o
    Žõ±j6}  ã                   @   s°  d dl mZ d dlmZmZ d dlmZmZmZ d dl	m
Z
mZmZmZmZmZmZmZmZmZmZmZ d dlmZ d dlmZ G dd„ deƒZG d	d
„ d
ƒZG dd„ dƒZG dd„ dƒZG dd„ dƒZG dd„ dƒZG dd„ dƒZG dd„ dƒZ G dd„ deƒZ!G dd„ dƒZ"G dd„ deƒZ#G dd„ deƒZ$G dd „ d ƒZ%G d!d"„ d"eƒZ&G d#d$„ d$ƒZ'G d%d&„ d&eƒZ(G d'd(„ d(ƒZ)G d)d*„ d*eƒZ*G d+d,„ d,ƒZ+G d-d.„ d.eƒZ,G d/d0„ d0ƒZ-G d1d2„ d2eƒZ.G d3d4„ d4ƒZ/G d5d6„ d6eƒZ0G d7d8„ d8ƒZ1G d9d:„ d:eƒZ2G d;d<„ d<ƒZ3G d=d>„ d>eƒZ4G d?d@„ d@ƒZ5dAdBd dCœdAdBdDdCœdEdFdBdCœdGdHdBdCœdIdJdBdCœdKdLdMdCœdIdLdMdCœdIdJdBdCœdNdOdBdCœdPdOdBdCœdIdOdBdCœdQdRdBdCœdSœZ6dTS )Ué    )Úlogger)ÚBOOLEANÚHANDLE)ÚKatzSystemArchitectureÚWindowsMinBuildÚWindowsBuild)ÚUSHORTÚULONGÚLSA_UNICODE_STRINGÚLSAISO_DATA_BLOBÚBYTEÚPVOIDÚWORDÚDWORDÚPOINTERÚLUIDÚPSIDÚANSI_STRING)ÚPackageTemplate)Úhexdumpc                       s(   e Zd Z‡ fdd„Zedd„ ƒZ‡  ZS )ÚMsvTemplatec                    s@   t ƒ  d¡ d | _d | _d| _d | _d | _d | _d | _d | _	d S )NÚMsvr   )
ÚsuperÚ__init__Ú	signatureÚfirst_entry_offsetÚfirst_entry_offset_correctionÚoffset2Ú
list_entryÚ!encrypted_credentials_list_structÚencrypted_credential_structÚdecrypted_credential_struct)Úself©Ú	__class__© úŸ/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/pypykatz/lsadecryptor/packages/msv/templates.pyr      s   
zMsvTemplate.__init__c                 C   s>  t  d| j ¡ t  d| j ¡ tƒ }t|_| d|j¡ t|_	| d|j	¡ | jt
jjk r2t|_n`| jt
jjk r=t|_nU| jt
jjk rHt|_nJ| jt
jjk r\| jdkrXt|_n:t|_n6| jt
jjk rp| jdkrlt|_n&t|_n"| jtjjk r{t|_n| jtjjk r�| jdkr‹t|_nt|_nt|_| d|j¡ | jtjjk r¤t|_ n$| jtj!jk r¯t"|_ n| jtj#jk rºt$|_ n| jtjjk rÅt%|_ nt&|_ | d|j ¡ | j't(j)k�r^t
j*j| j  kråt
jjk ròn nd	|_+d
|_,d|_-|S t
jj| j  k�rt
jjk �rn nd	|_+d
|_,d|_-|S t
jj| j  k�r!t
jjk �r.n nd|_+d|_,d
|_-|S t
jj| j  k�r?t
jjk �rLn nd|_+d|_,d
|_-|S t
jj| j  k�r]t
jjk �r~n n| jdk�rst|_d|_+d|_,d|_-|S d|_+d|_,d
|_-|S t
jj| j  k�r�tjjk �rœn nd|_+d|_,d|_-|S tjj| j  k�r­tj.jk �rºn nd|_+d|_,d
|_-|S tj.j| j  k�rËtj/jk �rØn nd|_+d|_,d
|_-|S tj/j| j  k�rétj0jk �rön nd|_+d|_,d
|_-|S tj0j| j  k�rtj1jk �rn nd|_+d|_,d
|_-|S tj1j| j  k�r%tj2jk �r2n nd|_+d|_,d
|_-|S tj2j| j  k�rCtjjk �rPn nd|_+d|_,d
|_-|S d|_+d |_,d!|_-d|_3|S | j't(j4k�rt
j*j| j  k�rvt
jjk �rƒn nd"|_+d|_,d|_-|S t
jj| j  k�r”t
jjk �r¡n nd#|_+d$|_,d%|_-|S t
jj| j  k�r²t
jjk �r¿n nd#|_+d$|_,d&|_-|S t
jj| j  k�rÐt
jjk �rÝn nd'|_+d(|_,d
|_-|S t
jj| j  k�rîtjjk �rûn nd)|_+d|_,d
|_-|S | jtjjk�rd*|_+d|_,d
|_-|S t5d+| j ƒ‚t5d,| j'| jf ƒ‚)-Nzbuildnumber: %szmsv_dll_timestamp: %sr   r    i  HSl   �g" r   r!   ó   L‹ßIÁãH‹ËLØéüÿÿÿr   éÓÿÿÿó   3ÿE…ÀA‰u L‹ã„é   ó   3öE‰/L‹ó…ÿ„é   i   `ó   ‹ÞH�[HÁáH�é"   éúÿÿÿó   3ÿA‰7L‹óE…Àté   é$   ó   3ÿE‰7H‹óE…Été   ó   3ÿA‰7L‹óE…Étó   E‰4$L‹ÿ‹óE…Àté   s   E‰7L‹÷‹óE…Àé   s
   E‰4$‹ûE…Àé   iðÿÿÿs   ÿP…À„s   ‰q‰0�½iõÿÿÿiÕÿÿÿiÖÿÿÿs   ‹Eø‹U‹Þ‰‰]ð…Été   s   ‹Mä‹Eô‰uè‰…ÿts   ‹Mè‹Eô‰uì‰…ÿtz4Could not identify template! sysinfo.buildnumber: %dz*Unknown Architecture: %s , Build number %s)6r   ÚdebugÚbuildnumberÚmsv_dll_timestampr   ÚKIWI_MSV1_0_CREDENTIAL_LISTr   Úlog_templateÚ"KIWI_MSV1_0_PRIMARY_CREDENTIAL_ENCr    r   ÚWIN_2K3ÚvalueÚPKIWI_MSV1_0_LIST_51r   Ú	WIN_VISTAÚPKIWI_MSV1_0_LIST_52ÚWIN_7ÚPKIWI_MSV1_0_LIST_60ÚWIN_8Ú"PKIWI_MSV1_0_LIST_61_ANTI_MIMIKATZÚPKIWI_MSV1_0_LIST_61ÚWIN_BLUEÚPKIWI_MSV1_0_LIST_63ÚPKIWI_MSV1_0_LIST_62r   ÚWIN_11_24H2ÚWIN_11_25H2ÚPKIWI_MSV1_0_LIST_65ÚPKIWI_MSV1_0_LIST_64ÚWIN_10_1507ÚMSV1_0_PRIMARY_CREDENTIAL_DECr!   ÚWIN_10_1511Ú$MSV1_0_PRIMARY_CREDENTIAL_10_OLD_DECÚWIN_10_1607Ú MSV1_0_PRIMARY_CREDENTIAL_10_DECÚ%MSV1_0_PRIMARY_CREDENTIAL_10_1607_DECÚ$MSV1_0_PRIMARY_CREDENTIAL_11_H24_DECÚarchitecturer   ÚX64ÚWIN_XPr   r   r   ÚWIN_10_1703ÚWIN_10_1803ÚWIN_10_1903ÚWIN_11_2022ÚWIN_11_2023r   ÚX86Ú	Exception)ÚsysinfoÚtemplater%   r%   r&   Úget_template   s   


"p&’k&—f&œa&¡Y©U&­P&²J&¸D&¾>&Ä9&É4&Î/Ô)Ù&#&à&æ&ë&ðõúzMsvTemplate.get_template)Ú__name__Ú
__module__Ú__qualname__r   Ústaticmethodrg   Ú__classcell__r%   r%   r#   r&   r      s    r   c                   @   s   e Zd ZdZdd„ ZdS )Ú%MSV1_0_PRIMARY_CREDENTIAL_STRANGE_DECé`   c                 C   s’   t |ƒj| _t |ƒj| _| d¡| _t|ƒj| _| d¡ t|ƒj| _| d¡| _	t|ƒj| _
| d¡| _d | _d | _d | _d | _d | _d | _d S )Né   é(   r2   é   )r   rC   Úunk1Úunk2ÚreadÚunk_tagr	   Úunk_remaining_sizeÚLengthOfNtOwfPasswordÚNtOwfPasswordÚLengthOfShaOwfPasswordÚShaOwPasswordÚLogonDomainNameÚUserNameÚLmOwfPasswordÚisNtOwfPasswordÚisLmOwfPasswordÚisShaOwPassword©r"   Úreaderr%   r%   r&   r   Ó   s   

z.MSV1_0_PRIMARY_CREDENTIAL_STRANGE_DEC.__init__N)rh   ri   rj   Úsizer   r%   r%   r%   r&   rm   Ï   s    rm   c                   @   ó   e Zd Zdd„ ZdS )rT   c                 C   s`   t |ƒ| _t |ƒ| _| d¡| _| d¡| _| d¡| _t|ƒj| _	t|ƒj| _
t|ƒj| _d S ©Nr2   rq   )r
   r{   r|   rt   rx   r}   rz   r   rC   r~   r   r€   r�   r%   r%   r&   r   æ   s   

z&MSV1_0_PRIMARY_CREDENTIAL_DEC.__init__N©rh   ri   rj   r   r%   r%   r%   r&   rT   å   ó    rT   c                   @   r„   )rV   c                 C   s„   t |ƒ| _t |ƒ| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t	|ƒj| _
t	|ƒj| _| d¡| _| d¡| _| d¡| _d S r…   )r
   r{   r|   r   rC   ÚisIsor~   r   r€   r   Úalign0Úalign1rt   rx   r}   rz   r�   r%   r%   r&   r   ñ   s   

z-MSV1_0_PRIMARY_CREDENTIAL_10_OLD_DEC.__init__Nr†   r%   r%   r%   r&   rV   ð   r‡   rV   c                   @   r„   )rX   c                 C   sœ   t |ƒ| _t |ƒ| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t	|ƒj| _
t	|ƒj| _t	|ƒj| _t	|ƒj| _| d¡| _| d¡| _| d¡| _d S r…   )r
   r{   r|   r   rC   rˆ   r~   r   r€   r   r‰   rŠ   Úalign2Úalign3rt   rx   r}   rz   r�   r%   r%   r&   r   ÿ   s   

z)MSV1_0_PRIMARY_CREDENTIAL_10_DEC.__init__Nr†   r%   r%   r%   r&   rX   þ   r‡   rX   c                   @   r„   )rY   c                 C   sì   t |ƒ| _t |ƒ| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _	t|ƒj| _
t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _| d¡| _t| jd ƒrb| | j¡| _d S | d¡| _| d¡| _| d¡| _d S ©Nrq   r   r2   )r
   r{   r|   r   rC   ÚpNtlmCredIsoInProcr   rˆ   r~   r   r€   ÚisDPAPIProtectedr   r‰   rŠ   r‹   r   ÚcredKeyTyper   ÚisoSizert   ÚDPAPIProtectedÚboolÚencryptedBlobrx   r}   rz   r�   r%   r%   r&   r     s&   

z.MSV1_0_PRIMARY_CREDENTIAL_10_1607_DEC.__init__Nr†   r%   r%   r%   r&   rY     r‡   rY   c                   @   r„   )rZ   c                 C   sà   t |ƒ| _t |ƒ| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _	t|ƒj| _
t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _| d¡| _t| jd ƒr\| | j¡| _d S | d¡| _| d¡| _| d¡| _d S r�   )r
   r{   r|   r   rC   rŽ   r   rˆ   r~   r   r€   r�   r   r‰   rŠ   r‹   r   r‘   rt   r’   r“   r”   rx   r}   rz   r�   r%   r%   r&   r   '  s$   

z-MSV1_0_PRIMARY_CREDENTIAL_11_H24_DEC.__init__Nr†   r%   r%   r%   r&   rZ   &  r‡   rZ   c                   @   r„   )rA   c                 C   s*   t |ƒ| _t|ƒ| _| ¡  t|ƒ| _d S ©N)Ú#PKIWI_MSV1_0_PRIMARY_CREDENTIAL_ENCÚFlinkr   ÚPrimaryÚalignr
   Úencrypted_credentialsr�   r%   r%   r&   r   ?  s   

z+KIWI_MSV1_0_PRIMARY_CREDENTIAL_ENC.__init__Nr†   r%   r%   r%   r&   rA   >  r‡   rA   c                       ó   e Zd Z‡ fdd„Z‡  ZS )r–   c                    ó   t ƒ  |t¡ d S r•   )r   r   rA   r�   r#   r%   r&   r   F  ó   z,PKIWI_MSV1_0_PRIMARY_CREDENTIAL_ENC.__init__©rh   ri   rj   r   rl   r%   r%   r#   r&   r–   E  ó    r–   c                   @   r„   )r?   c                 C   s,   t |ƒ| _t|ƒj| _| ¡  t|ƒ| _d S r•   )ÚPKIWI_MSV1_0_CREDENTIAL_LISTr—   r   rC   ÚAuthenticationPackageIdr™   r–   ÚPrimaryCredentials_ptrr�   r%   r%   r&   r   N  s   
z$KIWI_MSV1_0_CREDENTIAL_LIST.__init__Nr†   r%   r%   r%   r&   r?   M  r‡   r?   c                       r›   )r    c                    rœ   r•   )r   r   r?   r�   r#   r%   r&   r   V  r�   z%PKIWI_MSV1_0_CREDENTIAL_LIST.__init__rž   r%   r%   r#   r&   r    U  rŸ   r    c                       r›   )rD   c                    rœ   r•   )r   r   ÚKIWI_MSV1_0_LIST_51r�   r#   r%   r&   r   Z  r�   zPKIWI_MSV1_0_LIST_51.__init__rž   r%   r%   r#   r&   rD   Y  rŸ   rD   c                   @   r„   )r£   c                 C   s  t |ƒ| _t |ƒ| _t|ƒj| _t|ƒ| _t|ƒ| _t	|ƒj| _
t	|ƒj| _t|ƒ| _t|ƒj| _t|ƒj| _| d¡ tj| d¡ddd�| _| ¡  t|ƒ| _t|ƒ| _t|ƒj| _| ¡  t	|ƒj| _t	|ƒj| _t	|ƒj| _t|ƒj| _| ¡  t	|ƒ| _d S ©Né   ÚlittleF©Ú	byteorderÚsigned)rD   r—   ÚBlinkr   rC   ÚLocallyUniqueIdentifierr
   r|   ÚDomainer   Úunk0rr   r   ÚpSidr	   Ú	LogonTypeÚSessionr™   ÚintÚ
from_bytesrt   Ú	LogonTimeÚLogonServerr    ÚCredentials_list_ptrÚunk19Úunk20Úunk21Úunk22Úunk23ÚCredentialManagerr�   r%   r%   r&   r   ^  s.   







zKIWI_MSV1_0_LIST_51.__init__Nr†   r%   r%   r%   r&   r£   ]  r‡   r£   c                       r›   )rF   c                    rœ   r•   )r   r   ÚKIWI_MSV1_0_LIST_52r�   r#   r%   r&   r   x  r�   zPKIWI_MSV1_0_LIST_52.__init__rž   r%   r%   r#   r&   rF   w  rŸ   rF   c                   @   r„   )r¼   c                 C   sò   t |ƒ| _t |ƒ| _t|ƒj| _t|ƒ| _t|ƒ| _t	|ƒj| _
t	|ƒj| _t|ƒ| _t|ƒj| _t|ƒj| _| d¡ tj| d¡ddd�| _t|ƒ| _t|ƒ| _t|ƒj| _| ¡  t	|ƒj| _t	|ƒj| _t|ƒj| _| ¡  t	|ƒ| _d S r¤   )rF   r—   rª   r   rC   r«   r
   r|   r¬   r   r­   rr   r   r®   r	   r¯   r°   r™   r±   r²   rt   r³   r´   r    rµ   r¶   r·   r¸   r¹   r»   r�   r%   r%   r&   r   |  s*   







zKIWI_MSV1_0_LIST_52.__init__Nr†   r%   r%   r%   r&   r¼   {  r‡   r¼   c                       r›   )rH   c                    rœ   r•   )r   r   ÚKIWI_MSV1_0_LIST_60r�   r#   r%   r&   r   ”  r�   zPKIWI_MSV1_0_LIST_60.__init__rž   r%   r%   r#   r&   rH   “  rŸ   rH   c                   @   r„   )r½   c                 C   s  t |ƒ| _t |ƒ| _| ¡  t|ƒj| _t|ƒj| _| ¡  t|ƒj| _	t|ƒj| _
t|ƒj| _t|ƒj| _| ¡  t|ƒj| _| ¡  t|ƒj| _| ¡  t|ƒj| _| ¡  t|ƒj| _| ¡  t|ƒj| _t|ƒj| _t|ƒj| _| ¡  t|ƒj| _| ¡  tj| d¡ddd�| _tj| d¡ddd�| _| ¡  t|ƒ| _t|ƒ| _t|ƒj| _t|ƒj| _t |ƒ| _!t|ƒj| _"t|ƒj| _#| d¡ tj| d¡ddd�| _$t|ƒ| _%t&|ƒ| _'t|ƒj| _(| ¡  t|ƒj| _)t|ƒj| _*t|ƒj| _+t|ƒj| _,| ¡  t|ƒ| _-d S r¤   ).rH   r—   rª   r™   r   rC   r­   r	   rr   rs   Úunk3Úunk4Úunk5r   ÚhSemaphore6Úunk7ÚhSemaphore8Úunk9Úunk10Úunk11Úunk12Úunk13r±   r²   rt   r«   Ú SecondaryLocallyUniqueIdentifierr
   r|   r¬   Úunk14Úunk15r   r®   r¯   r°   r³   r´   r    rµ   r¶   r·   r¸   r¹   rº   r»   r�   r%   r%   r&   r   ˜  s^   







zKIWI_MSV1_0_LIST_60.__init__Nr†   r%   r%   r%   r&   r½   —  r‡   r½   c                       r›   )rK   c                    rœ   r•   )r   r   ÚKIWI_MSV1_0_LIST_61r�   r#   r%   r&   r   Ê  r�   zPKIWI_MSV1_0_LIST_61.__init__rž   r%   r%   r#   r&   rK   É  rŸ   rK   c                   @   r„   )rÌ   c                 C   s®  t |ƒ| _t |ƒ| _t|ƒj| _t|ƒj| _| ¡  t|ƒj| _	t|ƒj| _
t|ƒj| _t|ƒj| _| ¡  t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒ| _t|ƒ| _t|ƒj| _t|ƒj| _t|ƒ| _t|ƒj| _ t|ƒj| _!| d¡ t"j#| $d¡ddd�| _%t|ƒ| _&t'|ƒ| _(t|ƒj| _)t|ƒj| _*t|ƒj| _+t|ƒj| _,| ¡  t|ƒ| _-d S r¤   ).rK   r—   rª   r   rC   r­   r	   rr   r™   rs   r¾   r¿   rÀ   r   rÁ   rÂ   rÃ   rÄ   rÅ   rÆ   rÇ   rÈ   r   r«   rÉ   r
   r|   r¬   rÊ   rË   r   r®   r¯   r°   r±   r²   rt   r³   r´   r    rµ   r¶   r·   r¸   r¹   r»   r�   r%   r%   r&   r   Î  sJ   







zKIWI_MSV1_0_LIST_61.__init__Nr†   r%   r%   r%   r&   rÌ   Í  r‡   rÌ   c                       r›   )rJ   c                    rœ   r•   )r   r   Ú!KIWI_MSV1_0_LIST_61_ANTI_MIMIKATZr�   r#   r%   r&   r   ÷  r�   z+PKIWI_MSV1_0_LIST_61_ANTI_MIMIKATZ.__init__rž   r%   r%   r#   r&   rJ   ö  rŸ   rJ   c                   @   r„   )rÍ   c                 C   sÂ  t |ƒ| _t |ƒ| _t|ƒj| _t|ƒj| _| ¡  t|ƒj| _	t|ƒj| _
t|ƒj| _t|ƒj| _| ¡  t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _| d¡| _| ¡  t|ƒ| _t|ƒ| _t|ƒj| _t|ƒj| _t |ƒ| _!t|ƒj| _"t|ƒj| _#| d¡ t$j%| d¡ddd�| _&t|ƒ| _'t(|ƒ| _)t|ƒj| _*t|ƒj| _+t|ƒj| _,t|ƒj| _-| ¡  t|ƒ| _.d S ©Né   r¥   r¦   Fr§   )/rJ   r—   rª   r   rC   r­   r	   rr   r™   rs   r¾   r¿   rÀ   r   rÁ   rÂ   rÃ   rÄ   rÅ   rÆ   rÇ   rÈ   r   r«   rÉ   rt   Úwazar
   r|   r¬   rÊ   rË   r   r®   r¯   r°   r±   r²   r³   r´   r    rµ   r¶   r·   r¸   r¹   r»   r�   r%   r%   r&   r   û  sN   







z*KIWI_MSV1_0_LIST_61_ANTI_MIMIKATZ.__init__Nr†   r%   r%   r%   r&   rÍ   ú  r‡   rÍ   c                       r›   )rN   c                    rœ   r•   )r   r   ÚKIWI_MSV1_0_LIST_62r�   r#   r%   r&   r   %  r�   zPKIWI_MSV1_0_LIST_62.__init__rž   r%   r%   r#   r&   rN   $  rŸ   rN   c                   @   r„   )rÑ   c                 C   s  t |ƒ| _t |ƒ| _t|ƒj| _t|ƒj| _| ¡  t|ƒj| _	t|ƒj| _
t|ƒj| _t|ƒj| _| ¡  t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒ| _t|ƒ| _t|ƒj| _t|ƒj| _t|ƒ| _t|ƒ| _ t|ƒj| _!| ¡  t|ƒj| _"t|ƒj| _#| ¡  t$j%| &d¡ddd�| _'t|ƒ| _(t)|ƒ| _*t|ƒj| _+t|ƒj| _,t|ƒj| _-t|ƒj| _.t|ƒj| _/t|ƒj| _0t|ƒj| _1t|ƒj| _2| ¡  t|ƒj| _3t|ƒj| _4t|ƒj| _5t|ƒ| _6d S r¤   )7rN   r—   rª   r   rC   r­   r	   rr   r™   rs   r¾   r¿   rÀ   r   rÁ   rÂ   rÃ   rÄ   rÅ   rÆ   rÇ   rÈ   r   r«   rÉ   r
   r|   r¬   rÊ   rË   ÚTyper   r®   r¯   Úunk18r°   r±   r²   rt   r³   r´   r    rµ   r¶   r·   r¸   r¹   rº   Úunk24Úunk25Úunk26Úunk27Úunk28Úunk29r»   r�   r%   r%   r&   r   )  s^   







zKIWI_MSV1_0_LIST_62.__init__Nr†   r%   r%   r%   r&   rÑ   (  r‡   rÑ   c                       r›   )rM   c                    rœ   r•   )r   r   ÚKIWI_MSV1_0_LIST_63r�   r#   r%   r&   r   [  r�   zPKIWI_MSV1_0_LIST_63.__init__rž   r%   r%   r#   r&   rM   Z  rŸ   rM   c                   @   r„   )rÚ   c                 C   s<  t |ƒ| _t |ƒ| _t|ƒj| _t|ƒj| _| ¡  t|ƒj| _	t|ƒj| _
t|ƒj| _t|ƒj| _| ¡  t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _| ¡  t|ƒj| _t|ƒj| _| d¡| _| ¡  t|ƒ| _t|ƒ| _t|ƒj| _t|ƒj| _t|ƒ| _ t!|ƒ| _"t|ƒj| _#| ¡  t|ƒj| _$t|ƒj| _%| d¡ t&j'| d¡ddd�| _(t|ƒ| _)t*|ƒ| _+t|ƒj| _,t|ƒj| _-t|ƒj| _.t|ƒj| _/t|ƒj| _0t|ƒj| _1t|ƒj| _2t|ƒj| _3| ¡  t|ƒj| _4t|ƒj| _5t|ƒj| _6t|ƒ| _7d S rÎ   )8rM   r—   rª   r   rC   r­   r	   rr   r™   rs   r¾   r¿   rÀ   r   rÁ   rÂ   rÃ   rÄ   rÅ   rÆ   rÇ   rÈ   r   r«   rÉ   rt   rÐ   r
   r|   r¬   rÊ   rË   rÒ   r   r®   r¯   rÓ   r°   r±   r²   r³   r´   r    rµ   r¶   r·   r¸   r¹   rº   rÔ   rÕ   rÖ   r×   rØ   rÙ   r»   r�   r%   r%   r&   r   _  sd   








zKIWI_MSV1_0_LIST_63.__init__Nr†   r%   r%   r%   r&   rÚ   ^  r‡   rÚ   c                       r›   )rR   c                    rœ   r•   )r   r   ÚKIWI_MSV1_0_LIST_64r�   r#   r%   r&   r   ”  r�   zPKIWI_MSV1_0_LIST_64.__init__rž   r%   r%   r#   r&   rR   “  rŸ   rR   c                   @   r„   )rÛ   c                 C   sH  t |ƒ| _t |ƒ| _t|ƒj| _t|ƒj| _| ¡  t|ƒj| _	t|ƒj| _
t|ƒj| _t|ƒj| _| ¡  t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _| ¡  t|ƒj| _t|ƒj| _| d¡| _| ¡  t|ƒj| _t|ƒ| _t|ƒ| _t|ƒj| _t|ƒj| _ t|ƒ| _!t"|ƒ| _#t|ƒj| _$| ¡  t|ƒj| _%t|ƒj| _&| d¡ t'j(| d¡ddd�| _)t|ƒ| _*t+|ƒ| _,t|ƒj| _-t|ƒj| _.t|ƒj| _/t|ƒj| _0t|ƒj| _1t|ƒj| _2t|ƒj| _3t|ƒj| _4| ¡  t|ƒj| _5t|ƒj| _6t|ƒj| _7t|ƒ| _8d S rÎ   )9rR   r—   rª   r   rC   r­   r	   rr   r™   rs   r¾   r¿   rÀ   r   rÁ   rÂ   rÃ   rÄ   rÅ   rÆ   rÇ   rÈ   r   r«   rÉ   rt   rÐ   rÊ   r
   r|   r¬   rË   Úunk16rÒ   r   r®   r¯   Úunk17r°   r±   r²   r³   r´   r    rµ   rÓ   r¶   r·   r¸   r¹   rº   rÔ   rÕ   rÖ   r×   rØ   r»   r�   r%   r%   r&   r   ˜  sf   








zKIWI_MSV1_0_LIST_64.__init__Nr†   r%   r%   r%   r&   rÛ   —  r‡   rÛ   c                       r›   )rQ   c                    rœ   r•   )r   r   ÚKIWI_MSV1_0_LIST_65r�   r#   r%   r&   r   Î  r�   zPKIWI_MSV1_0_LIST_65.__init__rž   r%   r%   r#   r&   rQ   Í  rŸ   rQ   c                   @   r„   )rÞ   c                 C   sT  t |ƒ| _t |ƒ| _t|ƒj| _t|ƒj| _| ¡  t|ƒj| _	t|ƒj| _
t|ƒj| _t|ƒj| _| ¡  t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _t|ƒj| _| ¡  t|ƒj| _t|ƒj| _| d¡| _| ¡  t|ƒj| _t|ƒj| _t|ƒ| _t|ƒ| _t|ƒj| _ t|ƒj| _!t|ƒ| _"t#|ƒ| _$t|ƒj| _%| ¡  t|ƒj| _&t|ƒj| _'| d¡ t(j)| d¡ddd�| _*t|ƒ| _+t,|ƒ| _-t|ƒj| _.t|ƒj| _/t|ƒj| _0t|ƒj| _1t|ƒj| _2t|ƒj| _3t|ƒj| _4t|ƒj| _5| ¡  t|ƒj| _6t|ƒj| _7t|ƒj| _8t|ƒ| _9d S rÎ   ):rQ   r—   rª   r   rC   r­   r	   rr   r™   rs   r¾   r¿   rÀ   r   rÁ   rÂ   rÃ   rÄ   rÅ   rÆ   rÇ   rÈ   r   r«   rÉ   rt   rÐ   rÊ   rË   r
   r|   r¬   rÜ   rÝ   rÒ   r   r®   r¯   rÓ   r°   r±   r²   r³   r´   r    rµ   r¶   r·   r¸   r¹   rº   rÔ   rÕ   rÖ   r×   rØ   rÙ   r»   r�   r%   r%   r&   r   Ò  sh   








zKIWI_MSV1_0_LIST_65.__init__Nr†   r%   r%   r%   r&   rÞ   Ñ  r‡   rÞ   r'   r(   )r   r   r   r)   r*   r+   r,   r-   r1   r2   r.   r/   r0   r4   r5   r6   r7   r8   )Ú0Ú1Ú2Ú3Ú4Ú5Ú6Ú7Ú8Ú9Ú10Ú11N)7Úpypykatzr   Úminidump.win_datatypesr   r   Úpypykatz.commons.commonr   r   r   Úpypykatz.commons.win_datatypesr   r	   r
   r   r   r   r   r   r   r   r   r   Ú%pypykatz.lsadecryptor.package_commonsr   r   r   rm   rT   rV   rX   rY   rZ   rA   r–   r?   r    rD   r£   rF   r¼   rH   r½   rK   rÌ   rJ   rÍ   rN   rÑ   rM   rÚ   rR   rÛ   rQ   rÞ   Útemplates_testr%   r%   r%   r&   Ú<module>   sª   8 @2)*256<ýýýýýýý	ü
ü
ü	ýý
¥