3c59df7e98
- Removed oldshell version of `t` (types) commands - Removed `tk` command because types storage switched to the hashtable - Added `tfc` command to show the calling convention of the function or set it - Added `tsl` (RZ_OUTPUT_MODE_LONG) to show structure members' sizes and offsets - Added `tul` (RZ_OUTPUT_MODE_LONG) to show union members' sizes - Switched the types storage to the hashtable instead of SDB - Added load and export from/to SDB for standard type libraries and serialization for Projects - Changed all `char *type` occurences to the proper `RzType` - Added `RzCallable` type for the function/class method types - Changed all function types API to use the `RzCallable` API - Switched the function types (`RzCallable`) storage to the hashtable instead of SDB - Added a connection between `RzAnalysisFunction` and `RzCallable` - `rz_analysis_function_derive_type()` API function to derive new `RzCallable` type from the `RzAnalysisFunction` even if it doesn't exist in the RzTypeDB. - Moved type links to the RzAnalysis where they belong - Removed TCC and MPC-based parsers - Added Tree-Sitter-based parser for C grammar (see `librz/type/parser/*`) - Reworked type databases in `librz/analysis/d/` to be consistent with C standard, libc, platform-specific definitions - Switched the type links from `char *` to `RzType` - Switched the type links from SDB to the hashtable - Added concept of the "type paths", e.g. `a.b[20].c` where `b` is a member of `a` (`a` is either structure or a union) and `c` is a member of `b`, and `b` is an array where we take 20-th element. - Added concept of the typeclasses (a bit similar to Haskell) for numerical types: `None` (the most generic one), `Num` (includes `Integral` and `Floating`), `Integral` (includes `Signed Integral` and `Unsigned Integral`), `Floating`. - Added concept of type equality (`rz_types_equal(a, b)` API function) - Added Doxygen documentation to every API function in the `librz/type/*`. - Updated the project format from **V2** to **V3**, added migration.
878 lines
37 KiB
Text
878 lines
37 KiB
Text
### securitybaseapi.h ###
|
|
|
|
AccessCheck=func
|
|
func.AccessCheck.args=8
|
|
func.AccessCheck.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.AccessCheck.arg.1=HANDLE,ClientToken
|
|
func.AccessCheck.arg.2=DWORD,DesiredAccess
|
|
func.AccessCheck.arg.3=PGENERIC_MAPPING,GenericMapping
|
|
func.AccessCheck.arg.4=PPRIVILEGE_SET,PrivilegeSet
|
|
func.AccessCheck.arg.5=LPDWORD,PrivilegeSetLength
|
|
func.AccessCheck.arg.6=LPDWORD,GrantedAccess
|
|
func.AccessCheck.arg.7=LPBOOL,AccessStatus
|
|
func.AccessCheck.ret=BOOL
|
|
|
|
AccessCheckAndAuditAlarmW=func
|
|
func.AccessCheckAndAuditAlarmW.args=11
|
|
func.AccessCheckAndAuditAlarmW.arg.0=LPCWSTR,SubsystemName
|
|
func.AccessCheckAndAuditAlarmW.arg.1=LPVOID,HandleId
|
|
func.AccessCheckAndAuditAlarmW.arg.2=LPWSTR,ObjectTypeName
|
|
func.AccessCheckAndAuditAlarmW.arg.3=LPWSTR,ObjectName
|
|
func.AccessCheckAndAuditAlarmW.arg.4=PSECURITY_DESCRIPTOR,SecurityDescriptor
|
|
func.AccessCheckAndAuditAlarmW.arg.5=DWORD,DesiredAccess
|
|
func.AccessCheckAndAuditAlarmW.arg.6=PGENERIC_MAPPING,GenericMapping
|
|
func.AccessCheckAndAuditAlarmW.arg.7=BOOL,ObjectCreation
|
|
func.AccessCheckAndAuditAlarmW.arg.8=LPDWORD,GrantedAccess
|
|
func.AccessCheckAndAuditAlarmW.arg.9=LPBOOL,AccessStatus
|
|
func.AccessCheckAndAuditAlarmW.arg.10=LPBOOL,pfGenerateOnClose
|
|
func.AccessCheckAndAuditAlarmW.ret=BOOL
|
|
|
|
AccessCheckByType=func
|
|
func.AccessCheckByType.args=11
|
|
func.AccessCheckByType.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.AccessCheckByType.arg.1=PSID,PrincipalSelfSid
|
|
func.AccessCheckByType.arg.2=HANDLE,ClientToken
|
|
func.AccessCheckByType.arg.3=DWORD,DesiredAccess
|
|
func.AccessCheckByType.arg.4=POBJECT_TYPE_LIST,ObjectTypeList
|
|
func.AccessCheckByType.arg.5=DWORD,ObjectTypeListLength
|
|
func.AccessCheckByType.arg.6=PGENERIC_MAPPING,GenericMapping
|
|
func.AccessCheckByType.arg.7=PPRIVILEGE_SET,PrivilegeSet
|
|
func.AccessCheckByType.arg.8=LPDWORD,PrivilegeSetLength
|
|
func.AccessCheckByType.arg.9=LPDWORD,GrantedAccess
|
|
func.AccessCheckByType.arg.10=LPBOOL,AccessStatus
|
|
func.AccessCheckByType.ret=BOOL
|
|
|
|
AccessCheckByTypeAndAuditAlarmW=func
|
|
func.AccessCheckByTypeAndAuditAlarmW.args=16
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.0=LPCWSTR,SubsystemName
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.1=LPVOID,HandleId
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.2=LPCWSTR,ObjectTypeName
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.3=LPCWSTR,ObjectName
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.4=PSECURITY_DESCRIPTOR,SecurityDescriptor
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.5=PSID,PrincipalSelfSid
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.6=DWORD,DesiredAccess
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.7=AUDIT_EVENT_TYPE,AuditType
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.8=DWORD,Flags
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.9=POBJECT_TYPE_LIST,ObjectTypeList
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.10=DWORD,ObjectTypeListLength
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.11=PGENERIC_MAPPING,GenericMapping
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.12=BOOL,ObjectCreation
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.13=LPDWORD,GrantedAccess
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.14=LPBOOL,AccessStatus
|
|
func.AccessCheckByTypeAndAuditAlarmW.arg.15=LPBOOL,pfGenerateOnClose
|
|
func.AccessCheckByTypeAndAuditAlarmW.ret=BOOL
|
|
|
|
AccessCheckByTypeResultList=func
|
|
func.AccessCheckByTypeResultList.args=11
|
|
func.AccessCheckByTypeResultList.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.AccessCheckByTypeResultList.arg.1=PSID,PrincipalSelfSid
|
|
func.AccessCheckByTypeResultList.arg.2=HANDLE,ClientToken
|
|
func.AccessCheckByTypeResultList.arg.3=DWORD,DesiredAccess
|
|
func.AccessCheckByTypeResultList.arg.4=POBJECT_TYPE_LIST,ObjectTypeList
|
|
func.AccessCheckByTypeResultList.arg.5=DWORD,ObjectTypeListLength
|
|
func.AccessCheckByTypeResultList.arg.6=PGENERIC_MAPPING,GenericMapping
|
|
func.AccessCheckByTypeResultList.arg.7=PPRIVILEGE_SET,PrivilegeSet
|
|
func.AccessCheckByTypeResultList.arg.8=LPDWORD,PrivilegeSetLength
|
|
func.AccessCheckByTypeResultList.arg.9=LPDWORD,GrantedAccessList
|
|
func.AccessCheckByTypeResultList.arg.10=LPDWORD,AccessStatusList
|
|
func.AccessCheckByTypeResultList.ret=BOOL
|
|
|
|
AccessCheckByTypeResultListAndAuditAlarmByHandleW=func
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.args=17
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.0=LPCWSTR,SubsystemName
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.1=LPVOID,HandleId
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.2=HANDLE,ClientToken
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.3=LPCWSTR,ObjectTypeName
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.4=LPCWSTR,ObjectName
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.5=PSECURITY_DESCRIPTOR,SecurityDescriptor
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.6=PSID,PrincipalSelfSid
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.7=DWORD,DesiredAccess
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.8=AUDIT_EVENT_TYPE,AuditType
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.9=DWORD,Flags
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.10=POBJECT_TYPE_LIST,ObjectTypeList
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.11=DWORD,ObjectTypeListLength
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.12=PGENERIC_MAPPING,GenericMapping
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.13=BOOL,ObjectCreation
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.14=LPDWORD,GrantedAccessList
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.15=LPDWORD,AccessStatusList
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.arg.16=LPBOOL,pfGenerateOnClose
|
|
func.AccessCheckByTypeResultListAndAuditAlarmByHandleW.ret=BOOL
|
|
|
|
AccessCheckByTypeResultListAndAuditAlarmW=func
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.args=16
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.0=LPCWSTR,SubsystemName
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.1=LPVOID,HandleId
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.2=LPCWSTR,ObjectTypeName
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.3=LPCWSTR,ObjectName
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.4=PSECURITY_DESCRIPTOR,SecurityDescriptor
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.5=PSID,PrincipalSelfSid
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.6=DWORD,DesiredAccess
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.7=AUDIT_EVENT_TYPE,AuditType
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.8=DWORD,Flags
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.9=POBJECT_TYPE_LIST,ObjectTypeList
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.10=DWORD,ObjectTypeListLength
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.11=PGENERIC_MAPPING,GenericMapping
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.12=BOOL,ObjectCreation
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.13=LPDWORD,GrantedAccessList
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.14=LPDWORD,AccessStatusList
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.arg.15=LPBOOL,pfGenerateOnClose
|
|
func.AccessCheckByTypeResultListAndAuditAlarmW.ret=BOOL
|
|
|
|
AddAccessAllowedAce=func
|
|
func.AddAccessAllowedAce.args=4
|
|
func.AddAccessAllowedAce.arg.0=PACL,pAcl
|
|
func.AddAccessAllowedAce.arg.1=DWORD,dwAceRevision
|
|
func.AddAccessAllowedAce.arg.2=DWORD,AccessMask
|
|
func.AddAccessAllowedAce.arg.3=PSID,pSid
|
|
func.AddAccessAllowedAce.ret=BOOL
|
|
|
|
AddAccessAllowedAceEx=func
|
|
func.AddAccessAllowedAceEx.args=5
|
|
func.AddAccessAllowedAceEx.arg.0=PACL,pAcl
|
|
func.AddAccessAllowedAceEx.arg.1=DWORD,dwAceRevision
|
|
func.AddAccessAllowedAceEx.arg.2=DWORD,AceFlags
|
|
func.AddAccessAllowedAceEx.arg.3=DWORD,AccessMask
|
|
func.AddAccessAllowedAceEx.arg.4=PSID,pSid
|
|
func.AddAccessAllowedAceEx.ret=BOOL
|
|
|
|
AddAccessAllowedObjectAce=func
|
|
func.AddAccessAllowedObjectAce.args=7
|
|
func.AddAccessAllowedObjectAce.arg.0=PACL,pAcl
|
|
func.AddAccessAllowedObjectAce.arg.1=DWORD,dwAceRevision
|
|
func.AddAccessAllowedObjectAce.arg.2=DWORD,AceFlags
|
|
func.AddAccessAllowedObjectAce.arg.3=DWORD,AccessMask
|
|
func.AddAccessAllowedObjectAce.arg.4=GUID *,ObjectTypeGuid
|
|
func.AddAccessAllowedObjectAce.arg.5=GUID *,InheritedObjectTypeGuid
|
|
func.AddAccessAllowedObjectAce.arg.6=PSID,pSid
|
|
func.AddAccessAllowedObjectAce.ret=BOOL
|
|
|
|
AddAccessDeniedAce=func
|
|
func.AddAccessDeniedAce.args=4
|
|
func.AddAccessDeniedAce.arg.0=PACL,pAcl
|
|
func.AddAccessDeniedAce.arg.1=DWORD,dwAceRevision
|
|
func.AddAccessDeniedAce.arg.2=DWORD,AccessMask
|
|
func.AddAccessDeniedAce.arg.3=PSID,pSid
|
|
func.AddAccessDeniedAce.ret=BOOL
|
|
|
|
AddAccessDeniedAceEx=func
|
|
func.AddAccessDeniedAceEx.args=5
|
|
func.AddAccessDeniedAceEx.arg.0=PACL,pAcl
|
|
func.AddAccessDeniedAceEx.arg.1=DWORD,dwAceRevision
|
|
func.AddAccessDeniedAceEx.arg.2=DWORD,AceFlags
|
|
func.AddAccessDeniedAceEx.arg.3=DWORD,AccessMask
|
|
func.AddAccessDeniedAceEx.arg.4=PSID,pSid
|
|
func.AddAccessDeniedAceEx.ret=BOOL
|
|
|
|
AddAccessDeniedObjectAce=func
|
|
func.AddAccessDeniedObjectAce.args=7
|
|
func.AddAccessDeniedObjectAce.arg.0=PACL,pAcl
|
|
func.AddAccessDeniedObjectAce.arg.1=DWORD,dwAceRevision
|
|
func.AddAccessDeniedObjectAce.arg.2=DWORD,AceFlags
|
|
func.AddAccessDeniedObjectAce.arg.3=DWORD,AccessMask
|
|
func.AddAccessDeniedObjectAce.arg.4=GUID *,ObjectTypeGuid
|
|
func.AddAccessDeniedObjectAce.arg.5=GUID *,InheritedObjectTypeGuid
|
|
func.AddAccessDeniedObjectAce.arg.6=PSID,pSid
|
|
func.AddAccessDeniedObjectAce.ret=BOOL
|
|
|
|
AddAce=func
|
|
func.AddAce.args=5
|
|
func.AddAce.arg.0=PACL,pAcl
|
|
func.AddAce.arg.1=DWORD,dwAceRevision
|
|
func.AddAce.arg.2=DWORD,dwStartingAceIndex
|
|
func.AddAce.arg.3=LPVOID,pAceList
|
|
func.AddAce.arg.4=DWORD,nAceListLength
|
|
func.AddAce.ret=BOOL
|
|
|
|
AddAuditAccessAce=func
|
|
func.AddAuditAccessAce.args=6
|
|
func.AddAuditAccessAce.arg.0=PACL,pAcl
|
|
func.AddAuditAccessAce.arg.1=DWORD,dwAceRevision
|
|
func.AddAuditAccessAce.arg.2=DWORD,dwAccessMask
|
|
func.AddAuditAccessAce.arg.3=PSID,pSid
|
|
func.AddAuditAccessAce.arg.4=BOOL,bAuditSuccess
|
|
func.AddAuditAccessAce.arg.5=BOOL,bAuditFailure
|
|
func.AddAuditAccessAce.ret=BOOL
|
|
|
|
AddAuditAccessAceEx=func
|
|
func.AddAuditAccessAceEx.args=7
|
|
func.AddAuditAccessAceEx.arg.0=PACL,pAcl
|
|
func.AddAuditAccessAceEx.arg.1=DWORD,dwAceRevision
|
|
func.AddAuditAccessAceEx.arg.2=DWORD,AceFlags
|
|
func.AddAuditAccessAceEx.arg.3=DWORD,dwAccessMask
|
|
func.AddAuditAccessAceEx.arg.4=PSID,pSid
|
|
func.AddAuditAccessAceEx.arg.5=BOOL,bAuditSuccess
|
|
func.AddAuditAccessAceEx.arg.6=BOOL,bAuditFailure
|
|
func.AddAuditAccessAceEx.ret=BOOL
|
|
|
|
AddAuditAccessObjectAce=func
|
|
func.AddAuditAccessObjectAce.args=9
|
|
func.AddAuditAccessObjectAce.arg.0=PACL,pAcl
|
|
func.AddAuditAccessObjectAce.arg.1=DWORD,dwAceRevision
|
|
func.AddAuditAccessObjectAce.arg.2=DWORD,AceFlags
|
|
func.AddAuditAccessObjectAce.arg.3=DWORD,AccessMask
|
|
func.AddAuditAccessObjectAce.arg.4=GUID *,ObjectTypeGuid
|
|
func.AddAuditAccessObjectAce.arg.5=GUID *,InheritedObjectTypeGuid
|
|
func.AddAuditAccessObjectAce.arg.6=PSID,pSid
|
|
func.AddAuditAccessObjectAce.arg.7=BOOL,bAuditSuccess
|
|
func.AddAuditAccessObjectAce.arg.8=BOOL,bAuditFailure
|
|
func.AddAuditAccessObjectAce.ret=BOOL
|
|
|
|
AddMandatoryAce=func
|
|
func.AddMandatoryAce.args=5
|
|
func.AddMandatoryAce.arg.0=PACL,pAcl
|
|
func.AddMandatoryAce.arg.1=DWORD,dwAceRevision
|
|
func.AddMandatoryAce.arg.2=DWORD,AceFlags
|
|
func.AddMandatoryAce.arg.3=DWORD,MandatoryPolicy
|
|
func.AddMandatoryAce.arg.4=PSID,pLabelSid
|
|
func.AddMandatoryAce.ret=BOOL
|
|
|
|
AddResourceAttributeAce=func
|
|
func.AddResourceAttributeAce.args=7
|
|
func.AddResourceAttributeAce.arg.0=PACL,pAcl
|
|
func.AddResourceAttributeAce.arg.1=DWORD,dwAceRevision
|
|
func.AddResourceAttributeAce.arg.2=DWORD,AceFlags
|
|
func.AddResourceAttributeAce.arg.3=DWORD,AccessMask
|
|
func.AddResourceAttributeAce.arg.4=PSID,pSid
|
|
func.AddResourceAttributeAce.arg.5=PCLAIM_SECURITY_ATTRIBUTES_INFORMATION,pAttributeInfo
|
|
func.AddResourceAttributeAce.arg.6=PDWORD,pReturnLength
|
|
func.AddResourceAttributeAce.ret=BOOL
|
|
|
|
AddScopedPolicyIDAce=func
|
|
func.AddScopedPolicyIDAce.args=5
|
|
func.AddScopedPolicyIDAce.arg.0=PACL,pAcl
|
|
func.AddScopedPolicyIDAce.arg.1=DWORD,dwAceRevision
|
|
func.AddScopedPolicyIDAce.arg.2=DWORD,AceFlags
|
|
func.AddScopedPolicyIDAce.arg.3=DWORD,AccessMask
|
|
func.AddScopedPolicyIDAce.arg.4=PSID,pSid
|
|
func.AddScopedPolicyIDAce.ret=BOOL
|
|
|
|
AdjustTokenGroups=func
|
|
func.AdjustTokenGroups.args=6
|
|
func.AdjustTokenGroups.arg.0=HANDLE,TokenHandle
|
|
func.AdjustTokenGroups.arg.1=BOOL,ResetToDefault
|
|
func.AdjustTokenGroups.arg.2=PTOKEN_GROUPS,NewState
|
|
func.AdjustTokenGroups.arg.3=DWORD,BufferLength
|
|
func.AdjustTokenGroups.arg.4=PTOKEN_GROUPS,PreviousState
|
|
func.AdjustTokenGroups.arg.5=PDWORD,ReturnLength
|
|
func.AdjustTokenGroups.ret=BOOL
|
|
|
|
AdjustTokenPrivileges=func
|
|
func.AdjustTokenPrivileges.args=6
|
|
func.AdjustTokenPrivileges.arg.0=HANDLE,TokenHandle
|
|
func.AdjustTokenPrivileges.arg.1=BOOL,DisableAllPrivileges
|
|
func.AdjustTokenPrivileges.arg.2=PTOKEN_PRIVILEGES,NewState
|
|
func.AdjustTokenPrivileges.arg.3=DWORD,BufferLength
|
|
func.AdjustTokenPrivileges.arg.4=PTOKEN_PRIVILEGES,PreviousState
|
|
func.AdjustTokenPrivileges.arg.5=PDWORD,ReturnLength
|
|
func.AdjustTokenPrivileges.ret=BOOL
|
|
|
|
AllocateAndInitializeSid=func
|
|
func.AllocateAndInitializeSid.args=11
|
|
func.AllocateAndInitializeSid.arg.0=PSID_IDENTIFIER_AUTHORITY,pIdentifierAuthority
|
|
func.AllocateAndInitializeSid.arg.1=BYTE,nSubAuthorityCount
|
|
func.AllocateAndInitializeSid.arg.2=DWORD,nSubAuthority0
|
|
func.AllocateAndInitializeSid.arg.3=DWORD,nSubAuthority1
|
|
func.AllocateAndInitializeSid.arg.4=DWORD,nSubAuthority2
|
|
func.AllocateAndInitializeSid.arg.5=DWORD,nSubAuthority3
|
|
func.AllocateAndInitializeSid.arg.6=DWORD,nSubAuthority4
|
|
func.AllocateAndInitializeSid.arg.7=DWORD,nSubAuthority5
|
|
func.AllocateAndInitializeSid.arg.8=DWORD,nSubAuthority6
|
|
func.AllocateAndInitializeSid.arg.9=DWORD,nSubAuthority7
|
|
func.AllocateAndInitializeSid.arg.10=PSID *,pSid
|
|
func.AllocateAndInitializeSid.ret=BOOL
|
|
|
|
AllocateLocallyUniqueId=func
|
|
func.AllocateLocallyUniqueId.args=1
|
|
func.AllocateLocallyUniqueId.arg.0=PLUID,Luid
|
|
func.AllocateLocallyUniqueId.ret=BOOL
|
|
|
|
AreAllAccessesGranted=func
|
|
func.AreAllAccessesGranted.args=2
|
|
func.AreAllAccessesGranted.arg.0=DWORD,GrantedAccess
|
|
func.AreAllAccessesGranted.arg.1=DWORD,DesiredAccess
|
|
func.AreAllAccessesGranted.ret=BOOL
|
|
|
|
AreAnyAccessesGranted=func
|
|
func.AreAnyAccessesGranted.args=2
|
|
func.AreAnyAccessesGranted.arg.0=DWORD,GrantedAccess
|
|
func.AreAnyAccessesGranted.arg.1=DWORD,DesiredAccess
|
|
func.AreAnyAccessesGranted.ret=BOOL
|
|
|
|
CheckTokenCapability=func
|
|
func.CheckTokenCapability.args=3
|
|
func.CheckTokenCapability.arg.0=HANDLE,TokenHandle
|
|
func.CheckTokenCapability.arg.1=PSID,CapabilitySidToCheck
|
|
func.CheckTokenCapability.arg.2=PBOOL,HasCapability
|
|
func.CheckTokenCapability.ret=BOOL
|
|
|
|
CheckTokenMembership=func
|
|
func.CheckTokenMembership.args=3
|
|
func.CheckTokenMembership.arg.0=HANDLE,TokenHandle
|
|
func.CheckTokenMembership.arg.1=PSID,SidToCheck
|
|
func.CheckTokenMembership.arg.2=PBOOL,IsMember
|
|
func.CheckTokenMembership.ret=BOOL
|
|
|
|
CheckTokenMembershipEx=func
|
|
func.CheckTokenMembershipEx.args=4
|
|
func.CheckTokenMembershipEx.arg.0=HANDLE,TokenHandle
|
|
func.CheckTokenMembershipEx.arg.1=PSID,SidToCheck
|
|
func.CheckTokenMembershipEx.arg.2=DWORD,Flags
|
|
func.CheckTokenMembershipEx.arg.3=PBOOL,IsMember
|
|
func.CheckTokenMembershipEx.ret=BOOL
|
|
|
|
ConvertToAutoInheritPrivateObjectSecurity=func
|
|
func.ConvertToAutoInheritPrivateObjectSecurity.args=6
|
|
func.ConvertToAutoInheritPrivateObjectSecurity.arg.0=PSECURITY_DESCRIPTOR,ParentDescriptor
|
|
func.ConvertToAutoInheritPrivateObjectSecurity.arg.1=PSECURITY_DESCRIPTOR,CurrentSecurityDescriptor
|
|
func.ConvertToAutoInheritPrivateObjectSecurity.arg.2=PSECURITY_DESCRIPTOR *,NewSecurityDescriptor
|
|
func.ConvertToAutoInheritPrivateObjectSecurity.arg.3=GUID *,ObjectType
|
|
func.ConvertToAutoInheritPrivateObjectSecurity.arg.4=BOOLEAN,IsDirectoryObject
|
|
func.ConvertToAutoInheritPrivateObjectSecurity.arg.5=PGENERIC_MAPPING,GenericMapping
|
|
func.ConvertToAutoInheritPrivateObjectSecurity.ret=BOOL
|
|
|
|
CopySid=func
|
|
func.CopySid.args=3
|
|
func.CopySid.arg.0=DWORD,nDestinationSidLength
|
|
func.CopySid.arg.1=PSID,pDestinationSid
|
|
func.CopySid.arg.2=PSID,pSourceSid
|
|
func.CopySid.ret=BOOL
|
|
|
|
CreatePrivateObjectSecurity=func
|
|
func.CreatePrivateObjectSecurity.args=6
|
|
func.CreatePrivateObjectSecurity.arg.0=PSECURITY_DESCRIPTOR,ParentDescriptor
|
|
func.CreatePrivateObjectSecurity.arg.1=PSECURITY_DESCRIPTOR,CreatorDescriptor
|
|
func.CreatePrivateObjectSecurity.arg.2=PSECURITY_DESCRIPTOR *,NewDescriptor
|
|
func.CreatePrivateObjectSecurity.arg.3=BOOL,IsDirectoryObject
|
|
func.CreatePrivateObjectSecurity.arg.4=HANDLE,Token
|
|
func.CreatePrivateObjectSecurity.arg.5=PGENERIC_MAPPING,GenericMapping
|
|
func.CreatePrivateObjectSecurity.ret=BOOL
|
|
|
|
CreatePrivateObjectSecurityEx=func
|
|
func.CreatePrivateObjectSecurityEx.args=8
|
|
func.CreatePrivateObjectSecurityEx.arg.0=PSECURITY_DESCRIPTOR,ParentDescriptor
|
|
func.CreatePrivateObjectSecurityEx.arg.1=PSECURITY_DESCRIPTOR,CreatorDescriptor
|
|
func.CreatePrivateObjectSecurityEx.arg.2=PSECURITY_DESCRIPTOR *,NewDescriptor
|
|
func.CreatePrivateObjectSecurityEx.arg.3=GUID *,ObjectType
|
|
func.CreatePrivateObjectSecurityEx.arg.4=BOOL,IsContainerObject
|
|
func.CreatePrivateObjectSecurityEx.arg.5=ULONG,AutoInheritFlags
|
|
func.CreatePrivateObjectSecurityEx.arg.6=HANDLE,Token
|
|
func.CreatePrivateObjectSecurityEx.arg.7=PGENERIC_MAPPING,GenericMapping
|
|
func.CreatePrivateObjectSecurityEx.ret=BOOL
|
|
|
|
CreatePrivateObjectSecurityWithMultipleInheritance=func
|
|
func.CreatePrivateObjectSecurityWithMultipleInheritance.args=9
|
|
func.CreatePrivateObjectSecurityWithMultipleInheritance.arg.0=PSECURITY_DESCRIPTOR,ParentDescriptor
|
|
func.CreatePrivateObjectSecurityWithMultipleInheritance.arg.1=PSECURITY_DESCRIPTOR,CreatorDescriptor
|
|
func.CreatePrivateObjectSecurityWithMultipleInheritance.arg.2=PSECURITY_DESCRIPTOR *,NewDescriptor
|
|
func.CreatePrivateObjectSecurityWithMultipleInheritance.arg.3=GUID **,ObjectTypes
|
|
func.CreatePrivateObjectSecurityWithMultipleInheritance.arg.4=ULONG,GuidCount
|
|
func.CreatePrivateObjectSecurityWithMultipleInheritance.arg.5=BOOL,IsContainerObject
|
|
func.CreatePrivateObjectSecurityWithMultipleInheritance.arg.6=ULONG,AutoInheritFlags
|
|
func.CreatePrivateObjectSecurityWithMultipleInheritance.arg.7=HANDLE,Token
|
|
func.CreatePrivateObjectSecurityWithMultipleInheritance.arg.8=PGENERIC_MAPPING,GenericMapping
|
|
func.CreatePrivateObjectSecurityWithMultipleInheritance.ret=BOOL
|
|
|
|
CreateRestrictedToken=func
|
|
func.CreateRestrictedToken.args=9
|
|
func.CreateRestrictedToken.arg.0=HANDLE,ExistingTokenHandle
|
|
func.CreateRestrictedToken.arg.1=DWORD,Flags
|
|
func.CreateRestrictedToken.arg.2=DWORD,DisableSidCount
|
|
func.CreateRestrictedToken.arg.3=PSID_AND_ATTRIBUTES,SidsToDisable
|
|
func.CreateRestrictedToken.arg.4=DWORD,DeletePrivilegeCount
|
|
func.CreateRestrictedToken.arg.5=PLUID_AND_ATTRIBUTES,PrivilegesToDelete
|
|
func.CreateRestrictedToken.arg.6=DWORD,RestrictedSidCount
|
|
func.CreateRestrictedToken.arg.7=PSID_AND_ATTRIBUTES,SidsToRestrict
|
|
func.CreateRestrictedToken.arg.8=PHANDLE,NewTokenHandle
|
|
func.CreateRestrictedToken.ret=BOOL
|
|
|
|
CreateWellKnownSid=func
|
|
func.CreateWellKnownSid.args=4
|
|
func.CreateWellKnownSid.arg.0=WELL_KNOWN_SID_TYPE,WellKnownSidType
|
|
func.CreateWellKnownSid.arg.1=PSID,DomainSid
|
|
func.CreateWellKnownSid.arg.2=PSID,pSid
|
|
func.CreateWellKnownSid.arg.3=DWORD *,cbSid
|
|
func.CreateWellKnownSid.ret=BOOL
|
|
|
|
CveEventWrite=func
|
|
func.CveEventWrite.args=2
|
|
func.CveEventWrite.arg.0=PCWSTR,CveId
|
|
func.CveEventWrite.arg.1=PCWSTR,AdditionalDetails
|
|
func.CveEventWrite.ret=LONG
|
|
|
|
DeleteAce=func
|
|
func.DeleteAce.args=2
|
|
func.DeleteAce.arg.0=PACL,pAcl
|
|
func.DeleteAce.arg.1=DWORD,dwAceIndex
|
|
func.DeleteAce.ret=BOOL
|
|
|
|
DeriveCapabilitySidsFromName=func
|
|
func.DeriveCapabilitySidsFromName.args=5
|
|
func.DeriveCapabilitySidsFromName.arg.0=LPCWSTR,CapName
|
|
func.DeriveCapabilitySidsFromName.arg.1=PSID **,CapabilityGroupSids
|
|
func.DeriveCapabilitySidsFromName.arg.2=DWORD *,CapabilityGroupSidCount
|
|
func.DeriveCapabilitySidsFromName.arg.3=PSID **,CapabilitySids
|
|
func.DeriveCapabilitySidsFromName.arg.4=DWORD *,CapabilitySidCount
|
|
func.DeriveCapabilitySidsFromName.ret=BOOL
|
|
|
|
DestroyPrivateObjectSecurity=func
|
|
func.DestroyPrivateObjectSecurity.args=1
|
|
func.DestroyPrivateObjectSecurity.arg.0=PSECURITY_DESCRIPTOR *,ObjectDescriptor
|
|
func.DestroyPrivateObjectSecurity.ret=BOOL
|
|
|
|
DuplicateToken=func
|
|
func.DuplicateToken.args=3
|
|
func.DuplicateToken.arg.0=HANDLE,ExistingTokenHandle
|
|
func.DuplicateToken.arg.1=SECURITY_IMPERSONATION_LEVEL,ImpersonationLevel
|
|
func.DuplicateToken.arg.2=PHANDLE,DuplicateTokenHandle
|
|
func.DuplicateToken.ret=BOOL
|
|
|
|
DuplicateTokenEx=func
|
|
func.DuplicateTokenEx.args=6
|
|
func.DuplicateTokenEx.arg.0=HANDLE,hExistingToken
|
|
func.DuplicateTokenEx.arg.1=DWORD,dwDesiredAccess
|
|
func.DuplicateTokenEx.arg.2=LPSECURITY_ATTRIBUTES,lpTokenAttributes
|
|
func.DuplicateTokenEx.arg.3=SECURITY_IMPERSONATION_LEVEL,ImpersonationLevel
|
|
func.DuplicateTokenEx.arg.4=TOKEN_TYPE,TokenType
|
|
func.DuplicateTokenEx.arg.5=PHANDLE,phNewToken
|
|
func.DuplicateTokenEx.ret=BOOL
|
|
|
|
EqualDomainSid=func
|
|
func.EqualDomainSid.args=3
|
|
func.EqualDomainSid.arg.0=PSID,pSid1
|
|
func.EqualDomainSid.arg.1=PSID,pSid2
|
|
func.EqualDomainSid.arg.2=BOOL *,pfEqual
|
|
func.EqualDomainSid.ret=BOOL
|
|
|
|
EqualPrefixSid=func
|
|
func.EqualPrefixSid.args=2
|
|
func.EqualPrefixSid.arg.0=PSID,pSid1
|
|
func.EqualPrefixSid.arg.1=PSID,pSid2
|
|
func.EqualPrefixSid.ret=BOOL
|
|
|
|
EqualSid=func
|
|
func.EqualSid.args=2
|
|
func.EqualSid.arg.0=PSID,pSid1
|
|
func.EqualSid.arg.1=PSID,pSid2
|
|
func.EqualSid.ret=BOOL
|
|
|
|
FindFirstFreeAce=func
|
|
func.FindFirstFreeAce.args=2
|
|
func.FindFirstFreeAce.arg.0=PACL,pAcl
|
|
func.FindFirstFreeAce.arg.1=LPVOID *,pAce
|
|
func.FindFirstFreeAce.ret=BOOL
|
|
|
|
FreeSid=func
|
|
func.FreeSid.args=1
|
|
func.FreeSid.arg.0=PSID,pSid
|
|
func.FreeSid.ret=PVOID
|
|
|
|
GetAce=func
|
|
func.GetAce.args=3
|
|
func.GetAce.arg.0=PACL,pAcl
|
|
func.GetAce.arg.1=DWORD,dwAceIndex
|
|
func.GetAce.arg.2=LPVOID *,pAce
|
|
func.GetAce.ret=BOOL
|
|
|
|
GetAclInformation=func
|
|
func.GetAclInformation.args=4
|
|
func.GetAclInformation.arg.0=PACL,pAcl
|
|
func.GetAclInformation.arg.1=LPVOID,pAclInformation
|
|
func.GetAclInformation.arg.2=DWORD,nAclInformationLength
|
|
func.GetAclInformation.arg.3=ACL_INFORMATION_CLASS,dwAclInformationClass
|
|
func.GetAclInformation.ret=BOOL
|
|
|
|
GetAppContainerAce=func
|
|
func.GetAppContainerAce.args=4
|
|
func.GetAppContainerAce.arg.0=PACL,Acl
|
|
func.GetAppContainerAce.arg.1=DWORD,StartingAceIndex
|
|
func.GetAppContainerAce.arg.2=PVOID *,AppContainerAce
|
|
func.GetAppContainerAce.arg.3=DWORD *,AppContainerAceIndex
|
|
func.GetAppContainerAce.ret=BOOL
|
|
|
|
GetCachedSigningLevel=func
|
|
func.GetCachedSigningLevel.args=6
|
|
func.GetCachedSigningLevel.arg.0=HANDLE,File
|
|
func.GetCachedSigningLevel.arg.1=PULONG,Flags
|
|
func.GetCachedSigningLevel.arg.2=PULONG,SigningLevel
|
|
func.GetCachedSigningLevel.arg.3=PUCHAR,Thumbprint
|
|
func.GetCachedSigningLevel.arg.4=PULONG,ThumbprintSize
|
|
func.GetCachedSigningLevel.arg.5=PULONG,ThumbprintAlgorithm
|
|
func.GetCachedSigningLevel.ret=BOOL
|
|
|
|
GetFileSecurityW=func
|
|
func.GetFileSecurityW.args=5
|
|
func.GetFileSecurityW.arg.0=LPCWSTR,lpFileName
|
|
func.GetFileSecurityW.arg.1=SECURITY_INFORMATION,RequestedInformation
|
|
func.GetFileSecurityW.arg.2=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.GetFileSecurityW.arg.3=DWORD,nLength
|
|
func.GetFileSecurityW.arg.4=LPDWORD,lpnLengthNeeded
|
|
func.GetFileSecurityW.ret=BOOL
|
|
|
|
GetKernelObjectSecurity=func
|
|
func.GetKernelObjectSecurity.args=5
|
|
func.GetKernelObjectSecurity.arg.0=HANDLE,Handle
|
|
func.GetKernelObjectSecurity.arg.1=SECURITY_INFORMATION,RequestedInformation
|
|
func.GetKernelObjectSecurity.arg.2=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.GetKernelObjectSecurity.arg.3=DWORD,nLength
|
|
func.GetKernelObjectSecurity.arg.4=LPDWORD,lpnLengthNeeded
|
|
func.GetKernelObjectSecurity.ret=BOOL
|
|
|
|
GetLengthSid=func
|
|
func.GetLengthSid.args=1
|
|
func.GetLengthSid.arg.0=PSID,pSid
|
|
func.GetLengthSid.ret=DWORD
|
|
|
|
GetPrivateObjectSecurity=func
|
|
func.GetPrivateObjectSecurity.args=5
|
|
func.GetPrivateObjectSecurity.arg.0=PSECURITY_DESCRIPTOR,ObjectDescriptor
|
|
func.GetPrivateObjectSecurity.arg.1=SECURITY_INFORMATION,SecurityInformation
|
|
func.GetPrivateObjectSecurity.arg.2=PSECURITY_DESCRIPTOR,ResultantDescriptor
|
|
func.GetPrivateObjectSecurity.arg.3=DWORD,DescriptorLength
|
|
func.GetPrivateObjectSecurity.arg.4=PDWORD,ReturnLength
|
|
func.GetPrivateObjectSecurity.ret=BOOL
|
|
|
|
GetSecurityDescriptorControl=func
|
|
func.GetSecurityDescriptorControl.args=3
|
|
func.GetSecurityDescriptorControl.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.GetSecurityDescriptorControl.arg.1=PSECURITY_DESCRIPTOR_CONTROL,pControl
|
|
func.GetSecurityDescriptorControl.arg.2=LPDWORD,lpdwRevision
|
|
func.GetSecurityDescriptorControl.ret=BOOL
|
|
|
|
GetSecurityDescriptorDacl=func
|
|
func.GetSecurityDescriptorDacl.args=4
|
|
func.GetSecurityDescriptorDacl.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.GetSecurityDescriptorDacl.arg.1=LPBOOL,lpbDaclPresent
|
|
func.GetSecurityDescriptorDacl.arg.2=PACL *,pDacl
|
|
func.GetSecurityDescriptorDacl.arg.3=LPBOOL,lpbDaclDefaulted
|
|
func.GetSecurityDescriptorDacl.ret=BOOL
|
|
|
|
GetSecurityDescriptorGroup=func
|
|
func.GetSecurityDescriptorGroup.args=3
|
|
func.GetSecurityDescriptorGroup.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.GetSecurityDescriptorGroup.arg.1=PSID *,pGroup
|
|
func.GetSecurityDescriptorGroup.arg.2=LPBOOL,lpbGroupDefaulted
|
|
func.GetSecurityDescriptorGroup.ret=BOOL
|
|
|
|
GetSecurityDescriptorLength=func
|
|
func.GetSecurityDescriptorLength.args=1
|
|
func.GetSecurityDescriptorLength.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.GetSecurityDescriptorLength.ret=DWORD
|
|
|
|
GetSecurityDescriptorOwner=func
|
|
func.GetSecurityDescriptorOwner.args=3
|
|
func.GetSecurityDescriptorOwner.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.GetSecurityDescriptorOwner.arg.1=PSID *,pOwner
|
|
func.GetSecurityDescriptorOwner.arg.2=LPBOOL,lpbOwnerDefaulted
|
|
func.GetSecurityDescriptorOwner.ret=BOOL
|
|
|
|
GetSecurityDescriptorRMControl=func
|
|
func.GetSecurityDescriptorRMControl.args=2
|
|
func.GetSecurityDescriptorRMControl.arg.0=PSECURITY_DESCRIPTOR,SecurityDescriptor
|
|
func.GetSecurityDescriptorRMControl.arg.1=PUCHAR,RMControl
|
|
func.GetSecurityDescriptorRMControl.ret=DWORD
|
|
|
|
GetSecurityDescriptorSacl=func
|
|
func.GetSecurityDescriptorSacl.args=4
|
|
func.GetSecurityDescriptorSacl.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.GetSecurityDescriptorSacl.arg.1=LPBOOL,lpbSaclPresent
|
|
func.GetSecurityDescriptorSacl.arg.2=PACL *,pSacl
|
|
func.GetSecurityDescriptorSacl.arg.3=LPBOOL,lpbSaclDefaulted
|
|
func.GetSecurityDescriptorSacl.ret=BOOL
|
|
|
|
GetSidIdentifierAuthority=func
|
|
func.GetSidIdentifierAuthority.args=1
|
|
func.GetSidIdentifierAuthority.arg.0=PSID,pSid
|
|
func.GetSidIdentifierAuthority.ret=PSID_IDENTIFIER_AUTHORITY
|
|
|
|
GetSidLengthRequired=func
|
|
func.GetSidLengthRequired.args=1
|
|
func.GetSidLengthRequired.arg.0=UCHAR,nSubAuthorityCount
|
|
func.GetSidLengthRequired.ret=DWORD
|
|
|
|
GetSidSubAuthority=func
|
|
func.GetSidSubAuthority.args=2
|
|
func.GetSidSubAuthority.arg.0=PSID,pSid
|
|
func.GetSidSubAuthority.arg.1=DWORD,nSubAuthority
|
|
func.GetSidSubAuthority.ret=PDWORD
|
|
|
|
GetSidSubAuthorityCount=func
|
|
func.GetSidSubAuthorityCount.args=1
|
|
func.GetSidSubAuthorityCount.arg.0=PSID,pSid
|
|
func.GetSidSubAuthorityCount.ret=PUCHAR
|
|
|
|
GetTokenInformation=func
|
|
func.GetTokenInformation.args=5
|
|
func.GetTokenInformation.arg.0=HANDLE,TokenHandle
|
|
func.GetTokenInformation.arg.1=TOKEN_INFORMATION_CLASS,TokenInformationClass
|
|
func.GetTokenInformation.arg.2=LPVOID,TokenInformation
|
|
func.GetTokenInformation.arg.3=DWORD,TokenInformationLength
|
|
func.GetTokenInformation.arg.4=PDWORD,ReturnLength
|
|
func.GetTokenInformation.ret=BOOL
|
|
|
|
GetWindowsAccountDomainSid=func
|
|
func.GetWindowsAccountDomainSid.args=3
|
|
func.GetWindowsAccountDomainSid.arg.0=PSID,pSid
|
|
func.GetWindowsAccountDomainSid.arg.1=PSID,pDomainSid
|
|
func.GetWindowsAccountDomainSid.arg.2=DWORD *,cbDomainSid
|
|
func.GetWindowsAccountDomainSid.ret=BOOL
|
|
|
|
ImpersonateAnonymousToken=func
|
|
func.ImpersonateAnonymousToken.args=1
|
|
func.ImpersonateAnonymousToken.arg.0=HANDLE,ThreadHandle
|
|
func.ImpersonateAnonymousToken.ret=BOOL
|
|
|
|
ImpersonateLoggedOnUser=func
|
|
func.ImpersonateLoggedOnUser.args=1
|
|
func.ImpersonateLoggedOnUser.arg.0=HANDLE,hToken
|
|
func.ImpersonateLoggedOnUser.ret=BOOL
|
|
|
|
ImpersonateSelf=func
|
|
func.ImpersonateSelf.args=1
|
|
func.ImpersonateSelf.arg.0=SECURITY_IMPERSONATION_LEVEL,ImpersonationLevel
|
|
func.ImpersonateSelf.ret=BOOL
|
|
|
|
InitializeAcl=func
|
|
func.InitializeAcl.args=3
|
|
func.InitializeAcl.arg.0=PACL,pAcl
|
|
func.InitializeAcl.arg.1=DWORD,nAclLength
|
|
func.InitializeAcl.arg.2=DWORD,dwAclRevision
|
|
func.InitializeAcl.ret=BOOL
|
|
|
|
InitializeSecurityDescriptor=func
|
|
func.InitializeSecurityDescriptor.args=2
|
|
func.InitializeSecurityDescriptor.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.InitializeSecurityDescriptor.arg.1=DWORD,dwRevision
|
|
func.InitializeSecurityDescriptor.ret=BOOL
|
|
|
|
InitializeSid=func
|
|
func.InitializeSid.args=3
|
|
func.InitializeSid.arg.0=PSID,Sid
|
|
func.InitializeSid.arg.1=PSID_IDENTIFIER_AUTHORITY,pIdentifierAuthority
|
|
func.InitializeSid.arg.2=BYTE,nSubAuthorityCount
|
|
func.InitializeSid.ret=BOOL
|
|
|
|
IsTokenRestricted=func
|
|
func.IsTokenRestricted.args=1
|
|
func.IsTokenRestricted.arg.0=HANDLE,TokenHandle
|
|
func.IsTokenRestricted.ret=BOOL
|
|
|
|
IsValidAcl=func
|
|
func.IsValidAcl.args=1
|
|
func.IsValidAcl.arg.0=PACL,pAcl
|
|
func.IsValidAcl.ret=BOOL
|
|
|
|
IsValidSecurityDescriptor=func
|
|
func.IsValidSecurityDescriptor.args=1
|
|
func.IsValidSecurityDescriptor.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.IsValidSecurityDescriptor.ret=BOOL
|
|
|
|
IsValidSid=func
|
|
func.IsValidSid.args=1
|
|
func.IsValidSid.arg.0=PSID,pSid
|
|
func.IsValidSid.ret=BOOL
|
|
|
|
IsWellKnownSid=func
|
|
func.IsWellKnownSid.args=2
|
|
func.IsWellKnownSid.arg.0=PSID,pSid
|
|
func.IsWellKnownSid.arg.1=WELL_KNOWN_SID_TYPE,WellKnownSidType
|
|
func.IsWellKnownSid.ret=BOOL
|
|
|
|
MakeAbsoluteSD=func
|
|
func.MakeAbsoluteSD.args=11
|
|
func.MakeAbsoluteSD.arg.0=PSECURITY_DESCRIPTOR,pSelfRelativeSecurityDescriptor
|
|
func.MakeAbsoluteSD.arg.1=PSECURITY_DESCRIPTOR,pAbsoluteSecurityDescriptor
|
|
func.MakeAbsoluteSD.arg.2=LPDWORD,lpdwAbsoluteSecurityDescriptorSize
|
|
func.MakeAbsoluteSD.arg.3=PACL,pDacl
|
|
func.MakeAbsoluteSD.arg.4=LPDWORD,lpdwDaclSize
|
|
func.MakeAbsoluteSD.arg.5=PACL,pSacl
|
|
func.MakeAbsoluteSD.arg.6=LPDWORD,lpdwSaclSize
|
|
func.MakeAbsoluteSD.arg.7=PSID,pOwner
|
|
func.MakeAbsoluteSD.arg.8=LPDWORD,lpdwOwnerSize
|
|
func.MakeAbsoluteSD.arg.9=PSID,pPrimaryGroup
|
|
func.MakeAbsoluteSD.arg.10=LPDWORD,lpdwPrimaryGroupSize
|
|
func.MakeAbsoluteSD.ret=BOOL
|
|
|
|
MakeSelfRelativeSD=func
|
|
func.MakeSelfRelativeSD.args=3
|
|
func.MakeSelfRelativeSD.arg.0=PSECURITY_DESCRIPTOR,pAbsoluteSecurityDescriptor
|
|
func.MakeSelfRelativeSD.arg.1=PSECURITY_DESCRIPTOR,pSelfRelativeSecurityDescriptor
|
|
func.MakeSelfRelativeSD.arg.2=LPDWORD,lpdwBufferLength
|
|
func.MakeSelfRelativeSD.ret=BOOL
|
|
|
|
MapGenericMask=func
|
|
func.MapGenericMask.args=2
|
|
func.MapGenericMask.arg.0=PDWORD,AccessMask
|
|
func.MapGenericMask.arg.1=PGENERIC_MAPPING,GenericMapping
|
|
func.MapGenericMask.ret=VOID
|
|
|
|
ObjectCloseAuditAlarmW=func
|
|
func.ObjectCloseAuditAlarmW.args=3
|
|
func.ObjectCloseAuditAlarmW.arg.0=LPCWSTR,SubsystemName
|
|
func.ObjectCloseAuditAlarmW.arg.1=LPVOID,HandleId
|
|
func.ObjectCloseAuditAlarmW.arg.2=BOOL,GenerateOnClose
|
|
func.ObjectCloseAuditAlarmW.ret=BOOL
|
|
|
|
ObjectDeleteAuditAlarmW=func
|
|
func.ObjectDeleteAuditAlarmW.args=3
|
|
func.ObjectDeleteAuditAlarmW.arg.0=LPCWSTR,SubsystemName
|
|
func.ObjectDeleteAuditAlarmW.arg.1=LPVOID,HandleId
|
|
func.ObjectDeleteAuditAlarmW.arg.2=BOOL,GenerateOnClose
|
|
func.ObjectDeleteAuditAlarmW.ret=BOOL
|
|
|
|
ObjectOpenAuditAlarmW=func
|
|
func.ObjectOpenAuditAlarmW.args=12
|
|
func.ObjectOpenAuditAlarmW.arg.0=LPCWSTR,SubsystemName
|
|
func.ObjectOpenAuditAlarmW.arg.1=LPVOID,HandleId
|
|
func.ObjectOpenAuditAlarmW.arg.2=LPWSTR,ObjectTypeName
|
|
func.ObjectOpenAuditAlarmW.arg.3=LPWSTR,ObjectName
|
|
func.ObjectOpenAuditAlarmW.arg.4=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.ObjectOpenAuditAlarmW.arg.5=HANDLE,ClientToken
|
|
func.ObjectOpenAuditAlarmW.arg.6=DWORD,DesiredAccess
|
|
func.ObjectOpenAuditAlarmW.arg.7=DWORD,GrantedAccess
|
|
func.ObjectOpenAuditAlarmW.arg.8=PPRIVILEGE_SET,Privileges
|
|
func.ObjectOpenAuditAlarmW.arg.9=BOOL,ObjectCreation
|
|
func.ObjectOpenAuditAlarmW.arg.10=BOOL,AccessGranted
|
|
func.ObjectOpenAuditAlarmW.arg.11=LPBOOL,GenerateOnClose
|
|
func.ObjectOpenAuditAlarmW.ret=BOOL
|
|
|
|
ObjectPrivilegeAuditAlarmW=func
|
|
func.ObjectPrivilegeAuditAlarmW.args=6
|
|
func.ObjectPrivilegeAuditAlarmW.arg.0=LPCWSTR,SubsystemName
|
|
func.ObjectPrivilegeAuditAlarmW.arg.1=LPVOID,HandleId
|
|
func.ObjectPrivilegeAuditAlarmW.arg.2=HANDLE,ClientToken
|
|
func.ObjectPrivilegeAuditAlarmW.arg.3=DWORD,DesiredAccess
|
|
func.ObjectPrivilegeAuditAlarmW.arg.4=PPRIVILEGE_SET,Privileges
|
|
func.ObjectPrivilegeAuditAlarmW.arg.5=BOOL,AccessGranted
|
|
func.ObjectPrivilegeAuditAlarmW.ret=BOOL
|
|
|
|
PrivilegeCheck=func
|
|
func.PrivilegeCheck.args=3
|
|
func.PrivilegeCheck.arg.0=HANDLE,ClientToken
|
|
func.PrivilegeCheck.arg.1=PPRIVILEGE_SET,RequiredPrivileges
|
|
func.PrivilegeCheck.arg.2=LPBOOL,pfResult
|
|
func.PrivilegeCheck.ret=BOOL
|
|
|
|
PrivilegedServiceAuditAlarmW=func
|
|
func.PrivilegedServiceAuditAlarmW.args=5
|
|
func.PrivilegedServiceAuditAlarmW.arg.0=LPCWSTR,SubsystemName
|
|
func.PrivilegedServiceAuditAlarmW.arg.1=LPCWSTR,ServiceName
|
|
func.PrivilegedServiceAuditAlarmW.arg.2=HANDLE,ClientToken
|
|
func.PrivilegedServiceAuditAlarmW.arg.3=PPRIVILEGE_SET,Privileges
|
|
func.PrivilegedServiceAuditAlarmW.arg.4=BOOL,AccessGranted
|
|
func.PrivilegedServiceAuditAlarmW.ret=BOOL
|
|
|
|
QuerySecurityAccessMask=func
|
|
func.QuerySecurityAccessMask.args=2
|
|
func.QuerySecurityAccessMask.arg.0=SECURITY_INFORMATION,SecurityInformation
|
|
func.QuerySecurityAccessMask.arg.1=LPDWORD,DesiredAccess
|
|
func.QuerySecurityAccessMask.ret=VOID
|
|
|
|
RevertToSelf=func
|
|
func.RevertToSelf.args=0
|
|
func.RevertToSelf.ret=BOOL
|
|
|
|
SetAclInformation=func
|
|
func.SetAclInformation.args=4
|
|
func.SetAclInformation.arg.0=PACL,pAcl
|
|
func.SetAclInformation.arg.1=LPVOID,pAclInformation
|
|
func.SetAclInformation.arg.2=DWORD,nAclInformationLength
|
|
func.SetAclInformation.arg.3=ACL_INFORMATION_CLASS,dwAclInformationClass
|
|
func.SetAclInformation.ret=BOOL
|
|
|
|
SetCachedSigningLevel=func
|
|
func.SetCachedSigningLevel.args=4
|
|
func.SetCachedSigningLevel.arg.0=PHANDLE,SourceFiles
|
|
func.SetCachedSigningLevel.arg.1=ULONG,SourceFileCount
|
|
func.SetCachedSigningLevel.arg.2=ULONG,Flags
|
|
func.SetCachedSigningLevel.arg.3=HANDLE,TargetFile
|
|
func.SetCachedSigningLevel.ret=BOOL
|
|
|
|
SetFileSecurityW=func
|
|
func.SetFileSecurityW.args=3
|
|
func.SetFileSecurityW.arg.0=LPCWSTR,lpFileName
|
|
func.SetFileSecurityW.arg.1=SECURITY_INFORMATION,SecurityInformation
|
|
func.SetFileSecurityW.arg.2=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.SetFileSecurityW.ret=BOOL
|
|
|
|
SetKernelObjectSecurity=func
|
|
func.SetKernelObjectSecurity.args=3
|
|
func.SetKernelObjectSecurity.arg.0=HANDLE,Handle
|
|
func.SetKernelObjectSecurity.arg.1=SECURITY_INFORMATION,SecurityInformation
|
|
func.SetKernelObjectSecurity.arg.2=PSECURITY_DESCRIPTOR,SecurityDescriptor
|
|
func.SetKernelObjectSecurity.ret=BOOL
|
|
|
|
SetPrivateObjectSecurity=func
|
|
func.SetPrivateObjectSecurity.args=5
|
|
func.SetPrivateObjectSecurity.arg.0=SECURITY_INFORMATION,SecurityInformation
|
|
func.SetPrivateObjectSecurity.arg.1=PSECURITY_DESCRIPTOR,ModificationDescriptor
|
|
func.SetPrivateObjectSecurity.arg.2=PSECURITY_DESCRIPTOR *,ObjectsSecurityDescriptor
|
|
func.SetPrivateObjectSecurity.arg.3=PGENERIC_MAPPING,GenericMapping
|
|
func.SetPrivateObjectSecurity.arg.4=HANDLE,Token
|
|
func.SetPrivateObjectSecurity.ret=BOOL
|
|
|
|
SetPrivateObjectSecurityEx=func
|
|
func.SetPrivateObjectSecurityEx.args=6
|
|
func.SetPrivateObjectSecurityEx.arg.0=SECURITY_INFORMATION,SecurityInformation
|
|
func.SetPrivateObjectSecurityEx.arg.1=PSECURITY_DESCRIPTOR,ModificationDescriptor
|
|
func.SetPrivateObjectSecurityEx.arg.2=PSECURITY_DESCRIPTOR *,ObjectsSecurityDescriptor
|
|
func.SetPrivateObjectSecurityEx.arg.3=ULONG,AutoInheritFlags
|
|
func.SetPrivateObjectSecurityEx.arg.4=PGENERIC_MAPPING,GenericMapping
|
|
func.SetPrivateObjectSecurityEx.arg.5=HANDLE,Token
|
|
func.SetPrivateObjectSecurityEx.ret=BOOL
|
|
|
|
SetSecurityAccessMask=func
|
|
func.SetSecurityAccessMask.args=2
|
|
func.SetSecurityAccessMask.arg.0=SECURITY_INFORMATION,SecurityInformation
|
|
func.SetSecurityAccessMask.arg.1=LPDWORD,DesiredAccess
|
|
func.SetSecurityAccessMask.ret=VOID
|
|
|
|
SetSecurityDescriptorControl=func
|
|
func.SetSecurityDescriptorControl.args=3
|
|
func.SetSecurityDescriptorControl.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.SetSecurityDescriptorControl.arg.1=SECURITY_DESCRIPTOR_CONTROL,ControlBitsOfInterest
|
|
func.SetSecurityDescriptorControl.arg.2=SECURITY_DESCRIPTOR_CONTROL,ControlBitsToSet
|
|
func.SetSecurityDescriptorControl.ret=BOOL
|
|
|
|
SetSecurityDescriptorDacl=func
|
|
func.SetSecurityDescriptorDacl.args=4
|
|
func.SetSecurityDescriptorDacl.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.SetSecurityDescriptorDacl.arg.1=BOOL,bDaclPresent
|
|
func.SetSecurityDescriptorDacl.arg.2=PACL,pDacl
|
|
func.SetSecurityDescriptorDacl.arg.3=BOOL,bDaclDefaulted
|
|
func.SetSecurityDescriptorDacl.ret=BOOL
|
|
|
|
SetSecurityDescriptorGroup=func
|
|
func.SetSecurityDescriptorGroup.args=3
|
|
func.SetSecurityDescriptorGroup.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.SetSecurityDescriptorGroup.arg.1=PSID,pGroup
|
|
func.SetSecurityDescriptorGroup.arg.2=BOOL,bGroupDefaulted
|
|
func.SetSecurityDescriptorGroup.ret=BOOL
|
|
|
|
SetSecurityDescriptorOwner=func
|
|
func.SetSecurityDescriptorOwner.args=3
|
|
func.SetSecurityDescriptorOwner.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.SetSecurityDescriptorOwner.arg.1=PSID,pOwner
|
|
func.SetSecurityDescriptorOwner.arg.2=BOOL,bOwnerDefaulted
|
|
func.SetSecurityDescriptorOwner.ret=BOOL
|
|
|
|
SetSecurityDescriptorRMControl=func
|
|
func.SetSecurityDescriptorRMControl.args=2
|
|
func.SetSecurityDescriptorRMControl.arg.0=PSECURITY_DESCRIPTOR,SecurityDescriptor
|
|
func.SetSecurityDescriptorRMControl.arg.1=PUCHAR,RMControl
|
|
func.SetSecurityDescriptorRMControl.ret=DWORD
|
|
|
|
SetSecurityDescriptorSacl=func
|
|
func.SetSecurityDescriptorSacl.args=4
|
|
func.SetSecurityDescriptorSacl.arg.0=PSECURITY_DESCRIPTOR,pSecurityDescriptor
|
|
func.SetSecurityDescriptorSacl.arg.1=BOOL,bSaclPresent
|
|
func.SetSecurityDescriptorSacl.arg.2=PACL,pSacl
|
|
func.SetSecurityDescriptorSacl.arg.3=BOOL,bSaclDefaulted
|
|
func.SetSecurityDescriptorSacl.ret=BOOL
|
|
|
|
SetTokenInformation=func
|
|
func.SetTokenInformation.args=4
|
|
func.SetTokenInformation.arg.0=HANDLE,TokenHandle
|
|
func.SetTokenInformation.arg.1=TOKEN_INFORMATION_CLASS,TokenInformationClass
|
|
func.SetTokenInformation.arg.2=LPVOID,TokenInformation
|
|
func.SetTokenInformation.arg.3=DWORD,TokenInformationLength
|
|
func.SetTokenInformation.ret=BOOL
|