o
    j!                    @   s  d dl Z d dlmZmZmZ d dlmZmZmZm	Z	m
Z
mZmZmZmZmZmZmZmZmZmZ d dlmZ d dlmZ d dlmZ G dd deZG d	d
 d
eZG dd dZG dd deZG dd dZG dd deZG dd dZ G dd deZ!G dd dZ"G dd deZ#G dd dZ$G dd deZ%G dd  d Z&G d!d" d"eZ'G d#d$ d$Z(G d%d& d&eZ)G d'd( d(Z*G d)d* d*eZ+G d+d, d,Z,G d-d. d.eZ-G d/d0 d0Z.G d1d2 d2Z/G d3d4 d4eZ0G d5d6 d6Z1G d7d8 d8eZ2G d9d: d:Z3G d;d< d<eZ4G d=d> d>Z5G d?d@ d@Z6G dAdB dBZ7G dCdD dDeZ8G dEdF dFZ9G dGdH dHeZ:G dIdJ dJZ;G dKdL dLeZ<G dMdN dNZ=G dOdP dPeZ>G dQdR dRZ?G dSdT dTeZ@G dUdV dVZAG dWdX dXeZBG dYdZ dZZCG d[d\ d\eZDG d]d^ d^ZEG d_d` d`eZFG dadb dbZGG dcdd ddeZHG dedf dfZIG dgdh dheZJG didj djZKG dkdl dleZLG dmdn dnZMG dodp dpeZNG dqdr drZOG dsdt dteZPG dudv dvZQG dwdx dxeZRG dydz dzZSG d{d| d|ZTdS )}    N)KatzSystemArchitectureWindowsMinBuildWindowsBuild)POINTERPVOIDULONG
LIST_ENTRYDWORDLSA_UNICODE_STRINGPKERB_EXTERNAL_NAMEKIWI_GENERIC_PRIMARY_CREDENTIALLUIDPLSAISO_DATA_BLOBULONG64FILETIMEPCWSTRSIZE_TBOOL)PackageTemplate)hexdump)loggerc                       (   e Zd Z fddZedd Z  ZS )KerberosTemplatec                    s<   t  d| d | _d | _d | _d | _d | _d | _d | _d S )NKerberos)	super__init__	signaturefirst_entry_offsetkerberos_session_structkerberos_ticket_structkeys_list_structhash_password_structcsp_info_struct)selfsysinfo	__class__ /root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/pypykatz/alsadecryptor/packages/kerberos/templates.pyr      s   
zKerberosTemplate.__init__c                 C   s  t | }| jtjkrtjj| j  krtjjk r3n nd|_	d|_
t|_t|_t|_t|_t|_ntjj| j  krBtjjk r[n nd|_	d|_
t|_t|_t|_t|_t|_ntjj| j  krjtjjk rn nd|_	d|_
t|_t|_t|_t|_t|_ntjj| j  krtjjk rn nd|_	d|_
t|_t|_t|_t|_t|_nmtjj| j  krtj jk rn nd|_	d|_
t|_t|_t|_t|_t!|_nEtj j| j  krtj"jk rn nd|_	d|_
t#|_t|_t|_t|_t$|_ntj"j| j  krtj%jk r%n nd|_	d|_
t#|_t&|_t|_t|_t$|_ntj%j| j  kr6tj'jk rOn nd|_	d|_
t(|_t)|_t|_t*|_t$|_ntj'j| j  kr`tj+jk ryn nd|_	d|_
t(|_t,|_t|_t*|_t$|_n| jtj+jkrd|_	d|_
t-|_t,|_t|_t*|_t$|_nt.d| j| jf | jtj/krtjj| j  krtjjk rn nd|_	d|_
t|_t|_t|_t|_t|_nEtjj| j  krtjjk rn nd|_	d|_
t|_t|_t|_t|_t|_ntjj| j  krtjjk r&n nd|_	d	|_
t|_t|_t|_t|_t|_ntjj| j  kr7tjjk rOn nd|_	d	|_
t|_t|_t|_t|_t|_ntjj| j  kr`tj0jk rxn nd
|_	d|_
t|_t|_t|_t|_t!|_ntj0j| j  krtj jk rn nd|_	d|_
t|_t|_t|_t|_t!|_nwtj j| j  krtj"jk rn nd|_	d|_
t1|_t|_t|_t|_t$|_nNtj"j| j  krtj2jk rn nd|_	d|_
t3|_t)|_t|_t*|_t$|_n%tj2j| jkrd|_	d|_
t3|_t)|_t|_t*|_t$|_nt.d| j t45d|  t45d|j	  t45d|j
  t45d|j  t45d|j  t45d|j  t45d|j  t45d|j  |S )Ns   H;s   HH   zECould not identify template! Architecture: %s sysinfo.buildnumber: %ss   }9Pis   SPVis   W8Phis   V0PWis   V0PSzUnknown architecture! %sztemplate: %szsignature: %szfirst_entry_offset: %szkerberos_session_struct: %szkerberos_ticket_struct: %szkeys_list_struct: %szhash_password_struct: %szcsp_info_struct: %s)6r   architecturer   X64r   WIN_XPvaluebuildnumberWIN_2K3r   r   KIWI_KERBEROS_LOGON_SESSION_51r    KIWI_KERBEROS_INTERNAL_TICKET_51r   KIWI_KERBEROS_KEYS_LIST_5r    KERB_HASHPASSWORD_5r!   KIWI_KERBEROS_CSP_INFOS_5r"   	WIN_VISTAKIWI_KERBEROS_LOGON_SESSION KIWI_KERBEROS_INTERNAL_TICKET_52WIN_7 KIWI_KERBEROS_INTERNAL_TICKET_60KIWI_KERBEROS_KEYS_LIST_6KERB_HASHPASSWORD_6KIWI_KERBEROS_CSP_INFOS_60WIN_8KIWI_KERBEROS_INTERNAL_TICKET_6r   WIN_10_1507KIWI_KERBEROS_CSP_INFOS_62WIN_10_1511KIWI_KERBEROS_LOGON_SESSION_10KIWI_KERBEROS_CSP_INFOS_10WIN_10_1607 KIWI_KERBEROS_INTERNAL_TICKET_10WIN_11_2022#KIWI_KERBEROS_LOGON_SESSION_10_1607%KIWI_KERBEROS_INTERNAL_TICKET_10_1607KERB_HASHPASSWORD_6_1607WIN_11_24H2 KIWI_KERBEROS_INTERNAL_TICKET_11 KIWI_KERBEROS_LOGON_SESSION_24H2	ExceptionX86WIN_BLUE"KIWI_KERBEROS_LOGON_SESSION_10_X86WIN_10_1903'KIWI_KERBEROS_LOGON_SESSION_10_1607_X86r   debug)r$   templater'   r'   r(   get_template   sN  "
"
"
"
"
"
&
&
&

&
&
&&&&&&zKerberosTemplate.get_template)__name__
__module____qualname__r   staticmethodrV   __classcell__r'   r'   r%   r(   r      s    
r   c                       r   )PKERB_SMARTCARD_CSP_INFO_5c                       t    d S Nr   r   r#   r%   r'   r(   r         z#PKERB_SMARTCARD_CSP_INFO_5.__init__c                    ,   t  }|  |_|  I d H |_t|_|S r^   )r\   telllocation	read_uintr.   KERB_SMARTCARD_CSP_INFO_5	finaltypereaderpr'   r'   r(   load      
zPKERB_SMARTCARD_CSP_INFO_5.loadrW   rX   rY   r   rZ   rk   r[   r'   r'   r%   r(   r\          r\   c                   @   0   e Zd Zdd Zedd Zdd Zdd Zd	S )
rf   c                 C   (   d | _ d | _d | _d | _d | _d | _d S r^   )ContextInformationnCardNameOffsetnReaderNameOffsetnContainerNameOffsetnCSPNameOffsetbBufferr`   r'   r'   r(   r      s   
z"KERB_SMARTCARD_CSP_INFO_5.__init__c                    s   t  }|  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_	|  | }| 
|| d I d H }t||_|S )N   )rf   rc   r   	loadvaluerq   r   rr   rs   rt   ru   readioBytesIOrv   ri   sizeresposdiffdatar'   r'   r(   rk      s   zKERB_SMARTCARD_CSP_INFO_5.loadc                 C      |  }||d d}d}d}|dk r5|dkrn|d}|dkr'|d7 }nd}||7 }|d7 }|dk s||d |ddd	S 
Nr                    z	utf-16-le  rc   seekry   decodereplacer#   buffertposr   r   inccr'   r'   r(   read_wcharnull  "   


z(KERB_SMARTCARD_CSP_INFO_5.read_wcharnullc                 C   X   i }|  | j| j|d< |  | j| j|d< |  | j| j|d< |  | j| j|d< |S NCardName
ReaderNameContainerNameCSPNamer   rv   rr   rs   rt   ru   r#   tr'   r'   r(   	get_infos     z#KERB_SMARTCARD_CSP_INFO_5.get_infosNrW   rX   rY   r   rZ   rk   r   r   r'   r'   r'   r(   rf      s    

rf   c                       r   )PKERB_SMARTCARD_CSP_INFOc                    r]   r^   r_   r`   r%   r'   r(   r   )  ra   z!PKERB_SMARTCARD_CSP_INFO.__init__c                    rb   r^   )r   rc   rd   re   r.   KERB_SMARTCARD_CSP_INFOrg   rh   r'   r'   r(   rk   ,  rl   zPKERB_SMARTCARD_CSP_INFO.loadrm   r'   r'   r%   r(   r   (  rn   r   c                   @   ro   )
r   c                 C   @   d | _ d | _d | _d | _d | _d | _d | _d | _d | _d | _	d S r^   )
MessageTyperq   SpaceHolderForWow64flagsKeySpecrr   rs   rt   ru   rv   r`   r'   r'   r(   r   6     
z KERB_SMARTCARD_CSP_INFO.__init__c                    s  t  }|  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_	t| I d H |_
t| I d H |_| jd9  _t| I d H |_| jd9  _t| I d H |_| jd9  _t| I d H |_| jd9  _|  | }| || d I d H }t||_|S )N   rw   )r   rc   r	   rx   r   r   rq   r   r   r   r   r   rr   rs   rt   ru   ry   rz   r{   rv   r|   r'   r'   r(   rk   B  s(   zKERB_SMARTCARD_CSP_INFO.loadc                 C   r   r   r   r   r'   r'   r(   r   Y  r   z&KERB_SMARTCARD_CSP_INFO.read_wcharnullc                 C   r   r   r   r   r'   r'   r(   r   l  r   z!KERB_SMARTCARD_CSP_INFO.get_infosNr   r'   r'   r'   r(   r   5  s    
r   c                       r   )PKIWI_KERBEROS_CSP_INFOS_5c                    r]   r^   r_   r`   r%   r'   r(   r   v  ra   z#PKIWI_KERBEROS_CSP_INFOS_5.__init__c                    rb   r^   )r   rc   rd   re   r.   r5   rg   rh   r'   r'   r(   rk   y  rl   zPKIWI_KERBEROS_CSP_INFOS_5.loadrm   r'   r'   r%   r(   r   u  rn   r   c                   @       e Zd Zdd Zedd ZdS )r5   c                 C   s4   d | _ d | _d | _d | _d | _d | _d | _d | _d S r^   )PinCodeunk0unk1CertificateInfosunkDataFlagsCspDataLengthCspDatar`   r'   r'   r(   r        
z"KIWI_KERBEROS_CSP_INFOS_5.__init__c                    s   t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	
| I d H |_t	
| I d H |_tj| |jdI d H |_|S N)r}   )r5   r
   rk   r   r   r   r   r   r   r	   rx   r   r   rf   r   ri   r~   r'   r'   r(   rk     s   zKIWI_KERBEROS_CSP_INFOS_5.loadNrW   rX   rY   r   rZ   rk   r'   r'   r'   r(   r5     s    
r5   c                       r   )PKIWI_KERBEROS_CSP_INFOS_60c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z$PKIWI_KERBEROS_CSP_INFOS_60.__init__c                    rb   r^   )r   rc   rd   re   r.   r=   rg   rh   r'   r'   r(   rk     rl   z PKIWI_KERBEROS_CSP_INFOS_60.loadrm   r'   r'   r%   r(   r     rn   r   c                   @   r   )r=   c                 C   s:   d | _ d | _d | _d | _d | _d | _d | _d | _d | _d S r^   )	r   r   r   r   r   r   unkFlagsr   r   r`   r'   r'   r(   r     s   
z#KIWI_KERBEROS_CSP_INFOS_60.__init__c                    s   t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_	t
| I d H |_t
| I d H |_t
| I d H |_tj| |jdI d H |_|S r   )r5   r
   rk   r   r   rx   r   r   r   r   r	   r   r   r   r   r   r   r'   r'   r(   rk     s   zKIWI_KERBEROS_CSP_INFOS_60.loadNr   r'   r'   r'   r(   r=     s    r=   c                       r   )PKIWI_KERBEROS_CSP_INFOS_62c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z$PKIWI_KERBEROS_CSP_INFOS_62.__init__c                    rb   r^   )r   rc   rd   re   r.   rA   rg   rh   r'   r'   r(   rk     rl   z PKIWI_KERBEROS_CSP_INFOS_62.loadrm   r'   r'   r%   r(   r     rn   r   c                   @   r   )rA   c                 C   r   r^   )
r   r   r   r   unk2r   r   r   r   r   r`   r'   r'   r(   r     r   z#KIWI_KERBEROS_CSP_INFOS_62.__init__c                    s   t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_	t| I d H |_
t| I d H |_t| I d H |_t| I d H |_tj| |jdI d H |_|S r   )rA   r
   rk   r   r   rx   r   r   r   r   r   r	   r   r   r   r   r   r   r'   r'   r(   rk     s   zKIWI_KERBEROS_CSP_INFOS_62.loadNr   r'   r'   r'   r(   rA     s    rA   c                       r   )PKIWI_KERBEROS_CSP_INFOS_10c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z$PKIWI_KERBEROS_CSP_INFOS_10.__init__c                    rb   r^   )r   rc   rd   re   r.   rD   rg   rh   r'   r'   r(   rk     rl   z PKIWI_KERBEROS_CSP_INFOS_10.loadrm   r'   r'   r%   r(   r     rn   r   c                   @   r   )rD   c                 C   sF   d | _ d | _d | _d | _d | _d | _d | _d | _d | _d | _	d | _
d S r^   )r   r   r   r   r   r   r   r   unk3r   r   r`   r'   r'   r(   r     s   
z#KIWI_KERBEROS_CSP_INFOS_10.__init__c                    s   t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_	t| I d H |_
t| I d H |_t| I d H |_t| I d H |_t| I d H |_tj| |jdI d H |_|S r   )rD   r
   rk   r   r   rx   r   r   r   r   r   r	   r   r   r   r   r   r   r   r'   r'   r(   rk     s   zKIWI_KERBEROS_CSP_INFOS_10.loadNr   r'   r'   r'   r(   rD     s    rD   c                       r   )PKIWI_KERBEROS_LOGON_SESSION_51c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z(PKIWI_KERBEROS_LOGON_SESSION_51.__init__c                    rb   r^   )r   rc   rd   re   r.   r1   rg   rh   r'   r'   r(   rk     rl   z$PKIWI_KERBEROS_LOGON_SESSION_51.loadrm   r'   r'   r%   r(   r     rn   r   c                   @   r   )r1   c                 C      d | _ d | _d | _d | _d | _d | _d | _d | _d | _d | _	d | _
d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d S r^   ) 
UsageCountr   r   r   r   unk4unk5unk6unk7LocallyUniqueIdentifierunk8unk9unk10unk11unk12unk13unk14credentialsunk15unk16unk17unk18unk19unk20unk21unk22pKeyListunk24	Tickets_1	Tickets_2	Tickets_3SmartcardInfosr`   r'   r'   r(   r   "  s@   
z'KIWI_KERBEROS_LOGON_SESSION_51.__init__c                    s\  t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_	t| I d H |_
t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_| dI d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_ t| I d H |_!t| I d H |_"t| I d H |_#t| I d H |_$t| I d H |_%t| I d H |_&t| I d H |_'t| I d H |_(t| I d H |_)|S N   )*r1   r   rx   r   r   rk   r   r   r   r   r   r   r   r   r   r   r   alignr   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r'   r'   r(   rk   E  sH   z#KIWI_KERBEROS_LOGON_SESSION_51.loadNr   r'   r'   r'   r(   r1   !      #r1   c                       r   )PKIWI_KERBEROS_LOGON_SESSIONc                    r]   r^   r_   r`   r%   r'   r(   r   o  ra   z%PKIWI_KERBEROS_LOGON_SESSION.__init__c                    rb   r^   )r   rc   rd   re   r.   r7   rg   rh   r'   r'   r(   rk   r  rl   z!PKIWI_KERBEROS_LOGON_SESSION.loadrm   r'   r'   r%   r(   r   n  rn   r   c                   @   r   )r7   c                 C      d | _ d | _d | _d | _d | _d | _d | _d | _d | _d | _	d | _
d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _ d | _!d S r^   )"r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   unk23r   r   r   unk25r   unk26r   r`   r'   r'   r(   r   {  sD   
z$KIWI_KERBEROS_LOGON_SESSION.__init__c                    s  t  }t| I d H |_|  I d H  t| I d H |_t| I d H |_	t| I d H |_
t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_| dI d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_ t| I d H |_!t| I d H |_"t| I d H |_#t| I d H |_$|  I d H  t| I d H |_%t| I d H |_&t| I d H |_'t| I d H |_(t| I d H |_)t| I d H |_*t| I d H |_+|S r   ),r7   r   rx   r   r   r   rk   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r'   r'   r(   rk     sP   z KIWI_KERBEROS_LOGON_SESSION.loadNr   r'   r'   r'   r(   r7   z  s    %r7   c                       r   )$PKIWI_KERBEROS_10_PRIMARY_CREDENTIALc                    r]   r^   r_   r`   r%   r'   r(   r     ra   z-PKIWI_KERBEROS_10_PRIMARY_CREDENTIAL.__init__c                    rb   r^   )r   rc   rd   re   r.   #KIWI_KERBEROS_10_PRIMARY_CREDENTIALrg   rh   r'   r'   r(   rk     rl   z)PKIWI_KERBEROS_10_PRIMARY_CREDENTIAL.loadrm   r'   r'   r%   r(   r     rn   r   c                   @   r   )r   c                 C      d | _ d | _d | _d | _d S r^   )UserNameDomainer   Passwordr`   r'   r'   r(   r        
z,KIWI_KERBEROS_10_PRIMARY_CREDENTIAL.__init__c                    sT   t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_|S r^   )	r   r
   rk   r   r   r   rx   r   r   r   r'   r'   r(   rk        z(KIWI_KERBEROS_10_PRIMARY_CREDENTIAL.loadNr   r'   r'   r'   r(   r         r   c                       r   )PKIWI_KERBEROS_LOGON_SESSION_10c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z(PKIWI_KERBEROS_LOGON_SESSION_10.__init__c                    rb   r^   )r   rc   rd   re   r.   rC   rg   rh   r'   r'   r(   rk     rl   z$PKIWI_KERBEROS_LOGON_SESSION_10.loadrm   r'   r'   r%   r(   r     rn   r   c                   @   r   )rQ   c                 C      d | _ d | _d | _d | _d | _d | _d | _d | _d | _d | _	d | _
d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _ d | _!d | _"d | _#d | _$d S r^   %r   r   r   unk1br   r   r   r   r   r   r   unk8br   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   unk27r   unk28r   unk29r   r`   r'   r'   r(   r     J   
z+KIWI_KERBEROS_LOGON_SESSION_10_X86.__init__c                    s  t  }t| I d H |_|  I d H  t| I d H |_t| I d H |_	t| I d H |_
|  I d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_|  I d H  t| I d H |_t| I d H |_t| I d H |_|  I d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_| dI d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_| dI d H  t| I d H |_t| I d H |_ t| I d H |_!t| I d H |_"t| I d H |_#t| I d H |_$t| I d H |_%t| I d H |_&t| I d H |_'|  I d H  t| I d H |_(t| I d H |_)t| I d H |_*t| I d H |_+t| I d H |_,t| I d H |_-t| I d H |_.|S r   )/rQ   r   rx   r   r   r   rk   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r'   r'   r(   rk     s^   z'KIWI_KERBEROS_LOGON_SESSION_10_X86.loadNr   r'   r'   r'   r(   rQ         (rQ   c                   @   r   )rC   c                 C   r   r^   r   r`   r'   r'   r(   r   U  sJ   
z'KIWI_KERBEROS_LOGON_SESSION_10.__init__c                    s  t  }t| I d H |_|  I d H  t| I d H |_t| I d H |_	t| I d H |_
|  I d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_|  I d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_ t| I d H |_!t| I d H |_"t| I d H |_#t| I d H |_$t| I d H |_%t| I d H |_&t| I d H |_'t| I d H |_(t| I d H |_)t| I d H |_*t| I d H |_+t| I d H |_,t| I d H |_-t| I d H |_.|S r^   )/rC   r   rx   r   r   r   rk   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r'   r'   r(   rk   }  sV   z#KIWI_KERBEROS_LOGON_SESSION_10.loadNr   r'   r'   r'   r(   rC   T  r   rC   c                       r   )-PKIWI_KERBEROS_10_PRIMARY_CREDENTIAL_1607_ISOc                    r]   r^   r_   r`   r%   r'   r(   r     ra   z6PKIWI_KERBEROS_10_PRIMARY_CREDENTIAL_1607_ISO.__init__c                    rb   r^   )r   rc   rd   re   r.   ,KIWI_KERBEROS_10_PRIMARY_CREDENTIAL_1607_ISOrg   rh   r'   r'   r(   rk     rl   z2PKIWI_KERBEROS_10_PRIMARY_CREDENTIAL_1607_ISO.loadrm   r'   r'   r%   r(   r     rn   r   c                   @   r   )r   c                 C      d | _ d | _d S r^   )
StructSizeisoBlobr`   r'   r'   r(   r        
z5KIWI_KERBEROS_10_PRIMARY_CREDENTIAL_1607_ISO.__init__c                    >   t  }t| I d H |_|  I d H  t| I d H |_|S r^   )r   r	   rx   r   r   r   rk   r   r   r'   r'   r(   rk        z1KIWI_KERBEROS_10_PRIMARY_CREDENTIAL_1607_ISO.loadNr   r'   r'   r'   r(   r         r   c                       r   ))PKIWI_KERBEROS_10_PRIMARY_CREDENTIAL_1607c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z2PKIWI_KERBEROS_10_PRIMARY_CREDENTIAL_1607.__init__c                    rb   r^   )r  rc   rd   re   r.   (KIWI_KERBEROS_10_PRIMARY_CREDENTIAL_1607rg   rh   r'   r'   r(   rk     rl   z.PKIWI_KERBEROS_10_PRIMARY_CREDENTIAL_1607.loadrm   r'   r'   r%   r(   r    rn   r  c                   @   r   )r  c                 C   rp   r^   )r   r   unkFunctiontyper   IsoPasswordr`   r'   r'   r(   r     s   
z1KIWI_KERBEROS_10_PRIMARY_CREDENTIAL_1607.__init__c                    s   t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_	| 
 I d H  t| I d H |_t| I d H |_|S r^   )r  r
   rk   r   r   r   rx   r  r	   r  r   r   r   r  r   r'   r'   r(   rk     s   z-KIWI_KERBEROS_10_PRIMARY_CREDENTIAL_1607.loadNr   r'   r'   r'   r(   r    s    r  c                       r   )$PKIWI_KERBEROS_LOGON_SESSION_10_1607c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z-PKIWI_KERBEROS_LOGON_SESSION_10_1607.__init__c                    rb   r^   )r  rc   rd   re   r.   rH   rg   rh   r'   r'   r(   rk     rl   z)PKIWI_KERBEROS_LOGON_SESSION_10_1607.loadrm   r'   r'   r%   r(   r    rn   r  c                   @   r   )rH   c                 C      d | _ d | _d | _d | _d | _d | _d | _d | _d | _d | _	d | _
d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _ d | _!d | _"d | _#d S r^   )$r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r`   r'   r'   r(   r     H   
z,KIWI_KERBEROS_LOGON_SESSION_10_1607.__init__c                    s  t  }t| I d H |_|  I d H  t| I d H |_t| I d H |_	t| I d H |_
|  I d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_|  I d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_| dI d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_ t| I d H |_!t| I d H |_"t| I d H |_#t| I d H |_$|  I d H  t| I d H |_%t| I d H |_&t| I d H |_'t| I d H |_(t| I d H |_)t| I d H |_*t| I d H |_+t| I d H |_,t| I d H |_-|S r   ).rH   r   rx   r   r   r   rk   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r  r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r'   r'   r(   rk     sX   z(KIWI_KERBEROS_LOGON_SESSION_10_1607.loadNr   r'   r'   r'   r(   rH         &rH   c                   @   r   )rM   c                 C   r   r^   )"r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r`   r'   r'   r(   r   M  sD   
z)KIWI_KERBEROS_LOGON_SESSION_24H2.__init__c                    s  t  }t| I d H |_|  I d H  t| I d H |_t| I d H |_	|  I d H  t
| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t
| I d H |_t| I d H |_t| I d H |_|  I d H  t
| I d H |_t| I d H |_t| I d H |_| dI d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_ t| I d H |_!t| I d H |_"|  I d H  t| I d H |_#t| I d H |_$t| I d H |_%t
| I d H |_&t| I d H |_'t
| I d H |_(t| I d H |_)t
| I d H |_*t| I d H |_+|S r   ),rM   r   rx   r   r   r   rk   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r  r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r'   r'   r(   rk   q  sT   z%KIWI_KERBEROS_LOGON_SESSION_24H2.loadNr   r'   r'   r'   r(   rM   L      $rM   c                   @   r   )rS   c                 C   r   r^   )%r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   unkAlignr   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r`   r'   r'   r(   r     r   z0KIWI_KERBEROS_LOGON_SESSION_10_1607_X86.__init__c                    s  t  }t| I d H |_|  I d H  t| I d H |_t| I d H |_	t| I d H |_
|  I d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_|  I d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_ t| I d H |_!t| I d H |_"t| I d H |_#t| I d H |_$t| I d H |_%|  I d H  t| I d H |_&t| I d H |_'t| I d H |_(t| I d H |_)t| I d H |_*t| I d H |_+t| I d H |_,t| I d H |_-t| I d H |_.|S r^   )/rS   r   rx   r   r   r   rk   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r  r  r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r   r'   r'   r(   rk     sX   z,KIWI_KERBEROS_LOGON_SESSION_10_1607_X86.loadNr   r'   r'   r'   r(   rS     r   rS   c                       r   )!PKIWI_KERBEROS_INTERNAL_TICKET_51c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z*PKIWI_KERBEROS_INTERNAL_TICKET_51.__init__c                    rb   r^   )r  rc   rd   re   r.   r2   rg   rh   r'   r'   r(   rk     rl   z&PKIWI_KERBEROS_INTERNAL_TICKET_51.loadrm   r'   r'   r%   r(   r    rn   r  c                   @   r   )r2   c                 C      d | _ d | _d | _d | _d | _d | _d | _d | _d | _d | _	d | _
d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _ d S r^   )!FlinkBlinkr   r   ServiceName
TargetName
DomainNameTargetDomainNameDescriptionAltTargetDomainName
ClientNameTicketFlagsr   KeyTypeKeyr   r   r   r   r   r   	StartTimeEndTime
RenewUntilr   r   domainr   strangeNamesr   TicketEncType
TicketKvnoTicketr`   r'   r'   r(   r     sB   
z)KIWI_KERBEROS_INTERNAL_TICKET_51.__init__c                    sn  t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_
t	| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_| dI d H }tj|ddd|_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_ t!| I d H |_"t!| I d H |_#t!| I d H |_$t| I d H |_%t| I d H |_&t'| I d H |_(t| I d H |_)t| I d H |_*t| I d H |_+t| I d H |_,t| I d H |_-t| I d H |_.|S Nrw   bigF	byteordersigned)/r2   r  rk   r  r  r   rx   r   r   r   r  r  r
   r  r  r  r  r  ry   int
from_bytesr  r   r   r  KIWI_KERBEROS_BUFFERr  r   r   r   r   r   r   r   r  r  r  r   r   r   r  r   r   r   r!  r"  r#  ri   r~   xr'   r'   r(   rk   +  sJ   z%KIWI_KERBEROS_INTERNAL_TICKET_51.loadNr   r'   r'   r'   r(   r2     r   r2   c                       r   )!PKIWI_KERBEROS_INTERNAL_TICKET_52c                    r]   r^   r_   r`   r%   r'   r(   r   S  ra   z*PKIWI_KERBEROS_INTERNAL_TICKET_52.__init__c                    rb   r^   )r.  rc   rd   re   r.   r8   rg   rh   r'   r'   r(   rk   V  rl   z&PKIWI_KERBEROS_INTERNAL_TICKET_52.loadrm   r'   r'   r%   r(   r.  R  rn   r.  c                   @   r   )r8   c                 C      d | _ d | _d | _d | _d | _d | _d | _d | _d | _d | _	d | _
d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d S r^   r  r  r   r   r  r  r  r  r  r  r  name0r  r   r  r  r   r   r   r  r  r  r   r   r  r   r   r   r!  r"  r#  r`   r'   r'   r(   r   `  >   
z)KIWI_KERBEROS_INTERNAL_TICKET_52.__init__c                    sJ  t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_
t	| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_t| I d H |_| dI d H }tj|ddd|_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_ t| I d H |_!t| I d H |_"t| I d H |_#t| I d H |_$t%| I d H |_&t| I d H |_'t| I d H |_(t| I d H |_)t| I d H |_*t| I d H |_+t| I d H |_,|S r$  )-r8   r.  rk   r  r  r   rx   r   r   r   r  r  r
   r  r  r  r  r  r1  ry   r)  r*  r  r   r   r  r+  r  r   r   r   r   r  r  r  r   r   r   r  r   r   r   r!  r"  r#  r,  r'   r'   r(   rk     F   z%KIWI_KERBEROS_INTERNAL_TICKET_52.loadNr   r'   r'   r'   r(   r8   _      "r8   c                       r   )!PKIWI_KERBEROS_INTERNAL_TICKET_60c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z*PKIWI_KERBEROS_INTERNAL_TICKET_60.__init__c                    rb   r^   )r5  rc   rd   re   r.   r:   rg   rh   r'   r'   r(   rk     rl   z&PKIWI_KERBEROS_INTERNAL_TICKET_60.loadrm   r'   r'   r%   r(   r5    rn   r5  c                   @   r   )r:   c                 C   r/  r^   r0  r`   r'   r'   r(   r     r2  z)KIWI_KERBEROS_INTERNAL_TICKET_60.__init__c                    sJ  t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_
t	| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_t| I d H |_| dI d H }tj|ddd|_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_ t| I d H |_!t| I d H |_"t| I d H |_#t| I d H |_$t%| I d H |_&t| I d H |_'t| I d H |_(t| I d H |_)t| I d H |_*t| I d H |_+t| I d H |_,|S r$  )-r:   r5  rk   r  r  r   rx   r   r   r   r  r  r
   r  r  r  r  r  r1  ry   r)  r*  r  r   r   r  r+  r  r   r   r   r   r  r  r  r   r   r   r  r   r   r   r!  r"  r#  r,  r'   r'   r(   rk     r3  z%KIWI_KERBEROS_INTERNAL_TICKET_60.loadNr   r'   r'   r'   r(   r:     r4  r:   c                       r   ) PKIWI_KERBEROS_INTERNAL_TICKET_6c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z)PKIWI_KERBEROS_INTERNAL_TICKET_6.__init__c                    rb   r^   )r6  rc   rd   re   r.   r?   rg   rh   r'   r'   r(   rk      rl   z%PKIWI_KERBEROS_INTERNAL_TICKET_6.loadrm   r'   r'   r%   r(   r6    rn   r6  c                   @   r   )r?   c                 C   r   r^   ) r  r  r   r   r  r  r  r  r  r  	KDCServerr  r1  r  r   r  r  r   r   r   r  r  r  r   r   r  r   r   r   r!  r"  r#  r`   r'   r'   r(   r   	  s@   
z(KIWI_KERBEROS_INTERNAL_TICKET_6.__init__c                    s  t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_
t	| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_t| I d H |_| dI d H }tj|ddd|_t| I d H |_t| I d H |_|  I d H  t| I d H |_t| I d H |_t| I d H |_t| I d H |_ t!| I d H |_"t!| I d H |_#t!| I d H |_$t| I d H |_%t| I d H |_&t'| I d H |_(t| I d H |_)|  I d H  t| I d H |_*t| I d H |_+t| I d H |_,t| I d H |_-|  I d H  t| I d H |_.|S r$  )/r?   r6  rk   r  r  r   rx   r   r   r   r  r  r
   r  r  r  r  r7  r  r1  ry   r)  r*  r  r   r   r  r   r+  r  r   r   r   r   r  r  r  r   r   r   r  r   r   r   r!  r"  r#  r,  r'   r'   r(   rk   +  sN   z$KIWI_KERBEROS_INTERNAL_TICKET_6.loadNr   r'   r'   r'   r(   r?     r4  r?   c                       r   )!PKIWI_KERBEROS_INTERNAL_TICKET_10c                    r]   r^   r_   r`   r%   r'   r(   r   U  ra   z*PKIWI_KERBEROS_INTERNAL_TICKET_10.__init__c                    rb   r^   )r8  rc   rd   re   r.   rF   rg   rh   r'   r'   r(   rk   X  rl   z&PKIWI_KERBEROS_INTERNAL_TICKET_10.loadrm   r'   r'   r%   r(   r8  T  rn   r8  c                   @   r   )rF   c                 C   r  r^   )!r  r  r   r   r  r  r  r  r  r  r7  
unk10586_dr  r1  r  r   r  r  r   r   r   r  r  r  r   r   r  r   r   r   r!  r"  r#  r`   r'   r'   r(   r   a  sB   
z)KIWI_KERBEROS_INTERNAL_TICKET_10.__init__c                    s  t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_
t	| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_t| I d H |_| dI d H }tj|ddd|_t| I d H |_t| I d H |_|  I d H  t| I d H |_t| I d H |_t| I d H |_ t| I d H |_!| dI d H  t"| I d H |_#t"| I d H |_$t"| I d H |_%t| I d H |_&t| I d H |_'t(| I d H |_)t| I d H |_*|  I d H  t| I d H |_+t| I d H |_,t| I d H |_-t| I d H |_.|  I d H  t| I d H |_/d S )Nrw   r%  Fr&  r   )0rF   r8  rk   r  r  r   rx   r   r   r   r  r  r
   r  r  r  r  r7  r9  r  r1  ry   r)  r*  r  r   r   r  r   r+  r  r   r   r   r   r  r  r  r   r   r   r  r   r   r   r!  r"  r#  r,  r'   r'   r(   rk     sP   z%KIWI_KERBEROS_INTERNAL_TICKET_10.loadNr   r'   r'   r'   r(   rF   `  r  rF   c                       r   )!PKIWI_KERBEROS_INTERNAL_TICKET_11c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z*PKIWI_KERBEROS_INTERNAL_TICKET_11.__init__c                    rb   r^   )r:  rc   rd   re   r.   rL   rg   rh   r'   r'   r(   rk     rl   z&PKIWI_KERBEROS_INTERNAL_TICKET_11.loadrm   r'   r'   r%   r(   r:    rn   r:  c                   @   r   )rL   c                 C   r	  r^   )$r  r  r   r   r  r  r  r  r  r  r7  r9  r  r1  r  r   
unk14393_0unk2xr  r  
unk14393_1r   r   r   r  r  r  r   r   r  r   r   r   r!  r"  r#  r`   r'   r'   r(   r     r
  z)KIWI_KERBEROS_INTERNAL_TICKET_11.__init__c                    s  t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_
t	| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_t| I d H |_| dI d H }tj|ddd|_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_ t| I d H |_!t| I d H |_"t| I d H |_#t$| I d H |_%t$| I d H |_&t$| I d H |_'t| I d H |_(t| I d H |_)t*| I d H |_+t| I d H |_,| - I d H  t| I d H |_.t| I d H |_/t| I d H |_0t| I d H |_1| - I d H  | 2dI d H }t| I d H |_3|S )Nrw   r%  Fr&     )4rL   r:  rk   r  r  r   rx   r   r   r   r  r  r
   r  r  r  r  r7  r9  r  r1  ry   r)  r*  r  r   r   r;  r<  r  r+  r  r=  r   r   r   r   r  r  r  r   r   r   r  r   r   r   r   r!  r"  peekr#  )ri   r~   r-  tempr'   r'   r(   rk     sV   z%KIWI_KERBEROS_INTERNAL_TICKET_11.loadNr   r'   r'   r'   r(   rL     s    'rL   c                       r   )&PKIWI_KERBEROS_INTERNAL_TICKET_10_1607c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z/PKIWI_KERBEROS_INTERNAL_TICKET_10_1607.__init__c                    rb   r^   )rA  rc   rd   re   r.   rI   rg   rh   r'   r'   r(   rk     rl   z+PKIWI_KERBEROS_INTERNAL_TICKET_10_1607.loadrm   r'   r'   r%   r(   rA    rn   rA  c                   @   r   )rI   c                 C   s   d | _ d | _d | _d | _d | _d | _d | _d | _d | _d | _	d | _
d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _d | _ d | _!d | _"d S r^   )#r  r  r   r   r  r  r  r  r  r  r7  r9  r  r1  r  r   r;  r  r  r=  r   r   r   r  r  r  r   r   r  r   r   r   r!  r"  r#  r`   r'   r'   r(   r      sF   
z.KIWI_KERBEROS_INTERNAL_TICKET_10_1607.__init__c                    s  t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_
t	| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t	| I d H |_t| I d H |_| dI d H }tj|ddd|_t| I d H |_t| I d H |_t| I d H |_|  I d H  t| I d H |_t| I d H |_ t| I d H |_!t| I d H |_"t| I d H |_#t$| I d H |_%t$| I d H |_&t$| I d H |_'t| I d H |_(t| I d H |_)t*| I d H |_+t| I d H |_,|  I d H  t| I d H |_-t| I d H |_.t| I d H |_/t| I d H |_0|  I d H  t| I d H |_1|S r$  )2rI   rA  rk   r  r  r   rx   r   r   r   r  r  r
   r  r  r  r  r7  r9  r  r1  ry   r)  r*  r  r   r   r;  r  r   r+  r  r=  r   r   r   r   r  r  r  r   r   r   r  r   r   r   r!  r"  r#  r,  r'   r'   r(   rk   F  sT   z*KIWI_KERBEROS_INTERNAL_TICKET_10_1607.loadNr   r'   r'   r'   r(   rI     r  rI   c                       r   )PKERB_HASHPASSWORD_GENERICc                    r]   r^   r_   r`   r%   r'   r(   r   t  ra   z#PKERB_HASHPASSWORD_GENERIC.__init__c                    rb   r^   )rB  rc   rd   re   r.   KERB_HASHPASSWORD_GENERICrg   rh   r'   r'   r(   rk   w  rl   zPKERB_HASHPASSWORD_GENERIC.loadrm   r'   r'   r%   r(   rB  s  rn   rB  c                   @   r   )rC  c                 C      d | _ d | _d | _d S r^   )TypeSize	Checksumpr`   r'   r'   r(   r        
z"KERB_HASHPASSWORD_GENERIC.__init__c                    sP   t  }t| I d H |_|  I d H  t| I d H |_t| I d H |_	|S r^   )
rC  r	   rx   rE  r   r   rF  r   rk   rG  r   r'   r'   r(   rk     s   zKERB_HASHPASSWORD_GENERIC.loadNr   r'   r'   r'   r(   rC        rC  c                       r   )PKERB_HASHPASSWORD_5c                    r]   r^   r_   r`   r%   r'   r(   r     ra   zPKERB_HASHPASSWORD_5.__init__c                    rb   r^   )rJ  rc   rd   re   r.   r4   rg   rh   r'   r'   r(   rk     rl   zPKERB_HASHPASSWORD_5.loadrm   r'   r'   r%   r(   rJ    rn   rJ  c                   @   r   )r4   c                 C   r   r^   )saltgenericr`   r'   r'   r(   r     r   zKERB_HASHPASSWORD_5.__init__c                    s0   t  }t| I d H |_t| I d H |_|S r^   )r4   r
   rk   rK  rC  rL  r   r'   r'   r(   rk     
   zKERB_HASHPASSWORD_5.loadNr   r'   r'   r'   r(   r4     r  r4   c                       r   )PKERB_HASHPASSWORD_6c                    r]   r^   r_   r`   r%   r'   r(   r     ra   zPKERB_HASHPASSWORD_6.__init__c                    rb   r^   )rN  rc   rd   re   r.   r<   rg   rh   r'   r'   r(   rk     rl   zPKERB_HASHPASSWORD_6.loadrm   r'   r'   r%   r(   rN    rn   rN  c                   @   r   )r<   c                 C   rD  r^   )rK  stringToKeyrL  r`   r'   r'   r(   r     rH  zKERB_HASHPASSWORD_6.__init__c                    sB   t  }t| I d H |_t| I d H |_t| I d H |_|S r^   )r<   r
   rk   rK  r   rO  rC  rL  r   r'   r'   r(   rk     s   zKERB_HASHPASSWORD_6.loadNr   r'   r'   r'   r(   r<     rI  r<   c                       r   )PKERB_HASHPASSWORD_6_1607c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z"PKERB_HASHPASSWORD_6_1607.__init__c                    rb   r^   )rP  rc   rd   re   r.   rJ   rg   rh   r'   r'   r(   rk     rl   zPKERB_HASHPASSWORD_6_1607.loadrm   r'   r'   r%   r(   rP    rn   rP  c                   @   r   )rJ   c                 C   r   r^   )rK  rO  r   rL  r`   r'   r'   r(   r     r   z!KERB_HASHPASSWORD_6_1607.__init__c                    sT   t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_	|S r^   )
rJ   r
   rk   rK  r   rx   rO  r   rC  rL  r   r'   r'   r(   rk     r   zKERB_HASHPASSWORD_6_1607.loadNr   r'   r'   r'   r(   rJ     r   rJ   c                       r   )PKIWI_KERBEROS_KEYS_LIST_5c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z#PKIWI_KERBEROS_KEYS_LIST_5.__init__c                    rb   r^   )rQ  rc   rd   re   r.   r3   rg   rh   r'   r'   r(   rk     rl   zPKIWI_KERBEROS_KEYS_LIST_5.loadrm   r'   r'   r%   r(   rQ    rn   rQ  c                   @   (   e Zd Zdd Zdd Zedd ZdS )r3   c                 C   s(   d | _ d | _d | _d | _d | _g | _d S r^   )r   cbItemr   r   KeyEntries_start
KeyEntriesr`   r'   r'   r(   r     s   
z"KIWI_KERBEROS_KEYS_LIST_5.__init__c                    D   | | jI d H  t| jD ]}||I d H }| j| qd S r^   moverT  rangerS  rk   rU  appendr#   ri   keyentries_type_ker'   r'   r(   ry        zKIWI_KERBEROS_KEYS_LIST_5.readc                    s^   t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_|  |_	|S r^   )
r3   r	   rx   r   rS  r   r   r   rc   rT  r   r'   r'   r(   rk     s   
zKIWI_KERBEROS_KEYS_LIST_5.loadNrW   rX   rY   r   ry   rZ   rk   r'   r'   r'   r(   r3     s
    	r3   c                       r   )PKIWI_KERBEROS_KEYS_LIST_6c                    r]   r^   r_   r`   r%   r'   r(   r     ra   z#PKIWI_KERBEROS_KEYS_LIST_6.__init__c                    rb   r^   )ra  rc   rd   re   r.   r;   rg   rh   r'   r'   r(   rk   	  rl   zPKIWI_KERBEROS_KEYS_LIST_6.loadrm   r'   r'   r%   r(   ra    rn   ra  c                   @   rR  )r;   c                 C   s4   d | _ d | _d | _d | _d | _d | _d | _g | _d S r^   )r   rS  r   r   r   r   rT  rU  r`   r'   r'   r(   r     r   z"KIWI_KERBEROS_KEYS_LIST_6.__init__c                    rV  r^   rW  r[  r'   r'   r(   ry     r_  zKIWI_KERBEROS_KEYS_LIST_6.readc                    s   t  }t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_t| I d H |_	| 
 |_|S r^   )r;   r	   rx   r   rS  r   r   r   r   r   rc   rT  r   r'   r'   r(   rk   #  s   
zKIWI_KERBEROS_KEYS_LIST_6.loadNr`  r'   r'   r'   r(   r;     s
    
r;   c                       r   )PKIWI_KERBEROS_ENUM_DATA_TICKETc                    r]   r^   r_   r`   r%   r'   r(   r   0  ra   z(PKIWI_KERBEROS_ENUM_DATA_TICKET.__init__c                    rb   r^   )rb  rc   rd   re   r.   KIWI_KERBEROS_ENUM_DATA_TICKETrg   rh   r'   r'   r(   rk   3  rl   z$PKIWI_KERBEROS_ENUM_DATA_TICKET.loadrm   r'   r'   r%   r(   rb  /  rn   rb  c                   @   r   )rc  c                 C   r   r^   )isTicketExportisFullTicketr`   r'   r'   r(   r   <  r   z'KIWI_KERBEROS_ENUM_DATA_TICKET.__init__c                    s0   t  }t| I d H |_t| I d H |_|S r^   )rc  r   rx   rd  re  r   r'   r'   r(   rk   @  rM  z#KIWI_KERBEROS_ENUM_DATA_TICKET.loadNr   r'   r'   r'   r(   rc  ;  r  rc  c                   @   rR  )r+  c                 C   rD  r^   )LengthValueDatar`   r'   r'   r(   r   H  s   
zKIWI_KERBEROS_BUFFER.__init__c                    s0   | | jjI d H  || jI d H | _| jS r^   )rX  rg  r.   ry   rf  rh  )r#   ri   r'   r'   r(   ry   O  s   zKIWI_KERBEROS_BUFFER.readc                    r   r^   )r+  r   rx   rf  r   r   rk   rg  r   r'   r'   r(   rk   T  r  zKIWI_KERBEROS_BUFFER.loadNr`  r'   r'   r'   r(   r+  G  s
    r+  )Urz   pypykatz.commons.commonr   r   r   $pypykatz.alsadecryptor.win_datatypesr   r   r   r   r	   r
   r   r   r   r   r   r   r   r   r   &pypykatz.alsadecryptor.package_commonsr   r   pypykatzr   r   r\   rf   r   r   r   r5   r   r=   r   rA   r   rD   r   r1   r   r7   r   r   r   rQ   rC   r   r   r  r  r  rH   rM   rS   r  r2   r.  r8   r5  r:   r6  r?   r8  rF   r:  rL   rA  rI   rB  rC  rJ  r4   rN  r<   rP  rJ   rQ  r3   ra  r;   rb  rc  r+  r'   r'   r'   r(   <module>   s   D W6@MQaWZQ]KHHLOVT