
    5i#                     6   d dl Z d dlT d dlmZmZmZ d dlmZ d dlm	Z	 d dl
mZ d dlmZ d Zej        Zd	Zd
ZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ!dZ"dZ#dZ$dZ%dZ&dZ'dZ(d Z)d!Z*d"Z+d#Z,d$Z-d%Z.d&Z/d'Z0d(Z1d)Z2d*Z3d+Z4d,Z5d-Z6d.Z7d/Z8d0Z9d1Z:d	Z;d
Z<dZ=dZ>dZ?d(Z@d2ZAd3ZBd4ZCeDe>z  ZEeFe;z  e<z  e=z  e>z  e?z  e@z  eAz  eBz  eCz  ZGd	ZHd
ZIdZJdZKdZLd5ZMd6ZNd7ZOd8ZPd(ZQd2ZRd3ZSd9ZTdZUd:ZVd	ZWd
ZXdZYeZZ[d;Z\d	Z]d
Z^dZ_dZ`dZad(Zbd2Zcd3Zdd4Zed<Zfd	Zgd
ZhdZidZjdZkd(Zld= Zmd> Zn G d? d@eo          Zpeq                    ep          ZrdA ZsdrdCZtdD ZudE ZvdF ZwdG Zxd	ZyeHeIz  eJz  fdHZzeHeIz  eJz  dfdIZ{ddeffdJZ|e\fdKZ}dL Z~ G dM dNeo          Z eqe          Z G dO dPeo          Z eqe          ZeUeVz  eYfdQZd8ZdRZdSZdTZdUZdVZdWZdXZdYZeeeeeedZZd<Zd(ZdZdZd[ZdZd	Zd[Zd
Zd\Zd4Zd]Zd Zd Zd	Zd
ZdZdZdeefd^Zd_ Zd` Zda ZdsdcZeGfddZde Zej        Z eqe          Z G df dgeo          Z eqe          Zd Zd	Zd
ZdZej        Z eqe          Z G dh dieo          Z eqe          Zdj Z G dk dleo          Z eqe          Z G dm dneo          Z eqe          Zdo Zdp Zdq ZdS )t    N)*)GetLastError	LocalFreeREAD_CONTROL)MemoryBuffer)SECURITY_DESCRIPTOR)SID)SE_OBJECT_TYPEc                 F    | dk    rt                               |           | S Nr   )ctypesWinError)resultfunc	argumentss      O/home/kali/Ninja/venv/lib/python3.11/site-packages/winacl/functions/advapi32.pywin_succ_checkr   	   s"    
aKK                            	   
                                                                      !   "   #   $   %   &   '   (   )   @            i    i   @l        i   0   i i?  c           	      b   t           j        j        }t          t          t          t
          t
          t
          t
          g|_        t          |_        t          |_	        d}d }|j
        K|t          z  }|j
                                        }t                              |t          |                    }d }d }|j        K|t"          z  }|j                                        }	t                              |	t          |	                    }d }
|dk    rt%          d           || ||||||
          }d S )Nr   z6Looks like nothing is to be set! Check your sd object!)windlladvapi32SetSecurityInfoHANDLEDWORDPVOIDargtypesrestypeRaiseIfNotErrorSuccesserrcheckOwnerOWNER_SECURITY_INFORMATIONto_bytesr   create_string_bufferlenDaclDACL_SECURITY_INFORMATION	Exception)
handle_objobj_typesd_SetSecurityInfosec_infopOwner
owner_datapGrouppDacl	dacl_datapSaclrets               r   rF   rF      s    O3$eUE5%O"3
H
(((x  ""*&&z3z??CC&
 
G
''(g  )

%
%iY
@
@%	 MMJKKK 

 r   c                 <   t           j        j        }t          t          t          t
          t
          t
          t
          t
          g|_        t          |_        t          |_	        d }d }d }d }t                              t                              d                    } || ||||||t                              |                    }	|j        }
t          t                              |j                            }t#          j        ||          }t'          |           |S r   )rD   rE   GetSecurityInforG   rH   rI   rJ   rK   r   rM   r   pointerc_uintbyrefcontentsr   	addressofr   from_bufferr   )rV   rW   info_req_GetSecurityInfo
ppsidOwner
ppsidGroupppDaclppSaclppSecurityDescriptorra   pSecurityDescriptorbuffrX   s                r   rc   rc      s    O3$eUE5%PUV"+

v}}Q'7'788
Hh
JPVX^`f`l`l  nB  aC  aC  D  D+4V%%&:&CDDEE%dH55
   
r   c                   0    e Zd ZdefdefdefdefdefgZdS )	TRUSTEE_WpMultipleTrusteeMultipleTrusteeOperationTrusteeFormTrusteeType	ptstrNameN)__name__
__module____qualname__rI   rH   rG   _fields_ r   r   rt   rt      s=        uu%%%r   rt   c                    t           j        j        }t          t          g|_        d |_        |                                 }t          	                    |t          |                    }t                      } |||           |S N)rD   rE   BuildTrusteeWithSidW
PTRUSTEE_WrI   rJ   rK   rP   r   rQ   rR   rt   )sid_BuildTrusteeWithSidWsid_datacsidtrustees        r   r   r      sm    =#-u"5"&LLNN##Hc(mm<<;;w%%%r   Fc                    t           j        j        }t          t          g|_        t
          |_        t          |_        |du r| 	                                }t                              |t          |                    }t                              d          }t                              |          } |t          |          t          |                     nMt                              d          }t                              |          } || t          |                     t                              |          }t#          |           |S )NFr   )rD   rE   ConvertSidToStringSidWrI   rJ   rH   rK   RaiseIfZerorM   rP   r   rQ   rR   create_unicode_bufferrd   rf   
wstring_atr   )r   
is_raw_ptr_ConvertSidToStringSidWr   r   pstrcstr_sidstr_sids           r   r   r     s   !?A%*EN!$) $/!%\\^^(		$	$Xs8}}	=	=$		%	%a	(	($^^D!!(%++uX7777		%	%a	(	($^^D!!(#uX///X&&
8r   c                    t           j        j        }t          t          g|_        t
          |_        t          |_        t          
                    |                     d                    }t                              t                              d                    } ||t          |                     t          t                              |j                            }t%          j        |          }t)          |           |S )N	utf-16-ler   )rD   rE   ConvertStringSidToSidWrI   rJ   rH   rK   r   rM   r   rQ   encoderd   re   rf   r   rh   rg   r	   ri   r   )sid_str_ConvertStringSidToSidWr   rp   rr   rX   s         r   r   r   "  s    !?A%*EN!$) $/! ''{(C(CDDv}}Q'7'7885)=#>#>???V%%&:&CDDEE	od
   
r   c                    t           j        j        }t          t          t
          g|_        t          |_        |	                                }t                              |t          |                    }t                      }d|_        d|_        d|_        d|_        t                              t                              |                    |_        t+          d          }| 	                                }t                              |t          |                    } |||t-          |                    }	|j        S )z%
	Takes a SID instead of a trustee!
	r   )rD   rE   GetEffectiveRightsFromAclWrI   r   PDWORDrJ   rL   rK   rP   r   rQ   rR   rt   ru   rv   rw   rx   c_void_prh   ry   rH   rf   value)
aclr   _GetEffectiveRightsFromAclWr   psidr   effective_rigths_maskacl_datapaclress
             r   r   r   :  s      &I).
F(C%(>$LLNN##Hc(mm<<;;$%!__V%5%5d%;%;<<qLLNN##Hc(mm<<""4%8M2N2NOO##r   c                 x   t           j        j        }t          t          t
          t          t
          t          t          g|_        t          |_	        t          d          }t          d          }t          d          }t                              |t          |                    } || |d t          |          d t          |          t          |                     t                      }|t           k    rt                              |          t                              d|j        dz             }t                              d|j        dz             }	 || ||t          |          |	t          |          t          |                    }
|
st                                          |j        |	j        |j        fS )Nr    r   )rD   rE   LookupAccountSidWLPSTRPSIDLPWSTRLPDWORDrJ   boolrK   rH   r   rQ   rR   rf   r   ERROR_INSUFFICIENT_BUFFERr   r   r   )lpSystemNamer   _LookupAccountSidWcchNamecchReferencedDomainNamepeUselpSiderrorlpNamelpReferencedDomainNamesuccesss              r   r   r   R  s   o7 %tVWfgwW#88 88	q		$	$Xs8}}	=	=L%uW~~tUKbEcEcejkpeqeqrrr		&&&

&
&sGMA,=
>
> 66s<S<Y\]<]^^lE65>>Kach  jA  dB  dB  DI  JO  DP  DP  Q  Q ,2EK??r   c                    t           j        j        }t          t          t          t
          t          t
          t
          g|_        t          |_        t          d          }t          d          }t          d          }t                              |          } || |d t          |          d t          |          t          |                     t                      }|t          k    rt                              |          t                              d|j                  }t                              t                              |          t                    }	t                              d|j        dz             }
 || ||	t          |          |
t          |          t          |                    }|st                                          t)          |	j                  }t+          j        |          }||
j        |j        fS )Nr   r   r   r   )rD   rE   LookupAccountNameWr   r   r   rJ   BOOLrK   rH   r   r   rf   r   r   r   rQ   r   castrd   r   r	   ri   )r   accountname_LookupAccountNameWcbSidr   r   lpAccountNamer   r   r   r   r   rr   s                r   r   r   g  s   9!'wQX Y $	q 88	q--k::\=$edERiLjLjlqrwlxlxyyy		&&&""344FNN3''.. 66s<S<Y\]<]^^|]D%,,Pfhm  oF  iG  iG  IN  OT  IU  IU  V  V TZ  
t#)5;66r   c           	         t           j        j        }t          t          t          t          t
          g|_        t          |_        t          |_	        | 
                                }t                              |t          |                    }t                              t                              d                    }t                              d          } ||t           |t#          |          t#          |                     t                              ||j        dz            }t)          |           |                    d          S )Nr   r   r   )rD   rE   4ConvertSecurityDescriptorToStringSecurityDescriptorWrI   rH   PULONGrJ   rK   r   rM   rP   r   rQ   rR   rd   re   SDDL_REVISION_1rf   	string_atr   r   decode)rX   req_info5_ConvertSecurityDescriptorToStringSecurityDescriptorWsd_datapsdr   pstrsizer   s           r   r   r     s    9?9}6CH%QVX]_eBf6?BG6>CN6?;;==""7CLL99v}}Q''((MM!66sOXW\]aWbWbdijrdsdsttthnQ.//
4

;r   c                 H   t           j        j        }t          t          t
          t          t          g|_        t          |_        d }t	          d          }t	          d          }d} || ||||          }|dk    r|j	        }t                              |          }t	          |          }t	          d          } || ||||          }|dk    rt                              t                    t                              ||j	                  }	t          j        |	|          }
|
S r   )rD   rE   QueryServiceObjectSecurity	SC_HANDLErH   rI   r   rJ   rK   r   r   rQ   r   r   r   r   
from_bytes)hServicedwSecurityInformationsd_object_type_QueryServiceObjectSecuritylpSecurityDescriptor	cbBufSizepcbBytesNeededcorrect_lengthr   rr   rX   s              r   r   r     s   %I)2E5%(Q%(-$ 1XX((""8-BDXZcestt1HH!'.33NCC>""((""8-BDXZcestt1HH-~/CDD$T>::
r   c                     t           j        j        }t          t          t          g|_        t          |_        t          |_	         || ||          }|S r   )
rD   rE   OpenSCManagerWr   rH   rJ   r   rK   r   rM   )lpMachineNamelpDatabaseNamedwDesiredAccess_OpenSCManagerW	hSCObjects        r   r   r     sD    ?1#VU3%'_]NOLLr   c                     t           j        j        }t          t          t
          g|_        t          |_        t          |_	         || ||          S r   )
rD   rE   OpenServiceWr   r   rH   rJ   rK   r   rM   )
hSCManagerlpServiceNamer   _OpenServiceWs       r   r   r     s?    -$fe4#%j-AAAr   c                     t           j        j        }t          g|_        t
          |_        t          |_         ||            d S r   )	rD   rE   CloseServiceHandlerG   rJ   r   rK   r   rM   )hHandle_CloseServiceHandles     r   r   r     sA    9!' $ +Wr   c                   <    e Zd ZdefdefdefdefdefdefdefgZdS )	SERVICE_STATUSdwServiceTypedwCurrentStatedwControlsAccepteddwWin32ExitCodedwServiceSpecificExitCodedwCheckPoint
dwWaitHintN)rz   r{   r|   rH   r}   r~   r   r   r   r     sM        %(%(%(%(%(%(%(r   r   c                   $    e Zd ZdefdefdefgZdS )ENUM_SERVICE_STATUSWr   lpDisplayNameServiceStatusN)rz   r{   r|   r   r   r}   r~   r   r   r   r     s-        FFN#r   r   c                    t           j        j        }t          t          t          t
          t          t          t          t          g|_        t          |_	        t	          d          }t	          d          }t	          d          } || ||d dt          |          t          |          t          |                     g }d}t                      t          k    r|j        t          t                    k     rngt                               d|j                  }	 || ||t          |	          t          |	          t          |          t          |          t          |                    }t          |	          t          t                    |j        z  k     rt                                           t                               t                               t                               |	          t           j                  t,                    }
t/          d|j                  D ]"}|                    |
|         j                   #|rnt                      t          k    |st                                           |S )Nr   Fr   )rD   rE   EnumServicesStatusWr   rH   LPVOIDr   rJ   r   rK   rf   r   ERROR_MORE_DATAr   sizeofr   r   rQ   r   r   rd   r   LPENUM_SERVICE_STATUSWrangeappendr   )r   r   dwServiceState_EnumServicesStatusWcbBytesNeededServicesReturnedResumeHandleServicesr   ServicesBufferlpServicesArrayindexs               r   r   r     sL   ;"+UE65'SZ\c!d!%!HH!HH!HHj-q%P]J^J^`efv`w`wy~  @L  zM  zM  N  N  N~~((6"67777..sM4GHH.  ]NER`LaLacijxcycy  |A  BO  |P  |P  RW  Xh  Ri  Ri  kp  q}  k~  k~    'Nv&:;;>N>TTUU			KKFNN>,J,JFO \ \^tuu/Q(.// ; ;e??OE*8::::e ~~(( 	 r   l       l       l       l       l   P    l   `    l       l       )HKLMHKCUHKCRHKUHKCCHKPDi  i   i  c           	         t           j        j        }t          t          t
          t
          t          g|_        t
          |_        t          |_
        d }|=|                    d          }t                              |t          |                    }t                      } || |||t                              |                    }|S )Nascii)rD   rE   RegOpenKeyExArG   r   rH   PHANDLErJ   rK   rL   rM   r   r   rQ   rR   rf   )	regkey_handlesubkey_nameoptionsaccess_RegOpenKeyExWpsubkeyr   	reshandlera   s	            r   RegOpenKeyExWr  =  s    //"FE5'B 17###''SXX66'XX~mWgvv||I?V?VWWr   c                     t           j        j        }t          g|_        t
          |_        t          |_         ||            d S r   )	rD   rE   RegCloseKeyrG   rJ   r   rK   rL   rM   )r   _RegCloseKeys     r   r  r  M  s<    + /gr   c           
         t           j        j        }t          t          t
          t          t          t          t          t
          g|_        t          |_	        d}g }t          }|t          k    rt	          |          }t                              d          }t	          d          } || |t          |          t          |          t          t          t          t                    }|t          k    r"|j        }|                    |           |dz  }n%|t"          k    rn$t                                          |t          k    |S Nr   i     r   )rD   rE   RegEnumKeyExWrG   rH   rI   r   r   rJ   rK   ERROR_SUCCESSr   r   rf   NULLr   r   ERROR_NO_MORE_ITEMSr   )	hKey_RegEnumKeyExWisubkeysr   dwIndexr   	lpcchNamesknames	            r   r  r  a  s    //"E5'7FGUZ[ 
m!HH'''00&Cjj)tWeFmmU95E5EtTSWY]^^#ML6
>>&611
!!!			 m 	r   c           
         t           j        j        }t          t          t
          t          t
          t
          t
          t
          g|_        t          |_        d}g }t          }|t          k    rt	          |          }t                              d          }t	          d          } || |t          |          t          |          t          t          t          t                    }|t          k    r"|j        }|                    |           |dz  }n%|t           k    rn$t                                          |t          k    |S r  )rD   rE   RegEnumValueWrG   rH   rI   r   rJ   rK   r  r   r   rf   r  r   r   r  r   )	r   _RegEnumValueWr"  r#  r   r$  r   r%  r&  s	            r   r(  r(    s    //"E5'5%PUV 
m!HH'''00&Cjj)tWeFmmU95E5EtTSWY]^^#ML6
>>&611
!!!			 m 	r     c                    t           j        j        }t          t          t          t          g|_        t          |_        t          |_        t          
                    |                     d          t          |                     d                              }t          
                    |                    d          t          |                    d                              }t                              t                              d                    } |t                              |          t                              |          ||           t          |           t           S )Nr  r   )rD   netapi32NetShareGetInforI   rH   rJ   rK   rL   rM   r   rQ   r   rR   rd   re   printr   )
servername	sharenamelevel_NetShareGetInfopservername
psharenamepbuffs          r   r-  r-    s   O3#UE59"3**:+<+<W+E+Es:K\K\]dKeKeGfGfgg)))*:*:7*C*CSIYIYZaIbIbEcEcdd	a((	)	)&..+//
1K1KUTYZZZu 	r   c                     t           j        j        }t          t          t
          g|_        t          |_        t          |_
        t          t                    } || |t          |                     |j        S r   )rD   rE   OpenProcessTokenrG   rH   r  rJ   r   rK   r   rM   INVALID_HANDLE_VALUErf   r   )ProcessHandleDesiredAccess_OpenProcessTokenNewTokenHandles       r   r7  r7    sc    _5%ug6")-..=-~1F1FGGGr   c           	         t           j        j        }t          t          t
          t          t          g|_        t          |_
        t          |_        t          d          }t          |          } || |t          |          |t          |                     |j        |k    rt                               t$                    |S r   )rD   rE   GetTokenInformationrG   TOKEN_INFORMATION_CLASSr   rH   r   rJ   r   rK   r   rM   SIZEOFrf   r   r   r   r   )hTokenHandleTokenInformationClassTokenInformation_GetTokenInformationReturnLengthTokenInformationLengths         r   _internal_GetTokenInformationrG    s    ;"(*A65RX!Y!%!,a !122l$95AQ;R;RTjlqr~ll  A  A  A0001222r   c                       e Zd ZdefdefgZdS )LUIDLowPartHighPartN)rz   r{   r|   rH   LONGr}   r~   r   r   rI  rI    s%        %$r   rI  c                   N    e Zd Zdefdefdefdefdefdefdefdefd	efd
efg
ZdS )TOKEN_STATISTICSTokenIdAuthenticationIdExpirationTime	TokenTypeImpersonationLevelDynamicChargedDynamicAvailable
GroupCountPrivilegeCount
ModifiedIdN)	rz   r{   r|   rI  LONGLONG
TOKEN_TYPESECURITY_IMPERSONATION_LEVELrH   r}   r~   r   r   rN  rN  
  sf        $$(#*%67% % % % $r   rN  c                     |dk    s|t           k    rt          d|z            |t          k    r!t                      }t	          | ||           |S d S )Nr   z,Invalid value for TokenInformationClass (%i))MaxTokenInfoClass
ValueErrorTokenStatisticsrN  rG  )rA  rB  rC  s      r   r>  r>     si    Q"7:K"K"KADYYZZZ _,,%''.CEUVVV	 -,r   c                   $    e Zd ZdefdefdefgZdS )LSA_LAST_INTER_LOGON_INFOLastSuccessfulLogonLastFailedLogon*FailedAttemptCountSinceLastSuccessfulLogonN)rz   r{   r|   rY  ULONGr}   r~   r   r   ra  ra  *  s-        (#h/7r   ra  c                       e Zd Zdefdefdefdefdefdefdefdefd	efd
efdefdefdefdefdefdefdefdefdefdefdefdefgZ	dS )SECURITY_LOGON_SESSION_DATASizeLogonIdUserNameLogonDomainAuthenticationPackageSessionSid	LogonTimeLogonServerDnsDomainNameUpn	UserFlagsLastLogonInfoLogonScriptProfilePathHomeDirectoryHomeDirectoryDrive
LogoffTimeKickOffTimePasswordLastSetPasswordCanChangePasswordMustChangeN)
rz   r{   r|   re  rI  UNICODE_STRINGr   rY  ra  r}   r~   r   r   rg  rg  2  s        	5/d~.!N+e$-.!N#.-..!.!N#((h!"-r   rg  c                    t           j        j        }t          t	          t
                    g|_        t          |_        t                      } || t          |                    }|j
        j                                        t          |j
        j        d          |j
        j                                        |j
        j                                        |j
        j                                        d}|S )NT)usernameusersiddomainlogonserverdnsdomainname)rD   Secur32LsaGetLogonSessionDataPLUIDPOINTERPSECURITY_LOGON_SESSION_DATArJ   rH   rK   rf   rg   rj  
get_stringr   rn  rk  rp  rq  )luid_LsaGetLogonSessionDatasecdataxr   s        r   r  r  M  s    !>@%*G4P,Q,Q$R!$)  ())T5>>22(3355$W%5%94@@)4466".99;;$2==??  	r   c                  ^    t           j        j        } g | _        t          | _         |             S r   )rD   kernel32GetCurrentProcessIdrJ   rH   rK   )_GetCurrentProcessIds    r   r  r  `  s.    ;!#!&r   c                     t           j        j        }t          t          t          g|_        t          |_        | d}  || t          |          |          }|t          k    rt                                          |S )NrA   )rD   r  OpenProcessrH   r   rJ   rG   rK   r   r  r   r   )r   bInheritHandledwProcessId_OpenProcesshProcesss        r   r  r  k  si    +u-/L$~*>*>LLr   )F)r*  )enumwinacl.functions.defineswinacl.functions.kernel32r   r   r   winacl.functions.membuffr   winacl.dtyp.security_descriptorr   winacl.dtyp.sidr	   winacl.functions.constantsr
   r   r   c_intr?  	TokenUserTokenGroupsTokenPrivileges
TokenOwnerTokenPrimaryGroupTokenDefaultDaclTokenSourcerR  TokenImpersonationLevelr_  TokenRestrictedSidsTokenSessionIdTokenGroupsAndPrivilegesTokenSessionReferenceTokenSandBoxInertTokenAuditPolicyTokenOriginTokenElevationTypeTokenLinkedTokenTokenElevationTokenHasRestrictionsTokenAccessInformationTokenVirtualizationAllowedTokenVirtualizationEnabledTokenIntegrityLevelTokenUIAccessTokenMandatoryPolicyTokenLogonSidTokenIsAppContainerTokenCapabilitiesTokenAppContainerSidTokenAppContainerNumberTokenUserClaimAttributesTokenDeviceClaimAttributes"TokenRestrictedUserClaimAttributes$TokenRestrictedDeviceClaimAttributesTokenDeviceGroupsTokenRestrictedDeviceGroupsTokenSecurityAttributesTokenIsRestrictedr]  TOKEN_ASSIGN_PRIMARYTOKEN_DUPLICATETOKEN_IMPERSONATETOKEN_QUERYTOKEN_QUERY_SOURCETOKEN_ADJUST_PRIVILEGESTOKEN_ADJUST_GROUPSTOKEN_ADJUST_DEFAULTTOKEN_ADJUST_SESSIONIDSTANDARD_RIGHTS_READ
TOKEN_READSTANDARD_RIGHTS_REQUIREDTOKEN_ALL_ACCESSrO   GROUP_SECURITY_INFORMATIONrT   SACL_SECURITY_INFORMATIONLABEL_SECURITY_INFORMATION%UNPROTECTED_SACL_SECURITY_INFORMATION%UNPROTECTED_DACL_SECURITY_INFORMATION#PROTECTED_SACL_SECURITY_INFORMATION#PROTECTED_DACL_SECURITY_INFORMATIONATTRIBUTE_SECURITY_INFORMATIONSCOPE_SECURITY_INFORMATION(PROCESS_TRUST_LABEL_SECURITY_INFORMATIONBACKUP_SECURITY_INFORMATIONSERVICE_DRIVERSERVICE_WIN32SERVICE_ACTIVESERVICE_INACTIVESERVICE_STATE_ALLrG   r   SERVICE_ALL_ACCESSSERVICE_QUERY_CONFIGSERVICE_CHANGE_CONFIGSERVICE_QUERY_STATUSSERVICE_ENUMERATE_DEPENDENTSSERVICE_STARTSERVICE_STOPSERVICE_PAUSE_CONTINUESERVICE_INTERROGATESERVICE_USER_DEFINED_CONTROLSC_MANAGER_ALL_ACCESSSC_MANAGER_CONNECTSC_MANAGER_CREATE_SERVICESC_MANAGER_ENUMERATE_SERVICESC_MANAGER_LOCKSC_MANAGER_QUERY_LOCK_STATUSSC_MANAGER_MODIFY_BOOT_CONFIGrF   rc   	Structurert   r  r   r   r   r   r   r   r   r   r   r   r   r   r   r   LPSERVICE_STATUSr   r   r   HKEY_CLASSES_ROOTHKEY_CURRENT_USERHKEY_LOCAL_MACHINE
HKEY_USERSHKEY_PERFORMANCE_DATAHKEY_PERFORMANCE_TEXTHKEY_PERFORMANCE_NLSTEXTHKEY_CURRENT_CONFIGHKEY_DYN_DATAhive_name_mapKEY_ALL_ACCESSKEY_CREATE_LINKKEY_CREATE_SUB_KEYKEY_ENUMERATE_SUB_KEYSKEY_EXECUTE
KEY_NOTIFYKEY_QUERY_VALUEKEY_READKEY_SET_VALUEKEY_WOW64_32KEYKEY_WOW64_64KEY	KEY_WRITEREG_OPTION_RESERVEDREG_OPTION_NON_VOLATILEREG_OPTION_VOLATILEREG_OPTION_CREATE_LINKREG_OPTION_BACKUP_RESTOREREG_OPTION_OPEN_LINKr  r  r  r(  r-  r7  rG  rZ  PTOKEN_TYPErI  r  SecurityAnonymousSecurityIdentificationSecurityImpersonationSecurityDelegationr[  PSECURITY_IMPERSONATION_LEVELrN  PTOKEN_STATISTICSr>  ra  PLSA_LAST_INTER_LOGON_INFOrg  r  r  r  r  r~   r   r   <module>r     s    & & & & K K K K K K K K K K 1 1 1 1 1 1 ? ? ? ? ? ?       5 5 5 5 5 5   !, *+	*+*+*+
*+ *+ *+*+	*+ *,*, *,*, *, *, *, *,*, *, *,*, *, *, *, *, *,*, *,*, *, *, *, *, *, *, "*, $*, *, *, *, *,  !               "[0
,/CC%&(346HI/02FG   ( ' & & ' (2 %(2 %&0 #&0 #!+ ' +5 ((      	& % % % % %%% % % ") "( "( "( "("( "( "- - -~  *    	    ^^I&&
  (   <  0$ $ $0@ @ @*7 7 7: HbeH  C\  I\        2 B\^xAx  |U  BU  hl    < $($Rg      ?Q B B B B  	 	 	 	 	Y 	 	 	 7>**     9    !!566 4B]4Rev    <    
" " %    




    
	      "   04?Vai       (  N  F   , 5E      $ \
gj!!    9    	     %|  '(D E E     y    G,--       	    %W%>??     )   2  'w'BCC   &  
 
 
 
 
r   