsEx [WaitForSingleObject] -ParamCount=0 +SourceModule=kernel32.api @=WaitForSingleObject [WaitForSingleObjectEx] -ParamCount=0 +SourceModule=kernel32.api @=WaitForSingleObjectEx [WaitForThreadpoolIoCallbacks] -ParamCount=0 +SourceModule=kernel32.api @=WaitForThreadpoolIoCallbacks [WaitForThreadpoolTimerCallbacks] -ParamCount=0 +SourceModule=kernel32.api @=WaitForThreadpoolTimerCallbacks [WaitForThreadpoolWaitCallbacks] -ParamCount=0 +SourceModule=kernel32.api @=WaitForThreadpoolWaitCallbacks [WaitForThreadpoolWorkCallbacks] -ParamCount=0 +SourceModule=kernel32.api @=WaitForThreadpoolWorkCallbacks [WaitNamedPipeW] -ParamCount=0 +SourceModule=kernel32.api @=WaitNamedPipeW [WaitOnAddress] -ParamCount=0 +SourceModule=kernel32.api @=WaitOnAddress [WakeAllConditionVariable] -ParamCount=0 +SourceModule=kernel32.api @=WakeAllConditionVariable [WakeByAddressAll] -ParamCount=0 +SourceModule=kernel32.api @=WakeByAddressAll [WakeByAddressSingle] -ParamCount=0 +SourceModule=kernel32.api @=WakeByAddressSingle [WakeConditionVariable] -ParamCount=0 +SourceModule=kernel32.api @=WakeConditionVariable [WerRegisterFile] -ParamCount=0 +SourceModule=kernel32.api @=WerRegisterFile [WerRegisterMemoryBlock] -ParamCount=0 +SourceModule=kernel32.api @=WerRegisterMemoryBlock [WerRegisterRuntimeExceptionModule] -ParamCount=0 +SourceModule=kernel32.api @=WerRegisterRuntimeExceptionModule [WerUnregisterFile] -ParamCount=0 +SourceModule=kernel32.api @=WerUnregisterFile [WerUnregisterMemoryBlock] -ParamCount=0 +SourceModule=kernel32.api @=WerUnregisterMemoryBlock [WerUnregisterRuntimeExceptionModule] -ParamCount=0 +SourceModule=kernel32.api @=WerUnregisterRuntimeExceptionModule [WideCharToMultiByte] -ParamCount=0 +SourceModule=kernel32.api @=WideCharToMultiByte [Wow64DisableWow64FsRedirection] -ParamCount=0 +SourceModule=kernel32.api @=Wow64DisableWow64FsRedirection [Wow64RevertWow64FsRedirection] -ParamCount=0 +SourceModule=kernel32.api @=Wow64RevertWow64FsRedirection [WriteConsoleA] -ParamCount=0 +SourceModule=kernel32.api @=WriteConsoleA [WriteConsoleInputA] -ParamCount=0 +SourceModule=kernel32.api @=WriteConsoleInputA [WriteConsoleInputW] -ParamCount=0 +SourceModule=kernel32.api @=WriteConsoleInputW [WriteConsoleOutputA] -ParamCount=0 +SourceModule=kernel32.api @=WriteConsoleOutputA [WriteConsoleOutputAttribute] -ParamCount=0 +SourceModule=kernel32.api @=WriteConsoleOutputAttribute [WriteConsoleOutputCharacterA] -ParamCount=0 +SourceModule=kernel32.api @=WriteConsoleOutputCharacterA [WriteConsoleOutputCharacterW] -ParamCount=0 +SourceModule=kernel32.api @=WriteConsoleOutputCharacterW [WriteConsoleOutputW] -ParamCount=0 +SourceModule=kernel32.api @=WriteConsoleOutputW [WriteConsoleW] -ParamCount=0 +SourceModule=kernel32.api @=WriteConsoleW [WriteFile] -ParamCount=0 +SourceModule=kernel32.api @=WriteFile [WriteFileEx] -ParamCount=0 +SourceModule=kernel32.api @=WriteFileEx [WriteFileGather] -ParamCount=0 +SourceModule=kernel32.api @=WriteFileGather [WriteProcessMemory] -ParamCount=0 +SourceModule=kernel32.api @=WriteProcessMemory [ZombifyActCtx] -ParamCount=0 +SourceModule=kernel32.api @=ZombifyActCtx [wgetmainargs] -ParamCount=0 +SourceModule=msvcrxx.api @=wgetmainargs [amsg_exit] -ParamCount=0 +SourceModule=msvcrxx.api @=amsg_exit [c_exit] -ParamCount=0 +SourceModule=msvcrxx.api @=c_exit [cexit] -ParamCount=0 +SourceModule=msvcrxx.api @=cexit [exit] -ParamCount=0 +SourceModule=msvcrxx.api @=exit [initterm] -ParamCount=0 +SourceModule=msvcrxx.api @=initterm [initterm_e] -ParamCount=0 +SourceModule=msvcrxx.api @=initterm_e [onexit] -ParamCount=0 +SourceModule=msvcrxx.api @=onexit [purecall] -ParamCount=0 +SourceModule=msvcrxx.api @=purecall [time64] -ParamCount=0 +SourceModule=msvcrxx.api @=time64 [atexit] -ParamCount=0 +SourceModule=msvcrxx.api @=atexit [time] -ParamCount=0 +SourceModule=msvcrxx.api @=time [wprintf] -ParamCount=0 +SourceModule=msvcrxx.api @=wprintf [IdnToAscii] -ParamCount=0 +SourceModule=normaliz.api @=IdnToAscii [IdnToNameprepUnicode] -ParamCount=0 +SourceModule=normaliz.api @=IdnToNameprepUnicode [IdnToUnicode] -ParamCount=0 +SourceModule=normaliz.api @=IdnToUnicode [IsNormalizedString] -ParamCount=0 +SourceModule=normaliz.api @=IsNormalizedString [NormalizeString] -ParamCount=0 +SourceModule=normaliz.api @=NormalizeString [DsBindWithSpnExW] -ParamCount=0 +SourceModule=ntdsapi.api @=DsBindWithSpnExW [DsCrackNamesW] -ParamCount=0 +SourceModule=ntdsapi.api @=DsCrackNamesW [DsFreeDomainControllerInfoW] -ParamCount=0 +SourceModule=ntdsapi.api @=DsFreeDomainControllerInfoW [DsFreeNameResultW] -ParamCount=0 +SourceModule=ntdsapi.api @=DsFreeNameResultW [DsFreePasswordCredentials] -ParamCount=0 +SourceModule=ntdsapi.api @=DsFreePasswordCredentials [DsGetDomainControllerInfoW] -ParamCount=0 +SourceModule=ntdsapi.api @=DsGetDomainControllerInfoW [DsMakePasswordCredentialsW] -ParamCount=0 +SourceModule=ntdsapi.api @=DsMakePasswordCredentialsW [DsUnBindW] -ParamCount=0 +SourceModule=ntdsapi.api @=DsUnBindW [EmptyWorkingSet] -ParamCount=0 +SourceModule=psapi.api @=EmptyWorkingSet [EnumDeviceDrivers] -ParamCount=0 +SourceModule=psapi.api @=EnumDeviceDrivers [EnumPageFilesA] -ParamCount=0 +SourceModule=psapi.api @=EnumPageFilesA [EnumPageFilesW] -ParamCount=0 +SourceModule=psapi.api @=EnumPageFilesW [EnumProcesses] -ParamCount=0 +SourceModule=psapi.api @=EnumProcesses [EnumProcessModules] -ParamCount=0 +SourceModule=psapi.api @=EnumProcessModules [EnumProcessModulesEx] -ParamCount=0 +SourceModule=psapi.api @=EnumProcessModulesEx [GetDeviceDriverBaseNameA] -ParamCount=0 +SourceModule=psapi.api @=GetDeviceDriverBaseNameA [GetDeviceDriverBaseNameW] -ParamCount=0 +SourceModule=psapi.api @=GetDeviceDriverBaseNameW [GetDeviceDriverFileNameA] -ParamCount=0 +SourceModule=psapi.api @=GetDeviceDriverFileNameA [GetDeviceDriverFileNameW] -ParamCount=0 +SourceModule=psapi.api @=GetDeviceDriverFileNameW [GetMappedFileNameA] -ParamCount=0 +SourceModule=psapi.api @=GetMappedFileNameA [GetMappedFileNameW] -ParamCount=0 +SourceModule=psapi.api @=GetMappedFileNameW [GetModuleBaseNameA] -ParamCount=0 +SourceModule=psapi.api @=GetModuleBaseNameA [GetModuleBaseNameW] -ParamCount=0 +SourceModule=psapi.api @=GetModuleBaseNameW [GetModuleFileNameExA] -ParamCount=0 +SourceModule=psapi.api @=GetModuleFileNameExA [GetModuleFileNameExW] -ParamCount=0 +SourceModule=psapi.api @=GetModuleFileNameExW [GetModuleInformation] -ParamCount=0 +SourceModule=psapi.api @=GetModuleInformation [GetPerformanceInfo] -ParamCount=0 +SourceModule=psapi.api @=GetPerformanceInfo [GetProcessImageFileNameA] -ParamCount=0 +SourceModule=psapi.api @=GetProcessImageFileNameA [GetProcessImageFileNameW] -ParamCount=0 +SourceModule=psapi.api @=GetProcessImageFileNameW [GetProcessMemoryInfo] -ParamCount=0 +SourceModule=psapi.api @=GetProcessMemoryInfo [GetWsChanges] -ParamCount=0 +SourceModule=psapi.api @=GetWsChanges [GetWsChangesEx] -ParamCount=0 +SourceModule=psapi.api @=GetWsChangesEx [InitializeProcessForWsWatch] -ParamCount=0 +SourceModule=psapi.api @=InitializeProcessForWsWatch [QueryWorkingSet] -ParamCount=0 +SourceModule=psapi.api @=QueryWorkingSet [QueryWorkingSetEx] -ParamCount=0 +SourceModule=psapi.api @=QueryWorkingSetEx [PathCleanupSpec] -ParamCount=0 +SourceModule=shell32.api @=PathCleanupSpec [PathIsExe] -ParamCount=0 +SourceModule=shell32.api @=PathIsExe [SHCoCreateInstance] -ParamCount=0 +SourceModule=shell32.api @=SHCoCreateInstance [SHCreateDirectoryExW] -ParamCount=0 +SourceModule=shell32.api @=SHCreateDirectoryExW [SHGetDesktopFolder] -ParamCount=0 +SourceModule=shell32.api @=SHGetDesktopFolder [SHGetFileInfoW] -ParamCount=0 +SourceModule=shell32.api @=SHGetFileInfoW [SHGetFolderLocation] -ParamCount=0 +SourceModule=shell32.api @=SHGetFolderLocation [SHGetFolderPathA] -ParamCount=0 +SourceModule=shell32.api @=SHGetFolderPathA [SHGetFolderPathAndSubDirW] -ParamCount=0 +SourceModule=shell32.api @=SHGetFolderPathAndSubDirW [SHGetFolderPathW] -ParamCount=0 +SourceModule=shell32.api @=SHGetFolderPathW [SHGetInstanceExplorer] -ParamCount=0 +SourceModule=shell32.api @=SHGetInstanceExplorer [SHGetKnownFolderPath] -ParamCount=0 +SourceModule=shell32.api @=SHGetKnownFolderPath [SHGetSpecialFolderPathA] -ParamCount=0 +SourceModule=shell32.api @=SHGetSpecialFolderPathA [SHGetSpecialFolderPathW] -ParamCount=0 +SourceModule=shell32.api @=SHGetSpecialFolderPathW [SHSetKnownFolderPath] -ParamCount=0 +SourceModule=shell32.api @=SHSetKnownFolderPath [ChrCmpIA] -ParamCount=0 +SourceModule=shlwapi.api @=ChrCmpIA [ChrCmpIW] -ParamCount=0 +SourceModule=shlwapi.api @=ChrCmpIW [GetAcceptLanguagesA] -ParamCount=0 +SourceModule=shlwapi.api @=GetAcceptLanguagesA [GetAcceptLanguagesW] -ParamCount=0 +SourceModule=shlwapi.api @=GetAcceptLanguagesW [HashData] -ParamCount=0 +SourceModule=shlwapi.api @=HashData [IsCharSpaceA] -ParamCount=0 +SourceModule=shlwapi.api @=IsCharSpaceA [IsCharSpaceW] -ParamCount=0 +SourceModule=shlwapi.api @=IsCharSpaceW [IsInternetESCEnabled] -ParamCount=0 +SourceModule=shlwapi.api @=IsInternetESCEnabled [ParseURLA] -ParamCount=0 +SourceModule=shlwapi.api @=ParseURLA [ParseURLW] -ParamCount=0 +SourceModule=shlwapi.api @=ParseURLW [PathAddBackslashA] -ParamCount=0 +SourceModule=shlwapi.api @=PathAddBackslashA [PathAddBackslashW] -ParamCount=0 +SourceModule=shlwapi.api @=PathAddBackslashW [PathAddExtensionA] -ParamCount=0 +SourceModule=shlwapi.api @=PathAddExtensionA [PathAddExtensionW] -ParamCount=0 +SourceModule=shlwapi.api @=PathAddExtensionW [PathAppendA] -ParamCount=0 +SourceModule=shlwapi.api @=PathAppendA [PathAppendW] -ParamCount=0 +SourceModule=shlwapi.api @=PathAppendW [PathCanonicalizeA] -ParamCount=0 +SourceModule=shlwapi.api @=PathCanonicalizeA [PathCanonicalizeW] -ParamCount=0 +SourceModule=shlwapi.api @=PathCanonicalizeW [PathCombineA] -ParamCount=0 +SourceModule=shlwapi.api @=PathCombineA [PathCombineW] -ParamCount=0 +SourceModule=shlwapi.api @=PathCombineW [PathCommonPrefixA] -ParamCount=0 +SourceModule=shlwapi.api @=PathCommonPrefixA [PathCommonPrefixW] -ParamCount=0 +SourceModule=shlwapi.api @=PathCommonPrefixW [PathCreateFromUrlA] -ParamCount=0 +SourceModule=shlwapi.api @=PathCreateFromUrlA [PathCreateFromUrlAlloc] -ParamCount=0 +SourceModule=shlwapi.api @=PathCreateFromUrlAlloc [PathCreateFromUrlW] -ParamCount=0 +SourceModule=shlwapi.api @=PathCreateFromUrlW [PathFileExistsA] -ParamCount=0 +SourceModule=shlwapi.api @=PathFileExistsA [PathFileExistsW] -ParamCount=0 +SourceModule=shlwapi.api @=PathFileExistsW [PathFindExtensionA] -ParamCount=0 +SourceModule=shlwapi.api @=PathFindExtensionA [PathFindExtensionW] -ParamCount=0 +SourceModule=shlwapi.api @=PathFindExtensionW [PathFindFileNameA] -ParamCount=0 +SourceModule=shlwapi.api @=PathFindFileNameA [PathFindFileNameW] -ParamCount=0 +SourceModule=shlwapi.api @=PathFindFileNameW [PathFindNextComponentA] -ParamCount=0 +SourceModule=shlwapi.api @=PathFindNextComponentA [PathFindNextComponentW] -ParamCount=0 +SourceModule=shlwapi.api @=PathFindNextComponentW [PathGetArgsA] -ParamCount=0 +SourceModule=shlwapi.api @=PathGetArgsA [PathGetArgsW] -ParamCount=0 +SourceModule=shlwapi.api @=PathGetArgsW [PathGetCharTypeA] -ParamCount=0 +SourceModule=shlwapi.api @=PathGetCharTypeA [PathGetCharTypeW] -ParamCount=0 +SourceModule=shlwapi.api @=PathGetCharTypeW [PathGetDriveNumberA] -ParamCount=0 +SourceModule=shlwapi.api @=PathGetDriveNumberA [PathGetDriveNumberW] -ParamCount=0 +SourceModule=shlwapi.api @=PathGetDriveNumberW [PathIsFileSpecA] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsFileSpecA [PathIsFileSpecW] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsFileSpecW [PathIsLFNFileSpecA] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsLFNFileSpecA [PathIsLFNFileSpecW] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsLFNFileSpecW [PathIsPrefixA] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsPrefixA [PathIsPrefixW] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsPrefixW [PathIsRelativeA] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsRelativeA [PathIsRelativeW] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsRelativeW [PathIsRootA] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsRootA [PathIsRootW] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsRootW [PathIsSameRootA] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsSameRootA [PathIsSameRootW] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsSameRootW [PathIsUNCA] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsUNCA [PathIsUNCServerA] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsUNCServerA [PathIsUNCServerShareA] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsUNCServerShareA [PathIsUNCServerShareW] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsUNCServerShareW [PathIsUNCServerW] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsUNCServerW [PathIsUNCW] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsUNCW [PathIsURLA] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsURLA [PathIsURLW] -ParamCount=0 +SourceModule=shlwapi.api @=PathIsURLW [PathMatchSpecA] -ParamCount=0 +SourceModule=shlwapi.api @=PathMatchSpecA [PathMatchSpecExA] -ParamCount=0 +SourceModule=shlwapi.api @=PathMatchSpecExA [PathMatchSpecExW] -ParamCount=0 +SourceModule=shlwapi.api @=PathMatchSpecExW [PathMatchSpecW] -ParamCount=0 +SourceModule=shlwapi.api @=PathMatchSpecW [PathParseIconLocationA] -ParamCount=0 +SourceModule=shlwapi.api @=PathParseIconLocationA [PathParseIconLocationW] -ParamCount=0 +SourceModule=shlwapi.api @=PathParseIconLocationW [PathQuoteSpacesA] -ParamCount=0 +SourceModule=shlwapi.api @=PathQuoteSpacesA [PathQuoteSpacesW] -ParamCount=0 +SourceModule=shlwapi.api @=PathQuoteSpacesW [PathRelativePathToA] -ParamCount=0 +SourceModule=shlwapi.api @=PathRelativePathToA [PathRelativePathToW] -ParamCount=0 +SourceModule=shlwapi.api @=PathRelativePathToW [PathRemoveBackslashA] -ParamCount=0 +SourceModule=shlwapi.api @=PathRemoveBackslashA [PathRemoveBackslashW] -ParamCount=0 +SourceModule=shlwapi.api @=PathRemoveBackslashW [PathRemoveBlanksA] -ParamCount=0 +SourceModule=shlwapi.api @=PathRemoveBlanksA [PathRemoveBlanksW] -ParamCount=0 +SourceModule=shlwapi.api @=PathRemoveBlanksW [PathRemoveExtensionA] -ParamCount=0 +SourceModule=shlwapi.api @=PathRemoveExtensionA [PathRemoveExtensionW] -ParamCount=0 +SourceModule=shlwapi.api @=PathRemoveExtensionW [PathRemoveFileSpecA] -ParamCount=0 +SourceModule=shlwapi.api @=PathRemoveFileSpecA [PathRemoveFileSpecW] -ParamCount=0 +SourceModule=shlwapi.api @=PathRemoveFileSpecW [PathRenameExtensionA] -ParamCount=0 +SourceModule=shlwapi.api @=PathRenameExtensionA [PathRenameExtensionW] -ParamCount=0 +SourceModule=shlwapi.api @=PathRenameExtensionW [PathSearchAndQualifyA] -ParamCount=0 +SourceModule=shlwapi.api @=PathSearchAndQualifyA [PathSearchAndQualifyW] -ParamCount=0 +SourceModule=shlwapi.api @=PathSearchAndQualifyW [PathSkipRootA] -ParamCount=0 +SourceModule=shlwapi.api @=PathSkipRootA [PathSkipRootW] -ParamCount=0 +SourceModule=shlwapi.api @=PathSkipRootW [PathStripPathA] -ParamCount=0 +SourceModule=shlwapi.api @=PathStripPathA [PathStripPathW] -ParamCount=0 +SourceModule=shlwapi.api @=PathStripPathW [PathStripToRootA] -ParamCount=0 +SourceModule=shlwapi.api @=PathStripToRootA [PathStripToRootW] -ParamCount=0 +SourceModule=shlwapi.api @=PathStripToRootW [PathUnExpandEnvStringsA] -ParamCount=0 +SourceModule=shlwapi.api @=PathUnExpandEnvStringsA [PathUnExpandEnvStringsW] -ParamCount=0 +SourceModule=shlwapi.api @=PathUnExpandEnvStringsW [PathUnquoteSpacesA] -ParamCount=0 +SourceModule=shlwapi.api @=PathUnquoteSpacesA [PathUnquoteSpacesW] -ParamCount=0 +SourceModule=shlwapi.api @=PathUnquoteSpacesW [QISearch] -ParamCount=0 +SourceModule=shlwapi.api @=QISearch [SHLoadIndirectString] -ParamCount=0 +SourceModule=shlwapi.api @=SHLoadIndirectString [SHRegCloseUSKey] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegCloseUSKey [SHRegCreateUSKeyA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegCreateUSKeyA [SHRegCreateUSKeyW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegCreateUSKeyW [SHRegDeleteEmptyUSKeyA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegDeleteEmptyUSKeyA [SHRegDeleteEmptyUSKeyW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegDeleteEmptyUSKeyW [SHRegDeleteUSValueA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegDeleteUSValueA [SHRegDeleteUSValueW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegDeleteUSValueW [SHRegEnumUSKeyA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegEnumUSKeyA [SHRegEnumUSKeyW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegEnumUSKeyW [SHRegEnumUSValueA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegEnumUSValueA [SHRegEnumUSValueW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegEnumUSValueW [SHRegGetBoolUSValueA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegGetBoolUSValueA [SHRegGetBoolUSValueW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegGetBoolUSValueW [SHRegGetUSValueA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegGetUSValueA [SHRegGetUSValueW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegGetUSValueW [SHRegOpenUSKeyA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegOpenUSKeyA [SHRegOpenUSKeyW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegOpenUSKeyW [SHRegQueryInfoUSKeyA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegQueryInfoUSKeyA [SHRegQueryInfoUSKeyW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegQueryInfoUSKeyW [SHRegQueryUSValueA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegQueryUSValueA [SHRegQueryUSValueW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegQueryUSValueW [SHRegSetUSValueA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegSetUSValueA [SHRegSetUSValueW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegSetUSValueW [SHRegWriteUSValueA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegWriteUSValueA [SHRegWriteUSValueW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegWriteUSValueW [StrCatBuffA] -ParamCount=0 +SourceModule=shlwapi.api @=StrCatBuffA [StrCatBuffW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCatBuffW [StrCatChainW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCatChainW [StrChrA] -ParamCount=0 +SourceModule=shlwapi.api @=StrChrA [StrChrIA] -ParamCount=0 +SourceModule=shlwapi.api @=StrChrIA [StrChrIW] -ParamCount=0 +SourceModule=shlwapi.api @=StrChrIW [StrChrNIW] -ParamCount=0 +SourceModule=shlwapi.api @=StrChrNIW [StrChrNW] -ParamCount=0 +SourceModule=shlwapi.api @=StrChrNW [StrChrW] -ParamCount=0 +SourceModule=shlwapi.api @=StrChrW [StrCmpCA] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpCA [StrCmpCW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpCW [StrCmpICA] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpICA [StrCmpICW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpICW [StrCmpLogicalW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpLogicalW [StrCmpIW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpIW [StrCmpNA] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpNA [StrCmpNCA] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpNCA [StrCmpNCW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpNCW [StrCmpNIA] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpNIA [StrCmpNICA] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpNICA [StrCmpNICW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpNICW [StrCmpNIW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpNIW [StrCmpNW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpNW [StrCmpW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCmpW [StrCpyNW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCpyNW [StrCSpnA] -ParamCount=0 +SourceModule=shlwapi.api @=StrCSpnA [StrCSpnIA] -ParamCount=0 +SourceModule=shlwapi.api @=StrCSpnIA [StrCSpnIW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCSpnIW [StrCSpnW] -ParamCount=0 +SourceModule=shlwapi.api @=StrCSpnW [StrDupA] -ParamCount=0 +SourceModule=shlwapi.api @=StrDupA [StrDupW] -ParamCount=0 +SourceModule=shlwapi.api @=StrDupW [StrIsIntlEqualA] -ParamCount=0 +SourceModule=shlwapi.api @=StrIsIntlEqualA [StrIsIntlEqualW] -ParamCount=0 +SourceModule=shlwapi.api @=StrIsIntlEqualW [StrPBrkA] -ParamCount=0 +SourceModule=shlwapi.api @=StrPBrkA [StrPBrkW] -ParamCount=0 +SourceModule=shlwapi.api @=StrPBrkW [StrRChrA] -ParamCount=0 +SourceModule=shlwapi.api @=StrRChrA [StrRChrIA] -ParamCount=0 +SourceModule=shlwapi.api @=StrRChrIA [StrRChrIW] -ParamCount=0 +SourceModule=shlwapi.api @=StrRChrIW [StrRChrW] -ParamCount=0 +SourceModule=shlwapi.api @=StrRChrW [StrRStrIA] -ParamCount=0 +SourceModule=shlwapi.api @=StrRStrIA [StrRStrIW] -ParamCount=0 +SourceModule=shlwapi.api @=StrRStrIW [StrSpnA] -ParamCount=0 +SourceModule=shlwapi.api @=StrSpnA [StrSpnW] -ParamCount=0 +SourceModule=shlwapi.api @=StrSpnW [StrStrA] -ParamCount=0 +SourceModule=shlwapi.api @=StrStrA [StrStrIA] -ParamCount=0 +SourceModule=shlwapi.api @=StrStrIA [StrStrIW] -ParamCount=0 +SourceModule=shlwapi.api @=StrStrIW [StrStrNIW] -ParamCount=0 +SourceModule=shlwapi.api @=StrStrNIW [StrStrNW] -ParamCount=0 +SourceModule=shlwapi.api @=StrStrNW [StrStrW] -ParamCount=0 +SourceModule=shlwapi.api @=StrStrW [StrToInt64ExA] -ParamCount=0 +SourceModule=shlwapi.api @=StrToInt64ExA [StrToInt64ExW] -ParamCount=0 +SourceModule=shlwapi.api @=StrToInt64ExW [StrToIntA] -ParamCount=0 +SourceModule=shlwapi.api @=StrToIntA [StrToIntExA] -ParamCount=0 +SourceModule=shlwapi.api @=StrToIntExA [StrToIntExW] -ParamCount=0 +SourceModule=shlwapi.api @=StrToIntExW [StrToIntW] -ParamCount=0 +SourceModule=shlwapi.api @=StrToIntW [StrTrimA] -ParamCount=0 +SourceModule=shlwapi.api @=StrTrimA [StrTrimW] -ParamCount=0 +SourceModule=shlwapi.api @=StrTrimW [UrlApplySchemeA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlApplySchemeA [UrlApplySchemeW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlApplySchemeW [UrlCanonicalizeA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlCanonicalizeA [UrlCanonicalizeW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlCanonicalizeW [UrlCombineA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlCombineA [UrlCombineW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlCombineW [UrlCompareA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlCompareA [UrlCompareW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlCompareW [UrlCreateFromPathA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlCreateFromPathA [UrlCreateFromPathW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlCreateFromPathW [UrlEscapeA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlEscapeA [UrlEscapeW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlEscapeW [UrlFixupW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlFixupW [UrlGetLocationA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlGetLocationA [UrlGetLocationW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlGetLocationW [UrlGetPartA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlGetPartA [UrlGetPartW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlGetPartW [UrlHashA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlHashA [UrlHashW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlHashW [UrlIsA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlIsA [UrlIsNoHistoryA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlIsNoHistoryA [UrlIsNoHistoryW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlIsNoHistoryW [UrlIsOpaqueA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlIsOpaqueA [UrlIsOpaqueW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlIsOpaqueW [UrlIsW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlIsW [UrlUnescapeA] -ParamCount=0 +SourceModule=shlwapi.api @=UrlUnescapeA [UrlUnescapeW] -ParamCount=0 +SourceModule=shlwapi.api @=UrlUnescapeW [CharLowerA] -ParamCount=0 +SourceModule=user32.api @=CharLowerA [CharLowerBuffA] -ParamCount=0 +SourceModule=user32.api @=CharLowerBuffA [CharLowerBuffW] -ParamCount=0 +SourceModule=user32.api @=CharLowerBuffW [CharLowerW] -ParamCount=0 +SourceModule=user32.api @=CharLowerW [CharNextA] -ParamCount=0 +SourceModule=user32.api @=CharNextA [CharNextExA] -ParamCount=0 +SourceModule=user32.api @=CharNextExA [CharNextW] -ParamCount=0 +SourceModule=user32.api @=CharNextW [CharPrevA] -ParamCount=0 +SourceModule=user32.api @=CharPrevA [CharPrevExA] -ParamCount=0 +SourceModule=user32.api @=CharPrevExA [CharPrevW] -ParamCount=0 +SourceModule=user32.api @=CharPrevW [CharUpperA] -ParamCount=0 +SourceModule=user32.api @=CharUpperA [CharUpperBuffA] -ParamCount=0 +SourceModule=user32.api @=CharUpperBuffA [CharUpperBuffW] -ParamCount=0 +SourceModule=user32.api @=CharUpperBuffW [CharUpperW] -ParamCount=0 +SourceModule=user32.api @=CharUpperW [IsCharAlphaA] -ParamCount=0 +SourceModule=user32.api @=IsCharAlphaA [IsCharAlphaNumericA] -ParamCount=0 +SourceModule=user32.api @=IsCharAlphaNumericA [IsCharAlphaNumericW] -ParamCount=0 +SourceModule=user32.api @=IsCharAlphaNumericW [IsCharAlphaW] -ParamCount=0 +SourceModule=user32.api @=IsCharAlphaW [IsCharLowerA] -ParamCount=0 +SourceModule=user32.api @=IsCharLowerA [IsCharLowerW] -ParamCount=0 +SourceModule=user32.api @=IsCharLowerW [IsCharUpperA] -ParamCount=0 +SourceModule=user32.api @=IsCharUpperA [IsCharUpperW] -ParamCount=0 +SourceModule=user32.api @=IsCharUpperW [LoadStringA] -ParamCount=0 +SourceModule=user32.api @=LoadStringA [LoadStringW] -ParamCount=0 +SourceModule=user32.api @=LoadStringW [GetFileVersionInfoExW] -ParamCount=0 +SourceModule=version.api @=GetFileVersionInfoExW [GetFileVersionInfoSizeExW] -ParamCount=0 +SourceModule=version.api @=GetFileVersionInfoSizeExW [VerFindFileA] -ParamCount=0 +SourceModule=version.api @=VerFindFileA [VerFindFileW] -ParamCount=0 +SourceModule=version.api @=VerFindFileW [VerQueryValueA] -ParamCount=0 +SourceModule=version.api @=VerQueryValueA [VerQueryValueW] -ParamCount=0 +SourceModule=version.api @=VerQueryValueW [InternetTimeFromSystemTimeA] -ParamCount=0 +SourceModule=wininet.api @=InternetTimeFromSystemTimeA [InternetTimeFromSystemTimeW] -ParamCount=0 +SourceModule=wininet.api @=InternetTimeFromSystemTimeW [InternetTimeToSystemTimeA] -ParamCount=0 +SourceModule=wininet.api @=InternetTimeToSystemTimeA [InternetTimeToSystemTimeW] -ParamCount=0 +SourceModule=wininet.api @=InternetTimeToSystemTimeW diff --git a/apis_def/ntdll.api b/apis_def/ntdll.api index c8438cf..43f8197 100644 --- a/apis_def/ntdll.api +++ b/apis_def/ntdll.api @@ -6972,476 +6972,476 @@ ParamCount=1 Header=ntdll.h.api; @=RtlRunOnceInitialize [isascii] -ParamCount=0 +SourceModule=msvcrxx.api @=isascii [iscsym] -ParamCount=0 +SourceModule=msvcrxx.api @=iscsym [iscsymf] -ParamCount=0 +SourceModule=msvcrxx.api @=iscsymf [toascii] -ParamCount=0 +SourceModule=msvcrxx.api @=toascii [atoi64] -ParamCount=0 +SourceModule=msvcrxx.api @=atoi64 [i64toa] -ParamCount=0 +SourceModule=msvcrxx.api @=i64toa [i64toa_s] -ParamCount=0 +SourceModule=msvcrxx.api @=i64toa_s [i64tow] -ParamCount=0 +SourceModule=msvcrxx.api @=i64tow [i64tow_s] -ParamCount=0 +SourceModule=msvcrxx.api @=i64tow_s [itoa] -ParamCount=0 +SourceModule=msvcrxx.api @=itoa [itoa_s] -ParamCount=0 +SourceModule=msvcrxx.api @=itoa_s [itow] -ParamCount=0 +SourceModule=msvcrxx.api @=itow [itow_s] -ParamCount=0 +SourceModule=msvcrxx.api @=itow_s [lfind] -ParamCount=0 +SourceModule=msvcrxx.api @=lfind [ltoa] -ParamCount=0 +SourceModule=msvcrxx.api @=ltoa [ltoa_s] -ParamCount=0 +SourceModule=msvcrxx.api @=ltoa_s [ltow] -ParamCount=0 +SourceModule=msvcrxx.api @=ltow [ltow_s] -ParamCount=0 +SourceModule=msvcrxx.api @=ltow_s [makepath_s] -ParamCount=0 +SourceModule=msvcrxx.api @=makepath_s [memccpy] -ParamCount=0 +SourceModule=msvcrxx.api @=memccpy [memicmp] -ParamCount=0 +SourceModule=msvcrxx.api @=memicmp [snprintf] -ParamCount=0 +SourceModule=msvcrxx.api @=snprintf [snprintf_s] -ParamCount=0 +SourceModule=msvcrxx.api @=snprintf_s [snscanf_s] -ParamCount=0 +SourceModule=msvcrxx.api @=snscanf_s [snwprintf] -ParamCount=0 +SourceModule=msvcrxx.api @=snwprintf [snwprintf_s] -ParamCount=0 +SourceModule=msvcrxx.api @=snwprintf_s [snwscanf_s] -ParamCount=0 +SourceModule=msvcrxx.api @=snwscanf_s [splitpath] -ParamCount=0 +SourceModule=msvcrxx.api @=splitpath [splitpath_s] -ParamCount=0 +SourceModule=msvcrxx.api @=splitpath_s [strcmpi] -ParamCount=0 +SourceModule=msvcrxx.api @=strcmpi [stricmp] -ParamCount=0 +SourceModule=msvcrxx.api @=stricmp [strlwr] -ParamCount=0 +SourceModule=msvcrxx.api @=strlwr [strnicmp] -ParamCount=0 +SourceModule=msvcrxx.api @=strnicmp [strnset_s] -ParamCount=0 +SourceModule=msvcrxx.api @=strnset_s [strset_s] -ParamCount=0 +SourceModule=msvcrxx.api @=strset_s [strupr] -ParamCount=0 +SourceModule=msvcrxx.api @=strupr [swprintf] -ParamCount=0 +SourceModule=msvcrxx.api @=swprintf [ui64toa] -ParamCount=0 +SourceModule=msvcrxx.api @=ui64toa [ui64toa_s] -ParamCount=0 +SourceModule=msvcrxx.api @=ui64toa_s [ui64tow] -ParamCount=0 +SourceModule=msvcrxx.api @=ui64tow [ui64tow_s] -ParamCount=0 +SourceModule=msvcrxx.api @=ui64tow_s [ultoa] -ParamCount=0 +SourceModule=msvcrxx.api @=ultoa [ultoa_s] -ParamCount=0 +SourceModule=msvcrxx.api @=ultoa_s [ultow] -ParamCount=0 +SourceModule=msvcrxx.api @=ultow [ultow_s] -ParamCount=0 +SourceModule=msvcrxx.api @=ultow_s [vscwprintf] -ParamCount=0 +SourceModule=msvcrxx.api @=vscwprintf [vsnprintf] -ParamCount=0 +SourceModule=msvcrxx.api @=vsnprintf [vsnprintf_s] -ParamCount=0 +SourceModule=msvcrxx.api @=vsnprintf_s [vsnwprintf] -ParamCount=0 +SourceModule=msvcrxx.api @=vsnwprintf [vsnwprintf_s] -ParamCount=0 +SourceModule=msvcrxx.api @=vsnwprintf_s [vswprintf] -ParamCount=0 +SourceModule=msvcrxx.api @=vswprintf [wcsicmp] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsicmp [wcslwr] -ParamCount=0 +SourceModule=msvcrxx.api @=wcslwr [wcsnicmp] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsnicmp [wcsnset_s] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsnset_s [wcsset_s] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsset_s [wcstoui64] -ParamCount=0 +SourceModule=msvcrxx.api @=wcstoui64 [wcsupr] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsupr [wmakepath_s] -ParamCount=0 +SourceModule=msvcrxx.api @=wmakepath_s [wsplitpath_s] -ParamCount=0 +SourceModule=msvcrxx.api @=wsplitpath_s [wtoi] -ParamCount=0 +SourceModule=msvcrxx.api @=wtoi [wtoi64] -ParamCount=0 +SourceModule=msvcrxx.api @=wtoi64 [wtol] -ParamCount=0 +SourceModule=msvcrxx.api @=wtol [abs] -ParamCount=0 +SourceModule=msvcrxx.api @=abs [atan] -ParamCount=0 +SourceModule=msvcrxx.api @=atan [atoi] -ParamCount=0 +SourceModule=msvcrxx.api @=atoi [atol] -ParamCount=0 +SourceModule=msvcrxx.api @=atol [bsearch] -ParamCount=0 +SourceModule=msvcrxx.api @=bsearch [ceil] -ParamCount=0 +SourceModule=msvcrxx.api @=ceil [cos] -ParamCount=0 +SourceModule=msvcrxx.api @=cos [fabs] -ParamCount=0 +SourceModule=msvcrxx.api @=fabs [floor] -ParamCount=0 +SourceModule=msvcrxx.api @=floor [isalnum] -ParamCount=0 +SourceModule=msvcrxx.api @=isalnum [isalpha] -ParamCount=0 +SourceModule=msvcrxx.api @=isalpha [iscntrl] -ParamCount=0 +SourceModule=msvcrxx.api @=iscntrl [isdigit] -ParamCount=0 +SourceModule=msvcrxx.api @=isdigit [isgraph] -ParamCount=0 +SourceModule=msvcrxx.api @=isgraph [islower] -ParamCount=0 +SourceModule=msvcrxx.api @=islower [isprint] -ParamCount=0 +SourceModule=msvcrxx.api @=isprint [ispunct] -ParamCount=0 +SourceModule=msvcrxx.api @=ispunct [isspace] -ParamCount=0 +SourceModule=msvcrxx.api @=isspace [isupper] -ParamCount=0 +SourceModule=msvcrxx.api @=isupper [iswalpha] -ParamCount=0 +SourceModule=msvcrxx.api @=iswalpha [iswctype] -ParamCount=0 +SourceModule=msvcrxx.api @=iswctype [iswdigit] -ParamCount=0 +SourceModule=msvcrxx.api @=iswdigit [iswlower] -ParamCount=0 +SourceModule=msvcrxx.api @=iswlower [iswspace] -ParamCount=0 +SourceModule=msvcrxx.api @=iswspace [iswxdigit] -ParamCount=0 +SourceModule=msvcrxx.api @=iswxdigit [isxdigit] -ParamCount=0 +SourceModule=msvcrxx.api @=isxdigit [labs] -ParamCount=0 +SourceModule=msvcrxx.api @=labs [log] -ParamCount=0 +SourceModule=msvcrxx.api @=log [mbstowcs] -ParamCount=0 +SourceModule=msvcrxx.api @=mbstowcs [memchr] -ParamCount=0 +SourceModule=msvcrxx.api @=memchr [memcmp] -ParamCount=0 +SourceModule=msvcrxx.api @=memcmp [memcpy] -ParamCount=0 +SourceModule=msvcrxx.api @=memcpy [memcpy_s] -ParamCount=0 +SourceModule=msvcrxx.api @=memcpy_s [memmove] -ParamCount=0 +SourceModule=msvcrxx.api @=memmove [memmove_s] -ParamCount=0 +SourceModule=msvcrxx.api @=memmove_s [memset] -ParamCount=0 +SourceModule=msvcrxx.api @=memset [pow] -ParamCount=0 +SourceModule=msvcrxx.api @=pow [qsort] -ParamCount=0 +SourceModule=msvcrxx.api @=qsort [sin] -ParamCount=0 +SourceModule=msvcrxx.api @=sin [sprintf] -ParamCount=0 +SourceModule=msvcrxx.api @=sprintf [sprintf_s] -ParamCount=0 +SourceModule=msvcrxx.api @=sprintf_s [sqrt] -ParamCount=0 +SourceModule=msvcrxx.api @=sqrt [sscanf] -ParamCount=0 +SourceModule=msvcrxx.api @=sscanf [sscanf_s] -ParamCount=0 +SourceModule=msvcrxx.api @=sscanf_s [strcat] -ParamCount=0 +SourceModule=msvcrxx.api @=strcat [strcat_s] -ParamCount=0 +SourceModule=msvcrxx.api @=strcat_s [strchr] -ParamCount=0 +SourceModule=msvcrxx.api @=strchr [strcmp] -ParamCount=0 +SourceModule=msvcrxx.api @=strcmp [strcpy] -ParamCount=0 +SourceModule=msvcrxx.api @=strcpy [strcpy_s] -ParamCount=0 +SourceModule=msvcrxx.api @=strcpy_s [strcspn] -ParamCount=0 +SourceModule=msvcrxx.api @=strcspn [strlen] -ParamCount=0 +SourceModule=msvcrxx.api @=strlen [strncat] -ParamCount=0 +SourceModule=msvcrxx.api @=strncat [strncat_s] -ParamCount=0 +SourceModule=msvcrxx.api @=strncat_s [strncmp] -ParamCount=0 +SourceModule=msvcrxx.api @=strncmp [strncpy] -ParamCount=0 +SourceModule=msvcrxx.api @=strncpy [strncpy_s] -ParamCount=0 +SourceModule=msvcrxx.api @=strncpy_s [strnlen] -ParamCount=0 +SourceModule=msvcrxx.api @=strnlen [strpbrk] -ParamCount=0 +SourceModule=msvcrxx.api @=strpbrk [strrchr] -ParamCount=0 +SourceModule=msvcrxx.api @=strrchr [strspn] -ParamCount=0 +SourceModule=msvcrxx.api @=strspn [strstr] -ParamCount=0 +SourceModule=msvcrxx.api @=strstr [strtok_s] -ParamCount=0 +SourceModule=msvcrxx.api @=strtok_s [strtol] -ParamCount=0 +SourceModule=msvcrxx.api @=strtol [strtoul] -ParamCount=0 +SourceModule=msvcrxx.api @=strtoul [swprintf_s] -ParamCount=0 +SourceModule=msvcrxx.api @=swprintf_s [swscanf_s] -ParamCount=0 +SourceModule=msvcrxx.api @=swscanf_s [tan] -ParamCount=0 +SourceModule=msvcrxx.api @=tan [tolower] -ParamCount=0 +SourceModule=msvcrxx.api @=tolower [toupper] -ParamCount=0 +SourceModule=msvcrxx.api @=toupper [towlower] -ParamCount=0 +SourceModule=msvcrxx.api @=towlower [vsprintf] -ParamCount=0 +SourceModule=msvcrxx.api @=vsprintf [vsprintf_s] -ParamCount=0 +SourceModule=msvcrxx.api @=vsprintf_s [vswprintf_s] -ParamCount=0 +SourceModule=msvcrxx.api @=vswprintf_s [wcscat] -ParamCount=0 +SourceModule=msvcrxx.api @=wcscat [wcscat_s] -ParamCount=0 +SourceModule=msvcrxx.api @=wcscat_s [wcschr] -ParamCount=0 +SourceModule=msvcrxx.api @=wcschr [wcscmp] -ParamCount=0 +SourceModule=msvcrxx.api @=wcscmp [wcscpy] -ParamCount=0 +SourceModule=msvcrxx.api @=wcscpy [wcscpy_s] -ParamCount=0 +SourceModule=msvcrxx.api @=wcscpy_s [wcscspn] -ParamCount=0 +SourceModule=msvcrxx.api @=wcscspn [wcslen] -ParamCount=0 +SourceModule=msvcrxx.api @=wcslen [wcsncat] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsncat [wcsncat_s] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsncat_s [wcsncmp] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsncmp [wcsncpy] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsncpy [wcsncpy_s] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsncpy_s [wcsnlen] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsnlen [wcspbrk] -ParamCount=0 +SourceModule=msvcrxx.api @=wcspbrk [wcsrchr] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsrchr [wcsspn] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsspn [wcsstr] -ParamCount=0 +SourceModule=msvcrxx.api @=wcsstr [wcstol] -ParamCount=0 +SourceModule=msvcrxx.api @=wcstol [wcstombs] -ParamCount=0 +SourceModule=msvcrxx.api @=wcstombs [wcstoul] -ParamCount=0 +SourceModule=msvcrxx.api @=wcstoul diff --git a/apis_def/sechost.api b/apis_def/sechost.api index 0212391..a64b1a2 100644 --- a/apis_def/sechost.api +++ b/apis_def/sechost.api @@ -61,278 +61,278 @@ ParamCount=5 Header=sechost.h.api;advapi32.h.api;network.h.api;windows.h.api; @=LsaLookupTranslateSids [AuditComputeEffectivePolicyBySid] -ParamCount=0 +SourceModule=advapi32.api @=AuditComputeEffectivePolicyBySid [AuditFree] -ParamCount=0 +SourceModule=advapi32.api @=AuditFree [AuditQuerySystemPolicy] -ParamCount=0 +SourceModule=advapi32.api @=AuditQuerySystemPolicy [AuditSetSystemPolicy] -ParamCount=0 +SourceModule=advapi32.api @=AuditSetSystemPolicy [ChangeServiceConfig2A] -ParamCount=0 +SourceModule=advapi32.api @=ChangeServiceConfig2A [ChangeServiceConfig2W] -ParamCount=0 +SourceModule=advapi32.api @=ChangeServiceConfig2W [ChangeServiceConfigA] -ParamCount=0 +SourceModule=advapi32.api @=ChangeServiceConfigA [ChangeServiceConfigW] -ParamCount=0 +SourceModule=advapi32.api @=ChangeServiceConfigW [CloseServiceHandle] -ParamCount=0 +SourceModule=advapi32.api @=CloseServiceHandle [ControlService] -ParamCount=0 +SourceModule=advapi32.api @=ControlService [ControlServiceExA] -ParamCount=0 +SourceModule=advapi32.api @=ControlServiceExA [ControlServiceExW] -ParamCount=0 +SourceModule=advapi32.api @=ControlServiceExW [ConvertSecurityDescriptorToStringSecurityDescriptorW] -ParamCount=0 +SourceModule=advapi32.api @=ConvertSecurityDescriptorToStringSecurityDescriptorW [ConvertSidToStringSidW] -ParamCount=0 +SourceModule=advapi32.api @=ConvertSidToStringSidW [ConvertStringSecurityDescriptorToSecurityDescriptorW] -ParamCount=0 +SourceModule=advapi32.api @=ConvertStringSecurityDescriptorToSecurityDescriptorW [ConvertStringSidToSidW] -ParamCount=0 +SourceModule=advapi32.api @=ConvertStringSidToSidW [CreateServiceA] -ParamCount=0 +SourceModule=advapi32.api @=CreateServiceA [CreateServiceW] -ParamCount=0 +SourceModule=advapi32.api @=CreateServiceW [CredDeleteA] -ParamCount=0 +SourceModule=advapi32.api @=CredDeleteA [CredDeleteW] -ParamCount=0 +SourceModule=advapi32.api @=CredDeleteW [CredEnumerateA] -ParamCount=0 +SourceModule=advapi32.api @=CredEnumerateA [CredEnumerateW] -ParamCount=0 +SourceModule=advapi32.api @=CredEnumerateW [CredFindBestCredentialA] -ParamCount=0 +SourceModule=advapi32.api @=CredFindBestCredentialA [CredFindBestCredentialW] -ParamCount=0 +SourceModule=advapi32.api @=CredFindBestCredentialW [CredFree] -ParamCount=0 +SourceModule=advapi32.api @=CredFree [CredGetSessionTypes] -ParamCount=0 +SourceModule=advapi32.api @=CredGetSessionTypes [CredGetTargetInfoA] -ParamCount=0 +SourceModule=advapi32.api @=CredGetTargetInfoA [CredGetTargetInfoW] -ParamCount=0 +SourceModule=advapi32.api @=CredGetTargetInfoW [CredIsMarshaledCredentialW] -ParamCount=0 +SourceModule=advapi32.api @=CredIsMarshaledCredentialW [CredIsProtectedA] -ParamCount=0 +SourceModule=advapi32.api @=CredIsProtectedA [CredIsProtectedW] -ParamCount=0 +SourceModule=advapi32.api @=CredIsProtectedW [CredMarshalCredentialA] -ParamCount=0 +SourceModule=advapi32.api @=CredMarshalCredentialA [CredMarshalCredentialW] -ParamCount=0 +SourceModule=advapi32.api @=CredMarshalCredentialW [CredProtectA] -ParamCount=0 +SourceModule=advapi32.api @=CredProtectA [CredProtectW] -ParamCount=0 +SourceModule=advapi32.api @=CredProtectW [CredReadA] -ParamCount=0 +SourceModule=advapi32.api @=CredReadA [CredReadDomainCredentialsA] -ParamCount=0 +SourceModule=advapi32.api @=CredReadDomainCredentialsA [CredReadDomainCredentialsW] -ParamCount=0 +SourceModule=advapi32.api @=CredReadDomainCredentialsW [CredReadW] -ParamCount=0 +SourceModule=advapi32.api @=CredReadW [CredUnmarshalCredentialA] -ParamCount=0 +SourceModule=advapi32.api @=CredUnmarshalCredentialA [CredUnmarshalCredentialW] -ParamCount=0 +SourceModule=advapi32.api @=CredUnmarshalCredentialW [CredUnprotectA] -ParamCount=0 +SourceModule=advapi32.api @=CredUnprotectA [CredUnprotectW] -ParamCount=0 +SourceModule=advapi32.api @=CredUnprotectW [CredWriteA] -ParamCount=0 +SourceModule=advapi32.api @=CredWriteA [CredWriteDomainCredentialsA] -ParamCount=0 +SourceModule=advapi32.api @=CredWriteDomainCredentialsA [CredWriteDomainCredentialsW] -ParamCount=0 +SourceModule=advapi32.api @=CredWriteDomainCredentialsW [CredWriteW] -ParamCount=0 +SourceModule=advapi32.api @=CredWriteW [DeleteService] -ParamCount=0 +SourceModule=advapi32.api @=DeleteService [EnumDependentServicesW] -ParamCount=0 +SourceModule=advapi32.api @=EnumDependentServicesW [EnumServicesStatusExW] -ParamCount=0 +SourceModule=advapi32.api @=EnumServicesStatusExW [LsaAddAccountRights] -ParamCount=0 +SourceModule=advapi32.api @=LsaAddAccountRights [LsaClose] -ParamCount=0 +SourceModule=advapi32.api @=LsaClose [LsaEnumerateAccountRights] -ParamCount=0 +SourceModule=advapi32.api @=LsaEnumerateAccountRights [LsaEnumerateAccountsWithUserRight] -ParamCount=0 +SourceModule=advapi32.api @=LsaEnumerateAccountsWithUserRight [LsaFreeMemory] -ParamCount=0 +SourceModule=advapi32.api @=LsaFreeMemory [LsaLookupNames2] -ParamCount=0 +SourceModule=advapi32.api @=LsaLookupNames2 [LsaLookupSids] -ParamCount=0 +SourceModule=advapi32.api @=LsaLookupSids [LsaLookupSids2] -ParamCount=0 +SourceModule=advapi32.api @=LsaLookupSids2 [LsaOpenPolicy] -ParamCount=0 +SourceModule=advapi32.api @=LsaOpenPolicy [LsaOpenSecret] -ParamCount=0 +SourceModule=advapi32.api @=LsaOpenSecret [LsaQueryInformationPolicy] -ParamCount=0 +SourceModule=advapi32.api @=LsaQueryInformationPolicy [LsaQuerySecret] -ParamCount=0 +SourceModule=advapi32.api @=LsaQuerySecret [LsaRemoveAccountRights] -ParamCount=0 +SourceModule=advapi32.api @=LsaRemoveAccountRights [LsaRetrievePrivateData] -ParamCount=0 +SourceModule=advapi32.api @=LsaRetrievePrivateData [LsaSetInformationPolicy] -ParamCount=0 +SourceModule=advapi32.api @=LsaSetInformationPolicy [LsaSetSecret] -ParamCount=0 +SourceModule=advapi32.api @=LsaSetSecret [LsaStorePrivateData] -ParamCount=0 +SourceModule=advapi32.api @=LsaStorePrivateData [NotifyServiceStatusChange] -ParamCount=0 +SourceModule=advapi32.api @=NotifyServiceStatusChange [NotifyServiceStatusChangeA] -ParamCount=0 +SourceModule=advapi32.api @=NotifyServiceStatusChangeA [NotifyServiceStatusChangeW] -ParamCount=0 +SourceModule=advapi32.api @=NotifyServiceStatusChangeW [OpenSCManagerA] -ParamCount=0 +SourceModule=advapi32.api @=OpenSCManagerA [OpenSCManagerW] -ParamCount=0 +SourceModule=advapi32.api @=OpenSCManagerW [OpenServiceA] -ParamCount=0 +SourceModule=advapi32.api @=OpenServiceA [OpenServiceW] -ParamCount=0 +SourceModule=advapi32.api @=OpenServiceW [QueryServiceConfig2A] -ParamCount=0 +SourceModule=advapi32.api @=QueryServiceConfig2A [QueryServiceConfig2W] -ParamCount=0 +SourceModule=advapi32.api @=QueryServiceConfig2W [QueryServiceConfigA] -ParamCount=0 +SourceModule=advapi32.api @=QueryServiceConfigA [QueryServiceConfigW] -ParamCount=0 +SourceModule=advapi32.api @=QueryServiceConfigW [QueryServiceDynamicInformation] -ParamCount=0 +SourceModule=advapi32.api @=QueryServiceDynamicInformation [QueryServiceObjectSecurity] -ParamCount=0 +SourceModule=advapi32.api @=QueryServiceObjectSecurity [QueryServiceStatus] -ParamCount=0 +SourceModule=advapi32.api @=QueryServiceStatus [QueryServiceStatusEx] -ParamCount=0 +SourceModule=advapi32.api @=QueryServiceStatusEx [RegisterServiceCtrlHandlerA] -ParamCount=0 +SourceModule=advapi32.api @=RegisterServiceCtrlHandlerA [RegisterServiceCtrlHandlerExA] -ParamCount=0 +SourceModule=advapi32.api @=RegisterServiceCtrlHandlerExA [RegisterServiceCtrlHandlerExW] -ParamCount=0 +SourceModule=advapi32.api @=RegisterServiceCtrlHandlerExW [RegisterServiceCtrlHandlerW] -ParamCount=0 +SourceModule=advapi32.api @=RegisterServiceCtrlHandlerW [SetServiceObjectSecurity] -ParamCount=0 +SourceModule=advapi32.api @=SetServiceObjectSecurity [SetServiceStatus] -ParamCount=0 +SourceModule=advapi32.api @=SetServiceStatus [StartServiceA] -ParamCount=0 +SourceModule=advapi32.api @=StartServiceA [StartServiceCtrlDispatcherA] -ParamCount=0 +SourceModule=advapi32.api @=StartServiceCtrlDispatcherA [StartServiceCtrlDispatcherW] -ParamCount=0 +SourceModule=advapi32.api @=StartServiceCtrlDispatcherW [StartServiceW] -ParamCount=0 +SourceModule=advapi32.api @=StartServiceW diff --git a/apis_def/setupapi.api b/apis_def/setupapi.api index 42acbf7..3a33b5c 100644 --- a/apis_def/setupapi.api +++ b/apis_def/setupapi.api @@ -1693,650 +1693,650 @@ ParamCount=4 Header=setupapi.h.api; @=SetupWriteTextLogInfLine [CM_Add_Empty_Log_Conf] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Add_Empty_Log_Conf [CM_Add_Empty_Log_Conf_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Add_Empty_Log_Conf_Ex [CM_Add_ID_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Add_ID_ExA [CM_Add_ID_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Add_ID_ExW [CM_Add_IDA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Add_IDA [CM_Add_IDW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Add_IDW [CM_Add_Range] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Add_Range [CM_Add_Res_Des] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Add_Res_Des [CM_Add_Res_Des_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Add_Res_Des_Ex [CM_Apply_PowerScheme] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Apply_PowerScheme [CM_Connect_MachineA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Connect_MachineA [CM_Connect_MachineW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Connect_MachineW [CM_Create_DevNode_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Create_DevNode_ExA [CM_Create_DevNode_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Create_DevNode_ExW [CM_Create_DevNodeA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Create_DevNodeA [CM_Create_DevNodeW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Create_DevNodeW [CM_Create_Range_List] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Create_Range_List [CM_Delete_Class_Key] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Delete_Class_Key [CM_Delete_Class_Key_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Delete_Class_Key_Ex [CM_Delete_Device_Interface_Key_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Delete_Device_Interface_Key_ExA [CM_Delete_Device_Interface_Key_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Delete_Device_Interface_Key_ExW [CM_Delete_Device_Interface_KeyA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Delete_Device_Interface_KeyA [CM_Delete_Device_Interface_KeyW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Delete_Device_Interface_KeyW [CM_Delete_DevNode_Key] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Delete_DevNode_Key [CM_Delete_DevNode_Key_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Delete_DevNode_Key_Ex [CM_Delete_PowerScheme] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Delete_PowerScheme [CM_Delete_Range] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Delete_Range [CM_Detect_Resource_Conflict] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Detect_Resource_Conflict [CM_Detect_Resource_Conflict_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Detect_Resource_Conflict_Ex [CM_Disable_DevNode] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Disable_DevNode [CM_Disable_DevNode_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Disable_DevNode_Ex [CM_Disconnect_Machine] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Disconnect_Machine [CM_Dup_Range_List] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Dup_Range_List [CM_Duplicate_PowerScheme] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Duplicate_PowerScheme [CM_Enable_DevNode] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Enable_DevNode [CM_Enable_DevNode_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Enable_DevNode_Ex [CM_Enumerate_Classes] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Enumerate_Classes [CM_Enumerate_Classes_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Enumerate_Classes_Ex [CM_Enumerate_Enumerators_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Enumerate_Enumerators_ExA [CM_Enumerate_Enumerators_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Enumerate_Enumerators_ExW [CM_Enumerate_EnumeratorsA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Enumerate_EnumeratorsA [CM_Enumerate_EnumeratorsW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Enumerate_EnumeratorsW [CM_Find_Range] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Find_Range [CM_First_Range] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_First_Range [CM_Free_Log_Conf] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Free_Log_Conf [CM_Free_Log_Conf_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Free_Log_Conf_Ex [CM_Free_Log_Conf_Handle] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Free_Log_Conf_Handle [CM_Free_Range_List] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Free_Range_List [CM_Free_Res_Des] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Free_Res_Des [CM_Free_Res_Des_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Free_Res_Des_Ex [CM_Free_Res_Des_Handle] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Free_Res_Des_Handle [CM_Free_Resource_Conflict_Handle] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Free_Resource_Conflict_Handle [CM_Get_Child] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Child [CM_Get_Child_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Child_Ex [CM_Get_Class_Key_Name_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Class_Key_Name_ExA [CM_Get_Class_Key_Name_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Class_Key_Name_ExW [CM_Get_Class_Key_NameA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Class_Key_NameA [CM_Get_Class_Key_NameW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Class_Key_NameW [CM_Get_Class_Name_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Class_Name_ExA [CM_Get_Class_Name_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Class_Name_ExW [CM_Get_Class_NameA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Class_NameA [CM_Get_Class_NameW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Class_NameW [CM_Get_Class_Registry_PropertyA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Class_Registry_PropertyA [CM_Get_Class_Registry_PropertyW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Class_Registry_PropertyW [CM_Get_Depth] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Depth [CM_Get_Depth_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Depth_Ex [CM_Get_Device_ID_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_ID_ExA [CM_Get_Device_ID_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_ID_ExW [CM_Get_Device_ID_List_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_ID_List_ExA [CM_Get_Device_ID_List_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_ID_List_ExW [CM_Get_Device_ID_List_Size_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_ID_List_Size_ExA [CM_Get_Device_ID_List_Size_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_ID_List_Size_ExW [CM_Get_Device_ID_List_SizeA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_ID_List_SizeA [CM_Get_Device_ID_List_SizeW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_ID_List_SizeW [CM_Get_Device_ID_ListA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_ID_ListA [CM_Get_Device_ID_ListW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_ID_ListW [CM_Get_Device_ID_Size] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_ID_Size [CM_Get_Device_ID_Size_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_ID_Size_Ex [CM_Get_Device_IDA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_IDA [CM_Get_Device_IDW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_IDW [CM_Get_Device_Interface_Alias_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_Interface_Alias_ExA [CM_Get_Device_Interface_Alias_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_Interface_Alias_ExW [CM_Get_Device_Interface_AliasA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_Interface_AliasA [CM_Get_Device_Interface_AliasW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_Interface_AliasW [CM_Get_Device_Interface_List_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_Interface_List_ExA [CM_Get_Device_Interface_List_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_Interface_List_ExW [CM_Get_Device_Interface_List_Size_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_Interface_List_Size_ExA [CM_Get_Device_Interface_List_Size_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_Interface_List_Size_ExW [CM_Get_Device_Interface_List_SizeA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_Interface_List_SizeA [CM_Get_Device_Interface_List_SizeW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_Interface_List_SizeW [CM_Get_Device_Interface_ListA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_Interface_ListA [CM_Get_Device_Interface_ListW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Device_Interface_ListW [CM_Get_DevNode_Custom_Property_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_DevNode_Custom_Property_ExW [CM_Get_DevNode_Custom_PropertyA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_DevNode_Custom_PropertyA [CM_Get_DevNode_Custom_PropertyW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_DevNode_Custom_PropertyW [CM_Get_DevNode_Registry_Property_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_DevNode_Registry_Property_ExA [CM_Get_DevNode_Registry_Property_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_DevNode_Registry_Property_ExW [CM_Get_DevNode_Registry_PropertyA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_DevNode_Registry_PropertyA [CM_Get_DevNode_Registry_PropertyW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_DevNode_Registry_PropertyW [CM_Get_DevNode_Status] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_DevNode_Status [CM_Get_DevNode_Status_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_DevNode_Status_Ex [CM_Get_First_Log_Conf] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_First_Log_Conf [CM_Get_First_Log_Conf_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_First_Log_Conf_Ex [CM_Get_Global_State] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Global_State [CM_Get_Global_State_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Global_State_Ex [CM_Get_Hardware_Profile_Info_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Hardware_Profile_Info_ExA [CM_Get_Hardware_Profile_Info_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Hardware_Profile_Info_ExW [CM_Get_Hardware_Profile_InfoA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Hardware_Profile_InfoA [CM_Get_Hardware_Profile_InfoW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Hardware_Profile_InfoW [CM_Get_HW_Prof_Flags_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_HW_Prof_Flags_ExA [CM_Get_HW_Prof_Flags_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_HW_Prof_Flags_ExW [CM_Get_HW_Prof_FlagsA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_HW_Prof_FlagsA [CM_Get_HW_Prof_FlagsW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_HW_Prof_FlagsW [CM_Get_Log_Conf_Priority] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Log_Conf_Priority [CM_Get_Log_Conf_Priority_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Log_Conf_Priority_Ex [CM_Get_Next_Log_Conf] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Next_Log_Conf [CM_Get_Next_Log_Conf_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Next_Log_Conf_Ex [CM_Get_Next_Res_Des] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Next_Res_Des [CM_Get_Next_Res_Des_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Next_Res_Des_Ex [CM_Get_Parent] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Parent [CM_Get_Parent_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Parent_Ex [CM_Get_Res_Des_Data] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Res_Des_Data [CM_Get_Res_Des_Data_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Res_Des_Data_Ex [CM_Get_Res_Des_Data_Size] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Res_Des_Data_Size [CM_Get_Res_Des_Data_Size_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Res_Des_Data_Size_Ex [CM_Get_Resource_Conflict_Count] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Resource_Conflict_Count [CM_Get_Resource_Conflict_DetailsA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Resource_Conflict_DetailsA [CM_Get_Resource_Conflict_DetailsW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Resource_Conflict_DetailsW [CM_Get_Sibling] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Sibling [CM_Get_Sibling_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Sibling_Ex [CM_Get_Version] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Version [CM_Get_Version_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Get_Version_Ex [CM_Import_PowerScheme] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Import_PowerScheme [CM_Intersect_Range_List] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Intersect_Range_List [CM_Invert_Range_List] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Invert_Range_List [CM_Is_Dock_Station_Present] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Is_Dock_Station_Present [CM_Is_Dock_Station_Present_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Is_Dock_Station_Present_Ex [CM_Is_Version_Available] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Is_Version_Available [CM_Is_Version_Available_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Is_Version_Available_Ex [CM_Locate_DevNode_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Locate_DevNode_ExA [CM_Locate_DevNode_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Locate_DevNode_ExW [CM_Locate_DevNodeA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Locate_DevNodeA [CM_Locate_DevNodeW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Locate_DevNodeW [CM_Merge_Range_List] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Merge_Range_List [CM_Modify_Res_Des] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Modify_Res_Des [CM_Modify_Res_Des_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Modify_Res_Des_Ex [CM_Move_DevNode] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Move_DevNode [CM_Move_DevNode_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Move_DevNode_Ex [CM_Next_Range] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Next_Range [CM_Open_Class_Key_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Open_Class_Key_ExA [CM_Open_Class_Key_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Open_Class_Key_ExW [CM_Open_Class_KeyA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Open_Class_KeyA [CM_Open_Class_KeyW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Open_Class_KeyW [CM_Open_Device_Interface_Key_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Open_Device_Interface_Key_ExA [CM_Open_Device_Interface_Key_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Open_Device_Interface_Key_ExW [CM_Open_Device_Interface_KeyA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Open_Device_Interface_KeyA [CM_Open_Device_Interface_KeyW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Open_Device_Interface_KeyW [CM_Open_DevNode_Key] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Open_DevNode_Key [CM_Open_DevNode_Key_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Open_DevNode_Key_Ex [CM_Query_And_Remove_SubTree_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Query_And_Remove_SubTree_ExA [CM_Query_And_Remove_SubTree_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Query_And_Remove_SubTree_ExW [CM_Query_And_Remove_SubTreeA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Query_And_Remove_SubTreeA [CM_Query_And_Remove_SubTreeW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Query_And_Remove_SubTreeW [CM_Query_Arbitrator_Free_Data] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Query_Arbitrator_Free_Data [CM_Query_Arbitrator_Free_Data_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Query_Arbitrator_Free_Data_Ex [CM_Query_Arbitrator_Free_Size] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Query_Arbitrator_Free_Size [CM_Query_Arbitrator_Free_Size_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Query_Arbitrator_Free_Size_Ex [CM_Query_Remove_SubTree] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Query_Remove_SubTree [CM_Query_Remove_SubTree_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Query_Remove_SubTree_Ex [CM_Query_Resource_Conflict_List] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Query_Resource_Conflict_List [CM_Reenumerate_DevNode] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Reenumerate_DevNode [CM_Reenumerate_DevNode_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Reenumerate_DevNode_Ex [CM_Register_Device_Driver] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Register_Device_Driver [CM_Register_Device_Driver_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Register_Device_Driver_Ex [CM_Register_Device_Interface_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Register_Device_Interface_ExA [CM_Register_Device_Interface_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Register_Device_Interface_ExW [CM_Register_Device_InterfaceA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Register_Device_InterfaceA [CM_Register_Device_InterfaceW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Register_Device_InterfaceW [CM_Remove_SubTree] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Remove_SubTree [CM_Remove_SubTree_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Remove_SubTree_Ex [CM_Request_Device_Eject_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Request_Device_Eject_ExA [CM_Request_Device_Eject_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Request_Device_Eject_ExW [CM_Request_Device_EjectA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Request_Device_EjectA [CM_Request_Device_EjectW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Request_Device_EjectW [CM_Request_Eject_PC] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Request_Eject_PC [CM_Request_Eject_PC_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Request_Eject_PC_Ex [CM_Restore_DefaultPowerScheme] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Restore_DefaultPowerScheme [CM_RestoreAll_DefaultPowerSchemes] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_RestoreAll_DefaultPowerSchemes [CM_Run_Detection] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Run_Detection [CM_Run_Detection_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Run_Detection_Ex [CM_Set_ActiveScheme] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_ActiveScheme [CM_Set_Class_Registry_PropertyA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_Class_Registry_PropertyA [CM_Set_Class_Registry_PropertyW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_Class_Registry_PropertyW [CM_Set_DevNode_Problem] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_DevNode_Problem [CM_Set_DevNode_Problem_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_DevNode_Problem_Ex [CM_Set_DevNode_Registry_Property_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_DevNode_Registry_Property_ExA [CM_Set_DevNode_Registry_Property_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_DevNode_Registry_Property_ExW [CM_Set_DevNode_Registry_PropertyA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_DevNode_Registry_PropertyA [CM_Set_DevNode_Registry_PropertyW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_DevNode_Registry_PropertyW [CM_Set_HW_Prof] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_HW_Prof [CM_Set_HW_Prof_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_HW_Prof_Ex [CM_Set_HW_Prof_Flags_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_HW_Prof_Flags_ExA [CM_Set_HW_Prof_Flags_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_HW_Prof_Flags_ExW [CM_Set_HW_Prof_FlagsA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_HW_Prof_FlagsA [CM_Set_HW_Prof_FlagsW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Set_HW_Prof_FlagsW [CM_Setup_DevNode] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Setup_DevNode [CM_Setup_DevNode_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Setup_DevNode_Ex [CM_Test_Range_Available] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Test_Range_Available [CM_Uninstall_DevNode] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Uninstall_DevNode [CM_Uninstall_DevNode_Ex] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Uninstall_DevNode_Ex [CM_Unregister_Device_Interface_ExA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Unregister_Device_Interface_ExA [CM_Unregister_Device_Interface_ExW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Unregister_Device_Interface_ExW [CM_Unregister_Device_InterfaceA] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Unregister_Device_InterfaceA [CM_Unregister_Device_InterfaceW] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Unregister_Device_InterfaceW [CM_Write_UserPowerKey] -ParamCount=0 +SourceModule=cfgmgr32.api @=CM_Write_UserPowerKey [CMP_WaitNoPendingInstallEvents] -ParamCount=0 +SourceModule=cfgmgr32.api @=CMP_WaitNoPendingInstallEvents diff --git a/apis_def/shcore.api b/apis_def/shcore.api index 690b2e5..f31efb6 100644 --- a/apis_def/shcore.api +++ b/apis_def/shcore.api @@ -41,200 +41,200 @@ ParamCount=2 Header=shcore.h.api; @=RevokeScaleChangeNotifications [CommandLineToArgvW] -ParamCount=0 +SourceModule=shell32.api @=CommandLineToArgvW [GetCurrentProcessExplicitAppUserModelID] -ParamCount=0 +SourceModule=shell32.api @=GetCurrentProcessExplicitAppUserModelID [SetCurrentProcessExplicitAppUserModelID] -ParamCount=0 +SourceModule=shell32.api @=SetCurrentProcessExplicitAppUserModelID [GetProcessReference] -ParamCount=0 +SourceModule=shlwapi.api @=GetProcessReference [IsOS] -ParamCount=0 +SourceModule=shlwapi.api @=IsOS [IStream_Copy] -ParamCount=0 +SourceModule=shlwapi.api @=IStream_Copy [IStream_Read] -ParamCount=0 +SourceModule=shlwapi.api @=IStream_Read [IStream_ReadStr] -ParamCount=0 +SourceModule=shlwapi.api @=IStream_ReadStr [IStream_Reset] -ParamCount=0 +SourceModule=shlwapi.api @=IStream_Reset [IStream_Size] -ParamCount=0 +SourceModule=shlwapi.api @=IStream_Size [IStream_Write] -ParamCount=0 +SourceModule=shlwapi.api @=IStream_Write [IStream_WriteStr] -ParamCount=0 +SourceModule=shlwapi.api @=IStream_WriteStr [IUnknown_AtomicRelease] -ParamCount=0 +SourceModule=shlwapi.api @=IUnknown_AtomicRelease [IUnknown_GetSite] -ParamCount=0 +SourceModule=shlwapi.api @=IUnknown_GetSite [IUnknown_QueryService] -ParamCount=0 +SourceModule=shlwapi.api @=IUnknown_QueryService [IUnknown_Set] -ParamCount=0 +SourceModule=shlwapi.api @=IUnknown_Set [IUnknown_SetSite] -ParamCount=0 +SourceModule=shlwapi.api @=IUnknown_SetSite [SetProcessReference] -ParamCount=0 +SourceModule=shlwapi.api @=SetProcessReference [SHAnsiToAnsi] -ParamCount=0 +SourceModule=shlwapi.api @=SHAnsiToAnsi [SHAnsiToUnicode] -ParamCount=0 +SourceModule=shlwapi.api @=SHAnsiToUnicode [SHCopyKeyA] -ParamCount=0 +SourceModule=shlwapi.api @=SHCopyKeyA [SHCopyKeyW] -ParamCount=0 +SourceModule=shlwapi.api @=SHCopyKeyW [SHCreateMemStream] -ParamCount=0 +SourceModule=shlwapi.api @=SHCreateMemStream [SHCreateStreamOnFileA] -ParamCount=0 +SourceModule=shlwapi.api @=SHCreateStreamOnFileA [SHCreateStreamOnFileEx] -ParamCount=0 +SourceModule=shlwapi.api @=SHCreateStreamOnFileEx [SHCreateStreamOnFileW] -ParamCount=0 +SourceModule=shlwapi.api @=SHCreateStreamOnFileW [SHCreateThread] -ParamCount=0 +SourceModule=shlwapi.api @=SHCreateThread [SHCreateThreadRef] -ParamCount=0 +SourceModule=shlwapi.api @=SHCreateThreadRef [SHCreateThreadWithHandle] -ParamCount=0 +SourceModule=shlwapi.api @=SHCreateThreadWithHandle [SHDeleteEmptyKeyA] -ParamCount=0 +SourceModule=shlwapi.api @=SHDeleteEmptyKeyA [SHDeleteEmptyKeyW] -ParamCount=0 +SourceModule=shlwapi.api @=SHDeleteEmptyKeyW [SHDeleteKeyA] -ParamCount=0 +SourceModule=shlwapi.api @=SHDeleteKeyA [SHDeleteKeyW] -ParamCount=0 +SourceModule=shlwapi.api @=SHDeleteKeyW [SHDeleteValueA] -ParamCount=0 +SourceModule=shlwapi.api @=SHDeleteValueA [SHDeleteValueW] -ParamCount=0 +SourceModule=shlwapi.api @=SHDeleteValueW [SHEnumKeyExA] -ParamCount=0 +SourceModule=shlwapi.api @=SHEnumKeyExA [SHEnumKeyExW] -ParamCount=0 +SourceModule=shlwapi.api @=SHEnumKeyExW [SHEnumValueA] -ParamCount=0 +SourceModule=shlwapi.api @=SHEnumValueA [SHEnumValueW] -ParamCount=0 +SourceModule=shlwapi.api @=SHEnumValueW [SHGetThreadRef] -ParamCount=0 +SourceModule=shlwapi.api @=SHGetThreadRef [SHGetValueA] -ParamCount=0 +SourceModule=shlwapi.api @=SHGetValueA [SHGetValueW] -ParamCount=0 +SourceModule=shlwapi.api @=SHGetValueW [SHOpenRegStream2A] -ParamCount=0 +SourceModule=shlwapi.api @=SHOpenRegStream2A [SHOpenRegStream2W] -ParamCount=0 +SourceModule=shlwapi.api @=SHOpenRegStream2W [SHOpenRegStreamA] -ParamCount=0 +SourceModule=shlwapi.api @=SHOpenRegStreamA [SHOpenRegStreamW] -ParamCount=0 +SourceModule=shlwapi.api @=SHOpenRegStreamW [SHQueryInfoKeyA] -ParamCount=0 +SourceModule=shlwapi.api @=SHQueryInfoKeyA [SHQueryInfoKeyW] -ParamCount=0 +SourceModule=shlwapi.api @=SHQueryInfoKeyW [SHQueryValueExA] -ParamCount=0 +SourceModule=shlwapi.api @=SHQueryValueExA [SHQueryValueExW] -ParamCount=0 +SourceModule=shlwapi.api @=SHQueryValueExW [SHRegDuplicateHKey] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegDuplicateHKey [SHRegGetIntW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegGetIntW [SHRegGetPathA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegGetPathA [SHRegGetPathW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegGetPathW [SHRegGetValueA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegGetValueA [SHRegGetValueW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegGetValueW [SHRegSetPathA] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegSetPathA [SHRegSetPathW] -ParamCount=0 +SourceModule=shlwapi.api @=SHRegSetPathW [SHReleaseThreadRef] -ParamCount=0 +SourceModule=shlwapi.api @=SHReleaseThreadRef [SHSetThreadRef] -ParamCount=0 +SourceModule=shlwapi.api @=SHSetThreadRef [SHSetValueA] -ParamCount=0 +SourceModule=shlwapi.api @=SHSetValueA [SHSetValueW] -ParamCount=0 +SourceModule=shlwapi.api @=SHSetValueW [SHStrDupA] -ParamCount=0 +SourceModule=shlwapi.api @=SHStrDupA [SHStrDupW] -ParamCount=0 +SourceModule=shlwapi.api @=SHStrDupW [SHUnicodeToAnsi] -ParamCount=0 +SourceModule=shlwapi.api @=SHUnicodeToAnsi [SHUnicodeToUnicode] -ParamCount=0 +SourceModule=shlwapi.api @=SHUnicodeToUnicode diff --git a/apis_def/version.api b/apis_def/version.api index 2f5cfd0..2680703 100644 --- a/apis_def/version.api +++ b/apis_def/version.api @@ -58,8 +58,8 @@ Header=version.h.api; ParamCount=4 @=VerQueryValue [VerLanguageNameA] -ParamCount=0 +SourceModule=kernel32.api @=VerLanguageNameA [VerLanguageNameW] -ParamCount=0 +SourceModule=kernel32.api @=VerLanguageNameW diff --git a/apis_def/wsock32.api b/apis_def/wsock32.api index 1974298..d3496dc 100644 --- a/apis_def/wsock32.api +++ b/apis_def/wsock32.api @@ -1,122 +1,122 @@ [WSAAsyncGetHostByAddr] -ParamCount=0 +SourceModule=ws2_32.api @=WSAAsyncGetHostByAddr [WSAAsyncGetHostByName] -ParamCount=0 +SourceModule=ws2_32.api @=WSAAsyncGetHostByName [WSAAsyncGetProtoByName] -ParamCount=0 +SourceModule=ws2_32.api @=WSAAsyncGetProtoByName [WSAAsyncGetProtoByNumber] -ParamCount=0 +SourceModule=ws2_32.api @=WSAAsyncGetProtoByNumber [WSAAsyncGetServByName] -ParamCount=0 +SourceModule=ws2_32.api @=WSAAsyncGetServByName [WSAAsyncGetServByPort] -ParamCount=0 +SourceModule=ws2_32.api @=WSAAsyncGetServByPort [WSAAsyncSelect] -ParamCount=0 +SourceModule=ws2_32.api @=WSAAsyncSelect [WSACancelAsyncRequest] -ParamCount=0 +SourceModule=ws2_32.api @=WSACancelAsyncRequest [WSACleanup] -ParamCount=0 +SourceModule=ws2_32.api @=WSACleanup [WSAGetLastError] -ParamCount=0 +SourceModule=ws2_32.api @=WSAGetLastError [WSAIsBlocking] -ParamCount=0 +SourceModule=ws2_32.api @=WSAIsBlocking [WSASetLastError] -ParamCount=0 +SourceModule=ws2_32.api @=WSASetLastError [WSAStartup] -ParamCount=0 +SourceModule=ws2_32.api @=WSAStartup [accept] -ParamCount=0 +SourceModule=ws2_32.api @=accept [bind] -ParamCount=0 +SourceModule=ws2_32.api @=bind [closesocket] -ParamCount=0 +SourceModule=ws2_32.api @=closesocket [connect] -ParamCount=0 +SourceModule=ws2_32.api @=connect [gethostbyaddr] -ParamCount=0 +SourceModule=ws2_32.api @=gethostbyaddr [gethostbyname] -ParamCount=0 +SourceModule=ws2_32.api @=gethostbyname [gethostname] -ParamCount=0 +SourceModule=ws2_32.api @=gethostname [getpeername] -ParamCount=0 +SourceModule=ws2_32.api @=getpeername [getprotobyname] -ParamCount=0 +SourceModule=ws2_32.api @=getprotobyname [getprotobynumber] -ParamCount=0 +SourceModule=ws2_32.api @=getprotobynumber [getservbyname] -ParamCount=0 +SourceModule=ws2_32.api @=getservbyname [getservbyport] -ParamCount=0 +SourceModule=ws2_32.api @=getservbyport [getsockname] -ParamCount=0 +SourceModule=ws2_32.api @=getsockname [getsockopt] -ParamCount=0 +SourceModule=ws2_32.api @=getsockopt [htonl] -ParamCount=0 +SourceModule=ws2_32.api @=htonl [htons] -ParamCount=0 +SourceModule=ws2_32.api @=htons [listen] -ParamCount=0 +SourceModule=ws2_32.api @=listen [ntohl] -ParamCount=0 +SourceModule=ws2_32.api @=ntohl [ntohs] -ParamCount=0 +SourceModule=ws2_32.api @=ntohs [recv] -ParamCount=0 +SourceModule=ws2_32.api @=recv [recvfrom] -ParamCount=0 +SourceModule=ws2_32.api @=recvfrom [select] -ParamCount=0 +SourceModule=ws2_32.api @=select [send] -ParamCount=0 +SourceModule=ws2_32.api @=send [sendto] -ParamCount=0 +SourceModule=ws2_32.api @=sendto [setsockopt] -ParamCount=0 +SourceModule=ws2_32.api @=setsockopt [shutdown] -ParamCount=0 +SourceModule=ws2_32.api @=shutdown [socket] -ParamCount=0 +SourceModule=ws2_32.api @=socket [inet_addr] 1=const char* cp diff --git a/xAnalyzer/plugin.cpp b/xAnalyzer/plugin.cpp index cfaddab..b329f4e 100644 --- a/xAnalyzer/plugin.cpp +++ b/xAnalyzer/plugin.cpp @@ -46,10 +46,10 @@ The szFileName item contains name of file being debugged. //{ //} -PLUG_EXPORT void CBWINEVENT(CBTYPE cbType, PLUG_CB_WINEVENT* info) +/*PLUG_EXPORT void CBWINEVENT(CBTYPE cbType, PLUG_CB_WINEVENT* info) { OnWinEvent(info); -} +}*/ PLUG_EXPORT void CBBREAKPOINT(CBTYPE cbType, PLUG_CB_BREAKPOINT* bpInfo) { @@ -98,6 +98,22 @@ PLUG_EXPORT void CBMENUENTRY(CBTYPE cbType, PLUG_CB_MENUENTRY* info) } SaveConfig(); break; + case MENU_ANALYZE_CLEAR_CMTS: + conf.clear_usercomments = !conf.clear_usercomments; + SaveConfig(); + break; + case MENU_ANALYZE_CLEAR_LBLS: + conf.clear_userlabels = !conf.clear_userlabels; + SaveConfig(); + break; + case MENU_ANALYZE_CLEAR_ACMTS: + conf.clear_autocomments = !conf.clear_autocomments; + SaveConfig(); + break; + case MENU_ANALYZE_CLEAR_ALBLS: + conf.clear_autolabels = !conf.clear_autolabels; + SaveConfig(); + break; case MENU_ABOUT: ZeroMemory(&mbp, sizeof(MSGBOXPARAMS)); mbp.cbSize = sizeof(MSGBOXPARAMS); @@ -116,31 +132,22 @@ PLUG_EXPORT void CBMENUENTRY(CBTYPE cbType, PLUG_CB_MENUENTRY* info) // COMMANDS MENUS // ------------------------------------------------------------------------ case MENU_ANALYZE_DISASM: - completeAnal = true; - DbgCmdExec("xanalyze"); + DbgCmdExec("xanal exe"); break; case MENU_ANALYZE_DISASM_FUNCT: - singleFunctionAnal = true; - DbgCmdExec("xanalyze"); + DbgCmdExec("xanal function"); break; case MENU_ANALYZE_DISASM_SELEC: - if (IsMultipleSelection()) - { - selectionAnal = true; - DbgCmdExec("xanalyze"); - } + DbgCmdExec("xanal selection"); break; case MENU_REM_ANALYSIS_DISASM_SELEC: - selectionAnal = true; - DbgCmdExec("xanalysisremove"); + DbgCmdExec("xanalremove selection"); break; case MENU_REM_ANALYSIS_DISASM_FUNCT: - singleFunctionAnal = true; - DbgCmdExec("xanalysisremove"); + DbgCmdExec("xanalremove function"); break; case MENU_REM_ANALYSIS_DISASM: - completeAnal = true; - DbgCmdExec("xanalysisremove"); + DbgCmdExec("xanalremove exe"); break; default: break; @@ -176,8 +183,8 @@ bool pluginInit(PLUG_INITSTRUCT* initStruct) // this will make this functions to execute in a non gui thread - _plugin_registercommand(pluginHandle, "xanalyze", cbExtendedAnalysis, true); - _plugin_registercommand(pluginHandle, "xanalysisremove", cbExtendedAnalysisRemove, true); + _plugin_registercommand(pluginHandle, "xanal", cbExtendedAnalysis, true); + _plugin_registercommand(pluginHandle, "xanalremove", cbExtendedAnalysisRemove, true); return true; //Return false to cancel loading the plugin. } @@ -185,8 +192,8 @@ bool pluginInit(PLUG_INITSTRUCT* initStruct) //Deinitialize your plugin data here (clearing menus optional). bool pluginStop() { - _plugin_unregistercommand(pluginHandle, "xanalyze"); - _plugin_unregistercommand(pluginHandle, "xanalysisremove"); + _plugin_unregistercommand(pluginHandle, "xanal"); + _plugin_unregistercommand(pluginHandle, "xanalremove"); _plugin_menuclear(hMenu); _plugin_menuclear(hMenuDisasm); @@ -232,14 +239,19 @@ void pluginSetup() _plugin_menuaddentry(hMenu, MENU_ANALYZE_AUTO, "&Automatic Analysis"); _plugin_menuaddentry(hMenu, MENU_ANALYZE_EXT, "&Extended Analysis"); _plugin_menuaddentry(hMenu, MENU_ANALYZE_UNDEF, "&Analyze Undefined Functions"); + int clearprevmnu = _plugin_menuadd(hMenu, "Clear Previous Data"); + _plugin_menuaddentry(clearprevmnu, MENU_ANALYZE_CLEAR_CMTS, "User Comments"); + _plugin_menuaddentry(clearprevmnu, MENU_ANALYZE_CLEAR_LBLS, "User Labels"); + _plugin_menuaddentry(clearprevmnu, MENU_ANALYZE_CLEAR_ACMTS, "AutoComments"); + _plugin_menuaddentry(clearprevmnu, MENU_ANALYZE_CLEAR_ALBLS, "AutoLabels"); _plugin_menuaddseparator(hMenu); - _plugin_menuaddentry(hMenu, MENU_ABOUT, "&About..."); + _plugin_menuaddentry(hMenu, MENU_ABOUT, "&About..."); // disasm window menu _plugin_menuseticon(hMenuDisasm, &menu_icon); - _plugin_menuaddentry(hMenuDisasm, MENU_ANALYZE_DISASM_SELEC, "&Analyze Selection");//\tCtrl+Shift+X - _plugin_menuaddentry(hMenuDisasm, MENU_ANALYZE_DISASM_FUNCT, "&Analyze Function");//\tCtrl+X - _plugin_menuaddentry(hMenuDisasm, MENU_ANALYZE_DISASM, "&Analyze Executable");//\tCtrl+Alt+X + _plugin_menuaddentry(hMenuDisasm, MENU_ANALYZE_DISASM_SELEC, "&Analyze Selection"); + _plugin_menuaddentry(hMenuDisasm, MENU_ANALYZE_DISASM_FUNCT, "&Analyze Function"); + _plugin_menuaddentry(hMenuDisasm, MENU_ANALYZE_DISASM, "&Analyze Executable"); _plugin_menuaddseparator(hMenuDisasm); _plugin_menuaddentry(hMenuDisasm, MENU_REM_ANALYSIS_DISASM_SELEC, "&Remove analysis from selection"); _plugin_menuaddentry(hMenuDisasm, MENU_REM_ANALYSIS_DISASM_FUNCT, "&Remove analysis from function"); @@ -257,6 +269,10 @@ void pluginSetup() _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_EXT, conf.extended_analysis); _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_UNDEF, conf.undef_funtion_analysis); _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_AUTO, conf.auto_analysis); + _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_CLEAR_CMTS, conf.clear_usercomments); + _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_CLEAR_LBLS, conf.clear_userlabels); + _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_CLEAR_ACMTS, conf.clear_autocomments); + _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_CLEAR_ALBLS, conf.clear_autolabels); } //-------------------------------------------------------------------------------------- \ No newline at end of file diff --git a/xAnalyzer/plugin.h b/xAnalyzer/plugin.h index 2242f57..dbdb13b 100644 --- a/xAnalyzer/plugin.h +++ b/xAnalyzer/plugin.h @@ -5,7 +5,7 @@ //plugin data #define PLUGIN_NAME "xAnalyzer" #define PLUGIN_VERSION 2 -#define PLUGIN_VERSION_STR "2.4" +#define PLUGIN_VERSION_STR "2.4.1" enum { @@ -13,6 +13,10 @@ enum MENU_ANALYZE_AUTO, MENU_ANALYZE_DISASM, MENU_ANALYZE_EXT, + MENU_ANALYZE_CLEAR_CMTS, + MENU_ANALYZE_CLEAR_ACMTS, + MENU_ANALYZE_CLEAR_LBLS, + MENU_ANALYZE_CLEAR_ALBLS, MENU_ANALYZE_DISASM_FUNCT, MENU_ANALYZE_DISASM_SELEC, MENU_REM_ANALYSIS_DISASM_SELEC, diff --git a/xAnalyzer/pluginmain.cpp b/xAnalyzer/pluginmain.cpp index 464413c..283d99b 100644 --- a/xAnalyzer/pluginmain.cpp +++ b/xAnalyzer/pluginmain.cpp @@ -2,9 +2,10 @@ #include "plugin.h" // Variables -const char *szprojectnameInfo = "\n"PLUGIN_NAME " " PLUGIN_VERSION_STR" Plugin by ThunderCls 2016\n" +const char *szprojectnameInfo = "\n"PLUGIN_NAME " " PLUGIN_VERSION_STR" Plugin by ThunderCls 2017\n" "Extended analysis for static code\n" "-> For latest release, issues, etc....\n" + "-> For help type command \"xanal help\"\n" "-> code: http://github.com/ThunderCls/xAnalyzer\n" "-> blog: http://reversec0de.wordpress.com\n\n"; diff --git a/xAnalyzer/pluginsdk/TitanEngine/TitanEngine.h b/xAnalyzer/pluginsdk/TitanEngine/TitanEngine.h index a3dfe85..bfa38b8 100644 --- a/xAnalyzer/pluginsdk/TitanEngine/TitanEngine.h +++ b/xAnalyzer/pluginsdk/TitanEngine/TitanEngine.h @@ -1013,6 +1013,7 @@ __declspec(dllexport) long TITCALL GetActiveProcessId(const char* szImageName); __declspec(dllexport) long TITCALL GetActiveProcessIdW(const wchar_t* szImageName); __declspec(dllexport) void TITCALL EnumProcessesWithLibrary(const char* szLibraryName, void* EnumFunction); __declspec(dllexport) HANDLE TITCALL TitanOpenProcess(DWORD dwDesiredAccess, bool bInheritHandle, DWORD dwProcessId); +__declspec(dllexport) HANDLE TITCALL TitanOpenThread(DWORD dwDesiredAccess, bool bInheritHandle, DWORD dwThreadId); // TitanEngine.TLSFixer.functions: __declspec(dllexport) bool TITCALL TLSBreakOnCallBack(LPVOID ArrayOfCallBacks, DWORD NumberOfCallBacks, LPVOID bpxCallBack); __declspec(dllexport) bool TITCALL TLSGrabCallBackData(const char* szFileName, LPVOID ArrayOfCallBacks, LPDWORD NumberOfCallBacks); diff --git a/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x64.a b/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x64.a index a2efaa2..666e705 100644 Binary files a/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x64.a and b/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x64.a differ diff --git a/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x64.lib b/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x64.lib index 19b99ff..731d087 100644 Binary files a/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x64.lib and b/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x64.lib differ diff --git a/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x86.a b/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x86.a index d6a784b..2e244cb 100644 Binary files a/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x86.a and b/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x86.a differ diff --git a/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x86.lib b/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x86.lib index f4e9ff3..c4d17df 100644 Binary files a/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x86.lib and b/xAnalyzer/pluginsdk/TitanEngine/TitanEngine_x86.lib differ diff --git a/xAnalyzer/pluginsdk/_dbgfunctions.h b/xAnalyzer/pluginsdk/_dbgfunctions.h index ce08f29..942d0a3 100644 --- a/xAnalyzer/pluginsdk/_dbgfunctions.h +++ b/xAnalyzer/pluginsdk/_dbgfunctions.h @@ -94,6 +94,27 @@ typedef struct unsigned int State; } TCPCONNECTIONINFO; +typedef struct +{ + duint handle; + duint parent; + DWORD threadId; + DWORD style; + DWORD styleEx; + duint wndProc;//not used yet + bool enabled; + RECT position; + char windowTitle[MAX_COMMENT_SIZE]; + char windowClass[MAX_COMMENT_SIZE]; +} WINDOW_INFO; + +typedef struct +{ + duint addr; + duint size; + duint flags; +} HEAPINFO; + typedef bool (*ASSEMBLEATEX)(duint addr, const char* instruction, char* error, bool fillnop); typedef bool (*SECTIONFROMADDR)(duint addr, char* section); typedef bool (*MODNAMEFROMADDR)(duint addr, char* modname, bool extension); @@ -149,7 +170,13 @@ typedef bool(*MEMISCODEPAGE)(duint addr, bool refresh); typedef bool(*ANIMATECOMMAND)(const char* command); typedef void(*DBGSETDEBUGGEEINITSCRIPT)(const char* fileName); typedef const char* (*DBGGETDEBUGGEEINITSCRIPT)(); +typedef bool(*HANDLESENUMWINDOWS)(ListOf(WINDOW_INFO) windows); +typedef bool(*HANDLESENUMHEAPS)(ListOf(HEAPINFO) heaps); +typedef bool(*THREADGETNAME)(DWORD tid, char* name); +typedef bool(*ISDEPENABLED)(); +//The list of all the DbgFunctions() return value. +//WARNING: This list is append only. Do not insert things in the middle or plugins would break. typedef struct DBGFUNCTIONS_ { ASSEMBLEATEX AssembleAtEx; @@ -207,6 +234,10 @@ typedef struct DBGFUNCTIONS_ ANIMATECOMMAND AnimateCommand; DBGSETDEBUGGEEINITSCRIPT DbgSetDebuggeeInitScript; DBGGETDEBUGGEEINITSCRIPT DbgGetDebuggeeInitScript; + HANDLESENUMWINDOWS EnumWindows; + HANDLESENUMHEAPS EnumHeaps; + THREADGETNAME ThreadGetName; + ISDEPENABLED IsDepEnabled; } DBGFUNCTIONS; #ifdef BUILD_DBG diff --git a/xAnalyzer/pluginsdk/_plugins.h b/xAnalyzer/pluginsdk/_plugins.h index e4e04a7..78c487e 100644 --- a/xAnalyzer/pluginsdk/_plugins.h +++ b/xAnalyzer/pluginsdk/_plugins.h @@ -206,6 +206,23 @@ typedef struct bool retval; } PLUG_CB_ADDRINFO; +typedef struct +{ + const char* string; + duint value; + int* value_size; + bool* isvar; + bool* hexonly; + bool retval; +} PLUG_CB_VALFROMSTRING; + +typedef struct +{ + const char* string; + duint value; + bool retval; +} PLUG_CB_VALTOSTRING; + //enums typedef enum { @@ -237,6 +254,8 @@ typedef enum CB_SELCHANGED, //PLUG_CB_SELCHANGED CB_ANALYZE, //PLUG_CB_ANALYZE CB_ADDRINFO, //PLUG_CB_ADDRINFO + CB_VALFROMSTRING, //PLUG_CB_VALFROMSTRING + CB_VALTOSTRING, //PLUG_CB_VALTOSTRING CB_LAST } CBTYPE; @@ -245,6 +264,7 @@ typedef void (*CBPLUGIN)(CBTYPE cbType, void* callbackInfo); typedef bool (*CBPLUGINCOMMAND)(int argc, char** argv); typedef void (*CBPLUGINSCRIPT)(); typedef duint(*CBPLUGINEXPRFUNCTION)(int argc, duint* argv, void* userdata); +typedef bool(*CBPLUGINFORMATFUNCTION)(char* dest, size_t destCount, int argc, char* argv[], duint value, void* userdata); //exports #ifdef __cplusplus @@ -258,6 +278,7 @@ PLUG_IMPEXP bool _plugin_registercommand(int pluginHandle, const char* command, PLUG_IMPEXP bool _plugin_unregistercommand(int pluginHandle, const char* command); PLUG_IMPEXP void _plugin_logprintf(const char* format, ...); PLUG_IMPEXP void _plugin_logputs(const char* text); +PLUG_IMPEXP void _plugin_logprint(const char* text); PLUG_IMPEXP void _plugin_debugpause(); PLUG_IMPEXP void _plugin_debugskipexceptions(bool skip); PLUG_IMPEXP int _plugin_menuadd(int hMenu, const char* title); @@ -267,6 +288,10 @@ PLUG_IMPEXP bool _plugin_menuclear(int hMenu); PLUG_IMPEXP void _plugin_menuseticon(int hMenu, const ICONDATA* icon); PLUG_IMPEXP void _plugin_menuentryseticon(int pluginHandle, int hEntry, const ICONDATA* icon); PLUG_IMPEXP void _plugin_menuentrysetchecked(int pluginHandle, int hEntry, bool checked); +PLUG_IMPEXP void _plugin_menusetvisible(int pluginHandle, int hMenu, bool visible); +PLUG_IMPEXP void _plugin_menuentrysetvisible(int pluginHandle, int hEntry, bool visible); +PLUG_IMPEXP void _plugin_menusetname(int pluginHandle, int hMenu, const char* name); +PLUG_IMPEXP void _plugin_menuentrysetname(int pluginHandle, int hEntry, const char* name); PLUG_IMPEXP void _plugin_startscript(CBPLUGINSCRIPT cbScript); PLUG_IMPEXP bool _plugin_waituntilpaused(); PLUG_IMPEXP bool _plugin_registerexprfunction(int pluginHandle, const char* name, int argc, CBPLUGINEXPRFUNCTION cbFunction, void* userdata); @@ -274,6 +299,8 @@ PLUG_IMPEXP bool _plugin_unregisterexprfunction(int pluginHandle, const char* na PLUG_IMPEXP bool _plugin_unload(const char* pluginName); PLUG_IMPEXP bool _plugin_load(const char* pluginName); PLUG_IMPEXP duint _plugin_hash(const void* data, duint size); +PLUG_IMPEXP bool _plugin_registerformatfunction(int pluginHandle, const char* type, CBPLUGINFORMATFUNCTION cbFunction, void* userdata); +PLUG_IMPEXP bool _plugin_unregisterformatfunction(int pluginHandle, const char* type); #ifdef __cplusplus } diff --git a/xAnalyzer/pluginsdk/_scriptapi_memory.h b/xAnalyzer/pluginsdk/_scriptapi_memory.h index 1170349..f52e0e4 100644 --- a/xAnalyzer/pluginsdk/_scriptapi_memory.h +++ b/xAnalyzer/pluginsdk/_scriptapi_memory.h @@ -12,6 +12,9 @@ namespace Script SCRIPT_EXPORT bool IsValidPtr(duint addr); SCRIPT_EXPORT duint RemoteAlloc(duint addr, duint size); SCRIPT_EXPORT bool RemoteFree(duint addr); + SCRIPT_EXPORT unsigned int GetProtect(duint addr, bool reserved = false, bool cache = true); + SCRIPT_EXPORT duint GetBase(duint addr, bool reserved = false, bool cache = true); + SCRIPT_EXPORT duint GetSize(duint addr, bool reserved = false, bool cache = true); SCRIPT_EXPORT unsigned char ReadByte(duint addr); SCRIPT_EXPORT bool WriteByte(duint addr, unsigned char data); diff --git a/xAnalyzer/pluginsdk/_scriptapi_symbol.h b/xAnalyzer/pluginsdk/_scriptapi_symbol.h index b7cd68e..9d51d42 100644 --- a/xAnalyzer/pluginsdk/_scriptapi_symbol.h +++ b/xAnalyzer/pluginsdk/_scriptapi_symbol.h @@ -9,9 +9,9 @@ namespace Script { enum SymbolType { - Function, - Import, - Export + Function, //user-defined function + Import, //IAT entry + Export //export }; struct SymbolInfo diff --git a/xAnalyzer/pluginsdk/bridgegraph.h b/xAnalyzer/pluginsdk/bridgegraph.h index e008794..26e9517 100644 --- a/xAnalyzer/pluginsdk/bridgegraph.h +++ b/xAnalyzer/pluginsdk/bridgegraph.h @@ -17,6 +17,7 @@ typedef struct duint icount; //number of instructions in node bool terminal; //node is a RET bool split; //node is a split (brtrue points to the next node) + bool indirectcall; //node contains indirect calls (call reg, call [reg+X]) void* userdata; //user data ListInfo exits; //exits (including brtrue and brfalse, duint) ListInfo instrs; //block instructions @@ -47,6 +48,7 @@ struct BridgeCFNode duint icount; //number of instructions in node bool terminal; //node is a RET bool split; //node is a split (brtrue points to the next node) + bool indirectcall; //node contains indirect calls (call reg, call [reg+X]) void* userdata; //user data std::vector exits; //exits (including brtrue and brfalse) std::vector instrs; //block instructions @@ -70,6 +72,7 @@ struct BridgeCFNode brfalse = nodeList->brfalse; icount = nodeList->icount; terminal = nodeList->terminal; + indirectcall = nodeList->indirectcall; split = nodeList->split; userdata = nodeList->userdata; if(!BridgeList::ToVector(&nodeList->exits, exits, freedata)) @@ -86,13 +89,22 @@ struct BridgeCFNode brfalse(0), icount(0), terminal(false), + indirectcall(false), split(false), userdata(nullptr) { } explicit BridgeCFNode() - : BridgeCFNode(0, 0, 0) + : parentGraph(0), + start(0), + end(0), + brtrue(0), + brfalse(0), + icount(0), + terminal(false), + split(false), + userdata(nullptr) { } @@ -106,6 +118,7 @@ struct BridgeCFNode out.brfalse = brfalse; out.icount = icount; out.terminal = terminal; + out.indirectcall = indirectcall; out.split = split; out.userdata = userdata; BridgeList::CopyData(&out.exits, exits); @@ -163,7 +176,10 @@ struct BridgeCFGraph return; auto found = parents.find(child); if(found == parents.end()) - parents[child] = std::unordered_set(std::initializer_list { parent }); + { + parents[child] = std::unordered_set(); + parents[child].insert(parent); + } else found->second.insert(parent); } diff --git a/xAnalyzer/pluginsdk/bridgelist.h b/xAnalyzer/pluginsdk/bridgelist.h index 619ce6e..d71d203 100644 --- a/xAnalyzer/pluginsdk/bridgelist.h +++ b/xAnalyzer/pluginsdk/bridgelist.h @@ -54,7 +54,7 @@ class BridgeList */ int Count() const { - if(_listInfo.size != _listInfo.count * sizeof(Type)) //make sure the user is using the correct type. + if(_listInfo.size != _listInfo.count * sizeof(Type)) //make sure the user is using the correct type. __debugbreak(); return _listInfo.count; } @@ -88,7 +88,7 @@ class BridgeList */ Type & operator[](size_t index) const { - if(index >= size_t(Count())) //make sure the out-of-bounds access is caught as soon as possible. + if(index >= size_t(Count())) //make sure the out-of-bounds access is caught as soon as possible. __debugbreak(); return Data()[index]; } diff --git a/xAnalyzer/pluginsdk/bridgemain.h b/xAnalyzer/pluginsdk/bridgemain.h index 62a46d4..76baab0 100644 --- a/xAnalyzer/pluginsdk/bridgemain.h +++ b/xAnalyzer/pluginsdk/bridgemain.h @@ -7,9 +7,6 @@ #include #endif -//list structure (and C++ wrapper) -#include "bridgelist.h" - //default structure alignments forced #ifdef _WIN64 #pragma pack(push, 16) @@ -59,6 +56,9 @@ BRIDGE_IMPEXP int BridgeGetDbgVersion(); } #endif +//list structure (and C++ wrapper) +#include "bridgelist.h" + #include "bridgegraph.h" #ifdef __cplusplus @@ -142,7 +142,8 @@ typedef enum LOOP_BEGIN, LOOP_MIDDLE, LOOP_ENTRY, - LOOP_END + LOOP_END, + LOOP_SINGLE } LOOPTYPE; //order by most important type last @@ -230,7 +231,14 @@ typedef enum DBG_ARGUMENT_ADD, // param1=FUNCTION* info, param2=unused DBG_ARGUMENT_DEL, // param1=FUNCTION* info, param2=unused DBG_GET_WATCH_LIST, // param1=ListOf(WATCHINFO), param2=unused - DBG_SELCHANGED // param1=hWindow, param2=VA + DBG_SELCHANGED, // param1=hWindow, param2=VA + DBG_GET_PROCESS_HANDLE, // param1=unused, param2=unused + DBG_GET_THREAD_HANDLE, // param1=unused, param2=unused + DBG_GET_PROCESS_ID, // param1=unused, param2=unused + DBG_GET_THREAD_ID, // param1=unused, param2=unused + DBG_GET_PEB_ADDRESS, // param1=DWORD ProcessId, param2=unused + DBG_GET_TEB_ADDRESS, // param1=DWORD ThreadId, param2=unused + DBG_ANALYZE_FUNCTION, // param1=BridgeCFGraphList* graph, param2=duint entry } DBGMSG; typedef enum @@ -450,6 +458,7 @@ typedef struct int depth; //IN duint start; //OUT duint end; //OUT + duint instrcount; //OUT } LOOP; #ifndef _NO_ADDRINFO @@ -852,7 +861,7 @@ BRIDGE_IMPEXP bool DbgWinEventGlobal(MSG* message); BRIDGE_IMPEXP bool DbgIsRunning(); BRIDGE_IMPEXP duint DbgGetTimeWastedCounter(); BRIDGE_IMPEXP ARGTYPE DbgGetArgTypeAt(duint addr); -BRIDGE_IMPEXP void* DbgGetEncodeTypeBuffer(duint addr); +BRIDGE_IMPEXP void* DbgGetEncodeTypeBuffer(duint addr, duint* size); BRIDGE_IMPEXP void DbgReleaseEncodeTypeBuffer(void* buffer); BRIDGE_IMPEXP ENCODETYPE DbgGetEncodeTypeAt(duint addr, duint size); BRIDGE_IMPEXP duint DbgGetEncodeSizeAt(duint addr, duint codesize); @@ -861,6 +870,13 @@ BRIDGE_IMPEXP void DbgDelEncodeTypeRange(duint start, duint end); BRIDGE_IMPEXP void DbgDelEncodeTypeSegment(duint start); BRIDGE_IMPEXP bool DbgGetWatchList(ListOf(WATCHINFO) list); BRIDGE_IMPEXP void DbgSelChanged(int hWindow, duint VA); +BRIDGE_IMPEXP HANDLE DbgGetProcessHandle(); +BRIDGE_IMPEXP HANDLE DbgGetThreadHandle(); +BRIDGE_IMPEXP DWORD DbgGetProcessId(); +BRIDGE_IMPEXP DWORD DbgGetThreadId(); +BRIDGE_IMPEXP duint DbgGetPebAddress(DWORD ProcessId); +BRIDGE_IMPEXP duint DbgGetTebAddress(DWORD ThreadId); +BRIDGE_IMPEXP bool DbgAnalyzeFunction(duint entry, BridgeCFGraphList* graph); //Gui defines #define GUI_PLUGIN_MENU 0 @@ -973,12 +989,24 @@ typedef enum GUI_MENU_SET_ENTRY_CHECKED, // param1=int hEntry, param2=bool checked GUI_ADD_INFO_LINE, // param1=const char* infoline, param2=unused GUI_PROCESS_EVENTS, // param1=unused, param2=unused + GUI_TYPE_ADDNODE, // param1=void* parent, param2=TYPEDESCRIPTOR* type + GUI_TYPE_CLEAR, // param1=unused, param2=unused + GUI_UPDATE_TYPE_WIDGET, // param1=unused, param2=unused + GUI_CLOSE_APPLICATION, // param1=unused, param2=unused + GUI_MENU_SET_VISIBLE, // param1=int hMenu, param2=bool visible + GUI_MENU_SET_ENTRY_VISIBLE, // param1=int hEntry, param2=bool visible + GUI_MENU_SET_NAME, // param1=int hMenu, param2=const char* name + GUI_MENU_SET_ENTRY_NAME, // param1=int hEntry, param2=const char* name + GUI_FLUSH_LOG, // param1=unused, param2=unused } GUIMSG; //GUI Typedefs +struct _TYPEDESCRIPTOR; + typedef void (*GUICALLBACK)(); typedef bool (*GUISCRIPTEXECUTE)(const char* text); typedef void (*GUISCRIPTCOMPLETER)(const char* text, char** entries, int* entryCount); +typedef bool (*TYPETOSTRING)(const struct _TYPEDESCRIPTOR* type, char* dest, size_t* destCount); //don't change destCount for final failure //GUI structures typedef struct @@ -1016,6 +1044,19 @@ typedef struct char className[MAX_STRING_SIZE]; } ACTIVEVIEW; +typedef struct _TYPEDESCRIPTOR +{ + bool expanded; //is the type node expanded? + bool reverse; //big endian? + const char* name; //type name (int b) + duint addr; //virtual address + duint offset; //offset to addr for the actual location + int id; //type id + int size; //sizeof(type) + TYPETOSTRING callback; //convert to string + void* userdata; //user data +} TYPEDESCRIPTOR; + //GUI functions //code page is utf8 BRIDGE_IMPEXP const char* GuiTranslateText(const char* Source); @@ -1050,7 +1091,7 @@ BRIDGE_IMPEXP int GuiReferenceGetRowCount(); BRIDGE_IMPEXP void GuiReferenceDeleteAllColumns(); BRIDGE_IMPEXP void GuiReferenceInitialize(const char* name); BRIDGE_IMPEXP void GuiReferenceSetCellContent(int row, int col, const char* str); -BRIDGE_IMPEXP const char* GuiReferenceGetCellContent(int row, int col); +BRIDGE_IMPEXP char* GuiReferenceGetCellContent(int row, int col); BRIDGE_IMPEXP void GuiReferenceReloadData(); BRIDGE_IMPEXP void GuiReferenceSetSingleSelection(int index, bool scroll); BRIDGE_IMPEXP void GuiReferenceSetProgress(int progress); @@ -1084,6 +1125,10 @@ BRIDGE_IMPEXP void GuiLoadSourceFile(const char* path, int line); BRIDGE_IMPEXP void GuiMenuSetIcon(int hMenu, const ICONDATA* icon); BRIDGE_IMPEXP void GuiMenuSetEntryIcon(int hEntry, const ICONDATA* icon); BRIDGE_IMPEXP void GuiMenuSetEntryChecked(int hEntry, bool checked); +BRIDGE_IMPEXP void GuiMenuSetVisible(int hMenu, bool visible); +BRIDGE_IMPEXP void GuiMenuSetEntryVisible(int hEntry, bool visible); +BRIDGE_IMPEXP void GuiMenuSetName(int hMenu, const char* name); +BRIDGE_IMPEXP void GuiMenuSetEntryName(int hEntry, const char* name); BRIDGE_IMPEXP void GuiShowCpu(); BRIDGE_IMPEXP void GuiAddQWidgetTab(void* qWidget); BRIDGE_IMPEXP void GuiShowQWidgetTab(void* qWidget); @@ -1116,6 +1161,11 @@ BRIDGE_IMPEXP void GuiSelectInMemoryMap(duint addr); BRIDGE_IMPEXP void GuiGetActiveView(ACTIVEVIEW* activeView); BRIDGE_IMPEXP void GuiAddInfoLine(const char* infoLine); BRIDGE_IMPEXP void GuiProcessEvents(); +BRIDGE_IMPEXP void* GuiTypeAddNode(void* parent, const TYPEDESCRIPTOR* type); +BRIDGE_IMPEXP bool GuiTypeClear(); +BRIDGE_IMPEXP void GuiUpdateTypeWidget(); +BRIDGE_IMPEXP void GuiCloseApplication(); +BRIDGE_IMPEXP void GuiFlushLog(); #ifdef __cplusplus } diff --git a/xAnalyzer/pluginsdk/capstone/arm64.h b/xAnalyzer/pluginsdk/capstone/arm64.h index 2a3021f..387990c 100644 --- a/xAnalyzer/pluginsdk/capstone/arm64.h +++ b/xAnalyzer/pluginsdk/capstone/arm64.h @@ -64,7 +64,7 @@ typedef enum arm64_cc } arm64_cc; //> System registers -typedef enum arm64_mrs_reg +typedef enum arm64_sysreg { //> System registers for MRS ARM64_SYSREG_INVALID = 0, diff --git a/xAnalyzer/pluginsdk/capstone/capstone.h b/xAnalyzer/pluginsdk/capstone/capstone.h index f969726..53f743d 100644 --- a/xAnalyzer/pluginsdk/capstone/capstone.h +++ b/xAnalyzer/pluginsdk/capstone/capstone.h @@ -2,7 +2,7 @@ #define CAPSTONE_ENGINE_H /* Capstone Disassembly Engine */ -/* By Nguyen Anh Quynh , 2013-2015 */ +/* By Nguyen Anh Quynh , 2013-2016 */ #ifdef __cplusplus extern "C" { @@ -53,7 +53,12 @@ extern "C" { // Version for bleeding edge code of the Github's "next" branch. // Use this if you want the absolutely latest developement code. // This version number will be bumped up whenever we have a new major change. -#define CS_NEXT_VERSION 3 +#define CS_NEXT_VERSION 4 + +// Capstone package version +#define CS_VERSION_MAJOR CS_API_MAJOR +#define CS_VERSION_MINOR CS_API_MINOR +#define CS_VERSION_EXTRA 0 // Macro to create combined version which can be compared to // result of cs_version() API. diff --git a/xAnalyzer/pluginsdk/capstone/m68k.h b/xAnalyzer/pluginsdk/capstone/m68k.h index f6548cf..b31f8c9 100644 --- a/xAnalyzer/pluginsdk/capstone/m68k.h +++ b/xAnalyzer/pluginsdk/capstone/m68k.h @@ -130,7 +130,7 @@ typedef struct m68k_op_mem m68k_reg in_base_reg; // indirect base register (or M68K_REG_INVALID if irrelevant) uint32_t in_disp; // indirect displacement uint32_t out_disp; // other displacement - uint16_t disp; // displacement value + int16_t disp; // displacement value uint8_t scale; // scale for index register uint8_t bitfield; // set to true if the two values below should be used uint8_t width; // used for bf* instructions diff --git a/xAnalyzer/pluginsdk/capstone/platform.h b/xAnalyzer/pluginsdk/capstone/platform.h index 074c8bf..8b3fe39 100644 --- a/xAnalyzer/pluginsdk/capstone/platform.h +++ b/xAnalyzer/pluginsdk/capstone/platform.h @@ -37,7 +37,7 @@ typedef unsigned char bool; #if defined(CAPSTONE_HAS_OSXKERNEL) || (defined(_MSC_VER) && (_MSC_VER <= 1700 || defined(_KERNEL_MODE))) // this system does not have inttypes.h -#if defined(_MSC_VER) && (_MSC_VER <= 1700 || defined(_KERNEL_MODE)) +#if defined(_MSC_VER) && (_MSC_VER < 1600 || defined(_KERNEL_MODE)) // this system does not have stdint.h typedef signed char int8_t; typedef signed short int16_t; @@ -95,6 +95,11 @@ typedef unsigned long long uint64_t; #define PRIX32 "X" #endif // defined(_MSC_VER) && _MSC_VER <= 1700 +#if defined(_MSC_VER) && _MSC_VER <= 1700 +// redefine functions from inttypes.h used in cstool +#define strtoull _strtoui64 +#endif + #define PRId64 __PRI_64_LENGTH_MODIFIER__ "d" #define PRIi64 __PRI_64_LENGTH_MODIFIER__ "i" #define PRIo64 __PRI_64_LENGTH_MODIFIER__ "o" diff --git a/xAnalyzer/pluginsdk/capstone/x86.h b/xAnalyzer/pluginsdk/capstone/x86.h index e11b815..931ef22 100644 --- a/xAnalyzer/pluginsdk/capstone/x86.h +++ b/xAnalyzer/pluginsdk/capstone/x86.h @@ -11,7 +11,9 @@ extern "C" { #include "platform.h" // Calculate relative address for X86-64, given cs_insn structure -#define X86_REL_ADDR(insn) (insn.address + insn.size + insn.detail->x86.disp) +#define X86_REL_ADDR(insn) (((insn).detail->x86.operands[0].type == X86_OP_IMM) \ + ? (uint64_t)((insn).detail->x86.operands[0].imm) \ + : (((insn).address + (insn).size) + (uint64_t)(insn).detail->x86.disp)) //> X86 registers typedef enum x86_reg diff --git a/xAnalyzer/pluginsdk/jansson/jansson_x64dbg.h b/xAnalyzer/pluginsdk/jansson/jansson_x64dbg.h index 4972a92..7266941 100644 --- a/xAnalyzer/pluginsdk/jansson/jansson_x64dbg.h +++ b/xAnalyzer/pluginsdk/jansson/jansson_x64dbg.h @@ -4,11 +4,7 @@ static JSON_INLINE json_t* json_hex(unsigned json_int_t value) { char hexvalue[20]; -#ifdef _WIN64 sprintf(hexvalue, "0x%llX", value); -#else //x64 - sprintf(hexvalue, "0x%X", value); -#endif //_WIN64 return json_string(hexvalue); } @@ -20,10 +16,6 @@ unsigned json_int_t json_hex_value(const json_t* hex) hexvalue = json_string_value(hex); if(!hexvalue) return 0; -#ifdef _WIN64 sscanf(hexvalue, "0x%llX", &ret); -#else //x64 - sscanf(hexvalue, "0x%X", &ret); -#endif //_WIN64 return ret; } \ No newline at end of file diff --git a/xAnalyzer/pluginsdk/x32bridge.lib b/xAnalyzer/pluginsdk/x32bridge.lib index 4f08073..6632705 100644 Binary files a/xAnalyzer/pluginsdk/x32bridge.lib and b/xAnalyzer/pluginsdk/x32bridge.lib differ diff --git a/xAnalyzer/pluginsdk/x32dbg.lib b/xAnalyzer/pluginsdk/x32dbg.lib index 8976a32..e442d19 100644 Binary files a/xAnalyzer/pluginsdk/x32dbg.lib and b/xAnalyzer/pluginsdk/x32dbg.lib differ diff --git a/xAnalyzer/pluginsdk/x64bridge.lib b/xAnalyzer/pluginsdk/x64bridge.lib index 8749a35..a1fb87f 100644 Binary files a/xAnalyzer/pluginsdk/x64bridge.lib and b/xAnalyzer/pluginsdk/x64bridge.lib differ diff --git a/xAnalyzer/pluginsdk/x64dbg.lib b/xAnalyzer/pluginsdk/x64dbg.lib index 2eb3b3d..6bd420e 100644 Binary files a/xAnalyzer/pluginsdk/x64dbg.lib and b/xAnalyzer/pluginsdk/x64dbg.lib differ diff --git a/xAnalyzer/pluginsdk/yara/yara/compiler.h b/xAnalyzer/pluginsdk/yara/yara/compiler.h index 502f19d..b3f57b2 100644 --- a/xAnalyzer/pluginsdk/yara/yara/compiler.h +++ b/xAnalyzer/pluginsdk/yara/yara/compiler.h @@ -124,7 +124,7 @@ typedef struct _YR_COMPILER compiler->last_error_extra_info, \ info, \ sizeof(compiler->last_error_extra_info)); \ - + #define yr_compiler_set_error_extra_info_fmt(compiler, fmt, ...) \ snprintf( \ diff --git a/xAnalyzer/pluginsdk/yara/yara/modules.h b/xAnalyzer/pluginsdk/yara/yara/modules.h index 5928d63..89748a9 100644 --- a/xAnalyzer/pluginsdk/yara/yara/modules.h +++ b/xAnalyzer/pluginsdk/yara/yara/modules.h @@ -295,7 +295,7 @@ SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. for (block = iterator->first(iterator); \ block != NULL; \ block = iterator->next(iterator)) \ - + #define first_memory_block(context) \ (context)->iterator->first((context)->iterator) diff --git a/xAnalyzer/xanalyzer.cpp b/xAnalyzer/xanalyzer.cpp index 52476b4..14698a6 100644 --- a/xAnalyzer/xanalyzer.cpp +++ b/xAnalyzer/xanalyzer.cpp @@ -17,6 +17,7 @@ using namespace std; using namespace Script; using namespace Gui; +// global vars // ------------------------------------------------------------------------------------ CONFIG conf; // confg file struct PROCSUMMARY procSummary; // execution summary struct @@ -42,6 +43,42 @@ unordered_map apiFiles; // map of main def files unordered_map apiHFiles; // map of headers def files // ------------------------------------------------------------------------------------ +// ------------------------------------------------------------------------------------ +// Execute when a windows event is fired +// ------------------------------------------------------------------------------------ +// void OnWinEvent(PLUG_CB_WINEVENT *info) +// { +// auto msg = info->message; +// if (msg->message == WM_KEYDOWN && info->result) +// { +// switch (msg->wParam) +// { +// case 'X': +// case 'x': +// if ((GetAsyncKeyState(VK_LSHIFT) & 1) && (GetAsyncKeyState(VK_LCONTROL) & 1)) // analyze selection +// { +// if (IsMultipleSelection()) +// { +// selectionAnal = true; +// DbgCmdExec("xanalyze"); +// } +// } +// else if ((GetAsyncKeyState(VK_MENU) & 1) && (GetAsyncKeyState(VK_LCONTROL) & 1)) // analyze entire exe +// { +// completeAnal = true; +// DbgCmdExec("xanalyze"); +// } +// else if (GetAsyncKeyState(VK_LCONTROL) & 1) // analyze function +// { +// singleFunctionAnal = true; +// DbgCmdExec("xanalyze"); +// } +// break; +// default:break; +// } +// } +// } + // ------------------------------------------------------------------------------------ // Executed when a BP is hitted // ------------------------------------------------------------------------------------ @@ -55,7 +92,7 @@ void OnBreakpoint(PLUG_CB_BREAKPOINT* bpInfo) if (conf.auto_analysis) { if (!FileDbExists()) - DoExtendedAnalysis(); + DbgCmdExec("xanal exe"); else { GuiAddLogMessage("[xAnalyzer]: Analysis retrieved from data base\r\n"); @@ -70,59 +107,105 @@ void OnBreakpoint(PLUG_CB_BREAKPOINT* bpInfo) } } -// ------------------------------------------------------------------------------------ -// Execute when a windows event is fired -// ------------------------------------------------------------------------------------ -void OnWinEvent(PLUG_CB_WINEVENT *info) +//------------------------------------------------------------------------------------ +// Extended analysis caller command "xanal" (this executes in a new thread) +// This handles the different arguments for the different types of analysis +//------------------------------------------------------------------------------------ +bool cbExtendedAnalysis(int argc, char* argv[]) { - //auto msg = info->message; - //if (msg->message == WM_KEYDOWN && info->result) - //{ - // switch (msg->wParam) - // { - // case 'X': - // case 'x': - // if ((GetAsyncKeyState(VK_LSHIFT) & 1) && (GetAsyncKeyState(VK_LCONTROL) & 1)) // analyze selection - // { - // if (IsMultipleSelection()) - // { - // selectionAnal = true; - // DbgCmdExec("xanalyze"); - // } - // } - // else if ((GetAsyncKeyState(VK_MENU) & 1) && (GetAsyncKeyState(VK_LCONTROL) & 1)) // analyze entire exe - // { - // completeAnal = true; - // DbgCmdExec("xanalyze"); - // } - // else if (GetAsyncKeyState(VK_LCONTROL) & 1) // analyze function - // { - // singleFunctionAnal = true; - // DbgCmdExec("xanalyze"); - // } - // break; - // default:break; - // } - //} + if (argc < 2) + return false; + + if (strcmp(argv[1], "selection") == 0) // cmd "xanal selection" + { + if (IsMultipleSelection()) + { + selectionAnal = true; + DoExtendedAnalysis(); + return true; + } + else + return false; + } + + if (strcmp(argv[1], "function") == 0) // cmd "xanal function" + { + singleFunctionAnal = true; + DoExtendedAnalysis(); + return true; + } + + if (strcmp(argv[1], "exe") == 0) // cmd "xanal exe" + { + completeAnal = true; + DoExtendedAnalysis(); + return true; + } + + if (strcmp(argv[1], "help") == 0) // cmd "xanal help" + { + DisplayHelp(); + GuiAddStatusBarMessage("[xAnalyzer]: Check the log window in order to get an extended help text"); + } + + return true; } - //------------------------------------------------------------------------------------ - //Extended analysis caller (this executes in a new thread) - //------------------------------------------------------------------------------------ - bool cbExtendedAnalysis(int argc, char* argv[]) - { - DoExtendedAnalysis(); - return true; - } - - //------------------------------------------------------------------------------------ - //Extended analysis remove caller (this executes in a new thread) - //------------------------------------------------------------------------------------ - bool cbExtendedAnalysisRemove(int argc, char* argv[]) - { - RemoveAnalysis(); +//------------------------------------------------------------------------------------ +//Extended analysis remove caller command "xanalremove" (this executes in a new thread) +// This handles the different arguments for the different types of analysis removal +//------------------------------------------------------------------------------------ +bool cbExtendedAnalysisRemove(int argc, char* argv[]) +{ + if (argc < 2) + return false; + + if (strcmp(argv[1], "selection") == 0) // cmd "xanalremove selection" + { + if (IsMultipleSelection()) + { + selectionAnal = true; + RemoveAnalysis(); + return true; + } + else + return false; + } + + if (strcmp(argv[1], "function") == 0) // cmd "xanalremove function" + { + singleFunctionAnal = true; + RemoveAnalysis(); + return true; + } + + if (strcmp(argv[1], "exe") == 0) // cmd "xanalremove exe" + { + completeAnal = true; + RemoveAnalysis(); + return true; + } + return true; - } +} + +// ------------------------------------------------------------------------------------ +// Removes the analysis in the given case +// ------------------------------------------------------------------------------------ +void RemoveAnalysis() +{ + duint start = 0; + duint end = 0; + + GuiAddLogMessage("[xAnalyzer]: Removing analysis, please wait...\r\n"); + DbgGetEntryExitPoints(&start, &end); + if (start != 0 && end != 0) + ClearPrevAnalysis(start, end); + + GuiAddLogMessage("[xAnalyzer]: Analysis removed successfully!\r\n"); + GuiAddStatusBarMessage("[xAnalyzer]: Analysis removed successfully!\r\n"); + ResetGlobals(); +} // ------------------------------------------------------------------------------------ // Extended analysis @@ -446,7 +529,6 @@ void DbgGetEntryExitPoints(duint *lpdwEntry, duint *lpdwExit) char cmd[50] = ""; DbgCmdExecDirect("analx"); // these are NEEDED references for detecting functions boundaries - GetFunctionAnalysisRange(lpdwEntry, lpdwExit, Disassembly::SelectionGetStart()); // Call a second time these functions for the next main analysis @@ -805,7 +887,15 @@ bool Strip_x64dbg_calls(LPSTR lpszCallText) index_cpy++; } - lpszAPIFunction[index_cpy] = 0x00; + // check if the current call has a params definition into parenthesis + char *funct_parenthesis = strchr(lpszAPIFunction, '('); + if (funct_parenthesis == NULL) + lpszAPIFunction[index_cpy] = 0x00; + else + { + lpszAPIFunction[index_cpy] = ')'; + lpszAPIFunction[index_cpy + 1] = 0x00; + } // in case of undefined: CALL [0x007FF154] strcpy_s(funct, MAX_COMMENT_SIZE, lpszAPIFunction); @@ -1287,7 +1377,6 @@ bool IsHeaderConstant(const char *CommentString, char *szComment, char *inst_sou fileConst = stoul(value.c_str(), 0, 16); else fileConst = stoul(value.c_str()); - //sscanf_s(value.c_str(), "%li", &fileConst); // if is Enum search the exact same values if (htype == "Enum") @@ -1427,6 +1516,7 @@ bool SearchApiFileForDefinition(LPSTR lpszApiModule, LPSTR lpszApiDefinition, bo if (apiDefPointer != apiFiles.end()) { Utf8Ini *defApiFile = apiDefPointer->second; + // lookup for the original name (A/W) string apiFunction = defApiFile->GetValue(szOriginalCharsetAPIFunction, "@"); if (apiFunction == "") @@ -1438,6 +1528,17 @@ bool SearchApiFileForDefinition(LPSTR lpszApiModule, LPSTR lpszApiDefinition, bo // check if key is found if (!apiFunction.empty()) { + // check if definition lies in another .api file + string sourceModule = defApiFile->GetValue(apiFunction, "SourceModule"); + if (sourceModule.length() != 0) + { + size_t pos = sourceModule.find("."); + string searchModule = sourceModule.substr(0, pos); + apiDefPointer = apiFiles.find(searchModule); // saves pointer to correct def filename + if (apiDefPointer != apiFiles.end()) + strcpy_s(lpszApiModule, MAX_MODULE_SIZE, apiDefPointer->first.c_str()); // save the correct file definition name + } + strcpy_s(lpszApiDefinition, MAX_COMMENT_SIZE, apiFunction.c_str()); success = true; } @@ -1459,9 +1560,23 @@ bool SearchApiFileForDefinition(LPSTR lpszApiModule, LPSTR lpszApiDefinition, bo // check if key is found if (!apiFunction.empty()) { - apiDefPointer = apiFiles.find(api.first); // saves pointer to correct def filename + // check if definition lies in another .api file + string sourceModule = defApiFile->GetValue(apiFunction, "SourceModule"); + if (sourceModule.length() != 0) + { + size_t pos = sourceModule.find("."); + string searchModule = sourceModule.substr(0, pos); + apiDefPointer = apiFiles.find(searchModule); // saves pointer to correct def filename + if (apiDefPointer != apiFiles.end()) + strcpy_s(lpszApiModule, MAX_MODULE_SIZE, apiDefPointer->first.c_str()); // save the correct file definition name + } + else + { + apiDefPointer = apiFiles.find(api.first); // saves pointer to correct def filename + strcpy_s(lpszApiModule, MAX_MODULE_SIZE, api.first.c_str()); // save the correct file definition name + } + strcpy_s(lpszApiDefinition, MAX_COMMENT_SIZE, apiFunction.c_str()); // save the API definition - strcpy_s(lpszApiModule, MAX_MODULE_SIZE, api.first.c_str()); // save the correct file definition name success = true; break; } @@ -1625,7 +1740,7 @@ void DoInitialAnalysis() // ------------------------------------------------------------------------------------ // Clear previous analysis information // ------------------------------------------------------------------------------------ -void ClearPrevAnalysis(const duint dwEntry, const duint dwExit, bool clear_user_comments) +void ClearPrevAnalysis(const duint dwEntry, const duint dwExit) { // clear if (completeAnal) @@ -1633,12 +1748,16 @@ void ClearPrevAnalysis(const duint dwEntry, const duint dwExit, bool clear_user_ else ClearLoopsRange(dwEntry, dwExit); // clear prev loops in the given range - // ask if clear user comments as well - if (clear_user_comments) + // check what prev data to clear + if (conf.clear_usercomments) DbgClearCommentRange(dwEntry, dwExit + 1); + if (conf.clear_userlabels) + DbgClearLabelRange(dwEntry, dwExit + 1); + if (conf.clear_autocomments) + DbgClearAutoCommentRange(dwEntry, dwExit); // clear autocomments (not user regular comments) + if (conf.clear_autolabels) + DbgClearAutoLabelRange(dwEntry, dwExit); // clear autolabels (not user regular labels) - DbgClearAutoCommentRange(dwEntry, dwExit); // clear ONLY autocomments (not user regular comments) - DbgClearAutoLabelRange(dwEntry, dwExit); // clear ONLY labels (not user regular labels) Argument::DeleteRange(dwEntry, dwExit, true); // clear all arguments } @@ -2008,20 +2127,11 @@ void SetFunctionLoops() // ------------------------------------------------------------------------------------ void GetModuleNameSearch(char *szAPIModuleName, char *szAPIModuleNameSearch) { - char main_mod[MAX_MODULE_SIZE] = ""; - // check for vc dll version "msvcxxx" and runtimes "vcruntime, ucrtbase" if (strncmp(szAPIModuleName, vc, 5) == 0 || strncmp(szAPIModuleName, vcrt, strlen(vcrt)) == 0 || strncmp(szAPIModuleName, ucrt, strlen(ucrt)) == 0) strcpy_s(szAPIModuleNameSearch, MAX_MODULE_SIZE, vc); - else if (strcmp(szAPIModuleName, "kernelbase") == 0) - { - // if the module is kernelbase.dll the it'll be searched recursively - // throughout all definition files - Module::GetMainModuleName(main_mod); - strcpy_s(szAPIModuleNameSearch, MAX_MODULE_SIZE, main_mod); - } else strcpy_s(szAPIModuleNameSearch, MAX_MODULE_SIZE, szAPIModuleName); } @@ -2060,6 +2170,10 @@ void LoadConfig() conf.undef_funtion_analysis = iniReader.ReadBoolean("settings", "analysis_undefunctions", false); conf.auto_analysis = iniReader.ReadBoolean("settings", "analysis_auto", false); conf.extended_analysis = iniReader.ReadBoolean("settings", "analysis_extended", false); + conf.clear_usercomments = iniReader.ReadBoolean("settings", "clear_usercomments", false); + conf.clear_userlabels = iniReader.ReadBoolean("settings", "clear_userlabels", false); + conf.clear_autocomments = iniReader.ReadBoolean("settings", "clear_autocomments", false); + conf.clear_autolabels = iniReader.ReadBoolean("settings", "clear_autolabels", false); } // ------------------------------------------------------------------------------------ @@ -2071,10 +2185,18 @@ void SaveConfig() iniWriter.WriteBoolean("settings", "analysis_extended", conf.extended_analysis); iniWriter.WriteBoolean("settings", "analysis_undefunctions", conf.undef_funtion_analysis); iniWriter.WriteBoolean("settings", "analysis_auto", conf.auto_analysis); + iniWriter.WriteBoolean("settings", "clear_usercomments", conf.clear_usercomments); + iniWriter.WriteBoolean("settings", "clear_userlabels", conf.clear_userlabels); + iniWriter.WriteBoolean("settings", "clear_autocomments", conf.clear_autocomments); + iniWriter.WriteBoolean("settings", "clear_autolabels", conf.clear_autolabels); _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_EXT, conf.extended_analysis); _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_UNDEF, conf.undef_funtion_analysis); _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_AUTO, conf.auto_analysis); + _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_CLEAR_CMTS, conf.clear_usercomments); + _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_CLEAR_LBLS, conf.clear_userlabels); + _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_CLEAR_ACMTS, conf.clear_autocomments); + _plugin_menuentrysetchecked(pluginHandle, MENU_ANALYZE_CLEAR_ALBLS, conf.clear_autolabels); } // ------------------------------------------------------------------------------------ @@ -2210,24 +2332,6 @@ bool IsMultipleSelection() return (start != end); } -// ------------------------------------------------------------------------------------ -// Removes the analysis in the given case -// ------------------------------------------------------------------------------------ -void RemoveAnalysis() -{ - duint start = 0; - duint end = 0; - - DbgGetEntryExitPoints(&start, &end); - if (start != 0 && end != 0) - { - bool clear_user_comments = (MessageBox(hwndDlg, "Would you like to also clear all the comments in the given range?", - "Clear Comments!", MB_ICONWARNING + MB_YESNO) == IDYES); - ClearPrevAnalysis(start, end, clear_user_comments); - } - ResetGlobals(); -} - // ------------------------------------------------------------------------------------ // Removes the analysis in the given case // ------------------------------------------------------------------------------------ @@ -2270,4 +2374,22 @@ void PrintExecLogSummary() procSummary.totalLabelsSet); GuiAddLogMessage(summaryMsg); +} + +//------------------------------------------------------------------------------------ +// This command displays a brief commands help for the plugin usage +//------------------------------------------------------------------------------------ +void DisplayHelp() +{ + const char *pluginHelp = "\n[xAnalyzer]: Available Commands:\r\n" + "--------------------------------\r\n" + "xanal selection : Performs a selection analysis\r\n" + "xanal function : Performs a function analysis\r\n" + "xanal exe : Performs an entire executable analysis\r\n" + "xanalremove selection : Removes a previous selection analysis\r\n" + "xanalremove function : Removes a previous function analysis\r\n" + "xanalremove exe : Removes a previous entire executable analysis\r\n" + "xanal help : Brings up this help text\r\n\n"; + + GuiAddLogMessage(pluginHelp); } \ No newline at end of file diff --git a/xAnalyzer/xanalyzer.h b/xAnalyzer/xanalyzer.h index e839219..06aa460 100644 --- a/xAnalyzer/xanalyzer.h +++ b/xAnalyzer/xanalyzer.h @@ -31,6 +31,10 @@ typedef struct stCONFIG{ bool undef_funtion_analysis; bool auto_analysis; bool extended_analysis; + bool clear_usercomments; + bool clear_autocomments; + bool clear_userlabels; + bool clear_autolabels; }CONFIG; typedef struct stPROCSUMMARY{ @@ -55,7 +59,7 @@ extern stack IS; void AnalyzeBytesRange(duint dwEntry, duint dwExit); void OnBreakpoint(PLUG_CB_BREAKPOINT* bpInfo); -void OnWinEvent(PLUG_CB_WINEVENT *info); +//void OnWinEvent(PLUG_CB_WINEVENT *info); void DbgGetEntryExitPoints(duint *lpdwEntry, duint *lpdwExit); void GetExtendedAnalysisRange(duint *lpdwEntry, duint *lpdwExit, duint entry, char *modname, Module::ModuleSectionInfo *modInfo); void GetRegularAnalysisRange(duint *lpdwEntry, duint *lpdwExit, char *modname); @@ -103,6 +107,7 @@ void GetArgument(duint CurrentParam, vector &arguments, INSTR void IsLoopJump(BASIC_INSTRUCTION_INFO *bii, duint CurrentAddress); void SetFunctionLoops(); bool FileDbExists(); +void DisplayHelp(); void LoadConfig(); void SaveConfig(); bool LoadDefinitionFiles(string &folder, string &faultyFile, int &errorLine); @@ -110,7 +115,7 @@ bool LoadApiFiles(unordered_map *filesMap, char *szAllFiles, s void RemoveAnalysis(); void ResetGlobals(); void ClearLoopsRange(const duint start, const duint end, duint depth = 0); -void ClearPrevAnalysis(const duint start, const duint end, bool clear_user_comments = false); +void ClearPrevAnalysis(const duint start, const duint end); void GetModuleNameSearch(char *szAPIModuleName, char *szAPIModuleNameSearch); #ifdef _WIN64 bool IsArgumentRegister(const char *destination);