HEX
Server: LiteSpeed
System: Linux us-phx-web1284.main-hosting.eu 4.18.0-553.109.1.lve.el8.x86_64 #1 SMP Thu Mar 5 20:23:46 UTC 2026 x86_64
User: u300739242 (300739242)
PHP: 8.2.30
Disabled: system, shell_exec, passthru, mysql_list_dbs, ini_alter, dl, symlink, link, chgrp, leak, popen, apache_child_terminate, virtual, mb_send_mail
Upload Files
File: //opt/alt/python311/lib/python3.11/site-packages/shellingham/__pycache__/nt.cpython-311.pyc
�

�;f���|�ddlZddlZddlZddlmZmZmZmZmZm	Z	m
Z
mZmZddl
mZed��jZdZdZdZdZejjZdd	�Zd
�ZGd�dej��Zegej_eej_eegej_eej_ee��ej_eej e��gej!_eej!_ee��ej!_eej e��gej"_eej"_ee��ej"_gej#_eej#_eeegej$_eej$_ee��ej$_eee	egej%_eej%_ee��ej%_ej&d
���Z'd�Z(d�Z)dd�Z*dS)�N)	�BOOL�CHAR�DWORD�HANDLE�LONG�LPWSTR�MAX_PATH�PDWORD�ULONG)�SHELL_NAMES�����z�ic����fd�}|S)Nc�:��|�krtj���|S�N)�ctypes�WinError)�ret�func�args�	error_vals   ��A/opt/alt/python311/lib/python3.11/site-packages/shellingham/nt.py�checkz_check_handle.<locals>.checks!����)����/�#�#�#��
��)rrs` r�
_check_handlers#��������
�Lrc����fd�}|S)Nc�j��|rdStj��}|�krdStj|���)NTF)r�GetLastErrorr)rrr�code�expecteds    �rrz_check_expected.<locals>.check(s>����	��4��"�$�$���8����5��o�d�#�#�#rr)r#rs` r�_check_expectedr$'s#���$�$�$�$�$��Lrc�p�eZdZdefdefdefdeje��fdefdefdefdefd	efd
ee	zff
Z
dS)�ProcessEntry32�dwSize�cntUsage�
th32ProcessID�th32DefaultHeapID�th32ModuleID�
cntThreads�th32ParentProcessID�pcPriClassBase�dwFlags�	szExeFileN)�__name__�
__module__�__qualname__rr�POINTERrrrr	�_fields_rrrr&r&3su������	�5��	�U��	�%� �	�n�f�n�U�3�3�4�	���	�u��	��&�	�4� �	�E��	�d�X�o�&��H�H�Hrr&c/�K�||i|��}	|V�t�|��dS#t�|��wxYwr)�kernel32�CloseHandle)�fr�kwargs�handles    r�_handler<gs\����
�Q��
��
�
�F�%��������V�$�$�$�$�$�����V�$�$�$�$���s	�,�Ac#�JK�tj}t|td��5}t	��}tj|��|_t�||��}|r!|V�t�	||��}|�!ddd��dS#1swxYwYdS)Nr)
r7�CreateToolhelp32Snapshotr<�TH32CS_SNAPPROCESSr&r�sizeofr'�Process32First�
Process32Next)r9�snap�entryrs    r�_iter_processesrEps������)�A�	��&��	*�	*�6�d�� � ���}�U�+�+����%�%�d�E�2�2���	6��K�K�K��(�(��u�5�5�C��	6�	6�6�6�6�6�6�6�6�6�6�6�6����6�6�6�6�6�6s�A&B�B�Bc���tt��}	tjd|j��}t
�|d||��r|jS|xjdzc_�O)NT�rr)rr	r�create_unicode_buffer�valuer7�QueryFullProcessImageNameW)�proch�size�	path_buffs   r�_get_full_pathrN{s^����?�?�D���0��T�Z�@�@�	��.�.�u�a��D�I�I�	#��?�"��
�
�a��
�
�	r�
c�,�d�t��D��}|ptj��}td|dz��D]�}	||\}}n#t$rYn�wxYwt|t��r|�dd��}|�d��d�	��}|tvr|}��t}ttj|d|��5}|t|��fcddd��cS#1swxYwY��dS)Nc�6�i|]}|j|j|jf��Sr)r)r-r0)�.0�procs  r�
<dictcomp>zget_shell.<locals>.<dictcomp>�s7������	
��T�5�t�~�F���rr��mbcs�replace�.)rE�os�getpid�range�KeyError�
isinstance�bytes�decode�
rpartition�lowerr�!PROCESS_QUERY_LIMITED_INFORMATIONr<r7�OpenProcessrN)	�pid�	max_depth�proc_map�_�ppid�
executable�name�keyrKs	         r�	get_shellrl�s�����#�%�%����H��
�����C�
�1�i�!�m�
$�
$�1�1��	�'��}��D�*�*���	�	�	��E�E�	�����j�%�(�(�	>�#�*�*�6�9�=�=�J��$�$�S�)�)�!�,�2�2�4�4���{�"�"��C��/��
�X�)�3��3�
7�
7�	1�5��.��/�/�0�	1�	1�	1�	1�	1�	1�	1�	1�	1�	1�	1�	1�	1�	1����	1�	1�	1�	1�	1��4s$�A�
A�A�(D�D	�D	)r)NrO)+�
contextlibrrY�ctypes.wintypesrrrrrrr	r
r�shellingham._corerrI�INVALID_HANDLE_VALUE�ERROR_NO_MORE_FILES�ERROR_INSUFFICIENT_BUFFERr?rb�windllr7rr$�	Structurer&r8�argtypes�restyper>�errcheckr4rArB�GetCurrentProcessIdrcrJ�contextmanagerr<rErNrlrrr�<module>rzs�������
�
�
�
�	�	�	�	�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�
�*�)�)�)�)�)��v�b�z�z�'��������$*�!��=�!������	�	�	������V�%����"(�����#����.3�U�^��!�*�,2��!�)�-:�]��.�.��!�*�%+�N�F�N�>�,J�,J�#K��� �"&����#2�?��$�$��� �$*�>�6�>�.�+I�+I�"J����!%����"1�/��#�#����)+���%�',���$�!&��e� 4����%���� -�
��!�!����17��v�v�/N��#�,�.2��#�+�/>���0�0��#�,�
��%�%���%�6�6�6���������r