Documentation
¶
Rendered for windows/amd64
Index ¶
- Constants
- Variables
- func CloseTrace(traceHandle syscall.Handle) error
- func ControlTrace(traceHandle syscall.Handle, instanceName *uint16, ...) error
- func ConvertSecurityDescriptorToStringSecurityDescriptorW(securityDescriptor *SecurityDescriptor, requestedStringSDRevision uint32, ...) (string, error)
- func CopyData(pointer uintptr, size int) []byte
- func EnableTraceEx2(traceHandle syscall.Handle, providerId *GUID, controlCode uint32, level uint8, ...) error
- func EventAccessControl(guid *GUID, operation uint32, sid *SID, rights uint32, allowOrDeny bool) error
- func EventAccessQuery(guid *GUID, buffer *SecurityDescriptor, bufferSize *uint32) error
- func GetAccessString(guid string) (s string, err error)
- func GetKernelProviderFlags(terms ...string) (flags uint32)
- func IsKernelProvider(term string) bool
- func OpenTrace(logfile *EventTraceLogfile) (syscall.Handle, error)
- func ProcessTrace(handleArray *syscall.Handle, handleCount uint32, startTime *FileTime, ...) error
- func StartTrace(traceHandle *syscall.Handle, instanceName *uint16, ...) error
- func StopTrace(traceHandle syscall.Handle, instanceName *uint16, ...) error
- func TdhEnumerateProviderFieldInformation(pGuid *GUID, eventFieldType int, pBuffer *ProviderFieldInfoArray, ...) error
- func TdhEnumerateProviders(pBuffer *ProviderEnumerationInfo, pBufferSize *uint32) error
- func TdhFormatProperty(eventInfo *TraceEventInfo, mapInfo *EventMapInfo, pointerSize uint32, ...) error
- func TdhGetEventInformation(pEvent *EventRecord, tdhContextCount uint32, pTdhContext *TdhContext, ...) error
- func TdhGetEventMapInformation(pEvent *EventRecord, pMapName *uint16, pBuffer *EventMapInfo, ...) error
- func TdhGetProperty(pEvent *EventRecord, tdhContextCount uint32, pTdhContext *TdhContext, ...) error
- func TdhGetPropertySize(pEvent *EventRecord, tdhContextCount uint32, pTdhContext *TdhContext, ...) error
- func TdhQueryProviderFieldInformation(pGuid *GUID, eventFieldValue uint64, eventFieldType int, ...) error
- func UTF16AtOffsetToString(pstruct uintptr, offset uintptr) string
- func UTF16BytesToString(utf16 []byte) string
- func UTF16PtrToString(utf16 *uint16) string
- func UUID() (uuid string, err error)
- func Wcslen(uintf16 *uint16) (len uint64)
- type ACL
- type AutoLogger
- type Consumer
- func (c *Consumer) DefaultEventCallback(event *Event) (err error)
- func (c *Consumer) DefaultEventRecordCallback(h *EventRecordHelper) error
- func (c *Consumer) Err() error
- func (c *Consumer) FromSessions(sessions ...Session) *Consumer
- func (c *Consumer) FromTraceNames(names ...string) *Consumer
- func (c *Consumer) InitFilters(providers []Provider)
- func (c *Consumer) OpenTrace(name string) (err error)
- func (c *Consumer) Start() (err error)
- func (c *Consumer) Stop() (err error)
- type DecodingSource
- type EnableTraceParameters
- type EtwBufferContext
- type Event
- type EventCallback
- type EventDescriptor
- type EventFieldType
- type EventFilter
- type EventFilterDescriptor
- type EventHeader
- type EventHeaderExtendedDataItem
- type EventID
- type EventMapEntry
- type EventMapInfo
- type EventPropertyInfo
- func (i *EventPropertyInfo) Count() uint16
- func (i *EventPropertyInfo) CountPropertyIndex() uint16
- func (i *EventPropertyInfo) CustomSchemaOffset() uint32
- func (i *EventPropertyInfo) InType() uint16
- func (i *EventPropertyInfo) Length() uint16
- func (i *EventPropertyInfo) LengthPropertyIndex() uint16
- func (i *EventPropertyInfo) MapNameOffset() uint32
- func (i *EventPropertyInfo) NumOfStructMembers() uint16
- func (i *EventPropertyInfo) OutType() uint16
- func (i *EventPropertyInfo) StructStartIndex() uint16
- type EventRecord
- type EventRecordCallback
- type EventRecordHelper
- func (e *EventRecordHelper) Channel() string
- func (e *EventRecordHelper) EventID() uint16
- func (e *EventRecordHelper) GetPropertyInt(name string) (i int64, err error)
- func (e *EventRecordHelper) GetPropertyString(name string) (s string, err error)
- func (e *EventRecordHelper) GetPropertyUint(name string) (u uint64, err error)
- func (e *EventRecordHelper) ParseProperties(names ...string) (err error)
- func (e *EventRecordHelper) ParseProperty(name string) (err error)
- func (e *EventRecordHelper) Provider() string
- func (e *EventRecordHelper) ProviderGUID() string
- func (e *EventRecordHelper) SetProperty(name, value string)
- func (e *EventRecordHelper) Skip()
- func (e *EventRecordHelper) Skippable()
- type EventSecurityOperation
- type EventTrace
- type EventTraceBufferCallback
- type EventTraceHeader
- type EventTraceLogfile
- type EventTraceProperties
- type FileTime
- type GUID
- type IEvent
- type MapFlags
- type MapValueType
- type MofClass
- type Property
- type PropertyDataDescriptor
- type PropertyFlags
- type Provider
- type ProviderDefinition
- type ProviderEnumerationInfo
- type ProviderFieldInfo
- type ProviderFieldInfoArray
- type ProviderFilter
- type ProviderMap
- type RealTimeSession
- type SID
- type SecurityDescriptor
- type SecurityDescriptorControl
- type SecurityInformation
- type Session
- type SidIdentifierAuthority
- type SystemTime
- type TdhContext
- type TdhContextType
- type TdhInType
- type TdhOutType
- type TemplateFlags
- type TimeZoneInformation
- type TraceEventInfo
- func (t *TraceEventInfo) ActivityIDName() string
- func (t *TraceEventInfo) ChannelName() string
- func (t *TraceEventInfo) EventID() uint16
- func (t *TraceEventInfo) EventMessage() string
- func (t *TraceEventInfo) GetEventPropertyInfoAt(i uint32) *EventPropertyInfo
- func (t *TraceEventInfo) IsMof() bool
- func (t *TraceEventInfo) IsXML() bool
- func (t *TraceEventInfo) KeywordName() string
- func (t *TraceEventInfo) LevelName() string
- func (t *TraceEventInfo) OpcodeName() string
- func (t *TraceEventInfo) PropertyNameOffset(i uint32) uintptr
- func (t *TraceEventInfo) ProviderName() string
- func (t *TraceEventInfo) RelatedActivityIDName() string
- func (t *TraceEventInfo) TaskName() string
- type TraceLogfileHeader
- type TraceProviderInfo
- type WnodeHeader
Constants ¶
View Source
const ( WNODE_FLAG_ALL_DATA = 0x00000001 WNODE_FLAG_SINGLE_INSTANCE = 0x00000002 WNODE_FLAG_SINGLE_ITEM = 0x00000004 WNODE_FLAG_EVENT_ITEM = 0x00000008 WNODE_FLAG_FIXED_INSTANCE_SIZE = 0x00000010 WNODE_FLAG_TOO_SMALL = 0x00000020 WNODE_FLAG_INSTANCES_SAME = 0x00000040 WNODE_FLAG_STATIC_INSTANCE_NAMES = 0x00000080 WNODE_FLAG_INTERNAL = 0x00000100 WNODE_FLAG_USE_TIMESTAMP = 0x00000200 WNODE_FLAG_PERSIST_EVENT = 0x00000400 WNODE_FLAG_EVENT_REFERENCE = 0x00002000 WNODE_FLAG_ANSI_INSTANCENAwin32 = 0x00040000 WNODE_FLAG_USE_GUID_PTR = 0x00080000 WNODE_FLAG_USE_MOF_PTR = 0x00100000 WNODE_FLAG_NO_HEADER = 0x00200000 WNODE_FLAG_SEND_DATA_BLOCK = 0x00400000 WNODE_FLAG_SEVERITY_MASK = 0xff000000 )
View Source
const ( EVENT_TRACE_TYPE_INFO = 0x00 EVENT_TRACE_TYPE_START = 0x01 EVENT_TRACE_TYPE_END = 0x02 EVENT_TRACE_TYPE_STOP = 0x02 EVENT_TRACE_TYPE_DC_START = 0x03 EVENT_TRACE_TYPE_DC_END = 0x04 EVENT_TRACE_TYPE_EXTENSION = 0x05 EVENT_TRACE_TYPE_REPLY = 0x06 EVENT_TRACE_TYPE_DEQUEUE = 0x07 EVENT_TRACE_TYPE_RESUME = 0x07 EVENT_TRACE_TYPE_CHECKPOINT = 0x08 EVENT_TRACE_TYPE_SUSPEND = 0x08 EVENT_TRACE_TYPE_WINEVT_SEND = 0x09 EVENT_TRACE_TYPE_WINEVT_RECEIVE = 0xf0 EVENT_TRACE_TYPE_LOAD = 0x0a EVENT_TRACE_TYPE_IO_READ = 0x0a EVENT_TRACE_TYPE_IO_WRITE = 0x0b EVENT_TRACE_TYPE_IO_READ_INIT = 0x0c EVENT_TRACE_TYPE_IO_WRITE_INIT = 0x0d EVENT_TRACE_TYPE_IO_FLUSH = 0x0e EVENT_TRACE_TYPE_IO_FLUSH_INIT = 0x0f EVENT_TRACE_TYPE_MM_TF = 0x0a EVENT_TRACE_TYPE_MM_DZF = 0x0b EVENT_TRACE_TYPE_MM_COW = 0x0c EVENT_TRACE_TYPE_MM_GPF = 0x0d EVENT_TRACE_TYPE_MM_HPF = 0x0e EVENT_TRACE_TYPE_MM_AV = 0x0f EVENT_TRACE_TYPE_SEND = 0x0a EVENT_TRACE_TYPE_RECEIVE = 0x0b EVENT_TRACE_TYPE_CONNECT = 0x0c EVENT_TRACE_TYPE_DISCONNECT = 0x0d EVENT_TRACE_TYPE_RETRANSMIT = 0x0e EVENT_TRACE_TYPE_ACCEPT = 0x0f EVENT_TRACE_TYPE_RECONNECT = 0x10 EVENT_TRACE_TYPE_CONNFAIL = 0x11 EVENT_TRACE_TYPE_COPY_TCP = 0x12 EVENT_TRACE_TYPE_COPY_ARP = 0x13 EVENT_TRACE_TYPE_ACKFULL = 0x14 EVENT_TRACE_TYPE_ACKPART = 0x15 EVENT_TRACE_TYPE_ACKDUP = 0x16 EVENT_TRACE_TYPE_GUIDMAP = 0x0a EVENT_TRACE_TYPE_CONFIG = 0x0b EVENT_TRACE_TYPE_SIDINFO = 0x0c EVENT_TRACE_TYPE_SECURITY = 0x0d EVENT_TRACE_TYPE_DBGID_RSDS = 0x40 EVENT_TRACE_TYPE_REGCREATE = 0x0a EVENT_TRACE_TYPE_REGOPEN = 0x0b EVENT_TRACE_TYPE_REGDELETE = 0x0c EVENT_TRACE_TYPE_REGQUERY = 0x0d EVENT_TRACE_TYPE_REGSETVALUE = 0x0e EVENT_TRACE_TYPE_REGDELETEVALUE = 0x0f EVENT_TRACE_TYPE_REGQUERYVALUE = 0x10 EVENT_TRACE_TYPE_REGENUMERATEKEY = 0x11 EVENT_TRACE_TYPE_REGENUMERATEVALUEKEY = 0x12 EVENT_TRACE_TYPE_REGQUERYMULTIPLEVALUE = 0x13 EVENT_TRACE_TYPE_REGSETINFORMATION = 0x14 EVENT_TRACE_TYPE_REGFLUSH = 0x15 EVENT_TRACE_TYPE_REGKCBCREATE = 0x16 EVENT_TRACE_TYPE_REGKCBDELETE = 0x17 EVENT_TRACE_TYPE_REGKCBRUNDOWNBEGIN = 0x18 EVENT_TRACE_TYPE_REGKCBRUNDOWNEND = 0x19 EVENT_TRACE_TYPE_REGVIRTUALIZE = 0x1a EVENT_TRACE_TYPE_REGCLOSE = 0x1b EVENT_TRACE_TYPE_REGSETSECURITY = 0x1c EVENT_TRACE_TYPE_REGQUERYSECURITY = 0x1d EVENT_TRACE_TYPE_REGCOMMIT = 0x1e EVENT_TRACE_TYPE_REGPREPARE = 0x1f EVENT_TRACE_TYPE_REGROLLBACK = 0x20 EVENT_TRACE_TYPE_REGMOUNTHIVE = 0x21 EVENT_TRACE_TYPE_CONFIG_CPU = 0x0a EVENT_TRACE_TYPE_CONFIG_PHYSICALDISK = 0x0b EVENT_TRACE_TYPE_CONFIG_LOGICALDISK = 0x0c EVENT_TRACE_TYPE_CONFIG_NIC = 0x0d EVENT_TRACE_TYPE_CONFIG_VIDEO = 0x0e EVENT_TRACE_TYPE_CONFIG_SERVICES = 0x0f EVENT_TRACE_TYPE_CONFIG_POWER = 0x10 EVENT_TRACE_TYPE_CONFIG_NETINFO = 0x11 EVENT_TRACE_TYPE_CONFIG_OPTICALMEDIA = 0x12 EVENT_TRACE_TYPE_CONFIG_IRQ = 0x15 EVENT_TRACE_TYPE_CONFIG_PNP = 0x16 EVENT_TRACE_TYPE_CONFIG_IDECHANNEL = 0x17 EVENT_TRACE_TYPE_CONFIG_NUMANODE = 0x18 EVENT_TRACE_TYPE_CONFIG_PLATFORM = 0x19 EVENT_TRACE_TYPE_CONFIG_PROCESSORGROUP = 0x1a EVENT_TRACE_TYPE_CONFIG_PROCESSORNUMBER = 0x1b EVENT_TRACE_TYPE_CONFIG_DPI = 0x1c EVENT_TRACE_TYPE_OPTICAL_IO_READ = 0x37 EVENT_TRACE_TYPE_OPTICAL_IO_WRITE = 0x38 EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH = 0x39 EVENT_TRACE_TYPE_OPTICAL_IO_READ_INIT = 0x3a EVENT_TRACE_TYPE_OPTICAL_IO_WRITE_INIT = 0x3b EVENT_TRACE_TYPE_OPTICAL_IO_FLUSH_INIT = 0x3c EVENT_TRACE_TYPE_FLT_PREOP_INIT = 0x60 EVENT_TRACE_TYPE_FLT_POSTOP_INIT = 0x61 EVENT_TRACE_TYPE_FLT_PREOP_COMPLETION = 0x62 EVENT_TRACE_TYPE_FLT_POSTOP_COMPLETION = 0x63 EVENT_TRACE_TYPE_FLT_PREOP_FAILURE = 0x64 EVENT_TRACE_TYPE_FLT_POSTOP_FAILURE = 0x65 // See flag documentation here // https://docs.microsoft.com/en-us/windows/win32/api/evntrace/ns-evntrace-event_trace_properties EVENT_TRACE_FLAG_PROCESS = 0x00000001 EVENT_TRACE_FLAG_THREAD = 0x00000002 EVENT_TRACE_FLAG_IMAGE_LOAD = 0x00000004 EVENT_TRACE_FLAG_DISK_IO = 0x00000100 EVENT_TRACE_FLAG_DISK_FILE_IO = 0x00000200 EVENT_TRACE_FLAG_MEMORY_PAGE_FAULTS = 0x00001000 EVENT_TRACE_FLAG_MEMORY_HARD_FAULTS = 0x00002000 EVENT_TRACE_FLAG_NETWORK_TCPIP = 0x00010000 EVENT_TRACE_FLAG_REGISTRY = 0x00020000 EVENT_TRACE_FLAG_DBGPRINT = 0x00040000 EVENT_TRACE_FLAG_PROCESS_COUNTERS = 0x00000008 EVENT_TRACE_FLAG_CSWITCH = 0x00000010 EVENT_TRACE_FLAG_DPC = 0x00000020 EVENT_TRACE_FLAG_INTERRUPT = 0x00000040 EVENT_TRACE_FLAG_SYSTEMCALL = 0x00000080 EVENT_TRACE_FLAG_DISK_IO_INIT = 0x00000400 EVENT_TRACE_FLAG_ALPC = 0x00100000 EVENT_TRACE_FLAG_SPLIT_IO = 0x00200000 EVENT_TRACE_FLAG_DRIVER = 0x00800000 EVENT_TRACE_FLAG_PROFILE = 0x01000000 EVENT_TRACE_FLAG_FILE_IO = 0x02000000 EVENT_TRACE_FLAG_FILE_IO_INIT = 0x04000000 EVENT_TRACE_FLAG_DISPATCHER = 0x00000800 EVENT_TRACE_FLAG_VIRTUAL_ALLOC = 0x00004000 EVENT_TRACE_FLAG_VAMAP = 0x00008000 EVENT_TRACE_FLAG_NO_SYSCONFIG = 0x10000000 EVENT_TRACE_FLAG_EXTENSION = 0x80000000 EVENT_TRACE_FLAG_FORWARD_WMI = 0x40000000 EVENT_TRACE_FLAG_ENABLE_RESERVE = 0x20000000 // File Modes EVENT_TRACE_FILE_MODE_NONE = 0x00000000 EVENT_TRACE_FILE_MODE_SEQUENTIAL = 0x00000001 EVENT_TRACE_FILE_MODE_CIRCULAR = 0x00000002 EVENT_TRACE_FILE_MODE_APPEND = 0x00000004 EVENT_TRACE_REAL_TIME_MODE = 0x00000100 EVENT_TRACE_DELAY_OPEN_FILE_MODE = 0x00000200 EVENT_TRACE_BUFFERING_MODE = 0x00000400 EVENT_TRACE_PRIVATE_LOGGER_MODE = 0x00000800 EVENT_TRACE_ADD_HEADER_MODE = 0x00001000 EVENT_TRACE_USE_GLOBAL_SEQUENCE = 0x00004000 EVENT_TRACE_USE_LOCAL_SEQUENCE = 0x00008000 EVENT_TRACE_RELOG_MODE = 0x00010000 EVENT_TRACE_USE_PAGED_MEMORY = 0x01000000 EVENT_TRACE_FILE_MODE_NEWFILE = 0x00000008 EVENT_TRACE_FILE_MODE_PREALLOCATE = 0x00000020 EVENT_TRACE_NONSTOPPABLE_MODE = 0x00000040 EVENT_TRACE_SECURE_MODE = 0x00000080 EVENT_TRACE_USE_KBYTES_FOR_SIZE = 0x00002000 EVENT_TRACE_PRIVATE_IN_PROC = 0x00020000 EVENT_TRACE_MODE_RESERVED = 0x00100000 EVENT_TRACE_NO_PER_PROCESSOR_BUFFERING = 0x10000000 EVENT_TRACE_SYSTEM_LOGGER_MODE = 0x02000000 EVENT_TRACE_ADDTO_TRIAGE_DUMP = 0x80000000 EVENT_TRACE_STOP_ON_HYBRID_SHUTDOWN = 0x00400000 EVENT_TRACE_PERSIST_ON_HYBRID_SHUTDOWN = 0x00800000 EVENT_TRACE_CONTROL_QUERY = 0 EVENT_TRACE_CONTROL_STOP = 1 EVENT_TRACE_CONTROL_UPDATE = 2 EVENT_TRACE_CONTROL_FLUSH = 3 EVENT_TRACE_USE_PROCTIME = 0x0001 EVENT_TRACE_USE_NOCPUTIME = 0x0002 )
View Source
const ( EVENT_CONTROL_CODE_DISABLE_PROVIDER = 0 EVENT_CONTROL_CODE_ENABLE_PROVIDER = 1 EVENT_CONTROL_CODE_CAPTURE_STATE = 2 )
View Source
const ( // Information levels TRACE_LEVEL_NONE = 0 TRACE_LEVEL_CRITICAL = 1 TRACE_LEVEL_FATAL = 1 TRACE_LEVEL_ERROR = 2 TRACE_LEVEL_WARNING = 3 TRACE_LEVEL_INFORMATION = 4 TRACE_LEVEL_VERBOSE = 5 TRACE_LEVEL_RESERVED6 = 6 TRACE_LEVEL_RESERVED7 = 7 TRACE_LEVEL_RESERVED8 = 8 TRACE_LEVEL_RESERVED9 = 9 )
View Source
const ( PROCESS_TRACE_MODE_REAL_TIME = 0x00000100 PROCESS_TRACE_MODE_RAW_TIMESTAMP = 0x00001000 PROCESS_TRACE_MODE_EVENT_RECORD = 0x10000000 )
View Source
const ( EVENT_HEADER_FLAG_EXTENDED_INFO = 0x0001 EVENT_HEADER_FLAG_PRIVATE_SESSION = 0x0002 EVENT_HEADER_FLAG_STRING_ONLY = 0x0004 EVENT_HEADER_FLAG_TRACE_MESSAGE = 0x0008 EVENT_HEADER_FLAG_NO_CPUTIME = 0x0010 EVENT_HEADER_FLAG_32_BIT_HEADER = 0x0020 EVENT_HEADER_FLAG_64_BIT_HEADER = 0x0040 EVENT_HEADER_FLAG_CLASSIC_HEADER = 0x0100 EVENT_HEADER_FLAG_PROCESSOR_INDEX = 0x0200 )
View Source
const ( EVENT_HEADER_PROPERTY_XML = 0x0001 EVENT_HEADER_PROPERTY_FORWARDED_XML = 0x0002 EVENT_HEADER_PROPERTY_LEGACY_EVENTLOG = 0x0004 )
View Source
const ( EVENT_HEADER_EXT_TYPE_RELATED_ACTIVITYID = 0x0001 EVENT_HEADER_EXT_TYPE_SID = 0x0002 EVENT_HEADER_EXT_TYPE_TS_ID = 0x0003 EVENT_HEADER_EXT_TYPE_INSTANCE_INFO = 0x0004 EVENT_HEADER_EXT_TYPE_STACK_TRACE32 = 0x0005 EVENT_HEADER_EXT_TYPE_STACK_TRACE64 = 0x0006 EVENT_HEADER_EXT_TYPE_PEBS_INDEX = 0x0007 EVENT_HEADER_EXT_TYPE_PMC_COUNTERS = 0x0008 EVENT_HEADER_EXT_TYPE_MAX = 0x0009 )
View Source
const ( SE_OWNER_DEFAULTED = SecurityDescriptorControl(0x0001) SE_GROUP_DEFAULTED = SecurityDescriptorControl(0x0002) SE_DACL_PRESENT = SecurityDescriptorControl(0x0004) SE_DACL_DEFAULTED = SecurityDescriptorControl(0x0008) SE_SACL_PRESENT = SecurityDescriptorControl(0x0010) SE_SACL_DEFAULTED = SecurityDescriptorControl(0x0020) SE_DACL_AUTO_INHERIT_REQ = SecurityDescriptorControl(0x0100) SE_SACL_AUTO_INHERIT_REQ = SecurityDescriptorControl(0x0200) SE_DACL_AUTO_INHERITED = SecurityDescriptorControl(0x0400) SE_SACL_AUTO_INHERITED = SecurityDescriptorControl(0x0800) SE_DACL_PROTECTED = SecurityDescriptorControl(0x1000) SE_SACL_PROTECTED = SecurityDescriptorControl(0x2000) SE_RM_CONTROL_VALID = SecurityDescriptorControl(0x4000) SE_SELF_RELATIVE = SecurityDescriptorControl(0x8000) )
View Source
const ( OWNER_SECURITY_INFORMATION = SecurityInformation(0x00000001) GROUP_SECURITY_INFORMATION = SecurityInformation(0x00000002) DACL_SECURITY_INFORMATION = SecurityInformation(0x00000004) SACL_SECURITY_INFORMATION = SecurityInformation(0x00000008) LABEL_SECURITY_INFORMATION = SecurityInformation(0x00000010) ATTRIBUTE_SECURITY_INFORMATION = SecurityInformation(0x00000020) SCOPE_SECURITY_INFORMATION = SecurityInformation(0x00000040) BACKUP_SECURITY_INFORMATION = SecurityInformation(0x00010000) PROTECTED_DACL_SECURITY_INFORMATION = SecurityInformation(0x80000000) PROTECTED_SACL_SECURITY_INFORMATION = SecurityInformation(0x40000000) UNPROTECTED_DACL_SECURITY_INFORMATION = SecurityInformation(0x20000000) UNPROTECTED_SACL_SECURITY_INFORMATION = SecurityInformation(0x10000000) )
View Source
const ( EVENT_SECURITY_SET_DACL = EventSecurityOperation(0) EVENT_SECURITY_SET_SACL = EventSecurityOperation(1) EVENT_SECURITY_ADD_DACL = EventSecurityOperation(2) EVENT_SECURITY_ADD_SACL = EventSecurityOperation(3) EVENT_SECURITY_MAX = EventSecurityOperation(4) )
View Source
const ( TRACELOG_CREATE_REALTIME = 0x0020 TRACELOG_CREATE_ONDISK = 0x0040 TRACELOG_GUID_ENABLE = 0x0080 TRACELOG_ACCESS_KERNEL_LOGGER = 0x0100 TRACELOG_CREATE_INPROC = 0x0200 TRACELOG_LOG_EVENT = 0x0200 TRACELOG_ACCESS_REALTIME = 0x0400 TRACELOG_REGISTER_GUIDS = 0x0800 TRACELOG_ALL = TRACELOG_CREATE_REALTIME | TRACELOG_CREATE_ONDISK | TRACELOG_GUID_ENABLE | TRACELOG_LOG_EVENT | TRACELOG_ACCESS_REALTIME | TRACELOG_REGISTER_GUIDS )
Permissions for EventAccessControl API
View Source
const ( ERROR_SUCCESS = syscall.Errno(0) ERROR_INVALID_FUNCTION = syscall.Errno(1) ERROR_FILE_NOT_FOUND = syscall.Errno(2) ERROR_PATH_NOT_FOUND = syscall.Errno(3) ERROR_TOO_MANY_OPEN_FILES = syscall.Errno(4) ERROR_ACCESS_DENIED = syscall.Errno(5) ERROR_INVALID_HANDLE = syscall.Errno(6) ERROR_ARENA_TRASHED = syscall.Errno(7) ERROR_NOT_ENOUGH_MEMORY = syscall.Errno(8) ERROR_INVALID_BLOCK = syscall.Errno(9) ERROR_BAD_ENVIRONMENT = syscall.Errno(10) ERROR_BAD_FORMAT = syscall.Errno(11) ERROR_INVALID_ACCESS = syscall.Errno(12) ERROR_INVALID_DATA = syscall.Errno(13) ERROR_OUTOFMEMORY = syscall.Errno(14) ERROR_INVALID_DRIVE = syscall.Errno(15) ERROR_CURRENT_DIRECTORY = syscall.Errno(16) ERROR_NOT_SAME_DEVICE = syscall.Errno(17) ERROR_NO_MORE_FILES = syscall.Errno(18) ERROR_WRITE_PROTECT = syscall.Errno(19) ERROR_BAD_UNIT = syscall.Errno(20) ERROR_NOT_READY = syscall.Errno(21) ERROR_BAD_COMMAND = syscall.Errno(22) ERROR_CRC = syscall.Errno(23) ERROR_BAD_LENGTH = syscall.Errno(24) ERROR_SEEK = syscall.Errno(25) ERROR_NOT_DOS_DISK = syscall.Errno(26) ERROR_SECTOR_NOT_FOUND = syscall.Errno(27) ERROR_OUT_OF_PAPER = syscall.Errno(28) ERROR_WRITE_FAULT = syscall.Errno(29) ERROR_READ_FAULT = syscall.Errno(30) ERROR_GEN_FAILURE = syscall.Errno(31) ERROR_SHARING_VIOLATION = syscall.Errno(32) ERROR_LOCK_VIOLATION = syscall.Errno(33) ERROR_WRONG_DISK = syscall.Errno(34) ERROR_SHARING_BUFFER_EXCEEDED = syscall.Errno(36) ERROR_HANDLE_EOF = syscall.Errno(38) ERROR_HANDLE_DISK_FULL = syscall.Errno(39) ERROR_NOT_SUPPORTED = syscall.Errno(50) ERROR_REM_NOT_LIST = syscall.Errno(51) ERROR_DUP_NAME = syscall.Errno(52) ERROR_BAD_NETPATH = syscall.Errno(53) ERROR_NETWORK_BUSY = syscall.Errno(54) ERROR_DEV_NOT_EXIST = syscall.Errno(55) ERROR_TOO_MANY_CMDS = syscall.Errno(56) ERROR_ADAP_HDW_ERR = syscall.Errno(57) ERROR_BAD_NET_RESP = syscall.Errno(58) ERROR_UNEXP_NET_ERR = syscall.Errno(59) ERROR_BAD_REM_ADAP = syscall.Errno(60) ERROR_PRINTQ_FULL = syscall.Errno(61) ERROR_NO_SPOOL_SPACE = syscall.Errno(62) ERROR_PRINT_CANCELLED = syscall.Errno(63) ERROR_NETNAME_DELETED = syscall.Errno(64) ERROR_NETWORK_ACCESS_DENIED = syscall.Errno(65) ERROR_BAD_DEV_TYPE = syscall.Errno(66) ERROR_BAD_NET_NAME = syscall.Errno(67) ERROR_TOO_MANY_NAMES = syscall.Errno(68) ERROR_TOO_MANY_SESS = syscall.Errno(69) ERROR_SHARING_PAUSED = syscall.Errno(70) ERROR_REQ_NOT_ACCEP = syscall.Errno(71) ERROR_REDIR_PAUSED = syscall.Errno(72) ERROR_FILE_EXISTS = syscall.Errno(80) ERROR_CANNOT_MAKE = syscall.Errno(82) ERROR_FAIL_I24 = syscall.Errno(83) ERROR_OUT_OF_STRUCTURES = syscall.Errno(84) ERROR_ALREADY_ASSIGNED = syscall.Errno(85) ERROR_INVALID_PASSWORD = syscall.Errno(86) ERROR_INVALID_PARAMETER = syscall.Errno(87) ERROR_NET_WRITE_FAULT = syscall.Errno(88) ERROR_NO_PROC_SLOTS = syscall.Errno(89) ERROR_TOO_MANY_SEMAPHORES = syscall.Errno(100) ERROR_EXCL_SEM_ALREADY_OWNED = syscall.Errno(101) ERROR_SEM_IS_SET = syscall.Errno(102) ERROR_TOO_MANY_SEM_REQUESTS = syscall.Errno(103) ERROR_INVALID_AT_INTERRUPT_TIME = syscall.Errno(104) ERROR_SEM_OWNER_DIED = syscall.Errno(105) ERROR_SEM_USER_LIMIT = syscall.Errno(106) ERROR_DISK_CHANGE = syscall.Errno(107) ERROR_DRIVE_LOCKED = syscall.Errno(108) ERROR_BROKEN_PIPE = syscall.Errno(109) ERROR_OPEN_FAILED = syscall.Errno(110) ERROR_BUFFER_OVERFLOW = syscall.Errno(111) ERROR_DISK_FULL = syscall.Errno(112) ERROR_NO_MORE_SEARCH_HANDLES = syscall.Errno(113) ERROR_INVALID_TARGET_HANDLE = syscall.Errno(114) ERROR_INVALID_CATEGORY = syscall.Errno(117) ERROR_INVALID_VERIFY_SWITCH = syscall.Errno(118) ERROR_BAD_DRIVER_LEVEL = syscall.Errno(119) ERROR_CALL_NOT_IMPLEMENTED = syscall.Errno(120) ERROR_SEM_TIMEOUT = syscall.Errno(121) ERROR_INSUFFICIENT_BUFFER = syscall.Errno(122) ERROR_INVALID_NAME = syscall.Errno(123) ERROR_INVALID_LEVEL = syscall.Errno(124) ERROR_NO_VOLUME_LABEL = syscall.Errno(125) ERROR_MOD_NOT_FOUND = syscall.Errno(126) ERROR_PROC_NOT_FOUND = syscall.Errno(127) ERROR_WAIT_NO_CHILDREN = syscall.Errno(128) ERROR_CHILD_NOT_COMPLETE = syscall.Errno(129) ERROR_DIRECT_ACCESS_HANDLE = syscall.Errno(130) ERROR_NEGATIVE_SEEK = syscall.Errno(131) ERROR_SEEK_ON_DEVICE = syscall.Errno(132) ERROR_IS_JOIN_TARGET = syscall.Errno(133) ERROR_IS_JOINED = syscall.Errno(134) ERROR_IS_SUBSTED = syscall.Errno(135) ERROR_NOT_JOINED = syscall.Errno(136) ERROR_NOT_SUBSTED = syscall.Errno(137) ERROR_JOIN_TO_JOIN = syscall.Errno(138) ERROR_SUBST_TO_SUBST = syscall.Errno(139) ERROR_JOIN_TO_SUBST = syscall.Errno(140) ERROR_SUBST_TO_JOIN = syscall.Errno(141) ERROR_BUSY_DRIVE = syscall.Errno(142) ERROR_SAME_DRIVE = syscall.Errno(143) ERROR_DIR_NOT_ROOT = syscall.Errno(144) ERROR_DIR_NOT_EMPTY = syscall.Errno(145) ERROR_IS_SUBST_PATH = syscall.Errno(146) ERROR_IS_JOIN_PATH = syscall.Errno(147) ERROR_PATH_BUSY = syscall.Errno(148) ERROR_IS_SUBST_TARGET = syscall.Errno(149) ERROR_SYSTEM_TRACE = syscall.Errno(150) ERROR_INVALID_EVENT_COUNT = syscall.Errno(151) ERROR_TOO_MANY_MUXWAITERS = syscall.Errno(152) ERROR_INVALID_LIST_FORMAT = syscall.Errno(153) ERROR_LABEL_TOO_LONG = syscall.Errno(154) ERROR_TOO_MANY_TCBS = syscall.Errno(155) ERROR_SIGNAL_REFUSED = syscall.Errno(156) ERROR_DISCARDED = syscall.Errno(157) ERROR_NOT_LOCKED = syscall.Errno(158) ERROR_BAD_THREADID_ADDR = syscall.Errno(159) ERROR_BAD_ARGUMENTS = syscall.Errno(160) ERROR_BAD_PATHNAME = syscall.Errno(161) ERROR_SIGNAL_PENDING = syscall.Errno(162) ERROR_MAX_THRDS_REACHED = syscall.Errno(164) ERROR_LOCK_FAILED = syscall.Errno(167) ERROR_BUSY = syscall.Errno(170) ERROR_CANCEL_VIOLATION = syscall.Errno(173) ERROR_ATOMIC_LOCKS_NOT_SUPPORTED = syscall.Errno(174) ERROR_INVALID_SEGMENT_NUMBER = syscall.Errno(180) ERROR_INVALID_ORDINAL = syscall.Errno(182) ERROR_ALREADY_EXISTS = syscall.Errno(183) ERROR_INVALID_FLAG_NUMBER = syscall.Errno(186) ERROR_SEM_NOT_FOUND = syscall.Errno(187) ERROR_INVALID_STARTING_CODESEG = syscall.Errno(188) ERROR_INVALID_STACKSEG = syscall.Errno(189) ERROR_INVALID_MODULETYPE = syscall.Errno(190) ERROR_INVALID_EXE_SIGNATURE = syscall.Errno(191) ERROR_EXE_MARKED_INVALID = syscall.Errno(192) ERROR_BAD_EXE_FORMAT = syscall.Errno(193) ERROR_ITERATED_DATA_EXCEEDS_64k = syscall.Errno(194) ERROR_INVALID_MINALLOCSIZE = syscall.Errno(195) ERROR_DYNLINK_FROM_INVALID_RING = syscall.Errno(196) ERROR_IOPL_NOT_ENABLED = syscall.Errno(197) ERROR_INVALID_SEGDPL = syscall.Errno(198) ERROR_AUTODATASEG_EXCEEDS_64k = syscall.Errno(199) ERROR_RING2SEG_MUST_BE_MOVABLE = syscall.Errno(200) ERROR_RELOC_CHAIN_XEEDS_SEGLIM = syscall.Errno(201) ERROR_INFLOOP_IN_RELOC_CHAIN = syscall.Errno(202) ERROR_ENVVAR_NOT_FOUND = syscall.Errno(203) ERROR_NO_SIGNAL_SENT = syscall.Errno(205) ERROR_FILENAME_EXCED_RANGE = syscall.Errno(206) ERROR_RING2_STACK_IN_USE = syscall.Errno(207) ERROR_META_EXPANSION_TOO_LONG = syscall.Errno(208) ERROR_INVALID_SIGNAL_NUMBER = syscall.Errno(209) ERROR_THREAD_1_INACTIVE = syscall.Errno(210) ERROR_LOCKED = syscall.Errno(212) ERROR_TOO_MANY_MODULES = syscall.Errno(214) ERROR_NESTING_NOT_ALLOWED = syscall.Errno(215) ERROR_EXE_MACHINE_TYPE_MISMATCH = syscall.Errno(216) ERROR_EXE_CANNOT_MODIFY_SIGNED_BINARY = syscall.Errno(217) ERROR_EXE_CANNOT_MODIFY_STRONG_SIGNED_BINARY = syscall.Errno(218) ERROR_FILE_CHECKED_OUT = syscall.Errno(220) ERROR_CHECKOUT_REQUIRED = syscall.Errno(221) ERROR_BAD_FILE_TYPE = syscall.Errno(222) ERROR_FILE_TOO_LARGE = syscall.Errno(223) ERROR_FORMS_AUTH_REQUIRED = syscall.Errno(224) ERROR_PIPE_LOCAL = syscall.Errno(229) ERROR_BAD_PIPE = syscall.Errno(230) ERROR_PIPE_BUSY = syscall.Errno(231) ERROR_NO_DATA = syscall.Errno(232) ERROR_PIPE_NOT_CONNECTED = syscall.Errno(233) ERROR_MORE_DATA = syscall.Errno(234) ERROR_VC_DISCONNECTED = syscall.Errno(240) ERROR_INVALID_EA_NAME = syscall.Errno(254) ERROR_EA_LIST_INCONSISTENT = syscall.Errno(255) ERROR_NO_MORE_ITEMS = syscall.Errno(259) ERROR_CANNOT_COPY = syscall.Errno(266) ERROR_DIRECTORY = syscall.Errno(267) ERROR_EAS_DIDNT_FIT = syscall.Errno(275) ERROR_EA_FILE_CORRUPT = syscall.Errno(276) ERROR_EA_TABLE_FULL = syscall.Errno(277) ERROR_INVALID_EA_HANDLE = syscall.Errno(278) ERROR_EAS_NOT_SUPPORTED = syscall.Errno(282) ERROR_NOT_OWNER = syscall.Errno(288) ERROR_TOO_MANY_POSTS = syscall.Errno(298) ERROR_PARTIAL_COPY = syscall.Errno(299) ERROR_OPLOCK_NOT_GRANTED = syscall.Errno(300) ERROR_INVALID_OPLOCK_PROTOCOL = syscall.Errno(301) ERROR_DISK_TOO_FRAGMENTED = syscall.Errno(302) ERROR_DELETE_PENDING = syscall.Errno(303) ERROR_MR_MID_NOT_FOUND = syscall.Errno(317) ERROR_SCOPE_NOT_FOUND = syscall.Errno(318) ERROR_INVALID_ADDRESS = syscall.Errno(487) ERROR_ARITHMETIC_OVERFLOW = syscall.Errno(534) ERROR_PIPE_CONNECTED = syscall.Errno(535) ERROR_PIPE_LISTENING = syscall.Errno(536) ERROR_WAKE_SYSTEM = syscall.Errno(730) ERROR_WAIT_1 = syscall.Errno(731) ERROR_WAIT_2 = syscall.Errno(732) ERROR_WAIT_3 = syscall.Errno(733) ERROR_WAIT_63 = syscall.Errno(734) ERROR_ABANDONED_WAIT_0 = syscall.Errno(735) ERROR_ABANDONED_WAIT_63 = syscall.Errno(736) ERROR_USER_APC = syscall.Errno(737) ERROR_KERNEL_APC = syscall.Errno(738) ERROR_ALERTED = syscall.Errno(739) ERROR_EA_ACCESS_DENIED = syscall.Errno(994) ERROR_OPERATION_ABORTED = syscall.Errno(995) ERROR_IO_INCOMPLETE = syscall.Errno(996) ERROR_IO_PENDING = syscall.Errno(997) ERROR_NOACCESS = syscall.Errno(998) ERROR_SWAPERROR = syscall.Errno(999) ERROR_STACK_OVERFLOW = syscall.Errno(1001) ERROR_INVALID_MESSAGE = syscall.Errno(1002) ERROR_CAN_NOT_COMPLETE = syscall.Errno(1003) ERROR_INVALID_FLAGS = syscall.Errno(1004) ERROR_UNRECOGNIZED_VOLUME = syscall.Errno(1005) ERROR_FILE_INVALID = syscall.Errno(1006) ERROR_FULLSCREEN_MODE = syscall.Errno(1007) ERROR_NO_TOKEN = syscall.Errno(1008) ERROR_BADDB = syscall.Errno(1009) ERROR_BADKEY = syscall.Errno(1010) ERROR_CANTOPEN = syscall.Errno(1011) ERROR_CANTREAD = syscall.Errno(1012) ERROR_CANTWRITE = syscall.Errno(1013) ERROR_REGISTRY_RECOVERED = syscall.Errno(1014) ERROR_REGISTRY_CORRUPT = syscall.Errno(1015) ERROR_REGISTRY_IO_FAILED = syscall.Errno(1016) ERROR_NOT_REGISTRY_FILE = syscall.Errno(1017) ERROR_KEY_DELETED = syscall.Errno(1018) ERROR_NO_LOG_SPACE = syscall.Errno(1019) ERROR_KEY_HAS_CHILDREN = syscall.Errno(1020) ERROR_CHILD_MUST_BE_VOLATILE = syscall.Errno(1021) ERROR_NOTIFY_ENUM_DIR = syscall.Errno(1022) ERROR_DEPENDENT_SERVICES_RUNNING = syscall.Errno(1051) ERROR_INVALID_SERVICE_CONTROL = syscall.Errno(1052) ERROR_SERVICE_REQUEST_TIMEOUT = syscall.Errno(1053) ERROR_SERVICE_NO_THREAD = syscall.Errno(1054) ERROR_SERVICE_DATABASE_LOCKED = syscall.Errno(1055) ERROR_SERVICE_ALREADY_RUNNING = syscall.Errno(1056) ERROR_INVALID_SERVICE_ACCOUNT = syscall.Errno(1057) ERROR_SERVICE_DISABLED = syscall.Errno(1058) ERROR_CIRCULAR_DEPENDENCY = syscall.Errno(1059) ERROR_SERVICE_DOES_NOT_EXIST = syscall.Errno(1060) ERROR_SERVICE_CANNOT_ACCEPT_CTRL = syscall.Errno(1061) ERROR_SERVICE_NOT_ACTIVE = syscall.Errno(1062) ERROR_FAILED_SERVICE_CONTROLLER_CONNECT = syscall.Errno(1063) ERROR_EXCEPTION_IN_SERVICE = syscall.Errno(1064) ERROR_DATABASE_DOES_NOT_EXIST = syscall.Errno(1065) ERROR_SERVICE_SPECIFIC_ERROR = syscall.Errno(1066) ERROR_PROCESS_ABORTED = syscall.Errno(1067) ERROR_SERVICE_DEPENDENCY_FAIL = syscall.Errno(1068) ERROR_SERVICE_LOGON_FAILED = syscall.Errno(1069) ERROR_SERVICE_START_HANG = syscall.Errno(1070) ERROR_INVALID_SERVICE_LOCK = syscall.Errno(1071) ERROR_SERVICE_MARKED_FOR_DELETE = syscall.Errno(1072) ERROR_SERVICE_EXISTS = syscall.Errno(1073) ERROR_ALREADY_RUNNING_LKG = syscall.Errno(1074) ERROR_SERVICE_DEPENDENCY_DELETED = syscall.Errno(1075) ERROR_BOOT_ALREADY_ACCEPTED = syscall.Errno(1076) ERROR_SERVICE_NEVER_STARTED = syscall.Errno(1077) ERROR_DUPLICATE_SERVICE_NAME = syscall.Errno(1078) ERROR_DIFFERENT_SERVICE_ACCOUNT = syscall.Errno(1079) ERROR_CANNOT_DETECT_DRIVER_FAILURE = syscall.Errno(1080) ERROR_CANNOT_DETECT_PROCESS_ABORT = syscall.Errno(1081) ERROR_NO_RECOVERY_PROGRAM = syscall.Errno(1082) ERROR_SERVICE_NOT_IN_EXE = syscall.Errno(1083) ERROR_NOT_SAFEBOOT_SERVICE = syscall.Errno(1084) ERROR_END_OF_MEDIA = syscall.Errno(1100) ERROR_FILEMARK_DETECTED = syscall.Errno(1101) ERROR_BEGINNING_OF_MEDIA = syscall.Errno(1102) ERROR_SETMARK_DETECTED = syscall.Errno(1103) ERROR_NO_DATA_DETECTED = syscall.Errno(1104) ERROR_PARTITION_FAILURE = syscall.Errno(1105) ERROR_INVALID_BLOCK_LENGTH = syscall.Errno(1106) ERROR_DEVICE_NOT_PARTITIONED = syscall.Errno(1107) ERROR_UNABLE_TO_LOCK_MEDIA = syscall.Errno(1108) ERROR_UNABLE_TO_UNLOAD_MEDIA = syscall.Errno(1109) ERROR_MEDIA_CHANGED = syscall.Errno(1110) ERROR_BUS_RESET = syscall.Errno(1111) ERROR_NO_MEDIA_IN_DRIVE = syscall.Errno(1112) ERROR_NO_UNICODE_TRANSLATION = syscall.Errno(1113) ERROR_DLL_INIT_FAILED = syscall.Errno(1114) ERROR_SHUTDOWN_IN_PROGRESS = syscall.Errno(1115) ERROR_NO_SHUTDOWN_IN_PROGRESS = syscall.Errno(1116) ERROR_IO_DEVICE = syscall.Errno(1117) ERROR_SERIAL_NO_DEVICE = syscall.Errno(1118) ERROR_IRQ_BUSY = syscall.Errno(1119) ERROR_MORE_WRITES = syscall.Errno(1120) ERROR_COUNTER_TIMEOUT = syscall.Errno(1121) ERROR_FLOPPY_ID_MARK_NOT_FOUND = syscall.Errno(1122) ERROR_FLOPPY_WRONG_CYLINDER = syscall.Errno(1123) ERROR_FLOPPY_UNKNOWN_ERROR = syscall.Errno(1124) ERROR_FLOPPY_BAD_REGISTERS = syscall.Errno(1125) ERROR_DISK_RECALIBRATE_FAILED = syscall.Errno(1126) ERROR_DISK_OPERATION_FAILED = syscall.Errno(1127) ERROR_DISK_RESET_FAILED = syscall.Errno(1128) ERROR_EOM_OVERFLOW = syscall.Errno(1129) ERROR_NOT_ENOUGH_SERVER_MEMORY = syscall.Errno(1130) ERROR_POSSIBLE_DEADLOCK = syscall.Errno(1131) ERROR_MAPPED_ALIGNMENT = syscall.Errno(1132) ERROR_SET_POWER_STATE_VETOED = syscall.Errno(1140) ERROR_SET_POWER_STATE_FAILED = syscall.Errno(1141) ERROR_TOO_MANY_LINKS = syscall.Errno(1142) ERROR_OLD_WIN_VERSION = syscall.Errno(1150) ERROR_APP_WRONG_OS = syscall.Errno(1151) ERROR_SINGLE_INSTANCE_APP = syscall.Errno(1152) ERROR_RMODE_APP = syscall.Errno(1153) ERROR_INVALID_DLL = syscall.Errno(1154) ERROR_NO_ASSOCIATION = syscall.Errno(1155) ERROR_DDE_FAIL = syscall.Errno(1156) ERROR_DLL_NOT_FOUND = syscall.Errno(1157) ERROR_NO_MORE_USER_HANDLES = syscall.Errno(1158) ERROR_MESSAGE_SYNC_ONLY = syscall.Errno(1159) ERROR_SOURCE_ELEMENT_EMPTY = syscall.Errno(1160) ERROR_DESTINATION_ELEMENT_FULL = syscall.Errno(1161) ERROR_ILLEGAL_ELEMENT_ADDRESS = syscall.Errno(1162) ERROR_MAGAZINE_NOT_PRESENT = syscall.Errno(1163) ERROR_DEVICE_REINITIALIZATION_NEEDED = syscall.Errno(1164) ERROR_DEVICE_REQUIRES_CLEANING = syscall.Errno(1165) ERROR_DEVICE_DOOR_OPEN = syscall.Errno(1166) ERROR_DEVICE_NOT_CONNECTED = syscall.Errno(1167) ERROR_NOT_FOUND = syscall.Errno(1168) ERROR_NO_MATCH = syscall.Errno(1169) ERROR_SET_NOT_FOUND = syscall.Errno(1170) ERROR_POINT_NOT_FOUND = syscall.Errno(1171) ERROR_NO_TRACKING_SERVICE = syscall.Errno(1172) ERROR_NO_VOLUME_ID = syscall.Errno(1173) ERROR_UNABLE_TO_REMOVE_REPLACED = syscall.Errno(1175) ERROR_UNABLE_TO_MOVE_REPLACEMENT = syscall.Errno(1176) ERROR_UNABLE_TO_MOVE_REPLACEMENT_2 = syscall.Errno(1177) ERROR_JOURNAL_DELETE_IN_PROGRESS = syscall.Errno(1178) ERROR_JOURNAL_NOT_ACTIVE = syscall.Errno(1179) ERROR_POTENTIAL_FILE_FOUND = syscall.Errno(1180) ERROR_JOURNAL_ENTRY_DELETED = syscall.Errno(1181) ERROR_BAD_DEVICE = syscall.Errno(1200) ERROR_CONNECTION_UNAVAIL = syscall.Errno(1201) ERROR_DEVICE_ALREADY_REMEMBERED = syscall.Errno(1202) ERROR_NO_NET_OR_BAD_PATH = syscall.Errno(1203) ERROR_BAD_PROVIDER = syscall.Errno(1204) ERROR_CANNOT_OPEN_PROFILE = syscall.Errno(1205) ERROR_BAD_PROFILE = syscall.Errno(1206) ERROR_NOT_CONTAINER = syscall.Errno(1207) ERROR_EXTENDED_ERROR = syscall.Errno(1208) ERROR_INVALID_GROUPNAME = syscall.Errno(1209) ERROR_INVALID_COMPUTERNAME = syscall.Errno(1210) ERROR_INVALID_EVENTNAME = syscall.Errno(1211) ERROR_INVALID_DOMAINNAME = syscall.Errno(1212) ERROR_INVALID_SERVICENAME = syscall.Errno(1213) ERROR_INVALID_NETNAME = syscall.Errno(1214) ERROR_INVALID_SHARENAME = syscall.Errno(1215) ERROR_INVALID_PASSWORDNAME = syscall.Errno(1216) ERROR_INVALID_MESSAGENAME = syscall.Errno(1217) ERROR_INVALID_MESSAGEDEST = syscall.Errno(1218) ERROR_SESSION_CREDENTIAL_CONFLICT = syscall.Errno(1219) ERROR_REMOTE_SESSION_LIMIT_EXCEEDED = syscall.Errno(1220) ERROR_DUP_DOMAINNAME = syscall.Errno(1221) ERROR_NO_NETWORK = syscall.Errno(1222) ERROR_CANCELLED = syscall.Errno(1223) ERROR_USER_MAPPED_FILE = syscall.Errno(1224) ERROR_CONNECTION_REFUSED = syscall.Errno(1225) ERROR_GRACEFUL_DISCONNECT = syscall.Errno(1226) ERROR_ADDRESS_ALREADY_ASSOCIATED = syscall.Errno(1227) ERROR_ADDRESS_NOT_ASSOCIATED = syscall.Errno(1228) ERROR_CONNECTION_INVALID = syscall.Errno(1229) ERROR_CONNECTION_ACTIVE = syscall.Errno(1230) ERROR_NETWORK_UNREACHABLE = syscall.Errno(1231) ERROR_HOST_UNREACHABLE = syscall.Errno(1232) ERROR_PROTOCOL_UNREACHABLE = syscall.Errno(1233) ERROR_PORT_UNREACHABLE = syscall.Errno(1234) ERROR_REQUEST_ABORTED = syscall.Errno(1235) ERROR_CONNECTION_ABORTED = syscall.Errno(1236) ERROR_RETRY = syscall.Errno(1237) ERROR_CONNECTION_COUNT_LIMIT = syscall.Errno(1238) ERROR_LOGIN_TIME_RESTRICTION = syscall.Errno(1239) ERROR_LOGIN_WKSTA_RESTRICTION = syscall.Errno(1240) ERROR_INCORRECT_ADDRESS = syscall.Errno(1241) ERROR_ALREADY_REGISTERED = syscall.Errno(1242) ERROR_SERVICE_NOT_FOUND = syscall.Errno(1243) ERROR_NOT_AUTHENTICATED = syscall.Errno(1244) ERROR_NOT_LOGGED_ON = syscall.Errno(1245) ERROR_CONTINUE = syscall.Errno(1246) ERROR_ALREADY_INITIALIZED = syscall.Errno(1247) ERROR_NO_MORE_DEVICES = syscall.Errno(1248) ERROR_NO_SUCH_SITE = syscall.Errno(1249) ERROR_DOMAIN_CONTROLLER_EXISTS = syscall.Errno(1250) ERROR_ONLY_IF_CONNECTED = syscall.Errno(1251) ERROR_OVERRIDE_NOCHANGES = syscall.Errno(1252) ERROR_BAD_USER_PROFILE = syscall.Errno(1253) ERROR_NOT_SUPPORTED_ON_SBS = syscall.Errno(1254) ERROR_SERVER_SHUTDOWN_IN_PROGRESS = syscall.Errno(1255) ERROR_HOST_DOWN = syscall.Errno(1256) ERROR_NON_ACCOUNT_SID = syscall.Errno(1257) ERROR_NON_DOMAIN_SID = syscall.Errno(1258) ERROR_APPHELP_BLOCK = syscall.Errno(1259) ERROR_ACCESS_DISABLED_BY_POLICY = syscall.Errno(1260) ERROR_REG_NAT_CONSUMPTION = syscall.Errno(1261) ERROR_CSCSHARE_OFFLINE = syscall.Errno(1262) ERROR_PKINIT_FAILURE = syscall.Errno(1263) ERROR_SMARTCARD_SUBSYSTEM_FAILURE = syscall.Errno(1264) ERROR_DOWNGRADE_DETECTED = syscall.Errno(1265) ERROR_MACHINE_LOCKED = syscall.Errno(1271) ERROR_CALLBACK_SUPPLIED_INVALID_DATA = syscall.Errno(1273) ERROR_SYNC_FOREGROUND_REFRESH_REQUIRED = syscall.Errno(1274) ERROR_DRIVER_BLOCKED = syscall.Errno(1275) ERROR_INVALID_IMPORT_OF_NON_DLL = syscall.Errno(1276) ERROR_ACCESS_DISABLED_WEBBLADE = syscall.Errno(1277) ERROR_ACCESS_DISABLED_WEBBLADE_TAMPER = syscall.Errno(1278) ERROR_RECOVERY_FAILURE = syscall.Errno(1279) ERROR_ALREADY_FIBER = syscall.Errno(1280) ERROR_ALREADY_THREAD = syscall.Errno(1281) ERROR_STACK_BUFFER_OVERRUN = syscall.Errno(1282) ERROR_PARAMETER_QUOTA_EXCEEDED = syscall.Errno(1283) ERROR_DEBUGGER_INACTIVE = syscall.Errno(1284) ERROR_DELAY_LOAD_FAILED = syscall.Errno(1285) ERROR_VDM_DISALLOWED = syscall.Errno(1286) ERROR_UNIDENTIFIED_ERROR = syscall.Errno(1287) ERROR_NOT_ALL_ASSIGNED = syscall.Errno(1300) ERROR_SOME_NOT_MAPPED = syscall.Errno(1301) ERROR_NO_QUOTAS_FOR_ACCOUNT = syscall.Errno(1302) ERROR_LOCAL_USER_SESSION_KEY = syscall.Errno(1303) ERROR_NULL_LM_PASSWORD = syscall.Errno(1304) ERROR_UNKNOWN_REVISION = syscall.Errno(1305) ERROR_REVISION_MISMATCH = syscall.Errno(1306) ERROR_INVALID_OWNER = syscall.Errno(1307) ERROR_INVALID_PRIMARY_GROUP = syscall.Errno(1308) ERROR_NO_IMPERSONATION_TOKEN = syscall.Errno(1309) ERROR_CANT_DISABLE_MANDATORY = syscall.Errno(1310) ERROR_NO_LOGON_SERVERS = syscall.Errno(1311) ERROR_NO_SUCH_LOGON_SESSION = syscall.Errno(1312) ERROR_NO_SUCH_PRIVILEGE = syscall.Errno(1313) ERROR_PRIVILEGE_NOT_HELD = syscall.Errno(1314) ERROR_INVALID_ACCOUNT_NAME = syscall.Errno(1315) ERROR_USER_EXISTS = syscall.Errno(1316) ERROR_NO_SUCH_USER = syscall.Errno(1317) ERROR_GROUP_EXISTS = syscall.Errno(1318) ERROR_NO_SUCH_GROUP = syscall.Errno(1319) ERROR_MEMBER_IN_GROUP = syscall.Errno(1320) ERROR_MEMBER_NOT_IN_GROUP = syscall.Errno(1321) ERROR_LAST_ADMIN = syscall.Errno(1322) ERROR_WRONG_PASSWORD = syscall.Errno(1323) ERROR_ILL_FORMED_PASSWORD = syscall.Errno(1324) ERROR_PASSWORD_RESTRICTION = syscall.Errno(1325) ERROR_LOGON_FAILURE = syscall.Errno(1326) ERROR_ACCOUNT_RESTRICTION = syscall.Errno(1327) ERROR_INVALID_LOGON_HOURS = syscall.Errno(1328) ERROR_INVALID_WORKSTATION = syscall.Errno(1329) ERROR_PASSWORD_EXPIRED = syscall.Errno(1330) ERROR_ACCOUNT_DISABLED = syscall.Errno(1331) ERROR_NONE_MAPPED = syscall.Errno(1332) ERROR_TOO_MANY_LUIDS_REQUESTED = syscall.Errno(1333) ERROR_LUIDS_EXHAUSTED = syscall.Errno(1334) ERROR_INVALID_SUB_AUTHORITY = syscall.Errno(1335) ERROR_INVALID_ACL = syscall.Errno(1336) ERROR_INVALID_SID = syscall.Errno(1337) ERROR_INVALID_SECURITY_DESCR = syscall.Errno(1338) ERROR_BAD_INHERITANCE_ACL = syscall.Errno(1340) ERROR_SERVER_DISABLED = syscall.Errno(1341) ERROR_SERVER_NOT_DISABLED = syscall.Errno(1342) ERROR_INVALID_ID_AUTHORITY = syscall.Errno(1343) ERROR_ALLOTTED_SPACE_EXCEEDED = syscall.Errno(1344) ERROR_INVALID_GROUP_ATTRIBUTES = syscall.Errno(1345) ERROR_BAD_IMPERSONATION_LEVEL = syscall.Errno(1346) ERROR_CANT_OPEN_ANONYMOUS = syscall.Errno(1347) ERROR_BAD_VALIDATION_CLASS = syscall.Errno(1348) ERROR_BAD_TOKEN_TYPE = syscall.Errno(1349) ERROR_NO_SECURITY_ON_OBJECT = syscall.Errno(1350) ERROR_CANT_ACCESS_DOMAIN_INFO = syscall.Errno(1351) ERROR_INVALID_SERVER_STATE = syscall.Errno(1352) ERROR_INVALID_DOMAIN_STATE = syscall.Errno(1353) ERROR_INVALID_DOMAIN_ROLE = syscall.Errno(1354) ERROR_NO_SUCH_DOMAIN = syscall.Errno(1355) ERROR_DOMAIN_EXISTS = syscall.Errno(1356) ERROR_DOMAIN_LIMIT_EXCEEDED = syscall.Errno(1357) ERROR_INTERNAL_DB_CORRUPTION = syscall.Errno(1358) ERROR_INTERNAL_ERROR = syscall.Errno(1359) ERROR_GENERIC_NOT_MAPPED = syscall.Errno(1360) ERROR_BAD_DESCRIPTOR_FORMAT = syscall.Errno(1361) ERROR_NOT_LOGON_PROCESS = syscall.Errno(1362) ERROR_LOGON_SESSION_EXISTS = syscall.Errno(1363) ERROR_NO_SUCH_PACKAGE = syscall.Errno(1364) ERROR_BAD_LOGON_SESSION_STATE = syscall.Errno(1365) ERROR_LOGON_SESSION_COLLISION = syscall.Errno(1366) ERROR_INVALID_LOGON_TYPE = syscall.Errno(1367) ERROR_CANNOT_IMPERSONATE = syscall.Errno(1368) ERROR_RXACT_INVALID_STATE = syscall.Errno(1369) ERROR_RXACT_COMMIT_FAILURE = syscall.Errno(1370) ERROR_SPECIAL_ACCOUNT = syscall.Errno(1371) ERROR_SPECIAL_GROUP = syscall.Errno(1372) ERROR_SPECIAL_USER = syscall.Errno(1373) ERROR_MEMBERS_PRIMARY_GROUP = syscall.Errno(1374) ERROR_TOKEN_ALREADY_IN_USE = syscall.Errno(1375) ERROR_NO_SUCH_ALIAS = syscall.Errno(1376) ERROR_MEMBER_NOT_IN_ALIAS = syscall.Errno(1377) ERROR_MEMBER_IN_ALIAS = syscall.Errno(1378) ERROR_ALIAS_EXISTS = syscall.Errno(1379) ERROR_LOGON_NOT_GRANTED = syscall.Errno(1380) ERROR_TOO_MANY_SECRETS = syscall.Errno(1381) ERROR_SECRET_TOO_LONG = syscall.Errno(1382) ERROR_INTERNAL_DB_ERROR = syscall.Errno(1383) ERROR_TOO_MANY_CONTEXT_IDS = syscall.Errno(1384) ERROR_LOGON_TYPE_NOT_GRANTED = syscall.Errno(1385) ERROR_NT_CROSS_ENCRYPTION_REQUIRED = syscall.Errno(1386) ERROR_NO_SUCH_MEMBER = syscall.Errno(1387) ERROR_INVALID_MEMBER = syscall.Errno(1388) ERROR_TOO_MANY_SIDS = syscall.Errno(1389) ERROR_LM_CROSS_ENCRYPTION_REQUIRED = syscall.Errno(1390) ERROR_NO_INHERITANCE = syscall.Errno(1391) ERROR_FILE_CORRUPT = syscall.Errno(1392) ERROR_DISK_CORRUPT = syscall.Errno(1393) ERROR_NO_USER_SESSION_KEY = syscall.Errno(1394) ERROR_LICENSE_QUOTA_EXCEEDED = syscall.Errno(1395) ERROR_WRONG_TARGET_NAME = syscall.Errno(1396) ERROR_MUTUAL_AUTH_FAILED = syscall.Errno(1397) ERROR_TIME_SKEW = syscall.Errno(1398) ERROR_CURRENT_DOMAIN_NOT_ALLOWED = syscall.Errno(1399) ERROR_INVALID_WINDOW_HANDLE = syscall.Errno(1400) ERROR_INVALID_MENU_HANDLE = syscall.Errno(1401) ERROR_INVALID_CURSOR_HANDLE = syscall.Errno(1402) ERROR_INVALID_ACCEL_HANDLE = syscall.Errno(1403) ERROR_INVALID_HOOK_HANDLE = syscall.Errno(1404) ERROR_INVALID_DWP_HANDLE = syscall.Errno(1405) ERROR_TLW_WITH_WSCHILD = syscall.Errno(1406) ERROR_CANNOT_FIND_WND_CLASS = syscall.Errno(1407) ERROR_WINDOW_OF_OTHER_THREAD = syscall.Errno(1408) ERROR_HOTKEY_ALREADY_REGISTERED = syscall.Errno(1409) ERROR_CLASS_ALREADY_EXISTS = syscall.Errno(1410) ERROR_CLASS_DOES_NOT_EXIST = syscall.Errno(1411) ERROR_CLASS_HAS_WINDOWS = syscall.Errno(1412) ERROR_INVALID_INDEX = syscall.Errno(1413) ERROR_INVALID_ICON_HANDLE = syscall.Errno(1414) ERROR_PRIVATE_DIALOG_INDEX = syscall.Errno(1415) ERROR_LISTBOX_ID_NOT_FOUND = syscall.Errno(1416) ERROR_NO_WILDCARD_CHARACTERS = syscall.Errno(1417) ERROR_CLIPBOARD_NOT_OPEN = syscall.Errno(1418) ERROR_HOTKEY_NOT_REGISTERED = syscall.Errno(1419) ERROR_WINDOW_NOT_DIALOG = syscall.Errno(1420) ERROR_CONTROL_ID_NOT_FOUND = syscall.Errno(1421) ERROR_INVALID_COMBOBOX_MESSAGE = syscall.Errno(1422) ERROR_WINDOW_NOT_COMBOBOX = syscall.Errno(1423) ERROR_INVALID_EDIT_HEIGHT = syscall.Errno(1424) ERROR_DC_NOT_FOUND = syscall.Errno(1425) ERROR_INVALID_HOOK_FILTER = syscall.Errno(1426) ERROR_INVALID_FILTER_PROC = syscall.Errno(1427) ERROR_HOOK_NEEDS_HMOD = syscall.Errno(1428) ERROR_GLOBAL_ONLY_HOOK = syscall.Errno(1429) ERROR_JOURNAL_HOOK_SET = syscall.Errno(1430) ERROR_HOOK_NOT_INSTALLED = syscall.Errno(1431) ERROR_INVALID_LB_MESSAGE = syscall.Errno(1432) ERROR_SETCOUNT_ON_BAD_LB = syscall.Errno(1433) ERROR_LB_WITHOUT_TABSTOPS = syscall.Errno(1434) ERROR_DESTROY_OBJECT_OF_OTHER_THREAD = syscall.Errno(1435) ERROR_CHILD_WINDOW_MENU = syscall.Errno(1436) ERROR_NO_SYSTEM_MENU = syscall.Errno(1437) ERROR_INVALID_MSGBOX_STYLE = syscall.Errno(1438) ERROR_INVALID_SPI_VALUE = syscall.Errno(1439) ERROR_SCREEN_ALREADY_LOCKED = syscall.Errno(1440) ERROR_HWNDS_HAVE_DIFF_PARENT = syscall.Errno(1441) ERROR_NOT_CHILD_WINDOW = syscall.Errno(1442) ERROR_INVALID_GW_COMMAND = syscall.Errno(1443) ERROR_INVALID_THREAD_ID = syscall.Errno(1444) ERROR_NON_MDICHILD_WINDOW = syscall.Errno(1445) ERROR_POPUP_ALREADY_ACTIVE = syscall.Errno(1446) ERROR_NO_SCROLLBARS = syscall.Errno(1447) ERROR_INVALID_SCROLLBAR_RANGE = syscall.Errno(1448) ERROR_INVALID_SHOWWIN_COMMAND = syscall.Errno(1449) ERROR_NO_SYSTEM_RESOURCES = syscall.Errno(1450) ERROR_NONPAGED_SYSTEM_RESOURCES = syscall.Errno(1451) ERROR_PAGED_SYSTEM_RESOURCES = syscall.Errno(1452) ERROR_WORKING_SET_QUOTA = syscall.Errno(1453) ERROR_PAGEFILE_QUOTA = syscall.Errno(1454) ERROR_COMMITMENT_LIMIT = syscall.Errno(1455) ERROR_MENU_ITEM_NOT_FOUND = syscall.Errno(1456) ERROR_INVALID_KEYBOARD_HANDLE = syscall.Errno(1457) ERROR_HOOK_TYPE_NOT_ALLOWED = syscall.Errno(1458) ERROR_REQUIRES_INTERACTIVE_WINDOWSTATION = syscall.Errno(1459) ERROR_TIMEOUT = syscall.Errno(1460) ERROR_INVALID_MONITOR_HANDLE = syscall.Errno(1461) ERROR_INCORRECT_SIZE = syscall.Errno(1462) ERROR_EVENTLOG_FILE_CORRUPT = syscall.Errno(1500) ERROR_EVENTLOG_CANT_START = syscall.Errno(1501) ERROR_LOG_FILE_FULL = syscall.Errno(1502) ERROR_EVENTLOG_FILE_CHANGED = syscall.Errno(1503) ERROR_INSTALL_SERVICE_FAILURE = syscall.Errno(1601) ERROR_INSTALL_USEREXIT = syscall.Errno(1602) ERROR_INSTALL_FAILURE = syscall.Errno(1603) ERROR_INSTALL_SUSPEND = syscall.Errno(1604) ERROR_UNKNOWN_PRODUCT = syscall.Errno(1605) ERROR_UNKNOWN_FEATURE = syscall.Errno(1606) ERROR_UNKNOWN_COMPONENT = syscall.Errno(1607) ERROR_UNKNOWN_PROPERTY = syscall.Errno(1608) ERROR_INVALID_HANDLE_STATE = syscall.Errno(1609) ERROR_BAD_CONFIGURATION = syscall.Errno(1610) ERROR_INDEX_ABSENT = syscall.Errno(1611) ERROR_INSTALL_SOURCE_ABSENT = syscall.Errno(1612) ERROR_INSTALL_PACKAGE_VERSION = syscall.Errno(1613) ERROR_PRODUCT_UNINSTALLED = syscall.Errno(1614) ERROR_BAD_QUERY_SYNTAX = syscall.Errno(1615) ERROR_INVALID_FIELD = syscall.Errno(1616) ERROR_DEVICE_REMOVED = syscall.Errno(1617) ERROR_INSTALL_ALREADY_RUNNING = syscall.Errno(1618) ERROR_INSTALL_PACKAGE_OPEN_FAILED = syscall.Errno(1619) ERROR_INSTALL_PACKAGE_INVALID = syscall.Errno(1620) ERROR_INSTALL_UI_FAILURE = syscall.Errno(1621) ERROR_INSTALL_LOG_FAILURE = syscall.Errno(1622) ERROR_INSTALL_LANGUAGE_UNSUPPORTED = syscall.Errno(1623) ERROR_INSTALL_TRANSFORM_FAILURE = syscall.Errno(1624) ERROR_INSTALL_PACKAGE_REJECTED = syscall.Errno(1625) ERROR_FUNCTION_NOT_CALLED = syscall.Errno(1626) ERROR_FUNCTION_FAILED = syscall.Errno(1627) ERROR_INVALID_TABLE = syscall.Errno(1628) ERROR_DATATYPE_MISMATCH = syscall.Errno(1629) ERROR_UNSUPPORTED_TYPE = syscall.Errno(1630) ERROR_CREATE_FAILED = syscall.Errno(1631) ERROR_INSTALL_TEMP_UNWRITABLE = syscall.Errno(1632) ERROR_INSTALL_PLATFORM_UNSUPPORTED = syscall.Errno(1633) ERROR_INSTALL_NOTUSED = syscall.Errno(1634) ERROR_PATCH_PACKAGE_OPEN_FAILED = syscall.Errno(1635) ERROR_PATCH_PACKAGE_INVALID = syscall.Errno(1636) ERROR_PATCH_PACKAGE_UNSUPPORTED = syscall.Errno(1637) ERROR_PRODUCT_VERSION = syscall.Errno(1638) ERROR_INVALID_COMMAND_LINE = syscall.Errno(1639) ERROR_INSTALL_REMOTE_DISALLOWED = syscall.Errno(1640) ERROR_SUCCESS_REBOOT_INITIATED = syscall.Errno(1641) ERROR_PATCH_TARGET_NOT_FOUND = syscall.Errno(1642) ERROR_PATCH_PACKAGE_REJECTED = syscall.Errno(1643) ERROR_INSTALL_TRANSFORM_REJECTED = syscall.Errno(1644) ERROR_INSTALL_REMOTE_PROHIBITED = syscall.Errno(1645) ERROR_INVALID_USER_BUFFER = syscall.Errno(1784) ERROR_UNRECOGNIZED_MEDIA = syscall.Errno(1785) ERROR_NO_TRUST_LSA_SECRET = syscall.Errno(1786) ERROR_NO_TRUST_SAM_ACCOUNT = syscall.Errno(1787) ERROR_TRUSTED_DOMAIN_FAILURE = syscall.Errno(1788) ERROR_TRUSTED_RELATIONSHIP_FAILURE = syscall.Errno(1789) ERROR_TRUST_FAILURE = syscall.Errno(1790) ERROR_NETLOGON_NOT_STARTED = syscall.Errno(1792) ERROR_ACCOUNT_EXPIRED = syscall.Errno(1793) ERROR_REDIRECTOR_HAS_OPEN_HANDLES = syscall.Errno(1794) ERROR_PRINTER_DRIVER_ALREADY_INSTALLED = syscall.Errno(1795) ERROR_UNKNOWN_PORT = syscall.Errno(1796) ERROR_UNKNOWN_PRINTER_DRIVER = syscall.Errno(1797) ERROR_UNKNOWN_PRINTPROCESSOR = syscall.Errno(1798) ERROR_INVALID_SEPARATOR_FILE = syscall.Errno(1799) ERROR_INVALID_PRIORITY = syscall.Errno(1800) ERROR_INVALID_PRINTER_NAME = syscall.Errno(1801) ERROR_PRINTER_ALREADY_EXISTS = syscall.Errno(1802) ERROR_INVALID_PRINTER_COMMAND = syscall.Errno(1803) ERROR_INVALID_DATATYPE = syscall.Errno(1804) ERROR_INVALID_ENVIRONMENT = syscall.Errno(1805) ERROR_NOLOGON_INTERDOMAIN_TRUST_ACCOUNT = syscall.Errno(1807) ERROR_NOLOGON_WORKSTATION_TRUST_ACCOUNT = syscall.Errno(1808) ERROR_NOLOGON_SERVER_TRUST_ACCOUNT = syscall.Errno(1809) ERROR_DOMAIN_TRUST_INCONSISTENT = syscall.Errno(1810) ERROR_SERVER_HAS_OPEN_HANDLES = syscall.Errno(1811) ERROR_RESOURCE_DATA_NOT_FOUND = syscall.Errno(1812) ERROR_RESOURCE_TYPE_NOT_FOUND = syscall.Errno(1813) ERROR_RESOURCE_NAME_NOT_FOUND = syscall.Errno(1814) ERROR_RESOURCE_LANG_NOT_FOUND = syscall.Errno(1815) ERROR_NOT_ENOUGH_QUOTA = syscall.Errno(1816) ERROR_INVALID_TIME = syscall.Errno(1901) ERROR_INVALID_FORM_NAME = syscall.Errno(1902) ERROR_INVALID_FORM_SIZE = syscall.Errno(1903) ERROR_ALREADY_WAITING = syscall.Errno(1904) ERROR_PRINTER_DELETED = syscall.Errno(1905) ERROR_INVALID_PRINTER_STATE = syscall.Errno(1906) ERROR_PASSWORD_MUST_CHANGE = syscall.Errno(1907) ERROR_DOMAIN_CONTROLLER_NOT_FOUND = syscall.Errno(1908) ERROR_ACCOUNT_LOCKED_OUT = syscall.Errno(1909) ERROR_NO_SITENAME = syscall.Errno(1919) ERROR_CANT_ACCESS_FILE = syscall.Errno(1920) ERROR_CANT_RESOLVE_FILENAME = syscall.Errno(1921) ERROR_KM_DRIVER_BLOCKED = syscall.Errno(1930) ERROR_CONTEXT_EXPIRED = syscall.Errno(1931) ERROR_PER_USER_TRUST_QUOTA_EXCEEDED = syscall.Errno(1932) ERROR_ALL_USER_TRUST_QUOTA_EXCEEDED = syscall.Errno(1933) ERROR_USER_DELETE_TRUST_QUOTA_EXCEEDED = syscall.Errno(1934) ERROR_AUTHENTICATION_FIREWALL_FAILED = syscall.Errno(1935) ERROR_REMOTE_PRINT_CONNECTIONS_BLOCKED = syscall.Errno(1936) ERROR_INVALID_PIXEL_FORMAT = syscall.Errno(2000) ERROR_BAD_DRIVER = syscall.Errno(2001) ERROR_INVALID_WINDOW_STYLE = syscall.Errno(2002) ERROR_METAFILE_NOT_SUPPORTED = syscall.Errno(2003) ERROR_TRANSFORM_NOT_SUPPORTED = syscall.Errno(2004) ERROR_CLIPPING_NOT_SUPPORTED = syscall.Errno(2005) ERROR_INVALID_CMM = syscall.Errno(2010) ERROR_INVALID_PROFILE = syscall.Errno(2011) ERROR_TAG_NOT_FOUND = syscall.Errno(2012) ERROR_TAG_NOT_PRESENT = syscall.Errno(2013) ERROR_DUPLICATE_TAG = syscall.Errno(2014) ERROR_PROFILE_NOT_ASSOCIATED_WITH_DEVICE = syscall.Errno(2015) ERROR_PROFILE_NOT_FOUND = syscall.Errno(2016) ERROR_INVALID_COLORSPACE = syscall.Errno(2017) ERROR_ICM_NOT_ENABLED = syscall.Errno(2018) ERROR_DELETING_ICM_XFORM = syscall.Errno(2019) ERROR_INVALID_TRANSFORM = syscall.Errno(2020) ERROR_COLORSPACE_MISMATCH = syscall.Errno(2021) ERROR_INVALID_COLORINDEX = syscall.Errno(2022) ERROR_CONNECTED_OTHER_PASSWORD = syscall.Errno(2108) ERROR_CONNECTED_OTHER_PASSWORD_DEFAULT = syscall.Errno(2109) ERROR_BAD_USERNAME = syscall.Errno(2202) ERROR_NOT_CONNECTED = syscall.Errno(2250) ERROR_OPEN_FILES = syscall.Errno(2401) ERROR_ACTIVE_CONNECTIONS = syscall.Errno(2402) ERROR_DEVICE_IN_USE = syscall.Errno(2404) ERROR_UNKNOWN_PRINT_MONITOR = syscall.Errno(3000) ERROR_PRINTER_DRIVER_IN_USE = syscall.Errno(3001) ERROR_SPOOL_FILE_NOT_FOUND = syscall.Errno(3002) ERROR_SPL_NO_STARTDOC = syscall.Errno(3003) ERROR_SPL_NO_ADDJOB = syscall.Errno(3004) ERROR_PRINT_PROCESSOR_ALREADY_INSTALLED = syscall.Errno(3005) ERROR_PRINT_MONITOR_ALREADY_INSTALLED = syscall.Errno(3006) ERROR_INVALID_PRINT_MONITOR = syscall.Errno(3007) ERROR_PRINT_MONITOR_IN_USE = syscall.Errno(3008) ERROR_PRINTER_HAS_JOBS_QUEUED = syscall.Errno(3009) ERROR_SUCCESS_REBOOT_REQUIRED = syscall.Errno(3010) ERROR_SUCCESS_RESTART_REQUIRED = syscall.Errno(3011) ERROR_PRINTER_NOT_FOUND = syscall.Errno(3012) ERROR_PRINTER_DRIVER_WARNED = syscall.Errno(3013) ERROR_PRINTER_DRIVER_BLOCKED = syscall.Errno(3014) ERROR_WINS_INTERNAL = syscall.Errno(4000) ERROR_CAN_NOT_DEL_LOCAL_WINS = syscall.Errno(4001) ERROR_STATIC_INIT = syscall.Errno(4002) ERROR_INC_BACKUP = syscall.Errno(4003) ERROR_FULL_BACKUP = syscall.Errno(4004) ERROR_REC_NON_EXISTENT = syscall.Errno(4005) ERROR_RPL_NOT_ALLOWED = syscall.Errno(4006) ERROR_DHCP_ADDRESS_CONFLICT = syscall.Errno(4100) ERROR_WMI_GUID_NOT_FOUND = syscall.Errno(4200) ERROR_WMI_INSTANCE_NOT_FOUND = syscall.Errno(4201) ERROR_WMI_ITEMID_NOT_FOUND = syscall.Errno(4202) ERROR_WMI_TRY_AGAIN = syscall.Errno(4203) ERROR_WMI_DP_NOT_FOUND = syscall.Errno(4204) ERROR_WMI_UNRESOLVED_INSTANCE_REF = syscall.Errno(4205) ERROR_WMI_ALREADY_ENABLED = syscall.Errno(4206) ERROR_WMI_GUID_DISCONNECTED = syscall.Errno(4207) ERROR_WMI_SERVER_UNAVAILABLE = syscall.Errno(4208) ERROR_WMI_DP_FAILED = syscall.Errno(4209) ERROR_WMI_INVALID_MOF = syscall.Errno(4210) ERROR_WMI_INVALID_REGINFO = syscall.Errno(4211) ERROR_WMI_ALREADY_DISABLED = syscall.Errno(4212) ERROR_WMI_READ_ONLY = syscall.Errno(4213) ERROR_WMI_SET_FAILURE = syscall.Errno(4214) ERROR_INVALID_MEDIA = syscall.Errno(4300) ERROR_INVALID_LIBRARY = syscall.Errno(4301) ERROR_INVALID_MEDIA_POOL = syscall.Errno(4302) ERROR_DRIVE_MEDIA_MISMATCH = syscall.Errno(4303) ERROR_MEDIA_OFFLINE = syscall.Errno(4304) ERROR_LIBRARY_OFFLINE = syscall.Errno(4305) ERROR_EMPTY = syscall.Errno(4306) ERROR_NOT_EMPTY = syscall.Errno(4307) ERROR_MEDIA_UNAVAILABLE = syscall.Errno(4308) ERROR_RESOURCE_DISABLED = syscall.Errno(4309) ERROR_INVALID_CLEANER = syscall.Errno(4310) ERROR_UNABLE_TO_CLEAN = syscall.Errno(4311) ERROR_OBJECT_NOT_FOUND = syscall.Errno(4312) ERROR_DATABASE_FAILURE = syscall.Errno(4313) ERROR_DATABASE_FULL = syscall.Errno(4314) ERROR_MEDIA_INCOMPATIBLE = syscall.Errno(4315) ERROR_RESOURCE_NOT_PRESENT = syscall.Errno(4316) ERROR_INVALID_OPERATION = syscall.Errno(4317) ERROR_MEDIA_NOT_AVAILABLE = syscall.Errno(4318) ERROR_DEVICE_NOT_AVAILABLE = syscall.Errno(4319) ERROR_REQUEST_REFUSED = syscall.Errno(4320) ERROR_INVALID_DRIVE_OBJECT = syscall.Errno(4321) ERROR_LIBRARY_FULL = syscall.Errno(4322) ERROR_MEDIUM_NOT_ACCESSIBLE = syscall.Errno(4323) ERROR_UNABLE_TO_LOAD_MEDIUM = syscall.Errno(4324) ERROR_UNABLE_TO_INVENTORY_DRIVE = syscall.Errno(4325) ERROR_UNABLE_TO_INVENTORY_SLOT = syscall.Errno(4326) ERROR_UNABLE_TO_INVENTORY_TRANSPORT = syscall.Errno(4327) ERROR_TRANSPORT_FULL = syscall.Errno(4328) ERROR_CONTROLLING_IEPORT = syscall.Errno(4329) ERROR_UNABLE_TO_EJECT_MOUNTED_MEDIA = syscall.Errno(4330) ERROR_CLEANER_SLOT_SET = syscall.Errno(4331) ERROR_CLEANER_SLOT_NOT_SET = syscall.Errno(4332) ERROR_CLEANER_CARTRIDGE_SPENT = syscall.Errno(4333) ERROR_UNEXPECTED_OMID = syscall.Errno(4334) ERROR_CANT_DELETE_LAST_ITEM = syscall.Errno(4335) ERROR_MESSAGE_EXCEEDS_MAX_SIZE = syscall.Errno(4336) ERROR_VOLUME_CONTAINS_SYS_FILES = syscall.Errno(4337) ERROR_INDIGENOUS_TYPE = syscall.Errno(4338) ERROR_NO_SUPPORTING_DRIVES = syscall.Errno(4339) ERROR_CLEANER_CARTRIDGE_INSTALLED = syscall.Errno(4340) ERROR_IEPORT_FULL = syscall.Errno(4341) ERROR_FILE_OFFLINE = syscall.Errno(4350) ERROR_REMOTE_STORAGE_NOT_ACTIVE = syscall.Errno(4351) ERROR_REMOTE_STORAGE_MEDIA_ERROR = syscall.Errno(4352) ERROR_NOT_A_REPARSE_POINT = syscall.Errno(4390) ERROR_REPARSE_ATTRIBUTE_CONFLICT = syscall.Errno(4391) ERROR_INVALID_REPARSE_DATA = syscall.Errno(4392) ERROR_REPARSE_TAG_INVALID = syscall.Errno(4393) ERROR_REPARSE_TAG_MISMATCH = syscall.Errno(4394) ERROR_VOLUME_NOT_SIS_ENABLED = syscall.Errno(4500) ERROR_DEPENDENT_RESOURCE_EXISTS = syscall.Errno(5001) ERROR_DEPENDENCY_NOT_FOUND = syscall.Errno(5002) ERROR_DEPENDENCY_ALREADY_EXISTS = syscall.Errno(5003) ERROR_RESOURCE_NOT_ONLINE = syscall.Errno(5004) ERROR_HOST_NODE_NOT_AVAILABLE = syscall.Errno(5005) ERROR_RESOURCE_NOT_AVAILABLE = syscall.Errno(5006) ERROR_RESOURCE_NOT_FOUND = syscall.Errno(5007) ERROR_SHUTDOWN_CLUSTER = syscall.Errno(5008) ERROR_CANT_EVICT_ACTIVE_NODE = syscall.Errno(5009) ERROR_OBJECT_ALREADY_EXISTS = syscall.Errno(5010) ERROR_OBJECT_IN_LIST = syscall.Errno(5011) ERROR_GROUP_NOT_AVAILABLE = syscall.Errno(5012) ERROR_GROUP_NOT_FOUND = syscall.Errno(5013) ERROR_GROUP_NOT_ONLINE = syscall.Errno(5014) ERROR_HOST_NODE_NOT_RESOURCE_OWNER = syscall.Errno(5015) ERROR_HOST_NODE_NOT_GROUP_OWNER = syscall.Errno(5016) ERROR_RESMON_CREATE_FAILED = syscall.Errno(5017) ERROR_RESMON_ONLINE_FAILED = syscall.Errno(5018) ERROR_RESOURCE_ONLINE = syscall.Errno(5019) ERROR_QUORUM_RESOURCE = syscall.Errno(5020) ERROR_NOT_QUORUM_CAPABLE = syscall.Errno(5021) ERROR_CLUSTER_SHUTTING_DOWN = syscall.Errno(5022) ERROR_INVALID_STATE = syscall.Errno(5023) ERROR_RESOURCE_PROPERTIES_STORED = syscall.Errno(5024) ERROR_NOT_QUORUM_CLASS = syscall.Errno(5025) ERROR_CORE_RESOURCE = syscall.Errno(5026) ERROR_QUORUM_RESOURCE_ONLINE_FAILED = syscall.Errno(5027) ERROR_QUORUMLOG_OPEN_FAILED = syscall.Errno(5028) ERROR_CLUSTERLOG_CORRUPT = syscall.Errno(5029) ERROR_CLUSTERLOG_RECORD_EXCEEDS_MAXSIZE = syscall.Errno(5030) ERROR_CLUSTERLOG_EXCEEDS_MAXSIZE = syscall.Errno(5031) ERROR_CLUSTERLOG_CHKPOINT_NOT_FOUND = syscall.Errno(5032) ERROR_CLUSTERLOG_NOT_ENOUGH_SPACE = syscall.Errno(5033) ERROR_QUORUM_OWNER_ALIVE = syscall.Errno(5034) ERROR_NETWORK_NOT_AVAILABLE = syscall.Errno(5035) ERROR_NODE_NOT_AVAILABLE = syscall.Errno(5036) ERROR_ALL_NODES_NOT_AVAILABLE = syscall.Errno(5037) ERROR_RESOURCE_FAILED = syscall.Errno(5038) ERROR_CLUSTER_INVALID_NODE = syscall.Errno(5039) ERROR_CLUSTER_NODE_EXISTS = syscall.Errno(5040) ERROR_CLUSTER_JOIN_IN_PROGRESS = syscall.Errno(5041) ERROR_CLUSTER_NODE_NOT_FOUND = syscall.Errno(5042) ERROR_CLUSTER_LOCAL_NODE_NOT_FOUND = syscall.Errno(5043) ERROR_CLUSTER_NETWORK_EXISTS = syscall.Errno(5044) ERROR_CLUSTER_NETWORK_NOT_FOUND = syscall.Errno(5045) ERROR_CLUSTER_NETINTERFACE_EXISTS = syscall.Errno(5046) ERROR_CLUSTER_NETINTERFACE_NOT_FOUND = syscall.Errno(5047) ERROR_CLUSTER_INVALID_REQUEST = syscall.Errno(5048) ERROR_CLUSTER_INVALID_NETWORK_PROVIDER = syscall.Errno(5049) ERROR_CLUSTER_NODE_DOWN = syscall.Errno(5050) ERROR_CLUSTER_NODE_UNREACHABLE = syscall.Errno(5051) ERROR_CLUSTER_NODE_NOT_MEMBER = syscall.Errno(5052) ERROR_CLUSTER_JOIN_NOT_IN_PROGRESS = syscall.Errno(5053) ERROR_CLUSTER_INVALID_NETWORK = syscall.Errno(5054) ERROR_CLUSTER_NODE_UP = syscall.Errno(5056) ERROR_CLUSTER_IPADDR_IN_USE = syscall.Errno(5057) ERROR_CLUSTER_NODE_NOT_PAUSED = syscall.Errno(5058) ERROR_CLUSTER_NO_SECURITY_CONTEXT = syscall.Errno(5059) ERROR_CLUSTER_NETWORK_NOT_INTERNAL = syscall.Errno(5060) ERROR_CLUSTER_NODE_ALREADY_UP = syscall.Errno(5061) ERROR_CLUSTER_NODE_ALREADY_DOWN = syscall.Errno(5062) ERROR_CLUSTER_NETWORK_ALREADY_ONLINE = syscall.Errno(5063) ERROR_CLUSTER_NETWORK_ALREADY_OFFLINE = syscall.Errno(5064) ERROR_CLUSTER_NODE_ALREADY_MEMBER = syscall.Errno(5065) ERROR_CLUSTER_LAST_INTERNAL_NETWORK = syscall.Errno(5066) ERROR_CLUSTER_NETWORK_HAS_DEPENDENTS = syscall.Errno(5067) ERROR_INVALID_OPERATION_ON_QUORUM = syscall.Errno(5068) ERROR_DEPENDENCY_NOT_ALLOWED = syscall.Errno(5069) ERROR_CLUSTER_NODE_PAUSED = syscall.Errno(5070) ERROR_NODE_CANT_HOST_RESOURCE = syscall.Errno(5071) ERROR_CLUSTER_NODE_NOT_READY = syscall.Errno(5072) ERROR_CLUSTER_NODE_SHUTTING_DOWN = syscall.Errno(5073) ERROR_CLUSTER_JOIN_ABORTED = syscall.Errno(5074) ERROR_CLUSTER_INCOMPATIBLE_VERSIONS = syscall.Errno(5075) ERROR_CLUSTER_MAXNUM_OF_RESOURCES_EXCEEDED = syscall.Errno(5076) ERROR_CLUSTER_SYSTEM_CONFIG_CHANGED = syscall.Errno(5077) ERROR_CLUSTER_RESOURCE_TYPE_NOT_FOUND = syscall.Errno(5078) ERROR_CLUSTER_RESTYPE_NOT_SUPPORTED = syscall.Errno(5079) ERROR_CLUSTER_RESNAME_NOT_FOUND = syscall.Errno(5080) ERROR_CLUSTER_NO_RPC_PACKAGES_REGISTERED = syscall.Errno(5081) ERROR_CLUSTER_OWNER_NOT_IN_PREFLIST = syscall.Errno(5082) ERROR_CLUSTER_DATABASE_SEQMISMATCH = syscall.Errno(5083) ERROR_RESMON_INVALID_STATE = syscall.Errno(5084) ERROR_CLUSTER_GUM_NOT_LOCKER = syscall.Errno(5085) ERROR_QUORUM_DISK_NOT_FOUND = syscall.Errno(5086) ERROR_DATABASE_BACKUP_CORRUPT = syscall.Errno(5087) ERROR_CLUSTER_NODE_ALREADY_HAS_DFS_ROOT = syscall.Errno(5088) ERROR_RESOURCE_PROPERTY_UNCHANGEABLE = syscall.Errno(5089) ERROR_CLUSTER_MEMBERSHIP_INVALID_STATE = syscall.Errno(5890) ERROR_CLUSTER_QUORUMLOG_NOT_FOUND = syscall.Errno(5891) ERROR_CLUSTER_MEMBERSHIP_HALT = syscall.Errno(5892) ERROR_CLUSTER_INSTANCE_ID_MISMATCH = syscall.Errno(5893) ERROR_CLUSTER_NETWORK_NOT_FOUND_FOR_IP = syscall.Errno(5894) ERROR_CLUSTER_PROPERTY_DATA_TYPE_MISMATCH = syscall.Errno(5895) ERROR_CLUSTER_EVICT_WITHOUT_CLEANUP = syscall.Errno(5896) ERROR_CLUSTER_PARAMETER_MISMATCH = syscall.Errno(5897) ERROR_NODE_CANNOT_BE_CLUSTERED = syscall.Errno(5898) ERROR_CLUSTER_WRONG_OS_VERSION = syscall.Errno(5899) ERROR_CLUSTER_CANT_CREATE_DUP_CLUSTER_NAME = syscall.Errno(5900) ERROR_CLUSCFG_ALREADY_COMMITTED = syscall.Errno(5901) ERROR_CLUSCFG_ROLLBACK_FAILED = syscall.Errno(5902) ERROR_CLUSCFG_SYSTEM_DISK_DRIVE_LETTER_CONFLICT = syscall.Errno(5903) ERROR_CLUSTER_OLD_VERSION = syscall.Errno(5904) ERROR_CLUSTER_MISMATCHED_COMPUTER_ACCT_NAME = syscall.Errno(5905) ERROR_ENCRYPTION_FAILED = syscall.Errno(6000) ERROR_DECRYPTION_FAILED = syscall.Errno(6001) ERROR_FILE_ENCRYPTED = syscall.Errno(6002) ERROR_NO_RECOVERY_POLICY = syscall.Errno(6003) ERROR_NO_EFS = syscall.Errno(6004) ERROR_WRONG_EFS = syscall.Errno(6005) ERROR_NO_USER_KEYS = syscall.Errno(6006) ERROR_FILE_NOT_ENCRYPTED = syscall.Errno(6007) ERROR_NOT_EXPORT_FORMAT = syscall.Errno(6008) ERROR_FILE_READ_ONLY = syscall.Errno(6009) ERROR_DIR_EFS_DISALLOWED = syscall.Errno(6010) ERROR_EFS_SERVER_NOT_TRUSTED = syscall.Errno(6011) ERROR_BAD_RECOVERY_POLICY = syscall.Errno(6012) ERROR_EFS_ALG_BLOB_TOO_BIG = syscall.Errno(6013) ERROR_VOLUME_NOT_SUPPORT_EFS = syscall.Errno(6014) ERROR_EFS_DISABLED = syscall.Errno(6015) ERROR_EFS_VERSION_NOT_SUPPORT = syscall.Errno(6016) ERROR_NO_BROWSER_SERVERS_FOUND = syscall.Errno(6118) ERROR_CTX_WINSTATION_NAME_INVALID = syscall.Errno(7001) ERROR_CTX_INVALID_PD = syscall.Errno(7002) ERROR_CTX_PD_NOT_FOUND = syscall.Errno(7003) ERROR_CTX_WD_NOT_FOUND = syscall.Errno(7004) ERROR_CTX_CANNOT_MAKE_EVENTLOG_ENTRY = syscall.Errno(7005) ERROR_CTX_SERVICE_NAME_COLLISION = syscall.Errno(7006) ERROR_CTX_CLOSE_PENDING = syscall.Errno(7007) ERROR_CTX_NO_OUTBUF = syscall.Errno(7008) ERROR_CTX_MODEM_INF_NOT_FOUND = syscall.Errno(7009) ERROR_CTX_INVALID_MODEMNAME = syscall.Errno(7010) ERROR_CTX_MODEM_RESPONSE_ERROR = syscall.Errno(7011) ERROR_CTX_MODEM_RESPONSE_TIMEOUT = syscall.Errno(7012) ERROR_CTX_MODEM_RESPONSE_NO_CARRIER = syscall.Errno(7013) ERROR_CTX_MODEM_RESPONSE_NO_DIALTONE = syscall.Errno(7014) ERROR_CTX_MODEM_RESPONSE_BUSY = syscall.Errno(7015) ERROR_CTX_MODEM_RESPONSE_VOICE = syscall.Errno(7016) ERROR_CTX_TD_ERROR = syscall.Errno(7017) ERROR_CTX_WINSTATION_NOT_FOUND = syscall.Errno(7022) ERROR_CTX_WINSTATION_ALREADY_EXISTS = syscall.Errno(7023) ERROR_CTX_WINSTATION_BUSY = syscall.Errno(7024) ERROR_CTX_BAD_VIDEO_MODE = syscall.Errno(7025) ERROR_CTX_GRAPHICS_INVALID = syscall.Errno(7035) ERROR_CTX_LOGON_DISABLED = syscall.Errno(7037) ERROR_CTX_NOT_CONSOLE = syscall.Errno(7038) ERROR_CTX_CLIENT_QUERY_TIMEOUT = syscall.Errno(7040) ERROR_CTX_CONSOLE_DISCONNECT = syscall.Errno(7041) ERROR_CTX_CONSOLE_CONNECT = syscall.Errno(7042) ERROR_CTX_SHADOW_DENIED = syscall.Errno(7044) ERROR_CTX_WINSTATION_ACCESS_DENIED = syscall.Errno(7045) ERROR_CTX_INVALID_WD = syscall.Errno(7049) ERROR_CTX_SHADOW_INVALID = syscall.Errno(7050) ERROR_CTX_SHADOW_DISABLED = syscall.Errno(7051) ERROR_CTX_CLIENT_LICENSE_IN_USE = syscall.Errno(7052) ERROR_CTX_CLIENT_LICENSE_NOT_SET = syscall.Errno(7053) ERROR_CTX_LICENSE_NOT_AVAILABLE = syscall.Errno(7054) ERROR_CTX_LICENSE_CLIENT_INVALID = syscall.Errno(7055) ERROR_CTX_LICENSE_EXPIRED = syscall.Errno(7056) ERROR_CTX_SHADOW_NOT_RUNNING = syscall.Errno(7057) ERROR_CTX_SHADOW_ENDED_BY_MODE_CHANGE = syscall.Errno(7058) ERROR_ACTIVATION_COUNT_EXCEEDED = syscall.Errno(7059) ERROR_DS_NOT_INSTALLED = syscall.Errno(8200) ERROR_DS_MEMBERSHIP_EVALUATED_LOCALLY = syscall.Errno(8201) ERROR_DS_NO_ATTRIBUTE_OR_VALUE = syscall.Errno(8202) ERROR_DS_INVALID_ATTRIBUTE_SYNTAX = syscall.Errno(8203) ERROR_DS_ATTRIBUTE_TYPE_UNDEFINED = syscall.Errno(8204) ERROR_DS_ATTRIBUTE_OR_VALUE_EXISTS = syscall.Errno(8205) ERROR_DS_BUSY = syscall.Errno(8206) ERROR_DS_UNAVAILABLE = syscall.Errno(8207) ERROR_DS_NO_RIDS_ALLOCATED = syscall.Errno(8208) ERROR_DS_NO_MORE_RIDS = syscall.Errno(8209) ERROR_DS_INCORRECT_ROLE_OWNER = syscall.Errno(8210) ERROR_DS_RIDMGR_INIT_ERROR = syscall.Errno(8211) ERROR_DS_OBJ_CLASS_VIOLATION = syscall.Errno(8212) ERROR_DS_CANT_ON_NON_LEAF = syscall.Errno(8213) ERROR_DS_CANT_ON_RDN = syscall.Errno(8214) ERROR_DS_CANT_MOD_OBJ_CLASS = syscall.Errno(8215) ERROR_DS_CROSS_DOM_MOVE_ERROR = syscall.Errno(8216) ERROR_DS_GC_NOT_AVAILABLE = syscall.Errno(8217) ERROR_SHARED_POLICY = syscall.Errno(8218) ERROR_POLICY_OBJECT_NOT_FOUND = syscall.Errno(8219) ERROR_POLICY_ONLY_IN_DS = syscall.Errno(8220) ERROR_PROMOTION_ACTIVE = syscall.Errno(8221) ERROR_NO_PROMOTION_ACTIVE = syscall.Errno(8222) ERROR_DS_OPERATIONS_ERROR = syscall.Errno(8224) ERROR_DS_PROTOCOL_ERROR = syscall.Errno(8225) ERROR_DS_TIMELIMIT_EXCEEDED = syscall.Errno(8226) ERROR_DS_SIZELIMIT_EXCEEDED = syscall.Errno(8227) ERROR_DS_ADMIN_LIMIT_EXCEEDED = syscall.Errno(8228) ERROR_DS_COMPARE_FALSE = syscall.Errno(8229) ERROR_DS_COMPARE_TRUE = syscall.Errno(8230) ERROR_DS_AUTH_METHOD_NOT_SUPPORTED = syscall.Errno(8231) ERROR_DS_STRONG_AUTH_REQUIRED = syscall.Errno(8232) ERROR_DS_INAPPROPRIATE_AUTH = syscall.Errno(8233) ERROR_DS_AUTH_UNKNOWN = syscall.Errno(8234) ERROR_DS_REFERRAL = syscall.Errno(8235) ERROR_DS_UNAVAILABLE_CRIT_EXTENSION = syscall.Errno(8236) ERROR_DS_CONFIDENTIALITY_REQUIRED = syscall.Errno(8237) ERROR_DS_INAPPROPRIATE_MATCHING = syscall.Errno(8238) ERROR_DS_CONSTRAINT_VIOLATION = syscall.Errno(8239) ERROR_DS_NO_SUCH_OBJECT = syscall.Errno(8240) ERROR_DS_ALIAS_PROBLEM = syscall.Errno(8241) ERROR_DS_INVALID_DN_SYNTAX = syscall.Errno(8242) ERROR_DS_IS_LEAF = syscall.Errno(8243) ERROR_DS_ALIAS_DEREF_PROBLEM = syscall.Errno(8244) ERROR_DS_UNWILLING_TO_PERFORM = syscall.Errno(8245) ERROR_DS_LOOP_DETECT = syscall.Errno(8246) ERROR_DS_NAMING_VIOLATION = syscall.Errno(8247) ERROR_DS_OBJECT_RESULTS_TOO_LARGE = syscall.Errno(8248) ERROR_DS_AFFECTS_MULTIPLE_DSAS = syscall.Errno(8249) ERROR_DS_SERVER_DOWN = syscall.Errno(8250) ERROR_DS_LOCAL_ERROR = syscall.Errno(8251) ERROR_DS_ENCODING_ERROR = syscall.Errno(8252) ERROR_DS_DECODING_ERROR = syscall.Errno(8253) ERROR_DS_FILTER_UNKNOWN = syscall.Errno(8254) ERROR_DS_PARAM_ERROR = syscall.Errno(8255) ERROR_DS_NOT_SUPPORTED = syscall.Errno(8256) ERROR_DS_NO_RESULTS_RETURNED = syscall.Errno(8257) ERROR_DS_CONTROL_NOT_FOUND = syscall.Errno(8258) ERROR_DS_CLIENT_LOOP = syscall.Errno(8259) ERROR_DS_REFERRAL_LIMIT_EXCEEDED = syscall.Errno(8260) ERROR_DS_SORT_CONTROL_MISSING = syscall.Errno(8261) ERROR_DS_OFFSET_RANGE_ERROR = syscall.Errno(8262) ERROR_DS_ROOT_MUST_BE_NC = syscall.Errno(8301) ERROR_DS_ADD_REPLICA_INHIBITED = syscall.Errno(8302) ERROR_DS_ATT_NOT_DEF_IN_SCHEMA = syscall.Errno(8303) ERROR_DS_MAX_OBJ_SIZE_EXCEEDED = syscall.Errno(8304) ERROR_DS_OBJ_STRING_NAME_EXISTS = syscall.Errno(8305) ERROR_DS_NO_RDN_DEFINED_IN_SCHEMA = syscall.Errno(8306) ERROR_DS_RDN_DOESNT_MATCH_SCHEMA = syscall.Errno(8307) ERROR_DS_NO_REQUESTED_ATTS_FOUND = syscall.Errno(8308) ERROR_DS_USER_BUFFER_TO_SMALL = syscall.Errno(8309) ERROR_DS_ATT_IS_NOT_ON_OBJ = syscall.Errno(8310) ERROR_DS_ILLEGAL_MOD_OPERATION = syscall.Errno(8311) ERROR_DS_OBJ_TOO_LARGE = syscall.Errno(8312) ERROR_DS_BAD_INSTANCE_TYPE = syscall.Errno(8313) ERROR_DS_MASTERDSA_REQUIRED = syscall.Errno(8314) ERROR_DS_OBJECT_CLASS_REQUIRED = syscall.Errno(8315) ERROR_DS_MISSING_REQUIRED_ATT = syscall.Errno(8316) ERROR_DS_ATT_NOT_DEF_FOR_CLASS = syscall.Errno(8317) ERROR_DS_ATT_ALREADY_EXISTS = syscall.Errno(8318) ERROR_DS_CANT_ADD_ATT_VALUES = syscall.Errno(8320) ERROR_DS_SINGLE_VALUE_CONSTRAINT = syscall.Errno(8321) ERROR_DS_RANGE_CONSTRAINT = syscall.Errno(8322) ERROR_DS_ATT_VAL_ALREADY_EXISTS = syscall.Errno(8323) ERROR_DS_CANT_REM_MISSING_ATT = syscall.Errno(8324) ERROR_DS_CANT_REM_MISSING_ATT_VAL = syscall.Errno(8325) ERROR_DS_ROOT_CANT_BE_SUBREF = syscall.Errno(8326) ERROR_DS_NO_CHAINING = syscall.Errno(8327) ERROR_DS_NO_CHAINED_EVAL = syscall.Errno(8328) ERROR_DS_NO_PARENT_OBJECT = syscall.Errno(8329) ERROR_DS_PARENT_IS_AN_ALIAS = syscall.Errno(8330) ERROR_DS_CANT_MIX_MASTER_AND_REPS = syscall.Errno(8331) ERROR_DS_CHILDREN_EXIST = syscall.Errno(8332) ERROR_DS_OBJ_NOT_FOUND = syscall.Errno(8333) ERROR_DS_ALIASED_OBJ_MISSING = syscall.Errno(8334) ERROR_DS_BAD_NAME_SYNTAX = syscall.Errno(8335) ERROR_DS_ALIAS_POINTS_TO_ALIAS = syscall.Errno(8336) ERROR_DS_CANT_DEREF_ALIAS = syscall.Errno(8337) ERROR_DS_OUT_OF_SCOPE = syscall.Errno(8338) ERROR_DS_OBJECT_BEING_REMOVED = syscall.Errno(8339) ERROR_DS_CANT_DELETE_DSA_OBJ = syscall.Errno(8340) ERROR_DS_GENERIC_ERROR = syscall.Errno(8341) ERROR_DS_DSA_MUST_BE_INT_MASTER = syscall.Errno(8342) ERROR_DS_CLASS_NOT_DSA = syscall.Errno(8343) ERROR_DS_INSUFF_ACCESS_RIGHTS = syscall.Errno(8344) ERROR_DS_ILLEGAL_SUPERIOR = syscall.Errno(8345) ERROR_DS_ATTRIBUTE_OWNED_BY_SAM = syscall.Errno(8346) ERROR_DS_NAME_TOO_MANY_PARTS = syscall.Errno(8347) ERROR_DS_NAME_TOO_LONG = syscall.Errno(8348) ERROR_DS_NAME_VALUE_TOO_LONG = syscall.Errno(8349) ERROR_DS_NAME_UNPARSEABLE = syscall.Errno(8350) ERROR_DS_NAME_TYPE_UNKNOWN = syscall.Errno(8351) ERROR_DS_NOT_AN_OBJECT = syscall.Errno(8352) ERROR_DS_SEC_DESC_TOO_SHORT = syscall.Errno(8353) ERROR_DS_SEC_DESC_INVALID = syscall.Errno(8354) ERROR_DS_NO_DELETED_NAME = syscall.Errno(8355) ERROR_DS_SUBREF_MUST_HAVE_PARENT = syscall.Errno(8356) ERROR_DS_NCNAME_MUST_BE_NC = syscall.Errno(8357) ERROR_DS_CANT_ADD_SYSTEM_ONLY = syscall.Errno(8358) ERROR_DS_CLASS_MUST_BE_CONCRETE = syscall.Errno(8359) ERROR_DS_INVALID_DMD = syscall.Errno(8360) ERROR_DS_OBJ_GUID_EXISTS = syscall.Errno(8361) ERROR_DS_NOT_ON_BACKLINK = syscall.Errno(8362) ERROR_DS_NO_CROSSREF_FOR_NC = syscall.Errno(8363) ERROR_DS_SHUTTING_DOWN = syscall.Errno(8364) ERROR_DS_UNKNOWN_OPERATION = syscall.Errno(8365) ERROR_DS_INVALID_ROLE_OWNER = syscall.Errno(8366) ERROR_DS_COULDNT_CONTACT_FSMO = syscall.Errno(8367) ERROR_DS_CROSS_NC_DN_RENAME = syscall.Errno(8368) ERROR_DS_CANT_MOD_SYSTEM_ONLY = syscall.Errno(8369) ERROR_DS_REPLICATOR_ONLY = syscall.Errno(8370) ERROR_DS_OBJ_CLASS_NOT_DEFINED = syscall.Errno(8371) ERROR_DS_OBJ_CLASS_NOT_SUBCLASS = syscall.Errno(8372) ERROR_DS_NAME_REFERENCE_INVALID = syscall.Errno(8373) ERROR_DS_CROSS_REF_EXISTS = syscall.Errno(8374) ERROR_DS_CANT_DEL_MASTER_CROSSREF = syscall.Errno(8375) ERROR_DS_SUBTREE_NOTIFY_NOT_NC_HEAD = syscall.Errno(8376) ERROR_DS_NOTIFY_FILTER_TOO_COMPLEX = syscall.Errno(8377) ERROR_DS_DUP_RDN = syscall.Errno(8378) ERROR_DS_DUP_OID = syscall.Errno(8379) ERROR_DS_DUP_MAPI_ID = syscall.Errno(8380) ERROR_DS_DUP_SCHEMA_ID_GUID = syscall.Errno(8381) ERROR_DS_DUP_LDAP_DISPLAY_NAME = syscall.Errno(8382) ERROR_DS_SEMANTIC_ATT_TEST = syscall.Errno(8383) ERROR_DS_SYNTAX_MISMATCH = syscall.Errno(8384) ERROR_DS_EXISTS_IN_MUST_HAVE = syscall.Errno(8385) ERROR_DS_EXISTS_IN_MAY_HAVE = syscall.Errno(8386) ERROR_DS_NONEXISTENT_MAY_HAVE = syscall.Errno(8387) ERROR_DS_NONEXISTENT_MUST_HAVE = syscall.Errno(8388) ERROR_DS_AUX_CLS_TEST_FAIL = syscall.Errno(8389) ERROR_DS_NONEXISTENT_POSS_SUP = syscall.Errno(8390) ERROR_DS_SUB_CLS_TEST_FAIL = syscall.Errno(8391) ERROR_DS_BAD_RDN_ATT_ID_SYNTAX = syscall.Errno(8392) ERROR_DS_EXISTS_IN_AUX_CLS = syscall.Errno(8393) ERROR_DS_EXISTS_IN_SUB_CLS = syscall.Errno(8394) ERROR_DS_EXISTS_IN_POSS_SUP = syscall.Errno(8395) ERROR_DS_RECALCSCHEMA_FAILED = syscall.Errno(8396) ERROR_DS_TREE_DELETE_NOT_FINISHED = syscall.Errno(8397) ERROR_DS_CANT_DELETE = syscall.Errno(8398) ERROR_DS_ATT_SCHEMA_REQ_ID = syscall.Errno(8399) ERROR_DS_BAD_ATT_SCHEMA_SYNTAX = syscall.Errno(8400) ERROR_DS_CANT_CACHE_ATT = syscall.Errno(8401) ERROR_DS_CANT_CACHE_CLASS = syscall.Errno(8402) ERROR_DS_CANT_REMOVE_ATT_CACHE = syscall.Errno(8403) ERROR_DS_CANT_REMOVE_CLASS_CACHE = syscall.Errno(8404) ERROR_DS_CANT_RETRIEVE_DN = syscall.Errno(8405) ERROR_DS_MISSING_SUPREF = syscall.Errno(8406) ERROR_DS_CANT_RETRIEVE_INSTANCE = syscall.Errno(8407) ERROR_DS_CODE_INCONSISTENCY = syscall.Errno(8408) ERROR_DS_DATABASE_ERROR = syscall.Errno(8409) ERROR_DS_GOVERNSID_MISSING = syscall.Errno(8410) ERROR_DS_MISSING_EXPECTED_ATT = syscall.Errno(8411) ERROR_DS_NCNAME_MISSING_CR_REF = syscall.Errno(8412) ERROR_DS_SECURITY_CHECKING_ERROR = syscall.Errno(8413) ERROR_DS_SCHEMA_NOT_LOADED = syscall.Errno(8414) ERROR_DS_SCHEMA_ALLOC_FAILED = syscall.Errno(8415) ERROR_DS_ATT_SCHEMA_REQ_SYNTAX = syscall.Errno(8416) ERROR_DS_GCVERIFY_ERROR = syscall.Errno(8417) ERROR_DS_DRA_SCHEMA_MISMATCH = syscall.Errno(8418) ERROR_DS_CANT_FIND_DSA_OBJ = syscall.Errno(8419) ERROR_DS_CANT_FIND_EXPECTED_NC = syscall.Errno(8420) ERROR_DS_CANT_FIND_NC_IN_CACHE = syscall.Errno(8421) ERROR_DS_CANT_RETRIEVE_CHILD = syscall.Errno(8422) ERROR_DS_SECURITY_ILLEGAL_MODIFY = syscall.Errno(8423) ERROR_DS_CANT_REPLACE_HIDDEN_REC = syscall.Errno(8424) ERROR_DS_BAD_HIERARCHY_FILE = syscall.Errno(8425) ERROR_DS_BUILD_HIERARCHY_TABLE_FAILED = syscall.Errno(8426) ERROR_DS_CONFIG_PARAM_MISSING = syscall.Errno(8427) ERROR_DS_COUNTING_AB_INDICES_FAILED = syscall.Errno(8428) ERROR_DS_HIERARCHY_TABLE_MALLOC_FAILED = syscall.Errno(8429) ERROR_DS_INTERNAL_FAILURE = syscall.Errno(8430) ERROR_DS_UNKNOWN_ERROR = syscall.Errno(8431) ERROR_DS_ROOT_REQUIRES_CLASS_TOP = syscall.Errno(8432) ERROR_DS_REFUSING_FSMO_ROLES = syscall.Errno(8433) ERROR_DS_MISSING_FSMO_SETTINGS = syscall.Errno(8434) ERROR_DS_UNABLE_TO_SURRENDER_ROLES = syscall.Errno(8435) ERROR_DS_DRA_GENERIC = syscall.Errno(8436) ERROR_DS_DRA_INVALID_PARAMETER = syscall.Errno(8437) ERROR_DS_DRA_BUSY = syscall.Errno(8438) ERROR_DS_DRA_BAD_DN = syscall.Errno(8439) ERROR_DS_DRA_BAD_NC = syscall.Errno(8440) ERROR_DS_DRA_DN_EXISTS = syscall.Errno(8441) ERROR_DS_DRA_INTERNAL_ERROR = syscall.Errno(8442) ERROR_DS_DRA_INCONSISTENT_DIT = syscall.Errno(8443) ERROR_DS_DRA_CONNECTION_FAILED = syscall.Errno(8444) ERROR_DS_DRA_BAD_INSTANCE_TYPE = syscall.Errno(8445) ERROR_DS_DRA_OUT_OF_MEM = syscall.Errno(8446) ERROR_DS_DRA_MAIL_PROBLEM = syscall.Errno(8447) ERROR_DS_DRA_REF_ALREADY_EXISTS = syscall.Errno(8448) ERROR_DS_DRA_REF_NOT_FOUND = syscall.Errno(8449) ERROR_DS_DRA_OBJ_IS_REP_SOURCE = syscall.Errno(8450) ERROR_DS_DRA_DB_ERROR = syscall.Errno(8451) ERROR_DS_DRA_NO_REPLICA = syscall.Errno(8452) ERROR_DS_DRA_ACCESS_DENIED = syscall.Errno(8453) ERROR_DS_DRA_NOT_SUPPORTED = syscall.Errno(8454) ERROR_DS_DRA_RPC_CANCELLED = syscall.Errno(8455) ERROR_DS_DRA_SOURCE_DISABLED = syscall.Errno(8456) ERROR_DS_DRA_SINK_DISABLED = syscall.Errno(8457) ERROR_DS_DRA_NAME_COLLISION = syscall.Errno(8458) ERROR_DS_DRA_SOURCE_REINSTALLED = syscall.Errno(8459) ERROR_DS_DRA_MISSING_PARENT = syscall.Errno(8460) ERROR_DS_DRA_PREEMPTED = syscall.Errno(8461) ERROR_DS_DRA_ABANDON_SYNC = syscall.Errno(8462) ERROR_DS_DRA_SHUTDOWN = syscall.Errno(8463) ERROR_DS_DRA_INCOMPATIBLE_PARTIAL_SET = syscall.Errno(8464) ERROR_DS_DRA_SOURCE_IS_PARTIAL_REPLICA = syscall.Errno(8465) ERROR_DS_DRA_EXTN_CONNECTION_FAILED = syscall.Errno(8466) ERROR_DS_INSTALL_SCHEMA_MISMATCH = syscall.Errno(8467) ERROR_DS_DUP_LINK_ID = syscall.Errno(8468) ERROR_DS_NAME_ERROR_RESOLVING = syscall.Errno(8469) ERROR_DS_NAME_ERROR_NOT_FOUND = syscall.Errno(8470) ERROR_DS_NAME_ERROR_NOT_UNIQUE = syscall.Errno(8471) ERROR_DS_NAME_ERROR_NO_MAPPING = syscall.Errno(8472) ERROR_DS_NAME_ERROR_DOMAIN_ONLY = syscall.Errno(8473) ERROR_DS_NAME_ERROR_NO_SYNTACTICAL_MAPPING = syscall.Errno(8474) ERROR_DS_CONSTRUCTED_ATT_MOD = syscall.Errno(8475) ERROR_DS_WRONG_OM_OBJ_CLASS = syscall.Errno(8476) ERROR_DS_DRA_REPL_PENDING = syscall.Errno(8477) ERROR_DS_DS_REQUIRED = syscall.Errno(8478) ERROR_DS_INVALID_LDAP_DISPLAY_NAME = syscall.Errno(8479) ERROR_DS_NON_BASE_SEARCH = syscall.Errno(8480) ERROR_DS_CANT_RETRIEVE_ATTS = syscall.Errno(8481) ERROR_DS_BACKLINK_WITHOUT_LINK = syscall.Errno(8482) ERROR_DS_EPOCH_MISMATCH = syscall.Errno(8483) ERROR_DS_SRC_NAME_MISMATCH = syscall.Errno(8484) ERROR_DS_SRC_AND_DST_NC_IDENTICAL = syscall.Errno(8485) ERROR_DS_DST_NC_MISMATCH = syscall.Errno(8486) ERROR_DS_NOT_AUTHORITIVE_FOR_DST_NC = syscall.Errno(8487) ERROR_DS_SRC_GUID_MISMATCH = syscall.Errno(8488) ERROR_DS_CANT_MOVE_DELETED_OBJECT = syscall.Errno(8489) ERROR_DS_PDC_OPERATION_IN_PROGRESS = syscall.Errno(8490) ERROR_DS_CROSS_DOMAIN_CLEANUP_REQD = syscall.Errno(8491) ERROR_DS_ILLEGAL_XDOM_MOVE_OPERATION = syscall.Errno(8492) ERROR_DS_CANT_WITH_ACCT_GROUP_MEMBERSHPS = syscall.Errno(8493) ERROR_DS_NC_MUST_HAVE_NC_PARENT = syscall.Errno(8494) ERROR_DS_CR_IMPOSSIBLE_TO_VALIDATE = syscall.Errno(8495) ERROR_DS_DST_DOMAIN_NOT_NATIVE = syscall.Errno(8496) ERROR_DS_MISSING_INFRASTRUCTURE_CONTAINER = syscall.Errno(8497) ERROR_DS_CANT_MOVE_ACCOUNT_GROUP = syscall.Errno(8498) ERROR_DS_CANT_MOVE_RESOURCE_GROUP = syscall.Errno(8499) ERROR_DS_INVALID_SEARCH_FLAG = syscall.Errno(8500) ERROR_DS_NO_TREE_DELETE_ABOVE_NC = syscall.Errno(8501) ERROR_DS_COULDNT_LOCK_TREE_FOR_DELETE = syscall.Errno(8502) ERROR_DS_COULDNT_IDENTIFY_OBJECTS_FOR_TREE_DELETE = syscall.Errno(8503) ERROR_DS_SAM_INIT_FAILURE = syscall.Errno(8504) ERROR_DS_SENSITIVE_GROUP_VIOLATION = syscall.Errno(8505) ERROR_DS_CANT_MOD_PRIMARYGROUPID = syscall.Errno(8506) ERROR_DS_ILLEGAL_BASE_SCHEMA_MOD = syscall.Errno(8507) ERROR_DS_NONSAFE_SCHEMA_CHANGE = syscall.Errno(8508) ERROR_DS_SCHEMA_UPDATE_DISALLOWED = syscall.Errno(8509) ERROR_DS_CANT_CREATE_UNDER_SCHEMA = syscall.Errno(8510) ERROR_DS_INSTALL_NO_SRC_SCH_VERSION = syscall.Errno(8511) ERROR_DS_INSTALL_NO_SCH_VERSION_IN_INIFILE = syscall.Errno(8512) ERROR_DS_INVALID_GROUP_TYPE = syscall.Errno(8513) ERROR_DS_NO_NEST_GLOBALGROUP_IN_MIXEDDOMAIN = syscall.Errno(8514) ERROR_DS_NO_NEST_LOCALGROUP_IN_MIXEDDOMAIN = syscall.Errno(8515) ERROR_DS_GLOBAL_CANT_HAVE_LOCAL_MEMBER = syscall.Errno(8516) ERROR_DS_GLOBAL_CANT_HAVE_UNIVERSAL_MEMBER = syscall.Errno(8517) ERROR_DS_UNIVERSAL_CANT_HAVE_LOCAL_MEMBER = syscall.Errno(8518) ERROR_DS_GLOBAL_CANT_HAVE_CROSSDOMAIN_MEMBER = syscall.Errno(8519) ERROR_DS_LOCAL_CANT_HAVE_CROSSDOMAIN_LOCAL_MEMBER = syscall.Errno(8520) ERROR_DS_HAVE_PRIMARY_MEMBERS = syscall.Errno(8521) ERROR_DS_STRING_SD_CONVERSION_FAILED = syscall.Errno(8522) ERROR_DS_NAMING_MASTER_GC = syscall.Errno(8523) ERROR_DS_DNS_LOOKUP_FAILURE = syscall.Errno(8524) ERROR_DS_COULDNT_UPDATE_SPNS = syscall.Errno(8525) ERROR_DS_CANT_RETRIEVE_SD = syscall.Errno(8526) ERROR_DS_KEY_NOT_UNIQUE = syscall.Errno(8527) ERROR_DS_WRONG_LINKED_ATT_SYNTAX = syscall.Errno(8528) ERROR_DS_SAM_NEED_BOOTKEY_PASSWORD = syscall.Errno(8529) ERROR_DS_SAM_NEED_BOOTKEY_FLOPPY = syscall.Errno(8530) ERROR_DS_CANT_START = syscall.Errno(8531) ERROR_DS_INIT_FAILURE = syscall.Errno(8532) ERROR_DS_NO_PKT_PRIVACY_ON_CONNECTION = syscall.Errno(8533) ERROR_DS_SOURCE_DOMAIN_IN_FOREST = syscall.Errno(8534) ERROR_DS_DESTINATION_DOMAIN_NOT_IN_FOREST = syscall.Errno(8535) ERROR_DS_DESTINATION_AUDITING_NOT_ENABLED = syscall.Errno(8536) ERROR_DS_CANT_FIND_DC_FOR_SRC_DOMAIN = syscall.Errno(8537) ERROR_DS_SRC_OBJ_NOT_GROUP_OR_USER = syscall.Errno(8538) ERROR_DS_SRC_SID_EXISTS_IN_FOREST = syscall.Errno(8539) ERROR_DS_SRC_AND_DST_OBJECT_CLASS_MISMATCH = syscall.Errno(8540) ERROR_SAM_INIT_FAILURE = syscall.Errno(8541) ERROR_DS_DRA_SCHEMA_INFO_SHIP = syscall.Errno(8542) ERROR_DS_DRA_SCHEMA_CONFLICT = syscall.Errno(8543) ERROR_DS_DRA_EARLIER_SCHEMA_CONFLICT = syscall.Errno(8544) ERROR_DS_DRA_OBJ_NC_MISMATCH = syscall.Errno(8545) ERROR_DS_NC_STILL_HAS_DSAS = syscall.Errno(8546) ERROR_DS_GC_REQUIRED = syscall.Errno(8547) ERROR_DS_LOCAL_MEMBER_OF_LOCAL_ONLY = syscall.Errno(8548) ERROR_DS_NO_FPO_IN_UNIVERSAL_GROUPS = syscall.Errno(8549) ERROR_DS_CANT_ADD_TO_GC = syscall.Errno(8550) ERROR_DS_NO_CHECKPOINT_WITH_PDC = syscall.Errno(8551) ERROR_DS_SOURCE_AUDITING_NOT_ENABLED = syscall.Errno(8552) ERROR_DS_CANT_CREATE_IN_NONDOMAIN_NC = syscall.Errno(8553) ERROR_DS_INVALID_NAME_FOR_SPN = syscall.Errno(8554) ERROR_DS_FILTER_USES_CONTRUCTED_ATTRS = syscall.Errno(8555) ERROR_DS_UNICODEPWD_NOT_IN_QUOTES = syscall.Errno(8556) ERROR_DS_MACHINE_ACCOUNT_QUOTA_EXCEEDED = syscall.Errno(8557) ERROR_DS_MUST_BE_RUN_ON_DST_DC = syscall.Errno(8558) ERROR_DS_SRC_DC_MUST_BE_SP4_OR_GREATER = syscall.Errno(8559) ERROR_DS_CANT_TREE_DELETE_CRITICAL_OBJ = syscall.Errno(8560) ERROR_DS_INIT_FAILURE_CONSOLE = syscall.Errno(8561) ERROR_DS_SAM_INIT_FAILURE_CONSOLE = syscall.Errno(8562) ERROR_DS_FOREST_VERSION_TOO_HIGH = syscall.Errno(8563) ERROR_DS_DOMAIN_VERSION_TOO_HIGH = syscall.Errno(8564) ERROR_DS_FOREST_VERSION_TOO_LOW = syscall.Errno(8565) ERROR_DS_DOMAIN_VERSION_TOO_LOW = syscall.Errno(8566) ERROR_DS_INCOMPATIBLE_VERSION = syscall.Errno(8567) ERROR_DS_LOW_DSA_VERSION = syscall.Errno(8568) ERROR_DS_NO_BEHAVIOR_VERSION_IN_MIXEDDOMAIN = syscall.Errno(8569) ERROR_DS_NOT_SUPPORTED_SORT_ORDER = syscall.Errno(8570) ERROR_DS_NAME_NOT_UNIQUE = syscall.Errno(8571) ERROR_DS_MACHINE_ACCOUNT_CREATED_PRENT4 = syscall.Errno(8572) ERROR_DS_OUT_OF_VERSION_STORE = syscall.Errno(8573) ERROR_DS_INCOMPATIBLE_CONTROLS_USED = syscall.Errno(8574) ERROR_DS_NO_REF_DOMAIN = syscall.Errno(8575) ERROR_DS_RESERVED_LINK_ID = syscall.Errno(8576) ERROR_DS_LINK_ID_NOT_AVAILABLE = syscall.Errno(8577) ERROR_DS_AG_CANT_HAVE_UNIVERSAL_MEMBER = syscall.Errno(8578) ERROR_DS_MODIFYDN_DISALLOWED_BY_INSTANCE_TYPE = syscall.Errno(8579) ERROR_DS_NO_OBJECT_MOVE_IN_SCHEMA_NC = syscall.Errno(8580) ERROR_DS_MODIFYDN_DISALLOWED_BY_FLAG = syscall.Errno(8581) ERROR_DS_MODIFYDN_WRONG_GRANDPARENT = syscall.Errno(8582) ERROR_DS_NAME_ERROR_TRUST_REFERRAL = syscall.Errno(8583) ERROR_NOT_SUPPORTED_ON_STANDARD_SERVER = syscall.Errno(8584) ERROR_DS_CANT_ACCESS_REMOTE_PART_OF_AD = syscall.Errno(8585) ERROR_DS_CR_IMPOSSIBLE_TO_VALIDATE_V2 = syscall.Errno(8586) ERROR_DS_THREAD_LIMIT_EXCEEDED = syscall.Errno(8587) ERROR_DS_NOT_CLOSEST = syscall.Errno(8588) ERROR_DS_CANT_DERIVE_SPN_WITHOUT_SERVER_REF = syscall.Errno(8589) ERROR_DS_SINGLE_USER_MODE_FAILED = syscall.Errno(8590) ERROR_DS_NTDSCRIPT_SYNTAX_ERROR = syscall.Errno(8591) ERROR_DS_NTDSCRIPT_PROCESS_ERROR = syscall.Errno(8592) ERROR_DS_DIFFERENT_REPL_EPOCHS = syscall.Errno(8593) ERROR_DS_DRS_EXTENSIONS_CHANGED = syscall.Errno(8594) ERROR_DS_REPLICA_SET_CHANGE_NOT_ALLOWED_ON_DISABLED_CR = syscall.Errno(8595) ERROR_DS_NO_MSDS_INTID = syscall.Errno(8596) ERROR_DS_DUP_MSDS_INTID = syscall.Errno(8597) ERROR_DS_EXISTS_IN_RDNATTID = syscall.Errno(8598) ERROR_DS_AUTHORIZATION_FAILED = syscall.Errno(8599) ERROR_DS_INVALID_SCRIPT = syscall.Errno(8600) ERROR_DS_REMOTE_CROSSREF_OP_FAILED = syscall.Errno(8601) ERROR_DS_CROSS_REF_BUSY = syscall.Errno(8602) ERROR_DS_CANT_DERIVE_SPN_FOR_DELETED_DOMAIN = syscall.Errno(8603) ERROR_DS_CANT_DEMOTE_WITH_WRITEABLE_NC = syscall.Errno(8604) ERROR_DS_DUPLICATE_ID_FOUND = syscall.Errno(8605) ERROR_DS_INSUFFICIENT_ATTR_TO_CREATE_OBJECT = syscall.Errno(8606) ERROR_DS_GROUP_CONVERSION_ERROR = syscall.Errno(8607) ERROR_DS_CANT_MOVE_APP_BASIC_GROUP = syscall.Errno(8608) ERROR_DS_CANT_MOVE_APP_QUERY_GROUP = syscall.Errno(8609) ERROR_DS_ROLE_NOT_VERIFIED = syscall.Errno(8610) ERROR_DS_WKO_CONTAINER_CANNOT_BE_SPECIAL = syscall.Errno(8611) ERROR_DS_DOMAIN_RENAME_IN_PROGRESS = syscall.Errno(8612) ERROR_DS_EXISTING_AD_CHILD_NC = syscall.Errno(8613) ERROR_DS_REPL_LIFETIME_EXCEEDED = syscall.Errno(8614) ERROR_DS_DISALLOWED_IN_SYSTEM_CONTAINER = syscall.Errno(8615) ERROR_DS_LDAP_SEND_QUEUE_FULL = syscall.Errno(8616) ERROR_DS_DRA_OUT_SCHEDULE_WINDOW = syscall.Errno(8617) ERROR_SXS_SECTION_NOT_FOUND = syscall.Errno(14000) ERROR_SXS_CANT_GEN_ACTCTX = syscall.Errno(14001) ERROR_SXS_INVALID_ACTCTXDATA_FORMAT = syscall.Errno(14002) ERROR_SXS_ASSEMBLY_NOT_FOUND = syscall.Errno(14003) ERROR_SXS_MANIFEST_FORMAT_ERROR = syscall.Errno(14004) ERROR_SXS_MANIFEST_PARSE_ERROR = syscall.Errno(14005) ERROR_SXS_ACTIVATION_CONTEXT_DISABLED = syscall.Errno(14006) ERROR_SXS_KEY_NOT_FOUND = syscall.Errno(14007) ERROR_SXS_VERSION_CONFLICT = syscall.Errno(14008) ERROR_SXS_WRONG_SECTION_TYPE = syscall.Errno(14009) ERROR_SXS_THREAD_QUERIES_DISABLED = syscall.Errno(14010) ERROR_SXS_PROCESS_DEFAULT_ALREADY_SET = syscall.Errno(14011) ERROR_SXS_UNKNOWN_ENCODING_GROUP = syscall.Errno(14012) ERROR_SXS_UNKNOWN_ENCODING = syscall.Errno(14013) ERROR_SXS_INVALID_XML_NAMESPACE_URI = syscall.Errno(14014) ERROR_SXS_ROOT_MANIFEST_DEPENDENCY_NOT_INSTALLED = syscall.Errno(14015) ERROR_SXS_LEAF_MANIFEST_DEPENDENCY_NOT_INSTALLED = syscall.Errno(14016) ERROR_SXS_INVALID_ASSEMBLY_IDENTITY_ATTRIBUTE = syscall.Errno(14017) ERROR_SXS_MANIFEST_MISSING_REQUIRED_DEFAULT_NAMESPACE = syscall.Errno(14018) ERROR_SXS_MANIFEST_INVALID_REQUIRED_DEFAULT_NAMESPACE = syscall.Errno(14019) ERROR_SXS_PRIVATE_MANIFEST_CROSS_PATH_WITH_REPARSE_POINT = syscall.Errno(14020) ERROR_SXS_DUPLICATE_DLL_NAME = syscall.Errno(14021) ERROR_SXS_DUPLICATE_WINDOWCLASS_NAME = syscall.Errno(14022) ERROR_SXS_DUPLICATE_CLSID = syscall.Errno(14023) ERROR_SXS_DUPLICATE_IID = syscall.Errno(14024) ERROR_SXS_DUPLICATE_TLBID = syscall.Errno(14025) ERROR_SXS_DUPLICATE_PROGID = syscall.Errno(14026) ERROR_SXS_DUPLICATE_ASSEMBLY_NAME = syscall.Errno(14027) ERROR_SXS_FILE_HASH_MISMATCH = syscall.Errno(14028) ERROR_SXS_POLICY_PARSE_ERROR = syscall.Errno(14029) ERROR_SXS_XML_E_MISSINGQUOTE = syscall.Errno(14030) ERROR_SXS_XML_E_COMMENTSYNTAX = syscall.Errno(14031) ERROR_SXS_XML_E_BADSTARTNAMECHAR = syscall.Errno(14032) ERROR_SXS_XML_E_BADNAMECHAR = syscall.Errno(14033) ERROR_SXS_XML_E_BADCHARINSTRING = syscall.Errno(14034) ERROR_SXS_XML_E_XMLDECLSYNTAX = syscall.Errno(14035) ERROR_SXS_XML_E_BADCHARDATA = syscall.Errno(14036) ERROR_SXS_XML_E_MISSINGWHITESPACE = syscall.Errno(14037) ERROR_SXS_XML_E_EXPECTINGTAGEND = syscall.Errno(14038) ERROR_SXS_XML_E_MISSINGSEMICOLON = syscall.Errno(14039) ERROR_SXS_XML_E_UNBALANCEDPAREN = syscall.Errno(14040) ERROR_SXS_XML_E_INTERNALERROR = syscall.Errno(14041) ERROR_SXS_XML_E_UNEXPECTED_WHITESPACE = syscall.Errno(14042) ERROR_SXS_XML_E_INCOMPLETE_ENCODING = syscall.Errno(14043) ERROR_SXS_XML_E_MISSING_PAREN = syscall.Errno(14044) ERROR_SXS_XML_E_EXPECTINGCLOSEQUOTE = syscall.Errno(14045) ERROR_SXS_XML_E_MULTIPLE_COLONS = syscall.Errno(14046) ERROR_SXS_XML_E_INVALID_DECIMAL = syscall.Errno(14047) ERROR_SXS_XML_E_INVALID_HEXIDECIMAL = syscall.Errno(14048) ERROR_SXS_XML_E_INVALID_UNICODE = syscall.Errno(14049) ERROR_SXS_XML_E_WHITESPACEORQUESTIONMARK = syscall.Errno(14050) ERROR_SXS_XML_E_UNEXPECTEDENDTAG = syscall.Errno(14051) ERROR_SXS_XML_E_UNCLOSEDTAG = syscall.Errno(14052) ERROR_SXS_XML_E_DUPLICATEATTRIBUTE = syscall.Errno(14053) ERROR_SXS_XML_E_MULTIPLEROOTS = syscall.Errno(14054) ERROR_SXS_XML_E_INVALIDATROOTLEVEL = syscall.Errno(14055) ERROR_SXS_XML_E_BADXMLDECL = syscall.Errno(14056) ERROR_SXS_XML_E_MISSINGROOT = syscall.Errno(14057) ERROR_SXS_XML_E_UNEXPECTEDEOF = syscall.Errno(14058) ERROR_SXS_XML_E_BADPEREFINSUBSET = syscall.Errno(14059) ERROR_SXS_XML_E_UNCLOSEDSTARTTAG = syscall.Errno(14060) ERROR_SXS_XML_E_UNCLOSEDENDTAG = syscall.Errno(14061) ERROR_SXS_XML_E_UNCLOSEDSTRING = syscall.Errno(14062) ERROR_SXS_XML_E_UNCLOSEDCOMMENT = syscall.Errno(14063) ERROR_SXS_XML_E_UNCLOSEDDECL = syscall.Errno(14064) ERROR_SXS_XML_E_UNCLOSEDCDATA = syscall.Errno(14065) ERROR_SXS_XML_E_RESERVEDNAMESPACE = syscall.Errno(14066) ERROR_SXS_XML_E_INVALIDENCODING = syscall.Errno(14067) ERROR_SXS_XML_E_INVALIDSWITCH = syscall.Errno(14068) ERROR_SXS_XML_E_BADXMLCASE = syscall.Errno(14069) ERROR_SXS_XML_E_INVALID_STANDALONE = syscall.Errno(14070) ERROR_SXS_XML_E_UNEXPECTED_STANDALONE = syscall.Errno(14071) ERROR_SXS_XML_E_INVALID_VERSION = syscall.Errno(14072) ERROR_SXS_XML_E_MISSINGEQUALS = syscall.Errno(14073) ERROR_SXS_PROTECTION_RECOVERY_FAILED = syscall.Errno(14074) ERROR_SXS_PROTECTION_PUBLIC_KEY_TOO_SHORT = syscall.Errno(14075) ERROR_SXS_PROTECTION_CATALOG_NOT_VALID = syscall.Errno(14076) ERROR_SXS_UNTRANSLATABLE_HRESULT = syscall.Errno(14077) ERROR_SXS_PROTECTION_CATALOG_FILE_MISSING = syscall.Errno(14078) ERROR_SXS_MISSING_ASSEMBLY_IDENTITY_ATTRIBUTE = syscall.Errno(14079) ERROR_SXS_INVALID_ASSEMBLY_IDENTITY_ATTRIBUTE_NAME = syscall.Errno(14080) ERROR_SXS_ASSEMBLY_MISSING = syscall.Errno(14081) ERROR_SXS_CORRUPT_ACTIVATION_STACK = syscall.Errno(14082) ERROR_SXS_CORRUPTION = syscall.Errno(14083) ERROR_SXS_EARLY_DEACTIVATION = syscall.Errno(14084) ERROR_SXS_INVALID_DEACTIVATION = syscall.Errno(14085) ERROR_SXS_MULTIPLE_DEACTIVATION = syscall.Errno(14086) ERROR_SXS_PROCESS_TERMINATION_REQUESTED = syscall.Errno(14087) ERROR_SXS_RELEASE_ACTIVATION_CONTEXT = syscall.Errno(14088) ERROR_SXS_SYSTEM_DEFAULT_ACTIVATION_CONTEXT_EMPTY = syscall.Errno(14089) ERROR_SXS_INVALID_IDENTITY_ATTRIBUTE_VALUE = syscall.Errno(14090) ERROR_SXS_INVALID_IDENTITY_ATTRIBUTE_NAME = syscall.Errno(14091) ERROR_SXS_IDENTITY_DUPLICATE_ATTRIBUTE = syscall.Errno(14092) ERROR_SXS_IDENTITY_PARSE_ERROR = syscall.Errno(14093) ERROR_MALFORMED_SUBSTITUTION_STRING = syscall.Errno(14094) ERROR_SXS_INCORRECT_PUBLIC_KEY_TOKEN = syscall.Errno(14095) ERROR_UNMAPPED_SUBSTITUTION_STRING = syscall.Errno(14096) ERROR_SXS_ASSEMBLY_NOT_LOCKED = syscall.Errno(14097) ERROR_SXS_COMPONENT_STORE_CORRUPT = syscall.Errno(14098) ERROR_ADVANCED_INSTALLER_FAILED = syscall.Errno(14099) ERROR_XML_ENCODING_MISMATCH = syscall.Errno(14100) ERROR_SXS_MANIFEST_IDENTITY_SAME_BUT_CONTENTS_DIFFERENT = syscall.Errno(14101) ERROR_SXS_IDENTITIES_DIFFERENT = syscall.Errno(14102) ERROR_SXS_ASSEMBLY_IS_NOT_A_DEPLOYMENT = syscall.Errno(14103) ERROR_SXS_FILE_NOT_PART_OF_ASSEMBLY = syscall.Errno(14104) ERROR_SXS_MANIFEST_TOO_BIG = syscall.Errno(14105) ERROR_SXS_SETTING_NOT_REGISTERED = syscall.Errno(14106) ERROR_SXS_TRANSACTION_CLOSURE_INCOMPLETE = syscall.Errno(14107) ERROR_SMI_PRIMITIVE_INSTALLER_FAILED = syscall.Errno(14108) ERROR_GENERIC_COMMAND_FAILED = syscall.Errno(14109) ERROR_SXS_FILE_HASH_MISSING = syscall.Errno(14110) ERROR_IPSEC_QM_POLICY_EXISTS = syscall.Errno(13000) ERROR_IPSEC_QM_POLICY_NOT_FOUND = syscall.Errno(13001) ERROR_IPSEC_QM_POLICY_IN_USE = syscall.Errno(13002) ERROR_IPSEC_MM_POLICY_EXISTS = syscall.Errno(13003) ERROR_IPSEC_MM_POLICY_NOT_FOUND = syscall.Errno(13004) ERROR_IPSEC_MM_POLICY_IN_USE = syscall.Errno(13005) ERROR_IPSEC_MM_FILTER_EXISTS = syscall.Errno(13006) ERROR_IPSEC_MM_FILTER_NOT_FOUND = syscall.Errno(13007) ERROR_IPSEC_TRANSPORT_FILTER_EXISTS = syscall.Errno(13008) ERROR_IPSEC_TRANSPORT_FILTER_NOT_FOUND = syscall.Errno(13009) ERROR_IPSEC_MM_AUTH_EXISTS = syscall.Errno(13010) ERROR_IPSEC_MM_AUTH_NOT_FOUND = syscall.Errno(13011) ERROR_IPSEC_MM_AUTH_IN_USE = syscall.Errno(13012) ERROR_IPSEC_DEFAULT_MM_POLICY_NOT_FOUND = syscall.Errno(13013) ERROR_IPSEC_DEFAULT_MM_AUTH_NOT_FOUND = syscall.Errno(13014) ERROR_IPSEC_DEFAULT_QM_POLICY_NOT_FOUND = syscall.Errno(13015) ERROR_IPSEC_TUNNEL_FILTER_EXISTS = syscall.Errno(13016) ERROR_IPSEC_TUNNEL_FILTER_NOT_FOUND = syscall.Errno(13017) ERROR_IPSEC_MM_FILTER_PENDING_DELETION = syscall.Errno(13018) ERROR_IPSEC_TRANSPORT_FILTER_PENDING_DELETION = syscall.Errno(13019) ERROR_IPSEC_TUNNEL_FILTER_PENDING_DELETION = syscall.Errno(13020) ERROR_IPSEC_MM_POLICY_PENDING_DELETION = syscall.Errno(13021) ERROR_IPSEC_MM_AUTH_PENDING_DELETION = syscall.Errno(13022) ERROR_IPSEC_QM_POLICY_PENDING_DELETION = syscall.Errno(13023) ERROR_IPSEC_IKE_NEG_STATUS_BEGIN = syscall.Errno(13800) ERROR_IPSEC_IKE_AUTH_FAIL = syscall.Errno(13801) ERROR_IPSEC_IKE_ATTRIB_FAIL = syscall.Errno(13802) ERROR_IPSEC_IKE_NEGOTIATION_PENDING = syscall.Errno(13803) ERROR_IPSEC_IKE_GENERAL_PROCESSING_ERROR = syscall.Errno(13804) ERROR_IPSEC_IKE_TIMED_OUT = syscall.Errno(13805) ERROR_IPSEC_IKE_NO_CERT = syscall.Errno(13806) ERROR_IPSEC_IKE_SA_DELETED = syscall.Errno(13807) ERROR_IPSEC_IKE_SA_REAPED = syscall.Errno(13808) ERROR_IPSEC_IKE_MM_ACQUIRE_DROP = syscall.Errno(13809) ERROR_IPSEC_IKE_QM_ACQUIRE_DROP = syscall.Errno(13810) ERROR_IPSEC_IKE_QUEUE_DROP_MM = syscall.Errno(13811) ERROR_IPSEC_IKE_QUEUE_DROP_NO_MM = syscall.Errno(13812) ERROR_IPSEC_IKE_DROP_NO_RESPONSE = syscall.Errno(13813) ERROR_IPSEC_IKE_MM_DELAY_DROP = syscall.Errno(13814) ERROR_IPSEC_IKE_QM_DELAY_DROP = syscall.Errno(13815) ERROR_IPSEC_IKE_ERROR = syscall.Errno(13816) ERROR_IPSEC_IKE_CRL_FAILED = syscall.Errno(13817) ERROR_IPSEC_IKE_INVALID_KEY_USAGE = syscall.Errno(13818) ERROR_IPSEC_IKE_INVALID_CERT_TYPE = syscall.Errno(13819) ERROR_IPSEC_IKE_NO_PRIVATE_KEY = syscall.Errno(13820) ERROR_IPSEC_IKE_DH_FAIL = syscall.Errno(13822) ERROR_IPSEC_IKE_INVALID_HEADER = syscall.Errno(13824) ERROR_IPSEC_IKE_NO_POLICY = syscall.Errno(13825) ERROR_IPSEC_IKE_INVALID_SIGNATURE = syscall.Errno(13826) ERROR_IPSEC_IKE_KERBEROS_ERROR = syscall.Errno(13827) ERROR_IPSEC_IKE_NO_PUBLIC_KEY = syscall.Errno(13828) ERROR_IPSEC_IKE_PROCESS_ERR = syscall.Errno(13829) ERROR_IPSEC_IKE_PROCESS_ERR_SA = syscall.Errno(13830) ERROR_IPSEC_IKE_PROCESS_ERR_PROP = syscall.Errno(13831) ERROR_IPSEC_IKE_PROCESS_ERR_TRANS = syscall.Errno(13832) ERROR_IPSEC_IKE_PROCESS_ERR_KE = syscall.Errno(13833) ERROR_IPSEC_IKE_PROCESS_ERR_ID = syscall.Errno(13834) ERROR_IPSEC_IKE_PROCESS_ERR_CERT = syscall.Errno(13835) ERROR_IPSEC_IKE_PROCESS_ERR_CERT_REQ = syscall.Errno(13836) ERROR_IPSEC_IKE_PROCESS_ERR_HASH = syscall.Errno(13837) ERROR_IPSEC_IKE_PROCESS_ERR_SIG = syscall.Errno(13838) ERROR_IPSEC_IKE_PROCESS_ERR_NONCE = syscall.Errno(13839) ERROR_IPSEC_IKE_PROCESS_ERR_NOTIFY = syscall.Errno(13840) ERROR_IPSEC_IKE_PROCESS_ERR_DELETE = syscall.Errno(13841) ERROR_IPSEC_IKE_PROCESS_ERR_VENDOR = syscall.Errno(13842) ERROR_IPSEC_IKE_INVALID_PAYLOAD = syscall.Errno(13843) ERROR_IPSEC_IKE_LOAD_SOFT_SA = syscall.Errno(13844) ERROR_IPSEC_IKE_SOFT_SA_TORN_DOWN = syscall.Errno(13845) ERROR_IPSEC_IKE_INVALID_COOKIE = syscall.Errno(13846) ERROR_IPSEC_IKE_NO_PEER_CERT = syscall.Errno(13847) ERROR_IPSEC_IKE_PEER_CRL_FAILED = syscall.Errno(13848) ERROR_IPSEC_IKE_POLICY_CHANGE = syscall.Errno(13849) ERROR_IPSEC_IKE_NO_MM_POLICY = syscall.Errno(13850) ERROR_IPSEC_IKE_NOTCBPRIV = syscall.Errno(13851) ERROR_IPSEC_IKE_SECLOADFAIL = syscall.Errno(13852) ERROR_IPSEC_IKE_FAILSSPINIT = syscall.Errno(13853) ERROR_IPSEC_IKE_FAILQUERYSSP = syscall.Errno(13854) ERROR_IPSEC_IKE_SRVACQFAIL = syscall.Errno(13855) ERROR_IPSEC_IKE_SRVQUERYCRED = syscall.Errno(13856) ERROR_IPSEC_IKE_GETSPIFAIL = syscall.Errno(13857) ERROR_IPSEC_IKE_INVALID_FILTER = syscall.Errno(13858) ERROR_IPSEC_IKE_OUT_OF_MEMORY = syscall.Errno(13859) ERROR_IPSEC_IKE_ADD_UPDATE_KEY_FAILED = syscall.Errno(13860) ERROR_IPSEC_IKE_INVALID_POLICY = syscall.Errno(13861) ERROR_IPSEC_IKE_UNKNOWN_DOI = syscall.Errno(13862) ERROR_IPSEC_IKE_INVALID_SITUATION = syscall.Errno(13863) ERROR_IPSEC_IKE_DH_FAILURE = syscall.Errno(13864) ERROR_IPSEC_IKE_INVALID_GROUP = syscall.Errno(13865) ERROR_IPSEC_IKE_ENCRYPT = syscall.Errno(13866) ERROR_IPSEC_IKE_DECRYPT = syscall.Errno(13867) ERROR_IPSEC_IKE_POLICY_MATCH = syscall.Errno(13868) ERROR_IPSEC_IKE_UNSUPPORTED_ID = syscall.Errno(13869) ERROR_IPSEC_IKE_INVALID_HASH = syscall.Errno(13870) ERROR_IPSEC_IKE_INVALID_HASH_ALG = syscall.Errno(13871) ERROR_IPSEC_IKE_INVALID_HASH_SIZE = syscall.Errno(13872) ERROR_IPSEC_IKE_INVALID_ENCRYPT_ALG = syscall.Errno(13873) ERROR_IPSEC_IKE_INVALID_AUTH_ALG = syscall.Errno(13874) ERROR_IPSEC_IKE_INVALID_SIG = syscall.Errno(13875) ERROR_IPSEC_IKE_LOAD_FAILED = syscall.Errno(13876) ERROR_IPSEC_IKE_RPC_DELETE = syscall.Errno(13877) ERROR_IPSEC_IKE_BENIGN_REINIT = syscall.Errno(13878) ERROR_IPSEC_IKE_INVALID_RESPONDER_LIFETIME_NOTIFY = syscall.Errno(13879) ERROR_IPSEC_IKE_INVALID_CERT_KEYLEN = syscall.Errno(13881) ERROR_IPSEC_IKE_MM_LIMIT = syscall.Errno(13882) ERROR_IPSEC_IKE_NEGOTIATION_DISABLED = syscall.Errno(13883) ERROR_IPSEC_IKE_NEG_STATUS_END = syscall.Errno(13884) ERROR_IPSEC_IKE_QM_LIMIT = syscall.Errno(13884) ERROR_IPSEC_IKE_MM_EXPIRED = syscall.Errno(13885) ERROR_IPSEC_IKE_PEER_MM_ASSUMED_INVALID = syscall.Errno(13886) ERROR_IPSEC_IKE_CERT_CHAIN_POLICY_MISMATCH = syscall.Errno(13887) ERROR_IPSEC_IKE_UNEXPECTED_MESSAGE_ID = syscall.Errno(13888) ERROR_IPSEC_IKE_INVALID_AUTH_PAYLOAD = syscall.Errno(13889) ERROR_IPSEC_IKE_DOS_COOKIE_SENT = syscall.Errno(13890) ERROR_IPSEC_IKE_SHUTTING_DOWN = syscall.Errno(13891) ERROR_IPSEC_IKE_CGA_AUTH_FAILED = syscall.Errno(13892) ERROR_IPSEC_IKE_PROCESS_ERR_NATOA = syscall.Errno(13893) ERROR_IPSEC_IKE_INVALID_MM_FOR_QM = syscall.Errno(13894) ERROR_IPSEC_IKE_QM_EXPIRED = syscall.Errno(13895) ERROR_IPSEC_IKE_TOO_MANY_FILTERS = syscall.Errno(13896) //ERROR_IPSEC_IKE_NEG_STATUS_END = syscall.Errno(13897) ERROR_IPSEC_IKE_KILL_DUMMY_NAP_TUNNEL = syscall.Errno(13898) ERROR_IPSEC_IKE_INNER_IP_ASSIGNMENT_FAILURE = syscall.Errno(13899) ERROR_IPSEC_IKE_REQUIRE_CP_PAYLOAD_MISSING = syscall.Errno(13900) ERROR_IPSEC_KEY_MODULE_IMPERSONATION_NEGOTIATION_PENDING = syscall.Errno(13901) ERROR_IPSEC_IKE_COEXISTENCE_SUPPRESS = syscall.Errno(13902) ERROR_IPSEC_IKE_RATELIMIT_DROP = syscall.Errno(13903) ERROR_IPSEC_IKE_PEER_DOESNT_SUPPORT_MOBIKE = syscall.Errno(13904) ERROR_IPSEC_IKE_AUTHORIZATION_FAILURE = syscall.Errno(13905) ERROR_IPSEC_IKE_STRONG_CRED_AUTHORIZATION_FAILURE = syscall.Errno(13906) ERROR_IPSEC_IKE_AUTHORIZATION_FAILURE_WITH_OPTIONAL_RETRY = syscall.Errno(13907) ERROR_IPSEC_IKE_STRONG_CRED_AUTHORIZATION_AND_CERTMAP_FAILURE = syscall.Errno(13908) ERROR_IPSEC_IKE_NEG_STATUS_EXTENDED_END = syscall.Errno(13909) ERROR_IPSEC_BAD_SPI = syscall.Errno(13910) ERROR_IPSEC_SA_LIFETIME_EXPIRED = syscall.Errno(13911) ERROR_IPSEC_WRONG_SA = syscall.Errno(13912) ERROR_IPSEC_REPLAY_CHECK_FAILED = syscall.Errno(13913) ERROR_IPSEC_INVALID_PACKET = syscall.Errno(13914) ERROR_IPSEC_INTEGRITY_CHECK_FAILED = syscall.Errno(13915) ERROR_IPSEC_CLEAR_TEXT_DROP = syscall.Errno(13916) ERROR_IPSEC_AUTH_FIREWALL_DROP = syscall.Errno(13917) ERROR_IPSEC_THROTTLE_DROP = syscall.Errno(13918) ERROR_IPSEC_DOSP_BLOCK = syscall.Errno(13925) ERROR_IPSEC_DOSP_RECEIVED_MULTICAST = syscall.Errno(13926) ERROR_IPSEC_DOSP_INVALID_PACKET = syscall.Errno(13927) ERROR_IPSEC_DOSP_STATE_LOOKUP_FAILED = syscall.Errno(13928) ERROR_IPSEC_DOSP_MAX_ENTRIES = syscall.Errno(13929) ERROR_IPSEC_DOSP_KEYMOD_NOT_ALLOWED = syscall.Errno(13930) ERROR_IPSEC_DOSP_NOT_INSTALLED = syscall.Errno(13931) ERROR_IPSEC_DOSP_MAX_PER_IP_RATELIMIT_QUEUES = syscall.Errno(13932) ERROR_EVT_INVALID_CHANNEL_PATH = syscall.Errno(15000) ERROR_EVT_INVALID_QUERY = syscall.Errno(15001) ERROR_EVT_PUBLISHER_METADATA_NOT_FOUND = syscall.Errno(15002) ERROR_EVT_EVENT_TEMPLATE_NOT_FOUND = syscall.Errno(15003) ERROR_EVT_INVALID_PUBLISHER_NAME = syscall.Errno(15004) ERROR_EVT_INVALID_EVENT_DATA = syscall.Errno(15005) ERROR_EVT_CHANNEL_NOT_FOUND = syscall.Errno(15007) ERROR_EVT_MALFORMED_XML_TEXT = syscall.Errno(15008) ERROR_EVT_SUBSCRIPTION_TO_DIRECT_CHANNEL = syscall.Errno(15009) ERROR_EVT_CONFIGURATION_ERROR = syscall.Errno(15010) ERROR_EVT_QUERY_RESULT_STALE = syscall.Errno(15011) ERROR_EVT_QUERY_RESULT_INVALID_POSITION = syscall.Errno(15012) ERROR_EVT_NON_VALIDATING_MSXML = syscall.Errno(15013) ERROR_EVT_FILTER_ALREADYSCOPED = syscall.Errno(15014) ERROR_EVT_FILTER_NOTELTSET = syscall.Errno(15015) ERROR_EVT_FILTER_INVARG = syscall.Errno(15016) ERROR_EVT_FILTER_INVTEST = syscall.Errno(15017) ERROR_EVT_FILTER_INVTYPE = syscall.Errno(15018) ERROR_EVT_FILTER_PARSEERR = syscall.Errno(15019) ERROR_EVT_FILTER_UNSUPPORTEDOP = syscall.Errno(15020) ERROR_EVT_FILTER_UNEXPECTEDTOKEN = syscall.Errno(15021) ERROR_EVT_INVALID_OPERATION_OVER_ENABLED_DIRECT_CHANNEL = syscall.Errno(15022) ERROR_EVT_INVALID_CHANNEL_PROPERTY_VALUE = syscall.Errno(15023) ERROR_EVT_INVALID_PUBLISHER_PROPERTY_VALUE = syscall.Errno(15024) ERROR_EVT_CHANNEL_CANNOT_ACTIVATE = syscall.Errno(15025) ERROR_EVT_FILTER_TOO_COMPLEX = syscall.Errno(15026) ERROR_EVT_MESSAGE_NOT_FOUND = syscall.Errno(15027) ERROR_EVT_MESSAGE_ID_NOT_FOUND = syscall.Errno(15028) ERROR_EVT_UNRESOLVED_VALUE_INSERT = syscall.Errno(15029) ERROR_EVT_UNRESOLVED_PARAMETER_INSERT = syscall.Errno(15030) ERROR_EVT_MAX_INSERTS_REACHED = syscall.Errno(15031) ERROR_EVT_EVENT_DEFINITION_NOT_FOUND = syscall.Errno(15032) ERROR_EVT_MESSAGE_LOCALE_NOT_FOUND = syscall.Errno(15033) ERROR_EVT_VERSION_TOO_OLD = syscall.Errno(15034) ERROR_EVT_VERSION_TOO_NEW = syscall.Errno(15035) ERROR_EVT_CANNOT_OPEN_CHANNEL_OF_QUERY = syscall.Errno(15036) ERROR_EVT_PUBLISHER_DISABLED = syscall.Errno(15037) ERROR_EVT_FILTER_OUT_OF_RANGE = syscall.Errno(15038) ERROR_EC_SUBSCRIPTION_CANNOT_ACTIVATE = syscall.Errno(15080) ERROR_EC_LOG_DISABLED = syscall.Errno(15081) ERROR_EC_CIRCULAR_FORWARDING = syscall.Errno(15082) ERROR_EC_CREDSTORE_FULL = syscall.Errno(15083) ERROR_EC_CRED_NOT_FOUND = syscall.Errno(15084) ERROR_EC_NO_ACTIVE_CHANNEL = syscall.Errno(15085) ERROR_MUI_FILE_NOT_FOUND = syscall.Errno(15100) ERROR_MUI_INVALID_FILE = syscall.Errno(15101) ERROR_MUI_INVALID_RC_CONFIG = syscall.Errno(15102) ERROR_MUI_INVALID_LOCALE_NAME = syscall.Errno(15103) ERROR_MUI_INVALID_ULTIMATEFALLBACK_NAME = syscall.Errno(15104) ERROR_MUI_FILE_NOT_LOADED = syscall.Errno(15105) ERROR_RESOURCE_ENUM_USER_STOP = syscall.Errno(15106) ERROR_MUI_INTLSETTINGS_UILANG_NOT_INSTALLED = syscall.Errno(15107) ERROR_MUI_INTLSETTINGS_INVALID_LOCALE_NAME = syscall.Errno(15108) ERROR_MRM_RUNTIME_NO_DEFAULT_OR_NEUTRAL_RESOURCE = syscall.Errno(15110) ERROR_MRM_INVALID_PRICONFIG = syscall.Errno(15111) ERROR_MRM_INVALID_FILE_TYPE = syscall.Errno(15112) ERROR_MRM_UNKNOWN_QUALIFIER = syscall.Errno(15113) ERROR_MRM_INVALID_QUALIFIER_VALUE = syscall.Errno(15114) ERROR_MRM_NO_CANDIDATE = syscall.Errno(15115) ERROR_MRM_NO_MATCH_OR_DEFAULT_CANDIDATE = syscall.Errno(15116) ERROR_MRM_RESOURCE_TYPE_MISMATCH = syscall.Errno(15117) ERROR_MRM_DUPLICATE_MAP_NAME = syscall.Errno(15118) ERROR_MRM_DUPLICATE_ENTRY = syscall.Errno(15119) ERROR_MRM_INVALID_RESOURCE_IDENTIFIER = syscall.Errno(15120) ERROR_MRM_FILEPATH_TOO_LONG = syscall.Errno(15121) ERROR_MRM_UNSUPPORTED_DIRECTORY_TYPE = syscall.Errno(15122) ERROR_MRM_INVALID_PRI_FILE = syscall.Errno(15126) ERROR_MRM_NAMED_RESOURCE_NOT_FOUND = syscall.Errno(15127) ERROR_MRM_MAP_NOT_FOUND = syscall.Errno(15135) ERROR_MRM_UNSUPPORTED_PROFILE_TYPE = syscall.Errno(15136) ERROR_MRM_INVALID_QUALIFIER_OPERATOR = syscall.Errno(15137) ERROR_MRM_INDETERMINATE_QUALIFIER_VALUE = syscall.Errno(15138) ERROR_MRM_AUTOMERGE_ENABLED = syscall.Errno(15139) ERROR_MRM_TOO_MANY_RESOURCES = syscall.Errno(15140) ERROR_MCA_INVALID_CAPABILITIES_STRING = syscall.Errno(15200) ERROR_MCA_INVALID_VCP_VERSION = syscall.Errno(15201) ERROR_MCA_MONITOR_VIOLATES_MCCS_SPECIFICATION = syscall.Errno(15202) ERROR_MCA_MCCS_VERSION_MISMATCH = syscall.Errno(15203) ERROR_MCA_UNSUPPORTED_MCCS_VERSION = syscall.Errno(15204) ERROR_MCA_INTERNAL_ERROR = syscall.Errno(15205) ERROR_MCA_INVALID_TECHNOLOGY_TYPE_RETURNED = syscall.Errno(15206) ERROR_MCA_UNSUPPORTED_COLOR_TEMPERATURE = syscall.Errno(15207) ERROR_AMBIGUOUS_SYSTEM_DEVICE = syscall.Errno(15250) ERROR_SYSTEM_DEVICE_NOT_FOUND = syscall.Errno(15299) ERROR_HASH_NOT_SUPPORTED = syscall.Errno(15300) ERROR_HASH_NOT_PRESENT = syscall.Errno(15301) ERROR_SECONDARY_IC_PROVIDER_NOT_REGISTERED = syscall.Errno(15321) ERROR_GPIO_CLIENT_INFORMATION_INVALID = syscall.Errno(15322) ERROR_GPIO_VERSION_NOT_SUPPORTED = syscall.Errno(15323) ERROR_GPIO_INVALID_REGISTRATION_PACKET = syscall.Errno(15324) ERROR_GPIO_OPERATION_DENIED = syscall.Errno(15325) ERROR_GPIO_INCOMPATIBLE_CONNECT_MODE = syscall.Errno(15326) ERROR_GPIO_INTERRUPT_ALREADY_UNMASKED = syscall.Errno(15327) ERROR_CANNOT_SWITCH_RUNLEVEL = syscall.Errno(15400) ERROR_INVALID_RUNLEVEL_SETTING = syscall.Errno(15401) ERROR_RUNLEVEL_SWITCH_TIMEOUT = syscall.Errno(15402) ERROR_RUNLEVEL_SWITCH_AGENT_TIMEOUT = syscall.Errno(15403) ERROR_RUNLEVEL_SWITCH_IN_PROGRESS = syscall.Errno(15404) ERROR_SERVICES_FAILED_AUTOSTART = syscall.Errno(15405) ERROR_COM_TASK_STOP_PENDING = syscall.Errno(15501) ERROR_INSTALL_OPEN_PACKAGE_FAILED = syscall.Errno(15600) ERROR_INSTALL_PACKAGE_NOT_FOUND = syscall.Errno(15601) ERROR_INSTALL_INVALID_PACKAGE = syscall.Errno(15602) ERROR_INSTALL_RESOLVE_DEPENDENCY_FAILED = syscall.Errno(15603) ERROR_INSTALL_OUT_OF_DISK_SPACE = syscall.Errno(15604) ERROR_INSTALL_NETWORK_FAILURE = syscall.Errno(15605) ERROR_INSTALL_REGISTRATION_FAILURE = syscall.Errno(15606) ERROR_INSTALL_DEREGISTRATION_FAILURE = syscall.Errno(15607) ERROR_INSTALL_CANCEL = syscall.Errno(15608) ERROR_INSTALL_FAILED = syscall.Errno(15609) ERROR_REMOVE_FAILED = syscall.Errno(15610) ERROR_PACKAGE_ALREADY_EXISTS = syscall.Errno(15611) ERROR_NEEDS_REMEDIATION = syscall.Errno(15612) ERROR_INSTALL_PREREQUISITE_FAILED = syscall.Errno(15613) ERROR_PACKAGE_REPOSITORY_CORRUPTED = syscall.Errno(15614) ERROR_INSTALL_POLICY_FAILURE = syscall.Errno(15615) ERROR_PACKAGE_UPDATING = syscall.Errno(15616) ERROR_DEPLOYMENT_BLOCKED_BY_POLICY = syscall.Errno(15617) ERROR_PACKAGES_IN_USE = syscall.Errno(15618) ERROR_RECOVERY_FILE_CORRUPT = syscall.Errno(15619) ERROR_INVALID_STAGED_SIGNATURE = syscall.Errno(15620) ERROR_DELETING_EXISTING_APPLICATIONDATA_STORE_FAILED = syscall.Errno(15621) ERROR_INSTALL_PACKAGE_DOWNGRADE = syscall.Errno(15622) ERROR_SYSTEM_NEEDS_REMEDIATION = syscall.Errno(15623) ERROR_APPX_INTEGRITY_FAILURE_CLR_NGEN = syscall.Errno(15624) ERROR_RESILIENCY_FILE_CORRUPT = syscall.Errno(15625) ERROR_INSTALL_FIREWALL_SERVICE_NOT_RUNNING = syscall.Errno(15626) ERROR_STATE_LOAD_STORE_FAILED = syscall.Errno(15800) ERROR_STATE_GET_VERSION_FAILED = syscall.Errno(15801) ERROR_STATE_SET_VERSION_FAILED = syscall.Errno(15802) ERROR_STATE_STRUCTURED_RESET_FAILED = syscall.Errno(15803) ERROR_STATE_OPEN_CONTAINER_FAILED = syscall.Errno(15804) ERROR_STATE_CREATE_CONTAINER_FAILED = syscall.Errno(15805) ERROR_STATE_DELETE_CONTAINER_FAILED = syscall.Errno(15806) ERROR_STATE_READ_SETTING_FAILED = syscall.Errno(15807) ERROR_STATE_WRITE_SETTING_FAILED = syscall.Errno(15808) ERROR_STATE_DELETE_SETTING_FAILED = syscall.Errno(15809) ERROR_STATE_QUERY_SETTING_FAILED = syscall.Errno(15810) ERROR_STATE_READ_COMPOSITE_SETTING_FAILED = syscall.Errno(15811) ERROR_STATE_WRITE_COMPOSITE_SETTING_FAILED = syscall.Errno(15812) ERROR_STATE_ENUMERATE_CONTAINER_FAILED = syscall.Errno(15813) ERROR_STATE_ENUMERATE_SETTINGS_FAILED = syscall.Errno(15814) ERROR_STATE_COMPOSITE_SETTING_VALUE_SIZE_LIMIT_EXCEEDED = syscall.Errno(15815) ERROR_STATE_SETTING_VALUE_SIZE_LIMIT_EXCEEDED = syscall.Errno(15816) ERROR_STATE_SETTING_NAME_SIZE_LIMIT_EXCEEDED = syscall.Errno(15817) ERROR_STATE_CONTAINER_NAME_SIZE_LIMIT_EXCEEDED = syscall.Errno(15818) ERROR_API_UNAVAILABLE = syscall.Errno(15841) ERROR_AUDITING_DISABLED = syscall.Errno(0xC0090001) ERROR_ALL_SIDS_FILTERED = syscall.Errno(0xC0090002) )
View Source
const ( NtKernelLogger = "NT Kernel Logger" // 0x9e814aad, 0x3204, 0x11d2, 0x9a, 0x82, 0x00, 0x60, 0x08, 0xa8, 0x69, 0x39 SystemTraceControlGuid = "{9E814AAD-3204-11D2-9A82-006008A86939}" )
View Source
const ( TDH_CONTEXT_WPP_TMFFILE = TdhContextType(0) TDH_CONTEXT_WPP_TMFSEARCHPATH = TdhContextType(1) TDH_CONTEXT_WPP_GMT = TdhContextType(2) TDH_CONTEXT_POINTERSIZE = TdhContextType(3) TDH_CONTEXT_MAXIMUM = TdhContextType(4) )
View Source
const ( EventKeywordInformation = EventFieldType(0) EventLevelInformation = EventFieldType(1) EventChannelInformation = EventFieldType(2) EventTaskInformation = EventFieldType(3) EventOpcodeInformation = EventFieldType(4) EventInformationMax = EventFieldType(5) )
View Source
const ( DecodingSourceXMLFile = DecodingSource(0) DecodingSourceWbem = DecodingSource(1) DecodingSourceWPP = DecodingSource(2) )
View Source
const ( TEMPLATE_EVENT_DATA = TemplateFlags(1) TEMPLATE_USER_DATA = TemplateFlags(2) )
View Source
const ( EVENTMAP_INFO_FLAG_MANIFEST_VALUEMAP = MapFlags(1) EVENTMAP_INFO_FLAG_MANIFEST_BITMAP = MapFlags(2) EVENTMAP_INFO_FLAG_MANIFEST_PATTERNMAP = MapFlags(4) EVENTMAP_INFO_FLAG_WBEM_VALUEMAP = MapFlags(8) EVENTMAP_INFO_FLAG_WBEM_BITMAP = MapFlags(16) EVENTMAP_INFO_FLAG_WBEM_FLAG = MapFlags(32) EVENTMAP_INFO_FLAG_WBEM_NO_MAP = MapFlags(64) )
View Source
const ( EVENTMAP_ENTRY_VALUETYPE_ULONG = MapValueType(0) EVENTMAP_ENTRY_VALUETYPE_STRING = MapValueType(1) )
View Source
const ( PropertyStruct = PropertyFlags(0x1) PropertyParamLength = PropertyFlags(0x2) PropertyParamCount = PropertyFlags(0x4) PropertyWBEMXmlFragment = PropertyFlags(0x8) PropertyParamFixedLength = PropertyFlags(0x10) )
View Source
const ( TdhInTypeNull = TdhInType(iota) TdhInTypeUnicodestring TdhInTypeAnsistring TdhInTypeInt8 TdhInTypeUint8 TdhInTypeInt16 TdhInTypeUint16 TdhInTypeInt32 TdhInTypeUint32 TdhInTypeInt64 TdhInTypeUint64 TdhInTypeFloat TdhInTypeDouble TdhInTypeBoolean TdhInTypeBinary TdhInTypeGUID TdhInTypePointer TdhInTypeFiletime TdhInTypeSystemtime TdhInTypeSid TdhInTypeHexint32 TdhInTypeHexint64 // End of winmeta types )
found info there: https://github.com/microsoft/ETW2JSON/blob/6721e0438733b316d316d36c488166853a05f836/Deserializer/Tdh.cs
View Source
const ( TdhInTypeCountedstring = TdhInType(iota + 300) // Start of TDH intypes for WBEM. TdhInTypeCountedansistring TdhInTypeReversedcountedstring TdhInTypeReversedcountedansistring TdhInTypeNonnullterminatedstring TdhInTypeNonnullterminatedansistring TdhInTypeUnicodechar TdhInTypeAnsichar TdhInTypeSizet TdhInTypeHexdump TdhInTypeWbemsid )
View Source
const ( TdhOutTypeNull = TdhOutType(iota) TdhOutTypeString TdhOutTypeDatetime TdhOutTypeByte TdhOutTypeUnsignedbyte TdhOutTypeShort TdhOutTypeUnsignedshort TdhOutTypeInt TdhOutTypeUnsignedint TdhOutTypeLong TdhOutTypeUnsignedlong TdhOutTypeFloat TdhOutTypeDouble TdhOutTypeBoolean TdhOutTypeGUID TdhOutTypeHexbinary TdhOutTypeHexint8 TdhOutTypeHexint16 TdhOutTypeHexint32 TdhOutTypeHexint64 TdhOutTypePid TdhOutTypeTid TdhOutTypePort TdhOutTypeIpv4 TdhOutTypeIpv6 TdhOutTypeSocketaddress TdhOutTypeCimdatetime TdhOutTypeEtwtime TdhOutTypeXML TdhOutTypeErrorcode TdhOutTypeWin32error TdhOutTypeNtstatus TdhOutTypeHresult // End of winmeta outtypes. TdhOutTypeCultureInsensitiveDatetime // Culture neutral datetime string. TdhOutTypeJSON )
View Source
const ( // Start of TDH outtypes for WBEM. TdhOutTypeREDUCEDSTRING = TdhOutType(iota + 300) TdhOutTypeNOPRINT )
View Source
const (
AutologgerPath = `HKLM\System\CurrentControlSet\Control\WMI\Autologger`
)
View Source
const (
SDDL_REVISION_1 = 1
)
View Source
const (
StructurePropertyName = "Structures"
)
Variables ¶
View Source
var ( ErrPropertyParsing = fmt.Errorf("error parsing property") ErrUnknownProperty = fmt.Errorf("unknown property") )
View Source
var ( DefaultProvider = Provider{EnableLevel: 0xff} ErrUnkownProvider = fmt.Errorf("unknown provider") )
View Source
var ( KernelProviders = []ProviderDefinition{ {Name: "ALPC", Kernel: true, GUID: "{45d8cccd-539f-4b72-a8b7-5c683142609a}", Flags: EVENT_TRACE_FLAG_ALPC}, {Name: "DbgPrint", Kernel: true, GUID: "{13976d09-a327-438c-950b-7f03192815c7}", Flags: EVENT_TRACE_FLAG_DBGPRINT}, {Name: "DiskIo", Kernel: true, GUID: "{3d6fa8d4-fe05-11d0-9dda-00c04fd7ba7c}", Flags: EVENT_TRACE_FLAG_DISK_IO}, {Name: "DiskIoInit", Kernel: true, GUID: "{3d6fa8d4-fe05-11d0-9dda-00c04fd7ba7c}", Flags: EVENT_TRACE_FLAG_DISK_IO_INIT}, {Name: "Driver", Kernel: true, GUID: "{3d6fa8d4-fe05-11d0-9dda-00c04fd7ba7c}", Flags: EVENT_TRACE_FLAG_DRIVER}, {Name: "FileIo", Kernel: true, GUID: "{90cbdc39-4a3e-11d1-84f4-0000f80464e3}", Flags: EVENT_TRACE_FLAG_FILE_IO}, {Name: "FileIoInit", Kernel: true, GUID: "{90cbdc39-4a3e-11d1-84f4-0000f80464e3}", Flags: EVENT_TRACE_FLAG_FILE_IO_INIT}, {Name: "ImageLoad", Kernel: true, GUID: "{2cb15d1d-5fc1-11d2-abe1-00a0c911f518}", Flags: EVENT_TRACE_FLAG_IMAGE_LOAD}, {Name: "MemoryPageFault", Kernel: true, GUID: "{3d6fa8d3-fe05-11d0-9dda-00c04fd7ba7c}", Flags: EVENT_TRACE_FLAG_MEMORY_PAGE_FAULTS}, {Name: "MemoryHardFault", Kernel: true, GUID: "{3d6fa8d3-fe05-11d0-9dda-00c04fd7ba7c}", Flags: EVENT_TRACE_FLAG_MEMORY_HARD_FAULTS}, {Name: "VirtualAlloc", Kernel: true, GUID: "{3d6fa8d3-fe05-11d0-9dda-00c04fd7ba7c}", Flags: EVENT_TRACE_FLAG_VIRTUAL_ALLOC}, {Name: "DPC", Kernel: true, GUID: "{ce1dbfb4-137e-4da6-87b0-3f59aa102cbc}", Flags: EVENT_TRACE_FLAG_DPC}, {Name: "Interrupt", Kernel: true, GUID: "{ce1dbfb4-137e-4da6-87b0-3f59aa102cbc}", Flags: EVENT_TRACE_FLAG_INTERRUPT}, {Name: "Profile", Kernel: true, GUID: "{ce1dbfb4-137e-4da6-87b0-3f59aa102cbc}", Flags: EVENT_TRACE_FLAG_PROFILE}, {Name: "Syscall", Kernel: true, GUID: "{ce1dbfb4-137e-4da6-87b0-3f59aa102cbc}", Flags: EVENT_TRACE_FLAG_SYSTEMCALL}, {Name: "Process", Kernel: true, GUID: "{3d6fa8d0-fe05-11d0-9dda-00c04fd7ba7c}", Flags: EVENT_TRACE_FLAG_PROCESS}, {Name: "ProcessCounters", Kernel: true, GUID: "{3d6fa8d0-fe05-11d0-9dda-00c04fd7ba7c}", Flags: EVENT_TRACE_FLAG_PROCESS_COUNTERS}, {Name: "Registry", Kernel: true, GUID: "{ae53722e-c863-11d2-8659-00c04fa321a1}", Flags: EVENT_TRACE_FLAG_REGISTRY}, {Name: "SplitIo", Kernel: true, GUID: "{d837ca92-12b9-44a5-ad6a-3a65b3578aa8}", Flags: EVENT_TRACE_FLAG_SPLIT_IO}, {Name: "TcpIp", Kernel: true, GUID: "{9a280ac0-c8e0-11d1-84e2-00c04fb998a2}", Flags: EVENT_TRACE_FLAG_NETWORK_TCPIP}, {Name: "Thread", Kernel: true, GUID: "{3d6fa8d1-fe05-11d0-9dda-00c04fd7ba7c}", Flags: EVENT_TRACE_FLAG_THREAD}, {Name: "UdpIp", Kernel: true, GUID: "{bf3a50c5-a9c9-4988-a005-2df0b7c80f80}", Flags: EVENT_TRACE_FLAG_NETWORK_TCPIP}, } )
View Source
var ( // The final event id of Mof Events is computed // by BaseId + Opcode. As Opcode is uint8 we jump // BaseIds every 0xff so that we do not overlap event // ids between classes MofClassMapping = map[uint32]MofClass{ 1171836109: {Name: "ALPC", BaseId: 0}, 2026983191: {Name: "ApplicationVerifier", BaseId: 255}, 328690953: {Name: "DbgPrint", BaseId: 510}, 1030727892: {Name: "DiskIo", BaseId: 765}, 3185075665: {Name: "DiskPerf", BaseId: 1020}, 3580666929: {Name: "DriverVerifier", BaseId: 1275}, 2976882526: {Name: "EventLog", BaseId: 1530}, 25508453: {Name: "EventTraceConfig", BaseId: 1785}, 2429279289: {Name: "FileIo", BaseId: 2040}, 2369794079: {Name: "GenericMessage", BaseId: 2295}, 3901786812: {Name: "GlobalLogger", BaseId: 2550}, 1030727890: {Name: "HardFault", BaseId: 2805}, 749821213: {Name: "ImageLoad", BaseId: 3060}, 2560801239: {Name: "MsSystemInformation", BaseId: 3315}, 1030727891: {Name: "PageFault", BaseId: 3570}, 3458056116: {Name: "PerfInfo", BaseId: 3825}, 1030727888: {Name: "Process", BaseId: 4080}, 2924704302: {Name: "Registry", BaseId: 4335}, 3627534994: {Name: "SplitIo", BaseId: 4590}, 2586315456: {Name: "TcpIp", BaseId: 4845}, 2713458880: {Name: "ThermalZone", BaseId: 5100}, 1030727889: {Name: "Thread", BaseId: 5355}, 964792796: {Name: "TraceError", BaseId: 5610}, 3208270021: {Name: "UdpIp", BaseId: 5865}, 1147177553: {Name: "WmiEventLogger", BaseId: 6120}, 0x68fdd900: {Name: "EventTraceEvent", BaseId: 6375}, } )
Functions ¶
func CloseTrace ¶
CloseTrace API wrapper generated from prototype EXTERN_C ULONG WMIAPI CloseTrace (
TRACEHANDLE TraceHandle);
func ControlTrace ¶
func ControlTrace(traceHandle syscall.Handle, instanceName *uint16, properties *EventTraceProperties, controlCode uint32) error
ControlTraceW API wrapper generated from prototype EXTERN_C ULONG WMIAPI ControlTraceW (
TRACEHANDLE TraceHandle, LPCWSTR InstanceName, PEVENT_TRACE_PROPERTIES Properties, ULONG ControlCode);
func ConvertSecurityDescriptorToStringSecurityDescriptorW ¶
func ConvertSecurityDescriptorToStringSecurityDescriptorW( securityDescriptor *SecurityDescriptor, requestedStringSDRevision uint32, securityInformation SecurityInformation, ) (string, error)
ConvertSecurityDescriptorToStringSecurityDescriptorW API wrapper generated from prototype WINADVAPI WINBOOL WINAPI ConvertSecurityDescriptorToStringSecurityDescriptorW(
PSECURITY_DESCRIPTOR SecurityDescriptor, DWORD RequestedStringSDRevision, SECURITY_INFORMATION SecurityInformation, LPWSTR *StringSecurityDescriptor, PULONG StringSecurityDescriptorLen);
func EnableTraceEx2 ¶
func EnableTraceEx2(traceHandle syscall.Handle, providerId *GUID, controlCode uint32, level uint8, matchAnyKeyword uint64, matchAllKeyword uint64, timeout uint32, enableParameters *EnableTraceParameters) error
EnableTraceEx2 API wrapper generated from prototype EXTERN_C ULONG WMIAPI EnableTraceEx2 (
TRACEHANDLE TraceHandle, LPCGUID ProviderId, ULONG ControlCode, UCHAR Level, ULONGLONG MatchAnyKeyword, ULONGLONG MatchAllKeyword, ULONG Timeout, PENABLE_TRACE_PARAMETERS EnableParameters);
func EventAccessControl ¶ added in v1.4.5
func EventAccessControl(guid *GUID, operation uint32, sid *SID, rights uint32, allowOrDeny bool) error
EventAccessControl API wrapper generated from prototype ULONG EVNTAPI EventAccessControl (
LPGUID Guid, ULONG Operation, PSID Sid, ULONG Rights, BOOLEAN AllowOrDeny);
func EventAccessQuery ¶
func EventAccessQuery( guid *GUID, buffer *SecurityDescriptor, bufferSize *uint32) error
EventAccessQuery API wrapper generated from prototype ULONG EVNTAPI EventAccessQuery (
LPGUID Guid, PSECURITY_DESCRIPTOR Buffer, PULONG BufferSize);
func GetAccessString ¶ added in v1.5.0
func GetKernelProviderFlags ¶
func IsKernelProvider ¶
func OpenTrace ¶
func OpenTrace(logfile *EventTraceLogfile) (syscall.Handle, error)
OpenTraceW API wrapper generated from prototype EXTERN_C TRACEHANDLE WMIAPI OpenTraceW (
PEVENT_TRACE_LOGFILEW Logfile);
func ProcessTrace ¶
func ProcessTrace(handleArray *syscall.Handle, handleCount uint32, startTime *FileTime, endTime *FileTime) error
ProcessTrace API wrapper generated from prototype EXTERN_C ULONG WMIAPI ProcessTrace (
PTRACEHANDLE HandleArray, ULONG HandleCount, LPFILETIME StartTime, LPFILETIME EndTime);
func StartTrace ¶
func StartTrace(traceHandle *syscall.Handle, instanceName *uint16, properties *EventTraceProperties) error
StartTraceW API wrapper generated from prototype EXTERN_C ULONG WMIAPI StartTraceW (
PTRACEHANDLE TraceHandle, LPCWSTR InstanceName, PEVENT_TRACE_PROPERTIES Properties);
func StopTrace ¶
func StopTrace( traceHandle syscall.Handle, instanceName *uint16, properties *EventTraceProperties) error
StopTrace API wrapper generated from prototype EXTERN_C ULONG WMIAPI StopTrace(
IN TRACEHANDLE TraceHandle, IN LPCWSTR InstanceName OPTIONAL, IN OUT PEVENT_TRACE_PROPERTIES Properties);
NB: This function is obsolete. The ControlTrace function supersedes this function.
func TdhEnumerateProviderFieldInformation ¶
func TdhEnumerateProviderFieldInformation( pGuid *GUID, eventFieldType int, pBuffer *ProviderFieldInfoArray, pBufferSize *uint32) error
TdhEnumerateProviderFieldInformation API wrapper generated from prototype ULONG __stdcall TdhEnumerateProviderFieldInformation(
LPGUID pGuid, EVENT_FIELD_TYPE EventFieldType, PPROVIDER_FIELD_INFOARRAY pBuffer, ULONG *pBufferSize );
Tested: NOK
func TdhEnumerateProviders ¶
func TdhEnumerateProviders( pBuffer *ProviderEnumerationInfo, pBufferSize *uint32) error
TdhEnumerateProviders API wrapper generated from prototype ULONG __stdcall TdhEnumerateProviders(
PPROVIDER_ENUMERATION_INFO pBuffer, ULONG *pBufferSize );
Tested: NOK
func TdhFormatProperty ¶
func TdhFormatProperty( eventInfo *TraceEventInfo, mapInfo *EventMapInfo, pointerSize uint32, propertyInType uint16, propertyOutType uint16, propertyLength uint16, userDataLength uint16, userData *byte, bufferSize *uint32, buffer *uint16, userDataConsumed *uint16) error
TdhFormatProperty API wrapper generated from prototype TDHSTATUS TdhFormatProperty(
PTRACE_EVENT_INFO EventInfo, PEVENT_MAP_INFO MapInfo, ULONG PointerSize, USHORT PropertyInType, USHORT PropertyOutType, USHORT PropertyLength, USHORT UserDataLength, PBYTE UserData, PULONG BufferSize, PWCHAR Buffer, PUSHORT UserDataConsumed );
Tested: OK
func TdhGetEventInformation ¶
func TdhGetEventInformation(pEvent *EventRecord, tdhContextCount uint32, pTdhContext *TdhContext, pBuffer *TraceEventInfo, pBufferSize *uint32) error
TdhGetEventInformation API wrapper generated from prototype ULONG __stdcall TdhGetEventInformation(
PEVENT_RECORD pEvent, ULONG TdhContextCount, PTDH_CONTEXT pTdhContext, PTRACE_EVENT_INFO pBuffer, ULONG *pBufferSize );
Tested: OK
func TdhGetEventMapInformation ¶
func TdhGetEventMapInformation(pEvent *EventRecord, pMapName *uint16, pBuffer *EventMapInfo, pBufferSize *uint32) error
TdhGetEventMapInformation API wrapper generated from prototype ULONG __stdcall TdhGetEventMapInformation(
PEVENT_RECORD pEvent, LPWSTR pMapName, PEVENT_MAP_INFO pBuffer, ULONG *pBufferSize );
Tested: OK
func TdhGetProperty ¶
func TdhGetProperty(pEvent *EventRecord, tdhContextCount uint32, pTdhContext *TdhContext, propertyDataCount uint32, pPropertyData *PropertyDataDescriptor, bufferSize uint32, pBuffer *byte) error
TdhGetProperty API wrapper generated from prototype ULONG __stdcall TdhGetProperty(
PEVENT_RECORD pEvent, ULONG TdhContextCount, PTDH_CONTEXT pTdhContext, ULONG PropertyDataCount, PPROPERTY_DATA_DESCRIPTOR pPropertyData, ULONG BufferSize, PBYTE pBuffer );
Tested: OK
func TdhGetPropertySize ¶
func TdhGetPropertySize(pEvent *EventRecord, tdhContextCount uint32, pTdhContext *TdhContext, propertyDataCount uint32, pPropertyData *PropertyDataDescriptor, pPropertySize *uint32) error
TdhGetPropertySize API wrapper generated from prototype ULONG __stdcall TdhGetPropertySize(
PEVENT_RECORD pEvent, ULONG TdhContextCount, PTDH_CONTEXT pTdhContext, ULONG PropertyDataCount, PPROPERTY_DATA_DESCRIPTOR pPropertyData, ULONG *pPropertySize );
Tested: OK
func TdhQueryProviderFieldInformation ¶
func TdhQueryProviderFieldInformation( pGuid *GUID, eventFieldValue uint64, eventFieldType int, pBuffer *ProviderFieldInfoArray, pBufferSize *uint32) error
TdhQueryProviderFieldInformation API wrapper generated from prototype ULONG __stdcall TdhQueryProviderFieldInformation(
LPGUID pGuid, ULONGLONG EventFieldValue, EVENT_FIELD_TYPE EventFieldType, PPROVIDER_FIELD_INFOARRAY pBuffer, ULONG *pBufferSize );
Tested: NOK
func UTF16AtOffsetToString ¶
func UTF16BytesToString ¶
UTF16BytesToString transforms a bytes array of UTF16 encoded characters to a Go string
func UTF16PtrToString ¶
UTF16PtrToString transforms a *uint16 to a Go string
Types ¶
type AutoLogger ¶
type AutoLogger struct {
Name string
Guid string
LogFileMode uint32
BufferSize uint32
ClockType uint32
}
func (*AutoLogger) Create ¶
func (a *AutoLogger) Create() (err error)
func (*AutoLogger) Delete ¶
func (a *AutoLogger) Delete() error
func (*AutoLogger) EnableProvider ¶
func (a *AutoLogger) EnableProvider(p Provider) (err error)
func (*AutoLogger) Exists ¶
func (a *AutoLogger) Exists() bool
func (*AutoLogger) Path ¶
func (a *AutoLogger) Path() string
type Consumer ¶
type Consumer struct {
sync.WaitGroup
// Callback which executes at a very early stage
// It can be used to early filter out events.
// Filtering events in this method have a very low overhead
// as almost no processing happened yet. To filter out some
// events call Skip method of EventRecordHelper
EventRecordCallback func(*EventRecordHelper) error
// Callback executed after event properties got prepared (step before parsing).
// Properties are not parsed yet and this is the right place to filter
// events based only on some properties.
// NB: events skipped in EventRecordCallback never reach this function
PreparedCallback func(*EventRecordHelper) error
// Callback executed after the event got parsed and defines what to do
// with the event (printed, sent to a channel ...)
EventCallback func(*Event) error
Traces map[string]bool
Filter EventFilter
Events chan *Event
Skipped uint64
// contains filtered or unexported fields
}
func NewRealTimeConsumer ¶
NewRealTimeConsumer creates a new Consumer to consume ETW in RealTime mode
func (*Consumer) DefaultEventCallback ¶ added in v1.5.0
DefaultEventCallback is the default EventCallback method applied to Consumer created with NewRealTimeConsumer
func (*Consumer) DefaultEventRecordCallback ¶ added in v1.5.0
func (c *Consumer) DefaultEventRecordCallback(h *EventRecordHelper) error
DefaultEventRecordCallback is the default EventRecordCallback method applied to Consumer created with NewRealTimeConsumer
func (*Consumer) FromSessions ¶ added in v1.5.0
FromSessions initializes the consumer from sessions
func (*Consumer) FromTraceNames ¶ added in v1.5.0
FromTraceNames initializes consumer from existing traces
func (*Consumer) InitFilters ¶ added in v1.4.3
InitFilters initializes event filtering from a Provider slice
type DecodingSource ¶
type DecodingSource int32
type EnableTraceParameters ¶
type EtwBufferContext ¶
typedef struct _ETW_BUFFER_CONTEXT {
union {
struct {
UCHAR ProcessorNumber;
UCHAR Alignment;
} DUMMYSTRUCTNAME; // siize UCHAR
USHORT ProcessorIndex; // USHORT
} DUMMYUNIONNAME; // USHORT
USHORT LoggerId;
} ETW_BUFFER_CONTEXT, *PETW_BUFFER_CONTEXT;
sizeof: 0x4 (OK)
type Event ¶
type Event struct {
Flags struct {
// Use to flag event as being skippable for performance reason
Skippable bool
} `json:"-"`
EventData map[string]interface{} `json:",omitempty"`
UserData map[string]interface{} `json:",omitempty"`
System struct {
Channel string
Computer string
EventID uint16
EventType string `json:",omitempty"`
EventGuid string `json:",omitempty"`
Execution struct {
ProcessID uint32
ThreadID uint32
}
Keywords struct {
Value uint64
Name string
}
Level struct {
Value uint8
Name string
}
Opcode struct {
Value uint8
Name string
}
Task struct {
Value uint8
Name string
}
Provider struct {
Guid string
Name string
}
TimeCreated struct {
SystemTime time.Time
}
}
ExtendedData []string `json:",omitempty"`
}
func (*Event) GetProperty ¶ added in v1.5.0
type EventCallback ¶
type EventCallback func(*EventTrace)
type EventDescriptor ¶
type EventDescriptor struct {
Id uint16
Version uint8
Channel uint8
Level uint8
Opcode uint8
Task uint16
Keyword uint64
}
typedef struct _EVENT_DESCRIPTOR {
USHORT Id;
UCHAR Version;
UCHAR Channel;
UCHAR Level;
UCHAR Opcode;
USHORT Task;
ULONGLONG Keyword;
} EVENT_DESCRIPTOR, *PEVENT_DESCRIPTOR;
type EventFieldType ¶
type EventFieldType int32
type EventFilter ¶
type EventFilterDescriptor ¶
typedef struct _EVENT_FILTER_DESCRIPTOR {
ULONGLONG Ptr;
ULONG Size;
ULONG Type;
} EVENT_FILTER_DESCRIPTOR, *PEVENT_FILTER_DESCRIPTOR;
sizeof: 0x10 (OK)
type EventHeader ¶
type EventHeader struct {
Size uint16
HeaderType uint16
Flags uint16
EventProperty uint16
ThreadId uint32
ProcessId uint32
TimeStamp int64
ProviderId GUID
EventDescriptor EventDescriptor
Time int64
ActivityId GUID
}
typedef struct _EVENT_HEADER {
USHORT Size;
USHORT HeaderType;
USHORT Flags;
USHORT EventProperty;
ULONG ThreadId;
ULONG ProcessId;
LARGE_INTEGER TimeStamp;
GUID ProviderId;
EVENT_DESCRIPTOR EventDescriptor;
union {
struct {
ULONG KernelTime;
ULONG UserTime;
} DUMMYSTRUCTNAME;
ULONG64 ProcessorTime;
} DUMMYUNIONNAME;
GUID ActivityId;
} EVENT_HEADER, *PEVENT_HEADER;
func (*EventHeader) UTCTimeStamp ¶
func (e *EventHeader) UTCTimeStamp() time.Time
type EventMapEntry ¶
type EventMapInfo ¶
type EventMapInfo struct {
NameOffset uint32
Flag MapFlags
EntryCount uint32
Union uint32 // Not sure about size of union depends on size of enum MAP_VALUETYPE
MapEntryArray [1]EventMapEntry
}
func (*EventMapInfo) GetEventMapEntryAt ¶
func (e *EventMapInfo) GetEventMapEntryAt(i int) *EventMapEntry
func (*EventMapInfo) RemoveTrailingSpace ¶
func (e *EventMapInfo) RemoveTrailingSpace()
type EventPropertyInfo ¶
type EventPropertyInfo struct {
Flags PropertyFlags
NameOffset uint32
TypeUnion struct {
// contains filtered or unexported fields
}
CountUnion uint16
LengthUnion uint16
ResTagUnion uint32
}
func (*EventPropertyInfo) Count ¶
func (i *EventPropertyInfo) Count() uint16
func (*EventPropertyInfo) CountPropertyIndex ¶
func (i *EventPropertyInfo) CountPropertyIndex() uint16
func (*EventPropertyInfo) CustomSchemaOffset ¶
func (i *EventPropertyInfo) CustomSchemaOffset() uint32
func (*EventPropertyInfo) InType ¶
func (i *EventPropertyInfo) InType() uint16
func (*EventPropertyInfo) Length ¶
func (i *EventPropertyInfo) Length() uint16
func (*EventPropertyInfo) LengthPropertyIndex ¶
func (i *EventPropertyInfo) LengthPropertyIndex() uint16
func (*EventPropertyInfo) MapNameOffset ¶
func (i *EventPropertyInfo) MapNameOffset() uint32
func (*EventPropertyInfo) NumOfStructMembers ¶
func (i *EventPropertyInfo) NumOfStructMembers() uint16
func (*EventPropertyInfo) OutType ¶
func (i *EventPropertyInfo) OutType() uint16
func (*EventPropertyInfo) StructStartIndex ¶
func (i *EventPropertyInfo) StructStartIndex() uint16
type EventRecord ¶
type EventRecord struct {
EventHeader EventHeader
BufferContext EtwBufferContext
ExtendedDataCount uint16
UserDataLength uint16
ExtendedData *EventHeaderExtendedDataItem
UserData uintptr
UserContext uintptr
}
func (*EventRecord) GetEventInformation ¶
func (e *EventRecord) GetEventInformation() (tei *TraceEventInfo, err error)
func (*EventRecord) GetMapInfo ¶
func (e *EventRecord) GetMapInfo(pMapName *uint16, decodingSource uint32) (pMapInfo *EventMapInfo, err error)
func (*EventRecord) PointerSize ¶
func (e *EventRecord) PointerSize() uint32
type EventRecordCallback ¶
type EventRecordCallback func(*EventRecord) uintptr
type EventRecordHelper ¶
type EventRecordHelper struct {
EventRec *EventRecord
TraceInfo *TraceEventInfo
Properties map[string]*Property
ArrayProperties map[string][]*Property
Structures []map[string]*Property
Flags struct {
Skip bool
Skippable bool
}
// contains filtered or unexported fields
}
func (*EventRecordHelper) Channel ¶ added in v1.5.0
func (e *EventRecordHelper) Channel() string
func (*EventRecordHelper) EventID ¶ added in v1.5.0
func (e *EventRecordHelper) EventID() uint16
func (*EventRecordHelper) GetPropertyInt ¶ added in v1.5.0
func (e *EventRecordHelper) GetPropertyInt(name string) (i int64, err error)
func (*EventRecordHelper) GetPropertyString ¶ added in v1.5.0
func (e *EventRecordHelper) GetPropertyString(name string) (s string, err error)
func (*EventRecordHelper) GetPropertyUint ¶ added in v1.5.0
func (e *EventRecordHelper) GetPropertyUint(name string) (u uint64, err error)
func (*EventRecordHelper) ParseProperties ¶
func (e *EventRecordHelper) ParseProperties(names ...string) (err error)
func (*EventRecordHelper) ParseProperty ¶
func (e *EventRecordHelper) ParseProperty(name string) (err error)
func (*EventRecordHelper) Provider ¶ added in v1.5.0
func (e *EventRecordHelper) Provider() string
func (*EventRecordHelper) ProviderGUID ¶ added in v1.5.0
func (e *EventRecordHelper) ProviderGUID() string
func (*EventRecordHelper) SetProperty ¶ added in v1.5.0
func (e *EventRecordHelper) SetProperty(name, value string)
func (*EventRecordHelper) Skip ¶ added in v1.5.0
func (e *EventRecordHelper) Skip()
func (*EventRecordHelper) Skippable ¶ added in v1.5.0
func (e *EventRecordHelper) Skippable()
type EventSecurityOperation ¶ added in v1.4.5
type EventSecurityOperation uint32
type EventTrace ¶
type EventTrace struct {
Header EventTraceHeader
InstanceId uint32
ParentInstanceId uint32
ParentGuid GUID
MofData uintptr
MofLength uint32
UnionCtx uint32
}
typedef struct _EVENT_TRACE {
EVENT_TRACE_HEADER Header;
ULONG InstanceId;
ULONG ParentInstanceId;
GUID ParentGuid;
PVOID MofData;
ULONG MofLength;
union {
ULONG ClientContext;
ETW_BUFFER_CONTEXT BufferContext;
} DUMMYUNIONNAME;
} EVENT_TRACE, *PEVENT_TRACE;
type EventTraceBufferCallback ¶
type EventTraceBufferCallback func(*EventTraceLogfile) uint32
type EventTraceHeader ¶
type EventTraceHeader struct {
Size uint16
Union1 uint16
Union2 uint32
ThreadId uint32
ProcessId uint32
TimeStamp int64
Union3 [16]byte
Union4 uint64
}
sizeof: 0x30 (48)
type EventTraceLogfile ¶
type EventTraceLogfile struct {
LogFileName *uint16
LoggerName *uint16
CurrentTime int64
BuffersRead uint32
Union1 uint32
CurrentEvent EventTrace
LogfileHeader TraceLogfileHeader
//BufferCallback *EventTraceBufferCallback
BufferCallback uintptr
BufferSize uint32
Filled uint32
EventsLost uint32
Callback uintptr
IsKernelTrace uint32
Context uintptr
}
func (*EventTraceLogfile) SetProcessTraceMode ¶
func (e *EventTraceLogfile) SetProcessTraceMode(ptm uint32)
type EventTraceProperties ¶
type EventTraceProperties struct {
Wnode WnodeHeader
BufferSize uint32
MinimumBuffers uint32
MaximumBuffers uint32
MaximumFileSize uint32
LogFileMode uint32
FlushTimer uint32
EnableFlags uint32
AgeLimit int32
NumberOfBuffers uint32
FreeBuffers uint32
EventsLost uint32
BuffersWritten uint32
LogBuffersLost uint32
RealTimeBuffersLost uint32
LoggerThreadId syscall.Handle
LogFileNameOffset uint32
LoggerNameOffset uint32
}
func NewEventTraceSessionProperties ¶
func NewEventTraceSessionProperties(sessionName string) (*EventTraceProperties, uint32)
func NewRealTimeEventTraceSessionProperties ¶
func NewRealTimeEventTraceSessionProperties(logSessionName string) *EventTraceProperties
type FileTime ¶
type FileTime struct {
// contains filtered or unexported fields
}
typedef struct _FILETIME {
DWORD dwLowDateTime;
DWORD dwHighDateTime;
} FILETIME, *PFILETIME, *LPFILETIME;
type GUID ¶
GUID structure
func MustParseGUIDFromString ¶ added in v1.5.0
MustParseGUIDFromString parses a guid string into a GUID struct or panics
type MapValueType ¶
type MapValueType int32
type PropertyDataDescriptor ¶
type PropertyFlags ¶
type PropertyFlags int32
type Provider ¶
type Provider struct {
GUID string
Name string
EnableLevel uint8
MatchAnyKeyword uint64
MatchAllKeyword uint64
Filter []uint16
}
func MustParseProvider ¶ added in v1.5.0
MustParseProvider parses a provider string or panic
func ParseProvider ¶ added in v1.5.0
ParseProvider parses a string and returns a provider. The returned provider is initialized from DefaultProvider. Format (Name|GUID) string:EnableLevel uint8:Event IDs comma sep string:MatchAnyKeyword uint16:MatchAllKeyword uint16 Example: Microsoft-Windows-Kernel-File:0xff:13,14:0x80
func ResolveProvider ¶ added in v1.4.0
ResolveProvider return a Provider structure given a GUID or a provider name as input
type ProviderDefinition ¶
type ProviderEnumerationInfo ¶
type ProviderEnumerationInfo struct {
NumberOfProviders uint32
Reserved uint32
TraceProviderInfoArray [1]TraceProviderInfo
}
type ProviderFieldInfo ¶
typedef struct _PROVIDER_FIELD_INFO {
ULONG NameOffset;
ULONG DescriptionOffset;
ULONGLONG Value;
} PROVIDER_FIELD_INFO;
type ProviderFieldInfoArray ¶
type ProviderFieldInfoArray struct {
NumberOfElements uint32
FieldType EventFieldType // This field is initially an enum so I guess it has the size of an int
FieldInfoArray [1]ProviderFieldInfo
}
type ProviderFilter ¶
type ProviderFilter struct {
// contains filtered or unexported fields
}
ProviderFilter structure to filter events based on Provider definition
func NewProviderFilter ¶ added in v1.4.3
func NewProviderFilter() *ProviderFilter
NewProviderFilter creates a new ProviderFilter structure
func (*ProviderFilter) Match ¶
func (f *ProviderFilter) Match(e IEvent) bool
Match implements EventFilter
func (*ProviderFilter) Update ¶ added in v1.5.0
func (f *ProviderFilter) Update(p *Provider)
FromProvider implements EventFilter
type ProviderMap ¶
func EnumerateProviders ¶
func EnumerateProviders() (m ProviderMap)
EnumerateProviders returns a ProviderMap containing available providers keys are both provider's GUIDs and provider's names
type RealTimeSession ¶
type RealTimeSession struct {
// contains filtered or unexported fields
}
func NewKernelRealTimeSession ¶ added in v1.5.0
func NewKernelRealTimeSession(flags ...uint32) (p *RealTimeSession)
NewKernelRealTimeSession creates a new ETW session to receive NT Kernel Logger events in real time
func NewRealTimeSession ¶ added in v1.5.0
func NewRealTimeSession(name string) (p *RealTimeSession)
NewRealTimeSession creates a new ETW session to receive events in real time
func (*RealTimeSession) EnableProvider ¶
func (p *RealTimeSession) EnableProvider(prov Provider) (err error)
EnableProvider enables the session to receive events from a given provider
func (*RealTimeSession) IsStarted ¶ added in v1.5.0
func (p *RealTimeSession) IsStarted() bool
IsStarted returns true if the session is already started
func (*RealTimeSession) Providers ¶
func (p *RealTimeSession) Providers() []Provider
Providers implements Session interface
func (*RealTimeSession) Start ¶
func (p *RealTimeSession) Start() (err error)
Start starts the session
func (*RealTimeSession) TraceName ¶
func (p *RealTimeSession) TraceName() string
TraceName implements Session interface
type SID ¶
type SID struct {
Revision uint8
SubAuthorityCount uint8
IdentifierAuthority SidIdentifierAuthority
SubAuthority [1]uint32
}
func ConvertStringSidToSidW ¶ added in v1.4.5
ConvertStringSidToSidW API wrapper generated from prototype WINADVAPI WINBOOL WINAPI ConvertStringSidToSidW(
LPCWSTR StringSid, PSID *Sid);
type SecurityDescriptor ¶
type SecurityDescriptorControl ¶
type SecurityDescriptorControl uint32
type SecurityInformation ¶
type SecurityInformation uint32
type Session ¶ added in v1.5.0
func SessionSlice ¶ added in v1.5.0
func SessionSlice(i interface{}) (out []Session)
SessionSlice converts a slice of structures implementing Session to a slice of Session.
type SidIdentifierAuthority ¶
type SidIdentifierAuthority struct {
Value [6]uint8
}
type SystemTime ¶
type SystemTime struct {
Year uint16
Month uint16
DayOfWeek uint16
Day uint16
Hour uint16
Minute uint16
Second uint16
Milliseconds uint16
}
typedef struct _SYSTEMTIME {
WORD wYear;
WORD wMonth;
WORD wDayOfWeek;
WORD wDay;
WORD wHour;
WORD wMinute;
WORD wSecond;
WORD wMilliseconds;
} SYSTEMTIME, *PSYSTEMTIME, *LPSYSTEMTIME;
sizeof: 0x10 (OK)
type TdhContext ¶
type TdhContext struct {
ParameterValue uint32
ParameterType TdhContextType
ParameterSize uint32
}
type TdhContextType ¶
type TdhContextType int32
type TdhOutType ¶
type TdhOutType uint32
type TemplateFlags ¶
type TemplateFlags int32
type TimeZoneInformation ¶
type TimeZoneInformation struct {
Bias int32
StandardName [32]uint16
StandardDate SystemTime
StandardBias int32
DaylightName [32]uint16
DaylightDate SystemTime
DaylighBias int32
}
type TraceEventInfo ¶
type TraceEventInfo struct {
ProviderGUID GUID
EventGUID GUID
EventDescriptor EventDescriptor
DecodingSource DecodingSource
ProviderNameOffset uint32
LevelNameOffset uint32
ChannelNameOffset uint32
KeywordsNameOffset uint32
TaskNameOffset uint32
OpcodeNameOffset uint32
EventMessageOffset uint32
ProviderMessageOffset uint32
BinaryXMLOffset uint32
BinaryXMLSize uint32
ActivityIDNameOffset uint32
RelatedActivityIDNameOffset uint32
PropertyCount uint32
TopLevelPropertyCount uint32
Flags TemplateFlags
EventPropertyInfoArray [1]EventPropertyInfo
}
func (*TraceEventInfo) ActivityIDName ¶
func (t *TraceEventInfo) ActivityIDName() string
Seems to be always empty
func (*TraceEventInfo) ChannelName ¶
func (t *TraceEventInfo) ChannelName() string
func (*TraceEventInfo) EventID ¶
func (t *TraceEventInfo) EventID() uint16
func (*TraceEventInfo) EventMessage ¶
func (t *TraceEventInfo) EventMessage() string
Seems to be always empty
func (*TraceEventInfo) GetEventPropertyInfoAt ¶
func (t *TraceEventInfo) GetEventPropertyInfoAt(i uint32) *EventPropertyInfo
func (*TraceEventInfo) IsMof ¶
func (t *TraceEventInfo) IsMof() bool
func (*TraceEventInfo) IsXML ¶
func (t *TraceEventInfo) IsXML() bool
func (*TraceEventInfo) KeywordName ¶
func (t *TraceEventInfo) KeywordName() string
func (*TraceEventInfo) LevelName ¶
func (t *TraceEventInfo) LevelName() string
func (*TraceEventInfo) OpcodeName ¶
func (t *TraceEventInfo) OpcodeName() string
func (*TraceEventInfo) PropertyNameOffset ¶ added in v1.5.0
func (t *TraceEventInfo) PropertyNameOffset(i uint32) uintptr
func (*TraceEventInfo) ProviderName ¶
func (t *TraceEventInfo) ProviderName() string
func (*TraceEventInfo) RelatedActivityIDName ¶
func (t *TraceEventInfo) RelatedActivityIDName() string
Seems to be always empty
func (*TraceEventInfo) TaskName ¶
func (t *TraceEventInfo) TaskName() string
type TraceLogfileHeader ¶
type TraceLogfileHeader struct {
BufferSize uint32
VersionUnion uint32
ProviderVersion uint32
NumberOfProcessors uint32
EndTime int64
TimerResolution uint32
MaximumFileSize uint32
LogFileMode uint32
BuffersWritten uint32
Union1 [16]byte
LoggerName *uint16
LogFileName *uint16
TimeZone TimeZoneInformation
BootTime int64
PerfFreq int64
StartTime int64
ReservedFlags uint32
BuffersLost uint32
}
type TraceProviderInfo ¶
Source Files
Click to show internal directories.
Click to hide internal directories.