Package rekall :: Package plugins :: Package windows :: Package gui :: Module constants

Module constants

Classes
	FakeAtom

Variables
	DEFAULT_ATOMS = `{0x8000: FakeAtom("PopupMenu (Default)"), 0x80...`
	WINDOW_STYLES = `{'WS_BORDER': 8388608, 'WS_CAPTION': 12582912,...`
	WINDOW_STYLES_EX = `{'WS_EX_ACCEPTFILES': 16, 'WS_EX_APPWINDOW'...`
	MESSAGE_TYPES = `[('WH_MSGFILTER', -1), ('WH_JOURNALRECORD', 0)...`
	HOOK_FLAGS = `{'HF_ANSI': 1, 'HF_DESTROYED': 7, 'HF_FREED': 9, ...`
	EVENT_FLAGS = `{1: 'WINEVENT_SKIPOWNTHREAD', 2: 'WINEVENT_SKIPO...`
	EVENT_ID_ENUM = `{1: 'EVENT_MIN', 2: 'EVENT_SYSTEM_ALERT', 3: '...`
	HANDLE_TYPE_ENUM = `{0: 'TYPE_FREE', 1: 'TYPE_WINDOW', 2: 'TYPE...`
	HANDLE_TYPE_ENUM_SEVEN = `{0: 'TYPE_FREE', 1: 'TYPE_WINDOW', 2:...`
	CLIPBOARD_FORMAT_ENUM = `{1: 'CF_TEXT', 2: 'CF_BITMAP', 3: 'CF_...`
	TIMER_FLAGS = `{'TMRF_INIT': 3, 'TMRF_ONESHOT': 4, 'TMRF_READY'...`
	__package__ = `'rekall.plugins.windows.gui'`

Variables Details

DEFAULT_ATOMS

Value:

{0x8000: FakeAtom("PopupMenu (Default)"), 0x8001: FakeAtom("Desktop (D
efault)"), 0x8002: FakeAtom("Dialog (Default)"), 0x8003: FakeAtom("Win
Switch (Default)"), 0x8004: FakeAtom("IconTitle (Default)"), 0x8006: F
akeAtom("ToolTip (Default)"),}

WINDOW_STYLES

Value:

{'WS_BORDER': 8388608,
 'WS_CAPTION': 12582912,
 'WS_CHILD': 1073741824,
 'WS_CLIPCHILDREN': 33554432,
 'WS_CLIPSIBLINGS': 67108864,
 'WS_DISABLED': 134217728,
 'WS_DLGFRAME': 4194304,
 'WS_GROUP': 131072,
...

WINDOW_STYLES_EX

Value:

{'WS_EX_ACCEPTFILES': 16,
 'WS_EX_APPWINDOW': 262144,
 'WS_EX_CLIENTEDGE': 512,
 'WS_EX_CONTEXTHELP': 1024,
 'WS_EX_CONTROLPARENT': 65536,
 'WS_EX_DLGMODALFRAME': 1,
 'WS_EX_LEFT': 0,
 'WS_EX_LEFTSCROLLBAR': 16384,
...

MESSAGE_TYPES

Value:

[('WH_MSGFILTER', -1),
 ('WH_JOURNALRECORD', 0),
 ('WH_JOURNALPLAYBACK', 1),
 ('WH_KEYBOARD', 2),
 ('WH_GETMESSAGE', 3),
 ('WH_CALLWNDPROC', 4),
 ('WH_CBT', 5),
 ('WH_SYSMSGFILTER', 6),
...

HOOK_FLAGS

Value:

{'HF_ANSI': 1,
 'HF_DESTROYED': 7,
 'HF_FREED': 9,
 'HF_GLOBAL': 0,
 'HF_HOOKFAULTED': 4,
 'HF_HUNG': 3,
 'HF_INCHECKWHF': 8,
 'HF_WX86KNOWNDLL': 6}

EVENT_FLAGS

Value:

{1: 'WINEVENT_SKIPOWNTHREAD',
 2: 'WINEVENT_SKIPOWNPROCESS',
 4: 'WINEVENT_INCONTEXT'}

EVENT_ID_ENUM

Value:

{1: 'EVENT_MIN',
 2: 'EVENT_SYSTEM_ALERT',
 3: 'EVENT_SYSTEM_FOREGROUND',
 4: 'EVENT_SYSTEM_MENUSTART',
 5: 'EVENT_SYSTEM_MENUEND',
 6: 'EVENT_SYSTEM_MENUPOPUPSTART',
 7: 'EVENT_SYSTEM_MENUPOPUPEND',
 8: 'EVENT_SYSTEM_CAPTURESTART',
...

HANDLE_TYPE_ENUM

Value:

{0: 'TYPE_FREE',
 1: 'TYPE_WINDOW',
 2: 'TYPE_MENU',
 3: 'TYPE_CURSOR',
 4: 'TYPE_SETWINDOWPOS',
 5: 'TYPE_HOOK',
 6: 'TYPE_CLIPDATA',
 7: 'TYPE_CALLPROC',
...

HANDLE_TYPE_ENUM_SEVEN

Value:

{0: 'TYPE_FREE',
 1: 'TYPE_WINDOW',
 2: 'TYPE_MENU',
 3: 'TYPE_CURSOR',
 4: 'TYPE_SETWINDOWPOS',
 5: 'TYPE_HOOK',
 6: 'TYPE_CLIPDATA',
 7: 'TYPE_CALLPROC',
...

CLIPBOARD_FORMAT_ENUM

Value:

{1: 'CF_TEXT',
 2: 'CF_BITMAP',
 3: 'CF_METAFILEPICT',
 4: 'CF_SYLK',
 5: 'CF_DIF',
 6: 'CF_TIFF',
 7: 'CF_OEMTEXT',
 8: 'CF_DIB',
...

TIMER_FLAGS

Value:

{'TMRF_INIT': 3,
 'TMRF_ONESHOT': 4,
 'TMRF_READY': 0,
 'TMRF_RIT': 2,
 'TMRF_SYSTEM': 1,
 'TMRF_TIFROMWND': 6,
 'TMRF_WAITING': 5}